@callcium/sdk 0.11.0 → 0.12.0

package/dist/index.d.ts

@@ -9,9 +9,8 @@ type Span = {
   end: number;
 };
 /**
- * Execution context for context-scoped rules.
- * Each property maps to a well-known EVM execution environment value.
- * Only the properties referenced by the policy need to be supplied.
+ * Execution context for context-scoped rules. Each property maps to a well-known EVM execution environment value. Only
+ * the properties referenced by the policy need to be supplied.
  */
 type Context = {
   msgSender?: Address;
@@ -44,8 +43,8 @@ type SelectorMismatchViolation = {
   resolvedValue: Hex;
 };
 /**
- * A rule referenced a context property not supplied in the execution context — a context-scoped
- * subject, or an `EQ_CTX` operand on either scope.
+ * A rule referenced a context property not supplied in the execution context — a context-scoped subject, or a context
+ * reference operand on either scope.
  */
 type MissingContextViolation = {
   code: "MISSING_CONTEXT";
@@ -64,10 +63,8 @@ type MissingContextViolation = {
  * - `resolvedValue` present, `elementIndex` absent — scalar leaf or context value that failed the operator.
  * - `resolvedValue` present, `elementIndex` present — universal-quantifier per-element failure.
  * - `resolvedValue` absent, `elementIndex` absent — existential-aggregate failure (no element satisfied).
- * - `resolvedValue` absent, `elementIndex` present — per-element failure where the leaf could not be loaded.
  *
- * For length operations (`isLengthOp(opCode)`), `resolvedValue` is a hex-encoded count
- * rather than a 32-byte ABI word.
+ * For length operators, `resolvedValue` is the length as a 32-byte word.
  */
 type ValueMismatchViolation = {
   code: "VALUE_MISMATCH";
@@ -80,8 +77,8 @@ type ValueMismatchViolation = {
   typeCode: number;
   resolvedValue?: Hex;
   /**
-   * Resolved runtime value of a reference operand as a 32-byte word; present when the
-   * operator's operand names a reference resolved at enforcement, not a literal.
+   * Resolved runtime value of a reference operand as a 32-byte word; present when the operator's operand names a
+   * reference resolved at enforcement, not a literal.
    */
   resolvedOperand?: Hex;
   elementIndex?: number;
@@ -104,8 +101,8 @@ type CalldataNavigationVariant<C extends NavigationViolationCode> = {
 /**
  * Calldata structure prevented the rule from being evaluated.
  *
- * The operator was never applied; `opCode`, `operandData`, `typeCode`, and `elementIndex`
- * are diagnostic context describing the failing site, not a constraint claim.
+ * The operator was never applied; `opCode`, `operandData`, `typeCode`, and `elementIndex` are diagnostic context
+ * describing the failing site, not a constraint claim.
  *
  * A union of per-code variants, narrowable with `Extract<Violation, { code: "..." }>`.
  */
@@ -147,8 +144,7 @@ type QuantifierEmptyArrayViolation = {
 /**
  * Structured details of a single rule failure during enforcement.
  *
- * Carries semantic data only; no message strings.
- * Discriminate on `code` to narrow to the matching variant.
+ * Carries semantic data only; no message strings. Discriminate on `code` to narrow to the matching variant.
  */
 type Violation = MissingSelectorViolation | SelectorMismatchViolation | MissingContextViolation | ValueMismatchViolation | CalldataNavigationViolation | NonCanonicalValueViolation | QuantifierLimitExceededViolation | QuantifierEmptyArrayViolation;
 /** Machine-readable reason code for an enforcement violation. Derived from `Violation` to prevent drift. */
@@ -229,8 +225,7 @@ type IssueCategory = "typeMismatch" | "contradiction" | "redundancy" | "vacuity"
 /**
  * Machine-readable code for a policy validation issue.
  *
- * Each code names one finding of the semantic validator and matches the constant of the same
- * name in the Solidity `IssueCode` library.
+ * Each code names one finding of the semantic validator, matching the same-named Solidity `IssueCode` constant.
  */
 type IssueCode = "VALUE_OP_ON_DYNAMIC" | "VALUE_OP_ON_COMPOSITE" | "NUMERIC_OP_ON_NON_NUMERIC" | "BITMASK_ON_INVALID" | "IN_ON_BOOL" | "LENGTH_ON_STATIC" | "CONTEXT_TYPE_MISMATCH" | "UNKNOWN_OPERATOR" | "NON_CANONICAL_OPERAND" | "UNNAVIGABLE_PATH" | "NESTED_QUANTIFIER" | "HINT_MISMATCH" | "EQ_NEQ_CONTRADICTION" | "CONFLICTING_EQUALITY" | "OUT_OF_PHYSICAL_BOUNDS" | "IMPOSSIBLE_GT" | "IMPOSSIBLE_LT" | "BOUNDS_EXCLUDE_EQUALITY" | "IMPOSSIBLE_RANGE" | "SET_EXCLUDES_EQUALITY" | "EMPTY_SET_INTERSECTION" | "SET_FULLY_EXCLUDED" | "LENGTH_EQ_NEQ_CONTRADICTION" | "CONFLICTING_LENGTH" | "BOUNDS_EXCLUDE_LENGTH" | "IMPOSSIBLE_LENGTH_RANGE" | "OUT_OF_PHYSICAL_LENGTH_BOUNDS" | "IMPOSSIBLE_LENGTH_GT" | "IMPOSSIBLE_LENGTH_LT" | "BITMASK_CONTRADICTION" | "BITMASK_ANY_IMPOSSIBLE" | "UNSORTED_IN_SET" | "EMPTY_GROUP" | "DOMINATED_BOUND" | "REDUNDANT_BOUND" | "SET_REDUCTION" | "SET_REDUNDANCY" | "SET_PARTIALLY_EXCLUDED" | "DOMINATED_LENGTH_BOUND" | "REDUNDANT_LENGTH_BOUND" | "REDUNDANT_BITMASK" | "DUPLICATE_CONSTRAINT" | "FUSIBLE_RANGE" | "FUSIBLE_LENGTH_RANGE" | "VACUOUS_GTE" | "VACUOUS_LTE" | "VACUOUS_LENGTH_GTE" | "VACUOUS_LENGTH_LTE" | "VACUOUS_NEGATED_RANGE" | "VACUOUS_NEGATED_LENGTH_RANGE" | "PATH_DEPTH_EXCEEDED" | "QUANTIFIER_OVER_STATIC_LIMIT" | "UNKNOWN_CONTEXT_PROPERTY" | "NEGATION_UNDER_ANY";
 /** A single validation issue found during policy analysis. */
@@ -263,28 +258,25 @@ declare class PolicyBuilder {
   /**
    * Add a constraint to the current group.
    * @param constraint - A `Constraint` object or a `ConstraintBuilder` instance.
-   * @throws {CallciumError} With code `OUT_OF_PHYSICAL_BOUNDS` when a numeric operand lies outside
-   * the target type's range and encodes as a value inside it. Operands are read as written, so a
-   * `Constraint` carrying encoded operator bytes is left to {@link validate}.
+   * @throws {CallciumError} With code `OUT_OF_PHYSICAL_BOUNDS` when a numeric operand lies outside the target type's
+   * range and encodes as a value inside it. Operands are read as written, so a `Constraint` carrying encoded operator
+   * bytes is left to {@link validate}.
    */
   add(constraint: Constraint): this;
   /** Start a new constraint group (OR branch). */
   or(): this;
   /**
-   * Build the policy into an encoded binary blob with strict validation.
-   * Throws on any issue, regardless of severity. Use {@link validate} to
-   * inspect issues, or {@link buildUnsafe} to encode without validation.
+   * Build the policy into an encoded binary blob with strict validation. Throws on any issue, regardless of severity.
+   * Use {@link validate} to inspect issues, or {@link buildUnsafe} to encode without validation.
    * @returns The policy as a 0x-prefixed hex string.
    * @throws {CallciumError} If any group is empty.
    * @throws {ValidationError} If validation finds any issue.
-   * @throws {CallciumError} With code `RULE_SIZE_OVERFLOW` when a rule's encoded bytes exceed the
-   * width of the rule size field.
+   * @throws {CallciumError} With code `RULE_SIZE_OVERFLOW` when a rule's encoded bytes exceed the rule size field.
    */
   build(): Hex;
   /**
-   * Build the policy into an encoded binary blob without validation.
-   * The resulting policy may be invalid. Prefer {@link build}; use this
-   * only to knowingly bypass a reported issue.
+   * Build the policy into an encoded binary blob without validation. The resulting policy may be invalid. Prefer {@link
+   * build}; use this only to knowingly bypass a reported issue.
    * @returns The policy as a 0x-prefixed hex string.
