@l3dev/abac 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Leon Semmens
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,98 @@
+# abac
+
+## Description
+
+A type-safe ABAC library.
+
+## Installation
+
+```bash
+npm install @l3dev/abac
+```
+
+```bash
+pnpm add @l3dev/abac
+```
+
+## Example
+
+```ts
+import { ABAC } from "@l3dev/abac";
+
+type User = {
+	id: string;
+	username: string;
+	admin: boolean;
+};
+
+type Organisation = {
+	id: string;
+	name: string;
+	public: boolean;
+	owner: User;
+};
+
+// Define ABAC resources
+
+const OrganisationABAC = ABAC.createResource("organisation")
+	.withSubject<User>()
+	.withObject<Organisation>()
+	.setActions([
+		ABAC.createAction("create").withoutObject(),
+		ABAC.createAction("view.public"),
+		ABAC.createAction("join")
+			.setTitle("Allow Joining")
+			.setDescription("Allow users to join the organisation")
+			.setConfigurable(true),
+		ABAC.createAction("delete")
+	]);
+
+// Define ABAC policies
+
+export const abac = ABAC.create([OrganisationABAC])
+	.addPolicy((policy) =>
+		policy
+			.setName("Admins")
+			.setMatch(({ subject }) => "admin" in subject && subject.admin)
+			.allowAll()
+	)
+	.addPolicy((policy) =>
+		policy
+			.setName("Default")
+			.allow("organisation.*", ABAC.Filter.ifgranted())
+			.allow("organisation:delete", (ctx) => ctx.subject.id === ctx.object.owner.id)
+	);
+
+// Checking permissions
+
+const adminUser: User = {
+	id: "1",
+	username: "Admin",
+	admin: true
+};
+
+const myUser: User = {
+	id: "2",
+	username: "User",
+	admin: false
+};
+
+const otherUser: User = {
+	id: "3",
+	username: "Other User",
+	admin: false
+};
+
+const myOrganisation: Organisation = {
+	id: "1",
+	name: "My Organisation",
+	public: false,
+	owner: myUser
+};
+
+abac.can(myUser, "organisation:delete").granted({ object: myOrganisation }); // true
+
+abac.can(otherUser, "organisation:delete").granted({ object: myOrganisation }); // false
+
+abac.can(adminUser, "organisation:delete").granted({ object: myOrganisation }); // true
+```

