@astrale-os/kernel-dsl 0.1.5 → 0.2.0-beta.2

package/dist/v1/schema/policy/ast.d.ts

@@ -0,0 +1,77 @@
+import type { CoreRef, ClassRef, DefinitionRef, FunctionRef, PolicyRef, ViewRef } from '../reference.js';
+export type PolicyPatternTerm = {
+    readonly kind: 'subject';
+} | {
+    readonly kind: 'object';
+} | {
+    readonly kind: 'source';
+} | {
+    readonly kind: 'target';
+} | {
+    readonly kind: 'variable';
+    readonly id: number;
+};
+export interface PolicyVariable {
+    readonly variable: {
+        readonly kind: 'variable';
+        readonly id: number;
+    };
+    readonly class: ClassRef;
+}
+export interface PolicyRepeat {
+    readonly min: number;
+    readonly max: number;
+}
+export interface PolicyEdgePattern {
+    readonly source: PolicyPatternTerm;
+    readonly class: ClassRef;
+    readonly target: PolicyPatternTerm;
+    readonly repeat?: PolicyRepeat;
+}
+export type PolicyPatternExpression = PolicyEdgePattern | {
+    readonly exists: {
+        readonly nodes: readonly PolicyVariable[];
+        readonly where: PolicyPatternExpression;
+    };
+} | {
+    readonly allOf: readonly PolicyPatternExpression[];
+} | {
+    readonly anyOf: readonly PolicyPatternExpression[];
+};
+export type PolicyDeclaration = {
+    readonly description?: string;
+    readonly match: PolicyPatternExpression;
+} | {
+    readonly description?: string;
+    readonly allOf: readonly PolicyRef[];
+} | {
+    readonly description?: string;
+    readonly anyOf: readonly PolicyRef[];
+};
+/** Local Domain members whose installed projection resolves through one exact member Path. */
+export type PolicyObjectRef = DefinitionRef | FunctionRef | PolicyRef | ViewRef | CoreRef;
+export type PolicyCheckObject = {
+    readonly kind: 'self';
+} | {
+    readonly kind: 'input';
+    readonly field: string;
+} | {
+    readonly kind: 'ref';
+    readonly ref: PolicyObjectRef;
+};
+/** Versioned Policy-check grammar specialized by each lifecycle boundary. */
+export type PolicyCheckExpression<Policy = PolicyRef, Object = PolicyCheckObject> = {
+    readonly check: Policy;
+    readonly object: Object;
+} | {
+    readonly allOf: readonly [
+        PolicyCheckExpression<Policy, Object>,
+        ...PolicyCheckExpression<Policy, Object>[]
+    ];
+} | {
+    readonly anyOf: readonly [
+        PolicyCheckExpression<Policy, Object>,
+        ...PolicyCheckExpression<Policy, Object>[]
+    ];
+};
+//# sourceMappingURL=ast.d.ts.map

package/dist/v1/schema/policy/ast.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ast.d.ts","sourceRoot":"","sources":["../../../../v1/schema/policy/ast.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,OAAO,EACP,QAAQ,EACR,aAAa,EACb,WAAW,EACX,SAAS,EACT,OAAO,EACR,MAAM,iBAAiB,CAAA;AAExB,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAA;AAEtD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;IACrE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAA;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAA;CAC/B;AAED,MAAM,MAAM,uBAAuB,GAC/B,iBAAiB,GACjB;IACE,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAA;QACzC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAA;KACxC,CAAA;CACF,GACD;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,uBAAuB,EAAE,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,uBAAuB,EAAE,CAAA;CAAE,CAAA;AAE1D,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAA;CAAE,GAC1E;IAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,CAAA;CAAE,GACvE;IAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,CAAA;CAAE,CAAA;AAE3E,8FAA8F;AAC9F,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,WAAW,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAA;AAEzF,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAA;CAAE,CAAA;AAE3D,6EAA6E;AAC7E,MAAM,MAAM,qBAAqB,CAAC,MAAM,GAAG,SAAS,EAAE,MAAM,GAAG,iBAAiB,IAC5E;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnD;IACE,QAAQ,CAAC,KAAK,EAAE,SAAS;QACvB,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC;QACrC,GAAG,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE;KAC3C,CAAA;CACF,GACD;IACE,QAAQ,CAAC,KAAK,EAAE,SAAS;QACvB,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC;QACrC,GAAG,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE;KAC3C,CAAA;CACF,CAAA"}

