@authup/access 1.0.0-beta.42 → 1.0.0-beta.44

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/policy/data.ts","../src/policy/evaluation/context/types.ts","../src/policy/evaluation/context/define.ts","../src/policy/evaluation/types.ts","../src/policy/types.ts","../src/policy/engine/types.ts","../src/policy/engine/module.ts","../src/policy/issue/constants.ts","../src/policy/issue/types.ts","../src/policy/issue/define.ts","../src/policy/error/module.ts","../src/policy/error/check.ts","../src/policy/helpers/invert.ts","../src/policy/built-in/attribute-names/types.ts","../src/policy/built-in/attribute-names/validator.ts","../src/policy/built-in/attributes/types.ts","../src/policy/built-in/attributes/define.ts","../src/policy/built-in/attributes/validator.ts","../src/policy/built-in/attributes/evaluator.ts","../src/policy/built-in/attribute-names/evaluator.ts","../src/policy/built-in/composite/types.ts","../src/policy/built-in/composite/validator.ts","../src/policy/built-in/composite/evaluator.ts","../src/policy/built-in/composite/helper.ts","../src/policy/built-in/date/types.ts","../src/policy/built-in/date/validator.ts","../src/policy/built-in/date/evaluator.ts","../src/policy/built-in/identity/types.ts","../src/policy/built-in/identity/data/validator.ts","../src/policy/built-in/identity/validator.ts","../src/policy/built-in/identity/evaluator.ts","../src/policy/built-in/permission-binding/types.ts","../src/policy/built-in/permission-binding/validator.ts","../src/policy/built-in/permission-binding/module.ts","../src/policy/built-in/realm-match/types.ts","../src/policy/built-in/realm-match/validator.ts","../src/policy/built-in/realm-match/evaluator.ts","../src/policy/built-in/time/constants.ts","../src/policy/built-in/time/types.ts","../src/policy/built-in/time/validator.ts","../src/policy/built-in/time/evaluator.ts","../src/policy/built-in/time/helpers.ts","../src/policy/built-in/constants.ts","../src/policy/built-in/types.ts","../src/policy/built-in/define.ts","../src/policy/constants.ts","../src/permission/error/module.ts","../src/permission/error/check.ts","../src/permission/types.ts","../src/permission/helpers/equal.ts","../src/permission/helpers/key.ts","../src/permission/helpers/merge.ts","../src/permission/provider/types.ts","../src/permission/provider/memory.ts","../src/permission/evaluator/types.ts","../src/permission/evaluator/module.ts"],"mappings":";;;;;;UAOiB,WAAA;EACb,GAAA,CAAI,GAAA,UAAa,KAAA;EACjB,GAAA,CAAI,GAAA;EACJ,GAAA,cAAiB,GAAA,WAAe,CAAA;EAEhC,WAAA,CAAY,GAAA;EACZ,YAAA,CAAa,GAAA;EAEb,KAAA,IAAU,WAAW;AAAA;AAAA,cAGZ,UAAA,YAAsB,WAAA;EAAA,UACrB,IAAA,EAAM,MAAA;EAAA,UAEN,SAAA,EAAY,GAAA;cAGlB,IAAA,GAAM,MAAA,eACN,SAAA,GAAW,GAAA;EAMf,GAAA,aAAA,CAAiB,GAAA,UAAa,KAAA,EAAO,CAAA;EAKrC,GAAA,aAAA,CAAiB,GAAA,WAAe,CAAA;EAQhC,GAAA,CAAI,GAAA;EAIJ,YAAA,CAAa,GAAA;EAIb,WAAA,CAAY,GAAA;EAIZ,KAAA,CAAA,GAAK,UAAA;AAAA;;;KC/CG,uBAAA;EAAA,SACC,UAAA,EAAY,MAAA,SAAe,gBAAA;EAAA,SAC3B,IAAA;EAAA,SACA,OAAA;EAAA,SACA,OAAA;EAAA,SACA,IAAA,EAAM,UAAA;AAAA;AAAA,KAGP,4BAAA,GAA+B,OAAO,CAAC,uBAAA;;;iBCPnC,6BAAA,CACZ,KAAA,GAAO,4BAAA,GACP,uBAAuB;;;KCFf,gBAAA,GAAmB,MAAM,SAAS,gBAAA;AAAA,KAElC,sBAAA;EACR,OAAA;EACA,MAAA,GAAS,KAAK;AAAA;AAAA,UAGD,gBAAA;EHVW;;;EGcxB,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,OAAA,EAAS,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;KCdxE,UAAA;;;;EAIR,IAAA,GAAO,CAAC;;AJJZ;;EISI,MAAA;AAAA;AAAA,KAGQ,cAAA,WACE,MAAA,gBAAsB,MAAA,4CAEhC,CAAA,GAAI,UAAA,CAAW,CAAA;;;UCZF,aAAA;EACb,QAAA,CAAS,MAAA,EAAQ,UAAA,EAAY,OAAA,EAAS,uBAAA,GAA2B,OAAA,CAAQ,sBAAA;EAEzE,cAAA,CAAe,MAAA,EAAQ,UAAA,EAAY,OAAA,EAAS,uBAAA,GAA2B,OAAA;AAAA;;;;;;ALN3E;cMgCa,YAAA,YAAwB,aAAA;EAAA,UACvB,UAAA,EAAa,MAAA,SAAe,gBAAA;cAE1B,UAAA,GAAY,gBAAA;EAIjB,iBAAA,CACH,IAAA,UACA,SAAA,EAAW,gBAAA;EAKR,kBAAA,CAAmB,UAAA,EAAY,gBAAA;EN7CrB;;;;EMwDX,QAAA,CAAS,MAAA,EAAQ,UAAA,EAAY,GAAA,EAAK,uBAAA,GAA2B,OAAA,CAAQ,sBAAA;EA2ErE,cAAA,CAAe,MAAA,EAAQ,UAAA,EAAY,GAAA,EAAK,uBAAA,GAA2B,OAAA;AAAA;;;aCpIjE,mBAAA;EACR,OAAA;EACA,KAAK;AAAA;AAAA,aAGG,eAAA;EAER,YAAA;EACA,YAAA;EAGA,OAAA;EACA,YAAA;EACA,aAAA;EACA,aAAA;EAGA,aAAA;EACA,uBAAA;EAGA,iBAAA;EACA,mBAAA;EACA,eAAA;EAGA,gBAAA;EACA,oBAAA;EAGA,cAAA;AAAA;;;KC5BQ,eAAA,GAAkB,SAAS;AAAA,KAC3B,gBAAA,GAAmB,UAAU;AAAA,KAE7B,WAAA,GAAc,eAAA,GAAkB,gBAAgB;;;iBCF5C,qBAAA,CAAsB,KAAA,EAAO,IAAA,CAAK,eAAA,YAA4B,eAAA;AAAA,iBAI9D,sBAAA,CAAuB,KAAA,EAAO,IAAA,CAAK,gBAAA,YAA6B,gBAAA;;;cCJnE,qBAAA;AAAA,cAEA,WAAA,SAAoB,WAAA;cACjB,OAAA,WAAkB,IAAA;EAQ9B,QAAA,CAAS,IAAA,EAAM,WAAA;EAIf,SAAA,CAAU,IAAA,EAAM,WAAA;EAAA,OAIT,iBAAA,CAAkB,IAAA,WAAY,WAAA;EAAA,OAO9B,uBAAA,CAAA,GAAuB,WAAA;EAAA,OAOvB,uBAAA,CAAA,GAAuB,WAAA;AAAA;;;iBCjClB,aAAA,CAAc,KAAA,YAAiB,KAAA,IAAS,WAAW;;;KCH9D,QAAA,IAAY,KAAc;AAAA,iBAEf,wBAAA,CACZ,OAAA,WACA,MAAA,aAAmB,QAAQ;;;UCFd,oBAAA,SAA6B,UAAU;EACpD,KAAK;AAAA;;;cCEI,6BAAA,SAAsC,SAAS,CAAC,oBAAA;EAChD,UAAA,CAAA;AAAA;;;KCHD,qBAAA,MAA2B,UAAU,CAAC,CAAA;AAAA,UAEjC,gBAAA,WACH,MAAA,gBAAsB,MAAA,uBAC1B,UAAA;EACN,KAAA,EAAO,qBAAA,CAAsB,CAAA;AAAA;;;iBCNjB,sBAAA,WACF,MAAA,gBAAsB,MAAA,cAAA,CAEhC,IAAA,EAAM,gBAAA,CAAiB,CAAA,IACvB,gBAAA,CAAiB,CAAA;;;cCDR,yBAAA,WACC,MAAA,gBAAsB,MAAA,uBAC1B,SAAA,CAAU,gBAAA,CAAiB,CAAA;EACxB,UAAA,CAAA;AAAA;;;cCAA,yBAAA,WACC,MAAA,gBAAsB,MAAA,0BACvB,gBAAA;EAAA,UACC,SAAA,EAAY,yBAAA,CAA0B,CAAA;;EAM1C,UAAA,CAAW,GAAA,EAAK,uBAAA,GAA2B,OAAA,CAAQ,CAAA;EAkBnD,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;EAAA,UAyBxE,QAAA,CACN,KAAA;AAAA;;;cCtDK,6BAAA,YAAyC,gBAAA;EAAA,UACxC,SAAA,EAAY,6BAAA;EAAA,UAEZ,mBAAA,EAAsB,yBAAA;;EAO1B,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;UCdrE,eAAA,SAAwB,UAAA;;;;EAIrC,iBAAA,MAAuB,gBAAA;EpBPC;;;EoBWxB,QAAA,EAAU,UAAA;AAAA;;;cCLD,wBAAA,SAAiC,SAAS,CAAC,eAAA;EAC3C,UAAA,CAAA;AAAA;;;cCCA,wBAAA,YAAoC,gBAAA;EAAA,UACnC,SAAA,EAAY,wBAAA;;EAMhB,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;iBCXtE,iBAAA,CACZ,KAAA,EAAO,cAAA,GACP,KAAA,IAAS,cAAA,CAAe,eAAA;;;UCJX,UAAA,SAAmB,UAAA;EAChC,KAAA,YAAiB,IAAA;EAEjB,GAAA,YAAe,IAAA;AAAA;;;cCAN,mBAAA,SAA4B,SAAS,CAAC,UAAA;EACtC,UAAA,CAAA;AAAA;;;cCeA,mBAAA,YAA+B,gBAAA;EAAA,UAC9B,SAAA,EAAY,mBAAA;;EAMhB,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;UC1BrE,cAAA,SAAuB,UAAU;;;;EAI9C,KAAK;AAAA;AAAA,KAGG,kBAAA;E3BTgB;;;E2BaxB,IAAA;E3BZiB;;;E2BgBjB,EAAA;E3BdI;;;E2BkBJ,QAAA;E3BhBY;;;E2BoBZ,OAAA;E3BjBU;;AAAW;E2BqBrB,SAAA;AAAA;;;cCvBS,2BAAA,SAAoC,SAAS,CAAC,kBAAA;EAC9C,UAAA,CAAA;AAAA;;;cCFA,uBAAA,SAAgC,SAAS,CAAC,cAAA;EAC1C,UAAA,CAAA;AAAA;;;cCCA,uBAAA,YAAmC,gBAAA;EAAA,UAClC,SAAA,EAAY,uBAAA;EAAA,UAEZ,aAAA,EAAgB,2BAAA;;EAOpB,UAAA,CAAW,GAAA,EAAK,uBAAA,GAA2B,OAAA,CAAQ,kBAAA;EAiBnD,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;UChCrE,uBAAA,SAAgC,UAAU;;;cCC9C,gCAAA,SAAyC,SAAS,CAAC,uBAAA;EACnD,UAAA,CAAA;AAAA;;;cCAA,gCAAA,YAA4C,gBAAA;EAAA,UAC3C,SAAA,EAAW,gCAAA;;EAMf,QAAA,CAAS,KAAA,EAAO,MAAA,gBAAsB,OAAA,CAAQ,sBAAA;AAAA;;;UCRvC,gBAAA,SAAyB,UAAU;;;;EAIhD,iBAAA,MAAuB,gBAAA;ElCPC;;;;EkCaxB,cAAA;ElCZiB;;;EkCiBjB,qBAAA;ElCfI;;;;EkCqBJ,wBAAA;ElClBA;;;;EkCwBA,yBAAA;AAAA;;;cCxBS,yBAAA,SAAkC,SAAS,CAAC,gBAAA;EAC5C,UAAA,CAAA;AAAA;;;cCEA,yBAAA,YAAqC,gBAAA;EAAA,UACpC,SAAA,EAAY,yBAAA;EAAA,UAEZ,iBAAA,EAAmB,uBAAA;EAAA,UAEnB,mBAAA,EAAsB,yBAAA;;EAQ1B,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;aCtB1E,kBAAA;EACR,KAAA;EACA,MAAA;EACA,OAAA;EACA,MAAA;AAAA;;;UCDa,UAAA,SAAmB,UAAA;;;;EAIhC,KAAA,qBAA0B,IAAA;EtCPF;;;EsCYxB,GAAA,qBAAwB,IAAA;EtCXpB;;;EsCgBJ,QAAA,MAAc,kBAAA;EtCdd;;;EsCmBA,WAAA;EtCjBA;;;EsCsBA,YAAA;EtCnBA;;;EsCwBA,WAAA;AAAA;;;cC1BS,mBAAA,SAA4B,SAAS,CAAC,UAAA;EACtC,UAAA,CAAA;AAAA;;;cC0CA,mBAAA,YAA+B,gBAAA;EAAA,UAC9B,SAAA,EAAY,mBAAA;;EAMhB,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;iBCtDtE,sBAAA,CACZ,QAAA,WAAgB,QAAA,IAAA,kBAAA,CAAA,MAAA,GAAA,kBAAA,CAAA,OAAA,GAAA,kBAAA,CAAA,MAAA;AAAA,iBAOJ,uBAAA,CACZ,QAAA,WAAgB,QAAA,IAAA,kBAAA,CAAA,OAAA,GAAA,kBAAA,CAAA,MAAA;AAAA,iBAMJ,sBAAA,CACZ,QAAA,WAAgB,QAAA,IAAA,kBAAA,CAAA,MAAA;;;aClBR,iBAAA;;;;EAIR,SAAA;;A1CJJ;;E0CQI,IAAA;E1CAqB;;;E0CIrB,IAAA;E1CVA;;;E0CcA,eAAA;E1CbiB;;;E0CiBjB,UAAA;E1CdA;;;E0CkBA,WAAA;E1ChBqB;AAAA;AAGzB;E0CkBI,QAAA;E1ClBoB;;;E0CuBpB,kBAAA;AAAA;AAAA,cAMS,gBAAA;EAAA;;;;;;;;;;;;KC/BR,uBAAA,WAAkC,MAAA,gBAAsB,MAAA;EAAA,CACxD,iBAAA,CAAkB,UAAA,GAAa,gBAAA,CAAiB,CAAA;EAAA,CAChD,iBAAA,CAAkB,eAAA,GAAkB,oBAAA;EAAA,CACpC,iBAAA,CAAkB,IAAA,GAAO,UAAA;EAAA,CACzB,iBAAA,CAAkB,SAAA,GAAY,eAAA;EAAA,CAC9B,iBAAA,CAAkB,IAAA,GAAO,UAAA;EAAA,CACzB,iBAAA,CAAkB,QAAA,GAAW,cAAA;EAAA,CAC7B,iBAAA,CAAkB,kBAAA,GAAqB,uBAAA;AAAA;AAAA,KAGhC,oBAAA,WAA+B,MAAA,gBAAsB,MAAA,+BACjD,uBAAA,CAAwB,CAAA,QAAS,CAAA,KAAM,uBAAA,CAAwB,CAAA,EAAG,CAAA;AAAA,KAGtE,eAAA,WAA0B,MAAA,gBAAsB,MAAA,+BAC5C,oBAAA,CAAqB,CAAA,IAAK,oBAAA,CAAqB,CAAA,EAAG,CAAA;EAC1D,IAAA,EAAM,CAAA;AAAA,UAEN,oBAAA;;;iBCxBQ,oBAAA,iBACI,oBAAA,YACN,oBAAA,MAA0B,CAAA,EAAA,CAEpC,IAAA,EAAM,CAAA,EACN,IAAA,EAAM,CAAA,GACN,cAAA,CAAe,CAAA,EAAG,CAAA;;;cCGT,uBAAA;EAAA;;;;;;;;;;;cCRA,yBAAA;AAAA,cAEA,eAAA,SAAwB,WAAA;cACrB,OAAA,GAAS,kBAAA;EASrB,QAAA,CAAS,IAAA,EAAM,WAAA;EAIf,SAAA,CAAU,IAAA,EAAM,WAAA;EAAA,OAIT,QAAA,CAAS,IAAA,WAAY,eAAA;EAAA,OAOrB,MAAA,CAAO,IAAA,WAAY,eAAA;EAAA,OAOnB,SAAA,CAAU,KAAA,aAAe,eAAA;EAAA,OAOzB,gBAAA,CAAiB,IAAA,sBAAuB,eAAA;AAAA;;;iBC1CnC,iBAAA,CAAkB,KAAA,YAAiB,KAAA,IAAS,eAAe;;;KCA/D,cAAA;EACR,IAAA;EACA,SAAA;EACA,QAAA;EACA,iBAAA,MAAuB,kBAAgB;AAAA;AAAA,KAG/B,uBAAA;EACR,UAAA,EAAY,cAAA;EACZ,QAAA,GAAW,UAAU;AAAA;;;iBCVT,8BAAA,CAA+B,CAAA,EAAG,uBAAA,EAAyB,CAAA,EAAG,uBAAuB;;;iBCKrF,kBAAA,CACZ,KAAqB,EAAd,cAAc;;;iBCET,6BAAA,CAA8B,KAAA,EAAO,uBAAA,KAA6B,uBAAuB;;;KCR7F,oBAAA;EACR,IAAA;EACA,QAAA;EACA,OAAA;AAAA;AAAA,UAGa,mBAAA;EACb,OAAA,CAAQ,QAAA,EAAU,oBAAA,GAAwB,OAAA,CAAQ,uBAAA;AAAA;;;cCLzC,wBAAA,YAAoC,mBAAA;EAAA,UACnC,KAAA,EAAQ,MAAA,SAAe,uBAAA;cAErB,KAAA,GAAO,uBAAA;EAIb,OAAA,CACF,OAAA,EAAS,oBAAA,GACV,OAAA,CAAQ,uBAAA;EAeX,OAAA,CAAQ,KAAA,EAAO,uBAAA;AAAA;;;UCxBF,oBAAA;EACb,QAAA,CAAS,GAAA,EAAK,2BAAA,GAA8B,OAAA;EAE5C,aAAA,CAAc,GAAA,EAAK,2BAAA,GAA8B,OAAA;EAEjD,WAAA,CAAY,GAAA,EAAK,2BAAA,GAA8B,OAAA;EAE/C,gBAAA,CAAiB,GAAA,EAAK,2BAAA,GAA8B,OAAA;AAAA;AAAA,KAG5C,0BAAA;EACR,QAAA,EAAU,mBAAA;EACV,YAAA,GAAe,aAAa;EAC5B,OAAA;EACA,QAAA;AAAA;AAAA,KAGQ,2BAAA;EACR,gBAAA,MAAsB,gBAAgB;EACtC,gBAAA;EACA,gBAAA;AAAA;AAAA,KAGQ,2BAAA;EACR,IAAA;EACA,OAAA;EACA,QAAA;EACA,KAAA,GAAQ,UAAA;EACR,OAAA,GAAU,2BAA2B;AAAA;;;cCb5B,mBAAA,YAA+B,oBAAA;EAAA,UAC9B,QAAA,EAAW,mBAAA;EAAA,UAEX,YAAA,EAAe,aAAA;EAAA,UAEf,QAAA;EAAA,UAEA,OAAA;cAIE,OAAA,EAAS,0BAAA;EAAA,UAeL,OAAA,CACZ,KAAA,UACA,SAAA;IACI,OAAA;IACA,QAAA;EAAA,IAEJ,OAAA,CAAQ,uBAAA;EAUN,QAAA,CAAS,GAAA,EAAK,2BAAA,GAA+B,OAAA;EA8G7C,aAAA,CAAc,GAAA,EAAK,2BAAA,GAA+B,OAAA;EAYlD,WAAA,CAAY,GAAA,EAAK,2BAAA,GAA+B,OAAA;EAchD,gBAAA,CAAiB,GAAA,EAAK,2BAAA,GAA+B,OAAA;AAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/policy/data.ts","../src/policy/evaluation/context/types.ts","../src/policy/evaluation/context/define.ts","../src/policy/evaluation/types.ts","../src/policy/types.ts","../src/policy/engine/types.ts","../src/policy/engine/module.ts","../src/policy/issue/constants.ts","../src/policy/issue/types.ts","../src/policy/issue/define.ts","../src/policy/error/module.ts","../src/policy/error/check.ts","../src/policy/helpers/invert.ts","../src/policy/built-in/attribute-names/types.ts","../src/policy/built-in/attribute-names/validator.ts","../src/policy/built-in/attributes/types.ts","../src/policy/built-in/attributes/define.ts","../src/policy/built-in/attributes/validator.ts","../src/policy/built-in/attributes/evaluator.ts","../src/policy/built-in/attribute-names/evaluator.ts","../src/policy/built-in/composite/types.ts","../src/policy/built-in/composite/validator.ts","../src/policy/built-in/composite/evaluator.ts","../src/policy/built-in/composite/helper.ts","../src/policy/built-in/date/types.ts","../src/policy/built-in/date/validator.ts","../src/policy/built-in/date/evaluator.ts","../src/policy/built-in/identity/types.ts","../src/policy/built-in/identity/data/validator.ts","../src/policy/built-in/identity/validator.ts","../src/policy/built-in/identity/evaluator.ts","../src/policy/built-in/permission-binding/types.ts","../src/policy/built-in/permission-binding/validator.ts","../src/policy/built-in/permission-binding/module.ts","../src/policy/built-in/realm-match/types.ts","../src/policy/built-in/realm-match/validator.ts","../src/policy/built-in/realm-match/evaluator.ts","../src/policy/built-in/time/constants.ts","../src/policy/built-in/time/types.ts","../src/policy/built-in/time/validator.ts","../src/policy/built-in/time/evaluator.ts","../src/policy/built-in/time/helpers.ts","../src/policy/built-in/constants.ts","../src/policy/built-in/types.ts","../src/policy/built-in/define.ts","../src/policy/constants.ts","../src/permission/error/module.ts","../src/permission/error/check.ts","../src/permission/types.ts","../src/permission/helpers/equal.ts","../src/permission/helpers/key.ts","../src/permission/helpers/merge.ts","../src/permission/provider/types.ts","../src/permission/provider/memory.ts","../src/permission/evaluator/types.ts","../src/permission/evaluator/module.ts"],"mappings":";;;;;;UAOiB,WAAA;EACb,GAAA,CAAI,GAAA,UAAa,KAAA;EACjB,GAAA,CAAI,GAAA;EACJ,GAAA,cAAiB,GAAA,WAAe,CAAA;EAEhC,WAAA,CAAY,GAAA;EACZ,YAAA,CAAa,GAAA;EAEb,KAAA,IAAU,WAAW;AAAA;AAAA,cAGZ,UAAA,YAAsB,WAAA;EAAA,UACrB,IAAA,EAAM,MAAA;EAAA,UAEN,SAAA,EAAY,GAAA;cAGlB,IAAA,GAAM,MAAA,eACN,SAAA,GAAW,GAAA;EAMf,GAAA,cAAiB,GAAA,UAAa,KAAA,EAAO,CAAA;EAKrC,GAAA,cAAiB,GAAA,WAAe,CAAA;EAQhC,GAAA,CAAI,GAAA;EAIJ,YAAA,CAAa,GAAA;EAIb,WAAA,CAAY,GAAA;EAIZ,KAAA,IAAK,UAAA;AAAA;;;KC/CG,uBAAA;EAAA,SACC,UAAA,EAAY,MAAA,SAAe,gBAAA;EAAA,SAC3B,IAAA;EAAA,SACA,OAAA;EAAA,SACA,OAAA;EAAA,SACA,IAAA,EAAM,UAAA;AAAA;AAAA,KAGP,4BAAA,GAA+B,OAAO,CAAC,uBAAA;;;iBCPnC,6BAAA,CACZ,KAAA,GAAO,4BAAA,GACP,uBAAuB;;;KCFf,gBAAA,GAAmB,MAAM,SAAS,gBAAA;AAAA,KAElC,sBAAA;EACR,OAAA;EACA,MAAA,GAAS,KAAK;AAAA;AAAA,UAGD,gBAAA;EHVW;;;EGcxB,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,OAAA,EAAS,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;KCdxE,UAAA;;;;EAIR,IAAA,GAAO,CAAC;;AJJZ;;EISI,MAAA;AAAA;AAAA,KAGQ,cAAA,WACE,MAAA,gBAAsB,MAAA,4CAEhC,CAAA,GAAI,UAAA,CAAW,CAAA;;;UCZF,aAAA;EACb,QAAA,CAAS,MAAA,EAAQ,UAAA,EAAY,OAAA,EAAS,uBAAA,GAA2B,OAAA,CAAQ,sBAAA;EAEzE,cAAA,CAAe,MAAA,EAAQ,UAAA,EAAY,OAAA,EAAS,uBAAA,GAA2B,OAAA;AAAA;;;;;;ALN3E;cMgCa,YAAA,YAAwB,aAAA;EAAA,UACvB,UAAA,EAAa,MAAA,SAAe,gBAAA;cAE1B,UAAA,GAAY,gBAAA;EAIjB,iBAAA,CACH,IAAA,UACA,SAAA,EAAW,gBAAA;EAKR,kBAAA,CAAmB,UAAA,EAAY,gBAAA;EN7CrB;;;;EMwDX,QAAA,CAAS,MAAA,EAAQ,UAAA,EAAY,GAAA,EAAK,uBAAA,GAA2B,OAAA,CAAQ,sBAAA;EA2ErE,cAAA,CAAe,MAAA,EAAQ,UAAA,EAAY,GAAA,EAAK,uBAAA,GAA2B,OAAA;AAAA;;;aCpIjE,mBAAA;EACR,OAAA;EACA,KAAK;AAAA;AAAA,aAGG,eAAA;EAER,YAAA;EACA,YAAA;EAGA,OAAA;EACA,YAAA;EACA,aAAA;EACA,aAAA;EAGA,aAAA;EACA,uBAAA;EAGA,iBAAA;EACA,mBAAA;EACA,eAAA;EAGA,gBAAA;EACA,oBAAA;EAGA,cAAA;AAAA;;;KC5BQ,eAAA,GAAkB,SAAS;AAAA,KAC3B,gBAAA,GAAmB,UAAU;AAAA,KAE7B,WAAA,GAAc,eAAA,GAAkB,gBAAgB;;;iBCF5C,qBAAA,CAAsB,KAAA,EAAO,IAAA,CAAK,eAAA,YAA4B,eAAA;AAAA,iBAI9D,sBAAA,CAAuB,KAAA,EAAO,IAAA,CAAK,gBAAA,YAA6B,gBAAA;;;cCJnE,qBAAA;AAAA,cAEA,WAAA,SAAoB,WAAA;cACjB,OAAA,WAAkB,IAAA;EAQ9B,QAAA,CAAS,IAAA,EAAM,WAAA;EAIf,SAAA,CAAU,IAAA,EAAM,WAAA;EAAA,OAIT,iBAAA,CAAkB,IAAA,WAAY,WAAA;EAAA,OAO9B,uBAAA,IAAuB,WAAA;EAAA,OAOvB,uBAAA,IAAuB,WAAA;AAAA;;;iBCjClB,aAAA,CAAc,KAAA,YAAiB,KAAA,IAAS,WAAW;;;KCH9D,QAAA,IAAY,KAAc;AAAA,iBAEf,wBAAA,CACZ,OAAA,WACA,MAAA,aAAmB,QAAQ;;;UCFd,oBAAA,SAA6B,UAAU;EACpD,KAAK;AAAA;;;cCEI,6BAAA,SAAsC,SAAS,CAAC,oBAAA;EAChD,UAAA;AAAA;;;KCHD,qBAAA,MAA2B,UAAU,CAAC,CAAA;AAAA,UAEjC,gBAAA,WACH,MAAA,gBAAsB,MAAA,uBAC1B,UAAA;EACN,KAAA,EAAO,qBAAA,CAAsB,CAAA;AAAA;;;iBCNjB,sBAAA,WACF,MAAA,gBAAsB,MAAA,eAEhC,IAAA,EAAM,gBAAA,CAAiB,CAAA,IACvB,gBAAA,CAAiB,CAAA;;;cCDR,yBAAA,WACC,MAAA,gBAAsB,MAAA,uBAC1B,SAAA,CAAU,gBAAA,CAAiB,CAAA;EACxB,UAAA;AAAA;;;cCAA,yBAAA,WACC,MAAA,gBAAsB,MAAA,0BACvB,gBAAA;EAAA,UACC,SAAA,EAAY,yBAAA,CAA0B,CAAA;;EAM1C,UAAA,CAAW,GAAA,EAAK,uBAAA,GAA2B,OAAA,CAAQ,CAAA;EAkBnD,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;EAAA,UAyBxE,QAAA,CACN,KAAA;AAAA;;;cCtDK,6BAAA,YAAyC,gBAAA;EAAA,UACxC,SAAA,EAAY,6BAAA;EAAA,UAEZ,mBAAA,EAAsB,yBAAA;;EAO1B,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;UCdrE,eAAA,SAAwB,UAAA;;;;EAIrC,iBAAA,MAAuB,gBAAA;EpBPC;;;EoBWxB,QAAA,EAAU,UAAA;AAAA;;;cCLD,wBAAA,SAAiC,SAAS,CAAC,eAAA;EAC3C,UAAA;AAAA;;;cCCA,wBAAA,YAAoC,gBAAA;EAAA,UACnC,SAAA,EAAY,wBAAA;;EAMhB,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;iBCXtE,iBAAA,CACZ,KAAA,EAAO,cAAA,GACP,KAAA,IAAS,cAAA,CAAe,eAAA;;;UCJX,UAAA,SAAmB,UAAA;EAChC,KAAA,YAAiB,IAAA;EAEjB,GAAA,YAAe,IAAA;AAAA;;;cCAN,mBAAA,SAA4B,SAAS,CAAC,UAAA;EACtC,UAAA;AAAA;;;cCeA,mBAAA,YAA+B,gBAAA;EAAA,UAC9B,SAAA,EAAY,mBAAA;;EAMhB,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;UC1BrE,cAAA,SAAuB,UAAU;;;;EAI9C,KAAK;AAAA;AAAA,KAGG,kBAAA;E3BTgB;;;E2BaxB,IAAA;E3BZiB;;;E2BgBjB,EAAA;E3BdI;;;E2BkBJ,QAAA;E3BhBY;;;E2BoBZ,OAAA;E3BjBU;;AAAW;E2BqBrB,SAAA;AAAA;;;cCvBS,2BAAA,SAAoC,SAAS,CAAC,kBAAA;EAC9C,UAAA;AAAA;;;cCFA,uBAAA,SAAgC,SAAS,CAAC,cAAA;EAC1C,UAAA;AAAA;;;cCCA,uBAAA,YAAmC,gBAAA;EAAA,UAClC,SAAA,EAAY,uBAAA;EAAA,UAEZ,aAAA,EAAgB,2BAAA;;EAOpB,UAAA,CAAW,GAAA,EAAK,uBAAA,GAA2B,OAAA,CAAQ,kBAAA;EAiBnD,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;UChCrE,uBAAA,SAAgC,UAAU;;;cCC9C,gCAAA,SAAyC,SAAS,CAAC,uBAAA;EACnD,UAAA;AAAA;;;cCAA,gCAAA,YAA4C,gBAAA;EAAA,UAC3C,SAAA,EAAW,gCAAA;;EAMf,QAAA,CAAS,KAAA,EAAO,MAAA,gBAAsB,OAAA,CAAQ,sBAAA;AAAA;;;UCRvC,gBAAA,SAAyB,UAAU;;;;EAIhD,iBAAA,MAAuB,gBAAA;ElCPC;;;;EkCaxB,cAAA;ElCZiB;;;EkCiBjB,qBAAA;ElCfI;;;;EkCqBJ,wBAAA;ElClBA;;;;EkCwBA,yBAAA;AAAA;;;cCxBS,yBAAA,SAAkC,SAAS,CAAC,gBAAA;EAC5C,UAAA;AAAA;;;cCEA,yBAAA,YAAqC,gBAAA;EAAA,UACpC,SAAA,EAAY,yBAAA;EAAA,UAEZ,iBAAA,EAAmB,uBAAA;EAAA,UAEnB,mBAAA,EAAsB,yBAAA;;EAQ1B,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;aCtB1E,kBAAA;EACR,KAAA;EACA,MAAA;EACA,OAAA;EACA,MAAA;AAAA;;;UCDa,UAAA,SAAmB,UAAA;;;;EAIhC,KAAA,qBAA0B,IAAA;EtCPF;;;EsCYxB,GAAA,qBAAwB,IAAA;EtCXpB;;;EsCgBJ,QAAA,MAAc,kBAAA;EtCdd;;;EsCmBA,WAAA;EtCjBA;;;EsCsBA,YAAA;EtCnBA;;;EsCwBA,WAAA;AAAA;;;cC1BS,mBAAA,SAA4B,SAAS,CAAC,UAAA;EACtC,UAAA;AAAA;;;cC0CA,mBAAA,YAA+B,gBAAA;EAAA,UAC9B,SAAA,EAAY,mBAAA;;EAMhB,QAAA,CAAS,KAAA,EAAO,MAAA,eAAqB,GAAA,EAAK,uBAAA,GAA0B,OAAA,CAAQ,sBAAA;AAAA;;;iBCtDtE,sBAAA,CACZ,QAAA,WAAgB,QAAA,IAAA,kBAAA,CAAA,MAAA,GAAA,kBAAA,CAAA,OAAA,GAAA,kBAAA,CAAA,MAAA;AAAA,iBAOJ,uBAAA,CACZ,QAAA,WAAgB,QAAA,IAAA,kBAAA,CAAA,OAAA,GAAA,kBAAA,CAAA,MAAA;AAAA,iBAMJ,sBAAA,CACZ,QAAA,WAAgB,QAAA,IAAA,kBAAA,CAAA,MAAA;;;aClBR,iBAAA;;;;EAIR,SAAA;;A1CJJ;;E0CQI,IAAA;E1CAqB;;;E0CIrB,IAAA;E1CVA;;;E0CcA,eAAA;E1CbiB;;;E0CiBjB,UAAA;E1CdA;;;E0CkBA,WAAA;E1ChBqB;AAAA;AAGzB;E0CkBI,QAAA;E1ClBoB;;;E0CuBpB,kBAAA;AAAA;AAAA,cAMS,gBAAA;EAAA;;;;;;;;;;;;KC/BR,uBAAA,WAAkC,MAAA,gBAAsB,MAAA;EAAA,CACxD,iBAAA,CAAkB,UAAA,GAAa,gBAAA,CAAiB,CAAA;EAAA,CAChD,iBAAA,CAAkB,eAAA,GAAkB,oBAAA;EAAA,CACpC,iBAAA,CAAkB,IAAA,GAAO,UAAA;EAAA,CACzB,iBAAA,CAAkB,SAAA,GAAY,eAAA;EAAA,CAC9B,iBAAA,CAAkB,IAAA,GAAO,UAAA;EAAA,CACzB,iBAAA,CAAkB,QAAA,GAAW,cAAA;EAAA,CAC7B,iBAAA,CAAkB,kBAAA,GAAqB,uBAAA;AAAA;AAAA,KAGhC,oBAAA,WAA+B,MAAA,gBAAsB,MAAA,+BACjD,uBAAA,CAAwB,CAAA,QAAS,CAAA,KAAM,uBAAA,CAAwB,CAAA,EAAG,CAAA;AAAA,KAGtE,eAAA,WAA0B,MAAA,gBAAsB,MAAA,+BAC5C,oBAAA,CAAqB,CAAA,IAAK,oBAAA,CAAqB,CAAA,EAAG,CAAA;EAC1D,IAAA,EAAM,CAAA;AAAA,UAEN,oBAAA;;;iBCxBQ,oBAAA,iBACI,oBAAA,YACN,oBAAA,MAA0B,CAAA,GAEpC,IAAA,EAAM,CAAA,EACN,IAAA,EAAM,CAAA,GACN,cAAA,CAAe,CAAA,EAAG,CAAA;;;cCGT,uBAAA;EAAA;;;;;;;;;;;cCRA,yBAAA;AAAA,cAEA,eAAA,SAAwB,WAAA;cACrB,OAAA,GAAS,kBAAA;EASrB,QAAA,CAAS,IAAA,EAAM,WAAA;EAIf,SAAA,CAAU,IAAA,EAAM,WAAA;EAAA,OAIT,QAAA,CAAS,IAAA,WAAY,eAAA;EAAA,OAOrB,MAAA,CAAO,IAAA,WAAY,eAAA;EAAA,OAOnB,SAAA,CAAU,KAAA,aAAe,eAAA;EAAA,OAOzB,gBAAA,CAAiB,IAAA,sBAAuB,eAAA;AAAA;;;iBC1CnC,iBAAA,CAAkB,KAAA,YAAiB,KAAA,IAAS,eAAe;;;KCA/D,cAAA;EACR,IAAA;EACA,SAAA;EACA,QAAA;EACA,iBAAA,MAAuB,kBAAgB;AAAA;AAAA,KAG/B,uBAAA;EACR,UAAA,EAAY,cAAA;EACZ,QAAA,GAAW,UAAU;AAAA;;;iBCVT,8BAAA,CAA+B,CAAA,EAAG,uBAAA,EAAyB,CAAA,EAAG,uBAAuB;;;iBCKrF,kBAAA,CACZ,KAAqB,EAAd,cAAc;;;iBCET,6BAAA,CAA8B,KAAA,EAAO,uBAAA,KAA6B,uBAAuB;;;KCR7F,oBAAA;EACR,IAAA;EACA,QAAA;EACA,OAAA;AAAA;AAAA,UAGa,mBAAA;EACb,OAAA,CAAQ,QAAA,EAAU,oBAAA,GAAwB,OAAA,CAAQ,uBAAA;AAAA;;;cCLzC,wBAAA,YAAoC,mBAAA;EAAA,UACnC,KAAA,EAAQ,MAAA,SAAe,uBAAA;cAErB,KAAA,GAAO,uBAAA;EAIb,OAAA,CACF,OAAA,EAAS,oBAAA,GACV,OAAA,CAAQ,uBAAA;EAeX,OAAA,CAAQ,KAAA,EAAO,uBAAA;AAAA;;;UCxBF,oBAAA;EACb,QAAA,CAAS,GAAA,EAAK,2BAAA,GAA8B,OAAA;EAE5C,aAAA,CAAc,GAAA,EAAK,2BAAA,GAA8B,OAAA;EAEjD,WAAA,CAAY,GAAA,EAAK,2BAAA,GAA8B,OAAA;EAE/C,gBAAA,CAAiB,GAAA,EAAK,2BAAA,GAA8B,OAAA;AAAA;AAAA,KAG5C,0BAAA;EACR,QAAA,EAAU,mBAAA;EACV,YAAA,GAAe,aAAa;EAC5B,OAAA;EACA,QAAA;AAAA;AAAA,KAGQ,2BAAA;EACR,gBAAA,MAAsB,gBAAgB;EACtC,gBAAA;EACA,gBAAA;AAAA;AAAA,KAGQ,2BAAA;EACR,IAAA;EACA,OAAA;EACA,QAAA;EACA,KAAA,GAAQ,UAAA;EACR,OAAA,GAAU,2BAA2B;AAAA;;;cCb5B,mBAAA,YAA+B,oBAAA;EAAA,UAC9B,QAAA,EAAW,mBAAA;EAAA,UAEX,YAAA,EAAe,aAAA;EAAA,UAEf,QAAA;EAAA,UAEA,OAAA;cAIE,OAAA,EAAS,0BAAA;EAAA,UAeL,OAAA,CACZ,KAAA,UACA,SAAA;IACI,OAAA;IACA,QAAA;EAAA,IAEJ,OAAA,CAAQ,uBAAA;EAUN,QAAA,CAAS,GAAA,EAAK,2BAAA,GAA+B,OAAA;EA8G7C,aAAA,CAAc,GAAA,EAAK,2BAAA,GAA+B,OAAA;EAYlD,WAAA,CAAY,GAAA,EAAK,2BAAA,GAA+B,OAAA;EAchD,gBAAA,CAAiB,GAAA,EAAK,2BAAA,GAA+B,OAAA;AAAA"}

package/dist/index.mjs

@@ -1,7 +1,7 @@
 import { AuthupError, ErrorCode, hasInstanceof, isAuthupError, markInstanceof } from "@authup/errors";
 import { DecisionStrategy, DecisionStrategy as DecisionStrategy$1, flattenObject, hasOwnProperty, isObject } from "@authup/kit";
 import { Container, defineIssueGroup, defineIssueItem } from "validup";
-import { createValidator } from "@validup/adapter-zod";
+import { createValidator } from "@validup/zod";
 import { z } from "zod";
 import { guard } from "@ucast/mongo2js";
 //#region src/permission/error/module.ts

