@venizia/ignis 0.0.7-8 → 0.0.7

package/dist/components/auth/authorize/enforcers/casbin.enforcer.js

@@ -17,17 +17,17 @@ exports.CasbinAuthorizationEnforcer = void 0;
 const injectors_1 = require("../../../../base/metadata/injectors");
 const ignis_helpers_1 = require("@venizia/ignis-helpers");
 const common_1 = require("../common");
-// --------------------------------------------------------------------------------------------------------
 // Casbin Authorization Enforcer — wraps casbin (optional peer dep)
-// --------------------------------------------------------------------------------------------------------
 let CasbinAuthorizationEnforcer = CasbinAuthorizationEnforcer_1 = class CasbinAuthorizationEnforcer extends ignis_helpers_1.BaseHelper {
     constructor(options) {
         super({ scope: CasbinAuthorizationEnforcer_1.name });
         this.options = options;
-        this.name = 'casbin';
+        this.name = CasbinAuthorizationEnforcer_1.name;
+        this.MIN_EXPIRES_IN = 10_000;
         this.enforcer = null;
+        this.inMemoryInvalidationTimer = null;
     }
-    // ---------------------------------------------------------------------------
+    // Lifecycle
     async configure() {
         let casbin;
         try {
@@ -35,61 +35,220 @@ let CasbinAuthorizationEnforcer = CasbinAuthorizationEnforcer_1 = class CasbinAu
         }
         catch {
             throw (0, ignis_helpers_1.getError)({
-                message: '[CasbinAuthorizationEnforcer] casbin is not installed. Install it with: bun add casbin',
+                message: '[CasbinAuthorizationEnforcer] "casbin" is not installed',
             });
         }
-        const { casbinOptions } = this.options;
-        if (!casbinOptions) {
+        if (!this.options.model) {
             throw (0, ignis_helpers_1.getError)({
-                message: '[CasbinAuthorizationEnforcer] casbinOptions is required when using Casbin enforcer',
+                message: '[CasbinAuthorizationEnforcer] options.model is required.',
             });
         }
-        this.enforcer = await casbin.newEnforcer(casbinOptions.model, casbinOptions.adapter);
-        this.logger.for(this.configure.name).info('Casbin enforcer initialized');
+        const model = this.resolveModel({ casbin, model: this.options.model });
+        const { cached } = this.options;
+        this.enforcer = await this.resolveCasbinEnforcer({
+            casbin,
+            model,
+            adapter: this.options.adapter,
+            cached,
+        });
+        this.logger
+            .for(this.configure.name)
+            .info('Casbin enforcer initialized (cached: %s, driver: %s)', cached.use, cached.use ? cached.driver : 'none');
     }
-    // ---------------------------------------------------------------------------
-    // Casbin uses the user object as "abilities" — the casbin engine evaluates policies internally.
-    async buildAbilities(opts) {
+    destroy() {
+        if (!this.inMemoryInvalidationTimer) {
+            return;
+        }
+        clearInterval(this.inMemoryInvalidationTimer);
+        this.inMemoryInvalidationTimer = null;
+    }
+    // IAuthorizationEnforcer — public API
+    async buildRules(opts) {
         const { user } = opts;
-        if (this.options.casbinOptions?.useFilteredPolicy && this.enforcer?.loadFilteredPolicy) {
-            const userRoles = user.roles;
-            const filters = [`user_${user.userId}`];
-            if (userRoles?.length) {
-                for (const role of userRoles) {
-                    filters.push(`role_${role.identifier}`);
-                }
+        if (!this.enforcer) {
+            throw (0, ignis_helpers_1.getError)({
+                message: '[CasbinAuthorizationEnforcer] Enforcer not initialized. Call configure() first.',
+            });
+        }
+        if (!this.enforcer.loadFilteredPolicy) {
+            throw (0, ignis_helpers_1.getError)({
+                message: '[CasbinAuthorizationEnforcer] Adapter does not support loadFilteredPolicy.',
+            });
+        }
+        const cached = this.options.cached;
+        if (!cached.use) {
+            await this.loadPoliciesFromAdapter({ user });
+            return user;
+        }
+        switch (cached.driver) {
+            case common_1.CasbinEnforcerCachedDrivers.IN_MEMORY: {
+                await this.loadPoliciesFromAdapter({ user });
+                break;
+            }
+            case common_1.CasbinEnforcerCachedDrivers.REDIS: {
+                await this.loadPoliciesWithRedisCache({ user, cached });
+                break;
+            }
+            default: {
+                throw (0, ignis_helpers_1.getError)({
+                    message: `[buildRules] Invalid cached.driver | Valids: [${common_1.CasbinEnforcerCachedDrivers.IN_MEMORY}, ${common_1.CasbinEnforcerCachedDrivers.REDIS}]`,
+                });
             }
-            await this.enforcer.loadFilteredPolicy({ p: filters });
-            this.logger
-                .for(this.buildAbilities.name)
-                .debug('Loaded filtered policies for user: %s', user.userId);
         }
         return user;
     }
-    // ---------------------------------------------------------------------------
-    evaluate(opts) {
+    async evaluate(opts) {
         if (!this.enforcer) {
             throw (0, ignis_helpers_1.getError)({
                 message: '[CasbinAuthorizationEnforcer] Enforcer not initialized. Call configure() first.',
             });
         }
-        const { abilities: user } = opts;
-        const { normalizePayloadFn } = this.options;
-        let subject = `user_${user.userId}`;
-        let resource = opts.resource;
-        let action = opts.action;
-        if (normalizePayloadFn) {
-            const normalized = normalizePayloadFn({ user, action, resource });
-            subject = normalized.subject;
-            resource = normalized.resource;
-            action = normalized.action;
-        }
-        return this.enforcer.enforceSync(subject, resource, action);
+        if (!opts.request?.action || !opts.request?.resource) {
+            throw (0, ignis_helpers_1.getError)({
+                message: '[CasbinAuthorizationEnforcer] request.action and request.resource are required.',
+            });
+        }
+        const { rules: user, request, context } = opts;
+        const normalizePayloadFn = this.options.normalizePayloadFn;
+        let isAllowed;
+        if (!normalizePayloadFn) {
+            const subject = `${user.principalType}_${user.userId}`;
+            isAllowed = this.enforcer.enforceSync(subject, request.resource, request.action);
