@opengeni/contracts 0.40.0 → 0.50.0

package/dist/chunk-YRKRZ6OF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/editable-artifact-causal-frontier.ts"],"sourcesContent":["import {\n  ArtifactBinaryReader,\n  ArtifactBinaryWriter,\n  equalBytes,\n  fnv1a64,\n  positiveSafeInteger,\n  strictUtf8,\n} from \"./editable-artifact-binary\";\n\nexport const EDITABLE_ARTIFACT_CAUSAL_FRONTIER_VERSION = 1 as const;\n/** Exact effective Rust OGACF001 bound (`MAX_INTENT_CAUSAL_ACTORS`). */\nexport const EDITABLE_ARTIFACT_CAUSAL_FRONTIER_MAX_REPLICAS = 1_024;\nexport const EDITABLE_ARTIFACT_CAUSAL_FRONTIER_MAX_BYTES =\n  8 + 2 + 2 + 4 + EDITABLE_ARTIFACT_CAUSAL_FRONTIER_MAX_REPLICAS * 16 + 8;\n\nconst MAGIC = strictUtf8(\"OGACF001\", \"causal frontier magic\");\nconst REPLICA_ID = /^[0-9a-f]{16}$/u;\nconst HEADER_BYTES = 16;\nconst CHECKSUM_BYTES = 8;\n\nexport type EditableArtifactCausalFrontierEntry = Readonly<{\n  replicaId: string;\n  counter: number;\n}>;\n\nexport type EditableArtifactCausalFrontier = readonly EditableArtifactCausalFrontierEntry[];\n\nexport function encodeEditableArtifactCausalFrontier(\n  frontier: EditableArtifactCausalFrontier,\n): Uint8Array {\n  const entries = normalizeFrontier(frontier);\n  const writer = new ArtifactBinaryWriter(EDITABLE_ARTIFACT_CAUSAL_FRONTIER_MAX_BYTES);\n  writer.bytes(MAGIC);\n  writer.u16(EDITABLE_ARTIFACT_CAUSAL_FRONTIER_VERSION);\n  writer.u16(0);\n  writer.u32(entries.length);\n  for (const entry of entries) {\n    writer.u64(BigInt(`0x${entry.replicaId}`));\n    writer.u64(entry.counter);\n  }\n  writer.u64(fnv1a64(writer.view()));\n  return writer.finish();\n}\n\nexport function decodeEditableArtifactCausalFrontier(\n  bytes: Uint8Array,\n): EditableArtifactCausalFrontier {\n  if (!(bytes instanceof Uint8Array))\n    throw new TypeError(\"causal frontier bytes must be a Uint8Array\");\n  if (bytes.byteLength > EDITABLE_ARTIFACT_CAUSAL_FRONTIER_MAX_BYTES) {\n    throw new RangeError(\"causal frontier exceeds its byte limit\");\n  }\n  if (bytes.byteLength < HEADER_BYTES + CHECKSUM_BYTES) {\n    throw new TypeError(\"truncated causal frontier\");\n  }\n  const reader = new ArtifactBinaryReader(bytes);\n  if (!equalBytes(reader.bytes(8), MAGIC)) throw new TypeError(\"invalid causal frontier magic\");\n  const version = reader.u16();\n  if (version !== EDITABLE_ARTIFACT_CAUSAL_FRONTIER_VERSION) {\n    throw new TypeError(`unsupported causal frontier version: ${version}`);\n  }\n  if (reader.u16() !