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["DecisionStrategy","normalizeDate","toDate"],"sources":["../src/permission/error/module.ts","../src/permission/error/check.ts","../src/permission/helpers/equal.ts","../src/permission/helpers/key.ts","../src/permission/helpers/merge.ts","../src/permission/provider/memory.ts","../src/policy/error/module.ts","../src/policy/error/check.ts","../src/policy/engine/module.ts","../src/policy/data.ts","../src/policy/evaluation/context/define.ts","../src/policy/issue/constants.ts","../src/policy/issue/define.ts","../src/policy/helpers/invert.ts","../src/policy/built-in/attribute-names/validator.ts","../src/policy/built-in/attributes/define.ts","../src/policy/built-in/constants.ts","../src/policy/built-in/attributes/validator.ts","../src/policy/built-in/attributes/evaluator.ts","../src/policy/built-in/attribute-names/evaluator.ts","../src/policy/built-in/composite/validator.ts","../src/policy/built-in/composite/evaluator.ts","../src/policy/built-in/composite/helper.ts","../src/policy/built-in/date/validator.ts","../src/policy/built-in/date/evaluator.ts","../src/policy/built-in/identity/data/validator.ts","../src/policy/built-in/identity/validator.ts","../src/policy/built-in/identity/evaluator.ts","../src/policy/built-in/permission-binding/validator.ts","../src/policy/built-in/permission-binding/module.ts","../src/policy/built-in/realm-match/validator.ts","../src/policy/built-in/realm-match/evaluator.ts","../src/policy/built-in/time/constants.ts","../src/policy/built-in/time/helpers.ts","../src/policy/built-in/time/validator.ts","../src/policy/built-in/time/evaluator.ts","../src/policy/built-in/define.ts","../src/policy/constants.ts","../src/permission/evaluator/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { AuthupErrorOptions } from '@authup/errors';\nimport { AuthupError, ErrorCode, markInstanceof } from '@authup/errors';\nimport type { PolicyIssue } from '../../policy';\n\nexport const PERMISSION_ERROR_INSTANCE = Symbol.for('@authup/access/PermissionError');\n\nexport class PermissionError extends AuthupError {\n    constructor(options: AuthupErrorOptions = {}) {\n        super({\n            ...options,\n            message: options.message || 'A permission error occurred.',\n            code: options.code || ErrorCode.PERMISSION_DENIED,\n        });\n        markInstanceof(this, PERMISSION_ERROR_INSTANCE);\n    }\n\n    addIssue(data: PolicyIssue) {\n        this.issues.push(data);\n    }\n\n    addIssues(data: PolicyIssue[]) {\n        this.issues.push(...data);\n    }\n\n    static notFound(name: string) {\n        return new PermissionError({\n            message: `The permission ${name} was not found.`,\n            code: ErrorCode.PERMISSION_NOT_FOUND,\n        });\n    }\n\n    static denied(name: string) {\n        return new PermissionError({\n            message: `The permission ${name} has not been granted.`,\n            code: ErrorCode.PERMISSION_DENIED,\n        });\n    }\n\n    static deniedAll(names: string[]) {\n        return new PermissionError({\n            message: `None of the permissions ${names.join(', ')} has been granted.`,\n            code: ErrorCode.PERMISSION_DENIED,\n        });\n    }\n\n    static evaluationFailed(name: string | string[]) {\n        if (Array.isArray(name)) {\n            return new PermissionError({\n                message: `The evaluation of permissions ${name.join(', ')} failed`,\n                code: ErrorCode.PERMISSION_EVALUATION_FAILED,\n            });\n        }\n\n        return new PermissionError({\n            message: `The evaluation of permission ${name} failed`,\n            code: ErrorCode.PERMISSION_EVALUATION_FAILED,\n        });\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode, hasInstanceof, isAuthupError } from '@authup/errors';\nimport { PERMISSION_ERROR_INSTANCE, type PermissionError } from './module';\n\nexport function isPermissionError(input: unknown): input is PermissionError {\n    if (hasInstanceof(input, PERMISSION_ERROR_INSTANCE)) {\n        return true;\n    }\n\n    if (!isAuthupError(input)) {\n        return false;\n    }\n\n    return input.code === ErrorCode.PERMISSION_NOT_FOUND ||\n        input.code === ErrorCode.PERMISSION_DENIED ||\n        input.code === ErrorCode.PERMISSION_EVALUATION_FAILED;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PermissionPolicyBinding } from '../types';\n\nexport function isPermissionPolicyBindingEqual(a: PermissionPolicyBinding, b: PermissionPolicyBinding): boolean {\n    if (a.permission.name !== b.permission.name) {\n        return false;\n    }\n\n    if ((a.permission.realm_id ?? null) !== (b.permission.realm_id ?? null)) {\n        return false;\n    }\n\n    if ((a.permission.client_id ?? null) !== (b.permission.client_id ?? null)) {\n        return false;\n    }\n\n    return true;\n}\n","/*\n * Copyright (c) 2025-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\n\nimport type { BasePermission } from '../types.ts';\n\nfunction formatKeySegment(value?: string | null): string {\n    return value || '*';\n}\n\nexport function buildPermissionKey(\n    input: BasePermission,\n) {\n    return `${formatKeySegment(input.realm_id)}/${formatKeySegment(input.client_id)}/${input.name}`;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { DecisionStrategy } from '@authup/kit';\nimport type { BasePolicy } from '../../policy';\nimport type { PermissionPolicyBinding } from '../types';\nimport { buildPermissionKey } from './key';\n\ntype CompositePolicy = BasePolicy & {\n    decision_strategy?: `${DecisionStrategy}`,\n    children: BasePolicy[],\n};\n\nexport function mergePermissionPolicyBindings(input: PermissionPolicyBinding[]) : PermissionPolicyBinding[] {\n    const grouped : Record<string, PermissionPolicyBinding[]> = input\n        .reduce((previous, current) => {\n            const key = buildPermissionKey(current.permission);\n            if (!previous[key]) {\n                previous[key] = [];\n            }\n\n            previous[key].push(current);\n\n            return previous;\n        }, {} as Record<string, PermissionPolicyBinding[]>);\n\n    const output : PermissionPolicyBinding[] = [];\n    const keys = Object.keys(grouped);\n    for (const key of keys) {\n        const group = grouped[key]!;\n        const first = group[0]!;\n\n        if (group.length === 1) {\n            output.push(first);\n            continue;\n        }\n\n        const children : BasePolicy[] = [];\n\n        for (const element of group) {\n            if (!element.policies || element.policies.length === 0) {\n                continue;\n            }\n\n            const policy: CompositePolicy = {\n                type: 'composite',\n                decision_strategy: element.permission.decision_strategy || DecisionStrategy.UNANIMOUS,\n                children: element.policies,\n            };\n\n            children.push(policy);\n        }\n\n        let mergedPolicies: BasePolicy[] | undefined;\n\n        if (\n            children.length > 0 &&\n            children.length === group.length\n        ) {\n            const policy: CompositePolicy = {\n                type: 'composite',\n                decision_strategy: DecisionStrategy.AFFIRMATIVE,\n                children,\n            };\n\n            mergedPolicies = [policy];\n        }\n\n        output.push({\n            permission: {\n                ...first.permission,\n                decision_strategy: DecisionStrategy.AFFIRMATIVE,\n            },\n            policies: mergedPolicies,\n        });\n    }\n\n    return output;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildPermissionKey, mergePermissionPolicyBindings } from '../helpers';\nimport type { PermissionPolicyBinding } from '../types';\nimport type { IPermissionProvider, PermissionGetOptions } from './types';\n\nexport class PermissionMemoryProvider implements IPermissionProvider {\n    protected items : Record<string, PermissionPolicyBinding> = {};\n\n    constructor(items: PermissionPolicyBinding[] = []) {\n        this.setMany(items);\n    }\n\n    async findOne(\n        options: PermissionGetOptions,\n    ): Promise<PermissionPolicyBinding | null> {\n        const key = buildPermissionKey({\n            name: options.name,\n            client_id: options.clientId,\n            realm_id: options.realmId,\n        });\n\n        const entry = this.items[key];\n        if (entry) {\n            return entry;\n        }\n\n        return null;\n    }\n\n    setMany(input: PermissionPolicyBinding[]) {\n        this.items = mergePermissionPolicyBindings(input)\n            .reduce((prev, current) => {\n                const key = buildPermissionKey(current.permission);\n                prev[key] = current;\n                return prev;\n            }, {} as Record<string, PermissionPolicyBinding>);\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AuthupError, ErrorCode, markInstanceof } from '@authup/errors';\nimport type { PolicyIssue } from '../issue';\n\nexport const POLICY_ERROR_INSTANCE = Symbol.for('@authup/access/PolicyError');\n\nexport class PolicyError extends AuthupError {\n    constructor(message?: string, code?: string | null) {\n        super({\n            message,\n            code: code ?? undefined,\n        });\n        markInstanceof(this, POLICY_ERROR_INSTANCE);\n    }\n\n    addIssue(data: PolicyIssue) {\n        this.issues.push(data);\n    }\n\n    addIssues(data: PolicyIssue[]) {\n        this.issues.push(...data);\n    }\n\n    static evaluatorNotFound(type: string) {\n        return new PolicyError(\n            `No evaluator is registered to handle the policy: ${type}`,\n            ErrorCode.POLICY_EVALUATOR_NOT_FOUND,\n        );\n    }\n\n    static evaluatorNotProcessable() {\n        return new PolicyError(\n            'The evaluator can not process the policy.',\n            ErrorCode.POLICY_EVALUATOR_NOT_PROCESSABLE,\n        );\n    }\n\n    static evaluatorContextInvalid() {\n        return new PolicyError(\n            'The evaluator context is not valid.',\n            ErrorCode.POLICY_EVALUATOR_CONTEXT_INVALID,\n        );\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode, hasInstanceof, isAuthupError } from '@authup/errors';\nimport { POLICY_ERROR_INSTANCE, type PolicyError } from './module';\n\nexport function isPolicyError(input: unknown): input is PolicyError {\n    if (hasInstanceof(input, POLICY_ERROR_INSTANCE)) {\n        return true;\n    }\n\n    if (!isAuthupError(input)) {\n        return false;\n    }\n\n    return input.code === ErrorCode.POLICY_EVALUATOR_NOT_FOUND ||\n        input.code === ErrorCode.POLICY_EVALUATOR_NOT_PROCESSABLE ||\n        input.code === ErrorCode.POLICY_EVALUATOR_CONTEXT_INVALID;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '@authup/errors';\nimport { defineIssueItem } from 'validup';\nimport type {\n    IPolicyEvaluator,\n    PolicyEvaluationContext,\n    PolicyEvaluationResult,\n    PolicyEvaluators,\n} from '../evaluation';\nimport type { PolicyIssue } from '../issue';\nimport type { IPolicyEngine } from './types.ts';\nimport { PolicyError, isPolicyError } from '../error';\nimport type { BasePolicy } from '../types.ts';\n\n// Cross-realm-safe extraction of an error message from an unknown thrown\n// value. `instanceof Error` is unreliable across module boundaries (different\n// realms, dual-bundled packages), so we duck-type on the `message` shape.\nfunction errorMessage(value: unknown): string {\n    if (\n        typeof value === 'object' &&\n        value !== null &&\n        'message' in value &&\n        typeof (value as { message: unknown }).message === 'string'\n    ) {\n        return (value as { message: string }).message;\n    }\n    return String(value);\n}\n\n/**\n * The policy engine is a component that interprets defined policies and makes decisions\n * on whether to allow or deny a particular access.\n */\nexport class PolicyEngine implements IPolicyEngine {\n    protected evaluators : Record<string, IPolicyEvaluator>;\n\n    constructor(evaluators: PolicyEvaluators = {}) {\n        this.evaluators = evaluators;\n    }\n\n    public registerEvaluator(\n        type: string,\n        evaluator: IPolicyEvaluator,\n    ) : void {\n        this.evaluators[type] = evaluator;\n    }\n\n    public registerEvaluators(evaluators: PolicyEvaluators) {\n        const keys = Object.keys(evaluators);\n        for (const key of keys) {\n            this.registerEvaluator(key, evaluators[key]!);\n        }\n    }\n\n    /**\n     * @param policy\n     * @param ctx\n     */\n    async evaluate(policy: BasePolicy, ctx: PolicyEvaluationContext) : Promise<PolicyEvaluationResult> {\n        // Infrastructure errors (no type, no evaluator, evaluator threw) MUST\n        // fail closed regardless of `policy.invert`. Inverting an error path\n        // would silently grant access on misconfiguration — with `invert: true`\n        // an unregistered policy type would return success: true.\n        if (!policy.type) {\n            return {\n                success: false,\n                issues: [\n                    defineIssueItem({\n                        path: [],\n                        message: 'The policy can not be handled by any evaluator.',\n                        code: ErrorCode.POLICY_EVALUATOR_NOT_FOUND,\n                    }),\n                ],\n            };\n        }\n        // When a policy is filtered out via include/exclude, treat it as a\n        // neutral pass — do NOT apply `invert`. Inversion only makes sense\n        // for an actual evaluation outcome; skipping a policy because it's\n        // outside the current context's scope is not an outcome.\n        if (\n            ctx.exclude &&\n            ctx.exclude.length > 0 &&\n            ctx.exclude.includes(policy.type)\n        ) {\n            return { success: true };\n        }\n\n        if (\n            ctx.include &&\n            ctx.include.length > 0 &&\n            !ctx.include.includes(policy.type)\n        ) {\n            return { success: true };\n        }\n\n        const issues : PolicyIssue[] = [];\n\n        const evaluator = this.evaluators[policy.type];\n        if (!evaluator) {\n            issues.push(defineIssueItem({\n                path: [policy.type],\n                message: `The policy ${policy.type} can not be handled by any evaluator.`,\n                code: ErrorCode.POLICY_EVALUATOR_NOT_FOUND,\n            }));\n\n            return {\n                success: false,\n                issues,\n            };\n        }\n\n        try {\n            return await evaluator.evaluate(policy, {\n                ...ctx,\n                evaluators: {\n                    ...this.evaluators,\n                    ...(ctx.evaluators || {}),\n                },\n            });\n        } catch (e) {\n            issues.push(defineIssueItem({\n                path: [policy.type],\n                message: `The ${policy.type} evaluator threw: ${errorMessage(e)}`,\n                code: ErrorCode.POLICY_EVALUATOR_NOT_PROCESSABLE,\n            }));\n\n            return {\n                success: false,\n                issues,\n            };\n        }\n    }\n\n    async evaluateOrFail(policy: BasePolicy, ctx: PolicyEvaluationContext) : Promise<void> {\n        const issues : PolicyIssue[] = [];\n\n        try {\n            const outcome = await this.evaluate(policy, ctx);\n            if (outcome.success) {\n                return;\n            }\n\n            if (outcome.issues) {\n                issues.push(...outcome.issues);\n            }\n        } catch (e) {\n            if (isPolicyError(e)) {\n                throw e;\n            }\n\n            // Surface non-PolicyError throws (DB failures, validator crashes, etc.)\n            // as issues so the root cause is visible instead of being swallowed\n            // behind a generic policy failure.\n            issues.push(defineIssueItem({\n                path: policy.type ? [policy.type] : [],\n                message: errorMessage(e),\n                code: ErrorCode.POLICY_EVALUATOR_NOT_PROCESSABLE,\n            }));\n        }\n\n        const error = new PolicyError(`The policy ${policy.type} evaluation failed.`);\n        error.addIssues(issues);\n\n        throw error;\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport interface IPolicyData {\n    set(key: string, value: unknown) : void;\n    has(key: string): boolean;\n    get<T = unknown>(key: string) : T;\n\n    isValidated(key: string): boolean;\n    setValidated(key: string) : void;\n\n    clone() : IPolicyData\n}\n\nexport class PolicyData implements IPolicyData {\n    protected data: Record<string, any>;\n\n    protected validated : Set<string>;\n\n    constructor(\n        data: Record<string, any> = {},\n        validated: Set<string> = new Set(),\n    ) {\n        this.data = data;\n        this.validated = validated;\n    }\n\n    set<T = unknown>(key: string, value: T) : void {\n        this.data[key] = value;\n        this.validated.delete(key);\n    }\n\n    get<T = unknown>(key: string) : T {\n        if (key in this.data) {\n            return this.data[key];\n        }\n\n        throw new Error(`Policy data item ${key} does not exist.`);\n    }\n\n    has(key: string): boolean {\n        return key in this.data;\n    }\n\n    setValidated(key: string) : void {\n        this.validated.add(key);\n    }\n\n    isValidated(key: string) : boolean {\n        return this.validated.has(key);\n    }\n\n    clone() {\n        return new PolicyData({ ...this.data }, new Set(this.validated));\n    }\n}\n","/*\n * Copyright (c) 2026.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PolicyEvaluationContext, PolicyEvaluationContextInput } from './types.ts';\nimport { PolicyData } from '../../data.ts';\n\nexport function definePolicyEvaluationContext(\n    input: PolicyEvaluationContextInput = {},\n) : PolicyEvaluationContext {\n    return {\n        evaluators: input.evaluators || {},\n        path: input.path || [],\n        data: input.data || new PolicyData(),\n        include: input.include || [],\n        exclude: input.exclude || [],\n    };\n}\n","/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum PolicyIssueSeverity {\n    WARNING = 'warning',\n    ERROR = 'error',\n}\n\nexport enum PolicyIssueCode {\n    // Data/Input\n    DATA_MISSING = 'DATA_MISSING',\n    DATA_INVALID = 'DATA_INVALID',\n\n    // Policy Spec / Config\n    INVALID = 'INVALID',\n    TYPE_UNKNOWN = 'TYPE_UNKNOWN',\n    FIELD_MISSING = 'FIELD_MISSING',\n    FIELD_INVALID = 'FIELD_INVALID',\n\n    // Composite / Tree evaluation\n    CHILD_INVALID = 'CHILD_INVALID',\n    CHILD_EVALUATION_FAILED = 'CHILD_EVALUATION_FAILED',\n\n    // Engine / Evaluator registry\n    EVALUATION_DENIED = 'EVALUATION_DENIED',\n    EVALUATOR_NOT_FOUND = 'EVALUATOR_NOT_FOUND',\n    EVALUATOR_ERROR = 'EVALUATOR_ERROR',\n\n    // Execution control\n    SKIPPED_EXCLUDED = 'SKIPPED_EXCLUDED',\n    SKIPPED_NOT_INCLUDED = 'SKIPPED_NOT_INCLUDED',\n\n    // Internal / unexpected\n    INTERNAL_ERROR = 'INTERNAL_ERROR',\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { defineIssueGroup, defineIssueItem } from 'validup';\nimport type { PolicyIssueGroup, PolicyIssueItem } from './types.ts';\n\nexport function definePolicyIssueItem(input: Omit<PolicyIssueItem, 'type'>) : PolicyIssueItem {\n    return defineIssueItem(input);\n}\n\nexport function definePolicyIssueGroup(input: Omit<PolicyIssueGroup, 'type'>) : PolicyIssueGroup {\n    return defineIssueGroup(input);\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\ntype InvertFn = (input: boolean) => boolean;\n\nexport function maybeInvertPolicyOutcome(\n    outcome: boolean,\n    invert?: boolean | InvertFn,\n) {\n    if (typeof invert === 'undefined') {\n        return outcome;\n    }\n\n    if (typeof invert === 'function') {\n        return invert(outcome);\n    }\n\n    if (!invert) {\n        return outcome;\n    }\n\n    return !outcome;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { AttributeNamesPolicy } from './types';\n\nexport class AttributeNamesPolicyValidator extends Container<AttributeNamesPolicy> {\n    override initialize() {\n        super.initialize();\n\n        this.mount(\n            'names',\n            createValidator(\n                z.array(\n                    z.string()\n                        .min(3)\n                        .max(128),\n                ),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { AttributesPolicy } from './types';\n\nexport function defineAttributesPolicy<\n    T extends Record<string, any> = Record<string, any>,\n>(\n    data: AttributesPolicy<T>,\n) : AttributesPolicy<T> {\n    return data;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum BuiltInPolicyType {\n    /**\n     * Bundles different policies.\n     */\n    COMPOSITE = 'composite',\n    /**\n     * Date Based Access Control (DBAC)\n     */\n    DATE = 'date',\n    /**\n     * Time Based Access Control (TBAC)\n     */\n    TIME = 'time',\n    /**\n     * Attribute Name Based Access Control (ANBAC)\n     */\n    ATTRIBUTE_NAMES = 'attributeNames',\n    /**\n     * Attribute Based Access Control (ABAC)\n     */\n    ATTRIBUTES = 'attributes',\n    /**\n     * Realm of Identity is for attribute realm.\n     */\n    REALM_MATCH = 'realmMatch',\n\n    /**\n     * Restriction based on identity (type, id, ...)\n     */\n    IDENTITY = 'identity',\n\n    /**\n     * Restriction based on a binding between identity <-> permission\n     */\n    PERMISSION_BINDING = 'permissionBinding',\n\n    // Location (LBAC)\n    // Device (DBAC)\n}\n\nexport const SystemPolicyName = {\n    DEFAULT: 'system.default',\n    IDENTITY: 'system.identity',\n    PERMISSION_BINDING: 'system.permission-binding',\n    REALM_MATCH: 'system.realm-match',\n    REALM_BOUND: 'system.realm-bound',\n    REALM_OR_GLOBAL: 'system.realm-or-global',\n    CLIENT_NAMES_SELF_MANAGE: 'system.client-names-self-manage',\n    ROBOT_NAMES_SELF_MANAGE: 'system.robot-names-self-manage',\n    USER_NAMES_SELF_MANAGE: 'system.user-names-self-manage',\n} as const;\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { AttributesPolicy } from './types';\n\nexport class AttributesPolicyValidator<\n    T extends Record<string, any> = Record<string, any>,\n> extends Container<AttributesPolicy<T>> {\n    override initialize() {\n        super.initialize();\n\n        this.mount(\n            'query',\n            createValidator(\n                z.looseObject({}),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { guard } from '@ucast/mongo2js';\nimport { isObject } from '@authup/kit';\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { PolicyIssueCode, definePolicyIssueItem } from '../../issue';\nimport { BuiltInPolicyType } from '../constants.ts';\nimport { AttributesPolicyValidator } from './validator';\n\nexport class AttributesPolicyEvaluator<\n    T extends Record<string, any> = Record<string, any>,\n> implements IPolicyEvaluator {\n    protected validator : AttributesPolicyValidator<T>;\n\n    constructor() {\n        this.validator = new AttributesPolicyValidator<T>();\n    }\n\n    async accessData(ctx: PolicyEvaluationContext) : Promise<T | null> {\n        if (!ctx.data.has(BuiltInPolicyType.ATTRIBUTES)) {\n            return null;\n        }\n\n        if (ctx.data.isValidated(BuiltInPolicyType.ATTRIBUTES)) {\n            return ctx.data.get<T>(BuiltInPolicyType.ATTRIBUTES);\n        }\n\n        // todo: run validator on attributes (isObject ...)\n        const data = ctx.data.get<T>(BuiltInPolicyType.ATTRIBUTES);\n\n        ctx.data.set(BuiltInPolicyType.ATTRIBUTES, data);\n        ctx.data.setValidated(BuiltInPolicyType.ATTRIBUTES);\n\n        return data;\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        const data = await this.accessData(ctx);\n        if (!data) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property attributes is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        this.fixQuery(policy.query);\n\n        const testIt = guard<T>(policy.query);\n\n        return { success: maybeInvertPolicyOutcome(testIt(data as T), policy.invert) };\n    }\n\n    protected fixQuery(\n        query: unknown | unknown[],\n    ) {\n        if (Array.isArray(query)) {\n            for (const element of query) {\n                this.fixQuery(element);\n            }\n\n            return;\n        }\n\n        if (isObject(query)) {\n            const keys = Object.keys(query);\n            for (const key of keys) {\n                const value = query[key];\n\n                if (isObject(value) || Array.isArray(value)) {\n                    this.fixQuery(value);\n                    continue;\n                }\n\n                if (\n                    key === '$regex' &&\n                    typeof value === 'string'\n                ) {\n                    const fragments = value.match(/\\/(.*?)\\/([a-z]*)?$/i);\n                    if (fragments && fragments[1] !