@fabricorg/sdui-release 0.5.0 → 0.6.0

package/dist/index.js

@@ -416,7 +416,9 @@ function buildKnownActionIntents(contracts, add, grantedIntents) {
   const occurrences = /* @__PURE__ */ new Map();
   for (const contract of contracts) {
     const experience = contract.extensions?.["fabric.experience/v1"];
+    const declaredActions = new Set(contract.actions.map((action) => action.actionId));
     for (const intent of experience?.actionIntents ?? []) {
+      if (!declaredActions.has(intent.actionId)) continue;
       const shortName2 = intent.name.startsWith(`${contract.namespace}.`) ? intent.name.slice(contract.namespace.length + 1) : intent.name;
       const reference = `${contract.namespace}/${shortName2}`;
       if (grantedIntents === void 0 || grantedIntents.has(`capability://${reference}`)) {
@@ -749,18 +751,40 @@ function validateSduiRelease(input) {
   const knownViews = buildKnownViews(contracts);
   const grantedViews = buildGrantedReferences(input.grants.views, "grants.views");
   const grantedIntents = buildGrantedReferences(input.grants.intents, "grants.intents");
-  const knownIntents = buildKnownActionIntents(contracts, add, grantedIntents);
-  reportAmbiguousGrantedViews(contracts, grantedViews, add);
   const contractNamespaces = /* @__PURE__ */ new Set();
-  for (const contract of contracts) {
+  const distinctContracts = contracts.filter((contract) => {
     if (contractNamespaces.has(contract.namespace)) {
       add(
         "ambiguous_capability_reference",
         `contracts.${contract.namespace}`,
         `contract for "${contract.namespace}" is supplied more than once`
       );
+      return false;
     }
     contractNamespaces.add(contract.namespace);
+    return true;
+  });
+  const knownIntents = buildKnownActionIntents(distinctContracts, add, grantedIntents);
+  reportAmbiguousGrantedViews(distinctContracts, grantedViews, add);
+  for (const reference of grantedViews) {
+    const parsed = parseCapabilityRef(reference);
+    if (parsed && !knownViews.has(`${parsed.namespace}/${parsed.name}`)) {
+      add(
+        "unauthorized_data_ref",
+        `grants.views.${reference}`,
+        `release grants "${reference}", which no supplied capability publishes; promotion would fail to route it`
+      );
+    }
+  }
+  for (const reference of grantedIntents) {
+    const parsed = parseCapabilityRef(reference);
+    if (parsed && !knownIntents.has(`${parsed.namespace}/${parsed.name}`)) {
+      add(
+        "mutation_bypass",
+        `grants.intents.${reference}`,
+        `release grants "${reference}", which no supplied capability declares as an intent; promotion would fail to route it`
+      );
+    }
   }
   validateIntentActionDeclarations(contracts, add);
   const fragmentGrants = /* @__PURE__ */ new Map();