@enbox/gitd 0.0.1

package/dist/esm/patches.js

@@ -0,0 +1,136 @@
+/**
+ * Forge Patches Protocol — pull requests, code review, and merge tracking.
+ *
+ * A "patch" is a proposed change (equivalent to a GitHub PR). Each patch
+ * tracks revisions (force-pushes), reviews (approve/reject/comment),
+ * inline review comments, status transitions, and merge results.
+ *
+ * Composes with the Forge Repo protocol via `uses` for role-based authorization.
+ *
+ * @module
+ */
+import { defineProtocol } from '@enbox/api';
+// ---------------------------------------------------------------------------
+// Protocol definition
+// ---------------------------------------------------------------------------
+export const ForgePatchesDefinition = {
+    protocol: 'https://enbox.org/protocols/forge/patches',
+    published: true,
+    uses: {
+        repo: 'https://enbox.org/protocols/forge/repo',
+    },
+    types: {
+        patch: {
+            schema: 'https://enbox.org/schemas/forge/patch',
+            dataFormats: ['application/json'],
+        },
+        revision: {
+            schema: 'https://enbox.org/schemas/forge/revision',
+            dataFormats: ['application/json'],
+        },
+        review: {
+            schema: 'https://enbox.org/schemas/forge/review',
+            dataFormats: ['application/json'],
+        },
+        reviewComment: {
+            schema: 'https://enbox.org/schemas/forge/review-comment',
+            dataFormats: ['application/json'],
+        },
+        statusChange: {
+            schema: 'https://enbox.org/schemas/forge/patch-status-change',
+            dataFormats: ['application/json'],
+        },
+        mergeResult: {
+            schema: 'https://enbox.org/schemas/forge/merge-result',
+            dataFormats: ['application/json'],
+        },
+    },
+    structure: {
+        repo: {
+            $ref: 'repo:repo',
+            patch: {
+                $actions: [
+                    { role: 'repo:repo/contributor', can: ['create', 'read'] },
+                    { role: 'repo:repo/maintainer', can: ['create', 'read', 'update', 'delete'] },
+                    { who: 'author', of: 'repo/patch', can: ['create', 'update'] },
+                ],
+                $tags: {
+                    $requiredTags: ['status', 'baseBranch'],
+                    $allowUndefinedTags: false,
+                    status: { type: 'string', enum: ['draft', 'open', 'closed', 'merged'] },
+                    number: { type: 'string' },
+                    baseBranch: { type: 'string' },
+                    headBranch: { type: 'string' },
+                    sourceDid: { type: 'string' },
+                },
+                revision: {
+                    $immutable: true,
+                    $actions: [
+                        { role: 'repo:repo/contributor', can: ['read'] },
+                        { who: 'author', of: 'repo/patch', can: ['create'] },
+                    ],
+                    $tags: {
+                        $requiredTags: ['headCommit', 'baseCommit'],
+                        $allowUndefinedTags: false,
+                        headCommit: { type: 'string' },
+                        baseCommit: { type: 'string' },
+                        commitCount: { type: 'integer', minimum: 1 },
+                    },
+                },
+                review: {
+                    $immutable: true,
+                    $actions: [
+                        { role: 'repo:repo/contributor', can: ['create', 'read'] },
+                        { role: 'repo:repo/maintainer', can: ['create', 'read'] },
+                    ],
+                    $tags: {
+                        $requiredTags: ['verdict'],
+                        $allowUndefinedTags: false,
+                        verdict: { type: 'string', enum: ['approve', 'reject', 'comment'] },
+                        revisionRecordId: { type: 'string' },
+                    },
+                    reviewComment: {
+                        $actions: [
+                            { role: 'repo:repo/contributor', can: ['create', 'read'] },
+                            { role: 'repo:repo/maintainer', can: ['create', 'read'] },
+                        ],
+                        $tags: {
+                            $allowUndefinedTags: true,
+                            path: { type: 'string' },
+                            line: { type: 'integer' },
+                            side: { type: 'string', enum: ['left', 'right'] },
+                        },
+                    },
+                },
+                statusChange: {
+                    $immutable: true,
+                    $actions: [
+                        { role: 'repo:repo/contributor', can: ['read'] },
+                        { role: 'repo:repo/maintainer', can: ['create'] },
+                        { who: 'author', of: 'repo/patch', can: ['create'] },
+                    ],
+                },
+                mergeResult: {
+                    $immutable: true,
+                    $recordLimit: { max: 1, strategy: 'reject' },
+                    $actions: [
+                        { role: 'repo:repo/contributor', can: ['read'] },
+                        { role: 'repo:repo/maintainer', can: ['create'] },
+                    ],
+                    $tags: {
+                        $requiredTags: ['mergeCommit', 'strategy'],
+                        $allowUndefinedTags: false,
+                        mergeCommit: { type: 'string' },
+                        strategy: { type: 'string', enum: ['merge', 'squash', 'rebase'] },
+                    },
+                },
+            },
+        },
+    },
+};
+// ---------------------------------------------------------------------------
+// Typed protocol export
+// ---------------------------------------------------------------------------
+/** Typed Forge Patches protocol for use with `dwn.using()`. */
+export const ForgePatchesProtocol = defineProtocol(ForgePatchesDefinition, {});
+//# sourceMappingURL=patches.js.map

