@authup/access 1.0.0-beta.63 → 1.0.0-beta.65

package/dist/index.d.mts

@@ -5,7 +5,7 @@ import { Issue, IssueGroup, IssueItem } from "@ebec/core";
 import { Container } from "validup";
 import { MongoFiltersParser, MongoFiltersParserInput } from "@rapiq/parser-mongo";
 //#region src/policy/data.d.ts
-interface IPolicyData {
+export interface IPolicyData {
   set(key: string, value: unknown): void;
   has(key: string): boolean;
   get<T = unknown>(key: string): T;
@@ -13,7 +13,7 @@ interface IPolicyData {
   setValidated(key: string): void;
   clone(): IPolicyData;
 }
-declare class PolicyData implements IPolicyData {
+export declare class PolicyData implements IPolicyData {
   protected data: Record<string, any>;
   protected validated: Set<string>;
   constructor(data?: Record<string, any>, validated?: Set<string>);
@@ -26,7 +26,7 @@ declare class PolicyData implements IPolicyData {
 }
 //#endregion
 //#region src/policy/evaluation/context/types.d.ts
-type PolicyEvaluationContext = {
+export type PolicyEvaluationContext = {
   readonly evaluators: Record<string, IPolicyEvaluator>;
   readonly path: (string | number)[];
   readonly exclude: string[];
@@ -40,14 +40,14 @@ type PolicyEvaluationContext = {
    */
   readonly withConditions: boolean;
 };
-type PolicyEvaluationContextInput = Partial<PolicyEvaluationContext>;
+export type PolicyEvaluationContextInput = Partial<PolicyEvaluationContext>;
 //#endregion
 //#region src/policy/evaluation/context/define.d.ts
-declare function definePolicyEvaluationContext(input?: PolicyEvaluationContextInput): PolicyEvaluationContext;
+export declare function definePolicyEvaluationContext(input?: PolicyEvaluationContextInput): PolicyEvaluationContext;
 //#endregion
 //#region src/policy/evaluation/types.d.ts
-type PolicyEvaluators = Record<string, IPolicyEvaluator>;
-type PolicyEvaluationResult = {
+export type PolicyEvaluators = Record<string, IPolicyEvaluator>;
+export type PolicyEvaluationResult = {
   success: boolean;
   /**
    * The policy could not be settled yet — a data key it requires is absent from the
@@ -70,7 +70,7 @@ type PolicyEvaluationResult = {
   condition?: ICondition;
   issues?: Issue[];
 };
-interface IPolicyEvaluator {
+export interface IPolicyEvaluator {
   /**
    * PolicyData keys this policy needs before it can settle (e.g. `identity`,
    * `attributes`). When any returned key is absent from the evaluation bag, the
@@ -100,7 +100,7 @@ interface IPolicyEvaluator {
 }
 //#endregion
 //#region src/policy/types.d.ts
-type BasePolicy<T extends string = string> = {
+export type BasePolicy<T extends string = string> = {
   /**
    * Type describing the policy.
    */
@@ -110,10 +110,10 @@ type BasePolicy<T extends string = string> = {
    */
   invert?: boolean;
 };
-type PolicyWithType<R extends Record<string, any> = Record<string, any>, T extends string = string> = R & BasePolicy<T>;
+export type PolicyWithType<R extends Record<string, any> = Record<string, any>, T extends string = string> = R & BasePolicy<T>;
 //#endregion
 //#region src/policy/engine/types.d.ts
-interface IPolicyEngine {
+export interface IPolicyEngine {
   evaluate(policy: BasePolicy, options: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
   evaluateOrFail(policy: BasePolicy, options: PolicyEvaluationContext): Promise<void>;
 }
@@ -123,7 +123,7 @@ interface IPolicyEngine {
  * The policy engine is a component that interprets defined policies and makes decisions
  * on whether to allow or deny a particular access.
  */
-declare class PolicyEngine implements IPolicyEngine {
+export declare class PolicyEngine implements IPolicyEngine {
   protected evaluators: Record<string, IPolicyEvaluator>;
   constructor(evaluators?: PolicyEvaluators);
   registerEvaluator(type: string, evaluator: IPolicyEvaluator): void;
@@ -137,11 +137,11 @@ declare class PolicyEngine implements IPolicyEngine {
 }
 //#endregion
 //#region src/policy/issue/constants.d.ts
-declare enum PolicyIssueSeverity {
+export declare enum PolicyIssueSeverity {
   WARNING = "warning",
   ERROR = "error"
 }
-declare enum PolicyIssueCode {
+export declare enum PolicyIssueCode {
   DATA_MISSING = "DATA_MISSING",
   DATA_INVALID = "DATA_INVALID",
   INVALID = "INVALID",
@@ -159,17 +159,17 @@ declare enum PolicyIssueCode {
 }
 //#endregion
 //#region src/policy/issue/types.d.ts
-type PolicyIssueItem = IssueItem;
-type PolicyIssueGroup = IssueGroup;
-type PolicyIssue = PolicyIssueItem | PolicyIssueGroup;
+export type PolicyIssueItem = IssueItem;
+export type PolicyIssueGroup = IssueGroup;
+export type PolicyIssue = PolicyIssueItem | PolicyIssueGroup;
 //#endregion
 //#region src/policy/issue/define.d.ts
-declare function definePolicyIssueItem(input: Omit<PolicyIssueItem, 'type'>): PolicyIssueItem;
-declare function definePolicyIssueGroup(input: Omit<PolicyIssueGroup, 'type'>): PolicyIssueGroup;
+export declare function definePolicyIssueItem(input: Omit<PolicyIssueItem, 'type'>): PolicyIssueItem;
+export declare function definePolicyIssueGroup(input: Omit<PolicyIssueGroup, 'type'>): PolicyIssueGroup;
 //#endregion
 //#region src/policy/error/module.d.ts
-declare const POLICY_ERROR_INSTANCE: unique symbol;
-declare class PolicyError extends AuthupError {
+export declare const POLICY_ERROR_INSTANCE: unique symbol;
+export declare class PolicyError extends AuthupError {
   constructor(message?: string, code?: string | null, issues?: PolicyIssue[]);
   static evaluatorNotFound(type: string): PolicyError;
   static evaluatorNotProcessable(): PolicyError;
@@ -177,38 +177,38 @@ declare class PolicyError extends AuthupError {
 }
 //#endregion
 //#region src/policy/error/check.d.ts
-declare function isPolicyError(input: unknown): input is PolicyError;
+export declare function isPolicyError(input: unknown): input is PolicyError;
 //#endregion
 //#region src/policy/helpers/invert.d.ts
 type InvertFn = (input: boolean) => boolean;
-declare function maybeInvertPolicyOutcome(outcome: boolean, invert?: boolean | InvertFn): boolean;
+export declare function maybeInvertPolicyOutcome(outcome: boolean, invert?: boolean | InvertFn): boolean;
 //#endregion
 //#region src/policy/built-in/attribute-names/types.d.ts
-interface AttributeNamesPolicy extends BasePolicy {
+export interface AttributeNamesPolicy extends BasePolicy {
   names: string[];
 }
 //#endregion
 //#region src/policy/built-in/attribute-names/validator.d.ts
-declare class AttributeNamesPolicyValidator extends Container<AttributeNamesPolicy> {
+export declare class AttributeNamesPolicyValidator extends Container<AttributeNamesPolicy> {
   initialize(): void;
 }
 //#endregion
 //#region src/policy/built-in/attributes/types.d.ts
-type AttributesPolicyQuery<T extends Record<string, any> = Record<string, any>> = MongoFiltersParserInput<T>;
-interface AttributesPolicy<T extends Record<string, any> = Record<string, any>> extends BasePolicy {
+export type AttributesPolicyQuery<T extends Record<string, any> = Record<string, any>> = MongoFiltersParserInput<T>;
+export interface AttributesPolicy<T extends Record<string, any> = Record<string, any>> extends BasePolicy {
   query: AttributesPolicyQuery<T>;
 }
 //#endregion
 //#region src/policy/built-in/attributes/define.d.ts
-declare function defineAttributesPolicy<T extends Record<string, any> = Record<string, any>>(data: AttributesPolicy<T>): AttributesPolicy<T>;
+export declare function defineAttributesPolicy<T extends Record<string, any> = Record<string, any>>(data: AttributesPolicy<T>): AttributesPolicy<T>;
 //#endregion
 //#region src/policy/built-in/attributes/validator.d.ts
-declare class AttributesPolicyValidator<T extends Record<string, any> = Record<string, any>> extends Container<AttributesPolicy<T>> {
+export declare class AttributesPolicyValidator<T extends Record<string, any> = Record<string, any>> extends Container<AttributesPolicy<T>> {
   initialize(): void;
 }
 //#endregion
 //#region src/policy/built-in/attributes/evaluator.d.ts
-declare class AttributesPolicyEvaluator<T extends Record<string, any> = Record<string, any>> implements IPolicyEvaluator {
+export declare class AttributesPolicyEvaluator<T extends Record<string, any> = Record<string, any>> implements IPolicyEvaluator {
   protected validator: AttributesPolicyValidator<T>;
   protected parser: MongoFiltersParser;
   constructor();
@@ -220,7 +220,7 @@ declare class AttributesPolicyEvaluator<T extends Record<string, any> = Record<s
 }
 //#endregion
 //#region src/policy/built-in/attribute-names/evaluator.d.ts
-declare class AttributeNamesPolicyEvaluator implements IPolicyEvaluator {
+export declare class AttributeNamesPolicyEvaluator implements IPolicyEvaluator {
   protected validator: AttributeNamesPolicyValidator;
   protected attributesEvaluator: AttributesPolicyEvaluator;
   constructor();
@@ -228,7 +228,7 @@ declare class AttributeNamesPolicyEvaluator implements IPolicyEvaluator {
 }
 //#endregion
 //#region src/policy/built-in/composite/types.d.ts
-interface CompositePolicy extends BasePolicy {
+export interface CompositePolicy extends BasePolicy {
   /**
    * How to decide if a policy evaluates to true.
