@jimhoyd/urlcode 0.3.0 → 0.4.0-alpha.2

package/schemas/urlcode.schema.json

@@ -22,11 +22,6 @@
       "uniqueItems": true,
       "maxItems": 256
     },
-    "dynamicLinks": {
-      "type": "boolean",
-      "default": false,
-      "description": "Entry-point opt-in for live stored-link routes. Does not enable guest storage or management access."
-    },
     "policies": {
       "$ref": "#/$defs/policies"
     },
@@ -89,6 +84,31 @@
                 "$ref": "#/$defs/policyCache"
               }
             ]
+          },
+          "extensions": {
+            "oneOf": [
+              {
+                "const": false
+              },
+              {
+                "type": "object",
+                "maxProperties": 16,
+                "propertyNames": {
+                  "type": "string",
+                  "pattern": "^[a-z][a-z0-9-]{0,63}$"
+                },
+                "additionalProperties": {
+                  "oneOf": [
+                    {
+                      "const": false
+                    },
+                    {
+                      "type": "object"
+                    }
+                  ]
+                }
+              }
+            ]
           }
         },
         "additionalProperties": false
@@ -262,6 +282,31 @@
         }
       },
       "additionalProperties": false
+    },
+    "extensions": {
+      "type": "object",
+      "maxProperties": 16,
+      "propertyNames": {
+        "type": "string",
+        "pattern": "^[a-z][a-z0-9-]{0,63}$"
+      },
+      "additionalProperties": {
+        "type": "object",
+        "properties": {
+          "version": {
+            "const": "1"
+          },
+          "config": {
+            "type": "object"
+          }
+        },
+        "required": [
+          "version",
+          "config"
+        ],
+        "additionalProperties": false
+      },
+      "description": "Versioned logical extension configurations. Requires explicit external operator registrations pinned to the project revision; never loads project code."
     }
   },
   "required": [
@@ -296,6 +341,16 @@
         "enabled": {
           "type": "boolean"
         },
+        "sandbox": {
+          "type": "boolean",
+          "default": false,
+          "description": "Run this route's function/middleware in the isolated QuickJS/WASM worker pool instead of the trusted, in-process default. false or absent (the default) means trusted, unsandboxed, direct host-process execution."
+        },
+        "sandboxReason": {
+          "type": "string",
+          "maxLength": 500,
+          "description": "Optional justification for this route's sandbox decision, whether sandbox is true or false: why it needs isolation, or why it is safe to trust. Never inferred or enforced; surfaced verbatim by explain/context/manifest."
+        },
         "expires": {
           "type": "string"
         },
@@ -482,85 +537,94 @@
           "additionalProperties": false
         },
         "function": {
-          "type": "object",
-          "properties": {
-            "source": {
+          "oneOf": [
+            {
               "type": "string",
+              "minLength": 1,
               "maxLength": 1024
             },
-            "export": {
-              "type": "string",
-              "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
-            },
-            "args": {
+            {
               "type": "object",
-              "propertyNames": {
-                "type": "string",
-                "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
-              },
-              "additionalProperties": {
-                "oneOf": [
-                  {
-                    "type": [
-                      "string",
-                      "number",
-                      "boolean"
-                    ]
+              "properties": {
+                "source": {
+                  "type": "string",
+                  "maxLength": 1024
+                },
+                "export": {
+                  "type": "string",
+                  "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
+                },
+                "args": {
+                  "type": "object",
+                  "propertyNames": {
+                    "type": "string",
+                    "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
                   },
-                  {
-                    "type": "object",
-                    "properties": {
-                      "from": {
-                        "enum": [
-                          "path",
-                          "query",
-                          "header"
+                  "additionalProperties": {
+                    "oneOf": [
+                      {
+                        "type": [
+                          "string",
+                          "number",
+                          "boolean"
                         ]
                       },
-                      "name": {
-                        "type": "string"
-                      }
-                    },
-                    "required": [
-                      "from",
-                      "name"
-                    ],
-                    "additionalProperties": false
-                  },
-                  {
-                    "type": "object",
-                    "properties": {
-                      "env": {
-                        "type": "string",
-                        "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
-                      }
-                    },
-                    "required": [
-                      "env"
-                    ],
-                    "additionalProperties": false
-                  },
-                  {
-                    "type": "object",
-                    "properties": {
