@xemahq/contracts 0.70.0 → 0.72.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/.source-stamp.json +2 -2
- package/dist/authorization-module/lib/platform-authorization-modules.d.ts.map +1 -1
- package/dist/authorization-module/lib/platform-authorization-modules.js +1 -1
- package/dist/authorization-module/lib/platform-authorization-modules.js.map +1 -1
- package/dist/authorization-module/platform/xema_capability.fga +4 -2
- package/dist/authorization-module/platform/xema_capability.fga.yaml +10 -0
- package/dist/authorization-module/platform/xema_core.fga +25 -5
- package/dist/authorization-module/platform/xema_core.fga.yaml +121 -0
- package/dist/authzen/lib/org-authority-contextual-tuple.d.ts +17 -0
- package/dist/authzen/lib/org-authority-contextual-tuple.d.ts.map +1 -1
- package/dist/authzen/lib/org-authority-contextual-tuple.js +66 -8
- package/dist/authzen/lib/org-authority-contextual-tuple.js.map +1 -1
- package/dist/authzen/lib/xema-authzen-profile.d.ts.map +1 -1
- package/dist/authzen/lib/xema-authzen-profile.js.map +1 -1
- package/dist/biome/lib/biome-component-process-facts.d.ts.map +1 -1
- package/dist/biome/lib/biome-component-process-facts.js.map +1 -1
- package/dist/biome/lib/biome-component.d.ts +5 -0
- package/dist/biome/lib/biome-component.d.ts.map +1 -1
- package/dist/biome/lib/biome-component.js +9 -2
- package/dist/biome/lib/biome-component.js.map +1 -1
- package/dist/biome/lib/biome-manifest.d.ts +6 -0
- package/dist/biome/lib/biome-manifest.d.ts.map +1 -1
- package/dist/biome/lib/biome-manifest.js +6 -10
- package/dist/biome/lib/biome-manifest.js.map +1 -1
- package/dist/biome/xema-biome.schema.json +10 -0
- package/dist/deployment/index.d.ts +3 -0
- package/dist/deployment/index.d.ts.map +1 -1
- package/dist/deployment/index.js +3 -0
- package/dist/deployment/index.js.map +1 -1
- package/dist/deployment/lib/artifact-signer-trust.d.ts +60 -0
- package/dist/deployment/lib/artifact-signer-trust.d.ts.map +1 -0
- package/dist/deployment/lib/artifact-signer-trust.js +154 -0
- package/dist/deployment/lib/artifact-signer-trust.js.map +1 -0
- package/dist/deployment/lib/resolved-deployment.d.ts +38 -0
- package/dist/deployment/lib/resolved-deployment.d.ts.map +1 -0
- package/dist/deployment/lib/resolved-deployment.js +103 -0
- package/dist/deployment/lib/resolved-deployment.js.map +1 -0
- package/dist/deployment/lib/trust-domain.d.ts +3 -0
- package/dist/deployment/lib/trust-domain.d.ts.map +1 -1
- package/dist/deployment/lib/trust-domain.js +17 -1
- package/dist/deployment/lib/trust-domain.js.map +1 -1
- package/dist/deployment/lib/trust-partition.d.ts +28 -0
- package/dist/deployment/lib/trust-partition.d.ts.map +1 -0
- package/dist/deployment/lib/trust-partition.js +93 -0
- package/dist/deployment/lib/trust-partition.js.map +1 -0
- package/dist/distribution/index.d.ts +2 -0
- package/dist/distribution/index.d.ts.map +1 -1
- package/dist/distribution/index.js +1 -0
- package/dist/distribution/index.js.map +1 -1
- package/dist/distribution/lib/distribution-lock.d.ts +36 -1
- package/dist/distribution/lib/distribution-lock.d.ts.map +1 -1
- package/dist/distribution/lib/distribution-lock.js +171 -3
- package/dist/distribution/lib/distribution-lock.js.map +1 -1
- package/dist/distribution/lib/distribution.d.ts +2 -0
- package/dist/distribution/lib/distribution.d.ts.map +1 -1
- package/dist/distribution/lib/distribution.js +2 -0
- package/dist/distribution/lib/distribution.js.map +1 -1
- package/dist/distribution/lib/nexus-endpoint-specs.d.ts +1 -0
- package/dist/distribution/lib/nexus-endpoint-specs.d.ts.map +1 -1
- package/dist/distribution/lib/nexus-endpoint-specs.js +4 -4
- package/dist/distribution/lib/nexus-endpoint-specs.js.map +1 -1
- package/dist/distribution/lib/verified-resolved-deployment.d.ts +7 -0
- package/dist/distribution/lib/verified-resolved-deployment.d.ts.map +1 -0
- package/dist/distribution/lib/verified-resolved-deployment.js +3 -0
- package/dist/distribution/lib/verified-resolved-deployment.js.map +1 -0
- package/dist/distribution/lib/verify-resolved-deployment.d.ts +30 -0
- package/dist/distribution/lib/verify-resolved-deployment.d.ts.map +1 -0
- package/dist/distribution/lib/verify-resolved-deployment.js +117 -0
- package/dist/distribution/lib/verify-resolved-deployment.js.map +1 -0
- package/dist/process-topology/lib/process-topology.d.ts +18 -2
- package/dist/process-topology/lib/process-topology.d.ts.map +1 -1
- package/dist/process-topology/lib/process-topology.js +43 -2
- package/dist/process-topology/lib/process-topology.js.map +1 -1
- package/dist/process-topology/lib/resolve-process-topology.d.ts +3 -0
- package/dist/process-topology/lib/resolve-process-topology.d.ts.map +1 -1
- package/dist/process-topology/lib/resolve-process-topology.js +32 -3
- package/dist/process-topology/lib/resolve-process-topology.js.map +1 -1
- package/package.json +1 -1
package/dist/.source-stamp.json
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-authorization-modules.d.ts","sourceRoot":"","sources":["../../../src/authorization-module/lib/platform-authorization-modules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA4BxB,oBAAY,2BAA2B;IACrC,IAAI,cAAc;IAClB,UAAU,oBAAoB;IAC9B,OAAO,iBAAiB;CACzB;AAED,eAAO,MAAM,iCAAiC,+CAE7C,CAAC;AAQF,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAS7D,eAAO,MAAM,kBAAkB,cAAc,CAAC;AAG9C,eAAO,MAAM,yBAAyB,EAAE,SAAS,2BAA2B,EACtB,CAAC;AAGvD,eAAO,MAAM,8BAA8B,uDAIhC,CAAC;AAQZ,eAAO,MAAM,4BAA4B,2BAA2C,CAAC;AAGrF,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAU7C,oBAAY,0BAA0B;IACpC,MAAM,gBAAgB;CACvB;AAED,eAAO,MAAM,gCAAgC,8CAE5C,CAAC;AAEF,eAAO,MAAM,+BAA+B,oDAIjC,CAAC;AAGZ,eAAO,MAAM,sCAAsC,EAAE,QAAQ,CAC3D,MAAM,CAAC,0BAA0B,EAAE,SAAS,MAAM,EAAE,CAAC,CAGrD,CAAC;
|
|
1
|
+
