@xemahq/contracts 0.77.0 → 0.78.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/dist/.source-stamp.json +2 -2
- package/dist/authorization-module/index.d.ts +2 -0
- package/dist/authorization-module/index.d.ts.map +1 -1
- package/dist/authorization-module/index.js +2 -0
- package/dist/authorization-module/index.js.map +1 -1
- package/dist/authorization-module/lib/authorization-composition-error.d.ts +11 -0
- package/dist/authorization-module/lib/authorization-composition-error.d.ts.map +1 -1
- package/dist/authorization-module/lib/authorization-composition-error.js +16 -1
- package/dist/authorization-module/lib/authorization-composition-error.js.map +1 -1
- package/dist/authorization-module/lib/authorization-interface-requirements.d.ts +5 -1
- package/dist/authorization-module/lib/authorization-interface-requirements.d.ts.map +1 -1
- package/dist/authorization-module/lib/authorization-interface-requirements.js +1 -0
- package/dist/authorization-module/lib/authorization-interface-requirements.js.map +1 -1
- package/dist/authorization-module/lib/authorization-module-contribution.d.ts +24 -0
- package/dist/authorization-module/lib/authorization-module-contribution.d.ts.map +1 -1
- package/dist/authorization-module/lib/authorization-module-contribution.js +1 -0
- package/dist/authorization-module/lib/authorization-module-contribution.js.map +1 -1
- package/dist/authorization-module/lib/authorization-module-envelope.d.ts +11 -0
- package/dist/authorization-module/lib/authorization-module-envelope.d.ts.map +1 -1
- package/dist/authorization-module/lib/authorization-module-envelope.js +4 -0
- package/dist/authorization-module/lib/authorization-module-envelope.js.map +1 -1
- package/dist/authorization-module/lib/delegation-origination.d.ts +26 -0
- package/dist/authorization-module/lib/delegation-origination.d.ts.map +1 -0
- package/dist/authorization-module/lib/delegation-origination.js +43 -0
- package/dist/authorization-module/lib/delegation-origination.js.map +1 -0
- package/dist/authorization-module/lib/delegation-wildcard-ceiling.d.ts +6 -0
- package/dist/authorization-module/lib/delegation-wildcard-ceiling.d.ts.map +1 -0
- package/dist/authorization-module/lib/delegation-wildcard-ceiling.js +17 -0
- package/dist/authorization-module/lib/delegation-wildcard-ceiling.js.map +1 -0
- package/dist/authorization-module/lib/platform-authorization-modules.d.ts.map +1 -1
- package/dist/authorization-module/lib/platform-authorization-modules.js +10 -11
- package/dist/authorization-module/lib/platform-authorization-modules.js.map +1 -1
- package/dist/authorization-module/platform/xema_core.fga +76 -45
- package/dist/authorization-module/platform/xema_core.fga.yaml +522 -97
- package/dist/authorization-module/platform/xema_sharing.fga +48 -33
- package/dist/authorization-module/platform/xema_sharing.fga.yaml +555 -2
- package/dist/authorization-module/server/authorization-interface-conformance.d.ts +1 -0
- package/dist/authorization-module/server/authorization-interface-conformance.d.ts.map +1 -1
- package/dist/authorization-module/server/authorization-interface-conformance.js +13 -1
- package/dist/authorization-module/server/authorization-interface-conformance.js.map +1 -1
- package/dist/authorization-module/server/compose-authorization-base.d.ts +2 -0
- package/dist/authorization-module/server/compose-authorization-base.d.ts.map +1 -1
- package/dist/authorization-module/server/compose-authorization-base.js +15 -2
- package/dist/authorization-module/server/compose-authorization-base.js.map +1 -1
- package/dist/authorization-module/server/delegation-origination-conformance.d.ts +15 -0
- package/dist/authorization-module/server/delegation-origination-conformance.d.ts.map +1 -0
- package/dist/authorization-module/server/delegation-origination-conformance.js +92 -0
- package/dist/authorization-module/server/delegation-origination-conformance.js.map +1 -0
- package/dist/authorization-module/server/userset-subject-types.d.ts +3 -0
- package/dist/authorization-module/server/userset-subject-types.d.ts.map +1 -0
- package/dist/authorization-module/server/userset-subject-types.js +65 -0
- package/dist/authorization-module/server/userset-subject-types.js.map +1 -0
- package/dist/authzen/index.d.ts +1 -0
- package/dist/authzen/index.d.ts.map +1 -1
- package/dist/authzen/index.js +1 -0
- package/dist/authzen/index.js.map +1 -1
- package/dist/authzen/lib/durable-delegation-model.d.ts +33 -11
- package/dist/authzen/lib/durable-delegation-model.d.ts.map +1 -1
- package/dist/authzen/lib/durable-delegation-model.js +54 -16
- package/dist/authzen/lib/durable-delegation-model.js.map +1 -1
- package/dist/authzen/lib/xema-membership.d.ts +6 -0
- package/dist/authzen/lib/xema-membership.d.ts.map +1 -0
- package/dist/authzen/lib/xema-membership.js +16 -0
- package/dist/authzen/lib/xema-membership.js.map +1 -0
- package/dist/deployment/lib/resolved-deployment.d.ts +5 -2
- package/dist/deployment/lib/resolved-deployment.d.ts.map +1 -1
- package/dist/deployment/lib/resolved-deployment.js +6 -3
- package/dist/deployment/lib/resolved-deployment.js.map +1 -1
- package/dist/distribution/index.d.ts +2 -0
- package/dist/distribution/index.d.ts.map +1 -1
- package/dist/distribution/index.js +2 -0
- package/dist/distribution/index.js.map +1 -1
- package/dist/distribution/lib/authorization-lock.d.ts +16 -0
- package/dist/distribution/lib/authorization-lock.d.ts.map +1 -0
- package/dist/distribution/lib/authorization-lock.js +34 -0
- package/dist/distribution/lib/authorization-lock.js.map +1 -0
- package/dist/distribution/lib/customer-edition-definition.d.ts +10 -1
- package/dist/distribution/lib/customer-edition-definition.d.ts.map +1 -1
- package/dist/distribution/lib/customer-edition-definition.js +53 -2
- package/dist/distribution/lib/customer-edition-definition.js.map +1 -1
- package/dist/distribution/lib/distribution-lock.d.ts +2 -1
- package/dist/distribution/lib/distribution-lock.d.ts.map +1 -1
- package/dist/distribution/lib/distribution-lock.js +20 -0
- package/dist/distribution/lib/distribution-lock.js.map +1 -1
- package/dist/distribution/lib/image-producer-evidence.d.ts +86 -14
- package/dist/distribution/lib/image-producer-evidence.d.ts.map +1 -1
- package/dist/distribution/lib/image-producer-evidence.js +72 -12
- package/dist/distribution/lib/image-producer-evidence.js.map +1 -1
- package/dist/distribution/lib/kernel-contract-authority.d.ts +1 -0
- package/dist/distribution/lib/kernel-contract-authority.d.ts.map +1 -1
- package/dist/distribution/lib/kernel-contract-authority.js +6 -2
- package/dist/distribution/lib/kernel-contract-authority.js.map +1 -1
- package/dist/distribution/lib/kernel-contract-source-paths.d.ts +1 -1
- package/dist/distribution/lib/kernel-contract-source-paths.d.ts.map +1 -1
- package/dist/distribution/lib/kernel-contract-source-paths.js +8 -0
- package/dist/distribution/lib/kernel-contract-source-paths.js.map +1 -1
