@blue-repository/types 0.23.0 → 0.25.0

package/dist/packages/myos/contents/index.d.ts

@@ -1,17 +1,21 @@
 export { SingleDocumentPermissionRevoked } from './SingleDocumentPermissionRevoked.js';
 export { WorkerAgencyPermissionInvalid } from './WorkerAgencyPermissionInvalid.js';
+export { WorkerAgencyPermissionGrant } from './WorkerAgencyPermissionGrant.js';
 export { SubscriptionUpdate } from './SubscriptionUpdate.js';
 export { MyOSTimeline } from './MyOSTimeline.js';
 export { WorkerSessionStarting } from './WorkerSessionStarting.js';
 export { StartWorkerSessionRequested } from './StartWorkerSessionRequested.js';
 export { CallOperationResponded } from './CallOperationResponded.js';
 export { AgentActor } from './AgentActor.js';
+export { SingleDocumentPermissionGrantToDocument } from './SingleDocumentPermissionGrantToDocument.js';
 export { ChatGPTConnectorAgent } from './ChatGPTConnectorAgent.js';
 export { DocumentLinks } from './DocumentLinks.js';
 export { MyOSAgentChannel } from './MyOSAgentChannel.js';
 export { MyOSWorkerAgency } from './MyOSWorkerAgency.js';
 export { DocumentSessionBootstrap } from './DocumentSessionBootstrap.js';
 export { SubscriptionToSessionInitiated } from './SubscriptionToSessionInitiated.js';
+export { LinkedDocumentsPermissionRevokeRequested } from './LinkedDocumentsPermissionRevokeRequested.js';
+export { SingleDocumentPermissionRevokeRequested } from './SingleDocumentPermissionRevokeRequested.js';
 export { SingleDocumentPermissionInvalid } from './SingleDocumentPermissionInvalid.js';
 export { MyOSPackage } from './MyOSPackage.js';
 export { SingleDocumentPermissionGrantingInProgress } from './SingleDocumentPermissionGrantingInProgress.js';
@@ -19,37 +23,32 @@ export { PrincipalActor } from './PrincipalActor.js';
 export { WorkerAgencyPermission } from './WorkerAgencyPermission.js';
 export { SingleDocumentPermissionGrantResponded } from './SingleDocumentPermissionGrantResponded.js';
 export { SearchContract } from './SearchContract.js';
+export { WorkerAgencyPermissionRevokeRequested } from './WorkerAgencyPermissionRevokeRequested.js';
 export { WorkerAgencyPermissionRevokingInProgress } from './WorkerAgencyPermissionRevokingInProgress.js';
 export { RemovingParticipantResponded } from './RemovingParticipantResponded.js';
-export { SingleDocumentPermissionGrantToDocument } from './SingleDocumentPermissionGrantToDocument.js';
-export { LinkedDocumentsPermissionRevokeRequested } from './LinkedDocumentsPermissionRevokeRequested.js';
+export { LinkedDocumentsPermissionGranted } from './LinkedDocumentsPermissionGranted.js';
 export { MyOSParticipantsOrchestration } from './MyOSParticipantsOrchestration.js';
+export { WorkerAgencyPermissionGranted } from './WorkerAgencyPermissionGranted.js';
 export { LinkedDocumentsPermissionSet } from './LinkedDocumentsPermissionSet.js';
 export { DocumentAnchors } from './DocumentAnchors.js';
 export { MyOSAgent } from './MyOSAgent.js';
 export { AnchorAutomationTemplate } from './AnchorAutomationTemplate.js';
-export { WorkerAgencyPermissionGranted } from './WorkerAgencyPermissionGranted.js';
 export { MyOSDocumentSessionReference } from './MyOSDocumentSessionReference.js';
 export { RemovingParticipantRequested } from './RemovingParticipantRequested.js';
 export { LinkedDocumentsPermissionGrantingInProgress } from './LinkedDocumentsPermissionGrantingInProgress.js';
 export { Agent } from './Agent.js';
-export { SingleDocumentPermissionGranted } from './SingleDocumentPermissionGranted.js';
 export { AddingParticipantRequested } from './AddingParticipantRequested.js';
 export { SessionEpochAdvanced } from './SessionEpochAdvanced.js';
 export { BootstrapFailed } from './BootstrapFailed.js';
 export { LinkedDocumentsPermissionRevoked } from './LinkedDocumentsPermissionRevoked.js';
-export { LinkedDocumentsPermissionGrantToDocument } from './LinkedDocumentsPermissionGrantToDocument.js';
-export { WorkerAgencyPermissionGrant } from './WorkerAgencyPermissionGrant.js';
-export { WorkerAgencyPermissionRevokeRequested } from './WorkerAgencyPermissionRevokeRequested.js';
-export { LinkedDocumentsPermissionGrantToAccount } from './LinkedDocumentsPermissionGrantToAccount.js';
 export { SingleDocumentPermissionValidated } from './SingleDocumentPermissionValidated.js';
 export { WorkerAgencyPermissionRevoked } from './WorkerAgencyPermissionRevoked.js';
 export { CallOperationFailed } from './CallOperationFailed.js';
 export { DocumentLink } from './DocumentLink.js';
-export { LinkedDocumentsPermissionGranted } from './LinkedDocumentsPermissionGranted.js';
 export { SubscribeToSessionRequested } from './SubscribeToSessionRequested.js';
 export { AddingParticipantResponded } from './AddingParticipantResponded.js';
 export { MyOSAdminBase } from './MyOSAdminBase.js';
+export { SingleDocumentPermissionGranted } from './SingleDocumentPermissionGranted.js';
 export { MyOSSessionInteraction } from './MyOSSessionInteraction.js';
 export { LinkedDocumentsPermissionRejected } from './LinkedDocumentsPermissionRejected.js';
 export { ParticipantActivationState } from './ParticipantActivationState.js';
@@ -63,7 +62,7 @@ export { CallOperationAccepted } from './CallOperationAccepted.js';
 export { LinkedDocumentsPermissionValidated } from './LinkedDocumentsPermissionValidated.js';
 export { LLMAgent } from './LLMAgent.js';
 export { SingleDocumentPermissionSet } from './SingleDocumentPermissionSet.js';
-export { SingleDocumentPermissionRevokeRequested } from './SingleDocumentPermissionRevokeRequested.js';
+export { LinkedDocumentsPermissionGrantToDocument } from './LinkedDocumentsPermissionGrantToDocument.js';
 export { SingleDocumentPermissionGrantRequested } from './SingleDocumentPermissionGrantRequested.js';
 export { LinkedDocumentsPermissionInvalid } from './LinkedDocumentsPermissionInvalid.js';
 export { ParticipantActivated } from './ParticipantActivated.js';
@@ -72,8 +71,8 @@ export { CallOperationRequested } from './CallOperationRequested.js';
 export { AllParticipantsReady } from './AllParticipantsReady.js';
 export { TargetDocumentSessionStarted } from './TargetDocumentSessionStarted.js';
 export { MyOSTimelineEntry } from './MyOSTimelineEntry.js';
-export { SingleDocumentPermissionGrantToAccount } from './SingleDocumentPermissionGrantToAccount.js';
 export { WorkerAgencyPermissionRejected } from './WorkerAgencyPermissionRejected.js';
+export { LinkedDocumentsPermissionGrantToAccount } from './LinkedDocumentsPermissionGrantToAccount.js';
 export { SubscriptionToSessionRevoked } from './SubscriptionToSessionRevoked.js';
 export { MyOSAgentEvent } from './MyOSAgentEvent.js';
 export { WorkerAgencyPermissionValidated } from './WorkerAgencyPermissionValidated.js';
@@ -85,6 +84,7 @@ export { WorkerAgencyPermissionGrantingInProgress } from './WorkerAgencyPermissi
 export { SingleDocumentPermissionRejected } from './SingleDocumentPermissionRejected.js';
 export { Participant } from './Participant.js';
 export { SubscriptionToSessionFailed } from './SubscriptionToSessionFailed.js';
+export { SingleDocumentPermissionGrantToAccount } from './SingleDocumentPermissionGrantToAccount.js';
 export declare const contents: {
     readonly '29JSV8DwY6x3zfvAqiM7xNc96i46sKcunFYgfywBkF2f': {
         readonly description: "Rights granted by this PGD have been retracted.";
@@ -108,6 +108,111 @@ export declare const contents: {
             readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
         };
     };
+    readonly '2ARFPC2YDspfN86MT897RDzGUtEEw1B7Lbdvy8Z3ZFQx': {
+        readonly allowedWorkerAgencyPermissions: {
+            readonly itemType: {
+                readonly blueId: "5J3RXNnALK1ZYAQBrjGwCQ4WpL3YUGHvz9WcGos6mMSp";
+            };
+            readonly type: {
+                readonly blueId: "6aehfNAxHLC1PHHoDr3tYtFH3RWNbiWdFancJ1bypXEY";
+            };
+        };
+        readonly contracts: {
+            readonly granterChannel: {
+                readonly description: "Granter/owner’s timeline (direct grant-document revoke lives here).";
+                readonly type: {
+                    readonly blueId: "HCF8mXnX3dFjQ8osjxb4Wzm2Nm1DoXnTYuA5sPnV7NTs";
+                };
+            };
+            readonly initLifecycleChannel: {
+                readonly event: {
+                    readonly type: {
+                        readonly blueId: "BrpmpNt5JkapeUvPqYcxgXZrHNZX3R757dRwuXXdfNM2";
+                    };
+                };
+                readonly type: {
+                    readonly blueId: "H2aCCTUcLMTJozWkn7HPUjyFBFxamraw1q8DyWk87zxr";
+                };
+            };
+            readonly revoke: {
+                readonly channel: {
+                    readonly type: {
+                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                    };
+                    readonly value: "granterChannel";
+                };
+                readonly description: "Granter requests revocation on the grant document. Grantee-document self-revoke uses the existing revoke-request event with grantDocumentId emitted from the grantee document itself.";
+                readonly request: {
+                    readonly description: "Optional human-readable reason";
+                    readonly type: {
+                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                    };
+                };
+                readonly type: {
+                    readonly blueId: "BoAiqVUZv9Fum3wFqaX2JnQMBHJLxJSo2V9U2UBmCfsC";
+                };
+            };
+            readonly revokeImplGranter: {
+                readonly operation: {
+                    readonly type: {
+                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                    };
+                    readonly value: "revoke";
+                };
+                readonly steps: {
+                    readonly items: readonly [{
+                        readonly code: {
+                            readonly type: {
+                                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                            };
+                            readonly value: "return {\n  events: [\n    {\n      type: \"MyOS/Worker Agency Permission Revoke Requested\",\n      reason: event.message.request\n    }\n  ]\n};\n";
+                        };
+                        readonly name: "EmitRevokeRequested";
+                        readonly type: {
+                            readonly blueId: "ExZxT61PSpWHpEAtP2WKMXXqxEYN7Z13j7Zv36Dp99kS";
+                        };
+                    }];
+                };
+                readonly type: {
+                    readonly blueId: "CGdxkNjPcsdescqLPz6SNLsMyak6demQQr7RoKNHbCyv";
+                };
+            };
+            readonly validateOnInit: {
+                readonly channel: {
+                    readonly type: {
+                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                    };
+                    readonly value: "initLifecycleChannel";
+                };
+                readonly steps: {
+                    readonly items: readonly [{
+                        readonly code: {
+                            readonly type: {
+                                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                            };
