@prosopo/user-access-policy 3.15.6 → 3.15.8

package/dist/tsc/api/ruleApiRoutes.js

@@ -0,0 +1,75 @@
+import { FetchRulesEndpoint } from "#policy/api/read/fetchRules.js";
+import { FindRuleIdsEndpoint } from "#policy/api/read/findRuleIds.js";
+import { GetMissingIdsEndpoint } from "#policy/api/read/getMissingIds.js";
+import { RehashRulesEndpoint } from "#policy/api/write/rehashRules.js";
+import { DeleteAllRulesEndpoint } from "./delete/deleteAllRules.js";
+import { DeleteRuleGroupsEndpoint } from "./delete/deleteRuleGroups.js";
+import { DeleteRulesEndpoint } from "./delete/deleteRules.js";
+import { InsertRulesEndpoint } from "./write/insertRules.js";
+export var accessRuleApiPaths;
+(function (accessRuleApiPaths) {
+    accessRuleApiPaths["DELETE_ALL"] = "/v1/prosopo/user-access-policy/rules/delete-all";
+    accessRuleApiPaths["DELETE_GROUPS"] = "/v1/prosopo/user-access-policy/rules/delete-groups";
+    accessRuleApiPaths["DELETE_MANY"] = "/v1/prosopo/user-access-policy/rules/delete-many";
+    accessRuleApiPaths["FETCH_MANY"] = "/v1/prosopo/user-access-policy/rules/fetch-many";
+    accessRuleApiPaths["FIND_IDS"] = "/v1/prosopo/user-access-policy/rules/find-ids";
+    accessRuleApiPaths["GET_MISSING_IDS"] = "/v1/prosopo/user-access-policy/rules/get-missing-ids";
+    accessRuleApiPaths["INSERT_MANY"] = "/v1/prosopo/user-access-policy/rules/insert-many";
+    accessRuleApiPaths["REHASH_ALL"] = "/v1/prosopo/user-access-policy/rules/rehash-all";
+})(accessRuleApiPaths || (accessRuleApiPaths = {}));
+export class AccessRuleApiRoutes {
+    constructor(accessRulesStorage, logger) {
+        this.accessRulesStorage = accessRulesStorage;
+        this.logger = logger;
+    }
+    getRoutes() {
+        return {
+            ...this.makeDeleteEndpoints(),
+            ...this.makeReadEndpoints(),
+            ...this.makeWriteEndpoints(),
+        };
+    }
+    makeDeleteEndpoints() {
+        return {
+            [accessRuleApiPaths.DELETE_ALL]: new DeleteAllRulesEndpoint(this.accessRulesStorage, this.logger),
+            [accessRuleApiPaths.DELETE_GROUPS]: new DeleteRuleGroupsEndpoint(this.accessRulesStorage, this.logger),
+            [accessRuleApiPaths.DELETE_MANY]: new DeleteRulesEndpoint(this.accessRulesStorage, this.logger),
+        };
+    }
+    makeReadEndpoints() {
+        return {
+            [accessRuleApiPaths.FETCH_MANY]: new FetchRulesEndpoint(this.accessRulesStorage, this.logger),
+            [accessRuleApiPaths.FIND_IDS]: new FindRuleIdsEndpoint(this.accessRulesStorage, this.logger),
+            [accessRuleApiPaths.GET_MISSING_IDS]: new GetMissingIdsEndpoint(this.accessRulesStorage, this.logger),
+        };
+    }
+    makeWriteEndpoints() {
+        return {
+            [accessRuleApiPaths.INSERT_MANY]: new InsertRulesEndpoint(this.accessRulesStorage, this.logger),
+            [accessRuleApiPaths.REHASH_ALL]: new RehashRulesEndpoint(this.accessRulesStorage, this.logger),
+        };
+    }
+}
+export const getExpressApiRuleRateLimits = () => {
+    const defaults = {
+        limit: 5,
+        windowSeconds: 10,
+    };
+    const defaultWindowMs = defaults.windowSeconds * 1_000;
+    const rateLimitEntries = Object.entries(accessRuleApiPaths).map(([endpointName, endpointPath]) => [
+        endpointPath,
+        {
+            windowMs: getIntEnvironmentVariable(`PROSOPO_USER_ACCESS_POLICY_RULE_${endpointName}_WINDOW`) || defaultWindowMs,
+            limit: getIntEnvironmentVariable(`PROSOPO_USER_ACCESS_POLICY_RULE_${endpointName}_LIMIT`) || defaults.limit,
+        },
+    ]);
+    return Object.fromEntries(rateLimitEntries);
+};
+const getIntEnvironmentVariable = (variableName) => {
+    const variableValue = process.env[variableName];
+    const numericValue = variableValue
+        ? Number.parseInt(variableValue)
+        : Number.NaN;
+    return Number.isInteger(numericValue) ? numericValue : undefined;
+};
+//# sourceMappingURL=ruleApiRoutes.js.map

