@liam-public/json-logic-whitelist 0.1.0

package/README.md

@@ -0,0 +1,3 @@
+# @liam-public/json-logic-whitelist
+
+Configurable JSON Logic operator, variable, and policy-marker whitelist.

package/dist/index.cjs

@@ -0,0 +1,144 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  ALLOWED_OPS: () => ALLOWED_OPS,
+  ALLOWED_VARS: () => ALLOWED_VARS,
+  createJsonLogicWhitelist: () => createJsonLogicWhitelist,
+  evaluateRule: () => evaluateRule,
+  stripPolicyMarkers: () => stripPolicyMarkers,
+  validateRule: () => validateRule
+});
+module.exports = __toCommonJS(index_exports);
+var import_json_logic_js = __toESM(require("json-logic-js"), 1);
+var defaultOperators = ["var", "==", "!=", "<", "<=", ">", ">=", "in", "and", "or", "!"];
+var ALLOWED_OPS = defaultOperators;
+var ALLOWED_VARS = [
+  "user.status",
+  "user.tier_app_singles",
+  "user.tier_app_doubles",
+  "user.tier_club_singles",
+  "user.tier_club_doubles",
+  "user.club_member_status",
+  "user.rating_app_singles",
+  "user.rating_app_doubles",
+  "user.rating_club_singles",
+  "user.rating_club_doubles",
+  "user.invite_list_member",
+  "club_members_only"
+];
+var POLICY_MARKERS = ["club_members_only", "invite_list"];
+function createJsonLogicWhitelist(config) {
+  const operators = new Set(config.operators ?? defaultOperators);
+  const variables = new Set(config.variables);
+  const markers = config.markers ?? {};
+  const isValidNode = (node) => {
+    if (node === null || ["boolean", "number", "string"].includes(typeof node)) return true;
+    if (Array.isArray(node)) return node.every(isValidNode);
+    if (typeof node !== "object") return false;
+    const entries = Object.entries(node);
+    if (entries.length !== 1) return false;
+    const [operator, value] = entries[0];
+    if (!operators.has(operator)) return false;
+    if (operator === "var") return typeof value === "string" && variables.has(value);
+    return isValidNode(value);
+  };
+  const isValidTopLevel = (rule) => {
+    if (!rule || typeof rule !== "object" || Array.isArray(rule)) return false;
+    let operationCount = 0;
+    for (const [key, value] of Object.entries(rule)) {
+      const marker = markers[key];
+      if (marker) {
+        if (!marker(value)) return false;
+      } else {
+        operationCount += 1;
+        if (operationCount > 1 || !isValidNode({ [key]: value })) return false;
+      }
+    }
+    return true;
+  };
+  const stripMarkers = (rule) => {
+    if (!rule || typeof rule !== "object" || Array.isArray(rule)) return rule;
+    return Object.fromEntries(
+      Object.entries(rule).filter(([key]) => !markers[key])
+    );
+  };
+  const validate = (rule) => {
+    if (!isValidTopLevel(rule)) throw new Error("JSON Logic rule contains an operator, variable, or marker that is not allowed");
+  };
+  return {
+    validate,
+    stripMarkers,
+    evaluate(rule, context) {
+      validate(rule);
+      const logic = stripMarkers(rule);
+      if (logic && typeof logic === "object" && Object.keys(logic).length === 0) return true;
+      return Boolean(import_json_logic_js.default.apply(logic, context));
+    }
+  };
+}
+var legacyWhitelist = createJsonLogicWhitelist({
+  variables: ALLOWED_VARS,
+  operators: ALLOWED_OPS,
+  markers: {
+    club_members_only: (value) => typeof value === "boolean",
+    invite_list: (value) => Array.isArray(value) && value.every((item) => typeof item === "string")
+  }
+});
+function validateRule(rule) {
