@xemahq/contracts 0.82.0 → 0.84.0

package/dist/conformance/edition-source-pins.vectors.json

@@ -0,0 +1,298 @@
+{
+  "$comment": "Conformance vectors for the vendor edition `sourcePins` key. `schema` names the definition schema the vector is parsed with. Every identifier is a fixture name. `issue` is a substring the refusal message carries. Whether a repository exists in the data root, and whether a ref differs from the shared pin, are not schema checks.",
+  "vectors": [
+    {
+      "name": "one-pin",
+      "schema": "distribution",
+      "expect": "accept",
+      "why": "A vendor edition holding one repository at an exact commit, with its exit condition.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-vendor",
+        "displayName": "Fixture vendor edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [],
+        "sourcePins": [
+          {
+            "repo": "repos/fixture-service",
+            "ref": "0123456789abcdef0123456789abcdef01234567",
+            "until": "the fixture fix is released"
+          }
+        ]
+      }
+    },
+    {
+      "name": "two-pins-graph-repos",
+      "schema": "distribution",
+      "expect": "accept",
+      "why": "repos/ and submodules/ paths, one entry per repository.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-vendor",
+        "displayName": "Fixture vendor edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [],
+        "sourcePins": [
+          {
+            "repo": "repos/fixture-service",
+            "ref": "0123456789abcdef0123456789abcdef01234567",
+            "until": "the fixture fix is released"
+          },
+          {
+            "repo": "submodules/fixture-generic-api",
+            "ref": "fedcba9876543210fedcba9876543210fedcba98",
+            "until": "the fixture fix is released"
+          }
+        ]
+      }
+    },
+    {
+      "name": "absent",
+      "schema": "distribution",
+      "expect": "accept",
+      "why": "Absent holds nothing; the key is never defaulted.",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-vendor",
+        "displayName": "Fixture vendor edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": []
+      }
+    },
+    {
+      "name": "empty-list",
+      "schema": "distribution",
+      "expect": "refuse",
+      "why": "An empty list says nothing; omit the key.",
+      "issue": "omit the key",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-vendor",
+        "displayName": "Fixture vendor edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [],
+        "sourcePins": []
+      }
+    },
+    {
+      "name": "duplicate-repo",
+      "schema": "distribution",
+      "expect": "refuse",
+      "why": "A repository is held once.",
+      "issue": "is pinned twice",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-vendor",
+        "displayName": "Fixture vendor edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [],
+        "sourcePins": [
+          {
+            "repo": "repos/fixture-service",
+            "ref": "0123456789abcdef0123456789abcdef01234567",
+            "until": "the fixture fix is released"
+          },
+          {
+            "repo": "repos/fixture-service",
+            "ref": "fedcba9876543210fedcba9876543210fedcba98",
+            "until": "the fixture fix is released"
+          }
+        ]
+      }
+    },
+    {
+      "name": "branch-ref",
+      "schema": "distribution",
+      "expect": "refuse",
+      "why": "A branch moves under a lock; only a commit is a hold.",
+      "issue": "exact lowercase 40-hex commit",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-vendor",
+        "displayName": "Fixture vendor edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [],
+        "sourcePins": [
+          {
+            "repo": "repos/fixture-service",
+            "ref": "main",
+            "until": "the fixture fix is released"
+          }
+        ]
+      }
+    },
+    {
+      "name": "abbreviated-ref",
+      "schema": "distribution",
+      "expect": "refuse",
+      "why": "An abbreviation is not a commit id.",
+      "issue": "exact lowercase 40-hex commit",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-vendor",
+        "displayName": "Fixture vendor edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [],
+        "sourcePins": [
+          {
+            "repo": "repos/fixture-service",
+            "ref": "0123456",
+            "until": "the fixture fix is released"
+          }
+        ]
+      }
+    },
+    {
+      "name": "uppercase-ref",
+      "schema": "distribution",
+      "expect": "refuse",
+      "why": "The commit id is lowercase.",
+      "issue": "exact lowercase 40-hex commit",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-vendor",
+        "displayName": "Fixture vendor edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [],
+        "sourcePins": [
+          {
+            "repo": "repos/fixture-service",
+            "ref": "0123456789ABCDEF0123456789ABCDEF01234567",
+            "until": "the fixture fix is released"
+          }
+        ]
+      }
+    },
+    {
+      "name": "missing-until",
+      "schema": "distribution",
+      "expect": "refuse",
+      "why": "A hold states when it ends.",
+      "issue": "until",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-vendor",
+        "displayName": "Fixture vendor edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [],
+        "sourcePins": [
+          {
+            "repo": "repos/fixture-service",
+            "ref": "0123456789abcdef0123456789abcdef01234567"
+          }
+        ]
+      }
+    },
+    {
+      "name": "blank-until",
+      "schema": "distribution",
+      "expect": "refuse",
+      "why": "A blank exit condition states nothing.",
+      "issue": "non-empty text",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-vendor",
+        "displayName": "Fixture vendor edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [],
+        "sourcePins": [
+          {
+            "repo": "repos/fixture-service",
+            "ref": "0123456789abcdef0123456789abcdef01234567",
+            "until": "   "
+          }
+        ]
+      }
+    },
+    {
+      "name": "not-a-graph-path",
+      "schema": "distribution",
+      "expect": "refuse",
+      "why": "repo is a data-root relative repository path.",
+      "issue": "repository path",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-vendor",
+        "displayName": "Fixture vendor edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [],
+        "sourcePins": [
+          {
+            "repo": "/abs/repos/fixture-service",
+            "ref": "0123456789abcdef0123456789abcdef01234567",
+            "until": "the fixture fix is released"
+          }
+        ]
+      }
+    },
+    {
+      "name": "unknown-key",
+      "schema": "distribution",
+      "expect": "refuse",
+      "why": "An entry is exactly {repo, ref, until}.",
+      "issue": "note",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-vendor",
+        "displayName": "Fixture vendor edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [],
+        "sourcePins": [
+          {
+            "repo": "repos/fixture-service",
+            "ref": "0123456789abcdef0123456789abcdef01234567",
+            "until": "the fixture fix is released",
+            "note": "x"
+          }
+        ]
+      }
+    },
+    {
+      "name": "customer-refuses",
+      "schema": "customer",
+      "expect": "refuse",
+      "why": "sourcePins holds a repository of the vendor graph; a customer definition refuses it.",
+      "issue": "sourcePins",
+      "definition": {
+        "schemaVersion": 1,
+        "id": "fixture-vendor",
+        "displayName": "Fixture vendor edition",
+        "requiredPlatforms": [
+          "linux/amd64"
+        ],
+        "include": [],
+        "sourcePins": [
+          {
+            "repo": "repos/fixture-service",
+            "ref": "0123456789abcdef0123456789abcdef01234567",
+            "until": "the fixture fix is released"
+          }
+        ]
+      }
+    }
+  ]
+}