package/dist/esm/patches.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patches.js","sourceRoot":"","sources":["../../src/patches.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAsD5C,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAI,2CAA2C;IACvD,SAAS,EAAG,IAAI;IAChB,IAAI,EAAQ;QACV,IAAI,EAAE,wCAAwC;KAC/C;IACD,KAAK,EAAE;QACL,KAAK,EAAE;YACL,MAAM,EAAQ,uCAAuC;YACrD,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;QACD,QAAQ,EAAE;YACR,MAAM,EAAQ,0CAA0C;YACxD,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;QACD,MAAM,EAAE;YACN,MAAM,EAAQ,wCAAwC;YACtD,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;QACD,aAAa,EAAE;YACb,MAAM,EAAQ,gDAAgD;YAC9D,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;QACD,YAAY,EAAE;YACZ,MAAM,EAAQ,qDAAqD;YACnE,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;QACD,WAAW,EAAE;YACX,MAAM,EAAQ,8CAA8C;YAC5D,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;KACF;IACD,SAAS,EAAE;QACT,IAAI,EAAE;YACJ,IAAI,EAAE,WAAW;YAEjB,KAAK,EAAE;gBACL,QAAQ,EAAE;oBACR,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE;oBAC1D,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE;oBAC7E,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE;iBAC/D;gBACD,KAAK,EAAE;oBACL,aAAa,EAAS,CAAC,QAAQ,EAAE,YAAY,CAAC;oBAC9C,mBAAmB,EAAG,KAAK;oBAC3B,MAAM,EAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE;oBACrF,MAAM,EAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxC,UAAU,EAAY,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxC,UAAU,EAAY,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxC,SAAS,EAAa,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACzC;gBAED,QAAQ,EAAE;oBACR,UAAU,EAAG,IAAI;oBACjB,QAAQ,EAAK;wBACX,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE;wBAChD,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;qBACrD;oBACD,KAAK,EAAE;wBACL,aAAa,EAAS,CAAC,YAAY,EAAE,YAAY,CAAC;wBAClD,mBAAmB,EAAG,KAAK;wBAC3B,UAAU,EAAY,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxC,UAAU,EAAY,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxC,WAAW,EAAW,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;qBACtD;iBACF;gBAED,MAAM,EAAE;oBACN,UAAU,EAAG,IAAI;oBACjB,QAAQ,EAAK;wBACX,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE;wBAC1D,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE;qBAC1D;oBACD,KAAK,EAAE;wBACL,aAAa,EAAS,CAAC,SAAS,CAAC;wBACjC,mBAAmB,EAAG,KAAK;wBAC3B,OAAO,EAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE;wBAChF,gBAAgB,EAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;qBACzC;oBAED,aAAa,EAAE;wBACb,QAAQ,EAAE;4BACR,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE;4BAC1D,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE;yBAC1D;wBACD,KAAK,EAAE;4BACL,mBAAmB,EAAG,IAAI;4BAC1B,IAAI,EAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACxC,IAAI,EAAkB,EAAE,IAAI,EAAE,SAAS,EAAE;4BACzC,IAAI,EAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;yBAClE;qBACF;iBACF;gBAED,YAAY,EAAE;oBACZ,UAAU,EAAG,IAAI;oBACjB,QAAQ,EAAK;wBACX,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE;wBAChD,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;wBACjD,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;qBACrD;iBACF;gBAED,WAAW,EAAE;oBACX,UAAU,EAAK,IAAI;oBACnB,YAAY,EAAG,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE;oBAC7C,QAAQ,EAAO;wBACb,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE;wBAChD,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;qBAClD;oBACD,KAAK,EAAE;wBACL,aAAa,EAAS,CAAC,aAAa,EAAE,UAAU,CAAC;wBACjD,mBAAmB,EAAG,KAAK;wBAC3B,WAAW,EAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxC,QAAQ,EAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE;qBAC9E;iBACF;aACF;SACF;KACF;CACoC,CAAC;AAExC,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,+DAA+D;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAChD,sBAAsB,EACtB,EAA2B,CAC5B,CAAC"}

