@openauditmodel/cli 0.1.0

package/dist/conformance/src/profiles/resolve-pointer.js

@@ -0,0 +1,123 @@
+/**
+ * RFC 6901 JSON Pointer resolution.
+ *
+ * Resolution reads own enumerable properties only. It never walks a prototype,
+ * never invokes an accessor and never evaluates anything: a profile definition
+ * is data, and a pointer taken from one must not be able to reach `__proto__`,
+ * `constructor` or any inherited member of the event being checked.
+ */
+/** Deepest pointer accepted, so that a hostile pointer cannot drive unbounded work. */
+export const MAX_POINTER_DEPTH = 32;
+const NOT_FOUND = { found: false, value: undefined };
+/** Decodes one reference token: `~1` to `/`, then `~0` to `~`, in that order. */
+export function decodeReferenceToken(token) {
+    return token.replaceAll("~1", "/").replaceAll("~0", "~");
+}
+/** Splits a pointer into its decoded reference tokens, or `undefined` if malformed. */
+export function pointerTokens(pointer) {
+    if (pointer === "") {
+        return [];
+    }
+    if (!pointer.startsWith("/")) {
+        return undefined;
+    }
+    const tokens = pointer.slice(1).split("/");
+    if (tokens.length > MAX_POINTER_DEPTH) {
+        return undefined;
+    }
+    return tokens.map(decodeReferenceToken);
+}
+/** Joins a base pointer and a relative pointer, as `/metadata` + `/role/id`. */
+export function concatPointer(base, relative) {
+    return `${base}${relative}`;
+}
+function isIndex(token) {
+    return token === "0" || /^[1-9][0-9]{0,9}$/.test(token);
+}
+/**
+ * Resolves a JSON Pointer against a parsed JSON value.
+ *
+ * Returns `found: false` for a malformed pointer, a member that does not exist,
+ * an out-of-range array index, or any attempt to traverse a non-container.
+ */
+export function resolvePointer(root, pointer) {
+    const tokens = pointerTokens(pointer);
+    if (tokens === undefined) {
+        return NOT_FOUND;
+    }
+    let current = root;
+    for (const token of tokens) {
+        if (current === null || typeof current !== "object") {
+            return NOT_FOUND;
+        }
+        if (Array.isArray(current)) {
+            if (!isIndex(token)) {
+                return NOT_FOUND;
+            }
+            const index = Number(token);
+            if (index >= current.length) {
+                return NOT_FOUND;
+            }
+            current = current[index];
+            continue;
+        }
+        // `Object.hasOwn` keeps inherited and prototype members unreachable.
+        if (!Object.hasOwn(current, token)) {
+            return NOT_FOUND;
+        }
+        current = current[token];
+    }
+    return { found: true, value: current };
+}
+/**
+ * Whether a resolved value counts as **present** for a profile requirement.
+ *
+ * Present means: the member exists, is not null, and is not an empty string,
+ * array or object. `false` and `0` are present — they are answers, not absences,
+ * and a profile that could not require `mfa: false` to be recorded would be
+ * unable to distinguish "not recorded" from "recorded as false".
+ *
+ * This differs deliberately from the privacy linter's notion of a populated
+ * value, which excludes booleans because a credential cannot be `true`.
+ */
+export function isPresent(resolution) {
+    if (!resolution.found) {
+        return false;
+    }
+    const { value } = resolution;
+    if (value === null || value === undefined) {
+        return false;
+    }
+    if (typeof value === "string") {
+        return value.length > 0;
+    }
+    if (Array.isArray(value)) {
+        return value.length > 0;
+    }
+    if (typeof value === "object") {
+        return Object.keys(value).length > 0;
+    }
+    return true;
+}
+/** JSON type of a value, using the profile metadata type vocabulary. */
+export function jsonTypeOf(value) {
+    if (value === null) {
+        return "null";
+    }
+    if (Array.isArray(value)) {
+        return "array";
+    }
+    if (Number.isInteger(value)) {
+        return "integer";
+    }
+    return typeof value;
+}
+/** Whether a value matches a declared metadata type. `integer` is a subset of `number`. */
+export function matchesMetadataType(value, expected) {
+    const actual = jsonTypeOf(value);
+    if (expected === "number") {
+        return actual === "number" || actual === "integer";
+    }
+    return actual === expected;
+}
+//# sourceMappingURL=resolve-pointer.js.map

