@medicine-wheel/infra 0.5.7 → 0.5.9

package/dist/schemas.d.ts

@@ -13,6 +13,12 @@ export declare const MetisHoldSchema: z.ZodObject<{
     exceptions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     invisibleWork: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     notes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /**
+     * `.min(1)` is load-bearing. An empty string passes every other check while
+     * anonymising the carrier — which is precisely the erasure this field exists
+     * to refuse. Absent means nobody was named; empty means somebody was named
+     * nothing, and only one of those is honest.
+     */
     heldBy: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     exceptions?: string[] | undefined;
@@ -77,6 +83,12 @@ export declare const HostFacetSchema: z.ZodObject<{
         exceptions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         invisibleWork: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         notes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        /**
+         * `.min(1)` is load-bearing. An empty string passes every other check while
+         * anonymising the carrier — which is precisely the erasure this field exists
+         * to refuse. Absent means nobody was named; empty means somebody was named
+         * nothing, and only one of those is honest.
+         */
         heldBy: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         exceptions?: string[] | undefined;
@@ -125,6 +137,12 @@ export declare const TenantFacetSchema: z.ZodObject<{
         exceptions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         invisibleWork: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         notes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        /**
+         * `.min(1)` is load-bearing. An empty string passes every other check while
+         * anonymising the carrier — which is precisely the erasure this field exists
+         * to refuse. Absent means nobody was named; empty means somebody was named
+         * nothing, and only one of those is honest.
+         */
         heldBy: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         exceptions?: string[] | undefined;
@@ -191,6 +209,12 @@ export declare const ServiceFacetSchema: z.ZodObject<{
         exceptions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         invisibleWork: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         notes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        /**
+         * `.min(1)` is load-bearing. An empty string passes every other check while
+         * anonymising the carrier — which is precisely the erasure this field exists
+         * to refuse. Absent means nobody was named; empty means somebody was named
+         * nothing, and only one of those is honest.
+         */
         heldBy: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         exceptions?: string[] | undefined;
@@ -242,10 +266,392 @@ export declare const ServiceFacetSchema: z.ZodObject<{
     workingDirectory?: string | undefined;
     execStop?: string | undefined;
 }>;
+export declare const PreconditionKindSchema: z.ZodEnum<["linger", "port-free", "unit-present", "working-directory"]>;
+/**
+ * `observed` is `.optional()` and NOT `.default()`. An unread fact must stay
+ * distinguishable from a read one — a default would quietly turn "nobody looked"
+ * into a value, which is the exact confusion `preconditionGuard` returns
+ * `unknown` to prevent.
+ */
+export declare const MachineFactSchema: z.ZodObject<{
+    kind: z.ZodEnum<["linger", "port-free", "unit-present", "working-directory"]>;
+    facetNodeId: z.ZodString;
+    expected: z.ZodString;
+    observed: z.ZodOptional<z.ZodString>;
+    observedAt: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    expected: string;
+    kind: "linger" | "port-free" | "unit-present" | "working-directory";
+    facetNodeId: string;
+    observed?: string | undefined;
+    observedAt?: string | undefined;
+}, {
+    expected: string;
+    kind: "linger" | "port-free" | "unit-present" | "working-directory";
+    facetNodeId: string;
+    observed?: string | undefined;
+    observedAt?: string | undefined;
+}>;
+/**
+ * `state` is a bare string, not an enum. `infra` records what the consent
+ * lifecycle said; it does not get to decide which states exist, and an enum here
+ * would let this package reject a state the lifecycle legitimately issued.
