@payoutjp/core 0.1.0-alpha.1

package/dist/registry.js

@@ -0,0 +1,131 @@
+import { createHash } from "node:crypto";
+import { z } from "zod";
+import { PayoutJpIntegrityError } from "./errors.js";
+import { RegistryIdSchema } from "./identifier-schema.js";
+const NonEmptyStringSchema = z.string().min(1);
+const Sha256Schema = z.string().regex(/^[a-f0-9]{64}$/u, "Expected a lowercase SHA-256 digest");
+const IsoDateOrDateTimeSchema = z.union([z.iso.date(), z.iso.datetime({ offset: true })]);
+/** Runtime schema for provenance attached to a Registry snapshot. */
+export const SourceMetadataV1Schema = z.strictObject({
+    publisher: NonEmptyStringSchema,
+    uri: NonEmptyStringSchema,
+    retrievedAt: IsoDateOrDateTimeSchema,
+    effectiveAsOf: IsoDateOrDateTimeSchema.optional(),
+    license: NonEmptyStringSchema.optional(),
+    notes: z.array(NonEmptyStringSchema).optional(),
+});
+/** Creates a strict Registry envelope schema for one payload contract. */
+export function createRegistryEnvelopeV1Schema(payloadSchema) {
+    return z.strictObject({
+        schemaVersion: z.literal("1"),
+        id: RegistryIdSchema,
+        version: NonEmptyStringSchema,
+        kind: NonEmptyStringSchema,
+        sha256: Sha256Schema,
+        source: SourceMetadataV1Schema,
+        payload: payloadSchema,
+    });
+}
+/** Runtime schema for a Registry envelope whose payload contract is not yet selected. */
+export const RegistryEnvelopeV1Schema = createRegistryEnvelopeV1Schema(z.unknown());
+const RegistryEnvelopeDigestInputV1Schema = z.strictObject({
+    schemaVersion: z.literal("1"),
+    id: RegistryIdSchema,
+    version: NonEmptyStringSchema,
+    kind: NonEmptyStringSchema,
+    sha256: Sha256Schema.optional(),
+    source: SourceMetadataV1Schema,
+    payload: z.unknown(),
+});
+function canonicalizeJsonValue(value, ancestors) {
+    if (value === null || typeof value === "boolean" || typeof value === "string") {
+        return JSON.stringify(value);
+    }
+    if (typeof value === "number") {
+        if (!Number.isFinite(value)) {
+            throw new TypeError("Canonical JSON accepts only finite numbers");
+        }
+        return JSON.stringify(value);
+    }
+    if (typeof value !== "object") {
+        throw new TypeError("Canonical JSON accepts only JSON values");
+    }
+    if (ancestors.has(value)) {
+        throw new TypeError("Canonical JSON does not accept cyclic values");
+    }
+    ancestors.add(value);
+    try {
+        if (Array.isArray(value)) {
+            if (Object.getOwnPropertySymbols(value).length > 0 ||
+                Object.keys(value).length !== value.length) {
+                throw new TypeError("Canonical JSON accepts only dense arrays");
+            }
+            const entries = [];
+            for (let index = 0; index < value.length; index += 1) {
+                const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+                if (descriptor === undefined || !("value" in descriptor)) {
+                    throw new TypeError("Canonical JSON accepts only dense data arrays");
+                }
+                entries.push(canonicalizeJsonValue(descriptor.value, ancestors));
+            }
+            return `[${entries.join(",")}]`;
+        }
+        const prototype = Object.getPrototypeOf(value);
+        if (prototype !== Object.prototype && prototype !== null) {
+            throw new TypeError("Canonical JSON accepts only plain objects");
+        }
+        if (Object.getOwnPropertySymbols(value).length > 0) {
+            throw new TypeError("Canonical JSON accepts only string object keys");
+        }
+        const entries = Object.keys(value)
+            .sort()
+            .map((key) => {
+            const descriptor = Object.getOwnPropertyDescriptor(value, key);
+            if (descriptor === undefined || !("value" in descriptor)) {
+                throw new TypeError("Canonical JSON does not accept accessor properties");
+            }
+            return `${JSON.stringify(key)}:${canonicalizeJsonValue(descriptor.value, ancestors)}`;
+        });
+        return `{${entries.join(",")}}`;
+    }
+    finally {
+        ancestors.delete(value);
+    }
+}
+/** Serializes finite JSON data with recursively sorted object keys and preserved array order. */
+export function canonicalizeJson(value) {
+    return canonicalizeJsonValue(value, new Set());
+}
+/** Calculates the lowercase SHA-256 for a Registry envelope with its digest field omitted. */
+export function calculateRegistryEnvelopeSha256(input) {
+    const envelope = RegistryEnvelopeDigestInputV1Schema.parse(input);
+    const content = {
+        schemaVersion: envelope.schemaVersion,
+        id: envelope.id,
+        version: envelope.version,
+        kind: envelope.kind,
+        source: envelope.source,
+        payload: envelope.payload,
+    };
+    return createHash("sha256").update(canonicalizeJson(content), "utf8").digest("hex");
+}
+/** Loads a decoded local Registry and verifies its payload contract and content digest. */
+export function loadRegistryEnvelopeV1(input, payloadSchema = z.unknown()) {
+    const parsed = createRegistryEnvelopeV1Schema(payloadSchema).safeParse(input);
+    if (!parsed.success) {
+        throw new PayoutJpIntegrityError("PJP_REGISTRY_INVALID");
+    }
+    const envelope = parsed.data;
+    let actualDigest;
+    try {
+        actualDigest = calculateRegistryEnvelopeSha256(envelope);
+    }
+    catch {
+        throw new PayoutJpIntegrityError("PJP_REGISTRY_INVALID");
+    }
+    if (envelope.sha256 !== actualDigest) {
+        throw new PayoutJpIntegrityError("PJP_REGISTRY_DIGEST_MISMATCH");
+    }
+    return envelope;
+}
+//# sourceMappingURL=registry.js.map