package/dist/conformance/src/profiles/resolve-pointer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-pointer.js","sourceRoot":"","sources":["../../../../conformance/src/profiles/resolve-pointer.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,uFAAuF;AACvF,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAQpC,MAAM,SAAS,GAAsB,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAExE,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAC1C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,QAAgB;IAC1D,OAAO,GAAG,IAAI,GAAG,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,KAAK,KAAK,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAa,EAAE,OAAe;IAC3D,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,GAAY,IAAI,CAAC;IAE5B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YACpD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC5B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QAED,qEAAqE;QACrE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,GAAI,OAAmC,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CAAC,UAA6B;IACrD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,KAAK,CAAC;AACtB,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,QAAgB;IAClE,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,KAAK,QAAQ,CAAC;AAC7B,CAAC"}

package/dist/conformance/src/profiles/select-rules.d.ts

@@ -0,0 +1,13 @@
+import type { ProfileDefinition, ProfileRule } from "./types.js";
+/** Reads `/event/name` from an event, or `undefined`. */
+export declare function eventName(event: unknown): string | undefined;
+/** Whether a rule's selector matches an event name. */
+export declare function ruleMatches(rule: ProfileRule, name: string): boolean;
+/**
+ * Selects the rules that apply to an event name, in definition order.
+ *
+ * Order is the order the rules appear in the profile document, which makes a
+ * report reproducible and reviewable against the definition. A rule matched by
+ * both an exact name and a prefix is selected once.
+ */
+export declare function selectRules(profile: ProfileDefinition, name: string): ProfileRule[];

package/dist/conformance/src/profiles/select-rules.js

@@ -0,0 +1,42 @@
+/**
+ * Rule selection.
+ *
+ * Selection is by exact event name or by dotted prefix, and by nothing else.
+ * There is no regular expression selector: a profile is a published contract
+ * about which events it governs, and a pattern language turns "does this rule
+ * apply to my event?" into a question only a tool can answer.
+ */
+import { resolvePointer } from "./resolve-pointer.js";
+/** Reads `/event/name` from an event, or `undefined`. */
+export function eventName(event) {
+    const resolved = resolvePointer(event, "/event/name");
+    return typeof resolved.value === "string" ? resolved.value : undefined;
+}
+/** Whether a rule's selector matches an event name. */
+export function ruleMatches(rule, name) {
+    if (rule.events?.includes(name) === true) {
+        return true;
+    }
+    // Prefixes end with a dot, so `identity.role.` cannot match `identity.roles-export`.
+    return rule.eventPrefixes?.some((prefix) => name.startsWith(prefix)) === true;
+}
+/**
+ * Selects the rules that apply to an event name, in definition order.
+ *
+ * Order is the order the rules appear in the profile document, which makes a
+ * report reproducible and reviewable against the definition. A rule matched by
+ * both an exact name and a prefix is selected once.
+ */
+export function selectRules(profile, name) {
+    const selected = [];
+    const seen = new Set();
+    for (const rule of profile.rules) {
+        if (!ruleMatches(rule, name) || seen.has(rule.id)) {
+            continue;
+        }
+        seen.add(rule.id);
+        selected.push(rule);
+    }
+    return selected;
+}
+//# sourceMappingURL=select-rules.js.map

