@lit-protocol/vincent-ability-sdk 0.0.1-ea

package/dist/src/lib/handlers/vincentAbilityHandler.js

@@ -0,0 +1,160 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.vincentAbilityHandler = void 0;
+exports.createAbilityExecutionContext = createAbilityExecutionContext;
+const ethers_1 = require("ethers");
+const helpers_1 = require("../abilityCore/helpers");
+const typeGuards_1 = require("../abilityCore/helpers/typeGuards");
+const validatePolicies_1 = require("../abilityCore/helpers/validatePolicies");
+const zod_1 = require("../abilityCore/helpers/zod");
+const assertSupportedAbilityVersion_1 = require("../assertSupportedAbilityVersion");
+const getOnchainPolicyParams_1 = require("../policyCore/policyParameters/getOnchainPolicyParams");
+const utils_1 = require("../utils");
+const constants_1 = require("./constants");
+const evaluatePolicies_1 = require("./evaluatePolicies");
+/* eslint-disable @typescript-eslint/no-explicit-any */
+function createAbilityExecutionContext({ vincentAbility, policyEvaluationResults, baseContext, }) {
+    if (!policyEvaluationResults.allow) {
+        throw new Error('Received denied policies to createAbilityExecutionContext()');
+    }
+    const newContext = {
+        allow: true,
+        evaluatedPolicies: policyEvaluationResults.evaluatedPolicies,
+        allowedPolicies: {},
+    };
+    const policyByPackageName = vincentAbility.supportedPolicies.policyByPackageName;
+    const allowedKeys = Object.keys(policyEvaluationResults.allowedPolicies);
+    for (const packageName of allowedKeys) {
+        const entry = policyEvaluationResults.allowedPolicies[packageName];
+        const policy = policyByPackageName[packageName];
+        const vincentPolicy = policy.vincentPolicy;
+        if (!entry) {
+            throw new Error(`Missing entry on allowedPolicies for policy: ${packageName}`);
+        }
+        const resultWrapper = {
+            result: entry.result,
+        };
+        // TODO: Collect results of commit calls and add to the execution context result
+        if (vincentPolicy.commit) {
+            const commitFn = vincentPolicy.commit;
+            resultWrapper.commit = (commitParams) => {
+                return commitFn(commitParams, baseContext);
+            };
+        }
+        newContext.allowedPolicies[packageName] =
+            resultWrapper;
+    }
+    return newContext;
+}
+/** @hidden */
+const vincentAbilityHandler = ({ vincentAbility, abilityParams, context, }) => {
+    return async () => {
+        (0, assertSupportedAbilityVersion_1.assertSupportedAbilityVersion)(vincentAbilityApiVersion);
+        let policyEvalResults = undefined;
+        const abilityIpfsCid = LitAuth.actionIpfsIds[0];
+        const appDelegateeAddress = ethers_1.ethers.utils.getAddress(LitAuth.authSigAddress);
+        // Build an initial baseContext -- we will add info as we execute, so if an error is encountered the consumer gets
+        // all of the info we did find along the way
+        const baseContext = {
+            delegation: {
+                delegateeAddress: appDelegateeAddress,
+                // delegatorPkpInfo: null,
+            },
+            abilityIpfsCid,
+            // appId: undefined,
+            // appVersion: undefined,
+        };
+        try {
+            const delegationRpcUrl = await Lit.Actions.getRpcUrl({ chain: 'yellowstone' });
+            const parsedOrFail = (0, zod_1.validateOrFail)(abilityParams, vincentAbility.abilityParamsSchema, 'execute', 'input');
+            if ((0, typeGuards_1.isAbilityFailureResult)(parsedOrFail)) {
+                Lit.Actions.setResponse({
+                    response: JSON.stringify({
+                        abilityExecutionResult: parsedOrFail,
+                    }),
+                });
+                return;
+            }
+            const userPkpInfo = await (0, helpers_1.getPkpInfo)({
+                litPubkeyRouterAddress: constants_1.LIT_DATIL_PUBKEY_ROUTER_ADDRESS,
+                yellowstoneRpcUrl: delegationRpcUrl,
+                pkpEthAddress: context.delegatorPkpEthAddress,
+            });
+            baseContext.delegation.delegatorPkpInfo = userPkpInfo;
+            const { decodedPolicies, appId, appVersion } = await (0, getOnchainPolicyParams_1.getPoliciesAndAppVersion)({
+                delegationRpcUrl,
+                appDelegateeAddress,
+                agentWalletPkpEthAddress: context.delegatorPkpEthAddress,
+                abilityIpfsCid,
+            });
+            baseContext.appId = appId.toNumber();
+            baseContext.appVersion = appVersion.toNumber();
+            const validatedPolicies = await (0, validatePolicies_1.validatePolicies)({
+                decodedPolicies,
+                vincentAbility,
+                parsedAbilityParams: parsedOrFail,
+                abilityIpfsCid,
+            });
+            console.log('validatedPolicies', JSON.stringify(validatedPolicies, utils_1.bigintReplacer));
+            const policyEvaluationResults = await (0, evaluatePolicies_1.evaluatePolicies)({
+                validatedPolicies,
+                vincentAbility,
+                context: baseContext,
+                vincentAbilityApiVersion,
+            });
+            console.log('policyEvaluationResults', JSON.stringify(policyEvaluationResults, utils_1.bigintReplacer));
+            policyEvalResults = policyEvaluationResults;
+            if (!policyEvalResults.allow) {
+                Lit.Actions.setResponse({
+                    response: JSON.stringify({
+                        abilityContext: {
+                            ...baseContext,
+                            policiesContext: policyEvaluationResults,
+                        },
+                        abilityExecutionResult: {
+                            success: false,
+                        },
+                    }),
+                });
+                return;
+            }
+            const executeContext = createAbilityExecutionContext({
+                vincentAbility,
+                policyEvaluationResults,
+                baseContext,
+            });
+            const abilityExecutionResult = await vincentAbility.execute({
+                abilityParams: parsedOrFail,
+            }, {
+                ...baseContext,
+                policiesContext: executeContext,
+            });
+            console.log('abilityExecutionResult', JSON.stringify(abilityExecutionResult, utils_1.bigintReplacer));
+            Lit.Actions.setResponse({
+                response: JSON.stringify({
+                    abilityExecutionResult,
+                    abilityContext: {
+                        ...baseContext,
+                        policiesContext: policyEvaluationResults,
+                    },
+                }),
+            });
+        }
+        catch (err) {
+            Lit.Actions.setResponse({
+                response: JSON.stringify({
+                    abilityContext: {
+                        ...baseContext,
+                        policiesContext: policyEvalResults,
+                    },
+                    abilityExecutionResult: {
+                        success: false,
+                        runtimeError: err instanceof Error ? err.message : String(err),
+                    },
+                }),
+            });
+        }
+    };
+};
+exports.vincentAbilityHandler = vincentAbilityHandler;
+//# sourceMappingURL=vincentAbilityHandler.js.map

