@mathrunet/masamune_cloudflare 3.1.6 → 3.1.8

package/dist/lib/src/rules/rules_engine.js

@@ -0,0 +1,523 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RulesEngine = void 0;
+exports.buildRulesPath = buildRulesPath;
+exports.buildDatabaseRulesPath = buildDatabaseRulesPath;
+exports.normalizeHttpMethodToRulesOperation = normalizeHttpMethodToRulesOperation;
+exports.normalizeRulesOperation = normalizeRulesOperation;
+exports.expandRulesOperation = expandRulesOperation;
+exports.filterAllowedScope = filterAllowedScope;
+exports.resolveDatabaseTokenAccess = resolveDatabaseTokenAccess;
+exports.resolveDatabaseTokenAuthorization = resolveDatabaseTokenAuthorization;
+exports.resolveRulesOperation = resolveRulesOperation;
+const rules_loader_1 = require("./rules_loader");
+const path_matcher_1 = require("./path_matcher");
+/**
+ * Rules engine.
+ *
+ * rules評価エンジン。
+ */
+class RulesEngine {
+    constructor(config) {
+        this.config = (0, rules_loader_1.loadRulesConfig)(config);
+    }
+    config;
+    /**
+     * Evaluate rules for the given path and operation.
+     *
+     * 指定したパスと操作に対してrulesを評価します。
+     */
+    async evaluate(input) {
+        const operation = normalizeRulesOperation(input.operation);
+        const matches = Object.keys(this.config.rules)
+            .map((rulePath) => (0, path_matcher_1.matchRulePath)(rulePath, input.path))
+            .filter((match) => match.matched);
+        if (matches.length === 0) {
+            return { allowed: false };
+        }
+        const sortedMatches = (0, path_matcher_1.sortRulePathMatches)(matches);
+        const resolved = resolveInheritedRule(sortedMatches.map((match) => {
+            return {
+                rulePath: match.rulePath,
+                entry: this.config.rules[match.rulePath],
+                params: match.params,
+            };
+        }));
+        const resolvedAccess = resolveAccessRule(resolved.entry, resolved.params, operation);
+        if (!resolvedAccess) {
+            return {
+                allowed: false,
+                rulePath: resolved.rulePath,
+            };
+        }
+        return {
+            allowed: await evaluateAccessRule(resolvedAccess.access, input.authentication, input.fetchDocument, resolvedAccess.params, input.server === true),
+            rulePath: resolved.rulePath,
+            access: resolvedAccess.access,
+            params: resolvedAccess.params,
+        };
+    }
+    /**
+     * Returns true when a table scoped rule requires server evaluation.
+     *
+     * テーブル配下ルールにサーバー評価が必要な制約がある場合はtrueを返します。
+     */
+    hasScopedRestriction({ database, table, operation, }) {
+        const normalized = normalizeRulesOperation(operation);
+        for (const [rulePath, entry] of Object.entries(this.config.rules)) {
+            if (!isRulePathInTableScope(rulePath, database, table)) {
+                continue;
+            }
+            const access = resolveAccessRule(entry, {}, normalized)?.access;
+            if (!access || isDirectSafeScopeAccess(access)) {
+                continue;
+            }
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Returns true when a table scoped rule explicitly denies access.
+     *
+     * テーブル配下ルールに明示的なdenyがある場合はtrueを返します。
+     */
+    hasScopedDeny({ database, table, operation, }) {
+        const normalized = normalizeRulesOperation(operation);
+        for (const [rulePath, entry] of Object.entries(this.config.rules)) {
+            if (!isRulePathInTableScope(rulePath, database, table)) {
+                continue;
+            }
+            const access = resolveAccessRule(entry, {}, normalized)?.access;
+            if (access === "deny") {
+                return true;
+            }
+        }
+        return false;
+    }
+}
+exports.RulesEngine = RulesEngine;
+/**
+ * Build a normalized rules path.
