@venizia/ignis 0.1.1-9 → 0.2.0-0

package/dist/components/auth/authorize/common/constants.js

@@ -1,242 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthorizeBindingKeys = exports.AuthorizationPolicyVariants = exports.CasbinRuleVariants = exports.AuthorizationDomainScopes = exports.CasbinDomainMatchingFunctions = exports.CasbinEnforcerModelDrivers = exports.CasbinEnforcerCachedDrivers = exports.AuthorizationEnforcerTypes = exports.AuthorizationRoles = exports.AuthorizationDecisions = exports.AuthorizationActions = exports.Authorization = void 0;
-const authorization_role_model_1 = require("../models/authorization-role.model");
-class Authorization {
-    static { this.RULES = 'authorization.rules'; }
-    static { this.SKIP_AUTHORIZATION = 'authorization.skip'; }
-    static { this.ENFORCER = 'authorization.enforcer'; }
-    static { this.DOMAIN = 'authorization.domain'; }
-}
-exports.Authorization = Authorization;
-class AuthorizationActions {
-    static { this.CREATE = 'create'; }
-    static { this.UPDATE = 'update'; }
-    static { this.DELETE = 'delete'; }
-    static { this.EXECUTE = 'execute'; }
-    static { this.READ = 'read'; }
-    static { this.WRITE = 'write'; }
-    static { this.MANAGE = 'manage'; }
-    /** Grant-mode marker for a subset grant carrying `metadata.ops`; never a member of LATTICE. */
-    static { this.CUSTOM = 'custom'; }
-    static { this.SCHEME_SET = new Set([
-        this.CREATE,
-        this.UPDATE,
-        this.DELETE,
-        this.EXECUTE,
-        this.READ,
-        this.WRITE,
-        this.MANAGE,
-        this.CUSTOM,
-    ]); }
-    static { this.LATTICE = [
-        { child: this.READ, parent: this.MANAGE },
-        { child: this.WRITE, parent: this.MANAGE },
-        { child: this.EXECUTE, parent: this.MANAGE },
-        { child: this.CREATE, parent: this.WRITE },
-        { child: this.UPDATE, parent: this.WRITE },
-        { child: this.DELETE, parent: this.WRITE },
-    ]; }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.AuthorizationActions = AuthorizationActions;
-class AuthorizationDecisions {
-    static { this.ALLOW = 'allow'; }
-    static { this.DENY = 'deny'; }
-    static { this.ABSTAIN = 'abstain'; }
-    static { this.SCHEME_SET = new Set([this.ALLOW, this.DENY, this.ABSTAIN]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-    static isAllow(input) {
-        if (typeof input === 'number') {
-            return input > 0;
-        }
-        return input.toLowerCase() === this.ALLOW;
-    }
-    static isDeny(input) {
-        if (typeof input === 'number') {
-            return input < 0;
-        }
-        return input.toLowerCase() === this.DENY;
-    }
-    static isAbstain(input) {
-        if (typeof input === 'number') {
-            return input === 0;
-        }
-        return input.toLowerCase() === this.ABSTAIN;
-    }
-}
-exports.AuthorizationDecisions = AuthorizationDecisions;
-class AuthorizationRoles {
-    static { this.SUPER_ADMIN = authorization_role_model_1.AuthorizationRole.build({
-        name: 'super-admin',
-        priority: 999,
-    }); }
-    static { this.ADMIN = authorization_role_model_1.AuthorizationRole.build({
-        name: 'admin',
-        priority: 900,
-    }); }
-    static { this.USER = authorization_role_model_1.AuthorizationRole.build({
-        name: 'user',
-        priority: 10,
-    }); }
-    static { this.GUEST = authorization_role_model_1.AuthorizationRole.build({
-        name: 'guest',
-        priority: 1,
-    }); }
-    static { this.UNKNOWN_USER = authorization_role_model_1.AuthorizationRole.build({
-        name: 'unknown-user',
-        priority: 0,
-    }); }
-    static { this.SCHEME_SET = new Set([
-        this.SUPER_ADMIN.identifier,
-        this.ADMIN.identifier,
-        this.USER.identifier,
-        this.GUEST.identifier,
-        this.UNKNOWN_USER.identifier,
-    ]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.AuthorizationRoles = AuthorizationRoles;
-class AuthorizationEnforcerTypes {
-    static { this.CASBIN = 'casbin'; }
-    static { this.CUSTOM = 'custom'; }
-    static { this.SCHEME_SET = new Set([this.CASBIN, this.CUSTOM]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.AuthorizationEnforcerTypes = AuthorizationEnforcerTypes;
-class CasbinEnforcerCachedDrivers {
-    static { this.REDIS = 'redis'; }
-    static { this.SCHEME_SET = new Set([this.REDIS]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.CasbinEnforcerCachedDrivers = CasbinEnforcerCachedDrivers;
-class CasbinEnforcerModelDrivers {
-    static { this.FILE = 'file'; }
-    static { this.TEXT = 'text'; }
-    static { this.SCHEME_SET = new Set([this.FILE, this.TEXT]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.CasbinEnforcerModelDrivers = CasbinEnforcerModelDrivers;
-class CasbinDomainMatchingFunctions {
-    /** `*` is the only wildcard; exact compare otherwise. Safest for `Merchant_<uuid>` domains. */
-    static { this.KEY_MATCH = 'keyMatch'; }
-    /** Adds URL-path `:param` segment matching. */
-    static { this.KEY_MATCH_2 = 'keyMatch2'; }
-    /** Adds `{param}` segment matching. */
-    static { this.KEY_MATCH_3 = 'keyMatch3'; }
-    /** `{param}` matching with repeated-name equality checks. */
-    static { this.KEY_MATCH_4 = 'keyMatch4'; }
-    /** Treats the stored/policy value as a full regular expression. */
-    static { this.REGEX_MATCH = 'regexMatch'; }
-    static { this.SCHEME_SET = new Set([
-        this.KEY_MATCH,
-        this.KEY_MATCH_2,
-        this.KEY_MATCH_3,
