@dynamicalsystems/idl 0.10.0 → 0.11.0

package/dist/index.d.mts

@@ -31,14 +31,14 @@ declare const PersonReference: TObject<{
  * "lease", "refusal"); vectors address a shape as "<literal>#<shape>". */
 type ProfileEntry = {
   readonly literal: `dsg.${string}.${string}/${number}`;
-  readonly shapes: Readonly<Record<string, TSchema>>;
+  readonly documents: Readonly<Record<string, TSchema>>;
   /** Set ONLY when the wire cannot carry the literal as a field of any
    * shape (a frozen /1); names exactly where the literal lives instead. */
   readonly literalNote?: string;
   /** Names the shape non-TS consumers validate a whole document against;
    * the emitted JSON Schema gains a root $ref to it. Only meaningful for
    * profiles with a single document root. */
-  readonly rootShape?: string;
+  readonly rootDocument?: string;
 };
 //#endregion
 //#region src/kernel/dispatch-consume.v1.d.ts
@@ -110,6 +110,7 @@ declare const DispatchRefusalSchemaValue: import("@sinclair/typebox").TObject<{
 }>;
 declare const DispatchRefusalSchema: typeof DispatchRefusalSchemaValue;
 type DispatchRefusal = Static<typeof DispatchRefusalSchema>;
+declare const dispatchConsumeV1: ProfileEntry;
 //#endregion
 //#region src/run/operation.v1.d.ts
 declare const OPERATION_PROFILE: "dsg.run.operation/1";
@@ -308,6 +309,7 @@ declare const OperationStatusSchema: import("@sinclair/typebox").TObject<{
   cost: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"reserved">, import("@sinclair/typebox").TLiteral<"provisional">, import("@sinclair/typebox").TLiteral<"reconciled">]>;
 }>;
 type OperationStatus = Readback;
+declare const operationV1: ProfileEntry;
 //#endregion
 //#region src/infra/signed-law.v1.d.ts
 declare const SIGNED_LAW_PROFILE: "dsg.infra.signed-law/1";
@@ -479,6 +481,7 @@ declare const SignedLawBundleSchema: import("@sinclair/typebox").TObject<{
   }>;
 }>;
 type SignedLawBundle = Static<typeof SignedLawBundleSchema>;
+declare const signedLawV1: ProfileEntry;
 //#endregion
 //#region src/infra/resource-descriptor.v1.d.ts
 declare const RESOURCE_DESCRIPTOR_PROFILE: "dsg.infra.resource-descriptor/1";
@@ -509,6 +512,7 @@ declare const ResourceDescriptorSchemaValue: import("@sinclair/typebox").TObject
 }>;
 declare const ResourceDescriptorSchema: typeof ResourceDescriptorSchemaValue;
 type ResourceDescriptor = Static<typeof ResourceDescriptorSchema>;
+declare const resourceDescriptorV1: ProfileEntry;
 //#endregion
 //#region src/infra/adoption-fact.v1.d.ts
 declare const ADOPTION_FACT_PROFILE: "dsg.infra.adoption-fact/1";
@@ -532,6 +536,7 @@ declare const AdoptionFactSchemaValue: import("@sinclair/typebox").TObject<{
 }>;
 declare const AdoptionFactSchema: typeof AdoptionFactSchemaValue;
 type AdoptionFact = Static<typeof AdoptionFactSchema>;
+declare const adoptionFactV1: ProfileEntry;
 //#endregion
 //#region src/registry/revocations.v1.d.ts
 declare const REVOCATIONS_PROFILE: "dsg.registry.revocations/1";
@@ -568,6 +573,7 @@ declare const RevocationPointerSchemaValue: import("@sinclair/typebox").TObject<
 }>;
 declare const RevocationPointerSchema: typeof RevocationPointerSchemaValue;
 type RevocationPointer = Static<typeof RevocationPointerSchema>;
+declare const revocationsV1: ProfileEntry;
 //#endregion
 //#region src/kernel/bootstrap.v1.d.ts
 declare const BOOTSTRAP_PROFILE: "dsg.kernel.bootstrap/1";
@@ -629,6 +635,7 @@ declare const SignedBootstrapIntentSchemaValue: import("@sinclair/typebox").TObj
 }>;
 declare const SignedBootstrapIntentSchema: typeof SignedBootstrapIntentSchemaValue;
 type SignedBootstrapIntent = Static<typeof SignedBootstrapIntentSchema>;
+declare const bootstrapV1: ProfileEntry;
 //#endregion
 //#region src/kernel/standing-order-activation.v1.d.ts
 declare const STANDING_ORDER_ACTIVATION_PROFILE: "dsg.kernel.standing-order-activation/1";
@@ -729,6 +736,7 @@ declare const SignedStandingOrderActivationSchemaValue: import("@sinclair/typebo
 }>;
 declare const SignedStandingOrderActivationSchema: typeof SignedStandingOrderActivationSchemaValue;
 type SignedStandingOrderActivation = Static<typeof SignedStandingOrderActivationSchema>;
+declare const standingOrderActivationV1: ProfileEntry;
 //#endregion
 //#region src/kernel/ordinary-authority.v1.d.ts
 declare const ORDINARY_AUTHORITY_PROFILE: "dsg.kernel.ordinary-authority/1";
@@ -761,6 +769,7 @@ declare const OrdinaryAuthoritySchemaValue: import("@sinclair/typebox").TObject<
 }>;
 declare const OrdinaryAuthoritySchema: typeof OrdinaryAuthoritySchemaValue;
 type OrdinaryAuthority = Static<typeof OrdinaryAuthoritySchema>;
+declare const ordinaryAuthorityV1: ProfileEntry;
 //#endregion
 //#region src/run/contract-versions.d.ts
 declare const EXECUTOR_PROTOCOL_VERSION: "dsg.run.executor/1";
@@ -815,6 +824,7 @@ declare const EventStreamSealSchemaValue: import("@sinclair/typebox").TObject<{
 }>;
 declare const EventStreamSealSchema: typeof EventStreamSealSchemaValue;
 type EventStreamSeal = Static<typeof EventStreamSealSchema>;
+declare const eventV1: ProfileEntry;
 //#endregion
 //#region src/run/request.v1.d.ts
 declare const REQUEST_PROFILE: "dsg.run.request/1";
@@ -859,6 +869,7 @@ declare const RunRequestSchemaValue: import("@sinclair/typebox").TObject<{
 }>;
 declare const RunRequestSchema: typeof RunRequestSchemaValue;
 type RunRequest = Static<typeof RunRequestSchema>;
+declare const requestV1: ProfileEntry;
 //#endregion
 //#region src/run/decision.v1.d.ts
 declare const DECISION_PROFILE: "dsg.run.decision/1";
@@ -874,6 +885,7 @@ declare const RunDecisionSchemaValue: import("@sinclair/typebox").TObject<{
 }>;
