@brightbeamai/chap-coordinator 0.2.8

package/dist/api-C3nkEk-B.d.cts

@@ -0,0 +1,260 @@
+import { MethodParams, WorkspaceCreateResult, WorkspaceDescribeResult, OkResult, TaskCreateResult, TaskRouteResult, ReviewRequestResult, ReviewDepthResult, DecideOverrideResult, EscalateRaiseResult, EscalateAutoResult, WhisperAskResult, DeliberateOpenResult, DeliberateCloseResult, HandoffProposeResult, ControlSupersedeResult, ControlSnapshotResult, AuditReadResult, AuditSubmitToScittResult, AuditVerifyReceiptResult, AuditVerifyChainResult, MethodName, MethodResult } from './methods.cjs';
+import { Store } from './storage/store.cjs';
+import { Workspace, AuditListener, Task, ParticipantUri, Envelope, WorkspaceId, Member, KeyRecord } from './types.cjs';
+
+/**
+ * @brightbeamai/chap-coordinator/ids
+ *
+ * ULID-format identifier generation. Supports a deterministic mode
+ * for tests/demos so byte-for-byte replay works.
+ */
+declare class IdFactory {
+    readonly deterministic: boolean;
+    private counter;
+    private clockMs;
+    constructor(deterministic?: boolean, seed?: bigint, startMs?: number);
+    nowMs(): number;
+    private randomness;
+    ulid(): string;
+    envelopeId(): string;
+    taskId(): string;
+    artefactId(): string;
+    logicalId(): string;
+    workspaceId(): string;
+    deliberationId(): string;
+    handoffId(): string;
+    snapshotId(): string;
+}
+
+/**
+ * @brightbeamai/chap-coordinator/coordinator
+ *
+ * The Coordinator class. CHAP protocol logic, packaged as a library
+ * rather than a CLI server. Applications instantiate one, call
+ * `dispatch(envelope)`, subscribe to audit events, and persist via
+ * the provided hooks.
+ *
+ * Coverage:
+ *   - Core (9 methods)
+ *   - review/1.0 (6 methods)
+ *   - whisper/1.0 (2 methods + lapse handling)
+ *   - deliberation/1.0 (4 methods)
+ *   - modes/1.0 (mode handling at task.create; trial forces review)
+ *   - handoff/1.0 (3 methods with multi-task and group support)
+ *   - control/1.0 (7 methods with task/participant/workspace scopes)
+ *   - routing/1.0 (3 methods producing route_decision artefacts)
+ *   - security-signed/1.0 (top-level `sig` field; key history)
+ *   - audit-scitt/1.0 (statement assembly + local chain linkage)
+ *   - identity-oidc/1.0 + identity-vc/1.0 (binding hooks at join)
+ */
+
+type TokenVerifier = (token: string) => Record<string, unknown> | null;
+type CredentialVerifier = (presentation: Record<string, unknown>) => Record<string, unknown> | null;
+type ScittSubmitter = (statement: Record<string, unknown>) => Record<string, unknown> | null;
+type ScittReceiptVerifier = (receipt: Record<string, unknown>) => boolean;
+type RoutingPolicyFn = (task: Task, candidates: ParticipantUri[]) => {
+    selected: ParticipantUri;
+    rationale: Record<string, unknown>;
+};
+type ReviewDepthPolicyFn = (task: Task, hints: Record<string, unknown>) => {
+    depth: "skip" | "spot_check" | "full" | "escalated";
+    sampling_probability?: number;
+    rationale: Record<string, unknown>;
+};
+type EscalationPolicyFn = (task: Task, hints: Record<string, unknown>) => {
+    escalate: boolean;
+    to?: ParticipantUri;
+    triggered_rule?: Record<string, unknown>;
+};
+/** Methods classified as privileged for step-up auth. */
+declare const PRIVILEGED_METHODS: Set<string>;
+interface CoordinatorOptions {
+    deterministicIds?: boolean;
+    deterministicClock?: boolean;
+    enableChain?: boolean;
+    requireSignatures?: boolean;
+    enforceStepUp?: boolean;
+    onAudit?: AuditListener;
+    onAutoEscalate?: (task: Task, to: ParticipantUri) => void;
+    verifyOidcToken?: TokenVerifier;
+    verifyVc?: CredentialVerifier;
+    scittSubmitter?: ScittSubmitter;
+    verifyScittReceipt?: ScittReceiptVerifier;
+    routingPolicy?: RoutingPolicyFn;
+    reviewDepthPolicy?: ReviewDepthPolicyFn;
+    escalationPolicy?: EscalationPolicyFn;
+    defaultProfiles?: string[];
+    /**
+     * Persistence backend. Defaults to MemoryStore (no persistence).
