@agenticprimitives/fabric 0.0.0-alpha.5 → 0.0.0-alpha.9

package/CLAUDE.md

@@ -27,8 +27,18 @@ adapter ships from `./cloudflare`.
   `CaseState` enums; `createDurableObjectInteractionStore` is their durable home on the gateway DO,
   reachable as `do.interactions`. **The store exposes transitions, never state assignment** — the
   creditor discharges, not the debtor, and persistence must not become a bypass.
-- **Next:** the `MessageKind`/`CaseState` REMOVAL (spec 340 §R — the mapping is total and
-  compiler-checked; the rewrite spans 26 files and is its own wave); an interaction-aware ingress that
+- **W10a DONE (spec 340):** the case flow EMITS. `caseTransitionEmissions` + `applyCaseEmissions` put
+  `approve`/`deny`/`expire` into the decision machine and `issue-credential`/`revoke` into the
+  commitment machine, applied THROUGH those machines (never state assignment), wired into the
+  interaction store the Home drives. `deliver-credential` deliberately emits nothing — completing the
+  work discharges no obligation (ADR-0058 §15).
+- **W10b DONE (spec 340):** `CaseState` is EXECUTION-ONLY (11 → 8). `approved`/`denied`/`expired`/
+  `revoked` removed, `closed` added. The transition VERBS are unchanged — which is why stored logs
+  replay untouched and no migration exists. `issue-credential`'s ordering is now a cross-machine
+  precondition (`requires-granted-decision`), projected onto `ExchangeRecordV1.decision` for the
+  reducer path, because that path had been getting the guarantee free from the FSM edge.
+- **Next:** `MessageEnvelopeV1.kind` — the LAST enum, and the hard one: it is inside the signed wire
+  hash, so removal is an `ap.message.v2` cutover with re-signing, not a cleanup (spec 340 §R.1/§R.3); an interaction-aware ingress that
   opens/joins an Interaction rather than only writing an Exchange; on-chain `atl:gatewayRoot` record
   (contracts, separate); `A2aTaskDO`/`SessionStoreDO` absorption + `alarm()` drain; `fetch`/`alarm`
   e2e via vitest-pool-workers.

package/README.md

@@ -1,21 +1,21 @@
 # @agenticprimitives/fabric
 
-The **Agentic Interaction Fabric** (spec 316): the A2A-native substrate that absorbs `messaging`
-(envelope/inbox) and `interactions` (case/run) into ONE canonical exchange object over a two-level
-exec/case state machine. Transport-agnostic core; the Cloudflare gateway ships as a `./cloudflare` adapter.
+Ring-0 **operational** realization of Agentic Interaction. Semantics live under `apix:`
+([ADR-0058](../../docs/architecture/decisions/0058-agentic-interaction-canonical-bounded-context.md) ·
+[spec 340](../../specs/340-agentic-interaction.md)); this package owns wire types, reducers, and the
+Cloudflare gateway adapter — not the ontology namespace (`apfab:` retired).
 
-- **One object:** `ExchangeRecordV1` — an `ExecState` transport envelope carrying an optional 11-state
-  `CaseState` business substate, coupled by an exhaustive fail-closed table.
-- **One reducer:** `applyExchangeEvent` over a single append-only event stream (message | case | artifact |
-  transport). The inbox is a projection (`projectInboxItem`).
-- **Subpaths:** `@agenticprimitives/fabric/messaging` + `/interactions` re-export the absorbed surfaces.
+Runtime doctrine still [spec 316](../../specs/316-agentic-interaction-fabric.md) /
+[ADR-0047](../../docs/architecture/decisions/0047-agent-exchange-fabric-a2a-native.md): A2A-native
+substrate absorbing messaging + interactions into one exchange object over a two-level exec/case FSM.
 
-Authority is never satisfied by the exchange — a request carries an `authorityRef`; approving a case advances
-the lifecycle, it never unlocks a resource (ADR-0041).
+- **Exchange:** `ExchangeRecordV1` — `ExecState` + optional `CaseState`, fail-closed coupling.
+- **Interaction (spec 340):** `InteractionRecordV1` + profiles + context snapshots on
+  `PrincipalGatewayDO` — **in package; apps still use demo-a2a `InteractionsDO` + vault board**.
+- **Subpaths:** `@agenticprimitives/fabric/messaging` + `/interactions`.
 
-See `CLAUDE.md` for the implementation guide and `../../specs/316-agentic-interaction-fabric.md` (architect
-of record) + `../../docs/architecture/agentic-interaction-fabric-target.md` + ADR-0047.
-Interaction-flow diagrams (person↔person, org channels, cases) + XMTP/Diode alignment:
-[`docs/architecture.md`](docs/architecture.md) · commercial comparison:
-[`docs/fabric-capabilities-vs-commercial.md`](docs/fabric-capabilities-vs-commercial.md) · gaps:
-[`docs/fabric-capability-gaps.md`](docs/fabric-capability-gaps.md).
+Authority is never satisfied by the exchange (ADR-0041).
+
+**Start here for app wiring + adoption matrix:** [`docs/architecture.md`](docs/architecture.md).  
+Also: `CLAUDE.md` · [target architecture](../../docs/architecture/agentic-interaction-fabric-target.md) ·
+[commercial comparison](docs/fabric-capabilities-vs-commercial.md) · [gaps](docs/fabric-capability-gaps.md).

