@prosopo/user-access-policy 3.15.7 → 3.15.8

package/dist/tsc/transformRule.js

@@ -0,0 +1,59 @@
+import crypto from "node:crypto";
+import { IpAddress, IpRange } from "cidr-calc";
+import { Address4, Address6 } from "ip-address";
+import { z } from "zod";
+import { accessPolicyInputShape, policyScopeExclusionsInput, policyScopeInput, } from "./ruleInput/policyInput.js";
+import { accessRuleInput } from "./ruleInput/ruleInput.js";
+import { userScopeSchema } from "./ruleInput/userScopeInput.js";
+const RULE_HASH_ALGORITHM = "md5";
+const MAX_IPV4_NUMERIC = (1n << 32n) - 1n;
+const UNHASHED_RULE_FIELDS = new Set([
+    "excludedClientIds",
+]);
+export const makeAccessRuleHash = (rule) => {
+    const valueProperties = Object.entries(rule).filter(([key, value]) => "undefined" !== typeof value && !UNHASHED_RULE_FIELDS.has(key));
+    const orderedProperties = valueProperties.sort();
+    const objectToHash = Object.fromEntries(orderedProperties);
+    return hashObject(objectToHash, RULE_HASH_ALGORITHM);
+};
+export const transformAccessRuleRecordIntoRule = (ruleRecord) => accessRuleInput.parse(ruleRecord);
+export const transformAccessRuleIntoRecord = (rule) => accessRuleToRecordScheme.parse(rule);
+const accessRuleToRecordScheme = z
+    .object({
+    ...accessPolicyInputShape.shape,
+    ...policyScopeInput.shape,
+    ...policyScopeExclusionsInput.shape,
+    ...userScopeSchema.shape,
+    groupId: z.coerce.string().optional(),
+})
+    .transform((ruleInput) => {
+    const { groupId, numericIp, numericIpMaskMin, numericIpMaskMax, userAgentHash, ...rule } = ruleInput;
+    const record = rule;
+    if ("string" === typeof groupId) {
+        record.ruleGroupId = groupId;
+    }
+    if ("string" === typeof userAgentHash) {
+        record.userAgent = userAgentHash;
+    }
+    if ("bigint" === typeof numericIp) {
+        record.ip = getStringIpFromNumeric(numericIp);
+    }
+    if ("bigint" === typeof numericIpMaskMin &&
+        "bigint" === typeof numericIpMaskMax) {
+        record.ipMask = getCidrFromNumericIpRange(numericIpMaskMin, numericIpMaskMax);
+    }
+    return record;
+});
+const hashObject = (object, algorithm) => crypto
+    .createHash(algorithm)
+    .update(JSON.stringify(object, (key, value) => "bigint" === typeof value ? value.toString() : value))
+    .digest("hex");
+const getStringIpFromNumeric = (numericIp) => numericIp > MAX_IPV4_NUMERIC
+    ? Address6.fromBigInt(numericIp).correctForm()
+    : Address4.fromInteger(Number(numericIp)).address;
+export const getCidrFromNumericIpRange = (startIp, endIp) => {
+    const ipRange = new IpRange(IpAddress.of(getStringIpFromNumeric(startIp)), IpAddress.of(getStringIpFromNumeric(endIp)));
+    const cidr = ipRange.toCidrs()[0];
+    return cidr ? `${cidr.prefix.toString()}/${cidr.prefixLen}` : undefined;
+};
+//# sourceMappingURL=transformRule.js.map

package/dist/tsc/transformRule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transformRule.js","sourceRoot":"","sources":["../../src/transformRule.ts"],"names":[],"mappings":"AAcA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACN,sBAAsB,EACtB,0BAA0B,EAC1B,gBAAgB,GAChB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAGhE,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAGlC,MAAM,gBAAgB,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;AAK1C,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IACzD,mBAAmB;CACY,CAAC,CAAC;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAgB,EAAU,EAAE;IAE9D,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAChB,WAAW,KAAK,OAAO,KAAK,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAC/D,CAAC;IAGF,MAAM,iBAAiB,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC;IAEjD,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAE3D,OAAO,UAAU,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;AACtD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAChD,UAA4B,EACf,EAAE,CAEf,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAEnC,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC5C,IAAgB,EACG,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAE5D,MAAM,wBAAwB,GAAG,CAAC;KAChC,MAAM,CAAC;IACP,GAAG,sBAAsB,CAAC,KAAK;IAC/B,GAAG,gBAAgB,CAAC,KAAK;IACzB,GAAG,0BAA0B,CAAC,KAAK;IACnC,GAAG,eAAe,CAAC,KAAK;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,SAAS,CAAC,CAAC,SAAqB,EAAoB,EAAE;IAEtD,MAAM,EACL,OAAO,EACP,SAAS,EACT,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,GAAG,IAAI,EACP,GAAG,SAAS,CAAC;IAEd,MAAM,MAAM,GAAqB,IAAI,CAAC;IAEtC,IAAI,QAAQ,KAAK,OAAO,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC;IAC9B,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,aAAa,EAAE,CAAC;QACvC,MAAM,CAAC,SAAS,GAAG,aAAa,CAAC;IAClC,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,EAAE,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IAED,IACC,QAAQ,KAAK,OAAO,gBAAgB;QACpC,QAAQ,KAAK,OAAO,gBAAgB,EACnC,CAAC;QACF,MAAM,CAAC,MAAM,GAAG,yBAAyB,CACxC,gBAAgB,EAChB,gBAAgB,CAChB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC,CAAC,CAAC;AAEJ,MAAM,UAAU,GAAG,CAClB,MAA+B,EAC/B,SAAiB,EACR,EAAE,CACX,MAAM;KACJ,UAAU,CAAC,SAAS,CAAC;KACrB,MAAM,CACN,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAErC,QAAQ,KAAK,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CACpD,CACD;KACA,MAAM,CAAC,KAAK,CAAC,CAAC;AAEjB,MAAM,sBAAsB,GAAG,CAAC,SAAiB,EAAU,EAAE,CAC5D,SAAS,GAAG,gBAAgB;IAC3B,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;IAC9C,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAEpD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACxC,OAAe,EACf,KAAa,EACQ,EAAE;IACvB,MAAM,OAAO,GAAG,IAAI,OAAO,CAC1B,SAAS,CAAC,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,EAC7C,SAAS,CAAC,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAC3C,CAAC;IAEF,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAElC,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACzE,CAAC,CAAC"}