-        this.KEY_MATCH_4,
-        this.REGEX_MATCH,
-    ]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.CasbinDomainMatchingFunctions = CasbinDomainMatchingFunctions;
-class AuthorizationDomainScopes {
-    /** Grant applies in EVERY domain the subject is a member of (checked via join_domain / g2). */
-    static { this.ANY_MEMBER = 'ANY_MEMBER'; }
-    /** Grant applies system-wide, bypassing membership - super-admin only. */
-    static { this.SYSTEM_WIDE = 'SYSTEM_WIDE'; }
-    static { this.SCHEME_SET = new Set([this.ANY_MEMBER, this.SYSTEM_WIDE]); }
-    static isValid(input) {
-        return this.SCHEME_SET.has(input);
-    }
-}
-exports.AuthorizationDomainScopes = AuthorizationDomainScopes;
-/** Relation prefixes the Casbin MODEL declares (`p` + `g`..`g5`), which {@link AuthorizationPolicyVariants} maps onto (many app edge-types -> one rule). Keep in sync with the model's `[role_definition]`. */
-class CasbinRuleVariants {
-    /** Permission policy line. */
-    static { this.P = 'p'; }
-    /** Numbered in request-tuple order (sub -> dom -> obj -> act): g (sub), g2/g3 (dom), g4 (obj), g5 (act). */
-    /** Grouping #1 - role membership + role inheritance (user→role, role→role). The `sub` axis. */
-    static { this.G = 'g'; }
-    /** Grouping #2 - user→domain membership (join_domain). The `dom` axis (membership). */
-    static { this.G2 = 'g2'; }
-    /** Grouping #3 - domain hierarchy. The `dom` axis (nesting). */
-    static { this.G3 = 'g3'; }
-    /** Grouping #4 - resource hierarchy. The `obj` axis. */
-    static { this.G4 = 'g4'; }
-    /** Grouping #5 - action hierarchy. The `act` axis. */
-    static { this.G5 = 'g5'; }
-}
-exports.CasbinRuleVariants = CasbinRuleVariants;
-/** Edge kinds in the `PolicyDefinition` table (each row: subject -> target, `variant` = kind), carrying `action` (DB `variant` value) + `rule` (casbin prefix emitted per edge). Per-USER edges: GRANT, ASSIGN_ROLE, JOIN_DOMAIN; shared org-structure edges: the *_INHERITS ones. */
-class AuthorizationPolicyVariants {
-    /** Give a Permission to a User/Role (row also carries action / effect / domain). casbin `p`: `p, <Role|User>_<id>, <domain>, <permissionCode>, <action>, <allow|deny>` */
-    static { this.GRANT = { action: 'grant', rule: CasbinRuleVariants.P }; }
-    /** Give a User a Role (optionally domain-scoped; no domain -> `*` = every domain). casbin `g`: `g, User_<id>, Role_<id>, <domain|*>` */
-    static { this.ASSIGN_ROLE = { action: 'assign_role', rule: CasbinRuleVariants.G }; }
-    /** A Role inherits another Role (DAG). Shares `g` with ASSIGN_ROLE so user -> role -> parent-role resolves in one lookup. Emitted with domain `*`: `g, Role_<child>, Role_<parent>, *` */
-    static { this.ROLE_INHERITS = { action: 'role_inherits', rule: CasbinRuleVariants.G }; }
-    /** User is a member of a Domain; powers the `ANY_MEMBER` grant scope via `g2(r.sub, r.dom)`. casbin `g2`: `g2, User_<id>, <Type>_<domainId>` */
-    static { this.JOIN_DOMAIN = { action: 'join_domain', rule: CasbinRuleVariants.G2 }; }
-    /** DOMAIN axis (`dom`): domain nesting. Matcher: `g3(r.dom, p.dom)` + self-link so an exact domain always matches itself. casbin `g3`: `g3, <Type>_<childId>, <Type>_<parentId>` */
-    static { this.DOMAIN_INHERITS = {
-        action: 'domain_inherits',
-        rule: CasbinRuleVariants.G3,
-    }; }
-    /** RESOURCE axis (`obj`), NON-standard nesting only - dotted nesting (`Order.findById ⊂ Order`) is handled by `objectMatch` WITHOUT an edge. Matcher: `objectMatch(r.obj, p.obj) || g4(r.obj, p.obj)`, casbin `g4`: `g4, <childCode>, <parentCode>` */
-    static { this.RESOURCE_INHERITS = {
-        action: 'resource_inherits',
-        rule: CasbinRuleVariants.G4,
-    }; }
-    /** ACTION axis (`act`): a narrow action covered by a broader one; no dotted shortcut, so it needs an explicit edge. Matcher: `g5(r.act, p.act)`, casbin `g5`: `g5, <childAction>, <parentAction>`. g4 + g5 combine multiplicatively: `manage Order` covers a `read OrderItem` request. */
-    static { this.ACTION_INHERITS = {
-        action: 'action_inherits',
-        rule: CasbinRuleVariants.G5,
-    }; }
-    static { this.ACTION_SCHEME_SET = new Set([
-        this.GRANT.action.toString(),
-        this.ASSIGN_ROLE.action.toString(),
-        this.ROLE_INHERITS.action.toString(),
-        this.JOIN_DOMAIN.action.toString(),
-        this.DOMAIN_INHERITS.action.toString(),
-        this.RESOURCE_INHERITS.action.toString(),
-        this.ACTION_INHERITS.action.toString(),
-    ]); }
-    static { this.RULE_SCHEME_SET = new Set([
-        this.GRANT.rule.toString(),
-        this.ASSIGN_ROLE.rule.toString(),
-        this.ROLE_INHERITS.rule.toString(),
-        this.JOIN_DOMAIN.rule.toString(),
-        this.DOMAIN_INHERITS.rule.toString(),
-        this.RESOURCE_INHERITS.rule.toString(),
-        this.ACTION_INHERITS.rule.toString(),
-    ]); }
-    static isValidAction(input) {
-        return this.ACTION_SCHEME_SET.has(input);
-    }
-    static isValidRule(input) {
-        return this.RULE_SCHEME_SET.has(input);
-    }
-}
-exports.AuthorizationPolicyVariants = AuthorizationPolicyVariants;
-class AuthorizeBindingKeys {
-    static { this.OPTIONS = '@app/authorize/options'; }
-    static { this.ALWAYS_ALLOW_ROLES = '@app/authorize/always-allow-roles'; }
-    static enforcerOptions(name) {
-        return `@app/authorize/enforcers/${name}/options`;
-    }
-}
-exports.AuthorizeBindingKeys = AuthorizeBindingKeys;
-//# sourceMappingURL=constants.js.map

