@xemahq/contracts 0.79.0 → 0.80.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/.source-stamp.json +2 -2
- package/dist/biome/lib/biome-component.d.ts +4 -0
- package/dist/biome/lib/biome-component.d.ts.map +1 -1
- package/dist/biome/lib/biome-component.js +63 -0
- package/dist/biome/lib/biome-component.js.map +1 -1
- package/dist/biome/lib/biome-manifest.d.ts +12 -0
- package/dist/biome/lib/biome-manifest.d.ts.map +1 -1
- package/dist/biome/xema-biome.schema.json +56 -0
- package/dist/deployment/index.d.ts +4 -0
- package/dist/deployment/index.d.ts.map +1 -1
- package/dist/deployment/index.js +4 -0
- package/dist/deployment/index.js.map +1 -1
- package/dist/deployment/lib/operation-grant.d.ts +22 -0
- package/dist/deployment/lib/operation-grant.d.ts.map +1 -0
- package/dist/deployment/lib/operation-grant.js +45 -0
- package/dist/deployment/lib/operation-grant.js.map +1 -0
- package/dist/deployment/lib/operation-id.d.ts +6 -0
- package/dist/deployment/lib/operation-id.d.ts.map +1 -0
- package/dist/deployment/lib/operation-id.js +12 -0
- package/dist/deployment/lib/operation-id.js.map +1 -0
- package/dist/deployment/lib/organization-sweep-grant.d.ts +18 -0
- package/dist/deployment/lib/organization-sweep-grant.d.ts.map +1 -0
- package/dist/deployment/lib/organization-sweep-grant.js +25 -0
- package/dist/deployment/lib/organization-sweep-grant.js.map +1 -0
- package/dist/deployment/lib/platform-sweep.d.ts +17 -0
- package/dist/deployment/lib/platform-sweep.d.ts.map +1 -0
- package/dist/deployment/lib/platform-sweep.js +21 -0
- package/dist/deployment/lib/platform-sweep.js.map +1 -0
- package/dist/deployment/lib/resolved-deployment.d.ts +24 -2
- package/dist/deployment/lib/resolved-deployment.d.ts.map +1 -1
- package/dist/deployment/lib/resolved-deployment.js +47 -1
- package/dist/deployment/lib/resolved-deployment.js.map +1 -1
- package/dist/distribution/index.d.ts +5 -0
- package/dist/distribution/index.d.ts.map +1 -1
- package/dist/distribution/index.js +12 -1
- package/dist/distribution/index.js.map +1 -1
- package/dist/distribution/lib/capability-domain-owner-duplicates.d.ts +10 -0
- package/dist/distribution/lib/capability-domain-owner-duplicates.d.ts.map +1 -0
- package/dist/distribution/lib/capability-domain-owner-duplicates.js +21 -0
- package/dist/distribution/lib/capability-domain-owner-duplicates.js.map +1 -0
- package/dist/distribution/lib/code-unit-order.d.ts +2 -0
- package/dist/distribution/lib/code-unit-order.d.ts.map +1 -0
- package/dist/distribution/lib/code-unit-order.js +7 -0
- package/dist/distribution/lib/code-unit-order.js.map +1 -0
- package/dist/distribution/lib/distribution-lock.d.ts +8 -0
- package/dist/distribution/lib/distribution-lock.d.ts.map +1 -1
- package/dist/distribution/lib/distribution-lock.js +92 -8
- package/dist/distribution/lib/distribution-lock.js.map +1 -1
- package/dist/distribution/lib/kernel-contract-source-paths.d.ts +1 -1
- package/dist/distribution/lib/kernel-contract-source-paths.d.ts.map +1 -1
- package/dist/distribution/lib/kernel-contract-source-paths.js +9 -0
- package/dist/distribution/lib/kernel-contract-source-paths.js.map +1 -1
- package/dist/distribution/lib/operation-grant-admission.d.ts +23 -0
- package/dist/distribution/lib/operation-grant-admission.d.ts.map +1 -0
- package/dist/distribution/lib/operation-grant-admission.js +72 -0
- package/dist/distribution/lib/operation-grant-admission.js.map +1 -0
- package/dist/distribution/lib/organization-sweep-admission.d.ts +20 -0
- package/dist/distribution/lib/organization-sweep-admission.d.ts.map +1 -0
- package/dist/distribution/lib/organization-sweep-admission.js +45 -0
- package/dist/distribution/lib/organization-sweep-admission.js.map +1 -0
- package/dist/distribution/lib/platform-service-source-index.d.ts +2 -0
- package/dist/distribution/lib/platform-service-source-index.d.ts.map +1 -1
- package/dist/distribution/lib/platform-service-source-index.js +17 -0
- package/dist/distribution/lib/platform-service-source-index.js.map +1 -1
- package/dist/distribution/lib/resolve-unsplit-deployment.d.ts.map +1 -1
- package/dist/distribution/lib/resolve-unsplit-deployment.js +20 -0
- package/dist/distribution/lib/resolve-unsplit-deployment.js.map +1 -1
- package/dist/distribution/lib/sorted-unique-non-empty.d.ts +3 -0
- package/dist/distribution/lib/sorted-unique-non-empty.d.ts.map +1 -0
- package/dist/distribution/lib/sorted-unique-non-empty.js +29 -0
- package/dist/distribution/lib/sorted-unique-non-empty.js.map +1 -0
- package/dist/distribution/lib/verify-resolved-deployment.d.ts +6 -1
- package/dist/distribution/lib/verify-resolved-deployment.d.ts.map +1 -1
- package/dist/distribution/lib/verify-resolved-deployment.js +87 -3
- package/dist/distribution/lib/verify-resolved-deployment.js.map +1 -1
- package/dist/edition-protocol/edition-contract.schema.json +1 -1
- package/dist/edition-protocol/edition-protocol.json +1 -1
- package/dist/edition-protocol/lib/edition-protocol.js +2 -2
- package/dist/resolved-deployment-fixture/lib/resolved-deployment-fixture.d.ts +5 -0
- package/dist/resolved-deployment-fixture/lib/resolved-deployment-fixture.d.ts.map +1 -1
- package/dist/resolved-deployment-fixture/lib/resolved-deployment-fixture.js +38 -4
- package/dist/resolved-deployment-fixture/lib/resolved-deployment-fixture.js.map +1 -1
- package/dist/resource/lib/resource-kind.d.ts +1 -0
- package/dist/resource/lib/resource-kind.d.ts.map +1 -1
- package/dist/resource/lib/resource-kind.js +1 -0
- package/dist/resource/lib/resource-kind.js.map +1 -1
- package/package.json +2 -2
