@forge/manifest 8.9.0-next.9 → 9.0.0-next.13

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # @forge/manifest
 
+## 9.0.0-next.13
+
+### Major Changes
+
+- 2d5a0e6: Add lint rule to check scopes for remote apps with auth enabled
+
+### Patch Changes
+
+- 99739ec: Update manifest definitions
+
+## 8.9.0-next.12
+
+### Minor Changes
+
+- 8c34ca3: Changed manifest to allow egress objects to be a list of string, egress objects containing at least the 'address' field, or a remote reference
+
+## 8.9.0-next.11
+
+### Patch Changes
+
+- 0dfb15d: Revert CustomUITunnellingResourceHandler change
+
+## 8.9.0-next.10
+
+### Patch Changes
+
+- b51be39: allow app developer to specify function memory allocation
+
 ## 8.9.0-next.9
 
 ### Patch Changes

package/out/processor/full-validation-processor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"full-validation-processor.d.ts","sourceRoot":"","sources":["../../src/processor/full-validation-processor.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAQpD,qBAAa,uBAAwB,SAAQ,2BAA2B,CAAC,cAAc,CAAC;;CA0BvF"}
+{"version":3,"file":"full-validation-processor.d.ts","sourceRoot":"","sources":["../../src/processor/full-validation-processor.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AASpD,qBAAa,uBAAwB,SAAQ,2BAA2B,CAAC,cAAc,CAAC;;CA2BvF"}

package/out/processor/full-validation-processor.js

@@ -11,6 +11,7 @@ const jql_function_validator_1 = require("../validators/jql-function-validator")
 const app_features_validator_1 = require("../validators/app-features-validator");
 const data_classification_validator_1 = require("../validators/data-classification-validator");
 const remote_regions_validator_1 = require("../validators/remote-regions-validator");
+const remote_auth_scopes_validator_1 = require("../validators/remote-auth-scopes-validator");
 const runtime_version_validator_1 = require("../validators/runtime-version-validator");
 class FullValidationProcessor extends abstract_validation_processor_1.AbstractValidationProcessor {
     constructor() {
@@ -35,6 +36,7 @@ class FullValidationProcessor extends abstract_validation_processor_1.AbstractVa
             new data_classification_validator_1.DataClassificationValidator(),
             new validators_1.TranslationsValidator(),
             new remote_regions_validator_1.RemoteRegionsValidator(),
+            new remote_auth_scopes_validator_1.RemoteAuthScopesValidator(),
             new runtime_version_validator_1.RuntimeVersionValidator()
         ]);
     }

package/out/processor/remote-compute-validation-processor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote-compute-validation-processor.d.ts","sourceRoot":"","sources":["../../src/processor/remote-compute-validation-processor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAIpD,qBAAa,gCAAiC,SAAQ,2BAA2B,CAAC,cAAc,CAAC;;CAUhG"}
+{"version":3,"file":"remote-compute-validation-processor.d.ts","sourceRoot":"","sources":["../../src/processor/remote-compute-validation-processor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAKpD,qBAAa,gCAAiC,SAAQ,2BAA2B,CAAC,cAAc,CAAC;;CAWhG"}

package/out/processor/remote-compute-validation-processor.js

@@ -6,6 +6,7 @@ const validators_1 = require("../validators");
 const abstract_validation_processor_1 = require("./abstract-validation-processor");
 const FULL_SCHEMA = tslib_1.__importStar(require("../schema/manifest-schema.json"));
 const remote_regions_validator_1 = require("../validators/remote-regions-validator");
+const remote_auth_scopes_validator_1 = require("../validators/remote-auth-scopes-validator");
 class RemoteComputeValidationProcessor extends abstract_validation_processor_1.AbstractValidationProcessor {
     constructor() {
         super([
@@ -13,6 +14,7 @@ class RemoteComputeValidationProcessor extends abstract_validation_processor_1.A
             new validators_1.YamlValidator(),
             new validators_1.SchemaValidator(FULL_SCHEMA),
             new remote_regions_validator_1.RemoteRegionsValidator(),
+            new remote_auth_scopes_validator_1.RemoteAuthScopesValidator(),
             new validators_1.ModulesValidator()
         ]);
     }

package/out/schema/basic-manifest-schema.json

@@ -45,6 +45,11 @@
                                 "x86_64",
                                 "arm64"
                             ]
+                        },
+                        "memoryMB": {
+                            "description": "The default amount of memory available to all functions at runtime. Increasing the function memory also increases its CPU allocation. You can configure memory between 128 MB and 512 MB in 1-MB increments. The default value is 512 MB.",
+                            "title": "memoryMB",
+                            "type": "number"
                         }
                     },
                     "title": "runtime",

package/out/schema/basic-manifest.d.ts

@@ -25,6 +25,10 @@ export type Name = 'sandbox' | 'nodejs18.x' | 'nodejs20.x' | 'nodejs22.x';
  * Lambda architecture, its value can be either 'x86_64' or 'arm64'. Default value is 'x86_64'.
  */
 export type Architecture = 'x86_64' | 'arm64';
+/**
+ * The default amount of memory available to all functions at runtime. Increasing the function memory also increases its CPU allocation. You can configure memory between 128 MB and 512 MB in 1-MB increments. The default value is 512 MB.
+ */
+export type MemoryMB = number;
 /**
  * This property is deprecated.
  */
@@ -211,6 +215,7 @@ export interface Runtime {
   snapshots?: Snapshots;
   name: Name;
   architecture?: Architecture;
+  memoryMB?: MemoryMB;
 }
 /**
  * Options related to paid app licensing

