@venizia/ignis 0.4.3 → 0.4.5

package/dist/components/auth/authorize/role-managers/membership.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"membership.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/role-managers/membership.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAEzC;;sEAEsE;AACtE,qBAAa,qBAAsB,SAAQ,eAAgB,YAAW,WAAW;IAC/E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAGvB;IACF,OAAO,CAAC,WAAW,CAGf;gBAEQ,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;KAAE;IAKlD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAKtB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASpD,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7D,kNAAkN;IAClN,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO;IA2BpD,uHAAuH;IACjH,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAWhD"}

package/dist/components/auth/authorize/role-managers/membership.js

@@ -1,69 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MembershipRoleManager = void 0;
-const base_1 = require("./base");
-/** `g2` axis (`g2(r.sub, r.dom)`): membership holds when the user joined the request domain or any
- * ancestor of it, walking the shared per-request domain-hierarchy overlay. Memberships are
- * per-principal and rebuilt every request, so `clear()` wipes all. */
-class MembershipRoleManager extends base_1.BaseRoleManager {
-    constructor(opts) {
-        super({ scope: MembershipRoleManager.name });
-        this.memberships = new Map();
-        this.overlay = opts.overlay;
-    }
-    async clear() {
-        this.memberships = new Map();
-        this.graphReported = false;
-    }
-    async addLink(user, domain) {
-        const existing = this.memberships.get(user);
-        if (existing) {
-            existing.add(domain);
-        }
-        else {
-            this.memberships.set(user, new Set([domain]));
-        }
-    }
-    async deleteLink(user, domain) {
-        this.memberships.get(user)?.delete(domain);
-    }
-    /** True when `name1` (user) joined `name2` (request domain) itself, or any ancestor of it. Walks UP from the request domain only - walking down from every joined domain would fan out over the whole subtree. */
-    syncedHasLink(name1, name2) {
-        this.reportGraphOnce(() => {
-            const { nodeCount, edgeCount } = MembershipRoleManager.overlayStats(this.overlay);
-            return {
-                message: 'membership role manager initialized | nodes: %d | edges: %d',
-                args: [nodeCount, edgeCount],
-            };
-        });
-        const joined = this.memberships.get(name1);
-        if (!joined || joined.size === 0) {
-            return false;
-        }
-        const ancestors = MembershipRoleManager.collectAncestors({
-            overlay: this.overlay,
-            node: name2,
-        });
-        for (const ancestor of ancestors) {
-            if (joined.has(ancestor)) {
-                return true;
-            }
-        }
-        return false;
-    }
-    /** Local membership state only, not the shared graph - correct for hasLink, incomplete for casbin's management API. */
-    async getRoles(name) {
-        return [...(this.memberships.get(name) ?? [])];
-    }
-    async getUsers(name) {
-        const users = [];
-        for (const [user, domains] of this.memberships) {
-            if (domains.has(name)) {
-                users.push(user);
-            }
-        }
-        return users;
-    }
-}
-exports.MembershipRoleManager = MembershipRoleManager;
-//# sourceMappingURL=membership.js.map

package/dist/components/auth/authorize/role-managers/membership.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"membership.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/role-managers/membership.ts"],"names":[],"mappings":";;;AACA,iCAAyC;AAEzC;;sEAEsE;AACtE,MAAa,qBAAsB,SAAQ,sBAAe;IAUxD,YAAY,IAA4C;QACtD,KAAK,CAAC,EAAE,KAAK,EAAE,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC;QANvC,gBAAW,GAAG,IAAI,GAAG,EAG1B,CAAC;QAIF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;QAClD,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,MAAc;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,CAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,MAAc;QAC3C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,kNAAkN;IAClN,aAAa,CAAC,KAAa,EAAE,KAAa;QACxC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE;YACxB,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,qBAAqB,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClF,OAAO;gBACL,OAAO,EAAE,6DAA6D;gBACtE,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;aAC7B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAG,qBAAqB,CAAC,gBAAgB,CAAC;YACvD,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,uHAAuH;IACvH,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AA7ED,sDA6EC","sourcesContent":["import type { RoleManager } from 'casbin';\nimport { BaseRoleManager } from './base';\n\n/** `g2` axis (`g2(r.sub, r.dom)`): membership holds when the user joined the request domain or any\n * ancestor of it, walking the shared per-request domain-hierarchy overlay. Memberships are\n * per-principal and rebuilt every request, so `clear()` wipes all. */\nexport class MembershipRoleManager extends BaseRoleManager implements RoleManager {\n  private readonly overlay?: Map<\n    string, // child domain\n    Set<string> // set of parent domains\n  >;\n  private memberships = new Map<\n    string, // user\n    Set<string> // set of joined domains\n  >();\n\n  constructor(opts: { overlay?: Map<string, Set<string>> }) {\n    super({ scope: MembershipRoleManager.name });\n    this.overlay = opts.overlay;\n  }\n\n  async clear(): Promise<void> {\n    this.memberships = new Map<string, Set<string>>();\n    this.graphReported = false;\n  }\n\n  async addLink(user: string, domain: string): Promise<void> {\n    const existing = this.memberships.get(user);\n    if (existing) {\n      existing.add(domain);\n    } else {\n      this.memberships.set(user, new Set<string>([domain]));\n    }\n  }\n\n  async deleteLink(user: string, domain: string): Promise<void> {\n    this.memberships.get(user)?.delete(domain);\n  }\n\n  /** True when `name1` (user) joined `name2` (request domain) itself, or any ancestor of it. Walks UP from the request domain only - walking down from every joined domain would fan out over the whole subtree. */\n  syncedHasLink(name1: string, name2: string): boolean {\n    this.reportGraphOnce(() => {\n      const { nodeCount, edgeCount } = MembershipRoleManager.overlayStats(this.overlay);\n      return {\n        message: 'membership role manager initialized | nodes: %d | edges: %d',\n        args: [nodeCount, edgeCount],\n      };\n    });\n\n    const joined = this.memberships.get(name1);\n    if (!joined || joined.size === 0) {\n      return false;\n    }\n\n    const ancestors = MembershipRoleManager.collectAncestors({\n      overlay: this.overlay,\n      node: name2,\n    });\n    for (const ancestor of ancestors) {\n      if (joined.has(ancestor)) {\n        return true;\n      }\n    }\n\n    return false;\n  }\n\n  /** Local membership state only, not the shared graph - correct for hasLink, incomplete for casbin's management API. */\n  async getRoles(name: string): Promise<string[]> {\n    return [...(this.memberships.get(name) ?? [])];\n  }\n\n  async getUsers(name: string): Promise<string[]> {\n    const users: string[] = [];\n\n    for (const [user, domains] of this.memberships) {\n      if (domains.has(name)) {\n        users.push(user);\n      }\n    }\n\n    return users;\n  }\n}\n"]}