package/dist/src/lib/handlers/vincentAbilityHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vincentAbilityHandler.js","sourceRoot":"","sources":["../../../../src/lib/handlers/vincentAbilityHandler.ts"],"names":[],"mappings":";;;AAwCA,sEAmEC;AAzGD,mCAAgC;AAYhC,oDAAoD;AACpD,kEAA2E;AAC3E,8EAA2E;AAC3E,oDAA4D;AAC5D,oFAAiF;AACjF,kGAAiG;AACjG,oCAA0C;AAC1C,2CAA8D;AAC9D,yDAAsD;AAiBtD,uDAAuD;AACvD,SAAgB,6BAA6B,CAK3C,EACA,cAAc,EACd,uBAAuB,EACvB,WAAW,GAcZ;IACC,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,UAAU,GAAyD;QACvE,KAAK,EAAE,IAAI;QACX,iBAAiB,EAAE,uBAAuB,CAAC,iBAAiB;QAC5D,eAAe,EAAE,EAA6E;KAC/F,CAAC;IAEF,MAAM,mBAAmB,GAAG,cAAc,CAAC,iBAAiB,CAAC,mBAAmB,CAAC;IACjF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,eAAe,CAEtE,CAAC;IAEF,KAAK,MAAM,WAAW,IAAI,WAAW,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,uBAAuB,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAE3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,gDAAgD,WAAqB,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,aAAa,GAGf;YACF,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;QAEF,gFAAgF;QAChF,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC;YACtC,aAAa,CAAC,MAAM,GAAG,CAAC,YAAY,EAAE,EAAE;gBACtC,OAAO,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YAC7C,CAAC,CAAC;QACJ,CAAC;QAED,UAAU,CAAC,eAAe,CAAC,WAAW,CAAC;YACrC,aAA4G,CAAC;IACjH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,cAAc;AACP,MAAM,qBAAqB,GAAG,CAKnC,EACA,cAAc,EACd,aAAa,EACb,OAAO,GAcR,EAAE,EAAE;IACH,OAAO,KAAK,IAAI,EAAE;QAChB,IAAA,6DAA6B,EAAC,wBAAwB,CAAC,CAAC;QAExD,IAAI,iBAAiB,GACnB,SAAS,CAAC;QACZ,MAAM,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,mBAAmB,GAAG,eAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAE5E,kHAAkH;QAClH,4CAA4C;QAC5C,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE;gBACV,gBAAgB,EAAE,mBAAmB;gBACrC,0BAA0B;aAC3B;YACD,cAAc;YACd,oBAAoB;YACpB,yBAAyB;SACnB,CAAC;QAET,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YAE/E,MAAM,YAAY,GAAG,IAAA,oBAAc,EACjC,aAAa,EACb,cAAc,CAAC,mBAAmB,EAClC,SAAS,EACT,OAAO,CACR,CAAC;YAEF,IAAI,IAAA,mCAAsB,EAAC,YAAY,CAAC,EAAE,CAAC;gBACzC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;oBACtB,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC;wBACvB,sBAAsB,EAAE,YAAY;qBACrC,CAAC;iBACH,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,IAAA,oBAAU,EAAC;gBACnC,sBAAsB,EAAE,2CAA+B;gBACvD,iBAAiB,EAAE,gBAAgB;gBACnC,aAAa,EAAE,OAAO,CAAC,sBAAsB;aAC9C,CAAC,CAAC;YACH,WAAW,CAAC,UAAU,CAAC,gBAAgB,GAAG,WAAW,CAAC;YAEtD,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,IAAA,iDAAwB,EAAC;gBAC5E,gBAAgB;gBAChB,mBAAmB;gBACnB,wBAAwB,EAAE,OAAO,CAAC,sBAAsB;gBACxD,cAAc;aACf,CAAC,CAAC;YACH,WAAW,CAAC,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,WAAW,CAAC,UAAU,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC;YAE/C,MAAM,iBAAiB,GAAG,MAAM,IAAA,mCAAgB,EAAC;gBAC/C,eAAe;gBACf,cAAc;gBACd,mBAAmB,EAAE,YAAY;gBACjC,cAAc;aACf,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,sBAAc,CAAC,CAAC,CAAC;YAEpF,MAAM,uBAAuB,GAAG,MAAM,IAAA,mCAAgB,EAAC;gBACrD,iBAAiB;gBACjB,cAAc;gBACd,OAAO,EAAE,WAAW;gBACpB,wBAAwB;aACzB,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,CACT,yBAAyB,EACzB,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,sBAAc,CAAC,CACxD,CAAC;YAEF,iBAAiB,GAAG,uBAAuB,CAAC;YAE5C,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;gBAC7B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;oBACtB,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC;wBACvB,cAAc,EAAE;4BACd,GAAG,WAAW;4BACd,eAAe,EAAE,uBAAuB;yBACa;wBACvD,sBAAsB,EAAE;4BACtB,OAAO,EAAE,KAAK;yBACf;qBACF,CAAC;iBACH,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,cAAc,GAAG,6BAA6B,CAAC;gBACnD,cAAc;gBACd,uBAAuB;gBACvB,WAAW;aACZ,CAAC,CAAC;YAEH,MAAM,sBAAsB,GAAG,MAAM,cAAc,CAAC,OAAO,CACzD;gBACE,aAAa,EAAE,YAAY;aAC5B,EACD;gBACE,GAAG,WAAW;gBACd,eAAe,EAAE,cAAc;aAChC,CACF,CAAC;YAEF,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,sBAAc,CAAC,CAAC,CAAC;YAE9F,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;gBACtB,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC;oBACvB,sBAAsB;oBACtB,cAAc,EAAE;wBACd,GAAG,WAAW;wBACd,eAAe,EAAE,uBAAuB;qBACa;iBACxD,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;gBACtB,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC;oBACvB,cAAc,EAAE;wBACd,GAAG,WAAW;wBACd,eAAe,EAAE,iBAAiB;qBACa;oBACjD,sBAAsB,EAAE;wBACtB,OAAO,EAAE,KAAK;wBACd,YAAY,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBAC/D;iBACF,CAAC;aACH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AA9JW,QAAA,qBAAqB,yBA8JhC"}