{"version":3,"file":"platform-authorization-modules.d.ts","sourceRoot":"","sources":["../../../src/authorization-module/lib/platform-authorization-modules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA4BxB,oBAAY,2BAA2B;IACrC,IAAI,cAAc;IAClB,UAAU,oBAAoB;IAC9B,OAAO,iBAAiB;CACzB;AAED,eAAO,MAAM,iCAAiC,+CAE7C,CAAC;AAQF,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAS7D,eAAO,MAAM,kBAAkB,cAAc,CAAC;AAG9C,eAAO,MAAM,yBAAyB,EAAE,SAAS,2BAA2B,EACtB,CAAC;AAGvD,eAAO,MAAM,8BAA8B,uDAIhC,CAAC;AAQZ,eAAO,MAAM,4BAA4B,2BAA2C,CAAC;AAGrF,eAAO,MAAM,oBAAoB,WAAW,CAAC;AAU7C,oBAAY,0BAA0B;IACpC,MAAM,gBAAgB;CACvB;AAED,eAAO,MAAM,gCAAgC,8CAE5C,CAAC;AAEF,eAAO,MAAM,+BAA+B,oDAIjC,CAAC;AAGZ,eAAO,MAAM,sCAAsC,EAAE,QAAQ,CAC3D,MAAM,CAAC,0BAA0B,EAAE,SAAS,MAAM,EAAE,CAAC,CAGrD,CAAC;AAgBH,eAAO,MAAM,8BAA8B,EAAE,QAAQ,CACnD,MAAM,CAAC,2BAA2B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC,CAehF,CAAC;AAGH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAsBD,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CA2D3E,CAAC;AAGL,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,MAAM,GACd,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAQ7C"}
|
|
@@ -42,7 +42,7 @@ exports.PLATFORM_AUTHORIZATION_EXPORTS = Object.freeze({
|
|
|
42
42
|
runner: Object.freeze([]),
|
|
43
43
|
app: Object.freeze([]),
|
|
44
44
|
'external-subject': Object.freeze([]),
|
|
45
|
-
org: Object.freeze(['member', 'admin']),
|
|
45
|
+
org: Object.freeze(['member', 'owner', 'admin']),
|
|
46
46
|
team: Object.freeze(['member']),
|
|
47
47
|
role: Object.freeze(['assignee']),
|
|
48
48
|
}),
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-authorization-modules.js","sourceRoot":"","sources":["../../../src/authorization-module/lib/platform-authorization-modules.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"platform-authorization-modules.js","sourceRoot":"","sources":["../../../src/authorization-module/lib/platform-authorization-modules.ts"],"names":[],"mappings":";;;AAkOA,kEAUC;AA5OD,6BAAwB;AAExB,2CAGuB;AAuBvB,IAAY,2BAIX;AAJD,WAAY,2BAA2B;IACrC,iDAAkB,CAAA;IAClB,6DAA8B,CAAA;IAC9B,uDAAwB,CAAA;AAC1B,CAAC,EAJW,2BAA2B,2CAA3B,2BAA2B,QAItC;AAEY,QAAA,iCAAiC,GAAG,OAAC,CAAC,UAAU,CAC3D,2BAA2B,CAC5B,CAAC;AAQW,QAAA,sBAAsB,GAAG,sBAAsB,CAAC;AAShD,QAAA,kBAAkB,GAAG,WAAW,CAAC;AAGjC,QAAA,yBAAyB,GACpC,MAAM,CAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CAAC;AAG1C,QAAA,8BAA8B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1D,SAAS;IACT,eAAe;IACf,cAAc;CACN,CAAC,CAAC;AAQC,QAAA,4BAA4B,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAU,CAAC,CAAC;AAGxE,QAAA,oBAAoB,GAAG,QAAQ,CAAC;AAU7C,IAAY,0BAEX;AAFD,WAAY,0BAA0B;IACpC,oDAAsB,CAAA;AACxB,CAAC,EAFW,0BAA0B,0CAA1B,0BAA0B,QAErC;AAEY,QAAA,gCAAgC,GAAG,OAAC,CAAC,UAAU,CAC1D,0BAA0B,CAC3B,CAAC;AAEW,QAAA,+BAA+B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3D,WAAW;IACX,YAAY;IACZ,YAAY;CACJ,CAAC,CAAC;AAGC,QAAA,sCAAsC,GAE/C,MAAM,CAAC,MAAM,CAAC;IAChB,CAAC,0BAA0B,CAAC,MAAM,CAAC,EAAE,uCAA+B;CACrE,CAAC,CAAC;AAgBU,QAAA,8BAA8B,GAEvC,MAAM,CAAC,MAAM,CAAC;IAChB,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QAChD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;KAClC,CAAC;IACF,CAAC,2BAA2B,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3D,CAAC,2BAA2B,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;CACzD,CAAC,CAAC;AA4BU,QAAA,qBAAqB,GAChC,MAAM,CAAC,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;QACrB,KAAK,EAAE,kBAAkB;QACzB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;KAC3E,CAAC;IACF,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;QAC1B,KAAK,EAAE,eAAe;QACtB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;KACjF,CAAC;IACF,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC;QAC3B,KAAK,EAAE,eAAe;QACtB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;KAC9C,CAAC;IAUF,CAAC,sCAA4B,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;QAC5C,KAAK,EAAE,oBAAoB;QAC3B,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;YACvB,iCAAuB,CAAC,MAAM;YAC9B,iCAAuB,CAAC,MAAM;YAC9B,iCAAuB,CAAC,MAAM;YAC9B,iCAAuB,CAAC,UAAU;YAClC,iCAAuB,CAAC,UAAU;SACnC,CAAC;KACH,CAAC;IACF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;QACzB,KAAK,EAAE,cAAc;QACrB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;KAC3F,CAAC;IACF,GAAG,MAAM,CAAC,WAAW,CAEjB;QACE,CAAC,eAAe,EAAE,gBAAgB,CAAC;QACnC,CAAC,cAAc,EAAE,SAAS,CAAC;QAG3B,CAAC,0BAA0B,EAAE,gBAAgB,CAAC;QAC9C,CAAC,oBAAoB,EAAE,YAAY,CAAC;QACpC,CAAC,+BAA+B,EAAE,YAAY,CAAC;QAC/C,CAAC,aAAa,EAAE,QAAQ,CAAC;QACzB,CAAC,uBAAuB,EAAE,eAAe,CAAC;QAC1C,CAAC,mBAAmB,EAAE,eAAe,CAAC;KAEzC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACvB,IAAI;QACJ,MAAM,CAAC,MAAM,CAAC;YACZ,KAAK;YACL,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;SACjF,CAAC;KACH,CAAC,CACH;CACF,CAAC,CAAC;AAGL,SAAgB,2BAA2B,CACzC,OAAe;IAEf,OAAO,MAAM,CAAC,MAAM,CAClB,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,6BAAqB,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC;SAChD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CACrD,CACF,CAAC;AACJ,CAAC"}
|
|
@@ -12,8 +12,10 @@ module xema_capability
|
|
|
12
12
|
# `user:*` on `granted_to` is the public-grant idiom: a PLATFORM-owned
|
|
13
13
|
# wildcard, written only by authorization-api's grant door.
|
|
14
14
|
#
|
|
15
|
-
# `org#admin` is the org's ADMINISTRATORS — owner
|
|
16
|
-
#
|
|
15
|
+
# `org#admin` is the org's ADMINISTRATORS — org owner or org admin. A grant to
|
|
16
|
+
# `org:<o>#admin` never admits installation authority (`org#platform_admin`,
|
|
17
|
+
# owner directive 2026-10-08: no implication across scopes). It is never a
|
|
18
|
+
# stored tuple: the PDP adds it per decision
|
|
17
19
|
# as a CONTEXTUAL tuple from the verified org-authority instrument
|
|
18
20
|
# (`buildOrgAuthorityContextualTuples`, `@xemahq/contracts/authzen`), so a
|
|
19
21
|
# grant to `org:<o>#admin` admits exactly the subjects that instrument names
|
|
@@ -130,6 +130,16 @@ tests:
|
|
|
130
130
|
object: capability:o1|notification~3aannouncement.publish@1|org
|
|
131
131
|
assertions:
|
|
132
132
|
granted_to: false
|
|
133
|
+
- name: an administrator grant denies a platform admin of the SAME org (installation authority is not org#admin)
|
|
134
|
+
tuples:
|
|
135
|
+
- user: user:carol
|
|
136
|
+
relation: platform_admin
|
|
137
|
+
object: org:o1
|
|
138
|
+
check:
|
|
139
|
+
- user: user:carol
|
|
140
|
+
object: capability:o1|notification~3aannouncement.publish@1|org
|
|
141
|
+
assertions:
|
|
142
|
+
granted_to: false
|
|
133
143
|
- name: an administrator grant denies an administrator of a DIFFERENT org
|
|
134
144
|
tuples:
|
|
135
145
|
- user: user:carol
|
|
@@ -11,13 +11,31 @@ module xema_core
|
|
|
11
11
|
#
|
|
12
12
|
# DEFAULT DENY. Org membership grants nothing by itself: a relation that
|
|
13
13
|
# admits org members says so (`org#member` as a direct subject type), and is
|
|
14
|
-
# evaluated by READING a tuple. `org#admin`
|
|
15
|
-
# reaches the PDP as a CONTEXTUAL
|
|
16
|
-
# token (D2
|
|
14
|
+
# evaluated by READING a tuple. `org#owner`, `org#admin` and
|
|
15
|
+
# `org#platform_admin` are never written: each reaches the PDP as a CONTEXTUAL
|
|
16
|
+
# tuple derived per request from the verified token (D2,
|
|
17
|
+
# `buildOrgAuthorityContextualTuples`).
|
|
18
|
+
#
|
|
19
|
+
# NO IMPLICATION ACROSS SCOPES (owner directive 2026-10-08, binding):
|
|
20
|
+
# - `owner` — the org OWNER. Owner >= admin is stated HERE, in the
|
|
21
|
+
# model (`admin: [user] or owner`), not only by the fact
|
|
22
|
+
# writer; an application's top role (`owner from org`)
|
|
23
|
+
# is this.
|
|
24
|
+
# - `admin` — the org's OWN administrators (org owner or org admin).
|
|
25
|
+
# - `platform_admin` — the INSTALLATION operator's realm role, as the PDP
|
|
26
|
+
# states it for a decision. It is INERT: no org, project,
|
|
27
|
+
# artifact, session or integration relation reads it, and
|
|
28
|
+
# a biome cannot reference it. Installation authority is
|
|
29
|
+
# not org authority; the ONLY way an installation
|
|
30
|
+
# operator gains authority in an org is identity-api's
|
|
31
|
+
# explicit, audited recovery grant (which makes them an
|
|
32
|
+
# org owner/admin, i.e. `owner`/`admin` here). The
|
|
33
|
+
# relation stays defined only so a PDP that still states
|
|
34
|
+
# the fact as a contextual tuple is not refused.
|
|
17
35
|
#
|
|
18
36
|
# `org` implements `xema.parent` as the ROOT parent: an object parented by the
|
|
19
37
|
# org (an org-level project, artifact or session) inherits only the org
|
|
20
|
-
#
|
|
38
|
+
# administrators' authority — never the members', never the installation's.
|
|
21
39
|
# ═══════════════════════════════════════════════════════════════════════════
|
|
22
40
|
|
|
23
41
|
# `is_self` is NEVER a stored tuple: the PDP supplies `user:<id>#is_self@user:<id>`
|
|
@@ -51,7 +69,9 @@ type organization
|
|
|
51
69
|
type org
|
|
52
70
|
relations
|
|
53
71
|
define member: [user, agent, app, service]
|
|
54
|
-
define
|
|
72
|
+
define owner: [user]
|
|
73
|
+
define admin: [user] or owner
|
|
74
|
+
define platform_admin: [user]
|
|
55
75
|
define xema_admin: admin
|
|
56
76
|
define xema_write: admin
|
|
57
77
|
define xema_read: admin
|
|
@@ -20,6 +20,17 @@ tuples:
|
|
|
20
20
|
- user: user:root
|
|
21
21
|
relation: admin
|
|
22
22
|
object: org:org1
|
|
23
|
+
# The INSTALLATION operator's realm role as the PDP states it for org1
|
|
24
|
+
# (contextual in production). INERT: it admits nothing in the org (owner
|
|
25
|
+
# directive 2026-10-08, no implication across scopes).
|
|
26
|
+
- user: user:ops
|
|
27
|
+
relation: platform_admin
|
|
28
|
+
object: org:org1
|
|
29
|
+
# The org OWNER alone, with NO `admin` tuple: the model itself derives
|
|
30
|
+
# owner >= admin (`admin: [user] or owner`).
|
|
31
|
+
- user: user:own
|
|
32
|
+
relation: owner
|
|
33
|
+
object: org:org1
|
|
23
34
|
- user: org:org2
|
|
24
35
|
relation: parent
|
|
25
36
|
object: xema_artifact:org2|a9
|
|
@@ -411,3 +422,113 @@ tests:
|
|
|
411
422
|
object: xema_integration:org1|i1
|
|
412
423
|
assertions:
|
|
413
424
|
bound_scope: false
|
|
425
|
+
- name: installation authority alone admits nothing in the org (no implication across scopes)
|
|
426
|
+
check:
|
|
427
|
+
- user: user:ops
|
|
428
|
+
object: org:org1
|
|
429
|
+
assertions:
|
|
430
|
+
owner: false
|
|
431
|
+
admin: false
|
|
432
|
+
platform_admin: true
|
|
433
|
+
xema_admin: false
|
|
434
|
+
xema_write: false
|
|
435
|
+
xema_read: false
|
|
436
|
+
may_delegate_for: false
|
|
437
|
+
- user: user:ops
|
|
438
|
+
object: project:org1|p1
|
|
439
|
+
assertions:
|
|
440
|
+
xema_admin: false
|
|
441
|
+
xema_write: false
|
|
442
|
+
xema_read: false
|
|
443
|
+
- user: user:ops
|
|
444
|
+
object: xema_artifact:org1|a1
|
|
445
|
+
assertions:
|
|
446
|
+
can_read: false
|
|
447
|
+
can_write: false
|
|
448
|
+
can_delete: false
|
|
449
|
+
- user: user:ops
|
|
450
|
+
object: xema_artifact:org1|a2
|
|
451
|
+
assertions:
|
|
452
|
+
can_read: false
|
|
453
|
+
can_delete: false
|
|
454
|
+
- user: user:ops
|
|
455
|
+
object: xema_session:org1|s1
|
|
456
|
+
assertions:
|
|
457
|
+
xema_read: false
|
|
458
|
+
can_act: false
|
|
459
|
+
- user: user:ops
|
|
460
|
+
object: xema_artifact:org2|a9
|
|
461
|
+
assertions:
|
|
462
|
+
can_read: false
|
|
463
|
+
list_objects:
|
|
464
|
+
- user: user:ops
|
|
465
|
+
type: xema_artifact
|
|
466
|
+
assertions:
|
|
467
|
+
can_read: []
|
|
468
|
+
- name: an org admin administers the org, and is not its owner
|
|
469
|
+
check:
|
|
470
|
+
- user: user:root
|
|
471
|
+
object: org:org1
|
|
472
|
+
assertions:
|
|
473
|
+
owner: false
|
|
474
|
+
admin: true
|
|
475
|
+
platform_admin: false
|
|
476
|
+
xema_admin: true
|
|
477
|
+
xema_write: true
|
|
478
|
+
xema_read: true
|
|
479
|
+
may_delegate_for: true
|
|
480
|
+
- user: user:root
|
|
481
|
+
object: project:org1|p1
|
|
482
|
+
assertions:
|
|
483
|
+
xema_admin: true
|
|
484
|
+
- user: user:root
|
|
485
|
+
object: xema_artifact:org1|a1
|
|
486
|
+
assertions:
|
|
487
|
+
can_delete: true
|
|
488
|
+
- name: the org owner is an org admin by the MODEL, with no admin fact
|
|
489
|
+
check:
|
|
490
|
+
- user: user:own
|
|
491
|
+
object: org:org1
|
|
492
|
+
assertions:
|
|
493
|
+
owner: true
|
|
494
|
+
admin: true
|
|
495
|
+
platform_admin: false
|
|
496
|
+
xema_admin: true
|
|
497
|
+
xema_write: true
|
|
498
|
+
xema_read: true
|
|
499
|
+
may_delegate_for: true
|
|
500
|
+
- user: user:own
|
|
501
|
+
object: project:org1|p1
|
|
502
|
+
assertions:
|
|
503
|
+
xema_admin: true
|
|
504
|
+
- user: user:own
|
|
505
|
+
object: xema_artifact:org1|a1
|
|
506
|
+
assertions:
|
|
507