package/dist/tsc/api/ruleApiRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ruleApiRoutes.js","sourceRoot":"","sources":["../../../src/api/ruleApiRoutes.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAEvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,MAAM,CAAN,IAAY,kBAYX;AAZD,WAAY,kBAAkB;IAE7B,oFAA8D,CAAA;IAC9D,0FAAoE,CAAA;IACpE,sFAAgE,CAAA;IAEhE,oFAA8D,CAAA;IAC9D,gFAA0D,CAAA;IAC1D,8FAAwE,CAAA;IAExE,sFAAgE,CAAA;IAChE,oFAA8D,CAAA;AAC/D,CAAC,EAZW,kBAAkB,KAAlB,kBAAkB,QAY7B;AAED,MAAM,OAAO,mBAAmB;IAC/B,YACkB,kBAAsC,EACtC,MAAc;QADd,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAEG,SAAS;QACf,OAAO;YACN,GAAG,IAAI,CAAC,mBAAmB,EAAE;YAC7B,GAAG,IAAI,CAAC,iBAAiB,EAAE;YAC3B,GAAG,IAAI,CAAC,kBAAkB,EAAE;SACgB,CAAC;IAC/C,CAAC;IAES,mBAAmB;QAC5B,OAAO;YACN,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,IAAI,sBAAsB,CAC1D,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,MAAM,CACX;YACD,CAAC,kBAAkB,CAAC,aAAa,CAAC,EAAE,IAAI,wBAAwB,CAC/D,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,MAAM,CACX;YACD,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,IAAI,mBAAmB,CACxD,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,MAAM,CACX;SACD,CAAC;IACH,CAAC;IAES,iBAAiB;QAC1B,OAAO;YACN,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,IAAI,kBAAkB,CACtD,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,MAAM,CACX;YACD,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,IAAI,mBAAmB,CACrD,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,MAAM,CACX;YACD,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE,IAAI,qBAAqB,CAC9D,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,MAAM,CACX;SACD,CAAC;IACH,CAAC;IAES,kBAAkB;QAC3B,OAAO;YACN,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,IAAI,mBAAmB,CACxD,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,MAAM,CACX;YACD,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,IAAI,mBAAmB,CACvD,IAAI,CAAC,kBAAkB,EACvB,IAAI,CAAC,MAAM,CACX;SACD,CAAC;IACH,CAAC;CACD;AAED,MAAM,CAAC,MAAM,2BAA2B,GACvC,GAAuC,EAAE;IACxC,MAAM,QAAQ,GAAG;QAChB,KAAK,EAAE,CAAC;QACR,aAAa,EAAE,EAAE;KACjB,CAAC;IAEF,MAAM,eAAe,GAAG,QAAQ,CAAC,aAAa,GAAG,KAAK,CAAC;IAEvD,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAC9D,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC;QACjC,YAAY;QACZ;YACC,QAAQ,EACP,yBAAyB,CACxB,mCAAmC,YAAY,SAAS,CACxD,IAAI,eAAe;YACrB,KAAK,EACJ,yBAAyB,CACxB,mCAAmC,YAAY,QAAQ,CACvD,IAAI,QAAQ,CAAC,KAAK;SACpB;KACD,CACD,CAAC;IAEF,OAAO,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,CACjC,YAAoB,EACC,EAAE;IACvB,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAEhD,MAAM,YAAY,GAAG,aAAa;QACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;QAChC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IAEd,OAAO,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC,CAAC"}

package/dist/tsc/api/rulesApiClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rulesApiClient.d.ts","sourceRoot":"","sources":["../../../src/api/rulesApiClient.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EACN,KAAK,0BAA0B,EAC/B,KAAK,iBAAiB,EAEtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACN,KAAK,uBAAuB,EAE5B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACN,KAAK,UAAU,EACf,KAAK,0BAA0B,EAE/B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,qBAAa,oBAAqB,SAAQ,SAAS;IAG3C,UAAU,CAChB,OAAO,EAAE,sBAAsB,EAAE,EACjC,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,mBAAmB,CAAC;IAQxB,YAAY,CAClB,UAAU,EAAE,gBAAgB,EAC5B,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,mBAAmB,CAAC;IAQxB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAU9C,aAAa,CACzB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,0BAA0B,CAAC;IAezB,SAAS,CACrB,YAAY,EAAE,iBAAiB,EAC/B,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,0BAA0B,CAAC;IAezB,OAAO,CACnB,OAAO,EAAE,sBAAsB,EAAE,EACjC,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,uBAAuB,CAAC;IAiBtB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAQ1D,UAAU,CAChB,UAAU,EAAE,gBAAgB,EAAE,EAC9B,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,mBAAmB,CAAC;IAQ/B,SAAS,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW;CAQlD"}

package/dist/tsc/api/rulesApiClient.js

@@ -0,0 +1,55 @@
+import { ApiClient } from "@prosopo/api";
+import { fetchRulesResponse, } from "#policy/api/read/fetchRules.js";
+import { ruleIdsResponse, } from "#policy/api/read/findRuleIds.js";
+import { missingIdsResponse, } from "#policy/api/read/getMissingIds.js";
+import { accessRuleApiPaths } from "./ruleApiRoutes.js";
+export class AccessRulesApiClient extends ApiClient {
+    deleteMany(filters, jwt) {
+        return this.post(accessRuleApiPaths.DELETE_MANY, filters, this.getAuthHeaders(jwt));
+    }
+    deleteGroups(siteGroups, jwt) {
+        return this.post(accessRuleApiPaths.DELETE_GROUPS, siteGroups, this.getAuthHeaders(jwt));
+    }
+    deleteAll(jwt) {
+        return this.post(accessRuleApiPaths.DELETE_ALL, {}, this.getAuthHeaders(jwt));
+    }
+    async getMissingIds(idsToCheck, jwt) {
+        const endpointResponse = await this.post(accessRuleApiPaths.GET_MISSING_IDS, idsToCheck, this.getAuthHeaders(jwt));
+        const parsedData = missingIdsResponse.safeParse(endpointResponse.data);
+        return {
+            ...endpointResponse,
+            data: parsedData.success ? parsedData.data : undefined,
+        };
+    }
+    async fetchMany(fetchOptions, jwt) {
+        const endpointResponse = await this.post(accessRuleApiPaths.FETCH_MANY, fetchOptions, this.getAuthHeaders(jwt));
+        const parsedData = fetchRulesResponse.safeParse(endpointResponse.data);
+        return {
+            ...endpointResponse,
+            data: parsedData.success ? parsedData.data : undefined,
+        };
+    }
+    async findIds(filters, jwt) {
+        const endpointResponse = await this.post(accessRuleApiPaths.FIND_IDS, filters, this.getAuthHeaders(jwt));
+        const parsedData = ruleIdsResponse.safeParse(endpointResponse.data);
+        return {
+            ...endpointResponse,
+            data: parsedData.success ? parsedData.data : undefined,
+        };
+    }
+    async rehashAll(jwt) {
+        return this.post(accessRuleApiPaths.REHASH_ALL, {}, this.getAuthHeaders(jwt));
+    }
+    insertMany(ruleGroups, jwt) {
+        return this.post(accessRuleApiPaths.INSERT_MANY, ruleGroups, this.getAuthHeaders(jwt));
+    }
+    getAuthHeaders(jwt) {
+        return {
+            headers: {
+                "Prosopo-Site-Key": this.account,
+                Authorization: `Bearer ${jwt}`,
+            },
+        };
+    }
+}
+//# sourceMappingURL=rulesApiClient.js.map