package/dist/src/lib/handlers/vincentPolicyHandler.d.ts

@@ -0,0 +1,13 @@
+import type { z } from 'zod';
+import type { PolicyConsumerContext, VincentPolicy } from '../types';
+/** @hidden */
+export declare function vincentPolicyHandler<PackageName extends string, PolicyAbilityParams extends z.ZodType, UserParams extends z.ZodType | undefined = undefined, EvalAllowResult extends z.ZodType | undefined = undefined, EvalDenyResult extends z.ZodType | undefined = undefined>({ vincentPolicy, context, abilityParams, }: {
+    vincentPolicy: VincentPolicy<PackageName, PolicyAbilityParams, UserParams, any, // PrecheckAllowResult
+    any, // PrecheckDenyResult
+    EvalAllowResult, EvalDenyResult, any, // CommitParams
+    any, // CommitAllowResult
+    any>;
+    abilityParams: unknown;
+    context: PolicyConsumerContext;
+}): Promise<void>;
+//# sourceMappingURL=vincentPolicyHandler.d.ts.map

package/dist/src/lib/handlers/vincentPolicyHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vincentPolicyHandler.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/vincentPolicyHandler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAI7B,OAAO,KAAK,EAAoB,qBAAqB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AA2BvF,cAAc;AACd,wBAAsB,oBAAoB,CACxC,WAAW,SAAS,MAAM,EAC1B,mBAAmB,SAAS,CAAC,CAAC,OAAO,EACrC,UAAU,SAAS,CAAC,CAAC,OAAO,GAAG,SAAS,GAAG,SAAS,EACpD,eAAe,SAAS,CAAC,CAAC,OAAO,GAAG,SAAS,GAAG,SAAS,EACzD,cAAc,SAAS,CAAC,CAAC,OAAO,GAAG,SAAS,GAAG,SAAS,EACxD,EACA,aAAa,EACb,OAAO,EACP,aAAa,GACd,EAAE;IACD,aAAa,EAAE,aAAa,CAC1B,WAAW,EACX,mBAAmB,EACnB,UAAU,EACV,GAAG,EAAE,sBAAsB;IAC3B,GAAG,EAAE,qBAAqB;IAC1B,eAAe,EACf,cAAc,EACd,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,oBAAoB;IACzB,GAAG,CACJ,CAAC;IACF,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,qBAAqB,CAAC;CAChC,iBAqEA"}

package/dist/src/lib/handlers/vincentPolicyHandler.js

@@ -0,0 +1,70 @@
+"use strict";
+// src/lib/handlers/vincentPolicyHandler.ts
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.vincentPolicyHandler = vincentPolicyHandler;
+const ethers_1 = require("ethers");
+const helpers_1 = require("../abilityCore/helpers");
+const assertSupportedAbilityVersion_1 = require("../assertSupportedAbilityVersion");
+const helpers_2 = require("../policyCore/helpers");
+const getOnchainPolicyParams_1 = require("../policyCore/policyParameters/getOnchainPolicyParams");
+const utils_1 = require("../utils");
+const constants_1 = require("./constants");
+/** @hidden */
+async function vincentPolicyHandler({ vincentPolicy, context, abilityParams, }) {
+    (0, assertSupportedAbilityVersion_1.assertSupportedAbilityVersion)(vincentAbilityApiVersion);
+    const { delegatorPkpEthAddress, abilityIpfsCid } = context; // FIXME: Set from ipfsCidsStack when it's shipped
+    console.log('actionIpfsIds:', LitAuth.actionIpfsIds.join(','));
+    const policyIpfsCid = LitAuth.actionIpfsIds[0];
+    console.log('context:', JSON.stringify(context, utils_1.bigintReplacer));
+    try {
+        const delegationRpcUrl = await Lit.Actions.getRpcUrl({
+            chain: 'yellowstone',
+        });
+        const userPkpInfo = await (0, helpers_1.getPkpInfo)({
+            litPubkeyRouterAddress: constants_1.LIT_DATIL_PUBKEY_ROUTER_ADDRESS,
+            yellowstoneRpcUrl: delegationRpcUrl,
+            pkpEthAddress: delegatorPkpEthAddress,
+        });
+        const appDelegateeAddress = ethers_1.ethers.utils.getAddress(LitAuth.authSigAddress);
+        console.log('appDelegateeAddress', appDelegateeAddress);
+        const { decodedPolicies, appId, appVersion } = await (0, getOnchainPolicyParams_1.getPoliciesAndAppVersion)({
+            delegationRpcUrl,
+            appDelegateeAddress,
+            agentWalletPkpEthAddress: delegatorPkpEthAddress,
+            abilityIpfsCid,
+        });
+        const baseContext = {
+            delegation: {
+                delegateeAddress: appDelegateeAddress,
+                delegatorPkpInfo: userPkpInfo,
+            },
+            abilityIpfsCid: abilityIpfsCid,
+            appId: appId.toNumber(),
+            appVersion: appVersion.toNumber(),
+        };
+        const onChainPolicyParams = await (0, getOnchainPolicyParams_1.getDecodedPolicyParams)({
+            decodedPolicies,
+            policyIpfsCid,
+        });
+        console.log('onChainPolicyParams:', JSON.stringify(onChainPolicyParams, utils_1.bigintReplacer));
+        const evaluateResult = await vincentPolicy.evaluate({
+            abilityParams,
+            userParams: onChainPolicyParams,
+        }, baseContext);
+        console.log('evaluateResult:', JSON.stringify(evaluateResult, utils_1.bigintReplacer));
+        Lit.Actions.setResponse({
+            response: JSON.stringify({
+                ...evaluateResult,
+            }),
+        });
+    }
+    catch (error) {
+        console.log('Policy evaluation failed:', error.message, error.stack);
+        Lit.Actions.setResponse({
+            response: JSON.stringify((0, helpers_2.createDenyResult)({
+                runtimeError: error instanceof Error ? error.message : String(error),
+            })),
+        });
+    }
+}
+//# sourceMappingURL=vincentPolicyHandler.js.map

