@kashscript/lexicons 0.1.2 → 0.3.0-alpha.0

package/LICENSE

@@ -1,3 +1,7 @@
+Copyright (c) 2026 KashScript Studio.
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+
                                  Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -196,4 +200,6 @@
    License Agreement (SSLA) v1.0, Schedule A (Permissive Packages).
    The SSLA grant is at-least-as-permissive as Apache-2.0 and exists to
    give the entire Foundry a single agreement to point at. Full text:
-   https://kashscript.dev/legal/SSLA
+   docs/legal/SSLA.md in the KashScript repository, or on request from
+   studio@kashscript.dev. Canonical public URL from the first commercial
+   release: https://www.kashscript.com/legal/ssla

package/README.md

@@ -30,6 +30,7 @@ out of the box. The domain extensions (`social`, `trade`, `zkp`,
 | `@kashscript/lexicons/extensions/trade`  | The `kash.trade.*` vocabulary                      |
 | `@kashscript/lexicons/extensions/zkp`    | The `kash.zkp.*` vocabulary                        |
 | `@kashscript/lexicons/extensions/{education,civic,community}` | Further opt-in vocabularies |
+| `@kashscript/lexicons/extensions/door` | `kash.rule@1.0.0` and `kash.rule@1.1.0` (a door's published rule; 1.1.0 adds its address, drafts, parameter bounds and each criterion's subject) and `kash.adoption@1.0.0` (an anchor adopts a rule with local values within its bounds). All three are public, organisation-authored records (d59). The decision receipt is the person's record, so its shape lives in `@kashscript/predicate` since `0.3.0-alpha.0`. Meaning is checked by `@kashscript/predicate`; see `specs/rule.md`, `specs/adoption.md` and `specs/decision.md` |
 
 ---
 

package/dist/extensions/door.d.ts

@@ -0,0 +1,316 @@
+/**
+ * Door Extension — the rule a door publishes, and the decision receipt it
+ * gives back (ECOSYSTEM d84(a): rule · receipt · decision · recourse · renewal).
+ *
+ *   kash.rule@1.0.0
+ *     A door's published rule: what it decides, why, who decides (a role),
+ *     the reasons it may give, its contest window, its renewal and end dates,
+ *     and its criteria. Each criterion is an OpenID4VP 1.0 DCQL query for the
+ *     receipts that answer it (or the person's own word) plus a FEEL condition
+ *     over what the query returns — DMN's literal expression. Public and
+ *     organisation-authored. Signed by its author as a DSSE envelope
+ *     (`application/vnd.kash.rule+json`).
+ *
+ *   kash.rule@1.1.0 (KS-Q1b; ECOSYSTEM d85(b)–(c))
+ *     The same rule with its **address** — sector (ISIC Revision 5), anchor
+ *     family, authority, journey and the seven givens — a **subject** on each
+ *     criterion, **bounds** on the parameters an adopter may set, and `draft`.
+ *     Every new field is optional, so every 1.0.0 body is a 1.1.0 body.
+ *
+ *   kash.adoption@1.0.0
+ *     An anchor — an organisation — adopts one version of a rule with its own
+ *     values for the parameters the rule bounds. Public, signed by the anchor
+ *     as DSSE (`application/vnd.kash.adoption+json`). An adoption is the
+ *     anchor's pact (d85(d)): rulebooks written once, executed locally.
+ *
+ * Every shape is closed: a field this schema does not name is refused, so none
+ * can carry a score or a person's identity. Meaning — the floor's refusals, the
+ * FEEL check, bounds, completeness — is checked by `@kashscript/predicate`;
+ * this extension is the shape.
+ *
+ * **The decision receipt is not here** (since 0.3.0): it is the person's own
+ * record, a credential they hold, so its schema lives with the package that
+ * issues and checks it — `@kashscript/predicate/decision`. d59 makes lexicons
+ * the home of public, organisation-authored records only.
+ *
+ * Import path: `@kashscript/lexicons/extensions/door`.
+ */
+import type { LexiconDef } from "../registry";
+import { type ObjectSchema } from "../schema";
+/** The DMN types a rule may give a value it reads — DMN's itemDefinition, in the FEEL subset. */
+export declare const DOOR_INPUT_TYPES: readonly ["string", "number", "boolean", "date", "date and time", "days and time duration", "years and months duration", "list of string", "list of number", "list of boolean", "list of date", "list of date and time", "list of days and time duration", "list of years and months duration"];
+export type DoorInputType = (typeof DOOR_INPUT_TYPES)[number];
+export declare const DECISION_OUTCOMES: readonly ["yes", "not-yet", "no", "partial"];
+export type DecisionOutcome = (typeof DECISION_OUTCOMES)[number];
+export type ClaimPathElement = string | number | null;
+export interface DcqlClaimsQuery {
+    /** Required here: a claim's id is the name its criterion's condition reads. */
+    readonly id: string;
+    readonly path: readonly ClaimPathElement[];
+    readonly values?: readonly (string | number | boolean)[];
+}
+export interface DcqlTrustedAuthoritiesQuery {
+    /** `kash_issuer` (issuer DIDs) or `kash_trust_list` (`<publisher DID>#<list id>`), in the spec's extension point. */
+    readonly type: string;
+    readonly values: readonly string[];
+}
+export interface DcqlMeta {
+    /** `dc+sd-jwt`: the accepted `vct` values. */
+    readonly vct_values?: readonly string[];
+    /** `kash-artifact`: the accepted registered DSTs (attest's registry). */
+    readonly dst_values?: readonly string[];
+    /** `kash-artifact`: `countersigned` asks for two independent signatures over the same bytes. */
+    readonly attestation?: "countersigned" | "issuer-signed";
+    /** `kash-artifact`: where in the signed payload the holder's key is named, for the presentation's binding. */
+    readonly holder_path?: readonly ClaimPathElement[];
+}
+export interface DcqlCredentialQuery {
+    readonly id: string;
+    readonly format: string;
+    readonly multiple?: boolean;
+    readonly meta?: DcqlMeta;
+    readonly trusted_authorities?: readonly DcqlTrustedAuthoritiesQuery[];
+    readonly require_cryptographic_holder_binding?: boolean;
+    readonly claims?: readonly DcqlClaimsQuery[];
+    readonly claim_sets?: readonly (readonly string[])[];
+}
+export declare const DCQL_CLAIMS_QUERY_SCHEMA: ObjectSchema;
+export declare const DCQL_CREDENTIAL_QUERY_SCHEMA: ObjectSchema;
+export declare const KASH_RULE_NSID: "kash.rule";
+export declare const KASH_RULE_ID: "kash.rule@1.0.0";
+export interface RuleParameter {
+    readonly type: DoorInputType;
+    /** Public rules: the threshold in clear. */
+    readonly value?: string | number | boolean;
+    /** Private rules: SHA-256 hex of JCS({name, value, salt}); the desk holds the opening. */
+    readonly sealed?: string;
+}
+export interface RuleReason {
+    readonly code: string;
+    readonly outcome: DecisionOutcome;
+    readonly text: string;
+}
+export interface CriterionBasis {
+    readonly title: string;
+    readonly url?: string;
+    readonly clause?: string;
+    readonly page?: number;
+    readonly quote?: string;
+}
+export type CriterionAnswer = {
+    readonly by: "receipts";
+    /** DCQL credential queries, verbatim. Their ids are `<criterion>` or `<criterion>_<suffix>`. */
+    readonly query: readonly DcqlCredentialQuery[];
+    /** Which of them together answer the criterion (DCQL `credential_sets.options`). Default: each alone. */
+    readonly options?: readonly (readonly string[])[];
+    /** Display names for issuer DIDs and trust lists the queries name. */
+    readonly names?: Readonly<Record<string, string>>;
+} | {
+    readonly by: "own-word";
+    /** What the person states, in plain words. */
+    readonly statement: string;
+    /** The values the person gives, by name and DMN type. */
+    readonly fields: Readonly<Record<string, DoorInputType>>;
+};
+export interface Criterion {
+    readonly id: string;
+    readonly label: string;
+    /** Why the door needs it. Required: P4's second rule — a rule asks only for what its purpose needs. */
+    readonly purpose: string;
+    readonly answer: CriterionAnswer;
+    /** An issuer's predicate (attest's predicate credential, `kind` = this criterion, `rule` = this rule) answers the row instead. */
+    readonly predicate?: {
+        readonly issuers: readonly {
+            readonly id: string;
+            readonly name: string;
+        }[];
+        readonly freshDays: number;
+    };
+    /** A FEEL expression (the DMN subset) over what the query returns, with a DMN type for every claim it reads. */
+    readonly condition?: {
+        readonly feel: string;
+        readonly types: Readonly<Record<string, DoorInputType>>;
+    };
+    /** The clause it comes from, when a rule is drawn from a written policy. */
+    readonly basis?: CriterionBasis;
+}
+export interface RuleBody {
+    /** `did:kash:<author>/rule/<slug>` — the publisher's DID plus a path, as d60 identifies places. */
+    readonly id: string;
+    readonly version: number;
+    /** The organisation that publishes it and answers for it. Never a person. */
+    readonly author: string;
+    readonly title: string;
+    readonly purpose: string;
+    readonly visibility: "public" | "private";
+    readonly parameters?: Readonly<Record<string, RuleParameter>>;
+    /** d43: every rule renews and ends. */
+    readonly dates: {
+        readonly published: string;
+        readonly renewBy: string;
+        readonly endsAt: string;
+    };
+    /** Who decides: a role, never a named person. */
+    readonly decider: {
+        readonly role: string;
+    };
+    readonly outcome: {
+        /** What a yes grants, in plain words. */
+        readonly grants: string;
+        /** It binds the person — credit, a contract, a debt (P3): never automatic. */
+        readonly binds: boolean;
+        /** It touches sensitive data (GDPR art. 9): never automatic. */
+        readonly sensitive: boolean;
+        /** The author's standing decision: a yes is given when every criterion is met. Refused with `binds` or `sensitive`. */
+        readonly automaticYes: boolean;
+    };
+    readonly reasons: readonly RuleReason[];
+    readonly contest: {
+        readonly windowDays: number;
+        readonly answerDays: number;
+        readonly how: string;
+    };
+    /** P4's first rule: another way to show the same thing. Paper is the floor. */
+    readonly anotherWay: string;
+    readonly criteria: readonly Criterion[];
+    /** The author's written answers to the warnings validation raised. Published with the rule. */
+    readonly answers?: readonly {
+        readonly criterion: string;
+        readonly code: string;
+        readonly text: string;
+    }[];
+    /** Practice rules say so inside what is signed. */
+    readonly practice?: boolean;
+}
+export declare const CRITERION_SCHEMA: ObjectSchema;
+export declare const KASH_RULE_BODY_SCHEMA: ObjectSchema;
+export declare const KASH_RULE_LEXICON: LexiconDef;
+export declare const KASH_RULE_1_1_ID: "kash.rule@1.1.0";
+/** What a criterion is about. d85(b) rule 1 binds when the subject is a person (or an organisation's people). */
+export declare const SUBJECTS: readonly ["person", "organisation", "product", "place"];
+export type Subject = (typeof SUBJECTS)[number];
+export declare const ANCHOR_FAMILIES: readonly ["movement", "knowledge", "work", "community"];
+export declare const AUTHORITY_KINDS: readonly ["floor", "law", "standard", "institution", "community"];
+export declare const JOURNEYS: readonly ["move", "learn", "earn-and-spend", "live", "leisure"];
+export declare const GIVENS: readonly ["area", "spaces", "capitals", "culture", "economy", "time", "relations"];
+export type Given = (typeof GIVENS)[number];
+export declare const SPACE_KINDS: readonly ["premises", "workplace", "campus", "site", "vehicle", "home", "public-space", "online"];
+export declare const CAPITAL_KINDS: readonly ["people", "systems", "resources"];
+export declare const ECONOMY_LEVELS: readonly ["primary", "secondary", "tertiary", "quaternary", "quinary", "uncounted"];
+/** Bounds an adopter may set a parameter within: a range, or a list. */
+export type ParameterBounds = {
+    readonly min?: string | number;
+    readonly max?: string | number;
+} | {
+    readonly allowed: readonly (string | number | boolean)[];
+};
+export interface RuleParameter1_1 extends RuleParameter {
+    readonly bounds?: ParameterBounds;
+}
+export interface Criterion1_1 extends Criterion {
+    readonly subject?: Subject;
+}
+export interface RuleRef {
+    readonly rule: string;
+    readonly version?: number;
+}
+export interface Givens {
+    readonly area?: {
+        readonly text: string;
+        readonly anywhere?: boolean;
+        readonly countries?: readonly string[];
+        readonly places?: readonly string[];
+    };
+    readonly spaces?: {
+        readonly text: string;
+        readonly kinds?: readonly (typeof SPACE_KINDS)[number][];
+        readonly places?: readonly string[];
+    };
+    readonly capitals?: {
+        readonly text: string;
+        readonly needs?: readonly {
+            readonly kind: (typeof CAPITAL_KINDS)[number];
+            readonly what: string;
+        }[];
+    };
+    readonly culture?: {
+        readonly text: string;
+        readonly codes?: readonly {
+            readonly title: string;
+            readonly url?: string;
+        }[];
+        readonly languages?: readonly string[];
+    };
+    readonly economy?: {
+        readonly text: string;
+        readonly level?: (typeof ECONOMY_LEVELS)[number];
+    };
+    readonly time?: {
+        readonly text: string;
+        readonly lasts?: string;
+        readonly renews?: string;
+    };
+    readonly relations?: {
+        readonly text: string;
+        readonly recognises?: readonly RuleRef[];
+        readonly within?: readonly {
+            readonly id: string;
+        }[];
+    };
+}
+/** Every rule has an address (d85(c)). */
+export interface RuleAddress {
+    /** ISIC Revision 5: a section (A–V) or a two-digit division. */
+    readonly sector: {
+        readonly classification: "ISIC";
+        readonly revision: "5";
+        readonly code: string;
+    };
+    readonly anchorFamily: (typeof ANCHOR_FAMILIES)[number];
+    readonly authority: {
+        readonly kind: (typeof AUTHORITY_KINDS)[number];
+        readonly name?: string;
+        readonly url?: string;
+    };
+    readonly journey: (typeof JOURNEYS)[number];
+    /** The seven givens. A rule is complete when all seven are answered. */
+    readonly givens: Givens;
+}
+export interface RuleBody1_1 extends Omit<RuleBody, "parameters" | "criteria"> {
+    readonly parameters?: Readonly<Record<string, RuleParameter1_1>>;
+    readonly criteria: readonly Criterion1_1[];
+    readonly address?: RuleAddress;
+    /** Published for reading and comment, never decided under. An incomplete rule publishes only as a draft. */
+    readonly draft?: boolean;
+}
+export declare const RULE_ADDRESS_SCHEMA: ObjectSchema;
+export declare const CRITERION_1_1_SCHEMA: ObjectSchema;
+export declare const KASH_RULE_1_1_BODY_SCHEMA: ObjectSchema;
+export declare const KASH_RULE_1_1_LEXICON: LexiconDef;
+export declare const KASH_ADOPTION_NSID: "kash.adoption";
+export declare const KASH_ADOPTION_ID: "kash.adoption@1.0.0";
+export interface AdoptionBody {
+    /** `did:kash:<anchor>/adoption/<slug>`. */
+    readonly id: string;
+    /** The adopting organisation — the anchor whose door decides under it. */
+    readonly anchor: string;
+    readonly rule: {
+        readonly id: string;
+        readonly version: number;
+        readonly hash: string;
+    };
+    /** Local values for the parameters the rule bounds — nothing else. */
+    readonly parameters: Readonly<Record<string, string | number | boolean>>;
+    /** It renews and ends, no later than the rule (d43). */
+    readonly dates: {
+        readonly adopted: string;
+        readonly renewBy: string;
+        readonly endsAt: string;
+    };
+    readonly practice?: boolean;
+}
+export declare const KASH_ADOPTION_BODY_SCHEMA: ObjectSchema;
+export declare const KASH_ADOPTION_LEXICON: LexiconDef;
+/** Every door lexicon: the rule at 1.0.0 and 1.1.0, and the adoption. All public and organisation-authored (d59). */
+export declare const DOOR_LEXICONS: readonly LexiconDef[];
+//# sourceMappingURL=door.d.ts.map