    */
@@ -240,46 +240,46 @@ interface CompositePolicy extends BasePolicy {
 }
 //#endregion
 //#region src/policy/built-in/composite/validator.d.ts
-declare class CompositePolicyValidator extends Container<CompositePolicy> {
+export declare class CompositePolicyValidator extends Container<CompositePolicy> {
   initialize(): void;
 }
 //#endregion
 //#region src/policy/built-in/composite/evaluator.d.ts
-declare class CompositePolicyEvaluator implements IPolicyEvaluator {
+export declare class CompositePolicyEvaluator implements IPolicyEvaluator {
   protected validator: CompositePolicyValidator;
   constructor();
   evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
 }
 //#endregion
 //#region src/policy/built-in/composite/helper.d.ts
-declare function isCompositePolicy(input: PolicyWithType): input is PolicyWithType<CompositePolicy>;
+export declare function isCompositePolicy(input: PolicyWithType): input is PolicyWithType<CompositePolicy>;
 //#endregion
 //#region src/policy/built-in/date/types.d.ts
-interface DatePolicy extends BasePolicy {
+export interface DatePolicy extends BasePolicy {
   start?: string | Date | number;
   end?: string | Date | number;
 }
 //#endregion
 //#region src/policy/built-in/date/validator.d.ts
-declare class DatePolicyValidator extends Container<DatePolicy> {
+export declare class DatePolicyValidator extends Container<DatePolicy> {
   initialize(): void;
 }
 //#endregion
 //#region src/policy/built-in/date/evaluator.d.ts
-declare class DatePolicyEvaluator implements IPolicyEvaluator {
+export declare class DatePolicyEvaluator implements IPolicyEvaluator {
   protected validator: DatePolicyValidator;
   constructor();
   evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
 }
 //#endregion
 //#region src/policy/built-in/identity/types.d.ts
-interface IdentityPolicy extends BasePolicy {
+export interface IdentityPolicy extends BasePolicy {
   /**
    * Set of allowed identity types.
    */
   types?: string[];
 }
-type IdentityPolicyData = {
+export type IdentityPolicyData = {
   /**
    * user, client
    */
@@ -308,12 +308,12 @@ declare class PolicyIdentityDataValidator extends Container<IdentityPolicyData>
 }
 //#endregion
 //#region src/policy/built-in/identity/validator.d.ts
-declare class IdentityPolicyValidator extends Container<IdentityPolicy> {
+export declare class IdentityPolicyValidator extends Container<IdentityPolicy> {
   initialize(): void;
 }
 //#endregion
 //#region src/policy/built-in/identity/evaluator.d.ts
-declare class IdentityPolicyEvaluator implements IPolicyEvaluator {
+export declare class IdentityPolicyEvaluator implements IPolicyEvaluator {
   protected validator: IdentityPolicyValidator;
   protected dataValidator: PolicyIdentityDataValidator;
   constructor();
@@ -323,15 +323,15 @@ declare class IdentityPolicyEvaluator implements IPolicyEvaluator {
 }
 //#endregion
 //#region src/policy/built-in/permission-binding/types.d.ts
-interface PermissionBindingPolicy extends BasePolicy {}
+export interface PermissionBindingPolicy extends BasePolicy {}
 //#endregion
 //#region src/policy/built-in/permission-binding/validator.d.ts
-declare class PermissionBindingPolicyValidator extends Container<PermissionBindingPolicy> {
+export declare class PermissionBindingPolicyValidator extends Container<PermissionBindingPolicy> {
   initialize(): void;
 }
 //#endregion
 //#region src/policy/built-in/permission-binding/module.d.ts
-declare class PermissionBindingPolicyEvaluator implements IPolicyEvaluator {
+export declare class PermissionBindingPolicyEvaluator implements IPolicyEvaluator {
   protected validator: PermissionBindingPolicyValidator;
   constructor();
   requires(): string[];
@@ -346,7 +346,7 @@ declare class PermissionBindingPolicyEvaluator implements IPolicyEvaluator {
  * A missing/unknown column coerces to `own` (fail-closed); `none` is only ever an
  * explicit value (the grant reaches no realm at all).
  */
-declare enum RealmScope {
+export declare enum RealmScope {
   /** No reach — the grant matches no resource realm. */
   NONE = "none",
   /** Own realm only — resource realm must equal the actor's realm. */
@@ -357,33 +357,33 @@ declare enum RealmScope {
   ANY = "any"
 }
 /** Numeric restrictiveness order — internal to the fold/compare helpers. */
-declare const REALM_SCOPE_ORDER: Record<`${RealmScope}`, number>;
+export declare const REALM_SCOPE_ORDER: Record<`${RealmScope}`, number>;
 //#endregion
 //#region src/permission/realm-scope/helpers.d.ts
 /**
  * Coerce an arbitrary value to a RealmScope, defaulting to `own` for missing /
  * null / unknown input (fail-closed). `none` is honoured only when explicit.
  */
-declare function normalizeRealmScope(value?: `${RealmScope}` | null): `${RealmScope}`;
+export declare function normalizeRealmScope(value?: `${RealmScope}` | null): `${RealmScope}`;
 /**
  * Numeric comparison of two realm scopes by restrictiveness.
  * Negative when `a` is more restrictive than `b`, positive when less.
