@pthm/melange 0.6.7 → 0.7.0

package/dist/bulk-check.d.ts

@@ -0,0 +1,124 @@
+/**
+ * Bulk permission check API for Melange TypeScript client.
+ *
+ * This module provides BulkCheckBuilder for batching multiple permission checks
+ * into a single SQL call via check_permission_bulk, with deduplication and caching.
+ */
+import type { MelangeObject, Relation, Decision } from './types.js';
+import type { Queryable } from './database.js';
+import type { Cache } from './cache.js';
+import { BulkCheckDeniedError } from './errors.js';
+/**
+ * Maximum number of checks allowed in a single bulk operation.
+ * Prevents accidental resource exhaustion from unbounded batches.
+ */
+export declare const MAX_BULK_CHECK_SIZE = 10000;
+/** @internal Internals exposed by Checker for BulkCheckBuilder. */
+export interface CheckerInternals {
+    db: Queryable;
+    cache: Cache;
+    decision?: Decision;
+    shouldValidate: boolean;
+    cacheKey(subject: MelangeObject, relation: Relation, object: MelangeObject): string;
+}
+/**
+ * BulkCheckBuilder accumulates permission checks and executes them in a single
+ * SQL call via check_permission_bulk.
+ *
+ * Use `checker.newBulkCheck()` to create one.
+ *
+ * @example
+ * ```typescript
+ * const results = await checker.newBulkCheck()
+ *   .add(user, 'can_read', repo1)
+ *   .add(user, 'can_read', repo2)
+ *   .add(user, 'can_write', repo1)
+ *   .execute();
+ *
+ * if (results.all()) {
+ *   // All checks passed
+ * }
+ * ```
+ */
+export declare class BulkCheckBuilder {
+    private readonly internals;
+    private readonly requests;
+    private readonly ids;
+    /** @internal Use `checker.newBulkCheck()` instead. */
+    constructor(internals: CheckerInternals);
+    /**
+     * Add a permission check with an auto-generated ID (string index).
+     * Returns the builder for chaining.
+     */
+    add(subject: MelangeObject, relation: Relation, object: MelangeObject): this;
+    /**
+     * Add a permission check with a caller-supplied ID.
+     * The ID must be non-empty and unique within the batch.
+     *
+     * @throws {Error} If id is empty or already used
+     */
+    addWithId(id: string, subject: MelangeObject, relation: Relation, object: MelangeObject): this;
+    /**
+     * Add checks for one subject+relation across multiple objects.
+     * Each check gets an auto-generated ID.
+     */
+    addMany(subject: MelangeObject, relation: Relation, ...objects: MelangeObject[]): this;
+    /**
+     * Execute all accumulated checks in a single SQL call.
+     * Results honour decision overrides, caching, and deduplication.
+     */
+    execute(): Promise<BulkCheckResults>;
+    private buildAllDecision;
+}
+/**
+ * BulkCheckResult holds the outcome of a single check within a bulk batch.
+ */
+export declare class BulkCheckResult {
+    readonly id: string;
+    readonly index: number;
+    readonly subject: MelangeObject;
+    readonly relation: Relation;
+    readonly object: MelangeObject;
+    readonly allowed: boolean;
+    readonly error?: Error;
+    /** @internal */
+    constructor(id: string, index: number, subject: MelangeObject, relation: Relation, object: MelangeObject, allowed: boolean, error?: Error);
+    /** True if the permission was granted and no error occurred. */
+    isAllowed(): boolean;
+}
+/**
+ * BulkCheckResults holds the outcomes of a bulk permission check.
+ * Results are in the same order as the original requests.
+ */
+export declare class BulkCheckResults {
+    private readonly _results;
+    private readonly _byId;
+    /** @internal */
+    constructor(results: BulkCheckResult[], byId: Map<string, BulkCheckResult>);
+    /** Number of results. */
+    get length(): number;
+    /** Get result at the given index. Throws if out of range. */
+    get(index: number): BulkCheckResult;
+    /** Get result by its ID, or undefined if not found. */
+    getById(id: string): BulkCheckResult | undefined;
+    /** True if every check was allowed (false for empty batch). */
+    all(): boolean;
+    /** True if at least one check was allowed. */
+    any(): boolean;
+    /** True if no check was allowed (true for empty batch). */
+    none(): boolean;
+    /** All results in request order. */
+    results(): BulkCheckResult[];
+    /** Only the results where the check was allowed. */
+    allowed(): BulkCheckResult[];
+    /** Only the results where the check was denied or errored. */
+    denied(): BulkCheckResult[];
+    /**
+     * Returns null if all checks were allowed, or a BulkCheckDeniedError
+     * describing the first denied check.
+     *
+     * For empty batches, returns null (no denials).
+     */
+    allOrError(): BulkCheckDeniedError | null;
+}
+//# sourceMappingURL=bulk-check.d.ts.map

package/dist/bulk-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk-check.d.ts","sourceRoot":"","sources":["../src/bulk-check.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACpE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAgB,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAGjE;;;GAGG;AACH,eAAO,MAAM,mBAAmB,QAAQ,CAAC;AAUzC,mEAAmE;AACnE,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,SAAS,CAAC;IACd,KAAK,EAAE,KAAK,CAAC;IACb,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,CAAC;CACrF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA0B;IACnD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAqB;IAEzC,sDAAsD;gBAC1C,SAAS,EAAE,gBAAgB;IAIvC;;;OAGG;IACH,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI;IAO5E;;;;;OAKG;IACH,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI;IAY9F;;;OAGG;IACH,OAAO,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,GAAG,IAAI;IAOtF;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAoH1C,OAAO,CAAC,gBAAgB;CAazB;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IAEvB,gBAAgB;gBAEd,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,OAAO,EAChB,KAAK,CAAC,EAAE,KAAK;IAWf,gEAAgE;IAChE,SAAS,IAAI,OAAO;CAGrB;AAED;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoB;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IAErD,gBAAgB;gBACJ,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC;IAK1E,yBAAyB;IACzB,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,6DAA6D;IAC7D,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe;IAOnC,uDAAuD;IACvD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAIhD,+DAA+D;IAC/D,GAAG,IAAI,OAAO;IAKd,8CAA8C;IAC9C,GAAG,IAAI,OAAO;IAId,2DAA2D;IAC3D,IAAI,IAAI,OAAO;IAIf,oCAAoC;IACpC,OAAO,IAAI,eAAe,EAAE;IAI5B,oDAAoD;IACpD,OAAO,IAAI,eAAe,EAAE;IAI5B,8DAA8D;IAC9D,MAAM,IAAI,eAAe,EAAE;IAI3B;;;;;OAKG;IACH,UAAU,IAAI,oBAAoB,GAAG,IAAI;CAe1C"}

