@astrale-os/kernel-dsl 0.1.5 → 0.2.0-beta.2

package/dist/v1/schema/policy/validation/budgets.js

@@ -0,0 +1,132 @@
+import { escapePointer } from './context.js';
+export const MAX_PATTERN_DEPTH = 4;
+export const MAX_BRANCHES = 8;
+export const MAX_VARIABLES = 4;
+export const MAX_EDGES = 6;
+export const MAX_REPEAT = 3;
+export const MAX_DOMAINS = 4;
+export const MAX_CHECK_DEPTH = 4;
+export const MAX_CHECK_LEAVES = 8;
+export const BRANCH_OVERFLOW = MAX_BRANCHES + 1;
+export function validatePolicyBudgets(context) {
+    for (const name of Object.keys(context.environment.candidate.policies)) {
+        const measure = measurePolicy(context, name, new Set());
+        if (measure === undefined)
+            continue;
+        const pointer = `/policies/${escapePointer(name)}`;
+        if (measure.depth > MAX_PATTERN_DEPTH) {
+            context.add('PL_BUDGET', pointer, `Expanded Pattern depth ${measure.depth} exceeds ${MAX_PATTERN_DEPTH}.`);
+        }
+        if (measure.edgeCounts.length > MAX_BRANCHES) {
+            context.add('PL_BUDGET', pointer, `Expanded Pattern has more than ${MAX_BRANCHES} normalized branches.`);
+        }
+        const edgeMaximum = Math.max(0, ...measure.edgeCounts);
+        if (edgeMaximum > MAX_EDGES) {
+            context.add('PL_BUDGET', pointer, `A normalized branch contains ${edgeMaximum} Edge predicates; the maximum is ${MAX_EDGES}.`);
+        }
+        if (measure.domains.size > MAX_DOMAINS) {
+            context.add('PL_BUDGET', pointer, `Expanded Pattern references ${measure.domains.size} Domains; the maximum is ${MAX_DOMAINS}.`);
+        }
+    }
+}
+export function measureChecks(expression) {
+    if ('check' in expression)
+        return { depth: 1, branches: 1, leaves: 1 };
+    const { key, values } = checkOperands(expression);
+    const children = values.map(measureChecks);
+    const branches = key === 'allOf'
+        ? children.reduce((value, child) => saturatingProduct(value, child.branches), 1)
+        : children.reduce((value, child) => Math.min(BRANCH_OVERFLOW, value + child.branches), 0);
+    return {
+        depth: 1 + Math.max(0, ...children.map((child) => child.depth)),
+        branches,
+        leaves: children.reduce((value, child) => value + child.leaves, 0),
+    };
+}
+function measurePolicy(context, name, visiting) {
+    if (visiting.has(name))
+        return undefined;
+    const declaration = context.normalized.get(name);
+    if (declaration === undefined)
+        return undefined;
+    const nested = new Set(visiting);
+    nested.add(name);
+    if ('match' in declaration) {
+        return measurePattern(declaration.match, context.environment.candidate.origin);
+    }
+    const refs = 'allOf' in declaration ? declaration.allOf : declaration.anyOf;
+    const children = refs.flatMap((ref) => {
+        if (!context.isLocalPolicy(ref))
+            return [];
+        const value = measurePolicy(context, ref.name, nested);
+        return value === undefined ? [] : [value];
+    });
+    if (children.length !== refs.length || children.length === 0)
+        return undefined;
+    return combineMeasures('allOf' in declaration ? 'allOf' : 'anyOf', children);
+}
+function measurePattern(pattern, ownOrigin) {
+    if (isEdge(pattern)) {
+        return {
+            depth: 1,
+            edgeCounts: [1],
+            domains: new Set([ownOrigin, pattern.class.origin]),
+        };
+    }
+    if ('exists' in pattern) {
+        const child = measurePattern(pattern.exists.where, ownOrigin);
+        return {
+            depth: child.depth + 1,
+            edgeCounts: child.edgeCounts,
+            domains: new Set([
+                ...child.domains,
+                ...pattern.exists.nodes.map((node) => node.class.origin),
+            ]),
+        };
+    }
+    const { key, values } = patternOperands(pattern);
+    return combineMeasures(key, values.map((child) => measurePattern(child, ownOrigin)));
+}
+function combineMeasures(key, children) {
+    const depth = 1 + Math.max(0, ...children.map((child) => child.depth));
+    const domains = new Set(children.flatMap((child) => [...child.domains]));
+    if (key === 'anyOf') {
+        return {
+            depth,
+            edgeCounts: children.flatMap((child) => child.edgeCounts).slice(0, BRANCH_OVERFLOW),
+            domains,
+        };
+    }
+    let edgeCounts = [0];
+    for (const child of children) {
+        const next = [];
+        for (const left of edgeCounts) {
+            for (const right of child.edgeCounts) {
+                next.push(left + right);
+                if (next.length >= BRANCH_OVERFLOW)
+                    break;
+            }
+            if (next.length >= BRANCH_OVERFLOW)
+                break;
+        }
+        edgeCounts = next;
+    }
+    return { depth, edgeCounts, domains };
+}
+function saturatingProduct(left, right) {
+    return Math.min(BRANCH_OVERFLOW, left * right);
+}
+function patternOperands(value) {
+    return 'allOf' in value
+        ? { key: 'allOf', values: value.allOf }
+        : { key: 'anyOf', values: value.anyOf };
+}
+function checkOperands(value) {
+    return 'allOf' in value
+        ? { key: 'allOf', values: value.allOf }
+        : { key: 'anyOf', values: value.anyOf };
+}
+function isEdge(value) {
+    return 'source' in value;
+}
+//# sourceMappingURL=budgets.js.map