== 0) throw new TypeError(\"reserved causal frontier flags must be zero\");\n  const count = reader.u32();\n  if (count > EDITABLE_ARTIFACT_CAUSAL_FRONTIER_MAX_REPLICAS) {\n    throw new RangeError(\"causal frontier exceeds its replica limit\");\n  }\n  const expected = HEADER_BYTES + count * 16 + CHECKSUM_BYTES;\n  if (bytes.byteLength < expected) throw new TypeError(\"truncated causal frontier\");\n  if (bytes.byteLength > expected) throw new TypeError(\"causal frontier contains trailing bytes\");\n  if (fnv1a64(bytes.subarray(0, -CHECKSUM_BYTES)) !== readU64At(bytes, expected - CHECKSUM_BYTES)) {\n    throw new TypeError(\"causal frontier checksum does not match\");\n  }\n  const entries: EditableArtifactCausalFrontierEntry[] = [];\n  let previous = 0n;\n  for (let index = 0; index < count; index += 1) {\n    const replica = reader.u64BigInt();\n    const counter = reader.u64Safe(\"causal frontier counter\");\n    if (replica === 0n || replica <= previous || counter === 0) {\n      throw new TypeError(\"causal frontier entries must be nonzero and strictly ordered\");\n    }\n    previous = replica;\n    entries.push(\n      Object.freeze({\n        replicaId: replica.toString(16).padStart(16, \"0\"),\n        counter,\n      }),\n    );\n  }\n  reader.u64BigInt();\n  reader.done();\n  return Object.freeze(entries);\n}\n\nexport function assertCanonicalEditableArtifactCausalFrontierBytes(bytes: Uint8Array): void {\n  const decoded = decodeEditableArtifactCausalFrontier(bytes);\n  if (!equalBytes(bytes, encodeEditableArtifactCausalFrontier(decoded))) {\n    throw new TypeError(\"causal frontier is not canonically encoded\");\n  }\n}\n\nfunction normalizeFrontier(\n  frontier: EditableArtifactCausalFrontier,\n): EditableArtifactCausalFrontier {\n  if (!Array.isArray(frontier)) throw new TypeError(\"causal frontier must be an array\");\n  if (frontier.length > EDITABLE_ARTIFACT_CAUSAL_FRONTIER_MAX_REPLICAS) {\n    throw new RangeError(\"causal frontier exceeds its replica limit\");\n  }\n  let previous = \"\";\n  const entries: EditableArtifactCausalFrontierEntry[] = [];\n  for (const entry of frontier) {\n    if (\n      typeof entry !== \"object\" ||\n      entry === null ||\n      Array.isArray(entry) ||\n      (Object.getPrototypeOf(entry) !== Object.prototype && Object.getPrototypeOf(entry) !== null)\n    ) {\n      throw new TypeError(\"causal frontier entries must be records\");\n    }\n    const keys = Reflect.ownKeys(entry);\n    if (\n      keys.length !