@venizia/ignis 0.4.3 → 0.4.4

package/dist/esm/components/auth/authorize/role-managers/membership.d.ts

@@ -0,0 +1,21 @@
+import type { RoleManager } from 'casbin';
+import { BaseRoleManager } from './base.js';
+/** `g2` axis (`g2(r.sub, r.dom)`): membership holds when the user joined the request domain or any
+ * ancestor of it, walking the shared per-request domain-hierarchy overlay. Memberships are
+ * per-principal and rebuilt every request, so `clear()` wipes all. */
+export declare class MembershipRoleManager extends BaseRoleManager implements RoleManager {
+    private readonly overlay?;
+    private memberships;
+    constructor(opts: {
+        overlay?: Map<string, Set<string>>;
+    });
+    clear(): Promise<void>;
+    addLink(user: string, domain: string): Promise<void>;
+    deleteLink(user: string, domain: string): Promise<void>;
+    /** True when `name1` (user) joined `name2` (request domain) itself, or any ancestor of it. Walks UP from the request domain only - walking down from every joined domain would fan out over the whole subtree. */
+    syncedHasLink(name1: string, name2: string): boolean;
+    /** Local membership state only, not the shared graph - correct for hasLink, incomplete for casbin's management API. */
+    getRoles(name: string): Promise<string[]>;
+    getUsers(name: string): Promise<string[]>;
+}
+//# sourceMappingURL=membership.d.ts.map

package/dist/esm/components/auth/authorize/role-managers/membership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"membership.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authorize/role-managers/membership.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAEzC;;sEAEsE;AACtE,qBAAa,qBAAsB,SAAQ,eAAgB,YAAW,WAAW;IAC/E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAGvB;IACF,OAAO,CAAC,WAAW,CAGf;gBAEQ,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;KAAE;IAKlD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAKtB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASpD,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7D,kNAAkN;IAClN,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO;IA2BpD,uHAAuH;IACjH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAWhD"}

package/dist/esm/components/auth/authorize/role-managers/membership.js

@@ -0,0 +1,65 @@
+import { BaseRoleManager } from './base.js';
+/** `g2` axis (`g2(r.sub, r.dom)`): membership holds when the user joined the request domain or any
+ * ancestor of it, walking the shared per-request domain-hierarchy overlay. Memberships are
+ * per-principal and rebuilt every request, so `clear()` wipes all. */
+export class MembershipRoleManager extends BaseRoleManager {
+    constructor(opts) {
+        super({ scope: MembershipRoleManager.name });
+        this.memberships = new Map();
+        this.overlay = opts.overlay;
+    }
+    async clear() {
+        this.memberships = new Map();
+        this.graphReported = false;
+    }
+    async addLink(user, domain) {
+        const existing = this.memberships.get(user);
+        if (existing) {
+            existing.add(domain);
+        }
+        else {
+            this.memberships.set(user, new Set([domain]));
+        }
+    }
+    async deleteLink(user, domain) {
+        this.memberships.get(user)?.delete(domain);
+    }
+    /** True when `name1` (user) joined `name2` (request domain) itself, or any ancestor of it. Walks UP from the request domain only - walking down from every joined domain would fan out over the whole subtree. */
+    syncedHasLink(name1, name2) {
+        this.reportGraphOnce(() => {
+            const { nodeCount, edgeCount } = MembershipRoleManager.overlayStats(this.overlay);
+            return {
+                message: 'membership role manager initialized | nodes: %d | edges: %d',
+                args: [nodeCount, edgeCount],
+            };
+        });
+        const joined = this.memberships.get(name1);
+        if (!joined || joined.size === 0) {
+            return false;
+        }
+        const ancestors = MembershipRoleManager.collectAncestors({
+            overlay: this.overlay,
+            node: name2,
+        });
+        for (const ancestor of ancestors) {
+            if (joined.has(ancestor)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    /** Local membership state only, not the shared graph - correct for hasLink, incomplete for casbin's management API. */
+    async getRoles(name) {
+        return [...(this.memberships.get(name) ?? [])];
+    }
+    async getUsers(name) {
+        const users = [];
+        for (const [user, domains] of this.memberships) {
+            if (domains.has(name)) {
+                users.push(user);
+            }
+        }
+        return users;
+    }
+}
+//# sourceMappingURL=membership.js.map

package/dist/esm/components/auth/authorize/role-managers/membership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"membership.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authorize/role-managers/membership.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAEzC;;sEAEsE;AACtE,MAAM,OAAO,qBAAsB,SAAQ,eAAe;IAUxD,YAAY,IAA4C;QACtD,KAAK,CAAC,EAAE,KAAK,EAAE,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC;QANvC,gBAAW,GAAG,IAAI,GAAG,EAG1B,CAAC;QAIF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;QAClD,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,MAAc;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,CAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,MAAc;QAC3C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,kNAAkN;IAClN,aAAa,CAAC,KAAa,EAAE,KAAa;QACxC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE;YACxB,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,qBAAqB,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClF,OAAO;gBACL,OAAO,EAAE,6DAA6D;gBACtE,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;aAC7B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAG,qBAAqB,CAAC,gBAAgB,CAAC;YACvD,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,uHAAuH;IACvH,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF","sourcesContent":["import type { RoleManager } from 'casbin';\nimport { BaseRoleManager } from './base';\n\n/** `g2` axis (`g2(r.sub, r.dom)`): membership holds when the user joined the request domain or any\n * ancestor of it, walking the shared per-request domain-hierarchy overlay. Memberships are\n * per-principal and rebuilt every request, so `clear()` wipes all. */\nexport class MembershipRoleManager extends BaseRoleManager implements RoleManager {\n  private readonly overlay?: Map<\n    string, // child domain\n    Set<string> // set of parent domains\n  >;\n  private memberships = new Map<\n    string, // user\n    Set<string> // set of joined domains\n  >();\n\n  constructor(opts: { overlay?: Map<string, Set<string>> }) {\n    super({ scope: MembershipRoleManager.name });\n    this.overlay = opts.overlay;\n  }\n\n  async clear(): Promise<void> {\n    this.memberships = new Map<string, Set<string>>();\n    this.graphReported = false;\n  }\n\n  async addLink(user: string, domain: string): Promise<void> {\n    const existing = this.memberships.get(user);\n    if (existing) {\n      existing.add(domain);\n    } else {\n      this.memberships.set(user, new Set<string>([domain]));\n    }\n  }\n\n  async deleteLink(user: string, domain: string): Promise<void> {\n    this.memberships.get(user)?.delete(domain);\n  }\n\n  /** True when `name1` (user) joined `name2` (request domain) itself, or any ancestor of it. Walks UP from the request domain only - walking down from every joined domain would fan out over the whole subtree. */\n  syncedHasLink(name1: string, name2: string): boolean {\n    this.reportGraphOnce(() => {\n      const { nodeCount, edgeCount } = MembershipRoleManager.overlayStats(this.overlay);\n      return {\n        message: 'membership role manager initialized | nodes: %d | edges: %d',\n        args: [nodeCount, edgeCount],\n      };\n    });\n\n    const joined = this.memberships.get(name1);\n    if (!joined || joined.size === 0) {\n      return false;\n    }\n\n    const ancestors = MembershipRoleManager.collectAncestors({\n      overlay: this.overlay,\n      node: name2,\n    });\n    for (const ancestor of ancestors) {\n      if (joined.has(ancestor)) {\n        return true;\n      }\n    }\n\n    return false;\n  }\n\n  /** Local membership state only, not the shared graph - correct for hasLink, incomplete for casbin's management API. */\n  async getRoles(name: string): Promise<string[]> {\n    return [...(this.memberships.get(name) ?? [])];\n  }\n\n  async getUsers(name: string): Promise<string[]> {\n    const users: string[] = [];\n\n    for (const [user, domains] of this.memberships) {\n      if (domains.has(name)) {\n        users.push(user);\n      }\n    }\n\n    return users;\n  }\n}\n"]}

