@xemahq/contracts 0.79.0 → 0.81.0

package/dist/capability/lib/capability-descriptor-kind.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_CAPABILITY_DESCRIPTOR_KIND = exports.CapabilityDescriptorKindSchema = exports.CapabilityDescriptorKind = exports.CAPABILITY_DESCRIPTOR_KIND_FIELD = void 0;
+exports.resolveCapabilityDescriptorKind = resolveCapabilityDescriptorKind;
+exports.isCapabilityInvocable = isCapabilityInvocable;
+const zod_1 = require("zod");
+exports.CAPABILITY_DESCRIPTOR_KIND_FIELD = 'descriptorKind';
+var CapabilityDescriptorKind;
+(function (CapabilityDescriptorKind) {
+    CapabilityDescriptorKind["Invocable"] = "invocable";
+    CapabilityDescriptorKind["Authority"] = "authority";
+})(CapabilityDescriptorKind || (exports.CapabilityDescriptorKind = CapabilityDescriptorKind = {}));
+exports.CapabilityDescriptorKindSchema = zod_1.z.nativeEnum(CapabilityDescriptorKind);
+exports.DEFAULT_CAPABILITY_DESCRIPTOR_KIND = CapabilityDescriptorKind.Invocable;
+function resolveCapabilityDescriptorKind(descriptor) {
+    const declared = descriptor[exports.CAPABILITY_DESCRIPTOR_KIND_FIELD];
+    if (declared === undefined) {
+        return exports.DEFAULT_CAPABILITY_DESCRIPTOR_KIND;
+    }
+    const parsed = exports.CapabilityDescriptorKindSchema.safeParse(declared);
+    if (!parsed.success) {
+        throw new TypeError(`Capability descriptor declares an unknown ${exports.CAPABILITY_DESCRIPTOR_KIND_FIELD} ` +
+            `${JSON.stringify(declared)}.`);
+    }
+    return parsed.data;
+}
+function isCapabilityInvocable(descriptor) {
+    return (resolveCapabilityDescriptorKind(descriptor) ===
+        CapabilityDescriptorKind.Invocable);
+}
+//# sourceMappingURL=capability-descriptor-kind.js.map

package/dist/capability/lib/capability-descriptor-kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-descriptor-kind.js","sourceRoot":"","sources":["../../../src/capability/lib/capability-descriptor-kind.ts"],"names":[],"mappings":";;;AA2DA,0EAeC;AAQD,sDAOC;AAzFD,6BAAwB;AAkCX,QAAA,gCAAgC,GAAG,gBAAgB,CAAC;AAEjE,IAAY,wBAKX;AALD,WAAY,wBAAwB;IAElC,mDAAuB,CAAA;IAEvB,mDAAuB,CAAA;AACzB,CAAC,EALW,wBAAwB,wCAAxB,wBAAwB,QAKnC;AAEY,QAAA,8BAA8B,GAAG,OAAC,CAAC,UAAU,CACxD,wBAAwB,CACzB,CAAC;AAGW,QAAA,kCAAkC,GAC7C,wBAAwB,CAAC,SAAS,CAAC;AAUrC,SAAgB,+BAA+B,CAC7C,UAA6C;IAE7C,MAAM,QAAQ,GAAG,UAAU,CAAC,wCAAgC,CAAC,CAAC;IAC9D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,0CAAkC,CAAC;IAC5C,CAAC;IACD,MAAM,MAAM,GAAG,sCAA8B,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,SAAS,CACjB,6CAA6C,wCAAgC,GAAG;YAC9E,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CACjC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAQD,SAAgB,qBAAqB,CACnC,UAA6C;IAE7C,OAAO,CACL,+BAA+B,CAAC,UAAU,CAAC;QAC3C,wBAAwB,CAAC,SAAS,CACnC,CAAC;AACJ,CAAC"}

package/dist/capability-projection/index.d.ts

@@ -1,3 +1,4 @@
+export * from './lib/capability-descriptor-kind-binding';
 export * from './lib/capability-invocation-binding';
 export * from './lib/capability-sync-manifest';
 export * from './lib/projected-capability';

package/dist/capability-projection/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/capability-projection/index.ts"],"names":[],"mappings":"AAAA,cAAc,qCAAqC,CAAC;AACpD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,4BAA4B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/capability-projection/index.ts"],"names":[],"mappings":"AAAA,cAAc,0CAA0C,CAAC;AACzD,cAAc,qCAAqC,CAAC;AACpD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,4BAA4B,CAAC"}

package/dist/capability-projection/index.js

@@ -14,6 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/capability-descriptor-kind-binding"), exports);
 __exportStar(require("./lib/capability-invocation-binding"), exports);
 __exportStar(require("./lib/capability-sync-manifest"), exports);
 __exportStar(require("./lib/projected-capability"), exports);

package/dist/capability-projection/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/capability-projection/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sEAAoD;AACpD,iEAA+C;AAC/C,6DAA2C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/capability-projection/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2EAAyD;AACzD,sEAAoD;AACpD,iEAA+C;AAC/C,6DAA2C"}

package/dist/capability-projection/lib/capability-descriptor-kind-binding.d.ts

@@ -0,0 +1,9 @@
+import { z } from 'zod';
+import { CapabilityDescriptorKind } from '../../capability';
+import type { CapabilityInvocationBinding } from './capability-invocation-binding';
+export interface CapabilityDescriptorKindBindingFields {
+    readonly descriptorKind?: CapabilityDescriptorKind | undefined;
+    readonly invocation?: CapabilityInvocationBinding | undefined;
+}
+export declare function refineCapabilityDescriptorKindBinding(descriptor: CapabilityDescriptorKindBindingFields, context: z.RefinementCtx): void;
+//# sourceMappingURL=capability-descriptor-kind-binding.d.ts.map

package/dist/capability-projection/lib/capability-descriptor-kind-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-descriptor-kind-binding.d.ts","sourceRoot":"","sources":["../../../src/capability-projection/lib/capability-descriptor-kind-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAEL,wBAAwB,EACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAGnF,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,cAAc,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,UAAU,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;CAC/D;AAUD,wBAAgB,qCAAqC,CACnD,UAAU,EAAE,qCAAqC,EACjD,OAAO,EAAE,CAAC,CAAC,aAAa,GACvB,IAAI,CAaN"}

package/dist/capability-projection/lib/capability-descriptor-kind-binding.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.refineCapabilityDescriptorKindBinding = refineCapabilityDescriptorKindBinding;
+const capability_1 = require("../../capability");
+function refineCapabilityDescriptorKindBinding(descriptor, context) {
+    if (descriptor.descriptorKind === capability_1.CapabilityDescriptorKind.Authority &&
+        descriptor.invocation !== undefined) {
+        context.addIssue({
+            code: 'custom',
+            path: ['invocation'],
+            message: `An ${capability_1.CAPABILITY_DESCRIPTOR_KIND_FIELD}="${capability_1.CapabilityDescriptorKind.Authority}" ` +
+                'capability is never invoked through the router and must not declare an invocation binding.',
+        });
+    }
+}
+//# sourceMappingURL=capability-descriptor-kind-binding.js.map

