@venizia/ignis 0.0.7-8 → 0.0.7

package/dist/components/auth/authenticate/services/jwt-token.service.d.ts

@@ -1,34 +0,0 @@
-import { TContext } from '../../../../base/controllers/common/types';
-import { BaseService } from '../../../../base/services/base';
-import { AES } from '@venizia/ignis-helpers';
-import { Env } from 'hono';
-import { JWTPayload, JWTVerifyResult, SignJWT } from 'jose';
-import { IJWTTokenPayload, IJWTTokenServiceOptions, TGetTokenExpiresFn } from '../common';
-export declare class JWTTokenService<E extends Env = Env> extends BaseService {
-    protected options: IJWTTokenServiceOptions;
-    static readonly JWT_COMMON_FIELDS: Set<keyof JWTPayload>;
-    protected aes: AES;
-    protected jwtSecret: Uint8Array;
-    constructor(options: IJWTTokenServiceOptions);
-    extractCredentials(context: TContext<E, string>): {
-        type: string;
-        token: string;
-    };
-    encryptPayload(payload: IJWTTokenPayload): Record<string, string>;
-    decryptPayload(opts: {
-        result: JWTVerifyResult<IJWTTokenPayload>;
-    }): IJWTTokenPayload;
-    verify(opts: {
-        type: string;
-        token: string;
-    }): Promise<IJWTTokenPayload>;
-    getSigner(opts: {
-        payload: IJWTTokenPayload;
-        getTokenExpiresFn: TGetTokenExpiresFn;
-    }): Promise<SignJWT>;
-    generate(opts: {
-        payload: IJWTTokenPayload;
-        getTokenExpiresFn?: TGetTokenExpiresFn;
-    }): Promise<string>;
-}
-//# sourceMappingURL=jwt-token.service.d.ts.map

package/dist/components/auth/authenticate/services/jwt-token.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt-token.service.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/services/jwt-token.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,GAAG,EAAuB,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAa,eAAe,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACvE,OAAO,EAGL,gBAAgB,EAChB,uBAAuB,EACvB,kBAAkB,EACnB,MAAM,WAAW,CAAC;AAEnB,qBAAa,eAAe,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,CAAE,SAAQ,WAAW;IAgBjE,SAAS,CAAC,OAAO,EAAE,uBAAuB;IAf5C,MAAM,CAAC,QAAQ,CAAC,iBAAiB,wBAQ9B;IAEH,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;IACnB,SAAS,CAAC,SAAS,EAAE,UAAU,CAAC;gBAIpB,OAAO,EAAE,uBAAuB;IAqC5C,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IA+BjF,cAAc,CAAC,OAAO,EAAE,gBAAgB;IAiDxC,cAAc,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,CAAA;KAAE,GAAG,gBAAgB;IAwC/E,MAAM,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAuB5C,SAAS,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,gBAAgB,CAAC;QAAC,iBAAiB,EAAE,kBAAkB,CAAA;KAAE;IAcpF,QAAQ,CAAC,IAAI,EAAE;QACnB,OAAO,EAAE,gBAAgB,CAAC;QAC1B,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;KACxC,GAAG,OAAO,CAAC,MAAM,CAAC;CAuBpB"}

