@venizia/ignis 0.2.0-11 → 0.2.0-12

package/dist/components/auth/models/entities/policy-definition.model.d.ts

@@ -22,6 +22,7 @@ declare const buildCommonPolicyDefinitionColumns: <ExtraVariant extends string =
     action: import("drizzle-orm/pg-core").PgTextBuilderInitial<"action", [string, ...string[]]>;
     effect: import("drizzle-orm").$Type<import("drizzle-orm/pg-core").PgTextBuilderInitial<"effect", [string, ...string[]]>, TAuthorizationDecision>;
     domain: import("drizzle-orm/pg-core").PgTextBuilderInitial<"domain", [string, ...string[]]>;
+    domainType: import("drizzle-orm/pg-core").PgTextBuilderInitial<"domain_type", [string, ...string[]]>;
     metadata: import("drizzle-orm/pg-core").PgJsonbBuilderInitial<"metadata">;
 };
 export type TPolicyDefinitionCommonColumns<ExtraVariant extends string = never> = ReturnType<typeof buildCommonPolicyDefinitionColumns<ExtraVariant>>;
@@ -30,10 +31,38 @@ type TPolicyDefinitionColumnDef<Opts extends TPolicyDefinitionOptions<string> |
 } ? TPolicyDefinitionCommonColumns<TExtraPolicyVariantOf<Opts>> & {
     subjectId: ReturnType<typeof text>;
     targetId: ReturnType<typeof text>;
+    domainId: ReturnType<typeof text>;
 } : TPolicyDefinitionCommonColumns<TExtraPolicyVariantOf<Opts>> & {
     subjectId: ReturnType<typeof integer>;
     targetId: ReturnType<typeof integer>;
+    domainId: ReturnType<typeof integer>;
 };
 export declare const extraPolicyDefinitionColumns: <const Opts extends TPolicyDefinitionOptions<string> | undefined = undefined>(opts?: Opts) => TPolicyDefinitionColumnDef<Opts>;
+/**
+ * The three legal `(domain_type, domain_id)` pairs, as CHECK predicate TEXT for a migration.
+ *
+ * Text, not a Drizzle `SQL` object, because that is where this constraint actually goes: a column
+ * reference inside a Drizzle `sql` template renders schema-qualified (`"table"."column"`), which is
+ * not valid inside a table-level CHECK. Migrations here are raw SQL, so the helper matches them.
+ *
+ * ```sql
+ * ALTER TABLE policy_definitions
+ *   ADD CONSTRAINT policy_definition_domain_shape
+ *   CHECK (<policyDefinitionDomainShapeCheck()>);
+ * ```
+ *
+ * Both directions are enforced, because half a constraint still admits half the broken rows: an
+ * absent or sentinel type REQUIRES a null id, and a typed domain REQUIRES a non-null one.
+ * The `IS NOT NULL` guard on the last branch looks redundant next to `NOT IN` and is not: a NULL
+ * `domain_type` makes `NOT IN` evaluate to NULL, and a CHECK only rejects on FALSE - so without it,
+ * an id with no type PASSES. Verified against a real Postgres, not reasoned about.
+ *
+ * `ANY_MEMBER` is refused outright - null already means it, and one state reachable two ways is the
+ * bug this column split exists to remove.