package/dist/src/lib/handlers/vincentPolicyHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vincentPolicyHandler.js","sourceRoot":"","sources":["../../../../src/lib/handlers/vincentPolicyHandler.ts"],"names":[],"mappings":";AAAA,2CAA2C;;AAkC3C,oDA8FC;AA5HD,mCAAgC;AAIhC,oDAAoD;AACpD,oFAAiF;AACjF,mDAAyD;AACzD,kGAG+D;AAC/D,oCAA0C;AAC1C,2CAA8D;AAiB9D,cAAc;AACP,KAAK,UAAU,oBAAoB,CAMxC,EACA,aAAa,EACb,OAAO,EACP,aAAa,GAgBd;IACC,IAAA,6DAA6B,EAAC,wBAAwB,CAAC,CAAC;IAExD,MAAM,EAAE,sBAAsB,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,CAAC,kDAAkD;IAE9G,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAE/C,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,sBAAc,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,gBAAgB,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;YACnD,KAAK,EAAE,aAAa;SACrB,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,MAAM,IAAA,oBAAU,EAAC;YACnC,sBAAsB,EAAE,2CAA+B;YACvD,iBAAiB,EAAE,gBAAgB;YACnC,aAAa,EAAE,sBAAsB;SACtC,CAAC,CAAC;QACH,MAAM,mBAAmB,GAAG,eAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,CAAC;QAExD,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,IAAA,iDAAwB,EAAC;YAC5E,gBAAgB;YAChB,mBAAmB;YACnB,wBAAwB,EAAE,sBAAsB;YAChD,cAAc;SACf,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE;gBACV,gBAAgB,EAAE,mBAAmB;gBACrC,gBAAgB,EAAE,WAAW;aAC9B;YACD,cAAc,EAAE,cAAc;YAC9B,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;YACvB,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;SAClC,CAAC;QAEF,MAAM,mBAAmB,GAAG,MAAM,IAAA,+CAAsB,EAAC;YACvD,eAAe;YACf,aAAa;SACd,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,sBAAc,CAAC,CAAC,CAAC;QACzF,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,QAAQ,CACjD;YACE,aAAa;YACb,UAAU,EAAE,mBAAmD;SAChE,EACD,WAAW,CACZ,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,sBAAc,CAAC,CAAC,CAAC;QAC/E,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;YACtB,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC;gBACvB,GAAG,cAAc;aAClB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAG,KAAe,CAAC,OAAO,EAAG,KAAe,CAAC,KAAK,CAAC,CAAC;QAC3F,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;YACtB,QAAQ,EAAE,IAAI,CAAC,SAAS,CACtB,IAAA,0BAAgB,EAAC;gBACf,YAAY,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aACrE,CAAC,CACH;SACF,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/src/lib/policyCore/bundledPolicy/bundledPolicy.d.ts

@@ -0,0 +1,5 @@
+import type { VincentPolicy } from '../../types';
+import type { BundledVincentPolicy } from './types';
+/** @hidden */
+export declare function asBundledVincentPolicy<const VP extends VincentPolicy<any, any, any, any, any, any, any, any, any, any, any, any, any>, const IpfsCid extends string>(vincentPolicy: VP, ipfsCid: IpfsCid): BundledVincentPolicy<VP, IpfsCid>;
+//# sourceMappingURL=bundledPolicy.d.ts.map

package/dist/src/lib/policyCore/bundledPolicy/bundledPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundledPolicy.d.ts","sourceRoot":"","sources":["../../../../../src/lib/policyCore/bundledPolicy/bundledPolicy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAIpD,cAAc;AACd,wBAAgB,sBAAsB,CACpC,KAAK,CAAC,EAAE,SAAS,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAC/F,KAAK,CAAC,OAAO,SAAS,MAAM,EAC5B,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,GAAG,oBAAoB,CAAC,EAAE,EAAE,OAAO,CAAC,CAexE"}

package/dist/src/lib/policyCore/bundledPolicy/bundledPolicy.js

@@ -0,0 +1,21 @@
+"use strict";
+// src/lib/policyCore/bundledPolicy/bundledPolicy.ts
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.asBundledVincentPolicy = asBundledVincentPolicy;
+const constants_1 = require("../../constants");
+/** @hidden */
+function asBundledVincentPolicy(vincentPolicy, ipfsCid) {
+    const bundledPolicy = {
+        ipfsCid,
+        vincentPolicy,
+    };
+    // Add non-enumerable 'magic' property
+    Object.defineProperty(bundledPolicy, 'vincentAbilityApiVersion', {
+        value: constants_1.VINCENT_TOOL_API_VERSION,
+        writable: false,
+        enumerable: true,
+        configurable: false,
+    });
+    return bundledPolicy;
+}
+//# sourceMappingURL=bundledPolicy.js.map

