@cullet/erp-core 1.1.0 → 1.3.0

package/dist/plugin.d.ts

@@ -0,0 +1,85 @@
+//#region src/core/plugins/types.d.ts
+/**
+ * Common shape every plugin shares, regardless of the contract it implements.
+ * Carries the metadata the {@link PluginManager} uses to identify, order and
+ * toggle plugins.
+ */
+interface BasePlugin {
+  /** Unique identifier, used for logs / debugging and for enable/disable. */
+  readonly name: string;
+  /** Weight; the highest priority wins (default = 0). */
+  readonly priority?: number;
+  /** Shortcut to disable a plugin without removing it. */
+  enabled?: boolean;
+}
+/**
+ * A plugin contract is a record whose values are the methods plugins may
+ * implement for a given extension point.
+ *
+ * `any` here is intentional: it is the only way to express the constraint
+ * "a record whose values are arbitrary functions". Using `unknown` for the
+ * parameters breaks assignment of concrete contracts by contravariance —
+ * TypeScript rejects functions with specific parameters as a subtype of
+ * `(...args: unknown[]) => unknown`.
+ */
+type PluginContract = Record<string, (...args: any[]) => any>;
+/**
+ * Reducer used in `pipeline` mode to combine the result of each plugin into a
+ * single accumulated value.
+ */
+type PipelineReducer<R, P extends PluginContract> = (accumulated: R, current: R, plugin: P & BasePlugin, index: number) => R;
+/** Options accepted by {@link PluginManager.invoke}. */
+interface InvokeOptions<P extends PluginContract, K extends keyof P> {
+  /**
+   * `'first'`    → returns the first enabled plugin with the highest priority.
+   * `'pipeline'` → runs every enabled plugin, combining results via `reducer`.
+   * default = `'first'`.
+   */
+  mode?: "first" | "pipeline";
+  /** Executed when no plugin is enabled for the method. */
+  fallback: P[K];
+  /** Reducer used only when `mode = "pipeline"`. */
+  reducer?: PipelineReducer<ReturnType<P[K]>, P>;
+}
+//#endregion
+//#region src/core/plugins/plugin.d.ts
+/**
+ * Registry that holds a set of plugins implementing a shared {@link PluginContract}
+ * and resolves which of them answer a given extension point.
+ *
+ * Plugins are kept sorted by priority (descending). For a given method,
+ * {@link invoke} either delegates to the highest-priority enabled plugin
+ * (`'first'`) or folds every enabled plugin into a single value (`'pipeline'`).
+ * When no plugin is enabled, the supplied `fallback` runs instead, so the host
+ * always has defined behaviour even with an empty registry.
+ *
+ * @typeParam P - The plugin contract this manager coordinates.
+ */
+declare class PluginManager<P extends PluginContract> {
+  /** Internal list, kept sorted by priority (desc). */
+  private plugins;
+  /** Registers one or more plugins and re-sorts by priority. */
+  register(...plugins: (P & BasePlugin)[]): void;
+  /** Removes a previously registered plugin by name. */
+  unregister(name: string): void;
+  /** Enables a registered plugin by name. */
+  enable(name: string): void;
+  /** Disables a registered plugin by name (without removing it). */
+  disable(name: string): void;
+  /** Lists enabled plugins only, already in priority order. */
+  list(): readonly (P & BasePlugin)[];
+  /**
+   * Resolves `method` against the registered plugins.
+   *
+   * In `'first'` mode the highest-priority enabled plugin that implements
+   * `method` answers. In `'pipeline'` mode every enabled plugin runs and the
+   * results are folded with `reducer` (defaults to "keep the last result").
+   * When no enabled plugin implements `method`, `fallback` is called.
+   */
+  invoke<K extends keyof P>(method: K, args: Parameters<P[K]>, opts: InvokeOptions<P, K>): ReturnType<P[K]>;
+  /** Re-sorts the internal list by priority (desc; default priority = 0). */
+  private reorder;
+}
+//#endregion
+export { PluginContract as a, PipelineReducer as i, BasePlugin as n, InvokeOptions as r, PluginManager as t };
+//# sourceMappingURL=plugin.d.ts.map

package/dist/plugin.js

@@ -0,0 +1,74 @@
+//#region src/core/plugins/plugin.ts
+/**
+* Registry that holds a set of plugins implementing a shared {@link PluginContract}
+* and resolves which of them answer a given extension point.
+*
+* Plugins are kept sorted by priority (descending). For a given method,
+* {@link invoke} either delegates to the highest-priority enabled plugin
+* (`'first'`) or folds every enabled plugin into a single value (`'pipeline'`).
+* When no plugin is enabled, the supplied `fallback` runs instead, so the host
+* always has defined behaviour even with an empty registry.
+*
+* @typeParam P - The plugin contract this manager coordinates.
+*/
+var PluginManager = class {
+	constructor() {
+		this.plugins = [];
+	}
+	/** Registers one or more plugins and re-sorts by priority. */
+	register(...plugins) {
+		this.plugins.push(...plugins);
+		this.reorder();
+	}
+	/** Removes a previously registered plugin by name. */
+	unregister(name) {
+		this.plugins = this.plugins.filter((p) => p.name !== name);
+	}
+	/** Enables a registered plugin by name. */
+	enable(name) {
+		const plugin = this.plugins.find((p) => p.name === name);
+		if (plugin) plugin.enabled = true;
+	}
+	/** Disables a registered plugin by name (without removing it). */
+	disable(name) {
+		const plugin = this.plugins.find((p) => p.name === name);
+		if (plugin) plugin.enabled = false;
+	}
+	/** Lists enabled plugins only, already in priority order. */
+	list() {
+		return this.plugins.filter((p) => p.enabled !== false);
+	}
+	/**
+	* Resolves `method` against the registered plugins.
+	*
+	* In `'first'` mode the highest-priority enabled plugin that implements
+	* `method` answers. In `'pipeline'` mode every enabled plugin runs and the
+	* results are folded with `reducer` (defaults to "keep the last result").
+	* When no enabled plugin implements `method`, `fallback` is called.
+	*/
+	invoke(method, args, opts) {
+		const { mode = "first", fallback, reducer } = opts;
+		const enabled = this.list().filter((p) => method in p);
+		if (enabled.length === 0) return fallback(...args);
+		if (mode === "first") {
+			const fn = enabled[0][method];
+			return fn(...args);
+		}
+		const defaultReducer = (_, curr) => curr;
+		const red = reducer ?? defaultReducer;
+		let acc = enabled[0][method](...args);
+		enabled.slice(1).forEach((plugin, idx) => {
+			const res = plugin[method](...args);
+			acc = red(acc, res, plugin, idx + 1);
+		});
+		return acc;
+	}
+	/** Re-sorts the internal list by priority (desc; default priority = 0). */
+	reorder() {
+		this.plugins.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
+	}
+};
+//#endregion
+export { PluginManager as t };
+
+//# sourceMappingURL=plugin.js.map

