@objectstack/spec 0.3.3 → 0.4.1

package/json-schema/permission/PermissionSet.json

@@ -6,7 +6,9 @@
       "properties": {
         "name": {
           "type": "string",
-          "description": "Permission set unique name"
+          "minLength": 2,
+          "pattern": "^[a-z][a-z0-9_]*$",
+          "description": "Permission set unique name (lowercase snake_case)"
         },
         "label": {
           "type": "string",

package/json-schema/permission/RLSConfig.json

@@ -0,0 +1,59 @@
+{
+  "$ref": "#/definitions/RLSConfig",
+  "definitions": {
+    "RLSConfig": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "default": true,
+          "description": "Enable RLS enforcement globally"
+        },
+        "defaultPolicy": {
+          "type": "string",
+          "enum": [
+            "deny",
+            "allow"
+          ],
+          "default": "deny",
+          "description": "Default action when no policies match"
+        },
+        "allowSuperuserBypass": {
+          "type": "boolean",
+          "default": true,
+          "description": "Allow superusers to bypass RLS"
+        },
+        "bypassRoles": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Roles that bypass RLS (see all data)"
+        },
+        "logEvaluations": {
+          "type": "boolean",
+          "default": false,
+          "description": "Log RLS policy evaluations for debugging"
+        },
+        "cacheResults": {
+          "type": "boolean",
+          "default": true,
+          "description": "Cache RLS evaluation results"
+        },
+        "cacheTtlSeconds": {
+          "type": "integer",
+          "exclusiveMinimum": 0,
+          "default": 300,
+          "description": "Cache TTL in seconds"
+        },
+        "prefetchUserContext": {
+          "type": "boolean",
+          "default": true,
+          "description": "Pre-fetch user context for performance"
+        }
+      },
+      "additionalProperties": false
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/json-schema/permission/RLSEvaluationResult.json

@@ -0,0 +1,40 @@
+{
+  "$ref": "#/definitions/RLSEvaluationResult",
+  "definitions": {
+    "RLSEvaluationResult": {
+      "type": "object",
+      "properties": {
+        "policyName": {
+          "type": "string",
+          "description": "Policy name"
+        },
+        "granted": {
+          "type": "boolean",
+          "description": "Whether access was granted"
+        },
+        "durationMs": {
+          "type": "number",
+          "description": "Evaluation duration in milliseconds"
+        },
+        "error": {
+          "type": "string",
+          "description": "Error message if evaluation failed"
+        },
+        "usingResult": {
+          "type": "boolean",
+          "description": "USING clause evaluation result"
+        },
+        "checkResult": {
+          "type": "boolean",
+          "description": "CHECK clause evaluation result"
+        }
+      },
+      "required": [
+        "policyName",
+        "granted"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/json-schema/permission/RLSOperation.json

@@ -0,0 +1,16 @@
+{
+  "$ref": "#/definitions/RLSOperation",
+  "definitions": {
+    "RLSOperation": {
+      "type": "string",
+      "enum": [
+        "select",
+        "insert",
+        "update",
+        "delete",
+        "all"
+      ]
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/json-schema/permission/RLSUserContext.json

@@ -0,0 +1,51 @@
+{
+  "$ref": "#/definitions/RLSUserContext",
+  "definitions": {
+    "RLSUserContext": {
+      "type": "object",
+      "properties": {
+        "id": {
+          "type": "string",
+          "description": "User ID"
+        },
+        "email": {
+          "type": "string",
+          "format": "email",
+          "description": "User email"
+        },
+        "tenantId": {
+          "type": "string",
+          "description": "Tenant/Organization ID"
+        },
+        "role": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            }
+          ],
+          "description": "User role(s)"
+        },
+        "department": {
+          "type": "string",
+          "description": "User department"
+        },
+        "attributes": {
+          "type": "object",
+          "additionalProperties": {},
+          "description": "Additional custom user attributes"
+        }
+      },
+      "required": [
+        "id"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/json-schema/permission/RowLevelSecurityPolicy.json

