@arcforges/api-client 1.0.0-ci.9.1 → 1.0.0-ci.92.1

package/dist/shapes/gen/PartReceipt.js

@@ -0,0 +1,290 @@
+export function isPartReceipt(value) { return check0(value); }
+/** The schema's declared UTF-8 document bound in bytes. */
+export const partReceiptJsonMaxBytes = 65536;
+/** Parses one strict PartReceipt document; refusal kinds match the C# codec. */
+export function tryParsePartReceiptJson(input) {
+    const parsed = strictJson(input, 65536);
+    if (!parsed.ok)
+        return parsed;
+    return isPartReceipt(parsed.value) ? { ok: true, value: parsed.value } : { ok: false, failure: "invalid" };
+}
+/** Parses one strict PartReceipt document or throws an error carrying the refusal kind. */
+export function parsePartReceiptJson(input) {
+    const result = tryParsePartReceiptJson(input);
+    if (!result.ok)
+        throw Object.assign(new Error(`PartReceipt JSON refused: ${result.failure}.`), { failure: result.failure });
+    return result.value;
+}
+/** Writes compact UTF-8 in schema property order and refuses output the schema rejects. */
+export function serializePartReceiptJson(value) {
+    const bytes = new TextEncoder().encode(JSON.stringify(orderPartReceipt(value)));
+    const result = tryParsePartReceiptJson(bytes);
+    if (!result.ok)
+        throw Object.assign(new Error(`PartReceipt JSON refused: ${result.failure}.`), { failure: result.failure });
+    return bytes;
+}
+function orderPartReceipt(value) {
+    const out = {};
+    out["partNumber"] = value["partNumber"];
+    out["size"] = value["size"];
+    out["sha256"] = value["sha256"];
+    out["etag"] = value["etag"];
+    return out;
+}
+function check0(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return false;
+    const object = value;
+    for (const key of Object.keys(object)) {
+        switch (key) {
+            case "partNumber":
+                if (!check1(object[key]))
+                    return false;
+                break;
+            case "size":
+                if (!check2(object[key]))
+                    return false;
+                break;
+            case "sha256":
+                if (!check3(object[key]))
+                    return false;
+                break;
+            case "etag":
+                if (!check4(object[key]))
+                    return false;
+                break;
+            default: return false;
+        }
+    }
+    if (!Object.prototype.hasOwnProperty.call(object, "partNumber"))
+        return false;
+    if (!Object.prototype.hasOwnProperty.call(object, "size"))
+        return false;
+    if (!Object.prototype.hasOwnProperty.call(object, "sha256"))
+        return false;
+    if (!Object.prototype.hasOwnProperty.call(object, "etag"))
+        return false;
+    return true;
+}
+function check1(value) {
+    if (typeof value !== 'number' || !Number.isSafeInteger(value))
+        return false;
+    if (value < 0)
+        return false;
+    if (value > 4294967295)
+        return false;
+    return true;
+}
+function check2(value) {
+    if (typeof value !== 'string' || !validText(value))
+        return false;
+    if ([...value].length > 20)
+        return false;
+    if ((new RegExp("^(0|[1-9][0-9]*)$", 'u')).exec(value)?.[0] !== value)
+        return false;
+    if (BigInt(value) > 18446744073709551615n)
+        return false;
+    return true;
+}
+function check3(value) {
+    if (typeof value !== 'string' || !validText(value))
+        return false;
+    if ((new RegExp("^[0-9a-f]{64}$", 'u')).exec(value)?.[0] !== value)
+        return false;
+    return true;
+}
+function check4(value) {
+    if (typeof value !== 'string' || !validText(value))
+        return false;
+    return true;
+}
+/** Strict UTF-8 JSON: no BOM, comments, trailing commas or duplicate properties; depth <= 32; integer lexemes only. */
+function strictJson(input, maxBytes) {
+    let text;
+    if (typeof input === "string") {
+        if (!validText(input))
+            return { ok: false, failure: "malformed" };
+        if (new TextEncoder().encode(input).byteLength > maxBytes)
+            return { ok: false, failure: "tooLarge" };
+        text = input;
+    }
+    else {
+        if (input.byteLength > maxBytes)
+            return { ok: false, failure: "tooLarge" };
+        try {
+            text = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(input);
+        }
+        catch {
+            return { ok: false, failure: "malformed" };
+        }
+    }
+    try {
+        return { ok: true, value: new StrictJsonReader(text).document() };
+    }
+    catch {
+        return { ok: false, failure: "malformed" };
+    }
+}
+class StrictJsonReader {
+    text;
+    index = 0;
+    constructor(text) {
+        this.text = text;
+    }
+    document() {
+        this.space();
+        const value = this.value(0);
+        this.space();
+        if (this.index !== this.text.length)
+            throw new SyntaxError("Trailing JSON content");
+        return value;
+    }
+    value(depth) {
+        switch (this.text[this.index]) {
+            case "{": return this.object(depth + 1);
+            case "[": return this.array(depth + 1);
+            case '"': return this.string();
+            case "t": return this.literal("true", true);
+            case "f": return this.literal("false", false);
+            case "n": return this.literal("null", null);
+            default: return this.number();
+        }
+    }
+    object(depth) {
+        if (depth > 32)
+            throw new SyntaxError("JSON depth exceeded");
+        this.index++;
+        const out = {};
+        const keys = new Set();
+        this.space();
+        if (this.text[this.index] === "}") {
+            this.index++;
+            return out;
+        }
+        for (;;) {
+            this.space();
+            if (this.text[this.index] !== '"')
