@xemahq/contracts 0.49.0 → 0.51.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/.source-stamp.json +2 -2
- package/dist/authorization-module/platform/xema_capability.fga +13 -5
- package/dist/authorization-module/platform/xema_capability.fga.yaml +35 -1
- package/dist/authzen/index.d.ts +1 -0
- package/dist/authzen/index.d.ts.map +1 -1
- package/dist/authzen/index.js +1 -0
- package/dist/authzen/index.js.map +1 -1
- package/dist/authzen/lib/org-authority-contextual-tuple.d.ts +27 -0
- package/dist/authzen/lib/org-authority-contextual-tuple.d.ts.map +1 -0
- package/dist/authzen/lib/org-authority-contextual-tuple.js +54 -0
- package/dist/authzen/lib/org-authority-contextual-tuple.js.map +1 -0
- package/dist/authzen/lib/xema-authzen-profile.d.ts +4 -0
- package/dist/authzen/lib/xema-authzen-profile.d.ts.map +1 -1
- package/dist/authzen/lib/xema-authzen-profile.js +2 -0
- package/dist/authzen/lib/xema-authzen-profile.js.map +1 -1
- package/dist/biome/lib/biome-manifest.d.ts.map +1 -1
- package/dist/biome/lib/biome-manifest.js +54 -1
- package/dist/biome/lib/biome-manifest.js.map +1 -1
- package/dist/capability/lib/capability-contribution.d.ts +0 -3
- package/dist/capability/lib/capability-contribution.d.ts.map +1 -1
- package/dist/capability/lib/capability-contribution.js +0 -3
- package/dist/capability/lib/capability-contribution.js.map +1 -1
- package/dist/capability/lib/capability-human-baseline.d.ts +10 -15
- package/dist/capability/lib/capability-human-baseline.d.ts.map +1 -1
- package/dist/capability/lib/capability-human-baseline.js +48 -77
- package/dist/capability/lib/capability-human-baseline.js.map +1 -1
- package/dist/capability/lib/shell-command-descriptor.d.ts +0 -2
- package/dist/capability/lib/shell-command-descriptor.d.ts.map +1 -1
- package/dist/capability/lib/shell-command-descriptor.js +1 -3
- package/dist/capability/lib/shell-command-descriptor.js.map +1 -1
- package/dist/capability-projection/lib/projected-capability.d.ts +0 -1
- package/dist/capability-projection/lib/projected-capability.d.ts.map +1 -1
- package/dist/execution-context/lib/execution-context.d.ts +1 -0
- package/dist/execution-context/lib/execution-context.d.ts.map +1 -1
- package/dist/execution-context/lib/execution-context.js +1 -0
- package/dist/execution-context/lib/execution-context.js.map +1 -1
- package/dist/subject/lib/delegated-authority.d.ts +10 -1
- package/dist/subject/lib/delegated-authority.d.ts.map +1 -1
- package/dist/subject/lib/delegated-authority.js +29 -2
- package/dist/subject/lib/delegated-authority.js.map +1 -1
- package/dist/subject/lib/subject.d.ts +2 -1
- package/dist/subject/lib/subject.d.ts.map +1 -1
- package/dist/subject/lib/subject.js +1 -0
- package/dist/subject/lib/subject.js.map +1 -1
- package/package.json +1 -1
package/dist/.source-stamp.json
CHANGED
|
@@ -12,12 +12,20 @@ module xema_capability
|
|
|
12
12
|
# `user:*` on `granted_to` is the public-grant idiom: a PLATFORM-owned
|
|
13
13
|
# wildcard, written only by authorization-api's grant door.
|
|
14
14
|
#
|
|
15
|
-
#
|
|
16
|
-
#
|
|
17
|
-
#
|
|
15
|
+
# `org#admin` is the org's ADMINISTRATORS — owner, admin, or a platform admin
|
|
16
|
+
# acting in the org. It is never a stored tuple: the PDP adds it per decision
|
|
17
|
+
# as a CONTEXTUAL tuple from the verified org-authority instrument
|
|
18
|
+
# (`buildOrgAuthorityContextualTuples`, `@xemahq/contracts/authzen`), so a
|
|
19
|
+
# grant to `org:<o>#admin` admits exactly the subjects that instrument names
|
|
20
|
+
# for THIS decision, and nobody once their authority is withdrawn.
|
|
21
|
+
#
|
|
22
|
+
# This module is part of EVERY composition, so a grant tuple is valid under
|
|
23
|
+
# every composed model. The capability verdict must therefore evaluate against
|
|
24
|
+
# the org's composed policy set WITH the contextual tuples; a check that runs
|
|
25
|
+
# without them can never see an administrator grant.
|
|
18
26
|
# ═══════════════════════════════════════════════════════════════════════════
|
|
19
27
|
|
|
20
28
|
type capability
|
|
21
29
|
relations
|
|
22
|
-
define granted_to: [user, user:*, agent, app, service, runner, external-subject, role#assignee, team#member]
|
|
23
|
-
define granted_pending_approval: [user, agent, app, service, runner, external-subject, role#assignee, team#member]
|
|
30
|
+
define granted_to: [user, user:*, agent, app, service, runner, external-subject, role#assignee, team#member, org#admin]
|
|
31
|
+
define granted_pending_approval: [user, agent, app, service, runner, external-subject, role#assignee, team#member, org#admin]
|
|
@@ -2,7 +2,10 @@
|
|
|
2
2
|
# module, run against the BASE composition. Ports the capability-grant
|
|
3
3
|
# semantics authorization-api relies on: direct grants, team grants through
|
|
4
4
|
# nested sub-teams, role grants through team-held assignments, the public
|
|
5
|
-
# `user:*` grant,
|
|
5
|
+
# `user:*` grant, the disjoint approval-gated relation, and grants to the
|
|
6
|
+
# org's administrators (`org#admin`). `org#admin` is never stored: the PDP
|
|
7
|
+
# adds it as a CONTEXTUAL tuple per decision, which these tests model as a
|
|
8
|
+
# test-scoped tuple — present in the allow case, absent in the deny cases.
|
|
6
9
|
name: xema_capability
|
|
7
10
|
model_file: ./fga.mod
|
|
8
11
|
tuples:
|
|
@@ -42,6 +45,10 @@ tuples:
|
|
|
42
45
|
- user: runner:r1
|
|
43
46
|
relation: granted_to
|
|
44
47
|
object: capability:runner~3anoop.echo@1|default
|
|
48
|
+
# grant to the administrators of org o1 (org-scoped capability object)
|
|
49
|
+
- user: org:o1#admin
|
|
50
|
+
relation: granted_to
|
|
51
|
+
object: capability:o1|notification~3aannouncement.publish@1|org
|
|
45
52
|
tests:
|
|
46
53
|
- name: a direct grant admits only its subject
|
|
47
54
|
check:
|
|
@@ -106,3 +113,30 @@ tests:
|
|
|
106
113
|
- capability:kb~3adoc.write@1|default
|
|
107
114
|
- capability:kb~3adoc.publish@1|default
|
|
108
115
|
- capability:catalog~3aread@1|default
|
|
116
|
+
- name: an administrator grant admits a subject only while it holds org-admin authority in THAT org
|
|
117
|
+
tuples:
|
|
118
|
+
# the per-decision contextual tuple the verified instrument produces
|
|
119
|
+
- user: user:carol
|
|
120
|
+
relation: admin
|
|
121
|
+
object: org:o1
|
|
122
|
+
check:
|
|
123
|
+
- user: user:carol
|
|
124
|
+
object: capability:o1|notification~3aannouncement.publish@1|org
|
|
125
|
+
assertions:
|
|
126
|
+
granted_to: true
|
|
127
|
+
- name: an administrator grant denies a subject with no org-authority instrument
|
|
128
|
+
check:
|
|
129
|
+
- user: user:carol
|
|
130
|
+
object: capability:o1|notification~3aannouncement.publish@1|org
|
|
131
|
+
assertions:
|
|
132
|
+
granted_to: false
|
|
133
|
+
- name: an administrator grant denies an administrator of a DIFFERENT org
|
|
134
|
+
tuples:
|
|
135
|
+
- user: user:carol
|
|
136
|
+
relation: admin
|
|
137
|
+
object: org:o2
|
|
138
|
+
check:
|
|
139
|
+
- user: user:carol
|
|
140
|
+
object: capability:o1|notification~3aannouncement.publish@1|org
|
|
141
|
+
assertions:
|
|
142
|
+
granted_to: false
|
package/dist/authzen/index.d.ts
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authzen/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,gCAAgC,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authzen/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sCAAsC,CAAC"}
|
package/dist/authzen/index.js
CHANGED
|
@@ -21,4 +21,5 @@ __exportStar(require("./lib/authzen-metadata"), exports);
|
|
|
21
21
|
__exportStar(require("./lib/xema-authzen-profile"), exports);
|
|
22
22
|
__exportStar(require("./lib/authzen-snapshot"), exports);
|
|
23
23
|
__exportStar(require("./lib/xema-capability-resource"), exports);
|
|
24
|
+
__exportStar(require("./lib/org-authority-contextual-tuple"), exports);
|
|
24
25
|
//# sourceMappingURL=index.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/authzen/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAuC;AACvC,2DAAyC;AACzC,uDAAqC;AACrC,yDAAuC;AACvC,6DAA2C;AAC3C,yDAAuC;AACvC,iEAA+C"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/authzen/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAuC;AACvC,2DAAyC;AACzC,uDAAqC;AACrC,yDAAuC;AACvC,6DAA2C;AAC3C,yDAAuC;AACvC,iEAA+C;AAC/C,uEAAqD"}
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
import type { XemaOrgAuthorityInstrument } from './xema-authzen-profile';
|
|
2
|
+
export declare const XEMA_ORG_OBJECT_TYPE = "org";
|
|
3
|
+
export declare const XEMA_ORG_ADMIN_RELATION = "admin";
|
|
4
|
+
export interface AuthzContextualTuple {
|
|
5
|
+
readonly user: string;
|
|
6
|
+
readonly relation: string;
|
|
7
|
+
readonly object: string;
|
|
8
|
+
}
|
|
9
|
+
export declare enum OrgAuthorityContextualTupleRefusal {
|
|
10
|
+
SubjectNotUser = "subject_not_user",
|
|
11
|
+
RoleBelowAdmin = "role_below_admin"
|
|
12
|
+
}
|
|
13
|
+
export declare class OrgAuthorityContextualTupleError extends Error {
|
|
14
|
+
readonly refusal: OrgAuthorityContextualTupleRefusal;
|
|
15
|
+
constructor(refusal: OrgAuthorityContextualTupleRefusal);
|
|
16
|
+
}
|
|
17
|
+
export declare function buildXemaOrgObject(orgId: string): string;
|
|
18
|
+
export declare function buildOrgAdministratorsUserset(orgId: string): string;
|
|
19
|
+
export declare function buildOrgAuthorityContextualTuples(input: {
|
|
20
|
+
readonly subject: {
|
|
21
|
+
readonly kind: string;
|
|
22
|
+
readonly id: string;
|
|
23
|
+
};
|
|
24
|
+
readonly orgId: string;
|
|
25
|
+
readonly instrument: XemaOrgAuthorityInstrument | undefined;
|
|
26
|
+
}): readonly AuthzContextualTuple[];
|
|
27
|
+
//# sourceMappingURL=org-authority-contextual-tuple.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"org-authority-contextual-tuple.d.ts","sourceRoot":"","sources":["../../../src/authzen/lib/org-authority-contextual-tuple.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AA0BzE,eAAO,MAAM,oBAAoB,QAAQ,CAAC;AAC1C,eAAO,MAAM,uBAAuB,UAAU,CAAC;AAG/C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAGD,oBAAY,kCAAkC;IAE5C,cAAc,qBAAqB;IAEnC,cAAc,qBAAqB;CACpC;AAED,qBAAa,gCAAiC,SAAQ,KAAK;IAC7C,QAAQ,CAAC,OAAO,EAAE,kCAAkC;gBAA3C,OAAO,EAAE,kCAAkC;CAQjE;AAGD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAExD;AAQD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnE;AAOD,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,0BAA0B,GAAG,SAAS,CAAC;CAC7D,GAAG,SAAS,oBAAoB,EAAE,CAuBlC"}
|
|
@@ -0,0 +1,54 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.OrgAuthorityContextualTupleError = exports.OrgAuthorityContextualTupleRefusal = exports.XEMA_ORG_ADMIN_RELATION = exports.XEMA_ORG_OBJECT_TYPE = void 0;
|
|
4
|
+
exports.buildXemaOrgObject = buildXemaOrgObject;
|
|
5
|
+
exports.buildOrgAdministratorsUserset = buildOrgAdministratorsUserset;
|
|
6
|
+
exports.buildOrgAuthorityContextualTuples = buildOrgAuthorityContextualTuples;
|
|
7
|
+
const audit_1 = require("../../audit");
|
|
8
|
+
const subject_1 = require("../../subject");
|
|
9
|
+
const tenant_1 = require("../../tenant");
|
|
10
|
+
const xema_capability_resource_1 = require("./xema-capability-resource");
|
|
11
|
+
exports.XEMA_ORG_OBJECT_TYPE = 'org';
|
|
12
|
+
exports.XEMA_ORG_ADMIN_RELATION = 'admin';
|
|
13
|
+
var OrgAuthorityContextualTupleRefusal;
|
|
14
|
+
(function (OrgAuthorityContextualTupleRefusal) {
|
|
15
|
+
OrgAuthorityContextualTupleRefusal["SubjectNotUser"] = "subject_not_user";
|
|
16
|
+
OrgAuthorityContextualTupleRefusal["RoleBelowAdmin"] = "role_below_admin";
|
|
17
|
+
})(OrgAuthorityContextualTupleRefusal || (exports.OrgAuthorityContextualTupleRefusal = OrgAuthorityContextualTupleRefusal = {}));
|
|
18
|
+
class OrgAuthorityContextualTupleError extends Error {
|
|
19
|
+
refusal;
|
|
20
|
+
constructor(refusal) {
|
|
21
|
+
super(refusal === OrgAuthorityContextualTupleRefusal.SubjectNotUser
|
|
22
|
+
? 'an org-authority instrument is carried only by a user subject.'
