@objectstack/spec 2.0.5 → 2.0.7

package/json-schema/system/RPO.json

@@ -0,0 +1,27 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "value": {
+      "type": "number",
+      "minimum": 0,
+      "description": "RPO value"
+    },
+    "unit": {
+      "default": "minutes",
+      "description": "RPO time unit",
+      "type": "string",
+      "enum": [
+        "seconds",
+        "minutes",
+        "hours"
+      ]
+    }
+  },
+  "required": [
+    "value",
+    "unit"
+  ],
+  "additionalProperties": false,
+  "description": "Recovery Point Objective (maximum acceptable data loss)"
+}

package/json-schema/system/RTO.json

@@ -0,0 +1,27 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "value": {
+      "type": "number",
+      "minimum": 0,
+      "description": "RTO value"
+    },
+    "unit": {
+      "default": "minutes",
+      "description": "RTO time unit",
+      "type": "string",
+      "enum": [
+        "seconds",
+        "minutes",
+        "hours"
+      ]
+    }
+  },
+  "required": [
+    "value",
+    "unit"
+  ],
+  "additionalProperties": false,
+  "description": "Recovery Time Objective (maximum acceptable downtime)"
+}

package/json-schema/system/SecurityContextConfig.json

@@ -0,0 +1,288 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "enabled": {
+      "default": true,
+      "description": "Enable unified security context governance",
+      "type": "boolean"
+    },
+    "complianceAuditRequirements": {
+      "description": "Compliance-driven audit event requirements",
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "framework": {
+            "type": "string",
+            "enum": [
+              "gdpr",
+              "hipaa",
+              "sox",
+              "pci_dss",
+              "ccpa",
+              "iso27001"
+            ],
+            "description": "Compliance framework identifier"
+          },
+          "requiredEvents": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Audit event types required by this framework (e.g., \"data.delete\", \"auth.login\")"
+          },
+          "retentionDays": {
+            "type": "number",
+            "minimum": 1,
+            "description": "Minimum audit log retention period required by this framework (in days)"
+          },
+          "alertOnMissing": {
+            "default": true,
+            "description": "Raise alert if a required audit event is not being captured",
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "framework",
+          "requiredEvents",
+          "retentionDays",
+          "alertOnMissing"
+        ],
+        "additionalProperties": false,
+        "description": "Compliance framework audit event requirements"
+      }
+    },
+    "complianceEncryptionRequirements": {
+      "description": "Compliance-driven encryption requirements by data classification",
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "framework": {
+            "type": "string",
+            "enum": [
+              "gdpr",
+              "hipaa",
+              "sox",
+              "pci_dss",
+              "ccpa",
+              "iso27001"
+            ],
+            "description": "Compliance framework identifier"
+          },
+          "dataClassifications": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "enum": [
+                "pii",
+                "phi",
+                "pci",
+                "financial",
+                "confidential",
+                "internal",
+                "public"
+              ]
+            },
+            "description": "Data classifications that must be encrypted under this framework"
+          },
+          "minimumAlgorithm": {
+            "default": "aes-256-gcm",
+            "description": "Minimum encryption algorithm strength required",
+            "type": "string",
+            "enum": [
+              "aes-256-gcm",
+              "aes-256-cbc",
+              "chacha20-poly1305"
+            ]
+          },
+          "keyRotationMaxDays": {
+            "default": 90,
+            "description": "Maximum key rotation interval required (in days)",
+            "type": "number",
+            "minimum": 1
+          }
+        },
+        "required": [
+          "framework",
+          "dataClassifications",
+          "minimumAlgorithm",
+          "keyRotationMaxDays"
+        ],
+        "additionalProperties": false,
+        "description": "Compliance framework encryption requirements"
+      }
+    },
+    "maskingVisibility": {
+      "description": "Masking visibility rules per data classification",
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "dataClassification": {
+            "type": "string",
+            "enum": [
+              "pii",
+              "phi",
+              "pci",
+              "financial",
+              "confidential",