== undefined) {\n                        query[key] = new RegExp(fragments[1], fragments[2] || '');\n                    }\n                }\n            }\n        }\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { flattenObject } from '@authup/kit';\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport type { PolicyIssue } from '../../issue';\nimport { PolicyIssueCode, definePolicyIssueItem } from '../../issue';\nimport { AttributeNamesPolicyValidator } from './validator';\nimport { AttributesPolicyEvaluator } from '../attributes';\n\nexport class AttributeNamesPolicyEvaluator implements IPolicyEvaluator {\n    protected validator : AttributeNamesPolicyValidator;\n\n    protected attributesEvaluator : AttributesPolicyEvaluator;\n\n    constructor() {\n        this.validator = new AttributeNamesPolicyValidator();\n        this.attributesEvaluator = new AttributesPolicyEvaluator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        const data = await this.attributesEvaluator.accessData(ctx);\n        if (!data) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property attributes is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        // Nested paths are a deliberate feature: an attribute object like\n        // `{user: {name: 'x'}}` flattens to `{'user.name': 'x'}` and is matched\n        // against `names` entries with dotted notation. Allowlists/denylists\n        // that need to govern nested fields must use the dotted-path form\n        // (e.g. `'user.realm_id'`); a top-level entry like `'realm_id'` will\n        // NOT catch a nested `user.realm_id` write — that's by design, the\n        // policy is precise about which path it covers.\n        const attributes = flattenObject(data);\n        const keys = Object.keys(attributes);\n\n        // `invert` is consumed per-key, NOT at the result level:\n        //   - allowlist (default): a key NOT in `names` is denied\n        //   - denylist (invert: true): a key IN `names` is denied\n        // Result-level inversion would break the empty-input case (a request\n        // with no validated attributes would flip success → fail), and would\n        // produce nonsensical \"deny iff all keys are in the list\" semantics\n        // for partial inputs.\n        const issues : PolicyIssue[] = [];\n        for (const key of keys) {\n            const inList = policy.names.includes(key);\n            const denied = policy.invert ? inList : !inList;\n            if (denied) {\n                issues.push(definePolicyIssueItem({\n                    code: PolicyIssueCode.EVALUATION_DENIED,\n                    message: policy.invert ?\n                        `The attribute ${key} is denied` :\n                        `The attribute ${key} is not included`,\n                    path: [...ctx.path, key],\n                }));\n            }\n        }\n\n        return {\n            success: issues.length === 0,\n            issues,\n        };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { DecisionStrategy } from '../../../constants';\nimport type { CompositePolicy } from './types';\n\nexport class CompositePolicyValidator extends Container<CompositePolicy> {\n    override initialize() {\n        super.initialize();\n\n        this.mount(\n            'decision_strategy',\n            createValidator(\n                z.enum(DecisionStrategy)\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'children',\n            createValidator(\n                z.array(z.looseObject({ type: z.string().min(3) })),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { defineIssueGroup } from 'validup';\nimport { DecisionStrategy } from '../../../constants';\nimport { PolicyEngine } from '../../engine';\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport type { PolicyIssue } from '../../issue';\nimport { CompositePolicyValidator } from './validator';\n\nexport class CompositePolicyEvaluator implements IPolicyEvaluator {\n    protected validator : CompositePolicyValidator;\n\n    constructor() {\n        this.validator = new CompositePolicyValidator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        let count = 0;\n\n        const decision_strategy = policy.decision_strategy ??\n            DecisionStrategy.UNANIMOUS;\n\n        const engine = new PolicyEngine(ctx.evaluators);\n        const issues : PolicyIssue[] = [];\n\n        for (const childPolicy of policy.children) {\n            const path = [\n                ...(ctx.path || []),\n                ...(childPolicy.type ? [childPolicy.type] : []),\n            ];\n\n            const outcome = await engine.evaluate(childPolicy, {\n                ...ctx,\n                path,\n            });\n\n            if (outcome.success) {\n                if (decision_strategy === DecisionStrategy.AFFIRMATIVE) {\n                    return {\n                        success: maybeInvertPolicyOutcome(true, policy.invert),\n                        issues: [],\n                    };\n                }\n\n                count++;\n            } else {\n                if (outcome.issues) {\n                    issues.push(defineIssueGroup({\n                        message: `The evaluation of child policy ${childPolicy.type} failed`,\n                        issues: outcome.issues || [],\n                        path,\n                    }));\n                }\n\n                if (decision_strategy === DecisionStrategy.UNANIMOUS) {\n                    const success = maybeInvertPolicyOutcome(false, policy.invert);\n                    return {\n                        success,\n                        // When `invert` flips a child-failure into success,\n                        // suppress the issue list — surfacing failure issues\n                        // alongside `success: true` is misleading.\n                        issues: success ? [] : [\n                            defineIssueGroup({\n                                message: `The evaluation of composite policy failed (${DecisionStrategy.UNANIMOUS})`,\n                                issues,\n                                path: ctx.path,\n                            }),\n                        ],\n                    };\n                }\n\n                count--;\n            }\n        }\n\n        if (count > 0) {\n            return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n        }\n\n        const success = maybeInvertPolicyOutcome(false, policy.invert);\n        return {\n            success,\n            issues: success ? [] : [\n                defineIssueGroup({\n                    message: `The evaluation of composite policy failed (${DecisionStrategy.CONSENSUS})`,\n                    issues: issues || [],\n                    path: ctx.path,\n                }),\n            ],\n        };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PolicyWithType } from '../../types';\nimport { BuiltInPolicyType } from '../constants';\nimport type { CompositePolicy } from './types';\n\nexport function isCompositePolicy(\n    input: PolicyWithType,\n) : input is PolicyWithType<CompositePolicy> {\n    return input.type === BuiltInPolicyType.COMPOSITE;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { DatePolicy } from './types';\n\nexport class DatePolicyValidator extends Container<DatePolicy> {\n    override initialize() {\n        super.initialize();\n\n        this.mount('start', createValidator(\n            z.date()\n                .or(z.iso.date())\n                .or(z.number())\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n        this.mount('end', createValidator(\n            z.date()\n                .or(z.iso.date())\n                .or(z.number())\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n\n        this.mount('invert', createValidator(\n            z.boolean()\n                .or(z.undefined())\n                .or(z.null())\n                .optional(),\n        ));\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { BuiltInPolicyType } from '../constants.ts';\nimport { DatePolicyValidator } from './validator';\n\nfunction normalizeDate(input: Date) {\n    return new Date(input.getFullYear(), input.getMonth(), input.getDate());\n}\n\nfunction toDate(input: Date | string | number) : Date {\n    if (typeof input === 'string') {\n        return new Date(input);\n    }\n\n    if (typeof input === 'number') {\n        return new Date(input);\n    }\n\n    return input;\n}\n\nexport class DatePolicyEvaluator implements IPolicyEvaluator {\n    protected validator : DatePolicyValidator;\n\n    constructor() {\n        this.validator = new DatePolicyValidator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        let now : Date;\n\n        if (ctx.data.has(BuiltInPolicyType.DATE)) {\n            if (ctx.data.isValidated(BuiltInPolicyType.DATE)) {\n                now = ctx.data.get<Date>(BuiltInPolicyType.DATE);\n            } else {\n                // todo: run validator on attributes (isObject ...)\n                now = normalizeDate(toDate(ctx.data.get(BuiltInPolicyType.DATE)));\n\n                ctx.data.set(BuiltInPolicyType.DATE, now);\n                ctx.data.setValidated(BuiltInPolicyType.DATE);\n            }\n        } else {\n            now = normalizeDate(new Date());\n        }\n\n        if (policy.start) {\n            const start = normalizeDate(toDate(policy.start));\n            if (now < start) {\n                return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n            }\n        }\n\n        if (policy.end) {\n            const end = normalizeDate(toDate(policy.end));\n            if (now > end) {\n                return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n            }\n        }\n\n        return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n    }\n}\n","/*\n * Copyright (c) 2024-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\n\nimport type { IdentityPolicyData } from '../types.ts';\n\nexport class PolicyIdentityDataValidator extends Container<IdentityPolicyData> {\n    override initialize() {\n        super.initialize();\n\n        this.mount(\n            'type',\n            createValidator(\n                z.string().min(3).max(128),\n            ),\n        );\n\n        this.mount(\n            'id',\n            createValidator(\n                z.uuid(),\n            ),\n        );\n\n        this.mount(\n            'clientId',\n            createValidator(\n                z.uuid()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'realmId',\n            createValidator(\n                z.uuid()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'realmName',\n            createValidator(\n                z.string().min(3).max(128)\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { IdentityPolicy } from './types';\n\nexport class IdentityPolicyValidator extends Container<IdentityPolicy> {\n    override initialize() {\n        this.mount(\n            'types',\n            createValidator(\n                z.array(z.string())\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { PolicyIssueCode, definePolicyIssueItem } from '../../issue';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { PolicyIdentityDataValidator } from './data';\nimport type { IdentityPolicyData } from './types';\nimport { IdentityPolicyValidator } from './validator';\n\nexport class IdentityPolicyEvaluator implements IPolicyEvaluator {\n    protected validator : IdentityPolicyValidator;\n\n    protected dataValidator : PolicyIdentityDataValidator;\n\n    constructor() {\n        this.validator = new IdentityPolicyValidator();\n        this.dataValidator = new PolicyIdentityDataValidator();\n    }\n\n    async accessData(ctx: PolicyEvaluationContext) : Promise<IdentityPolicyData | null> {\n        if (!ctx.data.has('identity')) {\n            return null;\n        }\n\n        if (ctx.data.isValidated('identity')) {\n            return ctx.data.get<IdentityPolicyData>('identity');\n        }\n\n        const data = await this.dataValidator.run(ctx.data.get('identity'));\n\n        ctx.data.set('identity', data);\n        ctx.data.setValidated('identity');\n\n        return data;\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        const data = await this.accessData(ctx);\n        if (!data) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property identity is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        if (!policy.types || policy.types.length === 0) {\n            // Empty types is a configuration shorthand for \"no type\n            // restriction\" — every identity passes. Do NOT apply `invert`;\n            // inverting an empty config would silently deny all identities,\n            // which is almost never the user's intent.\n            return { success: true };\n        }\n\n        const typeAllowed = policy.types.includes(data.type);\n        if (typeAllowed) {\n            return { success: maybeInvertPolicyOutcome(typeAllowed, policy.invert) };\n        }\n\n        return {\n            success: maybeInvertPolicyOutcome(typeAllowed, policy.invert),\n            issues: [\n                definePolicyIssueItem({\n                    code: PolicyIssueCode.EVALUATION_DENIED,\n                    message: `The type ${data.type} is not covered by the policy configuration`,\n                    path: ctx.path,\n                }),\n            ],\n        };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { Container } from 'validup';\nimport type { PermissionBindingPolicy } from './types';\n\nexport class PermissionBindingPolicyValidator extends Container<PermissionBindingPolicy> {\n    override initialize() {\n\n    }\n}\n","/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPolicyEvaluator, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { PermissionBindingPolicyValidator } from './validator';\n\nexport class PermissionBindingPolicyEvaluator implements IPolicyEvaluator {\n    protected validator: PermissionBindingPolicyValidator;\n\n    constructor() {\n        this.validator = new PermissionBindingPolicyValidator();\n    }\n\n    async evaluate(value: Record<string, any>): Promise<PolicyEvaluationResult> {\n        const policy = await this.validator.run(value);\n\n        // todo: this must be changed when the permission-checker not only checks owned permissions.\n        return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { DecisionStrategy } from '../../../constants';\nimport type { RealmMatchPolicy } from './types';\n\nexport class RealmMatchPolicyValidator extends Container<RealmMatchPolicy> {\n    override initialize() {\n        super.initialize();\n\n        this.mount(\n            'decision_strategy',\n            createValidator(\n                z.enum(DecisionStrategy)\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'attribute_name',\n            createValidator(\n                z.string()\n                    .min(3)\n                    .or(z.array(z.string().min(3)))\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n        this.mount(\n            'attribute_name_strict',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n        this.mount(\n            'attribute_null_match_all',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'identity_master_match_all',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { hasOwnProperty } from '@authup/kit';\nimport { DecisionStrategy } from '../../../constants';\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { PolicyIssueCode, definePolicyIssueItem } from '../../issue';\nimport { AttributesPolicyEvaluator } from '../attributes';\nimport { IdentityPolicyEvaluator } from '../identity';\nimport { RealmMatchPolicyValidator } from './validator';\n\nexport class RealmMatchPolicyEvaluator implements IPolicyEvaluator {\n    protected validator : RealmMatchPolicyValidator;\n\n    protected identityEvaluator: IdentityPolicyEvaluator;\n\n    protected attributesEvaluator : AttributesPolicyEvaluator;\n\n    constructor() {\n        this.validator = new RealmMatchPolicyValidator();\n        this.identityEvaluator = new IdentityPolicyEvaluator();\n        this.attributesEvaluator = new AttributesPolicyEvaluator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        const identity = await this.identityEvaluator.accessData(ctx);\n        if (!identity) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property identity is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        const attributes = await this.attributesEvaluator.accessData(ctx);\n        if (!attributes) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property attributes is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        const identityMasterMatchAll = policy.identity_master_match_all ?? true;\n        if (\n            identityMasterMatchAll &&\n            identity.realmName &&\n            identity.realmName === 'master'\n        ) {\n            // Master-match-all is a privileged-actor override — do NOT apply\n            // `invert`. Inverting would deny master access whenever the policy\n            // is configured as a denylist, which is the opposite of the flag's\n            // intent.\n            return { success: true };\n        }\n\n        let keys : string[];\n        if (policy.attribute_name) {\n            if (Array.isArray(policy.attribute_name)) {\n                keys = policy.attribute_name;\n            } else {\n                keys = [policy.attribute_name];\n            }\n        } else {\n            keys = [\n                'realm_id',\n                'realm_name',\n                'realmId',\n                'realmName',\n            ];\n\n            policy.decision_strategy = DecisionStrategy.CONSENSUS;\n        }\n\n        const attribute_name_strict = policy.attribute_name_strict ?? true;\n        if (!attribute_name_strict) {\n            const resourceKeys = Object.keys(attributes);\n            const keysToAdd : string[] = [];\n            for (const resourceKey of resourceKeys) {\n                let contains : boolean = false;\n\n                for (const key of keys) {\n                    if (\n                        resourceKey !== key &&\n                        resourceKey.includes(key)\n                    ) {\n                        contains = true;\n                        break;\n                    }\n                }\n\n                if (contains) {\n                    keysToAdd.push(resourceKey);\n                }\n            }\n\n            if (keysToAdd.length > 0) {\n                keys.push(...keysToAdd);\n            }\n        }\n\n        let count = 0;\n        let evaluated = false;\n\n        for (const key of keys) {\n            if (!hasOwnProperty(attributes, key)) {\n                continue;\n            }\n\n            evaluated = true;\n\n            let outcome : boolean = false;\n\n            const attributeValue = attributes[key];\n\n            if (\n                attributeValue === null &&\n                policy.attribute_null_match_all\n            ) {\n                outcome = true;\n            } else if (\n                attributeValue === identity.realmId ||\n                attributeValue === identity.realmName\n            ) {\n                outcome = true;\n            }\n\n            if (outcome) {\n                if (policy.decision_strategy === DecisionStrategy.AFFIRMATIVE) {\n                    return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n                }\n\n                count++;\n            } else {\n                if (policy.decision_strategy === DecisionStrategy.UNANIMOUS) {\n                    return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n                }\n\n                count--;\n            }\n        }\n\n        if (!evaluated) {\n            // No realm key found in attributes — the policy's match logic\n            // didn't run. This is a \"non-evaluation\", not an outcome; treat\n            // as a neutral pass without applying `invert`. Inverting here\n            // would conflate \"policy doesn't apply\" with \"policy denies\".\n            return { success: true };\n        }\n\n        return { success: maybeInvertPolicyOutcome(count > 0, policy.invert) };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum TimePolicyInterval {\n    DAILY = 'daily',\n    WEEKLY = 'weekly',\n    MONTHLY = 'monthly',\n    YEARLY = 'yearly',\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { TimePolicyInterval } from './constants';\n\nexport function isIntervalForDayOfWeek(\n    interval: string,\n) {\n    return interval === TimePolicyInterval.WEEKLY ||\n        interval === TimePolicyInterval.MONTHLY ||\n        interval === TimePolicyInterval.YEARLY;\n}\n\nexport function isIntervalForDayOfMonth(\n    interval: string,\n) {\n    return interval === TimePolicyInterval.MONTHLY ||\n    interval === TimePolicyInterval.YEARLY;\n}\n\nexport function isIntervalForDayOfYear(\n    interval: string,\n) {\n    return interval === TimePolicyInterval.YEARLY;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { TimePolicy } from './types';\nimport { TimePolicyInterval } from './constants';\n\nexport class TimePolicyValidator extends Container<TimePolicy> {\n    override initialize() {\n        super.initialize();\n\n        this.mount('day_of_week', createValidator(\n            z.number()\n                .min(0).max(6)\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n        this.mount('day_of_month', createValidator(\n            z.number()\n                .min(1)\n                .max(31)\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n        this.mount('day_of_year', createValidator(\n            z.number()\n                .min(1)\n                .max(365)\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n\n        this.mount('start', createValidator(\n            z.date()\n                .or(z.iso.datetime())\n                .or(z.iso.time())\n                .or(z.number())\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n        this.mount('end', createValidator(\n            z.date()\n                .or(z.iso.datetime())\n                .or(z.iso.time())\n                .or(z.number())\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n\n        this.mount(\n            'interval',\n            createValidator(\n                z.enum(TimePolicyInterval)\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.undefined())\n                    .or(z.null())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { BuiltInPolicyType } from '../constants';\nimport { isIntervalForDayOfMonth, isIntervalForDayOfWeek, isIntervalForDayOfYear } from './helpers';\nimport { TimePolicyValidator } from './validator';\n\nconst timeRegex = /^(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d)?$/;\n\nfunction normalizeDate(input: Date, dateRef?: Date) {\n    const date = dateRef ? new Date(dateRef) : new Date();\n    date.setHours(input.getHours(), input.getMinutes());\n\n    return date;\n}\n\nfunction toDate(\n    input: Date | string | number,\n    dateRef?: Date,\n) : Date {\n    if (typeof input === 'string') {\n        if (timeRegex.test(input)) {\n            const parts = input.split(':');\n\n            const startHours = Number(parts[0]);\n            const startMinutes = Number(parts[1]);\n            const startSeconds = parts[2] !