@inhuman.tools/policy 0.0.0-stage → 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/authorize.scm +4 -0
- package/dist/acknowledge.d.ts +70 -0
- package/dist/acknowledge.d.ts.map +1 -0
- package/dist/acknowledge.js +162 -0
- package/dist/acknowledge.js.map +1 -0
- package/dist/authorize.d.ts +8 -0
- package/dist/authorize.d.ts.map +1 -0
- package/dist/authorize.js +39 -0
- package/dist/authorize.js.map +1 -0
- package/dist/bind.d.ts +6 -0
- package/dist/bind.d.ts.map +1 -0
- package/dist/bind.js +45 -0
- package/dist/bind.js.map +1 -0
- package/dist/check.d.ts +30 -0
- package/dist/check.d.ts.map +1 -0
- package/dist/check.js +389 -0
- package/dist/check.js.map +1 -0
- package/dist/classes.d.ts +23 -0
- package/dist/classes.d.ts.map +1 -0
- package/dist/classes.js +139 -0
- package/dist/classes.js.map +1 -0
- package/dist/compile.d.ts +40 -0
- package/dist/compile.d.ts.map +1 -0
- package/dist/compile.js +311 -0
- package/dist/compile.js.map +1 -0
- package/dist/deadline.d.ts +5 -0
- package/dist/deadline.d.ts.map +1 -0
- package/dist/deadline.js +17 -0
- package/dist/deadline.js.map +1 -0
- package/dist/decide.d.ts +64 -0
- package/dist/decide.d.ts.map +1 -0
- package/dist/decide.js +482 -0
- package/dist/decide.js.map +1 -0
- package/dist/error-with-invariant.d.ts +9 -0
- package/dist/error-with-invariant.d.ts.map +1 -0
- package/dist/error-with-invariant.js +12 -0
- package/dist/error-with-invariant.js.map +1 -0
- package/dist/floor.d.ts +9 -0
- package/dist/floor.d.ts.map +1 -0
- package/dist/floor.js +9 -0
- package/dist/floor.js.map +1 -0
- package/dist/glob-expand.d.ts +10 -0
- package/dist/glob-expand.d.ts.map +1 -0
- package/dist/glob-expand.js +132 -0
- package/dist/glob-expand.js.map +1 -0
- package/dist/guards.d.ts +26 -0
- package/dist/guards.d.ts.map +1 -0
- package/dist/guards.js +419 -0
- package/dist/guards.js.map +1 -0
- package/dist/identity.d.ts +11 -0
- package/dist/identity.d.ts.map +1 -0
- package/dist/identity.js +23 -0
- package/dist/identity.js.map +1 -0
- package/dist/index.d.ts +8 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +8 -0
- package/dist/index.js.map +1 -0
- package/dist/license-law.d.ts +43 -0
- package/dist/license-law.d.ts.map +1 -0
- package/dist/license-law.js +129 -0
- package/dist/license-law.js.map +1 -0
- package/dist/license.d.ts +3 -0
- package/dist/license.d.ts.map +1 -0
- package/dist/license.js +2 -0
- package/dist/license.js.map +1 -0
- package/dist/lift.d.ts +4 -0
- package/dist/lift.d.ts.map +1 -0
- package/dist/lift.js +14 -0
- package/dist/lift.js.map +1 -0
- package/dist/path-policy.d.ts +53 -0
- package/dist/path-policy.d.ts.map +1 -0
- package/dist/path-policy.js +248 -0
- package/dist/path-policy.js.map +1 -0
- package/dist/peel-cwd.d.ts +8 -0
- package/dist/peel-cwd.d.ts.map +1 -0
- package/dist/peel-cwd.js +120 -0
- package/dist/peel-cwd.js.map +1 -0
- package/dist/prep.d.ts +58 -0
- package/dist/prep.d.ts.map +1 -0
- package/dist/prep.js +690 -0
- package/dist/prep.js.map +1 -0
- package/dist/processor.d.ts +71 -0
- package/dist/processor.d.ts.map +1 -0
- package/dist/processor.js +132 -0
- package/dist/processor.js.map +1 -0
- package/dist/reasonable-defaults.d.ts +1448 -0
- package/dist/reasonable-defaults.d.ts.map +1 -0
- package/dist/reasonable-defaults.js +6 -0
- package/dist/reasonable-defaults.js.map +1 -0
- package/dist/reasonable-defaults.json +1662 -0
- package/dist/run-authorization.d.ts +8 -0
- package/dist/run-authorization.d.ts.map +1 -0
- package/dist/run-authorization.js +16 -0
- package/dist/run-authorization.js.map +1 -0
- package/dist/schemas/tirith.d.ts +58 -0
- package/dist/schemas/tirith.d.ts.map +1 -0
- package/dist/schemas/tirith.js +23 -0
- package/dist/schemas/tirith.js.map +1 -0
- package/dist/tirith-units.d.ts +2 -0
- package/dist/tirith-units.d.ts.map +1 -0
- package/dist/tirith-units.js +227 -0
- package/dist/tirith-units.js.map +1 -0
- package/dist/tirith.d.ts +24 -0
- package/dist/tirith.d.ts.map +1 -0
- package/dist/tirith.js +311 -0
- package/dist/tirith.js.map +1 -0
- package/dist/tool-path.d.ts +8 -0
- package/dist/tool-path.d.ts.map +1 -0
- package/dist/tool-path.js +38 -0
- package/dist/tool-path.js.map +1 -0
- package/dist/types.d.ts +87 -0
- package/dist/types.d.ts.map +1 -0
- package/dist/types.js +14 -0
- package/dist/types.js.map +1 -0
- package/dist/verdict.d.ts +15 -0
- package/dist/verdict.d.ts.map +1 -0
- package/dist/verdict.js +55 -0
- package/dist/verdict.js.map +1 -0
- package/package.json +62 -3
- package/src/acknowledge.ts +206 -0
- package/src/authorize.ts +38 -0
- package/src/bind.ts +58 -0
- package/src/check.ts +552 -0
- package/src/classes.ts +156 -0
- package/src/compile.ts +370 -0
- package/src/deadline.ts +15 -0
- package/src/floor.ts +16 -0
- package/src/glob-expand.ts +137 -0
- package/src/guards.ts +428 -0