+              "internal",
+              "public"
+            ],
+            "description": "Data classification this rule applies to"
+          },
+          "defaultMasked": {
+            "default": true,
+            "description": "Whether data is masked by default",
+            "type": "boolean"
+          },
+          "unmaskRoles": {
+            "description": "Roles allowed to view unmasked data",
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "auditUnmask": {
+            "default": true,
+            "description": "Log an audit event when data is unmasked",
+            "type": "boolean"
+          },
+          "requireApproval": {
+            "default": false,
+            "description": "Require explicit approval before unmasking",
+            "type": "boolean"
+          },
+          "approvalRoles": {
+            "description": "Roles that can approve unmasking requests",
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        },
+        "required": [
+          "dataClassification",
+          "defaultMasked",
+          "auditUnmask",
+          "requireApproval"
+        ],
+        "additionalProperties": false,
+        "description": "Masking visibility and audit rule per data classification"
+      }
+    },
+    "dataClassifications": {
+      "description": "Data classification policies for unified security enforcement",
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "classification": {
+            "type": "string",
+            "enum": [
+              "pii",
+              "phi",
+              "pci",
+              "financial",
+              "confidential",
+              "internal",
+              "public"
+            ],
+            "description": "Data classification level"
+          },
+          "requireEncryption": {
+            "default": false,
+            "description": "Encryption required for this classification",
+            "type": "boolean"
+          },
+          "requireMasking": {
+            "default": false,
+            "description": "Masking required for this classification",
+            "type": "boolean"
+          },
+          "requireAudit": {
+            "default": false,
+            "description": "Audit trail required for access to this classification",
+            "type": "boolean"
+          },
+          "retentionDays": {
+            "description": "Data retention limit in days (for compliance)",
+            "type": "number"
+          }
+        },
+        "required": [
+          "classification",
+          "requireEncryption",
+          "requireMasking",
+          "requireAudit"
+        ],
+        "additionalProperties": false,
+        "description": "Security policy for a specific data classification level"
+      }
+    },
+    "eventCorrelation": {
+      "description": "Cross-subsystem security event correlation settings",
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "default": true,
+          "description": "Enable cross-subsystem security event correlation",
+          "type": "boolean"
+        },
+        "correlationId": {
+          "default": true,
+          "description": "Inject a shared correlation ID into audit, encryption, and masking events",
+          "type": "boolean"
+        },
+        "linkAuthToAudit": {
+          "default": true,
+          "description": "Link authentication events to subsequent data operation audit trails",
+          "type": "boolean"
+        },
+        "linkEncryptionToAudit": {
+          "default": true,
+          "description": "Log encryption/decryption operations in the audit trail",
+          "type": "boolean"
+        },
+        "linkMaskingToAudit": {
+          "default": true,
+          "description": "Log masking/unmasking operations in the audit trail",
+          "type": "boolean"
+        }
+      },
+      "required": [
+        "enabled",
+        "correlationId",
+        "linkAuthToAudit",
+        "linkEncryptionToAudit",
+        "linkMaskingToAudit"
+      ],
+      "additionalProperties": false
+    },
+    "enforceOnWrite": {
+      "default": true,
+      "description": "Enforce encryption and masking requirements on data write operations",
+      "type": "boolean"
+    },
+    "enforceOnRead": {
+      "default": true,
+      "description": "Enforce masking and audit requirements on data read operations",
+      "type": "boolean"
+    },
+    "failOpen": {
+      "default": false,
+      "description": "When false (default), deny access if security context cannot be evaluated",
+      "type": "boolean"
+    }
+  },
+  "required": [
+    "enabled",
+    "enforceOnWrite",
+    "enforceOnRead",
+    "failOpen"
+  ],
+  "additionalProperties": false,
+  "description": "Unified security context governance configuration"
+}