|
|
23
|
+
: 'the org-authority instrument states an org role that does not hold org-admin authority.');
|
|
24
|
+
this.refusal = refusal;
|
|
25
|
+
this.name = 'OrgAuthorityContextualTupleError';
|
|
26
|
+
}
|
|
27
|
+
}
|
|
28
|
+
exports.OrgAuthorityContextualTupleError = OrgAuthorityContextualTupleError;
|
|
29
|
+
function buildXemaOrgObject(orgId) {
|
|
30
|
+
return `${exports.XEMA_ORG_OBJECT_TYPE}:${(0, xema_capability_resource_1.encodeXemaIdSegment)(orgId)}`;
|
|
31
|
+
}
|
|
32
|
+
function buildOrgAdministratorsUserset(orgId) {
|
|
33
|
+
return `${buildXemaOrgObject(orgId)}#${exports.XEMA_ORG_ADMIN_RELATION}`;
|
|
34
|
+
}
|
|
35
|
+
function buildOrgAuthorityContextualTuples(input) {
|
|
36
|
+
const { subject, orgId, instrument } = input;
|
|
37
|
+
if (instrument === undefined)
|
|
38
|
+
return [];
|
|
39
|
+
if (subject.kind !== subject_1.SubjectKind.User) {
|
|
40
|
+
throw new OrgAuthorityContextualTupleError(OrgAuthorityContextualTupleRefusal.SubjectNotUser);
|
|
41
|
+
}
|
|
42
|
+
if (instrument.kind === audit_1.AuditAuthorityKind.OrgRole &&
|
|
43
|
+
!(0, tenant_1.orgRoleSatisfies)(instrument.orgRole, tenant_1.OrgRole.Admin)) {
|
|
44
|
+
throw new OrgAuthorityContextualTupleError(OrgAuthorityContextualTupleRefusal.RoleBelowAdmin);
|
|
45
|
+
}
|
|
46
|
+
return [
|
|
47
|
+
{
|
|
48
|
+
user: (0, subject_1.subjectRefToString)({ kind: subject_1.SubjectKind.User, id: subject.id }),
|
|
49
|
+
relation: exports.XEMA_ORG_ADMIN_RELATION,
|
|
50
|
+
object: buildXemaOrgObject(orgId),
|
|
51
|
+
},
|
|
52
|
+
];
|
|
53
|
+
}
|
|
54
|
+
//# sourceMappingURL=org-authority-contextual-tuple.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"org-authority-contextual-tuple.js","sourceRoot":"","sources":["../../../src/authzen/lib/org-authority-contextual-tuple.ts"],"names":[],"mappings":";;;AA6DA,gDAEC;AAQD,sEAEC;AAOD,8EA2BC;AA3GD,uCAAiD;AACjD,2CAAgE;AAChE,yCAAyD;AAEzD,yEAAiE;AA2BpD,QAAA,oBAAoB,GAAG,KAAK,CAAC;AAC7B,QAAA,uBAAuB,GAAG,OAAO,CAAC;AAU/C,IAAY,kCAKX;AALD,WAAY,kCAAkC;IAE5C,yEAAmC,CAAA;IAEnC,yEAAmC,CAAA;AACrC,CAAC,EALW,kCAAkC,kDAAlC,kCAAkC,QAK7C;AAED,MAAa,gCAAiC,SAAQ,KAAK;IACpC;IAArB,YAAqB,OAA2C;QAC9D,KAAK,CACH,OAAO,KAAK,kCAAkC,CAAC,cAAc;YAC3D,CAAC,CAAC,gEAAgE;YAClE,CAAC,CAAC,yFAAyF,CAC9F,CAAC;QALiB,YAAO,GAAP,OAAO,CAAoC;QAM9D,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF;AATD,4EASC;AAGD,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,OAAO,GAAG,4BAAoB,IAAI,IAAA,8CAAmB,EAAC,KAAK,CAAC,EAAE,CAAC;AACjE,CAAC;AAQD,SAAgB,6BAA6B,CAAC,KAAa;IACzD,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,+BAAuB,EAAE,CAAC;AACnE,CAAC;AAOD,SAAgB,iCAAiC,CAAC,KAIjD;IACC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC7C,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACxC,IAAI,OAAO,CAAC,IAAI,KAAK,qBAAW,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,gCAAgC,CACxC,kCAAkC,CAAC,cAAc,CAClD,CAAC;IACJ,CAAC;IACD,IACE,UAAU,CAAC,IAAI,KAAK,0BAAkB,CAAC,OAAO;QAC9C,CAAC,IAAA,yBAAgB,EAAC,UAAU,CAAC,OAAO,EAAE,gBAAO,CAAC,KAAK,CAAC,EACpD,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,kCAAkC,CAAC,cAAc,CAClD,CAAC;IACJ,CAAC;IACD,OAAO;QACL;YACE,IAAI,EAAE,IAAA,4BAAkB,EAAC,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;YACpE,QAAQ,EAAE,+BAAuB;YACjC,MAAM,EAAE,kBAAkB,CAAC,KAAK,CAAC;SAClC;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -87,6 +87,7 @@ export declare const XemaAuthzenInvocationSchema: z.ZodObject<{
|
|
|
87
87
|
aperture: z.ZodOptional<z.ZodType<import("../../capability").CapabilityAperture, unknown, z.core.$ZodTypeInternals<import("../../capability").CapabilityAperture, unknown>>>;
|
|
88
88
|
constraints: z.ZodOptional<z.ZodType<import("../../execution-context").ExecutionContextConstraints, unknown, z.core.$ZodTypeInternals<import("../../execution-context").ExecutionContextConstraints, unknown>>>;
|
|
89
89
|
resourceClassification: z.ZodOptional<z.ZodEnum<typeof import("../../space").DataClassification>>;
|
|
90
|
+
operationInstance: z.ZodOptional<z.ZodString>;
|
|
90
91
|
}, z.core.$strict>;
|
|
91
92
|
export type XemaAuthzenInvocation = z.infer<typeof XemaAuthzenInvocationSchema>;
|
|
92
93
|
export declare const XemaAuthzenInstanceSchema: z.ZodObject<{
|
|
@@ -111,6 +112,7 @@ export declare const XemaAuthzenContextSchema: z.ZodObject<{
|
|
|
111
112
|
aperture: z.ZodOptional<z.ZodType<import("../../capability").CapabilityAperture, unknown, z.core.$ZodTypeInternals<import("../../capability").CapabilityAperture, unknown>>>;
|
|
112
113
|
constraints: z.ZodOptional<z.ZodType<import("../../execution-context").ExecutionContextConstraints, unknown, z.core.$ZodTypeInternals<import("../../execution-context").ExecutionContextConstraints, unknown>>>;
|
|
113
114
|
resourceClassification: z.ZodOptional<z.ZodEnum<typeof import("../../space").DataClassification>>;
|
|
115
|
+
operationInstance: z.ZodOptional<z.ZodString>;
|
|
114
116
|
}, z.core.$strict>>;
|
|
115
117
|
snapshot: z.ZodOptional<z.ZodString>;
|
|
116
118
|
}, z.core.$strict>;
|
|
@@ -160,6 +162,7 @@ export declare const XemaAccessEvaluationRequestSchema: z.ZodObject<{
|
|
|
160
162
|
aperture: z.ZodOptional<z.ZodType<import("../../capability").CapabilityAperture, unknown, z.core.$ZodTypeInternals<import("../../capability").CapabilityAperture, unknown>>>;
|
|
161
163
|
constraints: z.ZodOptional<z.ZodType<import("../../execution-context").ExecutionContextConstraints, unknown, z.core.$ZodTypeInternals<import("../../execution-context").ExecutionContextConstraints, unknown>>>;
|
|
162
164
|
resourceClassification: z.ZodOptional<z.ZodEnum<typeof import("../../space").DataClassification>>;
|
|
165
|
+
operationInstance: z.ZodOptional<z.ZodString>;
|
|
163
166
|
}, z.core.$strict>>;
|
|
164
167
|
snapshot: z.ZodOptional<z.ZodString>;
|
|
165
168
|
}, z.core.$strict>;
|
|
@@ -172,6 +175,7 @@ export declare enum XemaAuthzenReasonCode {
|
|
|
172
175
|
DelegationRequired = "delegation_required",
|
|
173
176
|
CapabilityNotDelegated = "capability_not_delegated",
|
|
174
177
|
ResourceOutsideDelegatedScope = "resource_outside_delegated_scope",
|
|
178
|
+
OperationInstanceMismatch = "operation_instance_mismatch",
|
|
175
179
|
CeilingRefused = "ceiling_refused",
|
|
176
180
|
NamespaceWithdrawn = "namespace_withdrawn",
|
|
177
181
|
SubjectNotEvaluable = "subject_not_evaluable"
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"xema-authzen-profile.d.ts","sourceRoot":"","sources":["../../../src/authzen/lib/xema-authzen-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAQjD,OAAO,EAGL,WAAW,EACZ,MAAM,eAAe,CAAC;AA6BvB,eAAO,MAAM,0BAA0B,mHAS5B,CAAC;AAEZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjF,eAAO,MAAM,4BAA4B;;;;;;EAAqC,CAAC;AAc/E,eAAO,MAAM,gCAAgC;;;;;4BAQ3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AAQF,eAAO,MAAM,kCAAkC;;;;;;;kBAIpC,CAAC;AACZ,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,kCAAkC,CAC1C,CAAC;AAGF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;kBAM1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAY1E,eAAO,MAAM,oCAAoC,qCAEtC,CAAC;AAGZ,eAAO,MAAM,iCAAiC;;;;;kBAKnC,CAAC;AACZ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,iCAAiC,CACzC,CAAC;AASF,eAAO,MAAM,sBAAsB,QAAQ,CAAC;AAO5C,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAG/C,eAAO,MAAM,iCAAiC,QAAe,CAAC;AAE9D,eAAO,MAAM,6BAA6B,aAKtC,CAAC;AAGL,qBAAa,4BAA6B,SAAQ,KAAK;gBACzC,OAAO,EAAE,MAAM;CAI5B;AAGD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAYxE;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAGD,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,MAAM,GAAG,uBAAuB,CAQ5E;AAiBD,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACxD,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,OAAO,CAgBT;AAGD,eAAO,MAAM,yBAAyB;;;;kBAAwB,CAAC;AAM/D,eAAO,MAAM,uBAAuB;;;kBAIlC,CAAC;
|
|
1
|
+
{"version":3,"file":"xema-authzen-profile.d.ts","sourceRoot":"","sources":["../../../src/authzen/lib/xema-authzen-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAQjD,OAAO,EAGL,WAAW,EACZ,MAAM,eAAe,CAAC;AA6BvB,eAAO,MAAM,0BAA0B,mHAS5B,CAAC;AAEZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjF,eAAO,MAAM,4BAA4B;;;;;;EAAqC,CAAC;AAc/E,eAAO,MAAM,gCAAgC;;;;;4BAQ3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AAQF,eAAO,MAAM,kCAAkC;;;;;;;kBAIpC,CAAC;AACZ,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,kCAAkC,CAC1C,CAAC;AAGF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;kBAM1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAY1E,eAAO,MAAM,oCAAoC,qCAEtC,CAAC;AAGZ,eAAO,MAAM,iCAAiC;;;;;kBAKnC,CAAC;AACZ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,iCAAiC,CACzC,CAAC;AASF,eAAO,MAAM,sBAAsB,QAAQ,CAAC;AAO5C,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAG/C,eAAO,MAAM,iCAAiC,QAAe,CAAC;AAE9D,eAAO,MAAM,6BAA6B,aAKtC,CAAC;AAGL,qBAAa,4BAA6B,SAAQ,KAAK;gBACzC,OAAO,EAAE,MAAM;CAI5B;AAGD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAYxE;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAGD,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,MAAM,GAAG,uBAAuB,CAQ5E;AAiBD,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACxD,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,OAAO,CAgBT;AAGD,eAAO,MAAM,yBAAyB;;;;kBAAwB,CAAC;AAM/D,eAAO,MAAM,uBAAuB;;;kBAIlC,CAAC;AA6BH,eAAO,MAAM,2BAA2B;;;;;;;;;kBAW7B,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAahF,eAAO,MAAM,yBAAyB;;;kBAK3B,CAAC;AACZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AA2B5E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;kBAU1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAG1E,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAOnC,CAAC;AACZ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,iCAAiC,CACzC,CAAC;AAWF,oBAAY,qBAAqB;IAE/B,cAAc,oBAAoB;IAElC,eAAe,sBAAsB;IAErC,oBAAoB,2BAA2B;IAE/C,kBAAkB,wBAAwB;IAE1C,sBAAsB,6BAA6B;IAEnD,6BAA6B,qCAAqC;IAElE,yBAAyB,gCAAgC;IAEzD,cAAc,oBAAoB;IAElC,kBAAkB,wBAAwB;IAQ1C,mBAAmB,0BAA0B;CAC9C;AAED,eAAO,MAAM,2BAA2B,yCAAsC,CAAC;AAO/E,oBAAY,oBAAoB;IAE9B,YAAY,mBAAmB;IAE/B,eAAe,qBAAqB;IAEpC,oBAAoB,0BAA0B;IAE9C,WAAW,iBAAiB;IAE5B,aAAa,mBAAmB;IAEhC,gBAAgB,sBAAsB;CACvC;AAED,eAAO,MAAM,0BAA0B,wCAAqC,CAAC;AAG7E,eAAO,MAAM,0BAA0B;;;;kBAM5B,CAAC;AAOZ,eAAO,MAAM,gCAAgC;;;;;;;;iBAI3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AAOF,eAAO,MAAM,0BAA0B;;;0DAKR,CAAC"}
|
|
@@ -117,6 +117,7 @@ exports.XemaAuthzenInvocationSchema = zod_1.z
|
|
|
117
117
|
aperture: capability_1.CapabilityApertureSchema.optional(),
|
|
118
118
|
constraints: execution_context_1.ExecutionContextConstraintsSchema.optional(),
|
|
119
119
|
resourceClassification: space_1.DataClassificationSchema.optional(),
|
|
120
|
+
operationInstance: zod_1.z.string().min(1).optional(),
|
|
120
121
|
})
|
|
121
122
|
.strict();
|
|
122
123
|
exports.XemaAuthzenInstanceSchema = zod_1.z
|
|
@@ -152,6 +153,7 @@ var XemaAuthzenReasonCode;
|
|
|
152
153
|
XemaAuthzenReasonCode["DelegationRequired"] = "delegation_required";
|
|
153
154
|
XemaAuthzenReasonCode["CapabilityNotDelegated"] = "capability_not_delegated";
|
|
154
155
|
XemaAuthzenReasonCode["ResourceOutsideDelegatedScope"] = "resource_outside_delegated_scope";
|
|
156
|
+
XemaAuthzenReasonCode["OperationInstanceMismatch"] = "operation_instance_mismatch";
|
|
155
157
|
XemaAuthzenReasonCode["CeilingRefused"] = "ceiling_refused";
|
|
156
158
|
XemaAuthzenReasonCode["NamespaceWithdrawn"] = "namespace_withdrawn";
|
|
157
159
|
XemaAuthzenReasonCode["SubjectNotEvaluable"] = "subject_not_evaluable";
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"xema-authzen-profile.js","sourceRoot":"","sources":["../../../src/authzen/lib/xema-authzen-profile.ts"],"names":[],"mappings":";;;AA6KA,8CAYC;AAQD,4DAQC;AAiBD,oDAmBC;AA7OD,6BAAwB;AAExB,yEAGoC;AAEpC,uCAAiD;AACjD,iDAA4D;AAC5D,+DAIiC;AACjC,uCAAuD;AACvD,2CAIuB;AACvB,yCAA6C;AAE7C,yDAI4B;AAC5B,yDAAkE;AAqBrD,QAAA,0BAA0B,GAAG,MAAM,CAAC,MAAM,CAAC;IACtD,qBAAW,CAAC,IAAI;IAChB,qBAAW,CAAC,KAAK;IACjB,qBAAW,CAAC,OAAO;IAInB,qBAAW,CAAC,GAAG;IACf,qBAAW,CAAC,eAAe;CACnB,CAAC,CAAC;AAIC,QAAA,4BAA4B,GAAG,OAAC,CAAC,IAAI,CAAC,kCAA0B,CAAC,CAAC;AAclE,QAAA,gCAAgC,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3E,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,0BAAkB,CAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,sBAAa;KACvB,CAAC;SACD,MAAM,EAAE;IACX,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,0BAAkB,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;CACzE,CAAC,CAAC;AAWU,QAAA,kCAAkC,GAAG,OAAC;KAChD,MAAM,CAAC;IACN,YAAY,EAAE,wCAAgC,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AAMC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,IAAI,EAAE,oCAA4B;IAClC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,UAAU,EAAE,0CAAkC,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AAaC,QAAA,oCAAoC,GAAG,MAAM,CAAC,MAAM,CAAC;IAChE,qBAAW,CAAC,YAAY;CAChB,CAAC,CAAC;AAGC,QAAA,iCAAiC,GAAG,OAAC;KAC/C,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,4CAAoC,CAAC;IAClD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtB,CAAC;KACD,MAAM,EAAE,CAAC;AAYC,QAAA,sBAAsB,GAAG,KAAK,CAAC;AAO/B,QAAA,2BAA2B,GAAG,GAAG,CAAC;AAGlC,QAAA,iCAAiC,GAAG,YAAY,CAAC;AAEjD,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,EAAE;KACR,KAAK,CAAC,sBAAsB,EAAE;IAC7B,OAAO,EACL,8GAA8G;CACjH,CAAC,CAAC;AAGL,MAAa,4BAA6B,SAAQ,KAAK;IACrD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AALD,oEAKC;AAGD,SAAgB,iBAAiB,CAAC,KAAa,EAAE,OAAe;IAC9D,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI;QAC5B,CAAC,OAAO,EAAE,KAAK,CAAC;QAChB,CAAC,SAAS,EAAE,OAAO,CAAC;KACZ,EAAE,CAAC;QACX,IAAI,CAAC,yCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,4BAA4B,CACpC,sBAAsB,IAAI,KAAK,OAAO,oDAAoD,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,KAAK,GAAG,mCAA2B,GAAG,OAAO,EAAE,CAAC;AAC5D,CAAC;AAQD,SAAgB,wBAAwB,CAAC,EAAU;IACjD,IAAI,CAAC,qCAA6B,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACzD,MAAM,IAAI,4BAA4B,CACpC,8BAA8B,EAAE,iCAAiC,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,mCAA2B,CAAC,CAAC;IACtD,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;AACrE,CAAC;AAiBD,SAAgB,oBAAoB,CAClC,QAAwD,EACxD,KAAoB;IAEpB,IAAI,QAAQ,CAAC,IAAI,KAAK,wDAA6B,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,IAAA,oDAAyB,EAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtD,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,8BAAsB,EAAE,CAAC;QAC7C,OAAO,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC;IAC/B,CAAC;IACD,MAAM,MAAM,GAAG,qCAA6B,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC;AAC/D,CAAC;AAGY,QAAA,yBAAyB,GAAG,wCAAqB,CAAC;AAMlD,QAAA,uBAAuB,GAAG,sCAAmB,CAAC,MAAM,CAAC;IAChE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE;QAC1C,OAAO,EAAE,iDAAiD;KAC3D,CAAC;CACH,CAAC,CAAC;
|
|
1
|
+
