@shipfox/api-auth-dto 17.0.0 → 18.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. package/.turbo/turbo-build.log +1 -1
  2. package/CHANGELOG.md +6 -0
  3. package/dist/inter-module.d.ts +1 -0
  4. package/dist/inter-module.d.ts.map +1 -1
  5. package/dist/schemas/runner-session-token.d.ts +1 -0
  6. package/dist/schemas/runner-session-token.d.ts.map +1 -1
  7. package/dist/schemas/runner-session-token.js +1 -0
  8. package/dist/schemas/runner-session-token.js.map +1 -1
  9. package/dist/tsconfig.test.tsbuildinfo +1 -1
  10. package/package.json +1 -1
  11. package/src/schemas/runner-session-token.ts +1 -0
  12. package/tsconfig.build.tsbuildinfo +1 -1
package/.turbo/turbo-build.log CHANGED
@@ -1,2 +1,2 @@
1
1
  $ shipfox-swc
2
- Successfully compiled: 10 files with swc (173.6ms)
2
+ Successfully compiled: 10 files with swc (340.4ms)
package/CHANGELOG.md CHANGED
@@ -1,5 +1,11 @@
1
1
  # @shipfox/api-auth-dto
2
2
 
3
+ ## 18.0.0
4
+
5
+ ### Minor Changes
6
+
7
+ - fff528a: Adds lifecycle capability negotiation for runner job claims and records the selected local isolation timeout.
8
+
3
9
  ## 17.0.0
4
10
 
5
11
  ### Minor Changes
package/dist/inter-module.d.ts CHANGED
@@ -10,6 +10,7 @@ export declare const authInterModuleContract: import("@shipfox/inter-module").In
10
10
  scope: z.ZodLiteral<"workspace">;
11
11
  labels: z.ZodArray<z.ZodString>;
12
12
  maxClaims: z.ZodNullable<z.ZodNumber>;
13
+ lifecycleCapabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
13
14
  }, z.core.$strip>;
14
15
  output: z.ZodObject<{
15
16
  token: z.ZodString;
package/dist/inter-module.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"inter-module.d.ts","sourceRoot":"","sources":["../src/inter-module.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,iBAAiB,EAAC,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAYtB,eAAO,MAAM,uBAAuB;;;QAGhC,sBAAsB;YACpB,KAAK;;;;;;;YACL,MAAM;;;;QAER,iBAAiB;YACf,KAAK;;;;;;;;;;;;YACL,MAAM;;;;QAER,mBAAmB;YACjB,KAAK;;;YACL,MAAM;;;;;;;;QAER,gBAAgB;YACd,KAAK;;;;;;;;YAIL,MAAM;;;;;;;YACN,MAAM;gBACJ,qBAAqB;;;;;;;;;;EAI3B,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,OAAO,uBAAuB,CAAC,CAAC"}
1
+ {"version":3,"file":"inter-module.d.ts","sourceRoot":"","sources":["../src/inter-module.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,iBAAiB,EAAC,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAYtB,eAAO,MAAM,uBAAuB;;;QAGhC,sBAAsB;YACpB,KAAK;;;;;;;;YACL,MAAM;;;;QAER,iBAAiB;YACf,KAAK;;;;;;;;;;;;YACL,MAAM;;;;QAER,mBAAmB;YACjB,KAAK;;;YACL,MAAM;;;;;;;;QAER,gBAAgB;YACd,KAAK;;;;;;;;YAIL,MAAM;;;;;;;YACN,MAAM;gBACJ,qBAAqB;;;;;;;;;;EAI3B,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,OAAO,uBAAuB,CAAC,CAAC"}
package/dist/schemas/runner-session-token.d.ts CHANGED
@@ -11,6 +11,7 @@ export declare const runnerSessionTokenClaimsSchema: z.ZodObject<{
11
11
  scope: z.ZodLiteral<"workspace">;
12
12
  labels: z.ZodArray<z.ZodString>;
13
13
  maxClaims: z.ZodNullable<z.ZodNumber>;
14
+ lifecycleCapabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
14
15
  aud: z.ZodLiteral<"runner-session">;
15
16
  iat: z.ZodNumber;
16
17
  exp: z.ZodNumber;
package/dist/schemas/runner-session-token.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"runner-session-token.d.ts","sourceRoot":"","sources":["../../src/schemas/runner-session-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,mBAAmB,CAAC;AAE9D,eAAO,MAAM,8BAA8B;;;;;;;;;iBASzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC"}
1
+ {"version":3,"file":"runner-session-token.d.ts","sourceRoot":"","sources":["../../src/schemas/runner-session-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,CAAC,EAAC,MAAM,KAAK,CAAC;AAEtB;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,mBAAmB,CAAC;AAE9D,eAAO,MAAM,8BAA8B;;;;;;;;;;iBAUzC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC"}