== undefined ? Number(parts[2]) : 0;\n\n            if (\n                Number.isFinite(startHours) &&\n                Number.isFinite(startMinutes) &&\n                Number.isFinite(startSeconds)\n            ) {\n                const date = dateRef ? new Date(dateRef) : new Date();\n                date.setHours(startHours, startMinutes, startSeconds, 0);\n\n                return date;\n            }\n        }\n\n        return new Date(input);\n    }\n\n    if (typeof input === 'number') {\n        return new Date(input);\n    }\n\n    return input;\n}\n\nexport class TimePolicyEvaluator implements IPolicyEvaluator {\n    protected validator : TimePolicyValidator;\n\n    constructor() {\n        this.validator = new TimePolicyValidator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        let now : Date;\n\n        if (ctx.data.has(BuiltInPolicyType.TIME)) {\n            if (ctx.data.isValidated(BuiltInPolicyType.TIME)) {\n                now = ctx.data.get<Date>(BuiltInPolicyType.TIME);\n            } else {\n                // todo: run validator on attributes (isObject ...)\n                now = toDate(ctx.data.get(BuiltInPolicyType.TIME));\n\n                ctx.data.set(BuiltInPolicyType.TIME, now);\n                ctx.data.setValidated(BuiltInPolicyType.TIME);\n            }\n        } else {\n            now = new Date();\n        }\n\n        if (policy.start) {\n            const start = normalizeDate(toDate(policy.start, now), now);\n            if (now < start) {\n                return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n            }\n        }\n\n        if (policy.end) {\n            const end = normalizeDate(toDate(policy.end, now), now);\n            if (now > end) {\n                return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n            }\n        }\n\n        if (policy.interval) {\n            if (\n                isIntervalForDayOfWeek(policy.interval) &&\n                policy.day_of_week\n            ) {\n                if (now.getDay() !== policy.day_of_week) {\n                    return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n                }\n            }\n\n            if (\n                isIntervalForDayOfMonth(policy.interval) &&\n                policy.day_of_month\n            ) {\n                if (now.getDate() !== policy.day_of_month) {\n                    return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n                }\n            }\n\n            if (\n                isIntervalForDayOfYear(policy.interval) &&\n                policy.day_of_year\n            ) {\n                const start = new Date(now.getFullYear(), 0, 0);\n                const diff = (now.getTime() - start.getTime()) +\n                    ((start.getTimezoneOffset() - now.getTimezoneOffset()) * 60 * 1000);\n\n                const oneDay = 1000 * 60 * 60 * 24;\n                const dayOfYear = Math.floor(diff / oneDay);\n\n                if (dayOfYear !== policy.day_of_year) {\n                    return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n                }\n            }\n        }\n\n        return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n    }\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PolicyWithType } from '../types';\nimport type { BuiltInPolicyTypeMap } from './types';\n\nexport function definePolicyWithType<\n    K extends keyof BuiltInPolicyTypeMap,\n    D extends BuiltInPolicyTypeMap<any>[K],\n>(\n    type: K,\n    data: D,\n) : PolicyWithType<D, K> {\n    return {\n        ...data,\n        type,\n    };\n}\n","/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    AttributeNamesPolicyEvaluator,\n    AttributesPolicyEvaluator,\n    BuiltInPolicyType,\n    CompositePolicyEvaluator,\n    DatePolicyEvaluator,\n    IdentityPolicyEvaluator,\n    PermissionBindingPolicyEvaluator,\n    RealmMatchPolicyEvaluator,\n    TimePolicyEvaluator,\n} from './built-in';\n\nexport const PolicyDefaultEvaluators = {\n    [BuiltInPolicyType.COMPOSITE]: new CompositePolicyEvaluator(),\n    [BuiltInPolicyType.ATTRIBUTES]: new AttributesPolicyEvaluator(),\n    [BuiltInPolicyType.ATTRIBUTE_NAMES]: new AttributeNamesPolicyEvaluator(),\n    [BuiltInPolicyType.DATE]: new DatePolicyEvaluator(),\n    [BuiltInPolicyType.IDENTITY]: new IdentityPolicyEvaluator(),\n    [BuiltInPolicyType.PERMISSION_BINDING]: new PermissionBindingPolicyEvaluator(),\n    [BuiltInPolicyType.REALM_MATCH]: new RealmMatchPolicyEvaluator(),\n    [BuiltInPolicyType.TIME]: new TimePolicyEvaluator(),\n} as const;\n","/*\n * Copyright (c) 2021-2026.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '@authup/errors';\nimport type { Issue } from 'validup';\nimport { defineIssueItem } from 'validup';\nimport { DecisionStrategy } from '../../constants.ts';\nimport type { CompositePolicy, IPolicyEngine } from '../../policy';\nimport {\n    BuiltInPolicyType,\n    PolicyData,\n    PolicyDefaultEvaluators,\n    PolicyEngine,\n    definePolicyEvaluationContext,\n    definePolicyIssueGroup,\n} from '../../policy';\nimport { PermissionError } from '../error';\nimport type { IPermissionProvider } from '../provider';\n\nimport type { PermissionPolicyBinding } from '../types.ts';\nimport type { IPermissionEvaluator, PermissionEvaluationContext, PermissionEvaluatorOptions } from './types.ts';\n\nexport class PermissionEvaluator implements IPermissionEvaluator {\n    protected provider : IPermissionProvider;\n\n    protected policyEngine : IPolicyEngine;\n\n    protected clientId?: string | null;\n\n    protected realmId?: string | null;\n\n    // ----------------------------------------------\n\n    constructor(options: PermissionEvaluatorOptions) {\n        this.provider = options.provider;\n\n        this.clientId = options.clientId || null;\n        this.realmId = options.realmId || null;\n\n        if (options.policyEngine) {\n            this.policyEngine = options.policyEngine;\n        } else {\n            this.policyEngine = new PolicyEngine(PolicyDefaultEvaluators);\n        }\n    }\n\n    // ----------------------------------------------\n\n    protected async findOne(\n        input: string,\n        overrides: {\n            realmId?: string | null,\n            clientId?: string | null\n        } = {},\n    ) : Promise<PermissionPolicyBinding | null> {\n        return this.provider.findOne({\n            name: input,\n            clientId: overrides.clientId ?? this.clientId,\n            realmId: overrides.realmId ?? this.realmId,\n        });\n    }\n\n    // ----------------------------------------------\n\n    async evaluate(ctx: PermissionEvaluationContext) : Promise<void> {\n        if (!Array.isArray(ctx.name)) {\n            await this.evaluate({\n                ...ctx,\n                name: [ctx.name],\n            });\n            return;\n        }\n\n        const { options = {} } = ctx;\n\n        const decisionStrategy = options.decisionStrategy ??\n            DecisionStrategy.UNANIMOUS;\n\n        const issues : Issue[] = [];\n\n        let count = 0;\n\n        const dataBase = ctx.input || new PolicyData();\n\n        for (const name of ctx.name) {\n            const binding = await this.findOne(name, {\n                realmId: ctx.realmId,\n                clientId: ctx.clientId,\n            });\n            if (!binding) {\n                issues.push(defineIssueItem({\n                    code: ErrorCode.PERMISSION_NOT_FOUND,\n                    message: `The ${name} permission could not be resolved`,\n                    path: [name],\n                }));\n\n                if (decisionStrategy === DecisionStrategy.UNANIMOUS) {\n                    const error = PermissionError.evaluationFailed(ctx.name);\n                    error.addIssues(issues);\n                    throw error;\n                }\n\n                continue;\n            }\n\n            const policies = binding.policies ?? [];\n            if (policies.length === 0) {\n                if (decisionStrategy === DecisionStrategy.AFFIRMATIVE) {\n                    return;\n                }\n\n                count++;\n\n                continue;\n            }\n\n            const data = dataBase.clone();\n            data.set(BuiltInPolicyType.PERMISSION_BINDING, binding);\n\n            const policyDecisionStrategy = binding.permission.decision_strategy ??\n                DecisionStrategy.UNANIMOUS;\n\n            const compositePolicy : CompositePolicy = {\n                type: BuiltInPolicyType.COMPOSITE,\n                decision_strategy: policyDecisionStrategy,\n                children: policies,\n            };\n\n            const evaluationResult = await this.policyEngine.evaluate(\n                compositePolicy,\n                definePolicyEvaluationContext({\n                    include: options.policiesIncluded,\n                    exclude: options.policiesExcluded,\n                    data,\n                }),\n            );\n\n            if (evaluationResult.success) {\n                if (decisionStrategy === DecisionStrategy.AFFIRMATIVE) {\n                    return;\n                }\n\n                count++;\n            } else {\n                issues.push(definePolicyIssueGroup({\n                    code: ErrorCode.PERMISSION_EVALUATION_FAILED,\n                    issues: evaluationResult.issues || [],\n                    message: `The ${binding.permission.name} permissions policy evaluation failed`,\n                    path: [binding.permission.name],\n                }));\n\n                if (decisionStrategy === DecisionStrategy.UNANIMOUS) {\n                    const error = PermissionError.evaluationFailed(binding.permission.name);\n                    error.addIssues(issues);\n                    throw error;\n                }\n\n                count--;\n            }\n        }\n\n        if (count > 0) {\n            return;\n        }\n\n        if (issues.length === 0) {\n            throw PermissionError.deniedAll(ctx.name);\n        } else {\n            const error = PermissionError.evaluationFailed(ctx.name);\n            error.addIssues(issues);\n            throw error;\n        }\n    }\n\n    async evaluateOneOf(ctx: PermissionEvaluationContext) : Promise<void> {\n        return this.evaluate({\n            ...ctx,\n            options: {\n                ...(ctx.options || {}),\n                decisionStrategy: DecisionStrategy.AFFIRMATIVE,\n            },\n        });\n    }\n\n    // ----------------------------------------------\n\n    async preEvaluate(ctx: PermissionEvaluationContext) : Promise<void> {\n        return this.evaluate({\n            ...ctx,\n            options: {\n                ...(ctx.options || {}),\n                policiesExcluded: [\n                    BuiltInPolicyType.ATTRIBUTES,\n                    BuiltInPolicyType.ATTRIBUTE_NAMES,\n                    BuiltInPolicyType.REALM_MATCH,\n                ],\n            },\n        });\n    }\n\n    async preEvaluateOneOf(ctx: PermissionEvaluationContext) : Promise<void> {\n        return this.preEvaluate({\n            ...ctx,\n            options: {\n                ...(ctx.options || {}),\n                decisionStrategy: DecisionStrategy.AFFIRMATIVE,\n            },\n        });\n    }\n}\n"],"mappings":";;;;;;;AAWA,MAAa,4BAA4B,OAAO,IAAI,gCAAgC;AAEpF,IAAa,kBAAb,MAAa,wBAAwB,YAAY;CAC7C,YAAY,UAA8B,CAAC,GAAG;EAC1C,MAAM;GACF,GAAG;GACH,SAAS,QAAQ,WAAW;GAC5B,MAAM,QAAQ,QAAQ,UAAU;EACpC,CAAC;EACD,eAAe,MAAM,yBAAyB;CAClD;CAEA,SAAS,MAAmB;EACxB,KAAK,OAAO,KAAK,IAAI;CACzB;CAEA,UAAU,MAAqB;EAC3B,KAAK,OAAO,KAAK,GAAG,IAAI;CAC5B;CAEA,OAAO,SAAS,MAAc;EAC1B,OAAO,IAAI,gBAAgB;GACvB,SAAS,kBAAkB,KAAK;GAChC,MAAM,UAAU;EACpB,CAAC;CACL;CAEA,OAAO,OAAO,MAAc;EACxB,OAAO,IAAI,gBAAgB;GACvB,SAAS,kBAAkB,KAAK;GAChC,MAAM,UAAU;EACpB,CAAC;CACL;CAEA,OAAO,UAAU,OAAiB;EAC9B,OAAO,IAAI,gBAAgB;GACvB,SAAS,2BAA2B,MAAM,KAAK,IAAI,EAAE;GACrD,MAAM,UAAU;EACpB,CAAC;CACL;CAEA,OAAO,iBAAiB,MAAyB;EAC7C,IAAI,MAAM,QAAQ,IAAI,GAClB,OAAO,IAAI,gBAAgB;GACvB,SAAS,iCAAiC,KAAK,KAAK,IAAI,EAAE;GAC1D,MAAM,UAAU;EACpB,CAAC;EAGL,OAAO,IAAI,gBAAgB;GACvB,SAAS,gCAAgC,KAAK;GAC9C,MAAM,UAAU;EACpB,CAAC;CACL;AACJ;;;ACvDA,SAAgB,kBAAkB,OAA0C;CACxE,IAAI,cAAc,OAAO,yBAAyB,GAC9C,OAAO;CAGX,IAAI,CAAC,cAAc,KAAK,GACpB,OAAO;CAGX,OAAO,MAAM,SAAS,UAAU,wBAC5B,MAAM,SAAS,UAAU,qBACzB,MAAM,SAAS,UAAU;AACjC;;;ACbA,SAAgB,+BAA+B,GAA4B,GAAqC;CAC5G,IAAI,EAAE,WAAW,SAAS,EAAE,WAAW,MACnC,OAAO;CAGX,KAAK,EAAE,WAAW,YAAY,WAAW,EAAE,WAAW,YAAY,OAC9D,OAAO;CAGX,KAAK,EAAE,WAAW,aAAa,WAAW,EAAE,WAAW,aAAa,OAChE,OAAO;CAGX,OAAO;AACX;;;ACbA,SAAS,iBAAiB,OAA+B;CACrD,OAAO,SAAS;AACpB;AAEA,SAAgB,mBACZ,OACF;CACE,OAAO,GAAG,iBAAiB,MAAM,QAAQ,EAAE,GAAG,iBAAiB,MAAM,SAAS,EAAE,GAAG,MAAM;AAC7F;;;ACDA,SAAgB,8BAA8B,OAA8D;CACxG,MAAM,UAAsD,MACvD,QAAQ,UAAU,YAAY;EAC3B,MAAM,MAAM,mBAAmB,QAAQ,UAAU;EACjD,IAAI,CAAC,SAAS,MACV,SAAS,OAAO,CAAC;EAGrB,SAAS,KAAK,KAAK,OAAO;EAE1B,OAAO;CACX,GAAG,CAAC,CAA8C;CAEtD,MAAM,SAAqC,CAAC;CAC5C,MAAM,OAAO,OAAO,KAAK,OAAO;CAChC,KAAK,MAAM,OAAO,MAAM;EACpB,MAAM,QAAQ,QAAQ;EACtB,MAAM,QAAQ,MAAM;EAEpB,IAAI,MAAM,WAAW,GAAG;GACpB,OAAO,KAAK,KAAK;GACjB;EACJ;EAEA,MAAM,WAA0B,CAAC;EAEjC,KAAK,MAAM,WAAW,OAAO;GACzB,IAAI,CAAC,QAAQ,YAAY,QAAQ,SAAS,WAAW,GACjD;GAGJ,MAAM,SAA0B;IAC5B,MAAM;IACN,mBAAmB,QAAQ,WAAW,qBAAqBA,mBAAiB;IAC5E,UAAU,QAAQ;GACtB;GAEA,SAAS,KAAK,MAAM;EACxB;EAEA,IAAI;EAEJ,IACI,SAAS,SAAS,KAClB,SAAS,WAAW,MAAM,QAQ1B,iBAAiB,CAAC;GALd,MAAM;GACN,mBAAmBA,mBAAiB;GACpC;EAGmB,CAAC;EAG5B,OAAO,KAAK;GACR,YAAY;IACR,GAAG,MAAM;IACT,mBAAmBA,mBAAiB;GACxC;GACA,UAAU;EACd,CAAC;CACL;CAEA,OAAO;AACX;;;ACvEA,IAAa,2BAAb,MAAqE;CACjE,QAA4D,CAAC;CAE7D,YAAY,QAAmC,CAAC,GAAG;EAC/C,KAAK,QAAQ,KAAK;CACtB;CAEA,MAAM,QACF,SACuC;EACvC,MAAM,MAAM,mBAAmB;GAC3B,MAAM,QAAQ;GACd,WAAW,QAAQ;GACnB,UAAU,QAAQ;EACtB,CAAC;EAED,MAAM,QAAQ,KAAK,MAAM;EACzB,IAAI,OACA,OAAO;EAGX,OAAO;CACX;CAEA,QAAQ,OAAkC;EACtC,KAAK,QAAQ,8BAA8B,KAAK,EAC3C,QAAQ,MAAM,YAAY;GACvB,MAAM,MAAM,mBAAmB,QAAQ,UAAU;GACjD,KAAK,OAAO;GACZ,OAAO;EACX,GAAG,CAAC,CAA4C;CACxD;AACJ;;;ACjCA,MAAa,wBAAwB,OAAO,IAAI,4BAA4B;AAE5E,IAAa,cAAb,MAAa,oBAAoB,YAAY;CACzC,YAAY,SAAkB,MAAsB;EAChD,MAAM;GACF;GACA,MAAM,QAAQ,KAAA;EAClB,CAAC;EACD,eAAe,MAAM,qBAAqB;CAC9C;CAEA,SAAS,MAAmB;EACxB,KAAK,OAAO,KAAK,IAAI;CACzB;CAEA,UAAU,MAAqB;EAC3B,KAAK,OAAO,KAAK,GAAG,IAAI;CAC5B;CAEA,OAAO,kBAAkB,MAAc;EACnC,OAAO,IAAI,YACP,oDAAoD,QACpD,UAAU,0BACd;CACJ;CAEA,OAAO,0BAA0B;EAC7B,OAAO,IAAI,YACP,6CACA,UAAU,gCACd;CACJ;CAEA,OAAO,0BAA0B;EAC7B,OAAO,IAAI,YACP,uCACA,UAAU,gCACd;CACJ;AACJ;;;ACvCA,SAAgB,cAAc,OAAsC;CAChE,IAAI,cAAc,OAAO,qBAAqB,GAC1C,OAAO;CAGX,IAAI,CAAC,cAAc,KAAK,GACpB,OAAO;CAGX,OAAO,MAAM,SAAS,UAAU,8BAC5B,MAAM,SAAS,UAAU,oCACzB,MAAM,SAAS,UAAU;AACjC;;;ACCA,SAAS,aAAa,OAAwB;CAC1C,IACI,OAAO,UAAU,YACjB,UAAU,QACV,aAAa,SACb,OAAQ,MAA+B,YAAY,UAEnD,OAAQ,MAA8B;CAE1C,OAAO,OAAO,KAAK;AACvB;;;;;AAMA,IAAa,eAAb,MAAmD;CAC/C;CAEA,YAAY,aAA+B,CAAC,GAAG;EAC3C,KAAK,aAAa;CACtB;CAEA,kBACI,MACA,WACK;EACL,KAAK,WAAW,QAAQ;CAC5B;CAEA,mBAA0B,YAA8B;EACpD,MAAM,OAAO,OAAO,KAAK,UAAU;EACnC,KAAK,MAAM,OAAO,MACd,KAAK,kBAAkB,KAAK,WAAW,IAAK;CAEpD;;;;;CAMA,MAAM,SAAS,QAAoB,KAAgE;EAK/F,IAAI,CAAC,OAAO,MACR,OAAO;GACH,SAAS;GACT,QAAQ,CACJ,gBAAgB;IACZ,MAAM,CAAC;IACP,SAAS;IACT,MAAM,UAAU;GACpB,CAAC,CACL;EACJ;EAMJ,IACI,IAAI,WACJ,IAAI,QAAQ,SAAS,KACrB,IAAI,QAAQ,SAAS,OAAO,IAAI,GAEhC,OAAO,EAAE,SAAS,KAAK;EAG3B,IACI,IAAI,WACJ,IAAI,QAAQ,SAAS,KACrB,CAAC,IAAI,QAAQ,SAAS,OAAO,IAAI,GAEjC,OAAO,EAAE,SAAS,KAAK;EAG3B,MAAM,SAAyB,CAAC;EAEhC,MAAM,YAAY,KAAK,WAAW,OAAO;EACzC,IAAI,CAAC,WAAW;GACZ,OAAO,KAAK,gBAAgB;IACxB,MAAM,CAAC,OAAO,IAAI;IAClB,SAAS,cAAc,OAAO,KAAK;IACnC,MAAM,UAAU;GACpB,CAAC,CAAC;GAEF,OAAO;IACH,SAAS;IACT;GACJ;EACJ;EAEA,IAAI;GACA,OAAO,MAAM,UAAU,SAAS,QAAQ;IACpC,GAAG;IACH,YAAY;KACR,GAAG,KAAK;KACR,GAAI,IAAI,cAAc,CAAC;IAC3B;GACJ,CAAC;EACL,SAAS,GAAG;GACR,OAAO,KAAK,gBAAgB;IACxB,MAAM,CAAC,OAAO,IAAI;IAClB,SAAS,OAAO,OAAO,KAAK,oBAAoB,aAAa,CAAC;IAC9D,MAAM,UAAU;GACpB,CAAC,CAAC;GAEF,OAAO;IACH,SAAS;IACT;GACJ;EACJ;CACJ;CAEA,MAAM,eAAe,QAAoB,KAA8C;EACnF,MAAM,SAAyB,CAAC;EAEhC,IAAI;GACA,MAAM,UAAU,MAAM,KAAK,SAAS,QAAQ,GAAG;GAC/C,IAAI,QAAQ,SACR;GAGJ,IAAI,QAAQ,QACR,OAAO,KAAK,GAAG,QAAQ,MAAM;EAErC,SAAS,GAAG;GACR,IAAI,cAAc,CAAC,GACf,MAAM;GAMV,OAAO,KAAK,gBAAgB;IACxB,MAAM,OAAO,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;IACrC,SAAS,aAAa,CAAC;IACvB,MAAM,UAAU;GACpB,CAAC,CAAC;EACN;EAEA,MAAM,QAAQ,IAAI,YAAY,cAAc,OAAO,KAAK,oBAAoB;EAC5E,MAAM,UAAU,MAAM;EAEtB,MAAM;CACV;AACJ;;;ACzJA,IAAa,aAAb,MAAa,WAAkC;CAC3C;CAEA;CAEA,YACI,OAA4B,CAAC,GAC7B,4BAAyB,IAAI,IAAI,GACnC;EACE,KAAK,OAAO;EACZ,KAAK,YAAY;CACrB;CAEA,IAAiB,KAAa,OAAiB;EAC3C,KAAK,KAAK,OAAO;EACjB,KAAK,UAAU,OAAO,GAAG;CAC7B;CAEA,IAAiB,KAAiB;EAC9B,IAAI,OAAO,KAAK,MACZ,OAAO,KAAK,KAAK;EAGrB,MAAM,IAAI,MAAM,oBAAoB,IAAI,iBAAiB;CAC7D;CAEA,IAAI,KAAsB;EACtB,OAAO,OAAO,KAAK;CACvB;CAEA,aAAa,KAAoB;EAC7B,KAAK,UAAU,IAAI,GAAG;CAC1B;CAEA,YAAY,KAAuB;EAC/B,OAAO,KAAK,UAAU,IAAI,GAAG;CACjC;CAEA,QAAQ;EACJ,OAAO,IAAI,WAAW,EAAE,GAAG,KAAK,KAAK,GAAG,IAAI,IAAI,KAAK,SAAS,CAAC;CACnE;AACJ;;;ACjDA,SAAgB,8BACZ,QAAsC,CAAC,GACf;CACxB,OAAO;EACH,YAAY,MAAM,cAAc,CAAC;EACjC,MAAM,MAAM,QAAQ,CAAC;EACrB,MAAM,MAAM,QAAQ,IAAI,WAAW;EACnC,SAAS,MAAM,WAAW,CAAC;EAC3B,SAAS,MAAM,WAAW,CAAC;CAC/B;AACJ;;;ACbA,IAAY,sBAAL,yBAAA,qBAAA;CACH,oBAAA,aAAA;CACA,oBAAA,WAAA;;AACJ,EAAA,CAAA,CAAA;AAEA,IAAY,kBAAL,yBAAA,iBAAA;CAEH,gBAAA,kBAAA;CACA,gBAAA,kBAAA;CAGA,gBAAA,aAAA;CACA,gBAAA,kBAAA;CACA,gBAAA,mBAAA;CACA,gBAAA,mBAAA;CAGA,gBAAA,mBAAA;CACA,gBAAA,6BAAA;CAGA,gBAAA,uBAAA;CACA,gBAAA,yBAAA;CACA,gBAAA,qBAAA;CAGA,gBAAA,sBAAA;CACA,gBAAA,0BAAA;CAGA,gBAAA,oBAAA;;AACJ,EAAA,CAAA,CAAA;;;AC5BA,SAAgB,sBAAsB,OAAwD;CAC1F,OAAO,gBAAgB,KAAK;AAChC;AAEA,SAAgB,uBAAuB,OAA0D;CAC7F,OAAO,iBAAiB,KAAK;AACjC;;;ACPA,SAAgB,yBACZ,SACA,QACF;CACE,IAAI,OAAO,WAAW,aAClB,OAAO;CAGX,IAAI,OAAO,WAAW,YAClB,OAAO,OAAO,OAAO;CAGzB,IAAI,CAAC,QACD,OAAO;CAGX,OAAO,CAAC;AACZ;;;ACdA,IAAa,gCAAb,cAAmD,UAAgC;CAC/E,aAAsB;EAClB,MAAM,WAAW;EAEjB,KAAK,MACD,SACA,gBACI,EAAE,MACE,EAAE,OAAO,EACJ,IAAI,CAAC,EACL,IAAI,GAAG,CAChB,CACJ,CACJ;EAEA,KAAK,MACD,UACA,gBACI,EAAE,QAAQ,EACL,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CACJ;CACJ;AACJ;;;AC5BA,SAAgB,uBAGZ,MACoB;CACpB,OAAO;AACX;;;ACRA,IAAY,oBAAL,yBAAA,mBAAA;;;;CAIH,kBAAA,eAAA;;;;CAIA,kBAAA,UAAA;;;;CAIA,kBAAA,UAAA;;;;CAIA,kBAAA,qBAAA;;;;CAIA,kBAAA,gBAAA;;;;CAIA,kBAAA,iBAAA;;;;CAKA,kBAAA,cAAA;;;;CAKA,kBAAA,wBAAA;;AAIJ,EAAA,CAAA,CAAA;AAEA,MAAa,mBAAmB;CAC5B,SAAS;CACT,UAAU;CACV,oBAAoB;CACpB,aAAa;CACb,aAAa;CACb,iBAAiB;CACjB,0BAA0B;CAC1B,yBAAyB;CACzB,wBAAwB;AAC5B;;;AC7CA,IAAa,4BAAb,cAEU,UAA+B;CACrC,aAAsB;EAClB,MAAM,WAAW;EAEjB,KAAK,MACD,SACA,gBACI,EAAE,YAAY,CAAC,CAAC,CACpB,CACJ;EAEA,KAAK,MACD,UACA,gBACI,EAAE,QAAQ,EACL,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CACJ;CACJ;AACJ;;;ACpBA,IAAa,4BAAb,MAE8B;CAC1B;CAEA,cAAc;EACV,KAAK,YAAY,IAAI,0BAA6B;CACtD;CAEA,MAAM,WAAW,KAAkD;EAC/D,IAAI,CAAC,IAAI,KAAK,IAAA,YAAgC,GAC1C,OAAO;EAGX,IAAI,IAAI,KAAK,YAAA,YAAwC,GACjD,OAAO,IAAI,KAAK,IAAA,YAAmC;EAIvD,MAAM,OAAO,IAAI,KAAK,IAAA,YAAmC;EAEzD,IAAI,KAAK,IAAA,cAAkC,IAAI;EAC/C,IAAI,KAAK,aAAA,YAAyC;EAElD,OAAO;CACX;CAEA,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,KAAK;EAE7C,MAAM,OAAO,MAAM,KAAK,WAAW,GAAG;EACtC,IAAI,CAAC,MACD,OAAO;GACH,SAAS;GACT,QAAQ,CACJ,sBAAsB;IAClB,MAAA;IACA,SAAS;IACT,MAAM,IAAI;GACd,CAAC,CACL;EACJ;EAGJ,KAAK,SAAS,OAAO,KAAK;EAI1B,OAAO,EAAE,SAAS,yBAFH,MAAS,OAAO,KAEiB,EAAE,IAAS,GAAG,OAAO,MAAM,EAAE;CACjF;CAEA,SACI,OACF;EACE,IAAI,MAAM,QAAQ,KAAK,GAAG;GACtB,KAAK,MAAM,WAAW,OAClB,KAAK,SAAS,OAAO;GAGzB;EACJ;EAEA,IAAI,SAAS,KAAK,GAAG;GACjB,MAAM,OAAO,OAAO,KAAK,KAAK;GAC9B,KAAK,MAAM,OAAO,MAAM;IACpB,MAAM,QAAQ,MAAM;IAEpB,IAAI,SAAS,KAAK,KAAK,MAAM,QAAQ,KAAK,GAAG;KACzC,KAAK,SAAS,KAAK;KACnB;IACJ;IAEA,IACI,QAAQ,YACR,OAAO,UAAU,UACnB;KACE,MAAM,YAAY,MAAM,MAAM,sBAAsB;KACpD,IAAI,aAAa,UAAU,OAAO,KAAA,GAC9B,MAAM,OAAO,IAAI,OAAO,UAAU,IAAI,UAAU,MAAM,EAAE;IAEhE;GACJ;EACJ;CACJ;AACJ;;;ACtFA,IAAa,gCAAb,MAAuE;CACnE;CAEA;CAEA,cAAc;EACV,KAAK,YAAY,IAAI,8BAA8B;EACnD,KAAK,sBAAsB,IAAI,0BAA0B;CAC7D;CAEA,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,KAAK;EAE7C,MAAM,OAAO,MAAM,KAAK,oBAAoB,WAAW,GAAG;EAC1D,IAAI,CAAC,MACD,OAAO;GACH,SAAS;GACT,QAAQ,CACJ,sBAAsB;IAClB,MAAA;IACA,SAAS;IACT,MAAM,IAAI;GACd,CAAC,CACL;EACJ;EAUJ,MAAM,aAAa,cAAc,IAAI;EACrC,MAAM,OAAO,OAAO,KAAK,UAAU;EASnC,MAAM,SAAyB,CAAC;EAChC,KAAK,MAAM,OAAO,MAAM;GACpB,MAAM,SAAS,OAAO,MAAM,SAAS,GAAG;GAExC,IADe,OAAO,SAAS,SAAS,CAAC,QAErC,OAAO,KAAK,sBAAsB;IAC9B,MAAA;IACA,SAAS,OAAO,SACZ,iBAAiB,IAAI,cACrB,iBAAiB,IAAI;IACzB,MAAM,CAAC,GAAG,IAAI,MAAM,GAAG;GAC3B,CAAC,CAAC;EAEV;EAEA,OAAO;GACH,SAAS,OAAO,WAAW;GAC3B;EACJ;CACJ;AACJ;;;AClEA,IAAa,2BAAb,cAA8C,UAA2B;CACrE,aAAsB;EAClB,MAAM,WAAW;EAEjB,KAAK,MACD,qBACA,gBACI,EAAE,KAAK,gBAAgB,EAClB,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CACJ;EAEA,KAAK,MACD,YACA,gBACI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CACtD,CACJ;EAEA,KAAK,MACD,UACA,gBACI,EAAE,QAAQ,EACL,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CACJ;CACJ;AACJ;;;AC7BA,IAAa,2BAAb,MAAkE;CAC9D;CAEA,cAAc;EACV,KAAK,YAAY,IAAI,yBAAyB;CAClD;CAEA,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,KAAK;EAE7C,IAAI,QAAQ;EAEZ,MAAM,oBAAoB,OAAO,qBAC7B,iBAAiB;EAErB,MAAM,SAAS,IAAI,aAAa,IAAI,UAAU;EAC9C,MAAM,SAAyB,CAAC;EAEhC,KAAK,MAAM,eAAe,OAAO,UAAU;GACvC,MAAM,OAAO,CACT,GAAI,IAAI,QAAQ,CAAC,GACjB,GAAI,YAAY,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,CACjD;GAEA,MAAM,UAAU,MAAM,OAAO,SAAS,aAAa;IAC/C,GAAG;IACH;GACJ,CAAC;GAED,IAAI,QAAQ,SAAS;IACjB,IAAI,sBAAsB,iBAAiB,aACvC,OAAO;KACH,SAAS,yBAAyB,MAAM,OAAO,MAAM;KACrD,QAAQ,CAAC;IACb;IAGJ;GACJ,OAAO;IACH,IAAI,QAAQ,QACR,OAAO,KAAK,iBAAiB;KACzB,SAAS,kCAAkC,YAAY,KAAK;KAC5D,QAAQ,QAAQ,UAAU,CAAC;KAC3B;IACJ,CAAC,CAAC;IAGN,IAAI,sBAAsB,iBAAiB,WAAW;KAClD,MAAM,UAAU,yBAAyB,OAAO,OAAO,MAAM;KAC7D,OAAO;MACH;MAIA,QAAQ,UAAU,CAAC,IAAI,CACnB,iBAAiB;OACb,SAAS,8CAA8C,iBAAiB,UAAU;OAClF;OACA,MAAM,IAAI;MACd,CAAC,CACL;KACJ;IACJ;IAEA;GACJ;EACJ;EAEA,IAAI,QAAQ,GACR,OAAO,EAAE,SAAS,yBAAyB,MAAM,OAAO,MAAM,EAAE;EAGpE,MAAM,UAAU,yBAAyB,OAAO,OAAO,MAAM;EAC7D,OAAO;GACH;GACA,QAAQ,UAAU,CAAC,IAAI,CACnB,iBAAiB;IACb,SAAS,8CAA8C,iBAAiB,UAAU;IAClF,QAAQ,UAAU,CAAC;IACnB,MAAM,IAAI;GACd,CAAC,CACL;EACJ;CACJ;AACJ;;;ACzFA,SAAgB,kBACZ,OACyC;CACzC,OAAO,MAAM,SAAA;AACjB;;;ACHA,IAAa,sBAAb,cAAyC,UAAsB;CAC3D,aAAsB;EAClB,MAAM,WAAW;EAEjB,KAAK,MAAM,SAAS,gBAChB,EAAE,KAAK,EACF,GAAG,EAAE,IAAI,KAAK,CAAC,EACf,GAAG,EAAE,OAAO,CAAC,EACb,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CAAC;EACD,KAAK,MAAM,OAAO,gBACd,EAAE,KAAK,EACF,GAAG,EAAE,IAAI,KAAK,CAAC,EACf,GAAG,EAAE,OAAO,CAAC,EACb,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CAAC;EAED,KAAK,MAAM,UAAU,gBACjB,EAAE,QAAQ,EACL,GAAG,EAAE,UAAU,CAAC,EAChB,GAAG,EAAE,KAAK,CAAC,EACX,SAAS,CAClB,CAAC;CACL;AACJ;;;AC5BA,SAASC,gBAAc,OAAa;CAChC,OAAO,IAAI,KAAK,MAAM,YAAY,GAAG,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC;AAC1E;AAEA,SAASC,SAAO,OAAsC;CAClD,IAAI,OAAO,UAAU,UACjB,OAAO,IAAI,KAAK,KAAK;CAGzB,IAAI,OAAO,UAAU,UACjB,OAAO,IAAI,KAAK,KAAK;CAGzB,OAAO;AACX;AAEA,IAAa,sBAAb,MAA6D;CACzD;CAEA,cAAc;EACV,KAAK,YAAY,IAAI,oBAAoB;CAC7C;CAEA,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,KAAK;EAE7C,IAAI;EAEJ,IAAI,IAAI,KAAK,IAAA,MAA0B,GACnC,IAAI,IAAI,KAAK,YAAA,MAAkC,GAC3C,MAAM,IAAI,KAAK,IAAA,MAAgC;OAC5C;GAEH,MAAMD,gBAAcC,SAAO,IAAI,KAAK,IAAA,MAA0B,CAAC,CAAC;GAEhE,IAAI,KAAK,IAAA,QAA4B,GAAG;GACxC,IAAI,KAAK,aAAA,MAAmC;EAChD;OAEA,MAAMD,gCAAc,IAAI,KAAK,CAAC;EAGlC,IAAI,OAAO,OAAO;GACd,MAAM,QAAQA,gBAAcC,SAAO,OAAO,KAAK,CAAC;GAChD,IAAI,MAAM,OACN,OAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,MAAM,EAAE;EAEzE;EAEA,IAAI,OAAO,KAAK;GACZ,MAAM,MAAMD,gBAAcC,SAAO,OAAO,GAAG,CAAC;GAC5C,IAAI,MAAM,KACN,OAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,MAAM,EAAE;EAEzE;EAEA,OAAO,EAAE,SAAS,yBAAyB,MAAM,OAAO,MAAM,EAAE;CACpE;AACJ;;;AC1DA,IAAa,8BAAb,cAAiD,UAA8B;CAC3E,aAAsB;EAClB,MAAM,WAAW;EAEjB,KAAK,MACD,QACA,gBACI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,CAC7B,CACJ;EAEA,KAAK,MACD,MACA,gBACI,EAAE,KAAK,CACX,CACJ;EAEA,KAAK,MACD,YACA,gBACI,EAAE,KAAK,EACF,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CACJ;EAEA,KAAK,MACD,WACA,gBACI,EAAE,KAAK,EACF,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CACJ;EAEA,KAAK,MACD,aACA,gBACI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EACpB,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CACJ;CACJ;AACJ;;;ACjDA,IAAa,0BAAb,cAA6C,UAA0B;CACnE,aAAsB;EAClB,KAAK,MACD,SACA,gBACI,EAAE,MAAM,EAAE,OAAO,CAAC,EACb,