digitaltwin-core 0.14.0 → 0.14.2

package/dist/auth/auth_config.d.ts

@@ -1,126 +0,0 @@
-/**
- * Authentication configuration for Digital Twin framework.
- *
- * Controls whether authentication is required for components that support it.
- * When authentication is disabled, all requests are treated as authenticated
- * with a default anonymous user.
- *
- * Environment variables:
- * - DIGITALTWIN_DISABLE_AUTH: Set to "true" or "1" to disable authentication (default: false)
- * - DIGITALTWIN_ANONYMOUS_USER_ID: User ID to use when auth is disabled (default: "anonymous")
- * - DIGITALTWIN_ADMIN_ROLE_NAME: Name of the admin role in Keycloak (default: "admin")
- *
- * @example
- * ```bash
- * # Disable authentication for development
- * export DIGITALTWIN_DISABLE_AUTH=true
- * export DIGITALTWIN_ANONYMOUS_USER_ID=dev-user-123
- *
- * # Configure admin role name
- * export DIGITALTWIN_ADMIN_ROLE_NAME=administrator
- *
- * # Enable authentication (default)
- * export DIGITALTWIN_DISABLE_AUTH=false
- * ```
- *
- * @example
- * ```typescript
- * import { AuthConfig } from './auth_config.js'
- *
- * if (AuthConfig.isAuthDisabled()) {
- *   console.log('Authentication is disabled')
- *   const anonymousUser = AuthConfig.getAnonymousUser()
- *   console.log(`Using anonymous user: ${anonymousUser.id}`)
- * }
- *
- * const adminRole = AuthConfig.getAdminRoleName()
- * console.log(`Admin role is: ${adminRole}`)
- * ```
- */
-export declare class AuthConfig {
-    private static _config;
-    /**
-     * Loads and validates authentication configuration from environment variables.
-     * This is called automatically the first time any method is used.
-     */
-    private static loadConfig;
-    /**
-     * Gets the loaded configuration, ensuring it's initialized.
-     * @private
-     */
-    private static getConfig;
-    /**
-     * Checks if authentication is disabled via environment variables.
-     *
-     * @returns true if DIGITALTWIN_DISABLE_AUTH is set to "true" or "1", false otherwise
-     *
-     * @example
-     * ```typescript
-     * if (AuthConfig.isAuthDisabled()) {
-     *   console.log('Running in no-auth mode')
-     * }
-     * ```
-     */
-    static isAuthDisabled(): boolean;
-    /**
-     * Checks if authentication is enabled (opposite of isAuthDisabled).
-     *
-     * @returns true if authentication should be enforced, false otherwise
-     */
-    static isAuthEnabled(): boolean;
-    /**
-     * Gets the anonymous user ID to use when authentication is disabled.
-     *
-     * @returns The user ID configured for anonymous access
-     *
-     * @example
-     * ```typescript
-     * const userId = AuthConfig.getAnonymousUserId()
-     * console.log(`Anonymous user ID: ${userId}`) // "anonymous" by default
-     * ```
-     */
-    static getAnonymousUserId(): string;
-    /**
-     * Gets a fake authenticated user object for anonymous access.
-     *
-     * @returns An AuthenticatedUser object representing the anonymous user
-     *
-     * @example
-     * ```typescript
-     * import type { AuthenticatedUser } from './types.js'
-     *
-     * const anonymousUser: AuthenticatedUser = AuthConfig.getAnonymousUser()
-     * console.log(anonymousUser) // { id: "anonymous", roles: ["anonymous"] }
-     * ```
-     */
-    static getAnonymousUser(): {
-        id: string;
-        roles: string[];
-    };
-    /**
-     * Gets the name of the admin role configured for the system.
-     *
-     * This role name is used to determine if a user has full administrative
-     * access to all resources, including private assets owned by other users.
-     *
-     * @returns The admin role name (default: "admin")
-     *
-     * @example
-     * ```typescript
-     * const adminRole = AuthConfig.getAdminRoleName()
-     * console.log(`Admin role: ${adminRole}`) // "admin" by default
-     *
-     * // Check if user has admin role
-     * const userRoles = ['user', 'admin', 'moderator']
-     * const isAdmin = userRoles.includes(adminRole)
-     * ```
-     */
-    static getAdminRoleName(): string;
-    /**
-     * Resets the cached configuration (useful for testing).
-     *
-     * @private
-     */
-    static _resetConfig(): void;
-}
-//# sourceMappingURL=auth_config.d.ts.map

