ramosedb 0.0.1 → 0.4.0

package/dist/internal/authorization/validation/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/internal/authorization/validation/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAIxC,OAAO,EAAE,OAAO,EAAwB,MAAM,aAAa,CAAC;AAC5D,OAAO,EACL,UAAU,EACV,aAAa,EACb,YAAY,EACZ,OAAO,GAGR,MAAM,cAAc,CAAC;AAyBtB,MAAM,CAAC,MAAM,YAAY,GAAG,GAAY,EAAE,CAAC,CAAC;IAC1C,YAAY,EAAE,KAAK;IACnB,MAAM,EAAE,KAAK;IACb,WAAW,EAAE,KAAK;IAClB,cAAc,EAAE,CAAC;IACjB,UAAU,EAAE,CAAC;CACd,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAa,EAAE,IAAa,EAAQ,EAAE;IACjE,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CAAC;IACxC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC;IAC5B,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,CAAC;IACtC,IAAI,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc;QAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;IACzF,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC;AACrC,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,KAAiB,EACjB,KAAa,EACb,aAAqB,EACiB,EAAE;IACxC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC;IACrB,IAAI,KAAK,CAAC,KAAK,GAAG,aAAa,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,eAAe,KAAK,CAAC,KAAK,YAAY,aAAa,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,OAAgB,EAChB,KAAiB,EACjB,KAAa,EACb,aAAqB,EACiB,EAAE;IACxC,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC;IAC5B,OAAO,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;AAC/C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,KAAmC,EACnC,MAAsB,EACtB,KAAe,EACuC,EAAE,CACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACxE,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,MAAM,EAAE,CAAC;QAC7C,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YACrE,OAAO,EAAE,IAAI,EAAE,OAAgB,EAAE,KAAK,EAAE,CAAC;QAC3C,CAAC;QACD,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzC,KAAK,YAAY;YACf,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAsB,EAAwB,EAAE;IAC/E,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAC/E,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAC3E,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,KAAmC,EACnC,MAAsB,EACtB,KAAe,EACiC,EAAE,CAClD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC5B,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;YACnD,CAAC,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,MAAM,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACrE,OAAO,EAAE,IAAI,EAAE,OAAgB,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,KAAmC,EACnC,MAAsB,EACtB,GAAa,EACJ,EAAE;IACX,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACvC,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;AAC3D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,KAAmC,EACnC,IAAoB,EACpB,KAAqB,EACZ,EAAE;IACX,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,SAAS,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QACxD,OAAO,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC;AACnE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAiB,EAA+B,EAAE,CAC5E,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAExD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAuC,EAAa,EAAE;IAC9E,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACjE,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAChF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAC9E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,QAA6C,EAC7C,MAAiB,EACR,EAAE;IACX,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,QAAQ,KAAK,QAAQ,CAAC;IAC5D,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,QAAQ,KAAK,MAAM,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,SAAS,KAAK,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC;IAC/F,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,QAAQ,CAAC;IACvF,IAAI,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACtE,IAAI,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,KAAmC,EACnC,EAAwB,EACxB,KAAgB,EACP,EAAE;IACX,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7C,OAAO,CACL,KAAK,KAAK,SAAS,IAAI,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CACnG,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,KAAmC,EACnC,IAAe,EACf,KAAgB,EACP,EAAE;IACX,MAAM,IAAI,GAAG,CAAC,CAAY,EAAE,CAAY,EAAW,EAAE;QACnD,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,KAAK,CAAC;QACrE,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QAC/D,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QAC/D,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACtC,IAAI,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC/C,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACpC,OAAO,CACL,MAAM,KAAK,SAAS,IAAI,gBAAgB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAC1F,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;gBAAE,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAC9D,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;gBAAE,OAAO,oBAAoB,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAC5E,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;gBAAE,OAAO,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YACtE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,gBAAgB,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YACjE,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACpC,OAAO,CACL,MAAM,KAAK,SAAS,IAAI,gBAAgB,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAC7F,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YACvC,OAAO,YAAY,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAChD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,KAAgB,EACuC,EAAE;IACzD,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QACzD,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3D,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC,CAAC"}