package/dist/v1/schema/policy/validation/budgets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budgets.js","sourceRoot":"","sources":["../../../../../v1/schema/policy/validation/budgets.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAA;AAClC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAA;AAC7B,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAA;AAC9B,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAA;AAC1B,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAA;AAC3B,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAA;AAC5B,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAA;AAChC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAA;AACjC,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,GAAG,CAAC,CAAA;AAc/C,MAAM,UAAU,qBAAqB,CAAC,OAAgC;IACpE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvE,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;QACvD,IAAI,OAAO,KAAK,SAAS;YAAE,SAAQ;QACnC,MAAM,OAAO,GAAG,aAAa,aAAa,CAAC,IAAI,CAAC,EAAE,CAAA;QAClD,IAAI,OAAO,CAAC,KAAK,GAAG,iBAAiB,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CACT,WAAW,EACX,OAAO,EACP,0BAA0B,OAAO,CAAC,KAAK,YAAY,iBAAiB,GAAG,CACxE,CAAA;QACH,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CACT,WAAW,EACX,OAAO,EACP,kCAAkC,YAAY,uBAAuB,CACtE,CAAA;QACH,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;QACtD,IAAI,WAAW,GAAG,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CACT,WAAW,EACX,OAAO,EACP,gCAAgC,WAAW,oCAAoC,SAAS,GAAG,CAC5F,CAAA;QACH,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,GAAG,WAAW,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CACT,WAAW,EACX,OAAO,EACP,+BAA+B,OAAO,CAAC,OAAO,CAAC,IAAI,4BAA4B,WAAW,GAAG,CAC9F,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,UAAiC;IAC7D,IAAI,OAAO,IAAI,UAAU;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAA;IACtE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,UAAU,CAAC,CAAA;IACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAC1C,MAAM,QAAQ,GACZ,GAAG,KAAK,OAAO;QACb,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7F,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/D,QAAQ;QACR,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;KACnE,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CACpB,OAAgC,EAChC,IAAY,EACZ,QAAqB;IAErB,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IACxC,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAChD,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;IAChC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAChB,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;QAC3B,OAAO,cAAc,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAA;IAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACpC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAA;QAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACtD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAC9E,OAAO,eAAe,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,OAAgC,EAAE,SAAiB;IACzE,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACpB,OAAO;YACL,KAAK,EAAE,CAAC;YACR,UAAU,EAAE,CAAC,CAAC,CAAC;YACf,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;SACpD,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;QAC7D,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAE,IAAI,GAAG,CAAC;gBACf,GAAG,KAAK,CAAC,OAAO;gBAChB,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;aACzD,CAAC;SACH,CAAA;IACH,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IAChD,OAAO,eAAe,CACpB,GAAG,EACH,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CACxD,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CACtB,GAAsB,EACtB,QAAmC;IAEnC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;IACtE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACxE,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,KAAK;YACL,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;YACnF,OAAO;SACR,CAAA;IACH,CAAC;IACD,IAAI,UAAU,GAAsB,CAAC,CAAC,CAAC,CAAA;IACvC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAA;gBACvB,IAAI,IAAI,CAAC,MAAM,IAAI,eAAe;oBAAE,MAAK;YAC3C,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,IAAI,eAAe;gBAAE,MAAK;QAC3C,CAAC;QACD,UAAU,GAAG,IAAI,CAAA;IACnB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;AACvC,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAa;IACpD,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,GAAG,KAAK,CAAC,CAAA;AAChD,CAAC;AAED,SAAS,eAAe,CACtB,KAAyF;IAKzF,OAAO,OAAO,IAAI,KAAK;QACrB,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE;QACvC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,CAAA;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,KAAkE;IAIvF,OAAO,OAAO,IAAI,KAAK;QACrB,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE;QACvC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,CAAA;AAC3C,CAAC;AAED,SAAS,MAAM,CAAC,KAA8B;IAC5C,OAAO,QAAQ,IAAI,KAAK,CAAA;AAC1B,CAAC"}

