@xemahq/kernel-contracts 0.16.2 → 0.17.0

package/dist/agent-workspace/awp-spec.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://xema.dev/schemas/awp-spec.v1.json",
-  "emittedAt": "2026-06-26T20:48:27.706Z",
+  "emittedAt": "2026-06-27T10:32:41.919Z",
   "spec": {
     "id": "awp/v1",
     "version": "1.2.0",

package/dist/lifecycle-events/index.d.ts

@@ -0,0 +1,2 @@
+export * from './lib/lifecycle-events';
+//# sourceMappingURL=index.d.ts.map

package/dist/lifecycle-events/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lifecycle-events/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC"}

package/dist/lifecycle-events/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/lifecycle-events"), exports);
+//# sourceMappingURL=index.js.map

package/dist/lifecycle-events/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lifecycle-events/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAuC"}

package/dist/lifecycle-events/lib/lifecycle-events.d.ts

@@ -0,0 +1,25 @@
+import { z } from 'zod';
+export declare enum LifecycleEventType {
+    OrganizationDeleted = "organization.organization.deleted",
+    ProjectDeleted = "project.project.deleted",
+    UserDeleted = "user.user.deleted"
+}
+export declare const IDENTITY_LIFECYCLE_EVENT_SOURCE: "/services/identity-api";
+export declare const PROJECT_LIFECYCLE_EVENT_SOURCE: "/services/project-registry-api";
+export declare const LIFECYCLE_EVENT_SCHEMA_VERSION: "1.0.0";
+export declare const OrganizationDeletedEventSchema: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strict>;
+export declare const ProjectDeletedEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    orgId: z.ZodString;
+    projectId: z.ZodString;
+}, z.core.$strict>;
+export declare const UserDeletedEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    orgId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type OrganizationDeletedEventPayload = z.infer<typeof OrganizationDeletedEventSchema>;
+export type ProjectDeletedEventPayload = z.infer<typeof ProjectDeletedEventSchema>;
+export type UserDeletedEventPayload = z.infer<typeof UserDeletedEventSchema>;
+//# sourceMappingURL=lifecycle-events.d.ts.map

package/dist/lifecycle-events/lib/lifecycle-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-events.d.ts","sourceRoot":"","sources":["../../../src/lifecycle-events/lib/lifecycle-events.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,oBAAY,kBAAkB;IAE5B,mBAAmB,sCAAsC;IAEzD,cAAc,4BAA4B;IAS1C,WAAW,sBAAsB;CAClC;AAGD,eAAO,MAAM,+BAA+B,EAAG,wBAAiC,CAAC;AAGjF,eAAO,MAAM,8BAA8B,EACzC,gCAAyC,CAAC;AAG5C,eAAO,MAAM,8BAA8B,EAAG,OAAgB,CAAC;AAO/D,eAAO,MAAM,8BAA8B;;kBAIhC,CAAC;AAOZ,eAAO,MAAM,yBAAyB;;;;kBAM3B,CAAC;AAOZ,eAAO,MAAM,sBAAsB;;;kBAKxB,CAAC;AAEZ,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CACnD,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,yBAAyB,CACjC,CAAC;AACF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/lifecycle-events/lib/lifecycle-events.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserDeletedEventSchema = exports.ProjectDeletedEventSchema = exports.OrganizationDeletedEventSchema = exports.LIFECYCLE_EVENT_SCHEMA_VERSION = exports.PROJECT_LIFECYCLE_EVENT_SOURCE = exports.IDENTITY_LIFECYCLE_EVENT_SOURCE = exports.LifecycleEventType = void 0;
+const zod_1 = require("zod");
+var LifecycleEventType;
+(function (LifecycleEventType) {
+    LifecycleEventType["OrganizationDeleted"] = "organization.organization.deleted";
+    LifecycleEventType["ProjectDeleted"] = "project.project.deleted";
+    LifecycleEventType["UserDeleted"] = "user.user.deleted";
+})(LifecycleEventType || (exports.LifecycleEventType = LifecycleEventType = {}));
+exports.IDENTITY_LIFECYCLE_EVENT_SOURCE = '/services/identity-api';
+exports.PROJECT_LIFECYCLE_EVENT_SOURCE = '/services/project-registry-api';
+exports.LIFECYCLE_EVENT_SCHEMA_VERSION = '1.0.0';
+exports.OrganizationDeletedEventSchema = zod_1.z
+    .object({
+    id: zod_1.z.string(),
+})
+    .strict();
+exports.ProjectDeletedEventSchema = zod_1.z
+    .object({
+    id: zod_1.z.string(),
+    orgId: zod_1.z.string(),
+    projectId: zod_1.z.string(),
+})
+    .strict();
+exports.UserDeletedEventSchema = zod_1.z
+    .object({
+    id: zod_1.z.string(),
+    orgId: zod_1.z.string().optional(),
+})
+    .strict();
+//# sourceMappingURL=lifecycle-events.js.map

