@o3co/auth.policy-verifier.builtins 0.1.0

package/dist/rules/HasScope.mjs

@@ -0,0 +1,22 @@
+import { ATTR_SCOPES } from "@o3co/auth.policy-verifier.core";
+export class HasScope {
+    scope;
+    ruleType = "scope";
+    code = "invalid_scope";
+    message;
+    constructor(scope) {
+        this.scope = scope;
+        this.message = `Token does not have required scope: ${scope}`;
+    }
+    verify(attrs) {
+        const scopes = attrs.get(ATTR_SCOPES) ?? [];
+        return scopes.some((s) => this.matchScopes(s, this.scope));
+    }
+    matchScopes(scope, required) {
+        scope = scope.toLowerCase();
+        required = required.toLowerCase();
+        const parts = scope.split(":");
+        const [perm, resource] = parts.length === 1 ? ["read", parts[0]] : parts;
+        return required === `${perm}:${resource}`;
+    }
+}

package/dist/rules/ResourceActionPermissionRuleCollector.d.mts

@@ -0,0 +1,5 @@
+import type { CollectorContext, Rule, RuleCollector } from "@o3co/auth.policy-verifier.core";
+export declare class ResourceActionPermissionRuleCollector implements RuleCollector {
+    collect(context: CollectorContext): Promise<Rule[]>;
+}
+//# sourceMappingURL=ResourceActionPermissionRuleCollector.d.mts.map

package/dist/rules/ResourceActionPermissionRuleCollector.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResourceActionPermissionRuleCollector.d.mts","sourceRoot":"","sources":["../../src/rules/ResourceActionPermissionRuleCollector.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAG7F,qBAAa,qCAAsC,YAAW,aAAa;IACpE,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;CAIzD"}

package/dist/rules/ResourceActionPermissionRuleCollector.mjs

@@ -0,0 +1,7 @@
+import { HasPermission } from "./HasPermission.mjs";
+export class ResourceActionPermissionRuleCollector {
+    async collect(context) {
+        const permission = `${context.resource.raw}.perm:${context.action}`;
+        return [new HasPermission(permission)];
+    }
+}

package/dist/rules/ResourceActionScopeRuleCollector.d.mts

@@ -0,0 +1,5 @@
+import type { CollectorContext, Rule, RuleCollector } from "@o3co/auth.policy-verifier.core";
+export declare class ResourceActionScopeRuleCollector implements RuleCollector {
+    collect(context: CollectorContext): Promise<Rule[]>;
+}
+//# sourceMappingURL=ResourceActionScopeRuleCollector.d.mts.map

package/dist/rules/ResourceActionScopeRuleCollector.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResourceActionScopeRuleCollector.d.mts","sourceRoot":"","sources":["../../src/rules/ResourceActionScopeRuleCollector.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAG7F,qBAAa,gCAAiC,YAAW,aAAa;IAC/D,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;CAIzD"}

package/dist/rules/ResourceActionScopeRuleCollector.mjs

@@ -0,0 +1,7 @@
+import { HasScope } from "./HasScope.mjs";
+export class ResourceActionScopeRuleCollector {
+    async collect(context) {
+        const scope = `${context.action}:${context.resource.resourceType}`;
+        return [new HasScope(scope)];
+    }
+}

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@o3co/auth.policy-verifier.builtins",
+  "version": "0.1.0",
+  "license": "Apache-2.0",
+  "type": "module",
+  "main": "./dist/index.mjs",
+  "types": "./dist/index.d.mts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.mjs",
+      "types": "./dist/index.d.mts"
+    }
+  },
+  "files": [
+    "dist",
+    "LICENSE",
+    "README.md"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/o3co/auth.policy-verifier.git",
+    "directory": "packages/builtins"
+  },
+  "imports": {
+    "#/*": "./src/*"
+  },
+  "dependencies": {
+    "@o3co/auth.policy-verifier.core": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.1.0",
+    "vitest": "^4.1.2"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run"
+  }
+}