|
+
can_delete: true
|
|
508
|
+
- user: user:own
|
|
509
|
+
object: xema_artifact:org1|a2
|
|
510
|
+
assertions:
|
|
511
|
+
can_delete: true
|
|
512
|
+
- user: user:own
|
|
513
|
+
object: org:org2
|
|
514
|
+
assertions:
|
|
515
|
+
admin: false
|
|
516
|
+
xema_read: false
|
|
517
|
+
- name: integration configure is the configurer or the org administrators, never installation authority
|
|
518
|
+
tuples:
|
|
519
|
+
- user: org:org1
|
|
520
|
+
relation: parent
|
|
521
|
+
object: xema_integration:org1|i9
|
|
522
|
+
check:
|
|
523
|
+
- user: user:ops
|
|
524
|
+
object: xema_integration:org1|i9
|
|
525
|
+
assertions:
|
|
526
|
+
configure: false
|
|
527
|
+
- user: user:own
|
|
528
|
+
object: xema_integration:org1|i9
|
|
529
|
+
assertions:
|
|
530
|
+
configure: true
|
|
531
|
+
- user: user:root
|
|
532
|
+
object: xema_integration:org1|i9
|
|
533
|
+
assertions:
|
|
534
|
+
configure: true
|
|
@@ -1,6 +1,8 @@
|
|
|
1
1
|
import type { XemaOrgAuthorityInstrument } from './xema-authzen-profile';
|
|
2
2
|
export declare const XEMA_ORG_OBJECT_TYPE = "org";
|
|
3
3
|
export declare const XEMA_ORG_ADMIN_RELATION = "admin";
|
|
4
|
+
export declare const XEMA_ORG_OWNER_RELATION = "owner";
|
|
5
|
+
export declare const XEMA_ORG_PLATFORM_ADMIN_RELATION = "platform_admin";
|
|
4
6
|
export interface AuthzContextualTuple {
|
|
5
7
|
readonly user: string;
|
|
6
8
|
readonly relation: string;
|
|
@@ -24,4 +26,19 @@ export declare function buildOrgAuthorityContextualTuples(input: {
|
|
|
24
26
|
readonly orgId: string;
|
|
25
27
|
readonly instrument: XemaOrgAuthorityInstrument | undefined;
|
|
26
28
|
}): readonly AuthzContextualTuple[];
|
|
29
|
+
export interface XemaOrgAuthorityConformanceVector {
|
|
30
|
+
readonly name: string;
|
|
31
|
+
readonly subject: {
|
|
32
|
+
readonly kind: string;
|
|
33
|
+
readonly id: string;
|
|
34
|
+
};
|
|
35
|
+
readonly orgId: string;
|
|
36
|
+
readonly instrument: XemaOrgAuthorityInstrument | undefined;
|
|
37
|
+
readonly expect: {
|
|
38
|
+
readonly tuples: readonly AuthzContextualTuple[];
|
|
39
|
+
} | {
|
|
40
|
+
readonly refusal: OrgAuthorityContextualTupleRefusal;
|
|
41
|
+
};
|
|
42
|
+
}
|
|
43
|
+
export declare const XEMA_ORG_AUTHORITY_CONFORMANCE_VECTORS: readonly XemaOrgAuthorityConformanceVector[];
|
|
27
44
|
//# sourceMappingURL=org-authority-contextual-tuple.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"org-authority-contextual-tuple.d.ts","sourceRoot":"","sources":["../../../src/authzen/lib/org-authority-contextual-tuple.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;
|
|
1
|
+
{"version":3,"file":"org-authority-contextual-tuple.d.ts","sourceRoot":"","sources":["../../../src/authzen/lib/org-authority-contextual-tuple.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AA0CzE,eAAO,MAAM,oBAAoB,QAAQ,CAAC;AAC1C,eAAO,MAAM,uBAAuB,UAAU,CAAC;AAM/C,eAAO,MAAM,uBAAuB,UAAU,CAAC;AAM/C,eAAO,MAAM,gCAAgC,mBAAmB,CAAC;AAGjE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAGD,oBAAY,kCAAkC;IAE5C,cAAc,qBAAqB;IAEnC,cAAc,qBAAqB;CACpC;AAED,qBAAa,gCAAiC,SAAQ,KAAK;IAC7C,QAAQ,CAAC,OAAO,EAAE,kCAAkC;gBAA3C,OAAO,EAAE,kCAAkC;CAQjE;AAGD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAExD;AAQD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnE;AAUD,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,0BAA0B,GAAG,SAAS,CAAC;CAC7D,GAAG,SAAS,oBAAoB,EAAE,CA4BlC;AAGD,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAE5D,QAAQ,CAAC,MAAM,EACX;QAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,oBAAoB,EAAE,CAAA;KAAE,GACpD;QAAE,QAAQ,CAAC,OAAO,EAAE,kCAAkC,CAAA;KAAE,CAAC;CAC9D;AAQD,eAAO,MAAM,sCAAsC,EAAE,SAAS,iCAAiC,EAmD3F,CAAC"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.OrgAuthorityContextualTupleError = exports.OrgAuthorityContextualTupleRefusal = exports.XEMA_ORG_ADMIN_RELATION = exports.XEMA_ORG_OBJECT_TYPE = void 0;
|
|
3
|
+
exports.XEMA_ORG_AUTHORITY_CONFORMANCE_VECTORS = exports.OrgAuthorityContextualTupleError = exports.OrgAuthorityContextualTupleRefusal = exports.XEMA_ORG_PLATFORM_ADMIN_RELATION = exports.XEMA_ORG_OWNER_RELATION = exports.XEMA_ORG_ADMIN_RELATION = exports.XEMA_ORG_OBJECT_TYPE = void 0;
|
|
4
4
|
exports.buildXemaOrgObject = buildXemaOrgObject;
|
|
5
5
|
exports.buildOrgAdministratorsUserset = buildOrgAdministratorsUserset;
|
|
6
6
|
exports.buildOrgAuthorityContextualTuples = buildOrgAuthorityContextualTuples;
|
|
@@ -10,6 +10,8 @@ const tenant_1 = require("../../tenant");
|
|
|
10
10
|
const xema_capability_resource_1 = require("./xema-capability-resource");
|
|
11
11
|
exports.XEMA_ORG_OBJECT_TYPE = 'org';
|
|
12
12
|
exports.XEMA_ORG_ADMIN_RELATION = 'admin';
|
|
13
|
+
exports.XEMA_ORG_OWNER_RELATION = 'owner';
|
|
14
|
+
exports.XEMA_ORG_PLATFORM_ADMIN_RELATION = 'platform_admin';
|
|
13
15
|
var OrgAuthorityContextualTupleRefusal;
|
|
14
16
|
(function (OrgAuthorityContextualTupleRefusal) {
|
|
15
17
|
OrgAuthorityContextualTupleRefusal["SubjectNotUser"] = "subject_not_user";
|
|
@@ -43,12 +45,68 @@ function buildOrgAuthorityContextualTuples(input) {
|
|
|
43
45
|
!(0, tenant_1.orgRoleSatisfies)(instrument.orgRole, tenant_1.OrgRole.Admin)) {
|
|
44
46
|
throw new OrgAuthorityContextualTupleError(OrgAuthorityContextualTupleRefusal.RoleBelowAdmin);
|
|
45
47
|
}
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
48
|
+
const user = (0, subject_1.subjectRefToString)({ kind: subject_1.SubjectKind.User, id: subject.id });
|
|
49
|
+
const object = buildXemaOrgObject(orgId);
|
|
50
|
+
if (instrument.kind === audit_1.AuditAuthorityKind.PlatformAdmin) {
|
|
51
|
+
return [{ user, relation: exports.XEMA_ORG_PLATFORM_ADMIN_RELATION, object }];
|
|
52
|
+
}
|
|
53
|
+
if (instrument.orgRole === tenant_1.OrgRole.Owner) {
|
|
54
|
+
return [
|
|
55
|
+
{ user, relation: exports.XEMA_ORG_OWNER_RELATION, object },
|
|
56
|
+
{ user, relation: exports.XEMA_ORG_ADMIN_RELATION, object },
|
|
57
|
+
];
|
|
58
|
+
}
|
|
59
|
+
return [{ user, relation: exports.XEMA_ORG_ADMIN_RELATION, object }];
|
|
53
60
|
}
|
|
61
|
+
exports.XEMA_ORG_AUTHORITY_CONFORMANCE_VECTORS = Object.freeze([
|
|
