@xemahq/contracts 0.48.0 → 0.50.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/.source-stamp.json +2 -2
- package/dist/authorization-module/platform/xema_capability.fga +13 -5
- package/dist/authorization-module/platform/xema_capability.fga.yaml +35 -1
- package/dist/authzen/index.d.ts +1 -0
- package/dist/authzen/index.d.ts.map +1 -1
- package/dist/authzen/index.js +1 -0
- package/dist/authzen/index.js.map +1 -1
- package/dist/authzen/lib/org-authority-contextual-tuple.d.ts +27 -0
- package/dist/authzen/lib/org-authority-contextual-tuple.d.ts.map +1 -0
- package/dist/authzen/lib/org-authority-contextual-tuple.js +54 -0
- package/dist/authzen/lib/org-authority-contextual-tuple.js.map +1 -0
- package/dist/authzen/lib/xema-authzen-profile.d.ts +4 -0
- package/dist/authzen/lib/xema-authzen-profile.d.ts.map +1 -1
- package/dist/authzen/lib/xema-authzen-profile.js +2 -0
- package/dist/authzen/lib/xema-authzen-profile.js.map +1 -1
- package/dist/capability/lib/capability-contribution.d.ts +0 -3
- package/dist/capability/lib/capability-contribution.d.ts.map +1 -1
- package/dist/capability/lib/capability-contribution.js +0 -3
- package/dist/capability/lib/capability-contribution.js.map +1 -1
- package/dist/capability/lib/capability-human-baseline.d.ts +10 -15
- package/dist/capability/lib/capability-human-baseline.d.ts.map +1 -1
- package/dist/capability/lib/capability-human-baseline.js +48 -77
- package/dist/capability/lib/capability-human-baseline.js.map +1 -1
- package/dist/capability/lib/shell-command-descriptor.d.ts +0 -2
- package/dist/capability/lib/shell-command-descriptor.d.ts.map +1 -1
- package/dist/capability/lib/shell-command-descriptor.js +1 -3
- package/dist/capability/lib/shell-command-descriptor.js.map +1 -1
- package/dist/capability-projection/lib/projected-capability.d.ts +0 -1
- package/dist/capability-projection/lib/projected-capability.d.ts.map +1 -1
- package/dist/deployment/index.d.ts +2 -0
- package/dist/deployment/index.d.ts.map +1 -0
- package/dist/deployment/index.js +18 -0
- package/dist/deployment/index.js.map +1 -0
- package/dist/deployment/lib/deployment-id.d.ts +11 -0
- package/dist/deployment/lib/deployment-id.d.ts.map +1 -0
- package/dist/deployment/lib/deployment-id.js +25 -0
- package/dist/deployment/lib/deployment-id.js.map +1 -0
- package/dist/execution-context/lib/execution-context.d.ts +1 -0
- package/dist/execution-context/lib/execution-context.d.ts.map +1 -1
- package/dist/execution-context/lib/execution-context.js +1 -0
- package/dist/execution-context/lib/execution-context.js.map +1 -1
- package/dist/execution-target/lib/execution-target.d.ts.map +1 -1
- package/dist/execution-target/lib/execution-target.js.map +1 -1
- package/dist/subject/lib/delegated-authority.d.ts +10 -1
- package/dist/subject/lib/delegated-authority.d.ts.map +1 -1
- package/dist/subject/lib/delegated-authority.js +29 -2
- package/dist/subject/lib/delegated-authority.js.map +1 -1
- package/dist/subject/lib/subject.d.ts +2 -1
- package/dist/subject/lib/subject.d.ts.map +1 -1
- package/dist/subject/lib/subject.js +1 -0
- package/dist/subject/lib/subject.js.map +1 -1
- package/dist/workflow/lib/workflow-namespace.d.ts +3 -4
- package/dist/workflow/lib/workflow-namespace.d.ts.map +1 -1
- package/dist/workflow/lib/workflow-namespace.js +27 -22
- package/dist/workflow/lib/workflow-namespace.js.map +1 -1
- package/package.json +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"capability-human-baseline.js","sourceRoot":"","sources":["../../../src/capability/lib/capability-human-baseline.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"capability-human-baseline.js","sourceRoot":"","sources":["../../../src/capability/lib/capability-human-baseline.ts"],"names":[],"mappings":";;;AAgRA,oDAmBC;AAMD,wEAiBC;AAWD,wDAeC;AAeD,wDAWC;AAqBD,wDAYC;AA/YD,6BAAwB;AAExB,iFAG0C;AAC1C,yCAAwE;AA+H3D,QAAA,2CAA2C,GAAG,eAAe,CAAC;AAG3E,IAAY,iBAOX;AAPD,WAAY,iBAAiB;IAE3B,mDAA8B,CAAA;IAE9B,yCAAoB,CAAA;IAEpB,6DAAwC,CAAA;AAC1C,CAAC,EAPW,iBAAiB,iCAAjB,iBAAiB,QAO5B;AAmCD,SAAS,kBAAkB,CACzB,CAA2B,EAC3B,CAA2B;IAE3B,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,+BAA+B,GAAG,OAAC;KACtC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;KAC3D,MAAM,EAAE,CAAC;AAMZ,SAAS,2BAA2B,CAClC,QAAwE,EACxE,OAAwB;IAExB,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4B,CAAC;IACjD,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QACnE,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC;gBAC7B,OAAO,EAAE,wCAAwC,WAAW,mBAAmB;aAChF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACrD,MAAM,OAAO,GACX,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,YAAY,CAAC,MAAM;QAC1C,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3D,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EACL,uEAAuE;gBACvE,cAAc,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;SAC1C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,0BAA0B,GAAG,OAAC;KACjC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC;IAC1C,cAAc,EAAE,sBAAa;IAC7B,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,2DAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7D,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,2BAA2B,CAAC,CAAC;AAE5C,MAAM,oCAAoC,GAAG,OAAC;KAC3C,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,iBAAiB,CAAC;IACpD,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,2DAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7D,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,2BAA2B,CAAC,CAAC;AAM/B,QAAA,mBAAmB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9D,+BAA+B;IAC/B,0BAA0B;IAC1B,oCAAoC;CACrC,CAAwC,CAAC;AAG7B,QAAA,4BAA4B,GACvC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,YAAY,EAAE,CAAC,CAAC;AAO1D,MAAa,6BAA8B,SAAQ,KAAK;IACtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AALD,sEAKC;AAOD,SAAgB,oBAAoB,CAClC,cAAuB,EACvB,YAAiD;IAEjD,MAAM,SAAS,GAAyB;QACtC,IAAI,EAAE,iBAAiB,CAAC,OAAO;QAC/B,cAAc;QACd,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;KACzD,CAAC;IACF,MAAM,MAAM,GAAG,2BAAmB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,6BAA6B,CACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,SAAS;QACZ,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC;KACpD,CAAC,CAAC;AACL,CAAC;AAMD,SAAgB,8BAA8B,CAC5C,YAAiD;IAEjD,MAAM,SAAS,GAAmC;QAChD,IAAI,EAAE,iBAAiB,CAAC,iBAAiB;QACzC,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;KACzD,CAAC;IACF,MAAM,MAAM,GAAG,2BAAmB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,6BAA6B,CACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,SAAS;QACZ,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC;KACpD,CAAC,CAAC;AACL,CAAC;AAWD,SAAgB,sBAAsB,CACpC,UAAyD;IAEzD,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,UAAU,GAAG,UAAU,CAAC,mDAA2C,CAAC,CAAC;IAC3E,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACtE,MAAM,MAAM,GAAG,2BAAmB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,6BAA6B,CACrC,4BAA4B,MAAM,CAAC,KAAK,CAAC,MAAM;aAC5C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;aAC7B,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAeD,SAAgB,sBAAsB,CACpC,QAAmC;IAEnC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,iBAAiB,CAAC,YAAY;YACjC,OAAO,SAAS,CAAC;QACnB,KAAK,iBAAiB,CAAC,OAAO,CAAC;QAC/B,KAAK,iBAAiB,CAAC,iBAAiB;YACtC,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAQD,MAAM,4BAA4B,GAAG,gBAAO,CAAC,KAAK,CAAC;AAanD,SAAgB,sBAAsB,CACpC,IAAa,EACb,WAAqC,EACrC,QAAmC;IAEnC,MAAM,IAAI,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,KAAK,GACT,IAAI,CAAC,IAAI,KAAK,iBAAiB,CAAC,OAAO;QACrC,CAAC,CAAC,IAAI,CAAC,cAAc;QACrB,CAAC,CAAC,4BAA4B,CAAC;IACnC,OAAO,IAAA,yBAAgB,EAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClF,CAAC"}
|
|
@@ -3,7 +3,6 @@ import { type CapabilityRef } from './capability-ref';
|
|
|
3
3
|
import { type CapabilityAuthorityEffect } from './authority-effect';
|
|
4
4
|
import { type CapabilityReach } from './capability-reach';
|
|
5
5
|
import { CapabilityRiskTier } from './permission-profile';
|
|
6
|
-
import { type OrgRole } from '../../tenant';
|
|
7
6
|
import { type HumanBaseline } from './capability-human-baseline';
|
|
8
7
|
export interface JsonSchemaRefStub {
|
|
9
8
|
$ref: string;
|
|
@@ -23,7 +22,6 @@ export interface ShellCommandDescriptor {
|
|
|
23
22
|
sideEffects: string;
|
|
24
23
|
reach?: CapabilityReach;
|
|
25
24
|
authorityEffect?: CapabilityAuthorityEffect;
|
|
26
|
-
defaultBaselineOrgRole?: OrgRole;
|
|
27
25
|
humanBaseline?: HumanBaseline;
|
|
28
26
|
outputSchema?: JsonSchemaRefStub;
|
|
29
27
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"shell-command-descriptor.d.ts","sourceRoot":"","sources":["../../../src/capability/lib/shell-command-descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAEnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,
|
|
1
|
+
{"version":3,"file":"shell-command-descriptor.d.ts","sourceRoot":"","sources":["../../../src/capability/lib/shell-command-descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAEnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,6BAA6B,CAAC;AAQrC,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,eAAO,MAAM,uBAAuB,EAE9B,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;AA2FnC,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,oBAAoB,EAAE,aAAa,EAAE,CAAC;IAMtC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IAMzB,eAAe,EAAE,MAAM,EAAE,CAAC;IAwB1B,aAAa,EAAE,OAAO,CAAC;IAYvB,QAAQ,EAAE,kBAAkB,CAAC;IAa7B,gBAAgB,EAAE,OAAO,CAAC;IAQ1B,WAAW,EAAE,MAAM,CAAC;IAYpB,KAAK,CAAC,EAAE,eAAe,CAAC;IAexB,eAAe,CAAC,EAAE,yBAAyB,CAAC;IAQ5C,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC;AAED,eAAO,MAAM,4BAA4B,EAqB1B,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC"}
|
|
@@ -6,7 +6,6 @@ const capability_ref_1 = require("./capability-ref");
|
|
|
6
6
|
const authority_effect_1 = require("./authority-effect");
|
|
7
7
|
const capability_reach_1 = require("./capability-reach");
|
|
8
8
|
const permission_profile_1 = require("./permission-profile");
|
|
9
|
-
const tenant_1 = require("../../tenant");
|
|
10
9
|
const capability_human_baseline_1 = require("./capability-human-baseline");
|
|
11
10
|
exports.JsonSchemaRefStubSchema = zod_1.z.object({
|
|
12
11
|
$ref: zod_1.z.string().min(1),
|
|
@@ -26,9 +25,8 @@ exports.ShellCommandDescriptorSchema = zod_1.z
|
|
|
26
25
|
sideEffects: zod_1.z.string().min(1).max(1000),
|
|
27
26
|
reach: capability_reach_1.CapabilityReachSchema.optional(),
|
|
28
27
|
authorityEffect: authority_effect_1.CapabilityAuthorityEffectSchema.optional(),
|
|
29
|
-
defaultBaselineOrgRole: tenant_1.OrgRoleSchema.optional(),
|
|
30
28
|
humanBaseline: capability_human_baseline_1.HumanBaselineSchema.optional(),
|
|
31
29
|
outputSchema: exports.JsonSchemaRefStubSchema.optional(),
|
|
32
30
|
})
|
|
33
|
-
.
