@antseed/cli 0.1.179 → 0.1.180

package/dist/gateway/observability.d.ts

@@ -0,0 +1,51 @@
+import type { ObservabilitySettings } from './console-api/types.js';
+import type { GatewayStore } from './store.js';
+export declare const OBSERVABILITY_SETTING = "observability";
+export declare function observabilitySettings(store: GatewayStore): ObservabilitySettings;
+/** One finished gateway request, as exported. */
+export interface RequestSpan {
+    tag: string;
+    method: string;
+    path: string;
+    model: string | null;
+    status: number;
+    startedAt: number;
+    finishedAt: number;
+    keyId: string;
+    workspaceId: string;
+    memberId: string | null;
+    endUser: string | null;
+    sellerPeerId: string | null;
+    latencyMs: number | null;
+    requestBody?: string | null;
+    responseBody?: string | null;
+}
+export declare function tracesUrl(endpoint: string): string;
+/**
+ * Fire-and-forget OTLP/HTTP JSON exporter: one span per finished request,
+ * batched every second. The queue is bounded; when the collector is slow or
+ * down, the oldest spans are dropped instead of growing memory.
+ */
+export declare class OtlpExporter {
+    private readonly _settings;
+    private readonly _options;
+    private _queue;
+    private _timer;
+    private _inFlight;
+    dropped: number;
+    constructor(_settings: () => ObservabilitySettings, _options?: {
+        fetchImpl?: typeof fetch;
+        onLog?: (message: string) => void;
+        flushIntervalMs?: number;
+    });
+    record(span: RequestSpan): void;
+    /**
+     * Sends one batch; while a full batch is still queued afterwards it keeps
+     * going, so a burst drains instead of waiting one interval per batch.
+     */
+    flush(): Promise<void>;
+    private _send;
+    /** Stops the timer and sends everything still queued. */
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=observability.d.ts.map

package/dist/gateway/observability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.d.ts","sourceRoot":"","sources":["../../src/gateway/observability.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAEnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE9C,eAAO,MAAM,qBAAqB,kBAAkB,CAAA;AAgBpD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,YAAY,GAAG,qBAAqB,CAEhF;AAED,iDAAiD;AACjD,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AASD,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGlD;AA8BD;;;;GAIG;AACH,qBAAa,YAAY;IAOrB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAP3B,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,MAAM,CAA8C;IAC5D,OAAO,CAAC,SAAS,CAA6B;IAC9C,OAAO,SAAI;gBAGQ,SAAS,EAAE,MAAM,qBAAqB,EACtC,QAAQ,GAAE;QAAE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;QAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAO;IAG3H,MAAM,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAa/B;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAMd,KAAK;IA2BnB,yDAAyD;IACnD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAO5B"}