+  legacyWhitelist.validate(rule);
+}
+function stripPolicyMarkers(rule) {
+  if (!rule || typeof rule !== "object" || Array.isArray(rule)) return rule;
+  return Object.fromEntries(
+    Object.entries(rule).filter(
+      ([key]) => !POLICY_MARKERS.includes(key)
+    )
+  );
+}
+function evaluateRule(rule, context) {
+  validateRule(rule);
+  const stripped = stripPolicyMarkers(rule);
+  if (stripped && typeof stripped === "object" && !Array.isArray(stripped) && Object.keys(stripped).length === 0) {
+    return true;
+  }
+  return legacyWhitelist.evaluate(stripped, context);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ALLOWED_OPS,
+  ALLOWED_VARS,
+  createJsonLogicWhitelist,
+  evaluateRule,
+  stripPolicyMarkers,
+  validateRule
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import jsonLogic from 'json-logic-js'\n\nconst defaultOperators = ['var', '==', '!=', '<', '<=', '>', '>=', 'in', 'and', 'or', '!']\nexport const ALLOWED_OPS = defaultOperators\nexport const ALLOWED_VARS = [\n  'user.status',\n  'user.tier_app_singles',\n  'user.tier_app_doubles',\n  'user.tier_club_singles',\n  'user.tier_club_doubles',\n  'user.club_member_status',\n  'user.rating_app_singles',\n  'user.rating_app_doubles',\n  'user.rating_club_singles',\n  'user.rating_club_doubles',\n  'user.invite_list_member',\n  'club_members_only',\n] as const\nconst POLICY_MARKERS = ['club_members_only', 'invite_list'] as const\n\nexport interface JsonLogicWhitelist {\n  validate(rule: unknown): void\n  evaluate(rule: unknown, context: unknown): boolean\n  stripMarkers(rule: unknown): unknown\n}\n\nexport function createJsonLogicWhitelist(config: {\n  readonly variables: readonly string[]\n  readonly operators?: readonly string[]\n  readonly markers?: Readonly<Record<string, (value: unknown) => boolean>>\n}): JsonLogicWhitelist {\n  const operators = new Set(config.operators ?? defaultOperators)\n  const variables = new Set(config.variables)\n  const markers = config.markers ?? {}\n\n  const isValidNode = (node: unknown): boolean => {\n    if (node === null || ['boolean', 'number', 'string'].includes(typeof node)) return true\n    if (Array.isArray(node)) return node.every(isValidNode)\n    if (typeof node !== 'object') return false\n    const entries = Object.entries(node as Record<string, unknown>)\n    if (entries.length !== 1) return false\n    const [operator, value] = entries[0]!\n    if (!operators.has(operator)) return false\n    if (operator === 'var') return typeof value === 'string' && variables.has(value)\n    return isValidNode(value)\n  }\n\n  const isValidTopLevel = (rule: unknown): boolean => {\n    if (!rule || typeof rule !== 'object' || Array.isArray(rule)) return false\n    let operationCount = 0\n    for (const [key, value] of Object.entries(rule as Record<string, unknown>)) {\n      const marker = markers[key]\n      if (marker) {\n        if (!marker(value)) return false\n      } else {\n        operationCount += 1\n        if (operationCount > 1 || !isValidNode({ [key]: value })) return false\n      }\n    }\n    return true\n  }\n\n  const stripMarkers = (rule: unknown): unknown => {\n    if (!rule || typeof rule !