- package/dist/distribution/lib/resolve-unsplit-deployment.d.ts +2 -0
- package/dist/distribution/lib/resolve-unsplit-deployment.d.ts.map +1 -1
- package/dist/distribution/lib/resolve-unsplit-deployment.js +14 -0
- package/dist/distribution/lib/resolve-unsplit-deployment.js.map +1 -1
- package/dist/distribution/lib/runtime-image-source-index.d.ts +18 -1
- package/dist/distribution/lib/runtime-image-source-index.d.ts.map +1 -1
- package/dist/distribution/lib/runtime-image-source-index.js +38 -2
- package/dist/distribution/lib/runtime-image-source-index.js.map +1 -1
- package/dist/distribution/lib/verify-delivered-locks.d.ts +41 -0
- package/dist/distribution/lib/verify-delivered-locks.d.ts.map +1 -0
- package/dist/distribution/lib/verify-delivered-locks.js +76 -0
- package/dist/distribution/lib/verify-delivered-locks.js.map +1 -0
- package/dist/distribution/lib/verify-resolved-deployment.d.ts +1 -0
- package/dist/distribution/lib/verify-resolved-deployment.d.ts.map +1 -1
- package/dist/distribution/lib/verify-resolved-deployment.js +8 -0
- package/dist/distribution/lib/verify-resolved-deployment.js.map +1 -1
- package/dist/distribution/server/index.d.ts +8 -0
- package/dist/distribution/server/index.d.ts.map +1 -0
- package/dist/distribution/server/index.js +34 -0
- package/dist/distribution/server/index.js.map +1 -0
- package/dist/edition-protocol/edition-contract.schema.json +1 -1
- package/dist/edition-protocol/edition-protocol.json +1 -1
- package/dist/edition-protocol/lib/edition-protocol.d.ts +2 -1
- package/dist/edition-protocol/lib/edition-protocol.d.ts.map +1 -1
- package/dist/edition-protocol/lib/edition-protocol.js +4 -2
- package/dist/edition-protocol/lib/edition-protocol.js.map +1 -1
- package/dist/resolved-deployment-fixture/lib/resolved-deployment-fixture.d.ts +2 -0
- package/dist/resolved-deployment-fixture/lib/resolved-deployment-fixture.d.ts.map +1 -1
- package/dist/resolved-deployment-fixture/lib/resolved-deployment-fixture.js +66 -1
- package/dist/resolved-deployment-fixture/lib/resolved-deployment-fixture.js.map +1 -1
- package/package.json +5 -2
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"durable-delegation-model.js","sourceRoot":"","sources":["../../../src/authzen/lib/durable-delegation-model.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"durable-delegation-model.js","sourceRoot":"","sources":["../../../src/authzen/lib/durable-delegation-model.ts"],"names":[],"mappings":";;;AAwIA,oDAUC;AAGD,oDAQC;AAQD,8DAOC;AAuDD,8EAmDC;AAtRD,2CAAgE;AAEhE,yEAGoC;AAkDvB,QAAA,8BAA8B,GAAG,kBAAkB,CAAC;AAOpD,QAAA,kBAAkB,GAAG,SAAS,CAAC;AAG/B,QAAA,sBAAsB,GAAG,YAAY,CAAC;AAYnD,IAAY,4BAwCX;AAxCD,WAAY,4BAA4B;IAEtC,iDAAiB,CAAA;IAEjB,iDAAiB,CAAA;IAEjB,iDAAiB,CAAA;IAEjB,0DAA0B,CAAA;IAE1B,yDAAyB,CAAA;IAEzB,uDAAuB,CAAA;IAcvB,+CAAe,CAAA;IAaf,uDAAuB,CAAA;AACzB,CAAC,EAxCW,4BAA4B,4CAA5B,4BAA4B,QAwCvC;AAGD,MAAa,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AALD,oDAKC;AAWD,SAAgB,oBAAoB,CAAC,QAAgB;IACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,oBAAoB,CAAC,0CAA0C,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,oBAAoB,CAC5B,mCAAmC,QAAQ,uEAAuE,CACnH,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,8BAAsB,IAAI,IAAA,8CAAmB,EAAC,QAAQ,CAAC,EAAE,CAAC;AACtE,CAAC;AAGD,SAAgB,oBAAoB,CAAC,MAAc;IACjD,MAAM,MAAM,GAAG,GAAG,8BAAsB,GAAG,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAClE,MAAM,IAAI,oBAAoB,CAC5B,0BAA0B,MAAM,cAAc,8BAAsB,UAAU,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,8CAAmB,EAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1D,CAAC;AAQD,SAAgB,yBAAyB,CAAC,OAGzC;IACC,IAAI,OAAO,CAAC,IAAI,KAAK,qBAAW,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5E,MAAM,IAAI,GAAG,IAAA,4BAAkB,EAAC,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,0BAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC;AAGD,IAAY,kCASX;AATD,WAAY,kCAAkC;IAE5C,+EAAyC,CAAA;IAEzC,sFAAgD,CAAA;IAEhD,yEAAmC,CAAA;IAEnC,6EAAuC,CAAA;AACzC,CAAC,EATW,kCAAkC,kDAAlC,kCAAkC,QAS7C;AAGD,MAAa,gCAAiC,SAAQ,KAAK;IAE9C;IADX,YACW,OAA2C,EACpD,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,YAAO,GAAP,OAAO,CAAoC;QAIpD,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF;AARD,4EAQC;AAgCD,SAAgB,iCAAiC,CAAC,KAIjD;IACC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACjD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,gCAAgC,CACxC,kCAAkC,CAAC,iBAAiB,EACpD,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAW,CAAC,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAW,CAAC,IAAI,EAAE,CAAC;QAC/E,MAAM,IAAI,gCAAgC,CACxC,kCAAkC,CAAC,oBAAoB,EACvD,kDAAkD,KAAK,CAAC,IAAI,kEAAkE,CAC/H,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,qBAAW,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,gCAAgC,CACxC,kCAAkC,CAAC,gBAAgB,EACnD,sDAAsD,SAAS,CAAC,IAAI,uCAAuC,CAC5G,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,gCAAgC,CACxC,kCAAkC,CAAC,cAAc,EACjD,qFAAqF,CACtF,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,IAAA,4BAAkB,EAAC,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;IACtF,MAAM,MAAM,GAAiC;QAC3C,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,4BAA4B,CAAC,SAAS;YAChD,MAAM,EAAE,YAAY;SACrB,CAAC;KACH,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAW,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,sCAA8B;YACxC,MAAM,EAAE,IAAA,4BAAkB,EAAC,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;SACrE,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC,CAAC;KAC3E,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1,6 @@
|
|
|
1
|
+
export declare const XEMA_MEMBERSHIP_OBJECT_TYPE = "membership";
|
|
2
|
+
export declare const XEMA_MEMBERSHIP_HOLDER_RELATION = "holder";
|
|
3
|
+
export declare const XEMA_MEMBERSHIP_PARENT_RELATION = "parent";
|
|
4
|
+
export declare function buildXemaMembershipObject(orgId: string, membershipId: string): string;
|
|
5
|
+
export declare function buildXemaMembershipHolderUserset(orgId: string, membershipId: string): string;
|
|
6
|
+
//# sourceMappingURL=xema-membership.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"xema-membership.d.ts","sourceRoot":"","sources":["../../../src/authzen/lib/xema-membership.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,2BAA2B,eAAe,CAAC;AAExD,eAAO,MAAM,+BAA+B,WAAW,CAAC;AAExD,eAAO,MAAM,+BAA+B,WAAW,CAAC;AAGxD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,GACnB,MAAM,CAER;AAGD,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,GACnB,MAAM,CAER"}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.XEMA_MEMBERSHIP_PARENT_RELATION = exports.XEMA_MEMBERSHIP_HOLDER_RELATION = exports.XEMA_MEMBERSHIP_OBJECT_TYPE = void 0;
|
|
4
|
+
exports.buildXemaMembershipObject = buildXemaMembershipObject;
|
|
5
|
+
exports.buildXemaMembershipHolderUserset = buildXemaMembershipHolderUserset;
|
|
6
|
+
const xema_authzen_profile_1 = require("./xema-authzen-profile");
|
|
7
|
+
exports.XEMA_MEMBERSHIP_OBJECT_TYPE = 'membership';
|
|
8
|
+
exports.XEMA_MEMBERSHIP_HOLDER_RELATION = 'holder';
|
|
9
|
+
exports.XEMA_MEMBERSHIP_PARENT_RELATION = 'parent';
|
|
10
|
+