package/build/abac.d.ts

@@ -0,0 +1,72 @@
+import { Action, type RuleCtx, type InferActionSubject } from "./action.js";
+import { ActionGroup } from "./actionGroup.js";
+import type { ResourceMap } from "./internal/collections.js";
+import type { UnsetMarker } from "./internal/core.js";
+import type { ActionFromPath, ActionPaths, FilterActionPaths } from "./internal/paths.js";
+import { Permission, type PermissionOptions } from "./permission.js";
+import { Policy } from "./policy.js";
+import { PolicyFilters } from "./policyFilters.js";
+import { Resource } from "./resource.js";
+export type ConfigurableAction = {
+    path: string;
+    action: Action<any, any>;
+    own: boolean;
+};
+export declare class ABAC<TResources extends ResourceMap> {
+    private _resourceMap;
+    private _policies;
+    constructor(resourceMap: TResources);
+    $resources: TResources;
+    $actions: ActionPaths<TResources>;
+    $configurableActions: FilterActionPaths<TResources, any, true>;
+    $filterActions: <TCtx>() => FilterActionPaths<TResources, TCtx>;
+    getConfigurableActions(): ConfigurableAction[];
+    can<TActionPath extends ActionPaths<TResources>>(subject: InferActionSubject<ActionFromPath<TResources, TActionPath>>, path: TActionPath, options?: PermissionOptions<TActionPath, ActionFromPath<TResources, TActionPath>>): Omit<Permission<TActionPath, ActionFromPath<TResources, TActionPath>>, "granted" | "filter"> & (import("./internal/core.js").IsOnlyEmptyObject<Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject">> extends true ? {
+        granted(): boolean;
+        test(): {
+            granted: boolean;
+            specitivity: import("./policy.js").Specitivity;
+            policy: Policy<any> | null;
+            rule: import("./policy.js").Rule | null;
+        };
+    } : {
+        granted(ctx: import("./internal/core.js").Expand<Partial<Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> extends infer T ? T extends Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> ? T extends import("./internal/core.js").EmptyObject ? Omit<Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject">, "object"> : Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> : never : never> & Pick<Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> extends infer T_1 ? T_1 extends Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> ? T_1 extends import("./internal/core.js").EmptyObject ? Omit<Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject">, "object"> : Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> : never : never, ((Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> extends infer T_5 ? T_5 extends Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> ? T_5 extends import("./internal/core.js").EmptyObject ? Omit<Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject">, "object"> : Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> : never : never) extends infer T_2 ? { [K in keyof T_2]: (Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> extends infer T_3 ? T_3 extends Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> ? T_3 extends import("./internal/core.js").EmptyObject ? Omit<Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject">, "object"> : Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> : never : never)[K] extends Exclude<(Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> extends infer T_4 ? T_4 extends Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> ? T_4 extends import("./internal/core.js").EmptyObject ? Omit<Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject">, "object"> : Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> : never : never)[K], undefined> ? K : never; } : never)[keyof (Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> extends infer T_6 ? T_6 extends Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> ? T_6 extends import("./internal/core.js").EmptyObject ? Omit<Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject">, "object"> : Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> : never : never)]>>): boolean;
+        test(ctx: import("./internal/core.js").Expand<Partial<Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> extends infer T ? T extends Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> ? T extends import("./internal/core.js").EmptyObject ? Omit<Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject">, "object"> : Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> : never : never> & Pick<Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> extends infer T_1 ? T_1 extends Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> ? T_1 extends import("./internal/core.js").EmptyObject ? Omit<Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject">, "object"> : Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> : never : never, ((Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> extends infer T_5 ? T_5 extends Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> ? T_5 extends import("./internal/core.js").EmptyObject ? Omit<Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject">, "object"> : Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> : never : never) extends infer T_2 ? { [K in keyof T_2]: (Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> extends infer T_3 ? T_3 extends Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> ? T_3 extends import("./internal/core.js").EmptyObject ? Omit<Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject">, "object"> : Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> : never : never)[K] extends Exclude<(Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> extends infer T_4 ? T_4 extends Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> ? T_4 extends import("./internal/core.js").EmptyObject ? Omit<Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject">, "object"> : Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> : never : never)[K], undefined> ? K : never; } : never)[keyof (Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> extends infer T_6 ? T_6 extends Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> ? T_6 extends import("./internal/core.js").EmptyObject ? Omit<Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject">, "object"> : Omit<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "subject"> : never : never)]>>): {
+            granted: boolean;
+            specitivity: import("./policy.js").Specitivity;
+            policy: Policy<any> | null;
+            rule: import("./policy.js").Rule | null;
+        };
+    }) & (import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>> extends import("./internal/core.js").EmptyObject ? {} : import("./action.js").InferActionAdditionalContext<ActionFromPath<TResources, TActionPath>> extends {} ? {
+        filter(objects: Exclude<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>["object"], void | undefined>[]): Exclude<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>["object"], void | undefined>[];
+    } : {
+        filter(objects: Exclude<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>["object"], void | undefined>[], ctx: import("./internal/core.js").Expand<Partial<import("./action.js").InferActionAdditionalContext<ActionFromPath<TResources, TActionPath>>> & Pick<import("./action.js").InferActionAdditionalContext<ActionFromPath<TResources, TActionPath>>, (import("./action.js").InferActionAdditionalContext<ActionFromPath<TResources, TActionPath>> extends infer T ? { [K in keyof T]: import("./action.js").InferActionAdditionalContext<ActionFromPath<TResources, TActionPath>>[K] extends Exclude<import("./action.js").InferActionAdditionalContext<ActionFromPath<TResources, TActionPath>>[K], undefined> ? K : never; } : never)[Exclude<keyof import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>, "object" | "subject">]>>): Exclude<import("./action.js").InferActionRuleCtx<ActionFromPath<TResources, TActionPath>>["object"], void | undefined>[];
+    });
+    addPolicy(build: (policy: Policy<TResources>) => Policy<TResources>): this;
+    static create<TResource extends Resource<any, any>>(resources: TResource[]): ABAC<import("./internal/core.js").UnionToIntersection<TResource extends Resource<infer TName extends string, any> ? { [name in TName]: TResource; } : never, ResourceMap>>;
+    static createResource<TName extends string>(name: TName): Resource<TName, {
+        ctx: {
+            subject: UnsetMarker;
+            object: UnsetMarker;
+        };
+        actions: UnsetMarker;
+        subResources: UnsetMarker;
+        ownable: false;
+    }>;
+    static createAction<TName extends string, TCtx extends RuleCtx = {
+        subject: UnsetMarker;
+        object: UnsetMarker;
+    }>(name: TName): Action<TName, {
+        ctx: TCtx;
+        configurable: false;
+    }>;
+    static createActionGroup<TName extends string, TCtx extends RuleCtx = {
+        subject: UnsetMarker;
+        object: UnsetMarker;
+    }>(name: TName): ActionGroup<TName, {
+        ctx: TCtx;
+        actions: UnsetMarker;
+    }>;
+    static createPolicy<TResources extends ResourceMap>(): Policy<TResources>;
+    static Filter: typeof PolicyFilters;
+}

package/build/abac.js

@@ -0,0 +1,65 @@
+import { Action } from "./action.js";
+import { ActionGroup } from "./actionGroup.js";
+import { ActionVisitor } from "./actionVisitor.js";
+import { Permission } from "./permission.js";
+import { Policy } from "./policy.js";
+import { PolicyFilters } from "./policyFilters.js";
+import { Resource } from "./resource.js";
+export class ABAC {
+    _resourceMap;
+    _policies = [];
+    constructor(resourceMap) {
+        this._resourceMap = resourceMap;
+    }
+    getConfigurableActions() {
+        const actions = [];
+        const visitor = new ActionVisitor(this._resourceMap);
+        visitor.traverse(({ action, resource, path }) => {
+            if (!action.configurable) {
+                return;
+            }
+            actions.push({
+                path,
+                action,
+                own: resource.ownable && resource.ownConfigurable && !action.noObject
+            });
+        });
+        return actions;
+    }
+    can(subject, path, options) {
+        const policies = this._policies.filter((policy) => policy.match({ subject }));
+        const visitor = new ActionVisitor(this._resourceMap);
+        const actionPath = path.endsWith(".own") ? path.slice(0, -4) : path;
+        const result = visitor.findByPath(actionPath);
+        if (!result) {
+            throw new Error(`No action '${actionPath}' found in ABAC resource map`);
+        }
+        return Permission.create(subject, path, result.resource, result.action, policies, options);
+    }
+    addPolicy(build) {
+        const policy = build(ABAC.createPolicy());
+        this._policies.push(policy);
+        return this;
+    }
+    static create(resources) {
+        const resourceMap = resources.reduce((map, resource) => ({
+            ...map,
+            [resource.name]: resource
+        }), {});
+        return new ABAC(resourceMap);
+    }
+    static createResource(name) {
+        return new Resource(name);
+    }
+    static createAction(name) {
+        return new Action(name);
+    }
+    static createActionGroup(name) {
+        return new ActionGroup(name);
+    }
+    static createPolicy() {
+        return new Policy();
+    }
+    static Filter = PolicyFilters;
+}
+//# sourceMappingURL=abac.js.map

