@friggframework/schemas 2.0.0--canary.684.0da024b.0 → 2.0.0--canary.679.a2bcc2f.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@friggframework/schemas",
-  "version": "2.0.0--canary.684.0da024b.0",
+  "version": "2.0.0--canary.679.a2bcc2f.0",
   "description": "Canonical JSON Schema definitions for Frigg Framework",
   "main": "index.js",
   "author": "",
@@ -41,5 +41,5 @@
     "middleware/",
     "index.js"
   ],
-  "gitHead": "0da024bd724c987e4bc839ab0c302580333466a1"
+  "gitHead": "a2bcc2f124b0574c0d868beff77b4da848fd7849"
 }

package/schemas/api-authorization.schema.json

@@ -173,11 +173,6 @@
           "default": 1,
           "description": "Current step number for multi-step flows"
         },
-        "scope": {
-          "type": "string",
-          "enum": ["individual", "organization"],
-          "description": "The scope to connect at, from the entity type's allow list (ADR-056 §3.1). Omit to take the type's default. global is refused."
-        },
         "sessionId": {
           "type": "string",
           "description": "Session ID from previous step (required for step > 1)"

package/schemas/api-credentials.schema.json

@@ -29,32 +29,10 @@
           "type": "boolean",
           "description": "Whether the authentication is currently valid"
         },
-        "scope": {
-          "type": "string",
-          "enum": ["individual", "organization"],
-          "description": "Whose the credential is (ADR-056 §3.4), from who owns the credential. `global` ones are not listed to tenants."
-        },
-        "owner": {
-          "type": "object",
-          "properties": {
-            "type": { "type": "string", "enum": ["individual", "organization"] },
-            "id": { "type": "string" }
-          },
-          "description": "The user that owns it: the person, or the organization's user"
-        },
-        "organizationId": {
-          "type": ["string", "null"],
-          "description": "The organization it belongs to. Null for an individual credential connected outside an organization, or under ownership.individualAcross 'all'."
-        },
-        "access": {
-          "type": "string",
-          "enum": ["manage", "use", "view"],
-          "description": "What the caller may do: manage (reauthorize, delete) or use. A member only uses an organization's credential."
-        },
         "entityCount": {
           "type": "integer",
           "minimum": 0,
-          "description": "Number of entities using this credential that the caller may see"
+          "description": "Number of entities using this credential"
         },
         "createdAt": {
           "type": "string",

package/schemas/api-entities.schema.json

@@ -37,28 +37,6 @@
           "type": "boolean",
           "description": "Whether authentication is currently valid"
         },
-        "scope": {
-          "type": "string",
-          "enum": ["individual", "organization"],
-          "description": "Whose the entity is (ADR-056 §3.4). `global` ones are not listed to tenants."
-        },
-        "owner": {
-          "type": "object",
-          "properties": {
-            "type": { "type": "string", "enum": ["individual", "organization"] },
-            "id": { "type": "string" }
-          },
-          "description": "The user that owns it: the person, or the organization's user"
-        },
-        "organizationId": {
-          "type": ["string", "null"],
-          "description": "The organization it belongs to. Null for an individual entity connected outside an organization, or under ownership.individualAcross 'all'."
-        },
-        "access": {
-          "type": "string",
-          "enum": ["manage", "use", "view"],
-          "description": "What the caller may do: manage (create, reauthorize, delete), use (bind it, proxy through it) or view (metadata only)"
-        },
         "createdAt": {
           "type": "string",
           "format": "date-time",
@@ -169,15 +147,6 @@
             "type": "string"
           },
           "description": "List of capabilities this entity type supports"
-        },
-        "scope": {
-          "type": "object",
-          "description": "The scope a new connection of this type gets and the scopes a request may choose (ADR-056 §3.1). global is never offered.",
-          "properties": {
-            "default": { "type": "string", "enum": ["individual", "organization", "global"] },
-            "allow": { "type": "array", "items": { "type": "string", "enum": ["individual", "organization"] } },
-            "source": { "type": "string", "enum": ["binding", "integration", "entityType", "app", "default"] }
-          }
         }
       }
     },

