@authup/access 1.0.0-beta.33 → 1.0.0-beta.35

package/dist/index.d.mts

@@ -0,0 +1,547 @@
+import { AuthupError, AuthupErrorOptions } from "@authup/errors";
+import { DecisionStrategy, DecisionStrategy as DecisionStrategy$1 } from "@authup/kit";
+import { Container, Issue, IssueGroup, IssueItem } from "validup";
+import { MongoQuery } from "@ucast/mongo2js";
+
+//#region src/policy/data.d.ts
+interface IPolicyData {
+  set(key: string, value: unknown): void;
+  has(key: string): boolean;
+  get<T = unknown>(key: string): T;
+  isValidated(key: string): boolean;
+  setValidated(key: string): void;
+  clone(): IPolicyData;
+}
+declare class PolicyData implements IPolicyData {
+  protected data: Record<string, any>;
+  protected validated: Set<string>;
+  constructor(data?: Record<string, any>, validated?: Set<string>);
+  set<T = unknown>(key: string, value: T): void;
+  get<T = unknown>(key: string): T;
+  has(key: string): boolean;
+  setValidated(key: string): void;
+  isValidated(key: string): boolean;
+  clone(): PolicyData;
+}
+//#endregion
+//#region src/policy/evaluation/context/types.d.ts
+type PolicyEvaluationContext = {
+  readonly evaluators: Record<string, IPolicyEvaluator>;
+  readonly path: (string | number)[];
+  readonly exclude: string[];
+  readonly include: string[];
+  readonly data: PolicyData;
+};
+type PolicyEvaluationContextInput = Partial<PolicyEvaluationContext>;
+//#endregion
+//#region src/policy/evaluation/context/define.d.ts
+declare function definePolicyEvaluationContext(input?: PolicyEvaluationContextInput): PolicyEvaluationContext;
+//#endregion
+//#region src/policy/evaluation/types.d.ts
+type PolicyEvaluators = Record<string, IPolicyEvaluator>;
+type PolicyEvaluationResult = {
+  success: boolean;
+  issues?: Issue[];
+};
+interface IPolicyEvaluator {
+  /**
+   * Execute the policy with specific data and a given context.
+   */
+  evaluate(value: Record<string, any>, context: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
+}
+//#endregion
+//#region src/policy/types.d.ts
+type BasePolicy<T extends string = string> = {
+  /**
+   * Type describing the policy.
+   */
+  type?: T;
+  /**
+   * Invert evaluation result of policy (true->false and false->true)
+   */
+  invert?: boolean;
+};
+type PolicyWithType<R extends Record<string, any> = Record<string, any>, T extends string = string> = R & BasePolicy<T>;
+//#endregion
+//#region src/policy/engine/types.d.ts
+interface IPolicyEngine {
+  evaluate(policy: BasePolicy, options: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
+  evaluateOrFail(policy: BasePolicy, options: PolicyEvaluationContext): Promise<void>;
+}
+//#endregion
+//#region src/policy/engine/module.d.ts
+/**
+ * The policy engine is a component that interprets defined policies and makes decisions
+ * on whether to allow or deny a particular access.
+ */
+declare class PolicyEngine implements IPolicyEngine {
+  protected evaluators: Record<string, IPolicyEvaluator>;
+  constructor(evaluators?: PolicyEvaluators);
+  registerEvaluator(type: string, evaluator: IPolicyEvaluator): void;
+  registerEvaluators(evaluators: PolicyEvaluators): void;
+  /**
+   * @param policy
+   * @param ctx
+   */
+  evaluate(policy: BasePolicy, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
+  evaluateOrFail(policy: BasePolicy, ctx: PolicyEvaluationContext): Promise<void>;
+}
+//#endregion
+//#region src/policy/issue/constants.d.ts
+declare enum PolicyIssueSeverity {
+  WARNING = "warning",
+  ERROR = "error"
+}
+declare enum PolicyIssueCode {
+  DATA_MISSING = "DATA_MISSING",
+  DATA_INVALID = "DATA_INVALID",
+  INVALID = "INVALID",
+  TYPE_UNKNOWN = "TYPE_UNKNOWN",
+  FIELD_MISSING = "FIELD_MISSING",
+  FIELD_INVALID = "FIELD_INVALID",
+  CHILD_INVALID = "CHILD_INVALID",
+  CHILD_EVALUATION_FAILED = "CHILD_EVALUATION_FAILED",
+  EVALUATION_DENIED = "EVALUATION_DENIED",
+  EVALUATOR_NOT_FOUND = "EVALUATOR_NOT_FOUND",
+  EVALUATOR_ERROR = "EVALUATOR_ERROR",
+  SKIPPED_EXCLUDED = "SKIPPED_EXCLUDED",
+  SKIPPED_NOT_INCLUDED = "SKIPPED_NOT_INCLUDED",
+  INTERNAL_ERROR = "INTERNAL_ERROR"
+}
+//#endregion
+//#region src/policy/issue/types.d.ts
+type PolicyIssueItem = IssueItem;
+type PolicyIssueGroup = IssueGroup;
+type PolicyIssue = PolicyIssueItem | PolicyIssueGroup;
+//#endregion
+//#region src/policy/issue/define.d.ts
+declare function definePolicyIssueItem(input: Omit<PolicyIssueItem, 'type'>): PolicyIssueItem;
+declare function definePolicyIssueGroup(input: Omit<PolicyIssueGroup, 'type'>): PolicyIssueGroup;
+//#endregion
+//#region src/policy/error/module.d.ts
+declare class PolicyError extends AuthupError {
+  constructor(message?: string, code?: string | null);
+  addIssue(data: PolicyIssue): void;
+  addIssues(data: PolicyIssue[]): void;
+  static evaluatorNotFound(type: string): PolicyError;
+  static evaluatorNotProcessable(): PolicyError;
+  static evaluatorContextInvalid(): PolicyError;
+}
+//#endregion
+//#region src/policy/helpers/invert.d.ts
+type InvertFn = (input: boolean) => boolean;
+declare function maybeInvertPolicyOutcome(outcome: boolean, invert?: boolean | InvertFn): boolean;
+//#endregion
+//#region src/policy/built-in/attribute-names/types.d.ts
+interface AttributeNamesPolicy extends BasePolicy {
+  names: string[];
+}
+//#endregion