 declare const RunDecisionSchema: typeof RunDecisionSchemaValue;
 type RunDecision = Static<typeof RunDecisionSchema>;
+declare const decisionV1: ProfileEntry;
 //#endregion
 //#region src/run/run-summary.v1.d.ts
 declare const RUN_SUMMARY_PROFILE: "dsg.run.run-summary/1";
@@ -914,6 +926,7 @@ declare const RunSummarySchemaValue: import("@sinclair/typebox").TObject<{
 }>;
 declare const RunSummarySchema: typeof RunSummarySchemaValue;
 type RunSummary = Static<typeof RunSummarySchema>;
+declare const runSummaryV1: ProfileEntry;
 //#endregion
 //#region src/core/refusal.v1.d.ts
 declare const REFUSAL_PROFILE: "dsg.core.refusal/1";
@@ -927,6 +940,7 @@ declare const RefusalSchemaValue: import("@sinclair/typebox").TObject<{
 }>;
 declare const RefusalSchema: typeof RefusalSchemaValue;
 type Refusal = Static<typeof RefusalSchema>;
+declare const refusalV1: ProfileEntry;
 //#endregion
 //#region src/core/refusal.v2.d.ts
 declare const REFUSAL_V2_PROFILE: "dsg.core.refusal/2";
@@ -945,10 +959,45 @@ declare const RefusalV2SchemaValue: import("@sinclair/typebox").TObject<{
 }>;
 declare const RefusalV2Schema: typeof RefusalV2SchemaValue;
 type RefusalV2 = Static<typeof RefusalV2Schema>;
+declare const refusalV2: ProfileEntry;
+//#endregion
+//#region src/core/google-identity.v1.d.ts
+declare const GOOGLE_IDENTITY_PROFILE: "dsg.core.google-identity/1";
+declare const GOOGLE_SIGN_IN_ISSUER: "https://accounts.google.com";
+declare const GoogleIdentitySchemaValue: import("@sinclair/typebox").TObject<{
+  profile: import("@sinclair/typebox").TLiteral<"dsg.core.google-identity/1">;
+  issuer: import("@sinclair/typebox").TLiteral<"https://accounts.google.com">;
+  googleSubject: import("@sinclair/typebox").TString;
+  audience: import("@sinclair/typebox").TString;
+  hostedDomain: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+  email: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+}>;
+declare const GoogleIdentitySchema: typeof GoogleIdentitySchemaValue;
+type GoogleIdentity = Static<typeof GoogleIdentitySchema>;
+declare const googleIdentityV1: ProfileEntry;
+//#endregion
+//#region src/core/refusal.v3.d.ts
+declare const REFUSAL_V3_PROFILE: "dsg.core.refusal/3";
+declare const RefusalCodeV3SchemaValue: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"organization_absent">, import("@sinclair/typebox").TLiteral<"organization_exists">, import("@sinclair/typebox").TLiteral<"domain_mismatch">, import("@sinclair/typebox").TLiteral<"suspended">, import("@sinclair/typebox").TLiteral<"organization_disabled">, import("@sinclair/typebox").TLiteral<"claims_missing">, import("@sinclair/typebox").TLiteral<"not_qualified">, import("@sinclair/typebox").TLiteral<"subject_conflict">]>;
+declare const RefusalCodeV3Schema: typeof RefusalCodeV3SchemaValue;
+type RefusalCodeV3 = Static<typeof RefusalCodeV3Schema>;
+declare const RefusalStageV3SchemaValue: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"proxy">, import("@sinclair/typebox").TLiteral<"provider">, import("@sinclair/typebox").TLiteral<"identity_read">, import("@sinclair/typebox").TLiteral<"plane">, import("@sinclair/typebox").TLiteral<"console">, import("@sinclair/typebox").TLiteral<"kernel">, import("@sinclair/typebox").TLiteral<"record">, import("@sinclair/typebox").TLiteral<"claim">]>;
+declare const RefusalStageV3Schema: typeof RefusalStageV3SchemaValue;
+type RefusalStageV3 = Static<typeof RefusalStageV3Schema>;
+declare const RefusalV3SchemaValue: import("@sinclair/typebox").TObject<{
+  profile: import("@sinclair/typebox").TLiteral<"dsg.core.refusal/3">;
+  code: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"organization_absent">, import("@sinclair/typebox").TLiteral<"organization_exists">, import("@sinclair/typebox").TLiteral<"domain_mismatch">, import("@sinclair/typebox").TLiteral<"suspended">, import("@sinclair/typebox").TLiteral<"organization_disabled">, import("@sinclair/typebox").TLiteral<"claims_missing">, import("@sinclair/typebox").TLiteral<"not_qualified">, import("@sinclair/typebox").TLiteral<"subject_conflict">]>;
+  sentence: import("@sinclair/typebox").TString;
+  stage: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"proxy">, import("@sinclair/typebox").TLiteral<"provider">, import("@sinclair/typebox").TLiteral<"identity_read">, import("@sinclair/typebox").TLiteral<"plane">, import("@sinclair/typebox").TLiteral<"console">, import("@sinclair/typebox").TLiteral<"kernel">, import("@sinclair/typebox").TLiteral<"record">, import("@sinclair/typebox").TLiteral<"claim">]>>;
+  correlationId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+  detail: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+}>;
+declare const RefusalV3Schema: typeof RefusalV3SchemaValue;
+type RefusalV3 = Static<typeof RefusalV3Schema>;
+declare const refusalV3: ProfileEntry;
 //#endregion
 //#region src/core/identity-binding.v1.d.ts
 declare const IDENTITY_BINDING_PROFILE: "dsg.core.identity-binding/1";
-declare const GOOGLE_SIGN_IN_ISSUER: "https://accounts.google.com";
 declare const IdentityBindingSchemaValue: import("@sinclair/typebox").TObject<{
   profile: import("@sinclair/typebox").TLiteral<"dsg.core.identity-binding/1">;
   principal: import("@sinclair/typebox").TString;
@@ -960,13 +1009,33 @@ declare const IdentityBindingSchemaValue: import("@sinclair/typebox").TObject<{
 }>;
 declare const IdentityBindingSchema: typeof IdentityBindingSchemaValue;
 type IdentityBinding = Static<typeof IdentityBindingSchema>;
+declare const identityBindingV1: ProfileEntry;
 //#endregion
 //#region src/index.d.ts
 /** Every profile this version of the package defines, keyed by literal.