+     * Pass SqliteStore or any other Store implementation to persist
+     * workspaces between process restarts. The Coordinator calls
+     * `store.load()` once during `start()` and `store.save()` after
+     * every successful mutation.
+     */
+    store?: Store;
+}
+type Handler = (params: Record<string, unknown>) => {
+    result?: unknown;
+    error?: {
+        code: number;
+        message: string;
+        data?: unknown;
+    };
+};
+declare class Coordinator {
+    readonly workspaces: Map<string, Workspace>;
+    readonly options: CoordinatorOptions;
+    readonly ids: IdFactory;
+    readonly store: Store;
+    private wsVersions;
+    private clockMs?;
+    private auditListeners;
+    /** Method handler registry; profiles plug into this. */
+    readonly handlers: Map<string, Handler>;
+    /** Custom lapse-check function (whisper/1.0). Set by the whisper profile. */
+    checkWhisperLapses?: (workspaceId: string, now?: string) => Envelope[];
+    /** Typed method facade. Defined via getter in the constructor. */
+    readonly api: CoordinatorApi;
+    /** @internal cached facade instance */
+    private _api?;
+    constructor(options?: CoordinatorOptions);
+    /**
+     * Asynchronously hydrate workspaces from the store. Required only for
+     * stores whose `load()` returns a Promise. Idempotent.
+     */
+    start(): Promise<void>;
+    private applyRecords;
+    /** Persist the current snapshot of one workspace to the store. */
+    private persist;
+    now(): string;
+    onAudit(listener: AuditListener): () => void;
+    /** Convenience: get a workspace by id, or undefined. */
+    getWorkspace(id: WorkspaceId): Workspace | undefined;
+    /**
+     * Assert that `sender` is a joined member of `ws`. Returns an error
+     * fragment if not, else null. Every actor-action method runs this on
+     * its `from` so a decision, completion, or review request can never
+     * be attributed to a participant who never joined. See
+     * SPECIFICATION.md S6.3 and the `unknown_participant` condition in
+     * S13.3. (The published spec assigns -32403; the reference
+     * implementations use NOT_AUTHORISED -32011 because -32403 already
+     * denotes OIDC_TOKEN_INVALID in their private range. The spec/impl
+     * error-table divergence is tracked separately.)
+     */
+    private requireMember;
+    /**
+     * Assert that `sender` was addressed in the task's review. Applied to
+     * review-decision methods (decide.* and abstain.declare): to act on a
+     * review you must be one of the reviewers it was addressed to (the
+     * `to` set on review.request). Membership is the floor; this is the
+     * eligibility ceiling for decisions. Returns an error fragment if not
+     * eligible, else null.
+     */
+    private requireReviewer;
+    /** Serialise all workspaces to a JSON-safe structure for persistence. */
+    snapshot(): unknown;
+    /** Restore from a snapshot produced by ``snapshot()``. Replaces
+     *  any existing in-memory workspaces. */
+    restore(data: unknown): void;
+    dispatch(envelope: Envelope): Envelope;
+    recordAudit(ws: Workspace, envelope: Envelope): void;
+    private verifySignature;
+    /** Lookup the key valid for a given participant at a given time. */
+    lookupKey(member: Member, kid: string, ts: string): KeyRecord | null;
+    private checkStepUp;
+    private registerCoreHandlers;
+    private registerProfileHandlers;
+    private opWorkspaceCreate;
+    private opWorkspaceDescribe;
+    private opWorkspaceSetProfiles;
+    private opParticipantJoin;
+    private opParticipantLeave;
+    private opTaskCreate;
+    private opTaskUpdate;
+    private opTaskComplete;
+    private opAuditRead;
+    private opReviewRequest;
+    private opDecide;
+    private opDecideOverride;
+    private opAbstainDeclare;
+    private opEscalateRaise;
+}
+
+declare class CoordinatorError extends Error {
+    readonly code: number;
+    readonly data?: unknown;
+    constructor(code: number, message: string, data?: unknown);
+}
+/**
+ * Single-call helper. Type-safe wrapper around `coord.dispatch()`.
+ * Throws CoordinatorError if dispatch returns an error response.