|
|
31
|
+
.strict();
|
|
34
32
|
//# sourceMappingURL=shell-command-descriptor.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"shell-command-descriptor.js","sourceRoot":"","sources":["../../../src/capability/lib/shell-command-descriptor.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,qDAA2E;AAC3E,yDAG4B;AAC5B,yDAG4B;AAC5B,6DAG8B;AAC9B,
|
|
1
|
+
{"version":3,"file":"shell-command-descriptor.js","sourceRoot":"","sources":["../../../src/capability/lib/shell-command-descriptor.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,qDAA2E;AAC3E,yDAG4B;AAC5B,yDAG4B;AAC5B,6DAG8B;AAC9B,2EAGqC;AAYxB,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAiC,CAAC;AA4MtB,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpC,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,oCAAmB,CAAC;IAClD,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3C,aAAa,EAAE,OAAC,CAAC,OAAO,EAAE;IAC1B,QAAQ,EAAE,6CAAwB;IAClC,gBAAgB,EAAE,OAAC,CAAC,OAAO,EAAE;IAI7B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACxC,KAAK,EAAE,wCAAqB,CAAC,QAAQ,EAAE;IACvC,eAAe,EAAE,kDAA+B,CAAC,QAAQ,EAAE;IAC3D,aAAa,EAAE,+CAAmB,CAAC,QAAQ,EAAE;IAC7C,YAAY,EAAE,+BAAuB,CAAC,QAAQ,EAAE;CACjD,CAAC;KACD,MAAM,EAAuC,CAAC"}
|
|
@@ -30,7 +30,6 @@ export declare const ProjectedCapabilitySchema: z.ZodObject<{
|
|
|
30
30
|
trustedContextProjection: z.ZodOptional<z.ZodType<import("../../capability").TrustedContextProjection, unknown, z.core.$ZodTypeInternals<import("../../capability").TrustedContextProjection, unknown>>>;
|
|
31
31
|
requiredBindings: z.ZodOptional<z.ZodArray<z.ZodType<import("../../capability").RequiredResourceRoleBinding, unknown, z.core.$ZodTypeInternals<import("../../capability").RequiredResourceRoleBinding, unknown>>>>;
|
|
32
32
|
safeForAgents: z.ZodOptional<z.ZodBoolean>;
|
|
33
|
-
defaultBaselineOrgRole: z.ZodOptional<z.ZodEnum<typeof import("../../tenant").OrgRole>>;
|
|
34
33
|
humanBaseline: z.ZodOptional<z.ZodType<import("../../capability").HumanBaseline, unknown, z.core.$ZodTypeInternals<import("../../capability").HumanBaseline, unknown>>>;
|
|
35
34
|
invocation: z.ZodType<CapabilityInvocationBinding, unknown, z.core.$ZodTypeInternals<CapabilityInvocationBinding, unknown>>;
|
|
36
35
|
provenance: z.ZodType<ProjectedCapabilityProvenance, unknown, z.core.$ZodTypeInternals<ProjectedCapabilityProvenance, unknown>>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"projected-capability.d.ts","sourceRoot":"","sources":["../../../src/capability-projection/lib/projected-capability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,iCAAiC,CAAC;AAUzC,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,eAAO,MAAM,mCAAmC,EAAE,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAO5E,CAAC;AAoBd,MAAM,WAAW,mBAAoB,SAAQ,8BAA8B;IACzE,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;CACpD;AAED,eAAO,MAAM,yBAAyB
|
|
1
|
+
{"version":3,"file":"projected-capability.d.ts","sourceRoot":"","sources":["../../../src/capability-projection/lib/projected-capability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,iCAAiC,CAAC;AAUzC,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,eAAO,MAAM,mCAAmC,EAAE,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAO5E,CAAC;AAoBd,MAAM,WAAW,mBAAoB,SAAQ,8BAA8B;IACzE,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;CACpD;AAED,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;kBAIO,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/deployment/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __exportStar = (this && this.__exportStar) || function(m, exports) {
|
|
14
|
+
for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
|
|
15
|
+
};
|
|
16
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
17
|
+
__exportStar(require("./lib/deployment-id"), exports);
|
|
18
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/deployment/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sDAAoC"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
declare const deploymentIdBrand: unique symbol;
|
|
2
|
+
export type DeploymentId = string & {
|
|
3
|
+
readonly [deploymentIdBrand]: true;
|
|
4
|
+
};
|
|
5
|
+
export declare const DEPLOYMENT_ID_ENV = "XEMA_DEPLOYMENT_ID";
|
|
6
|
+
export declare const DEPLOYMENT_ID_PATTERN: RegExp;
|
|
7
|
+
export declare const DEPLOYMENT_ORG_INFIX = "-org-";
|
|
8
|
+
export declare function parseDeploymentId(value: string): DeploymentId;
|
|
9
|
+
export declare function workflowNamespaceForDeployment(id: DeploymentId): string;
|
|
10
|
+
export {};
|
|
11
|
+
//# sourceMappingURL=deployment-id.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"deployment-id.d.ts","sourceRoot":"","sources":["../../../src/deployment/lib/deployment-id.ts"],"names":[],"mappings":"AAkCA,OAAO,CAAC,MAAM,iBAAiB,EAAE,OAAO,MAAM,CAAC;AAG/C,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC;AAG3E,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AAGtD,eAAO,MAAM,qBAAqB,QAA2C,CAAC;AAM9E,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAM5C,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,CAgB7D;AASD,wBAAgB,8BAA8B,CAAC,EAAE,EAAE,YAAY,GAAG,MAAM,CAEvE"}
|
|
@@ -0,0 +1,25 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.DEPLOYMENT_ORG_INFIX = exports.DEPLOYMENT_ID_PATTERN = exports.DEPLOYMENT_ID_ENV = void 0;
|
|
4
|
+
exports.parseDeploymentId = parseDeploymentId;
|
|
5
|
+
exports.workflowNamespaceForDeployment = workflowNamespaceForDeployment;
|
|
6
|
+
exports.DEPLOYMENT_ID_ENV = 'XEMA_DEPLOYMENT_ID';
|
|
7
|
+
exports.DEPLOYMENT_ID_PATTERN = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
|
|
8
|
+
exports.DEPLOYMENT_ORG_INFIX = '-org-';
|
|
9
|
+
function parseDeploymentId(value) {
|
|
10
|
+
if (!exports.DEPLOYMENT_ID_PATTERN.test(value)) {
|
|
11
|
+
throw new Error(`Deployment id ${JSON.stringify(value)} does not match ${exports.DEPLOYMENT_ID_PATTERN.source} ` +
|
|
12
|
+
"(a DNS label: lowercase alphanumerics and '-', alphanumeric at both ends, at most 63 characters). " +
|
|
13
|
+
'The deployment names its own identity; there is no default.');
|
|
14
|
+
}
|
|
15
|
+
if (value.includes(exports.DEPLOYMENT_ORG_INFIX)) {
|
|
16
|
+
throw new Error(`Deployment id ${JSON.stringify(value)} contains '${exports.DEPLOYMENT_ORG_INFIX}', which is reserved ` +
|
|
17
|
+
"for the org namespaces a deployment derives — this identity would read as another deployment's " +
|
|
18
|
+
'org namespace.');
|
|
19
|
+
}
|
|
20
|
+
return value;
|
|
21
|
+
}
|
|
22
|
+
function workflowNamespaceForDeployment(id) {
|
|
23
|
+
return id;
|
|
24
|
+
}
|
|
25
|
+
