@vm0/cli 9.267.0 → 9.269.0

package/chunk-GU4ZJECC.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../packages/connectors/src/firewall-metadata/policy.ts","../../../packages/connectors/src/firewall-metadata/policy-resolver.ts"],"sourcesContent":["import {\n  UNKNOWN_PERMISSION_GRANT,\n  type FirewallPolicies,\n  type FirewallPolicy,\n  type FirewallPolicyValue,\n} from \"../firewall-types\";\nimport { createFirewallMetadataPolicyResolver } from \"./policy-resolver\";\n\nexport type {\n  FirewallMetadataPolicyListState,\n  FirewallMetadataPolicyOverlay,\n  FirewallMetadataPolicyResolver,\n} from \"./policy-resolver\";\n\nexport interface FirewallPermissionPolicyMetadataPermission {\n  readonly name: string;\n  readonly description?: string;\n}\n\nexport interface FirewallPermissionPolicyCategoryMetadata {\n  readonly categories: Readonly<Record<string, string>>;\n  readonly displayOrder: readonly string[];\n}\n\nexport type FirewallPermissionPolicyDefaultOverrides = Readonly<\n  Partial<Record<FirewallPolicyValue, readonly string[]>>\n>;\n\nexport interface FirewallPermissionPolicyDefaultMetadata {\n  readonly permissionDefault: FirewallPolicyValue;\n  readonly permissionOverrides?: FirewallPermissionPolicyDefaultOverrides;\n  readonly unknownPolicy: FirewallPolicyValue;\n}\n\ninterface FirewallPermissionPolicyMetadataBase {\n  readonly label: string;\n  readonly permissionCount: number;\n  readonly permissions: readonly FirewallPermissionPolicyMetadataPermission[];\n  readonly categories?: FirewallPermissionPolicyCategoryMetadata | null;\n  readonly defaultPolicy: FirewallPermissionPolicyDefaultMetadata;\n}\n\nexport type FirewallPermissionPolicyMetadata =\n  FirewallPermissionPolicyMetadataBase &\n    // TODO(#23619): Rename with the catalog artifact metadata contract.\n    (| { readonly connectorRef: string; readonly type?: string }\n      | { readonly connectorRef?: undefined; readonly type: string }\n    );\n\nexport interface FirewallMetadataPermissionGroup<T extends { name: string }> {\n  readonly category: string;\n  readonly permissions: T[];\n}\n\nexport type FirewallPermissionGrantAction = Extract<\n  FirewallPolicyValue,\n  \"allow\" | \"deny\"\n>;\n\nexport interface FirewallPermissionGrant {\n  // TODO(#23619): Rename with the permission-grant wire and storage fields.\n  readonly connectorRef: string;\n  readonly permission: string;\n  readonly action: FirewallPermissionGrantAction;\n}\n\nfunction metadataConnectorSlug(\n  metadata: FirewallPermissionPolicyMetadata,\n): string {\n  return metadata.connectorRef ?? metadata.type;\n}\n\nexport { createFirewallMetadataPolicyResolver };\n\nexport function expandFirewallMetadataDefaultPolicy(\n  metadata: FirewallPermissionPolicyMetadata,\n): FirewallPolicy {\n  const resolver = createFirewallMetadataPolicyResolver(metadata);\n  const policies: Record<string, FirewallPolicyValue> = {};\n\n  for (const permission of