@atlasauth/pca-analyzer 0.0.0-stage → 0.1.0

package/dist/enumerate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enumerate.js","sourceRoot":"","sources":["../src/enumerate.ts"],"names":[],"mappings":";;;AAyCA,0CAIC;AA2CD,0BAWC;AA8BD,sCAyEC;AAED,kCAIC;AAqCD,0CAUC;AAwGD,wBAKC;AAGD,oCAWC;AAED,kCAOC;AAeD,wBAMC;AAxZD,wCAAuF;AAEvF,uCAA2C;AAC3C,mCAAsC;AACtC,mCAA8C;AAG9C;;;;;;;;;;;;GAYG;AAEH,MAAM,MAAM,GAAkB,MAAM,CAAC,uBAAuB,CAAC,CAAC;AAG9D,MAAM,UAAU,GAAG,wCAAwC,CAAC;AAC5D,MAAM,cAAc,GAAG,4CAA4C,CAAC;AAEpE,+EAA+E;AAClE,QAAA,wBAAwB,GAAG,OAAO,CAAC;AAahD,SAAgB,eAAe,CAAC,CAAc;IAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,OAAO,GAAG,SAAS,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAAC,CAAY,EAAE,OAAoB;IAC9D,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO;IAChD,IAAI,IAAA,sBAAgB,EAAC,CAAC,CAAC,EAAE,CAAC;QACxB,IAAI,QAAQ,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM;gBAAE,oBAAoB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;aACpG,IAAI,QAAQ,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM;gBAAE,oBAAoB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;aACzG,IAAI,KAAK,IAAI,CAAC;YAAE,oBAAoB,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,IAAI,CAAC,IAAA,qBAAe,EAAC,CAAC,CAAC;QAAE,OAAO;IAChC,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,WAAW,EAAE,CAAC;QACrF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,sEAAsE,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAgC;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QAClD,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QACrB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK;gBAAE,oBAAoB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACtB,CAAC;AAED,SAAgB,OAAO,CAAC,CAAc;IACpC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,EAAE,GAAG,IAAA,wBAAc,EAAC,OAAO,CAAC,CAAC;IACnC,OAAO;QACL,UAAU;QACV,OAAO;QACP,SAAS,EAAE,EAAE,CAAC,GAAG;QACjB,YAAY,EAAE,EAAE,CAAC,MAAM;QACvB,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,WAAW,EAAE,iBAAiB,CAAC,UAAU,CAAC;KAC3C,CAAC;AACJ,CAAC;AAqBD,SAAS,eAAe,CAAC,CAAgB,EAAE,IAAiB;IAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IAClB,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;QAC9F,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;SAAM,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,KAAK,MAAM,CAAC,IAAI,CAAC;YAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,SAAgB,aAAa,CAAC,MAAmB;IAC/C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEtD,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,CAAgB,EAAQ,EAAE;QAC5D,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,CAAC,CAAqB,EAAQ,EAAE;QACvD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,CAAC,0CAA0C;QACpF,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,+DAA+D;QAChG,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5B,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,gBAAgB,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QACD,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,CAAY,EAAQ,EAAE;QACxC,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO;QAChD,+FAA+F;QAC/F,4CAA4C;QAC5C,IAAI,IAAA,sBAAgB,EAAC,CAAC,CAAC,EAAE,CAAC;YACxB,IAAI,QAAQ,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;gBAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM;oBAAE,UAAU,CAAC,CAAC,CAAC,CAAC;iBACjF,IAAI,QAAQ,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;gBAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM;oBAAE,UAAU,CAAC,CAAC,CAAC,CAAC;iBACtF,IAAI,KAAK,IAAI,CAAC;gBAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAA,qBAAe,EAAC,CAAC,CAAC;YAAE,OAAO;QAChC,IAAI,CAAC,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YAC9B,eAAe,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,KAAK,iBAAiB,EAAE,CAAC;YAClC,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;gBAAE,gBAAgB,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;iBACjF,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;gBAAE,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;iBAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK;oBAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;wBAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;YACzG,OAAO;QACT,CAAC;QACD,YAAY,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,SAAS;YAClD,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC/B,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG;oBAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/C,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI;oBAAE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,GAAG;wBAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACtF,CAAC;YACD,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK;oBAAE,UAAU,CAAC,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,cAAc,IAAI,EAAE;QAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACjE,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,oBAAoB,IAAI,EAAE;QAAE,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAE/F,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI;QACJ,MAAM,EAAE,CAAC,GAAG,IAAA,mBAAW,EAAC,KAAK,CAAC,EAAE,MAAM,CAAW;KAClD,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,UAAU,CAAC;QACpC,SAAS,EAAE,