package/schemas/app-definition.schema.json

@@ -105,28 +105,6 @@
           "description": "Require organization user for authentication",
           "default": false
         },
-        "strictMembership": {
-          "type": "boolean",
-          "description": "Reject x-frigg headers that name an organization the person is not already a member of, instead of adding the membership (ADR-056 §3.6). Turn on once entities and integrations are scoped by organization and your app manages membership itself.",
-          "default": false
-        },
-        "strictUserValidation": {
-          "type": "boolean",
-          "description": "DEPRECATED alias of strictMembership; its meaning changed.",
-          "default": false
-        },
-        "orgAdminRoles": {
-          "type": "array",
-          "description": "Organization roles that may manage organization-level things: connect or delete an organization-level account, re-authorize or delete its credential, create, change or delete an organization-owned integration (ADR-056 §3). The role is the adopter token's role claim; when the token carries none, the role stored on the caller's membership of the active organization (OrganizationMembership.orgRole); when there is none, MEMBER, never admin. A shared-secret (x-frigg header) caller needs no role, and so does a Frigg bearer token unless orgAdminGateBearerTokens is true. Compared case-insensitively.",
-          "items": { "type": "string", "minLength": 1 },
-          "minItems": 1,
-          "default": ["ADMIN"]
-        },
-        "orgAdminGateBearerTokens": {
-          "type": "boolean",
-          "description": "Judge Frigg bearer-token callers (/user/login) by organization role like adopter-token callers. Default false: a bearer token carries no role and keeps its behaviour from before organization roles, so it may manage the organization it acts in.",
-          "default": false
-        },
         "authModes": {
           "type": "object",
           "description": "Authentication mode configuration - enables multiple authentication strategies. x-frigg-appUserId and x-frigg-appOrgId headers are automatically supported for user identification with any auth mode.",
@@ -151,72 +129,30 @@
         },
         "jwtConfig": {
           "type": "object",
-          "description": "Adopter token (JWT) verification for authModes.adopterJwt. Set exactly one of jwksUri (asymmetric keys, rotating) or secret (HMAC). With jwksUri, audience is required and issuer should be set.",
+          "description": "JWT configuration for adopter JWT authentication mode (when authModes.adopterJwt is true)",
           "properties": {
-            "jwksUri": {
-              "type": "string",
-              "format": "uri",
-              "description": "URL of the issuer's JWKS (https; http only for localhost, 127.0.0.0/8 or ::1). Keys are fetched, cached and rotated per process."
-            },
             "secret": {
               "type": "string",
-              "description": "Shared HMAC secret for HS* tokens (set via an environment variable, never in source)"
-            },
-            "issuer": {
-              "type": "string",
-              "description": "Required iss claim. Not checked when omitted; with jwksUri a startup warning is logged when it is unset."
-            },
-            "audience": {
-              "description": "Accepted aud claim value(s). Required with jwksUri; optional (not checked when omitted) with secret.",
-              "oneOf": [
-                { "type": "string" },
-                { "type": "array", "items": { "type": "string" }, "minItems": 1 }
-              ]
-            },
-            "algorithms": {
-              "type": "array",
-              "description": "Allowed signing algorithms. Defaults to ES256 and RS256 with jwksUri, HS256 with secret. HS* only with secret, never with jwksUri.",
-              "items": {
-                "type": "string",
-                "enum": ["ES256", "ES384", "RS256", "RS384", "RS512", "HS256", "HS384", "HS512"]
-              },
-              "minItems": 1
-            },
-            "algorithm": {
-              "type": "string",
-              "description": "Deprecated alias for a one-item algorithms list. Setting both algorithm and algorithms is an error.",
-              "enum": ["ES256", "ES384", "RS256", "RS384", "RS512", "HS256", "HS384", "HS512"]
-            },
-            "clockToleranceSec": {
-              "type": "integer",
-              "minimum": 0,
-              "description": "Clock skew allowed on exp and nbf, in seconds",
-              "default": 30
+              "description": "JWT secret key for signature validation (should be set via environment variable)"
             },
             "userIdClaim": {
               "type": "string",
-              "description": "JWT claim name containing the app user ID",
+              "description": "JWT claim name containing the user ID",
               "default": "sub"
             },
             "orgIdClaim": {
               "type": "string",
-              "description": "JWT claim name containing the app organization ID",
+              "description": "JWT claim name containing the organization ID",
               "default": "org_id"
             },
-            "roleClaim": {
+            "algorithm": {
               "type": "string",
-              "description": "JWT claim name containing the organization role. Read and exposed on the authenticated user; not stored yet.",
-              "default": "org_role"
+              "description": "JWT signing algorithm",
+              "enum": ["HS256", "HS384", "HS512", "RS256", "RS384", "RS512"],
+              "default": "HS256"
             }
           },
-          "oneOf": [
-            { "required": ["secret"] },
-            { "required": ["jwksUri"] }
-          ],
-          "dependencies": {
-            "jwksUri": ["audience"]
-          },
-          "not": { "required": ["algorithm", "algorithms"] },
+          "required": ["secret"],
           "additionalProperties": false
         },
         "fields": {
@@ -757,38 +693,6 @@
         "additionalProperties": false
       }
     },
-    "ownership": {
-      "type": "object",
-      "description": "Who owns what a person connects (ADR-056 §3). `scope` is the app-level default for any entity type or integration binding that sets none; the order is request, binding, integration, entity type, app, then `organization` for an organization-primary app and `individual` otherwise.",
-      "properties": {
-        "scope": {
-        "description": "One scope, or a default plus the scopes a request may choose from.",
-        "oneOf": [
-          { "type": "string", "enum": ["individual", "organization", "global"] },
-          {
-            "type": "object",
-            "properties": {
-              "default": { "type": "string", "enum": ["individual", "organization", "global"] },
-              "allow": {
-                "type": "array",
-                "items": { "type": "string", "enum": ["individual", "organization", "global"] },
-                "minItems": 1,
-                "uniqueItems": true
-              }
-            },
-            "additionalProperties": false
-          }
-        ]
-      },
-        "individualAcross": {
-          "type": "string",
-          "enum": ["organization", "all"],
-          "default": "organization",
-          "description": "`organization` (default): an individual entity belongs to the organization it was connected in and is not visible in another. `all`: one connection per person across every organization they belong to, stored with no organizationId."
-        }
-      },
-      "additionalProperties": false
-    },
     "managementApi": {
       "type": "object",
       "description": "Management API settings (ADR-053 versioning, ADR-052 entity proxy).",