package/dist/auth/auth_config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth_config.d.ts","sourceRoot":"","sources":["../../src/auth/auth_config.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,qBAAa,UAAU;IACnB,OAAO,CAAC,MAAM,CAAC,OAAO,CAIP;IAEf;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,UAAU;IAqCzB;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,SAAS;IAQxB;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,cAAc,IAAI,OAAO;IAIhC;;;;OAIG;IACH,MAAM,CAAC,aAAa,IAAI,OAAO;IAI/B;;;;;;;;;;OAUG;IACH,MAAM,CAAC,kBAAkB,IAAI,MAAM;IAInC;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,gBAAgB;;;;IAOvB;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,gBAAgB,IAAI,MAAM;IAIjC;;;;OAIG;IACH,MAAM,CAAC,YAAY;CAGtB"}

package/dist/auth/auth_config.js

@@ -1,169 +0,0 @@
-import { Env } from '../env/env.js';
-/**
- * Authentication configuration for Digital Twin framework.
- *
- * Controls whether authentication is required for components that support it.
- * When authentication is disabled, all requests are treated as authenticated
- * with a default anonymous user.
- *
- * Environment variables:
- * - DIGITALTWIN_DISABLE_AUTH: Set to "true" or "1" to disable authentication (default: false)
- * - DIGITALTWIN_ANONYMOUS_USER_ID: User ID to use when auth is disabled (default: "anonymous")
- * - DIGITALTWIN_ADMIN_ROLE_NAME: Name of the admin role in Keycloak (default: "admin")
- *
- * @example
- * ```bash
- * # Disable authentication for development
- * export DIGITALTWIN_DISABLE_AUTH=true
- * export DIGITALTWIN_ANONYMOUS_USER_ID=dev-user-123
- *
- * # Configure admin role name
- * export DIGITALTWIN_ADMIN_ROLE_NAME=administrator
- *
- * # Enable authentication (default)
- * export DIGITALTWIN_DISABLE_AUTH=false
- * ```
- *
- * @example
- * ```typescript
- * import { AuthConfig } from './auth_config.js'
- *
- * if (AuthConfig.isAuthDisabled()) {
- *   console.log('Authentication is disabled')
- *   const anonymousUser = AuthConfig.getAnonymousUser()
- *   console.log(`Using anonymous user: ${anonymousUser.id}`)
- * }
- *
- * const adminRole = AuthConfig.getAdminRoleName()
- * console.log(`Admin role is: ${adminRole}`)
- * ```
- */
-export class AuthConfig {
-    static { this._config = null; }
-    /**
-     * Loads and validates authentication configuration from environment variables.
-     * This is called automatically the first time any method is used.
-     */
-    static loadConfig() {
-        if (this._config !== null)
-            return;
-        const config = Env.validate({
-            DIGITALTWIN_DISABLE_AUTH: Env.schema.boolean({
-                optional: true,
-                default: false
-            }),
-            DIGITALTWIN_ANONYMOUS_USER_ID: Env.schema.string({
-                optional: true
-            }),
-            DIGITALTWIN_ADMIN_ROLE_NAME: Env.schema.string({
-                optional: true
-            })
-        });
-        // Set default anonymous user ID if not provided
-        if (!config.DIGITALTWIN_ANONYMOUS_USER_ID) {
-            config.DIGITALTWIN_ANONYMOUS_USER_ID = 'anonymous';
-        }
-        // Set default admin role name if not provided
-        if (!config.DIGITALTWIN_ADMIN_ROLE_NAME) {
-            config.DIGITALTWIN_ADMIN_ROLE_NAME = 'admin';
-        }
-        this._config = config;
-    }
-    /**
-     * Gets the loaded configuration, ensuring it's initialized.
-     * @private
-     */
-    static getConfig() {
-        this.loadConfig();
-        if (this._config === null) {
-            throw new Error('Failed to load authentication configuration');
-        }
-        return this._config;
-    }
-    /**
-     * Checks if authentication is disabled via environment variables.
-     *
-     * @returns true if DIGITALTWIN_DISABLE_AUTH is set to "true" or "1", false otherwise
-     *
-     * @example
-     * ```typescript
-     * if (AuthConfig.isAuthDisabled()) {
-     *   console.log('Running in no-auth mode')
-     * }
-     * ```
-     */
-    static isAuthDisabled() {
-        return this.getConfig().DIGITALTWIN_DISABLE_AUTH;
-    }
-    /**
-     * Checks if authentication is enabled (opposite of isAuthDisabled).
-     *
-     * @returns true if authentication should be enforced, false otherwise
-     */
-    static isAuthEnabled() {
-        return !this.isAuthDisabled();
-    }
-    /**
-     * Gets the anonymous user ID to use when authentication is disabled.
-     *
-     * @returns The user ID configured for anonymous access
-     *
-     * @example
-     * ```typescript
-     * const userId = AuthConfig.getAnonymousUserId()
-     * console.log(`Anonymous user ID: ${userId}`) // "anonymous" by default
-     * ```
-     */
-    static getAnonymousUserId() {
-        return this.getConfig().DIGITALTWIN_ANONYMOUS_USER_ID;
-    }
-    /**
-     * Gets a fake authenticated user object for anonymous access.
-     *
-     * @returns An AuthenticatedUser object representing the anonymous user
-     *
-     * @example
-     * ```typescript
-     * import type { AuthenticatedUser } from './types.js'
-     *
-     * const anonymousUser: AuthenticatedUser = AuthConfig.getAnonymousUser()
-     * console.log(anonymousUser) // { id: "anonymous", roles: ["anonymous"] }
-     * ```
-     */
-    static getAnonymousUser() {
-        return {
-            id: this.getAnonymousUserId(),
-            roles: ['anonymous']
-        };
-    }
-    /**
-     * Gets the name of the admin role configured for the system.
-     *
-     * This role name is used to determine if a user has full administrative
-     * access to all resources, including private assets owned by other users.
-     *
-     * @returns The admin role name (default: "admin")
-     *
-     * @example
-     * ```typescript
-     * const adminRole = AuthConfig.getAdminRoleName()
-     * console.log(`Admin role: ${adminRole}`) // "admin" by default
-     *
-     * // Check if user has admin role
-     * const userRoles = ['user', 'admin', 'moderator']
-     * const isAdmin = userRoles.includes(adminRole)
-     * ```
-     */
-    static getAdminRoleName() {
-        return this.getConfig().DIGITALTWIN_ADMIN_ROLE_NAME;
-    }
-    /**
-     * Resets the cached configuration (useful for testing).
-     *
-     * @private
-     */
-    static _resetConfig() {
-        this._config = null;
-    }
-}
-//# sourceMappingURL=auth_config.js.map