package/dist/internal/authorization/validation/validate.d.ts

@@ -0,0 +1,421 @@
+import * as Effect from "effect/Effect";
+import * as Result from "effect/Result";
+import { type AuthorizationValidationInput, type ValidatedAuthorizationIR as ValidatedAuthorizationIRType } from "../ir.ts";
+import { defaultValidationLimits, type ValidationLimits, type ValidateFailure } from "./common.ts";
+export type { ValidateFailure, ValidationLimits };
+export { defaultValidationLimits };
+export declare const validateBoundAuthorizationResult: (input: AuthorizationValidationInput) => Result.Result<ValidatedAuthorizationIRType, ValidateFailure>;
+export declare const validateBoundAuthorizationResultForTest: (input: AuthorizationValidationInput, limits: Partial<ValidationLimits>) => Result.Result<ValidatedAuthorizationIRType, ValidateFailure>;
+export declare const validateBoundAuthorization: (input: {
+    readonly bound: {
+        readonly _tag: "BoundAuthorizationIR";
+        readonly version: 2;
+        readonly languageVersion: "v1";
+        readonly database: string & import("effect/Brand").Brand<"DatabaseId">;
+        readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+        readonly catalogVersion: string & import("effect/Brand").Brand<"CatalogVersion">;
+        readonly schemaFingerprint: string & import("effect/Brand").Brand<"SchemaFingerprint">;
+        readonly classes: readonly string[];
+        readonly claims: readonly {
+            readonly key: string;
+            readonly optional: boolean;
+            readonly shape: {
+                readonly _tag: "scalar";
+                readonly valueType: "boolean" | "double" | "long" | "string";
+            } | {
+                readonly _tag: "array";
+                readonly items: {
+                    readonly _tag: "scalar";
+                    readonly valueType: "boolean" | "double" | "long" | "string";
+                };
+            };
+        }[];
+        readonly principal: {
+            readonly subjectClaim: string;
+            readonly entity?: {
+                readonly _tag: "FieldId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly owner: {
+                    readonly kind: "entity" | "trait";
+                    readonly name: string;
+                };
+                readonly localName: string;
+            } | undefined;
+        };
+        readonly rules: readonly {
+            readonly id: string & import("effect/Brand").Brand<"RuleId">;
+            readonly focus: {
+                readonly _tag: "entity";
+                readonly entity: {
+                    readonly _tag: "EntityId";
+                    readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                    readonly name: string;
+                };
+            } | {
+                readonly _tag: "trait";
+                readonly trait: {
+                    readonly _tag: "TraitId";
+                    readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                    readonly name: string;
+                };
+            } | {
+                readonly _tag: "field";
+                readonly field: {
+                    readonly _tag: "FieldId";
+                    readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                    readonly owner: {
+                        readonly kind: "entity" | "trait";
+                        readonly name: string;
+                    };
+                    readonly localName: string;
+                };
+            } | {
+                readonly _tag: "operation";
+                readonly operation: {
+                    readonly _tag: "OperationId";
+                    readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                    readonly owner: {
+                        readonly kind: "entity" | "trait";
+                        readonly name: string;
+                    };
+                    readonly localName: string;
+                    readonly target: "none" | "required";
+                };
+            };
+            readonly expr: import("../expr.ts").CanonicalAuthorizationExpr;
+            readonly usesResource: boolean;
+            readonly usesMe: boolean;
+            readonly usesSubject: boolean;
+            readonly traversalDepth: number;
+        }[];
+        readonly decisions: {
+            readonly entities: readonly {
+                readonly target: {
+                    readonly _tag: "EntityId";
+                    readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                    readonly name: string;
+                };
+                readonly decision: {
+                    readonly allow: readonly (string & import("effect/Brand").Brand<"RuleId">)[];
+                    readonly deny: readonly (string & import("effect/Brand").Brand<"RuleId">)[];
+                };
+            }[];
+            readonly traits: readonly {
+                readonly target: {
+                    readonly _tag: "TraitId";
+                    readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                    readonly name: string;
+                };
+                readonly decision: {
+                    readonly allow: readonly (string & import("effect/Brand").Brand<"RuleId">)[];
+                    readonly deny: readonly (string & import("effect/Brand").Brand<"RuleId">)[];
+                };
+            }[];
+            readonly fields: readonly {
+                readonly target: {
+                    readonly _tag: "FieldId";
+                    readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                    readonly owner: {
+                        readonly kind: "entity" | "trait";
+                        readonly name: string;
+                    };
+                    readonly localName: string;