package/dist/src/lib/policyCore/bundledPolicy/bundledPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundledPolicy.js","sourceRoot":"","sources":["../../../../../src/lib/policyCore/bundledPolicy/bundledPolicy.ts"],"names":[],"mappings":";AAAA,oDAAoD;;AAQpD,wDAkBC;AArBD,+CAA2D;AAE3D,cAAc;AACd,SAAgB,sBAAsB,CAGpC,aAAiB,EAAE,OAAgB;IACnC,MAAM,aAAa,GAAG;QACpB,OAAO;QACP,aAAa;KACuB,CAAC;IAEvC,sCAAsC;IACtC,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,0BAA0B,EAAE;QAC/D,KAAK,EAAE,oCAAwB;QAC/B,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,KAAK;KACpB,CAAC,CAAC;IAEH,OAAO,aAAmF,CAAC;AAC7F,CAAC"}

package/dist/src/lib/policyCore/bundledPolicy/types.d.ts

@@ -0,0 +1,17 @@
+import type { VincentPolicy } from '../../types';
+/**
+ * A VincentPolicy bundled with an IPFS CID
+ * This ensures only correctly constructed objects are assignable.
+ *
+ * @typeParam VP - The Vincent Policy that was bundled for usage
+ * @typeParam IpfsCid - The IPFS CID that the bundled ability was published to
+ *
+ * @category Interfaces
+ */
+export type BundledVincentPolicy<VP extends VincentPolicy<any, any, any, any, any, any, any, any, any, any, any, any, any>, IpfsCid extends string = string, VincentAbilityApiVersion extends string = string> = {
+    readonly ipfsCid: IpfsCid;
+    readonly vincentPolicy: VP;
+    /** @hidden */
+    readonly vincentAbilityApiVersion: VincentAbilityApiVersion;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/src/lib/policyCore/bundledPolicy/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/lib/policyCore/bundledPolicy/types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAIjD;;;;;;;;GAQG;AACH,MAAM,MAAM,oBAAoB,CAC9B,EAAE,SAAS,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACzF,OAAO,SAAS,MAAM,GAAG,MAAM,EAC/B,wBAAwB,SAAS,MAAM,GAAG,MAAM,IAC9C;IAEF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC;IAC3B,cAAc;IACd,QAAQ,CAAC,wBAAwB,EAAE,wBAAwB,CAAC;CAC7D,CAAC"}

package/dist/src/lib/policyCore/bundledPolicy/types.js

@@ -0,0 +1,4 @@
+"use strict";
+// src/lib/policyCore/bundledPolicy/types.ts
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/src/lib/policyCore/bundledPolicy/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/lib/policyCore/bundledPolicy/types.ts"],"names":[],"mappings":";AAAA,4CAA4C"}

package/dist/src/lib/policyCore/helpers/index.d.ts

@@ -0,0 +1,5 @@
+export { createDenyResult } from './resultCreators';
+export { isPolicyResponse, isPolicyAllowResponse, isPolicyDenyResponse } from './typeGuards';
+export { validateOrDeny, getValidatedParamsOrDeny } from './zod';
+export { getSchemaForPolicyResponseResult } from './zod';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/lib/policyCore/helpers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/policyCore/helpers/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,OAAO,CAAC;AACjE,OAAO,EAAE,gCAAgC,EAAE,MAAM,OAAO,CAAC"}

package/dist/src/lib/policyCore/helpers/index.js

@@ -0,0 +1,16 @@
+"use strict";
+// src/lib/policyCore/helpers/index.ts
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSchemaForPolicyResponseResult = exports.getValidatedParamsOrDeny = exports.validateOrDeny = exports.isPolicyDenyResponse = exports.isPolicyAllowResponse = exports.isPolicyResponse = exports.createDenyResult = void 0;
+var resultCreators_1 = require("./resultCreators");
+Object.defineProperty(exports, "createDenyResult", { enumerable: true, get: function () { return resultCreators_1.createDenyResult; } });
+var typeGuards_1 = require("./typeGuards");
+Object.defineProperty(exports, "isPolicyResponse", { enumerable: true, get: function () { return typeGuards_1.isPolicyResponse; } });
+Object.defineProperty(exports, "isPolicyAllowResponse", { enumerable: true, get: function () { return typeGuards_1.isPolicyAllowResponse; } });
+Object.defineProperty(exports, "isPolicyDenyResponse", { enumerable: true, get: function () { return typeGuards_1.isPolicyDenyResponse; } });
+var zod_1 = require("./zod");
+Object.defineProperty(exports, "validateOrDeny", { enumerable: true, get: function () { return zod_1.validateOrDeny; } });
+Object.defineProperty(exports, "getValidatedParamsOrDeny", { enumerable: true, get: function () { return zod_1.getValidatedParamsOrDeny; } });
+var zod_2 = require("./zod");
+Object.defineProperty(exports, "getSchemaForPolicyResponseResult", { enumerable: true, get: function () { return zod_2.getSchemaForPolicyResponseResult; } });
+//# sourceMappingURL=index.js.map

package/dist/src/lib/policyCore/helpers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/lib/policyCore/helpers/index.ts"],"names":[],"mappings":";AAAA,sCAAsC;;;AAEtC,mDAAoD;AAA3C,kHAAA,gBAAgB,OAAA;AACzB,2CAA6F;AAApF,8GAAA,gBAAgB,OAAA;AAAE,mHAAA,qBAAqB,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AACtE,6BAAiE;AAAxD,qGAAA,cAAc,OAAA;AAAE,+GAAA,wBAAwB,OAAA;AACjD,6BAAyD;AAAhD,uHAAA,gCAAgC,OAAA"}