package/dist/types/.export.d.ts

@@ -0,0 +1,10 @@
+export * from "./ruleInput/.export.js";
+export { makeAccessRuleHash, transformAccessRuleRecordIntoRule, transformAccessRuleIntoRecord, } from "./transformRule.js";
+export { type AccessRule, type AccessPolicy, type PolicyScope, type UserScope, AccessPolicyType, } from "./rule.js";
+export { describeMatchedRule } from "./matchedRule.js";
+export { classifyOs, OS_NAMES, type OsName } from "./classifyOs.js";
+export { classifyBrowser, BROWSER_NAMES, type BrowserName, } from "./classifyBrowser.js";
+export { HEADER_OPERATORS, type HeaderOperator, HEADER_RULE_MARKER, isHeaderOperator, evaluateHeaderCondition, accessRuleHeaderMatches, encodeHeaderValueList, decodeHeaderValueList, } from "./headerMatch.js";
+export { type AccessRulesFilter, type AccessRulesStorage, type AccessRuleEntry, FilterScopeMatch, } from "./rulesStorage.js";
+export { type AccessRuleRecord, type UserScopeRecord, type UserScopeRecordField, userScopeRecordFields, getUserScopeRecordFromAccessRuleRecord, } from "./ruleRecord.js";
+//# sourceMappingURL=.export.d.ts.map

package/dist/types/.export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../src/.export.ts"],"names":[],"mappings":"AAcA,cAAc,wBAAwB,CAAC;AAEvC,OAAO,EACN,kBAAkB,EAClB,iCAAiC,EACjC,6BAA6B,GAC7B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACN,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,gBAAgB,GAChB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EACN,eAAe,EACf,aAAa,EACb,KAAK,WAAW,GAChB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACN,gBAAgB,EAChB,KAAK,cAAc,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,EACvB,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,GACrB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACN,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,gBAAgB,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACN,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,qBAAqB,EACrB,sCAAsC,GACtC,MAAM,iBAAiB,CAAC"}

package/dist/types/api/.export.d.ts

@@ -0,0 +1,7 @@
+export * from "./delete/.export.js";
+export * from "./read/.export.js";
+export * from "./write/.export.js";
+export { accessRuleApiPaths, getExpressApiRuleRateLimits, } from "./ruleApiRoutes.js";
+export { AccessRulesApiClient } from "./rulesApiClient.js";
+export { AccessRuleApiRoutes } from "./ruleApiRoutes.js";
+//# sourceMappingURL=.export.d.ts.map

package/dist/types/api/.export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../../src/api/.export.ts"],"names":[],"mappings":"AAcA,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AAEnC,OAAO,EACN,kBAAkB,EAClB,2BAA2B,GAC3B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/types/api/accessRulesApiClient.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=accessRulesApiClient.d.ts.map

package/dist/types/api/accessRulesApiClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessRulesApiClient.d.ts","sourceRoot":"","sources":["../../../src/api/accessRulesApiClient.ts"],"names":[],"mappings":""}

package/dist/types/api/delete/.export.d.ts

@@ -0,0 +1,2 @@
+export type { DeleteSiteGroup, DeleteSiteGroups, } from "./deleteRuleGroups.js";
+//# sourceMappingURL=.export.d.ts.map

package/dist/types/api/delete/.export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../../../src/api/delete/.export.ts"],"names":[],"mappings":"AAcA,YAAY,EACX,eAAe,EACf,gBAAgB,GAChB,MAAM,uBAAuB,CAAC"}

package/dist/types/api/delete/deleteAllRules.d.ts

@@ -0,0 +1,11 @@
+import { type ApiEndpoint, type ApiEndpointResponse } from "@prosopo/api-route";
+import type { Logger } from "@prosopo/logger";
+import type { AccessRulesStorage } from "#policy/rulesStorage.js";
+export declare class DeleteAllRulesEndpoint implements ApiEndpoint<undefined> {
+    private readonly accessRulesStorage;
+    private readonly logger;
+    constructor(accessRulesStorage: AccessRulesStorage, logger: Logger);
+    getRequestArgsSchema(): undefined;
+    processRequest(logger?: Logger): Promise<ApiEndpointResponse>;
+}
+//# sourceMappingURL=deleteAllRules.d.ts.map

package/dist/types/api/delete/deleteAllRules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deleteAllRules.d.ts","sourceRoot":"","sources":["../../../../src/api/delete/deleteAllRules.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,mBAAmB,EAExB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE,qBAAa,sBAAuB,YAAW,WAAW,CAAC,SAAS,CAAC;IAEnE,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,kBAAkB,EAAE,kBAAkB,EACtC,MAAM,EAAE,MAAM;IAGzB,oBAAoB,IAAI,SAAS;IAElC,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAgBnE"}

package/dist/types/api/delete/deleteRuleGroups.d.ts

@@ -0,0 +1,19 @@
+import { type ApiEndpoint, type ApiEndpointResponse } from "@prosopo/api-route";
+import type { Logger } from "@prosopo/logger";
+import { type ZodType } from "zod";
+import { type AccessRulesStorage } from "#policy/rulesStorage.js";
+export type DeleteSiteGroup = {
+    clientIds: string[];
+    groupId: string;
+};
+export type DeleteSiteGroups = DeleteSiteGroup[];
+type DeleteRuleGroupsSchema = ZodType<DeleteSiteGroups>;
+export declare class DeleteRuleGroupsEndpoint implements ApiEndpoint<DeleteRuleGroupsSchema> {
+    private readonly accessRulesStorage;
+    private readonly logger;
+    constructor(accessRulesStorage: AccessRulesStorage, logger: Logger);
+    getRequestArgsSchema(): DeleteRuleGroupsSchema;
+    processRequest(args: DeleteSiteGroups, logger?: Logger): Promise<ApiEndpointResponse>;
+}
+export {};
+//# sourceMappingURL=deleteRuleGroups.d.ts.map

package/dist/types/api/delete/deleteRuleGroups.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deleteRuleGroups.d.ts","sourceRoot":"","sources":["../../../../src/api/delete/deleteRuleGroups.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,mBAAmB,EAExB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,KAAK,OAAO,EAAK,MAAM,KAAK,CAAC;AACtC,OAAO,EACN,KAAK,kBAAkB,EAEvB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,eAAe,EAAE,CAAC;AAEjD,KAAK,sBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAExD,qBAAa,wBACZ,YAAW,WAAW,CAAC,sBAAsB,CAAC;IAG7C,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,kBAAkB,EAAE,kBAAkB,EACtC,MAAM,EAAE,MAAM;IAGzB,oBAAoB,IAAI,sBAAsB;IAS/C,cAAc,CACnB,IAAI,EAAE,gBAAgB,EACtB,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,mBAAmB,CAAC;CAuC/B"}