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CACJ;EAEA,KAAK,MACD,UACA,gBACI,EAAE,QAAQ,EACL,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CACJ;CACJ;AACJ;;;ACpBA,IAAa,0BAAb,MAAiE;CAC7D;CAEA;CAEA,cAAc;EACV,KAAK,YAAY,IAAI,wBAAwB;EAC7C,KAAK,gBAAgB,IAAI,4BAA4B;CACzD;CAEA,MAAM,WAAW,KAAmE;EAChF,IAAI,CAAC,IAAI,KAAK,IAAI,UAAU,GACxB,OAAO;EAGX,IAAI,IAAI,KAAK,YAAY,UAAU,GAC/B,OAAO,IAAI,KAAK,IAAwB,UAAU;EAGtD,MAAM,OAAO,MAAM,KAAK,cAAc,IAAI,IAAI,KAAK,IAAI,UAAU,CAAC;EAElE,IAAI,KAAK,IAAI,YAAY,IAAI;EAC7B,IAAI,KAAK,aAAa,UAAU;EAEhC,OAAO;CACX;CAEA,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,KAAK;EAE7C,MAAM,OAAO,MAAM,KAAK,WAAW,GAAG;EACtC,IAAI,CAAC,MACD,OAAO;GACH,SAAS;GACT,QAAQ,CACJ,sBAAsB;IAClB,MAAA;IACA,SAAS;IACT,MAAM,IAAI;GACd,CAAC,CACL;EACJ;EAGJ,IAAI,CAAC,OAAO,SAAS,OAAO,MAAM,WAAW,GAKzC,OAAO,EAAE,SAAS,KAAK;EAG3B,MAAM,cAAc,OAAO,MAAM,SAAS,KAAK,IAAI;EACnD,IAAI,aACA,OAAO,EAAE,SAAS,yBAAyB,aAAa,OAAO,MAAM,EAAE;EAG3E,OAAO;GACH,SAAS,yBAAyB,aAAa,OAAO,MAAM;GAC5D,QAAQ,CACJ,sBAAsB;IAClB,MAAA;IACA,SAAS,YAAY,KAAK,KAAK;IAC/B,MAAM,IAAI;GACd,CAAC,CACL;EACJ;CACJ;AACJ;;;ACzEA,IAAa,mCAAb,cAAsD,UAAmC;CACrF,aAAsB,CAEtB;AACJ;;;ACHA,IAAa,mCAAb,MAA0E;CACtE;CAEA,cAAc;EACV,KAAK,YAAY,IAAI,iCAAiC;CAC1D;CAEA,MAAM,SAAS,OAA6D;EAIxE,OAAO,EAAE,SAAS,yBAAyB,OAAM,MAH5B,KAAK,UAAU,IAAI,KAAK,GAGW,MAAM,EAAE;CACpE;AACJ;;;ACXA,IAAa,4BAAb,cAA+C,UAA4B;CACvE,aAAsB;EAClB,MAAM,WAAW;EAEjB,KAAK,MACD,qBACA,gBACI,EAAE,KAAK,gBAAgB,EAClB,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CACJ;EAEA,KAAK,MACD,kBACA,gBACI,EAAE,OAAO,EACJ,IAAI,CAAC,EACL,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAC7B,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CACJ;EACA,KAAK,MACD,yBACA,gBACI,EAAE,QAAQ,EACL,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CACJ;EACA,KAAK,MACD,4BACA,gBACI,EAAE,QAAQ,EACL,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CACJ;EAEA,KAAK,MACD,6BACA,gBACI,EAAE,QAAQ,EACL,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CACJ;EAEA,KAAK,MACD,UACA,gBACI,EAAE,QAAQ,EACL,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CACJ;CACJ;AACJ;;;AC7DA,IAAa,4BAAb,MAAmE;CAC/D;CAEA;CAEA;CAEA,cAAc;EACV,KAAK,YAAY,IAAI,0BAA0B;EAC/C,KAAK,oBAAoB,IAAI,wBAAwB;EACrD,KAAK,sBAAsB,IAAI,0BAA0B;CAC7D;CAEA,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,KAAK;EAE7C,MAAM,WAAW,MAAM,KAAK,kBAAkB,WAAW,GAAG;EAC5D,IAAI,CAAC,UACD,OAAO;GACH,SAAS;GACT,QAAQ,CACJ,sBAAsB;IAClB,MAAA;IACA,SAAS;IACT,MAAM,IAAI;GACd,CAAC,CACL;EACJ;EAGJ,MAAM,aAAa,MAAM,KAAK,oBAAoB,WAAW,GAAG;EAChE,IAAI,CAAC,YACD,OAAO;GACH,SAAS;GACT,QAAQ,CACJ,sBAAsB;IAClB,MAAA;IACA,SAAS;IACT,MAAM,IAAI;GACd,CAAC,CACL;EACJ;EAIJ,KAD+B,OAAO,6BAA6B,SAG/D,SAAS,aACT,SAAS,cAAc,UAMvB,OAAO,EAAE,SAAS,KAAK;EAG3B,IAAI;EACJ,IAAI,OAAO,gBACP,IAAI,MAAM,QAAQ,OAAO,cAAc,GACnC,OAAO,OAAO;OAEd,OAAO,CAAC,OAAO,cAAc;OAE9B;GACH,OAAO;IACH;IACA;IACA;IACA;GACJ;GAEA,OAAO,oBAAoB,iBAAiB;EAChD;EAGA,IAAI,EAD0B,OAAO,yBAAyB,OAClC;GACxB,MAAM,eAAe,OAAO,KAAK,UAAU;GAC3C,MAAM,YAAuB,CAAC;GAC9B,KAAK,MAAM,eAAe,cAAc;IACpC,IAAI,WAAqB;IAEzB,KAAK,MAAM,OAAO,MACd,IACI,gBAAgB,OAChB,YAAY,SAAS,GAAG,GAC1B;KACE,WAAW;KACX;IACJ;IAGJ,IAAI,UACA,UAAU,KAAK,WAAW;GAElC;GAEA,IAAI,UAAU,SAAS,GACnB,KAAK,KAAK,GAAG,SAAS;EAE9B;EAEA,IAAI,QAAQ;EACZ,IAAI,YAAY;EAEhB,KAAK,MAAM,OAAO,MAAM;GACpB,IAAI,CAAC,eAAe,YAAY,GAAG,GAC/B;GAGJ,YAAY;GAEZ,IAAI,UAAoB;GAExB,MAAM,iBAAiB,WAAW;GAElC,IACI,mBAAmB,QACnB,OAAO,0BAEP,UAAU;QACP,IACH,mBAAmB,SAAS,WAC5B,mBAAmB,SAAS,WAE5B,UAAU;GAGd,IAAI,SAAS;IACT,IAAI,OAAO,sBAAsB,iBAAiB,aAC9C,OAAO,EAAE,SAAS,yBAAyB,MAAM,OAAO,MAAM,EAAE;IAGpE;GACJ,OAAO;IACH,IAAI,OAAO,sBAAsB,iBAAiB,WAC9C,OAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,MAAM,EAAE;IAGrE;GACJ;EACJ;EAEA,IAAI,CAAC,WAKD,OAAO,EAAE,SAAS,KAAK;EAG3B,OAAO,EAAE,SAAS,yBAAyB,QAAQ,GAAG,OAAO,MAAM,EAAE;CACzE;AACJ;;;ACnKA,IAAY,qBAAL,yBAAA,oBAAA;CACH,mBAAA,WAAA;CACA,mBAAA,YAAA;CACA,mBAAA,aAAA;CACA,mBAAA,YAAA;;AACJ,EAAA,CAAA,CAAA;;;ACHA,SAAgB,uBACZ,UACF;CACE,OAAO,aAAA,YACH,aAAA,aACA,aAAA;AACR;AAEA,SAAgB,wBACZ,UACF;CACE,OAAO,aAAA,aACP,aAAA;AACJ;AAEA,SAAgB,uBACZ,UACF;CACE,OAAO,aAAA;AACX;;;ACfA,IAAa,sBAAb,cAAyC,UAAsB;CAC3D,aAAsB;EAClB,MAAM,WAAW;EAEjB,KAAK,MAAM,eAAe,gBACtB,EAAE,OAAO,EACJ,IAAI,CAAC,EAAE,IAAI,CAAC,EACZ,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CAAC;EACD,KAAK,MAAM,gBAAgB,gBACvB,EAAE,OAAO,EACJ,IAAI,CAAC,EACL,IAAI,EAAE,EACN,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CAAC;EACD,KAAK,MAAM,eAAe,gBACtB,EAAE,OAAO,EACJ,IAAI,CAAC,EACL,IAAI,GAAG,EACP,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CAAC;EAED,KAAK,MAAM,SAAS,gBAChB,EAAE,KAAK,EACF,GAAG,EAAE,IAAI,SAAS,CAAC,EACnB,GAAG,EAAE,IAAI,KAAK,CAAC,EACf,GAAG,EAAE,OAAO,CAAC,EACb,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CAAC;EACD,KAAK,MAAM,OAAO,gBACd,EAAE,KAAK,EACF,GAAG,EAAE,IAAI,SAAS,CAAC,EACnB,GAAG,EAAE,IAAI,KAAK,CAAC,EACf,GAAG,EAAE,OAAO,CAAC,EACb,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CAAC;EAED,KAAK,MACD,YACA,gBACI,EAAE,KAAK,kBAAkB,EACpB,GAAG,EAAE,KAAK,CAAC,EACX,GAAG,EAAE,UAAU,CAAC,EAChB,SAAS,CAClB,CACJ;EAEA,KAAK,MACD,UACA,gBACI,EAAE,QAAQ,EACL,GAAG,EAAE,UAAU,CAAC,EAChB,GAAG,EAAE,KAAK,CAAC,EACX,SAAS,CAClB,CACJ;CACJ;AACJ;;;ACnEA,MAAM,YAAY;AAElB,SAAS,cAAc,OAAa,SAAgB;CAChD,MAAM,OAAO,UAAU,IAAI,KAAK,OAAO,oBAAI,IAAI,KAAK;CACpD,KAAK,SAAS,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC;CAElD,OAAO;AACX;AAEA,SAAS,OACL,OACA,SACK;CACL,IAAI,OAAO,UAAU,UAAU;EAC3B,IAAI,UAAU,KAAK,KAAK,GAAG;GACvB,MAAM,QAAQ,MAAM,MAAM,GAAG;GAE7B,MAAM,aAAa,OAAO,MAAM,EAAE;GAClC,MAAM,eAAe,OAAO,MAAM,EAAE;GACpC,MAAM,eAAe,MAAM,OAAO,KAAA,IAAY,OAAO,MAAM,EAAE,IAAI;GAEjE,IACI,OAAO,SAAS,UAAU,KAC1B,OAAO,SAAS,YAAY,KAC5B,OAAO,SAAS,YAAY,GAC9B;IACE,MAAM,OAAO,UAAU,IAAI,KAAK,OAAO,oBAAI,IAAI,KAAK;IACpD,KAAK,SAAS,YAAY,cAAc,cAAc,CAAC;IAEvD,OAAO;GACX;EACJ;EAEA,OAAO,IAAI,KAAK,KAAK;CACzB;CAEA,IAAI,OAAO,UAAU,UACjB,OAAO,IAAI,KAAK,KAAK;CAGzB,OAAO;AACX;AAEA,IAAa,sBAAb,MAA6D;CACzD;CAEA,cAAc;EACV,KAAK,YAAY,IAAI,oBAAoB;CAC7C;CAEA,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,KAAK;EAE7C,IAAI;EAEJ,IAAI,IAAI,KAAK,IAAA,MAA0B,GACnC,IAAI,IAAI,KAAK,YAAA,MAAkC,GAC3C,MAAM,IAAI,KAAK,IAAA,MAAgC;OAC5C;GAEH,MAAM,OAAO,IAAI,KAAK,IAAA,MAA0B,CAAC;GAEjD,IAAI,KAAK,IAAA,QAA4B,GAAG;GACxC,IAAI,KAAK,aAAA,MAAmC;EAChD;OAEA,sBAAM,IAAI,KAAK;EAGnB,IAAI,OAAO,OAAO;GACd,MAAM,QAAQ,cAAc,OAAO,OAAO,OAAO,GAAG,GAAG,GAAG;GAC1D,IAAI,MAAM,OACN,OAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,MAAM,EAAE;EAEzE;EAEA,IAAI,OAAO,KAAK;GACZ,MAAM,MAAM,cAAc,OAAO,OAAO,KAAK,GAAG,GAAG,GAAG;GACtD,IAAI,MAAM,KACN,OAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,MAAM,EAAE;EAEzE;EAEA,IAAI,OAAO,UAAU;GACjB,IACI,uBAAuB,OAAO,QAAQ,KACtC,OAAO;QAEH,IAAI,OAAO,MAAM,OAAO,aACxB,OAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,MAAM,EAAE;GAAA;GAIzE,IACI,wBAAwB,OAAO,QAAQ,KACvC,OAAO;QAEH,IAAI,QAAQ,MAAM,OAAO,cACzB,OAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,MAAM,EAAE;GAAA;GAIzE,IACI,uBAAuB,OAAO,QAAQ,KACtC,OAAO,aACT;IACE,MAAM,QAAQ,IAAI,KAAK,IAAI,YAAY,GAAG,GAAG,CAAC;IAC9C,MAAM,OAAQ,IAAI,QAAQ,IAAI,MAAM,QAAQ,KACtC,MAAM,kBAAkB,IAAI,IAAI,kBAAkB,KAAK,KAAK;IAKlE,IAFkB,KAAK,MAAM,QADd,MAAO,KAAK,KAAK,GAGpB,MAAM,OAAO,aACrB,OAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,MAAM,EAAE;GAEzE;EACJ;EAEA,OAAO,EAAE,SAAS,yBAAyB,MAAM,OAAO,MAAM,EAAE;CACpE;AACJ;;;AC7HA,SAAgB,qBAIZ,MACA,MACqB;CACrB,OAAO;EACH,GAAG;EACH;CACJ;AACJ;;;ACFA,MAAa,0BAA0B;gBACJ,IAAI,yBAAyB;iBAC5B,IAAI,0BAA0B;qBACzB,IAAI,8BAA8B;WAC7C,IAAI,oBAAoB;eACpB,IAAI,wBAAwB;wBAClB,IAAI,iCAAiC;iBAC5C,IAAI,0BAA0B;WACrC,IAAI,oBAAoB;AACtD;;;ACFA,IAAa,sBAAb,MAAiE;CAC7D;CAEA;CAEA;CAEA;CAIA,YAAY,SAAqC;EAC7C,KAAK,WAAW,QAAQ;EAExB,KAAK,WAAW,QAAQ,YAAY;EACpC,KAAK,UAAU,QAAQ,WAAW;EAElC,IAAI,QAAQ,cACR,KAAK,eAAe,QAAQ;OAE5B,KAAK,eAAe,IAAI,aAAa,uBAAuB;CAEpE;CAIA,MAAgB,QACZ,OACA,YAGI,CAAC,GACmC;EACxC,OAAO,KAAK,SAAS,QAAQ;GACzB,MAAM;GACN,UAAU,UAAU,YAAY,KAAK;GACrC,SAAS,UAAU,WAAW,KAAK;EACvC,CAAC;CACL;CAIA,MAAM,SAAS,KAAkD;EAC7D,IAAI,CAAC,MAAM,QAAQ,IAAI,IAAI,GAAG;GAC1B,MAAM,KAAK,SAAS;IAChB,GAAG;IACH,MAAM,CAAC,IAAI,IAAI;GACnB,CAAC;GACD;EACJ;EAEA,MAAM,EAAE,UAAU,CAAC,MAAM;EAEzB,MAAM,mBAAmB,QAAQ,oBAC7B,iBAAiB;EAErB,MAAM,SAAmB,CAAC;EAE1B,IAAI,QAAQ;EAEZ,MAAM,WAAW,IAAI,SAAS,IAAI,WAAW;EAE7C,KAAK,MAAM,QAAQ,IAAI,MAAM;GACzB,MAAM,UAAU,MAAM,KAAK,QAAQ,MAAM;IACrC,SAAS,IAAI;IACb,UAAU,IAAI;GAClB,CAAC;GACD,IAAI,CAAC,SAAS;IACV,OAAO,KAAK,gBAAgB;KACxB,MAAM,UAAU;KAChB,SAAS,OAAO,KAAK;KACrB,MAAM,CAAC,IAAI;IACf,CAAC,CAAC;IAEF,IAAI,qBAAqB,iBAAiB,WAAW;KACjD,MAAM,QAAQ,gBAAgB,iBAAiB,IAAI,IAAI;KACvD,MAAM,UAAU,MAAM;KACtB,MAAM;IACV;IAEA;GACJ;GAEA,MAAM,WAAW,QAAQ,YAAY,CAAC;GACtC,IAAI,SAAS,WAAW,GAAG;IACvB,IAAI,qBAAqB,iBAAiB,aACtC;IAGJ;IAEA;GACJ;GAEA,MAAM,OAAO,SAAS,MAAM;GAC5B,KAAK,IAAA,qBAA0C,OAAO;GAKtD,MAAM,kBAAoC;IACtC,MAAA;IACA,mBAL2B,QAAQ,WAAW,qBAC9C,iBAAiB;IAKjB,UAAU;GACd;GAEA,MAAM,mBAAmB,MAAM,KAAK,aAAa,SAC7C,iBACA,8BAA8B;IAC1B,SAAS,QAAQ;IACjB,SAAS,QAAQ;IACjB;GACJ,CAAC,CACL;GAEA,IAAI,iBAAiB,SAAS;IAC1B,IAAI,qBAAqB,iBAAiB,aACtC;IAGJ;GACJ,OAAO;IACH,OAAO,KAAK,uBAAuB;KAC/B,MAAM,UAAU;KAChB,QAAQ,iBAAiB,UAAU,CAAC;KACpC,SAAS,OAAO,QAAQ,WAAW,KAAK;KACxC,MAAM,CAAC,QAAQ,WAAW,IAAI;IAClC,CAAC,CAAC;IAEF,IAAI,qBAAqB,iBAAiB,WAAW;KACjD,MAAM,QAAQ,gBAAgB,iBAAiB,QAAQ,WAAW,IAAI;KACtE,MAAM,UAAU,MAAM;KACtB,MAAM;IACV;IAEA;GACJ;EACJ;EAEA,IAAI,QAAQ,GACR;EAGJ,IAAI,OAAO,WAAW,GAClB,MAAM,gBAAgB,UAAU,IAAI,IAAI;OACrC;GACH,MAAM,QAAQ,gBAAgB,iBAAiB,IAAI,IAAI;GACvD,MAAM,UAAU,MAAM;GACtB,MAAM;EACV;CACJ;CAEA,MAAM,cAAc,KAAkD;EAClE,OAAO,KAAK,SAAS;GACjB,GAAG;GACH,SAAS;IACL,GAAI,IAAI,WAAW,CAAC;IACpB,kBAAkB,iBAAiB;GACvC;EACJ,CAAC;CACL;CAIA,MAAM,YAAY,KAAkD;EAChE,OAAO,KAAK,SAAS;GACjB,GAAG;GACH,SAAS;IACL,GAAI,IAAI,WAAW,CAAC;IACpB,kBAAkB;;;;IAIlB;GACJ;EACJ,CAAC;CACL;CAEA,MAAM,iBAAiB,KAAkD;EACrE,OAAO,KAAK,YAAY;GACpB,GAAG;GACH,SAAS;IACL,GAAI,IAAI,WAAW,CAAC;IACpB,kBAAkB,iBAAiB;GACvC;EACJ,CAAC;CACL;AACJ"}
+{"version":3,"file":"index.mjs","names":["DecisionStrategy","normalizeDate","toDate"],"sources":["../src/permission/error/module.ts","../src/permission/error/check.ts","../src/permission/helpers/equal.ts","../src/permission/helpers/key.ts","../src/permission/helpers/merge.ts","../src/permission/provider/memory.ts","../src/policy/error/module.ts","../src/policy/error/check.ts","../src/policy/engine/module.ts","../src/policy/data.ts","../src/policy/evaluation/context/define.ts","../src/policy/issue/constants.ts","../src/policy/issue/define.ts","../src/policy/helpers/invert.ts","../src/policy/built-in/attribute-names/validator.ts","../src/policy/built-in/attributes/define.ts","../src/policy/built-in/constants.ts","../src/policy/built-in/attributes/validator.ts","../src/policy/built-in/attributes/evaluator.ts","../src/policy/built-in/attribute-names/evaluator.ts","../src/policy/built-in/composite/validator.ts","../src/policy/built-in/composite/evaluator.ts","../src/policy/built-in/composite/helper.ts","../src/policy/built-in/date/validator.ts","../src/policy/built-in/date/evaluator.ts","../src/policy/built-in/identity/data/validator.ts","../src/policy/built-in/identity/validator.ts","../src/policy/built-in/identity/evaluator.ts","../src/policy/built-in/permission-binding/validator.ts","../src/policy/built-in/permission-binding/module.ts","../src/policy/built-in/realm-match/validator.ts","../src/policy/built-in/realm-match/evaluator.ts","../src/policy/built-in/time/constants.ts","../src/policy/built-in/time/helpers.ts","../src/policy/built-in/time/validator.ts","../src/policy/built-in/time/evaluator.ts","../src/policy/built-in/define.ts","../src/policy/constants.ts","../src/permission/evaluator/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { AuthupErrorOptions } from '@authup/errors';\nimport { AuthupError, ErrorCode, markInstanceof } from '@authup/errors';\nimport type { PolicyIssue } from '../../policy';\n\nexport const PERMISSION_ERROR_INSTANCE = Symbol.for('@authup/access/PermissionError');\n\nexport class PermissionError extends AuthupError {\n    constructor(options: AuthupErrorOptions = {}) {\n        super({\n            ...options,\n            message: options.message || 'A permission error occurred.',\n            code: options.code || ErrorCode.PERMISSION_DENIED,\n        });\n        markInstanceof(this, PERMISSION_ERROR_INSTANCE);\n    }\n\n    addIssue(data: PolicyIssue) {\n        this.issues.push(data);\n    }\n\n    addIssues(data: PolicyIssue[]) {\n        this.issues.push(...data);\n    }\n\n    static notFound(name: string) {\n        return new PermissionError({\n            message: `The permission ${name} was not found.`,\n            code: ErrorCode.PERMISSION_NOT_FOUND,\n        });\n    }\n\n    static denied(name: string) {\n        return new PermissionError({\n            message: `The permission ${name} has not been granted.`,\n            code: ErrorCode.PERMISSION_DENIED,\n        });\n    }\n\n    static deniedAll(names: string[]) {\n        return new PermissionError({\n            message: `None of the permissions ${names.join(', ')} has been granted.`,\n            code: ErrorCode.PERMISSION_DENIED,\n        });\n    }\n\n    static evaluationFailed(name: string | string[]) {\n        if (Array.isArray(name)) {\n            return new PermissionError({\n                message: `The evaluation of permissions ${name.join(', ')} failed`,\n                code: ErrorCode.PERMISSION_EVALUATION_FAILED,\n            });\n        }\n\n        return new PermissionError({\n            message: `The evaluation of permission ${name} failed`,\n            code: ErrorCode.PERMISSION_EVALUATION_FAILED,\n        });\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode, hasInstanceof, isAuthupError } from '@authup/errors';\nimport { PERMISSION_ERROR_INSTANCE, type PermissionError } from './module';\n\nexport function isPermissionError(input: unknown): input is PermissionError {\n    if (hasInstanceof(input, PERMISSION_ERROR_INSTANCE)) {\n        return true;\n    }\n\n    if (!isAuthupError(input)) {\n        return false;\n    }\n\n    return input.code === ErrorCode.PERMISSION_NOT_FOUND ||\n        input.code === ErrorCode.PERMISSION_DENIED ||\n        input.code === ErrorCode.PERMISSION_EVALUATION_FAILED;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PermissionPolicyBinding } from '../types';\n\nexport function isPermissionPolicyBindingEqual(a: PermissionPolicyBinding, b: PermissionPolicyBinding): boolean {\n    if (a.permission.name !== b.permission.name) {\n        return false;\n    }\n\n    if ((a.permission.realm_id ?? null) !== (b.permission.realm_id ?? null)) {\n        return false;\n    }\n\n    if ((a.permission.client_id ?? null) !== (b.permission.client_id ?? null)) {\n        return false;\n    }\n\n    return true;\n}\n","/*\n * Copyright (c) 2025-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\n\nimport type { BasePermission } from '../types.ts';\n\nfunction formatKeySegment(value?: string | null): string {\n    return value || '*';\n}\n\nexport function buildPermissionKey(\n    input: BasePermission,\n) {\n    return `${formatKeySegment(input.realm_id)}/${formatKeySegment(input.client_id)}/${input.name}`;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { DecisionStrategy } from '@authup/kit';\nimport type { BasePolicy } from '../../policy';\nimport type { PermissionPolicyBinding } from '../types';\nimport { buildPermissionKey } from './key';\n\ntype CompositePolicy = BasePolicy & {\n    decision_strategy?: `${DecisionStrategy}`,\n    children: BasePolicy[],\n};\n\nexport function mergePermissionPolicyBindings(input: PermissionPolicyBinding[]) : PermissionPolicyBinding[] {\n    const grouped : Record<string, PermissionPolicyBinding[]> = input\n        .reduce((previous, current) => {\n            const key = buildPermissionKey(current.permission);\n            if (!previous[key]) {\n                previous[key] = [];\n            }\n\n            previous[key].push(current);\n\n            return previous;\n        }, {} as Record<string, PermissionPolicyBinding[]>);\n\n    const output : PermissionPolicyBinding[] = [];\n    const keys = Object.keys(grouped);\n    for (const key of keys) {\n        const group = grouped[key]!;\n        const first = group[0]!;\n\n        if (group.length === 1) {\n            output.push(first);\n            continue;\n        }\n\n        const children : BasePolicy[] = [];\n\n        for (const element of group) {\n            if (!element.policies || element.policies.length === 0) {\n                continue;\n            }\n\n            const policy: CompositePolicy = {\n                type: 'composite',\n                decision_strategy: element.permission.decision_strategy || DecisionStrategy.UNANIMOUS,\n                children: element.policies,\n            };\n\n            children.push(policy);\n        }\n\n        let mergedPolicies: BasePolicy[] | undefined;\n\n        if (\n            children.length > 0 &&\n            children.length === group.length\n        ) {\n            const policy: CompositePolicy = {\n                type: 'composite',\n                decision_strategy: DecisionStrategy.AFFIRMATIVE,\n                children,\n            };\n\n            mergedPolicies = [policy];\n        }\n\n        output.push({\n            permission: {\n                ...first.permission,\n                decision_strategy: DecisionStrategy.AFFIRMATIVE,\n            },\n            policies: mergedPolicies,\n        });\n    }\n\n    return output;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildPermissionKey, mergePermissionPolicyBindings } from '../helpers';\nimport type { PermissionPolicyBinding } from '../types';\nimport type { IPermissionProvider, PermissionGetOptions } from './types';\n\nexport class PermissionMemoryProvider implements IPermissionProvider {\n    protected items : Record<string, PermissionPolicyBinding> = {};\n\n    constructor(items: PermissionPolicyBinding[] = []) {\n        this.setMany(items);\n    }\n\n    async findOne(\n        options: PermissionGetOptions,\n    ): Promise<PermissionPolicyBinding | null> {\n        const key = buildPermissionKey({\n            name: options.name,\n            client_id: options.clientId,\n            realm_id: options.realmId,\n        });\n\n        const entry = this.items[key];\n        if (entry) {\n            return entry;\n        }\n\n        return null;\n    }\n\n    setMany(input: PermissionPolicyBinding[]) {\n        this.items = mergePermissionPolicyBindings(input)\n            .reduce((prev, current) => {\n                const key = buildPermissionKey(current.permission);\n                prev[key] = current;\n                return prev;\n            }, {} as Record<string, PermissionPolicyBinding>);\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AuthupError, ErrorCode, markInstanceof } from '@authup/errors';\nimport type { PolicyIssue } from '../issue';\n\nexport const POLICY_ERROR_INSTANCE = Symbol.for('@authup/access/PolicyError');\n\nexport class PolicyError extends AuthupError {\n    constructor(message?: string, code?: string | null) {\n        super({\n            message,\n            code: code ?? undefined,\n        });\n        markInstanceof(this, POLICY_ERROR_INSTANCE);\n    }\n\n    addIssue(data: PolicyIssue) {\n        this.issues.push(data);\n    }\n\n    addIssues(data: PolicyIssue[]) {\n        this.issues.push(...data);\n    }\n\n    static evaluatorNotFound(type: string) {\n        return new PolicyError(\n            `No evaluator is registered to handle the policy: ${type}`,\n            ErrorCode.POLICY_EVALUATOR_NOT_FOUND,\n        );\n    }\n\n    static evaluatorNotProcessable() {\n        return new PolicyError(\n            'The evaluator can not process the policy.',\n            ErrorCode.POLICY_EVALUATOR_NOT_PROCESSABLE,\n        );\n    }\n\n    static evaluatorContextInvalid() {\n        return new PolicyError(\n            'The evaluator context is not valid.',\n            ErrorCode.POLICY_EVALUATOR_CONTEXT_INVALID,\n        );\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode, hasInstanceof, isAuthupError } from '@authup/errors';\nimport { POLICY_ERROR_INSTANCE, type PolicyError } from './module';\n\nexport function isPolicyError(input: unknown): input is PolicyError {\n    if (hasInstanceof(input, POLICY_ERROR_INSTANCE)) {\n        return true;\n    }\n\n    if (!isAuthupError(input)) {\n        return false;\n    }\n\n    return input.code === ErrorCode.POLICY_EVALUATOR_NOT_FOUND ||\n        input.code === ErrorCode.POLICY_EVALUATOR_NOT_PROCESSABLE ||\n        input.code === ErrorCode.POLICY_EVALUATOR_CONTEXT_INVALID;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '@authup/errors';\nimport { defineIssueItem } from 'validup';\nimport type {\n    IPolicyEvaluator,\n    PolicyEvaluationContext,\n    PolicyEvaluationResult,\n    PolicyEvaluators,\n} from '../evaluation';\nimport type { PolicyIssue } from '../issue';\nimport type { IPolicyEngine } from './types.ts';\nimport { PolicyError, isPolicyError } from '../error';\nimport type { BasePolicy } from '../types.ts';\n\n// Cross-realm-safe extraction of an error message from an unknown thrown\n// value. `instanceof Error` is unreliable across module boundaries (different\n// realms, dual-bundled packages), so we duck-type on the `message` shape.\nfunction errorMessage(value: unknown): string {\n    if (\n        typeof value === 'object' &&\n        value !== null &&\n        'message' in value &&\n        typeof (value as { message: unknown }).message === 'string'\n    ) {\n        return (value as { message: string }).message;\n    }\n    return String(value);\n}\n\n/**\n * The policy engine is a component that interprets defined policies and makes decisions\n * on whether to allow or deny a particular access.\n */\nexport class PolicyEngine implements IPolicyEngine {\n    protected evaluators : Record<string, IPolicyEvaluator>;\n\n    constructor(evaluators: PolicyEvaluators = {}) {\n        this.evaluators = evaluators;\n    }\n\n    public registerEvaluator(\n        type: string,\n        evaluator: IPolicyEvaluator,\n    ) : void {\n        this.evaluators[type] = evaluator;\n    }\n\n    public registerEvaluators(evaluators: PolicyEvaluators) {\n        const keys = Object.keys(evaluators);\n        for (const key of keys) {\n            this.registerEvaluator(key, evaluators[key]!);\n        }\n    }\n\n    /**\n     * @param policy\n     * @param ctx\n     */\n    async evaluate(policy: BasePolicy, ctx: PolicyEvaluationContext) : Promise<PolicyEvaluationResult> {\n        // Infrastructure errors (no type, no evaluator, evaluator threw) MUST\n        // fail closed regardless of `policy.invert`. Inverting an error path\n        // would silently grant access on misconfiguration — with `invert: true`\n        // an unregistered policy type would return success: true.\n        if (!policy.type) {\n            return {\n                success: false,\n                issues: [\n                    defineIssueItem({\n                        path: [],\n                        message: 'The policy can not be handled by any evaluator.',\n                        code: ErrorCode.POLICY_EVALUATOR_NOT_FOUND,\n                    }),\n                ],\n            };\n        }\n        // When a policy is filtered out via include/exclude, treat it as a\n        // neutral pass — do NOT apply `invert`. Inversion only makes sense\n        // for an actual evaluation outcome; skipping a policy because it's\n        // outside the current context's scope is not an outcome.