@naylence/runtime 0.4.10 → 0.4.12

package/dist/browser/index.cjs

@@ -525,12 +525,12 @@ async function ensureRuntimeFactoriesRegistered(registry = factory.Registry) {
 }
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.4.10
+// Generated from package.json version: 0.4.12
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.4.10';
+const VERSION = '0.4.12';
 
 let initialized = false;
 const runtimePlugin = {
@@ -22044,7 +22044,7 @@ const DEFAULT_POLICY_SOURCE = {
 const POLICY_LOCALFILE_PROFILE = {
     type: 'PolicyAuthorizer',
     verifier: DEFAULT_VERIFIER_CONFIG,
-    policySource: DEFAULT_POLICY_SOURCE,
+    policy_source: DEFAULT_POLICY_SOURCE,
 };
 registerProfile(AUTHORIZER_FACTORY_BASE_TYPE, PROFILE_NAME_DEFAULT, DEFAULT_PROFILE, { source: 'authorization-profile-factory' });
 registerProfile(AUTHORIZER_FACTORY_BASE_TYPE, PROFILE_NAME_OAUTH2, OAUTH2_PROFILE, { source: 'authorization-profile-factory' });
@@ -22273,6 +22273,10 @@ const VALID_EFFECTS = ['allow', 'deny'];
  * - Glob patterns: `*` (single segment), `**` (any depth), `?` (single char)
  * - Regex patterns: patterns starting with `^` (for advanced/BSL use only)
  *
+ * Segment separators: `.`, `/`, and `@` are all treated as equivalent segment
+ * boundaries. The `*` wildcard matches any characters except these separators,
+ * while `**` matches across all separators.
+ *
  * The OSS/basic policy uses glob-only matching via `compileGlobPattern()`.
  * The advanced/BSL policy may use `compilePattern()` which interprets `^` as regex.
  */
@@ -22310,10 +22314,15 @@ function escapeRegex(str) {
  * Converts a glob pattern to a regex pattern.
  *
  * Glob syntax:
- * - `*` matches a single segment (no dots)
- * - `**` matches any number of segments (including zero)
+ * - `*` matches a single segment (not crossing `.`, `/`, or `@` separators)
+ * - `**` matches any number of segments (including zero), crossing all separators
+ * - `?` matches a single character (not a separator)
  * - Other characters are matched literally
  *
+ * The multi-separator approach treats `.`, `/`, and `@` as equivalent segment
+ * separators. This provides clean semantics for both logical addresses
+ * (e.g., `name@domain.fabric`) and physical addresses (e.g., `name@/path/to/node`).
+ *
  * @param glob - The glob pattern to convert
  * @returns A regex pattern string (without anchors)
  */
@@ -22323,19 +22332,19 @@ function globToRegex(glob) {
     while (i < glob.length) {
         if (glob[i] === '*') {
             if (glob[i + 1] === '*') {
-                // `**` matches any characters (including dots)
+                // `**` matches any characters (including all separators)
                 parts.push('.*');
                 i += 2;
             }
             else {
-                // `*` matches any characters except dots (single segment)
-                parts.push('[^.]*');
+                // `*` matches any characters except separators (., /, @)
+                parts.push('[^./@]*');
                 i += 1;
             }
         }
         else if (glob[i] === '?') {
-            // `?` matches a single character (not a dot)
-            parts.push('[^.]');
+            // `?` matches a single character (not a separator)
+            parts.push('[^./@]');
             i += 1;
         }
         else {

package/dist/browser/index.mjs

@@ -523,12 +523,12 @@ async function ensureRuntimeFactoriesRegistered(registry = Registry) {
 }
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.4.10
+// Generated from package.json version: 0.4.12
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.4.10';
+const VERSION = '0.4.12';
 
