@authup/access 1.0.0-beta.28 → 1.0.0-beta.30

package/dist/permission/checker/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/permission/checker/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE3D,MAAM,WAAW,kBAAkB;IAC/B,KAAK,CAAC,GAAG,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzD,UAAU,CAAC,GAAG,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9D,QAAQ,CAAC,GAAG,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5D,aAAa,CAAC,GAAG,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnE;AAED,MAAM,MAAM,wBAAwB,GAAG;IACnC,UAAU,CAAC,EAAE,qBAAqB,CAAC;IACnC,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IACxC,gBAAgB,CAAC,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACzC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IACxC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,6BAA6B,CAAA;CAC1C,CAAC"}

package/dist/permission/error/index.d.ts

@@ -1,3 +1,2 @@
 export * from './module';
-export * from './types';
 //# sourceMappingURL=index.d.ts.map

package/dist/permission/error/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/permission/error/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/permission/error/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC"}

package/dist/permission/error/module.d.ts

@@ -1,14 +1,13 @@
 import type { AuthupErrorOptions } from '@authup/errors';
 import { AuthupError } from '@authup/errors';
-import type { PolicyError, PolicyWithType } from '../../policy';
-import type { PermissionEvaluationErrorOptions } from './types';
+import type { PolicyIssue } from '../../policy';
 export declare class PermissionError extends AuthupError {
-    policy: PolicyWithType | undefined;
-    policyError: PolicyError | undefined;
     constructor(options?: AuthupErrorOptions);
+    addIssue(data: PolicyIssue): void;
+    addIssues(data: PolicyIssue[]): void;
     static notFound(name: string): PermissionError;
     static denied(name: string): PermissionError;
     static deniedAll(names: string[]): PermissionError;
-    static evaluationFailed(options: PermissionEvaluationErrorOptions): PermissionError;
+    static evaluationFailed(name: string | string[]): PermissionError;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/permission/error/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/permission/error/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAa,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEhE,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,SAAS,CAAC;AAEhE,qBAAa,eAAgB,SAAQ,WAAW;IACrC,MAAM,EAAG,cAAc,GAAG,SAAS,CAAC;IAEpC,WAAW,EAAG,WAAW,GAAG,SAAS,CAAC;gBAEjC,OAAO,GAAE,kBAAuB;IAQ5C,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM;IAO5B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM;IAO1B,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE;IAOhC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,gCAAgC;CAoBpE"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/permission/error/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAa,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,qBAAa,eAAgB,SAAQ,WAAW;gBAChC,OAAO,GAAE,kBAAuB;IAQ5C,QAAQ,CAAC,IAAI,EAAE,WAAW;IAI1B,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE;IAI7B,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM;IAO5B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM;IAO1B,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE;IAOhC,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE;CAalD"}

package/dist/permission/index.d.ts

@@ -1,6 +1,6 @@
 export * from './error';
 export * from './helpers';
-export * from './provider';
-export * from './module';
+export * from './repository';
+export * from './checker';
 export * from './types';
 //# sourceMappingURL=index.d.ts.map

package/dist/permission/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/permission/index.ts"],"names":[],"mappings":"AAOA,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/permission/index.ts"],"names":[],"mappings":"AAOA,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC"}

package/dist/permission/repository/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/permission/repository/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}

package/dist/permission/repository/memory.d.ts

@@ -0,0 +1,9 @@
+import type { PermissionItem } from '../types';
+import type { IPermissionRepository, PermissionGetOptions } from './types';
+export declare class PermissionMemoryRepository implements IPermissionRepository {
+    protected items: Record<string, PermissionItem>;
+    constructor(items?: PermissionItem[]);
+    findOne(options: PermissionGetOptions): Promise<PermissionItem | null>;
+    setMany(input: PermissionItem[]): void;
+}
+//# sourceMappingURL=memory.d.ts.map

package/dist/permission/repository/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/permission/repository/memory.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,KAAK,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAE3E,qBAAa,0BAA2B,YAAW,qBAAqB;IACpE,SAAS,CAAC,KAAK,EAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAM;gBAE1C,KAAK,GAAE,cAAc,EAAO;IAIlC,OAAO,CACT,OAAO,EAAE,oBAAoB,GAC9B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IASjC,OAAO,CAAC,KAAK,EAAE,cAAc,EAAE;CAOlC"}

package/dist/permission/{provider → repository}/types.d.ts

@@ -4,7 +4,7 @@ export type PermissionGetOptions = {
     clientId?: string | null;
     realmId?: string | null;
 };
-export interface IPermissionProvider {
-    get(criteria: PermissionGetOptions): Promise<PermissionItem | undefined>;
+export interface IPermissionRepository {
+    findOne(criteria: PermissionGetOptions): Promise<PermissionItem | null>;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/permission/repository/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/permission/repository/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C,MAAM,MAAM,oBAAoB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B,CAAC;AAEF,MAAM,WAAW,qBAAqB;IAClC,OAAO,CAAC,QAAQ,EAAE,oBAAoB,GAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;CAC5E"}