\n        if (\n            ctx.exclude &&\n            ctx.exclude.length > 0 &&\n            ctx.exclude.includes(policy.type)\n        ) {\n            return { success: true };\n        }\n\n        if (\n            ctx.include &&\n            ctx.include.length > 0 &&\n            !ctx.include.includes(policy.type)\n        ) {\n            return { success: true };\n        }\n\n        const issues : PolicyIssue[] = [];\n\n        const evaluator = this.evaluators[policy.type];\n        if (!evaluator) {\n            issues.push(defineIssueItem({\n                path: [policy.type],\n                message: `The policy ${policy.type} can not be handled by any evaluator.`,\n                code: ErrorCode.POLICY_EVALUATOR_NOT_FOUND,\n            }));\n\n            return {\n                success: false,\n                issues,\n            };\n        }\n\n        try {\n            return await evaluator.evaluate(policy, {\n                ...ctx,\n                evaluators: {\n                    ...this.evaluators,\n                    ...(ctx.evaluators || {}),\n                },\n            });\n        } catch (e) {\n            issues.push(defineIssueItem({\n                path: [policy.type],\n                message: `The ${policy.type} evaluator threw: ${errorMessage(e)}`,\n                code: ErrorCode.POLICY_EVALUATOR_NOT_PROCESSABLE,\n            }));\n\n            return {\n                success: false,\n                issues,\n            };\n        }\n    }\n\n    async evaluateOrFail(policy: BasePolicy, ctx: PolicyEvaluationContext) : Promise<void> {\n        const issues : PolicyIssue[] = [];\n\n        try {\n            const outcome = await this.evaluate(policy, ctx);\n            if (outcome.success) {\n                return;\n            }\n\n            if (outcome.issues) {\n                issues.push(...outcome.issues);\n            }\n        } catch (e) {\n            if (isPolicyError(e)) {\n                throw e;\n            }\n\n            // Surface non-PolicyError throws (DB failures, validator crashes, etc.)\n            // as issues so the root cause is visible instead of being swallowed\n            // behind a generic policy failure.\n            issues.push(defineIssueItem({\n                path: policy.type ? [policy.type] : [],\n                message: errorMessage(e),\n                code: ErrorCode.POLICY_EVALUATOR_NOT_PROCESSABLE,\n            }));\n        }\n\n        const error = new PolicyError(`The policy ${policy.type} evaluation failed.`);\n        error.addIssues(issues);\n\n        throw error;\n    }\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport interface IPolicyData {\n    set(key: string, value: unknown) : void;\n    has(key: string): boolean;\n    get<T = unknown>(key: string) : T;\n\n    isValidated(key: string): boolean;\n    setValidated(key: string) : void;\n\n    clone() : IPolicyData\n}\n\nexport class PolicyData implements IPolicyData {\n    protected data: Record<string, any>;\n\n    protected validated : Set<string>;\n\n    constructor(\n        data: Record<string, any> = {},\n        validated: Set<string> = new Set(),\n    ) {\n        this.data = data;\n        this.validated = validated;\n    }\n\n    set<T = unknown>(key: string, value: T) : void {\n        this.data[key] = value;\n        this.validated.delete(key);\n    }\n\n    get<T = unknown>(key: string) : T {\n        if (key in this.data) {\n            return this.data[key];\n        }\n\n        throw new Error(`Policy data item ${key} does not exist.`);\n    }\n\n    has(key: string): boolean {\n        return key in this.data;\n    }\n\n    setValidated(key: string) : void {\n        this.validated.add(key);\n    }\n\n    isValidated(key: string) : boolean {\n        return this.validated.has(key);\n    }\n\n    clone() {\n        return new PolicyData({ ...this.data }, new Set(this.validated));\n    }\n}\n","/*\n * Copyright (c) 2026.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PolicyEvaluationContext, PolicyEvaluationContextInput } from './types.ts';\nimport { PolicyData } from '../../data.ts';\n\nexport function definePolicyEvaluationContext(\n    input: PolicyEvaluationContextInput = {},\n) : PolicyEvaluationContext {\n    return {\n        evaluators: input.evaluators || {},\n        path: input.path || [],\n        data: input.data || new PolicyData(),\n        include: input.include || [],\n        exclude: input.exclude || [],\n    };\n}\n","/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum PolicyIssueSeverity {\n    WARNING = 'warning',\n    ERROR = 'error',\n}\n\nexport enum PolicyIssueCode {\n    // Data/Input\n    DATA_MISSING = 'DATA_MISSING',\n    DATA_INVALID = 'DATA_INVALID',\n\n    // Policy Spec / Config\n    INVALID = 'INVALID',\n    TYPE_UNKNOWN = 'TYPE_UNKNOWN',\n    FIELD_MISSING = 'FIELD_MISSING',\n    FIELD_INVALID = 'FIELD_INVALID',\n\n    // Composite / Tree evaluation\n    CHILD_INVALID = 'CHILD_INVALID',\n    CHILD_EVALUATION_FAILED = 'CHILD_EVALUATION_FAILED',\n\n    // Engine / Evaluator registry\n    EVALUATION_DENIED = 'EVALUATION_DENIED',\n    EVALUATOR_NOT_FOUND = 'EVALUATOR_NOT_FOUND',\n    EVALUATOR_ERROR = 'EVALUATOR_ERROR',\n\n    // Execution control\n    SKIPPED_EXCLUDED = 'SKIPPED_EXCLUDED',\n    SKIPPED_NOT_INCLUDED = 'SKIPPED_NOT_INCLUDED',\n\n    // Internal / unexpected\n    INTERNAL_ERROR = 'INTERNAL_ERROR',\n}\n","/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { defineIssueGroup, defineIssueItem } from 'validup';\nimport type { PolicyIssueGroup, PolicyIssueItem } from './types.ts';\n\nexport function definePolicyIssueItem(input: Omit<PolicyIssueItem, 'type'>) : PolicyIssueItem {\n    return defineIssueItem(input);\n}\n\nexport function definePolicyIssueGroup(input: Omit<PolicyIssueGroup, 'type'>) : PolicyIssueGroup {\n    return defineIssueGroup(input);\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\ntype InvertFn = (input: boolean) => boolean;\n\nexport function maybeInvertPolicyOutcome(\n    outcome: boolean,\n    invert?: boolean | InvertFn,\n) {\n    if (typeof invert === 'undefined') {\n        return outcome;\n    }\n\n    if (typeof invert === 'function') {\n        return invert(outcome);\n    }\n\n    if (!invert) {\n        return outcome;\n    }\n\n    return !outcome;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { AttributeNamesPolicy } from './types';\n\nexport class AttributeNamesPolicyValidator extends Container<AttributeNamesPolicy> {\n    override initialize() {\n        super.initialize();\n\n        this.mount(\n            'names',\n            createValidator(\n                z.array(\n                    z.string()\n                        .min(3)\n                        .max(128),\n                ),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { AttributesPolicy } from './types';\n\nexport function defineAttributesPolicy<\n    T extends Record<string, any> = Record<string, any>,\n>(\n    data: AttributesPolicy<T>,\n) : AttributesPolicy<T> {\n    return data;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum BuiltInPolicyType {\n    /**\n     * Bundles different policies.\n     */\n    COMPOSITE = 'composite',\n    /**\n     * Date Based Access Control (DBAC)\n     */\n    DATE = 'date',\n    /**\n     * Time Based Access Control (TBAC)\n     */\n    TIME = 'time',\n    /**\n     * Attribute Name Based Access Control (ANBAC)\n     */\n    ATTRIBUTE_NAMES = 'attributeNames',\n    /**\n     * Attribute Based Access Control (ABAC)\n     */\n    ATTRIBUTES = 'attributes',\n    /**\n     * Realm of Identity is for attribute realm.\n     */\n    REALM_MATCH = 'realmMatch',\n\n    /**\n     * Restriction based on identity (type, id, ...)\n     */\n    IDENTITY = 'identity',\n\n    /**\n     * Restriction based on a binding between identity <-> permission\n     */\n    PERMISSION_BINDING = 'permissionBinding',\n\n    // Location (LBAC)\n    // Device (DBAC)\n}\n\nexport const SystemPolicyName = {\n    DEFAULT: 'system.default',\n    IDENTITY: 'system.identity',\n    PERMISSION_BINDING: 'system.permission-binding',\n    REALM_MATCH: 'system.realm-match',\n    REALM_BOUND: 'system.realm-bound',\n    REALM_OR_GLOBAL: 'system.realm-or-global',\n    CLIENT_NAMES_SELF_MANAGE: 'system.client-names-self-manage',\n    ROBOT_NAMES_SELF_MANAGE: 'system.robot-names-self-manage',\n    USER_NAMES_SELF_MANAGE: 'system.user-names-self-manage',\n} as const;\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { AttributesPolicy } from './types';\n\nexport class AttributesPolicyValidator<\n    T extends Record<string, any> = Record<string, any>,\n> extends Container<AttributesPolicy<T>> {\n    override initialize() {\n        super.initialize();\n\n        this.mount(\n            'query',\n            createValidator(\n                z.looseObject({}),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { guard } from '@ucast/mongo2js';\nimport { isObject } from '@authup/kit';\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { PolicyIssueCode, definePolicyIssueItem } from '../../issue';\nimport { BuiltInPolicyType } from '../constants.ts';\nimport { AttributesPolicyValidator } from './validator';\n\nexport class AttributesPolicyEvaluator<\n    T extends Record<string, any> = Record<string, any>,\n> implements IPolicyEvaluator {\n    protected validator : AttributesPolicyValidator<T>;\n\n    constructor() {\n        this.validator = new AttributesPolicyValidator<T>();\n    }\n\n    async accessData(ctx: PolicyEvaluationContext) : Promise<T | null> {\n        if (!ctx.data.has(BuiltInPolicyType.ATTRIBUTES)) {\n            return null;\n        }\n\n        if (ctx.data.isValidated(BuiltInPolicyType.ATTRIBUTES)) {\n            return ctx.data.get<T>(BuiltInPolicyType.ATTRIBUTES);\n        }\n\n        // todo: run validator on attributes (isObject ...)\n        const data = ctx.data.get<T>(BuiltInPolicyType.ATTRIBUTES);\n\n        ctx.data.set(BuiltInPolicyType.ATTRIBUTES, data);\n        ctx.data.setValidated(BuiltInPolicyType.ATTRIBUTES);\n\n        return data;\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        const data = await this.accessData(ctx);\n        if (!data) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property attributes is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        this.fixQuery(policy.query);\n\n        const testIt = guard<T>(policy.query);\n\n        return { success: maybeInvertPolicyOutcome(testIt(data as T), policy.invert) };\n    }\n\n    protected fixQuery(\n        query: unknown | unknown[],\n    ) {\n        if (Array.isArray(query)) {\n            for (const element of query) {\n                this.fixQuery(element);\n            }\n\n            return;\n        }\n\n        if (isObject(query)) {\n            const keys = Object.keys(query);\n            for (const key of keys) {\n                const value = query[key];\n\n                if (isObject(value) || Array.isArray(value)) {\n                    this.fixQuery(value);\n                    continue;\n                }\n\n                if (\n                    key === '$regex' &&\n                    typeof value === 'string'\n                ) {\n                    const fragments = value.match(/\\/(.*?)\\/([a-z]*)?$/i);\n                    if (fragments && fragments[1] !== undefined) {\n                        query[key] = new RegExp(fragments[1], fragments[2] || '');\n                    }\n                }\n            }\n        }\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { flattenObject } from '@authup/kit';\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport type { PolicyIssue } from '../../issue';\nimport { PolicyIssueCode, definePolicyIssueItem } from '../../issue';\nimport { AttributeNamesPolicyValidator } from './validator';\nimport { AttributesPolicyEvaluator } from '../attributes';\n\nexport class AttributeNamesPolicyEvaluator implements IPolicyEvaluator {\n    protected validator : AttributeNamesPolicyValidator;\n\n    protected attributesEvaluator : AttributesPolicyEvaluator;\n\n    constructor() {\n        this.validator = new AttributeNamesPolicyValidator();\n        this.attributesEvaluator = new AttributesPolicyEvaluator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        const data = await this.attributesEvaluator.accessData(ctx);\n        if (!data) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property attributes is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        // Nested paths are a deliberate feature: an attribute object like\n        // `{user: {name: 'x'}}` flattens to `{'user.name': 'x'}` and is matched\n        // against `names` entries with dotted notation. Allowlists/denylists\n        // that need to govern nested fields must use the dotted-path form\n        // (e.g. `'user.realm_id'`); a top-level entry like `'realm_id'` will\n        // NOT catch a nested `user.realm_id` write — that's by design, the\n        // policy is precise about which path it covers.\n        const attributes = flattenObject(data);\n        const keys = Object.keys(attributes);\n\n        // `invert` is consumed per-key, NOT at the result level:\n        //   - allowlist (default): a key NOT in `names` is denied\n        //   - denylist (invert: true): a key IN `names` is denied\n        // Result-level inversion would break the empty-input case (a request\n        // with no validated attributes would flip success → fail), and would\n        // produce nonsensical \"deny iff all keys are in the list\" semantics\n        // for partial inputs.\n        const issues : PolicyIssue[] = [];\n        for (const key of keys) {\n            const inList = policy.names.includes(key);\n            const denied = policy.invert ? inList : !inList;\n            if (denied) {\n                issues.push(definePolicyIssueItem({\n                    code: PolicyIssueCode.EVALUATION_DENIED,\n                    message: policy.invert ?\n                        `The attribute ${key} is denied` :\n                        `The attribute ${key} is not included`,\n                    path: [...ctx.path, key],\n                }));\n            }\n        }\n\n        return {\n            success: issues.length === 0,\n            issues,\n        };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { DecisionStrategy } from '../../../constants';\nimport type { CompositePolicy } from './types';\n\nexport class CompositePolicyValidator extends Container<CompositePolicy> {\n    override initialize() {\n        super.initialize();\n\n        this.mount(\n            'decision_strategy',\n            createValidator(\n                z.enum(DecisionStrategy)\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'children',\n            createValidator(\n                z.array(z.looseObject({ type: z.string().min(3) })),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { defineIssueGroup } from 'validup';\nimport { DecisionStrategy } from '../../../constants';\nimport { PolicyEngine } from '../../engine';\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport type { PolicyIssue } from '../../issue';\nimport { CompositePolicyValidator } from './validator';\n\nexport class CompositePolicyEvaluator implements IPolicyEvaluator {\n    protected validator : CompositePolicyValidator;\n\n    constructor() {\n        this.validator = new CompositePolicyValidator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        let count = 0;\n\n        const decision_strategy = policy.decision_strategy ??\n            DecisionStrategy.UNANIMOUS;\n\n        const engine = new PolicyEngine(ctx.evaluators);\n        const issues : PolicyIssue[] = [];\n\n        for (const childPolicy of policy.children) {\n            const path = [\n                ...(ctx.path || []),\n                ...(childPolicy.type ? [childPolicy.type] : []),\n            ];\n\n            const outcome = await engine.evaluate(childPolicy, {\n                ...ctx,\n                path,\n            });\n\n            if (outcome.success) {\n                if (decision_strategy === DecisionStrategy.AFFIRMATIVE) {\n                    return {\n                        success: maybeInvertPolicyOutcome(true, policy.invert),\n                        issues: [],\n                    };\n                }\n\n                count++;\n            } else {\n                if (outcome.issues) {\n                    issues.push(defineIssueGroup({\n                        message: `The evaluation of child policy ${childPolicy.type} failed`,\n                        issues: outcome.issues || [],\n                        path,\n                    }));\n                }\n\n                if (decision_strategy === DecisionStrategy.UNANIMOUS) {\n                    const success = maybeInvertPolicyOutcome(false, policy.invert);\n                    return {\n                        success,\n                        // When `invert` flips a child-failure into success,\n                        // suppress the issue list — surfacing failure issues\n                        // alongside `success: true` is misleading.\n                        issues: success ? [] : [\n                            defineIssueGroup({\n                                message: `The evaluation of composite policy failed (${DecisionStrategy.UNANIMOUS})`,\n                                issues,\n                                path: ctx.path,\n                            }),\n                        ],\n                    };\n                }\n\n                count--;\n            }\n        }\n\n        if (count > 0) {\n            return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n        }\n\n        const success = maybeInvertPolicyOutcome(false, policy.invert);\n        return {\n            success,\n            issues: success ? [] : [\n                defineIssueGroup({\n                    message: `The evaluation of composite policy failed (${DecisionStrategy.CONSENSUS})`,\n                    issues: issues || [],\n                    path: ctx.path,\n                }),\n            ],\n        };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PolicyWithType } from '../../types';\nimport { BuiltInPolicyType } from '../constants';\nimport type { CompositePolicy } from './types';\n\nexport function isCompositePolicy(\n    input: PolicyWithType,\n) : input is PolicyWithType<CompositePolicy> {\n    return input.type === BuiltInPolicyType.COMPOSITE;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { DatePolicy } from './types';\n\nexport class DatePolicyValidator extends Container<DatePolicy> {\n    override initialize() {\n        super.initialize();\n\n        this.mount('start', createValidator(\n            z.date()\n                .or(z.iso.date())\n                .or(z.number())\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n        this.mount('end', createValidator(\n            z.date()\n                .or(z.iso.date())\n                .or(z.number())\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n\n        this.mount('invert', createValidator(\n            z.boolean()\n                .or(z.undefined())\n                .or(z.null())\n                .optional(),\n        ));\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { BuiltInPolicyType } from '../constants.ts';\nimport { DatePolicyValidator } from './validator';\n\nfunction normalizeDate(input: Date) {\n    return new Date(input.getFullYear(), input.getMonth(), input.getDate());\n}\n\nfunction toDate(input: Date | string | number) : Date {\n    if (typeof input === 'string') {\n        return new Date(input);\n    }\n\n    if (typeof input === 'number') {\n        return new Date(input);\n    }\n\n    return input;\n}\n\nexport class DatePolicyEvaluator implements IPolicyEvaluator {\n    protected validator : DatePolicyValidator;\n\n    constructor() {\n        this.validator = new DatePolicyValidator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        let now : Date;\n\n        if (ctx.data.has(BuiltInPolicyType.DATE)) {\n            if (ctx.data.isValidated(BuiltInPolicyType.DATE)) {\n                now = ctx.data.get<Date>(BuiltInPolicyType.DATE);\n            } else {\n                // todo: run validator on attributes (isObject ...)\n                now = normalizeDate(toDate(ctx.data.get(BuiltInPolicyType.DATE)));\n\n                ctx.data.set(BuiltInPolicyType.DATE, now);\n                ctx.data.setValidated(BuiltInPolicyType.DATE);\n            }\n        } else {\n            now = normalizeDate(new Date());\n        }\n\n        if (policy.start) {\n            const start = normalizeDate(toDate(policy.start));\n            if (now < start) {\n                return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n            }\n        }\n\n        if (policy.end) {\n            const end = normalizeDate(toDate(policy.end));\n            if (now > end) {\n                return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n            }\n        }\n\n        return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n    }\n}\n","/*\n * Copyright (c) 2024-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\n\nimport type { IdentityPolicyData } from '../types.ts';\n\nexport class PolicyIdentityDataValidator extends Container<IdentityPolicyData> {\n    override initialize() {\n        super.initialize();\n\n        this.mount(\n            'type',\n            createValidator(\n                z.string().min(3).max(128),\n            ),\n        );\n\n        this.mount(\n            'id',\n            createValidator(\n                z.uuid(),\n            ),\n        );\n\n        this.mount(\n            'clientId',\n            createValidator(\n                z.uuid()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'realmId',\n            createValidator(\n                z.uuid()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'realmName',\n            createValidator(\n                z.string().min(3).max(128)\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { IdentityPolicy } from './types';\n\nexport class IdentityPolicyValidator extends Container<IdentityPolicy> {\n    override initialize() {\n        this.mount(\n            'types',\n            createValidator(\n                z.array(z.string())\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { PolicyIssueCode, definePolicyIssueItem } from '../../issue';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { PolicyIdentityDataValidator } from './data';\nimport type { IdentityPolicyData } from './types';\nimport { IdentityPolicyValidator } from './validator';\n\nexport class IdentityPolicyEvaluator implements IPolicyEvaluator {\n    protected validator : IdentityPolicyValidator;\n\n    protected dataValidator : PolicyIdentityDataValidator;\n\n    constructor() {\n        this.validator = new IdentityPolicyValidator();\n        this.dataValidator = new PolicyIdentityDataValidator();\n    }\n\n    async accessData(ctx: PolicyEvaluationContext) : Promise<IdentityPolicyData | null> {\n        if (!ctx.data.has('identity')) {\n            return null;\n        }\n\n        if (ctx.data.isValidated('identity')) {\n            return ctx.data.get<IdentityPolicyData>('identity');\n        }\n\n        const data = await this.dataValidator.run(ctx.data.get('identity'));\n\n        ctx.data.set('identity', data);\n        ctx.data.setValidated('identity');\n\n        return data;\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        const data = await this.accessData(ctx);\n        if (!data) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property identity is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        if (!policy.types || policy.types.length === 0) {\n            // Empty types is a configuration shorthand for \"no type\n            // restriction\" — every identity passes. Do NOT apply `invert`;\n            // inverting an empty config would silently deny all identities,\n            // which is almost never the user's intent.