@xemahq/contracts 0.1.0

package/dist/space/lib/owner-space-ref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-space-ref.d.ts","sourceRoot":"","sources":["../../../src/space/lib/owner-space-ref.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAIL,KAAK,QAAQ,EACd,MAAM,SAAS,CAAC;AAIjB,oBAAY,eAAe;IACzB,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AAED,eAAO,MAAM,qBAAqB,mCAAgC,CAAC;AAMnE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAQD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAGD,MAAM,MAAM,aAAa,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;AA6DtE,eAAO,MAAM,mBAAmB,EAG1B,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AAO/B,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CAEhE;AAsCD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAOhE;AAGD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CA8B/D"}

package/dist/space/lib/owner-space-ref.js

@@ -0,0 +1,117 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OwnerSpaceRefSchema = exports.OwnerSpaceFenceSchema = exports.OwnerSpaceFence = void 0;
+exports.parseOwnerSpaceRef = parseOwnerSpaceRef;
+exports.formatOwnerSpaceKey = formatOwnerSpaceKey;
+exports.parseOwnerSpaceKey = parseOwnerSpaceKey;
+const zod_1 = require("zod");
+const space_1 = require("./space");
+const space_ref_parser_1 = require("./space-ref-parser");
+var OwnerSpaceFence;
+(function (OwnerSpaceFence) {
+    OwnerSpaceFence["Global"] = "global";
+    OwnerSpaceFence["Tenant"] = "tenant";
+})(OwnerSpaceFence || (exports.OwnerSpaceFence = OwnerSpaceFence = {}));
+exports.OwnerSpaceFenceSchema = zod_1.z.nativeEnum(OwnerSpaceFence);
+const globalOwnerSpaceRefSchema = zod_1.z
+    .object({
+    fence: zod_1.z.literal(OwnerSpaceFence.Global),
+    orgId: zod_1.z.null(),
+    space: space_1.StrictSpaceRefSchema,
+})
+    .strict()
+    .superRefine((value, ctx) => {
+    if (value.space.tier !== space_1.SpaceKind.System &&
+        value.space.tier !== space_1.SpaceKind.Biome) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: ['space', 'tier'],
+            message: 'Only System and Biome spaces may use the global owner fence.',
+        });
+    }
+});
+const tenantOwnerSpaceRefSchema = zod_1.z
+    .object({
+    fence: zod_1.z.literal(OwnerSpaceFence.Tenant),
+    orgId: zod_1.z.string().min(1),
+    space: space_1.StrictSpaceRefSchema,
+})
+    .strict()
+    .superRefine((value, ctx) => {
+    try {
+        (0, space_1.assertValidSpaceSegmentId)('orgId', value.orgId, value.orgId);
+    }
+    catch (error) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: ['orgId'],
+            message: error instanceof Error ? error.message : 'Invalid orgId.',
+        });
+    }
+    if (value.space.tier === space_1.SpaceKind.System ||
+        value.space.tier === space_1.SpaceKind.Biome) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: ['space', 'tier'],
+            message: 'System and Biome spaces must use the global owner fence.',
+        });
+    }
+    if (value.space.orgId !== undefined && value.space.orgId !== value.orgId) {
+        ctx.addIssue({
+            code: zod_1.z.ZodIssueCode.custom,
+            path: ['space', 'orgId'],
+            message: 'The Space orgId must equal the mandatory tenant security fence orgId.',
+        });
+    }
+});
+exports.OwnerSpaceRefSchema = zod_1.z.discriminatedUnion('fence', [
+    globalOwnerSpaceRefSchema,
+    tenantOwnerSpaceRefSchema,
+]);
+function parseOwnerSpaceRef(value) {
+    return normalizeOwnerSpaceRef(exports.OwnerSpaceRefSchema.parse(value));
+}
+function formatOwnerSpaceKey(value) {
+    const owner = parseOwnerSpaceRef(value);
+    const fence = owner.fence === OwnerSpaceFence.Global
+        ? OwnerSpaceFence.Global
+        : `${OwnerSpaceFence.Tenant}:${owner.orgId}`;
+    return `${fence}::${(0, space_ref_parser_1.formatSpaceRef)(owner.space)}`;
+}
+function parseOwnerSpaceKey(value) {
+    const separator = value.indexOf('::');
+    if (separator <= 0 || separator === value.length - 2) {
+        throw new Error(`Invalid owner space key "${value}": expected "<fence>::<SpaceRef>".`);
+    }
+    const fence = value.slice(0, separator);
+    const space = stripDerivedSpaceFields((0, space_ref_parser_1.parseSpaceRef)(value.slice(separator + 2)));
+    if (fence === OwnerSpaceFence.Global) {
+        return parseOwnerSpaceRef({
+            fence: OwnerSpaceFence.Global,
+            orgId: null,
+            space,
+        });
+    }
+    const tenantPrefix = `${OwnerSpaceFence.Tenant}:`;
+    if (!fence.startsWith(tenantPrefix)) {
+        throw new Error(`Invalid owner space key "${value}": unknown fence "${fence}".`);
+    }
+    return parseOwnerSpaceRef({
+        fence: OwnerSpaceFence.Tenant,
+        orgId: fence.slice(tenantPrefix.length),
+        space,
+    });
+}
+function normalizeOwnerSpaceRef(value) {
+    const space = stripDerivedSpaceFields(value.space);
+    return value.fence === OwnerSpaceFence.Global
+        ? { fence: value.fence, orgId: null, space }
+        : { fence: value.fence, orgId: value.orgId, space };
+}
+function stripDerivedSpaceFields(space) {
+    const identity = { ...space };
+    delete identity.path;
+    delete identity.classification;
+    return identity;
+}
+//# sourceMappingURL=owner-space-ref.js.map