function buildXemaMembershipObject(orgId, membershipId) {
|
|
11
|
+
return `${exports.XEMA_MEMBERSHIP_OBJECT_TYPE}:${(0, xema_authzen_profile_1.qualifyResourceId)(orgId, membershipId)}`;
|
|
12
|
+
}
|
|
13
|
+
function buildXemaMembershipHolderUserset(orgId, membershipId) {
|
|
14
|
+
return `${buildXemaMembershipObject(orgId, membershipId)}#${exports.XEMA_MEMBERSHIP_HOLDER_RELATION}`;
|
|
15
|
+
}
|
|
16
|
+
//# sourceMappingURL=xema-membership.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"xema-membership.js","sourceRoot":"","sources":["../../../src/authzen/lib/xema-membership.ts"],"names":[],"mappings":";;;AAgBA,8DAKC;AAGD,4EAKC;AA7BD,iEAA2D;AAS9C,QAAA,2BAA2B,GAAG,YAAY,CAAC;AAE3C,QAAA,+BAA+B,GAAG,QAAQ,CAAC;AAE3C,QAAA,+BAA+B,GAAG,QAAQ,CAAC;AAGxD,SAAgB,yBAAyB,CACvC,KAAa,EACb,YAAoB;IAEpB,OAAO,GAAG,mCAA2B,IAAI,IAAA,wCAAiB,EAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;AACpF,CAAC;AAGD,SAAgB,gCAAgC,CAC9C,KAAa,EACb,YAAoB;IAEpB,OAAO,GAAG,yBAAyB,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,uCAA+B,EAAE,CAAC;AAChG,CAAC"}
|
|
@@ -1,14 +1,15 @@
|
|
|
1
1
|
import { z } from 'zod';
|
|
2
|
-
export declare const RESOLVED_DEPLOYMENT_SCHEMA_VERSION:
|
|
2
|
+
export declare const RESOLVED_DEPLOYMENT_SCHEMA_VERSION: 2;
|
|
3
3
|
export declare const RESOLVER_PACKAGE: "@xemahq/contracts";
|
|
4
4
|
export declare enum ResolvedDeploymentProvenanceKind {
|
|
5
5
|
Engine = "engine",
|
|
6
6
|
Unsplit = "unsplit"
|
|
7
7
|
}
|
|
8
|
+
export declare const DNS_LABEL_PATTERN: RegExp;
|
|
8
9
|
export declare const EDITION_OCI_REF_PATTERN: RegExp;
|
|
9
10
|
export declare const EditionOciRefSchema: z.ZodString;
|
|
10
11
|
export declare const ResolvedDeploymentSchema: z.ZodObject<{
|
|
11
|
-
schemaVersion: z.ZodLiteral<
|
|
12
|
+
schemaVersion: z.ZodLiteral<2>;
|
|
12
13
|
deployment: z.ZodString;
|
|
13
14
|
runtimeNamespace: z.ZodString;
|
|
14
15
|
edition: z.ZodObject<{
|
|
@@ -16,6 +17,8 @@ export declare const ResolvedDeploymentSchema: z.ZodObject<{
|
|
|
16
17
|
version: z.ZodString;
|
|
17
18
|
registry: z.ZodString;
|
|
18
19
|
lockSha256: z.ZodString;
|
|
20
|
+
imagesLockSha256: z.ZodString;
|
|
21
|
+
authorizationLockSha256: z.ZodString;
|
|
19
22
|
ref: z.ZodString;
|
|
20
23
|
}, z.core.$strict>;
|
|
21
24
|
biomes: z.ZodArray<z.ZodObject<{
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/deployment/lib/resolved-deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;
|
|
1
|
+
{"version":3,"file":"resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/deployment/lib/resolved-deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiExB,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAG7D,eAAO,MAAM,gBAAgB,EAAG,mBAA4B,CAAC;AAM7D,oBAAY,gCAAgC;IAK1C,MAAM,WAAW;IAOjB,OAAO,YAAY;CACpB;AAMD,eAAO,MAAM,iBAAiB,QAAoC,CAAC;AAoBnE,eAAO,MAAM,uBAAuB,QAGnC,CAAC;AAEF,eAAO,MAAM,mBAAmB,aAK7B,CAAC;AA2DJ,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiGjC,CAAC;AAEL,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAG1E,MAAM,MAAM,yBAAyB,GAAG,kBAAkB,GAAG;IAC3D,QAAQ,CAAC,UAAU,EAAE,OAAO,CAC1B,kBAAkB,CAAC,YAAY,CAAC,EAChC;QAAE,IAAI,EAAE,gCAAgC,CAAC,OAAO,CAAA;KAAE,CACnD,CAAC;CACH,CAAC;AAGF,MAAM,MAAM,wBAAwB,GAAG,kBAAkB,GAAG;IAC1D,QAAQ,CAAC,UAAU,EAAE,OAAO,CAC1B,kBAAkB,CAAC,YAAY,CAAC,EAChC;QAAE,IAAI,EAAE,gCAAgC,CAAC,OAAO,CAAA;KAAE,CACnD,CAAC;CACH,CAAC;AASF,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,kBAAkB,GAC3B,QAAQ,IAAI,yBAAyB,CAEvC"}
|
|
@@ -1,24 +1,25 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
-
exports.ResolvedDeploymentSchema = exports.EditionOciRefSchema = exports.EDITION_OCI_REF_PATTERN = exports.ResolvedDeploymentProvenanceKind = exports.RESOLVER_PACKAGE = exports.RESOLVED_DEPLOYMENT_SCHEMA_VERSION = void 0;
|
|
3
|
+
exports.ResolvedDeploymentSchema = exports.EditionOciRefSchema = exports.EDITION_OCI_REF_PATTERN = exports.DNS_LABEL_PATTERN = exports.ResolvedDeploymentProvenanceKind = exports.RESOLVER_PACKAGE = exports.RESOLVED_DEPLOYMENT_SCHEMA_VERSION = void 0;
|
|
4
4
|
exports.isUnsplitResolvedDeployment = isUnsplitResolvedDeployment;
|
|
5
5
|
const zod_1 = require("zod");
|
|
6
6
|
const content_address_1 = require("../../content-address");
|
|
7
7
|
const deployment_id_1 = require("./deployment-id");
|
|
8
8
|
const trust_domain_1 = require("./trust-domain");
|
|
9
9
|
const trust_partition_1 = require("./trust-partition");
|
|
10
|
-
exports.RESOLVED_DEPLOYMENT_SCHEMA_VERSION =
|
|
10
|
+
exports.RESOLVED_DEPLOYMENT_SCHEMA_VERSION = 2;
|
|
11
11
|
exports.RESOLVER_PACKAGE = '@xemahq/contracts';
|
|
12
12
|
var ResolvedDeploymentProvenanceKind;
|
|
13
13
|
(function (ResolvedDeploymentProvenanceKind) {
|
|
14
14
|
ResolvedDeploymentProvenanceKind["Engine"] = "engine";
|
|
15
15
|
ResolvedDeploymentProvenanceKind["Unsplit"] = "unsplit";
|
|
16
16
|
})(ResolvedDeploymentProvenanceKind || (exports.ResolvedDeploymentProvenanceKind = ResolvedDeploymentProvenanceKind = {}));
|
|
17
|
+
exports.DNS_LABEL_PATTERN = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/;
|
|
17
18
|
const DnsLabelSchema = zod_1.z
|
|
18
19
|
.string()
|
|
19
20
|
.min(1)
|
|
20
21
|
.max(63)
|
|
21
|
-
.regex(
|
|
22
|
+
.regex(exports.DNS_LABEL_PATTERN, 'must be a lowercase DNS label');
|
|
22
23
|
exports.EDITION_OCI_REF_PATTERN = new RegExp('^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*(:[0-9]{1,5})?(\\/[a-z0-9]+(([._]|__|-+)[a-z0-9]+)*)+' +
|
|
23
24
|
`@sha256:${content_address_1.SHA256_HEX_SOURCE}$`);
|
|
24
25
|
exports.EditionOciRefSchema = zod_1.z
|
|
@@ -76,6 +77,8 @@ exports.ResolvedDeploymentSchema = zod_1.z
|
|
|
76
77
|
version: zod_1.z.string().min(1),
|
|
77
78
|
registry: zod_1.z.string().min(1),
|
|
78
79
|
lockSha256: content_address_1.Sha256HexSchema,
|
|
80
|
+
imagesLockSha256: content_address_1.Sha256HexSchema,
|
|
81
|
+
authorizationLockSha256: content_address_1.Sha256HexSchema,
|
|
79
82
|
ref: exports.EditionOciRefSchema,
|
|
80
83
|
})
|
|
81
84
|
.strict(),
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"resolved-deployment.js","sourceRoot":"","sources":["../../../src/deployment/lib/resolved-deployment.