package/dist/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","names":[],"sources":["../src/core/plugins/plugin.ts"],"sourcesContent":["import {\n    type BasePlugin,\n    type InvokeOptions,\n    type PipelineReducer,\n    type PluginContract,\n} from \"./types.js\";\n\n/**\n * Registry that holds a set of plugins implementing a shared {@link PluginContract}\n * and resolves which of them answer a given extension point.\n *\n * Plugins are kept sorted by priority (descending). For a given method,\n * {@link invoke} either delegates to the highest-priority enabled plugin\n * (`'first'`) or folds every enabled plugin into a single value (`'pipeline'`).\n * When no plugin is enabled, the supplied `fallback` runs instead, so the host\n * always has defined behaviour even with an empty registry.\n *\n * @typeParam P - The plugin contract this manager coordinates.\n */\nclass PluginManager<P extends PluginContract> {\n    /** Internal list, kept sorted by priority (desc). */\n    private plugins: (P & BasePlugin)[] = [];\n\n    /** Registers one or more plugins and re-sorts by priority. */\n    public register(...plugins: (P & BasePlugin)[]): void {\n        this.plugins.push(...plugins);\n        this.reorder();\n    }\n\n    /** Removes a previously registered plugin by name. */\n    public unregister(name: string): void {\n        this.plugins = this.plugins.filter((p) => p.name !== name);\n    }\n\n    /** Enables a registered plugin by name. */\n    public enable(name: string): void {\n        const plugin = this.plugins.find((p) => p.name === name);\n        if (plugin) plugin.enabled = true;\n    }\n\n    /** Disables a registered plugin by name (without removing it). */\n    public disable(name: string): void {\n        const plugin = this.plugins.find((p) => p.name === name);\n        if (plugin) plugin.enabled = false;\n    }\n\n    /** Lists enabled plugins only, already in priority order. */\n    public list(): readonly (P & BasePlugin)[] {\n        return this.plugins.filter((p) => p.enabled !== false);\n    }\n\n    /**\n     * Resolves `method` against the registered plugins.\n     *\n     * In `'first'` mode the highest-priority enabled plugin that implements\n     * `method` answers. In `'pipeline'` mode every enabled plugin runs and the\n     * results are folded with `reducer` (defaults to \"keep the last result\").\n     * When no enabled plugin implements `method`, `fallback` is called.\n     */\n    public invoke<K extends keyof P>(\n        method: K,\n        args: Parameters<P[K]>,\n        opts: InvokeOptions<P, K>,\n    ): ReturnType<P[K]> {\n        const { mode = \"first\", fallback, reducer } = opts;\n        const enabled = this.list().filter((p) => method in p) as Array<\n            P & BasePlugin\n        >;\n\n        if (enabled.length === 0) {\n            return (fallback as P[K])(...args);\n        }\n\n        if (mode === \"first\") {\n            const fn = enabled[0][method] as P[K];\n            return fn(...args);\n        }\n\n        const defaultReducer: PipelineReducer<ReturnType<P[K]>, P> = (\n            _,\n            curr,\n        ) => curr;\n        const red = reducer ?? defaultReducer;\n\n        let acc: ReturnType<P[K]> = enabled[0][method]!(...args);\n        enabled.slice(1).forEach((plugin, idx) => {\n            const res = plugin[method]!(...args);\n            acc = red(acc, res, plugin, idx + 1);\n        });\n        return acc;\n    }\n\n    /** Re-sorts the internal list by priority (desc; default priority = 0). */\n    private reorder(): void {\n        this.plugins.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));\n    }\n}\n\nexport { PluginManager };\n"],"mappings":";;;;;;;;;;;;;AAmBA,IAAM,gBAAN,MAA8C;;iBAEJ,CAAC;;;CAGvC,SAAgB,GAAG,SAAmC;EAClD,KAAK,QAAQ,KAAK,GAAG,OAAO;EAC5B,KAAK,QAAQ;CACjB;;CAGA,WAAkB,MAAoB;EAClC,KAAK,UAAU,KAAK,QAAQ,QAAQ,MAAM,EAAE,SAAS,IAAI;CAC7D;;CAGA,OAAc,MAAoB;EAC9B,MAAM,SAAS,KAAK,QAAQ,MAAM,MAAM,EAAE,SAAS,IAAI;EACvD,IAAI,QAAQ,OAAO,UAAU;CACjC;;CAGA,QAAe,MAAoB;EAC/B,MAAM,SAAS,KAAK,QAAQ,MAAM,MAAM,EAAE,SAAS,IAAI;EACvD,IAAI,QAAQ,OAAO,UAAU;CACjC;;CAGA,OAA2C;EACvC,OAAO,KAAK,QAAQ,QAAQ,MAAM,EAAE,YAAY,KAAK;CACzD;;;;;;;;;CAUA,OACI,QACA,MACA,MACgB;EAChB,MAAM,EAAE,OAAO,SAAS,UAAU,YAAY;EAC9C,MAAM,UAAU,KAAK,KAAK,EAAE,QAAQ,MAAM,UAAU,CAAC;EAIrD,IAAI,QAAQ,WAAW,GACnB,OAAQ,SAAkB,GAAG,IAAI;EAGrC,IAAI,SAAS,SAAS;GAClB,MAAM,KAAK,QAAQ,GAAG;GACtB,OAAO,GAAG,GAAG,IAAI;EACrB;EAEA,MAAM,kBACF,GACA,SACC;EACL,MAAM,MAAM,WAAW;EAEvB,IAAI,MAAwB,QAAQ,GAAG,QAAS,GAAG,IAAI;EACvD,QAAQ,MAAM,CAAC,EAAE,SAAS,QAAQ,QAAQ;GACtC,MAAM,MAAM,OAAO,QAAS,GAAG,IAAI;GACnC,MAAM,IAAI,KAAK,KAAK,QAAQ,MAAM,CAAC;EACvC,CAAC;EACD,OAAO;CACX;;CAGA,UAAwB;EACpB,KAAK,QAAQ,MAAM,GAAG,OAAO,EAAE,YAAY,MAAM,EAAE,YAAY,EAAE;CACrE;AACJ"}

package/dist/plugins/index.cjs

@@ -0,0 +1,3 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_plugin = require("../plugin.cjs");
+exports.PluginManager = require_plugin.PluginManager;

package/dist/plugins/index.d.cts

@@ -0,0 +1,2 @@
+import { a as PluginContract, i as PipelineReducer, n as BasePlugin, r as InvokeOptions, t as PluginManager } from "../plugin.cjs";
+export { BasePlugin, InvokeOptions, PipelineReducer, PluginContract, PluginManager };

package/dist/plugins/index.d.ts

@@ -0,0 +1,2 @@
+import { a as PluginContract, i as PipelineReducer, n as BasePlugin, r as InvokeOptions, t as PluginManager } from "../plugin.js";
+export { BasePlugin, InvokeOptions, PipelineReducer, PluginContract, PluginManager };

package/dist/plugins/index.js

@@ -0,0 +1,2 @@
+import { t as PluginManager } from "../plugin.js";
+export { PluginManager };

package/dist/policies/engines/index.cjs

@@ -0,0 +1,10 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_gate_engine_registry = require("../../gate-engine-registry.cjs");
+exports.ComputeEngineRegistry = require_gate_engine_registry.ComputeEngineRegistry;
+exports.ComputeEvaluatorRegistry = require_gate_engine_registry.ComputeEvaluatorRegistry;
+exports.ComputePayloadParserRegistry = require_gate_engine_registry.ComputePayloadParserRegistry;
+exports.ComputePayloadParsers = require_gate_engine_registry.ComputePayloadParsers;
+exports.ComputeRegistry = require_gate_engine_registry.ComputeRegistry;
+exports.GateEngineRegistry = require_gate_engine_registry.GateEngineRegistry;
+exports.GatePayloadParserRegistry = require_gate_engine_registry.GatePayloadParserRegistry;
+exports.GatePayloadParsers = require_gate_engine_registry.GatePayloadParsers;

package/dist/policies/engines/index.d.cts

@@ -0,0 +1,4 @@
+import { A as ConditionEvaluationReportTag, D as ConditionEvaluationOptions, E as ConditionEvaluationCause, O as ConditionEvaluationReport, a as GateTraceNodeSnapshot, c as PolicyViolation, d as GatePayloadV1, i as GateTraceLeafSnapshot, j as ConditionEvaluatorReporter, k as ConditionEvaluationReportLevel, l as VersionedGateEngine, n as GateOutcomeData, o as GateViolationTrace, r as GateStatus, s as PolicyContext, t as GateOutcome, u as GatePayload } from "../../gate-types.cjs";
+import { a as ComputeOutcome, c as VersionedComputeEngine, d as ComputeDecisionTableRule, f as ComputeParamsPayload, i as ComputeEvaluatorRegistration, l as ComputePayload, n as ComputeRegistry, o as ComputeOutcomeData, p as ComputePayloadV1, r as ComputeEvaluator, s as ComputeStatus, t as GateEngineRegistry, u as ComputeDecisionTablePayload } from "../../gate-engine-registry.cjs";
+import { a as ComputePayloadParserRegistry, c as ComputeEvaluatorRegistry, i as ComputePayloadParser, n as GatePayloadParserRegistry, o as ComputePayloadParsers, r as GatePayloadParsers, s as ComputeEngineRegistry, t as GatePayloadParser } from "../../parse-gate-payload.cjs";
+export { ComputeDecisionTablePayload, ComputeDecisionTableRule, ComputeEngineRegistry, ComputeEvaluator, ComputeEvaluatorRegistration, ComputeEvaluatorRegistry, ComputeOutcome, ComputeOutcomeData, ComputeParamsPayload, ComputePayload, ComputePayloadParser, ComputePayloadParserRegistry, ComputePayloadParsers, ComputePayloadV1, ComputeRegistry, ComputeStatus, ConditionEvaluationCause, ConditionEvaluationOptions, ConditionEvaluationReport, ConditionEvaluationReportLevel, ConditionEvaluationReportTag, ConditionEvaluatorReporter, GateEngineRegistry, GateOutcome, GateOutcomeData, GatePayload, GatePayloadParser, GatePayloadParserRegistry, GatePayloadParsers, GatePayloadV1, GateStatus, GateTraceLeafSnapshot, GateTraceNodeSnapshot, GateViolationTrace, PolicyContext, PolicyViolation, VersionedComputeEngine, VersionedGateEngine };