package/dist/tsc/api/rulesApiClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rulesApiClient.js","sourceRoot":"","sources":["../../../src/api/rulesApiClient.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAGN,kBAAkB,GAClB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAEN,eAAe,GACf,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAGN,kBAAkB,GAClB,MAAM,mCAAmC,CAAC;AAG3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD,MAAM,OAAO,oBAAqB,SAAQ,SAAS;IAG3C,UAAU,CAChB,OAAiC,EACjC,GAAW;QAEX,OAAO,IAAI,CAAC,IAAI,CACf,kBAAkB,CAAC,WAAW,EAC9B,OAAO,EACP,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CACxB,CAAC;IACH,CAAC;IAEM,YAAY,CAClB,UAA4B,EAC5B,GAAW;QAEX,OAAO,IAAI,CAAC,IAAI,CACf,kBAAkB,CAAC,aAAa,EAChC,UAAU,EACV,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CACxB,CAAC;IACH,CAAC;IAEM,SAAS,CAAC,GAAW;QAC3B,OAAO,IAAI,CAAC,IAAI,CACf,kBAAkB,CAAC,UAAU,EAC7B,EAAE,EACF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CACxB,CAAC;IACH,CAAC;IAIM,KAAK,CAAC,aAAa,CACzB,UAAsB,EACtB,GAAW;QAEX,MAAM,gBAAgB,GAAwB,MAAM,IAAI,CAAC,IAAI,CAC5D,kBAAkB,CAAC,eAAe,EAClC,UAAU,EACV,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CACxB,CAAC;QAEF,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAEvE,OAAO;YACN,GAAG,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SACtD,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,SAAS,CACrB,YAA+B,EAC/B,GAAW;QAEX,MAAM,gBAAgB,GAAwB,MAAM,IAAI,CAAC,IAAI,CAC5D,kBAAkB,CAAC,UAAU,EAC7B,YAAY,EACZ,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CACxB,CAAC;QAEF,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAEvE,OAAO;YACN,GAAG,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SACtD,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,OAAO,CACnB,OAAiC,EACjC,GAAW;QAEX,MAAM,gBAAgB,GAAwB,MAAM,IAAI,CAAC,IAAI,CAC5D,kBAAkB,CAAC,QAAQ,EAC3B,OAAO,EACP,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CACxB,CAAC;QAEF,MAAM,UAAU,GAAG,eAAe,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAEpE,OAAO;YACN,GAAG,gBAAgB;YACnB,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SACtD,CAAC;IACH,CAAC;IAIM,KAAK,CAAC,SAAS,CAAC,GAAW;QACjC,OAAO,IAAI,CAAC,IAAI,CACf,kBAAkB,CAAC,UAAU,EAC7B,EAAE,EACF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CACxB,CAAC;IACH,CAAC;IAEM,UAAU,CAChB,UAA8B,EAC9B,GAAW;QAEX,OAAO,IAAI,CAAC,IAAI,CACf,kBAAkB,CAAC,WAAW,EAC9B,UAAU,EACV,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CACxB,CAAC;IACH,CAAC;IAES,cAAc,CAAC,GAAW;QACnC,OAAO;YACN,OAAO,EAAE;gBACR,kBAAkB,EAAE,IAAI,CAAC,OAAO;gBAChC,aAAa,EAAE,UAAU,GAAG,EAAE;aAC9B;SACD,CAAC;IACH,CAAC;CACD"}

package/dist/tsc/api/write/.export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../../../src/api/write/.export.ts"],"names":[],"mappings":"AAcA,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/tsc/api/write/.export.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=.export.js.map

package/dist/{api/delete → tsc/api/write}/.export.js.map

@@ -1 +1 @@
-{"version":3,"file":".export.js","sourceRoot":"","sources":["../../../src/api/delete/.export.ts"],"names":[],"mappings":""}
+{"version":3,"file":".export.js","sourceRoot":"","sources":["../../../../src/api/write/.export.ts"],"names":[],"mappings":""}

