@disclosureos/schema 2.0.0-beta.5 → 2.0.0-beta.6

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 2.0.0-beta.6
+
+### Patch Changes
+
+- Use patched Zod 4.6.6 for validation, resolving GHSA-mrhx-c7xc-m3w5 without requiring a consumer dependency override. Preserve published schema identities and verify existing documents and package consumers against the patched runtime.
+- Updated dependencies
+  - @disclosureos/records@2.0.0-beta.6
+  - @disclosureos/observables@2.0.0-beta.6
+  - @disclosureos/origins@2.0.0-beta.6
+  - @disclosureos/instruments@2.0.0-beta.6
+
 ## 2.0.0-beta.5
 
 ### Minor Changes

package/dist/experimental/v2/index.d.ts

@@ -6380,7 +6380,7 @@ declare function claimReviewEvaluationJsonSchema(): {
     $vocabulary?: Record<string, boolean>;
     $comment?: string;
     $defs?: Record<string, z.core.JSONSchema.JSONSchema>;
-    type?: "object" | "array" | "string" | "number" | "boolean" | "null" | "integer";
+    type?: z.core.JSONSchema.SchemaType | z.core.JSONSchema.SchemaType[];
     additionalItems?: z.core.JSONSchema._JSONSchema;
     unevaluatedItems?: z.core.JSONSchema._JSONSchema;
     prefixItems?: z.core.JSONSchema._JSONSchema[];
@@ -6463,7 +6463,7 @@ declare function claimReviewReceiptJsonSchema(): {
     $vocabulary?: Record<string, boolean>;
     $comment?: string;
     $defs?: Record<string, z.core.JSONSchema.JSONSchema>;
-    type?: "object" | "array" | "string" | "number" | "boolean" | "null" | "integer";
+    type?: z.core.JSONSchema.SchemaType | z.core.JSONSchema.SchemaType[];
     additionalItems?: z.core.JSONSchema._JSONSchema;
     unevaluatedItems?: z.core.JSONSchema._JSONSchema;
     prefixItems?: z.core.JSONSchema._JSONSchema[];

package/dist/experimental/v2/index.js

@@ -1,5 +1,6 @@
 import { OBSERVATION_CLAIM_HISTORY_SCHEMA_ID, CASE_CLAIM_HISTORY_V02_SCHEMA_ID, parseExperimentalClaimHistory, parseObservationClaimHistory, compareUtcInstants, parseContextClaimHistory, parseObservationContext, parseExperimentalObservation, caseProvenances, parseCaseRecordV02, caseSnapshotKey, parseCaseClaimHistoryV02, parseCaseLinks, parseCaseRecord, parseResearchEntities, parseArchivalEntities, parseMaterialEntities, parseLaboratoryEntities, parseCaseClaimHistory, contextAssertions, parseResearchClaimHistory, researchEntityAssertions, parseArchivalClaimHistory, parseLaboratoryClaimHistory, parseVocabularyBindings, parseVocabularyCatalog, VOCABULARY_CATALOG_SCHEMA_ID, archivalArtifactReferences, researchEntityContextReferences, CASE_CLAIM_HISTORY_SCHEMA_ID, LABORATORY_CLAIM_HISTORY_SCHEMA_ID, ARCHIVAL_CLAIM_HISTORY_SCHEMA_ID, RESEARCH_CLAIM_HISTORY_SCHEMA_ID, CONTEXT_CLAIM_HISTORY_SCHEMA_ID, EXPERIMENTAL_CLAIM_HISTORY_SCHEMA_ID } from '@disclosureos/records/experimental/v2';
 export { VOCABULARY_BINDINGS_SCHEMA_ID, VOCABULARY_CATALOG_SCHEMA_ID, VOCABULARY_TERM_REFERENCE_SCHEMA_ID, VocabularyBindingSchema, VocabularyBindingsSchema, VocabularyCatalogSchema, VocabularyCatalogTermSchema, VocabularyTermReferenceSchema, parseVocabularyBindings, parseVocabularyCatalog, vocabularyBindingsJsonSchema, vocabularyCatalogJsonSchema, vocabularyTermReferenceJsonSchema } from '@disclosureos/records/experimental/v2';
+import { preservePublishedSchema } from '@disclosureos/records/shared';
 import { z } from 'zod';
 import { parseAcquisitionContext } from '@disclosureos/instruments/experimental/v2';
 
