@objectstack/spec 0.2.0 → 0.3.1

package/json-schema/{AuthConfig.json → system/AuthConfig.json}

@@ -381,6 +381,199 @@
           },
           "additionalProperties": false
         },
+        "organization": {
+          "type": "object",
+          "properties": {
+            "enabled": {
+              "type": "boolean",
+              "default": false,
+              "description": "Enable organization/multi-tenant features"
+            },
+            "allowUserToCreateOrg": {
+              "type": "boolean",
+              "default": true,
+              "description": "Allow users to create organizations"
+            },
+            "defaultRole": {
+              "type": "string",
+              "default": "member",
+              "description": "Default role for new members"
+            },
+            "creatorRole": {
+              "type": "string",
+              "default": "owner",
+              "description": "Role assigned to organization creator"
+            }
+          },
+          "additionalProperties": false,
+          "description": "Organization/multi-tenant configuration"
+        },
+        "enterprise": {
+          "type": "object",
+          "properties": {
+            "oidc": {
+              "type": "object",
+              "properties": {
+                "enabled": {
+                  "type": "boolean",
+                  "default": false
+                },
+                "issuer": {
+                  "type": "string",
+                  "format": "uri",
+                  "description": "OIDC Issuer URL (.well-known/openid-configuration)"
+                },
+                "clientId": {
+                  "type": "string",
+                  "description": "OIDC client ID"
+                },
+                "clientSecret": {
+                  "type": "string",
+                  "description": "OIDC client secret"
+                },
+                "scopes": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  },
+                  "default": [
+                    "openid",
+                    "profile",
+                    "email"
+                  ],
+                  "description": "OIDC scopes"
+                },
+                "attributeMapping": {
+                  "type": "object",
+                  "additionalProperties": {
+                    "type": "string"
+                  },
+                  "description": "Map IdP claims to User fields"
+                },
+                "displayName": {
+                  "type": "string",
+                  "description": "Display name for the provider button"
+                },
+                "icon": {
+                  "type": "string",
+                  "description": "Icon URL or identifier"
+                }
+              },
+              "required": [
+                "issuer",
+                "clientId",
+                "clientSecret"
+              ],
+              "additionalProperties": false,
+              "description": "OpenID Connect configuration"
+            },
+            "saml": {
+              "type": "object",
+              "properties": {
+                "enabled": {
+                  "type": "boolean",
+                  "default": false
+                },
+                "entryPoint": {
+                  "type": "string",
+                  "format": "uri",
+                  "description": "IdP SSO URL"
+                },
+                "cert": {
+                  "type": "string",
+                  "description": "IdP Public Certificate (PEM format)"
+                },
+                "issuer": {
+                  "type": "string",
+                  "description": "Entity ID of the IdP"
+                },
+                "signatureAlgorithm": {
+                  "type": "string",
+                  "enum": [
+                    "sha256",
+                    "sha512"
+                  ],
+                  "default": "sha256",
+                  "description": "Signature algorithm"
+                },
+                "attributeMapping": {