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"organization-sweep-admission.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/organization-sweep-admission.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAsBpE,MAAM,MAAM,yBAAyB,GAAG,sBAAsB,CAAC;AAG/D,oBAAY,4BAA4B;IAEtC,YAAY,kBAAkB;IAE9B,aAAa,mBAAmB;CACjC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACtD,QAAQ,CAAC,QAAQ,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACxD;AAKD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,wBAAwB,GAC7B,0BAA0B,CA8C5B"}
|
|
@@ -0,0 +1,45 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.OrganizationSweepRefusalCode = void 0;
|
|
4
|
+
exports.admitOrganizationSweeps = admitOrganizationSweeps;
|
|
5
|
+
const deployment_1 = require("../../deployment");
|
|
6
|
+
const code_unit_order_1 = require("./code-unit-order");
|
|
7
|
+
const operation_grant_admission_1 = require("./operation-grant-admission");
|
|
8
|
+
var OrganizationSweepRefusalCode;
|
|
9
|
+
(function (OrganizationSweepRefusalCode) {
|
|
10
|
+
OrganizationSweepRefusalCode["UnknownSweep"] = "unknown-sweep";
|
|
11
|
+
OrganizationSweepRefusalCode["UnknownCaller"] = "unknown-caller";
|
|
12
|
+
})(OrganizationSweepRefusalCode || (exports.OrganizationSweepRefusalCode = OrganizationSweepRefusalCode = {}));
|
|
13
|
+
const KNOWN_SWEEPS = new Set(Object.values(deployment_1.PlatformSweep));
|
|
14
|
+
function admitOrganizationSweeps(lock) {
|
|
15
|
+
const grants = [];
|
|
16
|
+
const refusals = [];
|
|
17
|
+
for (const biome of lock.biomes) {
|
|
18
|
+
const workloads = (0, operation_grant_admission_1.workloadComponentsOf)(biome);
|
|
19
|
+
for (const [component, sweeps] of Object.entries(biome.organizationSweepRequirements ?? {})) {
|
|
20
|
+
for (const sweep of sweeps) {
|
|
21
|
+
const refuse = (code, message) => {
|
|
22
|
+
refusals.push({ code, biome: biome.id, component, sweep, message });
|
|
23
|
+
};
|
|
24
|
+
if (!KNOWN_SWEEPS.has(sweep)) {
|
|
25
|
+
refuse(OrganizationSweepRefusalCode.UnknownSweep, `Biome "${biome.id}" declares sweep "${sweep}" for component "${component}", which is not a platform sweep the kernel knows.`);
|
|
26
|
+
continue;
|
|
27
|
+
}
|
|
28
|
+
if (!workloads.has(component)) {
|
|
29
|
+
refuse(OrganizationSweepRefusalCode.UnknownCaller, `Biome "${biome.id}" declares sweep ${sweep} for component "${component}", which is not a workload component of that biome in the lock.`);
|
|
30
|
+
continue;
|
|
31
|
+
}
|
|
32
|
+
grants.push({ caller: { biome: biome.id, component }, sweep });
|
|
33
|
+
}
|
|
34
|
+
}
|
|
35
|
+
}
|
|
36
|
+
grants.sort(deployment_1.compareOrganizationSweepGrants);
|
|
37
|
+
const unique = grants.filter((grant, index) => index === 0 ||
|
|
38
|
+
(0, deployment_1.compareOrganizationSweepGrants)(grants[index - 1], grant) !== 0);
|
|
39
|
+
refusals.sort((a, b) => (0, code_unit_order_1.compareCodeUnits)(a.biome, b.biome) ||
|
|
40
|
+
(0, code_unit_order_1.compareCodeUnits)(a.component, b.component) ||
|
|
41
|
+
(0, code_unit_order_1.compareCodeUnits)(a.sweep, b.sweep) ||
|
|
42
|
+
(0, code_unit_order_1.compareCodeUnits)(a.code, b.code));
|
|
43
|
+
return { grants: unique, refusals };
|
|
44
|
+
}
|
|
45
|
+
//# sourceMappingURL=organization-sweep-admission.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"organization-sweep-admission.js","sourceRoot":"","sources":["../../../src/distribution/lib/organization-sweep-admission.ts"],"names":[],"mappings":";;;AAuDA,0DAgDC;AAvGD,iDAI0B;AAC1B,uDAAqD;AAErD,2EAAmE;AAwBnE,IAAY,4BAKX;AALD,WAAY,4BAA4B;IAEtC,8DAA8B,CAAA;IAE9B,gEAAgC,CAAA;AAClC,CAAC,EALW,4BAA4B,4CAA5B,4BAA4B,QAKvC;AAgBD,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,0BAAa,CAAC,CAAC,CAAC;AAGhF,SAAgB,uBAAuB,CACrC,IAA8B;IAE9B,MAAM,MAAM,GAAgC,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAA+B,EAAE,CAAC;IAEhD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAA,gDAAoB,EAAC,KAAK,CAAC,CAAC;QAC9C,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAC9C,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAC1C,EAAE,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,CAAC,IAAkC,EAAE,OAAe,EAAQ,EAAE;oBAC3E,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;gBACtE,CAAC,CAAC;gBACF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC7B,MAAM,CACJ,4BAA4B,CAAC,YAAY,EACzC,UAAU,KAAK,CAAC,EAAE,qBAAqB,KAAK,oBAAoB,SAAS,oDAAoD,CAC9H,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC9B,MAAM,CACJ,4BAA4B,CAAC,aAAa,EAC1C,UAAU,KAAK,CAAC,EAAE,oBAAoB,KAAK,mBAAmB,SAAS,iEAAiE,CACzI,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,2CAA8B,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAC1B,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACf,KAAK,KAAK,CAAC;QACX,IAAA,2CAA8B,EAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAA8B,EAAE,KAAK,CAAC,KAAK,CAAC,CAC9F,CAAC;IACF,QAAQ,CAAC,IAAI,CACX,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,IAAA,kCAAgB,EAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC;QAClC,IAAA,kCAAgB,EAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC;QAC1C,IAAA,kCAAgB,EAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC;QAClC,IAAA,kCAAgB,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CACnC,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACtC,CAAC"}
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import { z } from 'zod';
|
|
2
2
|
import { type BiomeComponentInstallationClass } from '../../biome';
|
|
3
|
+
import { type CapabilityDomain } from '../../capability';
|
|
3
4
|
import { type PlatformServiceTier } from './distribution';
|
|
4
5
|
export interface PlatformServiceSourceIdentity {
