@empire-builder-kit/nx 1.0.0-beta.10

package/src/ownership/record.js

@@ -0,0 +1,336 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generatedOwnershipSchema = exports.managedJsonPointersSchema = exports.GENERATED_PATH_ORIGINS = exports.GENERATED_PATH_MODES = exports.GENERATED_OWNERSHIP_SCHEMA_VERSION = void 0;
+exports.validateManagedJsonPointers = validateManagedJsonPointers;
+exports.validateGeneratedOwnershipRecord = validateGeneratedOwnershipRecord;
+const index_js_1 = require("../foundation/index.js");
+const validation_js_1 = require("../validation.js");
+const hash_js_1 = require("./hash.js");
+const json_ownership_js_1 = require("./json-ownership.js");
+exports.GENERATED_OWNERSHIP_SCHEMA_VERSION = 2;
+exports.GENERATED_PATH_MODES = ['managed', 'seeded'];
+exports.GENERATED_PATH_ORIGINS = [
+    'blueprint',
+    'composition',
+    'framework',
+];
+function validateManagedJsonPointers(entry, path, issues) {
+    if (entry.managedJsonPointers === undefined)
+        return;
+    if (entry.mode !== 'managed') {
+        issues.push({
+            message: 'is only valid for managed paths',
+            path: `${path}.managedJsonPointers`,
+        });
+    }
+    if (!Array.isArray(entry.managedJsonPointers) ||
+        entry.managedJsonPointers.length === 0) {
+        issues.push({
+            message: 'must be a non-empty array',
+            path: `${path}.managedJsonPointers`,
+        });
+        return;
+    }
+    const pointers = entry.managedJsonPointers;
+    pointers.forEach((pointer, index) => {
+        if (typeof pointer !== 'string' ||
+            !json_ownership_js_1.MANAGED_JSON_POINTER_PATTERN.test(pointer)) {
+            issues.push({
+                message: 'must be a valid non-root RFC 6901 JSON pointer',
+                path: `${path}.managedJsonPointers[${index}]`,
+            });
+        }
+    });
+    if (new Set(pointers).size !== pointers.length) {
+        issues.push({
+            message: 'must not contain duplicates',
+            path: `${path}.managedJsonPointers`,
+        });
+    }
+}
+exports.managedJsonPointersSchema = {
+    items: {
+        pattern: '^(?:/(?:[^~/]|~[01])*)+$',
+        type: 'string',
+    },
+    minItems: 1,
+    type: 'array',
+    uniqueItems: true,
+};
+const exactSemanticVersionPattern = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
+function validateMigrationHistory(value, issues) {
+    if (value === undefined)
+        return;
+    if (!Array.isArray(value) || value.length === 0) {
+        issues.push({
+            message: 'must be a non-empty array when present',
+            path: 'ownership.migrationHistory',
+        });
+        return;
+    }
+    const identities = new Set();
+    value.forEach((entry, index) => {
+        const path = `ownership.migrationHistory[${index}]`;
+        if (!(0, validation_js_1.isRecord)(entry)) {
+            issues.push({ message: 'must be an object', path });
+            return;
+        }
+        for (const key of Object.keys(entry)) {
+            if (![
+                'managedPlanDigest',
+                'migrationId',
+                'sourceVersion',
+                'targetVersion',
+            ].includes(key)) {
+                issues.push({
+                    message: 'is not an allowed property',
+                    path: `${path}.${key}`,
+                });
+            }
+        }
+        if (typeof entry.migrationId !== 'string' ||
+            entry.migrationId.trim() === '') {
+            issues.push({
+                message: 'must be a non-empty string',
+                path: `${path}.migrationId`,
+            });
+        }
+        for (const member of ['sourceVersion', 'targetVersion']) {
+            if (typeof entry[member] !== 'string' ||
+                !exactSemanticVersionPattern.test(entry[member])) {
+                issues.push({
+                    message: 'must be an exact semantic version',
+                    path: `${path}.${member}`,
+                });
+            }
+        }
+        if (typeof entry.managedPlanDigest !== 'string' ||
+            !hash_js_1.GENERATED_CONTENT_HASH_PATTERN.test(entry.managedPlanDigest)) {
+            issues.push({
+                message: 'must be a lowercase SHA-256 digest',
+                path: `${path}.managedPlanDigest`,
+            });
+        }
+        const identity = `${String(entry.migrationId)}\0${String(entry.sourceVersion)}\0${String(entry.targetVersion)}`;
+        if (identities.has(identity)) {
+            issues.push({
+                message: 'must not duplicate a migration history entry',
