feat: checkpoint

platform/spec/audit/actor.ts

@@ -0,0 +1,17 @@
+import z from "zod";
+
+import { AuditUserSchema, AuditUserType } from "./user.ts";
+
+export const AuditActorSchema = z.object({
+  user: AuditUserSchema,
+});
+
+export const auditors = {
+  system: AuditActorSchema.parse({
+    user: {
+      typeId: AuditUserType.System,
+    },
+  }),
+};
+
+export type AuditActor = z.infer<typeof AuditActorSchema>;

platform/spec/audit/user.ts

@@ -0,0 +1,17 @@
+import z from "zod";
+
+export enum AuditUserType {
+  Unknown = 0,
+  Identity = 1,
+  System = 2,
+  Service = 3,
+  Other = 99,
+}
+
+export const AuditUserSchema = z.object({
+  typeId: z.enum(AuditUserType).describe("The account type identifier."),
+  uid: z
+    .string()
+    .optional()
+    .describe("The unique user identifier. For example, the Windows user SID, ActiveDirectory DN or AWS user ARN."),
+});