package/dist/conformance/src/profiles/select-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"select-rules.js","sourceRoot":"","sources":["../../../../conformance/src/profiles/select-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAGtD,yDAAyD;AACzD,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACtD,OAAO,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACzE,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,WAAW,CAAC,IAAiB,EAAE,IAAY;IACzD,IAAI,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,qFAAqF;IACrF,OAAO,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC;AAChF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,OAA0B,EAAE,IAAY;IAClE,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAClD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/conformance/src/profiles/types.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Types for declarative profile conformance.
+ *
+ * A profile adds requirements to the core model for a specific domain. It can
+ * only ever add: the rule vocabulary can require a value to be present or equal
+ * to a scalar, and can do nothing else. There is no way to express "this core
+ * field is optional here", because there is no keyword that removes anything.
+ *
+ * Profile conformance is not legal or regulatory compliance, and a profile is
+ * not a regulatory mapping. See decisions/0008-declarative-profile-conformance.md.
+ */
+/** How a rule reports its violations. Unrelated to the privacy linter's severities. */
+export type RuleSeverity = "info" | "warning" | "error";
+/** A scalar a condition or required value compares against. */
+export type Scalar = string | number | boolean | null;
+export interface Condition {
+    readonly path: string;
+    readonly equals: Scalar;
+}
+export interface RequiredValue {
+    readonly path: string;
+    readonly equals: Scalar;
+}
+export type MetadataType = "string" | "number" | "integer" | "boolean" | "object" | "array";
+export interface RequiredMetadata {
+    /** JSON Pointer relative to `/metadata`. */
+    readonly path: string;
+    readonly type: MetadataType;
+}
+export interface ProfileRule {
+    readonly id: string;
+    readonly description: string;
+    readonly rationale?: string;
+    readonly severity?: RuleSeverity;
+    readonly events?: readonly string[];
+    readonly eventPrefixes?: readonly string[];
+    readonly when?: Condition;
+    readonly requiredPaths?: readonly string[];
+    readonly requiredMetadata?: readonly RequiredMetadata[];
+    readonly requiredValues?: readonly RequiredValue[];
+    readonly recommendedPaths?: readonly string[];
+}
+export interface ProfileDefinition {
+    readonly profileVersion: string;
+    readonly name: string;
+    readonly version: string;
+    readonly status: "experimental" | "stable" | "deprecated";
+    readonly coreVersions: readonly string[];
+    readonly title: string;
+    readonly description: string;
+    readonly rules: readonly ProfileRule[];
+}
+/**
+ * Outcome of checking one event.
+ *
+ * `not-applicable` exists so that the tool never claims a document-sharing event
+ * conforms to an identity profile. Silence is not conformance.
+ */
+export type ProfileStatus = "conforming" | "violations" | "not-applicable" | "core-invalid";
+/** A profile requirement that was not met. Never carries an event value. */
+export interface ProfileFinding {
+    readonly ruleId: string;
+    /** JSON Pointer to the location the requirement concerns. */
+    readonly path: string;
+    readonly message: string;
+    readonly severity: RuleSeverity;
+}
+export interface ProfileCheckResult {
+    readonly label: string;
+    readonly eventId?: string;
+    readonly status: ProfileStatus;
+    /** Whether the event validates against the canonical core schema. */
+    readonly coreValid: boolean;
+    /** Whether the event satisfies every applicable profile requirement. */
+    readonly profileValid: boolean;
+    readonly profile: {
+        readonly name: string;
+        readonly version: string;
+    };
+    readonly matchedRules: readonly string[];
+    readonly errors: readonly ProfileFinding[];
+    readonly warnings: readonly ProfileFinding[];
+    /** Rendered core schema issues, present only when core validation failed. */
+    readonly coreIssues: readonly string[];
+}
+export interface ProfileCheckSummary {
+    readonly events: number;
+    readonly conforming: number;
+    readonly violations: number;
+    readonly notApplicable: number;
+    readonly coreInvalid: number;
+    readonly errors: number;
+    readonly warnings: number;
+}
+export declare function summariseProfileResults(results: readonly ProfileCheckResult[]): ProfileCheckSummary;
+/**
+ * Whether a profile applies to an event declaring a given core specification
+ * version. Lives here rather than beside profile loading so that the
+ * conformance engine has no filesystem dependency at runtime.
+ */
+export declare function supportsCoreVersion(profile: ProfileDefinition, specVersion: unknown): boolean;