|
|
5
6
|
name: string;
|
|
@@ -12,6 +13,7 @@ export interface PlatformServiceSourceIdentity {
|
|
|
12
13
|
sourceManifestHash: string;
|
|
13
14
|
imageKey: string;
|
|
14
15
|
installationClass?: BiomeComponentInstallationClass;
|
|
16
|
+
ownsCapabilityDomains?: readonly CapabilityDomain[];
|
|
15
17
|
}
|
|
16
18
|
export declare const PlatformServiceSourceIdentitySchema: z.ZodType<PlatformServiceSourceIdentity>;
|
|
17
19
|
export interface PlatformServiceSourceIndex {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-service-source-index.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/platform-service-source-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,aAAa,CAAC;
|
|
1
|
+
{"version":3,"file":"platform-service-source-index.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/platform-service-source-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,aAAa,CAAC;AACrB,OAAO,EAA0B,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGjF,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,gBAAgB,CAAC;AAexB,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,mBAAmB,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IAEtB,IAAI,EAAE,MAAM,CAAC;IAEb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IAMjB,iBAAiB,CAAC,EAAE,+BAA+B,CAAC;IAOpD,qBAAqB,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACrD;AAED,eAAO,MAAM,mCAAmC,EA+BxC,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;AAEjD,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,CAAC,CAAC;IACjB,QAAQ,EAAE,SAAS,6BAA6B,EAAE,CAAC;CACpD;AAED,eAAO,MAAM,gCAAgC,EA4CrC,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAE9C,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,OAAO,GACX,0BAA0B,CAU5B"}
|
|
@@ -4,6 +4,8 @@ exports.PlatformServiceSourceIndexSchema = exports.PlatformServiceSourceIdentity
|
|
|
4
4
|
exports.parsePlatformServiceSourceIndex = parsePlatformServiceSourceIndex;
|
|
5
5
|
const zod_1 = require("zod");
|
|
6
6
|
const biome_1 = require("../../biome");
|
|
7
|
+
const capability_1 = require("../../capability");
|
|
8
|
+
const sorted_unique_non_empty_1 = require("./sorted-unique-non-empty");
|
|
7
9
|
const kernel_contract_authority_1 = require("./kernel-contract-authority");
|
|
8
10
|
const distribution_1 = require("./distribution");
|
|
9
11
|
const GIT_COMMIT_PATTERN = /^[a-f0-9]{40}$/;
|
|
@@ -28,6 +30,7 @@ exports.PlatformServiceSourceIdentitySchema = zod_1.z
|
|
|
28
30
|
sourceManifestHash: kernel_contract_authority_1.BiomeSourceManifestHashSchema,
|
|
29
31
|
imageKey: zod_1.z.string().regex(IMAGE_KEY_PATTERN),
|
|
30
32
|
installationClass: biome_1.BiomeComponentInstallationClassSchema.optional(),
|
|
33
|
+
ownsCapabilityDomains: (0, sorted_unique_non_empty_1.sortedUniqueNonEmpty)(capability_1.CapabilityDomainSchema, 'ownsCapabilityDomains').optional(),
|
|
31
34
|
})
|
|
32
35
|
.strict()
|
|
33
36
|
.superRefine((value, context) => {
|
|
@@ -48,6 +51,7 @@ exports.PlatformServiceSourceIndexSchema = zod_1.z
|
|
|
48
51
|
.superRefine((value, context) => {
|
|
49
52
|
const names = new Map();
|
|
50
53
|
const imageKeys = new Map();
|
|
54
|
+
const domains = new Map();
|
|
51
55
|
for (const [index, service] of value.services.entries()) {
|
|
52
56
|
const existingName = names.get(service.name);
|
|
53
57
|
if (existingName !== undefined) {
|
|
@@ -71,6 +75,19 @@ exports.PlatformServiceSourceIndexSchema = zod_1.z
|
|
|
71
75
|
else {
|
|
72
76
|
imageKeys.set(service.imageKey, index);
|
|
73
77
|
}
|
|
78
|
+
for (const [domainIndex, domain] of (service.ownsCapabilityDomains ?? []).entries()) {
|
|
79
|
+
const existingDomain = domains.get(domain);
|
|
80
|
+
if (existingDomain !== undefined) {
|
|
81
|
+
context.addIssue({
|
|
82
|
+
code: zod_1.z.ZodIssueCode.custom,
|
|
83
|
+
path: ['services', index, 'ownsCapabilityDomains', domainIndex],
|
|
84
|
+
message: `domain "${domain}" is already owned by services[${existingDomain}]`,
|
|
85
|
+
});
|
|
86
|
+
}
|
|
87
|
+
else {
|
|
88
|
+
domains.set(domain, index);
|
|
89
|
+
}
|
|
90
|
+
}
|
|
74
91
|
}
|
|
75
92
|
});
|
|
76
93
|
function parsePlatformServiceSourceIndex(raw) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-service-source-index.js","sourceRoot":"","sources":["../../../src/distribution/lib/platform-service-source-index.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"platform-service-source-index.js","sourceRoot":"","sources":["../../../src/distribution/lib/platform-service-source-index.ts"],"names":[],"mappings":";;;AAyIA,0EAYC;AArJD,6BAAwB;AACxB,uCAGqB;AACrB,iDAAiF;AACjF,uEAAiE;AACjE,2EAA4E;AAC5E,iDAGwB;AAExB,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAC5C,MAAM,oBAAoB,GACxB,+LAA+L,CAAC;AAClM,MAAM,mBAAmB,GAAG,2CAA2C,CAAC;AACxE,MAAM,yBAAyB,GAAG,sCAAsC,CAAC;AACzE,MAAM,iBAAiB,GAAG,gCAAgC,CAAC;AAmC9C,QAAA,mCAAmC,GAAG,OAAC;KACjD,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,wCAAyB;IAC/B,aAAa,EAAE,OAAC;SACb,MAAM,EAAE;SACR,GAAG,EAAE;SACL,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE;QACvD,OAAO,EAAE,gBAAgB;KAC1B,CAAC;IACJ,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC;IAC3C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;IACjD,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAClD,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC;IAC/C,kBAAkB,EAAE,yDAA6B;IACjD,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC7C,iBAAiB,EAAE,6CAAqC,CAAC,QAAQ,EAAE;IACnE,qBAAqB,EAAE,IAAA,8CAAoB,EACzC,mCAAsB,EACtB,uBAAuB,CACxB,CAAC,QAAQ,EAAE;CACb,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,MAAM,CAAC;YACd,OAAO,EAAE,wBAAwB,KAAK,CAAC,IAAI,GAAG;SAC/C,