== 2 ||\n      keys.some((key) => typeof key !== \"string\") ||\n      !(keys as string[]).includes(\"counter\") ||\n      !(keys as string[]).includes(\"replicaId\")\n    ) {\n      throw new TypeError(\"causal frontier entry fields must be exactly counter and replicaId\");\n    }\n    for (const key of keys as string[]) {\n      const descriptor = Object.getOwnPropertyDescriptor(entry, key);\n      if (!descriptor || !(\"value\" in descriptor) || !descriptor.enumerable) {\n        throw new TypeError(\"causal frontier entries must contain enumerable data properties\");\n      }\n    }\n    if (!REPLICA_ID.test(entry.replicaId) || entry.replicaId === \"0000000000000000\") {\n      throw new TypeError(\"causal frontier replicaId must be canonical nonzero lowercase hex\");\n    }\n    if (entry.replicaId <= previous) {\n      throw new TypeError(\"causal frontier replica ids must be unique and strictly ordered\");\n    }\n    previous = entry.replicaId;\n    entries.push(\n      Object.freeze({\n        replicaId: entry.replicaId,\n        counter: positiveSafeInteger(entry.counter, \"causal frontier counter\"),\n      }),\n    );\n  }\n  return Object.freeze(entries);\n}\n\nfunction readU64At(bytes: Uint8Array, offset: number): bigint {\n  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);\n  return view.getBigUint64(offset, true);\n}\n"],"mappings":";;;;;;;;;;AASO,IAAM,4CAA4C;AAElD,IAAM,iDAAiD;AACvD,IAAM,8CACX,IAAI,IAAI,IAAI,IAAI,iDAAiD,KAAK;AAExE,IAAM,QAAQ,WAAW,YAAY,uBAAuB;AAC5D,IAAM,aAAa;AACnB,IAAM,eAAe;AACrB,IAAM,iBAAiB;AAShB,SAAS,qCACd,UACY;AACZ,QAAM,UAAU,kBAAkB,QAAQ;AAC1C,QAAM,SAAS,IAAI,qBAAqB,2CAA2C;AACnF,SAAO,MAAM,KAAK;AAClB,SAAO,IAAI,yCAAyC;AACpD,SAAO,IAAI,CAAC;AACZ,SAAO,IAAI,QAAQ,MAAM;AACzB,aAAW,SAAS,SAAS;AAC3B,WAAO,IAAI,OAAO,KAAK,MAAM,SAAS,EAAE,CAAC;AACzC,WAAO,IAAI,MAAM,OAAO;AAAA,EAC1B;AACA,SAAO,IAAI,QAAQ,OAAO,KAAK,CAAC,CAAC;AACjC,SAAO,OAAO,OAAO;AACvB;AAEO,SAAS,qCACd,OACgC;AAChC,MAAI,EAAE,iBAAiB;AACrB,UAAM,IAAI,UAAU,4CAA4C;AAClE,MAAI,MAAM,aAAa,6CAA6C;AAClE,UAAM,IAAI,WAAW,wCAAwC;AAAA,EAC/D;AACA,MAAI,MAAM,aAAa,eAAe,gBAAgB;AACpD,UAAM,IAAI,UAAU,2BAA2B;AAAA,EACjD;AACA,QAAM,SAAS,IAAI,qBAAqB,KAAK;AAC7C,MAAI,CAAC,WAAW,OAAO,MAAM,CAAC,GAAG,KAAK,EAAG,OAAM,IAAI,UAAU,+BAA+B;AAC5F,QAAM,UAAU,OAAO,IAAI;AAC3B,MAAI,YAAY,2CAA2C;AACzD,UAAM,IAAI,UAAU,wCAAwC,OAAO,EAAE;AAAA,EACvE;AACA,MAAI,OAAO,IAAI,MAAM,EAAG,OAAM,IAAI,UAAU,6CAA6C;AACzF,QAAM,QAAQ,OAAO,IAAI;AACzB,MAAI,QAAQ,gDAAgD;AAC1D,UAAM,IAAI,WAAW,2CAA2C;AAAA,EAClE;AACA,QAAM,WAAW,eAAe,QAAQ,KAAK;AAC7C,MAAI,MAAM,