@backstage/plugin-scaffolder-backend 3.4.1-next.0 → 4.0.0-next.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +37 -0
- package/dist/actions/listScaffolderTasksAction.cjs.js +15 -3
- package/dist/actions/listScaffolderTasksAction.cjs.js.map +1 -1
- package/dist/lib/templating/SecureTemplater.cjs.js +17 -4
- package/dist/lib/templating/SecureTemplater.cjs.js.map +1 -1
- package/dist/scaffolder/actions/builtin/fetch/templateActionHandler.cjs.js +49 -43
- package/dist/scaffolder/actions/builtin/fetch/templateActionHandler.cjs.js.map +1 -1
- package/dist/scaffolder/actions/builtin/fetch/templateFileActionHandler.cjs.js +13 -9
- package/dist/scaffolder/actions/builtin/fetch/templateFileActionHandler.cjs.js.map +1 -1
- package/dist/scaffolder/dryrun/createDryRunner.cjs.js +2 -2
- package/dist/scaffolder/dryrun/createDryRunner.cjs.js.map +1 -1
- package/dist/scaffolder/tasks/DatabaseTaskStore.cjs.js +2 -2
- package/dist/scaffolder/tasks/DatabaseTaskStore.cjs.js.map +1 -1
- package/dist/scaffolder/tasks/NunjucksWorkflowRunner.cjs.js +83 -19
- package/dist/scaffolder/tasks/NunjucksWorkflowRunner.cjs.js.map +1 -1
- package/dist/service/router.cjs.js +3 -3
- package/dist/service/router.cjs.js.map +1 -1
- package/dist/service/rules.cjs.js +1 -1
- package/dist/service/rules.cjs.js.map +1 -1
- package/package.json +11 -12
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"rules.cjs.js","sources":["../../src/service/rules.ts"],"sourcesContent":["/*\n * Copyright 2022 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { makeCreatePermissionRule } from '@backstage/plugin-permission-node';\n\nimport {\n RESOURCE_TYPE_SCAFFOLDER_TEMPLATE,\n RESOURCE_TYPE_SCAFFOLDER_ACTION,\n RESOURCE_TYPE_SCAFFOLDER_TASK,\n} from '@backstage/plugin-scaffolder-common/alpha';\n\nimport {\n TemplateEntityStepV1beta3,\n TemplateParametersV1beta3,\n} from '@backstage/plugin-scaffolder-common';\n\nimport { SerializedTask, TaskFilter } from '@backstage/plugin-scaffolder-node';\n\nimport { z } from 'zod/v3';\nimport { JsonObject, JsonPrimitive } from '@backstage/types';\nimport { get } from 'lodash';\n\nexport const createTemplatePermissionRule = makeCreatePermissionRule<\n TemplateEntityStepV1beta3 | TemplateParametersV1beta3,\n {},\n typeof RESOURCE_TYPE_SCAFFOLDER_TEMPLATE\n>();\n\nexport const hasTag = createTemplatePermissionRule({\n name: 'HAS_TAG',\n resourceType: RESOURCE_TYPE_SCAFFOLDER_TEMPLATE,\n description: `Match parameters or steps with the given tag`,\n paramsSchema: z.object({\n tag: z.string().describe('Name of the tag to match on'),\n }),\n apply: (resource, { tag }) => {\n return resource['backstage:permissions']?.tags?.includes(tag) ?? false;\n },\n toQuery: () => ({}),\n});\n\nexport const createActionPermissionRule = makeCreatePermissionRule<\n {\n action: string;\n input: JsonObject | undefined;\n },\n {},\n typeof RESOURCE_TYPE_SCAFFOLDER_ACTION\n>();\n\nexport const hasActionId = createActionPermissionRule({\n name: 'HAS_ACTION_ID',\n resourceType: RESOURCE_TYPE_SCAFFOLDER_ACTION,\n description: `Match actions with the given actionId`,\n paramsSchema: z.object({\n actionId: z.string().describe('Name of the actionId to match on'),\n }),\n apply: (resource, { actionId }) => {\n return resource.action === actionId;\n },\n toQuery: () => ({}),\n});\n\nexport const hasBooleanProperty = buildHasProperty({\n name: 'HAS_BOOLEAN_PROPERTY',\n valueSchema: z.boolean(),\n});\nexport const hasNumberProperty = buildHasProperty({\n name: 'HAS_NUMBER_PROPERTY',\n valueSchema: z.number(),\n});\nexport const hasStringProperty = buildHasProperty({\n name: 'HAS_STRING_PROPERTY',\n valueSchema: z.string(),\n});\n\nfunction buildHasProperty<Schema extends z.ZodType<JsonPrimitive>>({\n name,\n valueSchema,\n validateProperty = true,\n}: {\n name: string;\n valueSchema: Schema;\n validateProperty?: boolean;\n}) {\n return createActionPermissionRule({\n name,\n description: `Allow actions with the specified property`,\n resourceType: RESOURCE_TYPE_SCAFFOLDER_ACTION,\n paramsSchema: z.object({\n key: z\n .string()\n .describe(`Property within the action parameters to match on`),\n value: valueSchema\n .optional()\n .describe(`Value of the given property to match on`),\n }) as unknown as z.ZodType<{ key: string; value?: z.infer<Schema> }>,\n apply: (resource, { key, value }) => {\n const foundValue = get(resource.input, key);\n\n if (validateProperty && !valueSchema.safeParse(foundValue).success) {\n return false;\n }\n if (value !== undefined) {\n if (valueSchema.safeParse(value).success) {\n return value === foundValue;\n }\n return false;\n }\n\n return foundValue !== undefined;\n },\n toQuery: () => ({}),\n });\n}\n\nexport const createTaskPermissionRule = makeCreatePermissionRule<\n SerializedTask,\n TaskFilter,\n typeof RESOURCE_TYPE_SCAFFOLDER_TASK\n>();\n\nexport const isTaskOwner = createTaskPermissionRule({\n name: 'IS_TASK_OWNER',\n description: 'Allows tasks created by certain users to be accessible',\n resourceType: RESOURCE_TYPE_SCAFFOLDER_TASK,\n paramsSchema: z.object({\n createdBy: z\n .array(z.string())\n .describe(\n 'List of
|
|
1
|
+
{"version":3,"file":"rules.cjs.js","sources":["../../src/service/rules.ts"],"sourcesContent":["/*\n * Copyright 2022 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { makeCreatePermissionRule } from '@backstage/plugin-permission-node';\n\nimport {\n RESOURCE_TYPE_SCAFFOLDER_TEMPLATE,\n RESOURCE_TYPE_SCAFFOLDER_ACTION,\n RESOURCE_TYPE_SCAFFOLDER_TASK,\n} from '@backstage/plugin-scaffolder-common/alpha';\n\nimport {\n TemplateEntityStepV1beta3,\n TemplateParametersV1beta3,\n} from '@backstage/plugin-scaffolder-common';\n\nimport { SerializedTask, TaskFilter } from '@backstage/plugin-scaffolder-node';\n\nimport { z } from 'zod/v3';\nimport { JsonObject, JsonPrimitive } from '@backstage/types';\nimport { get } from 'lodash';\n\nexport const createTemplatePermissionRule = makeCreatePermissionRule<\n TemplateEntityStepV1beta3 | TemplateParametersV1beta3,\n {},\n typeof RESOURCE_TYPE_SCAFFOLDER_TEMPLATE\n>();\n\nexport const hasTag = createTemplatePermissionRule({\n name: 'HAS_TAG',\n resourceType: RESOURCE_TYPE_SCAFFOLDER_TEMPLATE,\n description: `Match parameters or steps with the given tag`,\n paramsSchema: z.object({\n tag: z.string().describe('Name of the tag to match on'),\n }),\n apply: (resource, { tag }) => {\n return resource['backstage:permissions']?.tags?.includes(tag) ?? false;\n },\n toQuery: () => ({}),\n});\n\nexport const createActionPermissionRule = makeCreatePermissionRule<\n {\n action: string;\n input: JsonObject | undefined;\n },\n {},\n typeof RESOURCE_TYPE_SCAFFOLDER_ACTION\n>();\n\nexport const hasActionId = createActionPermissionRule({\n name: 'HAS_ACTION_ID',\n resourceType: RESOURCE_TYPE_SCAFFOLDER_ACTION,\n description: `Match actions with the given actionId`,\n paramsSchema: z.object({\n actionId: z.string().describe('Name of the actionId to match on'),\n }),\n apply: (resource, { actionId }) => {\n return resource.action === actionId;\n },\n toQuery: () => ({}),\n});\n\nexport const hasBooleanProperty = buildHasProperty({\n name: 'HAS_BOOLEAN_PROPERTY',\n valueSchema: z.boolean(),\n});\nexport const hasNumberProperty = buildHasProperty({\n name: 'HAS_NUMBER_PROPERTY',\n valueSchema: z.number(),\n});\nexport const hasStringProperty = buildHasProperty({\n name: 'HAS_STRING_PROPERTY',\n valueSchema: z.string(),\n});\n\nfunction buildHasProperty<Schema extends z.ZodType<JsonPrimitive>>({\n name,\n valueSchema,\n validateProperty = true,\n}: {\n name: string;\n valueSchema: Schema;\n validateProperty?: boolean;\n}) {\n return createActionPermissionRule({\n name,\n description: `Allow actions with the specified property`,\n resourceType: RESOURCE_TYPE_SCAFFOLDER_ACTION,\n paramsSchema: z.object({\n key: z\n .string()\n .describe(`Property within the action parameters to match on`),\n value: valueSchema\n .optional()\n .describe(`Value of the given property to match on`),\n }) as unknown as z.ZodType<{ key: string; value?: z.infer<Schema> }>,\n apply: (resource, { key, value }) => {\n const foundValue = get(resource.input, key);\n\n if (validateProperty && !valueSchema.safeParse(foundValue).success) {\n return false;\n }\n if (value !== undefined) {\n if (valueSchema.safeParse(value).success) {\n return value === foundValue;\n }\n return false;\n }\n\n return foundValue !== undefined;\n },\n toQuery: () => ({}),\n });\n}\n\nexport const createTaskPermissionRule = makeCreatePermissionRule<\n SerializedTask,\n TaskFilter,\n typeof RESOURCE_TYPE_SCAFFOLDER_TASK\n>();\n\nexport const isTaskOwner = createTaskPermissionRule({\n name: 'IS_TASK_OWNER',\n description: 'Allows tasks created by certain users to be accessible',\n resourceType: RESOURCE_TYPE_SCAFFOLDER_TASK,\n paramsSchema: z.object({\n createdBy: z\n .array(z.string())\n .describe(\n 'List of creator entity refs; only tasks created by these users will be viewable',\n ),\n }),\n apply: (resource, { createdBy }) => {\n if (!resource.createdBy) {\n return false;\n }\n return createdBy.includes(resource.createdBy);\n },\n toQuery: ({ createdBy }) => {\n return {\n key: 'created_by',\n values: createdBy,\n };\n },\n});\n\nexport const scaffolderTemplateRules = { hasTag };\nexport const scaffolderActionRules = {\n hasActionId,\n hasBooleanProperty,\n hasNumberProperty,\n hasStringProperty,\n};\nexport const scaffolderTaskRules = { isTaskOwner };\n"],"names":["makeCreatePermissionRule","RESOURCE_TYPE_SCAFFOLDER_TEMPLATE","z","RESOURCE_TYPE_SCAFFOLDER_ACTION","get","RESOURCE_TYPE_SCAFFOLDER_TASK"],"mappings":";;;;;;;AAmCO,MAAM,+BAA+BA,6CAAA;AAMrC,MAAM,SAAS,4BAAA,CAA6B;AAAA,EACjD,IAAA,EAAM,SAAA;AAAA,EACN,YAAA,EAAcC,uCAAA;AAAA,EACd,WAAA,EAAa,CAAA,4CAAA,CAAA;AAAA,EACb,YAAA,EAAcC,KAAE,MAAA,CAAO;AAAA,IACrB,GAAA,EAAKA,IAAA,CAAE,MAAA,EAAO,CAAE,SAAS,6BAA6B;AAAA,GACvD,CAAA;AAAA,EACD,KAAA,EAAO,CAAC,QAAA,EAAU,EAAE,KAAI,KAAM;AAC5B,IAAA,OAAO,SAAS,uBAAuB,CAAA,EAAG,IAAA,EAAM,QAAA,CAAS,GAAG,CAAA,IAAK,KAAA;AAAA,EACnE,CAAA;AAAA,EACA,OAAA,EAAS,OAAO,EAAC;AACnB,CAAC;AAEM,MAAM,6BAA6BF,6CAAA;AASnC,MAAM,cAAc,0BAAA,CAA2B;AAAA,EACpD,IAAA,EAAM,eAAA;AAAA,EACN,YAAA,EAAcG,qCAAA;AAAA,EACd,WAAA,EAAa,CAAA,qCAAA,CAAA;AAAA,EACb,YAAA,EAAcD,KAAE,MAAA,CAAO;AAAA,IACrB,QAAA,EAAUA,IAAA,CAAE,MAAA,EAAO,CAAE,SAAS,kCAAkC;AAAA,GACjE,CAAA;AAAA,EACD,KAAA,EAAO,CAAC,QAAA,EAAU,EAAE,UAAS,KAAM;AACjC,IAAA,OAAO,SAAS,MAAA,KAAW,QAAA;AAAA,EAC7B,CAAA;AAAA,EACA,OAAA,EAAS,OAAO,EAAC;AACnB,CAAC;AAEM,MAAM,qBAAqB,gBAAA,CAAiB;AAAA,EACjD,IAAA,EAAM,sBAAA;AAAA,EACN,WAAA,EAAaA,KAAE,OAAA;AACjB,CAAC;AACM,MAAM,oBAAoB,gBAAA,CAAiB;AAAA,EAChD,IAAA,EAAM,qBAAA;AAAA,EACN,WAAA,EAAaA,KAAE,MAAA;AACjB,CAAC;AACM,MAAM,oBAAoB,gBAAA,CAAiB;AAAA,EAChD,IAAA,EAAM,qBAAA;AAAA,EACN,WAAA,EAAaA,KAAE,MAAA;AACjB,CAAC;AAED,SAAS,gBAAA,CAA0D;AAAA,EACjE,IAAA;AAAA,EACA,WAAA;AAAA,EACA,gBAAA,GAAmB;AACrB,CAAA,EAIG;AACD,EAAA,OAAO,0BAAA,CAA2B;AAAA,IAChC,IAAA;AAAA,IACA,WAAA,EAAa,CAAA,yCAAA,CAAA;AAAA,IACb,YAAA,EAAcC,qCAAA;AAAA,IACd,YAAA,EAAcD,KAAE,MAAA,CAAO;AAAA,MACrB,GAAA,EAAKA,IAAA,CACF,MAAA,EAAO,CACP,SAAS,CAAA,iDAAA,CAAmD,CAAA;AAAA,MAC/D,KAAA,EAAO,WAAA,CACJ,QAAA,EAAS,CACT,SAAS,CAAA,uCAAA,CAAyC;AAAA,KACtD,CAAA;AAAA,IACD,OAAO,CAAC,QAAA,EAAU,EAAE,GAAA,EAAK,OAAM,KAAM;AACnC,MAAA,MAAM,UAAA,GAAaE,UAAA,CAAI,QAAA,CAAS,KAAA,EAAO,GAAG,CAAA;AAE1C,MAAA,IAAI,oBAAoB,CAAC,WAAA,CAAY,SAAA,CAAU,UAAU,EAAE,OAAA,EAAS;AAClE,QAAA,OAAO,KAAA;AAAA,MACT;AACA,MAAA,IAAI,UAAU,MAAA,EAAW;AACvB,QAAA,IAAI,WAAA,CAAY,SAAA,CAAU,KAAK,CAAA,CAAE,OAAA,EAAS;AACxC,UAAA,OAAO,KAAA,KAAU,UAAA;AAAA,QACnB;AACA,QAAA,OAAO,KAAA;AAAA,MACT;AAEA,MAAA,OAAO,UAAA,KAAe,MAAA;AAAA,IACxB,CAAA;AAAA,IACA,OAAA,EAAS,OAAO,EAAC;AAAA,GAClB,CAAA;AACH;AAEO,MAAM,2BAA2BJ,6CAAA;AAMjC,MAAM,cAAc,wBAAA,CAAyB;AAAA,EAClD,IAAA,EAAM,eAAA;AAAA,EACN,WAAA,EAAa,wDAAA;AAAA,EACb,YAAA,EAAcK,mCAAA;AAAA,EACd,YAAA,EAAcH,KAAE,MAAA,CAAO;AAAA,IACrB,WAAWA,IAAA,CACR,KAAA,CAAMA,IAAA,CAAE,MAAA,EAAQ,CAAA,CAChB,QAAA;AAAA,MACC;AAAA;AACF,GACH,CAAA;AAAA,EACD,KAAA,EAAO,CAAC,QAAA,EAAU,EAAE,WAAU,KAAM;AAClC,IAAA,IAAI,CAAC,SAAS,SAAA,EAAW;AACvB,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,OAAO,SAAA,CAAU,QAAA,CAAS,QAAA,CAAS,SAAS,CAAA;AAAA,EAC9C,CAAA;AAAA,EACA,OAAA,EAAS,CAAC,EAAE,SAAA,EAAU,KAAM;AAC1B,IAAA,OAAO;AAAA,MACL,GAAA,EAAK,YAAA;AAAA,MACL,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AACF,CAAC;AAEM,MAAM,uBAAA,GAA0B,EAAE,MAAA;AAClC,MAAM,qBAAA,GAAwB;AAAA,EACnC,WAAA;AAAA,EACA,kBAAA;AAAA,EACA,iBAAA;AAAA,EACA;AACF;AACO,MAAM,mBAAA,GAAsB,EAAE,WAAA;;;;;;;;;;;;;;;"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@backstage/plugin-scaffolder-backend",
|
|
3
|
-
"version": "
|
|
3
|
+
"version": "4.0.0-next.2",
|
|
4
4
|
"description": "The Backstage backend plugin that helps you create new things",
|
|
5
5
|
"backstage": {
|
|
6
6
|
"role": "backend-plugin",
|
|
@@ -78,17 +78,17 @@
|
|
|
78
78
|
},
|
|
79
79
|
"dependencies": {
|
|
80
80
|
"@backstage/backend-openapi-utils": "0.6.9-next.0",
|
|
81
|
-
"@backstage/backend-plugin-api": "1.9.1-next.
