@xemahq/contracts 0.81.0 → 0.83.0

package/dist/biome-dependency/lib/package-peer-facts.js

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PackagePeerFactsSchema = exports.PackageExportPeerFactsSchema = exports.PackageDynamicPeerSchema = exports.PackagePeerEdgeSchema = exports.PACKAGE_PEER_FACTS_SEAM = exports.PACKAGE_PEER_FACTS_MANIFEST_KEY = exports.PACKAGE_PEER_FACTS_FILENAME = exports.PACKAGE_PEER_FACTS_VERSION = void 0;
+const zod_1 = require("zod");
+const content_address_1 = require("../../content-address");
+const biome_dependency_contract_1 = require("./biome-dependency-contract");
+exports.PACKAGE_PEER_FACTS_VERSION = 1;
+exports.PACKAGE_PEER_FACTS_FILENAME = 'xema-peer-facts.json';
+exports.PACKAGE_PEER_FACTS_MANIFEST_KEY = 'peerFacts';
+exports.PACKAGE_PEER_FACTS_SEAM = 'package-peer-facts';
+exports.PackagePeerEdgeSchema = zod_1.z
+    .object({
+    relationship: zod_1.z.enum([
+        biome_dependency_contract_1.PeerRelationship.ServicePeer,
+        biome_dependency_contract_1.PeerRelationship.DatabasePool,
+        biome_dependency_contract_1.PeerRelationship.EventPlane,
+        biome_dependency_contract_1.PeerRelationship.BiomeDelivery,
+    ]),
+    target: zod_1.z.object({ serviceName: biome_dependency_contract_1.PeerServiceNameSchema }).strict(),
+    lifecycle: biome_dependency_contract_1.PeerLifecycleSchema,
+    inclusion: zod_1.z.discriminatedUnion('kind', [
+        zod_1.z.object({ kind: zod_1.z.literal(biome_dependency_contract_1.PeerInclusionKind.Required) }).strict(),
+        zod_1.z.object({ kind: zod_1.z.literal(biome_dependency_contract_1.PeerInclusionKind.Optional) }).strict(),
+    ]),
+    evidence: biome_dependency_contract_1.DependencyContractEvidenceSchema,
+})
+    .strict();
+exports.PackageDynamicPeerSchema = zod_1.z
+    .object({
+    kind: biome_dependency_contract_1.DynamicPeerKindSchema,
+    evidence: biome_dependency_contract_1.DependencyContractEvidenceSchema,
+})
+    .strict();
+const compare = (a, b) => (a < b ? -1 : a > b ? 1 : 0);
+const peerKey = (edge) => [
+    edge.relationship,
+    edge.target.serviceName,
+    edge.lifecycle,
+    edge.inclusion.kind,
+].join('\u0000');
+exports.PackageExportPeerFactsSchema = zod_1.z
+    .object({
+    module: zod_1.z.string().min(1),
+    exportName: zod_1.z.string().min(1),
+    peers: zod_1.z
+        .array(exports.PackagePeerEdgeSchema)
+        .readonly()
+        .refine((peers) => peers.every((edge, i) => i === 0 ||
+        compare(peerKey(peers[i - 1]), peerKey(edge)) <
+            0), {
+        message: 'peers are sorted by (relationship, serviceName, lifecycle, inclusion) and free of duplicates',
+    }),
+    dynamicPeers: zod_1.z.array(exports.PackageDynamicPeerSchema).readonly(),
+})
+    .strict();
+exports.PackagePeerFactsSchema = zod_1.z
+    .object({
+    factsVersion: zod_1.z.literal(exports.PACKAGE_PEER_FACTS_VERSION),
+    package: zod_1.z
+        .object({ name: zod_1.z.string().min(1), version: zod_1.z.string().min(1) })
+        .strict(),
+    seamTable: zod_1.z
+        .object({
+        version: zod_1.z.number().int().positive(),
+        sha256: content_address_1.Sha256HexSchema,
+    })
+        .strict(),
+    exports: zod_1.z
+        .array(exports.PackageExportPeerFactsSchema)
+        .readonly()
+        .refine((entries) => entries.every((entry, i) => i === 0 ||
+        compare(`${entries[i - 1].module}\u0000${entries[i - 1].exportName}`, `${entry.module}\u0000${entry.exportName}`) < 0), {
+        message: 'exports are sorted by (module, exportName) and free of duplicates',
+    }),
+})
+    .strict();
+//# sourceMappingURL=package-peer-facts.js.map

package/dist/biome-dependency/lib/package-peer-facts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-peer-facts.js","sourceRoot":"","sources":["../../../src/biome-dependency/lib/package-peer-facts.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,2DAAwD;AACxD,2EAOqC;AAqBxB,QAAA,0BAA0B,GAAG,CAAU,CAAC;AAGxC,QAAA,2BAA2B,GAAG,sBAA+B,CAAC;AAG9D,QAAA,+BAA+B,GAAG,WAAoB,CAAC;AAGvD,QAAA,uBAAuB,GAAG,oBAA6B,CAAC;AAGxD,QAAA,qBAAqB,GAAG,OAAC;KACnC,MAAM,CAAC;IACN,YAAY,EAAE,OAAC,CAAC,IAAI,CAAC;QACnB,4CAAgB,CAAC,WAAW;QAC5B,4CAAgB,CAAC,YAAY;QAC7B,4CAAgB,CAAC,UAAU;QAC3B,4CAAgB,CAAC,aAAa;KAC/B,CAAC;IACF,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iDAAqB,EAAE,CAAC,CAAC,MAAM,EAAE;IACjE,SAAS,EAAE,+CAAmB;IAC9B,SAAS,EAAE,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;QACtC,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,6CAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QAClE,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,6CAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;KACnE,CAAC;IACF,QAAQ,EAAE,4DAAgC;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAGC,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC;IACN,IAAI,EAAE,iDAAqB;IAC3B,QAAQ,EAAE,4DAAgC;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/E,MAAM,OAAO,GAAG,CAAC,IAAqB,EAAU,EAAE,CAChD;IACE,IAAI,CAAC,YAAY;IACjB,IAAI,CAAC,MAAM,CAAC,WAAW;IACvB,IAAI,CAAC,SAAS;IACd,IAAI,CAAC,SAAS,CAAC,IAAI;CACpB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAEN,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IAEN,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,KAAK,EAAE,OAAC;SACL,KAAK,CAAC,6BAAqB,CAAC;SAC5B,QAAQ,EAAE;SACV,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,KAAK,CACT,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CACV,CAAC,KAAK,CAAC;QACP,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAoB,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC9D,CAAC,CACN,EACH;QACE,OAAO,EACL,8FAA8F;KACjG,CACF;IACH,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,gCAAwB,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC;KACD,MAAM,EAAE,CAAC;AAKC,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,CAAC;IACN,YAAY,EAAE,OAAC,CAAC,OAAO,CAAC,kCAA0B,CAAC;IACnD,OAAO,EAAE,OAAC;SACP,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,MAAM,EAAE;IAEX,SAAS,EAAE,OAAC;SACT,MAAM,CAAC;QACN,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACpC,MAAM,EAAE,iCAAe;KACxB,CAAC;SACD,MAAM,EAAE;IACX,OAAO,EAAE,OAAC;SACP,KAAK,CAAC,oCAA4B,CAAC;SACnC,QAAQ,EAAE;SACV,MAAM,CACL,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,KAAK,CACX,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CACX,CAAC,KAAK,CAAC;QACP,OAAO,CACL,GAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAA4B,CAAC,MAAM,SAAU,OAAO,CAAC,CAAC,GAAG,CAAC,CAA4B,CAAC,UAAU,EAAE,EACpH,GAAG,KAAK,CAAC,MAAM,SAAS,KAAK,CAAC,UAAU,EAAE,CAC3C,GAAG,CAAC,CACR,EACH;QACE,OAAO,EACL,mEAAmE;KACtE,CACF;CACJ,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/biome-dependency/lib/peer-seam-table.d.ts

