@atlasauth/backend 0.25.0 → 0.27.0

package/dist/client/fga.d.ts

@@ -29,13 +29,35 @@ export interface FgaTuple {
     relation: string;
     /** The object of the tuple as `type:id`. */
     target: string;
+    condition?: FgaTupleCondition;
+    /** Epoch ms after which the tuple stops granting. */
+    expires_at?: number;
     created_at: number;
 }
+/** A model condition bound to a tuple, with the parameter values fixed on it. */
+export interface FgaTupleCondition {
+    name: string;
+    context?: Record<string, unknown>;
+}
 /** A tuple key. `object` is the target as `type:id`; `target` is accepted too. */
 export interface FgaTupleKey {
     user: string;
     relation: string;
     object: string;
+    /** The tuple grants only while this model condition holds. */
+    condition?: FgaTupleCondition;
+    /** The tuple stops granting at this time (ISO 8601 or epoch ms, in the future); a sweep then deletes it. */
+    expires_at?: string | number;
+}
+/**
+ * Freshness of a read. `MINIMIZE_LATENCY` (and the default) may be served from a
+ * short-lived cache; `HIGHER_CONSISTENCY` reads the primary.
+ */
+export type FgaConsistency = 'UNSPECIFIED' | 'MINIMIZE_LATENCY' | 'HIGHER_CONSISTENCY';
+export interface FgaConsistencyOptions {
+    consistency?: FgaConsistency;
+    /** A token from a write: the read reflects at least that write. */
+    consistency_token?: string;
 }
 /** An OpenFGA authorization model to persist. Validated before storage. */
 export interface FgaAuthorizationModelInput {
@@ -48,20 +70,80 @@ export interface FgaAuthorizationModelInput {
 export type FgaTupleKeys = FgaTupleKey[] | {
     tuple_keys: FgaTupleKey[];
 };
-export interface FgaCheckBody {
+export interface FgaCheckBody extends FgaConsistencyOptions {
     user: string;
     relation: string;
     object: string;
     /** Defaults to the store's latest model. */
     authorization_model_id?: string;
     contextual_tuples?: FgaTupleKeys;
+    /** Values for tuple-condition parameters (a tuple's own context wins). */
+    context?: Record<string, unknown>;
 }
-export interface FgaListObjectsBody {
+export interface FgaListObjectsBody extends FgaConsistencyOptions {
     user: string;
     relation: string;
     type: string;
     authorization_model_id?: string;
     contextual_tuples?: FgaTupleKeys;
+    /** Page size; without it every object is returned. */
+    limit?: number;
+    /** The `next_cursor` of the previous page. */
+    starting_after?: string;
+    context?: Record<string, unknown>;
+}
+export interface FgaListUsersBody extends FgaConsistencyOptions {
+    /** `type:id`. */
+    object: string;
+    relation: string;
+    /** Exactly one filter; add `relation` to get usersets such as `group:eng#member`. */
+    user_filters: [{
+        type: string;
+        relation?: string;
+    }];
+    authorization_model_id?: string;
+    contextual_tuples?: FgaTupleKeys;
+    context?: Record<string, unknown>;
+    /** 1–1000; defaults to 1000. */
+    page_size?: number;
+    continuation_token?: string;
+}
+export interface FgaListUsersResult {
+    object: 'fga.list_users';
+    /** `type:id`, `type:id#relation`, or `type:*` for a public wildcard. */
+    users: string[];
+    /** Ids a wildcard in `users` does not cover. */
+    excluded_users: string[];
+    /** Pass back for the next page; null on the last. */
+    continuation_token: string | null;
+    authorization_model_id: string;
+    consistency_token: string;
+}
+export interface FgaReadChangesParams {
+    /** Only changes to tuples on objects of this type. */
+    type?: string;
+    /** 1–100; defaults to 50. */
+    page_size?: number;
+    continuation_token?: string;
+    /** RFC 3339: only changes at or after it. */
+    start_time?: string;
+}
+export interface FgaTupleChange {
