@happyvertical/smrt-fields 0.40.59 → 0.40.61

package/dist/index.d.ts

@@ -1,532 +1,9 @@
-import { DatabaseInterface } from '@happyvertical/sql';
-import { FieldUIHints } from '@happyvertical/smrt-core';
-import { ObjectRegistry } from '@happyvertical/smrt-core';
-import { SmrtClassOptions } from '@happyvertical/smrt-core';
-import { SmrtCollection } from '@happyvertical/smrt-core';
-import { SmrtObject } from '@happyvertical/smrt-core';
-import { SmrtObjectOptions } from '@happyvertical/smrt-core';
-
-/**
- * `scopeKey` value for app-scope rows. `scopeKey` exists ONLY so the
- * `conflictColumns` unique index stays total while `tenantId`/`userId` are
- * nullable (nullable columns would allow duplicate NULL rows) — the same
- * trick as `PromptOverride.context`.
- */
-export declare const APP_FIELD_POLICY_SCOPE_KEY = "__app__";
-
-/**
- * Type-check a parsed default value against the manifest field type.
- *
- * Explicit `null` is allowed only for optional fields (a required field with a
- * null default has no usable default). Unsupported field types reject defaults
- * outright (fail closed).
- */
-export declare function assertDefaultValueMatchesFieldType(objectRef: string, fieldName: string, field: RegisteredFieldInfo, value: unknown): void;
-
-/** Code-seed delta for one field (visibility supplied by the cold-start pass). */
-export declare function buildCodeSeedDelta(field: RegisteredFieldInfo, visibility: FieldPolicyVisibility): FieldPolicyDelta;
-
-/**
- * Compute the code-seed visibility for every field of an object using the
- * cold-start rule (#2046): with no `ui.basic` markers anywhere on the object,
- * every field is `basic`; once any field is marked `basic: true`, unmarked
- * fields default to `advanced` (and an explicit `basic: false` is always
- * `advanced`).
- */
-export declare function buildCodeSeedVisibility(fields: FieldDefinitionMap): Map<string, FieldPolicyVisibility>;
-
-export declare function clearFieldPolicyCache(): void;
-
-/**
- * Explain variant: merged result plus the ordered per-layer contributions for
- * each field, so admin/gear UIs (#2049/#2050) never re-derive precedence.
- * Layers are listed in application order (code, app, tenant chain root → leaf,
- * user) and contain ONLY contributions that survive into the merged result:
- * tenant ancestors discarded by a permission-inheritance break and user rows
- * suppressed by an effective org lock are omitted, so sequentially replaying
- * the listed deltas reproduces the merged policy.
- */
-export declare interface ExplainedObjectFieldPolicy extends ResolvedObjectFieldPolicy {
-    layers: Record<string, FieldPolicyLayerContribution[]>;
-}
-
-export declare const FIELD_POLICY_SCOPE_TYPES: readonly FieldPolicyScopeType[];
-
-export declare const FIELD_POLICY_VISIBILITIES: readonly FieldPolicyVisibility[];
-
-/**
- * Field map for one object, keyed by field name (includes inherited fields).
- * Derived structurally from the PUBLIC `ObjectRegistry.getAllFields` return
- * type — core does not export its internal `RegisteredField` name.
- */
-export declare type FieldDefinitionMap = Awaited<ReturnType<typeof ObjectRegistry.getAllFields>>;
-
-/**
- * Sparse, layered field policy override (epic #2045, issue #2047).
- *
- * One row personalizes a subset of `{defaultValue, visibility, help, label,
- * displayOrder, locked}` for a single `(objectRef, fieldName)` at one scope
- * tier. A NULL column means "inherit from the lower layer" (code seed → app →
- * tenant → user), so resetting a customization is a row DELETE — later
- * lower-layer changes then flow through (sparse-delta rationale, #1770).
- *
- * Rows are validated at write time against the live `ObjectRegistry` (the
- * manifest is the definition registry): unknown objects/fields are rejected,
- * defaults are type-checked, and the security rail (`sensitive` /
- * `readPermission` / `transient`) refuses stored defaults outright.
