kibi-plugin-builtin 0.5.0 → 0.5.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,16 @@
|
|
|
1
1
|
# kibi-plugin-builtin
|
|
2
2
|
|
|
3
|
+
## 0.5.1
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- 8f3f586: Permission grants written the way product owners write them now model as permission rules. `kb_model` (mode predicates) accepted "may", "can", "is allowed to" and "are permitted to" but rejected "must be able to", "are able to", "have permission to" and "are entitled to" with "required semantic cue absent", so a requirement such as "An admin must be able to read any analysis request" ended as an ontology gap even with complete argument bindings. The semantic advisor now also treats "have permission to" and "are entitled to" as normative clauses, and inferred permission bindings drop the leading article and singularise the resource, so "any analysis request" and "analysis requests" bind the same actor, action and resource key that the allow/deny contradiction check compares.
|
|
8
|
+
- `predicate-applicability.ts`: the permission_rule cue and the normative-intent gate accept `must/shall/should be able to`, `is/are able to`, `is/are entitled to` and `has/have permission to`, including the common-verb form right after the grant.
|
|
9
|
+
- `clauses.ts`: `has/have (no) permission to` and `is/are (not) entitled to` are normative assertions; bare `is/are able to` stays descriptive so stored inventories keep their roles.
|
|
10
|
+
- `predicate-inference-1.ts`: grant and prohibition forms of the new cues bind actor, action, resource and decision; actors and resources lose their determiner and resources are singular.
|
|
11
|
+
- The builtin semantic classifier's permission signal recognises `permitted`, `able to`, `entitled to` and `permission to`.
|
|
12
|
+
- kibi-usage 2.15.1: the deny example shows the singular resource and lists the grant wordings `permission_rule` accepts.
|
|
13
|
+
|
|
3
14
|
## 0.5.0
|
|
4
15
|
|
|
5
16
|
### Minor Changes
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"builtin-classifier.d.ts","sourceRoot":"","sources":["../../src/semantic/builtin-classifier.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAEV,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,YAAY,EACZ,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;
|
|
1
|
+
{"version":3,"file":"builtin-classifier.d.ts","sourceRoot":"","sources":["../../src/semantic/builtin-classifier.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAEV,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,YAAY,EACZ,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AA0DzB,UAAU,cAAc;IACtB,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAGD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,cAAc,EAAE,CAetE;AAED;;;GAGG;AAEH,wBAAgB,UAAU,CACxB,OAAO,EAAE,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;CAAE,EAAE,GACxD,YAAY,CAoBd;AA4BD,qBAAa,yBAA0B,YAAW,oBAAoB;IACpE,QAAQ,CAAC,EAAE,oCAAoC;IAE/C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,GAAG,wBAAwB;CAqBnE;AAGD,wBAAgB,+BAA+B,IAAI,oBAAoB,CAEtE"}
|
|
@@ -39,7 +39,9 @@ const SIGNAL_PATTERNS = [
|
|
|
39
39
|
kind: "permission",
|
|
40
40
|
candidateLane: "predicate",
|
|
41
41
|
confidence: 0.8,
|
|
42
|
-
|
|
42
|
+
// Grants ("permitted", "able to", "entitled to", "permission to") are
|
|
43
|
+
// permissions as much as "allowed" and the prohibition cues are.
|
|
44
|
+
pattern: /\b(?:only|may|can|allowed|permitted|denied|forbidden|must\s+not|cannot|can't|able\s+to|entitled\s+to|permission\s+to)\b/i,
|
|
43
45
|
},
|
|
44
46
|
{
|
|
45
47
|
kind: "state_or_default",
|
package/package.json
CHANGED