+                            readonly value: "const issues = [];\n\nconst unwrapText = value => {\n  if (typeof value === 'string') {\n    const trimmed = value.trim();\n    return trimmed.length > 0 ? trimmed : undefined;\n  }\n  if (value && typeof value === 'object') {\n    if (typeof value.value === 'string') {\n      const trimmed = value.value.trim();\n      return trimmed.length > 0 ? trimmed : undefined;\n    }\n    if (typeof value.workerType === 'string') {\n      const trimmed = value.workerType.trim();\n      return trimmed.length > 0 ? trimmed : undefined;\n    }\n    if (typeof value.name === 'string') {\n      const trimmed = value.name.trim();\n      return trimmed.length > 0 ? trimmed : undefined;\n    }\n  }\n  return undefined;\n};\n\nconst unwrapBoolean = value => {\n  if (typeof value === 'boolean') {\n    return value;\n  }\n  if (value && typeof value === 'object') {\n    if (typeof value.value === 'boolean') {\n      return value.value;\n    }\n    if (\n      value.value &&\n      typeof value.value === 'object' &&\n      typeof value.value.value === 'boolean'\n    ) {\n      return value.value.value;\n    }\n  }\n  return undefined;\n};\n\nconst hasBooleanValue = value => {\n  if (typeof value === 'boolean') {\n    return true;\n  }\n  if (value && typeof value === 'object') {\n    if (typeof value.value === 'boolean') {\n      return true;\n    }\n    if (\n      value.value &&\n      typeof value.value === 'object' &&\n      typeof value.value.value === 'boolean'\n    ) {\n      return true;\n    }\n  }\n  return false;\n};\n\nconst unwrapArray = value => {\n  if (Array.isArray(value)) {\n    return value;\n  }\n  if (value && typeof value === 'object' && Array.isArray(value.items)) {\n    return value.items;\n  }\n  return [];\n};\n\nconst unwrapRecord = value => {\n  if (value && typeof value === 'object' && !Array.isArray(value)) {\n    if (value.value && typeof value.value === 'object') {\n      return value.value;\n    }\n    return value;\n  }\n  return {};\n};\n\nconst granterId = document('/contracts/granterChannel/accountId');\nif (typeof granterId !== 'string' || granterId.length === 0) {\n  issues.push(\"granterChannel must be bound to an accountId\");\n}\n\nconst granteeDocumentId = document('/granteeDocumentId');\nif (\n  typeof granteeDocumentId !== 'string' ||\n  granteeDocumentId.trim().length === 0\n) {\n  issues.push(\"granteeDocumentId must be a non-empty string\");\n}\n\nconst list = document('/allowedWorkerAgencyPermissions');\nif (!Array.isArray(list) || list.length === 0) {\n  issues.push(\"allowedWorkerAgencyPermissions must be a non-empty array\");\n} else {\n  const validateSDPS = (p, path) => {\n    const record = unwrapRecord(p);\n    if (Object.keys(record).length === 0) {\n      issues.push(`${path} must be an object`);\n      return;\n    }\n    const read = unwrapBoolean(record.read);\n    if (read !== true) {\n      issues.push(`${path}.read must be true`);\n    }\n    const share = record.share;\n    const shareValue = unwrapBoolean(share);\n    if (hasBooleanValue(share) && typeof shareValue !== 'boolean') {\n      issues.push(`${path}.share must be boolean if provided`);\n    }\n    const allOps = record.allOps;\n    const allOpsValue = unwrapBoolean(allOps);\n    if (hasBooleanValue(allOps) && typeof allOpsValue !== 'boolean') {\n      issues.push(`${path}.allOps must be boolean if provided`);\n    }\n    const singleOpsRaw = unwrapArray(record.singleOps)\n      .map(entry => unwrapText(entry))\n      .filter(Boolean);\n    const hasSingle = singleOpsRaw.length > 0;\n    if (hasSingle) {\n      const bad = singleOpsRaw.length !== unwrapArray(record.singleOps).length;\n      if (bad) issues.push(`${path}.singleOps must contain only non-empty strings`);\n    }\n    if (allOpsValue === true && hasSingle) {\n      issues.push(`${path}.allOps=true and ${path}.singleOps are mutually exclusive`);\n    }\n  };\n  const seenTypes = new Set();\n  list.forEach((item, idx) => {\n    const itemPath = `/allowedWorkerAgencyPermissions[${idx}]`;\n    if (typeof item !== 'object' || item === null) {\n      issues.push(`${itemPath} must be an object`);\n      return;\n    }\n    const workerType = unwrapText(item.workerType);\n    if (!workerType) {\n      issues.push(`${itemPath}.workerType must be a non-empty string`);\n    } else {\n      if (seenTypes.has(workerType)) {\n        issues.push(`duplicate workerType '${workerType}' in allowedWorkerAgencyPermissions`);\n      } else {\n        seenTypes.add(workerType);\n      }\n    }\n    const perms = item.permissions;\n    if (typeof perms === 'undefined') {\n      issues.push(`${itemPath}.permissions is required`);\n    } else {\n      validateSDPS(perms, `${itemPath}.permissions`);\n    }\n  });\n}\nif (issues.length > 0) {\n  return { events: [ { type: \"MyOS/Worker Agency Permission Invalid\", issues } ] };\n} else {\n  return { events: [ { type: \"MyOS/Worker Agency Permission Validated\" } ] };\n}\n";
+                        };
+                        readonly name: "ValidateBasicShape";
+                        readonly type: {
+                            readonly blueId: "ExZxT61PSpWHpEAtP2WKMXXqxEYN7Z13j7Zv36Dp99kS";
+                        };
+                    }];
+                };
+                readonly type: {
+                    readonly blueId: "7X3LkN54Yp88JgZbppPhP6hM3Jqiqv8Z2i4kS7phXtQe";
+                };
+            };
+        };
+        readonly granteeDocumentId: {
+            readonly type: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+            };
+        };
+        readonly name: "Worker Agency Permission Grant";
+        readonly type: {
+            readonly blueId: "Bu4YETSKYW8hHMwVy6zUUoBAGZPxX3KVXfKN9uoCUoJj";
+        };
+    };
     readonly '2gc8djtKGGRPjGfMQzvJZMviaXm4ytM1nA4DVbfyjkrW': {
         readonly description: "Update to a subscription.";
         readonly name: "Subscription Update";
@@ -260,6 +365,128 @@ export declare const contents: {
             readonly blueId: "CN5efWVizJbRsMCw8YWRfT2q9vM9XfeGDN9wFvYcvMnQ";
         };
     };
+    readonly '3SQR9pgQoY8rE9XhSmDDbKdHwe7ZZDaX4hPkYirhjYmD': {
+        readonly contracts: {
+            readonly granterChannel: {
+                readonly description: "Granter/owner’s timeline (direct grant-document revoke lives here).";
+                readonly type: {
+                    readonly blueId: "HCF8mXnX3dFjQ8osjxb4Wzm2Nm1DoXnTYuA5sPnV7NTs";
+                };
+            };
+            readonly initLifecycleChannel: {
+                readonly event: {
+                    readonly type: {
+                        readonly blueId: "BrpmpNt5JkapeUvPqYcxgXZrHNZX3R757dRwuXXdfNM2";
+                    };
+                };
+                readonly type: {
+                    readonly blueId: "H2aCCTUcLMTJozWkn7HPUjyFBFxamraw1q8DyWk87zxr";
+                };
+            };
+            readonly revoke: {
+                readonly channel: {
+                    readonly type: {
+                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                    };
+                    readonly value: "granterChannel";
+                };
+                readonly description: "Granter requests revocation on the grant document. Grantee-document self-revoke uses the existing revoke-request event with grantDocumentId emitted from the grantee document itself.";
+                readonly request: {
+                    readonly description: "Optional human-readable reason";
+                    readonly type: {
+                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                    };
+                };
+                readonly type: {
+                    readonly blueId: "BoAiqVUZv9Fum3wFqaX2JnQMBHJLxJSo2V9U2UBmCfsC";
+                };
+            };
+            readonly revokeImplGranter: {
+                readonly operation: {
+                    readonly type: {
+                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                    };
+                    readonly value: "revoke";
+                };
+                readonly steps: {
+                    readonly items: readonly [{
+                        readonly code: {
+                            readonly type: {
+                                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                            };
+                            readonly value: "return {\n  events: [\n    {\n      type: \"MyOS/Single Document Permission Revoke Requested\",\n      reason: event.message.request\n    }\n  ]\n};\n";
+                        };
+                        readonly name: "EmitRevokeRequested";
+                        readonly type: {
+                            readonly blueId: "ExZxT61PSpWHpEAtP2WKMXXqxEYN7Z13j7Zv36Dp99kS";
+                        };
+                    }];
+                };
+                readonly type: {
+                    readonly blueId: "CGdxkNjPcsdescqLPz6SNLsMyak6demQQr7RoKNHbCyv";
+                };
+            };
+            readonly validateOnInit: {
+                readonly channel: {
+                    readonly type: {
+                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                    };
+                    readonly value: "initLifecycleChannel";
+                };
+                readonly steps: {
+                    readonly items: readonly [{
+                        readonly code: {
+                            readonly type: {
+                                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                            };
+                            readonly value: "const skipValidation = document('/skipValidation');\nif (skipValidation === true) return { events: [] };\n\nconst issues = [];\n\nconst target = document('/targetSessionId');\nif (!target || typeof target !== 'string') issues.push(\"targetSessionId is missing or invalid\");\n\nconst granterId = document('/contracts/granterChannel/accountId');\nif (typeof granterId !== 'string' || granterId.length === 0) issues.push(\"granterChannel must be bound to an accountId\");\n\nconst gdoc = document('/granteeDocumentId');\nif (typeof gdoc !== 'string' || gdoc.trim().length === 0) issues.push(\"granteeDocumentId must be a non-empty string (originalBlueId)\");\n\nconst perms = document('/permissions');\nif (!perms || typeof perms !== 'object') {\n  issues.push(\"permissions block is missing\");\n} else {\n  if (perms.read !== true) issues.push(\"permissions.read must be true for SDPG\");\n  const hasSingle = Array.isArray(perms?.singleOps) && perms.singleOps.length > 0;\n  if (hasSingle) {\n    if (perms.singleOps.some(x => typeof x !== 'string' || x.trim().length === 0)) {\n      issues.push(\"permissions.singleOps must contain only non-empty strings\");\n    }\n  }\n  if (perms.allOps === true && hasSingle) {\n    issues.push(\"permissions.allOps=true and permissions.singleOps are mutually exclusive\");\n  }\n}\n\nif (issues.length > 0) return { events: [ { type: \"MyOS/Single Document Permission Invalid\", issues } ] };\nreturn { events: [ { type: \"MyOS/Single Document Permission Validated\" } ] };\n";
+                        };
+                        readonly name: "ValidateBasicShape";
+                        readonly type: {
+                            readonly blueId: "ExZxT61PSpWHpEAtP2WKMXXqxEYN7Z13j7Zv36Dp99kS";
+                        };
+                    }];
+                };
+                readonly type: {
+                    readonly blueId: "7X3LkN54Yp88JgZbppPhP6hM3Jqiqv8Z2i4kS7phXtQe";
+                };
+            };
+        };
+        readonly granteeDocumentId: {
+            readonly description: "Required original document id (blueId) that will act as the grantee principal ('document').";
+            readonly type: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+            };
+        };
+        readonly granterDocumentSessionId: {
+            readonly description: "Optional. If set, MyOS should evaluate authority using this document session as the principal (instead of granter accountId).";
+            readonly type: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+            };
+        };
+        readonly name: "Single Document Permission Grant To Document";
+        readonly permissions: {
+            readonly description: "Rights to grant on the target session (READ required; allOps and singleOps are mutually exclusive; singleOps is optional but must be non-empty if provided).";
+            readonly type: {
+                readonly blueId: "DRDQcve5AjwBK9z6Njfa4MNERko7Uf4ucvARFdC6sL54";
+            };
+        };
+        readonly skipValidation: {
+            readonly description: "If true, the validation will be skipped (MyOS Admin won't be triggered to create permission grant).";
+            readonly type: {
+                readonly blueId: "4EzhSubEimSQD3zrYHRtobfPPWntUuhEz8YcdxHsi12u";
+            };
+        };
+        readonly targetSessionId: {
+            readonly description: "Target document session id to grant access to";
+            readonly type: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+            };
+        };
+        readonly type: {
+            readonly blueId: "Bu4YETSKYW8hHMwVy6zUUoBAGZPxX3KVXfKN9uoCUoJj";
+        };
+    };
     readonly '3SULZSU6Yvi6rVuhGsRX7znRuyt6oWnx1Hdyu6QhdhFj': {
         readonly contracts: {
             readonly ownerChannel: {
@@ -767,29 +994,65 @@ export declare const contents: {
             readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
         };
     };
-    readonly '567voUMtKJQoqru6ZVPYb4EGwdeV99rUSAqsnod7gqfd': {
-        readonly description: "Emitted on initialise when local shape checks fail.";
-        readonly issues: {
-            readonly itemType: {
+    readonly '4XzYndDA5v9yL5LYBq1Jk7ibA5x2ebN8vbSbEAoRrjaG': {
+        readonly description: "Emitted either by revoke operation on the grant document or by grantee-document self-revoke flow when grantDocumentId is provided.";
+        readonly grantDocumentId: {
+            readonly description: "Optional. If present, MyOS Admin must revoke the referenced permission grant after validating that the requesting document matches the grant granteeDocumentId. If absent, revoke applies to the grant document that emitted the event.";
+            readonly type: {
                 readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
             };
+        };
+        readonly name: "Linked Documents Permission Revoke Requested";
+        readonly reason: {
             readonly type: {