@@ -1,5 +1,5 @@
 import { PeerLifecycle, PeerRelationship } from './biome-dependency-contract';
-export declare const PEER_SEAM_TABLE_VERSION: 2;
+export declare const PEER_SEAM_TABLE_VERSION: 3;
 export declare enum PeerSeamOptionMeaning {
     Optional = "optional",
     OperationScoped = "operation-scoped",
@@ -18,12 +18,14 @@ export interface PeerSeamOption {
 export interface PeerSeamTarget {
     readonly argument: number;
     readonly property?: string;
+    readonly keys?: true;
 }
 export interface PeerCallSeam {
     readonly kind: 'call';
     readonly id: string;
     readonly module: string;
     readonly exportName: string;
+    readonly member?: string;
     readonly relationship: Exclude<PeerRelationship, PeerRelationship.ContributionOwner>;
     readonly lifecycle: PeerLifecycle;
     readonly target: PeerSeamTarget;

package/dist/biome-dependency/lib/peer-seam-table.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"peer-seam-table.d.ts","sourceRoot":"","sources":["../../../src/biome-dependency/lib/peer-seam-table.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAsB9E,eAAO,MAAM,uBAAuB,EAAG,CAAU,CAAC;AAGlD,oBAAY,qBAAqB;IAE/B,QAAQ,aAAa;IAMrB,eAAe,qBAAqB;IAEpC,SAAS,cAAc;IAEvB,YAAY,iBAAiB;IAE7B,WAAW,iBAAiB;IAE5B,MAAM,WAAW;IAEjB,OAAO,YAAY;CACpB;AAGD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IAExC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;CAC1B;AAGD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAGD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAC5B,gBAAgB,EAChB,gBAAgB,CAAC,iBAAiB,CACnC,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;CAC7C;AAGD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAC5B,gBAAgB,EAChB,gBAAgB,CAAC,iBAAiB,CACnC,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAGD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;CAC7C;AAED,MAAM,MAAM,QAAQ,GAAG,YAAY,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AAI1E,eAAO,MAAM,eAAe,EAAE,SAAS,QAAQ,EAiIf,CAAC;AAGjC,eAAO,MAAM,sBAAsB,EAAG,+BAAwC,CAAC;AAG/E,eAAO,MAAM,sBAAsB,EAAG,gBAAyB,CAAC;AAUhE,eAAO,MAAM,4BAA4B,EAAG,2BAAoC,CAAC;AAUjF,eAAO,MAAM,qBAAqB,EAAG,oBAA6B,CAAC"}
+{"version":3,"file":"peer-seam-table.d.ts","sourceRoot":"","sources":["../../../src/biome-dependency/lib/peer-seam-table.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AA6B9E,eAAO,MAAM,uBAAuB,EAAG,CAAU,CAAC;AAGlD,oBAAY,qBAAqB;IAE/B,QAAQ,aAAa;IAMrB,eAAe,qBAAqB;IAEpC,SAAS,cAAc;IAEvB,YAAY,iBAAiB;IAE7B,WAAW,iBAAiB;IAE5B,MAAM,WAAW;IAEjB,OAAO,YAAY;CACpB;AAGD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IAExC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;CAC1B;AAGD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAM3B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;CACtB;AAGD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAC5B,gBAAgB,EAChB,gBAAgB,CAAC,iBAAiB,CACnC,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;CAC7C;AAGD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAC5B,gBAAgB,EAChB,gBAAgB,CAAC,iBAAiB,CACnC,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAGD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;CAC7C;AAED,MAAM,MAAM,QAAQ,GAAG,YAAY,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AAI1E,eAAO,MAAM,eAAe,EAAE,SAAS,QAAQ,EAiJf,CAAC;AAGjC,eAAO,MAAM,sBAAsB,EAAG,+BAAwC,CAAC;AAG/E,eAAO,MAAM,sBAAsB,EAAG,gBAAyB,CAAC;AAUhE,eAAO,MAAM,4BAA4B,EAAG,2BAAoC,CAAC;AAUjF,eAAO,MAAM,qBAAqB,EAAG,oBAA6B,CAAC"}

package/dist/biome-dependency/lib/peer-seam-table.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ORIGIN_PATH_EXTENSION = exports.OPERATION_REQUIRES_EXTENSION = exports.BIOME_DELIVERY_SERVICE = exports.CONTRIBUTION_FACT_SEAM = exports.PEER_SEAM_TABLE = exports.PeerSeamOptionMeaning = exports.PEER_SEAM_TABLE_VERSION = void 0;
 const biome_dependency_contract_1 = require("./biome-dependency-contract");
-exports.PEER_SEAM_TABLE_VERSION = 2;
+exports.PEER_SEAM_TABLE_VERSION = 3;
 var PeerSeamOptionMeaning;
 (function (PeerSeamOptionMeaning) {
     PeerSeamOptionMeaning["Optional"] = "optional";
@@ -99,6 +99,17 @@ exports.PEER_SEAM_TABLE = Object.freeze([
         target: { argument: 0 },
         options: [],
     },
+    {
+        kind: 'call',
+        id: 'xema-service-nest/XemaPeersModule.forRoot',
+        module: '@xemahq/xema-service-nest',
+        exportName: 'XemaPeersModule',
+        member: 'forRoot',
+        relationship: biome_dependency_contract_1.PeerRelationship.ServicePeer,
+        lifecycle: biome_dependency_contract_1.PeerLifecycle.Runtime,
+        target: { argument: 0, property: 'clients', keys: true },
+        options: [],
+    },
     {
         kind: 'facility',
         id: 'xema-service-nest/XemaServiceModule',