package/dist/gateway/observability.js

@@ -0,0 +1,136 @@
+import { randomBytes } from 'node:crypto';
+import { errorMessage } from './errors.js';
+export const OBSERVABILITY_SETTING = 'observability';
+const MAX_QUEUE = 1_000;
+const MAX_BATCH = 100;
+const FLUSH_INTERVAL_MS = 1_000;
+const EXPORT_TIMEOUT_MS = 5_000;
+/** Content attributes are truncated to this many characters. */
+const MAX_CONTENT_ATTRIBUTE = 16 * 1024;
+const DEFAULT_OBSERVABILITY = {
+    otlpEndpoint: null,
+    otlpHeaders: {},
+    logContent: false,
+    retentionDays: null,
+};
+export function observabilitySettings(store) {
+    return { ...DEFAULT_OBSERVABILITY, ...(store.getSetting(OBSERVABILITY_SETTING) ?? {}) };
+}
+function attr(key, value) {
+    if (value === null || value === undefined)
+        return [];
+    return [{ key, value: typeof value === 'number' ? { intValue: String(Math.trunc(value)) } : { stringValue: value } }];
+}
+export function tracesUrl(endpoint) {
+    const trimmed = endpoint.replace(/\/+$/, '');
+    return trimmed.endsWith('/v1/traces') ? trimmed : `${trimmed}/v1/traces`;
+}
+function spanToOtlp(span, includeContent) {
+    const nanos = (ms) => `${BigInt(Math.trunc(ms)) * 1000000n}`;
+    return {
+        traceId: randomBytes(16).toString('hex'),
+        spanId: randomBytes(8).toString('hex'),
+        name: `${span.method} ${span.path}`,
+        kind: 2,
+        startTimeUnixNano: nanos(span.startedAt),
+        endTimeUnixNano: nanos(span.finishedAt),
+        attributes: [
+            ...attr('http.request.method', span.method),
+            ...attr('url.path', span.path),
+            ...attr('http.response.status_code', span.status),
+            ...attr('gen_ai.request.model', span.model),
+            ...attr('antseed.request.tag', span.tag),
+            ...attr('antseed.key.id', span.keyId),
+            ...attr('antseed.workspace.id', span.workspaceId),
+            ...attr('antseed.member.id', span.memberId),
+            ...attr('antseed.end_user', span.endUser),
+            ...attr('antseed.seller.peer_id', span.sellerPeerId),
+            ...attr('antseed.latency_ms', span.latencyMs),
+            ...(includeContent ? attr('antseed.request.body', span.requestBody?.slice(0, MAX_CONTENT_ATTRIBUTE)) : []),
+            ...(includeContent ? attr('antseed.response.body', span.responseBody?.slice(0, MAX_CONTENT_ATTRIBUTE)) : []),
+        ],
+        status: { code: span.status >= 400 ? 2 : 1 },
+    };
+}
+/**
+ * Fire-and-forget OTLP/HTTP JSON exporter: one span per finished request,
+ * batched every second. The queue is bounded; when the collector is slow or
+ * down, the oldest spans are dropped instead of growing memory.
+ */
+export class OtlpExporter {
+    _settings;
+    _options;
+    _queue = [];
+    _timer = null;
+    _inFlight = null;
+    dropped = 0;
+    constructor(_settings, _options = {}) {
+        this._settings = _settings;
+        this._options = _options;
+    }
+    record(span) {
+        if (!this._settings().otlpEndpoint)
+            return;
+        if (this._queue.length >= MAX_QUEUE) {
+            this._queue.shift();
+            this.dropped += 1;
+        }
+        this._queue.push(span);
+        if (!this._timer) {
+            this._timer = setInterval(() => void this.flush(), this._options.flushIntervalMs ?? FLUSH_INTERVAL_MS);
+            this._timer.unref?.();
+        }
+    }
+    /**
+     * Sends one batch; while a full batch is still queued afterwards it keeps
+     * going, so a burst drains instead of waiting one interval per batch.
+     */
+    async flush() {
+        if (this._inFlight)
+            return this._inFlight;
+        await this._send();
+        if (this._queue.length >= MAX_BATCH && this._settings().otlpEndpoint)
+            await this.flush();
+    }
+    async _send() {
+        const settings = this._settings();
+        if (!settings.otlpEndpoint || this._queue.length === 0) {
+            if (!settings.otlpEndpoint)
+                this._queue = [];
+            return;
+        }
+        const batch = this._queue.splice(0, MAX_BATCH);
+        const payload = {
+            resourceSpans: [{
+                    resource: { attributes: attr('service.name', 'antseed-gateway') },
+                    scopeSpans: [{ scope: { name: 'antseed-gateway' }, spans: batch.map((span) => spanToOtlp(span, settings.logContent)) }],
+                }],
+        };
+        const fetchImpl = this._options.fetchImpl ?? fetch;
+        this._inFlight = fetchImpl(tracesUrl(settings.otlpEndpoint), {
+            method: 'POST',
+            headers: { ...settings.otlpHeaders, 'content-type': 'application/json' },
+            body: JSON.stringify(payload),
+            signal: AbortSignal.timeout(EXPORT_TIMEOUT_MS),
+        }).then((response) => {
+            if (!response.ok)
+                this._options.onLog?.(`otlp export failed: HTTP ${response.status}`);
+        }).catch((error) => {
+            this._options.onLog?.(`otlp export failed: ${errorMessage(error)}`);
+        }).finally(() => { this._inFlight = null; });
+        return this._inFlight;
+    }
+    /** Stops the timer and sends everything still queued. */
+    async stop() {
+        if (this._timer)
+            clearInterval(this._timer);
+        this._timer = null;
+        if (this._inFlight)
+            await this._inFlight;
+        while (this._queue.length > 0 && this._settings().otlpEndpoint)
+            await this.flush();
+        if (!this._settings().otlpEndpoint)
+            this._queue = [];
+    }
+}
+//# sourceMappingURL=observability.js.map