package/dist/conformance/src/profiles/types.js

@@ -0,0 +1,31 @@
+/**
+ * Types for declarative profile conformance.
+ *
+ * A profile adds requirements to the core model for a specific domain. It can
+ * only ever add: the rule vocabulary can require a value to be present or equal
+ * to a scalar, and can do nothing else. There is no way to express "this core
+ * field is optional here", because there is no keyword that removes anything.
+ *
+ * Profile conformance is not legal or regulatory compliance, and a profile is
+ * not a regulatory mapping. See decisions/0008-declarative-profile-conformance.md.
+ */
+export function summariseProfileResults(results) {
+    return {
+        events: results.length,
+        conforming: results.filter((result) => result.status === "conforming").length,
+        violations: results.filter((result) => result.status === "violations").length,
+        notApplicable: results.filter((result) => result.status === "not-applicable").length,
+        coreInvalid: results.filter((result) => result.status === "core-invalid").length,
+        errors: results.reduce((total, result) => total + result.errors.length, 0),
+        warnings: results.reduce((total, result) => total + result.warnings.length, 0),
+    };
+}
+/**
+ * Whether a profile applies to an event declaring a given core specification
+ * version. Lives here rather than beside profile loading so that the
+ * conformance engine has no filesystem dependency at runtime.
+ */
+export function supportsCoreVersion(profile, specVersion) {
+    return typeof specVersion === "string" && profile.coreVersions.includes(specVersion);
+}
+//# sourceMappingURL=types.js.map

package/dist/conformance/src/profiles/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../conformance/src/profiles/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA8FH,MAAM,UAAU,uBAAuB,CACrC,OAAsC;IAEtC,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,MAAM;QAC7E,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,MAAM;QAC7E,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,MAAM;QACpF,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,MAAM;QAChF,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAA0B,EAAE,WAAoB;IAClF,OAAO,OAAO,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACvF,CAAC"}

package/dist/conformance/src/profiles/validate-profile-definition.d.ts

@@ -0,0 +1,12 @@
+import type { AnySchemaObject } from "ajv";
+import { type ValidationIssue } from "../format-errors.js";
+export declare const PROFILE_DEFINITION_SCHEMA_ID = "https://openauditmodel.org/schemas/profile-definition/0.1/schema.json";
+export declare const PROFILE_DEFINITION_SCHEMA_RELATIVE_PATH: string;
+/** Repository root, derived from the location of the canonical schema. */
+export declare function repositoryRoot(): string;
+/** Absolute path of the profile definition schema. */
+export declare function resolveProfileDefinitionSchemaPath(): string;
+/** Reads the profile definition schema document. */
+export declare function loadProfileDefinitionSchema(): AnySchemaObject;
+/** Validates a parsed profile definition. Returns the issues found. */
+export declare function validateProfileDefinition(definition: unknown): ValidationIssue[];

package/dist/conformance/src/profiles/validate-profile-definition.js

@@ -0,0 +1,47 @@
+/**
+ * Validation of profile definition documents.
+ *
+ * A profile definition is validated against its own JSON Schema, which is
+ * closed at every level: an unrecognised rule property, selector or operator is
+ * a rejection, not something ignored. A profile that silently ignored what it
+ * did not understand would let a typo turn a requirement into nothing.
+ *
+ * This schema is not part of the canonical audit event schema and never
+ * constrains an audit event.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import path from "node:path";
+import { createAjv, resolveSchemaPath } from "../validate.js";
+import { toIssues } from "../format-errors.js";
+export const PROFILE_DEFINITION_SCHEMA_ID = "https://openauditmodel.org/schemas/profile-definition/0.1/schema.json";
+export const PROFILE_DEFINITION_SCHEMA_RELATIVE_PATH = path.join("profiles", "profile-definition.schema.json");
+/** Repository root, derived from the location of the canonical schema. */
+export function repositoryRoot() {
+    const schemaPath = resolveSchemaPath();
+    return path.dirname(path.dirname(path.dirname(schemaPath)));
+}
+/** Absolute path of the profile definition schema. */
+export function resolveProfileDefinitionSchemaPath() {
+    const candidate = path.join(repositoryRoot(), PROFILE_DEFINITION_SCHEMA_RELATIVE_PATH);
+    if (!existsSync(candidate)) {
+        throw new Error(`Unable to locate ${PROFILE_DEFINITION_SCHEMA_RELATIVE_PATH}.`);
+    }
+    return candidate;
+}
+/** Reads the profile definition schema document. */
+export function loadProfileDefinitionSchema() {
+    return JSON.parse(readFileSync(resolveProfileDefinitionSchemaPath(), "utf8"));
+}
+let compiled;
+function definitionValidator() {
+    if (compiled === undefined) {
+        compiled = createAjv().compile(loadProfileDefinitionSchema());
+    }
+    return compiled;
+}
+/** Validates a parsed profile definition. Returns the issues found. */
+export function validateProfileDefinition(definition) {
+    const validate = definitionValidator();
+    return validate(definition) ? [] : toIssues(validate.errors);
+}
+//# sourceMappingURL=validate-profile-definition.js.map

