@cynodia/axiom-server 0.15.0-alpha.2 → 0.16.0-alpha.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (96) hide show
  1. package/conformance/authorization/action-allow-deny-anonymous.json +209 -1
  2. package/conformance/authorization/constant-deny-policy.json +209 -1
  3. package/conformance/authorization/legacy-action-constant-public.json +1020 -0
  4. package/conformance/authorization/legacy-action-neq-absent-deny.json +1049 -0
  5. package/conformance/authorization/legacy-action-not-eq-absent-deny.json +1049 -0
  6. package/conformance/authorization/legacy-action-positive-role.json +1049 -0
  7. package/conformance/authorization/legacy-plus-policy-absent-conjunction.json +1040 -0
  8. package/conformance/authorization/live-query-resume.json +209 -1
  9. package/conformance/authorization/manifest.json +49 -1
  10. package/conformance/authorization/operation-scope.json +209 -1
  11. package/conformance/authorization/pt2-deny-list-absent-value.json +209 -1
  12. package/conformance/authorization/pt2-owner-both-absent.json +209 -1
  13. package/conformance/authorization/query-public-preserved.json +209 -1
  14. package/conformance/authorization/query-tenant-isolation.json +209 -1
  15. package/conformance/authorization/workflow-cancellation-owner.json +209 -1
  16. package/conformance/authorization/workflow-cancellation-policy.json +209 -1
  17. package/conformance/authorization/workflow-inspection.json +209 -1
  18. package/conformance/authorization/workflow-start.json +209 -1
  19. package/conformance/live/aggregate-reset.json +1 -1
  20. package/conformance/live/dependency-commit-no-change.json +1 -1
  21. package/conformance/live/f2-state-ref-refused.json +1 -1
  22. package/conformance/live/initial-result.json +1 -1
  23. package/conformance/live/insert-on-filter-entry.json +1 -1
  24. package/conformance/live/limit-boundary.json +1 -1
  25. package/conformance/live/manifest.json +1 -1
  26. package/conformance/live/not-live-capable.json +1 -1
  27. package/conformance/live/provider-only-sequence.json +1 -1
  28. package/conformance/live/provider-record-remove.json +1 -1
  29. package/conformance/live/remove-on-filter-exit.json +1 -1
  30. package/conformance/live/update-with-move.json +1 -1
  31. package/conformance/live/update-without-move.json +1 -1
  32. package/conformance/manifest.json +1 -1
  33. package/conformance/migrations/add-optional-field.json +1 -1
  34. package/conformance/migrations/add-required-field-with-default.json +1 -1
  35. package/conformance/migrations/crash-and-resume.json +1 -1
  36. package/conformance/migrations/destructive-removal-approved.json +1 -1
  37. package/conformance/migrations/destructive-removal-refused.json +1 -1
  38. package/conformance/migrations/idempotent-rerun.json +1 -1
  39. package/conformance/migrations/invalid-target-record.json +1 -1
  40. package/conformance/migrations/large-batched-transformation.json +1 -1
  41. package/conformance/migrations/manifest.json +1 -1
  42. package/conformance/migrations/metadata-only-change.json +1 -1
  43. package/conformance/migrations/migration-lock.json +1 -1
  44. package/conformance/migrations/missing-migration-path.json +1 -1
  45. package/conformance/migrations/record-transformation.json +1 -1
  46. package/conformance/migrations/relationship-addition.json +1 -1
  47. package/conformance/migrations/remove-empty-field.json +1 -1
  48. package/conformance/migrations/schema-fingerprint-mismatch.json +1 -1
  49. package/conformance/migrations/transform-field.json +1 -1
  50. package/conformance/queries/aggregate-under-policy.json +1 -1
  51. package/conformance/queries/count-aggregate.json +1 -1
  52. package/conformance/queries/cursor-page-1.json +1 -1
  53. package/conformance/queries/cursor-page-2.json +1 -1
  54. package/conformance/queries/filter-compound.json +1 -1