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"resolved-deployment.js","sourceRoot":"","sources":["../../../src/deployment/lib/resolved-deployment.ts"],"names":[],"mappings":";;;AAkTA,kEAIC;AAtTD,6BAAwB;AAExB,2DAA2E;AAC3E,mDAAwD;AACxD,iDAIwB;AACxB,uDAG2B;AAqDd,QAAA,kCAAkC,GAAG,CAAU,CAAC;AAGhD,QAAA,gBAAgB,GAAG,mBAA4B,CAAC;AAM7D,IAAY,gCAaX;AAbD,WAAY,gCAAgC;IAK1C,qDAAiB,CAAA;IAOjB,uDAAmB,CAAA;AACrB,CAAC,EAbW,gCAAgC,gDAAhC,gCAAgC,QAa3C;AAMY,QAAA,iBAAiB,GAAG,iCAAiC,CAAC;AAGnE,MAAM,cAAc,GAAG,OAAC;KACrB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,yBAAiB,EAAE,+BAA+B,CAAC,CAAC;AAahD,QAAA,uBAAuB,GAAG,IAAI,MAAM,CAC/C,wHAAwH;IACtH,WAAW,mCAAiB,GAAG,CAClC,CAAC;AAEW,QAAA,mBAAmB,GAAG,OAAC;KACjC,MAAM,EAAE;KACR,KAAK,CACJ,+BAAuB,EACvB,uFAAuF,CACxF,CAAC;AAEJ,MAAM,aAAa,GAAG,OAAC;KACpB,MAAM,EAAE;KACR,KAAK,CAAC,4CAA6B,EAAE,uCAAuC,CAAC,CAAC;AAEjF,MAAM,mBAAmB,GAAG,OAAC;KAC1B,MAAM,CAAC;IACN,EAAE,EAAE,aAAa;IACjB,YAAY,EAAE,gCAAiB;IAC/B,WAAW,EAAE,gCAAiB;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,4BAA4B,GAAG,OAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,cAAc;IAEpB,QAAQ,EAAE,cAAc;IACxB,OAAO,EAAE,OAAC;SACP,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAChF,GAAG,CAAC,CAAC,CAAC;CACV,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,cAAc,GAAG,OAAC;KACrB,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC;IACpC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAUZ,MAAM,sBAAsB,GAAG,OAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IACnE,iBAAiB,EAAE,iCAAe;IAClC,cAAc,EAAE,OAAC;SACd,MAAM,EAAE;SACR,KAAK,CAAC,IAAI,MAAM,CAAC,WAAW,mCAAiB,GAAG,CAAC,EAAE,8CAA8C,CAAC;IACrG,QAAQ,EAAE,cAAc;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,uBAAuB,GAAG,OAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,OAAO,CAAC;IACzD,QAAQ,EAAE,cAAc;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,0CAAkC,CAAC;IAC5D,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qCAAqB,EAAE,yBAAyB,CAAC;IAC9E,gBAAgB,EAAE,cAAc;IAChC,OAAO,EAAE,OAAC;SACP,MAAM,CAAC;QACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,UAAU,EAAE,iCAAe;QAE3B,gBAAgB,EAAE,iCAAe;QAMjC,uBAAuB,EAAE,iCAAe;QAExC,GAAG,EAAE,2BAAmB;KACzB,CAAC;SACD,MAAM,EAAE;IACX,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC;IACtD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;CACvE,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC;gBAC7B,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,aAAa,CAAU,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,IACE,KAAK,CAAC,UAAU,CAAC,8CAA+B,CAAC;gBACjD,KAAK,KAAK,GAAG,8CAA+B,GAAG,KAAK,CAAC,EAAE,EAAE,EACzD,CAAC;gBACD,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;oBAC9B,OAAO,EAAE,IAAI,KAAK,6CAA6C,KAAK,CAAC,EAAE,eAAe;iBACvF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;IACzC,CAAC,CAAC,CAAC;IAGH,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QAClD,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAClF,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,iBAAiB,EAAE,KAAK,EAAE,MAAM,CAAC;gBACxC,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,SAAS,IAAI;QACtB,GAAG,IAAA,sCAAoB,EAAC,QAAQ,CAAC,MAAM,CAAC;QACxC,GAAG,IAAA,4CAA0B,EAC3B,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzC,cAAc,EAAE,OAAO,CAAC,IAAI;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC,EACH,QAAQ,CACT;KACF,EAAE,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClG,CAAC;IAGD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,gCAAgC,CAAC,OAAO;QAAE,OAAO;IAClF,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YAC7C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC;gBACtC,OAAO,EACL,wEAAwE,KAAK,CAAC,EAAE,UAAU;oBAC1F,IAAI,KAAK,CAAC,WAAW,wBAAwB,KAAK,CAAC,YAAY,GAAG;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,iBAAiB,CAAC;YACzB,OAAO,EAAE,uEAAuE,QAAQ,CAAC,eAAe,CAAC,MAAM,EAAE;SAClH,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AA2BL,SAAgB,2BAA2B,CACzC,QAA4B;IAE5B,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,gCAAgC,CAAC,OAAO,CAAC;AAC/E,CAAC"}
|
|
@@ -20,6 +20,8 @@ export * from './lib/nexus-endpoint-specs';
|
|
|
20
20
|
export * from './lib/lock-consumers';
|
|
21
21
|
export * from './lib/verify-resolved-deployment';
|
|
22
22
|
export * from './lib/resolve-unsplit-deployment';
|
|
23
|
+
export * from './lib/authorization-lock';
|
|
24
|
+
export * from './lib/verify-delivered-locks';
|
|
23
25
|
export { isUnsplitResolvedDeployment } from '../deployment';
|
|
24
26
|
export type { VerifiedEditionResolution, VerifiedResolvedDeployment, VerifiedUnsplitEditionResolution, VerifiedUnsplitResolvedDeployment, } from './lib/verified-resolved-deployment';
|
|
25
27
|
export * from './lib/delivered-biome';
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/distribution/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,mCAAmC,CAAC;AAClD,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC;AACjD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,kCAAkC,CAAC;AACjD,cAAc,kCAAkC,CAAC;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/distribution/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,mCAAmC,CAAC;AAClD,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC;AACjD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,kCAAkC,CAAC;AACjD,cAAc,kCAAkC,CAAC;AACjD,cAAc,0BAA0B,CAAC;AACzC,cAAc,8BAA8B,CAAC;AAE7C,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,YAAY,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,gCAAgC,EAChC,iCAAiC,GAClC,MAAM,oCAAoC,CAAC;AAC5C,cAAc,uBAAuB,CAAC"}
|
|
@@ -37,6 +37,8 @@ __exportStar(require("./lib/nexus-endpoint-specs"), exports);
|
|
|
37
37
|
__exportStar(require("./lib/lock-consumers"), exports);
|
|
38
38
|
__exportStar(require("./lib/verify-resolved-deployment"), exports);
|
|
39
39
|
__exportStar(require("./lib/resolve-unsplit-deployment"), exports);
|
|
40
|
+
__exportStar(require("./lib/authorization-lock"), exports);
|
|
41
|
+
__exportStar(require("./lib/verify-delivered-locks"), exports);
|
|
40
42
|
var deployment_1 = require("../deployment");
|
|
41
43
|
Object.defineProperty(exports, "isUnsplitResolvedDeployment", { enumerable: true, get: function () { return deployment_1.isUnsplitResolvedDeployment; } });
|
|
42
44
|
__exportStar(require("./lib/delivered-biome"), exports);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/distribution/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,8DAA4C;AAC5C,+DAA6C;AAC7C,qDAAmC;AACnC,oEAAkD;AAClD,2DAAyC;AACzC,sDAAoC;AACpC,0DAAwC;AACxC,mDAAiC;AACjC,gEAA8C;AAC9C,kEAAgD;AAChD,sEAAoD;AACpD,mEAAiD;AACjD,uEAAqD;AACrD,+DAA6C;AAC7C,qDAAmC;AACnC,sDAAoC;AACpC,+DAA6C;AAC7C,6DAA2C;AAC3C,uDAAqC;AACrC,mEAAiD;AACjD,mEAAiD;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/distribution/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,8DAA4C;AAC5C,+DAA6C;AAC7C,qDAAmC;AACnC,oEAAkD;AAClD,2DAAyC;AACzC,sDAAoC;AACpC,0DAAwC;AACxC,mDAAiC;AACjC,gEAA8C;AAC9C,kEAAgD;AAChD,sEAAoD;AACpD,mEAAiD;AACjD,uEAAqD;AACrD,+DAA6C;AAC7C,qDAAmC;AACnC,sDAAoC;AACpC,+DAA6C;AAC7C,6DAA2C;AAC3C,uDAAqC;AACrC,mEAAiD;AACjD,mEAAiD;AACjD,2DAAyC;AACzC,+DAA6C;AAE7C,4CAA4D;AAAnD,yHAAA,2BAA2B,OAAA;AAOpC,wDAAsC"}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
import { z } from 'zod';
|
|
2
|
+
export declare const AUTHORIZATION_LOCK_SCHEMA_VERSION: 1;
|
|
3
|
+
export declare const AuthorizationLockReadViewSchema: z.ZodObject<{
|
|
4
|
+
schemaVersion: z.ZodLiteral<1>;
|
|
5
|
+
distributionId: z.ZodString;
|
|
6
|
+
platformGeneration: z.ZodNumber;
|
|
7
|
+
modelHash: z.ZodString;
|
|
8
|
+
modules: z.ZodReadonly<z.ZodArray<z.ZodObject<{
|
|
9
|
+
namespace: z.ZodString;
|
|
10
|
+
moduleVersion: z.ZodNumber;
|
|
11
|
+
contentHash: z.ZodString;
|
|
12
|
+
}, z.core.$loose>>>;
|
|
13
|
+
}, z.core.$loose>;
|
|
14
|
+
export type AuthorizationLockReadView = z.infer<typeof AuthorizationLockReadViewSchema>;
|
|
15
|
+
export declare function parseAuthorizationLockReadView(raw: unknown): AuthorizationLockReadView;
|
|
16
|
+