+    object: 'fga.tuple_change';
+    operation: 'write' | 'delete';
+    user: string;
+    relation: string;
+    target: string;
+    condition?: FgaTupleCondition;
+    consistency_token: string;
+    created_at: number;
+}
+export interface FgaChangesPage {
+    object: 'list';
+    data: FgaTupleChange[];
+    has_more: boolean;
+    /** Save it and call again later to receive only newer changes. */
+    continuation_token: string;
 }
 /** One item in a batch check; `correlation_id` is echoed back to match results. */
 export interface FgaBatchCheckItem {
@@ -70,16 +152,33 @@ export interface FgaBatchCheckItem {
     object: string;
     correlation_id?: string;
     contextual_tuples?: FgaTupleKeys;
+    context?: Record<string, unknown>;
 }
 export interface FgaBatchCheckResult {
     object: 'fga.batch_check';
     authorization_model_id: string;
+    consistency_token: string;
     result: Array<{
         correlation_id: string;
         allowed: boolean;
     }>;
 }
+/** How the instance runs FGA reads and keeps its tuple change log. */
+export interface FgaSettings {
+    object: 'fga.settings';
+    /** Result-cache TTL in ms; null uses the platform default, 0 turns the cache off. */
+    cache_ttl_ms: number | null;
+    /** Applied to reads that name no `consistency`. */
+    default_consistency: FgaConsistency;
+    /** Days of tuple change log kept; null keeps all of it. */
+    changelog_retention_days: number | null;
+}
+export type UpdateFgaSettingsBody = Partial<Omit<FgaSettings, 'object'>>;
 export declare function fgaResource(request: RequestFn): {
+    settings: {
+        get(): Promise<FgaSettings>;
+        update(body: UpdateFgaSettingsBody): Promise<FgaSettings>;
+    };
     stores: {
         list(): Promise<ListPage<FgaStore>>;
         create(body: {
@@ -97,14 +196,17 @@ export declare function fgaResource(request: RequestFn): {
         create(storeId: string, body: FgaAuthorizationModelInput, idempotencyKey?: string): Promise<FgaAuthorizationModel>;
         get(storeId: string, modelId: string): Promise<FgaAuthorizationModel>;
     };
-    /** Write and/or delete tuples in one atomic call. */
+    /** Write and/or delete tuples in one atomic call. `on_duplicate` / `on_missing` = `error` refuse a repeat write or a delete of nothing. */
     write(storeId: string, body: {
         writes?: FgaTupleKeys;
         deletes?: FgaTupleKeys;
+        on_duplicate?: "ignore" | "error";
+        on_missing?: "ignore" | "error";
     }, idempotencyKey?: string): Promise<{
         object: "fga.write_result";
         writes: number;
         deletes: number;
+        consistency_token: string;
     }>;
     /** Query stored tuples by any of user / relation / object. */
     read(storeId: string, body: {
@@ -117,18 +219,106 @@ export declare function fgaResource(request: RequestFn): {
         object: "fga.check";
         allowed: boolean;
         authorization_model_id: string;
+        consistency_token: string;
     }>;
     /** Resolve MANY access questions in one round trip (list-authorization UIs). */
     batchCheck(storeId: string, body: {
         checks: FgaBatchCheckItem[];
         authorization_model_id?: string;
-    }): Promise<FgaBatchCheckResult>;
+    } & FgaConsistencyOptions): Promise<FgaBatchCheckResult>;
     /** List the objects of a type a user has a relation to. */
     listObjects(storeId: string, body: FgaListObjectsBody): Promise<{
         object: "fga.list_objects";
         objects: string[];
+        has_more: boolean;
+        next_cursor: string | null;
         authorization_model_id: string;
+        consistency_token: string;
+    }>;
+    /**
+     * Who has a relation on an object: concrete users, usersets (give the filter
+     * a `relation`) and the `type:*` wildcard with `excluded_users`. One page.