package/dist/components/auth/authorize/common/constants.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/constants.ts"],"names":[],"mappings":";;;AACA,iFAAuE;AAEvE,MAAa,aAAa;aACR,UAAK,GAAG,qBAAqB,CAAC;aAC9B,uBAAkB,GAAG,oBAAoB,CAAC;aAC1C,aAAQ,GAAG,wBAAwB,CAAC;aACpC,WAAM,GAAG,sBAAsB,CAAC;;AAJlD,sCAKC;AAED,MAAa,oBAAoB;aACf,WAAM,GAAG,QAAQ,CAAC;aAClB,WAAM,GAAG,QAAQ,CAAC;aAClB,WAAM,GAAG,QAAQ,CAAC;aAClB,YAAO,GAAG,SAAS,CAAC;aAEpB,SAAI,GAAG,MAAM,CAAC;aACd,UAAK,GAAG,OAAO,CAAC;aAChB,WAAM,GAAG,QAAQ,CAAC;IAElC,+FAA+F;aAC/E,WAAM,GAAG,QAAQ,CAAC;aAElB,eAAU,GAAG,IAAI,GAAG,CAAC;QACnC,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,OAAO;QAEZ,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,KAAK;QACV,IAAI,CAAC,MAAM;QAEX,IAAI,CAAC,MAAM;KACZ,CAAC,CAAC;aAEa,YAAO,GAGlB;QACH,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;QACzC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;QAC1C,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;QAC5C,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE;QAC1C,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE;QAC1C,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE;KAC3C,CAAC;IAEF,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAxCH,oDAyCC;AAGD,MAAa,sBAAsB;aACjB,UAAK,GAAG,OAAO,CAAC;aAChB,SAAI,GAAG,MAAM,CAAC;aACd,YAAO,GAAG,SAAS,CAAC;aAEpB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAE5E,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,KAAsB;QACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC;IAC5C,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,KAAsB;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,KAAsB;QACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC;IAC9C,CAAC;;AA9BH,wDA+BC;AAGD,MAAa,kBAAkB;aACb,gBAAW,GAAG,4CAAiB,CAAC,KAAK,CAAC;QACpD,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC;aACa,UAAK,GAAG,4CAAiB,CAAC,KAAK,CAAC;QAC9C,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC;aACa,SAAI,GAAG,4CAAiB,CAAC,KAAK,CAAC;QAC7C,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,EAAE;KACb,CAAC,CAAC;aACa,UAAK,GAAG,4CAAiB,CAAC,KAAK,CAAC;QAC9C,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;aACa,iBAAY,GAAG,4CAAiB,CAAC,KAAK,CAAC;QACrD,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;aAEa,eAAU,GAAG,IAAI,GAAG,CAAS;QAC3C,IAAI,CAAC,WAAW,CAAC,UAAU;QAC3B,IAAI,CAAC,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC,IAAI,CAAC,UAAU;QACpB,IAAI,CAAC,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC,YAAY,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAhCH,gDAiCC;AAED,MAAa,0BAA0B;aACrB,WAAM,GAAG,QAAQ,CAAC;aAClB,WAAM,GAAG,QAAQ,CAAC;aAElB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAEjE,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,gEASC;AAID,MAAa,2BAA2B;aACtB,UAAK,GAAG,OAAO,CAAC;aAEhB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAEnD,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAPH,kEAQC;AAID,MAAa,0BAA0B;aACrB,SAAI,GAAG,MAAM,CAAC;aACd,SAAI,GAAG,MAAM,CAAC;aAEd,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,gEASC;AAID,MAAa,6BAA6B;IACxC,+FAA+F;aAC/E,cAAS,GAAG,UAAU,CAAC;IAEvC,+CAA+C;aAC/B,gBAAW,GAAG,WAAW,CAAC;IAE1C,uCAAuC;aACvB,gBAAW,GAAG,WAAW,CAAC;IAE1C,6DAA6D;aAC7C,gBAAW,GAAG,WAAW,CAAC;IAE1C,mEAAmE;aACnD,gBAAW,GAAG,YAAY,CAAC;aAE3B,eAAU,GAAG,IAAI,GAAG,CAAC;QACnC,IAAI,CAAC,SAAS;QACd,IAAI,CAAC,WAAW;QAChB,IAAI,CAAC,WAAW;QAChB,IAAI,CAAC,WAAW;QAChB,IAAI,CAAC,WAAW;KACjB,CAAC,CAAC;IAEH,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AA1BH,sEA2BC;AAID,MAAa,yBAAyB;IACpC,+FAA+F;aAC/E,eAAU,GAAG,YAAY,CAAC;IAE1C,0EAA0E;aAC1D,gBAAW,GAAG,aAAa,CAAC;aAE5B,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAE1E,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAXH,8DAYC;AAGD,+MAA+M;AAC/M,MAAa,kBAAkB;IAC7B,8BAA8B;aACd,MAAC,GAAG,GAAG,CAAC;IAExB,4GAA4G;IAE5G,+FAA+F;aAC/E,MAAC,GAAG,GAAG,CAAC;IAExB,uFAAuF;aACvE,OAAE,GAAG,IAAI,CAAC;IAE1B,gEAAgE;aAChD,OAAE,GAAG,IAAI,CAAC;IAE1B,wDAAwD;aACxC,OAAE,GAAG,IAAI,CAAC;IAE1B,sDAAsD;aACtC,OAAE,GAAG,IAAI,CAAC;;AAnB5B,gDAoBC;AAID,sRAAsR;AACtR,MAAa,2BAA2B;IACtC,0KAA0K;aAC1J,UAAK,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC,EAAW,CAAC;IAEjF,wIAAwI;aACxH,gBAAW,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC,EAAW,CAAC;IAE7F,0LAA0L;aAC1K,kBAAa,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC,EAAW,CAAC;IAEjG,gJAAgJ;aAChI,gBAAW,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAAW,CAAC;IAE9F,oLAAoL;aACpK,oBAAe,GAAG;QAChC,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,kBAAkB,CAAC,EAAE;KACnB,CAAC;IAEX,uPAAuP;aACvO,sBAAiB,GAAG;QAClC,MAAM,EAAE,mBAAmB;QAC3B,IAAI,EAAE,kBAAkB,CAAC,EAAE;KACnB,CAAC;IAEX,0RAA0R;aAC1Q,oBAAe,GAAG;QAChC,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,kBAAkB,CAAC,EAAE;KACnB,CAAC;aAEK,sBAAiB,GAAG,IAAI,GAAG,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;QAC5B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE;QAClC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE;QACpC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE;QAClC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE;QACtC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE;QACxC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE;KACvC,CAAC,CAAC;aAEa,oBAAe,GAAG,IAAI,GAAG,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;QAC1B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE;QAChC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE;QAClC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE;QAChC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE;QACpC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE;QACtC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE;KACrC,CAAC,CAAC;IAEH,MAAM,CAAC,aAAa,CAAC,KAAa;QAChC,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,KAAa;QAC9B,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;;AAzDH,kEA0DC;AAGD,MAAa,oBAAoB;aACf,YAAO,GAAG,wBAAwB,CAAC;aACnC,uBAAkB,GAAG,mCAAmC,CAAC;IAEzE,MAAM,CAAC,eAAe,CAAC,IAAY;QACjC,OAAO,4BAA4B,IAAI,UAAU,CAAC;IACpD,CAAC;;AANH,oDAOC"}