package/dist/gateway/observability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.js","sourceRoot":"","sources":["../../src/gateway/observability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C,MAAM,CAAC,MAAM,qBAAqB,GAAG,eAAe,CAAA;AAEpD,MAAM,SAAS,GAAG,KAAK,CAAA;AACvB,MAAM,SAAS,GAAG,GAAG,CAAA;AACrB,MAAM,iBAAiB,GAAG,KAAK,CAAA;AAC/B,MAAM,iBAAiB,GAAG,KAAK,CAAA;AAC/B,gEAAgE;AAChE,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAA;AAEvC,MAAM,qBAAqB,GAA0B;IACnD,YAAY,EAAE,IAAI;IAClB,WAAW,EAAE,EAAE;IACf,UAAU,EAAE,KAAK;IACjB,aAAa,EAAE,IAAI;CACpB,CAAA;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAmB;IACvD,OAAO,EAAE,GAAG,qBAAqB,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAiC,qBAAqB,CAAC,IAAI,EAAE,CAAC,EAAE,CAAA;AACzH,CAAC;AAuBD,SAAS,IAAI,CAAC,GAAW,EAAE,KAAyC;IAClE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACpD,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;AACvH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC5C,OAAO,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,YAAY,CAAA;AAC1E,CAAC;AAED,SAAS,UAAU,CAAC,IAAiB,EAAE,cAAuB;IAC5D,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,QAAU,EAAE,CAAA;IACtE,OAAO;QACL,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtC,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE;QACnC,IAAI,EAAE,CAAC;QACP,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QACxC,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;QACvC,UAAU,EAAE;YACV,GAAG,IAAI,CAAC,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC;YAC3C,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC;YAC9B,GAAG,IAAI,CAAC,2BAA2B,EAAE,IAAI,CAAC,MAAM,CAAC;YACjD,GAAG,IAAI,CAAC,sBAAsB,EAAE,IAAI,CAAC,KAAK,CAAC;YAC3C,GAAG,IAAI,CAAC,qBAAqB,EAAE,IAAI,CAAC,GAAG,CAAC;YACxC,GAAG,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC;YACrC,GAAG,IAAI,CAAC,sBAAsB,EAAE,IAAI,CAAC,WAAW,CAAC;YACjD,GAAG,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC;YAC3C,GAAG,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC;YACzC,GAAG,IAAI,CAAC,wBAAwB,EAAE,IAAI,CAAC,YAAY,CAAC;YACpD,GAAG,IAAI,CAAC,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC;YAC7C,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1G,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7G;QACD,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;KAC7C,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,YAAY;IAOJ;IACA;IAPX,MAAM,GAAkB,EAAE,CAAA;IAC1B,MAAM,GAA0C,IAAI,CAAA;IACpD,SAAS,GAAyB,IAAI,CAAA;IAC9C,OAAO,GAAG,CAAC,CAAA;IAEX,YACmB,SAAsC,EACtC,WAAsG,EAAE;QADxG,cAAS,GAAT,SAAS,CAA6B;QACtC,aAAQ,GAAR,QAAQ,CAAgG;IACxH,CAAC;IAEJ,MAAM,CAAC,IAAiB;QACtB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,YAAY;YAAE,OAAM;QAC1C,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;YACnB,IAAI,CAAC,OAAO,IAAI,CAAC,CAAA;QACnB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,IAAI,iBAAiB,CAAC,CAAA;YACtG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAA;QACvB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAA;QACzC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QAClB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,SAAS,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,YAAY;YAAE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;IAC1F,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,CAAA;QACjC,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,QAAQ,CAAC,YAAY;gBAAE,IAAI,CAAC,MAAM,GAAG,EAAE,CAAA;YAC5C,OAAM;QACR,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;QAC9C,MAAM,OAAO,GAAG;YACd,aAAa,EAAE,CAAC;oBACd,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,cAAc,EAAE,iBAAiB,CAAC,EAAE;oBACjE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;iBACxH,CAAC;SACH,CAAA;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAA;QAClD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE;YAC3D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACxE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC;SAC/C,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACnB,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,4BAA4B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;QACxF,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC1B,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,uBAAuB,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACrE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA,CAAC,CAAC,CAAC,CAAA;QAC3C,OAAO,IAAI,CAAC,SAAS,CAAA;IACvB,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,MAAM;YAAE,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC3C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,CAAC,SAAS,CAAA;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,YAAY;YAAE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QAClF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,YAAY;YAAE,IAAI,CAAC,MAAM,GAAG,EAAE,CAAA;IACtD,CAAC;CACF"}