+ *
+ * 正規化されたrulesパスを生成します。
+ */
+function buildRulesPath({ database, table, indexKey }) {
+    return [
+        "database",
+        encodeRulesPathSegment(database),
+        "table",
+        encodeRulesPathSegment(table),
+        encodeRulesPathSegment(indexKey),
+    ].join("/");
+}
+/**
+ * Build a normalized database rules path.
+ *
+ * 正規化されたデータベースrulesパスを生成します。
+ */
+function buildDatabaseRulesPath({ database }) {
+    return [
+        "database",
+        encodeRulesPathSegment(database),
+    ].join("/");
+}
+/**
+ * Normalize HTTP method to rules operation.
+ *
+ * HTTPメソッドをrules操作に正規化します。
+ */
+function normalizeHttpMethodToRulesOperation(method) {
+    switch (method.toUpperCase()) {
+        case "GET":
+            return "get";
+        case "POST":
+            return "create";
+        case "PUT":
+            return "update";
+        case "DELETE":
+            return "delete";
+        default:
+            throw new Error(`Unsupported HTTP method for rules: ${method}`);
+    }
+}
+/**
+ * Normalize rules operation aliases.
+ *
+ * rules操作エイリアスを正規化します。
+ */
+function normalizeRulesOperation(operation) {
+    switch (operation) {
+        case "read":
+            return "get";
+        case "write":
+            return "create";
+        case "get":
+        case "create":
+        case "update":
+        case "delete":
+            return operation;
+    }
+}
+/**
+ * Expand operation aliases to concrete operations.
+ *
+ * 操作エイリアスを具体的な操作へ展開します。
+ */
+function expandRulesOperation(operation) {
+    switch (operation) {
+        case "read":
+            return ["get"];
+        case "write":
+            return ["create", "update", "delete"];
+        case "get":
+        case "create":
+        case "update":
+        case "delete":
+            return [operation];
+    }
+}
+/**
+ * Filter token targets by rules.
+ *
+ * rulesによりトークン対象をフィルタします。
+ */
+async function filterAllowedScope({ engine, database, scope, authentication, }) {
+    const allowed = [];
+    for (const item of scope) {
+        const operations = [];
+        for (const operationKey of item.operations) {
+            const expanded = expandRulesOperation(operationKey);
+            const results = await Promise.all(expanded.map((operation) => {
+                return engine.evaluate({
+                    path: buildRulesPath({
+                        database,
+                        table: item.table,
+                        indexKey: "*",
+                    }),
+                    operation,
+                    authentication,
+                });
+            }));
+            if (results.every((result) => result.allowed)) {
+                operations.push(operationKey);
+            }
+        }
+        if (operations.length > 0) {
+            allowed.push({
+                table: item.table,
+                operations,
+            });
+        }
+    }
+    return allowed;
+}
+/**
+ * Resolve database token access from rules.
+ *
+ * rulesからデータベーストークンアクセスを解決します。
+ */
+async function resolveDatabaseTokenAccess({ engine, database, operations, scope = [], authentication, }) {
+    const path = buildDatabaseRulesPath({ database });
+    const directRead = await engine.evaluate({
+        path,
+        operation: "read",
+        authentication,
+        server: false,
+    });
+    const serverRead = directRead.allowed
+        ? directRead
+        : await engine.evaluate({
+            path,
+            operation: "read",
+            authentication,
+            server: true,
+        });
+    if (!serverRead.allowed) {
+        return undefined;
+    }
+    const directDatabaseWrite = await evaluateDatabaseWrite({
+        engine,
+        path,
+        authentication,
+        server: false,
+    });
+    const serverDatabaseWrite = directDatabaseWrite
+        ? true
+        : await evaluateDatabaseWrite({
+            engine,
+            path,
+            authentication,
+            server: true,
+        });
+    const scopes = await resolveScopeModes({
+        engine,
+        database,
+        scope,
+        authentication,
+    });
+    const readScopes = scopes.filter((item) => requiresRead(item.operations));
+    const writeScopes = scopes.filter((item) => requiresWrite(item.operations));
+    const requestedOperations = operations ?? [];
+    const requestsDatabaseRead = requiresRead(requestedOperations);
+    const requestsDatabaseWrite = requiresWrite(requestedOperations);
+    const hasTargets = scope.length > 0;
+    const readMode = resolveOverallMode(readScopes.map((item) => item.readMode ?? "none"), !hasTargets && (requestedOperations.length === 0 || requestsDatabaseRead)
+        ? directRead.allowed ? "direct" : "functions"
+        : "none");
+    let writeMode = resolveOverallMode(writeScopes.map((item) => item.writeMode ?? "none"), !hasTargets && (requestedOperations.length === 0 || requestsDatabaseWrite)
+        ? directDatabaseWrite ? "direct" : serverDatabaseWrite ? "functions" : "none"
+        : "none");
+    if (readMode === "functions" && writeMode === "direct") {
+        writeMode = serverDatabaseWrite ? "functions" : "none";
+    }
+    const authorization = resolveTokenAuthorization(readMode, writeMode);
+    return {
+        authorization,
+        readMode,
+        writeMode,
+        scopes,
+    };
+}
+/**
+ * Resolve database token authorization from rules.