package/dist/policies/engines/index.d.ts

@@ -1,4 +1,4 @@
-import { A as ConditionEvaluationReport, M as ConditionEvaluationReportTag, N as ConditionEvaluatorReporter, O as ConditionEvaluationCause, a as GateTraceNodeSnapshot, c as PolicyViolation, d as GatePayloadV1, i as GateTraceLeafSnapshot, j as ConditionEvaluationReportLevel, k as ConditionEvaluationOptions, l as VersionedGateEngine, n as GateOutcomeData, o as GateViolationTrace, r as GateStatus, s as PolicyContext, t as GateOutcome, u as GatePayload } from "../../gate-types.js";
+import { A as ConditionEvaluationReportTag, D as ConditionEvaluationOptions, E as ConditionEvaluationCause, O as ConditionEvaluationReport, a as GateTraceNodeSnapshot, c as PolicyViolation, d as GatePayloadV1, i as GateTraceLeafSnapshot, j as ConditionEvaluatorReporter, k as ConditionEvaluationReportLevel, l as VersionedGateEngine, n as GateOutcomeData, o as GateViolationTrace, r as GateStatus, s as PolicyContext, t as GateOutcome, u as GatePayload } from "../../gate-types.js";
 import { a as ComputeOutcome, c as VersionedComputeEngine, d as ComputeDecisionTableRule, f as ComputeParamsPayload, i as ComputeEvaluatorRegistration, l as ComputePayload, n as ComputeRegistry, o as ComputeOutcomeData, p as ComputePayloadV1, r as ComputeEvaluator, s as ComputeStatus, t as GateEngineRegistry, u as ComputeDecisionTablePayload } from "../../gate-engine-registry.js";
 import { a as ComputePayloadParserRegistry, c as ComputeEvaluatorRegistry, i as ComputePayloadParser, n as GatePayloadParserRegistry, o as ComputePayloadParsers, r as GatePayloadParsers, s as ComputeEngineRegistry, t as GatePayloadParser } from "../../parse-gate-payload.js";
 export { ComputeDecisionTablePayload, ComputeDecisionTableRule, ComputeEngineRegistry, ComputeEvaluator, ComputeEvaluatorRegistration, ComputeEvaluatorRegistry, ComputeOutcome, ComputeOutcomeData, ComputeParamsPayload, ComputePayload, ComputePayloadParser, ComputePayloadParserRegistry, ComputePayloadParsers, ComputePayloadV1, ComputeRegistry, ComputeStatus, ConditionEvaluationCause, ConditionEvaluationOptions, ConditionEvaluationReport, ConditionEvaluationReportLevel, ConditionEvaluationReportTag, ConditionEvaluatorReporter, GateEngineRegistry, GateOutcome, GateOutcomeData, GatePayload, GatePayloadParser, GatePayloadParserRegistry, GatePayloadParsers, GatePayloadV1, GateStatus, GateTraceLeafSnapshot, GateTraceNodeSnapshot, GateViolationTrace, PolicyContext, PolicyViolation, VersionedComputeEngine, VersionedGateEngine };

package/dist/policies/engines/v1/gate/index.cjs

@@ -0,0 +1,91 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_gate_v1_payload_schema = require("../../../../gate-v1-payload.schema.cjs");
+const require_result = require("../../../../result.cjs");
+const require_outcome = require("../../../../outcome.cjs");
+//#region src/core/policies/engines/v1/gate/gate-engine-v1.ts
+var GateEngineV1 = class {
+	constructor(params = {}) {
+		this.version = 1;
+		this.coreConfig = params.coreConfig ?? require_gate_v1_payload_schema.coreConfig;
+	}
+	allow() {
+		return require_result.Result.ok(require_outcome.Outcome.of("ALLOW", { violations: [] }));
+	}
+	deny(violation) {
+		return require_result.Result.ok(require_outcome.Outcome.of("DENY", { violations: [violation] }));
+	}
+	outcomeFromStatus(status, violation) {
+		return status === "ALLOW" ? this.allow() : this.deny(violation);
+	}
+	isLeafNode(node) {
+		return "field" in node && "op" in node;
+	}
+	toLeafSnapshot(node) {
+		return {
+			kind: "LEAF",
+			field: node.field,
+			op: node.op,
+			...node.allowNull === true ? { allowNull: true } : {}
+		};
+	}
+	toNodeSnapshot(node) {
+		if (this.isLeafNode(node)) return this.toLeafSnapshot(node);
+		if ("and" in node) return {
+			kind: "AND",
+			childCount: node.and.length
+		};
+		if ("or" in node) return {
+			kind: "OR",
+			childCount: node.or.length
+		};
+		return { kind: "NOT" };
+	}
+	buildDenyViolation(conditionResult) {
+		return {
+			code: "DENY_CONDITION_MET",
+			message: `Gate denied at ${conditionResult.trace.conditionPath}`,
+			trace: {
+				conditionPath: conditionResult.trace.conditionPath,
+				decisiveNode: this.toNodeSnapshot(conditionResult.trace.decisiveNode),
+				lastEvaluatedLeaf: this.toLeafSnapshot(conditionResult.trace.lastEvaluatedLeaf),
+				lastEvaluatedLeafPath: conditionResult.trace.lastEvaluatedLeafPath,
+				lastEvaluatedLeafResult: conditionResult.trace.lastEvaluatedLeafResult,
+				field: conditionResult.trace.lastEvaluatedLeaf.field,
+				op: conditionResult.trace.lastEvaluatedLeaf.op
+			}
+		};
+	}
+	normalizePayload(payload) {
+		if ("condition" in payload) return {
+			allowIf: payload.condition,
+			defaultOutcome: "DENY"
+		};
+		return payload;
+	}
+	/**
+	* Evaluates a GATE payload against a context object.
+	* Pure function — no side effects.
+	*
+	* Receives an already-parsed `GatePayload`; the registry is responsible
+	* for parsing from raw `unknown` before calling this method.
+	* Returns Result for technical failures (condition evaluation errors).
+	* The Outcome inside carries the business decision (ALLOW/DENY).
+	*/
+	evaluate(payload, context) {
+		const gatePayload = this.normalizePayload(payload);
+		const isAllowedResult = new require_gate_v1_payload_schema.ConditionEvaluatorV1(context, this.coreConfig.getConditionEvaluationOptions(this.version)).evaluateWithTrace(gatePayload.allowIf);
+		if (isAllowedResult.isErr()) return require_result.Result.err(isAllowedResult.errorOrNull());
+		const isAllowed = isAllowedResult.getOrNull();
+		if (isAllowed.matched) return this.allow();
+		return this.outcomeFromStatus(gatePayload.defaultOutcome, this.buildDenyViolation(isAllowed));
+	}
+};
+//#endregion
+exports.ConditionEvaluatorV1 = require_gate_v1_payload_schema.ConditionEvaluatorV1;
+exports.GateEngineV1 = GateEngineV1;
+exports.GatePayloadSchemaV1 = require_gate_v1_payload_schema.GatePayloadSchemaV1;
+exports.conditionLeafNodeSchema = require_gate_v1_payload_schema.conditionLeafNodeSchema;
+exports.conditionNodeSchema = require_gate_v1_payload_schema.conditionNodeSchema;
+exports.gatePayloadSchema = require_gate_v1_payload_schema.gatePayloadSchema;
+
+//# sourceMappingURL=index.cjs.map