@@ -218,7 +219,7 @@ var AcquisitionBindingsSchema = z.strictObject({
   extensions: z.record(z.string().regex(/^[a-z][a-z0-9_-]*(?:\.[a-z0-9_-]+)+(?![\s\S])/), z.json()).optional()
 });
 function acquisitionBindingsJsonSchema() {
-  return { ...z.toJSONSchema(AcquisitionBindingsSchema, { target: "draft-2020-12" }), $id: ACQUISITION_BINDINGS_SCHEMA_ID };
+  return { ...preservePublishedSchema(z.toJSONSchema(AcquisitionBindingsSchema, { target: "draft-2020-12" })), $id: ACQUISITION_BINDINGS_SCHEMA_ID };
 }
 var ACQUISITION_BINDINGS_PROFILE = Object.freeze({
   id: "urn:disclosureos:experimental:profile:acquisition-bindings",
@@ -425,7 +426,7 @@ var MeasurementBindingsSchema = z.strictObject({
 });
 function measurementBindingsJsonSchema() {
   return {
-    ...z.toJSONSchema(MeasurementBindingsSchema, { target: "draft-2020-12" }),
+    ...preservePublishedSchema(z.toJSONSchema(MeasurementBindingsSchema, { target: "draft-2020-12" })),
     $id: MEASUREMENT_BINDINGS_SCHEMA_ID
   };
 }
@@ -767,9 +768,9 @@ var InstrumentResearchReviewSchema = z.strictObject({
 });
 function instrumentResearchReviewJsonSchema() {
   return {
-    ...z.toJSONSchema(InstrumentResearchReviewSchema, {
+    ...preservePublishedSchema(z.toJSONSchema(InstrumentResearchReviewSchema, {
       target: "draft-2020-12"
-    }),
+    })),
     $id: INSTRUMENT_RESEARCH_REVIEW_SCHEMA_ID
   };
 }
@@ -1171,7 +1172,7 @@ var ReproductionPacketSchema = z.strictObject({
 });
 function reproductionPacketJsonSchema() {
   return {
-    ...z.toJSONSchema(ReproductionPacketSchema, { target: "draft-2020-12" }),
+    ...preservePublishedSchema(z.toJSONSchema(ReproductionPacketSchema, { target: "draft-2020-12" })),
     $id: REPRODUCTION_PACKET_SCHEMA_ID
   };
 }
@@ -1442,7 +1443,7 @@ var DatasetReleaseSchema = z.strictObject({
 });
 function datasetReleaseJsonSchema() {
   return {
-    ...z.toJSONSchema(DatasetReleaseSchema, { target: "draft-2020-12" }),
+    ...preservePublishedSchema(z.toJSONSchema(DatasetReleaseSchema, { target: "draft-2020-12" })),
     $id: DATASET_RELEASE_SCHEMA_ID
   };
 }
@@ -1820,7 +1821,7 @@ var SourceIntakeSchema = z.strictObject({
 });
 function sourceIntakeJsonSchema() {
   return {
-    ...z.toJSONSchema(SourceIntakeSchema, { target: "draft-2020-12" }),
+    ...preservePublishedSchema(z.toJSONSchema(SourceIntakeSchema, { target: "draft-2020-12" })),
     $id: SOURCE_INTAKE_SCHEMA_ID
   };
 }
@@ -2456,7 +2457,7 @@ var ResearchEvaluationSchema = z.strictObject({
 });
 function researchEvaluationJsonSchema() {
   return {
-    ...z.toJSONSchema(ResearchEvaluationSchema, { target: "draft-2020-12" }),
+    ...preservePublishedSchema(z.toJSONSchema(ResearchEvaluationSchema, { target: "draft-2020-12" })),
     $id: RESEARCH_EVALUATION_SCHEMA_ID
   };
 }
@@ -2762,9 +2763,9 @@ var ReleasedDocumentSelectionSchema = z.strictObject({
 });
 function releasedDocumentSelectionJsonSchema() {
   return {
-    ...z.toJSONSchema(ReleasedDocumentSelectionSchema, {
+    ...preservePublishedSchema(z.toJSONSchema(ReleasedDocumentSelectionSchema, {
       target: "draft-2020-12"
-    }),
+    })),
     $id: RELEASED_DOCUMENT_SELECTION_SCHEMA_ID
   };
 }
@@ -3184,9 +3185,9 @@ var HistoricalTestimonySelectionSchema = z.strictObject({
 });
 function historicalTestimonySelectionJsonSchema() {
   return {