+            return isAllowed ? common_1.AuthorizationDecisions.ALLOW : common_1.AuthorizationDecisions.DENY;
+        }
+        const normalized = normalizePayloadFn({
+            user,
+            action: request.action,
+            resource: request.resource,
+            context,
+        });
+        // Domain-aware enforcement: enforceSync(sub, dom, obj, act)
+        if (normalized.domain) {
+            isAllowed = this.enforcer.enforceSync(normalized.subject, normalized.domain, normalized.resource, normalized.action);
+        }
+        else {
+            isAllowed = this.enforcer.enforceSync(normalized.subject, normalized.resource, normalized.action);
+        }
+        return isAllowed ? common_1.AuthorizationDecisions.ALLOW : common_1.AuthorizationDecisions.DENY;
+    }
+    // Enforcer & model resolvers
+    async resolveCasbinEnforcer(opts) {
+        const { casbin, model, adapter, cached } = opts;
+        if (!cached.use) {
+            return casbin.newEnforcer(model, adapter);
+        }
+        switch (cached.driver) {
+            case common_1.CasbinEnforcerCachedDrivers.IN_MEMORY: {
+                this.validateExpiresIn({ expiresIn: cached.options.expiresIn });
+                const enforcer = await casbin.newCachedEnforcer(model, adapter);
+                this.inMemoryInvalidationTimer = setInterval(() => {
+                    enforcer.invalidateCache();
+                    this.logger.info('[resolveCasbinEnforcer] Enforcer cache INVALIDATED | name: %s', this.name);
+                }, cached.options.expiresIn);
+                return enforcer;
+            }
+            case common_1.CasbinEnforcerCachedDrivers.REDIS: {
+                this.validateExpiresIn({ expiresIn: cached.options.expiresIn });
+                return casbin.newEnforcer(model, adapter);
+            }
+            default: {
+                throw (0, ignis_helpers_1.getError)({
+                    message: `[resolveCasbinEnforcer] Invalid cached.driver | Valids: [${common_1.CasbinEnforcerCachedDrivers.IN_MEMORY}, ${common_1.CasbinEnforcerCachedDrivers.REDIS}]`,
+                });
+            }
+        }
+    }
+    resolveModel(opts) {
+        const { casbin, model } = opts;
+        switch (model.driver) {
+            case common_1.CasbinEnforcerModelDrivers.FILE: {
+                return casbin.newModelFromFile(model.definition);
+            }
+            case common_1.CasbinEnforcerModelDrivers.TEXT: {
+                return casbin.newModelFromString(model.definition);
+            }
+            default: {
+                throw (0, ignis_helpers_1.getError)({
+                    message: `[resolveModel] Invalid model.driver | Valids: [${common_1.CasbinEnforcerModelDrivers.FILE}, ${common_1.CasbinEnforcerModelDrivers.TEXT}]`,
+                });
+            }
+        }
+    }
+    validateExpiresIn(opts) {
+        if (opts.expiresIn >= this.MIN_EXPIRES_IN) {
+            return;
+        }
+        throw (0, ignis_helpers_1.getError)({
+            message: `[CasbinAuthorizationEnforcer] cached.options.expiresIn must be >= ${this.MIN_EXPIRES_IN} (ms) | Received: ${opts.expiresIn}`,
+        });
+    }
+    // Policy loading internals
+    async loadPoliciesFromAdapter(opts) {
+        if (!this.enforcer) {
+            throw (0, ignis_helpers_1.getError)({
+                message: '[loadPoliciesFromAdapter] Invalid state of enforcer | Enforcer is not initialized!',
+            });
+        }
+        await this.enforcer.loadFilteredPolicy({
+            principalType: opts.user.principalType,
+            principalValue: opts.user.userId,
+        });
+    }
+    async loadPoliciesWithRedisCache(opts) {
+        const logger = this.logger.for(this.loadPoliciesWithRedisCache.name);
+        const { user, cached: { options }, } = opts;
+        const cacheKey = await options.keyFn({ user });
+        if (!cacheKey) {
+            throw (0, ignis_helpers_1.getError)({
+                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.BadRequest,
+                message: '[loadPoliciesWithRedisCache] Invalid cachedKey to start validate user authorization!',
+            });
+        }
+        const redisClient = options.connection.client;
+        // Cache hit — load lines directly into model
+        const cachedData = await redisClient.get(cacheKey);
+        if (cachedData) {
+            const lines = JSON.parse(cachedData);
+            await this.loadPolicyLinesIntoModel({ lines });
+            logger.info('Loaded CACHED Policies into model | user: %s', user.userId);
+            return;
+        }
+        // Cache miss — load from adapter, extract lines, cache in Redis
+        await this.loadPoliciesFromAdapter({ user });
+        const lines = await this.extractPolicyLines();
+        await redisClient.set(cacheKey, JSON.stringify(lines), 'PX', options.expiresIn);
+        logger.info('Loaded ADAPTER + CACHED Policies into model | user: %s', user.userId);
+    }
+    async extractPolicyLines() {
+        if (!this.enforcer) {
+            throw (0, ignis_helpers_1.getError)({
+                message: '[extractPolicyLines] Invalid state of enforcer | Enforcer is not initialized!',
+            });
+        }
+        const pRules = await this.enforcer.getPolicy();
+        const ps = pRules.map(r => [common_1.CasbinRuleVariants.P, ...r].join(', '));
+        const gRules = await this.enforcer.getGroupingPolicy();
+        const gs = gRules.map(r => [common_1.CasbinRuleVariants.G, ...r].join(', '));
+        return [...ps, ...gs];
+    }
+    async loadPolicyLinesIntoModel(opts) {
+        if (!this.enforcer) {
+            throw (0, ignis_helpers_1.getError)({
+                message: '[loadPolicyLinesIntoModel] Enforcer not initialized. Call configure() first.',
+            });
+        }
+        const { Helper } = await import('casbin');
+        const model = this.enforcer.getModel();
+        model.clearPolicy();
+        for (const line of opts.lines) {
+            Helper.loadPolicyLine(line, model);
+        }
+        await this.enforcer.buildRoleLinks();
     }
 };
 exports.CasbinAuthorizationEnforcer = CasbinAuthorizationEnforcer;
 exports.CasbinAuthorizationEnforcer = CasbinAuthorizationEnforcer = CasbinAuthorizationEnforcer_1 = __decorate([
-    __param(0, (0, injectors_1.inject)({ key: common_1.AuthorizeBindingKeys.OPTIONS })),
+    __param(0, (0, injectors_1.inject)({ key: common_1.AuthorizeBindingKeys.enforcerOptions(common_1.AuthorizationEnforcerTypes.CASBIN) })),
     __metadata("design:paramtypes", [Object])
 ], CasbinAuthorizationEnforcer);
 //# sourceMappingURL=casbin.enforcer.js.map

