@prosopo/user-access-policy 3.15.7 → 3.15.9

package/dist/types/api/ruleApiRoutes.d.ts

@@ -0,0 +1,43 @@
+import type { ApiRouteLimits, ApiRoutes, ApiRoutesProvider } from "@prosopo/api-route";
+import type { Logger } from "@prosopo/logger";
+import { FetchRulesEndpoint } from "#policy/api/read/fetchRules.js";
+import { FindRuleIdsEndpoint } from "#policy/api/read/findRuleIds.js";
+import { GetMissingIdsEndpoint } from "#policy/api/read/getMissingIds.js";
+import { RehashRulesEndpoint } from "#policy/api/write/rehashRules.js";
+import type { AccessRulesStorage } from "#policy/rulesStorage.js";
+import { DeleteAllRulesEndpoint } from "./delete/deleteAllRules.js";
+import { DeleteRuleGroupsEndpoint } from "./delete/deleteRuleGroups.js";
+import { DeleteRulesEndpoint } from "./delete/deleteRules.js";
+import { InsertRulesEndpoint } from "./write/insertRules.js";
+export declare enum accessRuleApiPaths {
+    DELETE_ALL = "/v1/prosopo/user-access-policy/rules/delete-all",
+    DELETE_GROUPS = "/v1/prosopo/user-access-policy/rules/delete-groups",
+    DELETE_MANY = "/v1/prosopo/user-access-policy/rules/delete-many",
+    FETCH_MANY = "/v1/prosopo/user-access-policy/rules/fetch-many",
+    FIND_IDS = "/v1/prosopo/user-access-policy/rules/find-ids",
+    GET_MISSING_IDS = "/v1/prosopo/user-access-policy/rules/get-missing-ids",
+    INSERT_MANY = "/v1/prosopo/user-access-policy/rules/insert-many",
+    REHASH_ALL = "/v1/prosopo/user-access-policy/rules/rehash-all"
+}
+export declare class AccessRuleApiRoutes implements ApiRoutesProvider {
+    private readonly accessRulesStorage;
+    private readonly logger;
+    constructor(accessRulesStorage: AccessRulesStorage, logger: Logger);
+    getRoutes(): ApiRoutes;
+    protected makeDeleteEndpoints(): {
+        "/v1/prosopo/user-access-policy/rules/delete-all": DeleteAllRulesEndpoint;
+        "/v1/prosopo/user-access-policy/rules/delete-groups": DeleteRuleGroupsEndpoint;
+        "/v1/prosopo/user-access-policy/rules/delete-many": DeleteRulesEndpoint;
+    };
+    protected makeReadEndpoints(): {
+        "/v1/prosopo/user-access-policy/rules/fetch-many": FetchRulesEndpoint;
+        "/v1/prosopo/user-access-policy/rules/find-ids": FindRuleIdsEndpoint;
+        "/v1/prosopo/user-access-policy/rules/get-missing-ids": GetMissingIdsEndpoint;
+    };
+    protected makeWriteEndpoints(): {
+        "/v1/prosopo/user-access-policy/rules/insert-many": InsertRulesEndpoint;
+        "/v1/prosopo/user-access-policy/rules/rehash-all": RehashRulesEndpoint;
+    };
+}
+export declare const getExpressApiRuleRateLimits: () => ApiRouteLimits<accessRuleApiPaths>;
+//# sourceMappingURL=ruleApiRoutes.d.ts.map

package/dist/types/api/ruleApiRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ruleApiRoutes.d.ts","sourceRoot":"","sources":["../../../src/api/ruleApiRoutes.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACX,cAAc,EACd,SAAS,EACT,iBAAiB,EACjB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,oBAAY,kBAAkB;IAE7B,UAAU,oDAAoD;IAC9D,aAAa,uDAAuD;IACpE,WAAW,qDAAqD;IAEhE,UAAU,oDAAoD;IAC9D,QAAQ,kDAAkD;IAC1D,eAAe,yDAAyD;IAExE,WAAW,qDAAqD;IAChE,UAAU,oDAAoD;CAC9D;AAED,qBAAa,mBAAoB,YAAW,iBAAiB;IAE3D,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,kBAAkB,EAAE,kBAAkB,EACtC,MAAM,EAAE,MAAM;IAGzB,SAAS,IAAI,SAAS;IAQ7B,SAAS,CAAC,mBAAmB;;;;;IAiB7B,SAAS,CAAC,iBAAiB;;;;;IAiB3B,SAAS,CAAC,kBAAkB;;;;CAY5B;AAED,eAAO,MAAM,2BAA2B,QACnC,cAAc,CAAC,kBAAkB,CAyBpC,CAAC"}