package/dist/case-emissions.d.ts

@@ -0,0 +1,95 @@
+import type { CanonicalAgentId } from '@agenticprimitives/types';
+import type { CommitmentRecordV1, CommitmentTransition, DecisionRecordV1, DecisionTransition, MachineRejection } from './interaction-machines.js';
+import type { CaseFsmFields, CaseTransition, CaseTransitionEventV1 } from './case-machine.js';
+/**
+ * A record this emission needs to exist before its transition can land, given in its INITIAL state.
+ *
+ * Both machines refuse a transition out of a state the record is not in — `grant` is `pending →
+ * granted`, `void` is `proposed|active → void`. So an emission that only carried a transition would be
+ * unapplicable on the first move of a case that never had a decision record. The applier creates the
+ * record if absent, in exactly this state, and then applies the transition through the machine. It
+ * does NOT create it in the resulting state; that would be the state-assignment bypass this module
+ * exists to avoid.
+ */
+export interface DecisionSeedV1 {
+    decisionId: string;
+    decider: CanonicalAgentId;
+    subject: string;
+    expiresAt?: string;
+}
+export interface CommitmentSeedV1 {
+    commitmentId: string;
+    debtor: CanonicalAgentId;
+    creditor: CanonicalAgentId;
+}
+export interface CaseEmissionsV1 {
+    decision?: {
+        seed: DecisionSeedV1;
+        transition: DecisionTransition;
+        createIfAbsent: boolean;
+    };
+    commitment?: {
+        seed: CommitmentSeedV1;
+        transition: CommitmentTransition;
+        createIfAbsent: boolean;
+    };
+}
+/**
+ * Deterministic ids, derived from the case id.
+ *
+ * Deliberately not random and not clock-derived: a case transition may be replayed (the interaction
+ * store is idempotent on `idempotencyKey`, and `processDue` re-runs sweeps), and a fresh id per replay
+ * would fork one determination into several. Same case ⇒ same decision ⇒ the second application is a
+ * no-op against a terminal state rather than a duplicate record.
+ */
+export declare function decisionIdForCase(caseId: string): string;
+export declare function commitmentIdForCase(caseId: string): string;
+/**
+ * Derive what a case transition emits. Pure, and total over `CaseTransition` — a transition with no
+ * emission returns `{}` rather than throwing, because most transitions genuinely emit nothing.
+ *
+ * Call this only for a transition the case machine ACCEPTED. It does not re-check legality: duplicating
+ * the case machine's role and ordering rules here would create a second, quietly diverging copy of them.
+ */
+export declare function caseTransitionEmissions(current: CaseFsmFields, event: CaseTransitionEventV1): CaseEmissionsV1;
+/** The case transitions that emit something. Exported so a test can assert the set rather than
+ *  restate it, and so a newly-added emitting transition shows up in a diff of this constant. */
+export declare const EMITTING_CASE_TRANSITIONS: readonly CaseTransition[];
+/** Seed a decision record in its INITIAL state. Never the resulting state — see `DecisionSeedV1`. */
+export declare function seedDecision(seed: DecisionSeedV1, at: string): DecisionRecordV1;
+/** Seed a commitment record in its INITIAL state. */
+export declare function seedCommitment(seed: CommitmentSeedV1, at: string): CommitmentRecordV1;
+/** Why an emission produced no record. `absent` is the deliberate `void`-without-a-commitment case;
+ *  the others are the owning machine's own typed rejection, surfaced rather than swallowed. */
+export type EmissionOutcome<T> = {
+    applied: true;
+    record: T;
+} | {
+    applied: false;
+    reason: MachineRejection | 'absent';
+};
+export interface CaseEmissionApplyResult {
+    decision?: EmissionOutcome<DecisionRecordV1>;
+    commitment?: EmissionOutcome<CommitmentRecordV1>;
+}
+/**
+ * Apply emissions through the OWNING machines.
+ *
+ * The point of this function is what it does not do: it never assigns a state. A record is created
+ * only in its initial state and every move goes through `applyDecisionTransition` /
+ * `applyCommitmentTransition`, so their role and ordering checks still hold — the creditor still
+ * voids, the decider still decides.
+ *
+ * Rejections are RETURNED, not thrown and not swallowed. A caller that persists these must treat a
+ * rejected emission as a fact about the record it failed to write, because a silent no-op here is
+ * indistinguishable from success and would leave a case whose determination was never recorded
+ * looking exactly like one whose determination was.
+ */
+export declare function applyCaseEmissions(emissions: CaseEmissionsV1, existing: {
+    decision: DecisionRecordV1 | null;
+    commitment: CommitmentRecordV1 | null;
+}, event: {
+    actor: CanonicalAgentId;
+    at: string;
+}): CaseEmissionApplyResult;
+//# sourceMappingURL=case-emissions.d.ts.map

package/dist/case-emissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-emissions.d.ts","sourceRoot":"","sources":["../src/case-emissions.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,OAAO,KAAK,EACV,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAEjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE9F;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,cAAc,CAAC;QAAC,UAAU,EAAE,kBAAkB,CAAC;QAAC,cAAc,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7F,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,UAAU,EAAE,oBAAoB,CAAC;QAAC,cAAc,EAAE,OAAO,CAAA;KAAE,CAAC;CACpG;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE1D;AAqGD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,qBAAqB,GAC3B,eAAe,CAmBjB;AAED;gGACgG;AAChG,eAAO,MAAM,yBAAyB,EAAE,SAAS,cAAc,EAE1C,CAAC;AAEtB,qGAAqG;AACrG,wBAAgB,YAAY,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,gBAAgB,CAS/E;AAED,qDAAqD;AACrD,wBAAgB,cAAc,CAAC,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,GAAG,kBAAkB,CAQrF;AAED;+FAC+F;AAC/F,MAAM,MAAM,eAAe,CAAC,CAAC,IACzB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,CAAC,CAAA;CAAE,GAC5B;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,gBAAgB,GAAG,QAAQ,CAAA;CAAE,CAAC;AAE5D,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAC7C,UAAU,CAAC,EAAE,eAAe,CAAC,kBAAkB,CAAC,CAAC;CAClD;AAeD;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,eAAe,EAC1B,QAAQ,EAAE;IAAE,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,kBAAkB,GAAG,IAAI,CAAA;CAAE,EACtF,KAAK,EAAE;IAAE,KAAK,EAAE,gBAAgB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC7C,uBAAuB,CAsBzB"}