+//#region src/policy/built-in/attribute-names/validator.d.ts
+declare class AttributeNamesPolicyValidator extends Container<AttributeNamesPolicy> {
+  initialize(): void;
+}
+//#endregion
+//#region src/policy/built-in/attributes/types.d.ts
+type AttributesPolicyQuery<T> = MongoQuery<T>;
+interface AttributesPolicy<T extends Record<string, any> = Record<string, any>> extends BasePolicy {
+  query: AttributesPolicyQuery<T>;
+}
+//#endregion
+//#region src/policy/built-in/attributes/define.d.ts
+declare function defineAttributesPolicy<T extends Record<string, any> = Record<string, any>>(data: AttributesPolicy<T>): AttributesPolicy<T>;
+//#endregion
+//#region src/policy/built-in/attributes/validator.d.ts
+declare class AttributesPolicyValidator<T extends Record<string, any> = Record<string, any>> extends Container<AttributesPolicy<T>> {
+  initialize(): void;
+}
+//#endregion
+//#region src/policy/built-in/attributes/evaluator.d.ts
+declare class AttributesPolicyEvaluator<T extends Record<string, any> = Record<string, any>> implements IPolicyEvaluator {
+  protected validator: AttributesPolicyValidator<T>;
+  constructor();
+  accessData(ctx: PolicyEvaluationContext): Promise<T | null>;
+  evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
+  protected fixQuery(query: unknown | unknown[]): void;
+}
+//#endregion
+//#region src/policy/built-in/attribute-names/evaluator.d.ts
+declare class AttributeNamesPolicyEvaluator implements IPolicyEvaluator {
+  protected validator: AttributeNamesPolicyValidator;
+  protected attributesEvaluator: AttributesPolicyEvaluator;
+  constructor();
+  evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
+}
+//#endregion
+//#region src/policy/built-in/composite/types.d.ts
+interface CompositePolicy extends BasePolicy {
+  /**
+   * How to decide if a policy evaluates to true.
+   */
+  decision_strategy?: `${DecisionStrategy}`;
+  /**
+   * Child policies.
+   */
+  children: BasePolicy[];
+}
+//#endregion
+//#region src/policy/built-in/composite/validator.d.ts
+declare class CompositePolicyValidator extends Container<CompositePolicy> {
+  initialize(): void;
+}
+//#endregion
+//#region src/policy/built-in/composite/evaluator.d.ts
+declare class CompositePolicyEvaluator implements IPolicyEvaluator {
+  protected validator: CompositePolicyValidator;
+  constructor();
+  evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
+}
+//#endregion
+//#region src/policy/built-in/composite/helper.d.ts
+declare function isCompositePolicy(input: PolicyWithType): input is PolicyWithType<CompositePolicy>;
+//#endregion
+//#region src/policy/built-in/date/types.d.ts
+interface DatePolicy extends BasePolicy {
+  start?: string | Date | number;
+  end?: string | Date | number;
+}
+//#endregion
+//#region src/policy/built-in/date/validator.d.ts
+declare class DatePolicyValidator extends Container<DatePolicy> {
+  initialize(): void;
+}
+//#endregion
+//#region src/policy/built-in/date/evaluator.d.ts
+declare class DatePolicyEvaluator implements IPolicyEvaluator {
+  protected validator: DatePolicyValidator;
+  constructor();
+  evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
+}
+//#endregion
+//#region src/policy/built-in/identity/types.d.ts
+interface IdentityPolicy extends BasePolicy {
+  /**
+   * Set of allowed identity types.
+   */
+  types?: string[];
+}
+type IdentityPolicyData = {
+  /**
+   * user, client, robot
+   */
+  type: string;
+  /**
+   * UUID
+   */
+  id: string;
+  /**
+   * Client associated with identity.
+   */
+  clientId?: string | null;
+  /**
+   * Realm id associated with identity.
+   */
+  realmId?: string | null;
+  /**
+   * Realm name associated with identity.
+   */
+  realmName?: string | null;
+};
+//#endregion
+//#region src/policy/built-in/identity/data/validator.d.ts
+declare class PolicyIdentityDataValidator extends Container<IdentityPolicyData> {
+  initialize(): void;
+}
+//#endregion
+//#region src/policy/built-in/identity/validator.d.ts
+declare class IdentityPolicyValidator extends Container<IdentityPolicy> {
+  initialize(): void;
+}
+//#endregion
+//#region src/policy/built-in/identity/evaluator.d.ts
+declare class IdentityPolicyEvaluator implements IPolicyEvaluator {
+  protected validator: IdentityPolicyValidator;
+  protected dataValidator: PolicyIdentityDataValidator;
+  constructor();
+  accessData(ctx: PolicyEvaluationContext): Promise<IdentityPolicyData | null>;
+  evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
+}
+//#endregion
+//#region src/policy/built-in/permission-binding/types.d.ts
+interface PermissionBindingPolicy extends BasePolicy {}
+//#endregion
+//#region src/policy/built-in/permission-binding/validator.d.ts
+declare class PermissionBindingPolicyValidator extends Container<PermissionBindingPolicy> {
+  initialize(): void;
+}
+//#endregion
+//#region src/policy/built-in/permission-binding/module.d.ts
+declare class PermissionBindingPolicyEvaluator implements IPolicyEvaluator {
+  protected validator: PermissionBindingPolicyValidator;
+  constructor();
+  evaluate(value: Record<string, any>): Promise<PolicyEvaluationResult>;
+}
+//#endregion
+//#region src/policy/built-in/realm-match/types.d.ts
+interface RealmMatchPolicy extends BasePolicy {
+  /**
+   * Determines how realm-id/name matches are handled.