  */
-declare function compareRealmScope(a?: `${RealmScope}` | null, b?: `${RealmScope}` | null): number;
+export declare function compareRealmScope(a?: `${RealmScope}` | null, b?: `${RealmScope}` | null): number;
 /** Fold scopes to the MOST permissive (ordered max). Empty folds to `own`. */
-declare function maxRealmScope(values: Array<`${RealmScope}` | null | undefined>): `${RealmScope}`;
+export declare function maxRealmScope(values: Array<`${RealmScope}` | null | undefined>): `${RealmScope}`;
 /** Fold scopes to the MORE restrictive (ordered min) — used to CAP a grant. Empty folds to `own`. */
-declare function minRealmScope(values: Array<`${RealmScope}` | null | undefined>): `${RealmScope}`;
+export declare function minRealmScope(values: Array<`${RealmScope}` | null | undefined>): `${RealmScope}`;
 /**
  * Whether `scope` reaches the resource. The resource realm may be presented as a single
  * id, `null` (global), or an array of realm ids — the array form (a resource that spans
  * multiple realms) requires the scope to reach EVERY listed realm (unanimous, fail-closed),
  * so any app/entity can express its realm via one or many keys under the canonical contract.
  */
-declare function realmScopeMatches(scope: `${RealmScope}` | null | undefined, resourceRealmId: string | string[] | null | undefined, identityRealmId: string | null | undefined, identityRealmName?: string | null): boolean;
+export declare function realmScopeMatches(scope: `${RealmScope}` | null | undefined, resourceRealmId: string | string[] | null | undefined, identityRealmId: string | null | undefined, identityRealmName?: string | null): boolean;
 //#endregion
 //#region src/policy/built-in/realm-match/types.d.ts
-interface RealmMatchPolicy extends BasePolicy {
+export interface RealmMatchPolicy extends BasePolicy {
   /**
    * Determines how realm-id/name matches are handled.
    */
@@ -412,12 +412,12 @@ interface RealmMatchPolicy extends BasePolicy {
 }
 //#endregion
 //#region src/policy/built-in/realm-match/validator.d.ts
-declare class RealmMatchPolicyValidator extends Container<RealmMatchPolicy> {
+export declare class RealmMatchPolicyValidator extends Container<RealmMatchPolicy> {
   initialize(): void;
 }
 //#endregion
 //#region src/policy/built-in/realm-match/evaluator.d.ts
-declare class RealmMatchPolicyEvaluator implements IPolicyEvaluator {
+export declare class RealmMatchPolicyEvaluator implements IPolicyEvaluator {
   protected validator: RealmMatchPolicyValidator;
   protected identityEvaluator: IdentityPolicyEvaluator;
   protected attributesEvaluator: AttributesPolicyEvaluator;
@@ -439,7 +439,7 @@ declare class RealmMatchPolicyEvaluator implements IPolicyEvaluator {
 }
 //#endregion
 //#region src/policy/built-in/time/constants.d.ts
-declare enum TimePolicyInterval {
+export declare enum TimePolicyInterval {
   DAILY = "daily",
   WEEKLY = "weekly",
   MONTHLY = "monthly",
@@ -447,7 +447,7 @@ declare enum TimePolicyInterval {
 }
 //#endregion
 //#region src/policy/built-in/time/types.d.ts
-interface TimePolicy extends BasePolicy {
+export interface TimePolicy extends BasePolicy {
   /**
    * Format: HH:MM
    */
@@ -475,24 +475,24 @@ interface TimePolicy extends BasePolicy {
 }
 //#endregion
 //#region src/policy/built-in/time/validator.d.ts
-declare class TimePolicyValidator extends Container<TimePolicy> {
+export declare class TimePolicyValidator extends Container<TimePolicy> {
   initialize(): void;
 }
 //#endregion
 //#region src/policy/built-in/time/evaluator.d.ts
-declare class TimePolicyEvaluator implements IPolicyEvaluator {
+export declare class TimePolicyEvaluator implements IPolicyEvaluator {
   protected validator: TimePolicyValidator;
   constructor();
   evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
 }
 //#endregion
 //#region src/policy/built-in/time/helpers.d.ts
-declare function isIntervalForDayOfWeek(interval: string): interval is TimePolicyInterval.WEEKLY | TimePolicyInterval.MONTHLY | TimePolicyInterval.YEARLY;
-declare function isIntervalForDayOfMonth(interval: string): interval is TimePolicyInterval.MONTHLY | TimePolicyInterval.YEARLY;
-declare function isIntervalForDayOfYear(interval: string): interval is TimePolicyInterval.YEARLY;
+export declare function isIntervalForDayOfWeek(interval: string): interval is TimePolicyInterval.WEEKLY | TimePolicyInterval.MONTHLY | TimePolicyInterval.YEARLY;
+export declare function isIntervalForDayOfMonth(interval: string): interval is TimePolicyInterval.MONTHLY | TimePolicyInterval.YEARLY;
+export declare function isIntervalForDayOfYear(interval: string): interval is TimePolicyInterval.YEARLY;
 //#endregion
 //#region src/policy/built-in/constants.d.ts
-declare enum BuiltInPolicyType {
+export declare enum BuiltInPolicyType {
   /**
    * Bundles different policies.
    */
@@ -526,7 +526,7 @@ declare enum BuiltInPolicyType {
    */
   PERMISSION_BINDING = "permissionBinding"
 }
-declare const SystemPolicyName: {
+export declare const SystemPolicyName: {
   readonly DEFAULT: "system.default";
   readonly IDENTITY: "system.identity";
   readonly PERMISSION_BINDING: "system.permission-binding";
@@ -546,16 +546,16 @@ type BuiltInPolicyTypeMapRaw<T extends Record<string, any> = Record<string, any>
   [BuiltInPolicyType.PERMISSION_BINDING]: PermissionBindingPolicy;
   [BuiltInPolicyType.REALM_MATCH]: RealmMatchPolicy;
 };
-type BuiltInPolicyTypeMap<T extends Record<string, any> = Record<string, any>> = { [K in keyof BuiltInPolicyTypeMapRaw<T> as `${K}`]: BuiltInPolicyTypeMapRaw<T>[K]; };
-type BuiltInPolicies<T extends Record<string, any> = Record<string, any>> = { [K in keyof BuiltInPolicyTypeMap<T>]: BuiltInPolicyTypeMap<T>[K] & {
+export type BuiltInPolicyTypeMap<T extends Record<string, any> = Record<string, any>> = { [K in keyof BuiltInPolicyTypeMapRaw<T> as `${K}`]: BuiltInPolicyTypeMapRaw<T>[K]; };
+export type BuiltInPolicies<T extends Record<string, any> = Record<string, any>> = { [K in keyof BuiltInPolicyTypeMap<T>]: BuiltInPolicyTypeMap<T>[K] & {
   type: K;
 }; }[keyof BuiltInPolicyTypeMap];
 //#endregion
 //#region src/policy/built-in/define.d.ts
-declare function definePolicyWithType<K extends keyof BuiltInPolicyTypeMap, D extends BuiltInPolicyTypeMap<any>[K]>(type: K, data: D): PolicyWithType<D, K>;
+export declare function definePolicyWithType<K extends keyof BuiltInPolicyTypeMap, D extends BuiltInPolicyTypeMap<any>[K]>(type: K, data: D): PolicyWithType<D, K>;
 //#endregion
 //#region src/policy/constants.d.ts
-declare const PolicyDefaultEvaluators: {
+export declare const PolicyDefaultEvaluators: {
   readonly composite: CompositePolicyEvaluator;
   readonly attributes: AttributesPolicyEvaluator<Record<string, any>>;
   readonly attributeNames: AttributeNamesPolicyEvaluator;
@@ -575,7 +575,7 @@ declare const PolicyDefaultEvaluators: {
  * a third-party evaluator may supply its own key without any change to this published type
  * (the `access` evaluator set is deliberately extensible).
  */
-interface PolicyInput {
+export interface PolicyInput {
   [BuiltInPolicyType.IDENTITY]?: IdentityPolicyData;
   [BuiltInPolicyType.ATTRIBUTES]?: Record<string, any>;
   [BuiltInPolicyType.REALM_MATCH]?: string | string[] | null;
@@ -588,11 +588,11 @@ interface PolicyInput {
  * Prefer this over `new PolicyData({ ... })` at construction sites so the key vocabulary and
  * per-key value types live in one place.