package/dist/src/lib/policyCore/helpers/resultCreators.d.ts

@@ -0,0 +1,38 @@
+import type { z, ZodType } from 'zod';
+import type { PolicyResponseAllow, PolicyResponseDeny, PolicyResponseDenyNoResult, PolicyEvaluationResultContext, SchemaValidationError } from '../../types';
+/**
+ * Overload: return a fully-typed deny response with a result
+ */
+export declare function createDenyResult<T>(params: {
+    runtimeError?: string;
+    result: T;
+    schemaValidationError?: SchemaValidationError;
+}): PolicyResponseDeny<T>;
+/**
+ * Overload: return a deny response with no result
+ */
+export declare function createDenyResult(params: {
+    runtimeError: string;
+    schemaValidationError?: SchemaValidationError;
+}): PolicyResponseDenyNoResult;
+export declare function createDenyNoResult(runtimeError: string, schemaValidationError?: SchemaValidationError): PolicyResponseDenyNoResult;
+/**
+ * Overload: return a fully-typed allow response with a result
+ */
+export declare function createAllowResult<T>(params: {
+    result: T;
+}): PolicyResponseAllow<T>;
+export declare function createAllowEvaluationResult<PolicyMapByPackageName extends Record<string, any>>(params: {
+    evaluatedPolicies: Array<keyof PolicyMapByPackageName>;
+    allowedPolicies: PolicyEvaluationResultContext<PolicyMapByPackageName>['allowedPolicies'];
+}): PolicyEvaluationResultContext<PolicyMapByPackageName>;
+export declare function createDenyEvaluationResult<PolicyMapByPackageName extends Record<string, any>>(params: {
+    evaluatedPolicies: Array<keyof PolicyMapByPackageName>;
+    allowedPolicies: PolicyEvaluationResultContext<PolicyMapByPackageName>['allowedPolicies'];
+    deniedPolicy: PolicyEvaluationResultContext<PolicyMapByPackageName>['deniedPolicy'];
+}): PolicyEvaluationResultContext<PolicyMapByPackageName>;
+export declare function wrapAllow<T extends ZodType<any, any, any>>(value: z.infer<T>): PolicyResponseAllow<z.infer<T>>;
+export declare function wrapDeny<T extends ZodType<any, any, any>>(runtimeError: string, result: z.infer<T>, schemaValidationError?: SchemaValidationError): PolicyResponseDeny<z.infer<T>>;
+export declare function returnNoResultDeny<T extends ZodType<any, any, any> | undefined>(runtimeError: string, schemaValidationError?: SchemaValidationError): T extends ZodType<any, any, any> ? PolicyResponseDeny<z.infer<T>> : PolicyResponseDenyNoResult;
+export declare function isTypedAllowResponse<T extends ZodType<any, any, any>>(val: unknown): val is PolicyResponseAllow<z.infer<T>>;
+//# sourceMappingURL=resultCreators.d.ts.map

package/dist/src/lib/policyCore/helpers/resultCreators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resultCreators.d.ts","sourceRoot":"","sources":["../../../../../src/lib/policyCore/helpers/resultCreators.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAEtC,OAAO,KAAK,EACV,mBAAmB,EAEnB,kBAAkB,EAClB,0BAA0B,EAC1B,6BAA6B,EAC7B,qBAAqB,EACtB,MAAM,aAAa,CAAC;AAErB;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,CAAC,CAAC;IACV,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;CAC/C,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;AAC1B;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;CAC/C,GAAG,0BAA0B,CAAC;AA8B/B,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,MAAM,EACpB,qBAAqB,CAAC,EAAE,qBAAqB,GAC5C,0BAA0B,CAE5B;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,EAAE;IAAE,MAAM,EAAE,CAAC,CAAA;CAAE,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;AAyBpF,wBAAgB,2BAA2B,CACzC,sBAAsB,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAClD,MAAM,EAAE;IACR,iBAAiB,EAAE,KAAK,CAAC,MAAM,sBAAsB,CAAC,CAAC;IACvD,eAAe,EAAE,6BAA6B,CAAC,sBAAsB,CAAC,CAAC,iBAAiB,CAAC,CAAC;CAC3F,GAAG,6BAA6B,CAAC,sBAAsB,CAAC,CAOxD;AAED,wBAAgB,0BAA0B,CACxC,sBAAsB,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAClD,MAAM,EAAE;IACR,iBAAiB,EAAE,KAAK,CAAC,MAAM,sBAAsB,CAAC,CAAC;IACvD,eAAe,EAAE,6BAA6B,CAAC,sBAAsB,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC1F,YAAY,EAAE,6BAA6B,CAAC,sBAAsB,CAAC,CAAC,cAAc,CAAC,CAAC;CACrF,GAAG,6BAA6B,CAAC,sBAAsB,CAAC,CAOxD;AAGD,wBAAgB,SAAS,CAAC,CAAC,SAAS,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACxD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAChB,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAEjC;AAGD,wBAAgB,QAAQ,CAAC,CAAC,SAAS,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACvD,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAClB,qBAAqB,CAAC,EAAE,qBAAqB,GAC5C,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAEhC;AAGD,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,SAAS,EAC7E,YAAY,EAAE,MAAM,EACpB,qBAAqB,CAAC,EAAE,qBAAqB,GAC5C,CAAC,SAAS,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,0BAA0B,CAEhG;AAGD,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACnE,GAAG,EAAE,OAAO,GACX,GAAG,IAAI,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAExC"}