package/dist/components/auth/authenticate/services/jwt-token.service.js

@@ -1,218 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-var JWTTokenService_1;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.JWTTokenService = void 0;
-const injectors_1 = require("../../../../base/metadata/injectors");
-const base_1 = require("../../../../base/services/base");
-const ignis_helpers_1 = require("@venizia/ignis-helpers");
-const jose_1 = require("jose");
-const common_1 = require("../common");
-let JWTTokenService = class JWTTokenService extends base_1.BaseService {
-    static { JWTTokenService_1 = this; }
-    static { this.JWT_COMMON_FIELDS = new Set([
-        'iss',
-        'sub',
-        'aud',
-        'jti',
-        'nbf',
-        'exp',
-        'iat',
-    ]); }
-    constructor(options) {
-        super({ scope: JWTTokenService_1.name });
-        this.options = options;
-        const { aesAlgorithm = 'aes-256-cbc', jwtSecret, applicationSecret, getTokenExpiresFn, } = options ?? {};
-        if (!jwtSecret) {
-            throw (0, ignis_helpers_1.getError)({
-                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_5.InternalServerError,
-                message: '[JWTTokenService] Invalid jwtSecret',
-            });
-        }
-        if (!applicationSecret) {
-            throw (0, ignis_helpers_1.getError)({
-                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_5.InternalServerError,
-                message: '[JWTTokenService] Invalid applicationSecret',
-            });
-        }
-        if (!getTokenExpiresFn) {
-            throw (0, ignis_helpers_1.getError)({
-                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_5.InternalServerError,
-                message: '[JWTTokenService] Invalid getTokenExpiresFn',
-            });
-        }
-        this.aes = ignis_helpers_1.AES.withAlgorithm(aesAlgorithm);
-        this.jwtSecret = new TextEncoder().encode(this.options.jwtSecret);
-    }
-    // --------------------------------------------------------------------------------------
-    extractCredentials(context) {
-        const request = context.req;
-        const authHeaderValue = request.header('Authorization');
-        if (!authHeaderValue) {
-            throw (0, ignis_helpers_1.getError)({
-                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.Unauthorized,
-                message: 'Unauthorized user! Missing authorization header',
-            });
-        }
-        if (!authHeaderValue.startsWith(common_1.Authentication.TYPE_BEARER)) {
-            throw (0, ignis_helpers_1.getError)({
-                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.Unauthorized,
-                message: 'Unauthorized user! Invalid schema of request token!',
-            });
-        }
-        const parts = authHeaderValue.split(' ');
-        if (parts.length !== 2) {
-            throw (0, ignis_helpers_1.getError)({
-                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.Unauthorized,
-                message: `Authorization header value is invalid format. It must follow the pattern: 'Bearer xx.yy.zz' where xx.yy.zz is a valid JWT token.`,
-            });
-        }
-        const [tokenType, tokenValue] = parts;
-        return { type: tokenType, token: tokenValue };
-    }
-    // --------------------------------------------------------------------------------------
-    encryptPayload(payload) {
-        const rs = {};
-        const keys = Object.keys(payload);
-        for (const key of keys) {
-            const value = payload[key];
-            if (JWTTokenService_1.JWT_COMMON_FIELDS.has(key)) {
-                rs[key] = value;
-                continue;
-            }
-            // NOTE: Skip undefined or null values because they cannot be encrypted
-            // or we may implment default value for them, like 'NA'
-            if (value === undefined || value === null) {
-                continue;
-            }
-            const encryptedKey = this.aes.encrypt({
-                message: key,
-                secret: this.options.applicationSecret,
-            });
-            switch (key) {
-                case 'roles': {
-                    rs[encryptedKey] = this.aes.encrypt({
-                        message: JSON.stringify(value.map((el) => `${el.id}|${el.identifier}|${el.priority}`)),
-                        secret: this.options.applicationSecret,
-                    });
-                    break;
-                }
-                default: {
-                    rs[encryptedKey] = this.aes.encrypt({
-                        message: `${value}`,
-                        secret: this.options.applicationSecret,
-                    });
-                    break;
-                }
-            }
-        }
-        return rs;
-    }
-    // --------------------------------------------------------------------------------------
-    decryptPayload(opts) {
-        const { payload, protectedHeader } = opts.result;
-        this.logger
-            .for(this.decryptPayload.name)
-            .debug('JWT Token | payload: %j | header: %j', payload, protectedHeader);
-        const rs = {};
-        for (const key in payload) {
-            if (JWTTokenService_1.JWT_COMMON_FIELDS.has(key)) {
-                rs[key] = payload[key];
-                continue;
-            }
-            const decryptedKey = this.aes.decrypt({
-                message: key,
-                secret: this.options.applicationSecret,
-            });
-            const decryptedValue = this.aes.decrypt({
-                message: payload[key],
-                secret: this.options.applicationSecret,
-            });
-            switch (decryptedKey) {
-                case 'roles': {
-                    rs[decryptedKey] = JSON.parse(decryptedValue).map(el => {
-                        const [id, identifier, priority] = el.split('|');
-                        return { id, identifier, priority: (0, ignis_helpers_1.int)(priority) };
-                    });
-                    break;
-                }
-                default: {
-                    rs[decryptedKey] = decryptedValue;
-                }
-            }
-        }
-        return rs;
-    }
-    // --------------------------------------------------------------------------------------
-    async verify(opts) {
-        const { token } = opts;
-        if (!token) {
-            this.logger.for(this.verify.name).error('Missing token for validating request!');
-            throw (0, ignis_helpers_1.getError)({
-                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.Unauthorized,
-                message: '[verify] Invalid request token!',
-            });
-        }
-        try {
-            const decodedToken = await (0, jose_1.jwtVerify)(token, this.jwtSecret, {});
-            return this.decryptPayload({ result: decodedToken });
-        }
-        catch (error) {
-            this.logger.for(this.verify.name).error('Failed to verify token | Error: %s', error);
-            throw (0, ignis_helpers_1.getError)({
-                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.Unauthorized,
-                message: `[verify] Failed to verify token | Message: ${error.message}`,
-            });
-        }
-    }
-    // --------------------------------------------------------------------------------------
-    async getSigner(opts) {
-        const now = Math.floor(Date.now() / 1000);
-        const expiresIn = await opts.getTokenExpiresFn();
-        const encryptedPayload = this.encryptPayload(opts.payload);
-        return new jose_1.SignJWT(Object.assign({}, encryptedPayload))
-            .setProtectedHeader({ alg: this.options.headerAlgorithm ?? 'HS256' })
-            .setIssuedAt()
-            .setExpirationTime(now + expiresIn)
-            .setNotBefore(now);
-    }
-    // --------------------------------------------------------------------------------------
-    async generate(opts) {
-        const { payload, getTokenExpiresFn = this.options.getTokenExpiresFn } = opts;
-        if (!payload) {
-            throw (0, ignis_helpers_1.getError)({
-                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.Unauthorized,
-                message: '[generate] Invalid token payload!',
-            });
-        }
-        const signer = await this.getSigner({ payload, getTokenExpiresFn });
-        try {
-            const rs = await signer.sign(this.jwtSecret);
-            return rs;
-        }
-        catch (error) {
-            this.logger.for(this.generate.name).error('Failed to generate token | Error: %s', error);
-            throw (0, ignis_helpers_1.getError)({
-                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_5.InternalServerError,
-                message: `[generate] Failed to generate token | Error: ${error.message}`,
-            });
-        }
-    }
-};
-exports.JWTTokenService = JWTTokenService;
-exports.JWTTokenService = JWTTokenService = JWTTokenService_1 = __decorate([
-    __param(0, (0, injectors_1.inject)({ key: common_1.AuthenticateBindingKeys.JWT_OPTIONS })),
-    __metadata("design:paramtypes", [Object])
-], JWTTokenService);
-//# sourceMappingURL=jwt-token.service.js.map