package/out/schema/manifest-schema.json

@@ -45,6 +45,11 @@
                                 "x86_64",
                                 "arm64"
                             ]
+                        },
+                        "memoryMB": {
+                            "description": "The default amount of memory available to all functions at runtime. Increasing the function memory also increases its CPU allocation. You can configure memory between 128 MB and 512 MB in 1-MB increments. The default value is 512 MB.",
+                            "title": "memoryMB",
+                            "type": "number"
                         }
                     },
                     "title": "runtime",
@@ -26427,6 +26432,9 @@
                                                 "type": "string",
                                                 "maxLength": 1000
                                             },
+                                            {
+                                                "$ref": "#/definitions/EgressPermission"
+                                            },
                                             {
                                                 "type": "object",
                                                 "description": "References a Remote",
@@ -26455,6 +26463,9 @@
                                                 "type": "string",
                                                 "maxLength": 1000
                                             },
+                                            {
+                                                "$ref": "#/definitions/EgressPermission"
+                                            },
                                             {
                                                 "type": "object",
                                                 "description": "References a Remote",
@@ -26480,8 +26491,15 @@
                         },
                         "fonts": {
                             "items": {
-                                "type": "string",
-                                "maxLength": 1000
+                                "oneOf": [
+                                    {
+                                        "type": "string",
+                                        "maxLength": 1000
+                                    },
+                                    {
+                                        "$ref": "#/definitions/EgressPermission"
+                                    }
+                                ]
                             },
                             "title": "fonts",
                             "type": "array",
@@ -26489,8 +26507,15 @@
                         },
                         "frames": {
                             "items": {
-                                "type": "string",
-                                "maxLength": 1000
+                                "oneOf": [
+                                    {
+                                        "type": "string",
+                                        "maxLength": 1000
+                                    },
+                                    {
+                                        "$ref": "#/definitions/EgressPermission"
+                                    }
+                                ]
                             },
                             "title": "frames",
                             "type": "array",
@@ -26498,8 +26523,15 @@
                         },
                         "navigation": {
                             "items": {
-                                "type": "string",
-                                "maxLength": 1000
+                                "oneOf": [
+                                    {
+                                        "type": "string",
+                                        "maxLength": 1000
+                                    },
+                                    {
+                                        "$ref": "#/definitions/EgressPermission"
+                                    }
+                                ]
                             },
                             "title": "navigation",
                             "type": "array",
@@ -26507,8 +26539,15 @@
                         },
                         "images": {
                             "items": {
-                                "type": "string",
-                                "maxLength": 1000
+                                "oneOf": [
+                                    {
+                                        "type": "string",
+                                        "maxLength": 1000
+                                    },
+                                    {
+                                        "$ref": "#/definitions/EgressPermission"
+                                    }
+                                ]
                             },
                             "title": "images",
                             "type": "array",
@@ -26516,8 +26555,15 @@
                         },
                         "media": {
                             "items": {
-                                "type": "string",
-                                "maxLength": 1000
+                                "oneOf": [
+                                    {
+                                        "type": "string",
+                                        "maxLength": 1000
+                                    },
+                                    {
+                                        "$ref": "#/definitions/EgressPermission"
+                                    }
+                                ]
                             },
                             "title": "media",
                             "type": "array",
@@ -26525,8 +26571,15 @@
                         },
                         "scripts": {
                             "items": {
-                                "type": "string",
-                                "maxLength": 1000
+                                "oneOf": [
+                                    {
+                                        "type": "string",
+                                        "maxLength": 1000
+                                    },
+                                    {
+                                        "$ref": "#/definitions/EgressPermission"
+                                    }
+                                ]
                             },
                             "title": "scripts",
                             "type": "array",
@@ -26534,8 +26587,15 @@
                         },
                         "styles": {
                             "items": {
-                                "type": "string",
-                                "maxLength": 1000
+                                "oneOf": [
+                                    {
+                                        "type": "string",
+                                        "maxLength": 1000
+                                    },
+                                    {
+                                        "$ref": "#/definitions/EgressPermission"
+                                    }
+                                ]
                             },
                             "title": "styles",
                             "type": "array",
@@ -26846,6 +26906,31 @@
             "type": "string",
             "pattern": "^[^\\s]+$"
         },
+        "EgressPermission": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "address"
+            ],
+            "properties": {
+                "address": {
+                    "type": "string",
+                    "description": "The URL for external egress",
+                    "maxLength": 1000
+                },
+                "category": {
+                    "type": "string",
+                    "description": "The category of egress, e.g. analytics",
+                    "enum": [
+                        "analytics"
+                    ]
+                },
+                "inScopeEUD": {
+                    "type": "boolean",
+                    "description": "Weather or not any user data is in egressed via this address"
+                }
+            }
+        },
         "AuthProviderPredefined": {
             "type": "object",
             "additionalProperties": false,

package/out/schema/manifest.d.ts

@@ -25,6 +25,10 @@ export type Name = 'sandbox' | 'nodejs18.x' | 'nodejs20.x' | 'nodejs22.x';
  * Lambda architecture, its value can be either 'x86_64' or 'arm64'. Default value is 'x86_64'.
  */
 export type Architecture = 'x86_64' | 'arm64';
+/**
+ * The default amount of memory available to all functions at runtime. Increasing the function memory also increases its CPU allocation. You can configure memory between 128 MB and 512 MB in 1-MB increments. The default value is 512 MB.
+ */
+export type MemoryMB = number;
 /**
  * This property is deprecated.
  */
@@ -175,7 +179,7 @@ export type TimeoutSeconds = number;
 /**
  * The amount of memory available to this function at runtime. Increasing the function memory also increases its CPU allocation. You can configure memory between 128 MB and 512 MB in 1-MB increments. The default value is 512 MB.
  */
-export type MemoryMB = number;
+export type MemoryMB1 = number;
 /**
  * Name of the key of the function that will handle this action.
  */
@@ -649,15 +653,15 @@ export type Function7 = string;
 export type Scopes = string[];
 export type Scripts = string[];
 export type Styles = 'unsafe-inline'[];
-export type Backend = (string | Remote)[];
-export type Client = (string | Remote1)[];
-export type Fonts = string[];
-export type Frames = string[];
-export type Navigation = string[];
-export type Images = string[];
-export type Media = string[];
-export type Scripts1 = string[];
-export type Styles1 = string[];
+export type Backend = (string | EgressPermission | Remote)[];
+export type Client = (string | EgressPermission | Remote1)[];
+export type Fonts = (string | EgressPermission)[];
+export type Frames = (string | EgressPermission)[];
+export type Navigation = (string | EgressPermission)[];
+export type Images = (string | EgressPermission)[];
+export type Media = (string | EgressPermission)[];
+export type Scripts1 = (string | EgressPermission)[];
+export type Styles1 = (string | EgressPermission)[];
 export type Resources = HostedResourcesSchema[];
 export type Remotes = RemotesSchema[];
 export type BearerMethodSchema =
@@ -865,6 +869,7 @@ export interface Runtime {
   snapshots?: Snapshots;
   name: Name;
   architecture?: Architecture;
+  memoryMB?: MemoryMB;
 }
 /**
  * Options related to paid app licensing
@@ -12200,7 +12205,7 @@ export interface ExternalAuthFunctionProvider {
  * Function Runtime configuration
  */
 export interface Runtime1 {
-  memoryMB?: MemoryMB;
+  memoryMB?: MemoryMB1;
 }
 export interface ActionInput {
   title: string;
@@ -60969,6 +60974,20 @@ export interface Fetch {
   backend?: Backend;
   client?: Client;
 }
+export interface EgressPermission {
+  /**
+   * The URL for external egress
+   */
+  address: string;
+  /**
+   * The category of egress, e.g. analytics
+   */
+  category?: 'analytics';
+  /**
+   * Weather or not any user data is in egressed via this address
+   */
+  inScopeEUD?: boolean;
+}
 /**
  * References a Remote
  */