package/dist/esm/refs.js

@@ -0,0 +1,54 @@
+/**
+ * Forge Git Refs Protocol — mirrors git branch/tag refs as DWN records.
+ *
+ * This protocol provides a DWN-native view of git ref pointers (branches, tags)
+ * so that other DWN participants can subscribe to ref changes via
+ * `RecordsSubscribe`. The actual git object data stays in git — these records
+ * only track the ref name → commit SHA mapping.
+ *
+ * Uses `$ref` to compose with the Repo protocol for role-based authorization:
+ * only maintainers can update refs in the repo owner's DWN.
+ *
+ * @module
+ */
+import { defineProtocol } from '@enbox/api';
+// ---------------------------------------------------------------------------
+// Protocol definition
+// ---------------------------------------------------------------------------
+export const ForgeRefsDefinition = {
+    protocol: 'https://enbox.org/protocols/forge/refs',
+    published: true,
+    uses: {
+        repo: 'https://enbox.org/protocols/forge/repo',
+    },
+    types: {
+        ref: {
+            schema: 'https://enbox.org/schemas/forge/git-ref',
+            dataFormats: ['application/json'],
+        },
+    },
+    structure: {
+        repo: {
+            $ref: 'repo:repo',
+            ref: {
+                $actions: [
+                    { who: 'anyone', can: ['read'] },
+                    { role: 'repo:repo/maintainer', can: ['create', 'update', 'delete'] },
+                ],
+                $tags: {
+                    $requiredTags: ['name', 'type'],
+                    $allowUndefinedTags: false,
+                    name: { type: 'string' },
+                    type: { type: 'string', enum: ['branch', 'tag'] },
+                    target: { type: 'string' },
+                },
+            },
+        },
+    },
+};
+// ---------------------------------------------------------------------------
+// Typed protocol export
+// ---------------------------------------------------------------------------
+/** Typed Forge Refs protocol for use with `web5.using()`. */
+export const ForgeRefsProtocol = defineProtocol(ForgeRefsDefinition, {});
+//# sourceMappingURL=refs.js.map

package/dist/esm/refs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refs.js","sourceRoot":"","sources":["../../src/refs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAiC5C,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,QAAQ,EAAI,wCAAwC;IACpD,SAAS,EAAG,IAAI;IAChB,IAAI,EAAQ;QACV,IAAI,EAAE,wCAAwC;KAC/C;IACD,KAAK,EAAE;QACL,GAAG,EAAE;YACH,MAAM,EAAQ,yCAAyC;YACvD,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;KACF;IACD,SAAS,EAAE;QACT,IAAI,EAAE;YACJ,IAAI,EAAG,WAAW;YAClB,GAAG,EAAI;gBACL,QAAQ,EAAE;oBACR,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE;oBAChC,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE;iBACtE;gBACD,KAAK,EAAE;oBACL,aAAa,EAAS,CAAC,MAAM,EAAE,MAAM,CAAC;oBACtC,mBAAmB,EAAG,KAAK;oBAC3B,IAAI,EAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxC,IAAI,EAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE;oBACjE,MAAM,EAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACzC;aACF;SACF;KACF;CACoC,CAAC;AAExC,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAC7C,mBAAmB,EACnB,EAAwB,CACzB,CAAC"}