package/dist/types/api/rulesApiClient.d.ts

@@ -0,0 +1,20 @@
+import { ApiClient } from "@prosopo/api";
+import type { ApiEndpointResponse } from "@prosopo/api-route";
+import { type FetchRulesEndpointResponse, type FetchRulesOptions } from "#policy/api/read/fetchRules.js";
+import { type RuleIdsEndpointResponse } from "#policy/api/read/findRuleIds.js";
+import { type MissingIds, type MissingIdsEndpointResponse } from "#policy/api/read/getMissingIds.js";
+import type { AccessRulesFilterInput } from "#policy/ruleInput/ruleInput.js";
+import type { DeleteSiteGroups } from "./delete/deleteRuleGroups.js";
+import type { InsertRulesGroup } from "./write/insertRules.js";
+export declare class AccessRulesApiClient extends ApiClient {
+    deleteMany(filters: AccessRulesFilterInput[], jwt: string): Promise<ApiEndpointResponse>;
+    deleteGroups(siteGroups: DeleteSiteGroups, jwt: string): Promise<ApiEndpointResponse>;
+    deleteAll(jwt: string): Promise<ApiEndpointResponse>;
+    getMissingIds(idsToCheck: MissingIds, jwt: string): Promise<MissingIdsEndpointResponse>;
+    fetchMany(fetchOptions: FetchRulesOptions, jwt: string): Promise<FetchRulesEndpointResponse>;
+    findIds(filters: AccessRulesFilterInput[], jwt: string): Promise<RuleIdsEndpointResponse>;
+    rehashAll(jwt: string): Promise<ApiEndpointResponse>;
+    insertMany(ruleGroups: InsertRulesGroup[], jwt: string): Promise<ApiEndpointResponse>;
+    protected getAuthHeaders(jwt: string): RequestInit;
+}
+//# sourceMappingURL=rulesApiClient.d.ts.map

package/dist/types/api/rulesApiClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rulesApiClient.d.ts","sourceRoot":"","sources":["../../../src/api/rulesApiClient.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EACN,KAAK,0BAA0B,EAC/B,KAAK,iBAAiB,EAEtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACN,KAAK,uBAAuB,EAE5B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACN,KAAK,UAAU,EACf,KAAK,0BAA0B,EAE/B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,qBAAa,oBAAqB,SAAQ,SAAS;IAG3C,UAAU,CAChB,OAAO,EAAE,sBAAsB,EAAE,EACjC,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,mBAAmB,CAAC;IAQxB,YAAY,CAClB,UAAU,EAAE,gBAAgB,EAC5B,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,mBAAmB,CAAC;IAQxB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAU9C,aAAa,CACzB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,0BAA0B,CAAC;IAezB,SAAS,CACrB,YAAY,EAAE,iBAAiB,EAC/B,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,0BAA0B,CAAC;IAezB,OAAO,CACnB,OAAO,EAAE,sBAAsB,EAAE,EACjC,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,uBAAuB,CAAC;IAiBtB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAQ1D,UAAU,CAChB,UAAU,EAAE,gBAAgB,EAAE,EAC9B,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,mBAAmB,CAAC;IAQ/B,SAAS,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW;CAQlD"}

package/dist/types/api/write/.export.d.ts

@@ -0,0 +1,2 @@
+export type { InsertRulesGroup } from "./insertRules.js";
+//# sourceMappingURL=.export.d.ts.map

package/dist/types/api/write/.export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../../../src/api/write/.export.ts"],"names":[],"mappings":"AAcA,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/types/api/write/insertRules.d.ts

@@ -0,0 +1,29 @@
+import { type ApiEndpoint, type ApiEndpointResponse } from "@prosopo/api-route";
+import { type Logger } from "@prosopo/logger";
+import { type ZodType, type ZodTypeDef } from "zod";
+import type { AccessPolicy, PolicyScope, PolicyScopeExclusions, UserScope } from "#policy/rule.js";
+import { type UserScopeInput } from "#policy/ruleInput/userScopeInput.js";
+import type { AccessRulesWriter } from "#policy/rulesStorage.js";
+export type InsertRulesGroup = PolicyScopeExclusions & {
+    accessPolicy: AccessPolicy;
+    userScopes: UserScopeInput[];
+    policyScopes?: PolicyScope[];
+    groupId?: string;
+    expiresUnixTimestamp?: number;
+};
+type ParsedInsertRulesGroup = InsertRulesGroup & {
+    userScopes: UserScope[];
+};
+type ParsedInsertRuleGroups = ParsedInsertRulesGroup[];
+type InsertRulesSchema = ZodType<InsertRulesGroup[], ZodTypeDef, unknown>;
+export declare class InsertRulesEndpoint implements ApiEndpoint<InsertRulesSchema> {
+    private readonly accessRulesWriter;
+    private readonly logger;
+    constructor(accessRulesWriter: AccessRulesWriter, logger: Logger);
+    getRequestArgsSchema(): InsertRulesSchema;
+    processRequest(args: ParsedInsertRuleGroups, logger?: Logger): Promise<ApiEndpointResponse>;
+    protected createRuleGroups(groups: ParsedInsertRuleGroups): Promise<string[]>;
+    protected createRulesGroup(group: ParsedInsertRulesGroup): Promise<string[]>;
+}
+export {};
+//# sourceMappingURL=insertRules.d.ts.map

package/dist/types/api/write/insertRules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"insertRules.d.ts","sourceRoot":"","sources":["../../../../src/api/write/insertRules.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,mBAAmB,EAExB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAY,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,UAAU,EAAK,MAAM,KAAK,CAAC;AACvD,OAAO,KAAK,EACX,YAAY,EAEZ,WAAW,EACX,qBAAqB,EACrB,SAAS,EACT,MAAM,iBAAiB,CAAC;AAOzB,OAAO,EACN,KAAK,cAAc,EAEnB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAEX,iBAAiB,EACjB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,MAAM,gBAAgB,GAAG,qBAAqB,GAAG;IACtD,YAAY,EAAE,YAAY,CAAC;IAC3B,UAAU,EAAE,cAAc,EAAE,CAAC;IAG7B,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,KAAK,sBAAsB,GAAG,gBAAgB,GAAG;IAChD,UAAU,EAAE,SAAS,EAAE,CAAC;CACxB,CAAC;AAEF,KAAK,sBAAsB,GAAG,sBAAsB,EAAE,CAAC;AAIvD,KAAK,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAE1E,qBAAa,mBAAoB,YAAW,WAAW,CAAC,iBAAiB,CAAC;IAExE,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,iBAAiB,EAAE,iBAAiB,EACpC,MAAM,EAAE,MAAM;IAGzB,oBAAoB,IAAI,iBAAiB;IAa1C,cAAc,CACnB,IAAI,EAAE,sBAAsB,EAC5B,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,mBAAmB,CAAC;cAwDf,gBAAgB,CAC/B,MAAM,EAAE,sBAAsB,GAC5B,OAAO,CAAC,MAAM,EAAE,CAAC;cAQJ,gBAAgB,CAC/B,KAAK,EAAE,sBAAsB,GAC3B,OAAO,CAAC,MAAM,EAAE,CAAC;CAsCpB"}

