@gnolith/taproot 0.2.0 → 0.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +53 -0
- package/COMPATIBILITY.md +5 -3
- package/README.md +106 -33
- package/SECURITY.md +6 -3
- package/dist/authorization-maintenance.d.ts +55 -0
- package/dist/authorization-maintenance.d.ts.map +1 -0
- package/dist/authorization-maintenance.js +686 -0
- package/dist/authorization-maintenance.js.map +1 -0
- package/dist/authorization.d.ts +98 -0
- package/dist/authorization.d.ts.map +1 -0
- package/dist/authorization.js +1137 -0
- package/dist/authorization.js.map +1 -0
- package/dist/canonical.d.ts +2 -1
- package/dist/canonical.d.ts.map +1 -1
- package/dist/canonical.js +9 -1
- package/dist/canonical.js.map +1 -1
- package/dist/errors.d.ts +4 -0
- package/dist/errors.d.ts.map +1 -1
- package/dist/errors.js +4 -0
- package/dist/errors.js.map +1 -1
- package/dist/index.d.ts +125 -49
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +351 -44
- package/dist/index.js.map +1 -1
- package/dist/migrations.d.ts +9 -3
- package/dist/migrations.d.ts.map +1 -1
- package/dist/migrations.js +77 -5
- package/dist/migrations.js.map +1 -1
- package/dist/repository.d.ts +20 -9
- package/dist/repository.d.ts.map +1 -1
- package/dist/repository.js +593 -48
- package/dist/repository.js.map +1 -1
- package/dist/schema.d.ts +14 -5
- package/dist/schema.d.ts.map +1 -1
- package/dist/schema.js +461 -18
- package/dist/schema.js.map +1 -1
- package/dist/types.d.ts +59 -0
- package/dist/types.d.ts.map +1 -1
- package/docs/api.md +56 -18
- package/docs/architecture.md +19 -7
- package/docs/authorization.md +82 -0
- package/docs/completion-audit.md +15 -15
- package/docs/operations.md +28 -5
- package/docs/product-scope.md +5 -3
- package/docs/testing.md +18 -1
- package/docs/threat-model.md +30 -3
- package/examples/d1-diamond-interop/README.md +2 -1
- package/examples/d1-diamond-interop/demo.ts +150 -21
- package/migrations/0003_canonical_statement_text.sql +31 -0
- package/migrations/0004_canonical_authorization_policy.sql +213 -0
- package/package.json +4 -1
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"authorization-maintenance.js","sourceRoot":"","sources":["../src/authorization-maintenance.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC7B,qCAAqC,EACrC,wBAAwB,EACxB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AAOrB,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AA+FrC,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,EAAsB,EACtB,UAAgC,EAChC,UAAiD,EAAE;IAEnD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,kBAAkB;QACzE,MAAM,IAAI,UAAU,CAAC,gCAAgC,kBAAkB,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAClD,MAAM,IAAI,yBAAyB,CAAC,6BAA6B,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,EAAE;SACpB,OAAO,CACN;;;;;;;;;;;oCAW8B,CAC/B;SACA,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,qBAAqB,CAAC;SAC3D,GAAG,EAMA,CAAC;IACP,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,EAAE;SACvB,OAAO,CACN;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kDAqE4C,CAC7C;SACA,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,qBAAqB,CAAC;SAC3D,GAAG,EAIA,CAAC;IACP,MAAM,cAAc,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC;IAC7C,MAAM,iBAAiB,GAAG,MAAM,2BAA2B,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,OAAO,CACN;sDACgD,CACjD;SACA,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC;SACvB,GAAG,EAA6C,CAAC;IACpD,MAAM,MAAM,GAAkC,EAAE,CAAC;IACjD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3E,IAAI,KAAK,CAAC,MAAM;YACd,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACrC,KAAK;aACN,CAAC,CAAC;IACP,CAAC;IACD,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,eAAe;QACrC,qBAAqB,EAAE,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC;QAC3D,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;QACjD,MAAM,EAAE;YACN,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC;YACnD,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC;YACrD,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