@authup/access 1.0.0-beta.30 → 1.0.0-beta.32

package/dist/permission/checker/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/permission/checker/module.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAUlD,OAAO,KAAK,EAAE,qBAAqB,EAAwB,MAAM,eAAe,CAAC;AAGjF,OAAO,KAAK,EACR,cAAc,EACjB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,kBAAkB,EAAE,6BAA6B,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE9G,qBAAa,iBAAkB,YAAW,kBAAkB;IACxD,SAAS,CAAC,QAAQ,EAAG,qBAAqB,CAAC;IAE3C,SAAS,CAAC,YAAY,EAAG,aAAa,CAAC;IAEvC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEnC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;gBAItB,OAAO,GAAE,wBAA6B;IAwBlD;;;;OAIG;cACa,OAAO,CAAC,KAAK,EAAE,MAAM,GAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAkBvE;;;;;;OAMG;IACG,KAAK,CAAC,GAAG,EAAE,6BAA6B,GAAI,OAAO,CAAC,IAAI,CAAC;IAmG/D;;;;;;OAMG;IACG,UAAU,CAAC,GAAG,EAAE,6BAA6B,GAAI,OAAO,CAAC,IAAI,CAAC;IAY9D,QAAQ,CAAC,GAAG,EAAE,6BAA6B,GAAI,OAAO,CAAC,IAAI,CAAC;IAc5D,aAAa,CAAC,GAAG,EAAE,6BAA6B,GAAI,OAAO,CAAC,IAAI,CAAC;CAS1E"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../src/permission/checker/module.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAmB,aAAa,EAAkB,MAAM,cAAc,CAAC;AAUnF,OAAO,KAAK,EAAE,mBAAmB,EAAwB,MAAM,aAAa,CAAC;AAG7E,OAAO,KAAK,EACR,iBAAiB,EACpB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAEhH,qBAAa,mBAAoB,YAAW,oBAAoB;IAC5D,SAAS,CAAC,QAAQ,EAAG,mBAAmB,CAAC;IAEzC,SAAS,CAAC,YAAY,EAAG,aAAa,CAAC;IAEvC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEnC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;gBAItB,OAAO,GAAE,0BAA+B;cAwBpC,OAAO,CACnB,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GACjE,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAsB/B,QAAQ,CAAC,GAAG,EAAE,2BAA2B,GAAI,OAAO,CAAC,IAAI,CAAC;IAgH1D,aAAa,CAAC,GAAG,EAAE,2BAA2B,GAAI,OAAO,CAAC,IAAI,CAAC;IAY/D,WAAW,CAAC,GAAG,EAAE,2BAA2B,GAAI,OAAO,CAAC,IAAI,CAAC;IAc7D,gBAAgB,CAAC,GAAG,EAAE,2BAA2B,GAAI,OAAO,CAAC,IAAI,CAAC;CAS3E"}

package/dist/permission/checker/types.d.ts

@@ -1,26 +1,28 @@
 import type { DecisionStrategy } from '../../constants.ts';
 import type { IPolicyEngine, PolicyData } from '../../policy';
-import type { IPermissionRepository } from '../repository';
-export interface IPermissionChecker {
-    check(ctx: PermissionCheckerCheckContext): Promise<void>;
-    checkOneOf(ctx: PermissionCheckerCheckContext): Promise<void>;
-    preCheck(ctx: PermissionCheckerCheckContext): Promise<void>;
-    preCheckOneOf(ctx: PermissionCheckerCheckContext): Promise<void>;
+import type { IPermissionProvider } from '../provider';
+export interface IPermissionEvaluator {
+    evaluate(ctx: PermissionEvaluationContext): Promise<void>;
+    evaluateOneOf(ctx: PermissionEvaluationContext): Promise<void>;
+    preEvaluate(ctx: PermissionEvaluationContext): Promise<void>;
+    preEvaluateOneOf(ctx: PermissionEvaluationContext): Promise<void>;
 }
-export type PermissionCheckerOptions = {
-    repository?: IPermissionRepository;
+export type PermissionEvaluatorOptions = {
+    repository?: IPermissionProvider;
     policyEngine?: IPolicyEngine;
     realmId?: string | null;
     clientId?: string | null;
 };
-export type PermissionCheckerCheckOptions = {
+export type PermissionEvaluationOptions = {
     decisionStrategy?: `${DecisionStrategy}`;
     policiesIncluded?: string[];
     policiesExcluded?: string[];
 };
-export type PermissionCheckerCheckContext = {
+export type PermissionEvaluationContext = {
     name: string | string[];
+    realmId?: string | null;
+    clientId?: string | null;
     input?: PolicyData;
-    options?: PermissionCheckerCheckOptions;
+    options?: PermissionEvaluationOptions;
 };
 //# sourceMappingURL=types.d.ts.map

