@dynamicalsystems/idl 0.10.0 → 0.12.0

package/schema/dsg-organization-source-v2.json

@@ -0,0 +1,623 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/DynamicalSystemsGroup/dsg-idl/schema/dsg-organization-source-v2.json",
+  "title": "dsg.organization.source/2",
+  "$defs": {
+    "organization": {
+      "additionalProperties": false,
+      "type": "object",
+      "required": ["schemaVersion", "kind", "org", "space", "owner", "purpose", "profile"],
+      "properties": {
+        "schemaVersion": {
+          "const": 2,
+          "type": "number"
+        },
+        "kind": {
+          "const": "organization",
+          "type": "string"
+        },
+        "org": {
+          "minLength": 1,
+          "type": "string"
+        },
+        "space": {
+          "pattern": "^[a-z][a-z0-9-]*(?:\\.[a-z][a-z0-9-]*)+$",
+          "type": "string"
+        },
+        "owner": {
+          "additionalProperties": false,
+          "type": "object",
+          "required": ["responsibility"],
+          "properties": {
+            "responsibility": {
+              "minLength": 1,
+              "type": "string"
+            },
+            "qualification": {
+              "minLength": 1,
+              "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+              "type": "string"
+            },
+            "designation": {
+              "minLength": 1,
+              "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+              "type": "string"
+            }
+          }
+        },
+        "purpose": {
+          "minLength": 1,
+          "type": "string"
+        },
+        "profile": {
+          "additionalProperties": false,
+          "type": "object",
+          "required": ["document", "facts"],
+          "properties": {
+            "document": {
+              "minLength": 1,
+              "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+              "type": "string"
+            },
+            "facts": {
+              "additionalProperties": false,
+              "type": "object",
+              "patternProperties": {
+                "^[a-z][a-z0-9-]*$": {
+                  "minLength": 1,
+                  "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+                  "type": "string"
+                }
+              }
+            }
+          }
+        },
+        "identity": {
+          "additionalProperties": false,
+          "type": "object",
+          "properties": {
+            "principals": {
+              "minLength": 1,
+              "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+              "type": "string"
+            },
+            "qualifications": {
+              "minLength": 1,
+              "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+              "type": "string"
+            },
+            "designations": {
+              "minLength": 1,
+              "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+              "type": "string"
+            },
+            "eligibility": {
+              "minLength": 1,
+              "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+              "type": "string"
+            }
+          }
+        },
+        "policies": {
+          "additionalProperties": false,
+          "type": "object",
+          "required": ["sources"],
+          "properties": {
+            "sources": {
+              "minItems": 1,
+              "uniqueItems": true,
+              "type": "array",
+              "items": {
+                "minLength": 1,
+                "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+                "type": "string"
+              }
+            },
+            "release": {
+              "minLength": 1,
+              "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+              "type": "string"
+            }
+          }
+        },
+        "vocabulary": {
+          "minLength": 1,
+          "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+          "type": "string"
+        },
+        "admissions": {
+          "minLength": 1,
+          "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+          "type": "string"
+        },
+        "projects": {
+          "uniqueItems": true,
+          "type": "array",
+          "items": {
+            "minLength": 1,
+            "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+            "type": "string"
+          }
+        },
+        "capabilities": {
+          "uniqueItems": true,
+          "type": "array",
+          "items": {
+            "minLength": 1,
+            "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+            "type": "string"
+          }
+        },
+        "instructions": {
+          "type": "array",
+          "items": {
+            "additionalProperties": false,
+            "type": "object",
+            "required": ["layer", "source", "provenance"],
+            "properties": {
+              "layer": {
+                "anyOf": [
+                  {
+                    "const": "constitution",
+                    "type": "string"
+                  },
+                  {
+                    "const": "profile",
+                    "type": "string"
+                  },
+                  {
+                    "const": "project",
+                    "type": "string"
+                  }
+                ]
+              },
+              "source": {
+                "minLength": 1,
+                "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+                "type": "string"
+              },
+              "provenance": {
+                "minLength": 1,
+                "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+                "type": "string"
+              }
+            }
+          }