package/dist/case-emissions.js

@@ -0,0 +1,208 @@
+// spec 340 W10 — what a case transition EMITS into the decision and commitment machines.
+//
+// §R.2 established that the eleven `CaseState`s were never one machine: `approved`/`denied`/`expired`
+// are **decisions**, `revoked` is what happens to a **commitment**, and the rest are **execution**. One
+// field was answering three questions with three different signers, which is why a case could be
+// `denied` while a commitment stayed outstanding with nowhere to record it.
+//
+// §R.3 names the order this has to happen in: the case flow EMITS decision and commitment records
+// FIRST, and only then can `CaseState` shrink to execution. Deleting the enum before this module
+// existed would have replaced working behaviour with machines nothing writes to — a regression wearing
+// the costume of a cleanup.
+//
+// WHAT THIS MODULE IS NOT. It derives records; it does not move state. Every emission is expressed as a
+// TRANSITION to be applied by the owning machine, never as a state assignment, so the machines keep
+// their role checks — the creditor still discharges, the decider still decides, and persistence does
+// not become a bypass (ADR-0058 §15, and the same rule `createDurableObjectInteractionStore` follows).
+//
+// NONE OF THIS IS AUTHORITY. A `grant` here records that a determination was made. It permits nothing:
+// the authority re-check happens at the moment of acting regardless of what any of these records say
+// (ADR-0041, ADR-0043).
+import { applyCommitmentTransition, applyDecisionTransition } from './interaction-machines.js';
+/**
+ * Deterministic ids, derived from the case id.
+ *
+ * Deliberately not random and not clock-derived: a case transition may be replayed (the interaction
+ * store is idempotent on `idempotencyKey`, and `processDue` re-runs sweeps), and a fresh id per replay
+ * would fork one determination into several. Same case ⇒ same decision ⇒ the second application is a
+ * no-op against a terminal state rather than a duplicate record.
+ */
+export function decisionIdForCase(caseId) {
+    return `dec_${caseId}`;
+}
+export function commitmentIdForCase(caseId) {
+    return `cmt_${caseId}`;
+}
+/**
+ * WHO IS THE CREDITOR. The approving side — `responder` / `resource-owner`.
+ *
+ * This is a derivation, not a preference. Case `revoke` is signed by `responder`/`resource-owner`, and
+ * the only creditor-only commitment transition is `void`. Under the opposite assignment (debtor =
+ * responder, creditor = requester) an issuer revoking what it granted has no legal transition at all,
+ * which contradicts a case machine that plainly permits it. One reading is self-consistent; the other
+ * is not. `issue-credential` corroborates it: its signers are `resource-owner`/`responder` and
+ * `activate` is likewise creditor-only.
+ */
+function creditorOf(c) {
+    return c.resourceOwner ?? c.responder;
+}
+/**
+ * WHO IS THE DECIDER — and why it is not one rule.
+ *
+ * For `approve`/`deny` it is `event.actor`: the party that actually made the determination. It cannot
+ * be the deciding ROLE, because the case machine accepts EITHER `responder` or `resource-owner` for
+ * those moves while the decision machine requires exactly `decision.decider`. Pinning the decider to
+ * the role would make a responder-signed approval on a case that also has a resource-owner emit a
+ * decision the decision machine then rejects as `unauthorized-actor` — a case that succeeded and an
+ * emission that silently could not land.
+ *
+ * For `expire` it is the creditor. `expire` is signed by role `any` (time is not an actor, so a
+ * deterministic sweep may record it), and attributing an expiry to whichever party happened to run the
+ * sweep would put a determination in someone's name they never made. The decision machine skips the
+ * actor check for `expire` precisely so this is possible.
+ */
+function decisionSeed(c, event, transition) {
+    return {
+        decisionId: decisionIdForCase(c.id),
+        decider: transition === 'expire' ? creditorOf(c) : event.actor,
+        subject: c.id,
+        expiresAt: c.expiresAt,
+    };
+}
+function commitmentSeed(c) {
+    return {
+        commitmentId: commitmentIdForCase(c.id),
+        debtor: c.requester,
+        creditor: creditorOf(c),
+    };
+}
+/**
+ * The mapping, stated once.
+ *
+ * `deliver-credential` is deliberately ABSENT. It completes the case, and completing the work does not
+ * discharge the obligation — that is exactly the collapse ADR-0058 §15 forbids, and `fabric` already
+ * refuses to draw that edge implicitly (`mayDischargeOnExecution` exists so a profile has to choose it
+ * in a diff). A creditor who wants to discharge does so as its own act, against the commitment
+ * machine, with its own signature.
+ *
+ * `fail` is absent for the same reason in the other direction: a failed execution is not a refusal by
+ * anyone, and recording it as one would attribute a determination nobody made.
+ */
+const EMITTING_TRANSITIONS = {
+    approve: { decision: 'grant' },
+    deny: { decision: 'refuse' },
+    expire: { decision: 'expire' },
+    // Issuing is what creates the obligation, so this emission may bring the commitment into being.
+    'issue-credential': { commitment: 'activate' },
+    revoke: { commitment: 'void' },
+};
+/**
+ * Whether an emission may bring its record into existence.
+ *
+ * Deciding CREATES a determination — there was no prior record and the act of approving or denying is
+ * what makes one. Issuing likewise creates the obligation.
+ *
+ * `void` must not. `revoke` is legal from any non-terminal case, including `submitted`, where nothing
+ * was ever approved and no obligation ever arose. Seeding a commitment there so it could immediately
+ * be voided would write a record asserting an obligation existed and was released, when neither
+ * happened — inventing history to satisfy a type. Absent a commitment, this emission is a no-op, and
+ * the case's own `revoked` state remains the honest record of what occurred.
+ */
+const CREATES_ITS_RECORD = {
+    grant: true,
+    refuse: true,
+    expire: true,
+    activate: true,
+    withdraw: false,
+    supersede: false,
+    'claim-fulfilment': false,
+    'dispute-claim': false,
+    discharge: false,
+    'assert-breach': false,
+    void: false,
+};
+/**
+ * Derive what a case transition emits. Pure, and total over `CaseTransition` — a transition with no
+ * emission returns `{}` rather than throwing, because most transitions genuinely emit nothing.
+ *
+ * Call this only for a transition the case machine ACCEPTED. It does not re-check legality: duplicating
+ * the case machine's role and ordering rules here would create a second, quietly diverging copy of them.
+ */
+export function caseTransitionEmissions(current, event) {
+    const spec = EMITTING_TRANSITIONS[event.transition];
+    if (!spec)
+        return {};
+    const out = {};
+    if (spec.decision) {
+        out.decision = {
+            seed: decisionSeed(current, event, spec.decision),
+            transition: spec.decision,
+            createIfAbsent: CREATES_ITS_RECORD[spec.decision],
+        };
+    }
+    if (spec.commitment) {
+        out.commitment = {
+            seed: commitmentSeed(current),
+            transition: spec.commitment,
+            createIfAbsent: CREATES_ITS_RECORD[spec.commitment],
+        };
+    }
+    return out;
+}
+/** The case transitions that emit something. Exported so a test can assert the set rather than
+ *  restate it, and so a newly-added emitting transition shows up in a diff of this constant. */
+export const EMITTING_CASE_TRANSITIONS = Object.keys(EMITTING_TRANSITIONS);
+/** Seed a decision record in its INITIAL state. Never the resulting state — see `DecisionSeedV1`. */
+export function seedDecision(seed, at) {
+    return {
+        decisionId: seed.decisionId,
+        state: 'pending',
+        decider: seed.decider,
+        subject: seed.subject,
+        expiresAt: seed.expiresAt,
+        updatedAt: at,
+    };
+}
+/** Seed a commitment record in its INITIAL state. */
+export function seedCommitment(seed, at) {
+    return {
+        commitmentId: seed.commitmentId,
+        state: 'proposed',
+        debtor: seed.debtor,
+        creditor: seed.creditor,
+        updatedAt: at,
+    };
+}
+function applyOne(emission, existing, create, apply) {
+    if (!emission)
+        return undefined;
+    const record = existing ?? (emission.createIfAbsent ? create() : null);
+    if (record === null)
+        return { applied: false, reason: 'absent' };
+    const res = apply(record, emission.transition);
+    return res.ok ? { applied: true, record: res.next } : { applied: false, reason: res.reason };
+}
+/**
+ * Apply emissions through the OWNING machines.
+ *
+ * The point of this function is what it does not do: it never assigns a state. A record is created
+ * only in its initial state and every move goes through `applyDecisionTransition` /
+ * `applyCommitmentTransition`, so their role and ordering checks still hold — the creditor still
+ * voids, the decider still decides.
+ *
+ * Rejections are RETURNED, not thrown and not swallowed. A caller that persists these must treat a
+ * rejected emission as a fact about the record it failed to write, because a silent no-op here is
+ * indistinguishable from success and would leave a case whose determination was never recorded
+ * looking exactly like one whose determination was.
+ */
+export function applyCaseEmissions(emissions, existing, event) {
+    const out = {};
+    const decision = applyOne(emissions.decision, existing.decision, () => seedDecision(emissions.decision.seed, event.at), (record, transition) => applyDecisionTransition(record, { transition, actor: event.actor, at: event.at }));
+    if (decision)
+        out.decision = decision;
+    const commitment = applyOne(emissions.commitment, existing.commitment, () => seedCommitment(emissions.commitment.seed, event.at), (record, transition) => applyCommitmentTransition(record, { transition, actor: event.actor, at: event.at }));
+    if (commitment)
+        out.commitment = commitment;
+    return out;
+}
+//# sourceMappingURL=case-emissions.js.map