package/out/text/errors.d.ts

@@ -158,6 +158,7 @@ export declare const errors: {
         };
         remotes: {
             missingRemotesStorageInScopeEUD: (key: string) => string;
+            missingAppScopesForRemoteAuth: () => string;
         };
         storage: {
             entities: {

package/out/text/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/text/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAG1C,eAAO,MAAM,MAAM;8BACS,MAAM,KAAG,MAAM;2BACpB,MAAM;yBAEN,MAAM,GAAG,SAAS,QAAQ,MAAM,EAAE,UAAU,MAAM,GAAG,SAAS,KAAG,MAAM;;uBAO3E,MAAM,EAAE,EAAE,GAAG,SAAS,KAAG,MAAM;4BAI1B,MAAM,EAAE,KAAG,MAAM;mCACV,MAAM,SAAS,MAAM,mBAAmB,MAAM,KAAG,MAAM;mDAIvC,MAAM,KAAG,MAAM;4BAEtC,MAAM,EAAE,GAAG,SAAS,KAAG,MAAM;+CAIV,MAAM;6CACR,MAAM,gBAAgB,MAAM;qCAEpC,MAAM;2CACA,MAAM;6CACJ,MAAM;;;qCAGd,MAAM,SAAS,MAAM,KAAG,MAAM;4CAEvB,MAAM,SAAS,MAAM,KAAG,MAAM;oDAEtB,MAAM,OAAO,MAAM,KAAG,MAAM;kDAE9B,MAAM,OAAO,MAAM,KAAG,MAAM;wCAEtC,MAAM,SAAS,MAAM,EAAE,KAAG,MAAM;2CAI7B,MAAM,KAAG,MAAM;0CAEhB,MAAM,SAAS,MAAM,KAAG,MAAM;+CAEzB,MAAM,KAAG,MAAM;;;uCAIvB,MAAM,KAAG,MAAM;0CACZ,MAAM,KAAG,MAAM;;;gCAGzB,MAAM,KAAG,MAAM;6BACpB,MAAM;+BACJ,MAAM;iCACF,MAAM,KAAG,MAAM;yCACP,MAAM,eAAe,MAAM,KAAG,MAAM;yCAEpC,MAAM,eAAe,MAAM,KAAG,MAAM;yCAEpC,MAAM,eAAe,MAAM,KAAG,MAAM;oCAEzC,MAAM;6CACG,MAAM,KAAG,MAAM;0EAEc,MAAM,KAAG,MAAM;4DAE7B,MAAM,KAAG,MAAM;6DAEd,MAAM,KAAG,MAAM;;yCAGrC,MAAM,KAAG,MAAM;iCAEvB,MAAM,KAAG,MAAM;4CACJ,MAAM,gBAAgB,MAAM,KAAG,MAAM;sCAE3C,MAAM,gBAAgB,MAAM,gBAAgB,MAAM,KAAG,MAAM;;;wDAIzC,MAAM,qBAAqB,MAAM,KAAG,MAAM;4CAEtD,MAAM,qBAAqB,MAAM,KAAG,MAAM;;;yCAI7C,MAAM,aAAa,MAAM,QAAQ,MAAM,EAAE,KAAG,MAAM;2CAIhD,MAAM,aAAa,MAAM,QAAQ,MAAM,EAAE,KAAG,MAAM;sDAEvC,MAAM,QAAQ,MAAM,EAAE,KAAG,MAAM;8DAEvB,MAAM,aAAa,MAAM,cAAc,MAAM,KAAG,MAAM;6EAEvC,MAAM,qBAAqB,MAAM,KAAG,MAAM;yEAE9C,MAAM,qBAAqB,MAAM,KAAG,MAAM;;wCAG/E,MAAM;sDACU,MAAM,KAAG,MAAM;iDAEpB,MAAM,KAAG,MAAM;2DAEL,MAAM,KAAG,MAAM;0CAEhC,MAAM,OAAO,MAAM,KAAG,MAAM;yDAEb,MAAM,KAAG,MAAM;uEAED,MAAM,KAAG,MAAM;;;sDAIhC,MAAM,WAAW,MAAM,SAAS,MAAM,KAAG,MAAM;6CAExD,MAAM,KAAG,MAAM;;;;mCAKvB,MAAM,KAAG,MAAM;mCAEf,MAAM,KAAG,MAAM;;;qCAIb,MAAM,KAAG,MAAM;;;0CAIV,MAAM,KAAG,MAAM;;;4CAIb,MAAM,EAAE,KAAG,MAAM;;;wCAIrB,cAAc,OAAO,MAAM,UAAU,MAAM,EAAE,KAAG,MAAM;;;mCAI3D,MAAM,EAAE,KAAG,MAAM;;;4DAIQ,MAAM,KAAG,MAAM;qCAEtC,MAAM,KAAG,MAAM;2CAET,MAAM,KAAG,MAAM;;;oCAGtB,MAAM,KAAG,MAAM;;oCAEjB,MAAM,SAAS,MAAM,KAAG,MAAM;qCAI7B,MAAM,YAAY,MAAM,KAAG,MAAM;;;;;iCAQrC,MAAM,KAAG,MAAM;;;;8DAKc,MAAM;8DAEJ,MAAM,qBAAqB,MAAM,KAAG,MAAM;kDAEtD,MAAM,qBAAqB,MAAM,KAAG,MAAM;;;wDAIpC,MAAM,KAAG,MAAM;yCAE9B,MAAM,KAAG,MAAM;;;oDAGJ,MAAM,aAAa,MAAM,KAAG,MAAM;yCAE7C,MAAM,KAAG,MAAM;0CACd,MAAM,KAAG,MAAM;;;kCAIvB,MAAM,KAAG,MAAM;qCAEd,MAAM;iCACV,MAAM;;;;kCAID,MAAM,OAAO,MAAM,KAAG,MAAM;iCAE7B,MAAM,OAAO,MAAM,KAAG,MAAM;oCAEzB,MAAM,OAAO,MAAM,KAAG,MAAM;gDAEhB,MAAM,KAAG,MAAM;uCAExB,MAAM,KAAG,MAAM;+BACvB,MAAM,OAAO,MAAM,KAAG,MAAM;;;;;;;;kCASzB,MAAM,UAAU,MAAM,KAAG,MAAM;gCAEjC,MAAM,KAAG,MAAM;2CAEJ,MAAM,eAAe,MAAM,KAAG,MAAM;kCAE7C,MAAM,UAAU,MAAM,KAAG,MAAM;;;uCAI5B,MAAM;uCAEJ,MAAM,KAAG,MAAM;qCAEnB,MAAM;;6CAGA,MAAM;;;mDAIE,MAAM,KAAG,MAAM;;;;4CAKxB,MAAM,SAAS,MAAM,KAAG,MAAM;4CAE9B,MAAM,KAAG,MAAM;4CACf,MAAM,SAAS,MAAM,KAAG,MAAM;+CAE3B,MAAM,aAAa,MAAM,SAAS,MAAM,KAAG,MAAM;yCAEvD,MAAM,SAAS,MAAM,KAAG,MAAM;4CAE3B,MAAM,SAAS,MAAM,KAAG,MAAM;gDAE1B,MAAM,aAAa,MAAM,KAAG,MAAM;4CAEtC,MAAM,SAAS,MAAM,KAAG,MAAM;;;2CAI7B,MAAM;;;gCAInB,MAAM;;;;yCAIK,OAAO,CAAC,MAAM,CAAC,KAAG,MAAM;;;;0DAaL,wBAAwB,KAAG,MAAM;sDAErC,wBAAwB,KAAG,MAAM;kDAErC,wBAAwB,QAAQ,MAAM,KAAG,MAAM;mDAE9C,wBAAwB,KAAG,MAAM;mCAEjD,MAAM,KAAG,MAAM;;oDAEE,MAAM,aAAa,MAAM,KAAG,MAAM;4CAE1C,MAAM,sBAAsB,wBAAwB,YAAY,MAAM;;CAG7G,CAAC;AAEF,oBAAY,UAAU;IACpB,eAAe,2BAA2B;IAC1C,eAAe,wBAAwB;IACvC,WAAW,4BAA4B;IACvC,WAAW,+BAA+