package/dist/extensions/door.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"door.d.ts","sourceRoot":"","sources":["../../src/extensions/door.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAK,KAAK,YAAY,EAAe,MAAM,WAAW,CAAC;AAY9D,iGAAiG;AACjG,eAAO,MAAM,gBAAgB,iSAenB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAG9D,eAAO,MAAM,iBAAiB,8CAA+C,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAIjE,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAEtD,MAAM,WAAW,eAAe;IAC9B,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;CAC1D;AAED,MAAM,WAAW,2BAA2B;IAC1C,qHAAqH;IACrH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,QAAQ;IACvB,8CAA8C;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,yEAAyE;IACzE,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,gGAAgG;IAChG,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,GAAG,eAAe,CAAC;IACzD,8GAA8G;IAC9G,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACtE,QAAQ,CAAC,oCAAoC,CAAC,EAAE,OAAO,CAAC;IACxD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAC;CACtD;AAID,eAAO,MAAM,wBAAwB,EAAE,YAOtC,CAAC;AAEF,eAAO,MAAM,4BAA4B,EAAE,YAqB1C,CAAC;AAIF,eAAO,MAAM,cAAc,EAAG,WAAoB,CAAC;AACnD,eAAO,MAAM,YAAY,EAAG,iBAA0B,CAAC;AAEvD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,4CAA4C;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC3C,0FAA0F;IAC1F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,eAAe,GACvB;IACE,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,gGAAgG;IAChG,QAAQ,CAAC,KAAK,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC/C,yGAAyG;IACzG,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAC;IAClD,sEAAsE;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yDAAyD;IACzD,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;CAC1D,CAAC;AAEN,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,uGAAuG;IACvG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,kIAAkI;IAClI,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,SAAS;YAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACjI,gHAAgH;IAChH,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAA;KAAE,CAAC;IACxG,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,WAAW,QAAQ;IACvB,mGAAmG;IACnG,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IAC9D,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAClG,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE;QAChB,yCAAyC;QACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,8EAA8E;QAC9E,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QACxB,gEAAgE;QAChE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;QAC5B,uHAAuH;QACvH,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;KAChC,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACrG,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,SAAS,EAAE,CAAC;IACxC,+FAA+F;IAC/F,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3G,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAiBD,eAAO,MAAM,gBAAgB,EAAE,YA6B9B,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,YA4BnC,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,UAQ/B,CAAC;AAIF,eAAO,MAAM,gBAAgB,EAAG,iBAA0B,CAAC;AAE3D,iHAAiH;AACjH,eAAO,MAAM,QAAQ,yDAA0D,CAAC;AAChF,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD,eAAO,MAAM,eAAe,yDAA0D,CAAC;AACvF,eAAO,MAAM,eAAe,mEAAoE,CAAC;AACjG,eAAO,MAAM,QAAQ,iEAAkE,CAAC;AACxF,eAAO,MAAM,MAAM,oFAAqF,CAAC;AACzG,MAAM,MAAM,KAAK,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5C,eAAO,MAAM,WAAW,mGAAoG,CAAC;AAC7H,eAAO,MAAM,aAAa,6CAA8C,CAAC;AACzE,eAAO,MAAM,cAAc,qFAAsF,CAAC;AAElH,wEAAwE;AACxE,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,GAClE;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,CAAA;CAAE,CAAC;AAEjE,MAAM,WAAW,gBAAiB,SAAQ,aAAa;IACrD,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IACpJ,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IAC3I,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS;YAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,CAAC;IACpJ,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS;YAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IACpK,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAA;KAAE,CAAC;IAC/F,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7F,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS;YAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,CAAC;CAChJ;AAED,0CAA0C;AAC1C,MAAM,WAAW,WAAW;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACpG,QAAQ,CAAC,YAAY,EAAE,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;IACxD,QAAQ,CAAC,SAAS,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvH,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5C,wEAAwE;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAY,SAAQ,IAAI,CAAC,QAAQ,EAAE,YAAY,GAAG,UAAU,CAAC;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACjE,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;IAC/B,4GAA4G;IAC5G,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAgDD,eAAO,MAAM,mBAAmB,EAAE,YASjC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,YAAgI,CAAC;AAEpK,eAAO,MAAM,yBAAyB,EAAE,YASvC,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,UAQnC,CAAC;AAIF,eAAO,MAAM,kBAAkB,EAAG,eAAwB,CAAC;AAC3D,eAAO,MAAM,gBAAgB,EAAG,qBAA8B,CAAC;AAE/D,MAAM,WAAW,YAAY;IAC3B,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,sEAAsE;IACtE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IACzE,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAChG,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,eAAO,MAAM,yBAAyB,EAAE,YAUvC,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,UAOnC,CAAC;AAIF,qHAAqH;AACrH,eAAO,MAAM,aAAa,EAAE,SAAS,UAAU,EAAsE,CAAC"}

