@scoutflo/topology-contracts 0.8.1 → 0.9.0

package/README.md

@@ -12,6 +12,7 @@ This package owns:
 - topology correlation contract endpoint, relation-class, family, and contract-key vocabulary;
 - Gateway/Mongo-aligned topology resource and relation vocabulary constants useful at contract boundaries.
 - the bounded, schema-validated Gateway-to-Voyager `alertContext.topologyContext` DTO.
+- versioned, bounded Jira/JSM, Confluence, and Sentry product-key normalization that preserves raw evidence and provider scope.
 
 ## Gateway alert topology context
 

package/dist/src/index.d.ts

@@ -1,6 +1,7 @@
 export declare const TOPOLOGY_CONTRACTS_PACKAGE = "@scoutflo/topology-contracts";
 export * as correlationCore from '@scoutflo/correlation-core';
 export * from './providers';
+export * from './product-identity';
 export * from './families';
 export * from './source-sync';
 export * from './correlation';

package/dist/src/index.js

@@ -40,6 +40,7 @@ exports.correlationCore = exports.TOPOLOGY_CONTRACTS_PACKAGE = void 0;
 exports.TOPOLOGY_CONTRACTS_PACKAGE = '@scoutflo/topology-contracts';
 exports.correlationCore = __importStar(require("@scoutflo/correlation-core"));
 __exportStar(require("./providers"), exports);
+__exportStar(require("./product-identity"), exports);
 __exportStar(require("./families"), exports);
 __exportStar(require("./source-sync"), exports);
 __exportStar(require("./correlation"), exports);

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAa,QAAA,0BAA0B,GAAG,8BAA8B,CAAC;AAEzE,8EAA8D;AAE9D,8CAA4B;AAC5B,6CAA2B;AAC3B,gDAA8B;AAC9B,gDAA8B;AAC9B,6CAA2B;AAC3B,kDAAgC;AAChC,sDAAoC;AACpC,+CAA6B;AAC7B,4CAA0B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAa,QAAA,0BAA0B,GAAG,8BAA8B,CAAC;AAEzE,8EAA8D;AAE9D,8CAA4B;AAC5B,qDAAmC;AACnC,6CAA2B;AAC3B,gDAA8B;AAC9B,gDAA8B;AAC9B,6CAA2B;AAC3B,kDAAgC;AAChC,sDAAoC;AACpC,+CAA6B;AAC7B,4CAA0B"}

package/dist/src/product-identity.d.ts

@@ -0,0 +1,30 @@
+export declare const PROVIDER_PRODUCT_KEY_VERSION: "provider-product-key.v1";
+export declare const PROVIDER_PRODUCT_KEY_PROVIDERS: readonly ["jira", "jsm", "confluence", "sentry"];
+export type ProviderProductKeyProvider = (typeof PROVIDER_PRODUCT_KEY_PROVIDERS)[number];
+export interface ProviderProductKeyInput {
+    provider: string;
+    raw_value: string;
+    account_key: string;
+    integration_id: string;
+    project_id?: string;
+}
+export interface NormalizedProviderProductKey {
+    version: typeof PROVIDER_PRODUCT_KEY_VERSION;
+    provider: ProviderProductKeyProvider;
+    raw_value: string;
+    canonical_key: string;
+    account_key: string;
+    integration_id: string;
+    project_id?: string;
+}
+export declare const SENTRY_RELEASE_CLAIM_VERSION: "sentry-release-claim.v1";
+export interface SentryReleaseClaim {
+    version: typeof SENTRY_RELEASE_CLAIM_VERSION;
+    raw_value: string;
+    release_name?: string;
+    semantic_version?: string;
+    revision?: string;
+    immutable_revision: boolean;
+}
+export declare function normalizeProviderProductKey(input: ProviderProductKeyInput): NormalizedProviderProductKey | undefined;
+export declare function parseSentryReleaseClaim(rawValue: string): SentryReleaseClaim | undefined;