== 'object' || Array.isArray(rule)) return rule\n    return Object.fromEntries(\n      Object.entries(rule as Record<string, unknown>).filter(([key]) => !markers[key]),\n    )\n  }\n\n  const validate = (rule: unknown): void => {\n    if (!isValidTopLevel(rule)) throw new Error('JSON Logic rule contains an operator, variable, or marker that is not allowed')\n  }\n\n  return {\n    validate,\n    stripMarkers,\n    evaluate(rule, context) {\n      validate(rule)\n      const logic = stripMarkers(rule)\n      if (logic && typeof logic === 'object' && Object.keys(logic).length === 0) return true\n      return Boolean(jsonLogic.apply(logic, context))\n    },\n  }\n}\n\nconst legacyWhitelist = createJsonLogicWhitelist({\n  variables: ALLOWED_VARS,\n  operators: ALLOWED_OPS,\n  markers: {\n    club_members_only: (value) => typeof value === 'boolean',\n    invite_list: (value) => Array.isArray(value) && value.every((item) => typeof item === 'string'),\n  },\n})\n\nexport function validateRule(rule: unknown): void {\n  legacyWhitelist.validate(rule)\n}\n\nexport function stripPolicyMarkers(rule: unknown): unknown {\n  if (!rule || typeof rule !== 'object' || Array.isArray(rule)) return rule\n  return Object.fromEntries(\n    Object.entries(rule as Record<string, unknown>).filter(\n      ([key]) => !(POLICY_MARKERS as readonly string[]).includes(key),\n    ),\n  )\n}\n\nexport function evaluateRule(rule: unknown, context: Record<string, unknown>): boolean {\n  validateRule(rule)\n  const stripped = stripPolicyMarkers(rule)\n  if (\n    stripped &&\n    typeof stripped === 'object' &&\n    !Array.isArray(stripped) &&\n    Object.keys(stripped as Record<string, unknown>).length === 0\n  ) {\n    return true\n  }\n  return legacyWhitelist.evaluate(stripped, context)\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2BAAsB;AAEtB,IAAM,mBAAmB,CAAC,OAAO,MAAM,MAAM,KAAK,MAAM,KAAK,MAAM,MAAM,OAAO,MAAM,GAAG;AAClF,IAAM,cAAc;AACpB,IAAM,eAAe;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACA,IAAM,iBAAiB,CAAC,qBAAqB,aAAa;AAQnD,SAAS,yBAAyB,QAIlB;AACrB,QAAM,YAAY,IAAI,IAAI,OAAO,aAAa,gBAAgB;AAC9D,QAAM,YAAY,IAAI,IAAI,OAAO,SAAS;AAC1C,QAAM,UAAU,OAAO,WAAW,CAAC;AAEnC,QAAM,cAAc,CAAC,SAA2B;AAC9C,QAAI,SAAS,QAAQ,CAAC,WAAW,UAAU,QAAQ,EAAE,SAAS,OAAO,IAAI,EAAG,QAAO;AACnF,QAAI,MAAM,QAAQ,IAAI,EAAG,QAAO,KAAK,MAAM,WAAW;AACtD,QAAI,OAAO,SAAS,SAAU,QAAO;AACrC,UAAM,UAAU,OAAO,QAAQ,IAA+B;AAC9D,QAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,UAAM,CAAC,UAAU,KAAK,IAAI,QAAQ,CAAC;AACnC,QAAI,CAAC,UAAU,IAAI,QAAQ,EAAG,QAAO;AACrC,QAAI,aAAa,MAAO,QAAO,OAAO,UAAU,YAAY,UAAU,IAAI,KAAK;AAC/E,WAAO,YAAY,KAAK;AAAA,EAC1B;AAEA,QAAM,kBAAkB,CAAC,SAA2B;AAClD,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG,QAAO;AACrE,QAAI,iBAAiB;AACrB,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAA+B,GAAG;AAC1E,YAAM,SAAS,QAAQ,GAAG;AAC1B,UAAI,QAAQ;AACV,YAAI,CAAC,OAAO,KAAK,EAAG,QAAO;AAAA,MAC7B,OAAO;AACL,0BAAkB;AAClB,YAAI,iBAAiB,KAAK,CAAC,YAAY,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,EAAG,QAAO;AAAA,MACnE;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,CAAC,SAA2B;AAC/C,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG,QAAO;AACrE,WAAO,OAAO;AAAA,MACZ,OAAO,QAAQ,IAA+B,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC;AAAA,IACjF;AAAA,EACF;AAEA,QAAM,WAAW,CAAC,SAAwB;AACxC,QAAI,CAAC,gBAAgB,IAAI,EAAG,OAAM,IAAI,MAAM,+EAA+E;AAAA,EAC7H;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,SAAS,MAAM,SAAS;AACtB,eAAS,IAAI;AACb,YAAM,QAAQ,aAAa,IAAI;AAC/B,UAAI,SAAS,OAAO,UAAU,YAAY,OAAO,KAAK,KAAK,EAAE,WAAW,EAAG,QAAO;AAClF,aAAO,QAAQ,qBAAAA,QAAU,MAAM,OAAO,OAAO,CAAC;AAAA,IAChD;AAAA,EACF;AACF;AAEA,IAAM,kBAAkB,yBAAyB;AAAA,EAC/C,WAAW;AAAA,EACX,WAAW;AAAA,EACX,SAAS;AAAA,IACP,mBAAmB,CAAC,UAAU,OAAO,UAAU;AAAA,IAC/C,aAAa,CAAC,UAAU,MAAM,QAAQ,KAAK,KAAK,MAAM,MAAM,CAAC,SAAS