aAAa,SAAU,OAAM,IAAI,UAAU,2BAA2B;AAChF,MAAI,MAAM,aAAa,SAAU,OAAM,IAAI,UAAU,yCAAyC;AAC9F,MAAI,QAAQ,MAAM,SAAS,GAAG,CAAC,cAAc,CAAC,MAAM,UAAU,OAAO,WAAW,cAAc,GAAG;AAC/F,UAAM,IAAI,UAAU,yCAAyC;AAAA,EAC/D;AACA,QAAM,UAAiD,CAAC;AACxD,MAAI,WAAW;AACf,WAAS,QAAQ,GAAG,QAAQ,OAAO,SAAS,GAAG;AAC7C,UAAM,UAAU,OAAO,UAAU;AACjC,UAAM,UAAU,OAAO,QAAQ,yBAAyB;AACxD,QAAI,YAAY,MAAM,WAAW,YAAY,YAAY,GAAG;AAC1D,YAAM,IAAI,UAAU,8DAA8D;AAAA,IACpF;AACA,eAAW;AACX,YAAQ;AAAA,MACN,OAAO,OAAO;AAAA,QACZ,WAAW,QAAQ,SAAS,EAAE,EAAE,SAAS,IAAI,GAAG;AAAA,QAChD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO,UAAU;AACjB,SAAO,KAAK;AACZ,SAAO,OAAO,OAAO,OAAO;AAC9B;AAEO,SAAS,mDAAmD,OAAyB;AAC1F,QAAM,UAAU,qCAAqC,KAAK;AAC1D,MAAI,CAAC,WAAW,OAAO,qCAAqC,OAAO,CAAC,GAAG;AACrE,UAAM,IAAI,UAAU,4CAA4C;AAAA,EAClE;AACF;AAEA,SAAS,kBACP,UACgC;AAChC,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,OAAM,IAAI,UAAU,kCAAkC;AACpF,MAAI,SAAS,SAAS,gDAAgD;AACpE,UAAM,IAAI,WAAW,2CAA2C;AAAA,EAClE;AACA,MAAI,WAAW;AACf,QAAM,UAAiD,CAAC;AACxD,aAAW,SAAS,UAAU;AAC5B,QACE,OAAO,UAAU,YACjB,UAAU,QACV,MAAM,QAAQ,KAAK,KAClB,OAAO,eAAe,KAAK,MAAM,OAAO,aAAa,OAAO,eAAe,KAAK,MAAM,MACvF;AACA,YAAM,IAAI,UAAU,yCAAyC;AAAA,IAC/D;AACA,UAAM,OAAO,QAAQ,QAAQ,KAAK;AAClC,QACE,KAAK,WAAW,KAChB,KAAK,KAAK,CAAC,QAAQ,OAAO,QAAQ,QAAQ,KAC1C,CAAE,KAAkB,SAAS,SAAS,KACtC,CAAE,KAAkB,SAAS,WAAW,GACxC;AACA,YAAM,IAAI,UAAU,oEAAoE;AAAA,IAC1F;AACA,eAAW,OAAO,MAAkB;AAClC,YAAM,aAAa,OAAO,yBAAyB,OAAO,GAAG;AAC7D,UAAI,CAAC,cAAc,EAAE,WAAW,eAAe,CAAC,WAAW,YAAY;AACrE,cAAM,IAAI,UAAU,iEAAiE;AAAA,MACvF;AAAA,IACF;AACA,QAAI,CAAC,WAAW,KAAK,MAAM,SAAS,KAAK,MAAM,cAAc,oBAAoB;AAC/E,YAAM,IAAI,UAAU,mEAAmE;AAAA,IACzF;AACA,QAAI,MAAM,aAAa,UAAU;AAC/B,YAAM,IAAI,UAAU,iEAAiE;AAAA,IACvF;AACA,eAAW,MAAM;AACjB,YAAQ;AAAA,MACN,OAAO,OAAO;AAAA,QACZ,WAAW,MAAM;AAAA,QACjB,SAAS,oBAAoB,MAAM,SAAS,yBAAyB;AAAA,MACvE,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO,OAAO,OAAO,OAAO;AAC9B;AAEA,SAAS,UAAU,OAAmB,QAAwB;AAC5D,QAAM,OAAO,IAAI,SAAS,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU;AAC1E,SAAO,KAAK,aAAa,QAAQ,IAAI;AACvC;","names":[]}

package/dist/codex-provider-account-authority.d.ts

@@ -0,0 +1,23 @@
+import { z } from "zod";
+/**
+ * Opaque authority frozen at a Codex provider-account acceptance boundary.
+ *
+ * The snapshot deliberately carries no organization, membership, credential,
+ * provider-account, subject, label, quota, token, or plan identity. A later
+ * activation slice may use the user generation only together with separately
+ * authorized durable state; this value is never sufficient authority alone.