package/dist/src/product-identity.js

@@ -0,0 +1,128 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SENTRY_RELEASE_CLAIM_VERSION = exports.PROVIDER_PRODUCT_KEY_PROVIDERS = exports.PROVIDER_PRODUCT_KEY_VERSION = void 0;
+exports.normalizeProviderProductKey = normalizeProviderProductKey;
+exports.parseSentryReleaseClaim = parseSentryReleaseClaim;
+exports.PROVIDER_PRODUCT_KEY_VERSION = 'provider-product-key.v1';
+exports.PROVIDER_PRODUCT_KEY_PROVIDERS = ['jira', 'jsm', 'confluence', 'sentry'];
+exports.SENTRY_RELEASE_CLAIM_VERSION = 'sentry-release-claim.v1';
+const MAX_RAW_LENGTH = 512;
+const MAX_KEY_LENGTH = 128;
+const BOUNDED_SCOPE_LENGTH = 180;
+const PROVIDERS = new Set(exports.PROVIDER_PRODUCT_KEY_PROVIDERS);
+const FULL_COMMIT_SHA = /^[0-9a-f]{40}$/i;
+const SEMANTIC_VERSION = /^v?(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?(?:\+([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?$/;
+function boundedScope(value) {
+    const rendered = value.trim();
+    return rendered && rendered.length <= BOUNDED_SCOPE_LENGTH ? rendered : undefined;
+}
+function safeDecode(value) {
+    try {
+        return decodeURIComponent(value);
+    }
+    catch {
+        return value;
+    }
+}
+function valueFromUrl(provider, raw) {
+    const trimmed = raw.trim();
+    const jiraIssue = trimmed.match(/\/browse\/\s*([A-Za-z][A-Za-z0-9_-]*)-\d+(?:[/?#]|$)/i)?.[1];
+    if ((provider === 'jira' || provider === 'jsm') && jiraIssue) {
+        return jiraIssue;
+    }
+    const confluenceSpace = trimmed.match(/\/spaces\/([^/?#]+)/i)?.[1];
+    if (provider === 'confluence' && confluenceSpace) {
+        return safeDecode(confluenceSpace);
+    }
+    if (provider === 'sentry') {
+        const queryProject = trimmed.match(/[?&]project=([^&#]+)/i)?.[1];
+        if (queryProject) {
+            return safeDecode(queryProject.replace(/\+/g, ' '));
+        }
+        const pathProject = trimmed.match(/\/projects\/[^/?#]+\/([^/?#]+)/i)?.[1];
+        if (pathProject) {
+            return safeDecode(pathProject);
+        }
+    }
+    return undefined;
+}
+function providerValue(provider, raw) {
+    const urlValue = valueFromUrl(provider, raw);
+    if (urlValue) {
+        return urlValue;
+    }
+    if (provider === 'jira' || provider === 'jsm') {
+        return raw.trim().replace(/-\d+$/, '');
+    }
+    return raw.trim();
+}
+function canonicalize(value) {
+    const normalized = value
+        .normalize('NFKC')
+        .toLowerCase()
+        .replace(/[\s_]+/g, '-')
+        .replace(/[^\p{Letter}\p{Number}.-]+/gu, '-')
+        .replace(/-{2,}/g, '-')
+        .replace(/^[.-]+|[.-]+$/g, '')
+        .slice(0, MAX_KEY_LENGTH);
+    return normalized || undefined;
+}
+function normalizeProviderProductKey(input) {
+    const provider = input.provider.trim().toLowerCase();
+    if (!PROVIDERS.has(provider) || typeof input.raw_value !== 'string' || input.raw_value.length > MAX_RAW_LENGTH) {
+        return undefined;
+    }
+    const accountKey = boundedScope(input.account_key);
+    const integrationId = boundedScope(input.integration_id);
+    const projectId = input.project_id === undefined ? undefined : boundedScope(input.project_id);
+    const canonicalKey = canonicalize(providerValue(provider, input.raw_value));
+    if (!accountKey || !integrationId || !canonicalKey || (input.project_id !== undefined && !projectId)) {
+        return undefined;
+    }
+    return {
+        version: exports.PROVIDER_PRODUCT_KEY_VERSION,
+        provider: provider,
+        raw_value: input.raw_value,
+        canonical_key: canonicalKey,
+        account_key: accountKey,
+        integration_id: integrationId,
+        ...(projectId ? { project_id: projectId } : {}),
+    };
+}
+function parseSentryReleaseClaim(rawValue) {
+    if (typeof rawValue !== 'string' || rawValue.length > 256) {
+        return undefined;
+    }
+    const rendered = rawValue.trim();
+    if (!rendered) {
+        return undefined;
+    }
+    if (FULL_COMMIT_SHA.test(rendered)) {
+        return {
+            version: exports.SENTRY_RELEASE_CLAIM_VERSION,
+            raw_value: rawValue,
+            revision: rendered.toLowerCase(),
+            immutable_revision: true,
+        };
+    }
+    const atIndex = rendered.lastIndexOf('@');
+    const releaseName = atIndex > 0 ? rendered.slice(0, atIndex).trim() : undefined;
+    const versionCandidate = atIndex > 0 ? rendered.slice(atIndex + 1).trim() : rendered;
+    const semanticMatch = SEMANTIC_VERSION.exec(versionCandidate);
+    if (semanticMatch) {
+        return {
+            version: exports.SENTRY_RELEASE_CLAIM_VERSION,
+            raw_value: rawValue,
+            ...(releaseName ? { release_name: releaseName } : {}),
+            semantic_version: versionCandidate.replace(/^v/i, ''),
+            immutable_revision: false,
+        };
+    }
+    return {
+        version: exports.SENTRY_RELEASE_CLAIM_VERSION,
+        raw_value: rawValue,
+        release_name: rendered,
+        immutable_revision: false,
+    };
+}
+//# sourceMappingURL=product-identity.js.map

