@kashscript/lexicons 0.1.2 → 0.2.0-alpha.0

package/LICENSE

@@ -1,3 +1,7 @@
+Copyright (c) 2026 KashScript Studio.
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+
                                  Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -196,4 +200,6 @@
    License Agreement (SSLA) v1.0, Schedule A (Permissive Packages).
    The SSLA grant is at-least-as-permissive as Apache-2.0 and exists to
    give the entire Foundry a single agreement to point at. Full text:
-   https://kashscript.dev/legal/SSLA
+   docs/legal/SSLA.md in the KashScript repository, or on request from
+   studio@kashscript.dev. Canonical public URL from the first commercial
+   release: https://www.kashscript.com/legal/ssla

package/README.md

@@ -30,6 +30,7 @@ out of the box. The domain extensions (`social`, `trade`, `zkp`,
 | `@kashscript/lexicons/extensions/trade`  | The `kash.trade.*` vocabulary                      |
 | `@kashscript/lexicons/extensions/zkp`    | The `kash.zkp.*` vocabulary                        |
 | `@kashscript/lexicons/extensions/{education,civic,community}` | Further opt-in vocabularies |
+| `@kashscript/lexicons/extensions/door` | `kash.rule@1.0.0` (a door's published rule) and `kash.decision@1.0.0` (the decision receipt — the person's record, never published: `PERSONAL_LEXICONS`). Meaning is checked by `@kashscript/predicate`; see `specs/rule.md` and `specs/decision.md` |
 
 ---
 

package/dist/extensions/door.d.ts

@@ -0,0 +1,225 @@
+/**
+ * Door Extension — the rule a door publishes, and the decision receipt it
+ * gives back (ECOSYSTEM d84(a): rule · receipt · decision · recourse · renewal).
+ *
+ *   kash.rule@1.0.0
+ *     A door's published rule: what it decides, why, who decides (a role),
+ *     the reasons it may give, its contest window, its renewal and end dates,
+ *     and its criteria. Each criterion is an OpenID4VP 1.0 DCQL query for the
+ *     receipts that answer it (or the person's own word) plus a FEEL condition
+ *     over what the query returns — DMN's literal expression. Public and
+ *     organisation-authored. Signed by its author as a DSSE envelope
+ *     (`application/vnd.kash.rule+json`).
+ *
+ *   kash.decision@1.0.0
+ *     The decision receipt: the outcome under one version of a rule, with its
+ *     reasons, the rows that fired and the hashes of the receipts it relied on —
+ *     never their content. Signed by the deciding organisation as an SD-JWT VC
+ *     (`https://kashscript.com/vct/decision/1`) to the person, who keeps it.
+ *     **It is the person's record, so it is never published** — it is listed in
+ *     `PERSONAL_LEXICONS`, which muffler's guard refuses.
+ *
+ * Both shapes are closed: a field this schema does not name is refused, so
+ * neither can carry a score, a person's identity or a receipt's content.
+ * Meaning (the floor's refusals, the FEEL check, the decision's routing rules)
+ * is checked by `@kashscript/predicate`; this extension is the shape.
+ *
+ * Import path: `@kashscript/lexicons/extensions/door`.
+ */
+import type { LexiconDef } from "../registry";
+import { type ObjectSchema } from "../schema";
+/** The DMN types a rule may give a value it reads — DMN's itemDefinition, in the FEEL subset. */
+export declare const DOOR_INPUT_TYPES: readonly ["string", "number", "boolean", "date", "date and time", "days and time duration", "years and months duration", "list of string", "list of number", "list of boolean", "list of date", "list of date and time", "list of days and time duration", "list of years and months duration"];
+export type DoorInputType = (typeof DOOR_INPUT_TYPES)[number];
+export declare const DECISION_OUTCOMES: readonly ["yes", "not-yet", "no", "partial"];
+export type DecisionOutcome = (typeof DECISION_OUTCOMES)[number];
+export type ClaimPathElement = string | number | null;
+export interface DcqlClaimsQuery {
+    /** Required here: a claim's id is the name its criterion's condition reads. */
+    readonly id: string;
+    readonly path: readonly ClaimPathElement[];
+    readonly values?: readonly (string | number | boolean)[];
+}
+export interface DcqlTrustedAuthoritiesQuery {
+    /** `kash_issuer` (issuer DIDs) or `kash_trust_list` (`<publisher DID>#<list id>`), in the spec's extension point. */
+    readonly type: string;
+    readonly values: readonly string[];
+}
+export interface DcqlMeta {
+    /** `dc+sd-jwt`: the accepted `vct` values. */
+    readonly vct_values?: readonly string[];
+    /** `kash-artifact`: the accepted registered DSTs (attest's registry). */
+    readonly dst_values?: readonly string[];
+    /** `kash-artifact`: `countersigned` asks for two independent signatures over the same bytes. */
+    readonly attestation?: "countersigned" | "issuer-signed";
+    /** `kash-artifact`: where in the signed payload the holder's key is named, for the presentation's binding. */
+    readonly holder_path?: readonly ClaimPathElement[];
+}
+export interface DcqlCredentialQuery {
+    readonly id: string;
+    readonly format: string;
+    readonly multiple?: boolean;
+    readonly meta?: DcqlMeta;
+    readonly trusted_authorities?: readonly DcqlTrustedAuthoritiesQuery[];
+    readonly require_cryptographic_holder_binding?: boolean;
+    readonly claims?: readonly DcqlClaimsQuery[];
+    readonly claim_sets?: readonly (readonly string[])[];
+}
+export declare const DCQL_CLAIMS_QUERY_SCHEMA: ObjectSchema;
+export declare const DCQL_CREDENTIAL_QUERY_SCHEMA: ObjectSchema;
+export declare const KASH_RULE_NSID: "kash.rule";
+export declare const KASH_RULE_ID: "kash.rule@1.0.0";
+export interface RuleParameter {
+    readonly type: DoorInputType;
+    /** Public rules: the threshold in clear. */
+    readonly value?: string | number | boolean;
+    /** Private rules: SHA-256 hex of JCS({name, value, salt}); the desk holds the opening. */
+    readonly sealed?: string;
+}
+export interface RuleReason {
+    readonly code: string;
+    readonly outcome: DecisionOutcome;
+    readonly text: string;
+}
+export interface CriterionBasis {
+    readonly title: string;
+    readonly url?: string;
+    readonly clause?: string;
+    readonly page?: number;
+    readonly quote?: string;
+}
+export type CriterionAnswer = {
+    readonly by: "receipts";
+    /** DCQL credential queries, verbatim. Their ids are `<criterion>` or `<criterion>_<suffix>`. */
+    readonly query: readonly DcqlCredentialQuery[];
+    /** Which of them together answer the criterion (DCQL `credential_sets.options`). Default: each alone. */
+    readonly options?: readonly (readonly string[])[];
+    /** Display names for issuer DIDs and trust lists the queries name. */
+    readonly names?: Readonly<Record<string, string>>;
+} | {
+    readonly by: "own-word";
+    /** What the person states, in plain words. */
+    readonly statement: string;
+    /** The values the person gives, by name and DMN type. */
+    readonly fields: Readonly<Record<string, DoorInputType>>;
+};
+export interface Criterion {
+    readonly id: string;
+    readonly label: string;
+    /** Why the door needs it. Required: P4's second rule — a rule asks only for what its purpose needs. */
+    readonly purpose: string;
+    readonly answer: CriterionAnswer;
+    /** An issuer's predicate (attest's predicate credential, `kind` = this criterion, `rule` = this rule) answers the row instead. */
+    readonly predicate?: {
+        readonly issuers: readonly {
+            readonly id: string;
+            readonly name: string;
+        }[];
+        readonly freshDays: number;
+    };
+    /** A FEEL expression (the DMN subset) over what the query returns, with a DMN type for every claim it reads. */
+    readonly condition?: {
+        readonly feel: string;
+        readonly types: Readonly<Record<string, DoorInputType>>;
+    };
+    /** The clause it comes from, when a rule is drawn from a written policy. */
+    readonly basis?: CriterionBasis;
+}
+export interface RuleBody {
+    /** `did:kash:<author>/rule/<slug>` — the publisher's DID plus a path, as d60 identifies places. */
+    readonly id: string;
+    readonly version: number;
+    /** The organisation that publishes it and answers for it. Never a person. */
+    readonly author: string;
+    readonly title: string;
+    readonly purpose: string;
+    readonly visibility: "public" | "private";
+    readonly parameters?: Readonly<Record<string, RuleParameter>>;
+    /** d43: every rule renews and ends. */
+    readonly dates: {
+        readonly published: string;
+        readonly renewBy: string;
+        readonly endsAt: string;
+    };
+    /** Who decides: a role, never a named person. */
+    readonly decider: {
+        readonly role: string;
+    };
+    readonly outcome: {
+        /** What a yes grants, in plain words. */
+        readonly grants: string;
+        /** It binds the person — credit, a contract, a debt (P3): never automatic. */
+        readonly binds: boolean;
+        /** It touches sensitive data (GDPR art. 9): never automatic. */
+        readonly sensitive: boolean;
+        /** The author's standing decision: a yes is given when every criterion is met. Refused with `binds` or `sensitive`. */
+        readonly automaticYes: boolean;
+    };
+    readonly reasons: readonly RuleReason[];
+    readonly contest: {
+        readonly windowDays: number;
+        readonly answerDays: number;
+        readonly how: string;
+    };
+    /** P4's first rule: another way to show the same thing. Paper is the floor. */
+    readonly anotherWay: string;
+    readonly criteria: readonly Criterion[];
+    /** The author's written answers to the warnings validation raised. Published with the rule. */
+    readonly answers?: readonly {
+        readonly criterion: string;
+        readonly code: string;
+        readonly text: string;
+    }[];
+    /** Practice rules say so inside what is signed. */
+    readonly practice?: boolean;
+}
+export declare const CRITERION_SCHEMA: ObjectSchema;
+export declare const KASH_RULE_BODY_SCHEMA: ObjectSchema;
+export declare const KASH_RULE_LEXICON: LexiconDef;
+export declare const KASH_DECISION_NSID: "kash.decision";
+export declare const KASH_DECISION_ID: "kash.decision@1.0.0";
+export type DecidedBy = {
+    readonly kind: "standing";
+    readonly standing: string;
+} | {
+    readonly kind: "person";
+    readonly role: string;
+    readonly seat: string;
+    readonly signature: string;
+};
+export interface DecisionBody {
+    readonly rule: {
+        readonly id: string;
+        readonly version: number;
+        readonly hash: string;
+    };
+    readonly outcome: DecisionOutcome;
+    /** Codes from the rule's reasons. At least one — node rule 11. */
+    readonly reasons: readonly string[];
+    readonly rows: {
+        readonly fired: readonly string[];
+        readonly missing: readonly string[];
+    };
+    /** SHA-256 hex of each receipt relied on. Never the receipt. */
+    readonly reliedOn: readonly string[];
+    readonly decidedBy: DecidedBy;
+    readonly automatic: boolean;
+    /** A refusal or a partial grant names the unmet criterion and that the receipts were read (P3). */
+    readonly refusal?: {
+        readonly unmet: readonly string[];
+        readonly receiptsRead: true;
+    };
+    readonly decidedAt: string;
+    readonly contestUntil: string;
+    readonly practice?: boolean;
+}
+export declare const KASH_DECISION_BODY_SCHEMA: ObjectSchema;
+export declare const KASH_DECISION_LEXICON: LexiconDef;
+export declare const DOOR_LEXICONS: readonly LexiconDef[];
+/**
+ * NSIDs whose records belong to a person and are never published. muffler's
+ * guard (KS-N1) refuses them; d59: muffler and the lexicons publish public,
+ * organisation-authored records only.
+ */
+export declare const PERSONAL_LEXICONS: readonly string[];
+//# sourceMappingURL=door.d.ts.map