+                throw new SyntaxError("Expected property name");
+            const key = this.string();
+            if (keys.has(key))
+                throw new SyntaxError("Duplicate JSON property");
+            keys.add(key);
+            this.space();
+            if (this.text[this.index++] !== ":")
+                throw new SyntaxError("Expected colon");
+            this.space();
+            // defineProperty keeps names such as __proto__ as ordinary own properties.
+            Object.defineProperty(out, key, { value: this.value(depth), enumerable: true, writable: true, configurable: true });
+            this.space();
+            const next = this.text[this.index++];
+            if (next === "}")
+                return out;
+            if (next !== ",")
+                throw new SyntaxError("Expected comma");
+        }
+    }
+    array(depth) {
+        if (depth > 32)
+            throw new SyntaxError("JSON depth exceeded");
+        this.index++;
+        const out = [];
+        this.space();
+        if (this.text[this.index] === "]") {
+            this.index++;
+            return out;
+        }
+        for (;;) {
+            this.space();
+            out.push(this.value(depth));
+            this.space();
+            const next = this.text[this.index++];
+            if (next === "]")
+                return out;
+            if (next !== ",")
+                throw new SyntaxError("Expected comma");
+        }
+    }
+    string() {
+        this.index++;
+        let out = "";
+        for (;;) {
+            const c = this.text[this.index++];
+            if (c === undefined)
+                throw new SyntaxError("Unterminated string");
+            if (c === '"')
+                break;
+            if (c < " ")
+                throw new SyntaxError("Unescaped control character");
+            if (c !== "\\") {
+                out += c;
+                continue;
+            }
+            const e = this.text[this.index++];
+            const simple = { '"': '"', "\\": "\\", "/": "/", b: "\b", f: "\f", n: "\n", r: "\r", t: "\t" };
+            if (e !== undefined && e in simple) {
+                out += simple[e];
+                continue;
+            }
+            if (e !== "u" || !/^[0-9a-fA-F]{4}$/.test(this.text.slice(this.index, this.index + 4)))
+                throw new SyntaxError("Invalid escape");
+            out += String.fromCharCode(parseInt(this.text.slice(this.index, this.index + 4), 16));
+            this.index += 4;
+        }
+        if (!validText(out))
+            throw new SyntaxError("Lone surrogate escape");
+        return out;
+    }
+    number() {
+        const match = /-?(?:0|[1-9][0-9]*)(\.[0-9]+)?([eE][+-]?[0-9]+)?/y;
+        match.lastIndex = this.index;
+        const found = match.exec(this.text);
+        if (found === null)
+            throw new SyntaxError("Invalid JSON value");
+        this.index = match.lastIndex;
+        // Selected schemas have no fractional numbers; fraction/exponent lexemes never satisfy an integer.
+        return found[1] !== undefined || found[2] !== undefined ? Number.NaN : Number(found[0]);
+    }
+    literal(word, value) {
+        if (this.text.slice(this.index, this.index + word.length) !== word)
+            throw new SyntaxError("Invalid JSON literal");
+        this.index += word.length;
+        return value;
+    }
+    space() {
+        while (this.text[this.index] === " " || this.text[this.index] === "\t" || this.text[this.index] === "\n" || this.text[this.index] === "\r")
+            this.index++;
+    }
+}
+function validText(value) {
+    for (const scalar of value) {
+        const point = scalar.codePointAt(0);
+        if (point >= 0xd800 && point <= 0xdfff)
+            return false;
+    }
+    return true;
+}
+function inventoryRules(value) {
+    const files = value.files;
+    const seen = new Set();
+    let previous;
+    let total = 0n;
+    for (const file of files) {
+        const path = file.path;
+        const folded = path.toUpperCase();
+        if (path.length === 0 || folded === 'INVENTORY.JSON' || folded === 'SIGNATURE.JSON' || seen.has(folded) || (previous !== undefined && previous >= path))
+            return false;
+        for (const segment of path.split('/')) {
+            if (!/^[A-Za-z0-9_.-]+$/.test(segment) || segment === '.' || segment === '..' || segment.endsWith('.') || /^(CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])(?:\.|$)/i.test(segment))
+                return false;
+        }
+        const size = BigInt(file.size);
+        if (size > 134217728n)
+            return false;
+        total += size;
+        if (total > 1073741824n)
+            return false;
+        seen.add(folded);
+        previous = path;
+    }
+    return files.some(file => file.path === 'manifest.json');
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arcforges/api-client",
-  "version": "1.0.0-ci.9.1",
+  "version": "1.0.0-ci.92.1",
   "description": "ArcForges public gRPC-Web client entry point; initial Hello World example.",
   "type": "module",
   "license": "Apache-2.0",
@@ -18,24 +18,32 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
-    }
+    },
+    "./build-identity": "./build-identity.json"
   },
   "files": [
-    "dist",
     "LICENSE",
     "NOTICE",
+    "README.md",
+    "build-identity.json",
+    "contracts.binpb",
+    "dist",
     "sbom.cdx.json",
-    "source.json",
-    "README.md"
+    "schemas",
+    "source.json"
   ],
   "dependencies": {
-    "@arcforges/proto": "1.0.0-ci.9.1",
-    "@bufbuild/protobuf": "2.14.1",
+    "@arcforges/proto": "1.0.0-ci.92.1",
+    "@bufbuild/protobuf": "2.15.0",
     "@connectrpc/connect": "2.2.0",
     "@connectrpc/connect-web": "2.2.0"
   },
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/"
+  },
+  "arcforges": {
+    "licenceBoundary": "Apache",
+    "contractAccess": "public"
   }
 }