+ *
+ * rulesからデータベーストークン権限を解決します。
+ */
+async function resolveDatabaseTokenAuthorization({ engine, database, authentication, }) {
+    const access = await resolveDatabaseTokenAccess({
+        engine,
+        database,
+        authentication,
+    });
+    return access?.authorization;
+}
+/**
+ * Resolve operation lookup order.
+ *
+ * 操作の解決順を取得します。
+ */
+function resolveRulesOperation(operation) {
+    const normalized = normalizeRulesOperation(operation);
+    switch (normalized) {
+        case "get":
+            return ["get", "read"];
+        case "create":
+            return ["create", "write"];
+        case "update":
+            return ["update", "write"];
+        case "delete":
+            return ["delete", "write"];
+    }
+}
+function resolveInheritedRule(matches) {
+    const inherited = {};
+    const inheritedParams = {};
+    let rulePath = matches[0]?.rulePath ?? "";
+    for (const match of [...matches].reverse()) {
+        if (!match.entry) {
+            continue;
+        }
+        rulePath = match.rulePath;
+        for (const [operation, access] of Object.entries(match.entry)) {
+            inherited[operation] = access;
+            inheritedParams[operation] = match.params;
+        }
+    }
+    return {
+        rulePath,
+        entry: inherited,
+        params: inheritedParams,
+    };
+}
+function resolveAccessRule(entry, params, operation) {
+    for (const operationKey of resolveRulesOperation(operation)) {
+        const access = entry[operationKey];
+        if (access) {
+            return {
+                access,
+                params: params[operationKey] ?? {},
+            };
+        }
+    }
+    return undefined;
+}
+async function evaluateAccessRule(access, authentication, fetchDocument, params = {}, server = false) {
+    switch (access) {
+        case "deny":
+            return false;
+        case "allow":
+            return true;
+        case "authenticated":
+            return !!authentication?.uid;
+        case "server":
+            return server;
+        default:
+            break;
+    }
+    if ("server" in access && access.server === true && !server) {
+        return false;
+    }
+    switch (access.type) {
+        case "field":
+        case "fieldMatch": {
+            const uid = authentication?.uid;
+            if (!uid || !fetchDocument) {
+                return false;
+            }
+            const document = await fetchDocument();
+            return document?.[access.field] === uid;
+        }
+        case "path": {
+            const uid = authentication?.uid;
+            return !!uid && params[access.param] === uid;
+        }
+    }
+}
+async function resolveScopeModes({ engine, database, scope, authentication, }) {
+    const resolved = [];
+    for (const item of scope) {
+        const readMode = requiresRead(item.operations)
+            ? await resolveScopedOperationMode({
+                engine,
+                database,
+                table: item.table,
+                operation: "read",
+                authentication,
+            })
+            : undefined;
+        const writeMode = requiresWrite(item.operations)
+            ? await resolveScopedOperationMode({
+                engine,
+                database,
+                table: item.table,
+                operation: "write",
+                authentication,
+            })
+            : undefined;
+        resolved.push({
+            table: item.table,
+            operations: item.operations,