B;IAC1C,aAAa,8BAA8B;IAC3C,OAAO,0BAA0B;IACjC,cAAc,kCAAkC;IAChD,SAAS,4BAA4B;IACrC,SAAS,4BAA4B;IACrC,UAAU,wBAAwB;IAClC,GAAG,8BAA8B;IACjC,eAAe,0BAA0B;CAC1C"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/text/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAG1C,eAAO,MAAM,MAAM;8BACS,MAAM,KAAG,MAAM;2BACpB,MAAM;yBAEN,MAAM,GAAG,SAAS,QAAQ,MAAM,EAAE,UAAU,MAAM,GAAG,SAAS,KAAG,MAAM;;uBAO3E,MAAM,EAAE,EAAE,GAAG,SAAS,KAAG,MAAM;4BAI1B,MAAM,EAAE,KAAG,MAAM;mCACV,MAAM,SAAS,MAAM,mBAAmB,MAAM,KAAG,MAAM;mDAIvC,MAAM,KAAG,MAAM;4BAEtC,MAAM,EAAE,GAAG,SAAS,KAAG,MAAM;+CAIV,MAAM;6CACR,MAAM,gBAAgB,MAAM;qCAEpC,MAAM;2CACA,MAAM;6CACJ,MAAM;;;qCAGd,MAAM,SAAS,MAAM,KAAG,MAAM;4CAEvB,MAAM,SAAS,MAAM,KAAG,MAAM;oDAEtB,MAAM,OAAO,MAAM,KAAG,MAAM;kDAE9B,MAAM,OAAO,MAAM,KAAG,MAAM;wCAEtC,MAAM,SAAS,MAAM,EAAE,KAAG,MAAM;2CAI7B,MAAM,KAAG,MAAM;0CAEhB,MAAM,SAAS,MAAM,KAAG,MAAM;+CAEzB,MAAM,KAAG,MAAM;;;uCAIvB,MAAM,KAAG,MAAM;0CACZ,MAAM,KAAG,MAAM;;;gCAGzB,MAAM,KAAG,MAAM;6BACpB,MAAM;+BACJ,MAAM;iCACF,MAAM,KAAG,MAAM;yCACP,MAAM,eAAe,MAAM,KAAG,MAAM;yCAEpC,MAAM,eAAe,MAAM,KAAG,MAAM;yCAEpC,MAAM,eAAe,MAAM,KAAG,MAAM;oCAEzC,MAAM;6CACG,MAAM,KAAG,MAAM;0EAEc,MAAM,KAAG,MAAM;4DAE7B,MAAM,KAAG,MAAM;6DAEd,MAAM,KAAG,MAAM;;yCAGrC,MAAM,KAAG,MAAM;iCAEvB,MAAM,KAAG,MAAM;4CACJ,MAAM,gBAAgB,MAAM,KAAG,MAAM;sCAE3C,MAAM,gBAAgB,MAAM,gBAAgB,MAAM,KAAG,MAAM;;;wDAIzC,MAAM,qBAAqB,MAAM,KAAG,MAAM;4CAEtD,MAAM,qBAAqB,MAAM,KAAG,MAAM;;;yCAI7C,MAAM,aAAa,MAAM,QAAQ,MAAM,EAAE,KAAG,MAAM;2CAIhD,MAAM,aAAa,MAAM,QAAQ,MAAM,EAAE,KAAG,MAAM;sDAEvC,MAAM,QAAQ,MAAM,EAAE,KAAG,MAAM;8DAEvB,MAAM,aAAa,MAAM,cAAc,MAAM,KAAG,MAAM;6EAEvC,MAAM,qBAAqB,MAAM,KAAG,MAAM;yEAE9C,MAAM,qBAAqB,MAAM,KAAG,MAAM;;wCAG/E,MAAM;sDACU,MAAM,KAAG,MAAM;iDAEpB,MAAM,KAAG,MAAM;2DAEL,MAAM,KAAG,MAAM;0CAEhC,MAAM,OAAO,MAAM,KAAG,MAAM;yDAEb,MAAM,KAAG,MAAM;uEAED,MAAM,KAAG,MAAM;;;sDAIhC,MAAM,WAAW,MAAM,SAAS,MAAM,KAAG,MAAM;6CAExD,MAAM,KAAG,MAAM;;;;mCAKvB,MAAM,KAAG,MAAM;mCAEf,MAAM,KAAG,MAAM;;;qCAIb,MAAM,KAAG,MAAM;;;0CAIV,MAAM,KAAG,MAAM;;;4CAIb,MAAM,EAAE,KAAG,MAAM;;;wCAIrB,cAAc,OAAO,MAAM,UAAU,MAAM,EAAE,KAAG,MAAM;;;mCAI3D,MAAM,EAAE,KAAG,MAAM;;;4DAIQ,MAAM,KAAG,MAAM;qCAEtC,MAAM,KAAG,MAAM;2CAET,MAAM,KAAG,MAAM;;;oCAGtB,MAAM,KAAG,MAAM;;oCAEjB,MAAM,SAAS,MAAM,KAAG,MAAM;qCAI7B,MAAM,YAAY,MAAM,KAAG,MAAM;;;;;iCAQrC,MAAM,KAAG,MAAM;;;;8DAKc,MAAM;8DAEJ,MAAM,qBAAqB,MAAM,KAAG,MAAM;kDAEtD,MAAM,qBAAqB,MAAM,KAAG,MAAM;;;wDAIpC,MAAM,KAAG,MAAM;yCAE9B,MAAM,KAAG,MAAM;;;oDAGJ,MAAM,aAAa,MAAM,KAAG,MAAM;yCAE7C,MAAM,KAAG,MAAM;0CACd,MAAM,KAAG,MAAM;;;kCAIvB,MAAM,KAAG,MAAM;qCAEd,MAAM;iCACV,MAAM;;;;kCAID,MAAM,OAAO,MAAM,KAAG,MAAM;iCAE7B,MAAM,OAAO,MAAM,KAAG,MAAM;oCAEzB,MAAM,OAAO,MAAM,KAAG,MAAM;gDAEhB,MAAM,KAAG,MAAM;uCAExB,MAAM,KAAG,MAAM;+BACvB,MAAM,OAAO,MAAM,KAAG,MAAM;;;;;;;;kCASzB,MAAM,UAAU,MAAM,KAAG,MAAM;gCAEjC,MAAM,KAAG,MAAM;2CAEJ,MAAM,eAAe,MAAM,KAAG,MAAM;kCAE7C,MAAM,UAAU,MAAM,KAAG,MAAM;;;uCAI5B,MAAM;uCAEJ,MAAM,KAAG,MAAM;qCAEnB,MAAM;;6CAGA,MAAM;;;mDAIE,MAAM,KAAG,MAAM;iDAEnB,MAAM;;;;4CAKX,MAAM,SAAS,MAAM,KAAG,MAAM;4CAE9B,MAAM,KAAG,MAAM;4CACf,MAAM,SAAS,MAAM,KAAG,MAAM;+CAE3B,MAAM,aAAa,MAAM,SAAS,MAAM,KAAG,MAAM;yCAEvD,MAAM,SAAS,MAAM,KAAG,MAAM;4CAE3B,MAAM,SAAS,MAAM,KAAG,MAAM;gDAE1B,MAAM,aAAa,MAAM,KAAG,MAAM;4CAEtC,MAAM,SAAS,MAAM,KAAG,MAAM;;;2CAI7B,MAAM;;;gCAInB,MAAM;;;;yCAIK,OAAO,CAAC,MAAM,CAAC,KAAG,MAAM;;;;0DAaL,wBAAwB,KAAG,MAAM;sDAErC,wBAAwB,KAAG,MAAM;kDAErC,wBAAwB,QAAQ,MAAM,KAAG,MAAM;mDAE9C,wBAAwB,KAAG,MAAM;mCAEjD,MAAM,KAAG,MAAM;;oDAEE,MAAM,aAAa,MAAM,KAAG,MAAM;4CAE1C,MAAM,sBAAsB,wBAAwB,YAAY,MAAM;;CAG7G,CAAC;AAEF,oBAAY,UAAU;IACpB,eAAe,2BAA2B;IAC1C,eAAe,wBAAwB;IACvC,WAAW,4BAA4B;IACvC,WAAW,+BAA+B;IAC1C,aAAa,8BAA8B;IAC3C,OAAO,0BAA0B;IACjC,cAAc,kCAAkC;IAChD,SAAS,4BAA4B;IACrC,SAAS,4BAA4B;IACrC,UAAU,wBAAwB;IAClC,GAAG,8BAA8B;IACjC,eAAe,0BAA0B;CAC1C"}