package/dist/tsc/api/write/insertRules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"insertRules.d.ts","sourceRoot":"","sources":["../../../../src/api/write/insertRules.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,mBAAmB,EAExB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAY,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,UAAU,EAAK,MAAM,KAAK,CAAC;AACvD,OAAO,KAAK,EACX,YAAY,EAEZ,WAAW,EACX,qBAAqB,EACrB,SAAS,EACT,MAAM,iBAAiB,CAAC;AAOzB,OAAO,EACN,KAAK,cAAc,EAEnB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAEX,iBAAiB,EACjB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,MAAM,gBAAgB,GAAG,qBAAqB,GAAG;IACtD,YAAY,EAAE,YAAY,CAAC;IAC3B,UAAU,EAAE,cAAc,EAAE,CAAC;IAG7B,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,KAAK,sBAAsB,GAAG,gBAAgB,GAAG;IAChD,UAAU,EAAE,SAAS,EAAE,CAAC;CACxB,CAAC;AAEF,KAAK,sBAAsB,GAAG,sBAAsB,EAAE,CAAC;AAIvD,KAAK,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAE1E,qBAAa,mBAAoB,YAAW,WAAW,CAAC,iBAAiB,CAAC;IAExE,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,iBAAiB,EAAE,iBAAiB,EACpC,MAAM,EAAE,MAAM;IAGzB,oBAAoB,IAAI,iBAAiB;IAa1C,cAAc,CACnB,IAAI,EAAE,sBAAsB,EAC5B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,mBAAmB,CAAC;cAwDf,gBAAgB,CAC/B,MAAM,EAAE,sBAAsB,GAC5B,OAAO,CAAC,MAAM,EAAE,CAAC;cAQJ,gBAAgB,CAC/B,KAAK,EAAE,sBAAsB,GAC3B,OAAO,CAAC,MAAM,EAAE,CAAC;CAsCpB"}

package/dist/tsc/api/write/insertRules.js

@@ -0,0 +1,107 @@
+import { ApiEndpointResponseStatus, } from "@prosopo/api-route";
+import { LogLevel } from "@prosopo/logger";
+import { z } from "zod";
+import { accessPolicyInput, policyScopeExclusionsInput, policyScopeInput, sanitizeAccessPolicy, } from "#policy/ruleInput/policyInput.js";
+import { userScopeInput, } from "#policy/ruleInput/userScopeInput.js";
+export class InsertRulesEndpoint {
+    constructor(accessRulesWriter, logger) {
+        this.accessRulesWriter = accessRulesWriter;
+        this.logger = logger;
+    }
+    getRequestArgsSchema() {
+        return z.array(z.object({
+            accessPolicy: accessPolicyInput,
+            policyScopes: z.array(policyScopeInput).optional(),
+            excludedClientIds: policyScopeExclusionsInput.shape.excludedClientIds,
+            groupId: z.string().optional(),
+            userScopes: z.array(userScopeInput),
+            expiresUnixTimestamp: z.number().optional(),
+        }));
+    }
+    async processRequest(args, logger) {
+        const log = logger ?? this.logger;
+        const timeoutPromise = new Promise((resolve) => {
+            setTimeout(() => {
+                resolve({
+                    status: ApiEndpointResponseStatus.PROCESSING,
+                });
+            }, 5000);
+        });
+        const userScopesCount = args.reduce((userScopesCount, group) => userScopesCount + group.userScopes.length, 0);
+        const createRulesPromise = this.createRuleGroups(args)
+            .then((insertedIds) => {
+            log.info(() => ({
+                msg: "Endpoint inserted access rules",
+                data: {
+                    userScopesCount: userScopesCount,
+                    insertedCount: insertedIds.length,
+                    uniqueIdsCount: new Set(insertedIds).size,
+                },
+            }));
+            log.debug(() => ({
+                msg: "Inserted access rules details",
+                data: {
+                    insertedIds,
+                    input: args,
+                },
+            }));
+            return {
+                status: ApiEndpointResponseStatus.SUCCESS,
+            };
+        })
+            .catch((error) => {
+            if (LogLevel.enum.debug === log.getLogLevel()) {
+                log.error(() => ({
+                    err: error,
+                    data: { args },
+                    msg: "Failed to insert access rules",
+                }));
+            }
+            return {
+                status: ApiEndpointResponseStatus.FAIL,
+            };
+        });
+        return Promise.race([timeoutPromise, createRulesPromise]);
+    }
+    async createRuleGroups(groups) {
+        const ruleIdPromises = groups.map((group) => this.createRulesGroup(group));
+        const ruleIdSets = await Promise.all(ruleIdPromises);
+        return ruleIdSets.flat();
+    }
+    async createRulesGroup(group) {
+        const ruleEntries = [];
+        const policyScopes = group.policyScopes || [];
+        const sanitizedPolicy = sanitizeAccessPolicy(group.accessPolicy);
+        for (const userScope of group.userScopes) {
+            const ruleBase = {
+                ...sanitizedPolicy,
+                ...userScope,
+                ...(group.groupId ? { groupId: group.groupId } : {}),
+            };
+            if (policyScopes.length > 0) {
+                for (const policyScope of policyScopes) {
+                    ruleEntries.push({
+                        rule: {
+                            ...ruleBase,
+                            ...policyScope,
+                        },
+                        expiresUnixTimestamp: group.expiresUnixTimestamp,
+                    });
+                }
+            }
+            else {
+                ruleEntries.push({
+                    rule: {
+                        ...ruleBase,
+                        ...(group.excludedClientIds && {
+                            excludedClientIds: group.excludedClientIds,
+                        }),
+                    },
+                    expiresUnixTimestamp: group.expiresUnixTimestamp,
+                });
+            }
+        }
+        return this.accessRulesWriter.insertRules(ruleEntries);
+    }
+}
+//# sourceMappingURL=insertRules.js.map