//# sourceMappingURL=authorization-lock.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"authorization-lock.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/authorization-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,iCAAiC,EAAG,CAAU,CAAC;AAY5D,eAAO,MAAM,+BAA+B;;;;;;;;;;iBAkB5B,CAAC;AAEjB,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AAEF,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,OAAO,GACX,yBAAyB,CAU3B"}
|
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.AuthorizationLockReadViewSchema = exports.AUTHORIZATION_LOCK_SCHEMA_VERSION = void 0;
|
|
4
|
+
exports.parseAuthorizationLockReadView = parseAuthorizationLockReadView;
|
|
5
|
+
const zod_1 = require("zod");
|
|
6
|
+
const platform_generation_1 = require("../../platform-generation");
|
|
7
|
+
exports.AUTHORIZATION_LOCK_SCHEMA_VERSION = 1;
|
|
8
|
+
exports.AuthorizationLockReadViewSchema = zod_1.z
|
|
9
|
+
.object({
|
|
10
|
+
schemaVersion: zod_1.z.literal(exports.AUTHORIZATION_LOCK_SCHEMA_VERSION),
|
|
11
|
+
distributionId: zod_1.z.string().min(1),
|
|
12
|
+
platformGeneration: platform_generation_1.PlatformGenerationSchema,
|
|
13
|
+
modelHash: zod_1.z.string().regex(/^[0-9a-f]{64}$/),
|
|
14
|
+
modules: zod_1.z
|
|
15
|
+
.array(zod_1.z
|
|
16
|
+
.object({
|
|
17
|
+
namespace: zod_1.z.string().min(1),
|
|
18
|
+
moduleVersion: zod_1.z.number().int().positive(),
|
|
19
|
+
contentHash: zod_1.z.string().min(1),
|
|
20
|
+
})
|
|
21
|
+
.passthrough())
|
|
22
|
+
.readonly(),
|
|
23
|
+
})
|
|
24
|
+
.passthrough();
|
|
25
|
+
function parseAuthorizationLockReadView(raw) {
|
|
26
|
+
const result = exports.AuthorizationLockReadViewSchema.safeParse(raw);
|
|
27
|
+
if (!result.success) {
|
|
28
|
+
throw new Error(`Invalid authorization.lock.json: ${result.error.issues
|
|
29
|
+
.map((issue) => `[${issue.path.join('.')}] ${issue.message}`)
|
|
30
|
+
.join('; ')}`);
|
|
31
|
+
}
|
|
32
|
+
return result.data;
|
|
33
|
+
}
|
|
34
|
+
//# sourceMappingURL=authorization-lock.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"authorization-lock.js","sourceRoot":"","sources":["../../../src/distribution/lib/authorization-lock.ts"],"names":[],"mappings":";;;AAwCA,wEAYC;AApDD,6BAAwB;AAExB,mEAAqE;AAExD,QAAA,iCAAiC,GAAG,CAAU,CAAC;AAY/C,QAAA,+BAA+B,GAAG,OAAC;KAC7C,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,yCAAiC,CAAC;IAC3D,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,kBAAkB,EAAE,8CAAwB;IAC5C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC7C,OAAO,EAAE,OAAC;SACP,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC1C,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC/B,CAAC;SACD,WAAW,EAAE,CACjB;SACA,QAAQ,EAAE;CACd,CAAC;KACD,WAAW,EAAE,CAAC;AAMjB,SAAgB,8BAA8B,CAC5C,GAAY;IAEZ,MAAM,MAAM,GAAG,uCAA+B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,oCAAoC,MAAM,CAAC,KAAK,CAAC,MAAM;aACpD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}
|
|
@@ -1,4 +1,6 @@
|
|
|
1
1
|
import { z } from 'zod';
|
|
2
|
+
import { BiomeOrigin } from '../../biome';
|
|
3
|
+
import { type ProcessTrustPolicy } from '../../process-topology';
|
|
2
4
|
export declare const CustomerEditionSourceSchema: z.ZodObject<{
|
|
3
5
|
kind: z.ZodLiteral<import("./biome-source").BiomeSourceKind.Git>;
|
|
4
6
|
url: z.ZodString;
|
|
@@ -41,5 +43,12 @@ export declare const CustomerEditionDefinitionSchema: z.ZodObject<{
|
|
|
41
43
|
}, z.core.$strict>;
|
|
42
44
|
export type CustomerEditionDefinition = z.infer<typeof CustomerEditionDefinitionSchema>;
|
|
43
45
|
export declare function parseCustomerEditionDefinition(raw: unknown): CustomerEditionDefinition;
|
|
44
|
-
export declare function customerTrustCeilingIssues(definition: CustomerEditionDefinition, sourceBiomeIds: readonly string[]): readonly string[];
|
|
46
|
+
export declare function customerTrustCeilingIssues(definition: CustomerEditionDefinition, sourceBiomeIds: readonly string[], catalogueCeiling: ProcessTrustPolicy): readonly string[];
|
|
47
|
+
export interface CustomerLockCeilingBiome {
|
|
48
|
+
readonly id: string;
|
|
49
|
+
readonly origin: BiomeOrigin;
|
|
50
|
+
readonly trustCeiling?: string | undefined;
|
|
51
|
+
readonly source?: unknown;
|
|
52
|
+
}
|
|
53
|
+
export declare function customerLockCeilingIssues(catalogueCeiling: ProcessTrustPolicy | undefined, lockBiomes: readonly CustomerLockCeilingBiome[]): readonly string[];
|
|
45
54
|
//# sourceMappingURL=customer-edition-definition.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"customer-edition-definition.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/customer-edition-definition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;
|
|
1
|
+
{"version":3,"file":"customer-edition-definition.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/customer-edition-definition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAC;AA4ChC,eAAO,MAAM,2BAA2B;;;;;;;;;kBAoBvC,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAqExC,CAAC;AACL,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AAMF,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,OAAO,GACX,yBAAyB,CAU3B;AAoBD,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,yBAAyB,EACrC,cAAc,EAAE,SAAS,MAAM,EAAE,EACjC,gBAAgB,EAAE,kBAAkB,GACnC,SAAS,MAAM,EAAE,CAoCnB;AAsBD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE3C,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAiBD,wBAAgB,yBAAyB,CACvC,gBAAgB,EAAE,kBAAkB,GAAG,SAAS,EAChD,UAAU,EAAE,SAAS,wBAAwB,EAAE,GAC9C,SAAS,MAAM,EAAE,CA2BnB"}
|
|
@@ -3,7 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
3
3
|
exports.CustomerEditionDefinitionSchema = exports.CustomerEditionSourceSchema = void 0;
|
|
4
4
|
exports.parseCustomerEditionDefinition = parseCustomerEditionDefinition;
|
|
5
5
|
exports.customerTrustCeilingIssues = customerTrustCeilingIssues;
|
|
6
|
+
exports.customerLockCeilingIssues = customerLockCeilingIssues;
|
|
6
7
|
const zod_1 = require("zod");
|
|
8
|
+
const deployment_1 = require("../../deployment");
|
|
7
9
|
const process_topology_1 = require("../../process-topology");
|
|
8
10
|
const biome_source_1 = require("./biome-source");
|
|
9
11
|
const distribution_selector_1 = require("./distribution-selector");
|
|
@@ -64,6 +66,15 @@ exports.CustomerEditionDefinitionSchema = zod_1.z
|
|
|
64
66
|
});
|
|
65
67
|
}
|
|
66
68
|
}
|
|
69
|
+
(definition.trustCeiling?.assignments ?? []).forEach((assignment, index) => {
|
|
70
|
+
if (assignment.domain === deployment_1.FIRST_PARTY_TRUST_DOMAIN) {
|
|
71
|
+
context.addIssue({
|
|
72
|
+
code: 'custom',
|
|
73
|
+
path: ['trustCeiling', 'assignments', index, 'domain'],
|
|
74
|
+
message: `trust domain "${deployment_1.FIRST_PARTY_TRUST_DOMAIN}" is reserved to the vendor catalogue — a customer edition assigns its own biomes to a domain of its own name`,
|
|
75
|
+
});
|
|
76
|
+
}
|
|
77
|
+
});
|
|
67
78
|
if (definition.sources === undefined) {
|
|
68
79
|
if (definition.trustCeiling !== undefined) {
|
|
69
80
|
context.addIssue({
|
|