package/dist/space/lib/owner-space-ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-space-ref.js","sourceRoot":"","sources":["../../../src/space/lib/owner-space-ref.ts"],"names":[],"mappings":";;;AA+GA,gDAEC;AAsCD,kDAOC;AAGD,gDA8BC;AA/LD,6BAAwB;AACxB,mCAKiB;AACjB,yDAAmE;AAGnE,IAAY,eAGX;AAHD,WAAY,eAAe;IACzB,oCAAiB,CAAA;IACjB,oCAAiB,CAAA;AACnB,CAAC,EAHW,eAAe,+BAAf,eAAe,QAG1B;AAEY,QAAA,qBAAqB,GAAG,OAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AA2BnE,MAAM,yBAAyB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,OAAC,CAAC,IAAI,EAAE;IACf,KAAK,EAAE,4BAAoB;CAC5B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,IACE,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAS,CAAC,MAAM;QACrC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAS,CAAC,KAAK,EACpC,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;YACvB,OAAO,EAAE,8DAA8D;SACxE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,yBAAyB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,KAAK,EAAE,4BAAoB;CAC5B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,IAAI,CAAC;QACH,IAAA,iCAAyB,EAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB;SACnE,CAAC,CAAC;IACL,CAAC;IAED,IACE,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAS,CAAC,MAAM;QACrC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAS,CAAC,KAAK,EACpC,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;YACvB,OAAO,EAAE,0DAA0D;SACpE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,OAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;YACxB,OAAO,EACL,uEAAuE;SAC1E,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEQ,QAAA,mBAAmB,GAAG,OAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE;IAC/D,yBAAyB;IACzB,yBAAyB;CAC1B,CAA6B,CAAC;AAO/B,SAAgB,kBAAkB,CAAC,KAAc;IAC/C,OAAO,sBAAsB,CAAC,2BAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAClE,CAAC;AAsCD,SAAgB,mBAAmB,CAAC,KAAoB;IACtD,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,KAAK,GACT,KAAK,CAAC,KAAK,KAAK,eAAe,CAAC,MAAM;QACpC,CAAC,CAAC,eAAe,CAAC,MAAM;QACxB,CAAC,CAAC,GAAG,eAAe,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;IACjD,OAAO,GAAG,KAAK,KAAK,IAAA,iCAAc,EAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;AACpD,CAAC;AAGD,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,SAAS,IAAI,CAAC,IAAI,SAAS,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,4BAA4B,KAAK,oCAAoC,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,uBAAuB,CACnC,IAAA,gCAAa,EAAC,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAC1C,CAAC;IACF,IAAI,KAAK,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;QACrC,OAAO,kBAAkB,CAAC;YACxB,KAAK,EAAE,eAAe,CAAC,MAAM;YAC7B,KAAK,EAAE,IAAI;YACX,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IACD,MAAM,YAAY,GAAG,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,4BAA4B,KAAK,qBAAqB,KAAK,IAAI,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,kBAAkB,CAAC;QACxB,KAAK,EAAE,eAAe,CAAC,MAAM;QAC7B,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;QACvC,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAoB;IAClD,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,KAAK,KAAK,eAAe,CAAC,MAAM;QAC3C,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;QAC5C,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAe;IAC9C,MAAM,QAAQ,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAC9B,OAAO,QAAQ,CAAC,IAAI,CAAC;IACrB,OAAO,QAAQ,CAAC,cAAc,CAAC;IAC/B,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/space/lib/space-classification.d.ts

@@ -0,0 +1,6 @@
+import { DataClassification } from './space';
+export declare function joinClassification(a: DataClassification, b: DataClassification | undefined): DataClassification;
+export declare function joinClassification(a: DataClassification | undefined, b: DataClassification): DataClassification;
+export declare function joinClassification(a: DataClassification | undefined, b: DataClassification | undefined): DataClassification | undefined;
+export declare function joinClassificationChain(values: readonly (DataClassification | undefined)[]): DataClassification | undefined;
+//# sourceMappingURL=space-classification.d.ts.map

package/dist/space/lib/space-classification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"space-classification.d.ts","sourceRoot":"","sources":["../../../src/space/lib/space-classification.ts"],"names":[],"mappings":"AAkBA,OAAO,EAA4B,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAgBvE,wBAAgB,kBAAkB,CAChC,CAAC,EAAE,kBAAkB,EACrB,CAAC,EAAE,kBAAkB,GAAG,SAAS,GAChC,kBAAkB,CAAC;AACtB,wBAAgB,kBAAkB,CAChC,CAAC,EAAE,kBAAkB,GAAG,SAAS,EACjC,CAAC,EAAE,kBAAkB,GACpB,kBAAkB,CAAC;AACtB,wBAAgB,kBAAkB,CAChC,CAAC,EAAE,kBAAkB,GAAG,SAAS,EACjC,CAAC,EAAE,kBAAkB,GAAG,SAAS,GAChC,kBAAkB,GAAG,SAAS,CAAC;AAmBlC,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,SAAS,CAAC,kBAAkB,GAAG,SAAS,CAAC,EAAE,GAClD,kBAAkB,GAAG,SAAS,CAIhC"}

package/dist/space/lib/space-classification.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.joinClassification = joinClassification;
+exports.joinClassificationChain = joinClassificationChain;
+const space_1 = require("./space");
+function joinClassification(a, b) {
+    if (a === undefined)
+        return b;
+    if (b === undefined)
+        return a;
+    return space_1.DATA_CLASSIFICATION_RANK[b] > space_1.DATA_CLASSIFICATION_RANK[a] ? b : a;
+}
+function joinClassificationChain(values) {
+    let acc;
+    for (const value of values)
+        acc = joinClassification(acc, value);
+    return acc;
+}
+//# sourceMappingURL=space-classification.js.map

package/dist/space/lib/space-classification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"space-classification.js","sourceRoot":"","sources":["../../../src/space/lib/space-classification.ts"],"names":[],"mappings":";;AA8CA,gDAOC;AAWD,0DAMC;AApDD,mCAAuE;AA4BvE,SAAgB,kBAAkB,CAChC,CAAiC,EACjC,CAAiC;IAEjC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,gCAAwB,CAAC,CAAC,CAAC,GAAG,gCAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAWD,SAAgB,uBAAuB,CACrC,MAAmD;IAEnD,IAAI,GAAmC,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,GAAG,GAAG,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACjE,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/space/lib/space-kind-rank.d.ts

