@cullet/erp-core 1.3.0 → 1.5.0

package/dist/index.js

@@ -1,7 +1,10 @@
-import { a as serializationErrorCode, i as ErrorCodes, n as AppError, r as assertJsonSafeMetadata, t as UnexpectedError } from "./unexpected-error.js";
-import { C as translateUniqueViolationToDuplicate, S as UniqueConstraintViolationError, T as AuthenticationError, _ as IdempotencyPayloadMismatchError, a as evaluateTemporalWindow, b as ConflictError, c as SerializationInError, d as safePreview, f as LegacyIncompatibleError, g as IdempotencyKeyMissingError, h as IdempotencyInProgressError, i as TemporalError, l as SerializationMessages, m as IdempotencyError, n as ExpiredError, o as SerializationCodes, p as IntegrationError, r as NotYetValidError, s as SerializationError, t as ValidationError, u as SerializationOutError, v as IdempotencyReplayNotSupportedError, w as AuthorizationError, x as DuplicateError, y as AlreadyExistsError } from "./validation-error.js";
+import { i as serializationErrorCode, n as assertJsonSafeMetadata, r as ErrorCodes, t as AppError } from "./app-error.js";
+import { C as translateUniqueViolationToDuplicate, S as UniqueConstraintViolationError, _ as IdempotencyPayloadMismatchError, a as evaluateTemporalWindow, b as ConflictError, c as SerializationInError, d as safePreview, f as LegacyIncompatibleError, g as IdempotencyKeyMissingError, h as IdempotencyInProgressError, i as TemporalError, l as SerializationMessages, m as IdempotencyError, n as ExpiredError, o as SerializationCodes, p as IntegrationError, r as NotYetValidError, s as SerializationError, t as ValidationError, u as SerializationOutError, v as IdempotencyReplayNotSupportedError, w as AuthenticationError, x as DuplicateError, y as AlreadyExistsError } from "./validation-error.js";
+import { t as AuthorizationError } from "./authorization-error.js";
 import { n as BusinessRuleViolationError, t as NotFoundError } from "./not-found-error.js";
-import { n as sha256Hex, r as stableStringify, t as payloadHash } from "./hashing.js";
+import { t as stableStringify } from "./stable-stringify.js";
+import { n as sha256Hex, t as payloadHash } from "./hashing.js";
+import { t as UnexpectedError } from "./unexpected-error.js";
 import { t as ValidationCode } from "./validation-code.js";
 import { t as ValidationField } from "./validation-field.js";
 import { t as DomainException } from "./domain-exception.js";
@@ -10,19 +13,23 @@ import { t as InvariantViolationException } from "./invariant-violation-exceptio
 import { n as MultipleValidationException, r as ValidationException, t as InvalidValueException } from "./validation-exception.js";
 import { i as version, r as CONTRACT_VERSION_PROPERTY } from "./immutable.js";
 import { t as UseCase } from "./use-case.js";
-import { a as mapPolicyEvaluationError, i as Query, n as assertTemporalContext, o as Command, r as createTemporalContext, s as RequestedBy, t as TemporalUseCase } from "./temporal-use-case.js";
-import { n as Entity, t as ValueObject } from "./value-object.js";
+import { t as RequestedBy } from "./requested-by.js";
+import { a as mapPolicyEvaluationError, i as Query, n as assertTemporalContext, o as Command, r as createTemporalContext, t as TemporalUseCase } from "./temporal-use-case.js";
+import { t as Entity } from "./entity.js";
 import { t as PluginManager } from "./plugin.js";
+import { t as ValueObject } from "./value-object.js";
 import { t as UuidIdentifier } from "./uuid-identifier.js";
 import { t as RulesetRegistry } from "./ruleset-registry.js";
-import { n as createDomainEventEnvelope, t as buildDomainEventContractVersions } from "./domain-event-contracts.js";
-import { c as CoreConfig, o as PolicyContextPath, s as coreConfig } from "./gate-v1-payload.schema.js";
 import { n as Ok, r as Result, t as Err } from "./result.js";
+import { a as Role, i as Scope, n as PermissionSet, o as Permission, r as Grant, s as RbacAuthorizer, t as rbacContextFields } from "./policy-bridge.js";
+import { a as abacContext, i as AbacAuthorizer, n as AbacPolicySet, r as CompositeAuthorizer, t as AbacRule } from "./rule.js";
+import { i as CoreConfig, n as PolicyContextPath, r as coreConfig } from "./condition-evaluator.js";
+import { _ as contextResolverRegistry, a as PolicyDefinition, b as registerNamespacedContextResolversIn, c as PolicyKey, d as asPolicyDecisionId, f as asPolicyDefinitionId, g as ContextSeedValidator, h as PolicyHashing, i as PolicyAsOfResolver, l as PolicyCatalogFactory, m as asTenantId, n as PolicyEvaluationErrors, o as InMemoryPolicyDefinitionRepository, p as asSchoolId, r as PolicyResolver, s as PolicyScopeMatcher, t as PolicyService, u as PolicyCatalog, v as registerNamespacedContextResolvers, x as PolicyContextBuilder, y as ContextResolverRegistry } from "./policy-service.js";
+import { n as createDomainEventEnvelope, t as buildDomainEventContractVersions } from "./domain-event-contracts.js";
 import { t as Outcome } from "./outcome.js";
-import { _ as asPolicyDecisionId, a as ContextSeedValidator, b as asTenantId, c as ContextResolverRegistry, d as PolicyDefinition, f as InMemoryPolicyDefinitionRepository, g as PolicyCatalog, h as PolicyCatalogFactory, i as PolicyAsOfResolver, l as registerNamespacedContextResolversIn, m as PolicyKey, n as PolicyEvaluationErrors, o as contextResolverRegistry, p as PolicyScopeMatcher, r as PolicyResolver, s as registerNamespacedContextResolvers, t as PolicyService, u as PolicyContextBuilder, v as asPolicyDefinitionId, x as PolicyHashing, y as asSchoolId } from "./policy-service.js";
 import { a as ComputeEvaluatorRegistry, c as ComputePayloadParsers, i as ComputeRegistry, o as ComputeEngineRegistry, r as GatePayloadParsers, s as ComputePayloadParserRegistry, t as GateEngineRegistry } from "./gate-engine-registry.js";
 //#region src/version.ts
-const version$1 = "1.3.0";
+const version$1 = "1.5.0";
 //#endregion
 //#region src/index.ts
 const ERP_CORE_NAME = "erp-core";
@@ -32,6 +39,6 @@ const erpCoreRelease = {
 	version: ERP_CORE_VERSION
 };
 //#endregion
-export { AlreadyExistsError, AppError, AuthenticationError, AuthorizationError, BusinessRuleViolationError, BusinessRuleViolationException, CONTRACT_VERSION_PROPERTY, Command, ComputeEngineRegistry, ComputeEvaluatorRegistry, ComputePayloadParserRegistry, ComputePayloadParsers, ComputeRegistry, ConflictError, ContextResolverRegistry, ContextSeedValidator, CoreConfig, SerializationInError as DeserializationError, SerializationInError, DomainException, DuplicateError, ERP_CORE_NAME, ERP_CORE_VERSION, Entity, EntityNotFoundException, Err, ErrorCodes, ExpiredError, GateEngineRegistry, GatePayloadParsers, IdempotencyError, IdempotencyInProgressError, IdempotencyKeyMissingError, IdempotencyPayloadMismatchError, IdempotencyReplayNotSupportedError, InMemoryPolicyDefinitionRepository, IntegrationError, InvalidStateTransitionException, InvalidValueException, InvariantViolationException, LegacyIncompatibleError, MultipleValidationException, NotFoundError, NotYetValidError, Ok, Outcome, PluginManager, PolicyAsOfResolver, PolicyCatalog, PolicyCatalogFactory, PolicyContextBuilder, PolicyContextPath, PolicyDefinition, PolicyEvaluationErrors, PolicyHashing, PolicyKey, PolicyResolver, PolicyScopeMatcher, PolicyService, Query, RequestedBy, Result, RulesetRegistry, SerializationCodes, SerializationError, SerializationMessages, SerializationOutError, TemporalError, TemporalUseCase, UnexpectedError, UniqueConstraintViolationError, UseCase, UuidIdentifier, ValidationCode, ValidationError, ValidationException, ValidationField, ValueObject, asPolicyDecisionId, asPolicyDefinitionId, asSchoolId, asTenantId, assertJsonSafeMetadata, assertTemporalContext, buildDomainEventContractVersions, contextResolverRegistry, coreConfig, createDomainEventEnvelope, createTemporalContext, erpCoreRelease, evaluateTemporalWindow, mapPolicyEvaluationError, payloadHash, registerNamespacedContextResolvers, registerNamespacedContextResolversIn, safePreview, serializationErrorCode, sha256Hex, stableStringify, translateUniqueViolationToDuplicate, version };
+export { AbacAuthorizer, AbacPolicySet, AbacRule, AlreadyExistsError, AppError, AuthenticationError, AuthorizationError, BusinessRuleViolationError, BusinessRuleViolationException, CONTRACT_VERSION_PROPERTY, Command, CompositeAuthorizer, ComputeEngineRegistry, ComputeEvaluatorRegistry, ComputePayloadParserRegistry, ComputePayloadParsers, ComputeRegistry, ConflictError, ContextResolverRegistry, ContextSeedValidator, CoreConfig, SerializationInError as DeserializationError, SerializationInError, DomainException, DuplicateError, ERP_CORE_NAME, ERP_CORE_VERSION, Entity, EntityNotFoundException, Err, ErrorCodes, ExpiredError, GateEngineRegistry, GatePayloadParsers, Grant, IdempotencyError, IdempotencyInProgressError, IdempotencyKeyMissingError, IdempotencyPayloadMismatchError, IdempotencyReplayNotSupportedError, InMemoryPolicyDefinitionRepository, IntegrationError, InvalidStateTransitionException, InvalidValueException, InvariantViolationException, LegacyIncompatibleError, MultipleValidationException, NotFoundError, NotYetValidError, Ok, Outcome, Permission, PermissionSet, PluginManager, PolicyAsOfResolver, PolicyCatalog, PolicyCatalogFactory, PolicyContextBuilder, PolicyContextPath, PolicyDefinition, PolicyEvaluationErrors, PolicyHashing, PolicyKey, PolicyResolver, PolicyScopeMatcher, PolicyService, Query, RbacAuthorizer, RequestedBy, Result, Role, RulesetRegistry, Scope, SerializationCodes, SerializationError, SerializationMessages, SerializationOutError, TemporalError, TemporalUseCase, UnexpectedError, UniqueConstraintViolationError, UseCase, UuidIdentifier, ValidationCode, ValidationError, ValidationException, ValidationField, ValueObject, abacContext, asPolicyDecisionId, asPolicyDefinitionId, asSchoolId, asTenantId, assertJsonSafeMetadata, assertTemporalContext, buildDomainEventContractVersions, contextResolverRegistry, coreConfig, createDomainEventEnvelope, createTemporalContext, erpCoreRelease, evaluateTemporalWindow, mapPolicyEvaluationError, payloadHash, rbacContextFields, registerNamespacedContextResolvers, registerNamespacedContextResolversIn, safePreview, serializationErrorCode, sha256Hex, stableStringify, translateUniqueViolationToDuplicate, version };
 