package/dist/v1/schema/policy/validation/context.d.ts

@@ -0,0 +1,28 @@
+import type { DefinitionAnalysisResult } from '../../definition/analysis.js';
+import type { ClassDeclaration } from '../../definition/class.js';
+import type { DomainDiagnostic } from '../../diagnostic.js';
+import type { DomainResolutionContext } from '../../resolution/context.js';
+import type { ResolvedDefinition } from '../../resolution/definition.index.js';
+import type { PolicyDeclaration } from '../ast.js';
+import { type ClassRef, type InterfaceRef, type PolicyRef } from '../../reference.js';
+export declare class PolicyValidationContext {
+    #private;
+    readonly environment: DomainResolutionContext;
+    readonly analysis: DefinitionAnalysisResult;
+    readonly diagnostics: DomainDiagnostic[];
+    readonly normalized: Map<string, PolicyDeclaration>;
+    readonly allNodeClasses: readonly ClassRef[];
+    constructor(environment: DomainResolutionContext, analysis: DefinitionAnalysisResult);
+    resolveNodeClass(ref: ClassRef, pointer: string): ResolvedDefinition | undefined;
+    resolveEdge(ref: ClassRef, pointer: string): ResolvedDefinition | undefined;
+    resolvePolicy(ref: PolicyRef, pointer: string): boolean;
+    isLocalPolicy(ref: PolicyRef): boolean;
+    edgeDeclaration(ref: ClassRef): Extract<ClassDeclaration, {
+        readonly family: 'edge';
+    }> | undefined;
+    classImplements(candidate: ClassRef, required: InterfaceRef): boolean;
+    interfaceExtends(candidate: InterfaceRef, required: InterfaceRef): boolean;
+    add(code: string, pointer: string, message: string, ref?: string): void;
+}
+export declare function escapePointer(value: string): string;
+//# sourceMappingURL=context.d.ts.map

package/dist/v1/schema/policy/validation/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../../../v1/schema/policy/validation/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAA;AAC5E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAEjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AAC1E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAA;AAC9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAGlD,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,SAAS,EACf,MAAM,oBAAoB,CAAA;AAE3B,qBAAa,uBAAuB;;IAOhC,QAAQ,CAAC,WAAW,EAAE,uBAAuB;IAC7C,QAAQ,CAAC,QAAQ,EAAE,wBAAwB;IAP7C,QAAQ,CAAC,WAAW,EAAE,gBAAgB,EAAE,CAAK;IAC7C,QAAQ,CAAC,UAAU,iCAAuC;IAC1D,QAAQ,CAAC,cAAc,EAAE,SAAS,QAAQ,EAAE,CAAA;IAG5C,YACW,WAAW,EAAE,uBAAuB,EACpC,QAAQ,EAAE,wBAAwB,EAQ5C;IAED,gBAAgB,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAY/E;IAED,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAY1E;IAED,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAmBtD;IAED,aAAa,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAMrC;IAED,eAAe,CACb,GAAG,EAAE,QAAQ,GACZ,OAAO,CAAC,gBAAgB,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,SAAS,CAOpE;IAED,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,GAAG,OAAO,CAQpE;IAED,gBAAgB,CAAC,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,GAAG,OAAO,CAoBzE;IAED,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAEtE;CACF;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD"}