+ */
+export declare const ConsentReferenceSchema: z.ZodObject<{
+    consentId: z.ZodString;
+    state: z.ZodOptional<z.ZodString>;
+    readAt: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    consentId: string;
+    state?: string | undefined;
+    readAt?: string | undefined;
+}, {
+    consentId: string;
+    state?: string | undefined;
+    readAt?: string | undefined;
+}>;
+export declare const PreconditionSchema: z.ZodObject<{
+    id: z.ZodString;
+    gates: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    fact: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<["linger", "port-free", "unit-present", "working-directory"]>;
+        facetNodeId: z.ZodString;
+        expected: z.ZodString;
+        observed: z.ZodOptional<z.ZodString>;
+        observedAt: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        expected: string;
+        kind: "linger" | "port-free" | "unit-present" | "working-directory";
+        facetNodeId: string;
+        observed?: string | undefined;
+        observedAt?: string | undefined;
+    }, {
+        expected: string;
+        kind: "linger" | "port-free" | "unit-present" | "working-directory";
+        facetNodeId: string;
+        observed?: string | undefined;
+        observedAt?: string | undefined;
+    }>>;
+    consent: z.ZodOptional<z.ZodObject<{
+        consentId: z.ZodString;
+        state: z.ZodOptional<z.ZodString>;
+        readAt: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        consentId: string;
+        state?: string | undefined;
+        readAt?: string | undefined;
+    }, {
+        consentId: string;
+        state?: string | undefined;
+        readAt?: string | undefined;
+    }>>;
+    metis: z.ZodOptional<z.ZodObject<{
+        exceptions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        invisibleWork: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        notes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        /**
+         * `.min(1)` is load-bearing. An empty string passes every other check while
+         * anonymising the carrier — which is precisely the erasure this field exists
+         * to refuse. Absent means nobody was named; empty means somebody was named
+         * nothing, and only one of those is honest.
+         */
+        heldBy: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        exceptions?: string[] | undefined;
+        invisibleWork?: string[] | undefined;
+        notes?: string[] | undefined;
+        heldBy?: string | undefined;
+    }, {
+        exceptions?: string[] | undefined;
+        invisibleWork?: string[] | undefined;
+        notes?: string[] | undefined;
+        heldBy?: string | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    gates: string;
+    metis?: {
+        exceptions?: string[] | undefined;
+        invisibleWork?: string[] | undefined;
+        notes?: string[] | undefined;
+        heldBy?: string | undefined;
+    } | undefined;
+    description?: string | undefined;
+    fact?: {
+        expected: string;
+        kind: "linger" | "port-free" | "unit-present" | "working-directory";
+        facetNodeId: string;
+        observed?: string | undefined;
+        observedAt?: string | undefined;
+    } | undefined;
+    consent?: {
+        consentId: string;
+        state?: string | undefined;
+        readAt?: string | undefined;
+    } | undefined;
+}, {
+    id: string;
+    gates: string;
+    metis?: {
+        exceptions?: string[] | undefined;
+        invisibleWork?: string[] | undefined;
+        notes?: string[] | undefined;
+        heldBy?: string | undefined;
+    } | undefined;
+    description?: string | undefined;
+    fact?: {
+        expected: string;
+        kind: "linger" | "port-free" | "unit-present" | "working-directory";
+        facetNodeId: string;
+        observed?: string | undefined;
+        observedAt?: string | undefined;
+    } | undefined;
+    consent?: {
+        consentId: string;
+        state?: string | undefined;
+        readAt?: string | undefined;
+    } | undefined;
+}>;
+export declare const PreconditionVerdictSchema: z.ZodEnum<["satisfied", "unsatisfied", "unauthorized", "unknown"]>;
+export declare const DriftStateSchema: z.ZodEnum<["converged", "drifted", "unrealized", "undeclared"]>;
+/**
+ * `observedBy` and `observedAt` are required. An observation without a reader
+ * and a time is a rumour, and this schema is the boundary that refuses one.
+ */
+export declare const ObservedStateSchema: z.ZodObject<{
+    observedBy: z.ZodString;
+    /**
+     * `.datetime()`, not `.min(1)`. An unparseable stamp made `observationAgeMs`
+     * vanish from the result — the same output as "no `now` was given" — so a
+     * caller whose entire reason to read that field is *refuse a stale reading*
+     * could not tell a garbage timestamp from a deliberate clock-free call, and
+     * would proceed.
+     */
+    observedAt: z.ZodString;
+    services: z.ZodArray<z.ZodObject<{
+        nodeId: z.ZodString;
+        unit: z.ZodString;
+        scope: z.ZodEnum<["user", "system"]>;
+        ownedBy: z.ZodString;
+        ports: z.ZodArray<z.ZodObject<{
+            port: z.ZodNumber;
+            proto: z.ZodOptional<z.ZodEnum<["tcp", "udp"]>>;
+            host: z.ZodString;
+            boundBy: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            host: string;
+            port: number;
+            boundBy: string;
+            proto?: "tcp" | "udp" | undefined;
+        }, {
+            host: string;
+            port: number;
+            boundBy: string;
+            proto?: "tcp" | "udp" | undefined;
+        }>, "many">;
+        workingDirectory: z.ZodOptional<z.ZodString>;
+        execStop: z.ZodOptional<z.ZodString>;
+        metis: z.ZodOptional<z.ZodObject<{
+            exceptions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            invisibleWork: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            notes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            /**
+             * `.min(1)` is load-bearing. An empty string passes every other check while
+             * anonymising the carrier — which is precisely the erasure this field exists
+             * to refuse. Absent means nobody was named; empty means somebody was named
+             * nothing, and only one of those is honest.