package/dist/types/api/write/rehashRules.d.ts

@@ -0,0 +1,11 @@
+import { type ApiEndpoint, type ApiEndpointResponse } from "@prosopo/api-route";
+import type { Logger } from "@prosopo/logger";
+import type { AccessRulesStorage } from "#policy/rulesStorage.js";
+export declare class RehashRulesEndpoint implements ApiEndpoint<undefined> {
+    private readonly accessRulesStorage;
+    private readonly logger;
+    constructor(accessRulesStorage: AccessRulesStorage, logger: Logger);
+    getRequestArgsSchema(): undefined;
+    processRequest(logger?: Logger): Promise<ApiEndpointResponse>;
+}
+//# sourceMappingURL=rehashRules.d.ts.map

package/dist/types/api/write/rehashRules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rehashRules.d.ts","sourceRoot":"","sources":["../../../../src/api/write/rehashRules.ts"],"names":[],"mappings":"AAcA,OAAO,EACN,KAAK,WAAW,EAChB,KAAK,mBAAmB,EAExB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE,qBAAa,mBAAoB,YAAW,WAAW,CAAC,SAAS,CAAC;IAEhE,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,kBAAkB,EAAE,kBAAkB,EACtC,MAAM,EAAE,MAAM;IAGzB,oBAAoB,IAAI,SAAS;IAElC,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAsDnE"}

package/dist/types/classifyBrowser.d.ts

@@ -0,0 +1,4 @@
+export declare const BROWSER_NAMES: readonly ["chrome", "safari", "firefox", "edge", "opera", "samsung_internet", "wechat", "facebook", "instagram", "ie", "unknown"];
+export type BrowserName = (typeof BROWSER_NAMES)[number];
+export declare const classifyBrowser: (userAgent: string | undefined) => BrowserName;
+//# sourceMappingURL=classifyBrowser.d.ts.map

package/dist/types/classifyBrowser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifyBrowser.d.ts","sourceRoot":"","sources":["../../src/classifyBrowser.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,aAAa,mIAYhB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AASzD,eAAO,MAAM,eAAe,cAAe,MAAM,GAAG,SAAS,KAAG,WAkC/D,CAAC"}

package/dist/types/classifyOs.d.ts

@@ -0,0 +1,4 @@
+export declare const OS_NAMES: readonly ["windows", "macos", "ios", "android", "linux", "unknown"];
+export type OsName = (typeof OS_NAMES)[number];
+export declare const classifyOs: (userAgent: string | undefined) => OsName;
+//# sourceMappingURL=classifyOs.d.ts.map

package/dist/types/classifyOs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifyOs.d.ts","sourceRoot":"","sources":["../../src/classifyOs.ts"],"names":[],"mappings":"AA0BA,eAAO,MAAM,QAAQ,qEAOX,CAAC;AAEX,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;AAmB/C,eAAO,MAAM,UAAU,cAAe,MAAM,GAAG,SAAS,KAAG,MAmB1D,CAAC"}

package/dist/types/headerMatch.d.ts

@@ -0,0 +1,13 @@
+export declare const HEADER_OPERATORS: readonly ["equals", "contains", "notEquals", "notContains", "notEqualsAny", "notContainsAny"];
+export type HeaderOperator = (typeof HEADER_OPERATORS)[number];
+export declare const isHeaderOperator: (value: string | undefined) => value is HeaderOperator;
+export declare const HEADER_RULE_MARKER = "1";
+export declare const encodeHeaderValueList: (values: ReadonlyArray<string>) => string;
+export declare const decodeHeaderValueList: (value: string) => string[] | undefined;
+export declare const evaluateHeaderCondition: (headerName: string, operator: HeaderOperator, value: string, headers: Record<string, string>) => boolean;
+export declare const accessRuleHeaderMatches: (rule: {
+    headerName?: string;
+    headerValue?: string;
+    headerOperator?: string;
+}, headers: Record<string, string>) => boolean;
+//# sourceMappingURL=headerMatch.d.ts.map

package/dist/types/headerMatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headerMatch.d.ts","sourceRoot":"","sources":["../../src/headerMatch.ts"],"names":[],"mappings":"AAiCA,eAAO,MAAM,gBAAgB,+FAOnB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,eAAO,MAAM,gBAAgB,UACrB,MAAM,GAAG,SAAS,KACvB,KAAK,IAAI,cAEgD,CAAC;AAgB7D,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAQtC,eAAO,MAAM,qBAAqB,WAAY,aAAa,CAAC,MAAM,CAAC,KAAG,MAC/C,CAAC;AAYxB,eAAO,MAAM,qBAAqB,UAAW,MAAM,KAAG,MAAM,EAAE,GAAG,SAmBhE,CAAC;AAYF,eAAO,MAAM,uBAAuB,eACvB,MAAM,YACR,cAAc,SACjB,MAAM,WACJ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC7B,OA6BF,CAAC;AASF,eAAO,MAAM,uBAAuB,SAC7B;IACL,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB,WACQ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC7B,OAaF,CAAC"}