-                readonly blueId: "6aehfNAxHLC1PHHoDr3tYtFH3RWNbiWdFancJ1bypXEY";
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
             };
         };
-        readonly name: "Single Document Permission Invalid";
         readonly type: {
-            readonly blueId: "5Wz4G9qcnBJnntYRkz4dgLK5bSuoMpYJZj4j5M59z4we";
+            readonly blueId: "8f9UhHMbRe62sFgzQVheToaJPYi7t7HPNVvpQTbqfL5n";
         };
     };
-    readonly '5cg55kgH8ckRVji4oWSBBxthJQFYmB5Lb1Pea7achyNr': {
-        readonly agentStoreDescription: {
-            readonly description: "Human-readable description for stores/directories";
+    readonly '53Kbf5fymxzBCJgf5BdCYCjCb6o5nWS1KWCzL8GkBF42': {
+        readonly description: "Emitted either by revoke operation on the grant document or by grantee-document self-revoke flow when grantDocumentId is provided.";
+        readonly grantDocumentId: {
+            readonly description: "Optional. If present, MyOS Admin must revoke the referenced permission grant after validating that the requesting document matches the grant granteeDocumentId. If absent, revoke applies to the grant document that emitted the event.";
             readonly type: {
                 readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
             };
         };
-        readonly automationTemplate: {
+        readonly name: "Single Document Permission Revoke Requested";
+        readonly reason: {
+            readonly type: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+            };
+        };
+        readonly type: {
+            readonly blueId: "8f9UhHMbRe62sFgzQVheToaJPYi7t7HPNVvpQTbqfL5n";
+        };
+    };
+    readonly '567voUMtKJQoqru6ZVPYb4EGwdeV99rUSAqsnod7gqfd': {
+        readonly description: "Emitted on initialise when local shape checks fail.";
+        readonly issues: {
+            readonly itemType: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+            };
+            readonly type: {
+                readonly blueId: "6aehfNAxHLC1PHHoDr3tYtFH3RWNbiWdFancJ1bypXEY";
+            };
+        };
+        readonly name: "Single Document Permission Invalid";
+        readonly type: {
+            readonly blueId: "5Wz4G9qcnBJnntYRkz4dgLK5bSuoMpYJZj4j5M59z4we";
+        };
+    };
+    readonly '5cg55kgH8ckRVji4oWSBBxthJQFYmB5Lb1Pea7achyNr': {
+        readonly agentStoreDescription: {
+            readonly description: "Human-readable description for stores/directories";
+            readonly type: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+            };
+        };
+        readonly automationTemplate: {
             readonly description: "Optional automation template to start post-creation";
             readonly type: {
                 readonly blueId: "8eyv5ogjHbTqUeaJKWHMenLs3MaCnpGSQkbPrCqvk2Ga";
@@ -972,6 +1235,24 @@ export declare const contents: {
             readonly blueId: "7QACj919YMRvFCTELCf6jfQTp41RVhtHdE6bPazLUZQ6";
         };
     };
+    readonly '5sLtygzt8kxjzDwJLjVcSZj5GCXFyUXKuXxF8UFjfmm7': {
+        readonly description: "Emitted either by revoke operation on the grant document or by grantee-document self-revoke flow when grantDocumentId is provided.";
+        readonly grantDocumentId: {
+            readonly description: "Optional. If present, MyOS Admin must revoke the referenced permission grant after validating that the requesting document matches the grant granteeDocumentId. If absent, revoke applies to the grant document that emitted the event.";
+            readonly type: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+            };
+        };
+        readonly name: "Worker Agency Permission Revoke Requested";
+        readonly reason: {
+            readonly type: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+            };
+        };
+        readonly type: {
+            readonly blueId: "8f9UhHMbRe62sFgzQVheToaJPYi7t7HPNVvpQTbqfL5n";
+        };
+    };
     readonly '5zNb9H63xeG2RjZ1gzJwyGxvTVzWdyNBb2Te6g8UXd72': {
         readonly allowedWorkerAgencyPermissions: {
             readonly itemType: {
@@ -1013,143 +1294,58 @@ export declare const contents: {
             readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
         };
     };
-    readonly '6fEj6jD4eEVJwjH9Z2aQ9HsqdaCzbppfsYL2mFLx32YP': {
-        readonly contracts: {
-            readonly granterChannel: {
-                readonly description: "Granter/owner’s timeline (actor allowed to request revoke)";
-                readonly type: {
-                    readonly blueId: "HCF8mXnX3dFjQ8osjxb4Wzm2Nm1DoXnTYuA5sPnV7NTs";
-                };
-            };
-            readonly initLifecycleChannel: {
-                readonly event: {
-                    readonly type: {
-                        readonly blueId: "BrpmpNt5JkapeUvPqYcxgXZrHNZX3R757dRwuXXdfNM2";
-                    };
-                };
-                readonly type: {
-                    readonly blueId: "H2aCCTUcLMTJozWkn7HPUjyFBFxamraw1q8DyWk87zxr";
-                };
-            };
-            readonly revoke: {
-                readonly channel: {
-                    readonly type: {
-                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                    };
-                    readonly value: "granterChannel";
-                };
-                readonly description: "Granter requests revocation (handled by MyOS Admin)";
-                readonly request: {
-                    readonly description: "Optional human-readable reason";
-                    readonly type: {
-                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                    };
-                };
-                readonly type: {
-                    readonly blueId: "BoAiqVUZv9Fum3wFqaX2JnQMBHJLxJSo2V9U2UBmCfsC";
-                };
-            };
-            readonly revokeImplGranter: {
-                readonly operation: {
-                    readonly type: {
-                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                    };
-                    readonly value: "revoke";
-                };
-                readonly steps: {
-                    readonly items: readonly [{
-                        readonly code: {
-                            readonly type: {
-                                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                            };
-                            readonly value: "return {\n  events: [\n    {\n      type: \"MyOS/Single Document Permission Revoke Requested\",\n      reason: event.message.request\n    }\n  ]\n};\n";
-                        };
-                        readonly name: "EmitRevokeRequested";
-                        readonly type: {
-                            readonly blueId: "ExZxT61PSpWHpEAtP2WKMXXqxEYN7Z13j7Zv36Dp99kS";
-                        };
-                    }];
-                };
-                readonly type: {
-                    readonly blueId: "CGdxkNjPcsdescqLPz6SNLsMyak6demQQr7RoKNHbCyv";
-                };
-            };
-            readonly validateOnInit: {
-                readonly channel: {
-                    readonly type: {
-                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                    };
-                    readonly value: "initLifecycleChannel";
-                };
-                readonly steps: {
-                    readonly items: readonly [{
-                        readonly code: {
-                            readonly type: {
-                                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                            };
-                            readonly value: "const skipValidation = document('/skipValidation');\nif (skipValidation === true) return { events: [] };\n\nconst issues = [];\n\n// Required: target session\nconst target = document('/targetSessionId');\nif (!target || typeof target !== 'string') issues.push(\"targetSessionId is missing or invalid\");\n\n// Required: bound granter identity\nconst granterId = document('/contracts/granterChannel/accountId');\nif (typeof granterId !== 'string' || granterId.length === 0) issues.push(\"granterChannel must be bound to an accountId\");\n\n// Required: grantee document id\nconst gdoc = document('/granteeDocumentId');\nif (typeof gdoc !== 'string' || gdoc.trim().length === 0) issues.push(\"granteeDocumentId must be a non-empty string (originalBlueId)\");\n\n// Permissions\nconst perms = document('/permissions');\nif (!perms || typeof perms !== 'object') {\n  issues.push(\"permissions block is missing\");\n} else {\n  if (perms.read !== true) issues.push(\"permissions.read must be true for SDPG\");\n  const hasSingle = Array.isArray(perms?.singleOps) && perms.singleOps.length > 0;\n  if (hasSingle) {\n    if (perms.singleOps.some(x => typeof x !== 'string' || x.trim().length === 0)) {\n      issues.push(\"permissions.singleOps must contain only non-empty strings\");\n    }\n  }\n  if (perms.allOps === true && hasSingle) {\n    issues.push(\"permissions.allOps=true and permissions.singleOps are mutually exclusive\");\n  }\n}\n\nif (issues.length > 0) return { events: [ { type: \"MyOS/Single Document Permission Invalid\", issues } ] };\nreturn { events: [ { type: \"MyOS/Single Document Permission Validated\" } ] };\n";
-                        };
-                        readonly name: "ValidateBasicShape";
-                        readonly type: {
-                            readonly blueId: "ExZxT61PSpWHpEAtP2WKMXXqxEYN7Z13j7Zv36Dp99kS";
-                        };
-                    }];
-                };
-                readonly type: {
-                    readonly blueId: "7X3LkN54Yp88JgZbppPhP6hM3Jqiqv8Z2i4kS7phXtQe";
-                };
-            };
-        };
-        readonly granteeDocumentId: {
-            readonly description: "Required original document id (blueId) that will act as the grantee principal ('document')";
+    readonly '6kUamSN8Yq4L46PRaKRVc2BnG6xN7HCpmyG2STW3hecZ': {
+        readonly description: "All initial rights from this LDPG have been persisted.";
+        readonly grantDocumentId: {
+            readonly description: "Optional. Stable handle of the created permission grant document. Required in request/response document-grant flows that later support self-revoke from the grantee document.";
             readonly type: {
                 readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
             };
         };
-        readonly granterDocumentSessionId: {
-            readonly description: "Optional. If set, MyOS should evaluate authority using this document session as the principal (instead of granter accountId).";
+        readonly links: {
             readonly type: {
-                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                readonly blueId: "75TXyy5E7vbexVAUZcjZ2vdQaG7fJJbAHAgrh8sMtTp5";
             };
         };
-        readonly name: "Single Document Permission Grant To Document";
-        readonly permissions: {
-            readonly description: "Rights to grant on the target session (READ required; allOps and singleOps are mutually exclusive; singleOps is optional but must be non-empty if provided).";
+        readonly name: "Linked Documents Permission Granted";
+        readonly targetSessionId: {
             readonly type: {
-                readonly blueId: "DRDQcve5AjwBK9z6Njfa4MNERko7Uf4ucvARFdC6sL54";
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
             };
         };
-        readonly skipValidation: {
-            readonly description: "If true, the validation will be skipped (MyOS Admin won't be triggered to create permission grant)";
+        readonly type: {
+            readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
+        };
+    };
+    readonly '6tzp2YX1rei3aAXg22SqYbeiiteGthj1LesTNCWm7wbU': {
+        readonly name: "MyOS Participants Orchestration";
+    };
+    readonly '75TkZZcfwGMnD8ReqQg1KhBkdEV9U637TS5bGSv9n2Xn': {
+        readonly allowedWorkerAgencyPermissions: {
+            readonly itemType: {
+                readonly blueId: "5J3RXNnALK1ZYAQBrjGwCQ4WpL3YUGHvz9WcGos6mMSp";
+            };
             readonly type: {
-                readonly blueId: "4EzhSubEimSQD3zrYHRtobfPPWntUuhEz8YcdxHsi12u";
+                readonly blueId: "6aehfNAxHLC1PHHoDr3tYtFH3RWNbiWdFancJ1bypXEY";
             };
         };
-        readonly targetSessionId: {
-            readonly description: "Target document session id to grant access to";
+        readonly description: "DB rows written; rights are effective.";
+        readonly grantDocumentId: {
+            readonly description: "Optional. Stable handle of the created permission grant document. Required in request/response document-grant flows that later support self-revoke from the grantee document.";
             readonly type: {
                 readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
             };
         };
-        readonly type: {