package/dist/biome-dependency/lib/peer-seam-table.js.map

@@ -1 +1 @@
-{"version":3,"file":"peer-seam-table.js","sourceRoot":"","sources":["../../../src/biome-dependency/lib/peer-seam-table.ts"],"names":[],"mappings":";;;AAAA,2EAA8E;AAsBjE,QAAA,uBAAuB,GAAG,CAAU,CAAC;AAGlD,IAAY,qBAmBX;AAnBD,WAAY,qBAAqB;IAE/B,8CAAqB,CAAA;IAMrB,6DAAoC,CAAA;IAEpC,gDAAuB,CAAA;IAEvB,sDAA6B,CAAA;IAE7B,qDAA4B,CAAA;IAE5B,0CAAiB,CAAA;IAEjB,4CAAmB,CAAA;AACrB,CAAC,EAnBW,qBAAqB,qCAArB,qBAAqB,QAmBhC;AA0DD,MAAM,qBAAqB,GAAG,+BAA+B,CAAC;AAEjD,QAAA,eAAe,GAAwB,MAAM,CAAC,MAAM,CAAC;IAChE;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,2CAA2C;QAC/C,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,qBAAqB;QACjC,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE;QACzC,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,QAAQ,CAAC;gBAChB,OAAO,EAAE,qBAAqB,CAAC,MAAM;gBACrC,QAAQ,EAAE,IAAI;aACf;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,OAAO,EAAE,qBAAqB,CAAC,QAAQ;aACxC;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,iBAAiB,CAAC;gBACzB,OAAO,EAAE,qBAAqB,CAAC,eAAe;aAC/C;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,WAAW,CAAC;gBACnB,OAAO,EAAE,qBAAqB,CAAC,SAAS;aACzC;SACF;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,sCAAsC;QAC1C,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,gBAAgB;QAC5B,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;QACvB,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,aAAa,CAAC;gBACrB,OAAO,EAAE,qBAAqB,CAAC,WAAW;aAC3C;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,iBAAiB,CAAC;gBACzB,OAAO,EAAE,qBAAqB,CAAC,eAAe;aAC/C;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,OAAO,EAAE,qBAAqB,CAAC,QAAQ;aACxC;SACF;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,6CAA6C;QACjD,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,uBAAuB;QACnC,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;QACvB,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC;gBAC9B,OAAO,EAAE,qBAAqB,CAAC,YAAY;aAC5C;SACF;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,qCAAqC;QACzC,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,eAAe;QAC3B,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;QACvB,OAAO,EAAE,EAAE;KACZ;IACD;QAGE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,qCAAqC;QACzC,MAAM,EAAE,2BAA2B;QACnC,UAAU,EAAE,mBAAmB;QAC/B,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,WAAW,EAAE,cAAc;KAC5B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,yCAAyC;QAC7C,MAAM,EAAE,6BAA6B;QACrC,UAAU,EAAE,qBAAqB;QACjC,YAAY,EAAE,4CAAgB,CAAC,YAAY;QAC3C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,iCAAiC;QACrC,MAAM,EAAE,0BAA0B;QAClC,UAAU,EAAE,gBAAgB;QAC5B,YAAY,EAAE,4CAAgB,CAAC,UAAU;QACzC,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,WAAW,EAAE,eAAe;KAC7B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,+CAA+C;QACnD,MAAM,EAAE,gCAAgC;QACxC,UAAU,EAAE,wBAAwB;QACpC,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EAAE,qBAAqB,CAAC,OAAO;gBACtC,QAAQ,EAAE,IAAI;aACf;SACF;KACF;CAC4B,CAAC,CAAC;AAGpB,QAAA,sBAAsB,GAAG,+BAAwC,CAAC;AAGlE,QAAA,sBAAsB,GAAG,gBAAyB,CAAC;AAUnD,QAAA,4BAA4B,GAAG,2BAAoC,CAAC;AAUpE,QAAA,qBAAqB,GAAG,oBAA6B,CAAC"}
+{"version":3,"file":"peer-seam-table.js","sourceRoot":"","sources":["../../../src/biome-dependency/lib/peer-seam-table.ts"],"names":[],"mappings":";;;AAAA,2EAA8E;AA6BjE,QAAA,uBAAuB,GAAG,CAAU,CAAC;AAGlD,IAAY,qBAmBX;AAnBD,WAAY,qBAAqB;IAE/B,8CAAqB,CAAA;IAMrB,6DAAoC,CAAA;IAEpC,gDAAuB,CAAA;IAEvB,sDAA6B,CAAA;IAE7B,qDAA4B,CAAA;IAE5B,0CAAiB,CAAA;IAEjB,4CAAmB,CAAA;AACrB,CAAC,EAnBW,qBAAqB,qCAArB,qBAAqB,QAmBhC;AAkED,MAAM,qBAAqB,GAAG,+BAA+B,CAAC;AAEjD,QAAA,eAAe,GAAwB,MAAM,CAAC,MAAM,CAAC;IAChE;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,2CAA2C;QAC/C,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,qBAAqB;QACjC,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE;QACzC,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,QAAQ,CAAC;gBAChB,OAAO,EAAE,qBAAqB,CAAC,MAAM;gBACrC,QAAQ,EAAE,IAAI;aACf;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,OAAO,EAAE,qBAAqB,CAAC,QAAQ;aACxC;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,iBAAiB,CAAC;gBACzB,OAAO,EAAE,qBAAqB,CAAC,eAAe;aAC/C;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,WAAW,CAAC;gBACnB,OAAO,EAAE,qBAAqB,CAAC,SAAS;aACzC;SACF;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,sCAAsC;QAC1C,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,gBAAgB;QAC5B,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;QACvB,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,aAAa,CAAC;gBACrB,OAAO,EAAE,qBAAqB,CAAC,WAAW;aAC3C;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,iBAAiB,CAAC;gBACzB,OAAO,EAAE,qBAAqB,CAAC,eAAe;aAC/C;YACD;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,OAAO,EAAE,qBAAqB,CAAC,QAAQ;aACxC;SACF;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,6CAA6C;QACjD,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,uBAAuB;QACnC,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;QACvB,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC;gBAC9B,OAAO,EAAE,qBAAqB,CAAC,YAAY;aAC5C;SACF;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,qCAAqC;QACzC,MAAM,EAAE,qBAAqB;QAC7B,UAAU,EAAE,eAAe;QAC3B,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;QACvB,OAAO,EAAE,EAAE;KACZ;IACD;QACE,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,2CAA2C;QAC/C,MAAM,EAAE,2BAA2B;QACnC,UAAU,EAAE,iBAAiB;QAC7B,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAIhC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE;QACxD,OAAO,EAAE,EAAE;KACZ;IACD;QAIE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,qCAAqC;QACzC,MAAM,EAAE,2BAA2B;QACnC,UAAU,EAAE,mBAAmB;QAC/B,YAAY,EAAE,4CAAgB,CAAC,WAAW;QAC1C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,WAAW,EAAE,cAAc;KAC5B;IACD;QAEE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,yCAAyC;QAC7C,MAAM,EAAE,6BAA6B;QACrC,UAAU,EAAE,qBAAqB;QACjC,YAAY,EAAE,4CAAgB,CAAC,YAAY;QAC3C,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,iCAAiC;QACrC,MAAM,EAAE,0BAA0B;QAClC,UAAU,EAAE,gBAAgB;QAC5B,YAAY,EAAE,4CAAgB,CAAC,UAAU;QACzC,SAAS,EAAE,yCAAa,CAAC,OAAO;QAChC,WAAW,EAAE,eAAe;KAC7B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,+CAA+C;QACnD,MAAM,EAAE,gCAAgC;QACxC,UAAU,EAAE,wBAAwB;QACpC,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE;YACP;gBACE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC,SAAS,CAAC;gBACjB,OAAO,EAAE,qBAAqB,CAAC,OAAO;gBACtC,QAAQ,EAAE,IAAI;aACf;SACF;KACF;CAC4B,CAAC,CAAC;AAGpB,QAAA,sBAAsB,GAAG,+BAAwC,CAAC;AAGlE,QAAA,sBAAsB,GAAG,gBAAyB,CAAC;AAUnD,QAAA,4BAA4B,GAAG,2BAAoC,CAAC;AAUpE,QAAA,qBAAqB,GAAG,oBAA6B,CAAC"}

