bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

Bind domain access to registered node type

Browse source
This commit is contained in:
冰朔 2026-08-10 06:28:47 +08:00
commit 8807b99d98
15 changed files with 168 additions and 63 deletions
Download patch file Download diff file Expand all files Collapse all files

8
product-source/hololake-platform/src/lib/domainRuntimeContract.ts
View file

@ -55,6 +55,7 @@ export interface DomainSessionCapability {
domainId: string
expiresAt: number
nodeId: string
nodeType: DomainNodeType
scopes: string[]
}
@ -63,6 +64,7 @@ export interface DomainConnectionReceipt {
domainId: string
manifestDigest: string
nodeId: string
nodeType: DomainNodeType
receiptId: string
state: 'online'
}
@ -217,6 +219,9 @@ export function acceptDomainSession(
if (session.expiresAt <= now) {
throw new DomainContractError('domain_session_expired')
}
if (session.nodeType !== state.nodeType) {
throw new DomainContractError('domain_session_node_type_mismatch')
}
if (!session.scopes.includes(REQUIRED_ENTER_SCOPE)) {
throw new DomainContractError('domain_session_enter_scope_missing')
}
@ -238,6 +243,9 @@ export function acceptDomainConnectionReceipt(
if (receipt.nodeId !== state.session.nodeId) {
throw new DomainContractError('domain_connection_node_mismatch')
}
if (receipt.nodeType !== state.nodeType || receipt.nodeType !== state.session.nodeType) {
throw new DomainContractError('domain_connection_node_type_mismatch')
}
if (receipt.manifestDigest !== state.manifest.provenance.digest) {
throw new DomainContractError('domain_connection_manifest_mismatch')
}