CAAC,GAAG,gBAAgB,EAAE,cAAc,CAAC;QAChD,UAAU,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,2BAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7E,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAgB,WAAW,CAAC,EAAU;IACpC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;IACrE,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM;QAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IAChD,OAAO,CAAC,CAAC;AACX,CAAC;AAYD,QAAQ,CAAC,CAAC,eAAe,CACvB,MAAwB,EACxB,CAAS,EACT,GAAyB;IAEzB,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO;IACT,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;YACjB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,KAAK,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,QAAe,CAAC,CAAC,eAAe,CAAC,EAAU;IACzC,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;QAC5B,KAAK,MAAM,QAAQ,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;YACpC,KAAK,MAAM,QAAQ,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC;gBACrC,KAAK,MAAM,WAAW,IAAI,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,EAAE,CAAC;oBACnE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;gBAClD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAoBD,SAAS,MAAM;IACb,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,MAAM,CAAC,IAAc,EAAE,IAAuB,EAAE,KAAc;IACrE,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAChC,IAAI,GAAG,OAAO,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,WAAW,CAAC,IAAc;IACjC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC;IAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,GAAQ;IAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAmB;QACtC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QACrB,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;KAClB,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS,CAAC,oDAAoD;QACtF,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEjC,MAAM,MAAM,GAAkB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrF,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;YAC/C,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,UAAU;gBAAE,SAAS,CAAC,qBAAqB;YACzE,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrB,6FAA6F;gBAC7F,8FAA8F;gBAC9F,IAAI,CAAC,KAAK,CAAC,IAAI;oBAAE,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,mBAAmB,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC1E,MAAM,OAAO,GAAG,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAC9F,MAAM,GAAG,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9E,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAIzB;IACC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,eAAe,CAAC,KAAkB,EAAE,QAA4B;IACvE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,4DAA4D;IACtG,MAAM,GAAG,GAAI,2BAAyC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzE,OAAO,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC;AACzC,CAAC;AAED,kGAAkG;AAClG,SAAgB,MAAM,CAAC,KAAkB,EAAE,GAAQ;IACjD,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,OAAO,IAAA,wBAAkB,EAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC;AAC3D,CAAC;AAED,6FAA6F;AAC7F,SAAgB,YAAY,CAAC,KAAkB,EAAE,MAAsB;IACrE,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,kBAAkB,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,MAAM,GAAG,GAAkB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;IAClH,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS;QAAE,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC,kBAAkB,CAAC;IACjG,MAAM,GAAG,GAAkB;QACzB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;QACtC,GAAG,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;KAC/B,CAAC;IACF,OAAO,IAAA,wBAAkB,EAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC;AAC3D,CAAC;AAED,SAAgB,WAAW,CAAC,GAAQ;IAClC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAmB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAC9G,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,kBAAkB,GAAG,GAAG,CAAC,QAAQ,CAAC;IACzE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC1E,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IAC9D,OAAO,MAAM,CAAC;AAChB,CAAC;AAWD;;;GAGG;AACH,SAAgB,MAAM,CAAC,EAAU,EAAE,SAAgC,EAAE,GAAW;IAC9E,IAAI,WAAW,CAAC,EAAE,CAAC,GAAG,GAAG;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,CAAC,EAAE,CAAC;QACtC,IAAI,SAAS,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC"}

package/dist/field.d.ts

@@ -0,0 +1,42 @@
+import { type Condition, type ConditionOp } from '@atlasauth/pca';
+/**
+ * The interval + finite-set engine for a single `where` field.
+ *
+ * PCA's `where` conditions over one field are a conjunction of threshold tests (lt/lte/gt/gte/eq on
+ * numbers), membership tests (eq/ne/in/nin over finite values) and string-prefix tests. Any such
+ * conjunction partitions the value line into finitely many CELLS on which every condition is constant,
+ * bounded by the literals that appear. Picking one representative value per cell is therefore a SOUND
+ * AND COMPLETE probe set for the decided fragment: two policies agree on all actions iff they agree on
+ * all actions drawn from these representatives (the finite-distinguishing-value property that makes the
+ * relational queries decidable by enumeration — see enumerate.ts).