,OAAO,SAAS,QAAQ;AAAA,EAChG;AACF,CAAC;AAEM,SAAS,aAAa,MAAqB;AAChD,kBAAgB,SAAS,IAAI;AAC/B;AAEO,SAAS,mBAAmB,MAAwB;AACzD,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG,QAAO;AACrE,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,IAA+B,EAAE;AAAA,MAC9C,CAAC,CAAC,GAAG,MAAM,CAAE,eAAqC,SAAS,GAAG;AAAA,IAChE;AAAA,EACF;AACF;AAEO,SAAS,aAAa,MAAe,SAA2C;AACrF,eAAa,IAAI;AACjB,QAAM,WAAW,mBAAmB,IAAI;AACxC,MACE,YACA,OAAO,aAAa,YACpB,CAAC,MAAM,QAAQ,QAAQ,KACvB,OAAO,KAAK,QAAmC,EAAE,WAAW,GAC5D;AACA,WAAO;AAAA,EACT;AACA,SAAO,gBAAgB,SAAS,UAAU,OAAO;AACnD;","names":["jsonLogic"]}

package/dist/index.d.cts

@@ -0,0 +1,17 @@
+declare const ALLOWED_OPS: string[];
+declare const ALLOWED_VARS: readonly ["user.status", "user.tier_app_singles", "user.tier_app_doubles", "user.tier_club_singles", "user.tier_club_doubles", "user.club_member_status", "user.rating_app_singles", "user.rating_app_doubles", "user.rating_club_singles", "user.rating_club_doubles", "user.invite_list_member", "club_members_only"];
+interface JsonLogicWhitelist {
+    validate(rule: unknown): void;
+    evaluate(rule: unknown, context: unknown): boolean;
+    stripMarkers(rule: unknown): unknown;
+}
+declare function createJsonLogicWhitelist(config: {
+    readonly variables: readonly string[];
+    readonly operators?: readonly string[];
+    readonly markers?: Readonly<Record<string, (value: unknown) => boolean>>;
+}): JsonLogicWhitelist;
+declare function validateRule(rule: unknown): void;
+declare function stripPolicyMarkers(rule: unknown): unknown;
+declare function evaluateRule(rule: unknown, context: Record<string, unknown>): boolean;
+
+export { ALLOWED_OPS, ALLOWED_VARS, type JsonLogicWhitelist, createJsonLogicWhitelist, evaluateRule, stripPolicyMarkers, validateRule };

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+declare const ALLOWED_OPS: string[];
+declare const ALLOWED_VARS: readonly ["user.status", "user.tier_app_singles", "user.tier_app_doubles", "user.tier_club_singles", "user.tier_club_doubles", "user.club_member_status", "user.rating_app_singles", "user.rating_app_doubles", "user.rating_club_singles", "user.rating_club_doubles", "user.invite_list_member", "club_members_only"];
+interface JsonLogicWhitelist {
+    validate(rule: unknown): void;
+    evaluate(rule: unknown, context: unknown): boolean;
+    stripMarkers(rule: unknown): unknown;
+}
+declare function createJsonLogicWhitelist(config: {
+    readonly variables: readonly string[];
+    readonly operators?: readonly string[];
+    readonly markers?: Readonly<Record<string, (value: unknown) => boolean>>;
+}): JsonLogicWhitelist;
+declare function validateRule(rule: unknown): void;
+declare function stripPolicyMarkers(rule: unknown): unknown;
+declare function evaluateRule(rule: unknown, context: Record<string, unknown>): boolean;
+
+export { ALLOWED_OPS, ALLOWED_VARS, type JsonLogicWhitelist, createJsonLogicWhitelist, evaluateRule, stripPolicyMarkers, validateRule };

package/dist/index.js

@@ -0,0 +1,104 @@
+// src/index.ts
+import jsonLogic from "json-logic-js";
+var defaultOperators = ["var", "==", "!=", "<", "<=", ">", ">=", "in", "and", "or", "!"];
+var ALLOWED_OPS = defaultOperators;
+var ALLOWED_VARS = [
+  "user.status",
+  "user.tier_app_singles",
+  "user.tier_app_doubles",
+  "user.tier_club_singles",
+  "user.tier_club_doubles",
+  "user.club_member_status",
+  "user.rating_app_singles",
+  "user.rating_app_doubles",
+  "user.rating_club_singles",
+  "user.rating_club_doubles",
