@cldmv/slothlet 3.2.3 → 3.3.2

package/dist/lib/handlers/ownership.mjs

@@ -14,325 +14,4 @@
 	limitations under the License.
 */
 
-
-
-
-import { ComponentBase } from "@cldmv/slothlet/factories/component-base";
-import { resolveWrapper } from "@cldmv/slothlet/handlers/unified-wrapper";
-
-
-
-
-export class OwnershipManager extends ComponentBase {
-	static slothletProperty = "ownership";
-
-	constructor(slothlet) {
-		super(slothlet);
-		this.moduleToPath = new Map(); 
-		this.pathToModule = new Map(); 
-		this._unregisteredModules = new Set(); 
-	}
-
-	
-	register({ moduleID, apiPath, value, source = "core", collisionMode = "error", config = null, filePath = null }) {
-		
-		if (!moduleID || typeof moduleID !== "string") {
-			throw new this.SlothletError("OWNERSHIP_INVALID_MODULE_ID", { moduleID }, null, { validationError: true });
-		}
-		
-		if (apiPath !== "" && (!apiPath || typeof apiPath !== "string")) {
-			throw new this.SlothletError("OWNERSHIP_INVALID_API_PATH", { apiPath }, null, { validationError: true });
-		}
-
-		
-		
-		
-		if (this._unregisteredModules.has(moduleID)) {
-			return null;
-		}
-
-		
-		const currentOwner = this.getCurrentOwner(apiPath);
-		if (currentOwner && currentOwner.moduleID !== moduleID) {
-			
-			if (collisionMode === "merge" || collisionMode === "replace" || collisionMode === "merge-replace") {
-				
-			} else if (collisionMode === "skip") {
-				
-				return null;
-			} else if (collisionMode === "warn") {
-				
-				if (!config?.silent) {
-					new this.SlothletWarning("WARNING_OWNERSHIP_CONFLICT", {
-						apiPath,
-						existingModuleId: currentOwner.moduleID,
-						newModuleId: moduleID
-					});
-				}
-				return null;
-			} else {
-				
-				throw new this.SlothletError("OWNERSHIP_CONFLICT", {
-					apiPath,
-					existingModuleId: currentOwner.moduleID,
-					newModuleId: moduleID,
-					validationError: true
-				});
-			}
-		}
-
-		
-		if (!this.moduleToPath.has(moduleID)) {
-			this.moduleToPath.set(moduleID, new Set());
-		}
-		this.moduleToPath.get(moduleID).add(apiPath);
-
-		
-		if (!this.pathToModule.has(apiPath)) {
-			this.pathToModule.set(apiPath, []);
-		}
-
-		
-		const stack = this.pathToModule.get(apiPath);
-		const existingEntry = stack.find((entry) => entry.moduleID === moduleID);
-		if (existingEntry) {
-			
-			existingEntry.source = source;
-			existingEntry.timestamp = Date.now();
-			existingEntry.value = value;
-			if (filePath !== null) {
-				existingEntry.filePath = filePath;
-			}
-			return existingEntry;
-		}
-
-		const entry = {
-			moduleID,
-			source,
-			timestamp: Date.now(),
-			value,
-			filePath
-		};
-
-		this.pathToModule.get(apiPath).push(entry);
-
-		return entry;
-	}
-
-	
-	unregister(moduleID) {
-		const paths = this.moduleToPath.get(moduleID);
-		if (!paths) {
-			return { removed: [], rolledBack: [] };
-		}
-
-		
-		
-		this._unregisteredModules.add(moduleID);
-
-		const removed = [];
-		const rolledBack = [];
-
-		for (const apiPath of paths) {
-			const result = this.removePath(apiPath, moduleID);
-
-			if (result.action === "delete") {
-				removed.push(apiPath);
-			} else if (result.action === "restore") {
-				rolledBack.push({
-					apiPath,
-					restoredTo: result.restoreModuleId
-				});
-			}
-		}
-
-		this.moduleToPath.delete(moduleID);
-
-		return { removed, rolledBack };
-	}
-
-	
-	removePath(apiPath, moduleID = null) {
-		const stack = this.pathToModule.get(apiPath);