- */
-export declare class FieldPolicy extends SmrtObject {
-    /** Qualified class name of the target object (`@package/name:ClassName`). */
-    objectRef: string;
-    /** Field name on the target object (validated against the registry). */
-    fieldName: string;
-    /** Scope tier this row belongs to ('app' | 'tenant' | 'user'). */
-    scopeType: FieldPolicyScopeType;
-    /** Owning tenant for tenant-scope rows; NULL otherwise (native UUID on PG). */
-    tenantId: string | null;
-    /** Owning user for user-scope rows; NULL otherwise. */
-    userId: string | null;
-    /**
-     * Computed uniqueness key (`userId ?? tenantId ?? '__app__'`), set in
-     * `save()`. Used ONLY by `conflictColumns` so the unique index stays total
-     * while `tenantId`/`userId` are nullable — mirrors `PromptOverride.context`.
-     * Never read it for scoping logic; `scopeType` + the typed columns own that.
-     */
-    scopeKey: string;
-    /** JSON-encoded default value; NULL = inherit. JSON `null` = "default to null". */
-    defaultValue: string | null;
-    /** Visibility override ('basic' | 'advanced' | 'hidden'); NULL = inherit. */
-    visibility: FieldPolicyVisibility | null;
-    /** Help text override; NULL = inherit (code seed: field description). */
-    help: string | null;
-    /** Label override; NULL = inherit (consumers derive from the field name). */
-    label: string | null;
-    /**
-     * Sort-order override; NULL = inherit (code seed: `ui.order`). Named
-     * `displayOrder` because a column literally named `order` is an SQL keyword
-     * the runtime INSERT path does not quote; resolved output exposes `order`.
-     */
-    displayOrder: number | null;
-    /**
-     * Org lock (app/tenant rows only): when the effective lock is true, the
-     * user tier may not override this field. NULL = inherit (code seed:
-     * `ui.locked`); org rows may set `false` to explicitly unlock.
-     */
-    locked: boolean | null;
-    /** Audit attribution for #2050 ("who changed what"); not validated. */
-    updatedBy: string | null;
-    constructor(options?: FieldPolicyOptions);
-    /** Parse the stored JSON default. `undefined` = no stored default (inherit). */
-    getDefaultValue(): unknown;
-    /** Serialize a default value; `undefined` clears the override (inherit). */
-    setDefaultValue(value: unknown): void;
-    save(): Promise<this>;
-    private saveAfterIdentityChange;
-    private saveAfterIdentityChangeInTransaction;
-    private saveAfterIdentityChangeWithDeferredDelete;
-    delete(): Promise<void>;
-    private validateFieldPolicy;
-    /**
-     * Effective org-tier (code → app → tenant hierarchy) policy for this row's
-     * field, computed by the RESOLVER so write-time checks share the one
-     * precedence implementation — including ancestor-tenant cascades via the
-     * default hierarchy loader. The chain tenant is the row's own tenant for
-     * tenant-scope rows, the ambient context tenant for user-scope rows, and
-     * none for app-scope rows (their only lower layer is the code seed).
-     *
-     * On updates the resolver sees this row's PERSISTED version (there is no
-     * self-exclusion), so a save that removes the only default while demoting
-     * can pass here; the resolver-side safety net stays authoritative at read
-     * time.
-     */
-    private resolveOrgTierFieldPolicy;
-    /**
-     * Exactly-one-owner scope shape: app rows carry neither id, tenant rows
-     * carry only `tenantId`, user rows carry only `userId` (the user tier is
-     * keyed by user alone so preferences follow the user across tenants).
-     */
-    private validateScopeConsistency;
-    /** `userId ?? tenantId ?? '__app__'` — the `conflictColumns` scope key. */
-    private computeScopeKey;
-    /**
-     * Derive a scope-owner column the transport could not carry (#2047).
-     *
-     * Core's mass-assignment guard treats `tenantId` as server-managed and
-     * strips it from EVERY generated create/update body, and `FieldPolicy` is
-     * deliberately not `@TenantScoped`, so the tenancy interceptor never
-     * repopulates it. A `POST {scopeType:'tenant', tenantId}` therefore always
-     * reached `validateScopeConsistency` with `tenantId === null`, making the
-     * org tier write-dead over every generated surface — the model, as the
-     * single validation authority for these rows, fills it in instead.
