@backblaze-labs/b2-sdk 0.2.0 → 0.4.0

package/dist/simulator/partner-capabilities.cjs

@@ -0,0 +1,77 @@
+const require_partner = require("../types/partner.cjs");
+//#region src/simulator/partner-capabilities.ts
+/**
+* Partner and Computer Backup endpoint capability requirements.
+*
+* Partner tokens carry suite-specific grants that are independent from
+* storage application-key capabilities. The simulator uses this table only
+* for strict Partner/Backup auth checks.
+*
+* Source: https://www.backblaze.com/apidocs (Partner endpoint pages list
+* valid-token authorization failures as `401 unauthorized`).
+*
+* @packageDocumentation
+*/
+var PartnerEndpoint = Object.freeze({
+	CreateGroupMember: "b2_create_group_member",
+	EjectGroupMember: "b2_eject_group_member",
+	ListGroups: "b2_list_groups",
+	ListGroupMembers: "b2_list_group_members",
+	ReserveTrialCreateAccount: "b2_reserve_trial_create_account",
+	ListComputers: "bz_list_computers",
+	DeleteComputer: "bz_delete_computer"
+});
+var PARTNER_ENDPOINT_NAMES = Object.freeze([
+	PartnerEndpoint.CreateGroupMember,
+	PartnerEndpoint.EjectGroupMember,
+	PartnerEndpoint.ListGroups,
+	PartnerEndpoint.ListGroupMembers,
+	PartnerEndpoint.ReserveTrialCreateAccount,
+	PartnerEndpoint.ListComputers,
+	PartnerEndpoint.DeleteComputer
+]);
+function endpointRequirement(suite, capabilities) {
+	return Object.freeze({
+		suite,
+		capabilities: Object.freeze([...capabilities])
+	});
+}
+var PARTNER_ENDPOINT_CAPABILITIES = Object.freeze({
+	[PartnerEndpoint.CreateGroupMember]: endpointRequirement("groups", [require_partner.PartnerCapability.All]),
+	[PartnerEndpoint.EjectGroupMember]: endpointRequirement("groups", [require_partner.PartnerCapability.All]),
+	[PartnerEndpoint.ListGroups]: endpointRequirement("groups", [require_partner.PartnerCapability.All]),
+	[PartnerEndpoint.ListGroupMembers]: endpointRequirement("groups", [require_partner.PartnerCapability.All]),
+	[PartnerEndpoint.ReserveTrialCreateAccount]: endpointRequirement("groups", [require_partner.PartnerCapability.All]),
+	[PartnerEndpoint.ListComputers]: endpointRequirement("backup", [require_partner.PartnerCapability.All]),
+	[PartnerEndpoint.DeleteComputer]: endpointRequirement("backup", [require_partner.PartnerCapability.All])
+});
+/**
+* Resolve the frozen capability requirement for a Partner or Backup endpoint.
+*
+* @param endpoint - Partner or Computer Backup endpoint name.
+*
+* @returns The endpoint's requirement, or null when no policy is available.
+*/
+function partnerEndpointCapabilityRequirementFor(endpoint) {
+	return PARTNER_ENDPOINT_CAPABILITIES[endpoint] ?? null;
+}
+/**
+* Find missing Partner capabilities against an already-resolved requirement.
+*
+* @param required - Partner capabilities required by the endpoint.
+* @param granted - Partner capabilities granted by the token suite.
+*
+* @returns The subset of required Partner capabilities absent from `granted`.