package/dist/conformance/src/profiles/validate-profile-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-profile-definition.js","sourceRoot":"","sources":["../../../../conformance/src/profiles/validate-profile-definition.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAwB,MAAM,qBAAqB,CAAC;AAErE,MAAM,CAAC,MAAM,4BAA4B,GACvC,uEAAuE,CAAC;AAE1E,MAAM,CAAC,MAAM,uCAAuC,GAAG,IAAI,CAAC,IAAI,CAC9D,UAAU,EACV,gCAAgC,CACjC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,UAAU,cAAc;IAC5B,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;IACvC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,kCAAkC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,uCAAuC,CAAC,CAAC;IACvF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,oBAAoB,uCAAuC,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,2BAA2B;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,kCAAkC,EAAE,EAAE,MAAM,CAAC,CAAoB,CAAC;AACnG,CAAC;AAED,IAAI,QAAsC,CAAC;AAE3C,SAAS,mBAAmB;IAC1B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,QAAQ,GAAG,SAAS,EAAE,CAAC,OAAO,CAAC,2BAA2B,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,yBAAyB,CAAC,UAAmB;IAC3D,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IACvC,OAAO,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC/D,CAAC"}

package/dist/conformance/src/sources.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Largest document the tooling will read. An audit event is a small structured
+ * record; a file above this size is a mistake or an attempt to exhaust memory,
+ * and is refused rather than parsed.
+ */
+export declare const MAX_DOCUMENT_BYTES: number;
+/** One event, together with where it came from. */
+export interface EventDocument {
+    /** Path of the file the event was read from. */
+    readonly file: string;
+    /** Position of the event within that file. `undefined` for a single-event file. */
+    readonly index?: number;
+    /** Display label, `file` or `file#index`, used in reports. */
+    readonly label: string;
+    /** The parsed event. Not yet validated. */
+    readonly event: unknown;
+}
+/** A file that could not be read or parsed. */
+export interface DocumentLoadFailure {
+    readonly file: string;
+    readonly error: string;
+}
+export interface DocumentLoadResult {
+    readonly documents: readonly EventDocument[];
+    readonly failures: readonly DocumentLoadFailure[];
+}
+/** Successful read of a single JSON document. */
+export interface JsonReadSuccess {
+    readonly ok: true;
+    readonly value: unknown;
+}
+export interface JsonReadFailure {
+    readonly ok: false;
+    readonly error: string;
+}
+export type JsonReadResult = JsonReadSuccess | JsonReadFailure;
+/**
+ * Reads and parses one JSON file. The returned failure text never contains file
+ * content, only the parser's positional message.
+ */
+export declare function readJsonFile(file: string): JsonReadResult;
+/**
+ * Expands input paths into the list of files to read. Directories are expanded
+ * one level deep and sorted, so that reports are stable across platforms.
+ */
+export declare function expandInputPaths(inputs: readonly string[]): string[];
+/**
+ * Reads every event contained in one file. A file may hold a single event
+ * object, an array of events, or one event per line for `.jsonl` and `.ndjson`.
+ */
+export declare function readEventDocuments(file: string): DocumentLoadResult;
+/** Expands input paths and reads every event they contain. */
+export declare function loadEventDocuments(inputs: readonly string[]): DocumentLoadResult;