package/dist/esm/components/auth/authorize/role-managers/resource.d.ts

@@ -0,0 +1,16 @@
+import type { RoleManager } from 'casbin';
+import { BaseRoleManager } from './base.js';
+/** Resource-axis (`g4`) role manager: `addMatchingFunc` would set `hasPattern` and disable DefaultRoleManager's O(1) fast path, so prefix ancestors are walked manually; `addLink` must stay idempotent because `buildRoleLinks` re-adds every edge once per request. */
+export declare class ResourceRoleManager extends BaseRoleManager implements RoleManager {
+    private parents;
+    constructor();
+    clear(): Promise<void>;
+    addLink(child: string, parent: string): Promise<void>;
+    deleteLink(child: string, parent: string): Promise<void>;
+    syncedHasLink(name1: string, name2: string): boolean;
+    getRoles(name: string): Promise<string[]>;
+    getUsers(name: string): Promise<string[]>;
+    /** All stored prefix ancestors of a dotted code (`a.b.c` -> `a.b` -> `a`), not only the deepest, plus a literal stored `'*'` node - `objectMatch(anything, '*')` is always true, so a `g4` edge whose child is `'*'` must stay reachable from every request object. */
+    private collectStoredAncestors;
+}
+//# sourceMappingURL=resource.d.ts.map

package/dist/esm/components/auth/authorize/role-managers/resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authorize/role-managers/resource.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAEzC,yQAAyQ;AACzQ,qBAAa,mBAAoB,SAAQ,eAAgB,YAAW,WAAW;IAC7E,OAAO,CAAC,OAAO,CAGX;;IAME,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAKtB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcrD,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9D,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO;IA8C9C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAY/C,uQAAuQ;IACvQ,OAAO,CAAC,sBAAsB;CA0B/B"}

package/dist/esm/components/auth/authorize/role-managers/resource.js

@@ -0,0 +1,99 @@
+import { BaseRoleManager } from './base.js';
+/** Resource-axis (`g4`) role manager: `addMatchingFunc` would set `hasPattern` and disable DefaultRoleManager's O(1) fast path, so prefix ancestors are walked manually; `addLink` must stay idempotent because `buildRoleLinks` re-adds every edge once per request. */
+export class ResourceRoleManager extends BaseRoleManager {
+    constructor() {
+        super({ scope: ResourceRoleManager.name });
+        this.parents = new Map();
+    }
+    async clear() {
+        this.parents = new Map();
+        this.graphReported = false;
+    }
+    async addLink(child, parent) {
+        const existing = this.parents.get(child);
+        if (existing) {
+            existing.add(parent);
+        }
+        else {
+            this.parents.set(child, new Set([parent]));
+        }
+        if (!this.parents.has(parent)) {
+            this.parents.set(parent, new Set());
+        }
+    }
+    async deleteLink(child, parent) {
+        this.parents.get(child)?.delete(parent);
+    }
+    syncedHasLink(name1, name2) {
+        this.reportGraphOnce(() => {
+            const nodeCount = this.parents.size;
+            const edgeCount = Array.from(this.parents.values()).reduce((sum, set) => sum + set.size, 0);
+            return {
+                message: 'resource-role initialized | nodes: %d | edges: %d',
+                args: [nodeCount, edgeCount],
+            };
+        });
+        if (name1 === name2) {
+            return true;
+        }
+        const seeds = this.collectStoredAncestors({ name: name1 });
+        if (seeds.length === 0) {
+            return false;
+        }
+        const visited = new Set();
+        const queue = [...seeds];
+        // Index cursor rather than shift(): shift() is O(n) and would make the walk quadratic.
+        let head = 0;
+        while (head < queue.length) {
+            const current = queue[head];
+            head += 1;
+            if (current === name2) {
+                return true;
+            }
+            if (visited.has(current)) {
+                continue;
+            }
+            visited.add(current);
+            const parents = this.parents.get(current);
+            if (parents) {
+                queue.push(...parents);
+            }
+        }
+        return false;
+    }
+    async getRoles(name) {
+        return [...(this.parents.get(name) ?? [])];
+    }
+    async getUsers(name) {
+        const users = [];
+        for (const [child, parents] of this.parents) {
+            if (parents.has(name)) {
+                users.push(child);
+            }
+        }
+        return users;
+    }
+    /** All stored prefix ancestors of a dotted code (`a.b.c` -> `a.b` -> `a`), not only the deepest, plus a literal stored `'*'` node - `objectMatch(anything, '*')` is always true, so a `g4` edge whose child is `'*'` must stay reachable from every request object. */
+    collectStoredAncestors(opts) {
+        const ancestors = [];
+        if (this.parents.has(opts.name)) {
+            ancestors.push(opts.name);
+        }
+        let current = opts.name;
+        for (;;) {
+            const index = current.lastIndexOf('.');
+            if (index === -1) {
+                break;
+            }
+            current = current.slice(0, index);
+            if (this.parents.has(current)) {
+                ancestors.push(current);
+            }
+        }
+        if (this.parents.has('*') && !ancestors.includes('*')) {
+            ancestors.push('*');
+        }
+        return ancestors;
+    }
+}
+//# sourceMappingURL=resource.js.map