package/dist/v1/schema/policy/ast.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ast.js.map

package/dist/v1/schema/policy/ast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ast.js","sourceRoot":"","sources":["../../../../v1/schema/policy/ast.ts"],"names":[],"mappings":""}

package/dist/v1/schema/policy/normalize.d.ts

@@ -0,0 +1,5 @@
+import type { PolicyCheckExpression, PolicyDeclaration, PolicyPatternExpression } from './ast.js';
+export declare function normalizePolicyDeclaration(value: PolicyDeclaration): PolicyDeclaration;
+export declare function normalizePolicyPattern(value: PolicyPatternExpression): PolicyPatternExpression;
+export declare function normalizePolicyChecks(value: PolicyCheckExpression): PolicyCheckExpression;
+//# sourceMappingURL=normalize.d.ts.map

package/dist/v1/schema/policy/normalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../../../v1/schema/policy/normalize.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EAExB,MAAM,UAAU,CAAA;AAMjB,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,iBAAiB,GAAG,iBAAiB,CAQtF;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,uBAAuB,GAAG,uBAAuB,CAG9F;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,qBAAqB,GAAG,qBAAqB,CAczF"}

package/dist/v1/schema/policy/normalize.js

@@ -0,0 +1,230 @@
+import { json } from '@astrale-os/kernel-dsl/value';
+import { schemaRefIndex, compareSchemaRefs } from '../reference.js';
+const textEncoder = new TextEncoder();
+export function normalizePolicyDeclaration(value) {
+    if ('match' in value) {
+        return withDescription(value, { match: normalizePolicyPattern(value.match) });
+    }
+    if ('allOf' in value) {
+        return withDescription(value, { allOf: uniqueRefs(value.allOf) });
+    }
+    return withDescription(value, { anyOf: uniqueRefs(value.anyOf) });
+}
+export function normalizePolicyPattern(value) {
+    const rewritten = rewriteVariables(value, canonicalVariableIds(value));
+    return normalizePatternNode(rewritten);
+}
+export function normalizePolicyChecks(value) {
+    if ('check' in value)
+        return value;
+    if ('allOf' in value) {
+        const children = value.allOf.flatMap((child) => {
+            const normalized = normalizePolicyChecks(child);
+            return 'allOf' in normalized ? normalized.allOf : [normalized];
+        });
+        return { allOf: policyCheckComposition(uniqueJson(children)) };
+    }
+    const children = value.anyOf.flatMap((child) => {
+        const normalized = normalizePolicyChecks(child);
+        return 'anyOf' in normalized ? normalized.anyOf : [normalized];
+    });
+    return { anyOf: policyCheckComposition(uniqueJson(children)) };
+}
+function policyCheckComposition(values) {
+    // Structural routing may carry an invalid empty array into semantic validation;
+    // validateChecks reports it before the DomainSchema can be accepted.
+    return values;
+}
+function normalizePatternNode(value) {
+    if (isEdge(value)) {
+        const repeat = value.repeat;
+        if (repeat?.min === 1 && repeat.max === 1) {
+            const { repeat: _omitted, ...edge } = value;
+            return edge;
+        }
+        return value;
+    }
+    if ('exists' in value) {
+        return {
+            exists: {
+                nodes: [...value.exists.nodes].sort((left, right) => left.variable.id - right.variable.id),
+                where: normalizePatternNode(value.exists.where),
+            },
+        };
+    }
+    if ('allOf' in value) {
+        const children = value.allOf.flatMap((child) => {
+            const normalized = normalizePatternNode(child);
+            return 'allOf' in normalized ? normalized.allOf : [normalized];
+        });
+        return { allOf: uniqueJson(children) };
+    }
+    const children = value.anyOf.flatMap((child) => {
+        const normalized = normalizePatternNode(child);
+        return 'anyOf' in normalized ? normalized.anyOf : [normalized];
+    });
+    return { anyOf: uniqueJson(children) };
+}
+function canonicalVariableIds(value) {
+    const declarations = new Map();
+    collectDeclarations(value, declarations);
+    const colors = new Map(declarations);
+    for (let iteration = 0; iteration < declarations.size + 1; iteration++) {
+        const next = new Map();
+        for (const id of declarations.keys()) {
+            const uses = [];
+            collectUses(value, id, colors, uses);
+            uses.sort(compareUtf8Bytes);
+            next.set(id, `${declarations.get(id) ?? ''}|${uses.join('|')}`);
+        }
+        if ([...next].every(([id, color]) => colors.get(id) === color))
+            break;
+        colors.clear();
+        for (const [id, color] of next)
+            colors.set(id, color);
+    }
+    const firstUse = new Map();
+    collectFirstUseKeys(value, colors, firstUse);
+    const ordered = [...declarations.keys()].sort((left, right) => {
+        const byColor = compareUtf8Bytes(colors.get(left) ?? '', colors.get(right) ?? '');
+        if (byColor !== 0)
+            return byColor;
+        const byUse = compareUtf8Bytes(firstUse.get(left) ?? '', firstUse.get(right) ?? '');
+        if (byUse !== 0)
+            return byUse;
+        // A remaining tie is an automorphic binder class: assigning either first
+        // yields the same recursively sorted canonical Pattern.
+        return left - right;