    * @throws {CallciumError} If any group is empty.
    */
@@ -310,7 +302,7 @@ declare function encode(data: PolicyData): Hex;
 /**
  * Decode a binary policy blob into a PolicyData structure.
  * @param blob - Binary policy as 0x-prefixed hex string.
- * @returns The decoded policy data with constraints grouped by scope and path.
+ * @returns The decoded policy data with constraints grouped by scope, path, and hint.
  * @throws {CallciumError} If the blob is structurally malformed.
  */
 declare function decode(blob: Hex): PolicyData;
@@ -367,8 +359,8 @@ type TypeInfo = {
  */
 declare function nodeLength(desc: Uint8Array, offset: number): number;
 /**
- * Return the byte offset of the `fieldIndex`-th field inside a tuple node.
- * Starts at the first field and skips `fieldIndex` nodes using `nodeLength`.
+ * Return the byte offset of the `fieldIndex`-th field inside a tuple node. Starts at the first field and skips
+ * `fieldIndex` nodes using `nodeLength`.
  */
 declare function tupleFieldOffset(desc: Uint8Array, tupleOffset: number, fieldIndex: number): number;
 /**
@@ -389,24 +381,24 @@ declare function inspect(desc: Uint8Array, offset: number): TypeInfo;
 /**
  * Resolve the type at a calldata path (array of step indices).
  *
- * The first step selects a top-level param. Each subsequent step descends
- * into the current node: for tuples it selects a field, for arrays it
- * advances to the element descriptor.
+ * The first step selects a top-level param. Each subsequent step descends into the current node: for tuples it selects
+ * a field, for arrays it advances to the element descriptor.
  *
  * @param desc - Raw descriptor bytes.
  * @param steps - Path steps, length >= 1.
  * @returns TypeInfo for the node at the resolved path.
- * @throws {CallciumError} On empty steps, out-of-bounds param or array index, or descent into elementary type.
+ * @throws {CallciumError} On empty steps, an out-of-bounds param index, tuple field or static array index, or descent
+ * into an elementary type.
  */
 declare function typeAt(desc: Uint8Array, steps: number[]): TypeInfo;
 /**
- * Resolve the type at the path and the declared length of the static array a
- * quantifier step descends into (zero when the path holds no quantifier step
- * over a static array).
+ * Resolve the type at the path and the declared length of the static array a quantifier step descends into (zero when
+ * the path holds no quantifier step over a static array).
  * @param desc - Raw descriptor bytes.
  * @param steps - Path steps, length >= 1.
  * @returns TypeInfo at the resolved path and the quantified static array length.
- * @throws {CallciumError} On empty steps, out-of-bounds param or array index, or descent into elementary type.
+ * @throws {CallciumError} On empty steps, an out-of-bounds param index, tuple field or static array index, or descent
+ * into an elementary type.
  */
 declare function walkPath(desc: Uint8Array, steps: number[]): {
   typeInfo: TypeInfo;
@@ -435,8 +427,8 @@ declare function arrayElementOffset(offset: number): number;
  * @param desc - Raw descriptor bytes.
  * @param steps - Path steps, length >= 1.
  * @returns The hint block bytes.
- * @throws {CallciumError} When a step leaves the structure the descriptor declares, quantifies over
- * a non-array node, or repeats a quantifier.
+ * @throws {CallciumError} When a step leaves the structure the descriptor declares, quantifies over a non-array node,
+ * or repeats a quantifier.
  */
 declare function compileHint(desc: Uint8Array, steps: number[]): Uint8Array;
 /** Inspect and navigate raw descriptor bytes. */
@@ -456,19 +448,18 @@ declare const Descriptor: {
 //#endregion
 //#region src/policy-validator.d.ts
 /**
- * True if operator `opCode` is allowed on a target with the given type info.
- * Tolerates the NOT flag on `opCode`.
+ * True if operator `opCode` is a defined operator allowed on a target with the given type info. Tolerates the NOT flag
+ * on `opCode`.
  */
 declare function isOpAllowed(opCode: number, typeInfo: TypeInfo): boolean;
 /**
  * Validate a policy for type mismatches, contradictions, redundancies, and vacuities.
  * @param data - The canonical policy data to validate.
  * @returns All validation issues found, ordered by group and constraint index.
- * @throws {CallciumError} If the descriptor is not well-formed; semantic validation is
- * defined only over a well-formed descriptor.
- * @throws {CallciumError} With code `EMPTY_PATH` when a constraint carries no path step, and
- * `INVALID_HEX` or `INVALID_OPERATOR_BYTES` when an operator is not a readable encoding. Analysis
- * is defined over canonical data, so these reject the input rather than report an issue on it.
+ * @throws {CallciumError} If the descriptor is malformed; semantic validation is defined only over a well-formed one.
+ * @throws {CallciumError} With `EMPTY_PATH` or `MALFORMED_PATH` for a path that is empty or not whole steps, and
+ * `INVALID_HEX` or `INVALID_OPERATOR_BYTES` for an unreadable path or operator. Analysis is defined over canonical
+ * data, so these reject the input rather than report an issue.
  */
 declare function validate(data: PolicyData): Issue[];
 /** Semantic validation for policies. */
@@ -480,33 +471,33 @@ declare const PolicyValidator: {
 /** Accepted scalar value types for operator arguments. */
 type ScalarValue = bigint | boolean | string;
 /**
- * Extremes of the numeric operands a builder's value operators received, as written. Encoding folds
- * a negative operand onto its unsigned alias, so the sign survives nowhere else.
+ * Extremes of the numeric operands a builder's equality, comparison and set operators received, as written. Encoding
+ * folds a negative operand onto its unsigned alias, so the sign survives nowhere else.
  */
 type OperandExtremes = {
   /** Most negative operand written, or zero when none was negative. */leastNegative: bigint; /** Greatest operand written, or zero when none exceeded it. */
   greatest: bigint;
 };
 /**
- * Mutable builder that accumulates operators targeting a single path.
- * Implements the `Constraint` interface so it can be passed directly to policy builders.
+ * Mutable builder that accumulates operators targeting a single path. Implements the `Constraint` interface so it can
+ * be passed directly to policy builders.
  */
 declare class ConstraintBuilder<Operand extends ScalarValue = ScalarValue> implements Constraint {
   readonly scope: number;
   readonly path: Hex;
   readonly operators: Hex[];
   /**
-   * Extremes of the numeric operands the value operators received, as written. Only the extremes
-   * can offend: an operand folds into a target's range from below it or from above it, and
-   * whichever reaches furthest arrives first. Read it through {@link readOperandExtremes}.
+   * Extremes of the numeric operands the value operators received, as written. Only the extremes can offend: an operand
+   * folds into a target's range from below it or from above it, and whichever reaches furthest arrives first. Read it
+   * through {@link readOperandExtremes}.
    * @internal
    */
   readonly operandExtremes: OperandExtremes;
   /** @internal */
   constructor(scope: number, path: Hex);
   /**
-   * Push a pre-encoded operator hex string and return this for chaining.
-   * `values` are the operands as written; the numeric ones join the record.
+   * Push a pre-encoded operator hex string and return this for chaining. `values` are the operands as written; the
+   * numeric ones join the record.
    */
   private push;
   /** Assert the value equals `value`. */
@@ -517,6 +508,14 @@ declare class ConstraintBuilder<Operand extends ScalarValue = ScalarValue> imple
   eqCtx(contextPropertyId: number): this;
   /** Assert the value does not equal the context property `contextPropertyId`. */
   neqCtx(contextPropertyId: number): this;
+  /** Assert the value is greater than the context property `contextPropertyId`. */
+  gtCtx(contextPropertyId: number): this;
+  /** Assert the value is less than the context property `contextPropertyId`. */
+  ltCtx(contextPropertyId: number): this;
+  /** Assert the value is greater than or equal to the context property `contextPropertyId`. */
+  gteCtx(contextPropertyId: number): this;
+  /** Assert the value is less than or equal to the context property `contextPropertyId`. */
+  lteCtx(contextPropertyId: number): this;
   /** Assert the value is greater than `bound`. */
   gt(bound: bigint): this;
   /** Assert the value is less than `bound`. */
@@ -531,14 +530,15 @@ declare class ConstraintBuilder<Operand extends ScalarValue = ScalarValue> imple
    */
   between(min: bigint, max: bigint): this;
   /**
-   * Assert the value is a member of the set.
-   * Values are sorted and deduplicated before encoding.
-   * @throws {CallciumError} If the set is empty after deduplication.
+   * Assert the value is a member of the set. Values are sorted and deduplicated before encoding.
+   * @throws {CallciumError} If the set is empty, has more than MAX_SET_MEMBERS distinct values, or a value is not
+   * encodable as an operand word.
