@venizia/ignis 0.1.1-5 → 0.1.1-7

package/dist/components/auth/authorize/adapters/base-filtered.d.ts

@@ -3,8 +3,8 @@ import { type FilteredAdapter, type Model } from 'casbin';
 import type { SQL } from 'drizzle-orm';
 import type { ICasbinPolicyFilter, ICasbinPolicySource, TCasbinPolicyConnector } from './types';
 /**
- * Read-only base for casbin FilteredAdapters backed by a datasource — owns the connector plumbing
- * and no-op write methods; subclasses only implement {@link loadFilteredPolicy} per principal.
+ * Read-only base for casbin FilteredAdapters backed by a datasource - owns connector plumbing
+ * and no-op write methods; subclasses implement {@link loadFilteredPolicy} per principal.
  */
 export declare abstract class BaseFilteredAdapter<TFilter = ICasbinPolicyFilter> extends BaseHelper implements FilteredAdapter {
     protected readonly dataSource: ICasbinPolicySource;

package/dist/components/auth/authorize/adapters/base-filtered.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base-filtered.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/adapters/base-filtered.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAEhG;;;GAGG;AACH,8BAAsB,mBAAmB,CAAC,OAAO,GAAG,mBAAmB,CACrE,SAAQ,UACR,YAAW,eAAe;IAE1B,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;gBAEvC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,mBAAmB,CAAA;KAAE;IAKpE,SAAS,KAAK,SAAS,IAAI,sBAAsB,CAEhD;IAED;;;OAGG;cACa,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE;QAAE,SAAS,EAAE,GAAG,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAKtE,mGAAmG;IACnG,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAEzE,UAAU,IAAI,OAAO;IAKf,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAC3B,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAG9B,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAC1B,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAC7B,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAE3C,+FAA+F;cAC/E,SAAS,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAMlF"}
+{"version":3,"file":"base-filtered.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/adapters/base-filtered.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAY,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAEhG;;;GAGG;AACH,8BAAsB,mBAAmB,CAAC,OAAO,GAAG,mBAAmB,CACrE,SAAQ,UACR,YAAW,eAAe;IAE1B,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;gBAEvC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,mBAAmB,CAAA;KAAE;IAKpE,SAAS,KAAK,SAAS,IAAI,sBAAsB,CAYhD;IAED;;;OAGG;cACa,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE;QAAE,SAAS,EAAE,GAAG,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAKtE,mGAAmG;IACnG,QAAQ,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAEzE,UAAU,IAAI,OAAO;IAKf,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAC3B,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAG9B,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAC1B,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAC7B,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAE3C,+FAA+F;cAC/E,SAAS,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAMlF"}

package/dist/components/auth/authorize/adapters/base-filtered.js

@@ -4,8 +4,8 @@ exports.BaseFilteredAdapter = void 0;
 const utilities_1 = require("../../../../utilities");
 const ignis_helpers_1 = require("@venizia/ignis-helpers");
 /**
- * Read-only base for casbin FilteredAdapters backed by a datasource — owns the connector plumbing
- * and no-op write methods; subclasses only implement {@link loadFilteredPolicy} per principal.
+ * Read-only base for casbin FilteredAdapters backed by a datasource - owns connector plumbing
+ * and no-op write methods; subclasses implement {@link loadFilteredPolicy} per principal.
  */
 class BaseFilteredAdapter extends ignis_helpers_1.BaseHelper {
     constructor(opts) {
@@ -13,7 +13,14 @@ class BaseFilteredAdapter extends ignis_helpers_1.BaseHelper {
         this.dataSource = opts.dataSource;
     }
     get connector() {
-        return this.dataSource.connector;
+        const source = this.dataSource;
+        const resolved = source.getConnector?.() ?? source.connector;
+        if (!resolved) {
+            throw (0, ignis_helpers_1.getError)({
+                message: '[BaseFilteredAdapter] datasource exposes neither a getConnector() accessor nor a wired connector - pass a datasource whose getConnector() lazily wires the driver.',
+            });
+        }
+        return resolved;
     }
     /**
      * Runs a raw statement and returns its rows. Drizzle's `execute()` shape differs per driver
@@ -26,7 +33,7 @@ class BaseFilteredAdapter extends ignis_helpers_1.BaseHelper {
     isFiltered() {
         return true;
     }
-    // Read-only adapter — write methods are intentional no-ops.
+    // Read-only adapter - write methods are intentional no-ops.
     async loadPolicy() { }
     async savePolicy() {
         return true;