package/dist/extensions/door.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"door.d.ts","sourceRoot":"","sources":["../../src/extensions/door.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAK,KAAK,YAAY,EAAe,MAAM,WAAW,CAAC;AAY9D,iGAAiG;AACjG,eAAO,MAAM,gBAAgB,iSAenB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAG9D,eAAO,MAAM,iBAAiB,8CAA+C,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAIjE,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAEtD,MAAM,WAAW,eAAe;IAC9B,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;CAC1D;AAED,MAAM,WAAW,2BAA2B;IAC1C,qHAAqH;IACrH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,QAAQ;IACvB,8CAA8C;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,yEAAyE;IACzE,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,gGAAgG;IAChG,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,GAAG,eAAe,CAAC;IACzD,8GAA8G;IAC9G,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACtE,QAAQ,CAAC,oCAAoC,CAAC,EAAE,OAAO,CAAC;IACxD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAC;CACtD;AAID,eAAO,MAAM,wBAAwB,EAAE,YAOtC,CAAC;AAEF,eAAO,MAAM,4BAA4B,EAAE,YAqB1C,CAAC;AAIF,eAAO,MAAM,cAAc,EAAG,WAAoB,CAAC;AACnD,eAAO,MAAM,YAAY,EAAG,iBAA0B,CAAC;AAEvD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,4CAA4C;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC3C,0FAA0F;IAC1F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,eAAe,GACvB;IACE,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,gGAAgG;IAChG,QAAQ,CAAC,KAAK,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC/C,yGAAyG;IACzG,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAC;IAClD,sEAAsE;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yDAAyD;IACzD,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;CAC1D,CAAC;AAEN,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,uGAAuG;IACvG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,kIAAkI;IAClI,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,SAAS;YAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACjI,gHAAgH;IAChH,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAA;KAAE,CAAC;IACxG,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,WAAW,QAAQ;IACvB,mGAAmG;IACnG,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IAC9D,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAClG,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE;QAChB,yCAAyC;QACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,8EAA8E;QAC9E,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QACxB,gEAAgE;QAChE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;QAC5B,uHAAuH;QACvH,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;KAChC,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACrG,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,SAAS,EAAE,CAAC;IACxC,+FAA+F;IAC/F,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3G,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAiBD,eAAO,MAAM,gBAAgB,EAAE,YA6B9B,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,YA4BnC,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,UAQ/B,CAAC;AAIF,eAAO,MAAM,kBAAkB,EAAG,eAAwB,CAAC;AAC3D,eAAO,MAAM,gBAAgB,EAAG,qBAA8B,CAAC;AAE/D,MAAM,MAAM,SAAS,GACjB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1G,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,kEAAkE;IAClE,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IAC1F,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,mGAAmG;IACnG,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAA;KAAE,CAAC;IACtF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,eAAO,MAAM,yBAAyB,EAAE,YAkBvC,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,UAQnC,CAAC;AAIF,eAAO,MAAM,aAAa,EAAE,SAAS,UAAU,EAA+C,CAAC;AAE/F;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAAyB,CAAC"}