+                  "type": "object",
+                  "additionalProperties": {
+                    "type": "string"
+                  },
+                  "description": "Map SAML attributes to User fields"
+                },
+                "displayName": {
+                  "type": "string",
+                  "description": "Display name for the provider button"
+                },
+                "icon": {
+                  "type": "string",
+                  "description": "Icon URL or identifier"
+                }
+              },
+              "required": [
+                "entryPoint",
+                "cert",
+                "issuer"
+              ],
+              "additionalProperties": false,
+              "description": "SAML 2.0 configuration"
+            },
+            "ldap": {
+              "type": "object",
+              "properties": {
+                "enabled": {
+                  "type": "boolean",
+                  "default": false
+                },
+                "url": {
+                  "type": "string",
+                  "format": "uri",
+                  "description": "LDAP Server URL (ldap:// or ldaps://)"
+                },
+                "bindDn": {
+                  "type": "string",
+                  "description": "Bind DN for LDAP authentication"
+                },
+                "bindCredentials": {
+                  "type": "string",
+                  "description": "Bind credentials"
+                },
+                "searchBase": {
+                  "type": "string",
+                  "description": "Search base DN"
+                },
+                "searchFilter": {
+                  "type": "string",
+                  "description": "Search filter"
+                },
+                "groupSearchBase": {
+                  "type": "string",
+                  "description": "Group search base DN"
+                },
+                "displayName": {
+                  "type": "string",
+                  "description": "Display name for the provider button"
+                },
+                "icon": {
+                  "type": "string",
+                  "description": "Icon URL or identifier"
+                }
+              },
+              "required": [
+                "url",
+                "bindDn",
+                "bindCredentials",
+                "searchBase",
+                "searchFilter"
+              ],
+              "additionalProperties": false,
+              "description": "LDAP/Active Directory configuration"
+            }
+          },
+          "additionalProperties": false
+        },
         "userFieldMapping": {
           "type": "object",
           "properties": {
@@ -455,6 +648,48 @@
           ],
           "additionalProperties": false
         },
+        "mapping": {
+          "type": "object",
+          "properties": {
+            "user": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "string"
+              },
+              "description": "User field mapping (e.g., { \"emailVerified\": \"email_verified\" })"
+            },
+            "session": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "string"
+              },
+              "default": {
+                "sessionToken": "token",
+                "expires": "expiresAt"
+              },
+              "description": "Session field mapping"
+            },
+            "account": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "string"
+              },
+              "default": {
+                "providerAccountId": "accountId",
+                "provider": "providerId"
+              },
+              "description": "Account field mapping"
+            },
+            "verificationToken": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "string"
+              },
+              "description": "VerificationToken field mapping"
+            }
+          },
+          "additionalProperties": false
+        },
         "plugins": {
           "type": "array",
           "items": {