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["version","version"],"sources":["../src/version.ts","../src/index.ts"],"sourcesContent":["// Versao do kit, sincronizada com package.json por scripts/sync-kit-version.mjs.\n// Nao edite a mao: rode `npm run sync-kit-version` (ou e regenerado no release).\n//\n// Mantemos a versao aqui, dentro de src/, para que a copia full-control seja\n// auto-contida: ao copiar so o conteudo de src/, o entry nao depende de um\n// `../package.json` que deixaria de existir no projeto consumidor.\nexport const version = \"1.3.0\";\n","import { version } from \"./version.js\";\n\nexport * from \"./core/index.js\";\n\nexport const ERP_CORE_NAME = \"erp-core\";\nexport const ERP_CORE_VERSION = version;\n\nexport const erpCoreRelease = {\n    name: ERP_CORE_NAME,\n    version: ERP_CORE_VERSION,\n} as const;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAMA,MAAaA,YAAU;;;ACFvB,MAAa,gBAAgB;AAC7B,MAAa,mBAAmBC;AAEhC,MAAa,iBAAiB;CAC1B,MAAM;CACN,SAAS;AACb"}
+{"version":3,"file":"index.js","names":["version","version"],"sources":["../src/version.ts","../src/index.ts"],"sourcesContent":["// Versao do kit, sincronizada com package.json por scripts/sync-kit-version.mjs.\n// Nao edite a mao: rode `npm run sync-kit-version` (ou e regenerado no release).\n//\n// Mantemos a versao aqui, dentro de src/, para que a copia full-control seja\n// auto-contida: ao copiar so o conteudo de src/, o entry nao depende de um\n// `../package.json` que deixaria de existir no projeto consumidor.\nexport const version = \"1.5.0\";\n","import { version } from \"./version.js\";\n\nexport * from \"./core/index.js\";\n\nexport const ERP_CORE_NAME = \"erp-core\";\nexport const ERP_CORE_VERSION = version;\n\nexport const erpCoreRelease = {\n    name: ERP_CORE_NAME,\n    version: ERP_CORE_VERSION,\n} as const;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA,MAAaA,YAAU;;;ACFvB,MAAa,gBAAgB;AAC7B,MAAa,mBAAmBC;AAEhC,MAAa,iBAAiB;CAC1B,MAAM;CACN,SAAS;AACb"}

package/dist/not-found-error.cjs

@@ -1,6 +1,6 @@
-const require_unexpected_error = require("./unexpected-error.cjs");
+const require_app_error = require("./app-error.cjs");
 //#region src/core/errors/business-rule-violation-error.ts
-var BusinessRuleViolationError = class extends require_unexpected_error.AppError {
+var BusinessRuleViolationError = class extends require_app_error.AppError {
 	constructor(rule, message, detail, options) {
 		const baseMetadata = detail ? {
 			rule,
@@ -10,7 +10,7 @@ var BusinessRuleViolationError = class extends require_unexpected_error.AppError
 			...baseMetadata,
 			...options.metadata
 		} : baseMetadata;
-		super(message, require_unexpected_error.ErrorCodes.businessRuleViolation, {
+		super(message, require_app_error.ErrorCodes.businessRuleViolation, {
 			...options,
 			metadata: mergedMetadata
 		});
@@ -26,7 +26,7 @@ var BusinessRuleViolationError = class extends require_unexpected_error.AppError
 * the optional lookup `criteria`, lands in the metadata so logs show *what* was
 * searched for without the caller having to restate it in the message.
 */
-var NotFoundError = class extends require_unexpected_error.AppError {
+var NotFoundError = class extends require_app_error.AppError {
 	/**
 	* @param resource - Human-readable name of the missing resource (e.g. `"Order"`).
 	* @param criteria - Optional lookup keys used in the search; recorded in
@@ -42,7 +42,7 @@ var NotFoundError = class extends require_unexpected_error.AppError {
 			...baseMetadata,
 			...options.metadata
 		} : baseMetadata;
-		super(`${resource} not found`, require_unexpected_error.ErrorCodes.notFound, {
+		super(`${resource} not found`, require_app_error.ErrorCodes.notFound, {
 			...options,
 			metadata: mergedMetadata
 		});

package/dist/not-found-error.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"not-found-error.cjs","names":["AppError","ErrorCodes","AppError","ErrorCodes"],"sources":["../src/core/errors/business-rule-violation-error.ts","../src/core/errors/not-found-error.ts"],"sourcesContent":["import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// BusinessRuleViolationError\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass BusinessRuleViolationError extends AppError {\n    constructor(\n        rule: string,\n        message: string,\n        detail?: Record<string, unknown>,\n        options?: AppErrorOptions,\n    ) {\n        const baseMetadata = detail ? { rule, detail } : { rule };\n        const mergedMetadata = options?.metadata\n            ? { ...baseMetadata, ...options.metadata }\n            : baseMetadata;\n\n        super(message, ErrorCodes.businessRuleViolation, {\n            ...options,\n            metadata: mergedMetadata,\n        });\n    }\n}\n\nexport { BusinessRuleViolationError };\n","import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// NotFoundError\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Raised when a requested resource does not exist. Maps naturally onto an HTTP\n * 404 at the edge, but stays transport-agnostic here.\n *\n * The `resource` name builds the message (`\"<resource> not found\"`) and, with\n * the optional lookup `criteria`, lands in the metadata so logs show *what* was\n * searched for without the caller having to restate it in the message.\n */\nclass NotFoundError extends AppError {\n    /**\n     * @param resource - Human-readable name of the missing resource (e.g. `\"Order\"`).\n     * @param criteria - Optional lookup keys used in the search; recorded in\n     *   metadata to aid debugging. Avoid putting sensitive values here.\n     * @param options - Optional cause, correlation ids, and extra metadata.\n     */\n    constructor(\n        resource: string,\n        criteria?: Record<string, unknown>,\n        options?: AppErrorOptions,\n    ) {\n        const baseMetadata = criteria ? { resource, criteria } : { resource };\n        const mergedMetadata = options?.metadata\n            ? { ...baseMetadata, ...options.metadata }\n            : baseMetadata;\n\n        super(`${resource} not found`, ErrorCodes.notFound, {\n            ...options,\n            metadata: mergedMetadata,\n        });\n    }\n}\n\nexport { NotFoundError };\n"],"mappings":";;AAQA,IAAM,6BAAN,cAAyCA,yBAAAA,SAAS;CAC9C,YACI,MACA,SACA,QACA,SACF;EACE,MAAM,eAAe,SAAS;GAAE;GAAM;EAAO,IAAI,EAAE,KAAK;EACxD,MAAM,iBAAiB,SAAS,WAC1B;GAAE,GAAG;GAAc,GAAG,QAAQ;EAAS,IACvC;EAEN,MAAM,SAASC,yBAAAA,WAAW,uBAAuB;GAC7C,GAAG;GACH,UAAU;EACd,CAAC;CACL;AACJ;;;;;;;;;;;ACTA,IAAM,gBAAN,cAA4BC,yBAAAA,SAAS;;;;;;;CAOjC,YACI,UACA,UACA,SACF;EACE,MAAM,eAAe,WAAW;GAAE;GAAU;EAAS,IAAI,EAAE,SAAS;EACpE,MAAM,iBAAiB,SAAS,WAC1B;GAAE,GAAG;GAAc,GAAG,QAAQ;EAAS,IACvC;EAEN,MAAM,GAAG,SAAS,aAAaC,yBAAAA,WAAW,UAAU;GAChD,GAAG;GACH,UAAU;EACd,CAAC;CACL;AACJ"}
+{"version":3,"file":"not-found-error.cjs","names":["AppError","ErrorCodes","AppError","ErrorCodes"],"sources":["../src/core/errors/business-rule-violation-error.ts","../src/core/errors/not-found-error.ts"],"sourcesContent":["import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// BusinessRuleViolationError\n// ─────────────────────────────────────────────────────────────────────────────\n\nclass BusinessRuleViolationError extends AppError {\n    constructor(\n        rule: string,\n        message: string,\n        detail?: Record<string, unknown>,\n        options?: AppErrorOptions,\n    ) {\n        const baseMetadata = detail ? { rule, detail } : { rule };\n        const mergedMetadata = options?.metadata\n            ? { ...baseMetadata, ...options.metadata }\n            : baseMetadata;\n\n        super(message, ErrorCodes.businessRuleViolation, {\n            ...options,\n            metadata: mergedMetadata,\n        });\n    }\n}\n\nexport { BusinessRuleViolationError };\n","import { AppError } from \"./app-error.js\";\nimport { ErrorCodes } from \"./error-codes.js\";\nimport type { AppErrorOptions } from \"./types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// NotFoundError\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Raised when a requested resource does not exist. Maps naturally onto an HTTP\n * 404 at the edge, but stays transport-agnostic here.\n *\n * The `resource` name builds the message (`\"<resource> not found\"`) and, with\n * the optional lookup `criteria`, lands in the metadata so logs show *what* was\n * searched for without the caller having to restate it in the message.\n */\nclass NotFoundError extends AppError {\n    /**\n     * @param resource - Human-readable name of the missing resource (e.g. `\"Order\"`).\n     * @param criteria - Optional lookup keys used in the search; recorded in\n     *   metadata to aid debugging. Avoid putting sensitive values here.\n     * @param options - Optional cause, correlation ids, and extra metadata.\n     */\n    constructor(\n        resource: string,\n        criteria?: Record<string, unknown>,\n        options?: AppErrorOptions,\n    ) {\n        const baseMetadata = criteria ? { resource, criteria } : { resource };\n        const mergedMetadata = options?.metadata\n            ? { ...baseMetadata, ...options.metadata }\n            : baseMetadata;\n\n        super(`${resource} not found`, ErrorCodes.notFound, {\n            ...options,\n            metadata: mergedMetadata,\n        });\n    }\n}\n\nexport { NotFoundError };\n"],"mappings":";;AAQA,IAAM,6BAAN,cAAyCA,kBAAAA,SAAS;CAC9C,YACI,MACA,SACA,QACA,SACF;EACE,MAAM,eAAe,SAAS;GAAE;GAAM;EAAO,IAAI,EAAE,KAAK;EACxD,MAAM,iBAAiB,SAAS,WAC1B;GAAE,GAAG;GAAc,GAAG,QAAQ;EAAS,IACvC;EAEN,MAAM,SAASC,kBAAAA,WAAW,uBAAuB;GAC7C,GAAG;GACH,UAAU;EACd,CAAC;CACL;AACJ;;;;;;;;;;;ACTA,IAAM,gBAAN,cAA4BC,kBAAAA,SAAS;;;;;;;CAOjC,YACI,UACA,UACA,SACF;EACE,MAAM,eAAe,WAAW;GAAE;GAAU;EAAS,IAAI,EAAE,SAAS;EACpE,MAAM,iBAAiB,SAAS,WAC1B;GAAE,GAAG;GAAc,GAAG,QAAQ;EAAS,IACvC;EAEN,MAAM,GAAG,SAAS,aAAaC,kBAAAA,WAAW,UAAU;GAChD,GAAG;GACH,UAAU;EACd,CAAC;CACL;AACJ"}

