@contractspec/bundle.library 3.4.2 → 3.5.0

package/dist/components/docs/specs/SpecsPolicyPage.js

@@ -2,121 +2,121 @@
 // src/components/docs/specs/SpecsPolicyPage.tsx
 import Link from "@contractspec/lib.ui-link";
 import { ChevronRight } from "lucide-react";
-import { jsxDEV } from "react/jsx-dev-runtime";
+import { jsx, jsxs } from "react/jsx-runtime";
 function SpecsPolicyPage() {
-  return /* @__PURE__ */ jsxDEV("div", {
+  return /* @__PURE__ */ jsxs("div", {
     className: "space-y-8",
     children: [
-      /* @__PURE__ */ jsxDEV("div", {
+      /* @__PURE__ */ jsxs("div", {
         className: "space-y-4",
         children: [
-          /* @__PURE__ */ jsxDEV("h1", {
+          /* @__PURE__ */ jsx("h1", {
             className: "text-4xl font-bold",
             children: "Policy"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsxDEV("p", {
+          }),
+          /* @__PURE__ */ jsxs("p", {
             className: "text-muted-foreground",
             children: [
               "A ",
-              /* @__PURE__ */ jsxDEV("strong", {
+              /* @__PURE__ */ jsx("strong", {
                 children: "PolicySpec"
-              }, undefined, false, undefined, this),
+              }),
               " defines who can do what, when, and under what conditions. ContractSpec uses attribute-based access control (ABAC) to enforce policies across your entire application\u2014from API endpoints to UI components."
             ]
-          }, undefined, true, undefined, this)
+          })
         ]
-      }, undefined, true, undefined, this),
-      /* @__PURE__ */ jsxDEV("div", {
+      }),
+      /* @__PURE__ */ jsxs("div", {
         className: "space-y-4",
         children: [
-          /* @__PURE__ */ jsxDEV("h2", {
+          /* @__PURE__ */ jsx("h2", {
             className: "text-2xl font-bold",
             children: "Why policies matter"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsxDEV("p", {
+          }),
+          /* @__PURE__ */ jsx("p", {
             className: "text-muted-foreground",
             children: "Traditional access control relies on roles (RBAC), which can become unwieldy as applications grow. ABAC is more flexible\u2014it evaluates policies based on attributes of the user, resource, action, and context."
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsxDEV("p", {
+          }),
+          /* @__PURE__ */ jsxs("p", {
             className: "text-muted-foreground",
             children: [
               "ContractSpec's policy engine ensures that access control is consistent across all surfaces. You don't have to remember to add authorization checks in every API endpoint or UI component\u2014the",
               " ",
-              /* @__PURE__ */ jsxDEV(Link, {
+              /* @__PURE__ */ jsx(Link, {
                 href: "/docs/safety/pdp",
                 className: "text-violet-400 hover:text-violet-300",
                 children: "Policy Decision Point"
-              }, undefined, false, undefined, this),
+              }),
               " ",
               "enforces policies automatically."
             ]
-          }, undefined, true, undefined, this)
+          })
         ]
-      }, undefined, true, undefined, this),
-      /* @__PURE__ */ jsxDEV("div", {
+      }),
+      /* @__PURE__ */ jsxs("div", {
         className: "space-y-4",
         children: [
-          /* @__PURE__ */ jsxDEV("h2", {
+          /* @__PURE__ */ jsx("h2", {
             className: "text-2xl font-bold",
             children: "Policy structure"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsxDEV("p", {
+          }),
+          /* @__PURE__ */ jsx("p", {
             className: "text-muted-foreground",
             children: "A PolicySpec contains one or more rules. Each rule has:"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsxDEV("ul", {
+          }),
+          /* @__PURE__ */ jsxs("ul", {
             className: "text-muted-foreground list-inside list-disc space-y-2",
             children: [
-              /* @__PURE__ */ jsxDEV("li", {
+              /* @__PURE__ */ jsxs("li", {
                 children: [
-                  /* @__PURE__ */ jsxDEV("strong", {
+                  /* @__PURE__ */ jsx("strong", {
                     children: "Effect"
-                  }, undefined, false, undefined, this),
+                  }),
                   " \u2013 PERMIT, DENY, or REDACT"
                 ]
-              }, undefined, true, undefined, this),
-              /* @__PURE__ */ jsxDEV("li", {
+              }),
+              /* @__PURE__ */ jsxs("li", {
                 children: [
-                  /* @__PURE__ */ jsxDEV("strong", {
+                  /* @__PURE__ */ jsx("strong", {
                     children: "Condition"
-                  }, undefined, false, undefined, this),
+                  }),
                   " \u2013 A boolean expression that determines when the rule applies"
                 ]
-              }, undefined, true, undefined, this),
-              /* @__PURE__ */ jsxDEV("li", {
