@dynamicalsystems/idl 0.10.0 → 0.12.0

package/dist/index.mjs

@@ -99,7 +99,7 @@ const DispatchRefusalSchema = closed({
 });
 const dispatchConsumeV1 = {
 	literal: DISPATCH_CONSUME_PROFILE,
-	shapes: {
+	documents: {
 		request: DispatchConsumeRequestSchema,
 		lease: DispatchLeaseSchema,
 		refusal: DispatchRefusalSchema
@@ -186,7 +186,7 @@ const ReadbackSchema = closed({
 const OperationStatusSchema = ReadbackSchema;
 const operationV1 = {
 	literal: OPERATION_PROFILE,
-	shapes: {
+	documents: {
 		request: OperationRequestSchema,
 		accepted: AcceptedSchema,
 		readback: ReadbackSchema
@@ -224,8 +224,8 @@ const ResourceDescriptorSchema = closed({
 const resourceDescriptorV1 = {
 	literal: RESOURCE_DESCRIPTOR_PROFILE,
 	literalNote: "carried as kind (unversioned) plus schemaVersion on the document; the /1 literal is the version marker signed-law pins",
-	rootShape: "descriptor",
-	shapes: { descriptor: ResourceDescriptorSchema }
+	rootDocument: "descriptor",
+	documents: { descriptor: ResourceDescriptorSchema }
 };
 //#endregion
 //#region src/infra/signed-law.v1.ts
@@ -437,7 +437,7 @@ const SignedLawBundleSchema = Type.Object({
 const signedLawV1 = {
 	literal: SIGNED_LAW_PROFILE,
 	literalNote: "carried as the domain member of the canonical signature input, not as a bundle field",
-	shapes: { bundle: SignedLawBundleSchema }
+	documents: { bundle: SignedLawBundleSchema }
 };
 //#endregion
 //#region src/infra/adoption-fact.v1.ts
@@ -465,8 +465,8 @@ const AdoptionFactSchema = closed({
 });
 const adoptionFactV1 = {
 	literal: ADOPTION_FACT_PROFILE,
-	rootShape: "fact",
-	shapes: { fact: AdoptionFactSchema }
+	rootDocument: "fact",
+	documents: { fact: AdoptionFactSchema }
 };
 //#endregion
 //#region src/registry/revocations.v1.ts
@@ -529,7 +529,7 @@ const RevocationPointerSchema = Type.Object({
 }, closed$1);
 const revocationsV1 = {
 	literal: REVOCATIONS_PROFILE,
-	shapes: {
+	documents: {
 		snapshot: RevocationSchema,
 		pointer: RevocationPointerSchema
 	}
@@ -579,7 +579,7 @@ const SignedBootstrapIntentSchema = closed({
 });
 const bootstrapV1 = {
 	literal: BOOTSTRAP_PROFILE,
-	shapes: {
+	documents: {
 		intent: BootstrapIntentSchema,
 		signed: SignedBootstrapIntentSchema
 	}
@@ -620,8 +620,8 @@ const SignedStandingOrderActivationSchema = closed({
 });
 const standingOrderActivationV1 = {
 	literal: STANDING_ORDER_ACTIVATION_PROFILE,
-	rootShape: "event",
-	shapes: {
+	rootDocument: "event",
+	documents: {
 		activation: StandingOrderActivationSchema,
 		signed: SignedStandingOrderActivationSchema,
 		event: StandingOrderActivationEventSchema
@@ -667,8 +667,8 @@ const OrdinaryAuthoritySchema = closed({
 });
 const ordinaryAuthorityV1 = {
 	literal: ORDINARY_AUTHORITY_PROFILE,
-	rootShape: "authority",
-	shapes: { authority: OrdinaryAuthoritySchema }
+	rootDocument: "authority",
+	documents: { authority: OrdinaryAuthoritySchema }
 };
 //#endregion
 //#region src/run/contract-versions.ts
@@ -730,8 +730,8 @@ const EventStreamSealSchema = closed({
 });
 const eventV1 = {
 	literal: EVENT_PROFILE,
-	rootShape: "event",
-	shapes: {
+	rootDocument: "event",
+	documents: {