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAA6C,CAAC;AAOpC,QAAA,gCAAgC,GAAG,OAAC;KAC9C,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,2CAAmC,CAAC,CAAC,QAAQ,EAAE;CAClE,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC;gBACjC,OAAO,EAAE,uBAAuB,YAAY,WAAW,OAAO,CAAC,IAAI,GAAG;aACvE,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,gBAAgB,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC;gBACrC,OAAO,EAAE,uBAAuB,gBAAgB,eAAe,OAAO,CAAC,QAAQ,GAAG;aACnF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;QACD,KAAK,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACpF,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,OAAO,CAAC,QAAQ,CAAC;oBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;oBAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,uBAAuB,EAAE,WAAW,CAAC;oBAC/D,OAAO,EAAE,WAAW,MAAM,kCAAkC,cAAc,GAAG;iBAC9E,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAA0C,CAAC;AAE9C,SAAgB,+BAA+B,CAC7C,GAAY;IAEZ,MAAM,MAAM,GAAG,wCAAgC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,wCAAwC,MAAM,CAAC,KAAK,CAAC,MAAM;aACxD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAC5D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"resolve-unsplit-deployment.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/resolve-unsplit-deployment.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,kBAAkB,EACxB,MAAM,kBAAkB,CAAC;
|
|
1
|
+
{"version":3,"file":"resolve-unsplit-deployment.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/resolve-unsplit-deployment.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,kBAAkB,EACxB,MAAM,kBAAkB,CAAC;AAqC1B,MAAM,WAAW,sBAAsB;IAErC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAE/B,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IAErC,QAAQ,CAAC,sBAAsB,EAAE,UAAU,CAAC;IAE5C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAMlC,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAE1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;KACtB,CAAC;IAEF,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AASD,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAqE7B"}
|
|
@@ -7,6 +7,9 @@ const process_topology_1 = require("../../process-topology");
|
|
|
7
7
|
const authorization_lock_1 = require("./authorization-lock");
|
|
8
8
|
const distribution_lock_1 = require("./distribution-lock");
|
|
9
9
|
const image_lock_1 = require("./image-lock");
|
|
10
|
+
const capability_domain_owner_duplicates_1 = require("./capability-domain-owner-duplicates");
|
|
11
|
+
const operation_grant_admission_1 = require("./operation-grant-admission");
|
|
12
|
+
const organization_sweep_admission_1 = require("./organization-sweep-admission");
|
|
10
13
|
async function resolveUnsplitDeployment(input) {
|
|
11
14
|
const lock = (0, distribution_lock_1.parseDistributionLockForReading)(JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(input.lockBytes)));
|
|
12
15
|
const imageLock = (0, image_lock_1.parseImageLock)(JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(input.imagesLockBytes)));
|
|
@@ -19,6 +22,21 @@ async function resolveUnsplitDeployment(input) {
|
|
|
19
22
|
throw new Error(`resolveUnsplitDeployment: the ${name} is for distribution "${distributionId}", but the lock is for "${lock.distributionId}".`);
|
|
20
23
|
}
|
|
21
24
|
}
|
|
25
|
+
const duplicateOwners = (0, capability_domain_owner_duplicates_1.duplicateCapabilityDomainOwners)(lock);
|
|
26
|
+
if (duplicateOwners.length > 0) {
|
|
27
|
+
throw new Error(`resolveUnsplitDeployment: the lock names more than one owner for a capability domain:\n` +
|
|
28
|
+
duplicateOwners.map((duplicate) => ` - [duplicate-capability-domain-owner] ${duplicate.message}`).join('\n'));
|
|
29
|
+
}
|
|
30
|
+
const admission = (0, operation_grant_admission_1.admitOperationGrants)(lock);
|
|
31
|
+
if (admission.refusals.length > 0) {
|
|
32
|
+
throw new Error(`resolveUnsplitDeployment: the lock declares operations that cannot be admitted:\n` +
|
|
33
|
+
admission.refusals.map((refusal) => ` - [${refusal.code}] ${refusal.message}`).join('\n'));
|
|
34
|
+
}
|
|
35
|
+
const sweepAdmission = (0, organization_sweep_admission_1.admitOrganizationSweeps)(lock);
|
|
36
|
+
if (sweepAdmission.refusals.length > 0) {
|
|
37
|
+
throw new Error(`resolveUnsplitDeployment: the lock declares organization sweeps that cannot be admitted:\n` +
|
|
38
|
+
sweepAdmission.refusals.map((refusal) => ` - [${refusal.code}] ${refusal.message}`).join('\n'));
|
|
39
|
+
}
|
|
22
40
|
return deployment_1.ResolvedDeploymentSchema.parse({
|
|
23
41
|
schemaVersion: deployment_1.RESOLVED_DEPLOYMENT_SCHEMA_VERSION,
|
|
24
42
|
deployment: input.deployment,
|
|
@@ -39,6 +57,8 @@ async function resolveUnsplitDeployment(input) {
|
|
|
39
57
|
return { id: biome.id, trustCeiling: ceiling, trustDomain: ceiling };
|
|
40
58
|
}),
|
|
41
59
|
serviceAccounts: [],
|
|
60
|
+
operationGrants: admission.grants,
|
|
61
|
+
organizationSweeps: sweepAdmission.grants,
|
|
42
62
|
provenance: {
|
|
43
63
|
kind: deployment_1.ResolvedDeploymentProvenanceKind.Unsplit,
|
|
44
64
|
resolver: { package: deployment_1.RESOLVER_PACKAGE, version: input.resolverVersion },
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"resolve-unsplit-deployment.js","sourceRoot":"","sources":["../../../src/distribution/lib/resolve-unsplit-deployment.ts"],"names":[],"mappings":";;
|
|
1
|
+