- package/src/identity.ts +26 -0
- package/src/index.ts +24 -0
- package/src/lift.ts +15 -0
- package/src/path-policy.ts +280 -0
- package/src/processor.ts +187 -0
- package/src/reasonable-defaults.json +1662 -0
- package/src/reasonable-defaults.ts +8 -0
- package/src/run-authorization.ts +23 -0
- package/src/tool-path.ts +43 -0
- package/src/types.ts +102 -0
- package/src/verdict.ts +63 -0
- package/README.md +0 -3
package/dist/compile.js
ADDED
|
@@ -0,0 +1,311 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Compile a policy.json document into CommandNode + path terms.
|
|
3
|
+
* `"--"` is a handle, not a subcommand: omitted `policy` inherits.
|
|
4
|
+
* Extra keys on a command object are refused — verbs live under `subcommands`.
|
|
5
|
+
*/
|
|
6
|
+
import { ErrorWithInvariant } from "@inhuman.tools/error-with-invariant";
|
|
7
|
+
import { isClassId } from "./classes.js";
|
|
8
|
+
import { GUARDS } from "./guards.js";
|
|
9
|
+
import { mergePathTerms, normalizePath } from "./path-policy.js";
|
|
10
|
+
export class PolicyCompileError extends ErrorWithInvariant {
|
|
11
|
+
name = "PolicyCompileError";
|
|
12
|
+
}
|
|
13
|
+
export class PolicyAssumeError extends ErrorWithInvariant {
|
|
14
|
+
name = "PolicyAssumeError";
|
|
15
|
+
expected;
|
|
16
|
+
actual;
|
|
17
|
+
command;
|
|
18
|
+
constructor(message, detail) {
|
|
19
|
+
super(message);
|
|
20
|
+
if (detail !== undefined) {
|
|
21
|
+
this.expected = detail.expected;
|
|
22
|
+
this.actual = detail.actual;
|
|
23
|
+
this.command = detail.command;
|
|
24
|
+
}
|
|
25
|
+
}
|
|
26
|
+
}
|
|
27
|
+
const DISPS = new Set(["policyApprove", "approve", "allow", "ask", "deny", "block"]);
|
|
28
|
+
const RESERVED = new Set([
|
|
29
|
+
"policy",
|
|
30
|
+
"class",
|
|
31
|
+
"family_args",
|
|
32
|
+
"arg_types",
|
|
33
|
+
"arg_rest_type",
|
|
34
|
+
"flag_paths",
|
|
35
|
+
"guard",
|
|
36
|
+
"matcher",
|
|
37
|
+
"--",
|
|
38
|
+
"subcommands",
|
|
39
|
+
]);
|
|
40
|
+
export function compilePolicy(document) {
|
|
41
|
+
const raw = document;
|
|
42
|
+
if (raw === null || raw === undefined)
|
|
43
|
+
return { assume: [] };
|
|
44
|
+
PolicyCompileError.invariant(isRecord(raw), "policy.json: document must be a mapping");
|
|
45
|
+
const unknown = Object.keys(raw).filter((key) => !key.startsWith(".") &&
|
|
46
|
+
![
|
|
47
|
+
"read_file",
|
|
48
|
+
"write_file",
|
|
49
|
+
"read_block",
|
|
50
|
+
"write_block",
|
|
51
|
+
"bash",
|
|
52
|
+
"assume",
|
|
53
|
+
"read_miss_class",
|
|
54
|
+
"write_miss_class",
|
|
55
|
+
].includes(key));
|
|
56
|
+
PolicyCompileError.invariant(unknown.length === 0, `policy.json: unknown top-level key ${unknown[0]}`);
|
|
57
|
+
const readMiss = parseClass(raw.read_miss_class, "read_miss_class") ?? "envelope-read";
|
|
58
|
+
const writeMiss = parseClass(raw.write_miss_class, "write_miss_class") ?? "envelope-write";
|
|
59
|
+
return {
|
|
60
|
+
bash: raw.bash === undefined ? undefined : parseCommandDef(raw.bash, "bash", true),
|
|
61
|
+
read: mergePathTerms("read", readMiss, parsePathList(raw.read_file, "read_file", "policyApprove", "envelope-read"), parseBlockList(raw.read_block, "read_block", "credential")),
|
|
62
|
+
write: mergePathTerms("write", writeMiss, parsePathList(raw.write_file, "write_file", "ask", "workspace-write"), parseBlockList(raw.write_block, "write_block", "control-plane")),
|
|
63
|
+
assume: parseAssume(raw.assume),
|
|
64
|
+
};
|
|
65
|
+
}
|
|
66
|
+
/** A class id from the closed taxonomy. An unknown id is a compile error, never a new class. */
|
|
67
|
+
function parseClass(value, path) {
|
|
68
|
+
if (value === undefined)
|
|
69
|
+
return undefined;
|
|
70
|
+
PolicyCompileError.invariant(isClassId(value), `policy.json: unknown class ${String(value)} at ${path}`);
|
|
71
|
+
return value;
|
|
72
|
+
}
|
|
73
|
+
/** A path item is a string, or `{ path, class }` to tag the rule with a dist class. */
|
|
74
|
+
function pathItem(item, field) {
|
|
75
|
+
if (typeof item === "string")
|
|
76
|
+
return { pattern: item };
|
|
77
|
+
PolicyCompileError.invariant(isRecord(item), `${field}: each pattern is a string or { path, class }`);
|
|
78
|
+
const extra = Object.keys(item).filter((key) => key !== "path" && key !== "class");
|
|
79
|
+
PolicyCompileError.invariant(extra.length === 0, `${field}: unknown key ${extra[0]}`);
|
|
80
|
+
PolicyCompileError.invariant(typeof item.path === "string", `${field}: { path } is a string`);
|
|
81
|
+
return { pattern: item.path, class: parseClass(item.class, `${field}.class`) };
|
|
82
|
+
}
|
|
83
|
+
function parsePathList(value, field, enable, enableClass) {
|
|
84
|
+
if (value === undefined)
|
|
85
|
+
return undefined;
|
|
86
|
+
PolicyCompileError.invariant(Array.isArray(value), `${field}: list of strings`);
|
|
87
|
+
return value.map((raw) => {