+   */
+  decision_strategy?: `${DecisionStrategy}`;
+  /**
+   * Specifies the name(s) of the realm-id/name attribute(s) used for matching.
+   * Can be a single attribute name or an array of attribute names.
+   */
+  attribute_name?: string | string[];
+  /**
+   * Only match if the attribute is strict equal to the name.
+   */
+  attribute_name_strict?: boolean;
+  /**
+   * Determines if resources with null realm-id/name value should match all identity realms.
+   * If true, any identity realm can access resources with null realm-id/name values.
+   */
+  attribute_null_match_all?: boolean;
+  /**
+   * Specifies whether the master realm of an identity should match all realm-id/name attributes, including null.
+   * If true, the master realm can access any resource regardless of its realm value.
+   */
+  identity_master_match_all?: boolean;
+}
+//#endregion
+//#region src/policy/built-in/realm-match/validator.d.ts
+declare class RealmMatchPolicyValidator extends Container<RealmMatchPolicy> {
+  initialize(): void;
+}
+//#endregion
+//#region src/policy/built-in/realm-match/evaluator.d.ts
+declare class RealmMatchPolicyEvaluator implements IPolicyEvaluator {
+  protected validator: RealmMatchPolicyValidator;
+  protected identityEvaluator: IdentityPolicyEvaluator;
+  protected attributesEvaluator: AttributesPolicyEvaluator;
+  constructor();
+  evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
+}
+//#endregion
+//#region src/policy/built-in/time/constants.d.ts
+declare enum TimePolicyInterval {
+  DAILY = "daily",
+  WEEKLY = "weekly",
+  MONTHLY = "monthly",
+  YEARLY = "yearly"
+}
+//#endregion
+//#region src/policy/built-in/time/types.d.ts
+interface TimePolicy extends BasePolicy {
+  /**
+   * Format: HH:MM
+   */
+  start?: string | number | Date;
+  /**
+   * Format HH:MM
+   */
+  end?: string | number | Date;
+  /**
+   * Interval: daily, weekly, monthly, yearly
+   */
+  interval?: `${TimePolicyInterval}`;
+  /**
+   *  0 (Sunday) - 6 (Saturday)
+   */
+  day_of_week?: number;
+  /**
+   * 1 - 31
+   */
+  day_of_month?: number;
+  /**
+   * 1 - 365
+   */
+  day_of_year?: number;
+}
+//#endregion
+//#region src/policy/built-in/time/validator.d.ts
+declare class TimePolicyValidator extends Container<TimePolicy> {
+  initialize(): void;
+}
+//#endregion
+//#region src/policy/built-in/time/evaluator.d.ts
+declare class TimePolicyEvaluator implements IPolicyEvaluator {
+  protected validator: TimePolicyValidator;
+  constructor();
+  evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
+}
+//#endregion
+//#region src/policy/built-in/time/helpers.d.ts
+declare function isIntervalForDayOfWeek(interval: string): interval is TimePolicyInterval.WEEKLY | TimePolicyInterval.MONTHLY | TimePolicyInterval.YEARLY;
+declare function isIntervalForDayOfMonth(interval: string): interval is TimePolicyInterval.MONTHLY | TimePolicyInterval.YEARLY;
+declare function isIntervalForDayOfYear(interval: string): interval is TimePolicyInterval.YEARLY;
+//#endregion
+//#region src/policy/built-in/constants.d.ts
+declare enum BuiltInPolicyType {
+  /**
+   * Bundles different policies.
+   */
+  COMPOSITE = "composite",
+  /**
+   * Date Based Access Control (DBAC)
+   */
+  DATE = "date",
+  /**
+   * Time Based Access Control (TBAC)
+   */
+  TIME = "time",
+  /**
+   * Attribute Name Based Access Control (ANBAC)
+   */
+  ATTRIBUTE_NAMES = "attributeNames",
+  /**
+   * Attribute Based Access Control (ABAC)
+   */
+  ATTRIBUTES = "attributes",
+  /**
+   * Realm of Identity is for attribute realm.
+   */
+  REALM_MATCH = "realmMatch",
+  /**
+   * Restriction based on identity (type, id, ...)