    */
   isIn(values: readonly Operand[]): this;
   /**
    * Assert the value is not a member of the set.
-   * @throws {CallciumError} If the set is empty after deduplication.
+   * @throws {CallciumError} If the set is empty, has more than MAX_SET_MEMBERS distinct values, or a value is not
+   * encodable as an operand word.
    */
   notIn(values: readonly Operand[]): this;
   /** Assert all bits in `mask` are set. */
@@ -564,8 +564,7 @@ declare class ConstraintBuilder<Operand extends ScalarValue = ScalarValue> imple
   lengthBetween(min: bigint, max: bigint): this;
 }
 /**
- * Target a calldata argument by path.
- * Each argument is a big-endian uint16 step; multiple steps navigate into nested types.
+ * Target a calldata argument by path. Each argument is a big-endian uint16 step; further steps navigate nested types.
  */
 declare function arg(p0: number, ...rest: number[]): ConstraintBuilder;
 /** Target the `msg.sender` context property. */
@@ -592,8 +591,8 @@ declare function gasPrice(): ConstraintBuilder<bigint>;
  * @param callData - ABI-encoded call data as 0x-prefixed hex string.
  * @param context - Optional execution context for context-scoped rules.
  * @returns Pass with matched group index, or fail with one violation per evaluated failing group.
- * @throws {CallciumError} If the policy blob is structurally malformed, or a context value a rule
- * reads is not an address or an integer a 32-byte word represents.
+ * @throws {CallciumError} If the policy blob is structurally malformed, the call data is not valid hex, or a context
+ * value a rule reads is not an address or an integer a 32-byte word represents.
  */
 declare function check(policy: Hex, callData: Hex, context?: Context): EnforceResult;
 /**
@@ -602,8 +601,8 @@ declare function check(policy: Hex, callData: Hex, context?: Context): EnforceRe
  * @param callData - ABI-encoded call data as 0x-prefixed hex string.
  * @param context - Optional execution context for context-scoped rules.
  * @throws {PolicyViolationError} If the policy rejects the call data.
- * @throws {CallciumError} If the policy blob is structurally malformed, or a context value a rule
- * reads is not an address or an integer a 32-byte word represents.
+ * @throws {CallciumError} If the policy blob is structurally malformed, the call data is not valid hex, or a context
+ * value a rule reads is not an address or an integer a 32-byte word represents.
  */
 declare function enforce(policy: Hex, callData: Hex, context?: Context): void;
 /** Check and enforce policies against ABI-encoded call data. */
@@ -617,8 +616,6 @@ declare const PolicyEnforcer: {
 declare function hexToBytes(hex: string): Uint8Array;
 /** Convert a byte array to a 0x-prefixed lowercase hex string. */
 declare function bytesToHex(bytes: Uint8Array): Hex;
-/** Validate and brand a hex string as an address. Throws if the runtime length is not exactly 20 bytes. */
-declare function toAddress(hex: string): Address;
 //#endregion
 //#region src/descriptor-coder.d.ts
 /**
@@ -803,8 +800,6 @@ declare const ContextProperty: CodeMap<readonly [{
   readonly contextKey: "gasPrice";
   readonly typeCode: 32;
 }]>;
-/** Maximum valid context property ID. */
-declare const MAX_CONTEXT_PROPERTY_ID: number;
 /** Display metadata for a context property code. */
 type ContextPropertyInfo = {
   label: string;
@@ -867,6 +862,26 @@ declare const OP_TABLE: readonly [{
   readonly code: 8;
   readonly label: "== ctx";
   readonly operands: "single";
+}, {
+  readonly key: "GT_CTX";
+  readonly code: 9;
+  readonly label: "> ctx";
+  readonly operands: "single";
+}, {
+  readonly key: "LT_CTX";
+  readonly code: 10;
+  readonly label: "< ctx";
+  readonly operands: "single";
+}, {
+  readonly key: "GTE_CTX";
+  readonly code: 11;
+  readonly label: ">= ctx";
+  readonly operands: "single";
+}, {
+  readonly key: "LTE_CTX";
+  readonly code: 12;
+  readonly label: "<= ctx";
+  readonly operands: "single";
 }, {
   readonly key: "BITMASK_ALL";
   readonly code: 16;
@@ -933,6 +948,8 @@ declare function lookupOp(code: number): OpInfo;
 //#region src/operators.d.ts
 /** Return true when the operator code (with or without NOT flag) is a LENGTH_* variant. */
 declare function isLengthOp(opCode: number): boolean;
+/** Return true when the operator code (with or without NOT flag) is a *_CTX variant. */
+declare function isContextOp(opCode: number): boolean;
 /** Structural category for a descriptor type code. */
 type TypeClass = "elementary" | "tuple" | "staticArray" | "dynamicArray";
 /** Structural classification without label. */
@@ -947,7 +964,7 @@ type TypeCodeInfo = TypeClassInfo & {
 /**
  * Map a raw type code byte to its ABI type label, structural category, and dynamism.
  * @param code - A single-byte descriptor type code.
- * @returns Label, type class, and whether the type is ABI-dynamic.
+ * @returns Label, type class, and whether the code alone implies ABI dynamism (false for tuples and static arrays).
  * @throws {CallciumError} If the code is not a recognised type code.
  */
 declare function lookupTypeCode(code: number): TypeCodeInfo;
@@ -956,16 +973,14 @@ declare function lookupTypeCode(code: number): TypeCodeInfo;
 /**
  * Machine-readable error code for structural decoding and validation failures.
  *
- * Each code names one invariant. Where Solidity detects the same invariant, the code is its error
- * name transliterated from `PascalCase` to `SCREAMING_SNAKE_CASE`. The codes under "Inputs and
- * validation" have no counterpart: they name input a Solidity signature cannot express.
- * `OUT_OF_PHYSICAL_BOUNDS` names an invariant Solidity carries twice, as the error
- * `PolicyBuilder.OutOfPhysicalBounds` and as an issue code, so the name is shared with `IssueCode`.
+ * Each code names one invariant. Where Solidity detects the same invariant, the code is its error name transliterated
+ * from `PascalCase` to `SCREAMING_SNAKE_CASE`. The codes under "Inputs and validation" have no counterpart: they name
+ * input a Solidity signature cannot express. `OUT_OF_PHYSICAL_BOUNDS` names an invariant Solidity carries twice, as the
+ * error `PolicyBuilder.OutOfPhysicalBounds` and as an issue code, so the name is shared with `IssueCode`.