+                };
+                readonly decision: {
+                    readonly allow: readonly (string & import("effect/Brand").Brand<"RuleId">)[];
+                    readonly deny: readonly (string & import("effect/Brand").Brand<"RuleId">)[];
+                };
+            }[];
+            readonly operations: readonly {
+                readonly target: {
+                    readonly _tag: "OperationId";
+                    readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                    readonly owner: {
+                        readonly kind: "entity" | "trait";
+                        readonly name: string;
+                    };
+                    readonly localName: string;
+                    readonly target: "none" | "required";
+                };
+                readonly decision: {
+                    readonly allow: readonly (string & import("effect/Brand").Brand<"RuleId">)[];
+                    readonly deny: readonly (string & import("effect/Brand").Brand<"RuleId">)[];
+                };
+            }[];
+        };
+    };
+    readonly descriptor: {
+        readonly id: string & import("effect/Brand").Brand<"CatalogId">;
+        readonly database: string & import("effect/Brand").Brand<"DatabaseId">;
+        readonly version: string & import("effect/Brand").Brand<"CatalogVersion">;
+        readonly fingerprint: string & import("effect/Brand").Brand<"SchemaFingerprint">;
+        readonly entities: readonly {
+            readonly id: {
+                readonly _tag: "EntityId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly name: string;
+            };
+            readonly traits: readonly {
+                readonly _tag: "TraitId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly name: string;
+            }[];
+            readonly doc?: string | undefined;
+        }[];
+        readonly traits: readonly {
+            readonly id: {
+                readonly _tag: "TraitId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly name: string;
+            };
+            readonly traits: readonly {
+                readonly _tag: "TraitId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly name: string;
+            }[];
+            readonly doc?: string | undefined;
+        }[];
+        readonly fields: readonly ({
+            readonly id: {
+                readonly _tag: "FieldId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly owner: {
+                    readonly kind: "entity" | "trait";
+                    readonly name: string;
+                };
+                readonly localName: string;
+            };
+            readonly cardinality: "many" | "one";
+            readonly unique?: "strict" | "upsert" | undefined;
+            readonly index: boolean;
+            readonly optional: boolean;
+            readonly owned: boolean;
+            readonly doc?: string | undefined;
+            readonly valueType: "boolean" | "bytes" | "double" | "instant" | "long" | "string" | "uuid";
+        } | {
+            readonly id: {
+                readonly _tag: "FieldId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly owner: {
+                    readonly kind: "entity" | "trait";
+                    readonly name: string;
+                };
+                readonly localName: string;
+            };
+            readonly cardinality: "many" | "one";
+            readonly unique?: "strict" | "upsert" | undefined;
+            readonly index: boolean;
+            readonly optional: boolean;
+            readonly owned: boolean;
+            readonly doc?: string | undefined;
+            readonly valueType: "ref";
+            readonly refTarget: {
+                readonly _tag: "entity";
+                readonly entity: {
+                    readonly _tag: "EntityId";
+                    readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                    readonly name: string;
+                };
+            } | {
+                readonly _tag: "trait";
+                readonly trait: {
+                    readonly _tag: "TraitId";
+                    readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                    readonly name: string;
+                };
+            } | {
+                readonly _tag: "self";
+            } | {
+                readonly _tag: "untargeted";
+            };
+        })[];
+        readonly operations: readonly {
+            readonly id: {
+                readonly _tag: "OperationId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly owner: {
+                    readonly kind: "entity" | "trait";
+                    readonly name: string;
+                };
+                readonly localName: string;
+                readonly target: "none" | "required";
+            };
+            readonly input: import("../catalog.ts").OperationInputShape;
+            readonly output: import("../catalog.ts").OperationInputShape;
+            readonly version: string & import("effect/Brand").Brand<"OperationVersion">;
+            readonly revision: number;
+            readonly inputSchemaHash: string;
+            readonly outputSchemaHash: string;
+            readonly bodyHash: string;
+            readonly composers: readonly {
+                readonly _tag: "EntityId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly name: string;
+            }[];
+            readonly writes: readonly {
+                readonly _tag: "EntityId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly name: string;
+            }[];
+            readonly allocations?: readonly {
+                readonly slot: string;
+                readonly path: readonly (string | number)[];
+            }[] | undefined;
+            readonly doc?: string | undefined;
+        }[];
+        readonly traitComposition: readonly {