package/dist/gateway/policy-resolver.d.ts

@@ -0,0 +1,73 @@
+import { type RoutingPolicy } from '../routing-policy/policy.js';
+import type { RoutePreview } from './console-api/types.js';
+import type { ApiKeyRecord, GatewayStore, MemberRecord, PresetRecord, WorkspaceRecord } from './store.js';
+/** Settings key of the gateway-wide default routing policy. */
+export declare const GATEWAY_ROUTING_SETTING = "routing.default";
+export interface ResolvedPolicy {
+    policy: RoutingPolicy;
+    sources: RoutePreview['sources'];
+}
+export type PolicyLevel = RoutePreview['sources'][number]['level'];
+export interface PolicyTarget {
+    keyId?: string;
+    workspaceId?: string;
+    memberId?: string;
+    presetSlug?: string;
+    preset?: PresetRecord | null;
+    /** Records the caller already loaded (the gateway does, once per request), so they are not read again. */
+    key?: ApiKeyRecord | null;
+    workspace?: WorkspaceRecord | null;
+    member?: MemberRecord | null;
+}
+export declare function gatewayDefaultPolicy(store: GatewayStore): RoutingPolicy | null;
+/**
+ * Effective policy for a request or a preview: gateway default → workspace
+ * (org admins' policy, then the workspace admins') → member (the key's
+ * owner) → key (admins', then the owner's) → preset, each level only
+ * narrowing the one above. The buyer applies its hard limits on top, so the
+ * `buyer` source has no policy here (`previewRoute` fills it in). A key implies its workspace and owner
+ * unless given.
+ */
+export declare function resolvePolicy(store: GatewayStore, target: PolicyTarget): ResolvedPolicy;
+export interface PolicyInputCheck {
+    /** The policy at that level once narrowed under every level above it (peer lists expanded). */
+    effective: RoutingPolicy;
+    /** Fields where the sent policy asked for more than the levels above allow (see `narrowedFields`). */
+    narrowed: string[];
+    /** The sent policy restricts sellers to an allow list that ends up empty: no seller could serve. */
+    emptyAllow: boolean;
+}
+/**
+ * What a policy sent for one level would amount to: `sent` replaces that
+ * level's policy for `target`, and only the levels above it count.
+ */
+export declare function checkPolicyInput(store: GatewayStore, target: PolicyTarget, level: PolicyLevel, sent: RoutingPolicy | null): PolicyInputCheck;
+/** True when the policy changes nothing about routing (see `meaningfulPolicy`). */
+export declare function isEmptyPolicy(policy: RoutingPolicy): boolean;
+/** A console answer for policy input that cannot be stored as sent. */
+export interface PolicyInputProblem {
+    status: 400 | 409;
+    body: {
+        error: {
+            code: string;
+            message: string;
+        } & Record<string, unknown>;
+    };
+}
+/**
+ * The 400 `empty_allow_list` / 409 `narrowed` answer for policies (and
+ * limits) sent to the console, or null when they can be stored. `checks`
+ * name the input field each check belongs to; `narrowedLimits` lists limit
+ * fields that ask for more than the layer above allows.
+ */
+export declare function policyInputProblem(checks: ReadonlyArray<{
+    field: string;
+    check: PolicyInputCheck;
+}>, flags: {
+    confirmEmpty?: boolean;
+    acceptNarrowed?: boolean;
+}, narrowedLimits?: {
+    fields: string[];
+    effective?: unknown;
+}): PolicyInputProblem | null;
+//# sourceMappingURL=policy-resolver.d.ts.map