package/dist/permission/types.d.ts

@@ -1,26 +1,8 @@
-import type { DecisionStrategy } from '../constants';
-import type { PolicyEngine, PolicyInput, PolicyWithType } from '../policy';
-import type { IPermissionProvider } from './provider';
+import type { PolicyWithType } from '../policy';
 export type PermissionItem = {
     name: string;
     clientId?: string | null;
     realmId?: string | null;
     policy?: PolicyWithType;
 };
-export type PermissionCheckerOptions = {
-    provider?: IPermissionProvider;
-    policyEngine?: PolicyEngine;
-    realmId?: string | null;
-    clientId?: string | null;
-};
-export type PermissionCheckerCheckOptions = {
-    decisionStrategy?: `${DecisionStrategy}`;
-    policiesIncluded?: string[];
-    policiesExcluded?: string[];
-};
-export type PermissionCheckerCheckContext = {
-    name: string | string[];
-    input?: PolicyInput;
-    options?: PermissionCheckerCheckOptions;
-};
 //# sourceMappingURL=types.d.ts.map

package/dist/permission/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/permission/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EACR,YAAY,EAAE,WAAW,EAAE,cAAc,EAC5C,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD,MAAM,MAAM,cAAc,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,cAAc,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACnC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IACxC,gBAAgB,CAAC,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACzC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IACxC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,OAAO,CAAC,EAAE,6BAA6B,CAAA;CAC1C,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/permission/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,MAAM,MAAM,cAAc,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,cAAc,CAAC;CAC3B,CAAC"}

package/dist/policy/built-in/attribute-names/evaluator.d.ts

@@ -1,13 +1,10 @@
-import type { PolicyEvaluateContext, PolicyEvaluator } from '../../evaluator';
-import type { PolicyInput, PolicyWithType } from '../../types';
-import type { AttributeNamesPolicy } from './types';
+import type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';
 import { AttributeNamesPolicyValidator } from './validator';
-export declare class AttributeNamesPolicyEvaluator implements PolicyEvaluator<AttributeNamesPolicy> {
+import { AttributesPolicyEvaluator } from '../attributes';
+export declare class AttributeNamesPolicyEvaluator implements IPolicyEvaluator {
     protected validator: AttributeNamesPolicyValidator;
+    protected attributesEvaluator: AttributesPolicyEvaluator;
     constructor();
-    can(ctx: PolicyEvaluateContext<PolicyWithType>): Promise<boolean>;
-    validateConfig(ctx: PolicyEvaluateContext<PolicyWithType>): Promise<AttributeNamesPolicy>;
-    validateInput(ctx: PolicyEvaluateContext<AttributeNamesPolicy>): Promise<PolicyInput>;
-    evaluate(ctx: PolicyEvaluateContext<AttributeNamesPolicy, PolicyInput>): Promise<boolean>;
+    evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
 }
 //# sourceMappingURL=evaluator.d.ts.map

package/dist/policy/built-in/attribute-names/evaluator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/attribute-names/evaluator.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE9E,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE/D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAE5D,qBAAa,6BAA8B,YAAW,eAAe,CAAC,oBAAoB,CAAC;IACvF,SAAS,CAAC,SAAS,EAAG,6BAA6B,CAAC;;IAM9C,GAAG,CAAC,GAAG,EAAE,qBAAqB,CAAC,cAAc,CAAC,GAAI,OAAO,CAAC,OAAO,CAAC;IAIlE,cAAc,CAAC,GAAG,EAAE,qBAAqB,CAAC,cAAc,CAAC,GAAI,OAAO,CAAC,oBAAoB,CAAC;IAI1F,aAAa,CAAC,GAAG,EAAE,qBAAqB,CAAC,oBAAoB,CAAC,GAAI,OAAO,CAAC,WAAW,CAAC;IAQtF,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC,oBAAoB,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;CAgBlG"}
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/attribute-names/evaluator.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAI1G,OAAO,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAE1D,qBAAa,6BAA8B,YAAW,gBAAgB;IAClE,SAAS,CAAC,SAAS,EAAG,6BAA6B,CAAC;IAEpD,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC;;IAOpD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAsC5G"}