@@ -91,7 +102,11 @@ function parseCustomerEditionDefinition(raw) {
|
|
|
91
102
|
}
|
|
92
103
|
return result.data;
|
|
93
104
|
}
|
|
94
|
-
function customerTrustCeilingIssues(definition, sourceBiomeIds) {
|
|
105
|
+
function customerTrustCeilingIssues(definition, sourceBiomeIds, catalogueCeiling) {
|
|
106
|
+
if (catalogueCeiling === undefined || catalogueCeiling === null) {
|
|
107
|
+
throw new Error('customerTrustCeilingIssues requires the catalogue ceiling (a ProcessTrustPolicy): ' +
|
|
108
|
+
'without it the domains the vendor reserves are unknown, and an omitted ceiling is not "no ceiling"');
|
|
109
|
+
}
|
|
95
110
|
const fromSources = new Set(sourceBiomeIds);
|
|
96
111
|
const assigned = new Set((definition.trustCeiling?.assignments ?? []).flatMap((assignment) => assignment.biomes));
|
|
97
112
|
const issues = [];
|
|
@@ -105,6 +120,42 @@ function customerTrustCeilingIssues(definition, sourceBiomeIds) {
|
|
|
105
120
|
issues.push(`\`trustCeiling\` assigns biome "${biomeId}", which no source of the definition carries — the ceiling covers the definition's own sources and nothing else`);
|
|
106
121
|
}
|
|
107
122
|
}
|
|
108
|
-
|
|
123
|
+
for (const assignment of definition.trustCeiling?.assignments ?? []) {
|
|
124
|
+
for (const biomeId of assignment.biomes) {
|
|
125
|
+
if (joinsReservedDomain(catalogueCeiling, biomeId, assignment.domain)) {
|
|
126
|
+
issues.push(reservedDomainMessage(biomeId, assignment.domain));
|
|
127
|
+
}
|
|
128
|
+
}
|
|
129
|
+
}
|
|
130
|
+
return issues.sort();
|
|
131
|
+
}
|
|
132
|
+
function joinsReservedDomain(catalogueCeiling, biomeId, domain) {
|
|
133
|
+
const assignments = catalogueCeiling?.assignments ?? [];
|
|
134
|
+
if (!assignments.some((assignment) => assignment.domain === domain)) {
|
|
135
|
+
return false;
|
|
136
|
+
}
|
|
137
|
+
return !assignments.some((assignment) => assignment.domain === domain && assignment.biomes.includes(biomeId));
|
|
138
|
+
}
|
|
139
|
+
const reservedDomainMessage = (biomeId, domain) => `biome "${biomeId}" is placed in trust domain "${domain}", which the vendor catalogue assigns to its own biomes — that domain is reserved to the vendor catalogue`;
|
|
140
|
+
const renderCeiling = (ceiling) => ceiling === undefined ? '(absent: the default domain)' : `"${ceiling}"`;
|
|
141
|
+
function customerLockCeilingIssues(catalogueCeiling, lockBiomes) {
|
|
142
|
+
const issues = [];
|
|
143
|
+
for (const biome of lockBiomes) {
|
|
144
|
+
if (biome.source === undefined) {
|
|
145
|
+
const expected = (0, process_topology_1.deriveTrustCeiling)(biome.id, biome.origin, catalogueCeiling);
|
|
146
|
+
if (biome.trustCeiling !== expected) {
|
|
147
|
+
issues.push(`vendor biome "${biome.id}" states trust ceiling ${renderCeiling(biome.trustCeiling)}, but the catalogue derives ${renderCeiling(expected)}`);
|
|
148
|
+
}
|
|
149
|
+
continue;
|
|
150
|
+
}
|
|
151
|
+
const domain = biome.trustCeiling ?? (0, process_topology_1.defaultTrustDomain)(biome.id, biome.origin);
|
|
152
|
+
if (domain === deployment_1.FIRST_PARTY_TRUST_DOMAIN) {
|
|
153
|
+
issues.push(`biome "${biome.id}" comes from a customer source and is placed in trust domain "${deployment_1.FIRST_PARTY_TRUST_DOMAIN}", which is reserved to the vendor catalogue`);
|
|
154
|
+
}
|
|
155
|
+
else if (joinsReservedDomain(catalogueCeiling, biome.id, domain)) {
|
|
156
|
+
issues.push(reservedDomainMessage(biome.id, domain));
|
|
157
|
+
}
|
|
158
|
+
}
|
|
159
|
+
return issues.sort();
|
|
109
160
|
}
|
|
110
161
|
//# sourceMappingURL=customer-edition-definition.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"customer-edition-definition.js","sourceRoot":"","sources":["../../../src/distribution/lib/customer-edition-definition.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"customer-edition-definition.js","sourceRoot":"","sources":["../../../src/distribution/lib/customer-edition-definition.ts"],"names":[],"mappings":";;;AA0JA,wEAYC;AAoBD,gEAwCC;AA6CD,8DA8BC;AA7SD,6BAAwB;AAGxB,iDAA4D;AAC5D,6DAKgC;AAEhC,iDAAiF;AACjF,mEAA0E;AAC1E,qEAA+E;AAkC/E,MAAM,kBAAkB,GAAG,kCAAkC,CAAC;AAMjD,QAAA,2BAA2B,GAAG,mCAAoB,CAAC,WAAW,CACzE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAClB,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,OAAO,EACL,oFAAoF;SACvF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,OAAO,EACL,iHAAiH;SACpH,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CACF,CAAC;AAGW,QAAA,+BAA+B,GAAG,OAAC;KAC7C,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,iBAAiB,EAAE,4DAAmC;IACtD,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,uDAA+B,CAAC,CAAC,QAAQ,EAAE;IAC5D,YAAY,EAAE,2CAAwB,CAAC,QAAQ,EAAE;IACjD,OAAO,EAAE,OAAC;SACP,KAAK,CAAC,mCAA2B,CAAC;SAClC,GAAG,CAAC,CAAC,EAAE,gDAAgD,CAAC;SACxD,QAAQ,EAAE;SACV,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE;IACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC7C,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC;gBACjC,OAAO,EAAE,UAAU,QAAQ,CAAC,KAAK,+DAA+D;aACjG,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAErC,MAAM,KAAK,GAAG,wCAAyB,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACtE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5D,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;gBAChC,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAGD,CAAC,UAAU,CAAC,YAAY,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE;QACzE,IAAI,UAAU,CAAC,MAAM,KAAK,qCAAwB,EAAE,CAAC;YACnD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,cAAc,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,CAAC;gBACtD,OAAO,EAAE,iBAAiB,qCAAwB,+GAA+G;aAClK,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,cAAc,CAAC;gBACtB,OAAO,EACL,yGAAyG;aAC5G,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EACL,oIAAoI;SACvI,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AASL,SAAgB,8BAA8B,CAC5C,GAAY;IAEZ,MAAM,MAAM,GAAG,uCAA+B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,wCAAwC,MAAM,CAAC,KAAK,CAAC,MAAM;aACxD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAoBD,SAAgB,0BAA0B,CACxC,UAAqC,EACrC,cAAiC,EACjC,gBAAoC;IAEpC,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,oFAAoF;YAClF,oGAAoG,CACvG,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,CAAC,UAAU,CAAC,YAAY,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAClD,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAClC,CACF,CAAC;IACF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CACT,UAAU,OAAO,uFAAuF,CACzG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CACT,mCAAmC,OAAO,iHAAiH,CAC5J,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,UAAU,CAAC,YAAY,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC;QACpE,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACxC,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtE,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAGD,SAAS,mBAAmB,CAC1B,gBAAgD,EAChD,OAAe,EACf,MAAc;IAEd,MAAM,WAAW,GAAG,gBAAgB,EAAE,WAAW,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,WAAW,CAAC,IAAI,CACtB,