metadata.permissions) {\n    policies[permission.name] = resolver.permission(permission.name);\n  }\n\n  return {\n    policies,\n    unknownPolicy: resolver.unknown(),\n  };\n}\n\nexport function findFirewallMetadataPermission(\n  metadata: FirewallPermissionPolicyMetadata,\n  name: string,\n): FirewallPermissionPolicyMetadata[\"permissions\"][number] | null {\n  return (\n    metadata.permissions.find((permission) => {\n      return permission.name === name;\n    }) ?? null\n  );\n}\n\nexport function groupFirewallMetadataPermissionsByCategory<\n  T extends { name: string },\n>(\n  permissions: readonly T[],\n  metadata: FirewallPermissionPolicyMetadata,\n): FirewallMetadataPermissionGroup<T>[] | null {\n  if (!metadata.categories) {\n    return null;\n  }\n\n  const grouped = new Map<string, T[]>();\n  for (const category of metadata.categories.displayOrder) {\n    grouped.set(category, []);\n  }\n\n  for (const permission of permissions) {\n    const category = metadata.categories.categories[permission.name];\n    if (!category) {\n      continue;\n    }\n    grouped.get(category)?.push(permission);\n  }\n\n  return [...grouped.entries()]\n    .filter(([, groupPermissions]) => {\n      return groupPermissions.length > 0;\n    })\n    .map(([category, groupPermissions]) => {\n      return { category, permissions: groupPermissions };\n    });\n}\n\nexport function resolveFirewallMetadataPolicies(\n  stored: FirewallPolicies | null,\n  metadata: readonly FirewallPermissionPolicyMetadata[],\n): FirewallPolicies | null {\n  let resolved: FirewallPolicies | null = stored;\n  for (const detail of metadata) {\n    const connectorSlug = metadataConnectorSlug(detail);\n    const defaults = expandFirewallMetadataDefaultPolicy(detail);\n    const existing = resolved?.[connectorSlug];\n    resolved = {\n      ...resolved,\n      [connectorSlug]: {\n        policies: { ...defaults.policies, ...existing?.policies },\n        ...(existing?.unknownPolicy !== undefined\n          ? { unknownPolicy: existing.unknownPolicy }\n          : { unknownPolicy: defaults.unknownPolicy }),\n      },\n    };\n  }\n  return resolved;\n}\n\nexport function permissionGrantsToFirewallPolicies(\n  grants: readonly FirewallPermissionGrant[],\n): FirewallPolicies | null {\n  const policies: FirewallPolicies = {};\n  for (const grant of grants) {\n    const current = policies[grant.connectorRef] ?? { policies: {} };\n    if (grant.permission === UNKNOWN_PERMISSION_GRANT) {\n      policies[grant.connectorRef] = {\n        ...current,\n        unknownPolicy: grant.action,\n      };\n      continue;\n    }\n    current.policies[grant.permission] = grant.action;\n    policies[grant.connectorRef] = current;\n  }\n  return Object.keys(policies).length > 0 ? policies : null;\n}\n","import type { FirewallPolicyValue } from \"../firewall-types\";\n\ninterface FirewallMetadataPolicyResolverMetadata {\n  readonly defaultPolicy: {\n    readonly permissionDefault: FirewallPolicyValue;\n    readonly permissionOverrides?: Readonly<\n      Partial<Record<FirewallPolicyValue, readonly string[]>>\n    >;\n    readonly unknownPolicy: FirewallPolicyValue;\n  };\n}\n\nexport interface FirewallMetadataPolicyOverlay {\n  readonly permissionDefault?: FirewallPolicyValue;\n  readonly permissionOverrides?: Readonly<Record<string, FirewallPolicyValue>>;\n  readonly unknownPolicy?: FirewallPolicyValue;\n}\n\nexport type FirewallMetadataPolicyListState = FirewallPolicyValue | \"mixed\";\n\n/**\n * Resolves generated metadata defaults with an optional sparse policy overlay.\n * Permission name validation belongs to callers; unknown endpoints use unknown().\n */\nexport interface FirewallMetadataPolicyResolver {\n  permission(name: string): FirewallPolicyValue;\n  unknown(): FirewallPolicyValue;\n  list(permissionNames: readonly string[]): FirewallMetadataPolicyListState;\n  isPermissionOverridden(name: string): boolean;\n  isUnknownOverridden(): boolean;\n}\n\nfunction buildMetadataOverrideLookup(\n  metadata: FirewallMetadataPolicyResolverMetadata,\n): ReadonlyMap<string, FirewallPolicyValue> {\n  const overrides = metadata.defaultPolicy.permissionOverrides;\n  const lookup = new Map<string, FirewallPolicyValue>();\n  if (!overrides) {\n    return lookup;\n  }\n\n  for (const permission of overrides.allow ?? []) {\n    lookup.set(permission, \"allow\");\n  }\n  for (const permission of overrides.deny ?? []) {\n    lookup.set(permission, \"deny\");\n  }\n  for (const permission of overrides.ask ?? []) {\n    lookup.set(permission, \"ask\");\n  }\n\n  return lookup;\n}\n\nfunction getOwnPermissionOverride(\n  overrides: Readonly<Record<string, FirewallPolicyValue>> | undefined,\n  name: string,\n): FirewallPolicyValue | undefined {\n  if (!overrides || !Object.prototype.hasOwnProperty.call(overrides, name)) {\n    return undefined;\n  }\n  return overrides[name];\n}\n\nexport function createFirewallMetadataPolicyResolver(\n  metadata: FirewallMetadataPolicyResolverMetadata,\n  overlay?: FirewallMetadataPolicyOverlay,\n): FirewallMetadataPolicyResolver {\n  const metadataOverrides = buildMetadataOverrideLookup(metadata);\n\n  function metadataPermission(name: string): FirewallPolicyValue {\n    return (\n      metadataOverrides.get(name) ?? metadata.defaultPolicy.permissionDefault\n    );\n  }\n\n  function permission(name: string): FirewallPolicyValue {\n    return (\n      getOwnPermissionOverride(overlay?.permissionOverrides, name) ??\n      overlay?.permissionDefault ??\n      metadataPermission(name)\n    );\n  }\n\n  return {\n    permission,\n    unknown: () => {\n      return overlay?.unknownPolicy ?? metadata.defaultPolicy.unknownPolicy;\n    },\n    list: (permissionNames) => {\n      let first: FirewallPolicyValue | null = null;\n      for (const name of permissionNames) {\n        const current = permission(name);\n        if (first === null) {\n          first = current;\n          continue;\n        }\n        if (first !