package/dist/v1/schema/policy/validation/context.js

@@ -0,0 +1,99 @@
+import { diagnostic } from '../../diagnostic.js';
+import { schemaRefIndex, formatSchemaRef, } from '../../reference.js';
+export class PolicyValidationContext {
+    environment;
+    analysis;
+    diagnostics = [];
+    normalized = new Map();
+    allNodeClasses;
+    #invalidPolicyRefs = new Set();
+    constructor(environment, analysis) {
+        this.environment = environment;
+        this.analysis = analysis;
+        this.allNodeClasses = [...environment.definitions.values()]
+            .filter((value) => value.ref.kind === 'class' && value.family === 'node')
+            .map((value) => value.ref);
+    }
+    resolveNodeClass(ref, pointer) {
+        const resolved = this.environment.resolve(ref);
+        if (resolved === undefined || resolved.ref.kind !== 'class' || resolved.family !== 'node') {
+            this.add('PL_REF', pointer, `${formatSchemaRef(ref)} does not resolve to an owning/direct-dependency Node Class.`, formatSchemaRef(ref));
+            return undefined;
+        }
+        return resolved;
+    }
+    resolveEdge(ref, pointer) {
+        const resolved = this.environment.resolve(ref);
+        if (resolved === undefined || resolved.ref.kind !== 'class' || resolved.family !== 'edge') {
+            this.add('PL_REF', pointer, `${formatSchemaRef(ref)} does not resolve to an owning/direct-dependency Edge Class.`, formatSchemaRef(ref));
+            return undefined;
+        }
+        return resolved;
+    }
+    resolvePolicy(ref, pointer) {
+        const key = `${pointer}\u0000${schemaRefIndex(ref)}`;
+        if (this.#invalidPolicyRefs.has(key))
+            return false;
+        const declaration = this.environment.resolvePolicy(ref);
+        if (ref.origin !== this.environment.candidate.origin ||
+            ref.kind !== 'policy' ||
+            declaration === undefined) {
+            this.#invalidPolicyRefs.add(key);
+            this.add('PL_REF', pointer, `${formatSchemaRef(ref)} is not an exact local named Policy ref.`, formatSchemaRef(ref));
+            return false;
+        }
+        return true;
+    }
+    isLocalPolicy(ref) {
+        return (ref.origin === this.environment.candidate.origin &&
+            ref.kind === 'policy' &&
+            this.environment.candidate.policies[ref.name] !== undefined);
+    }
+    edgeDeclaration(ref) {
+        const resolved = this.environment.resolve(ref);
+        if (resolved === undefined || resolved.ref.kind !== 'class' || resolved.family !== 'edge') {
+            return undefined;
+        }
+        const declaration = resolved.declaration;
+        return declaration.family === 'edge' ? declaration : undefined;
+    }
+    classImplements(candidate, required) {
+        const resolved = this.environment.resolveAny(candidate);
+        if (resolved === undefined || resolved.ref.kind !== 'class' || resolved.family !== 'node') {
+            return false;
+        }
+        const declaration = resolved.declaration;
+        if (declaration.family !== 'node')
+            return false;
+        return declaration.implements.some((parent) => this.interfaceExtends(parent, required));
+    }
+    interfaceExtends(candidate, required) {
+        if (schemaRefIndex(candidate) === schemaRefIndex(required))
+            return true;
+        const visited = new Set();
+        const visit = (ref) => {
+            const key = schemaRefIndex(ref);
+            if (key === schemaRefIndex(required))
+                return true;
+            if (visited.has(key))
+                return false;
+            visited.add(key);
+            const resolved = this.environment.resolveAny(ref);
+            if (resolved === undefined ||
+                resolved.ref.kind !== 'interface' ||
+                (resolved.family !== 'node' && resolved.family !== 'both')) {
+                return false;
+            }
+            const declaration = resolved.declaration;
+            return declaration.extends.some(visit);
+        };
+        return visit(candidate);
+    }
+    add(code, pointer, message, ref) {
+        this.diagnostics.push(diagnostic(code, pointer, message, ref));
+    }
+}
+export function escapePointer(value) {
+    return value.replaceAll('~', '~0').replaceAll('/', '~1');
+}
+//# sourceMappingURL=context.js.map

