Seeking Feedback on My Open-Source Authorization Framework Idea

Hey everyone! I've been working on an authorization framework at my job, and I'm considering abstracting it into an open-source library. I'd love to hear your thoughts on this and what features you think would be most beneficial.

Personally, I want to tackle issues like:
- Declaring rules directly in the code
- Allowing rules to be declared once and used in multiple projects
- Implementing drift detection to manage changes
- Focusing on DevX, making it as user-friendly as possible

I'm leaning towards using annotations for the syntax, similar to examples like this:
```javascript
@can('delete:deviceByUser',{
when: (user, { device }) => device?.organizationId === user.organizationId,
resolveUser: () => {return UserManager.getCurrentUser()},
})
async deleteDeviceByUser(device, user) {
return `deleted device ${device.id}`;
}
```

Or another variation using a helper function:
```javascript
const permitted = await canUser(
'read:device',
regularUser,
{
args: [{ name: 'Test Device', organizationId: 'org2' }],
context: {
device: { name: 'Test Device', organizationId: 'org2' }
}
}
);
```

I'd really appreciate any feedback or ideas you might have. Thanks!