+                path,
+            });
+        }
+        identities.add(identity);
+    });
+}
+function validateStringArray(value, path, issues) {
+    if (!Array.isArray(value)) {
+        issues.push({ message: 'must be an array', path });
+        return;
+    }
+    value.forEach((entry, index) => {
+        if (typeof entry !== 'string' || entry.trim() === '') {
+            issues.push({
+                message: 'must be a non-empty string',
+                path: `${path}[${index}]`,
+            });
+        }
+    });
+}
+function isSafeWorkspacePath(value) {
+    return (value !== '' &&
+        !value.startsWith('/') &&
+        !value.startsWith('\\') &&
+        !value.split(/[\\/]/).includes('..'));
+}
+function validateGeneratedOwnershipRecord(value) {
+    if (!(0, validation_js_1.isRecord)(value)) {
+        return {
+            valid: false,
+            issues: [{ message: 'must be an object', path: 'ownership' }],
+        };
+    }
+    const issues = [];
+    if (value.schemaVersion !== exports.GENERATED_OWNERSHIP_SCHEMA_VERSION) {
+        issues.push({ message: 'must equal 2', path: 'ownership.schemaVersion' });
+    }
+    if (typeof value.slice !== 'string' || value.slice.trim() === '') {
+        issues.push({
+            message: 'must be a non-empty string',
+            path: 'ownership.slice',
+        });
+    }
+    if (!(0, validation_js_1.isRecord)(value.blueprint)) {
+        issues.push({ message: 'must be an object', path: 'ownership.blueprint' });
+    }
+    else {
+        if (typeof value.blueprint.name !== 'string' ||
+            value.blueprint.name === '') {
+            issues.push({
+                message: 'must be non-empty',
+                path: 'ownership.blueprint.name',
+            });
+        }
+        if (typeof value.blueprint.version !== 'string' ||
+            value.blueprint.version === '') {
+            issues.push({
+                message: 'must be non-empty',
+                path: 'ownership.blueprint.version',
+            });
+        }
+    }
+    const foundation = (0, index_js_1.validateFoundationRequirement)(value.foundation, 'ownership.foundation');
+    if (!foundation.valid) {
+        issues.push(...foundation.issues);
+    }
+    if (!(0, validation_js_1.isRecord)(value.inputs)) {
+        issues.push({ message: 'must be an object', path: 'ownership.inputs' });
+    }
+    validateMigrationHistory(value.migrationHistory, issues);
+    if (!Array.isArray(value.paths)) {
+        issues.push({ message: 'must be an array', path: 'ownership.paths' });
+    }
+    else {
+        value.paths.forEach((entry, index) => {
+            const path = `ownership.paths[${index}]`;
+            if (!(0, validation_js_1.isRecord)(entry)) {
+                issues.push({ message: 'must be an object', path });
+                return;
+            }
+            if (typeof entry.path !== 'string' || !isSafeWorkspacePath(entry.path)) {
+                issues.push({
+                    message: 'must be a safe workspace-relative path',
+                    path: `${path}.path`,
+                });
+            }
+            if (!exports.GENERATED_PATH_MODES.includes(entry.mode)) {
+                issues.push({
+                    message: 'must equal managed or seeded',
+                    path: `${path}.mode`,
+                });
+            }
+            if (!exports.GENERATED_PATH_ORIGINS.includes(entry.origin)) {
+                issues.push({
+                    message: 'must equal blueprint, composition, or framework',
+                    path: `${path}.origin`,
+                });
+            }
+            if (typeof entry.sha256 !== 'string' ||
+                !hash_js_1.GENERATED_CONTENT_HASH_PATTERN.test(entry.sha256)) {
+                issues.push({
+                    message: 'must be a lowercase SHA-256 digest',
+                    path: `${path}.sha256`,
+                });
+            }
+            validateManagedJsonPointers(entry, path, issues);
+        });
+    }
+    validateStringArray(value.projects, 'ownership.projects', issues);
+    validateStringArray(value.verification, 'ownership.verification', issues);
+    if (!(0, validation_js_1.isRecord)(value.contracts)) {
+        issues.push({ message: 'must be an object', path: 'ownership.contracts' });
+    }
+    else {
+        validateStringArray(value.contracts.publishes, 'ownership.contracts.publishes', issues);
+        validateStringArray(value.contracts.consumes, 'ownership.contracts.consumes', issues);
+    }
