@nmnmcc/ability 0.2.0 → 0.3.0

package/dist/Rule.d.ts

@@ -0,0 +1,189 @@
+import { Kind } from "./Resource.js";
+import { Any as Any$1, Ast, Builder as Builder$1, Condition, Error as Error$1, FieldPath, OpaqueOf as OpaqueOf$1, Services as Services$1, Variance } from "./Condition.js";
+import { ActionOf, Any as Any$2, AnyAction, AnyValue, DataOf, Kind as Kind$1, Meta, Principal, Resources, ValueOf } from "./Domain.js";
+import * as Equal from "effect/Equal";
+import * as Inspectable from "effect/Inspectable";
+import * as Pipeable from "effect/Pipeable";
+declare namespace Rule_d_exports {
+  export { ActionFor, Any, Builder, DataFor, Error, FieldFor, KindOf, OpaqueOf, Options, Rule, Services, Target, TypeId, ValueFor, builder, isRule, matchesField };
+}
+/**
+ * @stability stable
+ * @category type IDs
+ * @since 0.3.0
+ */
+export declare const TypeId: "~@nmnmcc/ability/Rule";
+/**
+ * @stability stable
+ * @category type IDs
+ * @since 0.3.0
+ */
+export type TypeId = typeof TypeId;
+/**
+ * A rule. `E`, `R` and `O` come from its condition. See
+ * `Condition.Condition`.
+ *
+ * @stability stable
+ * @category models
+ * @since 0.3.0
+ */
+export interface Rule<E = never, R = never, O = never> extends Equal.Equal, Inspectable.Inspectable, Pipeable.Pipeable {
+  readonly [TypeId]: TypeId;
+  readonly _tag: "Allow" | "Deny";
+  readonly actions: ReadonlyArray<string>;
+  readonly resources: ReadonlyArray<string>;
+  readonly when?: Ast;
+  readonly fields?: ReadonlyArray<string>;
+  readonly reason?: string;
+  readonly id?: string;
+  readonly meta?: unknown;
+  readonly "~Rule"?: Variance<E, R, O>;
+  [Symbol.iterator](): Generator<Rule<E, R, O>, Rule<E, R, O>, unknown>;
+}
+/**
+ * Any rule.
+ *
+ * @stability stable
+ * @category models
+ * @since 0.3.0
+ */
+export type Any = Rule<any, any, any>;
+/**
+ * The error type of a rule.
+ *
+ * @stability stable
+ * @category utility types
+ * @since 0.3.0
+ */
+export type Error<A> = A extends {
+  readonly "~Rule"?: Variance<infer E, infer _R, infer _O>;
+} ? E : never;
+/**
+ * The service type of a rule.
+ *
+ * @stability stable
+ * @category utility types
+ * @since 0.3.0
+ */
+export type Services<A> = A extends {
+  readonly "~Rule"?: Variance<infer _E, infer R, infer _O>;
+} ? R : never;
+/**
+ * `Condition.Opaque` when a rule has a predicate.
+ *
+ * @stability stable
+ * @category utility types
+ * @since 0.3.0
+ */
+export type OpaqueOf<A> = A extends {
+  readonly "~Rule"?: Variance<infer _E, infer _R, infer O>;
+} ? O : never;
+/**
+ * A resource in a rule: a kind name, a resource of the domain, or `"*"`.
+ *
+ * @stability stable
+ * @category models
+ * @since 0.3.0
+ */
+export type Target<D> = Kind$1<D> | Resources<D> | "*";
+/**
+ * The kind name of a target.
+ *
+ * @stability stable
+ * @category utility types
+ * @since 0.3.0
+ */
+export type KindOf<T> = T extends string ? T : Kind<T>;
+/**
+ * The actions that a rule may use for the kinds `K`.
+ *
+ * @stability stable
+ * @category utility types
+ * @since 0.3.0
+ */
+export type ActionFor<D, K> = "*" | ("*" extends K ? AnyAction<D> : ActionOf<D, Extract<K, string>>);
+/**
+ * The data type of the kinds `K`. For `"*"` it has no fields.
+ *
+ * @stability stable
+ * @category utility types
+ * @since 0.3.0
+ */
+export type DataFor<D, K> = "*" extends K ? {} : DataOf<D, Extract<K, string>>;
+/**
+ * The value type of the kinds `K`.
+ *
+ * @stability stable
+ * @category utility types
+ * @since 0.3.0
+ */
+export type ValueFor<D, K> = "*" extends K ? AnyValue<D> : ValueOf<D, Extract<K, string>>;
+/**
+ * A field name or a field pattern of the kinds `K`.
+ *
+ * @stability stable
+ * @category models
+ * @since 0.3.0
+ */
+export type FieldFor<D, K> = FieldPath<DataFor<D, K>> | `${string}*${string}`;
+/**
+ * The options of a rule.
+ *
+ * @stability stable
+ * @category models
+ * @since 0.3.0
+ */
+export interface Options<D, K, C extends Any$1> {
+  /** The condition. It gets a builder with the types of the resource. */
+  readonly when?: (builder: Builder$1<DataFor<D, K>, ValueFor<D, K>, Principal<D>>) => C;
+  readonly fields?: ReadonlyArray<FieldFor<D, K>>;
+  readonly reason?: string;
+  readonly id?: string;
+  readonly meta?: Meta<D>;
+}
+type SingleOrArray<A> = A | ReadonlyArray<A>;
+/**
+ * Makes rules with the types of a domain.
+ *
+ * @stability stable
+ * @category models
+ * @since 0.3.0
+ */
+export interface Builder<D> {
+  readonly allow: <const T extends Target<D>, const A extends ActionFor<D, KindOf<T>>, const C extends Any$1 = Condition>(action: SingleOrArray<A>, resource: SingleOrArray<T>, options?: Options<D, KindOf<T>, C>) => Rule<Error$1<C>, Services$1<C>, OpaqueOf$1<C>>;
+  readonly deny: <const T extends Target<D>, const A extends ActionFor<D, KindOf<T>>, const C extends Any$1 = Condition>(action: SingleOrArray<A>, resource: SingleOrArray<T>, options?: Options<D, KindOf<T>, C>) => Rule<Error$1<C>, Services$1<C>, OpaqueOf$1<C>>;
+}
+/**
+ * Makes a rule builder for a domain.
+ *
+ * @example
+ * ```ts
+ * const _ = Rule.builder(App)
+ * const rule = _.allow("read", Bot, {
+ *   when: ($) => $.eq("ownerUserId", $.principal("userId")),
+ * })
+ * ```
+ *
+ * @stability stable
+ * @category constructors
+ * @since 0.3.0
+ */
+export declare const builder: <D extends Any$2>(domain: D) => Builder<D>;
+/**
+ * Tests if a value is a rule.
+ *
+ * @stability stable
+ * @category guards
+ * @since 0.3.0
+ */
+export declare const isRule: (u: unknown) => u is Any;
+/**
+ * Tests if a field name matches a field name or a field pattern of a rule.
+ *
+ * @stability stable
+ * @category predicates
+ * @since 0.3.0
+ */
+export declare const matchesField: (pattern: string, field: string) => boolean;
+export { Rule_d_exports };
+//# sourceMappingURL=Rule.d.ts.map