  * Profile modules are added here as they are extracted; the rules test
  * and the schema emitter walk this registry, so a module that is not
  * registered does not exist. */
-declare const PROFILES: Readonly<Record<string, ProfileEntry>>;
+declare const PROFILES: {
+  [dispatchConsumeV1.literal]: ProfileEntry;
+  [operationV1.literal]: ProfileEntry;
+  [eventV1.literal]: ProfileEntry;
+  [requestV1.literal]: ProfileEntry;
+  [decisionV1.literal]: ProfileEntry;
+  [runSummaryV1.literal]: ProfileEntry;
+  [refusalV1.literal]: ProfileEntry;
+  [refusalV2.literal]: ProfileEntry;
+  [refusalV3.literal]: ProfileEntry;
+  [googleIdentityV1.literal]: ProfileEntry;
+  [identityBindingV1.literal]: ProfileEntry;
+  [signedLawV1.literal]: ProfileEntry;
+  [resourceDescriptorV1.literal]: ProfileEntry;
+  [adoptionFactV1.literal]: ProfileEntry;
+  [revocationsV1.literal]: ProfileEntry;
+  [bootstrapV1.literal]: ProfileEntry;
+  [ordinaryAuthorityV1.literal]: ProfileEntry;
+  [standingOrderActivationV1.literal]: ProfileEntry;
+};
 //#endregion
-export { ADOPTION_FACT_PROFILE, type Accepted, AcceptedSchema, type AdoptionFact, AdoptionFactSchema, BOOTSTRAP_PROFILE, type BootstrapAction, BootstrapActionSchema, type BootstrapIntent, BootstrapIntentSchema, DECISION_PROFILE, DISPATCH_CONSUME_PROFILE, DISPATCH_MAX_SKEW_SECONDS, type DispatchConsumeRequest, DispatchConsumeRequestSchema, type DispatchLease, DispatchLeaseSchema, type DispatchRefusal, type DispatchRefusalCode, DispatchRefusalCodeSchema, DispatchRefusalSchema, EVENT_LINE_PREFIX, EVENT_PROFILE, EXECUTOR_PROTOCOL_VERSION, type Event, EventSchema, type EventStreamSeal, EventStreamSealSchema, type ExecutionDocument, ExecutionDocumentSchema, type ExecutionLaw, ExecutionLawSchema, type ExecutionResources, ExecutionResourcesSchema, type ExecutorProtocolVersion, type ExperimentRef, ExperimentRefSchema, GOOGLE_SIGN_IN_ISSUER, Hex64, IDENTITY_BINDING_PROFILE, type IdentityBinding, IdentityBindingSchema, LIFECYCLE_KINDS, NonEmptyString, OPERATION_PROFILE, ORDINARY_AUTHORITY_PROFILE, type OperationBefore, OperationBeforeSchema, type OperationCleanup, OperationCleanupSchema, type OperationCost, OperationCostSchema, type OperationEvidence, OperationEvidenceSchema, type OperationExecution, OperationExecutionSchema, type OperationRequest, OperationRequestSchema, type OperationStatus, OperationStatusSchema, type OrdinaryAuthority, OrdinaryAuthoritySchema, Orn, PRICE_PROFILE_REFERENCE, PROFILES, PROVIDER_PROTOCOL_VERSION, PersonReference, type ProfileEntry, type ProviderProtocolVersion, REFUSAL_PROFILE, REFUSAL_V2_PROFILE, REQUEST_PROFILE, RESOURCE_DESCRIPTOR_KIND, RESOURCE_DESCRIPTOR_PROFILE, REVOCATIONS_PROFILE, RUN_SUMMARY_PROFILE, type Readback, ReadbackSchema, Reference, type Refusal, type RefusalCode, RefusalCodeSchema, type RefusalCodeV2, RefusalCodeV2Schema, RefusalSchema, type RefusalStageV2, RefusalStageV2Schema, type RefusalV2, RefusalV2Schema, type RequestCeilings, RequestCeilingsSchema, type ResourceDescriptor, ResourceDescriptorSchema, type RevocationPointer, RevocationPointerSchema, RevocationSchema, type RevocationSnapshot, type RunDecision, RunDecisionSchema, type RunRequest, RunRequestSchema, type RunSummary, type RunSummaryDecision, RunSummaryDecisionSchema, RunSummarySchema, SCOPE_REFERENCE, SIGNED_LAW_DOMAIN, SIGNED_LAW_PROFILE, STANDING_ORDER_ACTIVATION_EVENT_KIND, STANDING_ORDER_ACTIVATION_PROFILE, SafeInt, type SignedBootstrapIntent, SignedBootstrapIntentSchema, type SignedLawBundle, SignedLawBundleSchema, type SignedStandingOrderActivation, SignedStandingOrderActivationSchema, type StandingOrderActivation, type StandingOrderActivationEvent, StandingOrderActivationEventSchema, StandingOrderActivationSchema, type StandingOrderMode, StandingOrderModeSchema, UtcSecond, closed };
+export { ADOPTION_FACT_PROFILE, type Accepted, AcceptedSchema, type AdoptionFact, AdoptionFactSchema, BOOTSTRAP_PROFILE, type BootstrapAction, BootstrapActionSchema, type BootstrapIntent, BootstrapIntentSchema, DECISION_PROFILE, DISPATCH_CONSUME_PROFILE, DISPATCH_MAX_SKEW_SECONDS, type DispatchConsumeRequest, DispatchConsumeRequestSchema, type DispatchLease, DispatchLeaseSchema, type DispatchRefusal, type DispatchRefusalCode, DispatchRefusalCodeSchema, DispatchRefusalSchema, EVENT_LINE_PREFIX, EVENT_PROFILE, EXECUTOR_PROTOCOL_VERSION, type Event, EventSchema, type EventStreamSeal, EventStreamSealSchema, type ExecutionDocument, ExecutionDocumentSchema, type ExecutionLaw, ExecutionLawSchema, type