+    });
+    return new Map(ordered.map((id, index) => [id, index]));
+}
+function collectDeclarations(value, result) {
+    if ('exists' in value) {
+        for (const node of value.exists.nodes) {
+            result.set(node.variable.id, schemaRefIndex(node.class));
+        }
+        collectDeclarations(value.exists.where, result);
+        return;
+    }
+    if ('allOf' in value)
+        for (const child of value.allOf)
+            collectDeclarations(child, result);
+    if ('anyOf' in value)
+        for (const child of value.anyOf)
+            collectDeclarations(child, result);
+}
+function collectUses(value, target, colors, result) {
+    if (isEdge(value)) {
+        if (value.source.kind === 'variable' && value.source.id === target) {
+            result.push(`s:${schemaRefIndex(value.class)}:${termColor(value.target, colors)}`);
+        }
+        if (value.target.kind === 'variable' && value.target.id === target) {
+            result.push(`t:${schemaRefIndex(value.class)}:${termColor(value.source, colors)}`);
+        }
+        return;
+    }
+    if ('exists' in value)
+        return collectUses(value.exists.where, target, colors, result);
+    const children = 'allOf' in value ? value.allOf : value.anyOf;
+    for (const child of children)
+        collectUses(child, target, colors, result);
+}
+function termColor(term, colors) {
+    if (term.kind === 'variable')
+        return `variable:${colors.get(term.id) ?? '?'}`;
+    return term.kind;
+}
+function collectFirstUseKeys(value, colors, result, prefix = '$') {
+    if (isEdge(value)) {
+        for (const [position, term] of [
+            ['source', value.source],
+            ['target', value.target],
+        ]) {
+            if (term.kind === 'variable') {
+                const key = `${prefix}:${schemaRefIndex(value.class)}:${position}`;
+                const current = result.get(term.id);
+                if (current === undefined || key < current)
+                    result.set(term.id, key);
+            }
+        }
+        return;
+    }
+    if ('exists' in value) {
+        collectFirstUseKeys(value.exists.where, colors, result, `${prefix}:exists`);
+        return;
+    }
+    const key = 'allOf' in value ? 'allOf' : 'anyOf';
+    const operands = 'allOf' in value ? value.allOf : value.anyOf;
+    const children = [...operands].sort((left, right) => compareUtf8Bytes(patternSignature(left, colors), patternSignature(right, colors)));
+    children.forEach((child, index) => collectFirstUseKeys(child, colors, result, `${prefix}:${key}:${index}`));
+}
+function patternSignature(value, colors) {
+    if (isEdge(value)) {
+        return `edge:${schemaRefIndex(value.class)}:${termColor(value.source, colors)}:${termColor(value.target, colors)}:${value.repeat?.min ?? 1}:${value.repeat?.max ?? 1}`;
+    }
+    if ('exists' in value) {
+        return `exists:${value.exists.nodes
+            .map((node) => colors.get(node.variable.id) ?? '')
+            .sort(compareUtf8Bytes)
+            .join(',')}:${patternSignature(value.exists.where, colors)}`;
+    }
+    const key = 'allOf' in value ? 'allOf' : 'anyOf';
+    const operands = 'allOf' in value ? value.allOf : value.anyOf;
+    return `${key}:${operands
+        .map((child) => patternSignature(child, colors))
+        .sort(compareUtf8Bytes)
+        .join('|')}`;
+}
+function rewriteVariables(value, ids) {
+    if (isEdge(value)) {
+        return {
+            ...value,
+            source: rewriteTerm(value.source, ids),
+            target: rewriteTerm(value.target, ids),
+        };
+    }
+    if ('exists' in value) {
+        return {
+            exists: {
+                nodes: value.exists.nodes.map((node) => ({
+                    variable: { kind: 'variable', id: ids.get(node.variable.id) ?? node.variable.id },
+                    class: node.class,
+                })),
+                where: rewriteVariables(value.exists.where, ids),
+            },
+        };
+    }
+    if ('allOf' in value)
+        return { allOf: value.allOf.map((child) => rewriteVariables(child, ids)) };
+    return { anyOf: value.anyOf.map((child) => rewriteVariables(child, ids)) };
+}
+function rewriteTerm(value, ids) {
+    return value.kind === 'variable' ? { kind: 'variable', id: ids.get(value.id) ?? value.id } : value;
+}
+function uniqueRefs(values) {
+    const byKey = new Map(values.map((value) => [schemaRefIndex(value), value]));
+    return [...byKey.values()].sort(compareSchemaRefs);
+}
+function uniqueJson(values) {
+    const byEncoding = new Map(values.map((value) => [json.serialize(value), value]));
+    return [...byEncoding.entries()]
+        .sort(([left], [right]) => compareUtf8Bytes(left, right))
+        .map(([, value]) => value);
+}
+function compareUtf8Bytes(left, right) {
+    const a = textEncoder.encode(left);
+    const b = textEncoder.encode(right);
+    const length = Math.min(a.length, b.length);
+    for (let index = 0; index < length; index++) {
+        if (a[index] !== b[index])
+            return (a[index] ?? 0) - (b[index] ?? 0);
+    }
+    return a.length - b.length;
+}
+function withDescription(source, value) {
+    return source.description === undefined ? value : { description: source.description, ...value };
+}
+function isEdge(value) {
+    return 'source' in value;
+}
+//# sourceMappingURL=normalize.js.map