@@ -0,0 +1,14 @@
+import { SpaceKind } from './space';
+export declare const SPACE_KIND_RANK: Readonly<Record<SpaceKind, number>>;
+export declare function spaceKindRank(kind: SpaceKind | string): number;
+export type SpaceKindSubset = ReadonlySet<SpaceKind>;
+export declare function spaceKindSubset(...kinds: readonly SpaceKind[]): SpaceKindSubset;
+export declare function assertSpaceKindAdmissible(registry: string, kind: SpaceKind, admissible: SpaceKindSubset): void;
+export declare function pickSpaceKindWinner<T extends {
+    readonly ownerSpaceKind: SpaceKind | string;
+}>(rows: readonly T[]): T | undefined;
+export declare function collapseToSpaceKindWinners<T extends {
+    readonly slug: string;
+    readonly ownerSpaceKind: SpaceKind | string;
+}>(rows: readonly T[]): readonly T[];
+//# sourceMappingURL=space-kind-rank.d.ts.map

package/dist/space/lib/space-kind-rank.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"space-kind-rank.d.ts","sourceRoot":"","sources":["../../../src/space/lib/space-kind-rank.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAiBpC,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAS5D,CAAC;AASL,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,CAS9D;AAYD,MAAM,MAAM,eAAe,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;AAGrD,wBAAgB,eAAe,CAC7B,GAAG,KAAK,EAAE,SAAS,SAAS,EAAE,GAC7B,eAAe,CAEjB;AAOD,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,SAAS,EACf,UAAU,EAAE,eAAe,GAC1B,IAAI,CAON;AAWD,wBAAgB,mBAAmB,CACjC,CAAC,SAAS;IAAE,QAAQ,CAAC,cAAc,EAAE,SAAS,GAAG,MAAM,CAAA;CAAE,EACzD,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,GAAG,SAAS,CAWnC;AAWD,wBAAgB,0BAA0B,CACxC,CAAC,SAAS;IACR,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,SAAS,GAAG,MAAM,CAAC;CAC7C,EACD,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,SAAS,CAAC,EAAE,CAalC"}

package/dist/space/lib/space-kind-rank.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SPACE_KIND_RANK = void 0;
+exports.spaceKindRank = spaceKindRank;
+exports.spaceKindSubset = spaceKindSubset;
+exports.assertSpaceKindAdmissible = assertSpaceKindAdmissible;
+exports.pickSpaceKindWinner = pickSpaceKindWinner;
+exports.collapseToSpaceKindWinners = collapseToSpaceKindWinners;
+const space_1 = require("./space");
+exports.SPACE_KIND_RANK = Object.freeze({
+    [space_1.SpaceKind.App]: 0,
+    [space_1.SpaceKind.User]: 1,
+    [space_1.SpaceKind.Session]: 2,
+    [space_1.SpaceKind.Project]: 3,
+    [space_1.SpaceKind.Org]: 4,
+    [space_1.SpaceKind.Biome]: 5,
+    [space_1.SpaceKind.System]: 6,
+});
+function spaceKindRank(kind) {
+    const rank = exports.SPACE_KIND_RANK[kind];
+    if (rank === undefined) {
+        throw new Error(`Unknown SpaceKind '${String(kind)}' — cannot rank it for precedence. ` +
+            `Known kinds: ${Object.keys(exports.SPACE_KIND_RANK).join(', ')}.`);
+    }
+    return rank;
+}
+function spaceKindSubset(...kinds) {
+    return new Set(kinds);
+}
+function assertSpaceKindAdmissible(registry, kind, admissible) {
+    if (!admissible.has(kind)) {
+        throw new Error(`${registry} does not own the '${kind}' space tier. ` +
+            `Admissible tiers: ${[...admissible].join(', ')}.`);
+    }
+}
+function pickSpaceKindWinner(rows) {
+    let winner;
+    let winningRank = Number.POSITIVE_INFINITY;
+    for (const row of rows) {
+        const rank = spaceKindRank(row.ownerSpaceKind);
+        if (rank < winningRank) {
+            winner = row;
+            winningRank = rank;
+        }
+    }
+    return winner;
+}
+function collapseToSpaceKindWinners(rows) {
+    const bySlug = new Map();
+    for (const row of rows) {
+        const incumbent = bySlug.get(row.slug);
+        if (incumbent === undefined ||
+            spaceKindRank(row.ownerSpaceKind) <
+                spaceKindRank(incumbent.ownerSpaceKind)) {
+            bySlug.set(row.slug, row);
+        }
+    }
+    return [...bySlug.values()];
+}
+//# sourceMappingURL=space-kind-rank.js.map