+              }),
+              /* @__PURE__ */ jsxs("li", {
                 children: [
-                  /* @__PURE__ */ jsxDEV("strong", {
+                  /* @__PURE__ */ jsx("strong", {
                     children: "Scope"
-                  }, undefined, false, undefined, this),
+                  }),
                   " \u2013 Which resources, actions, or fields the rule applies to"
                 ]
-              }, undefined, true, undefined, this),
-              /* @__PURE__ */ jsxDEV("li", {
+              }),
+              /* @__PURE__ */ jsxs("li", {
                 children: [
-                  /* @__PURE__ */ jsxDEV("strong", {
+                  /* @__PURE__ */ jsx("strong", {
                     children: "Priority"
-                  }, undefined, false, undefined, this),
+                  }),
                   " \u2013 Rules are evaluated in priority order; the first matching rule wins"
                 ]
-              }, undefined, true, undefined, this)
+              })
             ]
-          }, undefined, true, undefined, this)
+          })
         ]
-      }, undefined, true, undefined, this),
-      /* @__PURE__ */ jsxDEV("div", {
+      }),
+      /* @__PURE__ */ jsxs("div", {
         className: "space-y-4",
         children: [
-          /* @__PURE__ */ jsxDEV("h2", {
+          /* @__PURE__ */ jsx("h2", {
             className: "text-2xl font-bold",
             children: "Example PolicySpec"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsxDEV("p", {
+          }),
+          /* @__PURE__ */ jsx("p", {
             className: "text-muted-foreground",
             children: "Here's a policy that controls access to customer data in TypeScript:"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsxDEV("div", {
+          }),
+          /* @__PURE__ */ jsx("div", {
             className: "bg-background/50 border-border text-muted-foreground overflow-x-auto rounded-lg border p-4 font-mono text-sm",
-            children: /* @__PURE__ */ jsxDEV("pre", {
+            children: /* @__PURE__ */ jsx("pre", {
               children: `import { definePolicy } from '@contractspec/lib.contracts-spec';
 
 export const CustomerDataAccess = definePolicy({
@@ -160,179 +160,179 @@ export const CustomerDataAccess = definePolicy({
     },
   ],
 });`
-            }, undefined, false, undefined, this)
-          }, undefined, false, undefined, this)
+            })
+          })
         ]
-      }, undefined, true, undefined, this),
-      /* @__PURE__ */ jsxDEV("div", {
+      }),
+      /* @__PURE__ */ jsxs("div", {
         className: "space-y-4",
         children: [
-          /* @__PURE__ */ jsxDEV("h2", {
+          /* @__PURE__ */ jsx("h2", {
             className: "text-2xl font-bold",
             children: "Attributes"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsxDEV("p", {
+          }),
+          /* @__PURE__ */ jsx("p", {
             className: "text-muted-foreground",
             children: "Policy conditions can reference attributes from four categories:"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsxDEV("div", {
+          }),
+          /* @__PURE__ */ jsxs("div", {
             className: "space-y-3",
             children: [
-              /* @__PURE__ */ jsxDEV("div", {
+              /* @__PURE__ */ jsxs("div", {
                 children: [
-                  /* @__PURE__ */ jsxDEV("h3", {
+                  /* @__PURE__ */ jsx("h3", {
                     className: "text-lg font-semibold",
                     children: "User attributes"
-                  }, undefined, false, undefined, this),
-                  /* @__PURE__ */ jsxDEV("p", {
+                  }),
+                  /* @__PURE__ */ jsxs("p", {
                     className: "text-muted-foreground",
                     children: [
-                      /* @__PURE__ */ jsxDEV("code", {
+                      /* @__PURE__ */ jsx("code", {
                         className: "bg-background/50 rounded px-2 py-1",
                         children: "user.id"
-                      }, undefined, false, undefined, this),
+                      }),
                       ",",
                       " ",
-                      /* @__PURE__ */ jsxDEV("code", {
+                      /* @__PURE__ */ jsx("code", {
                         className: "bg-background/50 rounded px-2 py-1",
                         children: "user.role"
-                      }, undefined, false, undefined, this),
+                      }),
                       ",",
                       " ",
-                      /* @__PURE__ */ jsxDEV("code", {
+                      /* @__PURE__ */ jsx("code", {
                         className: "bg-background/50 rounded px-2 py-1",
                         children: "user.groups"
-                      }, undefined, false, undefined, this),
+                      }),
                       ",",
                       " ",
-                      /* @__PURE__ */ jsxDEV("code", {
+                      /* @__PURE__ */ jsx("code", {