+    return (0, validation_js_1.validationResult)(value, issues);
+}
+const stringArraySchema = {
+    items: { minLength: 1, type: 'string' },
+    type: 'array',
+};
+exports.generatedOwnershipSchema = {
+    $id: 'https://empirebuilderkit.dev/schemas/generated-ownership-v2.json',
+    $schema: 'https://json-schema.org/draft/2020-12/schema',
+    additionalProperties: false,
+    properties: {
+        blueprint: {
+            additionalProperties: false,
+            properties: {
+                name: { minLength: 1, type: 'string' },
+                version: { minLength: 1, type: 'string' },
+            },
+            required: ['name', 'version'],
+            type: 'object',
+        },
+        contracts: {
+            additionalProperties: false,
+            properties: {
+                consumes: stringArraySchema,
+                publishes: stringArraySchema,
+            },
+            required: ['publishes', 'consumes'],
+            type: 'object',
+        },
+        foundation: {
+            $ref: 'https://empirebuilderkit.dev/schemas/foundation-requirement-v1.json',
+        },
+        inputs: { type: 'object' },
+        migrationHistory: {
+            items: {
+                additionalProperties: false,
+                properties: {
+                    managedPlanDigest: {
+                        pattern: hash_js_1.GENERATED_CONTENT_HASH_PATTERN.source,
+                        type: 'string',
+                    },
+                    migrationId: { minLength: 1, type: 'string' },
+                    sourceVersion: {
+                        pattern: exactSemanticVersionPattern.source,
+                        type: 'string',
+                    },
+                    targetVersion: {
+                        pattern: exactSemanticVersionPattern.source,
+                        type: 'string',
+                    },
+                },
+                required: [
+                    'sourceVersion',
+                    'targetVersion',
+                    'migrationId',
+                    'managedPlanDigest',
+                ],
+                type: 'object',
+            },
+            minItems: 1,
+            type: 'array',
+            uniqueItems: true,
+        },
+        paths: {
+            items: {
+                additionalProperties: false,
+                properties: {
+                    managedJsonPointers: exports.managedJsonPointersSchema,
+                    mode: { enum: [...exports.GENERATED_PATH_MODES] },
+                    origin: { enum: [...exports.GENERATED_PATH_ORIGINS] },
+                    path: {
+                        minLength: 1,
+                        not: { pattern: '(^[\\\\/])|(^|[\\\\/])\\.\\.([\\\\/]|$)' },
+                        type: 'string',
+                    },
+                    sha256: { pattern: '^[a-f0-9]{64}$', type: 'string' },
+                },
+                required: ['path', 'mode', 'origin', 'sha256'],
+                type: 'object',
+            },
+            type: 'array',
+        },
+        projects: stringArraySchema,
+        schemaVersion: { const: exports.GENERATED_OWNERSHIP_SCHEMA_VERSION },
+        slice: { minLength: 1, type: 'string' },
+        verification: stringArraySchema,
+    },
+    required: [
+        'schemaVersion',
+        'slice',
+        'blueprint',
+        'foundation',
+        'inputs',
+        'paths',
+        'projects',
+        'verification',
+        'contracts',
+    ],
+    title: 'Empire Builder Kit Generated Ownership Record v2',
+    type: 'object',
+};
+//# sourceMappingURL=record.js.map

package/src/ownership/record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record.js","sourceRoot":"","sources":["../../../../../packages/nx/src/ownership/record.ts"],"names":[],"mappings":";;;AAuCA,kEAwCC;AAsID,4EAwHC;AA7UD,qDAGgC;AAChC,oDAK0B;AAC1B,uCAA2D;AAC3D,2DAAmE;AAEtD,QAAA,kCAAkC,GAAG,CAAU,CAAC;AAChD,QAAA,oBAAoB,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAU,CAAC;AACtD,QAAA,sBAAsB,GAAG;IACpC,WAAW;IACX,aAAa;IACb,WAAW;CACH,CAAC;AAoBX,SAAgB,2BAA2B,CACzC,KAA8B,EAC9B,IAAY,EACZ,MAAyB;IAEzB,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS;QAAE,OAAO;IACpD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,iCAAiC;YAC1C,IAAI,EAAE,GAAG,IAAI,sBAAsB;SACpC,CAAC,CAAC;IACL,CAAC;IACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC;QACzC,KAAK,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,EACtC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,2BAA2B;YACpC,IAAI,EAAE,GAAG,IAAI,sBAAsB;SACpC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QAClC,IACE,OAAO,OAAO,KAAK,QAAQ;YAC3B,CAAC,gDAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,EAC3C,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,gDAAgD;gBACzD,IAAI,EAAE,GAAG,IAAI,wBAAwB,KAAK,GAAG;aAC9C,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,6BAA6B;YACtC,IAAI,EAAE,GAAG,IAAI,sBAAsB;SACpC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAEY,QAAA,yBAAyB,GAAG;IACvC,KAAK,EAAE;QACL,OAAO,EAAE,0BAA0B;QACnC,IAAI,EAAE,QAAQ;KACf;IACD,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,IAAI;CACT,CAAC;AAeX,MAAM,2BAA2B,GAC/B,0DAA0D,CAAC;AAE7D,SAAS,wBAAwB,CAC/B,KAAc,EACd,MAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,wCAAwC;YACjD,IAAI,EAAE,4BAA4B;SACnC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,8BAA8B,KAAK,GAAG,CAAC;QACpD,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,IACE,CAAC;gBACC,mBAAmB;gBACnB,aAAa;gBACb,eAAe;gBACf,eAAe;aAChB,CAAC,QAAQ,CAAC,GAAG,CAAC,EACf,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,4BAA4B;oBACrC,IAAI,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IACE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;YACrC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAC/B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,4BAA4B;gBACrC,IAAI,EAAE,GAAG,IAAI,cAAc;aAC5B,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,CAAC,eAAe,EAAE,eAAe,CAAU,EAAE,CAAC;YACjE,IACE,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ;gBACjC,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAChD,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,mCAAmC;oBAC5C,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,EAAE;iBAC1B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IACE,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;YAC3C,CAAC,wCAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAC7D,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,oCAAoC;gBAC7C,IAAI,EAAE,GAAG,IAAI,oBAAoB;aAClC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,MAAM,CACtD,KAAK,CAAC,aAAa,CACpB,KAAK,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACpC,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,8CAA8C;gBACvD,IAAI;aACL,CAAC,CAAC;QACL,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAc,EACd,IAAY,EACZ,MAAyB;IAEzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,4BAA4B;gBACrC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,CACL,KAAK,KAAK,EAAE;QACZ,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACtB,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACvB,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,SAAgB,gCAAgC,CAC9C,KAAc;IAEd,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;SAC9D,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,IAAI,KAAK,CAAC,aAAa,KAAK,0CAAkC,EAAE,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,4BAA4B;YACrC,IAAI,EAAE,iBAAiB;SACxB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,IACE,OAAO,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ;YACxC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,EAAE,EAC3B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,mBAAmB;gBAC5B,IAAI,EAAE,0BAA0B;aACjC,CAAC,CAAC;QACL,CAAC;QACD,IACE,OAAO,KAAK,CAAC,SAAS,CAAC,OAAO,KAAK,QAAQ;YAC3C,KAAK,CAAC,SAAS,CAAC,OAAO,KAAK,EAAE,EAC9B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,OAAO,EAAE,mBAAmB;gBAC5B,IAAI,EAAE,6BAA6B;aACpC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAA,wCAA6B,EAC9C,KAAK,CAAC,UAAU,EAChB,sBAAsB,CACvB,CAAC;IACF,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,wBAAwB,CAAC,KAAK,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAEzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACxE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACnC,MAAM,IAAI,GAAG,mBAAmB,KAAK,GAAG,CAAC;YACzC,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvE,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,wCAAwC;oBACjD,IAAI,EAAE,GAAG,IAAI,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,4BAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAyB,CAAC,EAAE,CAAC;gBACpE,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,8BAA8B;oBACvC,IAAI,EAAE,GAAG,IAAI,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,IACE,CAAC,8BAAsB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAA6B,CAAC,EACrE,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,iDAAiD;oBAC1D,IAAI,EAAE,GAAG,IAAI,SAAS;iBACvB,CAAC,CAAC;YACL,CAAC;YACD,IACE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;gBAChC,CAAC,wCAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAClD,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,oCAAoC;oBAC7C,IAAI,EAAE,GAAG,IAAI,SAAS;iBACvB,CAAC,CAAC;YACL,CAAC;YACD,2BAA2B,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