+             */
+            heldBy: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            exceptions?: string[] | undefined;
+            invisibleWork?: string[] | undefined;
+            notes?: string[] | undefined;
+            heldBy?: string | undefined;
+        }, {
+            exceptions?: string[] | undefined;
+            invisibleWork?: string[] | undefined;
+            notes?: string[] | undefined;
+            heldBy?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        nodeId: string;
+        unit: string;
+        scope: "user" | "system";
+        ownedBy: string;
+        ports: {
+            host: string;
+            port: number;
+            boundBy: string;
+            proto?: "tcp" | "udp" | undefined;
+        }[];
+        metis?: {
+            exceptions?: string[] | undefined;
+            invisibleWork?: string[] | undefined;
+            notes?: string[] | undefined;
+            heldBy?: string | undefined;
+        } | undefined;
+        workingDirectory?: string | undefined;
+        execStop?: string | undefined;
+    }, {
+        nodeId: string;
+        unit: string;
+        scope: "user" | "system";
+        ownedBy: string;
+        ports: {
+            host: string;
+            port: number;
+            boundBy: string;
+            proto?: "tcp" | "udp" | undefined;
+        }[];
+        metis?: {
+            exceptions?: string[] | undefined;
+            invisibleWork?: string[] | undefined;
+            notes?: string[] | undefined;
+            heldBy?: string | undefined;
+        } | undefined;
+        workingDirectory?: string | undefined;
+        execStop?: string | undefined;
+    }>, "many">;
+    tenants: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        nodeId: z.ZodString;
+        account: z.ZodString;
+        uid: z.ZodOptional<z.ZodNumber>;
+        home: z.ZodOptional<z.ZodString>;
+        onHost: z.ZodString;
+        linger: z.ZodEnum<["enabled", "disabled", "unknown"]>;
+        metis: z.ZodOptional<z.ZodObject<{
+            exceptions: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            invisibleWork: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            notes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            /**
+             * `.min(1)` is load-bearing. An empty string passes every other check while
+             * anonymising the carrier — which is precisely the erasure this field exists
+             * to refuse. Absent means nobody was named; empty means somebody was named
+             * nothing, and only one of those is honest.
+             */
+            heldBy: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            exceptions?: string[] | undefined;
+            invisibleWork?: string[] | undefined;
+            notes?: string[] | undefined;
+            heldBy?: string | undefined;
+        }, {
+            exceptions?: string[] | undefined;
+            invisibleWork?: string[] | undefined;
+            notes?: string[] | undefined;
+            heldBy?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        nodeId: string;
+        account: string;
+        onHost: string;
+        linger: "enabled" | "disabled" | "unknown";
+        metis?: {
+            exceptions?: string[] | undefined;
+            invisibleWork?: string[] | undefined;
+            notes?: string[] | undefined;
+            heldBy?: string | undefined;
+        } | undefined;
+        uid?: number | undefined;
+        home?: string | undefined;
+    }, {
+        nodeId: string;
+        account: string;
+        onHost: string;
+        linger: "enabled" | "disabled" | "unknown";
+        metis?: {
+            exceptions?: string[] | undefined;
+            invisibleWork?: string[] | undefined;
+            notes?: string[] | undefined;
+            heldBy?: string | undefined;
+        } | undefined;
+        uid?: number | undefined;
+        home?: string | undefined;
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    observedAt: string;
+    observedBy: string;
+    services: {
+        nodeId: string;
+        unit: string;
+        scope: "user" | "system";
+        ownedBy: string;
+        ports: {
+            host: string;
+            port: number;
+            boundBy: string;
+            proto?: "tcp" | "udp" | undefined;
+        }[];
+        metis?: {
+            exceptions?: string[] | undefined;
+            invisibleWork?: string[] | undefined;
+            notes?: string[] | undefined;
+            heldBy?: string | undefined;
+        } | undefined;
+        workingDirectory?: string | undefined;