package/dist/space/lib/space-kind-rank.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"space-kind-rank.js","sourceRoot":"","sources":["../../../src/space/lib/space-kind-rank.ts"],"names":[],"mappings":";;;AA0DA,sCASC;AAeD,0CAIC;AAOD,8DAWC;AAWD,kDAaC;AAWD,gEAkBC;AAtID,mCAAoC;AAiBvB,QAAA,eAAe,GAC1B,MAAM,CAAC,MAAM,CAAC;IACZ,CAAC,iBAAS,CAAC,GAAG,CAAC,EAAE,CAAC;IAClB,CAAC,iBAAS,CAAC,IAAI,CAAC,EAAE,CAAC;IACnB,CAAC,iBAAS,CAAC,OAAO,CAAC,EAAE,CAAC;IACtB,CAAC,iBAAS,CAAC,OAAO,CAAC,EAAE,CAAC;IACtB,CAAC,iBAAS,CAAC,GAAG,CAAC,EAAE,CAAC;IAClB,CAAC,iBAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IACpB,CAAC,iBAAS,CAAC,MAAM,CAAC,EAAE,CAAC;CACtB,CAAC,CAAC;AASL,SAAgB,aAAa,CAAC,IAAwB;IACpD,MAAM,IAAI,GAAI,uBAAsD,CAAC,IAAI,CAAC,CAAC;IAC3E,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,sBAAsB,MAAM,CAAC,IAAI,CAAC,qCAAqC;YACrE,gBAAgB,MAAM,CAAC,IAAI,CAAC,uBAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAeD,SAAgB,eAAe,CAC7B,GAAG,KAA2B;IAE9B,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAOD,SAAgB,yBAAyB,CACvC,QAAgB,EAChB,IAAe,EACf,UAA2B;IAE3B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,sBAAsB,IAAI,gBAAgB;YACnD,qBAAqB,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACrD,CAAC;IACJ,CAAC;AACH,CAAC;AAWD,SAAgB,mBAAmB,CAEjC,IAAkB;IAClB,IAAI,MAAqB,CAAC;IAC1B,IAAI,WAAW,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC/C,IAAI,IAAI,GAAG,WAAW,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,CAAC;YACb,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAWD,SAAgB,0BAA0B,CAKxC,IAAkB;IAClB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAa,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IACE,SAAS,KAAK,SAAS;YACvB,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC;gBAC/B,aAAa,CAAC,SAAS,CAAC,cAAc,CAAC,EACzC,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC"}

package/dist/space/lib/space-promotion.d.ts

@@ -0,0 +1,11 @@
+import { SpaceKind } from './space';
+export declare const SPACE_KIND_PROMOTION_TARGETS: Readonly<Record<SpaceKind, readonly SpaceKind[]>>;
+export declare function isLegalSpacePromotion(from: SpaceKind, to: SpaceKind): boolean;
+export declare class SpacePromotionError extends Error {
+    readonly code = "SPACE_PROMOTION_ILLEGAL";
+    readonly from: SpaceKind;
+    readonly to: SpaceKind;
+    constructor(from: SpaceKind, to: SpaceKind);
+}
+export declare function assertLegalSpacePromotion(from: SpaceKind, to: SpaceKind): void;
+//# sourceMappingURL=space-promotion.d.ts.map

package/dist/space/lib/space-promotion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"space-promotion.d.ts","sourceRoot":"","sources":["../../../src/space/lib/space-promotion.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAqBpC,eAAO,MAAM,4BAA4B,EAAE,QAAQ,CACjD,MAAM,CAAC,SAAS,EAAE,SAAS,SAAS,EAAE,CAAC,CASvC,CAAC;AAWH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,GAAG,OAAO,CAG7E;AAOD,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,SAAgB,IAAI,6BAA6B;IACjD,SAAgB,IAAI,EAAE,SAAS,CAAC;IAChC,SAAgB,EAAE,EAAE,SAAS,CAAC;gBAEX,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS;CAYlD;AAGD,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,SAAS,EACf,EAAE,EAAE,SAAS,GACZ,IAAI,CAIN"}

package/dist/space/lib/space-promotion.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SpacePromotionError = exports.SPACE_KIND_PROMOTION_TARGETS = void 0;
+exports.isLegalSpacePromotion = isLegalSpacePromotion;
+exports.assertLegalSpacePromotion = assertLegalSpacePromotion;
+const space_1 = require("./space");
+exports.SPACE_KIND_PROMOTION_TARGETS = Object.freeze({
+    [space_1.SpaceKind.User]: [space_1.SpaceKind.Project, space_1.SpaceKind.Org],
+    [space_1.SpaceKind.Project]: [space_1.SpaceKind.Org],
+    [space_1.SpaceKind.Org]: [],
+    [space_1.SpaceKind.App]: [],
+    [space_1.SpaceKind.Session]: [],
+    [space_1.SpaceKind.Biome]: [],
+    [space_1.SpaceKind.System]: [],
+});
+function isLegalSpacePromotion(from, to) {
+    if (from === to)
+        return false;
+    return exports.SPACE_KIND_PROMOTION_TARGETS[from].includes(to);
+}
+class SpacePromotionError extends Error {
+    code = 'SPACE_PROMOTION_ILLEGAL';
+    from;
+    to;
+    constructor(from, to) {
+        const targets = exports.SPACE_KIND_PROMOTION_TARGETS[from];
+        super(`Cannot re-scope from '${from}' to '${to}'. ` +
+            (targets.length === 0
+                ? `'${from}' rows are not customer-promotable.`
+                : `Legal targets for '${from}': ${targets.join(', ')}.`));
+        this.name = 'SpacePromotionError';
+        this.from = from;
+        this.to = to;
+    }
+}
+exports.SpacePromotionError = SpacePromotionError;
+function assertLegalSpacePromotion(from, to) {
+    if (!isLegalSpacePromotion(from, to)) {
+        throw new SpacePromotionError(from, to);
+    }
+}
+//# sourceMappingURL=space-promotion.js.map