package/dist/v1/schema/policy/validation/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../../../v1/schema/policy/validation/context.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EACL,cAAc,EACd,eAAe,GAIhB,MAAM,oBAAoB,CAAA;AAE3B,MAAM,OAAO,uBAAuB;IAOvB,WAAW;IACX,QAAQ;IAPV,WAAW,GAAuB,EAAE,CAAA;IACpC,UAAU,GAAG,IAAI,GAAG,EAA6B,CAAA;IACjD,cAAc,CAAqB;IACnC,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAA;IAE/C,YACW,WAAoC,EACpC,QAAkC;2BADlC,WAAW;wBACX,QAAQ;QAEjB,IAAI,CAAC,cAAc,GAAG,CAAC,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;aACxD,MAAM,CACL,CAAC,KAAK,EAA4D,EAAE,CAClE,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CACxD;aACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;IAED,gBAAgB,CAAC,GAAa,EAAE,OAAe;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC9C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1F,IAAI,CAAC,GAAG,CACN,QAAQ,EACR,OAAO,EACP,GAAG,eAAe,CAAC,GAAG,CAAC,8DAA8D,EACrF,eAAe,CAAC,GAAG,CAAC,CACrB,CAAA;YACD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,WAAW,CAAC,GAAa,EAAE,OAAe;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC9C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1F,IAAI,CAAC,GAAG,CACN,QAAQ,EACR,OAAO,EACP,GAAG,eAAe,CAAC,GAAG,CAAC,8DAA8D,EACrF,eAAe,CAAC,GAAG,CAAC,CACrB,CAAA;YACD,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,aAAa,CAAC,GAAc,EAAE,OAAe;QAC3C,MAAM,GAAG,GAAG,GAAG,OAAO,SAAS,cAAc,CAAC,GAAG,CAAC,EAAE,CAAA;QACpD,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAA;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;QACvD,IACE,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM;YAChD,GAAG,CAAC,IAAI,KAAK,QAAQ;YACrB,WAAW,KAAK,SAAS,EACzB,CAAC;YACD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAChC,IAAI,CAAC,GAAG,CACN,QAAQ,EACR,OAAO,EACP,GAAG,eAAe,CAAC,GAAG,CAAC,0CAA0C,EACjE,eAAe,CAAC,GAAG,CAAC,CACrB,CAAA;YACD,OAAO,KAAK,CAAA;QACd,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,aAAa,CAAC,GAAc;QAC1B,OAAO,CACL,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM;YAChD,GAAG,CAAC,IAAI,KAAK,QAAQ;YACrB,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS,CAC5D,CAAA;IACH,CAAC;IAED,eAAe,CACb,GAAa;QAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC9C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1F,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAA+B,CAAA;QAC5D,OAAO,WAAW,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;IAChE,CAAC;IAED,eAAe,CAAC,SAAmB,EAAE,QAAsB;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACvD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1F,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAA+B,CAAA;QAC5D,IAAI,WAAW,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,KAAK,CAAA;QAC/C,OAAO,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;IACzF,CAAC;IAED,gBAAgB,CAAC,SAAuB,EAAE,QAAsB;QAC9D,IAAI,cAAc,CAAC,SAAS,CAAC,KAAK,cAAc,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QACvE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;QACjC,MAAM,KAAK,GAAG,CAAC,GAAiB,EAAW,EAAE;YAC3C,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;YAC/B,IAAI,GAAG,KAAK,cAAc,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAA;YACjD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAA;YAClC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;YACjD,IACE,QAAQ,KAAK,SAAS;gBACtB,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW;gBACjC,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,EAC1D,CAAC;gBACD,OAAO,KAAK,CAAA;YACd,CAAC;YACD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAmC,CAAA;YAChE,OAAO,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACxC,CAAC,CAAA;QACD,OAAO,KAAK,CAAC,SAAS,CAAC,CAAA;IACzB,CAAC;IAED,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,OAAe,EAAE,GAAY;QAC9D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;IAChE,CAAC;CACF;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;AAC1D,CAAC"}

package/dist/v1/schema/policy/validation/references.d.ts

@@ -0,0 +1,3 @@
+import type { PolicyValidationContext } from './context.js';
+export declare function validatePolicyReferences(context: PolicyValidationContext): void;
+//# sourceMappingURL=references.d.ts.map

package/dist/v1/schema/policy/validation/references.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"references.d.ts","sourceRoot":"","sources":["../../../../../v1/schema/policy/validation/references.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AAO3D,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAQ/E"}