|
|
88
|
+
const { pattern: item, class: tagged } = pathItem(raw, field);
|
|
89
|
+
PolicyCompileError.invariant(!item.startsWith("-"), "path pattern: - is not a prefix; ! is deny on the enable list");
|
|
90
|
+
const deny = item.startsWith("!");
|
|
91
|
+
const stem = normalizePath(deny ? item.slice(1) : item);
|
|
92
|
+
PolicyCompileError.invariant(stem !== undefined, "path pattern: empty or unresolvable");
|
|
93
|
+
return {
|
|
94
|
+
id: `${field}:${deny ? "!" : ""}${stem}`,
|
|
95
|
+
polarity: deny ? "deny" : enable,
|
|
96
|
+
stem,
|
|
97
|
+
unanchored: stem !== "." && !stem.startsWith("/") && !stem.includes("/"),
|
|
98
|
+
class: tagged ?? (deny ? "protected-file" : enableClass),
|
|
99
|
+
};
|
|
100
|
+
});
|
|
101
|
+
}
|
|
102
|
+
function parseBlockList(value, field, defaultClass) {
|
|
103
|
+
if (value === undefined)
|
|
104
|
+
return undefined;
|
|
105
|
+
PolicyCompileError.invariant(Array.isArray(value), `${field}: list of strings`);
|
|
106
|
+
return value.map((raw) => {
|
|
107
|
+
const { pattern: item, class: tagged } = pathItem(raw, field);
|
|
108
|
+
PolicyCompileError.invariant(!item.startsWith("!") && !item.startsWith("-"), "block list: stem without a polarity prefix");
|
|
109
|
+
const stem = normalizePath(item);
|
|
110
|
+
PolicyCompileError.invariant(stem !== undefined, "path pattern: empty or unresolvable");
|
|
111
|
+
return {
|
|
112
|
+
id: `${field}:${stem}`,
|
|
113
|
+
polarity: "block",
|
|
114
|
+
stem,
|
|
115
|
+
unanchored: stem !== "." && !stem.startsWith("/") && !stem.includes("/"),
|
|
116
|
+
class: tagged ?? defaultClass,
|
|
117
|
+
};
|
|
118
|
+
});
|
|
119
|
+
}
|
|
120
|
+
function parseAssume(value) {
|
|
121
|
+
if (value === undefined)
|
|
122
|
+
return [];
|
|
123
|
+
PolicyCompileError.invariant(Array.isArray(value), "assume: list of { command, expect }");
|
|
124
|
+
return value.map((item, i) => {
|
|
125
|
+
PolicyCompileError.invariant(isRecord(item), `assume[${i}]: mapping`);
|
|
126
|
+
PolicyCompileError.invariant(typeof item.command === "string", `assume[${i}]: command is a string`);
|
|
127
|
+
const expect = asDisposition(item.expect);
|
|
128
|
+
PolicyCompileError.invariant(expect !== undefined, `assume[${i}]: expect is approve|ask|deny|block`);
|
|
129
|
+
const expectClass = parseClass(item.expect_class, `assume[${i}].expect_class`);
|
|
130
|
+
return { command: item.command, expect, ...(expectClass === undefined ? {} : { expectClass }) };
|
|
131
|
+
});
|
|
132
|
+
}
|
|
133
|
+
function parseFamilyArgs(value, path) {
|
|
134
|
+
if (value === undefined)
|
|
135
|
+
return 0;
|
|
136
|
+
PolicyCompileError.invariant(typeof value === "number" && Number.isInteger(value) && value >= 0 && value <= 4, `${path}.family_args: integer 0..4`);
|
|
137
|
+
return value;
|
|
138
|
+
}
|
|
139
|
+
function parseCommandDef(value, path, policyRequired) {
|
|
140
|
+
const disp = asDisposition(value);
|
|
141
|
+
if (disp !== undefined) {
|
|
142
|
+
return { policy: disp, familyArgs: 0, argTypes: [], flagPaths: {}, guards: [], matchers: [], subcommands: {} };
|
|
143
|
+
}
|
|
144
|
+
PolicyCompileError.invariant(isRecord(value), `${path}: command is a disposition or a mapping`);
|
|
145
|
+
const extra = Object.keys(value).filter((key) => !RESERVED.has(key));
|
|
146
|
+
PolicyCompileError.invariant(extra.length === 0, `${path}: unknown key ${extra[0]} — verbs go under subcommands`);
|
|
147
|
+
const policy = value.policy === undefined ? undefined : asDisposition(value.policy);
|
|
148
|
+
PolicyCompileError.invariant(value.policy === undefined || policy !== undefined, `${path}.policy: approve|ask|deny|block`);
|
|
149
|
+
PolicyCompileError.invariant(!policyRequired || policy !== undefined, `${path}: policy is required`);
|
|
150
|
+
const subcommands = {};
|
|
151
|
+
if (value.subcommands !== undefined) {
|
|
152
|
+
PolicyCompileError.invariant(isRecord(value.subcommands), `${path}.subcommands: mapping`);
|
|
153
|
+
for (const [name, def] of Object.entries(value.subcommands)) {
|
|
154
|
+
subcommands[String(name)] = parseCommandDef(def, `${path}.subcommands.${name}`, true);
|
|
155
|
+
}
|
|
156
|
+
}
|
|
157
|
+
return {
|
|
158
|
+
policy,
|
|
159
|
+
class: parseClass(value.class, `${path}.class`),
|
|
160
|
+
familyArgs: parseFamilyArgs(value.family_args, path),
|
|
161
|
+
argTypes: parseArgTypes(value.arg_types, `${path}.arg_types`),
|
|
162
|
+
argRestType: parseArgType(value.arg_rest_type, `${path}.arg_rest_type`),
|
|
163
|
+
flagPaths: parseFlagPaths(value.flag_paths, `${path}.flag_paths`),
|
|
164
|
+
guards: parseGuards(value.guard, `${path}.guard`),
|
|
165
|
+
matchers: parseMatchers(value.matcher, `${path}.matcher`),
|
|
166
|
+
dash: value["--"] === undefined ? undefined : parseCommandDef(value["--"], `${path}.--`, false),
|
|
167
|
+
subcommands,