package/dist/not-found-error.js

@@ -1,4 +1,4 @@
-import { i as ErrorCodes, n as AppError } from "./unexpected-error.js";
+import { r as ErrorCodes, t as AppError } from "./app-error.js";
 //#region src/core/errors/business-rule-violation-error.ts
 var BusinessRuleViolationError = class extends AppError {
 	constructor(rule, message, detail, options) {

package/dist/outcome.d.cts

@@ -1,85 +1,3 @@
-//#region src/core/result/result.d.ts
-/**
- * Represents the outcome of an operation that may succeed or fail.
- * Useful for avoiding excessive exceptions and making error flows explicit.
- */
-declare abstract class Result<T, E> {
-  protected constructor();
-  /**
-   * Creates a success result containing a value.
-   */
-  static ok<T>(value: T): Result<T, never>;
-  /**
-   * Creates an error result containing an error object.
-   */
-  static err<E>(error: E): Result<never, E>;
-  /**
-   * Returns true when this is a success result.
-   */
-  abstract isOk(): this is Ok<T>;
-  /**
-   * Returns true when this is an error result.
-   */
-  abstract isErr(): this is Err<E>;
-  /**
-   * Runs a handler based on the result state (similar to pattern matching).
-   */
-  abstract match<R>(handlers: {
-    ok: (value: T) => R;
-    err: (error: E) => R;
-  }): R;
-  /**
-   * Returns the value when this is success, or null when this is an error.
-   */
-  getOrNull(): T | null;
-  /**
-   * Returns the error when this is a failure, or null when this is a success.
-   */
-  errorOrNull(): E | null;
-  /**
-   * Returns the value when this is a success, or throws the error when this is a failure.
-   */
-  getOrThrow(): T;
-  /**
-   * Transforms the success value using the provided function. Keeps the error when this is a failure.
-   */
-  map<R>(transform: (value: T) => R): Result<R, E>;
-  /**
-   * Transforms the error using the provided function. Keeps the value when this is a success.
-   */
-  mapError<F>(transform: (error: E) => F): Result<T, F>;
-  /**
-   * Chains another operation that returns a Result when this result is a success.
-   */
-  flatMap<R>(transform: (value: T) => Result<R, E>): Result<R, E>;
-}
-/**
- * Success variant of Result.
- */
-declare class Ok<T> extends Result<T, never> {
-  readonly value: T;
-  constructor(value: T);
-  isOk(): this is Ok<T>;
-  isErr(): this is Err<never>;
-  match<R>(handlers: {
-    ok: (value: T) => R;
-    err: (error: never) => R;
-  }): R;
-}
-/**
- * Error variant of Result.
- */
-declare class Err<E> extends Result<never, E> {
-  readonly error: E;
-  constructor(error: E);
-  isOk(): this is Ok<never>;
-  isErr(): this is Err<E>;
-  match<R>(handlers: {
-    ok: (value: never) => R;
-    err: (error: E) => R;
-  }): R;
-}
-//#endregion
 //#region src/core/result/outcome.d.ts
 /**
  * Outcome — Business decision abstraction.
@@ -136,5 +54,5 @@ declare class Outcome<S extends string, D = undefined> {
 /** Common business outcome statuses. Extend per domain as needed. */
 type CommonOutcomeStatus = "APPROVED" | "REJECTED" | "NO_OP" | "DEFERRED" | "REQUIRES_REVIEW";
 //#endregion
-export { Result as a, Ok as i, Outcome as n, Err as r, CommonOutcomeStatus as t };
+export { Outcome as n, CommonOutcomeStatus as t };
 //# sourceMappingURL=outcome.d.cts.map

package/dist/outcome.d.ts

@@ -1,85 +1,3 @@
-//#region src/core/result/result.d.ts
-/**
- * Represents the outcome of an operation that may succeed or fail.
- * Useful for avoiding excessive exceptions and making error flows explicit.
- */
-declare abstract class Result<T, E> {
-  protected constructor();
-  /**
-   * Creates a success result containing a value.
-   */
-  static ok<T>(value: T): Result<T, never>;
-  /**
-   * Creates an error result containing an error object.
-   */
-  static err<E>(error: E): Result<never, E>;
-  /**
-   * Returns true when this is a success result.
-   */
-  abstract isOk(): this is Ok<T>;
-  /**
-   * Returns true when this is an error result.
-   */
-  abstract isErr(): this is Err<E>;
-  /**
-   * Runs a handler based on the result state (similar to pattern matching).
-   */
-  abstract match<R>(handlers: {
-    ok: (value: T) => R;
-    err: (error: E) => R;
-  }): R;
-  /**
-   * Returns the value when this is success, or null when this is an error.
-   */
-  getOrNull(): T | null;
-  /**
-   * Returns the error when this is a failure, or null when this is a success.
-   */
-  errorOrNull(): E | null;
-  /**
-   * Returns the value when this is a success, or throws the error when this is a failure.
-   */
-  getOrThrow(): T;
-  /**
-   * Transforms the success value using the provided function. Keeps the error when this is a failure.
-   */
-  map<R>(transform: (value: T) => R): Result<R, E>;
-  /**
-   * Transforms the error using the provided function. Keeps the value when this is a success.
-   */
-  mapError<F>(transform: (error: E) => F): Result<T, F>;
-  /**
-   * Chains another operation that returns a Result when this result is a success.
-   */
-  flatMap<R>(transform: (value: T) => Result<R, E>): Result<R, E>;
-}
-/**
- * Success variant of Result.
- */
-declare class Ok<T> extends Result<T, never> {
-  readonly value: T;
-  constructor(value: T);
-  isOk(): this is Ok<T>;
-  isErr(): this is Err<never>;
-  match<R>(handlers: {
-    ok: (value: T) => R;
-    err: (error: never) => R;
-  }): R;
-}
-/**
- * Error variant of Result.
- */
-declare class Err<E> extends Result<never, E> {
-  readonly error: E;
-  constructor(error: E);
-  isOk(): this is Ok<never>;
-  isErr(): this is Err<E>;
-  match<R>(handlers: {
-    ok: (value: never) => R;
-    err: (error: E) => R;
-  }): R;
-}
-//#endregion
 //#region src/core/result/outcome.d.ts
 /**
  * Outcome — Business decision abstraction.
@@ -136,5 +54,5 @@ declare class Outcome<S extends string, D = undefined> {
 /** Common business outcome statuses. Extend per domain as needed. */
 type CommonOutcomeStatus = "APPROVED" | "REJECTED" | "NO_OP" | "DEFERRED" | "REQUIRES_REVIEW";
 //#endregion
-export { Result as a, Ok as i, Outcome as n, Err as r, CommonOutcomeStatus as t };
+export { Outcome as n, CommonOutcomeStatus as t };
 //# sourceMappingURL=outcome.d.ts.map

package/dist/parse-gate-payload.d.cts

@@ -1,5 +1,5 @@
-import { a as Result } from "./outcome.cjs";
-import { d as GatePayloadV1, s as PolicyContext, u as GatePayload } from "./gate-types.cjs";
+import { r as Result } from "./result.cjs";
+import { O as GatePayload, T as PolicyContext, k as GatePayloadV1 } from "./core-config.cjs";
 import { a as ComputeOutcome, c as VersionedComputeEngine, i as ComputeEvaluatorRegistration, l as ComputePayload, p as ComputePayloadV1, r as ComputeEvaluator } from "./gate-engine-registry.cjs";
 
 //#region src/core/policies/engines/compute-evaluator-registry.d.ts

package/dist/parse-gate-payload.d.ts

@@ -1,5 +1,5 @@
-import { a as Result } from "./outcome.js";
-import { d as GatePayloadV1, s as PolicyContext, u as GatePayload } from "./gate-types.js";
+import { r as Result } from "./result.js";
+import { O as GatePayload, T as PolicyContext, k as GatePayloadV1 } from "./core-config.js";
 import { a as ComputeOutcome, c as VersionedComputeEngine, i as ComputeEvaluatorRegistration, l as ComputePayload, p as ComputePayloadV1, r as ComputeEvaluator } from "./gate-engine-registry.js";
 
 //#region src/core/policies/engines/compute-evaluator-registry.d.ts

package/dist/path.d.cts

@@ -1,5 +1,5 @@
-import { a as Result } from "./outcome.cjs";
-import { m as CoreConfig } from "./gate-types.cjs";
+import { r as Result } from "./result.cjs";
+import { t as CoreConfig } from "./core-config.cjs";
 import { D as PolicyDefinition, N as PolicyCatalog, P as PolicyCatalogEntryProps, S as PolicyDefinitionRepository, T as FindCandidatesParams, m as ContextResolverRegistry, y as ContextValueResolver } from "./policy-service.cjs";
 import { i as ComputeEvaluatorRegistration } from "./gate-engine-registry.cjs";
 

package/dist/path.d.ts

@@ -1,5 +1,5 @@
-import { a as Result } from "./outcome.js";
-import { m as CoreConfig } from "./gate-types.js";
+import { r as Result } from "./result.js";
+import { t as CoreConfig } from "./core-config.js";
 import { D as PolicyDefinition, N as PolicyCatalog, P as PolicyCatalogEntryProps, S as PolicyDefinitionRepository, T as FindCandidatesParams, m as ContextResolverRegistry, y as ContextValueResolver } from "./policy-service.js";
 import { i as ComputeEvaluatorRegistration } from "./gate-engine-registry.js";
 

package/dist/policies/engines/index.d.cts

@@ -1,4 +1,4 @@
-import { A as ConditionEvaluationReportTag, D as ConditionEvaluationOptions, E as ConditionEvaluationCause, O as ConditionEvaluationReport, a as GateTraceNodeSnapshot, c as PolicyViolation, d as GatePayloadV1, i as GateTraceLeafSnapshot, j as ConditionEvaluatorReporter, k as ConditionEvaluationReportLevel, l as VersionedGateEngine, n as GateOutcomeData, o as GateViolationTrace, r as GateStatus, s as PolicyContext, t as GateOutcome, u as GatePayload } from "../../gate-types.cjs";
+import { C as GateTraceNodeSnapshot, D as VersionedGateEngine, E as PolicyViolation, O as GatePayload, S as GateTraceLeafSnapshot, T as PolicyContext, _ as ConditionEvaluationReportTag, b as GateOutcomeData, g as ConditionEvaluationReportLevel, h as ConditionEvaluationReport, k as GatePayloadV1, m as ConditionEvaluationOptions, p as ConditionEvaluationCause, v as ConditionEvaluatorReporter, w as GateViolationTrace, x as GateStatus, y as GateOutcome } from "../../core-config.cjs";
 import { a as ComputeOutcome, c as VersionedComputeEngine, d as ComputeDecisionTableRule, f as ComputeParamsPayload, i as ComputeEvaluatorRegistration, l as ComputePayload, n as ComputeRegistry, o as ComputeOutcomeData, p as ComputePayloadV1, r as ComputeEvaluator, s as ComputeStatus, t as GateEngineRegistry, u as ComputeDecisionTablePayload } from "../../gate-engine-registry.cjs";
 import { a as ComputePayloadParserRegistry, c as ComputeEvaluatorRegistry, i as ComputePayloadParser, n as GatePayloadParserRegistry, o as ComputePayloadParsers, r as GatePayloadParsers, s as ComputeEngineRegistry, t as GatePayloadParser } from "../../parse-gate-payload.cjs";
 export { ComputeDecisionTablePayload, ComputeDecisionTableRule, ComputeEngineRegistry, ComputeEvaluator, ComputeEvaluatorRegistration, ComputeEvaluatorRegistry, ComputeOutcome, ComputeOutcomeData, ComputeParamsPayload, ComputePayload, ComputePayloadParser, ComputePayloadParserRegistry, ComputePayloadParsers, ComputePayloadV1, ComputeRegistry, ComputeStatus, ConditionEvaluationCause, ConditionEvaluationOptions, ConditionEvaluationReport, ConditionEvaluationReportLevel, ConditionEvaluationReportTag, ConditionEvaluatorReporter, GateEngineRegistry, GateOutcome, GateOutcomeData, GatePayload, GatePayloadParser, GatePayloadParserRegistry, GatePayloadParsers, GatePayloadV1, GateStatus, GateTraceLeafSnapshot, GateTraceNodeSnapshot, GateViolationTrace, PolicyContext, PolicyViolation, VersionedComputeEngine, VersionedGateEngine };