+   */
+  IDENTITY = "identity",
+  /**
+   * Restriction based on a binding between identity <-> permission
+   */
+  PERMISSION_BINDING = "permissionBinding"
+}
+declare const SystemPolicyName: {
+  readonly DEFAULT: "system.default";
+  readonly IDENTITY: "system.identity";
+  readonly PERMISSION_BINDING: "system.permission-binding";
+  readonly REALM_MATCH: "system.realm-match";
+  readonly REALM_BOUND: "system.realm-bound";
+  readonly REALM_OR_GLOBAL: "system.realm-or-global";
+};
+//#endregion
+//#region src/policy/built-in/types.d.ts
+type BuiltInPolicyTypeMapRaw<T extends Record<string, any> = Record<string, any>> = {
+  [BuiltInPolicyType.ATTRIBUTES]: AttributesPolicy<T>;
+  [BuiltInPolicyType.ATTRIBUTE_NAMES]: AttributeNamesPolicy;
+  [BuiltInPolicyType.DATE]: DatePolicy;
+  [BuiltInPolicyType.COMPOSITE]: CompositePolicy;
+  [BuiltInPolicyType.TIME]: TimePolicy;
+  [BuiltInPolicyType.IDENTITY]: IdentityPolicy;
+  [BuiltInPolicyType.PERMISSION_BINDING]: PermissionBindingPolicy;
+};
+type BuiltInPolicyTypeMap<T extends Record<string, any> = Record<string, any>> = { [K in keyof BuiltInPolicyTypeMapRaw<T> as `${K}`]: BuiltInPolicyTypeMapRaw<T>[K] };
+type BuiltInPolicies<T extends Record<string, any> = Record<string, any>> = { [K in keyof BuiltInPolicyTypeMap<T>]: BuiltInPolicyTypeMap<T>[K] & {
+  type: K;
+} }[keyof BuiltInPolicyTypeMap];
+//#endregion
+//#region src/policy/built-in/define.d.ts
+declare function definePolicyWithType<K extends keyof BuiltInPolicyTypeMap, D extends BuiltInPolicyTypeMap<any>[K]>(type: K, data: D): PolicyWithType<D, K>;
+//#endregion
+//#region src/policy/constants.d.ts
+declare const PolicyDefaultEvaluators: {
+  readonly composite: CompositePolicyEvaluator;
+  readonly attributes: AttributesPolicyEvaluator<Record<string, any>>;
+  readonly attributeNames: AttributeNamesPolicyEvaluator;
+  readonly date: DatePolicyEvaluator;
+  readonly identity: IdentityPolicyEvaluator;
+  readonly permissionBinding: PermissionBindingPolicyEvaluator;
+  readonly realmMatch: RealmMatchPolicyEvaluator;
+  readonly time: TimePolicyEvaluator;
+};
+//#endregion
+//#region src/permission/error/module.d.ts
+declare class PermissionError extends AuthupError {
+  constructor(options?: AuthupErrorOptions);
+  addIssue(data: PolicyIssue): void;
+  addIssues(data: PolicyIssue[]): void;
+  static notFound(name: string): PermissionError;
+  static denied(name: string): PermissionError;
+  static deniedAll(names: string[]): PermissionError;
+  static evaluationFailed(name: string | string[]): PermissionError;
+}
+//#endregion
+//#region src/permission/types.d.ts
+type BasePermission = {
+  name: string;
+  client_id?: string | null;
+  realm_id?: string | null;
+  decision_strategy?: `${DecisionStrategy$1}` | null;
+};
+type PermissionPolicyBinding = {
+  permission: BasePermission;
+  policies?: BasePolicy[];
+};
+//#endregion
+//#region src/permission/helpers/equal.d.ts
+declare function isPermissionPolicyBindingEqual(a: PermissionPolicyBinding, b: PermissionPolicyBinding): boolean;
+//#endregion
+//#region src/permission/helpers/key.d.ts
+declare function buildPermissionKey(input: BasePermission): string;
+//#endregion
+//#region src/permission/helpers/merge.d.ts
+declare function mergePermissionPolicyBindings(input: PermissionPolicyBinding[]): PermissionPolicyBinding[];
+//#endregion
+//#region src/permission/provider/types.d.ts
+type PermissionGetOptions = {
+  name: string;
+  clientId?: string | null;