{"version":3,"file":"xema-authzen-profile.js","sourceRoot":"","sources":["../../../src/authzen/lib/xema-authzen-profile.ts"],"names":[],"mappings":";;;AA6KA,8CAYC;AAQD,4DAQC;AAiBD,oDAmBC;AA7OD,6BAAwB;AAExB,yEAGoC;AAEpC,uCAAiD;AACjD,iDAA4D;AAC5D,+DAIiC;AACjC,uCAAuD;AACvD,2CAIuB;AACvB,yCAA6C;AAE7C,yDAI4B;AAC5B,yDAAkE;AAqBrD,QAAA,0BAA0B,GAAG,MAAM,CAAC,MAAM,CAAC;IACtD,qBAAW,CAAC,IAAI;IAChB,qBAAW,CAAC,KAAK;IACjB,qBAAW,CAAC,OAAO;IAInB,qBAAW,CAAC,GAAG;IACf,qBAAW,CAAC,eAAe;CACnB,CAAC,CAAC;AAIC,QAAA,4BAA4B,GAAG,OAAC,CAAC,IAAI,CAAC,kCAA0B,CAAC,CAAC;AAclE,QAAA,gCAAgC,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3E,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,0BAAkB,CAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,sBAAa;KACvB,CAAC;SACD,MAAM,EAAE;IACX,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,0BAAkB,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;CACzE,CAAC,CAAC;AAWU,QAAA,kCAAkC,GAAG,OAAC;KAChD,MAAM,CAAC;IACN,YAAY,EAAE,wCAAgC,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AAMC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,IAAI,EAAE,oCAA4B;IAClC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,UAAU,EAAE,0CAAkC,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AAaC,QAAA,oCAAoC,GAAG,MAAM,CAAC,MAAM,CAAC;IAChE,qBAAW,CAAC,YAAY;CAChB,CAAC,CAAC;AAGC,QAAA,iCAAiC,GAAG,OAAC;KAC/C,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,4CAAoC,CAAC;IAClD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtB,CAAC;KACD,MAAM,EAAE,CAAC;AAYC,QAAA,sBAAsB,GAAG,KAAK,CAAC;AAO/B,QAAA,2BAA2B,GAAG,GAAG,CAAC;AAGlC,QAAA,iCAAiC,GAAG,YAAY,CAAC;AAEjD,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,EAAE;KACR,KAAK,CAAC,sBAAsB,EAAE;IAC7B,OAAO,EACL,8GAA8G;CACjH,CAAC,CAAC;AAGL,MAAa,4BAA6B,SAAQ,KAAK;IACrD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AALD,oEAKC;AAGD,SAAgB,iBAAiB,CAAC,KAAa,EAAE,OAAe;IAC9D,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI;QAC5B,CAAC,OAAO,EAAE,KAAK,CAAC;QAChB,CAAC,SAAS,EAAE,OAAO,CAAC;KACZ,EAAE,CAAC;QACX,IAAI,CAAC,yCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,4BAA4B,CACpC,sBAAsB,IAAI,KAAK,OAAO,oDAAoD,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,KAAK,GAAG,mCAA2B,GAAG,OAAO,EAAE,CAAC;AAC5D,CAAC;AAQD,SAAgB,wBAAwB,CAAC,EAAU;IACjD,IAAI,CAAC,qCAA6B,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACzD,MAAM,IAAI,4BAA4B,CACpC,8BAA8B,EAAE,iCAAiC,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,mCAA2B,CAAC,CAAC;IACtD,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;AACrE,CAAC;AAiBD,SAAgB,oBAAoB,CAClC,QAAwD,EACxD,KAAoB;IAEpB,IAAI,QAAQ,CAAC,IAAI,KAAK,wDAA6B,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,IAAA,oDAAyB,EAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtD,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,8BAAsB,EAAE,CAAC;QAC7C,OAAO,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC;IAC/B,CAAC;IACD,MAAM,MAAM,GAAG,qCAA6B,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC;AAC/D,CAAC;AAGY,QAAA,yBAAyB,GAAG,wCAAqB,CAAC;AAMlD,QAAA,uBAAuB,GAAG,sCAAmB,CAAC,MAAM,CAAC;IAChE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE;QAC1C,OAAO,EAAE,iDAAiD;KAC3D,CAAC;CACH,CAAC,CAAC;AA6BU,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,MAAM,EAAE,gCAAY,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,+CAA2B,CAAC,QAAQ,EAAE;IAC7C,WAAW,EAAE,+BAAqB,CAAC,QAAQ,EAAE;IAC7C,QAAQ,EAAE,qCAAwB,CAAC,QAAQ,EAAE;IAC7C,WAAW,EAAE,qDAAiC,CAAC,QAAQ,EAAE;IACzD,sBAAsB,EAAE,gCAAwB,CAAC,QAAQ,EAAE;IAC3D,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAChD,CAAC;KACD,MAAM,EAAE,CAAC;AAcC,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtB,CAAC;KACD,MAAM,EAAE,CAAC;AA4BC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,UAAU,EAAE,kCAAwB,CAAC,QAAQ,EAAE;IAC/C,QAAQ,EAAE,iCAAyB,CAAC,QAAQ,EAAE;IAC9C,UAAU,EAAE,mCAA2B,CAAC,QAAQ,EAAE;IAClD,QAAQ,EAAE,+CAA4B,CAAC,QAAQ,EAAE;CAClD,CAAC;KACD,MAAM,EAAE,CAAC;AAIC,QAAA,iCAAiC,GAAG,OAAC;KAC/C,MAAM,CAAC;IACN,OAAO,EAAE,gCAAwB;IACjC,MAAM,EAAE,+BAAuB;IAC/B,QAAQ,EAAE,iCAAyB;IACnC,OAAO,EAAE,gCAAwB;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAcZ,IAAY,qBA2BX;AA3BD,WAAY,qBAAqB;IAE/B,2DAAkC,CAAA;IAElC,8DAAqC,CAAA;IAErC,wEAA+C,CAAA;IAE/C,mEAA0C,CAAA;IAE1C,4EAAmD,CAAA;IAEnD,2FAAkE,CAAA;IAElE,kFAAyD,CAAA;IAEzD,2DAAkC,CAAA;IAElC,mEAA0C,CAAA;IAQ1C,sEAA6C,CAAA;AAC/C,CAAC,EA3BW,qBAAqB,qCAArB,qBAAqB,QA2BhC;AAEY,QAAA,2BAA2B,GAAG,OAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;AAO/E,IAAY,oBAaX;AAbD,WAAY,oBAAoB;IAE9B,uDAA+B,CAAA;IAE/B,4DAAoC,CAAA;IAEpC,sEAA8C,CAAA;IAE9C,oDAA4B,CAAA;IAE5B,wDAAgC,CAAA;IAEhC,8DAAsC,CAAA;AACxC,CAAC,EAbW,oBAAoB,oCAApB,oBAAoB,QAa/B;AAEY,QAAA,0BAA0B,GAAG,OAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;AAGhE,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC;IACN,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,kCAA0B;CACjC,CAAC;KACD,MAAM,EAAE,CAAC;AAOC,QAAA,gCAAgC,GAAG,OAAC,CAAC,MAAM,CAAC;IACvD,WAAW,EAAE,mCAA2B,CAAC,QAAQ,EAAE;IACnD,KAAK,EAAE,kCAA0B,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,+CAA4B,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAUU,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC;IACN,IAAI,EAAE,kCAA0B;IAChC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC;KACD,GAAG,CAAC,0CAAuB,CAAC,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"biome-manifest.d.ts","sourceRoot":"","sources":["../../../src/biome/lib/biome-manifest.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,aAAa,EAGd,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,aAAa,EAA4B,MAAM,kBAAkB,CAAC;AAE3E,OAAO,EAAE,SAAS,EAAuC,MAAM,cAAc,CAAC;AAG9E,OAAO,EAGL,kBAAkB,EACnB,MAAM,8BAA8B,CAAC;AAoBtC,eAAO,MAAM,uBAAuB,oBAAoB,CAAC;AAoDzD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;EAkBlB,CAAC;AAoBZ,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,gBAAgB,CAAC;AAmBxD,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAErE;AAeD,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,WAAW,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAcR;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAgB1D;AAaD,eAAO,MAAM,4BAA4B;;;;kBAkB9B,CAAC;AACZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAC1C,OAAO,4BAA4B,CACpC,CAAC;AAOF,eAAO,MAAM,wBAAwB;;;;;;kBAK1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AA4B1E,eAAO,MAAM,0BAA0B;;;;;kBAO5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAU9E,eAAO,MAAM,mCAAmC;;EAA8B,CAAC;AAC/E,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CACjD,OAAO,mCAAmC,CAC3C,CAAC;AAaF,eAAO,MAAM,qCAAqC;;;;;;;;;;;kBAwBvC,CAAC;AACZ,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CACnD,OAAO,qCAAqC,CAC7C,CAAC;AAiKF,QAAA,MAAM,kBAAkB;;;;;kBAOb,CAAC;AAEZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAgB9D,oBAAY,qBAAqB;IAC/B,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,GAAG,QAAQ;CACZ;AAED,eAAO,MAAM,2BAA2B,yCAAsC,CAAC;AAyF/E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;4BAItC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAsBhF,QAAA,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAuGvB,CAAC;AAEL,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAwDpB,CAAC;AAEL,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8BAG1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;
|
|
1
|
+
{"version":3,"file":"biome-manifest.d.ts","sourceRoot":"","sources":["../../../src/biome/lib/biome-manifest.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,aAAa,EAGd,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,aAAa,EAA4B,MAAM,kBAAkB,CAAC;AAE3E,OAAO,EAAE,SAAS,EAAuC,MAAM,cAAc,CAAC;AAG9E,OAAO,EAGL,kBAAkB,EACnB,MAAM,8BAA8B,CAAC;AAoBtC,eAAO,MAAM,uBAAuB,oBAAoB,CAAC;AAoDzD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;EAkBlB,CAAC;AAoBZ,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,gBAAgB,CAAC;AAmBxD,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAErE;AAeD,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,WAAW,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAcR;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAgB1D;AAaD,eAAO,MAAM,4BAA4B;;;;kBAkB9B,CAAC;AACZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAC1C,OAAO,4BAA4B,CACpC,CAAC;AAOF,eAAO,MAAM,wBAAwB;;;;;;kBAK1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AA4B1E,eAAO,MAAM,0BAA0B;;;;;kBAO5B,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAU9E,eAAO,MAAM,mCAAmC;;EAA8B,CAAC;AAC/E,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CACjD,OAAO,mCAAmC,CAC3C,CAAC;AAaF,eAAO,MAAM,qCAAqC;;;;;;;;;;;kBAwBvC,CAAC;AACZ,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CACnD,OAAO,qCAAqC,CAC7C,CAAC;AAiKF,QAAA,MAAM,kBAAkB;;;;;kBAOb,CAAC;AAEZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAgB9D,oBAAY,qBAAqB;IAC/B,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,GAAG,QAAQ;CACZ;AAED,eAAO,MAAM,2BAA2B,yCAAsC,CAAC;AAyF/E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;4BAItC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAsBhF,QAAA,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAuGvB,CAAC;AAEL,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAwDpB,CAAC;AAEL,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8BAG1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AA+B9D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuE5B,CAAC;AAEL,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC;AAC5E,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC;AAEtE,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACjC,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE;CAuBhD;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa,CAM9D;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,aAAa,GACtB,QAAQ,IAAI,mBAAmB,CAEjC;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,aAAa,GACtB,QAAQ,IAAI,gBAAgB,CAE9B;AASD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAKhE;AAOD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,aAAa,CAEvE;AA6CD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAQnE;AAsBD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,aAAa,GACtB,aAAa,GAAG,SAAS,CAG3B;AAOD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,aAAa,GAAG,SAAS,CAE/D;AAQD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAEjE"}
|
|
@@ -268,13 +268,66 @@ const ManifestNameSchema = zod_1.z
|
|
|
268
268
|
.string()
|
|
269
269
|
.min(1)
|
|
270
270
|
.regex(/^@[^/]+\/[^/]+$/, 'biome package name must be scoped');
|
|
271
|
+
function ociReferencePin(ociRef) {
|
|
272
|
+
if (ociRef.includes('@')) {
|
|
273
|
+
return { kind: 'digest' };
|
|
274
|
+
}
|
|
275
|
+
const lastSlash = ociRef.lastIndexOf('/');
|
|
276
|
+
const lastColon = ociRef.lastIndexOf(':');
|
|
277
|
+
if (lastColon > lastSlash && lastColon < ociRef.length - 1) {
|
|
278
|
+
return { kind: 'tag', tag: ociRef.slice(lastColon + 1) };
|
|
279
|
+
}
|
|
280
|
+
return { kind: 'none' };
|
|
281
|
+
}
|
|
271
282
|
exports.BiomeManifestSchema = zod_1.z
|
|
272
283
|
.object({
|
|
273
284
|
name: ManifestNameSchema,
|
|
274
285
|
version: zod_1.z.string().min(1),
|
|
275
286
|
xema: exports.BiomeXemaSchema,
|
|
276
287
|
})
|
|
277
|
-
.passthrough()
|
|
288
|
+
.passthrough()
|
|
289
|
+
.superRefine((manifest, ctx) => {
|
|
290
|
+
const source = manifest.xema.bundleSource;
|
|
291
|
+
if (source?.kind === BiomeBundleSourceKind.Npm) {
|
|
292
|
+
if (source.name !== manifest.name) {
|
|
293
|
+
ctx.addIssue({
|
|
294
|
+
code: 'custom',
|
|
295
|
+
path: ['xema', 'bundleSource', 'name'],
|
|
296
|
+
message: `bundleSource.name "${source.name}" differs from the manifest name "${manifest.name}"; the npm package is this biome's own bundle, so they must be equal`,
|
|
297
|
+
});
|
|
298
|
+
}
|
|
299
|
+
if (source.version !== manifest.version) {
|
|
300
|
+
ctx.addIssue({
|
|
301
|
+
code: 'custom',
|
|
302
|
+
path: ['xema', 'bundleSource', 'version'],
|
|
303
|
+
message: `bundleSource.version "${source.version}" (npm package "${source.name}") differs from the manifest version "${manifest.version}"; they must be equal`,
|
|
304
|
+
});
|
|
305
|
+
}
|
|
306
|
+
return;
|
|
307
|
+
}
|
|
308
|
+
if (source?.kind !== BiomeBundleSourceKind.Oci) {
|
|
309
|
+
return;
|
|
310
|
+
}
|
|
311
|
+
const pin = ociReferencePin(source.ociRef);
|
|
312
|
+
if (pin.kind === 'digest') {
|
|
313
|
+
return;
|
|
314
|
+
}
|
|
315
|
+
if (pin.kind === 'none') {
|
|
316
|
+
ctx.addIssue({
|
|
317
|
+
code: 'custom',
|
|
318
|
+
path: ['xema', 'bundleSource', 'ociRef'],
|
|
319
|
+
message: `bundleSource.ociRef "${source.ociRef}" names neither a tag nor a digest; pin it to the manifest version ("${manifest.version}") or to an @sha256 digest`,
|
|
320
|
+
});
|
|
321
|
+
return;
|
|
322
|
+
}
|
|
323
|
+
if (pin.tag !== manifest.version) {
|
|
324
|
+
ctx.addIssue({
|
|
325
|
+
code: 'custom',
|
|
326
|
+
path: ['xema', 'bundleSource', 'ociRef'],
|
|
327
|
+
message: `bundleSource.ociRef "${source.ociRef}" carries tag "${pin.tag}" but the manifest version is "${manifest.version}"; the tag must equal the version`,
|
|
328
|
+
});
|
|
329
|
+
}
|
|
330
|
+
});
|
|
278
331
|
class BiomeManifestParseError extends Error {
|
|
279
332
|
issues;
|
|
280
333
|
constructor(issues) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"biome-manifest.js","sourceRoot":"","sources":["../../../src/biome/lib/biome-manifest.ts"],"names":[],"mappings":";;;AAwJA,gEAEC;AAeD,sDAiBC;AAED,4CAgBC;AAmpBD,gDAMC;AAED,sDAIC;AAED,gDAIC;AASD,0CAKC;AAOD,4CAEC;AA6CD,gDAQC;AAsBD,4CAKC;AAOD,oCAEC;AAQD,4CAEC;AA3+BD,+CAA0D;AAC1D,qDAA+D;AAC/D,iDAA+E;AAC/E,qDAI4B;AAC5B,6BAAwB;AACxB,qDAI0B;AAC1B,qDAA2E;AAC3E,iDAAmD;AACnD,6CAA8E;AAC9E,6CAAyC;AACzC,uDAA0D;AAC1D,6EAIsC;AAoBzB,QAAA,uBAAuB,GAAG,iBAAiB,CAAC;AAiBzD,MAAM,wBAAwB,GAAG,OAAC,CAAC,IAAI,CAAC;IACtC,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,UAAU;CACX,CAAC,CAAC;AA8BU,QAAA,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,QAAQ;IAChB,cAAc,EAAE,iBAAiB;IACjC,gBAAgB,EAAE,mBAAmB;IACrC,kBAAkB,EAAE,qBAAqB;IACzC,0BAA0B,EAAE,8BAA8B;IAC1D,YAAY,EAAE,eAAe;IAC7B,UAAU,EAAE,aAAa;IACzB,QAAQ,EAAE,WAAW;IACrB,MAAM,EAAE,QAAQ;IAChB,YAAY,EAAE,OAAO;IACrB,cAAc,EAAE,SAAS;IACzB,gBAAgB,EAAE,mBAAmB;IACrC,aAAa,EAAE,gBAAgB;IAC/B,kBAAkB,EAAE,gBAAgB;IACpC,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,cAAc;IAC3B,qBAAqB,EAAE,cAAc;CAC7B,CAAC,CAAC;AAmCZ,MAAM,4BAA4B,GAChC,IAAI,GAAG,CAAc,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAG3D,SAAgB,0BAA0B,CAAC,IAAiB;IAC1D,OAAO,4BAA4B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAeD,SAAgB,qBAAqB,CACnC,IAAiB,EACjB,SAAiB;IAEjB,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,iBAAiB,IAAI,mDAAmD;YACtE,6BAA6B,CAAC,GAAG,4BAA4B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/E,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,oCAAoC;YAChE,+BAA+B,CAClC,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC;AAClD,CAAC;AAED,SAAgB,gBAAgB,CAAC,IAAiB;IAMhD,MAAM,GAAG,GACP,wBACD,CAAC,IAAI,CAAC,CAAC;IACR,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,KAAK;YAChD,qEAAqE,CACxE,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAaY,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,IAAI,EAAE,wCAAyB;IAO/B,EAAE,EAAE,OAAC;SACF,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CACJ,mDAAmD,EACnD,uFAAuF,CACxF;IACH,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE;CACtB,CAAC;KACD,MAAM,EAAE,CAAC;AAUC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IAEN,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,oCAA4B,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC;KACD,MAAM,EAAE,CAAC;AASZ,MAAM,oBAAoB,GAAG,OAAC;KAC3B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,mBAAmB,EAAE,0CAA0C,CAAC,CAAC;AAE1E,