@cynodia/axiom-server 0.15.0-alpha.2 → 0.16.0-alpha.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/conformance/authorization/action-allow-deny-anonymous.json +209 -1
- package/conformance/authorization/constant-deny-policy.json +209 -1
- package/conformance/authorization/legacy-action-constant-public.json +1020 -0
- package/conformance/authorization/legacy-action-neq-absent-deny.json +1049 -0
- package/conformance/authorization/legacy-action-not-eq-absent-deny.json +1049 -0
- package/conformance/authorization/legacy-action-positive-role.json +1049 -0
- package/conformance/authorization/legacy-plus-policy-absent-conjunction.json +1040 -0
- package/conformance/authorization/live-query-resume.json +209 -1
- package/conformance/authorization/manifest.json +49 -1
- package/conformance/authorization/operation-scope.json +209 -1
- package/conformance/authorization/pt2-deny-list-absent-value.json +209 -1
- package/conformance/authorization/pt2-owner-both-absent.json +209 -1
- package/conformance/authorization/query-public-preserved.json +209 -1
- package/conformance/authorization/query-tenant-isolation.json +209 -1
- package/conformance/authorization/workflow-cancellation-owner.json +209 -1
- package/conformance/authorization/workflow-cancellation-policy.json +209 -1
- package/conformance/authorization/workflow-inspection.json +209 -1
- package/conformance/authorization/workflow-start.json +209 -1
- package/conformance/live/aggregate-reset.json +1 -1
- package/conformance/live/dependency-commit-no-change.json +1 -1
- package/conformance/live/f2-state-ref-refused.json +1 -1
- package/conformance/live/initial-result.json +1 -1
- package/conformance/live/insert-on-filter-entry.json +1 -1
- package/conformance/live/limit-boundary.json +1 -1
- package/conformance/live/manifest.json +1 -1
- package/conformance/live/not-live-capable.json +1 -1
- package/conformance/live/provider-only-sequence.json +1 -1
- package/conformance/live/provider-record-remove.json +1 -1
- package/conformance/live/remove-on-filter-exit.json +1 -1
- package/conformance/live/update-with-move.json +1 -1
- package/conformance/live/update-without-move.json +1 -1
- package/conformance/manifest.json +1 -1
- package/conformance/migrations/add-optional-field.json +1 -1
- package/conformance/migrations/add-required-field-with-default.json +1 -1
- package/conformance/migrations/crash-and-resume.json +1 -1
- package/conformance/migrations/destructive-removal-approved.json +1 -1
- package/conformance/migrations/destructive-removal-refused.json +1 -1
- package/conformance/migrations/idempotent-rerun.json +1 -1
- package/conformance/migrations/invalid-target-record.json +1 -1
- package/conformance/migrations/large-batched-transformation.json +1 -1
- package/conformance/migrations/manifest.json +1 -1
- package/conformance/migrations/metadata-only-change.json +1 -1
- package/conformance/migrations/migration-lock.json +1 -1
- package/conformance/migrations/missing-migration-path.json +1 -1