package/dist/esm/registry.js

@@ -0,0 +1,81 @@
+/**
+ * Forge Package Registry Protocol — DID-scoped package publishing.
+ *
+ * Packages are scoped to the publisher's DID (no global namespace squatting).
+ * Versions and tarballs are `$immutable` — once published, content cannot be
+ * silently replaced. Third-party attestations enable build reproducibility chains.
+ *
+ * @module
+ */
+import { defineProtocol } from '@enbox/api';
+// ---------------------------------------------------------------------------
+// Protocol definition
+// ---------------------------------------------------------------------------
+export const ForgeRegistryDefinition = {
+    protocol: 'https://enbox.org/protocols/forge/registry',
+    published: true,
+    types: {
+        package: {
+            schema: 'https://enbox.org/schemas/forge/package',
+            dataFormats: ['application/json'],
+        },
+        version: {
+            schema: 'https://enbox.org/schemas/forge/package-version',
+            dataFormats: ['application/json'],
+        },
+        tarball: {
+            dataFormats: ['application/gzip', 'application/octet-stream'],
+        },
+        attestation: {
+            schema: 'https://enbox.org/schemas/forge/attestation',
+            dataFormats: ['application/json'],
+        },
+    },
+    structure: {
+        package: {
+            $actions: [{ who: 'anyone', can: ['read'] }],
+            // Only owner can create packages (no create in $actions = owner-only)
+            $tags: {
+                $requiredTags: ['name', 'ecosystem'],
+                $allowUndefinedTags: false,
+                name: { type: 'string', maxLength: 214 },
+                ecosystem: { type: 'string', enum: ['npm', 'cargo', 'pip', 'go', 'oci'] },
+                description: { type: 'string' },
+            },
+            version: {
+                $immutable: true,
+                $actions: [
+                    { who: 'anyone', can: ['read'] },
+                    { who: 'author', of: 'package', can: ['create'] },
+                ],
+                $tags: {
+                    $requiredTags: ['semver'],
+                    $allowUndefinedTags: false,
+                    semver: { type: 'string' },
+                    deprecated: { type: 'boolean' },
+                },
+                tarball: {
+                    $immutable: true,
+                    $recordLimit: { max: 1, strategy: 'reject' },
+                    $actions: [
+                        { who: 'anyone', can: ['read'] },
+                        { who: 'author', of: 'package', can: ['create'] },
+                    ],
+                },
+                attestation: {
+                    $immutable: true,
+                    $actions: [
+                        { who: 'anyone', can: ['read'] },
+                        // Third-party attestors need a permission grant from the package owner
+                    ],
+                },
+            },
+        },
+    },
+};
+// ---------------------------------------------------------------------------
+// Typed protocol export
+// ---------------------------------------------------------------------------
+/** Typed Forge Registry protocol for use with `dwn.using()`. */
+export const ForgeRegistryProtocol = defineProtocol(ForgeRegistryDefinition, {});
+//# sourceMappingURL=registry.js.map

package/dist/esm/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAyC5C,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAI,4CAA4C;IACxD,SAAS,EAAG,IAAI;IAChB,KAAK,EAAO;QACV,OAAO,EAAE;YACP,MAAM,EAAQ,yCAAyC;YACvD,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;QACD,OAAO,EAAE;YACP,MAAM,EAAQ,iDAAiD;YAC/D,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;QACD,OAAO,EAAE;YACP,WAAW,EAAE,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;SAC9D;QACD,WAAW,EAAE;YACX,MAAM,EAAQ,6CAA6C;YAC3D,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;KACF;IACD,SAAS,EAAE;QACT,OAAO,EAAE;YACP,QAAQ,EAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,sEAAsE;YACtE,KAAK,EAAM;gBACT,aAAa,EAAS,CAAC,MAAM,EAAE,WAAW,CAAC;gBAC3C,mBAAmB,EAAG,KAAK;gBAC3B,IAAI,EAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE;gBACxD,SAAS,EAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE;gBACpF,WAAW,EAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;aACzC;YAED,OAAO,EAAE;gBACP,UAAU,EAAG,IAAI;gBACjB,QAAQ,EAAK;oBACX,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE;oBAChC,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;iBAClD;gBACD,KAAK,EAAE;oBACL,aAAa,EAAS,CAAC,QAAQ,CAAC;oBAChC,mBAAmB,EAAG,KAAK;oBAC3B,MAAM,EAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxC,UAAU,EAAY,EAAE,IAAI,EAAE,SAAS,EAAE;iBAC1C;gBAED,OAAO,EAAE;oBACP,UAAU,EAAK,IAAI;oBACnB,YAAY,EAAG,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE;oBAC7C,QAAQ,EAAO;wBACb,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE;wBAChC,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;qBAClD;iBACF;gBAED,WAAW,EAAE;oBACX,UAAU,EAAG,IAAI;oBACjB,QAAQ,EAAK;wBACX,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE;wBAChC,uEAAuE;qBACxE;iBACF;aACF;SACF;KACF;CACoC,CAAC;AAExC,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,gEAAgE;AAChE,MAAM,CAAC,MAAM,qBAAqB,GAAG,cAAc,CACjD,uBAAuB,EACvB,EAA4B,CAC7B,CAAC"}