{"version":3,"file":"resolve-unsplit-deployment.js","sourceRoot":"","sources":["../../../src/distribution/lib/resolve-unsplit-deployment.ts"],"names":[],"mappings":";;AA4EA,4DAuEC;AAnJD,2DAAkD;AAClD,iDAM0B;AAC1B,6DAA4D;AAC5D,6DAAsE;AACtE,2DAAsE;AACtE,6CAA8C;AAC9C,6FAAuF;AACvF,2EAAmE;AACnE,iFAAyE;AA8DlE,KAAK,UAAU,wBAAwB,CAC5C,KAA6B;IAE7B,MAAM,IAAI,GAAG,IAAA,mDAA+B,EAC1C,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAC9E,CAAC;IACF,MAAM,SAAS,GAAG,IAAA,2BAAc,EAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CACpF,CAAC;IACF,MAAM,iBAAiB,GAAG,IAAA,mDAA8B,EACtD,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAC3F,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI;QACnC,CAAC,aAAa,EAAE,SAAS,CAAC,cAAc,CAAC;QACzC,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,cAAc,CAAC;KAChD,EAAE,CAAC;QACX,IAAI,cAAc,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,yBAAyB,cAAc,2BAA2B,IAAI,CAAC,cAAc,IAAI,CAC/H,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,IAAA,oEAA+B,EAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,yFAAyF;YACvF,eAAe,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,2CAA2C,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAChH,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAA,gDAAoB,EAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,mFAAmF;YACjF,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7F,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,IAAA,sDAAuB,EAAC,IAAI,CAAC,CAAC;IACrD,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,4FAA4F;YAC1F,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAClG,CAAC;IACJ,CAAC;IACD,OAAO,qCAAwB,CAAC,KAAK,CAAC;QACpC,aAAa,EAAE,+CAAkC;QACjD,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,OAAO,EAAE;YACP,EAAE,EAAE,IAAI,CAAC,cAAc;YACvB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO;YAC9B,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;YAChC,UAAU,EAAE,MAAM,IAAA,2BAAS,EAAC,KAAK,CAAC,SAAS,CAAC;YAC5C,gBAAgB,EAAE,MAAM,IAAA,2BAAS,EAAC,KAAK,CAAC,eAAe,CAAC;YACxD,uBAAuB,EAAE,MAAM,IAAA,2BAAS,EAAC,KAAK,CAAC,sBAAsB,CAAC;YACtE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG;SACvB;QACD,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;aACrB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACxD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAEb,MAAM,OAAO,GAAG,IAAA,qCAAkB,EAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1F,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;QACvE,CAAC,CAAC;QACJ,eAAe,EAAE,EAAE;QACnB,eAAe,EAAE,SAAS,CAAC,MAAM;QACjC,kBAAkB,EAAE,cAAc,CAAC,MAAM;QACzC,UAAU,EAAE;YACV,IAAI,EAAE,6CAAgC,CAAC,OAAO;YAC9C,QAAQ,EAAE,EAAE,OAAO,EAAE,6BAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,eAAe,EAAE;SACxE;KACF,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sorted-unique-non-empty.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/sorted-unique-non-empty.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,MAAM,EACnD,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,EAAE,MAAM,0FAuBb"}
|
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.sortedUniqueNonEmpty = sortedUniqueNonEmpty;
|
|
4
|
+
const zod_1 = require("zod");
|
|
5
|
+
const code_unit_order_1 = require("./code-unit-order");
|
|
6
|
+
function sortedUniqueNonEmpty(schema, what) {
|
|
7
|
+
return zod_1.z
|
|
8
|
+
.array(schema)
|
|
9
|
+
.superRefine((list, context) => {
|
|
10
|
+
if (list.length === 0) {
|
|
11
|
+
context.addIssue({
|
|
12
|
+
code: zod_1.z.ZodIssueCode.custom,
|
|
13
|
+
message: `${what} lists nothing — omit it`,
|
|
14
|
+
});
|
|
15
|
+
}
|
|
16
|
+
list.forEach((entry, index) => {
|
|
17
|
+
const previous = list[index - 1];
|
|
18
|
+
if (previous !== undefined && (0, code_unit_order_1.compareCodeUnits)(previous, entry) >= 0) {
|
|
19
|
+
context.addIssue({
|
|
20
|
+
code: zod_1.z.ZodIssueCode.custom,
|
|
21
|
+
path: [index],
|
|
22
|
+
message: `${what} must be sorted and unique ("${entry}" follows "${previous}")`,
|
|
23
|
+
});
|
|
24
|
+
}
|
|
25
|
+
});
|
|
26
|
+
})
|
|
27
|
+
.readonly();
|
|
28
|
+
}
|
|
29
|
+
//# sourceMappingURL=sorted-unique-non-empty.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sorted-unique-non-empty.js","sourceRoot":"","sources":["../../../src/distribution/lib/sorted-unique-non-empty.ts"],"names":[],"mappings":";;AAIA,oDAyBC;AA7BD,6BAAwB;AACxB,uDAAqD;AAGrD,SAAgB,oBAAoB,CAClC,MAAoB,EACpB,IAAY;IAEZ,OAAO,OAAC;SACL,KAAK,CAAC,MAAM,CAAC;SACb,WAAW,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;QAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,GAAG,IAAI,0BAA0B;aAC3C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACjC,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAA,kCAAgB,EAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrE,OAAO,CAAC,QAAQ,CAAC;oBACf,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;oBAC3B,IAAI,EAAE,CAAC,KAAK,CAAC;oBACb,OAAO,EAAE,GAAG,IAAI,gCAAgC,KAAK,cAAc,QAAQ,IAAI;iBAChF,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;SACD,QAAQ,EAAE,CAAC;AAChB,CAAC"}
|
|
@@ -16,7 +16,12 @@ export declare enum ResolvedDeploymentRefusalCode {
|
|
|
16
16
|
BiomeMissing = "biome-missing",
|
|
17
17
|
BiomeNotInLock = "biome-not-in-lock",
|
|
18
18
|
TrustCeilingMismatch = "trust-ceiling-mismatch",
|
|
19
|
-
UnknownComponent = "unknown-component"
|
|
19
|
+
UnknownComponent = "unknown-component",
|
|
20
|
+
OperationGrantRefused = "operation-grant-refused",
|
|
21
|
+
OperationGrantsMismatch = "operation-grants-mismatch",
|
|
22
|
+
OrganizationSweepRefused = "organization-sweep-refused",
|
|
23
|
+
OrganizationSweepsMismatch = "organization-sweeps-mismatch",
|
|
24
|
+
DuplicateCapabilityDomainOwner = "duplicate-capability-domain-owner"
|
|
20
25
|
}
|
|
21
26
|
export interface ResolvedDeploymentRefusal {
|
|
22
27
|