|
|
82
|
-
"@backstage/catalog-model": "1.8.1-next.
|
|
81
|
+
"@backstage/backend-plugin-api": "1.9.1-next.1",
|
|
82
|
+
"@backstage/catalog-model": "1.8.1-next.1",
|
|
83
83
|
"@backstage/config": "1.3.8-next.0",
|
|
84
84
|
"@backstage/errors": "1.3.1-next.0",
|
|
85
|
-
"@backstage/integration": "2.0.2-next.
|
|
86
|
-
"@backstage/plugin-catalog-node": "2.2.1-next.
|
|
85
|
+
"@backstage/integration": "2.0.2-next.1",
|
|
86
|
+
"@backstage/plugin-catalog-node": "2.2.1-next.1",
|
|
87
87
|
"@backstage/plugin-events-node": "0.4.22-next.0",
|
|
88
|
-
"@backstage/plugin-permission-common": "0.9.9-next.
|
|
88
|
+
"@backstage/plugin-permission-common": "0.9.9-next.1",
|
|
89
89
|
"@backstage/plugin-permission-node": "0.10.13-next.0",
|
|
90
|
-
"@backstage/plugin-scaffolder-common": "2.
|
|
91
|
-
"@backstage/plugin-scaffolder-node": "0.13.3-next.
|
|
90
|
+
"@backstage/plugin-scaffolder-common": "2.2.0-next.1",
|
|
91
|
+
"@backstage/plugin-scaffolder-node": "0.13.3-next.2",
|
|
92
92
|
"@backstage/types": "1.2.2",
|
|
93
93
|
"@types/luxon": "^3.0.0",
|
|
94
94
|
"express": "^4.22.0",
|
|
@@ -105,7 +105,6 @@
|
|
|
105
105
|
"p-queue": "^6.6.2",
|
|
106
106
|
"prom-client": "^15.0.0",
|
|
107
107
|
"triple-beam": "^1.4.1",
|
|
108
|
-
"uuid": "^11.0.0",
|
|
109
108
|
"winston": "^3.2.1",
|
|
110
109
|
"winston-transport": "^4.7.0",
|
|
111
110
|
"yaml": "^2.0.0",
|
|
@@ -114,9 +113,9 @@
|
|
|
114
113
|
"zod-to-json-schema": "^3.25.1"
|
|
115
114
|
},
|
|
116
115
|
"devDependencies": {
|
|
117
|
-
"@backstage/backend-defaults": "0.17.1-next.
|
|
118
|
-
"@backstage/backend-test-utils": "1.11.3-next.
|
|
119
|
-
"@backstage/cli": "0.36.2-next.
|
|
116
|
+
"@backstage/backend-defaults": "0.17.1-next.2",
|
|
117
|
+
"@backstage/backend-test-utils": "1.11.3-next.2",
|
|
118
|
+
"@backstage/cli": "0.36.2-next.1",
|
|
120
119
|
"@backstage/plugin-scaffolder-node-test-utils": "0.3.11-next.0",
|
|
121
120
|
"@backstage/repo-tools": "0.17.2-next.0",
|
|
122
121
|
"@types/express": "^4.17.6",
|