== current) {\n          return \"mixed\";\n        }\n      }\n      return first ?? \"mixed\";\n    },\n    isPermissionOverridden: (name) => {\n      return permission(name) !== metadataPermission(name);\n    },\n    isUnknownOverridden: () => {\n      return (\n        (overlay?.unknownPolicy ?? metadata.defaultPolicy.unknownPolicy) !==\n        metadata.defaultPolicy.unknownPolicy\n      );\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;AAAA;;;ACAA;AAgCA,SAAS,4BACP,UAC0C;AAC1C,QAAM,YAAY,SAAS,cAAc;AACzC,QAAM,SAAS,oBAAI,IAAiC;AACpD,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,EACT;AAEA,aAAW,cAAc,UAAU,SAAS,CAAC,GAAG;AAC9C,WAAO,IAAI,YAAY,OAAO;AAAA,EAChC;AACA,aAAW,cAAc,UAAU,QAAQ,CAAC,GAAG;AAC7C,WAAO,IAAI,YAAY,MAAM;AAAA,EAC/B;AACA,aAAW,cAAc,UAAU,OAAO,CAAC,GAAG;AAC5C,WAAO,IAAI,YAAY,KAAK;AAAA,EAC9B;AAEA,SAAO;AACT;AAEA,SAAS,yBACP,WACA,MACiC;AACjC,MAAI,CAAC,aAAa,CAAC,OAAO,UAAU,eAAe,KAAK,WAAW,IAAI,GAAG;AACxE,WAAO;AAAA,EACT;AACA,SAAO,UAAU,IAAI;AACvB;AAEO,SAAS,qCACd,UACA,SACgC;AAChC,QAAM,oBAAoB,4BAA4B,QAAQ;AAE9D,WAAS,mBAAmB,MAAmC;AAC7D,WACE,kBAAkB,IAAI,IAAI,KAAK,SAAS,cAAc;AAAA,EAE1D;AAEA,WAAS,WAAW,MAAmC;AACrD,WACE,yBAAyB,SAAS,qBAAqB,IAAI,KAC3D,SAAS,qBACT,mBAAmB,IAAI;AAAA,EAE3B;AAEA,SAAO;AAAA,IACL;AAAA,IACA,SAAS,MAAM;AACb,aAAO,SAAS,iBAAiB,SAAS,cAAc;AAAA,IAC1D;AAAA,IACA,MAAM,CAAC,oBAAoB;AACzB,UAAI,QAAoC;AACxC,iBAAW,QAAQ,iBAAiB;AAClC,cAAM,UAAU,WAAW,IAAI;AAC/B,YAAI,UAAU,MAAM;AAClB,kBAAQ;AACR;AAAA,QACF;AACA,YAAI,UAAU,SAAS;AACrB,iBAAO;AAAA,QACT;AAAA,MACF;AACA,aAAO,SAAS;AAAA,IAClB;AAAA,IACA,wBAAwB,CAAC,SAAS;AAChC,aAAO,WAAW,IAAI,MAAM,mBAAmB,IAAI;AAAA,IACrD;AAAA,IACA,qBAAqB,MAAM;AACzB,cACG,SAAS,iBAAiB,SAAS,cAAc,mBAClD,SAAS,cAAc;AAAA,IAE3B;AAAA,EACF;AACF;;;AD/CA,SAAS,sBACP,UACQ;AACR,SAAO,SAAS,gBAAgB,SAAS;AAC3C;AAIO,SAAS,oCACd,UACgB;AAChB,QAAM,WAAW,qCAAqC,QAAQ;AAC9D,QAAM,WAAgD,CAAC;AAEvD,aAAW,cAAc,SAAS,aAAa;AAC7C,aAAS,WAAW,IAAI,IAAI,SAAS,WAAW,WAAW,IAAI;AAAA,EACjE;AAEA,SAAO;AAAA,IACL;AAAA,IACA,eAAe,SAAS,QAAQ;AAAA,EAClC;AACF;AAEO,SAAS,+BACd,UACA,MACgE;AAChE,SACE,SAAS,YAAY,KAAK,CAAC,eAAe;AACxC,WAAO,WAAW,SAAS;AAAA,EAC7B,CAAC,KAAK;AAEV;AAkCO,SAAS,gCACd,QACA,UACyB;AACzB,MAAI,WAAoC;AACxC,aAAW,UAAU,UAAU;AAC7B,UAAM,gBAAgB,sBAAsB,MAAM;AAClD,UAAM,WAAW,oCAAoC,MAAM;AAC3D,UAAM,WAAW,WAAW,aAAa;AACzC,eAAW;AAAA,MACT,GAAG;AAAA,MACH,CAAC,aAAa,GAAG;AAAA,QACf,UAAU,EAAE,GAAG,SAAS,UAAU,GAAG,UAAU,SAAS;AAAA,QACxD,GAAI,UAAU,kBAAkB,SAC5B,EAAE,eAAe,SAAS,cAAc,IACxC,EAAE,eAAe,SAAS,cAAc;AAAA,MAC9C;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,mCACd,QACyB;AACzB,QAAM,WAA6B,CAAC;AACpC,aAAW,SAAS,QAAQ;AAC1B,UAAM,UAAU,SAAS,MAAM,YAAY,KAAK,EAAE,UAAU,CAAC,EAAE;AAC/D,QAAI,MAAM,eAAe,0BAA0B;AACjD,eAAS,MAAM,YAAY,IAAI;AAAA,QAC7B,GAAG;AAAA,QACH,eAAe,MAAM;AAAA,MACvB;AACA;AAAA,IACF;AACA,YAAQ,SAAS,MAAM,UAAU,IAAI,MAAM;AAC3C,aAAS,MAAM,YAAY,IAAI;AAAA,EACjC;AACA,SAAO,OAAO,KAAK,QAAQ,EAAE,SAAS,IAAI,WAAW;AACvD;","names":[]}