+     */
+    listUsers(storeId: string, body: FgaListUsersBody): Promise<FgaListUsersResult>;
+    /** {@link listUsers} following `continuation_token` until every page is collected. */
+    listAllUsers(storeId: string, body: FgaListUsersBody): Promise<FgaListUsersResult>;
+    /**
+     * The store's tuple change log, in commit order. The returned
+     * `continuation_token` works even on the last page: persist it and call again
+     * to receive only what changed since.
+     */
+    readChanges(storeId: string, params?: FgaReadChangesParams): Promise<FgaChangesPage>;
+    /** What a local PDP syncs: a page of tuples (full), or the changes after `since` (a store revision). */
+    snapshot(storeId: string, params?: {
+        since?: number;
+        cursor?: string;
+        limit?: number;
+    }): Promise<FgaSnapshot>;
+    /** Bulk-import tuples (idempotent; `dry_run` reports without writing). */
+    importTuples(storeId: string, body: {
+        tuples: Array<FgaTupleKey>;
+        dry_run?: boolean;
+    }): Promise<{
+        object: "fga.import_result";
+        dry_run: boolean;
+        total: number;
+        new: number;
+        existing: number;
+        revision: number;
+        consistency_token?: string;
+    }>;
+    /** Run an FGA test suite in memory (the model from `dsl` / `modules`, or the store's). */
+    runTests(storeId: string, body: FgaTestSuite): Promise<FgaTestReport>;
+    /** The same, with no store: the model comes from `dsl` / `modules`. */
+    runTestsWithoutStore(body: FgaTestSuite): Promise<FgaTestReport>;
+    /** Validate a model and convert it DSL <-> JSON; `modules` compile to one model. */
+    transformModel(body: {
+        dsl?: string;
+        modules?: Array<{
+            name: string;
+            contents: string;
+        }>;
+        model?: Record<string, unknown>;
+    }): Promise<{
+        object: "fga.model_transform";
+        valid: true;
+        model: Record<string, unknown>;
+        dsl: string;
+    }>;
+    /** Nodes and edges of a model version, for a visualizer. */
+    modelGraph(storeId: string, modelId: string): Promise<{
+        object: "fga.model_graph";
+        model_id: string;
+        nodes: Array<{
+            id: string;
+            kind: "type" | "relation";
+            type: string;
+            relation?: string;
+        }>;
+        edges: Array<{
+            from: string;
+            to: string;
+            kind: "direct" | "computed" | "tupleset" | "parent";
+            label?: string;
+        }>;
     }>;
+    /** What changed from the previous version (or `against`). */
+    modelDiff(storeId: string, modelId: string, against?: string): Promise<FgaModelDiff>;
+    /** OpenFGA assertions stored against a model version. */
+    assertions: {
+        get(storeId: string, modelId: string): Promise<{
+            authorization_model_id: string;
+            assertions: unknown[];
+        }>;
+        put(storeId: string, modelId: string, assertions: unknown[]): Promise<void>;
+        run(storeId: string, modelId: string): Promise<{
+            object: "fga.assertion_run";
+            passed: boolean;
+            total: number;
+            failed: number;
+            results: unknown[];
+        }>;
+    };
     /** Expand the full userset tree for an object#relation. */
     expand(storeId: string, body: {
         object: string;
@@ -153,6 +343,7 @@ export declare function fgaResource(request: RequestFn): {
             object: "fga.write_result";
             writes: number;
             deletes: number;
+            consistency_token: string;
         }>;
         read: (body: {
             user?: string;
@@ -163,16 +354,23 @@ export declare function fgaResource(request: RequestFn): {
             object: "fga.check";
             allowed: boolean;
             authorization_model_id: string;
+            consistency_token: string;
         }>;
         batchCheck: (body: {
             checks: FgaBatchCheckItem[];
             authorization_model_id?: string;
-        }) => Promise<FgaBatchCheckResult>;
+        } & FgaConsistencyOptions) => Promise<FgaBatchCheckResult>;
         listObjects: (body: FgaListObjectsBody) => Promise<{
             object: "fga.list_objects";
             objects: string[];
+            has_more: boolean;
+            next_cursor: string | null;
             authorization_model_id: string;
+            consistency_token: string;
         }>;