package/dist/conformance/src/sources.js

@@ -0,0 +1,153 @@
+/**
+ * Loading of audit event documents from the file system.
+ *
+ * Every command reads events through this module so that the size limit, the
+ * parse behaviour and the error wording are identical everywhere. Nothing here
+ * resolves remote references or follows anything contained in an event.
+ */
+import { readdirSync, readFileSync, statSync } from "node:fs";
+import path from "node:path";
+/**
+ * Largest document the tooling will read. An audit event is a small structured
+ * record; a file above this size is a mistake or an attempt to exhaust memory,
+ * and is refused rather than parsed.
+ */
+export const MAX_DOCUMENT_BYTES = 8 * 1024 * 1024;
+/** File extensions treated as JSON Lines rather than a single JSON document. */
+const JSON_LINES_EXTENSIONS = [".jsonl", ".ndjson"];
+/** File extensions collected when a directory is given. */
+const EVENT_EXTENSIONS = [".json", ...JSON_LINES_EXTENSIONS];
+function isJsonLines(file) {
+    const extension = path.extname(file).toLowerCase();
+    return JSON_LINES_EXTENSIONS.includes(extension);
+}
+function readTextFile(file) {
+    let size;
+    try {
+        size = statSync(file).size;
+    }
+    catch (cause) {
+        return { ok: false, error: `cannot read file: ${cause.message}` };
+    }
+    if (size > MAX_DOCUMENT_BYTES) {
+        return {
+            ok: false,
+            error: `file is ${size} bytes, above the ${MAX_DOCUMENT_BYTES} byte limit`,
+        };
+    }
+    try {
+        return { ok: true, value: readFileSync(file, "utf8") };
+    }
+    catch (cause) {
+        return { ok: false, error: `cannot read file: ${cause.message}` };
+    }
+}
+/**
+ * Reads and parses one JSON file. The returned failure text never contains file
+ * content, only the parser's positional message.
+ */
+export function readJsonFile(file) {
+    const text = readTextFile(file);
+    if (!text.ok) {
+        return text;
+    }
+    try {
+        return { ok: true, value: JSON.parse(text.value) };
+    }
+    catch (cause) {
+        return { ok: false, error: `cannot parse JSON: ${cause.message}` };
+    }
+}
+/**
+ * Expands input paths into the list of files to read. Directories are expanded
+ * one level deep and sorted, so that reports are stable across platforms.
+ */
+export function expandInputPaths(inputs) {
+    const files = [];
+    for (const input of inputs) {
+        const stats = statSync(input);
+        if (stats.isDirectory()) {
+            const entries = readdirSync(input)
+                .filter((entry) => EVENT_EXTENSIONS.includes(path.extname(entry).toLowerCase()))
+                .sort((left, right) => left.localeCompare(right, "en"));
+            for (const entry of entries) {
+                files.push(path.join(input, entry));
+            }
+        }
+        else {
+            files.push(input);
+        }
+    }
+    return files;
+}
+function documentsFromJsonLines(file, text) {
+    const documents = [];
+    const lines = text.split(/\r?\n/);
+    for (const [lineIndex, line] of lines.entries()) {
+        const trimmed = line.trim();
+        if (trimmed === "") {
+            continue;
+        }
+        try {
+            documents.push({
+                file,
+                index: lineIndex + 1,
+                label: `${file}#${lineIndex + 1}`,
+                event: JSON.parse(trimmed),
+            });
+        }
+        catch (cause) {
+            return {
+                documents: [],
+                failures: [
+                    {
+                        file,
+                        error: `cannot parse JSON on line ${lineIndex + 1}: ${cause.message}`,
+                    },
+                ],
+            };
+        }
+    }
+    return { documents, failures: [] };
+}
+/**
+ * Reads every event contained in one file. A file may hold a single event
+ * object, an array of events, or one event per line for `.jsonl` and `.ndjson`.
+ */
+export function readEventDocuments(file) {
+    if (isJsonLines(file)) {
+        const text = readTextFile(file);
+        if (!text.ok) {
+            return { documents: [], failures: [{ file, error: text.error }] };
+        }
+        return documentsFromJsonLines(file, text.value);
+    }
+    const parsed = readJsonFile(file);
+    if (!parsed.ok) {
+        return { documents: [], failures: [{ file, error: parsed.error }] };
+    }
+    if (Array.isArray(parsed.value)) {
+        return {
+            documents: parsed.value.map((event, index) => ({
+                file,
+                index,
+                label: `${file}#${index}`,
+                event,
+            })),
+            failures: [],
+        };
+    }
+    return { documents: [{ file, label: file, event: parsed.value }], failures: [] };
+}
+/** Expands input paths and reads every event they contain. */
+export function loadEventDocuments(inputs) {
+    const documents = [];
+    const failures = [];
+    for (const file of expandInputPaths(inputs)) {
+        const result = readEventDocuments(file);
+        documents.push(...result.documents);
+        failures.push(...result.failures);
+    }
+    return { documents, failures };
+}
+//# sourceMappingURL=sources.js.map