+*/
+function missingPartnerCapabilities(required, granted) {
+	const grantedSet = new Set(granted);
+	return required.filter((capability) => !grantedSet.has(capability));
+}
+//#endregion
+exports.PARTNER_ENDPOINT_CAPABILITIES = PARTNER_ENDPOINT_CAPABILITIES;
+exports.PARTNER_ENDPOINT_NAMES = PARTNER_ENDPOINT_NAMES;
+exports.PartnerEndpoint = PartnerEndpoint;
+exports.missingPartnerCapabilities = missingPartnerCapabilities;
+exports.partnerEndpointCapabilityRequirementFor = partnerEndpointCapabilityRequirementFor;
+
+//# sourceMappingURL=partner-capabilities.cjs.map

package/dist/simulator/partner-capabilities.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"partner-capabilities.cjs","names":[],"sources":["../../src/simulator/partner-capabilities.ts"],"sourcesContent":["/**\n * Partner and Computer Backup endpoint capability requirements.\n *\n * Partner tokens carry suite-specific grants that are independent from\n * storage application-key capabilities. The simulator uses this table only\n * for strict Partner/Backup auth checks.\n *\n * Source: https://www.backblaze.com/apidocs (Partner endpoint pages list\n * valid-token authorization failures as `401 unauthorized`).\n *\n * @packageDocumentation\n */\n\nimport { PartnerCapability } from '../types/partner.ts'\n\nexport const PartnerEndpoint = Object.freeze({\n  CreateGroupMember: 'b2_create_group_member',\n  EjectGroupMember: 'b2_eject_group_member',\n  ListGroups: 'b2_list_groups',\n  ListGroupMembers: 'b2_list_group_members',\n  ReserveTrialCreateAccount: 'b2_reserve_trial_create_account',\n  ListComputers: 'bz_list_computers',\n  DeleteComputer: 'bz_delete_computer',\n} as const)\n\nexport type PartnerEndpoint = (typeof PartnerEndpoint)[keyof typeof PartnerEndpoint]\n\nexport const PARTNER_ENDPOINT_NAMES = Object.freeze([\n  PartnerEndpoint.CreateGroupMember,\n  PartnerEndpoint.EjectGroupMember,\n  PartnerEndpoint.ListGroups,\n  PartnerEndpoint.ListGroupMembers,\n  PartnerEndpoint.ReserveTrialCreateAccount,\n  PartnerEndpoint.ListComputers,\n  PartnerEndpoint.DeleteComputer,\n] as const)\n\nexport type PartnerCapabilitySuite = 'groups' | 'backup'\n\nexport interface PartnerEndpointCapabilityRequirement {\n  readonly suite: PartnerCapabilitySuite\n  readonly capabilities: readonly PartnerCapability[]\n}\n\nfunction endpointRequirement(\n  suite: PartnerCapabilitySuite,\n  capabilities: readonly PartnerCapability[],\n): PartnerEndpointCapabilityRequirement {\n  return Object.freeze({\n    suite,\n    capabilities: Object.freeze([...capabilities]),\n  })\n}\n\nexport const PARTNER_ENDPOINT_CAPABILITIES = Object.freeze({\n  [PartnerEndpoint.CreateGroupMember]: endpointRequirement('groups', [PartnerCapability.All]),\n  [PartnerEndpoint.EjectGroupMember]: endpointRequirement('groups', [PartnerCapability.All]),\n  [PartnerEndpoint.ListGroups]: endpointRequirement('groups', [PartnerCapability.All]),\n  [PartnerEndpoint.ListGroupMembers]: endpointRequirement('groups', [PartnerCapability.All]),\n  [PartnerEndpoint.ReserveTrialCreateAccount]: endpointRequirement('groups', [\n    PartnerCapability.All,\n  ]),\n  [PartnerEndpoint.ListComputers]: endpointRequirement('backup', [PartnerCapability.All]),\n  [PartnerEndpoint.DeleteComputer]: endpointRequirement('backup', [PartnerCapability.All]),\n} satisfies Record<PartnerEndpoint, PartnerEndpointCapabilityRequirement>)\n\n/**\n * Resolve the frozen capability requirement for a Partner or Backup endpoint.\n *\n * @param endpoint - Partner or Computer Backup endpoint name.\n *\n * @returns The endpoint's requirement, or null when no policy is available.\n */\nexport function partnerEndpointCapabilityRequirementFor(\n  endpoint: PartnerEndpoint,\n): PartnerEndpointCapabilityRequirement | null {\n  return PARTNER_ENDPOINT_CAPABILITIES[endpoint] ?? null\n}\n\n/**\n * Find missing Partner capabilities against an already-resolved requirement.\n *\n * @param required - Partner capabilities required by the endpoint.\n * @param granted - Partner capabilities granted by the token suite.\n *\n * @returns The subset of required Partner capabilities absent from `granted`.\n */\nexport function missingPartnerCapabilities(\n  required: readonly PartnerCapability[],\n  granted: readonly PartnerCapability[],\n): readonly PartnerCapability[] {\n  const grantedSet = new Set(granted)\n  return required.filter((capability) => !grantedSet.has(capability))\n}\n\n/**\n * Find which Partner capabilities are missing from the caller's grant set.\n *\n * @param endpoint - Partner or Computer Backup endpoint name.\n * @param granted - Suite capabilities carried by the Partner token.\n *\n * @returns The required Partner capabilities not present in `granted`.\n */\nexport function missingPartnerCapabilitiesFor(\n  endpoint: PartnerEndpoint,\n  granted: readonly PartnerCapability[],\n): readonly PartnerCapability[] {\n  return missingPartnerCapabilities(\n    partnerEndpointCapabilityRequirementFor(endpoint)?.capabilities ?? [],\n    granted,\n  )\n}\n"],"mappings":";;;;;;;;;;;;;;AAeA,IAAa,kBAAkB,OAAO,OAAO;CAC3C,mBAAmB;CACnB,kBAAkB;CAClB,YAAY;CACZ,kBAAkB;CAClB,2BAA2B;CAC3B,eAAe;CACf,gBAAgB;AAClB,CAAU;AAIV,IAAa,yBAAyB,OAAO,OAAO;CAClD,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;AAClB,CAAU;AASV,SAAS,oBACP,OACA,cACsC;CACtC,OAAO,OAAO,OAAO;EACnB;EACA,cAAc,OAAO,OAAO,CAAC,GAAG,YAAY,CAAC;CAC/C,CAAC;AACH;AAEA,IAAa,gCAAgC,OAAO,OAAO;EACxD,gBAAgB,oBAAoB,oBAAoB,UAAU,CAAC,gBAAA,kBAAkB,GAAG,CAAC;EACzF,gBAAgB,mBAAmB,oBAAoB,UAAU,CAAC,gBAAA,kBAAkB,GAAG,CAAC;EACxF,gBAAgB,aAAa,oBAAoB,UAAU,CAAC,gBAAA,kBAAkB,GAAG,CAAC;EAClF,gBAAgB,mBAAmB,oBAAoB,UAAU,CAAC,gBAAA,kBAAkB,GAAG,CAAC;EACxF,gBAAgB,4BAA4B,oBAAoB,UAAU,CACzE,gBAAA,kBAAkB,GACpB,CAAC;EACA,gBAAgB,gBAAgB,oBAAoB,UAAU,CAAC,gBAAA,kBAAkB,GAAG,CAAC;EACrF,gBAAgB,iBAAiB,oBAAoB,UAAU,CAAC,gBAAA,kBAAkB,GAAG,CAAC;AACzF,CAAyE;;;;;;;;AASzE,SAAgB,wCACd,UAC6C;CAC7C,OAAO,8BAA8B,aAAa;AACpD;;;;;;;;;AAUA,SAAgB,2BACd,UACA,SAC8B;CAC9B,MAAM,aAAa,IAAI,IAAI,OAAO;CAClC,OAAO,SAAS,QAAQ,eAAe,CAAC,WAAW,IAAI,UAAU,CAAC;AACpE"}