package/dist/v1/schema/policy/validation/references.js

@@ -0,0 +1,136 @@
+import { normalizePolicyDeclaration, normalizePolicyPattern } from '../normalize.js';
+import { branchesOf, isConnected, targetMode } from './branches.js';
+import { MAX_REPEAT, MAX_VARIABLES } from './budgets.js';
+import { escapePointer } from './context.js';
+export function validatePolicyReferences(context) {
+    for (const [name, declaration] of Object.entries(context.environment.candidate.policies)) {
+        const pointer = `/policies/${escapePointer(name)}`;
+        context.normalized.set(name, normalizePolicyDeclaration(declaration));
+        if ('match' in declaration)
+            validateMatch(context, name, declaration.match, pointer);
+        else
+            validateComposition(context, declaration, pointer);
+    }
+    validateCycles(context);
+}
+function validateMatch(context, name, pattern, pointer) {
+    const declarations = new Map();
+    const uses = new Map();
+    validatePatternNode(context, pattern, `${pointer}/match`, new Set(), declarations, uses);
+    for (const [id, declaration] of declarations) {
+        if ((uses.get(id) ?? 0) === 0) {
+            context.add('PL_VARIABLE_SCOPE', declaration.pointer, `Variable ${id} is declared but never used.`);
+        }
+    }
+    const normalized = normalizePolicyPattern(pattern);
+    const branches = branchesOf(normalized, name);
+    for (const [index, branch] of branches.entries()) {
+        const mode = targetMode(branch);
+        if (mode === undefined) {
+            context.add('PL_TARGET', `${pointer}/match`, `Normalized branch ${index} must use object or both source and target, without mixing target modes.`);
+            continue;
+        }
+        if (!isConnected(branch)) {
+            context.add('PL_CONNECTIVITY', `${pointer}/match`, `Normalized ${mode} branch ${index} does not connect subject, its target terms, and every scoped term.`);
+        }
+    }
+}
+function validatePatternNode(context, pattern, pointer, scope, declarations, uses) {
+    if (isEdge(pattern)) {
+        context.resolveEdge(pattern.class, `${pointer}/class`);
+        validateTerm(context, pattern.source, `${pointer}/source`, scope, uses);
+        validateTerm(context, pattern.target, `${pointer}/target`, scope, uses);
+        if (pattern.repeat !== undefined) {
+            const { min, max } = pattern.repeat;
+            if (!Number.isInteger(min) ||
+                !Number.isInteger(max) ||
+                min < 0 ||
+                max < min ||
+                max > MAX_REPEAT) {
+                context.add('PL_REPEAT', `${pointer}/repeat`, `Repeat requires integral bounds 0 <= min <= max <= ${MAX_REPEAT}.`);
+            }
+        }
+        return;
+    }
+    if ('exists' in pattern) {
+        if (pattern.exists.nodes.length > MAX_VARIABLES) {
+            context.add('PL_BUDGET', `${pointer}/exists/nodes`, `An exists expression declares ${pattern.exists.nodes.length} variables; the maximum is ${MAX_VARIABLES}.`);
+        }
+        const nested = new Set(scope);
+        for (const [index, node] of pattern.exists.nodes.entries()) {
+            const id = node.variable.id;
+            const declarationPointer = `${pointer}/exists/nodes/${index}`;
+            if (declarations.has(id)) {
+                context.add('PL_VARIABLE_SCOPE', `${declarationPointer}/variable/id`, `Variable ${id} is declared more than once; variable IDs are globally unique.`);
+            }
+            else {
+                declarations.set(id, { ref: node.class, pointer: declarationPointer });
+            }
+            if (nested.has(id)) {
+                context.add('PL_VARIABLE_SCOPE', `${declarationPointer}/variable/id`, `Variable ${id} shadows an enclosing variable.`);
+            }
+            nested.add(id);
+            context.resolveNodeClass(node.class, `${declarationPointer}/class`);
+        }
+        validatePatternNode(context, pattern.exists.where, `${pointer}/exists/where`, nested, declarations, uses);
+        return;
+    }
+    const { key, values } = patternOperands(pattern);
+    if (values.length === 0) {
+        context.add('PL_COMPOSITION', `${pointer}/${key}`, `${key} must be non-empty.`);
+    }
+    values.forEach((child, index) => validatePatternNode(context, child, `${pointer}/${key}/${index}`, scope, declarations, uses));
+}
+function validateTerm(context, term, pointer, scope, uses) {
+    if (term.kind === 'variable') {
+        if (!scope.has(term.id)) {
+            context.add('PL_VARIABLE_SCOPE', pointer, `Variable ${term.id} is free, escaped, or outside its defining exists scope.`);
+        }
+        else {
+            uses.set(term.id, (uses.get(term.id) ?? 0) + 1);
+        }
+    }
+}
+function validateComposition(context, declaration, pointer) {
+    const key = 'allOf' in declaration ? 'allOf' : 'anyOf';
+    const refs = 'allOf' in declaration ? declaration.allOf : declaration.anyOf;
+    if (refs.length === 0) {
+        context.add('PL_COMPOSITION', `${pointer}/${key}`, `${key} must be non-empty.`);
+    }
+    refs.forEach((ref, index) => context.resolvePolicy(ref, `${pointer}/${key}/${index}`));
+}
+function validateCycles(context) {
+    const visiting = new Set();
+    const visited = new Set();
+    const visit = (name, stack) => {
+        if (visiting.has(name)) {
+            context.add('PL_COMPOSITION', `/policies/${escapePointer(name)}`, `Named Policy composition cycle: ${[...stack, name].join(' -> ')}.`);
+            return;
+        }
+        if (visited.has(name))
+            return;
+        visiting.add(name);
+        const declaration = context.environment.candidate.policies[name];
+        if (declaration !== undefined && !('match' in declaration)) {
+            const refs = 'allOf' in declaration ? declaration.allOf : declaration.anyOf;
+            for (const ref of refs) {
+                if (ref.origin === context.environment.candidate.origin && ref.kind === 'policy') {
+                    visit(ref.name, [...stack, name]);
+                }
+            }
+        }
+        visiting.delete(name);
+        visited.add(name);
+    };
+    for (const name of Object.keys(context.environment.candidate.policies))
+        visit(name, []);
+}
+function patternOperands(value) {
+    return 'allOf' in value
+        ? { key: 'allOf', values: value.allOf }
+        : { key: 'anyOf', values: value.anyOf };
+}
+function isEdge(value) {
+    return 'source' in value;
+}
+//# sourceMappingURL=references.js.map