package/dist/components/auth/authenticate/services/jwt-token.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt-token.service.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/services/jwt-token.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AACA,yDAAmD;AACnD,+CAAmD;AACnD,0DAAkE;AAElE,+BAAuE;AACvE,sCAMmB;AAEnB,IAAa,eAAe,GAA5B,MAAa,eAAqC,SAAQ,kBAAW;;aACnD,sBAAiB,GAAG,IAAI,GAAG,CAAmB;QAC5D,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;QACL,KAAK;KACN,CAAC,AAR+B,CAQ9B;IAKH,YAEY,OAAgC;QAE1C,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAe,CAAC,IAAI,EAAE,CAAC,CAAC;QAF7B,YAAO,GAAP,OAAO,CAAyB;QAI1C,MAAM,EACJ,YAAY,GAAG,aAAa,EAC5B,SAAS,EACT,iBAAiB,EACjB,iBAAiB,GAClB,GAAG,OAAO,IAAI,EAAE,CAAC;QAElB,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;gBACrD,OAAO,EAAE,qCAAqC;aAC/C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;gBACrD,OAAO,EAAE,6CAA6C;aACvD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;gBACrD,OAAO,EAAE,6CAA6C;aACvD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,GAAG,GAAG,mBAAG,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpE,CAAC;IAED,yFAAyF;IACzF,kBAAkB,CAAC,OAA4B;QAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;QAE5B,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACxD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,uBAAc,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,qDAAqD;aAC/D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,kIAAkI;aAC5I,CAAC,CAAC;QACL,CAAC;QAED,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAChD,CAAC;IAED,yFAAyF;IACzF,cAAc,CAAC,OAAyB;QACtC,MAAM,EAAE,GAA2B,EAAE,CAAC;QAEtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAE3B,IAAI,iBAAe,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBAChB,SAAS;YACX,CAAC;YAED,uEAAuE;YACvE,uDAAuD;YACvD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1C,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACpC,OAAO,EAAE,GAAG;gBACZ,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;aACvC,CAAC,CAAC;YACH,QAAQ,GAAG,EAAE,CAAC;gBACZ,KAAK,OAAO,CAAC,CAAC,CAAC;oBACb,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;wBAClC,OAAO,EAAE,IAAI,CAAC,SAAS,CACrB,KAAK,CAAC,GAAG,CACP,CAAC,EAAqC,EAAE,EAAE,CACxC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,QAAQ,EAAE,CAC7C,CACF;wBACD,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;qBACvC,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;wBAClC,OAAO,EAAE,GAAG,KAAK,EAAE;wBACnB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;qBACvC,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,yFAAyF;IACzF,cAAc,CAAC,IAAmD;QAChE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACjD,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;aAC7B,KAAK,CAAC,sCAAsC,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;QAE3E,MAAM,EAAE,GAAQ,EAAE,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,iBAAe,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;gBACvB,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACpC,OAAO,EAAE,GAAG;gBACZ,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;aACvC,CAAC,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBACtC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC;gBACrB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;aACvC,CAAC,CAAC;YAEH,QAAQ,YAAY,EAAE,CAAC;gBACrB,KAAK,OAAO,CAAC,CAAC,CAAC;oBACb,EAAE,CAAC,YAAY,CAAC,GAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAc,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;wBACnE,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBACjD,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAA,mBAAG,EAAC,QAAQ,CAAC,EAAE,CAAC;oBACrD,CAAC,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,EAAE,CAAC,YAAY,CAAC,GAAG,cAAc,CAAC;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,yFAAyF;IACzF,KAAK,CAAC,MAAM,CAAC,IAAqC;QAChD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACjF,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,iCAAiC;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,IAAA,gBAAS,EAAmB,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAClF,OAAO,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YACrF,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,8CAA8C,KAAK,CAAC,OAAO,EAAE;aACvE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yFAAyF;IACzF,KAAK,CAAC,SAAS,CAAC,IAA0E;QACxF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEjD,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE3D,OAAO,IAAI,cAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;aACpD,kBAAkB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,OAAO,EAAE,CAAC;aACpE,WAAW,EAAE;aACb,iBAAiB,CAAC,GAAG,GAAG,SAAS,CAAC;aAClC,YAAY,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,yFAAyF;IACzF,KAAK,CAAC,QAAQ,CAAC,IAGd;QACC,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,IAAI,CAAC;QAE7E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;gBAC9C,OAAO,EAAE,mCAAmC;aAC7C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAEpE,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;YACzF,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;gBACrD,OAAO,EAAE,gDAAgD,KAAK,CAAC,OAAO,EAAE;aACzE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;;AA3OU,0CAAe;0BAAf,eAAe;IAevB,WAAA,IAAA,kBAAM,EAAC,EAAE,GAAG,EAAE,gCAAuB,CAAC,WAAW,EAAE,CAAC,CAAA;;GAf5C,eAAe,CA4O3B"}