+  realmId?: string | null;
+};
+interface IPermissionProvider {
+  findOne(criteria: PermissionGetOptions): Promise<PermissionPolicyBinding | null>;
+}
+//#endregion
+//#region src/permission/provider/memory.d.ts
+declare class PermissionMemoryProvider implements IPermissionProvider {
+  protected items: Record<string, PermissionPolicyBinding>;
+  constructor(items?: PermissionPolicyBinding[]);
+  findOne(options: PermissionGetOptions): Promise<PermissionPolicyBinding | null>;
+  setMany(input: PermissionPolicyBinding[]): void;
+}
+//#endregion
+//#region src/permission/evaluator/types.d.ts
+interface IPermissionEvaluator {
+  evaluate(ctx: PermissionEvaluationContext): Promise<void>;
+  evaluateOneOf(ctx: PermissionEvaluationContext): Promise<void>;
+  preEvaluate(ctx: PermissionEvaluationContext): Promise<void>;
+  preEvaluateOneOf(ctx: PermissionEvaluationContext): Promise<void>;
+}
+type PermissionEvaluatorOptions = {
+  provider: IPermissionProvider;
+  policyEngine?: IPolicyEngine;
+  realmId?: string | null;
+  clientId?: string | null;
+};
+type PermissionEvaluationOptions = {
+  decisionStrategy?: `${DecisionStrategy}`;
+  policiesIncluded?: string[];
+  policiesExcluded?: string[];
+};
+type PermissionEvaluationContext = {
+  name: string | string[];
+  realmId?: string | null;
+  clientId?: string | null;
+  input?: PolicyData;
+  options?: PermissionEvaluationOptions;
+};
+//#endregion
+//#region src/permission/evaluator/module.d.ts
+declare class PermissionEvaluator implements IPermissionEvaluator {
+  protected provider: IPermissionProvider;
+  protected policyEngine: IPolicyEngine;
+  protected clientId?: string | null;
+  protected realmId?: string | null;
+  constructor(options: PermissionEvaluatorOptions);
+  protected findOne(input: string, overrides?: {
+    realmId?: string | null;
+    clientId?: string | null;
+  }): Promise<PermissionPolicyBinding | null>;
+  evaluate(ctx: PermissionEvaluationContext): Promise<void>;
+  evaluateOneOf(ctx: PermissionEvaluationContext): Promise<void>;
+  preEvaluate(ctx: PermissionEvaluationContext): Promise<void>;
+  preEvaluateOneOf(ctx: PermissionEvaluationContext): Promise<void>;
+}
+//#endregion
+export { AttributeNamesPolicy, AttributeNamesPolicyEvaluator, AttributeNamesPolicyValidator, AttributesPolicy, AttributesPolicyEvaluator, AttributesPolicyQuery, AttributesPolicyValidator, BasePermission, BasePolicy, BuiltInPolicies, BuiltInPolicyType, BuiltInPolicyTypeMap, CompositePolicy, CompositePolicyEvaluator, CompositePolicyValidator, DatePolicy, DatePolicyEvaluator, DatePolicyValidator, DecisionStrategy, IPermissionEvaluator, IPermissionProvider, IPolicyData, IPolicyEngine, IPolicyEvaluator, IdentityPolicy, IdentityPolicyData, IdentityPolicyEvaluator, IdentityPolicyValidator, PermissionBindingPolicy, PermissionBindingPolicyEvaluator, PermissionBindingPolicyValidator, PermissionError, PermissionEvaluationContext, PermissionEvaluationOptions, PermissionEvaluator, PermissionEvaluatorOptions, PermissionGetOptions, PermissionMemoryProvider, PermissionPolicyBinding, PolicyData, PolicyDefaultEvaluators, PolicyEngine, PolicyError, PolicyEvaluationContext, PolicyEvaluationContextInput, PolicyEvaluationResult, PolicyEvaluators, PolicyIssue, PolicyIssueCode, PolicyIssueGroup, PolicyIssueItem, PolicyIssueSeverity, PolicyWithType, RealmMatchPolicy, RealmMatchPolicyEvaluator, RealmMatchPolicyValidator, SystemPolicyName, TimePolicy, TimePolicyEvaluator, TimePolicyInterval, TimePolicyValidator, buildPermissionKey, defineAttributesPolicy, definePolicyEvaluationContext, definePolicyIssueGroup, definePolicyIssueItem, definePolicyWithType, isCompositePolicy, isIntervalForDayOfMonth, isIntervalForDayOfWeek, isIntervalForDayOfYear, isPermissionPolicyBindingEqual, maybeInvertPolicyOutcome, mergePermissionPolicyBindings };