package/dist/extensions/door.js

@@ -0,0 +1,211 @@
+/**
+ * Door Extension — the rule a door publishes, and the decision receipt it
+ * gives back (ECOSYSTEM d84(a): rule · receipt · decision · recourse · renewal).
+ *
+ *   kash.rule@1.0.0
+ *     A door's published rule: what it decides, why, who decides (a role),
+ *     the reasons it may give, its contest window, its renewal and end dates,
+ *     and its criteria. Each criterion is an OpenID4VP 1.0 DCQL query for the
+ *     receipts that answer it (or the person's own word) plus a FEEL condition
+ *     over what the query returns — DMN's literal expression. Public and
+ *     organisation-authored. Signed by its author as a DSSE envelope
+ *     (`application/vnd.kash.rule+json`).
+ *
+ *   kash.rule@1.1.0 (KS-Q1b; ECOSYSTEM d85(b)–(c))
+ *     The same rule with its **address** — sector (ISIC Revision 5), anchor
+ *     family, authority, journey and the seven givens — a **subject** on each
+ *     criterion, **bounds** on the parameters an adopter may set, and `draft`.
+ *     Every new field is optional, so every 1.0.0 body is a 1.1.0 body.
+ *
+ *   kash.adoption@1.0.0
+ *     An anchor — an organisation — adopts one version of a rule with its own
+ *     values for the parameters the rule bounds. Public, signed by the anchor
+ *     as DSSE (`application/vnd.kash.adoption+json`). An adoption is the
+ *     anchor's pact (d85(d)): rulebooks written once, executed locally.
+ *
+ * Every shape is closed: a field this schema does not name is refused, so none
+ * can carry a score or a person's identity. Meaning — the floor's refusals, the
+ * FEEL check, bounds, completeness — is checked by `@kashscript/predicate`;
+ * this extension is the shape.
+ *
+ * **The decision receipt is not here** (since 0.3.0): it is the person's own
+ * record, a credential they hold, so its schema lives with the package that
+ * issues and checks it — `@kashscript/predicate/decision`. d59 makes lexicons
+ * the home of public, organisation-authored records only.
+ *
+ * Import path: `@kashscript/lexicons/extensions/door`.
+ */
+import { S } from "../schema";
+/* ── shared pieces ─────────────────────────────────────────────────── */
+const DID = S.string({ format: "did-ks" });
+const ISO = S.string({ format: "iso8601" });
+const HEX64 = S.string({ pattern: /^[0-9a-f]{64}$/ });
+const SLUG = S.string({ pattern: /^[a-z0-9][a-z0-9-]{0,62}$/ });
+/** DCQL ids: alphanumerics, `_` and `-` (OpenID4VP 1.0 §6.1). */
+const DCQL_ID = S.string({ pattern: /^[A-Za-z0-9_-]{1,64}$/ });
+const TEXT = (max) => S.string({ minLength: 1, maxLength: max });
+/** The DMN types a rule may give a value it reads — DMN's itemDefinition, in the FEEL subset. */
+export const DOOR_INPUT_TYPES = [
+    "string",
+    "number",
+    "boolean",
+    "date",
+    "date and time",
+    "days and time duration",
+    "years and months duration",
+    "list of string",
+    "list of number",
+    "list of boolean",
+    "list of date",
+    "list of date and time",
+    "list of days and time duration",
+    "list of years and months duration",
+];
+const INPUT_TYPE = S.enum(...DOOR_INPUT_TYPES);
+export const DECISION_OUTCOMES = ["yes", "not-yet", "no", "partial"];
+const PATH = S.array(S.union(S.string({ minLength: 1, maxLength: 128 }), S.number({ integer: true, min: 0 }), S.literal(null)), { minItems: 1, maxItems: 16 });
+export const DCQL_CLAIMS_QUERY_SCHEMA = S.object({
+    id: DCQL_ID,
+    path: PATH,
+    values: S.optional(S.array(S.union(S.string({ maxLength: 512 }), S.number({ integer: true }), S.boolean()), { minItems: 1, maxItems: 64 })),
+}, ["id", "path"]);
+export const DCQL_CREDENTIAL_QUERY_SCHEMA = S.object({
+    id: DCQL_ID,
+    format: S.string({ minLength: 1, maxLength: 64 }),
+    multiple: S.optional(S.boolean()),
+    meta: S.optional(S.object({
+        vct_values: S.optional(S.array(S.string({ minLength: 1, maxLength: 256 }), { minItems: 1, maxItems: 16 })),
+        dst_values: S.optional(S.array(S.string({ minLength: 1, maxLength: 256 }), { minItems: 1, maxItems: 16 })),
+        attestation: S.optional(S.enum("countersigned", "issuer-signed")),
+        holder_path: S.optional(PATH),
+    })),
+    trusted_authorities: S.optional(S.array(S.object({ type: S.string({ minLength: 1, maxLength: 64 }), values: S.array(S.string({ minLength: 1, maxLength: 256 }), { minItems: 1, maxItems: 64 }) }, ["type", "values"]), { minItems: 1, maxItems: 8 })),
+    require_cryptographic_holder_binding: S.optional(S.boolean()),
+    claims: S.optional(S.array(DCQL_CLAIMS_QUERY_SCHEMA, { minItems: 1, maxItems: 32 })),
+    claim_sets: S.optional(S.array(S.array(DCQL_ID, { minItems: 1, maxItems: 32 }), { minItems: 1, maxItems: 16 })),
+}, ["id", "format"]);
+/* ── kash.rule@1.0.0 ───────────────────────────────────────────────── */
+export const KASH_RULE_NSID = "kash.rule";
+export const KASH_RULE_ID = "kash.rule@1.0.0";
+const OWN_WORD_ANSWER = S.object({ by: S.literal("own-word"), statement: TEXT(280), fields: S.record(INPUT_TYPE, S.string({ pattern: /^[A-Za-z_][A-Za-z0-9_]{0,63}$/ })) }, ["by", "statement", "fields"]);
+const RECEIPTS_ANSWER = S.object({
+    by: S.literal("receipts"),
+    query: S.array(DCQL_CREDENTIAL_QUERY_SCHEMA, { minItems: 1, maxItems: 8 }),
+    options: S.optional(S.array(S.array(DCQL_ID, { minItems: 1, maxItems: 8 }), { minItems: 1, maxItems: 8 })),
+    names: S.optional(S.record(TEXT(120))),
+}, ["by", "query"]);
+export const CRITERION_SCHEMA = S.object({
+    id: SLUG,
+    label: TEXT(160),
+    purpose: TEXT(600),
+    answer: S.union(RECEIPTS_ANSWER, OWN_WORD_ANSWER),
+    predicate: S.optional(S.object({
+        issuers: S.array(S.object({ id: DID, name: TEXT(120) }, ["id", "name"]), { minItems: 1, maxItems: 16 }),
+        freshDays: S.number({ integer: true, min: 1, max: 366 }),
+    }, ["issuers", "freshDays"])),
+    condition: S.optional(S.object({ feel: S.string({ minLength: 1, maxLength: 2048 }), types: S.record(INPUT_TYPE, S.string({ pattern: /^[A-Za-z_][A-Za-z0-9_]{0,63}$/ })) }, ["feel", "types"])),
+    basis: S.optional(S.object({ title: TEXT(200), url: S.optional(S.string({ format: "url" })), clause: S.optional(TEXT(120)), page: S.optional(S.number({ integer: true, min: 1 })), quote: S.optional(TEXT(1000)) }, ["title"])),
+}, ["id", "label", "purpose", "answer"]);
+export const KASH_RULE_BODY_SCHEMA = S.object({
+    id: S.string({ pattern: /^did:kash:[1-9A-HJ-NP-Za-km-z]{32,48}\/rule\/[a-z0-9][a-z0-9-]{0,62}$/ }),
+    version: S.number({ integer: true, min: 1 }),
+    author: DID,
+    title: TEXT(160),
+    purpose: TEXT(1000),
+    visibility: S.enum("public", "private"),
+    parameters: S.optional(S.record(S.object({ type: INPUT_TYPE, value: S.optional(S.union(S.string({ maxLength: 256 }), S.number(), S.boolean())), sealed: S.optional(HEX64) }, ["type"]), S.string({ pattern: /^[A-Za-z_][A-Za-z0-9_]{0,63}$/ }))),
+    dates: S.object({ published: ISO, renewBy: ISO, endsAt: ISO }, ["published", "renewBy", "endsAt"]),
+    decider: S.object({ role: TEXT(64) }, ["role"]),
+    outcome: S.object({ grants: TEXT(280), binds: S.boolean(), sensitive: S.boolean(), automaticYes: S.boolean() }, ["grants", "binds", "sensitive", "automaticYes"]),
+    reasons: S.array(S.object({ code: SLUG, outcome: S.enum(...DECISION_OUTCOMES), text: TEXT(400) }, ["code", "outcome", "text"]), { minItems: 2, maxItems: 32 }),
+    contest: S.object({ windowDays: S.number({ integer: true, min: 1, max: 366 }), answerDays: S.number({ integer: true, min: 1, max: 366 }), how: TEXT(400) }, ["windowDays", "answerDays", "how"]),
+    anotherWay: TEXT(600),
+    criteria: S.array(CRITERION_SCHEMA, { minItems: 1, maxItems: 32 }),
+    answers: S.optional(S.array(S.object({ criterion: SLUG, code: S.string({ pattern: /^[A-Z][A-Z_]{1,63}$/ }), text: TEXT(1000) }, ["criterion", "code", "text"]), { maxItems: 64 })),
+    practice: S.optional(S.boolean()),
+}, ["id", "version", "author", "title", "purpose", "visibility", "dates", "decider", "outcome", "reasons", "contest", "anotherWay", "criteria"]);
+export const KASH_RULE_LEXICON = {
+    id: KASH_RULE_ID,
+    nsid: KASH_RULE_NSID,
+    semver: { major: 1, minor: 0, patch: 0 },
+    bodySchema: KASH_RULE_BODY_SCHEMA,
+    title: "A door's rule",
+    description: "What a door decides, why, who decides, the reasons it may give, its contest window, renewal and end dates, and its criteria — each an OpenID4VP 1.0 DCQL query plus a FEEL condition. Public, organisation-authored, signed by its author.",
+};
+/* ── kash.rule@1.1.0 — the address, subjects, bounds, drafts ───────── */
+export const KASH_RULE_1_1_ID = "kash.rule@1.1.0";
+/** What a criterion is about. d85(b) rule 1 binds when the subject is a person (or an organisation's people). */
+export const SUBJECTS = ["person", "organisation", "product", "place"];
+export const ANCHOR_FAMILIES = ["movement", "knowledge", "work", "community"];
+export const AUTHORITY_KINDS = ["floor", "law", "standard", "institution", "community"];
+export const JOURNEYS = ["move", "learn", "earn-and-spend", "live", "leisure"];
+export const GIVENS = ["area", "spaces", "capitals", "culture", "economy", "time", "relations"];
+export const SPACE_KINDS = ["premises", "workplace", "campus", "site", "vehicle", "home", "public-space", "online"];
+export const CAPITAL_KINDS = ["people", "systems", "resources"];
+export const ECONOMY_LEVELS = ["primary", "secondary", "tertiary", "quaternary", "quinary", "uncounted"];
+const VALUE = S.union(S.string({ maxLength: 256 }), S.number(), S.boolean());
+const PLACE_REF = S.string({ pattern: /^did:kash:[1-9A-HJ-NP-Za-km-z]{32,48}\/place\/[a-z0-9][a-z0-9-]{0,62}$/ });
+const DURATION = S.string({ pattern: /^P(?=\d|T\d)(\d+Y)?(\d+M)?(\d+D)?(T(\d+H)?(\d+M)?(\d+(\.\d+)?S)?)?$/ });
+const RULE_ID = KASH_RULE_BODY_SCHEMA.properties.id;
+const GIVEN_TEXT = TEXT(600);
+const PARAMETER_1_1 = S.object({
+    type: INPUT_TYPE,
+    value: S.optional(VALUE),
+    sealed: S.optional(HEX64),
+    bounds: S.optional(S.union(S.object({ min: S.optional(S.union(S.string({ maxLength: 64 }), S.number())), max: S.optional(S.union(S.string({ maxLength: 64 }), S.number())) }), S.object({ allowed: S.array(VALUE, { minItems: 1, maxItems: 64 }) }, ["allowed"]))),
+}, ["type"]);
+const GIVENS_SCHEMA = S.object({
+    area: S.optional(S.object({ text: GIVEN_TEXT, anywhere: S.optional(S.boolean()), countries: S.optional(S.array(S.string({ pattern: /^[A-Z]{2}$/ }), { minItems: 1, maxItems: 64 })), places: S.optional(S.array(PLACE_REF, { minItems: 1, maxItems: 64 })) }, ["text"])),
+    spaces: S.optional(S.object({ text: GIVEN_TEXT, kinds: S.optional(S.array(S.enum(...SPACE_KINDS), { minItems: 1, maxItems: 8 })), places: S.optional(S.array(PLACE_REF, { minItems: 1, maxItems: 64 })) }, ["text"])),
+    capitals: S.optional(S.object({ text: GIVEN_TEXT, needs: S.optional(S.array(S.object({ kind: S.enum(...CAPITAL_KINDS), what: TEXT(200) }, ["kind", "what"]), { minItems: 1, maxItems: 16 })) }, ["text"])),
+    culture: S.optional(S.object({ text: GIVEN_TEXT, codes: S.optional(S.array(S.object({ title: TEXT(200), url: S.optional(S.string({ format: "url" })) }, ["title"]), { minItems: 1, maxItems: 16 })), languages: S.optional(S.array(S.string({ format: "bcp47" }), { minItems: 1, maxItems: 16 })) }, ["text"])),
+    economy: S.optional(S.object({ text: GIVEN_TEXT, level: S.optional(S.enum(...ECONOMY_LEVELS)) }, ["text"])),
+    time: S.optional(S.object({ text: GIVEN_TEXT, lasts: S.optional(DURATION), renews: S.optional(DURATION) }, ["text"])),
+    relations: S.optional(S.object({ text: GIVEN_TEXT, recognises: S.optional(S.array(S.object({ rule: RULE_ID, version: S.optional(S.number({ integer: true, min: 1 })) }, ["rule"]), { minItems: 1, maxItems: 32 })), within: S.optional(S.array(S.object({ id: S.string({ minLength: 1, maxLength: 256 }) }, ["id"]), { minItems: 1, maxItems: 16 })) }, ["text"])),
+});
+export const RULE_ADDRESS_SCHEMA = S.object({
+    sector: S.object({ classification: S.literal("ISIC"), revision: S.literal("5"), code: S.string({ pattern: /^([A-V]|\d{2})$/ }) }, ["classification", "revision", "code"]),
+    anchorFamily: S.enum(...ANCHOR_FAMILIES),
+    authority: S.object({ kind: S.enum(...AUTHORITY_KINDS), name: S.optional(TEXT(120)), url: S.optional(S.string({ format: "url" })) }, ["kind"]),
+    journey: S.enum(...JOURNEYS),
+    givens: GIVENS_SCHEMA,
+}, ["sector", "anchorFamily", "authority", "journey", "givens"]);
+export const CRITERION_1_1_SCHEMA = S.object({ ...CRITERION_SCHEMA.properties, subject: S.optional(S.enum(...SUBJECTS)) }, CRITERION_SCHEMA.required);
+export const KASH_RULE_1_1_BODY_SCHEMA = S.object({
+    ...KASH_RULE_BODY_SCHEMA.properties,
+    parameters: S.optional(S.record(PARAMETER_1_1, S.string({ pattern: /^[A-Za-z_][A-Za-z0-9_]{0,63}$/ }))),
+    criteria: S.array(CRITERION_1_1_SCHEMA, { minItems: 1, maxItems: 32 }),
+    address: S.optional(RULE_ADDRESS_SCHEMA),
+    draft: S.optional(S.boolean()),
+}, KASH_RULE_BODY_SCHEMA.required);
+export const KASH_RULE_1_1_LEXICON = {
+    id: KASH_RULE_1_1_ID,
+    nsid: KASH_RULE_NSID,
+    semver: { major: 1, minor: 1, patch: 0 },
+    bodySchema: KASH_RULE_1_1_BODY_SCHEMA,
+    title: "A door's rule, with its address",
+    description: "kash.rule@1.0.0 plus the address (ISIC Rev. 5 sector, anchor family, authority, journey, the seven givens), each criterion's subject, parameter bounds for adopters, and draft. A 1.0.0 body is a 1.1.0 body.",
+};
+/* ── kash.adoption@1.0.0 ───────────────────────────────────────────── */
+export const KASH_ADOPTION_NSID = "kash.adoption";
+export const KASH_ADOPTION_ID = "kash.adoption@1.0.0";
+export const KASH_ADOPTION_BODY_SCHEMA = S.object({
+    id: S.string({ pattern: /^did:kash:[1-9A-HJ-NP-Za-km-z]{32,48}\/adoption\/[a-z0-9][a-z0-9-]{0,62}$/ }),
+    anchor: DID,
+    rule: S.object({ id: RULE_ID, version: S.number({ integer: true, min: 1 }), hash: HEX64 }, ["id", "version", "hash"]),
+    parameters: S.record(VALUE, S.string({ pattern: /^[A-Za-z_][A-Za-z0-9_]{0,63}$/ })),
+    dates: S.object({ adopted: ISO, renewBy: ISO, endsAt: ISO }, ["adopted", "renewBy", "endsAt"]),
+    practice: S.optional(S.boolean()),
+}, ["id", "anchor", "rule", "parameters", "dates"]);
+export const KASH_ADOPTION_LEXICON = {
+    id: KASH_ADOPTION_ID,
+    nsid: KASH_ADOPTION_NSID,
+    semver: { major: 1, minor: 0, patch: 0 },
+    bodySchema: KASH_ADOPTION_BODY_SCHEMA,
+    title: "An anchor's adoption of a rule",
+    description: "An organisation adopts one version of a rule with its own values for the parameters the rule bounds. Public, signed by the anchor.",
+};
+/* ── bundles ───────────────────────────────────────────────────────── */
+/** Every door lexicon: the rule at 1.0.0 and 1.1.0, and the adoption. All public and organisation-authored (d59). */
+export const DOOR_LEXICONS = [KASH_RULE_LEXICON, KASH_RULE_1_1_LEXICON, KASH_ADOPTION_LEXICON];
+//# sourceMappingURL=door.js.map