package/dist/policies/engines/v1/gate/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["coreConfig","Result","Outcome","ConditionEvaluatorV1"],"sources":["../../../../../src/core/policies/engines/v1/gate/gate-engine-v1.ts"],"sourcesContent":["import { type CoreConfig, coreConfig } from \"../../../../config/index.js\";\nimport { Outcome } from \"../../../../result/outcome.js\";\nimport { Result } from \"../../../../result/result.js\";\n\nimport {\n    ConditionEvaluatorV1,\n    type TracedConditionEvaluation,\n} from \"../condition-evaluator.js\";\nimport type { ConditionLeafNode, ConditionNode } from \"../condition-types.js\";\nimport type { GatePayload } from \"../../gate-payload.js\";\nimport type {\n    GateOutcome,\n    GateStatus,\n    GateTraceLeafSnapshot,\n    GateTraceNodeSnapshot,\n    PolicyContext,\n    PolicyViolation,\n    VersionedGateEngine,\n} from \"../../gate-types.js\";\n\n// ─── Gate engine v1 ─────────────────────────────────────────────────────────\n\nexport class GateEngineV1 implements VersionedGateEngine {\n    public readonly version = 1;\n    private readonly coreConfig: CoreConfig;\n\n    constructor(params: { readonly coreConfig?: CoreConfig } = {}) {\n        this.coreConfig = params.coreConfig ?? coreConfig;\n    }\n\n    private allow(): Result<GateOutcome, string> {\n        return Result.ok(Outcome.of(\"ALLOW\", { violations: [] }));\n    }\n\n    private deny(violation: PolicyViolation): Result<GateOutcome, string> {\n        return Result.ok(\n            Outcome.of(\"DENY\", {\n                violations: [violation],\n            }),\n        );\n    }\n\n    private outcomeFromStatus(\n        status: GateStatus,\n        violation: PolicyViolation,\n    ): Result<GateOutcome, string> {\n        return status === \"ALLOW\" ? this.allow() : this.deny(violation);\n    }\n\n    private isLeafNode(node: ConditionNode): node is ConditionLeafNode {\n        return \"field\" in node && \"op\" in node;\n    }\n\n    private toLeafSnapshot(node: ConditionLeafNode): GateTraceLeafSnapshot {\n        return {\n            kind: \"LEAF\",\n            field: node.field,\n            op: node.op,\n            ...(node.allowNull === true ? { allowNull: true } : {}),\n        };\n    }\n\n    private toNodeSnapshot(node: ConditionNode): GateTraceNodeSnapshot {\n        if (this.isLeafNode(node)) {\n            return this.toLeafSnapshot(node);\n        }\n\n        if (\"and\" in node) {\n            return {\n                kind: \"AND\",\n                childCount: node.and.length,\n            };\n        }\n\n        if (\"or\" in node) {\n            return {\n                kind: \"OR\",\n                childCount: node.or.length,\n            };\n        }\n\n        return {\n            kind: \"NOT\",\n        };\n    }\n\n    private buildDenyViolation(\n        conditionResult: TracedConditionEvaluation,\n    ): PolicyViolation {\n        return {\n            code: \"DENY_CONDITION_MET\",\n            message: `Gate denied at ${conditionResult.trace.conditionPath}`,\n            trace: {\n                conditionPath: conditionResult.trace.conditionPath,\n                decisiveNode: this.toNodeSnapshot(\n                    conditionResult.trace.decisiveNode,\n                ),\n                lastEvaluatedLeaf: this.toLeafSnapshot(\n                    conditionResult.trace.lastEvaluatedLeaf,\n                ),\n                lastEvaluatedLeafPath:\n                    conditionResult.trace.lastEvaluatedLeafPath,\n                lastEvaluatedLeafResult:\n                    conditionResult.trace.lastEvaluatedLeafResult,\n                field: conditionResult.trace.lastEvaluatedLeaf.field,\n                op: conditionResult.trace.lastEvaluatedLeaf.op,\n            },\n        };\n    }\n\n    private normalizePayload(payload: GatePayload): {\n        readonly allowIf: ConditionNode;\n        readonly defaultOutcome: \"ALLOW\" | \"DENY\";\n    } {\n        if (\"condition\" in payload) {\n            return {\n                allowIf: payload.condition,\n                defaultOutcome: \"DENY\",\n            };\n        }\n\n        return payload;\n    }\n\n    /**\n     * Evaluates a GATE payload against a context object.\n     * Pure function — no side effects.\n     *\n     * Receives an already-parsed `GatePayload`; the registry is responsible\n     * for parsing from raw `unknown` before calling this method.\n     * Returns Result for technical failures (condition evaluation errors).\n     * The Outcome inside carries the business decision (ALLOW/DENY).\n     */\n    evaluate(\n        payload: GatePayload,\n        context: PolicyContext,\n    ): Result<GateOutcome, string> {\n        const gatePayload = this.normalizePayload(payload);\n        const conditionEvaluator = new ConditionEvaluatorV1(\n            context,\n            this.coreConfig.getConditionEvaluationOptions(this.version),\n        );\n\n        const isAllowedResult = conditionEvaluator.evaluateWithTrace(\n            gatePayload.allowIf,\n        );\n        if (isAllowedResult.isErr()) {\n            return Result.err(isAllowedResult.errorOrNull()!);\n        }\n\n        const isAllowed = isAllowedResult.getOrNull()!;\n        if (isAllowed.matched) {\n            return this.allow();\n        }\n\n        return this.outcomeFromStatus(\n            gatePayload.defaultOutcome,\n            this.buildDenyViolation(isAllowed),\n        );\n    }\n}\n"],"mappings":";;;;;AAsBA,IAAa,eAAb,MAAyD;CAIrD,YAAY,SAA+C,CAAC,GAAG;iBAHrC;EAItB,KAAK,aAAa,OAAO,cAAcA,+BAAAA;CAC3C;CAEA,QAA6C;EACzC,OAAOC,eAAAA,OAAO,GAAGC,gBAAAA,QAAQ,GAAG,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;CAC5D;CAEA,KAAa,WAAyD;EAClE,OAAOD,eAAAA,OAAO,GACVC,gBAAAA,QAAQ,GAAG,QAAQ,EACf,YAAY,CAAC,SAAS,EAC1B,CAAC,CACL;CACJ;CAEA,kBACI,QACA,WAC2B;EAC3B,OAAO,WAAW,UAAU,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS;CAClE;CAEA,WAAmB,MAAgD;EAC/D,OAAO,WAAW,QAAQ,QAAQ;CACtC;CAEA,eAAuB,MAAgD;EACnE,OAAO;GACH,MAAM;GACN,OAAO,KAAK;GACZ,IAAI,KAAK;GACT,GAAI,KAAK,cAAc,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;EACzD;CACJ;CAEA,eAAuB,MAA4C;EAC/D,IAAI,KAAK,WAAW,IAAI,GACpB,OAAO,KAAK,eAAe,IAAI;EAGnC,IAAI,SAAS,MACT,OAAO;GACH,MAAM;GACN,YAAY,KAAK,IAAI;EACzB;EAGJ,IAAI,QAAQ,MACR,OAAO;GACH,MAAM;GACN,YAAY,KAAK,GAAG;EACxB;EAGJ,OAAO,EACH,MAAM,MACV;CACJ;CAEA,mBACI,iBACe;EACf,OAAO;GACH,MAAM;GACN,SAAS,kBAAkB,gBAAgB,MAAM;GACjD,OAAO;IACH,eAAe,gBAAgB,MAAM;IACrC,cAAc,KAAK,eACf,gBAAgB,MAAM,YAC1B;IACA,mBAAmB,KAAK,eACpB,gBAAgB,MAAM,iBAC1B;IACA,uBACI,gBAAgB,MAAM;IAC1B,yBACI,gBAAgB,MAAM;IAC1B,OAAO,gBAAgB,MAAM,kBAAkB;IAC/C,IAAI,gBAAgB,MAAM,kBAAkB;GAChD;EACJ;CACJ;CAEA,iBAAyB,SAGvB;EACE,IAAI,eAAe,SACf,OAAO;GACH,SAAS,QAAQ;GACjB,gBAAgB;EACpB;EAGJ,OAAO;CACX;;;;;;;;;;CAWA,SACI,SACA,SAC2B;EAC3B,MAAM,cAAc,KAAK,iBAAiB,OAAO;EAMjD,MAAM,kBAAkB,IALOC,+BAAAA,qBAC3B,SACA,KAAK,WAAW,8BAA8B,KAAK,OAAO,CAGrB,EAAE,kBACvC,YAAY,OAChB;EACA,IAAI,gBAAgB,MAAM,GACtB,OAAOF,eAAAA,OAAO,IAAI,gBAAgB,YAAY,CAAE;EAGpD,MAAM,YAAY,gBAAgB,UAAU;EAC5C,IAAI,UAAU,SACV,OAAO,KAAK,MAAM;EAGtB,OAAO,KAAK,kBACR,YAAY,gBACZ,KAAK,mBAAmB,SAAS,CACrC;CACJ;AACJ"}