//# sourceMappingURL=deployment-id.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"deployment-id.js","sourceRoot":"","sources":["../../../src/deployment/lib/deployment-id.ts"],"names":[],"mappings":";;;AAuDA,8CAgBC;AASD,wEAEC;AA1CY,QAAA,iBAAiB,GAAG,oBAAoB,CAAC;AAGzC,QAAA,qBAAqB,GAAG,wCAAwC,CAAC;AAMjE,QAAA,oBAAoB,GAAG,OAAO,CAAC;AAM5C,SAAgB,iBAAiB,CAAC,KAAa;IAC7C,IAAI,CAAC,6BAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,iBAAiB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,mBAAmB,6BAAqB,CAAC,MAAM,GAAG;YACtF,oGAAoG;YACpG,6DAA6D,CAChE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,4BAAoB,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,iBAAiB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,4BAAoB,uBAAuB;YAC7F,iGAAiG;YACjG,gBAAgB,CACnB,CAAC;IACJ,CAAC;IACD,OAAO,KAAqB,CAAC;AAC/B,CAAC;AASD,SAAgB,8BAA8B,CAAC,EAAgB;IAC7D,OAAO,EAAE,CAAC;AACZ,CAAC"}
|
|
@@ -26,6 +26,7 @@ export declare const ExecutionContextEnvironmentSchema: z.ZodType<ExecutionConte
|
|
|
26
26
|
export interface ExecutionContextCapability {
|
|
27
27
|
ref: CapabilityRef;
|
|
28
28
|
inputHash?: string;
|
|
29
|
+
operationInstance?: string;
|
|
29
30
|
}
|
|
30
31
|
export declare const ExecutionContextCapabilitySchema: z.ZodType<ExecutionContextCapability>;
|
|
31
32
|
export interface ExecutionContextResource {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"execution-context.d.ts","sourceRoot":"","sources":["../../../src/execution-context/lib/execution-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,sBAAsB,EAEvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,wBAAwB,EAEzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,kBAAkB,EAGlB,KAAK,QAAQ,EACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAiCnB,oBAAY,uBAAuB;IAEjC,QAAQ,aAAa;IAErB,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,6BAA6B,2CAEzC,CAAC;AAQF,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,uBAAuB,CAAC;IACnC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,eAAO,MAAM,2BAA2B,EAKlC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAYvC,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,wBAAwB,CAAC;CAChC;AAED,eAAO,MAAM,iCAAiC,EAGxC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;AAU7C,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,aAAa,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"execution-context.d.ts","sourceRoot":"","sources":["../../../src/execution-context/lib/execution-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,sBAAsB,EAEvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,wBAAwB,EAEzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,kBAAkB,EAGlB,KAAK,QAAQ,EACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAiCnB,oBAAY,uBAAuB;IAEjC,QAAQ,aAAa;IAErB,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,6BAA6B,2CAEzC,CAAC;AAQF,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,uBAAuB,CAAC;IACnC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,eAAO,MAAM,2BAA2B,EAKlC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAYvC,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,wBAAwB,CAAC;CAChC;AAED,eAAO,MAAM,iCAAiC,EAGxC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;AAU7C,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,aAAa,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IAUnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,eAAO,MAAM,gCAAgC,EAIvC,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;AA4C5C,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,MAAM,CAAC;IAkBZ,cAAc,CAAC,EAAE,kBAAkB,CAAC;CACrC;AAED,eAAO,MAAM,8BAA8B,EAYrC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAa1C,MAAM,WAAW,2BAA2B;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,eAAO,MAAM,iCAAiC,EAMxC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;AAa7C,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,CAAC;IAChB,WAAW,EAAE,2BAA2B,CAAC;IACzC,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAC9B,UAAU,EAAE,0BAA0B,CAAC;IACvC,QAAQ,CAAC,EAAE,wBAAwB,CAAC;IACpC,WAAW,CAAC,EAAE,2BAA2B,CAAC;IAM1C,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAM5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAuC7B,WAAW,CAAC,EAAE,eAAe,CAAC;IAU9B,eAAe,CAAC,EAAE,sBAAsB,CAAC;IAqBzC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAkB9B,UAAU,CAAC,EAAE,kBAAkB,CAAC;CACjC;AAED,eAAO,MAAM,sBAAsB,EAkB7B,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC"}
|
|
@@ -29,6 +29,7 @@ exports.ExecutionContextEnvironmentSchema = zod_1.z.object({
|
|
|
29
29
|
exports.ExecutionContextCapabilitySchema = zod_1.z.object({
|
|
30
30
|
ref: capability_1.CapabilityRefSchema,
|
|
31
31
|
inputHash: zod_1.z.string().min(1).optional(),
|
|
32
|
+
operationInstance: zod_1.z.string().min(1).optional(),
|
|
32
33
|
});
|
|
33
34
|
exports.ExecutionContextResourceSchema = zod_1.z.object({
|
|
34
35
|
ref: zod_1.z
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"execution-context.js","sourceRoot":"","sources":["../../../src/execution-context/lib/execution-context.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,uDAG6B;AAC7B,iDAK0B;AAC1B,2CAA0D;AAC1D,uEAGqC;AACrC,uCAKqB;AACrB,qCAAqD;AACrD,2CAGuB;AACvB,uCAOmB;AAiCnB,IAAY,uBAKX;AALD,WAAY,uBAAuB;IAEjC,gDAAqB,CAAA;IAErB,gDAAqB,CAAA;AACvB,CAAC,EALW,uBAAuB,uCAAvB,uBAAuB,QAKlC;AAEY,QAAA,6BAA6B,GAAG,OAAC,CAAC,UAAU,CACvD,uBAAuB,CACxB,CAAC;AAeW,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,SAAS,EAAE,qCAA6B;IACxC,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE;CAC/B,CAAqC,CAAC;AAiB1B,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACxD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,sDAA8B;CACrC,CAA2C,CAAC;
|
|
1
|
+
{"version":3,"file":"execution-context.js","sourceRoot":"","sources":["../../../src/execution-context/lib/execution-context.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,uDAG6B;AAC7B,iDAK0B;AAC1B,2CAA0D;AAC1D,uEAGqC;AACrC,uCAKqB;AACrB,qCAAqD;AACrD,2CAGuB;AACvB,uCAOmB;AAiCnB,IAAY,uBAKX;AALD,WAAY,uBAAuB;IAEjC,gDAAqB,CAAA;IAErB,gDAAqB,CAAA;AACvB,CAAC,EALW,uBAAuB,uCAAvB,uBAAuB,QAKlC;AAEY,QAAA,6BAA6B,GAAG,OAAC,CAAC,UAAU,CACvD,uBAAuB,CACxB,CAAC;AAeW,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,SAAS,EAAE,qCAA6B;IACxC,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE;CAC/B,CAAqC,CAAC;AAiB1B,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACxD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,sDAA8B;CACrC,CAA2C,CAAC;AAyBhC,QAAA,gCAAgC,GAAG,OAAC,CAAC,MAAM,CAAC;IACvD,GAAG,EAAE,gCAAmB;IACxB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAChD,CAA0C,CAAC;AAkE/B,QAAA,8BAA8B,GAAG,OAAC,CAAC,MAAM,CAAC;IACrD,GAAG,EAAE,OAAC;SACH,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,MAAM,CAAC,mCAAyB,EAAE;QACjC,OAAO,EACL,4DAA4D;YAC5D,uDAAuD;YACvD,kEAAkE;YAClE,2BAA2B;KAC9B,CAAC;IACJ,cAAc,EAAE,gCAAwB,CAAC,QAAQ,EAAE;CACpD