package/dist/components/auth/authorize/role-managers/resource.d.ts

@@ -1,16 +0,0 @@
-import type { RoleManager } from 'casbin';
-import { BaseRoleManager } from './base';
-/** Resource-axis (`g4`) role manager: `addMatchingFunc` would set `hasPattern` and disable DefaultRoleManager's O(1) fast path, so prefix ancestors are walked manually; `addLink` must stay idempotent because `buildRoleLinks` re-adds every edge once per request. */
-export declare class ResourceRoleManager extends BaseRoleManager implements RoleManager {
-    private parents;
-    constructor();
-    clear(): Promise<void>;
-    addLink(child: string, parent: string): Promise<void>;
-    deleteLink(child: string, parent: string): Promise<void>;
-    syncedHasLink(name1: string, name2: string): boolean;
-    getRoles(name: string): Promise<string[]>;
-    getUsers(name: string): Promise<string[]>;
-    /** All stored prefix ancestors of a dotted code (`a.b.c` -> `a.b` -> `a`), not only the deepest, plus a literal stored `'*'` node - `objectMatch(anything, '*')` is always true, so a `g4` edge whose child is `'*'` must stay reachable from every request object. */
-    private collectStoredAncestors;
-}
-//# sourceMappingURL=resource.d.ts.map

package/dist/components/auth/authorize/role-managers/resource.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"resource.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/role-managers/resource.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAEzC,yQAAyQ;AACzQ,qBAAa,mBAAoB,SAAQ,eAAgB,YAAW,WAAW;IAC7E,OAAO,CAAC,OAAO,CAGX;;IAME,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAKtB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcrD,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9D,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO;IA8C9C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAY/C,uQAAuQ;IACvQ,OAAO,CAAC,sBAAsB;CA0B/B"}

package/dist/components/auth/authorize/role-managers/resource.js

@@ -1,103 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ResourceRoleManager = void 0;
-const base_1 = require("./base");
-/** Resource-axis (`g4`) role manager: `addMatchingFunc` would set `hasPattern` and disable DefaultRoleManager's O(1) fast path, so prefix ancestors are walked manually; `addLink` must stay idempotent because `buildRoleLinks` re-adds every edge once per request. */
-class ResourceRoleManager extends base_1.BaseRoleManager {
-    constructor() {
-        super({ scope: ResourceRoleManager.name });
-        this.parents = new Map();
-    }
-    async clear() {
-        this.parents = new Map();
-        this.graphReported = false;
-    }
-    async addLink(child, parent) {
-        const existing = this.parents.get(child);
-        if (existing) {
-            existing.add(parent);
-        }
-        else {
-            this.parents.set(child, new Set([parent]));
-        }
-        if (!this.parents.has(parent)) {
-            this.parents.set(parent, new Set());
-        }
-    }
-    async deleteLink(child, parent) {
-        this.parents.get(child)?.delete(parent);
-    }
-    syncedHasLink(name1, name2) {
-        this.reportGraphOnce(() => {
-            const nodeCount = this.parents.size;
-            const edgeCount = Array.from(this.parents.values()).reduce((sum, set) => sum + set.size, 0);
-            return {
-                message: 'resource-role initialized | nodes: %d | edges: %d',
-                args: [nodeCount, edgeCount],
-            };
-        });
-        if (name1 === name2) {
-            return true;
-        }
-        const seeds = this.collectStoredAncestors({ name: name1 });
-        if (seeds.length === 0) {
-            return false;
-        }
-        const visited = new Set();
-        const queue = [...seeds];
-        // Index cursor rather than shift(): shift() is O(n) and would make the walk quadratic.
-        let head = 0;
-        while (head < queue.length) {
-            const current = queue[head];
-            head += 1;
-            if (current === name2) {
-                return true;
-            }
-            if (visited.has(current)) {
-                continue;
-            }
-            visited.add(current);
-            const parents = this.parents.get(current);
-            if (parents) {
-                queue.push(...parents);
-            }
-        }
-        return false;
-    }
-    async getRoles(name) {
-        return [...(this.parents.get(name) ?? [])];
-    }
-    async getUsers(name) {
-        const users = [];
-        for (const [child, parents] of this.parents) {
-            if (parents.has(name)) {
-                users.push(child);
-            }
-        }
-        return users;
-    }
-    /** All stored prefix ancestors of a dotted code (`a.b.c` -> `a.b` -> `a`), not only the deepest, plus a literal stored `'*'` node - `objectMatch(anything, '*')` is always true, so a `g4` edge whose child is `'*'` must stay reachable from every request object. */
-    collectStoredAncestors(opts) {
-        const ancestors = [];
-        if (this.parents.has(opts.name)) {
-            ancestors.push(opts.name);
-        }
-        let current = opts.name;
-        for (;;) {
-            const index = current.lastIndexOf('.');
-            if (index === -1) {
-                break;
-            }
-            current = current.slice(0, index);
-            if (this.parents.has(current)) {
-                ancestors.push(current);
-            }
-        }
-        if (this.parents.has('*') && !ancestors.includes('*')) {
-            ancestors.push('*');
-        }
-        return ancestors;
-    }
-}
-exports.ResourceRoleManager = ResourceRoleManager;
-//# sourceMappingURL=resource.js.map