package/dist/Rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Rule.d.ts","names":["Condition.Ast","Condition.Variance","Domain.Kind","Domain.Resources","Resource.Kind","Domain.AnyAction","Domain.ActionOf","Domain.DataOf","Domain.AnyValue","Domain.ValueOf","Condition.FieldPath","Condition.Any","Domain.Principal","Condition.Builder","Domain.Meta","Condition.Condition","Condition.Error","Condition.Services","Condition.OpaqueOf","Domain.Any"],"sources":["../src/Rule.ts"],"mappings":";;;;;;;;;;;;;;qBAkCa;;;;;;YAOD,gBAAgB;;;;;;;;;iBAUX,KAAK,WAAW,WAAW,mBACnC,MAAM,OAAO,YAAY,aAAa,SAAS;YAC7C,SAAS;WACV;WACA,SAAS;WACT,WAAW;WACX,OAAOA;WACP,SAAS;WACT;WACA;WACA;WACA,UAAUC,SAAmB,GAAG,GAAG;GAC3C,OAAO,aAAa,UAAU,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,GAAG;;;;;;;;;YAU9C,MAAM;;;;;;;;YASN,MAAM,KAAK;WACb,UAAUA,eAAyB,SAAS,UAAU;IAE7D;;;;;;;;YAUS,SAAS,KAAK;WAChB,UAAUA,eAAyB,UAAU,SAAS;IAE7D;;;;;;;;YAUS,SAAS,KAAK;WAChB,UAAUA,eAAyB,UAAU,UAAU;IAE9D;;;;;;;;YAUS,OAAO,KAAKC,OAAY,KAAKC,UAAiB;;;;;;;;YAS9C,OAAO,KAAK,mBAAmB,IAAIC,KAAc;;;;;;;;YASjD,UAAU,GAAG,wBAET,IACXC,UAAiB,KACjBC,SAAgB,GAAG,QAAQ;;;;;;;;YASpB,QAAQ,GAAG,iBAAiB,SAErCC,OAAc,GAAG,QAAQ;;;;;;;;YAShB,SAAS,GAAG,iBAAiB,IACtCC,SAAgB,KAChBC,QAAe,GAAG,QAAQ;;;;;;;;YASjB,SAAS,GAAG,KACvBC,UAAoB,QAAQ,GAAG;;;;;;;;iBASf,QAAQ,GAAG,GAAG,UAAUC;;WAE/B,QACR,SAASE,UACR,QAAQ,GAAG,IACX,SAAS,GAAG,IACZD,UAAiB,QAEd;WACI,SAAS,cAAc,SAAS,GAAG;WACnC;WACA;WACA,OAAOE,KAAY;;KAGxB,cAAc,KAAK,IAAI,cAAc;;;;;;;;iBASzB,QAAQ;WACf,cACF,UAAU,OAAO,UACjB,UAAU,UAAU,GAAG,OAAO,WAC9B,UAAUH,QAAgBI,WAEhC,QAAQ,cAAc,IACtB,UAAU,cAAc,IACxB,UAAU,QAAQ,GAAG,OAAO,IAAI,OAC5B,KAAKC,QAAgB,IAAIC,WAAmB,IAAIC,WAAmB;WAC/D,aACF,UAAU,OAAO,UACjB,UAAU,UAAU,GAAG,OAAO,WAC9B,UAAUP,QAAgBI,WAEhC,QAAQ,cAAc,IACtB,UAAU,cAAc,IACxB,UAAU,QAAQ,GAAG,OAAO,IAAI,OAC5B,KAAKC,QAAgB,IAAIC,WAAmB,IAAIC,WAAmB;;;;;;;;;;;;;;;;;qBAkB5D,UAAU,UAAUC,OAAY,QAAQ,MAAM,QAAQ;;;;;;;;qBAUtD,SAAS,eAAe,KAAK;;;;;;;;qBAS7B,eAAe,iBAAiB"}

package/dist/Rule.js

@@ -0,0 +1,50 @@
+import { __exportAll } from "./_virtual/_rolldown/runtime.js";
+import { TypeId as TypeId$1, builder as builder$1, isRule as isRule$1, matchesFieldPattern } from "./internal/rule.js";
+// src/Rule.ts
+var Rule_exports = /* @__PURE__ */ __exportAll({
+	TypeId: () => TypeId,
+	builder: () => builder,
+	isRule: () => isRule,
+	matchesField: () => matchesField
+});
+/**
+* @stability stable
+* @category type IDs
+* @since 0.3.0
+*/
+const TypeId = TypeId$1;
+/**
+* Makes a rule builder for a domain.
+*
+* @example
+* ```ts
+* const _ = Rule.builder(App)
+* const rule = _.allow("read", Bot, {
+*   when: ($) => $.eq("ownerUserId", $.principal("userId")),
+* })
+* ```
+*
+* @stability stable
+* @category constructors
+* @since 0.3.0
+*/
+const builder = builder$1;
+/**
+* Tests if a value is a rule.
+*
+* @stability stable
+* @category guards
+* @since 0.3.0
+*/
+const isRule = isRule$1;
+/**
+* Tests if a field name matches a field name or a field pattern of a rule.
+*
+* @stability stable
+* @category predicates
+* @since 0.3.0
+*/
+const matchesField = matchesFieldPattern;
+export { Rule_exports, TypeId, builder, isRule, matchesField };
+
+//# sourceMappingURL=Rule.js.map