package/dist/policies/engines/index.d.ts

@@ -1,4 +1,4 @@
-import { A as ConditionEvaluationReportTag, D as ConditionEvaluationOptions, E as ConditionEvaluationCause, O as ConditionEvaluationReport, a as GateTraceNodeSnapshot, c as PolicyViolation, d as GatePayloadV1, i as GateTraceLeafSnapshot, j as ConditionEvaluatorReporter, k as ConditionEvaluationReportLevel, l as VersionedGateEngine, n as GateOutcomeData, o as GateViolationTrace, r as GateStatus, s as PolicyContext, t as GateOutcome, u as GatePayload } from "../../gate-types.js";
+import { C as GateTraceNodeSnapshot, D as VersionedGateEngine, E as PolicyViolation, O as GatePayload, S as GateTraceLeafSnapshot, T as PolicyContext, _ as ConditionEvaluationReportTag, b as GateOutcomeData, g as ConditionEvaluationReportLevel, h as ConditionEvaluationReport, k as GatePayloadV1, m as ConditionEvaluationOptions, p as ConditionEvaluationCause, v as ConditionEvaluatorReporter, w as GateViolationTrace, x as GateStatus, y as GateOutcome } from "../../core-config.js";
 import { a as ComputeOutcome, c as VersionedComputeEngine, d as ComputeDecisionTableRule, f as ComputeParamsPayload, i as ComputeEvaluatorRegistration, l as ComputePayload, n as ComputeRegistry, o as ComputeOutcomeData, p as ComputePayloadV1, r as ComputeEvaluator, s as ComputeStatus, t as GateEngineRegistry, u as ComputeDecisionTablePayload } from "../../gate-engine-registry.js";
 import { a as ComputePayloadParserRegistry, c as ComputeEvaluatorRegistry, i as ComputePayloadParser, n as GatePayloadParserRegistry, o as ComputePayloadParsers, r as GatePayloadParsers, s as ComputeEngineRegistry, t as GatePayloadParser } from "../../parse-gate-payload.js";
 export { ComputeDecisionTablePayload, ComputeDecisionTableRule, ComputeEngineRegistry, ComputeEvaluator, ComputeEvaluatorRegistration, ComputeEvaluatorRegistry, ComputeOutcome, ComputeOutcomeData, ComputeParamsPayload, ComputePayload, ComputePayloadParser, ComputePayloadParserRegistry, ComputePayloadParsers, ComputePayloadV1, ComputeRegistry, ComputeStatus, ConditionEvaluationCause, ConditionEvaluationOptions, ConditionEvaluationReport, ConditionEvaluationReportLevel, ConditionEvaluationReportTag, ConditionEvaluatorReporter, GateEngineRegistry, GateOutcome, GateOutcomeData, GatePayload, GatePayloadParser, GatePayloadParserRegistry, GatePayloadParsers, GatePayloadV1, GateStatus, GateTraceLeafSnapshot, GateTraceNodeSnapshot, GateViolationTrace, PolicyContext, PolicyViolation, VersionedComputeEngine, VersionedGateEngine };

package/dist/policies/engines/v1/gate/index.cjs

@@ -1,12 +1,13 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_gate_v1_payload_schema = require("../../../../gate-v1-payload.schema.cjs");
 const require_result = require("../../../../result.cjs");
+const require_condition_evaluator = require("../../../../condition-evaluator.cjs");
 const require_outcome = require("../../../../outcome.cjs");
+const require_gate_v1_payload_schema = require("../../../../gate-v1-payload.schema.cjs");
 //#region src/core/policies/engines/v1/gate/gate-engine-v1.ts
 var GateEngineV1 = class {
 	constructor(params = {}) {
 		this.version = 1;
-		this.coreConfig = params.coreConfig ?? require_gate_v1_payload_schema.coreConfig;
+		this.coreConfig = params.coreConfig ?? require_condition_evaluator.coreConfig;
 	}
 	allow() {
 		return require_result.Result.ok(require_outcome.Outcome.of("ALLOW", { violations: [] }));
@@ -73,7 +74,7 @@ var GateEngineV1 = class {
 	*/
 	evaluate(payload, context) {
 		const gatePayload = this.normalizePayload(payload);
-		const isAllowedResult = new require_gate_v1_payload_schema.ConditionEvaluatorV1(context, this.coreConfig.getConditionEvaluationOptions(this.version)).evaluateWithTrace(gatePayload.allowIf);
+		const isAllowedResult = new require_condition_evaluator.ConditionEvaluatorV1(context, this.coreConfig.getConditionEvaluationOptions(this.version)).evaluateWithTrace(gatePayload.allowIf);
 		if (isAllowedResult.isErr()) return require_result.Result.err(isAllowedResult.errorOrNull());
 		const isAllowed = isAllowedResult.getOrNull();
 		if (isAllowed.matched) return this.allow();
@@ -81,7 +82,7 @@ var GateEngineV1 = class {
 	}
 };
 //#endregion
-exports.ConditionEvaluatorV1 = require_gate_v1_payload_schema.ConditionEvaluatorV1;
+exports.ConditionEvaluatorV1 = require_condition_evaluator.ConditionEvaluatorV1;
 exports.GateEngineV1 = GateEngineV1;
 exports.GatePayloadSchemaV1 = require_gate_v1_payload_schema.GatePayloadSchemaV1;
 exports.conditionLeafNodeSchema = require_gate_v1_payload_schema.conditionLeafNodeSchema;