 		event: EventSchema,
 		streamSeal: EventStreamSealSchema
 	}
@@ -761,8 +761,8 @@ const RunRequestSchema = closed({
 });
 const requestV1 = {
 	literal: REQUEST_PROFILE,
-	rootShape: "request",
-	shapes: { request: RunRequestSchema }
+	rootDocument: "request",
+	documents: { request: RunRequestSchema }
 };
 //#endregion
 //#region src/run/decision.v1.ts
@@ -779,8 +779,8 @@ const RunDecisionSchema = closed({
 });
 const decisionV1 = {
 	literal: DECISION_PROFILE,
-	rootShape: "decision",
-	shapes: { decision: RunDecisionSchema }
+	rootDocument: "decision",
+	documents: { decision: RunDecisionSchema }
 };
 //#endregion
 //#region src/run/run-summary.v1.ts
@@ -802,8 +802,8 @@ const RunSummarySchema = closed({
 });
 const runSummaryV1 = {
 	literal: RUN_SUMMARY_PROFILE,
-	rootShape: "summary",
-	shapes: { summary: RunSummarySchema }
+	rootDocument: "summary",
+	documents: { summary: RunSummarySchema }
 };
 //#endregion
 //#region src/core/refusal.v1.ts
@@ -834,8 +834,8 @@ const RefusalSchema = closed({
 });
 const refusalV1 = {
 	literal: REFUSAL_PROFILE,
-	rootShape: "refusal",
-	shapes: { refusal: RefusalSchema }
+	rootDocument: "refusal",
+	documents: { refusal: RefusalSchema }
 };
 //#endregion
 //#region src/core/refusal.v2.ts
@@ -876,17 +876,70 @@ const RefusalV2Schema = closed({
 });
 const refusalV2 = {
 	literal: REFUSAL_V2_PROFILE,
-	rootShape: "refusal",
-	shapes: { refusal: RefusalV2Schema }
+	rootDocument: "refusal",
+	documents: { refusal: RefusalV2Schema }
+};
+//#endregion
+//#region src/core/google-identity.v1.ts
+const GOOGLE_IDENTITY_PROFILE = "dsg.core.google-identity/1";
+const GOOGLE_SIGN_IN_ISSUER = "https://accounts.google.com";
+const GoogleAccountSubject = Type.String({ pattern: "^accounts\\.google\\.com:[0-9]+$" });
+const GoogleIdentitySchema = closed({
+	profile: Type.Literal(GOOGLE_IDENTITY_PROFILE),
+	issuer: Type.Literal(GOOGLE_SIGN_IN_ISSUER),
+	googleSubject: GoogleAccountSubject,
+	audience: NonEmptyString,
+	hostedDomain: Type.Optional(NonEmptyString),
+	email: Type.Optional(NonEmptyString)
+});
+const googleIdentityV1 = {
+	literal: GOOGLE_IDENTITY_PROFILE,
+	rootDocument: "googleIdentity",
+	documents: { googleIdentity: GoogleIdentitySchema }
+};
+//#endregion
+//#region src/core/refusal.v3.ts
+const REFUSAL_V3_PROFILE = "dsg.core.refusal/3";
+const RefusalCodeV3Schema = Type.Union([
+	Type.Literal("organization_absent"),
+	Type.Literal("organization_exists"),
+	Type.Literal("domain_mismatch"),
+	Type.Literal("suspended"),
+	Type.Literal("organization_disabled"),
+	Type.Literal("claims_missing"),
+	Type.Literal("not_qualified"),
+	Type.Literal("subject_conflict")
+]);
+const RefusalStageV3Schema = Type.Union([
+	Type.Literal("proxy"),
+	Type.Literal("provider"),
+	Type.Literal("identity_read"),
+	Type.Literal("plane"),
+	Type.Literal("console"),
+	Type.Literal("kernel"),
+	Type.Literal("record"),
+	Type.Literal("claim")
+]);
+const RefusalV3Schema = closed({
+	profile: Type.Literal(REFUSAL_V3_PROFILE),
+	code: RefusalCodeV3Schema,
+	sentence: NonEmptyString,
+	stage: Type.Optional(RefusalStageV3Schema),
+	correlationId: Type.Optional(NonEmptyString),