  55. package/conformance/queries/filter-equality.json +1 -1
  56. package/conformance/queries/grouped-sum.json +1 -1
  57. package/conformance/queries/invalid-cursor.json +1 -1
  58. package/conformance/queries/manifest.json +1 -1
  59. package/conformance/queries/multi-key-sort.json +1 -1
  60. package/conformance/queries/null-ordering.json +1 -1
  61. package/conformance/queries/projection-shape.json +1 -1
  62. package/conformance/queries/query-inside-transaction.json +1 -1
  63. package/conformance/queries/relationship-under-policy.json +1 -1
  64. package/conformance/queries/row-read-policy.json +1 -1
  65. package/conformance/queries/stable-ordering.json +1 -1
  66. package/conformance/queries/to-one-relationship.json +1 -1
  67. package/conformance/workflow/manifest.json +1 -1
  68. package/conformance/workflow/workflow-action-on-error.json +1 -1
  69. package/conformance/workflow/workflow-action-retry.json +1 -1
  70. package/conformance/workflow/workflow-action-success.json +1 -1
  71. package/conformance/workflow/workflow-action-terminal-failure.json +1 -1
  72. package/conformance/workflow/workflow-branch-false.json +1 -1
  73. package/conformance/workflow/workflow-branch-true.json +1 -1
  74. package/conformance/workflow/workflow-cancel-waiting.json +1 -1
  75. package/conformance/workflow/workflow-event-match.json +1 -1
  76. package/conformance/workflow/workflow-event-nonmatch.json +1 -1
  77. package/conformance/workflow/workflow-event-timeout.json +1 -1
  78. package/conformance/workflow/workflow-start-complete.json +1 -1
  79. package/conformance/workflow/workflow-start-idempotency.json +1 -1
  80. package/conformance/workflow/workflow-timer.json +1 -1
  81. package/dist/authority-identity.d.ts +16 -6
  82. package/dist/authority-identity.js +24 -10
  83. package/dist/deps.d.ts +1 -1
  84. package/dist/deps.js +1 -1
  85. package/dist/server.js +21 -6
  86. package/package.json +3 -3
  87. package/schema/protocol.v1.schema.json +1 -1
  88. package/schema/server-ir.v1.schema.json +1 -1
  89. package/schema/server-ir.v2.schema.json +1 -1
  90. package/schema/server-ir.v3.schema.json +1 -1
  91. package/schema/server-ir.v4.schema.json +1 -1
  92. package/schema/server-ir.v5.schema.json +1 -1
  93. package/schema/server-ir.v6.schema.json +1 -1
  94. package/schema/server-ir.v7.schema.json +1 -1
  95. package/schema/server-ir.v8.schema.json +1 -1
  96. package/schema/server-ir.v9.schema.json +1 -1
@@ -103,7 +103,7 @@
103
103
  "contract": "axiom.server.v9",
104
104
  "id": "authz-conformance",
105
105
  "name": "Authorization Conformance",
106
- "version": "0.15.0-alpha.2",
106
+ "version": "0.15.0-alpha.3",
107
107
  "entities": [
108
108
  {
109
109
  "id": "entity_user",
@@ -498,6 +498,214 @@
498
498
  ],
499
499
  "preconditions": [],
500
500
  "failureModes": []
501
+ },
502
+ "action_legacy_neq": {
503
+ "id": "action_legacy_neq",
504
+ "kind": "action",
505
+ "authorization": {
506
+ "kind": "binary",
507
+ "operator": "neq",
508
+ "left": {
509
+ "kind": "field",
510
+ "source": {
511
+ "kind": "ref",
512
+ "targetId": "axiom_principal"
513
+ },
514
+ "fieldId": "field_user_role"
515
+ },
516
+ "right": {
517
+ "kind": "literal",
518
+ "value": "banned"
519
+ }
520
+ },
521
+ "operations": [
522
+ {
523
+ "kind": "set",
524
+ "target": {
525
+ "kind": "state",
526
+ "stateId": "state_count"
527
+ },
528
+ "value": {
529
+ "kind": "binary",
530
+ "operator": "add",
531
+ "left": {
532
+ "kind": "ref",
533
+ "targetId": "state_count"
534
+ },
535
+ "right": {
536
+ "kind": "literal",
537
+ "value": 1
538
+ }
539
+ }
540
+ }
541
+ ],
542
+ "preconditions": [],
543
+ "failureModes": []
544
+ },
545
+ "action_legacy_noteq": {
546
+ "id": "action_legacy_noteq",
547
+ "kind": "action",
548
+ "authorization": {
549
+ "kind": "unary",
550