+ */
+export declare const CodexProviderAccountAuthoritySnapshotV1: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    scope: z.ZodLiteral<"workspace">;
+}, z.core.$strict>, z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    scope: z.ZodLiteral<"user">;
+    authorityGeneration: z.ZodNumber;
+}, z.core.$strict>], "scope">;
+export type CodexProviderAccountAuthoritySnapshotV1 = z.infer<typeof CodexProviderAccountAuthoritySnapshotV1>;
+/** Explicit compatibility value for all pre-foundation accepted work. */
+export declare const LEGACY_WORKSPACE_CODEX_PROVIDER_ACCOUNT_AUTHORITY_SNAPSHOT_V1: {
+    readonly version: 1;
+    readonly scope: "workspace";
+};

package/dist/codex-provider-account-authority.js

@@ -0,0 +1,23 @@
+// src/codex-provider-account-authority.ts
+import { z } from "zod";
+var PositiveSafeInteger = z.number().int().positive().max(Number.MAX_SAFE_INTEGER);
+var CodexProviderAccountAuthoritySnapshotV1 = z.discriminatedUnion("scope", [
+  z.object({
+    version: z.literal(1),
+    scope: z.literal("workspace")
+  }).strict(),
+  z.object({
+    version: z.literal(1),
+    scope: z.literal("user"),
+    authorityGeneration: PositiveSafeInteger
+  }).strict()
+]);
+var LEGACY_WORKSPACE_CODEX_PROVIDER_ACCOUNT_AUTHORITY_SNAPSHOT_V1 = {
+  version: 1,
+  scope: "workspace"
+};
+export {
+  CodexProviderAccountAuthoritySnapshotV1,
+  LEGACY_WORKSPACE_CODEX_PROVIDER_ACCOUNT_AUTHORITY_SNAPSHOT_V1
+};
+//# sourceMappingURL=codex-provider-account-authority.js.map

package/dist/codex-provider-account-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/codex-provider-account-authority.ts"],"sourcesContent":["import { z } from \"zod\";\n\nconst PositiveSafeInteger = z.number().int().positive().max(Number.MAX_SAFE_INTEGER);\n\n/**\n * Opaque authority frozen at a Codex provider-account acceptance boundary.\n *\n * The snapshot deliberately carries no organization, membership, credential,\n * provider-account, subject, label, quota, token, or plan identity. A later\n * activation slice may use the user generation only together with separately\n * authorized durable state; this value is never sufficient authority alone.\n */\nexport const CodexProviderAccountAuthoritySnapshotV1 = z.discriminatedUnion(\"scope\", [\n  z\n    .object({\n      version: z.literal(1),\n      scope: z.literal(\"workspace\"),\n    })\n    .strict(),\n  z\n    .object({\n      version: z.literal(1),\n      scope: z.literal(\"user\"),\n      authorityGeneration: PositiveSafeInteger,\n    })\n    .strict(),\n]);\n\nexport type CodexProviderAccountAuthoritySnapshotV1 = z.infer<\n  typeof CodexProviderAccountAuthoritySnapshotV1\n>;\n\n/** Explicit compatibility value for all pre-foundation accepted work. */\nexport const LEGACY_WORKSPACE_CODEX_PROVIDER_ACCOUNT_AUTHORITY_SNAPSHOT_V1 = {\n  version: 1,\n  scope: \"workspace\",\n} as const satisfies CodexProviderAccountAuthoritySnapshotV1;\n"],"mappings":";AAAA,SAAS,SAAS;AAElB,IAAM,sBAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,OAAO,gBAAgB;AAU5E,IAAM,0CAA0C,EAAE,mBAAmB,SAAS;AAAA,EACnF,EACG,OAAO;AAAA,IACN,SAAS,EAAE,QAAQ,CAAC;AAAA,IACpB,OAAO,EAAE,QAAQ,WAAW;AAAA,EAC9B,CAAC,EACA,OAAO;AAAA,EACV,EACG,OAAO;AAAA,IACN,SAAS,EAAE,QAAQ,CAAC;AAAA,IACpB,OAAO,EAAE,QAAQ,MAAM;AAAA,IACvB,qBAAqB;AAAA,EACvB,CAAC,EACA,OAAO;AACZ,CAAC;AAOM,IAAM,gEAAgE;AAAA,EAC3E,SAAS;AAAA,EACT,OAAO;AACT;","names":[]}