package/dist/components/auth/authorize/common/index.d.ts

@@ -1,3 +0,0 @@
-export * from './constants';
-export * from './types';
-//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authorize/common/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC"}

package/dist/components/auth/authorize/common/index.js

@@ -1,19 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./constants"), exports);
-__exportStar(require("./types"), exports);
-//# sourceMappingURL=index.js.map

package/dist/components/auth/authorize/common/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,0CAAwB"}

package/dist/components/auth/authorize/common/types.d.ts

@@ -1,158 +0,0 @@
-import type { IdType } from '../../../../base';
-import type { TContext } from '../../../../base/controllers/common/types';
-import { type IRedisHelper, type TNullable, type ValueOrPromise } from '@venizia/ignis-helpers';
-import { type Adapter } from 'casbin';
-import type { Env } from 'hono';
-import { type MiddlewareHandler } from 'hono';
-import type { IAuthUser } from '../../authenticate';
-import type { CasbinEnforcerCachedDrivers, CasbinEnforcerModelDrivers, TAuthorizationAction, TAuthorizationDecision, TCasbinDomainMatchingFunction } from './constants';
-import type { AuthorizationPolicyBuilder } from '../builders/policy.builder';
-export interface IAuthorizationRole {
-    readonly name: string;
-    readonly priority: number;
-    readonly identifier: string;
-}
-/** Key-value conditions for attribute-based access control. Values compared with strict equality. */
-export type TAuthorizationConditions<KeyType extends string | symbol = string | symbol, ValueType = string | number | boolean | null> = Record<KeyType, ValueType>;
-export interface IAuthorizationRequest<TAction = string, TResource = string> {
-    action: TAction;
-    resource: TResource;
-    conditions?: TAuthorizationConditions;
-    /** Resolved domain scope for this request as a casbin domain string `"<DomainType>_<id>"` (e.g. `"Merchant_7"`), or the `"SYSTEM_WIDE"` sentinel to enforce across all domains. */
-    domain?: string;
-}
-export interface IAuthorizationUser extends IAuthUser {
-    principalType: string;
-}
-/** What CasbinAuthorizationEnforcer.buildRules returns and evaluate consumes. */
-export interface ICasbinRules {
-    user: IAuthorizationUser;
-    lines: string[];
-}
-/** Declarative description of where to read the request domain from. */
-export interface IAuthorizationDomainSource {
-    from: 'param' | 'header' | 'query' | 'context';
-    key: string;
-    type: string;
-}
-/** Returns the current request domain; null = no domain (→ SYSTEM_WIDE). */
-export type TAuthorizationDomainResolver<E extends Env = Env> = (opts: {
-    context: TContext<E, string>;
-}) => ValueOrPromise<TNullable<{
-    type: string;
-    id: IdType;
-}>>;
-/** Builds rules and evaluates requests. Cache management (`invalidateUserCache`/`rebuildUserCache`) is OPTIONAL - only on per-user-caching enforcers; the registry feature-detects it at runtime. */
-export interface IAuthorizationEnforcer<E extends Env = Env, TAction = string, TResource = string, TRules = unknown, TBuildRulesReturn = ValueOrPromise<TRules>, TEvaluateReturn = ValueOrPromise<TAuthorizationDecision>> {
-    name: string;
-    configure(): ValueOrPromise<void>;
-    buildRules(opts: {
-        user: IAuthorizationUser;
-        context: TContext<E, string>;
-    }): TBuildRulesReturn;
-    evaluate(opts: {
-        rules: TRules;
-        request: IAuthorizationRequest<TAction, TResource>;
-        context: TContext<E, string>;
-    }): TEvaluateReturn;
-    /** Drop a user's cached policies. Implemented only by caching enforcers. */
-    invalidateUserCache?(opts: {