  */
-declare function definePolicyData(input?: PolicyInput): PolicyData;
+export declare function definePolicyData(input?: PolicyInput): PolicyData;
 //#endregion
 //#region src/permission/error/module.d.ts
-declare const PERMISSION_ERROR_INSTANCE: unique symbol;
-declare class PermissionError extends AuthupError {
+export declare const PERMISSION_ERROR_INSTANCE: unique symbol;
+export declare class PermissionError extends AuthupError {
   constructor(options?: AuthupErrorOptions);
   static notFound(name: string): PermissionError;
   static denied(name: string): PermissionError;
@@ -601,10 +601,10 @@ declare class PermissionError extends AuthupError {
 }
 //#endregion
 //#region src/permission/error/check.d.ts
-declare function isPermissionError(input: unknown): input is PermissionError;
+export declare function isPermissionError(input: unknown): input is PermissionError;
 //#endregion
 //#region src/permission/types.d.ts
-type BasePermission = {
+export type BasePermission = {
   name: string;
   clientId?: string | null;
   realmId?: string | null;
@@ -615,7 +615,7 @@ type BasePermission = {
  * role/identity junction. `aggregatePermissionPolicyBindings` groups these per permission into
  * a `PermissionPolicyBindingAggregated` (the lossless disjunction of grants).
  */
-type PermissionPolicyBinding = {
+export type PermissionPolicyBinding = {
   permission: BasePermission;
   policies?: BasePolicy[];
   /**
@@ -630,7 +630,7 @@ type PermissionPolicyBinding = {
  * own (single) policy. A disjunction-aware consumer ORs `realmScopeMatches(realmScope) ∧ policy`
  * across the grants of a permission.
  */
-type PermissionGrant = {
+export type PermissionGrant = {
   /** Relative realm reach (none/own/ownOrNull/any), normalized — fail-closed default `own`. */
   realmScope: `${RealmScope}`;
   /**
@@ -646,7 +646,7 @@ type PermissionGrant = {
  * `PermissionPolicyBinding` (no top-level realmScope/policies; the access decision is the
  * OR over `grants`).
  */
-type PermissionPolicyBindingAggregated = {
+export type PermissionPolicyBindingAggregated = {
   permission: BasePermission;
   grants: PermissionGrant[];
 };
@@ -659,10 +659,10 @@ type PermissionPolicyBindingAggregated = {
  * grant disjunction directly, so each grant's realm reach stays paired with the policy that
  * gates it.
  */
-declare function aggregatePermissionPolicyBindings(input: PermissionPolicyBinding[]): PermissionPolicyBindingAggregated[];
+export declare function aggregatePermissionPolicyBindings(input: PermissionPolicyBinding[]): PermissionPolicyBindingAggregated[];
 //#endregion
 //#region src/permission/helpers/equal.d.ts
-declare function isPermissionPolicyBindingEqual(a: {
+export declare function isPermissionPolicyBindingEqual(a: {
   permission: BasePermission;
 }, b: {
   permission: BasePermission;
@@ -675,23 +675,23 @@ declare function isPermissionPolicyBindingEqual(a: {
  * (see `policyDominates`). Used per grant by `isSuperset` over the aggregated disjunction —
  * every child grant must be dominated by SOME parent grant.
  */
-declare function grantDominates(parent: PermissionGrant, child: PermissionGrant): boolean;
+export declare function grantDominates(parent: PermissionGrant, child: PermissionGrant): boolean;
 //#endregion
 //#region src/permission/helpers/key.d.ts
-declare function buildPermissionKey(input: BasePermission): string;
+export declare function buildPermissionKey(input: BasePermission): string;
 //#endregion
 //#region src/permission/provider/types.d.ts
-type PermissionGetOptions = {
+export type PermissionGetOptions = {
   name: string;
   clientId?: string | null;
   realmId?: string | null;
 };
-interface IPermissionProvider {
+export interface IPermissionProvider {
   findOne(criteria: PermissionGetOptions): Promise<PermissionPolicyBindingAggregated | null>;
 }
 //#endregion
 //#region src/permission/provider/memory.d.ts
-declare class PermissionMemoryProvider implements IPermissionProvider {
+export declare class PermissionMemoryProvider implements IPermissionProvider {
   protected items: Record<string, PermissionPolicyBindingAggregated>;
   constructor(items?: PermissionPolicyBinding[]);
   findOne(options: PermissionGetOptions): Promise<PermissionPolicyBindingAggregated | null>;
@@ -699,20 +699,20 @@ declare class PermissionMemoryProvider implements IPermissionProvider {
 }
 //#endregion
 //#region src/permission/evaluator/types.d.ts
-interface IPermissionEvaluator {
+export interface IPermissionEvaluator {
   evaluate(ctx: PermissionEvaluationContext): Promise<void>;
   evaluateOneOf(ctx: PermissionEvaluationContext): Promise<void>;
   preEvaluate(ctx: PermissionEvaluationContext): Promise<void>;
   preEvaluateOneOf(ctx: PermissionEvaluationContext): Promise<void>;
   compile(ctx: PermissionCompileContext): Promise<PermissionCompileResult>;
 }
-type PermissionEvaluatorOptions = {
+export type PermissionEvaluatorOptions = {
   provider: IPermissionProvider;
   policyEngine?: IPolicyEngine;
   realmId?: string | null;
   clientId?: string | null;
 };
-type PermissionEvaluationOptions = {
+export type PermissionEvaluationOptions = {
   decisionStrategy?: `${DecisionStrategy}`;
   policiesIncluded?: string[];
   policiesExcluded?: string[];
@@ -727,14 +727,14 @@ type PermissionEvaluationOptions = {
    */
   pendingPolicies?: 'deny' | 'permit';
 };
-type PermissionEvaluationContext = {
+export type PermissionEvaluationContext = {
   name: string | string[];
   realmId?: string | null;
   clientId?: string | null;
   data?: PolicyData;
   options?: PermissionEvaluationOptions;
 };
-type PermissionCompileContext = {
+export type PermissionCompileContext = {
   /**
    * Permission name(s). Several names compile as a disjunction — the row is
    * readable when ANY of them passes (`evaluateOneOf` semantics).
@@ -760,7 +760,7 @@ type PermissionCompileContext = {
  * - `post` — some pending policy is not expressible as a condition; fall back to
  *   loading rows and evaluating per row (always sound).