|
|
168
|
+
};
|
|
169
|
+
}
|
|
170
|
+
function parseArgTypes(value, path) {
|
|
171
|
+
if (value === undefined)
|
|
172
|
+
return [];
|
|
173
|
+
PolicyCompileError.invariant(Array.isArray(value), `${path}: list`);
|
|
174
|
+
return value.map((item, i) => {
|
|
175
|
+
const parsed = parseArgType(item, `${path}[${i}]`);
|
|
176
|
+
PolicyCompileError.invariant(parsed !== undefined, `${path}[${i}]: missing`);
|
|
177
|
+
return parsed;
|
|
178
|
+
});
|
|
179
|
+
}
|
|
180
|
+
function parseArgType(value, path) {
|
|
181
|
+
if (value === undefined)
|
|
182
|
+
return undefined;
|
|
183
|
+
PolicyCompileError.invariant(value === "read_path" || value === "write_path", `${path}: read_path|write_path`);
|
|
184
|
+
return value;
|
|
185
|
+
}
|
|
186
|
+
/** `{ "--output": "write_path", "-o": "write_path" }`. Long names also match every unambiguous-prefix spelling. */
|
|
187
|
+
function parseFlagPaths(value, path) {
|
|
188
|
+
if (value === undefined)
|
|
189
|
+
return {};
|
|
190
|
+
PolicyCompileError.invariant(isRecord(value), `${path}: mapping of option to read_path|write_path`);
|
|
191
|
+
const out = {};
|
|
192
|
+
for (const [name, kind] of Object.entries(value)) {
|
|
193
|
+
PolicyCompileError.invariant(name.startsWith("-"), `${path}.${name}: option name`);
|
|
194
|
+
const parsed = parseArgType(kind, `${path}.${name}`);
|
|
195
|
+
PolicyCompileError.invariant(parsed !== undefined, `${path}.${name}: missing`);
|
|
196
|
+
for (const spelling of withPrefixes([name]))
|
|
197
|
+
out[spelling] = parsed;
|
|
198
|
+
}
|
|
199
|
+
return out;
|
|
200
|
+
}
|
|
201
|
+
function parseGuards(value, path) {
|
|
202
|
+
const names = stringList(value, path);
|
|
203
|
+
for (const name of names)
|
|
204
|
+
PolicyCompileError.invariant(GUARDS.has(name), `${path}: unknown guard ${name}`);
|
|
205
|
+
return names;
|
|
206
|
+
}
|
|
207
|
+
/** getopt_long accepts any unique prefix of a long option; the policy treats every prefix as the option. */
|
|
208
|
+
function withPrefixes(names) {
|
|
209
|
+
const out = new Set(names);
|
|
210
|
+
for (const name of names) {
|
|
211
|
+
if (!name.startsWith("--"))
|
|
212
|
+
continue;
|
|
213
|
+
for (let end = 3; end < name.length; end += 1)
|
|
214
|
+
out.add(name.slice(0, end));
|
|
215
|
+
}
|
|
216
|
+
return [...out];
|
|
217
|
+
}
|
|
218
|
+
function parseMatchers(value, path) {
|
|
219
|
+
if (value === undefined)
|
|
220
|
+
return [];
|
|
221
|
+
PolicyCompileError.invariant(Array.isArray(value), `${path}: list`);
|
|
222
|
+
return value.map((item, i) => {
|
|
223
|
+
const here = `${path}[${i}]`;
|
|
224
|
+
PolicyCompileError.invariant(isRecord(item), `${here}: mapping`);
|
|
225
|
+
const extra = Object.keys(item).filter((key) => !["flags", "glob", "tok", "matcher", "policy", "class"].includes(key));
|
|
226
|
+
PolicyCompileError.invariant(extra.length === 0, `${here}: unknown key ${extra[0]}`);
|
|
227
|
+
const policy = item.policy === undefined ? undefined : asDisposition(item.policy);
|
|
228
|
+
PolicyCompileError.invariant(item.policy === undefined || policy !== undefined, `${here}.policy: approve|ask|deny|block`);
|
|
229
|
+
return {
|
|
230
|
+
class: parseClass(item.class, `${here}.class`),
|
|
231
|
+
flags: parseFlags(item.flags, `${here}.flags`),
|
|
232
|
+
globs: stringList(item.glob, `${here}.glob`),
|
|
233
|
+
toks: stringList(item.tok, `${here}.tok`),
|
|
234
|
+
matchers: parseMatchers(item.matcher, `${here}.matcher`),
|
|
235
|
+
policy,
|
|
236
|
+
};
|
|
237
|
+
});
|
|
238
|
+
}
|
|
239
|
+
function parseFlags(value, path) {
|
|
240
|
+
if (value === undefined)
|
|
241
|
+
return {};
|
|
242
|
+
PolicyCompileError.invariant(isRecord(value), `${path}: mapping`);
|
|
243
|
+
const out = {};
|
|
244
|
+
for (const [raw, spec] of Object.entries(value)) {
|
|
245
|
+
const canonical = String(raw);
|
|
246
|
+
out[canonical] = parseFlagConstraint(spec, canonical, `${path}.${canonical}`);
|
|
247
|
+
}
|
|
248
|
+
return out;
|
|
249
|
+
}
|
|
250
|
+
function parseFlagConstraint(value, canonical, path) {
|
|
251
|
+
if (value === true || value === null) {
|
|
252
|
+
return { names: [canonical], vals: [], takesValue: false };
|
|
253
|
+
}
|
|
254
|
+
PolicyCompileError.invariant(isRecord(value), `${path}: true or { alias, value, value_type }`);
|
|
255
|
+
const extra = Object.keys(value).filter((key) => !["alias", "value", "value_type", "abbrev"].includes(key));
|
|
256
|
+
PolicyCompileError.invariant(extra.length === 0, `${path}: unknown key ${extra[0]}`);
|
|
257
|
+
const aliases = stringList(value.alias, `${path}.alias`);
|
|
258
|
+
const vals = stringList(value.value, `${path}.value`);
|
|
259
|
+
const takesValue = vals.length > 0 || value.value_type !== undefined;
|
|
260
|
+
if (value.value_type !== undefined) {
|
|
261
|
+