ExecutionResources, ExecutionResourcesSchema, type ExecutorProtocolVersion, type ExperimentRef, ExperimentRefSchema, GOOGLE_IDENTITY_PROFILE, GOOGLE_SIGN_IN_ISSUER, type GoogleIdentity, GoogleIdentitySchema, Hex64, IDENTITY_BINDING_PROFILE, type IdentityBinding, IdentityBindingSchema, LIFECYCLE_KINDS, NonEmptyString, OPERATION_PROFILE, ORDINARY_AUTHORITY_PROFILE, type OperationBefore, OperationBeforeSchema, type OperationCleanup, OperationCleanupSchema, type OperationCost, OperationCostSchema, type OperationEvidence, OperationEvidenceSchema, type OperationExecution, OperationExecutionSchema, type OperationRequest, OperationRequestSchema, type OperationStatus, OperationStatusSchema, type OrdinaryAuthority, OrdinaryAuthoritySchema, Orn, PRICE_PROFILE_REFERENCE, PROFILES, PROVIDER_PROTOCOL_VERSION, PersonReference, type ProfileEntry, type ProviderProtocolVersion, REFUSAL_PROFILE, REFUSAL_V2_PROFILE, REFUSAL_V3_PROFILE, REQUEST_PROFILE, RESOURCE_DESCRIPTOR_KIND, RESOURCE_DESCRIPTOR_PROFILE, REVOCATIONS_PROFILE, RUN_SUMMARY_PROFILE, type Readback, ReadbackSchema, Reference, type Refusal, type RefusalCode, RefusalCodeSchema, type RefusalCodeV2, RefusalCodeV2Schema, type RefusalCodeV3, RefusalCodeV3Schema, RefusalSchema, type RefusalStageV2, RefusalStageV2Schema, type RefusalStageV3, RefusalStageV3Schema, type RefusalV2, RefusalV2Schema, type RefusalV3, RefusalV3Schema, type RequestCeilings, RequestCeilingsSchema, type ResourceDescriptor, ResourceDescriptorSchema, type RevocationPointer, RevocationPointerSchema, RevocationSchema, type RevocationSnapshot, type RunDecision, RunDecisionSchema, type RunRequest, RunRequestSchema, type RunSummary, type RunSummaryDecision, RunSummaryDecisionSchema, RunSummarySchema, SCOPE_REFERENCE, SIGNED_LAW_DOMAIN, SIGNED_LAW_PROFILE, STANDING_ORDER_ACTIVATION_EVENT_KIND, STANDING_ORDER_ACTIVATION_PROFILE, SafeInt, type SignedBootstrapIntent, SignedBootstrapIntentSchema, type SignedLawBundle, SignedLawBundleSchema, type SignedStandingOrderActivation, SignedStandingOrderActivationSchema, type StandingOrderActivation, type StandingOrderActivationEvent, StandingOrderActivationEventSchema, StandingOrderActivationSchema, type StandingOrderMode, StandingOrderModeSchema, UtcSecond, closed };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/primitives.ts","../src/kernel/dispatch-consume.v1.ts","../src/run/operation.v1.ts","../src/infra/signed-law.v1.ts","../src/infra/resource-descriptor.v1.ts","../src/infra/adoption-fact.v1.ts","../src/registry/revocations.v1.ts","../src/kernel/bootstrap.v1.ts","../src/kernel/standing-order-activation.v1.ts","../src/kernel/ordinary-authority.v1.ts","../src/run/contract-versions.ts","../src/run/event.v1.ts","../src/run/request.v1.ts","../src/run/decision.v1.ts","../src/run/run-summary.v1.ts","../src/core/refusal.v1.ts","../src/core/refusal.v2.ts","../src/core/identity-binding.v1.ts","../src/index.ts"],"mappings":";;;cAOa,SAAU,UAAU,aAAW,YAAc,MAAI,QAAQ;;cAIzD,mCAAK;;cAGL,uCAAS;cAIT,4CAAc;cAEd,qCAAO;;;;;;cAOP,iCAAG;;cAGH,WAAS;;;;;;cAOT,iBAAe;;;;;;;;KAShB;WACD;WACA,QAAQ,SAAS,eAAe;;;WAGhC;;;;WAIA;;;;cC3BE;;cAGA;cAEP,+DAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;cAwB1B,qCAAqC;KAEtC,yBAAyB,cAAc;cAE7C,sDAAwB;;;;;;;;;;;;;;;;;;;;;;;;cAqBjB,4BAA4B;KAC7B,gBAAgB,cAAc;cAEpC,4DAA8B,oCAAA,2DAAA,wDAAA,0DAAA,iDAAA,2DAAA,+EAAA;cASvB,kCAAkC;KAEnC,sBAAsB,cAAc;cAE1C,wDAA0B;;;;;cAKnB,8BAA8B;KAC/B,kBAAkB,cAAc;;;cC3E/B;cAEP,2DAA6B;;;;;cAKtB,iCAAiC;KAElC,qBAAqB,cAAc;cAEzC,qDAAuB;;;;;;;;;;cAIhB,2BAA2B;KAC5B,eAAe,cAAc;cAEnC,0DAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAYrB,gCAAgC;KAEjC,oBAAoB,cAAc;cAExC,wDAA0B;;;;cAInB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,yDAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAYpB,+BAA+B;KAEhC,mBAAmB,cAAc;cAEvC,iDAAmB;;;;;;;;cAQZ,uBAAuB;KACxB,WAAW,cAAc;cAE/B,2DAA6B,oCAAA,gDAAA,iDAAA,mDAAA,gDAAA,kDAAA;cAQtB,iCAAiC;KAElC,qBAAqB,cAAc;cAEzC,yDAA2B,oCAAA,iDAAA,iDAAA,gDAAA;cAMpB,+BAA+B;KAEhC,mBAAmB,cAAc;cAEvC,0DAA4B,oCAAA,iDAAA;cACrB,gCAAgC;KAEjC,oBAAoB,cAAc;cAExC,sDAAwB,oCAAA,kDAAA,qDAAA;cAKjB,4BAA4B;KAC7B,gBAAgB,cAAc;cAEpC,iDAAmB;;;;;;;;;;;;;cAUZ,uBAAuB;KACxB,WAAW,cAAc;cAIxB,mDAAqB;;;;;;;;;;;;;KACtB,kBAAkB;;;cCrIjB;;cAEA;;;;;cAMA;;;cAIA;cAiPA,mDAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KACtB,kBAAkB,cAAc;;;cC3P/B;;;cAGA;cAIP,2DAA6B;;;;;;;;;;;;;;;;;;;;;;cAsBtB,iCAAiC;KAElC,qBAAqB,cAAc;;;cCjClC;cAEP,qDAAuB;;;;;;;;;;;;;;;;;;cAqBhB,2BAA2B;KAC5B,eAAe,cAAc;;;cC9B5B;cAOP,mDAAqB;;;;;;;;;;;;;;;;;;;;;;;;cAmDd,yBAAyB;KAC1B,qBAAqB,cAAc;cAEzC,0DAA4B;;;;;cAQrB,gCAAgC;KAEjC,oBAAoB,cAAc;;;cClEjC;cAEP,wDAA0B,oCAAA,kEAAA,+DAAA,+DAAA;cAMnB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,wDAA0B;;;;;;;;;;;;;;;;;;;;;;;;cA2BnB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,8DAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;cAIzB,oCAAoC;KAErC,wBAAwB,cAAc;;;cCtDrC;cACA;cAEP,0DAA4B,oCAAA,6DAAA;cAIrB,gCAAgC;KAEjC,oBAAoB,cAAc;;cAGxC,gEAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAiB3B,sCAAsC;KAEvC,0BAA0B,cAAc;;cAG9C,qEAAuC;;;;;;;;;;cAOhC,2CAA2C;KAE5C,+BAA+B,cAAc;;cAGnD,sEAAwC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAKjC,4CAA4C;KAE7C,gCAAgC,cAAc;;;cC9C7C;cAKP,0DAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;cAwBrB,gCAAgC;KAEjC,oBAAoB,cAAc;;;cCtCjC;KACD,iCAAiC;cAEhC;KACD,iCAAiC;;;cCiBhC;;;cAIA;;;;cAKA;cAYP,8CAAgB;;;;;;;;;;;;;;;;;cAiBT,oBAAoB;KACrB,QAAQ,cAAc;;;;;;;cAQ5B,wDAA0B;;;;;;;;;;;cAWnB,8BAA8B;KAC/B,kBAAkB,cAAc;;;cC1E/B;cAEP,sDAAwB;;;;;cAKjB,4BAA4B;KAC7B,gBAAgB,cAAc;cAEpC,wDAA0B;;;;;;cAMnB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,mDAAqB;;;;;;;;;;;;;;;;;;;;;;;;cASd,yBAAyB;KAC1B,aAAa,cAAc;;;cCpC1B;cAEP,oDAAsB;;;;;;;;;;cAUf,0BAA0B;KAC3B,cAAc,cAAc;;;cCP3B;cAEP,2DAA6B;;;;;;;;;;;cAOtB,iCAAiC;KAElC,qBAAqB,cAAc;cAEzC,mDAAqB;;;;;;;;;;;;;;;;;;;;;;cAQd,yBAAyB;KAC1B,aAAa,cAAc;;;cC3B1B;cAEP,oDAAsB,oCAAA,2DAAA,2DAAA,iDAAA,wDAAA,8DAAA,yDAAA,0DAAA,yDAAA,6DAAA,yDAAA,yDAAA,gEAAA,0DAAA,yDAAA,0DAAA,uDAAA;cAmBf,0BAA0B;KAC3B,cAAc,cAAc;cAElC,gDAAkB;;;;;cAKX,sBAAsB;KACvB,UAAU,cAAc;;;cCtBvB;cAEP,sDAAwB,oCAAA,2DAAA,2DAAA,iDAAA,wDAAA,8DAAA,yDAAA,0DAAA,yDAAA,6DAAA,yDAAA,yDAAA,gEAAA,0DAAA,yDAAA,0DAAA,uDAAA,oDAAA,gEAAA;cAqBjB,4BAA4B;KAC7B,gBAAgB,cAAc;cAEpC,uDAAyB,oCAAA,+CAAA,kDAAA,uDAAA;cAMlB,6BAA6B;KAC9B,iBAAiB,cAAc;cAErC,kDAAoB;;;;;;;cAOb,wBAAwB;KACzB,YAAY,cAAc;;;cCrDzB;cACA;cAEP,wDAA0B;;;;;;;;;cASnB,8BAA8B;KAC/B,kBAAkB,cAAc;;;;;;;cCsJ/B,UAAU,SAAS,eAAe"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/primitives.ts","../src/kernel/dispatch-consume.v1.ts","../src/run/operation.v1.ts","../src/infra/signed-law.v1.ts","../src/infra/resource-descriptor.v1.ts","../src/infra/adoption-fact.v1.ts","../src/registry/revocations.v1.ts","../src/kernel/bootstrap.v1.ts","../src/kernel/standing-order-activation.v1.ts","../src/kernel/ordinary-authority.v1.ts","../src/run/contract-versions.ts","../src/run/event.v1.ts","../src/run/request.v1.ts","../src/run/decision.v1.ts","../src/run/run-summary.v1.ts","../src/core/refusal.v1.ts","../src/core/refusal.v2.ts","../src/core/google-identity.v1.ts","../src/core/refusal.v3.ts","../src/core/identity-binding.v1.ts","../src/index.ts"],"mappings":";;;cAOa,SAAU,UAAU,aAAW,YAAc,MAAI,QAAQ;;cAIzD,mCAAK;;cAGL,uCAAS;cAIT,4CAAc;cAEd,qCAAO;;;;;;cAOP,iCAAG;;cAGH,WAAS;;;;;;cAOT,iBAAe;;;;;;;;KAShB;WACD;WACA,WAAW,SAAS,eAAe;;;WAGnC;;;;WAIA;;;;cC3BE;;cAGA;cAEP,+DAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;cAwB1B,qCAAqC;KAEtC,yBAAyB,cAAc;cAE7C,sDAAwB;;;;;;;;;;;;;;;;;;;;;;;;cAqBjB,4BAA4B;KAC7B,gBAAgB,cAAc;cAEpC,4DAA8B,oCAAA,2DAAA,wDAAA,0DAAA,iDAAA,2DAAA,+EAAA;cASvB,kCAAkC;KAEnC,sBAAsB,cAAc;cAE1C,wDAA0B;;;;;cAKnB,8BAA8B;KAC/B,kBAAkB,cAAc;cAE/B,mBAAmB;;;cC7EnB;cAEP,2DAA6B;;;;;cAKtB,iCAAiC;KAElC,qBAAqB,cAAc;cAEzC,qDAAuB;;;;;;;;;;cAIhB,2BAA2B;KAC5B,eAAe,cAAc;cAEnC,0DAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAYrB,gCAAgC;KAEjC,oBAAoB,cAAc;cAExC,wDAA0B;;;;cAInB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,yDAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAYpB,+BAA+B;KAEhC,mBAAmB,cAAc;cAEvC,iDAAmB;;;;;;;;cAQZ,uBAAuB;KACxB,WAAW,cAAc;cAE/B,2DAA6B,oCAAA,gDAAA,iDAAA,mDAAA,gDAAA,kDAAA;cAQtB,iCAAiC;KAElC,qBAAqB,cAAc;cAEzC,yDAA2B,oCAAA,iDAAA,iDAAA,gDAAA;cAMpB,+BAA+B;KAEhC,mBAAmB,cAAc;cAEvC,0DAA4B,oCAAA,iDAAA;cACrB,gCAAgC;KAEjC,oBAAoB,cAAc;cAExC,sDAAwB,oCAAA,kDAAA,qDAAA;cAKjB,4BAA4B;KAC7B,gBAAgB,cAAc;cAEpC,iDAAmB;;;;;;;;;;;;;cAUZ,uBAAuB;KACxB,WAAW,cAAc;cAIxB,mDAAqB;;;;;;;;;;;;;KACtB,kBAAkB;cAEjB,aAAa;;;cCvIb;;cAEA;;;;;cAMA;;;cAIA;cAiPA,mDAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KACtB,kBAAkB,cAAc;cAE/B,aAAa;;;cC7Pb;;;cAGA;cAIP,2DAA6B;;;;;;;;;;;;;;;;;;;;;;cAsBtB,iCAAiC;KAElC,qBAAqB,cAAc;cAElC,sBAAsB;;;cCnCtB;cAEP,qDAAuB;;;;;;;;;;;;;;;;;;cAqBhB,2BAA2B;KAC5B,eAAe,cAAc;cAE5B,gBAAgB;;;cChChB;cAOP,mDAAqB;;;;;;;;;;;;;;;;;;;;;;;;cAmDd,yBAAyB;KAC1B,qBAAqB,cAAc;cAEzC,0DAA4B;;;;;cAQrB,gCAAgC;KAEjC,oBAAoB,cAAc;cAEjC,eAAe;;;cCpEf;cAEP,wDAA0B,oCAAA,kEAAA,+DAAA,+DAAA;cAMnB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,wDAA0B;;;;;;;;;;;;;;;;;;;;;;;;cA2BnB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,8DAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