package/dist/Rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Rule.js","names":["internal.TypeId","internal.builder","internal.isRule","internal.matchesFieldPattern"],"sources":["../src/Rule.ts"],"sourcesContent":["/**\n * A rule says that a principal may (`Allow`) or may not (`Deny`) do some\n * actions on some resources. A rule may have:\n * - a condition, which must be true for the rule to apply;\n * - a list of fields, for rules about parts of a resource;\n * - a reason, an id, and extra data (`meta`).\n *\n * Rules do not change, and two rules with the same data are equal. A rule\n * works in a generator, so you can write `yield* _.allow(...)` inside\n * `Policy.define`.\n *\n * The action `\"*\"` means every action. The resource `\"*\"` means every\n * resource.\n *\n * Field names in a rule may have patterns. `*` stands for any part of one\n * field name, and `**` stands for any number of parts. So `address.*` covers\n * `address.city`, and `**` covers every field.\n *\n * @stability stable\n * @since 0.3.0\n */\nimport type * as Equal from \"effect/Equal\"\nimport type * as Inspectable from \"effect/Inspectable\"\nimport type * as Pipeable from \"effect/Pipeable\"\nimport type * as Condition from \"./Condition.ts\"\nimport type * as Domain from \"./Domain.ts\"\nimport * as internal from \"./internal/rule.ts\"\nimport type * as Resource from \"./Resource.ts\"\n\n/**\n * @stability stable\n * @category type IDs\n * @since 0.3.0\n */\nexport const TypeId: \"~@nmnmcc/ability/Rule\" = internal.TypeId\n\n/**\n * @stability stable\n * @category type IDs\n * @since 0.3.0\n */\nexport type TypeId = typeof TypeId\n\n/**\n * A rule. `E`, `R` and `O` come from its condition. See\n * `Condition.Condition`.\n *\n * @stability stable\n * @category models\n * @since 0.3.0\n */\nexport interface Rule<E = never, R = never, O = never>\n\textends Equal.Equal, Inspectable.Inspectable, Pipeable.Pipeable {\n\treadonly [TypeId]: TypeId\n\treadonly _tag: \"Allow\" | \"Deny\"\n\treadonly actions: ReadonlyArray<string>\n\treadonly resources: ReadonlyArray<string>\n\treadonly when?: Condition.Ast\n\treadonly fields?: ReadonlyArray<string>\n\treadonly reason?: string\n\treadonly id?: string\n\treadonly meta?: unknown\n\treadonly \"~Rule\"?: Condition.Variance<E, R, O>\n\t[Symbol.iterator](): Generator<Rule<E, R, O>, Rule<E, R, O>, unknown>\n}\n\n/**\n * Any rule.\n *\n * @stability stable\n * @category models\n * @since 0.3.0\n */\nexport type Any = Rule<any, any, any>\n\n/**\n * The error type of a rule.\n *\n * @stability stable\n * @category utility types\n * @since 0.3.0\n */\nexport type Error<A> = A extends {\n\treadonly \"~Rule\"?: Condition.Variance<infer E, infer _R, infer _O>\n}\n\t? E\n\t: never\n\n/**\n * The service type of a rule.\n *\n * @stability stable\n * @category utility types\n * @since 0.3.0\n */\nexport type Services<A> = A extends {\n\treadonly \"~Rule\"?: Condition.Variance<infer _E, infer R, infer _O>\n}\n\t? R\n\t: never\n\n/**\n * `Condition.Opaque` when a rule has a predicate.\n *\n * @stability stable\n * @category utility types\n * @since 0.3.0\n */\nexport type OpaqueOf<A> = A extends {\n\treadonly \"~Rule\"?: Condition.Variance<infer _E, infer _R, infer O>\n}\n\t? O\n\t: never\n\n/**\n * A resource in a rule: a kind name, a resource of the domain, or `\"*\"`.\n *\n * @stability stable\n * @category models\n * @since 0.3.0\n */\nexport type Target<D> = Domain.Kind<D> | Domain.Resources<D> | \"*\"\n\n/**\n * The kind name of a target.\n *\n * @stability stable\n * @category utility types\n * @since 0.3.0\n */\nexport type KindOf<T> = T extends string ? T : Resource.Kind<T>\n\n/**\n * The actions that a rule may use for the kinds `K`.\n *\n * @stability stable\n * @category utility types\n * @since 0.3.0\n */\nexport type ActionFor<D, K> =\n\t| \"*\"\n\t| (\"*\" extends K\n\t\t\t? Domain.AnyAction<D>\n\t\t\t: Domain.ActionOf<D, Extract<K, string>>)\n\n/**\n * The data type of the kinds `K`. For `\"*\"` it has no fields.\n *\n * @stability stable\n * @category utility types\n * @since 0.3.0\n */\nexport type DataFor<D, K> = \"*\" extends K\n\t? {}\n\t: Domain.DataOf<D, Extract<K, string>>\n\n/**\n * The value type of the kinds `K`.\n *\n * @stability stable\n * @category utility types\n * @since 0.3.0\n */\nexport type ValueFor<D, K> = \"*\" extends K\n\t? Domain.AnyValue<D>\n\t: Domain.ValueOf<D, Extract<K, string>>\n\n/**\n * A field name or a field pattern of the kinds `K`.\n *\n * @stability stable\n * @category models\n * @since 0.3.0\n */\nexport type FieldFor<D, K> =\n\tCondition.FieldPath<DataFor<D, K>> | `${string}*${string}`\n\n/**\n * The options of a rule.\n *\n * @stability stable\n * @category models\n * @since 0.3.0\n */\nexport interface Options<D, K, C extends Condition.Any> {\n\t/** The condition. It gets a builder with the types of the resource. */\n\treadonly when?: (\n\t\tbuilder: Condition.Builder<\n\t\t\tDataFor<D, K>,\n\t\t\tValueFor<D, K>,\n\t\t\tDomain.Principal<D>\n\t\t>,\n\t) => C\n\treadonly fields?: ReadonlyArray<FieldFor<D, K>>\n\treadonly reason?: string\n\treadonly id?: string\n\treadonly meta?: Domain.Meta<D>\n}\n\ntype SingleOrArray<A> = A | ReadonlyArray<A>\n\n/**\n * Makes rules with the types of a domain.\n *\n * @stability stable\n * @category models\n * @since 0.3.0\n */\nexport interface Builder<D> {\n\treadonly allow: <\n\t\tconst T extends Target<D>,\n\t\tconst A extends ActionFor<D, KindOf<T>>,\n\t\tconst C extends Condition.Any = Condition.Condition,\n\t>(\n\t\taction: SingleOrArray<A>,\n\t\tresource: SingleOrArray<T>,\n\t\toptions?: Options<D, KindOf<T>, C>,\n\t) => Rule<Condition.Error<C>, Condition.Services<C>, Condition.OpaqueOf<C>>\n\treadonly deny: <\n\t\tconst T extends Target<D>,\n\t\tconst A extends ActionFor<D, KindOf<T>>,\n\t\tconst C extends Condition.Any = Condition.Condition,\n\t>(\n\t\taction: SingleOrArray<A>,\n\t\tresource: SingleOrArray<T>,\n\t\toptions?: Options<D, KindOf<T>, C>,\n\t) => Rule<Condition.Error<C>, Condition.Services<C>, Condition.OpaqueOf<C>>\n}\n\n/**\n * Makes a rule builder for a domain.\n *\n * @example\n * ```ts\n * const _ = Rule.builder(App)\n * const rule = _.allow(\"read\", Bot, {\n *   when: ($) => $.eq(\"ownerUserId\", $.principal(\"userId\")),\n * })\n * ```\n *\n * @stability stable\n * @category constructors\n * @since 0.3.0\n */\nexport const builder: <D extends Domain.Any>(domain: D) => Builder<D> =\n\tinternal.builder\n\n/**\n * Tests if a value is a rule.\n *\n * @stability stable\n * @category guards\n * @since 0.3.0\n */\nexport const isRule: (u: unknown) => u is Any = internal.isRule\n\n/**\n * Tests if a field name matches a field name or a field pattern of a rule.\n *\n * @stability stable\n * @category predicates\n * @since 0.3.0\n */\nexport const matchesField: (pattern: string, field: string) => boolean =\n\tinternal.matchesFieldPattern\n"],"mappings":";;;;;;;;;;;;;;AAkCA,MAAa,SAAkCA;;;;;;;;;;;;;;;;AAkN/C,MAAa,UACZC;;;;;;;;AASD,MAAa,SAAmCC;;;;;;;;AAShD,MAAa,eACZC"}