+ */
+export declare const policyDefinitionDomainShapeCheck: (opts?: {
+    domainTypeColumn?: string;
+    domainIdColumn?: string;
+}) => string;
 export {};
 //# sourceMappingURL=policy-definition.model.d.ts.map

package/dist/components/auth/models/entities/policy-definition.model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy-definition.model.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/policy-definition.model.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAA+B,MAAM,uBAAuB,CAAC;AACjG,OAAO,EAAE,OAAO,EAAS,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,MAAM,wBAAwB,CAAC,YAAY,SAAS,MAAM,GAAG,KAAK,IAAI;IAC1E,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;CAC7C,CAAC;AAEF,gGAAgG;AAChG,KAAK,qBAAqB,CAAC,IAAI,IAAI,IAAI,SAAS;IAC9C,aAAa,CAAC,EAAE,aAAa,CAAC,MAAM,YAAY,SAAS,MAAM,CAAC,CAAC;CAClE,GACG,YAAY,GACZ,KAAK,CAAC;AAEV,iHAAiH;AACjH,QAAA,MAAM,kCAAkC,GAAI,YAAY,SAAS,MAAM,GAAG,KAAK;;;;;;;;CAkB7E,CAAC;AAEH,MAAM,MAAM,8BAA8B,CAAC,YAAY,SAAS,MAAM,GAAG,KAAK,IAAI,UAAU,CAC1F,OAAO,kCAAkC,CAAC,YAAY,CAAC,CACxD,CAAC;AAEF,KAAK,0BAA0B,CAC7B,IAAI,SAAS,wBAAwB,CAAC,MAAM,CAAC,GAAG,SAAS,GAAG,SAAS,IACnE,IAAI,SAAS;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACjC,8BAA8B,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG;IAC5D,SAAS,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;IACnC,QAAQ,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;CACnC,GACD,8BAA8B,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG;IAC5D,SAAS,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;IACtC,QAAQ,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;CACtC,CAAC;AAEN,eAAO,MAAM,4BAA4B,GACvC,KAAK,CAAC,IAAI,SAAS,wBAAwB,CAAC,MAAM,CAAC,GAAG,SAAS,GAAG,SAAS,EAE3E,OAAO,IAAI,KACV,0BAA0B,CAAC,IAAI,CA0BjC,CAAC"}
+{"version":3,"file":"policy-definition.model.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/policy-definition.model.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAA+B,MAAM,uBAAuB,CAAC;AAEjG,OAAO,EAAE,OAAO,EAAS,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,MAAM,wBAAwB,CAAC,YAAY,SAAS,MAAM,GAAG,KAAK,IAAI;IAC1E,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;CAC7C,CAAC;AAEF,gGAAgG;AAChG,KAAK,qBAAqB,CAAC,IAAI,IAAI,IAAI,SAAS;IAC9C,aAAa,CAAC,EAAE,aAAa,CAAC,MAAM,YAAY,SAAS,MAAM,CAAC,CAAC;CAClE,GACG,YAAY,GACZ,KAAK,CAAC;AAEV,iHAAiH;AACjH,QAAA,MAAM,kCAAkC,GAAI,YAAY,SAAS,MAAM,GAAG,KAAK;;;;;;;;;CA4B7E,CAAC;AAEH,MAAM,MAAM,8BAA8B,CAAC,YAAY,SAAS,MAAM,GAAG,KAAK,IAAI,UAAU,CAC1F,OAAO,kCAAkC,CAAC,YAAY,CAAC,CACxD,CAAC;AAEF,KAAK,0BAA0B,CAC7B,IAAI,SAAS,wBAAwB,CAAC,MAAM,CAAC,GAAG,SAAS,GAAG,SAAS,IACnE,IAAI,SAAS;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACjC,8BAA8B,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG;IAC5D,SAAS,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;IACnC,QAAQ,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;IAClC,QAAQ,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;CACnC,GACD,8BAA8B,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG;IAC5D,SAAS,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;IACtC,QAAQ,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;IACrC,QAAQ,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;CACtC,CAAC;AAEN,eAAO,MAAM,4BAA4B,GACvC,KAAK,CAAC,IAAI,SAAS,wBAAwB,CAAC,MAAM,CAAC,GAAG,SAAS,GAAG,SAAS,EAE3E,OAAO,IAAI,KACV,0BAA0B,CAAC,IAAI,CA4BjC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,gCAAgC,GAAI,OAAO;IACtD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,KAAG,MAaH,CAAC"}

package/dist/components/auth/models/entities/policy-definition.model.js

@@ -1,7 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.extraPolicyDefinitionColumns = void 0;
+exports.policyDefinitionDomainShapeCheck = exports.extraPolicyDefinitionColumns = void 0;
 const core_1 = require("@venizia/ignis-helpers/core");
+const ignis_kernel_1 = require("@venizia/ignis-kernel");
 const pg_core_1 = require("drizzle-orm/pg-core");
 /** Column shape is inferred, never hand-declared, so it can never drift from the `$type<>()` narrowing below. */
 const buildCommonPolicyDefinitionColumns = () => ({
@@ -16,7 +17,15 @@ const buildCommonPolicyDefinitionColumns = () => ({
     // the casbin effect evaluator itself reads this value, so an unknown effect is a correctness
     // bug in enforcement, not a harmless unselected row.