;YAC/C,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC;YACjD,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC;YACvD,wBAAwB,EAAE,MAAM,CAC9B,cAAc,CAAC,0BAA0B,CAC1C;YACD,sBAAsB,EAAE,iBAAiB,CAAC,MAAM;YAChD,yBAAyB,EACvB,MAAM,CAAC,cAAc,CAAC,2BAA2B,CAAC;gBAClD,iBAAiB,CAAC,SAAS;YAC7B,8BAA8B,EAAE,MAAM,CACpC,cAAc,CAAC,iCAAiC,CACjD;SACF;QACD,KAAK,EACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC;YACxC,MAAM,CAAC,cAAc,CAAC,0BAA0B,CAAC,KAAK,CAAC;YACvD,iBAAiB,CAAC,MAAM,KAAK,CAAC;YAC9B,MAAM,CAAC,cAAc,CAAC,2BAA2B,CAAC,KAAK,CAAC;YACxD,iBAAiB,CAAC,SAAS,KAAK,CAAC;YACjC,MAAM,CAAC,cAAc,CAAC,iCAAiC,CAAC,KAAK,CAAC;QAChE,MAAM;QACN,MAAM,EACJ,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,KAAK;YACzB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI,CAAC;YAC9C,CAAC,CAAC,IAAI;KACX,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,EAAsB,EACtB,KAAsB,EACtB,YAAuB;IAEvB,MAAM,UAAU,GAAG,MAAM,EAAE;SACxB,OAAO,CACN;;;;;;;;mDAQ6C,CAC9C;SACA,GAAG,EAQA,CAAC;IACP,MAAM,QAAQ,GAAG,IAAI,GAAG,EAQrB,CAAC;IACJ,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,YAAY,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,YAAY;YAAE,SAAS;QAC3E,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,wBAAwB,CACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAsB,CACrD,CAAC;YACF,MAAM,SAAS,GAAG,wBAAwB,CACxC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAsB,CAC/D,CAAC;YACF,MAAM,OAAO,GACX,GAAG,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe;gBAC7C,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC;gBACtC,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC;oBAChC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC;gBACtC,wBAAwB,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,eAAe;gBAC1D,wBAAwB,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,yBAAyB,CAAC;YACxE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE;gBAChB,QAAQ;gBACR,SAAS;gBACT,QAAQ,EAAE,QAAQ;gBAClB,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE;gBAChB,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,EAAE;SAC3B,OAAO,CACN;;;;;;;;;;;;;;;;gFAgB0E,CAC3E;SACA,GAAG,EASA,CAAC;IACP,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QACxC,IAAI,YAAY,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,YAAY;YAAE,SAAS;QAC3E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,wBAAwB,CACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAsB,CAC5D,CAAC;YACF,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAY,CAAC;YACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,YAAY,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACjD,wBAAwB,CAAC,KAA0B,CAAC,CACrD,CAAC;YACF,MAAM,SAAS,GAAG,wBAAwB,CACxC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAsB,CAC/D,CAAC;YACF,MAAM,iBAAiB,GAAG,yBAAyB,CACjD,MAAM,EACN,GAAG,YAAY,CAChB,CAAC;YACF,MAAM,OAAO,GACX,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC;gBACtC,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC;oBAChC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC;gBACtC,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC;oBAChC,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC;gBAC3C,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,GAAG,CAAC,iBAAiB;gBACtD,wBAAwB,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,yBAAyB;gBACrE,wBAAwB,CAAC,SAAS,CAAC;oBACjC,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;YAChD,IAAI,OAAO;gBAAE,SAAS,IAAI,CAAC,CAAC;YAC5B,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAC/B,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,eAAe,EAAE,CAC1D,CAAC;YACF,IAAI,YAAY,EAAE,QAAQ;gBACxB,YAAY,CAAC,QAAQ,GAAG,yBAAyB,CAC/C,YAAY,CAAC,QAAQ,EACrB,iBAAiB,CAClB,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACvC,IACE,MAAM,CAAC,OAAO;YACd,CAAC,MAAM,CAAC,SAAS;YACjB,CAAC,MAAM,CAAC,QAAQ;YAChB,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC;gBACxC,wBAAwB,CAAC,MAAM,CAAC,QAAQ,CAAC;YAE3C,MAAM,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,EAAsB,EACtB,UAAgC,EAChC,MAAmD,EACnD,MAAc,