package/dist/policy/built-in/attributes/evaluator.d.ts

@@ -1,14 +1,10 @@
-import type { PolicyEvaluateContext, PolicyEvaluator } from '../../evaluator';
-import type { PolicyInput, PolicyWithType } from '../../types';
-import type { AttributesPolicy } from './types';
+import type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';
 import { AttributesPolicyValidator } from './validator';
-export declare class AttributesPolicyEvaluator<T extends Record<string, any> = Record<string, any>> implements PolicyEvaluator<AttributesPolicy<T>> {
+export declare class AttributesPolicyEvaluator<T extends Record<string, any> = Record<string, any>> implements IPolicyEvaluator {
     protected validator: AttributesPolicyValidator<T>;
     constructor();
-    can(ctx: PolicyEvaluateContext<PolicyWithType>): Promise<boolean>;
-    validateConfig(ctx: PolicyEvaluateContext): Promise<AttributesPolicy<T>>;
-    validateInput(ctx: PolicyEvaluateContext<AttributesPolicy<T>>): Promise<PolicyInput>;
-    evaluate(ctx: PolicyEvaluateContext<AttributesPolicy<T>>): Promise<boolean>;
+    accessData(ctx: PolicyEvaluationContext): Promise<T | null>;
+    evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
     protected fixQuery(query: unknown | unknown[]): void;
 }
 //# sourceMappingURL=evaluator.d.ts.map

package/dist/policy/built-in/attributes/evaluator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/attributes/evaluator.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE9E,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAExD,qBAAa,yBAAyB,CAClC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CACrD,YAAW,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC7C,SAAS,CAAC,SAAS,EAAG,yBAAyB,CAAC,CAAC,CAAC,CAAC;;IAM7C,GAAG,CACL,GAAG,EAAE,qBAAqB,CAAC,cAAc,CAAC,GAC1C,OAAO,CAAC,OAAO,CAAC;IAId,cAAc,CAAC,GAAG,EAAE,qBAAqB,GAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAIzE,aAAa,CAAC,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAI,OAAO,CAAC,WAAW,CAAC;IAQrF,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAWjF,SAAS,CAAC,QAAQ,CACd,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE;CAiCjC"}
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/attributes/evaluator.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAI1G,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAExD,qBAAa,yBAAyB,CAClC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CACrD,YAAW,gBAAgB;IACzB,SAAS,CAAC,SAAS,EAAG,yBAAyB,CAAC,CAAC,CAAC,CAAC;;IAM7C,UAAU,CAAC,GAAG,EAAE,uBAAuB,GAAI,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAkB5D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IA2BzG,SAAS,CAAC,QAAQ,CACd,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE;CAiCjC"}

package/dist/policy/built-in/attributes/validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/attributes/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEhD,qBAAa,yBAAyB,CAClC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CACrD,SAAQ,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACpC,UAAU;CAqBb"}
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/attributes/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEhD,qBAAa,yBAAyB,CAClC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CACrD,SAAQ,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACpC,UAAU;CAoBb"}

package/dist/policy/built-in/composite/evaluator.d.ts

@@ -1,13 +1,8 @@
-import type { PolicyEvaluateContext, PolicyEvaluator } from '../../evaluator';
-import type { PolicyInput, PolicyWithType } from '../../types';
-import type { CompositePolicy } from './types';
+import type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';
 import { CompositePolicyValidator } from './validator';
-export declare class CompositePolicyEvaluator implements PolicyEvaluator<CompositePolicy> {
+export declare class CompositePolicyEvaluator implements IPolicyEvaluator {
     protected validator: CompositePolicyValidator;
     constructor();
-    can(ctx: PolicyEvaluateContext<PolicyWithType>): Promise<boolean>;
-    validateConfig(ctx: PolicyEvaluateContext): Promise<CompositePolicy>;
-    validateInput(ctx: PolicyEvaluateContext<CompositePolicy>): Promise<PolicyInput>;
-    evaluate(ctx: PolicyEvaluateContext<CompositePolicy>): Promise<boolean>;
+    evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
 }
 //# sourceMappingURL=evaluator.d.ts.map

package/dist/policy/built-in/composite/evaluator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/composite/evaluator.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAG9E,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAEvD,qBAAa,wBAAyB,YAAW,eAAe,CAAC,eAAe,CAAC;IAC7E,SAAS,CAAC,SAAS,EAAG,wBAAwB,CAAC;;IAMzC,GAAG,CACL,GAAG,EAAE,qBAAqB,CAAC,cAAc,CAAC,GAC1C,OAAO,CAAC,OAAO,CAAC;IAId,cAAc,CAAC,GAAG,EAAE,qBAAqB,GAAI,OAAO,CAAC,eAAe,CAAC;IAIrE,aAAa,CAAC,GAAG,EAAE,qBAAqB,CAAC,eAAe,CAAC,GAAI,OAAO,CAAC,WAAW,CAAC;IAIjF,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;CAuChF"}
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/composite/evaluator.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACR,gBAAgB,EAAE,uBAAuB,EAAE,sBAAsB,EACpE,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAEvD,qBAAa,wBAAyB,YAAW,gBAAgB;IAC7D,SAAS,CAAC,SAAS,EAAG,wBAAwB,CAAC;;IAMzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAyE5G"}

package/dist/policy/built-in/composite/validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/composite/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,qBAAa,wBAAyB,SAAQ,SAAS,CAAC,eAAe,CAAC;IACpE,UAAU;CAiCb"}
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/composite/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,qBAAa,wBAAyB,SAAQ,SAAS,CAAC,eAAe,CAAC;IACpE,UAAU;CAgCb"}