package/dist/case-emissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-emissions.js","sourceRoot":"","sources":["../src/case-emissions.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,EAAE;AACF,sGAAsG;AACtG,wGAAwG;AACxG,iGAAiG;AACjG,4EAA4E;AAC5E,EAAE;AACF,kGAAkG;AAClG,iGAAiG;AACjG,uGAAuG;AACvG,4BAA4B;AAC5B,EAAE;AACF,wGAAwG;AACxG,oGAAoG;AACpG,qGAAqG;AACrG,uGAAuG;AACvG,EAAE;AACF,uGAAuG;AACvG,qGAAqG;AACrG,wBAAwB;AAGxB,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAuC/F;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,OAAO,MAAM,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO,OAAO,MAAM,EAAE,CAAC;AACzB,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,UAAU,CAAC,CAAgB;IAClC,OAAO,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,SAAS,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,YAAY,CACnB,CAAgB,EAChB,KAA4B,EAC5B,UAA8B;IAE9B,OAAO;QACL,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;QAC9D,OAAO,EAAE,CAAC,CAAC,EAAE;QACb,SAAS,EAAE,CAAC,CAAC,SAAS;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,CAAgB;IACtC,OAAO;QACL,YAAY,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,EAAE,CAAC,CAAC,SAAS;QACnB,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;KACxB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,oBAAoB,GAEtB;IACF,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;IAC9B,IAAI,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAC5B,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAC9B,gGAAgG;IAChG,kBAAkB,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE;IAC9C,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;CAC/B,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,kBAAkB,GAA+D;IACrF,KAAK,EAAE,IAAI;IACX,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,KAAK;IAChB,kBAAkB,EAAE,KAAK;IACzB,eAAe,EAAE,KAAK;IACtB,SAAS,EAAE,KAAK;IAChB,eAAe,EAAE,KAAK;IACtB,IAAI,EAAE,KAAK;CACZ,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAsB,EACtB,KAA4B;IAE5B,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,GAAG,CAAC,QAAQ,GAAG;YACb,IAAI,EAAE,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC;YACjD,UAAU,EAAE,IAAI,CAAC,QAAQ;YACzB,cAAc,EAAE,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC;SAClD,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,GAAG,CAAC,UAAU,GAAG;YACf,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC;SACpD,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;gGACgG;AAChG,MAAM,CAAC,MAAM,yBAAyB,GAA8B,MAAM,CAAC,IAAI,CAC7E,oBAAoB,CACD,CAAC;AAEtB,qGAAqG;AACrG,MAAM,UAAU,YAAY,CAAC,IAAoB,EAAE,EAAU;IAC3D,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,EAAE;KACd,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,cAAc,CAAC,IAAsB,EAAE,EAAU;IAC/D,OAAO;QACL,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,EAAE;KACd,CAAC;AACJ,CAAC;AAaD,SAAS,QAAQ,CACf,QAAgF,EAChF,QAAkB,EAClB,MAAe,EACf,KAAsD;IAEtD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,MAAM,GAAG,QAAQ,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvE,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACjE,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC/C,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AAC/F,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAA0B,EAC1B,QAAsF,EACtF,KAA8C;IAE9C,MAAM,GAAG,GAA4B,EAAE,CAAC;IAExC,MAAM,QAAQ,GAAG,QAAQ,CACvB,SAAS,CAAC,QAAQ,EAClB,QAAQ,CAAC,QAAQ,EACjB,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,QAAS,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,EACtD,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CACrB,uBAAuB,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CACpF,CAAC;IACF,IAAI,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAEtC,MAAM,UAAU,GAAG,QAAQ,CACzB,SAAS,CAAC,UAAU,EACpB,QAAQ,CAAC,UAAU,EACnB,GAAG,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,UAAW,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,EAC1D,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CACrB,yBAAyB,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CACtF,CAAC;IACF,IAAI,UAAU;QAAE,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;IAE5C,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/case-machine.d.ts

