@cullet/erp-core 1.1.0 → 1.2.0

package/dist/gate-v1-payload.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"gate-v1-payload.schema.js","names":["#initialReporter","#currentReporter","#bridgeToConditionReporter"],"sources":["../src/core/config/silent-policy-reporter.ts","../src/core/config/core-config.ts","../src/core/config/core-config.instance.ts","../src/core/result/result.ts","../src/core/policies/utils/date.ts","../src/core/policies/context/path.ts","../src/core/policies/engines/v1/condition-schema.ts","../src/core/policies/engines/v1/condition-evaluator.ts","../src/core/policies/engines/v1/gate/gate-v1-payload.schema.ts"],"sourcesContent":["import type { PolicyReporter } from \"./policy-reporter.js\";\n\nexport class SilentPolicyReporter implements PolicyReporter {\n    report(_event: Parameters<PolicyReporter[\"report\"]>[0]): void {}\n}\n","import type {\n    ConditionEvaluationOptions,\n    ConditionEvaluatorReporter,\n} from \"../policies/engines/condition-evaluator-reporter.js\";\nimport type { PolicyEvent, PolicyReporter } from \"./policy-reporter.js\";\nimport { SilentPolicyReporter } from \"./silent-policy-reporter.js\";\n\nexport interface CoreObservabilityConfig {\n    readonly reporter?: PolicyReporter;\n}\n\nexport interface CoreConfigOptions {\n    readonly observability?: CoreObservabilityConfig;\n}\n\nfunction reportSafely(\n    policyReporter: PolicyReporter,\n    event: PolicyEvent,\n): void {\n    try {\n        policyReporter.report(event);\n    } catch {\n        // Falhas de telemetria nao podem interromper o fluxo de dominio.\n    }\n}\n\n/**\n * Centraliza a configuracao pura do core sem depender de implementacoes\n * concretas de logging, tracing ou report.\n */\nexport class CoreConfig {\n    readonly #initialReporter: PolicyReporter;\n    #currentReporter: PolicyReporter;\n\n    constructor(options: CoreConfigOptions = {}) {\n        const reporter =\n            options.observability?.reporter ?? new SilentPolicyReporter();\n        this.#initialReporter = reporter;\n        this.#currentReporter = reporter;\n    }\n\n    configure(options: CoreConfigOptions): this {\n        const reporter = options.observability?.reporter;\n        if (reporter) {\n            this.#currentReporter = reporter;\n        }\n        return this;\n    }\n\n    // Restores the reporter captured at construction time.\n    reset(): this {\n        this.#currentReporter = this.#initialReporter;\n        return this;\n    }\n\n    getPolicyReporter(): PolicyReporter {\n        return this.#currentReporter;\n    }\n\n    getConditionEvaluationOptions(\n        engineVersion: number,\n    ): ConditionEvaluationOptions {\n        return {\n            reporter: this.#bridgeToConditionReporter(this.#currentReporter),\n            engineVersion,\n        };\n    }\n\n    #bridgeToConditionReporter(\n        policyReporter: PolicyReporter,\n    ): ConditionEvaluatorReporter {\n        return {\n            warn(report) {\n                reportSafely(policyReporter, {\n                    kind: \"condition-eval\",\n                    ...report,\n                } satisfies PolicyEvent);\n            },\n            error(report) {\n                reportSafely(policyReporter, {\n                    kind: \"condition-eval\",\n                    ...report,\n                } satisfies PolicyEvent);\n            },\n        };\n    }\n}\n","import { CoreConfig } from \"./core-config.js\";\nimport { SilentPolicyReporter } from \"./silent-policy-reporter.js\";\n\n/**\n * Shared instance for the application composition root.\n * Use `new CoreConfig()` for isolated runtimes, tests, or multi-tenant hosts.\n *\n * The default reporter is silent so the core has no runtime logging dependency.\n * Hosts can swap in their own `PolicyReporter` via\n * `coreConfig.configure({ observability: { reporter } })`.\n */\nexport const coreConfig = new CoreConfig({\n    observability: { reporter: new SilentPolicyReporter() },\n});\n","/**\n * Represents the outcome of an operation that may succeed or fail.\n * Useful for avoiding excessive exceptions and making error flows explicit.\n */\nexport abstract class Result<T, E> {\n    protected constructor() {\n        // prevent direct instantiation\n    }\n\n    /**\n     * Creates a success result containing a value.\n     */\n    static ok<T>(value: T): Result<T, never> {\n        return new Ok(value);\n    }\n\n    /**\n     * Creates an error result containing an error object.\n     */\n    static err<E>(error: E): Result<never, E> {\n        return new Err(error);\n    }\n\n    /**\n     * Returns true when this is a success result.\n     */\n    abstract isOk(): this is Ok<T>;\n\n    /**\n     * Returns true when this is an error result.\n     */\n    abstract isErr(): this is Err<E>;\n\n    /**\n     * Runs a handler based on the result state (similar to pattern matching).\n     */\n    abstract match<R>(handlers: {\n        ok: (value: T) => R;\n        err: (error: E) => R;\n    }): R;\n\n    /**\n     * Returns the value when this is success, or null when this is an error.\n     */\n    getOrNull(): T | null {\n        return this.match({\n            ok: (value) => value,\n            err: () => null,\n        });\n    }\n\n    /**\n     * Returns the error when this is a failure, or null when this is a success.\n     */\n    errorOrNull(): E | null {\n        return this.match({\n            ok: () => null,\n            err: (error) => error,\n        });\n    }\n\n    /**\n     * Returns the value when this is a success, or throws the error when this is a failure.\n     */\n    getOrThrow(): T {\n        return this.match({\n            ok: (value) => value,\n            err: (error) => {\n                throw error instanceof Error ? error : new Error(String(error));\n            },\n        });\n    }\n\n    /**\n     * Transforms the success value using the provided function. Keeps the error when this is a failure.\n     */\n    map<R>(transform: (value: T) => R): Result<R, E> {\n        return this.match<Result<R, E>>({\n            ok: (value) => Result.ok(transform(value)),\n            // TS does not \"see\" variance here; the cast is intentional and safe:\n            // Err carries no T, so it can be widened to Result<R, E> safely.\n            err: (error) => Result.err(error) as unknown as Result<R, E>,\n        });\n    }\n\n    /**\n     * Transforms the error using the provided function. Keeps the value when this is a success.\n     */\n    mapError<F>(transform: (error: E) => F): Result<T, F> {\n        return this.match<Result<T, F>>({\n            // Ok carries no E, so it can be widened to Result<T, F>.\n            ok: (value) => Result.ok(value) as unknown as Result<T, F>,\n            err: (error) => Result.err(transform(error)),\n        });\n    }\n\n    /**\n     * Chains another operation that returns a Result when this result is a success.\n     */\n    flatMap<R>(transform: (value: T) => Result<R, E>): Result<R, E> {\n        return this.match<Result<R, E>>({\n            ok: (value) => transform(value),\n            err: (error) => Result.err(error) as unknown as Result<R, E>,\n        });\n    }\n}\n\n/**\n * Success variant of Result.\n */\nexport class Ok<T> extends Result<T, never> {\n    public readonly value: T;\n\n    constructor(value: T) {\n        super();\n        this.value = value;\n        Object.freeze(this);\n    }\n\n    isOk(): this is Ok<T> {\n        return true;\n    }\n\n    isErr(): this is Err<never> {\n        return false;\n    }\n\n    match<R>(handlers: { ok: (value: T) => R; err: (error: never) => R }): R {\n        return handlers.ok(this.value);\n    }\n}\n\n/**\n * Error variant of Result.\n */\nexport class Err<E> extends Result<never, E> {\n    public readonly error: E;\n\n    constructor(error: E) {\n        super();\n        this.error = error;\n        Object.freeze(this);\n    }\n\n    isOk(): this is Ok<never> {\n        return false;\n    }\n\n    isErr(): this is Err<E> {\n        return true;\n    }\n\n    match<R>(handlers: { ok: (value: never) => R; err: (error: E) => R }): R {\n        return handlers.err(this.error);\n    }\n}\n","import { isValidDate } from \"../../shared/temporal-guards.js\";\n\nexport class PolicyDateUtils {\n    static isValid(value: Date): boolean {\n        return isValidDate(value);\n    }\n}\n","/**\n * Utilities for reading/writing values at dot-separated paths\n * in plain objects, e.g. \"installment.dueDate\".\n */\n\nimport { Result } from \"../../result/result.js\";\n\nexport class PolicyContextPath {\n    private static readonly FORBIDDEN_SEGMENTS = new Set([\n        \"__proto__\",\n        \"prototype\",\n        \"constructor\",\n    ]);\n\n    private static resolve(\n        obj: Record<string, unknown>,\n        path: string,\n    ): Result<\n        {\n            readonly found: boolean;\n            readonly value: unknown;\n        },\n        string\n    > {\n        const segmentsResult = PolicyContextPath.parseSegments(path);\n        if (segmentsResult.isErr()) {\n            return Result.err(segmentsResult.errorOrNull()!);\n        }\n\n        const segments = segmentsResult.getOrNull()!;\n        let current: unknown = obj;\n\n        for (const segment of segments) {\n            if (\n                current === null ||\n                current === undefined ||\n                typeof current !== \"object\"\n            ) {\n                return Result.ok({ found: false, value: undefined });\n            }\n\n            const record = current as Record<string, unknown>;\n            if (!Object.prototype.hasOwnProperty.call(record, segment)) {\n                return Result.ok({ found: false, value: undefined });\n            }\n\n            current = record[segment];\n        }\n\n        return Result.ok({ found: true, value: current });\n    }\n\n    private static parseSegments(\n        path: string,\n    ): Result<readonly string[], string> {\n        if (path.trim().length === 0) {\n            return Result.err(\"Path cannot be empty\");\n        }\n\n        const segments = path.split(\".\");\n        if (segments.some((segment) => segment.length === 0)) {\n            return Result.err(`Path \"${path}\" contains an empty segment`);\n        }\n\n        const forbiddenSegment = segments.find((segment) =>\n            PolicyContextPath.FORBIDDEN_SEGMENTS.has(segment),\n        );\n        if (forbiddenSegment !== undefined) {\n            return Result.err(\n                `Path \"${path}\" contains forbidden segment \"${forbiddenSegment}\"`,\n            );\n        }\n\n        return Result.ok(segments);\n    }\n\n    private static isPlainRecord(\n        value: unknown,\n    ): value is Record<string, unknown> {\n        if (\n            typeof value !== \"object\" ||\n            value === null ||\n            Array.isArray(value)\n        ) {\n            return false;\n        }\n\n        const prototype = Object.getPrototypeOf(value);\n        return prototype === Object.prototype || prototype === null;\n    }\n\n    static getOrAbsent(\n        obj: Record<string, unknown>,\n        path: string,\n    ): Result<unknown, \"absent\"> {\n        const resolvedPath = PolicyContextPath.resolve(obj, path);\n        if (resolvedPath.isErr()) {\n            return Result.err(\"absent\");\n        }\n\n        const { found, value } = resolvedPath.getOrNull()!;\n        if (!found) {\n            return Result.err(\"absent\");\n        }\n\n        return Result.ok(value);\n    }\n\n    static has(obj: Record<string, unknown>, path: string): boolean {\n        const resolvedPath = PolicyContextPath.resolve(obj, path);\n        if (resolvedPath.isErr()) {\n            return false;\n        }\n\n        return resolvedPath.getOrNull()!.found;\n    }\n\n    static set(\n        obj: Record<string, unknown>,\n        path: string,\n        value: unknown,\n    ): Result<void, string> {\n        const segmentsResult = PolicyContextPath.parseSegments(path);\n        if (segmentsResult.isErr()) {\n            return Result.err(segmentsResult.errorOrNull()!);\n        }\n\n        const segments = segmentsResult.getOrNull()!;\n        let current: Record<string, unknown> = obj;\n\n        for (let i = 0; i < segments.length - 1; i++) {\n            const seg = segments[i];\n            const next = current[seg];\n\n            if (next === undefined) {\n                const container = Object.create(null) as Record<\n                    string,\n                    unknown\n                >;\n                current[seg] = container;\n                current = container;\n                continue;\n            }\n\n            if (!PolicyContextPath.isPlainRecord(next)) {\n                return Result.err(\n                    `Cannot create nested path \"${path}\" because \"${segments\n                        .slice(0, i + 1)\n                        .join(\".\")}\" already contains a non-plain object`,\n                );\n            }\n\n            current = next;\n        }\n\n        current[segments[segments.length - 1]] = value;\n        return Result.ok(undefined);\n    }\n}\n","import { z } from \"zod\";\n\nimport type { ConditionLeafNode, ConditionNode } from \"./condition-types.js\";\n\n// ─── Shared v1 condition Zod schemas ─────────────────────────────────────────\n// Extracted from gate/v1 so both gate/v1 and compute/v1 can validate\n// condition nodes without either engine depending on the other.\n\nconst conditionOpSchema = z.enum([\n    \"eq\",\n    \"neq\",\n    \"gt\",\n    \"gte\",\n    \"lt\",\n    \"lte\",\n    \"in\",\n    \"notIn\",\n    \"isNull\",\n    \"isNotNull\",\n]);\n\nexport const conditionLeafNodeSchema: z.ZodType<ConditionLeafNode> = z\n    .object({\n        field: z.string().min(1),\n        op: conditionOpSchema,\n        value: z.unknown(),\n        allowNull: z.literal(true).optional(),\n    })\n    .strict() as z.ZodType<ConditionLeafNode>;\n\nexport const conditionNodeSchema: z.ZodType<ConditionNode> = z.lazy(() =>\n    z.union([\n        conditionLeafNodeSchema,\n        z\n            .object({\n                and: z.array(conditionNodeSchema).min(1),\n            })\n            .strict(),\n        z\n            .object({\n                or: z.array(conditionNodeSchema).min(1),\n            })\n            .strict(),\n        z\n            .object({\n                not: conditionNodeSchema,\n            })\n            .strict(),\n    ]),\n);\n","import { PolicyContextPath } from \"../../context/index.js\";\nimport { PolicyDateUtils } from \"../../utils/index.js\";\nimport { Result } from \"../../../result/result.js\";\n\nimport type {\n    ConditionAndNode,\n    ConditionLeafNode,\n    ConditionNode,\n    ConditionNotNode,\n    ConditionOp,\n    ConditionOrNode,\n} from \"./condition-types.js\";\nimport type {\n    ConditionEvaluationOptions,\n    ConditionEvaluationReport,\n} from \"../condition-evaluator-reporter.js\";\nimport type { PolicyContext } from \"../gate-types.js\";\n\nconst CONDITION_EVAL_THROWN_TAG = \"CONDITION_EVAL_THREW\";\nconst NULLISH_NUMERIC_OPERAND_NOT_ALLOWED_TAG =\n    \"NULLISH_NUMERIC_OPERAND_NOT_ALLOWED\";\nconst NULLISH_DATE_OPERAND_NOT_ALLOWED_TAG = \"NULLISH_DATE_OPERAND_NOT_ALLOWED\";\nconst INVALID_DATE_OPERAND_TAG = \"INVALID_DATE_OPERAND\";\nconst INVALID_NUMERIC_OPERAND_TAG = \"INVALID_NUMERIC_OPERAND\";\nconst INVALID_SET_OPERAND_TAG = \"INVALID_SET_OPERAND\";\nconst EMPTY_OR_CONDITION_TAG = \"EMPTY_OR_CONDITION\";\nconst EMPTY_AND_CONDITION_TAG = \"EMPTY_AND_CONDITION\";\nconst ISO_8601_UTC_DATE_PATTERN =\n    /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/;\n\nexport interface ConditionEvaluationTrace {\n    readonly conditionPath: string;\n    readonly decisiveNode: ConditionNode;\n    readonly lastEvaluatedLeaf: ConditionLeafNode;\n    readonly lastEvaluatedLeafPath: string;\n    readonly lastEvaluatedLeafResult: boolean;\n}\n\nexport interface TracedConditionEvaluation {\n    readonly matched: boolean;\n    readonly trace: ConditionEvaluationTrace;\n}\n\ntype RelationalOperator = Extract<ConditionOp, \"gt\" | \"gte\" | \"lt\" | \"lte\">;\n\nexport class ConditionEvaluatorV1 {\n    constructor(\n        private readonly context: PolicyContext,\n        private readonly options: ConditionEvaluationOptions,\n    ) {}\n\n    private static isLeafNode(node: ConditionNode): node is ConditionLeafNode {\n        return \"field\" in node && \"op\" in node;\n    }\n\n    private static isAndNode(node: ConditionNode): node is ConditionAndNode {\n        return \"and\" in node;\n    }\n\n    private static isOrNode(node: ConditionNode): node is ConditionOrNode {\n        return \"or\" in node;\n    }\n\n    private static isNotNode(node: ConditionNode): node is ConditionNotNode {\n        return \"not\" in node;\n    }\n\n    private static isRelationalOperator(\n        op: ConditionOp,\n    ): op is RelationalOperator {\n        return op === \"gt\" || op === \"gte\" || op === \"lt\" || op === \"lte\";\n    }\n\n    private static describeError(error: unknown): {\n        name: string;\n        message: string;\n    } {\n        if (error instanceof Error) {\n            return {\n                name: error.name,\n                message: error.message,\n            };\n        }\n\n        return {\n            name: \"NonErrorThrown\",\n            message: String(error),\n        };\n    }\n\n    private static buildNullishNumericOperandMessage(\n        node: ConditionLeafNode,\n        actual: null | undefined,\n    ): string {\n        const resolvedValue = actual === null ? \"null\" : \"undefined\";\n\n        return `${NULLISH_NUMERIC_OPERAND_NOT_ALLOWED_TAG}: \"${node.field}\" resolved to ${resolvedValue} for numeric operator \"${node.op}\"`;\n    }\n\n    private static buildNullishDateOperandMessage(\n        node: ConditionLeafNode,\n        actual: null | undefined,\n    ): string {\n        const resolvedValue = actual === null ? \"null\" : \"undefined\";\n\n        return `${NULLISH_DATE_OPERAND_NOT_ALLOWED_TAG}: \"${node.field}\" resolved to ${resolvedValue} for date comparison operator \"${node.op}\"`;\n    }\n\n    private static buildInvalidDateOperandMessage(\n        node: ConditionLeafNode,\n    ): string {\n        return `${INVALID_DATE_OPERAND_TAG}: \"${node.field}\" with operator \"${node.op}\" requires Date or ISO 8601 UTC string operands`;\n    }\n\n    private static buildInvalidNumericOperandMessage(\n        node: ConditionLeafNode,\n    ): string {\n        return `${INVALID_NUMERIC_OPERAND_TAG}: \"${node.field}\" with operator \"${node.op}\" requires numeric operands`;\n    }\n\n    private static buildInvalidSetOperandMessage(\n        node: ConditionLeafNode,\n    ): string {\n        return `${INVALID_SET_OPERAND_TAG}: \"${node.field}\" with operator \"${node.op}\" requires an array operand`;\n    }\n\n    private static buildEmptyOrConditionMessage(): string {\n        return `${EMPTY_OR_CONDITION_TAG}: OR nodes must contain at least one child condition`;\n    }\n\n    private static buildEmptyAndConditionMessage(): string {\n        return `${EMPTY_AND_CONDITION_TAG}: AND nodes must contain at least one child condition`;\n    }\n\n    private static parseComparableDate(\n        value: unknown,\n    ): Result<Date, string> | null {\n        if (value instanceof Date) {\n            if (!PolicyDateUtils.isValid(value)) {\n                return Result.err(\"Invalid Date instance\");\n            }\n\n            return Result.ok(value);\n        }\n\n        if (\n            typeof value !== \"string\" ||\n            !ISO_8601_UTC_DATE_PATTERN.test(value)\n        ) {\n            return null;\n        }\n\n        const parsed = new Date(value);\n        if (\n            !PolicyDateUtils.isValid(parsed) ||\n            parsed.toISOString() !== value\n        ) {\n            return Result.err(\"Invalid ISO 8601 UTC date string\");\n        }\n\n        return Result.ok(parsed);\n    }\n\n    private static evaluateRelationalNumbers(\n        actual: number,\n        op: RelationalOperator,\n        expected: number,\n    ): boolean {\n        switch (op) {\n            case \"gt\":\n                return actual > expected;\n            case \"gte\":\n                return actual >= expected;\n            case \"lt\":\n                return actual < expected;\n            case \"lte\":\n                return actual <= expected;\n        }\n    }\n\n    private buildReport(params: {\n        readonly level: ConditionEvaluationReport[\"level\"];\n        readonly tag: ConditionEvaluationReport[\"tag\"];\n        readonly message: string;\n        readonly details: Readonly<Record<string, unknown>>;\n    }): ConditionEvaluationReport {\n        return {\n            occurredAt: new Date(),\n            level: params.level,\n            tag: params.tag,\n            message: params.message,\n            engineVersion: this.options.engineVersion,\n            details: params.details,\n        };\n    }\n\n    private conditionEvalErr<TValue>(\n        node: ConditionNode,\n        error: unknown,\n    ): Result<TValue, string> {\n        const cause = ConditionEvaluatorV1.describeError(error);\n        const message = `${CONDITION_EVAL_THROWN_TAG}: ${cause.name}: ${cause.message}`;\n\n        this.options.reporter.error(\n            this.buildReport({\n                level: \"error\",\n                tag: CONDITION_EVAL_THROWN_TAG,\n                message,\n                details: { node, cause },\n            }),\n        );\n\n        return Result.err(message);\n    }\n\n    private reportDateOperandError(\n        node: ConditionLeafNode,\n        actual: unknown,\n    ): Result<boolean, string> {\n        const message =\n            ConditionEvaluatorV1.buildInvalidDateOperandMessage(node);\n\n        this.options.reporter.error(\n            this.buildReport({\n                level: \"error\",\n                tag: INVALID_DATE_OPERAND_TAG,\n                message,\n                details: {\n                    field: node.field,\n                    op: node.op,\n                    actual,\n                    expected: node.value,\n                    node,\n                },\n            }),\n        );\n\n        return Result.err(message);\n    }\n\n    private reportInvalidNumericOperand(\n        node: ConditionLeafNode,\n        actual: unknown,\n    ): Result<boolean, string> {\n        const message =\n            ConditionEvaluatorV1.buildInvalidNumericOperandMessage(node);\n\n        this.options.reporter.error(\n            this.buildReport({\n                level: \"error\",\n                tag: INVALID_NUMERIC_OPERAND_TAG,\n                message,\n                details: {\n                    field: node.field,\n                    op: node.op,\n                    actual,\n                    expected: node.value,\n                    node,\n                },\n            }),\n        );\n\n        return Result.err(message);\n    }\n\n    private reportInvalidSetOperand(\n        node: ConditionLeafNode,\n        actual: unknown,\n    ): Result<boolean, string> {\n        const message =\n            ConditionEvaluatorV1.buildInvalidSetOperandMessage(node);\n\n        this.options.reporter.error(\n            this.buildReport({\n                level: \"error\",\n                tag: INVALID_SET_OPERAND_TAG,\n                message,\n                details: {\n                    field: node.field,\n                    op: node.op,\n                    actual,\n                    expected: node.value,\n                    node,\n                },\n            }),\n        );\n\n        return Result.err(message);\n    }\n\n    private evaluateDateRelationalNode(\n        node: ConditionLeafNode,\n        actual: unknown,\n    ): Result<boolean, string> | null {\n        if (!ConditionEvaluatorV1.isRelationalOperator(node.op)) {\n            return null;\n        }\n\n        const actualDateResult =\n            ConditionEvaluatorV1.parseComparableDate(actual);\n        const expectedDateResult = ConditionEvaluatorV1.parseComparableDate(\n            node.value,\n        );\n\n        if (actualDateResult === null && expectedDateResult === null) {\n            return null;\n        }\n\n        const allowsNull = node.allowNull === true;\n\n        if (actual === null) {\n            if (allowsNull) {\n                return Result.ok(false);\n            }\n\n            const message = ConditionEvaluatorV1.buildNullishDateOperandMessage(\n                node,\n                actual,\n            );\n            this.options.reporter.error(\n                this.buildReport({\n                    level: \"error\",\n                    tag: NULLISH_DATE_OPERAND_NOT_ALLOWED_TAG,\n                    message,\n                    details: {\n                        field: node.field,\n                        op: node.op,\n                        actual,\n                        expected: node.value,\n                        allowNull: allowsNull,\n                        node,\n                    },\n                }),\n            );\n\n            return Result.err(message);\n        }\n\n        if (actual === undefined) {\n            const message = ConditionEvaluatorV1.buildNullishDateOperandMessage(\n                node,\n                actual,\n            );\n            this.options.reporter.error(\n                this.buildReport({\n                    level: \"error\",\n                    tag: NULLISH_DATE_OPERAND_NOT_ALLOWED_TAG,\n                    message,\n                    details: {\n                        field: node.field,\n                        op: node.op,\n                        actual,\n                        expected: node.value,\n                        allowNull: allowsNull,\n                        node,\n                    },\n                }),\n            );\n\n            return Result.err(message);\n        }\n\n        if (\n            actualDateResult === null ||\n            actualDateResult.isErr() ||\n            expectedDateResult === null ||\n            expectedDateResult.isErr()\n        ) {\n            return this.reportDateOperandError(node, actual);\n        }\n\n        return Result.ok(\n            ConditionEvaluatorV1.evaluateRelationalNumbers(\n                actualDateResult.getOrNull()!.getTime(),\n                node.op,\n                expectedDateResult.getOrNull()!.getTime(),\n            ),\n        );\n    }\n\n    private evaluateOperator(\n        actual: unknown,\n        op: ConditionOp,\n        expected: unknown,\n    ): boolean {\n        switch (op) {\n            case \"eq\":\n                return actual === expected;\n            case \"neq\":\n                return actual !== expected;\n            case \"gt\":\n                return (\n                    typeof actual === \"number\" &&\n                    typeof expected === \"number\" &&\n                    ConditionEvaluatorV1.evaluateRelationalNumbers(\n                        actual,\n                        op,\n                        expected,\n                    )\n                );\n            case \"gte\":\n                return (\n                    typeof actual === \"number\" &&\n                    typeof expected === \"number\" &&\n                    ConditionEvaluatorV1.evaluateRelationalNumbers(\n                        actual,\n                        op,\n                        expected,\n                    )\n                );\n            case \"lt\":\n                return (\n                    typeof actual === \"number\" &&\n                    typeof expected === \"number\" &&\n                    ConditionEvaluatorV1.evaluateRelationalNumbers(\n                        actual,\n                        op,\n                        expected,\n                    )\n                );\n            case \"lte\":\n                return (\n                    typeof actual === \"number\" &&\n                    typeof expected === \"number\" &&\n                    ConditionEvaluatorV1.evaluateRelationalNumbers(\n                        actual,\n                        op,\n                        expected,\n                    )\n                );\n            case \"in\":\n                return Array.isArray(expected) && expected.includes(actual);\n            case \"notIn\":\n                return Array.isArray(expected) && !expected.includes(actual);\n            case \"isNull\":\n                return actual === null;\n            case \"isNotNull\":\n                return actual !== null && actual !== undefined;\n        }\n    }\n\n    private evaluateNumericRelationalNode(\n        node: ConditionLeafNode,\n        actual: unknown,\n    ): Result<boolean, string> {\n        const allowsNull = node.allowNull === true;\n        if (actual === undefined || (actual === null && !allowsNull)) {\n            const message =\n                ConditionEvaluatorV1.buildNullishNumericOperandMessage(\n                    node,\n                    actual as null | undefined,\n                );\n\n            this.options.reporter.error(\n                this.buildReport({\n                    level: \"error\",\n                    tag: NULLISH_NUMERIC_OPERAND_NOT_ALLOWED_TAG,\n                    message,\n                    details: {\n                        field: node.field,\n                        op: node.op,\n                        actual,\n                        expected: node.value,\n                        allowNull: allowsNull,\n                        node,\n                    },\n                }),\n            );\n\n            return Result.err(message);\n        }\n\n        // null + allowNull: a relational comparison against a missing value\n        // never matches.\n        if (actual === null) {\n            return Result.ok(false);\n        }\n\n        // Both operands must be numbers. A present but wrong-typed operand is a\n        // context/configuration error, surfaced like the date path instead of\n        // silently collapsing to \"no match\".\n        if (typeof actual !== \"number\" || typeof node.value !== \"number\") {\n            return this.reportInvalidNumericOperand(node, actual);\n        }\n\n        return Result.ok(this.evaluateOperator(actual, node.op, node.value));\n    }\n\n    private evaluateLeafNode(node: ConditionLeafNode): Result<boolean, string> {\n        const actualResult = PolicyContextPath.getOrAbsent(\n            this.context,\n            node.field,\n        );\n        if (actualResult.isErr()) {\n            this.options.reporter.warn(\n                this.buildReport({\n                    level: \"warn\",\n                    tag: \"MISSING_CONTEXT_FIELD\",\n                    message: `MISSING_CONTEXT_FIELD: \"${node.field}\" not found in context`,\n                    details: { field: node.field, node },\n                }),\n            );\n\n            return Result.err(\n                `MISSING_CONTEXT_FIELD: \"${node.field}\" not found in context`,\n            );\n        }\n\n        try {\n            const actual = actualResult.getOrThrow();\n            if (ConditionEvaluatorV1.isRelationalOperator(node.op)) {\n                const dateResult = this.evaluateDateRelationalNode(\n                    node,\n                    actual,\n                );\n                if (dateResult !