+            ...(readMode ? { readMode } : {}),
+            ...(writeMode ? { writeMode } : {}),
+        });
+    }
+    return resolved;
+}
+async function resolveScopedOperationMode({ engine, database, table, operation, authentication, }) {
+    const path = buildRulesPath({
+        database,
+        table,
+        indexKey: "*",
+    });
+    const expanded = expandRulesOperation(operation);
+    const direct = await Promise.all(expanded.map((item) => engine.evaluate({
+        path,
+        operation: item,
+        authentication,
+        server: false,
+    })));
+    const directAllowed = direct.every((result) => result.allowed);
+    const restricted = expanded.some((item) => engine.hasScopedRestriction({
+        database,
+        table,
+        operation: item,
+    }));
+    if (directAllowed && !restricted) {
+        return "direct";
+    }
+    const denied = expanded.some((item) => engine.hasScopedDeny({
+        database,
+        table,
+        operation: item,
+    }));
+    if (restricted && !denied) {
+        return "functions";
+    }
+    const server = await Promise.all(expanded.map((item) => engine.evaluate({
+        path,
+        operation: item,
+        authentication,
+        server: true,
+    })));
+    return server.every((result) => result.allowed) ? "functions" : "none";
+}
+function resolveOverallMode(scopedModes, fallback) {
+    if (scopedModes.length === 0) {
+        return fallback;
+    }
+    if (scopedModes.every((mode) => mode === "direct")) {
+        return "direct";
+    }
+    if (scopedModes.some((mode) => mode === "none")) {
+        return "none";
+    }
+    return "functions";
+}
+function resolveTokenAuthorization(readMode, writeMode) {
+    if (writeMode === "direct") {
+        return "full-access";
+    }
+    if (readMode === "direct") {
+        return "read-only";
+    }
+    return undefined;
+}
+function requiresRead(operations) {
+    return operations.some((operation) => expandRulesOperation(operation).includes("get"));
+}
+function requiresWrite(operations) {
+    return operations.some((operation) => {
+        const expanded = expandRulesOperation(operation);
+        return expanded.includes("create") || expanded.includes("update") || expanded.includes("delete");
+    });
+}
+async function evaluateDatabaseWrite({ engine, path, authentication, server, }) {
+    const results = await Promise.all(expandRulesOperation("write").map((operation) => {
+        return engine.evaluate({
+            path,
+            operation,
+            authentication,
+            server,
+        });
+    }));
+    return results.every((result) => result.allowed);
+}
+function isRulePathInTableScope(rulePath, database, table) {
+    const segments = splitRulesPath(rulePath);
+    if (segments.length <= 4) {
+        return false;
+    }
+    return segmentMatches(segments[0], "database") &&
+        segmentMatches(segments[1], database) &&
+        segmentMatches(segments[2], "table") &&
+        segmentMatches(segments[3], table);
+}
+function segmentMatches(ruleSegment, value) {
+    if (!ruleSegment) {
+        return false;
+    }
+    if (ruleSegment === "**") {
+        return true;
+    }
+    return ruleSegment === "*" || !!parseNamedPathParam(ruleSegment) || ruleSegment === value;
+}
+function isDirectSafeScopeAccess(access) {
+    return access === "allow";
+}
+function splitRulesPath(path) {
+    if (path.length === 0 || path.startsWith("/") || path.endsWith("/")) {
+        return [];
+    }
+    return path.split("/");
+}