package/dist/types/matchedRule.d.ts

@@ -0,0 +1,4 @@
+import type { MatchedAccessRule } from "@prosopo/types";
+import type { AccessRule } from "#policy/rule.js";
+export declare const describeMatchedRule: (rule: AccessRule) => MatchedAccessRule;
+//# sourceMappingURL=matchedRule.d.ts.map

package/dist/types/matchedRule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matchedRule.d.ts","sourceRoot":"","sources":["../../src/matchedRule.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,iBAAiB,EAAwB,MAAM,gBAAgB,CAAC;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAwElD,eAAO,MAAM,mBAAmB,SAAU,UAAU,KAAG,iBAWrD,CAAC"}

package/dist/types/mongoose/.export.d.ts

@@ -0,0 +1,2 @@
+export { accessRuleMongooseSchema } from "./mongooseRuleSchema.js";
+//# sourceMappingURL=.export.d.ts.map

package/dist/types/mongoose/.export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../../src/mongoose/.export.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/types/mongoose/mongooseRuleSchema.d.ts

@@ -0,0 +1,4 @@
+import type { SchemaDefinition } from "mongoose";
+import type { AccessRuleRecord } from "#policy/ruleRecord.js";
+export declare const accessRuleMongooseSchema: SchemaDefinition<AccessRuleRecord>;
+//# sourceMappingURL=mongooseRuleSchema.d.ts.map

package/dist/types/mongoose/mongooseRuleSchema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongooseRuleSchema.d.ts","sourceRoot":"","sources":["../../../src/mongoose/mongooseRuleSchema.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEjD,OAAO,KAAK,EACX,gBAAgB,EAIhB,MAAM,uBAAuB,CAAC;AA+C/B,eAAO,MAAM,wBAAwB,EAAE,gBAAgB,CAAC,gBAAgB,CAQtC,CAAC"}

package/dist/types/redis/.export.d.ts

@@ -0,0 +1,3 @@
+export { createRedisAccessRulesStorage } from "./redisRulesStorage.js";
+export { accessRulesRedisIndex } from "./redisRuleIndex.js";
+//# sourceMappingURL=.export.d.ts.map

package/dist/types/redis/.export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../../src/redis/.export.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAEvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/types/redis/reader/redisAggregate.d.ts

@@ -0,0 +1,5 @@
+import type { Logger } from "@prosopo/logger";
+import type { RedisClientType } from "redis";
+export declare const searchRedisKeysBounded: (client: RedisClientType, query: string, maxKeys: number) => Promise<string[]>;
+export declare const aggregateRedisKeys: (client: RedisClientType, query: string, logger: Logger, batchHandler?: (keys: string[]) => Promise<void>, maxKeys?: number) => Promise<string[]>;
+//# sourceMappingURL=redisAggregate.d.ts.map

package/dist/types/redis/reader/redisAggregate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisAggregate.d.ts","sourceRoot":"","sources":["../../../../src/redis/reader/redisAggregate.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAoB7C,eAAO,MAAM,sBAAsB,WAC1B,eAAe,SAChB,MAAM,WACJ,MAAM,KACb,OAAO,CAAC,MAAM,EAAE,CAWlB,CAAC;AAGF,eAAO,MAAM,kBAAkB,WACtB,eAAe,SAChB,MAAM,UACL,MAAM,iBACC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,YACtC,MAAM,KACd,OAAO,CAAC,MAAM,EAAE,CAkElB,CAAC"}

package/dist/types/redis/reader/redisRulesQuery.d.ts

@@ -0,0 +1,5 @@
+import { type AccessRulesFilter } from "#policy/rulesStorage.js";
+export declare const REDIS_QUERY_DIALECT = 2;
+export declare const getBlockPoolClause: (includeDeferred: boolean) => string;
+export declare const getRulesRedisQuery: (filter: AccessRulesFilter, matchingFieldsOnly: boolean) => string;
+//# sourceMappingURL=redisRulesQuery.d.ts.map

package/dist/types/redis/reader/redisRulesQuery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRulesQuery.d.ts","sourceRoot":"","sources":["../../../../src/redis/reader/redisRulesQuery.ts"],"names":[],"mappings":"AAsBA,OAAO,EACN,KAAK,iBAAiB,EAEtB,MAAM,yBAAyB,CAAC;AAcjC,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAmLrC,eAAO,MAAM,kBAAkB,oBAAqB,OAAO,KAAG,MAGA,CAAC;AAY/D,eAAO,MAAM,kBAAkB,WACtB,iBAAiB,sBACL,OAAO,KACzB,MAgCF,CAAC"}