-		if (!stack) {
-			return { action: "none", removedModuleId: null, restoreModuleId: null };
-		}
-
-		
-		const index = moduleID ? stack.findIndex((entry) => entry.moduleID === moduleID) : stack.length - 1;
-		if (index === -1) {
-			return { action: "none", removedModuleId: null, restoreModuleId: null };
-		}
-		const [removed] = stack.splice(index, 1);
-		const removedModuleId = removed.moduleID;
-		if (removedModuleId && this.moduleToPath.has(removedModuleId)) {
-			const pathSet = this.moduleToPath.get(removedModuleId);
-			pathSet.delete(apiPath);
-			if (pathSet.size === 0) {
-				this.moduleToPath.delete(removedModuleId);
-			}
-		}
-
-		
-		if (stack.length === 0) {
-			this.pathToModule.delete(apiPath);
-			return { action: "delete", removedModuleId, restoreModuleId: null };
-		}
-
-		
-		const previous = stack[stack.length - 1];
-		return {
-			action: "restore",
-			removedModuleId,
-			restoreModuleId: previous.moduleID
-		};
-	}
-
-	
-	getCurrentOwner(apiPath) {
-		const stack = this.pathToModule.get(apiPath);
-		if (!stack || stack.length === 0) return null;
-		return stack[stack.length - 1];
-	}
-
-	
-	getCurrentValue(apiPath) {
-		const owner = this.getCurrentOwner(apiPath);
-		if (!owner) return undefined;
-
-		const value = owner.value;
-
-		
-		
-		
-		const rawWrapper = resolveWrapper(value);
-		if (rawWrapper) {
-			return rawWrapper.__impl;
-		}
-
-		return value;
-	}
-
-	
-	getModulePaths(moduleID) {
-		return Array.from(this.moduleToPath.get(moduleID) || []);
-	}
-
-	
-	getPathHistory(apiPath) {
-		return this.pathToModule.get(apiPath) || [];
-	}
-
-	
-	ownsPath(moduleID, apiPath) {
-		const owner = this.getCurrentOwner(apiPath);
-		return owner && owner.moduleID === moduleID;
-	}
-
-	
-	getDiagnostics() {
-		return {
-			totalModules: this.moduleToPath.size,
-			totalPaths: this.pathToModule.size,
-			modules: Array.from(this.moduleToPath.entries()).map(([id, paths]) => ({
-				moduleID: id,
-				pathCount: paths.size
-			})),
-			conflictedPaths: Array.from(this.pathToModule.entries())
-				.filter(([_, stack]) => stack.length > 1)
-				.map(([path, stack]) => ({
-					apiPath: path,
-					ownerStack: stack.map((e) => e.moduleID)
-				}))
-		};
-	}
-
-	
-	getPathOwnership(apiPath) {
-		const stack = this.pathToModule.get(apiPath);
-		if (!stack || stack.length === 0) {
-			return null;
-		}
-		return new Set(stack.map((entry) => entry.moduleID));
-	}
-
-	
-	registerSubtree(api, moduleID, path, visited = new WeakSet()) {
-		if (!api || typeof api !== "object") return;
-
-		
-		if (visited.has(api)) {
-			return;
-		}
-		visited.add(api);
-
-		
-		if (path) {
-			this.register({
-				moduleID,
-				apiPath: path,
-				value: api,
-				source: "core",
-				collisionMode: "merge",
-				filePath: null
-			});
-		}
-
-		
-		for (const [key, value] of Object.entries(api)) {
-			
-			const skipProps = ["__metadata", "__type", "_materialize", "_impl", "____slothletInternal"];
-			if (skipProps.includes(key)) {
-				continue;
-			}
-
-			const childPath = path ? `${path}.${key}` : key;
-			if (typeof value === "function" || (value && typeof value === "object")) {
-				this.register({
-					moduleID,
-					apiPath: childPath,
-					value,
-					source: "core",
-					collisionMode: "merge",
-					filePath: null
-				});
-
-				
-				if (typeof value === "object" && !Array.isArray(value)) {
-					this.registerSubtree(value, moduleID, childPath, visited);