+        listUsers: (body: FgaListUsersBody) => Promise<FgaListUsersResult>;
+        listAllUsers: (body: FgaListUsersBody) => Promise<FgaListUsersResult>;
+        readChanges: (params?: FgaReadChangesParams) => Promise<FgaChangesPage>;
         expand: (body: {
             object: string;
             relation: string;
@@ -189,3 +387,101 @@ export declare function fgaResource(request: RequestFn): {
         };
     };
 };
+export interface FgaSnapshot {
+    object: 'fga.snapshot';
+    store_id: string;
+    model_id: string | null;
+    model: Record<string, unknown> | null;
+    full: boolean;
+    /** The store revision this snapshot is at; pass it back as `since`. */
+    revision: number;
+    tuples?: Array<FgaTupleKey>;
+    changes?: Array<FgaTupleKey & {
+        operation: 'write' | 'delete';
+    }>;
+    next_cursor?: string | null;
+    has_more: boolean;
+}
+export interface FgaTestSuite {
+    model_id?: string;
+    dsl?: string;
+    modules?: Array<{
+        name: string;
+        contents: string;
+    }>;
+    tuples?: Array<FgaTupleKey>;
+    tests: Array<{
+        name?: string;
+        tuples?: Array<FgaTupleKey>;
+        check?: Array<{
+            user: string;
+            object: string;
+            context?: Record<string, unknown>;
+            assertions: Record<string, boolean>;
+        }>;
+        list_objects?: Array<{
+            user: string;
+            type: string;
+            context?: Record<string, unknown>;
+            assertions: Record<string, string[]>;
+        }>;
+        list_users?: Array<{
+            object: string;
+            user_filter: {
+                type: string;
+                relation?: string;
+            } | Array<{
+                type: string;
+                relation?: string;
+            }>;
+            context?: Record<string, unknown>;
+            assertions: Record<string, {
+                users: string[];
+            }>;
+        }>;
+    }>;
+}
+export interface FgaTestReport {
+    object: 'fga.test_report';
+    passed: boolean;
+    total: number;
+    failed: number;
+    coverage: {
+        relations: number;
+        covered: number;
+        uncovered: string[];
+    };
+    results: Array<{
+        name: string;
+        passed: boolean;
+        checks: number;
+        failures: Array<{
+            kind: 'check' | 'list_objects' | 'list_users';
+            query: string;
+            expected: unknown;
+            actual: unknown;
+            error?: string;
+        }>;
+    }>;
+}
+export interface FgaModelDiff {
+    object: 'fga.model_diff';
+    from: string | null;
+    to: string;
+    types: {
+        added: string[];
+        removed: string[];
+    };
+    relations: {
+        added: string[];
+        removed: string[];
+        changed: string[];
+    };
+    conditions: {
+        added: string[];
+        removed: string[];
+        changed: string[];
+    };
+    breaking: boolean;
+    identical: boolean;
+}

package/dist/client/fga.js

@@ -4,6 +4,14 @@ exports.fgaResource = fgaResource;
 const request_1 = require("./request");
 function fgaResource(request) {
     const api = {
+        settings: {
+            get() {
+                return request({ method: 'GET', path: '/v1/fga/settings' });
+            },
+            update(body) {
+                return request({ method: 'PUT', path: '/v1/fga/settings', body });
+            },
+        },
         stores: {
             list() {
                 return request({ method: 'GET', path: '/v1/fga/stores' });
@@ -40,7 +48,7 @@ function fgaResource(request) {
                 });
             },
         },
-        /** Write and/or delete tuples in one atomic call. */
+        /** Write and/or delete tuples in one atomic call. `on_duplicate` / `on_missing` = `error` refuse a repeat write or a delete of nothing. */
         write(storeId, body, idempotencyKey) {
             return request({ method: 'POST', path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/write`, body, idempotencyKey });
         },
@@ -60,6 +68,75 @@ function fgaResource(request) {
         listObjects(storeId, body) {
             return request({ method: 'POST', path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/list-objects`, body });
         },
+        /**
+         * Who has a relation on an object: concrete users, usersets (give the filter
+         * a `relation`) and the `type:*` wildcard with `excluded_users`. One page.
+         */
+        listUsers(storeId, body) {
+            return request({ method: 'POST', path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/list-users`, body });
+        },
+        /** {@link listUsers} following `continuation_token` until every page is collected. */
+        async listAllUsers(storeId, body) {
+            let page = await api.listUsers(storeId, body);
+            const users = [...page.users];
+            while (page.continuation_token) {
+                page = await api.listUsers(storeId, { ...body, continuation_token: page.continuation_token });
+                users.push(...page.users);
+            }
+            return { ...page, users };
+        },
+        /**
+         * The store's tuple change log, in commit order. The returned
+         * `continuation_token` works even on the last page: persist it and call again
+         * to receive only what changed since.
+         */
+        readChanges(storeId, params = {}) {
+            return request({
+                method: 'GET',
+                path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/changes`,
+                query: { ...params },
+            });
+        },
+        /** What a local PDP syncs: a page of tuples (full), or the changes after `since` (a store revision). */
+        snapshot(storeId, params = {}) {
+            return request({ method: 'GET', path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/snapshot`, query: { ...params } });
+        },
+        /** Bulk-import tuples (idempotent; `dry_run` reports without writing). */
+        importTuples(storeId, body) {
+            return request({ method: 'POST', path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/import`, body });
+        },
+        /** Run an FGA test suite in memory (the model from `dsl` / `modules`, or the store's). */
+        runTests(storeId, body) {
+            return request({ method: 'POST', path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/tests`, body });
+        },
+        /** The same, with no store: the model comes from `dsl` / `modules`. */
+        runTestsWithoutStore(body) {
+            return request({ method: 'POST', path: '/v1/fga/tests', body });
+        },
+        /** Validate a model and convert it DSL <-> JSON; `modules` compile to one model. */
+        transformModel(body) {
+            return request({ method: 'POST', path: '/v1/fga/models/transform', body });
+        },
+        /** Nodes and edges of a model version, for a visualizer. */
+        modelGraph(storeId, modelId) {
+            return request({ method: 'GET', path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/authorization-models/${(0, request_1.enc)(modelId)}/graph` });
+        },
+        /** What changed from the previous version (or `against`). */
+        modelDiff(storeId, modelId, against) {
+            return request({ method: 'GET', path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/authorization-models/${(0, request_1.enc)(modelId)}/diff`, query: { against } });
+        },
+        /** OpenFGA assertions stored against a model version. */
+        assertions: {
+            get(storeId, modelId) {
+                return request({ method: 'GET', path: `/v1/openfga/stores/${(0, request_1.enc)(storeId)}/assertions/${(0, request_1.enc)(modelId)}` });
+            },
+            put(storeId, modelId, assertions) {
+                return request({ method: 'PUT', path: `/v1/openfga/stores/${(0, request_1.enc)(storeId)}/assertions/${(0, request_1.enc)(modelId)}`, body: { assertions } });
+            },
+            run(storeId, modelId) {
+                return request({ method: 'POST', path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/authorization-models/${(0, request_1.enc)(modelId)}/assertions/run` });
+            },
+        },
         /** Expand the full userset tree for an object#relation. */
         expand(storeId, body) {
             return request({ method: 'POST', path: `/v1/fga/stores/${(0, request_1.enc)(storeId)}/expand`, body });
