@synnaxlabs/client 0.48.0 → 0.49.2

package/dist/src/access/client.d.ts

@@ -1,7 +1,9 @@
 import { UnaryClient } from '@synnaxlabs/freighter';
 import { policy } from './policy';
+import { role } from './role';
 export declare class Client {
-    readonly policy: policy.Client;
+    readonly policies: policy.Client;
+    readonly roles: role.Client;
     constructor(client: UnaryClient);
 }
 //# sourceMappingURL=client.d.ts.map

package/dist/src/access/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/access/client.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC,qBAAa,MAAM;IACjB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBAEnB,MAAM,EAAE,WAAW;CAGhC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/access/client.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAErC,qBAAa,MAAM;IACjB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;gBAEhB,MAAM,EAAE,WAAW;CAIhC"}

package/dist/src/access/enforce.d.ts

@@ -0,0 +1,35 @@
+import { Action } from './payload';
+import { Policy } from './policy/payload';
+import { ontology } from '../ontology';
+/**
+ * Request represents an access control request to check if a subject
+ * can perform an action on one or more objects.
+ */
+export interface Request {
+    /** The subject making the request (typically a user) */
+    subject: ontology.ID;
+    /** The action being requested */
+    action: Action;
+    /** The objects being accessed */
+    objects: ontology.ID | ontology.ID[];
+}
+/**
+ * Checks if a request is allowed based on the provided policies.
+ * This is the client-side equivalent of the Go allowRequest function.
+ *
+ * @param req - The access request to check
+ * @param policies - The policies to check against
+ * @returns true if the request is allowed, false otherwise
+ *
+ * @remarks
+ * This function implements the following logic:
+ * - For each requested object, check if any policy allows the action
+ * - A policy allows an action if:
+ *   1. The policy's actions include the requested action or "all"
+ *   2. The policy's objects include the requested object, either:
+ *      - Type-level match: policy object has empty key and matching type
+ *      - Instance-level match: policy object has matching type and key
+ * - ALL requested objects must be allowed for the request to succeed
+ */
+export declare const allowRequest: (req: Request, policies: Policy[]) => boolean;
+//# sourceMappingURL=enforce.d.ts.map

package/dist/src/access/enforce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforce.d.ts","sourceRoot":"","sources":["../../../src/access/enforce.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB,wDAAwD;IACxD,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;IACrB,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,OAAO,EAAE,QAAQ,CAAC,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,YAAY,GAAI,KAAK,OAAO,EAAE,UAAU,MAAM,EAAE,KAAG,OAqC/D,CAAC"}

package/dist/src/access/enforce.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=enforce.spec.d.ts.map

package/dist/src/access/enforce.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforce.spec.d.ts","sourceRoot":"","sources":["../../../src/access/enforce.spec.ts"],"names":[],"mappings":""}

package/dist/src/access/external.d.ts

@@ -1,3 +1,6 @@
 export * from './client';
+export * from './enforce';
 export * from './payload';
+export * from './policy';
+export * from './role';
 //# sourceMappingURL=external.d.ts.map

package/dist/src/access/external.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"external.d.ts","sourceRoot":"","sources":["../../../src/access/external.ts"],"names":[],"mappings":"AASA,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"external.d.ts","sourceRoot":"","sources":["../../../src/access/external.ts"],"names":[],"mappings":"AASA,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC"}

package/dist/src/access/payload.d.ts

@@ -1,11 +1,5 @@
 import { z } from 'zod';
-export declare const ALL_ACTION = "all";
-export declare const CREATE_ACTION = "create";
-export declare const DELETE_ACTION = "delete";
-export declare const RETRIEVE_ACTION = "retrieve";
-export declare const UPDATE_ACTION = "update";
 export declare const actionZ: z.ZodEnum<{
-    all: "all";
     create: "create";
     delete: "delete";
     retrieve: "retrieve";

package/dist/src/access/payload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../src/access/payload.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,UAAU,QAAQ,CAAC;AAChC,eAAO,MAAM,aAAa,WAAW,CAAC;AACtC,eAAO,MAAM,aAAa,WAAW,CAAC;AACtC,eAAO,MAAM,eAAe,aAAa,CAAC;AAC1C,eAAO,MAAM,aAAa,WAAW,CAAC;AAEtC,eAAO,MAAM,OAAO;;;;;;EAMlB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC"}
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../src/access/payload.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,OAAO;;;;;EAAqD,CAAC;AAC1E,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC"}

package/dist/src/access/policy/access.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=access.spec.d.ts.map

package/dist/src/access/policy/access.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.spec.d.ts","sourceRoot":"","sources":["../../../../src/access/policy/access.spec.ts"],"names":[],"mappings":""}