package/dist/simulator/partner-capabilities.d.cts

@@ -0,0 +1,53 @@
+import { PartnerCapability } from '../types/partner.js';
+export declare const PartnerEndpoint: Readonly<{
+    readonly CreateGroupMember: "b2_create_group_member";
+    readonly EjectGroupMember: "b2_eject_group_member";
+    readonly ListGroups: "b2_list_groups";
+    readonly ListGroupMembers: "b2_list_group_members";
+    readonly ReserveTrialCreateAccount: "b2_reserve_trial_create_account";
+    readonly ListComputers: "bz_list_computers";
+    readonly DeleteComputer: "bz_delete_computer";
+}>;
+export type PartnerEndpoint = (typeof PartnerEndpoint)[keyof typeof PartnerEndpoint];
+export declare const PARTNER_ENDPOINT_NAMES: readonly ["b2_create_group_member", "b2_eject_group_member", "b2_list_groups", "b2_list_group_members", "b2_reserve_trial_create_account", "bz_list_computers", "bz_delete_computer"];
+export type PartnerCapabilitySuite = 'groups' | 'backup';
+export interface PartnerEndpointCapabilityRequirement {
+    readonly suite: PartnerCapabilitySuite;
+    readonly capabilities: readonly PartnerCapability[];
+}
+export declare const PARTNER_ENDPOINT_CAPABILITIES: Readonly<{
+    b2_create_group_member: PartnerEndpointCapabilityRequirement;
+    b2_eject_group_member: PartnerEndpointCapabilityRequirement;
+    b2_list_groups: PartnerEndpointCapabilityRequirement;
+    b2_list_group_members: PartnerEndpointCapabilityRequirement;
+    b2_reserve_trial_create_account: PartnerEndpointCapabilityRequirement;
+    bz_list_computers: PartnerEndpointCapabilityRequirement;
+    bz_delete_computer: PartnerEndpointCapabilityRequirement;
+}>;
+/**
+ * Resolve the frozen capability requirement for a Partner or Backup endpoint.
+ *
+ * @param endpoint - Partner or Computer Backup endpoint name.
+ *
+ * @returns The endpoint's requirement, or null when no policy is available.
+ */
+export declare function partnerEndpointCapabilityRequirementFor(endpoint: PartnerEndpoint): PartnerEndpointCapabilityRequirement | null;
+/**
+ * Find missing Partner capabilities against an already-resolved requirement.
+ *
+ * @param required - Partner capabilities required by the endpoint.
+ * @param granted - Partner capabilities granted by the token suite.
+ *
+ * @returns The subset of required Partner capabilities absent from `granted`.
+ */
+export declare function missingPartnerCapabilities(required: readonly PartnerCapability[], granted: readonly PartnerCapability[]): readonly PartnerCapability[];
+/**
+ * Find which Partner capabilities are missing from the caller's grant set.
+ *
+ * @param endpoint - Partner or Computer Backup endpoint name.
+ * @param granted - Suite capabilities carried by the Partner token.
+ *
+ * @returns The required Partner capabilities not present in `granted`.