package/dist/extensions/door.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"door.js","sourceRoot":"","sources":["../../src/extensions/door.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAGH,OAAO,EAAE,CAAC,EAAkC,MAAM,WAAW,CAAC;AAE9D,0EAA0E;AAE1E,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC3C,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAC5C,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACtD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;AAChE,iEAAiE;AACjE,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC;AAC/D,MAAM,IAAI,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;AAEjF,iGAAiG;AACjG,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;IACN,eAAe;IACf,wBAAwB;IACxB,2BAA2B;IAC3B,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,cAAc;IACd,uBAAuB;IACvB,gCAAgC;IAChC,mCAAmC;CAC3B,CAAC;AAEX,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC;AAE/C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAU,CAAC;AA0C9E,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AAE/J,MAAM,CAAC,MAAM,wBAAwB,GAAiB,CAAC,CAAC,MAAM,CAC5D;IACE,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,IAAI;IACV,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;CAC5I,EACD,CAAC,IAAI,EAAE,MAAM,CAAC,CACf,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAiB,CAAC,CAAC,MAAM,CAChE;IACE,EAAE,EAAE,OAAO;IACX,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,QAAQ,CACd,CAAC,CAAC,MAAM,CAAC;QACP,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1G,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1G,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;QACjE,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;KAC9B,CAAC,CACH;IACD,mBAAmB,EAAE,CAAC,CAAC,QAAQ,CAC7B,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CACrN;IACD,oCAAoC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7D,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IACpF,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;CAChH,EACD,CAAC,IAAI,EAAE,QAAQ,CAAC,CACjB,CAAC;AAEF,0EAA0E;AAE1E,MAAM,CAAC,MAAM,cAAc,GAAG,WAAoB,CAAC;AACnD,MAAM,CAAC,MAAM,YAAY,GAAG,iBAA0B,CAAC;AA2FvD,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAC9B,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC,EAAE,EACzI,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAC9B,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAC9B;IACE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC1E,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1G,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;CACvC,EACD,CAAC,IAAI,EAAE,OAAO,CAAC,CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAiB,CAAC,CAAC,MAAM,CACpD;IACE,EAAE,EAAE,IAAI;IACR,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;IAChB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC;IAClB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,EAAE,eAAe,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,QAAQ,CACnB,CAAC,CAAC,MAAM,CACN;QACE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACvG,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;KACzD,EACD,CAAC,SAAS,EAAE,WAAW,CAAC,CACzB,CACF;IACD,SAAS,EAAE,CAAC,CAAC,QAAQ,CACnB,CAAC,CAAC,MAAM,CACN,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC,EAAE,EAC1I,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB,CACF;IACD,KAAK,EAAE,CAAC,CAAC,QAAQ,CACf,CAAC,CAAC,MAAM,CACN,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EACvL,CAAC,OAAO,CAAC,CACV,CACF;CACF,EACD,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CACrC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAiB,CAAC,CAAC,MAAM,CACzD;IACE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,uEAAuE,EAAE,CAAC;IAClG,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAC5C,MAAM,EAAE,GAAG;IACX,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;IAChB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;IACnB,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;IACvC,UAAU,EAAE,CAAC,CAAC,QAAQ,CACpB,CAAC,CAAC,MAAM,CACN,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EACtJ,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CACvD,CACF;IACD,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClG,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IACjK,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC9J,OAAO,EAAE,CAAC,CAAC,MAAM,CACf,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EACxI,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,CAAC,CACpC;IACD,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC;IACrB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAClE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;IAClL,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;CAClC,EACD,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,CAC7I,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAe;IAC3C,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,cAAc;IACpB,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IACxC,UAAU,EAAE,qBAAqB;IACjC,KAAK,EAAE,eAAe;IACtB,WAAW,EACT,4OAA4O;CAC/O,CAAC;AAEF,0EAA0E;AAE1E,MAAM,CAAC,MAAM,gBAAgB,GAAG,iBAA0B,CAAC;AAE3D,iHAAiH;AACjH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,CAAU,CAAC;AAGhF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,CAAU,CAAC;AACvF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,CAAU,CAAC;AACjG,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AACxF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAU,CAAC;AAEzG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAU,CAAC;AAC7H,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAU,CAAC;AACzE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,CAAU,CAAC;AAiDlH,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAC7E,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,wEAAwE,EAAE,CAAC,CAAC;AAClH,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,qEAAqE,EAAE,CAAC,CAAC;AAC9G,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC,EAAG,CAAC;AACrD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;AAE7B,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAC5B;IACE,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IACxB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAChB,CAAC,CAAC,KAAK,CACL,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAClJ,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAClF,CACF;CACF,EACD,CAAC,MAAM,CAAC,CACT,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,QAAQ,CACd,CAAC,CAAC,MAAM,CACN,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAClO,CAAC,MAAM,CAAC,CACT,CACF;IACD,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACrN,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1M,OAAO,EAAE,CAAC,CAAC,QAAQ,CACjB,CAAC,CAAC,MAAM,CACN,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EACtQ,CAAC,MAAM,CAAC,CACT,CACF;IACD,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3G,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACrH,SAAS,EAAE,CAAC,CAAC,QAAQ,CACnB,CAAC,CAAC,MAAM,CACN,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EACvT,CAAC,MAAM,CAAC,CACT,CACF;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAiB,CAAC,CAAC,MAAM,CACvD;IACE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC,gBAAgB,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACzK,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAC9I,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;IAC5B,MAAM,EAAE,aAAa;CACtB,EACD,CAAC,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAC7D,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAiB,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,gBAAgB,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AAEpK,MAAM,CAAC,MAAM,yBAAyB,GAAiB,CAAC,CAAC,MAAM,CAC7D;IACE,GAAG,qBAAqB,CAAC,UAAU;IACnC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC,CAAC;IACvG,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACtE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;CAC/B,EACD,qBAAqB,CAAC,QAAQ,CAC/B,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAe;IAC/C,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,cAAc;IACpB,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IACxC,UAAU,EAAE,yBAAyB;IACrC,KAAK,EAAE,iCAAiC;IACxC,WAAW,EACT,+MAA+M;CAClN,CAAC;AAEF,0EAA0E;AAE1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAwB,CAAC;AAC3D,MAAM,CAAC,MAAM,gBAAgB,GAAG,qBAA8B,CAAC;AAe/D,MAAM,CAAC,MAAM,yBAAyB,GAAiB,CAAC,CAAC,MAAM,CAC7D;IACE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,2EAA2E,EAAE,CAAC;IACtG,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACrH,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;IACnF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9F,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;CAClC,EACD,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,CAChD,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAe;IAC/C,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,kBAAkB;IACxB,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IACxC,UAAU,EAAE,yBAAyB;IACrC,KAAK,EAAE,gCAAgC;IACvC,WAAW,EAAE,oIAAoI;CAClJ,CAAC;AAEF,0EAA0E;AAE1E,qHAAqH;AACrH,MAAM,CAAC,MAAM,aAAa,GAA0B,CAAC,iBAAiB,EAAE,qBAAqB,EAAE,qBAAqB,CAAC,CAAC"}