package/dist/v1/schema/policy/normalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.js","sourceRoot":"","sources":["../../../../v1/schema/policy/normalize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAA;AASnD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAkB,MAAM,iBAAiB,CAAA;AAEnF,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAA;AAErC,MAAM,UAAU,0BAA0B,CAAC,KAAwB;IACjE,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;QACrB,OAAO,eAAe,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC/E,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;QACrB,OAAO,eAAe,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,eAAe,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;AACnE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAA8B;IACnE,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,EAAE,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAA;IACtE,OAAO,oBAAoB,CAAC,SAAS,CAAC,CAAA;AACxC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAA4B;IAChE,IAAI,OAAO,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IAClC,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YAC7C,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;YAC/C,OAAO,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;QAChE,CAAC,CAAC,CAAA;QACF,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAA;IAChE,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7C,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;QAC/C,OAAO,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IACF,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAA;AAChE,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAAwC;IAExC,gFAAgF;IAChF,qEAAqE;IACrE,OAAO,MAAsE,CAAA;AAC/E,CAAC;AAED,SAAS,oBAAoB,CAAC,KAA8B;IAC1D,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;QAC3B,IAAI,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;YAC1C,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAA;YAC3C,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE;gBACN,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1F,KAAK,EAAE,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;aAChD;SACF,CAAA;IACH,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YAC7C,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAA;YAC9C,OAAO,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;QAChE,CAAC,CAAC,CAAA;QACF,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAA;IACxC,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7C,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAA;QAC9C,OAAO,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IACF,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAA;AACxC,CAAC;AAED,SAAS,oBAAoB,CAAC,KAA8B;IAC1D,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC9C,mBAAmB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAiB,YAAY,CAAC,CAAA;IAEpD,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAA;QACtC,KAAK,MAAM,EAAE,IAAI,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,GAAa,EAAE,CAAA;YACzB,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YACpC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;YAC3B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACjE,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC;YAAE,MAAK;QACrE,MAAM,CAAC,KAAK,EAAE,CAAA;QACd,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IACvD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC1C,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC5C,MAAM,OAAO,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QACjF,IAAI,OAAO,KAAK,CAAC;YAAE,OAAO,OAAO,CAAA;QACjC,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QACnF,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;QAC7B,yEAAyE;QACzE,wDAAwD;QACxD,OAAO,IAAI,GAAG,KAAK,CAAA;IACrB,CAAC,CAAC,CAAA;IACF,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;AACzD,CAAC;AAED,SAAS,mBAAmB,CAAC,KAA8B,EAAE,MAA2B;IACtF,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1D,CAAC;QACD,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QAC/C,OAAM;IACR,CAAC;IACD,IAAI,OAAO,IAAI,KAAK;QAAE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK;YAAE,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IACzF,IAAI,OAAO,IAAI,KAAK;QAAE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK;YAAE,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;AAC3F,CAAC;AAED,SAAS,WAAW,CAClB,KAA8B,EAC9B,MAAc,EACd,MAAmC,EACnC,MAAgB;IAEhB,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAClB,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;YACnE,MAAM,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;QACpF,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;YACnE,MAAM,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;QACpF,CAAC;QACD,OAAM;IACR,CAAC;IACD,IAAI,QAAQ,IAAI,KAAK;QAAE,OAAO,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IACrF,MAAM,QAAQ,GAAG,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAA;IAC7D,KAAK,MAAM,KAAK,IAAI,QAAQ;QAAE,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;AAC1E,CAAC;AAED,SAAS,SAAS,CAAC,IAAuB,EAAE,MAAmC;IAC7E,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,YAAY,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAA;IAC7E,OAAO,IAAI,CAAC,IAAI,CAAA;AAClB,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAA8B,EAC9B,MAAmC,EACnC,MAA2B,EAC3B,MAAM,GAAG,GAAG;IAEZ,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI;YAC7B,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;YACxB,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;SAChB,EAAE,CAAC;YACX,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC7B,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAA;gBAClE,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBACnC,IAAI,OAAO,KAAK,SAAS,IAAI,GAAG,GAAG,OAAO;oBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;YACtE,CAAC;QACH,CAAC;QACD,OAAM;IACR,CAAC;IACD,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;QACtB,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,CAAA;QAC3E,OAAM;IACR,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;IAChD,MAAM,QAAQ,GAAG,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAA;IAC7D,MAAM,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAClD,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAClF,CAAA;IACD,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAChC,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC,CACxE,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,KAA8B,EAC9B,MAAmC;IAEnC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAClB,OAAO,QAAQ,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAA;IACxK,CAAC;IACD,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;QACtB,OAAO,UAAU,KAAK,CAAC,MAAM,CAAC,KAAK;aAChC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;aACjD,IAAI,CAAC,gBAAgB,CAAC;aACtB,IAAI,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAA;IAChE,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;IAChD,MAAM,QAAQ,GAAG,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAA;IAC7D,OAAO,GAAG,GAAG,IAAI,QAAQ;SACtB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;SAC/C,IAAI,CAAC,gBAAgB,CAAC;SACtB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;AAChB,CAAC;AAED,SAAS,gBAAgB,CACvB,KAA8B,EAC9B,GAAgC;IAEhC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAClB,OAAO;YACL,GAAG,KAAK;YACR,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC;YACtC,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC;SACvC,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBACvC,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;oBACjF,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAC,CAAC;gBACH,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC;aACjD;SACF,CAAA;IACH,CAAC;IACD,IAAI,OAAO,IAAI,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAA;IAChG,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAA;AAC5E,CAAC;AAED,SAAS,WAAW,CAClB,KAAwB,EACxB,GAAgC;IAEhC,OAAO,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAA;AACpG,CAAC;AAED,SAAS,UAAU,CAAC,MAA4B;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;IAC5E,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;AACpD,CAAC;AAED,SAAS,UAAU,CAAI,MAAoB;IACzC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;IACjF,OAAO,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;SAC7B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAA;AAC9B,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACnD,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAA;IAC3C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAA;AAC5B,CAAC;AAED,SAAS,eAAe,CACtB,MAAyC,EACzC,KAAQ;IAER,OAAO,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,GAAG,KAAK,EAAE,CAAA;AACjG,CAAC;AAED,SAAS,MAAM,CACb,KAA8B;IAE9B,OAAO,QAAQ,IAAI,KAAK,CAAA;AAC1B,CAAC"}