package/dist/esm/releases.js

@@ -0,0 +1,78 @@
+/**
+ * Forge Releases Protocol — release management with immutable assets.
+ *
+ * Release assets use `$immutable` to guarantee supply chain integrity:
+ * once a binary is published, its data cannot be silently replaced.
+ *
+ * @module
+ */
+import { defineProtocol } from '@enbox/api';
+// ---------------------------------------------------------------------------
+// Protocol definition
+// ---------------------------------------------------------------------------
+export const ForgeReleasesDefinition = {
+    protocol: 'https://enbox.org/protocols/forge/releases',
+    published: true,
+    uses: {
+        repo: 'https://enbox.org/protocols/forge/repo',
+    },
+    types: {
+        release: {
+            schema: 'https://enbox.org/schemas/forge/release',
+            dataFormats: ['application/json'],
+        },
+        asset: {
+            dataFormats: ['application/octet-stream', 'application/gzip', 'application/zip', 'application/x-tar'],
+        },
+        signature: {
+            dataFormats: ['application/pgp-signature', 'application/json'],
+        },
+    },
+    structure: {
+        repo: {
+            $ref: 'repo:repo',
+            release: {
+                $actions: [
+                    { who: 'anyone', can: ['read'] },
+                    { role: 'repo:repo/maintainer', can: ['create', 'update', 'delete'] },
+                ],
+                $tags: {
+                    $requiredTags: ['tagName'],
+                    $allowUndefinedTags: false,
+                    tagName: { type: 'string' },
+                    commitSha: { type: 'string' },
+                    prerelease: { type: 'boolean' },
+                    draft: { type: 'boolean' },
+                },
+                asset: {
+                    $immutable: true,
+                    $actions: [
+                        { who: 'anyone', can: ['read'] },
+                        { role: 'repo:repo/maintainer', can: ['create', 'delete'] },
+                    ],
+                    $tags: {
+                        $requiredTags: ['filename', 'contentType'],
+                        $allowUndefinedTags: false,
+                        filename: { type: 'string' },
+                        contentType: { type: 'string' },
+                        size: { type: 'integer' },
+                    },
+                },
+                signature: {
+                    $immutable: true,
+                    $recordLimit: { max: 1, strategy: 'reject' },
+                    $actions: [
+                        { who: 'anyone', can: ['read'] },
+                        { role: 'repo:repo/maintainer', can: ['create'] },
+                    ],
+                },
+            },
+        },
+    },
+};
+// ---------------------------------------------------------------------------
+// Typed protocol export
+// ---------------------------------------------------------------------------
+/** Typed Forge Releases protocol for use with `dwn.using()`. */
+export const ForgeReleasesProtocol = defineProtocol(ForgeReleasesDefinition, {});
+//# sourceMappingURL=releases.js.map

