allOf(requirement:)

Declaration

static func allOf(@OnDiskConstraintBuilder requirement: () -> [any OnDiskConstraint]) throws -> OnDiskCodeRequirement

Discussion

This operation will throw ConstraintError.duplicateKeys if more than one constraint of the same type is found in the same logical grouping. For example the following snippets will throw:

    let req1 = try OnDiskCodeRequirement.allOf {
        SigningIdentifier("com.apple.ls")
        SigningIdentifier("com.apple.ps")
    }
    let req2 = try OnDiskCodeRequirement.allOf {
           SigningIdentifier("com.apple.ls")
           anyOf {
               SigningIdentifier("com.apple.ps")
           }
    }
    let req3 = try OnDiskCodeRequirement.allOf {
        SigningIdentifier("com.apple.ls")
        allOf {
            ValidationCategory(.platform)
            SigningIdentifier("com.apple.ps")
        }
    }

The second requirement throws because a single constraint within anyOf provides no option and so it gets lifted to the higher logical group. Similarly, the third requirement throws because an allOf operation nested in an allOf operation has no logical effect, so all of the constraints in the nested operation get lifted into the higher level group. On the other hand the following snippet will not throw:

    let req4 = try OnDiskCodeRequirement.allOf {
        anyOf {
            SigningIdentifier("com.apple.ls")
            ValidationCategory(.platform)
        }
        anyOf {
            SigningIdentifier("com.apple.ps")
            ValidationCategory(.platform)
        }
    }

In this requirement, both anyOf operations provide a choice, so the two groups are considered separate.