+//# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/policy/data.ts","../src/policy/evaluation/context/types.ts","../src/policy/evaluation/context/define.ts","../src/policy/evaluation/types.ts","../src/policy/types.ts","../src/policy/engine/types.ts","../src/policy/engine/module.ts","../src/policy/issue/constants.ts","../src/policy/issue/types.ts","../src/policy/issue/define.ts","../src/policy/error/module.ts","../src/policy/helpers/invert.ts","../src/policy/built-in/attribute-names/types.ts","../src/policy/built-in/attribute-names/validator.ts","../src/policy/built-in/attributes/types.ts","../src/policy/built-in/attributes/define.ts","../src/policy/built-in/attributes/validator.ts","../src/policy/built-in/attributes/evaluator.ts","../src/policy/built-in/attribute-names/evaluator.ts","../src/policy/built-in/composite/types.ts","../src/policy/built-in/composite/validator.ts","../src/policy/built-in/composite/evaluator.ts","../src/policy/built-in/composite/helper.ts","../src/policy/built-in/date/types.ts","../src/policy/built-in/date/validator.ts","../src/policy/built-in/date/evaluator.ts","../src/policy/built-in/identity/types.ts","../src/policy/built-in/identity/data/validator.ts","../src/policy/built-in/identity/validator.ts","../src/policy/built-in/identity/evaluator.ts","../src/policy/built-in/permission-binding/types.ts","../src/policy/built-in/permission-binding/validator.ts","../src/policy/built-in/permission-binding/module.ts","../src/policy/built-in/realm-match/types.ts","../src/policy/built-in/realm-match/validator.ts","../src/policy/built-in/realm-match/evaluator.ts","../src/policy/built-in/time/constants.ts","../src/policy/built-in/time/types.ts","../src/policy/built-in/time/validator.ts","../src/policy/built-in/time/evaluator.ts","../src/policy/built-in/time/helpers.ts","../src/policy/built-in/constants.ts","../src/policy/built-in/types.ts","../src/policy/built-in/define.ts","../src/policy/constants.ts","../src/permission/error/module.ts","../src/permission/types.ts","../src/permission/helpers/equal.ts","../src/permission/helpers/key.ts","../src/permission/helpers/merge.ts","../src/permission/provider/types.ts","../src/permission/provider/memory.ts","../src/permission/evaluator/types.ts","../src/permission/evaluator/module.ts"],"mappings":";;;;;;UAOiB,WAAA;EACb,GAAA,CAAI,GAAA,UAAa,KAAA;EACjB,GAAA,CAAI,GAAA;EACJ,GAAA,cAAiB,GAAA,WAAe,CAAA;EAEhC,WAAA,CAAY,GAAA;EACZ,YAAA,CAAa,GAAA;EAEb,KAAA,IAAU,WAAA;AAAA;AAAA,cAGD,UAAA,YAAsB,WAAA;EAAA,UACrB,IAAA,EAAM,MAAA;EAAA,UAEN,SAAA,EAAY,GAAA;cAGlB,IAAA,GAAM,MAAA,eACN,SAAA,GAAW,GAAA;EAMf,GAAA,aAAA,CAAiB,GAAA,UAAa,KAAA,EAAO,CAAA;EAKrC,GAAA,aAAA,CAAiB,GAAA,WAAe,CAAA;EAQhC,GAAA,CAAI,GAAA;EAIJ,YAAA,CAAa,GAAA;EAIb,WAAA,CAAY,GAAA;EAIZ,KAAA,CAAA,GAAK,UAAA;AAAA;;;KC/CG,uBAAA;EAAA,SACC,UAAA,EAAY,MAAA,SAAe,gBAAA;EAAA,SAC3B,IAAA;EAAA,SACA,OAAA;EAAA,SACA,OAAA;EAAA,SACA,IAAA,EAAM,UAAA;AAAA;AAAA,KAGP,4BAAA,GAA+B,OAAA,CAAQ,uBAAA;;;iBCPnC,6BAAA,CACZ,KAAA,GAAO,4BAAA,GACP,uBAAA;;;KCFQ,gBAAA,GAAmB,MAAA,SAAe,gBAAA;AAAA,KAElC,sBAAA;EACR,OAAA;EACA,MAAA,GAAS,KAAA;AAAA;AAAA,UAGI,gBAAA;EHVW;;;EGcxB,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