+  "user.invite_list_member",
+  "club_members_only"
+];
+var POLICY_MARKERS = ["club_members_only", "invite_list"];
+function createJsonLogicWhitelist(config) {
+  const operators = new Set(config.operators ?? defaultOperators);
+  const variables = new Set(config.variables);
+  const markers = config.markers ?? {};
+  const isValidNode = (node) => {
+    if (node === null || ["boolean", "number", "string"].includes(typeof node)) return true;
+    if (Array.isArray(node)) return node.every(isValidNode);
+    if (typeof node !== "object") return false;
+    const entries = Object.entries(node);
+    if (entries.length !== 1) return false;
+    const [operator, value] = entries[0];
+    if (!operators.has(operator)) return false;
+    if (operator === "var") return typeof value === "string" && variables.has(value);
+    return isValidNode(value);
+  };
+  const isValidTopLevel = (rule) => {
+    if (!rule || typeof rule !== "object" || Array.isArray(rule)) return false;
+    let operationCount = 0;
+    for (const [key, value] of Object.entries(rule)) {
+      const marker = markers[key];
+      if (marker) {
+        if (!marker(value)) return false;
+      } else {
+        operationCount += 1;
+        if (operationCount > 1 || !isValidNode({ [key]: value })) return false;
+      }
+    }
+    return true;
+  };
+  const stripMarkers = (rule) => {
+    if (!rule || typeof rule !== "object" || Array.isArray(rule)) return rule;
+    return Object.fromEntries(
+      Object.entries(rule).filter(([key]) => !markers[key])
+    );
+  };
+  const validate = (rule) => {
+    if (!isValidTopLevel(rule)) throw new Error("JSON Logic rule contains an operator, variable, or marker that is not allowed");
+  };
+  return {
+    validate,
+    stripMarkers,
+    evaluate(rule, context) {
+      validate(rule);
+      const logic = stripMarkers(rule);
+      if (logic && typeof logic === "object" && Object.keys(logic).length === 0) return true;
+      return Boolean(jsonLogic.apply(logic, context));
+    }
+  };
+}
+var legacyWhitelist = createJsonLogicWhitelist({
+  variables: ALLOWED_VARS,
+  operators: ALLOWED_OPS,
+  markers: {
+    club_members_only: (value) => typeof value === "boolean",
+    invite_list: (value) => Array.isArray(value) && value.every((item) => typeof item === "string")
+  }
+});
+function validateRule(rule) {
+  legacyWhitelist.validate(rule);
+}
+function stripPolicyMarkers(rule) {
+  if (!rule || typeof rule !== "object" || Array.isArray(rule)) return rule;
+  return Object.fromEntries(
+    Object.entries(rule).filter(
+      ([key]) => !POLICY_MARKERS.includes(key)
+    )
+  );
+}
+function evaluateRule(rule, context) {
+  validateRule(rule);
+  const stripped = stripPolicyMarkers(rule);
+  if (stripped && typeof stripped === "object" && !Array.isArray(stripped) && Object.keys(stripped).length === 0) {
+    return true;
+  }
+  return legacyWhitelist.evaluate(stripped, context);
+}
+export {
+  ALLOWED_OPS,
+  ALLOWED_VARS,
+  createJsonLogicWhitelist,
+  evaluateRule,
+  stripPolicyMarkers,
+  validateRule