package/dist/v1/schema/policy/validation/branches.d.ts

@@ -0,0 +1,21 @@
+import type { ClassRef } from '../../reference.js';
+import type { PolicyEdgePattern, PolicyPatternExpression, PolicyPatternTerm } from '../ast.js';
+export interface PatternBranch {
+    readonly edges: readonly PatternEdgeUse[];
+    readonly variables: ReadonlyMap<string, ClassRef>;
+    readonly requiredVariables: ReadonlySet<string>;
+    readonly namespace: string;
+}
+export interface PatternEdgeUse {
+    readonly pattern: PolicyEdgePattern;
+    readonly namespace: string;
+}
+export type PolicyTargetMode = 'object' | 'edge';
+export declare function branchesOf(pattern: PolicyPatternExpression, namespace: string): readonly PatternBranch[];
+export declare function branchProduct(children: readonly (readonly PatternBranch[])[]): readonly PatternBranch[];
+export declare function capBranches(values: readonly PatternBranch[]): readonly PatternBranch[];
+export declare function isConnected(branch: PatternBranch): boolean;
+/** A normalized branch targets either one object or both authored Edge endpoints, never a mixture. */
+export declare function targetMode(branch: PatternBranch): PolicyTargetMode | undefined;
+export declare function termKey(term: PolicyPatternTerm, namespace: string): string;
+//# sourceMappingURL=branches.d.ts.map

package/dist/v1/schema/policy/validation/branches.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branches.d.ts","sourceRoot":"","sources":["../../../../../v1/schema/policy/validation/branches.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAI9F,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAA;IACzC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACjD,QAAQ,CAAC,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,MAAM,CAAA;AAEhD,wBAAgB,UAAU,CACxB,OAAO,EAAE,uBAAuB,EAChC,SAAS,EAAE,MAAM,GAChB,SAAS,aAAa,EAAE,CAG1B;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,SAAS,CAAC,SAAS,aAAa,EAAE,CAAC,EAAE,GAC9C,SAAS,aAAa,EAAE,CAa1B;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,GAAG,SAAS,aAAa,EAAE,CAEtF;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAiB1D;AAED,sGAAsG;AACtG,wBAAgB,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,gBAAgB,GAAG,SAAS,CAc9E;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1E"}

package/dist/v1/schema/policy/validation/branches.js

@@ -0,0 +1,155 @@
+import { BRANCH_OVERFLOW } from './budgets.js';
+export function branchesOf(pattern, namespace) {
+    const variables = collectVariableClasses(pattern, namespace);
+    return branchesForNode(pattern, namespace, variables);
+}
+export function branchProduct(children) {
+    let result = [emptyBranch()];
+    for (const child of children) {
+        const next = [];
+        for (const left of result) {
+            for (const right of child) {
+                next.push(mergeBranches(left, right));
+                if (next.length >= BRANCH_OVERFLOW)
+                    return next;
+            }
+        }
+        result = next;
+    }
+    return result;
+}
+export function capBranches(values) {
+    return values.length <= BRANCH_OVERFLOW ? values : values.slice(0, BRANCH_OVERFLOW);
+}
+export function isConnected(branch) {
+    const mode = targetMode(branch);
+    if (mode === undefined)
+        return false;
+    const vertices = new Set(mode === 'object' ? ['subject', 'object'] : ['subject', 'source', 'target']);
+    for (const variable of branch.requiredVariables)
+        vertices.add(variable);
+    const union = new UnionFind(vertices);
+    for (const edge of branch.edges) {
+        const source = termKey(edge.pattern.source, edge.namespace);
+        const target = termKey(edge.pattern.target, edge.namespace);
+        union.add(source);
+        union.add(target);
+        union.join(source, target);
+    }
+    const root = union.find('subject');