+ *
+ * `ref` conditions (operand is another field) are NOT a single-field constraint; they are flagged
+ * upstream as undecidable and skipped here.
+ */
+/** A sentinel string guaranteed not to equal, be a prefix of, or be prefixed by any policy literal. */
+export declare const FRESH_STRING = "\0atlas-analyzer::fresh-unmatched\0";
+/**
+ * Compute the representative probe values for one field from the conjunction of `where` conditions on
+ * it. The result is finite and distinguishing for the decided fragment. The caller adds an `absent`
+ * representative separately (to probe `exists` and the params-absent fail-closed semantics).
+ */
+export declare function fieldProbes(conditions: readonly Condition[]): unknown[];
+export interface NumInterval {
+    lo: number;
+    loInclusive: boolean;
+    hi: number;
+    hiInclusive: boolean;
+}
+export declare const FULL_INTERVAL: NumInterval;
+/** Tighten an interval by one numeric condition. Returns the same interval for non-numeric operands. */
+export declare function tightenInterval(iv: NumInterval, op: ConditionOp, value: unknown): NumInterval;
+/** An interval is empty iff lo > hi, or lo == hi with either bound exclusive. */
+export declare function intervalEmpty(iv: NumInterval): boolean;
+/**
+ * Decide whether the numeric subset of a field's `where` conjunction is satisfiable. Detects, e.g.,
+ * `amount >= 100 AND amount <= 10` as unsatisfiable (empty interval). Conditions with non-numeric or
+ * `ref` operands, and boolean groupings (all_of/any_of/not), do not participate (they are decided by
+ * the finite-set / enumeration path); ignoring them only ever widens the interval, so a satisfiable
+ * verdict here is sound as a necessary condition.
+ */
+export declare function numericConjunctionSatisfiable(conditions: readonly Condition[]): boolean;

package/dist/field.js

@@ -0,0 +1,232 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FULL_INTERVAL = exports.FRESH_STRING = void 0;
+exports.fieldProbes = fieldProbes;
+exports.tightenInterval = tightenInterval;
+exports.intervalEmpty = intervalEmpty;
+exports.numericConjunctionSatisfiable = numericConjunctionSatisfiable;
+const pca_1 = require("@atlasauth/pca");
+/**
+ * The interval + finite-set engine for a single `where` field.
+ *
+ * PCA's `where` conditions over one field are a conjunction of threshold tests (lt/lte/gt/gte/eq on
+ * numbers), membership tests (eq/ne/in/nin over finite values) and string-prefix tests. Any such
+ * conjunction partitions the value line into finitely many CELLS on which every condition is constant,
+ * bounded by the literals that appear. Picking one representative value per cell is therefore a SOUND
+ * AND COMPLETE probe set for the decided fragment: two policies agree on all actions iff they agree on
+ * all actions drawn from these representatives (the finite-distinguishing-value property that makes the
+ * relational queries decidable by enumeration — see enumerate.ts).
+ *
+ * `ref` conditions (operand is another field) are NOT a single-field constraint; they are flagged
+ * upstream as undecidable and skipped here.
+ */
+/** A sentinel string guaranteed not to equal, be a prefix of, or be prefixed by any policy literal. */
+exports.FRESH_STRING = '\u0000atlas-analyzer::fresh-unmatched\u0000';
+function isFiniteNumber(v) {
+    return typeof v === 'number' && Number.isFinite(v);
+}
+/**
+ * Representatives of a numeric threshold arrangement: below the min, each threshold exactly, the open
+ * interval between each pair of consecutive thresholds (its midpoint), and above the max. This is the
+ * minimal set on which every `x {lt,lte,gt,gte,eq} t` built from these thresholds is constant per cell.