== null) {\n                    return dateResult;\n                }\n\n                return this.evaluateNumericRelationalNode(node, actual);\n            }\n\n            if (\n                (node.op === \"in\" || node.op === \"notIn\") &&\n                !Array.isArray(node.value)\n            ) {\n                return this.reportInvalidSetOperand(node, actual);\n            }\n\n            return Result.ok(\n                this.evaluateOperator(actual, node.op, node.value),\n            );\n        } catch (error) {\n            return this.conditionEvalErr(node, error);\n        }\n    }\n\n    private buildTrace(params: {\n        readonly conditionPath: string;\n        readonly decisiveNode: ConditionNode;\n        readonly lastEvaluatedLeaf: ConditionLeafNode;\n        readonly lastEvaluatedLeafPath: string;\n        readonly lastEvaluatedLeafResult: boolean;\n    }): ConditionEvaluationTrace {\n        return {\n            conditionPath: params.conditionPath,\n            decisiveNode: params.decisiveNode,\n            lastEvaluatedLeaf: params.lastEvaluatedLeaf,\n            lastEvaluatedLeafPath: params.lastEvaluatedLeafPath,\n            lastEvaluatedLeafResult: params.lastEvaluatedLeafResult,\n        };\n    }\n\n    private evaluateWithTraceInternal(\n        node: ConditionNode,\n        path: string,\n    ): Result<TracedConditionEvaluation, string> {\n        if (ConditionEvaluatorV1.isLeafNode(node)) {\n            const leafResult = this.evaluateLeafNode(node);\n            if (leafResult.isErr()) {\n                return Result.err(leafResult.errorOrNull()!);\n            }\n\n            const matched = leafResult.getOrNull()!;\n            return Result.ok({\n                matched,\n                trace: this.buildTrace({\n                    conditionPath: path,\n                    decisiveNode: node,\n                    lastEvaluatedLeaf: node,\n                    lastEvaluatedLeafPath: path,\n                    lastEvaluatedLeafResult: matched,\n                }),\n            });\n        }\n\n        if (ConditionEvaluatorV1.isAndNode(node)) {\n            if (node.and.length === 0) {\n                return Result.err(\n                    ConditionEvaluatorV1.buildEmptyAndConditionMessage(),\n                );\n            }\n\n            let lastTracedChild: TracedConditionEvaluation | null = null;\n\n            for (const [index, child] of node.and.entries()) {\n                const childPath = `${path}.and[${index}]`;\n                const childResult = this.evaluateWithTraceInternal(\n                    child,\n                    childPath,\n                );\n                if (childResult.isErr()) {\n                    return Result.err(childResult.errorOrNull()!);\n                }\n\n                const tracedChild = childResult.getOrNull()!;\n                lastTracedChild = tracedChild;\n                if (!tracedChild.matched) {\n                    return Result.ok({\n                        matched: false,\n                        trace: this.buildTrace({\n                            conditionPath: childPath,\n                            decisiveNode: child,\n                            lastEvaluatedLeaf:\n                                tracedChild.trace.lastEvaluatedLeaf,\n                            lastEvaluatedLeafPath:\n                                tracedChild.trace.lastEvaluatedLeafPath,\n                            lastEvaluatedLeafResult:\n                                tracedChild.trace.lastEvaluatedLeafResult,\n                        }),\n                    });\n                }\n            }\n\n            return Result.ok({\n                matched: true,\n                trace: lastTracedChild!.trace,\n            });\n        }\n\n        if (ConditionEvaluatorV1.isOrNode(node)) {\n            let lastTrace: ConditionEvaluationTrace | null = null;\n\n            for (const [index, child] of node.or.entries()) {\n                const childResult = this.evaluateWithTraceInternal(\n                    child,\n                    `${path}.or[${index}]`,\n                );\n                if (childResult.isErr()) {\n                    return Result.err(childResult.errorOrNull()!);\n                }\n\n                const tracedChild = childResult.getOrNull()!;\n                lastTrace = tracedChild.trace;\n                if (tracedChild.matched) {\n                    return Result.ok({\n                        matched: true,\n                        trace: tracedChild.trace,\n                    });\n                }\n            }\n\n            if (lastTrace === null) {\n                return Result.err(\n                    ConditionEvaluatorV1.buildEmptyOrConditionMessage(),\n                );\n            }\n\n            return Result.ok({ matched: false, trace: lastTrace! });\n        }\n\n        if (ConditionEvaluatorV1.isNotNode(node)) {\n            const childPath = `${path}.not`;\n            const childResult = this.evaluateWithTraceInternal(\n                node.not,\n                childPath,\n            );\n            if (childResult.isErr()) {\n                return Result.err(childResult.errorOrNull()!);\n            }\n\n            const tracedChild = childResult.getOrNull()!;\n            return Result.ok({\n                matched: !tracedChild.matched,\n                trace: this.buildTrace({\n                    conditionPath: path,\n                    decisiveNode: node,\n                    lastEvaluatedLeaf: tracedChild.trace.lastEvaluatedLeaf,\n                    lastEvaluatedLeafPath:\n                        tracedChild.trace.lastEvaluatedLeafPath,\n                    lastEvaluatedLeafResult:\n                        tracedChild.trace.lastEvaluatedLeafResult,\n                }),\n            });\n        }\n\n        return this.conditionEvalErr(\n            node,\n            new TypeError(\"Invalid condition node shape\"),\n        );\n    }\n\n    evaluate(node: ConditionNode): Result<boolean, string> {\n        try {\n            const result = this.evaluateWithTraceInternal(node, \"$\");\n            if (result.isErr()) {\n                return Result.err(result.errorOrNull()!);\n            }\n\n            return Result.ok(result.getOrNull()!.matched);\n        } catch (error) {\n            return this.conditionEvalErr(node, error);\n        }\n    }\n\n    evaluateWithTrace(\n        node: ConditionNode,\n    ): Result<TracedConditionEvaluation, string> {\n        try {\n            return this.evaluateWithTraceInternal(node, \"$\");\n        } catch (error) {\n            return this.conditionEvalErr(node, error);\n        }\n    }\n\n    static extractFields(node: ConditionNode): string[] {\n        if (ConditionEvaluatorV1.isLeafNode(node)) {\n            return [node.field];\n        }\n\n        if (ConditionEvaluatorV1.isAndNode(node)) {\n            return node.and.flatMap((child) =>\n                ConditionEvaluatorV1.extractFields(child),\n            );\n        }\n\n        if (ConditionEvaluatorV1.isOrNode(node)) {\n            return node.or.flatMap((child) =>\n                ConditionEvaluatorV1.extractFields(child),\n            );\n        }\n\n        if (ConditionEvaluatorV1.isNotNode(node)) {\n            return ConditionEvaluatorV1.extractFields(node.not);\n        }\n\n        return [];\n    }\n}\n","import { z } from \"zod\";\n\nimport { Result } from \"../../../../result/result.js\";\n\nimport type { GatePayloadV1 } from \"./gate-types-v1.js\";\nimport {\n    conditionLeafNodeSchema,\n    conditionNodeSchema,\n} from \"../condition-schema.js\";\n\n// Re-export so gate/v1 public API remains unchanged.\nexport { conditionLeafNodeSchema, conditionNodeSchema };\n\nexport class GatePayloadSchemaV1 {\n    static readonly schema = z.union([\n        z\n            .object({\n                condition: conditionNodeSchema,\n            })\n            .strict(),\n        z\n            .object({\n                allowIf: conditionNodeSchema,\n                defaultOutcome: z.enum([\"ALLOW\", \"DENY\"]),\n            })\n            .strict(),\n    ]);\n\n    static parse(payload: unknown): Result<GatePayloadV1, string> {\n        const parsed = GatePayloadSchemaV1.schema.safeParse(payload);\n        if (!parsed.success) {\n            const details = parsed.error.issues\n                .map((issue) => {\n                    const path = issue.path.join(\".\");\n                    return path.length > 0\n                        ? `${path}: ${issue.message}`\n                        : issue.message;\n                })\n                .join(\"; \");\n\n            return Result.err(`Invalid gate payload: ${details}`);\n        }\n\n        return Result.ok(parsed.data as GatePayloadV1);\n    }\n}\n\nexport const gatePayloadSchema = GatePayloadSchemaV1.schema;\n"],"mappings":";;;AAEA,IAAa,uBAAb,MAA4D;CACxD,OAAO,QAAuD,CAAC;AACnE;;;ACWA,SAAS,aACL,gBACA,OACI;CACJ,IAAI;EACA,eAAe,OAAO,KAAK;CAC/B,QAAQ,CAER;AACJ;;;;;AAMA,IAAa,aAAb,MAAwB;CACpB;CACA;CAEA,YAAY,UAA6B,CAAC,GAAG;EACzC,MAAM,WACF,QAAQ,eAAe,YAAY,IAAI,qBAAqB;EAChE,KAAKA,mBAAmB;EACxB,KAAKC,mBAAmB;CAC5B;CAEA,UAAU,SAAkC;EACxC,MAAM,WAAW,QAAQ,eAAe;EACxC,IAAI,UACA,KAAKA,mBAAmB;EAE5B,OAAO;CACX;CAGA,QAAc;EACV,KAAKA,mBAAmB,KAAKD;EAC7B,OAAO;CACX;CAEA,oBAAoC;EAChC,OAAO,KAAKC;CAChB;CAEA,8BACI,eAC0B;EAC1B,OAAO;GACH,UAAU,KAAKC,2BAA2B,KAAKD,gBAAgB;GAC/D;EACJ;CACJ;CAEA,2BACI,gBAC0B;EAC1B,OAAO;GACH,KAAK,QAAQ;IACT,aAAa,gBAAgB;KACzB,MAAM;KACN,GAAG;IACP,CAAuB;GAC3B;GACA,MAAM,QAAQ;IACV,aAAa,gBAAgB;KACzB,MAAM;KACN,GAAG;IACP,CAAuB;GAC3B;EACJ;CACJ;AACJ;;;;;;;;;;;AC3EA,MAAa,aAAa,IAAI,WAAW,EACrC,eAAe,EAAE,UAAU,IAAI,qBAAqB,EAAE,EAC1D,CAAC;;;;;;;ACTD,IAAsB,SAAtB,MAAsB,OAAa;CAC/B,cAAwB,CAExB;;;;CAKA,OAAO,GAAM,OAA4B;EACrC,OAAO,IAAI,GAAG,KAAK;CACvB;;;;CAKA,OAAO,IAAO,OAA4B;EACtC,OAAO,IAAI,IAAI,KAAK;CACxB;;;;CAuBA,YAAsB;EAClB,OAAO,KAAK,MAAM;GACd,KAAK,UAAU;GACf,WAAW;EACf,CAAC;CACL;;;;CAKA,cAAwB;EACpB,OAAO,KAAK,MAAM;GACd,UAAU;GACV,MAAM,UAAU;EACpB,CAAC;CACL;;;;CAKA,aAAgB;EACZ,OAAO,KAAK,MAAM;GACd,KAAK,UAAU;GACf,MAAM,UAAU;IACZ,MAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;GAClE;EACJ,CAAC;CACL;;;;CAKA,IAAO,WAA0C;EAC7C,OAAO,KAAK,MAAoB;GAC5B,KAAK,UAAU,OAAO,GAAG,UAAU,KAAK,CAAC;GAGzC,MAAM,UAAU,OAAO,IAAI,KAAK;EACpC,CAAC;CACL;;;;CAKA,SAAY,WAA0C;EAClD,OAAO,KAAK,MAAoB;GAE5B,KAAK,UAAU,OAAO,GAAG,KAAK;GAC9B,MAAM,UAAU,OAAO,IAAI,UAAU,KAAK,CAAC;EAC/C,CAAC;CACL;;;;CAKA,QAAW,WAAqD;EAC5D,OAAO,KAAK,MAAoB;GAC5B,KAAK,UAAU,UAAU,KAAK;GAC9B,MAAM,UAAU,OAAO,IAAI,KAAK;EACpC,CAAC;CACL;AACJ;;;;AAKA,IAAa,KAAb,cAA2B,OAAiB;CAGxC,YAAY,OAAU;EAClB,MAAM;EACN,KAAK,QAAQ;EACb,OAAO,OAAO,IAAI;CACtB;CAEA,OAAsB;EAClB,OAAO;CACX;CAEA,QAA4B;EACxB,OAAO;CACX;CAEA,MAAS,UAAgE;EACrE,OAAO,SAAS,GAAG,KAAK,KAAK;CACjC;AACJ;;;;AAKA,IAAa,MAAb,cAA4B,OAAiB;CAGzC,YAAY,OAAU;EAClB,MAAM;EACN,KAAK,QAAQ;EACb,OAAO,OAAO,IAAI;CACtB;CAEA,OAA0B;EACtB,OAAO;CACX;CAEA,QAAwB;EACpB,OAAO;CACX;CAEA,MAAS,UAAgE;EACrE,OAAO,SAAS,IAAI,KAAK,KAAK;CAClC;AACJ;;;ACzJA,IAAa,kBAAb,MAA6B;CACzB,OAAO,QAAQ,OAAsB;EACjC,OAAO,YAAY,KAAK;CAC5B;AACJ;;;;;;;ACCA,IAAa,oBAAb,MAAa,kBAAkB;;4BACkB,IAAI,IAAI;GACjD;GACA;GACA;EACJ,CAAC;;CAED,OAAe,QACX,KACA,MAOF;EACE,MAAM,iBAAiB,kBAAkB,cAAc,IAAI;EAC3D,IAAI,eAAe,MAAM,GACrB,OAAO,OAAO,IAAI,eAAe,YAAY,CAAE;EAGnD,MAAM,WAAW,eAAe,UAAU;EAC1C,IAAI,UAAmB;EAEvB,KAAK,MAAM,WAAW,UAAU;GAC5B,IACI,YAAY,QACZ,YAAY,KAAA,KACZ,OAAO,YAAY,UAEnB,OAAO,OAAO,GAAG;IAAE,OAAO;IAAO,OAAO,KAAA;GAAU,CAAC;GAGvD,MAAM,SAAS;GACf,IAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,OAAO,GACrD,OAAO,OAAO,GAAG;IAAE,OAAO;IAAO,OAAO,KAAA;GAAU,CAAC;GAGvD,UAAU,OAAO;EACrB;EAEA,OAAO,OAAO,GAAG;GAAE,OAAO;GAAM,OAAO;EAAQ,CAAC;CACpD;CAEA,OAAe,cACX,MACiC;EACjC,IAAI,KAAK,KAAK,EAAE,WAAW,GACvB,OAAO,OAAO,IAAI,sBAAsB;EAG5C,MAAM,WAAW,KAAK,MAAM,GAAG;EAC/B,IAAI,SAAS,MAAM,YAAY,QAAQ,WAAW,CAAC,GAC/C,OAAO,OAAO,IAAI,SAAS,KAAK,4BAA4B;EAGhE,MAAM,mBAAmB,SAAS,MAAM,YACpC,kBAAkB,mBAAmB,IAAI,OAAO,CACpD;EACA,IAAI,qBAAqB,KAAA,GACrB,OAAO,OAAO,IACV,SAAS,KAAK,gCAAgC,iBAAiB,EACnE;EAGJ,OAAO,OAAO,GAAG,QAAQ;CAC7B;CAEA,OAAe,cACX,OACgC;EAChC,IACI,OAAO,UAAU,YACjB,UAAU,QACV,MAAM,QAAQ,KAAK,GAEnB,OAAO;EAGX,MAAM,YAAY,OAAO,eAAe,KAAK;EAC7C,OAAO,cAAc,OAAO,aAAa,cAAc;CAC3D;CAEA,OAAO,YACH,KACA,MACyB;EACzB,MAAM,eAAe,kBAAkB,QAAQ,KAAK,IAAI;EACxD,IAAI,aAAa,MAAM,GACnB,OAAO,OAAO,IAAI,QAAQ;EAG9B,MAAM,EAAE,OAAO,UAAU,aAAa,UAAU;EAChD,IAAI,CAAC,OACD,OAAO,OAAO,IAAI,QAAQ;EAG9B,OAAO,OAAO,GAAG,KAAK;CAC1B;CAEA,OAAO,IAAI,KAA8B,MAAuB;EAC5D,MAAM,eAAe,kBAAkB,QAAQ,KAAK,IAAI;EACxD,IAAI,aAAa,MAAM,GACnB,OAAO;EAGX,OAAO,aAAa,UAAU,EAAG;CACrC;CAEA,OAAO,IACH,KACA,MACA,OACoB;EACpB,MAAM,iBAAiB,kBAAkB,cAAc,IAAI;EAC3D,IAAI,eAAe,MAAM,GACrB,OAAO,OAAO,IAAI,eAAe,YAAY,CAAE;EAGnD,MAAM,WAAW,eAAe,UAAU;EAC1C,IAAI,UAAmC;EAEvC,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,SAAS,GAAG,KAAK;GAC1C,MAAM,MAAM,SAAS;GACrB,MAAM,OAAO,QAAQ;GAErB,IAAI,SAAS,KAAA,GAAW;IACpB,MAAM,YAAY,OAAO,OAAO,IAAI;IAIpC,QAAQ,OAAO;IACf,UAAU;IACV;GACJ;GAEA,IAAI,CAAC,kBAAkB,cAAc,IAAI,GACrC,OAAO,OAAO,IACV,8BAA8B,KAAK,aAAa,SAC3C,MAAM,GAAG,IAAI,CAAC,EACd,KAAK,GAAG,EAAE,sCACnB;GAGJ,UAAU;EACd;EAEA,QAAQ,SAAS,SAAS,SAAS,MAAM;EACzC,OAAO,OAAO,GAAG,KAAA,CAAS;CAC9B;AACJ;;;ACtJA,MAAM,oBAAoB,EAAE,KAAK;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACJ,CAAC;AAED,MAAa,0BAAwD,EAChE,OAAO;CACJ,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;CACvB,IAAI;CACJ,OAAO,EAAE,QAAQ;CACjB,WAAW,EAAE,QAAQ,IAAI,EAAE,SAAS;AACxC,CAAC,EACA,OAAO;AAEZ,MAAa,sBAAgD,EAAE,WAC3D,EAAE,MAAM;CACJ;CACA,EACK,OAAO,EACJ,KAAK,EAAE,MAAM,mBAAmB,EAAE,IAAI,CAAC,EAC3C,CAAC,EACA,OAAO;CACZ,EACK,OAAO,EACJ,IAAI,EAAE,MAAM,mBAAmB,EAAE,IAAI,CAAC,EAC1C,CAAC,EACA,OAAO;CACZ,EACK,OAAO,EACJ,KAAK,oBACT,CAAC,EACA,OAAO;AAChB,CAAC,CACL;;;AC/BA,MAAM,4BAA4B;AAClC,MAAM,0CACF;AACJ,MAAM,uCAAuC;AAC7C,MAAM,2BAA2B;AACjC,MAAM,8BAA8B;AACpC,MAAM,0BAA0B;AAChC,MAAM,yBAAyB;AAC/B,MAAM,0BAA0B;AAChC,MAAM,4BACF;AAiBJ,IAAa,uBAAb,MAAa,qBAAqB;CAC9B,YACI,SACA,SACF;EAFmB,KAAA,UAAA;EACA,KAAA,UAAA;CAClB;CAEH,OAAe,WAAW,MAAgD;EACtE,OAAO,WAAW,QAAQ,QAAQ;CACtC;CAEA,OAAe,UAAU,MAA+C;EACpE,OAAO,SAAS;CACpB;CAEA,OAAe,SAAS,MAA8C;EAClE,OAAO,QAAQ;CACnB;CAEA,OAAe,UAAU,MAA+C;EACpE,OAAO,SAAS;CACpB;CAEA,OAAe,qBACX,IACwB;EACxB,OAAO,OAAO,QAAQ,OAAO,SAAS,OAAO,QAAQ,OAAO;CAChE;CAEA,OAAe,cAAc,OAG3B;EACE,IAAI,iBAAiB,OACjB,OAAO;GACH,MAAM,MAAM;GACZ,SAAS,MAAM;EACnB;EAGJ,OAAO;GACH,MAAM;GACN,SAAS,OAAO,KAAK;EACzB;CACJ;CAEA,OAAe,kCACX,MACA,QACM;EACN,MAAM,gBAAgB,WAAW,OAAO,SAAS;EAEjD,OAAO,GAAG,wCAAwC,KAAK,KAAK,MAAM,gBAAgB,cAAc,yBAAyB,KAAK,GAAG;CACrI;CAEA,OAAe,+BACX,MACA,QACM;EACN,MAAM,gBAAgB,WAAW,OAAO,SAAS;EAEjD,OAAO,GAAG,qCAAqC,KAAK,KAAK,MAAM,gBAAgB,cAAc,iCAAiC,KAAK,GAAG;CAC1I;CAEA,OAAe,+BACX,MACM;EACN,OAAO,GAAG,yBAAyB,KAAK,KAAK,MAAM,mBAAmB,KAAK,GAAG;CAClF;CAEA,OAAe,kCACX,MACM;EACN,OAAO,GAAG,4BAA4B,KAAK,KAAK,MAAM,mBAAmB,KAAK,GAAG;CACrF;CAEA,OAAe,8BACX,MACM;EACN,OAAO,GAAG,wBAAwB,KAAK,KAAK,MAAM,mBAAmB,KAAK,GAAG;CACjF;CAEA,OAAe,+BAAuC;EAClD,OAAO,GAAG,uBAAuB;CACrC;CAEA,OAAe,gCAAwC;EACnD,OAAO,GAAG,wBAAwB;CACtC;CAEA,OAAe,oBACX,OAC2B;EAC3B,IAAI,iBAAiB,MAAM;GACvB,IAAI,CAAC,gBAAgB,QAAQ,KAAK,GAC9B,OAAO,OAAO,IAAI,uBAAuB;GAG7C,OAAO,OAAO,GAAG,KAAK;EAC1B;EAEA,IACI,OAAO,UAAU,YACjB,CAAC,0BAA0B,KAAK,KAAK,GAErC,OAAO;EAGX,MAAM,SAAS,IAAI,KAAK,KAAK;EAC7B,IACI,CAAC,gBAAgB,QAAQ,MAAM,KAC/B,OAAO,YAAY,MAAM,OAEzB,OAAO,OAAO,IAAI,kCAAkC;EAGxD,OAAO,OAAO,GAAG,MAAM;CAC3B;CAEA,OAAe,0BACX,QACA,IACA,UACO;EACP,QAAQ,IAAR;GACI,KAAK,MACD,OAAO,SAAS;GACpB,KAAK,OACD,OAAO,UAAU;GACrB,KAAK,MACD,OAAO,SAAS;GACpB,KAAK,OACD,OAAO,UAAU;EACzB;CACJ;CAEA,YAAoB,QAKU;EAC1B,OAAO;GACH,4BAAY,IAAI,KAAK;GACrB,OAAO,OAAO;GACd,KAAK,OAAO;GACZ,SAAS,OAAO;GAChB,eAAe,KAAK,QAAQ;GAC5B,SAAS,OAAO;EACpB;CACJ;CAEA,iBACI,MACA,OACsB;EACtB,MAAM,QAAQ,qBAAqB,cAAc,KAAK;EACtD,MAAM,UAAU,GAAG,0BAA0B,IAAI,MAAM,KAAK,IAAI,MAAM;EAEtE,KAAK,QAAQ,SAAS,MAClB,KAAK,YAAY;GACb,OAAO;GACP,KAAK;GACL;GACA,SAAS;IAAE;IAAM;GAAM;EAC3B,CAAC,CACL;EAEA,OAAO,OAAO,IAAI,OAAO;CAC7B;CAEA,uBACI,MACA,QACuB;EACvB,MAAM,UACF,qBAAqB,+BAA+B,IAAI;EAE5D,KAAK,QAAQ,SAAS,MAClB,KAAK,YAAY;GACb,OAAO;GACP,KAAK;GACL;GACA,SAAS;IACL,OAAO,KAAK;IACZ,IAAI,KAAK;IACT;IACA,UAAU,KAAK;IACf;GACJ;EACJ,CAAC,CACL;EAEA,OAAO,OAAO,IAAI,OAAO;CAC7B;CAEA,4BACI,MACA,QACuB;EACvB,MAAM,UACF,qBAAqB,kCAAkC,IAAI;EAE/D,KAAK,QAAQ,SAAS,MAClB,KAAK,YAAY;GACb,OAAO;GACP,KAAK;GACL;GACA,SAAS;IACL,OAAO,KAAK;IACZ,IAAI,KAAK;IACT;IACA,UAAU,KAAK;IACf;GACJ;EACJ,CAAC,CACL;EAEA,OAAO,OAAO,IAAI,OAAO;CAC7B;CAEA,wBACI,MACA,QACuB;EACvB,MAAM,UACF,qBAAqB,8BAA8B,IAAI;EAE3D,KAAK,QAAQ,SAAS,MAClB,KAAK,YAAY;GACb,OAAO;GACP,KAAK;GACL;GACA,SAAS;IACL,OAAO,KAAK;IACZ,IAAI,KAAK;IACT;IACA,UAAU,KAAK;IACf;GACJ;EACJ,CAAC,CACL;EAEA,OAAO,OAAO,IAAI,OAAO;CAC7B;CAEA,2BACI,MACA,QAC8B;EAC9B,IAAI,CAAC,qBAAqB,qBAAqB,KAAK,EAAE,GAClD,OAAO;EAGX,MAAM,mBACF,qBAAqB,oBAAoB,MAAM;EACnD,MAAM,qBAAqB,qBAAqB,oBAC5C,KAAK,KACT;EAEA,IAAI,qBAAqB,QAAQ,uBAAuB,MACpD,OAAO;EAGX,MAAM,aAAa,KAAK,cAAc;EAEtC,IAAI,WAAW,MAAM;GACjB,IAAI,YACA,OAAO,OAAO,GAAG,KAAK;GAG1B,MAAM,UAAU,qBAAqB,+BACjC,MACA,MACJ;GACA,KAAK,QAAQ,SAAS,MAClB,KAAK,YAAY;IACb,OAAO;IACP,KAAK;IACL;IACA,SAAS;KACL,OAAO,KAAK;KACZ,IAAI,KAAK;KACT;KACA,UAAU,KAAK;KACf,WAAW;KACX;IACJ;GACJ,CAAC,CACL;GAEA,OAAO,OAAO,IAAI,OAAO;EAC7B;EAEA,IAAI,WAAW,KAAA,GAAW;GACtB,MAAM,UAAU,qBAAqB,+BACjC,MACA,MACJ;GACA,KAAK,QAAQ,SAAS,MAClB,KAAK,YAAY;IACb,OAAO;IACP,KAAK;IACL;IACA,SAAS;KACL,OAAO,KAAK;KACZ,IAAI,KAAK;KACT;KACA,UAAU,KAAK;KACf,WAAW;KACX;IACJ;GACJ,CAAC,CACL;GAEA,OAAO,OAAO,IAAI,OAAO;EAC7B;EAEA,IACI,qBAAqB,QACrB,iBAAiB,MAAM,KACvB,uBAAuB,QACvB,mBAAmB,MAAM,GAEzB,OAAO,KAAK,uBAAuB,MAAM,MAAM;EAGnD,OAAO,OAAO,GACV,qBAAqB,0BACjB,iBAAiB,UAAU,EAAG,QAAQ,GACtC,KAAK,IACL,mBAAmB,UAAU,EAAG,QAAQ,CAC5C,CACJ;CACJ;CAEA,iBACI,QACA,IACA,UACO;EACP,QAAQ,IAAR;GACI,KAAK,MACD,OAAO,WAAW;GACtB,KAAK,OACD,OAAO,WAAW;GACtB,KAAK,MACD,OACI,OAAO,WAAW,YAClB,OAAO,aAAa,YACpB,qBAAqB,0BACjB,QACA,IACA,QACJ;GAER,KAAK,OACD,OACI,OAAO,WAAW,YAClB,OAAO,aAAa,YACpB,qBAAqB,0BACjB,QACA,IACA,QACJ;GAER,KAAK,MACD,OACI,OAAO,WAAW,YAClB,OAAO,aAAa,YACpB,qBAAqB,0BACjB,QACA,IACA,QACJ;GAER,KAAK,OACD,OACI,OAAO,WAAW,YAClB,OAAO,aAAa,YACpB,qBAAqB,0BACjB,QACA,IACA,QACJ;GAER,KAAK,MACD,OAAO,MAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS,MAAM;GAC9D,KAAK,SACD,OAAO,MAAM,QAAQ,QAAQ,KAAK,CAAC,SAAS,SAAS,MAAM;GAC/D,KAAK,UACD,OAAO,WAAW;GACtB,KAAK,aACD,OAAO,WAAW,QAAQ,WAAW,KAAA;EAC7C;CACJ;CAEA,8BACI,MACA,QACuB;EACvB,MAAM,aAAa,KAAK,cAAc;EACtC,IAAI,WAAW,KAAA,KAAc,WAAW,QAAQ,CAAC,YAAa;GAC1D,MAAM,UACF,qBAAqB,kCACjB,MACA,MACJ;GAEJ,KAAK,QAAQ,SAAS,MAClB,KAAK,YAAY;IACb,OAAO;IACP,KAAK;IACL;IACA,SAAS;KACL,OAAO,KAAK;KACZ,IAAI,KAAK;KACT;KACA,UAAU,KAAK;KACf,WAAW;KACX;IACJ;GACJ,CAAC,CACL;GAEA,OAAO,OAAO,IAAI,OAAO;EAC7B;EAIA,IAAI,WAAW,MACX,OAAO,OAAO,GAAG,KAAK;EAM1B,IAAI,OAAO,WAAW,YAAY,OAAO,KAAK,UAAU,UACpD,OAAO,KAAK,4BAA4B,MAAM,MAAM;EAGxD,OAAO,OAAO,GAAG,KAAK,iBAAiB,QAAQ,KAAK,IAAI,KAAK,KAAK,CAAC;CACvE;CAEA,iBAAyB,MAAkD;EACvE,MAAM,eAAe,kBAAkB,YACnC,KAAK,SACL,KAAK,KACT;EACA,IAAI,aAAa,MAAM,GAAG;GACtB,KAAK,QAAQ,SAAS,KAClB,KAAK,YAAY;IACb,OAAO;IACP,KAAK;IACL,SAAS,2BAA2B,KAAK,MAAM;IAC/C,SAAS;KAAE,OAAO,KAAK;KAAO;IAAK;