-     *
-     * This grants nothing: `assertScopeOwnedByAmbientContext` already requires
-     * a non-bypass caller's tenant/user rows to name exactly the ambient
-     * tenant/user, so the derived value is the ONLY value that could ever have
-     * been accepted. An explicit value is never overwritten (a super-admin
-     * bypass caller keeps naming other scopes), and with no ambient context
-     * nothing is derived — scope-shape validation rejects the row as before.
-     * Consequence: a bypass caller writing ANOTHER tenant's row must pass
-     * `tenantId` through a server-side model call, because the generated routes
-     * still strip it.
-     */
-    private attributeScopeToAmbientContext;
-    /**
-     * Fail-closed write boundary against the ambient tenant context, applied to
-     * the NEW scope on save and to the PERSISTED scope on save/delete of an
-     * existing row.
-     *
-     * With NO ambient identity at all (no tenant context entered — e.g. a
-     * runtime API deployment whose auth middleware never enters the tenancy
-     * ALS), only app-scope rows are accepted: tenant- and user-scope rows are
-     * unattributable without a context, so they are rejected outright rather
-     * than allowed by default. Inside a non-bypass context, a caller may only
-     * touch rows for its own tenant, and user rows only for its own user id —
-     * a context that carries NO user id may not touch the user tier at all.
-     * App-wide rows then require super-admin bypass (or a context-less/system
-     * caller).
-     *
-     * Package rule: a missing identity component DENIES, it never skips.
-     */
-    private assertScopeOwnedByAmbientContext;
-    private validateTenantContextBoundary;
-    private validateDefaultAgainstSecurityRail;
-    private parseDefaultValueOrThrow;
-    /**
-     * The persisted row this save/delete would replace, looked up by primary
-     * key and — when that misses — by the NATURAL key.
-     *
-     * The natural-key fallback is load-bearing for authorization: every
-     * generated create arrives with a freshly minted UUID, so a primary-key
-     * lookup always misses, yet the `conflictColumns` upsert still overwrites
-     * whatever row already occupies `(objectRef, fieldName, scopeType,
-     * scopeKey)`. Authorizing on the primary key alone therefore skipped the
-     * persisted-scope guard on exactly the path that can replace an existing
-     * row's contents.
-     */
-    private getPersistedIdentity;
-    private getPersistedRowById;
-    /**
-     * The row occupying this row's `conflictColumns` tuple, if any. Column
-     * names are the physical snake_case ones: this reads the driver directly
-     * rather than through a collection (the model has no collection handle).
-     */
-    private getPersistedRowByNaturalKey;
-    private normalizeDefaultValueForPersistence;
-}
-
-/** Result shape of the batch resolve action (`FieldPolicyCollection.resolveBatch`). */
-export declare interface FieldPolicyBatchResult {
-    policies: Record<string, ResolvedObjectFieldPolicy>;
-}
-
-/**
- * Collection surface for {@link FieldPolicy} rows plus the batch resolve
- * action consumed by client bootstrapping (#2048).
- *
- * `resolveBatch` is a custom collection-scoped action (NOT a system route —
- * core's generated system trio is closed): the generated route parses the
- * body, calls the method on the app-configured collection instance (which
- * carries the app database), and serializes the plain result.
- *
- * Exposure note: a decorated collection's config becomes the RUNTIME registry
- * authority for its item class (core merges the collection registration onto
- * the item slot), while build-time generation reads each manifest object's
- * own config. This config therefore mirrors FieldPolicy's API posture —
- * writes open plus the batch action, reads CLOSED (generated list/get would
- * enumerate every tenant's/user's rows) — and closes the runtime CLI/MCP
- * surfaces entirely (the ContentContributions precedent; the cli↔api
- * coherence gate does not admit standard CRUD entries on a collection's
- * `cli.include`). Keep the api include lists in lockstep with FieldPolicy's.