  */
-type CallciumErrorCode = "UNSUPPORTED_VERSION" | "MALFORMED_HEADER" | "UNEXPECTED_END" | "TRAILING_BYTES" | "EMPTY_POLICY" | "EMPTY_GROUP" | "GROUP_TOO_SMALL" | "GROUP_SIZE_MISMATCH" | "GROUP_OVERFLOW" | "RULE_TOO_SMALL" | "RULE_SIZE_MISMATCH" | "RULE_FIELD_OUT_OF_BOUNDS" | "RULE_OVERFLOW" | "EMPTY_PATH" | "MALFORMED_PATH" | "PATH_TOO_DEEP" | "PARAM_INDEX_OUT_OF_BOUNDS" | "TUPLE_FIELD_OUT_OF_BOUNDS" | "STATIC_ARRAY_INDEX_OUT_OF_BOUNDS" | "NOT_COMPOSITE" | "UNCOMPILABLE_PATH" | "QUANTIFIER_ON_NON_ARRAY" | "NESTED_QUANTIFIER" | "INVALID_SCOPE" | "INVALID_CONTEXT_PATH" | "UNKNOWN_CONTEXT_PROPERTY" | "UNKNOWN_OPERATOR" | "INVALID_OPERATOR_BYTES" | "OPERATOR_TARGET_MISMATCH" | "UNSORTED_IN_SET" | "MALFORMED_HINT" | "NO_CONSTRAINT_OPERATORS" | "DUPLICATE_PATH_IN_GROUP" | "EMPTY_SET" | "SET_TOO_LARGE" | "INVALID_RANGE" | "OUT_OF_PHYSICAL_BOUNDS" | "UNKNOWN_TYPE_CODE" | "NODE_LENGTH_TOO_SMALL" | "NODE_LENGTH_TOO_LARGE" | "NODE_OVERFLOW" | "NESTING_TOO_DEEP" | "INVALID_ARRAY_LENGTH" | "INVALID_TUPLE_FIELD_COUNT" | "STATIC_WORDS_TOO_LARGE" | "PARAM_COUNT_MISMATCH" | "TOO_MANY_PARAMS" | "MALFORMED_TYPE_STRING" | "UNKNOWN_TYPE" | "MALFORMED_SIGNATURE" | "SIGNATURE_CONTAINS_WHITESPACE" | "INVALID_FUNCTION_NAME" | "GROUP_COUNT_OVERFLOW" | "RULE_COUNT_OVERFLOW" | "RULE_SIZE_OVERFLOW" | "DESC_LENGTH_OVERFLOW" | "UNKNOWN_QUANTIFIER" | "INVALID_HEX" | "MALFORMED_SELECTOR" | "PATH_STEP_OVERFLOW" | "OPERAND_OVERFLOW" | "CONTEXT_VALUE_OVERFLOW" | "VALIDATION_ERROR";
+type CallciumErrorCode = "UNSUPPORTED_VERSION" | "MALFORMED_HEADER" | "UNEXPECTED_END" | "TRAILING_BYTES" | "EMPTY_POLICY" | "EMPTY_GROUP" | "GROUP_TOO_SMALL" | "GROUP_SIZE_MISMATCH" | "GROUP_OVERFLOW" | "RULE_TOO_SMALL" | "RULE_SIZE_MISMATCH" | "RULE_FIELD_OUT_OF_BOUNDS" | "RULE_OVERFLOW" | "EMPTY_PATH" | "MALFORMED_PATH" | "PATH_TOO_DEEP" | "PARAM_INDEX_OUT_OF_BOUNDS" | "TUPLE_FIELD_OUT_OF_BOUNDS" | "STATIC_ARRAY_INDEX_OUT_OF_BOUNDS" | "NOT_COMPOSITE" | "UNCOMPILABLE_PATH" | "QUANTIFIER_ON_NON_ARRAY" | "NESTED_QUANTIFIER" | "INVALID_SCOPE" | "INVALID_CONTEXT_PATH" | "UNKNOWN_CONTEXT_PROPERTY" | "UNKNOWN_OPERATOR" | "INVALID_OPERATOR_BYTES" | "OPERATOR_TARGET_MISMATCH" | "UNSORTED_IN_SET" | "MALFORMED_HINT" | "NO_CONSTRAINT_OPERATORS" | "DUPLICATE_PATH_IN_GROUP" | "EMPTY_SET" | "SET_TOO_LARGE" | "INVALID_RANGE" | "OUT_OF_PHYSICAL_BOUNDS" | "UNKNOWN_TYPE_CODE" | "NODE_LENGTH_TOO_SMALL" | "NODE_LENGTH_TOO_LARGE" | "NODE_OVERFLOW" | "NESTING_TOO_DEEP" | "INVALID_ARRAY_LENGTH" | "INVALID_TUPLE_FIELD_COUNT" | "STATIC_WORDS_TOO_LARGE" | "PARAM_COUNT_MISMATCH" | "TOO_MANY_PARAMS" | "MALFORMED_TYPE_STRING" | "UNKNOWN_TYPE" | "MALFORMED_SIGNATURE" | "SIGNATURE_CONTAINS_WHITESPACE" | "INVALID_FUNCTION_NAME" | "GROUP_COUNT_OVERFLOW" | "RULE_COUNT_OVERFLOW" | "RULE_SIZE_OVERFLOW" | "DESC_LENGTH_OVERFLOW" | "VALIDATION_ERROR" | "UNKNOWN_QUANTIFIER" | "INVALID_HEX" | "MALFORMED_SELECTOR" | "PATH_STEP_OVERFLOW" | "OPERAND_OVERFLOW" | "CONTEXT_VALUE_OVERFLOW";
 /**
- * Thrown when a policy or descriptor blob is structurally malformed.
- * The optional `offset` indicates the byte position in the source blob where the error was detected.
+ * Thrown on malformed or inadmissible SDK input. `offset`, when set, is the error's byte position in the source blob.
  */
 declare class CallciumError extends Error {
   readonly code: CallciumErrorCode;
@@ -976,21 +991,19 @@ declare class CallciumError extends Error {
 /**
  * Thrown by `PolicyBuilder.build` when validation reports any issue.
  *
- * Carries every issue the validator found. The `Error.message` is the first issue's
- * message — a diagnostic summary, not a presentation contract. Consumers rendering
- * issues to users should iterate `issues` directly.
+ * Carries every issue the validator found. The `Error.message` is the first issue's message — a diagnostic summary, not
+ * a presentation contract. Consumers rendering issues to users should iterate `issues` directly.
  */
 declare class ValidationError extends CallciumError {
   readonly issues: Issue[];
   constructor(issues: Issue[]);
 }
 /**
- * Thrown by `PolicyEnforcer.enforce` when calldata fails policy enforcement.
- * Distinct from `ValidationError`, which signals static issues in the policy itself.
+ * Thrown by `PolicyEnforcer.enforce` when calldata fails policy enforcement. Distinct from `ValidationError`, which
+ * signals static issues in the policy itself.
  *
- * Carries the full list of structured violations (one per failed group). The
- * `Error.message` is a minimal non-lossy diagnostic summary built from the
- * first violation's structured fields — not a presentation contract. Consumers