package/dist/gateway/policy-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-resolver.d.ts","sourceRoot":"","sources":["../../src/gateway/policy-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoF,KAAK,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAClJ,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEzG,+DAA+D;AAC/D,eAAO,MAAM,uBAAuB,oBAAoB,CAAA;AAExD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,aAAa,CAAA;IACrB,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,CAAA;CACjC;AAED,MAAM,MAAM,WAAW,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAA;AAElE,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAAA;IAC5B,0GAA0G;IAC1G,GAAG,CAAC,EAAE,YAAY,GAAG,IAAI,CAAA;IACzB,SAAS,CAAC,EAAE,eAAe,GAAG,IAAI,CAAA;IAClC,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAAA;CAC7B;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,GAAG,IAAI,CAE9E;AAgED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,GAAG,cAAc,CAGvF;AAED,MAAM,WAAW,gBAAgB;IAC/B,+FAA+F;IAC/F,SAAS,EAAE,aAAa,CAAA;IACxB,sGAAsG;IACtG,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,oGAAoG;IACpG,UAAU,EAAE,OAAO,CAAA;CACpB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI,GAAG,gBAAgB,CAc5I;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAE5D;AAED,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,GAAG,GAAG,GAAG,CAAA;IACjB,IAAI,EAAE;QAAE,KAAK,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAA;CAC7E;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,aAAa,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,CAAC,EACjE,KAAK,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,EAC3D,cAAc,GAAE;IAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAmB,GACzE,kBAAkB,GAAG,IAAI,CA+B3B"}