package/schemas/integration-definition.schema.json

@@ -263,62 +263,11 @@
           "definition": {
             "type": "object",
             "description": "The API module definition (e.g., from @friggframework/api-module-*)"
-          },
-          "scope": {
-            "description": "The scope this binding accepts (ADR-056 §3.1): an entity bound here must have it. Overrides ownership.scope.",
-            "oneOf": [
-              { "type": "string", "enum": ["individual", "organization", "global"] },
-              {
-                "type": "object",
-                "properties": {
-                  "default": { "type": "string", "enum": ["individual", "organization", "global"] },
-                  "allow": {
-                    "type": "array",
-                    "items": { "type": "string", "enum": ["individual", "organization", "global"] },
-                    "minItems": 1,
-                    "uniqueItems": true
-                  }
-                },
-                "additionalProperties": false
-              }
-            ]
           }
         },
         "additionalProperties": true
       }
     },
-    "ownership": {
-      "type": "object",
-      "description": "Who owns this integration and what scope its bindings accept (ADR-056 §3.1, §3.3).",
-      "properties": {
-        "scope": {
-          "description": "One scope, or a default plus the scopes a request may choose from.",
-          "oneOf": [
-            { "type": "string", "enum": ["individual", "organization", "global"] },
-            {
-              "type": "object",
-              "properties": {
-                "default": { "type": "string", "enum": ["individual", "organization", "global"] },
-                "allow": {
-                  "type": "array",
-                  "items": { "type": "string", "enum": ["individual", "organization", "global"] },
-                  "minItems": 1,
-                  "uniqueItems": true
-                }
-              },
-              "additionalProperties": false
-            }
-          ]
-        },
-        "owner": {
-          "type": "string",
-          "enum": ["derive", "individual", "organization"],
-          "default": "derive",
-          "description": "`derive` (default): the organization when every entity it uses is organization-scoped, otherwise the person. An organization-owned integration cannot bind an individual entity."
-        }
-      },
-      "additionalProperties": false
-    },
     "hasUserConfig": {
       "type": "boolean",
       "description": "Whether integration requires user-specific configuration",