31 lines
1.6 KiB
JavaScript
31 lines
1.6 KiB
JavaScript
import { BusError } from './broker.mjs';
|
|
import { isHostKind } from '../../organization/src/vocabulary.mjs';
|
|
// Adapt S1's validated loadOrganization (loadBusiness) + resolveInstance outputs, without loading
|
|
// or writing files. The result keeps the v1 business shape and error codes (rename design r2).
|
|
export function busOrganization(business, resolved) {
|
|
if (!business || typeof business.id !== 'string' || !business.roles || !resolved)
|
|
throw new BusError('invalid-business');
|
|
const out = structuredClone(business);
|
|
for (const role of Object.keys(out.roles)) {
|
|
const r = resolved[role];
|
|
if (
|
|
!r ||
|
|
r.business !== business.id ||
|
|
r.instance !== role ||
|
|
r.definition !== out.roles[role].definition ||
|
|
!r.limits?.authority
|
|
)
|
|
throw new BusError('invalid-resolution');
|
|
out.roles[role].network = r.limits.network;
|
|
out.roles[role].authority = structuredClone(r.limits.authority);
|
|
// REQ-HARN-2: "web" in the resolved tool limit is the grant for the broker's web verbs.
|
|
out.roles[role].tools = [...(r.limits.tools ?? [])];
|
|
out.roles[role].web = (r.limits.tools ?? []).includes('web');
|
|
// Row 210 (#1707, design D5): resolveInstance leaves host.<id> keys out of the session's
|
|
// credentials. The bus child uses them, so they come back here from the business entry.
|
|
const hostKeys = Object.entries(business.roles[role].credentials ?? {}).filter(([kind]) => isHostKind(kind));
|
|
out.roles[role].credentials = { ...structuredClone(r.credentials ?? {}), ...structuredClone(Object.fromEntries(hostKeys)) };
|
|
}
|
|
return out;
|
|
}
|