package/build/abac.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abac.js","sourceRoot":"","sources":["../src/abac.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAyC,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAInD,OAAO,EAAE,UAAU,EAA0B,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAQzC,MAAM,OAAO,IAAI;IACR,YAAY,CAAa;IACzB,SAAS,GAAyB,EAAE,CAAC;IAE7C,YAAY,WAAuB;QAClC,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;IACjC,CAAC;IAOM,sBAAsB;QAC5B,MAAM,OAAO,GAAyB,EAAE,CAAC;QAEzC,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE;YAC/C,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC1B,OAAO;YACR,CAAC;YAED,OAAO,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,MAAM;gBACN,GAAG,EAAE,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,QAAQ;aACrE,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IAChB,CAAC;IAEM,GAAG,CACT,OAAoE,EACpE,IAAiB,EACjB,OAAiF;QAEjF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAE9E,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAErD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,UAAyB,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,cAAc,UAAU,8BAA8B,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5F,CAAC;IAEM,SAAS,CAAC,KAAyD;QACzE,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACb,CAAC;IAEM,MAAM,CAAC,MAAM,CAAuC,SAAsB;QAChF,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CACnC,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;YACnB,GAAG,GAAG;YACN,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ;SACzB,CAAC,EACF,EAAmC,CACnC,CAAC;QAEF,OAAO,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9B,CAAC;IAEM,MAAM,CAAC,cAAc,CAAuB,IAAW;QAC7D,OAAO,IAAI,QAAQ,CAWjB,IAAI,CAAC,CAAC;IACT,CAAC;IAEM,MAAM,CAAC,YAAY,CAGxB,IAAW;QACZ,OAAO,IAAI,MAAM,CAA4C,IAAI,CAAC,CAAC;IACpE,CAAC;IAEM,MAAM,CAAC,iBAAiB,CAG7B,IAAW;QACZ,OAAO,IAAI,WAAW,CAMpB,IAAI,CAAC,CAAC;IACT,CAAC;IAEM,MAAM,CAAC,YAAY;QACzB,OAAO,IAAI,MAAM,EAAc,CAAC;IACjC,CAAC;IAEM,MAAM,CAAC,MAAM,GAAG,aAAa,CAAC","sourcesContent":["import { Action, type RuleCtx, type InferActionSubject } from \"./action.js\";\nimport { ActionGroup } from \"./actionGroup.js\";\nimport { ActionVisitor } from \"./actionVisitor.js\";\nimport type { ResourceMap, UnionToResourceMap } from \"./internal/collections.js\";\nimport type { UnsetMarker } from \"./internal/core.js\";\nimport type { ActionFromPath, ActionPaths, FilterActionPaths } from \"./internal/paths.js\";\nimport { Permission, type PermissionOptions } from \"./permission.js\";\nimport { Policy } from \"./policy.js\";\nimport { PolicyFilters } from \"./policyFilters.js\";\nimport { Resource } from \"./resource.js\";\n\nexport type ConfigurableAction = {\n\tpath: string;\n\taction: Action<any, any>;\n\town: boolean;\n};\n\nexport class ABAC<TResources extends ResourceMap> {\n\tprivate _resourceMap: TResources;\n\tprivate _policies: Policy<TResources>[] = [];\n\n\tconstructor(resourceMap: TResources) {\n\t\tthis._resourceMap = resourceMap;\n\t}\n\n\tdeclare public $resources: TResources;\n\tdeclare public $actions: ActionPaths<TResources>;\n\tdeclare public $configurableActions: FilterActionPaths<TResources, any, true>;\n\tdeclare public $filterActions: <TCtx>() => FilterActionPaths<TResources, TCtx>;\n\n\tpublic getConfigurableActions() {\n\t\tconst actions: ConfigurableAction[] = [];\n\n\t\tconst visitor = new ActionVisitor(this._resourceMap);\n\t\tvisitor.traverse(({ action, resource, path }) => {\n\t\t\tif (!action.configurable) {\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tactions.push({\n\t\t\t\tpath,\n\t\t\t\taction,\n\t\t\t\town: resource.ownable && resource.ownConfigurable && !action.noObject\n\t\t\t});\n\t\t});\n\n\t\treturn actions;\n\t}\n\n\tpublic can<TActionPath extends ActionPaths<TResources>>(\n\t\tsubject: InferActionSubject<ActionFromPath<TResources, TActionPath>>,\n\t\tpath: TActionPath,\n\t\toptions?: PermissionOptions<TActionPath, ActionFromPath<TResources, TActionPath>>\n\t) {\n\t\tconst policies = this._policies.filter((policy) => policy.match({ subject }));\n\n\t\tconst visitor = new ActionVisitor(this._resourceMap);\n\n\t\tconst actionPath = path.endsWith(\".own\") ? path.slice(0, -4) : path;\n\t\tconst result = visitor.findByPath(actionPath as TActionPath);\n\t\tif (!result) {\n\t\t\tthrow new Error(`No action '${actionPath}' found in ABAC resource map`);\n\t\t}\n\n\t\treturn Permission.create(subject, path, result.resource, result.action, policies, options);\n\t}\n\n\tpublic addPolicy(build: (policy: Policy<TResources>) => Policy<TResources>) {\n\t\tconst policy = build(ABAC.createPolicy());\n\t\tthis._policies.push(policy);\n\t\treturn this;\n\t}\n\n\tpublic static create<TResource extends Resource<any, any>>(resources: TResource[]) {\n\t\tconst resourceMap = resources.reduce(\n\t\t\t(map, resource) => ({\n\t\t\t\t...map,\n\t\t\t\t[resource.name]: resource\n\t\t\t}),\n\t\t\t{} as UnionToResourceMap<TResource>\n\t\t);\n\n\t\treturn new ABAC(resourceMap);\n\t}\n\n\tpublic static createResource<TName extends string>(name: TName) {\n\t\treturn new Resource<\n\t\t\tTName,\n\t\t\t{\n\t\t\t\tctx: {\n\t\t\t\t\tsubject: UnsetMarker;\n\t\t\t\t\tobject: UnsetMarker;\n\t\t\t\t};\n\t\t\t\tactions: UnsetMarker;\n\t\t\t\tsubResources: UnsetMarker;\n\t\t\t\townable: false;\n\t\t\t}\n\t\t>(name);\n\t}\n\n\tpublic static createAction<\n\t\tTName extends string,\n\t\tTCtx extends RuleCtx = { subject: UnsetMarker; object: UnsetMarker }\n\t>(name: TName) {\n\t\treturn new Action<TName, { ctx: TCtx; configurable: false }>(name);\n\t}\n\n\tpublic static createActionGroup<\n\t\tTName extends string,\n\t\tTCtx extends RuleCtx = { subject: UnsetMarker; object: UnsetMarker }\n\t>(name: TName) {\n\t\treturn new ActionGroup<\n\t\t\tTName,\n\t\t\t{\n\t\t\t\tctx: TCtx;\n\t\t\t\tactions: UnsetMarker;\n\t\t\t}\n\t\t>(name);\n\t}\n\n\tpublic static createPolicy<TResources extends ResourceMap>() {\n\t\treturn new Policy<TResources>();\n\t}\n\n\tpublic static Filter = PolicyFilters;\n}\n"]}