,oBAAoB,EAAE,MAAM,CAAC,CAAC;IAClE,mBAAmB,CAAC,KAAK,CAAC,YAAY,EAAE,wBAAwB,EAAE,MAAM,CAAC,CAAC;IAE1E,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,mBAAmB,CACjB,KAAK,CAAC,SAAS,CAAC,SAAS,EACzB,+BAA+B,EAC/B,MAAM,CACP,CAAC;QACF,mBAAmB,CACjB,KAAK,CAAC,SAAS,CAAC,QAAQ,EACxB,8BAA8B,EAC9B,MAAM,CACP,CAAC;IACJ,CAAC;IAED,OAAO,IAAA,gCAAgB,EAA2B,KAAK,EAAE,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,iBAAiB,GAAG;IACxB,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE;IACvC,IAAI,EAAE,OAAO;CACL,CAAC;AAEE,QAAA,wBAAwB,GAAG;IACtC,GAAG,EAAE,kEAAkE;IACvE,OAAO,EAAE,8CAA8C;IACvD,oBAAoB,EAAE,KAAK;IAC3B,UAAU,EAAE;QACV,SAAS,EAAE;YACT,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACtC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC1C;YACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;YAC7B,IAAI,EAAE,QAAQ;SACf;QACD,SAAS,EAAE;YACT,oBAAoB,EAAE,KAAK;YAC3B,UAAU,EAAE;gBACV,QAAQ,EAAE,iBAAiB;gBAC3B,SAAS,EAAE,iBAAiB;aAC7B;YACD,QAAQ,EAAE,CAAC,WAAW,EAAE,UAAU,CAAC;YACnC,IAAI,EAAE,QAAQ;SACf;QACD,UAAU,EAAE;YACV,IAAI,EAAE,qEAAqE;SAC5E;QACD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1B,gBAAgB,EAAE;YAChB,KAAK,EAAE;gBACL,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,iBAAiB,EAAE;wBACjB,OAAO,EAAE,wCAA8B,CAAC,MAAM;wBAC9C,IAAI,EAAE,QAAQ;qBACf;oBACD,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC7C,aAAa,EAAE;wBACb,OAAO,EAAE,2BAA2B,CAAC,MAAM;wBAC3C,IAAI,EAAE,QAAQ;qBACf;oBACD,aAAa,EAAE;wBACb,OAAO,EAAE,2BAA2B,CAAC,MAAM;wBAC3C,IAAI,EAAE,QAAQ;qBACf;iBACF;gBACD,QAAQ,EAAE;oBACR,eAAe;oBACf,eAAe;oBACf,aAAa;oBACb,mBAAmB;iBACpB;gBACD,IAAI,EAAE,QAAQ;aACf;YACD,QAAQ,EAAE,CAAC;YACX,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,IAAI;SAClB;QACD,KAAK,EAAE;YACL,KAAK,EAAE;gBACL,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,mBAAmB,EAAE,iCAAyB;oBAC9C,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,4BAAoB,CAAC,EAAE;oBACzC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,8BAAsB,CAAC,EAAE;oBAC7C,IAAI,EAAE;wBACJ,SAAS,EAAE,CAAC;wBACZ,GAAG,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE;wBAC3D,IAAI,EAAE,QAAQ;qBACf;oBACD,MAAM,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACtD;gBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;gBAC9C,IAAI,EAAE,QAAQ;aACf;YACD,IAAI,EAAE,OAAO;SACd;QACD,QAAQ,EAAE,iBAAiB;QAC3B,aAAa,EAAE,EAAE,KAAK,EAAE,0CAAkC,EAAE;QAC5D,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE;QACvC,YAAY,EAAE,iBAAiB;KAChC;IACD,QAAQ,EAAE;QACR,eAAe;QACf,OAAO;QACP,WAAW;QACX,YAAY;QACZ,QAAQ;QACR,OAAO;QACP,UAAU;QACV,cAAc;QACd,WAAW;KACZ;IACD,KAAK,EAAE,kDAAkD;IACzD,IAAI,EAAE,QAAQ;CACN,CAAC"}

package/src/ownership/workspace-record.d.ts

@@ -0,0 +1,66 @@
+import { type ValidationResult } from '../validation.js';
+import { type GeneratedPathOwnership } from './record.js';
+export declare const WORKSPACE_OWNERSHIP_SCHEMA_VERSION: 2;
+export interface WorkspaceOwnershipRecord {
+    frameworkVersion: string;
+    kind: 'workspace';
+    paths: GeneratedPathOwnership[];
+    schemaVersion: typeof WORKSPACE_OWNERSHIP_SCHEMA_VERSION;
+}
+export declare function validateWorkspaceOwnershipRecord(value: unknown): ValidationResult<WorkspaceOwnershipRecord>;
+export declare const workspaceOwnershipSchema: {
+    readonly $id: "https://empirebuilderkit.dev/schemas/workspace-ownership-v2.json";
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly additionalProperties: false;
+    readonly properties: {
+        readonly frameworkVersion: {
+            readonly minLength: 1;
+            readonly type: "string";
+        };
+        readonly kind: {
+            readonly const: "workspace";
+        };
+        readonly paths: {
+            readonly items: {
+                readonly additionalProperties: false;
+                readonly properties: {
+                    readonly managedJsonPointers: {
+                        readonly items: {
+                            readonly pattern: "^(?:/(?:[^~/]|~[01])*)+$";
+                            readonly type: "string";
+                        };
+                        readonly minItems: 1;
+                        readonly type: "array";
+                        readonly uniqueItems: true;
+                    };
+                    readonly mode: {
+                        readonly enum: readonly ["managed", "seeded"];
+                    };
+                    readonly origin: {
+                        readonly const: "framework";
+                    };
+                    readonly path: {
+                        readonly minLength: 1;
+                        readonly not: {
+                            readonly pattern: "(^[\\\\/])|(^|[\\\\/])\\.\\.([\\\\/]|$)";