package/dist/policies/engines/v1/gate/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["coreConfig","Result","Outcome","ConditionEvaluatorV1"],"sources":["../../../../../src/core/policies/engines/v1/gate/gate-engine-v1.ts"],"sourcesContent":["import { type CoreConfig, coreConfig } from \"../../../../config/index.js\";\nimport { Outcome } from \"../../../../result/outcome.js\";\nimport { Result } from \"../../../../result/result.js\";\n\nimport {\n    ConditionEvaluatorV1,\n    type TracedConditionEvaluation,\n} from \"../condition-evaluator.js\";\nimport type { ConditionLeafNode, ConditionNode } from \"../condition-types.js\";\nimport type { GatePayload } from \"../../gate-payload.js\";\nimport type {\n    GateOutcome,\n    GateStatus,\n    GateTraceLeafSnapshot,\n    GateTraceNodeSnapshot,\n    PolicyContext,\n    PolicyViolation,\n    VersionedGateEngine,\n} from \"../../gate-types.js\";\n\n// ─── Gate engine v1 ─────────────────────────────────────────────────────────\n\nexport class GateEngineV1 implements VersionedGateEngine {\n    public readonly version = 1;\n    private readonly coreConfig: CoreConfig;\n\n    constructor(params: { readonly coreConfig?: CoreConfig } = {}) {\n        this.coreConfig = params.coreConfig ?? coreConfig;\n    }\n\n    private allow(): Result<GateOutcome, string> {\n        return Result.ok(Outcome.of(\"ALLOW\", { violations: [] }));\n    }\n\n    private deny(violation: PolicyViolation): Result<GateOutcome, string> {\n        return Result.ok(\n            Outcome.of(\"DENY\", {\n                violations: [violation],\n            }),\n        );\n    }\n\n    private outcomeFromStatus(\n        status: GateStatus,\n        violation: PolicyViolation,\n    ): Result<GateOutcome, string> {\n        return status === \"ALLOW\" ? this.allow() : this.deny(violation);\n    }\n\n    private isLeafNode(node: ConditionNode): node is ConditionLeafNode {\n        return \"field\" in node && \"op\" in node;\n    }\n\n    private toLeafSnapshot(node: ConditionLeafNode): GateTraceLeafSnapshot {\n        return {\n            kind: \"LEAF\",\n            field: node.field,\n            op: node.op,\n            ...(node.allowNull === true ? { allowNull: true } : {}),\n        };\n    }\n\n    private toNodeSnapshot(node: ConditionNode): GateTraceNodeSnapshot {\n        if (this.isLeafNode(node)) {\n            return this.toLeafSnapshot(node);\n        }\n\n        if (\"and\" in node) {\n            return {\n                kind: \"AND\",\n                childCount: node.and.length,\n            };\n        }\n\n        if (\"or\" in node) {\n            return {\n                kind: \"OR\",\n                childCount: node.or.length,\n            };\n        }\n\n        return {\n            kind: \"NOT\",\n        };\n    }\n\n    private buildDenyViolation(\n        conditionResult: TracedConditionEvaluation,\n    ): PolicyViolation {\n        return {\n            code: \"DENY_CONDITION_MET\",\n            message: `Gate denied at ${conditionResult.trace.conditionPath}`,\n            trace: {\n                conditionPath: conditionResult.trace.conditionPath,\n                decisiveNode: this.toNodeSnapshot(\n                    conditionResult.trace.decisiveNode,\n                ),\n                lastEvaluatedLeaf: this.toLeafSnapshot(\n                    conditionResult.trace.lastEvaluatedLeaf,\n                ),\n                lastEvaluatedLeafPath:\n                    conditionResult.trace.lastEvaluatedLeafPath,\n                lastEvaluatedLeafResult:\n                    conditionResult.trace.lastEvaluatedLeafResult,\n                field: conditionResult.trace.lastEvaluatedLeaf.field,\n                op: conditionResult.trace.lastEvaluatedLeaf.op,\n            },\n        };\n    }\n\n    private normalizePayload(payload: GatePayload): {\n        readonly allowIf: ConditionNode;\n        readonly defaultOutcome: \"ALLOW\" | \"DENY\";\n    } {\n        if (\"condition\" in payload) {\n            return {\n                allowIf: payload.condition,\n                defaultOutcome: \"DENY\",\n            };\n        }\n\n        return payload;\n    }\n\n    /**\n     * Evaluates a GATE payload against a context object.\n     * Pure function — no side effects.\n     *\n     * Receives an already-parsed `GatePayload`; the registry is responsible\n     * for parsing from raw `unknown` before calling this method.\n     * Returns Result for technical failures (condition evaluation errors).\n     * The Outcome inside carries the business decision (ALLOW/DENY).\n     */\n    evaluate(\n        payload: GatePayload,\n        context: PolicyContext,\n    ): Result<GateOutcome, string> {\n        const gatePayload = this.normalizePayload(payload);\n        const conditionEvaluator = new ConditionEvaluatorV1(\n            context,\n            this.coreConfig.getConditionEvaluationOptions(this.version),\n        );\n\n        const isAllowedResult = conditionEvaluator.evaluateWithTrace(\n            gatePayload.allowIf,\n        );\n        if (isAllowedResult.isErr()) {\n            return Result.err(isAllowedResult.errorOrNull()!);\n        }\n\n        const isAllowed = isAllowedResult.getOrNull()!;\n        if (isAllowed.matched) {\n            return this.allow();\n        }\n\n        return this.outcomeFromStatus(\n            gatePayload.defaultOutcome,\n            this.buildDenyViolation(isAllowed),\n        );\n    }\n}\n"],"mappings":";;;;;AAsBA,IAAa,eAAb,MAAyD;CAIrD,YAAY,SAA+C,CAAC,GAAG;iBAHrC;EAItB,KAAK,aAAa,OAAO,cAAcA,+BAAAA;CAC3C;CAEA,QAA6C;EACzC,OAAOC,eAAAA,OAAO,GAAGC,gBAAAA,QAAQ,GAAG,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;CAC5D;CAEA,KAAa,WAAyD;EAClE,OAAOD,eAAAA,OAAO,GACVC,gBAAAA,QAAQ,GAAG,QAAQ,EACf,YAAY,CAAC,SAAS,EAC1B,CAAC,CACL;CACJ;CAEA,kBACI,QACA,WAC2B;EAC3B,OAAO,WAAW,UAAU,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS;CAClE;CAEA,WAAmB,MAAgD;EAC/D,OAAO,WAAW,QAAQ,QAAQ;CACtC;CAEA,eAAuB,MAAgD;EACnE,OAAO;GACH,MAAM;GACN,OAAO,KAAK;GACZ,IAAI,KAAK;GACT,GAAI,KAAK,cAAc,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;EACzD;CACJ;CAEA,eAAuB,MAA4C;EAC/D,IAAI,KAAK,WAAW,IAAI,GACpB,OAAO,KAAK,eAAe,IAAI;EAGnC,IAAI,SAAS,MACT,OAAO;GACH,MAAM;GACN,YAAY,KAAK,IAAI;EACzB;EAGJ,IAAI,QAAQ,MACR,OAAO;GACH,MAAM;GACN,YAAY,KAAK,GAAG;EACxB;EAGJ,OAAO,EACH,MAAM,MACV;CACJ;CAEA,mBACI,iBACe;EACf,OAAO;GACH,MAAM;GACN,SAAS,kBAAkB,gBAAgB,MAAM;GACjD,OAAO;IACH,eAAe,gBAAgB,MAAM;IACrC,cAAc,KAAK,eACf,gBAAgB,MAAM,YAC1B;IACA,mBAAmB,KAAK,eACpB,gBAAgB,MAAM,iBAC1B;IACA,uBACI,gBAAgB,MAAM;IAC1B,yBACI,gBAAgB,MAAM;IAC1B,OAAO,gBAAgB,MAAM,kBAAkB;IAC/C,IAAI,gBAAgB,MAAM,kBAAkB;GAChD;EACJ;CACJ;CAEA,iBAAyB,SAGvB;EACE,IAAI,eAAe,SACf,OAAO;GACH,SAAS,QAAQ;GACjB,gBAAgB;EACpB;EAGJ,OAAO;CACX;;;;;;;;;;CAWA,SACI,SACA,SAC2B;EAC3B,MAAM,cAAc,KAAK,iBAAiB,OAAO;EAMjD,MAAM,kBAAkB,IALOC,+BAAAA,qBAC3B,SACA,KAAK,WAAW,8BAA8B,KAAK,OAAO,CAGrB,EAAE,kBACvC,YAAY,OAChB;EACA,IAAI,gBAAgB,MAAM,GACtB,OAAOF,eAAAA,OAAO,IAAI,gBAAgB,YAAY,CAAE;EAGpD,MAAM,YAAY,gBAAgB,UAAU;EAC5C,IAAI,UAAU,SACV,OAAO,KAAK,MAAM;EAGtB,OAAO,KAAK,kBACR,YAAY,gBACZ,KAAK,mBAAmB,SAAS,CACrC;CACJ;AACJ"}
+{"version":3,"file":"index.cjs","names":["coreConfig","Result","Outcome","ConditionEvaluatorV1"],"sources":["../../../../../src/core/policies/engines/v1/gate/gate-engine-v1.ts"],"sourcesContent":["import { type CoreConfig, coreConfig } from \"../../../../config/index.js\";\nimport { Outcome } from \"../../../../result/outcome.js\";\nimport { Result } from \"../../../../result/result.js\";\n\nimport {\n    ConditionEvaluatorV1,\n    type TracedConditionEvaluation,\n} from \"../condition-evaluator.js\";\nimport type { ConditionLeafNode, ConditionNode } from \"../condition-types.js\";\nimport type { GatePayload } from \"../../gate-payload.js\";\nimport type {\n    GateOutcome,\n    GateStatus,\n    GateTraceLeafSnapshot,\n    GateTraceNodeSnapshot,\n    PolicyContext,\n    PolicyViolation,\n    VersionedGateEngine,\n} from \"../../gate-types.js\";\n\n// ─── Gate engine v1 ─────────────────────────────────────────────────────────\n\nexport class GateEngineV1 implements VersionedGateEngine {\n    public readonly version = 1;\n    private readonly coreConfig: CoreConfig;\n\n    constructor(params: { readonly coreConfig?: CoreConfig } = {}) {\n        this.coreConfig = params.coreConfig ?? coreConfig;\n    }\n\n    private allow(): Result<GateOutcome, string> {\n        return Result.ok(Outcome.of(\"ALLOW\", { violations: [] }));\n    }\n\n    private deny(violation: PolicyViolation): Result<GateOutcome, string> {\n        return Result.ok(\n            Outcome.of(\"DENY\", {\n                violations: [violation],\n            }),\n        );\n    }\n\n    private outcomeFromStatus(\n        status: GateStatus,\n        violation: PolicyViolation,\n    ): Result<GateOutcome, string> {\n        return status === \"ALLOW\" ? this.allow() : this.deny(violation);\n    }\n\n    private isLeafNode(node: ConditionNode): node is ConditionLeafNode {\n        return \"field\" in node && \"op\" in node;\n    }\n\n    private toLeafSnapshot(node: ConditionLeafNode): GateTraceLeafSnapshot {\n        return {\n            kind: \"LEAF\",\n            field: node.field,\n            op: node.op,\n            ...(node.allowNull === true ? { allowNull: true } : {}),\n        };\n    }\n\n    private toNodeSnapshot(node: ConditionNode): GateTraceNodeSnapshot {\n        if (this.isLeafNode(node)) {\n            return this.toLeafSnapshot(node);\n        }\n\n        if (\"and\" in node) {\n            return {\n                kind: \"AND\",\n                childCount: node.and.length,\n            };\n        }\n\n        if (\"or\" in node) {\n            return {\n                kind: \"OR\",\n                childCount: node.or.length,\n            };\n        }\n\n        return {\n            kind: \"NOT\",\n        };\n    }\n\n    private buildDenyViolation(\n        conditionResult: TracedConditionEvaluation,\n    ): PolicyViolation {\n        return {\n            code: \"DENY_CONDITION_MET\",\n            message: `Gate denied at ${conditionResult.trace.conditionPath}`,\n            trace: {\n                conditionPath: conditionResult.trace.conditionPath,\n                decisiveNode: this.toNodeSnapshot(\n                    conditionResult.trace.decisiveNode,\n                ),\n                lastEvaluatedLeaf: this.toLeafSnapshot(\n                    conditionResult.trace.lastEvaluatedLeaf,\n                ),\n                lastEvaluatedLeafPath:\n                    conditionResult.trace.lastEvaluatedLeafPath,\n                lastEvaluatedLeafResult:\n                    conditionResult.trace.lastEvaluatedLeafResult,\n                field: conditionResult.trace.lastEvaluatedLeaf.field,\n                op: conditionResult.trace.lastEvaluatedLeaf.op,\n            },\n        };\n    }\n\n    private normalizePayload(payload: GatePayload): {\n        readonly allowIf: ConditionNode;\n        readonly defaultOutcome: \"ALLOW\" | \"DENY\";\n    } {\n        if (\"condition\" in payload) {\n            return {\n                allowIf: payload.condition,\n                defaultOutcome: \"DENY\",\n            };\n        }\n\n        return payload;\n    }\n\n    /**\n     * Evaluates a GATE payload against a context object.\n     * Pure function — no side effects.\n     *\n     * Receives an already-parsed `GatePayload`; the registry is responsible\n     * for parsing from raw `unknown` before calling this method.\n     * Returns Result for technical failures (condition evaluation errors).\n     * The Outcome inside carries the business decision (ALLOW/DENY).\n     */\n    evaluate(\n        payload: GatePayload,\n        context: PolicyContext,\n    ): Result<GateOutcome, string> {\n        const gatePayload = this.normalizePayload(payload);\n        const conditionEvaluator = new ConditionEvaluatorV1(\n            context,\n            this.coreConfig.getConditionEvaluationOptions(this.version),\n        );\n\n        const isAllowedResult = conditionEvaluator.evaluateWithTrace(\n            gatePayload.allowIf,\n        );\n        if (isAllowedResult.isErr()) {\n            return Result.err(isAllowedResult.errorOrNull()!);\n        }\n\n        const isAllowed = isAllowedResult.getOrNull()!;\n        if (isAllowed.matched) {\n            return this.allow();\n        }\n\n        return this.outcomeFromStatus(\n            gatePayload.defaultOutcome,\n            this.buildDenyViolation(isAllowed),\n        );\n    }\n}\n"],"mappings":";;;;;;AAsBA,IAAa,eAAb,MAAyD;CAIrD,YAAY,SAA+C,CAAC,GAAG;iBAHrC;EAItB,KAAK,aAAa,OAAO,cAAcA,4BAAAA;CAC3C;CAEA,QAA6C;EACzC,OAAOC,eAAAA,OAAO,GAAGC,gBAAAA,QAAQ,GAAG,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;CAC5D;CAEA,KAAa,WAAyD;EAClE,OAAOD,eAAAA,OAAO,GACVC,gBAAAA,QAAQ,GAAG,QAAQ,EACf,YAAY,CAAC,SAAS,EAC1B,CAAC,CACL;CACJ;CAEA,kBACI,QACA,WAC2B;EAC3B,OAAO,WAAW,UAAU,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS;CAClE;CAEA,WAAmB,MAAgD;EAC/D,OAAO,WAAW,QAAQ,QAAQ;CACtC;CAEA,eAAuB,MAAgD;EACnE,OAAO;GACH,MAAM;GACN,OAAO,KAAK;GACZ,IAAI,KAAK;GACT,GAAI,KAAK,cAAc,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;EACzD;CACJ;CAEA,eAAuB,MAA4C;EAC/D,IAAI,KAAK,WAAW,IAAI,GACpB,OAAO,KAAK,eAAe,IAAI;EAGnC,IAAI,SAAS,MACT,OAAO;GACH,MAAM;GACN,YAAY,KAAK,IAAI;EACzB;EAGJ,IAAI,QAAQ,MACR,OAAO;GACH,MAAM;GACN,YAAY,KAAK,GAAG;EACxB;EAGJ,OAAO,EACH,MAAM,MACV;CACJ;CAEA,mBACI,iBACe;EACf,OAAO;GACH,MAAM;GACN,SAAS,kBAAkB,gBAAgB,MAAM;GACjD,OAAO;IACH,eAAe,gBAAgB,MAAM;IACrC,cAAc,KAAK,eACf,gBAAgB,MAAM,YAC1B;IACA,mBAAmB,KAAK,eACpB,gBAAgB,MAAM,iBAC1B;IACA,uBACI,gBAAgB,MAAM;IAC1B,yBACI,gBAAgB,MAAM;IAC1B,OAAO,gBAAgB,MAAM,kBAAkB;IAC/C,IAAI,gBAAgB,MAAM,kBAAkB;GAChD;EACJ;CACJ;CAEA,iBAAyB,SAGvB;EACE,IAAI,eAAe,SACf,OAAO;GACH,SAAS,QAAQ;GACjB,gBAAgB;EACpB;EAGJ,OAAO;CACX;;;;;;;;;;CAWA,SACI,SACA,SAC2B;EAC3B,MAAM,cAAc,KAAK,iBAAiB,OAAO;EAMjD,MAAM,kBAAkB,IALOC,4BAAAA,qBAC3B,SACA,KAAK,WAAW,8BAA8B,KAAK,OAAO,CAGrB,EAAE,kBACvC,YAAY,OAChB;EACA,IAAI,gBAAgB,MAAM,GACtB,OAAOF,eAAAA,OAAO,IAAI,gBAAgB,YAAY,CAAE;EAGpD,MAAM,YAAY,gBAAgB,UAAU;EAC5C,IAAI,UAAU,SACV,OAAO,KAAK,MAAM;EAGtB,OAAO,KAAK,kBACR,YAAY,gBACZ,KAAK,mBAAmB,SAAS,CACrC;CACJ;AACJ"}