     effect: (0, pg_core_1.text)('effect').$type(),
+    // Being replaced by `domain_type` + `domain_id`; still the READ source, so both are written.
+    // The two-column form is what `subject`/`target` already use, and what the domain-closure CTE
+    // joins on - the concatenated token was the odd one out.
     domain: (0, pg_core_1.text)('domain'),
+    // `null` IS `ANY_MEMBER`, not "unknown" - the adapter has always defaulted a null domain to it.
+    // A scope literal (`SYSTEM_WIDE`) sits here with a null `domain_id`; a typed domain carries both.
+    // `ANY_MEMBER` must never be written here explicitly: two spellings for one state is a bug
+    // waiting to happen. `policyDefinitionDomainShapeSql` enforces all three rules as a CHECK.
+    domainType: (0, pg_core_1.text)('domain_type'),
     // Nullable: only subset grants populate it, and a consumer may map its own column instead.
     metadata: (0, pg_core_1.jsonb)('metadata'),
 });
@@ -29,6 +38,7 @@ const extraPolicyDefinitionColumns = (opts) => {
                 ...common,
                 subjectId: (0, pg_core_1.integer)('subject_id').notNull(),
                 targetId: (0, pg_core_1.integer)('target_id').notNull(),
+                domainId: (0, pg_core_1.integer)('domain_id'),
             };
         }
         case 'string': {
@@ -36,6 +46,7 @@ const extraPolicyDefinitionColumns = (opts) => {
                 ...common,
                 subjectId: (0, pg_core_1.text)('subject_id').notNull(),
                 targetId: (0, pg_core_1.text)('target_id').notNull(),
+                domainId: (0, pg_core_1.text)('domain_id'),
             };
         }
         default: {
@@ -46,4 +57,40 @@ const extraPolicyDefinitionColumns = (opts) => {
     }
 };
 exports.extraPolicyDefinitionColumns = extraPolicyDefinitionColumns;
+/**
+ * The three legal `(domain_type, domain_id)` pairs, as CHECK predicate TEXT for a migration.
+ *
+ * Text, not a Drizzle `SQL` object, because that is where this constraint actually goes: a column
+ * reference inside a Drizzle `sql` template renders schema-qualified (`"table"."column"`), which is
+ * not valid inside a table-level CHECK. Migrations here are raw SQL, so the helper matches them.
+ *
+ * ```sql
+ * ALTER TABLE policy_definitions
+ *   ADD CONSTRAINT policy_definition_domain_shape
+ *   CHECK (<policyDefinitionDomainShapeCheck()>);
+ * ```
+ *
+ * Both directions are enforced, because half a constraint still admits half the broken rows: an
+ * absent or sentinel type REQUIRES a null id, and a typed domain REQUIRES a non-null one.
+ * The `IS NOT NULL` guard on the last branch looks redundant next to `NOT IN` and is not: a NULL
+ * `domain_type` makes `NOT IN` evaluate to NULL, and a CHECK only rejects on FALSE - so without it,
+ * an id with no type PASSES. Verified against a real Postgres, not reasoned about.