+ "operator": "not",
551
+ "operand": {
552
+ "kind": "binary",
553
+ "operator": "eq",
554
+ "left": {
555
+ "kind": "field",
556
+ "source": {
557
+ "kind": "ref",
558
+ "targetId": "axiom_principal"
559
+ },
560
+ "fieldId": "field_user_role"
561
+ },
562
+ "right": {
563
+ "kind": "literal",
564
+ "value": "banned"
565
+ }
566
+ }
567
+ },
568
+ "operations": [
569
+ {
570
+ "kind": "set",
571
+ "target": {
572
+ "kind": "state",
573
+ "stateId": "state_count"
574
+ },
575
+ "value": {
576
+ "kind": "binary",
577
+ "operator": "add",
578
+ "left": {
579
+ "kind": "ref",
580
+ "targetId": "state_count"
581
+ },
582
+ "right": {
583
+ "kind": "literal",
584
+ "value": 1
585
+ }
586
+ }
587
+ }
588
+ ],
589
+ "preconditions": [],
590
+ "failureModes": []
591
+ },
592
+ "action_legacy_true": {
593
+ "id": "action_legacy_true",
594
+ "kind": "action",
595
+ "authorization": {
596
+ "kind": "literal",
597
+ "value": true
598
+ },
599
+ "operations": [
600
+ {
601
+ "kind": "set",
602
+ "target": {
603
+ "kind": "state",
604
+ "stateId": "state_count"
605
+ },
606
+ "value": {
607
+ "kind": "binary",
608
+ "operator": "add",
609
+ "left": {
610
+ "kind": "ref",
611
+ "targetId": "state_count"
612
+ },
613
+ "right": {
614
+ "kind": "literal",
615
+ "value": 1
616
+ }
617
+ }
618
+ }
619
+ ],
620
+ "preconditions": [],
621
+ "failureModes": []
622
+ },
623
+ "action_legacy_admin": {
624
+ "id": "action_legacy_admin",
625
+ "kind": "action",
626
+ "authorization": {
627
+ "kind": "binary",
628
+ "operator": "eq",
629
+ "left": {
630
+ "kind": "field",
631
+ "source": {
632
+ "kind": "ref",
633
+ "targetId": "axiom_principal"
634
+ },
635
+ "fieldId": "field_user_role"
636
+ },
637
+ "right": {
638
+ "kind": "literal",
639
+ "value": "admin"
640
+ }
641
+ },
642
+ "operations": [
643
+ {
644
+ "kind": "set",
645
+ "target": {
646
+ "kind": "state",
647
+ "stateId": "state_count"
648
+ },
649
+ "value": {
650
+ "kind": "binary",
651
+ "operator": "add",
652
+ "left": {
653
+ "kind": "ref",
654
+ "targetId": "state_count"
655
+ },
656
+ "right": {
657
+ "kind": "literal",
658
+ "value": 1
659
+ }
660
+ }
661
+ }
662
+ ],
663
+ "preconditions": [],
664
+ "failureModes": []
665
+ },
666
+ "action_legacy_plus_policy": {
667
+ "id": "action_legacy_plus_policy",
668
+ "kind": "action",
669
+ "authorization": {
670
+ "kind": "binary",
671
+ "operator": "neq",
672
+ "left": {
673
+ "kind": "field",
674
+ "source": {
675
+ "kind": "ref",
676
+ "targetId": "axiom_principal"
677
+ },
678
+ "fieldId": "field_user_role"
679
+ },
680
+ "right": {
681
+ "kind": "literal",
682
+ "value": "banned"
683
+ }
684
+ },
685
+ "authorizationPolicy": "policy_op",
686
+ "operations": [
687
+ {
688
+ "kind": "set",
689
+ "target": {
690
+ "kind": "state",
691
+ "stateId": "state_count"
692
+ },
693
+ "value": {
694
+ "kind": "binary",
695
+ "operator": "add",
696
+ "left": {
697
+ "kind": "ref",
698
+ "targetId": "state_count"
699
+ },
700
+ "right": {
701
+ "kind": "literal",
702
+ "value": 1
703
+ }
704
+ }
705
+ }
706
+ ],
707
+ "preconditions": [],
708
+ "failureModes": []
501
709
  }
502
710
  },
503
711
  "constraints": [],
@@ -84,7 +84,7 @@
84
84
  "contract": "axiom.server.v9",
85
85
  "id": "authz-conformance",
86
86
  "name": "Authorization Conformance",
87
- "version": "0.15.0-alpha.2",
87
+ "version": "0.15.0-alpha.3",
88
88
  "entities": [
89
89
  {
90
90
  "id": "entity_user",
@@ -479,6 +479,214 @@
479
479
  ],
480
480
  "preconditions": [],
481
481
  "failureModes": []
482
+ },
483
+ "action_legacy_neq": {
484
+ "id": "action_legacy_neq",
485
+ "kind": "action",
486
+ "authorization": {
487
+ "kind": "binary",
488
+ "operator": "neq",
489
+ "left": {
490
+ "kind": "field",
491
+ "source": {
492
+ "kind": "ref",
493
+ "targetId": "axiom_principal"
494
+ },
495
+ "fieldId": "field_user_role"