+ */
+function numericCellReps(thresholds) {
+    const sorted = [...new Set(thresholds)].filter(Number.isFinite).sort((a, b) => a - b);
+    if (sorted.length === 0)
+        return [];
+    const first = sorted[0];
+    const last = sorted[sorted.length - 1];
+    if (first === undefined || last === undefined)
+        return [];
+    const out = [first - 1];
+    for (let i = 0; i < sorted.length; i++) {
+        const ti = sorted[i];
+        if (ti === undefined)
+            continue;
+        out.push(ti);
+        const tn = sorted[i + 1];
+        if (tn !== undefined)
+            out.push((ti + tn) / 2);
+    }
+    out.push(last + 1);
+    return out;
+}
+/** A stable key for de-duplicating representative values of mixed type. */
+function valueKey(x) {
+    if (x === exports.FRESH_STRING)
+        return 's:__fresh__';
+    try {
+        return typeof x + ':' + JSON.stringify(x);
+    }
+    catch {
+        return typeof x + ':<unserializable>';
+    }
+}
+/**
+ * Compute the representative probe values for one field from the conjunction of `where` conditions on
+ * it. The result is finite and distinguishing for the decided fragment. The caller adds an `absent`
+ * representative separately (to probe `exists` and the params-absent fail-closed semantics).
+ */
+function fieldProbes(conditions) {
+    const literals = [];
+    const thresholds = [];
+    const prefixes = [];
+    let hasNumericOp = false;
+    for (const c of conditions) {
+        // Group conditions (all_of/any_of/not) are flattened to their leaves upstream by `collectProbes`;
+        // a cross-field `ref` relation is undecidable and also handled upstream. Skip either here.
+        if (!(0, pca_1.isLeafCondition)(c) || c.ref !== undefined)
+            continue;
+        const v = c.value;
+        switch (c.op) {
+            case 'eq':
+            case 'ne':
+                literals.push(v);
+                if (isFiniteNumber(v)) {
+                    thresholds.push(v);
+                    hasNumericOp = true;
+                }
+                break;
+            case 'in':
+            case 'nin':
+                if (Array.isArray(v)) {
+                    for (const x of v) {
+                        literals.push(x);
+                        if (isFiniteNumber(x)) {
+                            thresholds.push(x);
+                            hasNumericOp = true;
+                        }
+                    }
+                }
+                break;
+            case 'lt':
+            case 'lte':
+            case 'gt':
+            case 'gte':
+                if (isFiniteNumber(v)) {
+                    thresholds.push(v);
+                    hasNumericOp = true;
+                }
+                break;
+            case 'prefix':
+            case 'like':
+            case 'matches':
+            case 'is_a':
+                // The literal and a strictly-extending variant give the enumerator something to hit; the op
+                // itself is flagged undecidable, so the verdict fails safe regardless.
+                if (typeof v === 'string') {
+                    literals.push(v);
+                    if (c.op === 'prefix')
+                        prefixes.push(v);
+                }
+                break;
+            case 'member_of':
+                if (typeof v === 'string')
+                    literals.push(v);
+                else if (Array.isArray(v))
+                    for (const x of v)
+                        if (typeof x === 'string')
+                            literals.push(x);
+                break;
+            case 'exists':
+            default:
+                break;
+        }
+    }
+    const out = [];
+    const seen = new Set();
+    const add = (x) => {
+        const k = valueKey(x);
+        if (!seen.has(k)) {
+            seen.add(k);
+            out.push(x);
+        }
+    };
+    for (const l of literals)
+        add(l);
+    for (const n of numericCellReps(thresholds))
+        add(n);
+    for (const p of prefixes) {
+        add(p);
+        add(p + 'x'); // a value strictly extending the prefix (distinguishes prefix from exact)
+    }
+    add(exports.FRESH_STRING); // a value matching no eq/in/prefix literal
+    if (hasNumericOp && thresholds.length > 0) {
+        const mx = Math.max(...thresholds);
+        if (Number.isFinite(mx))
+            add(mx + 1); // a value above every numeric threshold
+    }
+    return out;
+}
+exports.FULL_INTERVAL = { lo: -Infinity, loInclusive: false, hi: Infinity, hiInclusive: false };
+/** Tighten an interval by one numeric condition. Returns the same interval for non-numeric operands. */
+function tightenInterval(iv, op, value) {
+    if (!isFiniteNumber(value))
+        return iv;
+    const next = { ...iv };
+    switch (op) {
+        case 'eq':
+            if (value > next.lo || (value === next.lo && !next.loInclusive)) {
+                next.lo = value;
+                next.loInclusive = true;
+            }
+            if (value < next.hi || (value === next.hi && !next.hiInclusive)) {
+                next.hi = value;
+                next.hiInclusive = true;
+            }
+            break;
+        case 'gte':
+            // A stricter existing lower bound (gt at the same value) is kept; only a higher value binds.
