@empire-builder-kit/nx 1.0.0-rc.34 → 1.0.0-rc.35
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@empire-builder-kit/nx",
|
|
3
|
-
"version": "1.0.0-rc.
|
|
3
|
+
"version": "1.0.0-rc.35",
|
|
4
4
|
"description": "Nx generators, executors, and Blueprint contracts for Empire Builder Kit",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"aws",
|
|
@@ -130,7 +130,7 @@
|
|
|
130
130
|
"provenance": false
|
|
131
131
|
},
|
|
132
132
|
"dependencies": {
|
|
133
|
-
"@empire-builder-kit/runtime": "1.0.0-rc.
|
|
133
|
+
"@empire-builder-kit/runtime": "1.0.0-rc.35",
|
|
134
134
|
"@aws-sdk/client-cloudfront": "^3.700.0",
|
|
135
135
|
"@aws-sdk/client-cloudwatch": "^3.700.0",
|
|
136
136
|
"@aws-sdk/client-cloudwatch-logs": "^3.700.0",
|
|
@@ -161,5 +161,5 @@
|
|
|
161
161
|
"engines": {
|
|
162
162
|
"node": ">=22.13.0"
|
|
163
163
|
},
|
|
164
|
-
"gitHead": "
|
|
164
|
+
"gitHead": "c4aa7492179b1d492f949e64108e61d69bd71289"
|
|
165
165
|
}
|
|
@@ -64,6 +64,11 @@ function renderThinDeployVerifyCaller(profile, deliveryLane = 'protected-pair',
|
|
|
64
64
|
const trunk = deliveryLane === 'trunk';
|
|
65
65
|
if (profile === 'starter' && !trunk)
|
|
66
66
|
return '';
|
|
67
|
+
// GitHub validates every nested deploy.yml job against this caller's
|
|
68
|
+
// permissions on every event, so the ceiling must admit the managed
|
|
69
|
+
// rehearsal, which pushes its sealed receipt branch and opens the pull
|
|
70
|
+
// request with the workflow token (isolated profiles only).
|
|
71
|
+
const nestedWrite = profile !== 'starter';
|
|
67
72
|
// Trunk lane: every merged main push is a production delivery.
|
|
68
73
|
// Trunk promotion: production deploys from the develop run itself and
|
|
69
74
|
// record-main fast-forwards main afterwards, so a main push only verifies.
|
|
@@ -85,10 +90,13 @@ function renderThinDeployVerifyCaller(profile, deliveryLane = 'protected-pair',
|
|
|
85
90
|
needs.acceptance.outputs.history_only != 'true' &&
|
|
86
91
|
(needs.release-candidate.result == 'success' ||
|
|
87
92
|
(github.ref == 'refs/heads/main' && needs.release-candidate.result == 'skipped'))
|
|
93
|
+
# Ceiling for the nested deploy.yml jobs; each nested job declares its
|
|
94
|
+
# own least-privilege set. Isolated profiles admit the rehearse job's
|
|
95
|
+
# receipt push and pull request (EBK-INT-2026-080).
|
|
88
96
|
permissions:
|
|
89
97
|
actions: read
|
|
90
|
-
contents: read
|
|
91
|
-
id-token: write
|
|
98
|
+
contents: ${nestedWrite ? 'write' : 'read'}
|
|
99
|
+
id-token: write${nestedWrite ? '\n pull-requests: write' : ''}
|
|
92
100
|
uses: ./.github/workflows/deploy.yml
|
|
93
101
|
with:
|
|
94
102
|
source_branch: \${{ github.ref_name }}
|
|
@@ -2378,8 +2386,9 @@ ${indentedScript(postdeploySupplyChainBindingScript(), 10)}