package/dist/policy/built-in/date/evaluator.d.ts

@@ -1,13 +1,8 @@
-import type { PolicyEvaluateContext, PolicyEvaluator } from '../../evaluator';
-import type { PolicyInput, PolicyWithType } from '../../types';
-import type { DatePolicy } from './types';
+import type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';
 import { DatePolicyValidator } from './validator';
-export declare class DatePolicyEvaluator implements PolicyEvaluator<DatePolicy> {
+export declare class DatePolicyEvaluator implements IPolicyEvaluator {
     protected validator: DatePolicyValidator;
     constructor();
-    can(ctx: PolicyEvaluateContext<PolicyWithType>): Promise<boolean>;
-    validateConfig(ctx: PolicyEvaluateContext): Promise<DatePolicy>;
-    validateInput(ctx: PolicyEvaluateContext<DatePolicy>): Promise<PolicyInput>;
-    evaluate(ctx: PolicyEvaluateContext<DatePolicy>): Promise<boolean>;
+    evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
 }
 //# sourceMappingURL=evaluator.d.ts.map

package/dist/policy/built-in/date/evaluator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/date/evaluator.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE9E,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAkBlD,qBAAa,mBAAoB,YAAW,eAAe,CAAC,UAAU,CAAC;IACnE,SAAS,CAAC,SAAS,EAAG,mBAAmB,CAAC;;IAMpC,GAAG,CACL,GAAG,EAAE,qBAAqB,CAAC,cAAc,CAAC,GAC1C,OAAO,CAAC,OAAO,CAAC;IAId,cAAc,CAAC,GAAG,EAAE,qBAAqB,GAAI,OAAO,CAAC,UAAU,CAAC;IAIhE,aAAa,CAAC,GAAG,EAAE,qBAAqB,CAAC,UAAU,CAAC,GAAI,OAAO,CAAC,WAAW,CAAC;IAI5E,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC,UAAU,CAAC,GAAI,OAAO,CAAC,OAAO,CAAC;CAwB5E"}
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/date/evaluator.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAG1G,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAkBlD,qBAAa,mBAAoB,YAAW,gBAAgB;IACxD,SAAS,CAAC,SAAS,EAAG,mBAAmB,CAAC;;IAMpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CA0C5G"}

package/dist/policy/built-in/identity/data/index.d.ts

@@ -0,0 +1,2 @@
+export * from './validator.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/policy/built-in/identity/data/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/policy/built-in/identity/data/index.ts"],"names":[],"mappings":"AAOA,cAAc,gBAAgB,CAAC"}

package/dist/policy/built-in/identity/data/validator.d.ts

@@ -0,0 +1,6 @@
+import { Container } from 'validup';
+import type { IdentityPolicyData } from '../types.ts';
+export declare class PolicyIdentityDataValidator extends Container<IdentityPolicyData> {
+    initialize(): void;
+}
+//# sourceMappingURL=validator.d.ts.map

package/dist/policy/built-in/identity/data/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../src/policy/built-in/identity/data/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,qBAAa,2BAA4B,SAAQ,SAAS,CAAC,kBAAkB,CAAC;IAC1E,UAAU;CA+Cb"}

package/dist/policy/built-in/identity/evaluator.d.ts

@@ -1,13 +1,12 @@
-import type { PolicyEvaluateContext, PolicyEvaluator } from '../../evaluator';
-import type { PolicyInput, PolicyWithType } from '../../types';
-import type { IdentityPolicy } from './types';
+import type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';
+import { PolicyIdentityDataValidator } from './data';
+import type { IdentityPolicyData } from './types';
 import { IdentityPolicyValidator } from './validator';
-export declare class IdentityPolicyEvaluator implements PolicyEvaluator<IdentityPolicy> {
+export declare class IdentityPolicyEvaluator implements IPolicyEvaluator {
     protected validator: IdentityPolicyValidator;
+    protected dataValidator: PolicyIdentityDataValidator;
     constructor();
-    can(ctx: PolicyEvaluateContext<PolicyWithType>): Promise<boolean>;
-    validateConfig(ctx: PolicyEvaluateContext): Promise<IdentityPolicy>;
-    validateInput(ctx: PolicyEvaluateContext<IdentityPolicy>): Promise<PolicyInput>;
-    evaluate(ctx: PolicyEvaluateContext<IdentityPolicy>): Promise<boolean>;
+    accessData(ctx: PolicyEvaluationContext): Promise<IdentityPolicyData | null>;
+    evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
 }
 //# sourceMappingURL=evaluator.d.ts.map