package/dist/schema.js

@@ -196,7 +196,11 @@ function validateObject(s, value, path, errors) {
     }
     if (!s.additionalProperties) {
         for (const k of Object.keys(obj)) {
-            if (!(k in s.properties)) {
+            // audit r1 (muffler F5): use own-key membership, not `k in s.properties`.
+            // `"__proto__" in s.properties` is `true` via Object.prototype, so the `in`
+            // form silently ACCEPTS a `__proto__`/`constructor` key under a strict
+            // (additionalProperties:false) schema — a prototype-pollution passthrough.
+            if (!Object.prototype.hasOwnProperty.call(s.properties, k)) {
                 errors.push(err([...path, k], "unknown field", obj[k]));
             }
         }

package/dist/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA4FH,uEAAuE;AAEvE,MAAM,CAAC,MAAM,CAAC,GAAG;IACf,GAAG;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,CAAC,IAAiC;QACtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,CAAC,IAAiC;QACtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,KAAuC;QAC7C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,GAAG,MAAoC;QAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IACD,KAAK,CAAC,KAAa,EAAE,IAAiE;QACpF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,CACJ,UAA4C,EAC5C,WAA8B,EAAE,EAChC,uBAAgC,KAAK;QAErC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACxE,CAAC;IACD,KAAK,CAAC,GAAG,QAA2B;QAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACrC,CAAC;IACD,QAAQ,CAAC,KAAa;QACpB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,CAAC,MAAc,EAAE,OAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC5D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;CACF,CAAC;AAcF,uEAAuE;AAEvE;;oCAEoC;AACpC,MAAM,CAAC,MAAM,eAAe,GAAuC;IACjE,4EAA4E;IAC5E,2EAA2E;IAC3E,mEAAmE;IACnE,wEAAwE;IACxE,2BAA2B;IAC3B,QAAQ,EAAM,wCAAwC;IACtD,KAAK,EAAS,qBAAqB;IACnC,SAAS,EAAK,sEAAsE;IACpF,KAAK,EAAS,qBAAqB;IACnC,WAAW,EAAG,0BAA0B;IACxC,OAAO,EAAO,0BAA0B;IACxC,SAAS,EAAK,YAAY;IAC1B,YAAY,EAAE,qDAAqD;IACnE,MAAM,EAAQ,uCAAuC;CACtD,CAAC;AAEF,uEAAuE;AAEvE,MAAM,UAAU,QAAQ,CAAc,MAAc,EAAE,KAAc;IAClE,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC;QACxB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAU,EAAE;QACjC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,OAAO,CAAC,MAAc,EAAE,KAAc;IACpD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,uEAAuE;AAEvE,SAAS,WAAW,CAClB,MAAc,EACd,KAAc,EACd,IAAkC,EAClC,MAAyB;IAEzB,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,KAAK;YACR,OAAO;QACT,KAAK,QAAQ;YACX,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO;QACT,KAAK,QAAQ;YACX,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO;QACT,KAAK,SAAS;YACZ,IAAI,OAAO,KAAK,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC;YAClF,OAAO;QACT,KAAK,SAAS;YACZ,IAAI,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;YACpF,CAAC;YACD,OAAO;QACT,KAAK,MAAM;YACT,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iCAAiC,EAAE,KAAK,CAAC,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAwB,CAAC,EAAE,CAAC;gBACtD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,mBAAmB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;YACpF,CAAC;YACD,OAAO;QACT,KAAK,OAAO;YACV,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,OAAO;QACT,KAAK,QAAQ;YACX,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO;QACT,KAAK,OAAO;YACV,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,OAAO;QACT,KAAK,UAAU;YACb,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO;YAChC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC/C,OAAO;QACT,KAAK,QAAQ;YACX,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO;IACX,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,IAAkC,EAAE,OAAe,EAAE,QAAiB;IACjF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,CAAe,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IACpH,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC,SAAS,SAAS,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC,SAAS,SAAS,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,CAAe,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IACpH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,CAAc,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IAClH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC,QAAQ,SAAS,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,QAAQ,SAAS,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,CAAe,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IACpH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;YACnC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,CAAc,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IAClH,KAAK,MAAM,OAAO,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,SAAS,GAAsB,EAAE,CAAC;QACxC,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;IACrC,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,MAAM,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,cAAc,CAAC,CAAe,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IACpH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,0BAA0B,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QACtE,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7C,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;AACH,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA4FH,uEAAuE;AAEvE,MAAM,CAAC,MAAM,CAAC,GAAG;IACf,GAAG;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,CAAC,IAAiC;QACtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,CAAC,IAAiC;QACtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,KAAuC;QAC7C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,GAAG,MAAoC;QAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IACD,KAAK,CAAC,KAAa,EAAE,IAAiE;QACpF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,CACJ,UAA4C,EAC5C,WAA8B,EAAE,EAChC,uBAAgC,KAAK;QAErC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACxE,CAAC;IACD,KAAK,CAAC,GAAG,QAA2B;QAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACrC,CAAC;IACD,QAAQ,CAAC,KAAa;QACpB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,CAAC,MAAc,EAAE,OAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC5D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;CACF,CAAC;AAcF,uEAAuE;AAEvE;;oCAEoC;AACpC,MAAM,CAAC,MAAM,eAAe,GAAuC;IACjE,4EAA4E;IAC5E,2EAA2E;IAC3E,mEAAmE;IACnE,wEAAwE;IACxE,2BAA2B;IAC3B,QAAQ,EAAM,wCAAwC;IACtD,KAAK,EAAS,qBAAqB;IACnC,SAAS,EAAK,sEAAsE;IACpF,KAAK,EAAS,qBAAqB;IACnC,WAAW,EAAG,0BAA0B;IACxC,OAAO,EAAO,0BAA0B;IACxC,SAAS,EAAK,YAAY;IAC1B,YAAY,EAAE,qDAAqD;IACnE,MAAM,EAAQ,uCAAuC;CACtD,CAAC;AAEF,uEAAuE;AAEvE,MAAM,UAAU,QAAQ,CAAc,MAAc,EAAE,KAAc;IAClE,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC;QACxB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAU,EAAE;QACjC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,OAAO,CAAC,MAAc,EAAE,KAAc;IACpD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,uEAAuE;AAEvE,SAAS,WAAW,CAClB,MAAc,EACd,KAAc,EACd,IAAkC,EAClC,MAAyB;IAEzB,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,KAAK;YACR,OAAO;QACT,KAAK,QAAQ;YACX,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO;QACT,KAAK,QAAQ;YACX,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO;QACT,KAAK,SAAS;YACZ,IAAI,OAAO,KAAK,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC;YAClF,OAAO;QACT,KAAK,SAAS;YACZ,IAAI,KAAK,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;YACpF,CAAC;YACD,OAAO;QACT,KAAK,MAAM;YACT,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iCAAiC,EAAE,KAAK,CAAC,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAwB,CAAC,EAAE,CAAC;gBACtD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,mBAAmB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;YACpF,CAAC;YACD,OAAO;QACT,KAAK,OAAO;YACV,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,OAAO;QACT,KAAK,QAAQ;YACX,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO;QACT,KAAK,OAAO;YACV,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,OAAO;QACT,KAAK,UAAU;YACb,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO;YAChC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC/C,OAAO;QACT,KAAK,QAAQ;YACX,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO;IACX,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,IAAkC,EAAE,OAAe,EAAE,QAAiB;IACjF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,CAAe,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IACpH,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC,SAAS,SAAS,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC,SAAS,SAAS,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,CAAe,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IACpH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,CAAc,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IAClH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC,QAAQ,SAAS,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,QAAQ,SAAS,KAAK,CAAC,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,CAAe,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IACpH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;YACnC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,0EAA0E;YAC1E,4EAA4E;YAC5E,uEAAuE;YACvE,2EAA2E;YAC3E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,CAAc,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IAClH,KAAK,MAAM,OAAO,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,SAAS,GAAsB,EAAE,CAAC;QACxC,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;IACrC,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,MAAM,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,cAAc,CAAC,CAAe,EAAE,KAAc,EAAE,IAAkC,EAAE,MAAyB;IACpH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,0BAA0B,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QACtE,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7C,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kashscript/lexicons",
-  "version": "0.1.2",
+  "version": "0.3.0-alpha.0",
   "description": "Zero-dependency lexicon framework — envelope, schema DSL, registry, validator. Agnostic core; domain content ships as opt-in extensions.",
   "type": "module",
   "main": "./dist/index.js",
@@ -70,6 +70,11 @@
       "types": "./dist/extensions/community.d.ts",
       "import": "./dist/extensions/community.js",
       "default": "./dist/extensions/community.js"
+    },
+    "./extensions/door": {
+      "types": "./dist/extensions/door.d.ts",
+      "import": "./dist/extensions/door.js",
+      "default": "./dist/extensions/door.js"
     }
   },
   "sideEffects": false,
@@ -82,10 +87,13 @@
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "typecheck": "tsc --noEmit",
+    "typecheck:test": "tsc --noEmit -p tsconfig.test.json",
+    "test": "bun run typecheck:test && bun test",
     "clean": "rm -rf dist .turbo"
   },
   "devDependencies": {
-    "typescript": "^5.6.3"
+    "typescript": "^5.6.3",
+    "@types/bun": "^1.2.5"
   },
   "license": "Apache-2.0",
   "publishConfig": {