- package/conformance/migrations/record-transformation.json +1 -1
- package/conformance/migrations/relationship-addition.json +1 -1
- package/conformance/migrations/remove-empty-field.json +1 -1
- package/conformance/migrations/schema-fingerprint-mismatch.json +1 -1
- package/conformance/migrations/transform-field.json +1 -1
- package/conformance/queries/aggregate-under-policy.json +1 -1
- package/conformance/queries/count-aggregate.json +1 -1
- package/conformance/queries/cursor-page-1.json +1 -1
- package/conformance/queries/cursor-page-2.json +1 -1
- package/conformance/queries/filter-compound.json +1 -1
- package/conformance/queries/filter-equality.json +1 -1
- package/conformance/queries/grouped-sum.json +1 -1
- package/conformance/queries/invalid-cursor.json +1 -1
- package/conformance/queries/manifest.json +1 -1
- package/conformance/queries/multi-key-sort.json +1 -1
- package/conformance/queries/null-ordering.json +1 -1
- package/conformance/queries/projection-shape.json +1 -1
- package/conformance/queries/query-inside-transaction.json +1 -1
- package/conformance/queries/relationship-under-policy.json +1 -1
- package/conformance/queries/row-read-policy.json +1 -1
- package/conformance/queries/stable-ordering.json +1 -1
- package/conformance/queries/to-one-relationship.json +1 -1
- package/conformance/workflow/manifest.json +1 -1
- package/conformance/workflow/workflow-action-on-error.json +1 -1
- package/conformance/workflow/workflow-action-retry.json +1 -1
- package/conformance/workflow/workflow-action-success.json +1 -1
- package/conformance/workflow/workflow-action-terminal-failure.json +1 -1
- package/conformance/workflow/workflow-branch-false.json +1 -1
- package/conformance/workflow/workflow-branch-true.json +1 -1
- package/conformance/workflow/workflow-cancel-waiting.json +1 -1
- package/conformance/workflow/workflow-event-match.json +1 -1
- package/conformance/workflow/workflow-event-nonmatch.json +1 -1
- package/conformance/workflow/workflow-event-timeout.json +1 -1
- package/conformance/workflow/workflow-start-complete.json +1 -1
- package/conformance/workflow/workflow-start-idempotency.json +1 -1
- package/conformance/workflow/workflow-timer.json +1 -1
- package/dist/authority-identity.d.ts +16 -6
- package/dist/authority-identity.js +24 -10
- package/dist/deps.d.ts +1 -1
- package/dist/deps.js +1 -1
- package/dist/server.js +21 -6
- package/package.json +3 -3
- package/schema/protocol.v1.schema.json +1 -1
- package/schema/server-ir.v1.schema.json +1 -1
- package/schema/server-ir.v2.schema.json +1 -1
- package/schema/server-ir.v3.schema.json +1 -1
- package/schema/server-ir.v4.schema.json +1 -1
- package/schema/server-ir.v5.schema.json +1 -1
- package/schema/server-ir.v6.schema.json +1 -1
- package/schema/server-ir.v7.schema.json +1 -1
- package/schema/server-ir.v8.schema.json +1 -1
- package/schema/server-ir.v9.schema.json +1 -1
|
@@ -103,7 +103,7 @@
|
|
|
103
103
|
"contract": "axiom.server.v9",