-            readonly blueId: "Bu4YETSKYW8hHMwVy6zUUoBAGZPxX3KVXfKN9uoCUoJj";
-        };
-    };
-    readonly '6fTSbBwfj3zkin6EjGevF16QzokKa1xNXrDjdQwbDir7': {
-        readonly description: "Emitted by revoke operation";
-        readonly name: "Linked Documents Permission Revoke Requested";
-        readonly reason: {
+        readonly granteeDocumentId: {
             readonly type: {
                 readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
             };
         };
+        readonly name: "Worker Agency Permission Granted";
         readonly type: {
-            readonly blueId: "8f9UhHMbRe62sFgzQVheToaJPYi7t7HPNVvpQTbqfL5n";
+            readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
         };
     };
-    readonly '6tzp2YX1rei3aAXg22SqYbeiiteGthj1LesTNCWm7wbU': {
-        readonly name: "MyOS Participants Orchestration";
-    };
     readonly '75TXyy5E7vbexVAUZcjZ2vdQaG7fJJbAHAgrh8sMtTp5': {
         readonly description: "Map from anchor name to permissions that will be granted for documents linked to the base document via that anchor.";
         readonly keyType: {
@@ -1190,26 +1386,6 @@ export declare const contents: {
         readonly description: "Template payload that can be included in a MyOS package to optionally start an automation after the Agent session is created.\n";
         readonly name: "Anchor Automation Template";
     };
-    readonly '8GNc7HmPKXmURG12ZBY8iXYEP7CTfBLsfXvpLcQ6EMwS': {
-        readonly allowedWorkerAgencyPermissions: {
-            readonly itemType: {
-                readonly blueId: "5J3RXNnALK1ZYAQBrjGwCQ4WpL3YUGHvz9WcGos6mMSp";
-            };
-            readonly type: {
-                readonly blueId: "6aehfNAxHLC1PHHoDr3tYtFH3RWNbiWdFancJ1bypXEY";
-            };
-        };
-        readonly description: "DB rows written; rights are effective.";
-        readonly granteeDocumentId: {
-            readonly type: {
-                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-            };
-        };
-        readonly name: "Worker Agency Permission Granted";
-        readonly type: {
-            readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
-        };
-    };
     readonly '8jCUCDoX7LUd5UaktCD7i4xxEheCWFQDkTbbNTEdYVZ9': {
         readonly description: "A reference to a specific, live document processing session on the MyOS platform.";
         readonly documentId: {
@@ -1259,23 +1435,6 @@ export declare const contents: {
         readonly description: "Marker type for a specialized Blue document that MyOS treats as an Agent, enabling richer UI and behaviors while remaining a standard Blue document.";
         readonly name: "Agent";
     };
-    readonly '8XYzJ3BrgB5uoAWU5HvZ7Gej9RXNG5r52ccneLZxMAQd': {
-        readonly description: "DB rows written; rights are effective.";
-        readonly name: "Single Document Permission Granted";
-        readonly permissions: {
-            readonly type: {
-                readonly blueId: "DRDQcve5AjwBK9z6Njfa4MNERko7Uf4ucvARFdC6sL54";
-            };
-        };
-        readonly targetSessionId: {
-            readonly type: {
-                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-            };
-        };
-        readonly type: {
-            readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
-        };
-    };
     readonly '98JmkF189jZpQRyzaiQxLbc2rRUqnRy2o6bH2qCRaBg3': {
         readonly channelName: {
             readonly description: "The abstract channel name for the new participant.";
@@ -1359,388 +1518,33 @@ export declare const contents: {
             readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
         };
     };
-    readonly A2dveyQFp6dYJgigdRuZW3dsbdeiG2HzHnjaobAHJCvY: {
-        readonly contracts: {
-            readonly granterChannel: {
-                readonly description: "Granter/owner’s timeline (actor allowed to request revoke)";
-                readonly type: {
-                    readonly blueId: "HCF8mXnX3dFjQ8osjxb4Wzm2Nm1DoXnTYuA5sPnV7NTs";
-                };
+    readonly AG6fiGy88gX5eKoUcHS2BV17EfMssiYZj99kx9RcpKEX: {
+        readonly description: "Emitted on initialise when local shape checks pass.";
+        readonly name: "Single Document Permission Validated";
+        readonly type: {
+            readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
+        };
+    };
+    readonly AMNPp7uGYBgygbnmMS649m6Gf5bNULaEK8aSQ3b4xdrf: {
+        readonly description: "Rights granted by this WAG have been retracted.";
+        readonly name: "Worker Agency Permission Revoked";
+        readonly type: {
+            readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
+        };
+    };
+    readonly BaNmvStTGdsBsSHiHbqdhrrC7vfwiQdDK6NYiyRbJowx: {
+        readonly description: "MyOS Admin could not invoke the requested operation.";
+        readonly name: "Call Operation Failed";
+        readonly operation: {
+            readonly description: "Operation name that was attempted.";
+            readonly type: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
             };
-            readonly initLifecycleChannel: {
-                readonly event: {
-                    readonly type: {
-                        readonly blueId: "BrpmpNt5JkapeUvPqYcxgXZrHNZX3R757dRwuXXdfNM2";
-                    };
-                };
-                readonly type: {
-                    readonly blueId: "H2aCCTUcLMTJozWkn7HPUjyFBFxamraw1q8DyWk87zxr";
-                };
-            };
-            readonly revoke: {
-                readonly channel: {
-                    readonly type: {
-                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                    };
-                    readonly value: "granterChannel";
-                };
-                readonly description: "Granter indicates the grant should be revoked (MyOS Admin will handle)";
-                readonly request: {
-                    readonly description: "Optional human-readable reason";
-                    readonly type: {
-                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                    };
-                };
-                readonly type: {
-                    readonly blueId: "BoAiqVUZv9Fum3wFqaX2JnQMBHJLxJSo2V9U2UBmCfsC";
-                };
-            };
-            readonly revokeImplGranter: {
-                readonly operation: {
-                    readonly type: {
-                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                    };
-                    readonly value: "revoke";
-                };
-                readonly steps: {
-                    readonly items: readonly [{
-                        readonly code: {
-                            readonly type: {
-                                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                            };
-                            readonly value: "return {\n  events: [\n    {\n      type: \"MyOS/Linked Documents Permission Revoke Requested\",\n      reason: event.message.request\n    }\n  ]\n};\n";
-                        };
-                        readonly name: "EmitRevokeRequested";
-                        readonly type: {
-                            readonly blueId: "ExZxT61PSpWHpEAtP2WKMXXqxEYN7Z13j7Zv36Dp99kS";
-                        };
-                    }];
-                };
-                readonly type: {
-                    readonly blueId: "CGdxkNjPcsdescqLPz6SNLsMyak6demQQr7RoKNHbCyv";
-                };
-            };
-            readonly validateOnInit: {
-                readonly channel: {
-                    readonly type: {
-                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                    };
-                    readonly value: "initLifecycleChannel";
-                };
-                readonly steps: {
-                    readonly items: readonly [{
-                        readonly code: {
-                            readonly type: {
-                                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                            };
-                            readonly value: "const skipValidation = document('/skipValidation');\nif (skipValidation === true) return { events: [] };\n\nconst issues = [];\n\n// Required: target session\nconst target = document('/targetSessionId');\nif (!target || typeof target !== 'string') issues.push(\"targetSessionId is missing or invalid\");\n\n// Required: bound granter identity\nconst granterId = document('/contracts/granterChannel/accountId');\nif (typeof granterId !== 'string' || granterId.length === 0) issues.push(\"granterChannel must be bound to an accountId\");\n\n// Required: grantee document id\nconst gdoc = document('/granteeDocumentId');\nif (typeof gdoc !== 'string' || gdoc.trim().length === 0) issues.push(\"granteeDocumentId must be a non-empty string\");\n\n// Required: links\nconst links = document('/links');\nif (!links || typeof links !== 'object') issues.push(\"links is missing or invalid\");\n\nconst anchors = Object.keys(links).filter(key => !['description', 'type', 'keyType', 'valueType'].includes(key));\nif (anchors.length === 0) {\n  issues.push(\"links must have at least one anchor entry\");\n}\nfor (const anchor of anchors) {\n  const perms = links[anchor];\n  if (!perms || perms.read !== true) {\n    issues.push(`links['${anchor}'].read must be true`);\n  }\n  const hasSingle = Array.isArray(perms.singleOps) && perms.singleOps.length > 0;\n  if (hasSingle && perms.singleOps.some(x => typeof x !== \"string\" || x.trim().length === 0)) {\n    issues.push(`links['${anchor}'].singleOps must contain only non-empty strings`);\n  }\n  if (perms.allOps === true && hasSingle) {\n    issues.push(`links['${anchor}'].allOps=true and singleOps are mutually exclusive`);\n  }\n}\n\nif (issues.length > 0) return { events: [ { type: \"MyOS/Linked Documents Permission Invalid\", issues } ] };\nreturn { events: [ { type: \"MyOS/Linked Documents Permission Validated\" } ] };\n";
-                        };
-                        readonly name: "ValidateBasicShape";
-                        readonly type: {
-                            readonly blueId: "ExZxT61PSpWHpEAtP2WKMXXqxEYN7Z13j7Zv36Dp99kS";
-                        };
-                    }];
-                };
-                readonly type: {
-                    readonly blueId: "7X3LkN54Yp88JgZbppPhP6hM3Jqiqv8Z2i4kS7phXtQe";
-                };
-            };
-        };
-        readonly granteeDocumentId: {
-            readonly description: "Required original document id (blueId) that will act as the 'document' principal.";
-            readonly type: {
-                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-            };
-        };
-        readonly granterDocumentSessionId: {
-            readonly description: "Optional. If set, MyOS should evaluate authority as this document session\n(principalType='document', granteeId=documentId of this session),\ninstead of the granter accountId.\n";
-            readonly type: {
-                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-            };
-        };
-        readonly links: {
-            readonly description: "Map from anchor name to permissions that will be granted for documents linked to the base document via that anchor.";
-            readonly type: {
-                readonly blueId: "75TXyy5E7vbexVAUZcjZ2vdQaG7fJJbAHAgrh8sMtTp5";
-            };
-        };
-        readonly name: "Linked Documents Permission Grant To Document";
-        readonly skipValidation: {
-            readonly description: "If true, the validation will be skipped (MyOS Admin won't be triggered to create permission grant)";
-            readonly type: {
-                readonly blueId: "4EzhSubEimSQD3zrYHRtobfPPWntUuhEz8YcdxHsi12u";
-            };
-        };
-        readonly targetSessionId: {
-            readonly description: "Base document session id whose anchors define the scope of this grant.";
-            readonly type: {
-                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-            };
-        };
-        readonly type: {
-            readonly blueId: "Bu4YETSKYW8hHMwVy6zUUoBAGZPxX3KVXfKN9uoCUoJj";
-        };
-    };
-    readonly A73AVDR9GWAshFUC2Me2qXNns2HECzbadtsgp5zxCjGx: {
-        readonly allowedWorkerAgencyPermissions: {
-            readonly itemType: {
-                readonly blueId: "5J3RXNnALK1ZYAQBrjGwCQ4WpL3YUGHvz9WcGos6mMSp";
-            };
-            readonly type: {
-                readonly blueId: "6aehfNAxHLC1PHHoDr3tYtFH3RWNbiWdFancJ1bypXEY";
-            };
-        };
-        readonly contracts: {
-            readonly granterChannel: {
-                readonly description: "Granter/owner’s timeline (actor allowed to request revoke)";
-                readonly type: {
-                    readonly blueId: "HCF8mXnX3dFjQ8osjxb4Wzm2Nm1DoXnTYuA5sPnV7NTs";
-                };
-            };
-            readonly initLifecycleChannel: {