package/dist/components/auth/authenticate/strategies/jwt.strategy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt.strategy.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/jwt.strategy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAE3D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAC3B,OAAO,EAAkB,SAAS,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,qBAAa,yBAAyB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,CACxD,SAAQ,UACR,YAAW,uBAAuB,CAAC,CAAC,CAAC;IAIoB,OAAO,CAAC,OAAO;IAFxE,IAAI,SAA+B;gBAE8B,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;IAI5F,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;CAI/D"}

package/dist/components/auth/authenticate/strategies/jwt.strategy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"jwt.strategy.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/strategies/jwt.strategy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AACA,yDAAmD;AACnD,0DAAoD;AAEpD,sCAA+E;AAC/E,0CAA8C;AAE9C,IAAa,yBAAyB,iCAAtC,MAAa,yBACX,SAAQ,0BAAU;IAKlB,YAAyD,OAAmC;QAC1F,KAAK,CAAC,EAAE,KAAK,EAAE,2BAAyB,CAAC,IAAI,EAAE,CAAC,CAAC;QADc,YAAO,GAAP,OAAO,CAAoB;QAF5F,SAAI,GAAG,uBAAc,CAAC,YAAY,CAAC;IAInC,CAAC;IAED,YAAY,CAAC,OAA4B;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;CACF,CAAA;AAdY,8DAAyB;oCAAzB,yBAAyB;IAMvB,WAAA,IAAA,kBAAM,EAAC,EAAE,GAAG,EAAE,0BAA0B,EAAE,CAAC,CAAA;qCAAkB,0BAAe;GAN9E,yBAAyB,CAcrC"}

package/dist/components/auth/authorize/enforcers/default.enforcer.d.ts

@@ -1,37 +0,0 @@
-import { TContext } from '../../../../base/controllers/common/types';
-import { BaseHelper } from '@venizia/ignis-helpers';
-import { IAuthUser } from '../../authenticate';
-import { IAbilityBuilder, IAuthorizationEnforcer, IAuthorizeOptions, IPermissionRule, TAuthorizationConditions } from '../common';
-export declare class AbilityBuilder implements IAbilityBuilder {
-    private rules;
-    allow(opts: {
-        action: string;
-        resource: string;
-        conditions?: TAuthorizationConditions;
-    }): void;
-    deny(opts: {
-        action: string;
-        resource: string;
-        conditions?: TAuthorizationConditions;
-    }): void;
-    build(): IPermissionRule[];
-}
-export declare class DefaultAuthorizationEnforcer extends BaseHelper implements IAuthorizationEnforcer<IPermissionRule[]> {
-    private options;
-    name: string;
-    constructor(options: IAuthorizeOptions);
-    buildAbilities(opts: {
-        user: IAuthUser;
-        context: TContext;
-    }): Promise<IPermissionRule[]>;
-    evaluate(opts: {
-        abilities: IPermissionRule[];
-        action: string;
-        resource: string;
-        conditions?: TAuthorizationConditions;
-    }): boolean;
-    private matchesAction;
-    private matchesResource;
-    private matchesConditions;
-}
-//# sourceMappingURL=default.enforcer.d.ts.map