package/dist/space/lib/space-promotion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"space-promotion.js","sourceRoot":"","sources":["../../../src/space/lib/space-promotion.ts"],"names":[],"mappings":";;;AA4DA,sDAGC;AA2BD,8DAOC;AA/ED,mCAAoC;AAqBvB,QAAA,4BAA4B,GAErC,MAAM,CAAC,MAAM,CAAC;IAChB,CAAC,iBAAS,CAAC,IAAI,CAAC,EAAE,CAAC,iBAAS,CAAC,OAAO,EAAE,iBAAS,CAAC,GAAG,CAAC;IACpD,CAAC,iBAAS,CAAC,OAAO,CAAC,EAAE,CAAC,iBAAS,CAAC,GAAG,CAAC;IACpC,CAAC,iBAAS,CAAC,GAAG,CAAC,EAAE,EAAE;IACnB,CAAC,iBAAS,CAAC,GAAG,CAAC,EAAE,EAAE;IACnB,CAAC,iBAAS,CAAC,OAAO,CAAC,EAAE,EAAE;IACvB,CAAC,iBAAS,CAAC,KAAK,CAAC,EAAE,EAAE;IACrB,CAAC,iBAAS,CAAC,MAAM,CAAC,EAAE,EAAE;CACvB,CAAC,CAAC;AAWH,SAAgB,qBAAqB,CAAC,IAAe,EAAE,EAAa;IAClE,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,oCAA4B,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACzD,CAAC;AAOD,MAAa,mBAAoB,SAAQ,KAAK;IAC5B,IAAI,GAAG,yBAAyB,CAAC;IACjC,IAAI,CAAY;IAChB,EAAE,CAAY;IAE9B,YAAmB,IAAe,EAAE,EAAa;QAC/C,MAAM,OAAO,GAAG,oCAA4B,CAAC,IAAI,CAAC,CAAC;QACnD,KAAK,CACH,yBAAyB,IAAI,SAAS,EAAE,KAAK;YAC3C,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;gBACnB,CAAC,CAAC,IAAI,IAAI,qCAAqC;gBAC/C,CAAC,CAAC,sBAAsB,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAC7D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;CACF;AAjBD,kDAiBC;AAGD,SAAgB,yBAAyB,CACvC,IAAe,EACf,EAAa;IAEb,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,mBAAmB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC"}

package/dist/space/lib/space-ref-parser.d.ts

@@ -0,0 +1,10 @@
+import { SpaceRefParseError, type SpaceRef } from './space';
+export { SpaceRefParseError };
+export interface SpaceRefScopeParse {
+    scope: SpaceRef;
+    consumed: number;
+}
+export declare function parseSpaceRefScopeSegments(segments: readonly string[], raw: string): SpaceRefScopeParse;
+export declare function parseSpaceRef(uri: string): SpaceRef;
+export declare function formatSpaceRef(ref: SpaceRef): string;
+//# sourceMappingURL=space-ref-parser.d.ts.map

package/dist/space/lib/space-ref-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"space-ref-parser.d.ts","sourceRoot":"","sources":["../../../src/space/lib/space-ref-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,kBAAkB,EAElB,KAAK,QAAQ,EACd,MAAM,SAAS,CAAC;AAmGjB,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAG9B,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,QAAQ,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAqCD,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,GAAG,EAAE,MAAM,GACV,kBAAkB,CA2DpB;AAWD,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,CAsCnD;AAOD,wBAAgB,cAAc,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,CAEpD"}

package/dist/space/lib/space-ref-parser.js

@@ -0,0 +1,129 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SpaceRefParseError = void 0;
+exports.parseSpaceRefScopeSegments = parseSpaceRefScopeSegments;
+exports.parseSpaceRef = parseSpaceRef;
+exports.formatSpaceRef = formatSpaceRef;
+const space_1 = require("./space");
+Object.defineProperty(exports, "SpaceRefParseError", { enumerable: true, get: function () { return space_1.SpaceRefParseError; } });
+const SCHEME = 'xema://';
+var SpaceRefScopeHead;
+(function (SpaceRefScopeHead) {
+    SpaceRefScopeHead["System"] = "system";
+    SpaceRefScopeHead["Users"] = "users";
+    SpaceRefScopeHead["Biomes"] = "biomes";
+    SpaceRefScopeHead["Sessions"] = "sessions";
+    SpaceRefScopeHead["Orgs"] = "orgs";
+    SpaceRefScopeHead["Projects"] = "projects";
+    SpaceRefScopeHead["Apps"] = "apps";
+})(SpaceRefScopeHead || (SpaceRefScopeHead = {}));
+const NESTED_ONLY_SCOPE_HEADS = [
+    SpaceRefScopeHead.Projects,
+    SpaceRefScopeHead.Apps,
+];
+const SPACE_REF_ROOT_SCOPE_HEADS = Object.values(SpaceRefScopeHead).filter((head) => !NESTED_ONLY_SCOPE_HEADS.includes(head));
+function nestedOnlyScopeHeadMessage(head) {
+    if (!NESTED_ONLY_SCOPE_HEADS.includes(head)) {
+        return undefined;
+    }
+    const example = head === SpaceRefScopeHead.Apps
+        ? 'xema://orgs/<orgId>/projects/<projectId>/apps/<appId>'
+        : 'xema://orgs/<orgId>/projects/<projectId>';
+    return (`SpaceRef URI opens with "${head}", which addresses a tier beneath an ` +
+        `organisation and is valid only NESTED — e.g. "${example}". A URI may ` +
+        `open with: ${SPACE_REF_ROOT_SCOPE_HEADS.join(', ')}.`);
+}
+function requireSegment(segments, index, raw, label) {
+    const value = segments[index];
+    if (value === undefined || value.length === 0) {
+        throw new space_1.SpaceRefParseError(`SpaceRef URI is missing the "${label}" segment.`, raw);
+    }
+    return value;
+}
+function takeId(segments, index, raw, field) {
+    const value = requireSegment(segments, index, raw, String(field));
+    (0, space_1.assertValidSpaceSegmentId)(field, value, raw);
+    return value;
+}
+function parseSpaceRefScopeSegments(segments, raw) {
+    const head = requireSegment(segments, 0, raw, 'scope');
+    switch (head) {
+        case SpaceRefScopeHead.System:
+            return { scope: { tier: space_1.SpaceKind.System }, consumed: 1 };
+        case SpaceRefScopeHead.Biomes:
+            return {
+                scope: {
+                    tier: space_1.SpaceKind.Biome,
+                    biomeId: takeId(segments, 1, raw, 'biomeId'),
+                },
+                consumed: 2,
+            };
+        case SpaceRefScopeHead.Users:
+            return {
+                scope: {
+                    tier: space_1.SpaceKind.User,
+                    userId: takeId(segments, 1, raw, 'userId'),
+                },
+                consumed: 2,
+            };
+        case SpaceRefScopeHead.Sessions:
+            return {
+                scope: {
+                    tier: space_1.SpaceKind.Session,
+                    sessionId: takeId(segments, 1, raw, 'sessionId'),
+                },
+                consumed: 2,
+            };
+        case SpaceRefScopeHead.Orgs: {
+            const orgId = takeId(segments, 1, raw, 'orgId');
+            if (segments.length >= 4 && segments[2] === SpaceRefScopeHead.Projects) {
+                const projectId = takeId(segments, 3, raw, 'projectId');
+                if (segments.length >= 6 && segments[4] === SpaceRefScopeHead.Apps) {
+                    return {
+                        scope: {
+                            tier: space_1.SpaceKind.App,
+                            orgId,
+                            projectId,
+                            appId: takeId(segments, 5, raw, 'appId'),
+                        },
+                        consumed: 6,
+                    };
+                }
+                return {
+                    scope: { tier: space_1.SpaceKind.Project, orgId, projectId },
+                    consumed: 4,
+                };
+            }
+            return { scope: { tier: space_1.SpaceKind.Org, orgId }, consumed: 2 };
+        }
+        default:
+            throw new space_1.SpaceRefParseError(nestedOnlyScopeHeadMessage(head) ??
+                `SpaceRef URI has unknown scope head "${head}". Allowed: ${SPACE_REF_ROOT_SCOPE_HEADS.join(', ')}.`, raw);
+    }
+}
+function parseSpaceRef(uri) {
+    if (typeof uri !== 'string' || uri.length === 0) {
+        throw new space_1.SpaceRefParseError('SpaceRef URI must be a non-empty string.', String(uri));
+    }
+    if (!uri.startsWith(SCHEME)) {
+        throw new space_1.SpaceRefParseError(`SpaceRef URI must start with "${SCHEME}".`, uri);
+    }
+    const body = uri.slice(SCHEME.length);
+    if (body.length === 0) {
+        throw new space_1.SpaceRefParseError('SpaceRef URI has empty body after scheme.', uri);
+    }
+    const segments = body.split('/');
+    if (segments.some((segment) => segment.length === 0)) {
+        throw new space_1.SpaceRefParseError('SpaceRef URI has an empty path segment (leading, trailing or doubled "/").', uri);
+    }
+    const { scope, consumed } = parseSpaceRefScopeSegments(segments, uri);
+    if (consumed !== segments.length) {
+        throw new space_1.SpaceRefParseError(`SpaceRef URI has ${segments.length - consumed} trailing segment(s) after the scope — a Space ref addresses a Space, not an object inside it.`, uri);
+    }
+    scope.path = formatSpaceRef(scope);
+    return scope;
+}
+function formatSpaceRef(ref) {
+    return `${SCHEME}${(0, space_1.spaceRefToPath)(ref).slice(1)}`;
+}
+//# sourceMappingURL=space-ref-parser.js.map