+function parseNamedPathParam(segment) {
+    const match = /^\{([A-Za-z_][A-Za-z0-9_]*)\}$/.exec(segment);
+    return match?.[1];
+}
+function encodeRulesPathSegment(segment) {
+    if (segment.length === 0 || segment.includes("/")) {
+        throw new Error(`Invalid rules path segment: ${segment}`);
+    }
+    return segment;
+}
+//# sourceMappingURL=rules_engine.js.map

package/dist/lib/src/rules/rules_engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules_engine.js","sourceRoot":"","sources":["../../../../src/lib/src/rules/rules_engine.ts"],"names":[],"mappings":";;;AAiNA,wCAQC;AAOD,wDAKC;AAOD,kFAaC;AAOD,0DAYC;AAOD,oDAYC;AAOD,gDAuCC;AAOD,gEA+EC;AAOD,8EAeC;AAOD,sDAYC;AA3cD,iDAOwB;AACxB,iDAAoE;AAoFpE;;;;GAIG;AACH,MAAa,WAAW;IACpB,YAAY,MAA6B;QACrC,IAAI,CAAC,MAAM,GAAG,IAAA,8BAAe,EAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAEgB,MAAM,CAAc;IAErC;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,KAA2B;QACtC,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;aACzC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAA,4BAAa,EAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;aACtD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,aAAa,GAAG,IAAA,kCAAmB,EAAC,OAAO,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAC9D,OAAO;gBACH,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACxC,MAAM,EAAE,KAAK,CAAC,MAAM;aACvB,CAAC;QACN,CAAC,CAAC,CAAC,CAAC;QACJ,MAAM,cAAc,GAAG,iBAAiB,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACrF,IAAI,CAAC,cAAc,EAAE,CAAC;YAClB,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC9B,CAAC;QACN,CAAC;QACD,OAAO;YACH,OAAO,EAAE,MAAM,kBAAkB,CAC7B,cAAc,CAAC,MAAM,EACrB,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,aAAa,EACnB,cAAc,CAAC,MAAM,EACrB,KAAK,CAAC,MAAM,KAAK,IAAI,CACxB;YACD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,MAAM,EAAE,cAAc,CAAC,MAAM;SAChC,CAAC;IACN,CAAC;IAED;;;;OAIG;IACH,oBAAoB,CAAC,EACjB,QAAQ,EACR,KAAK,EACL,SAAS,GAKZ;QACG,MAAM,UAAU,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;gBACrD,SAAS;YACb,CAAC;YACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC;YAChE,IAAI,CAAC,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7C,SAAS;YACb,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,EACV,QAAQ,EACR,KAAK,EACL,SAAS,GAKZ;QACG,MAAM,UAAU,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;gBACrD,SAAS;YACb,CAAC;YACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC;YAChE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC;YAChB,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ;AAxGD,kCAwGC;AAED;;;;GAIG;AACH,SAAgB,cAAc,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAsB;IAC5E,OAAO;QACH,UAAU;QACV,sBAAsB,CAAC,QAAQ,CAAC;QAChC,OAAO;QACP,sBAAsB,CAAC,KAAK,CAAC;QAC7B,sBAAsB,CAAC,QAAQ,CAAC;KACnC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,EAAE,QAAQ,EAAwB;IACrE,OAAO;QACH,UAAU;QACV,sBAAsB,CAAC,QAAQ,CAAC;KACnC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAgB,mCAAmC,CAAC,MAAc;IAC9D,QAAQ,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3B,KAAK,KAAK;YACN,OAAO,KAAK,CAAC;QACjB,KAAK,MAAM;YACP,OAAO,QAAQ,CAAC;QACpB,KAAK,KAAK;YACN,OAAO,QAAQ,CAAC;QACpB,KAAK,QAAQ;YACT,OAAO,QAAQ,CAAC;QACpB;YACI,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAgB,uBAAuB,CAAC,SAA6C;IACjF,QAAQ,SAAS,EAAE,CAAC;QAChB,KAAK,MAAM;YACP,OAAO,KAAK,CAAC;QACjB,KAAK,OAAO;YACR,OAAO,QAAQ,CAAC;QACpB,KAAK,KAAK,CAAC;QACX,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACT,OAAO,SAAS,CAAC;IACzB,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,SAA4B;IAC7D,QAAQ,SAAS,EAAE,CAAC;QAChB,KAAK,MAAM;YACP,OAAO,CAAC,KAAK,CAAC,CAAC;QACnB,KAAK,OAAO;YACR,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC1C,KAAK,KAAK,CAAC;QACX,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACT,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;AACL,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,kBAAkB,CAAC,EACrC,MAAM,EACN,QAAQ,EACR,KAAK,EACL,cAAc,GAMjB;IACG,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,UAAU,GAAwB,EAAE,CAAC;QAC3C,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;gBACzD,OAAO,MAAM,CAAC,QAAQ,CAAC;oBACnB,IAAI,EAAE,cAAc,CAAC;wBACjB,QAAQ;wBACR,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,QAAQ,EAAE,GAAG;qBAChB,CAAC;oBACF,SAAS;oBACT,cAAc;iBACjB,CAAC,CAAC;YACP,CAAC,CAAC,CAAC,CAAC;YACJ,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5C,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAClC,CAAC;QACL,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC;gBACT,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU;aACb,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,0BAA0B,CAAC,EAC7C,MAAM,EACN,QAAQ,EACR,UAAU,EACV,KAAK,GAAG,EAAE,EACV,cAAc,GAOjB;IACG,MAAM,IAAI,GAAG,sBAAsB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;QACrC,IAAI;QACJ,SAAS,EAAE,MAAM;QACjB,cAAc;QACd,MAAM,EAAE,KAAK;KAChB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO;QACjC,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC;YACpB,IAAI;YACJ,SAAS,EAAE,MAAM;YACjB,cAAc;YACd,MAAM,EAAE,IAAI;SACf,CAAC,CAAC;IACP,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,mBAAmB,GAAG,MAAM,qBAAqB,CAAC;QACpD,MAAM;QACN,IAAI;QACJ,cAAc;QACd,MAAM,EAAE,KAAK;KAChB,CAAC,CAAC;IACH,MAAM,mBAAmB,GAAG,mBAAmB;QAC3C,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,MAAM,qBAAqB,CAAC;YAC1B,MAAM;YACN,IAAI;YACJ,cAAc;YACd,MAAM,EAAE,IAAI;SACf,CAAC,CAAC;IACP,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACnC,MAAM;QACN,QAAQ;QACR,KAAK;QACL,cAAc;KACjB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1E,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5E,MAAM,mBAAmB,GAAG,UAAU,IAAI,EAAE,CAAC;IAC7C,MAAM,oBAAoB,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;IAC/D,MAAM,qBAAqB,GAAG,aAAa,CAAC,mBAAmB,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,kBAAkB,CAC/B,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,EACjD,CAAC,UAAU,IAAI,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,IAAI,oBAAoB,CAAC;QACrE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW;QAC7C,CAAC,CAAC,MAAM,CACf,CAAC;IACF,IAAI,SAAS,GAAG,kBAAkB,CAC9B,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,EACnD,CAAC,UAAU,IAAI,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,IAAI,qBAAqB,CAAC;QACtE,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;QAC7E,CAAC,CAAC,MAAM,CACf,CAAC;IACF,IAAI,QAAQ,KAAK,WAAW,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QACrD,SAAS,GAAG,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3D,CAAC;IACD,MAAM,aAAa,GAAG,yBAAyB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACrE,OAAO;QACH,aAAa;QACb,QAAQ;QACR,SAAS;QACT,MAAM;KACT,CAAC;AACN,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,iCAAiC,CAAC,EACpD,MAAM,EACN,QAAQ,EACR,cAAc,GAKjB;IACG,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;QAC5C,MAAM;QACN,QAAQ;QACR,cAAc;KACjB,CAAC,CAAC;IACH,OAAO,MAAM,EAAE,aAAa,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,SAA6C;IAC/E,MAAM,UAAU,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACtD,QAAQ,UAAU,EAAE,CAAC;QACjB,KAAK,KAAK;YACN,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3B,KAAK,QAAQ;YACT,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/B,KAAK,QAAQ;YACT,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