package/dist/components/auth/authorize/enforcers/casbin.enforcer.js.map

@@ -1 +1 @@
-{"version":3,"file":"casbin.enforcer.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/casbin.enforcer.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AACA,yDAAmD;AACnD,0DAA8D;AAE9D,sCAKmB;AAEnB,2GAA2G;AAC3G,mEAAmE;AACnE,2GAA2G;AAE3G,IAAa,2BAA2B,mCAAxC,MAAa,2BACX,SAAQ,0BAAU;IAOlB,YAA2D,OAAkC;QAC3F,KAAK,CAAC,EAAE,KAAK,EAAE,6BAA2B,CAAC,IAAI,EAAE,CAAC,CAAC;QADc,YAAO,GAAP,OAAO,CAAmB;QAJ7F,SAAI,GAAG,QAAQ,CAAC;QAER,aAAQ,GAAQ,IAAI,CAAC;IAI7B,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,SAAS;QACb,IAAI,MAA+B,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EACL,wFAAwF;aAC3F,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACvC,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EACL,oFAAoF;aACvF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC3E,CAAC;IAED,8EAA8E;IAC9E,gGAAgG;IAChG,KAAK,CAAC,cAAc,CAAC,IAA4C;QAC/D,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAEtB,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,iBAAiB,IAAI,IAAI,CAAC,QAAQ,EAAE,kBAAkB,EAAE,CAAC;YACvF,MAAM,SAAS,GAAI,IAAgC,CAAC,KAEvC,CAAC;YAEd,MAAM,OAAO,GAAG,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACxC,IAAI,SAAS,EAAE,MAAM,EAAE,CAAC;gBACtB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;oBAC7B,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;YAED,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;iBAC7B,KAAK,CAAC,uCAAuC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAC9E,QAAQ,CAAC,IAKR;QACC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,iFAAiF;aAC3F,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACjC,MAAM,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAE5C,IAAI,OAAO,GAAG,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACpC,IAAI,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC7B,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAEzB,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClE,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;YAC7B,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;YAC/B,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAC7B,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;CACF,CAAA;AA5FY,kEAA2B;sCAA3B,2BAA2B;IAQzB,WAAA,IAAA,kBAAM,EAAC,EAAE,GAAG,EAAE,6BAAoB,CAAC,OAAO,EAAE,CAAC,CAAA;;GAR/C,2BAA2B,CA4FvC"}
+{"version":3,"file":"casbin.enforcer.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/casbin.enforcer.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AACA,yDAAmD;AACnD,0DAA+E;AAO/E,sCAamB;AAEnB,mEAAmE;AAEnE,IAAa,2BAA2B,mCAAxC,MAAa,2BAKX,SAAQ,0BAAU;IASlB,YAEE,OAA8D;QAE9D,KAAK,CAAC,EAAE,KAAK,EAAE,6BAA2B,CAAC,IAAI,EAAE,CAAC,CAAC;QAF3C,YAAO,GAAP,OAAO,CAA+C;QARhE,SAAI,GAAG,6BAA2B,CAAC,IAAI,CAAC;QACvB,mBAAc,GAAG,MAAM,CAAC;QAEjC,aAAQ,GAA6D,IAAI,CAAC;QAC1E,8BAAyB,GAA8B,IAAI,CAAC;IAOpE,CAAC;IAED,YAAY;IAEZ,KAAK,CAAC,SAAS;QACb,IAAI,MAA+B,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,yDAAyD;aACnE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,0DAA0D;aACpE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACvE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEhC,IAAI,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC;YAC/C,MAAM;YACN,KAAK;YACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aACxB,IAAI,CACH,sDAAsD,EACtD,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CACpC,CAAC;IACN,CAAC;IAED,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QAED,aAAa,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC9C,IAAI,CAAC,yBAAyB,GAAG,IAAI,CAAC;IACxC,CAAC;IAED,sCAAsC;IAEtC,KAAK,CAAC,UAAU,CAAC,IAGhB;QACC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAEtB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,iFAAiF;aAC3F,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;YACtC,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,4EAA4E;aACtF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAEnC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,oCAA2B,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC3C,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7C,MAAM;YACR,CAAC;YACD,KAAK,oCAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvC,MAAM,IAAI,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;gBACxD,MAAM;YACR,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,wBAAQ,EAAC;oBACb,OAAO,EAAE,iDAAiD,oCAA2B,CAAC,SAAS,KAAK,oCAA2B,CAAC,KAAK,GAAG;iBACzI,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAId;QACC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,iFAAiF;aAC3F,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,iFAAiF;aAC3F,