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAEtC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IACvD,IACE,CAAC,YAAY,CAAC,MAAM,CAAC;QACrB,MAAM,CAAC,MAAM,GAAG,CAAC;QACjB,MAAM,CAAC,MAAM,GAAG,qBAAqB;QAErC,MAAM,IAAI,yBAAyB,CACjC,0CAA0C,qBAAqB,WAAW,CAC3E,CAAC;IACJ,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM;QAClC,MAAM,IAAI,yBAAyB,CAAC,oCAAoC,CAAC,CAAC;IAC5E,MAAM,gBAAgB,GAAqB,EAAE,CAAC;IAC9C,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC5C,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CACzC,EAAE,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,EAAE;aACtB,OAAO,CACN,yEAAyE,CAC1E;aACA,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;aACpB,GAAG,EAAqB,CAAC;QAC5B,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM;YACzB,MAAM,IAAI,qBAAqB,CAC7B,UAAU,KAAK,CAAC,QAAQ,+BAA+B,CACxD,CAAC;QACJ,MAAM,SAAS,GAAG,MAAM,EAAE;aACvB,OAAO,CACN;6EACqE,CACtE;aACA,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;aACpB,GAAG,EAMA,CAAC;QACP,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAClC,CAAC;QACF,IACE,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAC9B,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YAE5C,MAAM,IAAI,qBAAqB,CAC7B,oDAAoD,KAAK,CAAC,QAAQ,EAAE,CACrE,CAAC;QACJ,aAAa,IAAI,QAAQ,CAAC,MAAM,CAAC;QACjC,IAAI,aAAa,GAAG,sBAAsB;YACxC,MAAM,IAAI,yBAAyB,CACjC,uCAAuC,sBAAsB,YAAY,CAC1E,CAAC;QACJ,MAAM,SAAS,GAAuB,EAAE,CAAC;QACzC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACjE,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAE,CAAC;YACtC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,KAAK,CAAE,CAAC;YAC1C,IACE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,gBAAgB,CAAC,QAAQ;gBAClD,GAAG,CAAC,YAAY,KAAK,gBAAgB,CAAC,WAAW;gBAEjD,MAAM,IAAI,qBAAqB,CAC7B,iDAAiD,KAAK,CAAC,QAAQ,EAAE,CAClE,CAAC;YACJ,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAChD,MAAM,UAAU,GAAG,qCAAqC,CAAC;gBACvD,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,WAAW,EAAE,gBAAgB,CAAC,WAAW;gBACzC,gBAAgB,EAAE,gBAAgB,CAAC,gBAAgB;gBACnD,UAAU,EAAE,gBAAgB,CAAC,UAAU;gBACvC,qBAAqB,EAAE,gBAAgB,CAAC,qBAAqB;gBAC7D,6BAA6B,EAAE,OAAO,CAAC,qBAAqB;aAC7D,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,IAAI,CACpE,gBAAgB,CACjB,CAAC;YACF,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;gBAC7D,MAAM,IAAI,yBAAyB,CACjC,wDAAwD,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CACzF,CAAC;YACJ,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE;gBACjD,MAAM,YAAY,GAAG,UAAU,CAAC,qBAAqB,CAAC,WAAW,CAAE,CAAC;gBACpE,OAAO;oBACL,WAAW;oBACX,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;oBAC9C,uBAAuB,EAAE,wBAAwB,CAC/C,yBAAyB,CAAC,UAAU,CAAC,UAAU,EAAE,GAAG,YAAY,CAAC,CAClE;iBACF,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,MAAM,uBAAuB,GAAG,wBAAwB,CACtD,yBAAyB,CACvB,UAAU,CAAC,UAAU,EACrB,GAAG,UAAU,CAAC,GAAG,CACf,CAAC,EAAE,uBAAuB,EAAE,EAAE,EAAE,CAC9B,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAsB,CAC3D,CACF,CACF,CAAC;YACF,SAAS,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAC9B,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,OAAO,EAAE,GAAG,CAAC,QAAQ;gBACrB,SAAS,EAAE,GAAG,CAAC,UAAU;gBACzB,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;gBAC7C,cAAc,EAAE,wBAAwB,CAAC,UAAU,CAAC,UAAU,CAAC;gBAC/D,uBAAuB;gBACvB,UAAU;aACX,CAAC,CAAC;QACL,CAAC;QACD,gBAAgB,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,QAAQ,GAAa;QACzB,OAAO,EAAE,CAAC;QACV,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,QAAQ,EAAE,gBAAgB;KAC3B,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACnC,MAAM,EAAE,CAAC,KAAK,CAAC;QACb,EAAE;aACC,OAAO,CACN;;;;yDAIiD,CAClD;aACA,IAAI,CACH,MAAM,EACN,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,qBAAqB,EAC7B,YAAY,EACZ,YAAY,EACZ,gBAAgB,CAAC,MAAM,EACvB,aAAa,EACb,OAAO,CAAC,WAAW,EACnB,GAAG,CACJ;QACH,EAAE;aACC,OAAO,CACN;;;sDAG8C,CAC/C;aACA,IAAI,CACH,MAAM,CAAC,UAAU,EAAE,EACnB,OAAO,CAAC,WAAW,EACnB,MAAM,EACN,OAAO,CAAC,qBAAqB,EAC7B,IAAI,CAAC,SAAS,CAAC;YACb,YAAY;YACZ,WAAW,EAAE,gBAAgB,CAAC,MAAM;YACpC,aAAa;SACd,CAAC,EACF,GAAG,CACJ;KACJ,CAAC,CAAC;IACH,OAAO;QACL,MAAM;QACN,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,yBAAyB,EAAE,OAAO,CAAC,qBAAqB;QACxD,YAAY;QACZ,WAAW,EAAE,gBAAgB,CAAC,MAAM;QACpC,aAAa;QACb,MAAM,EAAE,SAAS;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,EAAsB,EACtB,UAAgC,EAChC,MAAc,EACd,MAAc,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAEtC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,OAAO,CACN;;mEAE6D,CAC9D;SACA,IAAI,CAAC,MAAM,CAAC;SACZ,GAAG,EAQA,CAAC;IACP,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,yBAAyB,CAAC,6BAA6B,CAAC,CAAC;IAC7E,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9D,IACE,GAAG,CAAC,eAAe,KAAK,OAAO,CAAC,cAAc;QAC9C,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,KAAK,OAAO,CAAC,qBAAqB;QACzE,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,KAAK,GAAG,CAAC,aAAa;QAEvD,MAAM,IAAI,qBAAqB,CAAC,qCAAqC,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAa,CAAC;IAC3D,IACE,QAAQ,CAAC,OAAO,KAAK,CAAC;QACtB,QAAQ,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;QAClD,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;QAErD,MAAM,IAAI,qBAAqB,CAAC,8BAA8B,CAAC,CAAC;IAElE,MAAM,aAAa,GAAc,EAAE,CAAC;IACpC,MAAM,aAAa,GAAc,EAAE,CAAC;IACpC,MAAM,gBAAgB,GAAc,EAAE,CAAC;IACvC,MAAM,gBAAgB,GAAc,EAAE,CAAC;IACvC,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,MAAM,wBAAwB,GAAG,OAAO,CAAC,qBAAqB,GAAG,CAAC,CAAC;IACnE,MAAM,mBAAmB,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChE,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;QACzC,aAAa,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAC9D,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,aAAa,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;YAC/D,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,UAAU;gBACzC,gBAAgB,CAAC,IAAI,CAAC;oBACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,GAAG,SAAS;iBACb,CAAC,CAAC;QACP,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,UAAU;YACxC,gBAAgB,CAAC,IAAI,CAAC;gBACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,GAAG,SAAS;aACb,CAAC,CAAC;QACL,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;SACrD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAkC;QAChD,EAAE;aACC,OAAO,CACN;;;;mCAI2B,CAC5B;aACA,IAAI,CACH,wBAAwB,EACxB,mBAAmB,EACnB,MAAM,EACN,GAAG,EACH,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,qBAAqB,EAC7B,KAAK,CAAC,iBAAiB,EACvB,KAAK,CAAC,eAAe,CACtB;QACH,SAAS,CACP,EAAE,EACF;;;kCAG4B,EAC5B,OAAO,CAAC,cAAc,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,MAAM,CACP;QACD,SAAS,CACP,EAAE,EACF;;;;;SAKG,EACH,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAC9B;QACD,EAAE;aACC,OAAO,CACN;;;;;;;;;;;;2BAYmB,CACpB;aACA,IAAI,CACH,OAAO,CAAC,cAAc,EACtB,wBAAwB,EACxB,GAAG,EACH,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAC9B;QACH,EAAE;aACC,OAAO,CACN;;;;;;;;;;;2BAWmB,CACpB;aACA,IAAI,CACH,OAAO,CAAC,cAAc,EACtB,wBAAwB,EACxB,GAAG,EACH,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAC9B;QACH,EAAE;aACC,OAAO,CACN;;;;;;;;2BAQmB,CACpB;aACA,IAAI,CAAC,wBAAwB,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACnE,EAAE;aACC,OAAO,CACN;;;;;;;;2BAQmB,CACpB;aACA,IAAI,CAAC,wBAAwB,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACnE,EAAE;aACC,OAAO,CACN;;;;;;mEAM2D,CAC5D;aACA,IAAI,CACH,wBAAwB,EACxB,mBAAmB,EACnB,GAAG,EACH,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CACvB;QACH,EAAE;aACC,OAAO,CACN;;;+CAGuC,CACxC;aACA,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,qBAAqB,CAAC;QACnD,SAAS,CACP,EAAE,EACF;kDAC4C,EAC5C,MAAM,CACP;QACD,EAAE;aACC,OAAO,CACN;;;uDAG+C,CAChD;aACA,IAAI,CACH,MAAM,CAAC,UAAU,EAAE,EACnB,OAAO,CAAC,WAAW,EACnB,MAAM,EACN,wBAAwB,EACxB,IAAI,CAAC,SAAS,CAAC;YACb,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,aAAa,EAAE,GAAG,CAAC,cAAc;SAClC,CAAC,EACF,GAAG,CACJ;KACJ,CAAC;IACF,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,qBAAqB,CAC7B,wDAAwD,EACxD,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CACtD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC;QAC1B,MAAM,EAAE,UAAU;KACnB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