- */
-export declare class FieldPolicyCollection extends SmrtCollection<FieldPolicy> {
-    static readonly _itemClass: typeof FieldPolicy;
-    /** All app-scope rows for an object, keyed by field name. */
-    getAppRows(objectRef: string): Promise<Map<string, FieldPolicy>>;
-    /**
-     * All tenant-scope rows for an object across a tenant chain, keyed
-     * `tenantId → fieldName → row`.
-     */
-    getTenantRows(objectRef: string, tenantIds: string[]): Promise<Map<string, Map<string, FieldPolicy>>>;
-    /** All user-scope rows for an object and user, keyed by field name. */
-    getUserRows(objectRef: string, userId: string): Promise<Map<string, FieldPolicy>>;
-    /**
-     * Resolve merged field policy for a set of objectRefs for the CURRENT
-     * caller, gated for public consumption.
-     *
-     * Caller identity comes exclusively from the ambient tenant context
-     * (established by the app's auth hook, e.g. smrt-users' session context) —
-     * the request body cannot select another tenant or user (fail closed).
-     * Server-side consumers wanting explicit identities call
-     * `resolveFieldPolicy()` directly instead.
-     *
-     * Field gating mirrors the REST serializer's derivation (`sensitive` /
-     * `readPermission` read from both the top level and `_meta`): sensitive and
-     * read-permission-gated fields are ABSENT from the response for every
-     * caller (the generated action route cannot convey per-caller grants to
-     * this method, so gated fields fail closed), and transient fields are
-     * stripped for parity with generated client field definitions.
-     */
-    resolveBatch(options?: {
-        objectRefs?: string[];
-    }): Promise<FieldPolicyBatchResult>;
-    private gateResolvedForPublicResponse;
-}
-
-/**
- * The sparse contribution of one layer (code seed or one stored row).
- *
- * `default` is boxed so an explicit JSON `null` default (meaning "default to
- * null") stays distinguishable from "this layer contributes no default".
- */
-export declare interface FieldPolicyDelta {
-    default?: {
-        value: unknown;
-    };
-    visibility?: FieldPolicyVisibility;
-    help?: string;
-    label?: string;
-    order?: number;
-    locked?: boolean;
-}
-
-/** One layer's contribution to a field's resolved policy (explain variant). */
-export declare interface FieldPolicyLayerContribution {
-    layer: 'code' | 'app' | 'tenant' | 'user';
-    /** Chain node id for `tenant` layers (root → leaf order). */
-    tenantId?: string;
-    /** User id for the `user` layer. */
-    userId?: string;
-    delta: FieldPolicyDelta;
-}
-
-export declare interface FieldPolicyOptions extends SmrtObjectOptions {
-    objectRef?: string;
-    fieldName?: string;
-    scopeType?: FieldPolicyScopeType;
-    tenantId?: string | null;
-    userId?: string | null;
-    /**
-     * ENCODED channel: an already-JSON-encoded default, exactly as the column
-     * stores it (`'"Net 30"'`, `'42'`, `'null'`), or `null` to inherit.
-     *
-     * This is the wire contract: the generated write routes hand the request
-     * body straight to the constructor, and the #2049/#2050 gear posts
-     * `JSON.stringify(draft.defaultValue)`. It must therefore keep meaning
-     * "already encoded" — auto-serializing here would double-encode every gear
-     * write.
-     *
-     * Use {@link FieldPolicyOptions.defaultValueRaw} for a plain value. The two
-     * are mutually exclusive: `'"TBD"'` and `'TBD'` are indistinguishable once
-     * a single option carries both meanings, so the channel must be explicit
-     * rather than sniffed.
-     */
-    defaultValue?: string | null;
-    /**
-     * PLAIN channel: any value, always serialized — strings included. The
-     * constructor-option twin of {@link FieldPolicy.setDefaultValue}, so
-     * `{ defaultValueRaw: 'Net 30' }` stores `'"Net 30"'` rather than the
-     * unparseable literal `Net 30`.
-     */
-    defaultValueRaw?: unknown;
-    visibility?: FieldPolicyVisibility | null;
-    help?: string | null;
-    label?: string | null;
-    displayOrder?: number | null;
-    locked?: boolean | null;
-    updatedBy?: string | null;
-}
-
-/**
- * Scope tier a {@link FieldPolicy} row belongs to.