GACvC,CAAC,CACL;GAEA,OAAO,OAAO,IACV,2BAA2B,KAAK,MAAM,uBAC1C;EACJ;EAEA,IAAI;GACA,MAAM,SAAS,aAAa,WAAW;GACvC,IAAI,qBAAqB,qBAAqB,KAAK,EAAE,GAAG;IACpD,MAAM,aAAa,KAAK,2BACpB,MACA,MACJ;IACA,IAAI,eAAe,MACf,OAAO;IAGX,OAAO,KAAK,8BAA8B,MAAM,MAAM;GAC1D;GAEA,KACK,KAAK,OAAO,QAAQ,KAAK,OAAO,YACjC,CAAC,MAAM,QAAQ,KAAK,KAAK,GAEzB,OAAO,KAAK,wBAAwB,MAAM,MAAM;GAGpD,OAAO,OAAO,GACV,KAAK,iBAAiB,QAAQ,KAAK,IAAI,KAAK,KAAK,CACrD;EACJ,SAAS,OAAO;GACZ,OAAO,KAAK,iBAAiB,MAAM,KAAK;EAC5C;CACJ;CAEA,WAAmB,QAMU;EACzB,OAAO;GACH,eAAe,OAAO;GACtB,cAAc,OAAO;GACrB,mBAAmB,OAAO;GAC1B,uBAAuB,OAAO;GAC9B,yBAAyB,OAAO;EACpC;CACJ;CAEA,0BACI,MACA,MACyC;EACzC,IAAI,qBAAqB,WAAW,IAAI,GAAG;GACvC,MAAM,aAAa,KAAK,iBAAiB,IAAI;GAC7C,IAAI,WAAW,MAAM,GACjB,OAAO,OAAO,IAAI,WAAW,YAAY,CAAE;GAG/C,MAAM,UAAU,WAAW,UAAU;GACrC,OAAO,OAAO,GAAG;IACb;IACA,OAAO,KAAK,WAAW;KACnB,eAAe;KACf,cAAc;KACd,mBAAmB;KACnB,uBAAuB;KACvB,yBAAyB;IAC7B,CAAC;GACL,CAAC;EACL;EAEA,IAAI,qBAAqB,UAAU,IAAI,GAAG;GACtC,IAAI,KAAK,IAAI,WAAW,GACpB,OAAO,OAAO,IACV,qBAAqB,8BAA8B,CACvD;GAGJ,IAAI,kBAAoD;GAExD,KAAK,MAAM,CAAC,OAAO,UAAU,KAAK,IAAI,QAAQ,GAAG;IAC7C,MAAM,YAAY,GAAG,KAAK,OAAO,MAAM;IACvC,MAAM,cAAc,KAAK,0BACrB,OACA,SACJ;IACA,IAAI,YAAY,MAAM,GAClB,OAAO,OAAO,IAAI,YAAY,YAAY,CAAE;IAGhD,MAAM,cAAc,YAAY,UAAU;IAC1C,kBAAkB;IAClB,IAAI,CAAC,YAAY,SACb,OAAO,OAAO,GAAG;KACb,SAAS;KACT,OAAO,KAAK,WAAW;MACnB,eAAe;MACf,cAAc;MACd,mBACI,YAAY,MAAM;MACtB,uBACI,YAAY,MAAM;MACtB,yBACI,YAAY,MAAM;KAC1B,CAAC;IACL,CAAC;GAET;GAEA,OAAO,OAAO,GAAG;IACb,SAAS;IACT,OAAO,gBAAiB;GAC5B,CAAC;EACL;EAEA,IAAI,qBAAqB,SAAS,IAAI,GAAG;GACrC,IAAI,YAA6C;GAEjD,KAAK,MAAM,CAAC,OAAO,UAAU,KAAK,GAAG,QAAQ,GAAG;IAC5C,MAAM,cAAc,KAAK,0BACrB,OACA,GAAG,KAAK,MAAM,MAAM,EACxB;IACA,IAAI,YAAY,MAAM,GAClB,OAAO,OAAO,IAAI,YAAY,YAAY,CAAE;IAGhD,MAAM,cAAc,YAAY,UAAU;IAC1C,YAAY,YAAY;IACxB,IAAI,YAAY,SACZ,OAAO,OAAO,GAAG;KACb,SAAS;KACT,OAAO,YAAY;IACvB,CAAC;GAET;GAEA,IAAI,cAAc,MACd,OAAO,OAAO,IACV,qBAAqB,6BAA6B,CACtD;GAGJ,OAAO,OAAO,GAAG;IAAE,SAAS;IAAO,OAAO;GAAW,CAAC;EAC1D;EAEA,IAAI,qBAAqB,UAAU,IAAI,GAAG;GACtC,MAAM,YAAY,GAAG,KAAK;GAC1B,MAAM,cAAc,KAAK,0BACrB,KAAK,KACL,SACJ;GACA,IAAI,YAAY,MAAM,GAClB,OAAO,OAAO,IAAI,YAAY,YAAY,CAAE;GAGhD,MAAM,cAAc,YAAY,UAAU;GAC1C,OAAO,OAAO,GAAG;IACb,SAAS,CAAC,YAAY;IACtB,OAAO,KAAK,WAAW;KACnB,eAAe;KACf,cAAc;KACd,mBAAmB,YAAY,MAAM;KACrC,uBACI,YAAY,MAAM;KACtB,yBACI,YAAY,MAAM;IAC1B,CAAC;GACL,CAAC;EACL;EAEA,OAAO,KAAK,iBACR,sBACA,IAAI,UAAU,8BAA8B,CAChD;CACJ;CAEA,SAAS,MAA8C;EACnD,IAAI;GACA,MAAM,SAAS,KAAK,0BAA0B,MAAM,GAAG;GACvD,IAAI,OAAO,MAAM,GACb,OAAO,OAAO,IAAI,OAAO,YAAY,CAAE;GAG3C,OAAO,OAAO,GAAG,OAAO,UAAU,EAAG,OAAO;EAChD,SAAS,OAAO;GACZ,OAAO,KAAK,iBAAiB,MAAM,KAAK;EAC5C;CACJ;CAEA,kBACI,MACyC;EACzC,IAAI;GACA,OAAO,KAAK,0BAA0B,MAAM,GAAG;EACnD,SAAS,OAAO;GACZ,OAAO,KAAK,iBAAiB,MAAM,KAAK;EAC5C;CACJ;CAEA,OAAO,cAAc,MAA+B;EAChD,IAAI,qBAAqB,WAAW,IAAI,GACpC,OAAO,CAAC,KAAK,KAAK;EAGtB,IAAI,qBAAqB,UAAU,IAAI,GACnC,OAAO,KAAK,IAAI,SAAS,UACrB,qBAAqB,cAAc,KAAK,CAC5C;EAGJ,IAAI,qBAAqB,SAAS,IAAI,GAClC,OAAO,KAAK,GAAG,SAAS,UACpB,qBAAqB,cAAc,KAAK,CAC5C;EAGJ,IAAI,qBAAqB,UAAU,IAAI,GACnC,OAAO,qBAAqB,cAAc,KAAK,GAAG;EAGtD,OAAO,CAAC;CACZ;AACJ;;;AC3sBA,IAAa,sBAAb,MAAa,oBAAoB;;gBACJ,EAAE,MAAM,CAC7B,EACK,OAAO,EACJ,WAAW,oBACf,CAAC,EACA,OAAO,GACZ,EACK,OAAO;GACJ,SAAS;GACT,gBAAgB,EAAE,KAAK,CAAC,SAAS,MAAM,CAAC;EAC5C,CAAC,EACA,OAAO,CAChB,CAAC;;CAED,OAAO,MAAM,SAAiD;EAC1D,MAAM,SAAS,oBAAoB,OAAO,UAAU,OAAO;EAC3D,IAAI,CAAC,OAAO,SAAS;GACjB,MAAM,UAAU,OAAO,MAAM,OACxB,KAAK,UAAU;IACZ,MAAM,OAAO,MAAM,KAAK,KAAK,GAAG;IAChC,OAAO,KAAK,SAAS,IACf,GAAG,KAAK,IAAI,MAAM,YAClB,MAAM;GAChB,CAAC,EACA,KAAK,IAAI;GAEd,OAAO,OAAO,IAAI,yBAAyB,SAAS;EACxD;EAEA,OAAO,OAAO,GAAG,OAAO,IAAqB;CACjD;AACJ;AAEA,MAAa,oBAAoB,oBAAoB"}
+{"version":3,"file":"gate-v1-payload.schema.js","names":["#initialReporter","#currentReporter","#bridgeToConditionReporter"],"sources":["../src/core/config/silent-policy-reporter.ts","../src/core/config/core-config.ts","../src/core/config/core-config.instance.ts","../src/core/policies/utils/date.ts","../src/core/policies/context/path.ts","../src/core/policies/engines/v1/condition-schema.ts","../src/core/policies/engines/v1/condition-evaluator.ts","../src/core/policies/engines/v1/gate/gate-v1-payload.schema.ts"],"sourcesContent":["import type { PolicyReporter } from \"./policy-reporter.js\";\n\nexport class SilentPolicyReporter implements PolicyReporter {\n    report(_event: Parameters<PolicyReporter[\"report\"]>[0]): void {}\n}\n","import type {\n    ConditionEvaluationOptions,\n    ConditionEvaluatorReporter,\n} from \"../policies/engines/condition-evaluator-reporter.js\";\nimport type { PolicyEvent, PolicyReporter } from \"./policy-reporter.js\";\nimport { SilentPolicyReporter } from \"./silent-policy-reporter.js\";\n\nexport interface CoreObservabilityConfig {\n    readonly reporter?: PolicyReporter;\n}\n\nexport interface CoreConfigOptions {\n    readonly observability?: CoreObservabilityConfig;\n}\n\nfunction reportSafely(\n    policyReporter: PolicyReporter,\n    event: PolicyEvent,\n): void {\n    try {\n        policyReporter.report(event);\n    } catch {\n        // Falhas de telemetria nao podem interromper o fluxo de dominio.\n    }\n}\n\n/**\n * Centraliza a configuracao pura do core sem depender de implementacoes\n * concretas de logging, tracing ou report.\n */\nexport class CoreConfig {\n    readonly #initialReporter: PolicyReporter;\n    #currentReporter: PolicyReporter;\n\n    constructor(options: CoreConfigOptions = {}) {\n        const reporter =\n            options.observability?.reporter ?? new SilentPolicyReporter();\n        this.#initialReporter = reporter;\n        this.#currentReporter = reporter;\n    }\n\n    configure(options: CoreConfigOptions): this {\n        const reporter = options.observability?.reporter;\n        if (reporter) {\n            this.#currentReporter = reporter;\n        }\n        return this;\n    }\n\n    // Restores the reporter captured at construction time.\n    reset(): this {\n        this.#currentReporter = this.#initialReporter;\n        return this;\n    }\n\n    getPolicyReporter(): PolicyReporter {\n        return this.#currentReporter;\n    }\n\n    getConditionEvaluationOptions(\n        engineVersion: number,\n    ): ConditionEvaluationOptions {\n        return {\n            reporter: this.#bridgeToConditionReporter(this.#currentReporter),\n            engineVersion,\n        };\n    }\n\n    #bridgeToConditionReporter(\n        policyReporter: PolicyReporter,\n    ): ConditionEvaluatorReporter {\n        return {\n            warn(report) {\n                reportSafely(policyReporter, {\n                    kind: \"condition-eval\",\n                    ...report,\n                } satisfies PolicyEvent);\n            },\n            error(report) {\n                reportSafely(policyReporter, {\n                    kind: \"condition-eval\",\n                    ...report,\n                } satisfies PolicyEvent);\n            },\n        };\n    }\n}\n","import { CoreConfig } from \"./core-config.js\";\nimport { SilentPolicyReporter } from \"./silent-policy-reporter.js\";\n\n/**\n * Shared instance for the application composition root.\n * Use `new CoreConfig()` for isolated runtimes, tests, or multi-tenant hosts.\n *\n * The default reporter is silent so the core has no runtime logging dependency.\n * Hosts can swap in their own `PolicyReporter` via\n * `coreConfig.configure({ observability: { reporter } })`.\n */\nexport const coreConfig = new CoreConfig({\n    observability: { reporter: new SilentPolicyReporter() },\n});\n","import { isValidDate } from \"../../shared/temporal-guards.js\";\n\nexport class PolicyDateUtils {\n    static isValid(value: Date): boolean {\n        return isValidDate(value);\n    }\n}\n","/**\n * Utilities for reading/writing values at dot-separated paths\n * in plain objects, e.g. \"installment.dueDate\".\n */\n\nimport { Result } from \"../../result/result.js\";\n\nexport class PolicyContextPath {\n    private static readonly FORBIDDEN_SEGMENTS = new Set([\n        \"__proto__\",\n        \"prototype\",\n        \"constructor\",\n    ]);\n\n    private static resolve(\n        obj: Record<string, unknown>,\n        path: string,\n    ): Result<\n        {\n            readonly found: boolean;\n            readonly value: unknown;\n        },\n        string\n    > {\n        const segmentsResult = PolicyContextPath.parseSegments(path);\n        if (segmentsResult.isErr()) {\n            return Result.err(segmentsResult.errorOrNull()!);\n        }\n\n        const segments = segmentsResult.getOrNull()!;\n        let current: unknown = obj;\n\n        for (const segment of segments) {\n            if (\n                current === null ||\n                current === undefined ||\n                typeof current !== \"object\"\n            ) {\n                return Result.ok({ found: false, value: undefined });\n            }\n\n            const record = current as Record<string, unknown>;\n            if (!Object.prototype.hasOwnProperty.call(record, segment)) {\n                return Result.ok({ found: false, value: undefined });\n            }\n\n            current = record[segment];\n        }\n\n        return Result.ok({ found: true, value: current });\n    }\n\n    private static parseSegments(\n        path: string,\n    ): Result<readonly string[], string> {\n        if (path.trim().length === 0) {\n            return Result.err(\"Path cannot be empty\");\n        }\n\n        const segments = path.split(\".\");\n        if (segments.some((segment) => segment.length === 0)) {\n            return Result.err(`Path \"${path}\" contains an empty segment`);\n        }\n\n        const forbiddenSegment = segments.find((segment) =>\n            PolicyContextPath.FORBIDDEN_SEGMENTS.has(segment),\n        );\n        if (forbiddenSegment !== undefined) {\n            return Result.err(\n                `Path \"${path}\" contains forbidden segment \"${forbiddenSegment}\"`,\n            );\n        }\n\n        return Result.ok(segments);\n    }\n\n    private static isPlainRecord(\n        value: unknown,\n    ): value is Record<string, unknown> {\n        if (\n            typeof value !== \"object\" ||\n            value === null ||\n            Array.isArray(value)\n        ) {\n            return false;\n        }\n\n        const prototype = Object.getPrototypeOf(value);\n        return prototype === Object.prototype || prototype === null;\n    }\n\n    static getOrAbsent(\n        obj: Record<string, unknown>,\n        path: string,\n    ): Result<unknown, \"absent\"> {\n        const resolvedPath = PolicyContextPath.resolve(obj, path);\n        if (resolvedPath.isErr()) {\n            return Result.err(\"absent\");\n        }\n\n        const { found, value } = resolvedPath.getOrNull()!;\n        if (!found) {\n            return Result.err(\"absent\");\n        }\n\n        return Result.ok(value);\n    }\n\n    static has(obj: Record<string, unknown>, path: string): boolean {\n        const resolvedPath = PolicyContextPath.resolve(obj, path);\n        if (resolvedPath.isErr()) {\n            return false;\n        }\n\n        return resolvedPath.getOrNull()!.found;\n    }\n\n    static set(\n        obj: Record<string, unknown>,\n        path: string,\n        value: unknown,\n    ): Result<void, string> {\n        const segmentsResult = PolicyContextPath.parseSegments(path);\n        if (segmentsResult.isErr()) {\n            return Result.err(segmentsResult.errorOrNull()!);\n        }\n\n        const segments = segmentsResult.getOrNull()!;\n        let current: Record<string, unknown> = obj;\n\n        for (let i = 0; i < segments.length - 1; i++) {\n            const seg = segments[i];\n            const next = current[seg];\n\n            if (next === undefined) {\n                const container = Object.create(null) as Record<\n                    string,\n                    unknown\n                >;\n                current[seg] = container;\n                current = container;\n                continue;\n            }\n\n            if (!PolicyContextPath.isPlainRecord(next)) {\n                return Result.err(\n                    `Cannot create nested path \"${path}\" because \"${segments\n                        .slice(0, i + 1)\n                        .join(\".\")}\" already contains a non-plain object`,\n                );\n            }\n\n            current = next;\n        }\n\n        current[segments[segments.length - 1]] = value;\n        return Result.ok(undefined);\n    }\n}\n","import { z } from \"zod\";\n\nimport type { ConditionLeafNode, ConditionNode } from \"./condition-types.js\";\n\n// ─── Shared v1 condition Zod schemas ─────────────────────────────────────────\n// Extracted from gate/v1 so both gate/v1 and compute/v1 can validate\n// condition nodes without either engine depending on the other.\n\nconst conditionOpSchema = z.enum([\n    \"eq\",\n    \"neq\",\n    \"gt\",\n    \"gte\",\n    \"lt\",\n    \"lte\",\n    \"in\",\n    \"notIn\",\n    \"isNull\",\n    \"isNotNull\",\n]);\n\nexport const conditionLeafNodeSchema: z.ZodType<ConditionLeafNode> = z\n    .object({\n        field: z.string().min(1),\n        op: conditionOpSchema,\n        value: z.unknown(),\n        allowNull: z.literal(true).optional(),\n    })\n    .strict() as z.ZodType<ConditionLeafNode>;\n\nexport const conditionNodeSchema: z.ZodType<ConditionNode> = z.lazy(() =>\n    z.union([\n        conditionLeafNodeSchema,\n        z\n            .object({\n                and: z.array(conditionNodeSchema).min(1),\n            })\n            .strict(),\n        z\n            .object({\n                or: z.array(conditionNodeSchema).min(1),\n            })\n            .strict(),\n        z\n            .object({\n                not: conditionNodeSchema,\n            })\n            .strict(),\n    ]),\n);\n","import { PolicyContextPath } from \"../../context/index.js\";\nimport { PolicyDateUtils } from \"../../utils/index.js\";\nimport { Result } from \"../../../result/result.js\";\n\nimport type {\n    ConditionAndNode,\n    ConditionLeafNode,\n    ConditionNode,\n    ConditionNotNode,\n    ConditionOp,\n    ConditionOrNode,\n} from \"./condition-types.js\";\nimport type {\n    ConditionEvaluationOptions,\n    ConditionEvaluationReport,\n} from \"../condition-evaluator-reporter.js\";\nimport type { PolicyContext } from \"../gate-types.js\";\n\nconst CONDITION_EVAL_THROWN_TAG = \"CONDITION_EVAL_THREW\";\nconst NULLISH_NUMERIC_OPERAND_NOT_ALLOWED_TAG =\n    \"NULLISH_NUMERIC_OPERAND_NOT_ALLOWED\";\nconst NULLISH_DATE_OPERAND_NOT_ALLOWED_TAG = \"NULLISH_DATE_OPERAND_NOT_ALLOWED\";\nconst INVALID_DATE_OPERAND_TAG = \"INVALID_DATE_OPERAND\";\nconst INVALID_NUMERIC_OPERAND_TAG = \"INVALID_NUMERIC_OPERAND\";\nconst INVALID_SET_OPERAND_TAG = \"INVALID_SET_OPERAND\";\nconst EMPTY_OR_CONDITION_TAG = \"EMPTY_OR_CONDITION\";\nconst EMPTY_AND_CONDITION_TAG = \"EMPTY_AND_CONDITION\";\nconst ISO_8601_UTC_DATE_PATTERN =\n    /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/;\n\nexport interface ConditionEvaluationTrace {\n    readonly conditionPath: string;\n    readonly decisiveNode: ConditionNode;\n    readonly lastEvaluatedLeaf: ConditionLeafNode;\n    readonly lastEvaluatedLeafPath: string;\n    readonly lastEvaluatedLeafResult: boolean;\n}\n\nexport interface TracedConditionEvaluation {\n    readonly matched: boolean;\n    readonly trace: ConditionEvaluationTrace;\n}\n\ntype RelationalOperator = Extract<ConditionOp, \"gt\" | \"gte\" | \"lt\" | \"lte\">;\n\nexport class ConditionEvaluatorV1 {\n    constructor(\n        private readonly context: PolicyContext,\n        private readonly options: ConditionEvaluationOptions,\n    ) {}\n\n    private static isLeafNode(node: ConditionNode): node is ConditionLeafNode {\n        return \"field\" in node && \"op\" in node;\n    }\n\n    private static isAndNode(node: ConditionNode): node is ConditionAndNode {\n        return \"and\" in node;\n    }\n\n    private static isOrNode(node: ConditionNode): node is ConditionOrNode {\n        return \"or\" in node;\n    }\n\n    private static isNotNode(node: ConditionNode): node is ConditionNotNode {\n        return \"not\" in node;\n    }\n\n    private static isRelationalOperator(\n        op: ConditionOp,\n    ): op is RelationalOperator {\n        return op === \"gt\" || op === \"gte\" || op === \"lt\" || op === \"lte\";\n    }\n\n    private static describeError(error: unknown): {\n        name: string;\n        message: string;\n    } {\n        if (error instanceof Error) {\n            return {\n                name: error.name,\n                message: error.message,\n            };\n        }\n\n        return {\n            name: \"NonErrorThrown\",\n            message: String(error),\n        };\n    }\n\n    private static buildNullishNumericOperandMessage(\n        node: ConditionLeafNode,\n        actual: null | undefined,\n    ): string {\n        const resolvedValue = actual === null ? \"null\" : \"undefined\";\n\n        return `${NULLISH_NUMERIC_OPERAND_NOT_ALLOWED_TAG}: \"${node.field}\" resolved to ${resolvedValue} for numeric operator \"${node.op}\"`;\n    }\n\n    private static buildNullishDateOperandMessage(\n        node: ConditionLeafNode,\n        actual: null | undefined,\n    ): string {\n        const resolvedValue = actual === null ? \"null\" : \"undefined\";\n\n        return `${NULLISH_DATE_OPERAND_NOT_ALLOWED_TAG}: \"${node.field}\" resolved to ${resolvedValue} for date comparison operator \"${node.op}\"`;\n    }\n\n    private static buildInvalidDateOperandMessage(\n        node: ConditionLeafNode,\n    ): string {\n        return `${INVALID_DATE_OPERAND_TAG}: \"${node.field}\" with operator \"${node.op}\" requires Date or ISO 8601 UTC string operands`;\n    }\n\n    private static buildInvalidNumericOperandMessage(\n        node: ConditionLeafNode,\n    ): string {\n        return `${INVALID_NUMERIC_OPERAND_TAG}: \"${node.field}\" with operator \"${node.op}\" requires numeric operands`;\n    }\n\n    private static buildInvalidSetOperandMessage(\n        node: ConditionLeafNode,\n    ): string {\n        return `${INVALID_SET_OPERAND_TAG}: \"${node.field}\" with operator \"${node.op}\" requires an array operand`;\n    }\n\n    private static buildEmptyOrConditionMessage(): string {\n        return `${EMPTY_OR_CONDITION_TAG}: OR nodes must contain at least one child condition`;\n    }\n\n    private static buildEmptyAndConditionMessage(): string {\n        return `${EMPTY_AND_CONDITION_TAG}: AND nodes must contain at least one child condition`;\n    }\n\n    private static parseComparableDate(\n        value: unknown,\n    ): Result<Date, string> | null {\n        if (value instanceof Date) {\n            if (!PolicyDateUtils.isValid(value)) {\n                return Result.err(\"Invalid Date instance\");\n            }\n\n            return Result.ok(value);\n        }\n\n        if (\n            typeof value !