package/dist/_virtual/_rolldown/runtime.js

@@ -1,4 +1,4 @@
-//#region \0rolldown/runtime.js
+// \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
 	let target = {};
@@ -9,5 +9,4 @@ var __exportAll = (all, no_symbols) => {
 	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
 	return target;
 };
-//#endregion
 export { __exportAll };

package/dist/index.d.ts

@@ -1,3 +1,9 @@
-import { Ability_d_exports } from "./Ability.js";
-import { AbilityExtra_d_exports } from "./AbilityExtra.js";
-export { Ability_d_exports as Ability, AbilityExtra_d_exports as AbilityExtra };
+import { Resource_d_exports } from "./Resource.js";
+import { Condition_d_exports } from "./Condition.js";
+import { Principal_d_exports } from "./Principal.js";
+import { Domain_d_exports } from "./Domain.js";
+import { Rule_d_exports } from "./Rule.js";
+import { Decision_d_exports } from "./Decision.js";
+import { Policy_d_exports } from "./Policy.js";
+import { Authorizer_d_exports } from "./Authorizer.js";
+export { Authorizer_d_exports as Authorizer, Condition_d_exports as Condition, Decision_d_exports as Decision, Domain_d_exports as Domain, Policy_d_exports as Policy, Principal_d_exports as Principal, Resource_d_exports as Resource, Rule_d_exports as Rule };

package/dist/index.js

@@ -1,3 +1,9 @@
-import { Ability_exports } from "./Ability.js";
-import { AbilityExtra_exports } from "./AbilityExtra.js";
-export { Ability_exports as Ability, AbilityExtra_exports as AbilityExtra };
+import { Decision_exports } from "./Decision.js";
+import { Authorizer_exports } from "./Authorizer.js";
+import { Condition_exports } from "./Condition.js";
+import { Domain_exports } from "./Domain.js";
+import { Policy_exports } from "./Policy.js";
+import { Principal_exports } from "./Principal.js";
+import { Resource_exports } from "./Resource.js";
+import { Rule_exports } from "./Rule.js";
+export { Authorizer_exports as Authorizer, Condition_exports as Condition, Decision_exports as Decision, Domain_exports as Domain, Policy_exports as Policy, Principal_exports as Principal, Resource_exports as Resource, Rule_exports as Rule };

package/dist/internal/authorizer.d.ts

@@ -0,0 +1,28 @@
+import "../Domain.js";
+import "../Decision.js";
+import "../Policy.js";
+import "../Authorizer.js";
+import "effect/Effect";
+import "effect/Layer";
+import * as Schema from "effect/Schema";
+declare const Forbidden_base: Schema.Class<Forbidden, Schema.TaggedStruct<"Forbidden", {
+  readonly action: Schema.String;
+  readonly kind: Schema.String;
+  readonly field: Schema.optionalKey<Schema.String>;
+  readonly reason: Schema.optionalKey<Schema.String>;
+}>, import("effect/Cause").YieldableError>;
+/** @internal */
+export declare class Forbidden extends Forbidden_base {}
+declare const PolicyUnavailable_base: Schema.Class<PolicyUnavailable, Schema.TaggedStruct<"PolicyUnavailable", {
+  readonly cause: Schema.Defect;
+}>, import("effect/Cause").YieldableError>;
+/** @internal */
+export declare class PolicyUnavailable extends PolicyUnavailable_base {}
+declare const Pending_base: Schema.Class<Pending, Schema.TaggedStruct<"Pending", {
+  readonly ticket: Schema.String;
+  readonly reason: Schema.optionalKey<Schema.String>;
+}>, import("effect/Cause").YieldableError>;
+/** @internal */
+export declare class Pending extends Pending_base {}
+export {};
+//# sourceMappingURL=authorizer.d.ts.map

package/dist/internal/authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer.d.ts","names":[],"sources":["../../src/internal/authorizer.ts"],"mappings":";;;;;;;;;;;;;;qBAqBa,kBAAkB;;;;;qBAUlB,0BAA0B;;;;;;qBAK1B,gBAAgB"}