package/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC/C,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,qCAAqC,CAAC,CAAC;AAChG,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAE1F,qEAAqE;AACrE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC;IACnD,SAAS,EAAE,oBAAoB;IAC/B,GAAG,EAAE,oBAAoB;IACzB,WAAW,EAAE,uBAAuB;IACpC,aAAa,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IACjD,OAAO,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAgBH,0EAA0E;AAC1E,MAAM,UAAU,8BAA8B,CAAW,aAAkC;IACzF,OAAO,CAAC,CAAC,YAAY,CAAC;QACpB,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;QAC7B,EAAE,EAAE,gBAAgB;QACpB,OAAO,EAAE,oBAAoB;QAC7B,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE,sBAAsB;QAC9B,OAAO,EAAE,aAAa;KACvB,CAAC,CAAC;AACL,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,MAAM,wBAAwB,GAAG,8BAA8B,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAEpF,MAAM,mCAAmC,GAAG,CAAC,CAAC,YAAY,CAAC;IACzD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC7B,EAAE,EAAE,gBAAgB;IACpB,OAAO,EAAE,oBAAoB;IAC7B,IAAI,EAAE,oBAAoB;IAC1B,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,sBAAsB;IAC9B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAEH,SAAS,qBAAqB,CAAC,KAAc,EAAE,SAAsB;IACnE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9E,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IACtE,CAAC;IACD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAErB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IACE,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;gBAC9C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAC1C,CAAC;gBACD,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;YAClE,CAAC;YAED,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzE,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;oBACzD,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;gBACvE,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAClC,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACzD,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;aAC/B,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACX,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/D,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,qBAAqB,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QACxF,CAAC,CAAC,CAAC;QAEL,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,qBAAqB,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,+BAA+B,CAAC,KAAc;IAC5D,MAAM,QAAQ,GAAG,mCAAmC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG;QACd,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC;IAEF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtF,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,sBAAsB,CACpC,KAAc,EACd,aAAa,GAAwB,CAAC,CAAC,OAAO,EAAyB;IAEvE,MAAM,MAAM,GAAG,8BAA8B,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,sBAAsB,CAAC,sBAAsB,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IAE7B,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,sBAAsB,CAAC,sBAAsB,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACrC,MAAM,IAAI,sBAAsB,CAAC,8BAA8B,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/report.d.ts