== \"string\" ||\n            !ISO_8601_UTC_DATE_PATTERN.test(value)\n        ) {\n            return null;\n        }\n\n        const parsed = new Date(value);\n        if (\n            !PolicyDateUtils.isValid(parsed) ||\n            parsed.toISOString() !== value\n        ) {\n            return Result.err(\"Invalid ISO 8601 UTC date string\");\n        }\n\n        return Result.ok(parsed);\n    }\n\n    private static evaluateRelationalNumbers(\n        actual: number,\n        op: RelationalOperator,\n        expected: number,\n    ): boolean {\n        switch (op) {\n            case \"gt\":\n                return actual > expected;\n            case \"gte\":\n                return actual >= expected;\n            case \"lt\":\n                return actual < expected;\n            case \"lte\":\n                return actual <= expected;\n        }\n    }\n\n    private buildReport(params: {\n        readonly level: ConditionEvaluationReport[\"level\"];\n        readonly tag: ConditionEvaluationReport[\"tag\"];\n        readonly message: string;\n        readonly details: Readonly<Record<string, unknown>>;\n    }): ConditionEvaluationReport {\n        return {\n            occurredAt: new Date(),\n            level: params.level,\n            tag: params.tag,\n            message: params.message,\n            engineVersion: this.options.engineVersion,\n            details: params.details,\n        };\n    }\n\n    private conditionEvalErr<TValue>(\n        node: ConditionNode,\n        error: unknown,\n    ): Result<TValue, string> {\n        const cause = ConditionEvaluatorV1.describeError(error);\n        const message = `${CONDITION_EVAL_THROWN_TAG}: ${cause.name}: ${cause.message}`;\n\n        this.options.reporter.error(\n            this.buildReport({\n                level: \"error\",\n                tag: CONDITION_EVAL_THROWN_TAG,\n                message,\n                details: { node, cause },\n            }),\n        );\n\n        return Result.err(message);\n    }\n\n    private reportDateOperandError(\n        node: ConditionLeafNode,\n        actual: unknown,\n    ): Result<boolean, string> {\n        const message =\n            ConditionEvaluatorV1.buildInvalidDateOperandMessage(node);\n\n        this.options.reporter.error(\n            this.buildReport({\n                level: \"error\",\n                tag: INVALID_DATE_OPERAND_TAG,\n                message,\n                details: {\n                    field: node.field,\n                    op: node.op,\n                    actual,\n                    expected: node.value,\n                    node,\n                },\n            }),\n        );\n\n        return Result.err(message);\n    }\n\n    private reportInvalidNumericOperand(\n        node: ConditionLeafNode,\n        actual: unknown,\n    ): Result<boolean, string> {\n        const message =\n            ConditionEvaluatorV1.buildInvalidNumericOperandMessage(node);\n\n        this.options.reporter.error(\n            this.buildReport({\n                level: \"error\",\n                tag: INVALID_NUMERIC_OPERAND_TAG,\n                message,\n                details: {\n                    field: node.field,\n                    op: node.op,\n                    actual,\n                    expected: node.value,\n                    node,\n                },\n            }),\n        );\n\n        return Result.err(message);\n    }\n\n    private reportInvalidSetOperand(\n        node: ConditionLeafNode,\n        actual: unknown,\n    ): Result<boolean, string> {\n        const message =\n            ConditionEvaluatorV1.buildInvalidSetOperandMessage(node);\n\n        this.options.reporter.error(\n            this.buildReport({\n                level: \"error\",\n                tag: INVALID_SET_OPERAND_TAG,\n                message,\n                details: {\n                    field: node.field,\n                    op: node.op,\n                    actual,\n                    expected: node.value,\n                    node,\n                },\n            }),\n        );\n\n        return Result.err(message);\n    }\n\n    private evaluateDateRelationalNode(\n        node: ConditionLeafNode,\n        actual: unknown,\n    ): Result<boolean, string> | null {\n        if (!ConditionEvaluatorV1.isRelationalOperator(node.op)) {\n            return null;\n        }\n\n        const actualDateResult =\n            ConditionEvaluatorV1.parseComparableDate(actual);\n        const expectedDateResult = ConditionEvaluatorV1.parseComparableDate(\n            node.value,\n        );\n\n        if (actualDateResult === null && expectedDateResult === null) {\n            return null;\n        }\n\n        const allowsNull = node.allowNull === true;\n\n        if (actual === null) {\n            if (allowsNull) {\n                return Result.ok(false);\n            }\n\n            const message = ConditionEvaluatorV1.buildNullishDateOperandMessage(\n                node,\n                actual,\n            );\n            this.options.reporter.error(\n                this.buildReport({\n                    level: \"error\",\n                    tag: NULLISH_DATE_OPERAND_NOT_ALLOWED_TAG,\n                    message,\n                    details: {\n                        field: node.field,\n                        op: node.op,\n                        actual,\n                        expected: node.value,\n                        allowNull: allowsNull,\n                        node,\n                    },\n                }),\n            );\n\n            return Result.err(message);\n        }\n\n        if (actual === undefined) {\n            const message = ConditionEvaluatorV1.buildNullishDateOperandMessage(\n                node,\n                actual,\n            );\n            this.options.reporter.error(\n                this.buildReport({\n                    level: \"error\",\n                    tag: NULLISH_DATE_OPERAND_NOT_ALLOWED_TAG,\n                    message,\n                    details: {\n                        field: node.field,\n                        op: node.op,\n                        actual,\n                        expected: node.value,\n                        allowNull: allowsNull,\n                        node,\n                    },\n                }),\n            );\n\n            return Result.err(message);\n        }\n\n        if (\n            actualDateResult === null ||\n            actualDateResult.isErr() ||\n            expectedDateResult === null ||\n            expectedDateResult.isErr()\n        ) {\n            return this.reportDateOperandError(node, actual);\n        }\n\n        return Result.ok(\n            ConditionEvaluatorV1.evaluateRelationalNumbers(\n                actualDateResult.getOrNull()!.getTime(),\n                node.op,\n                expectedDateResult.getOrNull()!.getTime(),\n            ),\n        );\n    }\n\n    private evaluateOperator(\n        actual: unknown,\n        op: ConditionOp,\n        expected: unknown,\n    ): boolean {\n        switch (op) {\n            case \"eq\":\n                return actual === expected;\n            case \"neq\":\n                return actual !== expected;\n            case \"gt\":\n                return (\n                    typeof actual === \"number\" &&\n                    typeof expected === \"number\" &&\n                    ConditionEvaluatorV1.evaluateRelationalNumbers(\n                        actual,\n                        op,\n                        expected,\n                    )\n                );\n            case \"gte\":\n                return (\n                    typeof actual === \"number\" &&\n                    typeof expected === \"number\" &&\n                    ConditionEvaluatorV1.evaluateRelationalNumbers(\n                        actual,\n                        op,\n                        expected,\n                    )\n                );\n            case \"lt\":\n                return (\n                    typeof actual === \"number\" &&\n                    typeof expected === \"number\" &&\n                    ConditionEvaluatorV1.evaluateRelationalNumbers(\n                        actual,\n                        op,\n                        expected,\n                    )\n                );\n            case \"lte\":\n                return (\n                    typeof actual === \"number\" &&\n                    typeof expected === \"number\" &&\n                    ConditionEvaluatorV1.evaluateRelationalNumbers(\n                        actual,\n                        op,\n                        expected,\n                    )\n                );\n            case \"in\":\n                return Array.isArray(expected) && expected.includes(actual);\n            case \"notIn\":\n                return Array.isArray(expected) && !expected.includes(actual);\n            case \"isNull\":\n                return actual === null;\n            case \"isNotNull\":\n                return actual !== null && actual !== undefined;\n        }\n    }\n\n    private evaluateNumericRelationalNode(\n        node: ConditionLeafNode,\n        actual: unknown,\n    ): Result<boolean, string> {\n        const allowsNull = node.allowNull === true;\n        if (actual === undefined || (actual === null && !allowsNull)) {\n            const message =\n                ConditionEvaluatorV1.buildNullishNumericOperandMessage(\n                    node,\n                    actual as null | undefined,\n                );\n\n            this.options.reporter.error(\n                this.buildReport({\n                    level: \"error\",\n                    tag: NULLISH_NUMERIC_OPERAND_NOT_ALLOWED_TAG,\n                    message,\n                    details: {\n                        field: node.field,\n                        op: node.op,\n                        actual,\n                        expected: node.value,\n                        allowNull: allowsNull,\n                        node,\n                    },\n                }),\n            );\n\n            return Result.err(message);\n        }\n\n        // null + allowNull: a relational comparison against a missing value\n        // never matches.\n        if (actual === null) {\n            return Result.ok(false);\n        }\n\n        // Both operands must be numbers. A present but wrong-typed operand is a\n        // context/configuration error, surfaced like the date path instead of\n        // silently collapsing to \"no match\".\n        if (typeof actual !== \"number\" || typeof node.value !== \"number\") {\n            return this.reportInvalidNumericOperand(node, actual);\n        }\n\n        return Result.ok(this.evaluateOperator(actual, node.op, node.value));\n    }\n\n    private evaluateLeafNode(node: ConditionLeafNode): Result<boolean, string> {\n        const actualResult = PolicyContextPath.getOrAbsent(\n            this.context,\n            node.field,\n        );\n        if (actualResult.isErr()) {\n            this.options.reporter.warn(\n                this.buildReport({\n                    level: \"warn\",\n                    tag: \"MISSING_CONTEXT_FIELD\",\n                    message: `MISSING_CONTEXT_FIELD: \"${node.field}\" not found in context`,\n                    details: { field: node.field, node },\n                }),\n            );\n\n            return Result.err(\n                `MISSING_CONTEXT_FIELD: \"${node.field}\" not found in context`,\n            );\n        }\n\n        try {\n            const actual = actualResult.getOrThrow();\n            if (ConditionEvaluatorV1.isRelationalOperator(node.op)) {\n                const dateResult = this.evaluateDateRelationalNode(\n                    node,\n                    actual,\n                );\n                if (dateResult !== null) {\n                    return dateResult;\n                }\n\n                return this.evaluateNumericRelationalNode(node, actual);\n            }\n\n            if (\n                (node.op === \"in\" || node.op === \"notIn\") &&\n                !Array.isArray(node.value)\n            ) {\n                return this.reportInvalidSetOperand(node, actual);\n            }\n\n            return Result.ok(\n                this.evaluateOperator(actual, node.op, node.value),\n            );\n        } catch (error) {\n            return this.conditionEvalErr(node, error);\n        }\n    }\n\n    private buildTrace(params: {\n        readonly conditionPath: string;\n        readonly decisiveNode: ConditionNode;\n        readonly lastEvaluatedLeaf: ConditionLeafNode;\n        readonly lastEvaluatedLeafPath: string;\n        readonly lastEvaluatedLeafResult: boolean;\n    }): ConditionEvaluationTrace {\n        return {\n            conditionPath: params.conditionPath,\n            decisiveNode: params.decisiveNode,\n            lastEvaluatedLeaf: params.lastEvaluatedLeaf,\n            lastEvaluatedLeafPath: params.lastEvaluatedLeafPath,\n            lastEvaluatedLeafResult: params.lastEvaluatedLeafResult,\n        };\n    }\n\n    private evaluateWithTraceInternal(\n        node: ConditionNode,\n        path: string,\n    ): Result<TracedConditionEvaluation, string> {\n        if (ConditionEvaluatorV1.isLeafNode(node)) {\n            const leafResult = this.evaluateLeafNode(node);\n            if (leafResult.isErr()) {\n                return Result.err(leafResult.errorOrNull()!);\n            }\n\n            const matched = leafResult.getOrNull()!;\n            return Result.ok({\n                matched,\n                trace: this.buildTrace({\n                    conditionPath: path,\n                    decisiveNode: node,\n                    lastEvaluatedLeaf: node,\n                    lastEvaluatedLeafPath: path,\n                    lastEvaluatedLeafResult: matched,\n                }),\n            });\n        }\n\n        if (ConditionEvaluatorV1.isAndNode(node)) {\n            if (node.and.length === 0) {\n                return Result.err(\n                    ConditionEvaluatorV1.buildEmptyAndConditionMessage(),\n                );\n            }\n\n            let lastTracedChild: TracedConditionEvaluation | null = null;\n\n            for (const [index, child] of node.and.entries()) {\n                const childPath = `${path}.and[${index}]`;\n                const childResult = this.evaluateWithTraceInternal(\n                    child,\n                    childPath,\n                );\n                if (childResult.isErr()) {\n                    return