package/dist/bulk-check.js

@@ -0,0 +1,290 @@
+/**
+ * Bulk permission check API for Melange TypeScript client.
+ *
+ * This module provides BulkCheckBuilder for batching multiple permission checks
+ * into a single SQL call via check_permission_bulk, with deduplication and caching.
+ */
+import { MelangeError, BulkCheckDeniedError } from './errors.js';
+import { validateObject, validateRelation } from './validator.js';
+/**
+ * Maximum number of checks allowed in a single bulk operation.
+ * Prevents accidental resource exhaustion from unbounded batches.
+ */
+export const MAX_BULK_CHECK_SIZE = 10000;
+/**
+ * BulkCheckBuilder accumulates permission checks and executes them in a single
+ * SQL call via check_permission_bulk.
+ *
+ * Use `checker.newBulkCheck()` to create one.
+ *
+ * @example
+ * ```typescript
+ * const results = await checker.newBulkCheck()
+ *   .add(user, 'can_read', repo1)
+ *   .add(user, 'can_read', repo2)
+ *   .add(user, 'can_write', repo1)
+ *   .execute();
+ *
+ * if (results.all()) {
+ *   // All checks passed
+ * }
+ * ```
+ */
+export class BulkCheckBuilder {
+    internals;
+    requests = [];
+    ids = new Set();
+    /** @internal Use `checker.newBulkCheck()` instead. */
+    constructor(internals) {
+        this.internals = internals;
+    }
+    /**
+     * Add a permission check with an auto-generated ID (string index).
+     * Returns the builder for chaining.
+     */
+    add(subject, relation, object) {
+        const id = String(this.requests.length);
+        this.ids.add(id);
+        this.requests.push({ id, subject, relation, object });
+        return this;
+    }
+    /**
+     * Add a permission check with a caller-supplied ID.
+     * The ID must be non-empty and unique within the batch.
+     *
+     * @throws {Error} If id is empty or already used
+     */
+    addWithId(id, subject, relation, object) {
+        if (!id) {
+            throw new Error('melange: BulkCheckBuilder.addWithId: id must not be empty');
+        }
+        if (this.ids.has(id)) {
+            throw new Error(`melange: BulkCheckBuilder.addWithId: duplicate id "${id}"`);
+        }
+        this.ids.add(id);
+        this.requests.push({ id, subject, relation, object });
+        return this;
+    }
+    /**
+     * Add checks for one subject+relation across multiple objects.
+     * Each check gets an auto-generated ID.
+     */
+    addMany(subject, relation, ...objects) {
+        for (const obj of objects) {
+            this.add(subject, relation, obj);
+        }
+        return this;
+    }
+    /**
+     * Execute all accumulated checks in a single SQL call.
+     * Results honour decision overrides, caching, and deduplication.
+     */
+    async execute() {
+        const { db, cache, decision, shouldValidate, cacheKey } = this.internals;
+        // 1. Decision override -- return all-same results without DB call.
+        if (decision) {
+            return this.buildAllDecision(decision.allowed);
+        }
+        // 2. Empty batch.
+        if (this.requests.length === 0) {
+            return new BulkCheckResults([], new Map());
+        }
+        // 3. Batch size guard.
+        if (this.requests.length > MAX_BULK_CHECK_SIZE) {
+            throw new MelangeError(`bulk check size ${this.requests.length} exceeds maximum ${MAX_BULK_CHECK_SIZE}`);
+        }
+        // 4. Validation.
+        if (shouldValidate) {
+            for (const r of this.requests) {
+                validateObject(r.subject, 'subject');
+                validateRelation(r.relation);
+                validateObject(r.object, 'object');
+            }
+        }
+        // 5. Deduplication -- map unique checks to original request indices.
+        //    The cacheKey format doubles as the dedup key since both encode
+        //    the same (subject, relation, object) triple.
+        const dedup = new Map();
+        for (let i = 0; i < this.requests.length; i++) {
+            const r = this.requests[i];
+            const key = cacheKey(r.subject, r.relation, r.object);
+            const existing = dedup.get(key);
+            if (existing) {
+                existing.push(i);
+            }
+            else {
+                dedup.set(key, [i]);
+            }
+        }
+        // 6. Cache lookup -- partition unique keys into cached and uncached.
+        const outcomes = new Map();
+        const uncachedKeys = [];
+        for (const [key, indices] of dedup) {
+            const r = this.requests[indices[0]];
+            const cached = await cache.get(cacheKey(r.subject, r.relation, r.object));
+            if (cached !== undefined) {
+                outcomes.set(key, cached);
+            }
+            else {
+                uncachedKeys.push(key);
+            }
+        }
+        // 7. SQL call for uncached checks.
+        if (uncachedKeys.length > 0) {
+            const subjectTypes = [];
+            const subjectIds = [];
+            const relations = [];
+            const objectTypes = [];
+            const objectIds = [];
+            for (const key of uncachedKeys) {
+                const r = this.requests[dedup.get(key)[0]];
+                subjectTypes.push(r.subject.type);
+                subjectIds.push(r.subject.id);
+                relations.push(r.relation);
+                objectTypes.push(r.object.type);
+                objectIds.push(r.object.id);
+            }
+            const result = await db.query('SELECT idx, allowed FROM check_permission_bulk($1, $2, $3, $4, $5)', [subjectTypes, subjectIds, relations, objectTypes, objectIds]);
+            for (const row of result.rows) {
+                // SQL idx is 1-based (WITH ORDINALITY), convert to 0-based.
+                const zeroIdx = row.idx - 1;
+                if (zeroIdx < 0 || zeroIdx >= uncachedKeys.length) {
+                    continue;
+                }
+                outcomes.set(uncachedKeys[zeroIdx], { allowed: row.allowed === 1 });
+            }
+            // 8. Cache store for DB results.
+            for (const key of uncachedKeys) {
+                const outcome = outcomes.get(key);
+                if (outcome) {
+                    await cache.set(key, outcome);
+                }
+            }
+        }
+        // 9. Result assembly -- fan out deduplicated results to all original indices.
+        const results = new Array(this.requests.length);
+        const byId = new Map();
+        for (const [key, indices] of dedup) {
+            const allowed = outcomes.get(key)?.allowed ?? false;
+            for (const origIdx of indices) {
+                const r = this.requests[origIdx];
+                const result = new BulkCheckResult(r.id, origIdx, r.subject, r.relation, r.object, allowed);
+                results[origIdx] = result;
+                byId.set(r.id, result);
+            }
+        }
+        return new BulkCheckResults(results, byId);
+    }
+    buildAllDecision(allowed) {
+        const results = [];
+        const byId = new Map();
+        for (let i = 0; i < this.requests.length; i++) {
+            const r = this.requests[i];
+            const result = new BulkCheckResult(r.id, i, r.subject, r.relation, r.object, allowed);
+            results.push(result);
+            byId.set(r.id, result);
+        }
+        return new BulkCheckResults(results, byId);
+    }
+}
+/**
+ * BulkCheckResult holds the outcome of a single check within a bulk batch.
+ */
+export class BulkCheckResult {
+    id;
+    index;
+    subject;
+    relation;
+    object;
+    allowed;
+    error;
+    /** @internal */
+    constructor(id, index, subject, relation, object, allowed, error) {
+        this.id = id;
+        this.index = index;
+        this.subject = subject;
+        this.relation = relation;
+        this.object = object;
+        this.allowed = allowed;
+        this.error = error;
+    }
+    /** True if the permission was granted and no error occurred. */
+    isAllowed() {
+        return this.allowed && !this.error;
+    }
+}
+/**
+ * BulkCheckResults holds the outcomes of a bulk permission check.
+ * Results are in the same order as the original requests.
+ */
+export class BulkCheckResults {
+    _results;
+    _byId;
+    /** @internal */
+    constructor(results, byId) {
+        this._results = results;
+        this._byId = byId;
+    }
+    /** Number of results. */
+    get length() {
+        return this._results.length;
+    }
+    /** Get result at the given index. Throws if out of range. */
+    get(index) {
+        if (index < 0 || index >= this._results.length) {
+            throw new RangeError(`index ${index} out of range [0, ${this._results.length})`);
+        }
+        return this._results[index];
+    }
+    /** Get result by its ID, or undefined if not found. */
+    getById(id) {
+        return this._byId.get(id);
+    }
+    /** True if every check was allowed (false for empty batch). */
+    all() {
+        if (this._results.length === 0)
+            return false;
+        return this._results.every((r) => r.isAllowed());
+    }
+    /** True if at least one check was allowed. */
+    any() {
+        return this._results.some((r) => r.isAllowed());
+    }
+    /** True if no check was allowed (true for empty batch). */
+    none() {
+        return !this.any();
+    }
+    /** All results in request order. */
+    results() {
+        return [...this._results];
+    }
+    /** Only the results where the check was allowed. */
+    allowed() {
+        return this._results.filter((r) => r.isAllowed());
+    }
+    /** Only the results where the check was denied or errored. */
+    denied() {
+        return this._results.filter((r) => !r.isAllowed());
+    }
+    /**
+     * Returns null if all checks were allowed, or a BulkCheckDeniedError
+     * describing the first denied check.
+     *
+     * For empty batches, returns null (no denials).
+     */
+    allOrError() {
+        let first;
+        let deniedCount = 0;
+        for (const r of this._results) {
+            if (!r.isAllowed()) {
+                if (!first)
+                    first = r;
+                deniedCount++;
+            }
+        }
+        if (!first)
+            return null;
+        return new BulkCheckDeniedError(first.subject, first.relation, first.object, first.index, deniedCount);
+    }
+}
+//# sourceMappingURL=bulk-check.js.map