package/dist/esm/components/auth/authorize/role-managers/resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authorize/role-managers/resource.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAEzC,yQAAyQ;AACzQ,MAAM,OAAO,mBAAoB,SAAQ,eAAe;IAMtD;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC;QANrC,YAAO,GAAG,IAAI,GAAG,EAGtB,CAAC;IAIJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;QAC9C,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,MAAc;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEzC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,GAAG,CAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,EAAU,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAa,EAAE,MAAc;QAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,aAAa,CAAC,KAAa,EAAE,KAAa;QACxC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE;YACxB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACpC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC5F,OAAO;gBACL,OAAO,EAAE,mDAAmD;gBAC5D,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;aAC7B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,KAAK,GAAa,CAAC,GAAG,KAAK,CAAC,CAAC;QAEnC,uFAAuF;QACvF,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,OAAO,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,CAAC;YAEV,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;gBACtB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAErB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,uQAAuQ;IAC/P,sBAAsB,CAAC,IAAsB;QACnD,MAAM,SAAS,GAAa,EAAE,CAAC;QAE/B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QACxB,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,MAAM;YACR,CAAC;YAED,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF","sourcesContent":["import type { RoleManager } from 'casbin';\nimport { BaseRoleManager } from './base';\n\n/** Resource-axis (`g4`) role manager: `addMatchingFunc` would set `hasPattern` and disable DefaultRoleManager's O(1) fast path, so prefix ancestors are walked manually; `addLink` must stay idempotent because `buildRoleLinks` re-adds every edge once per request. */\nexport class ResourceRoleManager extends BaseRoleManager implements RoleManager {\n  private parents = new Map<\n    string, // Child module\n    Set<string> // Set of Parent modules\n  >();\n\n  constructor() {\n    super({ scope: ResourceRoleManager.name });\n  }\n\n  async clear(): Promise<void> {\n    this.parents = new Map<string, Set<string>>();\n    this.graphReported = false;\n  }\n\n  async addLink(child: string, parent: string): Promise<void> {\n    const existing = this.parents.get(child);\n\n    if (existing) {\n      existing.add(parent);\n    } else {\n      this.parents.set(child, new Set<string>([parent]));\n    }\n\n    if (!this.parents.has(parent)) {\n      this.parents.set(parent, new Set<string>());\n    }\n  }\n\n  async deleteLink(child: string, parent: string): Promise<void> {\n    this.parents.get(child)?.delete(parent);\n  }\n\n  syncedHasLink(name1: string, name2: string): boolean {\n    this.reportGraphOnce(() => {\n      const nodeCount = this.parents.size;\n      const edgeCount = Array.from(this.parents.values()).reduce((sum, set) => sum + set.size, 0);\n      return {\n        message: 'resource-role initialized | nodes: %d | edges: %d',\n        args: [nodeCount, edgeCount],\n      };\n    });\n\n    if (name1 === name2) {\n      return true;\n    }\n\n    const seeds = this.collectStoredAncestors({ name: name1 });\n    if (seeds.length === 0) {\n      return false;\n    }\n\n    const visited = new Set<string>();\n    const queue: string[] = [...seeds];\n\n    // Index cursor rather than shift(): shift() is O(n) and would make the walk quadratic.\n    let head = 0;\n    while (head < queue.length) {\n      const current = queue[head];\n      head += 1;\n\n      if (current === name2) {\n        return true;\n      }\n\n      if (visited.has(current)) {\n        continue;\n      }\n      visited.add(current);\n\n      const parents = this.parents.get(current);\n      if (parents) {\n        queue.push(...parents);\n      }\n    }\n\n    return false;\n  }\n\n  async getRoles(name: string): Promise<string[]> {\n    return [...(this.parents.get(name) ?? [])];\n  }\n\n  async getUsers(name: string): Promise<string[]> {\n    const users: string[] = [];\n\n    for (const [child, parents] of this.parents) {\n      if (parents.has(name)) {\n        users.push(child);\n      }\n    }\n\n    return users;\n  }\n\n  /** All stored prefix ancestors of a dotted code (`a.b.c` -> `a.b` -> `a`), not only the deepest, plus a literal stored `'*'` node - `objectMatch(anything, '*')` is always true, so a `g4` edge whose child is `'*'` must stay reachable from every request object. */\n  private collectStoredAncestors(opts: { name: string }): string[] {\n    const ancestors: string[] = [];\n\n    if (this.parents.has(opts.name)) {\n      ancestors.push(opts.name);\n    }\n\n    let current = opts.name;\n    for (;;) {\n      const index = current.lastIndexOf('.');\n      if (index === -1) {\n        break;\n      }\n\n      current = current.slice(0, index);\n      if (this.parents.has(current)) {\n        ancestors.push(current);\n      }\n    }\n\n    if (this.parents.has('*') && !ancestors.includes('*')) {\n      ancestors.push('*');\n    }\n\n    return ancestors;\n  }\n}\n"]}

package/dist/esm/components/auth/index.d.ts

@@ -0,0 +1,5 @@
+export * from '@venizia/ignis-kernel';
+export * from './authenticate/index.js';
+export * from './authorize/index.js';
+export * from './models/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/components/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/index.ts"],"names":[],"mappings":"AAEA,cAAc,uBAAuB,CAAC;AAEtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC"}