-        user: IAuthorizationUser;
-    }): Promise<{
-        invalidatedKeys: number;
-    }>;
-    /** Drop + rebuild a user's cached policies. Implemented only by caching enforcers. */
-    rebuildUserCache?(opts: {
-        user: IAuthorizationUser;
-    }): Promise<{
-        cacheKey: string;
-        lineCount: number;
-    }>;
-}
-export type TAuthorizationVoter<E extends Env = Env, TAction = string, TResource = string> = (opts: {
-    user: IAuthUser;
-    action: TAction;
-    resource: TResource;
-    context: TContext<E, string>;
-}) => ValueOrPromise<TAuthorizationDecision>;
-export interface IAuthorizationSpec<E extends Env = Env, TAction = string, TResource = string> {
-    action: TAction;
-    resource: TResource;
-    conditions?: TAuthorizationConditions;
-    allowedRoles?: string[];
-    voters?: TAuthorizationVoter<E, TAction, TResource>[];
-    /** Optional per-route domain: declarative source OR a resolver method. Omitted → global resolver. */
-    domain?: IAuthorizationDomainSource | TAuthorizationDomainResolver<E>;
-}
-export type TAuthorizeFn<E extends Env = Env, TAction = string, TResource = string> = (opts: {
-    spec: IAuthorizationSpec<E, TAction, TResource>;
-    enforcerName?: string;
-}) => MiddlewareHandler;
-export interface ICasbinEnforcerCachedRedis {
-    driver: typeof CasbinEnforcerCachedDrivers.REDIS;
-    options: {
-        connection: IRedisHelper;
-        expiresIn: number;
-        keyFn: (opts: {
-            user: IAuthorizationUser;
-        }) => ValueOrPromise<string>;
-    };
-}
-export interface ICasbinEnforcerOptions<E extends Env = Env, TAction = string, TResource = string, TAdapter = Adapter> {
-    model: {
-        driver: typeof CasbinEnforcerModelDrivers.FILE;
-        definition: string;
-    } | {
-        driver: typeof CasbinEnforcerModelDrivers.TEXT;
-        definition: string;
-    };
-    cached: {
-        use: false;
-    } | (ICasbinEnforcerCachedRedis & {
-        use: true;
-    });
-    adapter?: TAdapter;
-    domainMatching?: {
-        roleDefinition: string;
-        fn: TCasbinDomainMatchingFunction;
-    };
-    normalizePayloadFn?(opts: {
-        user: IAuthUser;
-        action: TAction;
-        resource: TResource;
-        context: TContext<E, string>;
-    }): {
-        subject: string;
-        resource: string;
-        action: string;
-        domain?: string;
-    };
-    /** Domain-scoped RBAC model: requests become 4-token `(subject, domain, object, action)` and the enforcer registers the domain matcher (`keyMatch` on `g`) + resource matcher (`objectMatch`). */
-    isScoped?: boolean;
-    /** Number of pooled enforcers (each request enforces on its own). Default 16. */
-    poolSize?: number;
-    /** Max ms to wait for a free pooled enforcer before failing closed. Default 5000. */
-    poolAcquireTimeoutMs?: number;
-}
-export interface IAuthorizeOptions {
-    defaultDecision: TAuthorizationDecision;
-    alwaysAllowRoles?: string[];
-    /** Fallback domain resolver used when a route's spec has no `domain`. */
-    domainResolver?: TAuthorizationDomainResolver;
-}
-/** Shape of `PolicyDefinition.metadata` on a subset ("custom") grant. `ops` holds bare method names (e.g. `"find"`), not full permission codes. */
-export type TCustomGrantMetadata = {
-    ops: string[];
-};
-export type TGrantIntent = {
-    tier: TAuthorizationAction;
-} | {
-    ops: string[];
-};
-/** Per-operation rows carry `targetId` = the operation's code, not a database id; the consumer resolves codes to ids when persisting. */
-export type TPlannedGrantRow = ReturnType<typeof AuthorizationPolicyBuilder.grant> & {
-    metadata?: {
-        ops: string[];
-    };
-};
-//# sourceMappingURL=types.d.ts.map