package/dist/components/auth/authorize/role-managers/resource.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resource.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/role-managers/resource.ts"],"names":[],"mappings":";;;AACA,iCAAyC;AAEzC,yQAAyQ;AACzQ,MAAa,mBAAoB,SAAQ,sBAAe;IAMtD;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC;QANrC,YAAO,GAAG,IAAI,GAAG,EAGtB,CAAC;IAIJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;QAC9C,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,MAAc;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEzC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,GAAG,CAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,EAAU,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAa,EAAE,MAAc;QAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,aAAa,CAAC,KAAa,EAAE,KAAa;QACxC,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE;YACxB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACpC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC5F,OAAO;gBACL,OAAO,EAAE,mDAAmD;gBAC5D,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;aAC7B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,KAAK,GAAa,CAAC,GAAG,KAAK,CAAC,CAAC;QAEnC,uFAAuF;QACvF,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,OAAO,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,CAAC;YAEV,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;gBACtB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAErB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,uQAAuQ;IAC/P,sBAAsB,CAAC,IAAsB;QACnD,MAAM,SAAS,GAAa,EAAE,CAAC;QAE/B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;QACxB,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,MAAM;YACR,CAAC;YAED,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AA1HD,kDA0HC","sourcesContent":["import type { RoleManager } from 'casbin';\nimport { BaseRoleManager } from './base';\n\n/** Resource-axis (`g4`) role manager: `addMatchingFunc` would set `hasPattern` and disable DefaultRoleManager's O(1) fast path, so prefix ancestors are walked manually; `addLink` must stay idempotent because `buildRoleLinks` re-adds every edge once per request. */\nexport class ResourceRoleManager extends BaseRoleManager implements RoleManager {\n  private parents = new Map<\n    string, // Child module\n    Set<string> // Set of Parent modules\n  >();\n\n  constructor() {\n    super({ scope: ResourceRoleManager.name });\n  }\n\n  async clear(): Promise<void> {\n    this.parents = new Map<string, Set<string>>();\n    this.graphReported = false;\n  }\n\n  async addLink(child: string, parent: string): Promise<void> {\n    const existing = this.parents.get(child);\n\n    if (existing) {\n      existing.add(parent);\n    } else {\n      this.parents.set(child, new Set<string>([parent]));\n    }\n\n    if (!this.parents.has(parent)) {\n      this.parents.set(parent, new Set<string>());\n    }\n  }\n\n  async deleteLink(child: string, parent: string): Promise<void> {\n    this.parents.get(child)?.delete(parent);\n  }\n\n  syncedHasLink(name1: string, name2: string): boolean {\n    this.reportGraphOnce(() => {\n      const nodeCount = this.parents.size;\n      const edgeCount = Array.from(this.parents.values()).reduce((sum, set) => sum + set.size, 0);\n      return {\n        message: 'resource-role initialized | nodes: %d | edges: %d',\n        args: [nodeCount, edgeCount],\n      };\n    });\n\n    if (name1 === name2) {\n      return true;\n    }\n\n    const seeds = this.collectStoredAncestors({ name: name1 });\n    if (seeds.length === 0) {\n      return false;\n    }\n\n    const visited = new Set<string>();\n    const queue: string[] = [...seeds];\n\n    // Index cursor rather than shift(): shift() is O(n) and would make the walk quadratic.\n    let head = 0;\n    while (head < queue.length) {\n      const current = queue[head];\n      head += 1;\n\n      if (current === name2) {\n        return true;\n      }\n\n      if (visited.has(current)) {\n        continue;\n      }\n      visited.add(current);\n\n      const parents = this.parents.get(current);\n      if (parents) {\n        queue.push(...parents);\n      }\n    }\n\n    return false;\n  }\n\n  async getRoles(name: string): Promise<string[]> {\n    return [...(this.parents.get(name) ?? [])];\n  }\n\n  async getUsers(name: string): Promise<string[]> {\n    const users: string[] = [];\n\n    for (const [child, parents] of this.parents) {\n      if (parents.has(name)) {\n        users.push(child);\n      }\n    }\n\n    return users;\n  }\n\n  /** All stored prefix ancestors of a dotted code (`a.b.c` -> `a.b` -> `a`), not only the deepest, plus a literal stored `'*'` node - `objectMatch(anything, '*')` is always true, so a `g4` edge whose child is `'*'` must stay reachable from every request object. */\n  private collectStoredAncestors(opts: { name: string }): string[] {\n    const ancestors: string[] = [];\n\n    if (this.parents.has(opts.name)) {\n      ancestors.push(opts.name);\n    }\n\n    let current = opts.name;\n    for (;;) {\n      const index = current.lastIndexOf('.');\n      if (index === -1) {\n        break;\n      }\n\n      current = current.slice(0, index);\n      if (this.parents.has(current)) {\n        ancestors.push(current);\n      }\n    }\n\n    if (this.parents.has('*') && !ancestors.includes('*')) {\n      ancestors.push('*');\n    }\n\n    return ancestors;\n  }\n}\n"]}

package/dist/components/auth/index.d.ts

@@ -1,5 +0,0 @@
-export * from '@venizia/ignis-kernel';
-export * from './authenticate';
-export * from './authorize';
-export * from './models';
-//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/auth/index.ts"],"names":[],"mappings":"AAEA,cAAc,uBAAuB,CAAC;AAEtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC"}

package/dist/components/auth/index.js

@@ -1,23 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-// `base` and `context-variables` moved to the kernel in full; `models/requests` moved too (see
-// `./models/index.ts`). Re-exported here so `@/components/auth` keeps resolving.
-__exportStar(require("@venizia/ignis-kernel"), exports);
-__exportStar(require("./authenticate"), exports);
-__exportStar(require("./authorize"), exports);
-__exportStar(require("./models"), exports);
-//# sourceMappingURL=index.js.map

package/dist/components/auth/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/components/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+FAA+F;AAC/F,iFAAiF;AACjF,wDAAsC;AAEtC,iDAA+B;AAC/B,8CAA4B;AAC5B,2CAAyB","sourcesContent":["// `base` and `context-variables` moved to the kernel in full; `models/requests` moved too (see\n// `./models/index.ts`). Re-exported here so `@/components/auth` keeps resolving.\nexport * from '@venizia/ignis-kernel';\n\nexport * from './authenticate';\nexport * from './authorize';\nexport * from './models';\n"]}

package/dist/components/auth/models/entities/index.d.ts

@@ -1,5 +0,0 @@
-export * from './permission.model';
-export * from './policy-definition.model';
-export * from './role.model';
-export * from './user.model';
-//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/models/entities/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC"}

package/dist/components/auth/models/entities/index.js

@@ -1,21 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./permission.model"), exports);
-__exportStar(require("./policy-definition.model"), exports);
-__exportStar(require("./role.model"), exports);
-__exportStar(require("./user.model"), exports);
-//# sourceMappingURL=index.js.map

package/dist/components/auth/models/entities/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,4DAA0C;AAC1C,+CAA6B;AAC7B,+CAA6B","sourcesContent":["export * from './permission.model';\nexport * from './policy-definition.model';\nexport * from './role.model';\nexport * from './user.model';\n"]}