Result.err(childResult.errorOrNull()!);\n                }\n\n                const tracedChild = childResult.getOrNull()!;\n                lastTracedChild = tracedChild;\n                if (!tracedChild.matched) {\n                    return Result.ok({\n                        matched: false,\n                        trace: this.buildTrace({\n                            conditionPath: childPath,\n                            decisiveNode: child,\n                            lastEvaluatedLeaf:\n                                tracedChild.trace.lastEvaluatedLeaf,\n                            lastEvaluatedLeafPath:\n                                tracedChild.trace.lastEvaluatedLeafPath,\n                            lastEvaluatedLeafResult:\n                                tracedChild.trace.lastEvaluatedLeafResult,\n                        }),\n                    });\n                }\n            }\n\n            return Result.ok({\n                matched: true,\n                trace: lastTracedChild!.trace,\n            });\n        }\n\n        if (ConditionEvaluatorV1.isOrNode(node)) {\n            let lastTrace: ConditionEvaluationTrace | null = null;\n\n            for (const [index, child] of node.or.entries()) {\n                const childResult = this.evaluateWithTraceInternal(\n                    child,\n                    `${path}.or[${index}]`,\n                );\n                if (childResult.isErr()) {\n                    return Result.err(childResult.errorOrNull()!);\n                }\n\n                const tracedChild = childResult.getOrNull()!;\n                lastTrace = tracedChild.trace;\n                if (tracedChild.matched) {\n                    return Result.ok({\n                        matched: true,\n                        trace: tracedChild.trace,\n                    });\n                }\n            }\n\n            if (lastTrace === null) {\n                return Result.err(\n                    ConditionEvaluatorV1.buildEmptyOrConditionMessage(),\n                );\n            }\n\n            return Result.ok({ matched: false, trace: lastTrace! });\n        }\n\n        if (ConditionEvaluatorV1.isNotNode(node)) {\n            const childPath = `${path}.not`;\n            const childResult = this.evaluateWithTraceInternal(\n                node.not,\n                childPath,\n            );\n            if (childResult.isErr()) {\n                return Result.err(childResult.errorOrNull()!);\n            }\n\n            const tracedChild = childResult.getOrNull()!;\n            return Result.ok({\n                matched: !tracedChild.matched,\n                trace: this.buildTrace({\n                    conditionPath: path,\n                    decisiveNode: node,\n                    lastEvaluatedLeaf: tracedChild.trace.lastEvaluatedLeaf,\n                    lastEvaluatedLeafPath:\n                        tracedChild.trace.lastEvaluatedLeafPath,\n                    lastEvaluatedLeafResult:\n                        tracedChild.trace.lastEvaluatedLeafResult,\n                }),\n            });\n        }\n\n        return this.conditionEvalErr(\n            node,\n            new TypeError(\"Invalid condition node shape\"),\n        );\n    }\n\n    evaluate(node: ConditionNode): Result<boolean, string> {\n        try {\n            const result = this.evaluateWithTraceInternal(node, \"$\");\n            if (result.isErr()) {\n                return Result.err(result.errorOrNull()!);\n            }\n\n            return Result.ok(result.getOrNull()!.matched);\n        } catch (error) {\n            return this.conditionEvalErr(node, error);\n        }\n    }\n\n    evaluateWithTrace(\n        node: ConditionNode,\n    ): Result<TracedConditionEvaluation, string> {\n        try {\n            return this.evaluateWithTraceInternal(node, \"$\");\n        } catch (error) {\n            return this.conditionEvalErr(node, error);\n        }\n    }\n\n    static extractFields(node: ConditionNode): string[] {\n        if (ConditionEvaluatorV1.isLeafNode(node)) {\n            return [node.field];\n        }\n\n        if (ConditionEvaluatorV1.isAndNode(node)) {\n            return node.and.flatMap((child) =>\n                ConditionEvaluatorV1.extractFields(child),\n            );\n        }\n\n        if (ConditionEvaluatorV1.isOrNode(node)) {\n            return node.or.flatMap((child) =>\n                ConditionEvaluatorV1.extractFields(child),\n            );\n        }\n\n        if (ConditionEvaluatorV1.isNotNode(node)) {\n            return ConditionEvaluatorV1.extractFields(node.not);\n        }\n\n        return [];\n    }\n}\n","import { z } from \"zod\";\n\nimport { Result } from \"../../../../result/result.js\";\n\nimport type { GatePayloadV1 } from \"./gate-types-v1.js\";\nimport {\n    conditionLeafNodeSchema,\n    conditionNodeSchema,\n} from \"../condition-schema.js\";\n\n// Re-export so gate/v1 public API remains unchanged.\nexport { conditionLeafNodeSchema, conditionNodeSchema };\n\nexport class GatePayloadSchemaV1 {\n    static readonly schema = z.union([\n        z\n            .object({\n                condition: conditionNodeSchema,\n            })\n            .strict(),\n        z\n            .object({\n                allowIf: conditionNodeSchema,\n                defaultOutcome: z.enum([\"ALLOW\", \"DENY\"]),\n            })\n            .strict(),\n    ]);\n\n    static parse(payload: unknown): Result<GatePayloadV1, string> {\n        const parsed = GatePayloadSchemaV1.schema.safeParse(payload);\n        if (!parsed.success) {\n            const details = parsed.error.issues\n                .map((issue) => {\n                    const path = issue.path.join(\".\");\n                    return path.length > 0\n                        ? `${path}: ${issue.message}`\n                        : issue.message;\n                })\n                .join(\"; \");\n\n            return Result.err(`Invalid gate payload: ${details}`);\n        }\n\n        return Result.ok(parsed.data as GatePayloadV1);\n    }\n}\n\nexport const gatePayloadSchema = GatePayloadSchemaV1.schema;\n"],"mappings":";;;;AAEA,IAAa,uBAAb,MAA4D;CACxD,OAAO,QAAuD,CAAC;AACnE;;;ACWA,SAAS,aACL,gBACA,OACI;CACJ,IAAI;EACA,eAAe,OAAO,KAAK;CAC/B,QAAQ,CAER;AACJ;;;;;AAMA,IAAa,aAAb,MAAwB;CACpB;CACA;CAEA,YAAY,UAA6B,CAAC,GAAG;EACzC,MAAM,WACF,QAAQ,eAAe,YAAY,IAAI,qBAAqB;EAChE,KAAKA,mBAAmB;EACxB,KAAKC,mBAAmB;CAC5B;CAEA,UAAU,SAAkC;EACxC,MAAM,WAAW,QAAQ,eAAe;EACxC,IAAI,UACA,KAAKA,mBAAmB;EAE5B,OAAO;CACX;CAGA,QAAc;EACV,KAAKA,mBAAmB,KAAKD;EAC7B,OAAO;CACX;CAEA,oBAAoC;EAChC,OAAO,KAAKC;CAChB;CAEA,8BACI,eAC0B;EAC1B,OAAO;GACH,UAAU,KAAKC,2BAA2B,KAAKD,gBAAgB;GAC/D;EACJ;CACJ;CAEA,2BACI,gBAC0B;EAC1B,OAAO;GACH,KAAK,QAAQ;IACT,aAAa,gBAAgB;KACzB,MAAM;KACN,GAAG;IACP,CAAuB;GAC3B;GACA,MAAM,QAAQ;IACV,aAAa,gBAAgB;KACzB,MAAM;KACN,GAAG;IACP,CAAuB;GAC3B;EACJ;CACJ;AACJ;;;;;;;;;;;AC3EA,MAAa,aAAa,IAAI,WAAW,EACrC,eAAe,EAAE,UAAU,IAAI,qBAAqB,EAAE,EAC1D,CAAC;;;ACXD,IAAa,kBAAb,MAA6B;CACzB,OAAO,QAAQ,OAAsB;EACjC,OAAO,YAAY,KAAK;CAC5B;AACJ;;;;;;;ACCA,IAAa,oBAAb,MAAa,kBAAkB;;4BACkB,IAAI,IAAI;GACjD;GACA;GACA;EACJ,CAAC;;CAED,OAAe,QACX,KACA,MAOF;EACE,MAAM,iBAAiB,kBAAkB,cAAc,IAAI;EAC3D,IAAI,eAAe,MAAM,GACrB,OAAO,OAAO,IAAI,eAAe,YAAY,CAAE;EAGnD,MAAM,WAAW,eAAe,UAAU;EAC1C,IAAI,UAAmB;EAEvB,KAAK,MAAM,WAAW,UAAU;GAC5B,IACI,YAAY,QACZ,YAAY,KAAA,KACZ,OAAO,YAAY,UAEnB,OAAO,OAAO,GAAG;IAAE,OAAO;IAAO,OAAO,KAAA;GAAU,CAAC;GAGvD,MAAM,SAAS;GACf,IAAI,CAAC,OAAO,UAAU,eAAe,KAAK,QAAQ,OAAO,GACrD,OAAO,OAAO,GAAG;IAAE,OAAO;IAAO,OAAO,KAAA;GAAU,CAAC;GAGvD,UAAU,OAAO;EACrB;EAEA,OAAO,OAAO,GAAG;GAAE,OAAO;GAAM,OAAO;EAAQ,CAAC;CACpD;CAEA,OAAe,cACX,MACiC;EACjC,IAAI,KAAK,KAAK,EAAE,WAAW,GACvB,OAAO,OAAO,IAAI,sBAAsB;EAG5C,MAAM,WAAW,KAAK,MAAM,GAAG;EAC/B,IAAI,SAAS,MAAM,YAAY,QAAQ,WAAW,CAAC,GAC/C,OAAO,OAAO,IAAI,SAAS,KAAK,4BAA4B;EAGhE,MAAM,mBAAmB,SAAS,MAAM,YACpC,kBAAkB,mBAAmB,IAAI,OAAO,CACpD;EACA,IAAI,qBAAqB,KAAA,GACrB,OAAO,OAAO,IACV,SAAS,KAAK,gCAAgC,iBAAiB,EACnE;EAGJ,OAAO,OAAO,GAAG,QAAQ;CAC7B;CAEA,OAAe,cACX,OACgC;EAChC,IACI,OAAO,UAAU,YACjB,UAAU,QACV,MAAM,QAAQ,KAAK,GAEnB,OAAO;EAGX,MAAM,YAAY,OAAO,eAAe,KAAK;EAC7C,OAAO,cAAc,OAAO,aAAa,cAAc;CAC3D;CAEA,OAAO,YACH,KACA,MACyB;EACzB,MAAM,eAAe,kBAAkB,QAAQ,KAAK,IAAI;EACxD,IAAI,aAAa,MAAM,GACnB,OAAO,OAAO,IAAI,QAAQ;EAG9B,MAAM,EAAE,OAAO,UAAU,aAAa,UAAU;EAChD,IAAI,CAAC,OACD,OAAO,OAAO,IAAI,QAAQ;EAG9B,OAAO,OAAO,GAAG,KAAK;CAC1B;CAEA,OAAO,IAAI,KAA8B,MAAuB;EAC5D,MAAM,eAAe,kBAAkB,QAAQ,KAAK,IAAI;EACxD,IAAI,aAAa,MAAM,GACnB,OAAO;EAGX,OAAO,aAAa,UAAU,EAAG;CACrC;CAEA,OAAO,IACH,KACA,MACA,OACoB;EACpB,MAAM,iBAAiB,kBAAkB,cAAc,IAAI;EAC3D,IAAI,eAAe,MAAM,GACrB,OAAO,OAAO,IAAI,eAAe,YAAY,CAAE;EAGnD,MAAM,WAAW,eAAe,UAAU;EAC1C,IAAI,UAAmC;EAEvC,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,SAAS,GAAG,KAAK;GAC1C,MAAM,MAAM,SAAS;GACrB,MAAM,OAAO,QAAQ;GAErB,IAAI,SAAS,KAAA,GAAW;IACpB,MAAM,YAAY,OAAO,OAAO,IAAI;IAIpC,QAAQ,OAAO;IACf,UAAU;IACV;GACJ;GAEA,IAAI,CAAC,kBAAkB,cAAc,IAAI,GACrC,OAAO,OAAO,IACV,8BAA8B,KAAK,aAAa,SAC3C,MAAM,GAAG,IAAI,CAAC,EACd,KAAK,GAAG,EAAE,sCACnB;GAGJ,UAAU;EACd;EAEA,QAAQ,SAAS,SAAS,SAAS,MAAM;EACzC,OAAO,OAAO,GAAG,KAAA,CAAS;CAC9B;AACJ;;;ACtJA,MAAM,oBAAoB,EAAE,KAAK;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACJ,CAAC;AAED,MAAa,0BAAwD,EAChE,OAAO;CACJ,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;CACvB,IAAI;CACJ,OAAO,EAAE,QAAQ;CACjB,WAAW,EAAE,QAAQ,IAAI,EAAE,SAAS;AACxC,CAAC,EACA,OAAO;AAEZ,MAAa,sBAAgD,EAAE,WAC3D,EAAE,MAAM;CACJ;CACA,EACK,OAAO,EACJ,KAAK,EAAE,MAAM,mBAAmB,EAAE,IAAI,CAAC,EAC3C,CAAC,EACA,OAAO;CACZ,EACK,OAAO,EACJ,IAAI,EAAE,MAAM,mBAAmB,EAAE,IAAI,CAAC,EAC1C,CAAC,EACA,OAAO;CACZ,EACK,OAAO,EACJ,KAAK,oBACT,CAAC,EACA,OAAO;AAChB,CAAC,CACL;;;AC/BA,MAAM,4BAA4B;AAClC,MAAM,0CACF;AACJ,MAAM,uCAAuC;AAC7C,MAAM,2BAA2B;AACjC,MAAM,8BAA8B;AACpC,MAAM,0BAA0B;AAChC,MAAM,yBAAyB;AAC/B,MAAM,0BAA0B;AAChC,MAAM,4BACF;AAiBJ,IAAa,uBAAb,MAAa,qBAAqB;CAC9B,YACI,SACA,SACF;EAFmB,KAAA,UAAA;EACA,KAAA,UAAA;CAClB;CAEH,OAAe,WAAW,MAAgD;EACtE,OAAO,WAAW,QAAQ,QAAQ;CACtC;CAEA,OAAe,UAAU,MAA+C;EACpE,OAAO,SAAS;CACpB;CAEA,OAAe,SAAS,MAA8C;EAClE,OAAO,QAAQ;CACnB;CAEA,OAAe,UAAU,MAA+C;EACpE,OAAO,SAAS;CACpB;CAEA,OAAe,qBACX,IACwB;EACxB,OAAO,OAAO,QAAQ,OAAO,SAAS,OAAO,QAAQ,OAAO;CAChE;CAEA,OAAe,cAAc,OAG3B;EACE,IAAI,iBAAiB,OACjB,OAAO;GACH,MAAM,MAAM;GACZ,SAAS,MAAM;EACnB;EAGJ,OAAO;GACH,MAAM;GACN,SAAS,OAAO,KAAK;EACzB;CACJ;CAEA,OAAe,kCACX,MACA,QACM;EACN,MAAM,gBAAgB,WAAW,OAAO,SAAS;EAEjD,OAAO,GAAG,wCAAwC,KAAK,KAAK,MAAM,gBAAgB,cAAc,yBAAyB,KAAK,GAAG;CACrI;CAEA,OAAe,+BACX,MACA,QACM;EACN,MAAM,gBAAgB,WAAW,OAAO,SAAS;EAEjD,OAAO,GAAG,qCAAqC,KAAK,KAAK,MAAM,gBAAgB,cAAc,iCAAiC,KAAK,GAAG;CAC1I;CAEA,OAAe,+BACX,MACM;EACN,OAAO,GAAG,yBAAyB,KAAK,KAAK,MAAM,mBAAmB,KAAK,GAAG;CAClF;CAEA,OAAe,kCACX,MACM;EACN,OAAO,GAAG,4BAA4B,KAAK,KAAK,MAAM,mBAAmB,KAAK,GAAG;CACrF;CAEA,OAAe,8BACX,MACM;EACN,OAAO,GAAG,wBAAwB,KAAK,KAAK,MAAM,mBAAmB,KAAK,GAAG;CACjF;CAEA,OAAe,+BAAuC;EAClD,OAAO,GAAG,uBAAuB;CACrC;CAEA,OAAe,gCAAwC;EACnD,OAAO,GAAG,wBAAwB;CACtC;CAEA,OAAe,oBACX,OAC2B;EAC3B,IAAI,iBAAiB,MAAM;GACvB,IAAI,CAAC,gBAAgB,QAAQ,KAAK,GAC9B,OAAO,OAAO,IAAI,uBAAuB;GAG7C,OAAO,OAAO,GAAG,KAAK;EAC1B;EAEA,IACI,OAAO,UAAU,YACjB,CAAC,0BAA0B,KAAK,KAAK,GAErC,OAAO;EAGX,MAAM,SAAS,IAAI,KAAK,KAAK;EAC7B,IACI,CAAC,gBAAgB,QAAQ,MAAM,KAC/B,OAAO,YAAY,MAAM,OAEzB,OAAO,OAAO,IAAI,kCAAkC;EAGxD,OAAO,OAAO,GAAG,MAAM;CAC3B;CAEA,OAAe,0BACX,QACA,IACA,UACO;EACP,QAAQ,IAAR;GACI,KAAK,MACD,OAAO,SAAS;GACpB,KAAK,OACD,OAAO,UAAU;GACrB,KAAK,MACD,OAAO,SAAS;GACpB,KAAK,OACD,OAAO,UAAU;EACzB;CACJ;CAEA,YAAoB,QAKU;EAC1B,OAAO;GACH,4BAAY,IAAI,KAAK;GACrB,OAAO,OAAO;GACd,KAAK,OAAO;GACZ,SAAS,OAAO;GAChB,eAAe,KAAK,QAAQ;GAC5B,SAAS,OAAO;EACpB;CACJ;CAEA,iBACI,MACA,OACsB;EACtB,MAAM,QAAQ,qBAAqB,cAAc,KAAK;EACtD,MAAM,UAAU,GAAG,0BAA0B,IAAI,MAAM,KAAK,IAAI,MAAM;EAEtE,KAAK,QAAQ,SAAS,MAClB,KAAK,YAAY;GACb,OAAO;GACP,KAAK;GACL;GACA,SAAS;IAAE;IAAM;GAAM;EAC3B,CAAC,CACL;EAEA,OAAO,OAAO,IAAI,OAAO;CAC7B;CAEA,uBACI,MACA,QACuB;EACvB,MAAM,UACF,qBAAqB,+BAA+B,IAAI;EAE5D,KAAK,QAAQ,SAAS,MAClB,KAAK,YAAY;GACb,OAAO;GACP,KAAK;GACL;GACA,SAAS;IACL,OAAO,KAAK;IACZ,IAAI,KAAK;IACT;IACA,UAAU,KAAK;IACf;GACJ;EACJ,CAAC,CACL;EAEA,OAAO,OAAO,IAAI,OAAO;CAC7B;CAEA,4BACI,MACA,QACuB;EACvB,MAAM,UACF,qBAAqB,kCAAkC,IAAI;EAE/D,KAAK,QAAQ,SAAS,MAClB,KAAK,YAAY;GACb,OAAO;GACP,KAAK;GACL;GACA,SAAS;IACL,OAAO,KAAK;IACZ,IAAI,KAAK;IACT;IACA,UAAU,KAAK;IACf;GACJ;EACJ,CAAC,CACL;EAEA,OAAO,OAAO,IAAI,OAAO;CAC7B;CAEA,wBACI,MACA,QACuB;EACvB,MAAM,UACF,qBAAqB,8BAA8B,IAAI;EAE3D,KAAK,QAAQ,SAAS,MAClB,KAAK,YAAY;GACb,OAAO;GACP,KAAK;GACL;GACA,SAAS;IACL,OAAO,KAAK;IACZ,IAAI,KAAK;IACT;IACA,UAAU,KAAK;IACf;GACJ;EACJ,CAAC,CACL;EAEA,OAAO,OAAO,IAAI,OAAO;CAC7B;CAEA,2BACI,MACA,QAC8B;EAC9B,IAAI,CAAC,qBAAqB,qBAAqB,KAAK,EAAE,GAClD,OAAO;EAGX,MAAM,mBACF,qBAAqB,oBAAoB,MAAM;EACnD,MAAM,qBAAqB,qBAAqB,oBAC5C,KAAK,KACT;EAEA,IAAI,qBAAqB,QAAQ,uBAAuB,MACpD,OAAO;EAGX,MAAM,aAAa,KAAK,cAAc;EAEtC,IAAI,WAAW,MAAM;GACjB,IAAI,YACA,OAAO,OAAO,GAAG,KAAK;GAG1B,MAAM,UAAU,qBAAqB,+BACjC,MACA,MACJ;GACA,KAAK,QAAQ,SAAS,MAClB,KAAK,YAAY;IACb,OAAO;IACP,KAAK;IACL;IACA,SAAS;KACL,OAAO,KAAK;KACZ,IAAI,KAAK;KACT;KACA,UAAU,KAAK;KACf,WAAW;KACX;IACJ;GACJ,CAAC,CACL;GAEA,OAAO,OAAO,IAAI,OAAO;EAC7B;EAEA,IAAI,WAAW,KAAA,GAAW;GACtB,MAAM,UAAU,qBAAqB,+BACjC,MACA,MACJ;GACA,KAAK,QAAQ,SAAS,MAClB,KAAK,YAAY;IACb,OAAO;IACP,KAAK;IACL;IACA,SAAS;KACL,OAAO,KAAK;KACZ,IAAI,KAAK;KACT;KACA,UAAU,KAAK;KACf,WAAW;KACX;IACJ;GACJ,CAAC,CACL;GAEA,OAAO,OAAO,IAAI,OAAO;EAC7B;EAEA,IACI,qBAAqB,QACrB,iBAAiB,MAAM,KACvB,uBAAuB,QACvB,mBAAmB,MAAM,GAEzB,OAAO,KAAK,uBAAuB,MAAM,MAAM;EAGnD,OAAO,OAAO,GACV,qBAAqB,0BACjB,iBAAiB,UAAU,EAAG,QAAQ,GACtC,KAAK,IACL,mBAAmB,UAAU,EAAG,QAAQ,CAC5C,CACJ;CACJ;CAEA,iBACI,QACA,IACA,UACO;EACP,QAAQ,IAAR;GACI,KAAK,MACD,OAAO,WAAW;GACtB,KAAK,OACD,OAAO,WAAW;GACtB,KAAK,MACD,OACI,OAAO,WAAW,YAClB,OAAO,aAAa,YACpB,qBAAqB,0BACjB,QACA,IACA,QACJ;GAER,KAAK,OACD,OACI,OAAO,WAAW,YAClB,OAAO,aAAa,YACpB,qBAAqB,0BACjB,QACA,IACA,QACJ;GAER,KAAK,MACD,OACI,OAAO,WAAW,YAClB,OAAO,aAAa,YACpB,qBAAqB,0BACjB,QACA,IACA,QACJ;GAER,KAAK,OACD,OACI,OAAO,WAAW,YAClB,OAAO,aAAa,YACpB,qBAAqB,0BACjB,QACA,IACA,QACJ;GAER,KAAK,MACD,OAAO,MAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS,MAAM;GAC9D,KAAK,SACD,OAAO,MAAM,QAAQ,QAAQ,KAAK,CAAC,SAAS,SAAS,MAAM;GAC/D,KAAK,UACD,OAAO,WAAW;GACtB,KAAK,aACD,OAAO,WAAW,QAAQ,WAAW,KAAA;EAC7C;CACJ;CAEA,8BACI,MACA,QACuB;EACvB,MAAM,aAAa,KAAK,cAAc;EACtC,IAAI,WAAW,KAAA,KAAc,WAAW,QAAQ,CAAC,YAAa;GAC1D,MAAM,UACF,qBAAqB,kCACjB,MACA,MACJ;GAEJ,KAAK,QAAQ,SAAS,MAClB,KAAK,YAAY;IACb,OAAO;IACP,KAAK;IACL;IACA,SAAS;KACL,OAAO,KAAK;KACZ,IAAI,KAAK;KACT;KACA,UAAU,KAAK;KACf,WAAW;KACX;IACJ;GACJ,CAAC,CACL;GAEA,OAAO,OAAO,IAAI,OAAO;EAC7B;EAIA,IAAI,WAAW,MACX,OAAO,OAAO,GAAG,KAAK;EAM1B,IAAI,OAAO,WAAW,YAAY,OAAO,KAAK,UAAU,UACpD,OAAO,KAAK,4BAA4B,MAAM,MAAM;EAGxD,OAAO,OAAO,GAAG,KAAK,iBAAiB,QAAQ,KAAK,IAAI,KAAK,KAAK,CAAC;CACvE;CAEA,iBAAyB,MAAkD;EACvE,MAAM,eAAe,kBAAkB,YACnC,KAAK,SACL,KAAK,KACT;EACA,IAAI,aAAa,MAAM,GAAG;GACtB,KAAK,QAAQ,SAAS,KAClB,KAAK,YAAY;IACb,OAAO;IACP,KAAK;IACL,SAAS,2BAA2B,KAAK,MAAM;IAC/C,SAAS;KAAE,OAAO,KAAK;KAAO;IAAK;GACvC,CAAC,CACL;GAEA,OAAO,OAAO,IACV,2BAA2B,KAAK,MAAM,uBAC1C;EACJ;EAEA,IAAI;GACA,MAAM,SAAS,aAAa,WAAW;GACvC,IAAI,qBAAqB,qBAAqB,KAAK,EAAE,GAAG;IACpD,MAAM,aAAa,KAAK,2BACpB,MACA,MACJ;IACA,IAAI,eAAe,MACf,OAAO;IAGX,OAAO,KAAK,8BAA8B,MAAM,MAAM;GAC1D;GAEA,KACK,KAAK,OAAO,QAAQ,KAAK,OAAO,YACjC,CAAC,MAAM,QAAQ,KAAK,KAAK,GAEzB,OAAO,KAAK,wBAAwB,MAAM,MAAM;GAGpD,OAAO,OAAO,GACV,KAAK,iBAAiB,QAAQ,KAAK,IAAI,KAAK,KAAK,CACrD;EACJ,SAAS,OAAO;GACZ,OAAO,KAAK,iBAAiB,MAAM,KAAK;EAC5C;CACJ;CAEA,WAAmB,QAMU;EACzB,OAAO;GACH,eAAe,OAAO;GACtB,cAAc,OAAO;GACrB,mBAAmB,OAAO;GAC1B,uBAAuB,OAAO;GAC9B,yBAAyB,OAAO;EACpC;CACJ;CAEA,0BACI,MACA,MACyC;EACzC,IAAI,qBAAqB,WAAW,IAAI,GAAG;GACvC,MAAM,aAAa,KAAK,iBAAiB,IAAI;GAC7C,IAAI,WAAW,MAAM,GACjB,OAAO,OAAO,IAAI,WAAW,YAAY,CAAE;GAG/C,MAAM,UAAU,WAAW,UAAU;GACrC,OAAO,OAAO,GAAG;IACb;IACA,OAAO,KAAK,WAAW;KACnB,eAAe;KACf,cAAc;KACd,mBAAmB;KACnB,uBAAuB;KACvB,yBAAyB;IAC7B,CAAC;GACL,CAAC;EACL;EAEA,IAAI,qBAAqB,UAAU,IAAI,GAAG;GACtC,IAAI,KAAK,IAAI,WAAW,GACpB,OAAO,OAAO,IACV,qBAAqB,8BAA8B,CACvD;GAGJ,IAAI,kBAAoD;GAExD,KAAK,MAAM,CAAC,OAAO,UAAU,KAAK,IAAI,QAAQ,GAAG;IAC7C,MAAM,YAAY,GAAG,KAAK,OAAO,MAAM;IACvC,MAAM,cAAc,KAAK,0BACrB,OACA,SACJ;IACA,IAAI,YAAY,MAAM,GAClB,OAAO,OAAO,IAAI,YAAY,YAAY,CAAE;IAGhD,MAAM,cAAc,YAAY,UAAU;IAC1C,kBAAkB;IAClB,IAAI,CAAC,YAAY,SACb,OAAO,OAAO,GAAG;KACb,SAAS;KACT,OAAO,KAAK,WAAW;MACnB,eAAe;MACf,cAAc;MACd,mBACI,YAAY,MAAM;MACtB,uBACI,YAAY,MAAM;MACtB,yBACI,YAAY,MAAM;KAC1B,CAAC;IACL,CAAC;GAET;GAEA,OAAO,OAAO,GAAG;IACb,SAAS;IACT,OAAO,gBAAiB;GAC5B,CAAC;EACL;EAEA,IAAI,qBAAqB,SAAS,IAAI,GAAG;GACrC,IAAI,YAA6C;GAEjD,KAAK,MAAM,CAAC,OAAO,UAAU,KAAK,GAAG,QAAQ,GAAG;IAC5C,MAAM,cAAc,KAAK,0BACrB,OACA,GAAG,KAAK,MAAM,MAAM,EACxB;IACA,IAAI,YAAY,MAAM,GAClB,OAAO,OAAO,IAAI,YAAY,YAAY,CAAE;IAGhD,MAAM,cAAc,YAAY,UAAU;IAC1C,YAAY,YAAY;IACxB,IAAI,YAAY,SACZ,OAAO,OAAO,GAAG;KACb,SAAS;KACT,OAAO,YAAY;IACvB,CAAC;GAET;GAEA,IAAI,cAAc,MACd,OAAO,OAAO,IACV,qBAAqB,6BAA6B,CACtD;GAGJ,OAAO,OAAO,GAAG;IAAE,SAAS;IAAO,OAAO;GAAW,CAAC;EAC1D;EAEA,IAAI,qBAAqB,UAAU,IAAI,GAAG;GACtC,MAAM,YAAY,GAAG,KAAK;GAC1B,MAAM,cAAc,KAAK,0BACrB,KAAK,KACL,SACJ;GACA,IAAI,YAAY,MAAM,GAClB,OAAO,OAAO,IAAI,YAAY,YAAY,CAAE;GAGhD,MAAM,cAAc,YAAY,UAAU;GAC1C,OAAO,OAAO,GAAG;IACb,SAAS,CAAC,YAAY;IACtB,OAAO,KAAK,WAAW;KACnB,eAAe;KACf,cAAc;KACd,mBAAmB,YAAY,MAAM;KACrC,uBACI,YAAY,MAAM;KACtB,yBACI,YAAY,MAAM;IAC1B,CAAC;GACL,CAAC;EACL;EAEA,OAAO,KAAK,iBACR,sBACA,IAAI,UAAU,8BAA8B,CAChD;CACJ;CAEA,SAAS,MAA8C;EACnD,IAAI;GACA,MAAM,SAAS,KAAK,0BAA0B,MAAM,GAAG;GACvD,IAAI,OAAO,MAAM,GACb,OAAO,OAAO,IAAI,OAAO,YAAY,CAAE;GAG3C,OAAO,OAAO,GAAG,OAAO,UAAU,EAAG,OAAO;EAChD,SAAS,OAAO;GACZ,OAAO,KAAK,iBAAiB,MAAM,KAAK;EAC5C;CACJ;CAEA,kBACI,MACyC;EACzC,IAAI;GACA,OAAO,KAAK,0BAA0B,MAAM,GAAG;EACnD,SAAS,OAAO;GACZ,OAAO,KAAK,iBAAiB,MAAM,KAAK;EAC5C;CACJ;CAEA,OAAO,cAAc,MAA+B;EAChD,IAAI,qBAAqB,WAAW,IAAI,GACpC,OAAO,CAAC,KAAK,KAAK;EAGtB,IAAI,qBAAqB,UAAU,IAAI,GACnC,OAAO,KAAK,IAAI,SAAS,UACrB,qBAAqB,cAAc,KAAK,CAC5C;EAGJ,IAAI,qBAAqB,SAAS,IAAI,GAClC,OAAO,KAAK,GAAG,SAAS,UACpB,qBAAqB,cAAc,KAAK,CAC5C;EAGJ,IAAI,qBAAqB,UAAU,IAAI,GACnC,OAAO,qBAAqB,cAAc,KAAK,GAAG;EAGtD,OAAO,CAAC;CACZ;AACJ;;;AC3sBA,IAAa,sBAAb,MAAa,oBAAoB;;gBACJ,EAAE,MAAM,CAC7B,EACK,OAAO,EACJ,WAAW,oBACf,CAAC,EACA,OAAO,GACZ,EACK,OAAO;GACJ,SAAS;GACT,gBAAgB,EAAE,KAAK,CAAC,SAAS,MAAM,CAAC;EAC5C,CAAC,EACA,OAAO,CAChB,CAAC;;CAED,OAAO,MAAM,SAAiD;EAC1D,MAAM,SAAS,oBAAoB,OAAO,UAAU,OAAO;EAC3D,IAAI,CAAC,OAAO,SAAS;GACjB,MAAM,UAAU,OAAO,MAAM,OACxB,KAAK,UAAU;IACZ,MAAM,OAAO,MAAM,KAAK,KAAK,GAAG;IAChC,OAAO,KAAK,SAAS,IACf,GAAG,KAAK,IAAI,MAAM,YAClB,MAAM;GAChB,CAAC,EACA,KAAK,IAAI;GAEd,OAAO,OAAO,IAAI,yBAAyB,SAAS;EACxD;EAEA,OAAO,OAAO,GAAG,OAAO,IAAqB;CACjD;AACJ;AAEA,MAAa,oBAAoB,oBAAoB"}