package/dist/capability-projection/lib/capability-descriptor-kind-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-descriptor-kind-binding.js","sourceRoot":"","sources":["../../../src/capability-projection/lib/capability-descriptor-kind-binding.ts"],"names":[],"mappings":";;AAsBA,sFAgBC;AApCD,iDAG0B;AAiB1B,SAAgB,qCAAqC,CACnD,UAAiD,EACjD,OAAwB;IAExB,IACE,UAAU,CAAC,cAAc,KAAK,qCAAwB,CAAC,SAAS;QAChE,UAAU,CAAC,UAAU,KAAK,SAAS,EACnC,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,CAAC;YACpB,OAAO,EACL,MAAM,6CAAgC,KAAK,qCAAwB,CAAC,SAAS,IAAI;gBACjF,4FAA4F;SAC/F,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/capability-projection/lib/capability-sync-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capability-sync-manifest.d.ts","sourceRoot":"","sources":["../../../src/capability-projection/lib/capability-sync-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,iCAAiC,CAAC;AAgCzC,MAAM,WAAW,sBAAuB,SAAQ,8BAA8B;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,2BAA2B,CAAC;CACnD;AAED,eAAO,MAAM,4BAA4B,EAGtB,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"capability-sync-manifest.d.ts","sourceRoot":"","sources":["../../../src/capability-projection/lib/capability-sync-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,iCAAiC,CAAC;AAoCzC,MAAM,WAAW,sBAAuB,SAAQ,8BAA8B;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,2BAA2B,CAAC;CACnD;AAED,eAAO,MAAM,4BAA4B,EAG6B,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC"}

package/dist/capability-projection/lib/capability-sync-manifest.js

@@ -3,7 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.CapabilitySyncManifestSchema = void 0;
 const capability_1 = require("../../capability");
 const capability_invocation_binding_1 = require("./capability-invocation-binding");
+const capability_descriptor_kind_binding_1 = require("./capability-descriptor-kind-binding");
 exports.CapabilitySyncManifestSchema = capability_1.CapabilityContributionManifestSchema.extend({
     invocation: capability_invocation_binding_1.CapabilityInvocationBindingSchema.optional(),
-});
+}).superRefine(capability_descriptor_kind_binding_1.refineCapabilityDescriptorKindBinding);
 //# sourceMappingURL=capability-sync-manifest.js.map

package/dist/capability-projection/lib/capability-sync-manifest.js.map

@@ -1 +1 @@
-{"version":3,"file":"capability-sync-manifest.js","sourceRoot":"","sources":["../../../src/capability-projection/lib/capability-sync-manifest.ts"],"names":[],"mappings":";;;AAEA,iDAG0B;AAC1B,mFAGyC;AAoC5B,QAAA,4BAA4B,GACvC,iDAAoC,CAAC,MAAM,CAAC;IAC1C,UAAU,EAAE,iEAAiC,CAAC,QAAQ,EAAE;CACzD,CAAiD,CAAC"}
+{"version":3,"file":"capability-sync-manifest.js","sourceRoot":"","sources":["../../../src/capability-projection/lib/capability-sync-manifest.ts"],"names":[],"mappings":";;;AAEA,iDAG0B;AAC1B,mFAGyC;AACzC,6FAA6F;AAuChF,QAAA,4BAA4B,GACvC,iDAAoC,CAAC,MAAM,CAAC;IAC1C,UAAU,EAAE,iEAAiC,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC,WAAW,CAAC,0EAAqC,CAAiD,CAAC"}

package/dist/capability-projection/lib/projected-capability.d.ts

@@ -32,6 +32,7 @@ export declare const ProjectedCapabilitySchema: z.ZodObject<{
     safeForAgents: z.ZodOptional<z.ZodBoolean>;
     humanBaseline: z.ZodOptional<z.ZodType<import("../../capability").HumanBaseline, unknown, z.core.$ZodTypeInternals<import("../../capability").HumanBaseline, unknown>>>;
     delegable: z.ZodOptional<z.ZodLiteral<true>>;
+    descriptorKind: z.ZodOptional<z.ZodEnum<typeof import("../../capability").CapabilityDescriptorKind>>;
     invocation: z.ZodType<CapabilityInvocationBinding, unknown, z.core.$ZodTypeInternals<CapabilityInvocationBinding, unknown>>;
     provenance: z.ZodType<ProjectedCapabilityProvenance, unknown, z.core.$ZodTypeInternals<ProjectedCapabilityProvenance, unknown>>;
 }, z.core.$strict>;

package/dist/capability-projection/lib/projected-capability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projected-capability.d.ts","sourceRoot":"","sources":["../../../src/capability-projection/lib/projected-capability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,iCAAiC,CAAC;AAUzC,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,eAAO,MAAM,mCAAmC,EAAE,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAO5E,CAAC;AAoBd,MAAM,WAAW,mBAAoB,SAAQ,8BAA8B;IACzE,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;CACpD;AAED,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;kBAIO,CAAC"}
+{"version":3,"file":"projected-capability.d.ts","sourceRoot":"","sources":["../../../src/capability-projection/lib/projected-capability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAEL,KAAK,8BAA8B,EACpC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,iCAAiC,CAAC;AAWzC,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,eAAO,MAAM,mCAAmC,EAAE,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAO5E,CAAC;AAuBd,MAAM,WAAW,mBAAoB,SAAQ,8BAA8B;IACzE,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;CACpD;AAED,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;kBAI0D,CAAC"}

package/dist/capability-projection/lib/projected-capability.js

@@ -4,6 +4,7 @@ exports.ProjectedCapabilitySchema = exports.ProjectedCapabilityProvenanceSchema
 const zod_1 = require("zod");
 const capability_1 = require("../../capability");
 const capability_invocation_binding_1 = require("./capability-invocation-binding");
+const capability_descriptor_kind_binding_1 = require("./capability-descriptor-kind-binding");
 exports.ProjectedCapabilityProvenanceSchema = zod_1.z
     .object({
     sourceKey: zod_1.z.string().min(1).max(200),
@@ -14,5 +15,5 @@ exports.ProjectedCapabilityProvenanceSchema = zod_1.z
 exports.ProjectedCapabilitySchema = capability_1.CapabilityContributionManifestSchema.extend({
     invocation: capability_invocation_binding_1.CapabilityInvocationBindingSchema,
     provenance: exports.ProjectedCapabilityProvenanceSchema,
-});
+}).superRefine(capability_descriptor_kind_binding_1.refineCapabilityDescriptorKindBinding);
 //# sourceMappingURL=projected-capability.js.map