package/dist/components/auth/authorize/common/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAChG,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EACV,2BAA2B,EAC3B,0BAA0B,EAC1B,oBAAoB,EACpB,sBAAsB,EACtB,6BAA6B,EAC9B,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAC7E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,qGAAqG;AACrG,MAAM,MAAM,wBAAwB,CAClC,OAAO,SAAS,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,EACjD,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,IAC1C,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAE/B,MAAM,WAAW,qBAAqB,CAAC,OAAO,GAAG,MAAM,EAAE,SAAS,GAAG,MAAM;IACzE,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,SAAS,CAAC;IACpB,UAAU,CAAC,EAAE,wBAAwB,CAAC;IACtC,mLAAmL;IACnL,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAmB,SAAQ,SAAS;IACnD,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,wEAAwE;AACxE,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AAED,4EAA4E;AAC5E,MAAM,MAAM,4BAA4B,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE;IACrE,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;CAC9B,KAAK,cAAc,CAAC,SAAS,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAAC;AAE9D,qMAAqM;AACrM,MAAM,WAAW,sBAAsB,CACrC,CAAC,SAAS,GAAG,GAAG,GAAG,EACnB,OAAO,GAAG,MAAM,EAChB,SAAS,GAAG,MAAM,EAClB,MAAM,GAAG,OAAO,EAChB,iBAAiB,GAAG,cAAc,CAAC,MAAM,CAAC,EAC1C,eAAe,GAAG,cAAc,CAAC,sBAAsB,CAAC;IAExD,IAAI,EAAE,MAAM,CAAC;IAEb,SAAS,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IAElC,UAAU,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,kBAAkB,CAAC;QAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,iBAAiB,CAAC;IAEhG,QAAQ,CAAC,IAAI,EAAE;QACb,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACnD,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,GAAG,eAAe,CAAC;IAEpB,4EAA4E;IAC5E,mBAAmB,CAAC,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,kBAAkB,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE/F,sFAAsF;IACtF,gBAAgB,CAAC,CAAC,IAAI,EAAE;QACtB,IAAI,EAAE,kBAAkB,CAAC;KAC1B,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACtD;AAED,MAAM,MAAM,mBAAmB,CAC7B,CAAC,SAAS,GAAG,GAAG,GAAG,EACnB,OAAO,GAAG,MAAM,EAChB,SAAS,GAAG,MAAM,IAChB,CAAC,IAAI,EAAE;IACT,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,SAAS,CAAC;IACpB,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;CAC9B,KAAK,cAAc,CAAC,sBAAsB,CAAC,CAAC;AAE7C,MAAM,WAAW,kBAAkB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,SAAS,GAAG,MAAM;IAC3F,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,SAAS,CAAC;IACpB,UAAU,CAAC,EAAE,wBAAwB,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;IACtD,qGAAqG;IACrG,MAAM,CAAC,EAAE,0BAA0B,GAAG,4BAA4B,CAAC,CAAC,CAAC,CAAC;CACvE;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE;IAC3F,IAAI,EAAE,kBAAkB,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,KAAK,iBAAiB,CAAC;AAExB,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,OAAO,2BAA2B,CAAC,KAAK,CAAC;IACjD,OAAO,EAAE;QACP,UAAU,EAAE,YAAY,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE,kBAAkB,CAAA;SAAE,KAAK,cAAc,CAAC,MAAM,CAAC,CAAC;KACvE,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB,CACrC,CAAC,SAAS,GAAG,GAAG,GAAG,EACnB,OAAO,GAAG,MAAM,EAChB,SAAS,GAAG,MAAM,EAClB,QAAQ,GAAG,OAAO;IAElB,KAAK,EACD;QAAE,MAAM,EAAE,OAAO,0BAA0B,CAAC,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GACtE;QAAE,MAAM,EAAE,OAAO,0BAA0B,CAAC,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3E,MAAM,EAAE;QAAE,GAAG,EAAE,KAAK,CAAA;KAAE,GAAG,CAAC,0BAA0B,GAAG;QAAE,GAAG,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IACtE,OAAO,CAAC,EAAE,QAAQ,CAAC;IAEnB,cAAc,CAAC,EAAE;QACf,cAAc,EAAE,MAAM,CAAC;QACvB,EAAE,EAAE,6BAA6B,CAAC;KACnC,CAAC;IAEF,kBAAkB,CAAC,CAAC,IAAI,EAAE;QACxB,IAAI,EAAE,SAAS,CAAC;QAChB,MAAM,EAAE,OAAO,CAAC;QAChB,QAAQ,EAAE,SAAS,CAAC;QACpB,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,GAAG;QACF,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IAEF,kMAAkM;IAClM,QAAQ,CAAC,EAAE,OAAO,CAAC;IAEnB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,qFAAqF;IACrF,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,eAAe,EAAE,sBAAsB,CAAC;IACxC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,yEAAyE;IACzE,cAAc,CAAC,EAAE,4BAA4B,CAAC;CAC/C;AAED,mJAAmJ;AACnJ,MAAM,MAAM,oBAAoB,GAAG;IAAE,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAErD,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,oBAAoB,CAAA;CAAE,GAAG;IAAE,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE9E,yIAAyI;AACzI,MAAM,MAAM,gBAAgB,GAAG,UAAU,CAAC,OAAO,0BAA0B,CAAC,KAAK,CAAC,GAAG;IACnF,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CAC9B,CAAC"}