package/dist/policies/engines/v1/gate/index.d.cts

@@ -0,0 +1,121 @@
+import { a as Result } from "../../../../outcome.cjs";
+import { D as ConditionEvaluationOptions, d as GatePayloadV1, f as ConditionLeafNode, l as VersionedGateEngine, m as CoreConfig, p as ConditionNode, s as PolicyContext, t as GateOutcome, u as GatePayload } from "../../../../gate-types.cjs";
+import { z } from "zod";
+
+//#region src/core/policies/engines/v1/condition-evaluator.d.ts
+interface ConditionEvaluationTrace {
+  readonly conditionPath: string;
+  readonly decisiveNode: ConditionNode;
+  readonly lastEvaluatedLeaf: ConditionLeafNode;
+  readonly lastEvaluatedLeafPath: string;
+  readonly lastEvaluatedLeafResult: boolean;
+}
+interface TracedConditionEvaluation {
+  readonly matched: boolean;
+  readonly trace: ConditionEvaluationTrace;
+}
+declare class ConditionEvaluatorV1 {
+  private readonly context;
+  private readonly options;
+  constructor(context: PolicyContext, options: ConditionEvaluationOptions);
+  private static isLeafNode;
+  private static isAndNode;
+  private static isOrNode;
+  private static isNotNode;
+  private static isRelationalOperator;
+  private static describeError;
+  private static buildNullishNumericOperandMessage;
+  private static buildNullishDateOperandMessage;
+  private static buildInvalidDateOperandMessage;
+  private static buildInvalidNumericOperandMessage;
+  private static buildInvalidSetOperandMessage;
+  private static buildEmptyOrConditionMessage;
+  private static buildEmptyAndConditionMessage;
+  private static parseComparableDate;
+  private static evaluateRelationalNumbers;
+  private buildReport;
+  private conditionEvalErr;
+  private reportDateOperandError;
+  private reportInvalidNumericOperand;
+  private reportInvalidSetOperand;
+  private evaluateDateRelationalNode;
+  private evaluateOperator;
+  private evaluateNumericRelationalNode;
+  private evaluateLeafNode;
+  private buildTrace;
+  private evaluateWithTraceInternal;
+  evaluate(node: ConditionNode): Result<boolean, string>;
+  evaluateWithTrace(node: ConditionNode): Result<TracedConditionEvaluation, string>;
+  static extractFields(node: ConditionNode): string[];
+}
+//#endregion
+//#region src/core/policies/engines/v1/gate/gate-engine-v1.d.ts
+declare class GateEngineV1 implements VersionedGateEngine {
+  readonly version = 1;
+  private readonly coreConfig;
+  constructor(params?: {
+    readonly coreConfig?: CoreConfig;
+  });
+  private allow;
+  private deny;
+  private outcomeFromStatus;
+  private isLeafNode;
+  private toLeafSnapshot;
+  private toNodeSnapshot;
+  private buildDenyViolation;
+  private normalizePayload;
+  /**
+   * Evaluates a GATE payload against a context object.
+   * Pure function — no side effects.
+   *
+   * Receives an already-parsed `GatePayload`; the registry is responsible
+   * for parsing from raw `unknown` before calling this method.
+   * Returns Result for technical failures (condition evaluation errors).
+   * The Outcome inside carries the business decision (ALLOW/DENY).
+   */
+  evaluate(payload: GatePayload, context: PolicyContext): Result<GateOutcome, string>;
+}
+//#endregion
+//#region src/core/policies/engines/v1/condition-schema.d.ts
+declare const conditionLeafNodeSchema: z.ZodType<ConditionLeafNode>;
+declare const conditionNodeSchema: z.ZodType<ConditionNode>;
+//#endregion
+//#region src/core/policies/engines/v1/gate/gate-v1-payload.schema.d.ts
+declare class GatePayloadSchemaV1 {
+  static readonly schema: z.ZodUnion<[z.ZodObject<{
+    condition: z.ZodType<ConditionNode, z.ZodTypeDef, ConditionNode>;
+  }, "strict", z.ZodTypeAny, {
+    condition: ConditionNode;
+  }, {
+    condition: ConditionNode;
+  }>, z.ZodObject<{
+    allowIf: z.ZodType<ConditionNode, z.ZodTypeDef, ConditionNode>;
+    defaultOutcome: z.ZodEnum<["ALLOW", "DENY"]>;
+  }, "strict", z.ZodTypeAny, {
+    allowIf: ConditionNode;
+    defaultOutcome: "ALLOW" | "DENY";
+  }, {
+    allowIf: ConditionNode;
+    defaultOutcome: "ALLOW" | "DENY";
+  }>]>;
+  static parse(payload: unknown): Result<GatePayloadV1, string>;
+}
+declare const gatePayloadSchema: z.ZodUnion<[z.ZodObject<{
+  condition: z.ZodType<ConditionNode, z.ZodTypeDef, ConditionNode>;
+}, "strict", z.ZodTypeAny, {
+  condition: ConditionNode;
+}, {
+  condition: ConditionNode;
+}>, z.ZodObject<{
+  allowIf: z.ZodType<ConditionNode, z.ZodTypeDef, ConditionNode>;
+  defaultOutcome: z.ZodEnum<["ALLOW", "DENY"]>;
+}, "strict", z.ZodTypeAny, {
+  allowIf: ConditionNode;
+  defaultOutcome: "ALLOW" | "DENY";
+}, {
+  allowIf: ConditionNode;
+  defaultOutcome: "ALLOW" | "DENY";
+}>]>;
+//#endregion
+export { ConditionEvaluatorV1, GateEngineV1, GatePayloadSchemaV1, GatePayloadV1, conditionLeafNodeSchema, conditionNodeSchema, gatePayloadSchema };
+//# sourceMappingURL=index.d.cts.map

package/dist/policies/engines/v1/gate/index.d.ts

@@ -1,4 +1,5 @@
-import { I as Result, d as GatePayloadV1, f as ConditionLeafNode, g as CoreConfig, k as ConditionEvaluationOptions, l as VersionedGateEngine, p as ConditionNode, s as PolicyContext, t as GateOutcome, u as GatePayload } from "../../../../gate-types.js";
+import { a as Result } from "../../../../outcome.js";
+import { D as ConditionEvaluationOptions, d as GatePayloadV1, f as ConditionLeafNode, l as VersionedGateEngine, m as CoreConfig, p as ConditionNode, s as PolicyContext, t as GateOutcome, u as GatePayload } from "../../../../gate-types.js";
 import { z } from "zod";
 
 //#region src/core/policies/engines/v1/condition-evaluator.d.ts

package/dist/policies/engines/v1/gate/index.js

@@ -1,4 +1,5 @@
-import { a as conditionNodeSchema, i as conditionLeafNodeSchema, l as Result, n as gatePayloadSchema, r as ConditionEvaluatorV1, t as GatePayloadSchemaV1, u as coreConfig } from "../../../../gate-v1-payload.schema.js";
+import { a as conditionNodeSchema, i as conditionLeafNodeSchema, n as gatePayloadSchema, r as ConditionEvaluatorV1, s as coreConfig, t as GatePayloadSchemaV1 } from "../../../../gate-v1-payload.schema.js";
+import { r as Result } from "../../../../result.js";
 import { t as Outcome } from "../../../../outcome.js";
 //#region src/core/policies/engines/v1/gate/gate-engine-v1.ts
 var GateEngineV1 = class {