,CAAwC,CAAC;AAqB7B,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACxD,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC/C,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC7D,eAAe,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,mBAAmB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAA2C,CAAC;AA+HhC,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,0BAAgB;IACzB,MAAM,EAAE,qBAAY;IACpB,KAAK,EAAE,sBAAc;IACrB,WAAW,EAAE,yCAAiC;IAC9C,KAAK,EAAE,mCAA2B,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,wCAAgC;IAC5C,QAAQ,EAAE,sCAA8B,CAAC,QAAQ,EAAE;IACnD,WAAW,EAAE,yCAAiC,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,4BAAkB,CAAC,CAAC,QAAQ,EAAE;IAClD,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,WAAW,EAAE,+BAAqB,CAAC,QAAQ,EAAE;IAC7C,eAAe,EAAE,4CAA4B,CAAC,QAAQ,EAAE;IACxD,QAAQ,EAAE,qCAAwB,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,kCAAwB,CAAC,QAAQ,EAAE;CAChD,CAAgC,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"execution-target.d.ts","sourceRoot":"","sources":["../../../src/execution-target/lib/execution-target.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"execution-target.d.ts","sourceRoot":"","sources":["../../../src/execution-target/lib/execution-target.ts"],"names":[],"mappings":"AAqCA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,kBAAkB,EAElB,SAAS,EAGT,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EAEpB,MAAM,cAAc,CAAC;AA2BtB,eAAO,MAAM,4BAA4B,EAAE,eAG1C,CAAC;AAGF,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,SAAS,GAAG,SAAS,CAOzE;AAaD,eAAO,MAAM,8BAA8B,iBAAiB,CAAC;AAa7D,eAAO,MAAM,6BAA6B,QAA8B,CAAC;AAGzE,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAS9D;AA4BD,oBAAY,oBAAoB;IAC9B,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,WAAW,gBAAgB;CAC5B;AAYD,eAAO,MAAM,oCAAoC,QAClB,CAAC;AAWhC,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GACvC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAclC;AAED,eAAO,MAAM,2BAA2B,qDAK1B,CAAC;AAUf,oBAAY,qBAAqB;IAC/B,YAAY,iBAAiB;IAC7B,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,MAAM,WAAW;CAClB;AAED,eAAO,MAAM,2BAA2B,yCAAsC,CAAC;AAO/E,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAET;AAWD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC;IAEnC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IAEvC,QAAQ,CAAC,qBAAqB,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAE1D,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;iBAcK,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"execution-target.js","sourceRoot":"","sources":["../../../src/execution-target/lib/execution-target.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"execution-target.js","sourceRoot":"","sources":["../../../src/execution-target/lib/execution-target.ts"],"names":[],"mappings":";;;AAqFA,wEAOC;AA6BD,8DASC;AAwDD,kEAgBC;AAgCD,sEAIC;AAzMD,6BAAwB;AAExB,uCAOqB;AACrB,yCAKsB;AA2BT,QAAA,4BAA4B,GAAoB,IAAA,uBAAe,EAC1E,iBAAS,CAAC,MAAM,EAChB,iBAAS,CAAC,GAAG,CACd,CAAC;AAGF,SAAgB,8BAA8B,CAAC,IAAe;IAC5D,IAAA,iCAAyB,EACvB,kBAAkB,EAClB,IAAI,EACJ,oCAA4B,CAC7B,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAaY,QAAA,8BAA8B,GAAG,cAAc,CAAC;AAahD,QAAA,6BAA6B,GAAG,2BAA2B,CAAC;AAGzE,SAAgB,yBAAyB,CAAC,IAAY;IACpD,IAAI,CAAC,qCAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,gBAAgB,qCAA6B,GAAG;YAC3E,0EAA0E;YAC1E,oDAAoD,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA4BD,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,yCAAiB,CAAA;IACjB,+CAAuB,CAAA;IACvB,mDAA2B,CAAA;AAC7B,CAAC,EAJW,oBAAoB,oCAApB,oBAAoB,QAI/B;AAYY,QAAA,oCAAoC,GAC/C,6BAA6B,CAAC;AAWhC,SAAgB,2BAA2B,CACzC,MAAwC;IAExC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,4CAAoC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CACb,8BAA8B,GAAG,gBAAgB,4CAAoC,GAAG,CACzF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,4CAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,0BAA0B,GAAG,gBAAgB,KAAK,uBAAuB,4CAAoC,GAAG,CACjH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAEY,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CACL,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4CAAoC,CAAC,EACtD,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4CAAoC,CAAC,CACvD;KACA,OAAO,CAAC,EAAE,CAAC,CAAC;AAUf,IAAY,qBAMX;AAND,WAAY,qBAAqB;IAC/B,sDAA6B,CAAA;IAC7B,0CAAiB,CAAA;IACjB,8CAAqB,CAAA;IACrB,4CAAmB,CAAA;IACnB,0CAAiB,CAAA;AACnB,CAAC,EANW,qBAAqB,qCAArB,qBAAqB,QAMhC;AAEY,QAAA,2BAA2B,GAAG,OAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;AAO/E,SAAgB,6BAA6B,CAC3C,MAA6B;IAE7B,OAAO,MAAM,KAAK,qBAAqB,CAAC,MAAM,CAAC;AACjD,CAAC;AAgCY,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qCAA6B,CAAC;IACrD,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,cAAc,EAAE,OAAC,CAAC,UAAU,CAAC,iBAAS,CAAC;IACvC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,kCAAyB;IACvC,MAAM,EAAE,mCAA2B;IACnC,MAAM,EAAE,mCAA2B;IACnC,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,8BAAqB,CAAC;IAC9C,YAAY,EAAE,OAAC,CAAC,UAAU,CAAC,wBAAe,CAAC;IAC3C,YAAY,EAAE,OAAC,CAAC,UAAU,CAAC,wBAAe,CAAC;IAC3C,qBAAqB,EAAE,gCAAwB,CAAC,QAAQ,EAAE;IAC1D,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE;CACvB,CAAsC,CAAC"}
|
|
@@ -7,13 +7,21 @@ export interface DelegatedAuthority {
|
|
|
7
7
|
readonly capabilities: readonly string[];
|
|
8
8
|
readonly resourceScope?: readonly string[];
|
|
9
9
|
readonly authorizedBy?: string;
|
|
10
|
+
readonly boundOperation?: DelegatedBoundOperation;
|
|
10
11
|
}
|
|
12
|
+
export interface DelegatedBoundOperation {
|
|
13
|
+
readonly capability: string;
|
|
14
|
+
readonly instance: string;
|
|
15
|
+
}
|
|
16
|
+
export declare const DelegatedBoundOperationSchema: z.ZodType<DelegatedBoundOperation>;
|
|
17
|
+
export declare function isBoundOperationExclusive(capabilities: readonly string[], boundOperation: DelegatedBoundOperation): boolean;
|
|
11
18
|
export declare const DelegatedAuthoritySchema: z.ZodType<DelegatedAuthority>;
|
|
12
19
|
export declare enum DelegatedAuthorityVerdict {
|
|
13
20
|
Admitted = "admitted",
|
|
14
21
|
DelegationRequired = "delegation_required",
|
|
15
22
|
CapabilityNotDelegated = "capability_not_delegated",
|
|
16
|
-
ResourceOutsideDelegatedScope = "resource_outside_delegated_scope"
|
|
23
|
+
ResourceOutsideDelegatedScope = "resource_outside_delegated_scope",
|
|
24
|
+
OperationInstanceMismatch = "operation_instance_mismatch"
|
|
17
25
|
}
|
|
18
26
|
export declare const DelegatedAuthorityVerdictSchema: z.ZodEnum<typeof DelegatedAuthorityVerdict>;
|
|
19
27
|
export interface DelegatedAuthorityCheck {
|
|
@@ -21,6 +29,7 @@ export interface DelegatedAuthorityCheck {
|
|
|
21
29
|
readonly delegation: DelegatedAuthority | undefined;
|
|
22
30
|
readonly capability: string;
|
|
23
31
|