 let initialized = false;
 const runtimePlugin = {
@@ -22042,7 +22042,7 @@ const DEFAULT_POLICY_SOURCE = {
 const POLICY_LOCALFILE_PROFILE = {
     type: 'PolicyAuthorizer',
     verifier: DEFAULT_VERIFIER_CONFIG,
-    policySource: DEFAULT_POLICY_SOURCE,
+    policy_source: DEFAULT_POLICY_SOURCE,
 };
 registerProfile(AUTHORIZER_FACTORY_BASE_TYPE, PROFILE_NAME_DEFAULT, DEFAULT_PROFILE, { source: 'authorization-profile-factory' });
 registerProfile(AUTHORIZER_FACTORY_BASE_TYPE, PROFILE_NAME_OAUTH2, OAUTH2_PROFILE, { source: 'authorization-profile-factory' });
@@ -22271,6 +22271,10 @@ const VALID_EFFECTS = ['allow', 'deny'];
  * - Glob patterns: `*` (single segment), `**` (any depth), `?` (single char)
  * - Regex patterns: patterns starting with `^` (for advanced/BSL use only)
  *
+ * Segment separators: `.`, `/`, and `@` are all treated as equivalent segment
+ * boundaries. The `*` wildcard matches any characters except these separators,
+ * while `**` matches across all separators.
+ *
  * The OSS/basic policy uses glob-only matching via `compileGlobPattern()`.
  * The advanced/BSL policy may use `compilePattern()` which interprets `^` as regex.
  */
@@ -22308,10 +22312,15 @@ function escapeRegex(str) {
  * Converts a glob pattern to a regex pattern.
  *
  * Glob syntax:
- * - `*` matches a single segment (no dots)
- * - `**` matches any number of segments (including zero)
+ * - `*` matches a single segment (not crossing `.`, `/`, or `@` separators)
+ * - `**` matches any number of segments (including zero), crossing all separators
+ * - `?` matches a single character (not a separator)
  * - Other characters are matched literally
  *
+ * The multi-separator approach treats `.`, `/`, and `@` as equivalent segment
+ * separators. This provides clean semantics for both logical addresses
+ * (e.g., `name@domain.fabric`) and physical addresses (e.g., `name@/path/to/node`).
+ *
  * @param glob - The glob pattern to convert
  * @returns A regex pattern string (without anchors)
  */
@@ -22321,19 +22330,19 @@ function globToRegex(glob) {
     while (i < glob.length) {
         if (glob[i] === '*') {
             if (glob[i + 1] === '*') {
-                // `**` matches any characters (including dots)
+                // `**` matches any characters (including all separators)
                 parts.push('.*');
                 i += 2;
             }
             else {
-                // `*` matches any characters except dots (single segment)
-                parts.push('[^.]*');
+                // `*` matches any characters except separators (., /, @)
+                parts.push('[^./@]*');
                 i += 1;
             }
         }
         else if (glob[i] === '?') {
-            // `?` matches a single character (not a dot)
-            parts.push('[^.]');
+            // `?` matches a single character (not a separator)
+            parts.push('[^./@]');
             i += 1;
         }
         else {

package/dist/cjs/naylence/fame/security/auth/authorization-profile-factory.js

@@ -89,7 +89,7 @@ const DEFAULT_POLICY_SOURCE = {
 const POLICY_LOCALFILE_PROFILE = {
     type: 'PolicyAuthorizer',
     verifier: DEFAULT_VERIFIER_CONFIG,
-    policySource: DEFAULT_POLICY_SOURCE,
+    policy_source: DEFAULT_POLICY_SOURCE,
 };
 (0, profile_registry_js_1.registerProfile)(authorizer_factory_js_1.AUTHORIZER_FACTORY_BASE_TYPE, exports.PROFILE_NAME_DEFAULT, DEFAULT_PROFILE, { source: 'authorization-profile-factory' });
 (0, profile_registry_js_1.registerProfile)(authorizer_factory_js_1.AUTHORIZER_FACTORY_BASE_TYPE, exports.PROFILE_NAME_OAUTH2, OAUTH2_PROFILE, { source: 'authorization-profile-factory' });