package/src/extensions/door.ts

@@ -0,0 +1,514 @@
+/**
+ * Door Extension — the rule a door publishes, and the decision receipt it
+ * gives back (ECOSYSTEM d84(a): rule · receipt · decision · recourse · renewal).
+ *
+ *   kash.rule@1.0.0
+ *     A door's published rule: what it decides, why, who decides (a role),
+ *     the reasons it may give, its contest window, its renewal and end dates,
+ *     and its criteria. Each criterion is an OpenID4VP 1.0 DCQL query for the
+ *     receipts that answer it (or the person's own word) plus a FEEL condition
+ *     over what the query returns — DMN's literal expression. Public and
+ *     organisation-authored. Signed by its author as a DSSE envelope
+ *     (`application/vnd.kash.rule+json`).
+ *
+ *   kash.rule@1.1.0 (KS-Q1b; ECOSYSTEM d85(b)–(c))
+ *     The same rule with its **address** — sector (ISIC Revision 5), anchor
+ *     family, authority, journey and the seven givens — a **subject** on each
+ *     criterion, **bounds** on the parameters an adopter may set, and `draft`.
+ *     Every new field is optional, so every 1.0.0 body is a 1.1.0 body.
+ *
+ *   kash.adoption@1.0.0
+ *     An anchor — an organisation — adopts one version of a rule with its own
+ *     values for the parameters the rule bounds. Public, signed by the anchor
+ *     as DSSE (`application/vnd.kash.adoption+json`). An adoption is the
+ *     anchor's pact (d85(d)): rulebooks written once, executed locally.
+ *
+ * Every shape is closed: a field this schema does not name is refused, so none
+ * can carry a score or a person's identity. Meaning — the floor's refusals, the
+ * FEEL check, bounds, completeness — is checked by `@kashscript/predicate`;
+ * this extension is the shape.
+ *
+ * **The decision receipt is not here** (since 0.3.0): it is the person's own
+ * record, a credential they hold, so its schema lives with the package that
+ * issues and checks it — `@kashscript/predicate/decision`. d59 makes lexicons
+ * the home of public, organisation-authored records only.
+ *
+ * Import path: `@kashscript/lexicons/extensions/door`.
+ */
+
+import type { LexiconDef } from "../registry";
+import { S, type ObjectSchema, type Schema } from "../schema";
+
+/* ── shared pieces ─────────────────────────────────────────────────── */
+
+const DID = S.string({ format: "did-ks" });
+const ISO = S.string({ format: "iso8601" });
+const HEX64 = S.string({ pattern: /^[0-9a-f]{64}$/ });
+const SLUG = S.string({ pattern: /^[a-z0-9][a-z0-9-]{0,62}$/ });
+/** DCQL ids: alphanumerics, `_` and `-` (OpenID4VP 1.0 §6.1). */
+const DCQL_ID = S.string({ pattern: /^[A-Za-z0-9_-]{1,64}$/ });
+const TEXT = (max: number): Schema => S.string({ minLength: 1, maxLength: max });
+
+/** The DMN types a rule may give a value it reads — DMN's itemDefinition, in the FEEL subset. */
+export const DOOR_INPUT_TYPES = [
+  "string",
+  "number",
+  "boolean",
+  "date",
+  "date and time",
+  "days and time duration",
+  "years and months duration",
+  "list of string",
+  "list of number",
+  "list of boolean",
+  "list of date",
+  "list of date and time",
+  "list of days and time duration",
+  "list of years and months duration",
+] as const;
+export type DoorInputType = (typeof DOOR_INPUT_TYPES)[number];
+const INPUT_TYPE = S.enum(...DOOR_INPUT_TYPES);
+
+export const DECISION_OUTCOMES = ["yes", "not-yet", "no", "partial"] as const;
+export type DecisionOutcome = (typeof DECISION_OUTCOMES)[number];
+
+/* ── DCQL (OpenID4VP 1.0 §6), as a rule carries it ─────────────────── */
+
+export type ClaimPathElement = string | number | null;
+
+export interface DcqlClaimsQuery {
+  /** Required here: a claim's id is the name its criterion's condition reads. */
+  readonly id: string;
+  readonly path: readonly ClaimPathElement[];
+  readonly values?: readonly (string | number | boolean)[];
+}
+
+export interface DcqlTrustedAuthoritiesQuery {
+  /** `kash_issuer` (issuer DIDs) or `kash_trust_list` (`<publisher DID>#<list id>`), in the spec's extension point. */
+  readonly type: string;
+  readonly values: readonly string[];
+}
+
+export interface DcqlMeta {
+  /** `dc+sd-jwt`: the accepted `vct` values. */
+  readonly vct_values?: readonly string[];
+  /** `kash-artifact`: the accepted registered DSTs (attest's registry). */
+  readonly dst_values?: readonly string[];
+  /** `kash-artifact`: `countersigned` asks for two independent signatures over the same bytes. */
+  readonly attestation?: "countersigned" | "issuer-signed";
+  /** `kash-artifact`: where in the signed payload the holder's key is named, for the presentation's binding. */
+  readonly holder_path?: readonly ClaimPathElement[];
+}
+
+export interface DcqlCredentialQuery {
+  readonly id: string;
+  readonly format: string;
+  readonly multiple?: boolean;
+  readonly meta?: DcqlMeta;
+  readonly trusted_authorities?: readonly DcqlTrustedAuthoritiesQuery[];
+  readonly require_cryptographic_holder_binding?: boolean;
+  readonly claims?: readonly DcqlClaimsQuery[];
+  readonly claim_sets?: readonly (readonly string[])[];
+}
+
+const PATH = S.array(S.union(S.string({ minLength: 1, maxLength: 128 }), S.number({ integer: true, min: 0 }), S.literal(null)), { minItems: 1, maxItems: 16 });
+
+export const DCQL_CLAIMS_QUERY_SCHEMA: ObjectSchema = S.object(
+  {
+    id: DCQL_ID,
+    path: PATH,
+    values: S.optional(S.array(S.union(S.string({ maxLength: 512 }), S.number({ integer: true }), S.boolean()), { minItems: 1, maxItems: 64 })),
+  },
+  ["id", "path"],
+);
+
+export const DCQL_CREDENTIAL_QUERY_SCHEMA: ObjectSchema = S.object(
+  {
+    id: DCQL_ID,
+    format: S.string({ minLength: 1, maxLength: 64 }),
+    multiple: S.optional(S.boolean()),
+    meta: S.optional(
+      S.object({
+        vct_values: S.optional(S.array(S.string({ minLength: 1, maxLength: 256 }), { minItems: 1, maxItems: 16 })),
+        dst_values: S.optional(S.array(S.string({ minLength: 1, maxLength: 256 }), { minItems: 1, maxItems: 16 })),
+        attestation: S.optional(S.enum("countersigned", "issuer-signed")),
+        holder_path: S.optional(PATH),
+      }),
+    ),
+    trusted_authorities: S.optional(
+      S.array(S.object({ type: S.string({ minLength: 1, maxLength: 64 }), values: S.array(S.string({ minLength: 1, maxLength: 256 }), { minItems: 1, maxItems: 64 }) }, ["type", "values"]), { minItems: 1, maxItems: 8 }),
+    ),
+    require_cryptographic_holder_binding: S.optional(S.boolean()),
+    claims: S.optional(S.array(DCQL_CLAIMS_QUERY_SCHEMA, { minItems: 1, maxItems: 32 })),
+    claim_sets: S.optional(S.array(S.array(DCQL_ID, { minItems: 1, maxItems: 32 }), { minItems: 1, maxItems: 16 })),
+  },
+  ["id", "format"],
+);
+
+/* ── kash.rule@1.0.0 ───────────────────────────────────────────────── */
+
+export const KASH_RULE_NSID = "kash.rule" as const;
+export const KASH_RULE_ID = "kash.rule@1.0.0" as const;
+
+export interface RuleParameter {
+  readonly type: DoorInputType;
+  /** Public rules: the threshold in clear. */
+  readonly value?: string | number | boolean;
+  /** Private rules: SHA-256 hex of JCS({name, value, salt}); the desk holds the opening. */
+  readonly sealed?: string;
+}
+
+export interface RuleReason {
+  readonly code: string;
+  readonly outcome: DecisionOutcome;
+  readonly text: string;
+}
+
+export interface CriterionBasis {
+  readonly title: string;
+  readonly url?: string;
+  readonly clause?: string;
+  readonly page?: number;
+  readonly quote?: string;
+}
+
+export type CriterionAnswer =
+  | {
+      readonly by: "receipts";
+      /** DCQL credential queries, verbatim. Their ids are `<criterion>` or `<criterion>_<suffix>`. */
+      readonly query: readonly DcqlCredentialQuery[];
+      /** Which of them together answer the criterion (DCQL `credential_sets.options`). Default: each alone. */
+      readonly options?: readonly (readonly string[])[];
+      /** Display names for issuer DIDs and trust lists the queries name. */
+      readonly names?: Readonly<Record<string, string>>;
+    }
+  | {
+      readonly by: "own-word";
+      /** What the person states, in plain words. */
+      readonly statement: string;
+      /** The values the person gives, by name and DMN type. */
+      readonly fields: Readonly<Record<string, DoorInputType>>;
+    };
+
+export interface Criterion {
+  readonly id: string;
+  readonly label: string;
+  /** Why the door needs it. Required: P4's second rule — a rule asks only for what its purpose needs. */
+  readonly purpose: string;
+  readonly answer: CriterionAnswer;
