@defai.digital/ax-cli 3.8.9 → 3.8.11

package/packages/schemas/dist/public/core/id-types.d.ts

@@ -0,0 +1,286 @@
+/**
+ * ID Brand Types for @ax-cli/schemas
+ *
+ * This file contains all ID brand type factories using the createBrandFactory utility.
+ * Each ID type is validated and branded to prevent mixing different ID types at compile time.
+ *
+ * SECURITY: All IDs MUST be validated at system boundaries using the provided factories.
+ *
+ * @module id-types
+ */
+import { z } from 'zod';
+import { type Brand } from './brand-types.js';
+/**
+ * API Response ID - Unique identifier for API responses
+ *
+ * @security MUST validate at API boundaries
+ * @example
+ * ```typescript
+ * const result = ApiResponseId.schema.safeParse(userInput);
+ * if (result.success) {
+ *   const id = result.data; // Validated and branded
+ * }
+ * ```
+ */
+export declare const ApiResponseId: {
+    schema: {
+        parse: (input: unknown) => Brand<string, "ApiResponseId">;
+        safeParse: (input: unknown) => {
+            success: true;
+            data: Brand<string, "ApiResponseId">;
+        } | {
+            success: false;
+            error: unknown;
+        };
+    };
+    parse: (input: unknown) => Brand<string, "ApiResponseId">;
+    is: (value: unknown) => value is Brand<string, "ApiResponseId">;
+    brandName: "ApiResponseId";
+};
+export type ApiResponseId = Brand<string, 'ApiResponseId'>;
+/**
+ * Tool Call ID - Unique identifier for tool calls in API responses
+ *
+ * @security MUST validate at API boundaries
+ */
+export declare const ToolCallId: {
+    schema: {
+        parse: (input: unknown) => Brand<string, "ToolCallId">;
+        safeParse: (input: unknown) => {
+            success: true;
+            data: Brand<string, "ToolCallId">;
+        } | {
+            success: false;
+            error: unknown;
+        };
+    };
+    parse: (input: unknown) => Brand<string, "ToolCallId">;
+    is: (value: unknown) => value is Brand<string, "ToolCallId">;
+    brandName: "ToolCallId";
+};
+export type ToolCallId = Brand<string, 'ToolCallId'>;
+/**
+ * ToolCallIdSchema - Zod schema for ToolCallId that can be used in z.object()
+ * This transforms strings to branded ToolCallId types
+ */
+export declare const ToolCallIdSchema: z.ZodEffects<z.ZodString, Brand<string, "ToolCallId">, string>;
+/**
+ * Model ID - Identifier for AI models
+ *
+ * @security MUST validate at configuration boundaries
+ * @example
+ * ```typescript
+ * const modelId = ModelId.parse('glm-4.6'); // Validates and brands
+ * ```
+ */
+export declare const ModelId: {
+    schema: {
+        parse: (input: unknown) => Brand<string, "ModelId">;
+        safeParse: (input: unknown) => {
+            success: true;
+            data: Brand<string, "ModelId">;
+        } | {
+            success: false;
+            error: unknown;
+        };
+    };
+    parse: (input: unknown) => Brand<string, "ModelId">;
+    is: (value: unknown) => value is Brand<string, "ModelId">;
+    brandName: "ModelId";
+};
+export type ModelId = Brand<string, 'ModelId'>;
+/**
+ * ModelIdSchema - Zod schema for ModelId that can be used in z.object()
+ * This transforms strings to branded ModelId types
+ */
+export declare const ModelIdSchema: z.ZodEffects<z.ZodString, Brand<string, "ModelId">, string>;
+/**
+ * Tenant ID - Unique identifier for tenants (multi-tenancy support)
+ *
+ * @security MUST validate at authentication boundaries
+ */
+export declare const TenantId: {
+    schema: {
+        parse: (input: unknown) => Brand<string, "TenantId">;
+        safeParse: (input: unknown) => {
+            success: true;
+            data: Brand<string, "TenantId">;
+        } | {
+            success: false;
+            error: unknown;
+        };
+    };
+    parse: (input: unknown) => Brand<string, "TenantId">;
+    is: (value: unknown) => value is Brand<string, "TenantId">;
+    brandName: "TenantId";
+};
+export type TenantId = Brand<string, 'TenantId'>;
+/**
+ * API Key ID - Unique identifier for API keys
+ *
+ * @security MUST validate at authentication boundaries
+ * @security NEVER log API key values - only IDs
+ */
+export declare const ApiKeyId: {
+    schema: {
+        parse: (input: unknown) => Brand<string, "ApiKeyId">;
+        safeParse: (input: unknown) => {
+            success: true;
+            data: Brand<string, "ApiKeyId">;
+        } | {
+            success: false;
+            error: unknown;