+            readonly composer: {
+                readonly _tag: "EntityId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly name: string;
+            };
+            readonly trait: {
+                readonly _tag: "TraitId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly name: string;
+            };
+            readonly transitive: readonly {
+                readonly _tag: "TraitId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly name: string;
+            }[];
+        }[];
+    };
+}) => Effect.Effect<{
+    readonly _tag: "ValidatedAuthorizationIR";
+    readonly version: 2;
+    readonly languageVersion: "v1";
+    readonly database: string & import("effect/Brand").Brand<"DatabaseId">;
+    readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+    readonly catalogVersion: string & import("effect/Brand").Brand<"CatalogVersion">;
+    readonly schemaFingerprint: string & import("effect/Brand").Brand<"SchemaFingerprint">;
+    readonly classes: readonly string[];
+    readonly claims: readonly {
+        readonly key: string;
+        readonly optional: boolean;
+        readonly shape: {
+            readonly _tag: "scalar";
+            readonly valueType: "boolean" | "double" | "long" | "string";
+        } | {
+            readonly _tag: "array";
+            readonly items: {
+                readonly _tag: "scalar";
+                readonly valueType: "boolean" | "double" | "long" | "string";
+            };
+        };
+    }[];
+    readonly principal: {
+        readonly subjectClaim: string;
+        readonly entity?: {
+            readonly _tag: "FieldId";
+            readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+            readonly owner: {
+                readonly kind: "entity" | "trait";
+                readonly name: string;
+            };
+            readonly localName: string;
+        } | undefined;
+    };
+    readonly rules: readonly {
+        readonly id: string & import("effect/Brand").Brand<"RuleId">;
+        readonly focus: {
+            readonly _tag: "entity";
+            readonly entity: {
+                readonly _tag: "EntityId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly name: string;
+            };
+        } | {
+            readonly _tag: "trait";
+            readonly trait: {
+                readonly _tag: "TraitId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly name: string;
+            };
+        } | {
+            readonly _tag: "field";
+            readonly field: {
+                readonly _tag: "FieldId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly owner: {
+                    readonly kind: "entity" | "trait";
+                    readonly name: string;
+                };
+                readonly localName: string;
+            };
+        } | {
+            readonly _tag: "operation";
+            readonly operation: {
+                readonly _tag: "OperationId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly owner: {
+                    readonly kind: "entity" | "trait";
+                    readonly name: string;
+                };
+                readonly localName: string;
+                readonly target: "none" | "required";
+            };
+        };
+        readonly expr: import("../expr.ts").CanonicalAuthorizationExpr;
+        readonly usesResource: boolean;
+        readonly usesMe: boolean;
+        readonly usesSubject: boolean;
+        readonly traversalDepth: number;
+    }[];
+    readonly decisions: {
+        readonly entities: readonly {
+            readonly target: {
+                readonly _tag: "EntityId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly name: string;
+            };
+            readonly decision: {
+                readonly allow: readonly (string & import("effect/Brand").Brand<"RuleId">)[];
+                readonly deny: readonly (string & import("effect/Brand").Brand<"RuleId">)[];
+            };
+        }[];
+        readonly traits: readonly {
+            readonly target: {
+                readonly _tag: "TraitId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly name: string;
+            };
+            readonly decision: {
+                readonly allow: readonly (string & import("effect/Brand").Brand<"RuleId">)[];
+                readonly deny: readonly (string & import("effect/Brand").Brand<"RuleId">)[];
+            };
+        }[];
+        readonly fields: readonly {
+            readonly target: {
+                readonly _tag: "FieldId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly owner: {
+                    readonly kind: "entity" | "trait";
+                    readonly name: string;
+                };
+                readonly localName: string;
+            };
+            readonly decision: {
+                readonly allow: readonly (string & import("effect/Brand").Brand<"RuleId">)[];
+                readonly deny: readonly (string & import("effect/Brand").Brand<"RuleId">)[];
+            };
+        }[];
+        readonly operations: readonly {
+            readonly target: {
+                readonly _tag: "OperationId";
+                readonly catalog: string & import("effect/Brand").Brand<"CatalogId">;
+                readonly owner: {
+                    readonly kind: "entity" | "trait";
+                    readonly name: string;
+                };
+                readonly localName: string;
+                readonly target: "none" | "required";
+            };
+            readonly decision: {
+                readonly allow: readonly (string & import("effect/Brand").Brand<"RuleId">)[];
+                readonly deny: readonly (string & import("effect/Brand").Brand<"RuleId">)[];
+            };
+        }[];
+    };
+}, ValidateFailure, never>;
+//# sourceMappingURL=validate.d.ts.map