package/dist/permission/checker/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/permission/checker/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE3D,MAAM,WAAW,kBAAkB;IAC/B,KAAK,CAAC,GAAG,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzD,UAAU,CAAC,GAAG,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9D,QAAQ,CAAC,GAAG,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5D,aAAa,CAAC,GAAG,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnE;AAED,MAAM,MAAM,wBAAwB,GAAG;IACnC,UAAU,CAAC,EAAE,qBAAqB,CAAC;IACnC,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IACxC,gBAAgB,CAAC,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACzC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IACxC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,6BAA6B,CAAA;CAC1C,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/permission/checker/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD,MAAM,WAAW,oBAAoB;IACjC,QAAQ,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1D,aAAa,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/D,WAAW,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7D,gBAAgB,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED,MAAM,MAAM,0BAA0B,GAAG;IACrC,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACtC,gBAAgB,CAAC,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACzC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACtC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,2BAA2B,CAAA;CACxC,CAAC"}

package/dist/permission/helpers/equal.d.ts

@@ -1,3 +1,2 @@
-import type { PermissionItem } from '../types';
-export declare function isPermissionItemEqual(a: PermissionItem, b: PermissionItem): boolean;
+export { isPermissionBindingEqual } from '@authup/core-kit';
 //# sourceMappingURL=equal.d.ts.map

package/dist/permission/helpers/equal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"equal.d.ts","sourceRoot":"","sources":["../../../src/permission/helpers/equal.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,cAAc,GAAG,OAAO,CAcnF"}
+{"version":3,"file":"equal.d.ts","sourceRoot":"","sources":["../../../src/permission/helpers/equal.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/permission/helpers/key.d.ts

@@ -1,3 +1,2 @@
-import type { PermissionItem } from '../types';
-export declare function buildPermissionItemKey(input: PermissionItem): string;
+export { buildPermissionBindingKey } from '@authup/core-kit';
 //# sourceMappingURL=key.d.ts.map

package/dist/permission/helpers/key.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"key.d.ts","sourceRoot":"","sources":["../../../src/permission/helpers/key.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,UAE3D"}
+{"version":3,"file":"key.d.ts","sourceRoot":"","sources":["../../../src/permission/helpers/key.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/permission/helpers/merge.d.ts

@@ -1,3 +1,2 @@
-import type { PermissionItem } from '../types';
-export declare function mergePermissionItems(input: PermissionItem[]): PermissionItem[];
+export { mergePermissionBindings } from '@authup/core-kit';
 //# sourceMappingURL=merge.d.ts.map

package/dist/permission/helpers/merge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"merge.d.ts","sourceRoot":"","sources":["../../../src/permission/helpers/merge.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAG/C,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAI,cAAc,EAAE,CAwC/E"}
+{"version":3,"file":"merge.d.ts","sourceRoot":"","sources":["../../../src/permission/helpers/merge.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/permission/index.d.ts

@@ -1,6 +1,6 @@
 export * from './error';
 export * from './helpers';
-export * from './repository';
+export * from './provider';
 export * from './checker';
 export * from './types';
 //# sourceMappingURL=index.d.ts.map

package/dist/permission/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/permission/index.ts"],"names":[],"mappings":"AAOA,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/permission/index.ts"],"names":[],"mappings":"AAOA,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC"}

package/dist/permission/provider/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/permission/provider/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}