|
|
104
104
|
"id": "authz-conformance",
|
|
105
105
|
"name": "Authorization Conformance",
|
|
106
|
-
"version": "0.15.0-alpha.
|
|
106
|
+
"version": "0.15.0-alpha.3",
|
|
107
107
|
"entities": [
|
|
108
108
|
{
|
|
109
109
|
"id": "entity_user",
|
|
@@ -498,6 +498,214 @@
|
|
|
498
498
|
],
|
|
499
499
|
"preconditions": [],
|
|
500
500
|
"failureModes": []
|
|
501
|
+
},
|
|
502
|
+
"action_legacy_neq": {
|
|
503
|
+
"id": "action_legacy_neq",
|
|
504
|
+
"kind": "action",
|
|
505
|
+
"authorization": {
|
|
506
|
+
"kind": "binary",
|
|
507
|
+
"operator": "neq",
|
|
508
|
+
"left": {
|
|
509
|
+
"kind": "field",
|
|
510
|
+
"source": {
|
|
511
|
+
"kind": "ref",
|
|
512
|
+
"targetId": "axiom_principal"
|
|
513
|
+
},
|
|
514
|
+
"fieldId": "field_user_role"
|
|
515
|
+
},
|
|
516
|
+
"right": {
|
|
517
|
+
"kind": "literal",
|
|
518
|
+
"value": "banned"
|
|
519
|
+
}
|
|
520
|
+
},
|
|
521
|
+
"operations": [
|
|
522
|
+
{
|
|
523
|
+
"kind": "set",
|
|
524
|
+
"target": {
|
|
525
|
+
"kind": "state",
|
|
526
|
+
"stateId": "state_count"
|
|
527
|
+
},
|
|
528
|
+
"value": {
|
|
529
|
+
"kind": "binary",
|
|
530
|
+
"operator": "add",
|
|
531
|
+
"left": {
|
|
532
|
+
"kind": "ref",
|
|
533
|
+
"targetId": "state_count"
|
|
534
|
+
},
|
|
535
|
+
"right": {
|
|
536
|
+
"kind": "literal",
|
|
537
|
+
"value": 1
|
|
538
|
+
}
|
|
539
|
+
}
|
|
540
|
+
}
|
|
541
|
+
],
|
|
542
|
+
"preconditions": [],
|
|
543
|
+
"failureModes": []
|
|
544
|
+
},
|
|
545
|
+
"action_legacy_noteq": {
|
|
546
|
+
"id": "action_legacy_noteq",
|
|
547
|
+
"kind": "action",
|
|
548
|
+
"authorization": {
|
|
549
|
+
"kind": "unary",
|
|
550
|
+
"operator": "not",
|
|
551
|
+
"operand": {
|
|
552
|
+
"kind": "binary",
|
|
553
|
+
"operator": "eq",
|
|
554
|
+
"left": {
|
|
555
|
+
"kind": "field",
|
|
556
|
+
"source": {
|
|
557
|
+
"kind": "ref",
|
|
558
|
+
"targetId": "axiom_principal"
|
|
559
|
+
},
|
|
560
|
+
"fieldId": "field_user_role"
|
|
561
|
+
},
|
|
562
|
+
"right": {
|
|
563
|
+
"kind": "literal",
|
|
564
|
+
"value": "banned"
|
|
565
|
+
}
|
|
566
|
+
}
|
|
567
|
+
},
|
|
568
|
+
"operations": [
|
|
569
|
+
{
|
|
570
|
+
"kind": "set",
|
|
571
|
+
"target": {
|
|
572
|
+
"kind": "state",
|
|
573
|
+
"stateId": "state_count"
|
|
574
|
+
},
|
|
575
|
+
"value": {
|
|
576
|
+
"kind": "binary",
|
|
577
|
+
"operator": "add",
|
|
578
|
+
"left": {
|
|
579
|
+
"kind": "ref",
|
|
580
|
+
"targetId": "state_count"
|
|
581
|
+
},
|
|
582
|
+
"right": {
|
|
583
|
+
"kind": "literal",
|
|
584
|
+
"value": 1
|
|
585
|
+
}
|
|
586
|
+
}
|
|
587
|
+
}
|
|
588
|
+
],
|
|
589
|
+
"preconditions": [],
|
|
590
|
+
"failureModes": []
|
|
591
|
+
},
|
|
592
|
+
"action_legacy_true": {
|
|
593
|
+
"id": "action_legacy_true",
|
|
594
|
+
"kind": "action",
|
|
595
|
+
"authorization": {
|
|
596
|
+
"kind": "literal",
|
|
597
|
+
"value": true
|
|
598
|
+
},
|
|
599
|
+
"operations": [
|
|
600
|
+
{
|
|
601
|
+
"kind": "set",
|
|
602
|
+
"target": {
|