readonly resource?: string;
|
|
32
|
+
readonly instance?: string;
|
|
24
33
|
}
|
|
25
34
|
export declare function evaluateDelegatedAuthority(check: DelegatedAuthorityCheck): DelegatedAuthorityVerdict;
|
|
26
35
|
//# sourceMappingURL=delegated-authority.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"delegated-authority.d.ts","sourceRoot":"","sources":["../../../src/subject/lib/delegated-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAsB,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;
|
|
1
|
+
{"version":3,"file":"delegated-authority.d.ts","sourceRoot":"","sources":["../../../src/subject/lib/delegated-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAsB,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;AAwC/E,MAAM,WAAW,kBAAkB;IAEjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAK9B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAK7B,QAAQ,CAAC,UAAU,EAAE,SAAS,YAAY,EAAE,CAAC;IAM7C,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAMzC,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAM3C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAc/B,QAAQ,CAAC,cAAc,CAAC,EAAE,uBAAuB,CAAC;CACnD;AAGD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAID,eAAO,MAAM,6BAA6B,EAK3B,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAOlD,wBAAgB,yBAAyB,CACvC,YAAY,EAAE,SAAS,MAAM,EAAE,EAC/B,cAAc,EAAE,uBAAuB,GACtC,OAAO,CAET;AAED,eAAO,MAAM,wBAAwB,EAwB7B,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAMtC,oBAAY,yBAAyB;IAEnC,QAAQ,aAAa;IAMrB,kBAAkB,wBAAwB;IAE1C,sBAAsB,6BAA6B;IAEnD,6BAA6B,qCAAqC;IAMlE,yBAAyB,gCAAgC;CAC1D;AAED,eAAO,MAAM,+BAA+B,6CAE3C,CAAC;AAEF,MAAM,WAAW,uBAAuB;IAEtC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAElC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAEpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAM5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAM3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAkBD,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,uBAAuB,GAC7B,yBAAyB,CA6B3B"}
|
|
@@ -1,10 +1,20 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.DelegatedAuthorityVerdictSchema = exports.DelegatedAuthorityVerdict = exports.DelegatedAuthoritySchema = void 0;
|
|
3
|
+
exports.DelegatedAuthorityVerdictSchema = exports.DelegatedAuthorityVerdict = exports.DelegatedAuthoritySchema = exports.DelegatedBoundOperationSchema = void 0;
|
|
4
|
+
exports.isBoundOperationExclusive = isBoundOperationExclusive;
|
|
4
5
|
exports.evaluateDelegatedAuthority = evaluateDelegatedAuthority;
|
|
5
6
|
const zod_1 = require("zod");
|
|
6
7
|
const subject_1 = require("./subject");
|
|
7
8
|
const OpaqueEntrySchema = zod_1.z.string().min(1);
|
|
9
|
+
exports.DelegatedBoundOperationSchema = zod_1.z
|
|
10
|
+
.object({
|
|
11
|
+
capability: OpaqueEntrySchema,
|
|
12
|
+
instance: OpaqueEntrySchema,
|
|
13
|
+
})
|
|
14
|
+
.strict();
|
|
15
|
+
function isBoundOperationExclusive(capabilities, boundOperation) {
|
|
16
|
+
return capabilities.length === 1 && capabilities[0] === boundOperation.capability;
|
|
17
|
+
}
|
|
8
18
|
exports.DelegatedAuthoritySchema = zod_1.z
|
|
9
19
|
.object({
|
|
10
20
|
delegationId: zod_1.z.string().min(1),
|
|
@@ -13,14 +23,27 @@ exports.DelegatedAuthoritySchema = zod_1.z
|
|
|
13
23
|
capabilities: zod_1.z.array(OpaqueEntrySchema).min(1).readonly(),
|
|
14
24
|
resourceScope: zod_1.z.array(OpaqueEntrySchema).min(1).readonly().optional(),
|
|
15
25
|
authorizedBy: zod_1.z.string().min(1).optional(),
|
|
26
|
+
boundOperation: exports.DelegatedBoundOperationSchema.optional(),
|
|
16
27
|
})
|
|
17
|
-
.strict()
|
|
28
|
+
.strict()
|
|
29
|
+
.superRefine((authority, context) => {
|
|
30
|
+
if (authority.boundOperation !== undefined &&
|
|
31
|
+
!isBoundOperationExclusive(authority.capabilities, authority.boundOperation)) {
|
|
32
|
+
context.addIssue({
|
|
33
|
+
code: 'custom',
|
|
34
|
+
path: ['capabilities'],
|
|
35
|
+
message: 'a delegation bound to one operation instance must lend exactly ' +
|
|
36
|
+
'[boundOperation.capability] and nothing else.',
|
|
37
|
+
});
|
|
38
|
+
}
|
|
39
|
+
});
|
|
18
40
|
var DelegatedAuthorityVerdict;
|
|
19
41
|
(function (DelegatedAuthorityVerdict) {
|
|
20
42
|
DelegatedAuthorityVerdict["Admitted"] = "admitted";
|
|
21
43
|
DelegatedAuthorityVerdict["DelegationRequired"] = "delegation_required";
|
|
22
44
|
DelegatedAuthorityVerdict["CapabilityNotDelegated"] = "capability_not_delegated";
|
|
23
45
|
DelegatedAuthorityVerdict["ResourceOutsideDelegatedScope"] = "resource_outside_delegated_scope";
|
|
46
|
+
DelegatedAuthorityVerdict["OperationInstanceMismatch"] = "operation_instance_mismatch";
|
|
24
47
|
})(DelegatedAuthorityVerdict || (exports.DelegatedAuthorityVerdict = DelegatedAuthorityVerdict = {}));
|
|
25
48
|
exports.DelegatedAuthorityVerdictSchema = zod_1.z.nativeEnum(DelegatedAuthorityVerdict);
|
|
26
49
|
function evaluateDelegatedAuthority(check) {
|
|
@@ -38,6 +61,10 @@ function evaluateDelegatedAuthority(check) {
|
|
|
38
61
|
!delegation.resourceScope.includes(check.resource)) {
|
|
39
62
|
return DelegatedAuthorityVerdict.ResourceOutsideDelegatedScope;
|
|
40
63
|
}
|
|
64
|
+
if (delegation.boundOperation !== undefined &&
|
|
65
|
+
check.instance !== delegation.boundOperation.instance) {
|
|
66
|
+
return DelegatedAuthorityVerdict.OperationInstanceMismatch;
|
|
67
|
+
}
|
|
41
68
|
return DelegatedAuthorityVerdict.Admitted;
|
|
42
69
|
}
|
|
43
70
|
//# sourceMappingURL=delegated-authority.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"delegated-authority.js","sourceRoot":"","sources":["../../../src/subject/lib/delegated-authority.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"delegated-authority.js","sourceRoot":"","sources":["../../../src/subject/lib/delegated-authority.ts"],"names":[],"mappings":";;;AA6GA,8DAKC;AA8FD,gEA+BC;AA/OD,6BAAwB;AAExB,uCAA+E;AA6F/E,MAAM,iBAAiB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAE/B,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,CAAC;IACN,UAAU,EAAE,iBAAiB;IAC7B,QAAQ,EAAE,iBAAiB;CAC5B,CAAC;KACD,MAAM,EAAwC,CAAC;AAOlD,SAAgB,yBAAyB,CACvC,YAA+B,EAC/B,cAAuC;IAEvC,OAAO,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,UAAU,CAAC;AACpF,CAAC;AAEY,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,KAAK,EAAE,4BAAkB;IACzB,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,4BAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtE,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,cAAc,EAAE,qCAA6B,CAAC,QAAQ,EAAE;CACzD,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;IAClC,IACE,SAAS,CAAC,cAAc,KAAK,SAAS;QACtC,CAAC,yBAAyB,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,cAAc,CAAC,EAC5E,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EACL,iEAAiE;gBACjE,+CAA+C;SAClD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAkC,CAAC;AAMtC,IAAY,yBAmBX;AAnBD,WAAY,yBAAyB;IAEnC,kDAAqB,CAAA;IAMrB,uEAA0C,CAAA;IAE1C,gFAAmD,CAAA;IAEnD,+FAAkE,CAAA;IAMlE,sFAAyD,CAAA;AAC3D,CAAC,EAnBW,yBAAyB,yCAAzB,yBAAyB,QAmBpC;AAEY,QAAA,+BAA+B,GAAG,OAAC,CAAC,UAAU,CACzD,yBAAyB,CAC1B,CAAC;AAuCF,SAAgB,0BAA0B,CACxC,KAA8B;IAE9B,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC7B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,WAAW,KAAK,qBAAW,CAAC,YAAY;YACnD,CAAC,CAAC,yBAAyB,CAAC,kBAAkB;YAC9C,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC;IACzC,CAAC;IAGD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,OAAO,yBAAyB,CAAC,sBAAsB,CAAC;IAC1D,CAAC;IACD,IACE,UAAU,CAAC,aAAa,KAAK,SAAS;QACtC,KAAK,CAAC,QAAQ,KAAK,SAAS;QAC5B,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAClD,CAAC;QACD,OAAO,yBAAyB,CAAC,6BAA6B,CAAC;IACjE,CAAC;IAID,IACE,UAAU,CAAC,cAAc,KAAK,SAAS;QACvC,KAAK,CAAC,QAAQ,KAAK,UAAU,CAAC,cAAc,CAAC,QAAQ,EACrD,CAAC;QACD,OAAO,yBAAyB,CAAC,yBAAyB,CAAC;IAC7D,CAAC;IACD,OAAO,yBAAyB,CAAC,QAAQ,CAAC;AAC5C,CAAC"}
|
|
@@ -10,7 +10,8 @@ export declare enum SubjectKind {
|
|
|
10
10
|
Runner = "runner",
|
|
11
11
|
ExternalSubject = "external-subject",
|
|
12
12
|
Anon = "anon",
|
|
13
|
-
Organization = "organization"
|
|
13
|
+
Organization = "organization",
|
|
14
|
+
OrgAdministrators = "org-administrators"
|
|
14
15
|
}
|
|
15
16
|
export declare const SubjectKindSchema: z.ZodEnum<typeof SubjectKind>;
|
|
16
17
|
export interface ActingForRef {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"subject.d.ts","sourceRoot":"","sources":["../../../src/subject/lib/subject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmBxB,oBAAY,WAAW;IACrB,IAAI,SAAS;IACb,KAAK,UAAU;IACf,GAAG,QAAQ;IACX,SAAS,eAAe;IACxB,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,eAAe,qBAAqB;IACpC,IAAI,SAAS;IAkBb,YAAY,iBAAiB;
|
|
1
|
+
{"version":3,"file":"subject.d.ts","sourceRoot":"","sources":["../../../src/subject/lib/subject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmBxB,oBAAY,WAAW;IACrB,IAAI,SAAS;IACb,KAAK,UAAU;IACf,GAAG,QAAQ;IACX,SAAS,eAAe;IACxB,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,eAAe,qBAAqB;IACpC,IAAI,SAAS;IAkBb,YAAY,iBAAiB;IAe7B,iBAAiB,uBAAuB;CACzC;AAED,eAAO,MAAM,iBAAiB,+BAA4B,CAAC;AAY3D,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,WAAW,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IAqBX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAelB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,eAAO,MAAM,kBAAkB,EAOhB,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;AAWvC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,WAAW,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,YAAY,CAAC;CAC1B;AAED,eAAO,MAAM,gBAAgB,EAOd,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAwBrC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,eAAO,MAAM,qBAAqB,EAKnB,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;AAQ1C,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC,GACvC,MAAM,CAER;AAOD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAgBvD"}
|
|
@@ -17,6 +17,7 @@ var SubjectKind;
|
|
|
17
17
|
SubjectKind["ExternalSubject"] = "external-subject";
|
|
18
18
|
SubjectKind["Anon"] = "anon";
|
|
19
19
|
SubjectKind["Organization"] = "organization";
|
|
20
|
+
SubjectKind["OrgAdministrators"] = "org-administrators";
|
|
20
21
|
})(SubjectKind || (exports.SubjectKind = SubjectKind = {}));
|
|
21
22
|
exports.SubjectKindSchema = zod_1.z.nativeEnum(SubjectKind);
|
|
22
23
|
exports.ActingForRefSchema = zod_1.z
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"subject.js","sourceRoot":"","sources":["../../../src/subject/lib/subject.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"subject.js","sourceRoot":"","sources":["../../../src/subject/lib/subject.ts"],"names":[],"mappings":";;;AAgMA,gDAIC;AAOD,0CAgBC;AA3ND,6BAAwB;AAmBxB,IAAY,WA4CX;AA5CD,WAAY,WAAW;IACrB,4BAAa,CAAA;IACb,8BAAe,CAAA;IACf,0BAAW,CAAA;IACX,uCAAwB,CAAA;IACxB,kCAAmB,CAAA;IACnB,8BAAe,CAAA;IACf,4BAAa,CAAA;IACb,gCAAiB,CAAA;IACjB,mDAAoC,CAAA;IACpC,4BAAa,CAAA;IAkBb,4CAA6B,CAAA;IAe7B,uDAAwC,CAAA;AAC1C,CAAC,EA5CW,WAAW,2BAAX,WAAW,QA4CtB;AAEY,QAAA,iBAAiB,GAAG,OAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAqD9C,QAAA,kBAAkB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,IAAI,EAAE,yBAAiB;IACvB,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,MAAM,EAA6B,CAAC;AAkB1B,QAAA,gBAAgB,GAAG,OAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,yBAAiB;IACvB,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,SAAS,EAAE,0BAAkB,CAAC,QAAQ,EAAE;CACzC,CAAC;KACD,MAAM,EAA2B,CAAC;AA6BxB,QAAA,qBAAqB,GAAG,OAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC;IAClC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtB,CAAC;KACD,MAAM,EAAgC,CAAC;AAQ1C,SAAgB,kBAAkB,CAChC,OAAwC;IAExC,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;AACzC,CAAC;AAOD,SAAgB,eAAe,CAAC,GAAW;IACzC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,UAAU,IAAI,CAAC,IAAI,UAAU,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,wBAAwB,GAAG,yDAAyD,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,yBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,wBAAwB,GAAG,OAAO,IAAI,+BAA+B,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;AACnC,CAAC"}
|
|
@@ -1,5 +1,4 @@
|
|
|
1
|
-
export declare
|
|
2
|
-
export declare function
|
|
3
|
-
export declare function
|
|
4
|
-
export declare function isPlatformTemporalNamespace(namespace: string): boolean;
|
|
1
|
+
export declare function workflowNamespaceForOrg(deploymentNamespace: string, orgId: string | null): string;
|
|
2
|
+
export declare function isWorkflowNamespaceOwnedBy(deploymentNamespace: string, namespace: string): boolean;
|
|
3
|
+
export declare function orgIdFromWorkflowNamespace(deploymentNamespace: string, namespace: string): string | null;
|
|
5
4
|
//# sourceMappingURL=workflow-namespace.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"workflow-namespace.d.ts","sourceRoot":"","sources":["../../../src/workflow/lib/workflow-namespace.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"workflow-namespace.d.ts","sourceRoot":"","sources":["../../../src/workflow/lib/workflow-namespace.ts"],"names":[],"mappings":"AA0CA,wBAAgB,uBAAuB,CACrC,mBAAmB,EAAE,MAAM,EAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,MAAM,CAYR;AAUD,wBAAgB,0BAA0B,CACxC,mBAAmB,EAAE,MAAM,EAC3B,SAAS,EAAE,MAAM,GAChB,OAAO,CAOT;AAUD,wBAAgB,0BAA0B,CACxC,mBAAmB,EAAE,MAAM,EAC3B,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,IAAI,CAgBf"}
|
|
@@ -1,34 +1,39 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.
|
|
4
|
-
exports.
|
|
5
|
-
exports.
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
const
|
|
9
|
-
function temporalNamespaceForOrg(orgId) {
|
|
3
|
+
exports.workflowNamespaceForOrg = workflowNamespaceForOrg;
|
|
4
|
+
exports.isWorkflowNamespaceOwnedBy = isWorkflowNamespaceOwnedBy;
|
|
5
|
+
exports.orgIdFromWorkflowNamespace = orgIdFromWorkflowNamespace;
|
|
6
|
+
const deployment_1 = require("../../deployment");
|
|
7
|
+
function workflowNamespaceForOrg(deploymentNamespace, orgId) {
|
|
8
|
+
const root = (0, deployment_1.parseDeploymentId)(deploymentNamespace);
|
|
10
9
|
if (orgId === null) {
|
|
11
|
-
return
|
|
10
|
+
return root;
|
|
12
11
|
}
|
|
13
12
|
if (orgId.length === 0) {
|
|
14
|
-
throw new Error('
|
|
13
|
+
throw new Error('workflowNamespaceForOrg called with empty orgId — pass null for ' +
|
|
15
14
|
'system runs, a non-empty orgId for tenant runs.');
|
|
16
15
|
}
|
|
17
|
-
return `${
|
|
16
|
+
return `${root}${deployment_1.DEPLOYMENT_ORG_INFIX}${orgId}`;
|
|
18
17
|
}
|
|
19
|
-
function
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
if (!namespace.startsWith(ORG_NAMESPACE_PREFIX)) {
|
|
24
|
-
throw new Error(`Namespace '${namespace}' does not match the platform namespace ` +
|
|
25
|
-
`'${exports.PLATFORM_TEMPORAL_NAMESPACE}' or the org-namespace prefix ` +
|
|
26
|
-
`'${ORG_NAMESPACE_PREFIX}<orgId>'. The workflow-runtime cluster contains a ` +
|
|
27
|
-
`namespace that this code does not own.`);
|
|
18
|
+
function isWorkflowNamespaceOwnedBy(deploymentNamespace, namespace) {
|
|
19
|
+
const root = (0, deployment_1.parseDeploymentId)(deploymentNamespace);
|
|
20
|
+
if (namespace === root) {
|
|
21
|
+
return true;
|
|
28
22
|
}
|
|
29
|
-
|
|
23
|
+
const prefix = `${root}${deployment_1.DEPLOYMENT_ORG_INFIX}`;
|
|
24
|
+
return namespace.startsWith(prefix) && namespace.length > prefix.length;
|
|
30
25
|
}
|
|
31
|
-
function
|
|
32
|
-
|
|
26
|
+
function orgIdFromWorkflowNamespace(deploymentNamespace, namespace) {
|
|
27
|
+
if (!isWorkflowNamespaceOwnedBy(deploymentNamespace, namespace)) {
|
|
28
|
+
throw new Error(`Namespace '${namespace}' is not owned by the deployment rooted at ` +
|
|
29
|
+
`'${deploymentNamespace}': it is neither that root nor ` +
|
|
30
|
+
`'${deploymentNamespace}${deployment_1.DEPLOYMENT_ORG_INFIX}<orgId>'. It belongs to ` +
|
|
31
|
+
'another deployment sharing the workflow-runtime server, or to state ' +
|
|
32
|
+
'written under a previous namespace scheme.');
|
|
33
|
+
}
|
|
34
|
+
if (namespace === deploymentNamespace) {
|
|
35
|
+
return null;
|
|
36
|
+
}
|
|
37
|
+
return namespace.slice(deploymentNamespace.length + deployment_1.DEPLOYMENT_ORG_INFIX.length);
|
|
33
38
|
}
|
|
34
39
|
//# sourceMappingURL=workflow-namespace.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"workflow-namespace.js","sourceRoot":"","sources":["../../../src/workflow/lib/workflow-namespace.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"workflow-namespace.js","sourceRoot":"","sources":["../../../src/workflow/lib/workflow-namespace.ts"],"names":[],"mappings":";;AA0CA,0DAeC;AAUD,gEAUC;AAUD,gEAmBC;AA7ED,iDAA2E;AAa3E,SAAgB,uBAAuB,CACrC,mBAA2B,EAC3B,KAAoB;IAEpB,MAAM,IAAI,GAAW,IAAA,8BAAiB,EAAC,mBAAmB,CAAC,CAAC;IAC5D,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,kEAAkE;YAChE,iDAAiD,CACpD,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,IAAI,GAAG,iCAAoB,GAAG,KAAK,EAAE,CAAC;AAClD,CAAC;AAUD,SAAgB,0BAA0B,CACxC,mBAA2B,EAC3B,SAAiB;IAEjB,MAAM,IAAI,GAAW,IAAA,8BAAiB,EAAC,mBAAmB,CAAC,CAAC;IAC5D,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,iCAAoB,EAAE,CAAC;IAChD,OAAO,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;AAC1E,CAAC;AAUD,SAAgB,0BAA0B,CACxC,mBAA2B,EAC3B,SAAiB;IAEjB,IAAI,CAAC,0BAA0B,CAAC,mBAAmB,EAAE,SAAS,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,cAAc,SAAS,6CAA6C;YAClE,IAAI,mBAAmB,iCAAiC;YACxD,IAAI,mBAAmB,GAAG,iCAAoB,0BAA0B;YACxE,sEAAsE;YACtE,4CAA4C,CAC/C,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,mBAAmB,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,SAAS,CAAC,KAAK,CACpB,mBAAmB,CAAC,MAAM,GAAG,iCAAoB,CAAC,MAAM,CACzD,CAAC;AACJ,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@xemahq/contracts",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.50.0",
|
|
4
4
|
"description": "Consolidated Xema OS kernel wire contracts — pure types + zod schemas for the kernel protocol surfaces. One package, one npm scope, wildcard per-surface subpath exports. No framework deps; the one runtime dependency beside zod is the OpenFGA syntax transformer the authorization-module composer runs.",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"author": "Neuralchowder Inc. <developer@xema.dev> (https://xema.dev)",
|