package/dist/auth/auth_config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth_config.js","sourceRoot":"","sources":["../../src/auth/auth_config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAEnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,OAAO,UAAU;aACJ,YAAO,GAIX,IAAI,CAAA;IAEf;;;OAGG;IACK,MAAM,CAAC,UAAU;QACrB,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,OAAM;QAEjC,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC;YACxB,wBAAwB,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;gBACzC,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,KAAK;aACjB,CAAC;YACF,6BAA6B,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC7C,QAAQ,EAAE,IAAI;aACjB,CAAC;YACF,2BAA2B,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC3C,QAAQ,EAAE,IAAI;aACjB,CAAC;SACL,CAIA,CAAA;QAED,gDAAgD;QAChD,IAAI,CAAC,MAAM,CAAC,6BAA6B,EAAE,CAAC;YACxC,MAAM,CAAC,6BAA6B,GAAG,WAAW,CAAA;QACtD,CAAC;QAED,8CAA8C;QAC9C,IAAI,CAAC,MAAM,CAAC,2BAA2B,EAAE,CAAC;YACtC,MAAM,CAAC,2BAA2B,GAAG,OAAO,CAAA;QAChD,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,MAId,CAAA;IACL,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,SAAS;QACpB,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;QAClE,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAA;IACvB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,cAAc;QACjB,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC,wBAAwB,CAAA;IACpD,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,aAAa;QAChB,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,CAAA;IACjC,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,kBAAkB;QACrB,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC,6BAA6B,CAAA;IACzD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,gBAAgB;QACnB,OAAO;YACH,EAAE,EAAE,IAAI,CAAC,kBAAkB,EAAE;YAC7B,KAAK,EAAE,CAAC,WAAW,CAAC;SACvB,CAAA;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,gBAAgB;QACnB,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC,2BAA2B,CAAA;IACvD,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,YAAY;QACf,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;IACvB,CAAC"}

package/dist/auth/index.d.ts

@@ -1,5 +0,0 @@
-export { ApisixAuthParser } from './apisix_parser.js';
-export { UserService } from './user_service.js';
-export { AuthConfig } from './auth_config.js';
-export type { AuthenticatedUser, UserRecord, AuthContext, AuthenticatedRequest } from './types.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA"}

package/dist/auth/index.js

@@ -1,4 +0,0 @@
-export { ApisixAuthParser } from './apisix_parser.js';
-export { UserService } from './user_service.js';
-export { AuthConfig } from './auth_config.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/auth/types.d.ts