|
603
|
+
"kind": "state",
|
|
604
|
+
"stateId": "state_count"
|
|
605
|
+
},
|
|
606
|
+
"value": {
|
|
607
|
+
"kind": "binary",
|
|
608
|
+
"operator": "add",
|
|
609
|
+
"left": {
|
|
610
|
+
"kind": "ref",
|
|
611
|
+
"targetId": "state_count"
|
|
612
|
+
},
|
|
613
|
+
"right": {
|
|
614
|
+
"kind": "literal",
|
|
615
|
+
"value": 1
|
|
616
|
+
}
|
|
617
|
+
}
|
|
618
|
+
}
|
|
619
|
+
],
|
|
620
|
+
"preconditions": [],
|
|
621
|
+
"failureModes": []
|
|
622
|
+
},
|
|
623
|
+
"action_legacy_admin": {
|
|
624
|
+
"id": "action_legacy_admin",
|
|
625
|
+
"kind": "action",
|
|
626
|
+
"authorization": {
|
|
627
|
+
"kind": "binary",
|
|
628
|
+
"operator": "eq",
|
|
629
|
+
"left": {
|
|
630
|
+
"kind": "field",
|
|
631
|
+
"source": {
|
|
632
|
+
"kind": "ref",
|
|
633
|
+
"targetId": "axiom_principal"
|
|
634
|
+
},
|
|
635
|
+
"fieldId": "field_user_role"
|
|
636
|
+
},
|
|
637
|
+
"right": {
|
|
638
|
+
"kind": "literal",
|
|
639
|
+
"value": "admin"
|
|
640
|
+
}
|
|
641
|
+
},
|
|
642
|
+
"operations": [
|
|
643
|
+
{
|
|
644
|
+
"kind": "set",
|
|
645
|
+
"target": {
|
|
646
|
+
"kind": "state",
|
|
647
|
+
"stateId": "state_count"
|
|
648
|
+
},
|
|
649
|
+
"value": {
|
|
650
|
+
"kind": "binary",
|
|
651
|
+
"operator": "add",
|
|
652
|
+
"left": {
|
|
653
|
+
"kind": "ref",
|
|
654
|
+
"targetId": "state_count"
|
|
655
|
+
},
|
|
656
|
+
"right": {
|
|
657
|
+
"kind": "literal",
|
|
658
|
+
"value": 1
|
|
659
|
+
}
|
|
660
|
+
}
|
|
661
|
+
}
|
|
662
|
+
],
|
|
663
|
+
"preconditions": [],
|
|
664
|
+
"failureModes": []
|
|
665
|
+
},
|
|
666
|
+
"action_legacy_plus_policy": {
|
|
667
|
+
"id": "action_legacy_plus_policy",
|
|
668
|
+
"kind": "action",
|
|
669
|
+
"authorization": {
|
|
670
|
+
"kind": "binary",
|
|
671
|
+
"operator": "neq",
|
|
672
|
+
"left": {
|
|
673
|
+
"kind": "field",
|
|
674
|
+
"source": {
|
|
675
|
+
"kind": "ref",
|
|
676
|
+
"targetId": "axiom_principal"
|
|
677
|
+
},
|
|
678
|
+
"fieldId": "field_user_role"
|
|
679
|
+
},
|
|
680
|
+
"right": {
|
|
681
|
+
"kind": "literal",
|
|
682
|
+
"value": "banned"
|
|
683
|
+
}
|
|
684
|
+
},
|
|
685
|
+
"authorizationPolicy": "policy_op",
|
|
686
|
+
"operations": [
|
|
687
|
+
{
|
|
688
|
+
"kind": "set",
|
|
689
|
+
"target": {
|
|
690
|
+
"kind": "state",
|
|
691
|
+
"stateId": "state_count"
|
|
692
|
+
},
|
|
693
|
+
"value": {
|
|
694
|
+
"kind": "binary",
|
|
695
|
+
"operator": "add",
|
|
696
|
+
"left": {
|
|
697
|
+
"kind": "ref",
|
|
698
|
+
"targetId": "state_count"
|
|
699
|
+
},
|
|
700
|
+
"right": {
|
|
701
|
+
"kind": "literal",
|
|
702
|
+
"value": 1
|
|
703
|
+
}
|
|
704
|
+
}
|
|
705
|
+
}
|
|
706
|
+
],
|
|
707
|
+
"preconditions": [],
|
|
708
|
+
"failureModes": []
|
|
501
709
|
}
|
|
502
710
|
},
|
|
503
711
|
"constraints": [],
|
|
@@ -84,7 +84,7 @@
|
|
|
84
84
|
"contract": "axiom.server.v9",
|
|
85
85
|
"id": "authz-conformance",
|
|
86
86
|
"name": "Authorization Conformance",
|
|
87
|
-
"version": "0.15.0-alpha.