+            if (value > next.lo) {
+                next.lo = value;
+                next.loInclusive = true;
+            }
+            break;
+        case 'gt':
+            if (value > next.lo || (value === next.lo && next.loInclusive)) {
+                next.lo = value;
+                next.loInclusive = false;
+            }
+            break;
+        case 'lte':
+            if (value < next.hi) {
+                next.hi = value;
+                next.hiInclusive = true;
+            }
+            break;
+        case 'lt':
+            if (value < next.hi || (value === next.hi && next.hiInclusive)) {
+                next.hi = value;
+                next.hiInclusive = false;
+            }
+            break;
+        default:
+            break;
+    }
+    return next;
+}
+/** An interval is empty iff lo > hi, or lo == hi with either bound exclusive. */
+function intervalEmpty(iv) {
+    if (iv.lo > iv.hi)
+        return true;
+    if (iv.lo === iv.hi)
+        return !(iv.loInclusive && iv.hiInclusive);
+    return false;
+}
+/**
+ * Decide whether the numeric subset of a field's `where` conjunction is satisfiable. Detects, e.g.,
+ * `amount >= 100 AND amount <= 10` as unsatisfiable (empty interval). Conditions with non-numeric or
+ * `ref` operands, and boolean groupings (all_of/any_of/not), do not participate (they are decided by
+ * the finite-set / enumeration path); ignoring them only ever widens the interval, so a satisfiable
+ * verdict here is sound as a necessary condition.
+ */
+function numericConjunctionSatisfiable(conditions) {
+    let iv = exports.FULL_INTERVAL;
+    for (const c of conditions) {
+        if (!(0, pca_1.isLeafCondition)(c) || c.ref !== undefined)
+            continue;
+        iv = tightenInterval(iv, c.op, c.value);
+    }
+    return !intervalEmpty(iv);
+}
+//# sourceMappingURL=field.js.map

package/dist/field.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"field.js","sourceRoot":"","sources":["../src/field.ts"],"names":[],"mappings":";;;AA8DA,kCAoFC;AAcD,0CA2CC;AAGD,sCAIC;AASD,sEAOC;AAlOD,wCAAmF;AAEnF;;;;;;;;;;;;;GAaG;AAEH,uGAAuG;AAC1F,QAAA,YAAY,GAAG,6CAA6C,CAAC;AAE1E,SAAS,cAAc,CAAC,CAAU;IAChC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,UAA6B;IACpD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACzD,MAAM,GAAG,GAAa,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS;QAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACb,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,EAAE,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IACnB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2EAA2E;AAC3E,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,CAAC,KAAK,oBAAY;QAAE,OAAO,aAAa,CAAC;IAC7C,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,GAAG,mBAAmB,CAAC;IACxC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,WAAW,CAAC,UAAgC;IAC1D,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,kGAAkG;QAClG,2FAA2F;QAC3F,IAAI,CAAC,IAAA,qBAAe,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;YAAE,SAAS;QACzD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QAClB,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;YACb,KAAK,IAAI,CAAC;YACV,KAAK,IAAI;gBACP,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACjB,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACnB,YAAY,GAAG,IAAI,CAAC;gBACtB,CAAC;gBACD,MAAM;YACR,KAAK,IAAI,CAAC;YACV,KAAK,KAAK;gBACR,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrB,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;wBAClB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;wBACjB,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;4BACtB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;4BACnB,YAAY,GAAG,IAAI,CAAC;wBACtB,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,MAAM;YACR,KAAK,IAAI,CAAC;YACV,KAAK,KAAK,CAAC;YACX,KAAK,IAAI,CAAC;YACV,KAAK,KAAK;gBACR,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACnB,YAAY,GAAG,IAAI,CAAC;gBACtB,CAAC;gBACD,MAAM;YACR,KAAK,QAAQ,CAAC;YACd,KAAK,MAAM,CAAC;YACZ,KAAK,SAAS,CAAC;YACf,KAAK,MAAM;gBACT,4FAA4F;gBAC5F,uEAAuE;gBACvE,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC1B,