+        };
+    };
+    parse: (input: unknown) => Brand<string, "ApiKeyId">;
+    is: (value: unknown) => value is Brand<string, "ApiKeyId">;
+    brandName: "ApiKeyId";
+};
+export type ApiKeyId = Brand<string, 'ApiKeyId'>;
+/**
+ * MCP Server ID - Unique identifier for Model Context Protocol servers
+ *
+ * @security MUST validate at MCP configuration boundaries
+ */
+export declare const MCPServerId: {
+    schema: {
+        parse: (input: unknown) => Brand<string, "MCPServerId">;
+        safeParse: (input: unknown) => {
+            success: true;
+            data: Brand<string, "MCPServerId">;
+        } | {
+            success: false;
+            error: unknown;
+        };
+    };
+    parse: (input: unknown) => Brand<string, "MCPServerId">;
+    is: (value: unknown) => value is Brand<string, "MCPServerId">;
+    brandName: "MCPServerId";
+};
+export type MCPServerId = Brand<string, 'MCPServerId'>;
+/**
+ * MCPServerIdSchema - Zod schema for MCPServerId that can be used in z.object()
+ * This transforms strings to branded MCPServerId types
+ */
+export declare const MCPServerIdSchema: z.ZodEffects<z.ZodString, Brand<string, "MCPServerId">, string>;
+/**
+ * Usage Record ID - Unique identifier for usage tracking records
+ *
+ * @security MUST validate at billing/usage boundaries
+ */
+export declare const UsageRecordId: {
+    schema: {
+        parse: (input: unknown) => Brand<string, "UsageRecordId">;
+        safeParse: (input: unknown) => {
+            success: true;
+            data: Brand<string, "UsageRecordId">;
+        } | {
+            success: false;
+            error: unknown;
+        };
+    };
+    parse: (input: unknown) => Brand<string, "UsageRecordId">;
+    is: (value: unknown) => value is Brand<string, "UsageRecordId">;
+    brandName: "UsageRecordId";
+};
+export type UsageRecordId = Brand<string, 'UsageRecordId'>;
+/**
+ * Plan ID - Unique identifier for subscription/usage plans
+ *
+ * @security MUST validate at billing boundaries
+ */
+export declare const PlanId: {
+    schema: {
+        parse: (input: unknown) => Brand<string, "PlanId">;
+        safeParse: (input: unknown) => {
+            success: true;
+            data: Brand<string, "PlanId">;
+        } | {
+            success: false;
+            error: unknown;
+        };
+    };
+    parse: (input: unknown) => Brand<string, "PlanId">;
+    is: (value: unknown) => value is Brand<string, "PlanId">;
+    brandName: "PlanId";
+};
+export type PlanId = Brand<string, 'PlanId'>;
+/**
+ * Session ID - Unique identifier for user sessions
+ *
+ * @security MUST validate at session management boundaries
+ * @security CRITICAL: Session IDs should be cryptographically random
+ */
+export declare const SessionId: {
+    schema: {
+        parse: (input: unknown) => Brand<string, "SessionId">;
+        safeParse: (input: unknown) => {
+            success: true;
+            data: Brand<string, "SessionId">;
+        } | {
+            success: false;
+            error: unknown;
+        };
+    };
+    parse: (input: unknown) => Brand<string, "SessionId">;
+    is: (value: unknown) => value is Brand<string, "SessionId">;
+    brandName: "SessionId";
+};
+export type SessionId = Brand<string, 'SessionId'>;
+/**
+ * Request ID - Unique identifier for tracking requests
+ *
+ * Used for distributed tracing and logging correlation
+ */
+export declare const RequestId: {
+    schema: {
+        parse: (input: unknown) => Brand<string, "RequestId">;
+        safeParse: (input: unknown) => {
+            success: true;
+            data: Brand<string, "RequestId">;
+        } | {
+            success: false;
+            error: unknown;
+        };
+    };
+    parse: (input: unknown) => Brand<string, "RequestId">;
+    is: (value: unknown) => value is Brand<string, "RequestId">;
+    brandName: "RequestId";
+};
+export type RequestId = Brand<string, 'RequestId'>;
+/**
+ * COMPILE-TIME SAFETY EXAMPLES
+ *
+ * The following examples demonstrate how brand types prevent ID mixing:
+ *
+ * ```typescript
+ * function updateUsage(tenantId: TenantId, apiKeyId: ApiKeyId) {
+ *   // Implementation
+ * }
+ *
+ * const tenant = TenantId.parse('550e8400-e29b-41d4-a716-446655440000');
+ * const apiKey = ApiKeyId.parse('660f9511-f3ac-52e5-b827-557766551111');
+ *
+ * updateUsage(tenant, apiKey);        // ✅ Correct
+ * updateUsage(apiKey, tenant);        // ❌ Compile error!