+                        };
+                        readonly type: "string";
+                    };
+                    readonly sha256: {
+                        readonly pattern: "^[a-f0-9]{64}$";
+                        readonly type: "string";
+                    };
+                };
+                readonly required: readonly ["path", "mode", "origin", "sha256"];
+                readonly type: "object";
+            };
+            readonly type: "array";
+        };
+        readonly schemaVersion: {
+            readonly const: 2;
+        };
+    };
+    readonly required: readonly ["schemaVersion", "kind", "frameworkVersion", "paths"];
+    readonly title: "Empire Builder Kit Workspace Ownership Record v2";
+    readonly type: "object";
+};

package/src/ownership/workspace-record.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.workspaceOwnershipSchema = exports.WORKSPACE_OWNERSHIP_SCHEMA_VERSION = void 0;
+exports.validateWorkspaceOwnershipRecord = validateWorkspaceOwnershipRecord;
+const validation_js_1 = require("../validation.js");
+const hash_js_1 = require("./hash.js");
+const record_js_1 = require("./record.js");
+exports.WORKSPACE_OWNERSHIP_SCHEMA_VERSION = 2;
+function isSafeWorkspacePath(value) {
+    return (value !== '' &&
+        !value.startsWith('/') &&
+        !value.startsWith('\\') &&
+        !value.split(/[\\/]/).includes('..'));
+}
+function validateWorkspaceOwnershipRecord(value) {
+    if (!(0, validation_js_1.isRecord)(value)) {
+        return {
+            valid: false,
+            issues: [{ message: 'must be an object', path: 'ownership' }],
+        };
+    }
+    const issues = [];
+    if (value.schemaVersion !== exports.WORKSPACE_OWNERSHIP_SCHEMA_VERSION) {
+        issues.push({ message: 'must equal 2', path: 'ownership.schemaVersion' });
+    }
+    if (value.kind !== 'workspace') {
+        issues.push({ message: 'must equal workspace', path: 'ownership.kind' });
+    }
+    if (typeof value.frameworkVersion !== 'string' ||
+        value.frameworkVersion.trim() === '') {
+        issues.push({
+            message: 'must be a non-empty string',
+            path: 'ownership.frameworkVersion',
+        });
+    }
+    if (!Array.isArray(value.paths)) {
+        issues.push({ message: 'must be an array', path: 'ownership.paths' });
+    }
+    else {
+        value.paths.forEach((entry, index) => {
+            const path = `ownership.paths[${index}]`;
+            if (!(0, validation_js_1.isRecord)(entry)) {
+                issues.push({ message: 'must be an object', path });
+                return;
+            }
+            if (typeof entry.path !== 'string' || !isSafeWorkspacePath(entry.path)) {
+                issues.push({
+                    message: 'must be a safe workspace-relative path',
+                    path: `${path}.path`,
+                });
+            }
+            if (!record_js_1.GENERATED_PATH_MODES.includes(entry.mode)) {
+                issues.push({
+                    message: 'must equal managed or seeded',
+                    path: `${path}.mode`,
+                });
+            }
+            if (entry.origin !== 'framework') {
+                issues.push({
+                    message: 'must equal framework',
+                    path: `${path}.origin`,
+                });
+            }
+            if (typeof entry.sha256 !== 'string' ||
+                !hash_js_1.GENERATED_CONTENT_HASH_PATTERN.test(entry.sha256)) {
+                issues.push({
+                    message: 'must be a lowercase SHA-256 digest',
+                    path: `${path}.sha256`,
+                });
+            }
+            (0, record_js_1.validateManagedJsonPointers)(entry, path, issues);
+        });
+    }
+    return (0, validation_js_1.validationResult)(value, issues);
+}
+exports.workspaceOwnershipSchema = {
+    $id: 'https://empirebuilderkit.dev/schemas/workspace-ownership-v2.json',
+    $schema: 'https://json-schema.org/draft/2020-12/schema',
+    additionalProperties: false,
+    properties: {
+        frameworkVersion: { minLength: 1, type: 'string' },
+        kind: { const: 'workspace' },
+        paths: {
+            items: {
+                additionalProperties: false,
+                properties: {
+                    managedJsonPointers: record_js_1.managedJsonPointersSchema,
+                    mode: { enum: [...record_js_1.GENERATED_PATH_MODES] },
+                    origin: { const: 'framework' },
+                    path: {
+                        minLength: 1,