package/dist/src/lib/policyCore/helpers/resultCreators.js

@@ -0,0 +1,89 @@
+"use strict";
+// src/lib/policyCore/helpers/resultCreators.ts
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createDenyResult = createDenyResult;
+exports.createDenyNoResult = createDenyNoResult;
+exports.createAllowResult = createAllowResult;
+exports.createAllowEvaluationResult = createAllowEvaluationResult;
+exports.createDenyEvaluationResult = createDenyEvaluationResult;
+exports.wrapAllow = wrapAllow;
+exports.wrapDeny = wrapDeny;
+exports.returnNoResultDeny = returnNoResultDeny;
+exports.isTypedAllowResponse = isTypedAllowResponse;
+/**
+ * Implementation
+ */
+function createDenyResult(params) {
+    if (params.result === undefined) {
+        return {
+            allow: false,
+            runtimeError: params.runtimeError,
+            result: undefined,
+            ...(params.schemaValidationError
+                ? { schemaValidationError: params.schemaValidationError }
+                : {}),
+        };
+    }
+    return {
+        allow: false,
+        runtimeError: params.runtimeError,
+        result: params.result,
+        ...(params.schemaValidationError
+            ? { schemaValidationError: params.schemaValidationError }
+            : {}),
+    };
+}
+function createDenyNoResult(runtimeError, schemaValidationError) {
+    return createDenyResult({ runtimeError, schemaValidationError });
+}
+/**
+ * Overload: return an allow response with no result
+ */
+/**
+ * Implementation
+ */
+function createAllowResult(params) {
+    if (params.result === undefined) {
+        return {
+            allow: true,
+            result: undefined,
+        };
+    }
+    return {
+        allow: true,
+        result: params.result,
+    };
+}
+function createAllowEvaluationResult(params) {
+    return {
+        allow: true,
+        evaluatedPolicies: params.evaluatedPolicies,
+        allowedPolicies: params.allowedPolicies,
+        deniedPolicy: undefined, // important for union discrimination
+    };
+}
+function createDenyEvaluationResult(params) {
+    return {
+        allow: false,
+        evaluatedPolicies: params.evaluatedPolicies,
+        allowedPolicies: params.allowedPolicies,
+        deniedPolicy: params.deniedPolicy,
+    };
+}
+// Wraps a validated value as a typed allow result
+function wrapAllow(value) {
+    return createAllowResult({ result: value });
+}
+// Wraps a deny result as fully typed (for schema-defined denials)
+function wrapDeny(runtimeError, result, schemaValidationError) {
+    return createDenyResult({ runtimeError, result, schemaValidationError });
+}
+// Wraps a schema-less denial into a conditionally valid deny return
+function returnNoResultDeny(runtimeError, schemaValidationError) {
+    return createDenyNoResult(runtimeError, schemaValidationError);
+}
+// Optionally: type guard if needed
+function isTypedAllowResponse(val) {
+    return typeof val === 'object' && val !== null && val.allow === true;
+}
+//# sourceMappingURL=resultCreators.js.map

package/dist/src/lib/policyCore/helpers/resultCreators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resultCreators.js","sourceRoot":"","sources":["../../../../../src/lib/policyCore/helpers/resultCreators.ts"],"names":[],"mappings":";AAAA,+CAA+C;;AA+B/C,4CAwBC;AAED,gDAKC;AAcD,8CAcC;AAED,kEAYC;AAED,gEAaC;AAGD,8BAIC;AAGD,4BAMC;AAGD,gDAKC;AAGD,oDAIC;AA1HD;;GAEG;AACH,SAAgB,gBAAgB,CAAI,MAInC;IACC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,SAAkB;YAC1B,GAAG,CAAC,MAAM,CAAC,qBAAqB;gBAC9B,CAAC,CAAC,EAAE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE;gBACzD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,qBAAqB;YAC9B,CAAC,CAAC,EAAE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE;YACzD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB,CAChC,YAAoB,EACpB,qBAA6C;IAE7C,OAAO,gBAAgB,CAAC,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC,CAAC;AACnE,CAAC;AAOD;;GAEG;AAEH;;GAEG;AACH,SAAgB,iBAAiB,CAAI,MAEpC;IACC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,SAAkB;SAC3B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;AACJ,CAAC;AAED,SAAgB,2BAA2B,CAEzC,MAGD;IACC,OAAO;QACL,KAAK,EAAE,IAAI;QACX,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,YAAY,EAAE,SAAS,EAAE,qCAAqC;KACN,CAAC;AAC7D,CAAC;AAED,SAAgB,0BAA0B,CAExC,MAID;IACC,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,YAAY,EAAE,MAAM,CAAC,YAAY;KACuB,CAAC;AAC7D,CAAC;AAED,kDAAkD;AAClD,SAAgB,SAAS,CACvB,KAAiB;IAEjB,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,kEAAkE;AAClE,SAAgB,QAAQ,CACtB,YAAoB,EACpB,MAAkB,EAClB,qBAA6C;IAE7C,OAAO,gBAAgB,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,oEAAoE;AACpE,SAAgB,kBAAkB,CAChC,YAAoB,EACpB,qBAA6C;IAE7C,OAAO,kBAAkB,CAAC,YAAY,EAAE,qBAAqB,CAAQ,CAAC;AACxE,CAAC;AAED,mCAAmC;AACnC,SAAgB,oBAAoB,CAClC,GAAY;IAEZ,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAK,GAAW,CAAC,KAAK,KAAK,IAAI,CAAC;AAChF,CAAC"}

package/dist/src/lib/policyCore/helpers/typeGuards.d.ts

@@ -0,0 +1,7 @@
+import type { z } from 'zod';
+import type { PolicyResponse, PolicyResponseAllow, PolicyResponseDeny, SchemaValidationError } from '../../types';
+export declare function isZodValidationDenyResult(result: unknown): result is SchemaValidationError;
+export declare function isPolicyDenyResponse<T>(val: unknown): val is PolicyResponseDeny<T>;
+export declare function isPolicyAllowResponse<T>(val: unknown): val is PolicyResponseAllow<T>;
+export declare function isPolicyResponse<AllowResult extends z.ZodType, DenyResult extends z.ZodType>(value: unknown): value is PolicyResponse<AllowResult, DenyResult>;
+//# sourceMappingURL=typeGuards.d.ts.map

package/dist/src/lib/policyCore/helpers/typeGuards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typeGuards.d.ts","sourceRoot":"","sources":["../../../../../src/lib/policyCore/helpers/typeGuards.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,OAAO,KAAK,EACV,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACtB,MAAM,aAAa,CAAC;AAErB,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,IAAI,qBAAqB,CAE1F;AAED,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,kBAAkB,CAAC,CAAC,CAAC,CAElF;AAED,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,mBAAmB,CAAC,CAAC,CAAC,CAEpF;AAED,wBAAgB,gBAAgB,CAAC,WAAW,SAAS,CAAC,CAAC,OAAO,EAAE,UAAU,SAAS,CAAC,CAAC,OAAO,EAC1F,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,cAAc,CAAC,WAAW,EAAE,UAAU,CAAC,CAOlD"}