|
|
87
|
+
"version": "0.15.0-alpha.3",
|
|
88
88
|
"entities": [
|
|
89
89
|
{
|
|
90
90
|
"id": "entity_user",
|
|
@@ -479,6 +479,214 @@
|
|
|
479
479
|
],
|
|
480
480
|
"preconditions": [],
|
|
481
481
|
"failureModes": []
|
|
482
|
+
},
|
|
483
|
+
"action_legacy_neq": {
|
|
484
|
+
"id": "action_legacy_neq",
|
|
485
|
+
"kind": "action",
|
|
486
|
+
"authorization": {
|
|
487
|
+
"kind": "binary",
|
|
488
|
+
"operator": "neq",
|
|
489
|
+
"left": {
|
|
490
|
+
"kind": "field",
|
|
491
|
+
"source": {
|
|
492
|
+
"kind": "ref",
|
|
493
|
+
"targetId": "axiom_principal"
|
|
494
|
+
},
|
|
495
|
+
"fieldId": "field_user_role"
|
|
496
|
+
},
|
|
497
|
+
"right": {
|
|
498
|
+
"kind": "literal",
|
|
499
|
+
"value": "banned"
|
|
500
|
+
}
|
|
501
|
+
},
|
|
502
|
+
"operations": [
|
|
503
|
+
{
|
|
504
|
+
"kind": "set",
|
|
505
|
+
"target": {
|
|
506
|
+
"kind": "state",
|
|
507
|
+
"stateId": "state_count"
|
|
508
|
+
},
|
|
509
|
+
"value": {
|
|
510
|
+
"kind": "binary",
|
|
511
|
+
"operator": "add",
|
|
512
|
+
"left": {
|
|
513
|
+
"kind": "ref",
|
|
514
|
+
"targetId": "state_count"
|
|
515
|
+
},
|
|
516
|
+
"right": {
|
|
517
|
+
"kind": "literal",
|
|
518
|
+
"value": 1
|
|
519
|
+
}
|
|
520
|
+
}
|
|
521
|
+
}
|
|
522
|
+
],
|
|
523
|
+
"preconditions": [],
|
|
524
|
+
"failureModes": []
|
|
525
|
+
},
|
|
526
|
+
"action_legacy_noteq": {
|
|
527
|
+
"id": "action_legacy_noteq",
|
|
528
|
+
"kind": "action",
|
|
529
|
+
"authorization": {
|
|
530
|
+
"kind": "unary",
|
|
531
|
+
"operator": "not",
|
|
532
|
+
"operand": {
|
|
533
|
+
"kind": "binary",
|
|
534
|
+
"operator": "eq",
|
|
535
|
+
"left": {
|
|
536
|
+
"kind": "field",
|
|
537
|
+
"source": {
|
|
538
|
+
"kind": "ref",
|
|
539
|
+
"targetId": "axiom_principal"
|
|
540
|
+
},
|
|
541
|
+
"fieldId": "field_user_role"
|
|
542
|
+
},
|
|
543
|
+
"right": {
|
|
544
|
+
"kind": "literal",
|
|
545
|
+
"value": "banned"
|
|
546
|
+
}
|
|
547
|
+
}
|
|
548
|
+
},
|
|
549
|
+
"operations": [
|
|
550
|
+
{
|
|
551
|
+
"kind": "set",
|
|
552
|
+
"target": {
|
|
553
|
+
"kind": "state",
|
|
554
|
+
"stateId": "state_count"
|
|
555
|
+
},
|
|
556
|
+
"value": {
|
|
557
|
+
"kind": "binary",
|
|
558
|
+
"operator": "add",
|
|
559
|
+
"left": {
|
|
560
|
+
"kind": "ref",
|
|
561
|
+
"targetId": "state_count"
|
|
562
|
+
},
|
|
563
|
+
"right": {
|
|
564
|
+
"kind": "literal",
|
|
565
|
+
"value": 1
|
|
566
|
+
}
|
|
567
|
+
}
|
|
568
|
+
}
|
|
569
|
+
],
|
|
570
|
+
"preconditions": [],
|
|
571
|
+
"failureModes": []
|
|
572
|
+
},
|
|
573
|
+
"action_legacy_true": {
|
|
574
|
+
"id": "action_legacy_true",
|
|
575
|
+
"kind": "action",
|
|
576
|
+
"authorization": {
|
|
577
|
+
"kind": "literal",
|
|
578
|
+
"value": true
|
|
579
|
+
},
|
|
580
|
+
"operations": [
|
|
581
|
+
{
|
|
582
|
+
"kind": "set",