package/json-schema/system/CronSchedule.json

@@ -0,0 +1,29 @@
+{
+  "$ref": "#/definitions/CronSchedule",
+  "definitions": {
+    "CronSchedule": {
+      "type": "object",
+      "properties": {
+        "type": {
+          "type": "string",
+          "const": "cron"
+        },
+        "expression": {
+          "type": "string",
+          "description": "Cron expression (e.g., \"0 0 * * *\" for daily at midnight)"
+        },
+        "timezone": {
+          "type": "string",
+          "default": "UTC",
+          "description": "Timezone for cron execution (e.g., \"America/New_York\")"
+        }
+      },
+      "required": [
+        "type",
+        "expression"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/json-schema/system/DatabaseLevelIsolationStrategy.json

@@ -0,0 +1,139 @@
+{
+  "$ref": "#/definitions/DatabaseLevelIsolationStrategy",
+  "definitions": {
+    "DatabaseLevelIsolationStrategy": {
+      "type": "object",
+      "properties": {
+        "strategy": {
+          "type": "string",
+          "const": "isolated_db",
+          "description": "Database-level isolation strategy"
+        },
+        "database": {
+          "type": "object",
+          "properties": {
+            "namingPattern": {
+              "type": "string",
+              "default": "tenant_{tenant_id}",
+              "description": "Database naming pattern"
+            },
+            "serverStrategy": {
+              "type": "string",
+              "enum": [
+                "shared",
+                "sharded",
+                "dedicated"
+              ],
+              "default": "shared",
+              "description": "Server assignment strategy"
+            },
+            "separateCredentials": {
+              "type": "boolean",
+              "default": true,
+              "description": "Separate credentials per tenant"
+            },
+            "autoCreateDatabase": {
+              "type": "boolean",
+              "default": true,
+              "description": "Auto-create database"
+            }
+          },
+          "additionalProperties": false,
+          "description": "Database configuration"
+        },
+        "connectionPool": {
+          "type": "object",
+          "properties": {
+            "poolSize": {
+              "type": "integer",
+              "exclusiveMinimum": 0,
+              "default": 10,
+              "description": "Connection pool size"
+            },
+            "maxActivePools": {
+              "type": "integer",
+              "exclusiveMinimum": 0,
+              "default": 100,
+              "description": "Max active pools"
+            },
+            "idleTimeout": {
+              "type": "integer",
+              "exclusiveMinimum": 0,
+              "default": 300,
+              "description": "Idle pool timeout"
+            },
+            "usePooler": {
+              "type": "boolean",
+              "default": true,
+              "description": "Use connection pooler"
+            }
+          },
+          "additionalProperties": false,
+          "description": "Connection pool configuration"
+        },
+        "backup": {
+          "type": "object",
+          "properties": {
+            "strategy": {
+              "type": "string",
+              "enum": [
+                "individual",
+                "consolidated",
+                "on_demand"
+              ],
+              "default": "individual",
+              "description": "Backup strategy"
+            },
+            "frequencyHours": {
+              "type": "integer",
+              "exclusiveMinimum": 0,
+              "default": 24,
+              "description": "Backup frequency"
+            },
+            "retentionDays": {
+              "type": "integer",
+              "exclusiveMinimum": 0,
+              "default": 30,
+              "description": "Backup retention days"
+            }
+          },
+          "additionalProperties": false,
+          "description": "Backup configuration"
+        },
+        "encryption": {
+          "type": "object",
+          "properties": {
+            "perTenantKeys": {
+              "type": "boolean",
+              "default": false,
+              "description": "Per-tenant encryption keys"
+            },
+            "algorithm": {
+              "type": "string",
+              "default": "AES-256-GCM",
+              "description": "Encryption algorithm"
+            },
+            "keyManagement": {
+              "type": "string",
+              "enum": [
+                "aws_kms",
+                "azure_key_vault",
+                "gcp_kms",
+                "hashicorp_vault",
+                "custom"
+              ],
+              "description": "Key management service"
+            }
+          },
+          "additionalProperties": false,
+          "description": "Encryption configuration"
+        }
+      },
+      "required": [
+        "strategy"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/json-schema/system/DatabaseMapping.json

@@ -0,0 +1,48 @@
+{
+  "$ref": "#/definitions/DatabaseMapping",
+  "definitions": {
+    "DatabaseMapping": {
+      "type": "object",
+      "properties": {
+        "user": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "User field mapping (e.g., { \"emailVerified\": \"email_verified\" })"
+        },
+        "session": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "default": {
+            "sessionToken": "token",
+            "expires": "expiresAt"
+          },
+          "description": "Session field mapping"
+        },
+        "account": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "default": {
+            "providerAccountId": "accountId",
+            "provider": "providerId"
+          },
+          "description": "Account field mapping"
+        },
+        "verificationToken": {
+          "type": "object",
+          "additionalProperties": {
+            "type": "string"
+          },
+          "description": "VerificationToken field mapping"
+        }
+      },
+      "additionalProperties": false
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/json-schema/system/EnterpriseAuthConfig.json