;cAIzB,oCAAoC;KAErC,wBAAwB,cAAc;cAErC,aAAa;;;cCxDb;cACA;cAEP,0DAA4B,oCAAA,6DAAA;cAIrB,gCAAgC;KAEjC,oBAAoB,cAAc;;cAGxC,gEAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAiB3B,sCAAsC;KAEvC,0BAA0B,cAAc;;cAG9C,qEAAuC;;;;;;;;;;cAOhC,2CAA2C;KAE5C,+BAA+B,cAAc;;cAGnD,sEAAwC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAKjC,4CAA4C;KAE7C,gCAAgC,cAAc;cAE7C,2BAA2B;;;cChD3B;cAKP,0DAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;cAwBrB,gCAAgC;KAEjC,oBAAoB,cAAc;cAEjC,qBAAqB;;;cCxCrB;KACD,iCAAiC;cAEhC;KACD,iCAAiC;;;cCiBhC;;;cAIA;;;;cAKA;cAYP,8CAAgB;;;;;;;;;;;;;;;;;cAiBT,oBAAoB;KACrB,QAAQ,cAAc;;;;;;;cAQ5B,wDAA0B;;;;;;;;;;;cAWnB,8BAA8B;KAC/B,kBAAkB,cAAc;cAE/B,SAAS;;;cC5ET;cAEP,sDAAwB;;;;;cAKjB,4BAA4B;KAC7B,gBAAgB,cAAc;cAEpC,wDAA0B;;;;;;cAMnB,8BAA8B;KAC/B,kBAAkB,cAAc;cAEtC,mDAAqB;;;;;;;;;;;;;;;;;;;;;;;;cASd,yBAAyB;KAC1B,aAAa,cAAc;cAE1B,WAAW;;;cCtCX;cAEP,oDAAsB;;;;;;;;;;cAUf,0BAA0B;KAC3B,cAAc,cAAc;cAE3B,YAAY;;;cCTZ;cAEP,2DAA6B;;;;;;;;;;;cAOtB,iCAAiC;KAElC,qBAAqB,cAAc;cAEzC,mDAAqB;;;;;;;;;;;;;;;;;;;;;;cAQd,yBAAyB;KAC1B,aAAa,cAAc;cAE1B,cAAc;;;cC7Bd;cAEP,oDAAsB,oCAAA,2DAAA,2DAAA,iDAAA,wDAAA,8DAAA,yDAAA,0DAAA,yDAAA,6DAAA,yDAAA,yDAAA,gEAAA,0DAAA,yDAAA,0DAAA,uDAAA;cAmBf,0BAA0B;KAC3B,cAAc,cAAc;cAElC,gDAAkB;;;;;cAKX,sBAAsB;KACvB,UAAU,cAAc;cAEvB,WAAW;;;cCxBX;cAEP,sDAAwB,oCAAA,2DAAA,2DAAA,iDAAA,wDAAA,8DAAA,yDAAA,0DAAA,yDAAA,6DAAA,yDAAA,yDAAA,gEAAA,0DAAA,yDAAA,0DAAA,uDAAA,oDAAA,gEAAA;cAqBjB,4BAA4B;KAC7B,gBAAgB,cAAc;cAEpC,uDAAyB,oCAAA,+CAAA,kDAAA,uDAAA;cAMlB,6BAA6B;KAC9B,iBAAiB,cAAc;cAErC,kDAAoB;;;;;;;cAOb,wBAAwB;KACzB,YAAY,cAAc;cAEzB,WAAW;;;cC1CX;cACA;cAMP,uDAAyB;;;;;;;;cAQlB,6BAA6B;KAC9B,iBAAiB,cAAc;cAE9B,kBAAkB;;;cC/BlB;cAEP,sDAAwB,oCAAA,6DAAA,6DAAA,yDAAA,mDAAA,+DAAA,wDAAA,uDAAA;cAUjB,4BAA4B;KAC7B,gBAAgB,cAAc;cAEpC,uDAAyB,oCAAA,+CAAA,kDAAA,uDAAA,+CAAA,iDAAA,gDAAA,gDAAA;cAUlB,6BAA6B;KAC9B,iBAAiB,cAAc;cAErC,kDAAoB;;;;;;;;cAQb,wBAAwB;KACzB,YAAY,cAAc;cAEzB,WAAW;;;cCvCX;cAGP,wDAA0B;;;;;;;;;cASnB,8BAA8B;KAC/B,kBAAkB,cAAc;cAE/B,mBAAmB;;;;;;;cC8JnB;GACV,kBAAkB,UAAQ;GAC1B,YAAY,UAAQ;GACpB,QAAQ,UAAQ;GAChB,UAAU,UAAQ;GAClB,WAAW,UAAQ;GACnB,aAAa,UAAQ;GACrB,UAAU,UAAQ;GAClB,UAAU,UAAQ;GAClB,UAAU,UAAQ;GAClB,iBAAiB,UAAQ;GACzB,kBAAkB,UAAQ;GAC1B,YAAY,UAAQ;GACpB,qBAAqB,UAAQ;GAC7B,eAAe,UAAQ;GACvB,cAAc,UAAQ;GACtB,YAAY,UAAQ;GACpB,oBAAoB,UAAQ;GAC5B,0BAA0B,UAAQ"}

package/dist/index.mjs

@@ -99,7 +99,7 @@ const DispatchRefusalSchema = closed({
 });
 const dispatchConsumeV1 = {
 	literal: DISPATCH_CONSUME_PROFILE,
-	shapes: {
+	documents: {
 		request: DispatchConsumeRequestSchema,
 		lease: DispatchLeaseSchema,
 		refusal: DispatchRefusalSchema
@@ -186,7 +186,7 @@ const ReadbackSchema = closed({
 const OperationStatusSchema = ReadbackSchema;
 const operationV1 = {
 	literal: OPERATION_PROFILE,
-	shapes: {
+	documents: {
 		request: OperationRequestSchema,
 		accepted: AcceptedSchema,
 		readback: ReadbackSchema
@@ -224,8 +224,8 @@ const ResourceDescriptorSchema = closed({
 const resourceDescriptorV1 = {
 	literal: RESOURCE_DESCRIPTOR_PROFILE,
 	literalNote: "carried as kind (unversioned) plus schemaVersion on the document; the /1 literal is the version marker signed-law pins",
-	rootShape: "descriptor",
-	shapes: { descriptor: ResourceDescriptorSchema }
+	rootDocument: "descriptor",
+	documents: { descriptor: ResourceDescriptorSchema }
 };
 //#endregion
 //#region src/infra/signed-law.v1.ts
@@ -437,7 +437,7 @@ const SignedLawBundleSchema = Type.Object({
 const signedLawV1 = {
 	literal: SIGNED_LAW_PROFILE,
 	literalNote: "carried as the domain member of the canonical signature input, not as a bundle field",
-	shapes: { bundle: SignedLawBundleSchema }
+	documents: { bundle: SignedLawBundleSchema }
 };
 //#endregion
 //#region src/infra/adoption-fact.v1.ts
@@ -465,8 +465,8 @@ const AdoptionFactSchema = closed({
 });
 const adoptionFactV1 = {
 	literal: ADOPTION_FACT_PROFILE,
-	rootShape: "fact",
-	shapes: { fact: AdoptionFactSchema }
+	rootDocument: "fact",
+	documents: { fact: AdoptionFactSchema }
 };
 //#endregion
 //#region src/registry/revocations.v1.ts
@@ -529,7 +529,7 @@ const RevocationPointerSchema = Type.Object({
 }, closed$1);
 const revocationsV1 = {
 	literal: REVOCATIONS_PROFILE,
-	shapes: {
+	documents: {
 		snapshot: RevocationSchema,
 		pointer: RevocationPointerSchema
 	}
@@ -579,7 +579,7 @@ const SignedBootstrapIntentSchema = closed({
 });
 const bootstrapV1 = {
 	literal: BOOTSTRAP_PROFILE,
-	shapes: {
+	documents: {
 		intent: BootstrapIntentSchema,
 		signed: SignedBootstrapIntentSchema
 	}
@@ -620,8 +620,8 @@ const SignedStandingOrderActivationSchema = closed({