package/dist/permission/provider/memory.d.ts

@@ -0,0 +1,9 @@
+import type { PermissionBinding } from '../types';
+import type { IPermissionProvider, PermissionGetOptions } from './types';
+export declare class PermissionMemoryProvider implements IPermissionProvider {
+    protected items: Record<string, PermissionBinding>;
+    constructor(items?: PermissionBinding[]);
+    findOne(options: PermissionGetOptions): Promise<PermissionBinding | null>;
+    setMany(input: PermissionBinding[]): void;
+}
+//# sourceMappingURL=memory.d.ts.map

package/dist/permission/provider/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/permission/provider/memory.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,KAAK,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAEzE,qBAAa,wBAAyB,YAAW,mBAAmB;IAChE,SAAS,CAAC,KAAK,EAAG,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAM;gBAE7C,KAAK,GAAE,iBAAiB,EAAO;IAIrC,OAAO,CACT,OAAO,EAAE,oBAAoB,GAC9B,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAapC,OAAO,CAAC,KAAK,EAAE,iBAAiB,EAAE;CAOrC"}

package/dist/permission/provider/types.d.ts

@@ -0,0 +1,10 @@
+import type { PermissionBinding } from '../types';
+export type PermissionGetOptions = {
+    name: string;
+    clientId?: string | null;
+    realmId?: string | null;
+};
+export interface IPermissionProvider {
+    findOne(criteria: PermissionGetOptions): Promise<PermissionBinding | null>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/permission/provider/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/permission/provider/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAElD,MAAM,MAAM,oBAAoB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B,CAAC;AAEF,MAAM,WAAW,mBAAmB;IAChC,OAAO,CAAC,QAAQ,EAAE,oBAAoB,GAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;CAC/E"}

package/dist/permission/types.d.ts

@@ -1,8 +1,2 @@
-import type { PolicyWithType } from '../policy';
-export type PermissionItem = {
-    name: string;
-    clientId?: string | null;
-    realmId?: string | null;
-    policy?: PolicyWithType;
-};
+export type { PermissionBinding } from '@authup/core-kit';
 //# sourceMappingURL=types.d.ts.map

package/dist/permission/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/permission/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,MAAM,MAAM,cAAc,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,cAAc,CAAC;CAC3B,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/permission/types.ts"],"names":[],"mappings":"AAOA,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/policy/built-in/attributes/evaluator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/attributes/evaluator.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAI1G,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAExD,qBAAa,yBAAyB,CAClC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CACrD,YAAW,gBAAgB;IACzB,SAAS,CAAC,SAAS,EAAG,yBAAyB,CAAC,CAAC,CAAC,CAAC;;IAM7C,UAAU,CAAC,GAAG,EAAE,uBAAuB,GAAI,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAkB5D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IA2BzG,SAAS,CAAC,QAAQ,CACd,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE;CAiCjC"}
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/attributes/evaluator.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAI1G,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAExD,qBAAa,yBAAyB,CAClC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CACrD,YAAW,gBAAgB;IACzB,SAAS,CAAC,SAAS,EAAG,yBAAyB,CAAC,CAAC,CAAC,CAAC;;IAM7C,UAAU,CAAC,GAAG,EAAE,uBAAuB,GAAI,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAkB5D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IA2BzG,SAAS,CAAC,QAAQ,CACd,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE;CAgCjC"}

package/dist/policy/built-in/composite/types.d.ts

@@ -4,7 +4,7 @@ export interface CompositePolicy extends PolicyBase {
     /**
      * How to decide if a policy evaluates to true.
      */
-    decisionStrategy?: `${DecisionStrategy}`;
+    decision_strategy?: `${DecisionStrategy}`;
     /**
      * Child policies.
      */

package/dist/policy/built-in/composite/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/composite/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE9D,MAAM,WAAW,eAAgB,SAAQ,UAAU;IAC/C;;OAEG;IACH,gBAAgB,CAAC,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACzC;;OAEG;IACH,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC9B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/composite/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE9D,MAAM,WAAW,eAAgB,SAAQ,UAAU;IAC/C;;OAEG;IACH,iBAAiB,CAAC,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAC1C;;OAEG;IACH,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC9B"}