- *
- * Resolution precedence is code seed → `app` → `tenant` (hierarchy walk,
- * root → leaf) → `user`. Unlike smrt-features (which ships only
- * `global`/`tenant`), the user tier is implemented end to end here — both
- * defaults and visibility resolve through it.
- */
-export declare type FieldPolicyScopeType = 'app' | 'tenant' | 'user';
-
-/**
- * Loader-function DI seam (NOT a container registration): the resolver calls
- * it lazily and treats `null` as "no hierarchy available" (flat-tenant
- * fallback). The default loader dynamic-imports `@happyvertical/smrt-users`
- * and returns `null` when it is not installed.
- */
-export declare type FieldPolicyTenantHierarchyLoader = (options: SmrtClassOptions) => Promise<FieldPolicyTenantHierarchyProvider | null>;
-
-/** Provider returning the root → leaf tenant chain (mirrors smrt-features). */
-export declare interface FieldPolicyTenantHierarchyProvider {
-    getChain(tenantId: string): Promise<FieldPolicyTenantNode[]>;
-}
-
-/** Minimal tenant node consumed by the hierarchy walk (mirrors smrt-features). */
-export declare interface FieldPolicyTenantNode {
-    id: string;
-    inheritPermissions: boolean;
-    cascadePermissions: boolean;
-}
-
-export declare interface FieldPolicyUsersModule {
-    TenantCollection: {
-        create(options: SmrtClassOptions): Promise<{
-            get(criteria: {
-                id: string;
-            }): Promise<FieldPolicyUsersTenantRecord | null>;
-            getAncestorsFromRoot(tenantId: string): Promise<FieldPolicyUsersTenantRecord[]>;
-        }>;
-    };
-}
-
-/**
- * Minimal structural shape of the tenant surface loaded from
- * `@happyvertical/smrt-users` by the default hierarchy loader. Only the
- * permission-cascade fields consumed by the chain walk are modeled.
- */
-export declare interface FieldPolicyUsersTenantRecord {
-    id: string;
-    inheritPermissions?: boolean;
-    cascadePermissions?: boolean;
-}
-
-/**
- * Visibility tier for a field in generated/consuming form UIs.
- *
- * - `basic`: shown before the advanced disclosure
- * - `advanced`: shown behind the advanced disclosure
- * - `hidden`: not rendered (requires the field to be optional or have a
- *   resolved default — the required-field invariant)
- */
-export declare type FieldPolicyVisibility = 'basic' | 'advanced' | 'hidden';
-
-/** The manifest/code default for a field, boxed; `undefined` when none. */
-export declare function getCodeDefault(field: RegisteredFieldInfo): {
-    value: unknown;
-} | undefined;
-
-/** Code-seed grouping key (`ui.group`) — not overridable by stored rows. */
-export declare function getCodeSeedGroup(field: RegisteredFieldInfo): string | null;
-
-export declare function getFieldPolicyCacheTtlMs(): number;
-
-/** Security rail: `readPermission` may live top-level or under `_meta`. */
-export declare function getFieldReadPermission(field: RegisteredFieldInfo): string | undefined;
-
-/** Load the full (inherited) field map for a registered objectRef. */
-export declare function getObjectFieldMap(objectRef: string): Promise<FieldDefinitionMap>;
-
-/**
- * Drop every cached resolution for `(db, objectRef)`.
- *
- * Deliberately coarser than the prompts precedent (which deletes a single
- * `(key, tenantId)` entry when the tenant is known): tenant HIERARCHY makes a
- * parent-tenant row change affect every descendant tenant's resolution, and a
- * lock or app-row change affects user-tier entries too, so precise
- * invalidation would have to know the whole tenant tree. Per-objectRef prefix
- * invalidation is always correct and the 30s TTL keeps the cost bounded.
- */
-export declare function invalidateFieldPolicyCache(objectRef: string, db: DatabaseInterface | unknown): void;
-
-/**
- * A field is required when flagged required and not explicitly nullable.