@@ -0,0 +1,209 @@
+import { z } from "zod";
+import { type FindingV1 } from "./finding.js";
+/** Canonical payout rails represented in a validation report. */
+export declare const railValues: readonly ["bank_transfer", "jpyc"];
+/** Payout destination rail represented in a validation report. */
+export type Rail = (typeof railValues)[number];
+/** Runtime schema for one validated item and its findings. */
+export declare const ValidationItemReportV1Schema: z.ZodObject<{
+    id: z.ZodPipe<z.ZodString, z.ZodTransform<import("./identifiers.js").ItemId, string>>;
+    index: z.ZodNumber;
+    rail: z.ZodEnum<{
+        bank_transfer: "bank_transfer";
+        jpyc: "jpyc";
+    }>;
+    status: z.ZodEnum<{
+        FAIL: "FAIL";
+        PASS: "PASS";
+        WARNING: "WARNING";
+    }>;
+    findings: z.ZodArray<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<"1">;
+        ruleId: z.ZodPipe<z.ZodString, z.ZodTransform<import("./identifiers.js").RuleId, string>>;
+        severity: z.ZodEnum<{
+            error: "error";
+            info: "info";
+            warning: "warning";
+        }>;
+        messageKey: z.ZodString;
+        message: z.ZodString;
+        path: z.ZodString;
+        location: z.ZodOptional<z.ZodObject<{
+            file: z.ZodOptional<z.ZodString>;
+            line: z.ZodOptional<z.ZodNumber>;
+            column: z.ZodOptional<z.ZodNumber>;
+            itemIndex: z.ZodOptional<z.ZodNumber>;
+            jsonPointer: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        actual: z.ZodOptional<z.ZodObject<{
+            classification: z.ZodEnum<{
+                "masked-bank-account": "masked-bank-account";
+                "metadata-only": "metadata-only";
+                public: "public";
+                "redacted-account-holder": "redacted-account-holder";
+                "short-wallet-address": "short-wallet-address";
+            }>;
+            display: z.ZodString;
+        }, z.core.$strict>>;
+        expected: z.ZodOptional<z.ZodString>;
+        remediation: z.ZodOptional<z.ZodObject<{
+            code: z.ZodString;
+            message: z.ZodString;
+        }, z.core.$strict>>;
+        profileId: z.ZodPipe<z.ZodString, z.ZodTransform<import("./identifiers.js").ProfileId, string>>;
+        profileVersion: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+/** One validated item and its findings. */
+export type ValidationItemReportV1 = z.infer<typeof ValidationItemReportV1Schema>;
+/** Runtime schema for report summary counts before semantic aggregation checks. */
+export declare const ValidationSummaryV1Schema: z.ZodObject<{
+    totalItems: z.ZodNumber;
+    passedItems: z.ZodNumber;
+    warningItems: z.ZodNumber;
+    failedItems: z.ZodNumber;
+    errors: z.ZodNumber;
+    warnings: z.ZodNumber;
+    infos: z.ZodNumber;
+}, z.core.$strict>;
+/** Summary counts for a validation report. */
+export type ValidationSummaryV1 = z.infer<typeof ValidationSummaryV1Schema>;
+/** Runtime schema for the tool identity embedded in canonical reports. */
+export declare const ToolReferenceV1Schema: z.ZodObject<{
+    name: z.ZodLiteral<"payoutjp">;
+    version: z.ZodString;
+}, z.core.$strict>;
+/** Tool identity embedded in a canonical report. */
+export type ToolReferenceV1 = z.infer<typeof ToolReferenceV1Schema>;
+/** Runtime schema for a compatibility profile reference. */
+export declare const ProfileReferenceV1Schema: z.ZodObject<{
+    id: z.ZodPipe<z.ZodString, z.ZodTransform<import("./identifiers.js").ProfileId, string>>;
+    version: z.ZodString;
+    status: z.ZodEnum<{
+        deprecated: "deprecated";
+        experimental: "experimental";
+        retired: "retired";
+        verified: "verified";
+    }>;
+}, z.core.$strict>;
+/** Compatibility profile reference embedded in a report. */
+export type ProfileReferenceV1 = z.infer<typeof ProfileReferenceV1Schema>;
+/** Runtime schema for a content-addressed registry reference. */
+export declare const RegistryReferenceV1Schema: z.ZodObject<{
+    id: z.ZodPipe<z.ZodString, z.ZodTransform<import("./identifiers.js").RegistryId, string>>;
+    version: z.ZodString;
+    sha256: z.ZodString;
+}, z.core.$strict>;
+/** Content-addressed registry reference embedded in a report. */
+export type RegistryReferenceV1 = z.infer<typeof RegistryReferenceV1Schema>;
+/** Runtime schema for a structurally and semantically consistent version 1 validation report. */
+export declare const ValidationReportV1Schema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"1">;
+    tool: z.ZodObject<{
+        name: z.ZodLiteral<"payoutjp">;
+        version: z.ZodString;