package/dist/components/auth/models/entities/permission.model.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permission.model.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/permission.model.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAGzF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,KAAK,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACpE,WAAW,EAAE,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;CAClE,CAAC;AAEF,KAAK,oBAAoB,CAAC,IAAI,SAAS,kBAAkB,GAAG,SAAS,GAAG,SAAS,IAAI,IAAI,SAAS;IAChG,MAAM,EAAE,MAAM,MAAM,CAAC;CACtB,GACG,MAAM,SAAS,QAAQ,GACrB,wBAAwB,GAAG;IACzB,QAAQ,EAAE,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;CAC/D,GACD,wBAAwB,GAAG;IACzB,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;CAC3C,GACH,wBAAwB,GAAG;IACzB,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;CAC3C,CAAC;AAEN,eAAO,MAAM,sBAAsB,GAAI,IAAI,SAAS,kBAAkB,GAAG,SAAS,EAChF,OAAO,IAAI,KACV,oBAAoB,CAAC,IAAI,CAkC3B,CAAC"}

package/dist/components/auth/models/entities/permission.model.js

@@ -1,41 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.extraPermissionColumns = void 0;
-const core_1 = require("@venizia/ignis-helpers/core");
-const pg_core_1 = require("drizzle-orm/pg-core");
-const extraPermissionColumns = (opts) => {
-    const { idType = 'number' } = opts ?? {};
-    switch (idType) {
-        case 'number': {
-            return {
-                code: (0, pg_core_1.text)('code').unique().notNull(),
-                name: (0, pg_core_1.text)('name').notNull(),
-                subject: (0, pg_core_1.text)('subject').notNull(),
-                method: (0, pg_core_1.text)('method').notNull(),
-                action: (0, pg_core_1.text)('action').notNull(),
-                scope: (0, pg_core_1.text)('scope').notNull(),
-                description: (0, pg_core_1.text)('description'),
-                parentId: (0, pg_core_1.integer)('parent_id'),
-            };
-        }
-        case 'string': {
-            return {
-                code: (0, pg_core_1.text)('code').unique().notNull(),
-                name: (0, pg_core_1.text)('name').notNull(),
-                subject: (0, pg_core_1.text)('subject').notNull(),
-                method: (0, pg_core_1.text)('method').notNull(),
-                action: (0, pg_core_1.text)('action').notNull(),
-                scope: (0, pg_core_1.text)('scope').notNull(),
-                description: (0, pg_core_1.text)('description'),
-                parentId: (0, pg_core_1.text)('parent_id'),
-            };
-        }
-        default: {
-            throw (0, core_1.getError)({
-                message: `[extraPermissionColumns] Invalid idType | idType: ${idType}`,
-            });
-        }
-    }
-};
-exports.extraPermissionColumns = extraPermissionColumns;
-//# sourceMappingURL=permission.model.js.map

package/dist/components/auth/models/entities/permission.model.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permission.model.js","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/permission.model.ts"],"names":[],"mappings":";;;AAAA,sDAAuD;AAIvD,iDAAoD;AA8B7C,MAAM,sBAAsB,GAAG,CACpC,IAAW,EACiB,EAAE;IAC9B,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IAEzC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,IAAI,EAAE,IAAA,cAAI,EAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;gBACrC,IAAI,EAAE,IAAA,cAAI,EAAC,MAAM,CAAC,CAAC,OAAO,EAAE;gBAC5B,OAAO,EAAE,IAAA,cAAI,EAAC,SAAS,CAAC,CAAC,OAAO,EAAE;gBAClC,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;gBAChC,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;gBAChC,KAAK,EAAE,IAAA,cAAI,EAAC,OAAO,CAAC,CAAC,OAAO,EAAE;gBAC9B,WAAW,EAAE,IAAA,cAAI,EAAC,aAAa,CAAC;gBAChC,QAAQ,EAAE,IAAA,iBAAO,EAAC,WAAW,CAAC;aACD,CAAC;QAClC,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,IAAI,EAAE,IAAA,cAAI,EAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;gBACrC,IAAI,EAAE,IAAA,cAAI,EAAC,MAAM,CAAC,CAAC,OAAO,EAAE;gBAC5B,OAAO,EAAE,IAAA,cAAI,EAAC,SAAS,CAAC,CAAC,OAAO,EAAE;gBAClC,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;gBAChC,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;gBAChC,KAAK,EAAE,IAAA,cAAI,EAAC,OAAO,CAAC,CAAC,OAAO,EAAE;gBAC9B,WAAW,EAAE,IAAA,cAAI,EAAC,aAAa,CAAC;gBAChC,QAAQ,EAAE,IAAA,cAAI,EAAC,WAAW,CAAC;aACE,CAAC;QAClC,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,qDAAqD,MAAM,EAAE;aACvE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AApCW,QAAA,sBAAsB,0BAoCjC","sourcesContent":["import { getError } from '@venizia/ignis-helpers/core';\nimport type { TIdSchemaType } from '@venizia/ignis-kernel';\nimport type { NotNull } from 'drizzle-orm';\nimport type { PgIntegerBuilderInitial, PgTextBuilderInitial } from 'drizzle-orm/pg-core';\nimport { integer, text } from 'drizzle-orm/pg-core';\n\nexport type TPermissionOptions = {\n  idType?: TIdSchemaType;\n};\n\nexport type TPermissionCommonColumns = {\n  code: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;\n  name: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;\n  method: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;\n  subject: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;\n  action: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;\n  scope: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;\n  description: PgTextBuilderInitial<string, [string, ...string[]]>;\n};\n\ntype TPermissionColumnDef<Opts extends TPermissionOptions | undefined = undefined> = Opts extends {\n  idType: infer IdType;\n}\n  ? IdType extends 'string'\n    ? TPermissionCommonColumns & {\n        parentId: PgTextBuilderInitial<string, [string, ...string[]]>;\n      }\n    : TPermissionCommonColumns & {\n        parentId: PgIntegerBuilderInitial<string>;\n      }\n  : TPermissionCommonColumns & {\n      parentId: PgIntegerBuilderInitial<string>;\n    };\n\nexport const extraPermissionColumns = <Opts extends TPermissionOptions | undefined>(\n  opts?: Opts,\n): TPermissionColumnDef<Opts> => {\n  const { idType = 'number' } = opts ?? {};\n\n  switch (idType) {\n    case 'number': {\n      return {\n        code: text('code').unique().notNull(),\n        name: text('name').notNull(),\n        subject: text('subject').notNull(),\n        method: text('method').notNull(),\n        action: text('action').notNull(),\n        scope: text('scope').notNull(),\n        description: text('description'),\n        parentId: integer('parent_id'),\n      } as TPermissionColumnDef<Opts>;\n    }\n    case 'string': {\n      return {\n        code: text('code').unique().notNull(),\n        name: text('name').notNull(),\n        subject: text('subject').notNull(),\n        method: text('method').notNull(),\n        action: text('action').notNull(),\n        scope: text('scope').notNull(),\n        description: text('description'),\n        parentId: text('parent_id'),\n      } as TPermissionColumnDef<Opts>;\n    }\n    default: {\n      throw getError({\n        message: `[extraPermissionColumns] Invalid idType | idType: ${idType}`,\n      });\n    }\n  }\n};\n"]}