package/dist/policy/built-in/constants.d.ts

@@ -32,4 +32,12 @@ export declare enum BuiltInPolicyType {
      */
     PERMISSION_BINDING = "permissionBinding"
 }
+export declare const SystemPolicyName: {
+    readonly DEFAULT: "system.default";
+    readonly IDENTITY: "system.identity";
+    readonly PERMISSION_BINDING: "system.permission-binding";
+    readonly REALM_MATCH: "system.realm-match";
+    readonly REALM_BOUND: "system.realm-bound";
+    readonly REALM_OR_GLOBAL: "system.realm-or-global";
+};
 //# sourceMappingURL=constants.d.ts.map

package/dist/policy/built-in/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/policy/built-in/constants.ts"],"names":[],"mappings":"AAOA,oBAAY,iBAAiB;IACzB;;OAEG;IACH,SAAS,cAAc;IACvB;;OAEG;IACH,IAAI,SAAS;IACb;;OAEG;IACH,IAAI,SAAS;IACb;;OAEG;IACH,eAAe,mBAAmB;IAClC;;OAEG;IACH,UAAU,eAAe;IACzB;;OAEG;IACH,WAAW,eAAe;IAE1B;;OAEG;IACH,QAAQ,aAAa;IAErB;;OAEG;IACH,kBAAkB,sBAAsB;CAI3C"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/policy/built-in/constants.ts"],"names":[],"mappings":"AAOA,oBAAY,iBAAiB;IACzB;;OAEG;IACH,SAAS,cAAc;IACvB;;OAEG;IACH,IAAI,SAAS;IACb;;OAEG;IACH,IAAI,SAAS;IACb;;OAEG;IACH,eAAe,mBAAmB;IAClC;;OAEG;IACH,UAAU,eAAe;IACzB;;OAEG;IACH,WAAW,eAAe;IAE1B;;OAEG;IACH,QAAQ,aAAa;IAErB;;OAEG;IACH,kBAAkB,sBAAsB;CAI3C;AAED,eAAO,MAAM,gBAAgB;;;;;;;CAOnB,CAAC"}

package/dist/policy/built-in/realm-match/evaluator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/realm-match/evaluator.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAG1G,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAExD,qBAAa,yBAA0B,YAAW,gBAAgB;IAC9D,SAAS,CAAC,SAAS,EAAG,yBAAyB,CAAC;IAEhD,SAAS,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;IAErD,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC;;IAQpD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAsI5G"}
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/realm-match/evaluator.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAG1G,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAExD,qBAAa,yBAA0B,YAAW,gBAAgB;IAC9D,SAAS,CAAC,SAAS,EAAG,yBAAyB,CAAC;IAEhD,SAAS,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;IAErD,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC;;IAQpD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CA+I5G"}

package/dist/policy/built-in/realm-match/types.d.ts

@@ -4,25 +4,25 @@ export interface RealmMatchPolicy extends PolicyBase {
     /**
      * Determines how realm-id/name matches are handled.
      */
-    decisionStrategy?: `${DecisionStrategy}`;
+    decision_strategy?: `${DecisionStrategy}`;
     /**
      * Specifies the name(s) of the realm-id/name attribute(s) used for matching.
      * Can be a single attribute name or an array of attribute names.
      */
-    attributeName?: string | string[];
+    attribute_name?: string | string[];
     /**
      * Only match if the attribute is strict equal to the name.
      */
-    attributeNameStrict?: boolean;
+    attribute_name_strict?: boolean;
     /**
      * Determines if resources with null realm-id/name value should match all identity realms.
      * If true, any identity realm can access resources with null realm-id/name values.
      */
-    attributeNullMatchAll?: boolean;
+    attribute_null_match_all?: boolean;
     /**
      * Specifies whether the master realm of an identity should match all realm-id/name attributes, including null.
      * If true, the master realm can access any resource regardless of its realm value.
      */
-    identityMasterMatchAll?: boolean;
+    identity_master_match_all?: boolean;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/policy/built-in/realm-match/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/realm-match/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,WAAW,gBAAiB,SAAQ,UAAU;IAChD;;OAEG;IACH,gBAAgB,CAAC,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAEzC;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAElC;;OAEG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEhC;;;OAGG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAA;CACnC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/realm-match/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,WAAW,gBAAiB,SAAQ,UAAU;IAChD;;OAEG;IACH,iBAAiB,CAAC,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAE1C;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAEnC;;OAEG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEhC;;;OAGG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAEnC;;;OAGG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAA;CACtC"}