package/dist/tsc/api/write/insertRules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"insertRules.js","sourceRoot":"","sources":["../../../../src/api/write/insertRules.ts"],"names":[],"mappings":"AAcA,OAAO,EAGN,yBAAyB,GACzB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,QAAQ,EAAe,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAiC,CAAC,EAAE,MAAM,KAAK,CAAC;AAQvD,OAAO,EACN,iBAAiB,EACjB,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,GACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAEN,cAAc,GACd,MAAM,qCAAqC,CAAC;AA0B7C,MAAM,OAAO,mBAAmB;IAC/B,YACkB,iBAAoC,EACpC,MAAc;QADd,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAEG,oBAAoB;QAC1B,OAAO,CAAC,CAAC,KAAK,CACb,CAAC,CAAC,MAAM,CAAC;YACR,YAAY,EAAE,iBAAiB;YAC/B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;YAClD,iBAAiB,EAAE,0BAA0B,CAAC,KAAK,CAAC,iBAAiB;YACrE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC9B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;YACnC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SACP,CAAC,CACtC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CACnB,IAA4B,EAC5B,MAAe;QAEf,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;QAElC,MAAM,cAAc,GAAG,IAAI,OAAO,CAAsB,CAAC,OAAO,EAAE,EAAE;YACnE,UAAU,CAAC,GAAG,EAAE;gBACf,OAAO,CAAC;oBACP,MAAM,EAAE,yBAAyB,CAAC,UAAU;iBAC5C,CAAC,CAAC;YACJ,CAAC,EAAE,IAAI,CAAC,CAAC;QACV,CAAC,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAClC,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,CAAC,eAAe,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,EACrE,CAAC,CACD,CAAC;QAEF,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;aACpD,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;YACrB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACf,GAAG,EAAE,gCAAgC;gBACrC,IAAI,EAAE;oBACL,eAAe,EAAE,eAAe;oBAChC,aAAa,EAAE,WAAW,CAAC,MAAM;oBACjC,cAAc,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI;iBACzC;aACD,CAAC,CAAC,CAAC;YAEJ,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBAChB,GAAG,EAAE,+BAA+B;gBACpC,IAAI,EAAE;oBACL,WAAW;oBACX,KAAK,EAAE,IAAI;iBACX;aACD,CAAC,CAAC,CAAC;YAEJ,OAAO;gBACN,MAAM,EAAE,yBAAyB,CAAC,OAAO;aACzC,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAChB,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC/C,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBAChB,GAAG,EAAE,KAAK;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE;oBACd,GAAG,EAAE,+BAA+B;iBACpC,CAAC,CAAC,CAAC;YACL,CAAC;YACD,OAAO;gBACN,MAAM,EAAE,yBAAyB,CAAC,IAAI;aACtC,CAAC;QACH,CAAC,CAAC,CAAC;QAGJ,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC3D,CAAC;IAES,KAAK,CAAC,gBAAgB,CAC/B,MAA8B;QAE9B,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;QAE3E,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAErD,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAES,KAAK,CAAC,gBAAgB,CAC/B,KAA6B;QAE7B,MAAM,WAAW,GAAsB,EAAE,CAAC;QAC1C,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;QAE9C,MAAM,eAAe,GAAG,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAEjE,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAe;gBAC5B,GAAG,eAAe;gBAClB,GAAG,SAAS;gBACZ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpD,CAAC;YAEF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;oBACxC,WAAW,CAAC,IAAI,CAAC;wBAChB,IAAI,EAAE;4BACL,GAAG,QAAQ;4BACX,GAAG,WAAW;yBACd;wBACD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;qBAChD,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;iBAAM,CAAC;gBACP,WAAW,CAAC,IAAI,CAAC;oBAChB,IAAI,EAAE;wBACL,GAAG,QAAQ;wBACX,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI;4BAC9B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;yBAC1C,CAAC;qBACF;oBACD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;iBAChD,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,OAAO,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACxD,CAAC;CACD"}

package/dist/tsc/api/write/rehashRules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rehashRules.d.ts","sourceRoot":"","sources":["../../../../src/api/write/rehashRules.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,mBAAmB,EAExB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE,qBAAa,mBAAoB,YAAW,WAAW,CAAC,SAAS,CAAC;IAEhE,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,kBAAkB,EAAE,kBAAkB,EACtC,MAAM,EAAE,MAAM;IAGzB,oBAAoB,IAAI,SAAS;IAElC,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAsDnE"}

package/dist/tsc/api/write/rehashRules.js

@@ -0,0 +1,55 @@
+import { ApiEndpointResponseStatus, } from "@prosopo/api-route";
+export class RehashRulesEndpoint {
+    constructor(accessRulesStorage, logger) {
+        this.accessRulesStorage = accessRulesStorage;
+        this.logger = logger;
+    }
+    getRequestArgsSchema() { }
+    async processRequest(logger) {
+        const log = logger ?? this.logger;
+        await this.accessRulesStorage.fetchAllRuleIds(async (ruleIds) => {
+            log.info(() => ({
+                msg: "Fetched rule ids batch",
+                data: {
+                    count: ruleIds.length,
+                    ruleIds,
+                },
+            }));
+            const ruleEntries = await this.accessRulesStorage.fetchRules(ruleIds);
+            log.info(() => ({
+                msg: "Fetched rules",
+                data: {
+                    count: ruleEntries.length,
+                },
+            }));
+            if (ruleEntries.length !== ruleIds.length) {
+                log.warn(() => ({
+                    msg: "Fetched rules count is not equal to the requested count",
+                    data: {
+                        fetchedCount: ruleEntries.length,
+                        requestedCount: ruleIds.length,
+                    },
+                }));
+            }
+            await this.accessRulesStorage.deleteRules(ruleIds);
+            log.info(() => ({
+                msg: "Deleted rules",
+                data: {
+                    count: ruleIds.length,
+                },
+            }));
+            await this.accessRulesStorage.insertRules(ruleEntries);
+            log.info(() => ({
+                msg: "Inserted rules",
+                data: {
+                    count: ruleEntries.length,
+                },
+            }));
+        });
+        return {
+            status: ApiEndpointResponseStatus.SUCCESS,
+            data: {},
+        };
+    }
+}
+//# sourceMappingURL=rehashRules.js.map