+ * updateUsage('raw-string', apiKey);  // ❌ Compile error!
+ * ```
+ *
+ * VALIDATION AT BOUNDARIES
+ *
+ * ```typescript
+ * // API endpoint
+ * app.post('/api/usage', (req, res) => {
+ *   const tenantResult = TenantId.schema.safeParse(req.body.tenantId);
+ *   const apiKeyResult = ApiKeyId.schema.safeParse(req.headers['x-api-key-id']);
+ *
+ *   if (!tenantResult.success || !apiKeyResult.success) {
+ *     return res.status(400).json({ error: 'Invalid IDs' });
+ *   }
+ *
+ *   // Now safe to use - validated AND branded
+ *   updateUsage(tenantResult.data, apiKeyResult.data);
+ * });
+ * ```
+ */
+//# sourceMappingURL=id-types.d.ts.map

package/packages/schemas/dist/public/core/id-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"id-types.d.ts","sourceRoot":"","sources":["../../../src/public/core/id-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAA6B,KAAK,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEzE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;CAGzB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAE3D;;;;GAIG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;CAGtB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAErD;;;GAGG;AACH,eAAO,MAAM,gBAAgB,gEAAyE,CAAC;AAEvG;;;;;;;;GAQG;AACH,eAAO,MAAM,OAAO;;;;;;;;;;;;;;CAGnB,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AAE/C;;;GAGG;AACH,eAAO,MAAM,aAAa,6DAAsE,CAAC;AAEjG;;;;GAIG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAEjD;;;;;GAKG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;CAGpB,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAEjD;;;;GAIG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;CAGvB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,iBAAiB,iEAA0E,CAAC;AAEzG;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;CAGzB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAE3D;;;;GAIG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;CAGlB,CAAC;AAEF,MAAM,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;CAGrB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAEnD;;;;GAIG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;CAGrB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG"}

package/packages/schemas/dist/public/core/id-types.js

@@ -0,0 +1,136 @@
+/**
+ * ID Brand Types for @ax-cli/schemas
+ *
+ * This file contains all ID brand type factories using the createBrandFactory utility.
+ * Each ID type is validated and branded to prevent mixing different ID types at compile time.
+ *
+ * SECURITY: All IDs MUST be validated at system boundaries using the provided factories.
+ *
+ * @module id-types
+ */
+import { z } from 'zod';
+import { createBrandFactory, brand } from './brand-types.js';
+/**
+ * API Response ID - Unique identifier for API responses
+ *
+ * @security MUST validate at API boundaries
+ * @example
+ * ```typescript
+ * const result = ApiResponseId.schema.safeParse(userInput);
+ * if (result.success) {
+ *   const id = result.data; // Validated and branded
+ * }
+ * ```
+ */
+export const ApiResponseId = createBrandFactory(z.string().uuid(), 'ApiResponseId');
+/**
+ * Tool Call ID - Unique identifier for tool calls in API responses
+ *
+ * @security MUST validate at API boundaries
+ */
+export const ToolCallId = createBrandFactory(z.string().min(1), 'ToolCallId');
+/**
+ * ToolCallIdSchema - Zod schema for ToolCallId that can be used in z.object()
+ * This transforms strings to branded ToolCallId types
+ */
+export const ToolCallIdSchema = z.string().min(1).transform((val) => brand(val));
+/**
+ * Model ID - Identifier for AI models
+ *
+ * @security MUST validate at configuration boundaries
+ * @example
+ * ```typescript
+ * const modelId = ModelId.parse('glm-4.6'); // Validates and brands
+ * ```
+ */
+export const ModelId = createBrandFactory(z.string().min(1), 'ModelId');
+/**
+ * ModelIdSchema - Zod schema for ModelId that can be used in z.object()
+ * This transforms strings to branded ModelId types
+ */
+export const ModelIdSchema = z.string().min(1).transform((val) => brand(val));
+/**
+ * Tenant ID - Unique identifier for tenants (multi-tenancy support)
+ *
+ * @security MUST validate at authentication boundaries
+ */
+export const TenantId = createBrandFactory(z.string().uuid(), 'TenantId');
+/**
+ * API Key ID - Unique identifier for API keys
+ *
+ * @security MUST validate at authentication boundaries
+ * @security NEVER log API key values - only IDs
+ */
+export const ApiKeyId = createBrandFactory(z.string().uuid(), 'ApiKeyId');
+/**