package/dist/policies/engines/v1/gate/index.d.cts

@@ -1,5 +1,5 @@
-import { a as Result } from "../../../../outcome.cjs";
-import { D as ConditionEvaluationOptions, d as GatePayloadV1, f as ConditionLeafNode, l as VersionedGateEngine, m as CoreConfig, p as ConditionNode, s as PolicyContext, t as GateOutcome, u as GatePayload } from "../../../../gate-types.cjs";
+import { r as Result } from "../../../../result.cjs";
+import { A as ConditionLeafNode, D as VersionedGateEngine, O as GatePayload, T as PolicyContext, j as ConditionNode, k as GatePayloadV1, m as ConditionEvaluationOptions, t as CoreConfig, y as GateOutcome } from "../../../../core-config.cjs";
 import { z } from "zod";
 
 //#region src/core/policies/engines/v1/condition-evaluator.d.ts
@@ -35,6 +35,8 @@ declare class ConditionEvaluatorV1 {
   private static evaluateRelationalNumbers;
   private buildReport;
   private conditionEvalErr;
+  private static containsInvalidDate;
+  private static normalizeDateOperand;
   private reportDateOperandError;
   private reportInvalidNumericOperand;
   private reportInvalidSetOperand;

package/dist/policies/engines/v1/gate/index.d.ts

@@ -1,5 +1,5 @@
-import { a as Result } from "../../../../outcome.js";
-import { D as ConditionEvaluationOptions, d as GatePayloadV1, f as ConditionLeafNode, l as VersionedGateEngine, m as CoreConfig, p as ConditionNode, s as PolicyContext, t as GateOutcome, u as GatePayload } from "../../../../gate-types.js";
+import { r as Result } from "../../../../result.js";
+import { A as ConditionLeafNode, D as VersionedGateEngine, O as GatePayload, T as PolicyContext, j as ConditionNode, k as GatePayloadV1, m as ConditionEvaluationOptions, t as CoreConfig, y as GateOutcome } from "../../../../core-config.js";
 import { z } from "zod";
 
 //#region src/core/policies/engines/v1/condition-evaluator.d.ts
@@ -35,6 +35,8 @@ declare class ConditionEvaluatorV1 {
   private static evaluateRelationalNumbers;
   private buildReport;
   private conditionEvalErr;
+  private static containsInvalidDate;
+  private static normalizeDateOperand;
   private reportDateOperandError;
   private reportInvalidNumericOperand;
   private reportInvalidSetOperand;

package/dist/policies/engines/v1/gate/index.js

@@ -1,6 +1,7 @@
-import { a as conditionNodeSchema, i as conditionLeafNodeSchema, n as gatePayloadSchema, r as ConditionEvaluatorV1, s as coreConfig, t as GatePayloadSchemaV1 } from "../../../../gate-v1-payload.schema.js";
 import { r as Result } from "../../../../result.js";
+import { r as coreConfig, t as ConditionEvaluatorV1 } from "../../../../condition-evaluator.js";
 import { t as Outcome } from "../../../../outcome.js";
+import { i as conditionNodeSchema, n as gatePayloadSchema, r as conditionLeafNodeSchema, t as GatePayloadSchemaV1 } from "../../../../gate-v1-payload.schema.js";
 //#region src/core/policies/engines/v1/gate/gate-engine-v1.ts
 var GateEngineV1 = class {
 	constructor(params = {}) {