+    }, z.core.$strict>;
+    notices: z.ZodArray<z.ZodString>;
+    status: z.ZodEnum<{
+        FAIL: "FAIL";
+        PASS: "PASS";
+        WARNING: "WARNING";
+    }>;
+    profiles: z.ZodArray<z.ZodObject<{
+        id: z.ZodPipe<z.ZodString, z.ZodTransform<import("./identifiers.js").ProfileId, string>>;
+        version: z.ZodString;
+        status: z.ZodEnum<{
+            deprecated: "deprecated";
+            experimental: "experimental";
+            retired: "retired";
+            verified: "verified";
+        }>;
+    }, z.core.$strict>>;
+    registries: z.ZodArray<z.ZodObject<{
+        id: z.ZodPipe<z.ZodString, z.ZodTransform<import("./identifiers.js").RegistryId, string>>;
+        version: z.ZodString;
+        sha256: z.ZodString;
+    }, z.core.$strict>>;
+    summary: z.ZodObject<{
+        totalItems: z.ZodNumber;
+        passedItems: z.ZodNumber;
+        warningItems: z.ZodNumber;
+        failedItems: z.ZodNumber;
+        errors: z.ZodNumber;
+        warnings: z.ZodNumber;
+        infos: z.ZodNumber;
+    }, z.core.$strict>;
+    items: z.ZodArray<z.ZodObject<{
+        id: z.ZodPipe<z.ZodString, z.ZodTransform<import("./identifiers.js").ItemId, string>>;
+        index: z.ZodNumber;
+        rail: z.ZodEnum<{
+            bank_transfer: "bank_transfer";
+            jpyc: "jpyc";
+        }>;
+        status: z.ZodEnum<{
+            FAIL: "FAIL";
+            PASS: "PASS";
+            WARNING: "WARNING";
+        }>;
+        findings: z.ZodArray<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<"1">;
+            ruleId: z.ZodPipe<z.ZodString, z.ZodTransform<import("./identifiers.js").RuleId, string>>;
+            severity: z.ZodEnum<{
+                error: "error";
+                info: "info";
+                warning: "warning";
+            }>;
+            messageKey: z.ZodString;
+            message: z.ZodString;
+            path: z.ZodString;
+            location: z.ZodOptional<z.ZodObject<{
+                file: z.ZodOptional<z.ZodString>;
+                line: z.ZodOptional<z.ZodNumber>;
+                column: z.ZodOptional<z.ZodNumber>;
+                itemIndex: z.ZodOptional<z.ZodNumber>;
+                jsonPointer: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            actual: z.ZodOptional<z.ZodObject<{
+                classification: z.ZodEnum<{
+                    "masked-bank-account": "masked-bank-account";
+                    "metadata-only": "metadata-only";
+                    public: "public";
+                    "redacted-account-holder": "redacted-account-holder";
+                    "short-wallet-address": "short-wallet-address";
+                }>;
+                display: z.ZodString;
+            }, z.core.$strict>>;
+            expected: z.ZodOptional<z.ZodString>;
+            remediation: z.ZodOptional<z.ZodObject<{
+                code: z.ZodString;
+                message: z.ZodString;
+            }, z.core.$strict>>;
+            profileId: z.ZodPipe<z.ZodString, z.ZodTransform<import("./identifiers.js").ProfileId, string>>;
+            profileVersion: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+/** Canonical version 1 validation report inferred from {@link ValidationReportV1Schema}. */
+export type ValidationReportV1 = z.infer<typeof ValidationReportV1Schema>;
+/** Item input for canonical report construction; status is always derived. */
+export interface ValidationItemInputV1 {
+    readonly id: ValidationItemReportV1["id"];
+    readonly index: number;
+    readonly rail: Rail;
+    readonly findings: readonly FindingV1[];
+}
+/** Inputs whose ordering and aggregate fields are normalized by the report builder. */
+export interface CreateValidationReportV1Input {
+    readonly tool: ToolReferenceV1;
+    readonly notices?: readonly string[];
+    readonly profiles: readonly ProfileReferenceV1[];
+    readonly registries: readonly RegistryReferenceV1[];
+    readonly items: readonly ValidationItemInputV1[];
+}
+/** Returns Profile references sorted by ID and then version. */
+export declare function sortProfileReferences(profiles: readonly ProfileReferenceV1[]): readonly ProfileReferenceV1[];
+/** Returns Registry references sorted by ID and then version. */
+export declare function sortRegistryReferences(registries: readonly RegistryReferenceV1[]): readonly RegistryReferenceV1[];
+/** Builds a validated canonical report with stable ordering and derived aggregate fields. */
+export declare function createValidationReportV1(input: CreateValidationReportV1Input): ValidationReportV1;
+//# sourceMappingURL=report.d.ts.map