package/dist/schemas/runner-session-token.js CHANGED
@@ -10,6 +10,7 @@ export const runnerSessionTokenClaimsSchema = z.object({
10
10
  scope: z.literal('workspace'),
11
11
  labels: z.array(z.string()).min(1),
12
12
  maxClaims: z.number().int().positive().nullable(),
13
+ lifecycleCapabilities: z.array(z.string()).max(8).optional(),
13
14
  aud: z.literal(RUNNER_SESSION_TOKEN_AUDIENCE),
14
15
  iat: z.number().int(),
15
16
  exp: z.number().int()
package/dist/schemas/runner-session-token.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"sources":["../../src/schemas/runner-session-token.ts"],"sourcesContent":["import {z} from 'zod';\n\n/**\n * Audience claim binding a token to runner-session data-plane auth. Distinct from\n * job lease tokens (separate secret) so session tokens and per-job capabilities\n * stay non-interchangeable.\n */\nexport const RUNNER_SESSION_TOKEN_AUDIENCE = 'runner-session';\n\nexport const runnerSessionTokenClaimsSchema = z.object({\n runnerSessionId: z.string().uuid(),\n workspaceId: z.string().uuid(),\n scope: z.literal('workspace'),\n labels: z.array(z.string()).min(1),\n maxClaims: z.number().int().positive().nullable(),\n aud: z.literal(RUNNER_SESSION_TOKEN_AUDIENCE),\n iat: z.number().int(),\n exp: z.number().int(),\n});\n\nexport type RunnerSessionTokenClaims = z.infer<typeof runnerSessionTokenClaimsSchema>;\n"],"names":["z","RUNNER_SESSION_TOKEN_AUDIENCE","runnerSessionTokenClaimsSchema","object","runnerSessionId","string","uuid","workspaceId","scope","literal","labels","array","min","maxClaims","number","int","positive","nullable","aud","iat","exp"],"mappings":"AAAA,SAAQA,CAAC,QAAO,MAAM;AAEtB;;;;CAIC,GACD,OAAO,MAAMC,gCAAgC,iBAAiB;AAE9D,OAAO,MAAMC,iCAAiCF,EAAEG,MAAM,CAAC;IACrDC,iBAAiBJ,EAAEK,MAAM,GAAGC,IAAI;IAChCC,aAAaP,EAAEK,MAAM,GAAGC,IAAI;IAC5BE,OAAOR,EAAES,OAAO,CAAC;IACjBC,QAAQV,EAAEW,KAAK,CAACX,EAAEK,MAAM,IAAIO,GAAG,CAAC;IAChCC,WAAWb,EAAEc,MAAM,GAAGC,GAAG,GAAGC,QAAQ,GAAGC,QAAQ;IAC/CC,KAAKlB,EAAES,OAAO,CAACR;IACfkB,KAAKnB,EAAEc,MAAM,GAAGC,GAAG;IACnBK,KAAKpB,EAAEc,MAAM,GAAGC,GAAG;AACrB,GAAG"}
1
+ {"version":3,"sources":["../../src/schemas/runner-session-token.ts"],"sourcesContent":["import {z} from 'zod';\n\n/**\n * Audience claim binding a token to runner-session data-plane auth. Distinct from\n * job lease tokens (separate secret) so session tokens and per-job capabilities\n * stay non-interchangeable.\n */\nexport const RUNNER_SESSION_TOKEN_AUDIENCE = 'runner-session';\n\nexport const runnerSessionTokenClaimsSchema = z.object({\n runnerSessionId: z.string().uuid(),\n workspaceId: z.string().uuid(),\n scope: z.literal('workspace'),\n labels: z.array(z.string()).min(1),\n maxClaims: z.number().int().positive().nullable(),\n lifecycleCapabilities: z.array(z.string()).max(8).optional(),\n aud: z.literal(RUNNER_SESSION_TOKEN_AUDIENCE),\n iat: z.number().int(),\n exp: z.number().int(),\n});\n\nexport type RunnerSessionTokenClaims = z.infer<typeof runnerSessionTokenClaimsSchema>;\n"],"names":["z","RUNNER_SESSION_TOKEN_AUDIENCE","runnerSessionTokenClaimsSchema","object","runnerSessionId","string","uuid","workspaceId","scope","literal","labels","array","min","maxClaims","number","int","positive","nullable","lifecycleCapabilities","max","optional","aud","iat","exp"],"mappings":"AAAA,SAAQA,CAAC,QAAO,MAAM;AAEtB;;;;CAIC,GACD,OAAO,MAAMC,gCAAgC,iBAAiB;AAE9D,OAAO,MAAMC,iCAAiCF,EAAEG,MAAM,CAAC;IACrDC,iBAAiBJ,EAAEK,MAAM,GAAGC,IAAI;IAChCC,aAAaP,EAAEK,MAAM,GAAGC,IAAI;IAC5BE,OAAOR,EAAES,OAAO,CAAC;IACjBC,QAAQV,EAAEW,KAAK,CAACX,EAAEK,MAAM,IAAIO,GAAG,CAAC;IAChCC,WAAWb,EAAEc,MAAM,GAAGC,GAAG,GAAGC,QAAQ,GAAGC,QAAQ;IAC/CC,uBAAuBlB,EAAEW,KAAK,CAACX,EAAEK,MAAM,IAAIc,GAAG,CAAC,GAAGC,QAAQ;IAC1DC,KAAKrB,EAAES,OAAO,CAACR;IACfqB,KAAKtB,EAAEc,MAAM,GAAGC,GAAG;IACnBQ,KAAKvB,EAAEc,MAAM,GAAGC,GAAG;AACrB,GAAG"}