package/dist/policies/engines/v1/gate/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../../../src/core/policies/engines/v1/gate/gate-engine-v1.ts"],"sourcesContent":["import { type CoreConfig, coreConfig } from \"../../../../config/index.js\";\nimport { Outcome } from \"../../../../result/outcome.js\";\nimport { Result } from \"../../../../result/result.js\";\n\nimport {\n    ConditionEvaluatorV1,\n    type TracedConditionEvaluation,\n} from \"../condition-evaluator.js\";\nimport type { ConditionLeafNode, ConditionNode } from \"../condition-types.js\";\nimport type { GatePayload } from \"../../gate-payload.js\";\nimport type {\n    GateOutcome,\n    GateStatus,\n    GateTraceLeafSnapshot,\n    GateTraceNodeSnapshot,\n    PolicyContext,\n    PolicyViolation,\n    VersionedGateEngine,\n} from \"../../gate-types.js\";\n\n// ─── Gate engine v1 ─────────────────────────────────────────────────────────\n\nexport class GateEngineV1 implements VersionedGateEngine {\n    public readonly version = 1;\n    private readonly coreConfig: CoreConfig;\n\n    constructor(params: { readonly coreConfig?: CoreConfig } = {}) {\n        this.coreConfig = params.coreConfig ?? coreConfig;\n    }\n\n    private allow(): Result<GateOutcome, string> {\n        return Result.ok(Outcome.of(\"ALLOW\", { violations: [] }));\n    }\n\n    private deny(violation: PolicyViolation): Result<GateOutcome, string> {\n        return Result.ok(\n            Outcome.of(\"DENY\", {\n                violations: [violation],\n            }),\n        );\n    }\n\n    private outcomeFromStatus(\n        status: GateStatus,\n        violation: PolicyViolation,\n    ): Result<GateOutcome, string> {\n        return status === \"ALLOW\" ? this.allow() : this.deny(violation);\n    }\n\n    private isLeafNode(node: ConditionNode): node is ConditionLeafNode {\n        return \"field\" in node && \"op\" in node;\n    }\n\n    private toLeafSnapshot(node: ConditionLeafNode): GateTraceLeafSnapshot {\n        return {\n            kind: \"LEAF\",\n            field: node.field,\n            op: node.op,\n            ...(node.allowNull === true ? { allowNull: true } : {}),\n        };\n    }\n\n    private toNodeSnapshot(node: ConditionNode): GateTraceNodeSnapshot {\n        if (this.isLeafNode(node)) {\n            return this.toLeafSnapshot(node);\n        }\n\n        if (\"and\" in node) {\n            return {\n                kind: \"AND\",\n                childCount: node.and.length,\n            };\n        }\n\n        if (\"or\" in node) {\n            return {\n                kind: \"OR\",\n                childCount: node.or.length,\n            };\n        }\n\n        return {\n            kind: \"NOT\",\n        };\n    }\n\n    private buildDenyViolation(\n        conditionResult: TracedConditionEvaluation,\n    ): PolicyViolation {\n        return {\n            code: \"DENY_CONDITION_MET\",\n            message: `Gate denied at ${conditionResult.trace.conditionPath}`,\n            trace: {\n                conditionPath: conditionResult.trace.conditionPath,\n                decisiveNode: this.toNodeSnapshot(\n                    conditionResult.trace.decisiveNode,\n                ),\n                lastEvaluatedLeaf: this.toLeafSnapshot(\n                    conditionResult.trace.lastEvaluatedLeaf,\n                ),\n                lastEvaluatedLeafPath:\n                    conditionResult.trace.lastEvaluatedLeafPath,\n                lastEvaluatedLeafResult:\n                    conditionResult.trace.lastEvaluatedLeafResult,\n                field: conditionResult.trace.lastEvaluatedLeaf.field,\n                op: conditionResult.trace.lastEvaluatedLeaf.op,\n            },\n        };\n    }\n\n    private normalizePayload(payload: GatePayload): {\n        readonly allowIf: ConditionNode;\n        readonly defaultOutcome: \"ALLOW\" | \"DENY\";\n    } {\n        if (\"condition\" in payload) {\n            return {\n                allowIf: payload.condition,\n                defaultOutcome: \"DENY\",\n            };\n        }\n\n        return payload;\n    }\n\n    /**\n     * Evaluates a GATE payload against a context object.\n     * Pure function — no side effects.\n     *\n     * Receives an already-parsed `GatePayload`; the registry is responsible\n     * for parsing from raw `unknown` before calling this method.\n     * Returns Result for technical failures (condition evaluation errors).\n     * The Outcome inside carries the business decision (ALLOW/DENY).\n     */\n    evaluate(\n        payload: GatePayload,\n        context: PolicyContext,\n    ): Result<GateOutcome, string> {\n        const gatePayload = this.normalizePayload(payload);\n        const conditionEvaluator = new ConditionEvaluatorV1(\n            context,\n            this.coreConfig.getConditionEvaluationOptions(this.version),\n        );\n\n        const isAllowedResult = conditionEvaluator.evaluateWithTrace(\n            gatePayload.allowIf,\n        );\n        if (isAllowedResult.isErr()) {\n            return Result.err(isAllowedResult.errorOrNull()!);\n        }\n\n        const isAllowed = isAllowedResult.getOrNull()!;\n        if (isAllowed.matched) {\n            return this.allow();\n        }\n\n        return this.outcomeFromStatus(\n            gatePayload.defaultOutcome,\n            this.buildDenyViolation(isAllowed),\n        );\n    }\n}\n"],"mappings":";;;;AAsBA,IAAa,eAAb,MAAyD;CAIrD,YAAY,SAA+C,CAAC,GAAG;iBAHrC;EAItB,KAAK,aAAa,OAAO,cAAc;CAC3C;CAEA,QAA6C;EACzC,OAAO,OAAO,GAAG,QAAQ,GAAG,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;CAC5D;CAEA,KAAa,WAAyD;EAClE,OAAO,OAAO,GACV,QAAQ,GAAG,QAAQ,EACf,YAAY,CAAC,SAAS,EAC1B,CAAC,CACL;CACJ;CAEA,kBACI,QACA,WAC2B;EAC3B,OAAO,WAAW,UAAU,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS;CAClE;CAEA,WAAmB,MAAgD;EAC/D,OAAO,WAAW,QAAQ,QAAQ;CACtC;CAEA,eAAuB,MAAgD;EACnE,OAAO;GACH,MAAM;GACN,OAAO,KAAK;GACZ,IAAI,KAAK;GACT,GAAI,KAAK,cAAc,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;EACzD;CACJ;CAEA,eAAuB,MAA4C;EAC/D,IAAI,KAAK,WAAW,IAAI,GACpB,OAAO,KAAK,eAAe,IAAI;EAGnC,IAAI,SAAS,MACT,OAAO;GACH,MAAM;GACN,YAAY,KAAK,IAAI;EACzB;EAGJ,IAAI,QAAQ,MACR,OAAO;GACH,MAAM;GACN,YAAY,KAAK,GAAG;EACxB;EAGJ,OAAO,EACH,MAAM,MACV;CACJ;CAEA,mBACI,iBACe;EACf,OAAO;GACH,MAAM;GACN,SAAS,kBAAkB,gBAAgB,MAAM;GACjD,OAAO;IACH,eAAe,gBAAgB,MAAM;IACrC,cAAc,KAAK,eACf,gBAAgB,MAAM,YAC1B;IACA,mBAAmB,KAAK,eACpB,gBAAgB,MAAM,iBAC1B;IACA,uBACI,gBAAgB,MAAM;IAC1B,yBACI,gBAAgB,MAAM;IAC1B,OAAO,gBAAgB,MAAM,kBAAkB;IAC/C,IAAI,gBAAgB,MAAM,kBAAkB;GAChD;EACJ;CACJ;CAEA,iBAAyB,SAGvB;EACE,IAAI,eAAe,SACf,OAAO;GACH,SAAS,QAAQ;GACjB,gBAAgB;EACpB;EAGJ,OAAO;CACX;;;;;;;;;;CAWA,SACI,SACA,SAC2B;EAC3B,MAAM,cAAc,KAAK,iBAAiB,OAAO;EAMjD,MAAM,kBAAkB,IALO,qBAC3B,SACA,KAAK,WAAW,8BAA8B,KAAK,OAAO,CAGrB,EAAE,kBACvC,YAAY,OAChB;EACA,IAAI,gBAAgB,MAAM,GACtB,OAAO,OAAO,IAAI,gBAAgB,YAAY,CAAE;EAGpD,MAAM,YAAY,gBAAgB,UAAU;EAC5C,IAAI,UAAU,SACV,OAAO,KAAK,MAAM;EAGtB,OAAO,KAAK,kBACR,YAAY,gBACZ,KAAK,mBAAmB,SAAS,CACrC;CACJ;AACJ"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../../../src/core/policies/engines/v1/gate/gate-engine-v1.ts"],"sourcesContent":["import { type CoreConfig, coreConfig } from \"../../../../config/index.js\";\nimport { Outcome } from \"../../../../result/outcome.js\";\nimport { Result } from \"../../../../result/result.js\";\n\nimport {\n    ConditionEvaluatorV1,\n    type TracedConditionEvaluation,\n} from \"../condition-evaluator.js\";\nimport type { ConditionLeafNode, ConditionNode } from \"../condition-types.js\";\nimport type { GatePayload } from \"../../gate-payload.js\";\nimport type {\n    GateOutcome,\n    GateStatus,\n    GateTraceLeafSnapshot,\n    GateTraceNodeSnapshot,\n    PolicyContext,\n    PolicyViolation,\n    VersionedGateEngine,\n} from \"../../gate-types.js\";\n\n// ─── Gate engine v1 ─────────────────────────────────────────────────────────\n\nexport class GateEngineV1 implements VersionedGateEngine {\n    public readonly version = 1;\n    private readonly coreConfig: CoreConfig;\n\n    constructor(params: { readonly coreConfig?: CoreConfig } = {}) {\n        this.coreConfig = params.coreConfig ?? coreConfig;\n    }\n\n    private allow(): Result<GateOutcome, string> {\n        return Result.ok(Outcome.of(\"ALLOW\", { violations: [] }));\n    }\n\n    private deny(violation: PolicyViolation): Result<GateOutcome, string> {\n        return Result.ok(\n            Outcome.of(\"DENY\", {\n                violations: [violation],\n            }),\n        );\n    }\n\n    private outcomeFromStatus(\n        status: GateStatus,\n        violation: PolicyViolation,\n    ): Result<GateOutcome, string> {\n        return status === \"ALLOW\" ? this.allow() : this.deny(violation);\n    }\n\n    private isLeafNode(node: ConditionNode): node is ConditionLeafNode {\n        return \"field\" in node && \"op\" in node;\n    }\n\n    private toLeafSnapshot(node: ConditionLeafNode): GateTraceLeafSnapshot {\n        return {\n            kind: \"LEAF\",\n            field: node.field,\n            op: node.op,\n            ...(node.allowNull === true ? { allowNull: true } : {}),\n        };\n    }\n\n    private toNodeSnapshot(node: ConditionNode): GateTraceNodeSnapshot {\n        if (this.isLeafNode(node)) {\n            return this.toLeafSnapshot(node);\n        }\n\n        if (\"and\" in node) {\n            return {\n                kind: \"AND\",\n                childCount: node.and.length,\n            };\n        }\n\n        if (\"or\" in node) {\n            return {\n                kind: \"OR\",\n                childCount: node.or.length,\n            };\n        }\n\n        return {\n            kind: \"NOT\",\n        };\n    }\n\n    private buildDenyViolation(\n        conditionResult: TracedConditionEvaluation,\n    ): PolicyViolation {\n        return {\n            code: \"DENY_CONDITION_MET\",\n            message: `Gate denied at ${conditionResult.trace.conditionPath}`,\n            trace: {\n                conditionPath: conditionResult.trace.conditionPath,\n                decisiveNode: this.toNodeSnapshot(\n                    conditionResult.trace.decisiveNode,\n                ),\n                lastEvaluatedLeaf: this.toLeafSnapshot(\n                    conditionResult.trace.lastEvaluatedLeaf,\n                ),\n                lastEvaluatedLeafPath:\n                    conditionResult.trace.lastEvaluatedLeafPath,\n                lastEvaluatedLeafResult:\n                    conditionResult.trace.lastEvaluatedLeafResult,\n                field: conditionResult.trace.lastEvaluatedLeaf.field,\n                op: conditionResult.trace.lastEvaluatedLeaf.op,\n            },\n        };\n    }\n\n    private normalizePayload(payload: GatePayload): {\n        readonly allowIf: ConditionNode;\n        readonly defaultOutcome: \"ALLOW\" | \"DENY\";\n    } {\n        if (\"condition\" in payload) {\n            return {\n                allowIf: payload.condition,\n                defaultOutcome: \"DENY\",\n            };\n        }\n\n        return payload;\n    }\n\n    /**\n     * Evaluates a GATE payload against a context object.\n     * Pure function — no side effects.\n     *\n     * Receives an already-parsed `GatePayload`; the registry is responsible\n     * for parsing from raw `unknown` before calling this method.\n     * Returns Result for technical failures (condition evaluation errors).\n     * The Outcome inside carries the business decision (ALLOW/DENY).\n     */\n    evaluate(\n        payload: GatePayload,\n        context: PolicyContext,\n    ): Result<GateOutcome, string> {\n        const gatePayload = this.normalizePayload(payload);\n        const conditionEvaluator = new ConditionEvaluatorV1(\n            context,\n            this.coreConfig.getConditionEvaluationOptions(this.version),\n        );\n\n        const isAllowedResult = conditionEvaluator.evaluateWithTrace(\n            gatePayload.allowIf,\n        );\n        if (isAllowedResult.isErr()) {\n            return Result.err(isAllowedResult.errorOrNull()!);\n        }\n\n        const isAllowed = isAllowedResult.getOrNull()!;\n        if (isAllowed.matched) {\n            return this.allow();\n        }\n\n        return this.outcomeFromStatus(\n            gatePayload.defaultOutcome,\n            this.buildDenyViolation(isAllowed),\n        );\n    }\n}\n"],"mappings":";;;;;AAsBA,IAAa,eAAb,MAAyD;CAIrD,YAAY,SAA+C,CAAC,GAAG;iBAHrC;EAItB,KAAK,aAAa,OAAO,cAAc;CAC3C;CAEA,QAA6C;EACzC,OAAO,OAAO,GAAG,QAAQ,GAAG,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;CAC5D;CAEA,KAAa,WAAyD;EAClE,OAAO,OAAO,GACV,QAAQ,GAAG,QAAQ,EACf,YAAY,CAAC,SAAS,EAC1B,CAAC,CACL;CACJ;CAEA,kBACI,QACA,WAC2B;EAC3B,OAAO,WAAW,UAAU,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS;CAClE;CAEA,WAAmB,MAAgD;EAC/D,OAAO,WAAW,QAAQ,QAAQ;CACtC;CAEA,eAAuB,MAAgD;EACnE,OAAO;GACH,MAAM;GACN,OAAO,KAAK;GACZ,IAAI,KAAK;GACT,GAAI,KAAK,cAAc,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;EACzD;CACJ;CAEA,eAAuB,MAA4C;EAC/D,IAAI,KAAK,WAAW,IAAI,GACpB,OAAO,KAAK,eAAe,IAAI;EAGnC,IAAI,SAAS,MACT,OAAO;GACH,MAAM;GACN,YAAY,KAAK,IAAI;EACzB;EAGJ,IAAI,QAAQ,MACR,OAAO;GACH,MAAM;GACN,YAAY,KAAK,GAAG;EACxB;EAGJ,OAAO,EACH,MAAM,MACV;CACJ;CAEA,mBACI,iBACe;EACf,OAAO;GACH,MAAM;GACN,SAAS,kBAAkB,gBAAgB,MAAM;GACjD,OAAO;IACH,eAAe,gBAAgB,MAAM;IACrC,cAAc,KAAK,eACf,gBAAgB,MAAM,YAC1B;IACA,mBAAmB,KAAK,eACpB,gBAAgB,MAAM,iBAC1B;IACA,uBACI,gBAAgB,MAAM;IAC1B,yBACI,gBAAgB,MAAM;IAC1B,OAAO,gBAAgB,MAAM,kBAAkB;IAC/C,IAAI,gBAAgB,MAAM,kBAAkB;GAChD;EACJ;CACJ;CAEA,iBAAyB,SAGvB;EACE,IAAI,eAAe,SACf,OAAO;GACH,SAAS,QAAQ;GACjB,gBAAgB;EACpB;EAGJ,OAAO;CACX;;;;;;;;;;CAWA,SACI,SACA,SAC2B;EAC3B,MAAM,cAAc,KAAK,iBAAiB,OAAO;EAMjD,MAAM,kBAAkB,IALO,qBAC3B,SACA,KAAK,WAAW,8BAA8B,KAAK,OAAO,CAGrB,EAAE,kBACvC,YAAY,OAChB;EACA,IAAI,gBAAgB,MAAM,GACtB,OAAO,OAAO,IAAI,gBAAgB,YAAY,CAAE;EAGpD,MAAM,YAAY,gBAAgB,UAAU;EAC5C,IAAI,UAAU,SACV,OAAO,KAAK,MAAM;EAGtB,OAAO,KAAK,kBACR,YAAY,gBACZ,KAAK,mBAAmB,SAAS,CACrC;CACJ;AACJ"}