package/dist/immutable.d.ts

@@ -0,0 +1,6 @@
+//#region src/core/shared/immutable.d.ts
+type PrimitiveValue = bigint | boolean | null | number | string | symbol | undefined;
+type DeepReadonly<T> = T extends PrimitiveValue | Date ? T : T extends readonly (infer TItem)[] ? readonly DeepReadonly<TItem>[] : { readonly [TKey in keyof T]: DeepReadonly<T[TKey]> };
+//#endregion
+export { DeepReadonly as t };
+//# sourceMappingURL=immutable.d.ts.map

package/dist/immutable.js

@@ -0,0 +1,54 @@
+import { t as InvariantViolationException } from "./invariant-violation-exception.js";
+//#region src/core/versioning/version.ts
+const CONTRACT_VERSION_PROPERTY = "CONTRACT_VERSION";
+const CONTRACT_VERSION_PATTERN = /^\d+\.\d+$/;
+function version(contractVersion) {
+	if (!CONTRACT_VERSION_PATTERN.test(contractVersion)) throw new TypeError(`Invalid contract version "${contractVersion}". Expected MAJOR.MINOR.`);
+	return (target) => {
+		Object.defineProperty(target, CONTRACT_VERSION_PROPERTY, {
+			value: contractVersion,
+			writable: false,
+			configurable: false,
+			enumerable: false
+		});
+	};
+}
+//#endregion
+//#region \0@oxc-project+runtime@0.132.0/helpers/decorate.js
+function __decorate(decorators, target, key, desc) {
+	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+	else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+	return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+//#endregion
+//#region src/core/shared/immutable.ts
+function deepFreeze(value) {
+	return deepFreezeInternal(value, /* @__PURE__ */ new WeakSet());
+}
+function deepFreezeInternal(value, seen) {
+	if (typeof value !== "object" || value === null || value instanceof Date) return value;
+	if (seen.has(value)) return value;
+	seen.add(value);
+	if (Array.isArray(value)) {
+		for (const item of value) deepFreezeInternal(item, seen);
+		return Object.freeze(value);
+	}
+	const objectValue = value;
+	for (const propertyKey of Reflect.ownKeys(objectValue)) deepFreezeInternal(objectValue[propertyKey], seen);
+	return Object.freeze(value);
+}
+function makeImmutable(value) {
+	if (typeof value !== "object" || value === null) return value;
+	let snapshot;
+	try {
+		snapshot = structuredClone(value);
+	} catch (error) {
+		throw new InvariantViolationException(`makeImmutable requires a structured-cloneable value: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	return deepFreeze(snapshot);
+}
+//#endregion
+export { version as i, __decorate as n, CONTRACT_VERSION_PROPERTY as r, makeImmutable as t };
+
+//# sourceMappingURL=immutable.js.map

package/dist/immutable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"immutable.js","names":[],"sources":["../src/core/versioning/version.ts","../src/core/shared/immutable.ts"],"sourcesContent":["type ContractVersion = `${number}.${number}`;\n\ntype VersionedTarget = {\n    readonly prototype: object;\n};\n\nconst CONTRACT_VERSION_PROPERTY = \"CONTRACT_VERSION\" as const;\nconst CONTRACT_VERSION_PATTERN = /^\\d+\\.\\d+$/;\n\nfunction version<const TVersion extends ContractVersion>(\n    contractVersion: TVersion,\n) {\n    if (!CONTRACT_VERSION_PATTERN.test(contractVersion)) {\n        throw new TypeError(\n            `Invalid contract version \"${contractVersion}\". Expected MAJOR.MINOR.`,\n        );\n    }\n\n    return (target: VersionedTarget): void => {\n        Object.defineProperty(target, CONTRACT_VERSION_PROPERTY, {\n            value: contractVersion,\n            writable: false,\n            configurable: false,\n            enumerable: false,\n        });\n    };\n}\n\nexport {\n    CONTRACT_VERSION_PROPERTY,\n    type ContractVersion,\n    version,\n    type VersionedTarget,\n};\n","import { InvariantViolationException } from \"../exceptions/invariant-violation-exception.js\";\n\ntype PrimitiveValue =\n    | bigint\n    | boolean\n    | null\n    | number\n    | string\n    | symbol\n    | undefined;\n\ntype DeepReadonly<T> = T extends PrimitiveValue | Date\n    ? T\n    : T extends readonly (infer TItem)[]\n      ? readonly DeepReadonly<TItem>[]\n      : { readonly [TKey in keyof T]: DeepReadonly<T[TKey]> };\n\nfunction deepFreeze<T>(value: T): T {\n    return deepFreezeInternal(value, new WeakSet<object>());\n}\n\nfunction deepFreezeInternal<T>(value: T, seen: WeakSet<object>): T {\n    // Primitives and `null` need no freezing. `Date` is intentionally returned\n    // as-is: `Object.freeze` cannot stop a Date's mutators (`setTime`,\n    // `setFullYear`, …) because they write an internal slot, not an own\n    // property — freezing it is a no-op against mutation. `makeImmutable`\n    // already hands us a `structuredClone` copy, so the caller's original Date\n    // is never aliased; deep-freezing of nested Dates is deliberately skipped.\n    if (typeof value !== \"object\" || value === null || value instanceof Date) {\n        return value;\n    }\n\n    // A value already on `seen` has been visited on this pass (cyclic graph or a\n    // shared reference); revisiting it would recurse forever.\n    if (seen.has(value)) {\n        return value;\n    }\n    seen.add(value);\n\n    if (Array.isArray(value)) {\n        for (const item of value) {\n            deepFreezeInternal(item, seen);\n        }\n\n        return Object.freeze(value);\n    }\n\n    const objectValue = value as Record<PropertyKey, object | PrimitiveValue>;\n\n    for (const propertyKey of Reflect.ownKeys(objectValue)) {\n        deepFreezeInternal(objectValue[propertyKey], seen);\n    }\n\n    return Object.freeze(value);\n}\n\nfunction makeImmutable<T>(value: T): DeepReadonly<T> {\n    if (typeof value !== \"object\" || value === null) {\n        return value as DeepReadonly<T>;\n    }\n\n    let snapshot: T;\n    try {\n        snapshot = structuredClone(value);\n    } catch (error) {\n        // `structuredClone` throws `DataCloneError` for functions, symbols and\n        // class instances. Surface it as a domain invariant instead of leaking\n        // a host-specific runtime error to callers building value objects.\n        throw new InvariantViolationException(\n            `makeImmutable requires a structured-cloneable value: ${\n                error instanceof Error ? error.message : String(error)\n            }`,\n        );\n    }\n\n    return deepFreeze(snapshot) as DeepReadonly<T>;\n}\n\nexport { deepFreeze, makeImmutable, type DeepReadonly };\n"],"mappings":";;AAMA,MAAM,4BAA4B;AAClC,MAAM,2BAA2B;AAEjC,SAAS,QACL,iBACF;CACE,IAAI,CAAC,yBAAyB,KAAK,eAAe,GAC9C,MAAM,IAAI,UACN,6BAA6B,gBAAgB,yBACjD;CAGJ,QAAQ,WAAkC;EACtC,OAAO,eAAe,QAAQ,2BAA2B;GACrD,OAAO;GACP,UAAU;GACV,cAAc;GACd,YAAY;EAChB,CAAC;CACL;AACJ;;;;;;;;;;;ACTA,SAAS,WAAc,OAAa;CAChC,OAAO,mBAAmB,uBAAO,IAAI,QAAgB,CAAC;AAC1D;AAEA,SAAS,mBAAsB,OAAU,MAA0B;CAO/D,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,iBAAiB,MAChE,OAAO;CAKX,IAAI,KAAK,IAAI,KAAK,GACd,OAAO;CAEX,KAAK,IAAI,KAAK;CAEd,IAAI,MAAM,QAAQ,KAAK,GAAG;EACtB,KAAK,MAAM,QAAQ,OACf,mBAAmB,MAAM,IAAI;EAGjC,OAAO,OAAO,OAAO,KAAK;CAC9B;CAEA,MAAM,cAAc;CAEpB,KAAK,MAAM,eAAe,QAAQ,QAAQ,WAAW,GACjD,mBAAmB,YAAY,cAAc,IAAI;CAGrD,OAAO,OAAO,OAAO,KAAK;AAC9B;AAEA,SAAS,cAAiB,OAA2B;CACjD,IAAI,OAAO,UAAU,YAAY,UAAU,MACvC,OAAO;CAGX,IAAI;CACJ,IAAI;EACA,WAAW,gBAAgB,KAAK;CACpC,SAAS,OAAO;EAIZ,MAAM,IAAI,4BACN,wDACI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAE7D;CACJ;CAEA,OAAO,WAAW,QAAQ;AAC9B"}

package/dist/index.d.ts

@@ -1,175 +1,30 @@
-import { A as TracerPort, C as RequestedBy, D as UseCaseObservability, E as UseCase, F as ContractVersion, M as MetricsPort, N as LogPayload, O as TraceAttributeValue, P as LoggerPort, S as CommandInput, T as MaybePromise, _ as PolicyEvaluationInput, a as TemporalContext, b as PolicyPortError, c as CacheStrategy, d as mapPolicyEvaluationError, f as TemporalHistory, g as ResultRepository, h as Repository, i as CreateTemporalContextInput, j as MetricLabels, k as TraceSpan, l as Page, m as DeepReadonly, n as TemporalUseCaseInput, o as assertTemporalContext, p as TemporalRepository, r as TemporalizedContextSeed, s as createTemporalContext, t as TemporalUseCase, u as Query, v as PolicyEvaluationOutput, w as RequestedByKind, x as Command, y as PolicyPort } from "./temporal-use-case.js";
-import { A as ConditionEvaluationReport, C as TenantId, D as asTenantId, E as asSchoolId, F as Ok, I as Result, M as ConditionEvaluationReportTag, N as ConditionEvaluatorReporter, O as ConditionEvaluationCause, P as Err, S as SchoolId, T as asPolicyDefinitionId, _ as CoreConfigOptions, a as GateTraceNodeSnapshot, b as PolicyDecisionId, c as PolicyViolation, g as CoreConfig, h as Outcome, i as GateTraceLeafSnapshot, j as ConditionEvaluationReportLevel, k as ConditionEvaluationOptions, l as VersionedGateEngine, m as CommonOutcomeStatus, n as GateOutcomeData, o as GateViolationTrace, r as GateStatus, s as PolicyContext, t as GateOutcome, u as GatePayload, v as CoreObservabilityConfig, w as asPolicyDecisionId, x as PolicyDefinitionId } from "./gate-types.js";
+import { i as version, n as ContractVersion, r as VersionedTarget, t as CONTRACT_VERSION_PROPERTY } from "./version.js";
+import { a as Result, i as Ok, n as Outcome, r as Err, t as CommonOutcomeStatus } from "./outcome.js";
+import { A as MetricLabels, C as RequestedByKind, D as TraceAttributeValue, E as UseCaseObservability, M as LogPayload, N as LoggerPort, O as TraceSpan, S as RequestedBy, T as UseCase, _ as PolicyEvaluationOutput, a as TemporalContext, b as Command, c as CacheStrategy, d as mapPolicyEvaluationError, f as TemporalHistory, g as PolicyEvaluationInput, h as ResultRepository, i as CreateTemporalContextInput, j as MetricsPort, k as TracerPort, l as Page, m as Repository, n as TemporalUseCaseInput, o as assertTemporalContext, p as TemporalRepository, r as TemporalizedContextSeed, s as createTemporalContext, t as TemporalUseCase, u as Query, v as PolicyPort, w as MaybePromise, x as CommandInput, y as PolicyPortError } from "./temporal-use-case.js";
 import { a as JsonSafeRecord, i as JsonSafePrimitive, n as AppErrorOptions, o as JsonSafeValue, r as ErrorSeverity, t as AppError } from "./app-error.js";
 import { $ as serializationErrorCode, A as IdempotencyPayloadMismatchError, B as UniqueConstraintViolation, C as IntegrationErrorMetadata, D as IdempotencyFailureKind, E as IdempotencyErrorMetadata, F as AlreadyExistsError, G as AuthorizationErrorMetadata, H as translateUniqueViolationToDuplicate, I as ConflictError, J as AuthenticationError, K as AuthorizationErrorReason, L as ConflictErrorMetadata, M as payloadHash, N as sha256Hex, O as IdempotencyInProgressError, P as stableStringify, Q as ErrorCodes, R as ConflictKind, S as IntegrationError, T as IdempotencyError, U as BusinessRuleViolationError, V as UniqueConstraintViolationError, W as AuthorizationError, X as AuthenticationErrorReason, Y as AuthenticationErrorMetadata, Z as assertJsonSafeMetadata, _ as SerializationMessages, a as TemporalError, b as NotFoundError, c as TemporalPrecision, d as SerializationCodes, f as SerializationDirection, g as SerializationInError, h as SerializationFailureCategory, i as NotYetValidError, j as IdempotencyReplayNotSupportedError, k as IdempotencyKeyMissingError, l as evaluateTemporalWindow, m as SerializationErrorMetadata, n as UnexpectedError, o as TemporalErrorMetadata, p as SerializationError, q as AuthorizationRequirement, r as ExpiredError, s as TemporalKind, t as ValidationError, u as SerializationBoundary, v as SerializationOutError, w as IntegrationErrorReason, x as LegacyIncompatibleError, y as safePreview, z as DuplicateError } from "./validation-error.js";
+import { t as ValidationCode } from "./validation-code.js";
 import { t as ValidationField } from "./validation-field.js";
+import { A as ConditionEvaluationReportTag, C as asPolicyDefinitionId, D as ConditionEvaluationOptions, E as ConditionEvaluationCause, O as ConditionEvaluationReport, S as asPolicyDecisionId, T as asTenantId, a as GateTraceNodeSnapshot, b as SchoolId, c as PolicyViolation, g as CoreObservabilityConfig, h as CoreConfigOptions, i as GateTraceLeafSnapshot, j as ConditionEvaluatorReporter, k as ConditionEvaluationReportLevel, l as VersionedGateEngine, m as CoreConfig, n as GateOutcomeData, o as GateViolationTrace, r as GateStatus, s as PolicyContext, t as GateOutcome, u as GatePayload, v as PolicyDecisionId, w as asSchoolId, x as TenantId, y as PolicyDefinitionId } from "./gate-types.js";
 import { a as PolicyPackage, c as coreConfig, i as PolicyCatalogFactory, n as contextResolverRegistry, o as InMemoryPolicyDefinitionRepository, r as registerNamespacedContextResolvers, s as PolicyHashing, t as PolicyContextPath } from "./path.js";
 import { A as PolicyScope, C as BasePolicyDefinitionProps, D as PolicyDefinition, E as GatePolicyDefinitionProps, F as PolicyKey, I as AsOfSource, L as PolicyKind, M as ScopeChain, N as PolicyCatalog, O as PolicyDefinitionProps, P as PolicyCatalogEntryProps, R as PolicyOwner, T as FindCandidatesParams, _ as ContextResolverResilienceOptions, a as PolicyServiceOptions, b as ContextSeed, c as PolicyEvaluationErrors, d as PolicyAsOfResolver, f as PolicyContextBuilder, g as ContextResolverCircuitBreakerOptions, h as registerNamespacedContextResolversIn, i as PolicyService, j as PolicyScopeMatcher, k as PolicyDefinitionStatus, l as PolicyResolver, m as ContextResolverRegistry, n as PolicyDecision, o as PolicyServiceParams, p as PolicyContextBuilderOptions, r as PolicyEvaluationResult, s as PolicyEvaluationError, t as EvaluateInput, u as DeriveAsOfOptions, v as ContextResolverRetryOptions, w as ComputePolicyDefinitionProps, x as ContextSeedValidator, y as ContextValueResolver, z as PolicyScopeLevel } from "./policy-service.js";
 import { a as ComputeOutcome, c as VersionedComputeEngine, i as ComputeEvaluatorRegistration, n as ComputeRegistry, o as ComputeOutcomeData, r as ComputeEvaluator, s as ComputeStatus, t as GateEngineRegistry } from "./gate-engine-registry.js";
 import { a as ComputePayloadParserRegistry, c as ComputeEvaluatorRegistry, o as ComputePayloadParsers, r as GatePayloadParsers, s as ComputeEngineRegistry } from "./parse-gate-payload.js";
+import { t as DeepReadonly } from "./immutable.js";
+import { a as EntityState, i as Entity, n as ValueObject, r as ValueObjectPluginContract, t as UuidIdentifier } from "./uuid-identifier.js";
+import { a as PluginContract, i as PipelineReducer, n as BasePlugin, r as InvokeOptions, t as PluginManager } from "./plugin.js";
+import { t as DomainException } from "./domain-exception.js";
+import { a as InvariantViolationException, c as BusinessRuleViolationException, i as ValidationViolation, n as MultipleValidationException, o as InvalidStateTransitionException, r as ValidationException, s as EntityNotFoundException, t as InvalidValueException } from "./validation-exception.js";
+import { a as Ruleset, i as InvariantRuleset, n as RulesetRegistry, o as RulesetId, r as CreationRuleset, t as ValueObjectRuleset } from "./value-object-ruleset.contracts.js";
+import { a as buildDomainEventContractVersions, i as DomainEventEnvelope, n as DomainEventContractSelection, o as createDomainEventEnvelope, r as DomainEventContractVersions, t as CreateDomainEventEnvelopeInput } from "./domain-event-contracts.js";
 
-//#region src/core/domain/entity.d.ts
-/**
- * The minimal persisted shape needed to reconstitute an {@link Entity}.