62
|
+
{
|
|
63
|
+
name: 'no instrument derives no fact',
|
|
64
|
+
subject: { kind: subject_1.SubjectKind.User, id: 'u1' },
|
|
65
|
+
orgId: 'o1',
|
|
66
|
+
instrument: undefined,
|
|
67
|
+
expect: { tuples: [] },
|
|
68
|
+
},
|
|
69
|
+
{
|
|
70
|
+
name: 'an org admin is the org administrator only, never the owner',
|
|
71
|
+
subject: { kind: subject_1.SubjectKind.User, id: 'u1' },
|
|
72
|
+
orgId: 'o1',
|
|
73
|
+
instrument: { kind: audit_1.AuditAuthorityKind.OrgRole, orgRole: tenant_1.OrgRole.Admin },
|
|
74
|
+
expect: { tuples: [{ user: 'user:u1', relation: exports.XEMA_ORG_ADMIN_RELATION, object: 'org:o1' }] },
|
|
75
|
+
},
|
|
76
|
+
{
|
|
77
|
+
name: 'an org owner is the org owner AND an org administrator',
|
|
78
|
+
subject: { kind: subject_1.SubjectKind.User, id: 'u1' },
|
|
79
|
+
orgId: 'o1',
|
|
80
|
+
instrument: { kind: audit_1.AuditAuthorityKind.OrgRole, orgRole: tenant_1.OrgRole.Owner },
|
|
81
|
+
expect: {
|
|
82
|
+
tuples: [
|
|
83
|
+
{ user: 'user:u1', relation: exports.XEMA_ORG_OWNER_RELATION, object: 'org:o1' },
|
|
84
|
+
{ user: 'user:u1', relation: exports.XEMA_ORG_ADMIN_RELATION, object: 'org:o1' },
|
|
85
|
+
],
|
|
86
|
+
},
|
|
87
|
+
},
|
|
88
|
+
{
|
|
89
|
+
name: 'a platform admin with no org role is installation authority, never org#admin',
|
|
90
|
+
subject: { kind: subject_1.SubjectKind.User, id: 'u1' },
|
|
91
|
+
orgId: 'o1',
|
|
92
|
+
instrument: { kind: audit_1.AuditAuthorityKind.PlatformAdmin },
|
|
93
|
+
expect: {
|
|
94
|
+
tuples: [{ user: 'user:u1', relation: exports.XEMA_ORG_PLATFORM_ADMIN_RELATION, object: 'org:o1' }],
|
|
95
|
+
},
|
|
96
|
+
},
|
|
97
|
+
{
|
|
98
|
+
name: 'a member instrument is refused',
|
|
99
|
+
subject: { kind: subject_1.SubjectKind.User, id: 'u1' },
|
|
100
|
+
orgId: 'o1',
|
|
101
|
+
instrument: { kind: audit_1.AuditAuthorityKind.OrgRole, orgRole: tenant_1.OrgRole.Member },
|
|
102
|
+
expect: { refusal: OrgAuthorityContextualTupleRefusal.RoleBelowAdmin },
|
|
103
|
+
},
|
|
104
|
+
{
|
|
105
|
+
name: 'an instrument on a non-user subject is refused',
|
|
106
|
+
subject: { kind: subject_1.SubjectKind.Agent, id: 'a1' },
|
|
107
|
+
orgId: 'o1',
|
|
108
|
+
instrument: { kind: audit_1.AuditAuthorityKind.PlatformAdmin },
|
|
109
|
+
expect: { refusal: OrgAuthorityContextualTupleRefusal.SubjectNotUser },
|
|
110
|
+
},
|
|
111
|
+
]);
|
|
54
112
|
//# sourceMappingURL=org-authority-contextual-tuple.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"org-authority-contextual-tuple.js","sourceRoot":"","sources":["../../../src/authzen/lib/org-authority-contextual-tuple.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"org-authority-contextual-tuple.js","sourceRoot":"","sources":["../../../src/authzen/lib/org-authority-contextual-tuple.ts"],"names":[],"mappings":";;;AAyFA,gDAEC;AAQD,sEAEC;AAUD,8EAgCC;AA/ID,uCAAiD;AACjD,2CAAgE;AAChE,yCAAyD;AAEzD,yEAAiE;AA2CpD,QAAA,oBAAoB,GAAG,KAAK,CAAC;AAC7B,QAAA,uBAAuB,GAAG,OAAO,CAAC;AAMlC,QAAA,uBAAuB,GAAG,OAAO,CAAC;AAMlC,QAAA,gCAAgC,GAAG,gBAAgB,CAAC;AAUjE,IAAY,kCAKX;AALD,WAAY,kCAAkC;IAE5C,yEAAmC,CAAA;IAEnC,yEAAmC,CAAA;AACrC,CAAC,EALW,kCAAkC,kDAAlC,kCAAkC,QAK7C;AAED,MAAa,gCAAiC,SAAQ,KAAK;IACpC;IAArB,YAAqB,OAA2C;QAC9D,KAAK,CACH,OAAO,KAAK,kCAAkC,CAAC,cAAc;YAC3D,CAAC,CAAC,gEAAgE;YAClE,CAAC,CAAC,yFAAyF,CAC9F,CAAC;QALiB,YAAO,GAAP,OAAO,CAAoC;QAM9D,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF;AATD,4EASC;AAGD,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,OAAO,GAAG,4BAAoB,IAAI,IAAA,8CAAmB,EAAC,KAAK,CAAC,EAAE,CAAC;AACjE,CAAC;AAQD,SAAgB,6BAA6B,CAAC,KAAa;IACzD,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,+BAAuB,EAAE,CAAC;AACnE,CAAC;AAUD,SAAgB,iCAAiC,CAAC,KAIjD;IACC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC7C,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACxC,IAAI,OAAO,CAAC,IAAI,KAAK,qBAAW,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,gCAAgC,CACxC,kCAAkC,CAAC,cAAc,CAClD,CAAC;IACJ,CAAC;IACD,IACE,UAAU,CAAC,IAAI,KAAK,0BAAkB,CAAC,OAAO;QAC9C,CAAC,IAAA,yBAAgB,EAAC,UAAU,CAAC,OAAO,EAAE,gBAAO,CAAC,KAAK,CAAC,EACpD,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,kCAAkC,CAAC,cAAc,CAClD,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,4BAAkB,EAAC,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,UAAU,CAAC,IAAI,KAAK,0BAAkB,CAAC,aAAa,EAAE,CAAC;QACzD,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,wCAAgC,EAAE,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,KAAK,gBAAO,CAAC,KAAK,EAAE,CAAC;QACzC,OAAO;YACL,EAAE,IAAI,EAAE,QAAQ,EAAE,+BAAuB,EAAE,MAAM,EAAE;YACnD,EAAE,IAAI,EAAE,QAAQ,EAAE,+BAAuB,EAAE,MAAM,EAAE;SACpD,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,+BAAuB,EAAE,MAAM,EAAE,CAAC,CAAC;AAC/D,CAAC;AAoBY,QAAA,sCAAsC,GACjD,MAAM,CAAC,MAAM,CAAC;IACZ;QACE,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE;QAC7C,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;KACvB;IACD;QACE,IAAI,EAAE,6DAA6D;QACnE,OAAO,EAAE,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE;QAC7C,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,EAAE,IAAI,EAAE,0BAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,gBAAO,CAAC,KAAK,EAAE;QACxE,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,+BAAuB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;KAC/F;IACD;QACE,IAAI,EAAE,wDAAwD;QAC9D,OAAO,EAAE,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE;QAC7C,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,EAAE,IAAI,EAAE,0BAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,gBAAO,CAAC,KAAK,EAAE;QACxE,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,+BAAuB,EAAE,MAAM,EAAE,QAAQ,EAAE;gBACxE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,+BAAuB,EAAE,MAAM,EAAE,QAAQ,EAAE;aACzE;SACF;KACF;IACD;QACE,IAAI,EAAE,8EAA8E;QACpF,OAAO,EAAE,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE;QAC7C,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,EAAE,IAAI,EAAE,0BAAkB,CAAC,aAAa,EAAE;QACtD,MAAM,EAAE;YACN,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,wCAAgC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;SAC5F;KACF;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE;QAC7C,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,EAAE,IAAI,EAAE,0BAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,gBAAO,CAAC,MAAM,EAAE;QACzE,MAAM,EAAE,EAAE,OAAO,EAAE,kCAAkC,CAAC,cAAc,EAAE;KACvE;IACD;QACE,IAAI,EAAE,gDAAgD;QACtD,OAAO,EAAE,EAAE,IAAI,EAAE,qBAAW,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE;QAC9C,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,EAAE,IAAI,EAAE,0BAAkB,CAAC,aAAa,EAAE;QACtD,MAAM,EAAE,EAAE,OAAO,EAAE,kCAAkC,CAAC,cAAc,EAAE;KACvE;CACF,CAAC,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"xema-authzen-profile.d.ts","sourceRoot":"","sources":["../../../src/authzen/lib/xema-authzen-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAQjD,OAAO,EAGL,WAAW,EACZ,MAAM,eAAe,CAAC;AA6BvB,eAAO,MAAM,0BAA0B,mHAS5B,CAAC;AAEZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjF,eAAO,MAAM,4BAA4B;;;;;;EAAqC,CAAC;