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACjB,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ;wBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC1C,CAAC;gBACD,MAAM;YACR,KAAK,WAAW;gBACd,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;qBACvC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;oBAAE,KAAK,MAAM,CAAC,IAAI,CAAC;wBAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;4BAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC1F,MAAM;YACR,KAAK,QAAQ,CAAC;YACd;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,CAAU,EAAQ,EAAE;QAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACZ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,eAAe,CAAC,UAAU,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,GAAG,CAAC,CAAC,CAAC,CAAC;QACP,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,0EAA0E;IAC1F,CAAC;IACD,GAAG,CAAC,oBAAY,CAAC,CAAC,CAAC,2CAA2C;IAC9D,IAAI,YAAY,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,wCAAwC;IAChF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAWY,QAAA,aAAa,GAAgB,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAElH,wGAAwG;AACxG,SAAgB,eAAe,CAAC,EAAe,EAAE,EAAe,EAAE,KAAc;IAC9E,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,IAAI,GAAgB,EAAE,GAAG,EAAE,EAAE,CAAC;IACpC,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,IAAI;YACP,IAAI,KAAK,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC;gBAChB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YAC1B,CAAC;YACD,IAAI,KAAK,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC;gBAChB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YAC1B,CAAC;YACD,MAAM;QACR,KAAK,KAAK;YACR,6FAA6F;YAC7F,IAAI,KAAK,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;gBACpB,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC;gBAChB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YAC1B,CAAC;YACD,MAAM;QACR,KAAK,IAAI;YACP,IAAI,KAAK,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/D,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC;gBAChB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;YAC3B,CAAC;YACD,MAAM;QACR,KAAK,KAAK;YACR,IAAI,KAAK,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;gBACpB,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC;gBAChB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YAC1B,CAAC;YACD,MAAM;QACR,KAAK,IAAI;YACP,IAAI,KAAK,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/D,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC;gBAChB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;YAC3B,CAAC;YACD,MAAM;QACR;YACE,MAAM;IACV,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACjF,SAAgB,aAAa,CAAC,EAAe;IAC3C,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,6BAA6B,CAAC,UAAgC;IAC5E,IAAI,EAAE,GAAG,qBAAa,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAA,qBAAe,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;YAAE,SAAS;QACzD,EAAE,GAAG,eAAe,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;AAC5B,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,84 @@
+/**
+ * @atlasauth/pca-analyzer — STATIC ANALYZABILITY OF AUTHORITY.
+ *
+ * PCA can prove a quantitative trust-budget bound and verify a single action, but on its own it cannot
+ * statically answer "what can this whole delegated authority EVER do?". This package decides that over
+ * PCA's predicate/caveat policy: reachability, vacuity/totality, delegation-safety subsumption,
+ * disjointness, equivalence, and — the distinct safety check — conformance to a declared intent
+ * envelope (the "$14k renewal under a $10k cap on an approved vendor still violates intent" class).
+ *
+ * The engine is a SOUND, BOUNDED decision procedure (Cedar/SymCC-style, but with no SMT dependency):
+ * it enumerates a finite, distinguishing set of representative actions built from the literals,
+ * thresholds, prefixes, verbs and resource matchers in the policies, and evaluates the REAL
+ * `evaluatePredicates` at each. See README.md for the exact decided fragment and the honest
+ * incompleteness boundary. Soundness rule: a verdict is reported as proven only when the fragment is
+ * fully decided; otherwise it fails safe and is marked `approximate`.