package/dist/types/api/delete/deleteRules.d.ts

@@ -0,0 +1,15 @@
+import { type ApiEndpoint, type ApiEndpointResponse } from "@prosopo/api-route";
+import type { Logger } from "@prosopo/logger";
+import { type ZodType, z } from "zod";
+import { type AccessRulesFilterInput } from "#policy/ruleInput/ruleInput.js";
+import type { AccessRulesStorage } from "#policy/rulesStorage.js";
+type DeleteRulesSchema = ZodType<AccessRulesFilterInput[], z.ZodTypeDef, unknown>;
+export declare class DeleteRulesEndpoint implements ApiEndpoint<DeleteRulesSchema> {
+    private readonly accessRulesStorage;
+    private readonly logger;
+    constructor(accessRulesStorage: AccessRulesStorage, logger: Logger);
+    getRequestArgsSchema(): DeleteRulesSchema;
+    processRequest(args: AccessRulesFilterInput[], logger?: Logger): Promise<ApiEndpointResponse>;
+}
+export {};
+//# sourceMappingURL=deleteRules.d.ts.map

package/dist/types/api/delete/deleteRules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deleteRules.d.ts","sourceRoot":"","sources":["../../../../src/api/delete/deleteRules.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,mBAAmB,EAExB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,KAAK,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACtC,OAAO,EACN,KAAK,sBAAsB,EAG3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAIlE,KAAK,iBAAiB,GAAG,OAAO,CAC/B,sBAAsB,EAAE,EACxB,CAAC,CAAC,UAAU,EACZ,OAAO,CACP,CAAC;AAEF,qBAAa,mBAAoB,YAAW,WAAW,CAAC,iBAAiB,CAAC;IAExE,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,kBAAkB,EAAE,kBAAkB,EACtC,MAAM,EAAE,MAAM;IAGzB,oBAAoB,IAAI,iBAAiB;IAI1C,cAAc,CACnB,IAAI,EAAE,sBAAsB,EAAE,EAC9B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,mBAAmB,CAAC;CAoC/B"}

package/dist/types/api/read/.export.d.ts

@@ -0,0 +1,4 @@
+export type { RuleIdsResponse, RuleIdsEndpointResponse, } from "./findRuleIds.js";
+export type { FetchRulesOptions, FetchRulesResponse, } from "./fetchRules.js";
+export type { MissingIds } from "./getMissingIds.js";
+//# sourceMappingURL=.export.d.ts.map

package/dist/types/api/read/.export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../../../src/api/read/.export.ts"],"names":[],"mappings":"AAcA,YAAY,EACX,eAAe,EACf,uBAAuB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACX,iBAAiB,EACjB,kBAAkB,GAClB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/types/api/read/fetchRules.d.ts

@@ -0,0 +1,24 @@
+import { type ApiEndpoint, type ApiEndpointResponse } from "@prosopo/api-route";
+import type { Logger } from "@prosopo/logger";
+import { type ZodType, z } from "zod";
+import type { AccessRuleEntry, AccessRulesStorage } from "#policy/rulesStorage.js";
+export type FetchRulesOptions = {
+    ids: string[];
+};
+type FetchRulesSchema = ZodType<FetchRulesOptions>;
+export type FetchRulesResponse = {
+    ruleEntries: AccessRuleEntry[];
+};
+export declare const fetchRulesResponse: ZodType<FetchRulesResponse, z.ZodTypeDef, unknown>;
+export type FetchRulesEndpointResponse = ApiEndpointResponse & {
+    data?: FetchRulesResponse;
+};
+export declare class FetchRulesEndpoint implements ApiEndpoint<FetchRulesSchema> {
+    private readonly accessRulesStorage;
+    private readonly logger;
+    constructor(accessRulesStorage: AccessRulesStorage, logger: Logger);
+    getRequestArgsSchema(): FetchRulesSchema;
+    processRequest(args: FetchRulesOptions, logger?: Logger): Promise<FetchRulesEndpointResponse>;
+}
+export {};
+//# sourceMappingURL=fetchRules.d.ts.map

package/dist/types/api/read/fetchRules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetchRules.d.ts","sourceRoot":"","sources":["../../../../src/api/read/fetchRules.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,mBAAmB,EAExB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,KAAK,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAEtC,OAAO,KAAK,EACX,eAAe,EACf,kBAAkB,EAClB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,MAAM,iBAAiB,GAAG;IAC/B,GAAG,EAAE,MAAM,EAAE,CAAC;CACd,CAAC;AAEF,KAAK,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEnD,MAAM,MAAM,kBAAkB,GAAG;IAChC,WAAW,EAAE,eAAe,EAAE,CAAC;CAC/B,CAAC;AAMF,eAAO,MAAM,kBAAkB,EAAE,OAAO,CACvC,kBAAkB,EAClB,CAAC,CAAC,UAAU,EACZ,OAAO,CAGgC,CAAC;AAEzC,MAAM,MAAM,0BAA0B,GAAG,mBAAmB,GAAG;IAC9D,IAAI,CAAC,EAAE,kBAAkB,CAAC;CAC1B,CAAC;AAEF,qBAAa,kBAAmB,YAAW,WAAW,CAAC,gBAAgB,CAAC;IAEtE,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,kBAAkB,EAAE,kBAAkB,EACtC,MAAM,EAAE,MAAM;IAGzB,oBAAoB,IAAI,gBAAgB;IAMzC,cAAc,CACnB,IAAI,EAAE,iBAAiB,EACvB,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,0BAA0B,CAAC;CA0BtC"}