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,MAAM,KAAK,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CACtE,CAAC;AACJ,CAAC;AAED,MAAM,qBAAqB,GAAG,CAAC,OAAe,EAAE,MAAc,EAAU,EAAE,CACxE,UAAU,OAAO,gCAAgC,MAAM,2GAA2G,CAAC;AAWrK,MAAM,aAAa,GAAG,CAAC,OAA2B,EAAU,EAAE,CAC5D,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,OAAO,GAAG,CAAC;AAc1E,SAAgB,yBAAyB,CACvC,gBAAgD,EAChD,UAA+C;IAE/C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,IAAA,qCAAkB,EACjC,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,MAAM,EACZ,gBAAgB,CACjB,CAAC;YACF,IAAI,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CACT,iBAAiB,KAAK,CAAC,EAAE,0BAA0B,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,+BAA+B,aAAa,CAAC,QAAQ,CAAC,EAAE,CAC7I,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GACV,KAAK,CAAC,YAAY,IAAI,IAAA,qCAAkB,EAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACnE,IAAI,MAAM,KAAK,qCAAwB,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CACT,UAAU,KAAK,CAAC,EAAE,iEAAiE,qCAAwB,8CAA8C,CAC1J,CAAC;QACJ,CAAC;aAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC"}
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
import { z } from 'zod';
|
|
2
|
-
import { BiomeComponentKind, BiomeScalingMode, type BiomeComponentProcessFacts, type PostgresExtensionName, type BiomeTier, type BiomeTarget,
|
|
2
|
+
import { BiomeComponentKind, BiomeScalingMode, type BiomeComponentProcessFacts, type PostgresExtensionName, type BiomeTier, type BiomeTarget, BiomeOrigin, type BiomeAudience, type BiomeBundleSourceSpec } from '../../biome';
|
|
3
3
|
import type { VerifiedResolvedDeployment } from './verified-resolved-deployment';
|
|
4
4
|
import { type ResourceInclusion, type ResourceKindRef, type ResourceLogicalName, type ResourceScope } from '../../resource-requirement';
|
|
5
5
|
import { type PlatformServiceTier } from './distribution';
|
|
@@ -270,5 +270,6 @@ export declare function unsealedProjection(lock: DistributionLock & {
|
|
|
270
270
|
export declare function parseUnsealedDistributionLock(raw: unknown): UnsealedDistributionLock;
|
|
271
271
|
export declare function parseDistributionLock(raw: unknown): DistributionLock;
|
|
272
272
|
export declare function parseDistributionLockForReading(raw: unknown): DistributionLockReadView;
|
|
273
|
+
export declare function biomeOriginsOfLock(lock: DistributionLock): ReadonlyMap<string, BiomeOrigin>;
|
|
273
274
|
export {};
|
|
274
275
|
//# sourceMappingURL=distribution-lock.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"distribution-lock.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/distribution-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAML,kBAAkB,EAIlB,gBAAgB,EAEhB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,
|
|
1
|
+
{"version":3,"file":"distribution-lock.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/distribution-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAML,kBAAkB,EAIlB,gBAAgB,EAEhB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,WAAW,EACX,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC3B,MAAM,aAAa,CAAC;AAcrB,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAKL,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,eAAe,EAKhB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAKL,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC7B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,SAAS,EACf,MAAM,6BAA6B,CAAC;AAGrC,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,uBAAuB,CAAC;CAC7C;AAED,eAAO,MAAM,+BAA+B,EAU7B,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;AAEpD,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,6BAA6B,CAAC;CACvC;AAED,eAAO,MAAM,kCAAkC,EAKhC,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;AAEvD,MAAM,MAAM,oBAAoB,GAC5B,yBAAyB,GACzB,4BAA4B,CAAC;AAEjC,eAAO,MAAM,0BAA0B,EAGjC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAOtC,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,oBAAoB,CAAC;CAC7B;AAED,eAAO,MAAM,6BAA6B,EAM3B,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAMlD,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,4BAA4B,EAK1B,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAuBjD,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,eAAe,CAAC;IACtB,WAAW,EAAE,mBAAmB,CAAC;IACjC,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,QAAQ,EAAE,sBAAsB,CAAC;CAClC;AAED,eAAO,MAAM,2BAA2B,EASzB,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAYhD,wBAAgB,6BAA6B,CAC3C,CAAC,EAAE,IAAI,CAAC,qBAAqB,EAAE,iBAAiB,GAAG,MAAM,GAAG,aAAa,CAAC,EAC1E,CAAC,EAAE,IAAI,CAAC,qBAAqB,EAAE,iBAAiB,GAAG,MAAM,GAAG,aAAa,CAAC,GACzE,MAAM,CAMR;AAsDD,eAAO,MAAM,4BAA4B,EAKvB,CAAC,CAAC,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAAC;AAM9D,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,OAAO,GACX,SAAS,qBAAqB,EAAE,CAUlC;AAwBD,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,YAAY,EAAE,qBAAqB,CAAC;CACrC;AAED,eAAO,MAAM,sBAAsB,EAcpB,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;AA+B3C,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC;IAE1B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IAEZ,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAWD,eAAO,MAAM,uBAAuB,EAKrB,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAO5C,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,WAAW,CAAC;IAEpB,MAAM,EAAE,WAAW,CAAC;IAEpB,SAAS,EAAE,OAAO,CAAC;IAEnB,aAAa,EAAE,kBAAkB,CAAC;IAKlC,MAAM,EAAE,eAAe,CAAC;IAExB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IAUb,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAmB5B,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAsBnD,yBAAyB,CAAC,EAAE,QAAQ,CAClC,MAAM,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC,CACjD,CAAC;IAeF,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAErC,WAAW,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAiCzC,YAAY,CAAC,EAAE,qBAAqB,CAAC;IAKrC,mBAAmB,EAAE,SAAS,uBAAuB,EAAE,CAAC;IA0BxD,gBAAgB,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAqBpD,mBAAmB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAkB1E,aAAa,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACjD,aAAa,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAqBnD,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC,CAAC,CAAC;IAiB9E,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,oBAAoB,EAAE,CAAC,CAAC,CAAC;IAiB5E,gBAAgB,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAapD,YAAY,CAAC,EAAE,MAAM,CAAC;IA4BtB,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAS1D,WAAW,EAAE,MAAM,CAAC;IAMpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IAExC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IAExC,QAAQ,EAAE,aAAa,CAAC;IAExB,WAAW,EAAE,OAAO,CAAC;IAErB,aAAa,EAAE,OAAO,CAAC;IAEvB,kBAAkB,EAAE,uBAAuB,CAAC;IAE5C,gBAAgB,EAAE,gBAAgB,CAAC;IAEnC,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAS7B,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAGD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,uBAAuB;;;kBAKzB,CAAC;AAOZ,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,qBAAqB,CAAC;CAClC;AAED,eAAO,MAAM,0BAA0B;;;;;;