package/dist/internal/authorizer.js

@@ -0,0 +1,153 @@
+import { Allow, Deny, NotApplicable, reason } from "../Decision.js";
+import { kindOf } from "./domain.js";
+import { decideOf, permittedFieldsOf, residualOf, residualPair } from "./policy.js";
+import * as Cache from "effect/Cache";
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Equal from "effect/Equal";
+import * as Hash from "effect/Hash";
+import * as Layer from "effect/Layer";
+import * as Schema from "effect/Schema";
+// src/internal/authorizer.ts
+/** @internal */
+var Forbidden = class extends Schema.TaggedError("@nmnmcc/ability/Authorizer/Forbidden")("Forbidden", {
+	action: Schema.String,
+	kind: Schema.String,
+	field: Schema.optionalKey(Schema.String),
+	reason: Schema.optionalKey(Schema.String)
+}) {};
+/** @internal */
+var PolicyUnavailable = class extends Schema.TaggedError("@nmnmcc/ability/Authorizer/PolicyUnavailable")("PolicyUnavailable", { cause: Schema.Defect() }) {};
+/** @internal */
+var Pending = class extends Schema.TaggedError("@nmnmcc/ability/Authorizer/Pending")("Pending", {
+	ticket: Schema.String,
+	reason: Schema.optionalKey(Schema.String)
+}) {};
+/** @internal */
+const Service = () => (id, domain) => {
+	const Base = Context.Service()(id);
+	return class extends Base {
+		static domain = domain;
+		static decide = (target) => this.use((service) => service.decide(target));
+		static check = (target) => this.use((service) => service.check(target));
+		static guard = (target, options) => this.use((service) => service.guard(target, options));
+		static filter = (target) => this.use((service) => service.filter(target));
+		static permittedFields = (target) => this.use((service) => service.permittedFields(target));
+	};
+};
+/**
+* A cache key for a principal. Two principals with the same encoded value are
+* the same key.
+*/
+var PrincipalKey = class PrincipalKey {
+	principal;
+	json;
+	constructor(principal, json) {
+		this.principal = principal;
+		this.json = json;
+	}
+	[Equal.symbol](that) {
+		return that instanceof PrincipalKey && that.json === this.json;
+	}
+	[Hash.symbol]() {
+		return Hash.string(this.json);
+	}
+};
+const forbidden = (target, kind, reason) => Forbidden.make({
+	action: target.action,
+	kind,
+	...target.field === void 0 ? {} : { field: target.field },
+	...reason === void 0 ? {} : { reason }
+});
+/** @internal */
+const layer = (service, options) => {
+	const domain = service.domain;
+	const encode = Schema.encodeUnknownSync(domain.principal);
+	const keyOf = (principal) => new PrincipalKey(principal, JSON.stringify(encode(principal)));
+	return Layer.effect(service, Effect.gen(function* () {
+		const services = yield* Effect.context();
+		const load = (principal) => options.policy(principal).pipe(Effect.provideContext(services), Effect.mapError((cause) => PolicyUnavailable.make({ cause })));
+		const cache = options.cache === false ? void 0 : yield* Cache.make({
+			capacity: options.cache?.capacity ?? 1e3,
+			timeToLive: options.cache?.timeToLive ?? "30 seconds",
+			lookup: (key) => load(key.principal)
+		});
+		const policyFor = (principal) => {
+			if (cache === void 0) return load(principal);
+			const key = keyOf(principal);
+			return Cache.get(cache, key).pipe(Effect.tapError(() => Cache.invalidate(cache, key)));
+		};
+		const withServices = (effect) => Effect.provideContext(effect, services);
+		const current = Effect.gen(function* () {
+			const principal = yield* options.principal;
+			return {
+				principal,
+				policy: yield* policyFor(principal)
+			};
+		});
+		const decide = Effect.fnUntraced(function* (target) {
+			const { principal, policy: value } = yield* current;
+			return yield* withServices(decideOf(value, {
+				...target,
+				principal
+			}));
+		});
+		const kindDecision = (value, principal, target) => {
+			const pair = residualPair(value, {
+				...target,
+				principal
+			});
+			if (pair.allow._tag === "True") return Allow({});
+			if (pair.deny._tag === "True") return Deny({});
+			return NotApplicable;
+		};
+		const check = Effect.fnUntraced(function* (target) {
+			const { principal, policy: value } = yield* current;
+			const kind = target.resource === void 0 ? target.kind ?? "" : kindOf(target.resource) ?? "";
+			let decision = target.resource === void 0 ? kindDecision(value, principal, target) : yield* withServices(decideOf(value, {
+				...target,
+				principal
+			}));
+			if (decision._tag === "NotApplicable" && options.decider !== void 0) decision = yield* options.decider({
+				...target,
+				principal
+			});
+			if (decision._tag !== "Allow") return yield* forbidden(target, kind, reason(decision));
+		});
+		const guard = Effect.fnUntraced(function* (target, guardOptions) {
+			const read = guardOptions.read ?? "read";
+			const { field: _field, ...rest } = target;
+			if ((yield* decide({
+				...rest,
+				action: read
+			}))._tag !== "Allow") return yield* Effect.fail(guardOptions.hide());
+			if (target.action !== read || target.field !== void 0) yield* check(target);
+		});
+		const filter = (target) => Effect.map(current, ({ principal, policy: value }) => residualOf(value, {
+			...target,
+			principal
+		}));
+		const permittedFields = Effect.fnUntraced(function* (target) {
+			const { principal, policy: value } = yield* current;
+			return yield* withServices(permittedFieldsOf(value, {
+				...target,
+				principal
+			}));
+		});
+		const invalidate = (principal) => cache === void 0 ? Effect.void : principal === void 0 ? Cache.invalidateAll(cache) : Cache.invalidate(cache, keyOf(principal));
+		return {
+			domain,
+			principal: options.principal,
+			policy: Effect.map(current, ({ policy: value }) => value),
+			decide,
+			check,
+			guard,
+			filter,
+			permittedFields,
+			invalidate
+		};
+	}));
+};
+export { Forbidden, Pending, PolicyUnavailable, Service, layer };
+
+//# sourceMappingURL=authorizer.js.map