package/dist/components/auth/authorize/common/types.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=types.js.map

package/dist/components/auth/authorize/common/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/types.ts"],"names":[],"mappings":""}

package/dist/components/auth/authorize/enforcers/enforcer-registry.d.ts

@@ -1,51 +0,0 @@
-import type { Container } from '../../../../helpers/inversion/container';
-import type { TClass } from '@venizia/ignis-helpers';
-import type { IAuthUser } from '../../authenticate';
-import { AbstractAuthRegistry } from '../../base';
-import type { AuthorizationEnforcerTypes, IAuthorizationEnforcer, IAuthorizationUser, IAuthorizeOptions, ICasbinEnforcerOptions } from '../common';
-export declare class AuthorizationEnforcerRegistry extends AbstractAuthRegistry<IAuthorizationEnforcer> {
-    private static instance;
-    private configuredEnforcers;
-    constructor();
-    static getInstance(): AuthorizationEnforcerRegistry;
-    reset(): void;
-    protected getBindingPrefix(): string;
-    register(opts: {
-        container: Container;
-        enforcers: Array<{
-            enforcer: TClass<IAuthorizationEnforcer>;
-            name: string;
-            type: typeof AuthorizationEnforcerTypes.CASBIN;
-            options?: ICasbinEnforcerOptions;
-        } | {
-            enforcer: TClass<IAuthorizationEnforcer>;
-            name: string;
-            type: typeof AuthorizationEnforcerTypes.CUSTOM;
-            options?: unknown;
-        }>;
-    }): this;
-    hasEnforcers(): boolean;
-    getDefaultEnforcerName(): string;
-    resolveEnforcer(opts: {
-        name: string;
-    }): Promise<IAuthorizationEnforcer>;
-    /** Drop a user's cached policies on the resolved enforcer. Lazy - next request rebuilds. */
-    invalidateUserCache(opts: {
-        user: IAuthorizationUser;
-        enforcerName?: string;
-    }): Promise<{
-        invalidatedKeys: number;
-    }>;
-    /** Drop then immediately rebuild + re-cache a user's policies on the resolved enforcer. */
-    rebuildUserCache(opts: {
-        user: {
-            principalType: string;
-        } & IAuthUser;
-        enforcerName?: string;
-    }): Promise<{
-        cacheKey: string;
-        lineCount: number;
-    }>;
-    resolveOptions(): IAuthorizeOptions | undefined;
-}
-//# sourceMappingURL=enforcer-registry.d.ts.map

package/dist/components/auth/authorize/enforcers/enforcer-registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"enforcer-registry.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/enforcer-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EACV,0BAA0B,EAC1B,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,EACjB,sBAAsB,EACvB,MAAM,WAAW,CAAC;AAGnB,qBAAa,6BAA8B,SAAQ,oBAAoB,CAAC,sBAAsB,CAAC;IAC7F,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAgC;IAEvD,OAAO,CAAC,mBAAmB,CAAc;;IAOzC,MAAM,CAAC,WAAW;IAQT,KAAK,IAAI,IAAI;IAKtB,SAAS,CAAC,gBAAgB,IAAI,MAAM;IAIpC,QAAQ,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,SAAS,CAAC;QACrB,SAAS,EAAE,KAAK,CACZ;YACE,QAAQ,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;YACzC,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,OAAO,0BAA0B,CAAC,MAAM,CAAC;YAC/C,OAAO,CAAC,EAAE,sBAAsB,CAAC;SAClC,GACD;YACE,QAAQ,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;YACzC,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,OAAO,0BAA0B,CAAC,MAAM,CAAC;YAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;SACnB,CACJ,CAAC;KACH;IA4BD,YAAY,IAAI,OAAO;IAIvB,sBAAsB,IAAI,MAAM;IAI1B,eAAe,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAW9E,4FAA4F;IACtF,mBAAmB,CAAC,IAAI,EAAE;QAC9B,IAAI,EAAE,kBAAkB,CAAC;QACzB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC;QAAE,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;IAcxC,2FAA2F;IACrF,gBAAgB,CAAC,IAAI,EAAE;QAC3B,IAAI,EAAE;YAAE,aAAa,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAC;QAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAapD,cAAc,IAAI,iBAAiB,GAAG,SAAS;CAahD"}