  */
-type PermissionCompileResult = {
+export type PermissionCompileResult = {
   verdict: 'allow';
 } | {
   verdict: 'deny';
@@ -772,7 +772,7 @@ type PermissionCompileResult = {
 };
 //#endregion
 //#region src/permission/evaluator/module.d.ts
-declare class PermissionEvaluator implements IPermissionEvaluator {
+export declare class PermissionEvaluator implements IPermissionEvaluator {
   protected provider: IPermissionProvider;
   protected policyEngine: IPolicyEngine;
   protected clientId?: string | null;
@@ -799,5 +799,4 @@ declare class PermissionEvaluator implements IPermissionEvaluator {
   compile(ctx: PermissionCompileContext): Promise<PermissionCompileResult>;
 }
 //#endregion
-export { AttributeNamesPolicy, AttributeNamesPolicyEvaluator, AttributeNamesPolicyValidator, AttributesPolicy, AttributesPolicyEvaluator, AttributesPolicyQuery, AttributesPolicyValidator, BasePermission, BasePolicy, BuiltInPolicies, BuiltInPolicyType, BuiltInPolicyTypeMap, CompositePolicy, CompositePolicyEvaluator, CompositePolicyValidator, DatePolicy, DatePolicyEvaluator, DatePolicyValidator, IPermissionEvaluator, IPermissionProvider, IPolicyData, IPolicyEngine, IPolicyEvaluator, IdentityPolicy, IdentityPolicyData, IdentityPolicyEvaluator, IdentityPolicyValidator, PERMISSION_ERROR_INSTANCE, POLICY_ERROR_INSTANCE, PermissionBindingPolicy, PermissionBindingPolicyEvaluator, PermissionBindingPolicyValidator, PermissionCompileContext, PermissionCompileResult, PermissionError, PermissionEvaluationContext, PermissionEvaluationOptions, PermissionEvaluator, PermissionEvaluatorOptions, PermissionGetOptions, PermissionGrant, PermissionMemoryProvider, PermissionPolicyBinding, PermissionPolicyBindingAggregated, PolicyData, PolicyDefaultEvaluators, PolicyEngine, PolicyError, PolicyEvaluationContext, PolicyEvaluationContextInput, PolicyEvaluationResult, PolicyEvaluators, PolicyInput, PolicyIssue, PolicyIssueCode, PolicyIssueGroup, PolicyIssueItem, PolicyIssueSeverity, PolicyWithType, REALM_SCOPE_ORDER, RealmMatchPolicy, RealmMatchPolicyEvaluator, RealmMatchPolicyValidator, RealmScope, SystemPolicyName, TimePolicy, TimePolicyEvaluator, TimePolicyInterval, TimePolicyValidator, aggregatePermissionPolicyBindings, buildPermissionKey, compareRealmScope, defineAttributesPolicy, definePolicyData, definePolicyEvaluationContext, definePolicyIssueGroup, definePolicyIssueItem, definePolicyWithType, grantDominates, isCompositePolicy, isIntervalForDayOfMonth, isIntervalForDayOfWeek, isIntervalForDayOfYear, isPermissionError, isPermissionPolicyBindingEqual, isPolicyError, maxRealmScope, maybeInvertPolicyOutcome, minRealmScope, normalizeRealmScope, realmScopeMatches };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/policy/data.ts","../src/policy/evaluation/context/types.ts","../src/policy/evaluation/context/define.ts","../src/policy/evaluation/types.ts","../src/policy/types.ts","../src/policy/engine/types.ts","../src/policy/engine/module.ts","../src/policy/issue/constants.ts","../src/policy/issue/types.ts","../src/policy/issue/define.ts","../src/policy/error/module.ts","../src/policy/error/check.ts","../src/policy/helpers/invert.ts","../src/policy/built-in/attribute-names/types.ts","../src/policy/built-in/attribute-names/validator.ts","../src/policy/built-in/attributes/types.ts","../src/policy/built-in/attributes/define.ts","../src/policy/built-in/attributes/validator.ts","../src/policy/built-in/attributes/evaluator.ts","../src/policy/built-in/attribute-names/evaluator.ts","../src/policy/built-in/composite/types.ts","../src/policy/built-in/composite/validator.ts","../src/policy/built-in/composite/evaluator.ts","../src/policy/built-in/composite/helper.ts","../src/policy/built-in/date/types.ts","../src/policy/built-in/date/validator.ts","../src/policy/built-in/date/evaluator.ts","../src/policy/built-in/identity/types.ts","../src/policy/built-in/identity/data/validator.ts","../src/policy/built-in/identity/validator.ts","../src/policy/built-in/identity/evaluator.ts","../src/policy/built-in/permission-binding/types.ts","../src/policy/built-in/permission-binding/validator.ts","../src/policy/built-in/permission-binding/module.ts","../src/permission/realm-scope/constants.ts","../src/permission/realm-scope/helpers.ts","../src/policy/built-in/realm-match/types.ts","../src/policy/built-in/realm-match/validator.ts","../src/policy/built-in/realm-match/evaluator.ts","../src/policy/built