package/dist/space/lib/space-ref-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"space-ref-parser.js","sourceRoot":"","sources":["../../../src/space/lib/space-ref-parser.ts"],"names":[],"mappings":";;;AAoJA,gEA8DC;AAWD,sCAsCC;AAOD,wCAEC;AA5QD,mCAMiB;AAmGR,mGAtGP,0BAAkB,OAsGO;AA7D3B,MAAM,MAAM,GAAG,SAAS,CAAC;AAGzB,IAAK,iBAQJ;AARD,WAAK,iBAAiB;IACpB,sCAAiB,CAAA;IACjB,oCAAe,CAAA;IACf,sCAAiB,CAAA;IACjB,0CAAqB,CAAA;IACrB,kCAAa,CAAA;IACb,0CAAqB,CAAA;IACrB,kCAAa,CAAA;AACf,CAAC,EARI,iBAAiB,KAAjB,iBAAiB,QAQrB;AAOD,MAAM,uBAAuB,GAAiC;IAC5D,iBAAiB,CAAC,QAAQ;IAC1B,iBAAiB,CAAC,IAAI;CACvB,CAAC;AAeF,MAAM,0BAA0B,GAAsB,MAAM,CAAC,MAAM,CACjE,iBAAiB,CAClB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAQ5D,SAAS,0BAA0B,CAAC,IAAY;IAC9C,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,IAAyB,CAAC,EAAE,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GACX,IAAI,KAAK,iBAAiB,CAAC,IAAI;QAC7B,CAAC,CAAC,uDAAuD;QACzD,CAAC,CAAC,0CAA0C,CAAC;IACjD,OAAO,CACL,4BAA4B,IAAI,uCAAuC;QACvE,iDAAiD,OAAO,eAAe;QACvE,cAAc,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACvD,CAAC;AACJ,CAAC;AAUD,SAAS,cAAc,CACrB,QAA2B,EAC3B,KAAa,EACb,GAAW,EACX,KAAa;IAEb,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,0BAAkB,CAC1B,gCAAgC,KAAK,YAAY,EACjD,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CACb,QAA2B,EAC3B,KAAa,EACb,GAAW,EACX,KAAqB;IAErB,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,IAAA,iCAAyB,EAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC;AACf,CAAC;AAUD,SAAgB,0BAA0B,CACxC,QAA2B,EAC3B,GAAW;IAEX,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACvD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,iBAAiB,CAAC,MAAM;YAC3B,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAS,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAC5D,KAAK,iBAAiB,CAAC,MAAM;YAC3B,OAAO;gBACL,KAAK,EAAE;oBACL,IAAI,EAAE,iBAAS,CAAC,KAAK;oBACrB,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC;iBAC7C;gBACD,QAAQ,EAAE,CAAC;aACZ,CAAC;QACJ,KAAK,iBAAiB,CAAC,KAAK;YAC1B,OAAO;gBACL,KAAK,EAAE;oBACL,IAAI,EAAE,iBAAS,CAAC,IAAI;oBACpB,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC;iBAC3C;gBACD,QAAQ,EAAE,CAAC;aACZ,CAAC;QACJ,KAAK,iBAAiB,CAAC,QAAQ;YAC7B,OAAO;gBACL,KAAK,EAAE;oBACL,IAAI,EAAE,iBAAS,CAAC,OAAO;oBACvB,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC;iBACjD;gBACD,QAAQ,EAAE,CAAC;aACZ,CAAC;QACJ,KAAK,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAChD,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,iBAAiB,CAAC,QAAQ,EAAE,CAAC;gBACvE,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;gBAExD,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,iBAAiB,CAAC,IAAI,EAAE,CAAC;oBACnE,OAAO;wBACL,KAAK,EAAE;4BACL,IAAI,EAAE,iBAAS,CAAC,GAAG;4BACnB,KAAK;4BACL,SAAS;4BACT,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC;yBACzC;wBACD,QAAQ,EAAE,CAAC;qBACZ,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAS,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE;oBACpD,QAAQ,EAAE,CAAC;iBACZ,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAS,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAChE,CAAC;QACD;YACE,MAAM,IAAI,0BAAkB,CAC1B,0BAA0B,CAAC,IAAI,CAAC;gBAC9B,wCAAwC,IAAI,eAAe,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACrG,GAAG,CACJ,CAAC;IACN,CAAC;AACH,CAAC;AAWD,SAAgB,aAAa,CAAC,GAAW;IACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,0BAAkB,CAC1B,0CAA0C,EAC1C,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,0BAAkB,CAC1B,iCAAiC,MAAM,IAAI,EAC3C,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,0BAAkB,CAC1B,2CAA2C,EAC3C,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,0BAAkB,CAC1B,4EAA4E,EAC5E,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,0BAA0B,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtE,IAAI,QAAQ,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,IAAI,0BAAkB,CAC1B,oBAAoB,QAAQ,CAAC,MAAM,GAAG,QAAQ,gGAAgG,EAC9I,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC;AACf,CAAC;AAOD,SAAgB,cAAc,CAAC,GAAa;IAC1C,OAAO,GAAG,MAAM,GAAG,IAAA,sBAAc,EAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACpD,CAAC"}