-				}
-			}
-		}
-	}
-
-	
-	clear() {
-		this.moduleToPath.clear();
-		this.pathToModule.clear();
-		this._unregisteredModules.clear();
-	}
-
-	
-	exportState() {
-		return {
-			moduleToPath: Array.from(this.moduleToPath.entries()).map(([id, paths]) => [id, Array.from(paths)]),
-			pathToModule: Array.from(this.pathToModule.entries())
-		};
-	}
-
-	
-	importState(state) {
-		
-		this.clear();
-
-		
-		for (const [id, paths] of state.moduleToPath) {
-			this.moduleToPath.set(id, new Set(paths));
-		}
-
-		
-		for (const [path, stack] of state.pathToModule) {
-			this.pathToModule.set(path, stack);
-		}
-	}
-}
+import{ComponentBase}from"@cldmv/slothlet/factories/component-base";import{resolveWrapper}from"@cldmv/slothlet/handlers/unified-wrapper";class OwnershipManager extends ComponentBase{static slothletProperty="ownership";constructor(slothlet){super(slothlet);this.moduleToPath=new Map;this.pathToModule=new Map;this._unregisteredModules=new Set}register({moduleID,apiPath,value,source="core",collisionMode="error",config=null,filePath=null}){if(!moduleID||typeof moduleID!=="string"){throw new this.SlothletError("OWNERSHIP_INVALID_MODULE_ID",{moduleID},null,{validationError:true})}if(apiPath!==""&&(!apiPath||typeof apiPath!=="string")){throw new this.SlothletError("OWNERSHIP_INVALID_API_PATH",{apiPath},null,{validationError:true})}if(this._unregisteredModules.has(moduleID)){return null}const currentOwner=this.getCurrentOwner(apiPath);if(currentOwner&&currentOwner.moduleID!==moduleID){if(collisionMode==="merge"||collisionMode==="replace"||collisionMode==="merge-replace"){}else if(collisionMode==="skip"){return null}else if(collisionMode==="warn"){if(!config?.silent){new this.SlothletWarning("WARNING_OWNERSHIP_CONFLICT",{apiPath,existingModuleId:currentOwner.moduleID,newModuleId:moduleID})}return null}else{throw new this.SlothletError("OWNERSHIP_CONFLICT",{apiPath,existingModuleId:currentOwner.moduleID,newModuleId:moduleID,validationError:true})}}if(!this.moduleToPath.has(moduleID)){this.moduleToPath.set(moduleID,new Set)}this.moduleToPath.get(moduleID).add(apiPath);if(!this.pathToModule.has(apiPath)){this.pathToModule.set(apiPath,[])}const stack=this.pathToModule.get(apiPath);const existingEntry=stack.find(entry2=>entry2.moduleID===moduleID);if(existingEntry){existingEntry.source=source;existingEntry.timestamp=Date.now();existingEntry.value=value;if(filePath!==null){existingEntry.filePath=filePath}return existingEntry}const entry={moduleID,source,timestamp:Date.now(),value,filePath};this.pathToModule.get(apiPath).push(entry);return entry}unregister(moduleID){const paths=this.moduleToPath.get(moduleID);if(!paths){return{removed:[],rolledBack:[]}}this._unregisteredModules.add(moduleID);const removed=[];const rolledBack=[];for(const apiPath of paths){const result=this.removePath(apiPath,moduleID);if(result.action==="delete"){removed.push(apiPath)}else if(result.action==="restore"){rolledBack.push({apiPath,restoredTo:result.restoreModuleId})}}this.moduleToPath.delete(moduleID);return{removed,rolledBack}}removePath(apiPath,moduleID=null){const stack=this.pathToModule.get(apiPath);if(!stack){return{action:"none",removedModuleId:null,restoreModuleId:null}}const index=moduleID?stack.findIndex(entry=>entry.moduleID===moduleID):stack.length-1;if(index===-1){return{action:"none",removedModuleId:null,restoreModuleId:null}}const[removed]=stack.splice(index,1);const