package/build/action.d.ts

@@ -0,0 +1,61 @@
+import type { MakeOptional } from "./internal/core.js";
+export type RuleCtx = {
+    subject: any;
+    object: any;
+};
+export type ActionContext = {
+    ctx: RuleCtx;
+    configurable: boolean;
+};
+export type InferActionRuleCtx<TAction> = TAction extends Action<any, infer TContext> ? TContext["ctx"] : never;
+export type InferActionSubject<TAction> = Pick<InferActionRuleCtx<TAction>, "subject">["subject"];
+export type InferActionObject<TAction> = Exclude<Pick<InferActionRuleCtx<TAction>, "object">["object"], void | undefined>;
+export type InferActionAdditionalContext<TAction> = Omit<InferActionRuleCtx<TAction>, "subject" | "object">;
+export declare class Action<TName extends string, TContext extends ActionContext> {
+    private _name;
+    private _title;
+    private _description;
+    private _configurable;
+    private _noObject;
+    constructor(name: TName);
+    get name(): TName;
+    get title(): string | null;
+    setTitle(title: string): this;
+    get description(): string | null;
+    setDescription(description: string): this;
+    get configurable(): boolean;
+    setConfigurable<TConfigurable extends boolean>(configurable: TConfigurable): Action<TName, {
+        ctx: TContext["ctx"];
+        configurable: TConfigurable;
+    }>;
+    withSubject<TOverrideSubject>(): Action<TName, {
+        ctx: {
+            subject: TOverrideSubject;
+            object: TContext["ctx"]["object"];
+        };
+        configurable: TContext["configurable"];
+    }>;
+    withObject<TOverrideObject>(): Action<TName, {
+        ctx: {
+            subject: TContext["ctx"]["subject"];
+            object: TOverrideObject;
+        };
+        configurable: TContext["configurable"];
+    }>;
+    get noObject(): boolean;
+    withoutObject(): Action<TName, {
+        ctx: {
+            subject: TContext["ctx"]["subject"];
+            object: void;
+        };
+        configurable: TContext["configurable"];
+    }>;
+    optionalObject(): Action<TName, {
+        ctx: {
+            subject: TContext["ctx"]["subject"];
+            object: MakeOptional<TContext["ctx"]["object"]>;
+        };
+        configurable: TContext["configurable"];
+    }>;
+    withAdditionalContext<TAdditionalContext extends object>(): Action<TName, TContext & TAdditionalContext>;
+}

package/build/action.js

@@ -0,0 +1,54 @@
+export class Action {
+    _name;
+    _title = null;
+    _description = null;
+    _configurable = false;
+    _noObject = false;
+    constructor(name) {
+        this._name = name;
+    }
+    get name() {
+        return this._name;
+    }
+    get title() {
+        return this._title;
+    }
+    setTitle(title) {
+        this._title = title;
+        return this;
+    }
+    get description() {
+        return this._description;
+    }
+    setDescription(description) {
+        this._description = description;
+        return this;
+    }
+    get configurable() {
+        return this._configurable;
+    }
+    setConfigurable(configurable) {
+        this._configurable = configurable;
+        return this;
+    }
+    withSubject() {
+        return this;
+    }
+    withObject() {
+        return this;
+    }
+    get noObject() {
+        return this._noObject;
+    }
+    withoutObject() {
+        this._noObject = true;
+        return this.withObject();
+    }
+    optionalObject() {
+        return this.withObject();
+    }
+    withAdditionalContext() {
+        return this;
+    }
+}
+//# sourceMappingURL=action.js.map