package/dist/capability-projection/lib/projected-capability.js.map

@@ -1 +1 @@
-{"version":3,"file":"projected-capability.js","sourceRoot":"","sources":["../../../src/capability-projection/lib/projected-capability.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,iDAG0B;AAC1B,mFAGyC;AAgB5B,QAAA,mCAAmC,GAC9C,OAAC;KACE,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAyBD,QAAA,yBAAyB,GACpC,iDAAoC,CAAC,MAAM,CAAC;IAC1C,UAAU,EAAE,iEAAiC;IAC7C,UAAU,EAAE,2CAAmC;CAChD,CAA0C,CAAC"}
+{"version":3,"file":"projected-capability.js","sourceRoot":"","sources":["../../../src/capability-projection/lib/projected-capability.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,iDAG0B;AAC1B,mFAGyC;AACzC,6FAA6F;AAgBhF,QAAA,mCAAmC,GAC9C,OAAC;KACE,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AA4BD,QAAA,yBAAyB,GACpC,iDAAoC,CAAC,MAAM,CAAC;IAC1C,UAAU,EAAE,iEAAiC;IAC7C,UAAU,EAAE,2CAAmC;CAChD,CAAC,CAAC,WAAW,CAAC,0EAAqC,CAA0C,CAAC"}

package/dist/deployment/index.d.ts

@@ -3,4 +3,8 @@ export * from './lib/trust-domain';
 export * from './lib/resolved-deployment';
 export * from './lib/trust-partition';
 export * from './lib/artifact-signer-trust';
+export * from './lib/operation-grant';
+export * from './lib/platform-sweep';
+export * from './lib/organization-sweep-grant';
+export * from './lib/operation-id';
 //# sourceMappingURL=index.d.ts.map

package/dist/deployment/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/deployment/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/deployment/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,oBAAoB,CAAC"}

package/dist/deployment/index.js

@@ -19,4 +19,8 @@ __exportStar(require("./lib/trust-domain"), exports);
 __exportStar(require("./lib/resolved-deployment"), exports);
 __exportStar(require("./lib/trust-partition"), exports);
 __exportStar(require("./lib/artifact-signer-trust"), exports);
+__exportStar(require("./lib/operation-grant"), exports);
+__exportStar(require("./lib/platform-sweep"), exports);
+__exportStar(require("./lib/organization-sweep-grant"), exports);
+__exportStar(require("./lib/operation-id"), exports);
 //# sourceMappingURL=index.js.map

package/dist/deployment/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/deployment/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sDAAoC;AACpC,qDAAmC;AACnC,4DAA0C;AAC1C,wDAAsC;AACtC,8DAA4C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/deployment/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sDAAoC;AACpC,qDAAmC;AACnC,4DAA0C;AAC1C,wDAAsC;AACtC,8DAA4C;AAC5C,wDAAsC;AACtC,uDAAqC;AACrC,iEAA+C;AAC/C,qDAAmC"}

package/dist/deployment/lib/operation-grant.d.ts

@@ -0,0 +1,22 @@
+import { z } from 'zod';
+export declare enum OperationGrantReceiverKind {
+    Biome = "biome",
+    PlatformService = "platform-service"
+}
+export declare const OperationGrantSchema: z.ZodObject<{
+    caller: z.ZodObject<{
+        biome: z.ZodString;
+        component: z.ZodString;
+    }, z.core.$strict>;
+    operation: z.core.$ZodBranded<z.ZodString, "OperationId", "out">;
+    receiver: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<OperationGrantReceiverKind.Biome>;
+        biome: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<OperationGrantReceiverKind.PlatformService>;
+        service: z.ZodString;
+    }, z.core.$strict>], "kind">;
+}, z.core.$strict>;
+export type OperationGrant = z.infer<typeof OperationGrantSchema>;
+export declare function compareOperationGrants(a: Pick<OperationGrant, 'caller' | 'operation'>, b: Pick<OperationGrant, 'caller' | 'operation'>): number;
+//# sourceMappingURL=operation-grant.d.ts.map

package/dist/deployment/lib/operation-grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-grant.d.ts","sourceRoot":"","sources":["../../../src/deployment/lib/operation-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAkBxB,oBAAY,0BAA0B;IAEpC,KAAK,UAAU;IAEf,eAAe,qBAAqB;CACrC;AAsBD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;kBAMtB,CAAC;AAEZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAUlE,wBAAgB,sBAAsB,CACpC,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,WAAW,CAAC,EAC/C,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,WAAW,CAAC,GAC9C,MAAM,CAMR"}

package/dist/deployment/lib/operation-grant.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OperationGrantSchema = exports.OperationGrantReceiverKind = void 0;
+exports.compareOperationGrants = compareOperationGrants;
+const zod_1 = require("zod");
+const operation_id_1 = require("./operation-id");
+const trust_domain_1 = require("./trust-domain");
+var OperationGrantReceiverKind;
+(function (OperationGrantReceiverKind) {
+    OperationGrantReceiverKind["Biome"] = "biome";
+    OperationGrantReceiverKind["PlatformService"] = "platform-service";
+})(OperationGrantReceiverKind || (exports.OperationGrantReceiverKind = OperationGrantReceiverKind = {}));
+const GrantBiomeIdSchema = zod_1.z
+    .string()
+    .regex(trust_domain_1.TRUST_DOMAIN_BIOME_ID_PATTERN, 'biome id must be lowercase kebab-case');
+const OperationGrantReceiverSchema = zod_1.z.discriminatedUnion('kind', [
+    zod_1.z
+        .object({
+        kind: zod_1.z.literal(OperationGrantReceiverKind.Biome),
+        biome: GrantBiomeIdSchema,
+    })
+        .strict(),
+    zod_1.z
+        .object({
+        kind: zod_1.z.literal(OperationGrantReceiverKind.PlatformService),
+        service: zod_1.z.string().min(1),
+    })
+        .strict(),
+]);
+exports.OperationGrantSchema = zod_1.z
+    .object({
+    caller: zod_1.z.object({ biome: GrantBiomeIdSchema, component: zod_1.z.string().min(1) }).strict(),
+    operation: operation_id_1.OperationIdSchema,
+    receiver: OperationGrantReceiverSchema,
+})
+    .strict();
+function compareCodeUnits(a, b) {
+    return a < b ? -1 : a > b ? 1 : 0;
+}
+function compareOperationGrants(a, b) {
+    return (compareCodeUnits(a.caller.biome, b.caller.biome) ||
+        compareCodeUnits(a.caller.component, b.caller.component) ||
+        compareCodeUnits(a.operation, b.operation));
+}
+//# sourceMappingURL=operation-grant.js.map

package/dist/deployment/lib/operation-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-grant.js","sourceRoot":"","sources":["../../../src/deployment/lib/operation-grant.ts"],"names":[],"mappings":";;;AA+DA,wDASC;AAxED,6BAAwB;AAExB,iDAAmD;AACnD,iDAA+D;AAe/D,IAAY,0BAKX;AALD,WAAY,0BAA0B;IAEpC,6CAAe,CAAA;IAEf,kEAAoC,CAAA;AACtC,CAAC,EALW,0BAA0B,0CAA1B,0BAA0B,QAKrC;AAED,MAAM,kBAAkB,GAAG,OAAC;KACzB,MAAM,EAAE;KACR,KAAK,CAAC,4CAA6B,EAAE,uCAAuC,CAAC,CAAC;AAEjF,MAAM,4BAA4B,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAChE,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,KAAK,CAAC;QACjD,KAAK,EAAE,kBAAkB;KAC1B,CAAC;SACD,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,eAAe,CAAC;QAC3D,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC3B,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAGU,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IACtF,SAAS,EAAE,gCAAiB;IAC5B,QAAQ,EAAE,4BAA4B;CACvC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,SAAS,gBAAgB,CAAC,CAAS,EAAE,CAAS;IAC5C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAMD,SAAgB,sBAAsB,CACpC,CAA+C,EAC/C,CAA+C;IAE/C,OAAO,CACL,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAChD,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;QACxD,gBAAgB,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAC3C,CAAC;AACJ,CAAC"}