package/dist/internal/authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizer.js","names":["policy.decideOf","policy.residualPair","Decision.Allow","Decision.Deny","Decision.NotApplicable","Decision.reason","policy.residualOf","policy.permittedFieldsOf"],"sources":["../../src/internal/authorizer.ts"],"sourcesContent":["// The service erases the error type and the service type of predicates,\n// principals and deciders to `unknown`. The public types in\n// `src/Authorizer.ts` keep them, so the language service check for `unknown`\n// in an Effect is off here.\n// @effect-diagnostics anyUnknownInErrorContext:off\nimport * as Cache from \"effect/Cache\"\nimport * as Context from \"effect/Context\"\nimport * as Effect from \"effect/Effect\"\nimport * as Equal from \"effect/Equal\"\nimport * as Hash from \"effect/Hash\"\nimport * as Layer from \"effect/Layer\"\nimport * as Schema from \"effect/Schema\"\nimport type * as Authorizer from \"../Authorizer.ts\"\nimport type * as Condition from \"../Condition.ts\"\nimport * as Decision from \"../Decision.ts\"\nimport type * as Domain from \"../Domain.ts\"\nimport type * as Policy from \"../Policy.ts\"\nimport { kindOf } from \"./domain.ts\"\nimport * as policy from \"./policy.ts\"\n\n/** @internal */\nexport class Forbidden extends Schema.TaggedError<Forbidden>(\n\t\"@nmnmcc/ability/Authorizer/Forbidden\",\n)(\"Forbidden\", {\n\taction: Schema.String,\n\tkind: Schema.String,\n\tfield: Schema.optionalKey(Schema.String),\n\treason: Schema.optionalKey(Schema.String),\n}) {}\n\n/** @internal */\nexport class PolicyUnavailable extends Schema.TaggedError<PolicyUnavailable>(\n\t\"@nmnmcc/ability/Authorizer/PolicyUnavailable\",\n)(\"PolicyUnavailable\", { cause: Schema.Defect() }) {}\n\n/** @internal */\nexport class Pending extends Schema.TaggedError<Pending>(\n\t\"@nmnmcc/ability/Authorizer/Pending\",\n)(\"Pending\", {\n\tticket: Schema.String,\n\treason: Schema.optionalKey(Schema.String),\n}) {}\n\ntype AnyTarget = {\n\treadonly action: string\n\treadonly resource?: object\n\treadonly kind?: string\n\treadonly field?: string\n}\n\n/** @internal */\nexport const Service =\n\t() =>\n\t(id: string, domain: Domain.Any): Authorizer.AnyServiceClass => {\n\t\tconst Base = Context.Service<any, any>()(id)\n\t\treturn class extends Base {\n\t\t\tstatic readonly domain = domain\n\t\t\tstatic readonly decide = (target: AnyTarget) =>\n\t\t\t\tthis.use((service: any) => service.decide(target))\n\t\t\tstatic readonly check = (target: AnyTarget) =>\n\t\t\t\tthis.use((service: any) => service.check(target))\n\t\t\tstatic readonly guard = (target: AnyTarget, options: unknown) =>\n\t\t\t\tthis.use((service: any) => service.guard(target, options))\n\t\t\tstatic readonly filter = (target: AnyTarget) =>\n\t\t\t\tthis.use((service: any) => service.filter(target))\n\t\t\tstatic readonly permittedFields = (target: AnyTarget) =>\n\t\t\t\tthis.use((service: any) => service.permittedFields(target))\n\t\t} as never\n\t}\n\n/**\n * A cache key for a principal. Two principals with the same encoded value are\n * the same key.\n */\nclass PrincipalKey implements Equal.Equal {\n\treadonly principal: object\n\treadonly json: string\n\tconstructor(principal: object, json: string) {\n\t\tthis.principal = principal\n\t\tthis.json = json\n\t}\n\t[Equal.symbol](that: unknown): boolean {\n\t\treturn that instanceof PrincipalKey && that.json === this.json\n\t}\n\t[Hash.symbol](): number {\n\t\treturn Hash.string(this.json)\n\t}\n}\n\nconst forbidden = (\n\ttarget: AnyTarget,\n\tkind: string,\n\treason: string | undefined,\n): Forbidden =>\n\tForbidden.make({\n\t\taction: target.action,\n\t\tkind,\n\t\t...(target.field === undefined ? {} : { field: target.field }),\n\t\t...(reason === undefined ? {} : { reason }),\n\t})\n\n/** @internal */\nexport const layer = (\n\tservice: Authorizer.AnyServiceClass,\n\toptions: {\n\t\treadonly principal: Effect.Effect<object, unknown, unknown>\n\t\treadonly policy: (\n\t\t\tprincipal: object,\n\t\t) => Effect.Effect<Policy.Any, unknown, unknown>\n\t\treadonly decider?: (\n\t\t\trequest: object,\n\t\t) => Effect.Effect<Decision.Decision, unknown, unknown>\n\t\treadonly cache?:\n\t\t\t{ readonly capacity?: number; readonly timeToLive?: any } | false\n\t},\n) => {\n\tconst domain: Domain.Any = service.domain\n\tconst encode = Schema.encodeUnknownSync(\n\t\tdomain.principal as unknown as Schema.Codec<unknown, unknown>,\n\t)\n\tconst keyOf = (principal: object) =>\n\t\tnew PrincipalKey(principal, JSON.stringify(encode(principal)))\n\treturn Layer.effect(\n\t\tservice,\n\t\tEffect.gen(function* () {\n\t\t\t// The services of the policy loader and of the predicates come from the\n\t\t\t// layer, so a check does not need them.