package/dist/components/auth/authorize/enforcers/default.enforcer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"default.enforcer.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/default.enforcer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAE3D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAIL,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,wBAAwB,EACzB,MAAM,WAAW,CAAC;AAMnB,qBAAa,cAAe,YAAW,eAAe;IACpD,OAAO,CAAC,KAAK,CAAyB;IAEtC,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,wBAAwB,CAAA;KAAE,GAAG,IAAI;IAK9F,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,wBAAwB,CAAA;KAAE,GAAG,IAAI;IAK7F,KAAK,IAAI,eAAe,EAAE;CAG3B;AAMD,qBAAa,4BACX,SAAQ,UACR,YAAW,sBAAsB,CAAC,eAAe,EAAE,CAAC;IAIO,OAAO,CAAC,OAAO;IAF1E,IAAI,SAAa;gBAEkD,OAAO,EAAE,iBAAiB;IAKvF,cAAc,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,OAAO,EAAE,QAAQ,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAwB9F,QAAQ,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,eAAe,EAAE,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,wBAAwB,CAAC;KACvC,GAAG,OAAO;IAgCX,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,iBAAiB;CAoB1B"}

package/dist/components/auth/authorize/enforcers/default.enforcer.js

@@ -1,125 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-var DefaultAuthorizationEnforcer_1;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DefaultAuthorizationEnforcer = exports.AbilityBuilder = void 0;
-const injectors_1 = require("../../../../base/metadata/injectors");
-const ignis_helpers_1 = require("@venizia/ignis-helpers");
-const common_1 = require("../common");
-// --------------------------------------------------------------------------------------------------------
-// AbilityBuilder — uses allow/deny (not can/cannot)
-// --------------------------------------------------------------------------------------------------------
-class AbilityBuilder {
-    constructor() {
-        this.rules = [];
-    }
-    allow(opts) {
-        const { action, resource, conditions } = opts;
-        this.rules.push({ action, resource, effect: common_1.AuthorizationDecisions.ALLOW, conditions });
-    }
-    deny(opts) {
-        const { action, resource, conditions } = opts;
-        this.rules.push({ action, resource, effect: common_1.AuthorizationDecisions.DENY, conditions });
-    }
-    build() {
-        return [...this.rules];
-    }
-}
-exports.AbilityBuilder = AbilityBuilder;
-// --------------------------------------------------------------------------------------------------------
-// Default Authorization Enforcer — zero-dep, simple RBAC/ABAC
-// --------------------------------------------------------------------------------------------------------
-let DefaultAuthorizationEnforcer = DefaultAuthorizationEnforcer_1 = class DefaultAuthorizationEnforcer extends ignis_helpers_1.BaseHelper {
-    constructor(options) {
-        super({ scope: DefaultAuthorizationEnforcer_1.name });
-        this.options = options;
-        this.name = 'default';
-    }
-    // ---------------------------------------------------------------------------
-    async buildAbilities(opts) {
-        const { user, context } = opts;
-        // Priority: loadPermissions (DB-driven) > defineAbilitiesFor (static)
-        if (this.options.loadPermissions) {
-            return this.options.loadPermissions({ user, context });
-        }
-        if (this.options.defineAbilitiesFor) {
-            const builder = new AbilityBuilder();
-            this.options.defineAbilitiesFor({ user, builder });
-            return builder.build();
-        }
-        this.logger
-            .for(this.buildAbilities.name)
-            .warn('No ability definition found — neither defineAbilitiesFor nor loadPermissions provided');
-        return [];
-    }
-    // ---------------------------------------------------------------------------
-    evaluate(opts) {
-        const { action, resource, conditions } = opts;
-        const rules = opts.abilities;
-        if (!rules || rules.length === 0) {
-            return this.options.defaultDecision === common_1.AuthorizationDecisions.ALLOW;
-        }
-        // Find matching rules
-        const matchingRules = rules.filter(rule => {
-            return (this.matchesAction({ ruleAction: rule.action, requestedAction: action }) &&
-                this.matchesResource({ ruleResource: rule.resource, requestedResource: resource }) &&
-                this.matchesConditions({ ruleConditions: rule.conditions, requestConditions: conditions }));
-        });
-        if (matchingRules.length === 0) {
-            return this.options.defaultDecision === common_1.AuthorizationDecisions.ALLOW;
-        }
-        // Deny takes precedence over allow
-        const hasDeny = matchingRules.some(rule => rule.effect === common_1.AuthorizationDecisions.DENY);
-        if (hasDeny) {
-            return false;
-        }
-        const hasAllow = matchingRules.some(rule => rule.effect === common_1.AuthorizationDecisions.ALLOW);
-        return hasAllow;
-    }
-    // ---------------------------------------------------------------------------
-    matchesAction(opts) {
-        const { ruleAction, requestedAction } = opts;
-        if (ruleAction === common_1.AuthorizationActions.MANAGE) {
-            return true;
-        }
-        return ruleAction === requestedAction;
-    }
-    matchesResource(opts) {
-        const { ruleResource, requestedResource } = opts;
-        if (ruleResource === 'all') {
-            return true;
-        }
-        return ruleResource === requestedResource;
-    }
-    matchesConditions(opts) {
-        const { ruleConditions, requestConditions } = opts;
-        // No conditions on rule → matches everything
-        if (!ruleConditions || Object.keys(ruleConditions).length === 0) {
-            return true;
-        }
-        // Rule has conditions but request doesn't → no match
-        if (!requestConditions) {
-            return false;
-        }
-        return Object.entries(ruleConditions).every(([key, value]) => {
-            return requestConditions[key] === value;
-        });
-    }
-};
-exports.DefaultAuthorizationEnforcer = DefaultAuthorizationEnforcer;
-exports.DefaultAuthorizationEnforcer = DefaultAuthorizationEnforcer = DefaultAuthorizationEnforcer_1 = __decorate([
-    __param(0, (0, injectors_1.inject)({ key: common_1.AuthorizeBindingKeys.OPTIONS })),
-    __metadata("design:paramtypes", [Object])
-], DefaultAuthorizationEnforcer);
-//# sourceMappingURL=default.enforcer.js.map