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import jsonLogic from 'json-logic-js'\n\nconst defaultOperators = ['var', '==', '!=', '<', '<=', '>', '>=', 'in', 'and', 'or', '!']\nexport const ALLOWED_OPS = defaultOperators\nexport const ALLOWED_VARS = [\n  'user.status',\n  'user.tier_app_singles',\n  'user.tier_app_doubles',\n  'user.tier_club_singles',\n  'user.tier_club_doubles',\n  'user.club_member_status',\n  'user.rating_app_singles',\n  'user.rating_app_doubles',\n  'user.rating_club_singles',\n  'user.rating_club_doubles',\n  'user.invite_list_member',\n  'club_members_only',\n] as const\nconst POLICY_MARKERS = ['club_members_only', 'invite_list'] as const\n\nexport interface JsonLogicWhitelist {\n  validate(rule: unknown): void\n  evaluate(rule: unknown, context: unknown): boolean\n  stripMarkers(rule: unknown): unknown\n}\n\nexport function createJsonLogicWhitelist(config: {\n  readonly variables: readonly string[]\n  readonly operators?: readonly string[]\n  readonly markers?: Readonly<Record<string, (value: unknown) => boolean>>\n}): JsonLogicWhitelist {\n  const operators = new Set(config.operators ?? defaultOperators)\n  const variables = new Set(config.variables)\n  const markers = config.markers ?? {}\n\n  const isValidNode = (node: unknown): boolean => {\n    if (node === null || ['boolean', 'number', 'string'].includes(typeof node)) return true\n    if (Array.isArray(node)) return node.every(isValidNode)\n    if (typeof node !== 'object') return false\n    const entries = Object.entries(node as Record<string, unknown>)\n    if (entries.length !== 1) return false\n    const [operator, value] = entries[0]!\n    if (!operators.has(operator)) return false\n    if (operator === 'var') return typeof value === 'string' && variables.has(value)\n    return isValidNode(value)\n  }\n\n  const isValidTopLevel = (rule: unknown): boolean => {\n    if (!rule || typeof rule !== 'object' || Array.isArray(rule)) return false\n    let operationCount = 0\n    for (const [key, value] of Object.entries(rule as Record<string, unknown>)) {\n      const marker = markers[key]\n      if (marker) {\n        if (!marker(value)) return false\n      } else {\n        operationCount += 1\n        if (operationCount > 1 || !isValidNode({ [key]: value })) return false\n      }\n    }\n    return true\n  }\n\n  const stripMarkers = (rule: unknown): unknown => {\n    if (!rule || typeof rule !== 'object' || Array.isArray(rule)) return rule\n    return Object.fromEntries(\n      Object.entries(rule as Record<string, unknown>).filter(([key]) => !markers[key]),\n    )\n  }\n\n  const validate = (rule: unknown): void => {\n    if (!isValidTopLevel(rule)) throw new Error('JSON Logic rule contains an operator, variable, or marker that is not allowed')\n  }\n\n  return {\n    validate,\n    stripMarkers,\n    evaluate(rule, context) {\n      validate(rule)\n      const logic = stripMarkers(rule)\n      if (logic && typeof logic === 'object' && Object.keys(logic).length === 0) return true\n      return Boolean(jsonLogic.apply(logic, context))\n    },\n  }\n}\n\nconst legacyWhitelist = createJsonLogicWhitelist({\n  variables: ALLOWED_VARS,\n  operators: ALLOWED_OPS,\n  markers: {\n    club_members_only: (value) => typeof value === 'boolean',\n    invite_list: (value) => Array.isArray(value) && value.every((item) => typeof item === 'string'),\n  },\n})\n\nexport function validateRule(rule: unknown): void {\n  legacyWhitelist.validate(rule)\n}\n\nexport function stripPolicyMarkers(rule: unknown): unknown {\n  if (!rule || typeof rule !== 'object' || Array.isArray(rule)) return rule\n  return Object.fromEntries(\n    Object.entries(rule as Record<string, unknown>).filter(\n      ([key]) => !