-    ...z.toJSONSchema(HistoricalTestimonySelectionSchema, {
+    ...preservePublishedSchema(z.toJSONSchema(HistoricalTestimonySelectionSchema, {
       target: "draft-2020-12"
-    }),
+    })),
     $id: HISTORICAL_TESTIMONY_SELECTION_SCHEMA_ID
   };
 }
@@ -3626,9 +3627,9 @@ var PhysicalSampleSelectionSchema = z.strictObject({
 });
 function physicalSampleSelectionJsonSchema() {
   return {
-    ...z.toJSONSchema(PhysicalSampleSelectionSchema, {
+    ...preservePublishedSchema(z.toJSONSchema(PhysicalSampleSelectionSchema, {
       target: "draft-2020-12"
-    }),
+    })),
     $id: PHYSICAL_SAMPLE_SELECTION_SCHEMA_ID
   };
 }
@@ -4108,9 +4109,9 @@ var ProfileEvaluationSchema = z.strictObject({
 });
 function profileEvaluationJsonSchema() {
   return {
-    ...z.toJSONSchema(ProfileEvaluationSchema, {
+    ...preservePublishedSchema(z.toJSONSchema(ProfileEvaluationSchema, {
       target: "draft-2020-12"
-    }),
+    })),
     $id: PROFILE_EVALUATION_SCHEMA_ID
   };
 }
@@ -4401,7 +4402,7 @@ var ProfilePreparationSchema = z.strictObject({
 });
 function profilePreparationJsonSchema() {
   return {
-    ...z.toJSONSchema(ProfilePreparationSchema, { target: "draft-2020-12" }),
+    ...preservePublishedSchema(z.toJSONSchema(ProfilePreparationSchema, { target: "draft-2020-12" })),
     $id: PROFILE_PREPARATION_SCHEMA_ID
   };
 }
@@ -4436,7 +4437,7 @@ var MigrationReviewSchema = z.strictObject({
 });
 function migrationReviewJsonSchema() {
   return {
-    ...z.toJSONSchema(MigrationReviewSchema, { target: "draft-2020-12" }),
+    ...preservePublishedSchema(z.toJSONSchema(MigrationReviewSchema, { target: "draft-2020-12" })),
     $id: MIGRATION_REVIEW_SCHEMA_ID
   };
 }
@@ -4469,7 +4470,7 @@ var MigrationResolutionSchema = z.strictObject({
 });
 function migrationResolutionJsonSchema() {
   return {
-    ...z.toJSONSchema(MigrationResolutionSchema, { target: "draft-2020-12" }),
+    ...preservePublishedSchema(z.toJSONSchema(MigrationResolutionSchema, { target: "draft-2020-12" })),
     $id: MIGRATION_RESOLUTION_SCHEMA_ID
   };
 }
@@ -4498,7 +4499,7 @@ var MigrationLegacyScoresSchema = z.strictObject({
 });
 function migrationLegacyScoresJsonSchema() {
   return {
-    ...z.toJSONSchema(MigrationLegacyScoresSchema, { target: "draft-2020-12" }),
+    ...preservePublishedSchema(z.toJSONSchema(MigrationLegacyScoresSchema, { target: "draft-2020-12" })),
     $id: MIGRATION_LEGACY_SCORES_SCHEMA_ID
   };
 }
@@ -4537,9 +4538,9 @@ var MigrationCompatibilitySchema = z.strictObject({
 });
 function migrationCompatibilityJsonSchema() {
   return {
-    ...z.toJSONSchema(MigrationCompatibilitySchema, {
+    ...preservePublishedSchema(z.toJSONSchema(MigrationCompatibilitySchema, {
       target: "draft-2020-12"
-    }),
+    })),
     $id: MIGRATION_COMPATIBILITY_SCHEMA_ID
   };
 }
@@ -6369,7 +6370,7 @@ var CasePresentationSchema = z.strictObject({
 });
 function casePresentationJsonSchema() {
   return {
-    ...z.toJSONSchema(CasePresentationSchema, { target: "draft-2020-12", reused: "ref" }),
+    ...preservePublishedSchema(z.toJSONSchema(CasePresentationSchema, { target: "draft-2020-12", reused: "ref" })),
     $id: CASE_PRESENTATION_SCHEMA_ID
   };
 }
@@ -6715,10 +6716,10 @@ var ContextCasePresentationSchema = z.strictObject({
 });
 function contextCasePresentationJsonSchema() {
   return {