-in/time/constants.ts","../src/policy/built-in/time/types.ts","../src/policy/built-in/time/validator.ts","../src/policy/built-in/time/evaluator.ts","../src/policy/built-in/time/helpers.ts","../src/policy/built-in/constants.ts","../src/policy/built-in/types.ts","../src/policy/built-in/define.ts","../src/policy/constants.ts","../src/policy/input.ts","../src/permission/error/module.ts","../src/permission/error/check.ts","../src/permission/types.ts","../src/permission/helpers/aggregate.ts","../src/permission/helpers/equal.ts","../src/permission/helpers/grant.ts","../src/permission/helpers/key.ts","../src/permission/provider/types.ts","../src/permission/provider/memory.ts","../src/permission/evaluator/types.ts","../src/permission/evaluator/module.ts"],"mappings":";;;;;;;UAOiB;EACb,IAAI,aAAa;EACjB,IAAI;EACJ,IAAI,aAAa,cAAe;EAEhC,YAAY;EACZ,aAAa;EAEb,SAAU;;cAGD,sBAAsB;YACrB,MAAM;YAEN,WAAY;EAGlB,YAAA,OAAM,qBACN,YAAW;EAMf,IAAI,aAAa,aAAa,OAAO;EAKrC,IAAI,aAAa,cAAe;EAQhC,IAAI;EAIJ,aAAa;EAIb,YAAY;EAIZ,SAAK;;;;KC/CG;WACC,YAAY,eAAe;WAC3B;WACA;WACA;WACA,MAAM;;;;;;;WAON;;KAGD,+BAA+B,QAAQ;;;iBCdnC,8BACZ,QAAO,+BACP;;;KCDQ,mBAAmB,eAAe;KAElC;EACR;;;;;;;;;EASA;;;;;;;;;;EAUA,YAAY;EACZ,SAAS;;UAGI;;;;;;;;;;EAUb,UAAU,OAAO;;;;;;;;;;;;EAajB,aAAa,OAAO,qBAAqB,SAAS,0BAA0B,QAAQ;;;;EAKpF,SAAS,OAAO,qBAAqB,SAAS,0BAA0B,QAAQ;;;;KC1DxE,WAAW;;;;EAInB,OAAO;;;;EAKP;;KAGQ,eACR,UAAU,sBAAsB,qBAChC,6BACA,IAAI,WAAW;;;UCZF;EACb,SAAS,QAAQ,YAAY,SAAS,0BAA2B,QAAQ;EAEzE,eAAe,QAAQ,YAAY,SAAS,0BAA2B;;;;;;;;cC2B9D,wBAAwB;YACvB,YAAa,eAAe;EAE1B,YAAA,aAAY;EAWjB,kBACH,cACA,WAAW;EAKR,mBAAmB,YAAY;;;;;EAWhC,SAAS,QAAQ,YAAY,KAAK,0BAA2B,QAAQ;EAoHrE,eAAe,QAAQ,YAAY,KAAK,0BAA2B;;;;aCrLjE;EACR;EACA;;aAGQ;EAER;EACA;EAGA;EACA;EACA;EACA;EAGA;EACA;EAGA;EACA;EACA;EAGA;EACA;EAGA;;;;KC5BQ,kBAAkB;KAClB,mBAAmB;KAEnB,cAAc,kBAAkB;;;iBCF5B,sBAAsB,OAAO,KAAK,2BAA4B;iBAI9D,uBAAuB,OAAO,KAAK,4BAA6B;;;cCJnE;cAEA,oBAAoB;EACjB,YAAA,kBAAkB,sBAAsB,SAAS;SAStD,kBAAkB,eAAY;SAO9B,2BAAuB;SAOvB,2BAAuB;;;;iBC1BlB,cAAc,iBAAiB,SAAS;;;KCHnD,YAAY;iBAED,yBACZ,kBACA,mBAAmB;;;UCFN,6BAA6B;EAC1C;;;;cCES,sCAAsC,UAAU;EAChD;;;;KCHD,sBACR,UAAU,sBAAsB,uBAChC,wBAAwB;UAEX,iBACb,UAAU,sBAAsB,6BAC1B;EACN,OAAO,sBAAsB;;;;iBCRjB,uBACZ,UAAU,sBAAsB,qBAEhC,MAAM,iBAAiB,KACvB,iBAAiB;;;cCDR,0BACT,UAAU,sBAAsB,6BAC1B,UAAU,iBAAiB;EACxB;;;;cCKA,0BACT,UAAU,sBAAsB,gCACvB;YACC,WAAY,0BAA0B;YAEtC,QAAS;;EAOnB;EAIM,YAAY,OAAO,sBAAuB,QAAQ;EAiBlD,WAAW,KAAK,0BAA2B,QAAQ;EAkBnD,SAAS,OAAO,qBAAqB,KAAK,0BAA0B,QAAQ;YA6CxE,SACN;;;;cCtGK,yCAAyC;YACxC,WAAY;YAEZ,qBAAsB;;EAO1B,SAAS,OAAO,qBAAqB,KAAK,0BAA0B,QAAQ;;;;UCfrE,wBAAwB;;;;EAIrC,sBAAsB;;;;EAItB,UAAU;;;;cCLD,iCAAiC,UAAU;EAC3C;;;;cCIA,oCAAoC;YACnC,WAAY;;EAMhB,SAAS,OAAO,qBAAqB,KAAK,0BAA0B,QAAQ;;;;iBCdtE,kBACZ,OAAO,iBACP,SAAS,eAAe;;;UCJX,mBAAmB;EAChC,iBAAiB;EAEjB,eAAe;;;;cCAN,4BAA4B,UAAU;EACtC;;;;cCeA,+BAA+B;YAC9B,WAAY;;EAMhB,SAAS,OAAO,qBAAqB,KAAK,0BAA0B,QAAQ;;;;UC1BrE,uBAAuB;;;;EAIpC;;KAGQ;;;;EAIR;;;;EAIA;;;;EAIA;;;;EAIA;;;;EAIA;;;;cCvBS,oCAAoC,UAAU;EAC9C;;;;cCFA,gCAAgC,UAAU;EAC1C;;;;cCEA,mCAAmC;YAClC,WAAY;YAEZ,eAAgB;;EAO1B;EAIM,WAAW,KAAK,0BAA2B,QAAQ;EAiBnD,SAAS,OAAO,qBAAqB,KAAK,0BAA0B,QAAQ;;;;UCrCrE,gCAAgC;;;cCCpC,yCAAyC,UAAU;EACnD;;;;cCCA,4CAA4C;YAC3C,WAAW;;EAMrB;EAMM,SAAS,OAAO,sBAAsB,QAAQ;;;;;;;;;;;aCX5C;;EAER;;EAEA;;EAEA;;EAEA;;;cAIS,mBAAmB,UAAU;;;;;;;iBCb1B,oBAAoB,WAAW,yBAAyB;;;;;iBAYxD,kBACZ,OAAO,qBACP,OAAO;;iBAMK,cAAc,QAAQ,SAAS,sCAAsC;;iBAerE,cAAc,QAAQ,SAAS,sCAAsC;;;;;;;iBAyCrE,kBACZ,UAAU,iCACV,uDACA,4CACA;;;UClFa,yBAAyB;;;;EAItC,sBAAsB;;;;;EAMtB;;;;EAKA;;;;;EAMA;;;;;;;EAQA,WAAW;;;;cC1BF,kCAAkC,UAAU;EAC5C;;;;cCUA,qCAAqC;YACpC,WAAY;YAEZ,mBAAmB;YAEnB,qBAAsB;;EAQhC,SAAS,OAAO;;;;;;;;;;;;EAsBV,YAAY,OAAO,qBAAqB,KAAK,0BAA2B,QAAQ;EAuFhF,SAAS,OAAO,qBAAqB,KAAK,0BAA0B,QAAQ;;;;aC5I1E;EACR;EACA;EACA;EACA;;;;UCDa,mBAAmB;;;;EAIhC,0BAA0B;;;;EAK1B,wBAAwB;;;;EAKxB,cAAc;;;;EAKd;;;;EAKA;;;;EAKA;;;;cC1BS,4BAA4B,UAAU;EACtC;;;;cC0CA,+BAA+B;YAC9B,WAAY;;EAMhB,SAAS,OAAO,qBAAqB,KAAK,0BAA0B,QAAQ;;;;iBCtDtE,uBACZ,mBAAgB,YAAA,mBAAA,SAAA,mBAAA,UAAA,mBAAA;iBAOJ,wBACZ,mBAAgB,YAAA,mBAAA,UAAA,mBAAA;iBAMJ,uBACZ,mBAAgB,YAAA,mBAAA;;;aClBR;;;;EAIR;;;;EAIA;;;;EAIA;;;;EAIA;;;;EAIA;;;;EAIA;;;;EAKA;;;;EAKA;;cAMS;;;;;;;;;;KC9BR,wBAAwB,UAAU,sBAAsB;GACxD,kBAAkB,aAAa,iBAAiB;GAChD,kBAAkB,kBAAkB;GACpC,kBAAkB,OAAO;GACzB,kBAAkB,YAAY;GAC9B,kBAAkB,OAAO;GACzB,kBAAkB,WAAW;GAC7B,kBAAkB,qBAAqB;GACvC,kBAAkB,cAAc;;KAGzB,qBAAqB,UAAU,sBAAsB,0BAC5D,WAAW,wBAAwB,SAAS,MAAM,wBAAwB,GAAG;KAGtE,gBAAgB,UAAU,sBAAsB,0BACvD,WAAW,qBAAqB,KAAK,qBAAqB,GAAG;EAC1D,MAAM;WAEN;;;iBC1BQ,qBACZ,gBAAgB,sBAChB,UAAU,0BAA0B,IAEpC,MAAM,GACN,MAAM,IACN,eAAe,GAAG;;;cCGT;;;;;;;;;;;;;;;;;;;;UCAI;GACZ,kBAAkB,YAAY;GAC9B,kBAAkB,cAAc;GAChC,kBAAkB;GAClB;;;;;;;;;iBAUW,iBAAiB,QAAO,cAAmB;;;cCtB9C;cAEA,wBAAwB;EACrB,YAAA,UAAS;SASd,SAAS,eAAY;SAOrB,OAAO,eAAY;SAOnB,UAAU,kBAAe;SAOzB,iBAAiB,yBAAyB,SAAS,gBAAa;;;;iBClC3D,kBAAkB,iBAAiB,SAAS;;;KCChD;EACR;EACA;EACA;EACA,sBAAsB;;;;;;;KAQd;EACR,YAAY;EACZ,WAAW;;;;;;EAMX,gBAAgB;;;;;;;KAQR;;EAER,eAAe;;;;;;EAMf,SAAS;;;;;;;;KASD;EACR,YAAY;EACZ,QAAQ;;;;;;;;;;;iBCJI,kCACZ,OAAO,4BACR;;;iBC/Ca,+BACZ;EAAK,YAAY;GACjB;EAAK,YAAY;;;;;;;;;;iBCgHL,eAAe,QAAQ,iBAAiB,OAAO;;;iBC7G/C,mBACZ,OAAO;;;KCNC;EACR;EACA;EACA;;UAGa;EACb,QAAQ,UAAU,uBAAwB,QAAQ;;;;cCLzC,oCAAoC;YACnC,OAAQ,eAAe;EAErB,YAAA,QAAO;EAIb,QACF,SAAS,uBACV,QAAQ;EAeX,QAAQ,OAAO;;;;UCvBF;EACb,SAAS,KAAK,8BAA8B;EAE5C,cAAc,KAAK,8BAA8B;EAEjD,YAAY,KAAK,8BAA8B;EAE/C,iBAAiB,KAAK,8BAA8B;EAEpD,QAAQ,KAAK,2BAA2B,QAAQ;;KAGxC;EACR,UAAU;EACV,eAAe;EACf;EACA;;KAGQ;EACR,sBAAsB;EACtB;EACA;;;;;;;;;;EAUA;;KAGQ;EACR;EACA;EACA;EACA,OAAO;EACP,UAAU;;KAGF;;;;;EAKR;EACA;EACA;;;;;;EAMA,OAAO;;;;;;;;;;;;;KAcC;EAA4B;;EAClC;;EACA;EAAwB,WAAW;;EACnC;;;;cCnDO,+BAA+B;YAC9B,UAAW;YAEX,cAAe;YAEf;YAEA;EAIE,YAAA,SAAS;YAeL,QACZ,eACA;IACI;IACA;MAEJ,QAAQ;EAUN,SAAS,KAAK,8BAA+B;EAqH7C,cAAc,KAAK,8BAA+B;EAYlD,YAAY,KAAK,8BAA+B;EAehD,iBAAiB,KAAK,8BAA+B;;;;;;;;;;;EAsBrD,QAAQ,KAAK,2BAA4B,QAAQ"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/policy/data.ts","../src/policy/evaluation/context/types.ts","../src/policy/evaluation/context/define.ts","../src/policy/evaluation/types.ts","../src/policy/types.ts","../src/policy/engine/types.ts","../src/policy/engine/module.ts","../src/policy/issue/constants.ts","../src/policy/issue/types.ts","../src/policy/issue/define.ts","../src/policy/error/module.ts","../src/policy/error/check.ts","../src/policy/helpers/invert.ts","../src/policy/built-in/attribute-names/types.ts","../src/policy/built-in/attribute-names/validator.ts","../src/policy/built-in/attributes/types.ts","../src/policy/built-in/attributes/define.ts","../src/policy/built-in/attributes/validator.ts","../src/policy/built-in/attributes/evaluator.ts","../src/policy/built-in/attribute-names/evaluator.ts","../src/policy/built-in/composite/types.ts","../src/policy/built-in/composite/validator.ts","../src/policy/built-in/composite/evaluator.ts","../src/policy/built-in/composite/helper.ts","../src/policy/built-in/date/types.ts","../src/policy/built-in/date/validator.ts","../src/policy/built-in/date/evaluator.ts","../src/policy/built-in/identity/types.ts","../src/policy/built-in/identity/data/validator.ts","../src/policy/built-in/identity/validator.ts","../src/policy/built-in/identity/evaluator.ts","../src/policy/built-in/permission-binding/types.ts","../src/policy/built-in/permission-binding/validator.ts","../src/policy/built-in/permission-binding/module.ts","../src/permission/realm-scope/constants.ts","../src/permission/realm-scope/helpers.ts","../src/policy/built-in/realm-match/types.ts","../src/policy/built-in/realm-match/validator.ts","../src/policy/built-in/realm-match/evaluator.ts","../src/policy/built-in/time/constants.ts","../src/policy/built-in/time/types.ts","../src/policy/built-in/time/validator.ts","../src/policy/built-in/time/evaluator.ts","../src/policy/built-in/time/helpers.ts","../src/policy/built-in/constants.ts","../src/policy/built-in/types.ts","../src/policy/built-in/define.ts","../src/policy/constants.ts","../src/policy/input.ts","../src/permission/error/module.ts","../src/permission/error/check.ts","../src/permission/types.ts","../src/permission/helpers/aggregate.ts","../src/permission/helpers/equal.ts","../src/permission/helpers/grant.ts","../src/permission/helpers/key.ts","../src/permission/provider/types.ts","../src/permission/provider/memory.ts","../src/permission/evaluator/types.ts","../src/permission/evaluator/module.ts"],"mappings":";;;;;;;iBAOiB;EACb,IAAI,aAAa;EACjB,IAAI;EACJ,IAAI,aAAa,cAAe;EAEhC,YAAY;EACZ,aAAa;EAEb,SAAU;;qBAGD,sBAAsB;YACrB,MAAM;YAEN,WAAY;EAGlB,YAAA,OAAM,qBACN,YAAW;EAMf,IAAI,aAAa,aAAa,OAAO;EAKrC,IAAI,aAAa,cAAe;EAQhC,IAAI;EAIJ,aAAa;EAIb,YAAY;EAIZ,SAAK;;;;YC/CG;WACC,YAAY,eAAe;WAC3B;WACA;WACA;WACA,MAAM;;;;;;;WAON;;YAGD,+BAA+B,QAAQ;;;wBCdnC,8BACZ,QAAO,+BACP;;;YCDQ,mBAAmB,eAAe;YAElC;EACR;;;;;;;;;EASA;;;;;;;;;;EAUA,YAAY;EACZ,SAAS;;iBAGI;;;;;;;;;;EAUb,UAAU,OAAO;;;;;;;;;;;;EAajB,aAAa,OAAO,qBAAqB,SAAS,0BAA0B,QAAQ;;;;EAKpF,SAAS,OAAO,qBAAqB,SAAS,0BAA0B,QAAQ;;;;YC1DxE,WAAW;;;;EAInB,OAAO;;;;EAKP;;YAGQ,eACR,UAAU,sBAAsB,qBAChC,6BACA,IAAI,WAAW;;;iBCZF;EACb,SAAS,QAAQ,YAAY,SAAS,0BAA2B,QAAQ;EAEzE,eAAe,QAAQ,YAAY,SAAS,0BAA2B;;;;;;;;qBC2B9D,wBAAwB;YACvB,YAAa,eAAe;EAE1B,YAAA,aAAY;EAWjB,kBACH,cACA,WAAW;EAKR,mBAAmB,YAAY;;;;;EAWhC,SAAS,QAAQ,YAAY,KAAK,0BAA2B,QAAQ;EAoHrE,eAAe,QAAQ,YAAY,KAAK,0BAA2B;;;;oBCrLjE;EACR;EACA;;oBAGQ;EAER;EACA;EAGA;EACA;EACA;EACA;EAGA;EACA;EAGA;EACA;EACA;EAGA;EACA;EAGA;;;;YC5BQ,kBAAkB;YAClB,mBAAmB;YAEnB,cAAc,kBAAkB;;;wBCF5B,sBAAsB,OAAO,KAAK,2BAA4B;wBAI9D,uBAAuB,OAAO,KAAK,4BAA6B;;;qBCJnE;qBAEA,oBAAoB;EACjB,YAAA,kBAAkB,sBAAsB,SAAS;SAStD,kBAAkB,eAAY;SAO9B,2BAAuB;SAOvB,2BAAuB;;;;wBC1BlB,cAAc,iBAAiB,SAAS;;;KCHnD,YAAY;wBAED,yBACZ,kBACA,mBAAmB;;;iBCFN,6BAA6B;EAC1C;;;;qBCES,sCAAsC,UAAU;EAChD;;;;YCHD,sBACR,UAAU,sBAAsB,uBAChC,wBAAwB;iBAEX,iBACb,UAAU,sBAAsB,6BAC1B;EACN,OAAO,sBAAsB;;;;wBCRjB,uBACZ,UAAU,sBAAsB,qBAEhC,MAAM,iBAAiB,KACvB,iBAAiB;;;qBCDR,0BACT,UAAU,sBAAsB,6BAC1B,UAAU,iBAAiB;EACxB;;;;qBCKA,0BACT,UAAU,sBAAsB,gCACvB;YACC,WAAY,0BAA0B;YAEtC,QAAS;;EAOnB;EAIM,YAAY,OAAO,sBAAuB,QAAQ;EAiBlD,WAAW,KAAK,0BAA2B,QAAQ;EAkBnD,SAAS,OAAO,qBAAqB,KAAK,0BAA0B,QAAQ;YA6CxE,SACN;;;;qBCtGK,yCAAyC;YACxC,WAAY;YAEZ,qBAAsB;;EAO1B,SAAS,OAAO,qBAAqB,KAAK,0BAA0B,QAAQ;;;;iBCfrE,wBAAwB;;;;EAIrC,sBAAsB;;;;EAItB,UAAU;;;;qBCLD,iCAAiC,UAAU;EAC3C;;;;qBCIA,oCAAoC;YACnC,WAAY;;EAMhB,SAAS,OAAO,qBAAqB,KAAK,0BAA0B,QAAQ;;;;wBCdtE,kBACZ,OAAO,iBACP,SAAS,eAAe;;;iBCJX,mBAAmB;EAChC,iBAAiB;EAEjB,eAAe;;;;qBCAN,4BAA4B,UAAU;EACtC;;;;qBCeA,+BAA+B;YAC9B,WAAY;;EAMhB,SAAS,OAAO,qBAAqB,KAAK,0BAA0B,QAAQ;;;;iBC1BrE,uBAAuB;;;;EAIpC;;YAGQ;;;;EAIR;;;;EAIA;;;;EAIA;;;;EAIA;;;;EAIA;;;;cCvBS,oCAAoC,UAAU;EAC9C;;;;qBCFA,gCAAgC,UAAU;EAC1C;;;;qBCEA,mCAAmC;YAClC,WAAY;YAEZ,eAAgB;;EAO1B;EAIM,WAAW,KAAK,0BAA2B,QAAQ;EAiBnD,SAAS,OAAO,qBAAqB,KAAK,0BAA0B,QAAQ;;;;iBCrCrE,gCAAgC;;;qBCCpC,yCAAyC,UAAU;EACnD;;;;qBCCA,4CAA4C;YAC3C,WAAW;;EAMrB;EAMM,SAAS,OAAO,sBAAsB,QAAQ;;;;;;;;;;;oBCX5C;;EAER;;EAEA;;EAEA;;EAEA;;;qBAIS,mBAAmB,UAAU;;;;;;;wBCb1B,oBAAoB,WAAW,yBAAyB;;;;;wBAYxD,kBACZ,OAAO,qBACP,OAAO;;wBAMK,cAAc,QAAQ,SAAS,sCAAsC;;wBAerE,cAAc,QAAQ,SAAS,sCAAsC;;;;;;;wBAyCrE,kBACZ,UAAU,iCACV,uDACA,4CACA;;;iBClFa,yBAAyB;;;;EAItC,sBAAsB;;;;;EAMtB;;;;EAKA;;;;;EAMA;;;;;;;EAQA,WAAW;;;;qBC1BF,kCAAkC,UAAU;EAC5C;;;;qBCUA,qCAAqC;YACpC,WAAY;YAEZ,mBAAmB;YAEnB,qBAAsB;;EAQhC,SAAS,OAAO;;;;;;;;;;;;EAsBV,YAAY,OAAO,qBAAqB,KAAK,0BAA2B,QAAQ;EAuFhF,SAAS,OAAO,qBAAqB,KAAK,0BAA0B,QAAQ;;;;oBC5I1E;EACR;EACA;EACA;EACA;;;;iBCDa,mBAAmB;;;;EAIhC,0BAA0B;;;;EAK1B,wBAAwB;;;;EAKxB,cAAc;;;;EAKd;;;;EAKA;;;;EAKA;;;;qBC1BS,4BAA4B,UAAU;EACtC;;;;qBC0CA,+BAA+B;YAC9B,WAAY;;EAMhB,SAAS,OAAO,qBAAqB,KAAK,0BAA0B,QAAQ;;;;wBCtDtE,uBACZ,mBAAgB,YAAA,mBAAA,SAAA,mBAAA,UAAA,mBAAA;wBAOJ,wBACZ,mBAAgB,YAAA,mBAAA,UAAA,mBAAA;wBAMJ,uBACZ,mBAAgB,YAAA,mBAAA;;;oBClBR;;;;EAIR;;;;EAIA;;;;EAIA;;;;EAIA;;;;EAIA;;;;EAIA;;;;EAKA;;;;EAKA;;qBAMS;;;;;;;;;;KC9BR,wBAAwB,UAAU,sBAAsB;GACxD,kBAAkB,aAAa,iBAAiB;GAChD,kBAAkB,kBAAkB;GACpC,kBAAkB,OAAO;GACzB,kBAAkB,YAAY;GAC9B,kBAAkB,OAAO;GACzB,kBAAkB,WAAW;GAC7B,kBAAkB,qBAAqB;GACvC,kBAAkB,cAAc;;YAGzB,qBAAqB,UAAU,sBAAsB,0BAC5D,WAAW,wBAAwB,SAAS,MAAM,wBAAwB,GAAG;YAGtE,gBAAgB,UAAU,sBAAsB,0BACvD,WAAW,qBAAqB,KAAK,qBAAqB,GAAG;EAC1D,MAAM;WAEN;;;wBC1BQ,qBACZ,gBAAgB,sBAChB,UAAU,0BAA0B,IAEpC,MAAM,GACN,MAAM,IACN,eAAe,GAAG;;;qBCGT;;;;;;;;;;;;;;;;;;;;iBCAI;GACZ,kBAAkB,YAAY;GAC9B,kBAAkB,cAAc;GAChC,kBAAkB;GAClB;;;;;;;;;wBAUW,iBAAiB,QAAO,cAAmB;;;qBCtB9C;qBAEA,wBAAwB;EACrB,YAAA,UAAS;SASd,SAAS,eAAY;SAOrB,OAAO,eAAY;SAOnB,UAAU,kBAAe;SAOzB,iBAAiB,yBAAyB,SAAS,gBAAa;;;;wBClC3D,kBAAkB,iBAAiB,SAAS;;;YCChD;EACR;EACA;EACA;EACA,sBAAsB;;;;;;;YAQd;EACR,YAAY;EACZ,WAAW;;;;;;EAMX,gBAAgB;;;;;;;YAQR;;EAER,eAAe;;;;;;EAMf,SAAS;;;;;;;;YASD;EACR,YAAY;EACZ,QAAQ;;;;;;;;;;;wBCJI,kCACZ,OAAO,4BACR;;;wBC/Ca,+BACZ;EAAK,YAAY;GACjB;EAAK,YAAY;;;;;;;;;;wBC+GL,eAAe,QAAQ,iBAAiB,OAAO;;;wBC5G/C,mBACZ,OAAO;;;YCNC;EACR;EACA;EACA;;iBAGa;EACb,QAAQ,UAAU,uBAAwB,QAAQ;;;;qBCLzC,oCAAoC;YACnC,OAAQ,eAAe;EAErB,YAAA,QAAO;EAIb,QACF,SAAS,uBACV,QAAQ;EAeX,QAAQ,OAAO;;;;iBCvBF;EACb,SAAS,KAAK,8BAA8B;EAE5C,cAAc,KAAK,8BAA8B;EAEjD,YAAY,KAAK,8BAA8B;EAE/C,iBAAiB,KAAK,8BAA8B;EAEpD,QAAQ,KAAK,2BAA2B,QAAQ;;YAGxC;EACR,UAAU;EACV,eAAe;EACf;EACA;;YAGQ;EACR,sBAAsB;EACtB;EACA;;;;;;;;;;EAUA;;YAGQ;EACR;EACA;EACA;EACA,OAAO;EACP,UAAU;;YAGF;;;;;EAKR;EACA;EACA;;;;;;EAMA,OAAO;;;;;;;;;;;;;YAcC;EAA4B;;EAClC;;EACA;EAAwB,WAAW;;EACnC;;;;qBCnDO,+BAA+B;YAC9B,UAAW;YAEX,cAAe;YAEf;YAEA;EAIE,YAAA,SAAS;YAeL,QACZ,eACA;IACI;IACA;MAEJ,QAAQ;EAUN,SAAS,KAAK,8BAA+B;EAqH7C,cAAc,KAAK,8BAA+B;EAYlD,YAAY,KAAK,8BAA+B;EAehD,iBAAiB,KAAK,8BAA+B;;;;;;;;;;;EAsBrD,QAAQ,KAAK,2BAA4B,QAAQ"}