-                      "secret": {
-                        "type": "string",
-                        "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
+                      {
+                        "type": "object",
+                        "properties": {
+                          "from": {
+                            "enum": [
+                              "path",
+                              "query",
+                              "header"
+                            ]
+                          },
+                          "name": {
+                            "type": "string"
+                          }
+                        },
+                        "required": [
+                          "from",
+                          "name"
+                        ],
+                        "additionalProperties": false
+                      },
+                      {
+                        "type": "object",
+                        "properties": {
+                          "env": {
+                            "type": "string",
+                            "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
+                          }
+                        },
+                        "required": [
+                          "env"
+                        ],
+                        "additionalProperties": false
+                      },
+                      {
+                        "type": "object",
+                        "properties": {
+                          "secret": {
+                            "type": "string",
+                            "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
+                          }
+                        },
+                        "required": [
+                          "secret"
+                        ],
+                        "additionalProperties": false
                       }
-                    },
-                    "required": [
-                      "secret"
-                    ],
-                    "additionalProperties": false
+                    ]
                   }
-                ]
-              }
+                }
+              },
+              "required": [
+                "source"
+              ],
+              "additionalProperties": false
             }
-          },
-          "required": [
-            "source"
-          ],
-          "additionalProperties": false
+          ]
         },
         "env": {
           "type": "object",
@@ -797,56 +861,87 @@
           "type": "array",
           "maxItems": 16,
           "items": {
-            "type": "object",
-            "properties": {
-              "source": {
+            "oneOf": [
+              {
                 "type": "string",
+                "minLength": 1,
                 "maxLength": 1024
               },
-              "export": {
-                "type": "string",
-                "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
+              {
+                "type": "object",
+                "properties": {
+                  "source": {
+                    "type": "string",
+                    "maxLength": 1024
+                  },
+                  "export": {
+                    "type": "string",
+                    "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
+                  }
+                },
+                "required": [
+                  "source"
+                ],
+                "additionalProperties": false
               }
-            },
-            "required": [
-              "source"
-            ],
-            "additionalProperties": false
+            ]
           }
         },
-        "link": {
+        "policies": {
+          "$ref": "#/$defs/policies"
+        },
+        "match": {
+          "$ref": "#/$defs/routeMatch"
+        },
+        "conditional": {
           "type": "object",
           "properties": {
-            "collection": {
-              "type": "string",
-              "pattern": "^[A-Za-z][A-Za-z0-9_-]{0,63}$"
+            "cases": {
+              "type": "array",
+              "minItems": 1,
+              "maxItems": 16,
+              "items": {
+                "$ref": "#/$defs/conditionalCase"
+              }
             },
-            "code": {
-              "type": "object",
-              "properties": {
-                "from": {
-                  "const": "path"
-                },
-                "name": {
-                  "type": "string",
-                  "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
-                }
-              },
-              "required": [
-                "from",
-                "name"
-              ],
-              "additionalProperties": false
+            "fallback": {
+              "$ref": "#/$defs/conditionalReply"
             }
           },
           "required": [
-            "collection",
-            "code"
+            "cases"
           ],
           "additionalProperties": false
         },
-        "policies": {
-          "$ref": "#/$defs/policies"
+        "proxy": {
+          "$ref": "#/$defs/proxy"
+        },
+        "signals": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 8,
+          "items": {
+            "$ref": "#/$defs/signal"
+          }
+        },
+        "extension": {
+          "type": "string",
+          "pattern": "^[a-z][a-z0-9-]{0,63}$"
+        },
+        "auth": {
+          "description": "Short form for a route protected by the declared auth extension. true or an object expands to policies.extensions.auth with the same keys minus required; required: false emits no policy. Refused without an extensions.auth declaration or alongside policies.extensions.auth.",
+          "oneOf": [
+            {
+              "const": true
+            },