package/dist/bulk-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk-check.js","sourceRoot":"","sources":["../src/bulk-check.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAmBzC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,gBAAgB;IACV,SAAS,CAAmB;IAC5B,QAAQ,GAAuB,EAAE,CAAC;IAClC,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,sDAAsD;IACtD,YAAY,SAA2B;QACrC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,GAAG,CAAC,OAAsB,EAAE,QAAkB,EAAE,MAAqB;QACnE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,EAAU,EAAE,OAAsB,EAAE,QAAkB,EAAE,MAAqB;QACrF,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,sDAAsD,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,OAAsB,EAAE,QAAkB,EAAE,GAAG,OAAwB;QAC7E,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAEzE,mEAAmE;QACnE,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjD,CAAC;QAED,kBAAkB;QAClB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,gBAAgB,CAAC,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QAC7C,CAAC;QAED,uBAAuB;QACvB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YAC/C,MAAM,IAAI,YAAY,CACpB,mBAAmB,IAAI,CAAC,QAAQ,CAAC,MAAM,oBAAoB,mBAAmB,EAAE,CACjF,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,IAAI,cAAc,EAAE,CAAC;YACnB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9B,cAAc,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBACrC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAC7B,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,oEAAoE;QACpE,kDAAkD;QAClD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC7C,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,YAAY,GAAa,EAAE,CAAC;YAClC,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,MAAM,WAAW,GAAa,EAAE,CAAC;YACjC,MAAM,SAAS,GAAa,EAAE,CAAC;YAE/B,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;gBAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5C,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAClC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC9B,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAC3B,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAChC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9B,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,oEAAoE,EACpE,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAC9D,CAAC;YAEF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC9B,4DAA4D;gBAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;gBAC5B,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;oBAClD,SAAS;gBACX,CAAC;gBACD,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC;YAED,iCAAiC;YACjC,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClC,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;QAED,8EAA8E;QAC9E,MAAM,OAAO,GAAsB,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,IAAI,GAAG,EAA2B,CAAC;QAEhD,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,IAAI,KAAK,CAAC;YAEpD,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;gBAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACjC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC5F,OAAO,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC;gBAC1B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAEO,gBAAgB,CAAC,OAAgB;QACvC,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAA2B,CAAC;QAEhD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACtF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,IAAI,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,eAAe;IACjB,EAAE,CAAS;IACX,KAAK,CAAS;IACd,OAAO,CAAgB;IACvB,QAAQ,CAAW;IACnB,MAAM,CAAgB;IACtB,OAAO,CAAU;IACjB,KAAK,CAAS;IAEvB,gBAAgB;IAChB,YACE,EAAU,EACV,KAAa,EACb,OAAsB,EACtB,QAAkB,EAClB,MAAqB,EACrB,OAAgB,EAChB,KAAa;QAEb,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,gEAAgE;IAChE,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;IACrC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IACV,QAAQ,CAAoB;IAC5B,KAAK,CAA+B;IAErD,gBAAgB;IAChB,YAAY,OAA0B,EAAE,IAAkC;QACxE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,yBAAyB;IACzB,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED,6DAA6D;IAC7D,GAAG,CAAC,KAAa;QACf,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC/C,MAAM,IAAI,UAAU,CAAC,SAAS,KAAK,qBAAqB,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,uDAAuD;IACvD,OAAO,CAAC,EAAU;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,+DAA+D;IAC/D,GAAG;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7C,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,8CAA8C;IAC9C,GAAG;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,2DAA2D;IAC3D,IAAI;QACF,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACrB,CAAC;IAED,oCAAoC;IACpC,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,oDAAoD;IACpD,OAAO;QACL,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,8DAA8D;IAC9D,MAAM;QACJ,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACrD,CAAC;IAED;;;;;OAKG;IACH,UAAU;QACR,IAAI,KAAkC,CAAC;QACvC,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;gBACnB,IAAI,CAAC,KAAK;oBAAE,KAAK,GAAG,CAAC,CAAC;gBACtB,WAAW,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,OAAO,IAAI,oBAAoB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACzG,CAAC;CACF"}