package/dist/deployment/lib/operation-id.d.ts

@@ -0,0 +1,6 @@
+import { z } from 'zod';
+export declare const OPERATION_ID_PATTERN: RegExp;
+export declare const MAX_OPERATION_ID_CHARS = 128;
+export declare const OperationIdSchema: z.core.$ZodBranded<z.ZodString, "OperationId", "out">;
+export type OperationId = z.infer<typeof OperationIdSchema>;
+//# sourceMappingURL=operation-id.d.ts.map

package/dist/deployment/lib/operation-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-id.d.ts","sourceRoot":"","sources":["../../../src/deployment/lib/operation-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAexB,eAAO,MAAM,oBAAoB,QACmD,CAAC;AAGrF,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,eAAO,MAAM,iBAAiB,uDAIL,CAAC;AAG1B,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/deployment/lib/operation-id.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OperationIdSchema = exports.MAX_OPERATION_ID_CHARS = exports.OPERATION_ID_PATTERN = void 0;
+const zod_1 = require("zod");
+exports.OPERATION_ID_PATTERN = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*:[a-z][a-z0-9]*(?:[-.][a-z0-9]+)*@[1-9][0-9]{0,3}$/;
+exports.MAX_OPERATION_ID_CHARS = 128;
+exports.OperationIdSchema = zod_1.z
+    .string()
+    .max(exports.MAX_OPERATION_ID_CHARS)
+    .regex(exports.OPERATION_ID_PATTERN, 'must be an operation id, <domain>:<operation>@<version>')
+    .brand();
+//# sourceMappingURL=operation-id.js.map

package/dist/deployment/lib/operation-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-id.js","sourceRoot":"","sources":["../../../src/deployment/lib/operation-id.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAeX,QAAA,oBAAoB,GAC/B,kFAAkF,CAAC;AAGxE,QAAA,sBAAsB,GAAG,GAAG,CAAC;AAE7B,QAAA,iBAAiB,GAAG,OAAC;KAC/B,MAAM,EAAE;KACR,GAAG,CAAC,8BAAsB,CAAC;KAC3B,KAAK,CAAC,4BAAoB,EAAE,yDAAyD,CAAC;KACtF,KAAK,EAAiB,CAAC"}

package/dist/deployment/lib/organization-sweep-grant.d.ts

@@ -0,0 +1,18 @@
+import { z } from 'zod';
+import { type PlatformSweep } from './platform-sweep';
+export declare const OrganizationSweepGrantSchema: z.ZodObject<{
+    caller: z.ZodObject<{
+        biome: z.ZodString;
+        component: z.ZodString;
+    }, z.core.$strict>;
+    sweep: z.ZodEnum<typeof PlatformSweep>;
+}, z.core.$strict>;
+export type OrganizationSweepGrant = z.infer<typeof OrganizationSweepGrantSchema>;
+export declare function compareOrganizationSweepGrants(a: {
+    readonly caller: OrganizationSweepGrant['caller'];
+    readonly sweep: PlatformSweep | string;
+}, b: {
+    readonly caller: OrganizationSweepGrant['caller'];
+    readonly sweep: PlatformSweep | string;
+}): number;
+//# sourceMappingURL=organization-sweep-grant.d.ts.map

package/dist/deployment/lib/organization-sweep-grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-sweep-grant.d.ts","sourceRoot":"","sources":["../../../src/deployment/lib/organization-sweep-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAoB3E,eAAO,MAAM,4BAA4B;;;;;;kBAK9B,CAAC;AAEZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAUlF,wBAAgB,8BAA8B,CAC5C,CAAC,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAAA;CAAE,EAChG,CAAC,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAAA;CAAE,GAC/F,MAAM,CAMR"}

package/dist/deployment/lib/organization-sweep-grant.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrganizationSweepGrantSchema = void 0;
+exports.compareOrganizationSweepGrants = compareOrganizationSweepGrants;
+const zod_1 = require("zod");
+const platform_sweep_1 = require("./platform-sweep");
+const trust_domain_1 = require("./trust-domain");
+const SweepBiomeIdSchema = zod_1.z
+    .string()
+    .regex(trust_domain_1.TRUST_DOMAIN_BIOME_ID_PATTERN, 'biome id must be lowercase kebab-case');
+exports.OrganizationSweepGrantSchema = zod_1.z
+    .object({
+    caller: zod_1.z.object({ biome: SweepBiomeIdSchema, component: zod_1.z.string().min(1) }).strict(),
+    sweep: platform_sweep_1.PlatformSweepSchema,
+})
+    .strict();
+function compareCodeUnits(a, b) {
+    return a < b ? -1 : a > b ? 1 : 0;
+}
+function compareOrganizationSweepGrants(a, b) {
+    return (compareCodeUnits(a.caller.biome, b.caller.biome) ||
+        compareCodeUnits(a.caller.component, b.caller.component) ||
+        compareCodeUnits(a.sweep, b.sweep));
+}
+//# sourceMappingURL=organization-sweep-grant.js.map

package/dist/deployment/lib/organization-sweep-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-sweep-grant.js","sourceRoot":"","sources":["../../../src/deployment/lib/organization-sweep-grant.ts"],"names":[],"mappings":";;;AAuCA,wEASC;AAhDD,6BAAwB;AAExB,qDAA2E;AAC3E,iDAA+D;AAc/D,MAAM,kBAAkB,GAAG,OAAC;KACzB,MAAM,EAAE;KACR,KAAK,CAAC,4CAA6B,EAAE,uCAAuC,CAAC,CAAC;AAGpE,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IACtF,KAAK,EAAE,oCAAmB;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,SAAS,gBAAgB,CAAC,CAAS,EAAE,CAAS;IAC5C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAMD,SAAgB,8BAA8B,CAC5C,CAAgG,EAChG,CAAgG;IAEhG,OAAO,CACL,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAChD,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;QACxD,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CACnC,CAAC;AACJ,CAAC"}

package/dist/deployment/lib/platform-sweep.d.ts

@@ -0,0 +1,17 @@
+import { z } from 'zod';
+export declare enum PlatformSweep {
+    EraseSweep = "erase-sweep",
+    OrgErasure = "org-erasure",
+    AppErasure = "app-erasure",
+    IndexMaintenance = "index-maintenance",
+    ConnectorSecretCustody = "connector-secret-custody",
+    CredentialRefresh = "credential-refresh",
+    ConnectionHealthProbe = "connection-health-probe",
+    MemberNotification = "member-notification",
+    EndedHolderErasure = "ended-holder-erasure",
+    ScmProjectBindingMaintenance = "scm-project-binding-maintenance",
+    ContributionConvergence = "contribution-convergence",
+    RetentionExpiryErasure = "retention-expiry-erasure"
+}
+export declare const PlatformSweepSchema: z.ZodEnum<typeof PlatformSweep>;
+//# sourceMappingURL=platform-sweep.d.ts.map