package/dist/src/lib/policyCore/helpers/typeGuards.js

@@ -0,0 +1,23 @@
+"use strict";
+// src/lib/policyCore/helpers/typeGuards.ts
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isZodValidationDenyResult = isZodValidationDenyResult;
+exports.isPolicyDenyResponse = isPolicyDenyResponse;
+exports.isPolicyAllowResponse = isPolicyAllowResponse;
+exports.isPolicyResponse = isPolicyResponse;
+function isZodValidationDenyResult(result) {
+    return typeof result === 'object' && result !== null && 'zodError' in result;
+}
+function isPolicyDenyResponse(val) {
+    return typeof val === 'object' && val !== null && val.allow === false;
+}
+function isPolicyAllowResponse(val) {
+    return typeof val === 'object' && val !== null && val.allow === true;
+}
+function isPolicyResponse(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        'allow' in value &&
+        typeof value.allow === 'boolean');
+}
+//# sourceMappingURL=typeGuards.js.map

package/dist/src/lib/policyCore/helpers/typeGuards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typeGuards.js","sourceRoot":"","sources":["../../../../../src/lib/policyCore/helpers/typeGuards.ts"],"names":[],"mappings":";AAAA,2CAA2C;;AAY3C,8DAEC;AAED,oDAEC;AAED,sDAEC;AAED,4CASC;AArBD,SAAgB,yBAAyB,CAAC,MAAe;IACvD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,UAAU,IAAI,MAAM,CAAC;AAC/E,CAAC;AAED,SAAgB,oBAAoB,CAAI,GAAY;IAClD,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAK,GAAW,CAAC,KAAK,KAAK,KAAK,CAAC;AACjF,CAAC;AAED,SAAgB,qBAAqB,CAAI,GAAY;IACnD,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAK,GAAW,CAAC,KAAK,KAAK,IAAI,CAAC;AAChF,CAAC;AAED,SAAgB,gBAAgB,CAC9B,KAAc;IAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAO,IAAI,KAAK;QAChB,OAAQ,KAAa,CAAC,KAAK,KAAK,SAAS,CAC1C,CAAC;AACJ,CAAC"}

package/dist/src/lib/policyCore/helpers/zod.d.ts

@@ -0,0 +1,55 @@
+import type { ZodType } from 'zod';
+import { z } from 'zod';
+import type { PolicyResponseDeny } from '../../types';
+/**
+ * Matches the minimum structure of a PolicyResponse.
+ * This is useful when validating that a response shape is at least plausible.
+ */
+export declare const PolicyResponseShape: z.ZodObject<{
+    allow: z.ZodBoolean;
+    result: z.ZodUnknown;
+}, "strip", z.ZodTypeAny, {
+    allow: boolean;
+    result?: unknown;
+}, {
+    allow: boolean;
+    result?: unknown;
+}>;
+/**
+ * Validates a value using a Zod schema (or requires undefined if none given).
+ * Returns parsed result or a standardized deny object.
+ *
+ * @param value - The raw value to validate
+ * @param schema - A Zod schema to apply, or undefined (meaning: must be undefined)
+ * @param phase - One of 'evaluate' | 'precheck' | 'commit'
+ * @param stage - 'parameters' (before calling the lifecycle phase) or 'result' (after receiving the result)
+ *
+ * @returns The parsed result, or a PolicyResponseDeny with a ZodValidationDenyResult
+ */
+export declare function validateOrDeny<T extends ZodType<any, any, any>>(value: unknown, schema: T, phase: 'evaluate' | 'precheck' | 'commit', stage: 'input' | 'output'): z.infer<T> | PolicyResponseDeny<never>;
+export declare function getValidatedParamsOrDeny<TAbilityParams extends z.ZodType<any, any, any>, TUserParams extends z.ZodType<any, any, any>>({ rawAbilityParams, rawUserParams, abilityParamsSchema, userParamsSchema, phase, }: {
+    rawAbilityParams: unknown;
+    rawUserParams: unknown;
+    abilityParamsSchema: TAbilityParams;
+    userParamsSchema: TUserParams;
+    phase: 'evaluate' | 'precheck';
+}): PolicyResponseDeny<never> | {
+    abilityParams: z.infer<TAbilityParams>;
+    userParams: z.infer<TUserParams>;
+};
+/**
+ * Given an unknown policy response result and the known allow/deny schemas,
+ * this function returns the appropriate Zod schema to use when validating `.result`.
+ *
+ * - If the response shape is invalid, returns a Zod schema matching the PolicyResponse structure.
+ * - If the shape is valid, returns either the allow or deny result schema.
+ */
+export declare function getSchemaForPolicyResponseResult({ value, allowResultSchema, denyResultSchema, }: {
+    value: unknown;
+    allowResultSchema: z.ZodType<any, any, any>;
+    denyResultSchema: z.ZodType<any, any, any>;
+}): {
+    schemaToUse: z.ZodType<any, any, any>;
+    parsedType: 'allow' | 'deny' | 'unknown';
+};
+//# sourceMappingURL=zod.d.ts.map

package/dist/src/lib/policyCore/helpers/zod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod.d.ts","sourceRoot":"","sources":["../../../../../src/lib/policyCore/helpers/zod.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;AAEnC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAMtD;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;EAG9B,CAAC;AAEH;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAC7D,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,CAAC,EACT,KAAK,EAAE,UAAU,GAAG,UAAU,GAAG,QAAQ,EACzC,KAAK,EAAE,OAAO,GAAG,QAAQ,GACxB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAiBxC;AAED,wBAAgB,wBAAwB,CACtC,cAAc,SAAS,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAC/C,WAAW,SAAS,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAC5C,EACA,gBAAgB,EAChB,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,GACN,EAAE;IACD,gBAAgB,EAAE,OAAO,CAAC;IAC1B,aAAa,EAAE,OAAO,CAAC;IACvB,mBAAmB,EAAE,cAAc,CAAC;IACpC,gBAAgB,EAAE,WAAW,CAAC;IAC9B,KAAK,EAAE,UAAU,GAAG,UAAU,CAAC;CAChC,GACG,kBAAkB,CAAC,KAAK,CAAC,GACzB;IACE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACvC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;CAClC,CAeJ;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAAC,EAC/C,KAAK,EACL,iBAAiB,EACjB,gBAAgB,GACjB,EAAE;IACD,KAAK,EAAE,OAAO,CAAC;IACf,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;CAC5C,GAAG;IACF,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACtC,UAAU,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;CAC1C,CAkBA"}