removedModuleId=removed.moduleID;if(removedModuleId&&this.moduleToPath.has(removedModuleId)){const pathSet=this.moduleToPath.get(removedModuleId);pathSet.delete(apiPath);if(pathSet.size===0){this.moduleToPath.delete(removedModuleId)}}if(stack.length===0){this.pathToModule.delete(apiPath);return{action:"delete",removedModuleId,restoreModuleId:null}}const previous=stack[stack.length-1];return{action:"restore",removedModuleId,restoreModuleId:previous.moduleID}}getCurrentOwner(apiPath){const stack=this.pathToModule.get(apiPath);if(!stack||stack.length===0)return null;return stack[stack.length-1]}getCurrentValue(apiPath){const owner=this.getCurrentOwner(apiPath);if(!owner)return void 0;const value=owner.value;const rawWrapper=resolveWrapper(value);if(rawWrapper){return rawWrapper.__impl}return value}getModulePaths(moduleID){return Array.from(this.moduleToPath.get(moduleID)||[])}getPathHistory(apiPath){return this.pathToModule.get(apiPath)||[]}ownsPath(moduleID,apiPath){const owner=this.getCurrentOwner(apiPath);return owner&&owner.moduleID===moduleID}getDiagnostics(){return{totalModules:this.moduleToPath.size,totalPaths:this.pathToModule.size,modules:Array.from(this.moduleToPath.entries()).map(([id,paths])=>({moduleID:id,pathCount:paths.size})),conflictedPaths:Array.from(this.pathToModule.entries()).filter(([_,stack])=>stack.length>1).map(([path,stack])=>({apiPath:path,ownerStack:stack.map(e=>e.moduleID)}))}}getPathOwnership(apiPath){const stack=this.pathToModule.get(apiPath);if(!stack||stack.length===0){return null}return new Set(stack.map(entry=>entry.moduleID))}registerSubtree(api,moduleID,path,visited=new WeakSet){if(!api||typeof api!=="object")return;if(visited.has(api)){return}visited.add(api);if(path){this.register({moduleID,apiPath:path,value:api,source:"core",collisionMode:"merge",filePath:null})}for(const[key,value]of Object.entries(api)){const skipProps=["__metadata","__type","_materialize","_impl","____slothletInternal"];if(skipProps.includes(key)){continue}const childPath=path?`${path}.${key}`:key;if(typeof value==="function"||value&&typeof value==="object"){this.register({moduleID,apiPath:childPath,value,source:"core",collisionMode:"merge",filePath:null});if(typeof value==="object"&&!Array.isArray(value)){this.registerSubtree(value,moduleID,childPath,visited)}}}}clear(){this.moduleToPath.clear();this.pathToModule.clear();this._unregisteredModules.clear()}exportState(){return{moduleToPath:Array.from(this.moduleToPath.entries()).map(([id,paths])=>[id,Array.from(paths)]),pathToModule:Array.from(this.pathToModule.entries())}}importState(state){this.clear();for(const[id,paths]of state.moduleToPath){this.moduleToPath.set(id,new Set(paths))}for(const[path,stack]of state.pathToModule){this.pathToModule.set(path,stack)}}}export{OwnershipManager};

package/dist/lib/handlers/permission-manager.mjs

@@ -0,0 +1,17 @@
+/*
+	Copyright 2026 CLDMV/Shinrai
+
+	Licensed under the Apache License, Version 2.0 (the "License");
+	you may not use this file except in compliance with the License.
+	You may obtain a copy of the License at
+
+		http://www.apache.org/licenses/LICENSE-2.0
+
+	Unless required by applicable law or agreed to in writing, software
+	distributed under the License is distributed on an "AS IS" BASIS,
+	WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+	See the License for the specific language governing permissions and
+	limitations under the License.