+                        not: { pattern: '(^[\\\\/])|(^|[\\\\/])\\.\\.([\\\\/]|$)' },
+                        type: 'string',
+                    },
+                    sha256: { pattern: '^[a-f0-9]{64}$', type: 'string' },
+                },
+                required: ['path', 'mode', 'origin', 'sha256'],
+                type: 'object',
+            },
+            type: 'array',
+        },
+        schemaVersion: { const: exports.WORKSPACE_OWNERSHIP_SCHEMA_VERSION },
+    },
+    required: ['schemaVersion', 'kind', 'frameworkVersion', 'paths'],
+    title: 'Empire Builder Kit Workspace Ownership Record v2',
+    type: 'object',
+};
+//# sourceMappingURL=workspace-record.js.map

package/src/ownership/workspace-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-record.js","sourceRoot":"","sources":["../../../../../packages/nx/src/ownership/workspace-record.ts"],"names":[],"mappings":";;;AAiCA,4EAiEC;AAlGD,oDAK0B;AAC1B,uCAA2D;AAC3D,2CAMqB;AAER,QAAA,kCAAkC,GAAG,CAAU,CAAC;AAS7D,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,CACL,KAAK,KAAK,EAAE;QACZ,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACtB,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACvB,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,SAAgB,gCAAgC,CAC9C,KAAc;IAEd,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;SAC9D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,aAAa,KAAK,0CAAkC,EAAE,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IACE,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;QAC1C,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,EACpC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,4BAA4B;YACrC,IAAI,EAAE,4BAA4B;SACnC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACxE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACnC,MAAM,IAAI,GAAG,mBAAmB,KAAK,GAAG,CAAC;YACzC,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvE,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,wCAAwC;oBACjD,IAAI,EAAE,GAAG,IAAI,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,gCAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAyB,CAAC,EAAE,CAAC;gBACpE,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,8BAA8B;oBACvC,IAAI,EAAE,GAAG,IAAI,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,sBAAsB;oBAC/B,IAAI,EAAE,GAAG,IAAI,SAAS;iBACvB,CAAC,CAAC;YACL,CAAC;YACD,IACE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;gBAChC,CAAC,wCAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAClD,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC;oBACV,OAAO,EAAE,oCAAoC;oBAC7C,IAAI,EAAE,GAAG,IAAI,SAAS;iBACvB,CAAC,CAAC;YACL,CAAC;YACD,IAAA,uCAA2B,EAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAA,gCAAgB,EAA2B,KAAK,EAAE,MAAM,CAAC,CAAC;AACnE,CAAC;AAEY,QAAA,wBAAwB,GAAG;IACtC,GAAG,EAAE,kEAAkE;IACvE,OAAO,EAAE,8CAA8C;IACvD,oBAAoB,EAAE,KAAK;IAC3B,UAAU,EAAE;QACV,gBAAgB,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClD,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE;QAC5B,KAAK,EAAE;YACL,KAAK,EAAE;gBACL,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,mBAAmB,EAAE,qCAAyB;oBAC9C,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,gCAAoB,CAAC,EAAE;oBACzC,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE;oBAC9B,IAAI,EAAE;wBACJ,SAAS,EAAE,CAAC;wBACZ,GAAG,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE;wBAC3D,IAAI,EAAE,QAAQ;qBACf;oBACD,MAAM,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACtD;gBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;gBAC9C,IAAI,EAAE,QAAQ;aACf;YACD,IAAI,EAAE,OAAO;SACd;QACD,aAAa,EAAE,EAAE,KAAK,EAAE,0CAAkC,EAAE;KAC7D;IACD,QAAQ,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC;IAChE,KAAK,EAAE,kDAAkD;IACzD,IAAI,EAAE,QAAQ;CACN,CAAC"}

package/src/repository-policy/aurora-preflight.d.ts

@@ -0,0 +1,15 @@
+import { FOUNDATION_AURORA_ENGINE_FAMILY, FOUNDATION_AURORA_ENGINE_VERSION } from './foundation-profile.js';
+export interface AuroraProfileCapabilityReport {
+    engine: typeof FOUNDATION_AURORA_ENGINE_FAMILY;
+    engineVersion: typeof FOUNDATION_AURORA_ENGINE_VERSION;
+    ok: boolean;
+    region: string;
+}
+export declare function createAuroraProfileCapabilityReader(options: {
+    profile?: string;
+    region?: string;
+}): {
+    read: () => Promise<string[]>;
+    resolveRegion: () => Promise<string>;
+};
+export declare function evaluateAuroraProfileCapability(availableVersions: readonly string[], region: string): AuroraProfileCapabilityReport;

package/src/repository-policy/aurora-preflight.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAuroraProfileCapabilityReader = createAuroraProfileCapabilityReader;
+exports.evaluateAuroraProfileCapability = evaluateAuroraProfileCapability;