package/dist/components/auth/authorize/enforcers/default.enforcer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"default.enforcer.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/default.enforcer.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AACA,yDAAmD;AACnD,0DAAoD;AAEpD,sCASmB;AAEnB,2GAA2G;AAC3G,oDAAoD;AACpD,2GAA2G;AAE3G,MAAa,cAAc;IAA3B;QACU,UAAK,GAAsB,EAAE,CAAC;IAexC,CAAC;IAbC,KAAK,CAAC,IAAiF;QACrF,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,+BAAsB,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,CAAC,IAAiF;QACpF,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,+BAAsB,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,KAAK;QACH,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;CACF;AAhBD,wCAgBC;AAED,2GAA2G;AAC3G,8DAA8D;AAC9D,2GAA2G;AAE3G,IAAa,4BAA4B,oCAAzC,MAAa,4BACX,SAAQ,0BAAU;IAKlB,YAA2D,OAAkC;QAC3F,KAAK,CAAC,EAAE,KAAK,EAAE,8BAA4B,CAAC,IAAI,EAAE,CAAC,CAAC;QADa,YAAO,GAAP,OAAO,CAAmB;QAF7F,SAAI,GAAG,SAAS,CAAC;IAIjB,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,cAAc,CAAC,IAA4C;QAC/D,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAE/B,sEAAsE;QACtE,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,IAAI,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACnD,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;QAED,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;aAC7B,IAAI,CACH,uFAAuF,CACxF,CAAC;QAEJ,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,8EAA8E;IAC9E,QAAQ,CAAC,IAKR;QACC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;QAE7B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,+BAAsB,CAAC,KAAK,CAAC;QACvE,CAAC;QAED,sBAAsB;QACtB,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YACxC,OAAO,CACL,IAAI,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;gBACxE,IAAI,CAAC,eAAe,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC;gBAClF,IAAI,CAAC,iBAAiB,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,CAC3F,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,+BAAsB,CAAC,KAAK,CAAC;QACvE,CAAC;QAED,mCAAmC;QACnC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,+BAAsB,CAAC,IAAI,CAAC,CAAC;QACxF,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,+BAAsB,CAAC,KAAK,CAAC,CAAC;QAC1F,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,8EAA8E;IACtE,aAAa,CAAC,IAAqD;QACzE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;QAC7C,IAAI,UAAU,KAAK,6BAAoB,CAAC,MAAM,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,UAAU,KAAK,eAAe,CAAC;IACxC,CAAC;IAEO,eAAe,CAAC,IAAyD;QAC/E,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC;QACjD,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,YAAY,KAAK,iBAAiB,CAAC;IAC5C,CAAC;IAEO,iBAAiB,CAAC,IAGzB;QACC,MAAM,EAAE,cAAc,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC;QAEnD,6CAA6C;QAC7C,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,qDAAqD;QACrD,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YAC3D,OAAO,iBAAiB,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA5GY,oEAA4B;uCAA5B,4BAA4B;IAM1B,WAAA,IAAA,kBAAM,EAAC,EAAE,GAAG,EAAE,6BAAoB,CAAC,OAAO,EAAE,CAAC,CAAA;;GAN/C,4BAA4B,CA4GxC"}