package/dist/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAI/D,iEAAiE;AACjE,eAAO,MAAM,UAAU,oCAAoD,CAAC;AAE5E,kEAAkE;AAClE,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAM/C,8DAA8D;AAC9D,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAMvC,CAAC;AAEH,2CAA2C;AAC3C,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,mFAAmF;AACnF,eAAO,MAAM,yBAAyB;;;;;;;;kBAQpC,CAAC;AAEH,8CAA8C;AAC9C,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,0EAA0E;AAC1E,eAAO,MAAM,qBAAqB;;;kBAGhC,CAAC;AAEH,oDAAoD;AACpD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,4DAA4D;AAC5D,eAAO,MAAM,wBAAwB;;;;;;;;;kBAInC,CAAC;AAEH,4DAA4D;AAC5D,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,iEAAiE;AACjE,eAAO,MAAM,yBAAyB;;;;kBAIpC,CAAC;AAEH,iEAAiE;AACjE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAyC5E,iGAAiG;AACjG,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA2CjC,CAAC;AAEL,4FAA4F;AAC5F,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,8EAA8E;AAC9E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,SAAS,SAAS,EAAE,CAAC;CACzC;AAED,uFAAuF;AACvF,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,SAAS,qBAAqB,EAAE,CAAC;CAClD;AAaD,gEAAgE;AAChE,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,GACtC,SAAS,kBAAkB,EAAE,CAE/B;AAED,iEAAiE;AACjE,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,SAAS,mBAAmB,EAAE,GACzC,SAAS,mBAAmB,EAAE,CAEhC;AAED,6FAA6F;AAC7F,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,6BAA6B,GAAG,kBAAkB,CAyBjG"}