package/dist/components/auth/models/entities/policy-definition.model.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"policy-definition.model.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/policy-definition.model.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,sBAAsB,EACtB,aAAa,EAEb,oBAAoB,EACrB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,OAAO,EAAS,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,MAAM,wBAAwB,CAAC,YAAY,SAAS,MAAM,GAAG,KAAK,IAAI;IAC1E,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;CAC7C,CAAC;AAEF,gGAAgG;AAChG,KAAK,qBAAqB,CAAC,IAAI,IAAI,IAAI,SAAS;IAC9C,aAAa,CAAC,EAAE,aAAa,CAAC,MAAM,YAAY,SAAS,MAAM,CAAC,CAAC;CAClE,GACG,YAAY,GACZ,KAAK,CAAC;AAEV,iHAAiH;AACjH,QAAA,MAAM,kCAAkC,GACtC,YAAY,SAAS,MAAM,GAAG,KAAK,EACnC,QAAQ,SAAS,MAAM,GAAG,oBAAoB;;;;;;;;CAa9C,CAAC;AAEH,MAAM,MAAM,8BAA8B,CACxC,YAAY,SAAS,MAAM,GAAG,KAAK,EACnC,QAAQ,SAAS,MAAM,GAAG,oBAAoB,IAC5C,UAAU,CAAC,OAAO,kCAAkC,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;AAElF,KAAK,0BAA0B,CAC7B,IAAI,SAAS,wBAAwB,CAAC,MAAM,CAAC,GAAG,SAAS,GAAG,SAAS,EACrE,QAAQ,SAAS,MAAM,GAAG,oBAAoB,IAC5C,IAAI,SAAS;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACjC,8BAA8B,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,GAAG;IACtE,SAAS,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;IACnC,QAAQ,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;IAClC,QAAQ,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;CACnC,GACD,8BAA8B,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,GAAG;IACtE,SAAS,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;IACtC,QAAQ,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;IACrC,QAAQ,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;CACtC,CAAC;AAEN;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,GACvC,KAAK,CAAC,IAAI,SAAS,wBAAwB,CAAC,MAAM,CAAC,GAAG,SAAS,GAAG,SAAS,EAC3E,QAAQ,SAAS,MAAM,GAAG,oBAAoB,EAE9C,OAAO,IAAI,KACV,0BAA0B,CAAC,IAAI,EAAE,QAAQ,CA4B3C,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,gCAAgC,GAAI,OAAO;IACtD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,KAAG,MAaH,CAAC"}

package/dist/components/auth/models/entities/policy-definition.model.js

@@ -1,75 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.policyDefinitionDomainShapeCheck = exports.extraPolicyDefinitionColumns = void 0;
-const core_1 = require("@venizia/ignis-helpers/core");
-const ignis_kernel_1 = require("@venizia/ignis-kernel");
-const pg_core_1 = require("drizzle-orm/pg-core");
-/** Column shape is inferred, never hand-declared, so it can never drift from the `$type<>()` narrowing below. */
-const buildCommonPolicyDefinitionColumns = () => ({
-    metadata: (0, pg_core_1.jsonb)('metadata').$type(),
-    variant: (0, pg_core_1.text)('variant').$type().notNull(),
-    subjectType: (0, pg_core_1.text)('subject_type').notNull(),
-    targetType: (0, pg_core_1.text)('target_type').notNull(),
-    // `null` IS `ANY_MEMBER`, not "unknown"; the literal is refused by `policyDefinitionDomainShapeCheck`.
-    domainType: (0, pg_core_1.text)('domain_type'),
-    action: (0, pg_core_1.text)('action'),
-    effect: (0, pg_core_1.text)('effect').$type(),
-});
-/**
- * `Metadata` is a type parameter, not an `opts` field: unlike `extraVariants` there is no runtime
- * value to infer from, so supplying it means spelling `Opts` too (no partial inference):
- * `extraPolicyDefinitionColumns<{ idType: 'string' }, IMyMetadata>({ idType: 'string' })`.
- * Keep `ops` in a custom shape if the app also issues subset grants - `customGrant` writes it.
- */
-const extraPolicyDefinitionColumns = (opts) => {
-    const { idType = 'number' } = opts ?? {};
-    const common = buildCommonPolicyDefinitionColumns();
-    switch (idType) {
-        case 'number': {
-            return {
-                ...common,
-                subjectId: (0, pg_core_1.integer)('subject_id').notNull(),
-                targetId: (0, pg_core_1.integer)('target_id').notNull(),
-                domainId: (0, pg_core_1.integer)('domain_id'),
-            };
-        }
-        case 'string': {
-            return {
-                ...common,
-                subjectId: (0, pg_core_1.text)('subject_id').notNull(),
-                targetId: (0, pg_core_1.text)('target_id').notNull(),
-                domainId: (0, pg_core_1.text)('domain_id'),
-            };
-        }
-        default: {
-            throw (0, core_1.getError)({
-                message: `[extraPolicyDefinitionColumns] Invalid idType | idType: ${idType}`,
-            });
-        }
-    }
-};
-exports.extraPolicyDefinitionColumns = extraPolicyDefinitionColumns;
-/**
- * The three legal `(domain_type, domain_id)` pairs, as CHECK predicate TEXT for a migration - text,
- * not a Drizzle `SQL`, because a column ref in a `sql` template renders schema-qualified, which a
- * table-level CHECK rejects.
- *
- * The `IS NOT NULL` guard on the last branch looks redundant next to `NOT IN` and is not: a NULL
- * `domain_type` makes `NOT IN` evaluate to NULL, and a CHECK rejects only on FALSE - without it an id
- * with no type passes.
- */
-const policyDefinitionDomainShapeCheck = (opts) => {
-    const { domainTypeColumn = 'domain_type', domainIdColumn = 'domain_id' } = opts ?? {};
-    const { ANY_MEMBER, SYSTEM_WIDE } = ignis_kernel_1.AuthorizationDomainScopes;
-    return [
-        `(${domainTypeColumn} IS NULL AND ${domainIdColumn} IS NULL)`,
-        `OR (${domainTypeColumn} = '${SYSTEM_WIDE}' AND ${domainIdColumn} IS NULL)`,
-        `OR (
-      ${domainTypeColumn} IS NOT NULL
-      AND ${domainTypeColumn} NOT IN ('${ANY_MEMBER}', '${SYSTEM_WIDE}')
-      AND ${domainIdColumn} IS NOT NULL
-    )`,
-    ].join('\n');
-};
-exports.policyDefinitionDomainShapeCheck = policyDefinitionDomainShapeCheck;
-//# sourceMappingURL=policy-definition.model.js.map