,EAAsB,EACtB,UAAgC;IAEhC,MAAM,OAAO,GAAG,6BAA6B,CAAC,UAAU,CAAC,CAAC;IAC1D,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,EAAE;SACpB,OAAO,CACN;mEAC6D,CAC9D;SACA,GAAG,EAAmB,CAAC;IAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAChC,IACE,CAAC,KAAK;QACN,KAAK,CAAC,eAAe,KAAK,OAAO,CAAC,cAAc;QAChD,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,KAAK,OAAO,CAAC,qBAAqB;QAEtE,MAAM,IAAI,wBAAwB,CAAC,sBAAsB,CAAC,CAAC;IAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,EAAsB,EACtB,QAAkB,EAClB,eAAuB,EACvB,KAAsB;IAEtB,MAAM,KAAK,GAAiC,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,EAAE;SACpB,OAAO,CACN;6DACuD,CACxD;SACA,IAAI,CAAC,QAAQ,CAAC;SACd,GAAG,EAIA,CAAC;IACP,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;SAC9C,CAAC;QACJ,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,MAAM,CAAC,eAAe,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe;YACnD,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC1C,IACE,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC;gBACpC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC;YAEtC,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,EAAE;SAC5B,OAAO,CACN;;;;SAIG,CACJ;SACA,IAAI,CAAC,QAAQ,CAAC;SACd,GAAG,EAAqB,CAAC;IAC5B,IAAI,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACxC,MAAM,iBAAiB,GAAG,MAAM,EAAE;SAC/B,OAAO,CACN;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAmCgB,CACjB;SACA,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;SAC5C,GAAG,EAAqB,CAAC;IAC5B,IAAI,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC1C,MAAM,eAAe,GAAG,MAAM,2BAA2B,CACvD,EAAE,EACF,KAAK,EACL,QAAQ,CACT,CAAC;IACF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QACzE,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACvC,IACE,eAAe,CAAC,SAAS,GAAG,CAAC;QAC7B,CAAC,KAAK,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAE5C,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,EAAE;SACpB,OAAO,CACN;;;;;;;;;;;;;;;;;;;;;;;;;gCAyB0B,CAC3B;SACA,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC;SACxB,GAAG,EAAqD,CAAC;IAC5D,IACE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC;QAChD,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAEzC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACvC,IACE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,eAAe,IAAI,CAAC,CAAC,GAAG,CAAC;QACnD,CAAC,KAAK,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAE5C,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAChB,EAAsB,EACtB,SAAiB,EACjB,GAAG,MAAiB;IAEpB,OAAO,EAAE;SACN,OAAO,CACN;gCAC0B,SAAS,GAAG,CACvC;SACA,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,UAAU,CACjB,MAAc,EACd,GAOC;IAED,OAAO;QACL,MAAM;QACN,cAAc,EAAE,GAAG,CAAC,eAAe;QACnC,yBAAyB,EAAE,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC;QAClE,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;QACrC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;QACzC,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,MAAsB;IAC1C,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;SAChC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;SACvD,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACnD,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,KAAa;IACjC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACvC,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAChC,CAAC;IACF,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;SAC/B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC"}
|
|
@@ -0,0 +1,98 @@
|
|
|
1
|
+
import type { SqliteDatabaseLike } from '@gnolith/diamond';
|
|
2
|
+
import type { AuditEvent, EntityIntegrityReport, EntityId, EntityListEntry, Page, ResolvedEntity, RevisionEntry, SearchResult, StoredEntity, TaprootOptions, EditMetadata, VisibilityScopeV1, CanonicalAuthorizationPolicyInput, AuthorizationContext } from './types.js';
|
|
3
|
+
import type { ListAuditOptions, ListEntitiesOptions, SearchOptions } from './repository.js';
|
|
4
|
+
export declare const SEARCH_ADMIN_CAPABILITY: "search:admin";
|
|
5
|
