@mdbase-dev/connect-protocol 0.1.0-beta.113 → 0.1.0-beta.114

package/dist/index.d.ts

@@ -177,10 +177,13 @@ export interface ApplicationRequirements {
     access?: "contract" | "full_collection";
     /** Restrict authorization to durable provider-backed collections. */
     collection_kind?: "hosted";
+    /** Explicit identity consent. Omission discloses no account metadata. */
+    people?: import("./people.js").ApplicationPeopleRequirement;
     /** First-class non-Markdown file access requested independently of records. */
     files?: ApplicationFileRequirement;
 }
-export type LegacyApplicationRequirements = Omit<ApplicationRequirements, "capabilities" | "files" | "access"> & {
+export { PEOPLE_PERMISSIONS, approvedPeoplePermissions, type AccountIdentity, type AccountProfile, type CurrentAccountResponse, type CollectionMemberProfile, type ApplicationPeopleRequirement, type PeoplePermission } from "./people.js";
+export type LegacyApplicationRequirements = Omit<ApplicationRequirements, "capabilities" | "files" | "access" | "people"> & {
     access: "full_collection";
     capabilities?: LegacyApplicationCapabilityRequirements;
     files?: LegacyApplicationFileRequirement;
@@ -198,11 +201,7 @@ export interface ApplicationProvisions {
     configuration?: ConfigurationProvision[];
 }
 export interface GrantScope {
-    /**
-     * Legacy semantic scope payload retained for wire/storage compatibility.
-     * Canonical application grants use an empty array; contracts remain available
-     * through collection resources and operation-level semantic selectors.
-     */
+    /** Legacy scope only; canonical grants use an empty array and discover contracts through resources and semantic selectors. */
     contracts: CollectionContractDescriptor[];
     /** New authority must be `full_collection`; `contract` is legacy-only. */
     access: "contract" | "full_collection";
@@ -784,6 +783,7 @@ export interface QueryRecord<Frontmatter extends JsonObject = JsonObject> {
     file: Partial<CollectionFileMetadata> & {
         path?: string;
     };
+    values?: JsonObject;
     /** Present when the authority returned a normalized contract projection. */
     contract?: DataContractViewIdentity;
 }

package/dist/index.js

@@ -93,3 +93,4 @@ export const CONNECT_SCHEMA_IDS = {
     files: "https://mdbase.dev/connect/schemas/files.v1.json",
     sync: "https://mdbase.dev/connect/schemas/sync.v1.json"
 };
+export { PEOPLE_PERMISSIONS, approvedPeoplePermissions } from "./people.js";

package/dist/manifest.js

@@ -282,6 +282,17 @@ function validateProvisionRequirements(value) {
         }
         for (const [resourceIndex, resource] of declaredResources.entries()) {
             const source = String(resource.source);
+            if (resource.upgrade_from !== undefined) {
+                const baseline = asObject(resource.upgrade_from);
+                const path = `/provisions/type_packs/${packIndex}/manifest/resources/${resourceIndex}/upgrade_from`;
+                if (resource.kind !== "type" || resource.mode !== "seed") {
+                    issues.push(issue(path, "seedUpgrade", "is only allowed for seed types"));
+                }
+                if (typeof baseline.document === "string"
+                    && baseline.digest !== `sha256:${createHash("sha256").update(baseline.document).digest("hex")}`) {
+                    issues.push(issue(`${path}/digest`, "digest", "does not match the baseline document"));
+                }
+            }
             const document = embedded.get(source);
             if (typeof document !== "string") {
                 issues.push(issue(`/provisions/type_packs/${packIndex}/resources`, "resourceSet", `is missing manifest source ${source}`));
@@ -409,6 +420,13 @@ function validateCapabilityRequirements(value) {
     if (fileOverlap) {
         issues.push(issue("/requirements/files/optional", "disjoint", `must not repeat required file action ${fileOverlap}`));
     }
+    const people = asObject(requirements.people);
+    const requiredPeople = Array.isArray(people.required) ? people.required.map(String) : [];
+    const optionalPeople = Array.isArray(people.optional) ? people.optional.map(String) : [];
+    const peopleOverlap = optionalPeople.find((permission) => requiredPeople.includes(permission));
+    if (peopleOverlap) {
+        issues.push(issue("/requirements/people/optional", "disjoint", `must not repeat required people permission ${peopleOverlap}`));
+    }
     return issues;
 }
 // Frozen cross-field rules from c2596a6e; notably, absent capabilities skip