PolicyCompileError.invariant(typeof value.value_type === "string", `${path}.value_type: string`);
|
|
262
|
+
}
|
|
263
|
+
PolicyCompileError.invariant(value.abbrev === undefined || typeof value.abbrev === "boolean", `${path}.abbrev: boolean`);
|
|
264
|
+
const names = [canonical, ...aliases];
|
|
265
|
+
return { names: value.abbrev === true ? withPrefixes(names) : names, vals, takesValue };
|
|
266
|
+
}
|
|
267
|
+
function stringList(value, path) {
|
|
268
|
+
if (value === undefined)
|
|
269
|
+
return [];
|
|
270
|
+
if (typeof value === "string")
|
|
271
|
+
return [value];
|
|
272
|
+
PolicyCompileError.invariant(Array.isArray(value), `${path}: string or list of strings`);
|
|
273
|
+
return value.map((item, i) => {
|
|
274
|
+
PolicyCompileError.invariant(typeof item === "string", `${path}[${i}]: string`);
|
|
275
|
+
return item;
|
|
276
|
+
});
|
|
277
|
+
}
|
|
278
|
+
function asDisposition(value) {
|
|
279
|
+
if (typeof value !== "string" || !DISPS.has(value))
|
|
280
|
+
return undefined;
|
|
281
|
+
if (value === "allow" || value === "approve" || value === "policyApprove")
|
|
282
|
+
return "policyApprove";
|
|
283
|
+
return value;
|
|
284
|
+
}
|
|
285
|
+
export function flagVocab(node) {
|
|
286
|
+
const names = new Set();
|
|
287
|
+
addMatcherFlags(node.matchers, names, false);
|
|
288
|
+
return names;
|
|
289
|
+
}
|
|
290
|
+
export function valueFlagNames(node) {
|
|
291
|
+
const names = new Set();
|
|
292
|
+
addMatcherFlags(node.matchers, names, true);
|
|
293
|
+
for (const name of Object.keys(node.flagPaths))
|
|
294
|
+
names.add(name);
|
|
295
|
+
return names;
|
|
296
|
+
}
|
|
297
|
+
function addMatcherFlags(matchers, names, valueOnly) {
|
|
298
|
+
for (const matcher of matchers) {
|
|
299
|
+
for (const flag of Object.values(matcher.flags)) {
|
|
300
|
+
if (valueOnly && !flag.takesValue)
|
|
301
|
+
continue;
|
|
302
|
+
for (const name of flag.names)
|
|
303
|
+
names.add(name);
|
|
304
|
+
}
|
|
305
|
+
addMatcherFlags(matcher.matchers, names, valueOnly);
|
|
306
|
+
}
|
|
307
|
+
}
|
|
308
|
+
function isRecord(value) {
|
|
309
|
+
return value !== null && typeof value === "object" && !Array.isArray(value);
|
|
310
|
+
}
|
|
311
|
+
//# sourceMappingURL=compile.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"compile.js","sourceRoot":"","sources":["../src/compile.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,OAAO,EAAE,SAAS,EAAgB,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAiB,MAAM,kBAAkB,CAAC;AAKhF,MAAM,OAAO,kBAAmB,SAAQ,kBAAkB;IACtC,IAAI,GAAG,oBAAoB,CAAC;CAC/C;AAED,MAAM,OAAO,iBAAkB,SAAQ,kBAAkB;IACrC,IAAI,GAAG,mBAAmB,CAAC;IACpC,QAAQ,CAAe;IACvB,MAAM,CAAe;IACrB,OAAO,CAAU;IAE1B,YAAY,OAAe,EAAE,MAAwE;QACnG,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC5B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAChC,CAAC;IACH,CAAC;CACF;AAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AACrF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,QAAQ;IACR,OAAO;IACP,aAAa;IACb,WAAW;IACX,eAAe;IACf,YAAY;IACZ,OAAO;IACP,SAAS;IACT,IAAI;IACJ,aAAa;CACd,CAAC,CAAC;AAgBH,MAAM,UAAU,aAAa,CAAC,QAAiB;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC;IACrB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC7D,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,yCAAyC,CAAC,CAAC;IACvF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CACrC,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QACpB,CAAC;YACC,WAAW;YACX,YAAY;YACZ,YAAY;YACZ,aAAa;YACb,MAAM;YACN,QAAQ;YACR,iBAAiB;YACjB,kBAAkB;SACnB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAClB,CAAC;IACF,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,sCAAsC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvG,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,eAAe,EAAE,iBAAiB,CAAC,IAAI,eAAe,CAAC;IACvF,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,IAAI,gBAAgB,CAAC;IAC3F,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC;QAClF,IAAI,EAAE,cAAc,CAClB,MAAM,EACN,QAAQ,EACR,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,CAAC,EAC3E,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC,CAC3D;QACD,KAAK,EAAE,cAAc,CACnB,OAAO,EACP,SAAS,EACT,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,iBAAiB,CAAC,EACrE,cAAc,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,eAAe,CAAC,CAChE;QACD,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,SAAS,UAAU,CAAC,KAAc,EAAE,IAAY;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,kBAAkB,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,8BAA8B,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACzG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uFAAuF;AACvF,SAAS,QAAQ,CAAC,IAAa,EAAE,KAAa;IAC5C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACvD,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,+CAA+C,CAAC,CAAC;IACtG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC;IACnF,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,GAAG,KAAK,iBAAiB,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtF,kBAAkB,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,GAAG,KAAK,wBAAwB,CAAC,CAAC;IAC9F,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,aAAa,CACpB,KAAc,EACd,KAAa,EACb,MAA+B,EAC/B,WAAoB;IAEpB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAChF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACvB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9D,kBAAkB,CAAC,SAAS,CAC1B,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EACrB,+DAA+D,CAChE,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxD,kBAAkB,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,qCAAqC,CAAC,CAAC;QACxF,OAAO;YACL,EAAE,EAAE,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE;YACxC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAChC,IAAI;YACJ,UAAU,EAAE,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxE,KAAK,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC;SACtC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa,EAAE,YAAqB;IAC1E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAChF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACvB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9D,kBAAkB,CAAC,SAAS,CAC1B,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAC9C,4CAA4C,CAC7C,CAAC;QACF,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACjC,kBAAkB,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,qCAAqC,CAAC,CAAC;QACxF,OAAO;YACL,EAAE,EAAE,GAAG,KAAK,IAAI,IAAI,EAAE;YACtB,QAAQ,EAAE,OAAgB;YAC1B,IAAI;YACJ,UAAU,EAAE,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACxE,KAAK,EAAE,MAAM,IAAI,YAAY;SACX,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,qCAAqC,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAC3B,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;QACtE,kBAAkB,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,UAAU,CAAC,wBAAwB,CAAC,CAAC;QACpG,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,kBAAkB,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,UAAU,CAAC,qCAAqC,CAAC,CAAC;QACrG,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAC/E,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IAClG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,IAAY;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAClC,kBAAkB,CAAC,SAAS,CAC1B,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAChF,GAAG,IAAI,4BAA4B,CACpC,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,IAAY,EAAE,cAAuB;IAC5E,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACjH,CAAC;IACD,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,yCAAyC,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,GAAG,IAAI,iBAAiB,KAAK,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;IAClH,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpF,kBAAkB,CAAC,SAAS,CAC1B,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAClD,GAAG,IAAI,iCAAiC,CACzC,CAAC;IACF,kBAAkB,CAAC,SAAS,CAAC,CAAC,cAAc,IAAI,MAAM,KAAK,SAAS,EAAE,GAAG,IAAI,sBAAsB,CAAC,CAAC;IACrG,MAAM,WAAW,GAAgC,EAAE,CAAC;IACpD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,uBAAuB,CAAC,CAAC;QAC1F,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5D,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,eAAe,CAAC,GAAG,EAAE,GAAG,IAAI,gBAAgB,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM;QACN,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC;QAC/C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC;QACpD,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,CAAC;QAC7D,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,IAAI,gBAAgB,CAAC;QACvE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,IAAI,aAAa,CAAC;QACjE,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC;QACjD,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,UAAU,CAAC;QACzD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,KAAK,EAAE,KAAK,CAAC;QAC/F,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,IAAY;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;QACnD,kBAAkB,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY;IAChD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,kBAAkB,CAAC,SAAS,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,YAAY,EAAE,GAAG,IAAI,wBAAwB,CAAC,CAAC;IAC/G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mHAAmH;AACnH,SAAS,cAAc,CAAC,KAAc,EAAE,IAAY;IAClD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,6CAA6C,CAAC,CAAC;IACpG,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,IAAI,IAAI,eAAe,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QACrD,kBAAkB,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,GAAG,IAAI,IAAI,IAAI,WAAW,CAAC,CAAC;QAC/E,KAAK,MAAM,QAAQ,IAAI,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,mBAAmB,IAAI,EAAE,CAAC,CAAC;IAC3G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4GAA4G;AAC5G,SAAS,YAAY,CAAC,KAAwB;IAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACrC,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,IAAY;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;IACpE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAC7B,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CACpC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC/E,CAAC;QACF,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,GAAG,IAAI,iBAAiB,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClF,kBAAkB,CAAC,SAAS,CAC1B,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EACjD,GAAG,IAAI,iCAAiC,CACzC,CAAC;QACF,OAAO;YACL,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC;YAC9C,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC;YAC9C,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC;YAC5C,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,MAAM,CAAC;YACzC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,UAAU,CAAC;YACxD,MAAM;SACP,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,IAAY;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC;IAClE,MAAM,GAAG,GAAmC,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,GAAG,CAAC,SAAS,CAAC,GAAG,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,SAAiB,EAAE,IAAY;IAC1E,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACrC,OAAO,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC7D,CAAC;IACD,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,wCAAwC,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5G,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,GAAG,IAAI,iBAAiB,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC;IACrE,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,kBAAkB,CAAC,SAAS,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,GAAG,IAAI,qBAAqB,CAAC,CAAC;IACnG,CAAC;IACD,kBAAkB,CAAC,SAAS,CAC1B,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS,EAC/D,GAAG,IAAI,kBAAkB,CAC1B,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,CAAC;IACtC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC1F,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,IAAY;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,6BAA6B,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAC3B,kBAAkB,CAAC,SAAS,CAAC,OAAO,IAAI,KAAK,QAAQ,EAAE,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACrE,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,eAAe;QAAE,OAAO,eAAe,CAAC;IAClG,OAAO,KAAoB,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAiB;IACzC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAiB;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,QAA4B,EAAE,KAAkB,EAAE,SAAkB;IAC3F,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU;gBAAE,SAAS;YAC5C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;QACD,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
/** Judge budget shared by the adapters. Crush's hook self-bounds at the same 20 s. */
|
|
2
|
+
export declare const JUDGE_DEADLINE_MS = 20000;
|
|
3
|
+
/** Reject when `work` has not settled in `ms`; the caller maps a rejection to deny. */
|
|
4
|
+
export declare function withDeadline<T>(work: Promise<T>, ms?: number): Promise<T>;
|
|
5
|
+
//# sourceMappingURL=deadline.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"deadline.d.ts","sourceRoot":"","sources":["../src/deadline.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,eAAO,MAAM,iBAAiB,QAAS,CAAC;AAExC,uFAAuF;AACvF,wBAAsB,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,GAAE,MAA0B,GAAG,OAAO,CAAC,CAAC,CAAC,CAUlG"}
|
package/dist/deadline.js
ADDED
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
/** Judge budget shared by the adapters. Crush's hook self-bounds at the same 20 s. */
|
|
2
|
+
export const JUDGE_DEADLINE_MS = 20_000;
|
|
3
|
+
/** Reject when `work` has not settled in `ms`; the caller maps a rejection to deny. */
|
|
4
|
+
export async function withDeadline(work, ms = JUDGE_DEADLINE_MS) {
|
|
5
|
+
let timer;
|
|
6
|
+
const expired = new Promise((_resolve, reject) => {
|
|
7
|
+
timer = setTimeout(() => reject(new Error("authorization timed out")), ms);
|
|
8
|
+
});
|
|
9
|
+
try {
|
|
10
|
+
return await Promise.race([work, expired]);
|
|
11
|
+
}
|
|
12
|
+
finally {
|
|
13
|
+
if (timer !== undefined)
|
|
14
|
+
clearTimeout(timer);
|
|
15
|
+
}
|
|
16
|
+
}
|
|
17
|
+
//# sourceMappingURL=deadline.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"deadline.js","sourceRoot":"","sources":["../src/deadline.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAExC,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,IAAgB,EAAE,KAAa,iBAAiB;IACpF,IAAI,KAAgD,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC"}
|
package/dist/decide.d.ts
ADDED
|
@@ -0,0 +1,64 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Votes. `complete` returns JSON `{ value }`. Scheme `#f` is an abstain.