package/sbom.cdx.json

@@ -5,10 +5,10 @@
   "metadata": {
     "component": {
       "type": "library",
-      "bom-ref": "pkg:npm/%40arcforges/api-client@1.0.0-ci.9.1",
+      "bom-ref": "pkg:npm/%40arcforges/api-client@1.0.0-ci.92.1",
       "name": "@arcforges/api-client",
-      "version": "1.0.0-ci.9.1",
-      "purl": "pkg:npm/%40arcforges/api-client@1.0.0-ci.9.1",
+      "version": "1.0.0-ci.92.1",
+      "purl": "pkg:npm/%40arcforges/api-client@1.0.0-ci.92.1",
       "licenses": [
         {
           "expression": "Apache-2.0"
@@ -19,10 +19,10 @@
   "components": [
     {
       "type": "library",
-      "bom-ref": "pkg:npm/%40arcforges/proto@1.0.0-ci.9.1",
+      "bom-ref": "pkg:npm/%40arcforges/proto@1.0.0-ci.92.1",
       "name": "@arcforges/proto",
-      "version": "1.0.0-ci.9.1",
-      "purl": "pkg:npm/%40arcforges/proto@1.0.0-ci.9.1",
+      "version": "1.0.0-ci.92.1",
+      "purl": "pkg:npm/%40arcforges/proto@1.0.0-ci.92.1",
       "licenses": [
         {
           "expression": "Apache-2.0"
@@ -31,10 +31,10 @@
     },
     {
       "type": "library",
-      "bom-ref": "pkg:npm/%40bufbuild/protobuf@2.14.1",
+      "bom-ref": "pkg:npm/%40bufbuild/protobuf@2.15.0",
       "name": "@bufbuild/protobuf",
-      "version": "2.14.1",
-      "purl": "pkg:npm/%40bufbuild/protobuf@2.14.1",
+      "version": "2.15.0",
+      "purl": "pkg:npm/%40bufbuild/protobuf@2.15.0",
       "licenses": [
         {
           "expression": "(Apache-2.0 AND BSD-3-Clause)"
@@ -68,33 +68,33 @@
   ],
   "dependencies": [
     {
-      "ref": "pkg:npm/%40bufbuild/protobuf@2.14.1",
+      "ref": "pkg:npm/%40bufbuild/protobuf@2.15.0",
       "dependsOn": []
     },
     {
-      "ref": "pkg:npm/%40arcforges/proto@1.0.0-ci.9.1",
+      "ref": "pkg:npm/%40arcforges/proto@1.0.0-ci.92.1",
       "dependsOn": [
-        "pkg:npm/%40bufbuild/protobuf@2.14.1"
+        "pkg:npm/%40bufbuild/protobuf@2.15.0"
       ]
     },
     {
       "ref": "pkg:npm/%40connectrpc/connect@2.2.0",
       "dependsOn": [
-        "pkg:npm/%40bufbuild/protobuf@2.14.1"
+        "pkg:npm/%40bufbuild/protobuf@2.15.0"
       ]
     },
     {
       "ref": "pkg:npm/%40connectrpc/connect-web@2.2.0",
       "dependsOn": [
-        "pkg:npm/%40bufbuild/protobuf@2.14.1",
+        "pkg:npm/%40bufbuild/protobuf@2.15.0",
         "pkg:npm/%40connectrpc/connect@2.2.0"
       ]
     },
     {
-      "ref": "pkg:npm/%40arcforges/api-client@1.0.0-ci.9.1",
+      "ref": "pkg:npm/%40arcforges/api-client@1.0.0-ci.92.1",
       "dependsOn": [
-        "pkg:npm/%40arcforges/proto@1.0.0-ci.9.1",
-        "pkg:npm/%40bufbuild/protobuf@2.14.1",
+        "pkg:npm/%40arcforges/proto@1.0.0-ci.92.1",
+        "pkg:npm/%40bufbuild/protobuf@2.15.0",
         "pkg:npm/%40connectrpc/connect@2.2.0",
         "pkg:npm/%40connectrpc/connect-web@2.2.0"
       ]