@@ -52,9 +52,19 @@ export interface CaseTransitionEventV1 {
     authorityRef?: AuthorityRef;
     signature?: SignatureProof;
 }
+/** W10b-3: `denied`/`expired`/`revoked` collapsed into `closed` — same terminality, and the verdict
+ *  that distinguished them now lives in the decision and commitment records. */
 export declare const TERMINAL_CASE_STATES: readonly CaseState[];
 export declare function isTerminalCaseState(state: CaseState): boolean;
-export type CaseRejection = 'wrong-case' | 'invalid-transition' | 'unauthorized-actor' | 'case-expired' | 'not-yet-due';
+/** The transitions that cannot land on the case machine alone. Exported so the set is a constant a
+ *  caller can read rather than a rule buried in a branch. */
+export declare const TRANSITIONS_REQUIRING_GRANTED_DECISION: readonly CaseTransition[];
+export declare function requiresGrantedDecision(transition: CaseTransition): boolean;
+export type CaseRejection = 'wrong-case' | 'invalid-transition' | 'unauthorized-actor' | 'case-expired' | 'not-yet-due'
+/** W10b-3: the transition needs a granted decision and none was supplied. Its own reason rather than
+ *  `invalid-transition`, because the case IS in a legal state — what is missing is the determination,
+ *  and a caller that cannot tell those apart will "fix" the wrong one. */
+ | 'requires-granted-decision';
 export type CaseResult = {
     ok: true;
     case: FabricCaseV1;
@@ -62,11 +72,27 @@ export type CaseResult = {
     ok: false;
     reason: CaseRejection;
 };
+/**
+ * What this machine cannot know on its own (spec 340 W10b-3).
+ *
+ * Until W10b-3, "you cannot issue before approving" was an FSM edge: `issue-credential` ran only
+ * `from: ['approved']`. With the determination moved to the decision machine, `triaged` is reachable by
+ * plain triage, so that ordering has to be re-established as a precondition or issuance could skip the
+ * determination entirely.
+ *
+ * Passed IN rather than looked up: this module is pure and has no store. The caller that holds the
+ * decision supplies it, and supplying nothing is a refusal, not a pass — a machine that treated
+ * "no decision provided" as "no decision required" would be exactly the fail-open this repo forbids.
+ */
+export interface CaseTransitionContext {
+    /** The state of the decision for this case, or `null`/absent when there is none. */
+    decisionState?: 'pending' | 'granted' | 'refused' | 'withdrawn' | 'expired' | 'superseded' | null;
+}
 /**
  * Pure, fail-closed (spec 316 §2). Generic over the concrete case type: preserves whatever extra fields
  * `T` carries beyond `CaseFsmFields`. Returns the next case or a typed rejection — never a silent no-op.
  */
-export declare function applyCaseTransition<T extends CaseFsmFields>(current: T, event: CaseTransitionEventV1): {
+export declare function applyCaseTransition<T extends CaseFsmFields>(current: T, event: CaseTransitionEventV1, ctx?: CaseTransitionContext): {
     ok: true;
     case: T;
 } | {

package/dist/case-machine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"case-machine.d.ts","sourceRoot":"","sources":["../src/case-machine.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD;uEACuE;AACvE,MAAM,WAAW,aAAa;IAC5B;;4DAEwD;IACxD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,SAAS,CAAC;IACjB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,SAAS,CAAC;IAC5B,YAAY,EAAE,QAAQ,EAAE,CAAC;IACzB,aAAa,EAAE,YAAY,EAAE,CAAC;CAC/B;AAED,0GAA0G;AAC1G,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,OAAO,EAAE,YAAY,CAAC;IACtB,6DAA6D;IAC7D,EAAE,EAAE,UAAU,CAAC;IACf,IAAI,EAAE,eAAe,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,SAAS,CAAC;IACzB,eAAe,EAAE,SAAS,CAAC;CAC5B;AAED,8GAA8G;AAC9G,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,aAAa,GACb,SAAS,GACT,kBAAkB,GAClB,oBAAoB,GACpB,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,MAAM,CAAC;AAEX,yGAAyG;AACzG,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,cAAc,CAAC;IAC3B,KAAK,EAAE,gBAAgB,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B;AAED,eAAO,MAAM,oBAAoB,EAAE,SAAS,SAAS,EAA4D,CAAC;AAElH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAE7D;AA2BD,MAAM,MAAM,aAAa,GACrB,YAAY,GACZ,oBAAoB,GACpB,oBAAoB,GACpB,cAAc,GACd,aAAa,CAAC;AAElB,MAAM,MAAM,UAAU,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAcjG;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,aAAa,EACzD,OAAO,EAAE,CAAC,EACV,KAAK,EAAE,qBAAqB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CA4B9D"}
+{"version":3,"file":"case-machine.d.ts","sourceRoot":"","sources":["../src/case-machine.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD;uEACuE;AACvE,MAAM,WAAW,aAAa;IAC5B;;4DAEwD;IACxD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,SAAS,CAAC;IACjB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,SAAS,CAAC;IAC5B,YAAY,EAAE,QAAQ,EAAE,CAAC;IACzB,aAAa,EAAE,YAAY,EAAE,CAAC;CAC/B;AAED,0GAA0G;AAC1G,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,OAAO,EAAE,YAAY,CAAC;IACtB,6DAA6D;IAC7D,EAAE,EAAE,UAAU,CAAC;IACf,IAAI,EAAE,eAAe,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,SAAS,CAAC;IACzB,eAAe,EAAE,SAAS,CAAC;CAC5B;AAED,8GAA8G;AAC9G,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,aAAa,GACb,SAAS,GACT,kBAAkB,GAClB,oBAAoB,GACpB,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,MAAM,CAAC;AAEX,yGAAyG;AACzG,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,cAAc,CAAC;IAC3B,KAAK,EAAE,gBAAgB,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B;AAED;gFACgF;AAChF,eAAO,MAAM,oBAAoB,EAAE,SAAS,SAAS,EAAsC,CAAC;AAE5F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAE7D;AA2CD;6DAC6D;AAC7D,eAAO,MAAM,sCAAsC,EAAE,SAAS,cAAc,EAAyB,CAAC;AAEtG,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,cAAc,GAAG,OAAO,CAE3E;AAED,MAAM,MAAM,aAAa,GACrB,YAAY,GACZ,oBAAoB,GACpB,oBAAoB,GACpB,cAAc,GACd,aAAa;AACf;;0EAE0E;GACxE,2BAA2B,CAAC;AAEhC,MAAM,MAAM,UAAU,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAcjG;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,qBAAqB;IACpC,oFAAoF;IACpF,aAAa,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI,CAAC;CACnG;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,aAAa,EACzD,OAAO,EAAE,CAAC,EACV,KAAK,EAAE,qBAAqB,EAC5B,GAAG,GAAE,qBAA0B,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAgC9D"}