 });
 const standingOrderActivationV1 = {
 	literal: STANDING_ORDER_ACTIVATION_PROFILE,
-	rootShape: "event",
-	shapes: {
+	rootDocument: "event",
+	documents: {
 		activation: StandingOrderActivationSchema,
 		signed: SignedStandingOrderActivationSchema,
 		event: StandingOrderActivationEventSchema
@@ -667,8 +667,8 @@ const OrdinaryAuthoritySchema = closed({
 });
 const ordinaryAuthorityV1 = {
 	literal: ORDINARY_AUTHORITY_PROFILE,
-	rootShape: "authority",
-	shapes: { authority: OrdinaryAuthoritySchema }
+	rootDocument: "authority",
+	documents: { authority: OrdinaryAuthoritySchema }
 };
 //#endregion
 //#region src/run/contract-versions.ts
@@ -730,8 +730,8 @@ const EventStreamSealSchema = closed({
 });
 const eventV1 = {
 	literal: EVENT_PROFILE,
-	rootShape: "event",
-	shapes: {
+	rootDocument: "event",
+	documents: {
 		event: EventSchema,
 		streamSeal: EventStreamSealSchema
 	}
@@ -761,8 +761,8 @@ const RunRequestSchema = closed({
 });
 const requestV1 = {
 	literal: REQUEST_PROFILE,
-	rootShape: "request",
-	shapes: { request: RunRequestSchema }
+	rootDocument: "request",
+	documents: { request: RunRequestSchema }
 };
 //#endregion
 //#region src/run/decision.v1.ts
@@ -779,8 +779,8 @@ const RunDecisionSchema = closed({
 });
 const decisionV1 = {
 	literal: DECISION_PROFILE,
-	rootShape: "decision",
-	shapes: { decision: RunDecisionSchema }
+	rootDocument: "decision",
+	documents: { decision: RunDecisionSchema }
 };
 //#endregion
 //#region src/run/run-summary.v1.ts
@@ -802,8 +802,8 @@ const RunSummarySchema = closed({
 });
 const runSummaryV1 = {
 	literal: RUN_SUMMARY_PROFILE,
-	rootShape: "summary",
-	shapes: { summary: RunSummarySchema }
+	rootDocument: "summary",
+	documents: { summary: RunSummarySchema }
 };
 //#endregion
 //#region src/core/refusal.v1.ts
@@ -834,8 +834,8 @@ const RefusalSchema = closed({
 });
 const refusalV1 = {
 	literal: REFUSAL_PROFILE,
-	rootShape: "refusal",
-	shapes: { refusal: RefusalSchema }
+	rootDocument: "refusal",
+	documents: { refusal: RefusalSchema }
 };
 //#endregion
 //#region src/core/refusal.v2.ts
@@ -876,17 +876,70 @@ const RefusalV2Schema = closed({
 });
 const refusalV2 = {
 	literal: REFUSAL_V2_PROFILE,
-	rootShape: "refusal",
-	shapes: { refusal: RefusalV2Schema }
+	rootDocument: "refusal",
+	documents: { refusal: RefusalV2Schema }
+};
+//#endregion
+//#region src/core/google-identity.v1.ts
+const GOOGLE_IDENTITY_PROFILE = "dsg.core.google-identity/1";
+const GOOGLE_SIGN_IN_ISSUER = "https://accounts.google.com";
+const GoogleAccountSubject = Type.String({ pattern: "^accounts\\.google\\.com:[0-9]+$" });
+const GoogleIdentitySchema = closed({
+	profile: Type.Literal(GOOGLE_IDENTITY_PROFILE),
+	issuer: Type.Literal(GOOGLE_SIGN_IN_ISSUER),
+	googleSubject: GoogleAccountSubject,
+	audience: NonEmptyString,
+	hostedDomain: Type.Optional(NonEmptyString),
+	email: Type.Optional(NonEmptyString)
+});
+const googleIdentityV1 = {
+	literal: GOOGLE_IDENTITY_PROFILE,
+	rootDocument: "googleIdentity",
+	documents: { googleIdentity: GoogleIdentitySchema }
+};
+//#endregion
+//#region src/core/refusal.v3.ts
+const REFUSAL_V3_PROFILE = "dsg.core.refusal/3";
+const RefusalCodeV3Schema = Type.Union([
+	Type.Literal("organization_absent"),
+	Type.Literal("organization_exists"),
+	Type.Literal("domain_mismatch"),
+	Type.Literal("suspended"),
+	Type.Literal("organization_disabled"),
+	Type.Literal("claims_missing"),
+	Type.Literal("not_qualified"),
+	Type.Literal("subject_conflict")
+]);
+const RefusalStageV3Schema = Type.Union([
+	Type.Literal("proxy"),
+	Type.Literal("provider"),
+	Type.Literal("identity_read"),
+	Type.Literal("plane"),
+	Type.Literal("console"),
+	Type.Literal("kernel"),
+	Type.Literal("record"),
+	Type.Literal("claim")
+]);
+const RefusalV3Schema = closed({
+	profile: Type.Literal(REFUSAL_V3_PROFILE),
+	code: RefusalCodeV3Schema,
+	sentence: NonEmptyString,
+	stage: Type.Optional(RefusalStageV3Schema),
+	correlationId: Type.Optional(NonEmptyString),
+	detail: Type.Optional(NonEmptyString)
+});
+const refusalV3 = {
+	literal: REFUSAL_V3_PROFILE,
+	rootDocument: "refusal",
+	documents: { refusal: RefusalV3Schema }
 };
 //#endregion
 //#region src/core/identity-binding.v1.ts
 const IDENTITY_BINDING_PROFILE = "dsg.core.identity-binding/1";
-const GOOGLE_SIGN_IN_ISSUER = "https://accounts.google.com";
 const IdentityBindingSchema = closed({
 	profile: Type.Literal(IDENTITY_BINDING_PROFILE),
 	principal: Orn,
-	issuer: Type.Literal(GOOGLE_SIGN_IN_ISSUER),