MAAM,oBAAoB,GAAG,OAAC;KAC3B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CACJ,mCAAuB,EACvB,mDAAmD,CACpD,CAAC;AASS,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC;IACN,WAAW,EAAE,oBAAoB;IACjC,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACnD,CAAC;KACD,MAAM,EAAE,CAAC;AAWC,QAAA,mCAAmC,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAgBlE,QAAA,qCAAqC,GAAG,OAAC;KACnD,MAAM,CAAC;IACN,EAAE,EAAE,OAAC;SACF,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CACJ,mBAAmB,EACnB,wFAAwF,CACzF;IACH,IAAI,EAAE,yCAA0B;IAChC,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,wCAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,KAAK,EAAE,sCAAuB;IAC9B,QAAQ,EAAE,OAAC;SACR,MAAM,CAAC;QAMN,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,SAAS,EAAE,2CAAmC;KAC/C,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,MAAM,aAAa,GAAG,OAAC;KACpB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,mBAAmB,EAAE,6BAA6B,CAAC,CAAC;AAuB7D,MAAM,0BAA0B,GAAG;IAOjC,aAAa,EAAE,gCAAwB,CAAC,QAAQ,EAAE;IAwClD,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,gCAAmB,CAAC,CAAC,QAAQ,EAAE;IAQ7D,6BAA6B,EAAE,OAAC,CAAC,KAAK,CAAC,gCAAmB,CAAC,CAAC,QAAQ,EAAE;IAgBtE,8BAA8B,EAAE,OAAC,CAAC,KAAK,CAAC,gCAAmB,CAAC,CAAC,QAAQ,EAAE;IACvE,mBAAmB,EAAE,OAAC,CAAC,KAAK,CAAC,gCAAmB,CAAC,CAAC,QAAQ,EAAE;IAiB5D,qBAAqB,EAAE,OAAC,CAAC,KAAK,CAAC,mCAAsB,CAAC,CAAC,QAAQ,EAAE;IAQjE,QAAQ,EAAE,oCAAmB,CAAC,QAAQ,EAAE;IAQxC,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAUnC,IAAI,EAAE,4BAAe,CAAC,QAAQ,EAAE;CACxB,CAAC;AAiBX,MAAM,kBAAkB,GAAG,OAAC;KACzB,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAkBZ,IAAY,qBAIX;AAJD,WAAY,qBAAqB;IAC/B,oCAAW,CAAA;IACX,4CAAmB,CAAA;IACnB,oCAAW,CAAA;AACb,CAAC,EAJW,qBAAqB,qCAArB,qBAAqB,QAIhC;AAEY,QAAA,2BAA2B,GAAG,OAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;AAU/E,MAAM,0BAA0B,GAAG,OAAC;KACjC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC;IAC1C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAOZ,MAAM,8BAA8B,GAAG,OAAC;KACrC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC;IAC9C,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAgC3B,cAAc,EAAE,OAAC;SACd,MAAM,EAAE;SACR,KAAK,CACJ,gBAAgB,EAChB,0DAA0D,CAC3D;SACA,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAMZ,MAAM,0BAA0B,GAAG,OAAC;KACjC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC;IAC1C,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC;KACD,MAAM,EAAE,CAAC;AAUC,QAAA,2BAA2B,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACtE,0BAA0B;IAC1B,8BAA8B;IAC9B,0BAA0B;CAC3B,CAAC,CAAC;AAkBH,MAAM,4BAA4B,GAAG;IACnC,YAAY,EAAE,mCAA2B,CAAC,QAAQ,EAAE;IACpD,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC9B,CAAC;AAEX,MAAM,qBAAqB,GAAG,OAAC;KAC5B,MAAM,CAAC;IACN,EAAE,EAAE,aAAa;IACjB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,wBAAwB;IAC/B,MAAM,EAAE,OAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAiB3B,gBAAgB,EAAE,aAAa,CAAC,QAAQ,EAAE;IAE1C,UAAU,EAAE,uCAAqB;IAOjC,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IAsB/C,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAOpE,SAAS,EAAE,gCAAiB,CAAC,QAAQ,EAAE;IAMvC,qBAAqB,EAAE,OAAC,CAAC,KAAK,CAAC,kCAA0B,CAAC,CAAC,QAAQ,EAAE;IAOrE,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,6CAAqC,CAAC,CAAC,QAAQ,EAAE;IAEvE,SAAS,EAAE,OAAC;SACT,MAAM,CAAC;QACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACzB,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IAGb,GAAG,4BAA4B;IAG/B,GAAG,0BAA0B;CAC9B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QAC5C,IAAI,SAAS,CAAC,IAAI,KAAK,+CAAkB,CAAC,GAAG,EAAE,CAAC;YAC9C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC;gBACnC,OAAO,EAAE,6CAA6C;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,kBAAkB,GAAG,OAAC;KACzB,MAAM,CAAC;IACN,EAAE,EAAE,aAAa;IACjB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,wBAAwB;IAC/B,MAAM,EAAE,OAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAExB,UAAU,EAAE,uCAAqB;IASjC,aAAa,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAMrC,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IACvD,SAAS,EAAE,OAAC;SACT,MAAM,CAAC;QACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACzB,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IAGb,GAAG,4BAA4B;IAI/B,GAAG,0BAA0B;CAC9B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QAC5C,IACE,SAAS,CAAC,IAAI,KAAK,+CAAkB,CAAC,GAAG;YACzC,SAAS,CAAC,IAAI,KAAK,+CAAkB,CAAC,OAAO,EAC7C,CAAC;YACD,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC;gBACnC,OAAO,EACL,8DAA8D;aACjE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEQ,QAAA,eAAe,GAAG,OAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IAC5D,qBAAqB;IACrB,kBAAkB;CACnB,CAAC,CAAC;AAKH,MAAM,kBAAkB,GAAG,OAAC;KACzB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;AAEpD,QAAA,mBAAmB,GAAG,OAAC;KACjC,MAAM,CAAC;IACN,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,uBAAe;CACtB,CAAC;KACD,WAAW,EAAE,CAAC;AAMjB,MAAa,uBAAwB,SAAQ,KAAK;IACvC,MAAM,CAA8B;IAC7C,YAAY,MAAmC;QAC7C,KAAK,CACH,4BAA4B,MAAM;aAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,SAAS,GACb,KAAK,CAAC,IAAI,KAAK,mBAAmB;gBAChC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAEtB,oEACD,CAAC,QAAQ,CAAC,GAAG,CAAC,CAChB;gBACH,CAAC,CAAC,EAAE,CAAC;YACT,MAAM,OAAO,GACX,SAAS,CAAC,MAAM,GAAG,CAAC;gBAClB,CAAC,CAAC,GAAG,iEAAoC,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,gDAAgD;gBAClH,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;YACpB,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC;QAChD,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAzBD,0DAyBC;AAED,SAAgB,kBAAkB,CAAC,GAAY;IAC7C,MAAM,MAAM,GAAG,2BAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAgB,qBAAqB,CACnC,QAAuB;IAEvB,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC;AAC3C,CAAC;AAED,SAAgB,kBAAkB,CAChC,QAAuB;IAEvB,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC;AACxC,CAAC;AASD,SAAgB,eAAe,CAAC,QAAuB;IACrD,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC;AAC9C,CAAC;AAOD,SAAgB,gBAAgB,CAAC,QAAuB;IACtD,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,uCAAsB,CAAC;AAC1D,CAAC;AA6CD,SAAgB,kBAAkB,CAAC,QAAuB;IACxD,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,8BAAa,CAAC,QAAQ,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,sBAAS,CAAC,MAAM,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC;AAC3C,CAAC;AAsBD,SAAgB,gBAAgB,CAC9B,QAAuB;IAEvB,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;IACjD,OAAO,IAAA,yCAAwB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAOD,SAAgB,YAAY,CAAC,QAAuB;IAClD,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,+BAAkB,CAAC;AAClD,CAAC;AAQD,SAAgB,gBAAgB,CAAC,QAAuB;IACtD,OAAO,YAAY,CAAC,QAAQ,CAAC,KAAK,sBAAS,CAAC,SAAS,CAAC;AACxD,CAAC"}
|
|
1
|
+
{"version":3,"file":"biome-manifest.js","sourceRoot":"","sources":["../../../src/biome/lib/biome-manifest.ts"],"names":[],"mappings":";;;AAwJA,gEAEC;AAeD,sDAiBC;AAED,4CAgBC;AA4uBD,gDAMC;AAED,sDAIC;AAED,gDAIC;AASD,0CAKC;AAOD,4CAEC;AA6CD,gDAQC;AAsBD,4CAKC;AAOD,oCAEC;AAQD,4CAEC;AApkCD,+CAA0D;AAC1D,qDAA+D;AAC/D,iDAA+E;AAC/E,qDAI4B;AAC5B,6BAAwB;AACxB,qDAI0B;AAC1B,qDAA2E;AAC3E,iDAAmD;AACnD,6CAA8E;AAC9E,6CAAyC;AACzC,uDAA0D;AAC1D,6EAIsC;AAoBzB,QAAA,uBAAuB,GAAG,iBAAiB,CAAC;AAiBzD,MAAM,wBAAwB,GAAG,OAAC,CAAC,IAAI,CAAC;IACtC,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,UAAU;CACX,CAAC,CAAC;AA8BU,QAAA,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,QAAQ;IAChB,cAAc,EAAE,iBAAiB;IACjC,gBAAgB,EAAE,mBAAmB;IACrC,kBAAkB,EAAE,qBAAqB;IACzC,0BAA0B,EAAE,8BAA8B;IAC1D,YAAY,EAAE,eAAe;IAC7B,UAAU,EAAE,aAAa;IACzB,QAAQ,EAAE,WAAW;IACrB,MAAM,EAAE,QAAQ;IAChB,YAAY,EAAE,OAAO;IACrB,cAAc,EAAE,SAAS;IACzB,gBAAgB,EAAE,mBAAmB;IACrC,aAAa,EAAE,gBAAgB;IAC/B,kBAAkB,EAAE,gBAAgB;IACpC,KAAK,EAAE,OAAO;IACd,WAAW,EAAE,cAAc;IAC3B,qBAAqB,EAAE,cAAc;CAC7B,CAAC,CAAC;AAmCZ,MAAM,4BAA4B,GAChC,IAAI,GAAG,CAAc,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAG3D,SAAgB,0BAA0B,CAAC,IAAiB;IAC1D,OAAO,4BAA4B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAeD,SAAgB,qBAAqB,CACnC,IAAiB,EACjB,SAAiB;IAEjB,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,iBAAiB,IAAI,mDAAmD;YACtE,6BAA6B,CAAC,GAAG,4BAA4B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/E,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,oCAAoC;YAChE,+BAA+B,CAClC,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC;AAClD,CAAC;AAED,SAAgB,gBAAgB,CAAC,IAAiB;IAMhD,MAAM,GAAG,GACP,wBACD,CAAC,IAAI,CAAC,CAAC;IACR,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,KAAK;YAChD,qEAAqE,CACxE,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAaY,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,IAAI,EAAE,wCAAyB;IAO/B,EAAE,EAAE,OAAC;SACF,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CACJ,mDAAmD,EACnD,uFAAuF,CACxF;IACH,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE;CACtB,CAAC;KACD,MAAM,EAAE,CAAC;AAUC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IAEN,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,oCAA4B,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC;KACD,MAAM,EAAE,CAAC;AASZ,MAAM,oBAAoB,GAAG,OAAC;KAC3B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,mBAAmB,EAAE,0CAA0C,CAAC,CAAC;AAE1E,MAAM,oBAAoB,GAAG,OAAC;KAC3B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CACJ,mCAAuB,EACvB,mDAAmD,CACpD,CAAC;AASS,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC;IACN,WAAW,EAAE,oBAAoB;IACjC,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACnD,CAAC;KACD,MAAM,EAAE,CAAC;AAWC,QAAA,mCAAmC,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAgBlE,QAAA,qCAAqC,GAAG,OAAC;KACnD,MAAM,CAAC;IACN,EAAE,EAAE,OAAC;SACF,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,KAAK,CACJ,mBAAmB,EACnB,wFAAwF,CACzF;IACH,IAAI,EAAE,yCAA0B;IAChC,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,wCAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,KAAK,EAAE,sCAAuB;IAC9B,QAAQ,EAAE,OAAC;SACR,MAAM,CAAC;QAMN,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,SAAS,EAAE,2CAAmC;KAC/C,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,MAAM,aAAa,GAAG,OAAC;KACpB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,mBAAmB,EAAE,6BAA6B,CAAC,CAAC;AAuB7D,MAAM,0BAA0B,GAAG;IAOjC,aAAa,EAAE,gCAAwB,CAAC,QAAQ,EAAE;IAwClD,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,gCAAmB,CAAC,CAAC,QAAQ,EAAE;IAQ7D,6BAA6B,EAAE,OAAC,CAAC,KAAK,CAAC,gCAAmB,CAAC,CAAC,QAAQ,EAAE;IAgBtE,8BAA8B,EAAE,OAAC,CAAC,KAAK,CAAC,gCAAmB,CAAC,CAAC,QAAQ,EAAE;IACvE,mBAAmB,EAAE,OAAC,CAAC,KAAK,CAAC,gCAAmB,CAAC,CAAC,QAAQ,EAAE;IAiB5D,qBAAqB,EAAE,OAAC,CAAC,KAAK,CAAC,mCAAsB,CAAC,CAAC,QAAQ,EAAE;IAQjE,QAAQ,EAAE,oCAAmB,CAAC,QAAQ,EAAE;IAQxC,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAUnC,IAAI,EAAE,4BAAe,CAAC,QAAQ,EAAE;CACxB,CAAC;AAiBX,MAAM,kBAAkB,GAAG,OAAC;KACzB,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAkBZ,IAAY,qBAIX;AAJD,WAAY,qBAAqB;IAC/B,oCAAW,CAAA;IACX,4CAAmB,CAAA;IACnB,oCAAW,CAAA;AACb,CAAC,EAJW,qBAAqB,qCAArB,qBAAqB,QAIhC;AAEY,QAAA,2BAA2B,GAAG,OAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;AAU/E,MAAM,0BAA0B,GAAG,OAAC;KACjC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC;IAC1C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAOZ,MAAM,8BAA8B,GAAG,OAAC;KACrC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC;IAC9C,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAgC3B,cAAc,EAAE,OAAC;SACd,MAAM,EAAE;SACR,KAAK,CACJ,gBAAgB,EAChB,0DAA0D,CAC3D;SACA,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAMZ,MAAM,0BAA0B,GAAG,OAAC;KACjC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC;IAC1C,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC;KACD,MAAM,EAAE,CAAC;AAUC,QAAA,2BAA2B,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACtE,0BAA0B;IAC1B,8BAA8B;IAC9B,0BAA0B;CAC3B,CAAC,CAAC;AAkBH,MAAM,4BAA4B,GAAG;IACnC,YAAY,EAAE,mCAA2B,CAAC,QAAQ,EAAE;IACpD,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC9B,CAAC;AAEX,MAAM,qBAAqB,GAAG,OAAC;KAC5B,MAAM,CAAC;IACN,EAAE,EAAE,aAAa;IACjB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,wBAAwB;IAC/B,MAAM,EAAE,OAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAiB3B,gBAAgB,EAAE,aAAa,CAAC,QAAQ,EAAE;IAE1C,UAAU,EAAE,uCAAqB;IAOjC,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IAsB/C,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAOpE,SAAS,EAAE,gCAAiB,CAAC,QAAQ,EAAE;IAMvC,qBAAqB,EAAE,OAAC,CAAC,KAAK,CAAC,kCAA0B,CAAC,CAAC,QAAQ,EAAE;IAOrE,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,6CAAqC,CAAC,CAAC,QAAQ,EAAE;IAEvE,SAAS,EAAE,OAAC;SACT,MAAM,CAAC;QACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACzB,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IAGb,GAAG,4BAA4B;IAG/B,GAAG,0BAA0B;CAC9B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QAC5C,IAAI,SAAS,CAAC,IAAI,KAAK,+CAAkB,CAAC,GAAG,EAAE,CAAC;YAC9C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC;gBACnC,OAAO,EAAE,6CAA6C;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,kBAAkB,GAAG,OAAC;KACzB,MAAM,CAAC;IACN,EAAE,EAAE,aAAa;IACjB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,wBAAwB;IAC/B,MAAM,EAAE,OAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAExB,UAAU,EAAE,uCAAqB;IASjC,aAAa,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAMrC,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IACvD,SAAS,EAAE,OAAC;SACT,MAAM,CAAC;QACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACzB,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IAGb,GAAG,4BAA4B;IAI/B,GAAG,0BAA0B;CAC9B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QAC5C,IACE,SAAS,CAAC,IAAI,KAAK,+CAAkB,CAAC,GAAG;YACzC,SAAS,CAAC,IAAI,KAAK,+CAAkB,CAAC,OAAO,EAC7C,CAAC;YACD,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC;gBACnC,OAAO,EACL,8DAA8D;aACjE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEQ,QAAA,eAAe,GAAG,OAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IAC5D,qBAAqB;IACrB,kBAAkB;CACnB,CAAC,CAAC;AAKH,MAAM,kBAAkB,GAAG,OAAC;KACzB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;AAcjE,SAAS,eAAe,CAAC,MAAc;IACrC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,SAAS,GAAG,SAAS,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAEY,QAAA,mBAAmB,GAAG,OAAC;KACjC,MAAM,CAAC;IACN,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,uBAAe;CACtB,CAAC;KACD,WAAW,EAAE;KAkBb,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC;IAC1C,IAAI,MAAM,EAAE,IAAI,KAAK,qBAAqB,CAAC,GAAG,EAAE,CAAC;QAO/C,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClC,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC;gBACtC,OAAO,EAAE,sBAAsB,MAAM,CAAC,IAAI,qCAAqC,QAAQ,CAAC,IAAI,sEAAsE;aACnK,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;YACxC,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,CAAC;gBACzC,OAAO,EAAE,yBAAyB,MAAM,CAAC,OAAO,mBAAmB,MAAM,CAAC,IAAI,yCAAyC,QAAQ,CAAC,OAAO,uBAAuB;aAC/J,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,MAAM,EAAE,IAAI,KAAK,qBAAqB,CAAC,GAAG,EAAE,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxB,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC;YACxC,OAAO,EAAE,wBAAwB,MAAM,CAAC,MAAM,wEAAwE,QAAQ,CAAC,OAAO,4BAA4B;SACnK,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QACjC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC;YACxC,OAAO,EAAE,wBAAwB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,kCAAkC,QAAQ,CAAC,OAAO,mCAAmC;SAC7J,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAML,MAAa,uBAAwB,SAAQ,KAAK;IACvC,MAAM,CAA8B;IAC7C,YAAY,MAAmC;QAC7C,KAAK,CACH,4BAA4B,MAAM;aAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,SAAS,GACb,KAAK,CAAC,IAAI,KAAK,mBAAmB;gBAChC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAEtB,oEACD,CAAC,QAAQ,CAAC,GAAG,CAAC,CAChB;gBACH,CAAC,CAAC,EAAE,CAAC;YACT,MAAM,OAAO,GACX,SAAS,CAAC,MAAM,GAAG,CAAC;gBAClB,CAAC,CAAC,GAAG,iEAAoC,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,gDAAgD;gBAClH,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;YACpB,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC;QAChD,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAzBD,0DAyBC;AAED,SAAgB,kBAAkB,CAAC,GAAY;IAC7C,MAAM,MAAM,GAAG,2BAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAgB,qBAAqB,CACnC,QAAuB;IAEvB,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC;AAC3C,CAAC;AAED,SAAgB,kBAAkB,CAChC,QAAuB;IAEvB,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC;AACxC,CAAC;AASD,SAAgB,eAAe,CAAC,QAAuB;IACrD,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC;AAC9C,CAAC;AAOD,SAAgB,gBAAgB,CAAC,QAAuB;IACtD,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,uCAAsB,CAAC;AAC1D,CAAC;AA6CD,SAAgB,kBAAkB,CAAC,QAAuB;IACxD,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,8BAAa,CAAC,QAAQ,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,sBAAS,CAAC,MAAM,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC;AAC3C,CAAC;AAsBD,SAAgB,gBAAgB,CAC9B,QAAuB;IAEvB,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;IACjD,OAAO,IAAA,yCAAwB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAOD,SAAgB,YAAY,CAAC,QAAuB;IAClD,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,+BAAkB,CAAC;AAClD,CAAC;AAQD,SAAgB,gBAAgB,CAAC,QAAuB;IACtD,OAAO,YAAY,CAAC,QAAQ,CAAC,KAAK,sBAAS,CAAC,SAAS,CAAC;AACxD,CAAC"}
|
|
@@ -6,7 +6,6 @@ import { type CapabilityEffectClass } from './capability-effect-class';
|
|
|
6
6
|
import { type RequiredResourceRoleBinding } from './required-resource-role-binding';
|
|
7
7
|
import { CapabilityRiskTier } from './permission-profile';
|
|
8
8
|
import { type DataClassification } from '../../space';
|
|
9
|
-
import { type OrgRole } from '../../tenant';
|
|
10
9
|
import { type HumanBaseline } from './capability-human-baseline';
|
|
11
10
|
import { type TrustedContextProjection } from './trusted-context-projection';
|
|
12
11
|
export interface CapabilityContributionManifest {
|
|
@@ -28,7 +27,6 @@ export interface CapabilityContributionManifest {
|
|
|
28
27
|
readonly trustedContextProjection?: TrustedContextProjection | undefined;
|
|
29
28
|
readonly requiredBindings?: readonly RequiredResourceRoleBinding[] | undefined;
|
|
30
29
|
readonly safeForAgents?: boolean | undefined;
|
|
31
|
-
readonly defaultBaselineOrgRole?: OrgRole | undefined;
|
|
32
30
|
readonly humanBaseline?: HumanBaseline | undefined;
|
|
33
31
|
}
|
|
34
32
|
export declare const CapabilityContributionManifestSchema: z.ZodObject<{
|
|
@@ -50,7 +48,6 @@ export declare const CapabilityContributionManifestSchema: z.ZodObject<{
|
|
|
50
48
|
trustedContextProjection: z.ZodOptional<z.ZodType<TrustedContextProjection, unknown, z.core.$ZodTypeInternals<TrustedContextProjection, unknown>>>;
|
|
51
49
|
requiredBindings: z.ZodOptional<z.ZodArray<z.ZodType<RequiredResourceRoleBinding, unknown, z.core.$ZodTypeInternals<RequiredResourceRoleBinding, unknown>>>>;
|
|
52
50
|
safeForAgents: z.ZodOptional<z.ZodBoolean>;
|
|
53
|
-
defaultBaselineOrgRole: z.ZodOptional<z.ZodEnum<typeof OrgRole>>;
|
|
54
51
|
humanBaseline: z.ZodOptional<z.ZodType<HumanBaseline, unknown, z.core.$ZodTypeInternals<HumanBaseline, unknown>>>;
|
|
55
52
|
}, z.core.$strict>;
|
|
56
53
|
//# sourceMappingURL=capability-contribution.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"capability-contribution.d.ts","sourceRoot":"","sources":["../../../src/capability/lib/capability-contribution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,kBAAkB,EAEnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAA4B,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,
|
|
1
|
+
{"version":3,"file":"capability-contribution.d.ts","sourceRoot":"","sources":["../../../src/capability/lib/capability-contribution.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,kBAAkB,EAEnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAA4B,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAIL,KAAK,wBAAwB,EAC9B,MAAM,8BAA8B,CAAC;AAsBtC,MAAM,WAAW,8BAA8B;IAE7C,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC;IAE5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE9C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE/C,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IAKtC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAKnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,SAAS,CAAC;IAUnE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAOjD,QAAQ,CAAC,2BAA2B,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAoB1D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAgB/D,QAAQ,CAAC,eAAe,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAqBjE,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IA0B7C,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;IAQzD,QAAQ,CAAC,wBAAwB,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAgBzE,QAAQ,CAAC,gBAAgB,CAAC,EACtB,SAAS,2BAA2B,EAAE,GACtC,SAAS,CAAC;IAuDd,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAa7C,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;CACpD;AAcD,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;kBAsEO,CAAC"}
|
|
@@ -9,7 +9,6 @@ const capability_effect_class_1 = require("./capability-effect-class");
|
|
|
9
9
|
const required_resource_role_binding_1 = require("./required-resource-role-binding");
|
|
10
10
|
const permission_profile_1 = require("./permission-profile");
|
|
11
11
|
const space_1 = require("../../space");
|
|
12
|
-
const tenant_1 = require("../../tenant");
|
|
13
12
|
const capability_human_baseline_1 = require("./capability-human-baseline");
|
|
14
13
|
const trusted_context_projection_1 = require("./trusted-context-projection");
|
|
15
14
|
exports.CapabilityContributionManifestSchema = zod_1.z
|
|
@@ -35,12 +34,10 @@ exports.CapabilityContributionManifestSchema = zod_1.z
|
|
|
35
34
|
.max(20)
|
|
36
35
|
.optional(),
|
|
37
36
|
safeForAgents: zod_1.z.boolean().optional(),
|
|
38
|
-
defaultBaselineOrgRole: tenant_1.OrgRoleSchema.optional(),
|
|
39
37
|
humanBaseline: capability_human_baseline_1.HumanBaselineSchema.optional(),
|
|
40
38
|
})
|
|
41
39
|
.strict()
|
|
42
40
|
.superRefine((manifest, context) => {
|
|
43
|
-
(0, capability_human_baseline_1.refineSingleHumanBaselineDeclaration)(manifest, context);
|
|
44
41
|
const properties = manifest.inputSchema['properties'];
|
|
45
42
|
if ((0, trusted_context_projection_1.declaresReservedTrustedOperationContextField)(properties)) {
|
|
46
43
|
context.addIssue({
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"capability-contribution.js","sourceRoot":"","sources":["../../../src/capability/lib/capability-contribution.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,qDAA2E;AAC3E,yDAG4B;AAC5B,yDAG4B;AAC5B,uEAGmC;AACnC,qFAG0C;AAC1C,6DAG8B;AAC9B,uCAAgF;AAChF,
|
|
1
|
+
{"version":3,"file":"capability-contribution.js","sourceRoot":"","sources":["../../../src/capability/lib/capability-contribution.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,qDAA2E;AAC3E,yDAG4B;AAC5B,yDAG4B;AAC5B,uEAGmC;AACnC,qFAG0C;AAC1C,6DAG8B;AAC9B,uCAAgF;AAChF,2EAGqC;AACrC,6EAKsC;AA+PzB,QAAA,oCAAoC,GAAG,OAAC;KAClD,MAAM,CAAC;IACN,GAAG,EAAE,oCAAmB;IACxB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACpC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACxC,WAAW,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC;IAC9C,YAAY,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC;IAC/C,QAAQ,EAAE,6CAAwB;IAClC,gBAAgB,EAAE,OAAC,CAAC,OAAO,EAAE;IAC7B,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvE,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzD,2BAA2B,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClE,oBAAoB,EAAE,gCAAwB,CAAC,QAAQ,EAAE;IACzD,eAAe,EAAE,kDAA+B,CAAC,QAAQ,EAAE;IAC3D,KAAK,EAAE,wCAAqB,CAAC,QAAQ,EAAE;IACvC,WAAW,EAAE,qDAA2B,CAAC,QAAQ,EAAE;IACnD,wBAAwB,EAAE,2DAA8B,CAAC,QAAQ,EAAE;IACnE,gBAAgB,EAAE,OAAC;SAChB,KAAK,CAAC,kEAAiC,CAAC;SACxC,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,EAAE;IACb,aAAa,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,aAAa,EAAE,+CAAmB,CAAC,QAAQ,EAAE;CAC9C,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IACjC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IACtD,IAAI,IAAA,yEAA4C,EAAC,UAAU,CAAC,EAAE,CAAC;QAC7D,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE;gBACJ,aAAa;gBACb,YAAY;gBACZ,qEAAwC;aACzC;YACD,OAAO,EACL,GAAG,qEAAwC,0BAA0B;gBACrE,gDAAgD;SACnD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,wBAAwB,KAAK,SAAS,EAAE,CAAC;QACpD,OAAO;IACT,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,uCAAkB,CAAC,QAAQ,EAAE,CAAC;QACtD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EACL,uEAAuE;SAC1E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QAC/B,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,kBAAkB,CAAC;YAC1B,OAAO,EACL,qEAAqE;SACxE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,aAAa,CAAC;YACrB,OAAO,EACL,sEAAsE;gBACtE,qEAAqE;SACxE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAqD,CAAC;AASzD,SAAS,wBAAwB,CAAC,MAA+B;IAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACxC,OAAO,CACL,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ;QAC3B,UAAU,KAAK,IAAI;QACnB,OAAO,UAAU,KAAK,QAAQ;QAC9B,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAC1B,MAAM,CAAC,sBAAsB,CAAC,KAAK,KAAK,CACzC,CAAC;AACJ,CAAC"}
|
|
@@ -1,14 +1,11 @@
|
|
|
1
1
|
import { z } from 'zod';
|
|
2
2
|
import { ExecutionEnvironmentKind } from '../../execution-environment-kind';
|
|
3
3
|
import { OrgRole } from '../../tenant';
|
|
4
|
-
export declare const CAPABILITY_HUMAN_BASELINE_FIELD = "defaultBaselineOrgRole";
|
|
5
|
-
export declare function resolveHumanBaselineFloor(descriptor: Readonly<Record<string, unknown>> | undefined): OrgRole | undefined;
|
|
6
|
-
export declare function capabilityInHumanBaseline(descriptor: Readonly<Record<string, unknown>> | undefined, role: OrgRole): boolean;
|
|
7
|
-
export declare function isWidestHumanBaseline(descriptor: Readonly<Record<string, unknown>> | undefined): boolean;
|
|
8
4
|
export declare const CAPABILITY_HUMAN_BASELINE_DECLARATION_FIELD = "humanBaseline";
|
|
9
5
|
export declare enum HumanBaselineKind {
|
|
10
6
|
ExplicitOnly = "explicit-only",
|
|
11
|
-
OrgRole = "org-role"
|
|
7
|
+
OrgRole = "org-role",
|
|
8
|
+
OrgAdministrators = "org-administrators"
|
|
12
9
|
}
|
|
13
10
|
export interface ExplicitOnlyHumanBaseline {
|
|
14
11
|
readonly kind: HumanBaselineKind.ExplicitOnly;
|
|
@@ -18,23 +15,21 @@ export interface OrgRoleHumanBaseline {
|
|
|
18
15
|
readonly minimumOrgRole: OrgRole;
|
|
19
16
|
readonly environments: readonly ExecutionEnvironmentKind[];
|
|
20
17
|
}
|
|
21
|
-
export
|
|
18
|
+
export interface OrgAdministratorsHumanBaseline {
|
|
19
|
+
readonly kind: HumanBaselineKind.OrgAdministrators;
|
|
20
|
+
readonly environments: readonly ExecutionEnvironmentKind[];
|
|
21
|
+
}
|
|
22
|
+
export type GrantingHumanBaseline = OrgRoleHumanBaseline | OrgAdministratorsHumanBaseline;
|
|
23
|
+
export type HumanBaseline = ExplicitOnlyHumanBaseline | GrantingHumanBaseline;
|
|
22
24
|
export declare const HumanBaselineSchema: z.ZodType<HumanBaseline>;
|
|
23
25
|
export declare const EXPLICIT_ONLY_HUMAN_BASELINE: ExplicitOnlyHumanBaseline;
|
|
24
26
|
export declare class HumanBaselineDeclarationError extends Error {
|
|
25
27
|
constructor(message: string);
|
|
26
28
|
}
|
|
27
29
|
export declare function orgRoleHumanBaseline(minimumOrgRole: OrgRole, environments: readonly ExecutionEnvironmentKind[]): OrgRoleHumanBaseline;
|
|
28
|
-
export declare
|
|
29
|
-
export declare function refineSingleHumanBaselineDeclaration(manifest: {
|
|
30
|
-
readonly humanBaseline?: HumanBaseline | undefined;
|
|
31
|
-
readonly defaultBaselineOrgRole?: OrgRole | undefined;
|
|
32
|
-
}, context: z.RefinementCtx): void;
|
|
30
|
+
export declare function orgAdministratorsHumanBaseline(environments: readonly ExecutionEnvironmentKind[]): OrgAdministratorsHumanBaseline;
|
|
33
31
|
export declare function normalizeHumanBaseline(descriptor: Readonly<Record<string, unknown>> | undefined): HumanBaseline | undefined;
|
|
34
|
-
export
|
|
35
|
-
readonly minimumOrgRole: OrgRole;
|
|
36
|
-
readonly environments: readonly ExecutionEnvironmentKind[];
|
|
37
|
-
}
|
|
32
|
+
export type HumanBaselineGrantPlan = GrantingHumanBaseline;
|
|
38
33
|
export declare function humanBaselineGrantPlan(baseline: HumanBaseline | undefined): HumanBaselineGrantPlan | undefined;
|
|
39
34
|
export declare function satisfiesHumanBaseline(role: OrgRole, environment: ExecutionEnvironmentKind, baseline: HumanBaseline | undefined): boolean;
|
|
40
35
|
//# sourceMappingURL=capability-human-baseline.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"capability-human-baseline.d.ts","sourceRoot":"","sources":["../../../src/capability/lib/capability-human-baseline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,wBAAwB,EAEzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,
|
|
1
|
+
{"version":3,"file":"capability-human-baseline.d.ts","sourceRoot":"","sources":["../../../src/capability/lib/capability-human-baseline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,wBAAwB,EAEzB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAmC,MAAM,cAAc,CAAC;AA+HxE,eAAO,MAAM,2CAA2C,kBAAkB,CAAC;AAG3E,oBAAY,iBAAiB;IAE3B,YAAY,kBAAkB;IAE9B,OAAO,aAAa;IAEpB,iBAAiB,uBAAuB;CACzC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC,YAAY,CAAC;CAC/C;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC,OAAO,CAAC;IAEzC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IAMjC,QAAQ,CAAC,YAAY,EAAE,SAAS,wBAAwB,EAAE,CAAC;CAC5D;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC,iBAAiB,CAAC;IAKnD,QAAQ,CAAC,YAAY,EAAE,SAAS,wBAAwB,EAAE,CAAC;CAC5D;AAGD,MAAM,MAAM,qBAAqB,GAC7B,oBAAoB,GACpB,8BAA8B,CAAC;AAEnC,MAAM,MAAM,aAAa,GAAG,yBAAyB,GAAG,qBAAqB,CAAC;AAsE9E,eAAO,MAAM,mBAAmB,EAIf,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AAG1C,eAAO,MAAM,4BAA4B,EAAE,yBACc,CAAC;AAO1D,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAOD,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,OAAO,EACvB,YAAY,EAAE,SAAS,wBAAwB,EAAE,GAChD,oBAAoB,CAgBtB;AAMD,wBAAgB,8BAA8B,CAC5C,YAAY,EAAE,SAAS,wBAAwB,EAAE,GAChD,8BAA8B,CAehC;AAWD,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,GACxD,aAAa,GAAG,SAAS,CAa3B;AAQD,MAAM,MAAM,sBAAsB,GAAG,qBAAqB,CAAC;AAO3D,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,aAAa,GAAG,SAAS,GAClC,sBAAsB,GAAG,SAAS,CASpC;AAqBD,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,OAAO,EACb,WAAW,EAAE,wBAAwB,EACrC,QAAQ,EAAE,aAAa,GAAG,SAAS,GAClC,OAAO,CAQT"}
|
|
@@ -1,38 +1,20 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.
|
|
4
|
-
exports.resolveHumanBaselineFloor = resolveHumanBaselineFloor;
|
|
5
|
-
exports.capabilityInHumanBaseline = capabilityInHumanBaseline;
|
|
6
|
-
exports.isWidestHumanBaseline = isWidestHumanBaseline;
|
|
3
|
+
exports.HumanBaselineDeclarationError = exports.EXPLICIT_ONLY_HUMAN_BASELINE = exports.HumanBaselineSchema = exports.HumanBaselineKind = exports.CAPABILITY_HUMAN_BASELINE_DECLARATION_FIELD = void 0;
|
|
7
4
|
exports.orgRoleHumanBaseline = orgRoleHumanBaseline;
|
|
8
|
-
exports.
|
|
5
|
+
exports.orgAdministratorsHumanBaseline = orgAdministratorsHumanBaseline;
|
|
9
6
|
exports.normalizeHumanBaseline = normalizeHumanBaseline;
|
|
10
7
|
exports.humanBaselineGrantPlan = humanBaselineGrantPlan;
|
|
11
8
|
exports.satisfiesHumanBaseline = satisfiesHumanBaseline;
|
|
12
9
|
const zod_1 = require("zod");
|
|
13
10
|
const execution_environment_kind_1 = require("../../execution-environment-kind");
|
|
14
11
|
const tenant_1 = require("../../tenant");
|
|
15
|
-
exports.CAPABILITY_HUMAN_BASELINE_FIELD = 'defaultBaselineOrgRole';
|
|
16
|
-
function resolveHumanBaselineFloor(descriptor) {
|
|
17
|
-
if (descriptor === undefined)
|
|
18
|
-
return undefined;
|
|
19
|
-
const parsed = tenant_1.OrgRoleSchema.safeParse(descriptor[exports.CAPABILITY_HUMAN_BASELINE_FIELD]);
|
|
20
|
-
return parsed.success ? parsed.data : undefined;
|
|
21
|
-
}
|
|
22
|
-
function capabilityInHumanBaseline(descriptor, role) {
|
|
23
|
-
const floor = resolveHumanBaselineFloor(descriptor);
|
|
24
|
-
if (floor === undefined)
|
|
25
|
-
return false;
|
|
26
|
-
return (0, tenant_1.orgRoleSatisfies)(role, floor);
|
|
27
|
-
}
|
|
28
|
-
function isWidestHumanBaseline(descriptor) {
|
|
29
|
-
return capabilityInHumanBaseline(descriptor, tenant_1.LOWEST_ORG_ROLE);
|
|
30
|
-
}
|
|
31
12
|
exports.CAPABILITY_HUMAN_BASELINE_DECLARATION_FIELD = 'humanBaseline';
|
|
32
13
|
var HumanBaselineKind;
|
|
33
14
|
(function (HumanBaselineKind) {
|
|
34
15
|
HumanBaselineKind["ExplicitOnly"] = "explicit-only";
|
|
35
16
|
HumanBaselineKind["OrgRole"] = "org-role";
|
|
17
|
+
HumanBaselineKind["OrgAdministrators"] = "org-administrators";
|
|
36
18
|
})(HumanBaselineKind || (exports.HumanBaselineKind = HumanBaselineKind = {}));
|
|
37
19
|
function compareEnvironment(a, b) {
|
|
38
20
|
if (a === b)
|
|
@@ -42,14 +24,7 @@ function compareEnvironment(a, b) {
|
|
|
42
24
|
const ExplicitOnlyHumanBaselineSchema = zod_1.z
|
|
43
25
|
.object({ kind: zod_1.z.literal(HumanBaselineKind.ExplicitOnly) })
|
|
44
26
|
.strict();
|
|
45
|
-
|
|
46
|
-
.object({
|
|
47
|
-
kind: zod_1.z.literal(HumanBaselineKind.OrgRole),
|
|
48
|
-
minimumOrgRole: tenant_1.OrgRoleSchema,
|
|
49
|
-
environments: zod_1.z.array(execution_environment_kind_1.ExecutionEnvironmentKindSchema).min(1),
|
|
50
|
-
})
|
|
51
|
-
.strict()
|
|
52
|
-
.superRefine((baseline, context) => {
|
|
27
|
+
function refineCanonicalEnvironments(baseline, context) {
|
|
53
28
|
const seen = new Set();
|
|
54
29
|
for (const [index, environment] of baseline.environments.entries()) {
|
|
55
30
|
if (seen.has(environment)) {
|
|
@@ -72,10 +47,26 @@ const OrgRoleHumanBaselineSchema = zod_1.z
|
|
|
72
47
|
`(expected [${canonical.join(', ')}]).`,
|
|
73
48
|
});
|
|
74
49
|
}
|
|
75
|
-
}
|
|
50
|
+
}
|
|
51
|
+
const OrgRoleHumanBaselineSchema = zod_1.z
|
|
52
|
+
.object({
|
|
53
|
+
kind: zod_1.z.literal(HumanBaselineKind.OrgRole),
|
|
54
|
+
minimumOrgRole: tenant_1.OrgRoleSchema,
|
|
55
|
+
environments: zod_1.z.array(execution_environment_kind_1.ExecutionEnvironmentKindSchema).min(1),
|
|
56
|
+
})
|
|
57
|
+
.strict()
|
|
58
|
+
.superRefine(refineCanonicalEnvironments);
|
|
59
|
+
const OrgAdministratorsHumanBaselineSchema = zod_1.z
|
|
60
|
+
.object({
|
|
61
|
+
kind: zod_1.z.literal(HumanBaselineKind.OrgAdministrators),
|
|
62
|
+
environments: zod_1.z.array(execution_environment_kind_1.ExecutionEnvironmentKindSchema).min(1),
|
|
63
|
+
})
|
|
64
|
+
.strict()
|
|
65
|
+
.superRefine(refineCanonicalEnvironments);
|
|
76
66
|
exports.HumanBaselineSchema = zod_1.z.discriminatedUnion('kind', [
|
|
77
67
|
ExplicitOnlyHumanBaselineSchema,
|
|
78
68
|
OrgRoleHumanBaselineSchema,
|
|
69
|
+
OrgAdministratorsHumanBaselineSchema,
|
|
79
70
|
]);
|
|
80
71
|
exports.EXPLICIT_ONLY_HUMAN_BASELINE = Object.freeze({ kind: HumanBaselineKind.ExplicitOnly });
|
|
81
72
|
class HumanBaselineDeclarationError extends Error {
|
|
@@ -100,54 +91,33 @@ function orgRoleHumanBaseline(minimumOrgRole, environments) {
|
|
|
100
91
|
environments: Object.freeze(candidate.environments),
|
|
101
92
|
});
|
|
102
93
|
}
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
execution_environment_kind_1.ExecutionEnvironmentKind.Session,
|
|
112
|
-
]),
|
|
113
|
-
});
|
|
114
|
-
function refineSingleHumanBaselineDeclaration(manifest, context) {
|
|
115
|
-
if (manifest.humanBaseline !== undefined &&
|
|
116
|
-
manifest.defaultBaselineOrgRole !== undefined) {
|
|
117
|
-
context.addIssue({
|
|
118
|
-
code: 'custom',
|
|
119
|
-
path: [exports.CAPABILITY_HUMAN_BASELINE_DECLARATION_FIELD],
|
|
120
|
-
message: 'Declare either humanBaseline or the deprecated defaultBaselineOrgRole, never both.',
|
|
121
|
-
});
|
|
94
|
+
function orgAdministratorsHumanBaseline(environments) {
|
|
95
|
+
const candidate = {
|
|
96
|
+
kind: HumanBaselineKind.OrgAdministrators,
|
|
97
|
+
environments: [...environments].sort(compareEnvironment),
|
|
98
|
+
};
|
|
99
|
+
const parsed = exports.HumanBaselineSchema.safeParse(candidate);
|
|
100
|
+
if (!parsed.success) {
|
|
101
|
+
throw new HumanBaselineDeclarationError(parsed.error.issues.map((issue) => issue.message).join('; '));
|
|
122
102
|
}
|
|
103
|
+
return Object.freeze({
|
|
104
|
+
...candidate,
|
|
105
|
+
environments: Object.freeze(candidate.environments),
|
|
106
|
+
});
|
|
123
107
|
}
|
|
124
108
|
function normalizeHumanBaseline(descriptor) {
|
|
125
109
|
if (descriptor === undefined)
|
|
126
110
|
return undefined;
|
|
127
111
|
const structured = descriptor[exports.CAPABILITY_HUMAN_BASELINE_DECLARATION_FIELD];
|
|
128
|
-
|
|
129
|
-
const hasStructured = structured !== undefined && structured !== null;
|
|
130
|
-
const hasLegacy = legacyRaw !== undefined && legacyRaw !== null;
|
|
131
|
-
if (hasStructured && hasLegacy) {
|
|
132
|
-
throw new HumanBaselineDeclarationError('Declare either humanBaseline or the deprecated defaultBaselineOrgRole, never both.');
|
|
133
|
-
}
|
|
134
|
-
if (hasStructured) {
|
|
135
|
-
const parsed = exports.HumanBaselineSchema.safeParse(structured);
|
|
136
|
-
if (!parsed.success) {
|
|
137
|
-
throw new HumanBaselineDeclarationError(`Malformed humanBaseline: ${parsed.error.issues
|
|
138
|
-
.map((issue) => issue.message)
|
|
139
|
-
.join('; ')}`);
|
|
140
|
-
}
|
|
141
|
-
return parsed.data;
|
|
142
|
-
}
|
|
143
|
-
const legacy = resolveHumanBaselineFloor(descriptor);
|
|
144
|
-
if (legacy === undefined)
|
|
112
|
+
if (structured === undefined || structured === null)
|
|
145
113
|
return undefined;
|
|
146
|
-
|
|
147
|
-
|
|
148
|
-
|
|
149
|
-
|
|
150
|
-
|
|
114
|
+
const parsed = exports.HumanBaselineSchema.safeParse(structured);
|
|
115
|
+
if (!parsed.success) {
|
|
116
|
+
throw new HumanBaselineDeclarationError(`Malformed humanBaseline: ${parsed.error.issues
|
|
117
|
+
.map((issue) => issue.message)
|
|
118
|
+
.join('; ')}`);
|
|
119
|
+
}
|
|
120
|
+
return parsed.data;
|
|
151
121
|
}
|
|
152
122
|
function humanBaselineGrantPlan(baseline) {
|
|
153
123
|
if (baseline === undefined)
|
|
@@ -156,17 +126,18 @@ function humanBaselineGrantPlan(baseline) {
|
|
|
156
126
|
case HumanBaselineKind.ExplicitOnly:
|
|
157
127
|
return undefined;
|
|
158
128
|
case HumanBaselineKind.OrgRole:
|
|
159
|
-
|
|
160
|
-
|
|
161
|
-
environments: baseline.environments,
|
|
162
|
-
};
|
|
129
|
+
case HumanBaselineKind.OrgAdministrators:
|
|
130
|
+
return baseline;
|
|
163
131
|
}
|
|
164
132
|
}
|
|
133
|
+
const ORG_ADMINISTRATOR_ROLE_FLOOR = tenant_1.OrgRole.Admin;
|
|
165
134
|
function satisfiesHumanBaseline(role, environment, baseline) {
|
|
166
135
|
const plan = humanBaselineGrantPlan(baseline);
|
|
167
136
|
if (plan === undefined)
|
|
168
137
|
return false;
|
|
169
|
-
|
|
170
|
-
plan.