+        },
+        "documents": {
+          "uniqueItems": true,
+          "type": "array",
+          "items": {
+            "minLength": 1,
+            "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+            "type": "string"
+          }
+        },
+        "archive": {
+          "minLength": 1,
+          "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+          "type": "string"
+        },
+        "releases": {
+          "uniqueItems": true,
+          "type": "array",
+          "items": {
+            "minLength": 1,
+            "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+            "type": "string"
+          }
+        },
+        "deployment": {
+          "minLength": 1,
+          "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+          "type": "string"
+        },
+        "source": {
+          "additionalProperties": false,
+          "type": "object",
+          "required": ["repository", "ref", "subdirectory"],
+          "properties": {
+            "repository": {
+              "minLength": 1,
+              "type": "string"
+            },
+            "ref": {
+              "minLength": 1,
+              "type": "string"
+            },
+            "subdirectory": {
+              "minLength": 1,
+              "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+              "type": "string"
+            }
+          }
+        }
+      }
+    },
+    "workspaceProfile": {
+      "additionalProperties": false,
+      "type": "object",
+      "required": [
+        "schemaVersion",
+        "kind",
+        "id",
+        "profile",
+        "version",
+        "requirements",
+        "allowedCapabilityOrigins",
+        "handling",
+        "readinessChecks"
+      ],
+      "properties": {
+        "schemaVersion": {
+          "const": 1,
+          "type": "number"
+        },
+        "kind": {
+          "const": "workspace-profile",
+          "type": "string"
+        },
+        "id": {
+          "minLength": 1,
+          "type": "string"
+        },
+        "profile": {
+          "const": "dsg.organization.source/2",
+          "type": "string"
+        },
+        "version": {
+          "pattern": "^[1-9][0-9]*\\.[0-9]+\\.[0-9]+$",
+          "type": "string"
+        },
+        "requirements": {
+          "additionalProperties": false,
+          "type": "object",
+          "required": ["facts", "minimumProjects", "requiredCapabilities", "instructions"],
+          "properties": {
+            "facts": {
+              "uniqueItems": true,
+              "type": "array",
+              "items": {
+                "minLength": 1,
+                "type": "string"
+              }
+            },
+            "minimumProjects": {
+              "minimum": 0,
+              "maximum": 9007199254740991,
+              "type": "integer"
+            },
+            "requiredCapabilities": {
+              "uniqueItems": true,
+              "type": "array",
+              "items": {
+                "minLength": 1,
+                "type": "string"
+              }
+            },
+            "instructions": {
+              "type": "boolean"
+            }
+          }
+        },
+        "allowedCapabilityOrigins": {
+          "uniqueItems": true,
+          "type": "array",
+          "items": {
+            "anyOf": [
+              {
+                "const": "workspace",
+                "type": "string"
+              },
+              {
+                "const": "official",
+                "type": "string"
+              },
+              {
+                "const": "curated",
+                "type": "string"
+              }
+            ]
+          }
+        },
+        "handling": {
+          "additionalProperties": false,
+          "type": "object",
+          "required": ["required"],
+          "properties": {
+            "required": {
+              "type": "boolean"
+            }
+          }
+        },
+        "readinessChecks": {
+          "uniqueItems": true,
+          "type": "array",
+          "items": {
+            "minLength": 1,
+            "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+            "type": "string"
+          }
+        }
+      }
+    },
+    "projectMembership": {
+      "additionalProperties": false,
+      "type": "object",
+      "required": [
+        "schemaVersion",
+        "kind",
+        "id",
+        "mode",
+        "source",
+        "role",
+        "contract",
+        "handling",
+        "state"
+      ],
+      "properties": {
+        "schemaVersion": {
+          "const": 1,
+          "type": "number"
+        },
+        "kind": {
+          "const": "project-membership",
+          "type": "string"
+        },
+        "id": {
+          "minLength": 1,
+          "type": "string"
+        },
+        "mode": {
+          "anyOf": [
+            {
+              "const": "managed",
+              "type": "string"
+            },
+            {
+              "const": "independent",
+              "type": "string"
+            }
+          ]
+        },
+        "source": {
+          "additionalProperties": false,
+          "type": "object",
+          "required": ["repository", "revision"],
+          "properties": {
+            "repository": {
+              "minLength": 1,
+              "type": "string"
+            },
+            "revision": {
+              "pattern": "^(?:[0-9a-f]{40}|[0-9a-f]{64})$",
+              "type": "string"
+            }
+          }
+        },
+        "role": {
+          "minLength": 1,
+          "type": "string"
+        },
+        "contract": {
+          "minLength": 1,
+          "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+          "type": "string"
+        },
+        "handling": {