package/dist/policy/built-in/identity/evaluator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/identity/evaluator.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC9E,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD,qBAAa,uBAAwB,YAAW,eAAe,CAAC,cAAc,CAAC;IAC3E,SAAS,CAAC,SAAS,EAAG,uBAAuB,CAAC;;IAMxC,GAAG,CACL,GAAG,EAAE,qBAAqB,CAAC,cAAc,CAAC,GAC1C,OAAO,CAAC,OAAO,CAAC;IAId,cAAc,CAAC,GAAG,EAAE,qBAAqB,GAAI,OAAO,CAAC,cAAc,CAAC;IAIpE,aAAa,CAAC,GAAG,EAAE,qBAAqB,CAAC,cAAc,CAAC,GAAI,OAAO,CAAC,WAAW,CAAC;IAIhF,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CACzC,cAAc,CACb,GAAG,OAAO,CAAC,OAAO,CAAC;CAcvB"}
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/identity/evaluator.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAG1G,OAAO,EAAE,2BAA2B,EAAE,MAAM,QAAQ,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD,qBAAa,uBAAwB,YAAW,gBAAgB;IAC5D,SAAS,CAAC,SAAS,EAAG,uBAAuB,CAAC;IAE9C,SAAS,CAAC,aAAa,EAAG,2BAA2B,CAAC;;IAOhD,UAAU,CAAC,GAAG,EAAE,uBAAuB,GAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAiB7E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CA0C5G"}

package/dist/policy/built-in/identity/types.d.ts

@@ -5,4 +5,26 @@ export interface IdentityPolicy extends PolicyBase {
      */
     types?: string[];
 }
+export type IdentityPolicyData = {
+    /**
+     * user, client, robot
+     */
+    type: string;
+    /**
+     * UUID
+     */
+    id: string;
+    /**
+     * Client associated with identity.
+     */
+    clientId?: string | null;
+    /**
+     * Realm id associated with identity.
+     */
+    realmId?: string | null;
+    /**
+     * Realm name associated with identity.
+     */
+    realmName?: string | null;
+};
 //# sourceMappingURL=types.d.ts.map

package/dist/policy/built-in/identity/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/identity/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,WAAW,cAAe,SAAQ,UAAU;IAC9C;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/identity/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,WAAW,cAAe,SAAQ,UAAU;IAC9C;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC7B;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5B,CAAC"}

package/dist/policy/built-in/permission-binding/module.d.ts

@@ -1,13 +1,8 @@
-import type { PolicyEvaluateContext, PolicyEvaluator } from '../../evaluator';
-import type { PolicyInput, PolicyWithType } from '../../types';
-import type { PermissionBindingPolicy } from './types';
+import type { IPolicyEvaluator, PolicyEvaluationResult } from '../../evaluation';
 import { PermissionBindingPolicyValidator } from './validator';
-export declare class PermissionBindingPolicyEvaluator implements PolicyEvaluator<PermissionBindingPolicy> {
+export declare class PermissionBindingPolicyEvaluator implements IPolicyEvaluator {
     protected validator: PermissionBindingPolicyValidator;
     constructor();
-    can(ctx: PolicyEvaluateContext<PolicyWithType>): Promise<boolean>;
-    validateConfig(ctx: PolicyEvaluateContext): Promise<PermissionBindingPolicy>;
-    validateInput(ctx: PolicyEvaluateContext): Promise<PolicyInput>;
-    evaluate(ctx: PolicyEvaluateContext<PermissionBindingPolicy, PolicyInput>): Promise<boolean>;
+    evaluate(value: Record<string, any>): Promise<PolicyEvaluationResult>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/policy/built-in/permission-binding/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/permission-binding/module.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE9E,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE/D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,EAAE,gCAAgC,EAAE,MAAM,aAAa,CAAC;AAE/D,qBAAa,gCAAiC,YAAW,eAAe,CAAC,uBAAuB,CAAC;IAC7F,SAAS,CAAC,SAAS,EAAE,gCAAgC,CAAC;;IAMhD,GAAG,CACL,GAAG,EAAE,qBAAqB,CAAC,cAAc,CAAC,GAC3C,OAAO,CAAC,OAAO,CAAC;IAIb,cAAc,CAAC,GAAG,EAAE,qBAAqB,GAAI,OAAO,CAAC,uBAAuB,CAAC;IAI7E,aAAa,CAAC,GAAG,EAAE,qBAAqB,GAAI,OAAO,CAAC,WAAW,CAAC;IAQhE,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CACzC,uBAAuB,EACvB,WAAW,CACV,GAAG,OAAO,CAAC,OAAO,CAAC;CAIvB"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/permission-binding/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAEjF,OAAO,EAAE,gCAAgC,EAAE,MAAM,aAAa,CAAC;AAE/D,qBAAa,gCAAiC,YAAW,gBAAgB;IACrE,SAAS,CAAC,SAAS,EAAE,gCAAgC,CAAC;;IAMhD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAQ9E"}