-                readonly event: {
-                    readonly type: {
-                        readonly blueId: "BrpmpNt5JkapeUvPqYcxgXZrHNZX3R757dRwuXXdfNM2";
-                    };
-                };
-                readonly type: {
-                    readonly blueId: "H2aCCTUcLMTJozWkn7HPUjyFBFxamraw1q8DyWk87zxr";
-                };
-            };
-            readonly revoke: {
-                readonly channel: {
-                    readonly type: {
-                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                    };
-                    readonly value: "granterChannel";
-                };
-                readonly description: "Granter requests revocation (handled by MyOS Admin)";
-                readonly request: {
-                    readonly description: "Optional human-readable reason";
-                    readonly type: {
-                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                    };
-                };
-                readonly type: {
-                    readonly blueId: "BoAiqVUZv9Fum3wFqaX2JnQMBHJLxJSo2V9U2UBmCfsC";
-                };
-            };
-            readonly revokeImplGranter: {
-                readonly operation: {
-                    readonly type: {
-                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                    };
-                    readonly value: "revoke";
-                };
-                readonly steps: {
-                    readonly items: readonly [{
-                        readonly code: {
-                            readonly type: {
-                                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                            };
-                            readonly value: "return {\n  events: [\n    {\n      type: \"MyOS/Worker Agency Permission Revoke Requested\",\n      reason: event.message.request\n    }\n  ]\n};\n";
-                        };
-                        readonly name: "EmitRevokeRequested";
-                        readonly type: {
-                            readonly blueId: "ExZxT61PSpWHpEAtP2WKMXXqxEYN7Z13j7Zv36Dp99kS";
-                        };
-                    }];
-                };
-                readonly type: {
-                    readonly blueId: "CGdxkNjPcsdescqLPz6SNLsMyak6demQQr7RoKNHbCyv";
-                };
-            };
-            readonly validateOnInit: {
-                readonly channel: {
-                    readonly type: {
-                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                    };
-                    readonly value: "initLifecycleChannel";
-                };
-                readonly steps: {
-                    readonly items: readonly [{
-                        readonly code: {
-                            readonly type: {
-                                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                            };
-                            readonly value: "const issues = [];\n\nconst unwrapText = value => {\n  if (typeof value === 'string') {\n    const trimmed = value.trim();\n    return trimmed.length > 0 ? trimmed : undefined;\n  }\n  if (value && typeof value === 'object') {\n    if (typeof value.value === 'string') {\n      const trimmed = value.value.trim();\n      return trimmed.length > 0 ? trimmed : undefined;\n    }\n    if (typeof value.workerType === 'string') {\n      const trimmed = value.workerType.trim();\n      return trimmed.length > 0 ? trimmed : undefined;\n    }\n    if (typeof value.name === 'string') {\n      const trimmed = value.name.trim();\n      return trimmed.length > 0 ? trimmed : undefined;\n    }\n  }\n  return undefined;\n};\n\nconst unwrapBoolean = value => {\n  if (typeof value === 'boolean') {\n    return value;\n  }\n  if (value && typeof value === 'object') {\n    if (typeof value.value === 'boolean') {\n      return value.value;\n    }\n    if (\n      value.value &&\n      typeof value.value === 'object' &&\n      typeof value.value.value === 'boolean'\n    ) {\n      return value.value.value;\n    }\n  }\n  return undefined;\n};\n\nconst hasBooleanValue = value => {\n  if (typeof value === 'boolean') {\n    return true;\n  }\n  if (value && typeof value === 'object') {\n    if (typeof value.value === 'boolean') {\n      return true;\n    }\n    if (\n      value.value &&\n      typeof value.value === 'object' &&\n      typeof value.value.value === 'boolean'\n    ) {\n      return true;\n    }\n  }\n  return false;\n};\n\nconst unwrapArray = value => {\n  if (Array.isArray(value)) {\n    return value;\n  }\n  if (value && typeof value === 'object' && Array.isArray(value.items)) {\n    return value.items;\n  }\n  return [];\n};\n\nconst unwrapRecord = value => {\n  if (value && typeof value === 'object' && !Array.isArray(value)) {\n    if (value.value && typeof value.value === 'object') {\n      return value.value;\n    }\n    return value;\n  }\n  return {};\n};\n\n// --- granter binding (owner account) ---\nconst granterId = document('/contracts/granterChannel/accountId');\nif (typeof granterId !== 'string' || granterId.length === 0) {\n  issues.push(\"granterChannel must be bound to an accountId\");\n}\n// --- grantee (parent worker) session id ---\nconst granteeDocumentId = document('/granteeDocumentId');\nif (\n  typeof granteeDocumentId !== 'string' ||\n  granteeDocumentId.trim().length === 0\n) {\n  issues.push(\"granteeDocumentId must be a non-empty string\");\n}\n// --- allowedWorkerAgencyPermissions : list of { workerType, permissions } ---\nconst list = document('/allowedWorkerAgencyPermissions');\nif (!Array.isArray(list) || list.length === 0) {\n  issues.push(\"allowedWorkerAgencyPermissions must be a non-empty array\");\n} else {\n  // helper: validate Single Document Permission Set\n  const validateSDPS = (p, path) => {\n    const record = unwrapRecord(p);\n    if (Object.keys(record).length === 0) {\n      issues.push(`${path} must be an object`);\n      return;\n    }\n    // read must be true to allow any access at all\n    const read = unwrapBoolean(record.read);\n    if (read !== true) {\n      issues.push(`${path}.read must be true`);\n    }\n    const share = record.share;\n    const shareValue = unwrapBoolean(share);\n    if (hasBooleanValue(share) && typeof shareValue !== 'boolean') {\n      issues.push(`${path}.share must be boolean if provided`);\n    }\n    const allOps = record.allOps;\n    const allOpsValue = unwrapBoolean(allOps);\n    if (hasBooleanValue(allOps) && typeof allOpsValue !== 'boolean') {\n      issues.push(`${path}.allOps must be boolean if provided`);\n    }\n    const singleOpsRaw = unwrapArray(record.singleOps)\n      .map(entry => unwrapText(entry))\n      .filter(Boolean);\n    const hasSingle = singleOpsRaw.length > 0;\n    if (hasSingle) {\n      const bad = singleOpsRaw.length !== unwrapArray(record.singleOps).length;\n      if (bad) issues.push(`${path}.singleOps must contain only non-empty strings`);\n    }\n    if (allOpsValue === true && hasSingle) {\n      issues.push(`${path}.allOps=true and ${path}.singleOps are mutually exclusive`);\n    }\n    // Note: it is valid to have read=true with neither allOps nor singleOps (read-only template)\n  };\n  const seenTypes = new Set();\n  list.forEach((item, idx) => {\n    const itemPath = `/allowedWorkerAgencyPermissions[${idx}]`;\n    // shape\n    if (typeof item !== 'object' || item === null) {\n      issues.push(`${itemPath} must be an object`);\n      return;\n    }\n    // workerType\n    const workerType = unwrapText(item.workerType);\n    if (!workerType) {\n      issues.push(`${itemPath}.workerType must be a non-empty string`);\n    } else {\n      if (seenTypes.has(workerType)) {\n        issues.push(`duplicate workerType '${workerType}' in allowedWorkerAgencyPermissions`);\n      } else {\n        seenTypes.add(workerType);\n      }\n    }\n    // permissions (Single Document Permission Set)\n    const perms = item.permissions;\n    if (typeof perms === 'undefined') {\n      issues.push(`${itemPath}.permissions is required`);\n    } else {\n      validateSDPS(perms, `${itemPath}.permissions`);\n    }\n  });\n}\nif (issues.length > 0) {\n  return { events: [ { type: \"MyOS/Worker Agency Permission Invalid\", issues } ] };\n} else {\n  return { events: [ { type: \"MyOS/Worker Agency Permission Validated\" } ] };\n}\n";
-                        };
-                        readonly name: "ValidateBasicShape";
-                        readonly type: {
-                            readonly blueId: "ExZxT61PSpWHpEAtP2WKMXXqxEYN7Z13j7Zv36Dp99kS";
-                        };
-                    }];
-                };
-                readonly type: {
-                    readonly blueId: "7X3LkN54Yp88JgZbppPhP6hM3Jqiqv8Z2i4kS7phXtQe";
-                };
-            };
-        };
-        readonly granteeDocumentId: {
-            readonly type: {
-                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-            };
-        };
-        readonly name: "Worker Agency Permission Grant";
-        readonly type: {
-            readonly blueId: "Bu4YETSKYW8hHMwVy6zUUoBAGZPxX3KVXfKN9uoCUoJj";
-        };
-    };
-    readonly ABJ7njZbfTXNP173SCoMytQtVfMXCEwPdFhSJ7F3Vbx9: {
-        readonly description: "Emitted by revoke operation";
-        readonly name: "Worker Agency Permission Revoke Requested";
-        readonly reason: {
-            readonly type: {
-                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-            };
-        };
-        readonly type: {
-            readonly blueId: "8f9UhHMbRe62sFgzQVheToaJPYi7t7HPNVvpQTbqfL5n";
-        };
-    };
-    readonly AFX9ct4gYywCbqPUJWaTz4JXS74RxxNPUMNzBMzNGD8c: {
-        readonly contracts: {
-            readonly granteeChannel: {
-                readonly description: "Grantee’s timeline (recipient of the rights)";
-                readonly type: {
-                    readonly blueId: "HCF8mXnX3dFjQ8osjxb4Wzm2Nm1DoXnTYuA5sPnV7NTs";
-                };
-            };
-            readonly granterChannel: {
-                readonly description: "Granter/owner’s timeline (actor allowed to request revoke)";
-                readonly type: {
-                    readonly blueId: "HCF8mXnX3dFjQ8osjxb4Wzm2Nm1DoXnTYuA5sPnV7NTs";
-                };
-            };
-            readonly initLifecycleChannel: {
-                readonly event: {
-                    readonly type: {
-                        readonly blueId: "BrpmpNt5JkapeUvPqYcxgXZrHNZX3R757dRwuXXdfNM2";
-                    };
-                };
-                readonly type: {
-                    readonly blueId: "H2aCCTUcLMTJozWkn7HPUjyFBFxamraw1q8DyWk87zxr";
-                };
-            };
-            readonly revoke: {
-                readonly channel: {
-                    readonly type: {
-                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                    };
-                    readonly value: "granterChannel";
-                };
-                readonly description: "Granter or grantee indicates the grant should be revoked (MyOS Admin will handle)";
-                readonly request: {
-                    readonly description: "Optional human-readable reason";
-                    readonly type: {
-                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                    };
-                };
-                readonly type: {
-                    readonly blueId: "BoAiqVUZv9Fum3wFqaX2JnQMBHJLxJSo2V9U2UBmCfsC";
-                };
-            };
-            readonly revokeImplGranter: {
-                readonly operation: {
-                    readonly type: {
-                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                    };
-                    readonly value: "revoke";
-                };
-                readonly steps: {
-                    readonly items: readonly [{
-                        readonly code: {
-                            readonly type: {
-                                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                            };
-                            readonly value: "return {\n  events: [\n    {\n      type: \"MyOS/Linked Documents Permission Revoke Requested\",\n      reason: event.message.request\n    }\n  ]\n};\n";
-                        };
-                        readonly name: "EmitRevokeRequested";
-                        readonly type: {
-                            readonly blueId: "ExZxT61PSpWHpEAtP2WKMXXqxEYN7Z13j7Zv36Dp99kS";
-                        };
-                    }];
-                };
-                readonly type: {
-                    readonly blueId: "CGdxkNjPcsdescqLPz6SNLsMyak6demQQr7RoKNHbCyv";
-                };
-            };
-            readonly validateOnInit: {
-                readonly channel: {
-                    readonly type: {
-                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                    };