package/dist/space/lib/space-traversal.d.ts

@@ -0,0 +1,3 @@
+import { type SpaceRef } from './space';
+export declare function walkAncestors(ref: SpaceRef): SpaceRef[];
+//# sourceMappingURL=space-traversal.d.ts.map

package/dist/space/lib/space-traversal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"space-traversal.d.ts","sourceRoot":"","sources":["../../../src/space/lib/space-traversal.ts"],"names":[],"mappings":"AACA,OAAO,EAAa,KAAK,QAAQ,EAAE,MAAM,SAAS,CAAC;AA6BnD,wBAAgB,aAAa,CAAC,GAAG,EAAE,QAAQ,GAAG,QAAQ,EAAE,CAQvD"}

package/dist/space/lib/space-traversal.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.walkAncestors = walkAncestors;
+const space_ref_parser_1 = require("./space-ref-parser");
+const space_1 = require("./space");
+function walkAncestors(ref) {
+    const out = [];
+    let current = ref;
+    while (current !== null) {
+        out.push(current);
+        current = parentOf(current);
+    }
+    return out;
+}
+function systemParent() {
+    return {
+        tier: space_1.SpaceKind.System,
+        path: (0, space_ref_parser_1.formatSpaceRef)({ tier: space_1.SpaceKind.System }),
+    };
+}
+function parentOf(ref) {
+    switch (ref.tier) {
+        case space_1.SpaceKind.System:
+            return null;
+        case space_1.SpaceKind.User:
+        case space_1.SpaceKind.Org:
+        case space_1.SpaceKind.Session:
+        case space_1.SpaceKind.Biome:
+            return systemParent();
+        case space_1.SpaceKind.Project: {
+            const parent = { tier: space_1.SpaceKind.Org };
+            if (ref.orgId !== undefined)
+                parent.orgId = ref.orgId;
+            parent.path = (0, space_ref_parser_1.formatSpaceRef)(parent);
+            return parent;
+        }
+        case space_1.SpaceKind.App: {
+            const parent = { tier: space_1.SpaceKind.Project };
+            if (ref.orgId !== undefined)
+                parent.orgId = ref.orgId;
+            if (ref.projectId !== undefined)
+                parent.projectId = ref.projectId;
+            parent.path = (0, space_ref_parser_1.formatSpaceRef)(parent);
+            return parent;
+        }
+        default: {
+            const exhaustive = ref.tier;
+            throw new Error(`walkAncestors: unhandled SpaceKind "${String(exhaustive)}".`);
+        }
+    }
+}
+//# sourceMappingURL=space-traversal.js.map