package/dist/components/auth/authorize/enforcers/enforcer-registry.js

@@ -1,99 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthorizationEnforcerRegistry = void 0;
-const ignis_helpers_1 = require("@venizia/ignis-helpers");
-const base_1 = require("../../base");
-const common_1 = require("../common");
-class AuthorizationEnforcerRegistry extends base_1.AbstractAuthRegistry {
-    constructor() {
-        super({ scope: AuthorizationEnforcerRegistry.name });
-        this.configuredEnforcers = new Set();
-    }
-    static getInstance() {
-        if (!AuthorizationEnforcerRegistry.instance) {
-            AuthorizationEnforcerRegistry.instance = new AuthorizationEnforcerRegistry();
-        }
-        return AuthorizationEnforcerRegistry.instance;
-    }
-    reset() {
-        super.reset();
-        this.configuredEnforcers.clear();
-    }
-    getBindingPrefix() {
-        return common_1.Authorization.ENFORCER;
-    }
-    register(opts) {
-        const { container, enforcers } = opts;
-        const names = enforcers.map(e => e.name);
-        const duplicateNames = names.filter((n, i) => names.indexOf(n) !== i);
-        if (duplicateNames.length) {
-            throw (0, ignis_helpers_1.getError)({
-                message: `[AuthorizationEnforcerRegistry] Duplicate enforcer name(s): ${[...new Set(duplicateNames)].join(', ')}`,
-            });
-        }
-        for (const { enforcer, name, options } of enforcers) {
-            if (this.descriptors.has(name)) {
-                throw (0, ignis_helpers_1.getError)({
-                    message: `[AuthorizationEnforcerRegistry] Enforcer already registered: ${name}`,
-                });
-            }
-            this.registerDescriptor({ container, target: enforcer, name });
-            if (options) {
-                container.bind({ key: common_1.AuthorizeBindingKeys.enforcerOptions(name) }).toValue(options);
-            }
-        }
-        return this;
-    }
-    hasEnforcers() {
-        return this.descriptors.size > 0;
-    }
-    getDefaultEnforcerName() {
-        return this.getDefaultName();
-    }
-    async resolveEnforcer(opts) {
-        const enforcer = this.resolveDescriptor(opts);
-        if (!this.configuredEnforcers.has(opts.name)) {
-            await enforcer.configure();
-            this.configuredEnforcers.add(opts.name);
-        }
-        return enforcer;
-    }
-    /** Drop a user's cached policies on the resolved enforcer. Lazy - next request rebuilds. */
-    async invalidateUserCache(opts) {
-        const name = opts.enforcerName ?? this.getDefaultEnforcerName();
-        const enforcer = await this.resolveEnforcer({ name });
-        // Cache management is an optional IAuthorizationEnforcer capability - feature-detect it.
-        if (typeof enforcer.invalidateUserCache !== 'function') {
-            throw (0, ignis_helpers_1.getError)({
-                message: `[AuthorizationEnforcerRegistry] Enforcer "${name}" does not support cache invalidation`,
-            });
-        }
-        return enforcer.invalidateUserCache({ user: opts.user });
-    }
-    /** Drop then immediately rebuild + re-cache a user's policies on the resolved enforcer. */
-    async rebuildUserCache(opts) {
-        const name = opts.enforcerName ?? this.getDefaultEnforcerName();
-        const enforcer = await this.resolveEnforcer({ name });
-        if (typeof enforcer.rebuildUserCache !== 'function') {
-            throw (0, ignis_helpers_1.getError)({
-                message: `[AuthorizationEnforcerRegistry] Enforcer "${name}" does not support cache invalidation`,
-            });
-        }
-        return enforcer.rebuildUserCache({ user: opts.user });
-    }
-    resolveOptions() {
-        for (const [, metadata] of this.descriptors) {
-            const { container } = metadata;
-            const options = container.get({
-                key: common_1.AuthorizeBindingKeys.OPTIONS,
-                isOptional: true,
-            });
-            if (options) {
-                return options;
-            }
-        }
-        return undefined;
-    }
-}
-exports.AuthorizationEnforcerRegistry = AuthorizationEnforcerRegistry;
-//# sourceMappingURL=enforcer-registry.js.map

package/dist/components/auth/authorize/enforcers/enforcer-registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"enforcer-registry.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/enforcer-registry.ts"],"names":[],"mappings":";;;AAEA,0DAAkD;AAElD,qCAAkD;AAQlD,sCAAgE;AAEhE,MAAa,6BAA8B,SAAQ,2BAA4C;IAK7F;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,6BAA6B,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,EAAE,CAAC;IACvC,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,6BAA6B,CAAC,QAAQ,EAAE,CAAC;YAC5C,6BAA6B,CAAC,QAAQ,GAAG,IAAI,6BAA6B,EAAE,CAAC;QAC/E,CAAC;QAED,OAAO,6BAA6B,CAAC,QAAQ,CAAC;IAChD,CAAC;IAEQ,KAAK;QACZ,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;IACnC,CAAC;IAES,gBAAgB;QACxB,OAAO,sBAAa,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,QAAQ,CAAC,IAgBR;QACC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAEtC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,+DAA+D,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAClH,CAAC,CAAC;QACL,CAAC;QAED,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,SAAS,EAAE,CAAC;YACpD,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAA,wBAAQ,EAAC;oBACb,OAAO,EAAE,gEAAgE,IAAI,EAAE;iBAChF,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAE/D,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,6BAAoB,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,sBAAsB;QACpB,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAAsB;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAE9C,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,mBAAmB,CAAC,IAGzB;QACC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAEtD,yFAAyF;QACzF,IAAI,OAAO,QAAQ,CAAC,mBAAmB,KAAK,UAAU,EAAE,CAAC;YACvD,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,6CAA6C,IAAI,uCAAuC;aAClG,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,2FAA2F;IAC3F,KAAK,CAAC,gBAAgB,CAAC,IAGtB;QACC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAEtD,IAAI,OAAO,QAAQ,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;YACpD,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,6CAA6C,IAAI,uCAAuC;aAClG,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,cAAc;QACZ,KAAK,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;YAC/B,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAoB;gBAC/C,GAAG,EAAE,6BAAoB,CAAC,OAAO;gBACjC,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;YACH,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AA1ID,sEA0IC"}

package/dist/components/auth/authorize/middlewares/authorize.middleware.d.ts

@@ -1,6 +0,0 @@
-import type { IAuthorizationSpec } from '../common';
-export declare const authorize: (opts: {
-    spec: IAuthorizationSpec;
-    enforcerName?: string;
-}) => import("hono").MiddlewareHandler;
-//# sourceMappingURL=authorize.middleware.d.ts.map

package/dist/components/auth/authorize/middlewares/authorize.middleware.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorize.middleware.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/middlewares/authorize.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAMpD,eAAO,MAAM,SAAS,GAAI,MAAM;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,qCAElF,CAAC"}