package/dist/v1/schema/policy/validation/references.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"references.js","sourceRoot":"","sources":["../../../../../v1/schema/policy/validation/references.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAA;AACpF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AACnE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE5C,MAAM,UAAU,wBAAwB,CAAC,OAAgC;IACvE,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzF,MAAM,OAAO,GAAG,aAAa,aAAa,CAAC,IAAI,CAAC,EAAE,CAAA;QAClD,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,WAAW,CAAC,CAAC,CAAA;QACrE,IAAI,OAAO,IAAI,WAAW;YAAE,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;;YAC/E,mBAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;IACzD,CAAC;IACD,cAAc,CAAC,OAAO,CAAC,CAAA;AACzB,CAAC;AAED,SAAS,aAAa,CACpB,OAAgC,EAChC,IAAY,EACZ,OAAgC,EAChC,OAAe;IAEf,MAAM,YAAY,GAAG,IAAI,GAAG,EAAgE,CAAA;IAC5F,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAA;IACtC,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;IACxF,KAAK,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CACT,mBAAmB,EACnB,WAAW,CAAC,OAAO,EACnB,YAAY,EAAE,8BAA8B,CAC7C,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;IAC7C,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;QAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CACT,WAAW,EACX,GAAG,OAAO,QAAQ,EAClB,qBAAqB,KAAK,0EAA0E,CACrG,CAAA;YACD,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CACT,iBAAiB,EACjB,GAAG,OAAO,QAAQ,EAClB,cAAc,IAAI,WAAW,KAAK,qEAAqE,CACxG,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAgC,EAChC,OAAgC,EAChC,OAAe,EACf,KAA0B,EAC1B,YAA+E,EAC/E,IAAyB;IAEzB,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACpB,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,OAAO,QAAQ,CAAC,CAAA;QACtD,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,OAAO,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;QACvE,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,OAAO,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;QACvE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAA;YACnC,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;gBACtB,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;gBACtB,GAAG,GAAG,CAAC;gBACP,GAAG,GAAG,GAAG;gBACT,GAAG,GAAG,UAAU,EAChB,CAAC;gBACD,OAAO,CAAC,GAAG,CACT,WAAW,EACX,GAAG,OAAO,SAAS,EACnB,sDAAsD,UAAU,GAAG,CACpE,CAAA;YACH,CAAC;QACH,CAAC;QACD,OAAM;IACR,CAAC;IACD,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YAChD,OAAO,CAAC,GAAG,CACT,WAAW,EACX,GAAG,OAAO,eAAe,EACzB,iCAAiC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,8BAA8B,aAAa,GAAG,CAC3G,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;QAC7B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAA;YAC3B,MAAM,kBAAkB,GAAG,GAAG,OAAO,iBAAiB,KAAK,EAAE,CAAA;YAC7D,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CACT,mBAAmB,EACnB,GAAG,kBAAkB,cAAc,EACnC,YAAY,EAAE,gEAAgE,CAC/E,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAA;YACxE,CAAC;YACD,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CACT,mBAAmB,EACnB,GAAG,kBAAkB,cAAc,EACnC,YAAY,EAAE,iCAAiC,CAChD,CAAA;YACH,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACd,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,kBAAkB,QAAQ,CAAC,CAAA;QACrE,CAAC;QACD,mBAAmB,CACjB,OAAO,EACP,OAAO,CAAC,MAAM,CAAC,KAAK,EACpB,GAAG,OAAO,eAAe,EACzB,MAAM,EACN,YAAY,EACZ,IAAI,CACL,CAAA;QACD,OAAM;IACR,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,OAAO,IAAI,GAAG,EAAE,EAAE,GAAG,GAAG,qBAAqB,CAAC,CAAA;IACjF,CAAC;IACD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAC9B,mBAAmB,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,IAAI,GAAG,IAAI,KAAK,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAC7F,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CACnB,OAAgC,EAChC,IAAuB,EACvB,OAAe,EACf,KAA0B,EAC1B,IAAyB;IAEzB,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CACT,mBAAmB,EACnB,OAAO,EACP,YAAY,IAAI,CAAC,EAAE,0DAA0D,CAC9E,CAAA;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACjD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAgC,EAChC,WAAoE,EACpE,OAAe;IAEf,MAAM,GAAG,GAAG,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;IACtD,MAAM,IAAI,GAAG,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAA;IAC3E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,OAAO,IAAI,GAAG,EAAE,EAAE,GAAG,GAAG,qBAAqB,CAAC,CAAA;IACjF,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAA;AACxF,CAAC;AAED,SAAS,cAAc,CAAC,OAAgC;IACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACjC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,KAAwB,EAAQ,EAAE;QAC7D,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CACT,gBAAgB,EAChB,aAAa,aAAa,CAAC,IAAI,CAAC,EAAE,EAClC,mCAAmC,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CACpE,CAAA;YACD,OAAM;QACR,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAM;QAC7B,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAClB,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAChE,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,WAAW,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,GAAG,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAA;YAC3E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACjF,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACrB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACnB,CAAC,CAAA;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC;QAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;AACzF,CAAC;AAED,SAAS,eAAe,CACtB,KAAyF;IAKzF,OAAO,OAAO,IAAI,KAAK;QACrB,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE;QACvC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,CAAA;AAC3C,CAAC;AAED,SAAS,MAAM,CAAC,KAA8B;IAC5C,OAAO,QAAQ,IAAI,KAAK,CAAA;AAC1B,CAAC"}