-                    readonly value: "initLifecycleChannel";
-                };
-                readonly steps: {
-                    readonly items: readonly [{
-                        readonly code: {
-                            readonly type: {
-                                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-                            };
-                            readonly value: "const issues = [];\n\n// Required: target session\nconst target = document('/targetSessionId');\nif (!target || typeof target !== 'string') issues.push(\"targetSessionId is missing or invalid\");\n\n// Required: bound identities\nconst granterId = document('/contracts/granterChannel/accountId');\nif (typeof granterId !== 'string' || granterId.length === 0) issues.push(\"granterChannel must be bound to an accountId\");\nconst granteeId = document('/contracts/granteeChannel/accountId');\nif (typeof granteeId !== 'string' || granteeId.length === 0) issues.push(\"granteeChannel must be bound to an accountId\");\n\n// Required: links\nconst links = document('/links');\nif (!links || typeof links !== 'object') issues.push(\"links is missing or invalid\");\n\nconst anchors = Object.keys(links).filter(key => !['description', 'type', 'keyType', 'valueType'].includes(key));\nif (anchors.length === 0) {\n  issues.push(\"links must have at least one anchor entry\");\n}\nfor (const anchor of anchors) {\n  const perms = links[anchor];\n  if (!perms || perms.read !== true) {\n    issues.push(`links['${anchor}'].read must be true`);\n  }\n  const hasSingle = Array.isArray(perms.singleOps) && perms.singleOps.length > 0;\n  if (hasSingle && perms.singleOps.some(x => typeof x !== \"string\" || x.trim().length === 0)) {\n    issues.push(`links['${anchor}'].singleOps must contain only non-empty strings`);\n  }\n  if (perms.allOps === true && hasSingle) {\n    issues.push(`links['${anchor}'].allOps=true and singleOps are mutually exclusive`);\n  }\n}\n\nif (issues.length > 0) return { events: [ { type: \"MyOS/Linked Documents Permission Invalid\", issues } ] };\nreturn { events: [ { type: \"MyOS/Linked Documents Permission Validated\" } ] };\n";
-                        };
-                        readonly name: "ValidateBasicShape";
-                        readonly type: {
-                            readonly blueId: "ExZxT61PSpWHpEAtP2WKMXXqxEYN7Z13j7Zv36Dp99kS";
-                        };
-                    }];
-                };
-                readonly type: {
-                    readonly blueId: "7X3LkN54Yp88JgZbppPhP6hM3Jqiqv8Z2i4kS7phXtQe";
-                };
-            };
-        };
-        readonly granterDocumentSessionId: {
-            readonly description: "Optional. If set, MyOS should evaluate authority as this document session\n(principalType='document', granteeId=documentId of this session),\ninstead of the granter accountId.\n";
-            readonly type: {
-                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-            };
-        };
-        readonly links: {
-            readonly description: "Map from anchor name to permissions that will be granted for documents linked to the base document via that anchor.";
-            readonly type: {
-                readonly blueId: "75TXyy5E7vbexVAUZcjZ2vdQaG7fJJbAHAgrh8sMtTp5";
-            };
-        };
-        readonly name: "Linked Documents Permission Grant To Account";
-        readonly targetSessionId: {
-            readonly description: "Base document session id whose anchors define the scope of this grant.";
-            readonly type: {
-                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-            };
-        };
-        readonly type: {
-            readonly blueId: "Bu4YETSKYW8hHMwVy6zUUoBAGZPxX3KVXfKN9uoCUoJj";
-        };
-    };
-    readonly AG6fiGy88gX5eKoUcHS2BV17EfMssiYZj99kx9RcpKEX: {
-        readonly description: "Emitted on initialise when local shape checks pass.";
-        readonly name: "Single Document Permission Validated";
-        readonly type: {
-            readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
-        };
-    };
-    readonly AMNPp7uGYBgygbnmMS649m6Gf5bNULaEK8aSQ3b4xdrf: {
-        readonly description: "Rights granted by this WAG have been retracted.";
-        readonly name: "Worker Agency Permission Revoked";
-        readonly type: {
-            readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
-        };
-    };
-    readonly BaNmvStTGdsBsSHiHbqdhrrC7vfwiQdDK6NYiyRbJowx: {
-        readonly description: "MyOS Admin could not invoke the requested operation.";
-        readonly name: "Call Operation Failed";
-        readonly operation: {
-            readonly description: "Operation name that was attempted.";
-            readonly type: {
-                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-            };
-        };
-        readonly reason: {
-            readonly description: "Failure reason code (permission_denied, execution_error, invalid_request, target_not_found).";
-            readonly type: {
-                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+        };
+        readonly reason: {
+            readonly description: "Failure reason code (permission_denied, execution_error, invalid_request, target_not_found).";
+            readonly type: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
             };
         };
         readonly targetSessionId: {
@@ -1766,23 +1570,6 @@ export declare const contents: {
             readonly blueId: "D2ERUvbpn6R6PR7hjFsGofwQsu9bkRfc6wbSYHcfJtMD";
         };
     };
-    readonly BM9qSFkhY9CV4BwHFP6DrrB9VbFZhTfwxCeS8Kh96o5N: {
-        readonly description: "All initial rights from this LDPG have been persisted.";
-        readonly links: {
-            readonly type: {
-                readonly blueId: "75TXyy5E7vbexVAUZcjZ2vdQaG7fJJbAHAgrh8sMtTp5";
-            };
-        };
-        readonly name: "Linked Documents Permission Granted";
-        readonly targetSessionId: {
-            readonly type: {
-                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-            };
-        };
-        readonly type: {
-            readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
-        };
-    };
     readonly BnrAcFrEHzoARE2yqKmRv7jrPWCbJsVBqSoXwWCaTtrk: {
         readonly description: "Document asks MyOS Admin to mediate a subscription to a target session it can READ.";
         readonly name: "Subscribe to Session Requested";
@@ -1876,6 +1663,29 @@ export declare const contents: {
         readonly description: "Document base for MyOS Admin participant";
         readonly name: "MyOS Admin Base";
     };
+    readonly BZPjcZmkuJpVFDYAZMexdG68KKFhgabnieBdG6DpHexR: {
+        readonly description: "DB rows written; rights are effective.";
+        readonly grantDocumentId: {
+            readonly description: "Optional. Stable handle of the created permission grant document. Required in request/response document-grant flows that later support self-revoke from the grantee document.";
+            readonly type: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+            };
+        };
+        readonly name: "Single Document Permission Granted";
+        readonly permissions: {
+            readonly type: {
+                readonly blueId: "DRDQcve5AjwBK9z6Njfa4MNERko7Uf4ucvARFdC6sL54";
+            };
+        };
+        readonly targetSessionId: {
+            readonly type: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+            };
+        };
+        readonly type: {
+            readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
+        };
+    };
     readonly CeWyRmXAMZqvWBvby2KbRUZWcS7Pdxs42vnMXgn9gg6H: {
         readonly name: "MyOS Session Interaction";
     };
@@ -2025,68 +1835,178 @@ export declare const contents: {
                 readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
             };
         };
-        readonly targetSessionId: {
-            readonly description: "Target document session that received the request.";
+        readonly targetSessionId: {
+            readonly description: "Target document session that received the request.";
+            readonly type: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+            };
+        };
+        readonly type: {
+            readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
+        };
+    };
+    readonly DFMcBSRfNqK6NqdNLCF8b88soezajjq4gyBS8QRzSBhe: {
+        readonly description: "Emitted when the LDPG passes local validation.";
+        readonly name: "Linked Documents Permission Validated";
+        readonly type: {
+            readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
+        };
+    };
+    readonly DL73vQGQGdEFA53shnv58CkVJVVs5P5Hygc5qNghY5Zf: {
+        readonly description: "Marker type for a specialized Blue document that MyOS treats as an Agent, enabling richer UI and behaviors while remaining a standard Blue document.";
+        readonly name: "LLM Agent";
+        readonly type: {
+            readonly blueId: "8s2rAFDtiB6sCwqeURkT4Lq7fcc2FXBkmX9B9p7R4Boc";
+        };
+    };
+    readonly DRDQcve5AjwBK9z6Njfa4MNERko7Uf4ucvARFdC6sL54: {
+        readonly allOps: {
+            readonly type: {
+                readonly blueId: "4EzhSubEimSQD3zrYHRtobfPPWntUuhEz8YcdxHsi12u";
+            };
+        };
+        readonly description: "Permissions that become effective for a single target session.";
+        readonly name: "Single Document Permission Set";
+        readonly read: {
+            readonly type: {
+                readonly blueId: "4EzhSubEimSQD3zrYHRtobfPPWntUuhEz8YcdxHsi12u";
+            };
+            readonly value: true;
+        };
+        readonly share: {
+            readonly type: {
+                readonly blueId: "4EzhSubEimSQD3zrYHRtobfPPWntUuhEz8YcdxHsi12u";
+            };
+        };
+        readonly singleOps: {
+            readonly itemType: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+            };
+            readonly type: {
+                readonly blueId: "6aehfNAxHLC1PHHoDr3tYtFH3RWNbiWdFancJ1bypXEY";
+            };
+        };
+    };
+    readonly DVuSpdSQzjj36rN9Eemu7oReooPe1YaqARx7aanQDppy: {
+        readonly contracts: {
+            readonly granterChannel: {
+                readonly description: "Granter/owner’s timeline (direct grant-document revoke lives here).";
+                readonly type: {
+                    readonly blueId: "HCF8mXnX3dFjQ8osjxb4Wzm2Nm1DoXnTYuA5sPnV7NTs";
+                };
+            };
+            readonly initLifecycleChannel: {
+                readonly event: {
+                    readonly type: {
+                        readonly blueId: "BrpmpNt5JkapeUvPqYcxgXZrHNZX3R757dRwuXXdfNM2";
+                    };
+                };
+                readonly type: {
+                    readonly blueId: "H2aCCTUcLMTJozWkn7HPUjyFBFxamraw1q8DyWk87zxr";
+                };
+            };
+            readonly revoke: {
+                readonly channel: {
+                    readonly type: {
+                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                    };
+                    readonly value: "granterChannel";
+                };
+                readonly description: "Granter requests revocation on the grant document. Grantee-document self-revoke uses the existing revoke-request event with grantDocumentId emitted from the grantee document itself.";
+                readonly request: {
+                    readonly description: "Optional human-readable reason";
+                    readonly type: {
+                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                    };
+                };
+                readonly type: {
+                    readonly blueId: "BoAiqVUZv9Fum3wFqaX2JnQMBHJLxJSo2V9U2UBmCfsC";
+                };
+            };
+            readonly revokeImplGranter: {
+                readonly operation: {
+                    readonly type: {
+                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                    };
+                    readonly value: "revoke";
+                };
+                readonly steps: {
+                    readonly items: readonly [{
+                        readonly code: {
+                            readonly type: {
+                                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                            };
+                            readonly value: "return {\n  events: [\n    {\n      type: \"MyOS/Linked Documents Permission Revoke Requested\",\n      reason: event.message.request\n    }\n  ]\n};\n";
+                        };
+                        readonly name: "EmitRevokeRequested";
+                        readonly type: {
+                            readonly blueId: "ExZxT61PSpWHpEAtP2WKMXXqxEYN7Z13j7Zv36Dp99kS";
+                        };
+                    }];
