@lovrozagar/honey 0.7.2 → 1.0.0-rc.1

package/dist/meta-spec-merge.js

@@ -1,68 +0,0 @@
-/** The strictness a declared policy actually runs with: `"error"` unless it says otherwise. */
-export function resolvedStrictness(config) {
-    return config?.strict ?? (config ? "error" : "off");
-}
-/**
- * Merge a mounted sub-app's policy into a parent's.
- *
- * The parent wins on conflict, so one gateway keeps one answer for its aggregate document —
- * with a single exception. A sub entry of `false` wins over anything the parent says, because
- * hiding is a safety claim and the strictest claim has to survive composition: a worker that
- * declares a field unpublishable must not have the gateway publish it. Wrongly hidden is a
- * visible gap; wrongly published is a leak.
- *
- * Strictness is the parent's *resolved* setting: a parent that never wrote `strict` runs with
- * `"error"`, and a sub-app's `"off"` must not downgrade it. Every other disagreement is
- * recorded in `conflicts` and reported at codegen.
- *
- * Order-independent with respect to when the parent declares its own policy: callers may keep
- * the absorbed sub policies and merge them in at codegen time.
- */
-export function mergeMetaSpec(own, sub) {
-    if (!sub)
-        return own;
-    if (!own)
-        return sub;
-    const conflicts = [...(own.conflicts ?? []), ...(sub.conflicts ?? [])];
-    const meta = { ...sub.meta, ...own.meta };
-    for (const [key, subEntry] of Object.entries(sub.meta ?? {})) {
-        const ownEntry = own.meta?.[key];
-        if (ownEntry === undefined || ownEntry === subEntry)
-            continue;
-        if (subEntry === false && ownEntry !== false) {
-            meta[key] = false;
-            conflicts.push({ key, resolution: "hidden", section: "meta" });
-            continue;
-        }
-        conflicts.push({ key, resolution: "parent", section: "meta" });
-    }
-    const recordOverlap = (section, subSide, ownSide) => {
-        for (const [key, subEntry] of Object.entries(subSide)) {
-            const ownEntry = ownSide[key];
-            if (ownEntry === undefined || ownEntry === subEntry)
-                continue;
-            conflicts.push({ key, resolution: "parent", section });
-        }
-    };
-    recordOverlap("schema", sub.schema ?? {}, own.schema ?? {});
-    recordOverlap("profiles", sub.profiles ?? {}, own.profiles ?? {});
-    return {
-        conflicts,
-        meta,
-        profiles: { ...sub.profiles, ...own.profiles },
-        schema: { ...sub.schema, ...own.schema },
-        strict: resolvedStrictness(own),
-    };
-}
-function resolveSource(source) {
-    let merged = source.declared;
-    for (const sub of source.absorbed)
-        merged = mergeMetaSpec(merged, resolveSource(sub));
-    return merged;
-}
-/** The policy codegen applies to `app`: its own, with every mounted sub-app's merged in mount order. */
-export function metaSpecOf(app) {
-    const source = app._metaSpecSource;
-    return source === undefined ? null : resolveSource(source);
-}
-//# sourceMappingURL=meta-spec-merge.js.map

package/dist/meta-spec-merge.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"meta-spec-merge.js","sourceRoot":"","sources":["../src/meta-spec-merge.ts"],"names":[],"mappings":"AAMA,+FAA+F;AAC/F,MAAM,UAAU,kBAAkB,CAAC,MAA6B;IAC/D,OAAO,MAAM,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;AACpD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,aAAa,CAAC,GAA0B,EAAE,GAA0B;IACnF,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAA;IACpB,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAA;IACpB,MAAM,SAAS,GAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAA;IAE/F,MAAM,IAAI,GAAkC,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IACxE,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,QAAQ;YAAE,SAAQ;QAC7D,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC9C,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YACjB,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;YAC9D,SAAQ;QACT,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,OAA8B,EAAE,OAAe,EAAE,OAAe,EAAQ,EAAE;QAChG,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACvD,MAAM,QAAQ,GAAI,OAAmC,CAAC,GAAG,CAAC,CAAA;YAC1D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,QAAQ;gBAAE,SAAQ;YAC7D,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QACvD,CAAC;IACF,CAAC,CAAA;IACD,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;IAC3D,aAAa,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAA;IAEjE,OAAO;QACN,SAAS;QACT,IAAI;QACJ,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE;QAC9C,MAAM,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE;QACxC,MAAM,EAAE,kBAAkB,CAAC,GAAG,CAAC;KAC/B,CAAA;AACF,CAAC;AAQD,SAAS,aAAa,CAAC,MAAsB;IAC5C,IAAI,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAA;IAC5B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ;QAAE,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;IACrF,OAAO,MAAM,CAAA;AACd,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,UAAU,CAAC,GAAY;IACtC,MAAM,MAAM,GAAI,GAA4C,CAAC,eAAe,CAAA;IAC5E,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;AAC3D,CAAC"}