+
export declare const KNOWLEDGE_WRITE_CAPABILITY: "knowledge:write";
|
|
6
|
+
export declare const KNOWLEDGE_POLICY_CAPABILITY: "knowledge:policy";
|
|
7
|
+
export interface CanonicalAuthorizationRecord {
|
|
8
|
+
installationId: string;
|
|
9
|
+
authorizationRevision: number;
|
|
10
|
+
visibility: VisibilityScopeV1;
|
|
11
|
+
workspaceId: string | null;
|
|
12
|
+
ownerPrincipalId: string;
|
|
13
|
+
sourceRevision: number;
|
|
14
|
+
}
|
|
15
|
+
export interface InstallationAuthorizationState {
|
|
16
|
+
installationId: string;
|
|
17
|
+
authorizationRevision: number;
|
|
18
|
+
searchGeneration: number;
|
|
19
|
+
}
|
|
20
|
+
/**
|
|
21
|
+
* The canonical domain owns persistence of these records. Implementations must
|
|
22
|
+
* return current state on every call; request-local stale caches are unsafe.
|
|
23
|
+
*/
|
|
24
|
+
export interface EntityAuthorizationSource {
|
|
25
|
+
getInstallationAuthorizationState(): Promise<InstallationAuthorizationState>;
|
|
26
|
+
/** Current canonical policy. Deleted/missing current records return null. */
|
|
27
|
+
getEntityAuthorization(entityId: EntityId): Promise<CanonicalAuthorizationRecord | null>;
|
|
28
|
+
/** Historical restriction, always intersected with current policy. */
|
|
29
|
+
getEntityRevisionAuthorization(entityId: EntityId, revision: number): Promise<CanonicalAuthorizationRecord | null>;
|
|
30
|
+
/** Current effective statement scope (parent policy intersected with restrictions). */
|
|
31
|
+
getStatementAuthorization(entityId: EntityId, statementId: string): Promise<CanonicalAuthorizationRecord | null>;
|
|
32
|
+
}
|
|
33
|
+
/**
|
|
34
|
+
* Authenticated, opaque cursor codec issued by the host from a non-extractable
|
|
35
|
+
* AES-GCM key. Request, MCP, and query arguments must never contain this key.
|
|
36
|
+
*/
|
|
37
|
+
export interface AuthorizationCursorCodec {
|
|
38
|
+
readonly kind: 'taproot-aes-gcm-v1';
|
|
39
|
+
}
|
|
40
|
+
export declare function createAuthorizationCursorCodec(key: CryptoKey): AuthorizationCursorCodec;
|
|
41
|
+
export interface AuthorizedTaprootOptions {
|
|
42
|
+
/** Host-issued capability used only for authenticated, opaque pagination. */
|
|
43
|
+
cursorCodec: AuthorizationCursorCodec;
|
|
44
|
+
}
|
|
45
|
+
export type AuthorizedListEntitiesOptions = Omit<ListEntitiesOptions, 'cursor'> & {
|
|
46
|
+
cursor?: string;
|
|
47
|
+
};
|
|
48
|
+
export type AuthorizedSearchOptions = Omit<SearchOptions, 'cursor'> & {
|
|
49
|
+
cursor?: string;
|
|
50
|
+
};
|
|
51
|
+
export type AuthorizedListAuditOptions = Omit<ListAuditOptions, 'cursor'> & {
|
|
52
|
+
cursor?: string;
|
|
53
|
+
};
|
|
54
|
+
export declare function normalizeAuthorizationContext(value: AuthorizationContext): AuthorizationContext;
|
|
55
|
+
export declare function normalizeVisibilityScope(value: VisibilityScopeV1): VisibilityScopeV1;
|
|
56
|
+
export declare function serializeVisibilityScope(scope: VisibilityScopeV1): string;
|
|
57
|
+
export declare function visibilityScopeFingerprint(scope: VisibilityScopeV1): Promise<string>;
|
|
58
|
+
/** CNF intersection is lossless clause concatenation followed by normalization. */
|
|
59
|
+
export declare function intersectVisibilityScopes(...scopes: readonly VisibilityScopeV1[]): VisibilityScopeV1;
|
|
60
|
+
export declare function normalizeCanonicalAuthorizationPolicy(value: CanonicalAuthorizationPolicyInput): CanonicalAuthorizationPolicyInput;
|
|
61
|
+
export declare function isVisibleTo(rawScope: VisibilityScopeV1, rawContext: AuthorizationContext): boolean;
|
|
62
|
+
export declare function hasSearchAdministration(context: AuthorizationContext): boolean;
|
|
63
|
+
export declare function requireSearchAdministration(context: AuthorizationContext): void;
|
|
64
|
+
/**
|
|
65
|
+
* Authorization-enforcing canonical read boundary. The context and policy
|
|
66
|
+
* source are mandatory, and policy is checked both before and after hydration.