package/dist/cjs/naylence/fame/security/auth/policy/pattern-matcher.js

@@ -6,6 +6,10 @@
  * - Glob patterns: `*` (single segment), `**` (any depth), `?` (single char)
  * - Regex patterns: patterns starting with `^` (for advanced/BSL use only)
  *
+ * Segment separators: `.`, `/`, and `@` are all treated as equivalent segment
+ * boundaries. The `*` wildcard matches any characters except these separators,
+ * while `**` matches across all separators.
+ *
  * The OSS/basic policy uses glob-only matching via `compileGlobPattern()`.
  * The advanced/BSL policy may use `compilePattern()` which interprets `^` as regex.
  */
@@ -52,10 +56,15 @@ function escapeRegex(str) {
  * Converts a glob pattern to a regex pattern.
  *
  * Glob syntax:
- * - `*` matches a single segment (no dots)
- * - `**` matches any number of segments (including zero)
+ * - `*` matches a single segment (not crossing `.`, `/`, or `@` separators)
+ * - `**` matches any number of segments (including zero), crossing all separators
+ * - `?` matches a single character (not a separator)
  * - Other characters are matched literally
  *
+ * The multi-separator approach treats `.`, `/`, and `@` as equivalent segment
+ * separators. This provides clean semantics for both logical addresses
+ * (e.g., `name@domain.fabric`) and physical addresses (e.g., `name@/path/to/node`).
+ *
  * @param glob - The glob pattern to convert
  * @returns A regex pattern string (without anchors)
  */
@@ -65,19 +74,19 @@ function globToRegex(glob) {
     while (i < glob.length) {
         if (glob[i] === '*') {
             if (glob[i + 1] === '*') {
-                // `**` matches any characters (including dots)
+                // `**` matches any characters (including all separators)
                 parts.push('.*');
                 i += 2;
             }
             else {
-                // `*` matches any characters except dots (single segment)
-                parts.push('[^.]*');
+                // `*` matches any characters except separators (., /, @)
+                parts.push('[^./@]*');
                 i += 1;
             }
         }
         else if (glob[i] === '?') {
-            // `?` matches a single character (not a dot)
-            parts.push('[^.]');
+            // `?` matches a single character (not a separator)
+            parts.push('[^./@]');
             i += 1;
         }
         else {

package/dist/cjs/version.js

@@ -1,10 +1,10 @@
 "use strict";
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.4.10
+// Generated from package.json version: 0.4.12
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
 /**
  * The package version, injected at build time.
  * @internal
  */
-exports.VERSION = '0.4.10';
+exports.VERSION = '0.4.12';

package/dist/esm/naylence/fame/security/auth/authorization-profile-factory.js

@@ -86,7 +86,7 @@ const DEFAULT_POLICY_SOURCE = {
 const POLICY_LOCALFILE_PROFILE = {
     type: 'PolicyAuthorizer',
     verifier: DEFAULT_VERIFIER_CONFIG,
-    policySource: DEFAULT_POLICY_SOURCE,
+    policy_source: DEFAULT_POLICY_SOURCE,
 };
 registerProfile(AUTHORIZER_FACTORY_BASE_TYPE, PROFILE_NAME_DEFAULT, DEFAULT_PROFILE, { source: 'authorization-profile-factory' });
 registerProfile(AUTHORIZER_FACTORY_BASE_TYPE, PROFILE_NAME_OAUTH2, OAUTH2_PROFILE, { source: 'authorization-profile-factory' });