package/dist/esm/components/auth/index.js

@@ -0,0 +1,7 @@
+// `base` and `context-variables` moved to the kernel in full; `models/requests` moved too (see
+// `./models/index.ts`). Re-exported here so `@/components/auth` keeps resolving.
+export * from '@venizia/ignis-kernel';
+export * from './authenticate/index.js';
+export * from './authorize/index.js';
+export * from './models/index.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/components/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/components/auth/index.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,iFAAiF;AACjF,cAAc,uBAAuB,CAAC;AAEtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC","sourcesContent":["// `base` and `context-variables` moved to the kernel in full; `models/requests` moved too (see\n// `./models/index.ts`). Re-exported here so `@/components/auth` keeps resolving.\nexport * from '@venizia/ignis-kernel';\n\nexport * from './authenticate';\nexport * from './authorize';\nexport * from './models';\n"]}

package/dist/esm/components/auth/models/entities/index.d.ts

@@ -0,0 +1,5 @@
+export * from './permission.model.js';
+export * from './policy-definition.model.js';
+export * from './role.model.js';
+export * from './user.model.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/components/auth/models/entities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/models/entities/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC"}

package/dist/esm/components/auth/models/entities/index.js

@@ -0,0 +1,5 @@
+export * from './permission.model.js';
+export * from './policy-definition.model.js';
+export * from './role.model.js';
+export * from './user.model.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/components/auth/models/entities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/components/auth/models/entities/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC","sourcesContent":["export * from './permission.model';\nexport * from './policy-definition.model';\nexport * from './role.model';\nexport * from './user.model';\n"]}

package/dist/esm/components/auth/models/entities/permission.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.model.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/models/entities/permission.model.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAGzF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,KAAK,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACpE,WAAW,EAAE,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;CAClE,CAAC;AAEF,KAAK,oBAAoB,CAAC,IAAI,SAAS,kBAAkB,GAAG,SAAS,GAAG,SAAS,IAAI,IAAI,SAAS;IAChG,MAAM,EAAE,MAAM,MAAM,CAAC;CACtB,GACG,MAAM,SAAS,QAAQ,GACrB,wBAAwB,GAAG;IACzB,QAAQ,EAAE,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;CAC/D,GACD,wBAAwB,GAAG;IACzB,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;CAC3C,GACH,wBAAwB,GAAG;IACzB,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;CAC3C,CAAC;AAEN,eAAO,MAAM,sBAAsB,GAAI,IAAI,SAAS,kBAAkB,GAAG,SAAS,EAChF,OAAO,IAAI,KACV,oBAAoB,CAAC,IAAI,CAkC3B,CAAC"}

package/dist/esm/components/auth/models/entities/permission.model.js

@@ -0,0 +1,37 @@
+import { getError } from '@venizia/ignis-helpers/core';
+import { integer, text } from 'drizzle-orm/pg-core';
+export const extraPermissionColumns = (opts) => {
+    const { idType = 'number' } = opts ?? {};
+    switch (idType) {
+        case 'number': {
+            return {
+                code: text('code').unique().notNull(),
+                name: text('name').notNull(),
+                subject: text('subject').notNull(),
+                method: text('method').notNull(),
+                action: text('action').notNull(),
+                scope: text('scope').notNull(),
+                description: text('description'),
+                parentId: integer('parent_id'),
+            };
+        }
+        case 'string': {
+            return {
+                code: text('code').unique().notNull(),
+                name: text('name').notNull(),
+                subject: text('subject').notNull(),
+                method: text('method').notNull(),
+                action: text('action').notNull(),
+                scope: text('scope').notNull(),
+                description: text('description'),
+                parentId: text('parent_id'),
+            };
+        }
+        default: {
+            throw getError({
+                message: `[extraPermissionColumns] Invalid idType | idType: ${idType}`,
+            });
+        }
+    }
+};
+//# sourceMappingURL=permission.model.js.map

package/dist/esm/components/auth/models/entities/permission.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.model.js","sourceRoot":"","sources":["../../../../../../src/components/auth/models/entities/permission.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAIvD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AA8BpD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,IAAW,EACiB,EAAE;IAC9B,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IAEzC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;gBACrC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;gBAC5B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;gBAClC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;gBAChC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;gBAChC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;gBAC9B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC;gBAChC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC;aACD,CAAC;QAClC,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;gBACrC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;gBAC5B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;gBAClC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;gBAChC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;gBAChC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;gBAC9B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC;gBAChC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;aACE,CAAC;QAClC,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,qDAAqD,MAAM,EAAE;aACvE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC","sourcesContent":["import { getError } from '@venizia/ignis-helpers/core';\nimport type { TIdSchemaType } from '@venizia/ignis-kernel';\nimport type { NotNull } from 'drizzle-orm';\nimport type { PgIntegerBuilderInitial, PgTextBuilderInitial } from 'drizzle-orm/pg-core';\nimport { integer, text } from 'drizzle-orm/pg-core';\n\nexport type TPermissionOptions = {\n  idType?: TIdSchemaType;\n};\n\nexport type TPermissionCommonColumns = {\n  code: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;\n  name: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;\n  method: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;\n  subject: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;\n  action: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;\n  scope: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;\n  description: PgTextBuilderInitial<string, [string, ...string[]]>;\n};\n\ntype TPermissionColumnDef<Opts extends TPermissionOptions | undefined = undefined> = Opts extends {\n  idType: infer IdType;\n}\n  ? IdType extends 'string'\n    ? TPermissionCommonColumns & {\n        parentId: PgTextBuilderInitial<string, [string, ...string[]]>;\n      }\n    : TPermissionCommonColumns & {\n        parentId: PgIntegerBuilderInitial<string>;\n      }\n  : TPermissionCommonColumns & {\n      parentId: PgIntegerBuilderInitial<string>;\n    };\n\nexport const extraPermissionColumns = <Opts extends TPermissionOptions | undefined>(\n  opts?: Opts,\n): TPermissionColumnDef<Opts> => {\n  const { idType = 'number' } = opts ?? {};\n\n  switch (idType) {\n    case 'number': {\n      return {\n        code: text('code').unique().notNull(),\n        name: text('name').notNull(),\n        subject: text('subject').notNull(),\n        method: text('method').notNull(),\n        action: text('action').notNull(),\n        scope: text('scope').notNull(),\n        description: text('description'),\n        parentId: integer('parent_id'),\n      } as TPermissionColumnDef<Opts>;\n    }\n    case 'string': {\n      return {\n        code: text('code').unique().notNull(),\n        name: text('name').notNull(),\n        subject: text('subject').notNull(),\n        method: text('method').notNull(),\n        action: text('action').notNull(),\n        scope: text('scope').notNull(),\n        description: text('description'),\n        parentId: text('parent_id'),\n      } as TPermissionColumnDef<Opts>;\n    }\n    default: {\n      throw getError({\n        message: `[extraPermissionColumns] Invalid idType | idType: ${idType}`,\n      });\n    }\n  }\n};\n"]}