package/dist/types/api/read/findRuleIds.d.ts

@@ -0,0 +1,28 @@
+import { type ApiEndpoint, type ApiEndpointResponse } from "@prosopo/api-route";
+import type { Logger } from "@prosopo/logger";
+import { type ZodType, z } from "zod";
+import { type AccessRulesFilterInput } from "#policy/ruleInput/ruleInput.js";
+import type { AccessRulesStorage } from "#policy/rulesStorage.js";
+type FindRulesSchema = ZodType<AccessRulesFilterInput[], z.ZodTypeDef, unknown>;
+export type RuleIdsResponse = {
+    ruleIds: string[];
+};
+export declare const ruleIdsResponse: z.ZodObject<{
+    ruleIds: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    ruleIds: string[];
+}, {
+    ruleIds: string[];
+}>;
+export type RuleIdsEndpointResponse = ApiEndpointResponse & {
+    data?: RuleIdsResponse;
+};
+export declare class FindRuleIdsEndpoint implements ApiEndpoint<FindRulesSchema> {
+    private readonly accessRulesStorage;
+    private readonly logger;
+    constructor(accessRulesStorage: AccessRulesStorage, logger: Logger);
+    getRequestArgsSchema(): FindRulesSchema;
+    processRequest(args: AccessRulesFilterInput[], logger?: Logger): Promise<RuleIdsEndpointResponse>;
+}
+export {};
+//# sourceMappingURL=findRuleIds.d.ts.map

package/dist/types/api/read/findRuleIds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"findRuleIds.d.ts","sourceRoot":"","sources":["../../../../src/api/read/findRuleIds.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,mBAAmB,EAExB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,KAAK,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACtC,OAAO,EACN,KAAK,sBAAsB,EAG3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAIlE,KAAK,eAAe,GAAG,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AAEhF,MAAM,MAAM,eAAe,GAAG;IAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;EAE4C,CAAC;AAEzE,MAAM,MAAM,uBAAuB,GAAG,mBAAmB,GAAG;IAC3D,IAAI,CAAC,EAAE,eAAe,CAAC;CACvB,CAAC;AAEF,qBAAa,mBAAoB,YAAW,WAAW,CAAC,eAAe,CAAC;IAEtE,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,kBAAkB,EAAE,kBAAkB,EACtC,MAAM,EAAE,MAAM;IAGzB,oBAAoB,IAAI,eAAe;IAIxC,cAAc,CACnB,IAAI,EAAE,sBAAsB,EAAE,EAC9B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,uBAAuB,CAAC;CAsCnC"}

package/dist/types/api/read/getMissingIds.d.ts

@@ -0,0 +1,28 @@
+import { type ApiEndpoint, type ApiEndpointResponse } from "@prosopo/api-route";
+import type { Logger } from "@prosopo/logger";
+import { type ZodType, z } from "zod";
+import type { AccessRulesStorage } from "#policy/rulesStorage.js";
+export type MissingIds = string[];
+type MissingIdsSchema = ZodType<MissingIds>;
+export type MissingIdsResponse = {
+    ids: string[];
+};
+export declare const missingIdsResponse: z.ZodObject<{
+    ids: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    ids: string[];
+}, {
+    ids: string[];
+}>;
+export type MissingIdsEndpointResponse = ApiEndpointResponse & {
+    data?: MissingIdsResponse;
+};
+export declare class GetMissingIdsEndpoint implements ApiEndpoint<MissingIdsSchema> {
+    private readonly accessRulesStorage;
+    private readonly logger;
+    constructor(accessRulesStorage: AccessRulesStorage, logger: Logger);
+    getRequestArgsSchema(): MissingIdsSchema;
+    processRequest(args: MissingIds, logger?: Logger): Promise<MissingIdsEndpointResponse>;
+}
+export {};
+//# sourceMappingURL=getMissingIds.d.ts.map

package/dist/types/api/read/getMissingIds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getMissingIds.d.ts","sourceRoot":"","sources":["../../../../src/api/read/getMissingIds.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,mBAAmB,EAExB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,KAAK,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE,MAAM,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC;AAElC,KAAK,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAE5C,MAAM,MAAM,kBAAkB,GAAG;IAChC,GAAG,EAAE,MAAM,EAAE,CAAC;CACd,CAAC;AAEF,eAAO,MAAM,kBAAkB;;;;;;EAE+C,CAAC;AAE/E,MAAM,MAAM,0BAA0B,GAAG,mBAAmB,GAAG;IAC9D,IAAI,CAAC,EAAE,kBAAkB,CAAC;CAC1B,CAAC;AAEF,qBAAa,qBAAsB,YAAW,WAAW,CAAC,gBAAgB,CAAC;IAEzE,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,kBAAkB,EAAE,kBAAkB,EACtC,MAAM,EAAE,MAAM;IAGzB,oBAAoB,IAAI,gBAAgB;IAIzC,cAAc,CACnB,IAAI,EAAE,UAAU,EAChB,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,0BAA0B,CAAC;CA2BtC"}

package/dist/types/api/ruleApiRoutes.d.ts

@@ -0,0 +1,43 @@
+import type { ApiRouteLimits, ApiRoutes, ApiRoutesProvider } from "@prosopo/api-route";
+import type { Logger } from "@prosopo/logger";
+import { FetchRulesEndpoint } from "#policy/api/read/fetchRules.js";
+import { FindRuleIdsEndpoint } from "#policy/api/read/findRuleIds.js";
+import { GetMissingIdsEndpoint } from "#policy/api/read/getMissingIds.js";
+import { RehashRulesEndpoint } from "#policy/api/write/rehashRules.js";
+import type { AccessRulesStorage } from "#policy/rulesStorage.js";
+import { DeleteAllRulesEndpoint } from "./delete/deleteAllRules.js";
+import { DeleteRuleGroupsEndpoint } from "./delete/deleteRuleGroups.js";
+import { DeleteRulesEndpoint } from "./delete/deleteRules.js";
+import { InsertRulesEndpoint } from "./write/insertRules.js";
+export declare enum accessRuleApiPaths {
+    DELETE_ALL = "/v1/prosopo/user-access-policy/rules/delete-all",
+    DELETE_GROUPS = "/v1/prosopo/user-access-policy/rules/delete-groups",
+    DELETE_MANY = "/v1/prosopo/user-access-policy/rules/delete-many",
+    FETCH_MANY = "/v1/prosopo/user-access-policy/rules/fetch-many",
+    FIND_IDS = "/v1/prosopo/user-access-policy/rules/find-ids",
+    GET_MISSING_IDS = "/v1/prosopo/user-access-policy/rules/get-missing-ids",
+    INSERT_MANY = "/v1/prosopo/user-access-policy/rules/insert-many",
+    REHASH_ALL = "/v1/prosopo/user-access-policy/rules/rehash-all"
+}
+export declare class AccessRuleApiRoutes implements ApiRoutesProvider {
+    private readonly accessRulesStorage;
+    private readonly logger;
+    constructor(accessRulesStorage: AccessRulesStorage, logger: Logger);
+    getRoutes(): ApiRoutes;
+    protected makeDeleteEndpoints(): {
+        "/v1/prosopo/user-access-policy/rules/delete-all": DeleteAllRulesEndpoint;
+        "/v1/prosopo/user-access-policy/rules/delete-groups": DeleteRuleGroupsEndpoint;
+        "/v1/prosopo/user-access-policy/rules/delete-many": DeleteRulesEndpoint;
+    };
+    protected makeReadEndpoints(): {
+        "/v1/prosopo/user-access-policy/rules/fetch-many": FetchRulesEndpoint;
+        "/v1/prosopo/user-access-policy/rules/find-ids": FindRuleIdsEndpoint;
+        "/v1/prosopo/user-access-policy/rules/get-missing-ids": GetMissingIdsEndpoint;
+    };
+    protected makeWriteEndpoints(): {
+        "/v1/prosopo/user-access-policy/rules/insert-many": InsertRulesEndpoint;
+        "/v1/prosopo/user-access-policy/rules/rehash-all": RehashRulesEndpoint;
+    };
+}
+export declare const getExpressApiRuleRateLimits: () => ApiRouteLimits<accessRuleApiPaths>;
+//# sourceMappingURL=ruleApiRoutes.d.ts.map