package/dist/src/product-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"product-identity.js","sourceRoot":"","sources":["../../src/product-identity.ts"],"names":[],"mappings":";;;AA4GA,kEAyBC;AAED,0DAuCC;AA9KY,QAAA,4BAA4B,GAAG,yBAAkC,CAAC;AAElE,QAAA,8BAA8B,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAU,CAAC;AAsBlF,QAAA,4BAA4B,GAAG,yBAAkC,CAAC;AAW/E,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,sCAA8B,CAAC,CAAC;AAClE,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAC1C,MAAM,gBAAgB,GAAG,iIAAiI,CAAC;AAE3J,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO,QAAQ,IAAI,QAAQ,CAAC,MAAM,IAAI,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACpF,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,QAAoC,EAAE,GAAW;IACrE,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9F,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;QAC7D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,YAAY,IAAI,eAAe,EAAE,CAAC;QACjD,OAAO,UAAU,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,UAAU,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,QAAoC,EAAE,GAAW;IACtE,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC9C,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,UAAU,GAAG,KAAK;SACrB,SAAS,CAAC,MAAM,CAAC;SACjB,WAAW,EAAE;SACb,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,8BAA8B,EAAE,GAAG,CAAC;SAC5C,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;SAC7B,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAE5B,OAAO,UAAU,IAAI,SAAS,CAAC;AACjC,CAAC;AAED,SAAgB,2BAA2B,CACzC,KAA8B;IAE9B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QAC/G,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9F,MAAM,YAAY,GAAG,YAAY,CAAC,aAAa,CAAC,QAAsC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1G,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,IAAI,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACrG,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,OAAO,EAAE,oCAA4B;QACrC,QAAQ,EAAE,QAAsC;QAChD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,YAAY;QAC3B,WAAW,EAAE,UAAU;QACvB,cAAc,EAAE,aAAa;QAC7B,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,SAAgB,uBAAuB,CAAC,QAAgB;IACtD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC1D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,oCAA4B;YACrC,SAAS,EAAE,QAAQ;YACnB,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE;YAChC,kBAAkB,EAAE,IAAI;SACzB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,MAAM,gBAAgB,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IACrF,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC9D,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,oCAA4B;YACrC,SAAS,EAAE,QAAQ;YACnB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,gBAAgB,EAAE,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YACrD,kBAAkB,EAAE,KAAK;SAC1B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,oCAA4B;QACrC,SAAS,EAAE,QAAQ;QACnB,YAAY,EAAE,QAAQ;QACtB,kBAAkB,EAAE,KAAK;KAC1B,CAAC;AACJ,CAAC"}

package/dist/test/product-identity.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/product-identity.test.js