package/dist/components/auth/authorize/adapters/base-filtered.js.map

@@ -1 +1 @@
-{"version":3,"file":"base-filtered.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/adapters/base-filtered.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAC7C,0DAAoD;AAKpD;;;GAGG;AACH,MAAsB,mBACpB,SAAQ,0BAAU;IAKlB,YAAY,IAAwD;QAClE,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACpC,CAAC;IAED,IAAc,SAAS;QACrB,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;IACnC,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,KAAK,CAAO,IAAwB;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,OAAO,IAAA,0BAAc,EAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAKD,UAAU;QACR,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4DAA4D;IAC5D,KAAK,CAAC,UAAU,KAAmB,CAAC;IACpC,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,CAAC,SAAS,KAAmB,CAAC;IACnC,KAAK,CAAC,YAAY,KAAmB,CAAC;IACtC,KAAK,CAAC,oBAAoB,KAAmB,CAAC;IAE9C,+FAA+F;IACrF,KAAK,CAAC,SAAS,CAAC,IAAuC;QAC/D,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;CACF;AA/CD,kDA+CC"}
+{"version":3,"file":"base-filtered.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/adapters/base-filtered.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAC7C,0DAA8D;AAK9D;;;GAGG;AACH,MAAsB,mBACpB,SAAQ,0BAAU;IAKlB,YAAY,IAAwD;QAClE,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACpC,CAAC;IAED,IAAc,SAAS;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,EAAE,EAAE,IAAI,MAAM,CAAC,SAAS,CAAC;QAE7D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EACL,oKAAoK;aACvK,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,KAAK,CAAO,IAAwB;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,OAAO,IAAA,0BAAc,EAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAKD,UAAU;QACR,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4DAA4D;IAC5D,KAAK,CAAC,UAAU,KAAmB,CAAC;IACpC,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,CAAC,SAAS,KAAmB,CAAC;IACnC,KAAK,CAAC,YAAY,KAAmB,CAAC;IACtC,KAAK,CAAC,oBAAoB,KAAmB,CAAC;IAE9C,+FAA+F;IACrF,KAAK,CAAC,SAAS,CAAC,IAAuC;QAC/D,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;CACF;AAzDD,kDAyDC"}