readonly code: ResolvedDeploymentRefusalCode;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verify-resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/verify-resolved-deployment.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"verify-resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/distribution/lib/verify-resolved-deployment.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EACV,yBAAyB,EAEzB,gCAAgC,EAEjC,MAAM,gCAAgC,CAAC;AAsCxC,oBAAY,4BAA4B;IAEtC,MAAM,WAAW;IAEjB,OAAO,YAAY;CACpB;AAED,MAAM,WAAW,+BAA+B,CAC9C,CAAC,SAAS,4BAA4B,GAAG,4BAA4B;IAGrE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;CACrB;AAGD,oBAAY,6BAA6B;IAEvC,iBAAiB,uBAAuB;IAExC,kBAAkB,yBAAyB;IAE3C,iBAAiB,wBAAwB;IAEzC,kBAAkB,yBAAyB;IAE3C,aAAa,mBAAmB;IAKhC,iBAAiB,wBAAwB;IAEzC,YAAY,kBAAkB;IAE9B,cAAc,sBAAsB;IAEpC,oBAAoB,2BAA2B;IAE/C,gBAAgB,sBAAsB;IAEtC,qBAAqB,4BAA4B;IAEjD,uBAAuB,8BAA8B;IAErD,wBAAwB,+BAA+B;IAEvD,0BAA0B,iCAAiC;IAE3D,8BAA8B,sCAAsC;CACrE;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAE7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAEjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,QAAQ,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACzD;AAED,MAAM,MAAM,8BAA8B,GACtC,CAAC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,yBAAyB,CAAC,GACnD,yBAAyB,CAAC;AAE9B,MAAM,MAAM,qCAAqC,GAC7C,CAAC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,gCAAgC,CAAC,GAC1D,yBAAyB,CAAC;AA6C9B,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,CAAC,EAAE,+BAA+B,CAAC,4BAA4B,CAAC,MAAM,CAAC,GAC7E,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAC3C,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE;IACP,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC,OAAO,CAAC;CACvD,GACA,OAAO,CAAC,qCAAqC,CAAC,CAAC;AAkLlD,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,CAAC,EAAE,+BAA+B,CAAC,4BAA4B,CAAC,MAAM,CAAC,GAC7E,OAAO,CAAC,yBAAyB,CAAC,CAAC;AACtC,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,OAAO,EACjB,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE;IACP,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC,OAAO,CAAC;CACvD,GACA,OAAO,CAAC,gCAAgC,CAAC,CAAC"}
|
|
@@ -4,6 +4,10 @@ exports.ResolvedDeploymentRefusalCode = exports.ResolvedDeploymentAcceptance = v
|
|
|
4
4
|
exports.verifyResolvedDeployment = verifyResolvedDeployment;
|
|
5
5
|
exports.assertResolvedDeployment = assertResolvedDeployment;
|
|
6
6
|
const content_address_1 = require("../../content-address");
|
|
7
|
+
const code_unit_order_1 = require("./code-unit-order");
|
|
8
|
+
const capability_domain_owner_duplicates_1 = require("./capability-domain-owner-duplicates");
|
|
9
|
+
const operation_grant_admission_1 = require("./operation-grant-admission");
|
|
10
|
+
const organization_sweep_admission_1 = require("./organization-sweep-admission");
|
|
7
11
|
const deployment_1 = require("../../deployment");
|
|
8
12
|
const process_topology_1 = require("../../process-topology");
|
|
9
13
|
const distribution_lock_1 = require("./distribution-lock");
|
|
@@ -24,6 +28,11 @@ var ResolvedDeploymentRefusalCode;
|
|
|
24
28
|
ResolvedDeploymentRefusalCode["BiomeNotInLock"] = "biome-not-in-lock";
|
|
25
29
|
ResolvedDeploymentRefusalCode["TrustCeilingMismatch"] = "trust-ceiling-mismatch";
|
|
26
30
|
ResolvedDeploymentRefusalCode["UnknownComponent"] = "unknown-component";
|
|
31
|
+
ResolvedDeploymentRefusalCode["OperationGrantRefused"] = "operation-grant-refused";
|
|
32
|
+
ResolvedDeploymentRefusalCode["OperationGrantsMismatch"] = "operation-grants-mismatch";
|
|
33
|
+
ResolvedDeploymentRefusalCode["OrganizationSweepRefused"] = "organization-sweep-refused";
|
|
34
|
+
ResolvedDeploymentRefusalCode["OrganizationSweepsMismatch"] = "organization-sweeps-mismatch";
|
|
35
|
+
ResolvedDeploymentRefusalCode["DuplicateCapabilityDomainOwner"] = "duplicate-capability-domain-owner";
|
|
27
36
|
})(ResolvedDeploymentRefusalCode || (exports.ResolvedDeploymentRefusalCode = ResolvedDeploymentRefusalCode = {}));
|
|
28
37
|
function acceptanceOf(options) {
|
|
29
38
|
if (options === undefined)
|
|
@@ -100,7 +109,7 @@ async function verifyResolvedDeployment(resolved, lockBytes, options) {
|
|
|
100
109
|
const refusals = [];
|
|
101
110
|
const lockBiomes = new Map(lock.biomes.map((biome) => [biome.id, biome]));
|
|
102
111
|
const placed = new Set(artifact.biomes.map((biome) => biome.id));
|
|
103
|
-
for (const id of [...lockBiomes.keys()].sort(
|
|
112
|
+
for (const id of [...lockBiomes.keys()].sort(code_unit_order_1.compareCodeUnits)) {
|
|
104
113
|
if (!placed.has(id)) {
|
|
105
114
|
refusals.push({
|
|
106
115
|
code: ResolvedDeploymentRefusalCode.BiomeMissing,
|
|
@@ -144,6 +153,43 @@ async function verifyResolvedDeployment(resolved, lockBytes, options) {
|
|
|
144
153
|
});
|
|
145
154
|
}
|
|
146
155
|
}
|
|
156
|
+
const duplicateOwners = (0, capability_domain_owner_duplicates_1.duplicateCapabilityDomainOwners)(lock);
|
|
157
|
+
for (const duplicate of duplicateOwners) {
|
|
158
|
+
refusals.push({
|
|
159
|
+
code: ResolvedDeploymentRefusalCode.DuplicateCapabilityDomainOwner,
|
|
160
|
+
message: duplicate.message,
|
|
161
|
+
});
|
|
162
|
+
}
|
|
163
|
+
if (duplicateOwners.length === 0) {
|
|
164
|
+
const admission = (0, operation_grant_admission_1.admitOperationGrants)(lock);
|
|
165
|
+
for (const refusal of admission.refusals) {
|
|
166
|
+
refusals.push({
|
|
167
|
+
code: ResolvedDeploymentRefusalCode.OperationGrantRefused,
|
|
168
|
+
biome: refusal.biome,
|
|
169
|
+
message: `[${refusal.code}] ${refusal.message}`,
|
|
170
|
+
});
|
|
171
|
+
}
|
|
172
|
+
if (admission.refusals.length === 0) {
|
|
173
|
+
const mismatch = describeGrantMismatch(artifact.operationGrants, admission.grants);
|
|
174
|
+