package/out/text/errors.js

@@ -169,7 +169,8 @@ exports.errors = {
             deprecatedAutoUserConsent: () => 'The autoUserConsent feature flag is no longer required to use automatic user consent and should be removed from the manifest.'
         },
         remotes: {
-            missingRemotesStorageInScopeEUD: (key) => `missing storage.inScopeEUD in remote ${key}. storage.inScopeEUD is required if storage is present in operations.`
+            missingRemotesStorageInScopeEUD: (key) => `missing storage.inScopeEUD in remote ${key}. storage.inScopeEUD is required if storage is present in operations.`,
+            missingAppScopesForRemoteAuth: () => 'Missing app scopes. If OAuth tokens are required, add valid scopes in addition to OAuth token config scopes (see https://go.atlassian.com/forgescopes). Otherwise, remove OAuth token config.'
         },
         storage: {
             entities: {

package/out/types/constants.d.ts

@@ -1,2 +1,5 @@
 export declare const MANIFEST_FILE = "manifest.yml";
+export declare const SYSTEM_TOKEN_SCOPE = "read:app-system-token";
+export declare const USER_TOKEN_SCOPE = "read:app-user-token";
+export declare const REMOTE_AUTH_SCOPES: string[];
 //# sourceMappingURL=constants.d.ts.map