package/dist/conformance/optional-operation-admission.vectors.json

@@ -0,0 +1,44 @@
+{
+  "$comment": "Conformance vectors for optional operation requirements. A `caller` biome with one service declares `requiresOperations` and `optionalOperations`; `lockBiomes` are the other biomes in the lock; `owners` map an operation domain to its owning biome (an owner need not be in the lock). Every admission implementation (kernel-contracts admitOperationGrants and the CLI resolver) must produce `grantedOperations` and `refusals` exactly; `manifestError` marks a manifest the schema must refuse.",
+  "vectors": [
+    {
+      "name": "owner-present-is-granted",
+      "caller": { "requiresOperations": [], "optionalOperations": ["billing:invoice.read@1"] },
+      "lockBiomes": ["billing"],
+      "owners": { "billing": "billing" },
+      "manifestError": false,
+      "ungrantedOperations": [], "grantedOperations": ["billing:invoice.read@1"],
+      "refusals": []
+    },
+    {
+      "name": "owner-absent-is-not-granted-and-not-refused",
+      "caller": { "requiresOperations": [], "optionalOperations": ["billing:invoice.read@1"] },
+      "lockBiomes": [],
+      "owners": { "billing": "billing" },
+      "manifestError": false,
+      "ungrantedOperations": ["billing:invoice.read@1"], "grantedOperations": [],
+      "refusals": []
+    },
+    {
+      "name": "unknown-domain-is-refused",
+      "caller": { "requiresOperations": [], "optionalOperations": ["ghost:thing.read@1"] },
+      "lockBiomes": ["billing"],
+      "owners": { "billing": "billing" },
+      "manifestError": false,
+      "ungrantedOperations": [], "grantedOperations": [],
+      "refusals": [{ "operation": "ghost:thing.read@1", "code": "unowned-domain" }]
+    },
+    {
+      "name": "required-and-optional-duplicate-is-refused",
+      "caller": {
+        "requiresOperations": ["billing:invoice.read@1"],
+        "optionalOperations": ["billing:invoice.read@1"]
+      },
+      "lockBiomes": ["billing"],
+      "owners": { "billing": "billing" },
+      "manifestError": true,
+      "ungrantedOperations": [], "grantedOperations": ["billing:invoice.read@1"],
+      "refusals": [{ "operation": "billing:invoice.read@1", "code": "required-and-optional" }]
+    }
+  ]
+}