(POLICY_MARKERS as readonly string[]).includes(key),\n    ),\n  )\n}\n\nexport function evaluateRule(rule: unknown, context: Record<string, unknown>): boolean {\n  validateRule(rule)\n  const stripped = stripPolicyMarkers(rule)\n  if (\n    stripped &&\n    typeof stripped === 'object' &&\n    !Array.isArray(stripped) &&\n    Object.keys(stripped as Record<string, unknown>).length === 0\n  ) {\n    return true\n  }\n  return legacyWhitelist.evaluate(stripped, context)\n}\n"],"mappings":";AAAA,OAAO,eAAe;AAEtB,IAAM,mBAAmB,CAAC,OAAO,MAAM,MAAM,KAAK,MAAM,KAAK,MAAM,MAAM,OAAO,MAAM,GAAG;AAClF,IAAM,cAAc;AACpB,IAAM,eAAe;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACA,IAAM,iBAAiB,CAAC,qBAAqB,aAAa;AAQnD,SAAS,yBAAyB,QAIlB;AACrB,QAAM,YAAY,IAAI,IAAI,OAAO,aAAa,gBAAgB;AAC9D,QAAM,YAAY,IAAI,IAAI,OAAO,SAAS;AAC1C,QAAM,UAAU,OAAO,WAAW,CAAC;AAEnC,QAAM,cAAc,CAAC,SAA2B;AAC9C,QAAI,SAAS,QAAQ,CAAC,WAAW,UAAU,QAAQ,EAAE,SAAS,OAAO,IAAI,EAAG,QAAO;AACnF,QAAI,MAAM,QAAQ,IAAI,EAAG,QAAO,KAAK,MAAM,WAAW;AACtD,QAAI,OAAO,SAAS,SAAU,QAAO;AACrC,UAAM,UAAU,OAAO,QAAQ,IAA+B;AAC9D,QAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,UAAM,CAAC,UAAU,KAAK,IAAI,QAAQ,CAAC;AACnC,QAAI,CAAC,UAAU,IAAI,QAAQ,EAAG,QAAO;AACrC,QAAI,aAAa,MAAO,QAAO,OAAO,UAAU,YAAY,UAAU,IAAI,KAAK;AAC/E,WAAO,YAAY,KAAK;AAAA,EAC1B;AAEA,QAAM,kBAAkB,CAAC,SAA2B;AAClD,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG,QAAO;AACrE,QAAI,iBAAiB;AACrB,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAA+B,GAAG;AAC1E,YAAM,SAAS,QAAQ,GAAG;AAC1B,UAAI,QAAQ;AACV,YAAI,CAAC,OAAO,KAAK,EAAG,QAAO;AAAA,MAC7B,OAAO;AACL,0BAAkB;AAClB,YAAI,iBAAiB,KAAK,CAAC,YAAY,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,EAAG,QAAO;AAAA,MACnE;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,CAAC,SAA2B;AAC/C,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG,QAAO;AACrE,WAAO,OAAO;AAAA,MACZ,OAAO,QAAQ,IAA+B,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC;AAAA,IACjF;AAAA,EACF;AAEA,QAAM,WAAW,CAAC,SAAwB;AACxC,QAAI,CAAC,gBAAgB,IAAI,EAAG,OAAM,IAAI,MAAM,+EAA+E;AAAA,EAC7H;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,SAAS,MAAM,SAAS;AACtB,eAAS,IAAI;AACb,YAAM,QAAQ,aAAa,IAAI;AAC/B,UAAI,SAAS,OAAO,UAAU,YAAY,OAAO,KAAK,KAAK,EAAE,WAAW,EAAG,QAAO;AAClF,aAAO,QAAQ,UAAU,MAAM,OAAO,OAAO,CAAC;AAAA,IAChD;AAAA,EACF;AACF;AAEA,IAAM,kBAAkB,yBAAyB;AAAA,EAC/C,WAAW;AAAA,EACX,WAAW;AAAA,EACX,SAAS;AAAA,IACP,mBAAmB,CAAC,UAAU,OAAO,UAAU;AAAA,IAC/C,aAAa,CAAC,UAAU,MAAM,QAAQ,KAAK,KAAK,MAAM,MAAM,CAAC,SAAS,OAAO,SAAS,QAAQ;AAAA,EAChG;AACF,CAAC;AAEM,SAAS,aAAa,MAAqB;AAChD,kBAAgB,SAAS,IAAI;AAC/B;AAEO,SAAS,mBAAmB,MAAwB;AACzD,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG,QAAO;AACrE,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,IAA+B,EAAE;AAAA,MAC9C,CAAC,CAAC,GAAG,MAAM,CAAE,eAAqC,SAAS,GAAG;AAAA,IAChE;AAAA,EACF;AACF;AAEO,SAAS,aAAa,MAAe,SAA2C;AACrF,eAAa,IAAI;AACjB,QAAM,WAAW,mBAAmB,IAAI;AACxC,MACE,YACA,OAAO,aAAa,YACpB,CAAC,MAAM,QAAQ,QAAQ,KACvB,OAAO,KAAK,QAAmC,EAAE,WAAW,GAC5D;AACA,WAAO;AAAA,EACT;AACA,SAAO,gBAAgB,SAAS,UAAU,OAAO;AACnD;","names":[]}

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@liam-public/json-logic-whitelist",
+  "version": "0.1.0",
+  "description": "Configurable JSON Logic operator and variable whitelist.",
+  "type": "module",
+  "liamCompatibility": {
+    "runtime": [
+      "universal"
+    ],
+    "framework": [
+      "agnostic"
+    ]
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "dependencies": {
+    "json-logic-js": "^2.0.2"
+  },
+  "scripts": {
+    "build": "tsup src/index.ts --format esm --dts --sourcemap",
+    "clean": "rm -rf dist",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
+  }
+}