package/dist/bulk-check.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Unit tests for BulkCheckBuilder, BulkCheckResult, and BulkCheckResults.
+ *
+ * All tests use decision overrides so no database is needed.
+ */
+export {};
+//# sourceMappingURL=bulk-check.test.d.ts.map

package/dist/bulk-check.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk-check.test.d.ts","sourceRoot":"","sources":["../src/bulk-check.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/bulk-check.test.js

@@ -0,0 +1,191 @@
+/**
+ * Unit tests for BulkCheckBuilder, BulkCheckResult, and BulkCheckResults.
+ *
+ * All tests use decision overrides so no database is needed.
+ */
+import { describe, test, expect } from 'vitest';
+import { Checker, DecisionAllow, DecisionDeny } from './checker.js';
+import { BulkCheckDeniedError, isBulkCheckDeniedError } from './errors.js';
+import { MAX_BULK_CHECK_SIZE } from './bulk-check.js';
+// Helpers — null db is fine because decision overrides bypass SQL.
+const allowChecker = new Checker(null, { decision: DecisionAllow });
+const denyChecker = new Checker(null, { decision: DecisionDeny });
+const user = { type: 'user', id: '1' };
+const repo = (id) => ({ type: 'repository', id });
+describe('BulkCheckBuilder', () => {
+    test('add() assigns sequential auto-IDs', async () => {
+        const results = await allowChecker
+            .newBulkCheck()
+            .add(user, 'can_read', repo('1'))
+            .add(user, 'can_read', repo('2'))
+            .add(user, 'can_read', repo('3'))
+            .execute();
+        expect(results.length).toBe(3);
+        expect(results.get(0).id).toBe('0');
+        expect(results.get(1).id).toBe('1');
+        expect(results.get(2).id).toBe('2');
+    });
+    test('addWithId() stores custom IDs', async () => {
+        const results = await allowChecker
+            .newBulkCheck()
+            .addWithId('alpha', user, 'can_read', repo('10'))
+            .addWithId('beta', user, 'can_read', repo('20'))
+            .execute();
+        const alpha = results.getById('alpha');
+        expect(alpha).toBeDefined();
+        expect(alpha.object.id).toBe('10');
+        const beta = results.getById('beta');
+        expect(beta).toBeDefined();
+        expect(beta.object.id).toBe('20');
+    });
+    test('addWithId() throws on empty ID', () => {
+        const builder = allowChecker.newBulkCheck();
+        expect(() => builder.addWithId('', user, 'can_read', repo('1'))).toThrow('id must not be empty');
+    });
+    test('addWithId() throws on duplicate ID', () => {
+        const builder = allowChecker.newBulkCheck();
+        builder.addWithId('dup', user, 'can_read', repo('1'));
+        expect(() => builder.addWithId('dup', user, 'can_read', repo('2'))).toThrow('duplicate id "dup"');
+    });
+    test('addMany() adds multiple objects', async () => {
+        const results = await allowChecker
+            .newBulkCheck()
+            .addMany(user, 'can_read', repo('1'), repo('2'), repo('3'))
+            .execute();
+        expect(results.length).toBe(3);
+        expect(results.get(0).object.id).toBe('1');
+        expect(results.get(1).object.id).toBe('2');
+        expect(results.get(2).object.id).toBe('3');
+    });
+    test('chaining returns builder', () => {
+        const builder = allowChecker.newBulkCheck();
+        const result = builder
+            .add(user, 'can_read', repo('1'))
+            .addWithId('custom', user, 'can_read', repo('2'))
+            .addMany(user, 'can_read', repo('3'));
+        expect(result).toBe(builder);
+    });
+});
+describe('BulkCheckResults — DecisionAllow', () => {
+    test('all results allowed', async () => {
+        const results = await allowChecker
+            .newBulkCheck()
+            .add(user, 'can_read', repo('1'))
+            .add(user, 'can_read', repo('2'))
+            .add(user, 'can_read', repo('3'))
+            .execute();
+        expect(results.all()).toBe(true);
+        expect(results.none()).toBe(false);
+        expect(results.any()).toBe(true);
+        expect(results.allowed().length).toBe(3);
+        expect(results.denied().length).toBe(0);
+    });
+});
+describe('BulkCheckResults — DecisionDeny', () => {
+    test('all results denied', async () => {
+        const results = await denyChecker
+            .newBulkCheck()
+            .add(user, 'can_read', repo('1'))
+            .add(user, 'can_read', repo('2'))
+            .add(user, 'can_read', repo('3'))
+            .execute();
+        expect(results.all()).toBe(false);
+        expect(results.none()).toBe(true);
+        expect(results.any()).toBe(false);
+        expect(results.allowed().length).toBe(0);
+        expect(results.denied().length).toBe(3);
+    });
+});
+describe('BulkCheckResults — empty batch', () => {
+    test('empty batch returns correct aggregates', async () => {
+        const results = await allowChecker.newBulkCheck().execute();
+        expect(results.length).toBe(0);
+        expect(results.all()).toBe(false);
+        expect(results.none()).toBe(true);
+        expect(results.any()).toBe(false);
+        expect(results.allOrError()).toBeNull();
+    });
+});
+describe('BulkCheckResult accessors', () => {
+    test('result fields are correct', async () => {
+        const subject = { type: 'user', id: '42' };
+        const object = { type: 'repository', id: '99' };
+        const results = await allowChecker
+            .newBulkCheck()
+            .addWithId('check-1', subject, 'can_write', object)
+            .execute();
+        const r = results.get(0);
+        expect(r.id).toBe('check-1');
+        expect(r.index).toBe(0);
+        expect(r.subject.type).toBe('user');
+        expect(r.subject.id).toBe('42');
+        expect(r.relation).toBe('can_write');
+        expect(r.object.type).toBe('repository');
+        expect(r.object.id).toBe('99');
+        expect(r.allowed).toBe(true);
+        expect(r.error).toBeUndefined();
+    });
+});
+describe('BulkCheckResults.getById', () => {
+    test('returns undefined for unknown ID', async () => {
+        const results = await allowChecker
+            .newBulkCheck()
+            .add(user, 'can_read', repo('1'))