package/dist/tsc/api/write/rehashRules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rehashRules.js","sourceRoot":"","sources":["../../../../src/api/write/rehashRules.ts"],"names":[],"mappings":"AAcA,OAAO,EAGN,yBAAyB,GACzB,MAAM,oBAAoB,CAAC;AAI5B,MAAM,OAAO,mBAAmB;IAC/B,YACkB,kBAAsC,EACtC,MAAc;QADd,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAEG,oBAAoB,KAAe,CAAC;IAE3C,KAAK,CAAC,cAAc,CAAC,MAAe;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;QAClC,MAAM,IAAI,CAAC,kBAAkB,CAAC,eAAe,CAAC,KAAK,EAAE,OAAiB,EAAE,EAAE;YACzE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACf,GAAG,EAAE,wBAAwB;gBAC7B,IAAI,EAAE;oBACL,KAAK,EAAE,OAAO,CAAC,MAAM;oBACrB,OAAO;iBACP;aACD,CAAC,CAAC,CAAC;YAEJ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAEtE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACf,GAAG,EAAE,eAAe;gBACpB,IAAI,EAAE;oBACL,KAAK,EAAE,WAAW,CAAC,MAAM;iBACzB;aACD,CAAC,CAAC,CAAC;YAEJ,IAAI,WAAW,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC3C,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBACf,GAAG,EAAE,yDAAyD;oBAC9D,IAAI,EAAE;wBACL,YAAY,EAAE,WAAW,CAAC,MAAM;wBAChC,cAAc,EAAE,OAAO,CAAC,MAAM;qBAC9B;iBACD,CAAC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAEnD,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACf,GAAG,EAAE,eAAe;gBACpB,IAAI,EAAE;oBACL,KAAK,EAAE,OAAO,CAAC,MAAM;iBACrB;aACD,CAAC,CAAC,CAAC;YAEJ,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YAEvD,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACf,GAAG,EAAE,gBAAgB;gBACrB,IAAI,EAAE;oBACL,KAAK,EAAE,WAAW,CAAC,MAAM;iBACzB;aACD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO;YACN,MAAM,EAAE,yBAAyB,CAAC,OAAO;YACzC,IAAI,EAAE,EAAE;SACR,CAAC;IACH,CAAC;CACD"}

package/dist/tsc/classifyBrowser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifyBrowser.d.ts","sourceRoot":"","sources":["../../src/classifyBrowser.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,aAAa,mIAYhB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AASzD,eAAO,MAAM,eAAe,cAAe,MAAM,GAAG,SAAS,KAAG,WAkC/D,CAAC"}

package/dist/tsc/classifyBrowser.js

@@ -0,0 +1,48 @@
+export const BROWSER_NAMES = [
+    "chrome",
+    "safari",
+    "firefox",
+    "edge",
+    "opera",
+    "samsung_internet",
+    "wechat",
+    "facebook",
+    "instagram",
+    "ie",
+    "unknown",
+];
+export const classifyBrowser = (userAgent) => {
+    const ua = (userAgent || "").toLowerCase();
+    if (/\bedg(?:e|a|ios)?\//.test(ua)) {
+        return "edge";
+    }
+    if (/samsungbrowser/.test(ua)) {
+        return "samsung_internet";
+    }
+    if (/\bopr\/|opera/.test(ua)) {
+        return "opera";
+    }
+    if (/micromessenger/.test(ua)) {
+        return "wechat";
+    }
+    if (/fban|fbav|fbios/.test(ua)) {
+        return "facebook";
+    }
+    if (/instagram/.test(ua)) {
+        return "instagram";
+    }
+    if (/firefox|fxios/.test(ua)) {
+        return "firefox";
+    }
+    if (/msie|trident/.test(ua)) {
+        return "ie";
+    }
+    if (/\bchrome\/|\bcrios\//.test(ua)) {
+        return "chrome";
+    }
+    if (/safari\//.test(ua)) {
+        return "safari";
+    }
+    return "unknown";
+};
+//# sourceMappingURL=classifyBrowser.js.map

package/dist/tsc/classifyBrowser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifyBrowser.js","sourceRoot":"","sources":["../../src/classifyBrowser.ts"],"names":[],"mappings":"AAmBA,MAAM,CAAC,MAAM,aAAa,GAAG;IAC5B,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;IACN,OAAO;IACP,kBAAkB;IAClB,QAAQ;IACR,UAAU;IACV,WAAW;IACX,IAAI;IACJ,SAAS;CACA,CAAC;AAWX,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,SAA6B,EAAe,EAAE;IAC7E,MAAM,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAE3C,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC;IACf,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/B,OAAO,kBAAkB,CAAC;IAC3B,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC;IAChB,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/B,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAChC,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1B,OAAO,WAAW,CAAC;IACpB,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACrC,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACzB,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC,CAAC"}

package/dist/tsc/classifyOs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifyOs.d.ts","sourceRoot":"","sources":["../../src/classifyOs.ts"],"names":[],"mappings":"AA0BA,eAAO,MAAM,QAAQ,qEAOX,CAAC;AAEX,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;AAmB/C,eAAO,MAAM,UAAU,cAAe,MAAM,GAAG,SAAS,KAAG,MAmB1D,CAAC"}