@@ -1,100 +0,0 @@
-/**
- * User information extracted from Keycloak JWT via Apache APISIX headers.
- *
- * This interface represents the authenticated user data parsed from APISIX
- * headers after Keycloak authentication. APISIX forwards these headers:
- * - `x-user-id`: The Keycloak user UUID
- * - `x-user-roles`: Comma-separated list of user roles
- *
- * @example
- * ```typescript
- * const authUser = ApisixAuthParser.parseAuthHeaders(req.headers)
- * if (authUser) {
- *   console.log(`User ${authUser.id} has roles: ${authUser.roles.join(', ')}`)
- * }
- * ```
- */
-export interface AuthenticatedUser {
-    /** User ID from Keycloak (x-user-id header) - UUID format */
-    id: string;
-    /** User roles from Keycloak (x-user-roles header, parsed from comma-separated string) */
-    roles: string[];
-}
-/**
- * User record stored in the database.
- *
- * Represents a user stored in the normalized user management system.
- * Users are created automatically when they first access the system
- * after being authenticated by Keycloak via APISIX.
- *
- * @example
- * ```typescript
- * const userService = new UserService(database)
- * const userRecord = await userService.findOrCreateUser(authenticatedUser)
- * console.log(`User ${userRecord.keycloak_id} has ${userRecord.roles.length} roles`)
- * ```
- */
-export interface UserRecord {
-    /** Primary key (auto-increment) */
-    id?: number;
-    /** Keycloak user ID (UUID, unique across system) */
-    keycloak_id: string;
-    /** User roles (populated from user_roles junction table) */
-    roles: string[];
-    /** First time the user was seen in the system */
-    created_at: Date;
-    /** Last time the user's roles were updated */
-    updated_at: Date;
-}
-/**
- * Authentication context passed to handlers.
- *
- * Contains both the raw authentication data from APISIX headers
- * and the corresponding database user record. Used internally
- * by components that need full user context.
- *
- * @example
- * ```typescript
- * const authContext: AuthContext = {
- *   user: authUser,
- *   userRecord: await userService.findOrCreateUser(authUser)
- * }
- * ```
- */
-export interface AuthContext {
-    /** Authenticated user information from APISIX headers */
-    user: AuthenticatedUser;
-    /** Database user record with full role information */
-    userRecord: UserRecord;
-}
-/**
- * Request object extended with authentication context.
- *
- * Represents an HTTP request that has been augmented with
- * authentication information. Used by handlers that need
- * access to both request data and user context.
- *
- * @example
- * ```typescript
- * async function handleRequest(req: AuthenticatedRequest) {
- *   if (req.auth) {
- *     console.log(`Request from user: ${req.auth.user.id}`)
- *   }
- * }
- * ```
- */
-export interface AuthenticatedRequest {
-    /** Original Express request object */
-    originalRequest: any;
-    /** Authentication context (undefined if not authenticated) */
-    auth?: AuthContext;
-    /** Request headers (including APISIX authentication headers) */
-    headers: Record<string, string>;
-    /** URL parameters */
-    params?: Record<string, string>;
-    /** Request body */
-    body?: any;
-    /** File upload (for multipart requests with assets) */
-    file?: any;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/auth/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,iBAAiB;IAC9B,6DAA6D;IAC7D,EAAE,EAAE,MAAM,CAAA;IACV,yFAAyF;IACzF,KAAK,EAAE,MAAM,EAAE,CAAA;CAClB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,UAAU;IACvB,mCAAmC;IACnC,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAA;IACnB,4DAA4D;IAC5D,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,iDAAiD;IACjD,UAAU,EAAE,IAAI,CAAA;IAChB,8CAA8C;IAC9C,UAAU,EAAE,IAAI,CAAA;CACnB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,WAAW;IACxB,yDAAyD;IACzD,IAAI,EAAE,iBAAiB,CAAA;IACvB,sDAAsD;IACtD,UAAU,EAAE,UAAU,CAAA;CACzB;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,oBAAoB;IACjC,sCAAsC;IACtC,eAAe,EAAE,GAAG,CAAA;IACpB,8DAA8D;IAC9D,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,qBAAqB;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,mBAAmB;IACnB,IAAI,CAAC,EAAE,GAAG,CAAA;IACV,uDAAuD;IACvD,IAAI,CAAC,EAAE,GAAG,CAAA;CACb"}