+*/
+
+import{ComponentBase}from"@cldmv/slothlet/factories/component-base";import{compilePattern}from"@cldmv/slothlet/helpers/pattern-matcher";import{translate}from"@cldmv/slothlet/i18n";let ruleIdCounter=0;class PermissionManager extends ComponentBase{static slothletProperty="permissionManager";#rules=new Map;#defaultPolicy="allow";#enabled=false;#audit="default";#resolvedCache=new Map;#compiledCache=new Map;constructor(slothlet){super(slothlet);const permConfig=slothlet.config?.permissions;if(permConfig){this.#defaultPolicy=permConfig.defaultPolicy||"allow";this.#enabled=permConfig.enabled!==false;this.#audit=permConfig.audit||"default";if(Array.isArray(permConfig.rules)){for(const rule of permConfig.rules){this.addRule(rule,null)}}}this.addRule({caller:"**",target:"slothlet.permissions.control.**",effect:"deny"},"__builtin__")}addRule(rule,ownerModuleID=null,ruleId=null){this.#validateRule(rule);const id=ruleId||`perm-${++ruleIdCounter}`;const entry={id,caller:rule.caller,target:rule.target,effect:rule.effect,ownerModuleID,registeredAt:Date.now()};this.#rules.set(id,entry);this.#clearCache();this.debug("permissions",{key:"DEBUG_PERMISSION_RULE_ADDED",ruleId:id,caller:rule.caller,target:rule.target,effect:rule.effect,ownerModuleID});return id}removeRule(ruleId,callerModuleID=null){const entry=this.#rules.get(ruleId);if(!entry)return false;if(callerModuleID&&entry.ownerModuleID&&callerModuleID===entry.ownerModuleID){throw new this.SlothletError("PERMISSION_SELF_MODIFY",{ruleId,moduleID:callerModuleID})}this.#rules.delete(ruleId);this.#clearCache();this.debug("permissions",{key:"DEBUG_PERMISSION_RULE_REMOVED",ruleId,caller:entry.caller,target:entry.target,effect:entry.effect});return true}checkAccess(callerPath,targetPath,callerFilePath=null,targetFilePath=null){const isControlTarget=targetPath?.startsWith("slothlet.permissions.control.");if(!this.#enabled&&!isControlTarget)return true;if(callerFilePath&&targetFilePath&&callerFilePath===targetFilePath){this.#emitAuditEvent("permission:self-bypass",{caller:callerPath,target:targetPath,filePath:callerFilePath});return true}const cacheKey=`${callerPath}::${targetPath}`;if(this.#resolvedCache.has(cacheKey)){const cached=this.#resolvedCache.get(cacheKey);this.#emitAuditEvent(cached.event,cached.payload);return cached.allowed}const entry=this.#evaluate(callerPath,targetPath);this.#resolvedCache.set(cacheKey,entry);this.#emitAuditEvent(entry.event,entry.payload);return entry.allowed}getRulesForPath(targetPath){const matching=[];for(const entry of this.#rules.values()){const targetMatcher=this.#getCompiledPattern(entry.target);if(targetMatcher(targetPath)){matching.push(this.#serializeRule(entry))}}return matching}getRulesByModule(moduleID){const matching=[];for(const entry of this.#rules.values()){if(entry.ownerModuleID===moduleID){matching.push(this.#serializeRule(entry))}}return matching}getRulesForCaller(callerPath){const matching=[];for(const entry of this.#rules.values()){const callerMatcher=this.#getCompiledPattern(entry.caller);if(callerMatcher(callerPath)){matching.push(this.#serializeRule(entry))}}return matching}enable(){this.#enabled=true;this.#clearCache()}disable(){this.#enabled=false;this.#clearCache()}isEnabled(){return this.#enabled}exportRules(){const rules=[];for(const entry of this.