package/out/types/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/types/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,iBAAiB,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/types/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,iBAAiB,CAAC;AAE5C,eAAO,MAAM,kBAAkB,0BAA0B,CAAC;AAC1D,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AACtD,eAAO,MAAM,kBAAkB,UAAyC,CAAC"}

package/out/types/constants.js

@@ -1,4 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.MANIFEST_FILE = void 0;
+exports.REMOTE_AUTH_SCOPES = exports.USER_TOKEN_SCOPE = exports.SYSTEM_TOKEN_SCOPE = exports.MANIFEST_FILE = void 0;
 exports.MANIFEST_FILE = 'manifest.yml';
+exports.SYSTEM_TOKEN_SCOPE = 'read:app-system-token';
+exports.USER_TOKEN_SCOPE = 'read:app-user-token';
+exports.REMOTE_AUTH_SCOPES = [exports.SYSTEM_TOKEN_SCOPE, exports.USER_TOKEN_SCOPE];

package/out/validators/modules-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"modules-validator.d.ts","sourceRoot":"","sources":["../../src/validators/modules-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,cAAc,EAAE,wBAAwB,EAAsC,MAAM,UAAU,CAAC;AAGxH,OAAO,EAAkB,cAAc,EAAqC,MAAM,oBAAoB,CAAC;AACvG,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAqB3D,qBAAa,gBACX,YAAW,kBAAkB,CAAC,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,EAAE,cAAc,CAAC;IAGzF,OAAO,CAAC,oBAAoB,CAAsE;IAE5F,QAAQ,CACZ,QAAQ,EAAE,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,GACnD,OAAO,CAAC,wBAAwB,CAAC,cAAc,CAAC,CAAC;IA4DpD,OAAO,CAAC,uBAAuB;IAO/B,OAAO,CAAC,iBAAiB;IAkBzB,OAAO,CAAC,4BAA4B;IAapC,OAAO,CAAC,uBAAuB;IAe/B,OAAO,CAAC,uBAAuB;IAiB/B,OAAO,CAAC,4BAA4B;IA0BpC,OAAO,CAAC,mBAAmB;IA2G3B,OAAO,CAAC,4BAA4B;IA2BpC,OAAO,CAAC,yBAAyB;CAkClC"}
+{"version":3,"file":"modules-validator.d.ts","sourceRoot":"","sources":["../../src/validators/modules-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,cAAc,EACd,wBAAwB,EAKzB,MAAM,UAAU,CAAC;AAGlB,OAAO,EAAkB,cAAc,EAAqC,MAAM,oBAAoB,CAAC;AACvG,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAqB3D,qBAAa,gBACX,YAAW,kBAAkB,CAAC,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,EAAE,cAAc,CAAC;IAGzF,OAAO,CAAC,oBAAoB,CAAsE;IAE5F,QAAQ,CACZ,QAAQ,EAAE,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,GACnD,OAAO,CAAC,wBAAwB,CAAC,cAAc,CAAC,CAAC;IA4DpD,OAAO,CAAC,uBAAuB;IAO/B,OAAO,CAAC,iBAAiB;IAkBzB,OAAO,CAAC,4BAA4B;IAapC,OAAO,CAAC,uBAAuB;IAe/B,OAAO,CAAC,uBAAuB;IAiB/B,OAAO,CAAC,4BAA4B;IA0BpC,OAAO,CAAC,mBAAmB;IAyG3B,OAAO,CAAC,4BAA4B;IA2BpC,OAAO,CAAC,yBAAyB;CAkClC"}

package/out/validators/modules-validator.js

@@ -127,8 +127,6 @@ class ModulesValidator {
     }
     endpointValidations(modules, yamlContentByLine, remotes, scopes) {
         const validationErrors = [];
-        const SYSTEM_TOKEN_SCOPE = 'read:app-system-token';
-        const USER_TOKEN_SCOPE = 'read:app-user-token';
         const _checkRemoteExists = (remoteKey) => {
             return remotes?.find((remote) => remote.key === remoteKey) !== undefined;
         };
@@ -164,48 +162,48 @@ class ModulesValidator {
                     ...(0, utils_1.findPosition)(endpoint.remote, yamlContentByLine)
                 });
             }
-            if (endpoint.auth?.appUserToken?.enabled && !scopes.includes(USER_TOKEN_SCOPE)) {
+            if (endpoint.auth?.appUserToken?.enabled && !scopes.includes(types_1.USER_TOKEN_SCOPE)) {
                 validationErrors.push({
-                    message: text_1.errors.permissions.missingEndpointPermissionFromScope(USER_TOKEN_SCOPE, endpoint.key),
+                    message: text_1.errors.permissions.missingEndpointPermissionFromScope(types_1.USER_TOKEN_SCOPE, endpoint.key),
                     reference: text_1.References.MissingScopes,
                     level: 'error',
                     metadata: {
-                        missingPermission: USER_TOKEN_SCOPE
+                        missingPermission: types_1.USER_TOKEN_SCOPE
                     },
                     ...(0, utils_1.findPosition)('scopes', yamlContentByLine)
                 });
             }
-            if (endpoint.auth?.appSystemToken?.enabled && !scopes.includes(SYSTEM_TOKEN_SCOPE)) {
+            if (endpoint.auth?.appSystemToken?.enabled && !scopes.includes(types_1.SYSTEM_TOKEN_SCOPE)) {
                 validationErrors.push({
-                    message: text_1.errors.permissions.missingEndpointPermissionFromScope(SYSTEM_TOKEN_SCOPE, endpoint.key),
+                    message: text_1.errors.permissions.missingEndpointPermissionFromScope(types_1.SYSTEM_TOKEN_SCOPE, endpoint.key),
                     reference: text_1.References.MissingScopes,
                     level: 'error',
                     metadata: {
-                        missingPermission: SYSTEM_TOKEN_SCOPE
+                        missingPermission: types_1.SYSTEM_TOKEN_SCOPE
                     },
                     ...(0, utils_1.findPosition)('scopes', yamlContentByLine)
                 });
             }
         });
         remotes?.forEach((remote) => {
-            if (remote.auth?.appUserToken?.enabled && !scopes.includes(USER_TOKEN_SCOPE)) {
+            if (remote.auth?.appUserToken?.enabled && !scopes.includes(types_1.USER_TOKEN_SCOPE)) {
                 validationErrors.push({
-                    message: text_1.errors.permissions.missingRemotePermissionFromScope(USER_TOKEN_SCOPE, remote.key),
+                    message: text_1.errors.permissions.missingRemotePermissionFromScope(types_1.USER_TOKEN_SCOPE, remote.key),
                     reference: text_1.References.MissingScopes,
                     level: 'error',
                     metadata: {
-                        missingPermission: USER_TOKEN_SCOPE
+                        missingPermission: types_1.USER_TOKEN_SCOPE
                     },
                     ...(0, utils_1.findPosition)('scopes', yamlContentByLine)
                 });
             }
-            if (remote.auth?.appSystemToken?.enabled && !scopes.includes(SYSTEM_TOKEN_SCOPE)) {
+            if (remote.auth?.appSystemToken?.enabled && !scopes.includes(types_1.SYSTEM_TOKEN_SCOPE)) {
                 validationErrors.push({
-                    message: text_1.errors.permissions.missingRemotePermissionFromScope(SYSTEM_TOKEN_SCOPE, remote.key),
+                    message: text_1.errors.permissions.missingRemotePermissionFromScope(types_1.SYSTEM_TOKEN_SCOPE, remote.key),
                     reference: text_1.References.MissingScopes,
                     level: 'error',
                     metadata: {
-                        missingPermission: SYSTEM_TOKEN_SCOPE
+                        missingPermission: types_1.SYSTEM_TOKEN_SCOPE
                     },
                     ...(0, utils_1.findPosition)('scopes', yamlContentByLine)
                 });

