feat(concord): add kind registry, control entity kinds, permission bitfield

- ConcordKinds: every Concord event kind (envelope, chat, guestbook, control,
  rekey, bookkeeping), pinned to Concord v2 (Armada kinds.ts)
- ControlEntityKind: the kind-3308 `vsk` sub-kinds (metadata=0..dissolved=10)
  with wire<->enum mapping
- ConcordPermissions: u64 permission bitfield with frozen bit positions, union
  (effective = OR of a member's roles), and decimal-string wire codec that
  preserves the high bits (no floating-point corruption)

Tests cover frozen bit positions, union, decimal round-trip incl. bit 63, blank
and garbage handling, and vsk mapping. Green on :quartz:jvmTest.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CzJ2Cwo8tg4oZq43oRa3ig
This commit is contained in:
Claude
2026-07-09 21:46:40 +00:00
parent 30b6d70cfc
commit 828792eb40
4 changed files with 324 additions and 0 deletions
@@ -0,0 +1,95 @@
/*
* Copyright (c) 2025 Vitor Pamplona
*
* Permission is hereby granted, free of charge, to any person obtaining a copy of
* this software and associated documentation files (the "Software"), to deal in
* the Software without restriction, including without limitation the rights to use,
* copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the
* Software, and to permit persons to whom the Software is furnished to do so,
* subject to the following conditions:
*
* The above copyright notice and this permission notice shall be included in all
* copies or substantial portions of the Software.
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
* AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
* WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
*/
package com.vitorpamplona.quartz.concord.cord04Roles
/**
* A member's Concord permission set (CORD-04): a `u64` bitfield of frozen bit
* positions. On the wire it is encoded as a **decimal string** (not a JSON
* number) to prevent floating-point corruption of the high bits.
*
* Bit positions are frozen forever — new permissions claim the next free bit,
* retired ones are burned and never reused. Bit 7 is retired; bits 1012 are
* reserved.
*
* "A member's effective permissions are the union of their Roles' bits."
*/
@JvmInline
value class ConcordPermissions(
val bits: ULong,
) {
fun has(bit: Int): Boolean = (bits and (1uL shl bit)) != 0uL
/** True if every bit set in [other] is also set here (used for role-vs-actor checks). */
fun hasAll(other: ConcordPermissions): Boolean = (bits and other.bits) == other.bits
infix fun union(other: ConcordPermissions): ConcordPermissions = ConcordPermissions(bits or other.bits)
fun with(bit: Int): ConcordPermissions = ConcordPermissions(bits or (1uL shl bit))
fun without(bit: Int): ConcordPermissions = ConcordPermissions(bits and (1uL shl bit).inv())
/** The wire encoding: an unsigned decimal string with no leading zeros. */
fun toWire(): String = bits.toString()
companion object {
val NONE = ConcordPermissions(0uL)
// Frozen bit positions (CORD-04 §Permission Bits).
const val MANAGE_ROLES = 0
const val MANAGE_CHANNELS = 1
const val MANAGE_METADATA = 2
const val KICK = 3
const val BAN = 4
const val MANAGE_MESSAGES = 5
const val CREATE_INVITE = 6
// bit 7 retired — never reuse
const val VIEW_AUDIT_LOG = 8
const val MENTION_EVERYONE = 9
// bits 10-12 reserved
fun of(vararg bits: Int): ConcordPermissions {
var acc = 0uL
for (b in bits) acc = acc or (1uL shl b)
return ConcordPermissions(acc)
}
/**
* Parses the wire form — a decimal `u64` string. Returns [NONE] for a
* blank value; throws [NumberFormatException] for a malformed or
* out-of-range one so a corrupt edition is rejected rather than folded.