|
|
138
|
+
const floor = plan.kind === HumanBaselineKind.OrgRole
|
|
139
|
+
? plan.minimumOrgRole
|
|
140
|
+
: ORG_ADMINISTRATOR_ROLE_FLOOR;
|
|
141
|
+
return (0, tenant_1.orgRoleSatisfies)(role, floor) && plan.environments.includes(environment);
|
|
171
142
|
}
|
|
172
143
|
//# sourceMappingURL=capability-human-baseline.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"capability-human-baseline.js","sourceRoot":"","sources":["../../../src/capability/lib/capability-human-baseline.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"capability-human-baseline.js","sourceRoot":"","sources":["../../../src/capability/lib/capability-human-baseline.ts"],"names":[],"mappings":";;;AAgRA,oDAmBC;AAMD,wEAiBC;AAWD,wDAeC;AAeD,wDAWC;AAqBD,wDAYC;AA/YD,6BAAwB;AAExB,iFAG0C;AAC1C,yCAAwE;AA+H3D,QAAA,2CAA2C,GAAG,eAAe,CAAC;AAG3E,IAAY,iBAOX;AAPD,WAAY,iBAAiB;IAE3B,mDAA8B,CAAA;IAE9B,yCAAoB,CAAA;IAEpB,6DAAwC,CAAA;AAC1C,CAAC,EAPW,iBAAiB,iCAAjB,iBAAiB,QAO5B;AAmCD,SAAS,kBAAkB,CACzB,CAA2B,EAC3B,CAA2B;IAE3B,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,+BAA+B,GAAG,OAAC;KACtC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;KAC3D,MAAM,EAAE,CAAC;AAMZ,SAAS,2BAA2B,CAClC,QAAwE,EACxE,OAAwB;IAExB,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4B,CAAC;IACjD,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QACnE,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC;gBAC7B,OAAO,EAAE,wCAAwC,WAAW,mBAAmB;aAChF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACrD,MAAM,OAAO,GACX,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,YAAY,CAAC,MAAM;QAC1C,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3D,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EACL,uEAAuE;gBACvE,cAAc,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;SAC1C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,0BAA0B,GAAG,OAAC;KACjC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC;IAC1C,cAAc,EAAE,sBAAa;IAC7B,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,2DAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7D,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,2BAA2B,CAAC,CAAC;AAE5C,MAAM,oCAAoC,GAAG,OAAC;KAC3C,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,iBAAiB,CAAC;IACpD,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,2DAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7D,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,2BAA2B,CAAC,CAAC;AAM/B,QAAA,mBAAmB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9D,+BAA+B;IAC/B,0BAA0B;IAC1B,oCAAoC;CACrC,CAAwC,CAAC;AAG7B,QAAA,4BAA4B,GACvC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,YAAY,EAAE,CAAC,CAAC;AAO1D,MAAa,6BAA8B,SAAQ,KAAK;IACtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AALD,sEAKC;AAOD,SAAgB,oBAAoB,CAClC,cAAuB,EACvB,YAAiD;IAEjD,MAAM,SAAS,GAAyB;QACtC,IAAI,EAAE,iBAAiB,CAAC,OAAO;QAC/B,cAAc;QACd,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;KACzD,CAAC;IACF,MAAM,MAAM,GAAG,2BAAmB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,6BAA6B,CACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,SAAS;QACZ,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC;KACpD,CAAC,CAAC;AACL,CAAC;AAMD,SAAgB,8BAA8B,CAC5C,YAAiD;IAEjD,MAAM,SAAS,GAAmC;QAChD,IAAI,EAAE,iBAAiB,CAAC,iBAAiB;QACzC,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC;KACzD,CAAC;IACF,MAAM,MAAM,GAAG,2BAAmB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,6BAA6B,CACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,SAAS;QACZ,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC;KACpD,CAAC,CAAC;AACL,CAAC;AAWD,SAAgB,sBAAsB,CACpC,UAAyD;IAEzD,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,UAAU,GAAG,UAAU,CAAC,mDAA2C,CAAC,CAAC;IAC3E,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACtE,MAAM,MAAM,GAAG,2BAAmB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,6BAA6B,CACrC,4BAA4B,MAAM,CAAC,KAAK,CAAC,MAAM;aAC5C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;aAC7B,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAeD,SAAgB,sBAAsB,CACpC,QAAmC;IAEnC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,iBAAiB,CAAC,YAAY;YACjC,OAAO,SAAS,CAAC;QACnB,KAAK,iBAAiB,CAAC,OAAO,CAAC;QAC/B,KAAK,iBAAiB,CAAC,iBAAiB;YACtC,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAQD,MAAM,4BAA4B,GAAG,gBAAO,CAAC,KAAK,CAAC;AAanD,SAAgB,sBAAsB,CACpC,IAAa,EACb,WAAqC,EACrC,QAAmC;IAEnC,MAAM,IAAI,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,KAAK,GACT,IAAI,CAAC,IAAI,KAAK,iBAAiB,CAAC,OAAO;QACrC,CAAC,CAAC,IAAI,CAAC,cAAc;QACrB,CAAC,CAAC,4BAA4B,CAAC;IACnC,OAAO,IAAA,yBAAgB,EAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClF,CAAC"}
|
|
@@ -3,7 +3,6 @@ import { type CapabilityRef } from './capability-ref';
|
|
|
3
3
|
import { type CapabilityAuthorityEffect } from './authority-effect';
|
|
4
4
|
import { type CapabilityReach } from './capability-reach';
|
|
5
5
|
import { CapabilityRiskTier } from './permission-profile';
|
|
6
|
-
import { type OrgRole } from '../../tenant';
|
|
7
6
|
import { type HumanBaseline } from './capability-human-baseline';
|
|
8
7
|
export interface JsonSchemaRefStub {
|
|
9
8
|
$ref: string;
|
|
@@ -23,7 +22,6 @@ export interface ShellCommandDescriptor {
|
|
|
23
22
|
sideEffects: string;
|
|
24
23
|
reach?: CapabilityReach;
|
|
25
24
|
authorityEffect?: CapabilityAuthorityEffect;
|
|
26
|
-
defaultBaselineOrgRole?: OrgRole;
|
|
27
25
|
humanBaseline?: HumanBaseline;
|
|
28
26
|
outputSchema?: JsonSchemaRefStub;
|
|
29
27
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"shell-command-descriptor.d.ts","sourceRoot":"","sources":["../../../src/capability/lib/shell-command-descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAEnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,
|
|
1
|
+
{"version":3,"file":"shell-command-descriptor.d.ts","sourceRoot":"","sources":["../../../src/capability/lib/shell-command-descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,kBAAkB,EAEnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,6BAA6B,CAAC;AAQrC,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,eAAO,MAAM,uBAAuB,EAE9B,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;AA2FnC,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,oBAAoB,EAAE,aAAa,EAAE,CAAC;IAMtC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IAMzB,eAAe,EAAE,MAAM,EAAE,CAAC;IAwB1B,aAAa,EAAE,OAAO,CAAC;IAYvB,QAAQ,EAAE,kBAAkB,CAAC;IAa7B,gBAAgB,EAAE,OAAO,CAAC;IAQ1B,WAAW,EAAE,MAAM,CAAC;IAYpB,KAAK,CAAC,EAAE,eAAe,CAAC;IAexB,eAAe,CAAC,EAAE,yBAAyB,CAAC;IAQ5C,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC;AAED,eAAO,MAAM,4BAA4B,EAqB1B,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC"}
|
|
@@ -6,7 +6,6 @@ const capability_ref_1 = require("./capability-ref");
|
|
|
6
6
|
const authority_effect_1 = require("./authority-effect");
|
|
7
7
|
const capability_reach_1 = require("./capability-reach");
|
|
8
8
|
const permission_profile_1 = require("./permission-profile");
|
|
9
|
-
const tenant_1 = require("../../tenant");
|
|
10
9
|
const capability_human_baseline_1 = require("./capability-human-baseline");
|
|
11
10
|
exports.JsonSchemaRefStubSchema = zod_1.z.object({
|
|
12
11
|
$ref: zod_1.z.string().min(1),
|
|
@@ -26,9 +25,8 @@ exports.ShellCommandDescriptorSchema = zod_1.z
|
|
|
26
25
|
sideEffects: zod_1.z.string().min(1).max(1000),
|
|
27
26
|
reach: capability_reach_1.CapabilityReachSchema.optional(),
|
|
28
27
|
authorityEffect: authority_effect_1.CapabilityAuthorityEffectSchema.optional(),
|
|
29
|
-
defaultBaselineOrgRole: tenant_1.OrgRoleSchema.optional(),
|
|
30
28
|
humanBaseline: capability_human_baseline_1.HumanBaselineSchema.optional(),
|
|
31
29
|
outputSchema: exports.JsonSchemaRefStubSchema.optional(),
|
|
32
30
|
})
|
|
33
|
-
.
|
|
31
|
+
.strict();
|
|
34
32
|
//# sourceMappingURL=shell-command-descriptor.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"shell-command-descriptor.js","sourceRoot":"","sources":["../../../src/capability/lib/shell-command-descriptor.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,qDAA2E;AAC3E,yDAG4B;AAC5B,yDAG4B;AAC5B,6DAG8B;AAC9B,
|
|
1
|
+
{"version":3,"file":"shell-command-descriptor.js","sourceRoot":"","sources":["../../../src/capability/lib/shell-command-descriptor.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,qDAA2E;AAC3E,yDAG4B;AAC5B,yDAG4B;AAC5B,6DAG8B;AAC9B,2EAGqC;AAYxB,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAiC,CAAC;AA4MtB,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpC,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,oCAAmB,CAAC;IAClD,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3C,aAAa,EAAE,OAAC,CAAC,OAAO,EAAE;IAC1B,QAAQ,EAAE,6CAAwB;IAClC,gBAAgB,EAAE,OAAC,CAAC,OAAO,EAAE;IAI7B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACxC,KAAK,EAAE,wCAAqB,CAAC,QAAQ,EAAE;IACvC,eAAe,EAAE,kDAA+B,CAAC,QAAQ,EAAE;IAC3D,aAAa,EAAE,+CAAmB,CAAC,QAAQ,EAAE;IAC7C,YAAY,EAAE,+BAAuB,CAAC,QAAQ,EAAE;CACjD,CAAC;KACD,MAAM,EAAuC,CAAC"}
|
|
@@ -30,7 +30,6 @@ export declare const ProjectedCapabilitySchema: z.ZodObject<{
|
|
|
30
30
|
trustedContextProjection: z.ZodOptional<z.ZodType<import("../../capability").TrustedContextProjection, unknown, z.core.$ZodTypeInternals<import("../../capability").TrustedContextProjection, unknown>>>;
|
|
31
31
|
requiredBindings: z.ZodOptional<z.ZodArray<z.ZodType<import("../../capability").RequiredResourceRoleBinding, unknown, z.core.$ZodTypeInternals<import("../../capability").RequiredResourceRoleBinding, unknown>>>>;
|
|
32
32
|
safeForAgents: z.ZodOptional<z.ZodBoolean>;
|
|
33
|
-
defaultBaselineOrgRole: z.ZodOptional<z.ZodEnum<typeof import("../../tenant").OrgRole>>;
|
|
34
33
|
humanBaseline: z.ZodOptional<z.ZodType<import("../../capability").HumanBaseline, unknown, z.core.$ZodTypeInternals<import("../../capability").HumanBaseline, unknown>>>;
|
|
35
34
|
invocation: z.ZodType<CapabilityInvocationBinding, unknown, z.core.$ZodTypeInternals<CapabilityInvocationBinding, unknown>>;
|
|
36
35
|
provenance: z.ZodType<ProjectedCapabilityProvenance, unknown, z.core.$ZodTypeInternals<ProjectedCapabilityProvenance, unknown>>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"projected-capability.d.ts","sourceRoot":"","sources":["../../../src/capability-projection/lib/projected-capability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,iCAAiC,CAAC;AAUzC,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,eAAO,MAAM,mCAAmC,EAAE,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAO5E,CAAC;AAoBd,MAAM,WAAW,mBAAoB,SAAQ,8BAA8B;IACzE,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;CACpD;AAED,eAAO,MAAM,yBAAyB
|
|
1
|
+
{"version":3,"file":"projected-capability.d.ts","sourceRoot":"","sources":["../../../src/capability-projection/lib/projected-capability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,iCAAiC,CAAC;AAUzC,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,eAAO,MAAM,mCAAmC,EAAE,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAO5E,CAAC;AAoBd,MAAM,WAAW,mBAAoB,SAAQ,8BAA8B;IACzE,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;CACpD;AAED,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;kBAIO,CAAC"}
|
|
@@ -26,6 +26,7 @@ export declare const ExecutionContextEnvironmentSchema: z.ZodType<ExecutionConte
|
|
|
26
26
|
export interface ExecutionContextCapability {
|
|
27
27
|
ref: CapabilityRef;
|
|
28
28
|
inputHash?: string;
|
|
29
|
+
operationInstance?: string;
|
|
29
30
|
}
|
|
30
31
|
export declare const ExecutionContextCapabilitySchema: z.ZodType<ExecutionContextCapability>;
|
|
31
32
|
export interface ExecutionContextResource {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"execution-context.d.ts","sourceRoot":"","sources":["../../../src/execution-context/lib/execution-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,sBAAsB,EAEvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,wBAAwB,EAEzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,kBAAkB,EAGlB,KAAK,QAAQ,EACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAiCnB,oBAAY,uBAAuB;IAEjC,QAAQ,aAAa;IAErB,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,6BAA6B,2CAEzC,CAAC;AAQF,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,uBAAuB,CAAC;IACnC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,eAAO,MAAM,2BAA2B,EAKlC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAYvC,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,wBAAwB,CAAC;CAChC;AAED,eAAO,MAAM,iCAAiC,EAGxC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;AAU7C,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,aAAa,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"execution-context.d.ts","sourceRoot":"","sources":["../../../src/execution-context/lib/execution-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,sBAAsB,EAEvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,wBAAwB,EAEzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,kBAAkB,EAGlB,KAAK,QAAQ,EACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAiCnB,oBAAY,uBAAuB;IAEjC,QAAQ,aAAa;IAErB,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,6BAA6B,2CAEzC,CAAC;AAQF,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,uBAAuB,CAAC;IACnC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,eAAO,MAAM,2BAA2B,EAKlC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAYvC,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,wBAAwB,CAAC;CAChC;AAED,eAAO,MAAM,iCAAiC,EAGxC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;AAU7C,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,aAAa,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IAUnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,eAAO,MAAM,gCAAgC,EAIvC,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;AA4C5C,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,MAAM,CAAC;IAkBZ,cAAc,CAAC,EAAE,kBAAkB,CAAC;CACrC;AAED,eAAO,MAAM,8BAA8B,EAYrC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAa1C,MAAM,WAAW,2BAA2B;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,eAAO,MAAM,iCAAiC,EAMxC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;AAa7C,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,CAAC;IAChB,WAAW,EAAE,2BAA2B,CAAC;IACzC,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAC9B,UAAU,EAAE,0BAA0B,CAAC;IACvC,QAAQ,CAAC,EAAE,wBAAwB,CAAC;IACpC,WAAW,CAAC,EAAE,2BAA2B,CAAC;IAM1C,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAM5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAuC7B,WAAW,CAAC,EAAE,eAAe,CAAC;IAU9B,eAAe,CAAC,EAAE,sBAAsB,CAAC;IAqBzC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAkB9B,UAAU,CAAC,EAAE,kBAAkB,CAAC;CACjC;AAED,eAAO,MAAM,sBAAsB,EAkB7B,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC"}
|
|
@@ -29,6 +29,7 @@ exports.ExecutionContextEnvironmentSchema = zod_1.z.object({
|
|
|
29
29
|
exports.ExecutionContextCapabilitySchema = zod_1.z.object({
|
|
30
30
|
ref: capability_1.CapabilityRefSchema,
|
|
31
31
|
inputHash: zod_1.z.string().min(1).optional(),
|
|
32
|
+
operationInstance: zod_1.z.string().min(1).optional(),
|
|
32
33
|
});
|
|
33
34
|
exports.ExecutionContextResourceSchema = zod_1.z.object({
|
|
34
35
|
ref: zod_1.z
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"execution-context.js","sourceRoot":"","sources":["../../../src/execution-context/lib/execution-context.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,uDAG6B;AAC7B,iDAK0B;AAC1B,2CAA0D;AAC1D,uEAGqC;AACrC,uCAKqB;AACrB,qCAAqD;AACrD,2CAGuB;AACvB,uCAOmB;AAiCnB,IAAY,uBAKX;AALD,WAAY,uBAAuB;IAEjC,gDAAqB,CAAA;IAErB,gDAAqB,CAAA;AACvB,CAAC,EALW,uBAAuB,uCAAvB,uBAAuB,QAKlC;AAEY,QAAA,6BAA6B,GAAG,OAAC,CAAC,UAAU,CACvD,uBAAuB,CACxB,CAAC;AAeW,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,SAAS,EAAE,qCAA6B;IACxC,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE;CAC/B,CAAqC,CAAC;AAiB1B,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACxD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,sDAA8B;CACrC,CAA2C,CAAC;
|
|
1
|
+