package/dist/internal/authorization/validation/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../../src/internal/authorization/validation/validate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAEL,KAAK,4BAA4B,EAGjC,KAAK,wBAAwB,IAAI,4BAA4B,EAC9D,MAAM,UAAU,CAAC;AAKlB,OAAO,EACL,uBAAuB,EAGvB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AAMrB,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,CAAC;AAkFnC,eAAO,MAAM,gCAAgC,UACpC,4BAA4B,KAClC,MAAM,CAAC,MAAM,CAAC,4BAA4B,EAAE,eAAe,CACQ,CAAC;AAEvE,eAAO,MAAM,uCAAuC,UAC3C,4BAA4B,UAC3B,OAAO,CAAC,gBAAgB,CAAC,KAChC,MAAM,CAAC,MAAM,CAAC,4BAA4B,EAAE,eAAe,CAI1D,CAAC;AAcL,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0BAOtC,CAAC"}

package/dist/internal/authorization/validation/validate.js

@@ -0,0 +1,95 @@
+import * as Effect from "effect/Effect";
+import * as Result from "effect/Result";
+import { hashCanonicalRule } from "../decode.js";
+import { VALIDATED_AUTHORIZATION_IR_VERSION, } from "../ir.js";
+import { AUTHORIZATION_LANGUAGE_VERSION } from "../version.js";
+import { invalid as invalidResult } from "./common.js";
+import { prepareAuthorizationCatalog } from "./catalog.js";
+import { defaultValidationLimits, invalid, tightenValidationLimits, } from "./common.js";
+import { validateVocabularies } from "./descriptors.js";
+import { validateDecisions } from "./decisions.js";
+import { validateRule } from "./expression.js";
+import { meEntity } from "./traversal.js";
+export { defaultValidationLimits };
+const clonePlain = (value) => {
+    if (value === null || typeof value !== "object")
+        return value;
+    if (Array.isArray(value))
+        return value.map((item) => clonePlain(item));
+    const copy = {};
+    for (const key of Object.keys(value)) {
+        copy[key] = clonePlain(value[key]);
+    }
+    return copy;
+};
+const freezePlain = (value) => {
+    if (value === null || typeof value !== "object" || Object.isFrozen(value))
+        return value;
+    if (Array.isArray(value)) {
+        for (const item of value)
+            freezePlain(item);
+    }
+    else {
+        for (const key of Object.keys(value)) {
+            freezePlain(value[key]);
+        }
+    }
+    return Object.freeze(value);
+};
+const freezeValidated = (value) => freezePlain(clonePlain(value));
+const boundTarget = (bound) => ({
+    database: bound.database,
+    catalog: bound.catalog,
+    catalogVersion: bound.catalogVersion,
+    schemaFingerprint: bound.schemaFingerprint,
+});
+const validateBoundAuthorizationWithLimits = (input, limits) => Result.gen(function* () {
+    const index = yield* prepareAuthorizationCatalog(boundTarget(input.bound), input.descriptor);
+    yield* validateVocabularies(input.bound.principal.subjectClaim, input.bound.classes, input.bound.claims);
+    yield* meEntity(index, input.bound.principal);
+    const classes = new Set(input.bound.classes);
+    const rules = [];
+    const byId = new Map();
+    for (const rule of input.bound.rules) {
+        const validated = yield* validateRule(index, rule, input.bound.principal, classes, input.bound.claims, limits);
+        if (byId.has(validated.id)) {
+            return yield* invalid(`duplicate rule identity: ${validated.id}`);
+        }
+        byId.set(validated.id, validated);
+        rules.push(validated);
+    }
+    yield* validateDecisions(index, input.bound.decisions, byId);
+    return freezeValidated({
+        _tag: "ValidatedAuthorizationIR",
+        version: VALIDATED_AUTHORIZATION_IR_VERSION,
+        languageVersion: AUTHORIZATION_LANGUAGE_VERSION,
+        database: input.bound.database,
+        catalog: input.bound.catalog,
+        catalogVersion: input.bound.catalogVersion,
+        schemaFingerprint: input.bound.schemaFingerprint,
+        classes: input.bound.classes,
+        claims: input.bound.claims,
+        principal: input.bound.principal,
+        rules,
+        decisions: input.bound.decisions,
+    });
+});
+export const validateBoundAuthorizationResult = (input) => validateBoundAuthorizationWithLimits(input, defaultValidationLimits);
+export const validateBoundAuthorizationResultForTest = (input, limits) => Result.gen(function* () {
+    const tightened = yield* tightenValidationLimits(limits);
+    return yield* validateBoundAuthorizationWithLimits(input, tightened);
+});
+const verifyRuleHashes = Effect.fn("Authorization.verifyRuleHashes")(function* (validated) {
+    for (const rule of validated.rules) {
+        const expected = yield* hashCanonicalRule(rule);
+        if (rule.id !== expected) {
+            return yield* Effect.fromResult(invalidResult("tampered rule id"));
+        }
+    }
+    return validated;
+});
+export const validateBoundAuthorization = Effect.fn("Authorization.validateBoundAuthorization")(function* (input) {
+    const validated = yield* Effect.fromResult(validateBoundAuthorizationResult(input));
+    return yield* verifyRuleHashes(validated);
+});
+//# sourceMappingURL=validate.js.map