|
|
|
2378
2386
|
${trunkPromotionGate}
|
|
2379
2387
|
runs-on: ubuntu-latest
|
|
2380
2388
|
environment: production
|
|
2389
|
+
# The fast-forward uses the scoped environment token, not the workflow token.
|
|
2381
2390
|
permissions:
|
|
2382
|
-
contents:
|
|
2391
|
+
contents: read
|
|
2383
2392
|
steps:
|
|
2384
2393
|
- name: Fast-forward protected main to the deployed commit
|
|
2385
2394
|
env:
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"workspace-files-thin-deploy.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/generators/preset/workspace-files-thin-deploy.ts"],"names":[],"mappings":";;;AAwGA,
|
|
1
|
+
{"version":3,"file":"workspace-files-thin-deploy.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/generators/preset/workspace-files-thin-deploy.ts"],"names":[],"mappings":";;;AAwGA,oEAmDC;AAYD,sEAcC;AAGD,sEAsBC;AAGD,0FAuBC;AAGD,oFAmBC;AAGD,0FAiFC;AAGD,8EAmCC;AAGD,gEAmFC;AAGD,gFAoEC;AAm6DD,4EAUC;AAj8ED,yDAA0D;AAE7C,QAAA,yBAAyB,GACpC,8BAAuC,CAAC;AAoC1C,iFAAiF;AACpE,QAAA,4BAA4B,GAAG,uBAAgC,CAAC;AAO7E,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,cAAc,GAAG,2BAA2B,CAAC;AACnD,MAAM,UAAU,GACd,iEAAiE,CAAC;AAEpE,SAAS,aAAa,CAAC,OAAkC;IACvD,IACE,OAAO,CAAC,sBAAsB,KAAK,iBAAiB;QACpD,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;YACtC,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,EACnC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4CAA4C,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAA0B,EAC1B,eAA2C,gBAAgB;IAE3D,OAAO,OAAO,KAAK,SAAS,IAAI,YAAY,KAAK,OAAO;QACtD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;;;;;;;;;;;;;;;;;CAiBL,CAAC;AACF,CAAC;AAED,SAAgB,4BAA4B,CAC1C,OAA0B,EAC1B,eAA2C,gBAAgB,EAC3D,yBAA2D,cAAc;IAEzE,MAAM,KAAK,GAAG,YAAY,KAAK,OAAO,CAAC;IACvC,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAC/C,qEAAqE;IACrE,oEAAoE;IACpE,uEAAuE;IACvE,4DAA4D;IAC5D,MAAM,WAAW,GAAG,OAAO,KAAK,SAAS,CAAC;IAC1C,+DAA+D;IAC/D,sEAAsE;IACtE,2EAA2E;IAC3E,MAAM,wBAAwB,GAAG,KAAK;QACpC,CAAC,CAAC,iCAAiC;QACnC,CAAC,CAAC,sBAAsB,KAAK,iBAAiB;YAC5C,CAAC,CAAC,oCAAoC;YACtC,CAAC,CAAC,yEAAyE,CAAC;IAChF,OAAO;;;;;;;;QAQD,wBAAwB;;;;;;;;;;kBAUd,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;uBACzB,WAAW,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;qBAWnD,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,MAAc;IACpD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,MAAM;SACV,IAAI,EAAE;SACN,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;SACjC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,mFAAmF;AACnF,SAAgB,6BAA6B;IAC3C,OAAO;;;;;;;;;;;;KAYJ,CAAC;AACN,CAAC;AAED,+DAA+D;AAC/D,SAAgB,6BAA6B,CAC3C,SAAiB,EACjB,eAAuB;IAEvB,OAAO;yBACgB,eAAe;UAC9B,SAAS;;;;;UAKT,SAAS;;6CAE0B,eAAe;;UAElD,SAAS;;kDAE+B,eAAe;;;aAGpD,SAAS;KACjB,CAAC;AACN,CAAC;AAED,uEAAuE;AACvE,SAAgB,uCAAuC;IACrD,OAAO;;;;;;;;;;;;;;;;;;;;;8CAqBqC,CAAC;AAC/C,CAAC;AAED,+DAA+D;AAC/D,SAAgB,oCAAoC;IAClD,OAAO;;;;;;;;;;;;;;;;;KAiBJ,CAAC;AACN,CAAC;AAED,kFAAkF;AAClF,SAAgB,uCAAuC;IACrD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4HA+EmH,CAAC;AAC7H,CAAC;AAED,kFAAkF;AAClF,SAAgB,iCAAiC;IAC/C,