/B,KAAK,QAAQ;YACT,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CACzB,OAIG;IAMH,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,MAAM,eAAe,GAA+D,EAAE,CAAC;IACvF,IAAI,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACf,SAAS;QACb,CAAC;QACD,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC1B,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5D,SAAS,CAAC,SAA8B,CAAC,GAAG,MAAM,CAAC;YACnD,eAAe,CAAC,SAA8B,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;QACnE,CAAC;IACL,CAAC;IACD,OAAO;QACH,QAAQ;QACR,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,eAAe;KAC1B,CAAC;AACN,CAAC;AAED,SAAS,iBAAiB,CACtB,KAAiB,EACjB,MAAkE,EAClE,SAAyB;IAKzB,KAAK,MAAM,YAAY,IAAI,qBAAqB,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;QACnC,IAAI,MAAM,EAAE,CAAC;YACT,OAAO;gBACH,MAAM;gBACN,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE;aACrC,CAAC;QACN,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC7B,MAAuB,EACvB,cAA+C,EAC/C,aAAuF,EACvF,SAAiC,EAAE,EACnC,MAAM,GAAG,KAAK;IAEd,QAAQ,MAAM,EAAE,CAAC;QACb,KAAK,MAAM;YACP,OAAO,KAAK,CAAC;QACjB,KAAK,OAAO;YACR,OAAO,IAAI,CAAC;QAChB,KAAK,eAAe;YAChB,OAAO,CAAC,CAAC,cAAc,EAAE,GAAG,CAAC;QACjC,KAAK,QAAQ;YACT,OAAO,MAAM,CAAC;QAClB;YACI,MAAM;IACd,CAAC;IACD,IAAI,QAAQ,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,OAAO,CAAC;QACb,KAAK,YAAY,CAAC,CAAC,CAAC;YAChB,MAAM,GAAG,GAAG,cAAc,EAAE,GAAG,CAAC;YAChC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC;YACjB,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,aAAa,EAAE,CAAC;YACvC,OAAO,QAAQ,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC;QAC5C,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACV,MAAM,GAAG,GAAG,cAAc,EAAE,GAAG,CAAC;YAChC,OAAO,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC;QACjD,CAAC;IACL,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,EAC7B,MAAM,EACN,QAAQ,EACR,KAAK,EACL,cAAc,GAMjB;IACG,MAAM,QAAQ,GAA6B,EAAE,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;YAC1C,CAAC,CAAC,MAAM,0BAA0B,CAAC;gBAC/B,MAAM;gBACN,QAAQ;gBACR,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,MAAM;gBACjB,cAAc;aACjB,CAAC;YACF,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;YAC5C,CAAC,CAAC,MAAM,0BAA0B,CAAC;gBAC/B,MAAM;gBACN,QAAQ;gBACR,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,SAAS,EAAE,OAAO;gBAClB,cAAc;aACjB,CAAC;YACF,CAAC,CAAC,SAAS,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAC;IACP,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,EACtC,MAAM,EACN,QAAQ,EACR,KAAK,EACL,SAAS,EACT,cAAc,GAOjB;IACG,MAAM,IAAI,GAAG,cAAc,CAAC;QACxB,QAAQ;QACR,KAAK;QACL,QAAQ,EAAE,GAAG;KAChB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;QACpE,IAAI;QACJ,SAAS,EAAE,IAAI;QACf,cAAc;QACd,MAAM,EAAE,KAAK;KAChB,CAAC,CAAC,CAAC,CAAC;IACL,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC;QACnE,QAAQ;QACR,KAAK;QACL,SAAS,EAAE,IAAI;KAClB,CAAC,CAAC,CAAC;IACJ,IAAI,aAAa,IAAI,CAAC,UAAU,EAAE,CAAC;QAC/B,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC;QACxD,QAAQ;QACR,KAAK;QACL,SAAS,EAAE,IAAI;KAClB,CAAC,CAAC,CAAC;IACJ,IAAI,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC;QACxB,OAAO,WAAW,CAAC;IACvB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;QACpE,IAAI;QACJ,SAAS,EAAE,IAAI;QACf,cAAc;QACd,MAAM,EAAE,IAAI;KACf,CAAC,CAAC,CAAC,CAAC;IACL,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3E,CAAC;AAED,SAAS,kBAAkB,CACvB,WAA8B,EAC9B,QAAyB;IAEzB,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QACjD,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC;IAClB,CAAC;IACD,OAAO,WAAW,CAAC;AACvB,CAAC;AAED,SAAS,yBAAyB,CAC9B,QAAyB,EACzB,SAA0B;IAE1B,