package/dist/deployment/lib/platform-sweep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-sweep.d.ts","sourceRoot":"","sources":["../../../src/deployment/lib/platform-sweep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAuBxB,oBAAY,aAAa;IAUvB,UAAU,gBAAgB;IAO1B,UAAU,gBAAgB;IAK1B,UAAU,gBAAgB;IAM1B,gBAAgB,sBAAsB;IAKtC,sBAAsB,6BAA6B;IAKnD,iBAAiB,uBAAuB;IAMxC,qBAAqB,4BAA4B;IAOjD,kBAAkB,wBAAwB;IAU1C,kBAAkB,yBAAyB;IAU3C,4BAA4B,oCAAoC;IAMhE,uBAAuB,6BAA6B;IAQpD,sBAAsB,6BAA6B;CACpD;AAGD,eAAO,MAAM,mBAAmB,iCAAwB,CAAC"}

package/dist/deployment/lib/platform-sweep.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PlatformSweepSchema = exports.PlatformSweep = void 0;
+const zod_1 = require("zod");
+var PlatformSweep;
+(function (PlatformSweep) {
+    PlatformSweep["EraseSweep"] = "erase-sweep";
+    PlatformSweep["OrgErasure"] = "org-erasure";
+    PlatformSweep["AppErasure"] = "app-erasure";
+    PlatformSweep["IndexMaintenance"] = "index-maintenance";
+    PlatformSweep["ConnectorSecretCustody"] = "connector-secret-custody";
+    PlatformSweep["CredentialRefresh"] = "credential-refresh";
+    PlatformSweep["ConnectionHealthProbe"] = "connection-health-probe";
+    PlatformSweep["MemberNotification"] = "member-notification";
+    PlatformSweep["EndedHolderErasure"] = "ended-holder-erasure";
+    PlatformSweep["ScmProjectBindingMaintenance"] = "scm-project-binding-maintenance";
+    PlatformSweep["ContributionConvergence"] = "contribution-convergence";
+    PlatformSweep["RetentionExpiryErasure"] = "retention-expiry-erasure";
+})(PlatformSweep || (exports.PlatformSweep = PlatformSweep = {}));
+exports.PlatformSweepSchema = zod_1.z.enum(PlatformSweep);
+//# sourceMappingURL=platform-sweep.js.map

package/dist/deployment/lib/platform-sweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-sweep.js","sourceRoot":"","sources":["../../../src/deployment/lib/platform-sweep.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAuBxB,IAAY,aAsFX;AAtFD,WAAY,aAAa;IAUvB,2CAA0B,CAAA;IAO1B,2CAA0B,CAAA;IAK1B,2CAA0B,CAAA;IAM1B,uDAAsC,CAAA;IAKtC,oEAAmD,CAAA;IAKnD,yDAAwC,CAAA;IAMxC,kEAAiD,CAAA;IAOjD,2DAA0C,CAAA;IAU1C,4DAA2C,CAAA;IAU3C,iFAAgE,CAAA;IAMhE,qEAAoD,CAAA;IAQpD,oEAAmD,CAAA;AACrD,CAAC,EAtFW,aAAa,6BAAb,aAAa,QAsFxB;AAGY,QAAA,mBAAmB,GAAG,OAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC"}

package/dist/deployment/lib/resolved-deployment.d.ts

@@ -1,5 +1,6 @@
 import { z } from 'zod';
-export declare const RESOLVED_DEPLOYMENT_SCHEMA_VERSION: 2;
+import { OperationGrantReceiverKind } from './operation-grant';
+export declare const RESOLVED_DEPLOYMENT_SCHEMA_VERSION: 3;
 export declare const RESOLVER_PACKAGE: "@xemahq/contracts";
 export declare enum ResolvedDeploymentProvenanceKind {
     Engine = "engine",
@@ -9,7 +10,7 @@ export declare const DNS_LABEL_PATTERN: RegExp;
 export declare const EDITION_OCI_REF_PATTERN: RegExp;
 export declare const EditionOciRefSchema: z.ZodString;
 export declare const ResolvedDeploymentSchema: z.ZodObject<{
-    schemaVersion: z.ZodLiteral<2>;
+    schemaVersion: z.ZodLiteral<3>;
     deployment: z.ZodString;
     runtimeNamespace: z.ZodString;
     edition: z.ZodObject<{
@@ -34,6 +35,27 @@ export declare const ResolvedDeploymentSchema: z.ZodObject<{
             component: z.ZodString;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
+    operationGrants: z.ZodArray<z.ZodObject<{
+        caller: z.ZodObject<{
+            biome: z.ZodString;
+            component: z.ZodString;
+        }, z.core.$strict>;
+        operation: z.core.$ZodBranded<z.ZodString, "OperationId", "out">;
+        receiver: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<OperationGrantReceiverKind.Biome>;
+            biome: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<OperationGrantReceiverKind.PlatformService>;
+            service: z.ZodString;
+        }, z.core.$strict>], "kind">;
+    }, z.core.$strict>>;
+    organizationSweeps: z.ZodArray<z.ZodObject<{
+        caller: z.ZodObject<{
+            biome: z.ZodString;
+            component: z.ZodString;
+        }, z.core.$strict>;
+        sweep: z.ZodEnum<typeof import("./platform-sweep").PlatformSweep>;
+    }, z.core.$strict>>;
     provenance: z.ZodUnion<readonly [z.ZodObject<{
         kind: z.ZodOptional<z.ZodLiteral<ResolvedDeploymentProvenanceKind.Engine>>;
         topologyInputHash: z.ZodString;