+ */
+export declare function missingPartnerCapabilitiesFor(endpoint: PartnerEndpoint, granted: readonly PartnerCapability[]): readonly PartnerCapability[];
+//# sourceMappingURL=partner-capabilities.d.ts.map

package/dist/simulator/partner-capabilities.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"partner-capabilities.d.ts","sourceRoot":"","sources":["../../src/simulator/partner-capabilities.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAEvD,eAAO,MAAM,eAAe;;;;;;;;EAQjB,CAAA;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAA;AAEpF,eAAO,MAAM,sBAAsB,uLAQxB,CAAA;AAEX,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAExD,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAA;IACtC,QAAQ,CAAC,YAAY,EAAE,SAAS,iBAAiB,EAAE,CAAA;CACpD;AAYD,eAAO,MAAM,6BAA6B;;;;;;;;EAUgC,CAAA;AAE1E;;;;;;GAMG;AACH,wBAAgB,uCAAuC,CACrD,QAAQ,EAAE,eAAe,GACxB,oCAAoC,GAAG,IAAI,CAE7C;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,EACtC,OAAO,EAAE,SAAS,iBAAiB,EAAE,GACpC,SAAS,iBAAiB,EAAE,CAG9B;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,SAAS,iBAAiB,EAAE,GACpC,SAAS,iBAAiB,EAAE,CAK9B"}

package/dist/simulator/partner-capabilities.d.ts

@@ -0,0 +1,53 @@
+import { PartnerCapability } from '../types/partner.js';
+export declare const PartnerEndpoint: Readonly<{
+    readonly CreateGroupMember: "b2_create_group_member";
+    readonly EjectGroupMember: "b2_eject_group_member";
+    readonly ListGroups: "b2_list_groups";
+    readonly ListGroupMembers: "b2_list_group_members";
+    readonly ReserveTrialCreateAccount: "b2_reserve_trial_create_account";
+    readonly ListComputers: "bz_list_computers";
+    readonly DeleteComputer: "bz_delete_computer";
+}>;
+export type PartnerEndpoint = (typeof PartnerEndpoint)[keyof typeof PartnerEndpoint];
+export declare const PARTNER_ENDPOINT_NAMES: readonly ["b2_create_group_member", "b2_eject_group_member", "b2_list_groups", "b2_list_group_members", "b2_reserve_trial_create_account", "bz_list_computers", "bz_delete_computer"];
+export type PartnerCapabilitySuite = 'groups' | 'backup';
+export interface PartnerEndpointCapabilityRequirement {
+    readonly suite: PartnerCapabilitySuite;
+    readonly capabilities: readonly PartnerCapability[];
+}
+export declare const PARTNER_ENDPOINT_CAPABILITIES: Readonly<{
+    b2_create_group_member: PartnerEndpointCapabilityRequirement;
+    b2_eject_group_member: PartnerEndpointCapabilityRequirement;
+    b2_list_groups: PartnerEndpointCapabilityRequirement;
+    b2_list_group_members: PartnerEndpointCapabilityRequirement;
+    b2_reserve_trial_create_account: PartnerEndpointCapabilityRequirement;
+    bz_list_computers: PartnerEndpointCapabilityRequirement;
+    bz_delete_computer: PartnerEndpointCapabilityRequirement;
+}>;
+/**
+ * Resolve the frozen capability requirement for a Partner or Backup endpoint.
+ *
+ * @param endpoint - Partner or Computer Backup endpoint name.
+ *
+ * @returns The endpoint's requirement, or null when no policy is available.
+ */
+export declare function partnerEndpointCapabilityRequirementFor(endpoint: PartnerEndpoint): PartnerEndpointCapabilityRequirement | null;
+/**
+ * Find missing Partner capabilities against an already-resolved requirement.
+ *
+ * @param required - Partner capabilities required by the endpoint.
+ * @param granted - Partner capabilities granted by the token suite.
+ *
+ * @returns The subset of required Partner capabilities absent from `granted`.
+ */
+export declare function missingPartnerCapabilities(required: readonly PartnerCapability[], granted: readonly PartnerCapability[]): readonly PartnerCapability[];
+/**
+ * Find which Partner capabilities are missing from the caller's grant set.
+ *
+ * @param endpoint - Partner or Computer Backup endpoint name.
+ * @param granted - Suite capabilities carried by the Partner token.
+ *
+ * @returns The required Partner capabilities not present in `granted`.