package/dist/extensions/door.js

@@ -0,0 +1,158 @@
+/**
+ * Door Extension — the rule a door publishes, and the decision receipt it
+ * gives back (ECOSYSTEM d84(a): rule · receipt · decision · recourse · renewal).
+ *
+ *   kash.rule@1.0.0
+ *     A door's published rule: what it decides, why, who decides (a role),
+ *     the reasons it may give, its contest window, its renewal and end dates,
+ *     and its criteria. Each criterion is an OpenID4VP 1.0 DCQL query for the
+ *     receipts that answer it (or the person's own word) plus a FEEL condition
+ *     over what the query returns — DMN's literal expression. Public and
+ *     organisation-authored. Signed by its author as a DSSE envelope
+ *     (`application/vnd.kash.rule+json`).
+ *
+ *   kash.decision@1.0.0
+ *     The decision receipt: the outcome under one version of a rule, with its
+ *     reasons, the rows that fired and the hashes of the receipts it relied on —
+ *     never their content. Signed by the deciding organisation as an SD-JWT VC
+ *     (`https://kashscript.com/vct/decision/1`) to the person, who keeps it.
+ *     **It is the person's record, so it is never published** — it is listed in
+ *     `PERSONAL_LEXICONS`, which muffler's guard refuses.
+ *
+ * Both shapes are closed: a field this schema does not name is refused, so
+ * neither can carry a score, a person's identity or a receipt's content.
+ * Meaning (the floor's refusals, the FEEL check, the decision's routing rules)
+ * is checked by `@kashscript/predicate`; this extension is the shape.
+ *
+ * Import path: `@kashscript/lexicons/extensions/door`.
+ */
+import { S } from "../schema";
+/* ── shared pieces ─────────────────────────────────────────────────── */
+const DID = S.string({ format: "did-ks" });
+const ISO = S.string({ format: "iso8601" });
+const HEX64 = S.string({ pattern: /^[0-9a-f]{64}$/ });
+const SLUG = S.string({ pattern: /^[a-z0-9][a-z0-9-]{0,62}$/ });
+/** DCQL ids: alphanumerics, `_` and `-` (OpenID4VP 1.0 §6.1). */
+const DCQL_ID = S.string({ pattern: /^[A-Za-z0-9_-]{1,64}$/ });
+const TEXT = (max) => S.string({ minLength: 1, maxLength: max });
+/** The DMN types a rule may give a value it reads — DMN's itemDefinition, in the FEEL subset. */
+export const DOOR_INPUT_TYPES = [
+    "string",
+    "number",
+    "boolean",
+    "date",
+    "date and time",
+    "days and time duration",
+    "years and months duration",
+    "list of string",
+    "list of number",
+    "list of boolean",
+    "list of date",
+    "list of date and time",
+    "list of days and time duration",
+    "list of years and months duration",
+];
+const INPUT_TYPE = S.enum(...DOOR_INPUT_TYPES);
+export const DECISION_OUTCOMES = ["yes", "not-yet", "no", "partial"];
+const PATH = S.array(S.union(S.string({ minLength: 1, maxLength: 128 }), S.number({ integer: true, min: 0 }), S.literal(null)), { minItems: 1, maxItems: 16 });
+export const DCQL_CLAIMS_QUERY_SCHEMA = S.object({
+    id: DCQL_ID,
+    path: PATH,
+    values: S.optional(S.array(S.union(S.string({ maxLength: 512 }), S.number({ integer: true }), S.boolean()), { minItems: 1, maxItems: 64 })),
+}, ["id", "path"]);
+export const DCQL_CREDENTIAL_QUERY_SCHEMA = S.object({
+    id: DCQL_ID,
+    format: S.string({ minLength: 1, maxLength: 64 }),
+    multiple: S.optional(S.boolean()),
+    meta: S.optional(S.object({
+        vct_values: S.optional(S.array(S.string({ minLength: 1, maxLength: 256 }), { minItems: 1, maxItems: 16 })),
+        dst_values: S.optional(S.array(S.string({ minLength: 1, maxLength: 256 }), { minItems: 1, maxItems: 16 })),
+        attestation: S.optional(S.enum("countersigned", "issuer-signed")),
+        holder_path: S.optional(PATH),
+    })),
+    trusted_authorities: S.optional(S.array(S.object({ type: S.string({ minLength: 1, maxLength: 64 }), values: S.array(S.string({ minLength: 1, maxLength: 256 }), { minItems: 1, maxItems: 64 }) }, ["type", "values"]), { minItems: 1, maxItems: 8 })),
+    require_cryptographic_holder_binding: S.optional(S.boolean()),
+    claims: S.optional(S.array(DCQL_CLAIMS_QUERY_SCHEMA, { minItems: 1, maxItems: 32 })),
+    claim_sets: S.optional(S.array(S.array(DCQL_ID, { minItems: 1, maxItems: 32 }), { minItems: 1, maxItems: 16 })),
+}, ["id", "format"]);
+/* ── kash.rule@1.0.0 ───────────────────────────────────────────────── */
+export const KASH_RULE_NSID = "kash.rule";
+export const KASH_RULE_ID = "kash.rule@1.0.0";
+const OWN_WORD_ANSWER = S.object({ by: S.literal("own-word"), statement: TEXT(280), fields: S.record(INPUT_TYPE, S.string({ pattern: /^[A-Za-z_][A-Za-z0-9_]{0,63}$/ })) }, ["by", "statement", "fields"]);
+const RECEIPTS_ANSWER = S.object({
+    by: S.literal("receipts"),
+    query: S.array(DCQL_CREDENTIAL_QUERY_SCHEMA, { minItems: 1, maxItems: 8 }),
+    options: S.optional(S.array(S.array(DCQL_ID, { minItems: 1, maxItems: 8 }), { minItems: 1, maxItems: 8 })),
+    names: S.optional(S.record(TEXT(120))),
+}, ["by", "query"]);
+export const CRITERION_SCHEMA = S.object({
+    id: SLUG,
+    label: TEXT(160),
+    purpose: TEXT(600),
+    answer: S.union(RECEIPTS_ANSWER, OWN_WORD_ANSWER),
+    predicate: S.optional(S.object({
+        issuers: S.array(S.object({ id: DID, name: TEXT(120) }, ["id", "name"]), { minItems: 1, maxItems: 16 }),
+        freshDays: S.number({ integer: true, min: 1, max: 366 }),
+    }, ["issuers", "freshDays"])),
+    condition: S.optional(S.object({ feel: S.string({ minLength: 1, maxLength: 2048 }), types: S.record(INPUT_TYPE, S.string({ pattern: /^[A-Za-z_][A-Za-z0-9_]{0,63}$/ })) }, ["feel", "types"])),
+    basis: S.optional(S.object({ title: TEXT(200), url: S.optional(S.string({ format: "url" })), clause: S.optional(TEXT(120)), page: S.optional(S.number({ integer: true, min: 1 })), quote: S.optional(TEXT(1000)) }, ["title"])),
+}, ["id", "label", "purpose", "answer"]);
+export const KASH_RULE_BODY_SCHEMA = S.object({
+    id: S.string({ pattern: /^did:kash:[1-9A-HJ-NP-Za-km-z]{32,48}\/rule\/[a-z0-9][a-z0-9-]{0,62}$/ }),
+    version: S.number({ integer: true, min: 1 }),
+    author: DID,
+    title: TEXT(160),
+    purpose: TEXT(1000),
+    visibility: S.enum("public", "private"),
+    parameters: S.optional(S.record(S.object({ type: INPUT_TYPE, value: S.optional(S.union(S.string({ maxLength: 256 }), S.number(), S.boolean())), sealed: S.optional(HEX64) }, ["type"]), S.string({ pattern: /^[A-Za-z_][A-Za-z0-9_]{0,63}$/ }))),
+    dates: S.object({ published: ISO, renewBy: ISO, endsAt: ISO }, ["published", "renewBy", "endsAt"]),
+    decider: S.object({ role: TEXT(64) }, ["role"]),
+    outcome: S.object({ grants: TEXT(280), binds: S.boolean(), sensitive: S.boolean(), automaticYes: S.boolean() }, ["grants", "binds", "sensitive", "automaticYes"]),
+    reasons: S.array(S.object({ code: SLUG, outcome: S.enum(...DECISION_OUTCOMES), text: TEXT(400) }, ["code", "outcome", "text"]), { minItems: 2, maxItems: 32 }),
+    contest: S.object({ windowDays: S.number({ integer: true, min: 1, max: 366 }), answerDays: S.number({ integer: true, min: 1, max: 366 }), how: TEXT(400) }, ["windowDays", "answerDays", "how"]),
+    anotherWay: TEXT(600),
+    criteria: S.array(CRITERION_SCHEMA, { minItems: 1, maxItems: 32 }),
+    answers: S.optional(S.array(S.object({ criterion: SLUG, code: S.string({ pattern: /^[A-Z][A-Z_]{1,63}$/ }), text: TEXT(1000) }, ["criterion", "code", "text"]), { maxItems: 64 })),
+    practice: S.optional(S.boolean()),
+}, ["id", "version", "author", "title", "purpose", "visibility", "dates", "decider", "outcome", "reasons", "contest", "anotherWay", "criteria"]);
+export const KASH_RULE_LEXICON = {
+    id: KASH_RULE_ID,
+    nsid: KASH_RULE_NSID,
+    semver: { major: 1, minor: 0, patch: 0 },
+    bodySchema: KASH_RULE_BODY_SCHEMA,
+    title: "A door's rule",
+    description: "What a door decides, why, who decides, the reasons it may give, its contest window, renewal and end dates, and its criteria — each an OpenID4VP 1.0 DCQL query plus a FEEL condition. Public, organisation-authored, signed by its author.",
+};
+/* ── kash.decision@1.0.0 ───────────────────────────────────────────── */
+export const KASH_DECISION_NSID = "kash.decision";
+export const KASH_DECISION_ID = "kash.decision@1.0.0";
+export const KASH_DECISION_BODY_SCHEMA = S.object({
+    rule: S.object({ id: KASH_RULE_BODY_SCHEMA.properties.id, version: S.number({ integer: true, min: 1 }), hash: HEX64 }, ["id", "version", "hash"]),
+    outcome: S.enum(...DECISION_OUTCOMES),
+    reasons: S.array(SLUG, { minItems: 1, maxItems: 32 }),
+    rows: S.object({ fired: S.array(SLUG, { maxItems: 32 }), missing: S.array(SLUG, { maxItems: 32 }) }, ["fired", "missing"]),
+    reliedOn: S.array(HEX64, { maxItems: 256 }),
+    decidedBy: S.union(S.object({ kind: S.literal("standing"), standing: S.string({ pattern: /^standing:did:kash:[1-9A-HJ-NP-Za-km-z]{32,48}$/ }) }, ["kind", "standing"]), S.object({ kind: S.literal("person"), role: TEXT(64), seat: DID, signature: S.string({ pattern: /^[A-Za-z0-9_-]+\.\.[A-Za-z0-9_-]+$/, maxLength: 1024 }) }, ["kind", "role", "seat", "signature"])),
+    automatic: S.boolean(),
+    refusal: S.optional(S.object({ unmet: S.array(SLUG, { minItems: 1, maxItems: 32 }), receiptsRead: S.literal(true) }, ["unmet", "receiptsRead"])),
+    decidedAt: ISO,
+    contestUntil: ISO,
+    practice: S.optional(S.boolean()),
+}, ["rule", "outcome", "reasons", "rows", "reliedOn", "decidedBy", "automatic", "decidedAt", "contestUntil"]);
+export const KASH_DECISION_LEXICON = {
+    id: KASH_DECISION_ID,
+    nsid: KASH_DECISION_NSID,
+    semver: { major: 1, minor: 0, patch: 0 },
+    bodySchema: KASH_DECISION_BODY_SCHEMA,
+    title: "A decision receipt",
+    description: "The outcome under one version of a rule, its reasons, the rows that fired and the hashes of the receipts relied on — never their content. The person's own record: signed to them, never published.",
+};
+/* ── bundles ───────────────────────────────────────────────────────── */
+export const DOOR_LEXICONS = [KASH_RULE_LEXICON, KASH_DECISION_LEXICON];
+/**
+ * NSIDs whose records belong to a person and are never published. muffler's
+ * guard (KS-N1) refuses them; d59: muffler and the lexicons publish public,
+ * organisation-authored records only.
+ */
+export const PERSONAL_LEXICONS = [KASH_DECISION_NSID];
+//# sourceMappingURL=door.js.map