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,aAAa,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,WAAW,CAAC;IACvB,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,SAAS,YAAY,CAAC,UAA+B;IACjD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,aAAa,CAAC,UAA+B;IAClD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QACjC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACjD,OAAO,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,EACjC,MAAM,EACN,IAAI,EACJ,cAAc,EACd,MAAM,GAMT;IACG,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,oBAAoB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC;YACnB,IAAI;YACJ,SAAS;YACT,cAAc;YACd,MAAM;SACT,CAAC,CAAC;IACP,CAAC,CAAC,CACL,CAAC;IACF,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,sBAAsB,CAC3B,QAAgB,EAChB,QAAgB,EAChB,KAAa;IAEb,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC;QAC1C,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;QACrC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;QACpC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,cAAc,CAAC,WAA+B,EAAE,KAAa;IAClE,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,WAAW,KAAK,GAAG,IAAI,CAAC,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,WAAW,KAAK,KAAK,CAAC;AAC9F,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAuB;IACpD,OAAO,MAAM,KAAK,OAAO,CAAC;AAC9B,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IACxC,MAAM,KAAK,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC"}

package/dist/lib/src/rules/rules_loader.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Operation names supported by rules.json.
+ *
+ * rules.jsonでサポートする操作名。
+ */
+export type RulesOperation = "get" | "create" | "update" | "delete";
+/**
+ * Operation aliases supported by rules.json.
+ *
+ * rules.jsonでサポートする操作エイリアス。
+ */
+export type RulesOperationAlias = "read" | "write";
+/**
+ * Operation keys accepted in a rule entry.
+ *
+ * ルール内で指定可能な操作キー。
+ */
+export type RulesOperationKey = RulesOperation | RulesOperationAlias;
+/**
+ * Access rule for an operation.
+ *
+ * 操作に対するアクセスルール。
+ */
+export type RulesAccessRule = "deny" | "allow" | "authenticated" | "server" | RulesFieldMatchAccessRule | RulesFieldAccessRule | RulesPathAccessRule;
+/**
+ * Field match access rule.
+ *
+ * フィールド一致アクセスルール。
+ */
+export interface RulesFieldMatchAccessRule {
+    type: "fieldMatch";
+    field: string;
+}
+/**
+ * Field match access rule.
+ *
+ * フィールド一致アクセスルール。
+ */
+export interface RulesFieldAccessRule {
+    type: "field";
+    field: string;
+    server?: boolean | undefined;
+}
+/**
+ * Path parameter access rule.
+ *
+ * パスパラメーター一致アクセスルール。
+ */
+export interface RulesPathAccessRule {
+    type: "path";
+    param: string;
+    server?: boolean | undefined;
+}
+/**
+ * Rule entry for a matched path.
+ *
+ * パスに対応するルール定義。
+ */
+export type RulesEntry = Partial<Record<RulesOperationKey, RulesAccessRule>>;
+/**
+ * Rule map keyed by path pattern.
+ *
+ * パスパターンをキーにしたルールマップ。
+ */
+export type RulesMap = Record<string, RulesEntry>;
+/**
+ * rules.json configuration.
+ *
+ * rules.json設定。
+ */
+export interface RulesConfig {
+    version: string;
+    rules: RulesMap;
+}
+/**
+ * Result of loading and validating rules.
+ *
+ * rulesの読み込み・検証結果。
+ */
+export interface LoadedRulesConfig extends RulesConfig {
+}
+/**
+ * Load and validate rules configuration.
+ *
+ * rules設定を読み込み、検証します。
+ */
+export declare function loadRulesConfig(input: unknown): LoadedRulesConfig;
+/**
+ * Validate a rule path.
+ *
+ * ルールパスを検証します。
+ */
+export declare function validateRulePath(path: string): void;