+            {
+              "$ref": "#/$defs/routeAuth"
+            }
+          ]
+        },
+        "cache": {
+          "description": "Short form for policies.cache: the same object, expanded to policies.cache before anything else reads the project. Refused alongside policies.cache; use one form.",
+          "$ref": "#/$defs/policyCache"
         }
       },
       "required": [],
@@ -884,11 +979,58 @@
         },
         {
           "required": [
-            "link"
+            "conditional"
+          ]
+        },
+        {
+          "required": [
+            "proxy"
+          ]
+        },
+        {
+          "required": [
+            "extension"
           ]
         }
       ]
     },
+    "routeAuth": {
+      "type": "object",
+      "description": "Keys other than required mirror the auth extension's policy schema; the installed extension validates the expanded requirement.",
+      "properties": {
+        "required": {
+          "type": "boolean",
+          "default": true
+        },
+        "role": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 64
+        },
+        "permission": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128
+        },
+        "verified": {
+          "type": "boolean"
+        },
+        "freshWithinSeconds": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 3600
+        },
+        "onDeny": {
+          "enum": [
+            401,
+            403,
+            404,
+            "sign-in"
+          ]
+        }
+      },
+      "additionalProperties": false
+    },
     "policyThrottle": {
       "type": "object",
       "description": "Per-client request budget expressed like the IETF RateLimit-Policy field: quota requests per window seconds. quota and window are required once project and route layers are merged.",
@@ -1222,8 +1364,415 @@
               "$ref": "#/$defs/policyCache"
             }
           ]
+        },
+        "extensions": {
+          "oneOf": [
+            {
+              "const": false
+            },
+            {
+              "type": "object",
+              "maxProperties": 16,
+              "propertyNames": {
+                "type": "string",
+                "pattern": "^[a-z][a-z0-9-]{0,63}$"
+              },
+              "additionalProperties": {
+                "oneOf": [
+                  {
+                    "const": false
+                  },
+                  {
+                    "type": "object"
+                  }
+                ]
+              }
+            }
+          ]
+        }
+      },
+      "additionalProperties": false
+    },
+    "routeMatch": {
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": false,
+      "properties": {
+        "query": {
+          "type": "object",
+          "minProperties": 1,
+          "maxProperties": 16,
+          "propertyNames": {
+            "pattern": "^[!#$%&'*+.^_`|~0-9A-Za-z-]{1,128}$"
+          },
+          "additionalProperties": {
+            "type": "string",
+            "maxLength": 1024
+          }
+        },
+        "headers": {
+          "type": "object",
+          "minProperties": 1,
+          "maxProperties": 16,
+          "propertyNames": {
+            "pattern": "^[!#$%&'*+.^_`|~0-9A-Za-z-]{1,128}$"
+          },
+          "additionalProperties": {
+            "type": "string",
+            "maxLength": 1024
+          }
+        },
+        "cookies": {
+          "type": "object",
+          "minProperties": 1,
+          "maxProperties": 16,
+          "propertyNames": {
+            "pattern": "^[!#$%&'*+.^_`|~0-9A-Za-z-]{1,128}$"
+          },
+          "additionalProperties": {
+            "type": "string",
+            "maxLength": 1024
+          }
+        },
+        "host": {
+          "type": "string",
+          "maxLength": 255
+        },
+        "method": {
+          "enum": [
+            "GET",
+            "HEAD",
+            "POST",
+            "PUT",
+            "PATCH",
+            "DELETE",
+            "OPTIONS"
+          ]
+        }
+      }
+    },
+    "conditionalReply": {
+      "type": "object",
+      "properties": {
+        "redirect": {
+          "type": "object",
+          "properties": {
+            "url": {
+              "type": "string",
+              "maxLength": 8192
+            },
+            "status": {
+              "enum": [
+                301,
+                302,
+                303,
+                307,
+                308
+              ]
+            },
+            "query": {
+              "type": "object",
+              "properties": {
+                "pass": {
+                  "oneOf": [
+                    {
+                      "const": false
+                    },
+                    {
+                      "type": "array",
+                      "items": {
+                        "type": "string"
+                      },
+                      "uniqueItems": true
+                    }
+                  ]
+                },
+                "map": {
+                  "type": "object",
+                  "additionalProperties": {
+                    "type": "object",
+                    "properties": {
+                      "from": {
+                        "enum": [
+                          "path",
+                          "query",
+                          "header"
+                        ]
+                      },
+                      "name": {
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "from",
+                      "name"
+                    ],
+                    "additionalProperties": false
+                  }
+                }
+              },
+              "required": [],
+              "additionalProperties": false
+            }
+          },
+          "required": [
+            "url"