+ *
+ * `ANY_MEMBER` is refused outright - null already means it, and one state reachable two ways is the
+ * bug this column split exists to remove.
+ */
+const policyDefinitionDomainShapeCheck = (opts) => {
+    const { domainTypeColumn = 'domain_type', domainIdColumn = 'domain_id' } = opts ?? {};
+    const { ANY_MEMBER, SYSTEM_WIDE } = ignis_kernel_1.AuthorizationDomainScopes;
+    return [
+        `(${domainTypeColumn} IS NULL AND ${domainIdColumn} IS NULL)`,
+        `OR (${domainTypeColumn} = '${SYSTEM_WIDE}' AND ${domainIdColumn} IS NULL)`,
+        `OR (
+      ${domainTypeColumn} IS NOT NULL
+      AND ${domainTypeColumn} NOT IN ('${ANY_MEMBER}', '${SYSTEM_WIDE}')
+      AND ${domainIdColumn} IS NOT NULL
+    )`,
+    ].join('\n');
+};
+exports.policyDefinitionDomainShapeCheck = policyDefinitionDomainShapeCheck;
 //# sourceMappingURL=policy-definition.model.js.map

package/dist/components/auth/models/entities/policy-definition.model.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy-definition.model.js","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/policy-definition.model.ts"],"names":[],"mappings":";;;AAAA,sDAAuD;AAEvD,iDAA2D;AAoB3D,iHAAiH;AACjH,MAAM,kCAAkC,GAAG,GAAwC,EAAE,CAAC,CAAC;IACrF,gGAAgG;IAChG,oDAAoD;IACpD,OAAO,EAAE,IAAA,cAAI,EAAC,SAAS,CAAC,CAAC,KAAK,EAA8C,CAAC,OAAO,EAAE;IACtF,WAAW,EAAE,IAAA,cAAI,EAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,UAAU,EAAE,IAAA,cAAI,EAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IAEzC,mGAAmG;IACnG,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC;IAEtB,6FAA6F;IAC7F,6FAA6F;IAC7F,qDAAqD;IACrD,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,KAAK,EAA0B;IACtD,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC;IAEtB,2FAA2F;IAC3F,QAAQ,EAAE,IAAA,eAAK,EAAC,UAAU,CAAC;CAC5B,CAAC,CAAC;AAkBI,MAAM,4BAA4B,GAAG,CAG1C,IAAW,EACuB,EAAE;IACpC,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,kCAAkC,EAA+B,CAAC;IAEjF,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,GAAG,MAAM;gBACT,SAAS,EAAE,IAAA,iBAAO,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE;gBAC1C,QAAQ,EAAE,IAAA,iBAAO,EAAC,WAAW,CAAC,CAAC,OAAO,EAAE;aACL,CAAC;QACxC,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,GAAG,MAAM;gBACT,SAAS,EAAE,IAAA,cAAI,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE;gBACvC,QAAQ,EAAE,IAAA,cAAI,EAAC,WAAW,CAAC,CAAC,OAAO,EAAE;aACF,CAAC;QACxC,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,2DAA2D,MAAM,EAAE;aAC7E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AA9BW,QAAA,4BAA4B,gCA8BvC"}