|
|
3
|
+
* Sage and Jev build that same object. A thrown error falls back to `complete`;
|
|
4
|
+
* an abort does not. A failure is never an allow. Jev has no sort.
|
|
5
|
+
*/
|
|
6
|
+
import { EnvCapability } from "@inhuman.tools/arrival";
|
|
7
|
+
import { z } from "zod";
|
|
8
|
+
import { ErrorWithInvariant } from "./error-with-invariant.js";
|
|
9
|
+
export declare class DecideError extends ErrorWithInvariant {
|
|
10
|
+
readonly name = "DecideError";
|
|
11
|
+
}
|
|
12
|
+
export type DecideRequest = {
|
|
13
|
+
kind: "yesno";
|
|
14
|
+
instructions: string;
|
|
15
|
+
} | {
|
|
16
|
+
kind: "choose";
|
|
17
|
+
instructions: string;
|
|
18
|
+
options: readonly {
|
|
19
|
+
option: string;
|
|
20
|
+
description?: string;
|
|
21
|
+
}[];
|
|
22
|
+
} | {
|
|
23
|
+
kind: "scale";
|
|
24
|
+
instructions: string;
|
|
25
|
+
levels: readonly {
|
|
26
|
+
level: number;
|
|
27
|
+
description?: string;
|
|
28
|
+
}[];
|
|
29
|
+
} | {
|
|
30
|
+
kind: "gauge";
|
|
31
|
+
instructions: string;
|
|
32
|
+
start: number;
|
|
33
|
+
end: number;
|
|
34
|
+
step: number;
|
|
35
|
+
} | {
|
|
36
|
+
kind: "tag";
|
|
37
|
+
instructions: string;
|
|
38
|
+
tags: readonly {
|
|
39
|
+
tag: string;
|
|
40
|
+
description?: string;
|
|
41
|
+
}[];
|
|
42
|
+
} | {
|
|
43
|
+
kind: "sort";
|
|
44
|
+
instructions: string;
|
|
45
|
+
items: readonly {
|
|
46
|
+
id: string;
|
|
47
|
+
content: string;
|
|
48
|
+
}[];
|
|
49
|
+
};
|
|
50
|
+
export type DecideComplete = (request: DecideRequest) => Promise<unknown>;
|
|
51
|
+
export declare const decideCapability: EnvCapability<{
|
|
52
|
+
backend: z.ZodDefault<z.ZodEnum<{
|
|
53
|
+
structured: "structured";
|
|
54
|
+
sage: "sage";
|
|
55
|
+
jev: "jev";
|
|
56
|
+
}>>;
|
|
57
|
+
complete: z.ZodOptional<z.ZodFunction<z.ZodTuple<readonly [z.ZodType<DecideRequest, DecideRequest, z.core.$ZodTypeInternals<DecideRequest, DecideRequest>>], null>, z.ZodPromise<z.ZodUnknown>>>;
|
|
58
|
+
document: z.ZodDefault<z.ZodString>;
|
|
59
|
+
sageApiKey: z.ZodOptional<z.ZodString>;
|
|
60
|
+
jevApiKey: z.ZodOptional<z.ZodString>;
|
|
61
|
+
sageAsk: z.ZodOptional<z.ZodFunction<z.ZodTuple<readonly [z.ZodString, z.ZodType<DecideRequest, DecideRequest, z.core.$ZodTypeInternals<DecideRequest, DecideRequest>>], null>, z.ZodPromise<z.ZodUnknown>>>;
|
|
62
|
+
jevAsk: z.ZodOptional<z.ZodFunction<z.ZodTuple<readonly [z.ZodString, z.ZodType<DecideRequest, DecideRequest, z.core.$ZodTypeInternals<DecideRequest, DecideRequest>>], null>, z.ZodPromise<z.ZodUnknown>>>;
|
|
63
|
+
}, Record<string, never>>;
|
|
64
|
+
//# sourceMappingURL=decide.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"decide.d.ts","sourceRoot":"","sources":["../src/decide.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AASvD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,qBAAa,WAAY,SAAQ,kBAAkB;IACjD,SAAkB,IAAI,iBAAiB;CACxC;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GACtG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GACnG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjF;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GAC7F;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,CAAC;AAE9F,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAyb1E,eAAO,MAAM,gBAAgB;;;;;;;;;;;;yBAkF3B,CAAC"}
|