package/dist/policy/built-in/realm-match/evaluator.d.ts

@@ -1,13 +1,12 @@
-import type { PolicyEvaluateContext, PolicyEvaluator } from '../../evaluator';
-import type { PolicyInput, PolicyWithType } from '../../types';
-import type { RealmMatchPolicy } from './types';
+import type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';
+import { AttributesPolicyEvaluator } from '../attributes';
+import { IdentityPolicyEvaluator } from '../identity';
 import { RealmMatchPolicyValidator } from './validator';
-export declare class RealmMatchPolicyEvaluator implements PolicyEvaluator<RealmMatchPolicy> {
+export declare class RealmMatchPolicyEvaluator implements IPolicyEvaluator {
     protected validator: RealmMatchPolicyValidator;
+    protected identityEvaluator: IdentityPolicyEvaluator;
+    protected attributesEvaluator: AttributesPolicyEvaluator;
     constructor();
-    can(ctx: PolicyEvaluateContext<PolicyWithType>): Promise<boolean>;
-    validateConfig(ctx: PolicyEvaluateContext): Promise<RealmMatchPolicy>;
-    validateInput(ctx: PolicyEvaluateContext<RealmMatchPolicy>): Promise<PolicyInput>;
-    evaluate(ctx: PolicyEvaluateContext<RealmMatchPolicy>): Promise<boolean>;
+    evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
 }
 //# sourceMappingURL=evaluator.d.ts.map

package/dist/policy/built-in/realm-match/evaluator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/realm-match/evaluator.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC9E,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAExD,qBAAa,yBAA0B,YAAW,eAAe,CAAC,gBAAgB,CAAC;IAC/E,SAAS,CAAC,SAAS,EAAG,yBAAyB,CAAC;;IAM1C,GAAG,CACL,GAAG,EAAE,qBAAqB,CAAC,cAAc,CAAC,GAC1C,OAAO,CAAC,OAAO,CAAC;IAId,cAAc,CAAC,GAAG,EAAE,qBAAqB,GAAI,OAAO,CAAC,gBAAgB,CAAC;IAItE,aAAa,CAAC,GAAG,EAAE,qBAAqB,CAAC,gBAAgB,CAAC,GAAI,OAAO,CAAC,WAAW,CAAC;IAWlF,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CACzC,gBAAgB,CACf,GAAG,OAAO,CAAC,OAAO,CAAC;CAmGvB"}
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/realm-match/evaluator.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAG1G,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAExD,qBAAa,yBAA0B,YAAW,gBAAgB;IAC9D,SAAS,CAAC,SAAS,EAAG,yBAAyB,CAAC;IAEhD,SAAS,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;IAErD,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC;;IAQpD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAsI5G"}

package/dist/policy/built-in/time/evaluator.d.ts

@@ -1,13 +1,8 @@
-import type { PolicyEvaluateContext, PolicyEvaluator } from '../../evaluator';
-import type { PolicyInput, PolicyWithType } from '../../types';
-import type { TimePolicy } from './types';
+import type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';
 import { TimePolicyValidator } from './validator';
-export declare class TimePolicyEvaluator implements PolicyEvaluator<TimePolicy> {
+export declare class TimePolicyEvaluator implements IPolicyEvaluator {
     protected validator: TimePolicyValidator;
     constructor();
-    can(ctx: PolicyEvaluateContext<PolicyWithType>): Promise<boolean>;
-    validateConfig(ctx: PolicyEvaluateContext): Promise<TimePolicy>;
-    validateInput(ctx: PolicyEvaluateContext<TimePolicy>): Promise<PolicyInput>;
-    evaluate(ctx: PolicyEvaluateContext<TimePolicy>): Promise<boolean>;
+    evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
 }
 //# sourceMappingURL=evaluator.d.ts.map

package/dist/policy/built-in/time/evaluator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/time/evaluator.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE9E,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAiClD,qBAAa,mBAAoB,YAAW,eAAe,CAAC,UAAU,CAAC;IACnE,SAAS,CAAC,SAAS,EAAG,mBAAmB,CAAC;;IAMpC,GAAG,CACL,GAAG,EAAE,qBAAqB,CAAC,cAAc,CAAC,GAC1C,OAAO,CAAC,OAAO,CAAC;IAId,cAAc,CAAC,GAAG,EAAE,qBAAqB,GAAI,OAAO,CAAC,UAAU,CAAC;IAIhE,aAAa,CAAC,GAAG,EAAE,qBAAqB,CAAC,UAAU,CAAC,GAAI,OAAO,CAAC,WAAW,CAAC;IAI5E,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;CA4D3E"}
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/time/evaluator.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAI1G,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAiClD,qBAAa,mBAAoB,YAAW,gBAAgB;IACxD,SAAS,CAAC,SAAS,EAAG,mBAAmB,CAAC;;IAMpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAoF5G"}