+	detail: Type.Optional(NonEmptyString)
+});
+const refusalV3 = {
+	literal: REFUSAL_V3_PROFILE,
+	rootDocument: "refusal",
+	documents: { refusal: RefusalV3Schema }
 };
 //#endregion
 //#region src/core/identity-binding.v1.ts
 const IDENTITY_BINDING_PROFILE = "dsg.core.identity-binding/1";
-const GOOGLE_SIGN_IN_ISSUER = "https://accounts.google.com";
 const IdentityBindingSchema = closed({
 	profile: Type.Literal(IDENTITY_BINDING_PROFILE),
 	principal: Orn,
-	issuer: Type.Literal(GOOGLE_SIGN_IN_ISSUER),
+	issuer: Type.Literal("https://accounts.google.com"),
 	subject: NonEmptyString,
 	decider: Orn,
 	boundAt: UtcSecond,
@@ -894,8 +947,197 @@ const IdentityBindingSchema = closed({
 });
 const identityBindingV1 = {
 	literal: IDENTITY_BINDING_PROFILE,
-	rootShape: "binding",
-	shapes: { binding: IdentityBindingSchema }
+	rootDocument: "binding",
+	documents: { binding: IdentityBindingSchema }
+};
+//#endregion
+//#region src/organization/source.v2.ts
+const ORGANIZATION_SOURCE_PROFILE = "dsg.organization.source/2";
+const OrganizationSpaceSchema = Type.String({ pattern: "^[a-z][a-z0-9-]*(?:\\.[a-z][a-z0-9-]*)+$" });
+/** A path interpreted relative to the organization source root. Filesystem
+* containment and symlink checks belong to the consumer that opens it. */
+const OrganizationDocumentPathSchema = Type.String({
+	minLength: 1,
+	pattern: "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$"
+});
+const OrganizationSourceLocationSchema = closed({
+	repository: NonEmptyString,
+	ref: NonEmptyString,
+	subdirectory: OrganizationDocumentPathSchema
+});
+const OrganizationSourceLocationV1Schema = closed({
+	repository: Type.String(),
+	ref: Type.String(),
+	subdirectory: Type.String()
+});
+const ProjectSourceSchema = closed({
+	repository: NonEmptyString,
+	revision: Type.String({ pattern: "^(?:[0-9a-f]{40}|[0-9a-f]{64})$" })
+});
+const UniquePaths = () => Type.Array(OrganizationDocumentPathSchema, { uniqueItems: true });
+const UniqueNames = () => Type.Array(NonEmptyString, { uniqueItems: true });
+/** Frozen compatibility shape. Version one is loaded only through the explicit
+* compatibility path; it is never silently reinterpreted as version two. */
+const OrganizationRootV1Schema = closed({
+	schemaVersion: Type.Literal(1),
+	kind: Type.Literal("organization"),
+	org: NonEmptyString,
+	space: OrganizationSpaceSchema,
+	identity: closed({
+		principals: NonEmptyString,
+		qualifications: NonEmptyString,
+		designations: NonEmptyString
+	}),
+	policies: NonEmptyString,
+	vocabulary: NonEmptyString,
+	admissions: NonEmptyString,
+	deployment: NonEmptyString,
+	source: Type.Optional(OrganizationSourceLocationV1Schema)
+});
+const OrganizationInstructionSchema = closed({
+	layer: Type.Union([
+		Type.Literal("constitution"),
+		Type.Literal("profile"),
+		Type.Literal("project")
+	]),
+	source: OrganizationDocumentPathSchema,
+	provenance: OrganizationDocumentPathSchema
+});
+/** The generic root requires only stable identity, accountability, purpose and
+* a selected profile. Optional declaration groups become required only when
+* that profile says so. */
+const OrganizationRootSchema = closed({