package/dist/esm/releases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"releases.js","sourceRoot":"","sources":["../../src/releases.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAoC5C,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAI,4CAA4C;IACxD,SAAS,EAAG,IAAI;IAChB,IAAI,EAAQ;QACV,IAAI,EAAE,wCAAwC;KAC/C;IACD,KAAK,EAAE;QACL,OAAO,EAAE;YACP,MAAM,EAAQ,yCAAyC;YACvD,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;QACD,KAAK,EAAE;YACL,WAAW,EAAE,CAAC,0BAA0B,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,CAAC;SACtG;QACD,SAAS,EAAE;YACT,WAAW,EAAE,CAAC,2BAA2B,EAAE,kBAAkB,CAAC;SAC/D;KACF;IACD,SAAS,EAAE;QACT,IAAI,EAAE;YACJ,IAAI,EAAE,WAAW;YAEjB,OAAO,EAAE;gBACP,QAAQ,EAAE;oBACR,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE;oBAChC,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE;iBACtE;gBACD,KAAK,EAAE;oBACL,aAAa,EAAS,CAAC,SAAS,CAAC;oBACjC,mBAAmB,EAAG,KAAK;oBAC3B,OAAO,EAAe,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxC,SAAS,EAAa,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxC,UAAU,EAAY,EAAE,IAAI,EAAE,SAAS,EAAE;oBACzC,KAAK,EAAiB,EAAE,IAAI,EAAE,SAAS,EAAE;iBAC1C;gBAED,KAAK,EAAE;oBACL,UAAU,EAAG,IAAI;oBACjB,QAAQ,EAAK;wBACX,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE;wBAChC,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE;qBAC5D;oBACD,KAAK,EAAE;wBACL,aAAa,EAAS,CAAC,UAAU,EAAE,aAAa,CAAC;wBACjD,mBAAmB,EAAG,KAAK;wBAC3B,QAAQ,EAAc,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxC,WAAW,EAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxC,IAAI,EAAkB,EAAE,IAAI,EAAE,SAAS,EAAE;qBAC1C;iBACF;gBAED,SAAS,EAAE;oBACT,UAAU,EAAK,IAAI;oBACnB,YAAY,EAAG,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE;oBAC7C,QAAQ,EAAO;wBACb,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE;wBAChC,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE;qBAClD;iBACF;aACF;SACF;KACF;CACoC,CAAC;AAExC,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,gEAAgE;AAChE,MAAM,CAAC,MAAM,qBAAqB,GAAG,cAAc,CACjD,uBAAuB,EACvB,EAA4B,CAC7B,CAAC"}