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAC/C,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAE3D,IAAI,SAAkB,CAAC;QAEvB,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACvD,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACjF,OAAO,SAAS,CAAC,CAAC,CAAC,+BAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,+BAAsB,CAAC,IAAI,CAAC;QAChF,CAAC;QAED,MAAM,UAAU,GAAG,kBAAkB,CAAC;YACpC,IAAI;YACJ,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO;SACR,CAAC,CAAC;QAEH,4DAA4D;QAC5D,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACtB,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CACnC,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,MAAM,CAClB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CACnC,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,MAAM,CAClB,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC,CAAC,CAAC,+BAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,+BAAsB,CAAC,IAAI,CAAC;IAChF,CAAC;IAED,6BAA6B;IAEnB,KAAK,CAAC,qBAAqB,CAAC,IAKrC;QACC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAEhD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,oCAA2B,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC3C,IAAI,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;gBAEhE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAEhE,IAAI,CAAC,yBAAyB,GAAG,WAAW,CAAC,GAAG,EAAE;oBAChD,QAAQ,CAAC,eAAe,EAAE,CAAC;oBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,+DAA+D,EAC/D,IAAI,CAAC,IAAI,CACV,CAAC;gBACJ,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAE7B,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,KAAK,oCAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvC,IAAI,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;gBAChE,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,wBAAQ,EAAC;oBACb,OAAO,EAAE,4DAA4D,oCAA2B,CAAC,SAAS,KAAK,oCAA2B,CAAC,KAAK,GAAG;iBACpJ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAES,YAAY,CAAC,IAGtB;QACC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAE/B,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;YACrB,KAAK,mCAA0B,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrC,OAAO,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACnD,CAAC;YACD,KAAK,mCAA0B,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrC,OAAO,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,wBAAQ,EAAC;oBACb,OAAO,EAAE,kDAAkD,mCAA0B,CAAC,IAAI,KAAK,mCAA0B,CAAC,IAAI,GAAG;iBAClI,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAES,iBAAiB,CAAC,IAA2B;QACrD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,MAAM,IAAA,wBAAQ,EAAC;YACb,OAAO,EAAE,qEAAqE,IAAI,CAAC,cAAc,qBAAqB,IAAI,CAAC,SAAS,EAAE;SACvI,CAAC,CAAC;IACL,CAAC;IAED,2BAA2B;IAEjB,KAAK,CAAC,uBAAuB,CAAC,IAAqD;QAC3F,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EACL,oFAAoF;aACvF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YACrC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa;YACtC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;SACjC,CAAC,CAAC;IACL,CAAC;IAES,KAAK,CAAC,0BAA0B,CAAC,IAG1C;QACC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,EACJ,IAAI,EACJ,MAAM,EAAE,EAAE,OAAO,EAAE,GACpB,GAAG,IAAI,CAAC;QAET,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU;gBAC5C,OAAO,EACL,sFAAsF;aACzF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAE9C,6CAA6C;QAC7C,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,wBAAwB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,gEAAgE;QAChE,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC9C,MAAM,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAChF,MAAM,CAAC,IAAI,CAAC,wDAAwD,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACrF,CAAC;IAES,KAAK,CAAC,kBAAkB;QAChC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,+EAA+E;aACzF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,2BAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAEpE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QACvD,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,2BAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAEpE,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACxB,CAAC;IAES,KAAK,CAAC,wBAAwB,CAAC,IAAyB;QAChE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,8EAA8E;aACxF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE1C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvC,KAAK,CAAC,WAAW,EAAE,CAAC;QAEpB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;IACvC,CAAC;CACF,CAAA;AAxUY,kEAA2B;sCAA3B,2BAA2B;IAenC,WAAA,IAAA,kBAAM,EAAC,EAAE,GAAG,EAAE,6BAAoB,CAAC,eAAe,CAAC,mCAA0B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;;GAfhF,2BAA2B,CAwUvC"}

package/dist/components/auth/authorize/enforcers/enforcer-registry.d.ts

@@ -1,26 +1,32 @@
 import { Container } from '../../../../helpers/inversion/container';
 import { TClass } from '@venizia/ignis-helpers';
 import { AbstractAuthRegistry } from '../../base';
-import { IAuthorizationEnforcer, IAuthorizeOptions } from '../common';
+import { AuthorizationEnforcerTypes, IAuthorizationEnforcer, IAuthorizeOptions, ICasbinEnforcerOptions } from '../common';
 export declare class AuthorizationEnforcerRegistry extends AbstractAuthRegistry<IAuthorizationEnforcer> {
     private static instance;
     private configuredEnforcers;
     constructor();
     static getInstance(): AuthorizationEnforcerRegistry;
+    reset(): void;
     protected getBindingPrefix(): string;
     register(opts: {
         container: Container;
-        enforcers: {
+        enforcers: Array<{
             enforcer: TClass<IAuthorizationEnforcer>;
             name: string;
-        }[];
+            type: typeof AuthorizationEnforcerTypes.CASBIN;
+            options?: ICasbinEnforcerOptions;
+        } | {
+            enforcer: TClass<IAuthorizationEnforcer>;
+            name: string;
+            type: typeof AuthorizationEnforcerTypes.CUSTOM;
+            options?: unknown;
+        }>;
     }): this;
+    hasEnforcers(): boolean;
     getDefaultEnforcerName(): string;
     resolveEnforcer(opts: {
         name: string;
-    }): IAuthorizationEnforcer;
-    resolveAndConfigureEnforcer(opts: {
-        name: string;
     }): Promise<IAuthorizationEnforcer>;
     resolveOptions(): IAuthorizeOptions | undefined;
 }

package/dist/components/auth/authorize/enforcers/enforcer-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enforcer-registry.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/enforcer-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAGL,sBAAsB,EACtB,iBAAiB,EAClB,MAAM,WAAW,CAAC;AAMnB,qBAAa,6BAA8B,SAAQ,oBAAoB,CAAC,sBAAsB,CAAC;IAC7F,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAgC;IAEvD,OAAO,CAAC,mBAAmB,CAAc;;IAQzC,MAAM,CAAC,WAAW;IASlB,SAAS,CAAC,gBAAgB,IAAI,MAAM;IAKpC,QAAQ,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,SAAS,CAAC;QACrB,SAAS,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KACzE;IAWD,sBAAsB,IAAI,MAAM;IAIhC,eAAe,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,sBAAsB;IAIzD,2BAA2B,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAW1F,cAAc,IAAI,iBAAiB,GAAG,SAAS;CAahD"}
+{"version":3,"file":"enforcer-registry.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/enforcer-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAY,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAEL,0BAA0B,EAE1B,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACvB,MAAM,WAAW,CAAC;AAInB,qBAAa,6BAA8B,SAAQ,oBAAoB,CAAC,sBAAsB,CAAC;IAC7F,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAgC;IAEvD,OAAO,CAAC,mBAAmB,CAAc;;IAOzC,MAAM,CAAC,WAAW;IAQT,KAAK,IAAI,IAAI;IAKtB,SAAS,CAAC,gBAAgB,IAAI,MAAM;IAIpC,QAAQ,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,SAAS,CAAC;QACrB,SAAS,EAAE,KAAK,CACZ;YACE,QAAQ,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;YACzC,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,OAAO,0BAA0B,CAAC,MAAM,CAAC;YAC/C,OAAO,CAAC,EAAE,sBAAsB,CAAC;SAClC,GACD;YACE,QAAQ,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;YACzC,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,OAAO,0BAA0B,CAAC,MAAM,CAAC;YAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;SACnB,CACJ,CAAC;KACH;IA8BD,YAAY,IAAI,OAAO;IAIvB,sBAAsB,IAAI,MAAM;IAI1B,eAAe,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAW9E,cAAc,IAAI,iBAAiB,GAAG,SAAS;CAahD"}