package/dist/components/auth/models/entities/permission-mapping.model.d.ts

@@ -1,26 +0,0 @@
-import { NotNull } from 'drizzle-orm';
-import { PgIntegerBuilderInitial, PgTextBuilderInitial } from 'drizzle-orm/pg-core';
-export type TPermissionMappingOptions = {
-    idType?: 'string' | 'number';
-};
-export type TPermissionMappingCommonColumns = {
-    effect: PgTextBuilderInitial<string, [string, ...string[]]>;
-};
-type TPermissionMappingColumnDef<Opts extends TPermissionMappingOptions | undefined = undefined> = Opts extends {
-    idType: infer IdType;
-} ? IdType extends 'string' ? TPermissionMappingCommonColumns & {
-    userId: PgTextBuilderInitial<string, [string, ...string[]]>;
-    roleId: PgTextBuilderInitial<string, [string, ...string[]]>;
-    permissionId: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;
-} : TPermissionMappingCommonColumns & {
-    userId: PgIntegerBuilderInitial<string>;
-    roleId: PgIntegerBuilderInitial<string>;
-    permissionId: NotNull<PgIntegerBuilderInitial<string>>;
-} : TPermissionMappingCommonColumns & {
-    userId: PgIntegerBuilderInitial<string>;
-    roleId: PgIntegerBuilderInitial<string>;
-    permissionId: NotNull<PgIntegerBuilderInitial<string>>;
-};
-export declare const extraPermissionMappingColumns: <Opts extends TPermissionMappingOptions | undefined>(opts?: Opts) => TPermissionMappingColumnDef<Opts>;
-export {};
-//# sourceMappingURL=permission-mapping.model.d.ts.map

package/dist/components/auth/models/entities/permission-mapping.model.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permission-mapping.model.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/permission-mapping.model.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAW,uBAAuB,EAAE,oBAAoB,EAAQ,MAAM,qBAAqB,CAAC;AAGnG,MAAM,MAAM,yBAAyB,GAAG;IACtC,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,MAAM,EAAE,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;CAC7D,CAAC;AAEF,KAAK,2BAA2B,CAAC,IAAI,SAAS,yBAAyB,GAAG,SAAS,GAAG,SAAS,IAC7F,IAAI,SAAS;IAAE,MAAM,EAAE,MAAM,MAAM,CAAA;CAAE,GACjC,MAAM,SAAS,QAAQ,GACrB,+BAA+B,GAAG;IAChC,MAAM,EAAE,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5D,MAAM,EAAE,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5D,YAAY,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;CAC5E,GACD,+BAA+B,GAAG;IAChC,MAAM,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACxC,YAAY,EAAE,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC;CACxD,GACH,+BAA+B,GAAG;IAChC,MAAM,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACxC,YAAY,EAAE,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC;CACxD,CAAC;AAER,eAAO,MAAM,6BAA6B,GAAI,IAAI,SAAS,yBAAyB,GAAG,SAAS,EAC9F,OAAO,IAAI,KACV,2BAA2B,CAAC,IAAI,CA0BlC,CAAC"}

package/dist/components/auth/models/entities/permission-mapping.model.js

@@ -1,33 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.extraPermissionMappingColumns = void 0;
-const ignis_helpers_1 = require("@venizia/ignis-helpers");
-const pg_core_1 = require("drizzle-orm/pg-core");
-const extraPermissionMappingColumns = (opts) => {
-    const { idType = 'number' } = opts ?? {};
-    switch (idType) {
-        case 'string': {
-            return {
-                effect: (0, pg_core_1.text)('effect'),
-                userId: (0, pg_core_1.text)('user_id'),
-                roleId: (0, pg_core_1.text)('role_id'),
-                permissionId: (0, pg_core_1.text)('permission_id').notNull(),
-            };
-        }
-        case 'number': {
-            return {
-                effect: (0, pg_core_1.text)('effect'),
-                userId: (0, pg_core_1.integer)('user_id'),
-                roleId: (0, pg_core_1.integer)('role_id'),
-                permissionId: (0, pg_core_1.integer)('permission_id').notNull(),
-            };
-        }
-        default: {
-            throw (0, ignis_helpers_1.getError)({
-                message: `[extraPermissionMappingColumns] Invalid idType | idType: ${idType}`,
-            });
-        }
-    }
-};
-exports.extraPermissionMappingColumns = extraPermissionMappingColumns;
-//# sourceMappingURL=permission-mapping.model.js.map

package/dist/components/auth/models/entities/permission-mapping.model.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permission-mapping.model.js","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/permission-mapping.model.ts"],"names":[],"mappings":";;;AAAA,0DAAkD;AAGlD,iDAAmG;AA8B5F,MAAM,6BAA6B,GAAG,CAC3C,IAAW,EACwB,EAAE;IACrC,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IAEzC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC;gBACtB,MAAM,EAAE,IAAA,cAAI,EAAC,SAAS,CAAC;gBACvB,MAAM,EAAE,IAAA,cAAI,EAAC,SAAS,CAAC;gBACvB,YAAY,EAAE,IAAA,cAAI,EAAC,eAAe,CAAC,CAAC,OAAO,EAAE;aACT,CAAC;QACzC,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC;gBACtB,MAAM,EAAE,IAAA,iBAAO,EAAC,SAAS,CAAC;gBAC1B,MAAM,EAAE,IAAA,iBAAO,EAAC,SAAS,CAAC;gBAC1B,YAAY,EAAE,IAAA,iBAAO,EAAC,eAAe,CAAC,CAAC,OAAO,EAAE;aACZ,CAAC;QACzC,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,4DAA4D,MAAM,EAAE;aAC9E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AA5BW,QAAA,6BAA6B,iCA4BxC"}