|
|
67
|
+
*/
|
|
68
|
+
export declare class AuthorizedTaprootReader {
|
|
69
|
+
#private;
|
|
70
|
+
constructor(db: SqliteDatabaseLike, options: TaprootOptions, context: AuthorizationContext, authorizedOptions: AuthorizedTaprootOptions);
|
|
71
|
+
getEntity(id: EntityId): Promise<StoredEntity>;
|
|
72
|
+
getEntityRevision(id: EntityId, revisionNumber: number): Promise<RevisionEntry>;
|
|
73
|
+
resolveEntity(id: EntityId, maxDepth?: number): Promise<ResolvedEntity>;
|
|
74
|
+
listEntityRevisions(id: EntityId, options?: {
|
|
75
|
+
limit?: number;
|
|
76
|
+
cursor?: string;
|
|
77
|
+
}): Promise<Page<RevisionEntry>>;
|
|
78
|
+
listEntities(options?: AuthorizedListEntitiesOptions): Promise<Page<EntityListEntry>>;
|
|
79
|
+
searchEntities(query: string, options?: AuthorizedSearchOptions): Promise<Page<SearchResult>>;
|
|
80
|
+
getAuditEvent(eventId: string): Promise<AuditEvent>;
|
|
81
|
+
listAuditEvents(options?: AuthorizedListAuditOptions): Promise<Page<AuditEvent>>;
|
|
82
|
+
exportEntities(options?: Omit<AuthorizedListEntitiesOptions, 'cursor' | 'limit'>): Promise<string>;
|
|
83
|
+
inspectEntityIntegrity(id: EntityId): Promise<EntityIntegrityReport>;
|
|
84
|
+
inspectTaprootIntegrity(options?: AuthorizedListEntitiesOptions): Promise<Page<EntityIntegrityReport>>;
|
|
85
|
+
verifyAuditChain(id: EntityId): Promise<EntityIntegrityReport>;
|
|
86
|
+
repairEntityProjection(id: EntityId, metadata?: EditMetadata): Promise<EntityIntegrityReport>;
|
|
87
|
+
}
|
|
88
|
+
/** Taproot-owned, fail-closed canonical policy source. */
|
|
89
|
+
export declare class PersistedEntityAuthorizationSource implements EntityAuthorizationSource {
|
|
90
|
+
#private;
|
|
91
|
+
constructor(db: SqliteDatabaseLike);
|
|
92
|
+
getInstallationAuthorizationState(): Promise<InstallationAuthorizationState>;
|
|
93
|
+
getEntityAuthorization(entityId: EntityId): Promise<CanonicalAuthorizationRecord | null>;
|
|
94
|
+
getEntityRevisionAuthorization(entityId: EntityId, revisionNumber: number): Promise<CanonicalAuthorizationRecord | null>;
|
|
95
|
+
getStatementAuthorization(entityId: EntityId, statementId: string): Promise<CanonicalAuthorizationRecord | null>;
|
|
96
|
+
}
|
|
97
|
+
export declare function createAuthorizedTaproot(db: SqliteDatabaseLike, options: TaprootOptions, context: AuthorizationContext, authorizedOptions: AuthorizedTaprootOptions): AuthorizedTaprootReader;
|
|
98
|
+
//# sourceMappingURL=authorization.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../src/authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAQ3D,OAAO,KAAK,EACV,UAAU,EACV,qBAAqB,EACrB,QAAQ,EACR,eAAe,EAEf,IAAI,EACJ,cAAc,EACd,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,YAAY,EAEZ,iBAAiB,EACjB,iCAAiC,EACjC,oBAAoB,EACrB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,EACd,MAAM,iBAAiB,CAAC;AAEzB,eAAO,MAAM,uBAAuB,EAAG,cAAuB,CAAC;AAC/D,eAAO,MAAM,0BAA0B,EAAG,iBAA0B,CAAC;AACrE,eAAO,MAAM,2BAA2B,EAAG,kBAA2B,CAAC;AAEvE,MAAM,WAAW,4BAA4B;IAC3C,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,8BAA8B;IAC7C,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,iCAAiC,IAAI,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC7E,6EAA6E;IAC