package/dist/types/api/ruleApiRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ruleApiRoutes.d.ts","sourceRoot":"","sources":["../../../src/api/ruleApiRoutes.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACX,cAAc,EACd,SAAS,EACT,iBAAiB,EACjB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,oBAAY,kBAAkB;IAE7B,UAAU,oDAAoD;IAC9D,aAAa,uDAAuD;IACpE,WAAW,qDAAqD;IAEhE,UAAU,oDAAoD;IAC9D,QAAQ,kDAAkD;IAC1D,eAAe,yDAAyD;IAExE,WAAW,qDAAqD;IAChE,UAAU,oDAAoD;CAC9D;AAED,qBAAa,mBAAoB,YAAW,iBAAiB;IAE3D,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,kBAAkB,EAAE,kBAAkB,EACtC,MAAM,EAAE,MAAM;IAGzB,SAAS,IAAI,SAAS;IAQ7B,SAAS,CAAC,mBAAmB;;;;;IAiB7B,SAAS,CAAC,iBAAiB;;;;;IAiB3B,SAAS,CAAC,kBAAkB;;;;CAY5B;AAED,eAAO,MAAM,2BAA2B,QACnC,cAAc,CAAC,kBAAkB,CAyBpC,CAAC"}

package/dist/types/api/rulesApiClient.d.ts

@@ -0,0 +1,20 @@
+import { ApiClient } from "@prosopo/api";
+import type { ApiEndpointResponse } from "@prosopo/api-route";
+import { type FetchRulesEndpointResponse, type FetchRulesOptions } from "#policy/api/read/fetchRules.js";
+import { type RuleIdsEndpointResponse } from "#policy/api/read/findRuleIds.js";
+import { type MissingIds, type MissingIdsEndpointResponse } from "#policy/api/read/getMissingIds.js";
+import type { AccessRulesFilterInput } from "#policy/ruleInput/ruleInput.js";
+import type { DeleteSiteGroups } from "./delete/deleteRuleGroups.js";
+import type { InsertRulesGroup } from "./write/insertRules.js";
+export declare class AccessRulesApiClient extends ApiClient {
+    deleteMany(filters: AccessRulesFilterInput[], jwt: string): Promise<ApiEndpointResponse>;
+    deleteGroups(siteGroups: DeleteSiteGroups, jwt: string): Promise<ApiEndpointResponse>;
+    deleteAll(jwt: string): Promise<ApiEndpointResponse>;
+    getMissingIds(idsToCheck: MissingIds, jwt: string): Promise<MissingIdsEndpointResponse>;
+    fetchMany(fetchOptions: FetchRulesOptions, jwt: string): Promise<FetchRulesEndpointResponse>;
+    findIds(filters: AccessRulesFilterInput[], jwt: string): Promise<RuleIdsEndpointResponse>;
+    rehashAll(jwt: string): Promise<ApiEndpointResponse>;
+    insertMany(ruleGroups: InsertRulesGroup[], jwt: string): Promise<ApiEndpointResponse>;
+    protected getAuthHeaders(jwt: string): RequestInit;
+}
+//# sourceMappingURL=rulesApiClient.d.ts.map

package/dist/types/api/rulesApiClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rulesApiClient.d.ts","sourceRoot":"","sources":["../../../src/api/rulesApiClient.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EACN,KAAK,0BAA0B,EAC/B,KAAK,iBAAiB,EAEtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACN,KAAK,uBAAuB,EAE5B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACN,KAAK,UAAU,EACf,KAAK,0BAA0B,EAE/B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,qBAAa,oBAAqB,SAAQ,SAAS;IAG3C,UAAU,CAChB,OAAO,EAAE,sBAAsB,EAAE,EACjC,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,mBAAmB,CAAC;IAQxB,YAAY,CAClB,UAAU,EAAE,gBAAgB,EAC5B,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,mBAAmB,CAAC;IAQxB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAU9C,aAAa,CACzB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,0BAA0B,CAAC;IAezB,SAAS,CACrB,YAAY,EAAE,iBAAiB,EAC/B,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,0BAA0B,CAAC;IAezB,OAAO,CACnB,OAAO,EAAE,sBAAsB,EAAE,EACjC,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,uBAAuB,CAAC;IAiBtB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAQ1D,UAAU,CAChB,UAAU,EAAE,gBAAgB,EAAE,EAC9B,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,mBAAmB,CAAC;IAQ/B,SAAS,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW;CAQlD"}

package/dist/types/api/write/.export.d.ts

@@ -0,0 +1,2 @@
+export type { InsertRulesGroup } from "./insertRules.js";
+//# sourceMappingURL=.export.d.ts.map

package/dist/types/api/write/.export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../../../src/api/write/.export.ts"],"names":[],"mappings":"AAcA,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/types/api/write/insertRules.d.ts