package/dist/policies/engines/v1/gate/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../../../src/core/policies/engines/v1/gate/gate-engine-v1.ts"],"sourcesContent":["import { type CoreConfig, coreConfig } from \"../../../../config/index.js\";\nimport { Outcome } from \"../../../../result/outcome.js\";\nimport { Result } from \"../../../../result/result.js\";\n\nimport {\n    ConditionEvaluatorV1,\n    type TracedConditionEvaluation,\n} from \"../condition-evaluator.js\";\nimport type { ConditionLeafNode, ConditionNode } from \"../condition-types.js\";\nimport type { GatePayload } from \"../../gate-payload.js\";\nimport type {\n    GateOutcome,\n    GateStatus,\n    GateTraceLeafSnapshot,\n    GateTraceNodeSnapshot,\n    PolicyContext,\n    PolicyViolation,\n    VersionedGateEngine,\n} from \"../../gate-types.js\";\n\n// ─── Gate engine v1 ─────────────────────────────────────────────────────────\n\nexport class GateEngineV1 implements VersionedGateEngine {\n    public readonly version = 1;\n    private readonly coreConfig: CoreConfig;\n\n    constructor(params: { readonly coreConfig?: CoreConfig } = {}) {\n        this.coreConfig = params.coreConfig ?? coreConfig;\n    }\n\n    private allow(): Result<GateOutcome, string> {\n        return Result.ok(Outcome.of(\"ALLOW\", { violations: [] }));\n    }\n\n    private deny(violation: PolicyViolation): Result<GateOutcome, string> {\n        return Result.ok(\n            Outcome.of(\"DENY\", {\n                violations: [violation],\n            }),\n        );\n    }\n\n    private outcomeFromStatus(\n        status: GateStatus,\n        violation: PolicyViolation,\n    ): Result<GateOutcome, string> {\n        return status === \"ALLOW\" ? this.allow() : this.deny(violation);\n    }\n\n    private isLeafNode(node: ConditionNode): node is ConditionLeafNode {\n        return \"field\" in node && \"op\" in node;\n    }\n\n    private toLeafSnapshot(node: ConditionLeafNode): GateTraceLeafSnapshot {\n        return {\n            kind: \"LEAF\",\n            field: node.field,\n            op: node.op,\n            ...(node.allowNull === true ? { allowNull: true } : {}),\n        };\n    }\n\n    private toNodeSnapshot(node: ConditionNode): GateTraceNodeSnapshot {\n        if (this.isLeafNode(node)) {\n            return this.toLeafSnapshot(node);\n        }\n\n        if (\"and\" in node) {\n            return {\n                kind: \"AND\",\n                childCount: node.and.length,\n            };\n        }\n\n        if (\"or\" in node) {\n            return {\n                kind: \"OR\",\n                childCount: node.or.length,\n            };\n        }\n\n        return {\n            kind: \"NOT\",\n        };\n    }\n\n    private buildDenyViolation(\n        conditionResult: TracedConditionEvaluation,\n    ): PolicyViolation {\n        return {\n            code: \"DENY_CONDITION_MET\",\n            message: `Gate denied at ${conditionResult.trace.conditionPath}`,\n            trace: {\n                conditionPath: conditionResult.trace.conditionPath,\n                decisiveNode: this.toNodeSnapshot(\n                    conditionResult.trace.decisiveNode,\n                ),\n                lastEvaluatedLeaf: this.toLeafSnapshot(\n                    conditionResult.trace.lastEvaluatedLeaf,\n                ),\n                lastEvaluatedLeafPath:\n                    conditionResult.trace.lastEvaluatedLeafPath,\n                lastEvaluatedLeafResult:\n                    conditionResult.trace.lastEvaluatedLeafResult,\n                field: conditionResult.trace.lastEvaluatedLeaf.field,\n                op: conditionResult.trace.lastEvaluatedLeaf.op,\n            },\n        };\n    }\n\n    private normalizePayload(payload: GatePayload): {\n        readonly allowIf: ConditionNode;\n        readonly defaultOutcome: \"ALLOW\" | \"DENY\";\n    } {\n        if (\"condition\" in payload) {\n            return {\n                allowIf: payload.condition,\n                defaultOutcome: \"DENY\",\n            };\n        }\n\n        return payload;\n    }\n\n    /**\n     * Evaluates a GATE payload against a context object.\n     * Pure function — no side effects.\n     *\n     * Receives an already-parsed `GatePayload`; the registry is responsible\n     * for parsing from raw `unknown` before calling this method.\n     * Returns Result for technical failures (condition evaluation errors).\n     * The Outcome inside carries the business decision (ALLOW/DENY).\n     */\n    evaluate(\n        payload: GatePayload,\n        context: PolicyContext,\n    ): Result<GateOutcome, string> {\n        const gatePayload = this.normalizePayload(payload);\n        const conditionEvaluator = new ConditionEvaluatorV1(\n            context,\n            this.coreConfig.getConditionEvaluationOptions(this.version),\n        );\n\n        const isAllowedResult = conditionEvaluator.evaluateWithTrace(\n            gatePayload.allowIf,\n        );\n        if (isAllowedResult.isErr()) {\n            return Result.err(isAllowedResult.errorOrNull()!);\n        }\n\n        const isAllowed = isAllowedResult.getOrNull()!;\n        if (isAllowed.matched) {\n            return this.allow();\n        }\n\n        return this.outcomeFromStatus(\n            gatePayload.defaultOutcome,\n            this.buildDenyViolation(isAllowed),\n        );\n    }\n}\n"],"mappings":";;;AAsBA,IAAa,eAAb,MAAyD;CAIrD,YAAY,SAA+C,CAAC,GAAG;iBAHrC;EAItB,KAAK,aAAa,OAAO,cAAc;CAC3C;CAEA,QAA6C;EACzC,OAAO,OAAO,GAAG,QAAQ,GAAG,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;CAC5D;CAEA,KAAa,WAAyD;EAClE,OAAO,OAAO,GACV,QAAQ,GAAG,QAAQ,EACf,YAAY,CAAC,SAAS,EAC1B,CAAC,CACL;CACJ;CAEA,kBACI,QACA,WAC2B;EAC3B,OAAO,WAAW,UAAU,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS;CAClE;CAEA,WAAmB,MAAgD;EAC/D,OAAO,WAAW,QAAQ,QAAQ;CACtC;CAEA,eAAuB,MAAgD;EACnE,OAAO;GACH,MAAM;GACN,OAAO,KAAK;GACZ,IAAI,KAAK;GACT,GAAI,KAAK,cAAc,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;EACzD;CACJ;CAEA,eAAuB,MAA4C;EAC/D,IAAI,KAAK,WAAW,IAAI,GACpB,OAAO,KAAK,eAAe,IAAI;EAGnC,IAAI,SAAS,MACT,OAAO;GACH,MAAM;GACN,YAAY,KAAK,IAAI;EACzB;EAGJ,IAAI,QAAQ,MACR,OAAO;GACH,MAAM;GACN,YAAY,KAAK,GAAG;EACxB;EAGJ,OAAO,EACH,MAAM,MACV;CACJ;CAEA,mBACI,iBACe;EACf,OAAO;GACH,MAAM;GACN,SAAS,kBAAkB,gBAAgB,MAAM;GACjD,OAAO;IACH,eAAe,gBAAgB,MAAM;IACrC,cAAc,KAAK,eACf,gBAAgB,MAAM,YAC1B;IACA,mBAAmB,KAAK,eACpB,gBAAgB,MAAM,iBAC1B;IACA,uBACI,gBAAgB,MAAM;IAC1B,yBACI,gBAAgB,MAAM;IAC1B,OAAO,gBAAgB,MAAM,kBAAkB;IAC/C,IAAI,gBAAgB,MAAM,kBAAkB;GAChD;EACJ;CACJ;CAEA,iBAAyB,SAGvB;EACE,IAAI,eAAe,SACf,OAAO;GACH,SAAS,QAAQ;GACjB,gBAAgB;EACpB;EAGJ,OAAO;CACX;;;;;;;;;;CAWA,SACI,SACA,SAC2B;EAC3B,MAAM,cAAc,KAAK,iBAAiB,OAAO;EAMjD,MAAM,kBAAkB,IALO,qBAC3B,SACA,KAAK,WAAW,8BAA8B,KAAK,OAAO,CAGrB,EAAE,kBACvC,YAAY,OAChB;EACA,IAAI,gBAAgB,MAAM,GACtB,OAAO,OAAO,IAAI,gBAAgB,YAAY,CAAE;EAGpD,MAAM,YAAY,gBAAgB,UAAU;EAC5C,IAAI,UAAU,SACV,OAAO,KAAK,MAAM;EAGtB,OAAO,KAAK,kBACR,YAAY,gBACZ,KAAK,mBAAmB,SAAS,CACrC;CACJ;AACJ"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../../../src/core/policies/engines/v1/gate/gate-engine-v1.ts"],"sourcesContent":["import { type CoreConfig, coreConfig } from \"../../../../config/index.js\";\nimport { Outcome } from \"../../../../result/outcome.js\";\nimport { Result } from \"../../../../result/result.js\";\n\nimport {\n    ConditionEvaluatorV1,\n    type TracedConditionEvaluation,\n} from \"../condition-evaluator.js\";\nimport type { ConditionLeafNode, ConditionNode } from \"../condition-types.js\";\nimport type { GatePayload } from \"../../gate-payload.js\";\nimport type {\n    GateOutcome,\n    GateStatus,\n    GateTraceLeafSnapshot,\n    GateTraceNodeSnapshot,\n    PolicyContext,\n    PolicyViolation,\n    VersionedGateEngine,\n} from \"../../gate-types.js\";\n\n// ─── Gate engine v1 ─────────────────────────────────────────────────────────\n\nexport class GateEngineV1 implements VersionedGateEngine {\n    public readonly version = 1;\n    private readonly coreConfig: CoreConfig;\n\n    constructor(params: { readonly coreConfig?: CoreConfig } = {}) {\n        this.coreConfig = params.coreConfig ?? coreConfig;\n    }\n\n    private allow(): Result<GateOutcome, string> {\n        return Result.ok(Outcome.of(\"ALLOW\", { violations: [] }));\n    }\n\n    private deny(violation: PolicyViolation): Result<GateOutcome, string> {\n        return Result.ok(\n            Outcome.of(\"DENY\", {\n                violations: [violation],\n            }),\n        );\n    }\n\n    private outcomeFromStatus(\n        status: GateStatus,\n        violation: PolicyViolation,\n    ): Result<GateOutcome, string> {\n        return status === \"ALLOW\" ? this.allow() : this.deny(violation);\n    }\n\n    private isLeafNode(node: ConditionNode): node is ConditionLeafNode {\n        return \"field\" in node && \"op\" in node;\n    }\n\n    private toLeafSnapshot(node: ConditionLeafNode): GateTraceLeafSnapshot {\n        return {\n            kind: \"LEAF\",\n            field: node.field,\n            op: node.op,\n            ...(node.allowNull === true ? { allowNull: true } : {}),\n        };\n    }\n\n    private toNodeSnapshot(node: ConditionNode): GateTraceNodeSnapshot {\n        if (this.isLeafNode(node)) {\n            return this.toLeafSnapshot(node);\n        }\n\n        if (\"and\" in node) {\n            return {\n                kind: \"AND\",\n                childCount: node.and.length,\n            };\n        }\n\n        if (\"or\" in node) {\n            return {\n                kind: \"OR\",\n                childCount: node.or.length,\n            };\n        }\n\n        return {\n            kind: \"NOT\",\n        };\n    }\n\n    private buildDenyViolation(\n        conditionResult: TracedConditionEvaluation,\n    ): PolicyViolation {\n        return {\n            code: \"DENY_CONDITION_MET\",\n            message: `Gate denied at ${conditionResult.trace.conditionPath}`,\n            trace: {\n                conditionPath: conditionResult.trace.conditionPath,\n                decisiveNode: this.toNodeSnapshot(\n                    conditionResult.trace.decisiveNode,\n                ),\n                lastEvaluatedLeaf: this.toLeafSnapshot(\n                    conditionResult.trace.lastEvaluatedLeaf,\n                ),\n                lastEvaluatedLeafPath:\n                    conditionResult.trace.lastEvaluatedLeafPath,\n                lastEvaluatedLeafResult:\n                    conditionResult.trace.lastEvaluatedLeafResult,\n                field: conditionResult.trace.lastEvaluatedLeaf.field,\n                op: conditionResult.trace.lastEvaluatedLeaf.op,\n            },\n        };\n    }\n\n    private normalizePayload(payload: GatePayload): {\n        readonly allowIf: ConditionNode;\n        readonly defaultOutcome: \"ALLOW\" | \"DENY\";\n    } {\n        if (\"condition\" in payload) {\n            return {\n                allowIf: payload.condition,\n                defaultOutcome: \"DENY\",\n            };\n        }\n\n        return payload;\n    }\n\n    /**\n     * Evaluates a GATE payload against a context object.\n     * Pure function — no side effects.\n     *\n     * Receives an already-parsed `GatePayload`; the registry is responsible\n     * for parsing from raw `unknown` before calling this method.\n     * Returns Result for technical failures (condition evaluation errors).\n     * The Outcome inside carries the business decision (ALLOW/DENY).\n     */\n    evaluate(\n        payload: GatePayload,\n        context: PolicyContext,\n    ): Result<GateOutcome, string> {\n        const gatePayload = this.normalizePayload(payload);\n        const conditionEvaluator = new ConditionEvaluatorV1(\n            context,\n            this.coreConfig.getConditionEvaluationOptions(this.version),\n        );\n\n        const isAllowedResult = conditionEvaluator.evaluateWithTrace(\n            gatePayload.allowIf,\n        );\n        if (isAllowedResult.isErr()) {\n            return Result.err(isAllowedResult.errorOrNull()!);\n        }\n\n        const isAllowed = isAllowedResult.getOrNull()!;\n        if (isAllowed.matched) {\n            return this.allow();\n        }\n\n        return this.outcomeFromStatus(\n            gatePayload.defaultOutcome,\n            this.buildDenyViolation(isAllowed),\n        );\n    }\n}\n"],"mappings":";;;;AAsBA,IAAa,eAAb,MAAyD;CAIrD,YAAY,SAA+C,CAAC,GAAG;iBAHrC;EAItB,KAAK,aAAa,OAAO,cAAc;CAC3C;CAEA,QAA6C;EACzC,OAAO,OAAO,GAAG,QAAQ,GAAG,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;CAC5D;CAEA,KAAa,WAAyD;EAClE,OAAO,OAAO,GACV,QAAQ,GAAG,QAAQ,EACf,YAAY,CAAC,SAAS,EAC1B,CAAC,CACL;CACJ;CAEA,kBACI,QACA,WAC2B;EAC3B,OAAO,WAAW,UAAU,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS;CAClE;CAEA,WAAmB,MAAgD;EAC/D,OAAO,WAAW,QAAQ,QAAQ;CACtC;CAEA,eAAuB,MAAgD;EACnE,OAAO;GACH,MAAM;GACN,OAAO,KAAK;GACZ,IAAI,KAAK;GACT,GAAI,KAAK,cAAc,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;EACzD;CACJ;CAEA,eAAuB,MAA4C;EAC/D,IAAI,KAAK,WAAW,IAAI,GACpB,OAAO,KAAK,eAAe,IAAI;EAGnC,IAAI,SAAS,MACT,OAAO;GACH,MAAM;GACN,YAAY,KAAK,IAAI;EACzB;EAGJ,IAAI,QAAQ,MACR,OAAO;GACH,MAAM;GACN,YAAY,KAAK,GAAG;EACxB;EAGJ,OAAO,EACH,MAAM,MACV;CACJ;CAEA,mBACI,iBACe;EACf,OAAO;GACH,MAAM;GACN,SAAS,kBAAkB,gBAAgB,MAAM;GACjD,OAAO;IACH,eAAe,gBAAgB,MAAM;IACrC,cAAc,KAAK,eACf,gBAAgB,MAAM,YAC1B;IACA,mBAAmB,KAAK,eACpB,gBAAgB,MAAM,iBAC1B;IACA,uBACI,gBAAgB,MAAM;IAC1B,yBACI,gBAAgB,MAAM;IAC1B,OAAO,gBAAgB,MAAM,kBAAkB;IAC/C,IAAI,gBAAgB,MAAM,kBAAkB;GAChD;EACJ;CACJ;CAEA,iBAAyB,SAGvB;EACE,IAAI,eAAe,SACf,OAAO;GACH,SAAS,QAAQ;GACjB,gBAAgB;EACpB;EAGJ,OAAO;CACX;;;;;;;;;;CAWA,SACI,SACA,SAC2B;EAC3B,MAAM,cAAc,KAAK,iBAAiB,OAAO;EAMjD,MAAM,kBAAkB,IALO,qBAC3B,SACA,KAAK,WAAW,8BAA8B,KAAK,OAAO,CAGrB,EAAE,kBACvC,YAAY,OAChB;EACA,IAAI,gBAAgB,MAAM,GACtB,OAAO,OAAO,IAAI,gBAAgB,YAAY,CAAE;EAGpD,MAAM,YAAY,gBAAgB,UAAU;EAC5C,IAAI,UAAU,SACV,OAAO,KAAK,MAAM;EAGtB,OAAO,KAAK,kBACR,YAAY,gBACZ,KAAK,mBAAmB,SAAS,CACrC;CACJ;AACJ"}