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wGAiC+F,CAAC;AACzG,CAAC;AAED,kFAAkF;AAClF,SAAgB,0BAA0B;IACxC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uHAiF8G,CAAC;AACxH,CAAC;AAED,kFAAkF;AAClF,SAAgB,kCAAkC;IAChD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEN,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAkC;IAClE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACtE,MAAM,cAAc,GAAG,OAAO,CAAC,sBAAsB,KAAK,iBAAiB,CAAC;IAC5E,OAAO;;;;EAIP,mBAAmB,CAAC,iBAAiB,EAAE,OAAO,CAAC,YAAY,CAAC;;;;;;;mDAOX,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY;;;;sBAK5F,iBAAiB,KAAK,SAAS;QAC7B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;;;;qBAKN;;;;;;;;;;;;;;;;;;;8BAmBsB,YAAY,CAAC,GAAG;;;;;;;;;;;;;;;;;;;;;qEAsBtC,cAAc;QACZ,CAAC,CAAC;;oFAEwE;QAC1E,CAAC,CAAC,EACN;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA+CU,UAAU,CAAC,QAAQ;;;;;gBAKnB,UAAU,CAAC,SAAS;gBACpB,UAAU,CAAC,SAAS;;0BAEV,YAAY,CAAC,IAAI;;;;;;;;;yBASlB,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA2DlB,IAAI;;;kCAGM,iBAAiB;;;;;;;;;;;;EAYjD,cAAc,CAAC,sBAAsB,uCAAuC,EAAE,EAAE,EAAE,EAAE,CAAC,GACnF,cAAc;QACZ,CAAC,CAAC;;;;;;;;;;;;;EAaN,cAAc,CAAC,sBAAsB,uCAAuC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE;QACnF,CAAC,CAAC,EACN;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAkCc,UAAU,CAAC,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAqInB,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;EA0BzC,cAAc,CAAC,uCAAuC,EAAE,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA+E/C,UAAU,CAAC,QAAQ;;;;;;;;gBAQnB,UAAU,CAAC,SAAS;;;;gBAIpB,UAAU,CAAC,SAAS;;;;;0BAKV,YAAY,CAAC,IAAI;;;;;;;;;;2BAUhB,IAAI;;gBAEf,UAAU,CAAC,gBAAgB;;;;;;;;;;;gBAW3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA2B3B,UAAU,CAAC,uBAAuB;;;;;;;;;;;;;gBAalC,UAAU,CAAC,KAAK;;;;;;;;;;;;;;;;;;;;EAoB9B,cAAc,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;gBAUhF,UAAU,CAAC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA+CzB,UAAU,CAAC,QAAQ;;;;;;;;gBAQnB,UAAU,CAAC,SAAS;;;;gBAIpB,UAAU,CAAC,SAAS;;;;;0BAKV,YAAY,CAAC,IAAI;;;;;;;;;;2BAUhB,IAAI;;gBAEf,UAAU,CAAC,gBAAgB;;;;;;;;;;gBAU3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;gBA0B3B,UAAU,CAAC,uBAAuB;;;;;;;;;;;;;;;EAehD,cAAc,CAAC,6BAA6B,CAAC,oBAAoB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;;;;gBAanF,UAAU,CAAC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA4CzB,UAAU,CAAC,QAAQ;;;;;;;;gBAQnB,UAAU,CAAC,SAAS;;;;gBAIpB,UAAU,CAAC,SAAS;;;;;0BAKV,YAAY,CAAC,IAAI;;;;;;;;;;2BAUhB,IAAI;;gBAEf,UAAU,CAAC,gBAAgB;;;;;;;;;;gBAU3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA2B3B,UAAU,CAAC,uBAAuB;;;;;;;;;;;;;;;EAehD,cAAc,CAAC,oCAAoC,EAAE,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;gBAyB5C,UAAU,CAAC,uBAAuB;;;;;;;;;;;;;;EAchD,cAAc,CAAC,6BAA6B,CAAC,qBAAqB,EAAE,0BAA0B,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;;;gBAYtF,UAAU,CAAC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAuEzB,UAAU,CAAC,QAAQ;;;;;;;;gBAQnB,UAAU,CAAC,SAAS;;;;gBAIpB,UAAU,CAAC,SAAS;;;;;0BAKV,YAAY,CAAC,IAAI;;;;;;;;;;2BAUhB,IAAI;;;gBAGf,UAAU,CAAC,gBAAgB;;;;;;;;;;;gBAW3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