package/dist/internal/authorization/validation/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../../src/internal/authorization/validation/validate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EACL,kCAAkC,GAKnC,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,8BAA8B,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EACL,uBAAuB,EACvB,OAAO,EACP,uBAAuB,GAGxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1C,OAAO,EAAE,uBAAuB,EAAE,CAAC;AAEnC,MAAM,UAAU,GAAG,CAAI,KAAQ,EAAK,EAAE;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAM,CAAC;IAC5E,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAI,KAAQ,EAAK,EAAE;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,WAAW,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAI,KAAQ,EAAK,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;AAE3E,MAAM,WAAW,GAAG,CAAC,KAA2B,EAAE,EAAE,CAAC,CAAC;IACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ;IACxB,OAAO,EAAE,KAAK,CAAC,OAAO;IACtB,cAAc,EAAE,KAAK,CAAC,cAAc;IACpC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;CAC3C,CAAC,CAAC;AAEH,MAAM,oCAAoC,GAAG,CAC3C,KAAmC,EACnC,MAAwB,EACsC,EAAE,CAChE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,2BAA2B,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7F,KAAK,CAAC,CAAC,oBAAoB,CACzB,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,YAAY,EAClC,KAAK,CAAC,KAAK,CAAC,OAAO,EACnB,KAAK,CAAC,KAAK,CAAC,MAAM,CACnB,CAAC;IACF,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAE9C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAiC,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsC,CAAC;IAC3D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,YAAY,CACnC,KAAK,EACL,IAAI,EACJ,KAAK,CAAC,KAAK,CAAC,SAAS,EACrB,OAAO,EACP,KAAK,CAAC,KAAK,CAAC,MAAM,EAClB,MAAM,CACP,CAAC;QACF,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,4BAA4B,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC7D,OAAO,eAAe,CAAC;QACrB,IAAI,EAAE,0BAAmC;QACzC,OAAO,EAAE,kCAAkC;QAC3C,eAAe,EAAE,8BAA8B;QAC/C,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;QAC9B,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;QAC5B,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc;QAC1C,iBAAiB,EAAE,KAAK,CAAC,KAAK,CAAC,iBAAiB;QAChD,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;QAC5B,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;QAC1B,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS;QAChC,KAAK;QACL,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS;KACjC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAC9C,KAAmC,EAC2B,EAAE,CAChE,oCAAoC,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;AAEvE,MAAM,CAAC,MAAM,uCAAuC,GAAG,CACrD,KAAmC,EACnC,MAAiC,EAC6B,EAAE,CAChE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,CAAC,oCAAoC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AACvE,CAAC,CAAC,CAAC;AAEL,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC,EAC5E,SAAuC;IAEvC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,EAAE,CAAC,0CAA0C,CAAC,CAC7F,QAAQ,CAAC,EACP,KAAmC;IAEnC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC,CAAC;IACpF,OAAO,KAAK,CAAC,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;AAC5C,CAAC,CACF,CAAC"}