package/dist/esm/components/auth/models/entities/policy-definition.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-definition.model.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/models/entities/policy-definition.model.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,sBAAsB,EACtB,aAAa,EAEb,oBAAoB,EACrB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,OAAO,EAAS,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,MAAM,wBAAwB,CAAC,YAAY,SAAS,MAAM,GAAG,KAAK,IAAI;IAC1E,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;CAC7C,CAAC;AAEF,gGAAgG;AAChG,KAAK,qBAAqB,CAAC,IAAI,IAAI,IAAI,SAAS;IAC9C,aAAa,CAAC,EAAE,aAAa,CAAC,MAAM,YAAY,SAAS,MAAM,CAAC,CAAC;CAClE,GACG,YAAY,GACZ,KAAK,CAAC;AAEV,iHAAiH;AACjH,QAAA,MAAM,kCAAkC,GACtC,YAAY,SAAS,MAAM,GAAG,KAAK,EACnC,QAAQ,SAAS,MAAM,GAAG,oBAAoB;;;;;;;;CAa9C,CAAC;AAEH,MAAM,MAAM,8BAA8B,CACxC,YAAY,SAAS,MAAM,GAAG,KAAK,EACnC,QAAQ,SAAS,MAAM,GAAG,oBAAoB,IAC5C,UAAU,CAAC,OAAO,kCAAkC,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;AAElF,KAAK,0BAA0B,CAC7B,IAAI,SAAS,wBAAwB,CAAC,MAAM,CAAC,GAAG,SAAS,GAAG,SAAS,EACrE,QAAQ,SAAS,MAAM,GAAG,oBAAoB,IAC5C,IAAI,SAAS;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACjC,8BAA8B,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,GAAG;IACtE,SAAS,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;IACnC,QAAQ,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;IAClC,QAAQ,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;CACnC,GACD,8BAA8B,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,GAAG;IACtE,SAAS,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;IACtC,QAAQ,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;IACrC,QAAQ,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;CACtC,CAAC;AAEN;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,GACvC,KAAK,CAAC,IAAI,SAAS,wBAAwB,CAAC,MAAM,CAAC,GAAG,SAAS,GAAG,SAAS,EAC3E,QAAQ,SAAS,MAAM,GAAG,oBAAoB,EAE9C,OAAO,IAAI,KACV,0BAA0B,CAAC,IAAI,EAAE,QAAQ,CA4B3C,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,gCAAgC,GAAI,OAAO;IACtD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,KAAG,MAaH,CAAC"}

package/dist/esm/components/auth/models/entities/policy-definition.model.js

@@ -0,0 +1,70 @@
+import { getError } from '@venizia/ignis-helpers/core';
+import { AuthorizationDomainScopes } from '@venizia/ignis-kernel';
+import { integer, jsonb, text } from 'drizzle-orm/pg-core';
+/** Column shape is inferred, never hand-declared, so it can never drift from the `$type<>()` narrowing below. */
+const buildCommonPolicyDefinitionColumns = () => ({
+    metadata: jsonb('metadata').$type(),
+    variant: text('variant').$type().notNull(),
+    subjectType: text('subject_type').notNull(),
+    targetType: text('target_type').notNull(),
+    // `null` IS `ANY_MEMBER`, not "unknown"; the literal is refused by `policyDefinitionDomainShapeCheck`.
+    domainType: text('domain_type'),
+    action: text('action'),
+    effect: text('effect').$type(),
+});
+/**
+ * `Metadata` is a type parameter, not an `opts` field: unlike `extraVariants` there is no runtime
+ * value to infer from, so supplying it means spelling `Opts` too (no partial inference):
+ * `extraPolicyDefinitionColumns<{ idType: 'string' }, IMyMetadata>({ idType: 'string' })`.
+ * Keep `ops` in a custom shape if the app also issues subset grants - `customGrant` writes it.
+ */
+export const extraPolicyDefinitionColumns = (opts) => {
+    const { idType = 'number' } = opts ?? {};
+    const common = buildCommonPolicyDefinitionColumns();
+    switch (idType) {
+        case 'number': {
+            return {
+                ...common,
+                subjectId: integer('subject_id').notNull(),
+                targetId: integer('target_id').notNull(),
+                domainId: integer('domain_id'),
+            };
+        }
+        case 'string': {
+            return {
+                ...common,
+                subjectId: text('subject_id').notNull(),
+                targetId: text('target_id').notNull(),
+                domainId: text('domain_id'),
+            };
+        }
+        default: {
+            throw getError({
+                message: `[extraPolicyDefinitionColumns] Invalid idType | idType: ${idType}`,
+            });
+        }
+    }
+};
+/**
+ * The three legal `(domain_type, domain_id)` pairs, as CHECK predicate TEXT for a migration - text,
+ * not a Drizzle `SQL`, because a column ref in a `sql` template renders schema-qualified, which a
+ * table-level CHECK rejects.
+ *
+ * The `IS NOT NULL` guard on the last branch looks redundant next to `NOT IN` and is not: a NULL
+ * `domain_type` makes `NOT IN` evaluate to NULL, and a CHECK rejects only on FALSE - without it an id
+ * with no type passes.
+ */
+export const policyDefinitionDomainShapeCheck = (opts) => {
+    const { domainTypeColumn = 'domain_type', domainIdColumn = 'domain_id' } = opts ?? {};
+    const { ANY_MEMBER, SYSTEM_WIDE } = AuthorizationDomainScopes;
+    return [
+        `(${domainTypeColumn} IS NULL AND ${domainIdColumn} IS NULL)`,
+        `OR (${domainTypeColumn} = '${SYSTEM_WIDE}' AND ${domainIdColumn} IS NULL)`,
+        `OR (
+      ${domainTypeColumn} IS NOT NULL
+      AND ${domainTypeColumn} NOT IN ('${ANY_MEMBER}', '${SYSTEM_WIDE}')
+      AND ${domainIdColumn} IS NOT NULL
+    )`,
+    ].join('\n');
+};
+//# sourceMappingURL=policy-definition.model.js.map