package/dist/biome-dependency/lib/service-peer-contract.d.ts

@@ -1,7 +1,7 @@
 import { z } from 'zod';
 import { DynamicPeerKind, PeerLifecycle, PeerRelationship, type BiomeDependencyContract } from './biome-dependency-contract';
 export declare const ServicePeerContractSchema: z.ZodObject<{
-    contractVersion: z.ZodLiteral<1>;
+    contractVersion: z.ZodLiteral<2>;
     peers: z.ZodReadonly<z.ZodArray<z.ZodObject<{
         relationship: z.ZodEnum<{
             "service-peer": PeerRelationship.ServicePeer;

package/dist/caller-context/index.d.ts

@@ -0,0 +1,20 @@
+export * from './lib/approval-mode';
+export * from './lib/request-context';
+export * from './lib/resolve-acting-user';
+export * from './lib/caller-context';
+export * from './lib/lent-capability';
+export * from './lib/org-authority';
+export * from './lib/org-claim';
+export * from './lib/org-role';
+export * from './lib/receiver-audience';
+export * from './lib/receiver-operation';
+export * from './lib/worker-context';
+export * from './lib/platform-sweep';
+export * from './lib/org-scope-mint';
+export * from './lib/caller-org-scope';
+export * from './lib/direct-service-actor';
+export * from './lib/acting-chain';
+export * from './lib/holds-org-authority';
+export * from './lib/boundary-context-brand';
+export * from './lib/workflow-step-credential';
+//# sourceMappingURL=index.d.ts.map

package/dist/caller-context/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/caller-context/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC"}

package/dist/caller-context/index.js

@@ -0,0 +1,36 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/approval-mode"), exports);
+__exportStar(require("./lib/request-context"), exports);
+__exportStar(require("./lib/resolve-acting-user"), exports);
+__exportStar(require("./lib/caller-context"), exports);
+__exportStar(require("./lib/lent-capability"), exports);
+__exportStar(require("./lib/org-authority"), exports);
+__exportStar(require("./lib/org-claim"), exports);
+__exportStar(require("./lib/org-role"), exports);
+__exportStar(require("./lib/receiver-audience"), exports);
+__exportStar(require("./lib/receiver-operation"), exports);
+__exportStar(require("./lib/worker-context"), exports);
+__exportStar(require("./lib/platform-sweep"), exports);
+__exportStar(require("./lib/org-scope-mint"), exports);
+__exportStar(require("./lib/caller-org-scope"), exports);
+__exportStar(require("./lib/direct-service-actor"), exports);
+__exportStar(require("./lib/acting-chain"), exports);
+__exportStar(require("./lib/holds-org-authority"), exports);
+__exportStar(require("./lib/boundary-context-brand"), exports);
+__exportStar(require("./lib/workflow-step-credential"), exports);
+//# sourceMappingURL=index.js.map

package/dist/caller-context/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/caller-context/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sDAAoC;AACpC,wDAAsC;AACtC,4DAA0C;AAC1C,uDAAqC;AACrC,wDAAsC;AACtC,sDAAoC;AACpC,kDAAgC;AAChC,iDAA+B;AAC/B,0DAAwC;AACxC,2DAAyC;AACzC,uDAAqC;AACrC,uDAAqC;AACrC,uDAAqC;AACrC,yDAAuC;AACvC,6DAA2C;AAC3C,qDAAmC;AACnC,4DAA0C;AAC1C,+DAA6C;AAC7C,iEAA+C"}

package/dist/caller-context/lib/acting-chain.d.ts

@@ -0,0 +1,20 @@
+import { SubjectKind } from '../../subject';
+import type { RequestContext } from './request-context';
+export declare enum ActingChain {
+    Direct = "direct",
+    RecordedDelegation = "recorded-delegation",
+    WorkflowStepCredential = "workflow-step-credential",
+    OnBehalfOf = "on-behalf-of",
+    Unrecorded = "unrecorded"
+}
+export interface ActingChainFacts {
+    readonly hops: number;
+    readonly delegationId: string | undefined;
+    readonly subjectKind: SubjectKind;
+    readonly statesWorkflowStepCredential: boolean;
+}
+export declare function classifyActingChain(facts: ActingChainFacts): ActingChain;
+export declare function actingChainOf(ctx: Pick<RequestContext, 'actorChain' | 'delegationId' | 'subject' | 'workflowStepCredential'>): ActingChain;
+export declare function isRecordedDelegation(ctx: Pick<RequestContext, 'actorChain' | 'delegationId' | 'subject' | 'workflowStepCredential'>): boolean;
+export declare function isUnrecordedActingChain(chain: ActingChain): boolean;
+//# sourceMappingURL=acting-chain.d.ts.map

package/dist/caller-context/lib/acting-chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acting-chain.d.ts","sourceRoot":"","sources":["../../../src/caller-context/lib/acting-chain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAUxD,oBAAY,WAAW;IAErB,MAAM,WAAW;IAEjB,kBAAkB,wBAAwB;IAM1C,sBAAsB,6BAA6B;IAMnD,UAAU,iBAAiB;IAE3B,UAAU,eAAe;CAC1B;AAGD,MAAM,WAAW,gBAAgB;IAE/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAE1C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAElC,QAAQ,CAAC,4BAA4B,EAAE,OAAO,CAAC;CAChD;AAGD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,WAAW,CAYxE;AAGD,wBAAgB,aAAa,CAC3B,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,GAAG,cAAc,GAAG,SAAS,GAAG,wBAAwB,CAAC,GAC9F,WAAW,CAOb;AAGD,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,GAAG,cAAc,GAAG,SAAS,GAAG,wBAAwB,CAAC,GAC9F,OAAO,CAET;AAGD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAEnE"}

