@fabricorg/sdui-release 0.7.0 → 0.7.2

package/dist/index.d.cts

@@ -139,10 +139,26 @@ interface WithheldCapability {
         name: string;
     };
 }
+/** A view no versionless reference can address, because its capability publishes it at more than one version. */
+interface UnaddressableView {
+    namespace: string;
+    reference: string;
+    versions: string[];
+}
 interface DerivedGrants {
     grants: SduiAuthorizationGrants;
     /** Capabilities deliberately left out, so an absent navigation entry is explainable. */
     withheld: WithheldCapability[];
+    /**
+     * Views left out because a grant for them could not be honoured.
+     *
+     * A capability may publish one view at two versions; the reference grammar
+     * carries no version, so a grant naming it would be refused by validation
+     * as ambiguous and could never be routed by promotion. Emitting it anyway
+     * would hand validation a grant a route promotion would never have
+     * produced, so it is reported here instead.
+     */
+    unaddressable: UnaddressableView[];
 }
 interface DeriveGrantsOptions {
     /**
@@ -190,4 +206,4 @@ declare function deriveAuthorizationGrants(contracts: readonly UsageContract[],
 declare const SDUI_DOCUMENT_JSON_SCHEMA: PortableJsonSchema;
 declare const SDUI_RELEASE_JSON_SCHEMA: PortableJsonSchema;
 
-export { type ActorEntitlements, type DerivedGrants, ResolvedSduiComponentPack, SDUI_DOCUMENT_JSON_SCHEMA, SDUI_RELEASE_JSON_SCHEMA, SduiAuthorizationGrants, type SduiChannel, type SduiChannelCheck, type SduiChannelConformanceResult, type SduiChannelConformanceSubject, type SduiChannelConsumptionResult, SduiComponentPack, SduiDocument, SduiFragment, SduiRelease, SduiTokenSet, SduiValidationInput, SduiValidationResult, type WithheldCapability, assertSduiAuthorizationGrants, assertSduiComponentPack, assertSduiDocument, assertSduiFragment, assertSduiRelease, assertSduiReleaseIntegrity, assertSduiReleaseValid, assertSduiTokenSet, computeReleaseDigest, createSduiChannel, deriveAuthorizationGrants, parseCapabilityRef, runSduiChannelChecks, sduiChannelChecks, validateSduiRelease };
+export { type ActorEntitlements, type DerivedGrants, ResolvedSduiComponentPack, SDUI_DOCUMENT_JSON_SCHEMA, SDUI_RELEASE_JSON_SCHEMA, SduiAuthorizationGrants, type SduiChannel, type SduiChannelCheck, type SduiChannelConformanceResult, type SduiChannelConformanceSubject, type SduiChannelConsumptionResult, SduiComponentPack, SduiDocument, SduiFragment, SduiRelease, SduiTokenSet, SduiValidationInput, SduiValidationResult, type UnaddressableView, type WithheldCapability, assertSduiAuthorizationGrants, assertSduiComponentPack, assertSduiDocument, assertSduiFragment, assertSduiRelease, assertSduiReleaseIntegrity, assertSduiReleaseValid, assertSduiTokenSet, computeReleaseDigest, createSduiChannel, deriveAuthorizationGrants, parseCapabilityRef, runSduiChannelChecks, sduiChannelChecks, validateSduiRelease };

package/dist/index.d.ts

@@ -139,10 +139,26 @@ interface WithheldCapability {
         name: string;
     };
 }
+/** A view no versionless reference can address, because its capability publishes it at more than one version. */
+interface UnaddressableView {
+    namespace: string;
+    reference: string;
+    versions: string[];
+}
 interface DerivedGrants {
     grants: SduiAuthorizationGrants;
     /** Capabilities deliberately left out, so an absent navigation entry is explainable. */
     withheld: WithheldCapability[];
+    /**
+     * Views left out because a grant for them could not be honoured.
+     *
+     * A capability may publish one view at two versions; the reference grammar
+     * carries no version, so a grant naming it would be refused by validation
+     * as ambiguous and could never be routed by promotion. Emitting it anyway
+     * would hand validation a grant a route promotion would never have
+     * produced, so it is reported here instead.
+     */
+    unaddressable: UnaddressableView[];
 }
 interface DeriveGrantsOptions {
     /**
@@ -190,4 +206,4 @@ declare function deriveAuthorizationGrants(contracts: readonly UsageContract[],
 declare const SDUI_DOCUMENT_JSON_SCHEMA: PortableJsonSchema;
 declare const SDUI_RELEASE_JSON_SCHEMA: PortableJsonSchema;
 