+            .execute();
+        expect(results.getById('nonexistent')).toBeUndefined();
+    });
+});
+describe('BulkCheckResults.get', () => {
+    test('throws on out-of-range index', async () => {
+        const results = await allowChecker
+            .newBulkCheck()
+            .add(user, 'can_read', repo('1'))
+            .execute();
+        expect(() => results.get(5)).toThrow(RangeError);
+        expect(() => results.get(-1)).toThrow(RangeError);
+    });
+});
+describe('BulkCheckResults.allOrError', () => {
+    test('returns null when all allowed', async () => {
+        const results = await allowChecker
+            .newBulkCheck()
+            .add(user, 'can_read', repo('1'))
+            .add(user, 'can_read', repo('2'))
+            .execute();
+        expect(results.allOrError()).toBeNull();
+    });
+    test('returns BulkCheckDeniedError when denied', async () => {
+        const results = await denyChecker
+            .newBulkCheck()
+            .add(user, 'can_read', repo('1'))
+            .add(user, 'can_read', repo('2'))
+            .add(user, 'can_read', repo('3'))
+            .execute();
+        const err = results.allOrError();
+        expect(err).toBeInstanceOf(BulkCheckDeniedError);
+        expect(err.total).toBe(3);
+        expect(err.index).toBe(0);
+        expect(err.subject.type).toBe('user');
+        expect(err.relation).toBe('can_read');
+        expect(isBulkCheckDeniedError(err)).toBe(true);
+    });
+});
+describe('allowed() and denied() filtering', () => {
+    test('results() returns all results in order', async () => {
+        const results = await allowChecker
+            .newBulkCheck()
+            .add(user, 'can_read', repo('1'))
+            .add(user, 'can_read', repo('2'))
+            .execute();
+        const all = results.results();
+        expect(all.length).toBe(2);
+        expect(all[0].object.id).toBe('1');
+        expect(all[1].object.id).toBe('2');
+    });
+});
+describe('MAX_BULK_CHECK_SIZE', () => {
+    test('equals 10000', () => {
+        expect(MAX_BULK_CHECK_SIZE).toBe(10000);
+    });
+});
+//# sourceMappingURL=bulk-check.test.js.map

package/dist/bulk-check.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk-check.test.js","sourceRoot":"","sources":["../src/bulk-check.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,mEAAmE;AACnE,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,IAAW,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;AAC3E,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,IAAW,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;AAEzE,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;AACvC,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;AAE1D,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,IAAI,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,OAAO,GAAG,MAAM,YAAY;aAC/B,YAAY,EAAE;aACd,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,OAAO,EAAE,CAAC;QAEb,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,OAAO,GAAG,MAAM,YAAY;aAC/B,YAAY,EAAE;aACd,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;aAChD,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;aAC/C,OAAO,EAAE,CAAC;QAEb,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5B,MAAM,CAAC,KAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEpC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC1C,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CACtE,sBAAsB,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC9C,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,CAAC;QAC5C,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CACzE,oBAAoB,CACrB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,OAAO,GAAG,MAAM,YAAY;aAC/B,YAAY,EAAE;aACd,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAC1D,OAAO,EAAE,CAAC;QAEb,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACpC,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,OAAO;aACnB,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChD,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAExC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,IAAI,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,OAAO,GAAG,MAAM,YAAY;aAC/B,YAAY,EAAE;aACd,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,OAAO,EAAE,CAAC;QAEb,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,IAAI,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,OAAO,GAAG,MAAM,WAAW;aAC9B,YAAY,EAAE;aACd,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,OAAO,EAAE,CAAC;QAEb,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,IAAI,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,CAAC;QAE5D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,IAAI,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAEhD,MAAM,OAAO,GAAG,MAAM,YAAY;aAC/B,YAAY,EAAE;aACd,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC;aAClD,OAAO,EAAE,CAAC;QAEb,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,IAAI,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,OAAO,GAAG,MAAM,YAAY;aAC/B,YAAY,EAAE;aACd,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,OAAO,EAAE,CAAC;QAEb,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAI,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,OAAO,GAAG,MAAM,YAAY;aAC/B,YAAY,EAAE;aACd,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,OAAO,EAAE,CAAC;QAEb,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,IAAI,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,OAAO,GAAG,MAAM,YAAY;aAC/B,YAAY,EAAE;aACd,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,OAAO,EAAE,CAAC;QAEb,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,OAAO,GAAG,MAAM,WAAW;aAC9B,YAAY,EAAE;aACd,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,OAAO,EAAE,CAAC;QAEb,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;QACjD,MAAM,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,GAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,IAAI,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,OAAO,GAAG,MAAM,YAAY;aAC/B,YAAY,EAAE;aACd,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;aAChC,OAAO,EAAE,CAAC;QAEb,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE;QACxB,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/checker.d.ts