,OAAA,EAAS,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;KCdxE,UAAA;;;;EAIR,IAAA,GAAO,CAAA;;AJJX;;EISI,MAAA;AAAA;AAAA,KAGQ,cAAA,WACE,MAAA,gBAAsB,MAAA,4CAEhC,CAAA,GAAI,UAAA,CAAW,CAAA;;;UCZF,aAAA;EACb,QAAA,CAAS,MAAA,EAAQ,UAAA,EAAY,OAAA,EAAS,uBAAA,GAA2B,OAAA,CAAQ,sBAAA;EAEzE,cAAA,CAAe,MAAA,EAAQ,UAAA,EAAY,OAAA,EAAS,uBAAA,GAA2B,OAAA;AAAA;;;;;;ALN3E;cMkBa,YAAA,YAAwB,aAAA;EAAA,UACvB,UAAA,EAAa,MAAA,SAAe,gBAAA;cAE1B,UAAA,GAAY,gBAAA;EAIjB,iBAAA,CACH,IAAA,UACA,SAAA,EAAW,gBAAA;EAKR,kBAAA,CAAmB,UAAA,EAAY,gBAAA;EN/BrB;;;;EM0CX,QAAA,CAAS,MAAA,EAAQ,UAAA,EAAY,GAAA,EAAK,uBAAA,GAA2B,OAAA,CAAQ,sBAAA;EAoErE,cAAA,CAAe,MAAA,EAAQ,UAAA,EAAY,GAAA,EAAK,uBAAA,GAA2B,OAAA;AAAA;;;aC/GjE,mBAAA;EACR,OAAA;EACA,KAAA;AAAA;AAAA,aAGQ,eAAA;EAER,YAAA;EACA,YAAA;EAGA,OAAA;EACA,YAAA;EACA,aAAA;EACA,aAAA;EAGA,aAAA;EACA,uBAAA;EAGA,iBAAA;EACA,mBAAA;EACA,eAAA;EAGA,gBAAA;EACA,oBAAA;EAGA,cAAA;AAAA;;;KC5BQ,eAAA,GAAkB,SAAA;AAAA,KAClB,gBAAA,GAAmB,UAAA;AAAA,KAEnB,WAAA,GAAc,eAAA,GAAkB,gBAAA;;;iBCF5B,qBAAA,CAAsB,KAAA,EAAO,IAAA,CAAK,eAAA,YAA4B,eAAA;AAAA,iBAI9D,sBAAA,CAAuB,KAAA,EAAO,IAAA,CAAK,gBAAA,YAA6B,gBAAA;;;cCJnE,WAAA,SAAoB,WAAA;cACjB,OAAA,WAAkB,IAAA;EAO9B,QAAA,CAAS,IAAA,EAAM,WAAA;EAIf,SAAA,CAAU,IAAA,EAAM,WAAA;EAAA,OAIT,iBAAA,CAAkB,IAAA,WAAY,WAAA;EAAA,OAO9B,uBAAA,CAAA,GAAuB,WAAA;EAAA,OAOvB,uBAAA,CAAA,GAAuB,WAAA;AAAA;;;KCjC7B,QAAA,IAAY,KAAA;AAAA,iBAED,wBAAA,CACZ,OAAA,WACA,MAAA,aAAmB,QAAA;;;UCFN,oBAAA,SAA6B,UAAA;EAC1C,KAAA;AAAA;;;cCES,6BAAA,SAAsC,SAAA,CAAU,oBAAA;EAChD,UAAA,CAAA;AAAA;;;KCHD,qBAAA,MAA2B,UAAA,CAAW,CAAA;AAAA,UAEjC,gBAAA,WACH,MAAA,gBAAsB,MAAA,uBAC1B,UAAA;EACN,KAAA,EAAO,qBAAA,CAAsB,CAAA;AAAA;;;iBCNjB,sBAAA,WACF,MAAA,gBAAsB,MAAA,cAAA,CAEhC,IAAA,EAAM,gBAAA,CAAiB,CAAA,IACvB,gBAAA,CAAiB,CAAA;;;cCDR,yBAAA,WACC,MAAA,gBAAsB,MAAA,uBAC1B,SAAA,CAAU,gBAAA,CAAiB,CAAA;EACxB,UAAA,CAAA;AAAA;;;cCAA,yBAAA,WACC,MAAA,gBAAsB,MAAA,0BACvB,gBAAA;EAAA,UACC,SAAA,EAAY,yBAAA,CAA0B,CAAA;;EAM1C,UAAA,CAAW,GAAA,EAAK,uBAAA,GAA2B,OAAA,CAAQ,CAAA;EAkBnD,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;EAAA,UAyBxE,QAAA,CACN,KAAA;AAAA;;;cCrDK,6BAAA,YAAyC,gBAAA;EAAA,UACxC,SAAA,EAAY,6BAAA;EAAA,UAEZ,mBAAA,EAAsB,yBAAA;;EAO1B,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;UCfrE,eAAA,SAAwB,UAAA;;;;EAIrC,iBAAA,MAAuB,gBAAA;EnBPC;;;EmBWxB,QAAA,EAAU,UAAA;AAAA;;;cCLD,wBAAA,SAAiC,SAAA,CAAU,eAAA;EAC3C,UAAA,CAAA;AAAA;;;cCCA,wBAAA,YAAoC,gBAAA;EAAA,UACnC,SAAA,EAAY,wBAAA;;EAMhB,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;iBCXtE,iBAAA,CACZ,KAAA,EAAO,cAAA,GACP,KAAA,IAAS,cAAA,CAAe,eAAA;;;UCJX,UAAA,SAAmB,UAAA;EAChC,KAAA,YAAiB,IAAA;EAEjB,GAAA,YAAe,IAAA;AAAA;;;cCAN,mBAAA,SAA4B,SAAA,CAAU,UAAA;EACtC,UAAA,CAAA;AAAA;;;cCeA,mBAAA,YAA+B,gBAAA;EAAA,UAC9B,SAAA,EAAY,mBAAA;;EAMhB,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;UC1BrE,cAAA,SAAuB,UAAA;;;;EAIpC,KAAA;AAAA;AAAA,KAGQ,kBAAA;E1BTgB;;;E0BaxB,IAAA;E1BZiB;;;E0BgBjB,EAAA;E1BdI;;;E0BkBJ,QAAA;E1BhBY;;;E0BoBZ,OAAA;E1BjBU;;;E0BqBV,SAAA;AAAA;;;cCvBS,2BAAA,SAAoC,SAAA,CAAU,kBAAA;EAC9C,UAAA,CAAA;AAAA;;;cCFA,uBAAA,SAAgC,SAAA,CAAU,cAAA;EAC1C,UAAA,CAAA;AAAA;;;cCCA,uBAAA,YAAmC,gBAAA;EAAA,UAClC,SAAA,EAAY,uBAAA;EAAA,UAEZ,aAAA,EAAgB,2BAAA;;EAOpB,UAAA,CAAW,GAAA,EAAK,uBAAA,GAA2B,OAAA,CAAQ,kBAAA;EAiBnD,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;UChCrE,uBAAA,SAAgC,UAAA;;;cCCpC,gCAAA,SAAyC,SAAA,CAAU,uBAAA;EACnD,UAAA,CAAA;AAAA;;;cCAA,gCAAA,YAA4C,gBAAA;EAAA,UAC3C,SAAA,EAAW,gCAAA;;EAMf,QAAA,CAAS,KAAA,EAAO,MAAA,gBAAsB,OAAA,CAAQ,sBAAA;AAAA;;;UCRvC,gBAAA,SAAyB,UAAA;;;;EAItC,iBAAA,MAAuB,gBAAA;EjCPC;;;;EiCaxB,cAAA;EjCZiB;;;EiCiBjB,qBAAA;EjCfI;;;;EiCqBJ,wBAAA;EjClBA;;;;EiCwBA,yBAAA;AAAA;;;cCxBS,yBAAA,SAAkC,SAAA,CAAU,gBAAA;EAC5C,UAAA,CAAA;AAAA;;;cCEA,yBAAA,YAAqC,gBAAA;EAAA,UACpC,SAAA,EAAY,yBAAA;EAAA,UAEZ,iBAAA,EAAmB,uBAAA;EAAA,UAEnB,mBAAA,EAAsB,yBAAA;;EAQ1B,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;aCtB1E,kBAAA;EACR,KAAA;EACA,MAAA;EACA,OAAA;EACA,MAAA;AAAA;;;UCDa,UAAA,SAAmB,UAAA;;;;EAIhC,KAAA,qBAA0B,IAAA;ErCPF;;;EqCYxB,GAAA,qBAAwB,IAAA;ErCXpB;;;EqCgBJ,QAAA,MAAc,kBAAA;ErCdd;;;EqCmBA,WAAA;ErCjBA;;;EqCsBA,YAAA;ErCnBA;;;EqCwBA,WAAA;AAAA;;;cC1BS,mBAAA,SAA4B,SAAA,CAAU,UAAA;EACtC,UAAA,CAAA;AAAA;;;cC0CA,mBAAA,YAA+B,gBAAA;EAAA,UAC9B,SAAA,EAAY,mBAAA;;EAMhB,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;iBCtDtE,sBAAA,CACZ,QAAA,WAAgB,QAAA,IAAA,kBAAA,CAAA,MAAA,GAAA,kBAAA,CAAA,OAAA,GAAA,kBAAA,CAAA,MAAA;AAAA,iBAOJ,uBAAA,CACZ,QAAA,WAAgB,QAAA,IAAA,kBAAA,CAAA,OAAA,GAAA,kBAAA,CAAA,MAAA;AAAA,iBAMJ,sBAAA,CACZ,QAAA,WAAgB,QAAA,IAAA,kBAAA,CAAA,MAAA;;;aClBR,iBAAA;;;;EAIR,SAAA;;AzCJJ;;EyCQI,IAAA;EzCAqB;;;EyCIrB,IAAA;EzCVA;;;EyCcA,eAAA;EzCbiB;;;EyCiBjB,UAAA;EzCdA;;;EyCkBA,WAAA;EzChBqB;;AAGzB;EyCkBI,QAAA;EzClBoB;;;EyCuBpB,kBAAA;AAAA;AAAA,cAMS,gBAAA;EAAA;;;;;;;;;KC/BR,uBAAA,WAAkC,MAAA,gBAAsB,MAAA;EAAA,CACxD,iBAAA,CAAkB,UAAA,GAAa,gBAAA,CAAiB,CAAA;EAAA,CAChD,iBAAA,CAAkB,eAAA,GAAkB,oBAAA;EAAA,CACpC,iBAAA,CAAkB,IAAA,GAAO,UAAA;EAAA,CACzB,iBAAA,CAAkB,SAAA,GAAY,eAAA;EAAA,CAC9B,iBAAA,CAAkB,IAAA,GAAO,UAAA;EAAA,CACzB,iBAAA,CAAkB,QAAA,GAAW,cAAA;EAAA,CAC7B,iBAAA,CAAkB,kBAAA,GAAqB,uBAAA;AAAA;AAAA,KAGhC,oBAAA,WAA+B,MAAA,gBAAsB,MAAA,+BACjD,uBAAA,CAAwB,CAAA,QAAS,CAAA,KAAM,uBAAA,CAAwB,CAAA,EAAG,CAAA;AAAA,KAGtE,eAAA,WAA0B,MAAA,gBAAsB,MAAA,+BAC5C,oBAAA,CAAqB,CAAA,IAAK,oBAAA,CAAqB,CAAA,EAAG,CAAA;EAC1D,IAAA,EAAM,CAAA;AAAA,UAEN,oBAAA;;;iBCxBQ,oBAAA,iBACI,oBAAA,YACN,oBAAA,MAA0B,CAAA,EAAA,CAEpC,IAAA,EAAM,CAAA,EACN,IAAA,EAAM,CAAA,GACN,cAAA,CAAe,CAAA,EAAG,CAAA;;;cCGT,uBAAA;EAAA;;;;;;;;;;;cCRA,eAAA,SAAwB,WAAA;cACrB,OAAA,GAAS,kBAAA;EAQrB,QAAA,CAAS,IAAA,EAAM,WAAA;EAIf,SAAA,CAAU,IAAA,EAAM,WAAA;EAAA,OAIT,QAAA,CAAS,IAAA,WAAY,eAAA;EAAA,OAOrB,MAAA,CAAO,IAAA,WAAY,eAAA;EAAA,OAOnB,SAAA,CAAU,KAAA,aAAe,eAAA;EAAA,OAOzB,gBAAA,CAAiB,IAAA,sBAAuB,eAAA;AAAA;;;KCvCvC,cAAA;EACR,IAAA;EACA,SAAA;EACA,QAAA;EACA,iBAAA,MAAuB,kBAAA;AAAA;AAAA,KAGf,uBAAA;EACR,UAAA,EAAY,cAAA;EACZ,QAAA,GAAW,UAAA;AAAA;;;iBCVC,8BAAA,CAA+B,CAAA,EAAG,uBAAA,EAAyB,CAAA,EAAG,uBAAA;;;iBCK9D,kBAAA,CACZ,KAAA,EAAO,cAAA;;;iBCEK,6BAAA,CAA8B,KAAA,EAAO,uBAAA,KAA6B,uBAAA;;;KCRtE,oBAAA;EACR,IAAA;EACA,QAAA;EACA,OAAA;AAAA;AAAA,UAGa,mBAAA;EACb,OAAA,CAAQ,QAAA,EAAU,oBAAA,GAAwB,OAAA,CAAQ,uBAAA;AAAA;;;cCLzC,wBAAA,YAAoC,mBAAA;EAAA,UACnC,KAAA,EAAQ,MAAA,SAAe,uBAAA;cAErB,KAAA,GAAO,uBAAA;EAIb,OAAA,CACF,OAAA,EAAS,oBAAA,GACV,OAAA,CAAQ,uBAAA;EAeX,OAAA,CAAQ,KAAA,EAAO,uBAAA;AAAA;;;UCxBF,oBAAA;EACb,QAAA,CAAS,GAAA,EAAK,2BAAA,GAA8B,OAAA;EAE5C,aAAA,CAAc,GAAA,EAAK,2BAAA,GAA8B,OAAA;EAEjD,WAAA,CAAY,GAAA,EAAK,2BAAA,GAA8B,OAAA;EAE/C,gBAAA,CAAiB,GAAA,EAAK,2BAAA,GAA8B,OAAA;AAAA;AAAA,KAG5C,0BAAA;EACR,QAAA,EAAU,mBAAA;EACV,YAAA,GAAe,aAAA;EACf,OAAA;EACA,QAAA;AAAA;AAAA,KAGQ,2BAAA;EACR,gBAAA,MAAsB,gBAAA;EACtB,gBAAA;EACA,gBAAA;AAAA;AAAA,KAGQ,2BAAA;EACR,IAAA;EACA,OAAA;EACA,QAAA;EACA,KAAA,GAAQ,UAAA;EACR,OAAA,GAAU,2BAAA;AAAA;;;cCbD,mBAAA,YAA+B,oBAAA;EAAA,UAC9B,QAAA,EAAW,mBAAA;EAAA,UAEX,YAAA,EAAe,aAAA;EAAA,UAEf,QAAA;EAAA,UAEA,OAAA;cAIE,OAAA,EAAS,0BAAA;EAAA,UAeL,OAAA,CACZ,KAAA,UACA,SAAA;IACI,OAAA;IACA,QAAA;EAAA,IAEJ,OAAA,CAAQ,uBAAA;EAUN,QAAA,CAAS,GAAA,EAAK,2BAAA,GAA+B,OAAA;EA8G7C,aAAA,CAAc,GAAA,EAAK,2BAAA,GAA+B,OAAA;EAYlD,WAAA,CAAY,GAAA,EAAK,2BAAA,GAA+B,OAAA;EAchD,gBAAA,CAAiB,GAAA,EAAK,2BAAA,GAA+B,OAAA;AAAA"}