package/dist/policies/index.cjs

@@ -0,0 +1,41 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_gate_v1_payload_schema = require("../gate-v1-payload.schema.cjs");
+const require_result = require("../result.cjs");
+const require_outcome = require("../outcome.cjs");
+const require_policy_service = require("../policy-service.cjs");
+const require_gate_engine_registry = require("../gate-engine-registry.cjs");
+exports.ComputeEngineRegistry = require_gate_engine_registry.ComputeEngineRegistry;
+exports.ComputeEvaluatorRegistry = require_gate_engine_registry.ComputeEvaluatorRegistry;
+exports.ComputePayloadParserRegistry = require_gate_engine_registry.ComputePayloadParserRegistry;
+exports.ComputePayloadParsers = require_gate_engine_registry.ComputePayloadParsers;
+exports.ComputeRegistry = require_gate_engine_registry.ComputeRegistry;
+exports.ContextResolverRegistry = require_policy_service.ContextResolverRegistry;
+exports.ContextSeedValidator = require_policy_service.ContextSeedValidator;
+exports.CoreConfig = require_gate_v1_payload_schema.CoreConfig;
+exports.Err = require_result.Err;
+exports.GateEngineRegistry = require_gate_engine_registry.GateEngineRegistry;
+exports.GatePayloadParsers = require_gate_engine_registry.GatePayloadParsers;
+exports.InMemoryPolicyDefinitionRepository = require_policy_service.InMemoryPolicyDefinitionRepository;
+exports.Ok = require_result.Ok;
+exports.Outcome = require_outcome.Outcome;
+exports.PolicyAsOfResolver = require_policy_service.PolicyAsOfResolver;
+exports.PolicyCatalog = require_policy_service.PolicyCatalog;
+exports.PolicyCatalogFactory = require_policy_service.PolicyCatalogFactory;
+exports.PolicyContextBuilder = require_policy_service.PolicyContextBuilder;
+exports.PolicyContextPath = require_gate_v1_payload_schema.PolicyContextPath;
+exports.PolicyDefinition = require_policy_service.PolicyDefinition;
+exports.PolicyEvaluationErrors = require_policy_service.PolicyEvaluationErrors;
+exports.PolicyHashing = require_policy_service.PolicyHashing;
+exports.PolicyKey = require_policy_service.PolicyKey;
+exports.PolicyResolver = require_policy_service.PolicyResolver;
+exports.PolicyScopeMatcher = require_policy_service.PolicyScopeMatcher;
+exports.PolicyService = require_policy_service.PolicyService;
+exports.Result = require_result.Result;
+exports.asPolicyDecisionId = require_policy_service.asPolicyDecisionId;
+exports.asPolicyDefinitionId = require_policy_service.asPolicyDefinitionId;
+exports.asSchoolId = require_policy_service.asSchoolId;
+exports.asTenantId = require_policy_service.asTenantId;
+exports.contextResolverRegistry = require_policy_service.contextResolverRegistry;
+exports.coreConfig = require_gate_v1_payload_schema.coreConfig;
+exports.registerNamespacedContextResolvers = require_policy_service.registerNamespacedContextResolvers;
+exports.registerNamespacedContextResolversIn = require_policy_service.registerNamespacedContextResolversIn;