496
+ },
497
+ "right": {
498
+ "kind": "literal",
499
+ "value": "banned"
500
+ }
501
+ },
502
+ "operations": [
503
+ {
504
+ "kind": "set",
505
+ "target": {
506
+ "kind": "state",
507
+ "stateId": "state_count"
508
+ },
509
+ "value": {
510
+ "kind": "binary",
511
+ "operator": "add",
512
+ "left": {
513
+ "kind": "ref",
514
+ "targetId": "state_count"
515
+ },
516
+ "right": {
517
+ "kind": "literal",
518
+ "value": 1
519
+ }
520
+ }
521
+ }
522
+ ],
523
+ "preconditions": [],
524
+ "failureModes": []
525
+ },
526
+ "action_legacy_noteq": {
527
+ "id": "action_legacy_noteq",
528
+ "kind": "action",
529
+ "authorization": {
530
+ "kind": "unary",
531
+ "operator": "not",
532
+ "operand": {
533
+ "kind": "binary",
534
+ "operator": "eq",
535
+ "left": {
536
+ "kind": "field",
537
+ "source": {
538
+ "kind": "ref",
539
+ "targetId": "axiom_principal"
540
+ },
541
+ "fieldId": "field_user_role"
542
+ },
543
+ "right": {
544
+ "kind": "literal",
545
+ "value": "banned"
546
+ }
547
+ }
548
+ },
549
+ "operations": [
550
+ {
551
+ "kind": "set",
552
+ "target": {
553
+ "kind": "state",
554
+ "stateId": "state_count"
555
+ },
556
+ "value": {
557
+ "kind": "binary",
558
+ "operator": "add",
559
+ "left": {
560
+ "kind": "ref",
561
+ "targetId": "state_count"
562
+ },
563
+ "right": {
564
+ "kind": "literal",
565
+ "value": 1
566
+ }
567
+ }
568
+ }
569
+ ],
570
+ "preconditions": [],
571
+ "failureModes": []
572
+ },
573
+ "action_legacy_true": {
574
+ "id": "action_legacy_true",
575
+ "kind": "action",
576
+ "authorization": {
577
+ "kind": "literal",
578
+ "value": true
579
+ },
580
+ "operations": [
581
+ {
582
+ "kind": "set",
583
+ "target": {
584
+ "kind": "state",
585
+ "stateId": "state_count"
586
+ },
587
+ "value": {
588
+ "kind": "binary",
589
+ "operator": "add",
590
+ "left": {
591
+ "kind": "ref",
592
+ "targetId": "state_count"
593
+ },
594
+ "right": {
595
+ "kind": "literal",
596
+ "value": 1
597
+ }
598
+ }
599
+ }
600
+ ],
601
+ "preconditions": [],
602
+ "failureModes": []
603
+ },
604
+ "action_legacy_admin": {
605
+ "id": "action_legacy_admin",
606
+ "kind": "action",
607
+ "authorization": {
608
+ "kind": "binary",
609
+ "operator": "eq",
610
+ "left": {
611
+ "kind": "field",
612
+ "source": {
613
+ "kind": "ref",
614
+ "targetId": "axiom_principal"
615
+ },
616
+ "fieldId": "field_user_role"
617
+ },
618
+ "right": {
619
+ "kind": "literal",
620
+ "value": "admin"
621
+ }
622
+ },
623
+ "operations": [
624
+ {
625
+ "kind": "set",
626
+ "target": {
627
+ "kind": "state",
628
+ "stateId": "state_count"
629
+ },
630
+ "value": {
631
+ "kind": "binary",
632
+ "operator": "add",
633
+ "left": {
634
+ "kind": "ref",
635
+ "targetId": "state_count"
636
+ },
637
+ "right": {
638
+ "kind": "literal",
639
+ "value": 1
640
+ }
641
+ }
642
+ }
643
+ ],
644
+ "preconditions": [],
645
+ "failureModes": []
646
+ },
647
+ "action_legacy_plus_policy": {
648
+ "id": "action_legacy_plus_policy",
649
+ "kind": "action",
650
+ "authorization": {
651
+ "kind": "binary",
652
+ "operator": "neq",
653
+ "left": {
654
+ "kind": "field",
655
+ "source": {
656
+ "kind": "ref",
657
+ "targetId": "axiom_principal"
658
+ },
659
+ "fieldId": "field_user_role"
660
+ },
661
+ "right": {
662
+ "kind": "literal",
663
+ "value": "banned"
664
+ }
665
+ },
666
+ "authorizationPolicy": "policy_op",
667
+ "operations": [
668
+ {
669
+ "kind": "set",
670
+ "target": {
671
+ "kind": "state",
672
+ "stateId": "state_count"
673
+ },
674
+ "value": {
675
+ "kind": "binary",
676
+ "operator": "add",
677
+ "left": {
678
+ "kind": "ref",
679
+ "targetId": "state_count"
680
+ },
681
+ "right": {
682
+ "kind": "literal",
683
+ "value": 1
684
+ }
685
+ }
686
+ }
687
+ ],
688
+ "preconditions": [],
689
+ "failureModes": []
482
690
  }
483
691
  },
484
692
  "constraints": [],