package/dist/components/auth/authorize/adapters/scoped-casbin.adapter.d.ts

@@ -1,6 +1,8 @@
 import type { IdType } from '../../../../base';
+import type { TConstValue, TNullable } from '@venizia/ignis-helpers';
 import { type Model } from 'casbin';
 import { type SQL } from 'drizzle-orm';
+import { type TCustomGrantMetadata } from '../common';
 import { BaseFilteredAdapter } from './base-filtered';
 import type { ICasbinPolicySource, IScopedCasbinEntities } from './types';
 export interface IScopedCasbinPolicyFilter {
@@ -9,6 +11,30 @@ export interface IScopedCasbinPolicyFilter {
         id: IdType;
     };
 }
+/** A grant row as fetched, before it becomes casbin lines. Permission columns are null when the join misses. */
+export type TGrantRow = {
+    subjectId: IdType;
+    objectCode: TNullable<string>;
+    objectSubject: TNullable<string>;
+    objectMethod: TNullable<string>;
+    action: TNullable<string>;
+    effect: TNullable<string>;
+    domain: TNullable<string>;
+    metadata?: unknown;
+};
+export declare class PrincipalPolicyEdges {
+    static readonly DIRECT = "direct";
+    static readonly ROLE_EDGE = "roleEdge";
+    static readonly ROLE_GRANT = "roleGrant";
+    static readonly DOMAIN_EDGE = "domainEdge";
+}
+/** A row from the single principal-policy statement; `kind` says which branch produced it. */
+export type TPrincipalPolicyRow = TGrantRow & {
+    kind: TConstValue<typeof PrincipalPolicyEdges>;
+    variant: string;
+    targetType: TNullable<string>;
+    targetId: IdType;
+};
 /**
  * Filtered casbin adapter for the scoped RBAC model: loads ONE principal's edges (role assignments,
  * memberships, grants) plus the shared structural hierarchy trees as casbin lines. Read-only.
@@ -20,10 +46,20 @@ export declare class ScopedCasbinAdapter extends BaseFilteredAdapter<IScopedCasb
         entities: IScopedCasbinEntities;
     });
     /**
-     * Casbin's filtered-load entry point: builds the full line set for one principal (role assignments,
-     * memberships, direct grants, structural trees) then expands the role closure to fetch inherited grants.
+     * One wave: the principal-scoped CTE and the merged structural-edges query are issued together.
+     * The role closure is resolved in SQL, so nothing here waits on a previous query's result.
      */
     loadFilteredPolicy(model: Model, filter: IScopedCasbinPolicyFilter): Promise<void>;
+    /** Route one `direct` row to its casbin line, or to the grant batch. */
+    protected collectDirectRow(opts: {
+        row: TPrincipalPolicyRow;
+        principal: {
+            type: string;
+            id: IdType;
+        };
+        lines: string[];
+        directGrants: TGrantRow[];
+    }): void;
     /** Schema for a table, defaulting to `public`. */
     protected schemaOf(table: {
         schemaName?: string;
@@ -37,66 +73,66 @@ export declare class ScopedCasbinAdapter extends BaseFilteredAdapter<IScopedCasb
     }): SQL;
     /**
      * `AND <alias>.<col> IS NULL` when soft-delete is on, else empty. Alias is emitted raw (unquoted) to
-     * match the unquoted FROM alias — quoting it would fold to a different case and break the join.
+     * match the unquoted FROM alias - quoting it would fold to a different case and break the join.
      */
     protected softDeleteClause(opts: {
         alias: string;
     }): SQL;
     /**
-     * Fetch the principal's `assign_role` edges as casbin `g` lines, plus the raw `roleIds` for
-     * {@link expandRoleClosure}. A null domain widens the assignment to every domain (`*`).
+     * One statement for everything scoped to a principal: its own edges, the role_inherits edges
+     * reachable from its roles, and the grants of that role closure. `UNION` in the recursive term
+     * is what terminates a cyclic role graph.
      */
-    protected queryRoleAssignments(opts: {
-        principal: {
-            type: string;
-            id: IdType;
-        };
-    }): Promise<{
-        lines: string[];
-        roleIds: IdType[];
-    }>;
-    /**
-     * Fetch the principal's `join_domain` edges (restricted to `domainTypes`) as casbin `g2` lines —
-     * the membership relation the matcher uses to scope `ANY_MEMBER` grants.
-     */
-    protected queryMemberships(opts: {
+    protected queryPrincipalPolicies(opts: {
         principal: {
             type: string;
             id: IdType;
         };
+    }): Promise<TPrincipalPolicyRow[]>;
+    /** Turn fetched grant rows into casbin lines. Shared by the direct and role-closure branches. */
+    protected buildGrantLines(opts: {
+        subjectType: string;
+        rows: TGrantRow[];
     }): Promise<string[]>;
-    /**
-     * Fetch `grant` edges for the given subjects joined to `Permission`, as casbin `p` lines. Rows with
-     * no `action` are skipped; null effect defaults to allow, null domain to `ANY_MEMBER`.
-     */
-    protected queryGrants(opts: {
-        subject: {
-            type: string;
-            ids: IdType[];
+    /** Why a custom-looking grant row cannot be honoured, or null when it is well formed. */
+    protected rejectCustomRow(opts: {
+        row: {
+            subjectId: IdType;
+            objectCode: string;
+            objectMethod: string;
         };
+        parsed: TCustomGrantMetadata | null;
+        isCustomAction: boolean;
+        metadataColumnName?: string;
+    }): string | null;
+    /** Resolve every custom row's ops in one catalog query, then emit one line per resolved operation. */
+    protected expandCustomGrants(opts: {
+        subjectType: string;
+        customRows: Array<{
+            subjectId: IdType;
+            objectSubject: string;
+            ops: string[];
+            domain: string;
+            effect: string;
+        }>;
     }): Promise<string[]>;
-    /** Load the system-wide hierarchy edges (role/resource/action/domain inherits), read fresh every call. */
-    protected loadStructuralTrees(): Promise<string[]>;
-    /** Every `role_inherits` edge as a casbin `g` line with a wildcard domain; seeds {@link expandRoleClosure}. */
-    protected queryRoleInherits(): Promise<string[]>;
-    /**
-     * Every `resource_inherits` edge as a casbin `g4` line (resource codes, `obj` axis) — a permission
-     * on a parent resource also covers its children.
-     */
-    protected queryResourceInherits(): Promise<string[]>;
+    /** Resolve `(subject, method)` pairs to catalogued operations. One query for the whole extraction. */
+    protected queryOperationCatalog(opts: {
+        pairs: Array<{
+            subject: string;
+            method: string;
+        }>;
+    }): Promise<Array<{
+        subject: string;
+        method: string;
+        code: string;
+        action: string;
+    }>>;
     /**
-     * Every `action_inherits` edge as a casbin `g5` line (`act` axis, e.g. `manage` implies `read`).
-     * Kept separate from resource_inherits so resource x action doesn't explode into combined edges.
+     * The two code-fixed structural trees only (`g4` resource, `g5` action) - a few hundred rows,
+     * constant regardless of tenant count. Domain edges (`g3`) are principal-scoped in
+     * {@link queryPrincipalPolicies} instead, since that tree grows with the domain count.
      */
-    protected queryActionInherits(): Promise<string[]>;
-    /** Every `domain_inherits` edge as a casbin `g3` line — lets a grant on a parent domain cascade down. */
-    protected queryDomainInherits(): Promise<string[]>;
-    /** BFS over role_inherits edges to collect a role set + all transitive parents. Cycle-safe. */
-    protected expandRoleClosure(opts: {
-        role: {
-            ids: IdType[];
-            edges: string[];
-        };
-    }): IdType[];
+    protected queryEdgePolicies(): Promise<string[]>;
 }
 //# sourceMappingURL=scoped-casbin.adapter.d.ts.map

