DirXML Policy Simulator 1.1.0

DirXML Policy Simulator 1.1.0

A headless, agent-drivable test harness for NetIQ / OpenText Identity Manager (DirXML) channel policies. It runs the real IDM engine: assemble a driver's channel, step it stage by stage (or rule by rule), answer the policies' queries from an in-memory directory, and golden-test changes. A lot has landed since 1.0.0.

New since 1.0.0

• Two ways to supply driver config. A Designer driver export (export=…) or a Designer project on disk (project=<dir> + driver=<name>) — the latter needs no export and additionally brings the project's GCVs, ECMAScript resources, and eDirectory schema (which exports omit).
• Schema validation. With a schema available (project= or schema=…), input.xds/directory.xds are checked against the eDir schema — unknown class, misspelled/invalid attribute, or multiple values on a single-valued attribute.
• External actions are faked. do-invoke-rest-endpoint, do-send-email[-from-template], RBPM role/resource SOAP, do-start-workflow, XDAS, and SSO actions are faked by default — no live call, no hang; recorded as FAKED: … in the trace. For REST, supply a canned body (restResponse=… / rest-response.json) that downstream rules consume.
• Named passwords. Supplied per case as secret values (namedPassword.<name>=<value>), resolved through token-named-password.
• Entitlements confirmed op-driven — token-added-entitlement / if-entitlement work whenever the input op carries the DirXML-EntitlementRef change.
• Windows launcher (bin/sim.cmd) alongside bin/sim; shipped in the archive.

Core (since 1.0.0)

Real-engine execution of DirXML Script / XSLT / schema-mapping policies, per-stage and per-rule stepping, trace capture, an in-memory fake directory (with query-ex paging), driver-export chain assembly, ECMAScript (es:) and Java extension functions, trace mining (bin/sim extract), golden tests, the run/step/test/record/extract/doctor CLI, and a Claude Code skill (+ AGENTS.md).

Install (no build)

Download dirxml-simulator-1.1.0.zip, unzip, drop your nine NetIQ jars into lib/, and run bin/sim doctor (Windows: bin\sim.cmd doctor). The proprietary jars are not bundled — you supply them. Requires JDK 21. See docs/intro.md and docs/quickstart.md.

DirXML Policy Simulator 1.0.0

DirXML Policy Simulator 1.0.0 — a headless, agent-driven test harness for NetIQ / OpenText Identity Manager (DirXML) channel policies. It runs the real IDM engine: assemble a driver's channel from its export, step it stage by stage (or rule by rule), answer the policies' queries from an in-memory directory seeded from a trace, and golden-test changes.

What it does

• Real-engine execution of DirXML Script, XSLT, and schema-mapping policies — no eDirectory, no running driver.
• Per-stage and per-rule stepping with the document, queries/commands, and rule trace at each step.
• Driver-export aware — assembles the real subscriber/publisher chain in IDM policy-set order, with GCVs, the filter, and ECMAScript resources.
• Trace mining — bin/sim extract turns a production DSTrace log into a runnable case (real input event + directory data).
• ECMAScript (es:), XSLT, and Java extension functions execute; missing pieces are reported clearly.
• Golden tests, a CLI (run/step/test/record/extract/doctor), and a Claude Code skill (+ AGENTS.md) so an agent can drive it.

Install (no build)

Download dirxml-simulator-1.0.0.zip, unzip, drop your nine NetIQ jars into lib/ (see the README), and run bin/sim doctor. The proprietary jars are not bundled — you supply them.

Source builds with JDK 21 + Maven; tools/build-dist.sh reproduces the archive.