*/
fun fromWire(wire: String): ConcordPermissions {
if (wire.isBlank()) return NONE
return ConcordPermissions(wire.trim().toULong())
}
/** Non-throwing variant: returns null on a malformed value. */
fun fromWireOrNull(wire: String): ConcordPermissions? =
try {
fromWire(wire)
} catch (_: NumberFormatException) {
null
}
}
}
@@ -0,0 +1,66 @@
/*
* Copyright (c) 2025 Vitor Pamplona
*
* Permission is hereby granted, free of charge, to any person obtaining a copy of
* this software and associated documentation files (the "Software"), to deal in
* the Software without restriction, including without limitation the rights to use,
* copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the
* Software, and to permit persons to whom the Software is furnished to do so,
* subject to the following conditions:
*
* The above copyright notice and this permission notice shall be included in all
* copies or substantial portions of the Software.
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
* AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
* WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
*/
package com.vitorpamplona.quartz.concord.cord04Roles
/**
* The Control Plane entity sub-kinds (the `vsk` tag on a kind-3308 edition),
* pinned to the Concord v2 reference client (`concord-v2/lib/kinds.ts`).
*
* On the wire the `vsk` value is a decimal string with no leading zeros
* ([wire]); [ControlEntityKind.of] maps that string back to the enum.
*/
enum class ControlEntityKind(
val wire: String,
) {
/** Community metadata (name, icon, description). */
METADATA("0"),
/** A Role definition (name, position, permissions, scope, color). */
ROLE("1"),
/** A Channel definition (name, private flag, voice flag). */
CHANNEL("2"),
/** A member→roles Grant. */
GRANT("3"),
/** The community-wide Banlist. */
BANLIST("4"),
/** A live invite-link registry entry (Public/Private source of truth). */
INVITE_LIVE("6"),
/** The aggregate invite registry. */
INVITE_REGISTRY("8"),
/** A revoked invite-link marker. */
INVITE_REVOKED("9"),
/** The dissolution tombstone (terminal). */
DISSOLVED("10"),
;
companion object {
private val byWire = entries.associateBy { it.wire }
fun of(wire: String): ControlEntityKind? = byWire[wire]
}
}
@@ -0,0 +1,66 @@
/*
* Copyright (c) 2025 Vitor Pamplona
*
* Permission is hereby granted, free of charge, to any person obtaining a copy of
* this software and associated documentation files (the "Software"), to deal in
* the Software without restriction, including without limitation the rights to use,
* copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the
* Software, and to permit persons to whom the Software is furnished to do so,
* subject to the following conditions:
*
* The above copyright notice and this permission notice shall be included in all
* copies or substantial portions of the Software.
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
* AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
* WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
*/
package com.vitorpamplona.quartz.concord.events
/**
* Every Nostr event kind used by the Concord protocol, pinned to the Concord v2
* reference client (Soapbox Armada, `concord-v2/lib/kinds.ts`) for wire interop.
*
* Rumor kinds (9, 1111, 3302, 3303, 3306, 3308, 3309, 3310, 3312, 3313, 23311,
* 23313, 7, 5) never appear on the wire on their own — they are always sealed
* and wrapped by [com.vitorpamplona.quartz.concord.envelope.ConcordStreamEnvelope].
* Only the wrap (1059/21059) and the bare bookkeeping kinds (33301, 13302, 13303)
* are published directly.
*/
object ConcordKinds {
// Envelope (CORD-01)
const val WRAP = 1059
const val WRAP_EPHEMERAL = 21059
const val SEAL_ENCRYPTED = 20013
const val SEAL_PLAINTEXT = 20014
// Chat Plane rumors (CORD-03)
const val MESSAGE = 9
const val COMMENT = 1111
const val REACTION = 7
const val DELETE = 5
const val EDIT = 3302
const val WEBXDC = 3310
const val TYPING = 23311
const val VOICE_PRESENCE = 23313
// Guestbook Plane rumors (CORD-02)
const val JOIN_LEAVE = 3306
const val KICK = 3309
const val SNAPSHOT = 3312
// Person-addressed rumor (CORD-05)
const val DIRECT_INVITE = 3313
// Control / rekey rumors (CORD-02/04/06)
const val CONTROL = 3308
const val REKEY = 3303
// Bare bookkeeping events
const val INVITE_BUNDLE = 33301 // addressable, CORD-05
const val COMMUNITY_LIST = 13302 // private self-list, CORD-05
const val INVITE_LIST = 13303 // private self-list, CORD-05
}
@@ -0,0 +1,97 @@
/*
* Copyright (c) 2025 Vitor Pamplona
*
* Permission is hereby granted, free of charge, to any person obtaining a copy of
* this software and associated documentation files (the "Software"), to deal in
* the Software without restriction, including without limitation the rights to use,
* copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the
* Software, and to permit persons to whom the Software is furnished to do so,
* subject to the following conditions:
*
* The above copyright notice and this permission notice shall be included in all
* copies or substantial portions of the Software.