package/dist/meta-spec.d.ts

@@ -1,94 +0,0 @@
-/**
- * Codegen-time policy engine: route meta + route schemas → OpenAPI operation fields.
- * Never consulted at request time. See docs/meta-spec.md.
- */
-import type { MetaSpecConfig, MetaSpecContext, MetaSpecProfile, MetaSpecSchemaSearch, MetaSpecSchemaSource, MetaSpecStrictness, MetaSpecVersionGuard, StandardSchemaLike } from "./types.ts";
-export { mergeMetaSpec, resolvedStrictness } from "./meta-spec-merge.ts";
-export declare const DEFAULT_PROFILE = "default";
-/**
- * Normalize security shorthand → standard OpenAPI security array.
- *
- * `"jwt"`, `["jwt", "apiKey"]` (alternatives), `[["key", "domain"]]` (all of a group) and the
- * standard `[{ jwt: [] }]` form are accepted. `[]` is an explicit "no authentication". Anything
- * else throws: guessing would turn a protected route into a documented public one.
- */
-export declare function normalizeSecurity(raw: unknown): Record<string, string[]>[];
-/** Scheme names an operation's `security` refers to. */
-export declare function securitySchemeNames(security: unknown): string[];
-export type MetaSpecDiagnosticCode = "AMBIGUOUS_SCHEMA_KEY" | "ASYNC_VALIDATION" | "DESCRIPTOR_MISMATCH" | "SUBAPP_ENTRY_CONFLICT" | "DUPLICATE_OPERATION_ID" | "DUPLICATE_TARGET" | "INVALID_SELECTOR" | "INVALID_VALUE" | "MAP_THREW" | "MISSING_ENTRY" | "RESERVED_FIELD" | "UNKNOWN_FIELD" | "UNKNOWN_PROFILE" | "UNKNOWN_SECURITY_SCHEME" | "UNSUPPORTED_METHOD" | "UNSUPPORTED_VERSION" | "WS_SHADOWED";
-export type MetaSpecDiagnostic = {
-    code: MetaSpecDiagnosticCode;
-    level: "error" | "warn";
-    message: string;
-};
-export declare class MetaSpecCollector {
-    readonly diagnostics: MetaSpecDiagnostic[];
-    /** Meta keys already reported as unmapped — reported once, not once per route */
-    readonly reportedMissing: Set<string>;
-    private readonly seen;
-    add(code: MetaSpecDiagnosticCode, level: "error" | "warn", message: string): void;
-    /** Throws one aggregated error if anything failed; warnings go to the console. */
-    flush(): void;
-}
-type Produce = (value: unknown, ctx: MetaSpecContext) => Record<string, unknown> | undefined;
-type CompiledEntry = {
-    /** Meta key, or schema-metadata key for schema entries */
-    from: readonly MetaSpecSchemaSource[] | null;
-    http: boolean;
-    /** Declared target keys, for same-rank duplicate detection. Empty for `expand` entries */
-    keys: readonly string[];
-    produce: Produce;
-    profiles: readonly string[] | null;
-    match: Record<string, unknown> | null;
-    rank: 1 | 2;
-    /** Schema-metadata key this entry reads; defaults to `sourceKey` */
-    read: string;
-    schema: StandardSchemaLike | null;
-    search: MetaSpecSchemaSearch;
-    version: MetaSpecVersionGuard | null;
-    sourceKey: string;
-    ws: boolean;
-};
-export type CompiledMetaSpec = {
-    entries: readonly CompiledEntry[];
-    /** Meta keys with an entry (or deliberately hidden) — used for the totality check */
-    known: ReadonlySet<string>;
-    needsSchemas: boolean;
-    profiles: Record<string, MetaSpecProfile>;
-    strict: MetaSpecStrictness;
-};
-export declare function compileMetaSpec(config: MetaSpecConfig | null, collector: MetaSpecCollector): CompiledMetaSpec;
-/**
- * Meta keys a published artifact (the served manifest) may carry: keys with a policy entry
- * that is not `false`, plus the built-ins. Keys with no entry are unreviewed, so they stay out.
- */
-export declare function publishableMetaKeys(config: MetaSpecConfig | null): (key: string) => boolean;
-export declare function resolveProfile(spec: CompiledMetaSpec, profile: string | undefined, collector: MetaSpecCollector): {
-    filter: (key: string) => boolean;
-    name: string;
-};
-/** Result of resolving one schema-metadata key against one schema source */
-export type SchemaMetaHit = {
-    found: "ambiguous";
-    values: readonly unknown[];
-} | {
-    found: false;
-} | {
-    found: true;
-    value: unknown;
-};
-export type SchemaMetaLookup = (source: MetaSpecSchemaSource, key: string, search: MetaSpecSchemaSearch) => SchemaMetaHit;
-export type ApplyMetaSpecArgs = {
-    collector: MetaSpecCollector;
-    filter: (key: string) => boolean;
-    kind: "http" | "ws";
-    meta: Record<string, unknown> | null;
-    method: string;
-    operation: Record<string, unknown>;
-    path: string;
-    profile: string;
-    schemaMeta?: SchemaMetaLookup;
-    spec: CompiledMetaSpec;
-};
-export declare function applyMetaSpec(args: ApplyMetaSpecArgs): void;
-//# sourceMappingURL=meta-spec.d.ts.map