\n\t\t\tconst services = yield* Effect.context<never>()\n\n\t\t\tconst load = (principal: object) =>\n\t\t\t\toptions.policy(principal).pipe(\n\t\t\t\t\tEffect.provideContext(services),\n\t\t\t\t\tEffect.mapError((cause) => PolicyUnavailable.make({ cause })),\n\t\t\t\t)\n\n\t\t\tconst cache =\n\t\t\t\toptions.cache === false\n\t\t\t\t\t? undefined\n\t\t\t\t\t: yield* Cache.make({\n\t\t\t\t\t\t\tcapacity: options.cache?.capacity ?? 1000,\n\t\t\t\t\t\t\ttimeToLive: options.cache?.timeToLive ?? \"30 seconds\",\n\t\t\t\t\t\t\tlookup: (key: PrincipalKey) => load(key.principal),\n\t\t\t\t\t\t})\n\n\t\t\tconst policyFor = (principal: object) => {\n\t\t\t\tif (cache === undefined) {\n\t\t\t\t\treturn load(principal)\n\t\t\t\t}\n\t\t\t\tconst key = keyOf(principal)\n\t\t\t\t// A failed lookup is kept in the cache. Remove it, so the next check\n\t\t\t\t// tries again.\n\t\t\t\treturn Cache.get(cache, key).pipe(\n\t\t\t\t\tEffect.tapError(() => Cache.invalidate(cache, key)),\n\t\t\t\t)\n\t\t\t}\n\n\t\t\tconst withServices = <A, E>(\n\t\t\t\teffect: Effect.Effect<A, E, unknown>,\n\t\t\t): Effect.Effect<A, E, unknown> => Effect.provideContext(effect, services)\n\n\t\t\tconst current = Effect.gen(function* () {\n\t\t\t\tconst principal = yield* options.principal\n\t\t\t\tconst value = yield* policyFor(principal)\n\t\t\t\treturn { principal, policy: value }\n\t\t\t})\n\n\t\t\tconst decide = Effect.fnUntraced(function* (target: AnyTarget) {\n\t\t\t\tconst { principal, policy: value } = yield* current\n\t\t\t\tconst decision: Decision.Decision = yield* withServices(\n\t\t\t\t\tpolicy.decideOf(value, { ...target, principal } as never),\n\t\t\t\t)\n\t\t\t\treturn decision\n\t\t\t})\n\n\t\t\tconst kindDecision = (\n\t\t\t\tvalue: Policy.Any,\n\t\t\t\tprincipal: object,\n\t\t\t\ttarget: AnyTarget,\n\t\t\t): Decision.Decision => {\n\t\t\t\tconst pair = policy.residualPair(value, {\n\t\t\t\t\t...target,\n\t\t\t\t\tprincipal,\n\t\t\t\t} as never)\n\t\t\t\tif (pair.allow._tag === \"True\") {\n\t\t\t\t\treturn Decision.Allow({})\n\t\t\t\t}\n\t\t\t\tif (pair.deny._tag === \"True\") {\n\t\t\t\t\treturn Decision.Deny({})\n\t\t\t\t}\n\t\t\t\treturn Decision.NotApplicable\n\t\t\t}\n\n\t\t\tconst check = Effect.fnUntraced(function* (target: AnyTarget) {\n\t\t\t\tconst { principal, policy: value } = yield* current\n\t\t\t\tconst kind =\n\t\t\t\t\ttarget.resource === undefined\n\t\t\t\t\t\t? (target.kind ?? \"\")\n\t\t\t\t\t\t: (kindOf(target.resource) ?? \"\")\n\t\t\t\tlet decision: Decision.Decision =\n\t\t\t\t\ttarget.resource === undefined\n\t\t\t\t\t\t? kindDecision(value, principal, target)\n\t\t\t\t\t\t: yield* withServices(\n\t\t\t\t\t\t\t\tpolicy.decideOf(value, { ...target, principal } as never),\n\t\t\t\t\t\t\t)\n\t\t\t\tif (\n\t\t\t\t\tdecision._tag === \"NotApplicable\" &&\n\t\t\t\t\toptions.decider !== undefined\n\t\t\t\t) {\n\t\t\t\t\tdecision = yield* options.decider({ ...target, principal })\n\t\t\t\t}\n\t\t\t\tif (decision._tag !== \"Allow\") {\n\t\t\t\t\treturn yield* forbidden(target, kind, Decision.reason(decision))\n\t\t\t\t}\n\t\t\t})\n\n\t\t\tconst guard = Effect.fnUntraced(function* (\n\t\t\t\ttarget: AnyTarget,\n\t\t\t\tguardOptions: {\n\t\t\t\t\treadonly read?: string\n\t\t\t\t\treadonly hide: () => unknown\n\t\t\t\t},\n\t\t\t) {\n\t\t\t\tconst read = guardOptions.read ?? \"read\"\n\t\t\t\tconst { field: _field, ...rest } = target\n\t\t\t\tconst visible: Decision.Decision = yield* decide({\n\t\t\t\t\t...rest,\n\t\t\t\t\taction: read,\n\t\t\t\t})\n\t\t\t\tif (visible._tag !== \"Allow\") {\n\t\t\t\t\treturn yield* Effect.fail(guardOptions.hide())\n\t\t\t\t}\n\t\t\t\tif (target.action !== read || target.field !== undefined) {\n\t\t\t\t\tyield* check(target)\n\t\t\t\t}\n\t\t\t})\n\n\t\t\tconst filter = (\n\t\t\t\ttarget: AnyTarget,\n\t\t\t): Effect.Effect<Condition.Ast, unknown, unknown> =>\n\t\t\t\tEffect.map(current, ({ principal, policy: value }) =>\n\t\t\t\t\tpolicy.residualOf(value, { ...target, principal } as never),\n\t\t\t\t)\n\n\t\t\tconst permittedFields = Effect.fnUntraced(function* (target: AnyTarget) {\n\t\t\t\tconst { principal, policy: value } = yield* current\n\t\t\t\treturn yield* withServices(\n\t\t\t\t\tpolicy.permittedFieldsOf(value, { ...target, principal } as never),\n\t\t\t\t)\n\t\t\t})\n\n\t\t\tconst invalidate = (principal?: object) =>\n\t\t\t\tcache === undefined\n\t\t\t\t\t? Effect.void\n\t\t\t\t\t: principal === undefined\n\t\t\t\t\t\t? Cache.invalidateAll(cache)\n\t\t\t\t\t\t: Cache.invalidate(cache, keyOf(principal))\n\n\t\t\treturn {\n\t\t\t\tdomain,\n\t\t\t\tprincipal: options.principal,\n\t\t\t\tpolicy: Effect.map(current, ({ policy: value }) => value),\n\t\t\t\tdecide,\n\t\t\t\tcheck,\n\t\t\t\tguard,\n\t\t\t\tfilter,\n\t\t\t\tpermittedFields,\n\t\t\t\tinvalidate,\n\t\t\t} as never\n\t\t}),\n\t)\n}\n"],"mappings":";;;;;;;;;;;;AAqBA,IAAa,YAAb,cAA+B,OAAO,YACrC,sCACD,CAAC,CAAC,aAAa;CACd,QAAQ,OAAO;CACf,MAAM,OAAO;CACb,OAAO,OAAO,YAAY,OAAO,MAAM;CACvC,QAAQ,OAAO,YAAY,OAAO,MAAM;AACzC,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,oBAAb,cAAuC,OAAO,YAC7C,8CACD,CAAC,CAAC,qBAAqB,EAAE,OAAO,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;;AAGpD,IAAa,UAAb,cAA6B,OAAO,YACnC,oCACD,CAAC,CAAC,WAAW;CACZ,QAAQ,OAAO;CACf,QAAQ,OAAO,YAAY,OAAO,MAAM;AACzC,CAAC,CAAC,CAAC,CAAC;;AAUJ,MAAa,iBAEX,IAAY,WAAmD;CAC/D,MAAM,OAAO,QAAQ,QAAkB,CAAC,CAAC,EAAE;CAC3C,OAAO,cAAc,KAAK;EACzB,OAAgB,SAAS;EACzB,OAAgB,UAAU,WACzB,KAAK,KAAK,YAAiB,QAAQ,OAAO,MAAM,CAAC;EAClD,OAAgB,SAAS,WACxB,KAAK,KAAK,YAAiB,QAAQ,MAAM,MAAM,CAAC;EACjD,OAAgB,SAAS,QAAmB,YAC3C,KAAK,KAAK,YAAiB,QAAQ,MAAM,QAAQ,OAAO,CAAC;EAC1D,OAAgB,UAAU,WACzB,KAAK,KAAK,YAAiB,QAAQ,OAAO,MAAM,CAAC;EAClD,OAAgB,mBAAmB,WAClC,KAAK,KAAK,YAAiB,QAAQ,gBAAgB,MAAM,CAAC;CAC5D;AACD;;;;;AAMD,IAAM,eAAN,MAAM,aAAoC;CACzC;CACA;CACA,YAAY,WAAmB,MAAc;EAC5C,KAAK,YAAY;EACjB,KAAK,OAAO;CACb;CACA,CAAC,MAAM,QAAQ,MAAwB;EACtC,OAAO,gBAAgB,gBAAgB,KAAK,SAAS,KAAK;CAC3D;CACA,CAAC,KAAK,UAAkB;EACvB,OAAO,KAAK,OAAO,KAAK,IAAI;CAC7B;AACD;AAEA,MAAM,aACL,QACA,MACA,WAEA,UAAU,KAAK;CACd,QAAQ,OAAO;CACf;CACA,GAAI,OAAO,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,OAAO,MAAM;CAC5D,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;AAC1C,CAAC;;AAGF,MAAa,SACZ,SACA,YAWI;CACJ,MAAM,SAAqB,QAAQ;CACnC,MAAM,SAAS,OAAO,kBACrB,OAAO,SACR;CACA,MAAM,SAAS,cACd,IAAI,aAAa,WAAW,KAAK,UAAU,OAAO,SAAS,CAAC,CAAC;CAC9D,OAAO,MAAM,OACZ,SACA,OAAO,IAAI,aAAa;EAGvB,MAAM,WAAW,OAAO,OAAO,QAAe;EAE9C,MAAM,QAAQ,cACb,QAAQ,OAAO,SAAS,CAAC,CAAC,KACzB,OAAO,eAAe,QAAQ,GAC9B,OAAO,UAAU,UAAU,kBAAkB,KAAK,EAAE,MAAM,CAAC,CAAC,CAC7D;EAED,MAAM,QACL,QAAQ,UAAU,QACf,KAAA,IACA,OAAO,MAAM,KAAK;GAClB,UAAU,QAAQ,OAAO,YAAY;GACrC,YAAY,QAAQ,OAAO,cAAc;GACzC,SAAS,QAAsB,KAAK,IAAI,SAAS;EAClD,CAAC;EAEJ,MAAM,aAAa,cAAsB;GACxC,IAAI,UAAU,KAAA,GACb,OAAO,KAAK,SAAS;GAEtB,MAAM,MAAM,MAAM,SAAS;GAG3B,OAAO,MAAM,IAAI,OAAO,GAAG,CAAC,CAAC,KAC5B,OAAO,eAAe,MAAM,WAAW,OAAO,GAAG,CAAC,CACnD;EACD;EAEA,MAAM,gBACL,WACkC,OAAO,eAAe,QAAQ,QAAQ;EAEzE,MAAM,UAAU,OAAO,IAAI,aAAa;GACvC,MAAM,YAAY,OAAO,QAAQ;GAEjC,OAAO;IAAE;IAAW,QAAQ,OADP,UAAU,SAAS;GACN;EACnC,CAAC;EAED,MAAM,SAAS,OAAO,WAAW,WAAW,QAAmB;GAC9D,MAAM,EAAE,WAAW,QAAQ,UAAU,OAAO;GAI5C,OAAO,OAHoC,aAC1CA,SAAgB,OAAO;IAAE,GAAG;IAAQ;GAAU,CAAU,CACzD;EAED,CAAC;EAED,MAAM,gBACL,OACA,WACA,WACuB;GACvB,MAAM,OAAOC,aAAoB,OAAO;IACvC,GAAG;IACH;GACD,CAAU;GACV,IAAI,KAAK,MAAM,SAAS,QACvB,OAAOC,MAAe,CAAC,CAAC;GAEzB,IAAI,KAAK,KAAK,SAAS,QACtB,OAAOC,KAAc,CAAC,CAAC;GAExB,OAAOC;EACR;EAEA,MAAM,QAAQ,OAAO,WAAW,WAAW,QAAmB;GAC7D,MAAM,EAAE,WAAW,QAAQ,UAAU,OAAO;GAC5C,MAAM,OACL,OAAO,aAAa,KAAA,IAChB,OAAO,QAAQ,KACf,OAAO,OAAO,QAAQ,KAAK;GAChC,IAAI,WACH,OAAO,aAAa,KAAA,IACjB,aAAa,OAAO,WAAW,MAAM,IACrC,OAAO,aACPJ,SAAgB,OAAO;IAAE,GAAG;IAAQ;GAAU,CAAU,CACzD;GACH,IACC,SAAS,SAAS,mBAClB,QAAQ,YAAY,KAAA,GAEpB,WAAW,OAAO,QAAQ,QAAQ;IAAE,GAAG;IAAQ;GAAU,CAAC;GAE3D,IAAI,SAAS,SAAS,SACrB,OAAO,OAAO,UAAU,QAAQ,MAAMK,OAAgB,QAAQ,CAAC;EAEjE,CAAC;EAED,MAAM,QAAQ,OAAO,WAAW,WAC/B,QACA,cAIC;GACD,MAAM,OAAO,aAAa,QAAQ;GAClC,MAAM,EAAE,OAAO,QAAQ,GAAG,SAAS;GAKnC,KAAI,OAJsC,OAAO;IAChD,GAAG;IACH,QAAQ;GACT,CAAC,EAAA,CACW,SAAS,SACpB,OAAO,OAAO,OAAO,KAAK,aAAa,KAAK,CAAC;GAE9C,IAAI,OAAO,WAAW,QAAQ,OAAO,UAAU,KAAA,GAC9C,OAAO,MAAM,MAAM;EAErB,CAAC;EAED,MAAM,UACL,WAEA,OAAO,IAAI,UAAU,EAAE,WAAW,QAAQ,YACzCC,WAAkB,OAAO;GAAE,GAAG;GAAQ;EAAU,CAAU,CAC3D;EAED,MAAM,kBAAkB,OAAO,WAAW,WAAW,QAAmB;GACvE,MAAM,EAAE,WAAW,QAAQ,UAAU,OAAO;GAC5C,OAAO,OAAO,aACbC,kBAAyB,OAAO;IAAE,GAAG;IAAQ;GAAU,CAAU,CAClE;EACD,CAAC;EAED,MAAM,cAAc,cACnB,UAAU,KAAA,IACP,OAAO,OACP,cAAc,KAAA,IACb,MAAM,cAAc,KAAK,IACzB,MAAM,WAAW,OAAO,MAAM,SAAS,CAAC;EAE7C,OAAO;GACN;GACA,WAAW,QAAQ;GACnB,QAAQ,OAAO,IAAI,UAAU,EAAE,QAAQ,YAAY,KAAK;GACxD;GACA;GACA;GACA;GACA;GACA;EACD;CACD,CAAC,CACF;AACD"}

package/dist/internal/condition.d.ts

@@ -0,0 +1,11 @@
+import "../Resource.js";
+import "../Condition.js";
+import "effect/Effect";
+import * as Schema from "effect/Schema";
+declare const Untranslatable_base: Schema.Class<Untranslatable, Schema.TaggedStruct<"Untranslatable", {
+  readonly reason: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/** @internal */
+export declare class Untranslatable extends Untranslatable_base {}
+export {};
+//# sourceMappingURL=condition.d.ts.map

package/dist/internal/condition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"condition.d.ts","names":[],"sources":["../../src/internal/condition.ts"],"mappings":";;;;;;;;qBAwda,uBAAuB"}