+	schemaVersion: Type.Literal(2),
+	kind: Type.Literal("organization"),
+	org: NonEmptyString,
+	space: OrganizationSpaceSchema,
+	owner: closed({
+		responsibility: NonEmptyString,
+		qualification: Type.Optional(OrganizationDocumentPathSchema),
+		designation: Type.Optional(OrganizationDocumentPathSchema)
+	}),
+	purpose: NonEmptyString,
+	profile: closed({
+		document: OrganizationDocumentPathSchema,
+		facts: Type.Record(Type.String({ pattern: "^[a-z][a-z0-9-]*$" }), OrganizationDocumentPathSchema, { additionalProperties: false })
+	}),
+	identity: Type.Optional(closed({
+		principals: Type.Optional(OrganizationDocumentPathSchema),
+		qualifications: Type.Optional(OrganizationDocumentPathSchema),
+		designations: Type.Optional(OrganizationDocumentPathSchema),
+		eligibility: Type.Optional(OrganizationDocumentPathSchema)
+	})),
+	policies: Type.Optional(closed({
+		sources: Type.Array(OrganizationDocumentPathSchema, {
+			minItems: 1,
+			uniqueItems: true
+		}),
+		release: Type.Optional(OrganizationDocumentPathSchema)
+	})),
+	vocabulary: Type.Optional(OrganizationDocumentPathSchema),
+	admissions: Type.Optional(OrganizationDocumentPathSchema),
+	projects: Type.Optional(UniquePaths()),
+	capabilities: Type.Optional(UniquePaths()),
+	instructions: Type.Optional(Type.Array(OrganizationInstructionSchema)),
+	documents: Type.Optional(UniquePaths()),
+	archive: Type.Optional(OrganizationDocumentPathSchema),
+	releases: Type.Optional(UniquePaths()),
+	deployment: Type.Optional(OrganizationDocumentPathSchema),
+	source: Type.Optional(OrganizationSourceLocationSchema)
+});
+const WorkspaceProfileSchema = closed({
+	schemaVersion: Type.Literal(1),
+	kind: Type.Literal("workspace-profile"),
+	id: NonEmptyString,
+	profile: Type.Literal(ORGANIZATION_SOURCE_PROFILE),
+	version: Type.String({ pattern: "^[1-9][0-9]*\\.[0-9]+\\.[0-9]+$" }),
+	requirements: closed({
+		facts: UniqueNames(),
+		minimumProjects: SafeInt,
+		requiredCapabilities: UniqueNames(),
+		instructions: Type.Boolean()
+	}),
+	allowedCapabilityOrigins: Type.Array(Type.Union([
+		Type.Literal("workspace"),
+		Type.Literal("official"),
+		Type.Literal("curated")
+	]), { uniqueItems: true }),
+	handling: closed({ required: Type.Boolean() }),
+	readinessChecks: UniquePaths()
+});
+const ProjectMembershipSchema = closed({
+	schemaVersion: Type.Literal(1),
+	kind: Type.Literal("project-membership"),
+	id: NonEmptyString,
+	mode: Type.Union([Type.Literal("managed"), Type.Literal("independent")]),
+	source: ProjectSourceSchema,
+	role: NonEmptyString,
+	contract: OrganizationDocumentPathSchema,
+	handling: OrganizationDocumentPathSchema,
+	state: Type.Union([
+		Type.Literal("active"),
+		Type.Literal("suspended"),
+		Type.Literal("removed")
+	])
+});
+const CapabilityOriginSchema = Type.Union([
+	Type.Literal("workspace"),
+	Type.Literal("official"),
+	Type.Literal("curated")
+]);
+/** `declaration` and component `reference` point to their owning existing
+* capability/Definition formats; this schema does not duplicate them. */
+const CapabilitySelectionSchema = closed({
+	schemaVersion: Type.Literal(1),