@@ -77,6 +154,9 @@ function fgaResource(request) {
                 check: (body) => api.check(storeId, body),
                 batchCheck: (body) => api.batchCheck(storeId, body),
                 listObjects: (body) => api.listObjects(storeId, body),
+                listUsers: (body) => api.listUsers(storeId, body),
+                listAllUsers: (body) => api.listAllUsers(storeId, body),
+                readChanges: (params) => api.readChanges(storeId, params),
                 expand: (body) => api.expand(storeId, body),
                 models: {
                     list: () => api.models.list(storeId),

package/dist/client/fga.js.map

@@ -1 +1 @@
-{"version":3,"file":"fga.js","sourceRoot":"","sources":["../../src/client/fga.ts"],"names":[],"mappings":";;AAwFA,kCAoHC;AA5MD,uCAAgD;AAwFhD,SAAgB,WAAW,CAAC,OAAkB;IAC5C,MAAM,GAAG,GAAG;QACV,MAAM,EAAE;YACN,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,CAAC,IAAsB,EAAE,cAAuB;gBACpD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,GAAG,CAAC,EAAU;gBACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,CAAC,EAAU;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1E,CAAC;SACF;QAED,MAAM,EAAE;YACN,IAAI,CAAC,OAAe;gBAClB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,uBAAuB;iBAC5D,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,OAAe,EACf,IAAgC,EAChC,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,uBAAuB;oBAC3D,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,GAAG,CAAC,OAAe,EAAE,OAAe;gBAClC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,yBAAyB,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE;iBAC5E,CAAC,CAAC;YACL,CAAC;SACF;QAED,qDAAqD;QACrD,KAAK,CACH,OAAe,EACf,IAAuD,EACvD,cAAuB;YAEvB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,8DAA8D;QAC9D,IAAI,CACF,OAAe,EACf,IAA2D;YAE3D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,0DAA0D;QAC1D,KAAK,CACH,OAAe,EACf,IAAkB;YAElB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,gFAAgF;QAChF,UAAU,CACR,OAAe,EACf,IAAsE;YAEtE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,2DAA2D;QAC3D,WAAW,CACT,OAAe,EACf,IAAwB;YAExB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAChG,CAAC;QACD,2DAA2D;QAC3D,MAAM,CACJ,OAAe,EACf,IAA2E;YAE3E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED;;;;;WAKG;QACH,KAAK,CAAC,OAAe;YACnB,OAAO;gBACL,KAAK,EAAE,CAAC,IAAuD,EAAE,cAAuB,EAAE,EAAE,CAC1F,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC;gBAC1C,IAAI,EAAE,CAAC,IAA2D,EAAE,EAAE,CACpE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC;gBACzB,KAAK,EAAE,CAAC,IAAkB,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;gBACvD,UAAU,EAAE,CAAC,IAAsE,EAAE,EAAE,CACrF,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC;gBAC/B,WAAW,EAAE,CAAC,IAAwB,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC;gBACzE,MAAM,EAAE,CAAC,IAA2E,EAAE,EAAE,CACtF,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC;gBAC3B,MAAM,EAAE;oBACN,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;oBACpC,MAAM,EAAE,CAAC,IAAgC,EAAE,cAAuB,EAAE,EAAE,CACpE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC;oBAClD,GAAG,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;iBAC3D;aACF,CAAC;QACJ,CAAC;KACF,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"fga.js","sourceRoot":"","sources":["../../src/client/fga.ts"],"names":[],"mappings":";;AA8LA,kCAoMC;AAlYD,uCAAgD;AA8LhD,SAAgB,WAAW,CAAC,OAAkB;IAC5C,MAAM,GAAG,GAAG;QACV,QAAQ,EAAE;YACR,GAAG;gBACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,CAAC,IAA2B;gBAChC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,CAAC;SACF;QACD,MAAM,EAAE;YACN,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,CAAC,IAAsB,EAAE,cAAuB;gBACpD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,GAAG,CAAC,EAAU;gBACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,CAAC,EAAU;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1E,CAAC;SACF;QAED,MAAM,EAAE;YACN,IAAI,CAAC,OAAe;gBAClB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,uBAAuB;iBAC5D,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,OAAe,EACf,IAAgC,EAChC,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,uBAAuB;oBAC3D,