-export { type ActorEntitlements, type DerivedGrants, ResolvedSduiComponentPack, SDUI_DOCUMENT_JSON_SCHEMA, SDUI_RELEASE_JSON_SCHEMA, SduiAuthorizationGrants, type SduiChannel, type SduiChannelCheck, type SduiChannelConformanceResult, type SduiChannelConformanceSubject, type SduiChannelConsumptionResult, SduiComponentPack, SduiDocument, SduiFragment, SduiRelease, SduiTokenSet, SduiValidationInput, SduiValidationResult, type WithheldCapability, assertSduiAuthorizationGrants, assertSduiComponentPack, assertSduiDocument, assertSduiFragment, assertSduiRelease, assertSduiReleaseIntegrity, assertSduiReleaseValid, assertSduiTokenSet, computeReleaseDigest, createSduiChannel, deriveAuthorizationGrants, parseCapabilityRef, runSduiChannelChecks, sduiChannelChecks, validateSduiRelease };
+export { type ActorEntitlements, type DerivedGrants, ResolvedSduiComponentPack, SDUI_DOCUMENT_JSON_SCHEMA, SDUI_RELEASE_JSON_SCHEMA, SduiAuthorizationGrants, type SduiChannel, type SduiChannelCheck, type SduiChannelConformanceResult, type SduiChannelConformanceSubject, type SduiChannelConsumptionResult, SduiComponentPack, SduiDocument, SduiFragment, SduiRelease, SduiTokenSet, SduiValidationInput, SduiValidationResult, type UnaddressableView, type WithheldCapability, assertSduiAuthorizationGrants, assertSduiComponentPack, assertSduiDocument, assertSduiFragment, assertSduiRelease, assertSduiReleaseIntegrity, assertSduiReleaseValid, assertSduiTokenSet, computeReleaseDigest, createSduiChannel, deriveAuthorizationGrants, parseCapabilityRef, runSduiChannelChecks, sduiChannelChecks, validateSduiRelease };

package/dist/index.js

@@ -1080,6 +1080,7 @@ function deriveAuthorizationGrants(contracts, held, options = {}) {
   const views = [];
   const intents = [];
   const withheld = [];
+  const unaddressable = [];
   for (const contract of contracts) {
     if (undeclared === "withhold" && !declaresAnyRequirement(contract)) {
       withheld.push({ namespace: contract.namespace, missing: { kind: "permission", name: "(none declared)" } });
@@ -1090,8 +1091,16 @@ function deriveAuthorizationGrants(contracts, held, options = {}) {
       withheld.push({ namespace: contract.namespace, missing });
       continue;
     }
+    const versionsByReference = /* @__PURE__ */ new Map();
     for (const view of contract.views) {
       const reference = `capability://${contract.namespace}/${shortName(view.name, contract.namespace, "/")}`;
+      versionsByReference.set(reference, /* @__PURE__ */ new Set([...versionsByReference.get(reference) ?? [], String(view.version)]));
+    }
+    for (const [reference, versions] of versionsByReference) {
+      if (versions.size > 1) {
+        unaddressable.push({ namespace: contract.namespace, reference, versions: [...versions].sort() });
+        continue;
+      }
       if (!bound || bound.views.has(reference)) views.push(reference);
     }
     const declaredActions = new Set(contract.actions.map((action) => action.actionId));
@@ -1103,7 +1112,8 @@ function deriveAuthorizationGrants(contracts, held, options = {}) {
   }
   return {
     grants: { views: [...new Set(views)].sort(), intents: [...new Set(intents)].sort() },
-    withheld: withheld.sort((left, right) => left.namespace < right.namespace ? -1 : left.namespace > right.namespace ? 1 : 0)
+    withheld: withheld.sort((left, right) => left.namespace < right.namespace ? -1 : left.namespace > right.namespace ? 1 : 0),
+    unaddressable: unaddressable.sort((left, right) => left.reference < right.reference ? -1 : left.reference > right.reference ? 1 : 0)
   };
 }
 function declaresAnyRequirement(contract) {