+                };
+                readonly type: {
+                    readonly blueId: "CGdxkNjPcsdescqLPz6SNLsMyak6demQQr7RoKNHbCyv";
+                };
+            };
+            readonly validateOnInit: {
+                readonly channel: {
+                    readonly type: {
+                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                    };
+                    readonly value: "initLifecycleChannel";
+                };
+                readonly steps: {
+                    readonly items: readonly [{
+                        readonly code: {
+                            readonly type: {
+                                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                            };
+                            readonly value: "const skipValidation = document('/skipValidation');\nif (skipValidation === true) return { events: [] };\n\nconst issues = [];\n\nconst target = document('/targetSessionId');\nif (!target || typeof target !== 'string') issues.push(\"targetSessionId is missing or invalid\");\n\nconst granterId = document('/contracts/granterChannel/accountId');\nif (typeof granterId !== 'string' || granterId.length === 0) issues.push(\"granterChannel must be bound to an accountId\");\n\nconst gdoc = document('/granteeDocumentId');\nif (typeof gdoc !== 'string' || gdoc.trim().length === 0) issues.push(\"granteeDocumentId must be a non-empty string\");\n\nconst links = document('/links');\nif (!links || typeof links !== 'object') issues.push(\"links is missing or invalid\");\n\nconst anchors = Object.keys(links).filter(key => !['description', 'type', 'keyType', 'valueType'].includes(key));\nif (anchors.length === 0) {\n  issues.push(\"links must have at least one anchor entry\");\n}\nfor (const anchor of anchors) {\n  const perms = links[anchor];\n  if (!perms || perms.read !== true) {\n    issues.push(`links['${anchor}'].read must be true`);\n  }\n  const hasSingle = Array.isArray(perms.singleOps) && perms.singleOps.length > 0;\n  if (hasSingle && perms.singleOps.some(x => typeof x !== \"string\" || x.trim().length === 0)) {\n    issues.push(`links['${anchor}'].singleOps must contain only non-empty strings`);\n  }\n  if (perms.allOps === true && hasSingle) {\n    issues.push(`links['${anchor}'].allOps=true and singleOps are mutually exclusive`);\n  }\n}\n\nif (issues.length > 0) return { events: [ { type: \"MyOS/Linked Documents Permission Invalid\", issues } ] };\nreturn { events: [ { type: \"MyOS/Linked Documents Permission Validated\" } ] };\n";
+                        };
+                        readonly name: "ValidateBasicShape";
+                        readonly type: {
+                            readonly blueId: "ExZxT61PSpWHpEAtP2WKMXXqxEYN7Z13j7Zv36Dp99kS";
+                        };
+                    }];
+                };
+                readonly type: {
+                    readonly blueId: "7X3LkN54Yp88JgZbppPhP6hM3Jqiqv8Z2i4kS7phXtQe";
+                };
+            };
+        };
+        readonly granteeDocumentId: {
+            readonly description: "Required original document id (blueId) that will act as the 'document' principal.";
             readonly type: {
                 readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
             };
         };
-        readonly type: {
-            readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
-        };
-    };
-    readonly DFMcBSRfNqK6NqdNLCF8b88soezajjq4gyBS8QRzSBhe: {
-        readonly description: "Emitted when the LDPG passes local validation.";
-        readonly name: "Linked Documents Permission Validated";
-        readonly type: {
-            readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
-        };
-    };
-    readonly DL73vQGQGdEFA53shnv58CkVJVVs5P5Hygc5qNghY5Zf: {
-        readonly description: "Marker type for a specialized Blue document that MyOS treats as an Agent, enabling richer UI and behaviors while remaining a standard Blue document.";
-        readonly name: "LLM Agent";
-        readonly type: {
-            readonly blueId: "8s2rAFDtiB6sCwqeURkT4Lq7fcc2FXBkmX9B9p7R4Boc";
-        };
-    };
-    readonly DRDQcve5AjwBK9z6Njfa4MNERko7Uf4ucvARFdC6sL54: {
-        readonly allOps: {
+        readonly granterDocumentSessionId: {
+            readonly description: "Optional. If set, MyOS should evaluate authority as this document session\n(principalType='document', granteeId=documentId of this session),\ninstead of the granter accountId.\n";
             readonly type: {
-                readonly blueId: "4EzhSubEimSQD3zrYHRtobfPPWntUuhEz8YcdxHsi12u";
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
             };
         };
-        readonly description: "Permissions that become effective for a single target session.";
-        readonly name: "Single Document Permission Set";
-        readonly read: {
+        readonly links: {
+            readonly description: "Map from anchor name to permissions that will be granted for documents linked to the base document via that anchor.";
             readonly type: {
-                readonly blueId: "4EzhSubEimSQD3zrYHRtobfPPWntUuhEz8YcdxHsi12u";
+                readonly blueId: "75TXyy5E7vbexVAUZcjZ2vdQaG7fJJbAHAgrh8sMtTp5";
             };
-            readonly value: true;
         };
-        readonly share: {
+        readonly name: "Linked Documents Permission Grant To Document";
+        readonly skipValidation: {
+            readonly description: "If true, the validation will be skipped (MyOS Admin won't be triggered to create permission grant).";
             readonly type: {
                 readonly blueId: "4EzhSubEimSQD3zrYHRtobfPPWntUuhEz8YcdxHsi12u";
             };
         };
-        readonly singleOps: {
-            readonly itemType: {
-                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-            };
-            readonly type: {
-                readonly blueId: "6aehfNAxHLC1PHHoDr3tYtFH3RWNbiWdFancJ1bypXEY";
-            };
-        };
-    };
-    readonly E4R5PmrxAtCHsQtUKtwxMjXgE5qNJWuuziArDMATudfb: {
-        readonly description: "Emitted by revoke operation";
-        readonly name: "Single Document Permission Revoke Requested";
-        readonly reason: {
+        readonly targetSessionId: {
+            readonly description: "Base document session id whose anchors define the scope of this grant.";
             readonly type: {
                 readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
             };
         };
         readonly type: {
-            readonly blueId: "8f9UhHMbRe62sFgzQVheToaJPYi7t7HPNVvpQTbqfL5n";
+            readonly blueId: "Bu4YETSKYW8hHMwVy6zUUoBAGZPxX3KVXfKN9uoCUoJj";
         };
     };
     readonly Ef7EvcR5He11JtgBFtswYTHEfUKnTHmFysMTo3ZsoQby: {
@@ -2210,16 +2130,41 @@ export declare const contents: {
             readonly blueId: "EzDiC9Frs8V5yQBMtDYh1DobVnWtWpFemXDX5fGUULBn";
         };
     };
-    readonly FZLsSeuoLTki2FpqYTr5nmqnAtKgTnmi18qNaTnRGBs6: {
+    readonly G1cW5kjZdJrmCwfrwiHXQcJfYfFAY5jEFZNA7u7pFdtY: {
+        readonly allowedWorkerAgencyPermissions: {
+            readonly itemType: {
+                readonly blueId: "5J3RXNnALK1ZYAQBrjGwCQ4WpL3YUGHvz9WcGos6mMSp";
+            };
+            readonly type: {
+                readonly blueId: "6aehfNAxHLC1PHHoDr3tYtFH3RWNbiWdFancJ1bypXEY";
+            };
+        };
+        readonly description: "Grant could not be applied.";
+        readonly granteeDocumentId: {
+            readonly type: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+            };
+        };
+        readonly name: "Worker Agency Permission Rejected";
+        readonly reason: {
+            readonly type: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+            };
+        };
+        readonly type: {
+            readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
+        };
+    };
+    readonly G5K5cSdn15yLJa6NBmjLuuZzJ5YShSU14kc4vitHpeHz: {
         readonly contracts: {
             readonly granteeChannel: {
-                readonly description: "Grantee’s timeline (recipient of the rights)";
+                readonly description: "Grantee’s timeline";
                 readonly type: {
                     readonly blueId: "HCF8mXnX3dFjQ8osjxb4Wzm2Nm1DoXnTYuA5sPnV7NTs";
                 };
             };
             readonly granterChannel: {
-                readonly description: "Granter/owner’s timeline (actor allowed to request revoke)";
+                readonly description: "Granter/owner’s timeline";
                 readonly type: {
                     readonly blueId: "HCF8mXnX3dFjQ8osjxb4Wzm2Nm1DoXnTYuA5sPnV7NTs";
                 };
@@ -2239,9 +2184,9 @@ export declare const contents: {
                     readonly type: {
                         readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
                     };
-                    readonly value: "granterChannel";
+                    readonly value: "revokeAccessChannel";
                 };
-                readonly description: "Granter or grantee indicates the grant should be revoked (MyOS Admin will handle)";
+                readonly description: "Granter or grantee indicates the grant should be revoked (MyOS Admin will handle).";
                 readonly request: {
                     readonly description: "Optional human-readable reason";
                     readonly type: {
@@ -2252,7 +2197,26 @@ export declare const contents: {
                     readonly blueId: "BoAiqVUZv9Fum3wFqaX2JnQMBHJLxJSo2V9U2UBmCfsC";
                 };
             };
-            readonly revokeImplGranter: {
+            readonly revokeAccessChannel: {
+                readonly channels: {
+                    readonly items: readonly [{
+                        readonly type: {
+                            readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                        };
+                        readonly value: "granterChannel";
+                    }, {
+                        readonly type: {
+                            readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                        };
+                        readonly value: "granteeChannel";
+                    }];
+                };
+                readonly description: "Either grant side can invoke revoke on this grant document.";
+                readonly type: {
+                    readonly blueId: "HsNatiPt2YvmkWQoqtfrFCbdp75ZUBLBUkWeq84WTfnr";
+                };
+            };
+            readonly revokeImpl: {
                 readonly operation: {
                     readonly type: {
                         readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
@@ -2265,7 +2229,7 @@ export declare const contents: {
                             readonly type: {
                                 readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
                             };
-                            readonly value: "return {\n  events: [\n    {\n      type: \"MyOS/Single Document Permission Revoke Requested\",\n      reason: event.message.request\n    }\n  ]\n};\n";
+                            readonly value: "return {\n  events: [\n    {\n      type: \"MyOS/Linked Documents Permission Revoke Requested\",\n      reason: event.message.request\n    }\n  ]\n};\n";
                         };
                         readonly name: "EmitRevokeRequested";
                         readonly type: {
@@ -2290,7 +2254,7 @@ export declare const contents: {
                             readonly type: {
                                 readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
                             };
-                            readonly value: "const issues = [];\n\n// Required: target session\nconst target = document('/targetSessionId');\nif (!target || typeof target !== 'string') issues.push(\"targetSessionId is missing or invalid\");\n\n// Required: bound identities\nconst granterId = document('/contracts/granterChannel/accountId');\nif (typeof granterId !== 'string' || granterId.length === 0) issues.push(\"granterChannel must be bound to an accountId\");\nconst granteeId = document('/contracts/granteeChannel/accountId');\nif (typeof granteeId !== 'string' || granteeId.length === 0) issues.push(\"granteeChannel must be bound to an accountId\");\n\n// Permissions\nconst perms = document('/permissions');\nif (!perms || typeof perms !== 'object') {\n  issues.push(\"permissions block is missing\");\n} else {\n  if (perms.read !== true) issues.push(\"permissions.read must be true for SDPG\");\n  const hasSingle = Array.isArray(perms?.singleOps) && perms.singleOps.length > 0;\n  if (hasSingle) {\n    if (perms.singleOps.some(x => typeof x !== 'string' || x.trim().length === 0)) {\n      issues.push(\"permissions.singleOps must contain only non-empty strings\");\n    }\n  }\n  if (perms.allOps === true && hasSingle) {\n    issues.push(\"permissions.allOps=true and permissions.singleOps are mutually exclusive\");\n  }\n}\n\nif (issues.length > 0) return { events: [ { type: \"MyOS/Single Document Permission Invalid\", issues } ] };\nreturn { events: [ { type: \"MyOS/Single Document Permission Validated\" } ] };\n";