package/dist/components/auth/authorize/adapters/scoped-casbin.adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scoped-casbin.adapter.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/adapters/scoped-casbin.adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAO,KAAK,GAAG,EAAE,MAAM,aAAa,CAAC;AAM5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAE1E,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC;AAID;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,mBAAmB,CAAC,yBAAyB,CAAC;IACrF,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;gBAEvC,IAAI,EAAE;QAAE,UAAU,EAAE,mBAAmB,CAAC;QAAC,QAAQ,EAAE,qBAAqB,CAAA;KAAE;IAKtF;;;OAGG;IACG,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC;IAmCxF,kDAAkD;IAClD,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM;IAI1D,uGAAuG;IACvG,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE;YAAE,UAAU,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,GAAG,GAAG;IAK1F;;;OAGG;IACH,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,GAAG;IASxD;;;OAGG;cACa,oBAAoB,CAAC,IAAI,EAAE;QACzC,SAAS,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;KACzC,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAmCnD;;;OAGG;cACa,gBAAgB,CAAC,IAAI,EAAE;QACrC,SAAS,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;KACzC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA8BrB;;;OAGG;cACa,WAAW,CAAC,IAAI,EAAE;QAChC,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KAC1C,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAqDrB,0GAA0G;cAC1F,mBAAmB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAWxD,+GAA+G;cAC/F,iBAAiB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAsBtD;;;OAGG;cACa,qBAAqB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAsB1D;;;OAGG;cACa,mBAAmB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAmBxD,yGAAyG;cACzF,mBAAmB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IA2BxD,+FAA+F;IAC/F,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE;YAAE,GAAG,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,EAAE,CAAA;SAAE,CAAA;KAAE,GAAG,MAAM,EAAE;CA0C1F"}
+{"version":3,"file":"scoped-casbin.adapter.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/adapters/scoped-casbin.adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,KAAK,KAAK,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAO,KAAK,GAAG,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAKL,KAAK,oBAAoB,EAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAE1E,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC;AAED,gHAAgH;AAChH,MAAM,MAAM,SAAS,GAAG;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9B,aAAa,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACjC,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,qBAAa,oBAAoB;IAC/B,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,SAAS,cAAc;IACvC,MAAM,CAAC,QAAQ,CAAC,UAAU,eAAe;IACzC,MAAM,CAAC,QAAQ,CAAC,WAAW,gBAAgB;CAC5C;AAED,8FAA8F;AAC9F,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG;IAC5C,IAAI,EAAE,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAIF;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,mBAAmB,CAAC,yBAAyB,CAAC;IACrF,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;gBAEvC,IAAI,EAAE;QAAE,UAAU,EAAE,mBAAmB,CAAC;QAAC,QAAQ,EAAE,qBAAqB,CAAA;KAAE;IAKtF;;;OAGG;IACG,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkDxF,wEAAwE;IACxE,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE;QAC/B,GAAG,EAAE,mBAAmB,CAAC;QACzB,SAAS,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QACxC,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,YAAY,EAAE,SAAS,EAAE,CAAC;KAC3B,GAAG,IAAI;IAiCR,kDAAkD;IAClD,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM;IAI1D,uGAAuG;IACvG,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE;YAAE,UAAU,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,GAAG,GAAG;IAK1F;;;OAGG;IACH,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,GAAG;IASxD;;;;OAIG;cACa,sBAAsB,CAAC,IAAI,EAAE;QAC3C,SAAS,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;KACzC,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IA8IlC,iGAAiG;cACjF,eAAe,CAAC,IAAI,EAAE;QACpC,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,SAAS,EAAE,CAAC;KACnB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA6FrB,yFAAyF;IACzF,SAAS,CAAC,eAAe,CAAC,IAAI,EAAE;QAC9B,GAAG,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC;QACrE,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAAC;QACpC,cAAc,EAAE,OAAO,CAAC;QACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,GAAG,MAAM,GAAG,IAAI;IAsBjB,sGAAsG;cACtF,kBAAkB,CAAC,IAAI,EAAE;QACvC,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,KAAK,CAAC;YAChB,SAAS,EAAE,MAAM,CAAC;YAClB,aAAa,EAAE,MAAM,CAAC;YACtB,GAAG,EAAE,MAAM,EAAE,CAAC;YACd,MAAM,EAAE,MAAM,CAAC;YACf,MAAM,EAAE,MAAM,CAAC;SAChB,CAAC,CAAC;KACJ,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAsDrB,sGAAsG;cACtF,qBAAqB,CAAC,IAAI,EAAE;QAC1C,KAAK,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACnD,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAsBrF;;;;OAIG;cACa,iBAAiB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CA6BvD"}