+ */
+export declare function missingPartnerCapabilitiesFor(endpoint: PartnerEndpoint, granted: readonly PartnerCapability[]): readonly PartnerCapability[];
+//# sourceMappingURL=partner-capabilities.d.ts.map

package/dist/simulator/partner-capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"partner-capabilities.d.ts","sourceRoot":"","sources":["../../src/simulator/partner-capabilities.js"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAEvD,eAAO,MAAM,eAAe;;;;;;;;EAQjB,CAAA;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAA;AAEpF,eAAO,MAAM,sBAAsB,uLAQxB,CAAA;AAEX,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAExD,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAA;IACtC,QAAQ,CAAC,YAAY,EAAE,SAAS,iBAAiB,EAAE,CAAA;CACpD;AAYD,eAAO,MAAM,6BAA6B;;;;;;;;EAUgC,CAAA;AAE1E;;;;;;GAMG;AACH,wBAAgB,uCAAuC,CACrD,QAAQ,EAAE,eAAe,GACxB,oCAAoC,GAAG,IAAI,CAE7C;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,EACtC,OAAO,EAAE,SAAS,iBAAiB,EAAE,GACpC,SAAS,iBAAiB,EAAE,CAG9B;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,SAAS,iBAAiB,EAAE,GACpC,SAAS,iBAAiB,EAAE,CAK9B"}

package/dist/simulator/partner-capabilities.js

@@ -0,0 +1,73 @@
+import { PartnerCapability } from "../types/partner.js";
+//#region src/simulator/partner-capabilities.ts
+/**
+* Partner and Computer Backup endpoint capability requirements.
+*
+* Partner tokens carry suite-specific grants that are independent from
+* storage application-key capabilities. The simulator uses this table only
+* for strict Partner/Backup auth checks.
+*
+* Source: https://www.backblaze.com/apidocs (Partner endpoint pages list
+* valid-token authorization failures as `401 unauthorized`).
+*
+* @packageDocumentation
+*/
+var PartnerEndpoint = Object.freeze({
+	CreateGroupMember: "b2_create_group_member",
+	EjectGroupMember: "b2_eject_group_member",
+	ListGroups: "b2_list_groups",
+	ListGroupMembers: "b2_list_group_members",
+	ReserveTrialCreateAccount: "b2_reserve_trial_create_account",
+	ListComputers: "bz_list_computers",
+	DeleteComputer: "bz_delete_computer"
+});
+var PARTNER_ENDPOINT_NAMES = Object.freeze([
+	PartnerEndpoint.CreateGroupMember,
+	PartnerEndpoint.EjectGroupMember,
+	PartnerEndpoint.ListGroups,
+	PartnerEndpoint.ListGroupMembers,
+	PartnerEndpoint.ReserveTrialCreateAccount,
+	PartnerEndpoint.ListComputers,
+	PartnerEndpoint.DeleteComputer
+]);
+function endpointRequirement(suite, capabilities) {
+	return Object.freeze({
+		suite,
+		capabilities: Object.freeze([...capabilities])
+	});
+}
+var PARTNER_ENDPOINT_CAPABILITIES = Object.freeze({
+	[PartnerEndpoint.CreateGroupMember]: endpointRequirement("groups", [PartnerCapability.All]),
+	[PartnerEndpoint.EjectGroupMember]: endpointRequirement("groups", [PartnerCapability.All]),
+	[PartnerEndpoint.ListGroups]: endpointRequirement("groups", [PartnerCapability.All]),
+	[PartnerEndpoint.ListGroupMembers]: endpointRequirement("groups", [PartnerCapability.All]),
+	[PartnerEndpoint.ReserveTrialCreateAccount]: endpointRequirement("groups", [PartnerCapability.All]),
+	[PartnerEndpoint.ListComputers]: endpointRequirement("backup", [PartnerCapability.All]),
+	[PartnerEndpoint.DeleteComputer]: endpointRequirement("backup", [PartnerCapability.All])
+});
+/**
+* Resolve the frozen capability requirement for a Partner or Backup endpoint.
+*
+* @param endpoint - Partner or Computer Backup endpoint name.
+*
+* @returns The endpoint's requirement, or null when no policy is available.
+*/
+function partnerEndpointCapabilityRequirementFor(endpoint) {
+	return PARTNER_ENDPOINT_CAPABILITIES[endpoint] ?? null;
+}
+/**
+* Find missing Partner capabilities against an already-resolved requirement.
+*
+* @param required - Partner capabilities required by the endpoint.