{"version":3,"file":"execution-context.js","sourceRoot":"","sources":["../../../src/execution-context/lib/execution-context.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,uDAG6B;AAC7B,iDAK0B;AAC1B,2CAA0D;AAC1D,uEAGqC;AACrC,uCAKqB;AACrB,qCAAqD;AACrD,2CAGuB;AACvB,uCAOmB;AAiCnB,IAAY,uBAKX;AALD,WAAY,uBAAuB;IAEjC,gDAAqB,CAAA;IAErB,gDAAqB,CAAA;AACvB,CAAC,EALW,uBAAuB,uCAAvB,uBAAuB,QAKlC;AAEY,QAAA,6BAA6B,GAAG,OAAC,CAAC,UAAU,CACvD,uBAAuB,CACxB,CAAC;AAeW,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,SAAS,EAAE,qCAA6B;IACxC,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE;CAC/B,CAAqC,CAAC;AAiB1B,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACxD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,sDAA8B;CACrC,CAA2C,CAAC;AAyBhC,QAAA,gCAAgC,GAAG,OAAC,CAAC,MAAM,CAAC;IACvD,GAAG,EAAE,gCAAmB;IACxB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAChD,CAA0C,CAAC;AAkE/B,QAAA,8BAA8B,GAAG,OAAC,CAAC,MAAM,CAAC;IACrD,GAAG,EAAE,OAAC;SACH,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,MAAM,CAAC,mCAAyB,EAAE;QACjC,OAAO,EACL,4DAA4D;YAC5D,uDAAuD;YACvD,kEAAkE;YAClE,2BAA2B;KAC9B,CAAC;IACJ,cAAc,EAAE,gCAAwB,CAAC,QAAQ,EAAE;CACpD,CAAwC,CAAC;AAqB7B,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACxD,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC/C,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC7D,eAAe,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,mBAAmB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAA2C,CAAC;AA+HhC,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,0BAAgB;IACzB,MAAM,EAAE,qBAAY;IACpB,KAAK,EAAE,sBAAc;IACrB,WAAW,EAAE,yCAAiC;IAC9C,KAAK,EAAE,mCAA2B,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,wCAAgC;IAC5C,QAAQ,EAAE,sCAA8B,CAAC,QAAQ,EAAE;IACnD,WAAW,EAAE,yCAAiC,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,4BAAkB,CAAC,CAAC,QAAQ,EAAE;IAClD,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,WAAW,EAAE,+BAAqB,CAAC,QAAQ,EAAE;IAC7C,eAAe,EAAE,4CAA4B,CAAC,QAAQ,EAAE;IACxD,QAAQ,EAAE,qCAAwB,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,kCAAwB,CAAC,QAAQ,EAAE;CAChD,CAAgC,CAAC"}
|
|
@@ -7,13 +7,21 @@ export interface DelegatedAuthority {
|
|
|
7
7
|
readonly capabilities: readonly string[];
|
|
8
8
|
readonly resourceScope?: readonly string[];
|
|
9
9
|
readonly authorizedBy?: string;
|
|
10
|
+
readonly boundOperation?: DelegatedBoundOperation;
|
|
10
11
|
}
|
|
12
|
+
export interface DelegatedBoundOperation {
|
|
13
|
+
readonly capability: string;
|
|
14
|
+
readonly instance: string;
|
|
15
|
+
}
|
|
16
|
+
export declare const DelegatedBoundOperationSchema: z.ZodType<DelegatedBoundOperation>;
|
|
17
|
+
export declare function isBoundOperationExclusive(capabilities: readonly string[], boundOperation: DelegatedBoundOperation): boolean;
|
|
11
18
|
export declare const DelegatedAuthoritySchema: z.ZodType<DelegatedAuthority>;
|
|
12
19
|
export declare enum DelegatedAuthorityVerdict {
|
|
13
20
|
Admitted = "admitted",
|
|
14
21
|
DelegationRequired = "delegation_required",
|
|
15
22
|
CapabilityNotDelegated = "capability_not_delegated",
|
|
16
|
-
ResourceOutsideDelegatedScope = "resource_outside_delegated_scope"
|
|
23
|
+
ResourceOutsideDelegatedScope = "resource_outside_delegated_scope",
|
|
24
|
+
OperationInstanceMismatch = "operation_instance_mismatch"
|
|
17
25
|
}
|
|
18
26
|
export declare const DelegatedAuthorityVerdictSchema: z.ZodEnum<typeof DelegatedAuthorityVerdict>;
|
|
19
27
|
export interface DelegatedAuthorityCheck {
|
|
@@ -21,6 +29,7 @@ export interface DelegatedAuthorityCheck {
|
|
|
21
29
|
readonly delegation: DelegatedAuthority | undefined;
|
|
22
30
|
readonly capability: string;
|
|
23
31
|
readonly resource?: string;
|
|
32
|
+
readonly instance?: string;
|
|
24
33
|
}
|
|
25
34
|
export declare function evaluateDelegatedAuthority(check: DelegatedAuthorityCheck): DelegatedAuthorityVerdict;
|
|
26
35
|
//# sourceMappingURL=delegated-authority.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"delegated-authority.d.ts","sourceRoot":"","sources":["../../../src/subject/lib/delegated-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAsB,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;
|
|
1
|
+
{"version":3,"file":"delegated-authority.d.ts","sourceRoot":"","sources":["../../../src/subject/lib/delegated-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAsB,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;AAwC/E,MAAM,WAAW,kBAAkB;IAEjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAK9B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAK7B,QAAQ,CAAC,UAAU,EAAE,SAAS,YAAY,EAAE,CAAC;IAM7C,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAMzC,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAM3C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAc/B,QAAQ,CAAC,cAAc,CAAC,EAAE,uBAAuB,CAAC;CACnD;AAGD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAID,eAAO,MAAM,6BAA6B,EAK3B,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAOlD,wBAAgB,yBAAyB,CACvC,YAAY,EAAE,SAAS,MAAM,EAAE,EAC/B,cAAc,EAAE,uBAAuB,GACtC,OAAO,CAET;AAED,eAAO,MAAM,wBAAwB,EAwB7B,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAMtC,oBAAY,yBAAyB;IAEnC,QAAQ,aAAa;IAMrB,kBAAkB,wBAAwB;IAE1C,sBAAsB,6BAA6B;IAEnD,6BAA6B,qCAAqC;IAMlE,yBAAyB,gCAAgC;CAC1D;AAED,eAAO,MAAM,+BAA+B,6CAE3C,CAAC;AAEF,MAAM,WAAW,uBAAuB;IAEtC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAElC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAEpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAM5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAM3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAkBD,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,uBAAuB,GAC7B,yBAAyB,CA6B3B"}
|
|
@@ -1,10 +1,20 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.DelegatedAuthorityVerdictSchema = exports.DelegatedAuthorityVerdict = exports.DelegatedAuthoritySchema = void 0;
|
|
3
|
+
exports.DelegatedAuthorityVerdictSchema = exports.DelegatedAuthorityVerdict = exports.DelegatedAuthoritySchema = exports.DelegatedBoundOperationSchema = void 0;
|
|
4
|
+
exports.isBoundOperationExclusive = isBoundOperationExclusive;
|
|
4
5
|
exports.evaluateDelegatedAuthority = evaluateDelegatedAuthority;
|
|
5
6
|
const zod_1 = require("zod");
|
|
6
7
|
const subject_1 = require("./subject");
|
|
7
8
|
const OpaqueEntrySchema = zod_1.z.string().min(1);
|
|
9
|
+
exports.DelegatedBoundOperationSchema = zod_1.z
|
|
10
|
+
.object({
|
|
11
|
+
capability: OpaqueEntrySchema,
|
|
12
|
+
instance: OpaqueEntrySchema,
|
|
13
|
+
})
|
|
14
|
+
.strict();
|
|
15
|
+
function isBoundOperationExclusive(capabilities, boundOperation) {
|
|
16
|
+
return capabilities.length === 1 && capabilities[0] === boundOperation.capability;
|
|
17
|
+
}
|
|
8
18
|
exports.DelegatedAuthoritySchema = zod_1.z
|
|
9
19
|
.object({
|
|
10
20
|
delegationId: zod_1.z.string().min(1),
|
|
@@ -13,14 +23,27 @@ exports.DelegatedAuthoritySchema = zod_1.z
|
|
|
13
23
|
capabilities: zod_1.z.array(OpaqueEntrySchema).min(1).readonly(),
|
|
14
24
|
resourceScope: zod_1.z.array(OpaqueEntrySchema).min(1).readonly().optional(),
|
|
15
25
|
authorizedBy: zod_1.z.string().min(1).optional(),
|
|
26
|
+
boundOperation: exports.DelegatedBoundOperationSchema.optional(),
|
|
16
27
|
})
|
|
17
|
-
.strict()
|
|
28
|
+
.strict()
|
|
29
|
+
.superRefine((authority, context) => {
|
|
30
|
+
if (authority.boundOperation !== undefined &&
|
|
31
|
+
!isBoundOperationExclusive(authority.capabilities, authority.boundOperation)) {
|
|
32
|
+
context.addIssue({
|
|
33
|
+
code: 'custom',
|
|
34
|
+
path: ['capabilities'],
|
|
35
|
+
message: 'a delegation bound to one operation instance must lend exactly ' +
|
|
36
|
+
'[boundOperation.capability] and nothing else.',
|
|
37
|
+
});
|
|
38
|
+
}
|
|
39
|
+
});
|
|
18
40
|
var DelegatedAuthorityVerdict;
|
|
19
41
|
(function (DelegatedAuthorityVerdict) {
|
|
20
42
|
DelegatedAuthorityVerdict["Admitted"] = "admitted";
|
|
21
43
|
DelegatedAuthorityVerdict["DelegationRequired"] = "delegation_required";
|
|
22
44
|
DelegatedAuthorityVerdict["CapabilityNotDelegated"] = "capability_not_delegated";
|
|
23
45
|
DelegatedAuthorityVerdict["ResourceOutsideDelegatedScope"] = "resource_outside_delegated_scope";
|
|
46
|
+
DelegatedAuthorityVerdict["OperationInstanceMismatch"] = "operation_instance_mismatch";
|
|
24
47
|
})(DelegatedAuthorityVerdict || (exports.DelegatedAuthorityVerdict = DelegatedAuthorityVerdict = {}));
|
|
25
48
|
exports.DelegatedAuthorityVerdictSchema = zod_1.z.nativeEnum(DelegatedAuthorityVerdict);
|
|
26
49
|
function evaluateDelegatedAuthority(check) {
|
|
@@ -38,6 +61,10 @@ function evaluateDelegatedAuthority(check) {
|
|
|
38
61
|
!delegation.resourceScope.includes(check.resource)) {
|
|
39
62
|
return DelegatedAuthorityVerdict.ResourceOutsideDelegatedScope;
|
|
40
63
|
}
|
|
64
|
+
if (delegation.boundOperation !== undefined &&
|
|
65
|
+
check.instance !== delegation.boundOperation.instance) {
|
|
66
|
+
return DelegatedAuthorityVerdict.OperationInstanceMismatch;
|
|
67
|
+
}
|
|
41
68
|
return DelegatedAuthorityVerdict.Admitted;
|
|
42
69
|
}
|
|
43
70
|
//# sourceMappingURL=delegated-authority.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"delegated-authority.js","sourceRoot":"","sources":["../../../src/subject/lib/delegated-authority.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"delegated-authority.js","sourceRoot":"","sources":["../../../src/subject/lib/delegated-authority.ts"],"names":[],"mappings":";;;AA6GA,8DAKC;AA8FD,gEA+BC;AA/OD,6BAAwB;AAExB,uCAA+E;AA6F/E,MAAM,iBAAiB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAE/B,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,CAAC;IACN,UAAU,EAAE,iBAAiB;IAC7B,QAAQ,EAAE,iBAAiB;CAC5B,CAAC;KACD,MAAM,EAAwC,CAAC;AAOlD,SAAgB,yBAAyB,CACvC,YAA+B,EAC/B,cAAuC;IAEvC,OAAO,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,UAAU,CAAC;AACpF,CAAC;AAEY,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,KAAK,EAAE,4BAAkB;IACzB,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,4BAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtE,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,cAAc,EAAE,qCAA6B,CAAC,QAAQ,EAAE;CACzD,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;IAClC,IACE,SAAS,CAAC,cAAc,KAAK,SAAS;QACtC,CAAC,yBAAyB,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,CAAC,cAAc,CAAC,EAC5E,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EACL,iEAAiE;gBACjE,+CAA+C;SAClD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAkC,CAAC;AAMtC,IAAY,yBAmBX;AAnBD,WAAY,yBAAyB;IAEnC,kDAAqB,CAAA;IAMrB,uEAA0C,CAAA;IAE1C,gFAAmD,CAAA;IAEnD,+FAAkE,CAAA;IAMlE,sFAAyD,CAAA;AAC3D,CAAC,EAnBW,yBAAyB,yCAAzB,yBAAyB,QAmBpC;AAEY,QAAA,+BAA+B,GAAG,OAAC,CAAC,UAAU,CACzD,yBAAyB,CAC1B,CAAC;AAuCF,SAAgB,0BAA0B,CACxC,KAA8B;IAE9B,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC7B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,WAAW,KAAK,qBAAW,CAAC,YAAY;YACnD,CAAC,CAAC,yBAAyB,CAAC,kBAAkB;YAC9C,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC;IACzC,CAAC;IAGD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,OAAO,yBAAyB,CAAC,sBAAsB,CAAC;IAC1D,CAAC;IACD,IACE,UAAU,CAAC,aAAa,KAAK,SAAS;QACtC,KAAK,CAAC,QAAQ,KAAK,SAAS;QAC5B,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAClD,CAAC;QACD,OAAO,yBAAyB,CAAC,6BAA6B,CAAC;IACjE,CAAC;IAID,IACE,UAAU,CAAC,cAAc,KAAK,SAAS;QACvC,KAAK,CAAC,QAAQ,KAAK,UAAU,CAAC,cAAc,CAAC,QAAQ,EACrD,CAAC;QACD,OAAO,yBAAyB,CAAC,yBAAyB,CAAC;IAC7D,CAAC;IACD,OAAO,yBAAyB,CAAC,QAAQ,CAAC;AAC5C,CAAC"}
|
|
@@ -10,7 +10,8 @@ export declare enum SubjectKind {
|
|
|
10
10
|
Runner = "runner",
|
|
11
11
|
ExternalSubject = "external-subject",
|
|
12
12
|
Anon = "anon",
|
|
13
|
-
Organization = "organization"
|
|
13
|
+
Organization = "organization",
|
|
14
|
+
OrgAdministrators = "org-administrators"
|
|
14
15
|
}
|
|
15
16
|
export declare const SubjectKindSchema: z.ZodEnum<typeof SubjectKind>;
|
|
16
17
|
export interface ActingForRef {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"subject.d.ts","sourceRoot":"","sources":["../../../src/subject/lib/subject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmBxB,oBAAY,WAAW;IACrB,IAAI,SAAS;IACb,KAAK,UAAU;IACf,GAAG,QAAQ;IACX,SAAS,eAAe;IACxB,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,eAAe,qBAAqB;IACpC,IAAI,SAAS;IAkBb,YAAY,iBAAiB;
|
|
1
|
+
{"version":3,"file":"subject.d.ts","sourceRoot":"","sources":["../../../src/subject/lib/subject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmBxB,oBAAY,WAAW;IACrB,IAAI,SAAS;IACb,KAAK,UAAU;IACf,GAAG,QAAQ;IACX,SAAS,eAAe;IACxB,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,eAAe,qBAAqB;IACpC,IAAI,SAAS;IAkBb,YAAY,iBAAiB;IAe7B,iBAAiB,uBAAuB;CACzC;AAED,eAAO,MAAM,iBAAiB,+BAA4B,CAAC;AAY3D,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,WAAW,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IAqBX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAelB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,eAAO,MAAM,kBAAkB,EAOhB,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;AAWvC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,WAAW,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,YAAY,CAAC;CAC1B;AAED,eAAO,MAAM,gBAAgB,EAOd,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAwBrC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,eAAO,MAAM,qBAAqB,EAKnB,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;AAQ1C,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC,GACvC,MAAM,CAER;AAOD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAgBvD"}
|
|
@@ -17,6 +17,7 @@ var SubjectKind;
|
|
|
17
17
|
SubjectKind["ExternalSubject"] = "external-subject";
|
|
18
18
|
SubjectKind["Anon"] = "anon";
|
|
19
19
|
SubjectKind["Organization"] = "organization";
|
|
20
|
+
SubjectKind["OrgAdministrators"] = "org-administrators";
|
|
20
21
|
})(SubjectKind || (exports.SubjectKind = SubjectKind = {}));
|
|
21
22
|
exports.SubjectKindSchema = zod_1.z.nativeEnum(SubjectKind);
|
|
22
23
|
exports.ActingForRefSchema = zod_1.z
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"subject.js","sourceRoot":"","sources":["../../../src/subject/lib/subject.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"subject.js","sourceRoot":"","sources":["../../../src/subject/lib/subject.ts"],"names":[],"mappings":";;;AAgMA,gDAIC;AAOD,0CAgBC;AA3ND,6BAAwB;AAmBxB,IAAY,WA4CX;AA5CD,WAAY,WAAW;IACrB,4BAAa,CAAA;IACb,8BAAe,CAAA;IACf,0BAAW,CAAA;IACX,uCAAwB,CAAA;IACxB,kCAAmB,CAAA;IACnB,8BAAe,CAAA;IACf,4BAAa,CAAA;IACb,gCAAiB,CAAA;IACjB,mDAAoC,CAAA;IACpC,4BAAa,CAAA;IAkBb,4CAA6B,CAAA;IAe7B,uDAAwC,CAAA;AAC1C,CAAC,EA5CW,WAAW,2BAAX,WAAW,QA4CtB;AAEY,QAAA,iBAAiB,GAAG,OAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAqD9C,QAAA,kBAAkB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,IAAI,EAAE,yBAAiB;IACvB,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,MAAM,EAA6B,CAAC;AAkB1B,QAAA,gBAAgB,GAAG,OAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,yBAAiB;IACvB,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,SAAS,EAAE,0BAAkB,CAAC,QAAQ,EAAE;CACzC,CAAC;KACD,MAAM,EAA2B,CAAC;AA6BxB,QAAA,qBAAqB,GAAG,OAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC;IAClC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtB,CAAC;KACD,MAAM,EAAgC,CAAC;AAQ1C,SAAgB,kBAAkB,CAChC,OAAwC;IAExC,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;AACzC,CAAC;AAOD,SAAgB,eAAe,CAAC,GAAW;IACzC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,UAAU,IAAI,CAAC,IAAI,UAAU,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,wBAAwB,GAAG,yDAAyD,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,yBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,wBAAwB,GAAG,OAAO,IAAI,+BAA+B,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;AACnC,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@xemahq/contracts",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.51.0",
|
|
4
4
|
"description": "Consolidated Xema OS kernel wire contracts — pure types + zod schemas for the kernel protocol surfaces. One package, one npm scope, wildcard per-surface subpath exports. No framework deps; the one runtime dependency beside zod is the OpenFGA syntax transformer the authorization-module composer runs.",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"author": "Neuralchowder Inc. <developer@xema.dev> (https://xema.dev)",
|