package/dist/tsc/classifyOs.js

@@ -0,0 +1,28 @@
+export const OS_NAMES = [
+    "windows",
+    "macos",
+    "ios",
+    "android",
+    "linux",
+    "unknown",
+];
+export const classifyOs = (userAgent) => {
+    const ua = (userAgent || "").toLowerCase();
+    if (/iphone|ipad|ipod/.test(ua)) {
+        return "ios";
+    }
+    if (/android/.test(ua)) {
+        return "android";
+    }
+    if (/windows/.test(ua)) {
+        return "windows";
+    }
+    if (/macintosh|mac os/.test(ua)) {
+        return "macos";
+    }
+    if (/linux/.test(ua)) {
+        return "linux";
+    }
+    return "unknown";
+};
+//# sourceMappingURL=classifyOs.js.map

package/dist/tsc/classifyOs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifyOs.js","sourceRoot":"","sources":["../../src/classifyOs.ts"],"names":[],"mappings":"AA0BA,MAAM,CAAC,MAAM,QAAQ,GAAG;IACvB,SAAS;IACT,OAAO;IACP,KAAK;IACL,SAAS;IACT,OAAO;IACP,SAAS;CACA,CAAC;AAqBX,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,SAA6B,EAAU,EAAE;IACnE,MAAM,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAE3C,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC;IAChB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACtB,OAAO,OAAO,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC,CAAC"}

package/dist/tsc/headerMatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headerMatch.d.ts","sourceRoot":"","sources":["../../src/headerMatch.ts"],"names":[],"mappings":"AAiCA,eAAO,MAAM,gBAAgB,+FAOnB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,eAAO,MAAM,gBAAgB,UACrB,MAAM,GAAG,SAAS,KACvB,KAAK,IAAI,cAEgD,CAAC;AAgB7D,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAQtC,eAAO,MAAM,qBAAqB,WAAY,aAAa,CAAC,MAAM,CAAC,KAAG,MAC/C,CAAC;AAYxB,eAAO,MAAM,qBAAqB,UAAW,MAAM,KAAG,MAAM,EAAE,GAAG,SAmBhE,CAAC;AAYF,eAAO,MAAM,uBAAuB,eACvB,MAAM,YACR,cAAc,SACjB,MAAM,WACJ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC7B,OA6BF,CAAC;AASF,eAAO,MAAM,uBAAuB,SAC7B;IACL,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB,WACQ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC7B,OAaF,CAAC"}

package/dist/tsc/headerMatch.js

@@ -0,0 +1,68 @@
+export const HEADER_OPERATORS = [
+    "equals",
+    "contains",
+    "notEquals",
+    "notContains",
+    "notEqualsAny",
+    "notContainsAny",
+];
+export const isHeaderOperator = (value) => value !== undefined &&
+    HEADER_OPERATORS.includes(value);
+export const HEADER_RULE_MARKER = "1";
+export const encodeHeaderValueList = (values) => JSON.stringify(values);
+export const decodeHeaderValueList = (value) => {
+    if (!value.trimStart().startsWith("[")) {
+        return [value];
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch {
+        return undefined;
+    }
+    if (!Array.isArray(parsed) ||
+        parsed.length === 0 ||
+        !parsed.every((entry) => typeof entry === "string")) {
+        return undefined;
+    }
+    return parsed;
+};
+export const evaluateHeaderCondition = (headerName, operator, value, headers) => {
+    const actual = headers[headerName.toLowerCase()];
+    switch (operator) {
+        case "equals":
+            return actual !== undefined && actual === value;
+        case "contains":
+            return actual?.includes(value) ?? false;
+        case "notEquals":
+            return actual === undefined || actual !== value;
+        case "notContains":
+            return actual === undefined || !actual.includes(value);
+        case "notEqualsAny": {
+            const values = decodeHeaderValueList(value);
+            if (values === undefined) {
+                return false;
+            }
+            return actual === undefined || !values.includes(actual);
+        }
+        case "notContainsAny": {
+            const values = decodeHeaderValueList(value);
+            if (values === undefined) {
+                return false;
+            }
+            return (actual === undefined ||
+                !values.some((candidate) => actual.includes(candidate)));
+        }
+    }
+};
+export const accessRuleHeaderMatches = (rule, headers) => {
+    if (rule.headerName === undefined) {
+        return true;
+    }
+    if (!isHeaderOperator(rule.headerOperator)) {
+        return false;
+    }
+    return evaluateHeaderCondition(rule.headerName, rule.headerOperator, rule.headerValue ?? "", headers);
+};
+//# sourceMappingURL=headerMatch.js.map

package/dist/tsc/headerMatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headerMatch.js","sourceRoot":"","sources":["../../src/headerMatch.ts"],"names":[],"mappings":"AAiCA,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC/B,QAAQ;IACR,UAAU;IACV,WAAW;IACX,aAAa;IACb,cAAc;IACd,gBAAgB;CACP,CAAC;AAIX,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC/B,KAAyB,EACC,EAAE,CAC5B,KAAK,KAAK,SAAS;IAClB,gBAA0C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAgB7D,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAQtC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,MAA6B,EAAU,EAAE,CAC9E,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAYxB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAa,EAAwB,EAAE;IAC5E,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAExC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IACC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACtB,MAAM,CAAC,MAAM,KAAK,CAAC;QACnB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EACnE,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC,CAAC;AAYF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACtC,UAAkB,EAClB,QAAwB,EACxB,KAAa,EACb,OAA+B,EACrB,EAAE;IACZ,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD,QAAQ,QAAQ,EAAE,CAAC;QAClB,KAAK,QAAQ;YACZ,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC;QACjD,KAAK,UAAU;YACd,OAAO,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;QACzC,KAAK,WAAW;YACf,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,CAAC;QACjD,KAAK,aAAa;YACjB,OAAO,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxD,KAAK,cAAc,CAAC,CAAC,CAAC;YACrB,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,KAAK,CAAC;YACd,CAAC;YACD,OAAO,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACvB,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,KAAK,CAAC;YACd,CAAC;YACD,OAAO,CACN,MAAM,KAAK,SAAS;gBACpB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CACvD,CAAC;QACH,CAAC;IACF,CAAC;AACF,CAAC,CAAC;AASF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACtC,IAIC,EACD,OAA+B,EACrB,EAAE;IACZ,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,uBAAuB,CAC7B,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,WAAW,IAAI,EAAE,EACtB,OAAO,CACP,CAAC;AACH,CAAC,CAAC"}