package/build/action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.js","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AA2BA,MAAM,OAAO,MAAM;IACV,KAAK,CAAQ;IACb,MAAM,GAAkB,IAAI,CAAC;IAC7B,YAAY,GAAkB,IAAI,CAAC;IACnC,aAAa,GAAY,KAAK,CAAC;IAC/B,SAAS,GAAY,KAAK,CAAC;IAEnC,YAAY,IAAW;QACtB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,IAAW,IAAI;QACd,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,IAAW,KAAK;QACf,OAAO,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;IAEM,QAAQ,CAAC,KAAa;QAC5B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAW,WAAW;QACrB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC1B,CAAC;IAEM,cAAc,CAAC,WAAmB;QACxC,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAW,YAAY;QACtB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC3B,CAAC;IAEM,eAAe,CAAgC,YAA2B;QAChF,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;QAClC,OAAO,IAMN,CAAC;IACH,CAAC;IAEM,WAAW;QACjB,OAAO,IASN,CAAC;IACH,CAAC;IAEM,UAAU;QAChB,OAAO,IASN,CAAC;IACH,CAAC;IAED,IAAW,QAAQ;QAClB,OAAO,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;IAEM,aAAa;QACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,OAAO,IAAI,CAAC,UAAU,EAAQ,CAAC;IAChC,CAAC;IAEM,cAAc;QACpB,OAAO,IAAI,CAAC,UAAU,EAA2C,CAAC;IACnE,CAAC;IAEM,qBAAqB;QAC3B,OAAO,IAA+D,CAAC;IACxE,CAAC;CACD","sourcesContent":["import type { MakeOptional } from \"./internal/core.js\";\n\nexport type RuleCtx = {\n\tsubject: any;\n\tobject: any;\n};\n\nexport type ActionContext = {\n\tctx: RuleCtx;\n\tconfigurable: boolean;\n};\n\nexport type InferActionRuleCtx<TAction> =\n\tTAction extends Action<any, infer TContext> ? TContext[\"ctx\"] : never;\n\nexport type InferActionSubject<TAction> = Pick<InferActionRuleCtx<TAction>, \"subject\">[\"subject\"];\n\nexport type InferActionObject<TAction> = Exclude<\n\tPick<InferActionRuleCtx<TAction>, \"object\">[\"object\"],\n\tvoid | undefined\n>;\n\nexport type InferActionAdditionalContext<TAction> = Omit<\n\tInferActionRuleCtx<TAction>,\n\t\"subject\" | \"object\"\n>;\n\nexport class Action<TName extends string, TContext extends ActionContext> {\n\tprivate _name: TName;\n\tprivate _title: string | null = null;\n\tprivate _description: string | null = null;\n\tprivate _configurable: boolean = false;\n\tprivate _noObject: boolean = false;\n\n\tconstructor(name: TName) {\n\t\tthis._name = name;\n\t}\n\n\tpublic get name(): TName {\n\t\treturn this._name;\n\t}\n\n\tpublic get title(): string | null {\n\t\treturn this._title;\n\t}\n\n\tpublic setTitle(title: string) {\n\t\tthis._title = title;\n\t\treturn this;\n\t}\n\n\tpublic get description(): string | null {\n\t\treturn this._description;\n\t}\n\n\tpublic setDescription(description: string) {\n\t\tthis._description = description;\n\t\treturn this;\n\t}\n\n\tpublic get configurable(): boolean {\n\t\treturn this._configurable;\n\t}\n\n\tpublic setConfigurable<TConfigurable extends boolean>(configurable: TConfigurable) {\n\t\tthis._configurable = configurable;\n\t\treturn this as Action<\n\t\t\tTName,\n\t\t\t{\n\t\t\t\tctx: TContext[\"ctx\"];\n\t\t\t\tconfigurable: TConfigurable;\n\t\t\t}\n\t\t>;\n\t}\n\n\tpublic withSubject<TOverrideSubject>() {\n\t\treturn this as Action<\n\t\t\tTName,\n\t\t\t{\n\t\t\t\tctx: {\n\t\t\t\t\tsubject: TOverrideSubject;\n\t\t\t\t\tobject: TContext[\"ctx\"][\"object\"];\n\t\t\t\t};\n\t\t\t\tconfigurable: TContext[\"configurable\"];\n\t\t\t}\n\t\t>;\n\t}\n\n\tpublic withObject<TOverrideObject>() {\n\t\treturn this as Action<\n\t\t\tTName,\n\t\t\t{\n\t\t\t\tctx: {\n\t\t\t\t\tsubject: TContext[\"ctx\"][\"subject\"];\n\t\t\t\t\tobject: TOverrideObject;\n\t\t\t\t};\n\t\t\t\tconfigurable: TContext[\"configurable\"];\n\t\t\t}\n\t\t>;\n\t}\n\n\tpublic get noObject() {\n\t\treturn this._noObject;\n\t}\n\n\tpublic withoutObject() {\n\t\tthis._noObject = true;\n\t\treturn this.withObject<void>();\n\t}\n\n\tpublic optionalObject() {\n\t\treturn this.withObject<MakeOptional<TContext[\"ctx\"][\"object\"]>>();\n\t}\n\n\tpublic withAdditionalContext<TAdditionalContext extends object>() {\n\t\treturn this as unknown as Action<TName, TContext & TAdditionalContext>;\n\t}\n}\n"]}