package/json-schema/system/SecurityEventCorrelation.json

@@ -0,0 +1,40 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "properties": {
+    "enabled": {
+      "default": true,
+      "description": "Enable cross-subsystem security event correlation",
+      "type": "boolean"
+    },
+    "correlationId": {
+      "default": true,
+      "description": "Inject a shared correlation ID into audit, encryption, and masking events",
+      "type": "boolean"
+    },
+    "linkAuthToAudit": {
+      "default": true,
+      "description": "Link authentication events to subsequent data operation audit trails",
+      "type": "boolean"
+    },
+    "linkEncryptionToAudit": {
+      "default": true,
+      "description": "Log encryption/decryption operations in the audit trail",
+      "type": "boolean"
+    },
+    "linkMaskingToAudit": {
+      "default": true,
+      "description": "Log masking/unmasking operations in the audit trail",
+      "type": "boolean"
+    }
+  },
+  "required": [
+    "enabled",
+    "correlationId",
+    "linkAuthToAudit",
+    "linkEncryptionToAudit",
+    "linkMaskingToAudit"
+  ],
+  "additionalProperties": false,
+  "description": "Cross-subsystem security event correlation configuration"
+}

package/json-schema/ui/Action.json

@@ -9,7 +9,36 @@
       "description": "Machine name (lowercase snake_case)"
     },
     "label": {
-      "type": "string",
+      "anyOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "object",
+          "properties": {
+            "key": {
+              "type": "string",
+              "description": "Translation key (e.g., \"views.task_list.label\")"
+            },
+            "defaultValue": {
+              "description": "Fallback value when translation key is not found",
+              "type": "string"
+            },
+            "params": {
+              "description": "Interpolation parameters (e.g., { count: 5 })",
+              "type": "object",
+              "propertyNames": {
+                "type": "string"
+              },
+              "additionalProperties": {}
+            }
+          },
+          "required": [
+            "key"
+          ],
+          "additionalProperties": false
+        }
+      ],
       "description": "Display label"
     },
     "icon": {
@@ -74,7 +103,37 @@
             "type": "string"
           },
           "label": {
-            "type": "string"
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "key": {
+                    "type": "string",
+                    "description": "Translation key (e.g., \"views.task_list.label\")"
+                  },
+                  "defaultValue": {
+                    "description": "Fallback value when translation key is not found",
+                    "type": "string"
+                  },
+                  "params": {
+                    "description": "Interpolation parameters (e.g., { count: 5 })",
+                    "type": "object",
+                    "propertyNames": {
+                      "type": "string"
+                    },
+                    "additionalProperties": {}
+                  }
+                },
+                "required": [
+                  "key"
+                ],
+                "additionalProperties": false
+              }
+            ],
+            "description": "Display label: plain string or i18n translation object"
           },
           "type": {
             "type": "string",
@@ -135,7 +194,37 @@
               "type": "object",
               "properties": {
                 "label": {
-                  "type": "string"
+                  "anyOf": [
+                    {
+                      "type": "string"
+                    },
+                    {
+                      "type": "object",
+                      "properties": {
+                        "key": {
+                          "type": "string",
+                          "description": "Translation key (e.g., \"views.task_list.label\")"
+                        },
+                        "defaultValue": {
+                          "description": "Fallback value when translation key is not found",
+                          "type": "string"
+                        },
+                        "params": {
+                          "description": "Interpolation parameters (e.g., { count: 5 })",
+                          "type": "object",
+                          "propertyNames": {
+                            "type": "string"
+                          },
+                          "additionalProperties": {}
+                        }
+                      },
+                      "required": [
+                        "key"
+                      ],
+                      "additionalProperties": false
+                    }
+                  ],
+                  "description": "Display label: plain string or i18n translation object"
                 },
                 "value": {
                   "type": "string"
@@ -160,11 +249,69 @@
     },
     "confirmText": {
       "description": "Confirmation message before execution",
-      "type": "string"
+      "anyOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "object",
+          "properties": {
+            "key": {
+              "type": "string",
+              "description": "Translation key (e.g., \"views.task_list.label\")"
+            },
+            "defaultValue": {
+              "description": "Fallback value when translation key is not found",
+              "type": "string"
+            },
+            "params": {
+              "description": "Interpolation parameters (e.g., { count: 5 })",
+              "type": "object",
+              "propertyNames": {
+                "type": "string"
+              },
+              "additionalProperties": {}
+            }
+          },
+          "required": [
+            "key"
+          ],
+          "additionalProperties": false
+        }
+      ]
     },
     "successMessage": {
       "description": "Success message to show after execution",
-      "type": "string"
+      "anyOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "object",
+          "properties": {
+            "key": {
+              "type": "string",
+              "description": "Translation key (e.g., \"views.task_list.label\")"
+            },
+            "defaultValue": {
+              "description": "Fallback value when translation key is not found",
+              "type": "string"
+            },
+            "params": {
+              "description": "Interpolation parameters (e.g., { count: 5 })",
+              "type": "object",
+              "propertyNames": {
+                "type": "string"
+              },
+              "additionalProperties": {}
+            }
+          },
+          "required": [
+            "key"
+          ],
+          "additionalProperties": false
+        }
+      ]
     },
     "refreshAfter": {
       "default": false,
@@ -197,6 +344,54 @@
     "timeout": {
       "description": "Maximum execution time in milliseconds for the action",
       "type": "number"
+    },
+    "aria": {
+      "description": "ARIA accessibility attributes",
+      "type": "object",
+      "properties": {
+        "ariaLabel": {
+          "description": "Accessible label for screen readers (WAI-ARIA aria-label)",
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "object",
+              "properties": {
+                "key": {
+                  "type": "string",
+                  "description": "Translation key (e.g., \"views.task_list.label\")"
+                },
+                "defaultValue": {
+                  "description": "Fallback value when translation key is not found",
+                  "type": "string"
+                },
+                "params": {
+                  "description": "Interpolation parameters (e.g., { count: 5 })",
+                  "type": "object",
+                  "propertyNames": {
+                    "type": "string"
+                  },
+                  "additionalProperties": {}
+                }
+              },
+              "required": [
+                "key"
+              ],
+              "additionalProperties": false
+            }
+          ]
+        },
+        "ariaDescribedBy": {
+          "description": "ID of element providing additional description (WAI-ARIA aria-describedby)",
+          "type": "string"
+        },
+        "role": {
+          "description": "WAI-ARIA role attribute (e.g., \"dialog\", \"navigation\", \"alert\")",
+          "type": "string"
+        }
+      },
+      "additionalProperties": false
     }
   },
   "required": [