+          "minLength": 1,
+          "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+          "type": "string"
+        },
+        "state": {
+          "anyOf": [
+            {
+              "const": "active",
+              "type": "string"
+            },
+            {
+              "const": "suspended",
+              "type": "string"
+            },
+            {
+              "const": "removed",
+              "type": "string"
+            }
+          ]
+        }
+      }
+    },
+    "capabilitySelection": {
+      "additionalProperties": false,
+      "type": "object",
+      "required": [
+        "schemaVersion",
+        "kind",
+        "id",
+        "declaration",
+        "components",
+        "origin",
+        "dependencyLock",
+        "requiredDispositions"
+      ],
+      "properties": {
+        "schemaVersion": {
+          "const": 1,
+          "type": "number"
+        },
+        "kind": {
+          "const": "capability-selection",
+          "type": "string"
+        },
+        "id": {
+          "minLength": 1,
+          "type": "string"
+        },
+        "declaration": {
+          "minLength": 1,
+          "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+          "type": "string"
+        },
+        "components": {
+          "uniqueItems": true,
+          "type": "array",
+          "items": {
+            "additionalProperties": false,
+            "type": "object",
+            "required": ["id", "reference"],
+            "properties": {
+              "id": {
+                "minLength": 1,
+                "type": "string"
+              },
+              "reference": {
+                "minLength": 1,
+                "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+                "type": "string"
+              }
+            }
+          }
+        },
+        "origin": {
+          "anyOf": [
+            {
+              "const": "workspace",
+              "type": "string"
+            },
+            {
+              "const": "official",
+              "type": "string"
+            },
+            {
+              "const": "curated",
+              "type": "string"
+            }
+          ]
+        },
+        "dependencyLock": {
+          "minLength": 1,
+          "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+          "type": "string"
+        },
+        "requiredDispositions": {
+          "uniqueItems": true,
+          "type": "array",
+          "items": {
+            "minLength": 1,
+            "type": "string"
+          }
+        }
+      }
+    },
+    "releaseDeclaration": {
+      "additionalProperties": false,
+      "type": "object",
+      "required": ["schemaVersion", "kind", "name", "selection", "members", "predecessors"],
+      "properties": {
+        "schemaVersion": {
+          "const": 1,
+          "type": "number"
+        },
+        "kind": {
+          "const": "release-declaration",
+          "type": "string"
+        },
+        "name": {
+          "minLength": 1,
+          "type": "string"
+        },
+        "selection": {
+          "additionalProperties": false,
+          "type": "object",
+          "required": ["projects", "capabilities"],
+          "properties": {
+            "projects": {
+              "uniqueItems": true,
+              "type": "array",
+              "items": {
+                "minLength": 1,
+                "type": "string"
+              }
+            },
+            "capabilities": {
+              "uniqueItems": true,
+              "type": "array",
+              "items": {
+                "minLength": 1,
+                "type": "string"
+              }
+            }
+          }
+        },
+        "members": {
+          "type": "array",
+          "items": {
+            "additionalProperties": false,
+            "type": "object",
+            "required": ["key", "artifact", "kind", "required", "acceptableDispositions"],
+            "properties": {
+              "key": {
+                "minLength": 1,
+                "type": "string"
+              },
+              "artifact": {
+                "minLength": 1,
+                "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\).+$",
+                "type": "string"
+              },
+              "kind": {
+                "anyOf": [
+                  {
+                    "const": "policy",
+                    "type": "string"
+                  },
+                  {
+                    "const": "capability-admission",
+                    "type": "string"
+                  },
+                  {
+                    "const": "workflow-publication",
+                    "type": "string"
+                  },
+                  {
+                    "const": "contract-check",
+                    "type": "string"
+                  },
+                  {
+                    "const": "target-readiness",
+                    "type": "string"
+                  },
+                  {
+                    "const": "setup-condition",
+                    "type": "string"
+                  }
+                ]
+              },
+              "required": {
+                "type": "boolean"
+              },
+              "acceptableDispositions": {
+                "minItems": 1,
+                "uniqueItems": true,
+                "type": "array",
+                "items": {
+                  "minLength": 1,
+                  "type": "string"
+                }
+              }
+            }
+          }
+        },
+        "predecessors": {
+          "uniqueItems": true,
+          "type": "array",
+          "items": {
+            "minLength": 1,
+            "type": "string"
+          }
+        }
+      }
+    }
+  },
+  "$ref": "#/$defs/organization"
+}