package/dist/lifecycle-events/lib/lifecycle-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-events.js","sourceRoot":"","sources":["../../../src/lifecycle-events/lib/lifecycle-events.ts"],"names":[],"mappings":";;;AA2BA,6BAAwB;AAOxB,IAAY,kBAcX;AAdD,WAAY,kBAAkB;IAE5B,+EAAyD,CAAA;IAEzD,gEAA0C,CAAA;IAS1C,uDAAiC,CAAA;AACnC,CAAC,EAdW,kBAAkB,kCAAlB,kBAAkB,QAc7B;AAGY,QAAA,+BAA+B,GAAG,wBAAiC,CAAC;AAGpE,QAAA,8BAA8B,GACzC,gCAAyC,CAAC;AAG/B,QAAA,8BAA8B,GAAG,OAAgB,CAAC;AAOlD,QAAA,8BAA8B,GAAG,OAAC;KAC5C,MAAM,CAAC;IACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;CACf,CAAC;KACD,MAAM,EAAE,CAAC;AAOC,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;CACtB,CAAC;KACD,MAAM,EAAE,CAAC;AAOC,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,CAAC;IACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC;KACD,MAAM,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/kernel-contracts",
-  "version": "0.16.2",
+  "version": "0.17.0",
   "description": "Consolidated Xema OS kernel wire contracts — pure types + zod schemas for the 32 kernel protocol surfaces. One package, one npm scope, wildcard per-surface subpath exports. No framework/runtime deps.",
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",

package/src/lifecycle-events/index.ts

@@ -0,0 +1 @@
+export * from './lib/lifecycle-events';

package/src/lifecycle-events/lib/lifecycle-events.ts

@@ -0,0 +1,103 @@
+// ═══════════════════════════════════════════════════════════════════════════
+// ── Canonical platform lifecycle-deletion event contracts ──
+//
+// `organization.organization.deleted`, `project.project.deleted`, and
+// `identity.user.deleted` are the three CANONICAL cascade-cleanup signals every
+// stateful biome subscribes to. Before this contract existed, each of the
+// ~14 consumers hand-re-declared the same `type` string, `source`, and payload
+// `data` shape in its own `consumed-events.registry.ts` — drift waiting to
+// happen on a producer-side change.
+//
+// These contracts live in the KERNEL (Layer 0) so a subscriber depends on the
+// kernel package, never on the producer service. The producers
+// (`project-registry-api` for project, `identity-api` for org + user) import
+// the SAME enum + schema to emit; subscribers import them to match — one source
+// of truth, zero service-to-service code coupling. This mirrors the
+// search-source / mail-source registries (`@xemahq/kernel-contracts/*`) that
+// let a consumer act on any producer's events without importing its client.
+//
+// NOTE: This subpath holds the type strings + payload schemas ONLY. The
+// descriptor wrapper (`defineEvent(...)`) lives in the Layer-1 runtime package
+// `@xemahq/events`, which Layer 0 must not depend on. A consumer keeps its
+// `defineEvent({ type: ..., data: ... })` call but sources the `type` from
+// `LifecycleEventType` and the `data` from these schemas instead of re-typing
+// them. Do not change a `type` string without a coordinated migration — every
+// other service matches on it.
+// ═══════════════════════════════════════════════════════════════════════════
+
+import { z } from 'zod';
+
+/**
+ * Closed set of canonical platform lifecycle-deletion event `type`s. These are
+ * the wire identifiers consumers subscribe to for cascade cleanup — never a
+ * free-form string at a call site.
+ */
+export enum LifecycleEventType {
+  /** An organization was deleted — cascade-delete all of the org's data. */
+  OrganizationDeleted = 'organization.organization.deleted',
+  /** A project was deleted — cascade-delete all project-scoped data. */
+  ProjectDeleted = 'project.project.deleted',
+  /**
+   * A user was deleted — cascade-delete that user's user-scoped data.
+   *
+   * The wire string is `user.user.deleted` — the value identity-api (the
+   * producer) actually emits (`WebhookEvents.USER_DELETED`). The lone
+   * consumer that today declares `identity.user.deleted` (memory-api) never
+   * fires on a real delete; adopting this descriptor fixes that mismatch.
+   */
+  UserDeleted = 'user.user.deleted',
+}
+
+/** Producer URI of the org + user deletion events (identity is the source). */
+export const IDENTITY_LIFECYCLE_EVENT_SOURCE = '/services/identity-api' as const;
+
+/** Producer URI of the project deletion event. */
+export const PROJECT_LIFECYCLE_EVENT_SOURCE =
+  '/services/project-registry-api' as const;
+
+/** Schema version stamped on every canonical lifecycle-deletion event. */
+export const LIFECYCLE_EVENT_SCHEMA_VERSION = '1.0.0' as const;
+
+/**
+ * `organization.organization.deleted` payload. Identity emits only the org id;
+ * the org id also rides the envelope's `ehorgid` extension, so consumers that
+ * scope by extension never even read the body.
+ */
+export const OrganizationDeletedEventSchema = z
+  .object({
+    id: z.string(),
+  })
+  .strict();
+
+/**
+ * `project.project.deleted` payload. Canonical cascade signal — carries the
+ * full project triple so a consumer can scope deletes by `orgId` and/or
+ * `projectId` without a lookup.
+ */
+export const ProjectDeletedEventSchema = z
+  .object({
+    id: z.string(),
+    orgId: z.string(),
+    projectId: z.string(),
+  })
+  .strict();
+
+/**
+ * `identity.user.deleted` payload. `orgId` is optional because a user is a
+ * cross-org subject; an org-scoped consumer reads `ehorgid` from the envelope
+ * to bound the cascade to its own org.
+ */
+export const UserDeletedEventSchema = z
+  .object({
+    id: z.string(),
+    orgId: z.string().optional(),
+  })
+  .strict();
+
+export type OrganizationDeletedEventPayload = z.infer<
+  typeof OrganizationDeletedEventSchema
+>;
+export type ProjectDeletedEventPayload = z.infer<
+  typeof ProjectDeletedEventSchema
+>;
+export type UserDeletedEventPayload = z.infer<typeof UserDeletedEventSchema>;