                         className: "bg-background/50 rounded px-2 py-1",
                         children: "user.department"
-                      }, undefined, false, undefined, this),
+                      }),
                       ", custom attributes"
                     ]
-                  }, undefined, true, undefined, this)
+                  })
                 ]
-              }, undefined, true, undefined, this),
-              /* @__PURE__ */ jsxDEV("div", {
+              }),
+              /* @__PURE__ */ jsxs("div", {
                 children: [
-                  /* @__PURE__ */ jsxDEV("h3", {
+                  /* @__PURE__ */ jsx("h3", {
                     className: "text-lg font-semibold",
                     children: "Resource attributes"
-                  }, undefined, false, undefined, this),
-                  /* @__PURE__ */ jsxDEV("p", {
+                  }),
+                  /* @__PURE__ */ jsxs("p", {
                     className: "text-muted-foreground",
                     children: [
-                      /* @__PURE__ */ jsxDEV("code", {
+                      /* @__PURE__ */ jsx("code", {
                         className: "bg-background/50 rounded px-2 py-1",
                         children: "resource.type"
-                      }, undefined, false, undefined, this),
+                      }),
                       ",",
                       " ",
-                      /* @__PURE__ */ jsxDEV("code", {
+                      /* @__PURE__ */ jsx("code", {
                         className: "bg-background/50 rounded px-2 py-1",
                         children: "resource.owner"
-                      }, undefined, false, undefined, this),
+                      }),
                       ",",
                       " ",
-                      /* @__PURE__ */ jsxDEV("code", {
+                      /* @__PURE__ */ jsx("code", {
                         className: "bg-background/50 rounded px-2 py-1",
                         children: "resource.sensitivity"
-                      }, undefined, false, undefined, this),
+                      }),
                       ", custom attributes"
                     ]
-                  }, undefined, true, undefined, this)
+                  })
                 ]
-              }, undefined, true, undefined, this),
-              /* @__PURE__ */ jsxDEV("div", {
+              }),
+              /* @__PURE__ */ jsxs("div", {
                 children: [
-                  /* @__PURE__ */ jsxDEV("h3", {
+                  /* @__PURE__ */ jsx("h3", {
                     className: "text-lg font-semibold",
                     children: "Action attributes"
-                  }, undefined, false, undefined, this),
-                  /* @__PURE__ */ jsxDEV("p", {
+                  }),
+                  /* @__PURE__ */ jsxs("p", {
                     className: "text-muted-foreground",
                     children: [
-                      /* @__PURE__ */ jsxDEV("code", {
+                      /* @__PURE__ */ jsx("code", {
                         className: "bg-background/50 rounded px-2 py-1",
                         children: "action"
-                      }, undefined, false, undefined, this),
+                      }),
                       " ",
                       "(read, write, delete, execute, export, etc.)"
                     ]
-                  }, undefined, true, undefined, this)
+                  })
                 ]
-              }, undefined, true, undefined, this),
-              /* @__PURE__ */ jsxDEV("div", {
+              }),
+              /* @__PURE__ */ jsxs("div", {
                 children: [
-                  /* @__PURE__ */ jsxDEV("h3", {
+                  /* @__PURE__ */ jsx("h3", {
                     className: "text-lg font-semibold",
                     children: "Context attributes"
-                  }, undefined, false, undefined, this),
-                  /* @__PURE__ */ jsxDEV("p", {
+                  }),
+                  /* @__PURE__ */ jsxs("p", {
                     className: "text-muted-foreground",
                     children: [
-                      /* @__PURE__ */ jsxDEV("code", {
+                      /* @__PURE__ */ jsx("code", {
                         className: "bg-background/50 rounded px-2 py-1",
                         children: "time.hour"
-                      }, undefined, false, undefined, this),
+                      }),
                       ",",
                       " ",
-                      /* @__PURE__ */ jsxDEV("code", {
+                      /* @__PURE__ */ jsx("code", {
                         className: "bg-background/50 rounded px-2 py-1",
                         children: "time.dayOfWeek"
-                      }, undefined, false, undefined, this),
+                      }),
                       ",",
                       " ",
-                      /* @__PURE__ */ jsxDEV("code", {
+                      /* @__PURE__ */ jsx("code", {
                         className: "bg-background/50 rounded px-2 py-1",