package/dist/esm/naylence/fame/security/auth/policy/pattern-matcher.js

@@ -5,6 +5,10 @@
  * - Glob patterns: `*` (single segment), `**` (any depth), `?` (single char)
  * - Regex patterns: patterns starting with `^` (for advanced/BSL use only)
  *
+ * Segment separators: `.`, `/`, and `@` are all treated as equivalent segment
+ * boundaries. The `*` wildcard matches any characters except these separators,
+ * while `**` matches across all separators.
+ *
  * The OSS/basic policy uses glob-only matching via `compileGlobPattern()`.
  * The advanced/BSL policy may use `compilePattern()` which interprets `^` as regex.
  */
@@ -42,10 +46,15 @@ function escapeRegex(str) {
  * Converts a glob pattern to a regex pattern.
  *
  * Glob syntax:
- * - `*` matches a single segment (no dots)
- * - `**` matches any number of segments (including zero)
+ * - `*` matches a single segment (not crossing `.`, `/`, or `@` separators)
+ * - `**` matches any number of segments (including zero), crossing all separators
+ * - `?` matches a single character (not a separator)
  * - Other characters are matched literally
  *
+ * The multi-separator approach treats `.`, `/`, and `@` as equivalent segment
+ * separators. This provides clean semantics for both logical addresses
+ * (e.g., `name@domain.fabric`) and physical addresses (e.g., `name@/path/to/node`).
+ *
  * @param glob - The glob pattern to convert
  * @returns A regex pattern string (without anchors)
  */
@@ -55,19 +64,19 @@ function globToRegex(glob) {
     while (i < glob.length) {
         if (glob[i] === '*') {
             if (glob[i + 1] === '*') {
-                // `**` matches any characters (including dots)
+                // `**` matches any characters (including all separators)
                 parts.push('.*');
                 i += 2;
             }
             else {
-                // `*` matches any characters except dots (single segment)
-                parts.push('[^.]*');
+                // `*` matches any characters except separators (., /, @)
+                parts.push('[^./@]*');
                 i += 1;
             }
         }
         else if (glob[i] === '?') {
-            // `?` matches a single character (not a dot)
-            parts.push('[^.]');
+            // `?` matches a single character (not a separator)
+            parts.push('[^./@]');
             i += 1;
         }
         else {

package/dist/esm/version.js

@@ -1,7 +1,7 @@
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.4.10
+// Generated from package.json version: 0.4.12
 /**
  * The package version, injected at build time.
  * @internal
  */
-export const VERSION = '0.4.10';
+export const VERSION = '0.4.12';

package/dist/node/index.cjs

@@ -14,12 +14,12 @@ var fastify = require('fastify');
 var websocketPlugin = require('@fastify/websocket');
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.4.10
+// Generated from package.json version: 0.4.12
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.4.10';
+const VERSION = '0.4.12';
 
 /**
  * Fame protocol specific error classes with WebSocket close codes and proper inheritance.
@@ -21931,7 +21931,7 @@ const DEFAULT_POLICY_SOURCE = {
 const POLICY_LOCALFILE_PROFILE = {
     type: 'PolicyAuthorizer',
     verifier: DEFAULT_VERIFIER_CONFIG,
-    policySource: DEFAULT_POLICY_SOURCE,
+    policy_source: DEFAULT_POLICY_SOURCE,
 };
 registerProfile(AUTHORIZER_FACTORY_BASE_TYPE, PROFILE_NAME_DEFAULT, DEFAULT_PROFILE, { source: 'authorization-profile-factory' });
 registerProfile(AUTHORIZER_FACTORY_BASE_TYPE, PROFILE_NAME_OAUTH2, OAUTH2_PROFILE, { source: 'authorization-profile-factory' });
@@ -22160,6 +22160,10 @@ const VALID_EFFECTS = ['allow', 'deny'];
  * - Glob patterns: `*` (single segment), `**` (any depth), `?` (single char)
  * - Regex patterns: patterns starting with `^` (for advanced/BSL use only)
  *
+ * Segment separators: `.`, `/`, and `@` are all treated as equivalent segment
+ * boundaries. The `*` wildcard matches any characters except these separators,
+ * while `**` matches across all separators.
+ *
  * The OSS/basic policy uses glob-only matching via `compileGlobPattern()`.
  * The advanced/BSL policy may use `compilePattern()` which interprets `^` as regex.
  */
@@ -22197,10 +22201,15 @@ function escapeRegex(str) {
  * Converts a glob pattern to a regex pattern.
  *
  * Glob syntax:
- * - `*` matches a single segment (no dots)
- * - `**` matches any number of segments (including zero)
+ * - `*` matches a single segment (not crossing `.`, `/`, or `@` separators)
+ * - `**` matches any number of segments (including zero), crossing all separators
+ * - `?` matches a single character (not a separator)
  * - Other characters are matched literally
  *
+ * The multi-separator approach treats `.`, `/`, and `@` as equivalent segment
+ * separators. This provides clean semantics for both logical addresses
+ * (e.g., `name@domain.fabric`) and physical addresses (e.g., `name@/path/to/node`).
+ *
  * @param glob - The glob pattern to convert
  * @returns A regex pattern string (without anchors)
  */
@@ -22210,19 +22219,19 @@ function globToRegex(glob) {
     while (i < glob.length) {
         if (glob[i] === '*') {
             if (glob[i + 1] === '*') {
-                // `**` matches any characters (including dots)
+                // `**` matches any characters (including all separators)
                 parts.push('.*');
                 i += 2;
             }
             else {
-                // `*` matches any characters except dots (single segment)
-                parts.push('[^.]*');
+                // `*` matches any characters except separators (., /, @)
+                parts.push('[^./@]*');
                 i += 1;
             }
         }
         else if (glob[i] === '?') {
-            // `?` matches a single character (not a dot)
-            parts.push('[^.]');
+            // `?` matches a single character (not a separator)
+            parts.push('[^./@]');
             i += 1;
         }
         else {