package/dist/conformance/src/sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sources.js","sourceRoot":"","sources":["../../../conformance/src/sources.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAElD,gFAAgF;AAChF,MAAM,qBAAqB,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AAEpD,2DAA2D;AAC3D,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,GAAG,qBAAqB,CAAC,CAAC;AAsC7D,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,OAAO,qBAAqB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAsB,KAAe,CAAC,OAAO,EAAE,EAAE,CAAC;IAC/E,CAAC;IAED,IAAI,IAAI,GAAG,kBAAkB,EAAE,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,WAAW,IAAI,qBAAqB,kBAAkB,aAAa;SAC3E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAsB,KAAe,CAAC,OAAO,EAAE,EAAE,CAAC;IAC/E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAe,CAAC,EAAE,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAuB,KAAe,CAAC,OAAO,EAAE,EAAE,CAAC;IAChF,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAyB;IACxD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC;iBAC/B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;iBAC/E,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;YAC1D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,IAAY;IACxD,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAElC,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI;gBACJ,KAAK,EAAE,SAAS,GAAG,CAAC;gBACpB,KAAK,EAAE,GAAG,IAAI,IAAI,SAAS,GAAG,CAAC,EAAE;gBACjC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,SAAS,EAAE,EAAE;gBACb,QAAQ,EAAE;oBACR;wBACE,IAAI;wBACJ,KAAK,EAAE,6BAA6B,SAAS,GAAG,CAAC,KAAM,KAAe,CAAC,OAAO,EAAE;qBACjF;iBACF;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;QACpE,CAAC;QACD,OAAO,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,KAAe,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;IACtE,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC7C,IAAI;gBACJ,KAAK;gBACL,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE;gBACzB,KAAK;aACN,CAAC,CAAC;YACH,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AACnF,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,kBAAkB,CAAC,MAAyB;IAC1D,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAE3C,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACxC,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC"}

package/dist/conformance/src/validate-core.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Schema validation with no filesystem dependency.
+ *
+ * This module is the boundary that lets the conformance engines run unchanged
+ * in environments that do not read the schema from disk — the MCP server in
+ * particular, where the schema is compiled in at build time.
+ *
+ * Everything here operates on a schema **object**. Locating and reading schema
+ * files lives in `validate.ts`, which imports this module.
+ */
+import { Ajv2020 } from "ajv/dist/2020.js";
+import type { AnySchemaObject } from "ajv";
+import { type ValidationIssue } from "./format-errors.js";
+import { createValidatorFromCompiled, SCHEMA_ID, SPEC_VERSION, type EventValidator } from "./validator-interface.js";
+export { createValidatorFromCompiled, SCHEMA_ID, SPEC_VERSION };
+export type { EventValidator };
+/** Creates an Ajv instance configured the way OpenAuditModel conformance requires. */
+export declare function createAjv(): Ajv2020;
+/** Validates a schema document itself against the Draft 2020-12 meta-schema. */
+export declare function validateSchemaDocument(schema: AnySchemaObject): ValidationIssue[];
+/**
+ * Compiles a schema object into a reusable validator.
+ *
+ * Used directly where the schema is already in memory. Environments that forbid
+ * dynamic code generation cannot call this — Ajv compiles with `new Function` —
+ * and supply a precompiled validation function instead; see
+ * {@link createValidatorFromCompiled}.
+ */
+export declare function createValidatorFromSchema(schema: AnySchemaObject): EventValidator;
+export type { ValidationIssue };