package/dist/esm/repo.js

@@ -0,0 +1,150 @@
+/**
+ * Forge Repository Protocol — foundational protocol for repository management.
+ *
+ * Defines repository metadata, collaborator roles (maintainer, triager,
+ * contributor), and repo-level resources (readme, license, topics, settings,
+ * webhooks). Other forge protocols compose with this via `uses` to leverage
+ * role-based authorization.
+ *
+ * @module
+ */
+import { defineProtocol } from '@enbox/api';
+// ---------------------------------------------------------------------------
+// Protocol definition
+// ---------------------------------------------------------------------------
+export const ForgeRepoDefinition = {
+    protocol: 'https://enbox.org/protocols/forge/repo',
+    published: true,
+    types: {
+        repo: {
+            schema: 'https://enbox.org/schemas/forge/repo',
+            dataFormats: ['application/json'],
+        },
+        settings: {
+            schema: 'https://enbox.org/schemas/forge/settings',
+            dataFormats: ['application/json'],
+        },
+        readme: {
+            dataFormats: ['text/markdown', 'text/plain'],
+        },
+        license: {
+            dataFormats: ['text/plain'],
+        },
+        maintainer: {
+            schema: 'https://enbox.org/schemas/forge/collaborator',
+            dataFormats: ['application/json'],
+        },
+        triager: {
+            schema: 'https://enbox.org/schemas/forge/collaborator',
+            dataFormats: ['application/json'],
+        },
+        contributor: {
+            schema: 'https://enbox.org/schemas/forge/collaborator',
+            dataFormats: ['application/json'],
+        },
+        topic: {
+            schema: 'https://enbox.org/schemas/forge/topic',
+            dataFormats: ['application/json'],
+        },
+        bundle: {
+            dataFormats: ['application/x-git-bundle'],
+        },
+        webhook: {
+            schema: 'https://enbox.org/schemas/forge/webhook',
+            dataFormats: ['application/json'],
+            encryptionRequired: true,
+        },
+    },
+    structure: {
+        repo: {
+            $recordLimit: { max: 1, strategy: 'reject' },
+            $actions: [{ who: 'anyone', can: ['read'] }],
+            $tags: {
+                $requiredTags: ['name', 'visibility'],
+                $allowUndefinedTags: false,
+                name: { type: 'string', maxLength: 100 },
+                visibility: { type: 'string', enum: ['public', 'private'] },
+                defaultBranch: { type: 'string' },
+                language: { type: 'string' },
+                archived: { type: 'boolean' },
+            },
+            maintainer: {
+                $role: true,
+                $actions: [{ who: 'anyone', can: ['read'] }],
+                $tags: {
+                    $requiredTags: ['did'],
+                    $allowUndefinedTags: false,
+                    did: { type: 'string' },
+                },
+            },
+            triager: {
+                $role: true,
+                $actions: [{ who: 'anyone', can: ['read'] }],
+                $tags: {
+                    $requiredTags: ['did'],
+                    $allowUndefinedTags: false,
+                    did: { type: 'string' },
+                },
+            },
+            contributor: {
+                $role: true,
+                $actions: [{ who: 'anyone', can: ['read'] }],
+                $tags: {
+                    $requiredTags: ['did'],
+                    $allowUndefinedTags: false,
+                    did: { type: 'string' },
+                },
+            },
+            bundle: {
+                $squash: true,
+                $actions: [
+                    { who: 'anyone', can: ['read'] },
+                    { role: 'repo/maintainer', can: ['create', 'squash'] },
+                ],
+                $tags: {
+                    $requiredTags: ['tipCommit', 'isFull'],
+                    $allowUndefinedTags: false,
+                    tipCommit: { type: 'string' },
+                    isFull: { type: 'boolean' },
+                    refCount: { type: 'integer' },
+                    size: { type: 'integer' },
+                },
+            },
+            readme: {
+                $recordLimit: { max: 1, strategy: 'reject' },
+                $actions: [
+                    { who: 'anyone', can: ['read'] },
+                    { role: 'repo/maintainer', can: ['create', 'update'] },
+                ],
+            },
+            license: {
+                $recordLimit: { max: 1, strategy: 'reject' },
+                $actions: [{ who: 'anyone', can: ['read'] }],
+            },
+            topic: {
+                $actions: [
+                    { who: 'anyone', can: ['read'] },
+                    { role: 'repo/maintainer', can: ['create', 'delete'] },
+                ],
+                $tags: {
+                    $requiredTags: ['name'],
+                    $allowUndefinedTags: false,
+                    name: { type: 'string', maxLength: 50 },
+                },
+            },
+            settings: {
+                $recordLimit: { max: 1, strategy: 'reject' },
+                // Owner-only: no $actions = only the DWN tenant can read/write
+            },
+            webhook: {
+            // Owner-only, encrypted at rest (webhook secrets are sensitive)
+            },
+        },
+    },
+};
+// ---------------------------------------------------------------------------
+// Typed protocol export
+// ---------------------------------------------------------------------------
+/** Typed Forge Repo protocol for use with `dwn.using()`. */
+export const ForgeRepoProtocol = defineProtocol(ForgeRepoDefinition, {});
+//# sourceMappingURL=repo.js.map

package/dist/esm/repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo.js","sourceRoot":"","sources":["../../src/repo.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAoE5C,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,QAAQ,EAAI,wCAAwC;IACpD,SAAS,EAAG,IAAI;IAChB,KAAK,EAAO;QACV,IAAI,EAAE;YACJ,MAAM,EAAQ,sCAAsC;YACpD,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;QACD,QAAQ,EAAE;YACR,MAAM,EAAQ,0CAA0C;YACxD,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;QACD,MAAM,EAAE;YACN,WAAW,EAAE,CAAC,eAAe,EAAE,YAAY,CAAC;SAC7C;QACD,OAAO,EAAE;YACP,WAAW,EAAE,CAAC,YAAY,CAAC;SAC5B;QACD,UAAU,EAAE;YACV,MAAM,EAAQ,8CAA8C;YAC5D,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;QACD,OAAO,EAAE;YACP,MAAM,EAAQ,8CAA8C;YAC5D,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;QACD,WAAW,EAAE;YACX,MAAM,EAAQ,8CAA8C;YAC5D,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;QACD,KAAK,EAAE;YACL,MAAM,EAAQ,uCAAuC;YACrD,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;QACD,MAAM,EAAE;YACN,WAAW,EAAE,CAAC,0BAA0B,CAAC;SAC1C;QACD,OAAO,EAAE;YACP,MAAM,EAAe,yCAAyC;YAC9D,WAAW,EAAU,CAAC,kBAAkB,CAAC;YACzC,kBAAkB,EAAG,IAAI;SAC1B;KACF;IACD,SAAS,EAAE;QACT,IAAI,EAAE;YACJ,YAAY,EAAG,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE;YAC7C,QAAQ,EAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,KAAK,EAAU;gBACb,aAAa,EAAS,CAAC,MAAM,EAAE,YAAY,CAAC;gBAC5C,mBAAmB,EAAG,KAAK;gBAC3B,IAAI,EAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE;gBACxD,UAAU,EAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;gBACrE,aAAa,EAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxC,QAAQ,EAAc,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxC,QAAQ,EAAc,EAAE,IAAI,EAAE,SAAS,EAAE;aAC1C;YAED,UAAU,EAAE;gBACV,KAAK,EAAM,IAAI;gBACf,QAAQ,EAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7C,KAAK,EAAM;oBACT,aAAa,EAAS,CAAC,KAAK,CAAC;oBAC7B,mBAAmB,EAAG,KAAK;oBAC3B,GAAG,EAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACzC;aACF;YAED,OAAO,EAAE;gBACP,KAAK,EAAM,IAAI;gBACf,QAAQ,EAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7C,KAAK,EAAM;oBACT,aAAa,EAAS,CAAC,KAAK,CAAC;oBAC7B,mBAAmB,EAAG,KAAK;oBAC3B,GAAG,EAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACzC;aACF;YAED,WAAW,EAAE;gBACX,KAAK,EAAM,IAAI;gBACf,QAAQ,EAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7C,KAAK,EAAM;oBACT,aAAa,EAAS,CAAC,KAAK,CAAC;oBAC7B,mBAAmB,EAAG,KAAK;oBAC3B,GAAG,EAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACzC;aACF;YAED,MAAM,EAAE;gBACN,OAAO,EAAI,IAAI;gBACf,QAAQ,EAAG;oBACT,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE;oBAChC,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE;iBACvD;gBACD,KAAK,EAAE;oBACL,aAAa,EAAS,CAAC,WAAW,EAAE,QAAQ,CAAC;oBAC7C,mBAAmB,EAAG,KAAK;oBAC3B,SAAS,EAAa,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxC,MAAM,EAAgB,EAAE,IAAI,EAAE,SAAS,EAAE;oBACzC,QAAQ,EAAc,EAAE,IAAI,EAAE,SAAS,EAAE;oBACzC,IAAI,EAAkB,EAAE,IAAI,EAAE,SAAS,EAAE;iBAC1C;aACF;YAED,MAAM,EAAE;gBACN,YAAY,EAAG,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE;gBAC7C,QAAQ,EAAO;oBACb,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE;oBAChC,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE;iBACvD;aACF;YAED,OAAO,EAAE;gBACP,YAAY,EAAG,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE;gBAC7C,QAAQ,EAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;aAClD;YAED,KAAK,EAAE;gBACL,QAAQ,EAAE;oBACR,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE;oBAChC,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE;iBACvD;gBACD,KAAK,EAAE;oBACL,aAAa,EAAS,CAAC,MAAM,CAAC;oBAC9B,mBAAmB,EAAG,KAAK;oBAC3B,IAAI,EAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE;iBACxD;aACF;YAED,QAAQ,EAAE;gBACR,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE;gBAC5C,+DAA+D;aAChE;YAED,OAAO,EAAE;YACP,gEAAgE;aACjE;SACF;KACF;CACoC,CAAC;AAExC,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,4DAA4D;AAC5D,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAC7C,mBAAmB,EACnB,EAAwB,CACzB,CAAC"}

package/dist/esm/resolver/index.js

@@ -0,0 +1,10 @@
+/**
+ * Package resolver module — DID-scoped package resolution, verification,
+ * and dependency trust chain validation.
+ *
+ * @module
+ */
+export { fetchTarball, listVersions, parseSpecifier, resolveFullPackage, resolvePackage, resolveVersion, } from './resolve.js';
+export { fetchAttestations, verifyPackageVersion, } from './verify.js';
+export { buildTrustChain, formatTrustChain, } from './trust-chain.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/resolver/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/resolver/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,cAAc,GACf,MAAM,cAAc,CAAC;AAQtB,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAQrB,OAAO,EACL,eAAe,EACf,gBAAgB,GACjB,MAAM,kBAAkB,CAAC"}