\n            return { success: true };\n        }\n\n        const typeAllowed = policy.types.includes(data.type);\n        if (typeAllowed) {\n            return { success: maybeInvertPolicyOutcome(typeAllowed, policy.invert) };\n        }\n\n        return {\n            success: maybeInvertPolicyOutcome(typeAllowed, policy.invert),\n            issues: [\n                definePolicyIssueItem({\n                    code: PolicyIssueCode.EVALUATION_DENIED,\n                    message: `The type ${data.type} is not covered by the policy configuration`,\n                    path: ctx.path,\n                }),\n            ],\n        };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { Container } from 'validup';\nimport type { PermissionBindingPolicy } from './types';\n\nexport class PermissionBindingPolicyValidator extends Container<PermissionBindingPolicy> {\n    override initialize() {\n\n    }\n}\n","/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPolicyEvaluator, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { PermissionBindingPolicyValidator } from './validator';\n\nexport class PermissionBindingPolicyEvaluator implements IPolicyEvaluator {\n    protected validator: PermissionBindingPolicyValidator;\n\n    constructor() {\n        this.validator = new PermissionBindingPolicyValidator();\n    }\n\n    async evaluate(value: Record<string, any>): Promise<PolicyEvaluationResult> {\n        const policy = await this.validator.run(value);\n\n        // todo: this must be changed when the permission-checker not only checks owned permissions.\n        return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { DecisionStrategy } from '../../../constants';\nimport type { RealmMatchPolicy } from './types';\n\nexport class RealmMatchPolicyValidator extends Container<RealmMatchPolicy> {\n    override initialize() {\n        super.initialize();\n\n        this.mount(\n            'decision_strategy',\n            createValidator(\n                z.enum(DecisionStrategy)\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'attribute_name',\n            createValidator(\n                z.string()\n                    .min(3)\n                    .or(z.array(z.string().min(3)))\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n        this.mount(\n            'attribute_name_strict',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n        this.mount(\n            'attribute_null_match_all',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'identity_master_match_all',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { hasOwnProperty } from '@authup/kit';\nimport { DecisionStrategy } from '../../../constants';\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { PolicyIssueCode, definePolicyIssueItem } from '../../issue';\nimport { AttributesPolicyEvaluator } from '../attributes';\nimport { IdentityPolicyEvaluator } from '../identity';\nimport { RealmMatchPolicyValidator } from './validator';\n\nexport class RealmMatchPolicyEvaluator implements IPolicyEvaluator {\n    protected validator : RealmMatchPolicyValidator;\n\n    protected identityEvaluator: IdentityPolicyEvaluator;\n\n    protected attributesEvaluator : AttributesPolicyEvaluator;\n\n    constructor() {\n        this.validator = new RealmMatchPolicyValidator();\n        this.identityEvaluator = new IdentityPolicyEvaluator();\n        this.attributesEvaluator = new AttributesPolicyEvaluator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        const identity = await this.identityEvaluator.accessData(ctx);\n        if (!identity) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property identity is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        const attributes = await this.attributesEvaluator.accessData(ctx);\n        if (!attributes) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property attributes is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        const identityMasterMatchAll = policy.identity_master_match_all ?? true;\n        if (\n            identityMasterMatchAll &&\n            identity.realmName &&\n            identity.realmName === 'master'\n        ) {\n            // Master-match-all is a privileged-actor override — do NOT apply\n            // `invert`. Inverting would deny master access whenever the policy\n            // is configured as a denylist, which is the opposite of the flag's\n            // intent.\n            return { success: true };\n        }\n\n        let keys : string[];\n        if (policy.attribute_name) {\n            if (Array.isArray(policy.attribute_name)) {\n                keys = policy.attribute_name;\n            } else {\n                keys = [policy.attribute_name];\n            }\n        } else {\n            keys = [\n                'realm_id',\n                'realm_name',\n                'realmId',\n                'realmName',\n            ];\n\n            policy.decision_strategy = DecisionStrategy.CONSENSUS;\n        }\n\n        const attribute_name_strict = policy.attribute_name_strict ?? true;\n        if (!attribute_name_strict) {\n            const resourceKeys = Object.keys(attributes);\n            const keysToAdd : string[] = [];\n            for (const resourceKey of resourceKeys) {\n                let contains : boolean = false;\n\n                for (const key of keys) {\n                    if (\n                        resourceKey !== key &&\n                        resourceKey.includes(key)\n                    ) {\n                        contains = true;\n                        break;\n                    }\n                }\n\n                if (contains) {\n                    keysToAdd.push(resourceKey);\n                }\n            }\n\n            if (keysToAdd.length > 0) {\n                keys.push(...keysToAdd);\n            }\n        }\n\n        let count = 0;\n        let evaluated = false;\n\n        for (const key of keys) {\n            if (!hasOwnProperty(attributes, key)) {\n                continue;\n            }\n\n            evaluated = true;\n\n            let outcome : boolean = false;\n\n            const attributeValue = attributes[key];\n\n            if (\n                attributeValue === null &&\n                policy.attribute_null_match_all\n            ) {\n                outcome = true;\n            } else if (\n                attributeValue === identity.realmId ||\n                attributeValue === identity.realmName\n            ) {\n                outcome = true;\n            }\n\n            if (outcome) {\n                if (policy.decision_strategy === DecisionStrategy.AFFIRMATIVE) {\n                    return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n                }\n\n                count++;\n            } else {\n                if (policy.decision_strategy === DecisionStrategy.UNANIMOUS) {\n                    return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n                }\n\n                count--;\n            }\n        }\n\n        if (!evaluated) {\n            // No realm key found in attributes — the policy's match logic\n            // didn't run. This is a \"non-evaluation\", not an outcome; treat\n            // as a neutral pass without applying `invert`. Inverting here\n            // would conflate \"policy doesn't apply\" with \"policy denies\".\n            return { success: true };\n        }\n\n        return { success: maybeInvertPolicyOutcome(count > 0, policy.invert) };\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum TimePolicyInterval {\n    DAILY = 'daily',\n    WEEKLY = 'weekly',\n    MONTHLY = 'monthly',\n    YEARLY = 'yearly',\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { TimePolicyInterval } from './constants';\n\nexport function isIntervalForDayOfWeek(\n    interval: string,\n) {\n    return interval === TimePolicyInterval.WEEKLY ||\n        interval === TimePolicyInterval.MONTHLY ||\n        interval === TimePolicyInterval.YEARLY;\n}\n\nexport function isIntervalForDayOfMonth(\n    interval: string,\n) {\n    return interval === TimePolicyInterval.MONTHLY ||\n    interval === TimePolicyInterval.YEARLY;\n}\n\nexport function isIntervalForDayOfYear(\n    interval: string,\n) {\n    return interval === TimePolicyInterval.YEARLY;\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { TimePolicy } from './types';\nimport { TimePolicyInterval } from './constants';\n\nexport class TimePolicyValidator extends Container<TimePolicy> {\n    override initialize() {\n        super.initialize();\n\n        this.mount('day_of_week', createValidator(\n            z.number()\n                .min(0).max(6)\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n        this.mount('day_of_month', createValidator(\n            z.number()\n                .min(1)\n                .max(31)\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n        this.mount('day_of_year', createValidator(\n            z.number()\n                .min(1)\n                .max(365)\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n\n        this.mount('start', createValidator(\n            z.date()\n                .or(z.iso.datetime())\n                .or(z.iso.time())\n                .or(z.number())\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n        this.mount('end', createValidator(\n            z.date()\n                .or(z.iso.datetime())\n                .or(z.iso.time())\n                .or(z.number())\n                .or(z.null())\n                .or(z.undefined())\n                .optional(),\n        ));\n\n        this.mount(\n            'interval',\n            createValidator(\n                z.enum(TimePolicyInterval)\n                    .or(z.null())\n                    .or(z.undefined())\n                    .optional(),\n            ),\n        );\n\n        this.mount(\n            'invert',\n            createValidator(\n                z.boolean()\n                    .or(z.undefined())\n                    .or(z.null())\n                    .optional(),\n            ),\n        );\n    }\n}\n","/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IPolicyEvaluator, PolicyEvaluationContext, PolicyEvaluationResult } from '../../evaluation';\nimport { maybeInvertPolicyOutcome } from '../../helpers';\nimport { BuiltInPolicyType } from '../constants';\nimport { isIntervalForDayOfMonth, isIntervalForDayOfWeek, isIntervalForDayOfYear } from './helpers';\nimport { TimePolicyValidator } from './validator';\n\nconst timeRegex = /^(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d)?$/;\n\nfunction normalizeDate(input: Date, dateRef?: Date) {\n    const date = dateRef ? new Date(dateRef) : new Date();\n    date.setHours(input.getHours(), input.getMinutes());\n\n    return date;\n}\n\nfunction toDate(\n    input: Date | string | number,\n    dateRef?: Date,\n) : Date {\n    if (typeof input === 'string') {\n        if (timeRegex.test(input)) {\n            const parts = input.split(':');\n\n            const startHours = Number(parts[0]);\n            const startMinutes = Number(parts[1]);\n            const startSeconds = parts[2] !== undefined ? Number(parts[2]) : 0;\n\n            if (\n                Number.isFinite(startHours) &&\n                Number.isFinite(startMinutes) &&\n                Number.isFinite(startSeconds)\n            ) {\n                const date = dateRef ? new Date(dateRef) : new Date();\n                date.setHours(startHours, startMinutes, startSeconds, 0);\n\n                return date;\n            }\n        }\n\n        return new Date(input);\n    }\n\n    if (typeof input === 'number') {\n        return new Date(input);\n    }\n\n    return input;\n}\n\nexport class TimePolicyEvaluator implements IPolicyEvaluator {\n    protected validator : TimePolicyValidator;\n\n    constructor() {\n        this.validator = new TimePolicyValidator();\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        // todo: catch errors + transform to issue(s)\n        const policy = await this.validator.run(value);\n\n        let now : Date;\n\n        if (ctx.data.has(BuiltInPolicyType.TIME)) {\n            if (ctx.data.isValidated(BuiltInPolicyType.TIME)) {\n                now = ctx.data.get<Date>(BuiltInPolicyType.TIME);\n            } else {\n                // todo: run validator on attributes (isObject ...)\n                now = toDate(ctx.data.get(BuiltInPolicyType.TIME));\n\n                ctx.data.set(BuiltInPolicyType.TIME, now);\n                ctx.data.setValidated(BuiltInPolicyType.TIME);\n            }\n        } else {\n            now = new Date();\n        }\n\n        if (policy.start) {\n            const start = normalizeDate(toDate(policy.start, now), now);\n            if (now < start) {\n                return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n            }\n        }\n\n        if (policy.end) {\n            const end = normalizeDate(toDate(policy.end, now), now);\n            if (now > end) {\n                return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n            }\n        }\n\n        if (policy.interval) {\n            if (\n                isIntervalForDayOfWeek(policy.interval) &&\n                policy.day_of_week\n            ) {\n                if (now.getDay() !== policy.day_of_week) {\n                    return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n                }\n            }\n\n            if (\n                isIntervalForDayOfMonth(policy.interval) &&\n                policy.day_of_month\n            ) {\n                if (now.getDate() !== policy.day_of_month) {\n                    return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n                }\n            }\n\n            if (\n                isIntervalForDayOfYear(policy.interval) &&\n                policy.day_of_year\n            ) {\n                const start = new Date(now.getFullYear(), 0, 0);\n                const diff = (now.getTime() - start.getTime()) +\n                    ((start.getTimezoneOffset() - now.getTimezoneOffset()) * 60 * 1000);\n\n                const oneDay = 1000 * 60 * 60 * 24;\n                const dayOfYear = Math.floor(diff / oneDay);\n\n                if (dayOfYear !== policy.day_of_year) {\n                    return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n                }\n            }\n        }\n\n        return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n    }\n}\n","/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PolicyWithType } from '../types';\nimport type { BuiltInPolicyTypeMap } from './types';\n\nexport function definePolicyWithType<\n    K extends keyof BuiltInPolicyTypeMap,\n    D extends BuiltInPolicyTypeMap<any>[K],\n>(\n    type: K,\n    data: D,\n) : PolicyWithType<D, K> {\n    return {\n        ...data,\n        type,\n    };\n}\n","/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    AttributeNamesPolicyEvaluator,\n    AttributesPolicyEvaluator,\n    BuiltInPolicyType,\n    CompositePolicyEvaluator,\n    DatePolicyEvaluator,\n    IdentityPolicyEvaluator,\n    PermissionBindingPolicyEvaluator,\n    RealmMatchPolicyEvaluator,\n    TimePolicyEvaluator,\n} from './built-in';\n\nexport const PolicyDefaultEvaluators = {\n    [BuiltInPolicyType.COMPOSITE]: new CompositePolicyEvaluator(),\n    [BuiltInPolicyType.ATTRIBUTES]: new AttributesPolicyEvaluator(),\n    [BuiltInPolicyType.ATTRIBUTE_NAMES]: new AttributeNamesPolicyEvaluator(),\n    [BuiltInPolicyType.DATE]: new DatePolicyEvaluator(),\n    [BuiltInPolicyType.IDENTITY]: new IdentityPolicyEvaluator(),\n    [BuiltInPolicyType.PERMISSION_BINDING]: new PermissionBindingPolicyEvaluator(),\n    [BuiltInPolicyType.REALM_MATCH]: new RealmMatchPolicyEvaluator(),\n    [BuiltInPolicyType.TIME]: new TimePolicyEvaluator(),\n} as const;\n","/*\n * Copyright (c) 2021-2026.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { ErrorCode } from '@authup/errors';\nimport type { Issue } from 'validup';\nimport { defineIssueItem } from 'validup';\nimport { DecisionStrategy } from '../../constants.ts';\nimport type { CompositePolicy, IPolicyEngine } from '../../policy';\nimport {\n    BuiltInPolicyType,\n    PolicyData,\n    PolicyDefaultEvaluators,\n    PolicyEngine,\n    definePolicyEvaluationContext,\n    definePolicyIssueGroup,\n} from '../../policy';\nimport { PermissionError } from '../error';\nimport type { IPermissionProvider } from '../provider';\n\nimport type { PermissionPolicyBinding } from '../types.ts';\nimport type { IPermissionEvaluator, PermissionEvaluationContext, PermissionEvaluatorOptions } from './types.ts';\n\nexport class PermissionEvaluator implements IPermissionEvaluator {\n    protected provider : IPermissionProvider;\n\n    protected policyEngine : IPolicyEngine;\n\n    protected clientId?: string | null;\n\n    protected realmId?: string | null;\n\n    // ----------------------------------------------\n\n    constructor(options: PermissionEvaluatorOptions) {\n        this.provider = options.provider;\n\n        this.clientId = options.clientId || null;\n        this.realmId = options.realmId || null;\n\n        if (options.policyEngine) {\n            this.policyEngine = options.policyEngine;\n        } else {\n            this.policyEngine = new PolicyEngine(PolicyDefaultEvaluators);\n        }\n    }\n\n    // ----------------------------------------------\n\n    protected async findOne(\n        input: string,\n        overrides: {\n            realmId?: string | null,\n            clientId?: string | null\n        } = {},\n    ) : Promise<PermissionPolicyBinding | null> {\n        return this.provider.findOne({\n            name: input,\n            clientId: overrides.clientId ?? this.clientId,\n            realmId: overrides.realmId ?? this.realmId,\n        });\n    }\n\n    // ----------------------------------------------\n\n    async evaluate(ctx: PermissionEvaluationContext) : Promise<void> {\n        if (!Array.isArray(ctx.name)) {\n            await this.evaluate({\n                ...ctx,\n                name: [ctx.name],\n            });\n            return;\n        }\n\n        const { options = {} } = ctx;\n\n        const decisionStrategy = options.decisionStrategy ??\n            DecisionStrategy.UNANIMOUS;\n\n        const issues : Issue[] = [];\n\n        let count = 0;\n\n        const dataBase = ctx.input || new PolicyData();\n\n        for (const name of ctx.name) {\n            const binding = await this.findOne(name, {\n                realmId: ctx.realmId,\n                clientId: ctx.clientId,\n            });\n            if (!binding) {\n                issues.push(defineIssueItem({\n                    code: ErrorCode.PERMISSION_NOT_FOUND,\n                    message: `The ${name} permission could not be resolved`,\n                    path: [name],\n                }));\n\n                if (decisionStrategy === DecisionStrategy.UNANIMOUS) {\n                    const error = PermissionError.evaluationFailed(ctx.name);\n                    error.addIssues(issues);\n                    throw error;\n                }\n\n                continue;\n            }\n\n            const policies = binding.policies ?? [];\n            if (policies.length === 0) {\n                if (decisionStrategy === DecisionStrategy.AFFIRMATIVE) {\n                    return;\n                }\n\n                count++;\n\n                continue;\n            }\n\n            const data = dataBase.clone();\n            data.set(BuiltInPolicyType.PERMISSION_BINDING, binding);\n\n            const policyDecisionStrategy = binding.permission.decision_strategy ??\n                DecisionStrategy.UNANIMOUS;\n\n            const compositePolicy : CompositePolicy = {\n                type: BuiltInPolicyType.COMPOSITE,\n                decision_strategy: policyDecisionStrategy,\n                children: policies,\n            };\n\n            const evaluationResult = await this.policyEngine.evaluate(\n                compositePolicy,\n                definePolicyEvaluationContext({\n                    include: options.policiesIncluded,\n                    exclude: options.policiesExcluded,\n                    data,\n                }),\n            );\n\n            if (evaluationResult.success) {\n                if (decisionStrategy === DecisionStrategy.AFFIRMATIVE) {\n                    return;\n                }\n\n                count++;\n            } else {\n                issues.push(definePolicyIssueGroup({\n                    code: ErrorCode.PERMISSION_EVALUATION_FAILED,\n                    issues: evaluationResult.issues || [],\n                    message: `The ${binding.permission.name} permissions policy evaluation failed`,\n                    path: [binding.permission.name],\n                }));\n\n                if (decisionStrategy === DecisionStrategy.UNANIMOUS) {\n                    const error = PermissionError.evaluationFailed(binding.permission.name);\n                    error.addIssues(issues);\n                    throw error;\n                }\n\n                count--;\n            }\n        }\n\n        if (count > 0) {\n            return;\n        }\n\n        if (issues.length === 0) {\n            throw PermissionError.deniedAll(ctx.name);\n        } else {\n            const error = PermissionError.evaluationFailed(ctx.name);\n            error.addIssues(issues);\n            throw error;\n        }\n    }\n\n    async evaluateOneOf(ctx: PermissionEvaluationContext) : Promise<void> {\n        return this.evaluate({\n            ...ctx,\n            options: {\n                ...(ctx.options || {}),\n                decisionStrategy: DecisionStrategy.AFFIRMATIVE,\n            },\n        });\n    }\n\n    // ----------------------------------------------\n\n    async preEvaluate(ctx: PermissionEvaluationContext) : Promise<void> {\n        return this.evaluate({\n            ...ctx,\n            options: {\n                ...(ctx.options || {}),\n                policiesExcluded: [\n                    BuiltInPolicyType.ATTRIBUTES,\n                    BuiltInPolicyType.ATTRIBUTE_NAMES,\n                    BuiltInPolicyType.REALM_MATCH,\n                ],\n            },\n        });\n    }\n\n    async preEvaluateOneOf(ctx: PermissionEvaluationContext) : Promise<void> {\n        return this.preEvaluate({\n            ...ctx,\n            options: {\n                ...