feat(contracts): @insignia/iios-contracts — scope, enums, platform ports, CloudEvents, errors

Verbatim IiosPlatformPorts from the bottom-up atlas; orgId/appId required scope (KG-02); PolicyDeniedError for fail-closed. Vitest as workspace test runner. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-30 20:59:34 +05:30
parent c00d038df2
commit fbea291609
12 changed files with 1248 additions and 3 deletions
@@ -0,0 +1,16 @@
+/**
+ * The six scope vectors (Reference Arch §08, Data Model §02).
+ *
+ * `orgId` + `appId` are REQUIRED. Nullable scope is treated as global access —
+ * a security hole the critics flag as a kill gate (Critics KG-02). The remaining
+ * dimensions are optional and carry no kernel logic yet; later phases use them.
+ */
+export interface ScopeVector {
+  orgId: string;
+  appId: string;
+  buId?: string;
+  tenantId?: string;
+  workspaceId?: string;
+  projectId?: string;
+  userScopeId?: string;
+}