package/build/actionGroup.d.ts

@@ -0,0 +1,44 @@
+import { type Action, type RuleCtx } from "./action.js";
+import type { ActionMap, ToActionMap } from "./internal/collections.js";
+import type { Expand, UnsetMarker } from "./internal/core.js";
+export type ActionGroupContext = {
+    ctx: RuleCtx;
+    actions: ActionMap | UnsetMarker;
+};
+export type AnyActionGroupContext = {
+    ctx: RuleCtx;
+    actions: ActionMap;
+};
+export declare class ActionGroup<TName extends string, TContext extends ActionGroupContext = AnyActionGroupContext> {
+    private _name;
+    private _title;
+    private _description;
+    private _actions;
+    constructor(name: TName);
+    get name(): TName;
+    get title(): string | null;
+    setTitle(title: string): this;
+    get description(): string | null;
+    setDescription(description: string): this;
+    withSubject<TSubject>(): ActionGroup<TName, {
+        ctx: Expand<Omit<TContext["ctx"], "subject"> & {
+            subject: TSubject;
+        }>;
+        actions: TContext["actions"];
+    }>;
+    withObject<TObject>(): ActionGroup<TName, {
+        ctx: Expand<Omit<TContext["ctx"], "object"> & {
+            object: TObject;
+        }>;
+        actions: TContext["actions"];
+    }>;
+    withAdditionalContext<TAdditionalContext extends object>(): ActionGroup<TName, {
+        ctx: TContext["ctx"] & TAdditionalContext;
+        actions: TContext["actions"];
+    }>;
+    get actions(): TContext["actions"];
+    setActions<TActions extends Action<any, any> | ActionGroup<any, any>>(actions: TActions[]): ActionGroup<TName, {
+        ctx: TContext["ctx"];
+        actions: Expand<ToActionMap<TActions>>;
+    }>;
+}

package/build/actionGroup.js

@@ -0,0 +1,47 @@
+import {} from "./action.js";
+export class ActionGroup {
+    _name;
+    _title = null;
+    _description = null;
+    _actions = {};
+    constructor(name) {
+        this._name = name;
+    }
+    get name() {
+        return this._name;
+    }
+    get title() {
+        return this._title;
+    }
+    setTitle(title) {
+        this._title = title;
+        return this;
+    }
+    get description() {
+        return this._description;
+    }
+    setDescription(description) {
+        this._description = description;
+        return this;
+    }
+    withSubject() {
+        return this;
+    }
+    withObject() {
+        return this;
+    }
+    withAdditionalContext() {
+        return this;
+    }
+    get actions() {
+        return this._actions;
+    }
+    setActions(actions) {
+        this._actions = actions.reduce((acc, action) => ({
+            ...acc,
+            [action.name]: action
+        }), {});
+        return this;
+    }
+}
+//# sourceMappingURL=actionGroup.js.map

package/build/actionGroup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actionGroup.js","sourceRoot":"","sources":["../src/actionGroup.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6B,MAAM,aAAa,CAAC;AAcxD,MAAM,OAAO,WAAW;IAIf,KAAK,CAAQ;IACb,MAAM,GAAkB,IAAI,CAAC;IAC7B,YAAY,GAAkB,IAAI,CAAC;IACnC,QAAQ,GAAwB,EAAyB,CAAC;IAElE,YAAY,IAAW;QACtB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,IAAW,IAAI;QACd,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,IAAW,KAAK;QACf,OAAO,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;IAEM,QAAQ,CAAC,KAAa;QAC5B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAW,WAAW;QACrB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC1B,CAAC;IAEM,cAAc,CAAC,WAAmB;QACxC,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,OAAO,IAAI,CAAC;IACb,CAAC;IAEM,WAAW;QACjB,OAAO,IAUN,CAAC;IACH,CAAC;IAEM,UAAU;QAChB,OAAO,IAUN,CAAC;IACH,CAAC;IAEM,qBAAqB;QAC3B,OAAO,IAMN,CAAC;IACH,CAAC;IAED,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC;IACtB,CAAC;IAEM,UAAU,CAChB,OAAmB;QAEnB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,MAAM,CAC7B,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACjB,GAAG,GAAG;YACN,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM;SACrB,CAAC,EACF,EAAE,CACF,CAAC;QACF,OAAO,IAMN,CAAC;IACH,CAAC;CACD","sourcesContent":["import { type Action, type RuleCtx } from \"./action.js\";\nimport type { ActionMap, ToActionMap } from \"./internal/collections.js\";\nimport type { Expand, UnsetMarker } from \"./internal/core.js\";\n\nexport type ActionGroupContext = {\n\tctx: RuleCtx;\n\tactions: ActionMap | UnsetMarker;\n};\n\nexport type AnyActionGroupContext = {\n\tctx: RuleCtx;\n\tactions: ActionMap;\n};\n\nexport class ActionGroup<\n\tTName extends string,\n\tTContext extends ActionGroupContext = AnyActionGroupContext\n> {\n\tprivate _name: TName;\n\tprivate _title: string | null = null;\n\tprivate _description: string | null = null;\n\tprivate _actions: TContext[\"actions\"] = {} as TContext[\"actions\"];\n\n\tconstructor(name: TName) {\n\t\tthis._name = name;\n\t}\n\n\tpublic get name(): TName {\n\t\treturn this._name;\n\t}\n\n\tpublic get title(): string | null {\n\t\treturn this._title;\n\t}\n\n\tpublic setTitle(title: string) {\n\t\tthis._title = title;\n\t\treturn this;\n\t}\n\n\tpublic get description(): string | null {\n\t\treturn this._description;\n\t}\n\n\tpublic setDescription(description: string) {\n\t\tthis._description = description;\n\t\treturn this;\n\t}\n\n\tpublic withSubject<TSubject>() {\n\t\treturn this as unknown as ActionGroup<\n\t\t\tTName,\n\t\t\t{\n\t\t\t\tctx: Expand<\n\t\t\t\t\tOmit<TContext[\"ctx\"], \"subject\"> & {\n\t\t\t\t\t\tsubject: TSubject;\n\t\t\t\t\t}\n\t\t\t\t>;\n\t\t\t\tactions: TContext[\"actions\"];\n\t\t\t}\n\t\t>;\n\t}\n\n\tpublic withObject<TObject>() {\n\t\treturn this as unknown as ActionGroup<\n\t\t\tTName,\n\t\t\t{\n\t\t\t\tctx: Expand<\n\t\t\t\t\tOmit<TContext[\"ctx\"], \"object\"> & {\n\t\t\t\t\t\tobject: TObject;\n\t\t\t\t\t}\n\t\t\t\t>;\n\t\t\t\tactions: TContext[\"actions\"];\n\t\t\t}\n\t\t>;\n\t}\n\n\tpublic withAdditionalContext<TAdditionalContext extends object>() {\n\t\treturn this as unknown as ActionGroup<\n\t\t\tTName,\n\t\t\t{\n\t\t\t\tctx: TContext[\"ctx\"] & TAdditionalContext;\n\t\t\t\tactions: TContext[\"actions\"];\n\t\t\t}\n\t\t>;\n\t}\n\n\tget actions(): TContext[\"actions\"] {\n\t\treturn this._actions;\n\t}\n\n\tpublic setActions<TActions extends Action<any, any> | ActionGroup<any, any>>(\n\t\tactions: TActions[]\n\t) {\n\t\tthis._actions = actions.reduce(\n\t\t\t(acc, action) => ({\n\t\t\t\t...acc,\n\t\t\t\t[action.name]: action\n\t\t\t}),\n\t\t\t{}\n\t\t);\n\t\treturn this as unknown as ActionGroup<\n\t\t\tTName,\n\t\t\t{\n\t\t\t\tctx: TContext[\"ctx\"];\n\t\t\t\tactions: Expand<ToActionMap<TActions>>;\n\t\t\t}\n\t\t>;\n\t}\n}\n"]}