+    return [...vertices].every((vertex) => union.find(vertex) === root);
+}
+/** A normalized branch targets either one object or both authored Edge endpoints, never a mixture. */
+export function targetMode(branch) {
+    let object = false;
+    let source = false;
+    let target = false;
+    for (const edge of branch.edges) {
+        for (const term of [edge.pattern.source, edge.pattern.target]) {
+            object ||= term.kind === 'object';
+            source ||= term.kind === 'source';
+            target ||= term.kind === 'target';
+        }
+    }
+    if (object && !source && !target)
+        return 'object';
+    if (!object && source && target)
+        return 'edge';
+    return undefined;
+}
+export function termKey(term, namespace) {
+    return term.kind === 'variable' ? variableKey(namespace, term.id) : term.kind;
+}
+function branchesForNode(pattern, namespace, variables) {
+    if (isEdge(pattern)) {
+        return [
+            {
+                edges: [{ pattern, namespace }],
+                variables,
+                requiredVariables: new Set(),
+                namespace,
+            },
+        ];
+    }
+    if ('exists' in pattern) {
+        const direct = new Set(pattern.exists.nodes.map((node) => variableKey(namespace, node.variable.id)));
+        return branchesForNode(pattern.exists.where, namespace, variables).map((branch) => ({
+            ...branch,
+            requiredVariables: new Set([...branch.requiredVariables, ...direct]),
+        }));
+    }
+    const { key, values } = patternOperands(pattern);
+    const children = values.map((child) => branchesForNode(child, namespace, variables));
+    return key === 'allOf' ? branchProduct(children) : capBranches(children.flat());
+}
+function emptyBranch() {
+    return {
+        edges: [],
+        variables: new Map(),
+        requiredVariables: new Set(),
+        namespace: '$',
+    };
+}
+function mergeBranches(left, right) {
+    return {
+        edges: [...left.edges, ...right.edges],
+        variables: new Map([...left.variables, ...right.variables]),
+        requiredVariables: new Set([...left.requiredVariables, ...right.requiredVariables]),
+        namespace: `${left.namespace}&${right.namespace}`,
+    };
+}
+function collectVariableClasses(pattern, namespace) {
+    const result = new Map();
+    const visit = (node) => {
+        if ('exists' in node) {
+            for (const variable of node.exists.nodes) {
+                result.set(variableKey(namespace, variable.variable.id), variable.class);
+            }
+            visit(node.exists.where);
+        }
+        else if ('allOf' in node)
+            node.allOf.forEach(visit);
+        else if ('anyOf' in node)
+            node.anyOf.forEach(visit);
+    };
+    visit(pattern);
+    return result;
+}
+function variableKey(namespace, id) {
+    return `variable:${namespace}:${id}`;
+}
+function patternOperands(value) {
+    return 'allOf' in value
+        ? { key: 'allOf', values: value.allOf }
+        : { key: 'anyOf', values: value.anyOf };
+}
+function isEdge(value) {
+    return 'source' in value;
+}
+class UnionFind {
+    #parents = new Map();
+    constructor(values) {
+        for (const value of values)
+            this.add(value);
+    }
+    add(value) {
+        if (!this.#parents.has(value))
+            this.#parents.set(value, value);
+    }
+    find(value) {
+        this.add(value);
+        const parent = this.#parents.get(value);
+        if (parent === value)
+            return value;
+        const root = this.find(parent);
+        this.#parents.set(value, root);
+        return root;
+    }
+    join(left, right) {
+        const a = this.find(left);
+        const b = this.find(right);
+        if (a !== b)
+            this.#parents.set(b, a);
+    }
+}
+//# sourceMappingURL=branches.js.map