package/dist/policy/constants.d.ts

@@ -0,0 +1,12 @@
+import { AttributeNamesPolicyEvaluator, AttributesPolicyEvaluator, CompositePolicyEvaluator, DatePolicyEvaluator, IdentityPolicyEvaluator, PermissionBindingPolicyEvaluator, RealmMatchPolicyEvaluator, TimePolicyEvaluator } from './built-in';
+export declare const PolicyDefaultEvaluators: {
+    readonly composite: CompositePolicyEvaluator;
+    readonly attributes: AttributesPolicyEvaluator<Record<string, any>>;
+    readonly attributeNames: AttributeNamesPolicyEvaluator;
+    readonly date: DatePolicyEvaluator;
+    readonly identity: IdentityPolicyEvaluator;
+    readonly permissionBinding: PermissionBindingPolicyEvaluator;
+    readonly realmMatch: RealmMatchPolicyEvaluator;
+    readonly time: TimePolicyEvaluator;
+};
+//# sourceMappingURL=constants.d.ts.map

package/dist/policy/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/policy/constants.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,6BAA6B,EAC7B,yBAAyB,EAEzB,wBAAwB,EACxB,mBAAmB,EACnB,uBAAuB,EACvB,gCAAgC,EAChC,yBAAyB,EACzB,mBAAmB,EACtB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,uBAAuB;;;;;;;;;CAS1B,CAAC"}

package/dist/policy/data.d.ts

@@ -0,0 +1,20 @@
+export interface IPolicyData {
+    set(key: string, value: unknown): void;
+    has(key: string): boolean;
+    get<T = unknown>(key: string): T;
+    isValidated(key: string): boolean;
+    setValidated(key: string): void;
+    clone(): IPolicyData;
+}
+export declare class PolicyData implements IPolicyData {
+    protected data: Record<string, any>;
+    protected validated: Set<string>;
+    constructor(data?: Record<string, any>, validated?: Set<string>);
+    set<T = unknown>(key: string, value: T): void;
+    get<T = unknown>(key: string): T;
+    has(key: string): boolean;
+    setValidated(key: string): void;
+    isValidated(key: string): boolean;
+    clone(): PolicyData;
+}
+//# sourceMappingURL=data.d.ts.map

package/dist/policy/data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data.d.ts","sourceRoot":"","sources":["../../src/policy/data.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,WAAW;IACxB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAI,IAAI,CAAC;IACxC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1B,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAI,CAAC,CAAC;IAElC,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAClC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAI,IAAI,CAAC;IAEjC,KAAK,IAAK,WAAW,CAAA;CACxB;AAED,qBAAa,UAAW,YAAW,WAAW;IAC1C,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEpC,SAAS,CAAC,SAAS,EAAG,GAAG,CAAC,MAAM,CAAC,CAAC;gBAG9B,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAM,EAC9B,SAAS,GAAE,GAAG,CAAC,MAAM,CAAa;IAMtC,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAI,IAAI;IAK9C,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAI,CAAC;IAQjC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIzB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAI,IAAI;IAIhC,WAAW,CAAC,GAAG,EAAE,MAAM,GAAI,OAAO;IAIlC,KAAK;CAKR"}

package/dist/policy/engine/module.d.ts

@@ -1,20 +1,20 @@
-import type { PolicyEvaluator, PolicyEvaluators } from '../evaluator';
-import type { PolicyEngineEvaluateContext } from './types';
+import type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult, PolicyEvaluators } from '../evaluation';
+import type { IPolicy } from '../types.ts';
+import type { IPolicyEngine } from './types.ts';
 /**
  * The policy engine is a component that interprets defined policies and makes decisions
  * on whether to allow or deny a particular access.
  */
-export declare class PolicyEngine {
-    protected evaluators: PolicyEvaluators;
+export declare class PolicyEngine implements IPolicyEngine {
+    protected evaluators: Record<string, IPolicyEvaluator>;
     constructor(evaluators?: PolicyEvaluators);
-    registerEvaluator(type: string, evaluator: PolicyEvaluator): void;
+    registerEvaluator(type: string, evaluator: IPolicyEvaluator): void;
     registerEvaluators(evaluators: PolicyEvaluators): void;
-    private registerDefaultEvaluators;
     /**
-     * @throws PolicyError
-     *
+     * @param policy
      * @param ctx
      */
-    evaluate(ctx: PolicyEngineEvaluateContext): Promise<boolean>;
+    evaluate(policy: IPolicy, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
+    evaluateOrFail(policy: IPolicy, ctx: PolicyEvaluationContext): Promise<void>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/policy/engine/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/policy/engine/module.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAItE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,SAAS,CAAC;AAE3D;;;GAGG;AACH,qBAAa,YAAY;IACrB,SAAS,CAAC,UAAU,EAAG,gBAAgB,CAAC;gBAE5B,UAAU,GAAE,gBAAqB;IAMtC,iBAAiB,CACpB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,eAAe,GAC1B,IAAI;IAID,kBAAkB,CAAC,UAAU,EAAE,gBAAgB;IAOtD,OAAO,CAAC,yBAAyB;IAWjC;;;;OAIG;IACG,QAAQ,CAAC,GAAG,EAAE,2BAA2B,GAAI,OAAO,CAAC,OAAO,CAAC;CAOtE"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/policy/engine/module.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACR,gBAAgB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,gBAAgB,EACtF,MAAM,eAAe,CAAC;AAGvB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGhD;;;GAGG;AACH,qBAAa,YAAa,YAAW,aAAa;IAC9C,SAAS,CAAC,UAAU,EAAG,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;gBAE5C,UAAU,GAAE,gBAAqB;IAItC,iBAAiB,CACpB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,gBAAgB,GAC3B,IAAI;IAID,kBAAkB,CAAC,UAAU,EAAE,gBAAgB;IAOtD;;;OAGG;IACG,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,uBAAuB,GAAI,OAAO,CAAC,sBAAsB,CAAC;IA4DzF,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,uBAAuB,GAAI,OAAO,CAAC,IAAI,CAAC;CAuBtF"}