|
|
1
|
+
{"version":3,"file":"xema-authzen-profile.d.ts","sourceRoot":"","sources":["../../../src/authzen/lib/xema-authzen-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAQjD,OAAO,EAGL,WAAW,EACZ,MAAM,eAAe,CAAC;AA6BvB,eAAO,MAAM,0BAA0B,mHAS5B,CAAC;AAEZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjF,eAAO,MAAM,4BAA4B;;;;;;EAAqC,CAAC;AAe/E,eAAO,MAAM,gCAAgC;;;;;4BAQ3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AAQF,eAAO,MAAM,kCAAkC;;;;;;;kBAIpC,CAAC;AACZ,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAChD,OAAO,kCAAkC,CAC1C,CAAC;AAGF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;kBAM1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAY1E,eAAO,MAAM,oCAAoC,qCAEtC,CAAC;AAGZ,eAAO,MAAM,iCAAiC;;;;;kBAKnC,CAAC;AACZ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,iCAAiC,CACzC,CAAC;AASF,eAAO,MAAM,sBAAsB,QAAQ,CAAC;AAO5C,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAG/C,eAAO,MAAM,iCAAiC,QAAe,CAAC;AAE9D,eAAO,MAAM,6BAA6B,aAKtC,CAAC;AAGL,qBAAa,4BAA6B,SAAQ,KAAK;gBACzC,OAAO,EAAE,MAAM;CAI5B;AAGD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAYxE;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAGD,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,MAAM,GAAG,uBAAuB,CAQ5E;AAiBD,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACxD,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,OAAO,CAgBT;AAGD,eAAO,MAAM,yBAAyB;;;;kBAAwB,CAAC;AAM/D,eAAO,MAAM,uBAAuB;;;kBAIlC,CAAC;AA6BH,eAAO,MAAM,2BAA2B;;;;;;;;;kBAW7B,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAahF,eAAO,MAAM,yBAAyB;;;kBAK3B,CAAC;AACZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AA2B5E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;kBAU1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAG1E,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAOnC,CAAC;AACZ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,iCAAiC,CACzC,CAAC;AAWF,oBAAY,qBAAqB;IAE/B,cAAc,oBAAoB;IAElC,eAAe,sBAAsB;IAErC,oBAAoB,2BAA2B;IAE/C,kBAAkB,wBAAwB;IAE1C,sBAAsB,6BAA6B;IAEnD,6BAA6B,qCAAqC;IAElE,yBAAyB,gCAAgC;IAEzD,cAAc,oBAAoB;IAElC,kBAAkB,wBAAwB;IAQ1C,mBAAmB,0BAA0B;CAC9C;AAED,eAAO,MAAM,2BAA2B,yCAAsC,CAAC;AAO/E,oBAAY,oBAAoB;IAE9B,YAAY,mBAAmB;IAE/B,eAAe,qBAAqB;IAEpC,oBAAoB,0BAA0B;IAE9C,WAAW,iBAAiB;IAE5B,aAAa,mBAAmB;IAEhC,gBAAgB,sBAAsB;CACvC;AAED,eAAO,MAAM,0BAA0B,wCAAqC,CAAC;AAG7E,eAAO,MAAM,0BAA0B;;;;kBAM5B,CAAC;AAOZ,eAAO,MAAM,gCAAgC;;;;;;;;iBAI3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AAOF,eAAO,MAAM,0BAA0B;;;0DAKR,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"xema-authzen-profile.js","sourceRoot":"","sources":["../../../src/authzen/lib/xema-authzen-profile.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"xema-authzen-profile.js","sourceRoot":"","sources":["../../../src/authzen/lib/xema-authzen-profile.ts"],"names":[],"mappings":";;;AA8KA,8CAYC;AAQD,4DAQC;AAiBD,oDAmBC;AA9OD,6BAAwB;AAExB,yEAGoC;AAEpC,uCAAiD;AACjD,iDAA4D;AAC5D,+DAIiC;AACjC,uCAAuD;AACvD,2CAIuB;AACvB,yCAA6C;AAE7C,yDAI4B;AAC5B,yDAAkE;AAqBrD,QAAA,0BAA0B,GAAG,MAAM,CAAC,MAAM,CAAC;IACtD,qBAAW,CAAC,IAAI;IAChB,qBAAW,CAAC,KAAK;IACjB,qBAAW,CAAC,OAAO;IAInB,qBAAW,CAAC,GAAG;IACf,qBAAW,CAAC,eAAe;CACnB,CAAC,CAAC;AAIC,QAAA,4BAA4B,GAAG,OAAC,CAAC,IAAI,CAAC,kCAA0B,CAAC,CAAC;AAelE,QAAA,gCAAgC,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3E,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,0BAAkB,CAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,sBAAa;KACvB,CAAC;SACD,MAAM,EAAE;IACX,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,0BAAkB,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;CACzE,CAAC,CAAC;AAWU,QAAA,kCAAkC,GAAG,OAAC;KAChD,MAAM,CAAC;IACN,YAAY,EAAE,wCAAgC,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AAMC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,IAAI,EAAE,oCAA4B;IAClC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,UAAU,EAAE,0CAAkC,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AAaC,QAAA,oCAAoC,GAAG,MAAM,CAAC,MAAM,CAAC;IAChE,qBAAW,CAAC,YAAY;CAChB,CAAC,CAAC;AAGC,QAAA,iCAAiC,GAAG,OAAC;KAC/C,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,4CAAoC,CAAC;IAClD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtB,CAAC;KACD,MAAM,EAAE,CAAC;AAYC,QAAA,sBAAsB,GAAG,KAAK,CAAC;AAO/B,QAAA,2BAA2B,GAAG,GAAG,CAAC;AAGlC,QAAA,iCAAiC,GAAG,YAAY,CAAC;AAEjD,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,EAAE;KACR,KAAK,CAAC,sBAAsB,EAAE;IAC7B,OAAO,EACL,8GAA8G;CACjH,CAAC,CAAC;AAGL,MAAa,4BAA6B,SAAQ,KAAK;IACrD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AALD,oEAKC;AAGD,SAAgB,iBAAiB,CAAC,KAAa,EAAE,OAAe;IAC9D,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI;QAC5B,CAAC,OAAO,EAAE,KAAK,CAAC;QAChB,CAAC,SAAS,EAAE,OAAO,CAAC;KACZ,EAAE,CAAC;QACX,IAAI,CAAC,yCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,4BAA4B,CACpC,sBAAsB,IAAI,KAAK,OAAO,oDAAoD,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,KAAK,GAAG,mCAA2B,GAAG,OAAO,EAAE,CAAC;AAC5D,CAAC;AAQD,SAAgB,wBAAwB,CAAC,EAAU;IACjD,IAAI,CAAC,qCAA6B,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACzD,MAAM,IAAI,4BAA4B,CACpC,8BAA8B,EAAE,iCAAiC,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,mCAA2B,CAAC,CAAC;IACtD,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;AACrE,CAAC;AAiBD,SAAgB,oBAAoB,CAClC,QAAwD,EACxD,KAAoB;IAEpB,IAAI,QAAQ,CAAC,IAAI,KAAK,wDAA6B,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