package/dist/caller-context/lib/acting-chain.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ActingChain = void 0;
+exports.classifyActingChain = classifyActingChain;
+exports.actingChainOf = actingChainOf;
+exports.isRecordedDelegation = isRecordedDelegation;
+exports.isUnrecordedActingChain = isUnrecordedActingChain;
+const subject_1 = require("../../subject");
+var ActingChain;
+(function (ActingChain) {
+    ActingChain["Direct"] = "direct";
+    ActingChain["RecordedDelegation"] = "recorded-delegation";
+    ActingChain["WorkflowStepCredential"] = "workflow-step-credential";
+    ActingChain["OnBehalfOf"] = "on-behalf-of";
+    ActingChain["Unrecorded"] = "unrecorded";
+})(ActingChain || (exports.ActingChain = ActingChain = {}));
+function classifyActingChain(facts) {
+    if (facts.hops === 0)
+        return ActingChain.Direct;
+    if (facts.delegationId !== undefined && facts.delegationId !== '') {
+        return ActingChain.RecordedDelegation;
+    }
+    if (facts.hops !== 1)
+        return ActingChain.Unrecorded;
+    if (facts.statesWorkflowStepCredential) {
+        return facts.subjectKind === subject_1.SubjectKind.Service
+            ? ActingChain.WorkflowStepCredential
+            : ActingChain.Unrecorded;
+    }
+    return facts.subjectKind === subject_1.SubjectKind.User ? ActingChain.OnBehalfOf : ActingChain.Unrecorded;
+}
+function actingChainOf(ctx) {
+    return classifyActingChain({
+        hops: ctx.actorChain.length,
+        delegationId: ctx.delegationId,
+        subjectKind: ctx.subject.kind,
+        statesWorkflowStepCredential: ctx.workflowStepCredential !== undefined,
+    });
+}
+function isRecordedDelegation(ctx) {
+    return actingChainOf(ctx) === ActingChain.RecordedDelegation;
+}
+function isUnrecordedActingChain(chain) {
+    return chain !== ActingChain.Direct && chain !== ActingChain.RecordedDelegation;
+}
+//# sourceMappingURL=acting-chain.js.map

package/dist/caller-context/lib/acting-chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acting-chain.js","sourceRoot":"","sources":["../../../src/caller-context/lib/acting-chain.ts"],"names":[],"mappings":";;;AA6CA,kDAYC;AAGD,sCASC;AAGD,oDAIC;AAGD,0DAEC;AAjFD,2CAA4C;AAW5C,IAAY,WAmBX;AAnBD,WAAY,WAAW;IAErB,gCAAiB,CAAA;IAEjB,yDAA0C,CAAA;IAM1C,kEAAmD,CAAA;IAMnD,0CAA2B,CAAA;IAE3B,wCAAyB,CAAA;AAC3B,CAAC,EAnBW,WAAW,2BAAX,WAAW,QAmBtB;AAeD,SAAgB,mBAAmB,CAAC,KAAuB;IACzD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC,MAAM,CAAC;IAChD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;QAClE,OAAO,WAAW,CAAC,kBAAkB,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC,UAAU,CAAC;IACpD,IAAI,KAAK,CAAC,4BAA4B,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC,WAAW,KAAK,qBAAW,CAAC,OAAO;YAC9C,CAAC,CAAC,WAAW,CAAC,sBAAsB;YACpC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,KAAK,qBAAW,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC;AAClG,CAAC;AAGD,SAAgB,aAAa,CAC3B,GAA+F;IAE/F,OAAO,mBAAmB,CAAC;QACzB,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,MAAM;QAC3B,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI;QAC7B,4BAA4B,EAAE,GAAG,CAAC,sBAAsB,KAAK,SAAS;KACvE,CAAC,CAAC;AACL,CAAC;AAGD,SAAgB,oBAAoB,CAClC,GAA+F;IAE/F,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,WAAW,CAAC,kBAAkB,CAAC;AAC/D,CAAC;AAGD,SAAgB,uBAAuB,CAAC,KAAkB;IACxD,OAAO,KAAK,KAAK,WAAW,CAAC,MAAM,IAAI,KAAK,KAAK,WAAW,CAAC,kBAAkB,CAAC;AAClF,CAAC"}

package/dist/caller-context/lib/approval-mode.d.ts

@@ -0,0 +1,9 @@
+export declare const PIPELINE_APPROVAL_MODES: readonly ["AUTO", "HUMAN_REQUIRED"];
+export type PipelineApprovalMode = (typeof PIPELINE_APPROVAL_MODES)[number];
+export declare const PIPELINE_APPROVAL_MODE_SET: ReadonlySet<string>;
+export declare function parsePipelineApprovalMode(value: string | null | undefined): PipelineApprovalMode | undefined;
+export declare const GOVERNANCE_APPROVAL_MODES: readonly ["AUTO", "SUPERVISED", "HUMAN_REQUIRED", "REVIEW_FIRST"];
+export type GovernanceApprovalMode = (typeof GOVERNANCE_APPROVAL_MODES)[number];
+export declare const GOVERNANCE_APPROVAL_MODE_SET: ReadonlySet<string>;
+export declare function parseGovernanceApprovalMode(value: string | null | undefined): GovernanceApprovalMode | undefined;
+//# sourceMappingURL=approval-mode.d.ts.map

package/dist/caller-context/lib/approval-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-mode.d.ts","sourceRoot":"","sources":["../../../src/caller-context/lib/approval-mode.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,uBAAuB,qCAAsC,CAAC;AAG3E,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAG5E,eAAO,MAAM,0BAA0B,EAAE,WAAW,CAAC,MAAM,CAE1D,CAAC;AAMF,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,oBAAoB,GAAG,SAAS,CAKlC;AAKD,eAAO,MAAM,yBAAyB,mEAK5B,CAAC;AAGX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAGhF,eAAO,MAAM,4BAA4B,EAAE,WAAW,CAAC,MAAM,CAE5D,CAAC;AAMF,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,sBAAsB,GAAG,SAAS,CAKpC"}