;kBAM5B,CAAC;AAOZ,oBAAY,yBAAyB;IACnC,KAAK,UAAU;CAChB;AAYD,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpE;AAaD,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,yBAAyB,EAAE,CAAC;CAC1C;AAED,eAAO,MAAM,2BAA2B;;;kBAU7B,CAAC;AAUZ,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EACtB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC,CAAC,GAC1D,SAAS,CAAC;IACd,QAAQ,CAAC,eAAe,CAAC,EACrB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,oBAAoB,EAAE,CAAC,CAAC,GACzD,SAAS,CAAC;CACf,GAAG,qBAAqB,EAAE,CAS1B;AAGD,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,yBAAyB,EAAE,CAAC;IAEzC,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjD;AAsBD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE;IACJ,QAAQ,CAAC,MAAM,EAAE,SAAS;QACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,qBAAqB,EAAE,GAAG,SAAS,CAAC;KAC1E,EAAE,CAAC;CACL,EACD,QAAQ,EAAE,0BAA0B,GACnC,MAAM,CAAC,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAqD3C;AAOD,eAAO,MAAM,2BAA2B;;;oBAA2B,CAAC;AACpE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAGhF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAE9E;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAoBD,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,kBAAkB,CAAC,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC;IACtE,WAAW,EAAE,gBAAgB,CAAC;IAC9B,YAAY,CAAC,EAAE,0BAA0B,CAAC;CAC3C;AAED,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;kBAMjC,CAAC;AA0dZ,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,qBAAqB,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC;CACpG,GAAG,SAAS,MAAM,EAAE,CAEpB;AAqED,eAAO,MAAM,iBAAiB,EACI,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAGzD,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;AAiCxE,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IAEb,IAAI,EAAE,mBAAmB,CAAC;IAI1B,MAAM,EAAE,6BAA6B,CAAC;CACvC;AAED,eAAO,MAAM,2BAA2B,EAsBhC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAqBzC,MAAM,WAAW,qBAAqB;IAEpC,MAAM,EAAE,MAAM,CAAC;IAEf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,2BAA2B,EAKzB,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AA2ChD,eAAO,MAAM,iCAAiC,cAAe,CAAC;AAE9D,MAAM,MAAM,6BAA6B,GACvC,CAAC,OAAO,iCAAiC,CAAC,CAAC,MAAM,CAAC,CAAC;AAGrD,eAAO,MAAM,gCAAgC,EAAG,CAAU,CAAC;AAM3D,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IAWvB,sBAAsB,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAEzD,gBAAgB,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAEnD,UAAU,EAAE,MAAM,CAAC;IAEnB,SAAS,EAAE,MAAM,CAAC;IAUlB,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAa1B,UAAU,CAAC,EAAE,sBAAsB,CAAC;IAiBpC,eAAe,CAAC,EAAE,SAAS,CAAC;CAC7B;AAGD,MAAM,WAAW,gBAAiB,SAAQ,oBAAoB;IAC5D,aAAa,EAAE,OAAO,gCAAgC,CAAC;IACvD,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IAQ/B,UAAU,CAAC,EAAE,0BAA0B,CAAC;IAQxC,aAAa,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;CAC/C;AAGD,eAAO,MAAM,iCAAiC,EAC5C,oCAA6C,CAAC;AAUhD,MAAM,WAAW,wBAAyB,SAAQ,oBAAoB;IACpE,cAAc,EAAE,OAAO,iCAAiC,CAAC;IACzD,MAAM,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACvC,UAAU,CAAC,EAAE,0BAA0B,CAAC;IACxC,aAAa,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;CAC/C;AAOD,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,0BAA0B,CAAC;IACjC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;CAClC;AAED,eAAO,MAAM,gCAAgC,EA6B1B,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAkDzD,OAAO,CAAC,MAAM,wBAAwB,EAAE,OAAO,MAAM,CAAC;AAetD,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,GAAG;IACxD,QAAQ,CAAC,CAAC,wBAAwB,CAAC,EAAE,IAAI,CAAC;CAC3C,CAAC;AA0JF,eAAO,MAAM,8BAA8B,EACI,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;AA6BnF,eAAO,MAAM,sBAAsB,EACI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;AA2BnE,eAAO,MAAM,4BAA4B,EACI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAGzE,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,UAAU,CAAC;AAQ1D,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;gBAC3B,QAAQ,EAAE,qBAAqB,EAAE,MAAM,EAAE,qBAAqB;CAU3E;AAGD,oBAAY,gCAAgC;IAE1C,wBAAwB,+BAA+B;CACxD;AAGD,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,QAAQ,CAAC,IAAI,EAAE,gCAAgC,CAAC;gBACpC,OAAO,EAAE,MAAM;CAK5B;AAaD,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,wBAAwB,EAClC,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACnD,gBAAgB,CA0BlB;AAOD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,gBAAgB,GAAG;IAAE,QAAQ,CAAC,CAAC,wBAAwB,CAAC,CAAC,EAAE,KAAK,CAAA;CAAE,GACvE,wBAAwB,CAU1B;AAGD,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,OAAO,GACX,wBAAwB,CAa1B;AAiDD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAEpE;AASD,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,OAAO,GACX,wBAAwB,CAK1B;AAUD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,gBAAgB,GACrB,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAElC"}
|
|
@@ -13,6 +13,7 @@ exports.unsealedProjection = unsealedProjection;
|
|
|
13
13
|
exports.parseUnsealedDistributionLock = parseUnsealedDistributionLock;
|
|
14
14
|
exports.parseDistributionLock = parseDistributionLock;
|
|
15
15
|
exports.parseDistributionLockForReading = parseDistributionLockForReading;
|
|
16
|
+
exports.biomeOriginsOfLock = biomeOriginsOfLock;
|
|
16
17
|
const zod_1 = require("zod");
|
|
17
18
|
const biome_1 = require("../../biome");
|
|
18
19
|
const capability_1 = require("../../capability");
|
|
@@ -560,6 +561,22 @@ const refineLockedWorkflowSubjects = (value, context) => {
|
|
|
560
561
|
}
|
|
561
562
|
};
|
|
562
563
|
const refineLockedTrustCeiling = (value, context) => {
|
|
564
|
+
if (value.source !== undefined) {
|
|
565
|
+
if (value.origin !== undefined && value.origin !== biome_1.BiomeOrigin.ThirdParty) {
|
|
566
|
+
context.addIssue({
|
|
567
|
+
code: zod_1.z.ZodIssueCode.custom,
|
|
568
|
+
path: ['origin'],
|
|
569
|
+
message: `biome "${value.id}" carries a \`source\`, so it is external code: its origin is "${biome_1.BiomeOrigin.ThirdParty}", never "${value.origin}"`,
|
|
570
|
+
});
|
|
571
|
+
}
|
|
572
|
+
if (value.trustCeiling === deployment_1.FIRST_PARTY_TRUST_DOMAIN) {
|
|
573
|
+
context.addIssue({
|
|
574
|
+
code: zod_1.z.ZodIssueCode.custom,
|
|
575
|
+
path: ['trustCeiling'],
|
|
576
|
+
message: `biome "${value.id}" carries a \`source\`, so it is external code and cannot be placed in the vendor's "${deployment_1.FIRST_PARTY_TRUST_DOMAIN}" trust domain`,
|
|
577
|
+
});
|
|
578
|
+
}
|
|
579
|
+
}
|
|
563
580
|
if (value.trustCeiling === undefined || value.origin === undefined)
|
|
564
581
|
return;
|
|
565
582
|
if (value.trustCeiling === (0, process_topology_1.defaultTrustDomain)(value.id, value.origin)) {
|
|
@@ -929,4 +946,7 @@ function parseDistributionLock(raw) {
|
|
|
929
946
|
function parseDistributionLockForReading(raw) {
|
|
930
947
|
return parseDistributionLockWith(exports.DistributionLockReaderSchema, raw);
|
|
931
948
|
}
|
|
949
|
+
function biomeOriginsOfLock(lock) {
|
|
950
|
+
return new Map(lock.biomes.map((biome) => [biome.id, biome.origin]));
|
|
951
|
+
}
|
|
932
952
|
//# sourceMappingURL=distribution-lock.js.map
|