package/dist/space/lib/space-traversal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"space-traversal.js","sourceRoot":"","sources":["../../../src/space/lib/space-traversal.ts"],"names":[],"mappings":";;AA8BA,sCAQC;AAtCD,yDAAoD;AACpD,mCAAmD;AA6BnD,SAAgB,aAAa,CAAC,GAAa;IACzC,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAoB,GAAG,CAAC;IACnC,OAAO,OAAO,KAAK,IAAI,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClB,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY;IACnB,OAAO;QACL,IAAI,EAAE,iBAAS,CAAC,MAAM;QACtB,IAAI,EAAE,IAAA,iCAAc,EAAC,EAAE,IAAI,EAAE,iBAAS,CAAC,MAAM,EAAE,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAa;IAC7B,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,iBAAS,CAAC,MAAM;YACnB,OAAO,IAAI,CAAC;QACd,KAAK,iBAAS,CAAC,IAAI,CAAC;QACpB,KAAK,iBAAS,CAAC,GAAG,CAAC;QACnB,KAAK,iBAAS,CAAC,OAAO,CAAC;QACvB,KAAK,iBAAS,CAAC,KAAK;YAClB,OAAO,YAAY,EAAE,CAAC;QACxB,KAAK,iBAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YACvB,MAAM,MAAM,GAAa,EAAE,IAAI,EAAE,iBAAS,CAAC,GAAG,EAAE,CAAC;YACjD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;gBAAE,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;YACtD,MAAM,CAAC,IAAI,GAAG,IAAA,iCAAc,EAAC,MAAM,CAAC,CAAC;YACrC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,iBAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YACnB,MAAM,MAAM,GAAa,EAAE,IAAI,EAAE,iBAAS,CAAC,OAAO,EAAE,CAAC;YACrD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;gBAAE,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;YACtD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;gBAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;YAClE,MAAM,CAAC,IAAI,GAAG,IAAA,iCAAc,EAAC,MAAM,CAAC,CAAC;YACrC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,UAAU,GAAU,GAAG,CAAC,IAAI,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,uCAAuC,MAAM,CAAC,UAAU,CAAC,IAAI,CAC9D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/space/lib/space.d.ts

@@ -0,0 +1,72 @@
+import { z } from 'zod';
+export declare enum SpaceKind {
+    System = "system",
+    Org = "org",
+    Project = "project",
+    App = "app",
+    Session = "session",
+    Biome = "biome",
+    User = "user"
+}
+export declare enum DataClassification {
+    Public = "public",
+    Internal = "internal",
+    Confidential = "confidential",
+    Secret = "secret",
+    Regulated = "regulated"
+}
+export interface SpaceRef {
+    tier: SpaceKind;
+    orgId?: string;
+    projectId?: string;
+    appId?: string;
+    sessionId?: string;
+    biomeId?: string;
+    userId?: string;
+    path?: string;
+    classification?: DataClassification;
+}
+export declare const SpaceKindSchema: z.ZodEnum<typeof SpaceKind>;
+export declare const DataClassificationSchema: z.ZodEnum<typeof DataClassification>;
+export declare const DATA_CLASSIFICATION_RANK: Readonly<Record<DataClassification, number>>;
+export declare function dataClassificationExceeds(candidate: DataClassification, cap: DataClassification): boolean;
+export declare const SpaceRefSchema: z.ZodObject<{
+    tier: z.ZodEnum<typeof SpaceKind>;
+    orgId: z.ZodOptional<z.ZodString>;
+    projectId: z.ZodOptional<z.ZodString>;
+    appId: z.ZodOptional<z.ZodString>;
+    sessionId: z.ZodOptional<z.ZodString>;
+    biomeId: z.ZodOptional<z.ZodString>;
+    userId: z.ZodOptional<z.ZodString>;
+    path: z.ZodOptional<z.ZodString>;
+    classification: z.ZodOptional<z.ZodEnum<typeof DataClassification>>;
+}, z.core.$strip>;
+export declare const StrictSpaceRefSchema: z.ZodObject<{
+    tier: z.ZodEnum<typeof SpaceKind>;
+    orgId: z.ZodOptional<z.ZodString>;
+    projectId: z.ZodOptional<z.ZodString>;
+    appId: z.ZodOptional<z.ZodString>;
+    sessionId: z.ZodOptional<z.ZodString>;
+    biomeId: z.ZodOptional<z.ZodString>;
+    userId: z.ZodOptional<z.ZodString>;
+    path: z.ZodOptional<z.ZodString>;
+    classification: z.ZodOptional<z.ZodEnum<typeof DataClassification>>;
+}, z.core.$strict>;
+export declare class SpaceRefParseError extends Error {
+    readonly code = "SPACE_REF_INVALID";
+    readonly raw: string;
+    constructor(message: string, raw: string);
+}
+export declare const SPACE_SEGMENT_ID_PATTERN: RegExp;
+export declare function assertValidSpaceSegmentId(segment: keyof SpaceRef, value: string, raw: string): void;
+export declare function spaceRefToPath(ref: SpaceRef): string;
+export interface Space {
+    id: string;
+    ref: SpaceRef;
+    displayName: string;
+    classification?: DataClassification;
+    createdAt: string;
+    updatedAt: string;
+    labels?: Record<string, string>;
+}
+//# sourceMappingURL=space.d.ts.map

package/dist/space/lib/space.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"space.d.ts","sourceRoot":"","sources":["../../../src/space/lib/space.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA8BxB,oBAAY,SAAS;IACnB,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,KAAK,UAAU;IACf,IAAI,SAAS;CACd;AAGD,oBAAY,kBAAkB;IAC5B,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,YAAY,iBAAiB;IAC7B,MAAM,WAAW;IACjB,SAAS,cAAc;CACxB;AAeD,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,kBAAkB,CAAC;CACrC;AAED,eAAO,MAAM,eAAe,6BAA0B,CAAC;AACvD,eAAO,MAAM,wBAAwB,sCAAmC,CAAC;AAkBzE,eAAO,MAAM,wBAAwB,EAAE,QAAQ,CAC7C,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAOnC,CAAC;AAOF,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,kBAAkB,EAC7B,GAAG,EAAE,kBAAkB,GACtB,OAAO,CAET;AAyCD,eAAO,MAAM,cAAc;;;;;;;;;;iBAEa,CAAC;AAOzC,eAAO,MAAM,oBAAoB;;;;;;;;;;kBAGO,CAAC;AAkBzC,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,SAAgB,IAAI,uBAAuB;IAC3C,SAAgB,GAAG,EAAE,MAAM,CAAC;gBAET,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;CAKhD;AAUD,eAAO,MAAM,wBAAwB,QAAiC,CAAC;AAQvE,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,QAAQ,EACvB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,GACV,IAAI,CAON;AA2CD,wBAAgB,cAAc,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,CAgCpD;AAaD,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,QAAQ,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC"}