package/dist/policy/built-in/time/types.d.ts

@@ -16,14 +16,14 @@ export interface TimePolicy extends PolicyBase {
     /**
      *  0 (Sunday) - 6 (Saturday)
      */
-    dayOfWeek?: number;
+    day_of_week?: number;
     /**
      * 1 - 31
      */
-    dayOfMonth?: number;
+    day_of_month?: number;
     /**
      * 1 - 365
      */
-    dayOfYear?: number;
+    day_of_year?: number;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/policy/built-in/time/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/time/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,WAAW,UAAW,SAAQ,UAAU;IAC1C;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAE/B;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAE7B;;OAEG;IACH,QAAQ,CAAC,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAEnC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/policy/built-in/time/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,WAAW,UAAW,SAAQ,UAAU;IAC1C;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAE/B;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAE7B;;OAEG;IACH,QAAQ,CAAC,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAEnC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB"}

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@authup/access",
     "type": "module",
-    "version": "1.0.0-beta.30",
+    "version": "1.0.0-beta.32",
     "description": "A library for evaluating permissions and policies.",
     "license": "Apache-2.0",
     "exports": {
@@ -28,8 +28,16 @@
         "node": "^20.19.0 || ^22.13.0 || ^23.5.0 || >=24.0.0"
     },
     "keywords": [
+        "auth",
+        "authorization",
+        "permission",
         "policy",
-        "permission"
+        "rbac",
+        "abac",
+        "access-control",
+        "policy-engine",
+        "permission-evaluator",
+        "decision-strategy"
     ],
     "author": {
         "name": "Peter Placzek",
@@ -53,14 +61,16 @@
         "zod": "^4.3.6"
     },
     "devDependencies": {
-        "@authup/errors": "^1.0.0-beta.30",
-        "@authup/kit": "^1.0.0-beta.30",
+        "@authup/core-kit": "^1.0.0-beta.32",
+        "@authup/errors": "^1.0.0-beta.32",
+        "@authup/kit": "^1.0.0-beta.32",
         "vitest": "^4.0.14",
         "unplugin-swc": "^1.5.9"
     },
     "peerDependencies": {
-        "@authup/errors": "^1.0.0-beta.30",
-        "@authup/kit": "^1.0.0-beta.30"
+        "@authup/core-kit": "^1.0.0-beta.32",
+        "@authup/errors": "^1.0.0-beta.32",
+        "@authup/kit": "^1.0.0-beta.32"
     },
     "publishConfig": {
         "access": "public"

package/dist/permission/repository/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/permission/repository/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}

package/dist/permission/repository/memory.d.ts

@@ -1,9 +0,0 @@
-import type { PermissionItem } from '../types';
-import type { IPermissionRepository, PermissionGetOptions } from './types';
-export declare class PermissionMemoryRepository implements IPermissionRepository {
-    protected items: Record<string, PermissionItem>;
-    constructor(items?: PermissionItem[]);
-    findOne(options: PermissionGetOptions): Promise<PermissionItem | null>;
-    setMany(input: PermissionItem[]): void;
-}
-//# sourceMappingURL=memory.d.ts.map

package/dist/permission/repository/memory.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/permission/repository/memory.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,KAAK,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAE3E,qBAAa,0BAA2B,YAAW,qBAAqB;IACpE,SAAS,CAAC,KAAK,EAAG,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAM;gBAE1C,KAAK,GAAE,cAAc,EAAO;IAIlC,OAAO,CACT,OAAO,EAAE,oBAAoB,GAC9B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IASjC,OAAO,CAAC,KAAK,EAAE,cAAc,EAAE;CAOlC"}

package/dist/permission/repository/types.d.ts

@@ -1,10 +0,0 @@
-import type { PermissionItem } from '../types';
-export type PermissionGetOptions = {
-    name: string;
-    clientId?: string | null;
-    realmId?: string | null;
-};
-export interface IPermissionRepository {
-    findOne(criteria: PermissionGetOptions): Promise<PermissionItem | null>;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/permission/repository/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/permission/repository/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C,MAAM,MAAM,oBAAoB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B,CAAC;AAEF,MAAM,WAAW,qBAAqB;IAClC,OAAO,CAAC,QAAQ,EAAE,oBAAoB,GAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;CAC5E"}