+{"version":3,"file":"policy-definition.model.js","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/policy-definition.model.ts"],"names":[],"mappings":";;;AAAA,sDAAuD;AAEvD,wDAAkE;AAClE,iDAA2D;AAoB3D,iHAAiH;AACjH,MAAM,kCAAkC,GAAG,GAAwC,EAAE,CAAC,CAAC;IACrF,gGAAgG;IAChG,oDAAoD;IACpD,OAAO,EAAE,IAAA,cAAI,EAAC,SAAS,CAAC,CAAC,KAAK,EAA8C,CAAC,OAAO,EAAE;IACtF,WAAW,EAAE,IAAA,cAAI,EAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,UAAU,EAAE,IAAA,cAAI,EAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IAEzC,mGAAmG;IACnG,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC;IAEtB,6FAA6F;IAC7F,6FAA6F;IAC7F,qDAAqD;IACrD,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,KAAK,EAA0B;IAEtD,6FAA6F;IAC7F,8FAA8F;IAC9F,yDAAyD;IACzD,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC;IAEtB,gGAAgG;IAChG,kGAAkG;IAClG,2FAA2F;IAC3F,2FAA2F;IAC3F,UAAU,EAAE,IAAA,cAAI,EAAC,aAAa,CAAC;IAE/B,2FAA2F;IAC3F,QAAQ,EAAE,IAAA,eAAK,EAAC,UAAU,CAAC;CAC5B,CAAC,CAAC;AAoBI,MAAM,4BAA4B,GAAG,CAG1C,IAAW,EACuB,EAAE;IACpC,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,kCAAkC,EAA+B,CAAC;IAEjF,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,GAAG,MAAM;gBACT,SAAS,EAAE,IAAA,iBAAO,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE;gBAC1C,QAAQ,EAAE,IAAA,iBAAO,EAAC,WAAW,CAAC,CAAC,OAAO,EAAE;gBACxC,QAAQ,EAAE,IAAA,iBAAO,EAAC,WAAW,CAAC;aACK,CAAC;QACxC,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,GAAG,MAAM;gBACT,SAAS,EAAE,IAAA,cAAI,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE;gBACvC,QAAQ,EAAE,IAAA,cAAI,EAAC,WAAW,CAAC,CAAC,OAAO,EAAE;gBACrC,QAAQ,EAAE,IAAA,cAAI,EAAC,WAAW,CAAC;aACQ,CAAC;QACxC,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,2DAA2D,MAAM,EAAE;aAC7E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAhCW,QAAA,4BAA4B,gCAgCvC;AAEF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACI,MAAM,gCAAgC,GAAG,CAAC,IAGhD,EAAU,EAAE;IACX,MAAM,EAAE,gBAAgB,GAAG,aAAa,EAAE,cAAc,GAAG,WAAW,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IACtF,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,wCAAyB,CAAC;IAE9D,OAAO;QACL,IAAI,gBAAgB,gBAAgB,cAAc,WAAW;QAC7D,OAAO,gBAAgB,OAAO,WAAW,SAAS,cAAc,WAAW;QAC3E;QACI,gBAAgB;YACZ,gBAAgB,aAAa,UAAU,OAAO,WAAW;YACzD,cAAc;MACpB;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC,CAAC;AAhBW,QAAA,gCAAgC,oCAgB3C"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@venizia/ignis",
-  "version": "0.2.0-11",
+  "version": "0.2.0-12",
   "description": "High-performance TypeScript server infrastructure combining LoopBack 4 enterprise architecture (decorator-based DI, repository pattern, component system) with Hono speed (~140k req/s). Features auto-generated OpenAPI docs, Drizzle ORM type-safe SQL, JWT/Basic authentication, Casbin authorization, convention-based bootstrapping, and pluggable components for health checks, Swagger UI, mail, Socket.IO, and static assets. Built for Bun and Node.js.",
   "keywords": [
     "access-control",
@@ -199,11 +199,11 @@
   },
   "dependencies": {
     "@venizia/ignis-boot": "^0.2.0-7",
-    "@venizia/ignis-connectors": "^0.2.0-11",
+    "@venizia/ignis-connectors": "^0.2.0-12",
     "@venizia/ignis-filter": "^0.2.0-5",
     "@venizia/ignis-helpers": "^0.2.0-8",
     "@venizia/ignis-inversion": "^0.2.0-3",
-    "@venizia/ignis-kernel": "^0.2.0-11",
+    "@venizia/ignis-kernel": "^0.2.0-12",
     "lodash": "^4.18.1",
     "reflect-metadata": "^0.2.2",
     "zod": "^4.4.3"