package/dist/esm/components/auth/models/entities/policy-definition.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-definition.model.js","sourceRoot":"","sources":["../../../../../../src/components/auth/models/entities/policy-definition.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAOvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAoB3D,iHAAiH;AACjH,MAAM,kCAAkC,GAAG,GAGvC,EAAE,CAAC,CAAC;IACN,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,EAAY;IAC7C,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,EAA8C,CAAC,OAAO,EAAE;IAEtF,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IAEzC,uGAAuG;IACvG,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAE/B,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;IACtB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,EAA0B;CACvD,CAAC,CAAC;AAsBH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAI1C,IAAW,EACiC,EAAE;IAC9C,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,kCAAkC,EAAyC,CAAC;IAE3F,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,GAAG,MAAM;gBACT,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;gBAC1C,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;gBACxC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC;aACe,CAAC;QAClD,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,GAAG,MAAM;gBACT,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;gBACvC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;gBACrC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;aACkB,CAAC;QAClD,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,2DAA2D,MAAM,EAAE;aAC7E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,IAGhD,EAAU,EAAE;IACX,MAAM,EAAE,gBAAgB,GAAG,aAAa,EAAE,cAAc,GAAG,WAAW,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IACtF,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,yBAAyB,CAAC;IAE9D,OAAO;QACL,IAAI,gBAAgB,gBAAgB,cAAc,WAAW;QAC7D,OAAO,gBAAgB,OAAO,WAAW,SAAS,cAAc,WAAW;QAC3E;QACI,gBAAgB;YACZ,gBAAgB,aAAa,UAAU,OAAO,WAAW;YACzD,cAAc;MACpB;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC,CAAC","sourcesContent":["import { getError } from '@venizia/ignis-helpers/core';\nimport type {\n  TAuthorizationDecision,\n  TIdSchemaType,\n  TAuthorizationPolicyVariant,\n  TSubsetGrantMetadata,\n} from '@venizia/ignis-kernel';\nimport { AuthorizationDomainScopes } from '@venizia/ignis-kernel';\nimport { integer, jsonb, text } from 'drizzle-orm/pg-core';\n\nexport type TPolicyDefinitionOptions<ExtraVariant extends string = never> = {\n  idType?: TIdSchemaType;\n  /**\n   * App-only edge kinds stored in this same table alongside IGNIS's seven (e.g. `merchant_role`).\n   * `ScopedCasbinAdapter` never selects an undeclared variant - it is purely the consumer's data.\n   * Pass as an inline array literal; the `const` type parameter below infers the literal union\n   * from it without needing `as const`.\n   */\n  extraVariants?: ReadonlyArray<ExtraVariant>;\n};\n\n/** Extracts the app-declared extra variants from `Opts`, or `never` when none were declared. */\ntype TExtraPolicyVariantOf<Opts> = Opts extends {\n  extraVariants?: ReadonlyArray<infer ExtraVariant extends string>;\n}\n  ? ExtraVariant\n  : never;\n\n/** Column shape is inferred, never hand-declared, so it can never drift from the `$type<>()` narrowing below. */\nconst buildCommonPolicyDefinitionColumns = <\n  ExtraVariant extends string = never,\n  Metadata extends object = TSubsetGrantMetadata,\n>() => ({\n  metadata: jsonb('metadata').$type<Metadata>(),\n  variant: text('variant').$type<TAuthorizationPolicyVariant | ExtraVariant>().notNull(),\n\n  subjectType: text('subject_type').notNull(),\n  targetType: text('target_type').notNull(),\n\n  // `null` IS `ANY_MEMBER`, not \"unknown\"; the literal is refused by `policyDefinitionDomainShapeCheck`.\n  domainType: text('domain_type'),\n\n  action: text('action'),\n  effect: text('effect').$type<TAuthorizationDecision>(),\n});\n\nexport type TPolicyDefinitionCommonColumns<\n  ExtraVariant extends string = never,\n  Metadata extends object = TSubsetGrantMetadata,\n> = ReturnType<typeof buildCommonPolicyDefinitionColumns<ExtraVariant, Metadata>>;\n\ntype TPolicyDefinitionColumnDef<\n  Opts extends TPolicyDefinitionOptions<string> | undefined = undefined,\n  Metadata extends object = TSubsetGrantMetadata,\n> = Opts extends { idType: 'string' }\n  ? TPolicyDefinitionCommonColumns<TExtraPolicyVariantOf<Opts>, Metadata> & {\n      subjectId: ReturnType<typeof text>;\n      targetId: ReturnType<typeof text>;\n      domainId: ReturnType<typeof text>;\n    }\n  : TPolicyDefinitionCommonColumns<TExtraPolicyVariantOf<Opts>, Metadata> & {\n      subjectId: ReturnType<typeof integer>;\n      targetId: ReturnType<typeof integer>;\n      domainId: ReturnType<typeof integer>;\n    };\n\n/**\n * `Metadata` is a type parameter, not an `opts` field: unlike `extraVariants` there is no runtime\n * value to infer from, so supplying it means spelling `Opts` too (no partial inference):\n * `extraPolicyDefinitionColumns<{ idType: 'string' }, IMyMetadata>({ idType: 'string' })`.\n * Keep `ops` in a custom shape if the app also issues subset grants - `customGrant` writes it.\n */\nexport const extraPolicyDefinitionColumns = <\n  const Opts extends TPolicyDefinitionOptions<string> | undefined = undefined,\n  Metadata extends object = TSubsetGrantMetadata,\n>(\n  opts?: Opts,\n): TPolicyDefinitionColumnDef<Opts, Metadata> => {\n  const { idType = 'number' } = opts ?? {};\n\n  const common = buildCommonPolicyDefinitionColumns<TExtraPolicyVariantOf<Opts>, Metadata>();\n\n  switch (idType) {\n    case 'number': {\n      return {\n        ...common,\n        subjectId: integer('subject_id').notNull(),\n        targetId: integer('target_id').notNull(),\n        domainId: integer('domain_id'),\n      } as TPolicyDefinitionColumnDef<Opts, Metadata>;\n    }\n    case 'string': {\n      return {\n        ...common,\n        subjectId: text('subject_id').notNull(),\n        targetId: text('target_id').notNull(),\n        domainId: text('domain_id'),\n      } as TPolicyDefinitionColumnDef<Opts, Metadata>;\n    }\n    default: {\n      throw getError({\n        message: `[extraPolicyDefinitionColumns] Invalid idType | idType: ${idType}`,\n      });\n    }\n  }\n};\n\n/**\n * The three legal `(domain_type, domain_id)` pairs, as CHECK predicate TEXT for a migration - text,\n * not a Drizzle `SQL`, because a column ref in a `sql` template renders schema-qualified, which a\n * table-level CHECK rejects.\n *\n * The `IS NOT NULL` guard on the last branch looks redundant next to `NOT IN` and is not: a NULL\n * `domain_type` makes `NOT IN` evaluate to NULL, and a CHECK rejects only on FALSE - without it an id\n * with no type passes.\n */\nexport const policyDefinitionDomainShapeCheck = (opts?: {\n  domainTypeColumn?: string;\n  domainIdColumn?: string;\n}): string => {\n  const { domainTypeColumn = 'domain_type', domainIdColumn = 'domain_id' } = opts ?? {};\n  const { ANY_MEMBER, SYSTEM_WIDE } = AuthorizationDomainScopes;\n\n  return [\n    `(${domainTypeColumn} IS NULL AND ${domainIdColumn} IS NULL)`,\n    `OR (${domainTypeColumn} = '${SYSTEM_WIDE}' AND ${domainIdColumn} IS NULL)`,\n    `OR (\n      ${domainTypeColumn} IS NOT NULL\n      AND ${domainTypeColumn} NOT IN ('${ANY_MEMBER}', '${SYSTEM_WIDE}')\n      AND ${domainIdColumn} IS NOT NULL\n    )`,\n  ].join('\\n');\n};\n"]}