if (mismatch !== undefined) {
|
|
175
|
+
refusals.push({ code: ResolvedDeploymentRefusalCode.OperationGrantsMismatch, message: mismatch });
|
|
176
|
+
}
|
|
177
|
+
}
|
|
178
|
+
const sweepAdmission = (0, organization_sweep_admission_1.admitOrganizationSweeps)(lock);
|
|
179
|
+
for (const refusal of sweepAdmission.refusals) {
|
|
180
|
+
refusals.push({
|
|
181
|
+
code: ResolvedDeploymentRefusalCode.OrganizationSweepRefused,
|
|
182
|
+
biome: refusal.biome,
|
|
183
|
+
message: `[${refusal.code}] ${refusal.message}`,
|
|
184
|
+
});
|
|
185
|
+
}
|
|
186
|
+
if (sweepAdmission.refusals.length === 0) {
|
|
187
|
+
const mismatch = describeSweepMismatch(artifact.organizationSweeps, sweepAdmission.grants);
|
|
188
|
+
if (mismatch !== undefined) {
|
|
189
|
+
refusals.push({ code: ResolvedDeploymentRefusalCode.OrganizationSweepsMismatch, message: mismatch });
|
|
190
|
+
}
|
|
191
|
+
}
|
|
192
|
+
}
|
|
147
193
|
if (refusals.length > 0)
|
|
148
194
|
return { ok: false, refusals };
|
|
149
195
|
if (unsplit) {
|
|
@@ -172,7 +218,45 @@ async function assertResolvedDeployment(resolved, lockBytes, options) {
|
|
|
172
218
|
function refuse(refusal) {
|
|
173
219
|
return { ok: false, refusals: [refusal] };
|
|
174
220
|
}
|
|
175
|
-
function
|
|
176
|
-
|
|
221
|
+
function grantText(grant) {
|
|
222
|
+
const receiver = grant.receiver.kind === deployment_1.OperationGrantReceiverKind.Biome ? `biome "${grant.receiver.biome}"` : `platform service "${grant.receiver.service}"`;
|
|
223
|
+
return `${grant.caller.biome}/${grant.caller.component} -> ${grant.operation} on ${receiver}`;
|
|
224
|
+
}
|
|
225
|
+
function describeGrantMismatch(stated, admitted) {
|
|
226
|
+
const shared = Math.min(stated.length, admitted.length);
|
|
227
|
+
for (let index = 0; index < shared; index++) {
|
|
228
|
+
const have = stated[index];
|
|
229
|
+
const want = admitted[index];
|
|
230
|
+
if (have === undefined || want === undefined)
|
|
231
|
+
continue;
|
|
232
|
+
if ((0, deployment_1.compareOperationGrants)(have, want) !== 0 || grantText(have) !== grantText(want)) {
|
|
233
|
+
return (`the resolved deployment's operationGrants differ from the lock's admitted grants at row ${index}: ` +
|
|
234
|
+
`it states "${grantText(have)}", but the lock admits "${grantText(want)}".`);
|
|
235
|
+
}
|
|
236
|
+
}
|
|
237
|
+
if (stated.length !== admitted.length) {
|
|
238
|
+
return (`the resolved deployment states ${stated.length} operationGrants, but the lock admits ${admitted.length}.`);
|
|
239
|
+
}
|
|
240
|
+
return undefined;
|
|
241
|
+
}
|
|
242
|
+
function sweepText(row) {
|
|
243
|
+
return `${row.caller.biome}/${row.caller.component} -> sweep ${row.sweep}`;
|
|
244
|
+
}
|
|
245
|
+
function describeSweepMismatch(stated, admitted) {
|
|
246
|
+
const shared = Math.min(stated.length, admitted.length);
|
|
247
|
+
for (let index = 0; index < shared; index++) {
|
|
248
|
+
const have = stated[index];
|
|
249
|
+
const want = admitted[index];
|
|
250
|
+
if (have === undefined || want === undefined)
|
|
251
|
+
continue;
|
|
252
|
+
if ((0, deployment_1.compareOrganizationSweepGrants)(have, want) !== 0) {
|
|
253
|
+
return (`the resolved deployment's organizationSweeps differ from the lock's admitted sweeps at row ${index}: ` +
|
|
254
|
+
`it states "${sweepText(have)}", but the lock admits "${sweepText(want)}".`);
|
|
255
|
+
}
|
|
256
|
+
}
|
|
257
|
+
if (stated.length !== admitted.length) {
|
|
258
|
+
return `the resolved deployment states ${stated.length} organizationSweeps, but the lock admits ${admitted.length}.`;
|
|
259
|
+
}
|
|
260
|
+
return undefined;
|
|
177
261
|
}
|
|
178
262
|
//# sourceMappingURL=verify-resolved-deployment.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verify-resolved-deployment.js","sourceRoot":"","sources":["../../../src/distribution/lib/verify-resolved-deployment.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"verify-resolved-deployment.js","sourceRoot":"","sources":["../../../src/distribution/lib/verify-resolved-deployment.ts"],"names":[],"mappings":";;;AA+LA,4DA8KC;AAeD,4DAwBC;AApZD,2DAAkD;AAClD,uDAAqD;AACrD,6FAAuF;AACvF,2EAAmE;AACnE,iFAAyE;AACzE,iDAQ0B;AAC1B,6DAA4D;AAC5D,2DAG6B;AA4C7B,IAAY,4BAKX;AALD,WAAY,4BAA4B;IAEtC,iDAAiB,CAAA;IAEjB,mDAAmB,CAAA;AACrB,CAAC,EALW,4BAA4B,4CAA5B,4BAA4B,QAKvC;AAUD,IAAY,6BAkCX;AAlCD,WAAY,6BAA6B;IAEvC,yEAAwC,CAAA;IAExC,4EAA2C,CAAA;IAE3C,0EAAyC,CAAA;IAEzC,4EAA2C,CAAA;IAE3C,iEAAgC,CAAA;IAKhC,0EAAyC,CAAA;IAEzC,+DAA8B,CAAA;IAE9B,qEAAoC,CAAA;IAEpC,gFAA+C,CAAA;IAE/C,uEAAsC,CAAA;IAEtC,kFAAiD,CAAA;IAEjD,sFAAqD,CAAA;IAErD,wFAAuD,CAAA;IAEvD,4FAA2D,CAAA;IAE3D,qGAAoE,CAAA;AACtE,CAAC,EAlCW,6BAA6B,6CAA7B,6BAA6B,QAkCxC;AA+BD,SAAS,YAAY,CAAC,OAAgB;IACpC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,4BAA4B,CAAC,MAAM,CAAC;IACtE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,SAAS,CACjB,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC;IAC3E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CACjB,+CAA+C,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAC/H,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAI,OAAyC,CAAC,MAAM,CAAC;IACjE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,4BAA4B,CAAC,MAAM,CAAC;IACrE,IACE,MAAM,KAAK,4BAA4B,CAAC,MAAM;QAC9C,MAAM,KAAK,4BAA4B,CAAC,OAAO,EAC/C,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,6CAA6C,4BAA4B,CAAC,MAAM,OAAO;YACrF,IAAI,4BAA4B,CAAC,OAAO,UAAU,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAChG,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAwBM,KAAK,UAAU,wBAAwB,CAC5C,QAAiB,EACjB,SAAqB,EACrB,OAAyC;IAEzC,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