+          ],
+          "additionalProperties": false
+        },
+        "respond": {
+          "type": "object",
+          "properties": {
+            "status": {
+              "type": "integer",
+              "minimum": 200,
+              "maximum": 599
+            },
+            "text": {
+              "type": "string",
+              "maxLength": 1048576
+            },
+            "json": {}
+          },
+          "additionalProperties": false,
+          "not": {
+            "required": [
+              "text",
+              "json"
+            ]
+          }
+        }
+      },
+      "additionalProperties": false,
+      "oneOf": [
+        {
+          "required": [
+            "redirect"
+          ]
+        },
+        {
+          "required": [
+            "respond"
+          ]
+        }
+      ]
+    },
+    "conditionalCase": {
+      "type": "object",
+      "properties": {
+        "redirect": {
+          "type": "object",
+          "properties": {
+            "url": {
+              "type": "string",
+              "maxLength": 8192
+            },
+            "status": {
+              "enum": [
+                301,
+                302,
+                303,
+                307,
+                308
+              ]
+            },
+            "query": {
+              "type": "object",
+              "properties": {
+                "pass": {
+                  "oneOf": [
+                    {
+                      "const": false
+                    },
+                    {
+                      "type": "array",
+                      "items": {
+                        "type": "string"
+                      },
+                      "uniqueItems": true
+                    }
+                  ]
+                },
+                "map": {
+                  "type": "object",
+                  "additionalProperties": {
+                    "type": "object",
+                    "properties": {
+                      "from": {
+                        "enum": [
+                          "path",
+                          "query",
+                          "header"
+                        ]
+                      },
+                      "name": {
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "from",
+                      "name"
+                    ],
+                    "additionalProperties": false
+                  }
+                }
+              },
+              "required": [],
+              "additionalProperties": false
+            }
+          },
+          "required": [
+            "url"
+          ],
+          "additionalProperties": false
+        },
+        "respond": {
+          "type": "object",
+          "properties": {
+            "status": {
+              "type": "integer",
+              "minimum": 200,
+              "maximum": 599
+            },
+            "text": {
+              "type": "string",
+              "maxLength": 1048576
+            },
+            "json": {}
+          },
+          "additionalProperties": false,
+          "not": {
+            "required": [
+              "text",
+              "json"
+            ]
+          }
+        },
+        "match": {
+          "$ref": "#/$defs/routeMatch"
+        }
+      },
+      "additionalProperties": false,
+      "oneOf": [
+        {
+          "required": [
+            "redirect"
+          ]
+        },
+        {
+          "required": [
+            "respond"
+          ]
+        }
+      ],
+      "required": [
+        "match"
+      ]
+    },
+    "signal": {
+      "type": "object",
+      "properties": {
+        "url": {
+          "type": "string",
+          "maxLength": 8192
+        },
+        "headers": {
+          "type": "object",
+          "maxProperties": 32,
+          "additionalProperties": {
+            "oneOf": [
+              {
+                "type": "string",
+                "maxLength": 4096
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "secret": {
+                    "type": "string",
+                    "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
+                  }
+                },
+                "required": [
+                  "secret"
+                ],
+                "additionalProperties": false
+              }
+            ]
+          }
+        }
+      },
+      "required": [
+        "url"
+      ],
+      "additionalProperties": false
+    },
+    "proxy": {
+      "type": "object",
+      "properties": {
+        "url": {
+          "type": "string",
+          "maxLength": 8192
+        },
+        "headers": {
+          "type": "object",
+          "maxProperties": 32,
+          "additionalProperties": {
+            "oneOf": [
+              {
+                "type": "string",
+                "maxLength": 4096
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "secret": {
+                    "type": "string",
+                    "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"
+                  }
+                },
+                "required": [
+                  "secret"
+                ],
+                "additionalProperties": false
+              }
+            ]
+          }
+        },
+        "query": {
+          "type": "array",
+          "maxItems": 32,
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 128
+          }
+        },
+        "requestHeaders": {
+          "type": "array",
+          "maxItems": 32,
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 128
+          }
+        },
+        "responseHeaders": {
+          "type": "array",
+          "maxItems": 32,
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 128
+          }
         }
       },
+      "required": [
+        "url"
+      ],
       "additionalProperties": false
     }
   }