package/dist/policies/index.d.cts

@@ -0,0 +1,7 @@
+import { a as Result, i as Ok, n as Outcome, r as Err, t as CommonOutcomeStatus } from "../outcome.cjs";
+import { A as ConditionEvaluationReportTag, C as asPolicyDefinitionId, D as ConditionEvaluationOptions, E as ConditionEvaluationCause, O as ConditionEvaluationReport, S as asPolicyDecisionId, T as asTenantId, a as GateTraceNodeSnapshot, b as SchoolId, c as PolicyViolation, g as CoreObservabilityConfig, h as CoreConfigOptions, i as GateTraceLeafSnapshot, j as ConditionEvaluatorReporter, k as ConditionEvaluationReportLevel, l as VersionedGateEngine, m as CoreConfig, n as GateOutcomeData, o as GateViolationTrace, r as GateStatus, s as PolicyContext, t as GateOutcome, u as GatePayload, v as PolicyDecisionId, w as asSchoolId, x as TenantId, y as PolicyDefinitionId } from "../gate-types.cjs";
+import { a as PolicyPackage, c as coreConfig, i as PolicyCatalogFactory, n as contextResolverRegistry, o as InMemoryPolicyDefinitionRepository, r as registerNamespacedContextResolvers, s as PolicyHashing, t as PolicyContextPath } from "../path.cjs";
+import { A as PolicyScope, C as BasePolicyDefinitionProps, D as PolicyDefinition, E as GatePolicyDefinitionProps, F as PolicyKey, I as AsOfSource, L as PolicyKind, M as ScopeChain, N as PolicyCatalog, O as PolicyDefinitionProps, P as PolicyCatalogEntryProps, R as PolicyOwner, T as FindCandidatesParams, _ as ContextResolverResilienceOptions, a as PolicyServiceOptions, b as ContextSeed, c as PolicyEvaluationErrors, d as PolicyAsOfResolver, f as PolicyContextBuilder, g as ContextResolverCircuitBreakerOptions, h as registerNamespacedContextResolversIn, i as PolicyService, j as PolicyScopeMatcher, k as PolicyDefinitionStatus, l as PolicyResolver, m as ContextResolverRegistry, n as PolicyDecision, o as PolicyServiceParams, p as PolicyContextBuilderOptions, r as PolicyEvaluationResult, s as PolicyEvaluationError, t as EvaluateInput, u as DeriveAsOfOptions, v as ContextResolverRetryOptions, w as ComputePolicyDefinitionProps, x as ContextSeedValidator, y as ContextValueResolver, z as PolicyScopeLevel } from "../policy-service.cjs";
+import { a as ComputeOutcome, c as VersionedComputeEngine, i as ComputeEvaluatorRegistration, n as ComputeRegistry, o as ComputeOutcomeData, r as ComputeEvaluator, s as ComputeStatus, t as GateEngineRegistry } from "../gate-engine-registry.cjs";
+import { a as ComputePayloadParserRegistry, c as ComputeEvaluatorRegistry, o as ComputePayloadParsers, r as GatePayloadParsers, s as ComputeEngineRegistry } from "../parse-gate-payload.cjs";
+export { AsOfSource, BasePolicyDefinitionProps, CommonOutcomeStatus, ComputeEngineRegistry, ComputeEvaluator, ComputeEvaluatorRegistration, ComputeEvaluatorRegistry, ComputeOutcome, ComputeOutcomeData, ComputePayloadParserRegistry, ComputePayloadParsers, ComputePolicyDefinitionProps, ComputeRegistry, ComputeStatus, ConditionEvaluationCause, ConditionEvaluationOptions, ConditionEvaluationReport, ConditionEvaluationReportLevel, ConditionEvaluationReportTag, ConditionEvaluatorReporter, ContextResolverCircuitBreakerOptions, ContextResolverRegistry, ContextResolverResilienceOptions, ContextResolverRetryOptions, ContextSeed, ContextSeedValidator, ContextValueResolver, CoreConfig, CoreConfigOptions, CoreObservabilityConfig, DeriveAsOfOptions, Err, EvaluateInput, FindCandidatesParams, GateEngineRegistry, GateOutcome, GateOutcomeData, GatePayload, GatePayloadParsers, GatePolicyDefinitionProps, GateStatus, GateTraceLeafSnapshot, GateTraceNodeSnapshot, GateViolationTrace, InMemoryPolicyDefinitionRepository, Ok, Outcome, PolicyAsOfResolver, PolicyCatalog, PolicyCatalogEntryProps, PolicyCatalogFactory, PolicyContext, PolicyContextBuilder, PolicyContextBuilderOptions, PolicyContextPath, PolicyDecision, PolicyDecisionId, PolicyDefinition, PolicyDefinitionId, PolicyDefinitionProps, PolicyDefinitionStatus, PolicyEvaluationError, PolicyEvaluationErrors, PolicyEvaluationResult, PolicyHashing, PolicyKey, PolicyKind, PolicyOwner, PolicyPackage, PolicyResolver, PolicyScope, PolicyScopeLevel, PolicyScopeMatcher, PolicyService, PolicyServiceOptions, PolicyServiceParams, PolicyViolation, Result, SchoolId, ScopeChain, TenantId, VersionedComputeEngine, VersionedGateEngine, asPolicyDecisionId, asPolicyDefinitionId, asSchoolId, asTenantId, contextResolverRegistry, coreConfig, registerNamespacedContextResolvers, registerNamespacedContextResolversIn };

package/dist/policies/index.d.ts

@@ -1,4 +1,5 @@
-import { A as ConditionEvaluationReport, C as TenantId, D as asTenantId, E as asSchoolId, F as Ok, I as Result, M as ConditionEvaluationReportTag, N as ConditionEvaluatorReporter, O as ConditionEvaluationCause, P as Err, S as SchoolId, T as asPolicyDefinitionId, _ as CoreConfigOptions, a as GateTraceNodeSnapshot, b as PolicyDecisionId, c as PolicyViolation, g as CoreConfig, h as Outcome, i as GateTraceLeafSnapshot, j as ConditionEvaluationReportLevel, k as ConditionEvaluationOptions, l as VersionedGateEngine, m as CommonOutcomeStatus, n as GateOutcomeData, o as GateViolationTrace, r as GateStatus, s as PolicyContext, t as GateOutcome, u as GatePayload, v as CoreObservabilityConfig, w as asPolicyDecisionId, x as PolicyDefinitionId } from "../gate-types.js";
+import { a as Result, i as Ok, n as Outcome, r as Err, t as CommonOutcomeStatus } from "../outcome.js";
+import { A as ConditionEvaluationReportTag, C as asPolicyDefinitionId, D as ConditionEvaluationOptions, E as ConditionEvaluationCause, O as ConditionEvaluationReport, S as asPolicyDecisionId, T as asTenantId, a as GateTraceNodeSnapshot, b as SchoolId, c as PolicyViolation, g as CoreObservabilityConfig, h as CoreConfigOptions, i as GateTraceLeafSnapshot, j as ConditionEvaluatorReporter, k as ConditionEvaluationReportLevel, l as VersionedGateEngine, m as CoreConfig, n as GateOutcomeData, o as GateViolationTrace, r as GateStatus, s as PolicyContext, t as GateOutcome, u as GatePayload, v as PolicyDecisionId, w as asSchoolId, x as TenantId, y as PolicyDefinitionId } from "../gate-types.js";
 import { a as PolicyPackage, c as coreConfig, i as PolicyCatalogFactory, n as contextResolverRegistry, o as InMemoryPolicyDefinitionRepository, r as registerNamespacedContextResolvers, s as PolicyHashing, t as PolicyContextPath } from "../path.js";
 import { A as PolicyScope, C as BasePolicyDefinitionProps, D as PolicyDefinition, E as GatePolicyDefinitionProps, F as PolicyKey, I as AsOfSource, L as PolicyKind, M as ScopeChain, N as PolicyCatalog, O as PolicyDefinitionProps, P as PolicyCatalogEntryProps, R as PolicyOwner, T as FindCandidatesParams, _ as ContextResolverResilienceOptions, a as PolicyServiceOptions, b as ContextSeed, c as PolicyEvaluationErrors, d as PolicyAsOfResolver, f as PolicyContextBuilder, g as ContextResolverCircuitBreakerOptions, h as registerNamespacedContextResolversIn, i as PolicyService, j as PolicyScopeMatcher, k as PolicyDefinitionStatus, l as PolicyResolver, m as ContextResolverRegistry, n as PolicyDecision, o as PolicyServiceParams, p as PolicyContextBuilderOptions, r as PolicyEvaluationResult, s as PolicyEvaluationError, t as EvaluateInput, u as DeriveAsOfOptions, v as ContextResolverRetryOptions, w as ComputePolicyDefinitionProps, x as ContextSeedValidator, y as ContextValueResolver, z as PolicyScopeLevel } from "../policy-service.js";
 import { a as ComputeOutcome, c as VersionedComputeEngine, i as ComputeEvaluatorRegistration, n as ComputeRegistry, o as ComputeOutcomeData, r as ComputeEvaluator, s as ComputeStatus, t as GateEngineRegistry } from "../gate-engine-registry.js";

package/dist/policies/index.js

@@ -1,4 +1,5 @@
-import { c as Ok, d as CoreConfig, l as Result, o as PolicyContextPath, s as Err, u as coreConfig } from "../gate-v1-payload.schema.js";
+import { c as CoreConfig, o as PolicyContextPath, s as coreConfig } from "../gate-v1-payload.schema.js";
+import { n as Ok, r as Result, t as Err } from "../result.js";
 import { t as Outcome } from "../outcome.js";
 import { _ as asPolicyDecisionId, a as ContextSeedValidator, b as asTenantId, c as ContextResolverRegistry, d as PolicyDefinition, f as InMemoryPolicyDefinitionRepository, g as PolicyCatalog, h as PolicyCatalogFactory, i as PolicyAsOfResolver, l as registerNamespacedContextResolversIn, m as PolicyKey, n as PolicyEvaluationErrors, o as contextResolverRegistry, p as PolicyScopeMatcher, r as PolicyResolver, s as registerNamespacedContextResolvers, t as PolicyService, u as PolicyContextBuilder, v as asPolicyDefinitionId, x as PolicyHashing, y as asSchoolId } from "../policy-service.js";
 import { a as ComputeEvaluatorRegistry, c as ComputePayloadParsers, i as ComputeRegistry, o as ComputeEngineRegistry, r as GatePayloadParsers, s as ComputePayloadParserRegistry, t as GateEngineRegistry } from "../gate-engine-registry.js";