package/build/actionVisitor.d.ts

@@ -0,0 +1,29 @@
+import { Action } from "./action.js";
+import type { ResourceMap } from "./internal/collections.js";
+import type { ActionFromPath, ActionPaths } from "./internal/paths.js";
+import type { Resource } from "./resource.js";
+type VisitContext = {
+    action: Action<any, any>;
+    resource: Resource<any, any>;
+    path: string;
+};
+type Predicate = (ctx: VisitContext) => boolean;
+type Visit = (ctx: VisitContext) => void;
+export declare class ActionVisitor<TResources extends ResourceMap> {
+    private resources;
+    private callback;
+    private lastVisited;
+    private stop;
+    constructor(resources: TResources);
+    find(predicate: Predicate): VisitContext | null;
+    findByPath<TActionPath extends ActionPaths<TResources>>(path: TActionPath): {
+        resource: Resource<any, any>;
+        action: ActionFromPath<TResources, TActionPath>;
+    } | null;
+    traverse(visit: Visit): void;
+    private start;
+    private traverseResources;
+    private traverseResource;
+    private traverseActions;
+}
+export {};

package/build/actionVisitor.js

@@ -0,0 +1,64 @@
+import { Action } from "./action.js";
+export class ActionVisitor {
+    resources;
+    callback = () => { };
+    lastVisited = null;
+    stop = false;
+    constructor(resources) {
+        this.resources = resources;
+    }
+    find(predicate) {
+        this.start(predicate);
+        return this.stop ? this.lastVisited : null;
+    }
+    findByPath(path) {
+        const ctx = this.find(({ path: ctxPath }) => path === ctxPath);
+        if (!ctx) {
+            return null;
+        }
+        return {
+            resource: ctx.resource,
+            action: ctx.action
+        };
+    }
+    traverse(visit) {
+        this.start(visit);
+    }
+    start(callback) {
+        this.stop = false;
+        this.callback = callback;
+        this.traverseResources(this.resources);
+    }
+    traverseResources(resources, path) {
+        for (const [name, resource] of Object.entries(resources)) {
+            if (this.stop) {
+                break;
+            }
+            this.traverseResource(resource, path ? `${path}.${name}` : name);
+        }
+    }
+    traverseResource(resource, path) {
+        this.traverseActions(resource, resource.actions, path);
+        this.traverseResources(resource.subResources, path);
+    }
+    traverseActions(resource, actions, path) {
+        for (const [name, action] of Object.entries(actions)) {
+            if (this.stop) {
+                break;
+            }
+            if (action instanceof Action) {
+                const ctx = { action, resource, path: `${path}:${name}` };
+                this.lastVisited = ctx;
+                const stop = this.callback(ctx);
+                if (stop) {
+                    this.stop = true;
+                    break;
+                }
+            }
+            else {
+                this.traverseActions(resource, action.actions, `${path}.${name}`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=actionVisitor.js.map