package/dist/extensions/door.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"door.js","sourceRoot":"","sources":["../../src/extensions/door.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,EAAE,CAAC,EAAkC,MAAM,WAAW,CAAC;AAE9D,0EAA0E;AAE1E,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC3C,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAC5C,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACtD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;AAChE,iEAAiE;AACjE,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC;AAC/D,MAAM,IAAI,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;AAEjF,iGAAiG;AACjG,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;IACN,eAAe;IACf,wBAAwB;IACxB,2BAA2B;IAC3B,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,cAAc;IACd,uBAAuB;IACvB,gCAAgC;IAChC,mCAAmC;CAC3B,CAAC;AAEX,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC;AAE/C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAU,CAAC;AA0C9E,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AAE/J,MAAM,CAAC,MAAM,wBAAwB,GAAiB,CAAC,CAAC,MAAM,CAC5D;IACE,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,IAAI;IACV,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;CAC5I,EACD,CAAC,IAAI,EAAE,MAAM,CAAC,CACf,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAiB,CAAC,CAAC,MAAM,CAChE;IACE,EAAE,EAAE,OAAO;IACX,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,QAAQ,CACd,CAAC,CAAC,MAAM,CAAC;QACP,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1G,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1G,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;QACjE,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;KAC9B,CAAC,CACH;IACD,mBAAmB,EAAE,CAAC,CAAC,QAAQ,CAC7B,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CACrN;IACD,oCAAoC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7D,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IACpF,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;CAChH,EACD,CAAC,IAAI,EAAE,QAAQ,CAAC,CACjB,CAAC;AAEF,0EAA0E;AAE1E,MAAM,CAAC,MAAM,cAAc,GAAG,WAAoB,CAAC;AACnD,MAAM,CAAC,MAAM,YAAY,GAAG,iBAA0B,CAAC;AA2FvD,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAC9B,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC,EAAE,EACzI,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAC9B,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAC9B;IACE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC1E,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1G,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;CACvC,EACD,CAAC,IAAI,EAAE,OAAO,CAAC,CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAiB,CAAC,CAAC,MAAM,CACpD;IACE,EAAE,EAAE,IAAI;IACR,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;IAChB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC;IAClB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,EAAE,eAAe,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,QAAQ,CACnB,CAAC,CAAC,MAAM,CACN;QACE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACvG,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;KACzD,EACD,CAAC,SAAS,EAAE,WAAW,CAAC,CACzB,CACF;IACD,SAAS,EAAE,CAAC,CAAC,QAAQ,CACnB,CAAC,CAAC,MAAM,CACN,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC,EAAE,EAC1I,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB,CACF;IACD,KAAK,EAAE,CAAC,CAAC,QAAQ,CACf,CAAC,CAAC,MAAM,CACN,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EACvL,CAAC,OAAO,CAAC,CACV,CACF;CACF,EACD,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CACrC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAiB,CAAC,CAAC,MAAM,CACzD;IACE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,uEAAuE,EAAE,CAAC;IAClG,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAC5C,MAAM,EAAE,GAAG;IACX,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;IAChB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;IACnB,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;IACvC,UAAU,EAAE,CAAC,CAAC,QAAQ,CACpB,CAAC,CAAC,MAAM,CACN,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EACtJ,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CACvD,CACF;IACD,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClG,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IACjK,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC9J,OAAO,EAAE,CAAC,CAAC,MAAM,CACf,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EACxI,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,CAAC,CACpC;IACD,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC;IACrB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAClE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAClL,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;CAClC,EACD,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,CAC7I,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAe;IAC3C,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,cAAc;IACpB,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IACxC,UAAU,EAAE,qBAAqB;IACjC,KAAK,EAAE,eAAe;IACtB,WAAW,EACT,4OAA4O;CAC/O,CAAC;AAEF,0EAA0E;AAE1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAwB,CAAC;AAC3D,MAAM,CAAC,MAAM,gBAAgB,GAAG,qBAA8B,CAAC;AAuB/D,MAAM,CAAC,MAAM,yBAAyB,GAAiB,CAAC,CAAC,MAAM,CAC7D;IACE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,qBAAqB,CAAC,UAAU,CAAC,EAAG,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAClJ,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACrD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC1H,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IAC3C,SAAS,EAAE,CAAC,CAAC,KAAK,CAChB,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,EACnJ,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CACnM;IACD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IAChJ,SAAS,EAAE,GAAG;IACd,YAAY,EAAE,GAAG;IACjB,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;CAClC,EACD,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,CAAC,CAC1G,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAe;IAC/C,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,kBAAkB;IACxB,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IACxC,UAAU,EAAE,yBAAyB;IACrC,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EACT,qMAAqM;CACxM,CAAC;AAEF,0EAA0E;AAE1E,MAAM,CAAC,MAAM,aAAa,GAA0B,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;AAE/F;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAsB,CAAC,kBAAkB,CAAC,CAAC"}