- *
- * `nullable` is read from BOTH the top level and `_meta` for the same reason
- * `sensitive`/`readPermission`/`transient` are: registrations reach the
- * registry through several paths (decorator, manifest, STI merge) and land the
- * flag in either place. Checking only one side made the pair asymmetric —
- * `required` was read from both while `nullable` was read from one.
- */
-export declare function isRequiredField(field: RegisteredFieldInfo): boolean;
-
-/** Security rail: `sensitive` may live top-level or under `_meta` (STI merges). */
-export declare function isSensitiveField(field: RegisteredFieldInfo): boolean;
-
-export declare function isTransientField(field: RegisteredFieldInfo): boolean;
-
-/**
- * A resolved default satisfies the required-field invariant only when it is a
- * value a form could actually submit: explicit `null` and the empty string do
- * not count (a required text field "defaulting" to `''` is still unfilled).
- */
-export declare function isUsableRequiredDefault(defaultBox: {
-    value: unknown;
-} | undefined): boolean;
-
-/** One field's registered metadata, as returned by `getAllFields`. */
-export declare type RegisteredFieldInfo = FieldDefinitionMap extends Map<string, infer F> ? F : never;
-
-/**
- * Resolve `objectRef` (qualified `@package/name:ClassName`) against the live
- * registry, throwing a descriptive error when the class is unknown.
- */
-export declare function requireRegisteredObject(objectRef: string): void;
-
-/** Fully merged policy for a single field. */
-export declare interface ResolvedFieldPolicy {
-    fieldName: string;
-    /** True when any layer resolved a default (including an explicit null). */
-    hasDefault: boolean;
-    /** Parsed default value; `undefined` when {@link hasDefault} is false. */
-    defaultValue: unknown;
-    visibility: FieldPolicyVisibility;
-    help: string | null;
-    label: string | null;
-    order: number | null;
-    /** Grouping key — code-seed only (`ui.group`), not overridable by rows. */
-    group: string | null;
-    locked: boolean;
-    /** Mirror of the manifest required flag (nullable fields are optional). */
-    required: boolean;
-    /**
-     * True when the resolver forced `basic` visibility because the field is
-     * required and no usable default resolved (the resolver-side safety net for
-     * the required-field invariant).
-     */
-    visibilityForced?: boolean;
-}
-
-/** Merged policy for every field of one object. */
-export declare interface ResolvedObjectFieldPolicy {
-    objectRef: string;
-    fields: Record<string, ResolvedFieldPolicy>;
-}
-
-/**
- * Resolve the merged field policy for `objectRef` in the given
- * `(tenantId, userId)` context: code seed → app rows → tenant rows (hierarchy
- * walk root → leaf) → user rows. Defaults AND visibility both resolve through
- * the user tier.
- *
- * Results are cached per `(database, objectRef, tenantId, userId)` with a
- * short TTL; `FieldPolicy.save()`/`.delete()` invalidate the object's entries.
- */
-export declare function resolveFieldPolicy(objectRef: string, options?: ResolveFieldPolicyOptions): Promise<ResolvedObjectFieldPolicy>;
-
-/**
- * Explain variant: the merged result plus ordered per-layer contributions for
- * each field, so the gear UI (#2049, "shows inherited base") and the control
- * panel (#2050, effective-value-per-layer) never re-derive precedence.
- *
- * A user-layer row suppressed by an effective org lock is omitted from the
- * layer list too — the listed layers always reproduce the merged result.
- */
-export declare function resolveFieldPolicyExplained(objectRef: string, options?: ResolveFieldPolicyOptions): Promise<ExplainedObjectFieldPolicy>;
-
-export declare interface ResolveFieldPolicyOptions {
-    tenantId?: string | null;
-    userId?: string | null;
-    /**
-     * Database holding `_smrt_field_policies`. Without it, only the code seed
-     * resolves (stored layers are skipped) — the smrt-prompts precedent.
-     */
-    db?: SmrtClassOptions['db'];
-    tenantHierarchyLoader?: FieldPolicyTenantHierarchyLoader;
-}
-
-/**
- * Narrow a manifest `_meta.ui` bag to the known {@link FieldUIHints} keys with
- * their expected primitive types, dropping junk (mirrors the sanitization the
- * web emission applies in core's `web-collections.ts`).