;gBAiB3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;gBAa3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgCzC,cAAc,CAAC,iCAAiC,EAAE,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAiC9B,IAAI;;;;;;2BAMJ,IAAI;;;;;;;;2EAQ4C,uCAAoB;;;;;;;;;EAS7F,cAAc,CAAC,6BAA6B,EAAE,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;gBAmBrC,UAAU,CAAC,uBAAuB;;;;;;;;;;;EAWhD,cAAc,CAAC,6BAA6B,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;0BAsBvE,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;EAyB5B,cAAc,CAAC,6BAA6B,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;;0BAW3E,IAAI;;;;;;;;;;;;;EAa5B,cAAc,CAAC,0BAA0B,EAAE,EAAE,EAAE,CAAC;;;;;;;;;EAShD,cAAc,CAAC,kCAAkC,EAAE,EAAE,EAAE,CAAC;;;;gBAI1C,UAAU,CAAC,cAAc;;;;;;;;;;EAUvC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAChI,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,OAAkC;IAC3D,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACnD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA8BO,UAAU,CAAC,QAAQ;;;;;;;;gBAQnB,UAAU,CAAC,SAAS;;;;gBAIpB,UAAU,CAAC,SAAS;;;;;0BAKV,YAAY,CAAC,IAAI;;;;;;;;;;2BAUhB,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBA8Bf,UAAU,CAAC,uBAAuB;;;;;;;;;;;EAWhD,cAAc,CAAC,6BAA6B,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;EAuBnG,cAAc,CAAC,6BAA6B,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;0BAU3E,IAAI;;;;gBAId,UAAU,CAAC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCxC,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,SAAS,wBAAwB,CAAC,OAAkC;IAClE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACnD,MAAM,kBAAkB,GAAG,CACzB,aAAqB,EACrB,EAAE,CAAC;gBACS,UAAU,CAAC,QAAQ;;;;;;;;gBAQnB,UAAU,CAAC,SAAS;;;;gBAIpB,UAAU,CAAC,SAAS;;;;;0BAKV,YAAY,CAAC,IAAI;;;;;;gBAM3B,aAAa;;;;2BAIF,IAAI,mBAAmB,CAAC;IACjD,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;YAgBZ,CAAC;IACX,MAAM,kBAAkB,GAAG;;;iDAGoB,CAAC;IAChD,OAAO;;;;;;;;;;EAUP,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8BlB,kBAAkB,CAAC,+DAA+D,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;gBAyBrE,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4BzC,cAAc,CAAC,uCAAuC,EAAE,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;gBAmB/C,UAAU,CAAC,gBAAgB;;;;;;;;;;gBAU3B,UAAU,CAAC,gBAAgB;;;;;;;;EAQzC,aAAa;;gBAEC,UAAU,CAAC,uBAAuB;;;;;;;;;;;;;;;EAehD,cAAc,CAAC,oCAAoC,EAAE,EAAE,EAAE,CAAC;;;;;;;EAO1D,aAAa;;gBAEC,UAAU,CAAC,uBAAuB;;;;;;;;;;;;;;EAchD,cAAc,CAAC,6BAA6B,CAAC,qBAAqB,EAAE,0BAA0B,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;;gBAWtF,UAAU,CAAC,cAAc;;;;;;;;;;;;;;;;EAgBvC,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiClB,kBAAkB,CAAC,yDAAyD,CAAC;;gBAE/D,UAAU,CAAC,gBAAgB;;;;;;;;;;gBAU3B,UAAU,CAAC,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2BzC,cAAc,CAAC,iCAAiC,EAAE,EAAE,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;2BA0B9B,IAAI;;;;;2BAKJ,IAAI;;;;;;;2EAO4C,uCAAoB;;;;;;;;EAQ7F,cAAc,CAAC,6BAA6B,EAAE,EAAE,EAAE,CAAC;EACnD,aAAa;;gBAEC,UAAU,CAAC,uBAAuB;;;;;;;;;;;EAWhD,cAAc,CAAC,6BAA6B,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;;wBAWzE,IAAI;;;;;;;;;;;;;EAa1B