package/dist/components/auth/authorize/enforcers/enforcer-registry.js

@@ -1,13 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthorizationEnforcerRegistry = void 0;
+const ignis_helpers_1 = require("@venizia/ignis-helpers");
 const base_1 = require("../../base");
 const common_1 = require("../common");
-// --------------------------------------------------------------------------------------------------------
 // Authorization Enforcer Registry — manages enforcer registration and resolution
-// --------------------------------------------------------------------------------------------------------
 class AuthorizationEnforcerRegistry extends base_1.AbstractAuthRegistry {
-    // ---------------------------------------------------------------------------
     constructor() {
         super({ scope: AuthorizationEnforcerRegistry.name });
         this.configuredEnforcers = new Set();
@@ -18,28 +16,46 @@ class AuthorizationEnforcerRegistry extends base_1.AbstractAuthRegistry {
         }
         return AuthorizationEnforcerRegistry.instance;
     }
-    // ---------------------------------------------------------------------------
+    reset() {
+        super.reset();
+        this.configuredEnforcers.clear();
+    }
     getBindingPrefix() {
-        return common_1.Authorization.AUTHORIZATION_ENFORCER;
+        return common_1.Authorization.ENFORCER;
     }
-    // ---------------------------------------------------------------------------
     register(opts) {
         const { container, enforcers } = opts;
-        for (const { enforcer, name } of enforcers) {
+        // Validate no duplicate names in this batch
+        const names = enforcers.map(e => e.name);
+        const duplicateNames = names.filter((n, i) => names.indexOf(n) !== i);
+        if (duplicateNames.length) {
+            throw (0, ignis_helpers_1.getError)({
+                message: `[AuthorizationEnforcerRegistry] Duplicate enforcer name(s): ${[...new Set(duplicateNames)].join(', ')}`,
+            });
+        }
+        for (const { enforcer, name, options } of enforcers) {
+            // Validate name not already registered
+            if (this.descriptors.has(name)) {
+                throw (0, ignis_helpers_1.getError)({
+                    message: `[AuthorizationEnforcerRegistry] Enforcer already registered: ${name}`,
+                });
+            }
             this.registerDescriptor({ container, target: enforcer, name });
+            if (options) {
+                container.bind({ key: common_1.AuthorizeBindingKeys.enforcerOptions(name) }).toValue(options);
+            }
         }
         return this;
     }
-    // ---------------------------------------------------------------------------
+    hasEnforcers() {
+        return this.descriptors.size > 0;
+    }
     getDefaultEnforcerName() {
         return this.getDefaultName();
     }
-    resolveEnforcer(opts) {
-        return this.resolveDescriptor(opts);
-    }
-    async resolveAndConfigureEnforcer(opts) {
-        const enforcer = this.resolveEnforcer(opts);
-        if (!this.configuredEnforcers.has(opts.name) && enforcer.configure) {
+    async resolveEnforcer(opts) {
+        const enforcer = this.resolveDescriptor(opts);
+        if (!this.configuredEnforcers.has(opts.name)) {
             await enforcer.configure();
             this.configuredEnforcers.add(opts.name);
         }