package/dist/auth/types.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=types.js.map

package/dist/auth/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":""}

package/dist/auth/user_service.d.ts

@@ -1,86 +0,0 @@
-import type { DatabaseAdapter } from '../database/database_adapter.js';
-import type { AuthenticatedUser, UserRecord } from './types.js';
-/**
- * Service for managing users in the Digital Twin framework.
- *
- * This service handles the complete user lifecycle in a Digital Twin application
- * with Keycloak authentication via Apache APISIX. It manages a normalized database
- * schema with three tables:
- *
- * - `users`: Core user records linked to Keycloak IDs
- * - `roles`: Master list of available roles
- * - `user_roles`: Many-to-many relationship between users and roles
- *
- * Key features:
- * - Automatic user creation on first authentication
- * - Role synchronization with Keycloak
- * - Optimized queries with proper indexing
- * - Transaction-safe role updates
- *
- * @example
- * ```typescript
- * // Initialize in your Digital Twin engine
- * const userService = new UserService(databaseAdapter)
- * await userService.initializeTables()
- *
- * // Use in AssetsManager handlers
- * const authUser = ApisixAuthParser.parseAuthHeaders(req.headers)
- * const userRecord = await userService.findOrCreateUser(authUser!)
- *
- * // Link assets to users
- * await this.uploadAsset({
- *   description: 'My file',
- *   source: 'upload',
- *   owner_id: userRecord.id!.toString(),
- *   filename: 'document.pdf',
- *   file: buffer
- * })
- * ```
- */
-export declare class UserService {
-    private db;
-    private readonly usersTable;
-    private readonly rolesTable;
-    private readonly userRolesTable;
-    constructor(db: DatabaseAdapter);
-    /**
-     * Ensures all user-related tables exist in the database
-     */
-    initializeTables(): Promise<void>;
-    /**
-     * Finds or creates a user and synchronizes their roles.
-     *
-     * When authentication is disabled, returns a mock user record
-     * without touching the database.
-     */
-    findOrCreateUser(authUser: AuthenticatedUser): Promise<UserRecord>;
-    /**
-     * Gets a user by their database ID
-     */
-    getUserById(id: number): Promise<UserRecord | undefined>;
-    /**
-     * Gets a user by their Keycloak ID with roles
-     */
-    getUserByKeycloakId(keycloakId: string): Promise<UserRecord | undefined>;
-    /**
-     * Gets the underlying Knex instance from the database adapter
-     */
-    private getKnex;
-    /**
-     * Finds a user by their Keycloak ID
-     */
-    private findUserByKeycloakId;
-    /**
-     * Creates a new user record
-     */
-    private createUser;
-    /**
-     * Synchronizes user roles with what's provided by Keycloak
-     */
-    private syncUserRoles;
-    /**
-     * Gets a user with their roles populated
-     */
-    private getUserWithRoles;
-}
-//# sourceMappingURL=user_service.d.ts.map

package/dist/auth/user_service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"user_service.d.ts","sourceRoot":"","sources":["../../src/auth/user_service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAA;AACtE,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAI/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,qBAAa,WAAW;IACpB,OAAO,CAAC,EAAE,CAAiB;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IACrC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAe;gBAElC,EAAE,EAAE,eAAe;IAI/B;;OAEG;IACG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAkDvC;;;;;OAKG;IACG,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC;IA8BxE;;OAEG;IACG,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAI9D;;OAEG;IACG,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAY9E;;OAEG;IACH,OAAO,CAAC,OAAO;IAOf;;OAEG;YACW,oBAAoB;IAgBlC;;OAEG;YACW,UAAU;IAuBxB;;OAEG;YACW,aAAa;IAoC3B;;OAEG;YACW,gBAAgB;CAqCjC"}