+ * MCP Server ID - Unique identifier for Model Context Protocol servers
+ *
+ * @security MUST validate at MCP configuration boundaries
+ */
+export const MCPServerId = createBrandFactory(z.string().min(1), 'MCPServerId');
+/**
+ * MCPServerIdSchema - Zod schema for MCPServerId that can be used in z.object()
+ * This transforms strings to branded MCPServerId types
+ */
+export const MCPServerIdSchema = z.string().min(1).transform((val) => brand(val));
+/**
+ * Usage Record ID - Unique identifier for usage tracking records
+ *
+ * @security MUST validate at billing/usage boundaries
+ */
+export const UsageRecordId = createBrandFactory(z.string().uuid(), 'UsageRecordId');
+/**
+ * Plan ID - Unique identifier for subscription/usage plans
+ *
+ * @security MUST validate at billing boundaries
+ */
+export const PlanId = createBrandFactory(z.string().min(1), 'PlanId');
+/**
+ * Session ID - Unique identifier for user sessions
+ *
+ * @security MUST validate at session management boundaries
+ * @security CRITICAL: Session IDs should be cryptographically random
+ */
+export const SessionId = createBrandFactory(z.string().uuid(), 'SessionId');
+/**
+ * Request ID - Unique identifier for tracking requests
+ *
+ * Used for distributed tracing and logging correlation
+ */
+export const RequestId = createBrandFactory(z.string().uuid(), 'RequestId');
+/**
+ * COMPILE-TIME SAFETY EXAMPLES
+ *
+ * The following examples demonstrate how brand types prevent ID mixing:
+ *
+ * ```typescript
+ * function updateUsage(tenantId: TenantId, apiKeyId: ApiKeyId) {
+ *   // Implementation
+ * }
+ *
+ * const tenant = TenantId.parse('550e8400-e29b-41d4-a716-446655440000');
+ * const apiKey = ApiKeyId.parse('660f9511-f3ac-52e5-b827-557766551111');
+ *
+ * updateUsage(tenant, apiKey);        // ✅ Correct
+ * updateUsage(apiKey, tenant);        // ❌ Compile error!
+ * updateUsage('raw-string', apiKey);  // ❌ Compile error!
+ * ```
+ *
+ * VALIDATION AT BOUNDARIES
+ *
+ * ```typescript
+ * // API endpoint
+ * app.post('/api/usage', (req, res) => {
+ *   const tenantResult = TenantId.schema.safeParse(req.body.tenantId);
+ *   const apiKeyResult = ApiKeyId.schema.safeParse(req.headers['x-api-key-id']);
+ *
+ *   if (!tenantResult.success || !apiKeyResult.success) {
+ *     return res.status(400).json({ error: 'Invalid IDs' });
+ *   }
+ *
+ *   // Now safe to use - validated AND branded
+ *   updateUsage(tenantResult.data, apiKeyResult.data);
+ * });
+ * ```
+ */
+//# sourceMappingURL=id-types.js.map

package/packages/schemas/dist/public/core/id-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"id-types.js","sourceRoot":"","sources":["../../../src/public/core/id-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAc,MAAM,kBAAkB,CAAC;AAEzE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,kBAAkB,CAC7C,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EACjB,eAAe,CAChB,CAAC;AAIF;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,kBAAkB,CAC1C,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EACjB,YAAY,CACb,CAAC;AAIF;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAuB,GAAG,CAAC,CAAC,CAAC;AAEvG;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,kBAAkB,CACvC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EACjB,SAAS,CACV,CAAC;AAIF;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAoB,GAAG,CAAC,CAAC,CAAC;AAEjG;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,kBAAkB,CACxC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EACjB,UAAU,CACX,CAAC;AAIF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,kBAAkB,CACxC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EACjB,UAAU,CACX,CAAC;AAIF;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAC3C,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EACjB,aAAa,CACd,CAAC;AAIF;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAwB,GAAG,CAAC,CAAC,CAAC;AAEzG;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,kBAAkB,CAC7C,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EACjB,eAAe,CAChB,CAAC;AAIF;;;;GAIG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,kBAAkB,CACtC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EACjB,QAAQ,CACT,CAAC;AAIF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,kBAAkB,CACzC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EACjB,WAAW,CACZ,CAAC;AAIF;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,kBAAkB,CACzC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EACjB,WAAW,CACZ,CAAC;AAIF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG"}