@@ -0,0 +1,103 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_test_1 = __importDefault(require("node:test"));
+const product_identity_1 = require("../src/product-identity");
+const scope = {
+    account_key: 'acme.example',
+    integration_id: 'integration-42',
+};
+(0, node_test_1.default)('normalizes Jira and JSM project keys while preserving raw evidence and scope', () => {
+    for (const provider of ['jira', 'jsm']) {
+        strict_1.default.deepEqual((0, product_identity_1.normalizeProviderProductKey)({
+            provider,
+            raw_value: ' https://acme.atlassian.net/browse/ PAY-123?focusedCommentId=9 ',
+            ...scope,
+        }), {
+            version: 'provider-product-key.v1',
+            provider,
+            raw_value: ' https://acme.atlassian.net/browse/ PAY-123?focusedCommentId=9 ',
+            canonical_key: 'pay',
+            account_key: 'acme.example',
+            integration_id: 'integration-42',
+        });
+    }
+});
+(0, node_test_1.default)('normalizes Confluence URL-derived Unicode space keys deterministically', () => {
+    strict_1.default.equal((0, product_identity_1.normalizeProviderProductKey)({
+        provider: 'confluence',
+        raw_value: 'https://acme.atlassian.net/wiki/spaces/Platform%20Caf%C3%A9/pages/123',
+        ...scope,
+    })?.canonical_key, 'platform-café');
+});
+(0, node_test_1.default)('normalizes Sentry project slugs without collapsing project scope', () => {
+    strict_1.default.deepEqual((0, product_identity_1.normalizeProviderProductKey)({
+        provider: 'sentry',
+        raw_value: ' HTTPS://sentry.io/organizations/acme/issues/?project=Payments_API ',
+        project_id: '4500123',
+        ...scope,
+    }), {
+        version: 'provider-product-key.v1',
+        provider: 'sentry',
+        raw_value: ' HTTPS://sentry.io/organizations/acme/issues/?project=Payments_API ',
+        canonical_key: 'payments-api',
+        account_key: 'acme.example',
+        integration_id: 'integration-42',
+        project_id: '4500123',
+    });
+});
+(0, node_test_1.default)('rejects unsupported providers and unbounded or empty keys', () => {
+    strict_1.default.equal((0, product_identity_1.normalizeProviderProductKey)({ provider: 'github', raw_value: 'repo', ...scope }), undefined);
+    strict_1.default.equal((0, product_identity_1.normalizeProviderProductKey)({ provider: 'sentry', raw_value: ' '.repeat(3), ...scope }), undefined);
+    strict_1.default.equal((0, product_identity_1.normalizeProviderProductKey)({ provider: 'sentry', raw_value: 'x'.repeat(513), ...scope }), undefined);
+});
+(0, node_test_1.default)('keeps identical canonical keys distinct through required provider scope', () => {
+    const first = (0, product_identity_1.normalizeProviderProductKey)({
+        provider: 'sentry',
+        raw_value: 'Payments API',
+        account_key: 'account-a',
+        integration_id: 'integration-a',
+        project_id: '1',
+    });
+    const second = (0, product_identity_1.normalizeProviderProductKey)({
+        provider: 'sentry',
+        raw_value: 'payments-api',
+        account_key: 'account-b',
+        integration_id: 'integration-b',
+        project_id: '2',
+    });
+    strict_1.default.equal(first?.canonical_key, second?.canonical_key);
+    strict_1.default.notDeepEqual(first, second);
+});
+(0, node_test_1.default)('parses bounded semantic versions and named releases into structured claims', () => {
+    strict_1.default.deepEqual((0, product_identity_1.parseSentryReleaseClaim)('payments-api@1.24.3+build.7'), {
+        version: 'sentry-release-claim.v1',
+        raw_value: 'payments-api@1.24.3+build.7',
+        release_name: 'payments-api',
+        semantic_version: '1.24.3+build.7',
+        immutable_revision: false,
+    });
+    strict_1.default.deepEqual((0, product_identity_1.parseSentryReleaseClaim)('v2.0.1-rc.2'), {
+        version: 'sentry-release-claim.v1',
+        raw_value: 'v2.0.1-rc.2',
+        semantic_version: '2.0.1-rc.2',
+        immutable_revision: false,
+    });
+});
+(0, node_test_1.default)('accepts only full commit SHAs as immutable Sentry release evidence', () => {
+    const sha = '0123456789abcdef0123456789abcdef01234567';
+    strict_1.default.deepEqual((0, product_identity_1.parseSentryReleaseClaim)(sha), {
+        version: 'sentry-release-claim.v1',
+        raw_value: sha,
+        revision: sha,
+        immutable_revision: true,
+    });
+    strict_1.default.equal((0, product_identity_1.parseSentryReleaseClaim)('main')?.immutable_revision, false);
+    strict_1.default.equal((0, product_identity_1.parseSentryReleaseClaim)('v1.2')?.immutable_revision, false);
+    strict_1.default.equal((0, product_identity_1.parseSentryReleaseClaim)('0123456789ab')?.immutable_revision, false);
+    strict_1.default.equal((0, product_identity_1.parseSentryReleaseClaim)('x'.repeat(257)), undefined);
+});
+//# sourceMappingURL=product-identity.test.js.map