package/dist/schema.js

@@ -196,7 +196,11 @@ function validateObject(s, value, path, errors) {
     }
     if (!s.additionalProperties) {
         for (const k of Object.keys(obj)) {
-            if (!(k in s.properties)) {
+            // audit r1 (muffler F5): use own-key membership, not `k in s.properties`.
+            // `"__proto__" in s.properties` is `true` via Object.prototype, so the `in`
+            // form silently ACCEPTS a `__proto__`/`constructor` key under a strict
+            // (additionalProperties:false) schema — a prototype-pollution passthrough.
+            if (!Object.prototype.hasOwnProperty.call(s.properties, k)) {
                 errors.push(err([...path, k], "unknown field", obj[k]));
             }
         }

package/dist/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA4FH,uEAAuE;AAEvE,MAAM,CAAC,MAAM,CAAC,GAAG;IACf,GAAG;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,CAAC,IAAiC;QACtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,CAAC,IAAiC;QACtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,KAAuC;QAC7C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,GAAG,MAAoC;QAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IACD,KAAK,CAAC,KAAa,EAAE,IAAiE;QACpF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,CACJ,UAA4C,EAC5C,WAA8B,EAAE,EAChC,uBAAgC,KAAK;QAErC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACxE,CAAC;IACD,KAAK,CAAC,GAAG,QAA2B;QAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACrC,CAAC;IACD,QAAQ,CAAC,KAAa;QACpB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,CAAC,MAAc,EAAE,OAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC5D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;CACF,CAAC;AAcF,uEAAuE;AAEvE;;oCAEoC;AACpC,MAAM,CAAC,MAAM,eAAe,GAAuC;IACjE,4EAA4E;IAC5E,2EAA2E;IAC3E,mEAAmE;IACnE,wEAAwE;IACxE,2BAA2B;IAC3B,QAAQ,EAAM,wCAAwC;IACtD,KAAK,EAAS,qBAAqB;IACnC,SAAS,EAAK,sEAAsE;IACpF,KAAK,EAAS,qBAAqB;IACnC,WAAW,EAAG,0BAA0B;IACxC,OAAO,EAAO,0BAA0B;IACxC,SAAS,EAAK,YAAY;IAC1B,YAAY,EAAE,qDAAqD;IACnE,MAAM,EAAQ,uCAAuC;CACtD,CAAC;AAEF,uEAAuE;AAEvE,MAAM,UAAU,QAAQ,CAAc,MAAc,EAAE,KAAc;IAClE,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC;QACxB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAU,EAAE;QACjC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,OAAO,CAAC,MAAc,EAAE,KAAc;IACpD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,uEAAuE;AAEvE,SAAS,WAAW,CAClB,MAAc,EACd,KAAc,EACd,IAAkC,EAClC,MAAyB;IAEzB,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,KAAK;YACR,OAAO;QACT,KAAK,QAAQ;YACX,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO;QACT,KAAK,QAAQ;YACX,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO;QACT,KAAK,SAAS;YACZ,IAAI,OAAO,KAAK,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC;YAClF,OAAO;QACT,KAAK,SAAS;YACZ,IAAI,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;YACpF,CAAC;YACD,OAAO;QACT,KAAK,MAAM;YACT,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iCAAiC,EAAE,KAAK,CAAC,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAwB,CAAC,EAAE,CAAC;gBACtD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,mBAAmB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;YACpF,CAAC;YACD,OAAO;QACT,KAAK,OAAO;YACV,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,OAAO;QACT,KAAK,QAAQ;YACX,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO;QACT,KAAK,OAAO;YACV,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,OAAO;QACT,KAAK,UAAU;YACb,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO;YAChC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC/C,OAAO;QACT,KAAK,QAAQ;YACX,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO;IACX,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,IAAkC,EAAE,OAAe,EAAE,QAAiB;IACjF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,CAAe,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IACpH,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC,SAAS,SAAS,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC,SAAS,SAAS,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,CAAe,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IACpH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,CAAc,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IAClH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC,QAAQ,SAAS,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,QAAQ,SAAS,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,CAAe,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IACpH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;YACnC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,CAAc,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IAClH,KAAK,MAAM,OAAO,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,SAAS,GAAsB,EAAE,CAAC;QACxC,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;IACrC,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,MAAM,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,cAAc,CAAC,CAAe,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IACpH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,0BAA0B,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QACtE,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7C,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;AACH,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA4FH,uEAAuE;AAEvE,MAAM,CAAC,MAAM,CAAC,GAAG;IACf,GAAG;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,CAAC,IAAiC;QACtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,CAAC,IAAiC;QACtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,KAAuC;QAC7C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,GAAG,MAAoC;QAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IACD,KAAK,CAAC,KAAa,EAAE,IAAiE;QACpF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,CACJ,UAA4C,EAC5C,WAA8B,EAAE,EAChC,uBAAgC,KAAK;QAErC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACxE,CAAC;IACD,KAAK,CAAC,GAAG,QAA2B;QAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACrC,CAAC;IACD,QAAQ,CAAC,KAAa;QACpB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,CAAC,MAAc,EAAE,OAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC5D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;CACF,CAAC;AAcF,uEAAuE;AAEvE;;oCAEoC;AACpC,MAAM,CAAC,MAAM,eAAe,GAAuC;IACjE,4EAA4E;IAC5E,2EAA2E;IAC3E,mEAAmE;IACnE,wEAAwE;IACxE,2BAA2B;IAC3B,QAAQ,EAAM,wCAAwC;IACtD,KAAK,EAAS,qBAAqB;IACnC,SAAS,EAAK,sEAAsE;IACpF,KAAK,EAAS,qBAAqB;IACnC,WAAW,EAAG,0BAA0B;IACxC,OAAO,EAAO,0BAA0B;IACxC,SAAS,EAAK,YAAY;IAC1B,YAAY,EAAE,qDAAqD;IACnE,MAAM,EAAQ,uCAAuC;CACtD,CAAC;AAEF,uEAAuE;AAEvE,MAAM,UAAU,QAAQ,CAAc,MAAc,EAAE,KAAc;IAClE,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC;QACxB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAU,EAAE;QACjC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,OAAO,CAAC,MAAc,EAAE,KAAc;IACpD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,uEAAuE;AAEvE,SAAS,WAAW,CAClB,MAAc,EACd,KAAc,EACd,IAAkC,EAClC,MAAyB;IAEzB,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,KAAK;YACR,OAAO;QACT,KAAK,QAAQ;YACX,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO;QACT,KAAK,QAAQ;YACX,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO;QACT,KAAK,SAAS;YACZ,IAAI,OAAO,KAAK,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC;YAClF,OAAO;QACT,KAAK,SAAS;YACZ,IAAI,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;YACpF,CAAC;YACD,OAAO;QACT,KAAK,MAAM;YACT,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iCAAiC,EAAE,KAAK,CAAC,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAwB,CAAC,EAAE,CAAC;gBACtD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,mBAAmB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;YACpF,CAAC;YACD,OAAO;QACT,KAAK,OAAO;YACV,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,OAAO;QACT,KAAK,QAAQ;YACX,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO;QACT,KAAK,OAAO;YACV,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,OAAO;QACT,KAAK,UAAU;YACb,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO;YAChC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC/C,OAAO;QACT,KAAK,QAAQ;YACX,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO;IACX,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,IAAkC,EAAE,OAAe,EAAE,QAAiB;IACjF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,CAAe,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IACpH,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC,SAAS,SAAS,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC,SAAS,SAAS,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,CAAe,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IACpH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,CAAc,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IAClH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC,QAAQ,SAAS,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,QAAQ,SAAS,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,CAAe,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IACpH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;YACnC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,0EAA0E;YAC1E,4EAA4E;YAC5E,uEAAuE;YACvE,2EAA2E;YAC3E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,CAAc,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IAClH,KAAK,MAAM,OAAO,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,SAAS,GAAsB,EAAE,CAAC;QACxC,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;IACrC,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,MAAM,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,cAAc,CAAC,CAAe,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IACpH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,0BAA0B,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QACtE,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7C,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kashscript/lexicons",
-  "version": "0.1.2",
+  "version": "0.2.0-alpha.0",
   "description": "Zero-dependency lexicon framework — envelope, schema DSL, registry, validator. Agnostic core; domain content ships as opt-in extensions.",
   "type": "module",
   "main": "./dist/index.js",
@@ -70,6 +70,11 @@
       "types": "./dist/extensions/community.d.ts",
       "import": "./dist/extensions/community.js",
       "default": "./dist/extensions/community.js"
+    },
+    "./extensions/door": {
+      "types": "./dist/extensions/door.d.ts",
+      "import": "./dist/extensions/door.js",
+      "default": "./dist/extensions/door.js"
     }
   },
   "sideEffects": false,
@@ -82,10 +87,13 @@
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "typecheck": "tsc --noEmit",
+    "typecheck:test": "tsc --noEmit -p tsconfig.test.json",
+    "test": "bun run typecheck:test && bun test",
     "clean": "rm -rf dist .turbo"
   },
   "devDependencies": {
-    "typescript": "^5.6.3"
+    "typescript": "^5.6.3",
+    "@types/bun": "^1.2.5"
   },
   "license": "Apache-2.0",
   "publishConfig": {