,qCAAwB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,iBAAiB;YACrD,OAAO,EACL,0CAA0C;gBAC1C,MAAM,CAAC,KAAK,CAAC,MAAM;qBAChB,GAAG,CACF,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CACnE;qBACA,IAAI,CAAC,IAAI,CAAC;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAA,wCAA2B,EAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,OAAO,IAAI,MAAM,KAAK,4BAA4B,CAAC,OAAO,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,kBAAkB;YACtD,OAAO,EACL,2FAA2F;gBAC3F,oDAAoD;SACvD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,MAAM,KAAK,4BAA4B,CAAC,MAAM,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,iBAAiB;YACrD,OAAO,EACL,oGAAoG;SACvG,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAS,EAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,kBAAkB;YACtD,OAAO,EACL,0BAA0B,MAAM,kDAAkD;gBAClF,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,qCAAqC;SACtE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAA8B,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,mDAA+B,EACpC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CACxE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,aAAa;YACjD,OAAO,EAAE,wDAAyD,KAAe,CAAC,OAAO,EAAE;SAC5F,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,iBAAiB;YACrD,OAAO,EACL,0CAA0C,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB;gBACjF,sBAAsB,IAAI,CAAC,cAAc,kDAAkD;SAC9F,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAgC,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,kCAAgB,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,YAAY;gBAChD,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,2BAA2B,EAAE,mDAAmD;aAC1F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,cAAc;gBAClD,KAAK,EAAE,KAAK,CAAC,EAAE;gBACf,OAAO,EAAE,yCAAyC,KAAK,CAAC,EAAE,mCAAmC;aAC9F,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,IAAI,IAAA,qCAAkB,EAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,oBAAoB;gBACxD,KAAK,EAAE,KAAK,CAAC,EAAE;gBACf,OAAO,EACL,yCAAyC,KAAK,CAAC,EAAE,uBAAuB;oBACxE,IAAI,KAAK,CAAC,YAAY,yBAAyB,OAAO,IAAI;aAC7D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC/C,KAAK,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAErC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC1E,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,gBAAgB;gBACpD,KAAK;gBACL,cAAc,EAAE,OAAO,CAAC,IAAI;gBAC5B,OAAO,EACL,mBAAmB,OAAO,CAAC,IAAI,cAAc,KAAK,IAAI,SAAS,mBAAmB;oBAClF,UAAU,KAAK,yBAAyB,SAAS,IAAI;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,IAAA,oEAA+B,EAAC,IAAI,CAAC,CAAC;IAC9D,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;QACxC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,6BAA6B,CAAC,8BAA8B;YAClE,OAAO,EAAE,SAAS,CAAC,OAAO;SAC3B,CAAC,CAAC;IACL,CAAC;IAGD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,IAAA,gDAAoB,EAAC,IAAI,CAAC,CAAC;QAC7C,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACzC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,qBAAqB;gBACzD,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;YACnF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAA6B,CAAC,uBAAuB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpG,CAAC;QACH,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,sDAAuB,EAAC,IAAI,CAAC,CAAC;QACrD,KAAK,MAAM,OAAO,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,6BAA6B,CAAC,wBAAwB;gBAC5D,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,OAAO,EAAE,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE;aAChD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,kBAAkB,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;YAC3F,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAA6B,CAAC,0BAA0B,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvG,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAKxD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,QAA6C;YACvD,IAAI;SACuD,CAAC;IAChE,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,QAAsC;QAChD,IAAI;KACgD,CAAC;AACzD,CAAC;AAeM,KAAK,UAAU,wBAAwB,CAC5C,QAAiB,EACjB,SAAqB,EACrB,OAAyC;IAGzC,MAAM,YAAY,GAAG,MACnB,wBAOD,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,mCAAmC;YACjC,YAAY,CAAC,QAAQ;iBAClB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;iBAC5D,IAAI,CAAC,IAAI,CAAC,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,MAAM,CACb,OAAkC;IAElC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;AAC5C,CAAC;AAID,SAAS,SAAS,CAAC,KAAe;IAChC,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,uCAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,qBAAqB,KAAK,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC;IAChJ,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,OAAO,KAAK,CAAC,SAAS,OAAO,QAAQ,EAAE,CAAC;AAChG,CAAC;AAOD,SAAS,qBAAqB,CAC5B,MAA2B,EAC3B,QAA6B;IAE7B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACvD,IAAI,IAAA,mCAAsB,EAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACpF,OAAO,CACL,2FAA2F,KAAK,IAAI;gBACpG,cAAc,SAAS,CAAC,IAAI,CAAC,2BAA2B,SAAS,CAAC,IAAI,CAAC,IAAI,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,CACL,kCAAkC,MAAM,CAAC,MAAM,yCAAyC,QAAQ,CAAC,MAAM,GAAG,CAC3G,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,GAA2B;IAC5C,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,aAAa,GAAG,CAAC,KAAK,EAAE,CAAC;AAC7E,CAAC;AAMD,SAAS,qBAAqB,CAC5B,MAAyC,EACzC,QAA2C;IAE3C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACvD,IAAI,IAAA,2CAA8B,EAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,CACL,8FAA8F,KAAK,IAAI;gBACvG,cAAc,SAAS,CAAC,IAAI,CAAC,2BAA2B,SAAS,CAAC,IAAI,CAAC,IAAI,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,kCAAkC,MAAM,CAAC,MAAM,4CAA4C,QAAQ,CAAC,MAAM,GAAG,CAAC;IACvH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
|