@remnic/core 9.25.3 → 9.25.5

package/dist/chunk-JMDZDT24.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/access-authorization-probe.ts"],"sourcesContent":["import { getOperation, type OperationName, OPERATION_NAMES } from \"./access-boundary.js\";\nimport { EngramAccessInputError } from \"./access-errors.js\";\nimport {\n  assertOperationAuthorizationAllowed,\n  type TokenCapabilities,\n} from \"./access-token-capabilities.js\";\n\nexport interface AuthorizationProbeResponse {\n  readonly authorized: true;\n  readonly operations: readonly OperationName[];\n}\n\n/**\n * Verify that the presenting token may call every requested operation without\n * invoking any operation handler.\n */\nexport function probeOperationAuthorization(\n  capabilities: TokenCapabilities | undefined | null,\n  requestedOperations: readonly string[],\n): AuthorizationProbeResponse {\n  const operations: OperationName[] = [];\n  for (const candidate of requestedOperations) {\n    if (!OPERATION_NAMES.includes(candidate as OperationName)) {\n      throw new EngramAccessInputError(`unsupported operation: ${candidate}`);\n    }\n    const operation = candidate as OperationName;\n    if (!operations.includes(operation)) operations.push(operation);\n  }\n\n  if (operations.length === 0) {\n    throw new EngramAccessInputError(\"at least one operation is required\");\n  }\n\n  for (const operation of operations) {\n    const boundOperation = getOperation(operation);\n    if (!boundOperation) {\n      throw new Error(`authorization probe operation is not registered: ${operation}`);\n    }\n    assertOperationAuthorizationAllowed(capabilities, boundOperation.spec);\n  }\n\n  return { authorized: true, operations };\n}\n"],"mappings":";;;;;;;;;;;;AAgBO,SAAS,4BACd,cACA,qBAC4B;AAC5B,QAAM,aAA8B,CAAC;AACrC,aAAW,aAAa,qBAAqB;AAC3C,QAAI,CAAC,gBAAgB,SAAS,SAA0B,GAAG;AACzD,YAAM,IAAI,uBAAuB,0BAA0B,SAAS,EAAE;AAAA,IACxE;AACA,UAAM,YAAY;AAClB,QAAI,CAAC,WAAW,SAAS,SAAS,EAAG,YAAW,KAAK,SAAS;AAAA,EAChE;AAEA,MAAI,WAAW,WAAW,GAAG;AAC3B,UAAM,IAAI,uBAAuB,oCAAoC;AAAA,EACvE;AAEA,aAAW,aAAa,YAAY;AAClC,UAAM,iBAAiB,aAAa,SAAS;AAC7C,QAAI,CAAC,gBAAgB;AACnB,YAAM,IAAI,MAAM,oDAAoD,SAAS,EAAE;AAAA,IACjF;AACA,wCAAoC,cAAc,eAAe,IAAI;AAAA,EACvE;AAEA,SAAO,EAAE,YAAY,MAAM,WAAW;AACxC;","names":[]}