+	issuer: Type.Literal("https://accounts.google.com"),
 	subject: NonEmptyString,
 	decider: Orn,
 	boundAt: UtcSecond,
@@ -894,8 +947,8 @@ const IdentityBindingSchema = closed({
 });
 const identityBindingV1 = {
 	literal: IDENTITY_BINDING_PROFILE,
-	rootShape: "binding",
-	shapes: { binding: IdentityBindingSchema }
+	rootDocument: "binding",
+	documents: { binding: IdentityBindingSchema }
 };
 //#endregion
 //#region src/index.ts
@@ -912,6 +965,8 @@ const PROFILES = {
 	[runSummaryV1.literal]: runSummaryV1,
 	[refusalV1.literal]: refusalV1,
 	[refusalV2.literal]: refusalV2,
+	[refusalV3.literal]: refusalV3,
+	[googleIdentityV1.literal]: googleIdentityV1,
 	[identityBindingV1.literal]: identityBindingV1,
 	[signedLawV1.literal]: signedLawV1,
 	[resourceDescriptorV1.literal]: resourceDescriptorV1,
@@ -922,6 +977,6 @@ const PROFILES = {
 	[standingOrderActivationV1.literal]: standingOrderActivationV1
 };
 //#endregion
-export { ADOPTION_FACT_PROFILE, AcceptedSchema, AdoptionFactSchema, BOOTSTRAP_PROFILE, BootstrapActionSchema, BootstrapIntentSchema, DECISION_PROFILE, DISPATCH_CONSUME_PROFILE, DISPATCH_MAX_SKEW_SECONDS, DispatchConsumeRequestSchema, DispatchLeaseSchema, DispatchRefusalCodeSchema, DispatchRefusalSchema, EVENT_LINE_PREFIX, EVENT_PROFILE, EXECUTOR_PROTOCOL_VERSION, EventSchema, EventStreamSealSchema, ExecutionDocumentSchema, ExecutionLawSchema, ExecutionResourcesSchema, ExperimentRefSchema, GOOGLE_SIGN_IN_ISSUER, Hex64, IDENTITY_BINDING_PROFILE, IdentityBindingSchema, LIFECYCLE_KINDS, NonEmptyString, OPERATION_PROFILE, ORDINARY_AUTHORITY_PROFILE, OperationBeforeSchema, OperationCleanupSchema, OperationCostSchema, OperationEvidenceSchema, OperationExecutionSchema, OperationRequestSchema, OperationStatusSchema, OrdinaryAuthoritySchema, Orn, PRICE_PROFILE_REFERENCE, PROFILES, PROVIDER_PROTOCOL_VERSION, PersonReference, REFUSAL_PROFILE, REFUSAL_V2_PROFILE, REQUEST_PROFILE, RESOURCE_DESCRIPTOR_KIND, RESOURCE_DESCRIPTOR_PROFILE, REVOCATIONS_PROFILE, RUN_SUMMARY_PROFILE, ReadbackSchema, Reference, RefusalCodeSchema, RefusalCodeV2Schema, RefusalSchema, RefusalStageV2Schema, RefusalV2Schema, RequestCeilingsSchema, ResourceDescriptorSchema, RevocationPointerSchema, RevocationSchema, RunDecisionSchema, RunRequestSchema, RunSummaryDecisionSchema, RunSummarySchema, SCOPE_REFERENCE, SIGNED_LAW_DOMAIN, SIGNED_LAW_PROFILE, STANDING_ORDER_ACTIVATION_EVENT_KIND, STANDING_ORDER_ACTIVATION_PROFILE, SafeInt, SignedBootstrapIntentSchema, SignedLawBundleSchema, SignedStandingOrderActivationSchema, StandingOrderActivationEventSchema, StandingOrderActivationSchema, StandingOrderModeSchema, UtcSecond, closed };
+export { ADOPTION_FACT_PROFILE, AcceptedSchema, AdoptionFactSchema, BOOTSTRAP_PROFILE, BootstrapActionSchema, BootstrapIntentSchema, DECISION_PROFILE, DISPATCH_CONSUME_PROFILE, DISPATCH_MAX_SKEW_SECONDS, DispatchConsumeRequestSchema, DispatchLeaseSchema, DispatchRefusalCodeSchema, DispatchRefusalSchema, EVENT_LINE_PREFIX, EVENT_PROFILE, EXECUTOR_PROTOCOL_VERSION, EventSchema, EventStreamSealSchema, ExecutionDocumentSchema, ExecutionLawSchema, ExecutionResourcesSchema, ExperimentRefSchema, GOOGLE_IDENTITY_PROFILE, GOOGLE_SIGN_IN_ISSUER, GoogleIdentitySchema, Hex64, IDENTITY_BINDING_PROFILE, IdentityBindingSchema, LIFECYCLE_KINDS, NonEmptyString, OPERATION_PROFILE, ORDINARY_AUTHORITY_PROFILE, OperationBeforeSchema, OperationCleanupSchema, OperationCostSchema, OperationEvidenceSchema, OperationExecutionSchema, OperationRequestSchema, OperationStatusSchema, OrdinaryAuthoritySchema, Orn, PRICE_PROFILE_REFERENCE, PROFILES, PROVIDER_PROTOCOL_VERSION, PersonReference, REFUSAL_PROFILE, REFUSAL_V2_PROFILE, REFUSAL_V3_PROFILE, REQUEST_PROFILE, RESOURCE_DESCRIPTOR_KIND, RESOURCE_DESCRIPTOR_PROFILE, REVOCATIONS_PROFILE, RUN_SUMMARY_PROFILE, ReadbackSchema, Reference, RefusalCodeSchema, RefusalCodeV2Schema, RefusalCodeV3Schema, RefusalSchema, RefusalStageV2Schema, RefusalStageV3Schema, RefusalV2Schema, RefusalV3Schema, RequestCeilingsSchema, ResourceDescriptorSchema, RevocationPointerSchema, RevocationSchema, RunDecisionSchema, RunRequestSchema, RunSummaryDecisionSchema, RunSummarySchema, SCOPE_REFERENCE, SIGNED_LAW_DOMAIN, SIGNED_LAW_PROFILE, STANDING_ORDER_ACTIVATION_EVENT_KIND, STANDING_ORDER_ACTIVATION_PROFILE, SafeInt, SignedBootstrapIntentSchema, SignedLawBundleSchema, SignedStandingOrderActivationSchema, StandingOrderActivationEventSchema, StandingOrderActivationSchema, StandingOrderModeSchema, UtcSecond, closed };
 
 //# sourceMappingURL=index.mjs.map