package/dist/case-machine.js

@@ -14,10 +14,24 @@
 // are inbox read-receipt facts. So `admit`(submitted→delivered)/`view`(delivered→seen) are DROPPED (they
 // become `ExchangeEventV1` `kind:'message'` events), and the moves that referenced `seen`/`delivered`
 // re-anchor on `submitted`/`triaged`.
-export const TERMINAL_CASE_STATES = ['denied', 'completed', 'expired', 'revoked', 'failed'];
+/** W10b-3: `denied`/`expired`/`revoked` collapsed into `closed` — same terminality, and the verdict
+ *  that distinguished them now lives in the decision and commitment records. */
+export const TERMINAL_CASE_STATES = ['completed', 'closed', 'failed'];
 export function isTerminalCaseState(state) {
     return TERMINAL_CASE_STATES.includes(state);
 }
+/**
+ * spec 340 W10b-3. The VERBS are unchanged — that is deliberate and load-bearing. A stored v1 case-event
+ * log names transitions, not states, so keeping every verb is what lets history replay with no
+ * migration (W10b-1). What changed is where four of them LAND, because `approved`/`denied`/`expired`/
+ * `revoked` were never execution states (§R.2):
+ *
+ *   · `approve` now lands on `triaged` — the responder is working toward issuance. The DETERMINATION
+ *     goes to the decision machine via `caseTransitionEmissions`. "Approved" was never a description
+ *     of how far the work got; reading it as one is the "deciding is not doing" collapse.
+ *   · `deny`/`expire`/`revoke` land on `closed` — taken up, ended without issuance. The verdict is in
+ *     the decision record; the voided obligation is in the commitment record.
+ */
 const TRANSITIONS = {
     submit: { from: ['draft'], to: 'submitted', signers: ['requester'] },
     triage: { from: ['submitted'], to: 'triaged', signers: ['responder'] },
@@ -25,14 +39,24 @@ const TRANSITIONS = {
     // needs-info → triaged (NOT submitted): the requester supplied info, the responder RESUMES working
     // (couples to exec `working`), preserving the "responder engaged" phase across the info loop.
     'submit-info': { from: ['needs-info'], to: 'triaged', signers: ['requester'] },
-    approve: { from: ['submitted', 'triaged'], to: 'approved', signers: ['responder', 'resource-owner'] },
-    'issue-credential': { from: ['approved'], to: 'issued', signers: ['resource-owner', 'responder'] },
+    approve: { from: ['submitted', 'triaged'], to: 'triaged', signers: ['responder', 'resource-owner'] },
+    // `from: ['triaged']` plus a REQUIRED granted decision — see `requiresGrantedDecision`. The ordering
+    // "you cannot issue before approving" used to be an FSM edge (`from: ['approved']`); with the
+    // decision out of this enum it becomes a cross-machine precondition instead, because `triaged` is
+    // reachable by plain triage and would otherwise let issuance skip the determination entirely.
+    'issue-credential': { from: ['triaged'], to: 'issued', signers: ['resource-owner', 'responder'] },
     'deliver-credential': { from: ['issued'], to: 'completed', signers: ['resource-owner', 'responder'] },
-    deny: { from: 'any-non-terminal', to: 'denied', signers: ['responder', 'resource-owner'] },
-    expire: { from: 'any-non-terminal', to: 'expired', signers: ['any'] },
-    revoke: { from: 'any-non-terminal', to: 'revoked', signers: ['responder', 'resource-owner'] },
+    deny: { from: 'any-non-terminal', to: 'closed', signers: ['responder', 'resource-owner'] },
+    expire: { from: 'any-non-terminal', to: 'closed', signers: ['any'] },
+    revoke: { from: 'any-non-terminal', to: 'closed', signers: ['responder', 'resource-owner'] },
     fail: { from: 'any-non-terminal', to: 'failed', signers: ['any'] },
 };
+/** The transitions that cannot land on the case machine alone. Exported so the set is a constant a
+ *  caller can read rather than a rule buried in a branch. */
+export const TRANSITIONS_REQUIRING_GRANTED_DECISION = ['issue-credential'];
+export function requiresGrantedDecision(transition) {
+    return TRANSITIONS_REQUIRING_GRANTED_DECISION.includes(transition);
+}
 function actorRoles(c, actor) {
     const roles = new Set(['any']);
     if (actor === c.requester)
@@ -50,7 +74,7 @@ function isPastExpiry(c, atIso) {
  * Pure, fail-closed (spec 316 §2). Generic over the concrete case type: preserves whatever extra fields
  * `T` carries beyond `CaseFsmFields`. Returns the next case or a typed rejection — never a silent no-op.
  */
-export function applyCaseTransition(current, event) {
+export function applyCaseTransition(current, event, ctx = {}) {
     if (event.caseId !== current.id)
         return { ok: false, reason: 'wrong-case' };
     const spec = TRANSITIONS[event.transition];
@@ -59,6 +83,9 @@ export function applyCaseTransition(current, event) {
     const fromOk = spec.from === 'any-non-terminal' ? !isTerminalCaseState(current.state) : spec.from.includes(current.state);
     if (!fromOk)
         return { ok: false, reason: 'invalid-transition' };
+    if (requiresGrantedDecision(event.transition) && ctx.decisionState !== 'granted') {
+        return { ok: false, reason: 'requires-granted-decision' };
+    }
     // `expire` only lands once the deadline passed; everything else (except `fail`) rejects on an expired case.
     if (event.transition === 'expire') {
         if (current.expiresAt === undefined || !isPastExpiry(current, event.at))