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
* AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
* WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
*/
package com.vitorpamplona.quartz.concord.cord04Roles
import com.vitorpamplona.quartz.concord.cord04Roles.ConcordPermissions.Companion.BAN
import com.vitorpamplona.quartz.concord.cord04Roles.ConcordPermissions.Companion.KICK
import com.vitorpamplona.quartz.concord.cord04Roles.ConcordPermissions.Companion.MANAGE_ROLES
import com.vitorpamplona.quartz.concord.cord04Roles.ConcordPermissions.Companion.MENTION_EVERYONE
import kotlin.test.Test
import kotlin.test.assertEquals
import kotlin.test.assertFalse
import kotlin.test.assertNull
import kotlin.test.assertTrue
class ConcordPermissionsTest {
@Test
fun bitPositionsAreFrozen() {
assertEquals(0, MANAGE_ROLES)
assertEquals(3, KICK)
assertEquals(4, BAN)
assertEquals(9, MENTION_EVERYONE)
}
@Test
fun hasChecksIndividualBits() {
val p = ConcordPermissions.of(KICK, BAN)
assertTrue(p.has(KICK))
assertTrue(p.has(BAN))
assertFalse(p.has(MANAGE_ROLES))
}
@Test
fun unionIsBitwiseOr() {
val a = ConcordPermissions.of(KICK)
val b = ConcordPermissions.of(BAN)
val u = a union b
assertTrue(u.has(KICK))
assertTrue(u.has(BAN))
// effective permissions are the union of a member's roles' bits
assertEquals(ConcordPermissions.of(KICK, BAN).bits, u.bits)
}
@Test
fun wireEncodingIsDecimalString() {
// KICK(3) | BAN(4) = 0b11000 = 24
assertEquals("24", ConcordPermissions.of(KICK, BAN).toWire())
assertEquals(ConcordPermissions.of(KICK, BAN).bits, ConcordPermissions.fromWire("24").bits)
}
@Test
fun highBitsSurviveDecimalRoundTripWithoutFloatingPointLoss() {
// Bit 63 set — a value that would be corrupted if parsed as a JSON double.
val hi = ConcordPermissions(1uL shl 63)
val wire = hi.toWire()
assertEquals("9223372036854775808", wire)
assertEquals(hi.bits, ConcordPermissions.fromWire(wire).bits)
}
@Test
fun blankParsesToNoneAndGarbageIsRejected() {
assertEquals(ConcordPermissions.NONE.bits, ConcordPermissions.fromWire("").bits)
assertNull(ConcordPermissions.fromWireOrNull("not-a-number"))
assertNull(ConcordPermissions.fromWireOrNull("-1"))
}
@Test
fun entityKindWireMappingMatchesReference() {
assertEquals(ControlEntityKind.METADATA, ControlEntityKind.of("0"))
assertEquals(ControlEntityKind.ROLE, ControlEntityKind.of("1"))
assertEquals(ControlEntityKind.CHANNEL, ControlEntityKind.of("2"))
assertEquals(ControlEntityKind.GRANT, ControlEntityKind.of("3"))
assertEquals(ControlEntityKind.BANLIST, ControlEntityKind.of("4"))
assertEquals(ControlEntityKind.INVITE_LIVE, ControlEntityKind.of("6"))
assertEquals(ControlEntityKind.INVITE_REGISTRY, ControlEntityKind.of("8"))
assertEquals(ControlEntityKind.INVITE_REVOKED, ControlEntityKind.of("9"))
assertEquals(ControlEntityKind.DISSOLVED, ControlEntityKind.of("10"))
assertNull(ControlEntityKind.of("7")) // retired/unknown
}
}