package/src/extensions/door.ts

@@ -0,0 +1,384 @@
+/**
+ * Door Extension — the rule a door publishes, and the decision receipt it
+ * gives back (ECOSYSTEM d84(a): rule · receipt · decision · recourse · renewal).
+ *
+ *   kash.rule@1.0.0
+ *     A door's published rule: what it decides, why, who decides (a role),
+ *     the reasons it may give, its contest window, its renewal and end dates,
+ *     and its criteria. Each criterion is an OpenID4VP 1.0 DCQL query for the
+ *     receipts that answer it (or the person's own word) plus a FEEL condition
+ *     over what the query returns — DMN's literal expression. Public and
+ *     organisation-authored. Signed by its author as a DSSE envelope
+ *     (`application/vnd.kash.rule+json`).
+ *
+ *   kash.decision@1.0.0
+ *     The decision receipt: the outcome under one version of a rule, with its
+ *     reasons, the rows that fired and the hashes of the receipts it relied on —
+ *     never their content. Signed by the deciding organisation as an SD-JWT VC
+ *     (`https://kashscript.com/vct/decision/1`) to the person, who keeps it.
+ *     **It is the person's record, so it is never published** — it is listed in
+ *     `PERSONAL_LEXICONS`, which muffler's guard refuses.
+ *
+ * Both shapes are closed: a field this schema does not name is refused, so
+ * neither can carry a score, a person's identity or a receipt's content.
+ * Meaning (the floor's refusals, the FEEL check, the decision's routing rules)
+ * is checked by `@kashscript/predicate`; this extension is the shape.
+ *
+ * Import path: `@kashscript/lexicons/extensions/door`.
+ */
+
+import type { LexiconDef } from "../registry";
+import { S, type ObjectSchema, type Schema } from "../schema";
+
+/* ── shared pieces ─────────────────────────────────────────────────── */
+
+const DID = S.string({ format: "did-ks" });
+const ISO = S.string({ format: "iso8601" });
+const HEX64 = S.string({ pattern: /^[0-9a-f]{64}$/ });
+const SLUG = S.string({ pattern: /^[a-z0-9][a-z0-9-]{0,62}$/ });
+/** DCQL ids: alphanumerics, `_` and `-` (OpenID4VP 1.0 §6.1). */
+const DCQL_ID = S.string({ pattern: /^[A-Za-z0-9_-]{1,64}$/ });
+const TEXT = (max: number): Schema => S.string({ minLength: 1, maxLength: max });
+
+/** The DMN types a rule may give a value it reads — DMN's itemDefinition, in the FEEL subset. */
+export const DOOR_INPUT_TYPES = [
+  "string",
+  "number",
+  "boolean",
+  "date",
+  "date and time",
+  "days and time duration",
+  "years and months duration",
+  "list of string",
+  "list of number",
+  "list of boolean",
+  "list of date",
+  "list of date and time",
+  "list of days and time duration",
+  "list of years and months duration",
+] as const;
+export type DoorInputType = (typeof DOOR_INPUT_TYPES)[number];
+const INPUT_TYPE = S.enum(...DOOR_INPUT_TYPES);
+
+export const DECISION_OUTCOMES = ["yes", "not-yet", "no", "partial"] as const;
+export type DecisionOutcome = (typeof DECISION_OUTCOMES)[number];
+
+/* ── DCQL (OpenID4VP 1.0 §6), as a rule carries it ─────────────────── */
+
+export type ClaimPathElement = string | number | null;
+
+export interface DcqlClaimsQuery {
+  /** Required here: a claim's id is the name its criterion's condition reads. */
+  readonly id: string;
+  readonly path: readonly ClaimPathElement[];
+  readonly values?: readonly (string | number | boolean)[];
+}
+
+export interface DcqlTrustedAuthoritiesQuery {
+  /** `kash_issuer` (issuer DIDs) or `kash_trust_list` (`<publisher DID>#<list id>`), in the spec's extension point. */
+  readonly type: string;
+  readonly values: readonly string[];
+}
+
+export interface DcqlMeta {
+  /** `dc+sd-jwt`: the accepted `vct` values. */
+  readonly vct_values?: readonly string[];
+  /** `kash-artifact`: the accepted registered DSTs (attest's registry). */
+  readonly dst_values?: readonly string[];
+  /** `kash-artifact`: `countersigned` asks for two independent signatures over the same bytes. */
+  readonly attestation?: "countersigned" | "issuer-signed";
+  /** `kash-artifact`: where in the signed payload the holder's key is named, for the presentation's binding. */
+  readonly holder_path?: readonly ClaimPathElement[];
+}
+
+export interface DcqlCredentialQuery {
+  readonly id: string;
+  readonly format: string;
+  readonly multiple?: boolean;
+  readonly meta?: DcqlMeta;
+  readonly trusted_authorities?: readonly DcqlTrustedAuthoritiesQuery[];
+  readonly require_cryptographic_holder_binding?: boolean;
+  readonly claims?: readonly DcqlClaimsQuery[];
+  readonly claim_sets?: readonly (readonly string[])[];
+}
+
+const PATH = S.array(S.union(S.string({ minLength: 1, maxLength: 128 }), S.number({ integer: true, min: 0 }), S.literal(null)), { minItems: 1, maxItems: 16 });
+
+export const DCQL_CLAIMS_QUERY_SCHEMA: ObjectSchema = S.object(
+  {
+    id: DCQL_ID,
+    path: PATH,
+    values: S.optional(S.array(S.union(S.string({ maxLength: 512 }), S.number({ integer: true }), S.boolean()), { minItems: 1, maxItems: 64 })),
+  },
+  ["id", "path"],
+);
+
+export const DCQL_CREDENTIAL_QUERY_SCHEMA: ObjectSchema = S.object(
+  {
+    id: DCQL_ID,
+    format: S.string({ minLength: 1, maxLength: 64 }),
+    multiple: S.optional(S.boolean()),
+    meta: S.optional(
+      S.object({
+        vct_values: S.optional(S.array(S.string({ minLength: 1, maxLength: 256 }), { minItems: 1, maxItems: 16 })),
+        dst_values: S.optional(S.array(S.string({ minLength: 1, maxLength: 256 }), { minItems: 1, maxItems: 16 })),
+        attestation: S.optional(S.enum("countersigned", "issuer-signed")),
+        holder_path: S.optional(PATH),
+      }),
+    ),
+    trusted_authorities: S.optional(
+      S.array(S.object({ type: S.string({ minLength: 1, maxLength: 64 }), values: S.array(S.string({ minLength: 1, maxLength: 256 }), { minItems: 1, maxItems: 64 }) }, ["type", "values"]), { minItems: 1, maxItems: 8 }),
+    ),
+    require_cryptographic_holder_binding: S.optional(S.boolean()),
+    claims: S.optional(S.array(DCQL_CLAIMS_QUERY_SCHEMA, { minItems: 1, maxItems: 32 })),
+    claim_sets: S.optional(S.array(S.array(DCQL_ID, { minItems: 1, maxItems: 32 }), { minItems: 1, maxItems: 16 })),
+  },
+  ["id", "format"],
+);
+
+/* ── kash.rule@1.0.0 ───────────────────────────────────────────────── */
+
+export const KASH_RULE_NSID = "kash.rule" as const;
+export const KASH_RULE_ID = "kash.rule@1.0.0" as const;
+
+export interface RuleParameter {
+  readonly type: DoorInputType;
+  /** Public rules: the threshold in clear. */
+  readonly value?: string | number | boolean;
+  /** Private rules: SHA-256 hex of JCS({name, value, salt}); the desk holds the opening. */
+  readonly sealed?: string;
+}
+
+export interface RuleReason {
+  readonly code: string;
+  readonly outcome: DecisionOutcome;
+  readonly text: string;
+}
+
+export interface CriterionBasis {
+  readonly title: string;
+  readonly url?: string;
+  readonly clause?: string;
+  readonly page?: number;
+  readonly quote?: string;
+}
+
+export type CriterionAnswer =
+  | {
+      readonly by: "receipts";
+      /** DCQL credential queries, verbatim. Their ids are `<criterion>` or `<criterion>_<suffix>`. */
+      readonly query: readonly DcqlCredentialQuery[];
+      /** Which of them together answer the criterion (DCQL `credential_sets.options`). Default: each alone. */
+      readonly options?: readonly (readonly string[])[];
+      /** Display names for issuer DIDs and trust lists the queries name. */
+      readonly names?: Readonly<Record<string, string>>;
+    }
+  | {
+      readonly by: "own-word";
+      /** What the person states, in plain words. */
+      readonly statement: string;
+      /** The values the person gives, by name and DMN type. */
+      readonly fields: Readonly<Record<string, DoorInputType>>;
+    };
+
+export interface Criterion {
+  readonly id: string;
+  readonly label: string;
+  /** Why the door needs it. Required: P4's second rule — a rule asks only for what its purpose needs. */
+  readonly purpose: string;
+  readonly answer: CriterionAnswer;
+  /** An issuer's predicate (attest's predicate credential, `kind` = this criterion, `rule` = this rule) answers the row instead. */
+  readonly predicate?: { readonly issuers: readonly { readonly id: string; readonly name: string }[]; readonly freshDays: number };
+  /** A FEEL expression (the DMN subset) over what the query returns, with a DMN type for every claim it reads. */
+  readonly condition?: { readonly feel: string; readonly types: Readonly<Record<string, DoorInputType>> };
+  /** The clause it comes from, when a rule is drawn from a written policy. */
+  readonly basis?: CriterionBasis;
+}
+
+export interface RuleBody {
+  /** `did:kash:<author>/rule/<slug>` — the publisher's DID plus a path, as d60 identifies places. */
+  readonly id: string;
+  readonly version: number;
+  /** The organisation that publishes it and answers for it. Never a person. */
+  readonly author: string;
+  readonly title: string;
+  readonly purpose: string;
+  readonly visibility: "public" | "private";
+  readonly parameters?: Readonly<Record<string, RuleParameter>>;
+  /** d43: every rule renews and ends. */
+  readonly dates: { readonly published: string; readonly renewBy: string; readonly endsAt: string };
+  /** Who decides: a role, never a named person. */
+  readonly decider: { readonly role: string };
+  readonly outcome: {
+    /** What a yes grants, in plain words. */
+    readonly grants: string;
+    /** It binds the person — credit, a contract, a debt (P3): never automatic. */
+    readonly binds: boolean;
+    /** It touches sensitive data (GDPR art. 9): never automatic. */
+    readonly sensitive: boolean;
+    /** The author's standing decision: a yes is given when every criterion is met. Refused with `binds` or `sensitive`. */
+    readonly automaticYes: boolean;
+  };
+  readonly reasons: readonly RuleReason[];
+  readonly contest: { readonly windowDays: number; readonly answerDays: number; readonly how: string };
+  /** P4's first rule: another way to show the same thing. Paper is the floor. */
+  readonly anotherWay: string;
+  readonly criteria: readonly Criterion[];
+  /** The author's written answers to the warnings validation raised. Published with the rule. */
+  readonly answers?: readonly { readonly criterion: string; readonly code: string; readonly text: string }[];
+  /** Practice rules say so inside what is signed. */
+  readonly practice?: boolean;
+}
+
+const OWN_WORD_ANSWER = S.object(
+  { by: S.literal("own-word"), statement: TEXT(280), fields: S.record(INPUT_TYPE, S.string({ pattern: /^[A-Za-z_][A-Za-z0-9_]{0,63}$/ })) },
+  ["by", "statement", "fields"],
+);
+
+const RECEIPTS_ANSWER = S.object(
+  {
+    by: S.literal("receipts"),
+    query: S.array(DCQL_CREDENTIAL_QUERY_SCHEMA, { minItems: 1, maxItems: 8 }),
+    options: S.optional(S.array(S.array(DCQL_ID, { minItems: 1, maxItems: 8 }), { minItems: 1, maxItems: 8 })),
+    names: S.optional(S.record(TEXT(120))),
+  },
+  ["by", "query"],
+);
+
+export const CRITERION_SCHEMA: ObjectSchema = S.object(
+  {
+    id: SLUG,
+    label: TEXT(160),
+    purpose: TEXT(600),
+    answer: S.union(RECEIPTS_ANSWER, OWN_WORD_ANSWER),
+    predicate: S.optional(
+      S.object(
+        {
+          issuers: S.array(S.object({ id: DID, name: TEXT(120) }, ["id", "name"]), { minItems: 1, maxItems: 16 }),
+          freshDays: S.number({ integer: true, min: 1, max: 366 }),
+        },
+        ["issuers", "freshDays"],
+      ),
+    ),
+    condition: S.optional(
+      S.object(
+        { feel: S.string({ minLength: 1, maxLength: 2048 }), types: S.record(INPUT_TYPE, S.string({ pattern: /^[A-Za-z_][A-Za-z0-9_]{0,63}$/ })) },
+        ["feel", "types"],
+      ),
+    ),
+    basis: S.optional(
+      S.object(
+        { title: TEXT(200), url: S.optional(S.string({ format: "url" })), clause: S.optional(TEXT(120)), page: S.optional(S.number({ integer: true, min: 1 })), quote: S.optional(TEXT(1000)) },
+        ["title"],
+      ),
+    ),
+  },
+  ["id", "label", "purpose", "answer"],
+);
+
+export const KASH_RULE_BODY_SCHEMA: ObjectSchema = S.object(
+  {
+    id: S.string({ pattern: /^did:kash:[1-9A-HJ-NP-Za-km-z]{32,48}\/rule\/[a-z0-9][a-z0-9-]{0,62}$/ }),
+    version: S.number({ integer: true, min: 1 }),
+    author: DID,
+    title: TEXT(160),