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,GAAG,CAAC,OAAe,EAAE,OAAe;gBAClC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,yBAAyB,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE;iBAC5E,CAAC,CAAC;YACL,CAAC;SACF;QAED,2IAA2I;QAC3I,KAAK,CACH,OAAe,EACf,IAA2H,EAC3H,cAAuB;YAEvB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,8DAA8D;QAC9D,IAAI,CACF,OAAe,EACf,IAA2D;YAE3D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,0DAA0D;QAC1D,KAAK,CACH,OAAe,EACf,IAAkB;YAElB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,gFAAgF;QAChF,UAAU,CACR,OAAe,EACf,IAA8F;YAE9F,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,2DAA2D;QAC3D,WAAW,CACT,OAAe,EACf,IAAwB;YAExB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAChG,CAAC;QACD;;;WAGG;QACH,SAAS,CAAC,OAAe,EAAE,IAAsB;YAC/C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,sFAAsF;QACtF,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,IAAsB;YACxD,IAAI,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAC/B,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;gBAC9F,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;YACD,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD;;;;WAIG;QACH,WAAW,CAAC,OAAe,EAAE,SAA+B,EAAE;YAC5D,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,UAAU;gBAC9C,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE;aACrB,CAAC,CAAC;QACL,CAAC;QACD,wGAAwG;QACxG,QAAQ,CAAC,OAAe,EAAE,SAA8D,EAAE;YACxF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,0EAA0E;QAC1E,YAAY,CAAC,OAAe,EAAE,IAAuD;YACnF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,0FAA0F;QAC1F,QAAQ,CAAC,OAAe,EAAE,IAAkB;YAC1C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,uEAAuE;QACvE,oBAAoB,CAAC,IAAkB;YACrC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,oFAAoF;QACpF,cAAc,CAAC,IAA4G;YACzH,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,4DAA4D;QAC5D,UAAU,CAAC,OAAe,EAAE,OAAe;YACzC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,yBAAyB,IAAA,aAAG,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvH,CAAC;QACD,6DAA6D;QAC7D,SAAS,CAAC,OAAe,EAAE,OAAe,EAAE,OAAgB;YAC1D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,yBAAyB,IAAA,aAAG,EAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC1I,CAAC;QACD,yDAAyD;QACzD,UAAU,EAAE;YACV,GAAG,CAAC,OAAe,EAAE,OAAe;gBAClC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,IAAA,aAAG,EAAC,OAAO,CAAC,eAAe,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3G,CAAC;YACD,GAAG,CAAC,OAAe,EAAE,OAAe,EAAE,UAAqB;gBACzD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,IAAA,aAAG,EAAC,OAAO,CAAC,eAAe,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;YACjI,CAAC;YACD,GAAG,CAAC,OAAe,EAAE,OAAe;gBAClC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,yBAAyB,IAAA,aAAG,EAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;YACjI,CAAC;SACF;QACD,2DAA2D;QAC3D,MAAM,CACJ,OAAe,EACf,IAA2E;YAE3E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED;;;;;WAKG;QACH,KAAK,CAAC,OAAe;YACnB,OAAO;gBACL,KAAK,EAAE,CAAC,IAAuD,EAAE,cAAuB,EAAE,EAAE,CAC1F,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC;gBAC1C,IAAI,EAAE,CAAC,IAA2D,EAAE,EAAE,CACpE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC;gBACzB,KAAK,EAAE,CAAC,IAAkB,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;gBACvD,UAAU,EAAE,CAAC,IAA8F,EAAE,EAAE,CAC7G,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC;gBAC/B,WAAW,EAAE,CAAC,IAAwB,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC;gBACzE,SAAS,EAAE,CAAC,IAAsB,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC;gBACnE,YAAY,EAAE,CAAC,IAAsB,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC;gBACzE,WAAW,EAAE,CAAC,MAA6B,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC;gBAChF,MAAM,EAAE,CAAC,IAA2E,EAAE,EAAE,CACtF,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC;gBAC3B,MAAM,EAAE;oBACN,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;oBACpC,MAAM,EAAE,CAAC,IAAgC,EAAE,cAAuB,EAAE,EAAE,CACpE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC;oBAClD,GAAG,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC;iBAC3D;aACF,CAAC;QACJ,CAAC;KACF,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC"}