+                            readonly value: "const issues = [];\n\nconst target = document('/targetSessionId');\nif (!target || typeof target !== 'string') issues.push(\"targetSessionId is missing or invalid\");\n\nconst granterId = document('/contracts/granterChannel/accountId');\nif (typeof granterId !== 'string' || granterId.length === 0) issues.push(\"granterChannel must be bound to an accountId\");\nconst granteeId = document('/contracts/granteeChannel/accountId');\nif (typeof granteeId !== 'string' || granteeId.length === 0) issues.push(\"granteeChannel must be bound to an accountId\");\n\nconst links = document('/links');\nif (!links || typeof links !== 'object') issues.push(\"links is missing or invalid\");\n\nconst anchors = Object.keys(links).filter(key => !['description', 'type', 'keyType', 'valueType'].includes(key));\nif (anchors.length === 0) {\n  issues.push(\"links must have at least one anchor entry\");\n}\nfor (const anchor of anchors) {\n  const perms = links[anchor];\n  if (!perms || perms.read !== true) {\n    issues.push(`links['${anchor}'].read must be true`);\n  }\n  const hasSingle = Array.isArray(perms.singleOps) && perms.singleOps.length > 0;\n  if (hasSingle && perms.singleOps.some(x => typeof x !== \"string\" || x.trim().length === 0)) {\n    issues.push(`links['${anchor}'].singleOps must contain only non-empty strings`);\n  }\n  if (perms.allOps === true && hasSingle) {\n    issues.push(`links['${anchor}'].allOps=true and singleOps are mutually exclusive`);\n  }\n}\n\nif (issues.length > 0) return { events: [ { type: \"MyOS/Linked Documents Permission Invalid\", issues } ] };\nreturn { events: [ { type: \"MyOS/Linked Documents Permission Validated\" } ] };\n";
                         };
                         readonly name: "ValidateBasicShape";
                         readonly type: {
@@ -2304,20 +2268,20 @@ export declare const contents: {
             };
         };
         readonly granterDocumentSessionId: {
-            readonly description: "Optional. If set, MyOS should evaluate authority using this document session as the principal (instead of granter accountId).";
+            readonly description: "Optional. If set, MyOS should evaluate authority as this document session\n(principalType='document', granteeId=documentId of this session),\ninstead of the granter accountId.\n";
             readonly type: {
                 readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
             };
         };
-        readonly name: "Single Document Permission Grant To Account";
-        readonly permissions: {
-            readonly description: "Rights to grant on the target session (READ required; allOps and singleOps are mutually exclusive; singleOps is optional but must be non-empty if provided).";
+        readonly links: {
+            readonly description: "Map from anchor name to permissions that will be granted for documents linked to the base document via that anchor.";
             readonly type: {
-                readonly blueId: "DRDQcve5AjwBK9z6Njfa4MNERko7Uf4ucvARFdC6sL54";
+                readonly blueId: "75TXyy5E7vbexVAUZcjZ2vdQaG7fJJbAHAgrh8sMtTp5";
             };
         };
+        readonly name: "Linked Documents Permission Grant To Account";
         readonly targetSessionId: {
-            readonly description: "Target document session id to grant access to";
+            readonly description: "Base document session id whose anchors define the scope of this grant.";
             readonly type: {
                 readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
             };
@@ -2326,31 +2290,6 @@ export declare const contents: {
             readonly blueId: "Bu4YETSKYW8hHMwVy6zUUoBAGZPxX3KVXfKN9uoCUoJj";
         };
     };
-    readonly G1cW5kjZdJrmCwfrwiHXQcJfYfFAY5jEFZNA7u7pFdtY: {
-        readonly allowedWorkerAgencyPermissions: {
-            readonly itemType: {
-                readonly blueId: "5J3RXNnALK1ZYAQBrjGwCQ4WpL3YUGHvz9WcGos6mMSp";
-            };
-            readonly type: {
-                readonly blueId: "6aehfNAxHLC1PHHoDr3tYtFH3RWNbiWdFancJ1bypXEY";
-            };
-        };
-        readonly description: "Grant could not be applied.";
-        readonly granteeDocumentId: {
-            readonly type: {
-                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-            };
-        };
-        readonly name: "Worker Agency Permission Rejected";
-        readonly reason: {
-            readonly type: {
-                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
-            };
-        };
-        readonly type: {
-            readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
-        };
-    };
     readonly GcotFgiqo3GMHp4xKrArDJi7AqciJGgYKvHodoAJwcWp: {
         readonly description: "Indicates MyOS Admin stopped forwarding updates for the subscription.";
         readonly name: "Subscription to Session Revoked";
@@ -2572,5 +2511,140 @@ export declare const contents: {
             readonly blueId: "36epvrpVHZLjapbeZsNodz2NDnm7XZeNZcnkWHgkP1pp";
         };
     };
+    readonly y6JF5WHZjDq9PokMtHpqKhxbY7W6RQ41PBymPx7kjLz: {
+        readonly contracts: {
+            readonly granteeChannel: {
+                readonly description: "Grantee’s timeline";
+                readonly type: {
+                    readonly blueId: "HCF8mXnX3dFjQ8osjxb4Wzm2Nm1DoXnTYuA5sPnV7NTs";
+                };
+            };
+            readonly granterChannel: {
+                readonly description: "Granter/owner’s timeline";
+                readonly type: {
+                    readonly blueId: "HCF8mXnX3dFjQ8osjxb4Wzm2Nm1DoXnTYuA5sPnV7NTs";
+                };
+            };
+            readonly initLifecycleChannel: {
+                readonly event: {
+                    readonly type: {
+                        readonly blueId: "BrpmpNt5JkapeUvPqYcxgXZrHNZX3R757dRwuXXdfNM2";
+                    };
+                };
+                readonly type: {
+                    readonly blueId: "H2aCCTUcLMTJozWkn7HPUjyFBFxamraw1q8DyWk87zxr";
+                };
+            };
+            readonly revoke: {
+                readonly channel: {
+                    readonly type: {
+                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                    };
+                    readonly value: "revokeAccessChannel";
+                };
+                readonly description: "Granter or grantee indicates the grant should be revoked (MyOS Admin will handle).";
+                readonly request: {
+                    readonly description: "Optional human-readable reason";
+                    readonly type: {
+                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                    };
+                };
+                readonly type: {
+                    readonly blueId: "BoAiqVUZv9Fum3wFqaX2JnQMBHJLxJSo2V9U2UBmCfsC";
+                };
+            };
+            readonly revokeAccessChannel: {
+                readonly channels: {
+                    readonly items: readonly [{
+                        readonly type: {
+                            readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                        };
+                        readonly value: "granterChannel";
+                    }, {
+                        readonly type: {
+                            readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                        };
+                        readonly value: "granteeChannel";
+                    }];
+                };
+                readonly description: "Either grant side can invoke revoke on this grant document.";
+                readonly type: {
+                    readonly blueId: "HsNatiPt2YvmkWQoqtfrFCbdp75ZUBLBUkWeq84WTfnr";
+                };
+            };
+            readonly revokeImpl: {
+                readonly operation: {
+                    readonly type: {
+                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                    };
+                    readonly value: "revoke";
+                };
+                readonly steps: {
+                    readonly items: readonly [{
+                        readonly code: {
+                            readonly type: {
+                                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                            };
+                            readonly value: "return {\n  events: [\n    {\n      type: \"MyOS/Single Document Permission Revoke Requested\",\n      reason: event.message.request\n    }\n  ]\n};\n";
+                        };
+                        readonly name: "EmitRevokeRequested";
+                        readonly type: {
+                            readonly blueId: "ExZxT61PSpWHpEAtP2WKMXXqxEYN7Z13j7Zv36Dp99kS";
+                        };
+                    }];
+                };
+                readonly type: {
+                    readonly blueId: "CGdxkNjPcsdescqLPz6SNLsMyak6demQQr7RoKNHbCyv";
+                };
+            };
+            readonly validateOnInit: {
+                readonly channel: {
+                    readonly type: {
+                        readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                    };
+                    readonly value: "initLifecycleChannel";
+                };
+                readonly steps: {
+                    readonly items: readonly [{
+                        readonly code: {
+                            readonly type: {
+                                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+                            };
+                            readonly value: "const issues = [];\n\nconst target = document('/targetSessionId');\nif (!target || typeof target !== 'string') issues.push(\"targetSessionId is missing or invalid\");\n\nconst granterId = document('/contracts/granterChannel/accountId');\nif (typeof granterId !== 'string' || granterId.length === 0) issues.push(\"granterChannel must be bound to an accountId\");\nconst granteeId = document('/contracts/granteeChannel/accountId');\nif (typeof granteeId !== 'string' || granteeId.length === 0) issues.push(\"granteeChannel must be bound to an accountId\");\n\nconst perms = document('/permissions');\nif (!perms || typeof perms !== 'object') {\n  issues.push(\"permissions block is missing\");\n} else {\n  if (perms.read !== true) issues.push(\"permissions.read must be true for SDPG\");\n  const hasSingle = Array.isArray(perms?.singleOps) && perms.singleOps.length > 0;\n  if (hasSingle) {\n    if (perms.singleOps.some(x => typeof x !== 'string' || x.trim().length === 0)) {\n      issues.push(\"permissions.singleOps must contain only non-empty strings\");\n    }\n  }\n  if (perms.allOps === true && hasSingle) {\n    issues.push(\"permissions.allOps=true and permissions.singleOps are mutually exclusive\");\n  }\n}\n\nif (issues.length > 0) return { events: [ { type: \"MyOS/Single Document Permission Invalid\", issues } ] };\nreturn { events: [ { type: \"MyOS/Single Document Permission Validated\" } ] };\n";
+                        };
+                        readonly name: "ValidateBasicShape";
+                        readonly type: {
+                            readonly blueId: "ExZxT61PSpWHpEAtP2WKMXXqxEYN7Z13j7Zv36Dp99kS";
+                        };
+                    }];
+                };
+                readonly type: {
+                    readonly blueId: "7X3LkN54Yp88JgZbppPhP6hM3Jqiqv8Z2i4kS7phXtQe";
+                };
+            };
+        };
+        readonly granterDocumentSessionId: {
+            readonly description: "Optional. If set, MyOS should evaluate authority using this document session as the principal (instead of granter accountId).";
+            readonly type: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+            };
+        };
+        readonly name: "Single Document Permission Grant To Account";
+        readonly permissions: {
+            readonly description: "Rights to grant on the target session (READ required; allOps and singleOps are mutually exclusive; singleOps is optional but must be non-empty if provided).";
+            readonly type: {
+                readonly blueId: "DRDQcve5AjwBK9z6Njfa4MNERko7Uf4ucvARFdC6sL54";
+            };
+        };
+        readonly targetSessionId: {
+            readonly description: "Target document session id to grant access to";
+            readonly type: {
+                readonly blueId: "DLRQwz7MQeCrzjy9bohPNwtCxKEBbKaMK65KBrwjfG6K";
+            };
+        };
+        readonly type: {
+            readonly blueId: "Bu4YETSKYW8hHMwVy6zUUoBAGZPxX3KVXfKN9uoCUoJj";
+        };
+    };
 };
 //# sourceMappingURL=index.d.ts.map