+    purpose: TEXT(1000),
+    visibility: S.enum("public", "private"),
+    parameters: S.optional(
+      S.record(
+        S.object({ type: INPUT_TYPE, value: S.optional(S.union(S.string({ maxLength: 256 }), S.number(), S.boolean())), sealed: S.optional(HEX64) }, ["type"]),
+        S.string({ pattern: /^[A-Za-z_][A-Za-z0-9_]{0,63}$/ }),
+      ),
+    ),
+    dates: S.object({ published: ISO, renewBy: ISO, endsAt: ISO }, ["published", "renewBy", "endsAt"]),
+    decider: S.object({ role: TEXT(64) }, ["role"]),
+    outcome: S.object({ grants: TEXT(280), binds: S.boolean(), sensitive: S.boolean(), automaticYes: S.boolean() }, ["grants", "binds", "sensitive", "automaticYes"]),
+    reasons: S.array(S.object({ code: SLUG, outcome: S.enum(...DECISION_OUTCOMES), text: TEXT(400) }, ["code", "outcome", "text"]), { minItems: 2, maxItems: 32 }),
+    contest: S.object(
+      { windowDays: S.number({ integer: true, min: 1, max: 366 }), answerDays: S.number({ integer: true, min: 1, max: 366 }), how: TEXT(400) },
+      ["windowDays", "answerDays", "how"],
+    ),
+    anotherWay: TEXT(600),
+    criteria: S.array(CRITERION_SCHEMA, { minItems: 1, maxItems: 32 }),
+    answers: S.optional(S.array(S.object({ criterion: SLUG, code: S.string({ pattern: /^[A-Z][A-Z_]{1,63}$/ }), text: TEXT(1000) }, ["criterion", "code", "text"]), { maxItems: 64 })),
+    practice: S.optional(S.boolean()),
+  },
+  ["id", "version", "author", "title", "purpose", "visibility", "dates", "decider", "outcome", "reasons", "contest", "anotherWay", "criteria"],
+);
+
+export const KASH_RULE_LEXICON: LexiconDef = {
+  id: KASH_RULE_ID,
+  nsid: KASH_RULE_NSID,
+  semver: { major: 1, minor: 0, patch: 0 },
+  bodySchema: KASH_RULE_BODY_SCHEMA,
+  title: "A door's rule",
+  description:
+    "What a door decides, why, who decides, the reasons it may give, its contest window, renewal and end dates, and its criteria — each an OpenID4VP 1.0 DCQL query plus a FEEL condition. Public, organisation-authored, signed by its author.",
+};
+
+/* ── kash.decision@1.0.0 ───────────────────────────────────────────── */
+
+export const KASH_DECISION_NSID = "kash.decision" as const;
+export const KASH_DECISION_ID = "kash.decision@1.0.0" as const;
+
+export type DecidedBy =
+  | { readonly kind: "standing"; readonly standing: string }
+  | { readonly kind: "person"; readonly role: string; readonly seat: string; readonly signature: string };
+
+export interface DecisionBody {
+  readonly rule: { readonly id: string; readonly version: number; readonly hash: string };
+  readonly outcome: DecisionOutcome;
+  /** Codes from the rule's reasons. At least one — node rule 11. */
+  readonly reasons: readonly string[];
+  readonly rows: { readonly fired: readonly string[]; readonly missing: readonly string[] };
+  /** SHA-256 hex of each receipt relied on. Never the receipt. */
+  readonly reliedOn: readonly string[];
+  readonly decidedBy: DecidedBy;
+  readonly automatic: boolean;
+  /** A refusal or a partial grant names the unmet criterion and that the receipts were read (P3). */
+  readonly refusal?: { readonly unmet: readonly string[]; readonly receiptsRead: true };
+  readonly decidedAt: string;
+  readonly contestUntil: string;
+  readonly practice?: boolean;
+}
+
+export const KASH_DECISION_BODY_SCHEMA: ObjectSchema = S.object(
+  {
+    rule: S.object({ id: KASH_RULE_BODY_SCHEMA.properties.id!, version: S.number({ integer: true, min: 1 }), hash: HEX64 }, ["id", "version", "hash"]),
+    outcome: S.enum(...DECISION_OUTCOMES),
+    reasons: S.array(SLUG, { minItems: 1, maxItems: 32 }),
+    rows: S.object({ fired: S.array(SLUG, { maxItems: 32 }), missing: S.array(SLUG, { maxItems: 32 }) }, ["fired", "missing"]),
+    reliedOn: S.array(HEX64, { maxItems: 256 }),
+    decidedBy: S.union(
+      S.object({ kind: S.literal("standing"), standing: S.string({ pattern: /^standing:did:kash:[1-9A-HJ-NP-Za-km-z]{32,48}$/ }) }, ["kind", "standing"]),
+      S.object({ kind: S.literal("person"), role: TEXT(64), seat: DID, signature: S.string({ pattern: /^[A-Za-z0-9_-]+\.\.[A-Za-z0-9_-]+$/, maxLength: 1024 }) }, ["kind", "role", "seat", "signature"]),
+    ),
+    automatic: S.boolean(),
+    refusal: S.optional(S.object({ unmet: S.array(SLUG, { minItems: 1, maxItems: 32 }), receiptsRead: S.literal(true) }, ["unmet", "receiptsRead"])),
+    decidedAt: ISO,
+    contestUntil: ISO,
+    practice: S.optional(S.boolean()),
+  },
+  ["rule", "outcome", "reasons", "rows", "reliedOn", "decidedBy", "automatic", "decidedAt", "contestUntil"],
+);
+
+export const KASH_DECISION_LEXICON: LexiconDef = {
+  id: KASH_DECISION_ID,
+  nsid: KASH_DECISION_NSID,
+  semver: { major: 1, minor: 0, patch: 0 },
+  bodySchema: KASH_DECISION_BODY_SCHEMA,
+  title: "A decision receipt",
+  description:
+    "The outcome under one version of a rule, its reasons, the rows that fired and the hashes of the receipts relied on — never their content. The person's own record: signed to them, never published.",
+};
+
+/* ── bundles ───────────────────────────────────────────────────────── */
+
+export const DOOR_LEXICONS: readonly LexiconDef[] = [KASH_RULE_LEXICON, KASH_DECISION_LEXICON];
+
+/**
+ * NSIDs whose records belong to a person and are never published. muffler's
+ * guard (KS-N1) refuses them; d59: muffler and the lexicons publish public,
+ * organisation-authored records only.
+ */
+export const PERSONAL_LEXICONS: readonly string[] = [KASH_DECISION_NSID];

package/src/schema.ts

@@ -319,7 +319,11 @@ function validateObject(s: ObjectSchema, value: unknown, path: readonly (string
   }
   if (!s.additionalProperties) {
     for (const k of Object.keys(obj)) {
-      if (!(k in s.properties)) {
+      // audit r1 (muffler F5): use own-key membership, not `k in s.properties`.
+      // `"__proto__" in s.properties` is `true` via Object.prototype, so the `in`
+      // form silently ACCEPTS a `__proto__`/`constructor` key under a strict
+      // (additionalProperties:false) schema — a prototype-pollution passthrough.
+      if (!Object.prototype.hasOwnProperty.call(s.properties, k)) {
         errors.push(err([...path, k], "unknown field", obj[k]));
       }
     }