package/dist/report.js

@@ -0,0 +1,160 @@
+import { z } from "zod";
+import { aggregateItemStatus, aggregateReportStatus, summarizeValidationItems, } from "./aggregation.js";
+import { sortFindings } from "./engine.js";
+import { FindingV1Schema } from "./finding.js";
+import { ItemIdSchema, ProfileIdSchema, RegistryIdSchema } from "./identifier-schema.js";
+import { itemStatusValues, profileStatusValues } from "./status.js";
+/** Canonical payout rails represented in a validation report. */
+export const railValues = Object.freeze(["bank_transfer", "jpyc"]);
+const NonNegativeIntegerSchema = z.number().int().nonnegative();
+const NonEmptyStringSchema = z.string().min(1);
+const Sha256Schema = z.string().regex(/^[a-f0-9]{64}$/u, "Expected a lowercase SHA-256 digest");
+/** Runtime schema for one validated item and its findings. */
+export const ValidationItemReportV1Schema = z.strictObject({
+    id: ItemIdSchema,
+    index: NonNegativeIntegerSchema,
+    rail: z.enum(railValues),
+    status: z.enum(itemStatusValues),
+    findings: z.array(FindingV1Schema),
+});
+/** Runtime schema for report summary counts before semantic aggregation checks. */
+export const ValidationSummaryV1Schema = z.strictObject({
+    totalItems: NonNegativeIntegerSchema,
+    passedItems: NonNegativeIntegerSchema,
+    warningItems: NonNegativeIntegerSchema,
+    failedItems: NonNegativeIntegerSchema,
+    errors: NonNegativeIntegerSchema,
+    warnings: NonNegativeIntegerSchema,
+    infos: NonNegativeIntegerSchema,
+});
+/** Runtime schema for the tool identity embedded in canonical reports. */
+export const ToolReferenceV1Schema = z.strictObject({
+    name: z.literal("payoutjp"),
+    version: NonEmptyStringSchema,
+});
+/** Runtime schema for a compatibility profile reference. */
+export const ProfileReferenceV1Schema = z.strictObject({
+    id: ProfileIdSchema,
+    version: NonEmptyStringSchema,
+    status: z.enum(profileStatusValues),
+});
+/** Runtime schema for a content-addressed registry reference. */
+export const RegistryReferenceV1Schema = z.strictObject({
+    id: RegistryIdSchema,
+    version: NonEmptyStringSchema,
+    sha256: Sha256Schema,
+});
+function rejectDuplicateReferences(references, context, kind) {
+    const seen = new Set();
+    references.forEach((reference, index) => {
+        const key = `${reference.id}\0${reference.version}`;
+        if (seen.has(key)) {
+            context.addIssue({
+                code: "custom",
+                message: `Duplicate ${kind} reference`,
+                path: [index],
+            });
+        }
+        seen.add(key);
+    });
+}
+const ProfileReferencesSchema = z
+    .array(ProfileReferenceV1Schema)
+    .superRefine((references, context) => rejectDuplicateReferences(references, context, "profile"));
+const RegistryReferencesSchema = z
+    .array(RegistryReferenceV1Schema)
+    .superRefine((references, context) => rejectDuplicateReferences(references, context, "registry"));
+/** Runtime schema for the canonical version 1 validation report contract. */
+const summaryFields = Object.freeze([
+    "totalItems",
+    "passedItems",
+    "warningItems",
+    "failedItems",
+    "errors",
+    "warnings",
+    "infos",
+]);
+/** Runtime schema for a structurally and semantically consistent version 1 validation report. */
+export const ValidationReportV1Schema = z
+    .strictObject({
+    schemaVersion: z.literal("1"),
+    tool: ToolReferenceV1Schema,
+    notices: z.array(NonEmptyStringSchema),
+    status: z.enum(itemStatusValues),
+    profiles: ProfileReferencesSchema,
+    registries: RegistryReferencesSchema,
+    summary: ValidationSummaryV1Schema,
+    items: z.array(ValidationItemReportV1Schema),
+})
+    .superRefine((report, context) => {
+    const itemStatuses = report.items.map((item, index) => {
+        const expected = aggregateItemStatus(item.findings);
+        if (item.status !== expected) {
+            context.addIssue({
+                code: "custom",
+                message: "Item status does not match its findings",
+                path: ["items", index, "status"],
+            });
+        }
+        return expected;
+    });
+    const expectedStatus = aggregateReportStatus(itemStatuses);
+    if (report.status !== expectedStatus) {
+        context.addIssue({
+            code: "custom",
+            message: "Report status does not match its items",
+            path: ["status"],
+        });
+    }
+    const expectedSummary = summarizeValidationItems(report.items);
+    for (const field of summaryFields) {
+        if (report.summary[field] !== expectedSummary[field]) {
+            context.addIssue({
+                code: "custom",
+                message: "Report summary does not match its items",
+                path: ["summary", field],
+            });
+        }
+    }
+});
+function compareStrings(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+function compareVersionedReferences(left, right) {
+    return compareStrings(left.id, right.id) || compareStrings(left.version, right.version);
+}
+/** Returns Profile references sorted by ID and then version. */
+export function sortProfileReferences(profiles) {
+    return [...profiles].sort(compareVersionedReferences);
+}
+/** Returns Registry references sorted by ID and then version. */
+export function sortRegistryReferences(registries) {
+    return [...registries].sort(compareVersionedReferences);
+}
+/** Builds a validated canonical report with stable ordering and derived aggregate fields. */
+export function createValidationReportV1(input) {
+    const items = input.items
+        .map((item) => {
+        const findings = [...sortFindings(item.findings)];
+        return {
+            id: item.id,
+            index: item.index,
+            rail: item.rail,
+            status: aggregateItemStatus(findings),
+            findings,
+        };
+    })
+        .sort((left, right) => left.index - right.index || compareStrings(left.id, right.id));
+    const itemStatuses = items.map((item) => item.status);
+    return ValidationReportV1Schema.parse({
+        schemaVersion: "1",
+        tool: input.tool,
+        notices: [...(input.notices ?? [])],
+        status: aggregateReportStatus(itemStatuses),
+        profiles: sortProfileReferences(input.profiles),
+        registries: sortRegistryReferences(input.registries),
+        summary: summarizeValidationItems(items),
+        items,
+    });
+}
+//# sourceMappingURL=report.js.map

package/dist/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAkB,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEpE,iEAAiE;AACjE,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,EAAE,MAAM,CAAU,CAAC,CAAC;AAK5E,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;AAChE,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC/C,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,qCAAqC,CAAC,CAAC;AAEhG,8DAA8D;AAC9D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,YAAY,CAAC;IACzD,EAAE,EAAE,YAAY;IAChB,KAAK,EAAE,wBAAwB;IAC/B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;IACxB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;CACnC,CAAC,CAAC;AAKH,mFAAmF;AACnF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,UAAU,EAAE,wBAAwB;IACpC,WAAW,EAAE,wBAAwB;IACrC,YAAY,EAAE,wBAAwB;IACtC,WAAW,EAAE,wBAAwB;IACrC,MAAM,EAAE,wBAAwB;IAChC,QAAQ,EAAE,wBAAwB;IAClC,KAAK,EAAE,wBAAwB;CAChC,CAAC,CAAC;AAKH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,YAAY,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC3B,OAAO,EAAE,oBAAoB;CAC9B,CAAC,CAAC;AAKH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,YAAY,CAAC;IACrD,EAAE,EAAE,eAAe;IACnB,OAAO,EAAE,oBAAoB;IAC7B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;CACpC,CAAC,CAAC;AAKH,iEAAiE;AACjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,EAAE,EAAE,gBAAgB;IACpB,OAAO,EAAE,oBAAoB;IAC7B,MAAM,EAAE,YAAY;CACrB,CAAC,CAAC;AAKH,SAAS,yBAAyB,CAChC,UAAsD,EACtD,OAAwB,EACxB,IAA4B;IAE5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QACtC,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,EAAE,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,aAAa,IAAI,YAAY;gBACtC,IAAI,EAAE,CAAC,KAAK,CAAC;aACd,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,uBAAuB,GAAG,CAAC;KAC9B,KAAK,CAAC,wBAAwB,CAAC;KAC/B,WAAW,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,yBAAyB,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAEnG,MAAM,wBAAwB,GAAG,CAAC;KAC/B,KAAK,CAAC,yBAAyB,CAAC;KAChC,WAAW,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,yBAAyB,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AAEpG,6EAA6E;AAC7E,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IAClC,YAAY;IACZ,aAAa;IACb,cAAc;IACd,aAAa;IACb,QAAQ;IACR,UAAU;IACV,OAAO;CACC,CAAC,CAAC;AAEZ,iGAAiG;AACjG,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,YAAY,CAAC;IACZ,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC7B,IAAI,EAAE,qBAAqB;IAC3B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;IAChC,QAAQ,EAAE,uBAAuB;IACjC,UAAU,EAAE,wBAAwB;IACpC,OAAO,EAAE,yBAAyB;IAClC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC;CAC7C,CAAC;KACD,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACpD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,yCAAyC;gBAClD,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC;aACjC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACrC,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,wCAAwC;YACjD,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,eAAe,GAAG,wBAAwB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,yCAAyC;gBAClD,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAsBL,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IACjD,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,0BAA0B,CACjC,IAAuD,EACvD,KAAwD;IAExD,OAAO,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AAC1F,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,qBAAqB,CACnC,QAAuC;IAEvC,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;AACxD,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,sBAAsB,CACpC,UAA0C;IAE1C,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;AAC1D,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,wBAAwB,CAAC,KAAoC;IAC3E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK;SACtB,GAAG,CAAC,CAAC,IAAI,EAA0B,EAAE;QACpC,MAAM,QAAQ,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClD,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,mBAAmB,CAAC,QAAQ,CAAC;YACrC,QAAQ;SACT,CAAC;IACJ,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACxF,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEtD,OAAO,wBAAwB,CAAC,KAAK,CAAC;QACpC,aAAa,EAAE,GAAG;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACnC,MAAM,EAAE,qBAAqB,CAAC,YAAY,CAAC;QAC3C,QAAQ,EAAE,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC/C,UAAU,EAAE,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC;QACpD,OAAO,EAAE,wBAAwB,CAAC,KAAK,CAAC;QACxC,KAAK;KACN,CAAC,CAAC;AACL,CAAC"}

package/dist/rule.d.ts

@@ -0,0 +1,32 @@
+import type { FindingV1 } from "./finding.js";
+import type { ItemId, RuleId } from "./identifiers.js";
+import type { CompatibilityProfileV1 } from "./profile.js";
+import type { RegistryEnvelopeV1 } from "./registry.js";
+import type { Severity } from "./status.js";
+/**
+ * Immutable input shared with a rule during applicability checks and evaluation.
+ *
+ * Destination, params, Registry payload, and optional application configuration
+ * remain generic while Profile and Registry envelopes use their runtime contracts.
+ */
+export interface RuleContextV1<TDestination = unknown, TParams = unknown, TRegistryPayload = unknown, TApplicationConfig = unknown> {
+    readonly destination: TDestination;
+    readonly applicationConfig?: TApplicationConfig;
+    readonly profile: CompatibilityProfileV1;
+    readonly params: TParams;
+    readonly registries: ReadonlyMap<string, RegistryEnvelopeV1<TRegistryPayload>>;
+    readonly itemIndex: number;
+    readonly itemId: ItemId;
+}
+/** A pure, synchronous validation rule specialized for one context shape. */
+export interface Rule<TContext extends RuleContextV1 = RuleContextV1> {
+    readonly id: RuleId;
+    readonly defaultSeverity: Severity;
+    /** Parses and validates the rule-specific params supplied by a Profile. */
+    parseParams(input: unknown): TContext["params"];
+    /** Determines whether the rule applies without mutating the context. */
+    applies(context: Readonly<TContext>): boolean;
+    /** Evaluates the context without I/O or mutation and returns report-ready findings. */
+    evaluate(context: Readonly<TContext>): readonly FindingV1[];
+}
+//# sourceMappingURL=rule.d.ts.map

package/dist/rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.d.ts","sourceRoot":"","sources":["../src/rule.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,WAAW,aAAa,CAC5B,YAAY,GAAG,OAAO,EACtB,OAAO,GAAG,OAAO,EACjB,gBAAgB,GAAG,OAAO,EAC1B,kBAAkB,GAAG,OAAO;IAE5B,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC;IACnC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC/E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,6EAA6E;AAC7E,MAAM,WAAW,IAAI,CAAC,QAAQ,SAAS,aAAa,GAAG,aAAa;IAClE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC;IAEnC,2EAA2E;IAC3E,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEhD,wEAAwE;IACxE,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;IAE9C,uFAAuF;IACvF,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,SAAS,SAAS,EAAE,CAAC;CAC7D"}

package/dist/rule.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rule.js.map

package/dist/rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../src/rule.ts"],"names":[],"mappings":""}

package/dist/status.d.ts

@@ -0,0 +1,19 @@
+/** Canonical finding severities. */
+export declare const severityValues: readonly ["error", "warning", "info"];
+/** Severity assigned to a validation finding. */
+export type Severity = (typeof severityValues)[number];
+/** Canonical validation item and report statuses. */
+export declare const itemStatusValues: readonly ["PASS", "WARNING", "FAIL"];
+/** Aggregated status shared by validation items and reports. */
+export type ItemStatus = (typeof itemStatusValues)[number];
+/** Canonical lifecycle statuses for compatibility profiles. */
+export declare const profileStatusValues: readonly ["verified", "experimental", "deprecated", "retired"];
+/** Lifecycle status of a compatibility profile. */
+export type ProfileStatus = (typeof profileStatusValues)[number];
+/** Returns whether an unknown value is a canonical finding severity. */
+export declare function isSeverity(value: unknown): value is Severity;
+/** Returns whether an unknown value is a canonical validation item/report status. */
+export declare function isItemStatus(value: unknown): value is ItemStatus;
+/** Returns whether an unknown value is a canonical compatibility profile status. */
+export declare function isProfileStatus(value: unknown): value is ProfileStatus;
+//# sourceMappingURL=status.d.ts.map

package/dist/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../src/status.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,eAAO,MAAM,cAAc,uCAAuD,CAAC;AAEnF,iDAAiD;AACjD,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,qDAAqD;AACrD,eAAO,MAAM,gBAAgB,sCAAsD,CAAC;AAEpF,gEAAgE;AAChE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3D,+DAA+D;AAC/D,eAAO,MAAM,mBAAmB,gEAKrB,CAAC;AAEZ,mDAAmD;AACnD,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AASjE,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAE5D;AAED,qFAAqF;AACrF,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAEhE;AAED,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAEtE"}

package/dist/status.js

@@ -0,0 +1,27 @@
+/** Canonical finding severities. */
+export const severityValues = Object.freeze(["error", "warning", "info"]);
+/** Canonical validation item and report statuses. */
+export const itemStatusValues = Object.freeze(["PASS", "WARNING", "FAIL"]);
+/** Canonical lifecycle statuses for compatibility profiles. */
+export const profileStatusValues = Object.freeze([
+    "verified",
+    "experimental",
+    "deprecated",
+    "retired",
+]);
+function isStringMember(values, value) {
+    return typeof value === "string" && values.some((candidate) => candidate === value);
+}
+/** Returns whether an unknown value is a canonical finding severity. */
+export function isSeverity(value) {
+    return isStringMember(severityValues, value);
+}
+/** Returns whether an unknown value is a canonical validation item/report status. */
+export function isItemStatus(value) {
+    return isStringMember(itemStatusValues, value);
+}
+/** Returns whether an unknown value is a canonical compatibility profile status. */
+export function isProfileStatus(value) {
+    return isStringMember(profileStatusValues, value);
+}
+//# sourceMappingURL=status.js.map

package/dist/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../src/status.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC,CAAC;AAKnF,qDAAqD;AACrD,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC,CAAC;AAKpF,+DAA+D;AAC/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,UAAU;IACV,cAAc;IACd,YAAY;IACZ,SAAS;CACD,CAAC,CAAC;AAKZ,SAAS,cAAc,CACrB,MAAc,EACd,KAAc;IAEd,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC;AACtF,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,cAAc,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,cAAc,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,cAAc,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC"}