                         children: "request.ipAddress"
-                      }, undefined, false, undefined, this),
+                      }),
                       ",",
                       " ",
-                      /* @__PURE__ */ jsxDEV("code", {
+                      /* @__PURE__ */ jsx("code", {
                         className: "bg-background/50 rounded px-2 py-1",
                         children: "request.userAgent"
-                      }, undefined, false, undefined, this)
+                      })
                     ]
-                  }, undefined, true, undefined, this)
+                  })
                 ]
-              }, undefined, true, undefined, this)
+              })
             ]
-          }, undefined, true, undefined, this)
+          })
         ]
-      }, undefined, true, undefined, this),
-      /* @__PURE__ */ jsxDEV("div", {
+      }),
+      /* @__PURE__ */ jsxs("div", {
         className: "space-y-4",
         children: [
-          /* @__PURE__ */ jsxDEV("h2", {
+          /* @__PURE__ */ jsx("h2", {
             className: "text-2xl font-bold",
             children: "Data classification"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsxDEV("p", {
+          }),
+          /* @__PURE__ */ jsxs("p", {
             className: "text-muted-foreground",
             children: [
               "You can tag fields with sensitivity levels in your",
               " ",
-              /* @__PURE__ */ jsxDEV(Link, {
+              /* @__PURE__ */ jsx(Link, {
                 href: "/docs/specs/capabilities",
                 className: "text-violet-400 hover:text-violet-300",
                 children: "CapabilitySpecs"
-              }, undefined, false, undefined, this),
+              }),
               " ",
               "and",
               " ",
-              /* @__PURE__ */ jsxDEV(Link, {
+              /* @__PURE__ */ jsx(Link, {
                 href: "/docs/specs/dataviews",
                 className: "text-violet-400 hover:text-violet-300",
                 children: "DataViewSpecs"
-              }, undefined, false, undefined, this),
+              }),
               ":"
             ]
-          }, undefined, true, undefined, this),
-          /* @__PURE__ */ jsxDEV("div", {
+          }),
+          /* @__PURE__ */ jsx("div", {
             className: "bg-background/50 border-border text-muted-foreground overflow-x-auto rounded-lg border p-4 font-mono text-sm",
-            children: /* @__PURE__ */ jsxDEV("pre", {
+            children: /* @__PURE__ */ jsx("pre", {
               children: `fields:
   - name: email
     type: string
@@ -347,127 +347,127 @@ export const CustomerDataAccess = definePolicy({
   - name: salary
     type: number
     sensitivity: confidential`
-            }, undefined, false, undefined, this)
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsxDEV("p", {
+            })
+          }),
+          /* @__PURE__ */ jsx("p", {
             className: "text-muted-foreground",
             children: 'Policies can then reference these tags to enforce blanket rules like "support staff cannot see PII" or "PHI can only be accessed from approved IP addresses."'
-          }, undefined, false, undefined, this)
+          })
         ]
-      }, undefined, true, undefined, this),
-      /* @__PURE__ */ jsxDEV("div", {
+      }),
+      /* @__PURE__ */ jsxs("div", {
         className: "space-y-4",
         children: [
-          /* @__PURE__ */ jsxDEV("h2", {
+          /* @__PURE__ */ jsx("h2", {
             className: "text-2xl font-bold",
             children: "Testing policies"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsxDEV("p", {
+          }),
+          /* @__PURE__ */ jsx("p", {
             className: "text-muted-foreground",
             children: "ContractSpec provides tools for testing policies before deployment:"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsxDEV("ul", {
+          }),
+          /* @__PURE__ */ jsxs("ul", {
             className: "text-muted-foreground list-inside list-disc space-y-2",
             children: [
-              /* @__PURE__ */ jsxDEV("li", {
+              /* @__PURE__ */ jsxs("li", {
                 children: [
-                  /* @__PURE__ */ jsxDEV("strong", {
+                  /* @__PURE__ */ jsx("strong", {
                     children: "Policy simulator"
-                  }, undefined, false, undefined, this),
+                  }),
                   " \u2013 Test how policies evaluate for different users and scenarios"
                 ]
-              }, undefined, true, undefined, this),
-              /* @__PURE__ */ jsxDEV("li", {
+              }),
+              /* @__PURE__ */ jsxs("li", {
                 children: [
-                  /* @__PURE__ */ jsxDEV("strong", {
+                  /* @__PURE__ */ jsx("strong", {
                     children: "Coverage analysis"
-                  }, undefined, false, undefined, this),
+                  }),
                   " \u2013 Identify resources or actions that aren't covered by any policy"