-    ...z.toJSONSchema(ContextCasePresentationSchema, {
+    ...preservePublishedSchema(z.toJSONSchema(ContextCasePresentationSchema, {
       target: "draft-2020-12",
       reused: "ref"
-    }),
+    })),
     $id: CONTEXT_CASE_PRESENTATION_SCHEMA_ID
   };
 }
@@ -7124,10 +7125,10 @@ var TestimonyCasePresentationSchema = z.strictObject({
 });
 function testimonyCasePresentationJsonSchema() {
   return {
-    ...z.toJSONSchema(TestimonyCasePresentationSchema, {
+    ...preservePublishedSchema(z.toJSONSchema(TestimonyCasePresentationSchema, {
       target: "draft-2020-12",
       reused: "ref"
-    }),
+    })),
     $id: TESTIMONY_CASE_PRESENTATION_SCHEMA_ID
   };
 }
@@ -7575,10 +7576,10 @@ var ArchivalCasePresentationSchema = z.strictObject({
 });
 function archivalCasePresentationJsonSchema() {
   return {
-    ...z.toJSONSchema(ArchivalCasePresentationSchema, {
+    ...preservePublishedSchema(z.toJSONSchema(ArchivalCasePresentationSchema, {
       target: "draft-2020-12",
       reused: "ref"
-    }),
+    })),
     $id: ARCHIVAL_CASE_PRESENTATION_SCHEMA_ID
   };
 }
@@ -8096,10 +8097,10 @@ var MaterialCasePresentationSchema = z.strictObject({
 });
 function materialCasePresentationJsonSchema() {
   return {
-    ...z.toJSONSchema(MaterialCasePresentationSchema, {
+    ...preservePublishedSchema(z.toJSONSchema(MaterialCasePresentationSchema, {
       target: "draft-2020-12",
       reused: "ref"
-    }),
+    })),
     $id: MATERIAL_CASE_PRESENTATION_SCHEMA_ID
   };
 }
@@ -8862,9 +8863,9 @@ var ProductSourceSelectionSchema = z.strictObject({
 });
 function productSourceSelectionJsonSchema() {
   return {
-    ...z.toJSONSchema(ProductSourceSelectionSchema, {
+    ...preservePublishedSchema(z.toJSONSchema(ProductSourceSelectionSchema, {
       target: "draft-2020-12"
-    }),
+    })),
     $id: PRODUCT_SOURCE_SELECTION_SCHEMA_ID
   };
 }
@@ -9271,9 +9272,9 @@ var RADAR_PROFILE = Object.freeze({
   scope: "retained_rotating_scan_products_and_declared_processing"
 });
 function radarProfileJsonSchema() {
-  const schema = z.toJSONSchema(RadarProfileSchema, {
+  const schema = preservePublishedSchema(z.toJSONSchema(RadarProfileSchema, {
     target: "draft-2020-12"
-  });
+  }));
   for (const branch of schema.anyOf ?? []) {
     if (typeof branch !== "object") continue;
     const uncertainty = branch.properties?.uncertainty;
@@ -10292,9 +10293,9 @@ var SECONDARY_RADAR_PROFILE = Object.freeze({
   scope: "retained_cooperative_interrogations_and_decoded_replies"
 });
 function steeredRadarProfileJsonSchema() {
-  const schema = z.toJSONSchema(SteeredRadarProfileSchema, {
+  const schema = preservePublishedSchema(z.toJSONSchema(SteeredRadarProfileSchema, {
     target: "draft-2020-12"
-  });
+  }));
   const uncertainty = schema.properties?.uncertainty;
   const axes = typeof uncertainty === "object" ? uncertainty.properties?.axes : void 0;
   if (typeof axes === "object") {
@@ -10305,7 +10306,7 @@ function steeredRadarProfileJsonSchema() {
 }
 function secondaryRadarProfileJsonSchema() {
   return {
-    ...z.toJSONSchema(SecondaryRadarProfileSchema, { target: "draft-2020-12" }),
+    ...preservePublishedSchema(z.toJSONSchema(SecondaryRadarProfileSchema, { target: "draft-2020-12" })),
     $id: SECONDARY_RADAR_PROFILE_SCHEMA_ID
   };
 }
@@ -11146,7 +11147,7 @@ var SONAR_PROFILE = Object.freeze({