|
|
583
|
+
"target": {
|
|
584
|
+
"kind": "state",
|
|
585
|
+
"stateId": "state_count"
|
|
586
|
+
},
|
|
587
|
+
"value": {
|
|
588
|
+
"kind": "binary",
|
|
589
|
+
"operator": "add",
|
|
590
|
+
"left": {
|
|
591
|
+
"kind": "ref",
|
|
592
|
+
"targetId": "state_count"
|
|
593
|
+
},
|
|
594
|
+
"right": {
|
|
595
|
+
"kind": "literal",
|
|
596
|
+
"value": 1
|
|
597
|
+
}
|
|
598
|
+
}
|
|
599
|
+
}
|
|
600
|
+
],
|
|
601
|
+
"preconditions": [],
|
|
602
|
+
"failureModes": []
|
|
603
|
+
},
|
|
604
|
+
"action_legacy_admin": {
|
|
605
|
+
"id": "action_legacy_admin",
|
|
606
|
+
"kind": "action",
|
|
607
|
+
"authorization": {
|
|
608
|
+
"kind": "binary",
|
|
609
|
+
"operator": "eq",
|
|
610
|
+
"left": {
|
|
611
|
+
"kind": "field",
|
|
612
|
+
"source": {
|
|
613
|
+
"kind": "ref",
|
|
614
|
+
"targetId": "axiom_principal"
|
|
615
|
+
},
|
|
616
|
+
"fieldId": "field_user_role"
|
|
617
|
+
},
|
|
618
|
+
"right": {
|
|
619
|
+
"kind": "literal",
|
|
620
|
+
"value": "admin"
|
|
621
|
+
}
|
|
622
|
+
},
|
|
623
|
+
"operations": [
|
|
624
|
+
{
|
|
625
|
+
"kind": "set",
|
|
626
|
+
"target": {
|
|
627
|
+
"kind": "state",
|
|
628
|
+
"stateId": "state_count"
|
|
629
|
+
},
|
|
630
|
+
"value": {
|
|
631
|
+
"kind": "binary",
|
|
632
|
+
"operator": "add",
|
|
633
|
+
"left": {
|
|
634
|
+
"kind": "ref",
|
|
635
|
+
"targetId": "state_count"
|
|
636
|
+
},
|
|
637
|
+
"right": {
|
|
638
|
+
"kind": "literal",
|
|
639
|
+
"value": 1
|
|
640
|
+
}
|
|
641
|
+
}
|
|
642
|
+
}
|
|
643
|
+
],
|
|
644
|
+
"preconditions": [],
|
|
645
|
+
"failureModes": []
|
|
646
|
+
},
|
|
647
|
+
"action_legacy_plus_policy": {
|
|
648
|
+
"id": "action_legacy_plus_policy",
|
|
649
|
+
"kind": "action",
|
|
650
|
+
"authorization": {
|
|
651
|
+
"kind": "binary",
|
|
652
|
+
"operator": "neq",
|
|
653
|
+
"left": {
|
|
654
|
+
"kind": "field",
|
|
655
|
+
"source": {
|
|
656
|
+
"kind": "ref",
|
|
657
|
+
"targetId": "axiom_principal"
|
|
658
|
+
},
|
|
659
|
+
"fieldId": "field_user_role"
|
|
660
|
+
},
|
|
661
|
+
"right": {
|
|
662
|
+
"kind": "literal",
|
|
663
|
+
"value": "banned"
|
|
664
|
+
}
|
|
665
|
+
},
|
|
666
|
+
"authorizationPolicy": "policy_op",
|
|
667
|
+
"operations": [
|
|
668
|
+
{
|
|
669
|
+
"kind": "set",
|
|
670
|
+
"target": {
|
|
671
|
+
"kind": "state",
|
|
672
|
+
"stateId": "state_count"
|
|
673
|
+
},
|
|
674
|
+
"value": {
|
|
675
|
+
"kind": "binary",
|
|
676
|
+
"operator": "add",
|
|
677
|
+
"left": {
|
|
678
|
+
"kind": "ref",
|
|
679
|
+
"targetId": "state_count"
|
|
680
|
+
},
|
|
681
|
+
"right": {
|
|
682
|
+
"kind": "literal",
|
|
683
|
+
"value": 1
|
|
684
|
+
}
|
|
685
|
+
}
|
|
686
|
+
}
|
|
687
|
+
],
|
|
688
|
+
"preconditions": [],
|
|
689
|
+
"failureModes": []
|
|
482
690
|
}
|
|
483
691
|
},
|
|
484
692
|
"constraints": [],
|