package/dist/policies/index.cjs

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_gate_v1_payload_schema = require("../gate-v1-payload.schema.cjs");
 const require_result = require("../result.cjs");
-const require_outcome = require("../outcome.cjs");
+const require_condition_evaluator = require("../condition-evaluator.cjs");
 const require_policy_service = require("../policy-service.cjs");
+const require_outcome = require("../outcome.cjs");
 const require_gate_engine_registry = require("../gate-engine-registry.cjs");
 exports.ComputeEngineRegistry = require_gate_engine_registry.ComputeEngineRegistry;
 exports.ComputeEvaluatorRegistry = require_gate_engine_registry.ComputeEvaluatorRegistry;
@@ -11,7 +11,7 @@ exports.ComputePayloadParsers = require_gate_engine_registry.ComputePayloadParse
 exports.ComputeRegistry = require_gate_engine_registry.ComputeRegistry;
 exports.ContextResolverRegistry = require_policy_service.ContextResolverRegistry;
 exports.ContextSeedValidator = require_policy_service.ContextSeedValidator;
-exports.CoreConfig = require_gate_v1_payload_schema.CoreConfig;
+exports.CoreConfig = require_condition_evaluator.CoreConfig;
 exports.Err = require_result.Err;
 exports.GateEngineRegistry = require_gate_engine_registry.GateEngineRegistry;
 exports.GatePayloadParsers = require_gate_engine_registry.GatePayloadParsers;
@@ -22,7 +22,7 @@ exports.PolicyAsOfResolver = require_policy_service.PolicyAsOfResolver;
 exports.PolicyCatalog = require_policy_service.PolicyCatalog;
 exports.PolicyCatalogFactory = require_policy_service.PolicyCatalogFactory;
 exports.PolicyContextBuilder = require_policy_service.PolicyContextBuilder;
-exports.PolicyContextPath = require_gate_v1_payload_schema.PolicyContextPath;
+exports.PolicyContextPath = require_condition_evaluator.PolicyContextPath;
 exports.PolicyDefinition = require_policy_service.PolicyDefinition;
 exports.PolicyEvaluationErrors = require_policy_service.PolicyEvaluationErrors;
 exports.PolicyHashing = require_policy_service.PolicyHashing;
@@ -36,6 +36,6 @@ exports.asPolicyDefinitionId = require_policy_service.asPolicyDefinitionId;
 exports.asSchoolId = require_policy_service.asSchoolId;
 exports.asTenantId = require_policy_service.asTenantId;
 exports.contextResolverRegistry = require_policy_service.contextResolverRegistry;
-exports.coreConfig = require_gate_v1_payload_schema.coreConfig;
+exports.coreConfig = require_condition_evaluator.coreConfig;
 exports.registerNamespacedContextResolvers = require_policy_service.registerNamespacedContextResolvers;
 exports.registerNamespacedContextResolversIn = require_policy_service.registerNamespacedContextResolversIn;

package/dist/policies/index.d.cts

@@ -1,5 +1,6 @@
-import { a as Result, i as Ok, n as Outcome, r as Err, t as CommonOutcomeStatus } from "../outcome.cjs";
-import { A as ConditionEvaluationReportTag, C as asPolicyDefinitionId, D as ConditionEvaluationOptions, E as ConditionEvaluationCause, O as ConditionEvaluationReport, S as asPolicyDecisionId, T as asTenantId, a as GateTraceNodeSnapshot, b as SchoolId, c as PolicyViolation, g as CoreObservabilityConfig, h as CoreConfigOptions, i as GateTraceLeafSnapshot, j as ConditionEvaluatorReporter, k as ConditionEvaluationReportLevel, l as VersionedGateEngine, m as CoreConfig, n as GateOutcomeData, o as GateViolationTrace, r as GateStatus, s as PolicyContext, t as GateOutcome, u as GatePayload, v as PolicyDecisionId, w as asSchoolId, x as TenantId, y as PolicyDefinitionId } from "../gate-types.cjs";
+import { n as Ok, r as Result, t as Err } from "../result.cjs";
+import { n as Outcome, t as CommonOutcomeStatus } from "../outcome.cjs";
+import { C as GateTraceNodeSnapshot, D as VersionedGateEngine, E as PolicyViolation, O as GatePayload, S as GateTraceLeafSnapshot, T as PolicyContext, _ as ConditionEvaluationReportTag, a as PolicyDecisionId, b as GateOutcomeData, c as TenantId, d as asSchoolId, f as asTenantId, g as ConditionEvaluationReportLevel, h as ConditionEvaluationReport, l as asPolicyDecisionId, m as ConditionEvaluationOptions, n as CoreConfigOptions, o as PolicyDefinitionId, p as ConditionEvaluationCause, r as CoreObservabilityConfig, s as SchoolId, t as CoreConfig, u as asPolicyDefinitionId, v as ConditionEvaluatorReporter, w as GateViolationTrace, x as GateStatus, y as GateOutcome } from "../core-config.cjs";
 import { a as PolicyPackage, c as coreConfig, i as PolicyCatalogFactory, n as contextResolverRegistry, o as InMemoryPolicyDefinitionRepository, r as registerNamespacedContextResolvers, s as PolicyHashing, t as PolicyContextPath } from "../path.cjs";
 import { A as PolicyScope, C as BasePolicyDefinitionProps, D as PolicyDefinition, E as GatePolicyDefinitionProps, F as PolicyKey, I as AsOfSource, L as PolicyKind, M as ScopeChain, N as PolicyCatalog, O as PolicyDefinitionProps, P as PolicyCatalogEntryProps, R as PolicyOwner, T as FindCandidatesParams, _ as ContextResolverResilienceOptions, a as PolicyServiceOptions, b as ContextSeed, c as PolicyEvaluationErrors, d as PolicyAsOfResolver, f as PolicyContextBuilder, g as ContextResolverCircuitBreakerOptions, h as registerNamespacedContextResolversIn, i as PolicyService, j as PolicyScopeMatcher, k as PolicyDefinitionStatus, l as PolicyResolver, m as ContextResolverRegistry, n as PolicyDecision, o as PolicyServiceParams, p as PolicyContextBuilderOptions, r as PolicyEvaluationResult, s as PolicyEvaluationError, t as EvaluateInput, u as DeriveAsOfOptions, v as ContextResolverRetryOptions, w as ComputePolicyDefinitionProps, x as ContextSeedValidator, y as ContextValueResolver, z as PolicyScopeLevel } from "../policy-service.cjs";
 import { a as ComputeOutcome, c as VersionedComputeEngine, i as ComputeEvaluatorRegistration, n as ComputeRegistry, o as ComputeOutcomeData, r as ComputeEvaluator, s as ComputeStatus, t as GateEngineRegistry } from "../gate-engine-registry.cjs";

package/dist/policies/index.d.ts

@@ -1,5 +1,6 @@
-import { a as Result, i as Ok, n as Outcome, r as Err, t as CommonOutcomeStatus } from "../outcome.js";
-import { A as ConditionEvaluationReportTag, C as asPolicyDefinitionId, D as ConditionEvaluationOptions, E as ConditionEvaluationCause, O as ConditionEvaluationReport, S as asPolicyDecisionId, T as asTenantId, a as GateTraceNodeSnapshot, b as SchoolId, c as PolicyViolation, g as CoreObservabilityConfig, h as CoreConfigOptions, i as GateTraceLeafSnapshot, j as ConditionEvaluatorReporter, k as ConditionEvaluationReportLevel, l as VersionedGateEngine, m as CoreConfig, n as GateOutcomeData, o as GateViolationTrace, r as GateStatus, s as PolicyContext, t as GateOutcome, u as GatePayload, v as PolicyDecisionId, w as asSchoolId, x as TenantId, y as PolicyDefinitionId } from "../gate-types.js";
+import { n as Ok, r as Result, t as Err } from "../result.js";
+import { n as Outcome, t as CommonOutcomeStatus } from "../outcome.js";
+import { C as GateTraceNodeSnapshot, D as VersionedGateEngine, E as PolicyViolation, O as GatePayload, S as GateTraceLeafSnapshot, T as PolicyContext, _ as ConditionEvaluationReportTag, a as PolicyDecisionId, b as GateOutcomeData, c as TenantId, d as asSchoolId, f as asTenantId, g as ConditionEvaluationReportLevel, h as ConditionEvaluationReport, l as asPolicyDecisionId, m as ConditionEvaluationOptions, n as CoreConfigOptions, o as PolicyDefinitionId, p as ConditionEvaluationCause, r as CoreObservabilityConfig, s as SchoolId, t as CoreConfig, u as asPolicyDefinitionId, v as ConditionEvaluatorReporter, w as GateViolationTrace, x as GateStatus, y as GateOutcome } from "../core-config.js";
 import { a as PolicyPackage, c as coreConfig, i as PolicyCatalogFactory, n as contextResolverRegistry, o as InMemoryPolicyDefinitionRepository, r as registerNamespacedContextResolvers, s as PolicyHashing, t as PolicyContextPath } from "../path.js";
 import { A as PolicyScope, C as BasePolicyDefinitionProps, D as PolicyDefinition, E as GatePolicyDefinitionProps, F as PolicyKey, I as AsOfSource, L as PolicyKind, M as ScopeChain, N as PolicyCatalog, O as PolicyDefinitionProps, P as PolicyCatalogEntryProps, R as PolicyOwner, T as FindCandidatesParams, _ as ContextResolverResilienceOptions, a as PolicyServiceOptions, b as ContextSeed, c as PolicyEvaluationErrors, d as PolicyAsOfResolver, f as PolicyContextBuilder, g as ContextResolverCircuitBreakerOptions, h as registerNamespacedContextResolversIn, i as PolicyService, j as PolicyScopeMatcher, k as PolicyDefinitionStatus, l as PolicyResolver, m as ContextResolverRegistry, n as PolicyDecision, o as PolicyServiceParams, p as PolicyContextBuilderOptions, r as PolicyEvaluationResult, s as PolicyEvaluationError, t as EvaluateInput, u as DeriveAsOfOptions, v as ContextResolverRetryOptions, w as ComputePolicyDefinitionProps, x as ContextSeedValidator, y as ContextValueResolver, z as PolicyScopeLevel } from "../policy-service.js";
 import { a as ComputeOutcome, c as VersionedComputeEngine, i as ComputeEvaluatorRegistration, n as ComputeRegistry, o as ComputeOutcomeData, r as ComputeEvaluator, s as ComputeStatus, t as GateEngineRegistry } from "../gate-engine-registry.js";