package/dist/caller-context/lib/approval-mode.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GOVERNANCE_APPROVAL_MODE_SET = exports.GOVERNANCE_APPROVAL_MODES = exports.PIPELINE_APPROVAL_MODE_SET = exports.PIPELINE_APPROVAL_MODES = void 0;
+exports.parsePipelineApprovalMode = parsePipelineApprovalMode;
+exports.parseGovernanceApprovalMode = parseGovernanceApprovalMode;
+exports.PIPELINE_APPROVAL_MODES = ['AUTO', 'HUMAN_REQUIRED'];
+exports.PIPELINE_APPROVAL_MODE_SET = new Set(exports.PIPELINE_APPROVAL_MODES);
+function parsePipelineApprovalMode(value) {
+    if (value && exports.PIPELINE_APPROVAL_MODE_SET.has(value)) {
+        return value;
+    }
+    return undefined;
+}
+exports.GOVERNANCE_APPROVAL_MODES = [
+    'AUTO',
+    'SUPERVISED',
+    'HUMAN_REQUIRED',
+    'REVIEW_FIRST',
+];
+exports.GOVERNANCE_APPROVAL_MODE_SET = new Set(exports.GOVERNANCE_APPROVAL_MODES);
+function parseGovernanceApprovalMode(value) {
+    if (value && exports.GOVERNANCE_APPROVAL_MODE_SET.has(value)) {
+        return value;
+    }
+    return undefined;
+}
+//# sourceMappingURL=approval-mode.js.map

package/dist/caller-context/lib/approval-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-mode.js","sourceRoot":"","sources":["../../../src/caller-context/lib/approval-mode.ts"],"names":[],"mappings":";;;AA8BA,8DAOC;AAwBD,kEAOC;AApDY,QAAA,uBAAuB,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAU,CAAC;AAM9D,QAAA,0BAA0B,GAAwB,IAAI,GAAG,CACpE,+BAAuB,CACxB,CAAC;AAMF,SAAgB,yBAAyB,CACvC,KAAgC;IAEhC,IAAI,KAAK,IAAI,kCAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,KAA6B,CAAC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAKY,QAAA,yBAAyB,GAAG;IACvC,MAAM;IACN,YAAY;IACZ,gBAAgB;IAChB,cAAc;CACN,CAAC;AAME,QAAA,4BAA4B,GAAwB,IAAI,GAAG,CACtE,iCAAyB,CAC1B,CAAC;AAMF,SAAgB,2BAA2B,CACzC,KAAgC;IAEhC,IAAI,KAAK,IAAI,oCAA4B,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,KAA+B,CAAC;IACzC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/caller-context/lib/boundary-context-brand.d.ts

@@ -0,0 +1,5 @@
+export declare const BOUNDARY_CONTEXT_CLAIMS: unique symbol;
+export declare function isBoundaryContextClaims(claims: object): boolean;
+export declare const PLATFORM_ROLES_CLAIM = "platform_roles";
+export declare function platformRolesFromBoundaryClaims(claims: Record<string, unknown>): string[];
+//# sourceMappingURL=boundary-context-brand.d.ts.map

package/dist/caller-context/lib/boundary-context-brand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundary-context-brand.d.ts","sourceRoot":"","sources":["../../../src/caller-context/lib/boundary-context-brand.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,uBAAuB,eAEnC,CAAC;AAGF,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE/D;AAMD,eAAO,MAAM,oBAAoB,mBAAmB,CAAC;AAGrD,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,EAAE,CAKV"}

package/dist/caller-context/lib/boundary-context-brand.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PLATFORM_ROLES_CLAIM = exports.BOUNDARY_CONTEXT_CLAIMS = void 0;
+exports.isBoundaryContextClaims = isBoundaryContextClaims;
+exports.platformRolesFromBoundaryClaims = platformRolesFromBoundaryClaims;
+exports.BOUNDARY_CONTEXT_CLAIMS = Symbol.for('xema.platform-common.boundary-context-claims');
+function isBoundaryContextClaims(claims) {
+    return claims[exports.BOUNDARY_CONTEXT_CLAIMS] === true;
+}
+exports.PLATFORM_ROLES_CLAIM = 'platform_roles';
+function platformRolesFromBoundaryClaims(claims) {
+    const roles = claims[exports.PLATFORM_ROLES_CLAIM];
+    return Array.isArray(roles)
+        ? roles.filter((r) => typeof r === 'string')
+        : [];
+}
+//# sourceMappingURL=boundary-context-brand.js.map

package/dist/caller-context/lib/boundary-context-brand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundary-context-brand.js","sourceRoot":"","sources":["../../../src/caller-context/lib/boundary-context-brand.ts"],"names":[],"mappings":";;;AAqBA,0DAEC;AASD,0EAOC;AAvBY,QAAA,uBAAuB,GAAG,MAAM,CAAC,GAAG,CAC/C,8CAA8C,CAC/C,CAAC;AAGF,SAAgB,uBAAuB,CAAC,MAAc;IACpD,OAAQ,MAAkC,CAAC,+BAAuB,CAAC,KAAK,IAAI,CAAC;AAC/E,CAAC;AAMY,QAAA,oBAAoB,GAAG,gBAAgB,CAAC;AAGrD,SAAgB,+BAA+B,CAC7C,MAA+B;IAE/B,MAAM,KAAK,GAAG,MAAM,CAAC,4BAAoB,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QACzD,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}

package/dist/caller-context/lib/caller-context.d.ts

@@ -0,0 +1,28 @@
+import { type OrgAuthorityVerdict } from './org-authority';
+declare const FORWARDED_CALLER_CONTEXT_BRAND: unique symbol;
+export interface ForwardedCallerContext {
+    readonly [FORWARDED_CALLER_CONTEXT_BRAND]: true;
+    readonly bearer: string;
+    readonly orgId: string;
+}
+export declare enum CallerContextRefusal {
+    NoBearer = "no_bearer",
+    OrgUnproven = "org_unproven"
+}
+export declare class CallerContextNotForwardableError extends Error {
+    readonly refusal: CallerContextRefusal;
+    readonly orgId: string | undefined;
+    constructor(refusal: CallerContextRefusal, orgId: string | undefined);
+}
+export declare function forwardCallerContext(request: {
+    readonly bearerToken?: string | undefined;
+    readonly orgAuthority?: OrgAuthorityVerdict | undefined;
+}): ForwardedCallerContext;
+export declare const PRESENTER_CONTEXT_HEADER = "X-Xema-Presenter-Context";
+export interface PresenterContextSource {
+    getAccessToken(): Promise<string>;
+}
+export declare function forwardedCallerHeaders(context: ForwardedCallerContext, presenter: PresenterContextSource): Promise<Record<string, string>>;
+export declare function forwardedAuthorization(context: ForwardedCallerContext): string;
+export {};
+//# sourceMappingURL=caller-context.d.ts.map

package/dist/caller-context/lib/caller-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller-context.d.ts","sourceRoot":"","sources":["../../../src/caller-context/lib/caller-context.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAwB,KAAK,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEjF,OAAO,CAAC,MAAM,8BAA8B,EAAE,OAAO,MAAM,CAAC;AAO5D,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,CAAC,8BAA8B,CAAC,EAAE,IAAI,CAAC;IAEhD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAGD,oBAAY,oBAAoB;IAE9B,QAAQ,cAAc;IAEtB,WAAW,iBAAiB;CAC7B;AAED,qBAAa,gCAAiC,SAAQ,KAAK;IAEvD,QAAQ,CAAC,OAAO,EAAE,oBAAoB;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS;gBADzB,OAAO,EAAE,oBAAoB,EAC7B,KAAK,EAAE,MAAM,GAAG,SAAS;CAWrC;AASD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CACzD,GAAG,sBAAsB,CAazB;AAOD,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AAMnE,MAAM,WAAW,sBAAsB;IACrC,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACnC;AAQD,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,sBAAsB,EAC/B,SAAS,EAAE,sBAAsB,GAChC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CASjC;AAGD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,CAE9E"}