package/dist/internal/authorization/version.d.ts

@@ -0,0 +1,11 @@
+import * as Schema from "effect/Schema";
+export declare const AUTHORIZATION_LANGUAGE_VERSION: "v1";
+export type AuthorizationLanguageVersion = typeof AUTHORIZATION_LANGUAGE_VERSION;
+export declare const AuthorizationLanguageVersion: Schema.Literal<"v1">;
+export declare const AUTHORIZATION_RULE_HASH_DOMAIN_V1 = "ramose.authorization.rule/v1\0";
+export declare const AUTHORIZATION_POLICY_HASH_DOMAIN_V1 = "ramose.authorization.policy/v1\0";
+export declare const AUTHORIZATION_POLICY_HASH_DOMAIN_V2 = "ramose.authorization.policy/v2\0";
+export declare const AUTHORIZATION_CATALOG_UNIT_HASH_DOMAIN_V1 = "ramose.catalog.unit/v1\0";
+export declare const AUTHORIZATION_CATALOG_UNIT_HASH_DOMAIN_V2 = "ramose.catalog.unit/v2\0";
+export declare const AUTHORIZATION_CATALOG_SCHEMA_HASH_DOMAIN_V1 = "ramose.catalog.schema/v1\0";
+//# sourceMappingURL=version.d.ts.map

package/dist/internal/authorization/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../../src/internal/authorization/version.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,eAAO,MAAM,8BAA8B,EAAG,IAAa,CAAC;AAC5D,MAAM,MAAM,4BAA4B,GAAG,OAAO,8BAA8B,CAAC;AAEjF,eAAO,MAAM,4BAA4B,sBAAiD,CAAC;AAE3F,eAAO,MAAM,iCAAiC,mCAAmC,CAAC;AAElF,eAAO,MAAM,mCAAmC,qCAAqC,CAAC;AACtF,eAAO,MAAM,mCAAmC,qCAAqC,CAAC;AAEtF,eAAO,MAAM,yCAAyC,6BAA6B,CAAC;AACpF,eAAO,MAAM,yCAAyC,6BAA6B,CAAC;AAEpF,eAAO,MAAM,2CAA2C,+BAA+B,CAAC"}

package/dist/internal/authorization/version.js

@@ -0,0 +1,10 @@
+import * as Schema from "effect/Schema";
+export const AUTHORIZATION_LANGUAGE_VERSION = "v1";
+export const AuthorizationLanguageVersion = Schema.Literal(AUTHORIZATION_LANGUAGE_VERSION);
+export const AUTHORIZATION_RULE_HASH_DOMAIN_V1 = "ramose.authorization.rule/v1\0";
+export const AUTHORIZATION_POLICY_HASH_DOMAIN_V1 = "ramose.authorization.policy/v1\0";
+export const AUTHORIZATION_POLICY_HASH_DOMAIN_V2 = "ramose.authorization.policy/v2\0";
+export const AUTHORIZATION_CATALOG_UNIT_HASH_DOMAIN_V1 = "ramose.catalog.unit/v1\0";
+export const AUTHORIZATION_CATALOG_UNIT_HASH_DOMAIN_V2 = "ramose.catalog.unit/v2\0";
+export const AUTHORIZATION_CATALOG_SCHEMA_HASH_DOMAIN_V1 = "ramose.catalog.schema/v1\0";
+//# sourceMappingURL=version.js.map

package/dist/internal/authorization/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../../src/internal/authorization/version.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAa,CAAC;AAG5D,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAE3F,MAAM,CAAC,MAAM,iCAAiC,GAAG,gCAAgC,CAAC;AAElF,MAAM,CAAC,MAAM,mCAAmC,GAAG,kCAAkC,CAAC;AACtF,MAAM,CAAC,MAAM,mCAAmC,GAAG,kCAAkC,CAAC;AAEtF,MAAM,CAAC,MAAM,yCAAyC,GAAG,0BAA0B,CAAC;AACpF,MAAM,CAAC,MAAM,yCAAyC,GAAG,0BAA0B,CAAC;AAEpF,MAAM,CAAC,MAAM,2CAA2C,GAAG,4BAA4B,CAAC"}