package/src/core/google-identity.v1.ts

@@ -0,0 +1,42 @@
+// dsg.core.google-identity/1
+// Owner: dsg-kernel. A verified Google identity, as the kernel sees it:
+// the Google account number is the only identity key and the email
+// address is a display label. The kernel carries googleSubject in the
+// shape "accounts.google.com:<digits>" and never compares email for
+// identity after the claim.
+//
+// This profile ships beside dsg.core.identity-binding/1, which remains
+// the frozen shape of the detached personal-key binding path. The real
+// authority is Google-attested, so a separate profile names what a
+// verified identity looks like on the wire today.
+//
+// googleSubject is required, email is optional. hostedDomain is set
+// when the verified token carries the hd claim; absent is its own
+// meaning, not the same as a missing value. audience is the client id
+// the token was minted for and is required.
+import { type Static, Type } from "@sinclair/typebox";
+import { closed, NonEmptyString, type ProfileEntry } from "../primitives.js";
+
+export const GOOGLE_IDENTITY_PROFILE = "dsg.core.google-identity/1" as const;
+export const GOOGLE_SIGN_IN_ISSUER = "https://accounts.google.com" as const;
+
+const GoogleAccountSubject = Type.String({
+  pattern: "^accounts\\.google\\.com:[0-9]+$",
+});
+
+const GoogleIdentitySchemaValue = closed({
+  profile: Type.Literal(GOOGLE_IDENTITY_PROFILE),
+  issuer: Type.Literal(GOOGLE_SIGN_IN_ISSUER),
+  googleSubject: GoogleAccountSubject,
+  audience: NonEmptyString,
+  hostedDomain: Type.Optional(NonEmptyString),
+  email: Type.Optional(NonEmptyString),
+});
+export const GoogleIdentitySchema: typeof GoogleIdentitySchemaValue = GoogleIdentitySchemaValue;
+export type GoogleIdentity = Static<typeof GoogleIdentitySchema>;
+
+export const googleIdentityV1: ProfileEntry = {
+  literal: GOOGLE_IDENTITY_PROFILE,
+  rootDocument: "googleIdentity",
+  documents: { googleIdentity: GoogleIdentitySchema },
+};

package/src/core/identity-binding.v1.ts

@@ -21,6 +21,6 @@ export type IdentityBinding = Static<typeof IdentityBindingSchema>;
 
 export const identityBindingV1: ProfileEntry = {
   literal: IDENTITY_BINDING_PROFILE,
-  rootShape: "binding",
-  shapes: { binding: IdentityBindingSchema },
+  rootDocument: "binding",
+  documents: { binding: IdentityBindingSchema },
 };

package/src/core/refusal.v1.ts

@@ -40,6 +40,6 @@ export type Refusal = Static<typeof RefusalSchema>;
 
 export const refusalV1: ProfileEntry = {
   literal: REFUSAL_PROFILE,
-  rootShape: "refusal",
-  shapes: { refusal: RefusalSchema },
+  rootDocument: "refusal",
+  documents: { refusal: RefusalSchema },
 };

package/src/core/refusal.v2.ts

@@ -61,6 +61,6 @@ export type RefusalV2 = Static<typeof RefusalV2Schema>;
 
 export const refusalV2: ProfileEntry = {
   literal: REFUSAL_V2_PROFILE,
-  rootShape: "refusal",
-  shapes: { refusal: RefusalV2Schema },
+  rootDocument: "refusal",
+  documents: { refusal: RefusalV2Schema },
 };