@@ -0,0 +1,172 @@
+{
+  "$ref": "#/definitions/EnterpriseAuthConfig",
+  "definitions": {
+    "EnterpriseAuthConfig": {
+      "type": "object",
+      "properties": {
+        "oidc": {
+          "type": "object",
+          "properties": {
+            "enabled": {
+              "type": "boolean",
+              "default": false
+            },
+            "issuer": {
+              "type": "string",
+              "format": "uri",
+              "description": "OIDC Issuer URL (.well-known/openid-configuration)"
+            },
+            "clientId": {
+              "type": "string",
+              "description": "OIDC client ID"
+            },
+            "clientSecret": {
+              "type": "string",
+              "description": "OIDC client secret"
+            },
+            "scopes": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "default": [
+                "openid",
+                "profile",
+                "email"
+              ],
+              "description": "OIDC scopes"
+            },
+            "attributeMapping": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "string"
+              },
+              "description": "Map IdP claims to User fields"
+            },
+            "displayName": {
+              "type": "string",
+              "description": "Display name for the provider button"
+            },
+            "icon": {
+              "type": "string",
+              "description": "Icon URL or identifier"
+            }
+          },
+          "required": [
+            "issuer",
+            "clientId",
+            "clientSecret"
+          ],
+          "additionalProperties": false,
+          "description": "OpenID Connect configuration"
+        },
+        "saml": {
+          "type": "object",
+          "properties": {
+            "enabled": {
+              "type": "boolean",
+              "default": false
+            },
+            "entryPoint": {
+              "type": "string",
+              "format": "uri",
+              "description": "IdP SSO URL"
+            },
+            "cert": {
+              "type": "string",
+              "description": "IdP Public Certificate (PEM format)"
+            },
+            "issuer": {
+              "type": "string",
+              "description": "Entity ID of the IdP"
+            },
+            "signatureAlgorithm": {
+              "type": "string",
+              "enum": [
+                "sha256",
+                "sha512"
+              ],
+              "default": "sha256",
+              "description": "Signature algorithm"
+            },
+            "attributeMapping": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "string"
+              },
+              "description": "Map SAML attributes to User fields"
+            },
+            "displayName": {
+              "type": "string",
+              "description": "Display name for the provider button"
+            },
+            "icon": {
+              "type": "string",
+              "description": "Icon URL or identifier"
+            }
+          },
+          "required": [
+            "entryPoint",
+            "cert",
+            "issuer"
+          ],
+          "additionalProperties": false,
+          "description": "SAML 2.0 configuration"
+        },
+        "ldap": {
+          "type": "object",
+          "properties": {
+            "enabled": {
+              "type": "boolean",
+              "default": false
+            },
+            "url": {
+              "type": "string",
+              "format": "uri",
+              "description": "LDAP Server URL (ldap:// or ldaps://)"
+            },
+            "bindDn": {
+              "type": "string",
+              "description": "Bind DN for LDAP authentication"
+            },
+            "bindCredentials": {
+              "type": "string",
+              "description": "Bind credentials"
+            },
+            "searchBase": {
+              "type": "string",
+              "description": "Search base DN"
+            },
+            "searchFilter": {
+              "type": "string",
+              "description": "Search filter"
+            },
+            "groupSearchBase": {
+              "type": "string",
+              "description": "Group search base DN"
+            },
+            "displayName": {
+              "type": "string",
+              "description": "Display name for the provider button"
+            },
+            "icon": {
+              "type": "string",
+              "description": "Icon URL or identifier"
+            }
+          },
+          "required": [
+            "url",
+            "bindDn",
+            "bindCredentials",
+            "searchBase",
+            "searchFilter"
+          ],
+          "additionalProperties": false,
+          "description": "LDAP/Active Directory configuration"
+        }
+      },
+      "additionalProperties": false
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/json-schema/system/Event.json

@@ -0,0 +1,52 @@
+{
+  "$ref": "#/definitions/Event",
+  "definitions": {
+    "Event": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "pattern": "^[a-z_][a-z0-9_.]*$",
+          "description": "Event name (snake_case with dots, e.g., user.created)"
+        },
+        "payload": {
+          "description": "Event payload schema"
+        },
+        "metadata": {
+          "type": "object",
+          "properties": {
+            "source": {
+              "type": "string",
+              "description": "Event source (e.g., plugin name, system component)"
+            },
+            "timestamp": {
+              "type": "string",
+              "format": "date-time",
+              "description": "ISO 8601 datetime when event was created"
+            },
+            "userId": {
+              "type": "string",
+              "description": "User who triggered the event"
+            },
+            "tenantId": {
+              "type": "string",
+              "description": "Tenant identifier for multi-tenant systems"
+            }
+          },
+          "required": [
+            "source",
+            "timestamp"
+          ],
+          "additionalProperties": false,
+          "description": "Event metadata"
+        }
+      },
+      "required": [
+        "name",
+        "metadata"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}