package/dist/gateway/policy-resolver.js

@@ -0,0 +1,142 @@
+import { expandPeerLists, meaningfulPolicy, narrowPolicy, narrowedFields, normalizePolicy } from '../routing-policy/policy.js';
+/** Settings key of the gateway-wide default routing policy. */
+export const GATEWAY_ROUTING_SETTING = 'routing.default';
+export function gatewayDefaultPolicy(store) {
+    return store.getSetting(GATEWAY_ROUTING_SETTING);
+}
+/** The levels that apply to a target, top to bottom, with their own (unexpanded) policies. */
+function policySources(store, target) {
+    const key = targetKey(store, target);
+    const workspaceId = target.workspaceId ?? key?.workspaceId ?? null;
+    const memberId = target.memberId ?? key?.ownerMemberId ?? null;
+    const workspace = loaded(target.workspace, workspaceId, (id) => store.getWorkspace(id));
+    const member = loaded(target.member, memberId, (id) => store.getMember(id));
+    const preset = targetPreset(store, target, workspaceId);
+    const sources = [
+        { level: 'buyer', id: null, policy: null },
+        { level: 'gateway', id: null, policy: gatewayDefaultPolicy(store) },
+    ];
+    if (workspace) {
+        // Two workspace entries: the org admins' policy, then the workspace
+        // admins' own, which can only narrow it.
+        sources.push({ level: 'workspace-org', id: workspace.id, policy: workspace.orgRoutingPolicy });
+        sources.push({ level: 'workspace', id: workspace.id, policy: workspace.routingPolicy });
+    }
+    if (member)
+        sources.push({ level: 'member', id: member.id, policy: member.routingPolicy });
+    if (key) {
+        // The admins' policy for the key, then the owner's own on top of it.
+        sources.push({ level: 'key', id: key.id, policy: key.routingPolicy });
+        sources.push({ level: 'key-owner', id: key.id, policy: key.ownerRoutingPolicy });
+    }
+    if (preset)
+        sources.push({ level: 'preset', id: preset.id, policy: preset.routingPolicy });
+    return sources;
+}
+function targetKey(store, target) {
+    if (target.key !== undefined)
+        return target.key;
+    return target.keyId ? store.getKey(target.keyId) : null;
+}
+function targetPreset(store, target, workspaceId) {
+    if (target.preset !== undefined)
+        return target.preset;
+    return target.presetSlug ? store.findPresetBySlug(target.presetSlug, workspaceId) : null;
+}
+/** The record the caller already loaded when it is the one with this id, else a store read. */
+function loaded(given, id, read) {
+    if (given !== undefined && given?.id === id)
+        return given;
+    return id ? read(id) : null;
+}
+function peerListLookup(store) {
+    return (listId) => store.getPeerList(listId)?.peerIds ?? null;
+}
+/**
+ * Peer lists are expanded per level before narrowing, so allow specs
+ * intersect as sets of sellers (a level adding a list never widens the one
+ * above it), editing a list applies everywhere it is used, and the buyer
+ * only ever sees peer ids.
+ */
+function combine(store, sources) {
+    const listPeers = peerListLookup(store);
+    let policy = {};
+    for (const source of sources)
+        policy = narrowPolicy(policy, source.policy ? expandPeerLists(source.policy, listPeers) : null);
+    return normalizePolicy(policy);
+}
+/**
+ * Effective policy for a request or a preview: gateway default → workspace
+ * (org admins' policy, then the workspace admins') → member (the key's
+ * owner) → key (admins', then the owner's) → preset, each level only
+ * narrowing the one above. The buyer applies its hard limits on top, so the
+ * `buyer` source has no policy here (`previewRoute` fills it in). A key implies its workspace and owner
+ * unless given.
+ */
+export function resolvePolicy(store, target) {
+    const sources = policySources(store, target);
+    return { policy: combine(store, sources), sources };
+}
+/**
+ * What a policy sent for one level would amount to: `sent` replaces that
+ * level's policy for `target`, and only the levels above it count.
+ */
+export function checkPolicyInput(store, target, level, sent) {
+    const sources = policySources(store, target);
+    const index = sources.findIndex((source) => source.level === level);
+    const above = index === -1 ? sources : sources.slice(0, index);
+    const parent = combine(store, above);
+    if (!sent)
+        return { effective: parent, narrowed: [], emptyAllow: false };
+    const expanded = expandPeerLists(sent, peerListLookup(store));
+    const effective = normalizePolicy(narrowPolicy(parent, expanded));
+    const restrictsSellers = sent.allowedPeerIds !== undefined || sent.allowedPeerLists !== undefined || sent.allowedPeerGroups !== undefined;
+    return {
+        effective,
+        narrowed: narrowedFields(expanded, effective),
+        emptyAllow: restrictsSellers && effective.allowedPeerIds?.length === 0,
+    };
+}
+/** True when the policy changes nothing about routing (see `meaningfulPolicy`). */
+export function isEmptyPolicy(policy) {
+    return Object.keys(meaningfulPolicy(policy)).length === 0;
+}
+/**
+ * The 400 `empty_allow_list` / 409 `narrowed` answer for policies (and
+ * limits) sent to the console, or null when they can be stored. `checks`
+ * name the input field each check belongs to; `narrowedLimits` lists limit
+ * fields that ask for more than the layer above allows.
+ */
+export function policyInputProblem(checks, flags, narrowedLimits = { fields: [] }) {
+    const empty = checks.filter(({ check }) => check.emptyAllow);
+    if (empty.length > 0 && !flags.confirmEmpty) {
+        return {
+            status: 400,
+            body: {
+                error: {
+                    code: 'empty_allow_list',
+                    message: `${empty.map(({ field }) => field).join(', ')} would let no seller serve; send confirmEmpty: true to save it anyway`,
+                    fields: empty.map(({ field }) => field),
+                },
+            },
+        };
+    }
+    const narrowed = checks.filter(({ check }) => check.narrowed.length > 0);
+    if ((narrowed.length > 0 || narrowedLimits.fields.length > 0) && !flags.acceptNarrowed) {
+        const fields = [...narrowed.flatMap(({ field, check }) => check.narrowed.map((name) => `${field}.${name}`)), ...narrowedLimits.fields];
+        return {
+            status: 409,
+            body: {
+                error: {
+                    code: 'narrowed',
+                    message: `The levels above allow less than this asks for (${fields.join(', ')}); send acceptNarrowed: true to save it anyway`,
+                    fields,
+                    ...(narrowed[0] ? { effectiveRoutingPolicy: narrowed[narrowed.length - 1].check.effective } : {}),
+                    ...(narrowedLimits.fields.length > 0 ? { effectiveLimits: narrowedLimits.effective } : {}),
+                },
+            },
+        };
+    }
+    return null;
+}
+//# sourceMappingURL=policy-resolver.js.map

package/dist/gateway/policy-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-resolver.js","sourceRoot":"","sources":["../../src/gateway/policy-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAsB,MAAM,6BAA6B,CAAA;AAIlJ,+DAA+D;AAC/D,MAAM,CAAC,MAAM,uBAAuB,GAAG,iBAAiB,CAAA;AAqBxD,MAAM,UAAU,oBAAoB,CAAC,KAAmB;IACtD,OAAO,KAAK,CAAC,UAAU,CAAgB,uBAAuB,CAAC,CAAA;AACjE,CAAC;AAED,8FAA8F;AAC9F,SAAS,aAAa,CAAC,KAAmB,EAAE,MAAoB;IAC9D,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IACpC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,GAAG,EAAE,WAAW,IAAI,IAAI,CAAA;IAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,GAAG,EAAE,aAAa,IAAI,IAAI,CAAA;IAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAA;IACvF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3E,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAA;IAEvD,MAAM,OAAO,GAA4B;QACvC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;QAC1C,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC,EAAE;KACpE,CAAA;IACD,IAAI,SAAS,EAAE,CAAC;QACd,oEAAoE;QACpE,yCAAyC;QACzC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,gBAAgB,EAAE,CAAC,CAAA;QAC9F,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAA;IAC1F,IAAI,GAAG,EAAE,CAAC;QACR,qEAAqE;QACrE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAA;QACrE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAA;IAC1F,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAAmB,EAAE,MAAoB;IAC1D,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,GAAG,CAAA;IAC/C,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,KAAmB,EAAE,MAAoB,EAAE,WAA0B;IACzF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAA;IACrD,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC1F,CAAC;AAED,+FAA+F;AAC/F,SAAS,MAAM,CAA2B,KAA2B,EAAE,EAAiB,EAAE,IAA8B;IACtH,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,EAAE,EAAE,KAAK,EAAE;QAAE,OAAO,KAAK,CAAA;IACzD,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC7B,CAAC;AAED,SAAS,cAAc,CAAC,KAAmB;IACzC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,OAAO,IAAI,IAAI,CAAA;AAC/D,CAAC;AAED;;;;;GAKG;AACH,SAAS,OAAO,CAAC,KAAmB,EAAE,OAAgC;IACpE,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACvC,IAAI,MAAM,GAAkB,EAAE,CAAA;IAC9B,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC7H,OAAO,eAAe,CAAC,MAAM,CAAC,CAAA;AAChC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAmB,EAAE,MAAoB;IACrE,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAC5C,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,CAAA;AACrD,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAmB,EAAE,MAAoB,EAAE,KAAkB,EAAE,IAA0B;IACxH,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,CAAA;IACnE,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;IACxE,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA;IAC7D,MAAM,SAAS,GAAG,eAAe,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;IACjE,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,CAAA;IACzI,OAAO;QACL,SAAS;QACT,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC7C,UAAU,EAAE,gBAAgB,IAAI,SAAS,CAAC,cAAc,EAAE,MAAM,KAAK,CAAC;KACvE,CAAA;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,MAAqB;IACjD,OAAO,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;AAC3D,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAiE,EACjE,KAA2D,EAC3D,iBAA4D,EAAE,MAAM,EAAE,EAAE,EAAE;IAE1E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC5D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QAC5C,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,KAAK,EAAE;oBACL,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uEAAuE;oBAC7H,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC;iBACxC;aACF;SACF,CAAA;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACxE,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QACvF,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAA;QACtI,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,KAAK,EAAE;oBACL,IAAI,EAAE,UAAU;oBAChB,OAAO,EAAE,mDAAmD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gDAAgD;oBAC7H,MAAM;oBACN,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClG,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3F;aACF;SACF,CAAA;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/gateway/policy-resolver.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=policy-resolver.test.d.ts.map

package/dist/gateway/policy-resolver.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-resolver.test.d.ts","sourceRoot":"","sources":["../../src/gateway/policy-resolver.test.ts"],"names":[],"mappings":""}