+* @param granted - Partner capabilities granted by the token suite.
+*
+* @returns The subset of required Partner capabilities absent from `granted`.
+*/
+function missingPartnerCapabilities(required, granted) {
+	const grantedSet = new Set(granted);
+	return required.filter((capability) => !grantedSet.has(capability));
+}
+//#endregion
+export { PARTNER_ENDPOINT_CAPABILITIES, PARTNER_ENDPOINT_NAMES, PartnerEndpoint, missingPartnerCapabilities, partnerEndpointCapabilityRequirementFor };
+
+//# sourceMappingURL=partner-capabilities.js.map

package/dist/simulator/partner-capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"partner-capabilities.js","names":[],"sources":["../../src/simulator/partner-capabilities.ts"],"sourcesContent":["/**\n * Partner and Computer Backup endpoint capability requirements.\n *\n * Partner tokens carry suite-specific grants that are independent from\n * storage application-key capabilities. The simulator uses this table only\n * for strict Partner/Backup auth checks.\n *\n * Source: https://www.backblaze.com/apidocs (Partner endpoint pages list\n * valid-token authorization failures as `401 unauthorized`).\n *\n * @packageDocumentation\n */\n\nimport { PartnerCapability } from '../types/partner.ts'\n\nexport const PartnerEndpoint = Object.freeze({\n  CreateGroupMember: 'b2_create_group_member',\n  EjectGroupMember: 'b2_eject_group_member',\n  ListGroups: 'b2_list_groups',\n  ListGroupMembers: 'b2_list_group_members',\n  ReserveTrialCreateAccount: 'b2_reserve_trial_create_account',\n  ListComputers: 'bz_list_computers',\n  DeleteComputer: 'bz_delete_computer',\n} as const)\n\nexport type PartnerEndpoint = (typeof PartnerEndpoint)[keyof typeof PartnerEndpoint]\n\nexport const PARTNER_ENDPOINT_NAMES = Object.freeze([\n  PartnerEndpoint.CreateGroupMember,\n  PartnerEndpoint.EjectGroupMember,\n  PartnerEndpoint.ListGroups,\n  PartnerEndpoint.ListGroupMembers,\n  PartnerEndpoint.ReserveTrialCreateAccount,\n  PartnerEndpoint.ListComputers,\n  PartnerEndpoint.DeleteComputer,\n] as const)\n\nexport type PartnerCapabilitySuite = 'groups' | 'backup'\n\nexport interface PartnerEndpointCapabilityRequirement {\n  readonly suite: PartnerCapabilitySuite\n  readonly capabilities: readonly PartnerCapability[]\n}\n\nfunction endpointRequirement(\n  suite: PartnerCapabilitySuite,\n  capabilities: readonly PartnerCapability[],\n): PartnerEndpointCapabilityRequirement {\n  return Object.freeze({\n    suite,\n    capabilities: Object.freeze([...capabilities]),\n  })\n}\n\nexport const PARTNER_ENDPOINT_CAPABILITIES = Object.freeze({\n  [PartnerEndpoint.CreateGroupMember]: endpointRequirement('groups', [PartnerCapability.All]),\n  [PartnerEndpoint.EjectGroupMember]: endpointRequirement('groups', [PartnerCapability.All]),\n  [PartnerEndpoint.ListGroups]: endpointRequirement('groups', [PartnerCapability.All]),\n  [PartnerEndpoint.ListGroupMembers]: endpointRequirement('groups', [PartnerCapability.All]),\n  [PartnerEndpoint.ReserveTrialCreateAccount]: endpointRequirement('groups', [\n    PartnerCapability.All,\n  ]),\n  [PartnerEndpoint.ListComputers]: endpointRequirement('backup', [PartnerCapability.All]),\n  [PartnerEndpoint.DeleteComputer]: endpointRequirement('backup', [PartnerCapability.All]),\n} satisfies Record<PartnerEndpoint, PartnerEndpointCapabilityRequirement>)\n\n/**\n * Resolve the frozen capability requirement for a Partner or Backup endpoint.\n *\n * @param endpoint - Partner or Computer Backup endpoint name.\n *\n * @returns The endpoint's requirement, or null when no policy is available.\n */\nexport function partnerEndpointCapabilityRequirementFor(\n  endpoint: PartnerEndpoint,\n): PartnerEndpointCapabilityRequirement | null {\n  return PARTNER_ENDPOINT_CAPABILITIES[endpoint] ?? null\n}\n\n/**\n * Find missing Partner capabilities against an already-resolved requirement.\n *\n * @param required - Partner capabilities required by the endpoint.\n * @param granted - Partner capabilities granted by the token suite.\n *\n * @returns The subset of required Partner capabilities absent from `granted`.\n */\nexport function missingPartnerCapabilities(\n  required: readonly PartnerCapability[],\n  granted: readonly PartnerCapability[],\n): readonly PartnerCapability[] {\n  const grantedSet = new Set(granted)\n  return required.filter((capability) => !grantedSet.has(capability))\n}\n\n/**\n * Find which Partner capabilities are missing from the caller's grant set.\n *\n * @param endpoint - Partner or Computer Backup endpoint name.\n * @param granted - Suite capabilities carried by the Partner token.\n *\n * @returns The required Partner capabilities not present in `granted`.\n */\nexport function missingPartnerCapabilitiesFor(\n  endpoint: PartnerEndpoint,\n  granted: readonly PartnerCapability[],\n): readonly PartnerCapability[] {\n  return missingPartnerCapabilities(\n    partnerEndpointCapabilityRequirementFor(endpoint)?.capabilities ?? [],\n    granted,\n  )\n}\n"],"mappings":";;;;;;;;;;;;;;AAeA,IAAa,kBAAkB,OAAO,OAAO;CAC3C,mBAAmB;CACnB,kBAAkB;CAClB,YAAY;CACZ,kBAAkB;CAClB,2BAA2B;CAC3B,eAAe;CACf,gBAAgB;AAClB,CAAU;AAIV,IAAa,yBAAyB,OAAO,OAAO;CAClD,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;CAChB,gBAAgB;AAClB,CAAU;AASV,SAAS,oBACP,OACA,cACsC;CACtC,OAAO,OAAO,OAAO;EACnB;EACA,cAAc,OAAO,OAAO,CAAC,GAAG,YAAY,CAAC;CAC/C,CAAC;AACH;AAEA,IAAa,gCAAgC,OAAO,OAAO;EACxD,gBAAgB,oBAAoB,oBAAoB,UAAU,CAAC,kBAAkB,GAAG,CAAC;EACzF,gBAAgB,mBAAmB,oBAAoB,UAAU,CAAC,kBAAkB,GAAG,CAAC;EACxF,gBAAgB,aAAa,oBAAoB,UAAU,CAAC,kBAAkB,GAAG,CAAC;EAClF,gBAAgB,mBAAmB,oBAAoB,UAAU,CAAC,kBAAkB,GAAG,CAAC;EACxF,gBAAgB,4BAA4B,oBAAoB,UAAU,CACzE,kBAAkB,GACpB,CAAC;EACA,gBAAgB,gBAAgB,oBAAoB,UAAU,CAAC,kBAAkB,GAAG,CAAC;EACrF,gBAAgB,iBAAiB,oBAAoB,UAAU,CAAC,kBAAkB,GAAG,CAAC;AACzF,CAAyE;;;;;;;;AASzE,SAAgB,wCACd,UAC6C;CAC7C,OAAO,8BAA8B,aAAa;AACpD;;;;;;;;;AAUA,SAAgB,2BACd,UACA,SAC8B;CAC9B,MAAM,aAAa,IAAI,IAAI,OAAO;CAClC,OAAO,SAAS,QAAQ,eAAe,CAAC,WAAW,IAAI,UAAU,CAAC;AACpE"}