@@ -0,0 +1,29 @@
+import { type ApiEndpoint, type ApiEndpointResponse } from "@prosopo/api-route";
+import { type Logger } from "@prosopo/logger";
+import { type ZodType, type ZodTypeDef } from "zod";
+import type { AccessPolicy, PolicyScope, PolicyScopeExclusions, UserScope } from "#policy/rule.js";
+import { type UserScopeInput } from "#policy/ruleInput/userScopeInput.js";
+import type { AccessRulesWriter } from "#policy/rulesStorage.js";
+export type InsertRulesGroup = PolicyScopeExclusions & {
+    accessPolicy: AccessPolicy;
+    userScopes: UserScopeInput[];
+    policyScopes?: PolicyScope[];
+    groupId?: string;
+    expiresUnixTimestamp?: number;
+};
+type ParsedInsertRulesGroup = InsertRulesGroup & {
+    userScopes: UserScope[];
+};
+type ParsedInsertRuleGroups = ParsedInsertRulesGroup[];
+type InsertRulesSchema = ZodType<InsertRulesGroup[], ZodTypeDef, unknown>;
+export declare class InsertRulesEndpoint implements ApiEndpoint<InsertRulesSchema> {
+    private readonly accessRulesWriter;
+    private readonly logger;
+    constructor(accessRulesWriter: AccessRulesWriter, logger: Logger);
+    getRequestArgsSchema(): InsertRulesSchema;
+    processRequest(args: ParsedInsertRuleGroups, logger?: Logger): Promise<ApiEndpointResponse>;
+    protected createRuleGroups(groups: ParsedInsertRuleGroups): Promise<string[]>;
+    protected createRulesGroup(group: ParsedInsertRulesGroup): Promise<string[]>;
+}
+export {};
+//# sourceMappingURL=insertRules.d.ts.map

package/dist/types/api/write/insertRules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"insertRules.d.ts","sourceRoot":"","sources":["../../../../src/api/write/insertRules.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,mBAAmB,EAExB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAY,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,UAAU,EAAK,MAAM,KAAK,CAAC;AACvD,OAAO,KAAK,EACX,YAAY,EAEZ,WAAW,EACX,qBAAqB,EACrB,SAAS,EACT,MAAM,iBAAiB,CAAC;AAOzB,OAAO,EACN,KAAK,cAAc,EAEnB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAEX,iBAAiB,EACjB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,MAAM,gBAAgB,GAAG,qBAAqB,GAAG;IACtD,YAAY,EAAE,YAAY,CAAC;IAC3B,UAAU,EAAE,cAAc,EAAE,CAAC;IAG7B,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,KAAK,sBAAsB,GAAG,gBAAgB,GAAG;IAChD,UAAU,EAAE,SAAS,EAAE,CAAC;CACxB,CAAC;AAEF,KAAK,sBAAsB,GAAG,sBAAsB,EAAE,CAAC;AAIvD,KAAK,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAE1E,qBAAa,mBAAoB,YAAW,WAAW,CAAC,iBAAiB,CAAC;IAExE,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,iBAAiB,EAAE,iBAAiB,EACpC,MAAM,EAAE,MAAM;IAGzB,oBAAoB,IAAI,iBAAiB;IAa1C,cAAc,CACnB,IAAI,EAAE,sBAAsB,EAC5B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,mBAAmB,CAAC;cAwDf,gBAAgB,CAC/B,MAAM,EAAE,sBAAsB,GAC5B,OAAO,CAAC,MAAM,EAAE,CAAC;cAQJ,gBAAgB,CAC/B,KAAK,EAAE,sBAAsB,GAC3B,OAAO,CAAC,MAAM,EAAE,CAAC;CAsCpB"}

package/dist/types/api/write/rehashRules.d.ts

@@ -0,0 +1,11 @@
+import { type ApiEndpoint, type ApiEndpointResponse } from "@prosopo/api-route";
+import type { Logger } from "@prosopo/logger";
+import type { AccessRulesStorage } from "#policy/rulesStorage.js";
+export declare class RehashRulesEndpoint implements ApiEndpoint<undefined> {
+    private readonly accessRulesStorage;
+    private readonly logger;
+    constructor(accessRulesStorage: AccessRulesStorage, logger: Logger);
+    getRequestArgsSchema(): undefined;
+    processRequest(logger?: Logger): Promise<ApiEndpointResponse>;
+}
+//# sourceMappingURL=rehashRules.d.ts.map

package/dist/types/api/write/rehashRules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rehashRules.d.ts","sourceRoot":"","sources":["../../../../src/api/write/rehashRules.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,mBAAmB,EAExB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE,qBAAa,mBAAoB,YAAW,WAAW,CAAC,SAAS,CAAC;IAEhE,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,kBAAkB,EAAE,kBAAkB,EACtC,MAAM,EAAE,MAAM;IAGzB,oBAAoB,IAAI,SAAS;IAElC,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAsDnE"}

package/dist/types/classifyBrowser.d.ts

@@ -0,0 +1,4 @@
+export declare const BROWSER_NAMES: readonly ["chrome", "safari", "firefox", "edge", "opera", "samsung_internet", "wechat", "facebook", "instagram", "ie", "unknown"];
+export type BrowserName = (typeof BROWSER_NAMES)[number];
+export declare const classifyBrowser: (userAgent: string | undefined) => BrowserName;
+//# sourceMappingURL=classifyBrowser.d.ts.map

package/dist/types/classifyBrowser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifyBrowser.d.ts","sourceRoot":"","sources":["../../src/classifyBrowser.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,aAAa,mIAYhB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AASzD,eAAO,MAAM,eAAe,cAAe,MAAM,GAAG,SAAS,KAAG,WAkC/D,CAAC"}

package/dist/types/classifyOs.d.ts

@@ -0,0 +1,4 @@
+export declare const OS_NAMES: readonly ["windows", "macos", "ios", "android", "linux", "unknown"];
+export type OsName = (typeof OS_NAMES)[number];
+export declare const classifyOs: (userAgent: string | undefined) => OsName;
+//# sourceMappingURL=classifyOs.d.ts.map

package/dist/types/classifyOs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifyOs.d.ts","sourceRoot":"","sources":["../../src/classifyOs.ts"],"names":[],"mappings":"AA0BA,eAAO,MAAM,QAAQ,qEAOX,CAAC;AAEX,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;AAmB/C,eAAO,MAAM,UAAU,cAAe,MAAM,GAAG,SAAS,KAAG,MAmB1D,CAAC"}

package/dist/types/headerMatch.d.ts

@@ -0,0 +1,13 @@
+export declare const HEADER_OPERATORS: readonly ["equals", "contains", "notEquals", "notContains", "notEqualsAny", "notContainsAny"];
+export type HeaderOperator = (typeof HEADER_OPERATORS)[number];
+export declare const isHeaderOperator: (value: string | undefined) => value is HeaderOperator;
+export declare const HEADER_RULE_MARKER = "1";
+export declare const encodeHeaderValueList: (values: ReadonlyArray<string>) => string;
+export declare const decodeHeaderValueList: (value: string) => string[] | undefined;
+export declare const evaluateHeaderCondition: (headerName: string, operator: HeaderOperator, value: string, headers: Record<string, string>) => boolean;
+export declare const accessRuleHeaderMatches: (rule: {
+    headerName?: string;
+    headerValue?: string;
+    headerOperator?: string;
+}, headers: Record<string, string>) => boolean;
+//# sourceMappingURL=headerMatch.d.ts.map