+	kind: Type.Literal("capability-selection"),
+	id: NonEmptyString,
+	declaration: OrganizationDocumentPathSchema,
+	components: Type.Array(closed({
+		id: NonEmptyString,
+		reference: OrganizationDocumentPathSchema
+	}), { uniqueItems: true }),
+	origin: CapabilityOriginSchema,
+	dependencyLock: OrganizationDocumentPathSchema,
+	requiredDispositions: UniqueNames()
+});
+const ReleaseMemberKindSchema = Type.Union([
+	Type.Literal("policy"),
+	Type.Literal("capability-admission"),
+	Type.Literal("workflow-publication"),
+	Type.Literal("contract-check"),
+	Type.Literal("target-readiness"),
+	Type.Literal("setup-condition")
+]);
+const ReleaseDeclarationSchema = closed({
+	schemaVersion: Type.Literal(1),
+	kind: Type.Literal("release-declaration"),
+	name: NonEmptyString,
+	selection: closed({
+		projects: UniqueNames(),
+		capabilities: UniqueNames()
+	}),
+	members: Type.Array(closed({
+		key: NonEmptyString,
+		artifact: OrganizationDocumentPathSchema,
+		kind: ReleaseMemberKindSchema,
+		required: Type.Boolean(),
+		acceptableDispositions: Type.Array(NonEmptyString, {
+			minItems: 1,
+			uniqueItems: true
+		})
+	})),
+	predecessors: UniqueNames()
+});
+const organizationSourceV2 = {
+	literal: ORGANIZATION_SOURCE_PROFILE,
+	rootDocument: "organization",
+	documents: {
+		organization: OrganizationRootSchema,
+		workspaceProfile: WorkspaceProfileSchema,
+		projectMembership: ProjectMembershipSchema,
+		capabilitySelection: CapabilitySelectionSchema,
+		releaseDeclaration: ReleaseDeclarationSchema
+	}
 };
 //#endregion
 //#region src/index.ts
@@ -912,6 +1154,8 @@ const PROFILES = {
 	[runSummaryV1.literal]: runSummaryV1,
 	[refusalV1.literal]: refusalV1,
 	[refusalV2.literal]: refusalV2,
+	[refusalV3.literal]: refusalV3,
+	[googleIdentityV1.literal]: googleIdentityV1,
 	[identityBindingV1.literal]: identityBindingV1,
 	[signedLawV1.literal]: signedLawV1,
 	[resourceDescriptorV1.literal]: resourceDescriptorV1,
@@ -919,9 +1163,10 @@ const PROFILES = {
 	[revocationsV1.literal]: revocationsV1,
 	[bootstrapV1.literal]: bootstrapV1,
 	[ordinaryAuthorityV1.literal]: ordinaryAuthorityV1,
-	[standingOrderActivationV1.literal]: standingOrderActivationV1
+	[standingOrderActivationV1.literal]: standingOrderActivationV1,
+	[organizationSourceV2.literal]: organizationSourceV2
 };
 //#endregion
-export { ADOPTION_FACT_PROFILE, AcceptedSchema, AdoptionFactSchema, BOOTSTRAP_PROFILE, BootstrapActionSchema, BootstrapIntentSchema, DECISION_PROFILE, DISPATCH_CONSUME_PROFILE, DISPATCH_MAX_SKEW_SECONDS, DispatchConsumeRequestSchema, DispatchLeaseSchema, DispatchRefusalCodeSchema, DispatchRefusalSchema, EVENT_LINE_PREFIX, EVENT_PROFILE, EXECUTOR_PROTOCOL_VERSION, EventSchema, EventStreamSealSchema, ExecutionDocumentSchema, ExecutionLawSchema, ExecutionResourcesSchema, ExperimentRefSchema, GOOGLE_SIGN_IN_ISSUER, Hex64, IDENTITY_BINDING_PROFILE, IdentityBindingSchema, LIFECYCLE_KINDS, NonEmptyString, OPERATION_PROFILE, ORDINARY_AUTHORITY_PROFILE, OperationBeforeSchema, OperationCleanupSchema, OperationCostSchema, OperationEvidenceSchema, OperationExecutionSchema, OperationRequestSchema, OperationStatusSchema, OrdinaryAuthoritySchema, Orn, PRICE_PROFILE_REFERENCE, PROFILES, PROVIDER_PROTOCOL_VERSION, PersonReference, REFUSAL_PROFILE, REFUSAL_V2_PROFILE, REQUEST_PROFILE, RESOURCE_DESCRIPTOR_KIND, RESOURCE_DESCRIPTOR_PROFILE, REVOCATIONS_PROFILE, RUN_SUMMARY_PROFILE, ReadbackSchema, Reference, RefusalCodeSchema, RefusalCodeV2Schema, RefusalSchema, RefusalStageV2Schema, RefusalV2Schema, RequestCeilingsSchema, ResourceDescriptorSchema, RevocationPointerSchema, RevocationSchema, RunDecisionSchema, RunRequestSchema, RunSummaryDecisionSchema, RunSummarySchema, SCOPE_REFERENCE, SIGNED_LAW_DOMAIN, SIGNED_LAW_PROFILE, STANDING_ORDER_ACTIVATION_EVENT_KIND, STANDING_ORDER_ACTIVATION_PROFILE, SafeInt, SignedBootstrapIntentSchema, SignedLawBundleSchema, SignedStandingOrderActivationSchema, StandingOrderActivationEventSchema, StandingOrderActivationSchema, StandingOrderModeSchema, UtcSecond, closed };
+export { ADOPTION_FACT_PROFILE, AcceptedSchema, AdoptionFactSchema, BOOTSTRAP_PROFILE, BootstrapActionSchema, BootstrapIntentSchema, CapabilityOriginSchema, CapabilitySelectionSchema, DECISION_PROFILE, DISPATCH_CONSUME_PROFILE, DISPATCH_MAX_SKEW_SECONDS, DispatchConsumeRequestSchema, DispatchLeaseSchema, DispatchRefusalCodeSchema, DispatchRefusalSchema, EVENT_LINE_PREFIX, EVENT_PROFILE, EXECUTOR_PROTOCOL_VERSION, EventSchema, EventStreamSealSchema, ExecutionDocumentSchema, ExecutionLawSchema, ExecutionResourcesSchema, ExperimentRefSchema, GOOGLE_IDENTITY_PROFILE, GOOGLE_SIGN_IN_ISSUER, GoogleIdentitySchema, Hex64, IDENTITY_BINDING_PROFILE, IdentityBindingSchema, LIFECYCLE_KINDS, NonEmptyString, OPERATION_PROFILE, ORDINARY_AUTHORITY_PROFILE, ORGANIZATION_SOURCE_PROFILE, OperationBeforeSchema, OperationCleanupSchema, OperationCostSchema, OperationEvidenceSchema, OperationExecutionSchema, OperationRequestSchema, OperationStatusSchema, OrdinaryAuthoritySchema, OrganizationDocumentPathSchema, OrganizationInstructionSchema, OrganizationRootSchema, OrganizationRootV1Schema, OrganizationSourceLocationSchema, OrganizationSpaceSchema, Orn, PRICE_PROFILE_REFERENCE, PROFILES, PROVIDER_PROTOCOL_VERSION, PersonReference, ProjectMembershipSchema, ProjectSourceSchema, REFUSAL_PROFILE, REFUSAL_V2_PROFILE, REFUSAL_V3_PROFILE, REQUEST_PROFILE, RESOURCE_DESCRIPTOR_KIND, RESOURCE_DESCRIPTOR_PROFILE, REVOCATIONS_PROFILE, RUN_SUMMARY_PROFILE, ReadbackSchema, Reference, RefusalCodeSchema, RefusalCodeV2Schema, RefusalCodeV3Schema, RefusalSchema, RefusalStageV2Schema, RefusalStageV3Schema, RefusalV2Schema, RefusalV3Schema, ReleaseDeclarationSchema, ReleaseMemberKindSchema, RequestCeilingsSchema, ResourceDescriptorSchema, RevocationPointerSchema, RevocationSchema, RunDecisionSchema, RunRequestSchema, RunSummaryDecisionSchema, RunSummarySchema, SCOPE_REFERENCE, SIGNED_LAW_DOMAIN, SIGNED_LAW_PROFILE, STANDING_ORDER_ACTIVATION_EVENT_KIND, STANDING_ORDER_ACTIVATION_PROFILE, SafeInt, SignedBootstrapIntentSchema, SignedLawBundleSchema, SignedStandingOrderActivationSchema, StandingOrderActivationEventSchema, StandingOrderActivationSchema, StandingOrderModeSchema, UtcSecond, WorkspaceProfileSchema, closed };
 
 //# sourceMappingURL=index.mjs.map