package/dist/case-machine.js.map

@@ -1 +1 @@
-{"version":3,"file":"case-machine.js","sourceRoot":"","sources":["../src/case-machine.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,wGAAwG;AACxG,kCAAkC;AAClC,+GAA+G;AAC/G,4EAA4E;AAC5E,sGAAsG;AACtG,8BAA8B;AAC9B,EAAE;AACF,4GAA4G;AAC5G,6GAA6G;AAC7G,2FAA2F;AAC3F,EAAE;AACF,2GAA2G;AAC3G,yGAAyG;AACzG,sGAAsG;AACtG,sCAAsC;AAwEtC,MAAM,CAAC,MAAM,oBAAoB,GAAyB,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAElH,MAAM,UAAU,mBAAmB,CAAC,KAAgB;IAClD,OAAO,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAWD,MAAM,WAAW,GAA2C;IAC1D,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;IACpE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;IACtE,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;IACxF,mGAAmG;IACnG,8FAA8F;IAC9F,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;IAC9E,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE;IACrG,kBAAkB,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,gBAAgB,EAAE,WAAW,CAAC,EAAE;IAClG,oBAAoB,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,gBAAgB,EAAE,WAAW,CAAC,EAAE;IACrG,IAAI,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE;IAC1F,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE;IACrE,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE;IAC7F,IAAI,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE;CACnE,CAAC;AAWF,SAAS,UAAU,CAAC,CAAgB,EAAE,KAAa;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,CAAC,CAAC,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,KAAK,KAAK,CAAC,CAAC,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,KAAK,CAAC,CAAC,aAAa;QAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC5F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,CAAgB,EAAE,KAAa;IACnD,OAAO,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAU,EACV,KAA4B;IAE5B,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAE5E,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAE9D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1H,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAEhE,4GAA4G;IAC5G,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACvH,CAAC;SAAM,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAEhG,MAAM,IAAI,GAAM;QACd,GAAG,OAAO;QACV,KAAK,EAAE,IAAI,CAAC,EAAE;QACd,SAAS,EAAE,KAAK,CAAC,EAAE;QACnB,eAAe,EAAE,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,eAAe;QAC3D,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY;QACrG,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa;KAC3G,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC"}
+{"version":3,"file":"case-machine.js","sourceRoot":"","sources":["../src/case-machine.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,wGAAwG;AACxG,kCAAkC;AAClC,+GAA+G;AAC/G,4EAA4E;AAC5E,sGAAsG;AACtG,8BAA8B;AAC9B,EAAE;AACF,4GAA4G;AAC5G,6GAA6G;AAC7G,2FAA2F;AAC3F,EAAE;AACF,2GAA2G;AAC3G,yGAAyG;AACzG,sGAAsG;AACtG,sCAAsC;AAwEtC;gFACgF;AAChF,MAAM,CAAC,MAAM,oBAAoB,GAAyB,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAE5F,MAAM,UAAU,mBAAmB,CAAC,KAAgB;IAClD,OAAO,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAWD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,GAA2C;IAC1D,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;IACpE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;IACtE,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;IACxF,mGAAmG;IACnG,8FAA8F;IAC9F,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;IAC9E,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE;IACpG,qGAAqG;IACrG,8FAA8F;IAC9F,kGAAkG;IAClG,8FAA8F;IAC9F,kBAAkB,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,gBAAgB,EAAE,WAAW,CAAC,EAAE;IACjG,oBAAoB,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,gBAAgB,EAAE,WAAW,CAAC,EAAE;IACrG,IAAI,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE;IAC1F,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE;IACpE,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE;IAC5F,IAAI,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE;CACnE,CAAC;AAEF;6DAC6D;AAC7D,MAAM,CAAC,MAAM,sCAAsC,GAA8B,CAAC,kBAAkB,CAAC,CAAC;AAEtG,MAAM,UAAU,uBAAuB,CAAC,UAA0B;IAChE,OAAO,sCAAsC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AACrE,CAAC;AAeD,SAAS,UAAU,CAAC,CAAgB,EAAE,KAAa;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,CAAC,CAAC,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,KAAK,KAAK,CAAC,CAAC,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,KAAK,CAAC,CAAC,aAAa;QAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC5F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,CAAgB,EAAE,KAAa;IACnD,OAAO,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACnF,CAAC;AAmBD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAU,EACV,KAA4B,EAC5B,MAA6B,EAAE;IAE/B,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAE5E,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAE9D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1H,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAEhE,IAAI,uBAAuB,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACjF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAC5D,CAAC;IAED,4GAA4G;IAC5G,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACvH,CAAC;SAAM,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAEhG,MAAM,IAAI,GAAM;QACd,GAAG,OAAO;QACV,KAAK,EAAE,IAAI,CAAC,EAAE;QACd,SAAS,EAAE,KAAK,CAAC,EAAE;QACnB,eAAe,EAAE,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,eAAe;QAC3D,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY;QACrG,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa;KAC3G,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC"}

package/dist/enum-retirement.d.ts

@@ -28,7 +28,16 @@ export type OwningMachine = 'execution' | 'decision' | 'commitment';
  * "deciding is not doing" collapse.
  */
 export declare const MACHINE_FOR_CASE_STATE: Record<CaseState, OwningMachine>;
-/** How many distinct machines the single `CaseState` field was standing in for. Asserted in tests so
- *  the claim in §W5 cannot drift away from the table above. */
+/**
+ * How many distinct machines the single `CaseState` field stands in for.
+ *
+ * It was THREE, and that number was the whole argument for W10b-3. It is now ONE, and this function is
+ * kept — rather than deleted along with the states — precisely so that claim stays falsifiable: if
+ * anyone re-adds a decision-shaped or commitment-shaped member to `CaseState`, they must give it a home
+ * in the table above, and this count moves off 1 and the test fails.
+ *
+ * A cleanup is not finished when the code compiles; it is finished when re-introducing the thing you
+ * removed is caught automatically.
+ */
 export declare function machinesSpannedByCaseState(): number;
 //# sourceMappingURL=enum-retirement.d.ts.map