package/dist/policy/engine/types.d.ts

@@ -1,4 +1,7 @@
-import type { PolicyEvaluateContextInput } from '../evaluator';
-import type { PolicyWithType } from '../types';
-export type PolicyEngineEvaluateContext = Omit<PolicyEvaluateContextInput<PolicyWithType>, 'evaluators'>;
+import type { PolicyEvaluationContext, PolicyEvaluationResult } from '../evaluation';
+import type { IPolicy } from '../types';
+export interface IPolicyEngine {
+    evaluate(policy: IPolicy, options: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
+    evaluateOrFail(policy: IPolicy, options: PolicyEvaluationContext): Promise<void>;
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/policy/engine/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/policy/engine/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C,MAAM,MAAM,2BAA2B,GAAG,IAAI,CAAC,0BAA0B,CAAC,cAAc,CAAC,EAAE,YAAY,CAAC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/policy/engine/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,WAAW,aAAa;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,uBAAuB,GAAI,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAE9F,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,uBAAuB,GAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrF"}

package/dist/policy/error/module.d.ts

@@ -1,6 +1,9 @@
 import { AuthupError } from '@authup/errors';
+import type { PolicyIssue } from '../issue';
 export declare class PolicyError extends AuthupError {
     constructor(message?: string, code?: string | null);
+    addIssue(data: PolicyIssue): void;
+    addIssues(data: PolicyIssue[]): void;
     static evaluatorNotFound(type: string): PolicyError;
     static evaluatorNotProcessable(): PolicyError;
     static evaluatorContextInvalid(): PolicyError;

package/dist/policy/error/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/policy/error/module.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,WAAW,EAAa,MAAM,gBAAgB,CAAC;AAExD,qBAAa,WAAY,SAAQ,WAAW;gBAC5B,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI;IAIlD,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM;IAOrC,MAAM,CAAC,uBAAuB;IAO9B,MAAM,CAAC,uBAAuB;CAMjC"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/policy/error/module.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,WAAW,EAAa,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,qBAAa,WAAY,SAAQ,WAAW;gBAC5B,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI;IAIlD,QAAQ,CAAC,IAAI,EAAE,WAAW;IAI1B,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE;IAI7B,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM;IAOrC,MAAM,CAAC,uBAAuB;IAO9B,MAAM,CAAC,uBAAuB;CAMjC"}

package/dist/policy/evaluation/context/define.d.ts

@@ -0,0 +1,3 @@
+import type { PolicyEvaluationContext, PolicyEvaluationContextInput } from './types.ts';
+export declare function definePolicyEvaluationContext(input?: PolicyEvaluationContextInput): PolicyEvaluationContext;
+//# sourceMappingURL=define.d.ts.map

package/dist/policy/evaluation/context/define.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.d.ts","sourceRoot":"","sources":["../../../../src/policy/evaluation/context/define.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAGxF,wBAAgB,6BAA6B,CACzC,KAAK,GAAE,4BAAiC,GACxC,uBAAuB,CAQ1B"}

package/dist/policy/evaluation/context/index.d.ts

@@ -0,0 +1,3 @@
+export * from './define.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/policy/evaluation/context/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/policy/evaluation/context/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/policy/evaluation/context/types.d.ts

@@ -0,0 +1,11 @@
+import type { PolicyData } from '../../data.ts';
+import type { IPolicyEvaluator } from '../types.ts';
+export type PolicyEvaluationContext = {
+    readonly evaluators: Record<string, IPolicyEvaluator>;
+    readonly path: (string | number)[];
+    readonly exclude: string[];
+    readonly include: string[];
+    readonly data: PolicyData;
+};
+export type PolicyEvaluationContextInput = Partial<PolicyEvaluationContext>;
+//# sourceMappingURL=types.d.ts.map

package/dist/policy/evaluation/context/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/policy/evaluation/context/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,MAAM,uBAAuB,GAAG;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACtD,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAC5B,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC"}

package/dist/policy/evaluation/index.d.ts

@@ -0,0 +1,3 @@
+export * from './types';
+export * from './context';
+//# sourceMappingURL=index.d.ts.map

package/dist/policy/evaluation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/policy/evaluation/index.ts"],"names":[],"mappings":"AAOA,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC"}