@namzu/sdk 49.0.0 → 50.0.0

package/dist/pals/communication/policy.js

@@ -0,0 +1,138 @@
+import { chmodSync, lstatSync, mkdirSync, readdirSync, realpathSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { z } from 'zod';
+import { DiskRevisionRecordStore } from '../../store/kv/revision-record-store.js';
+import { defineSchema } from '../../store/schema.js';
+import { addressSchema, addressTuple, hash } from './schema.js';
+import { sameAddress, } from './types.js';
+export class PalMessagePermissionConflictError extends Error {
+    name = 'PalMessagePermissionConflictError';
+}
+const permissionSchema = z.object({
+    v: z.literal(1),
+    source: addressSchema,
+    recipient: addressSchema,
+    revision: z.number().int().positive().safe(),
+    enabled: z.boolean(),
+    allowWake: z.boolean(),
+});
+function key(source, recipient) {
+    return hash([addressTuple(source), addressTuple(recipient)]);
+}
+function checked(input, source, recipient) {
+    const value = permissionSchema.parse(input);
+    if (value.source.tenantId !== value.recipient.tenantId ||
+        (source && !sameAddress(source, value.source)) ||
+        (recipient && !sameAddress(recipient, value.recipient)))
+        throw new Error('Foreign Pal communication permission.');
+    Object.freeze(value.source);
+    Object.freeze(value.recipient);
+    return Object.freeze(value);
+}
+/**
+ * Optional local operator policy. Missing and revoked rules deny; a stored grant
+ * reference is evidence only. Every authorization reads the current revision.
+ */
+export class DiskPalMessagePolicy {
+    root;
+    secure;
+    records = new DiskRevisionRecordStore(defineSchema({ kind: 'pal-message-permission', current: 1, migrations: {} }), 'Pal message permission', (value) => value.revision);
+    constructor(options) {
+        this.root = resolve(options.root);
+        this.secure =
+            options.secureDirectory ??
+                ((path) => {
+                    if (process.platform !== 'win32')
+                        chmodSync(path, 0o700);
+                });
+        this.directory(this.root);
+    }
+    directory(path) {
+        mkdirSync(path, { recursive: true, mode: 0o700 });
+        const entry = lstatSync(path);
+        if (!entry.isDirectory() || entry.isSymbolicLink() || realpathSync(path) !== path)
+            throw new Error('Pal communication policy requires real directories without aliases.');
+        this.secure(path);
+    }
+    location(source, recipient) {
+        addressSchema.parse(source);
+        addressSchema.parse(recipient);
+        if (source.tenantId !== recipient.tenantId)
+            throw new Error('Cross-tenant Pal grants are refused.');
+        this.directory(this.root);
+        const directory = join(this.root, key(source, recipient));
+        this.directory(directory);
+        const revisionsDir = join(directory, 'revisions');
+        this.directory(revisionsDir);
+        return { legacyPath: join(directory, 'permission.json'), revisionsDir };
+    }
+    async get(source, recipient) {
+        const capturedSource = addressSchema.parse(source);
+        const capturedRecipient = addressSchema.parse(recipient);
+        const value = await this.records.read(this.location(capturedSource, capturedRecipient));
+        return value ? checked(value, capturedSource, capturedRecipient) : null;
+    }
+    async update(input) {
+        // Capture all caller data before the first asynchronous storage boundary.
+        const source = addressSchema.parse(input.source);
+        const recipient = addressSchema.parse(input.recipient);
+        const { expectedRevision, enabled, allowWake } = input;
+        if (!Number.isSafeInteger(expectedRevision) || expectedRevision < 0)
+            throw new Error('A nonnegative expected permission revision is required.');
+        if (typeof enabled !== 'boolean' || typeof allowWake !== 'boolean')
+            throw new Error('Explicit Pal communication and wake consent are required.');
+        return this.records.transact(this.location(source, recipient), (stored) => {
+            const current = stored ? checked(stored, source, recipient) : null;
+            if ((current?.revision ?? 0) !== expectedRevision)
+                throw new PalMessagePermissionConflictError('Pal communication permission changed; reload it.');
+            const record = checked({
+                v: 1,
+                source,
+                recipient,
+                revision: expectedRevision + 1,
+                enabled,
+                allowWake,
+            });
+            return { record, result: record };
+        });
+    }
+    async outgoing(source) {
+        const captured = addressSchema.parse(source);
+        this.directory(this.root);
+        const rules = [];
+        for (const name of readdirSync(this.root)) {
+            if (!/^[a-f0-9]{64}$/.test(name))
+                continue;
+            const directory = join(this.root, name);
+            this.directory(directory);
+            this.directory(join(directory, 'revisions'));
+            const stored = await this.records.read({
+                legacyPath: join(directory, 'permission.json'),
+                revisionsDir: join(directory, 'revisions'),
+            });
+            if (!stored)
+                continue;
+            const rule = checked(stored);
+            if (name !== key(rule.source, rule.recipient))
+                throw new Error('Pal permission path identity changed.');
+            if (rule.enabled && sameAddress(rule.source, captured))
+                rules.push(rule);
+        }
+        return Object.freeze(rules);
+    }
+    async authorize(request) {
+        const phase = request.phase;
+        if (!['send', 'deliver', 'wake'].includes(phase))
+            throw new Error('Invalid Pal authorization phase.');
+        const rule = await this.get(request.source.address, request.recipient);
+        if (!rule?.enabled)
+            return { allow: false, reason: 'No current directed Pal communication permission.' };
+        if (phase === 'wake' && !rule.allowWake)
+            return { allow: false, reason: 'This Pal communication permission does not allow wakeup.' };
+        return {
+            allow: true,
+            grant: { id: key(rule.source, rule.recipient), revision: String(rule.revision) },
+        };
+    }
+}
+//# sourceMappingURL=policy.js.map

package/dist/pals/communication/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/pals/communication/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACpF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAA;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAC/D,OAAO,EAIN,WAAW,GACX,MAAM,YAAY,CAAA;AAqBnB,MAAM,OAAO,iCAAkC,SAAQ,KAAK;IACzC,IAAI,GAAG,mCAAmC,CAAA;CAC5D;AAED,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACf,MAAM,EAAE,aAAa;IACrB,SAAS,EAAE,aAAa;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACtB,CAAC,CAAA;AAEF,SAAS,GAAG,CAAC,MAAkB,EAAE,SAAqB;IACrD,OAAO,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;AAC7D,CAAC;AAED,SAAS,OAAO,CACf,KAAc,EACd,MAAmB,EACnB,SAAsB;IAEtB,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC3C,IACC,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,SAAS,CAAC,QAAQ;QAClD,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAEvD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IACzD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC3B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAC9B,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,oBAAoB;IACf,IAAI,CAAQ;IACZ,MAAM,CAAwB;IAC9B,OAAO,GAAG,IAAI,uBAAuB,CACrD,YAAY,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,EAC5E,wBAAwB,EACxB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CACzB,CAAA;IACD,YAAY,OAAmE;QAC9E,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,CAAC,MAAM;YACV,OAAO,CAAC,eAAe;gBACvB,CAAC,CAAC,IAAI,EAAE,EAAE;oBACT,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;wBAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;gBACzD,CAAC,CAAC,CAAA;QACH,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC;IACO,SAAS,CAAC,IAAY;QAC7B,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACjD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;QAC7B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI;YAChF,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAA;QACvF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAClB,CAAC;IACO,QAAQ,CAAC,MAAkB,EAAE,SAAqB;QACzD,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC3B,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAC9B,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ;YACzC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;QACxD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;QACzD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QACzB,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;QACjD,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QAC5B,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,YAAY,EAAE,CAAA;IACxE,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,MAAkB,EAAE,SAAqB;QAClD,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAClD,MAAM,iBAAiB,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QACxD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC,CAAA;QACvF,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxE,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,KAAiC;QAC7C,0EAA0E;QAC1E,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAChD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QACtD,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,KAAK,CAAA;QACtD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;QAC3E,IAAI,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,SAAS,KAAK,SAAS;YACjE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;QAC7E,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE;YACzE,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YAClE,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,CAAC,CAAC,KAAK,gBAAgB;gBAChD,MAAM,IAAI,iCAAiC,CAC1C,kDAAkD,CAClD,CAAA;YACF,MAAM,MAAM,GAAG,OAAO,CAAC;gBACtB,CAAC,EAAE,CAAC;gBACJ,MAAM;gBACN,SAAS;gBACT,QAAQ,EAAE,gBAAgB,GAAG,CAAC;gBAC9B,OAAO;gBACP,SAAS;aACT,CAAC,CAAA;YACF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;QAClC,CAAC,CAAC,CAAA;IACH,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,MAAkB;QAChC,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAC5C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzB,MAAM,KAAK,GAA2B,EAAE,CAAA;QACxC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YACvC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;YACzB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;YAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBACtC,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC;gBAC9C,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC;aAC1C,CAAC,CAAA;YACF,IAAI,CAAC,MAAM;gBAAE,SAAQ;YACrB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;YAC5B,IAAI,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;YACzD,IAAI,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzE,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,OAAgC;QAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;QAC3B,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;QACtE,IAAI,CAAC,IAAI,EAAE,OAAO;YACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAA;QACrF,IAAI,KAAK,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS;YACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0DAA0D,EAAE,CAAA;QAC5F,OAAO;YACN,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;SAChF,CAAA;IACF,CAAC;CACD"}