package/dist/meta-spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"meta-spec.d.ts","sourceRoot":"","sources":["../src/meta-spec.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EACX,cAAc,EACd,eAAe,EAEf,eAAe,EAEf,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,MAAM,YAAY,CAAA;AAGnB,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AA4BxE,eAAO,MAAM,eAAe,YAAY,CAAA;AAIxC;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAoB1E;AAiBD,wDAAwD;AACxD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,EAAE,CAQ/D;AASD,MAAM,MAAM,sBAAsB,GAC/B,sBAAsB,GACtB,kBAAkB,GAClB,qBAAqB,GACrB,uBAAuB,GACvB,wBAAwB,GACxB,kBAAkB,GAClB,kBAAkB,GAClB,eAAe,GACf,WAAW,GACX,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,iBAAiB,GACjB,yBAAyB,GACzB,oBAAoB,GACpB,qBAAqB,GACrB,aAAa,CAAA;AAEhB,MAAM,MAAM,kBAAkB,GAAG;IAChC,IAAI,EAAE,sBAAsB,CAAA;IAC5B,KAAK,EAAE,OAAO,GAAG,MAAM,CAAA;IACvB,OAAO,EAAE,MAAM,CAAA;CACf,CAAA;AAED,qBAAa,iBAAiB;IAC7B,QAAQ,CAAC,WAAW,EAAE,kBAAkB,EAAE,CAAK;IAC/C,iFAAiF;IACjF,QAAQ,CAAC,eAAe,cAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IAEzC,GAAG,CAAC,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAKhF;IAED,kFAAkF;IAClF,KAAK,IAAI,IAAI,CAUZ;CACD;AAID,KAAK,OAAO,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAA;AAE5F,KAAK,aAAa,GAAG;IACpB,0DAA0D;IAC1D,IAAI,EAAE,SAAS,oBAAoB,EAAE,GAAG,IAAI,CAAA;IAC5C,IAAI,EAAE,OAAO,CAAA;IACb,0FAA0F;IAC1F,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IACvB,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;IAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACrC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAA;IACX,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAA;IACjC,MAAM,EAAE,oBAAoB,CAAA;IAC5B,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAAA;IACpC,SAAS,EAAE,MAAM,CAAA;IACjB,EAAE,EAAE,OAAO,CAAA;CACX,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC9B,OAAO,EAAE,SAAS,aAAa,EAAE,CAAA;IACjC,qFAAqF;IACrF,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1B,YAAY,EAAE,OAAO,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IACzC,MAAM,EAAE,kBAAkB,CAAA;CAC1B,CAAA;AA8KD,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,EAAE,SAAS,EAAE,iBAAiB,GAAG,gBAAgB,CAsD7G;AAID;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAY3F;AAID,wBAAgB,cAAc,CAC7B,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,SAAS,EAAE,iBAAiB,GAC1B;IAAE,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAwBpD;AAID,4EAA4E;AAC5E,MAAM,MAAM,aAAa,GACtB;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,SAAS,OAAO,EAAE,CAAA;CAAE,GAClD;IAAE,KAAK,EAAE,KAAK,CAAA;CAAE,GAChB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAA;AAElC,MAAM,MAAM,gBAAgB,GAAG,CAC9B,MAAM,EAAE,oBAAoB,EAC5B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,oBAAoB,KACxB,aAAa,CAAA;AAElB,MAAM,MAAM,iBAAiB,GAAG;IAC/B,SAAS,EAAE,iBAAiB,CAAA;IAC5B,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAA;IAChC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IACpC,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,gBAAgB,CAAA;IAC7B,IAAI,EAAE,gBAAgB,CAAA;CACtB,CAAA;AAqHD,wBAAgB,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAmG3D"}