+ * Carries the full list of structured violations (one per failed group). The `Error.message` is a minimal non-lossy
+ * diagnostic summary built from the first violation's structured fields — not a presentation contract. Consumers
  * rendering violations to users should iterate `violations` directly.
  */
 declare class PolicyViolationError extends Error {
@@ -998,5 +1011,5 @@ declare class PolicyViolationError extends Error {
   constructor(violations: Violation[]);
 }
 //#endregion
-export { type Address, CallciumError, type CallciumErrorCode, type CalldataNavigationViolation, type Constraint, type ConstraintBuilder, type Context, ContextProperty, type ContextPropertyInfo, type DecodedGroup, type DecodedParam, type DecodedPolicy, type DecodedRule, Descriptor, DescriptorCoder, type EnforceResult, type Field, type Hex, type Issue, type IssueCategory, type IssueCode, type IssueSeverity, MAX_CONTEXT_PROPERTY_ID, type MissingContextViolation, type MissingSelectorViolation, type NavigationViolationCode, type NonCanonicalValueViolation, Op, type OpInfo, type Operands, PolicyBuilder, PolicyCoder, type PolicyData, PolicyEnforcer, PolicyFormat, PolicyValidator, PolicyViolationError, Quantifier, type QuantifierEmptyArrayViolation, type QuantifierInfo, type QuantifierLimitExceededViolation, type ScalarValue, Scope, type ScopeInfo, type SelectorMismatchViolation, type Span, type TypeClass, type TypeClassInfo, TypeCode, type TypeCodeInfo, type TypeInfo, ValidationError, type ValueMismatchViolation, type Violation, type ViolationCode, arg, baseFee, blockNumber, blockTimestamp, bytesToHex, chainId, findContextProperty, gasPrice, hexToBytes, isLengthOp, isOpAllowed, isQuantifier, lookupContextProperty, lookupOp, lookupQuantifier, lookupScope, lookupTypeCode, msgSender, msgValue, parsePathSteps, toAddress, txOrigin };
+export { type Address, CallciumError, type CallciumErrorCode, type CalldataNavigationViolation, type Constraint, type ConstraintBuilder, type Context, ContextProperty, type ContextPropertyInfo, type DecodedGroup, type DecodedParam, type DecodedPolicy, type DecodedRule, Descriptor, DescriptorCoder, type EnforceResult, type Field, type Hex, type Issue, type IssueCategory, type IssueCode, type IssueSeverity, type MissingContextViolation, type MissingSelectorViolation, type NavigationViolationCode, type NonCanonicalValueViolation, Op, type OpInfo, type Operands, PolicyBuilder, PolicyCoder, type PolicyData, PolicyEnforcer, PolicyFormat, PolicyValidator, PolicyViolationError, Quantifier, type QuantifierEmptyArrayViolation, type QuantifierInfo, type QuantifierLimitExceededViolation, type ScalarValue, Scope, type ScopeInfo, type SelectorMismatchViolation, type Span, type TypeClass, type TypeClassInfo, TypeCode, type TypeCodeInfo, type TypeInfo, ValidationError, type ValueMismatchViolation, type Violation, type ViolationCode, arg, baseFee, blockNumber, blockTimestamp, bytesToHex, chainId, findContextProperty, gasPrice, hexToBytes, isContextOp, isLengthOp, isOpAllowed, isQuantifier, lookupContextProperty, lookupOp, lookupQuantifier, lookupScope, lookupTypeCode, msgSender, msgValue, parsePathSteps, txOrigin };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/types.ts","../src/policy-builder.ts","../src/policy-coder.ts","../src/path.ts","../src/descriptor.ts","../src/policy-validator.ts","../src/constraint.ts","../src/policy-enforcer.ts","../src/bytes.ts","../src/descriptor-coder.ts","../src/constants.ts","../src/operators.ts","../src/errors.ts"],"mappings":";;KAKY,GAAA;;KAGA,OAAA;;KAGA,IAAA;EAAS,KAAA;EAAe,GAAA;AAAA;;;AAApC;;;KAWY,OAAA;EACV,SAAA,GAAY,OAAA;EACZ,QAAA;EACA,cAAA;EACA,WAAA;EACA,OAAA;EACA,QAAA,GAAW,OAAA;EACX,OAAA;EACA,QAAA;AAAA;;KAIU,aAAA;EAAkB,EAAA;EAAU,YAAA;AAAA;EAA2B,EAAA;EAAW,UAAA,EAAY,SAAA;AAAA;AAA1F;AAAA,KAGY,uBAAA;;KAGA,wBAAA;EACV,IAAA;AAAA;;KAIU,yBAAA;EACV,IAAA,uBAZiG;EAcjG,aAAA,EAAe,GAAA,EAXL;EAaV,aAAA,EAAe,GAAA;AAAA;;;AAVjB;;KAiBY,uBAAA;EACV,IAAA;EACA,KAAA;EACA,IAAA;EACA,KAAA;EACA,IAAA,EAAM,GAAA,EAZY;EAclB,QAAA,UAhBA;EAkBA,MAAA,WAhBA;EAkBA,WAAA,GAAc,GAAA;AAAA;;AAXhB;;;;;;;;;;;KA0BY,sBAAA;EACV,IAAA;EACA,KAAA;EACA,IAAA;EACA,KAAA;EACA,IAAA,EAAM,GAAA,EAL0B;EAOhC,MAAA,UAFM;EAIN,WAAA,EAAa,GAAA,EAGG;EADhB,QAAA;EACA,aAAA,GAAgB,GAAA;EAKK;;;;EAArB,eAAA,GAAkB,GAAA;EAClB,YAAA;AAAA;;;;;KAOG,yBAAA,WAAoC,uBAAA;EACvC,IAAA,EAAM,CAAA;EACN,KAAA;EACA,IAAA;EACA,KAAA;EACA,IAAA,EAAM,GAAA;EACN,MAAA;EACA,WAAA,GAAc,GAAA;EACd,QAAA;EACA,YAAA;AAAA;;;;;;;;;KAWU,2BAAA,GACR,yBAAA,6BACA,yBAAA;;KAGQ,gCAAA;EACV,IAAA;EACA,KAAA;EACA,IAAA;EACA,KAAA;EACA,IAAA,EAAM,GAAA,EAvBQ;EAyBd,aAAA,EAAe,GAAA;AAAA;;;AAZjB;;;KAoBY,0BAAA;EACV,IAAA;EACA,KAAA;EACA,IAAA;EACA,KAAA;EACA,IAAA,EAAM,GAAA,EAnBN;EAqBA,QAAA,UAnBA;EAqBA,aAAA,EAAe,GAAA;EACf,MAAA;EACA,WAAA,GAAc,GAAA;EACd,YAAA;AAAA;;KAIU,6BAAA;EACV,IAAA;EACA,KAAA;EACA,IAAA;EACA,KAAA;EACA,IAAA,EAAM,GAAA;AAAA;;;;;;;KASI,SAAA,GACR,wBAAA,GACA,yBAAA,GACA,uBAAA,GACA,sBAAA,GACA,2BAAA,GACA,0BAAA,GACA,gCAAA,GACA,6BAAA;;KAGQ,aAAA,GAAgB,SAAA;;KAOhB,UAAA;EACV,cAAA;EACA,QAAA,EAAU,GAAA;EACV,UAAA,EAAY,GAAA;EACZ,MAAA,EAAQ,UAAA;EACR,IAAA,GAAO,IAAA;AAAA;AArCT;AAAA,KAyCY,UAAA;EACV,KAAA;EACA,IAAA,EAAM,GAAA;EACN,SAAA,EAAW,GAAA,IA1CX;EA4CA,IAAA,GAAO,GAAA;EACP,IAAA,GAAO,IAAA;AAAA;;KAQG,KAAA;EAAa,KAAA,EAAO,CAAA;EAAG,IAAA,EAAM,IAAA;AAAA;;KAG7B,YAAA;EACV,KAAA;EACA,QAAA;EACA,SAAA;EACA,UAAA;EACA,IAAA,EAAM,GAAA;EACN,IAAA,EAAM,IAAA;AAAA;;KAII,WAAA;EACV,QAAA,EAAU,KAAA;EACV,KAAA,EAAO,KAAA;EACP,SAAA,EAAW,KAAA;EACX,IAAA,EAAM,KAAA,CAAM,GAAA,GArDV;EAuDF,IAAA,GAAO,KAAA,CAAM,GAAA;EACb,MAAA,EAAQ,KAAA;EACR,UAAA,EAAY,KAAA;EACZ,IAAA,EAAM,KAAA,CAAM,GAAA;EACZ,IAAA,EAAM,IAAA;AAAA;;KAII,YAAA;EACV,SAAA,EAAW,KAAA;EACX,SAAA,EAAW,KAAA;EACX,KAAA,EAAO,WAAA;EACP,IAAA,EAAM,IAAA;AAAA;;KAII,aAAA;EACV,MAAA,EAAQ,KAAA;EACR,QAAA,EAAU,KAAA,CAAM,GAAA;EAChB,UAAA,EAAY,KAAA;EACZ,UAAA;IAAc,GAAA,EAAK,GAAA;IAAK,MAAA,EAAQ,KAAA;MAAQ,OAAA;MAAiB,UAAA;IAAA;IAAuB,MAAA,EAAQ,YAAA;IAAgB,IAAA,EAAM,IAAA;EAAA;EAC9G,UAAA,EAAY,KAAA;EACZ,MAAA,EAAQ,YAAA;EACR,IAAA,EAAM,IAAA;EACN,OAAA;EACA,cAAA;AAAA;;KAQU,aAAA;;KAGA,aAAA;;;;;;;KAQA,SAAA;;KA8DA,KAAA;EACV,QAAA,EAAU,aAAA;EACV,QAAA,EAAU,aAAA;EACV,UAAA;EACA,eAAA;EACA,IAAA,EAAM,SAAA;EACN,MAAA,EAAQ,GAAA;EACR,MAAA,EAAQ,GAAA;EACR,OAAA;AAAA;;;AA3VF;AAAA,cCuJa,aAAA;EAAA,QACH,KAAA;EAAA,QAED,WAAA,CAAA;ED1JM;AAGf;;;EAHe,OCkKN,MAAA,CAAO,SAAA,WAAoB,aAAA;ED/JjB;AAGnB;;;EAHmB,OC+KV,SAAA,CAAU,QAAA,WAAmB,aAAA;ED5KC;AAWvC;;;;;;ECmLE,GAAA,CAAI,UAAA,EAAY,UAAA;EDhLhB;ECyNA,EAAA,CAAA;EDvNA;;;;;;;AAOF;;;ECoOE,KAAA,CAAA,GAAS,GAAA;EDpOmB;;;;;;;ECqP5B,WAAA,CAAA,GAAe,GAAA;EDlPkB;;;;EC2PjC,QAAA,CAAA,GAAY,KAAA;EDxPsB;EAAA,QC+P1B,WAAA;ED9PR;EAAA,QCuQQ,YAAA;AAAA;;;ADxSV;;;;;AAAA,iBE8iBS,MAAA,CAAO,IAAA,EAAM,UAAA,GAAa,GAAA;;;;;AFhiBnC;;iBEunBS,MAAA,CAAO,IAAA,EAAM,GAAA,GAAM,UAAA;;;;;;;iBA6CnB,SAAA,CAAQ,IAAA,EAAM,GAAA,GAAM,aAAA;;cAKhB,WAAA;;;;;;;AF1rBb;AAAA,cGWa,UAAA;EAAA,SAA2C,GAAA;EAAA,SAAA,GAAA;AAAA;AHRxD;AAAA,KGWY,cAAA;EAAmB,KAAA;AAAA;;iBAOf,YAAA,CAAa,IAAA;;;;;AHJ7B;;iBGcgB,gBAAA,CAAiB,IAAA,WAAe,cAAA;;;;;;iBAiChC,cAAA,CAAe,IAAA,EAAM,GAAA;;;;KC1DzB,QAAA;EACV,QAAA;EACA,SAAA;EACA,UAAA;AAAA;;;;;iBAyEO,UAAA,CAAW,IAAA,EAAM,UAAA,EAAY,MAAA;;;;;iBAQ7B,gBAAA,CAAiB,IAAA,EAAM,UAAA,EAAY,WAAA,UAAqB,UAAA;;;AJ7DjE;;iBI6ES,UAAA,CAAW,IAAA,EAAM,UAAA;;iBAQjB,WAAA,CAAY,IAAA,EAAM,UAAA,EAAY,KAAA;;;;;;;AJlFvC;iBIqGS,OAAA,CAAQ,IAAA,EAAM,UAAA,EAAY,MAAA,WAAiB,QAAA;;;;AJlGpD;;;;;AAKA;;;;iBI8GS,MAAA,CAAO,IAAA,EAAM,UAAA,EAAY,KAAA,aAAkB,QAAA;;;;;;;AJlGpD;;;iBI+GS,QAAA,CAAS,IAAA,EAAM,UAAA,EAAY,KAAA;EAAoB,QAAA,EAAU,QAAA;EAAU,sBAAA;AAAA;;;;;;iBAmDnE,eAAA,CAAgB,IAAA,EAAM,UAAA,EAAY,MAAA;;;;AJxI3C;;iBIiJS,iBAAA,CAAkB,IAAA,EAAM,UAAA,EAAY,MAAA;;;;;iBAWpC,kBAAA,CAAmB,MAAA;;;;;;;;;;iBA+InB,WAAA,CAAY,IAAA,EAAM,UAAA,EAAY,KAAA,aAAkB,UAAA;;cAiC5C,UAAA;;;;;;;;;;;;;;;;;;;iBChNG,WAAA,CAAY,MAAA,UAAgB,QAAA,EAAU,QAAA;;;;;ALpMtD;;;;;AAWA;iBKkmCS,QAAA,CAAS,IAAA,EAAM,UAAA,GAAa,KAAA;;cAiBxB,eAAA;mBAA8B,QAAA;AAAA;;;ALpoC3C;AAAA,KMOY,WAAA;;;;ANJZ;KMuHY,eAAA;uEAEV,aAAA,UNzHiB;EM2HjB,QAAA;AAAA;;;;;cAqBW,iBAAA,iBAAkC,WAAA,GAAc,WAAA,aAAwB,UAAA;EAAA,SAC1E,KAAA;EAAA,SACA,IAAA,EAAM,GAAA;EAAA,SACN,SAAA,EAAW,GAAA;EN9HpB;;;;AAKF;;EALE,SMqIS,eAAA,EAAiB,eAAA;ENhIuE;cMmIrF,KAAA,UAAe,IAAA,EAAM,GAAA;ENnIK;;;;EAAA,QM8I9B,IAAA;EN9IyF;EM6JjG,EAAA,CAAG,KAAA,EAAO,OAAA;EN1JuB;EM+JjC,GAAA,CAAI,KAAA,EAAO,OAAA;EN/JsB;EMoKjC,KAAA,CAAM,iBAAA;ENjKI;EMsKV,MAAA,CAAO,iBAAA;;EAKP,EAAA,CAAG,KAAA;EN1KC;EM+KJ,EAAA,CAAG,KAAA;EN3KgC;EMgLnC,GAAA,CAAI,KAAA;EN3Kc;EMgLlB,GAAA,CAAI,KAAA;ENlLJ;;;;EM0LA,OAAA,CAAQ,GAAA,UAAa,GAAA;ENxLH;AAOpB;;;;EM8LE,IAAA,CAAK,MAAA,WAAiB,OAAA;EN5LtB;;;;EMoMA,KAAA,CAAM,MAAA,WAAiB,OAAA;EN/LvB;EMwMA,UAAA,CAAW,IAAA;ENpMX;EMyMA,UAAA,CAAW,IAAA;ENzMM;EM8MjB,WAAA,CAAY,IAAA;EN/LF;EMwMV,QAAA,CAAS,MAAA;;EAKT,QAAA,CAAS,MAAA;ENpMI;EMyMb,QAAA,CAAS,MAAA;ENjMS;EMsMlB,SAAA,CAAU,MAAA;ENtMW;EM2MrB,SAAA,CAAU,MAAA;EN1NV;;;;EMkOA,aAAA,CAAc,GAAA,UAAa,GAAA;AAAA;;;;;iBAab,GAAA,CAAI,EAAA,aAAe,IAAA,aAAiB,iBAAA;;iBAMpC,SAAA,CAAA,GAAa,iBAAA,CAAkB,OAAA;;iBAK/B,QAAA,CAAA,GAAY,iBAAA;;iBAKZ,cAAA,CAAA,GAAkB,iBAAA;;iBAKlB,WAAA,CAAA,GAAe,iBAAA;;iBAKf,OAAA,CAAA,GAAW,iBAAA;;iBAKX,QAAA,CAAA,GAAY,iBAAA,CAAkB,OAAA;;iBAK9B,OAAA,CAAA,GAAW,iBAAA;;iBAKX,QAAA,CAAA,GAAY,iBAAA;;;ANxW5B;;;;;AAGA;;;;AAHA,iBOuDS,KAAA,CAAM,MAAA,EAAQ,GAAA,EAAK,QAAA,EAAU,GAAA,EAAK,OAAA,GAAU,OAAA,GAAU,aAAA;APjD/D;;;;;AAWA;;;;AAXA,iBOqHS,OAAA,CAAQ,MAAA,EAAQ,GAAA,EAAK,QAAA,EAAU,GAAA,EAAK,OAAA,GAAU,OAAA;;cA4f1C,cAAA;gBAAmC,KAAA;kBAAA,OAAA;AAAA;;;APvnBhD;AAAA,iBQWgB,UAAA,CAAW,GAAA,WAAc,UAAA;;iBAqBzB,UAAA,CAAW,KAAA,EAAO,UAAA,GAAa,GAAA;;iBAqD/B,SAAA,CAAU,GAAA,WAAc,OAAA;;;ARrFxC;;;;;AAGA;;;;AAHA,iBSyMS,SAAA,CAAU,QAAA,WAAmB,UAAA;ATnMtC;;;;;AAWA;;;;AAXA,iBS8QS,OAAA,CAAQ,IAAA,EAAM,UAAA;;cAoJV,eAAA;oBAAwC,SAAA;kBAAA,OAAA;AAAA;;;;cChYxC,YAAA;EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA8DR,OAAA;EAAA,SAAsC,GAAA;EAAA,SAAsB,IAAA;AAAA,wBAChD,CAAA,YAAa,CAAA,UAAW,CAAA;;;;;;;;cAgC5B,KAAA,EAAK,OAAA;EAAA;;;;;;;;AVtChB;AAAA,KUyCU,SAAA;EAAc,KAAA;AAAA;;;;;;;iBAYV,WAAA,CAAY,IAAA,WAAe,SAAA;;cAW9B,QAAA;EAAA;;;;;;;;;;;;;;;;cAkCA,eAAA,EAAe,OAAA;EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAGf,uBAAA;;KAGD,mBAAA;EAAwB,KAAA;EAAe,UAAA,QAApB,OAAA;EAAiE,QAAA;AAAA;;;;;;iBAchF,mBAAA,CAAoB,IAAA,WAAe,mBAAA;;;;;;;iBAUnC,qBAAA,CAAsB,IAAA,WAAe,mBAAA;;KAgBzC,QAAA;;cAGN,QAAA;EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAqBO,EAAA,EAAI,OAAA,QAAe,QAAA;EAAA,SAAuB,GAAA;AAAA;;KAG3C,MAAA;EAAW,KAAA;EAAe,QAAA,EAAU,QAAA;AAAA;;;;;;;iBAYhC,QAAA,CAAS,IAAA,WAAe,MAAA;;;;iBClNxB,UAAA,CAAW,MAAA;;KAsKf,SAAA;;KAGA,aAAA;EAAkB,SAAA,EAAW,SAAA;EAAW,SAAA;AAAA;;KAGxC,YAAA,GAAe,aAAA;EAAkB,KAAA;AAAA;;;;;;;iBA0F7B,cAAA,CAAe,IAAA,WAAe,YAAA;;;;AX5U9C;;;;;AAGA;;;KYCY,iBAAA;;AZEZ;;;cY6Ea,aAAA,SAAsB,KAAA;EAAA,SACjB,IAAA,EAAM,iBAAA;EZnEZ;EAAA,SYqEM,MAAA;cAEJ,IAAA,EAAM,iBAAA,EAAmB,OAAA,UAAiB,MAAA;AAAA;;;;;;;;cAiB3C,eAAA,SAAwB,aAAA;EAAA,SACnB,MAAA,EADW,KAAA;cAGf,MAAA,EAFmC,KAAA;AAAA;;AZ7EjD;;;;;;;;cY+Fa,oBAAA,SAA6B,KAAA;EAAA,SACxB,UAAA,EADgB,SAAA;cAGpB,UAAA,EAF2C,SAAA;AAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/types.ts","../src/policy-builder.ts","../src/policy-coder.ts","../src/path.ts","../src/descriptor.ts","../src/policy-validator.ts","../src/constraint.ts","../src/policy-enforcer.ts","../src/bytes.ts","../src/descriptor-coder.ts","../src/constants.ts","../src/operators.ts","../src/errors.ts"],"mappings":";;KAKY,GAAA;;KAGA,OAAA;;KAGA,IAAA;EAAS,KAAA;EAAe,GAAA;AAAA;;;AAApC;;KAUY,OAAA;EACV,SAAA,GAAY,OAAA;EACZ,QAAA;EACA,cAAA;EACA,WAAA;EACA,OAAA;EACA,QAAA,GAAW,OAAA;EACX,OAAA;EACA,QAAA;AAAA;;KAIU,aAAA;EAAkB,EAAA;EAAU,YAAA;AAAA;EAA2B,EAAA;EAAW,UAAA,EAAY,SAAA;AAAA;;KAG9E,uBAAA;;KAGA,wBAAA;EACV,IAAA;AAAA;;KAIU,yBAAA;EACV,IAAA,uBAZwF;EAcxF,aAAA,EAAe,GAAA,EAdkF;EAgBjG,aAAA,EAAe,GAAA;AAAA;;;;AAVjB;KAiBY,uBAAA;EACV,IAAA;EACA,KAAA;EACA,IAAA;EACA,KAAA;EACA,IAAA,EAAM,GAAA;EAEN,QAAA,UAlBA;EAoBA,MAAA,WAlBe;EAoBf,WAAA,GAAc,GAAA;AAAA;;;AAXhB;;;;;;;;KAwBY,sBAAA;EACV,IAAA;EACA,KAAA;EACA,IAAA;EACA,KAAA;EACA,IAAA,EAAM,GAAA,EAlBW;EAoBjB,MAAA,UAPU;EASV,WAAA,EAAa,GAAA;EAEb,QAAA;EACA,aAAA,GAAgB,GAAA;EAAA;;;;EAKhB,eAAA,GAAkB,GAAA;EAClB,YAAA;AAAA;;;;;KAOG,yBAAA,WAAoC,uBAAA;EACvC,IAAA,EAAM,CAAA;EACN,KAAA;EACA,IAAA;EACA,KAAA;EACA,IAAA,EAAM,GAAA;EACN,MAAA;EACA,WAAA,GAAc,GAAA;EACd,QAAA;EACA,YAAA;AAAA;;;;;;;;;KAWU,2BAAA,GACR,yBAAA,6BACA,yBAAA;;KAGQ,gCAAA;EACV,IAAA;EACA,KAAA;EACA,IAAA;EACA,KAAA;EACA,IAAA,EAAM,GAAA,EAzBA;EA2BN,aAAA,EAAe,GAAA;AAAA;;;;;;KAQL,0BAAA;EACV,IAAA;EACA,KAAA;EACA,IAAA;EACA,KAAA;EACA,IAAA,EAAM,GAAA,EApBoC;EAsB1C,QAAA,UAfkB;EAiBlB,aAAA,EAAe,GAAA;EACf,MAAA;EACA,WAAA,GAAc,GAAA;EACd,YAAA;AAAA;;KAIU,6BAAA;EACV,IAAA;EACA,KAAA;EACA,IAAA;EACA,KAAA;EACA,IAAA,EAAM,GAAA;AAAA;;;;;;KAQI,SAAA,GACR,wBAAA,GACA,yBAAA,GACA,uBAAA,GACA,sBAAA,GACA,2BAAA,GACA,0BAAA,GACA,gCAAA,GACA,6BAAA;;KAGQ,aAAA,GAAgB,SAAA;;KAOhB,UAAA;EACV,cAAA;EACA,QAAA,EAAU,GAAA;EACV,UAAA,EAAY,GAAA;EACZ,MAAA,EAAQ,UAAA;EACR,IAAA,GAAO,IAAA;AAAA;;KAIG,UAAA;EACV,KAAA;EACA,IAAA,EAAM,GAAA;EACN,SAAA,EAAW,GAAA,IA3C4B;EA6CvC,IAAA,GAAO,GAAA;EACP,IAAA,GAAO,IAAA;AAAA;;KAQG,KAAA;EAAa,KAAA,EAAO,CAAA;EAAG,IAAA,EAAM,IAAA;AAAA;;KAG7B,YAAA;EACV,KAAA;EACA,QAAA;EACA,SAAA;EACA,UAAA;EACA,IAAA,EAAM,GAAA;EACN,IAAA,EAAM,IAAA;AAAA;;KAII,WAAA;EACV,QAAA,EAAU,KAAA;EACV,KAAA,EAAO,KAAA;EACP,SAAA,EAAW,KAAA;EACX,IAAA,EAAM,KAAA,CAAM,GAAA,GAzDV;EA2DF,IAAA,GAAO,KAAA,CAAM,GAAA;EACb,MAAA,EAAQ,KAAA;EACR,UAAA,EAAY,KAAA;EACZ,IAAA,EAAM,KAAA,CAAM,GAAA;EACZ,IAAA,EAAM,IAAA;AAAA;;KAII,YAAA;EACV,SAAA,EAAW,KAAA;EACX,SAAA,EAAW,KAAA;EACX,KAAA,EAAO,WAAA;EACP,IAAA,EAAM,IAAA;AAAA;;KAII,aAAA;EACV,MAAA,EAAQ,KAAA;EACR,QAAA,EAAU,KAAA,CAAM,GAAA;EAChB,UAAA,EAAY,KAAA;EACZ,UAAA;IAAc,GAAA,EAAK,GAAA;IAAK,MAAA,EAAQ,KAAA;MAAQ,OAAA;MAAiB,UAAA;IAAA;IAAuB,MAAA,EAAQ,YAAA;IAAgB,IAAA,EAAM,IAAA;EAAA;EAC9G,UAAA,EAAY,KAAA;EACZ,MAAA,EAAQ,YAAA;EACR,IAAA,EAAM,IAAA;EACN,OAAA;EACA,cAAA;AAAA;;KAQU,aAAA;;KAGA,aAAA;;;;;;KAOA,SAAA;;KA8DA,KAAA;EACV,QAAA,EAAU,aAAA;EACV,QAAA,EAAU,aAAA;EACV,UAAA;EACA,eAAA;EACA,IAAA,EAAM,SAAA;EACN,MAAA,EAAQ,GAAA;EACR,MAAA,EAAQ,GAAA;EACR,OAAA;AAAA;;;AAtVF;AAAA,cCqJa,aAAA;EAAA,QACH,KAAA;EAAA,QAED,WAAA,CAAA;EDxJM;AAGf;;;EAHe,OCgKN,MAAA,CAAO,SAAA,WAAoB,aAAA;ED7JjB;AAGnB;;;EAHmB,OC6KV,SAAA,CAAU,QAAA,WAAmB,aAAA;ED1KC;AAUvC;;;;;;ECkLE,GAAA,CAAI,UAAA,EAAY,UAAA;ED/KhB;ECwNA,EAAA,CAAA;EDtNA;;;;;;;AAOF;ECiOE,KAAA,CAAA,GAAS,GAAA;;;;;;;EAgBT,WAAA,CAAA,GAAe,GAAA;EDjPkF;;AAGnG;;ECuPE,QAAA,CAAA,GAAY,KAAA;EDvPqB;EAAA,QC8PzB,WAAA;ED3PE;EAAA,QCoQF,YAAA;AAAA;;;ADnSV;;;;;AAAA,iBEqiBS,MAAA,CAAO,IAAA,EAAM,UAAA,GAAa,GAAA;;;;;AFxhBnC;;iBE+mBS,MAAA,CAAO,IAAA,EAAM,GAAA,GAAM,UAAA;;;;;;;iBA6CnB,SAAA,CAAQ,IAAA,EAAM,GAAA,GAAM,aAAA;;cAKhB,WAAA;;;;;;;AFjrBb;AAAA,cGWa,UAAA;EAAA,SAA2C,GAAA;EAAA,SAAA,GAAA;AAAA;AHRxD;AAAA,KGWY,cAAA;EAAmB,KAAA;AAAA;;iBAOf,YAAA,CAAa,IAAA;;;;;AHL7B;;iBGegB,gBAAA,CAAiB,IAAA,WAAe,cAAA;;;;;;iBAgChC,cAAA,CAAe,IAAA,EAAM,GAAA;;;;KCzDzB,QAAA;EACV,QAAA;EACA,SAAA;EACA,UAAA;AAAA;;;;;iBAwEO,UAAA,CAAW,IAAA,EAAM,UAAA,EAAY,MAAA;;;;;iBAQ7B,gBAAA,CAAiB,IAAA,EAAM,UAAA,EAAY,WAAA,UAAqB,UAAA;;;;AJ7DjE;iBI6ES,UAAA,CAAW,IAAA,EAAM,UAAA;;iBAQjB,WAAA,CAAY,IAAA,EAAM,UAAA,EAAY,KAAA;;;;;;;;iBAmB9B,OAAA,CAAQ,IAAA,EAAM,UAAA,EAAY,MAAA,WAAiB,QAAA;;;;;AJlGpD;;;;;AAKA;;;iBI8GS,MAAA,CAAO,IAAA,EAAM,UAAA,EAAY,KAAA,aAAkB,QAAA;;;;;;;;AJlGpD;;iBI+GS,QAAA,CAAS,IAAA,EAAM,UAAA,EAAY,KAAA;EAAoB,QAAA,EAAU,QAAA;EAAU,sBAAA;AAAA;;;;;;iBAmDnE,eAAA,CAAgB,IAAA,EAAM,UAAA,EAAY,MAAA;;;;;AJ1I3C;iBImJS,iBAAA,CAAkB,IAAA,EAAM,UAAA,EAAY,MAAA;;;;;iBAWpC,kBAAA,CAAmB,MAAA;;;;;;;;;;iBA+InB,WAAA,CAAY,IAAA,EAAM,UAAA,EAAY,KAAA,aAAkB,UAAA;;cAiC5C,UAAA;;;;;;;;;;;;;;;;;;;iBCpMG,WAAA,CAAY,MAAA,UAAgB,QAAA,EAAU,QAAA;;;;;AL/MtD;;;;;iBKonCS,QAAA,CAAS,IAAA,EAAM,UAAA,GAAa,KAAA;;cAiBxB,eAAA;mBAA8B,QAAA;AAAA;;;AL3oC3C;AAAA,KMOY,WAAA;;;;ANJZ;KMsHY,eAAA;uEAEV,aAAA,UNxHiB;EM0HjB,QAAA;AAAA;;;;;cAoBW,iBAAA,iBAAkC,WAAA,GAAc,WAAA,aAAwB,UAAA;EAAA,SAC1E,KAAA;EAAA,SACA,IAAA,EAAM,GAAA;EAAA,SACN,SAAA,EAAW,GAAA;EN9HT;;;;;AAMb;EANa,SMqIF,eAAA,EAAiB,eAAA;;cAGd,KAAA,UAAe,IAAA,EAAM,GAAA;ENlIL;;;;EAAA,QM6IpB,IAAA;EN7IyF;EM4JjG,EAAA,CAAG,KAAA,EAAO,OAAA;ENzJA;EM8JV,GAAA,CAAI,KAAA,EAAO,OAAA;;EAKX,KAAA,CAAM,iBAAA;ENnK2B;EMwKjC,MAAA,CAAO,iBAAA;ENrK2B;EM0KlC,KAAA,CAAM,iBAAA;ENzKN;EM8KA,KAAA,CAAM,iBAAA;EN1KI;EM+KV,MAAA,CAAO,iBAAA;;EAKP,MAAA,CAAO,iBAAA;ENnLP;EMwLA,EAAA,CAAG,KAAA;ENtLY;EM2Lf,EAAA,CAAG,KAAA;ENzLY;EM8Lf,GAAA,CAAI,KAAA;EN9Lc;EMmMlB,GAAA,CAAI,KAAA;EN5L6B;;;;EMoMjC,OAAA,CAAQ,GAAA,UAAa,GAAA;ENjMrB;;;;;EM8MA,IAAA,CAAK,MAAA,WAAiB,OAAA;ENtMtB;;;;AAaF;EMkME,KAAA,CAAM,MAAA,WAAiB,OAAA;;EASvB,UAAA,CAAW,IAAA;ENlME;EMuMb,UAAA,CAAW,IAAA;EN/LO;EMoMlB,WAAA,CAAY,IAAA;ENpMS;EM6MrB,QAAA,CAAS,MAAA;EN5NT;EMiOA,QAAA,CAAS,MAAA;EN/NT;EMoOA,QAAA,CAAS,MAAA;ENnOH;EMwON,SAAA,CAAU,MAAA;ENpOV;EMyOA,SAAA,CAAU,MAAA;ENvOV;;;;EM+OA,aAAA,CAAc,GAAA,UAAa,GAAA;AAAA;;;ANvO3B;iBMmPc,GAAA,CAAI,EAAA,aAAe,IAAA,aAAiB,iBAAA;;iBAMpC,SAAA,CAAA,GAAa,iBAAA,CAAkB,OAAA;;iBAK/B,QAAA,CAAA,GAAY,iBAAA;;iBAKZ,cAAA,CAAA,GAAkB,iBAAA;;iBAKlB,WAAA,CAAA,GAAe,iBAAA;;iBAKf,OAAA,CAAA,GAAW,iBAAA;;iBAKX,QAAA,CAAA,GAAY,iBAAA,CAAkB,OAAA;;iBAK9B,OAAA,CAAA,GAAW,iBAAA;;iBAKX,QAAA,CAAA,GAAY,iBAAA;;;AN1X5B;;;;;AAGA;;;;AAHA,iBOuDS,KAAA,CAAM,MAAA,EAAQ,GAAA,EAAK,QAAA,EAAU,GAAA,EAAK,OAAA,GAAU,OAAA,GAAU,aAAA;APjD/D;;;;;AAUA;;;;AAVA,iBOqHS,OAAA,CAAQ,MAAA,EAAQ,GAAA,EAAK,QAAA,EAAU,GAAA,EAAK,OAAA,GAAU,OAAA;;cA6f1C,cAAA;gBAAmC,KAAA;kBAAA,OAAA;AAAA;;;APxnBhD;AAAA,iBQIgB,UAAA,CAAW,GAAA,WAAc,UAAA;;iBAazB,UAAA,CAAW,KAAA,EAAO,UAAA,GAAa,GAAA;;;ARjB/C;;;;;AAGA;;;;AAHA,iBSwMS,SAAA,CAAU,QAAA,WAAmB,UAAA;ATlMtC;;;;;AAUA;;;;AAVA,iBSqQS,OAAA,CAAQ,IAAA,EAAM,UAAA;;cAoJV,eAAA;oBAAwC,SAAA;kBAAA,OAAA;AAAA;;;;cCvXxC,YAAA;EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA8DR,OAAA;EAAA,SAAsC,GAAA;EAAA,SAAsB,IAAA;AAAA,wBAChD,CAAA,YAAa,CAAA,UAAW,CAAA;;;;;;;;cAgC5B,KAAA,EAAK,OAAA;EAAA;;;;;;;;AVzChB;AAAA,KU4CU,SAAA;EAAc,KAAA;AAAA;;;;;;;iBAYV,WAAA,CAAY,IAAA,WAAe,SAAA;;cAW9B,QAAA;EAAA;;;;;;;;;;;;;;;;cAkCA,eAAA,EAAe,OAAA;EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAMhB,mBAAA;EAAwB,KAAA;EAAe,UAAA,QAApB,OAAA;EAAiE,QAAA;AAAA;;;;;;iBAchF,mBAAA,CAAoB,IAAA,WAAe,mBAAA;;;;;;;iBAUnC,qBAAA,CAAsB,IAAA,WAAe,mBAAA;;KAgBzC,QAAA;;cAGN,QAAA;EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAyBO,EAAA,EAAI,OAAA,QAAe,QAAA;EAAA,SAAuB,GAAA;AAAA;AVhCvD;AAAA,KUmCY,MAAA;EAAW,KAAA;EAAe,QAAA,EAAU,QAAA;AAAA;;;;;;;iBAYhC,QAAA,CAAS,IAAA,WAAe,MAAA;;;;iBCxNxB,UAAA,CAAW,MAAA;;iBAMX,WAAA,CAAY,MAAA;;KAiMhB,SAAA;;KAGA,aAAA;EAAkB,SAAA,EAAW,SAAA;EAAW,SAAA;AAAA;;KAGxC,YAAA,GAAe,aAAA;EAAkB,KAAA;AAAA;AXtM7C;;;;;;AAAA,iBW+RgB,cAAA,CAAe,IAAA,WAAe,YAAA;;;;AX1W9C;;;;;AAGA;;KYAY,iBAAA;;;AZGZ;cY4Ea,aAAA,SAAsB,KAAA;EAAA,SACjB,IAAA,EAAM,iBAAA;EZ7EH;EAAA,SY+EH,MAAA;cAEJ,IAAA,EAAM,iBAAA,EAAmB,OAAA,UAAiB,MAAA;AAAA;;;;;;;cAgB3C,eAAA,SAAwB,aAAA;EAAA,SACnB,MAAA,EADW,KAAA;cAGf,MAAA,EAFmC,KAAA;AAAA;;;;;AZ5EjD;;;;cY6Fa,oBAAA,SAA6B,KAAA;EAAA,SACxB,UAAA,EADgB,SAAA;cAGpB,UAAA,EAF2C,SAAA;AAAA"}