@@ -7,6 +7,7 @@
 import type { MelangeObject, Relation, ObjectType, Decision, ContextualTuple, PageOptions, ListResult } from './types.js';
 import type { Queryable } from './database.js';
 import { Cache } from './cache.js';
+import { BulkCheckBuilder } from './bulk-check.js';
 /**
  * CheckerOptions configures a Checker instance.
  */
@@ -197,6 +198,23 @@ export declare class Checker {
      * ```
      */
     checkWithContextualTuples(subject: MelangeObject, relation: Relation, object: MelangeObject, contextualTuples: ContextualTuple[]): Promise<Decision>;
+    /**
+     * Create a new BulkCheckBuilder for batching multiple permission checks
+     * into a single SQL call via check_permission_bulk.
+     *
+     * @example
+     * ```typescript
+     * const results = await checker.newBulkCheck()
+     *   .add(user, 'can_read', repo1)
+     *   .add(user, 'can_read', repo2)
+     *   .execute();
+     *
+     * if (results.all()) {
+     *   // All checks passed
+     * }
+     * ```
+     */
+    newBulkCheck(): BulkCheckBuilder;
     /**
      * Generate a cache key for a check operation.
      */

package/dist/checker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checker.d.ts","sourceRoot":"","sources":["../src/checker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,aAAa,EACb,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,eAAe,EACf,WAAW,EACX,UAAU,EACX,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAa,MAAM,YAAY,CAAC;AAI9C;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC;IAEd;;;;OAIG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAEpB;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,QAA4B,CAAC;AACzD,eAAO,MAAM,YAAY,EAAE,QAA6B,CAAC;AAEzD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,OAAO;IAClB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAW;IACrC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAE1C;;;;;OAKG;gBACS,EAAE,EAAE,SAAS,EAAE,OAAO,GAAE,cAAmB;IAQvD;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,KAAK,CACT,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,aAAa,EACrB,gBAAgB,CAAC,EAAE,eAAe,EAAE,GACnC,OAAO,CAAC,QAAQ,CAAC;IA6CpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACG,WAAW,CACf,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,QAAQ,EAClB,UAAU,EAAE,UAAU,EACtB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAyB9B;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACG,YAAY,CAChB,WAAW,EAAE,UAAU,EACvB,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,aAAa,EACrB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAyB9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,yBAAyB,CAC7B,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,aAAa,EACrB,gBAAgB,EAAE,eAAe,EAAE,GAClC,OAAO,CAAC,QAAQ,CAAC;IAIpB;;OAEG;IACH,OAAO,CAAC,QAAQ;CAGjB"}
+{"version":3,"file":"checker.d.ts","sourceRoot":"","sources":["../src/checker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,aAAa,EACb,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,eAAe,EACf,WAAW,EACX,UAAU,EACX,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAa,MAAM,YAAY,CAAC;AAG9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC;IAEd;;;;OAIG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAEpB;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,QAA4B,CAAC;AACzD,eAAO,MAAM,YAAY,EAAE,QAA6B,CAAC;AAEzD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,OAAO;IAClB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAW;IACrC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAE1C;;;;;OAKG;gBACS,EAAE,EAAE,SAAS,EAAE,OAAO,GAAE,cAAmB;IAQvD;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,KAAK,CACT,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,aAAa,EACrB,gBAAgB,CAAC,EAAE,eAAe,EAAE,GACnC,OAAO,CAAC,QAAQ,CAAC;IA6CpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACG,WAAW,CACf,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,QAAQ,EAClB,UAAU,EAAE,UAAU,EACtB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAyB9B;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACG,YAAY,CAChB,WAAW,EAAE,UAAU,EACvB,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,aAAa,EACrB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAyB9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,yBAAyB,CAC7B,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,aAAa,EACrB,gBAAgB,EAAE,eAAe,EAAE,GAClC,OAAO,CAAC,QAAQ,CAAC;IAIpB;;;;;;;;;;;;;;;OAeG;IACH,YAAY,IAAI,gBAAgB;IAUhC;;OAEG;IACH,OAAO,CAAC,QAAQ;CAGjB"}

package/dist/checker.js

@@ -7,6 +7,7 @@
 import { NoopCache } from './cache.js';
 import { validateObject, validateRelation } from './validator.js';
 import { MelangeError } from './errors.js';
+import { BulkCheckBuilder } from './bulk-check.js';
 /**
  * Decision constants for testing.
  */
@@ -242,6 +243,31 @@ export class Checker {
     async checkWithContextualTuples(subject, relation, object, contextualTuples) {
         return this.check(subject, relation, object, contextualTuples);
     }
+    /**
+     * Create a new BulkCheckBuilder for batching multiple permission checks
+     * into a single SQL call via check_permission_bulk.
+     *
+     * @example
+     * ```typescript
+     * const results = await checker.newBulkCheck()
+     *   .add(user, 'can_read', repo1)
+     *   .add(user, 'can_read', repo2)
+     *   .execute();
+     *
+     * if (results.all()) {
+     *   // All checks passed
+     * }
+     * ```
+     */
+    newBulkCheck() {
+        return new BulkCheckBuilder({
+            db: this.db,
+            cache: this.cache,
+            decision: this.decision,
+            shouldValidate: this.validateRequest,
+            cacheKey: this.cacheKey.bind(this),
+        });
+    }
     /**
      * Generate a cache key for a check operation.
      */