package/dist/deployment/lib/resolved-deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/deployment/lib/resolved-deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiExB,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAG7D,eAAO,MAAM,gBAAgB,EAAG,mBAA4B,CAAC;AAM7D,oBAAY,gCAAgC;IAK1C,MAAM,WAAW;IAOjB,OAAO,YAAY;CACpB;AAMD,eAAO,MAAM,iBAAiB,QAAoC,CAAC;AAoBnE,eAAO,MAAM,uBAAuB,QAGnC,CAAC;AAEF,eAAO,MAAM,mBAAmB,aAK7B,CAAC;AA2DJ,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiGjC,CAAC;AAEL,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAG1E,MAAM,MAAM,yBAAyB,GAAG,kBAAkB,GAAG;IAC3D,QAAQ,CAAC,UAAU,EAAE,OAAO,CAC1B,kBAAkB,CAAC,YAAY,CAAC,EAChC;QAAE,IAAI,EAAE,gCAAgC,CAAC,OAAO,CAAA;KAAE,CACnD,CAAC;CACH,CAAC;AAGF,MAAM,MAAM,wBAAwB,GAAG,kBAAkB,GAAG;IAC1D,QAAQ,CAAC,UAAU,EAAE,OAAO,CAC1B,kBAAkB,CAAC,YAAY,CAAC,EAChC;QAAE,IAAI,EAAE,gCAAgC,CAAC,OAAO,CAAA;KAAE,CACnD,CAAC;CACH,CAAC;AASF,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,kBAAkB,GAC3B,QAAQ,IAAI,yBAAyB,CAEvC"}
+{"version":3,"file":"resolved-deployment.d.ts","sourceRoot":"","sources":["../../../src/deployment/lib/resolved-deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,OAAO,EACL,0BAA0B,EAG3B,MAAM,mBAAmB,CAAC;AA0E3B,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAG7D,eAAO,MAAM,gBAAgB,EAAG,mBAA4B,CAAC;AAM7D,oBAAY,gCAAgC;IAK1C,MAAM,WAAW;IAOjB,OAAO,YAAY;CACpB;AAMD,eAAO,MAAM,iBAAiB,QAAoC,CAAC;AAoBnE,eAAO,MAAM,uBAAuB,QAGnC,CAAC;AAEF,eAAO,MAAM,mBAAmB,aAK7B,CAAC;AA2DJ,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA+IjC,CAAC;AAEL,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAG1E,MAAM,MAAM,yBAAyB,GAAG,kBAAkB,GAAG;IAC3D,QAAQ,CAAC,UAAU,EAAE,OAAO,CAC1B,kBAAkB,CAAC,YAAY,CAAC,EAChC;QAAE,IAAI,EAAE,gCAAgC,CAAC,OAAO,CAAA;KAAE,CACnD,CAAC;CACH,CAAC;AAGF,MAAM,MAAM,wBAAwB,GAAG,kBAAkB,GAAG;IAC1D,QAAQ,CAAC,UAAU,EAAE,OAAO,CAC1B,kBAAkB,CAAC,YAAY,CAAC,EAChC;QAAE,IAAI,EAAE,gCAAgC,CAAC,OAAO,CAAA;KAAE,CACnD,CAAC;CACH,CAAC;AASF,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,kBAAkB,GAC3B,QAAQ,IAAI,yBAAyB,CAEvC"}

package/dist/deployment/lib/resolved-deployment.js

@@ -5,9 +5,11 @@ exports.isUnsplitResolvedDeployment = isUnsplitResolvedDeployment;
 const zod_1 = require("zod");
 const content_address_1 = require("../../content-address");
 const deployment_id_1 = require("./deployment-id");
+const organization_sweep_grant_1 = require("./organization-sweep-grant");
+const operation_grant_1 = require("./operation-grant");
 const trust_domain_1 = require("./trust-domain");
 const trust_partition_1 = require("./trust-partition");
-exports.RESOLVED_DEPLOYMENT_SCHEMA_VERSION = 2;
+exports.RESOLVED_DEPLOYMENT_SCHEMA_VERSION = 3;
 exports.RESOLVER_PACKAGE = '@xemahq/contracts';
 var ResolvedDeploymentProvenanceKind;
 (function (ResolvedDeploymentProvenanceKind) {
@@ -84,6 +86,8 @@ exports.ResolvedDeploymentSchema = zod_1.z
         .strict(),
     biomes: zod_1.z.array(ResolvedBiomeSchema).min(1),
     serviceAccounts: zod_1.z.array(ResolvedServiceAccountSchema),
+    operationGrants: zod_1.z.array(operation_grant_1.OperationGrantSchema),
+    organizationSweeps: zod_1.z.array(organization_sweep_grant_1.OrganizationSweepGrantSchema),
     provenance: zod_1.z.union([EngineProvenanceSchema, UnsplitProvenanceSchema]),
 })
     .strict()
@@ -119,6 +123,48 @@ exports.ResolvedDeploymentSchema = zod_1.z
             });
         }
     });
+    const placedBiomes = new Set(resolved.biomes.map((biome) => biome.id));
+    resolved.operationGrants.forEach((grant, index) => {
+        const previous = resolved.operationGrants[index - 1];
+        if (previous !== undefined && (0, operation_grant_1.compareOperationGrants)(previous, grant) >= 0) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['operationGrants', index],
+                message: 'operationGrants must be unique and sorted by caller biome, caller component, operation',
+            });
+        }
+        if (!placedBiomes.has(grant.caller.biome)) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['operationGrants', index, 'caller', 'biome'],
+                message: `"${grant.caller.biome}" is not a biome of this deployment`,
+            });
+        }
+        if (grant.receiver.kind === operation_grant_1.OperationGrantReceiverKind.Biome && !placedBiomes.has(grant.receiver.biome)) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['operationGrants', index, 'receiver', 'biome'],
+                message: `"${grant.receiver.biome}" is not a biome of this deployment`,
+            });
+        }
+    });
+    resolved.organizationSweeps.forEach((row, index) => {
+        const previous = resolved.organizationSweeps[index - 1];
+        if (previous !== undefined && (0, organization_sweep_grant_1.compareOrganizationSweepGrants)(previous, row) >= 0) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['organizationSweeps', index],
+                message: 'organizationSweeps must be unique and sorted by caller biome, caller component, sweep',
+            });
+        }
+        if (!placedBiomes.has(row.caller.biome)) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['organizationSweeps', index, 'caller', 'biome'],
+                message: `"${row.caller.biome}" is not a biome of this deployment`,
+            });
+        }
+    });
     for (const violation of [
         ...(0, trust_partition_1.gradeTrustRefinement)(resolved.biomes),
         ...(0, trust_partition_1.gradeEnforcementIdentities)(resolved.serviceAccounts.map((account) => ({