package/dist/components/auth/models/entities/user-role.model.d.ts

@@ -1,17 +0,0 @@
-import { generatePrincipalColumnDefs } from '../../../../base/models/enrichers/principal.enricher';
-import { NotNull } from 'drizzle-orm';
-import { PgIntegerBuilderInitial, PgTextBuilderInitial } from 'drizzle-orm/pg-core';
-export type TUserRoleOptions = {
-    idType?: 'string' | 'number';
-};
-export type TUserRoleCommonColumns = ReturnType<typeof generatePrincipalColumnDefs<'principal', 'string' | 'number'>>;
-type TUserRoleColumnDef<Opts extends TUserRoleOptions | undefined = undefined> = Opts extends {
-    idType: 'string';
-} ? TUserRoleCommonColumns & {
-    userId: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;
-} : TUserRoleCommonColumns & {
-    userId: NotNull<PgIntegerBuilderInitial<string>>;
-};
-export declare const extraUserRoleColumns: <Opts extends TUserRoleOptions | undefined>(opts?: Opts) => TUserRoleColumnDef<Opts>;
-export {};
-//# sourceMappingURL=user-role.model.d.ts.map

package/dist/components/auth/models/entities/user-role.model.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"user-role.model.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/user-role.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AAEzF,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAW,uBAAuB,EAAE,oBAAoB,EAAQ,MAAM,qBAAqB,CAAC;AAGnG,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,UAAU,CAC7C,OAAO,2BAA2B,CAAC,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAC,CACrE,CAAC;AAEF,KAAK,kBAAkB,CAAC,IAAI,SAAS,gBAAgB,GAAG,SAAS,GAAG,SAAS,IAAI,IAAI,SAAS;IAC5F,MAAM,EAAE,QAAQ,CAAC;CAClB,GACG,sBAAsB,GAAG;IACvB,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;CACtE,GACD,sBAAsB,GAAG;IACvB,MAAM,EAAE,OAAO,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC;CAClD,CAAC;AAEN,eAAO,MAAM,oBAAoB,GAAI,IAAI,SAAS,gBAAgB,GAAG,SAAS,EAC5E,OAAO,IAAI,KACV,kBAAkB,CAAC,IAAI,CA0BzB,CAAC"}

package/dist/components/auth/models/entities/user-role.model.js

@@ -1,34 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.extraUserRoleColumns = void 0;
-const principal_enricher_1 = require("../../../../base/models/enrichers/principal.enricher");
-const ignis_helpers_1 = require("@venizia/ignis-helpers");
-const pg_core_1 = require("drizzle-orm/pg-core");
-const extraUserRoleColumns = (opts) => {
-    const { idType = 'number' } = opts ?? {};
-    const principalColumns = (0, principal_enricher_1.generatePrincipalColumnDefs)({
-        defaultPolymorphic: 'Role',
-        polymorphicIdType: idType,
-    });
-    switch (idType) {
-        case 'number': {
-            return {
-                ...principalColumns,
-                userId: (0, pg_core_1.integer)('user_id').notNull(),
-            };
-        }
-        case 'string': {
-            return {
-                ...principalColumns,
-                userId: (0, pg_core_1.text)('user_id').notNull(),
-            };
-        }
-        default: {
-            throw (0, ignis_helpers_1.getError)({
-                message: `[extraUserRoleColumns] Invalid idType | idType: ${idType}`,
-            });
-        }
-    }
-};
-exports.extraUserRoleColumns = extraUserRoleColumns;
-//# sourceMappingURL=user-role.model.js.map

package/dist/components/auth/models/entities/user-role.model.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"user-role.model.js","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/user-role.model.ts"],"names":[],"mappings":";;;AAAA,mFAAyF;AACzF,0DAAkD;AAElD,iDAAmG;AAqB5F,MAAM,oBAAoB,GAAG,CAClC,IAAW,EACe,EAAE;IAC5B,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IACzC,MAAM,gBAAgB,GAAG,IAAA,gDAA2B,EAAC;QACnD,kBAAkB,EAAE,MAAM;QAC1B,iBAAiB,EAAE,MAAM;KAC1B,CAAC,CAAC;IAEH,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,GAAG,gBAAgB;gBACnB,MAAM,EAAE,IAAA,iBAAO,EAAC,SAAS,CAAC,CAAC,OAAO,EAAE;aACT,CAAC;QAChC,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,GAAG,gBAAgB;gBACnB,MAAM,EAAE,IAAA,cAAI,EAAC,SAAS,CAAC,CAAC,OAAO,EAAE;aACN,CAAC;QAChC,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,mDAAmD,MAAM,EAAE;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AA5BW,QAAA,oBAAoB,wBA4B/B"}