package/dist/types/redis/reader/redisRulesReader.d.ts

@@ -0,0 +1,30 @@
+import type { Logger } from "@prosopo/logger";
+import type { RedisClientType } from "redis";
+import { type AccessRule } from "#policy/rule.js";
+import type { AccessRuleEntry, AccessRulesFilter, AccessRulesReader } from "#policy/rulesStorage.js";
+export declare const SERVER_SIDE_RANK_TOP_N = 20;
+export declare class RedisRulesReader implements AccessRulesReader {
+    private readonly client;
+    private readonly logger;
+    constructor(client: RedisClientType, logger: Logger);
+    getMissingRuleIds(ruleIds: string[]): Promise<string[]>;
+    fetchRules(ruleIds: string[]): Promise<AccessRuleEntry[]>;
+    findRules(filter: AccessRulesFilter, matchingFieldsOnly?: boolean, skipEmptyUserScopes?: boolean): Promise<AccessRule[]>;
+    private findRulesSplit;
+    private findRulesRanked;
+    private findRulesGreedy;
+    findRuleIds(filter: AccessRulesFilter, matchingFieldsOnly?: boolean): Promise<string[]>;
+    fetchAllRuleIds(batchHandler: (ruleIds: string[]) => Promise<void>): Promise<void>;
+    protected fetchRuleEntries(keys: string[]): Promise<AccessRuleEntry[]>;
+    protected getRuleKeys(ruleIds: string[]): string[];
+}
+export declare class DummyRedisRulesReader implements AccessRulesReader {
+    private readonly logger;
+    constructor(logger: Logger);
+    getMissingRuleIds(ruleIds: string[]): Promise<string[]>;
+    fetchRules(ruleIds: string[]): Promise<AccessRuleEntry[]>;
+    findRules(filter: AccessRulesFilter, matchingFieldsOnly?: boolean, skipEmptyUserScopes?: boolean): Promise<AccessRule[]>;
+    findRuleIds(filter: AccessRulesFilter, matchingFieldsOnly?: boolean): Promise<string[]>;
+    fetchAllRuleIds(batchHandler: (ruleIds: string[]) => Promise<void>): Promise<void>;
+}
+//# sourceMappingURL=redisRulesReader.d.ts.map

package/dist/types/redis/reader/redisRulesReader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRulesReader.d.ts","sourceRoot":"","sources":["../../../../src/redis/reader/redisRulesReader.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAgB7C,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,KAAK,EACX,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,MAAM,yBAAyB,CAAC;AAuBjC,eAAO,MAAM,sBAAsB,KAAK,CAAC;AA4HzC,qBAAa,gBAAiB,YAAW,iBAAiB;IAExD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,MAAM;IAG1B,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAcvD,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAazD,SAAS,CACd,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,EAC1B,mBAAmB,UAAO,GACxB,OAAO,CAAC,UAAU,EAAE,CAAC;YAoDV,cAAc;YA4Hd,eAAe;YA0Hf,eAAe;IAuDvB,WAAW,CAChB,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,GACxB,OAAO,CAAC,MAAM,EAAE,CAAC;IAgDd,eAAe,CACpB,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAChD,OAAO,CAAC,IAAI,CAAC;cAYA,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IA8B5E,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE;CAGlD;AAED,qBAAa,qBAAsB,YAAW,iBAAiB;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAErC,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAWvD,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAWzD,SAAS,CACd,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,EAC1B,mBAAmB,UAAO,GACxB,OAAO,CAAC,UAAU,EAAE,CAAC;IAWlB,WAAW,CAChB,MAAM,EAAE,iBAAiB,EACzB,kBAAkB,UAAQ,GACxB,OAAO,CAAC,MAAM,EAAE,CAAC;IAWd,eAAe,CACpB,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAChD,OAAO,CAAC,IAAI,CAAC;CAKhB"}

package/dist/types/redis/reader/redisRulesSplitQuery.d.ts

@@ -0,0 +1,12 @@
+import { type UserScope } from "#policy/rule.js";
+type SubQuery = {
+    kind: string;
+    query: string;
+};
+export declare const buildScopedRulesSubQueries: (userScope: UserScope, clientId: string | undefined, options?: {
+    blockOnly?: boolean;
+    includeDeferred?: boolean;
+}) => SubQuery[];
+export declare const buildScopedBlockSubQueries: (userScope: UserScope, clientId: string | undefined) => SubQuery[];
+export {};
+//# sourceMappingURL=redisRulesSplitQuery.d.ts.map

package/dist/types/redis/reader/redisRulesSplitQuery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRulesSplitQuery.d.ts","sourceRoot":"","sources":["../../../../src/redis/reader/redisRulesSplitQuery.ts"],"names":[],"mappings":"AAeA,OAAO,EAAgC,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AA0E/E,KAAK,QAAQ,GAAG;IAGf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACd,CAAC;AAmCF,eAAO,MAAM,0BAA0B,cAC3B,SAAS,YACV,MAAM,GAAG,SAAS,YACnB;IAAE,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,KACzD,QAAQ,EAqCV,CAAC;AA+DF,eAAO,MAAM,0BAA0B,cAC3B,SAAS,YACV,MAAM,GAAG,SAAS,KAC1B,QAAQ,EAC0D,CAAC"}

package/dist/types/redis/redisClient.d.ts

@@ -0,0 +1,11 @@
+import type { Logger } from "@prosopo/logger";
+import type { RedisClientType } from "redis";
+import { type ZodType, type ZodTypeDef } from "zod";
+export declare const REDIS_BATCH_SIZE = 1000;
+export declare const getMissingRedisKeys: (client: RedisClientType, keys: string[]) => Promise<string[]>;
+export declare const fetchRedisHashRecords: (client: RedisClientType, keys: string[], logger: Logger) => Promise<{
+    records: object[];
+    expirations: (number | undefined)[];
+}>;
+export declare const parseRedisRecords: <T>(records: unknown[], recordSchema: ZodType<T, ZodTypeDef, unknown>, logger: Logger) => T[];
+//# sourceMappingURL=redisClient.d.ts.map