package/dist/enum-retirement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enum-retirement.d.ts","sourceRoot":"","sources":["../src/enum-retirement.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAG9D;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,WAAW,EAAE,cAAc,CAcxE,CAAC;AAEF,sEAAsE;AACtE,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,UAAU,GAAG,YAAY,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,SAAS,EAAE,aAAa,CAYnE,CAAC;AAEF;+DAC+D;AAC/D,wBAAgB,0BAA0B,IAAI,MAAM,CAEnD"}
+{"version":3,"file":"enum-retirement.d.ts","sourceRoot":"","sources":["../src/enum-retirement.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAG9D;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,WAAW,EAAE,cAAc,CAcxE,CAAC;AAEF,sEAAsE;AACtE,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,UAAU,GAAG,YAAY,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,SAAS,EAAE,aAAa,CASnE,CAAC;AAEF;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,CAEnD"}

package/dist/enum-retirement.js

@@ -71,16 +71,22 @@ export const MACHINE_FOR_CASE_STATE = {
     submitted: 'execution',
     triaged: 'execution',
     'needs-info': 'execution',
-    approved: 'decision',
-    denied: 'decision',
     issued: 'execution',
     completed: 'execution',
-    expired: 'decision',
-    revoked: 'commitment',
+    closed: 'execution',
     failed: 'execution',
 };
-/** How many distinct machines the single `CaseState` field was standing in for. Asserted in tests so
- *  the claim in §W5 cannot drift away from the table above. */
+/**
+ * How many distinct machines the single `CaseState` field stands in for.
+ *
+ * It was THREE, and that number was the whole argument for W10b-3. It is now ONE, and this function is
+ * kept — rather than deleted along with the states — precisely so that claim stays falsifiable: if
+ * anyone re-adds a decision-shaped or commitment-shaped member to `CaseState`, they must give it a home
+ * in the table above, and this count moves off 1 and the test fails.
+ *
+ * A cleanup is not finished when the code compiles; it is finished when re-introducing the thing you
+ * removed is caught automatically.
+ */
 export function machinesSpannedByCaseState() {
     return new Set(Object.values(MACHINE_FOR_CASE_STATE)).size;
 }

package/dist/enum-retirement.js.map

@@ -1 +1 @@
-{"version":3,"file":"enum-retirement.js","sourceRoot":"","sources":["../src/enum-retirement.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,mGAAmG;AACnG,sDAAsD;AACtD,EAAE;AACF,kGAAkG;AAClG,8EAA8E;AAC9E,EAAE;AACF,6FAA6F;AAC7F,qGAAqG;AACrG,sEAAsE;AACtE,EAAE;AACF,qGAAqG;AACrG,mGAAmG;AACnG,qDAAqD;AACrD,EAAE;AACF,qGAAqG;AACrG,sGAAsG;AACtG,mGAAmG;AACnG,qGAAqG;AACrG,yEAAyE;AACzE,EAAE;AACF,kGAAkG;AAClG,sGAAsG;AACtG,uGAAuG;AACvG,sGAAsG;AACtG,8FAA8F;AAC9F,EAAE;AACF,uEAAuE;AAKvE,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAErG;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAwC;IAC3E,KAAK,EAAE,cAAc,CAAC,cAAc;IACpC,MAAM,EAAE,cAAc,CAAC,cAAc;IACrC,SAAS,EAAE,cAAc,CAAC,cAAc;IACxC,oGAAoG;IACpG,mEAAmE;IACnE,OAAO,EAAE,oBAAoB,CAAC,cAAc;IAC5C,QAAQ,EAAE,oBAAoB,CAAC,cAAc;IAC7C,mGAAmG;IACnG,iGAAiG;IACjG,gGAAgG;IAChG,iFAAiF;IACjF,qBAAqB,EAAE,mBAAmB,CAAC,cAAc;IACzD,OAAO,EAAE,cAAc,CAAC,cAAc;CACvC,CAAC;AAKF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAqC;IACtE,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,WAAW;IACpB,YAAY,EAAE,WAAW;IACzB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,WAAW;IACnB,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,UAAU;IACnB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;CACpB,CAAC;AAEF;+DAC+D;AAC/D,MAAM,UAAU,0BAA0B;IACxC,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"enum-retirement.js","sourceRoot":"","sources":["../src/enum-retirement.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,mGAAmG;AACnG,sDAAsD;AACtD,EAAE;AACF,kGAAkG;AAClG,8EAA8E;AAC9E,EAAE;AACF,6FAA6F;AAC7F,qGAAqG;AACrG,sEAAsE;AACtE,EAAE;AACF,qGAAqG;AACrG,mGAAmG;AACnG,qDAAqD;AACrD,EAAE;AACF,qGAAqG;AACrG,sGAAsG;AACtG,mGAAmG;AACnG,qGAAqG;AACrG,yEAAyE;AACzE,EAAE;AACF,kGAAkG;AAClG,sGAAsG;AACtG,uGAAuG;AACvG,sGAAsG;AACtG,8FAA8F;AAC9F,EAAE;AACF,uEAAuE;AAKvE,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAErG;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAwC;IAC3E,KAAK,EAAE,cAAc,CAAC,cAAc;IACpC,MAAM,EAAE,cAAc,CAAC,cAAc;IACrC,SAAS,EAAE,cAAc,CAAC,cAAc;IACxC,oGAAoG;IACpG,mEAAmE;IACnE,OAAO,EAAE,oBAAoB,CAAC,cAAc;IAC5C,QAAQ,EAAE,oBAAoB,CAAC,cAAc;IAC7C,mGAAmG;IACnG,iGAAiG;IACjG,gGAAgG;IAChG,iFAAiF;IACjF,qBAAqB,EAAE,mBAAmB,CAAC,cAAc;IACzD,OAAO,EAAE,cAAc,CAAC,cAAc;CACvC,CAAC;AAKF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAqC;IACtE,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,WAAW;IACpB,YAAY,EAAE,WAAW;IACzB,MAAM,EAAE,WAAW;IACnB,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;CACpB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC"}