Web Bot Auth signing, Broker purchases, the final money rules and the SDK harness capabilities

.github/workflows/sdk-types-ci.yml

@@ -1,7 +1,8 @@
 name: sdk-types-ci
 
-# Drift gate for the generated TYPES EXPORT (Pydantic + Zod). Regenerates from the
-# proto via scripts/gen-sdk-types.sh and fails if the committed output differs — the
+# Drift gate for the generated TYPES EXPORT (Pydantic + Zod) and the published JSON
+# Schemas (gen/jsonschema/). Regenerates from the proto via scripts/gen-sdk-types.sh and
+# fails if the committed output differs — the
 # same regenerate-and-diff contract as the gen/ drift gate, for the SDK types. Runs
 # only when the proto, the descriptor, the generators, or the committed output change.
 on:
@@ -16,6 +17,7 @@ on:
       - 'conformance/**'
       - 'gen/python/**'
       - 'gen/ts/**'
+      - 'gen/jsonschema/**'
       - 'sdk/ts/**'
       - 'sdk/python/**'
       # The repo-root package.json is the map a CONSUMER resolves through (npm has
@@ -60,17 +62,19 @@ jobs:
       - name: regenerate types export
         run: ./scripts/gen-sdk-types.sh
 
-      # The whole generated wire/ directories, so a NEW generated file (e.g. wire/unique.py)
-      # is gated the day it is emitted. The untracked sweep is load-bearing: `git diff` cannot
-      # see a file that was generated but never committed, so a file list alone passes green.
-      # wire/base.py and wire/base.ts are hand-written seams (never regenerated, so they cannot
-      # drift); the vocab constants are generated by buf and gated separately.
+      # The whole generated wire/ directories and the published JSON Schemas, so a NEW
+      # generated file (e.g. wire/unique.py, or the schema of a new message) is gated the day
+      # it is emitted. The untracked sweep is load-bearing: `git diff` cannot see a file that
+      # was generated but never committed, so a file list alone passes green. wire/base.py,
+      # wire/base.ts, wire/schemas.py and gen/jsonschema/{jsonschema.go,README.md} are
+      # hand-written (never regenerated, so they cannot drift); the vocab constants are
+      # generated by buf and gated separately.
       - name: assert no drift
         run: |
-          if ! git diff --exit-code -- gen/python/wire gen/ts/wire \
-             || [ -n "$(git ls-files --others --exclude-standard -- gen/python/wire gen/ts/wire)" ]; then
-            echo "::error::Generated types export is out of sync with the proto. Run scripts/gen-sdk-types.sh and commit gen/python/wire/ + gen/ts/wire/."
-            git status --short -- gen/python/wire gen/ts/wire
+          if ! git diff --exit-code -- gen/python/wire gen/ts/wire gen/ts/strict gen/jsonschema \
+             || [ -n "$(git ls-files --others --exclude-standard -- gen/python/wire gen/ts/wire gen/ts/strict gen/jsonschema)" ]; then
+            echo "::error::Generated types export is out of sync with the proto. Run scripts/gen-sdk-types.sh and commit gen/python/wire/ + gen/ts/wire/ + gen/ts/strict/ + gen/jsonschema/."
+            git status --short -- gen/python/wire gen/ts/wire gen/ts/strict gen/jsonschema
             exit 1
           fi
 
@@ -81,7 +85,7 @@ jobs:
       # protovalidate by the Go conformance suite (proto-ci) and gated for drift there.
       - name: Python (Pydantic) parity
         run: |
-          python -m pip install -q "pydantic>=2.0" pytest
+          python -m pip install -q "pydantic>=2.0" "jsonschema>=4.23" pytest
           PYTHONPATH=gen/python pytest gen/python/tests -q
 
       # `npm test` here typechecks wire/ and vocab/ at target ES2020 with the default

README.md

@@ -118,6 +118,23 @@ from wire.models import Offer, Pricing
 from vocab import pricingunits
 ```
 
+### JSON Schema
+
+The same generator run also emits one self-contained JSON Schema (draft 2020-12) per
+message under [`gen/jsonschema/`](gen/jsonschema), named by the fully-qualified message
+name, in a default and a strict variant. The strict variant refuses unknown fields at
+every depth, so a conformance check can catch an unknown or misspelled field. All three
+packages ship them: the Go module as that directory (plus `jsonschema.Load` and
+`jsonschema.FS` in package `github.com/FORA-Protocol/protocol/gen/jsonschema`), the
+Python package through `wire.schemas.load(name, strict=...)`, and the npm package under
+`@fora-protocol/sdk/jsonschema/*`. The [schemas' README](gen/jsonschema/README.md)
+records how they treat field naming, `google.protobuf.Struct` and 64-bit integers.
+
+```python
+from wire import schemas
+schema = schemas.load("fora.v1.ResourceResponse", strict=True)
+```
+
 ## Protocol SDK
 
 Beyond the generated wire types, the repo ships a hand-written **protocol SDK** in all