+  /** An issuer's predicate (attest's predicate credential, `kind` = this criterion, `rule` = this rule) answers the row instead. */
+  readonly predicate?: { readonly issuers: readonly { readonly id: string; readonly name: string }[]; readonly freshDays: number };
+  /** A FEEL expression (the DMN subset) over what the query returns, with a DMN type for every claim it reads. */
+  readonly condition?: { readonly feel: string; readonly types: Readonly<Record<string, DoorInputType>> };
+  /** The clause it comes from, when a rule is drawn from a written policy. */
+  readonly basis?: CriterionBasis;
+}
+
+export interface RuleBody {
+  /** `did:kash:<author>/rule/<slug>` — the publisher's DID plus a path, as d60 identifies places. */
+  readonly id: string;
+  readonly version: number;
+  /** The organisation that publishes it and answers for it. Never a person. */
+  readonly author: string;
+  readonly title: string;
+  readonly purpose: string;
+  readonly visibility: "public" | "private";
+  readonly parameters?: Readonly<Record<string, RuleParameter>>;
+  /** d43: every rule renews and ends. */
+  readonly dates: { readonly published: string; readonly renewBy: string; readonly endsAt: string };
+  /** Who decides: a role, never a named person. */
+  readonly decider: { readonly role: string };
+  readonly outcome: {
+    /** What a yes grants, in plain words. */
+    readonly grants: string;
+    /** It binds the person — credit, a contract, a debt (P3): never automatic. */
+    readonly binds: boolean;
+    /** It touches sensitive data (GDPR art. 9): never automatic. */
+    readonly sensitive: boolean;
+    /** The author's standing decision: a yes is given when every criterion is met. Refused with `binds` or `sensitive`. */
+    readonly automaticYes: boolean;
+  };
+  readonly reasons: readonly RuleReason[];
+  readonly contest: { readonly windowDays: number; readonly answerDays: number; readonly how: string };
+  /** P4's first rule: another way to show the same thing. Paper is the floor. */
+  readonly anotherWay: string;
+  readonly criteria: readonly Criterion[];
+  /** The author's written answers to the warnings validation raised. Published with the rule. */
+  readonly answers?: readonly { readonly criterion: string; readonly code: string; readonly text: string }[];
+  /** Practice rules say so inside what is signed. */
+  readonly practice?: boolean;
+}
+
+const OWN_WORD_ANSWER = S.object(
+  { by: S.literal("own-word"), statement: TEXT(280), fields: S.record(INPUT_TYPE, S.string({ pattern: /^[A-Za-z_][A-Za-z0-9_]{0,63}$/ })) },
+  ["by", "statement", "fields"],
+);
+
+const RECEIPTS_ANSWER = S.object(
+  {
+    by: S.literal("receipts"),
+    query: S.array(DCQL_CREDENTIAL_QUERY_SCHEMA, { minItems: 1, maxItems: 8 }),
+    options: S.optional(S.array(S.array(DCQL_ID, { minItems: 1, maxItems: 8 }), { minItems: 1, maxItems: 8 })),
+    names: S.optional(S.record(TEXT(120))),
+  },
+  ["by", "query"],
+);
+
+export const CRITERION_SCHEMA: ObjectSchema = S.object(
+  {
+    id: SLUG,
+    label: TEXT(160),
+    purpose: TEXT(600),
+    answer: S.union(RECEIPTS_ANSWER, OWN_WORD_ANSWER),
+    predicate: S.optional(
+      S.object(
+        {
+          issuers: S.array(S.object({ id: DID, name: TEXT(120) }, ["id", "name"]), { minItems: 1, maxItems: 16 }),
+          freshDays: S.number({ integer: true, min: 1, max: 366 }),
+        },
+        ["issuers", "freshDays"],
+      ),
+    ),
+    condition: S.optional(
+      S.object(
+        { feel: S.string({ minLength: 1, maxLength: 2048 }), types: S.record(INPUT_TYPE, S.string({ pattern: /^[A-Za-z_][A-Za-z0-9_]{0,63}$/ })) },
+        ["feel", "types"],
+      ),
+    ),
+    basis: S.optional(
+      S.object(
+        { title: TEXT(200), url: S.optional(S.string({ format: "url" })), clause: S.optional(TEXT(120)), page: S.optional(S.number({ integer: true, min: 1 })), quote: S.optional(TEXT(1000)) },
+        ["title"],
+      ),
+    ),
+  },
+  ["id", "label", "purpose", "answer"],
+);
+
+export const KASH_RULE_BODY_SCHEMA: ObjectSchema = S.object(
+  {
+    id: S.string({ pattern: /^did:kash:[1-9A-HJ-NP-Za-km-z]{32,48}\/rule\/[a-z0-9][a-z0-9-]{0,62}$/ }),
+    version: S.number({ integer: true, min: 1 }),
+    author: DID,
+    title: TEXT(160),
+    purpose: TEXT(1000),
+    visibility: S.enum("public", "private"),
+    parameters: S.optional(
+      S.record(
+        S.object({ type: INPUT_TYPE, value: S.optional(S.union(S.string({ maxLength: 256 }), S.number(), S.boolean())), sealed: S.optional(HEX64) }, ["type"]),
+        S.string({ pattern: /^[A-Za-z_][A-Za-z0-9_]{0,63}$/ }),
+      ),
+    ),
+    dates: S.object({ published: ISO, renewBy: ISO, endsAt: ISO }, ["published", "renewBy", "endsAt"]),
+    decider: S.object({ role: TEXT(64) }, ["role"]),
+    outcome: S.object({ grants: TEXT(280), binds: S.boolean(), sensitive: S.boolean(), automaticYes: S.boolean() }, ["grants", "binds", "sensitive", "automaticYes"]),
+    reasons: S.array(S.object({ code: SLUG, outcome: S.enum(...DECISION_OUTCOMES), text: TEXT(400) }, ["code", "outcome", "text"]), { minItems: 2, maxItems: 32 }),
+    contest: S.object(
+      { windowDays: S.number({ integer: true, min: 1, max: 366 }), answerDays: S.number({ integer: true, min: 1, max: 366 }), how: TEXT(400) },
+      ["windowDays", "answerDays", "how"],
+    ),
+    anotherWay: TEXT(600),
+    criteria: S.array(CRITERION_SCHEMA, { minItems: 1, maxItems: 32 }),
+    answers: S.optional(S.array(S.object({ criterion: SLUG, code: S.string({ pattern: /^[A-Z][A-Z_]{1,63}$/ }), text: TEXT(1000) }, ["criterion", "code", "text"]), { maxItems: 64 })),
+    practice: S.optional(S.boolean()),
+  },
+  ["id", "version", "author", "title", "purpose", "visibility", "dates", "decider", "outcome", "reasons", "contest", "anotherWay", "criteria"],
+);
+
+export const KASH_RULE_LEXICON: LexiconDef = {
+  id: KASH_RULE_ID,
+  nsid: KASH_RULE_NSID,
+  semver: { major: 1, minor: 0, patch: 0 },
+  bodySchema: KASH_RULE_BODY_SCHEMA,
+  title: "A door's rule",
+  description:
+    "What a door decides, why, who decides, the reasons it may give, its contest window, renewal and end dates, and its criteria — each an OpenID4VP 1.0 DCQL query plus a FEEL condition. Public, organisation-authored, signed by its author.",
+};
+
+/* ── kash.rule@1.1.0 — the address, subjects, bounds, drafts ───────── */
+
+export const KASH_RULE_1_1_ID = "kash.rule@1.1.0" as const;
+
+/** What a criterion is about. d85(b) rule 1 binds when the subject is a person (or an organisation's people). */
+export const SUBJECTS = ["person", "organisation", "product", "place"] as const;
+export type Subject = (typeof SUBJECTS)[number];
+
+export const ANCHOR_FAMILIES = ["movement", "knowledge", "work", "community"] as const;
+export const AUTHORITY_KINDS = ["floor", "law", "standard", "institution", "community"] as const;
+export const JOURNEYS = ["move", "learn", "earn-and-spend", "live", "leisure"] as const;
+export const GIVENS = ["area", "spaces", "capitals", "culture", "economy", "time", "relations"] as const;
+export type Given = (typeof GIVENS)[number];
+export const SPACE_KINDS = ["premises", "workplace", "campus", "site", "vehicle", "home", "public-space", "online"] as const;
+export const CAPITAL_KINDS = ["people", "systems", "resources"] as const;
+export const ECONOMY_LEVELS = ["primary", "secondary", "tertiary", "quaternary", "quinary", "uncounted"] as const;
+
+/** Bounds an adopter may set a parameter within: a range, or a list. */
+export type ParameterBounds =
+  | { readonly min?: string | number; readonly max?: string | number }
+  | { readonly allowed: readonly (string | number | boolean)[] };
+
+export interface RuleParameter1_1 extends RuleParameter {
+  readonly bounds?: ParameterBounds;
+}
+
+export interface Criterion1_1 extends Criterion {
+  readonly subject?: Subject;
+}
+
+export interface RuleRef {
+  readonly rule: string;
+  readonly version?: number;
+}
+
+export interface Givens {
+  readonly area?: { readonly text: string; readonly anywhere?: boolean; readonly countries?: readonly string[]; readonly places?: readonly string[] };
+  readonly spaces?: { readonly text: string; readonly kinds?: readonly (typeof SPACE_KINDS)[number][]; readonly places?: readonly string[] };
+  readonly capitals?: { readonly text: string; readonly needs?: readonly { readonly kind: (typeof CAPITAL_KINDS)[number]; readonly what: string }[] };