package/dist/components/auth/models/entities/policy-definition.model.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"policy-definition.model.js","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/policy-definition.model.ts"],"names":[],"mappings":";;;AAAA,sDAAuD;AAOvD,wDAAkE;AAClE,iDAA2D;AAoB3D,iHAAiH;AACjH,MAAM,kCAAkC,GAAG,GAGvC,EAAE,CAAC,CAAC;IACN,QAAQ,EAAE,IAAA,eAAK,EAAC,UAAU,CAAC,CAAC,KAAK,EAAY;IAC7C,OAAO,EAAE,IAAA,cAAI,EAAC,SAAS,CAAC,CAAC,KAAK,EAA8C,CAAC,OAAO,EAAE;IAEtF,WAAW,EAAE,IAAA,cAAI,EAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAC3C,UAAU,EAAE,IAAA,cAAI,EAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IAEzC,uGAAuG;IACvG,UAAU,EAAE,IAAA,cAAI,EAAC,aAAa,CAAC;IAE/B,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC;IACtB,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,KAAK,EAA0B;CACvD,CAAC,CAAC;AAsBH;;;;;GAKG;AACI,MAAM,4BAA4B,GAAG,CAI1C,IAAW,EACiC,EAAE;IAC9C,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,kCAAkC,EAAyC,CAAC;IAE3F,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,GAAG,MAAM;gBACT,SAAS,EAAE,IAAA,iBAAO,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE;gBAC1C,QAAQ,EAAE,IAAA,iBAAO,EAAC,WAAW,CAAC,CAAC,OAAO,EAAE;gBACxC,QAAQ,EAAE,IAAA,iBAAO,EAAC,WAAW,CAAC;aACe,CAAC;QAClD,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,GAAG,MAAM;gBACT,SAAS,EAAE,IAAA,cAAI,EAAC,YAAY,CAAC,CAAC,OAAO,EAAE;gBACvC,QAAQ,EAAE,IAAA,cAAI,EAAC,WAAW,CAAC,CAAC,OAAO,EAAE;gBACrC,QAAQ,EAAE,IAAA,cAAI,EAAC,WAAW,CAAC;aACkB,CAAC;QAClD,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,IAAA,eAAQ,EAAC;gBACb,OAAO,EAAE,2DAA2D,MAAM,EAAE;aAC7E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAjCW,QAAA,4BAA4B,gCAiCvC;AAEF;;;;;;;;GAQG;AACI,MAAM,gCAAgC,GAAG,CAAC,IAGhD,EAAU,EAAE;IACX,MAAM,EAAE,gBAAgB,GAAG,aAAa,EAAE,cAAc,GAAG,WAAW,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IACtF,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,wCAAyB,CAAC;IAE9D,OAAO;QACL,IAAI,gBAAgB,gBAAgB,cAAc,WAAW;QAC7D,OAAO,gBAAgB,OAAO,WAAW,SAAS,cAAc,WAAW;QAC3E;QACI,gBAAgB;YACZ,gBAAgB,aAAa,UAAU,OAAO,WAAW;YACzD,cAAc;MACpB;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC,CAAC;AAhBW,QAAA,gCAAgC,oCAgB3C","sourcesContent":["import { getError } from '@venizia/ignis-helpers/core';\nimport type {\n  TAuthorizationDecision,\n  TIdSchemaType,\n  TAuthorizationPolicyVariant,\n  TSubsetGrantMetadata,\n} from '@venizia/ignis-kernel';\nimport { AuthorizationDomainScopes } from '@venizia/ignis-kernel';\nimport { integer, jsonb, text } from 'drizzle-orm/pg-core';\n\nexport type TPolicyDefinitionOptions<ExtraVariant extends string = never> = {\n  idType?: TIdSchemaType;\n  /**\n   * App-only edge kinds stored in this same table alongside IGNIS's seven (e.g. `merchant_role`).\n   * `ScopedCasbinAdapter` never selects an undeclared variant - it is purely the consumer's data.\n   * Pass as an inline array literal; the `const` type parameter below infers the literal union\n   * from it without needing `as const`.\n   */\n  extraVariants?: ReadonlyArray<ExtraVariant>;\n};\n\n/** Extracts the app-declared extra variants from `Opts`, or `never` when none were declared. */\ntype TExtraPolicyVariantOf<Opts> = Opts extends {\n  extraVariants?: ReadonlyArray<infer ExtraVariant extends string>;\n}\n  ? ExtraVariant\n  : never;\n\n/** Column shape is inferred, never hand-declared, so it can never drift from the `$type<>()` narrowing below. */\nconst buildCommonPolicyDefinitionColumns = <\n  ExtraVariant extends string = never,\n  Metadata extends object = TSubsetGrantMetadata,\n>() => ({\n  metadata: jsonb('metadata').$type<Metadata>(),\n  variant: text('variant').$type<TAuthorizationPolicyVariant | ExtraVariant>().notNull(),\n\n  subjectType: text('subject_type').notNull(),\n  targetType: text('target_type').notNull(),\n\n  // `null` IS `ANY_MEMBER`, not \"unknown\"; the literal is refused by `policyDefinitionDomainShapeCheck`.\n  domainType: text('domain_type'),\n\n  action: text('action'),\n  effect: text('effect').$type<TAuthorizationDecision>(),\n});\n\nexport type TPolicyDefinitionCommonColumns<\n  ExtraVariant extends string = never,\n  Metadata extends object = TSubsetGrantMetadata,\n> = ReturnType<typeof buildCommonPolicyDefinitionColumns<ExtraVariant, Metadata>>;\n\ntype TPolicyDefinitionColumnDef<\n  Opts extends TPolicyDefinitionOptions<string> | undefined = undefined,\n  Metadata extends object = TSubsetGrantMetadata,\n> = Opts extends { idType: 'string' }\n  ? TPolicyDefinitionCommonColumns<TExtraPolicyVariantOf<Opts>, Metadata> & {\n      subjectId: ReturnType<typeof text>;\n      targetId: ReturnType<typeof text>;\n      domainId: ReturnType<typeof text>;\n    }\n  : TPolicyDefinitionCommonColumns<TExtraPolicyVariantOf<Opts>, Metadata> & {\n      subjectId: ReturnType<typeof integer>;\n      targetId: ReturnType<typeof integer>;\n      domainId: ReturnType<typeof integer>;\n    };\n\n/**\n * `Metadata` is a type parameter, not an `opts` field: unlike `extraVariants` there is no runtime\n * value to infer from, so supplying it means spelling `Opts` too (no partial inference):\n * `extraPolicyDefinitionColumns<{ idType: 'string' }, IMyMetadata>({ idType: 'string' })`.\n * Keep `ops` in a custom shape if the app also issues subset grants - `customGrant` writes it.\n */\nexport const extraPolicyDefinitionColumns = <\n  const Opts extends TPolicyDefinitionOptions<string> | undefined = undefined,\n  Metadata extends object = TSubsetGrantMetadata,\n>(\n  opts?: Opts,\n): TPolicyDefinitionColumnDef<Opts, Metadata> => {\n  const { idType = 'number' } = opts ?? {};\n\n  const common = buildCommonPolicyDefinitionColumns<TExtraPolicyVariantOf<Opts>, Metadata>();\n\n  switch (idType) {\n    case 'number': {\n      return {\n        ...common,\n        subjectId: integer('subject_id').notNull(),\n        targetId: integer('target_id').notNull(),\n        domainId: integer('domain_id'),\n      } as TPolicyDefinitionColumnDef<Opts, Metadata>;\n    }\n    case 'string': {\n      return {\n        ...common,\n        subjectId: text('subject_id').notNull(),\n        targetId: text('target_id').notNull(),\n        domainId: text('domain_id'),\n      } as TPolicyDefinitionColumnDef<Opts, Metadata>;\n    }\n    default: {\n      throw getError({\n        message: `[extraPolicyDefinitionColumns] Invalid idType | idType: ${idType}`,\n      });\n    }\n  }\n};\n\n/**\n * The three legal `(domain_type, domain_id)` pairs, as CHECK predicate TEXT for a migration - text,\n * not a Drizzle `SQL`, because a column ref in a `sql` template renders schema-qualified, which a\n * table-level CHECK rejects.\n *\n * The `IS NOT NULL` guard on the last branch looks redundant next to `NOT IN` and is not: a NULL\n * `domain_type` makes `NOT IN` evaluate to NULL, and a CHECK rejects only on FALSE - without it an id\n * with no type passes.\n */\nexport const policyDefinitionDomainShapeCheck = (opts?: {\n  domainTypeColumn?: string;\n  domainIdColumn?: string;\n}): string => {\n  const { domainTypeColumn = 'domain_type', domainIdColumn = 'domain_id' } = opts ?? {};\n  const { ANY_MEMBER, SYSTEM_WIDE } = AuthorizationDomainScopes;\n\n  return [\n    `(${domainTypeColumn} IS NULL AND ${domainIdColumn} IS NULL)`,\n    `OR (${domainTypeColumn} = '${SYSTEM_WIDE}' AND ${domainIdColumn} IS NULL)`,\n    `OR (\n      ${domainTypeColumn} IS NOT NULL\n      AND ${domainTypeColumn} NOT IN ('${ANY_MEMBER}', '${SYSTEM_WIDE}')\n      AND ${domainIdColumn} IS NOT NULL\n    )`,\n  ].join('\\n');\n};\n"]}