- */
-export declare function sanitizeFieldUIHints(value: unknown): FieldUIHints | undefined;
-
-export { }
+export { clearFieldPolicyCache, getFieldPolicyCacheTtlMs, invalidateFieldPolicyCache, } from './cache.js';
+export { FieldPolicyCollection } from './collections/FieldPolicyCollection.js';
+export { assertDefaultValueMatchesFieldType, buildCodeSeedDelta, buildCodeSeedVisibility, type FieldDefinitionMap, getCodeDefault, getCodeSeedGroup, getFieldReadPermission, getObjectFieldMap, isPolicyAddressableField, isRequiredField, isSensitiveField, isTransientField, isUsableRequiredDefault, type RegisteredFieldInfo, requireRegisteredObject, sanitizeFieldUIHints, } from './field-definitions.js';
+export { resolveFieldPolicy, resolveFieldPolicyExplained, resolveSurvivingTenantChainIds, } from './field-policy-resolver.js';
+export { FieldPolicy } from './models/FieldPolicy.js';
+export { ensureFieldPolicyPermissionsRegistered, FIELD_POLICY_PERMISSION_DEFINITIONS, MANAGE_FIELD_POLICY_PERMISSION, PERSONALIZE_FIELD_POLICY_PERMISSION, } from './permissions.js';
+export { type BuildFieldPolicySettingsCatalogOptions, buildFieldPolicySettingsCatalog, type FieldPolicyCatalogField, type FieldPolicyCatalogObjectSummary, type FieldPolicyDetailItem, type FieldPolicySettingsCatalogData, type FieldPolicySettingsCatalogPage, type FieldPolicySettingsCatalogQuery, type FieldPolicySummaryItem, fieldPolicyCatalogItemId, parseFieldPolicyCatalogQuery, } from './settings-catalog.js';
+export { APP_FIELD_POLICY_SCOPE_KEY, type ExplainedObjectFieldPolicy, FIELD_POLICY_SCOPE_TYPES, FIELD_POLICY_VISIBILITIES, type FieldPolicyAuditRow, type FieldPolicyAuditSnapshot, type FieldPolicyBatchResult, type FieldPolicyDelta, type FieldPolicyDriftReason, type FieldPolicyDriftRow, type FieldPolicyEditorCapabilities, type FieldPolicyEditorRow, type FieldPolicyEditorState, type FieldPolicyEditorStateDenied, type FieldPolicyEditorStateResult, type FieldPolicyLayerContribution, type FieldPolicyOptions, type FieldPolicyScopeType, type FieldPolicyTenantHierarchyLoader, type FieldPolicyTenantHierarchyProvider, type FieldPolicyTenantNode, type FieldPolicyUsersModule, type FieldPolicyUsersTenantRecord, type FieldPolicyVisibility, type ResolvedFieldPolicy, type ResolvedObjectFieldPolicy, type ResolveFieldPolicyOptions, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,wBAAwB,CAAC;AAIhC,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EACL,kCAAkC,EAClC,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,cAAc,EACd,gBAAgB,EAChB,sBAAsB,EACtB,iBAAiB,EACjB,wBAAwB,EACxB,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,KAAK,mBAAmB,EACxB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EACL,sCAAsC,EACtC,mCAAmC,EACnC,8BAA8B,EAC9B,mCAAmC,GACpC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,sCAAsC,EAC3C,+BAA+B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,+BAA+B,EACpC,KAAK,qBAAqB,EAC1B,KAAK,8BAA8B,EACnC,KAAK,8BAA8B,EACnC,KAAK,+BAA+B,EACpC,KAAK,sBAAsB,EAC3B,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,0BAA0B,EAC1B,KAAK,0BAA0B,EAC/B,wBAAwB,EACxB,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EACxB,KAAK,6BAA6B,EAClC,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,EACjC,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,gCAAgC,EACrC,KAAK,kCAAkC,EACvC,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,4BAA4B,EACjC,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,GAC/B,MAAM,YAAY,CAAC"}