+const client_rds_1 = require("@aws-sdk/client-rds");
+const credential_providers_1 = require("@aws-sdk/credential-providers");
+const foundation_profile_js_1 = require("./foundation-profile.js");
+function createAuroraProfileCapabilityReader(options) {
+    const profile = options.profile?.trim();
+    const client = new client_rds_1.RDSClient({
+        ...(profile ? { credentials: (0, credential_providers_1.fromIni)({ profile }) } : {}),
+        ...(options.region?.trim() ? { region: options.region.trim() } : {}),
+    });
+    return {
+        read: async () => {
+            const versions = new Set();
+            let marker;
+            do {
+                const response = await client.send(new client_rds_1.DescribeOrderableDBInstanceOptionsCommand({
+                    DBInstanceClass: 'db.serverless',
+                    Engine: foundation_profile_js_1.FOUNDATION_AURORA_ENGINE_FAMILY,
+                    EngineVersion: foundation_profile_js_1.FOUNDATION_AURORA_ENGINE_VERSION,
+                    Marker: marker,
+                    Vpc: true,
+                }));
+                for (const option of response.OrderableDBInstanceOptions ?? []) {
+                    if (option.EngineVersion)
+                        versions.add(option.EngineVersion);
+                }
+                marker = response.Marker;
+            } while (marker);
+            return [...versions].sort();
+        },
+        resolveRegion: () => client.config.region(),
+    };
+}
+function evaluateAuroraProfileCapability(availableVersions, region) {
+    return {
+        engine: foundation_profile_js_1.FOUNDATION_AURORA_ENGINE_FAMILY,
+        engineVersion: foundation_profile_js_1.FOUNDATION_AURORA_ENGINE_VERSION,
+        ok: availableVersions.includes(foundation_profile_js_1.FOUNDATION_AURORA_ENGINE_VERSION),
+        region,
+    };
+}
+//# sourceMappingURL=aurora-preflight.js.map

package/src/repository-policy/aurora-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aurora-preflight.js","sourceRoot":"","sources":["../../../../../packages/nx/src/repository-policy/aurora-preflight.ts"],"names":[],"mappings":";;AAiBA,kFAmCC;AAED,0EAUC;AAhED,oDAG6B;AAC7B,wEAAwD;AACxD,mEAGiC;AASjC,SAAgB,mCAAmC,CAAC,OAGnD;IAIC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,sBAAS,CAAC;QAC3B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAA,8BAAO,EAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC,CAAC;IACH,OAAO;QACL,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;YACnC,IAAI,MAA0B,CAAC;YAC/B,GAAG,CAAC;gBACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAChC,IAAI,sDAAyC,CAAC;oBAC5C,eAAe,EAAE,eAAe;oBAChC,MAAM,EAAE,uDAA+B;oBACvC,aAAa,EAAE,wDAAgC;oBAC/C,MAAM,EAAE,MAAM;oBACd,GAAG,EAAE,IAAI;iBACV,CAAC,CACH,CAAC;gBACF,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,0BAA0B,IAAI,EAAE,EAAE,CAAC;oBAC/D,IAAI,MAAM,CAAC,aAAa;wBAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBAC/D,CAAC;gBACD,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC3B,CAAC,QAAQ,MAAM,EAAE;YACjB,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QACD,aAAa,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;KAC5C,CAAC;AACJ,CAAC;AAED,SAAgB,+BAA+B,CAC7C,iBAAoC,EACpC,MAAc;IAEd,OAAO;QACL,MAAM,EAAE,uDAA+B;QACvC,aAAa,EAAE,wDAAgC;QAC/C,EAAE,EAAE,iBAAiB,CAAC,QAAQ,CAAC,wDAAgC,CAAC;QAChE,MAAM;KACP,CAAC;AACJ,CAAC"}

package/src/repository-policy/deployment-plan.d.ts

@@ -0,0 +1,24 @@
+import type { ProductionFoundationProfile, RepositoryOperatingPolicy } from './policy.js';
+export declare const PROTECTED_DEPLOYMENT_ACTIONS: readonly ["deploy", "refresh", "remove", "unlock"];
+export declare const PROTECTED_DEPLOYMENT_STAGES: readonly ["staging", "production"];
+export type ProtectedDeploymentAction = (typeof PROTECTED_DEPLOYMENT_ACTIONS)[number];
+export type ProtectedDeploymentStage = (typeof PROTECTED_DEPLOYMENT_STAGES)[number];
+export interface DeploymentPlanProject {
+    name: string;
+    tags?: readonly string[];
+    targets?: Readonly<Record<string, unknown>>;
+}
+export interface ProtectedDeploymentPlan {
+    action: ProtectedDeploymentAction;
+    effectiveProductionProfile?: ProductionFoundationProfile;
+    foundationProject?: string;
+    orderedProjects: string[];
+    sliceProjects: string[];
+    stage: ProtectedDeploymentStage;
+}
+export declare function createProtectedDeploymentPlan(policy: RepositoryOperatingPolicy, options: {
+    action: ProtectedDeploymentAction;
+    projects: readonly DeploymentPlanProject[];
+    requestedProject?: string;
+    stage: ProtectedDeploymentStage;
+}): ProtectedDeploymentPlan;