package/dist/checker.js.map

@@ -1 +1 @@
-{"version":3,"file":"checker.js","sourceRoot":"","sources":["../src/checker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,OAAO,EAAS,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAkC3C;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAa,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACzD,MAAM,CAAC,MAAM,YAAY,GAAa,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAEzD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,OAAO;IACD,EAAE,CAAY;IACd,KAAK,CAAQ;IACb,QAAQ,CAAY;IACpB,eAAe,CAAU;IACzB,eAAe,CAAU;IAE1C;;;;;OAKG;IACH,YAAY,EAAa,EAAE,UAA0B,EAAE;QACrD,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,SAAS,EAAE,CAAC;QAC9C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC;QACvD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC;IACzD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,KAAK,CAAC,KAAK,CACT,OAAsB,EACtB,QAAkB,EAClB,MAAqB,EACrB,gBAAoC;QAEpC,gCAAgC;QAChC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;QAED,kBAAkB;QAClB,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACnC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC3B,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QAED,6CAA6C;QAC7C,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,2EAA2E;QAC3E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAChC,wDAAwD,EACxD,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAC7D,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,YAAY,CAAC,mCAAmC,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAa,EAAE,OAAO,EAAE,CAAC;QAEvC,gDAAgD;QAChD,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC1D,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,KAAK,CAAC,WAAW,CACf,OAAsB,EACtB,QAAkB,EAClB,UAAsB,EACtB,OAAqB;QAErB,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACnC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,YAAY,CAAC,wBAAwB,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAChC,+DAA+D,EAC/D,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,CACvE,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YACvC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM;YAC5C,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,KAAK,CAAC,YAAY,CAChB,WAAuB,EACvB,QAAkB,EAClB,MAAqB,EACrB,OAAqB;QAErB,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;YACpD,CAAC;YACD,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC3B,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAChC,gEAAgE,EAChE,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,CACtE,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YACvC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM;YAC5C,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,KAAK,CAAC,yBAAyB,CAC7B,OAAsB,EACtB,QAAkB,EAClB,MAAqB,EACrB,gBAAmC;QAEnC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,OAAsB,EAAE,QAAkB,EAAE,MAAqB;QAChF,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;IACjF,CAAC;CACF"}
+{"version":3,"file":"checker.js","sourceRoot":"","sources":["../src/checker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,OAAO,EAAS,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAkCnD;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAa,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACzD,MAAM,CAAC,MAAM,YAAY,GAAa,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAEzD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,OAAO;IACD,EAAE,CAAY;IACd,KAAK,CAAQ;IACb,QAAQ,CAAY;IACpB,eAAe,CAAU;IACzB,eAAe,CAAU;IAE1C;;;;;OAKG;IACH,YAAY,EAAa,EAAE,UAA0B,EAAE;QACrD,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,SAAS,EAAE,CAAC;QAC9C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC;QACvD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC;IACzD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,KAAK,CAAC,KAAK,CACT,OAAsB,EACtB,QAAkB,EAClB,MAAqB,EACrB,gBAAoC;QAEpC,gCAAgC;QAChC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;QAED,kBAAkB;QAClB,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACnC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC3B,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QAED,6CAA6C;QAC7C,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,2EAA2E;QAC3E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAChC,wDAAwD,EACxD,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAC7D,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,YAAY,CAAC,mCAAmC,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAa,EAAE,OAAO,EAAE,CAAC;QAEvC,gDAAgD;QAChD,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC1D,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,KAAK,CAAC,WAAW,CACf,OAAsB,EACtB,QAAkB,EAClB,UAAsB,EACtB,OAAqB;QAErB,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACnC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,YAAY,CAAC,wBAAwB,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAChC,+DAA+D,EAC/D,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,CACvE,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YACvC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM;YAC5C,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,KAAK,CAAC,YAAY,CAChB,WAAuB,EACvB,QAAkB,EAClB,MAAqB,EACrB,OAAqB;QAErB,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;YACpD,CAAC;YACD,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC3B,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAChC,gEAAgE,EAChE,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,CACtE,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YACvC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM;YAC5C,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,KAAK,CAAC,yBAAyB,CAC7B,OAAsB,EACtB,QAAkB,EAClB,MAAqB,EACrB,gBAAmC;QAEnC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,YAAY;QACV,OAAO,IAAI,gBAAgB,CAAC;YAC1B,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,eAAe;YACpC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;SACnC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,OAAsB,EAAE,QAAkB,EAAE,MAAqB;QAChF,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;IACjF,CAAC;CACF"}

package/dist/errors.d.ts

@@ -4,6 +4,7 @@
  * This module provides structured error types for authorization operations,
  * making it easier to handle different failure modes.
  */
+import type { MelangeObject, Relation } from './types.js';
 /**
  * MelangeError is the base error class for all melange errors.
  *
@@ -42,4 +43,20 @@ export declare class NotFoundError extends MelangeError {
 export declare class ValidationError extends MelangeError {
     constructor(message: string);
 }
+/**
+ * BulkCheckDeniedError is thrown by BulkCheckResults.allOrError() when at least
+ * one check in the batch was denied. It carries the details of the first denied check.
+ */
+export declare class BulkCheckDeniedError extends MelangeError {
+    readonly subject: MelangeObject;
+    readonly relation: Relation;
+    readonly object: MelangeObject;
+    readonly index: number;
+    readonly total: number;
+    constructor(subject: MelangeObject, relation: Relation, object: MelangeObject, index: number, total: number);
+}
+/**
+ * Type guard for BulkCheckDeniedError.
+ */
+export declare function isBulkCheckDeniedError(err: unknown): err is BulkCheckDeniedError;
 //# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;GAKG;AACH,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAM5B;AAED;;;;;GAKG;AACH,qBAAa,aAAc,SAAQ,YAAY;gBACjC,OAAO,EAAE,MAAM;CAK5B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,eAAgB,SAAQ,YAAY;gBACnC,OAAO,EAAE,MAAM;CAK5B"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE1D;;;;;GAKG;AACH,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAM5B;AAED;;;;;GAKG;AACH,qBAAa,aAAc,SAAQ,YAAY;gBACjC,OAAO,EAAE,MAAM;CAK5B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,eAAgB,SAAQ,YAAY;gBACnC,OAAO,EAAE,MAAM;CAK5B;AAED;;;GAGG;AACH,qBAAa,oBAAqB,SAAQ,YAAY;IACpD,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBAGrB,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM;CAahB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,oBAAoB,CAEhF"}