package/dist/components/auth/models/entities/role.model.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"role.model.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/role.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAGjE,eAAO,MAAM,gBAAgB;;;;;;CAW5B,CAAC"}

package/dist/components/auth/models/entities/role.model.js

@@ -1,19 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.extraRoleColumns = void 0;
-const ignis_kernel_1 = require("@venizia/ignis-kernel");
-const pg_core_1 = require("drizzle-orm/pg-core");
-const extraRoleColumns = () => {
-    return {
-        identifier: (0, pg_core_1.text)('identifier').unique().notNull(),
-        name: (0, pg_core_1.text)('name').notNull(),
-        description: (0, pg_core_1.text)('description'),
-        priority: (0, pg_core_1.integer)('priority').notNull(),
-        status: (0, pg_core_1.text)('status')
-            .$type()
-            .notNull()
-            .default(ignis_kernel_1.RoleStatuses.ACTIVATED),
-    };
-};
-exports.extraRoleColumns = extraRoleColumns;
-//# sourceMappingURL=role.model.js.map

package/dist/components/auth/models/entities/role.model.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"role.model.js","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/role.model.ts"],"names":[],"mappings":";;;AAAA,wDAAqD;AAErD,iDAAoD;AAE7C,MAAM,gBAAgB,GAAG,GAAG,EAAE;IACnC,OAAO;QACL,UAAU,EAAE,IAAA,cAAI,EAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;QACjD,IAAI,EAAE,IAAA,cAAI,EAAC,MAAM,CAAC,CAAC,OAAO,EAAE;QAC5B,WAAW,EAAE,IAAA,cAAI,EAAC,aAAa,CAAC;QAChC,QAAQ,EAAE,IAAA,iBAAO,EAAC,UAAU,CAAC,CAAC,OAAO,EAAE;QACvC,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC;aACnB,KAAK,EAAoC;aACzC,OAAO,EAAE;aACT,OAAO,CAAC,2BAAY,CAAC,SAAS,CAAC;KACnC,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,gBAAgB,oBAW3B","sourcesContent":["import { RoleStatuses } from '@venizia/ignis-kernel';\nimport type { TConstValue } from '@venizia/ignis-helpers/common';\nimport { integer, text } from 'drizzle-orm/pg-core';\n\nexport const extraRoleColumns = () => {\n  return {\n    identifier: text('identifier').unique().notNull(),\n    name: text('name').notNull(),\n    description: text('description'),\n    priority: integer('priority').notNull(),\n    status: text('status')\n      .$type<TConstValue<typeof RoleStatuses>>()\n      .notNull()\n      .default(RoleStatuses.ACTIVATED),\n  };\n};\n"]}