                 ]
-              }, undefined, true, undefined, this),
-              /* @__PURE__ */ jsxDEV("li", {
+              }),
+              /* @__PURE__ */ jsxs("li", {
                 children: [
-                  /* @__PURE__ */ jsxDEV("strong", {
+                  /* @__PURE__ */ jsx("strong", {
                     children: "Conflict detection"
-                  }, undefined, false, undefined, this),
+                  }),
                   " \u2013 Find rules that might conflict or produce unexpected results"
                 ]
-              }, undefined, true, undefined, this),
-              /* @__PURE__ */ jsxDEV("li", {
+              }),
+              /* @__PURE__ */ jsxs("li", {
                 children: [
-                  /* @__PURE__ */ jsxDEV("strong", {
+                  /* @__PURE__ */ jsx("strong", {
                     children: "Audit mode"
-                  }, undefined, false, undefined, this),
+                  }),
                   " \u2013 Run policies in audit-only mode to see what would be blocked without actually blocking it"
                 ]
-              }, undefined, true, undefined, this)
+              })
             ]
-          }, undefined, true, undefined, this)
+          })
         ]
-      }, undefined, true, undefined, this),
-      /* @__PURE__ */ jsxDEV("div", {
+      }),
+      /* @__PURE__ */ jsxs("div", {
         className: "space-y-4",
         children: [
-          /* @__PURE__ */ jsxDEV("h2", {
+          /* @__PURE__ */ jsx("h2", {
             className: "text-2xl font-bold",
             children: "Best practices"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsxDEV("ul", {
+          }),
+          /* @__PURE__ */ jsxs("ul", {
             className: "text-muted-foreground list-inside list-disc space-y-2",
             children: [
-              /* @__PURE__ */ jsxDEV("li", {
+              /* @__PURE__ */ jsx("li", {
                 children: "Start with a deny-by-default policy\u2014explicitly permit what should be allowed."
-              }, undefined, false, undefined, this),
-              /* @__PURE__ */ jsxDEV("li", {
+              }),
+              /* @__PURE__ */ jsx("li", {
                 children: "Use clear, descriptive rule IDs that explain what the rule does."
-              }, undefined, false, undefined, this),
-              /* @__PURE__ */ jsxDEV("li", {
+              }),
+              /* @__PURE__ */ jsx("li", {
                 children: "Set priorities carefully to ensure rules are evaluated in the right order."
-              }, undefined, false, undefined, this),
-              /* @__PURE__ */ jsxDEV("li", {
+              }),
+              /* @__PURE__ */ jsx("li", {
                 children: "Test policies thoroughly with realistic user scenarios before deploying."
-              }, undefined, false, undefined, this),
-              /* @__PURE__ */ jsxDEV("li", {
+              }),
+              /* @__PURE__ */ jsxs("li", {
                 children: [
                   "Monitor policy decisions in production using",
                   " ",
-                  /* @__PURE__ */ jsxDEV(Link, {
+                  /* @__PURE__ */ jsx(Link, {
                     href: "/docs/safety/auditing",
                     className: "text-violet-400 hover:text-violet-300",
                     children: "audit logs"
-                  }, undefined, false, undefined, this),
+                  }),
                   "."
                 ]
-              }, undefined, true, undefined, this),
-              /* @__PURE__ */ jsxDEV("li", {
+              }),
+              /* @__PURE__ */ jsx("li", {
                 children: "Review and update policies regularly as your application and requirements evolve."
-              }, undefined, false, undefined, this)
+              })
             ]
-          }, undefined, true, undefined, this)
+          })
         ]
-      }, undefined, true, undefined, this),
-      /* @__PURE__ */ jsxDEV("div", {
+      }),
+      /* @__PURE__ */ jsxs("div", {
         className: "flex items-center gap-4 pt-4",
         children: [
-          /* @__PURE__ */ jsxDEV(Link, {
+          /* @__PURE__ */ jsx(Link, {
             href: "/docs/specs/workflows",
             className: "btn-ghost",
             children: "Previous: Workflows"
-          }, undefined, false, undefined, this),
-          /* @__PURE__ */ jsxDEV(Link, {
+          }),
+          /* @__PURE__ */ jsxs(Link, {
             href: "/docs/specs/overlays",
             className: "btn-primary",
             children: [
               "Next: Overlays ",
-              /* @__PURE__ */ jsxDEV(ChevronRight, {
+              /* @__PURE__ */ jsx(ChevronRight, {
                 size: 16
-              }, undefined, false, undefined, this)
+              })
             ]
-          }, undefined, true, undefined, this)
+          })
         ]
-      }, undefined, true, undefined, this)
+      })
     ]
-  }, undefined, true, undefined, this);
+  });
 }
 export {
   SpecsPolicyPage