package/dist/caller-context/lib/caller-context.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PRESENTER_CONTEXT_HEADER = exports.CallerContextNotForwardableError = exports.CallerContextRefusal = void 0;
+exports.forwardCallerContext = forwardCallerContext;
+exports.forwardedCallerHeaders = forwardedCallerHeaders;
+exports.forwardedAuthorization = forwardedAuthorization;
+const org_authority_1 = require("./org-authority");
+var CallerContextRefusal;
+(function (CallerContextRefusal) {
+    CallerContextRefusal["NoBearer"] = "no_bearer";
+    CallerContextRefusal["OrgUnproven"] = "org_unproven";
+})(CallerContextRefusal || (exports.CallerContextRefusal = CallerContextRefusal = {}));
+class CallerContextNotForwardableError extends Error {
+    refusal;
+    orgId;
+    constructor(refusal, orgId) {
+        super(refusal === CallerContextRefusal.NoBearer
+            ? 'The request carries no verified bearer to forward; a synchronous peer call ' +
+                'presents the caller’s own context or does not happen.'
+            : `The caller’s token does not prove organization "${orgId ?? ''}", so there is ` +
+                'no authority to forward for it. A relayed org header is context, not proof.');
+        this.refusal = refusal;
+        this.orgId = orgId;
+        this.name = 'CallerContextNotForwardableError';
+    }
+}
+exports.CallerContextNotForwardableError = CallerContextNotForwardableError;
+function forwardCallerContext(request) {
+    const bearer = request.bearerToken;
+    if (bearer === undefined || bearer === '') {
+        throw new CallerContextNotForwardableError(CallerContextRefusal.NoBearer, undefined);
+    }
+    const verdict = request.orgAuthority;
+    if (verdict === undefined || !(0, org_authority_1.isOrgAuthorityProven)(verdict)) {
+        throw new CallerContextNotForwardableError(CallerContextRefusal.OrgUnproven, verdict?.assertedOrgId);
+    }
+    return { bearer, orgId: verdict.assertedOrgId.trim() };
+}
+exports.PRESENTER_CONTEXT_HEADER = 'X-Xema-Presenter-Context';
+async function forwardedCallerHeaders(context, presenter) {
+    const presenterContext = await presenter.getAccessToken();
+    if (presenterContext === '') {
+        throw new Error('The presenting service has no workload context to state.');
+    }
+    return {
+        Authorization: forwardedAuthorization(context),
+        [exports.PRESENTER_CONTEXT_HEADER]: presenterContext,
+    };
+}
+function forwardedAuthorization(context) {
+    return `Bearer ${context.bearer}`;
+}
+//# sourceMappingURL=caller-context.js.map

package/dist/caller-context/lib/caller-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller-context.js","sourceRoot":"","sources":["../../../src/caller-context/lib/caller-context.ts"],"names":[],"mappings":";;;AAiEA,oDAgBC;AAuBD,wDAYC;AAGD,wDAEC;AAxGD,mDAAiF;AAkBjF,IAAY,oBAKX;AALD,WAAY,oBAAoB;IAE9B,8CAAsB,CAAA;IAEtB,oDAA4B,CAAA;AAC9B,CAAC,EALW,oBAAoB,oCAApB,oBAAoB,QAK/B;AAED,MAAa,gCAAiC,SAAQ,KAAK;IAE9C;IACA;IAFX,YACW,OAA6B,EAC7B,KAAyB;QAElC,KAAK,CACH,OAAO,KAAK,oBAAoB,CAAC,QAAQ;YACvC,CAAC,CAAC,6EAA6E;gBAC3E,uDAAuD;YAC3D,CAAC,CAAC,mDAAmD,KAAK,IAAI,EAAE,iBAAiB;gBAC7E,6EAA6E,CACpF,CAAC;QATO,YAAO,GAAP,OAAO,CAAsB;QAC7B,UAAK,GAAL,KAAK,CAAoB;QASlC,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF;AAdD,4EAcC;AASD,SAAgB,oBAAoB,CAAC,OAGpC;IACC,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC;IACrC,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,IAAA,oCAAoB,EAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,gCAAgC,CACxC,oBAAoB,CAAC,WAAW,EAChC,OAAO,EAAE,aAAa,CACvB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,EAA4B,CAAC;AACnF,CAAC;AAOY,QAAA,wBAAwB,GAAG,0BAA0B,CAAC;AAgB5D,KAAK,UAAU,sBAAsB,CAC1C,OAA+B,EAC/B,SAAiC;IAEjC,MAAM,gBAAgB,GAAG,MAAM,SAAS,CAAC,cAAc,EAAE,CAAC;IAC1D,IAAI,gBAAgB,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO;QACL,aAAa,EAAE,sBAAsB,CAAC,OAAO,CAAC;QAC9C,CAAC,gCAAwB,CAAC,EAAE,gBAAgB;KAC7C,CAAC;AACJ,CAAC;AAGD,SAAgB,sBAAsB,CAAC,OAA+B;IACpE,OAAO,UAAU,OAAO,CAAC,MAAM,EAAE,CAAC;AACpC,CAAC"}

package/dist/caller-context/lib/caller-org-scope.d.ts

@@ -0,0 +1,4 @@
+import { type CallerOrgScope } from '../../tenant';
+import type { RequestContext } from './request-context';
+export declare function resolveCallerOrgScope(ctx: RequestContext | undefined): CallerOrgScope;
+//# sourceMappingURL=caller-org-scope.d.ts.map

package/dist/caller-context/lib/caller-org-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller-org-scope.d.ts","sourceRoot":"","sources":["../../../src/caller-context/lib/caller-org-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AA0ExD,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,cAAc,GAAG,SAAS,GAC9B,cAAc,CAuBhB"}

package/dist/caller-context/lib/caller-org-scope.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveCallerOrgScope = resolveCallerOrgScope;
+const tenant_1 = require("../../tenant");
+function resolveCallerOrgScope(ctx) {
+    if (!ctx) {
+        throw new Error('RequestContext missing on an org-scoped route — RequestContextMiddleware ' +
+            'is not applied. Refusing to resolve a caller org scope without it.');
+    }
+    if (!ctx.orgId) {
+        return (0, tenant_1.callerOrgScope)(null);
+    }
+    const orgId = (0, tenant_1.toOrgId)(ctx.orgId);
+    if (orgId === null) {
+        throw new Error(`RequestContext carries a malformed organisation id "${ctx.orgId}". ` +
+            'Refusing to resolve a caller org scope: an unusable org id is NOT ' +
+            '"no org", and answering it with the cross-org platform scope would ' +
+            'grant it more authority than a well-formed one.');
+    }
+    return (0, tenant_1.callerOrgScope)(orgId);
+}
+//# sourceMappingURL=caller-org-scope.js.map

