fix(plan-59 Phase 5a): rename HDS_NOOP_STREAM_ID :hds:noop → hds-noop

Pryv api-server rejects `:` prefixed stream ids as system-stream
namespaces; `:hds:` is not a registered namespace on open-pryv.io so
streams.create({id: ':hds:noop'}) returns invalid-request-structure.
A regular user stream (plain `hds-noop`) works in any default store.

Surfaced by verify-formspec.mjs on first live demo run. Tests + design
brief updated to match.

Author: perki

tests/cmcFormSpec.test.js

@@ -29,8 +29,8 @@ describe('[CFSP] cmcFormSpec helpers', function () {
     });
 
     it('[CFS02] HDS_NOOP_STREAM_ID + permission match the brief', () => {
-      assert.equal(cmcFormSpec.HDS_NOOP_STREAM_ID, ':hds:noop');
-      assert.deepEqual(cmcFormSpec.HDS_NOOP_PERMISSION, { streamId: ':hds:noop', level: 'read' });
+      assert.equal(cmcFormSpec.HDS_NOOP_STREAM_ID, 'hds-noop');
+      assert.deepEqual(cmcFormSpec.HDS_NOOP_PERMISSION, { streamId: 'hds-noop', level: 'read' });
     });
   });
 
@@ -45,7 +45,7 @@ describe('[CFSP] cmcFormSpec helpers', function () {
       const spec = basicSpec({ permissions: [] });
       const out = cmcFormSpec.deriveCmcPermissions(spec);
       assert.equal(out.length, 1);
-      assert.equal(out[0].streamId, ':hds:noop');
+      assert.equal(out[0].streamId, 'hds-noop');
       assert.equal(out[0].level, 'read');
     });
 
@@ -54,7 +54,7 @@ describe('[CFSP] cmcFormSpec helpers', function () {
       const out = cmcFormSpec.deriveCmcPermissions(spec);
       // All filtered → placeholder injected
       assert.equal(out.length, 1);
-      assert.equal(out[0].streamId, ':hds:noop');
+      assert.equal(out[0].streamId, 'hds-noop');
     });
   });
 

ts/cmc/formSpec.ts

@@ -37,7 +37,7 @@ import type {
 export const FORM_SPEC_EVENT_TYPE = 'hds:form-spec-v1';
 
 /** The HDS no-op permission stream — see Q-F3/F4 in the FormSpec design brief. */
-export const HDS_NOOP_STREAM_ID = ':hds:noop';
+export const HDS_NOOP_STREAM_ID = 'hds-noop';
 
 /** Permission level used by the chat-only placeholder. Read on an empty stream is a no-op. */
 export const HDS_NOOP_PERMISSION: Permission = { streamId: HDS_NOOP_STREAM_ID, level: 'read' };
@@ -197,12 +197,17 @@ export async function readOfferWithFormSpec (
 /**
  * Derive the `requestedPermissions` array for `cmc.createInvite` from a
  * FormSpec. If the FormSpec has no real permissions (chat-only data set),
- * inject the `:hds:noop` placeholder so the CMC schema's non-empty-
+ * inject the `hds-noop` placeholder so the CMC schema's non-empty-
  * permissions check passes (Q-F4 lock).
  *
  * The placeholder grants `read` on an empty patient-side stream — a
- * functional no-op. The patient's hds-webapp provisions `:hds:noop` at
+ * functional no-op. The patient's hds-webapp provisions `hds-noop` at
  * first launch (Q-F3: patient-only).
+ *
+ * Note: the stream is plain `hds-noop` (no colon prefix) — `:hds:` is
+ * not a registered system-stream namespace on open-pryv.io, so the
+ * api-server's streams.create rejects `:hds:noop` with `invalid-request-
+ * structure`. A regular user stream works fine.
  */
 export function deriveCmcPermissions (formSpec: FormSpec): Permission[] {
   const perms = (formSpec.permissions || []).filter(p => p && p.streamId && p.level);
@@ -211,7 +216,7 @@ export function deriveCmcPermissions (formSpec: FormSpec): Permission[] {
 }
 
 /**
- * Patient-side: provision the `:hds:noop` stream used by the chat-only
+ * Patient-side: provision the `hds-noop` stream used by the chat-only
  * placeholder permission. Idempotent — re-runs OK.
  */
 export async function provisionHdsNoop (connection: pryv.Connection): Promise<void> {