package/out/validators/permissions-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions-validator.d.ts","sourceRoot":"","sources":["../../src/validators/permissions-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAmB,MAAM,UAAU,CAAC;AAGrF,OAAO,EAAE,cAAc,EAAU,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAM3D,qBAAa,oBACX,YAAW,kBAAkB,CAAC,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,EAAE,cAAc,CAAC;IAEzF,OAAO,CAAC,UAAU;IA+BlB,OAAO,CAAC,WAAW;IAUnB,OAAO,CAAC,mBAAmB;IAgB3B,OAAO,CAAC,8BAA8B;IA6ChC,QAAQ,CACZ,QAAQ,EAAE,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,GACnD,OAAO,CAAC,wBAAwB,CAAC,cAAc,CAAC,CAAC;CAoGrD"}
+{"version":3,"file":"permissions-validator.d.ts","sourceRoot":"","sources":["../../src/validators/permissions-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAmB,MAAM,UAAU,CAAC;AAGrF,OAAO,EAAE,cAAc,EAAU,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAM3D,qBAAa,oBACX,YAAW,kBAAkB,CAAC,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,EAAE,cAAc,CAAC;IAEzF,OAAO,CAAC,UAAU;IA+BlB,OAAO,CAAC,WAAW;IAUnB,OAAO,CAAC,mBAAmB;IAgB3B,OAAO,CAAC,8BAA8B;IA6ChC,QAAQ,CACZ,QAAQ,EAAE,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,GACnD,OAAO,CAAC,wBAAwB,CAAC,cAAc,CAAC,CAAC;CA8HrD"}

package/out/validators/permissions-validator.js

@@ -109,39 +109,53 @@ class PermissionsValidator {
         const mapping = [
             {
                 element: 'external.fetch.backend',
-                perms: manifest.typedContent.permissions.external?.fetch?.backend?.filter((key) => typeof key === 'string')
+                perms: manifest.typedContent.permissions.external?.fetch?.backend
+                    ?.map((key) => {
+                    if (typeof key === 'object' && 'address' in key) {
+                        return key.address;
+                    }
+                    return key;
+                })
+                    .filter((key) => typeof key === 'string')
             },
             {
                 element: 'external.fetch.client',
-                perms: manifest.typedContent.permissions.external?.fetch?.client?.filter((key) => typeof key === 'string')
+                perms: manifest.typedContent.permissions.external?.fetch?.client
+                    ?.map((key) => {
+                    if (typeof key === 'object' && 'address' in key) {
+                        return key.address;
+                    }
+                    return key;
+                })
+                    .filter((key) => typeof key === 'string')
             },
             {
                 element: 'external.navigation',
-                perms: manifest.typedContent.permissions.external?.navigation
+                perms: manifest.typedContent.permissions.external?.navigation?.map((key) => typeof key === 'object' ? key.address : key)
             },
             {
                 element: 'external.styles',
-                perms: manifest.typedContent.permissions.external?.styles
+                perms: manifest.typedContent.permissions.external?.styles?.map((key) => typeof key === 'object' ? key.address : key)
             },
             {
                 element: 'external.frames',
-                perms: manifest.typedContent.permissions.external?.frames
+                perms: manifest.typedContent.permissions.external?.frames?.map((key) => typeof key === 'object' ? key.address : key)
             },
             {
                 element: 'external.fonts',
-                perms: manifest.typedContent.permissions.external?.fonts
+                perms: manifest.typedContent.permissions.external?.fonts?.map((key) => typeof key === 'object' ? key.address : key)
             },
             {
                 element: 'external.images',
-                perms: manifest.typedContent.permissions.external?.images
+                perms: manifest.typedContent.permissions.external?.images?.map((key) => typeof key === 'object' ? key.address : key)
             },
             {
                 element: 'external.media',
-                perms: manifest.typedContent.permissions.external?.media
+                perms: manifest.typedContent.permissions.external?.media?.map((key) => typeof key === 'object' ? key.address : key)
             },
             {
                 element: 'external.scripts',
-                perms: manifest.typedContent.permissions.external?.scripts
+                perms: manifest.typedContent.permissions.external?.scripts?.map((key) => typeof key === 'object' ? key.address : key)
             }
         ];
         mapping.forEach((item) => this.validateExternalPermissionURLs(errors, item.element, item.perms, manifest));
@@ -151,6 +165,7 @@ class PermissionsValidator {
         }, new Map());
         const invalidBackendRemotes = manifest.typedContent.permissions.external?.fetch?.backend
             ?.filter((item) => typeof item === 'object' &&
+            'remote' in item &&
             (!remoteMap || !remoteMap.has(item.remote) || !this.isValidURL(remoteMap.get(item.remote))))
             .map((item) => item.remote);
         if (invalidBackendRemotes?.length) {
@@ -158,6 +173,7 @@ class PermissionsValidator {
         }
         const invalidClientRemotes = manifest.typedContent.permissions.external?.fetch?.client
             ?.filter((item) => typeof item === 'object' &&
+            'remote' in item &&
             (!remoteMap || !remoteMap.has(item.remote) || !this.isValidURL(remoteMap.get(item.remote))))
             .map((item) => item.remote);
         if (invalidClientRemotes?.length) {