package/dist/types/headerMatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headerMatch.d.ts","sourceRoot":"","sources":["../../src/headerMatch.ts"],"names":[],"mappings":"AAiCA,eAAO,MAAM,gBAAgB,+FAOnB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,eAAO,MAAM,gBAAgB,UACrB,MAAM,GAAG,SAAS,KACvB,KAAK,IAAI,cAEgD,CAAC;AAgB7D,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAQtC,eAAO,MAAM,qBAAqB,WAAY,aAAa,CAAC,MAAM,CAAC,KAAG,MAC/C,CAAC;AAYxB,eAAO,MAAM,qBAAqB,UAAW,MAAM,KAAG,MAAM,EAAE,GAAG,SAmBhE,CAAC;AAYF,eAAO,MAAM,uBAAuB,eACvB,MAAM,YACR,cAAc,SACjB,MAAM,WACJ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC7B,OA6BF,CAAC;AASF,eAAO,MAAM,uBAAuB,SAC7B;IACL,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB,WACQ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC7B,OAaF,CAAC"}

package/dist/types/matchedRule.d.ts

@@ -0,0 +1,4 @@
+import type { MatchedAccessRule } from "@prosopo/types";
+import type { AccessRule } from "#policy/rule.js";
+export declare const describeMatchedRule: (rule: AccessRule) => MatchedAccessRule;
+//# sourceMappingURL=matchedRule.d.ts.map

package/dist/types/matchedRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matchedRule.d.ts","sourceRoot":"","sources":["../../src/matchedRule.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,iBAAiB,EAAwB,MAAM,gBAAgB,CAAC;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAwElD,eAAO,MAAM,mBAAmB,SAAU,UAAU,KAAG,iBAWrD,CAAC"}

package/dist/types/mongoose/.export.d.ts

@@ -0,0 +1,2 @@
+export { accessRuleMongooseSchema } from "./mongooseRuleSchema.js";
+//# sourceMappingURL=.export.d.ts.map

package/dist/types/mongoose/.export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../../src/mongoose/.export.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/types/mongoose/mongooseRuleSchema.d.ts

@@ -0,0 +1,4 @@
+import type { SchemaDefinition } from "mongoose";
+import type { AccessRuleRecord } from "#policy/ruleRecord.js";
+export declare const accessRuleMongooseSchema: SchemaDefinition<AccessRuleRecord>;
+//# sourceMappingURL=mongooseRuleSchema.d.ts.map

package/dist/types/mongoose/mongooseRuleSchema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongooseRuleSchema.d.ts","sourceRoot":"","sources":["../../../src/mongoose/mongooseRuleSchema.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEjD,OAAO,KAAK,EACX,gBAAgB,EAIhB,MAAM,uBAAuB,CAAC;AA+C/B,eAAO,MAAM,wBAAwB,EAAE,gBAAgB,CAAC,gBAAgB,CAQtC,CAAC"}

package/dist/types/redis/.export.d.ts

@@ -0,0 +1,3 @@
+export { createRedisAccessRulesStorage } from "./redisRulesStorage.js";
+export { accessRulesRedisIndex } from "./redisRuleIndex.js";
+//# sourceMappingURL=.export.d.ts.map

package/dist/types/redis/.export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../../src/redis/.export.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAEvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/types/redis/reader/redisAggregate.d.ts

@@ -0,0 +1,5 @@
+import type { Logger } from "@prosopo/logger";
+import type { RedisClientType } from "redis";
+export declare const searchRedisKeysBounded: (client: RedisClientType, query: string, maxKeys: number) => Promise<string[]>;
+export declare const aggregateRedisKeys: (client: RedisClientType, query: string, logger: Logger, batchHandler?: (keys: string[]) => Promise<void>, maxKeys?: number) => Promise<string[]>;
+//# sourceMappingURL=redisAggregate.d.ts.map

package/dist/types/redis/reader/redisAggregate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisAggregate.d.ts","sourceRoot":"","sources":["../../../../src/redis/reader/redisAggregate.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAoB7C,eAAO,MAAM,sBAAsB,WAC1B,eAAe,SAChB,MAAM,WACJ,MAAM,KACb,OAAO,CAAC,MAAM,EAAE,CAWlB,CAAC;AAGF,eAAO,MAAM,kBAAkB,WACtB,eAAe,SAChB,MAAM,UACL,MAAM,iBACC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,YACtC,MAAM,KACd,OAAO,CAAC,MAAM,EAAE,CAkElB,CAAC"}

package/dist/types/redis/reader/redisRulesQuery.d.ts

@@ -0,0 +1,5 @@
+import { type AccessRulesFilter } from "#policy/rulesStorage.js";
+export declare const REDIS_QUERY_DIALECT = 2;
+export declare const getBlockPoolClause: (includeDeferred: boolean) => string;
+export declare const getRulesRedisQuery: (filter: AccessRulesFilter, matchingFieldsOnly: boolean) => string;
+//# sourceMappingURL=redisRulesQuery.d.ts.map

package/dist/types/redis/reader/redisRulesQuery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRulesQuery.d.ts","sourceRoot":"","sources":["../../../../src/redis/reader/redisRulesQuery.ts"],"names":[],"mappings":"AAsBA,OAAO,EACN,KAAK,iBAAiB,EAEtB,MAAM,yBAAyB,CAAC;AAcjC,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAmLrC,eAAO,MAAM,kBAAkB,oBAAqB,OAAO,KAAG,MAGA,CAAC;AAY/D,eAAO,MAAM,kBAAkB,WACtB,iBAAiB,sBACL,OAAO,KACzB,MAgCF,CAAC"}