,IAAA,oDAAyB,EAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtD,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,8BAAsB,EAAE,CAAC;QAC7C,OAAO,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC;IAC/B,CAAC;IACD,MAAM,MAAM,GAAG,qCAA6B,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC;AAC/D,CAAC;AAGY,QAAA,yBAAyB,GAAG,wCAAqB,CAAC;AAMlD,QAAA,uBAAuB,GAAG,sCAAmB,CAAC,MAAM,CAAC;IAChE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE;QAC1C,OAAO,EAAE,iDAAiD;KAC3D,CAAC;CACH,CAAC,CAAC;AA6BU,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,MAAM,EAAE,gCAAY,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,+CAA2B,CAAC,QAAQ,EAAE;IAC7C,WAAW,EAAE,+BAAqB,CAAC,QAAQ,EAAE;IAC7C,QAAQ,EAAE,qCAAwB,CAAC,QAAQ,EAAE;IAC7C,WAAW,EAAE,qDAAiC,CAAC,QAAQ,EAAE;IACzD,sBAAsB,EAAE,gCAAwB,CAAC,QAAQ,EAAE;IAC3D,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAChD,CAAC;KACD,MAAM,EAAE,CAAC;AAcC,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtB,CAAC;KACD,MAAM,EAAE,CAAC;AA4BC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,UAAU,EAAE,kCAAwB,CAAC,QAAQ,EAAE;IAC/C,QAAQ,EAAE,iCAAyB,CAAC,QAAQ,EAAE;IAC9C,UAAU,EAAE,mCAA2B,CAAC,QAAQ,EAAE;IAClD,QAAQ,EAAE,+CAA4B,CAAC,QAAQ,EAAE;CAClD,CAAC;KACD,MAAM,EAAE,CAAC;AAIC,QAAA,iCAAiC,GAAG,OAAC;KAC/C,MAAM,CAAC;IACN,OAAO,EAAE,gCAAwB;IACjC,MAAM,EAAE,+BAAuB;IAC/B,QAAQ,EAAE,iCAAyB;IACnC,OAAO,EAAE,gCAAwB;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAcZ,IAAY,qBA2BX;AA3BD,WAAY,qBAAqB;IAE/B,2DAAkC,CAAA;IAElC,8DAAqC,CAAA;IAErC,wEAA+C,CAAA;IAE/C,mEAA0C,CAAA;IAE1C,4EAAmD,CAAA;IAEnD,2FAAkE,CAAA;IAElE,kFAAyD,CAAA;IAEzD,2DAAkC,CAAA;IAElC,mEAA0C,CAAA;IAQ1C,sEAA6C,CAAA;AAC/C,CAAC,EA3BW,qBAAqB,qCAArB,qBAAqB,QA2BhC;AAEY,QAAA,2BAA2B,GAAG,OAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;AAO/E,IAAY,oBAaX;AAbD,WAAY,oBAAoB;IAE9B,uDAA+B,CAAA;IAE/B,4DAAoC,CAAA;IAEpC,sEAA8C,CAAA;IAE9C,oDAA4B,CAAA;IAE5B,wDAAgC,CAAA;IAEhC,8DAAsC,CAAA;AACxC,CAAC,EAbW,oBAAoB,oCAApB,oBAAoB,QAa/B;AAEY,QAAA,0BAA0B,GAAG,OAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;AAGhE,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC;IACN,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,kCAA0B;CACjC,CAAC;KACD,MAAM,EAAE,CAAC;AAOC,QAAA,gCAAgC,GAAG,OAAC,CAAC,MAAM,CAAC;IACvD,WAAW,EAAE,mCAA2B,CAAC,QAAQ,EAAE;IACnD,KAAK,EAAE,kCAA0B,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,+CAA4B,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAUU,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC;IACN,IAAI,EAAE,kCAA0B;IAChC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC;KACD,GAAG,CAAC,0CAAuB,CAAC,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"biome-component-process-facts.d.ts","sourceRoot":"","sources":["../../../src/biome/lib/biome-component-process-facts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;
|
|
1
|
+
{"version":3,"file":"biome-component-process-facts.d.ts","sourceRoot":"","sources":["../../../src/biome/lib/biome-component-process-facts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA+DxB,eAAO,MAAM,gCAAgC;;;;;;;kBAuB3C,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"biome-component-process-facts.js","sourceRoot":"","sources":["../../../src/biome/lib/biome-component-process-facts.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,qFAAyE;
|
|
1
|
+
{"version":3,"file":"biome-component-process-facts.js","sourceRoot":"","sources":["../../../src/biome/lib/biome-component-process-facts.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,qFAAyE;AA6D5D,QAAA,gCAAgC,GAAG,IAAA,sDAAqB,EAAC;IACpE,SAAS,EAAE,IAAA,sDAAqB,EAAC;QAK/B,MAAM,EAAE,OAAC;aACN,MAAM,EAAE;aACR,IAAI,EAAE;aACN,GAAG,CAAC,EAAE,EAAE,+DAA+D,CAAC;KAC5E,CAAC,CAAC,QAAQ,EAAE;IACb,iBAAiB,EAAE,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC7C,oBAAoB,EAAE,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAChD,kBAAkB,EAAE,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC5B,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EACL,oEAAoE;gBACpE,0DAA0D;SAC7D,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}
|
|
@@ -2,6 +2,7 @@ import { z } from 'zod';
|
|
|
2
2
|
import { BiomeComponentArtifactKind, BiomeComponentEntrypointKind, BiomeComponentExecutionMode, BiomeComponentHostAbi, BiomeComponentKind, BiomeComponentProtocolKind, BiomeComponentScheduler, BiomeScalingMode, BiomeWorkerTaskQueueServes } from './biome-component-vocabulary';
|
|
3
3
|
import { type TaskQueuePlacement } from '../../execution-target';
|
|
4
4
|
import { TaskQueueName } from '../../workflow';
|
|
5
|
+
export declare const BiomeIdSchema: z.ZodString;
|
|
5
6
|
export declare const BiomeComponentArtifactSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
|
|
6
7
|
kind: z.ZodLiteral<BiomeComponentArtifactKind.PackageContent>;
|
|
7
8
|
path: z.ZodString;
|
|
@@ -79,6 +80,7 @@ export declare const BiomeWorkerNexusSchema: z.ZodObject<{
|
|
|
79
80
|
}, z.core.$strict>;
|
|
80
81
|
export type BiomeWorkerNexus = z.infer<typeof BiomeWorkerNexusSchema>;
|
|
81
82
|
export declare const BiomeWorkflowClientOfSchema: z.ZodObject<{
|
|
83
|
+
biome: z.ZodOptional<z.ZodString>;
|
|
82
84
|
component: z.ZodString;
|
|
83
85
|
taskQueue: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
|
|
84
86
|
name: z.ZodEnum<typeof TaskQueueName>;
|
|
@@ -183,6 +185,7 @@ export declare const BiomeComponentProtocolSchema: z.ZodDiscriminatedUnion<[z.Zo
|
|
|
183
185
|
kind: z.ZodString;
|
|
184
186
|
}, z.core.$strict>>>;
|
|
185
187
|
workflowClientOf: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
188
|
+
biome: z.ZodOptional<z.ZodString>;
|
|
186
189
|
component: z.ZodString;
|
|
187
190
|
taskQueue: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
|
|
188
191
|
name: z.ZodEnum<typeof TaskQueueName>;
|
|
@@ -328,6 +331,7 @@ export declare const BiomeComponentSchema: z.ZodObject<{
|
|
|
328
331
|
kind: z.ZodString;
|
|
329
332
|
}, z.core.$strict>>>;
|
|
330
333
|
workflowClientOf: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
334
|
+
biome: z.ZodOptional<z.ZodString>;
|
|
331
335
|
component: z.ZodString;
|
|
332
336
|
taskQueue: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