package/dist/components/auth/authorize/enforcers/enforcer-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"enforcer-registry.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/enforcer-registry.ts"],"names":[],"mappings":";;;AAEA,qCAAkD;AAClD,sCAKmB;AAEnB,2GAA2G;AAC3G,iFAAiF;AACjF,2GAA2G;AAE3G,MAAa,6BAA8B,SAAQ,2BAA4C;IAK7F,8EAA8E;IAC9E;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,6BAA6B,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,EAAE,CAAC;IACvC,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,6BAA6B,CAAC,QAAQ,EAAE,CAAC;YAC5C,6BAA6B,CAAC,QAAQ,GAAG,IAAI,6BAA6B,EAAE,CAAC;QAC/E,CAAC;QAED,OAAO,6BAA6B,CAAC,QAAQ,CAAC;IAChD,CAAC;IAED,8EAA8E;IACpE,gBAAgB;QACxB,OAAO,sBAAa,CAAC,sBAAsB,CAAC;IAC9C,CAAC;IAED,8EAA8E;IAC9E,QAAQ,CAAC,IAGR;QACC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAEtC,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3C,IAAI,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAC9E,sBAAsB;QACpB,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;IAC/B,CAAC;IAED,eAAe,CAAC,IAAsB;QACpC,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,2BAA2B,CAAC,IAAsB;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE5C,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACnE,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,cAAc;QACZ,KAAK,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;YAC/B,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAoB;gBAC/C,GAAG,EAAE,6BAAoB,CAAC,OAAO;gBACjC,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;YACH,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAvED,sEAuEC"}
+{"version":3,"file":"enforcer-registry.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/enforcer-registry.ts"],"names":[],"mappings":";;;AACA,0DAA0D;AAC1D,qCAAkD;AAClD,sCAOmB;AAEnB,iFAAiF;AAEjF,MAAa,6BAA8B,SAAQ,2BAA4C;IAK7F;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,6BAA6B,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,EAAE,CAAC;IACvC,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,6BAA6B,CAAC,QAAQ,EAAE,CAAC;YAC5C,6BAA6B,CAAC,QAAQ,GAAG,IAAI,6BAA6B,EAAE,CAAC;QAC/E,CAAC;QAED,OAAO,6BAA6B,CAAC,QAAQ,CAAC;IAChD,CAAC;IAEQ,KAAK;QACZ,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;IACnC,CAAC;IAES,gBAAgB;QACxB,OAAO,sBAAa,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,QAAQ,CAAC,IAgBR;QACC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAEtC,4CAA4C;QAC5C,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,+DAA+D,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAClH,CAAC,CAAC;QACL,CAAC;QAED,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,SAAS,EAAE,CAAC;YACpD,uCAAuC;YACvC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAA,wBAAQ,EAAC;oBACb,OAAO,EAAE,gEAAgE,IAAI,EAAE;iBAChF,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAE/D,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,6BAAoB,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,sBAAsB;QACpB,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAAsB;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAE9C,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,cAAc;QACZ,KAAK,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;YAC/B,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAoB;gBAC/C,GAAG,EAAE,6BAAoB,CAAC,OAAO;gBACjC,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;YACH,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAzGD,sEAyGC"}

package/dist/components/auth/authorize/enforcers/index.d.ts

@@ -1,4 +1,3 @@
-export * from './default.enforcer';
 export * from './casbin.enforcer';
 export * from './enforcer-registry';
 //# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authorize/enforcers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC"}

package/dist/components/auth/authorize/enforcers/index.js

@@ -14,7 +14,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./default.enforcer"), exports);
 __exportStar(require("./casbin.enforcer"), exports);
 __exportStar(require("./enforcer-registry"), exports);
 //# sourceMappingURL=index.js.map

package/dist/components/auth/authorize/enforcers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,oDAAkC;AAClC,sDAAoC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,sDAAoC"}

package/dist/components/auth/authorize/index.d.ts

@@ -1,3 +1,4 @@
+export * from './adapters';
 export * from './common';
 export * from './component';
 export * from './enforcers';

package/dist/components/auth/authorize/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/authorize/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/authorize/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC"}

package/dist/components/auth/authorize/index.js

@@ -14,6 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./adapters"), exports);
 __exportStar(require("./common"), exports);
 __exportStar(require("./component"), exports);
 __exportStar(require("./enforcers"), exports);

package/dist/components/auth/authorize/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/components/auth/authorize/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,8CAA4B;AAC5B,8CAA4B;AAC5B,gDAA8B;AAC9B,2CAAyB;AACzB,8CAA4B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/components/auth/authorize/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B;AAC3B,2CAAyB;AACzB,8CAA4B;AAC5B,8CAA4B;AAC5B,gDAA8B;AAC9B,2CAAyB;AACzB,8CAA4B"}

package/dist/components/auth/authorize/middlewares/authorize.middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorize.middleware.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/middlewares/authorize.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAU/C,eAAO,MAAM,SAAS,GAAI,MAAM;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,qCAElF,CAAC"}
+{"version":3,"file":"authorize.middleware.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/middlewares/authorize.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAQ/C,eAAO,MAAM,SAAS,GAAI,MAAM;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,qCAElF,CAAC"}

package/dist/components/auth/authorize/middlewares/authorize.middleware.js

@@ -2,9 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.authorize = void 0;
 const providers_1 = require("../providers");
-// --------------------------------------------------------------------------------------------------------
 // Convenience function — singleton provider instance
-// --------------------------------------------------------------------------------------------------------
 const authorizationProvider = new providers_1.AuthorizationProvider();
 const authorizeFn = authorizationProvider.value();
 const authorize = (opts) => {