package/dist/types/redis/reader/redisRulesReader.d.ts

@@ -0,0 +1,30 @@
+import type { Logger } from "@prosopo/logger";
+import type { RedisClientType } from "redis";
+import { type AccessRule } from "#policy/rule.js";
+import type { AccessRuleEntry, AccessRulesFilter, AccessRulesReader } from "#policy/rulesStorage.js";
+export declare const SERVER_SIDE_RANK_TOP_N = 20;
+export declare class RedisRulesReader implements AccessRulesReader {
+    private readonly client;
+    private readonly logger;
+    constructor(client: RedisClientType, logger: Logger);
+    getMissingRuleIds(ruleIds: string[]): Promise<string[]>;
+    fetchRules(ruleIds: string[]): Promise<AccessRuleEntry[]>;
+    findRules(filter: AccessRulesFilter, matchingFieldsOnly?: boolean, skipEmptyUserScopes?: boolean): Promise<AccessRule[]>;
+    private findRulesSplit;
+    private findRulesRanked;
+    private findRulesGreedy;
+    findRuleIds(filter: AccessRulesFilter, matchingFieldsOnly?: boolean): Promise<string[]>;
+    fetchAllRuleIds(batchHandler: (ruleIds: string[]) => Promise<void>): Promise<void>;
+    protected fetchRuleEntries(keys: string[]): Promise<AccessRuleEntry[]>;
+    protected getRuleKeys(ruleIds: string[]): string[];
+}
+export declare class DummyRedisRulesReader implements AccessRulesReader {
+    private readonly logger;
+    constructor(logger: Logger);
+    getMissingRuleIds(ruleIds: string[]): Promise<string[]>;
+    fetchRules(ruleIds: string[]): Promise<AccessRuleEntry[]>;
+    findRules(filter: AccessRulesFilter, matchingFieldsOnly?: boolean, skipEmptyUserScopes?: boolean): Promise<AccessRule[]>;
+    findRuleIds(filter: AccessRulesFilter, matchingFieldsOnly?: boolean): Promise<string[]>;
+    fetchAllRuleIds(batchHandler: (ruleIds: string[]) => Promise<void>): Promise<void>;
+}
+//# sourceMappingURL=redisRulesReader.d.ts.map

package/dist/types/redis/reader/redisRulesReader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRulesReader.d.ts","sourceRoot":"","sources":["../../../../src/redis/reader/redisRulesReader.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAgB7C,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,KAAK,EACX,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,MAAM,yBAAyB,CAAC;AAuBjC,eAAO,MAAM,sBAAsB,KAAK,CAAC;AA4HzC,qBAAa,gBAAiB,YAAW,iBAAiB;IAExD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,MAAM;IAG1B,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAcvD,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAazD,SAAS,CACd,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,EAC1B,mBAAmB,UAAO,GACxB,OAAO,CAAC,UAAU,EAAE,CAAC;YAoDV,cAAc;YA4Hd,eAAe;YA0Hf,eAAe;IAuDvB,WAAW,CAChB,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,GACxB,OAAO,CAAC,MAAM,EAAE,CAAC;IAgDd,eAAe,CACpB,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAChD,OAAO,CAAC,IAAI,CAAC;cAYA,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IA8B5E,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE;CAGlD;AAED,qBAAa,qBAAsB,YAAW,iBAAiB;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAErC,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAWvD,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAWzD,SAAS,CACd,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,EAC1B,mBAAmB,UAAO,GACxB,OAAO,CAAC,UAAU,EAAE,CAAC;IAWlB,WAAW,CAChB,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,GACxB,OAAO,CAAC,MAAM,EAAE,CAAC;IAWd,eAAe,CACpB,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAChD,OAAO,CAAC,IAAI,CAAC;CAKhB"}

package/dist/types/redis/reader/redisRulesSplitQuery.d.ts

@@ -0,0 +1,12 @@
+import { type UserScope } from "#policy/rule.js";
+type SubQuery = {
+    kind: string;
+    query: string;
+};
+export declare const buildScopedRulesSubQueries: (userScope: UserScope, clientId: string | undefined, options?: {
+    blockOnly?: boolean;
+    includeDeferred?: boolean;
+}) => SubQuery[];
+export declare const buildScopedBlockSubQueries: (userScope: UserScope, clientId: string | undefined) => SubQuery[];
+export {};
+//# sourceMappingURL=redisRulesSplitQuery.d.ts.map

package/dist/types/redis/reader/redisRulesSplitQuery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRulesSplitQuery.d.ts","sourceRoot":"","sources":["../../../../src/redis/reader/redisRulesSplitQuery.ts"],"names":[],"mappings":"AAeA,OAAO,EAAgC,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AA0E/E,KAAK,QAAQ,GAAG;IAGf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACd,CAAC;AAmCF,eAAO,MAAM,0BAA0B,cAC3B,SAAS,YACV,MAAM,GAAG,SAAS,YACnB;IAAE,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,KACzD,QAAQ,EAqCV,CAAC;AA+DF,eAAO,MAAM,0BAA0B,cAC3B,SAAS,YACV,MAAM,GAAG,SAAS,KAC1B,QAAQ,EAC0D,CAAC"}

package/dist/types/redis/redisClient.d.ts

@@ -0,0 +1,11 @@
+import type { Logger } from "@prosopo/logger";
+import type { RedisClientType } from "redis";
+import { type ZodType, type ZodTypeDef } from "zod";
+export declare const REDIS_BATCH_SIZE = 1000;
+export declare const getMissingRedisKeys: (client: RedisClientType, keys: string[]) => Promise<string[]>;
+export declare const fetchRedisHashRecords: (client: RedisClientType, keys: string[], logger: Logger) => Promise<{
+    records: object[];
+    expirations: (number | undefined)[];
+}>;
+export declare const parseRedisRecords: <T>(records: unknown[], recordSchema: ZodType<T, ZodTypeDef, unknown>, logger: Logger) => T[];
+//# sourceMappingURL=redisClient.d.ts.map

package/dist/types/redis/redisClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisClient.d.ts","sourceRoot":"","sources":["../../../src/redis/redisClient.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAC7C,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,UAAU,EAAK,MAAM,KAAK,CAAC;AAEvD,eAAO,MAAM,gBAAgB,OAAQ,CAAC;AAEtC,eAAO,MAAM,mBAAmB,WACvB,eAAe,QACjB,MAAM,EAAE,KACZ,OAAO,CAAC,MAAM,EAAE,CAsBlB,CAAC;AAEF,eAAO,MAAM,qBAAqB,WACzB,eAAe,QACjB,MAAM,EAAE,UACN,MAAM,KACZ,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAA;CAAE,CAgBpE,CAAC;AAOF,eAAO,MAAM,iBAAiB,GAAI,CAAC,WACzB,OAAO,EAAE,gBACJ,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UACrC,MAAM,KACZ,CAAC,EAcD,CAAC"}