+ */
+import type { Condition } from '@atlasauth/pca';
+import { admits, admitsAction, collectProbes, repToAction, representatives, search, type Rep } from './enumerate';
+import type { AlwaysAllowsResult, AlwaysDeniesResult, AnalyzerAction, DisjointResult, EquivalentResult, Intent, IntentConformanceResult, PolicyInput, ReachableResult, SubsumesResult } from './types';
+export * from './types';
+export { analyzeCaveats } from './caveats';
+export type { CaveatAnalysis } from './caveats';
+export { numericConjunctionSatisfiable, tightenInterval, intervalEmpty, FULL_INTERVAL, type NumInterval, } from './field';
+export { DEFAULT_MAX_COMBINATIONS, toModel, type PolicyModel } from './enumerate';
+export interface AnalyzerOptions {
+    /** Cap on the representative grid size; a larger grid fails safe (`approximate`). */
+    maxCombinations?: number;
+}
+/**
+ * Can any input complete `action` into one the policy ALLOWs? (some predicate matches AND the caveat
+ * set is satisfiable). `verb` and `resource` are taken as given; unspecified `params` / `subject` /
+ * `env` fields are existentially searched. A returned `witness` is a concrete action verified against
+ * the real evaluator, so `reachable: true` is always proven. `reachable: false` is proven only for the
+ * decided fragment; otherwise it fails safe to `reachable: true, approximate: true`.
+ */
+export declare function reachable(policy: PolicyInput, action: AnalyzerAction, opts?: AnalyzerOptions): ReachableResult;
+/**
+ * Is the policy vacuous — does it deny everything (optionally restricted to `verb`)? Proven only for
+ * the decided fragment; any undecidable feature or grid overflow fails safe to `alwaysDenies: false`
+ * (assume it can admit something).
+ */
+export declare function alwaysDenies(policy: PolicyInput, verb?: string, opts?: AnalyzerOptions): AlwaysDeniesResult;
+/**
+ * Is the policy total for `verb` — does it admit EVERY action of that verb (any resource, any params)?
+ * Proven only for the decided fragment; any undecidable feature or grid overflow fails safe to
+ * `alwaysAllows: false`.
+ */
+export declare function alwaysAllows(policy: PolicyInput, verb: string, opts?: AnalyzerOptions): AlwaysAllowsResult;
+/**
+ * Does policy `a` permit everything `b` permits (admitted(b) ⊆ admitted(a))? This is the
+ * delegation-safety check: a child capability must be subsumed by its parent. A counterexample is an
+ * action `b` admits that `a` denies. Proven only for the decided fragment; any undecidable feature in
+ * either policy, or grid overflow, fails safe to `subsumes: false`.
+ */
+export declare function subsumes(a: PolicyInput, b: PolicyInput, opts?: AnalyzerOptions): SubsumesResult;
+/**
+ * Are the two policies' admitted sets disjoint (no action both admit)? A witness is an action both
+ * admit. Proven only for the decided fragment; otherwise fails safe to `disjoint: false`.
+ */
+export declare function disjoint(a: PolicyInput, b: PolicyInput, opts?: AnalyzerOptions): DisjointResult;
+/**
+ * Do the two policies admit exactly the same actions? A counterexample is an action admitted by one
+ * but not the other. Proven only for the decided fragment; otherwise fails safe to `equivalent: false`.
+ */
+export declare function equivalent(a: PolicyInput, b: PolicyInput, opts?: AnalyzerOptions): EquivalentResult;
+/**
+ * Does the policy admit ONLY actions inside the declared `intent` envelope (allowed verbs + resource
+ * scopes + an amount ceiling)? This is the key safety check distinct from the runtime trust-budget: an
+ * action can pass the policy's predicates and stay under budget yet still fall outside what the
+ * principal intended — e.g. a $14k renewal admitted under a $10k intent cap because the policy's own
+ * ceiling is higher (or absent). Each reported violation is a concrete admitted action outside the
+ * envelope, so `conforms: false` with violations is always proven. `conforms: true` is proven only for
+ * the decided fragment; an undecidable policy feature, a `re:` intent scope, or grid overflow fails
+ * safe to `conforms: false, approximate: true` with no violations listed.
+ */
+export declare function intentConformance(policy: PolicyInput, intent: Intent, opts?: AnalyzerOptions): IntentConformanceResult;
+/** Concrete, exact admission check for a fully-specified action (no existential search). */
+export declare function admitsConcrete(policy: PolicyInput, action: AnalyzerAction): boolean;
+/**
+ * Whether a predicate's own numeric `where` conjunction is satisfiable (an explicit use of the interval
+ * engine; e.g. `amount >= 100 AND amount <= 10` is not). Non-numeric / `ref` conditions are ignored.
+ */
+export declare function predicateNumericSatisfiable(where: readonly Condition[] | undefined): boolean;
+export { admits, admitsAction, collectProbes, representatives, repToAction, search, type Rep };