 });
 function sonarProfileJsonSchema() {
   return {
-    ...z.toJSONSchema(SonarProfileSchema, { target: "draft-2020-12" }),
+    ...preservePublishedSchema(z.toJSONSchema(SonarProfileSchema, { target: "draft-2020-12" })),
     $id: SONAR_PROFILE_SCHEMA_ID
   };
 }
@@ -11513,7 +11514,7 @@ var PASSIVE_SONAR_PROFILE = Object.freeze({
 });
 function passiveSonarProfileJsonSchema() {
   return {
-    ...z.toJSONSchema(PassiveSonarProfileSchema, { target: "draft-2020-12" }),
+    ...preservePublishedSchema(z.toJSONSchema(PassiveSonarProfileSchema, { target: "draft-2020-12" })),
     $id: PASSIVE_SONAR_PROFILE_SCHEMA_ID
   };
 }
@@ -11975,9 +11976,9 @@ var LIDAR_PROFILE = Object.freeze({
   scope: "static_discrete_returns_and_complete_pulse_ledger"
 });
 function lidarProfileJsonSchema() {
-  const schema = z.toJSONSchema(LidarProfileSchema, {
+  const schema = preservePublishedSchema(z.toJSONSchema(LidarProfileSchema, {
     target: "draft-2020-12"
-  });
+  }));
   const constrainTuples = (node) => {
     if (node === null || typeof node !== "object") return;
     const value = node;
@@ -12343,9 +12344,9 @@ var SATELLITE_RASTER_PROFILE = Object.freeze({
   scope: "north_up_utm_multispectral_reflectance_and_pixel_quality"
 });
 function satelliteRasterProfileJsonSchema() {
-  const schema = z.toJSONSchema(SatelliteRasterProfileSchema, {
+  const schema = preservePublishedSchema(z.toJSONSchema(SatelliteRasterProfileSchema, {
     target: "draft-2020-12"
-  });
+  }));
   const constrain = (node) => {
     if (node === null || typeof node !== "object") return;
     const value = node;
@@ -13179,7 +13180,7 @@ var McapSourceMappingSchema = z.strictObject({
 });
 function mcapSourceMappingJsonSchema() {
   return {
-    ...z.toJSONSchema(McapSourceMappingSchema, { target: "draft-2020-12" }),
+    ...preservePublishedSchema(z.toJSONSchema(McapSourceMappingSchema, { target: "draft-2020-12" })),
     $id: MCAP_SOURCE_MAPPING_SCHEMA_ID
   };
 }
@@ -13440,9 +13441,9 @@ var VideoFrameSourceMappingSchema = z.strictObject({
 });
 function videoFrameSourceMappingJsonSchema() {
   return {
-    ...z.toJSONSchema(VideoFrameSourceMappingSchema, {
+    ...preservePublishedSchema(z.toJSONSchema(VideoFrameSourceMappingSchema, {
       target: "draft-2020-12"
-    }),
+    })),
     $id: VIDEO_FRAME_SOURCE_MAPPING_SCHEMA_ID
   };
 }
@@ -13654,10 +13655,10 @@ var ClaimReviewReceiptSchema = z.strictObject({
   outputJson: z.string().min(1)
 });
 function claimReviewEvaluationJsonSchema() {
-  return { ...z.toJSONSchema(ClaimReviewEvaluationSchema, { target: "draft-2020-12" }), $id: CLAIM_REVIEW_EVALUATION_SCHEMA_ID };
+  return { ...preservePublishedSchema(z.toJSONSchema(ClaimReviewEvaluationSchema, { target: "draft-2020-12" })), $id: CLAIM_REVIEW_EVALUATION_SCHEMA_ID };
 }
 function claimReviewReceiptJsonSchema() {
-  return { ...z.toJSONSchema(ClaimReviewReceiptSchema, { target: "draft-2020-12" }), $id: CLAIM_REVIEW_RECEIPT_SCHEMA_ID };
+  return { ...preservePublishedSchema(z.toJSONSchema(ClaimReviewReceiptSchema, { target: "draft-2020-12" })), $id: CLAIM_REVIEW_RECEIPT_SCHEMA_ID };
 }
 var bytes5 = (s) => new TextEncoder().encode(s);
 var hash7 = async (b) => [...new Uint8Array(await crypto.subtle.digest("SHA-256", Uint8Array.from(b)))].map((n) => n.toString(16).padStart(2, "0")).join("");