package/dist/caller-context/lib/caller-org-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller-org-scope.js","sourceRoot":"","sources":["../../../src/caller-context/lib/caller-org-scope.ts"],"names":[],"mappings":";;AAgFA,sDAyBC;AAzGD,yCAIsB;AA4EtB,SAAgB,qBAAqB,CACnC,GAA+B;IAE/B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,2EAA2E;YACzE,oEAAoE,CACvE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,IAAA,uBAAc,EAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,KAAK,GAAG,IAAA,gBAAO,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,uDAAuD,GAAG,CAAC,KAAK,KAAK;YACnE,oEAAoE;YACpE,qEAAqE;YACrE,iDAAiD,CACpD,CAAC;IACJ,CAAC;IAED,OAAO,IAAA,uBAAc,EAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}

package/dist/caller-context/lib/direct-service-actor.d.ts

@@ -0,0 +1,3 @@
+import type { RequestContext } from './request-context';
+export declare function isDirectServiceActor(ctx: Pick<RequestContext, 'tokenClass' | 'actorChain'>): boolean;
+//# sourceMappingURL=direct-service-actor.d.ts.map

package/dist/caller-context/lib/direct-service-actor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct-service-actor.d.ts","sourceRoot":"","sources":["../../../src/caller-context/lib/direct-service-actor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAexD,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,GAAG,YAAY,CAAC,GACrD,OAAO,CAET"}

package/dist/caller-context/lib/direct-service-actor.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isDirectServiceActor = isDirectServiceActor;
+const subject_1 = require("../../subject");
+function isDirectServiceActor(ctx) {
+    return ctx.tokenClass === subject_1.TokenClass.ServiceJwt && ctx.actorChain.length === 0;
+}
+//# sourceMappingURL=direct-service-actor.js.map

package/dist/caller-context/lib/direct-service-actor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"direct-service-actor.js","sourceRoot":"","sources":["../../../src/caller-context/lib/direct-service-actor.ts"],"names":[],"mappings":";;AAgBA,oDAIC;AApBD,2CAA2C;AAgB3C,SAAgB,oBAAoB,CAClC,GAAsD;IAEtD,OAAO,GAAG,CAAC,UAAU,KAAK,oBAAU,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;AACjF,CAAC"}

package/dist/caller-context/lib/holds-org-authority.d.ts

@@ -0,0 +1,10 @@
+import { AuditAuthorityKind } from '../../audit';
+import { OrgRole } from '../../tenant';
+import type { RequestContext } from './request-context';
+export type OrgAuthorityInstrument = {
+    readonly kind: AuditAuthorityKind.OrgRole;
+    readonly orgRole: OrgRole;
+};
+export declare function resolveOrgAuthorityInstrument(ctx: Pick<RequestContext, 'orgRole'>, required: OrgRole): OrgAuthorityInstrument | undefined;
+export declare function holdsOrgAuthority(ctx: Pick<RequestContext, 'orgRole'>, required: OrgRole): boolean;
+//# sourceMappingURL=holds-org-authority.d.ts.map

package/dist/caller-context/lib/holds-org-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"holds-org-authority.d.ts","sourceRoot":"","sources":["../../../src/caller-context/lib/holds-org-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,OAAO,EAAE,OAAO,EAAoB,MAAM,cAAc,CAAC;AAEzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAWxD,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,OAAO,CAAC;IAE1C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B,CAAC;AA8BF,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,EACpC,QAAQ,EAAE,OAAO,GAChB,sBAAsB,GAAG,SAAS,CAKpC;AAyBD,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,EACpC,QAAQ,EAAE,OAAO,GAChB,OAAO,CAET"}

package/dist/caller-context/lib/holds-org-authority.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveOrgAuthorityInstrument = resolveOrgAuthorityInstrument;
+exports.holdsOrgAuthority = holdsOrgAuthority;
+const audit_1 = require("../../audit");
+const tenant_1 = require("../../tenant");
+function resolveOrgAuthorityInstrument(ctx, required) {
+    if (ctx.orgRole !== undefined && (0, tenant_1.orgRoleSatisfies)(ctx.orgRole, required)) {
+        return { kind: audit_1.AuditAuthorityKind.OrgRole, orgRole: ctx.orgRole };
+    }
+    return undefined;
+}
+function holdsOrgAuthority(ctx, required) {
+    return resolveOrgAuthorityInstrument(ctx, required) !== undefined;
+}
+//# sourceMappingURL=holds-org-authority.js.map

package/dist/caller-context/lib/holds-org-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"holds-org-authority.js","sourceRoot":"","sources":["../../../src/caller-context/lib/holds-org-authority.ts"],"names":[],"mappings":";;AAiDA,sEAQC;AAyBD,8CAKC;AAvFD,uCAAiD;AAEjD,yCAAyD;AA+CzD,SAAgB,6BAA6B,CAC3C,GAAoC,EACpC,QAAiB;IAEjB,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,IAAA,yBAAgB,EAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,0BAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAyBD,SAAgB,iBAAiB,CAC/B,GAAoC,EACpC,QAAiB;IAEjB,OAAO,6BAA6B,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,SAAS,CAAC;AACpE,CAAC"}

package/dist/caller-context/lib/lent-capability.d.ts

@@ -0,0 +1,11 @@
+import type { DelegatedAuthority } from '../../subject';
+export declare enum LentCapabilityVia {
+    Operation = "operation",
+    ReachedThrough = "reached-through"
+}
+export interface LentCapabilityAdmission {
+    readonly capability: string;
+    readonly via: LentCapabilityVia;
+}
+export declare function lentCapabilityAdmitting(delegation: Pick<DelegatedAuthority, 'capabilities'>, operation: string, reachedThrough?: readonly string[]): LentCapabilityAdmission | undefined;
+//# sourceMappingURL=lent-capability.d.ts.map

package/dist/caller-context/lib/lent-capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lent-capability.d.ts","sourceRoot":"","sources":["../../../src/caller-context/lib/lent-capability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AASxD,oBAAY,iBAAiB;IAE3B,SAAS,cAAc;IAEvB,cAAc,oBAAoB;CACnC;AAGD,MAAM,WAAW,uBAAuB;IAEtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAC;CACjC;AAYD,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,IAAI,CAAC,kBAAkB,EAAE,cAAc,CAAC,EACpD,SAAS,EAAE,MAAM,EACjB,cAAc,GAAE,SAAS,MAAM,EAAO,GACrC,uBAAuB,GAAG,SAAS,CAQrC"}