package/dist/esm/components/auth/models/entities/role.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.model.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/models/entities/role.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAGjE,eAAO,MAAM,gBAAgB;;;;;;CAW5B,CAAC"}

package/dist/esm/components/auth/models/entities/role.model.js

@@ -0,0 +1,15 @@
+import { RoleStatuses } from '@venizia/ignis-kernel';
+import { integer, text } from 'drizzle-orm/pg-core';
+export const extraRoleColumns = () => {
+    return {
+        identifier: text('identifier').unique().notNull(),
+        name: text('name').notNull(),
+        description: text('description'),
+        priority: integer('priority').notNull(),
+        status: text('status')
+            .$type()
+            .notNull()
+            .default(RoleStatuses.ACTIVATED),
+    };
+};
+//# sourceMappingURL=role.model.js.map

package/dist/esm/components/auth/models/entities/role.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.model.js","sourceRoot":"","sources":["../../../../../../src/components/auth/models/entities/role.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,EAAE;IACnC,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;QACjD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;QAC5B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC;QAChC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;QACvC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;aACnB,KAAK,EAAoC;aACzC,OAAO,EAAE;aACT,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC;KACnC,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import { RoleStatuses } from '@venizia/ignis-kernel';\nimport type { TConstValue } from '@venizia/ignis-helpers/common';\nimport { integer, text } from 'drizzle-orm/pg-core';\n\nexport const extraRoleColumns = () => {\n  return {\n    identifier: text('identifier').unique().notNull(),\n    name: text('name').notNull(),\n    description: text('description'),\n    priority: integer('priority').notNull(),\n    status: text('status')\n      .$type<TConstValue<typeof RoleStatuses>>()\n      .notNull()\n      .default(RoleStatuses.ACTIVATED),\n  };\n};\n"]}

package/dist/esm/components/auth/models/entities/user.model.d.ts

@@ -0,0 +1,28 @@
+import { UserStatuses, UserTypes } from '@venizia/ignis-kernel';
+import type { TIdSchemaType } from '@venizia/ignis-kernel';
+import type { TConstValue } from '@venizia/ignis-helpers/common';
+export declare const extraUserColumns: (opts?: {
+    idType: TIdSchemaType;
+}) => {
+    realm: import("drizzle-orm").HasDefault<import("drizzle-orm/pg-core").PgTextBuilderInitial<"realm", [string, ...string[]]>>;
+    status: import("drizzle-orm").HasDefault<import("drizzle-orm").NotNull<import("drizzle-orm").$Type<import("drizzle-orm/pg-core").PgTextBuilderInitial<"status", [string, ...string[]]>, TConstValue<typeof UserStatuses>>>>;
+    type: import("drizzle-orm").HasDefault<import("drizzle-orm").NotNull<import("drizzle-orm").$Type<import("drizzle-orm/pg-core").PgTextBuilderInitial<"type", [string, ...string[]]>, TConstValue<typeof UserTypes>>>>;
+    activatedAt: import("drizzle-orm/pg-core").PgCustomColumnBuilder<{
+        name: string;
+        dataType: "custom";
+        columnType: "PgCustomColumn";
+        data: string | import("@venizia/ignis-filter").TIsoTimestamp;
+        driverParam: string;
+        enumValues: undefined;
+    }>;
+    lastLoginAt: import("drizzle-orm/pg-core").PgCustomColumnBuilder<{
+        name: string;
+        dataType: "custom";
+        columnType: "PgCustomColumn";
+        data: string | import("@venizia/ignis-filter").TIsoTimestamp;
+        driverParam: string;
+        enumValues: undefined;
+    }>;
+    parentId: import("drizzle-orm/pg-core").PgIntegerBuilderInitial<"parent_id"> | import("drizzle-orm/pg-core").PgTextBuilderInitial<"parent_id", [string, ...string[]]>;
+};
+//# sourceMappingURL=user.model.d.ts.map

package/dist/esm/components/auth/models/entities/user.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.model.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/models/entities/user.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAGjE,eAAO,MAAM,gBAAgB,GAAI,OAAO;IAAE,MAAM,EAAE,aAAa,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;CAYhE,CAAC"}