package/dist/types/redis/redisClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisClient.d.ts","sourceRoot":"","sources":["../../../src/redis/redisClient.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAC7C,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,UAAU,EAAK,MAAM,KAAK,CAAC;AAEvD,eAAO,MAAM,gBAAgB,OAAQ,CAAC;AAEtC,eAAO,MAAM,mBAAmB,WACvB,eAAe,QACjB,MAAM,EAAE,KACZ,OAAO,CAAC,MAAM,EAAE,CAsBlB,CAAC;AAEF,eAAO,MAAM,qBAAqB,WACzB,eAAe,QACjB,MAAM,EAAE,UACN,MAAM,KACZ,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAA;CAAE,CAgBpE,CAAC;AAOF,eAAO,MAAM,iBAAiB,GAAI,CAAC,WACzB,OAAO,EAAE,gBACJ,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UACrC,MAAM,KACZ,CAAC,EAcD,CAAC"}

package/dist/types/redis/redisRuleIndex.d.ts

@@ -0,0 +1,14 @@
+import type { RedisIndex } from "@prosopo/redis-client";
+import { type RediSearchSchema } from "@redis/search";
+import type { AccessRule } from "#policy/rule.js";
+export declare const userIpRedisSchema: RediSearchSchema;
+export declare const userAttributesRedisSchema: RediSearchSchema;
+export declare const userScopeRedisSchema: RediSearchSchema;
+export declare const policyScopeRedisSchema: RediSearchSchema;
+export declare const accessRuleRedisSchema: RediSearchSchema;
+export declare const ACCESS_RULES_REDIS_INDEX_NAME = "index:user-access-rules";
+export declare const ACCESS_RULE_REDIS_KEY_PREFIX = "uar:";
+export { GLOBAL_CLIENT_SCOPE_SENTINEL } from "#policy/rule.js";
+export declare const accessRulesRedisIndex: RedisIndex;
+export declare const getAccessRuleRedisKey: (rule: AccessRule) => string;
+//# sourceMappingURL=redisRuleIndex.d.ts.map

package/dist/types/redis/redisRuleIndex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRuleIndex.d.ts","sourceRoot":"","sources":["../../../src/redis/redisRuleIndex.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,KAAK,gBAAgB,EAAqB,MAAM,eAAe,CAAC;AACzE,OAAO,KAAK,EACX,UAAU,EAKV,MAAM,iBAAiB,CAAC;AAGzB,eAAO,MAAM,iBAAiB,EAAE,gBAIL,CAAC;AAE5B,eAAO,MAAM,yBAAyB,EAAE,gBA0BL,CAAC;AAEpC,eAAO,MAAM,oBAAoB,EAAE,gBAGR,CAAC;AAE5B,eAAO,MAAM,sBAAsB,EAAE,gBAKL,CAAC;AAUjC,eAAO,MAAM,qBAAqB,EAAE,gBAiBR,CAAC;AAE7B,eAAO,MAAM,6BAA6B,4BAA4B,CAAC;AAGvE,eAAO,MAAM,4BAA4B,SAAS,CAAC;AAMnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAE/D,eAAO,MAAM,qBAAqB,EAAE,UAOnC,CAAC;AAEF,eAAO,MAAM,qBAAqB,SAAU,UAAU,KAAG,MACD,CAAC"}

package/dist/types/redis/redisRulesStorage.d.ts

@@ -0,0 +1,5 @@
+import type { Logger } from "@prosopo/logger";
+import type { RedisConnection } from "@prosopo/redis-client";
+import type { AccessRulesStorage } from "#policy/rulesStorage.js";
+export declare const createRedisAccessRulesStorage: (connection: RedisConnection, logger: Logger) => AccessRulesStorage;
+//# sourceMappingURL=redisRulesStorage.d.ts.map

package/dist/types/redis/redisRulesStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRulesStorage.d.ts","sourceRoot":"","sources":["../../../src/redis/redisRulesStorage.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAEX,kBAAkB,EAElB,MAAM,yBAAyB,CAAC;AAOjC,eAAO,MAAM,6BAA6B,eAC7B,eAAe,UACnB,MAAM,KACZ,kBAqBF,CAAC"}

package/dist/types/redis/redisRulesWriter.d.ts

@@ -0,0 +1,22 @@
+import type { Logger } from "@prosopo/logger";
+import type { RedisClientType } from "redis";
+import { type AccessRule } from "#policy/rule.js";
+import type { AccessRuleEntry, AccessRulesWriter } from "#policy/rulesStorage.js";
+export declare class RedisRulesWriter implements AccessRulesWriter {
+    private readonly client;
+    private readonly logger;
+    constructor(client: RedisClientType, logger: Logger);
+    insertRules(ruleEntries: AccessRuleEntry[]): Promise<string[]>;
+    deleteRules(ruleIds: string[]): Promise<void>;
+    deleteAllRules(): Promise<number>;
+    protected insertRuleEntries(ruleEntries: AccessRuleEntry[]): Promise<string[]>;
+}
+export declare const getRedisRuleValue: (rule: AccessRule) => Record<string, string>;
+export declare class DummyRedisRulesWriter implements AccessRulesWriter {
+    private readonly logger;
+    constructor(logger: Logger);
+    insertRules(ruleEntries: AccessRuleEntry[]): Promise<string[]>;
+    deleteRules(ruleIds: string[]): Promise<void>;
+    deleteAllRules(): Promise<number>;
+}
+//# sourceMappingURL=redisRulesWriter.d.ts.map