package/dist/node/index.mjs

@@ -13,12 +13,12 @@ import fastify from 'fastify';
 import websocketPlugin from '@fastify/websocket';
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.4.10
+// Generated from package.json version: 0.4.12
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.4.10';
+const VERSION = '0.4.12';
 
 /**
  * Fame protocol specific error classes with WebSocket close codes and proper inheritance.
@@ -21930,7 +21930,7 @@ const DEFAULT_POLICY_SOURCE = {
 const POLICY_LOCALFILE_PROFILE = {
     type: 'PolicyAuthorizer',
     verifier: DEFAULT_VERIFIER_CONFIG,
-    policySource: DEFAULT_POLICY_SOURCE,
+    policy_source: DEFAULT_POLICY_SOURCE,
 };
 registerProfile(AUTHORIZER_FACTORY_BASE_TYPE, PROFILE_NAME_DEFAULT, DEFAULT_PROFILE, { source: 'authorization-profile-factory' });
 registerProfile(AUTHORIZER_FACTORY_BASE_TYPE, PROFILE_NAME_OAUTH2, OAUTH2_PROFILE, { source: 'authorization-profile-factory' });
@@ -22159,6 +22159,10 @@ const VALID_EFFECTS = ['allow', 'deny'];
  * - Glob patterns: `*` (single segment), `**` (any depth), `?` (single char)
  * - Regex patterns: patterns starting with `^` (for advanced/BSL use only)
  *
+ * Segment separators: `.`, `/`, and `@` are all treated as equivalent segment
+ * boundaries. The `*` wildcard matches any characters except these separators,
+ * while `**` matches across all separators.
+ *
  * The OSS/basic policy uses glob-only matching via `compileGlobPattern()`.
  * The advanced/BSL policy may use `compilePattern()` which interprets `^` as regex.
  */
@@ -22196,10 +22200,15 @@ function escapeRegex(str) {
  * Converts a glob pattern to a regex pattern.
  *
  * Glob syntax:
- * - `*` matches a single segment (no dots)
- * - `**` matches any number of segments (including zero)
+ * - `*` matches a single segment (not crossing `.`, `/`, or `@` separators)
+ * - `**` matches any number of segments (including zero), crossing all separators
+ * - `?` matches a single character (not a separator)
  * - Other characters are matched literally
  *
+ * The multi-separator approach treats `.`, `/`, and `@` as equivalent segment
+ * separators. This provides clean semantics for both logical addresses
+ * (e.g., `name@domain.fabric`) and physical addresses (e.g., `name@/path/to/node`).
+ *
  * @param glob - The glob pattern to convert
  * @returns A regex pattern string (without anchors)
  */
@@ -22209,19 +22218,19 @@ function globToRegex(glob) {
     while (i < glob.length) {
         if (glob[i] === '*') {
             if (glob[i + 1] === '*') {
-                // `**` matches any characters (including dots)
+                // `**` matches any characters (including all separators)
                 parts.push('.*');
                 i += 2;
             }
             else {
-                // `*` matches any characters except dots (single segment)
-                parts.push('[^.]*');
+                // `*` matches any characters except separators (., /, @)
+                parts.push('[^./@]*');
                 i += 1;
             }
         }
         else if (glob[i] === '?') {
-            // `?` matches a single character (not a dot)
-            parts.push('[^.]');
+            // `?` matches a single character (not a separator)
+            parts.push('[^./@]');
             i += 1;
         }
         else {