+        execStop?: string | undefined;
+    }[];
+    tenants?: {
+        nodeId: string;
+        account: string;
+        onHost: string;
+        linger: "enabled" | "disabled" | "unknown";
+        metis?: {
+            exceptions?: string[] | undefined;
+            invisibleWork?: string[] | undefined;
+            notes?: string[] | undefined;
+            heldBy?: string | undefined;
+        } | undefined;
+        uid?: number | undefined;
+        home?: string | undefined;
+    }[] | undefined;
+}, {
+    observedAt: string;
+    observedBy: string;
+    services: {
+        nodeId: string;
+        unit: string;
+        scope: "user" | "system";
+        ownedBy: string;
+        ports: {
+            host: string;
+            port: number;
+            boundBy: string;
+            proto?: "tcp" | "udp" | undefined;
+        }[];
+        metis?: {
+            exceptions?: string[] | undefined;
+            invisibleWork?: string[] | undefined;
+            notes?: string[] | undefined;
+            heldBy?: string | undefined;
+        } | undefined;
+        workingDirectory?: string | undefined;
+        execStop?: string | undefined;
+    }[];
+    tenants?: {
+        nodeId: string;
+        account: string;
+        onHost: string;
+        linger: "enabled" | "disabled" | "unknown";
+        metis?: {
+            exceptions?: string[] | undefined;
+            invisibleWork?: string[] | undefined;
+            notes?: string[] | undefined;
+            heldBy?: string | undefined;
+        } | undefined;
+        uid?: number | undefined;
+        home?: string | undefined;
+    }[] | undefined;
+}>;
 export type ValidatedMetisHold = z.infer<typeof MetisHoldSchema>;
 export type ValidatedPortBinding = z.infer<typeof PortBindingSchema>;
 export type ValidatedPortConflict = z.infer<typeof PortConflictSchema>;
 export type ValidatedHostFacet = z.infer<typeof HostFacetSchema>;
 export type ValidatedTenantFacet = z.infer<typeof TenantFacetSchema>;
 export type ValidatedServiceFacet = z.infer<typeof ServiceFacetSchema>;
+export type ValidatedMachineFact = z.infer<typeof MachineFactSchema>;
+export type ValidatedConsentReference = z.infer<typeof ConsentReferenceSchema>;
+export type ValidatedPrecondition = z.infer<typeof PreconditionSchema>;
+export type ValidatedObservedState = z.infer<typeof ObservedStateSchema>;
 //# sourceMappingURL=schemas.d.ts.map

package/dist/schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;EAK1B,CAAC;AAIH,eAAO,MAAM,iBAAiB,+CAA6C,CAAC;AAE5E,eAAO,MAAM,kBAAkB,sDAAoD,CAAC;AAEpF,eAAO,MAAM,eAAe,2BAAyB,CAAC;AAEtD,eAAO,MAAM,kBAAkB,+BAA6B,CAAC;AAI7D;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,aAAqC,CAAC;AAEnE,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;EAK5B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;EAK7B,CAAC;AAIH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAO1B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQ5B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS7B,CAAC;AAOH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACjE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AACrE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACvE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACjE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AACrE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,eAAe;;;;IAI1B;;;;;OAKG;;;;;;;;;;;;EAEH,CAAC;AAIH,eAAO,MAAM,iBAAiB,+CAA6C,CAAC;AAE5E,eAAO,MAAM,kBAAkB,sDAAoD,CAAC;AAEpF,eAAO,MAAM,eAAe,2BAAyB,CAAC;AAEtD,eAAO,MAAM,kBAAkB,+BAA6B,CAAC;AAI7D;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,aAAqC,CAAC;AAEnE,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;EAK5B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;EAK7B,CAAC;AAIH,eAAO,MAAM,eAAe;;;;;;;;;;QA5C1B;;;;;WAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8CH,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;QArD5B;;;;;WAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwDH,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;QA/D7B;;;;;WAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmEH,CAAC;AAIH,eAAO,MAAM,sBAAsB,yEAKjC,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;EAM5B,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;EAIjC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA5G7B;;;;;WAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8GH,CAAC;AAEH,eAAO,MAAM,yBAAyB,oEAKpC,CAAC;AAIH,eAAO,MAAM,gBAAgB,iEAA+D,CAAC;AAE7F;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;IAE9B;;;;;;OAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YA5IH;;;;;eAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YALH;;;;;eAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2IH,CAAC;AAOH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACjE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AACrE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACvE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACjE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AACrE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACvE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AACrE,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC/E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACvE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/schemas.js

