@finsys/core 4.1.0 → 4.3.0

package/dist/schema/adapter-manifest.schema.json

@@ -89,9 +89,59 @@
               "description": "Relative path (from the adapter directory) to the module exporting the extract function. Must not start with '/' and must not contain '..' path segments — the host will reject manifests that try to escape the adapter directory. The host also runs a defence-in-depth path-traversal check at load time."
             }
           }
+        },
+        {
+          "type": "object",
+          "required": ["type", "fieldMap"],
+          "additionalProperties": false,
+          "properties": {
+            "type": { "const": "form-intake" },
+            "fieldMap": {
+              "type": "array",
+              "minItems": 1,
+              "items": {
+                "type": "object",
+                "required": ["formFieldId", "canonical"],
+                "additionalProperties": false,
+                "properties": {
+                  "formFieldId": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "The form spec's field name this mapping consumes."
+                  },
+                  "canonical": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Canonical field name (must be in the category's field set)."
+                  }
+                }
+              },
+              "description": "SYS-2501 — form-field-id → canonical-field mappings. Data-only: the host's form submission handler is the runtime; no code is loaded. No transform slot — values arrive typed from the form layer."
+            }
+          }
+        },
+        {
+          "type": "object",
+          "required": ["type"],
+          "additionalProperties": false,
+          "properties": {
+            "type": { "const": "manual-override" }
+          },
+          "description": "SYS-2501 — declares that this adapter's `produces` list is operator-overridable post-extraction. `produces` IS the override surface; the shape is intentionally empty beyond the discriminator."
         }
       ]
     },
+    "cardinality": {
+      "type": "string",
+      "enum": ["single", "multi"],
+      "description": "SYS-2502 — explicit instance cardinality. Optional for backward compatibility: when absent the host infers from the original instanceKey convention (empty string → single, non-empty → multi). New manifests should declare it so the host can reject mismatched extractions at persistence time."
+    },
+    "singletonFields": {
+      "type": "array",
+      "items": { "type": "string", "minLength": 1 },
+      "uniqueItems": true,
+      "description": "SYS-2502 — per-applicant singleton fields on a multi-instance category (e.g. accountHolderName on bank statements). Every entry must also appear in `produces`; host validates at registration."
+    },
     "requiredIdentityFields": {
       "type": "array",
       "items": {
@@ -103,6 +153,31 @@
       "uniqueItems": true,
       "description": "v2.7.0 — partner-specific identity field names required by fetch(). Host validates per-applicant before invoking fetch() and skips the adapter when missing. Omit (or empty) for adapters that don't implement fetch(). Must NOT include core fields ('ihsId', 'ic', 'fullName') — those are always populated, and declaring 'ic' as required would cause the host to skip every non-MY applicant since 'ic' can legitimately be empty."
     },
+    "fieldAuthorizations": {
+      "type": "object",
+      "minProperties": 1,
+      "propertyNames": { "minLength": 1 },
+      "additionalProperties": {
+        "type": "object",
+        "minProperties": 1,
+        "additionalProperties": false,
+        "properties": {
+          "lenderRoles": {
+            "type": "array",
+            "minItems": 1,
+            "uniqueItems": true,
+            "items": { "type": "string", "minLength": 1 }
+          },
+          "programIds": {
+            "type": "array",
+            "minItems": 1,
+            "uniqueItems": true,
+            "items": { "type": "string", "minLength": 1 }
+          }
+        }
+      },
+      "description": "SYS-2503 — declarative per-field authorization gating, keyed by canonical field name (every key must also appear in `produces`; host validates at registration). No entry → field visible to every reader. An entry restricts: reader must satisfy EVERY declared dimension (AND across dimensions), matching ANY value within a list (OR within). Dimensions are host-interpreted opaque strings. Each entry must declare at least one non-empty dimension — an empty list would read as deny-all, better expressed by not producing the field."
+    },
     "notes": {
       "type": "string",
       "maxLength": 2000,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@finsys/core",
-  "version": "4.1.0",
+  "version": "4.3.0",
   "description": "Convert unified form configurations into Zod schemas, React Hook Form defaults, and SurveyJS JSON",
   "repository": {
     "type": "git",
@@ -58,7 +58,6 @@
     "zod": "^4.3.5"
   },
   "devDependencies": {
-    "@lavamoat/allow-scripts": "^5.0.2",
     "@types/node": "^25.0.10",
     "@types/semver": "^7.5.0",
     "survey-core": "^2.5.6",
@@ -79,12 +78,10 @@
   ],
   "license": "Apache-2.0",
   "engines": {
-    "node": ">=24",
-    "npm": ">=11.10.0"
+    "node": ">=24.16.0",
+    "npm": ">=12.0.1"
   },
-  "lavamoat": {
-    "allowScripts": {
-      "tsup>esbuild#0.27.3": false
-    }
+  "allowScripts": {
+    "esbuild": false
   }
 }