package/dist/esm/components/auth/models/entities/user.model.js

@@ -0,0 +1,17 @@
+import { UserStatuses, UserTypes } from '@venizia/ignis-kernel';
+import { isoTimestamp } from '@venizia/ignis-connectors/postgres';
+import { integer, text } from 'drizzle-orm/pg-core';
+export const extraUserColumns = (opts) => {
+    return {
+        realm: text('realm').default(''),
+        status: text('status')
+            .$type()
+            .notNull()
+            .default(UserStatuses.UNKNOWN),
+        type: text('type').$type().notNull().default(UserTypes.SYSTEM),
+        activatedAt: isoTimestamp('activated_at', { withTimezone: true }),
+        lastLoginAt: isoTimestamp('last_login_at', { withTimezone: true }),
+        parentId: opts?.idType === 'string' ? text('parent_id') : integer('parent_id'),
+    };
+};
+//# sourceMappingURL=user.model.js.map

package/dist/esm/components/auth/models/entities/user.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.model.js","sourceRoot":"","sources":["../../../../../../src/components/auth/models/entities/user.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAElE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAgC,EAAE,EAAE;IACnE,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;aACnB,KAAK,EAAoC;aACzC,OAAO,EAAE;aACT,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC;QAChC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAiC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;QAC7F,WAAW,EAAE,YAAY,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACjE,WAAW,EAAE,YAAY,CAAC,eAAe,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAClE,QAAQ,EAAE,IAAI,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;KAC/E,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import { UserStatuses, UserTypes } from '@venizia/ignis-kernel';\nimport type { TIdSchemaType } from '@venizia/ignis-kernel';\nimport { isoTimestamp } from '@venizia/ignis-connectors/postgres';\nimport type { TConstValue } from '@venizia/ignis-helpers/common';\nimport { integer, text } from 'drizzle-orm/pg-core';\n\nexport const extraUserColumns = (opts?: { idType: TIdSchemaType }) => {\n  return {\n    realm: text('realm').default(''),\n    status: text('status')\n      .$type<TConstValue<typeof UserStatuses>>()\n      .notNull()\n      .default(UserStatuses.UNKNOWN),\n    type: text('type').$type<TConstValue<typeof UserTypes>>().notNull().default(UserTypes.SYSTEM),\n    activatedAt: isoTimestamp('activated_at', { withTimezone: true }),\n    lastLoginAt: isoTimestamp('last_login_at', { withTimezone: true }),\n    parentId: opts?.idType === 'string' ? text('parent_id') : integer('parent_id'),\n  };\n};\n"]}

package/dist/esm/components/auth/models/index.d.ts

@@ -0,0 +1,2 @@
+export * from './entities/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/components/auth/models/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/models/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC"}

package/dist/esm/components/auth/models/index.js

@@ -0,0 +1,2 @@
+export * from './entities/index.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/components/auth/models/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/models/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC","sourcesContent":["export * from './entities';\n"]}

package/dist/esm/components/controller/grpc/common/index.d.ts

@@ -0,0 +1,2 @@
+export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/components/controller/grpc/common/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/components/controller/grpc/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC"}

package/dist/esm/components/controller/grpc/common/index.js

@@ -0,0 +1,2 @@
+export * from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/components/controller/grpc/common/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/components/controller/grpc/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC","sourcesContent":["export * from './types';\n"]}

package/dist/esm/components/controller/grpc/common/types.d.ts

@@ -0,0 +1,11 @@
+import type { IConnectRpcModule } from '../../../../base/controllers/grpc/common/types.js';
+export type { IConnectRpcModule };
+export interface IGrpcComponentConfig {
+    interceptors?: unknown[];
+    /** The ConnectRPC peer, for a compiled binary that has no `node_modules` to resolve it from. */
+    module?: IConnectRpcModule;
+}
+export declare class GrpcBindingKeys {
+    static readonly GRPC_COMPONENT_OPTIONS = "@app/grpc/options";
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/esm/components/controller/grpc/common/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/components/controller/grpc/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAG9E,YAAY,EAAE,iBAAiB,EAAE,CAAC;AAElC,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC;IACzB,gGAAgG;IAChG,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED,qBAAa,eAAe;IAC1B,MAAM,CAAC,QAAQ,CAAC,sBAAsB,uBAAuB;CAC9D"}

package/dist/esm/components/controller/grpc/common/types.js

@@ -0,0 +1,4 @@
+export class GrpcBindingKeys {
+    static { this.GRPC_COMPONENT_OPTIONS = '@app/grpc/options'; }
+}
+//# sourceMappingURL=types.js.map

package/dist/esm/components/controller/grpc/common/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/components/controller/grpc/common/types.ts"],"names":[],"mappings":"AAWA,MAAM,OAAO,eAAe;aACV,2BAAsB,GAAG,mBAAmB,CAAC","sourcesContent":["import type { IConnectRpcModule } from '@/base/controllers/grpc/common/types';\n\n// Re-exported so an application can name the type without reaching into the base barrel.\nexport type { IConnectRpcModule };\n\nexport interface IGrpcComponentConfig {\n  interceptors?: unknown[];\n  /** The ConnectRPC peer, for a compiled binary that has no `node_modules` to resolve it from. */\n  module?: IConnectRpcModule;\n}\n\nexport class GrpcBindingKeys {\n  static readonly GRPC_COMPONENT_OPTIONS = '@app/grpc/options';\n}\n"]}

package/dist/esm/components/controller/grpc/grpc.component.d.ts

@@ -0,0 +1,8 @@
+import type { BaseApplication } from '../../../base/applications/index.js';
+import { BaseComponent } from '@venizia/ignis-kernel';
+export declare class GrpcComponent extends BaseComponent {
+    private application;
+    constructor(application: BaseApplication);
+    binding(): Promise<void>;
+}
+//# sourceMappingURL=grpc.component.d.ts.map

package/dist/esm/components/controller/grpc/grpc.component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grpc.component.d.ts","sourceRoot":"","sources":["../../../../../src/components/controller/grpc/grpc.component.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAYtD,qBAAa,aAAc,SAAQ,aAAa;IAClC,OAAO,CAAC,WAAW;gBAAX,WAAW,EAAE,eAAe;IAYjC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CA+ExC"}