@@ -10,14 +10,20 @@
  * Spec: /opt/eury/rispecs/foundations/02-specifications.md §S1.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ServiceFacetSchema = exports.TenantFacetSchema = exports.HostFacetSchema = exports.PortConflictSchema = exports.PortBindingSchema = exports.PortNumberSchema = exports.ServiceScopeSchema = exports.PortProtoSchema = exports.ReachabilitySchema = exports.LingerStateSchema = exports.MetisHoldSchema = void 0;
+exports.ObservedStateSchema = exports.DriftStateSchema = exports.PreconditionVerdictSchema = exports.PreconditionSchema = exports.ConsentReferenceSchema = exports.MachineFactSchema = exports.PreconditionKindSchema = exports.ServiceFacetSchema = exports.TenantFacetSchema = exports.HostFacetSchema = exports.PortConflictSchema = exports.PortBindingSchema = exports.PortNumberSchema = exports.ServiceScopeSchema = exports.PortProtoSchema = exports.ReachabilitySchema = exports.LingerStateSchema = exports.MetisHoldSchema = void 0;
 const zod_1 = require("zod");
 // ── Métis (S5) ──────────────────────────────────────────────────────────────
 exports.MetisHoldSchema = zod_1.z.object({
     exceptions: zod_1.z.array(zod_1.z.string()).optional(),
     invisibleWork: zod_1.z.array(zod_1.z.string()).optional(),
     notes: zod_1.z.array(zod_1.z.string()).optional(),
-    heldBy: zod_1.z.string().optional(),
+    /**
+     * `.min(1)` is load-bearing. An empty string passes every other check while
+     * anonymising the carrier — which is precisely the erasure this field exists
+     * to refuse. Absent means nobody was named; empty means somebody was named
+     * nothing, and only one of those is honest.
+     */
+    heldBy: zod_1.z.string().min(1).optional(),
 });
 // ── Enumerations ────────────────────────────────────────────────────────────
 exports.LingerStateSchema = zod_1.z.enum(['enabled', 'disabled', 'unknown']);
@@ -71,4 +77,67 @@ exports.ServiceFacetSchema = zod_1.z.object({
     execStop: zod_1.z.string().optional(),
     metis: exports.MetisHoldSchema.optional(),
 });
+// ── Preconditions (S4) ──────────────────────────────────────────────────────
+exports.PreconditionKindSchema = zod_1.z.enum([
+    'linger',
+    'port-free',
+    'unit-present',
+    'working-directory',
+]);
+/**
+ * `observed` is `.optional()` and NOT `.default()`. An unread fact must stay
+ * distinguishable from a read one — a default would quietly turn "nobody looked"
+ * into a value, which is the exact confusion `preconditionGuard` returns
+ * `unknown` to prevent.
+ */
+exports.MachineFactSchema = zod_1.z.object({
+    kind: exports.PreconditionKindSchema,
+    facetNodeId: zod_1.z.string().min(1),
+    expected: zod_1.z.string(),
+    observed: zod_1.z.string().optional(),
+    observedAt: zod_1.z.string().optional(),
+});
+/**
+ * `state` is a bare string, not an enum. `infra` records what the consent
+ * lifecycle said; it does not get to decide which states exist, and an enum here
+ * would let this package reject a state the lifecycle legitimately issued.
+ */
+exports.ConsentReferenceSchema = zod_1.z.object({
+    consentId: zod_1.z.string().min(1),
+    state: zod_1.z.string().optional(),
+    readAt: zod_1.z.string().optional(),
+});
+exports.PreconditionSchema = zod_1.z.object({
+    id: zod_1.z.string().min(1),
+    gates: zod_1.z.string().min(1),
+    description: zod_1.z.string().optional(),
+    fact: exports.MachineFactSchema.optional(),
+    consent: exports.ConsentReferenceSchema.optional(),
+    metis: exports.MetisHoldSchema.optional(),
+});
+exports.PreconditionVerdictSchema = zod_1.z.enum([
+    'satisfied',
+    'unsatisfied',
+    'unauthorized',
+    'unknown',
+]);
+// ── Observed state & drift (S6) ─────────────────────────────────────────────
+exports.DriftStateSchema = zod_1.z.enum(['converged', 'drifted', 'unrealized', 'undeclared']);
+/**
+ * `observedBy` and `observedAt` are required. An observation without a reader
+ * and a time is a rumour, and this schema is the boundary that refuses one.