package/dist/node/node.cjs

@@ -4436,12 +4436,12 @@ async function ensureRuntimeFactoriesRegistered(registry = factory.Registry) {
 }
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.4.10
+// Generated from package.json version: 0.4.12
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.4.10';
+const VERSION = '0.4.12';
 
 let initialized = false;
 const runtimePlugin = {
@@ -23138,7 +23138,7 @@ const DEFAULT_POLICY_SOURCE = {
 const POLICY_LOCALFILE_PROFILE = {
     type: 'PolicyAuthorizer',
     verifier: DEFAULT_VERIFIER_CONFIG,
-    policySource: DEFAULT_POLICY_SOURCE,
+    policy_source: DEFAULT_POLICY_SOURCE,
 };
 registerProfile(AUTHORIZER_FACTORY_BASE_TYPE, PROFILE_NAME_DEFAULT, DEFAULT_PROFILE, { source: 'authorization-profile-factory' });
 registerProfile(AUTHORIZER_FACTORY_BASE_TYPE, PROFILE_NAME_OAUTH2, OAUTH2_PROFILE, { source: 'authorization-profile-factory' });
@@ -23367,6 +23367,10 @@ const VALID_EFFECTS = ['allow', 'deny'];
  * - Glob patterns: `*` (single segment), `**` (any depth), `?` (single char)
  * - Regex patterns: patterns starting with `^` (for advanced/BSL use only)
  *
+ * Segment separators: `.`, `/`, and `@` are all treated as equivalent segment
+ * boundaries. The `*` wildcard matches any characters except these separators,
+ * while `**` matches across all separators.
+ *
  * The OSS/basic policy uses glob-only matching via `compileGlobPattern()`.
  * The advanced/BSL policy may use `compilePattern()` which interprets `^` as regex.
  */
@@ -23404,10 +23408,15 @@ function escapeRegex(str) {
  * Converts a glob pattern to a regex pattern.
  *
  * Glob syntax:
- * - `*` matches a single segment (no dots)
- * - `**` matches any number of segments (including zero)
+ * - `*` matches a single segment (not crossing `.`, `/`, or `@` separators)
+ * - `**` matches any number of segments (including zero), crossing all separators
+ * - `?` matches a single character (not a separator)
  * - Other characters are matched literally
  *
+ * The multi-separator approach treats `.`, `/`, and `@` as equivalent segment
+ * separators. This provides clean semantics for both logical addresses
+ * (e.g., `name@domain.fabric`) and physical addresses (e.g., `name@/path/to/node`).
+ *
  * @param glob - The glob pattern to convert
  * @returns A regex pattern string (without anchors)
  */
@@ -23417,19 +23426,19 @@ function globToRegex(glob) {
     while (i < glob.length) {
         if (glob[i] === '*') {
             if (glob[i + 1] === '*') {
-                // `**` matches any characters (including dots)
+                // `**` matches any characters (including all separators)
                 parts.push('.*');
                 i += 2;
             }
             else {
-                // `*` matches any characters except dots (single segment)
-                parts.push('[^.]*');
+                // `*` matches any characters except separators (., /, @)
+                parts.push('[^./@]*');
                 i += 1;
             }
         }
         else if (glob[i] === '?') {
-            // `?` matches a single character (not a dot)
-            parts.push('[^.]');
+            // `?` matches a single character (not a separator)
+            parts.push('[^./@]');
             i += 1;
         }
         else {

package/dist/node/node.mjs

@@ -4435,12 +4435,12 @@ async function ensureRuntimeFactoriesRegistered(registry = Registry) {
 }
 