package/dist/deployment/lib/resolved-deployment.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolved-deployment.js","sourceRoot":"","sources":["../../../src/deployment/lib/resolved-deployment.ts"],"names":[],"mappings":";;;AAkTA,kEAIC;AAtTD,6BAAwB;AAExB,2DAA2E;AAC3E,mDAAwD;AACxD,iDAIwB;AACxB,uDAG2B;AAqDd,QAAA,kCAAkC,GAAG,CAAU,CAAC;AAGhD,QAAA,gBAAgB,GAAG,mBAA4B,CAAC;AAM7D,IAAY,gCAaX;AAbD,WAAY,gCAAgC;IAK1C,qDAAiB,CAAA;IAOjB,uDAAmB,CAAA;AACrB,CAAC,EAbW,gCAAgC,gDAAhC,gCAAgC,QAa3C;AAMY,QAAA,iBAAiB,GAAG,iCAAiC,CAAC;AAGnE,MAAM,cAAc,GAAG,OAAC;KACrB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,yBAAiB,EAAE,+BAA+B,CAAC,CAAC;AAahD,QAAA,uBAAuB,GAAG,IAAI,MAAM,CAC/C,wHAAwH;IACtH,WAAW,mCAAiB,GAAG,CAClC,CAAC;AAEW,QAAA,mBAAmB,GAAG,OAAC;KACjC,MAAM,EAAE;KACR,KAAK,CACJ,+BAAuB,EACvB,uFAAuF,CACxF,CAAC;AAEJ,MAAM,aAAa,GAAG,OAAC;KACpB,MAAM,EAAE;KACR,KAAK,CAAC,4CAA6B,EAAE,uCAAuC,CAAC,CAAC;AAEjF,MAAM,mBAAmB,GAAG,OAAC;KAC1B,MAAM,CAAC;IACN,EAAE,EAAE,aAAa;IACjB,YAAY,EAAE,gCAAiB;IAC/B,WAAW,EAAE,gCAAiB;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,4BAA4B,GAAG,OAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,cAAc;IAEpB,QAAQ,EAAE,cAAc;IACxB,OAAO,EAAE,OAAC;SACP,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAChF,GAAG,CAAC,CAAC,CAAC;CACV,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,cAAc,GAAG,OAAC;KACrB,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC;IACpC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAUZ,MAAM,sBAAsB,GAAG,OAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IACnE,iBAAiB,EAAE,iCAAe;IAClC,cAAc,EAAE,OAAC;SACd,MAAM,EAAE;SACR,KAAK,CAAC,IAAI,MAAM,CAAC,WAAW,mCAAiB,GAAG,CAAC,EAAE,8CAA8C,CAAC;IACrG,QAAQ,EAAE,cAAc;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,uBAAuB,GAAG,OAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,OAAO,CAAC;IACzD,QAAQ,EAAE,cAAc;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,0CAAkC,CAAC;IAC5D,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qCAAqB,EAAE,yBAAyB,CAAC;IAC9E,gBAAgB,EAAE,cAAc;IAChC,OAAO,EAAE,OAAC;SACP,MAAM,CAAC;QACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,UAAU,EAAE,iCAAe;QAE3B,gBAAgB,EAAE,iCAAe;QAMjC,uBAAuB,EAAE,iCAAe;QAExC,GAAG,EAAE,2BAAmB;KACzB,CAAC;SACD,MAAM,EAAE;IACX,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC;IACtD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;CACvE,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC;gBAC7B,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,aAAa,CAAU,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,IACE,KAAK,CAAC,UAAU,CAAC,8CAA+B,CAAC;gBACjD,KAAK,KAAK,GAAG,8CAA+B,GAAG,KAAK,CAAC,EAAE,EAAE,EACzD,CAAC;gBACD,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;oBAC9B,OAAO,EAAE,IAAI,KAAK,6CAA6C,KAAK,CAAC,EAAE,eAAe;iBACvF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;IACzC,CAAC,CAAC,CAAC;IAGH,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QAClD,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAClF,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,iBAAiB,EAAE,KAAK,EAAE,MAAM,CAAC;gBACxC,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,SAAS,IAAI;QACtB,GAAG,IAAA,sCAAoB,EAAC,QAAQ,CAAC,MAAM,CAAC;QACxC,GAAG,IAAA,4CAA0B,EAC3B,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzC,cAAc,EAAE,OAAO,CAAC,IAAI;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC,EACH,QAAQ,CACT;KACF,EAAE,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClG,CAAC;IAGD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,gCAAgC,CAAC,OAAO;QAAE,OAAO;IAClF,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YAC7C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC;gBACtC,OAAO,EACL,wEAAwE,KAAK,CAAC,EAAE,UAAU;oBAC1F,IAAI,KAAK,CAAC,WAAW,wBAAwB,KAAK,CAAC,YAAY,GAAG;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,iBAAiB,CAAC;YACzB,OAAO,EAAE,uEAAuE,QAAQ,CAAC,eAAe,CAAC,MAAM,EAAE;SAClH,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AA2BL,SAAgB,2BAA2B,CACzC,QAA4B;IAE5B,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,gCAAgC,CAAC,OAAO,CAAC;AAC/E,CAAC"}
+{"version":3,"file":"resolved-deployment.js","sourceRoot":"","sources":["../../../src/deployment/lib/resolved-deployment.ts"],"names":[],"mappings":";;;AAqXA,kEAIC;AAzXD,6BAAwB;AAExB,2DAA2E;AAC3E,mDAAwD;AACxD,yEAGoC;AACpC,uDAI2B;AAC3B,iDAIwB;AACxB,uDAG2B;AAiEd,QAAA,kCAAkC,GAAG,CAAU,CAAC;AAGhD,QAAA,gBAAgB,GAAG,mBAA4B,CAAC;AAM7D,IAAY,gCAaX;AAbD,WAAY,gCAAgC;IAK1C,qDAAiB,CAAA;IAOjB,uDAAmB,CAAA;AACrB,CAAC,EAbW,gCAAgC,gDAAhC,gCAAgC,QAa3C;AAMY,QAAA,iBAAiB,GAAG,iCAAiC,CAAC;AAGnE,MAAM,cAAc,GAAG,OAAC;KACrB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,yBAAiB,EAAE,+BAA+B,CAAC,CAAC;AAahD,QAAA,uBAAuB,GAAG,IAAI,MAAM,CAC/C,wHAAwH;IACtH,WAAW,mCAAiB,GAAG,CAClC,CAAC;AAEW,QAAA,mBAAmB,GAAG,OAAC;KACjC,MAAM,EAAE;KACR,KAAK,CACJ,+BAAuB,EACvB,uFAAuF,CACxF,CAAC;AAEJ,MAAM,aAAa,GAAG,OAAC;KACpB,MAAM,EAAE;KACR,KAAK,CAAC,4CAA6B,EAAE,uCAAuC,CAAC,CAAC;AAEjF,MAAM,mBAAmB,GAAG,OAAC;KAC1B,MAAM,CAAC;IACN,EAAE,EAAE,aAAa;IACjB,YAAY,EAAE,gCAAiB;IAC/B,WAAW,EAAE,gCAAiB;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,4BAA4B,GAAG,OAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,cAAc;IAEpB,QAAQ,EAAE,cAAc;IACxB,OAAO,EAAE,OAAC;SACP,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;SAChF,GAAG,CAAC,CAAC,CAAC;CACV,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,cAAc,GAAG,OAAC;KACrB,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,wBAAgB,CAAC;IACpC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAUZ,MAAM,sBAAsB,GAAG,OAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IACnE,iBAAiB,EAAE,iCAAe;IAClC,cAAc,EAAE,OAAC;SACd,MAAM,EAAE;SACR,KAAK,CAAC,IAAI,MAAM,CAAC,WAAW,mCAAiB,GAAG,CAAC,EAAE,8CAA8C,CAAC;IACrG,QAAQ,EAAE,cAAc;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,uBAAuB,GAAG,OAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,OAAO,CAAC;IACzD,QAAQ,EAAE,cAAc;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,aAAa,EAAE,OAAC,CAAC,OAAO,CAAC,0CAAkC,CAAC;IAC5D,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qCAAqB,EAAE,yBAAyB,CAAC;IAC9E,gBAAgB,EAAE,cAAc;IAChC,OAAO,EAAE,OAAC;SACP,MAAM,CAAC;QACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,UAAU,EAAE,iCAAe;QAE3B,gBAAgB,EAAE,iCAAe;QAMjC,uBAAuB,EAAE,iCAAe;QAExC,GAAG,EAAE,2BAAmB;KACzB,CAAC;SACD,MAAM,EAAE;IACX,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC;IAEtD,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,sCAAoB,CAAC;IAE9C,kBAAkB,EAAE,OAAC,CAAC,KAAK,CAAC,uDAA4B,CAAC;IACzD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;CACvE,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC;gBAC7B,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,aAAa,CAAU,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,IACE,KAAK,CAAC,UAAU,CAAC,8CAA+B,CAAC;gBACjD,KAAK,KAAK,GAAG,8CAA+B,GAAG,KAAK,CAAC,EAAE,EAAE,EACzD,CAAC;gBACD,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;oBAC9B,OAAO,EAAE,IAAI,KAAK,6CAA6C,KAAK,CAAC,EAAE,eAAe;iBACvF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;IACzC,CAAC,CAAC,CAAC;IAGH,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QAClD,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAClF,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,iBAAiB,EAAE,KAAK,EAAE,MAAM,CAAC;gBACxC,OAAO,EAAE,wCAAwC;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAA,wCAAsB,EAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,iBAAiB,EAAE,KAAK,CAAC;gBAChC,OAAO,EAAE,wFAAwF;aAClG,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC;gBACnD,OAAO,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,qCAAqC;aACrE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,4CAA0B,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxG,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,iBAAiB,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC;gBACrD,OAAO,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,qCAAqC;aACvE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,kBAAkB,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACxD,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAA,yDAA8B,EAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,oBAAoB,EAAE,KAAK,CAAC;gBACnC,OAAO,EAAE,uFAAuF;aACjG,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,oBAAoB,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC;gBACtD,OAAO,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,qCAAqC;aACnE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,SAAS,IAAI;QACtB,GAAG,IAAA,sCAAoB,EAAC,QAAQ,CAAC,MAAM,CAAC;QACxC,GAAG,IAAA,4CAA0B,EAC3B,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzC,cAAc,EAAE,OAAO,CAAC,IAAI;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC,EACH,QAAQ,CACT;KACF,EAAE,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClG,CAAC;IAGD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,gCAAgC,CAAC,OAAO;QAAE,OAAO;IAClF,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YAC7C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC;gBACtC,OAAO,EACL,wEAAwE,KAAK,CAAC,EAAE,UAAU;oBAC1F,IAAI,KAAK,CAAC,WAAW,wBAAwB,KAAK,CAAC,YAAY,GAAG;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,iBAAiB,CAAC;YACzB,OAAO,EAAE,uEAAuE,QAAQ,CAAC,eAAe,CAAC,MAAM,EAAE;SAClH,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AA2BL,SAAgB,2BAA2B,CACzC,QAA4B;IAE5B,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,gCAAgC,CAAC,OAAO,CAAC;AAC/E,CAAC"}