package/dist/v1/schema/policy/validation/branches.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"branches.js","sourceRoot":"","sources":["../../../../../v1/schema/policy/validation/branches.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAgB9C,MAAM,UAAU,UAAU,CACxB,OAAgC,EAChC,SAAiB;IAEjB,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IAC5D,OAAO,eAAe,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;AACvD,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,QAA+C;IAE/C,IAAI,MAAM,GAA6B,CAAC,WAAW,EAAE,CAAC,CAAA;IACtD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAoB,EAAE,CAAA;QAChC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;gBAC1B,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;gBACrC,IAAI,IAAI,CAAC,MAAM,IAAI,eAAe;oBAAE,OAAO,IAAI,CAAA;YACjD,CAAC;QACH,CAAC;QACD,MAAM,GAAG,IAAI,CAAA;IACf,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAgC;IAC1D,OAAO,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;AACrF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAqB;IAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;IAC/B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IACpC,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAC5E,CAAA;IACD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,iBAAiB;QAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACvE,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAA;IACrC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAC3D,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACjB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACjB,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAClC,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAA;AACrE,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,MAAqB;IAC9C,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9D,MAAM,KAAK,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAA;YACjC,MAAM,KAAK,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAA;YACjC,MAAM,KAAK,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAA;QACnC,CAAC;IACH,CAAC;IACD,IAAI,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAA;IACjD,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAC9C,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAuB,EAAE,SAAiB;IAChE,OAAO,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;AAC/E,CAAC;AAED,SAAS,eAAe,CACtB,OAAgC,EAChC,SAAiB,EACjB,SAAwC;IAExC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACpB,OAAO;YACL;gBACE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;gBAC/B,SAAS;gBACT,iBAAiB,EAAE,IAAI,GAAG,EAAE;gBAC5B,SAAS;aACV;SACF,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAC7E,CAAA;QACD,OAAO,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAClF,GAAG,MAAM;YACT,iBAAiB,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,iBAAiB,EAAE,GAAG,MAAM,CAAC,CAAC;SACrE,CAAC,CAAC,CAAA;IACL,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;IACpF,OAAO,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;AACjF,CAAC;AAED,SAAS,WAAW;IAClB,OAAO;QACL,KAAK,EAAE,EAAE;QACT,SAAS,EAAE,IAAI,GAAG,EAAE;QACpB,iBAAiB,EAAE,IAAI,GAAG,EAAE;QAC5B,SAAS,EAAE,GAAG;KACf,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAmB,EAAE,KAAoB;IAC9D,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;QACtC,SAAS,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3D,iBAAiB,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,iBAAiB,EAAE,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACnF,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,EAAE;KAClD,CAAA;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAgC,EAChC,SAAiB;IAEjB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAA;IAC1C,MAAM,KAAK,GAAG,CAAC,IAA6B,EAAQ,EAAE;QACpD,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACzC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;YAC1E,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC1B,CAAC;aAAM,IAAI,OAAO,IAAI,IAAI;YAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;aAChD,IAAI,OAAO,IAAI,IAAI;YAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACrD,CAAC,CAAA;IACD,KAAK,CAAC,OAAO,CAAC,CAAA;IACd,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB,EAAE,EAAU;IAChD,OAAO,YAAY,SAAS,IAAI,EAAE,EAAE,CAAA;AACtC,CAAC;AAED,SAAS,eAAe,CACtB,KAAyF;IAKzF,OAAO,OAAO,IAAI,KAAK;QACrB,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE;QACvC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,CAAA;AAC3C,CAAC;AAED,SAAS,MAAM,CAAC,KAA8B;IAC5C,OAAO,QAAQ,IAAI,KAAK,CAAA;AAC1B,CAAC;AAED,MAAM,SAAS;IACJ,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAA;IAE7C,YAAY,MAAwB;QAClC,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAC7C,CAAC;IAED,GAAG,CAAC,KAAa;QACf,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IAChE,CAAC;IAED,IAAI,CAAC,KAAa;QAChB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACf,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAW,CAAA;QACjD,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,KAAK,CAAA;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC9B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,CAAC,IAAY,EAAE,KAAa;QAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1B,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACtC,CAAC;CACF"}

package/dist/v1/schema/policy/validation/budgets.d.ts

@@ -0,0 +1,19 @@
+import type { PolicyCheckExpression } from '../ast.js';
+import type { PolicyValidationContext } from './context.js';
+export declare const MAX_PATTERN_DEPTH = 4;
+export declare const MAX_BRANCHES = 8;
+export declare const MAX_VARIABLES = 4;
+export declare const MAX_EDGES = 6;
+export declare const MAX_REPEAT = 3;
+export declare const MAX_DOMAINS = 4;
+export declare const MAX_CHECK_DEPTH = 4;
+export declare const MAX_CHECK_LEAVES = 8;
+export declare const BRANCH_OVERFLOW: number;
+export interface CheckMeasure {
+    readonly depth: number;
+    readonly branches: number;
+    readonly leaves: number;
+}
+export declare function validatePolicyBudgets(context: PolicyValidationContext): void;
+export declare function measureChecks(expression: PolicyCheckExpression): CheckMeasure;
+//# sourceMappingURL=budgets.d.ts.map

package/dist/v1/schema/policy/validation/budgets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budgets.d.ts","sourceRoot":"","sources":["../../../../../v1/schema/policy/validation/budgets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAA8C,MAAM,WAAW,CAAA;AAClG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AAI3D,eAAO,MAAM,iBAAiB,IAAI,CAAA;AAClC,eAAO,MAAM,YAAY,IAAI,CAAA;AAC7B,eAAO,MAAM,aAAa,IAAI,CAAA;AAC9B,eAAO,MAAM,SAAS,IAAI,CAAA;AAC1B,eAAO,MAAM,UAAU,IAAI,CAAA;AAC3B,eAAO,MAAM,WAAW,IAAI,CAAA;AAC5B,eAAO,MAAM,eAAe,IAAI,CAAA;AAChC,eAAO,MAAM,gBAAgB,IAAI,CAAA;AACjC,eAAO,MAAM,eAAe,QAAmB,CAAA;AAQ/C,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAmC5E;AAED,wBAAgB,aAAa,CAAC,UAAU,EAAE,qBAAqB,GAAG,YAAY,CAa7E"}