+  readonly culture?: { readonly text: string; readonly codes?: readonly { readonly title: string; readonly url?: string }[]; readonly languages?: readonly string[] };
+  readonly economy?: { readonly text: string; readonly level?: (typeof ECONOMY_LEVELS)[number] };
+  readonly time?: { readonly text: string; readonly lasts?: string; readonly renews?: string };
+  readonly relations?: { readonly text: string; readonly recognises?: readonly RuleRef[]; readonly within?: readonly { readonly id: string }[] };
+}
+
+/** Every rule has an address (d85(c)). */
+export interface RuleAddress {
+  /** ISIC Revision 5: a section (A–V) or a two-digit division. */
+  readonly sector: { readonly classification: "ISIC"; readonly revision: "5"; readonly code: string };
+  readonly anchorFamily: (typeof ANCHOR_FAMILIES)[number];
+  readonly authority: { readonly kind: (typeof AUTHORITY_KINDS)[number]; readonly name?: string; readonly url?: string };
+  readonly journey: (typeof JOURNEYS)[number];
+  /** The seven givens. A rule is complete when all seven are answered. */
+  readonly givens: Givens;
+}
+
+export interface RuleBody1_1 extends Omit<RuleBody, "parameters" | "criteria"> {
+  readonly parameters?: Readonly<Record<string, RuleParameter1_1>>;
+  readonly criteria: readonly Criterion1_1[];
+  readonly address?: RuleAddress;
+  /** Published for reading and comment, never decided under. An incomplete rule publishes only as a draft. */
+  readonly draft?: boolean;
+}
+
+const VALUE = S.union(S.string({ maxLength: 256 }), S.number(), S.boolean());
+const PLACE_REF = S.string({ pattern: /^did:kash:[1-9A-HJ-NP-Za-km-z]{32,48}\/place\/[a-z0-9][a-z0-9-]{0,62}$/ });
+const DURATION = S.string({ pattern: /^P(?=\d|T\d)(\d+Y)?(\d+M)?(\d+D)?(T(\d+H)?(\d+M)?(\d+(\.\d+)?S)?)?$/ });
+const RULE_ID = KASH_RULE_BODY_SCHEMA.properties.id!;
+const GIVEN_TEXT = TEXT(600);
+
+const PARAMETER_1_1 = S.object(
+  {
+    type: INPUT_TYPE,
+    value: S.optional(VALUE),
+    sealed: S.optional(HEX64),
+    bounds: S.optional(
+      S.union(
+        S.object({ min: S.optional(S.union(S.string({ maxLength: 64 }), S.number())), max: S.optional(S.union(S.string({ maxLength: 64 }), S.number())) }),
+        S.object({ allowed: S.array(VALUE, { minItems: 1, maxItems: 64 }) }, ["allowed"]),
+      ),
+    ),
+  },
+  ["type"],
+);
+
+const GIVENS_SCHEMA = S.object({
+  area: S.optional(
+    S.object(
+      { text: GIVEN_TEXT, anywhere: S.optional(S.boolean()), countries: S.optional(S.array(S.string({ pattern: /^[A-Z]{2}$/ }), { minItems: 1, maxItems: 64 })), places: S.optional(S.array(PLACE_REF, { minItems: 1, maxItems: 64 })) },
+      ["text"],
+    ),
+  ),
+  spaces: S.optional(S.object({ text: GIVEN_TEXT, kinds: S.optional(S.array(S.enum(...SPACE_KINDS), { minItems: 1, maxItems: 8 })), places: S.optional(S.array(PLACE_REF, { minItems: 1, maxItems: 64 })) }, ["text"])),
+  capitals: S.optional(S.object({ text: GIVEN_TEXT, needs: S.optional(S.array(S.object({ kind: S.enum(...CAPITAL_KINDS), what: TEXT(200) }, ["kind", "what"]), { minItems: 1, maxItems: 16 })) }, ["text"])),
+  culture: S.optional(
+    S.object(
+      { text: GIVEN_TEXT, codes: S.optional(S.array(S.object({ title: TEXT(200), url: S.optional(S.string({ format: "url" })) }, ["title"]), { minItems: 1, maxItems: 16 })), languages: S.optional(S.array(S.string({ format: "bcp47" }), { minItems: 1, maxItems: 16 })) },
+      ["text"],
+    ),
+  ),
+  economy: S.optional(S.object({ text: GIVEN_TEXT, level: S.optional(S.enum(...ECONOMY_LEVELS)) }, ["text"])),
+  time: S.optional(S.object({ text: GIVEN_TEXT, lasts: S.optional(DURATION), renews: S.optional(DURATION) }, ["text"])),
+  relations: S.optional(
+    S.object(
+      { text: GIVEN_TEXT, recognises: S.optional(S.array(S.object({ rule: RULE_ID, version: S.optional(S.number({ integer: true, min: 1 })) }, ["rule"]), { minItems: 1, maxItems: 32 })), within: S.optional(S.array(S.object({ id: S.string({ minLength: 1, maxLength: 256 }) }, ["id"]), { minItems: 1, maxItems: 16 })) },
+      ["text"],
+    ),
+  ),
+});
+
+export const RULE_ADDRESS_SCHEMA: ObjectSchema = S.object(
+  {
+    sector: S.object({ classification: S.literal("ISIC"), revision: S.literal("5"), code: S.string({ pattern: /^([A-V]|\d{2})$/ }) }, ["classification", "revision", "code"]),
+    anchorFamily: S.enum(...ANCHOR_FAMILIES),
+    authority: S.object({ kind: S.enum(...AUTHORITY_KINDS), name: S.optional(TEXT(120)), url: S.optional(S.string({ format: "url" })) }, ["kind"]),
+    journey: S.enum(...JOURNEYS),
+    givens: GIVENS_SCHEMA,
+  },
+  ["sector", "anchorFamily", "authority", "journey", "givens"],
+);
+
+export const CRITERION_1_1_SCHEMA: ObjectSchema = S.object({ ...CRITERION_SCHEMA.properties, subject: S.optional(S.enum(...SUBJECTS)) }, CRITERION_SCHEMA.required);
+
+export const KASH_RULE_1_1_BODY_SCHEMA: ObjectSchema = S.object(
+  {
+    ...KASH_RULE_BODY_SCHEMA.properties,
+    parameters: S.optional(S.record(PARAMETER_1_1, S.string({ pattern: /^[A-Za-z_][A-Za-z0-9_]{0,63}$/ }))),
+    criteria: S.array(CRITERION_1_1_SCHEMA, { minItems: 1, maxItems: 32 }),
+    address: S.optional(RULE_ADDRESS_SCHEMA),
+    draft: S.optional(S.boolean()),
+  },
+  KASH_RULE_BODY_SCHEMA.required,
+);
+
+export const KASH_RULE_1_1_LEXICON: LexiconDef = {
+  id: KASH_RULE_1_1_ID,
+  nsid: KASH_RULE_NSID,
+  semver: { major: 1, minor: 1, patch: 0 },
+  bodySchema: KASH_RULE_1_1_BODY_SCHEMA,
+  title: "A door's rule, with its address",
+  description:
+    "kash.rule@1.0.0 plus the address (ISIC Rev. 5 sector, anchor family, authority, journey, the seven givens), each criterion's subject, parameter bounds for adopters, and draft. A 1.0.0 body is a 1.1.0 body.",
+};
+
+/* ── kash.adoption@1.0.0 ───────────────────────────────────────────── */
+
+export const KASH_ADOPTION_NSID = "kash.adoption" as const;
+export const KASH_ADOPTION_ID = "kash.adoption@1.0.0" as const;
+
+export interface AdoptionBody {
+  /** `did:kash:<anchor>/adoption/<slug>`. */
+  readonly id: string;
+  /** The adopting organisation — the anchor whose door decides under it. */
+  readonly anchor: string;
+  readonly rule: { readonly id: string; readonly version: number; readonly hash: string };
+  /** Local values for the parameters the rule bounds — nothing else. */
+  readonly parameters: Readonly<Record<string, string | number | boolean>>;
+  /** It renews and ends, no later than the rule (d43). */
+  readonly dates: { readonly adopted: string; readonly renewBy: string; readonly endsAt: string };
+  readonly practice?: boolean;
+}
+
+export const KASH_ADOPTION_BODY_SCHEMA: ObjectSchema = S.object(
+  {
+    id: S.string({ pattern: /^did:kash:[1-9A-HJ-NP-Za-km-z]{32,48}\/adoption\/[a-z0-9][a-z0-9-]{0,62}$/ }),
+    anchor: DID,
+    rule: S.object({ id: RULE_ID, version: S.number({ integer: true, min: 1 }), hash: HEX64 }, ["id", "version", "hash"]),
+    parameters: S.record(VALUE, S.string({ pattern: /^[A-Za-z_][A-Za-z0-9_]{0,63}$/ })),
+    dates: S.object({ adopted: ISO, renewBy: ISO, endsAt: ISO }, ["adopted", "renewBy", "endsAt"]),
+    practice: S.optional(S.boolean()),
+  },
+  ["id", "anchor", "rule", "parameters", "dates"],
+);
+
+export const KASH_ADOPTION_LEXICON: LexiconDef = {
+  id: KASH_ADOPTION_ID,
+  nsid: KASH_ADOPTION_NSID,
+  semver: { major: 1, minor: 0, patch: 0 },
+  bodySchema: KASH_ADOPTION_BODY_SCHEMA,
+  title: "An anchor's adoption of a rule",
+  description: "An organisation adopts one version of a rule with its own values for the parameters the rule bounds. Public, signed by the anchor.",
+};
+
+/* ── bundles ───────────────────────────────────────────────────────── */
+
+/** Every door lexicon: the rule at 1.0.0 and 1.1.0, and the adoption. All public and organisation-authored (d59). */
+export const DOOR_LEXICONS: readonly LexiconDef[] = [KASH_RULE_LEXICON, KASH_RULE_1_1_LEXICON, KASH_ADOPTION_LEXICON];

package/src/schema.ts

@@ -319,7 +319,11 @@ function validateObject(s: ObjectSchema, value: unknown, path: readonly (string
   }
   if (!s.additionalProperties) {
     for (const k of Object.keys(obj)) {
-      if (!(k in s.properties)) {
+      // audit r1 (muffler F5): use own-key membership, not `k in s.properties`.
+      // `"__proto__" in s.properties` is `true` via Object.prototype, so the `in`
+      // form silently ACCEPTS a `__proto__`/`constructor` key under a strict
+      // (additionalProperties:false) schema — a prototype-pollution passthrough.
+      if (!Object.prototype.hasOwnProperty.call(s.properties, k)) {
         errors.push(err([...path, k], "unknown field", obj[k]));
       }
     }