package/build/actionVisitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actionVisitor.js","sourceRoot":"","sources":["../src/actionVisitor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAarC,MAAM,OAAO,aAAa;IACjB,SAAS,CAAa;IACtB,QAAQ,GAAa,GAAG,EAAE,GAAE,CAAC,CAAC;IAC9B,WAAW,GAAwB,IAAI,CAAC;IACxC,IAAI,GAAY,KAAK,CAAC;IAE9B,YAAY,SAAqB;QAChC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5B,CAAC;IAEM,IAAI,CAAC,SAAoB;QAC/B,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAEtB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAEM,UAAU,CAA8C,IAAiB;QAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO;YACN,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,GAAG,CAAC,MAAiD;SAC7D,CAAC;IACH,CAAC;IAEM,QAAQ,CAAC,KAAY;QAC3B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,QAAkB;QAC/B,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAEO,iBAAiB,CAAC,SAAsB,EAAE,IAAa;QAC9D,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1D,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,MAAM;YACP,CAAC;YAED,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC;IACF,CAAC;IAEO,gBAAgB,CAAC,QAA4B,EAAE,IAAY;QAClE,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAEO,eAAe,CAAC,QAA4B,EAAE,OAAkB,EAAE,IAAY;QACrF,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,MAAM;YACP,CAAC;YAED,IAAI,MAAM,YAAY,MAAM,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;gBAC1D,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;gBAEvB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAChC,IAAI,IAAI,EAAE,CAAC;oBACV,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;oBACjB,MAAM;gBACP,CAAC;YACF,CAAC;iBAAM,CAAC;gBACP,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;YACnE,CAAC;QACF,CAAC;IACF,CAAC;CACD","sourcesContent":["import { Action } from \"./action.js\";\nimport type { ActionMap, ResourceMap } from \"./internal/collections.js\";\nimport type { ActionFromPath, ActionPaths } from \"./internal/paths.js\";\nimport type { Resource } from \"./resource.js\";\n\ntype VisitContext = { action: Action<any, any>; resource: Resource<any, any>; path: string };\n\ntype Callback = (ctx: VisitContext) => any;\n\ntype Predicate = (ctx: VisitContext) => boolean;\n\ntype Visit = (ctx: VisitContext) => void;\n\nexport class ActionVisitor<TResources extends ResourceMap> {\n\tprivate resources: TResources;\n\tprivate callback: Callback = () => {};\n\tprivate lastVisited: VisitContext | null = null;\n\tprivate stop: boolean = false;\n\n\tconstructor(resources: TResources) {\n\t\tthis.resources = resources;\n\t}\n\n\tpublic find(predicate: Predicate) {\n\t\tthis.start(predicate);\n\n\t\treturn this.stop ? this.lastVisited : null;\n\t}\n\n\tpublic findByPath<TActionPath extends ActionPaths<TResources>>(path: TActionPath) {\n\t\tconst ctx = this.find(({ path: ctxPath }) => path === ctxPath);\n\t\tif (!ctx) {\n\t\t\treturn null;\n\t\t}\n\n\t\treturn {\n\t\t\tresource: ctx.resource,\n\t\t\taction: ctx.action as ActionFromPath<TResources, TActionPath>\n\t\t};\n\t}\n\n\tpublic traverse(visit: Visit) {\n\t\tthis.start(visit);\n\t}\n\n\tprivate start(callback: Callback) {\n\t\tthis.stop = false;\n\t\tthis.callback = callback;\n\n\t\tthis.traverseResources(this.resources);\n\t}\n\n\tprivate traverseResources(resources: ResourceMap, path?: string) {\n\t\tfor (const [name, resource] of Object.entries(resources)) {\n\t\t\tif (this.stop) {\n\t\t\t\tbreak;\n\t\t\t}\n\n\t\t\tthis.traverseResource(resource, path ? `${path}.${name}` : name);\n\t\t}\n\t}\n\n\tprivate traverseResource(resource: Resource<any, any>, path: string) {\n\t\tthis.traverseActions(resource, resource.actions, path);\n\t\tthis.traverseResources(resource.subResources, path);\n\t}\n\n\tprivate traverseActions(resource: Resource<any, any>, actions: ActionMap, path: string) {\n\t\tfor (const [name, action] of Object.entries(actions)) {\n\t\t\tif (this.stop) {\n\t\t\t\tbreak;\n\t\t\t}\n\n\t\t\tif (action instanceof Action) {\n\t\t\t\tconst ctx = { action, resource, path: `${path}:${name}` };\n\t\t\t\tthis.lastVisited = ctx;\n\n\t\t\t\tconst stop = this.callback(ctx);\n\t\t\t\tif (stop) {\n\t\t\t\t\tthis.stop = true;\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tthis.traverseActions(resource, action.actions, `${path}.${name}`);\n\t\t\t}\n\t\t}\n\t}\n}\n"]}

package/build/index.d.ts

@@ -0,0 +1,9 @@
+export type * from "./abac.js";
+export { ABAC } from "./abac.js";
+export type * from "./action.js";
+export type * from "./actionGroup.js";
+export type * from "./resource.js";
+export { Specitivity } from "./policy.js";
+export type * from "./policy.js";
+export type * from "./permission.js";
+export type { ActionFromPath, ActionPaths } from "./internal/paths.js";

package/build/index.js

@@ -0,0 +1,3 @@
+export { ABAC } from "./abac.js";
+export { Specitivity } from "./policy.js";
+//# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC","sourcesContent":["/* eslint-disable import/export */\nexport type * from \"./abac.js\";\nexport { ABAC } from \"./abac.js\";\nexport type * from \"./action.js\";\nexport type * from \"./actionGroup.js\";\nexport type * from \"./resource.js\";\nexport { Specitivity } from \"./policy.js\";\nexport type * from \"./policy.js\";\nexport type * from \"./permission.js\";\nexport type { ActionFromPath, ActionPaths } from \"./internal/paths.js\";\n"]}