(ctx.options || {}),\n                decisionStrategy: DecisionStrategy.AFFIRMATIVE,\n            },\n        });\n    }\n}\n"],"mappings":";;;;;;;AAWA,MAAa,4BAA4B,OAAO,IAAI,gCAAgC;AAEpF,IAAa,kBAAb,MAAa,wBAAwB,YAAY;CAC7C,YAAY,UAA8B,CAAC,GAAG;EAC1C,MAAM;GACF,GAAG;GACH,SAAS,QAAQ,WAAW;GAC5B,MAAM,QAAQ,QAAQ,UAAU;EACpC,CAAC;EACD,eAAe,MAAM,yBAAyB;CAClD;CAEA,SAAS,MAAmB;EACxB,KAAK,OAAO,KAAK,IAAI;CACzB;CAEA,UAAU,MAAqB;EAC3B,KAAK,OAAO,KAAK,GAAG,IAAI;CAC5B;CAEA,OAAO,SAAS,MAAc;EAC1B,OAAO,IAAI,gBAAgB;GACvB,SAAS,kBAAkB,KAAK;GAChC,MAAM,UAAU;EACpB,CAAC;CACL;CAEA,OAAO,OAAO,MAAc;EACxB,OAAO,IAAI,gBAAgB;GACvB,SAAS,kBAAkB,KAAK;GAChC,MAAM,UAAU;EACpB,CAAC;CACL;CAEA,OAAO,UAAU,OAAiB;EAC9B,OAAO,IAAI,gBAAgB;GACvB,SAAS,2BAA2B,MAAM,KAAK,IAAI,EAAE;GACrD,MAAM,UAAU;EACpB,CAAC;CACL;CAEA,OAAO,iBAAiB,MAAyB;EAC7C,IAAI,MAAM,QAAQ,IAAI,GAClB,OAAO,IAAI,gBAAgB;GACvB,SAAS,iCAAiC,KAAK,KAAK,IAAI,EAAE;GAC1D,MAAM,UAAU;EACpB,CAAC;EAGL,OAAO,IAAI,gBAAgB;GACvB,SAAS,gCAAgC,KAAK;GAC9C,MAAM,UAAU;EACpB,CAAC;CACL;AACJ;;;ACvDA,SAAgB,kBAAkB,OAA0C;CACxE,IAAI,cAAc,OAAO,yBAAyB,GAC9C,OAAO;CAGX,IAAI,CAAC,cAAc,KAAK,GACpB,OAAO;CAGX,OAAO,MAAM,SAAS,UAAU,wBAC5B,MAAM,SAAS,UAAU,qBACzB,MAAM,SAAS,UAAU;AACjC;;;ACbA,SAAgB,+BAA+B,GAA4B,GAAqC;CAC5G,IAAI,EAAE,WAAW,SAAS,EAAE,WAAW,MACnC,OAAO;CAGX,KAAK,EAAE,WAAW,YAAY,WAAW,EAAE,WAAW,YAAY,OAC9D,OAAO;CAGX,KAAK,EAAE,WAAW,aAAa,WAAW,EAAE,WAAW,aAAa,OAChE,OAAO;CAGX,OAAO;AACX;;;ACbA,SAAS,iBAAiB,OAA+B;CACrD,OAAO,SAAS;AACpB;AAEA,SAAgB,mBACZ,OACF;CACE,OAAO,GAAG,iBAAiB,MAAM,QAAQ,EAAE,GAAG,iBAAiB,MAAM,SAAS,EAAE,GAAG,MAAM;AAC7F;;;ACDA,SAAgB,8BAA8B,OAA8D;CACxG,MAAM,UAAsD,MACvD,QAAQ,UAAU,YAAY;EAC3B,MAAM,MAAM,mBAAmB,QAAQ,UAAU;EACjD,IAAI,CAAC,SAAS,MACV,SAAS,OAAO,CAAC;EAGrB,SAAS,IAAI,CAAC,KAAK,OAAO;EAE1B,OAAO;CACX,GAAG,CAAC,CAA8C;CAEtD,MAAM,SAAqC,CAAC;CAC5C,MAAM,OAAO,OAAO,KAAK,OAAO;CAChC,KAAK,MAAM,OAAO,MAAM;EACpB,MAAM,QAAQ,QAAQ;EACtB,MAAM,QAAQ,MAAM;EAEpB,IAAI,MAAM,WAAW,GAAG;GACpB,OAAO,KAAK,KAAK;GACjB;EACJ;EAEA,MAAM,WAA0B,CAAC;EAEjC,KAAK,MAAM,WAAW,OAAO;GACzB,IAAI,CAAC,QAAQ,YAAY,QAAQ,SAAS,WAAW,GACjD;GAGJ,MAAM,SAA0B;IAC5B,MAAM;IACN,mBAAmB,QAAQ,WAAW,qBAAqBA,mBAAiB;IAC5E,UAAU,QAAQ;GACtB;GAEA,SAAS,KAAK,MAAM;EACxB;EAEA,IAAI;EAEJ,IACI,SAAS,SAAS,KAClB,SAAS,WAAW,MAAM,QAQ1B,iBAAiB,CAAC;GALd,MAAM;GACN,mBAAmBA,mBAAiB;GACpC;EAGmB,CAAC;EAG5B,OAAO,KAAK;GACR,YAAY;IACR,GAAG,MAAM;IACT,mBAAmBA,mBAAiB;GACxC;GACA,UAAU;EACd,CAAC;CACL;CAEA,OAAO;AACX;;;ACvEA,IAAa,2BAAb,MAAqE;CACjE,QAA4D,CAAC;CAE7D,YAAY,QAAmC,CAAC,GAAG;EAC/C,KAAK,QAAQ,KAAK;CACtB;CAEA,MAAM,QACF,SACuC;EACvC,MAAM,MAAM,mBAAmB;GAC3B,MAAM,QAAQ;GACd,WAAW,QAAQ;GACnB,UAAU,QAAQ;EACtB,CAAC;EAED,MAAM,QAAQ,KAAK,MAAM;EACzB,IAAI,OACA,OAAO;EAGX,OAAO;CACX;CAEA,QAAQ,OAAkC;EACtC,KAAK,QAAQ,8BAA8B,KAAK,CAAC,CAC5C,QAAQ,MAAM,YAAY;GACvB,MAAM,MAAM,mBAAmB,QAAQ,UAAU;GACjD,KAAK,OAAO;GACZ,OAAO;EACX,GAAG,CAAC,CAA4C;CACxD;AACJ;;;ACjCA,MAAa,wBAAwB,OAAO,IAAI,4BAA4B;AAE5E,IAAa,cAAb,MAAa,oBAAoB,YAAY;CACzC,YAAY,SAAkB,MAAsB;EAChD,MAAM;GACF;GACA,MAAM,QAAQ,KAAA;EAClB,CAAC;EACD,eAAe,MAAM,qBAAqB;CAC9C;CAEA,SAAS,MAAmB;EACxB,KAAK,OAAO,KAAK,IAAI;CACzB;CAEA,UAAU,MAAqB;EAC3B,KAAK,OAAO,KAAK,GAAG,IAAI;CAC5B;CAEA,OAAO,kBAAkB,MAAc;EACnC,OAAO,IAAI,YACP,oDAAoD,QACpD,UAAU,0BACd;CACJ;CAEA,OAAO,0BAA0B;EAC7B,OAAO,IAAI,YACP,6CACA,UAAU,gCACd;CACJ;CAEA,OAAO,0BAA0B;EAC7B,OAAO,IAAI,YACP,uCACA,UAAU,gCACd;CACJ;AACJ;;;ACvCA,SAAgB,cAAc,OAAsC;CAChE,IAAI,cAAc,OAAO,qBAAqB,GAC1C,OAAO;CAGX,IAAI,CAAC,cAAc,KAAK,GACpB,OAAO;CAGX,OAAO,MAAM,SAAS,UAAU,8BAC5B,MAAM,SAAS,UAAU,oCACzB,MAAM,SAAS,UAAU;AACjC;;;ACCA,SAAS,aAAa,OAAwB;CAC1C,IACI,OAAO,UAAU,YACjB,UAAU,QACV,aAAa,SACb,OAAQ,MAA+B,YAAY,UAEnD,OAAQ,MAA8B;CAE1C,OAAO,OAAO,KAAK;AACvB;;;;;AAMA,IAAa,eAAb,MAAmD;CAC/C;CAEA,YAAY,aAA+B,CAAC,GAAG;EAC3C,KAAK,aAAa;CACtB;CAEA,kBACI,MACA,WACK;EACL,KAAK,WAAW,QAAQ;CAC5B;CAEA,mBAA0B,YAA8B;EACpD,MAAM,OAAO,OAAO,KAAK,UAAU;EACnC,KAAK,MAAM,OAAO,MACd,KAAK,kBAAkB,KAAK,WAAW,IAAK;CAEpD;;;;;CAMA,MAAM,SAAS,QAAoB,KAAgE;EAK/F,IAAI,CAAC,OAAO,MACR,OAAO;GACH,SAAS;GACT,QAAQ,CACJ,gBAAgB;IACZ,MAAM,CAAC;IACP,SAAS;IACT,MAAM,UAAU;GACpB,CAAC,CACL;EACJ;EAMJ,IACI,IAAI,WACJ,IAAI,QAAQ,SAAS,KACrB,IAAI,QAAQ,SAAS,OAAO,IAAI,GAEhC,OAAO,EAAE,SAAS,KAAK;EAG3B,IACI,IAAI,WACJ,IAAI,QAAQ,SAAS,KACrB,CAAC,IAAI,QAAQ,SAAS,OAAO,IAAI,GAEjC,OAAO,EAAE,SAAS,KAAK;EAG3B,MAAM,SAAyB,CAAC;EAEhC,MAAM,YAAY,KAAK,WAAW,OAAO;EACzC,IAAI,CAAC,WAAW;GACZ,OAAO,KAAK,gBAAgB;IACxB,MAAM,CAAC,OAAO,IAAI;IAClB,SAAS,cAAc,OAAO,KAAK;IACnC,MAAM,UAAU;GACpB,CAAC,CAAC;GAEF,OAAO;IACH,SAAS;IACT;GACJ;EACJ;EAEA,IAAI;GACA,OAAO,MAAM,UAAU,SAAS,QAAQ;IACpC,GAAG;IACH,YAAY;KACR,GAAG,KAAK;KACR,GAAI,IAAI,cAAc,CAAC;IAC3B;GACJ,CAAC;EACL,SAAS,GAAG;GACR,OAAO,KAAK,gBAAgB;IACxB,MAAM,CAAC,OAAO,IAAI;IAClB,SAAS,OAAO,OAAO,KAAK,oBAAoB,aAAa,CAAC;IAC9D,MAAM,UAAU;GACpB,CAAC,CAAC;GAEF,OAAO;IACH,SAAS;IACT;GACJ;EACJ;CACJ;CAEA,MAAM,eAAe,QAAoB,KAA8C;EACnF,MAAM,SAAyB,CAAC;EAEhC,IAAI;GACA,MAAM,UAAU,MAAM,KAAK,SAAS,QAAQ,GAAG;GAC/C,IAAI,QAAQ,SACR;GAGJ,IAAI,QAAQ,QACR,OAAO,KAAK,GAAG,QAAQ,MAAM;EAErC,SAAS,GAAG;GACR,IAAI,cAAc,CAAC,GACf,MAAM;GAMV,OAAO,KAAK,gBAAgB;IACxB,MAAM,OAAO,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;IACrC,SAAS,aAAa,CAAC;IACvB,MAAM,UAAU;GACpB,CAAC,CAAC;EACN;EAEA,MAAM,QAAQ,IAAI,YAAY,cAAc,OAAO,KAAK,oBAAoB;EAC5E,MAAM,UAAU,MAAM;EAEtB,MAAM;CACV;AACJ;;;ACzJA,IAAa,aAAb,MAAa,WAAkC;CAC3C;CAEA;CAEA,YACI,OAA4B,CAAC,GAC7B,4BAAyB,IAAI,IAAI,GACnC;EACE,KAAK,OAAO;EACZ,KAAK,YAAY;CACrB;CAEA,IAAiB,KAAa,OAAiB;EAC3C,KAAK,KAAK,OAAO;EACjB,KAAK,UAAU,OAAO,GAAG;CAC7B;CAEA,IAAiB,KAAiB;EAC9B,IAAI,OAAO,KAAK,MACZ,OAAO,KAAK,KAAK;EAGrB,MAAM,IAAI,MAAM,oBAAoB,IAAI,iBAAiB;CAC7D;CAEA,IAAI,KAAsB;EACtB,OAAO,OAAO,KAAK;CACvB;CAEA,aAAa,KAAoB;EAC7B,KAAK,UAAU,IAAI,GAAG;CAC1B;CAEA,YAAY,KAAuB;EAC/B,OAAO,KAAK,UAAU,IAAI,GAAG;CACjC;CAEA,QAAQ;EACJ,OAAO,IAAI,WAAW,EAAE,GAAG,KAAK,KAAK,GAAG,IAAI,IAAI,KAAK,SAAS,CAAC;CACnE;AACJ;;;ACjDA,SAAgB,8BACZ,QAAsC,CAAC,GACf;CACxB,OAAO;EACH,YAAY,MAAM,cAAc,CAAC;EACjC,MAAM,MAAM,QAAQ,CAAC;EACrB,MAAM,MAAM,QAAQ,IAAI,WAAW;EACnC,SAAS,MAAM,WAAW,CAAC;EAC3B,SAAS,MAAM,WAAW,CAAC;CAC/B;AACJ;;;ACbA,IAAY,sBAAL,yBAAA,qBAAA;CACH,oBAAA,aAAA;CACA,oBAAA,WAAA;;AACJ,EAAA,CAAA,CAAA;AAEA,IAAY,kBAAL,yBAAA,iBAAA;CAEH,gBAAA,kBAAA;CACA,gBAAA,kBAAA;CAGA,gBAAA,aAAA;CACA,gBAAA,kBAAA;CACA,gBAAA,mBAAA;CACA,gBAAA,mBAAA;CAGA,gBAAA,mBAAA;CACA,gBAAA,6BAAA;CAGA,gBAAA,uBAAA;CACA,gBAAA,yBAAA;CACA,gBAAA,qBAAA;CAGA,gBAAA,sBAAA;CACA,gBAAA,0BAAA;CAGA,gBAAA,oBAAA;;AACJ,EAAA,CAAA,CAAA;;;AC5BA,SAAgB,sBAAsB,OAAwD;CAC1F,OAAO,gBAAgB,KAAK;AAChC;AAEA,SAAgB,uBAAuB,OAA0D;CAC7F,OAAO,iBAAiB,KAAK;AACjC;;;ACPA,SAAgB,yBACZ,SACA,QACF;CACE,IAAI,OAAO,WAAW,aAClB,OAAO;CAGX,IAAI,OAAO,WAAW,YAClB,OAAO,OAAO,OAAO;CAGzB,IAAI,CAAC,QACD,OAAO;CAGX,OAAO,CAAC;AACZ;;;ACdA,IAAa,gCAAb,cAAmD,UAAgC;CAC/E,aAAsB;EAClB,MAAM,WAAW;EAEjB,KAAK,MACD,SACA,gBACI,EAAE,MACE,EAAE,OAAO,CAAC,CACL,IAAI,CAAC,CAAC,CACN,IAAI,GAAG,CAChB,CACJ,CACJ;EAEA,KAAK,MACD,UACA,gBACI,EAAE,QAAQ,CAAC,CACN,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CACJ;CACJ;AACJ;;;AC5BA,SAAgB,uBAGZ,MACoB;CACpB,OAAO;AACX;;;ACRA,IAAY,oBAAL,yBAAA,mBAAA;;;;CAIH,kBAAA,eAAA;;;;CAIA,kBAAA,UAAA;;;;CAIA,kBAAA,UAAA;;;;CAIA,kBAAA,qBAAA;;;;CAIA,kBAAA,gBAAA;;;;CAIA,kBAAA,iBAAA;;;;CAKA,kBAAA,cAAA;;;;CAKA,kBAAA,wBAAA;;AAIJ,EAAA,CAAA,CAAA;AAEA,MAAa,mBAAmB;CAC5B,SAAS;CACT,UAAU;CACV,oBAAoB;CACpB,aAAa;CACb,aAAa;CACb,iBAAiB;CACjB,0BAA0B;CAC1B,yBAAyB;CACzB,wBAAwB;AAC5B;;;AC7CA,IAAa,4BAAb,cAEU,UAA+B;CACrC,aAAsB;EAClB,MAAM,WAAW;EAEjB,KAAK,MACD,SACA,gBACI,EAAE,YAAY,CAAC,CAAC,CACpB,CACJ;EAEA,KAAK,MACD,UACA,gBACI,EAAE,QAAQ,CAAC,CACN,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CACJ;CACJ;AACJ;;;ACpBA,IAAa,4BAAb,MAE8B;CAC1B;CAEA,cAAc;EACV,KAAK,YAAY,IAAI,0BAA6B;CACtD;CAEA,MAAM,WAAW,KAAkD;EAC/D,IAAI,CAAC,IAAI,KAAK,IAAA,YAAgC,GAC1C,OAAO;EAGX,IAAI,IAAI,KAAK,YAAA,YAAwC,GACjD,OAAO,IAAI,KAAK,IAAA,YAAmC;EAIvD,MAAM,OAAO,IAAI,KAAK,IAAA,YAAmC;EAEzD,IAAI,KAAK,IAAA,cAAkC,IAAI;EAC/C,IAAI,KAAK,aAAA,YAAyC;EAElD,OAAO;CACX;CAEA,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,KAAK;EAE7C,MAAM,OAAO,MAAM,KAAK,WAAW,GAAG;EACtC,IAAI,CAAC,MACD,OAAO;GACH,SAAS;GACT,QAAQ,CACJ,sBAAsB;IAClB,MAAA;IACA,SAAS;IACT,MAAM,IAAI;GACd,CAAC,CACL;EACJ;EAGJ,KAAK,SAAS,OAAO,KAAK;EAI1B,OAAO,EAAE,SAAS,yBAFH,MAAS,OAAO,KAEiB,CAAC,CAAC,IAAS,GAAG,OAAO,MAAM,EAAE;CACjF;CAEA,SACI,OACF;EACE,IAAI,MAAM,QAAQ,KAAK,GAAG;GACtB,KAAK,MAAM,WAAW,OAClB,KAAK,SAAS,OAAO;GAGzB;EACJ;EAEA,IAAI,SAAS,KAAK,GAAG;GACjB,MAAM,OAAO,OAAO,KAAK,KAAK;GAC9B,KAAK,MAAM,OAAO,MAAM;IACpB,MAAM,QAAQ,MAAM;IAEpB,IAAI,SAAS,KAAK,KAAK,MAAM,QAAQ,KAAK,GAAG;KACzC,KAAK,SAAS,KAAK;KACnB;IACJ;IAEA,IACI,QAAQ,YACR,OAAO,UAAU,UACnB;KACE,MAAM,YAAY,MAAM,MAAM,sBAAsB;KACpD,IAAI,aAAa,UAAU,OAAO,KAAA,GAC9B,MAAM,OAAO,IAAI,OAAO,UAAU,IAAI,UAAU,MAAM,EAAE;IAEhE;GACJ;EACJ;CACJ;AACJ;;;ACtFA,IAAa,gCAAb,MAAuE;CACnE;CAEA;CAEA,cAAc;EACV,KAAK,YAAY,IAAI,8BAA8B;EACnD,KAAK,sBAAsB,IAAI,0BAA0B;CAC7D;CAEA,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,KAAK;EAE7C,MAAM,OAAO,MAAM,KAAK,oBAAoB,WAAW,GAAG;EAC1D,IAAI,CAAC,MACD,OAAO;GACH,SAAS;GACT,QAAQ,CACJ,sBAAsB;IAClB,MAAA;IACA,SAAS;IACT,MAAM,IAAI;GACd,CAAC,CACL;EACJ;EAUJ,MAAM,aAAa,cAAc,IAAI;EACrC,MAAM,OAAO,OAAO,KAAK,UAAU;EASnC,MAAM,SAAyB,CAAC;EAChC,KAAK,MAAM,OAAO,MAAM;GACpB,MAAM,SAAS,OAAO,MAAM,SAAS,GAAG;GAExC,IADe,OAAO,SAAS,SAAS,CAAC,QAErC,OAAO,KAAK,sBAAsB;IAC9B,MAAA;IACA,SAAS,OAAO,SACZ,iBAAiB,IAAI,cACrB,iBAAiB,IAAI;IACzB,MAAM,CAAC,GAAG,IAAI,MAAM,GAAG;GAC3B,CAAC,CAAC;EAEV;EAEA,OAAO;GACH,SAAS,OAAO,WAAW;GAC3B;EACJ;CACJ;AACJ;;;AClEA,IAAa,2BAAb,cAA8C,UAA2B;CACrE,aAAsB;EAClB,MAAM,WAAW;EAEjB,KAAK,MACD,qBACA,gBACI,EAAE,KAAK,gBAAgB,CAAC,CACnB,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CACJ;EAEA,KAAK,MACD,YACA,gBACI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CACtD,CACJ;EAEA,KAAK,MACD,UACA,gBACI,EAAE,QAAQ,CAAC,CACN,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CACJ;CACJ;AACJ;;;AC7BA,IAAa,2BAAb,MAAkE;CAC9D;CAEA,cAAc;EACV,KAAK,YAAY,IAAI,yBAAyB;CAClD;CAEA,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,KAAK;EAE7C,IAAI,QAAQ;EAEZ,MAAM,oBAAoB,OAAO,qBAC7B,iBAAiB;EAErB,MAAM,SAAS,IAAI,aAAa,IAAI,UAAU;EAC9C,MAAM,SAAyB,CAAC;EAEhC,KAAK,MAAM,eAAe,OAAO,UAAU;GACvC,MAAM,OAAO,CACT,GAAI,IAAI,QAAQ,CAAC,GACjB,GAAI,YAAY,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,CACjD;GAEA,MAAM,UAAU,MAAM,OAAO,SAAS,aAAa;IAC/C,GAAG;IACH;GACJ,CAAC;GAED,IAAI,QAAQ,SAAS;IACjB,IAAI,sBAAsB,iBAAiB,aACvC,OAAO;KACH,SAAS,yBAAyB,MAAM,OAAO,MAAM;KACrD,QAAQ,CAAC;IACb;IAGJ;GACJ,OAAO;IACH,IAAI,QAAQ,QACR,OAAO,KAAK,iBAAiB;KACzB,SAAS,kCAAkC,YAAY,KAAK;KAC5D,QAAQ,QAAQ,UAAU,CAAC;KAC3B;IACJ,CAAC,CAAC;IAGN,IAAI,sBAAsB,iBAAiB,WAAW;KAClD,MAAM,UAAU,yBAAyB,OAAO,OAAO,MAAM;KAC7D,OAAO;MACH;MAIA,QAAQ,UAAU,CAAC,IAAI,CACnB,iBAAiB;OACb,SAAS,8CAA8C,iBAAiB,UAAU;OAClF;OACA,MAAM,IAAI;MACd,CAAC,CACL;KACJ;IACJ;IAEA;GACJ;EACJ;EAEA,IAAI,QAAQ,GACR,OAAO,EAAE,SAAS,yBAAyB,MAAM,OAAO,MAAM,EAAE;EAGpE,MAAM,UAAU,yBAAyB,OAAO,OAAO,MAAM;EAC7D,OAAO;GACH;GACA,QAAQ,UAAU,CAAC,IAAI,CACnB,iBAAiB;IACb,SAAS,8CAA8C,iBAAiB,UAAU;IAClF,QAAQ,UAAU,CAAC;IACnB,MAAM,IAAI;GACd,CAAC,CACL;EACJ;CACJ;AACJ;;;ACzFA,SAAgB,kBACZ,OACyC;CACzC,OAAO,MAAM,SAAA;AACjB;;;ACHA,IAAa,sBAAb,cAAyC,UAAsB;CAC3D,aAAsB;EAClB,MAAM,WAAW;EAEjB,KAAK,MAAM,SAAS,gBAChB,EAAE,KAAK,CAAC,CACH,GAAG,EAAE,IAAI,KAAK,CAAC,CAAC,CAChB,GAAG,EAAE,OAAO,CAAC,CAAC,CACd,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CAAC;EACD,KAAK,MAAM,OAAO,gBACd,EAAE,KAAK,CAAC,CACH,GAAG,EAAE,IAAI,KAAK,CAAC,CAAC,CAChB,GAAG,EAAE,OAAO,CAAC,CAAC,CACd,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CAAC;EAED,KAAK,MAAM,UAAU,gBACjB,EAAE,QAAQ,CAAC,CACN,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,SAAS,CAClB,CAAC;CACL;AACJ;;;AC5BA,SAASC,gBAAc,OAAa;CAChC,OAAO,IAAI,KAAK,MAAM,YAAY,GAAG,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC;AAC1E;AAEA,SAASC,SAAO,OAAsC;CAClD,IAAI,OAAO,UAAU,UACjB,OAAO,IAAI,KAAK,KAAK;CAGzB,IAAI,OAAO,UAAU,UACjB,OAAO,IAAI,KAAK,KAAK;CAGzB,OAAO;AACX;AAEA,IAAa,sBAAb,MAA6D;CACzD;CAEA,cAAc;EACV,KAAK,YAAY,IAAI,oBAAoB;CAC7C;CAEA,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,KAAK;EAE7C,IAAI;EAEJ,IAAI,IAAI,KAAK,IAAA,MAA0B,GACnC,IAAI,IAAI,KAAK,YAAA,MAAkC,GAC3C,MAAM,IAAI,KAAK,IAAA,MAAgC;OAC5C;GAEH,MAAMD,gBAAcC,SAAO,IAAI,KAAK,IAAA,MAA0B,CAAC,CAAC;GAEhE,IAAI,KAAK,IAAA,QAA4B,GAAG;GACxC,IAAI,KAAK,aAAA,MAAmC;EAChD;OAEA,MAAMD,gCAAc,IAAI,KAAK,CAAC;EAGlC,IAAI,OAAO,OAAO;GACd,MAAM,QAAQA,gBAAcC,SAAO,OAAO,KAAK,CAAC;GAChD,IAAI,MAAM,OACN,OAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,MAAM,EAAE;EAEzE;EAEA,IAAI,OAAO,KAAK;GACZ,MAAM,MAAMD,gBAAcC,SAAO,OAAO,GAAG,CAAC;GAC5C,IAAI,MAAM,KACN,OAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,MAAM,EAAE;EAEzE;EAEA,OAAO,EAAE,SAAS,yBAAyB,MAAM,OAAO,MAAM,EAAE;CACpE;AACJ;;;AC1DA,IAAa,8BAAb,cAAiD,UAA8B;CAC3E,aAAsB;EAClB,MAAM,WAAW;EAEjB,KAAK,MACD,QACA,gBACI,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAC7B,CACJ;EAEA,KAAK,MACD,MACA,gBACI,EAAE,KAAK,CACX,CACJ;EAEA,KAAK,MACD,YACA,gBACI,EAAE,KAAK,CAAC,CACH,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CACJ;EAEA,KAAK,MACD,WACA,gBACI,EAAE,KAAK,CAAC,CACH,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CACJ;EAEA,KAAK,MACD,aACA,gBACI,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CACrB,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CACJ;CACJ;AACJ;;;ACjDA,IAAa,0BAAb,cAA6C,UAA0B;CACnE,aAAsB;EAClB,KAAK,MACD,SACA,gBACI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CACd,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CACJ;EAEA,KAAK,MACD,UACA,gBACI,EAAE,QAAQ,CAAC,CACN,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CACJ;CACJ;AACJ;;;ACpBA,IAAa,0BAAb,MAAiE;CAC7D;CAEA;CAEA,cAAc;EACV,KAAK,YAAY,IAAI,wBAAwB;EAC7C,KAAK,gBAAgB,IAAI,4BAA4B;CACzD;CAEA,MAAM,WAAW,KAAmE;EAChF,IAAI,CAAC,IAAI,KAAK,IAAI,UAAU,GACxB,OAAO;EAGX,IAAI,IAAI,KAAK,YAAY,UAAU,GAC/B,OAAO,IAAI,KAAK,IAAwB,UAAU;EAGtD,MAAM,OAAO,MAAM,KAAK,cAAc,IAAI,IAAI,KAAK,IAAI,UAAU,CAAC;EAElE,IAAI,KAAK,IAAI,YAAY,IAAI;EAC7B,IAAI,KAAK,aAAa,UAAU;EAEhC,OAAO;CACX;CAEA,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,KAAK;EAE7C,MAAM,OAAO,MAAM,KAAK,WAAW,GAAG;EACtC,IAAI,CAAC,MACD,OAAO;GACH,SAAS;GACT,QAAQ,CACJ,sBAAsB;IAClB,MAAA;IACA,SAAS;IACT,MAAM,IAAI;GACd,CAAC,CACL;EACJ;EAGJ,IAAI,CAAC,OAAO,SAAS,OAAO,MAAM,WAAW,GAKzC,OAAO,EAAE,SAAS,KAAK;EAG3B,MAAM,cAAc,OAAO,MAAM,SAAS,KAAK,IAAI;EACnD,IAAI,aACA,OAAO,EAAE,SAAS,yBAAyB,aAAa,OAAO,MAAM,EAAE;EAG3E,OAAO;GACH,SAAS,yBAAyB,aAAa,OAAO,MAAM;GAC5D,QAAQ,CACJ,sBAAsB;IAClB,MAAA;IACA,SAAS,YAAY,KAAK,KAAK;IAC/B,MAAM,IAAI;GACd,CAAC,CACL;EACJ;CACJ;AACJ;;;ACzEA,IAAa,mCAAb,cAAsD,UAAmC;CACrF,aAAsB,CAEtB;AACJ;;;ACHA,IAAa,mCAAb,MAA0E;CACtE;CAEA,cAAc;EACV,KAAK,YAAY,IAAI,iCAAiC;CAC1D;CAEA,MAAM,SAAS,OAA6D;EAIxE,OAAO,EAAE,SAAS,yBAAyB,OAAM,MAH5B,KAAK,UAAU,IAAI,KAAK,EAAA,CAGW,MAAM,EAAE;CACpE;AACJ;;;ACXA,IAAa,4BAAb,cAA+C,UAA4B;CACvE,aAAsB;EAClB,MAAM,WAAW;EAEjB,KAAK,MACD,qBACA,gBACI,EAAE,KAAK,gBAAgB,CAAC,CACnB,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CACJ;EAEA,KAAK,MACD,kBACA,gBACI,EAAE,OAAO,CAAC,CACL,IAAI,CAAC,CAAC,CACN,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAC9B,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CACJ;EACA,KAAK,MACD,yBACA,gBACI,EAAE,QAAQ,CAAC,CACN,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CACJ;EACA,KAAK,MACD,4BACA,gBACI,EAAE,QAAQ,CAAC,CACN,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CACJ;EAEA,KAAK,MACD,6BACA,gBACI,EAAE,QAAQ,CAAC,CACN,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CACJ;EAEA,KAAK,MACD,UACA,gBACI,EAAE,QAAQ,CAAC,CACN,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CACJ;CACJ;AACJ;;;AC7DA,IAAa,4BAAb,MAAmE;CAC/D;CAEA;CAEA;CAEA,cAAc;EACV,KAAK,YAAY,IAAI,0BAA0B;EAC/C,KAAK,oBAAoB,IAAI,wBAAwB;EACrD,KAAK,sBAAsB,IAAI,0BAA0B;CAC7D;CAEA,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,KAAK;EAE7C,MAAM,WAAW,MAAM,KAAK,kBAAkB,WAAW,GAAG;EAC5D,IAAI,CAAC,UACD,OAAO;GACH,SAAS;GACT,QAAQ,CACJ,sBAAsB;IAClB,MAAA;IACA,SAAS;IACT,MAAM,IAAI;GACd,CAAC,CACL;EACJ;EAGJ,MAAM,aAAa,MAAM,KAAK,oBAAoB,WAAW,GAAG;EAChE,IAAI,CAAC,YACD,OAAO;GACH,SAAS;GACT,QAAQ,CACJ,sBAAsB;IAClB,MAAA;IACA,SAAS;IACT,MAAM,IAAI;GACd,CAAC,CACL;EACJ;EAIJ,KAD+B,OAAO,6BAA6B,SAG/D,SAAS,aACT,SAAS,cAAc,UAMvB,OAAO,EAAE,SAAS,KAAK;EAG3B,IAAI;EACJ,IAAI,OAAO,gBACP,IAAI,MAAM,QAAQ,OAAO,cAAc,GACnC,OAAO,OAAO;OAEd,OAAO,CAAC,OAAO,cAAc;OAE9B;GACH,OAAO;IACH;IACA;IACA;IACA;GACJ;GAEA,OAAO,oBAAoB,iBAAiB;EAChD;EAGA,IAAI,EAD0B,OAAO,yBAAyB,OAClC;GACxB,MAAM,eAAe,OAAO,KAAK,UAAU;GAC3C,MAAM,YAAuB,CAAC;GAC9B,KAAK,MAAM,eAAe,cAAc;IACpC,IAAI,WAAqB;IAEzB,KAAK,MAAM,OAAO,MACd,IACI,gBAAgB,OAChB,YAAY,SAAS,GAAG,GAC1B;KACE,WAAW;KACX;IACJ;IAGJ,IAAI,UACA,UAAU,KAAK,WAAW;GAElC;GAEA,IAAI,UAAU,SAAS,GACnB,KAAK,KAAK,GAAG,SAAS;EAE9B;EAEA,IAAI,QAAQ;EACZ,IAAI,YAAY;EAEhB,KAAK,MAAM,OAAO,MAAM;GACpB,IAAI,CAAC,eAAe,YAAY,GAAG,GAC/B;GAGJ,YAAY;GAEZ,IAAI,UAAoB;GAExB,MAAM,iBAAiB,WAAW;GAElC,IACI,mBAAmB,QACnB,OAAO,0BAEP,UAAU;QACP,IACH,mBAAmB,SAAS,WAC5B,mBAAmB,SAAS,WAE5B,UAAU;GAGd,IAAI,SAAS;IACT,IAAI,OAAO,sBAAsB,iBAAiB,aAC9C,OAAO,EAAE,SAAS,yBAAyB,MAAM,OAAO,MAAM,EAAE;IAGpE;GACJ,OAAO;IACH,IAAI,OAAO,sBAAsB,iBAAiB,WAC9C,OAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,MAAM,EAAE;IAGrE;GACJ;EACJ;EAEA,IAAI,CAAC,WAKD,OAAO,EAAE,SAAS,KAAK;EAG3B,OAAO,EAAE,SAAS,yBAAyB,QAAQ,GAAG,OAAO,MAAM,EAAE;CACzE;AACJ;;;ACnKA,IAAY,qBAAL,yBAAA,oBAAA;CACH,mBAAA,WAAA;CACA,mBAAA,YAAA;CACA,mBAAA,aAAA;CACA,mBAAA,YAAA;;AACJ,EAAA,CAAA,CAAA;;;ACHA,SAAgB,uBACZ,UACF;CACE,OAAO,aAAA,YACH,aAAA,aACA,aAAA;AACR;AAEA,SAAgB,wBACZ,UACF;CACE,OAAO,aAAA,aACP,aAAA;AACJ;AAEA,SAAgB,uBACZ,UACF;CACE,OAAO,aAAA;AACX;;;ACfA,IAAa,sBAAb,cAAyC,UAAsB;CAC3D,aAAsB;EAClB,MAAM,WAAW;EAEjB,KAAK,MAAM,eAAe,gBACtB,EAAE,OAAO,CAAC,CACL,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CACb,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CAAC;EACD,KAAK,MAAM,gBAAgB,gBACvB,EAAE,OAAO,CAAC,CACL,IAAI,CAAC,CAAC,CACN,IAAI,EAAE,CAAC,CACP,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CAAC;EACD,KAAK,MAAM,eAAe,gBACtB,EAAE,OAAO,CAAC,CACL,IAAI,CAAC,CAAC,CACN,IAAI,GAAG,CAAC,CACR,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CAAC;EAED,KAAK,MAAM,SAAS,gBAChB,EAAE,KAAK,CAAC,CACH,GAAG,EAAE,IAAI,SAAS,CAAC,CAAC,CACpB,GAAG,EAAE,IAAI,KAAK,CAAC,CAAC,CAChB,GAAG,EAAE,OAAO,CAAC,CAAC,CACd,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CAAC;EACD,KAAK,MAAM,OAAO,gBACd,EAAE,KAAK,CAAC,CACH,GAAG,EAAE,IAAI,SAAS,CAAC,CAAC,CACpB,GAAG,EAAE,IAAI,KAAK,CAAC,CAAC,CAChB,GAAG,EAAE,OAAO,CAAC,CAAC,CACd,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CAAC;EAED,KAAK,MACD,YACA,gBACI,EAAE,KAAK,kBAAkB,CAAC,CACrB,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,SAAS,CAClB,CACJ;EAEA,KAAK,MACD,UACA,gBACI,EAAE,QAAQ,CAAC,CACN,GAAG,EAAE,UAAU,CAAC,CAAC,CACjB,GAAG,EAAE,KAAK,CAAC,CAAC,CACZ,SAAS,CAClB,CACJ;CACJ;AACJ;;;ACnEA,MAAM,YAAY;AAElB,SAAS,cAAc,OAAa,SAAgB;CAChD,MAAM,OAAO,UAAU,IAAI,KAAK,OAAO,oBAAI,IAAI,KAAK;CACpD,KAAK,SAAS,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC;CAElD,OAAO;AACX;AAEA,SAAS,OACL,OACA,SACK;CACL,IAAI,OAAO,UAAU,UAAU;EAC3B,IAAI,UAAU,KAAK,KAAK,GAAG;GACvB,MAAM,QAAQ,MAAM,MAAM,GAAG;GAE7B,MAAM,aAAa,OAAO,MAAM,EAAE;GAClC,MAAM,eAAe,OAAO,MAAM,EAAE;GACpC,MAAM,eAAe,MAAM,OAAO,KAAA,IAAY,OAAO,MAAM,EAAE,IAAI;GAEjE,IACI,OAAO,SAAS,UAAU,KAC1B,OAAO,SAAS,YAAY,KAC5B,OAAO,SAAS,YAAY,GAC9B;IACE,MAAM,OAAO,UAAU,IAAI,KAAK,OAAO,oBAAI,IAAI,KAAK;IACpD,KAAK,SAAS,YAAY,cAAc,cAAc,CAAC;IAEvD,OAAO;GACX;EACJ;EAEA,OAAO,IAAI,KAAK,KAAK;CACzB;CAEA,IAAI,OAAO,UAAU,UACjB,OAAO,IAAI,KAAK,KAAK;CAGzB,OAAO;AACX;AAEA,IAAa,sBAAb,MAA6D;CACzD;CAEA,cAAc;EACV,KAAK,YAAY,IAAI,oBAAoB;CAC7C;CAEA,MAAM,SAAS,OAA4B,KAA+D;EAEtG,MAAM,SAAS,MAAM,KAAK,UAAU,IAAI,KAAK;EAE7C,IAAI;EAEJ,IAAI,IAAI,KAAK,IAAA,MAA0B,GACnC,IAAI,IAAI,KAAK,YAAA,MAAkC,GAC3C,MAAM,IAAI,KAAK,IAAA,MAAgC;OAC5C;GAEH,MAAM,OAAO,IAAI,KAAK,IAAA,MAA0B,CAAC;GAEjD,IAAI,KAAK,IAAA,QAA4B,GAAG;GACxC,IAAI,KAAK,aAAA,MAAmC;EAChD;OAEA,sBAAM,IAAI,KAAK;EAGnB,IAAI,OAAO,OAAO;GACd,MAAM,QAAQ,cAAc,OAAO,OAAO,OAAO,GAAG,GAAG,GAAG;GAC1D,IAAI,MAAM,OACN,OAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,MAAM,EAAE;EAEzE;EAEA,IAAI,OAAO,KAAK;GACZ,MAAM,MAAM,cAAc,OAAO,OAAO,KAAK,GAAG,GAAG,GAAG;GACtD,IAAI,MAAM,KACN,OAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,MAAM,EAAE;EAEzE;EAEA,IAAI,OAAO,UAAU;GACjB,IACI,uBAAuB,OAAO,QAAQ,KACtC,OAAO;QAEH,IAAI,OAAO,MAAM,OAAO,aACxB,OAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,MAAM,EAAE;GAAA;GAIzE,IACI,wBAAwB,OAAO,QAAQ,KACvC,OAAO;QAEH,IAAI,QAAQ,MAAM,OAAO,cACzB,OAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,MAAM,EAAE;GAAA;GAIzE,IACI,uBAAuB,OAAO,QAAQ,KACtC,OAAO,aACT;IACE,MAAM,QAAQ,IAAI,KAAK,IAAI,YAAY,GAAG,GAAG,CAAC;IAC9C,MAAM,OAAQ,IAAI,QAAQ,IAAI,MAAM,QAAQ,KACtC,MAAM,kBAAkB,IAAI,IAAI,kBAAkB,KAAK,KAAK;IAKlE,IAFkB,KAAK,MAAM,QADd,MAAO,KAAK,KAAK,GAGpB,MAAM,OAAO,aACrB,OAAO,EAAE,SAAS,yBAAyB,OAAO,OAAO,MAAM,EAAE;GAEzE;EACJ;EAEA,OAAO,EAAE,SAAS,yBAAyB,MAAM,OAAO,MAAM,EAAE;CACpE;AACJ;;;AC7HA,SAAgB,qBAIZ,MACA,MACqB;CACrB,OAAO;EACH,GAAG;EACH;CACJ;AACJ;;;ACFA,MAAa,0BAA0B;gBACJ,IAAI,yBAAyB;iBAC5B,IAAI,0BAA0B;qBACzB,IAAI,8BAA8B;WAC7C,IAAI,oBAAoB;eACpB,IAAI,wBAAwB;wBAClB,IAAI,iCAAiC;iBAC5C,IAAI,0BAA0B;WACrC,IAAI,oBAAoB;AACtD;;;ACFA,IAAa,sBAAb,MAAiE;CAC7D;CAEA;CAEA;CAEA;CAIA,YAAY,SAAqC;EAC7C,KAAK,WAAW,QAAQ;EAExB,KAAK,WAAW,QAAQ,YAAY;EACpC,KAAK,UAAU,QAAQ,WAAW;EAElC,IAAI,QAAQ,cACR,KAAK,eAAe,QAAQ;OAE5B,KAAK,eAAe,IAAI,aAAa,uBAAuB;CAEpE;CAIA,MAAgB,QACZ,OACA,YAGI,CAAC,GACmC;EACxC,OAAO,KAAK,SAAS,QAAQ;GACzB,MAAM;GACN,UAAU,UAAU,YAAY,KAAK;GACrC,SAAS,UAAU,WAAW,KAAK;EACvC,CAAC;CACL;CAIA,MAAM,SAAS,KAAkD;EAC7D,IAAI,CAAC,MAAM,QAAQ,IAAI,IAAI,GAAG;GAC1B,MAAM,KAAK,SAAS;IAChB,GAAG;IACH,MAAM,CAAC,IAAI,IAAI;GACnB,CAAC;GACD;EACJ;EAEA,MAAM,EAAE,UAAU,CAAC,MAAM;EAEzB,MAAM,mBAAmB,QAAQ,oBAC7B,iBAAiB;EAErB,MAAM,SAAmB,CAAC;EAE1B,IAAI,QAAQ;EAEZ,MAAM,WAAW,IAAI,SAAS,IAAI,WAAW;EAE7C,KAAK,MAAM,QAAQ,IAAI,MAAM;GACzB,MAAM,UAAU,MAAM,KAAK,QAAQ,MAAM;IACrC,SAAS,IAAI;IACb,UAAU,IAAI;GAClB,CAAC;GACD,IAAI,CAAC,SAAS;IACV,OAAO,KAAK,gBAAgB;KACxB,MAAM,UAAU;KAChB,SAAS,OAAO,KAAK;KACrB,MAAM,CAAC,IAAI;IACf,CAAC,CAAC;IAEF,IAAI,qBAAqB,iBAAiB,WAAW;KACjD,MAAM,QAAQ,gBAAgB,iBAAiB,IAAI,IAAI;KACvD,MAAM,UAAU,MAAM;KACtB,MAAM;IACV;IAEA;GACJ;GAEA,MAAM,WAAW,QAAQ,YAAY,CAAC;GACtC,IAAI,SAAS,WAAW,GAAG;IACvB,IAAI,qBAAqB,iBAAiB,aACtC;IAGJ;IAEA;GACJ;GAEA,MAAM,OAAO,SAAS,MAAM;GAC5B,KAAK,IAAA,qBAA0C,OAAO;GAKtD,MAAM,kBAAoC;IACtC,MAAA;IACA,mBAL2B,QAAQ,WAAW,qBAC9C,iBAAiB;IAKjB,UAAU;GACd;GAEA,MAAM,mBAAmB,MAAM,KAAK,aAAa,SAC7C,iBACA,8BAA8B;IAC1B,SAAS,QAAQ;IACjB,SAAS,QAAQ;IACjB;GACJ,CAAC,CACL;GAEA,IAAI,iBAAiB,SAAS;IAC1B,IAAI,qBAAqB,iBAAiB,aACtC;IAGJ;GACJ,OAAO;IACH,OAAO,KAAK,uBAAuB;KAC/B,MAAM,UAAU;KAChB,QAAQ,iBAAiB,UAAU,CAAC;KACpC,SAAS,OAAO,QAAQ,WAAW,KAAK;KACxC,MAAM,CAAC,QAAQ,WAAW,IAAI;IAClC,CAAC,CAAC;IAEF,IAAI,qBAAqB,iBAAiB,WAAW;KACjD,MAAM,QAAQ,gBAAgB,iBAAiB,QAAQ,WAAW,IAAI;KACtE,MAAM,UAAU,MAAM;KACtB,MAAM;IACV;IAEA;GACJ;EACJ;EAEA,IAAI,QAAQ,GACR;EAGJ,IAAI,OAAO,WAAW,GAClB,MAAM,gBAAgB,UAAU,IAAI,IAAI;OACrC;GACH,MAAM,QAAQ,gBAAgB,iBAAiB,IAAI,IAAI;GACvD,MAAM,UAAU,MAAM;GACtB,MAAM;EACV;CACJ;CAEA,MAAM,cAAc,KAAkD;EAClE,OAAO,KAAK,SAAS;GACjB,GAAG;GACH,SAAS;IACL,GAAI,IAAI,WAAW,CAAC;IACpB,kBAAkB,iBAAiB;GACvC;EACJ,CAAC;CACL;CAIA,MAAM,YAAY,KAAkD;EAChE,OAAO,KAAK,SAAS;GACjB,GAAG;GACH,SAAS;IACL,GAAI,IAAI,WAAW,CAAC;IACpB,kBAAkB;;;;IAIlB;GACJ;EACJ,CAAC;CACL;CAEA,MAAM,iBAAiB,KAAkD;EACrE,OAAO,KAAK,YAAY;GACpB,GAAG;GACH,SAAS;IACL,GAAI,IAAI,WAAW,CAAC;IACpB,kBAAkB,iBAAiB;GACvC;EACJ,CAAC;CACL;AACJ"}

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@authup/access",
     "type": "module",
-    "version": "1.0.0-beta.42",
+    "version": "1.0.0-beta.44",
     "description": "A library for evaluating permissions and policies.",
     "license": "Apache-2.0",
     "exports": {
@@ -54,20 +54,20 @@
     "homepage": "https://github.com/authup/authup#readme",
     "dependencies": {
         "@ucast/mongo2js": "^2.0.0",
-        "@validup/adapter-zod": "^0.2.4",
         "pathtrace": "^2.2.0",
-        "validup": "^0.2.2",
-        "zod": "^4.4.3"
+        "validup": "^0.5.1",
+        "zod": "^4.4.3",
+        "@validup/zod": "^0.3.3"
     },
     "devDependencies": {
-        "@authup/errors": "^1.0.0-beta.42",
-        "@authup/kit": "^1.0.0-beta.42",
+        "@authup/errors": "^1.0.0-beta.44",
+        "@authup/kit": "^1.0.0-beta.44",
         "unplugin-swc": "^1.5.9",
         "vitest": "^4.0.14"
     },
     "peerDependencies": {
-        "@authup/errors": "^1.0.0-beta.42",
-        "@authup/kit": "^1.0.0-beta.42"
+        "@authup/errors": "^1.0.0-beta.44",
+        "@authup/kit": "^1.0.0-beta.44"
     },
     "publishConfig": {
         "access": "public"