#rules.values()){rules.push({rule:{caller:entry.caller,target:entry.target,effect:entry.effect},ownerModuleID:entry.ownerModuleID})}return rules}importRules(registrations){if(!Array.isArray(registrations))return;for(const reg of registrations){this.addRule(reg.rule,reg.ownerModuleID)}}async shutdown(){this.#rules.clear();this.#resolvedCache.clear();this.#compiledCache.clear();this.#enabled=false;this.#defaultPolicy="allow";this.#audit="default"}#validateRule(rule){if(!rule||typeof rule!=="object"){throw new this.SlothletError("INVALID_PERMISSION_RULE",{reason:translate("PERM_RULE_NOT_OBJECT"),received:typeof rule})}if(typeof rule.caller!=="string"||!rule.caller){throw new this.SlothletError("INVALID_PERMISSION_RULE",{reason:translate("PERM_RULE_CALLER_REQUIRED"),received:typeof rule.caller})}if(typeof rule.target!=="string"||!rule.target){throw new this.SlothletError("INVALID_PERMISSION_RULE",{reason:translate("PERM_RULE_TARGET_REQUIRED"),received:typeof rule.target})}if(rule.effect!=="allow"&&rule.effect!=="deny"){throw new this.SlothletError("INVALID_PERMISSION_RULE",{reason:translate("PERM_RULE_EFFECT_INVALID"),received:rule.effect})}}#evaluate(callerPath,targetPath){const matches=[];for(const entry of this.#rules.values()){const callerMatcher=this.#getCompiledPattern(entry.caller);const targetMatcher=this.#getCompiledPattern(entry.target);if(callerMatcher(callerPath)&&targetMatcher(targetPath)){matches.push(entry)}}if(matches.length===0){const allowed2=this.#defaultPolicy==="allow";return{allowed:allowed2,event:"permission:default",payload:{caller:callerPath,target:targetPath,policy:this.#defaultPolicy}}}matches.sort((a,b)=>{const specA=this.#computeSpecificity(a,callerPath,targetPath);const specB=this.#computeSpecificity(b,callerPath,targetPath);if(specA!==specB)return specB-specA;return a.registeredAt-b.registeredAt});const highestSpec=this.#computeSpecificity(matches[0],callerPath,targetPath);const topTier=matches.filter(m=>this.#computeSpecificity(m,callerPath,targetPath)===highestSpec);const winner=topTier[topTier.length-1];const allowed=winner.effect==="allow";return{allowed,event:allowed?"permission:allowed":"permission:denied",payload:{caller:callerPath,target:targetPath,rule:this.#serializeRule(winner)}}}#computeSpecificity(entry,callerPath,targetPath){return this.#patternSpecificity(entry.caller,callerPath)+this.#patternSpecificity(entry.target,targetPath)}#patternSpecificity(pattern,_path){if(!pattern.includes("*")&&!pattern.includes("?")&&!pattern.includes("{")){return 3}if(pattern.includes("**")){return 1}return 2}#getCompiledPattern(pattern){let matcher=this.#compiledCache.get(pattern);if(!matcher){matcher=compilePattern(pattern);this.#compiledCache.set(pattern,matcher)}return matcher}#clearCache(){this.#resolvedCache.clear()}#emitAuditEvent(event,payload){this.debug("permissions",{key:event==="permission:denied"?"DEBUG_PERMISSION_DENIED":event==="permission:allowed"?"DEBUG_PERMISSION_ALLOWED":event==="permission:self-bypass"?"DEBUG_PERMISSION_SELF_BYPASS":"DEBUG_PERMISSION_DEFAULT",...payload});const alwaysEmit=event==="permission:denied"||event==="permission:self-bypass";if(!alwaysEmit&&this.#audit!=="verbose")return;const lifecycle=this.slothlet.handlers?.lifecycle;if(lifecycle){lifecycle.emit(event,{...payload,timestamp:Date.now()})}}#serializeRule(entry){return{id:entry.id,caller:entry.caller,target:entry.target,effect:entry.effect,ownerModuleID:entry.ownerModuleID,registeredAt:entry.registeredAt}}debug(category,data){this.slothlet.debug(category,data)}}export{PermissionManager};