package/dist/v1/schema/policy/validation/typing.d.ts

@@ -0,0 +1,23 @@
+import type { PolicyValidationContext } from './context.js';
+import { type ClassRef, type DefinitionRef, type InterfaceRef } from '../../reference.js';
+export type ObjectContract = {
+    readonly kind: 'default';
+} | {
+    readonly kind: 'exact';
+    readonly ref: ClassRef;
+} | {
+    readonly kind: 'universal-interface';
+    readonly ref: InterfaceRef;
+};
+export declare class PolicyTyping {
+    #private;
+    readonly context: PolicyValidationContext;
+    constructor(context: PolicyValidationContext);
+    validatePolicies(): void;
+    policyAccepts(name: string, object: ObjectContract): boolean;
+    policyAcceptsEdge(name: string, source: ObjectContract, target: ObjectContract): boolean;
+    concreteEndpointClasses(accepts: readonly DefinitionRef[]): readonly ClassRef[];
+    endpointsOverlap(left: readonly DefinitionRef[], right: readonly DefinitionRef[]): boolean;
+}
+export declare function contractOfNodeDefinition(ref: DefinitionRef): ObjectContract;
+//# sourceMappingURL=typing.d.ts.map

package/dist/v1/schema/policy/validation/typing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typing.d.ts","sourceRoot":"","sources":["../../../../../v1/schema/policy/validation/typing.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AAE3D,OAAO,EAEL,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,YAAY,EAClB,MAAM,oBAAoB,CAAA;AAmB3B,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAA;CAAE,CAAA;AAmBxE,qBAAa,YAAY;;IACX,QAAQ,CAAC,OAAO,EAAE,uBAAuB;IAArD,YAAqB,OAAO,EAAE,uBAAuB,EAAI;IAEzD,gBAAgB,IAAI,IAAI,CAiCvB;IAED,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAI3D;IAED,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAIvF;IAED,uBAAuB,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,GAAG,SAAS,QAAQ,EAAE,CAI9E;IAED,gBAAgB,CAAC,IAAI,EAAE,SAAS,aAAa,EAAE,EAAE,KAAK,EAAE,SAAS,aAAa,EAAE,GAAG,OAAO,CAIzF;CAwNF;AASD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,CAE3E"}