package/dist/people.d.ts

@@ -0,0 +1,33 @@
+export declare const PEOPLE_PERMISSIONS: readonly ["identity", "members"];
+export type PeoplePermission = (typeof PEOPLE_PERMISSIONS)[number];
+/**
+ * Control-plane consent declared in the exact application manifest. Required
+ * permissions gate approval; the approving user chooses optional ones, and the
+ * grant records the result.
+ */
+export interface ApplicationPeopleRequirement {
+    version: 1;
+    required?: PeoplePermission[];
+    optional?: PeoplePermission[];
+}
+/**
+ * Validates an approval choice against a declaration. An omitted choice
+ * approves every declared permission, matching file-action approval.
+ */
+export declare function approvedPeoplePermissions(requirement: ApplicationPeopleRequirement | undefined, selected?: readonly string[]): PeoplePermission[];
+/** Portable account identity, not a credential or collection permission. */
+export interface AccountIdentity {
+    issuer: string;
+    subject: string;
+}
+export interface AccountProfile extends AccountIdentity {
+    name: string;
+}
+/** Wire response for the current account. */
+export interface CurrentAccountResponse extends AccountProfile {
+    /** Where this account manages its person record; a route, never an identity. */
+    person_settings_url?: string;
+}
+export interface CollectionMemberProfile extends AccountProfile {
+    role: "owner" | "editor" | "viewer";
+}

package/dist/people.js

@@ -0,0 +1,26 @@
+export const PEOPLE_PERMISSIONS = ["identity", "members"];
+/**
+ * Validates an approval choice against a declaration. An omitted choice
+ * approves every declared permission, matching file-action approval.
+ */
+export function approvedPeoplePermissions(requirement, selected) {
+    if (!requirement) {
+        if (selected?.length)
+            throw new Error("People permissions require an application people declaration.");
+        return [];
+    }
+    const required = requirement.required ?? [];
+    const optional = requirement.optional ?? [];
+    const declared = new Set([...required, ...optional]);
+    if (requirement.version !== 1
+        || declared.size === 0
+        || declared.size !== required.length + optional.length
+        || [...declared].some((permission) => !PEOPLE_PERMISSIONS.includes(permission))) {
+        throw new Error("People requirements need unique, disjoint, known required and optional permissions.");
+    }
+    const chosen = new Set(selected ?? declared);
+    if (required.some((permission) => !chosen.has(permission)) || [...chosen].some((permission) => !declared.has(permission))) {
+        throw new Error("Required people permissions must be approved and optional people permissions must be declared.");
+    }
+    return PEOPLE_PERMISSIONS.filter((permission) => chosen.has(permission));
+}

package/dist/type-packs.d.ts

@@ -36,6 +36,11 @@ export declare const MDBASE_TIMER_FIRED_CONTRACT: {
     readonly digest: "sha256:41105be7a7abf33b31ced47e1e1965242236e40ccaea286b959b0a8c591f5642";
 };
 export interface TypePackManifestResource {
+    /** Explicit three-way upgrade; only valid for seed type resources. */
+    upgrade_from?: {
+        digest: string;
+        document: string;
+    };
     kind: "contract" | "type" | "schema";
     mode: "managed" | "seed";
     source: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mdbase-dev/connect-protocol",
-  "version": "0.1.0-beta.113",
+  "version": "0.1.0-beta.114",
   "private": false,
   "type": "module",
   "license": "MIT",

package/schemas/mdbase-app.schema.json

@@ -122,6 +122,17 @@
           "const": "hosted",
           "description": "Require a durable provider-backed collection with direct sync support."
         },
+        "people": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["version"],
+          "anyOf": [{ "required": ["required"] }, { "required": ["optional"] }],
+          "properties": {
+            "version": { "const": 1 },
+            "required": { "$ref": "#/$defs/peoplePermissions" },
+            "optional": { "$ref": "#/$defs/peoplePermissions" }
+          }
+        },
         "files": { "$ref": "#/$defs/fileRequirement" },
         "configuration": {
           "type": "array",
@@ -208,6 +219,10 @@
         "offline.replica"
       ]
     },
+    "peoplePermissions": {
+      "type": "array", "minItems": 1, "uniqueItems": true,
+      "items": { "enum": ["identity", "members"] }
+    },
     "fileRequirement": {
       "type": "object",
       "additionalProperties": false,
@@ -303,6 +318,15 @@
       "properties": {
         "kind": { "enum": ["contract", "type", "schema"] },
         "mode": { "enum": ["managed", "seed"] },
+        "upgrade_from": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["digest", "document"],
+          "properties": {
+            "digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+            "document": { "type": "string", "maxLength": 262144 }
+          }
+        },
         "source": { "type": "string", "minLength": 1, "maxLength": 240 },
         "target": { "type": "string", "minLength": 1, "maxLength": 240 },
         "digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }