Arbiter/core
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

initial commit: @arbiter/core authorization engine with js-rigor hardening

Browse Source 
Zanzibar-style authorization graph engine (direct/chain/TTU/defeasible/
binary modes, condensed snapshots, value relations) with 39 rigor test
campaigns. Includes fixes for snapshot binary writer/reader format
mismatch (snapshot-of-snapshot corruption), possibility write-boundary
validation, empty-graph snapshot serialization, relation lookup cache
direction collision, config-redefinition cache invalidation, binary
threshold semantics, defeasible compiled routing, and comparator
reason whitelisting.
This commit is contained in:
John Dvorak
2026-07-31 13:44:06 -07:00
commit 717ae1031e
373 changed files with 654131 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/rules/chain-rule/helpers.js
+86
View File
@@ -0,0 +1,86 @@
import { Arbiter } from '../../../src/index.js';
Arbiter.DEBUG = false;
/**
* Shared test graph setup for ChainRule tests.
* Creates a comprehensive organizational hierarchy with users, groups, projects,
* departments, budgets, facilities, and access levels.
*/
export function setupChainRuleTestGraph() {
const arbiter = new Arbiter({ embeddingDimensions: 256 });
// Configure basic relation types
arbiter.setRelationConfig('member_of', { type: 'direct' });
arbiter.setRelationConfig('parent', { type: 'direct' });
arbiter.setRelationConfig('can_edit', { type: 'direct' });
arbiter.setRelationConfig('has_budget', { type: 'direct' });
arbiter.setRelationConfig('has_cost', { type: 'direct' });
arbiter.setRelationConfig('belongs_to', { type: 'direct' });
arbiter.setRelationConfig('manages', { type: 'direct' });
arbiter.setRelationConfig('located_in', { type: 'direct' });
arbiter.setRelationConfig('has_access_level', { type: 'direct' });
// Create organizational hierarchy
arbiter.addNode('user:alice', 'user');
arbiter.addNode('user:bob', 'user');
arbiter.addNode('user:charlie', 'user');
arbiter.addNode('user:diana', 'user');
arbiter.addNode('group:engineering', 'group');
arbiter.addNode('group:qa', 'group');
arbiter.addNode('group:management', 'group');
arbiter.addNode('project:web-app', 'project');
arbiter.addNode('project:mobile-app', 'project');
arbiter.addNode('project:ai-platform', 'project');
arbiter.addNode('department:tech', 'department');
arbiter.addNode('department:ops', 'department');
arbiter.addNode('budget:tech-2024', 'budget');
arbiter.addNode('budget:ops-2024', 'budget');
arbiter.addNode('facility:hq', 'facility');
arbiter.addNode('facility:remote', 'facility');
arbiter.addNode('access:level-3', 'access_level');
arbiter.addNode('access:level-5', 'access_level');
// Set up membership relationships
arbiter.addRelation('user:alice', 'member_of', 'group:engineering');
arbiter.addRelation('user:bob', 'member_of', 'group:qa');
arbiter.addRelation('user:charlie', 'member_of', 'group:management');
arbiter.addRelation('user:diana', 'member_of', 'group:engineering');
// Set up group ownership of projects
arbiter.addRelation('group:engineering', 'manages', 'project:web-app');
arbiter.addRelation('group:engineering', 'manages', 'project:ai-platform');
arbiter.addRelation('group:qa', 'manages', 'project:mobile-app');
// Set up project budgets with values
arbiter.addRelation('project:web-app', 'has_budget', 'budget:tech-2024', { value: 500000 });
arbiter.addRelation('project:ai-platform', 'has_budget', 'budget:tech-2024', { value: 1200000 });
arbiter.addRelation('project:mobile-app', 'has_budget', 'budget:ops-2024', { value: 300000 });
// Set up project costs
arbiter.addRelation('project:web-app', 'has_cost', 'budget:tech-2024', { value: 450000 });
arbiter.addRelation('project:ai-platform', 'has_cost', 'budget:tech-2024', { value: 1100000 });
arbiter.addRelation('project:mobile-app', 'has_cost', 'budget:ops-2024', { value: 280000 });
// Set up hierarchical relationships
arbiter.addRelation('group:engineering', 'belongs_to', 'department:tech');
arbiter.addRelation('group:qa', 'belongs_to', 'department:ops');
arbiter.addRelation('group:management', 'belongs_to', 'department:tech');
// Set up access levels
arbiter.addRelation('department:tech', 'has_access_level', 'access:level-5');
arbiter.addRelation('department:ops', 'has_access_level', 'access:level-3');
// Set up physical locations
arbiter.addRelation('user:alice', 'located_in', 'facility:hq');
arbiter.addRelation('user:bob', 'located_in', 'facility:remote');
arbiter.addRelation('user:charlie', 'located_in', 'facility:hq');
arbiter.addRelation('user:diana', 'located_in', 'facility:remote');
return arbiter;
}