package/dist/components/auth/authorize/middlewares/authorize.middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorize.middleware.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/middlewares/authorize.middleware.ts"],"names":[],"mappings":";;;AACA,4CAAqD;AAErD,2GAA2G;AAC3G,qDAAqD;AACrD,2GAA2G;AAE3G,MAAM,qBAAqB,GAAG,IAAI,iCAAqB,EAAE,CAAC;AAC1D,MAAM,WAAW,GAAG,qBAAqB,CAAC,KAAK,EAAE,CAAC;AAE3C,MAAM,SAAS,GAAG,CAAC,IAAyD,EAAE,EAAE;IACrF,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC,CAAC;AAFW,QAAA,SAAS,aAEpB"}
+{"version":3,"file":"authorize.middleware.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/middlewares/authorize.middleware.ts"],"names":[],"mappings":";;;AACA,4CAAqD;AAErD,qDAAqD;AAErD,MAAM,qBAAqB,GAAG,IAAI,iCAAqB,EAAE,CAAC;AAC1D,MAAM,WAAW,GAAG,qBAAqB,CAAC,KAAK,EAAE,CAAC;AAE3C,MAAM,SAAS,GAAG,CAAC,IAAyD,EAAE,EAAE;IACrF,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC,CAAC;AAFW,QAAA,SAAS,aAEpB"}

package/dist/components/auth/authorize/models/abilities/index.d.ts

@@ -0,0 +1,3 @@
+export * from './string-action.model';
+export * from './string-resource.model';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authorize/models/abilities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authorize/models/abilities/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC"}

package/dist/components/auth/authorize/models/abilities/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./string-action.model"), exports);
+__exportStar(require("./string-resource.model"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/auth/authorize/models/abilities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authorize/models/abilities/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC;AACtC,0DAAwC"}

package/dist/components/auth/authorize/models/abilities/string-action.model.d.ts

@@ -0,0 +1,14 @@
+import type { IAuthorizationComparable } from '../../common';
+export declare class StringAuthorizationAction implements IAuthorizationComparable<string> {
+    static readonly WILDCARD = "*";
+    readonly value: string;
+    static build(opts: {
+        value: string;
+    }): StringAuthorizationAction;
+    constructor(opts: {
+        value: string;
+    });
+    compare(other: string): number;
+    isEqual(other: string): boolean;
+}
+//# sourceMappingURL=string-action.model.d.ts.map

package/dist/components/auth/authorize/models/abilities/string-action.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"string-action.model.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authorize/models/abilities/string-action.model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAE7D,qBAAa,yBAA0B,YAAW,wBAAwB,CAAC,MAAM,CAAC;IAChF,MAAM,CAAC,QAAQ,CAAC,QAAQ,OAAO;IAE/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,yBAAyB;gBAIpD,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;IAInC,OAAO,CAAC,KAAK,EAAE,MAAM;IAOrB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGhC"}

package/dist/components/auth/authorize/models/abilities/string-action.model.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StringAuthorizationAction = void 0;
+class StringAuthorizationAction {
+    static { this.WILDCARD = '*'; }
+    static build(opts) {
+        return new StringAuthorizationAction(opts);
+    }
+    constructor(opts) {
+        this.value = opts.value;
+    }
+    compare(other) {
+        if (this.value === StringAuthorizationAction.WILDCARD) {
+            return 0;
+        }
+        return this.value.localeCompare(other);
+    }
+    isEqual(other) {
+        return this.compare(other) === 0;
+    }
+}
+exports.StringAuthorizationAction = StringAuthorizationAction;
+//# sourceMappingURL=string-action.model.js.map

package/dist/components/auth/authorize/models/abilities/string-action.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"string-action.model.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authorize/models/abilities/string-action.model.ts"],"names":[],"mappings":";;;AAEA,MAAa,yBAAyB;aACpB,aAAQ,GAAG,GAAG,CAAC;IAI/B,MAAM,CAAC,KAAK,CAAC,IAAuB;QAClC,OAAO,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,YAAY,IAAuB;QACjC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,IAAI,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,QAAQ,EAAE,CAAC;YACtD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;;AAtBH,8DAuBC"}

package/dist/components/auth/authorize/models/abilities/string-resource.model.d.ts

@@ -0,0 +1,13 @@
+import type { IAuthorizationComparable } from '../../common';
+export declare class StringAuthorizationResource implements IAuthorizationComparable<string> {
+    readonly value: string;
+    static build(opts: {
+        value: string;
+    }): StringAuthorizationResource;
+    constructor(opts: {
+        value: string;
+    });
+    compare(other: string): number;
+    isEqual(other: string): boolean;
+}
+//# sourceMappingURL=string-resource.model.d.ts.map

package/dist/components/auth/authorize/models/abilities/string-resource.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"string-resource.model.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authorize/models/abilities/string-resource.model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAE7D,qBAAa,2BAA4B,YAAW,wBAAwB,CAAC,MAAM,CAAC;IAClF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,2BAA2B;gBAItD,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;IAInC,OAAO,CAAC,KAAK,EAAE,MAAM;IAIrB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGhC"}