7E,sBAAsB,CACpB,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC,CAAC;IAChD,sEAAsE;IACtE,8BAA8B,CAC5B,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC,CAAC;IAChD,uFAAuF;IACvF,yBAAyB,CACvB,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC,CAAC;CACjD;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;CACrC;AAID,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,SAAS,GACb,wBAAwB,CAc1B;AAED,MAAM,WAAW,wBAAwB;IACvC,6EAA6E;IAC7E,WAAW,EAAE,wBAAwB,CAAC;CACvC;AAED,MAAM,MAAM,6BAA6B,GAAG,IAAI,CAC9C,mBAAmB,EACnB,QAAQ,CACT,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AACxB,MAAM,MAAM,uBAAuB,GAAG,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GAAG;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAsBF,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,oBAAoB,GAC1B,oBAAoB,CAgCtB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,iBAAiB,GACvB,iBAAiB,CAqCnB;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAEzE;AAED,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED,mFAAmF;AACnF,wBAAgB,yBAAyB,CACvC,GAAG,MAAM,EAAE,SAAS,iBAAiB,EAAE,GACtC,iBAAiB,CAKnB;AAED,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,iCAAiC,GACvC,iCAAiC,CA2CnC;AAED,wBAAgB,WAAW,CACzB,QAAQ,EAAE,iBAAiB,EAC3B,UAAU,EAAE,oBAAoB,GAC/B,OAAO,CAmBT;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAIT;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,oBAAoB,GAC5B,IAAI,CAGN;AAED;;;GAGG;AACH,qBAAa,uBAAuB;;gBAQhC,EAAE,EAAE,kBAAkB,EACtB,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,oBAAoB,EAC7B,iBAAiB,EAAE,wBAAwB;IAcvC,SAAS,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC;IAM9C,iBAAiB,CACrB,EAAE,EAAE,QAAQ,EACZ,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,aAAa,CAAC;IAMnB,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,SAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAoBpE,mBAAmB,CACvB,EAAE,EAAE,QAAQ,EACZ,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAChD,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAwDzB,YAAY,CAChB,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IA6E3B,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAwHxB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAcnD,eAAe,CACnB,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAuFtB,cAAc,CAClB,OAAO,GAAE,IAAI,CAAC,6BAA6B,EAAE,QAAQ,GAAG,OAAO,CAAM,GACpE,OAAO,CAAC,MAAM,CAAC;IAeZ,sBAAsB,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAOpE,uBAAuB,CAC3B,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAYjC,gBAAgB,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAoC9D,sBAAsB,CAC1B,EAAE,EAAE,QAAQ,EACZ,QAAQ,GAAE,YAAiB,GAC1B,OAAO,CAAC,qBAAqB,CAAC;CAiNlC;AAED,0DAA0D;AAC1D,qBAAa,kCAAmC,YAAW,yBAAyB;;gBAGtE,EAAE,EAAE,kBAAkB;IAI5B,iCAAiC,IAAI,OAAO,CAAC,8BAA8B,CAAC;IAoB5E,sBAAsB,CAC1B,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC;IAyGzC,8BAA8B,CAClC,QAAQ,EAAE,QAAQ,EAClB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC;IAwIzC,yBAAyB,CAC7B,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,4BAA4B,GAAG,IAAI,CAAC;CA+EhD;AAmDD,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,kBAAkB,EACtB,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,oBAAoB,EAC7B,iBAAiB,EAAE,wBAAwB,GAC1C,uBAAuB,CAEzB"}
|