package/dist/distribution/index.d.ts

@@ -25,4 +25,9 @@ export * from './lib/verify-delivered-locks';
 export { isUnsplitResolvedDeployment } from '../deployment';
 export type { VerifiedEditionResolution, VerifiedResolvedDeployment, VerifiedUnsplitEditionResolution, VerifiedUnsplitResolvedDeployment, } from './lib/verified-resolved-deployment';
 export * from './lib/delivered-biome';
+export * from './lib/operation-grant-admission';
+export * from './lib/organization-sweep-admission';
+export * from './lib/capability-domain-owner-duplicates';
+export { CapabilityDomainSchema } from '../capability';
+export { MAX_OPERATION_ID_CHARS, OPERATION_ID_PATTERN, OperationIdSchema, PlatformSweep, PlatformSweepSchema, type OperationId, } from '../deployment';
 //# sourceMappingURL=index.d.ts.map

package/dist/distribution/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/distribution/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,mCAAmC,CAAC;AAClD,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC;AACjD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,kCAAkC,CAAC;AACjD,cAAc,kCAAkC,CAAC;AACjD,cAAc,0BAA0B,CAAC;AACzC,cAAc,8BAA8B,CAAC;AAE7C,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,YAAY,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,gCAAgC,EAChC,iCAAiC,GAClC,MAAM,oCAAoC,CAAC;AAC5C,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/distribution/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,mCAAmC,CAAC;AAClD,cAAc,0BAA0B,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,kCAAkC,CAAC;AACjD,cAAc,sCAAsC,CAAC;AACrD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,kCAAkC,CAAC;AACjD,cAAc,kCAAkC,CAAC;AACjD,cAAc,0BAA0B,CAAC;AACzC,cAAc,8BAA8B,CAAC;AAE7C,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,YAAY,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,gCAAgC,EAChC,iCAAiC,GAClC,MAAM,oCAAoC,CAAC;AAC5C,cAAc,uBAAuB,CAAC;AACtC,cAAc,iCAAiC,CAAC;AAChD,cAAc,oCAAoC,CAAC;AACnD,cAAc,0CAA0C,CAAC;AAIzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EACnB,KAAK,WAAW,GACjB,MAAM,eAAe,CAAC"}

package/dist/distribution/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isUnsplitResolvedDeployment = void 0;
+exports.PlatformSweepSchema = exports.PlatformSweep = exports.OperationIdSchema = exports.OPERATION_ID_PATTERN = exports.MAX_OPERATION_ID_CHARS = exports.CapabilityDomainSchema = exports.isUnsplitResolvedDeployment = void 0;
 __exportStar(require("./lib/install-policy"), exports);
 __exportStar(require("./lib/distribution-selector"), exports);
 __exportStar(require("./lib/runtime-image-platform"), exports);
@@ -42,4 +42,15 @@ __exportStar(require("./lib/verify-delivered-locks"), exports);
 var deployment_1 = require("../deployment");
 Object.defineProperty(exports, "isUnsplitResolvedDeployment", { enumerable: true, get: function () { return deployment_1.isUnsplitResolvedDeployment; } });
 __exportStar(require("./lib/delivered-biome"), exports);
+__exportStar(require("./lib/operation-grant-admission"), exports);
+__exportStar(require("./lib/organization-sweep-admission"), exports);
+__exportStar(require("./lib/capability-domain-owner-duplicates"), exports);
+var capability_1 = require("../capability");
+Object.defineProperty(exports, "CapabilityDomainSchema", { enumerable: true, get: function () { return capability_1.CapabilityDomainSchema; } });
+var deployment_2 = require("../deployment");
+Object.defineProperty(exports, "MAX_OPERATION_ID_CHARS", { enumerable: true, get: function () { return deployment_2.MAX_OPERATION_ID_CHARS; } });
+Object.defineProperty(exports, "OPERATION_ID_PATTERN", { enumerable: true, get: function () { return deployment_2.OPERATION_ID_PATTERN; } });
+Object.defineProperty(exports, "OperationIdSchema", { enumerable: true, get: function () { return deployment_2.OperationIdSchema; } });
+Object.defineProperty(exports, "PlatformSweep", { enumerable: true, get: function () { return deployment_2.PlatformSweep; } });
+Object.defineProperty(exports, "PlatformSweepSchema", { enumerable: true, get: function () { return deployment_2.PlatformSweepSchema; } });
 //# sourceMappingURL=index.js.map