package/dist/errors.js

@@ -55,4 +55,31 @@ export class ValidationError extends MelangeError {
         Object.setPrototypeOf(this, ValidationError.prototype);
     }
 }
+/**
+ * BulkCheckDeniedError is thrown by BulkCheckResults.allOrError() when at least
+ * one check in the batch was denied. It carries the details of the first denied check.
+ */
+export class BulkCheckDeniedError extends MelangeError {
+    subject;
+    relation;
+    object;
+    index;
+    total;
+    constructor(subject, relation, object, index, total) {
+        super(`permission denied: ${subject.type}:${subject.id} ${relation} ${object.type}:${object.id} (${total} checks denied, first at index ${index})`);
+        this.name = 'BulkCheckDeniedError';
+        this.subject = subject;
+        this.relation = relation;
+        this.object = object;
+        this.index = index;
+        this.total = total;
+        Object.setPrototypeOf(this, BulkCheckDeniedError.prototype);
+    }
+}
+/**
+ * Type guard for BulkCheckDeniedError.
+ */
+export function isBulkCheckDeniedError(err) {
+    return err instanceof BulkCheckDeniedError;
+}
 //# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;GAKG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,gDAAgD;QAChD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,aAAc,SAAQ,YAAY;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;CACF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,eAAgB,SAAQ,YAAY;IAC/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;;;;GAKG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,gDAAgD;QAChD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,aAAc,SAAQ,YAAY;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;CACF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,eAAgB,SAAQ,YAAY;IAC/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,oBAAqB,SAAQ,YAAY;IAC3C,OAAO,CAAgB;IACvB,QAAQ,CAAW;IACnB,MAAM,CAAgB;IACtB,KAAK,CAAS;IACd,KAAK,CAAS;IAEvB,YACE,OAAsB,EACtB,QAAkB,EAClB,MAAqB,EACrB,KAAa,EACb,KAAa;QAEb,KAAK,CACH,sBAAsB,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,kCAAkC,KAAK,GAAG,CAC7I,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,OAAO,GAAG,YAAY,oBAAoB,CAAC;AAC7C,CAAC"}

package/dist/index.d.ts

@@ -10,7 +10,8 @@
 export { Checker, DecisionAllow, DecisionDeny } from './checker.js';
 export type { CheckerOptions } from './checker.js';
 export { Cache, NoopCache, MemoryCache } from './cache.js';
-export { MelangeError, NotFoundError, ValidationError } from './errors.js';
+export { MelangeError, NotFoundError, ValidationError, BulkCheckDeniedError, isBulkCheckDeniedError } from './errors.js';
+export { BulkCheckBuilder, BulkCheckResult, BulkCheckResults, MAX_BULK_CHECK_SIZE } from './bulk-check.js';
 export type { Queryable, QueryResult } from './database.js';
 export { validateObject, validateRelation } from './validator.js';
 export type { ObjectType, Relation, MelangeObject, Decision, CheckRequest, ContextualTuple, PageOptions, ListResult, } from './types.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACpE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3E,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClE,YAAY,EACV,UAAU,EACV,QAAQ,EACR,aAAa,EACb,QAAQ,EACR,YAAY,EACZ,eAAe,EACf,WAAW,EACX,UAAU,GACX,MAAM,YAAY,CAAC;AAGpB,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACpE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACzH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3G,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClE,YAAY,EACV,UAAU,EACV,QAAQ,EACR,aAAa,EACb,QAAQ,EACR,YAAY,EACZ,eAAe,EACf,WAAW,EACX,UAAU,GACX,MAAM,YAAY,CAAC;AAGpB,cAAc,qBAAqB,CAAC"}

package/dist/index.js

@@ -9,7 +9,8 @@
  */
 export { Checker, DecisionAllow, DecisionDeny } from './checker.js';
 export { NoopCache, MemoryCache } from './cache.js';
-export { MelangeError, NotFoundError, ValidationError } from './errors.js';
+export { MelangeError, NotFoundError, ValidationError, BulkCheckDeniedError, isBulkCheckDeniedError } from './errors.js';
+export { BulkCheckBuilder, BulkCheckResult, BulkCheckResults, MAX_BULK_CHECK_SIZE } from './bulk-check.js';
 export { validateObject, validateRelation } from './validator.js';
 // Re-export adapters for convenience
 export * from './adapters/index.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEpE,OAAO,EAAS,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE3E,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAYlE,qCAAqC;AACrC,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEpE,OAAO,EAAS,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACzH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE3G,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAYlE,qCAAqC;AACrC,cAAc,qBAAqB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pthm/melange",
-  "version": "0.6.7",
+  "version": "0.7.0",
   "description": "TypeScript client for Melange PostgreSQL authorization",
   "keywords": [
     "authorization",
@@ -34,6 +34,7 @@
     "@types/pg": "^8.11.0",
     "@vitest/coverage-v8": "^2.1.8",
     "pg": "^8.13.1",
+    "postgres": "^3.4.8",
     "typescript": "^5.0.0",
     "vitest": "^2.1.8"
   },
@@ -53,6 +54,7 @@
     "clean": "rm -rf dist",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
+    "test:unit": "vitest run src/",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage"
   }