package/schemas/public/http/v1/inventory.schema.json

@@ -0,0 +1,49 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$comment": "SPDX-License-Identifier: Apache-2.0",
+  "title": "PackageInventory",
+  "type": "object",
+  "properties": {
+    "schemaVersion": {
+      "type": "string",
+      "const": "inventory.v1"
+    },
+    "files": {
+      "type": "array",
+      "maxItems": 10000,
+      "items": {
+        "$ref": "#/$defs/InventoryFile"
+      },
+      "minItems": 1
+    }
+  },
+  "required": ["schemaVersion", "files"],
+  "additionalProperties": false,
+  "$defs": {
+    "InventoryFile": {
+      "title": "InventoryFile",
+      "type": "object",
+      "properties": {
+        "path": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9_.-]+(/[A-Za-z0-9_.-]+)*$"
+        },
+        "size": {
+          "type": "string",
+          "pattern": "^(0|[1-9][0-9]*)$",
+          "maxLength": 20,
+          "x-arcforges-rules": ["uint64String"]
+        },
+        "sha256": {
+          "type": "string",
+          "pattern": "^[0-9a-f]{64}$"
+        }
+      },
+      "required": ["path", "size", "sha256"],
+      "additionalProperties": false
+    }
+  },
+  "x-arcforges-rules": ["inventoryPaths", "inventoryBounds"],
+  "x-arcforges-max-bytes": 4194304,
+  "x-arcforges-schema-version": "1"
+}

package/schemas/public/http/v1/schema.json

@@ -0,0 +1,30 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$comment": "SPDX-License-Identifier: Apache-2.0",
+  "title": "PartReceipt",
+  "type": "object",
+  "properties": {
+    "partNumber": {
+      "type": "integer",
+      "minimum": 0,
+      "maximum": 4294967295
+    },
+    "size": {
+      "type": "string",
+      "pattern": "^(0|[1-9][0-9]*)$",
+      "maxLength": 20,
+      "x-arcforges-rules": ["uint64String"]
+    },
+    "sha256": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{64}$"
+    },
+    "etag": {
+      "type": "string"
+    }
+  },
+  "required": ["partNumber", "size", "sha256", "etag"],
+  "additionalProperties": false,
+  "x-arcforges-max-bytes": 65536,
+  "x-arcforges-schema-version": "1"
+}

package/schemas/public/proto/arcforges/events/v1/events.proto

@@ -0,0 +1,14 @@
+// SPDX-License-Identifier: Apache-2.0
+syntax = "proto3";
+
+package arcforges.events.v1;
+
+option csharp_namespace = "ArcForges.Contracts.Events.V1";
+option java_package = "io.github.arcforges.contracts.events.v1";
+option java_multiple_files = true;
+option java_outer_classname = "EventsProto";
+
+// The complete entitlement.changed hint payload; not the full Event envelope.
+message EntitlementChanged {
+  optional int64 entitlement_version = 1 [json_name = "entitlementVersion"];
+}