 // This file is auto-generated during build - do not edit manually
-// Generated from package.json version: 0.4.10
+// Generated from package.json version: 0.4.12
 /**
  * The package version, injected at build time.
  * @internal
  */
-const VERSION = '0.4.10';
+const VERSION = '0.4.12';
 
 let initialized = false;
 const runtimePlugin = {
@@ -23137,7 +23137,7 @@ const DEFAULT_POLICY_SOURCE = {
 const POLICY_LOCALFILE_PROFILE = {
     type: 'PolicyAuthorizer',
     verifier: DEFAULT_VERIFIER_CONFIG,
-    policySource: DEFAULT_POLICY_SOURCE,
+    policy_source: DEFAULT_POLICY_SOURCE,
 };
 registerProfile(AUTHORIZER_FACTORY_BASE_TYPE, PROFILE_NAME_DEFAULT, DEFAULT_PROFILE, { source: 'authorization-profile-factory' });
 registerProfile(AUTHORIZER_FACTORY_BASE_TYPE, PROFILE_NAME_OAUTH2, OAUTH2_PROFILE, { source: 'authorization-profile-factory' });
@@ -23366,6 +23366,10 @@ const VALID_EFFECTS = ['allow', 'deny'];
  * - Glob patterns: `*` (single segment), `**` (any depth), `?` (single char)
  * - Regex patterns: patterns starting with `^` (for advanced/BSL use only)
  *
+ * Segment separators: `.`, `/`, and `@` are all treated as equivalent segment
+ * boundaries. The `*` wildcard matches any characters except these separators,
+ * while `**` matches across all separators.
+ *
  * The OSS/basic policy uses glob-only matching via `compileGlobPattern()`.
  * The advanced/BSL policy may use `compilePattern()` which interprets `^` as regex.
  */
@@ -23403,10 +23407,15 @@ function escapeRegex(str) {
  * Converts a glob pattern to a regex pattern.
  *
  * Glob syntax:
- * - `*` matches a single segment (no dots)
- * - `**` matches any number of segments (including zero)
+ * - `*` matches a single segment (not crossing `.`, `/`, or `@` separators)
+ * - `**` matches any number of segments (including zero), crossing all separators
+ * - `?` matches a single character (not a separator)
  * - Other characters are matched literally
  *
+ * The multi-separator approach treats `.`, `/`, and `@` as equivalent segment
+ * separators. This provides clean semantics for both logical addresses
+ * (e.g., `name@domain.fabric`) and physical addresses (e.g., `name@/path/to/node`).
+ *
  * @param glob - The glob pattern to convert
  * @returns A regex pattern string (without anchors)
  */
@@ -23416,19 +23425,19 @@ function globToRegex(glob) {
     while (i < glob.length) {
         if (glob[i] === '*') {
             if (glob[i + 1] === '*') {
-                // `**` matches any characters (including dots)
+                // `**` matches any characters (including all separators)
                 parts.push('.*');
                 i += 2;
             }
             else {
-                // `*` matches any characters except dots (single segment)
-                parts.push('[^.]*');
+                // `*` matches any characters except separators (., /, @)
+                parts.push('[^./@]*');
                 i += 1;
             }
         }
         else if (glob[i] === '?') {
-            // `?` matches a single character (not a dot)
-            parts.push('[^.]');
+            // `?` matches a single character (not a separator)
+            parts.push('[^./@]');
             i += 1;
         }
         else {

package/dist/types/naylence/fame/security/auth/policy/pattern-matcher.d.ts

@@ -5,6 +5,10 @@
  * - Glob patterns: `*` (single segment), `**` (any depth), `?` (single char)
  * - Regex patterns: patterns starting with `^` (for advanced/BSL use only)
  *
+ * Segment separators: `.`, `/`, and `@` are all treated as equivalent segment
+ * boundaries. The `*` wildcard matches any characters except these separators,
+ * while `**` matches across all separators.
+ *
  * The OSS/basic policy uses glob-only matching via `compileGlobPattern()`.
  * The advanced/BSL policy may use `compilePattern()` which interprets `^` as regex.
  */

package/dist/types/version.d.ts

@@ -2,4 +2,4 @@
  * The package version, injected at build time.
  * @internal
  */
-export declare const VERSION = "0.4.10";
+export declare const VERSION = "0.4.12";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@naylence/runtime",
-  "version": "0.4.10",
+  "version": "0.4.12",
   "type": "module",
   "description": "Naylence Runtime - Complete TypeScript runtime",
   "author": "Naylence Dev <naylencedev@gmail.com>",