package/dist/tsc/matchedRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matchedRule.d.ts","sourceRoot":"","sources":["../../src/matchedRule.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,iBAAiB,EAAwB,MAAM,gBAAgB,CAAC;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAwElD,eAAO,MAAM,mBAAmB,SAAU,UAAU,KAAG,iBAWrD,CAAC"}

package/dist/tsc/matchedRule.js

@@ -0,0 +1,47 @@
+import { getUserScopeRecordFromAccessRuleRecord, userScopeRecordFields, } from "#policy/ruleRecord.js";
+import { makeAccessRuleHash, transformAccessRuleIntoRecord, } from "#policy/transformRule.js";
+const MAX_CONDITION_VALUE_LENGTH = 256;
+const toCondition = (field, value) => {
+    if (value === undefined || value === null)
+        return undefined;
+    const asString = typeof value === "string" ? value : String(value);
+    if (asString.length === 0)
+        return undefined;
+    return asString.length > MAX_CONDITION_VALUE_LENGTH
+        ? {
+            field,
+            value: `${asString.slice(0, MAX_CONDITION_VALUE_LENGTH)}…`,
+            truncated: true,
+        }
+        : { field, value: asString };
+};
+const deriveConditions = (rule) => {
+    let scope;
+    try {
+        scope = getUserScopeRecordFromAccessRuleRecord(transformAccessRuleIntoRecord(rule));
+    }
+    catch {
+        return [];
+    }
+    const conditions = [];
+    for (const field of userScopeRecordFields) {
+        const condition = toCondition(field, scope[field]);
+        if (condition) {
+            conditions.push(condition);
+        }
+    }
+    return conditions;
+};
+export const describeMatchedRule = (rule) => ({
+    ruleHash: makeAccessRuleHash(rule),
+    policyType: rule.type,
+    conditions: deriveConditions(rule),
+    ...(rule.description !== undefined && { description: rule.description }),
+    ...(rule.captchaType !== undefined && { captchaType: rule.captchaType }),
+    ...(rule.deferToVerify !== undefined && {
+        deferToVerify: rule.deferToVerify,
+    }),
+    ...(rule.groupId !== undefined && { ruleGroupId: rule.groupId }),
+    ...(rule.clientId !== undefined && { clientId: rule.clientId }),
+});
+//# sourceMappingURL=matchedRule.js.map

package/dist/tsc/matchedRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"matchedRule.js","sourceRoot":"","sources":["../../src/matchedRule.ts"],"names":[],"mappings":"AAgBA,OAAO,EAEN,sCAAsC,EACtC,qBAAqB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACN,kBAAkB,EAClB,6BAA6B,GAC7B,MAAM,0BAA0B,CAAC;AAMlC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAEvC,MAAM,WAAW,GAAG,CACnB,KAA2B,EAC3B,KAAc,EACqB,EAAE;IACrC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAE5D,MAAM,QAAQ,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,QAAQ,CAAC,MAAM,GAAG,0BAA0B;QAClD,CAAC,CAAC;YACA,KAAK;YACL,KAAK,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,0BAA0B,CAAC,GAAG;YAC1D,SAAS,EAAE,IAAI;SACf;QACF,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC,CAAC;AAWF,MAAM,gBAAgB,GAAG,CAAC,IAAgB,EAA0B,EAAE;IACrE,IAAI,KAAqD,CAAC;IAC1D,IAAI,CAAC;QACJ,KAAK,GAAG,sCAAsC,CAC7C,6BAA6B,CAAC,IAAI,CAAC,CACnC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QAIR,OAAO,EAAE,CAAC;IACX,CAAC;IAED,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,qBAAqB,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACnD,IAAI,SAAS,EAAE,CAAC;YACf,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;IACF,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC,CAAC;AAQF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAgB,EAAqB,EAAE,CAAC,CAAC;IAC5E,QAAQ,EAAE,kBAAkB,CAAC,IAAI,CAAC;IAClC,UAAU,EAAE,IAAI,CAAC,IAAI;IACrB,UAAU,EAAE,gBAAgB,CAAC,IAAI,CAAC;IAClC,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;IACxE,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;IACxE,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI;QACvC,aAAa,EAAE,IAAI,CAAC,aAAa;KACjC,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAChE,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;CAC/D,CAAC,CAAC"}

package/dist/tsc/mongoose/.export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../../src/mongoose/.export.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/tsc/mongoose/.export.js

@@ -0,0 +1,2 @@
+export { accessRuleMongooseSchema } from "./mongooseRuleSchema.js";
+//# sourceMappingURL=.export.js.map

package/dist/tsc/mongoose/.export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":".export.js","sourceRoot":"","sources":["../../../src/mongoose/.export.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/tsc/mongoose/mongooseRuleSchema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongooseRuleSchema.d.ts","sourceRoot":"","sources":["../../../src/mongoose/mongooseRuleSchema.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEjD,OAAO,KAAK,EACX,gBAAgB,EAIhB,MAAM,uBAAuB,CAAC;AA+C/B,eAAO,MAAM,wBAAwB,EAAE,gBAAgB,CAAC,gBAAgB,CAQtC,CAAC"}