package/dist/components/auth/models/entities/user.model.d.ts

@@ -1,28 +0,0 @@
-import { UserStatuses, UserTypes } from '@venizia/ignis-kernel';
-import type { TIdSchemaType } from '@venizia/ignis-kernel';
-import type { TConstValue } from '@venizia/ignis-helpers/common';
-export declare const extraUserColumns: (opts?: {
-    idType: TIdSchemaType;
-}) => {
-    realm: import("drizzle-orm").HasDefault<import("drizzle-orm/pg-core").PgTextBuilderInitial<"realm", [string, ...string[]]>>;
-    status: import("drizzle-orm").HasDefault<import("drizzle-orm").NotNull<import("drizzle-orm").$Type<import("drizzle-orm/pg-core").PgTextBuilderInitial<"status", [string, ...string[]]>, TConstValue<typeof UserStatuses>>>>;
-    type: import("drizzle-orm").HasDefault<import("drizzle-orm").NotNull<import("drizzle-orm").$Type<import("drizzle-orm/pg-core").PgTextBuilderInitial<"type", [string, ...string[]]>, TConstValue<typeof UserTypes>>>>;
-    activatedAt: import("drizzle-orm/pg-core").PgCustomColumnBuilder<{
-        name: string;
-        dataType: "custom";
-        columnType: "PgCustomColumn";
-        data: string | import("@venizia/ignis-kernel").TIsoTimestamp;
-        driverParam: string;
-        enumValues: undefined;
-    }>;
-    lastLoginAt: import("drizzle-orm/pg-core").PgCustomColumnBuilder<{
-        name: string;
-        dataType: "custom";
-        columnType: "PgCustomColumn";
-        data: string | import("@venizia/ignis-kernel").TIsoTimestamp;
-        driverParam: string;
-        enumValues: undefined;
-    }>;
-    parentId: import("drizzle-orm/pg-core").PgIntegerBuilderInitial<"parent_id"> | import("drizzle-orm/pg-core").PgTextBuilderInitial<"parent_id", [string, ...string[]]>;
-};
-//# sourceMappingURL=user.model.d.ts.map

package/dist/components/auth/models/entities/user.model.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"user.model.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/user.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAGjE,eAAO,MAAM,gBAAgB,GAAI,OAAO;IAAE,MAAM,EAAE,aAAa,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;CAYhE,CAAC"}

package/dist/components/auth/models/entities/user.model.js

@@ -1,21 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.extraUserColumns = void 0;
-const ignis_kernel_1 = require("@venizia/ignis-kernel");
-const postgres_1 = require("@venizia/ignis-connectors/postgres");
-const pg_core_1 = require("drizzle-orm/pg-core");
-const extraUserColumns = (opts) => {
-    return {
-        realm: (0, pg_core_1.text)('realm').default(''),
-        status: (0, pg_core_1.text)('status')
-            .$type()
-            .notNull()
-            .default(ignis_kernel_1.UserStatuses.UNKNOWN),
-        type: (0, pg_core_1.text)('type').$type().notNull().default(ignis_kernel_1.UserTypes.SYSTEM),
-        activatedAt: (0, postgres_1.isoTimestamp)('activated_at', { withTimezone: true }),
-        lastLoginAt: (0, postgres_1.isoTimestamp)('last_login_at', { withTimezone: true }),
-        parentId: opts?.idType === 'string' ? (0, pg_core_1.text)('parent_id') : (0, pg_core_1.integer)('parent_id'),
-    };
-};
-exports.extraUserColumns = extraUserColumns;
-//# sourceMappingURL=user.model.js.map

package/dist/components/auth/models/entities/user.model.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"user.model.js","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/user.model.ts"],"names":[],"mappings":";;;AAAA,wDAAgE;AAEhE,iEAAkE;AAElE,iDAAoD;AAE7C,MAAM,gBAAgB,GAAG,CAAC,IAAgC,EAAE,EAAE;IACnE,OAAO;QACL,KAAK,EAAE,IAAA,cAAI,EAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC;aACnB,KAAK,EAAoC;aACzC,OAAO,EAAE;aACT,OAAO,CAAC,2BAAY,CAAC,OAAO,CAAC;QAChC,IAAI,EAAE,IAAA,cAAI,EAAC,MAAM,CAAC,CAAC,KAAK,EAAiC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,wBAAS,CAAC,MAAM,CAAC;QAC7F,WAAW,EAAE,IAAA,uBAAY,EAAC,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACjE,WAAW,EAAE,IAAA,uBAAY,EAAC,eAAe,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAClE,QAAQ,EAAE,IAAI,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,cAAI,EAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAO,EAAC,WAAW,CAAC;KAC/E,CAAC;AACJ,CAAC,CAAC;AAZW,QAAA,gBAAgB,oBAY3B","sourcesContent":["import { UserStatuses, UserTypes } from '@venizia/ignis-kernel';\nimport type { TIdSchemaType } from '@venizia/ignis-kernel';\nimport { isoTimestamp } from '@venizia/ignis-connectors/postgres';\nimport type { TConstValue } from '@venizia/ignis-helpers/common';\nimport { integer, text } from 'drizzle-orm/pg-core';\n\nexport const extraUserColumns = (opts?: { idType: TIdSchemaType }) => {\n  return {\n    realm: text('realm').default(''),\n    status: text('status')\n      .$type<TConstValue<typeof UserStatuses>>()\n      .notNull()\n      .default(UserStatuses.UNKNOWN),\n    type: text('type').$type<TConstValue<typeof UserTypes>>().notNull().default(UserTypes.SYSTEM),\n    activatedAt: isoTimestamp('activated_at', { withTimezone: true }),\n    lastLoginAt: isoTimestamp('last_login_at', { withTimezone: true }),\n    parentId: opts?.idType === 'string' ? text('parent_id') : integer('parent_id'),\n  };\n};\n"]}

package/dist/components/auth/models/index.d.ts

@@ -1,2 +0,0 @@
-export * from './entities';
-//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/models/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/models/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC"}

package/dist/components/auth/models/index.js

@@ -1,18 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./entities"), exports);
-//# sourceMappingURL=index.js.map

package/dist/components/auth/models/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/components/auth/models/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B","sourcesContent":["export * from './entities';\n"]}

package/dist/components/controller/grpc/common/index.d.ts

@@ -1,2 +0,0 @@
-export * from './types';
-//# sourceMappingURL=index.d.ts.map

package/dist/components/controller/grpc/common/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/controller/grpc/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC"}

package/dist/components/controller/grpc/common/index.js

@@ -1,18 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./types"), exports);
-//# sourceMappingURL=index.js.map