package/dist/test/product-identity.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"product-identity.test.js","sourceRoot":"","sources":["../../test/product-identity.test.ts"],"names":[],"mappings":";;;;;AAAA,gEAAwC;AACxC,0DAA6B;AAE7B,8DAA+F;AAE/F,MAAM,KAAK,GAAG;IACZ,WAAW,EAAE,cAAc;IAC3B,cAAc,EAAE,gBAAgB;CACjC,CAAC;AAEF,IAAA,mBAAI,EAAC,8EAA8E,EAAE,GAAG,EAAE;IACxF,KAAK,MAAM,QAAQ,IAAI,CAAC,MAAM,EAAE,KAAK,CAAU,EAAE,CAAC;QAChD,gBAAM,CAAC,SAAS,CACd,IAAA,8CAA2B,EAAC;YAC1B,QAAQ;YACR,SAAS,EAAE,iEAAiE;YAC5E,GAAG,KAAK;SACT,CAAC,EACF;YACE,OAAO,EAAE,yBAAyB;YAClC,QAAQ;YACR,SAAS,EAAE,iEAAiE;YAC5E,aAAa,EAAE,KAAK;YACpB,WAAW,EAAE,cAAc;YAC3B,cAAc,EAAE,gBAAgB;SACjC,CACF,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,wEAAwE,EAAE,GAAG,EAAE;IAClF,gBAAM,CAAC,KAAK,CACV,IAAA,8CAA2B,EAAC;QAC1B,QAAQ,EAAE,YAAY;QACtB,SAAS,EAAE,uEAAuE;QAClF,GAAG,KAAK;KACT,CAAC,EAAE,aAAa,EACjB,eAAe,CAChB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,kEAAkE,EAAE,GAAG,EAAE;IAC5E,gBAAM,CAAC,SAAS,CACd,IAAA,8CAA2B,EAAC;QAC1B,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,qEAAqE;QAChF,UAAU,EAAE,SAAS;QACrB,GAAG,KAAK;KACT,CAAC,EACF;QACE,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,qEAAqE;QAChF,aAAa,EAAE,cAAc;QAC7B,WAAW,EAAE,cAAc;QAC3B,cAAc,EAAE,gBAAgB;QAChC,UAAU,EAAE,SAAS;KACtB,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,gBAAM,CAAC,KAAK,CAAC,IAAA,8CAA2B,EAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAC1G,gBAAM,CAAC,KAAK,CAAC,IAAA,8CAA2B,EAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IACjH,gBAAM,CAAC,KAAK,CAAC,IAAA,8CAA2B,EAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;AACrH,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,yEAAyE,EAAE,GAAG,EAAE;IACnF,MAAM,KAAK,GAAG,IAAA,8CAA2B,EAAC;QACxC,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,cAAc;QACzB,WAAW,EAAE,WAAW;QACxB,cAAc,EAAE,eAAe;QAC/B,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAA,8CAA2B,EAAC;QACzC,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,cAAc;QACzB,WAAW,EAAE,WAAW;QACxB,cAAc,EAAE,eAAe;QAC/B,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;IAEH,gBAAM,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1D,gBAAM,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,4EAA4E,EAAE,GAAG,EAAE;IACtF,gBAAM,CAAC,SAAS,CAAC,IAAA,0CAAuB,EAAC,6BAA6B,CAAC,EAAE;QACvE,OAAO,EAAE,yBAAyB;QAClC,SAAS,EAAE,6BAA6B;QACxC,YAAY,EAAE,cAAc;QAC5B,gBAAgB,EAAE,gBAAgB;QAClC,kBAAkB,EAAE,KAAK;KAC1B,CAAC,CAAC;IACH,gBAAM,CAAC,SAAS,CAAC,IAAA,0CAAuB,EAAC,aAAa,CAAC,EAAE;QACvD,OAAO,EAAE,yBAAyB;QAClC,SAAS,EAAE,aAAa;QACxB,gBAAgB,EAAE,YAAY;QAC9B,kBAAkB,EAAE,KAAK;KAC1B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,oEAAoE,EAAE,GAAG,EAAE;IAC9E,MAAM,GAAG,GAAG,0CAA0C,CAAC;IACvD,gBAAM,CAAC,SAAS,CAAC,IAAA,0CAAuB,EAAC,GAAG,CAAC,EAAE;QAC7C,OAAO,EAAE,yBAAyB;QAClC,SAAS,EAAE,GAAG;QACd,QAAQ,EAAE,GAAG;QACb,kBAAkB,EAAE,IAAI;KACzB,CAAC,CAAC;IACH,gBAAM,CAAC,KAAK,CAAC,IAAA,0CAAuB,EAAC,MAAM,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC;IACzE,gBAAM,CAAC,KAAK,CAAC,IAAA,0CAAuB,EAAC,MAAM,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC;IACzE,gBAAM,CAAC,KAAK,CAAC,IAAA,0CAAuB,EAAC,cAAc,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC;IACjF,gBAAM,CAAC,KAAK,CAAC,IAAA,0CAAuB,EAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scoutflo/topology-contracts",
-  "version": "0.8.1",
+  "version": "0.9.0",
   "description": "Pure shared topology vocabulary and Zod schemas for Scoutflo topology workflows.",
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",