package/dist/types/redis/redisRulesWriter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redisRulesWriter.d.ts","sourceRoot":"","sources":["../../../src/redis/redisRulesWriter.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAE7C,OAAO,EAAE,KAAK,UAAU,EAAgC,MAAM,iBAAiB,CAAC;AAChF,OAAO,KAAK,EACX,eAAe,EACf,iBAAiB,EACjB,MAAM,yBAAyB,CAAC;AASjC,qBAAa,gBAAiB,YAAW,iBAAiB;IAExD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,MAAM;IAG1B,WAAW,CAAC,WAAW,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAa9D,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB7C,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;cAsBvB,iBAAiB,CAChC,WAAW,EAAE,eAAe,EAAE,GAC5B,OAAO,CAAC,MAAM,EAAE,CAAC;CAqCpB;AAED,eAAO,MAAM,iBAAiB,SAAU,UAAU,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAyBzE,CAAC;AAEF,qBAAa,qBAAsB,YAAW,iBAAiB;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAErC,WAAW,CAAC,WAAW,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAW9D,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAS7C,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;CAOvC"}

package/dist/types/rule.d.ts

@@ -0,0 +1,52 @@
+import type { CaptchaType, ResultReason } from "@prosopo/types";
+export declare enum AccessPolicyType {
+    Block = "block",
+    Restrict = "restrict",
+    Allow = "allow"
+}
+export declare const GLOBAL_CLIENT_SCOPE_SENTINEL = "global";
+export type AccessPolicy = {
+    type: AccessPolicyType;
+    captchaType?: CaptchaType;
+    description?: string;
+    solvedImagesCount?: number;
+    imageThreshold?: number;
+    powDifficulty?: number;
+    unsolvedImagesCount?: number;
+    frictionlessScore?: number;
+    deferToVerify?: boolean;
+    messageKey?: ResultReason;
+};
+export type PolicyScope = {
+    clientId?: string;
+};
+export type PolicyScopeExclusions = {
+    excludedClientIds?: string[];
+};
+export type UserIp = {
+    numericIp?: bigint;
+    numericIpMaskMin?: bigint;
+    numericIpMaskMax?: bigint;
+};
+export type UserAttributes = {
+    userId?: string;
+    ja4Hash?: string;
+    headersHash?: string;
+    userAgentHash?: string;
+    headHash?: string;
+    coords?: string;
+    countryCode?: string;
+    asn?: number;
+    os?: string;
+    browser?: string;
+    headerMatch?: string;
+    headerName?: string;
+    headerValue?: string;
+    headerOperator?: string;
+    webBotAuthAgent?: string;
+};
+export type UserScope = UserAttributes & UserIp;
+export type AccessRule = AccessPolicy & PolicyScope & PolicyScopeExclusions & UserScope & {
+    groupId?: string;
+};
+//# sourceMappingURL=rule.d.ts.map

package/dist/types/rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.d.ts","sourceRoot":"","sources":["../../src/rule.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEhE,oBAAY,gBAAgB;IAC3B,KAAK,UAAU;IACf,QAAQ,aAAa;IASrB,KAAK,UAAU;CACf;AAYD,eAAO,MAAM,4BAA4B,WAAW,CAAC;AAErD,MAAM,MAAM,YAAY,GAAG;IAC1B,IAAI,EAAE,gBAAgB,CAAC;IACvB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAY3B,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB,UAAU,CAAC,EAAE,YAAY,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAInC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,MAAM,GAAG;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IAMb,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IAUjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IAOxB,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,cAAc,GAAG,MAAM,CAAC;AAGhD,MAAM,MAAM,UAAU,GAAG,YAAY,GACpC,WAAW,GACX,qBAAqB,GACrB,SAAS,GAAG;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC"}

package/dist/types/ruleInput/.export.d.ts

@@ -0,0 +1,4 @@
+export { accessRuleInput, type AccessRulesFilterInput } from "./ruleInput.js";
+export { accessPolicyInput, policyScopeInput } from "./policyInput.js";
+export { userScopeInput } from "./userScopeInput.js";
+//# sourceMappingURL=.export.d.ts.map

package/dist/types/ruleInput/.export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":".export.d.ts","sourceRoot":"","sources":["../../../src/ruleInput/.export.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,eAAe,EAAE,KAAK,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAE9E,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEvE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/types/ruleInput/policyInput.d.ts