+ */
+exports.ObservedStateSchema = zod_1.z.object({
+    observedBy: zod_1.z.string().min(1),
+    /**
+     * `.datetime()`, not `.min(1)`. An unparseable stamp made `observationAgeMs`
+     * vanish from the result — the same output as "no `now` was given" — so a
+     * caller whose entire reason to read that field is *refuse a stale reading*
+     * could not tell a garbage timestamp from a deliberate clock-free call, and
+     * would proceed.
+     */
+    observedAt: zod_1.z.string().datetime(),
+    services: zod_1.z.array(exports.ServiceFacetSchema),
+    tenants: zod_1.z.array(exports.TenantFacetSchema).optional(),
+});
 //# sourceMappingURL=schemas.js.map

package/dist/schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAEH,6BAAwB;AAExB,+EAA+E;AAElE,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAEH,+EAA+E;AAElE,QAAA,iBAAiB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAE/D,QAAA,kBAAkB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;AAEvE,QAAA,eAAe,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAEzC,QAAA,kBAAkB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE7D,+EAA+E;AAE/E;;;;GAIG;AACU,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAEtD,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,wBAAgB;IACtB,KAAK,EAAE,uBAAe,CAAC,QAAQ,EAAE;IACjC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC,CAAC;AAEU,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,wBAAgB;IACtB,KAAK,EAAE,uBAAe;IACtB,SAAS,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7C,CAAC,CAAC;AAEH,+EAA+E;AAElE,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,0BAAkB,CAAC,CAAC,QAAQ,EAAE;IACpD,KAAK,EAAE,uBAAe,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEU,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC9C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,yBAAiB;IACzB,KAAK,EAAE,uBAAe,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEU,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,0BAAkB;IACzB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,yBAAiB,CAAC;IACjC,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,uBAAe,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC"}
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAEH,6BAAwB;AAExB,+EAA+E;AAElE,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC;;;;;OAKG;IACH,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEH,+EAA+E;AAElE,QAAA,iBAAiB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAE/D,QAAA,kBAAkB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;AAEvE,QAAA,eAAe,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAEzC,QAAA,kBAAkB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE7D,+EAA+E;AAE/E;;;;GAIG;AACU,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAEtD,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,wBAAgB;IACtB,KAAK,EAAE,uBAAe,CAAC,QAAQ,EAAE;IACjC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC,CAAC;AAEU,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,wBAAgB;IACtB,KAAK,EAAE,uBAAe;IACtB,SAAS,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7C,CAAC,CAAC;AAEH,+EAA+E;AAElE,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,0BAAkB,CAAC,CAAC,QAAQ,EAAE;IACpD,KAAK,EAAE,uBAAe,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEU,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC9C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,yBAAiB;IACzB,KAAK,EAAE,uBAAe,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEU,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,0BAAkB;IACzB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,yBAAiB,CAAC;IACjC,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,uBAAe,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,+EAA+E;AAElE,QAAA,sBAAsB,GAAG,OAAC,CAAC,IAAI,CAAC;IAC3C,QAAQ;IACR,WAAW;IACX,cAAc;IACd,mBAAmB;CACpB,CAAC,CAAC;AAEH;;;;;GAKG;AACU,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,8BAAsB;IAC5B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAEU,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,yBAAiB,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,8BAAsB,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,uBAAe,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEU,QAAA,yBAAyB,GAAG,OAAC,CAAC,IAAI,CAAC;IAC9C,WAAW;IACX,aAAa;IACb,cAAc;IACd,SAAS;CACV,CAAC,CAAC;AAEH,+EAA+E;AAElE,QAAA,gBAAgB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;AAE7F;;;GAGG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B;;;;;;OAMG;IACH,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,0BAAkB,CAAC;IACrC,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,yBAAiB,CAAC,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@medicine-wheel/infra",
-  "version": "0.5.7",
+  "version": "0.5.9",
   "description": "Typed infrastructure facets for the Medicine Wheel Developer Suite — hosts, tenants, services, and port bindings as facets keyed by relational node id, with port-conflict detection over declared ∪ observed state",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -53,7 +53,7 @@
     "directory": "src/infra"
   },
   "dependencies": {
-    "@medicine-wheel/ontology-core": "^0.5.7",
+    "@medicine-wheel/ontology-core": "^0.5.9",
     "zod": "^3.23.0"
   },
   "devDependencies": {