- *
- * This is the contract between storage and the domain: a repository maps a row
- * (or document) onto these four fields and hands them to a subclass constructor.
- * `aggregateVersion` travels with the state so optimistic-concurrency checks
- * survive a round-trip through the database.
- */
-interface EntityState<TIdentifier> {
-  readonly id: TIdentifier;
-  readonly createdAt: Date;
-  readonly updatedAt: Date;
-  readonly aggregateVersion: number;
-}
-/**
- * Base class for domain entities — objects defined by a stable identity rather
- * than by their attributes. Two entities are "the same" when their `id`
- * matches, even if every other field differs; this is the opposite of a
- * {@link ValueObject}, which is defined entirely by its contents.
- *
- * The class owns the bookkeeping common to every aggregate root: a creation
- * timestamp that never changes, a last-modified timestamp, and an
- * `aggregateVersion` counter used for optimistic concurrency control. All three
- * are validated on construction and the dates are defensively cloned, so an
- * entity can never be built into — or leak — an inconsistent temporal state.
- *
- * @typeParam TIdentifier - The identity type (e.g. a branded string id or a VO).
- */
-declare abstract class Entity<TIdentifier> {
-  static readonly CONTRACT_VERSION: ContractVersion;
-  private readonly _id;
-  private readonly _createdAt;
-  private _updatedAt;
-  private _aggregateVersion;
-  /**
-   * Reconstitutes an entity from its persisted {@link EntityState}.
-   *
-   * Validates the temporal invariants up front so an invalid entity is
-   * impossible to construct: both dates must be valid, the aggregate version
-   * must be a non-negative integer, and `updatedAt` may not predate
-   * `createdAt`. Both dates are cloned on the way in so a later mutation of
-   * the caller's `Date` objects cannot reach into the entity's internal state.
-   *
-   * Declared `protected` because entities are reconstituted through a
-   * subclass factory, never instantiated directly by application code.
-   *
-   * @throws {InvariantViolationException} When `updatedAt` is earlier than `createdAt`.
-   */
-  protected constructor(state: EntityState<TIdentifier>);
-  /** The entity's stable identity — the basis for equality between entities. */
-  get id(): TIdentifier;
-  /**
-   * When the entity was first created.
-   *
-   * Returns a clone so callers cannot mutate the entity's internal `Date`;
-   * the value is fixed at construction and never changes thereafter.
-   */
-  get createdAt(): Date;
-  /**
-   * When the entity was last modified.
-   *
-   * Returns a clone for the same encapsulation reason as {@link createdAt};
-   * the underlying value advances only through {@link markAsModified}.
-   */
-  get updatedAt(): Date;
-  /**
-   * Monotonic counter incremented on every mutation, used for optimistic
-   * concurrency control: a writer reads this value, and the persistence layer
-   * rejects the write if the stored version has moved on in the meantime.
-   */
-  get aggregateVersion(): number;
-  /**
-   * The schema/contract version stamped on this entity type by the
-   * `@version` decorator — used to detect and migrate state persisted under
-   * an older shape.
-   */
-  get contractVersion(): ContractVersion;
-  /**
-   * The single seam through which an entity records a mutation: it advances
-   * `updatedAt` and bumps {@link aggregateVersion} by one. Subclasses must
-   * call this from every state-changing method so the version counter stays
-   * an accurate optimistic-lock token.
-   *
-   * @param updatedAt - The modification instant; defaults to now. Validated
-   *   and required not to predate `createdAt`, preserving the same invariant
-   *   the constructor enforces.
-   * @returns The new aggregate version after the increment.
-   * @throws {InvariantViolationException} When `updatedAt` is earlier than `createdAt`.
-   */
-  protected markAsModified(updatedAt?: Date): number;
-}
-//#endregion
-//#region src/core/domain/value-object.d.ts
-/**
- * Base class for value objects — domain concepts defined entirely by their
- * contents, with no identity of their own. Two value objects are
- * interchangeable when they hold equal data, which is the opposite of an
- * {@link Entity} (compared by id). Money, a CPF, a date range: replacing one
- * instance with an equal one changes nothing about the model.
- *
- * Immutability is the defining guarantee here. The wrapped `value` is
- * deep-frozen on construction, so a value object can be shared freely without
- * any risk of a consumer mutating shared state. Subclasses seal the instance
- * itself with {@link finalize} once their own fields are set.
- *
- * @typeParam T - The shape of the wrapped data.
- * @typeParam P - The primitive form produced by {@link toPrimitive} / {@link toJSON}.
- */
-declare abstract class ValueObject<T, P> {
-  static readonly CONTRACT_VERSION: ContractVersion;
-  /** The wrapped data, deep-frozen so it can never be mutated after construction. */
-  readonly value: DeepReadonly<T>;
-  /**
-   * Wraps `value`, deep-freezing it so the value object is immutable from the
-   * moment it exists. Declared `protected` because value objects are built
-   * through a validating subclass factory, never instantiated directly.
-   */
-  protected constructor(value: T);
-  /**
-   * The schema/contract version stamped on this value-object type by the
-   * `@version` decorator — used to detect state persisted under an older shape.
-   */
-  get contractVersion(): ContractVersion;
-  /**
-   * Freezes the instance shell, blocking reassignment of any own field.
-   *
-   * `value` is already deep-frozen by the constructor, so the wrapped data is
-   * immutable regardless. The instance itself is NOT frozen automatically
-   * because a subclass may still need to assign its own fields after
-   * `super(value)` runs. Call `finalize()` at the very end of the subclass
-   * constructor (after all fields are set) to make the whole value object
-   * immutable.
-   */
-  protected finalize(): void;
-  /**
-   * Hook for `JSON.stringify`. Delegates to {@link toPrimitive} so a value
-   * object serializes to its primitive form rather than exposing the internal
-   * `value` wrapper.
-   */
-  toJSON(): P;
-  /**
-   * Compares this value object with another by content. Because value objects
-   * carry no identity, subclasses implement equality over the wrapped data
-   * (typically the primitive form), so two independently constructed instances
-   * holding the same data are considered equal.
-   */
-  abstract equals(other: this): boolean;
-  /**
-   * Projects the value object down to a plain, serializable primitive form —
-   * the representation suitable for persistence, transport, or comparison.
-   */
-  abstract toPrimitive(): P;
-}
-//#endregion
 //#region src/index.d.ts
 declare const ERP_CORE_NAME = "erp-core";
-declare const ERP_CORE_VERSION = "1.1.0";
+declare const ERP_CORE_VERSION = "1.2.0";
 declare const erpCoreRelease: {
   readonly name: "erp-core";
-  readonly version: "1.1.0";
+  readonly version: "1.2.0";
 };
 //#endregion
-export { AlreadyExistsError, AppError, AppErrorOptions, AsOfSource, AuthenticationError, AuthenticationErrorMetadata, AuthenticationErrorReason, AuthorizationError, AuthorizationErrorMetadata, AuthorizationErrorReason, AuthorizationRequirement, BasePolicyDefinitionProps, BusinessRuleViolationError, CacheStrategy, Command, CommandInput, CommonOutcomeStatus, ComputeEngineRegistry, ComputeEvaluator, ComputeEvaluatorRegistration, ComputeEvaluatorRegistry, ComputeOutcome, ComputeOutcomeData, ComputePayloadParserRegistry, ComputePayloadParsers, ComputePolicyDefinitionProps, ComputeRegistry, ComputeStatus, ConditionEvaluationCause, ConditionEvaluationOptions, ConditionEvaluationReport, ConditionEvaluationReportLevel, ConditionEvaluationReportTag, ConditionEvaluatorReporter, ConflictError, ConflictErrorMetadata, ConflictKind, ContextResolverCircuitBreakerOptions, ContextResolverRegistry, ContextResolverResilienceOptions, ContextResolverRetryOptions, ContextSeed, ContextSeedValidator, ContextValueResolver, CoreConfig, CoreConfigOptions, CoreObservabilityConfig, CreateTemporalContextInput, type DeepReadonly, DeriveAsOfOptions, SerializationInError as DeserializationError, SerializationInError, DuplicateError, ERP_CORE_NAME, ERP_CORE_VERSION, Entity, type EntityState, Err, ErrorCodes, ErrorSeverity, EvaluateInput, ExpiredError, TemporalErrorMetadata as ExpiredErrorMetadata, TemporalErrorMetadata, TemporalPrecision as ExpiredErrorPrecision, TemporalPrecision, FindCandidatesParams, GateEngineRegistry, GateOutcome, GateOutcomeData, GatePayload, GatePayloadParsers, GatePolicyDefinitionProps, GateStatus, GateTraceLeafSnapshot, GateTraceNodeSnapshot, GateViolationTrace, IdempotencyError, IdempotencyErrorMetadata, IdempotencyFailureKind, IdempotencyInProgressError, IdempotencyKeyMissingError, IdempotencyPayloadMismatchError, IdempotencyReplayNotSupportedError, InMemoryPolicyDefinitionRepository, IntegrationError, IntegrationErrorMetadata, IntegrationErrorReason, JsonSafePrimitive, JsonSafeRecord, JsonSafeValue, LegacyIncompatibleError, LogPayload, LoggerPort, MaybePromise, MetricLabels, MetricsPort, NotFoundError, NotYetValidError, Ok, Outcome, Page, PolicyAsOfResolver, PolicyCatalog, PolicyCatalogEntryProps, PolicyCatalogFactory, PolicyContext, PolicyContextBuilder, PolicyContextBuilderOptions, PolicyContextPath, PolicyDecision, PolicyDecisionId, PolicyDefinition, PolicyDefinitionId, PolicyDefinitionProps, PolicyDefinitionStatus, PolicyEvaluationError, PolicyEvaluationErrors, PolicyEvaluationInput, PolicyEvaluationOutput, PolicyEvaluationResult, PolicyHashing, PolicyKey, PolicyKind, PolicyOwner, PolicyPackage, PolicyPort, PolicyPortError, PolicyResolver, PolicyScope, PolicyScopeLevel, PolicyScopeMatcher, PolicyService, PolicyServiceOptions, PolicyServiceParams, PolicyViolation, Query, Repository, RequestedBy, RequestedByKind, Result, ResultRepository, SchoolId, ScopeChain, SerializationBoundary, SerializationCodes, SerializationDirection, SerializationError, SerializationErrorMetadata, SerializationFailureCategory, SerializationMessages, SerializationOutError, TemporalContext, TemporalError, TemporalHistory, TemporalKind, TemporalRepository, TemporalUseCase, TemporalUseCaseInput, TemporalizedContextSeed, TenantId, TraceAttributeValue, TraceSpan, TracerPort, UnexpectedError, UniqueConstraintViolation, UniqueConstraintViolationError, UseCase, UseCaseObservability, ValidationError, ValidationField, ValueObject, VersionedComputeEngine, VersionedGateEngine, asPolicyDecisionId, asPolicyDefinitionId, asSchoolId, asTenantId, assertJsonSafeMetadata, assertTemporalContext, contextResolverRegistry, coreConfig, createTemporalContext, erpCoreRelease, evaluateTemporalWindow, mapPolicyEvaluationError, payloadHash, registerNamespacedContextResolvers, registerNamespacedContextResolversIn, safePreview, serializationErrorCode, sha256Hex, stableStringify, translateUniqueViolationToDuplicate };
+export { AlreadyExistsError, AppError, AppErrorOptions, AsOfSource, AuthenticationError, AuthenticationErrorMetadata, AuthenticationErrorReason, AuthorizationError, AuthorizationErrorMetadata, AuthorizationErrorReason, AuthorizationRequirement, BasePlugin, BasePolicyDefinitionProps, BusinessRuleViolationError, BusinessRuleViolationException, CONTRACT_VERSION_PROPERTY, CacheStrategy, Command, CommandInput, CommonOutcomeStatus, ComputeEngineRegistry, ComputeEvaluator, ComputeEvaluatorRegistration, ComputeEvaluatorRegistry, ComputeOutcome, ComputeOutcomeData, ComputePayloadParserRegistry, ComputePayloadParsers, ComputePolicyDefinitionProps, ComputeRegistry, ComputeStatus, ConditionEvaluationCause, ConditionEvaluationOptions, ConditionEvaluationReport, ConditionEvaluationReportLevel, ConditionEvaluationReportTag, ConditionEvaluatorReporter, ConflictError, ConflictErrorMetadata, ConflictKind, ContextResolverCircuitBreakerOptions, ContextResolverRegistry, ContextResolverResilienceOptions, ContextResolverRetryOptions, ContextSeed, ContextSeedValidator, ContextValueResolver, ContractVersion, CoreConfig, CoreConfigOptions, CoreObservabilityConfig, CreateDomainEventEnvelopeInput, CreateTemporalContextInput, CreationRuleset, DeepReadonly, DeriveAsOfOptions, SerializationInError as DeserializationError, SerializationInError, DomainEventContractSelection, DomainEventContractVersions, DomainEventEnvelope, DomainException, DuplicateError, ERP_CORE_NAME, ERP_CORE_VERSION, Entity, EntityNotFoundException, EntityState, Err, ErrorCodes, ErrorSeverity, EvaluateInput, ExpiredError, TemporalErrorMetadata as ExpiredErrorMetadata, TemporalErrorMetadata, TemporalPrecision as ExpiredErrorPrecision, TemporalPrecision, FindCandidatesParams, GateEngineRegistry, GateOutcome, GateOutcomeData, GatePayload, GatePayloadParsers, GatePolicyDefinitionProps, GateStatus, GateTraceLeafSnapshot, GateTraceNodeSnapshot, GateViolationTrace, IdempotencyError, IdempotencyErrorMetadata, IdempotencyFailureKind, IdempotencyInProgressError, IdempotencyKeyMissingError, IdempotencyPayloadMismatchError, IdempotencyReplayNotSupportedError, InMemoryPolicyDefinitionRepository, IntegrationError, IntegrationErrorMetadata, IntegrationErrorReason, InvalidStateTransitionException, InvalidValueException, InvariantRuleset, InvariantViolationException, InvokeOptions, JsonSafePrimitive, JsonSafeRecord, JsonSafeValue, LegacyIncompatibleError, LogPayload, LoggerPort, MaybePromise, MetricLabels, MetricsPort, MultipleValidationException, NotFoundError, NotYetValidError, Ok, Outcome, Page, PipelineReducer, PluginContract, PluginManager, PolicyAsOfResolver, PolicyCatalog, PolicyCatalogEntryProps, PolicyCatalogFactory, PolicyContext, PolicyContextBuilder, PolicyContextBuilderOptions, PolicyContextPath, PolicyDecision, PolicyDecisionId, PolicyDefinition, PolicyDefinitionId, PolicyDefinitionProps, PolicyDefinitionStatus, PolicyEvaluationError, PolicyEvaluationErrors, PolicyEvaluationInput, PolicyEvaluationOutput, PolicyEvaluationResult, PolicyHashing, PolicyKey, PolicyKind, PolicyOwner, PolicyPackage, PolicyPort, PolicyPortError, PolicyResolver, PolicyScope, PolicyScopeLevel, PolicyScopeMatcher, PolicyService, PolicyServiceOptions, PolicyServiceParams, PolicyViolation, Query, Repository, RequestedBy, RequestedByKind, Result, ResultRepository, Ruleset, RulesetId, RulesetRegistry, SchoolId, ScopeChain, SerializationBoundary, SerializationCodes, SerializationDirection, SerializationError, SerializationErrorMetadata, SerializationFailureCategory, SerializationMessages, SerializationOutError, TemporalContext, TemporalError, TemporalHistory, TemporalKind, TemporalRepository, TemporalUseCase, TemporalUseCaseInput, TemporalizedContextSeed, TenantId, TraceAttributeValue, TraceSpan, TracerPort, UnexpectedError, UniqueConstraintViolation, UniqueConstraintViolationError, UseCase, UseCaseObservability, UuidIdentifier, ValidationCode, ValidationError, ValidationException, ValidationField, ValidationViolation, ValueObject, ValueObjectPluginContract, ValueObjectRuleset, VersionedComputeEngine, VersionedGateEngine, VersionedTarget, asPolicyDecisionId, asPolicyDefinitionId, asSchoolId, asTenantId, assertJsonSafeMetadata, assertTemporalContext, buildDomainEventContractVersions, contextResolverRegistry, coreConfig, createDomainEventEnvelope, createTemporalContext, erpCoreRelease, evaluateTemporalWindow, mapPolicyEvaluationError, payloadHash, registerNamespacedContextResolvers, registerNamespacedContextResolversIn, safePreview, serializationErrorCode, sha256Hex, stableStringify, translateUniqueViolationToDuplicate, version };
 //# sourceMappingURL=index.d.ts.map