@@ -0,0 +1,109 @@
+import { ResultReason } from "@prosopo/types";
+import { z } from "zod";
+import { type AccessPolicy, AccessPolicyType } from "#policy/rule.js";
+export declare const accessPolicyInputShape: z.ZodObject<{
+    type: z.ZodNativeEnum<typeof AccessPolicyType>;
+    captchaType: z.ZodOptional<z.ZodEffects<z.ZodNativeEnum<typeof import("@prosopo/types").CaptchaType>, import("@prosopo/types").CaptchaType, import("@prosopo/types").CaptchaType>>;
+    description: z.ZodOptional<z.ZodString>;
+    solvedImagesCount: z.ZodOptional<z.ZodNumber>;
+    imageThreshold: z.ZodOptional<z.ZodNumber>;
+    powDifficulty: z.ZodOptional<z.ZodNumber>;
+    unsolvedImagesCount: z.ZodOptional<z.ZodNumber>;
+    frictionlessScore: z.ZodOptional<z.ZodNumber>;
+    deferToVerify: z.ZodOptional<z.ZodEffects<z.ZodBoolean, boolean, unknown>>;
+    messageKey: z.ZodOptional<z.ZodNativeEnum<typeof ResultReason>>;
+}, "strip", z.ZodTypeAny, {
+    type: AccessPolicyType;
+    captchaType?: import("@prosopo/types").CaptchaType | undefined;
+    description?: string | undefined;
+    solvedImagesCount?: number | undefined;
+    imageThreshold?: number | undefined;
+    powDifficulty?: number | undefined;
+    unsolvedImagesCount?: number | undefined;
+    frictionlessScore?: number | undefined;
+    deferToVerify?: boolean | undefined;
+    messageKey?: ResultReason | undefined;
+}, {
+    type: AccessPolicyType;
+    captchaType?: import("@prosopo/types").CaptchaType | undefined;
+    description?: string | undefined;
+    solvedImagesCount?: number | undefined;
+    imageThreshold?: number | undefined;
+    powDifficulty?: number | undefined;
+    unsolvedImagesCount?: number | undefined;
+    frictionlessScore?: number | undefined;
+    deferToVerify?: unknown;
+    messageKey?: ResultReason | undefined;
+}>;
+export declare const accessPolicyInput: z.ZodEffects<z.ZodObject<{
+    type: z.ZodNativeEnum<typeof AccessPolicyType>;
+    captchaType: z.ZodOptional<z.ZodEffects<z.ZodNativeEnum<typeof import("@prosopo/types").CaptchaType>, import("@prosopo/types").CaptchaType, import("@prosopo/types").CaptchaType>>;
+    description: z.ZodOptional<z.ZodString>;
+    solvedImagesCount: z.ZodOptional<z.ZodNumber>;
+    imageThreshold: z.ZodOptional<z.ZodNumber>;
+    powDifficulty: z.ZodOptional<z.ZodNumber>;
+    unsolvedImagesCount: z.ZodOptional<z.ZodNumber>;
+    frictionlessScore: z.ZodOptional<z.ZodNumber>;
+    deferToVerify: z.ZodOptional<z.ZodEffects<z.ZodBoolean, boolean, unknown>>;
+    messageKey: z.ZodOptional<z.ZodNativeEnum<typeof ResultReason>>;
+}, "strip", z.ZodTypeAny, {
+    type: AccessPolicyType;
+    captchaType?: import("@prosopo/types").CaptchaType | undefined;
+    description?: string | undefined;
+    solvedImagesCount?: number | undefined;
+    imageThreshold?: number | undefined;
+    powDifficulty?: number | undefined;
+    unsolvedImagesCount?: number | undefined;
+    frictionlessScore?: number | undefined;
+    deferToVerify?: boolean | undefined;
+    messageKey?: ResultReason | undefined;
+}, {
+    type: AccessPolicyType;
+    captchaType?: import("@prosopo/types").CaptchaType | undefined;
+    description?: string | undefined;
+    solvedImagesCount?: number | undefined;
+    imageThreshold?: number | undefined;
+    powDifficulty?: number | undefined;
+    unsolvedImagesCount?: number | undefined;
+    frictionlessScore?: number | undefined;
+    deferToVerify?: unknown;
+    messageKey?: ResultReason | undefined;
+}>, {
+    type: AccessPolicyType;
+    captchaType?: import("@prosopo/types").CaptchaType | undefined;
+    description?: string | undefined;
+    solvedImagesCount?: number | undefined;
+    imageThreshold?: number | undefined;
+    powDifficulty?: number | undefined;
+    unsolvedImagesCount?: number | undefined;
+    frictionlessScore?: number | undefined;
+    deferToVerify?: boolean | undefined;
+    messageKey?: ResultReason | undefined;
+}, {
+    type: AccessPolicyType;
+    captchaType?: import("@prosopo/types").CaptchaType | undefined;
+    description?: string | undefined;
+    solvedImagesCount?: number | undefined;
+    imageThreshold?: number | undefined;
+    powDifficulty?: number | undefined;
+    unsolvedImagesCount?: number | undefined;
+    frictionlessScore?: number | undefined;
+    deferToVerify?: unknown;
+    messageKey?: ResultReason | undefined;
+}>;
+export declare const sanitizeAccessPolicy: (policy: AccessPolicy) => AccessPolicy;
+export declare const policyScopeInput: z.ZodObject<{
+    clientId: z.ZodEffects<z.ZodOptional<z.ZodString>, string | undefined, unknown>;
+}, "strip", z.ZodTypeAny, {
+    clientId?: string | undefined;
+}, {
+    clientId?: unknown;
+}>;
+export declare const policyScopeExclusionsInput: z.ZodObject<{
+    excludedClientIds: z.ZodEffects<z.ZodOptional<z.ZodArray<z.ZodString, "many">>, string[] | undefined, unknown>;
+}, "strip", z.ZodTypeAny, {
+    excludedClientIds?: string[] | undefined;
+}, {
+    excludedClientIds?: unknown;
+}>;
+//# sourceMappingURL=policyInput.d.ts.map

package/dist/types/ruleInput/policyInput.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policyInput.d.ts","sourceRoot":"","sources":["../../../src/ruleInput/policyInput.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,YAAY,EAA+B,MAAM,gBAAgB,CAAC;AAC3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACN,KAAK,YAAY,EACjB,gBAAgB,EAIhB,MAAM,iBAAiB,CAAC;AAwBzB,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqBD,CAAC;AAEnC,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoB7B,CAAC;AAOF,eAAO,MAAM,oBAAoB,WAAY,YAAY,KAAG,YAM3D,CAAC;AAOF,eAAO,MAAM,gBAAgB;;;;;;EAUI,CAAC;AAalC,eAAO,MAAM,0BAA0B;;;;;;EAYI,CAAC"}