package/out/validators/providers-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"providers-validator.d.ts","sourceRoot":"","sources":["../../src/validators/providers-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAmB,MAAM,UAAU,CAAC;AAGrF,OAAO,KAAK,EAGV,cAAc,EAGf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAG3D,qBAAa,kBACX,YAAW,kBAAkB,CAAC,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,EAAE,cAAc,CAAC;IAEnF,QAAQ,CACZ,QAAQ,EAAE,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,GACnD,OAAO,CAAC,wBAAwB,CAAC,cAAc,CAAC,CAAC;IA+EpD,OAAO,CAAC,mBAAmB;IAiB3B,OAAO,CAAC,+BAA+B;IAkBvC,OAAO,CAAC,iBAAiB;CAoC1B"}
+{"version":3,"file":"providers-validator.d.ts","sourceRoot":"","sources":["../../src/validators/providers-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAmB,MAAM,UAAU,CAAC;AAGrF,OAAO,KAAK,EAGV,cAAc,EAGf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAG3D,qBAAa,kBACX,YAAW,kBAAkB,CAAC,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,EAAE,cAAc,CAAC;IAEnF,QAAQ,CACZ,QAAQ,EAAE,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,GACnD,OAAO,CAAC,wBAAwB,CAAC,cAAc,CAAC,CAAC;IAqFpD,OAAO,CAAC,mBAAmB;IAiB3B,OAAO,CAAC,+BAA+B;IAkBvC,OAAO,CAAC,iBAAiB;CAoC1B"}

package/out/validators/providers-validator.js

@@ -30,7 +30,15 @@ class ProvidersValidator {
                 const missingEgressPermission = provider.remotes?.find((key) => {
                     const remote = remotes?.find((item) => item.key === key);
                     if (remote) {
-                        const egressPermission = permissions?.external?.fetch?.backend?.find((item) => typeof item === 'string' ? item === remote.baseUrl : item.remote === remote.key);
+                        const egressPermission = permissions?.external?.fetch?.backend?.find((item) => {
+                            if (typeof item === 'string') {
+                                return item === remote.baseUrl;
+                            }
+                            if ('remote' in item) {
+                                return item.remote === remote.key;
+                            }
+                            return item.address === remote.baseUrl;
+                        });
                         return !egressPermission;
                     }
                     return false;

package/out/validators/remote-auth-scopes-validator.d.ts

@@ -0,0 +1,9 @@
+import { ValidatorInterface } from './validator-interface';
+import { ManifestObject, ManifestValidationResult } from '../types';
+import { ManifestSchema } from '../schema/manifest';
+export declare class RemoteAuthScopesValidator implements ValidatorInterface<ManifestObject<ManifestSchema> | undefined, ManifestSchema> {
+    validate(manifest: ManifestObject<ManifestSchema> | undefined): Promise<ManifestValidationResult<ManifestSchema>>;
+    private appUserTokenEnabled;
+    private appSystemTokenEnabled;
+}
+//# sourceMappingURL=remote-auth-scopes-validator.d.ts.map

package/out/validators/remote-auth-scopes-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-auth-scopes-validator.d.ts","sourceRoot":"","sources":["../../src/validators/remote-auth-scopes-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAsB,MAAM,UAAU,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAapD,qBAAa,yBACX,YAAW,kBAAkB,CAAC,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,EAAE,cAAc,CAAC;IAEnF,QAAQ,CACZ,QAAQ,EAAE,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,GACnD,OAAO,CAAC,wBAAwB,CAAC,cAAc,CAAC,CAAC;IA4CpD,OAAO,CAAC,mBAAmB,CAA+D;IAC1F,OAAO,CAAC,qBAAqB,CAAiE;CAC/F"}

package/out/validators/remote-auth-scopes-validator.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RemoteAuthScopesValidator = void 0;
+const types_1 = require("../types");
+const text_1 = require("../text");
+const utils_1 = require("../utils");
+class RemoteAuthScopesValidator {
+    async validate(manifest) {
+        if (!manifest?.typedContent?.remotes && !manifest?.typedContent?.modules?.endpoint) {
+            return {
+                success: true,
+                manifestObject: manifest
+            };
+        }
+        const remotes = manifest.typedContent.remotes;
+        const endpoints = manifest.typedContent.modules?.endpoint ?? [];
+        const hasAppUserToken = endpoints.some((endpoint) => this.appUserTokenEnabled(endpoint.auth)) ||
+            remotes?.some((remote) => this.appUserTokenEnabled(remote.auth));
+        const hasAppSystemToken = endpoints.some((endpoint) => this.appSystemTokenEnabled(endpoint.auth)) ||
+            remotes?.some((remote) => this.appSystemTokenEnabled(remote.auth));
+        if (hasAppUserToken || hasAppSystemToken) {
+            const scopes = manifest.typedContent.permissions?.scopes ?? [];
+            const filteredScopes = scopes.filter((scope) => !types_1.REMOTE_AUTH_SCOPES.includes(scope));
+            if (filteredScopes.length === 0) {
+                return {
+                    success: false,
+                    manifestObject: manifest,
+                    errors: [
+                        {
+                            message: text_1.errors.app.remotes.missingAppScopesForRemoteAuth(),
+                            reference: text_1.References.App,
+                            level: 'error',
+                            ...(0, utils_1.findPosition)('scopes', manifest.yamlContentByLine)
+                        }
+                    ]
+                };
+            }
+        }
+        return {
+            success: true,
+            manifestObject: manifest
+        };
+    }
+    appUserTokenEnabled = (auth) => auth?.appUserToken?.enabled === true;
+    appSystemTokenEnabled = (auth) => auth?.appSystemToken?.enabled === true;
+}
+exports.RemoteAuthScopesValidator = RemoteAuthScopesValidator;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forge/manifest",
-  "version": "8.9.0-next.9",
+  "version": "9.0.0-next.13",
   "description": "Definitions and validations of the Forge manifest",
   "main": "out/index.js",
   "scripts": {