@@ -0,0 +1,77 @@
+{
+  "$ref": "#/definitions/RowLevelSecurityPolicy",
+  "definitions": {
+    "RowLevelSecurityPolicy": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "pattern": "^[a-z_][a-z0-9_]*$",
+          "description": "Policy unique identifier (snake_case)"
+        },
+        "label": {
+          "type": "string",
+          "description": "Human-readable policy label"
+        },
+        "description": {
+          "type": "string",
+          "description": "Policy description and business justification"
+        },
+        "object": {
+          "type": "string",
+          "description": "Target object name"
+        },
+        "operation": {
+          "type": "string",
+          "enum": [
+            "select",
+            "insert",
+            "update",
+            "delete",
+            "all"
+          ],
+          "description": "Database operation this policy applies to"
+        },
+        "using": {
+          "type": "string",
+          "description": "Filter condition for SELECT/UPDATE/DELETE (PostgreSQL SQL WHERE clause syntax with parameterized context variables). Optional for INSERT-only policies."
+        },
+        "check": {
+          "type": "string",
+          "description": "Validation condition for INSERT/UPDATE (defaults to USING clause if not specified - enforced at application level)"
+        },
+        "roles": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Roles this policy applies to (omit for all roles)"
+        },
+        "enabled": {
+          "type": "boolean",
+          "default": true,
+          "description": "Whether this policy is active"
+        },
+        "priority": {
+          "type": "integer",
+          "default": 0,
+          "description": "Policy evaluation priority (higher = evaluated first)"
+        },
+        "tags": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          },
+          "description": "Policy categorization tags"
+        }
+      },
+      "required": [
+        "name",
+        "object",
+        "operation"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/json-schema/permission/Territory.json

@@ -6,7 +6,9 @@
       "properties": {
         "name": {
           "type": "string",
-          "pattern": "^[a-z_][a-z0-9_]*$"
+          "minLength": 2,
+          "pattern": "^[a-z][a-z0-9_]*$",
+          "description": "Territory unique name (lowercase snake_case)"
         },
         "label": {
           "type": "string",

package/json-schema/shared/EventName.json

@@ -0,0 +1,12 @@
+{
+  "$ref": "#/definitions/EventName",
+  "definitions": {
+    "EventName": {
+      "type": "string",
+      "minLength": 3,
+      "pattern": "^[a-z][a-z0-9_.]*$",
+      "description": "Event name (lowercase with dot notation for namespacing)"
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/json-schema/shared/SnakeCaseIdentifier.json

@@ -0,0 +1,12 @@
+{
+  "$ref": "#/definitions/SnakeCaseIdentifier",
+  "definitions": {
+    "SnakeCaseIdentifier": {
+      "type": "string",
+      "minLength": 2,
+      "pattern": "^[a-z][a-z0-9_]*$",
+      "description": "Snake case identifier (lowercase with underscores only)"
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/json-schema/shared/SystemIdentifier.json

@@ -0,0 +1,12 @@
+{
+  "$ref": "#/definitions/SystemIdentifier",
+  "definitions": {
+    "SystemIdentifier": {
+      "type": "string",
+      "minLength": 2,
+      "pattern": "^[a-z][a-z0-9_.]*$",
+      "description": "System identifier (lowercase with underscores or dots)"
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/json-schema/system/Event.json

@@ -6,8 +6,9 @@
       "properties": {
         "name": {
           "type": "string",
-          "pattern": "^[a-z_][a-z0-9_.]*$",
-          "description": "Event name (snake_case with dots, e.g., user.created)"
+          "minLength": 3,
+          "pattern": "^[a-z][a-z0-9_.]*$",
+          "description": "Event name (lowercase with dots, e.g., user.created, order.paid)"
         },
         "payload": {
           "description": "Event payload schema"

package/json-schema/system/FeatureFlag.json

@@ -0,0 +1,87 @@
+{
+  "$ref": "#/definitions/FeatureFlag",
+  "definitions": {
+    "FeatureFlag": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "minLength": 2,
+          "pattern": "^[a-z][a-z0-9_]*$",
+          "description": "Feature key (snake_case)"
+        },
+        "label": {
+          "type": "string",
+          "description": "Display label"
+        },
+        "description": {
+          "type": "string"
+        },
+        "enabled": {
+          "type": "boolean",
+          "default": false,
+          "description": "Is globally enabled"
+        },
+        "strategy": {
+          "type": "string",
+          "enum": [
+            "boolean",
+            "percentage",
+            "user_list",
+            "group",
+            "custom"
+          ],
+          "default": "boolean"
+        },
+        "conditions": {
+          "type": "object",
+          "properties": {
+            "percentage": {
+              "type": "number",
+              "minimum": 0,
+              "maximum": 100
+            },
+            "users": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "groups": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "expression": {
+              "type": "string",
+              "description": "Custom formula expression"
+            }
+          },
+          "additionalProperties": false
+        },
+        "environment": {
+          "type": "string",
+          "enum": [
+            "dev",
+            "staging",
+            "prod",
+            "all"
+          ],
+          "default": "all",
+          "description": "Environment validity"
+        },
+        "expiresAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "Feature flag expiration date"
+        }
+      },
+      "required": [
+        "name"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}

package/json-schema/system/FeatureStrategy.json

@@ -0,0 +1,16 @@
+{
+  "$ref": "#/definitions/FeatureStrategy",
+  "definitions": {
+    "FeatureStrategy": {
+      "type": "string",
+      "enum": [
+        "boolean",
+        "percentage",
+        "user_list",
+        "group",
+        "custom"
+      ]
+    }
+  },
+  "$schema": "http://json-schema.org/draft-07/schema#"
+}