,cAAc,CAAC,6BAA6B,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,EAAE,EAAE,CAAC;;;;;;;;;;;0BAW3E,IAAI;;;;;;;;;EAS5B,cAAc,CAAC,kCAAkC,EAAE,EAAE,EAAE,CAAC;;;;gBAI1C,UAAU,CAAC,cAAc;;;;;;;;;;;;;;;;;;EAkBvC,kBAAkB;;;;;;;;;gDAS4B,oCAA4B;;;;;;wDAMpB,oCAA4B;;;;;;;;;;;;;;;;;CAiBnF,CAAC;AACF,CAAC;AAED,SAAgB,gCAAgC,CAC9C,OAAkC;IAElC,aAAa,CAAC,OAAO,CAAC,CAAC;IACvB,OAAO;QACL,KAAK,EAAE;YACL,CAAC,iCAAyB,CAAC,EAAE,wBAAwB,CAAC,OAAO,CAAC;SAC/D;QACD,YAAY,EAAE,CAAC,iCAAyB,CAAC;KAC1C,CAAC;AACJ,CAAC"}
|
|
@@ -246,7 +246,10 @@ deployment role, performs the non-allowlisted probe before the runner is
|
|
|
246
246
|
admitted, performs the managed-rule probe and the rate rehearsal inside the
|
|
247
247
|
same temporary allowlist admission that private smoke uses, proves the
|
|
248
248
|
admission removed, retains the sealed files as a run artifact, and opens a
|
|
249
|
-
pull request to \`develop\` carrying them.
|
|
249
|
+
pull request to \`develop\` carrying them. The \`Verify\` caller job carries
|
|
250
|
+
\`contents: write\` and \`pull-requests: write\` only as the ceiling that
|
|
251
|
+
GitHub validates nested jobs against; every nested job keeps its own
|
|
252
|
+
least-privilege permissions. Merging that pull request satisfies
|
|
250
253
|
the production Router WAF gate for the exact policy digest. Any policy change,
|
|
251
254
|
including an allowlist edit, changes the digest and requires a new rehearsal
|
|
252
255
|
after resetting both seeds. The manual path below remains for operators who
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"workspace-files-thin-docs.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/generators/preset/workspace-files-thin-docs.ts"],"names":[],"mappings":";;AAMA,
|
|
1
|
+
{"version":3,"file":"workspace-files-thin-docs.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/generators/preset/workspace-files-thin-docs.ts"],"names":[],"mappings":";;AAMA,4EAuTC;AA7TD,+DAI0C;AAE1C,SAAgB,gCAAgC,CAAC,OAMhD;IACC,MAAM,MAAM,GAAG,IAAA,iCAAsB,EAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,cAAc,GAAG,IAAA,mCAAwB,EAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3E,OAAO;QACL,WAAW,EAAE,KAAK,OAAO,CAAC,IAAI;;;;;;;kBAOhB,OAAO,CAAC,iBAAiB,yBAAyB,SAAS;;;;;CAK5E;QACG,sBAAsB,EAAE;;EAG1B,OAAO,CAAC,YAAY,KAAK,OAAO;YAC9B,CAAC,CAAC;;;;;;wEAMkE;YACpE,CAAC,CAAC;iEAEN;;;;;;;;;;;;;;;;;;;;;;;;EAyBE,OAAO,CAAC,YAAY,KAAK,OAAO;YAC9B,CAAC,CAAC;6CACuC;YACzC,CAAC,CAAC;gFAEN;EAEE,OAAO,CAAC,sBAAsB,KAAK,iBAAiB;YAClD,CAAC,CAAC;;;;;;;;;;;;CAYL;YACG,CAAC,CAAC,EACN;;;;;;;;;;;;;;;;;;;;CAoBC;QACG,qCAAqC,EAAE;;;;;;;;;;;;;;;;;;;;;IAqBvC,OAAO,CAAC,iBAAiB;EAC3B,SAAS;;;;;aAKE,OAAO,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6DxB;QACG,+BAA+B,EAAE;;;;yBAIZ,OAAO,CAAC,iBAAiB;EAChD,SAAS;;;;;;;;;;eAUI,cAAc;;CAE5B;QACG,sCAAsC,EAAE;;;;;;;gBAO5B,OAAO,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;EA2B1B,OAAO,CAAC,iBAAiB,KAAK,SAAS;YACrC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;;;;;;;;;;;;;;;;;;CAmBN,0CAA0C,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0CvD;KACE,CAAC;AACJ,CAAC"}
|