101 lines
4.5 KiB
Go
101 lines
4.5 KiB
Go
// Package identity validates stable, evidence-anchored location identity.
|
|
package identity
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
"gitea.maximumdirect.net/eric/notarius/internal/framework/contracts"
|
|
"gitea.maximumdirect.net/eric/notarius/internal/framework/pipeline"
|
|
"gitea.maximumdirect.net/eric/notarius/internal/modules/dnd"
|
|
domainidentity "gitea.maximumdirect.net/eric/notarius/internal/modules/dnd/locations/identity"
|
|
"gitea.maximumdirect.net/eric/notarius/internal/modules/dnd/shared/diagnostics"
|
|
locationshape "gitea.maximumdirect.net/eric/notarius/internal/modules/dnd/validate/locationregistry/shape"
|
|
)
|
|
|
|
const (
|
|
Key = "normalize/dnd/location-registry/identity"
|
|
ReasonCode = "invalid_location_identity"
|
|
policy = domainidentity.Policy
|
|
correctionPolicy = "dnd.location_registry.validator.identity.v2"
|
|
)
|
|
|
|
type Options struct{}
|
|
type Validator struct{}
|
|
|
|
var _ contracts.TypedValidator[dnd.LocationRegistry] = (*Validator)(nil)
|
|
var _ pipeline.CheckpointFingerprintProvider = (*Validator)(nil)
|
|
|
|
func New(Options) *Validator { return &Validator{} }
|
|
func (v *Validator) Name() string { return Key }
|
|
func (v *Validator) ExecutionClass() contracts.ExecutionClass {
|
|
return contracts.ExecutionClassDeterministic
|
|
}
|
|
func (v *Validator) CheckpointFingerprints() []pipeline.CheckpointFingerprint {
|
|
return []pipeline.CheckpointFingerprint{{Name: "policy", Value: policy}, {Name: "correction_policy", Value: correctionPolicy}}
|
|
}
|
|
|
|
func (v *Validator) Validate(_ context.Context, req contracts.TypedValidationRequest[dnd.LocationRegistry]) (contracts.ValidationResult, error) {
|
|
if err := locationshape.Validate(req.Value); err != nil {
|
|
return contracts.ValidationResult{Approved: true}, nil
|
|
}
|
|
identityIssues := domainidentity.ValidateList(req.Value)
|
|
if len(identityIssues) == 0 {
|
|
return contracts.ValidationResult{Approved: true}, nil
|
|
}
|
|
issues := make([]string, len(identityIssues))
|
|
var corrections diagnostics.Corrections
|
|
for index, issue := range identityIssues {
|
|
issues[index] = fmt.Sprintf("locations[%d] %s: %s", issue.RecordIndex, issue.Code, diagnostics.Quote(issue.Value))
|
|
if issue.RecordIndex < 0 || issue.RecordIndex >= len(req.Value.Locations) {
|
|
continue
|
|
}
|
|
location := req.Value.Locations[issue.RecordIndex]
|
|
corrections.Add(string(issue.Code), locationIdentityCorrection(issue.Code), fmt.Sprintf("Affected location %s %s.", diagnostics.Quote(location.Name), diagnostics.SourceRange(location.SourceRefs)))
|
|
}
|
|
return contracts.ValidationResult{
|
|
Approved: false,
|
|
ReasonCode: ReasonCode,
|
|
Message: diagnostics.Aggregate("invalid location identity", issues),
|
|
CorrectionGuidance: corrections.Guidance("Correct the duplicate-group proposals and return the complete replacement proposal response"),
|
|
}, nil
|
|
}
|
|
|
|
func locationIdentityCorrection(code domainidentity.IssueCode) string {
|
|
switch code {
|
|
case domainidentity.IssueEmptyCanonicalName:
|
|
return "Select a canonical proposal member with a nonblank, transcript-supported proper location name."
|
|
case domainidentity.IssueMissingEvidence:
|
|
return "Select a canonical proposal member that has direct transcript evidence; do not discard all supported evidence for a location."
|
|
case domainidentity.IssueInvalidID, domainidentity.IssueIDMismatch:
|
|
return "Revise the proposal so its canonical location member has a valid name and evidence anchor; Notarius derives durable identity without model input."
|
|
case domainidentity.IssueDuplicateID:
|
|
return "Do not use proposals that collapse distinct locations or evidence anchors into one canonical identity; group only records that describe the same location."
|
|
default:
|
|
return "Revise the duplicate-group proposal so every canonical location is transcript-supported and distinct."
|
|
}
|
|
}
|
|
|
|
func Spec() pipeline.ValidatorSpec {
|
|
return pipeline.ValidatorSpec{Key: Key, ExecutionClass: contracts.ExecutionClassDeterministic}
|
|
}
|
|
|
|
func Register(registry *pipeline.ValidatorRegistry) error {
|
|
return pipeline.RegisterTypedValidatorBuilder(registry, dnd.LocationRegistryKind, Spec(), validateOptions, func(request pipeline.BuildRequest) (contracts.TypedValidator[dnd.LocationRegistry], error) {
|
|
options, err := DecodeOptions(request.Options)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return New(options), nil
|
|
})
|
|
}
|
|
|
|
func DecodeOptions(options map[string]any) (Options, error) {
|
|
if err := pipeline.RejectUnknownOptions(options); err != nil {
|
|
return Options{}, err
|
|
}
|
|
return Options{}, nil
|
|
}
|
|
|
|
func validateOptions(options map[string]any) error { _, err := DecodeOptions(options); return err }
|