|
|
333
337
|
name: z.ZodEnum<typeof TaskQueueName>;
|
|
@@ -598,6 +602,7 @@ export declare const BiomeComponentsSchema: z.ZodArray<z.ZodObject<{
|
|
|
598
602
|
kind: z.ZodString;
|
|
599
603
|
}, z.core.$strict>>>;
|
|
600
604
|
workflowClientOf: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
605
|
+
biome: z.ZodOptional<z.ZodString>;
|
|
601
606
|
component: z.ZodString;
|
|
602
607
|
taskQueue: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
|
|
603
608
|
name: z.ZodEnum<typeof TaskQueueName>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"biome-component.d.ts","sourceRoot":"","sources":["../../../src/biome/lib/biome-component.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,2BAA2B,EAE3B,qBAAqB,EAErB,kBAAkB,EAElB,0BAA0B,EAC1B,uBAAuB,EAGvB,gBAAgB,EAEhB,0BAA0B,EAG3B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAOL,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAKL,aAAa,EACd,MAAM,gBAAgB,CAAC;
|
|
1
|
+
{"version":3,"file":"biome-component.d.ts","sourceRoot":"","sources":["../../../src/biome/lib/biome-component.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,2BAA2B,EAE3B,qBAAqB,EAErB,kBAAkB,EAElB,0BAA0B,EAC1B,uBAAuB,EAGvB,gBAAgB,EAEhB,0BAA0B,EAG3B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAOL,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAKL,aAAa,EACd,MAAM,gBAAgB,CAAC;AA0BxB,eAAO,MAAM,aAAa,aAGkC,CAAC;AAE7D,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;4BAgCvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAC1C,OAAO,4BAA4B,CACpC,CAAC;AAOF,eAAO,MAAM,0BAA0B,aAA4B,CAAC;AAEpE,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;4BAgCzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AA8FF,eAAO,MAAM,0BAA0B;;;;;kBAcG,CAAC;AAC3C,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAG9E,eAAO,MAAM,qCAAqC;;;;;;;;kBAahD,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CACnD,OAAO,qCAAqC,CAC7C,CAAC;AAWF,eAAO,MAAM,qCAAqC;;;;;kBAKhD,CAAC;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CACnD,OAAO,qCAAqC,CAC7C,CAAC;AAMF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;kBAGjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAmBtE,eAAO,MAAM,2BAA2B;;;;;;;kBAItC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAgKhF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAMA,CAAC;AACvC,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAG5E,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAkKvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAC1C,OAAO,4BAA4B,CACpC,CAAC;AAEF,eAAO,MAAM,2BAA2B;;;kBAGtC,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CACjD,OAAO,2BAA2B,CACnC,CAAC;AAsGF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAsS/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBA4G9B,CAAC"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.BiomeComponentsSchema = exports.BiomeComponentSchema = exports.BiomeComponentHostAbiSchema = exports.BiomeComponentProtocolSchema = exports.BiomeWorkerProtocolSchema = exports.BiomeWorkflowClientOfSchema = exports.BiomeWorkerNexusSchema = exports.BiomeWorkerNexusRequiredServiceSchema = exports.BiomeWorkerNexusProvidedServiceSchema = exports.BiomeWorkerTaskQueueSchema = exports.BiomeComponentEntrypointSchema = exports.BiomeNodeModuleEntrySchema = exports.BiomeComponentArtifactSchema = void 0;
|
|
3
|
+
exports.BiomeComponentsSchema = exports.BiomeComponentSchema = exports.BiomeComponentHostAbiSchema = exports.BiomeComponentProtocolSchema = exports.BiomeWorkerProtocolSchema = exports.BiomeWorkflowClientOfSchema = exports.BiomeWorkerNexusSchema = exports.BiomeWorkerNexusRequiredServiceSchema = exports.BiomeWorkerNexusProvidedServiceSchema = exports.BiomeWorkerTaskQueueSchema = exports.BiomeComponentEntrypointSchema = exports.BiomeNodeModuleEntrySchema = exports.BiomeComponentArtifactSchema = exports.BiomeIdSchema = void 0;
|
|
4
4
|
const resource_requirement_1 = require("../../resource-requirement");
|
|
5
5
|
const service_registry_1 = require("../../service-registry");
|
|
6
6
|
const zod_1 = require("zod");
|
|
@@ -18,6 +18,10 @@ const ComponentKeySchema = zod_1.z
|
|
|
18
18
|
.string()
|
|
19
19
|
.min(1)
|
|
20
20
|
.regex(/^[a-z][a-z0-9-]*$/, 'component key must be lowercase kebab-case');
|
|
21
|
+
exports.BiomeIdSchema = zod_1.z
|
|
22
|
+
.string()
|
|
23
|
+
.min(1)
|
|
24
|
+
.regex(/^[a-z][a-z0-9-]*$/, 'biome id must be kebab-case');
|
|
21
25
|
exports.BiomeComponentArtifactSchema = zod_1.z.discriminatedUnion('kind', [
|
|
22
26
|
(0, biome_component_schema_helpers_1.strictComponentObject)({
|
|
23
27
|
kind: zod_1.z.literal(biome_component_vocabulary_1.BiomeComponentArtifactKind.PackageContent),
|
|
@@ -120,6 +124,7 @@ exports.BiomeWorkerNexusSchema = (0, biome_component_schema_helpers_1.strictComp
|
|
|
120
124
|
requires: zod_1.z.array(exports.BiomeWorkerNexusRequiredServiceSchema).optional(),
|
|
121
125
|
});
|
|
122
126
|
exports.BiomeWorkflowClientOfSchema = (0, biome_component_schema_helpers_1.strictComponentObject)({
|
|
127
|
+
biome: exports.BiomeIdSchema.optional(),
|
|
123
128
|
component: ComponentKeySchema,
|
|
124
129
|
taskQueue: execution_target_1.WorkerTaskQueueRefSchema,
|
|
125
130
|
});
|
|
@@ -600,7 +605,7 @@ exports.BiomeComponentsSchema = zod_1.z
|
|
|
600
605
|
const path = [index, 'protocol', 'workflowClientOf', entryIndex];
|
|
601
606
|
const entryQueue = (0, execution_target_1.workerTaskQueueRefDeclaration)(entry.taskQueue);
|
|
602
607
|
const entryQueueKey = (0, execution_target_1.workerTaskQueueKey)(entryQueue);
|
|
603
|
-
const pair = `${entry.component}:${entryQueueKey}`;
|
|
608
|
+
const pair = `${entry.biome === undefined ? '' : `${entry.biome}/`}${entry.component}:${entryQueueKey}`;
|
|
604
609
|
if (seenPairs.has(pair)) {
|
|
605
610
|
ctx.addIssue({
|
|
606
611
|
code: 'custom',
|
|
@@ -609,6 +614,8 @@ exports.BiomeComponentsSchema = zod_1.z
|
|
|
609
614
|
});
|
|
610
615
|
}
|
|
611
616
|
seenPairs.add(pair);
|
|
617
|
+
if (entry.biome !== undefined)
|
|
618
|
+
return;
|
|
612
619
|
const target = byKey.get(entry.component);
|
|
613
620
|
if (target === undefined) {
|
|
614
621
|
ctx.addIssue({
|