+ */
+declare function call<M extends MethodName>(coord: Coordinator, method: M, params: MethodParams<M>): MethodResult<M>;
+declare function makeApi(coord: Coordinator): {
+    workspace: {
+        create: (p: MethodParams<"workspace.create">) => WorkspaceCreateResult;
+        describe: (p: MethodParams<"workspace.describe">) => WorkspaceDescribeResult;
+        set_profiles: (p: MethodParams<"workspace.set_profiles">) => OkResult;
+    };
+    participant: {
+        join: (p: MethodParams<"participant.join">) => OkResult;
+        leave: (p: MethodParams<"participant.leave">) => OkResult;
+        rotate_key: (p: MethodParams<"participant.rotate_key">) => OkResult;
+        revoke_key: (p: MethodParams<"participant.revoke_key">) => OkResult;
+    };
+    task: {
+        create: (p: MethodParams<"task.create">) => TaskCreateResult;
+        update: (p: MethodParams<"task.update">) => OkResult;
+        complete: (p: MethodParams<"task.complete">) => OkResult;
+        route: (p: MethodParams<"task.route">) => TaskRouteResult;
+    };
+    review: {
+        request: (p: MethodParams<"review.request">) => ReviewRequestResult;
+        depth: (p: MethodParams<"review.depth">) => ReviewDepthResult;
+    };
+    decide: {
+        approve: (p: MethodParams<"decide.approve">) => OkResult;
+        reject: (p: MethodParams<"decide.reject">) => OkResult;
+        override: (p: MethodParams<"decide.override">) => DecideOverrideResult;
+    };
+    abstain: {
+        declare: (p: MethodParams<"abstain.declare">) => OkResult;
+    };
+    escalate: {
+        raise: (p: MethodParams<"escalate.raise">) => EscalateRaiseResult;
+        auto: (p: MethodParams<"escalate.auto">) => EscalateAutoResult;
+    };
+    whisper: {
+        ask: (p: MethodParams<"whisper.ask">) => WhisperAskResult;
+        answer: (p: MethodParams<"whisper.answer">) => OkResult;
+    };
+    deliberate: {
+        open: (p: MethodParams<"deliberate.open">) => DeliberateOpenResult;
+        comment: (p: MethodParams<"deliberate.comment">) => OkResult;
+        vote: (p: MethodParams<"deliberate.vote">) => OkResult;
+        close: (p: MethodParams<"deliberate.close">) => DeliberateCloseResult;
+    };
+    handoff: {
+        propose: (p: MethodParams<"handoff.propose">) => HandoffProposeResult;
+        accept: (p: MethodParams<"handoff.accept">) => OkResult;
+        decline: (p: MethodParams<"handoff.decline">) => OkResult;
+    };
+    control: {
+        pause: (p: MethodParams<"control.pause">) => OkResult;
+        resume: (p: MethodParams<"control.resume">) => OkResult;
+        cancel: (p: MethodParams<"control.cancel">) => OkResult;
+        supersede: (p: MethodParams<"control.supersede">) => ControlSupersedeResult;
+        snapshot: (p: MethodParams<"control.snapshot">) => ControlSnapshotResult;
+        rollback: (p: MethodParams<"control.rollback">) => OkResult;
+        set_mode_ceiling: (p: MethodParams<"control.set_mode_ceiling">) => OkResult;
+    };
+    audit: {
+        read: (p: MethodParams<"audit.read">) => AuditReadResult;
+        submit_to_scitt: (p: MethodParams<"audit.submit_to_scitt">) => AuditSubmitToScittResult;
+        verify_receipt: (p: MethodParams<"audit.verify_receipt">) => AuditVerifyReceiptResult;
+        verify_chain: (p: MethodParams<"audit.verify_chain">) => AuditVerifyChainResult;
+    };
+};
+type CoordinatorApi = ReturnType<typeof makeApi>;
+
+export { type CoordinatorOptions as C, type EscalationPolicyFn as E, type Handler as H, IdFactory as I, PRIVILEGED_METHODS as P, type ReviewDepthPolicyFn as R, type ScittReceiptVerifier as S, type TokenVerifier as T, Coordinator as a, type CoordinatorApi as b, CoordinatorError as c, type CredentialVerifier as d, type RoutingPolicyFn as e, type ScittSubmitter as f, call as g, makeApi as m };

package/dist/api-CmSvlIqO.d.ts

@@ -0,0 +1,260 @@
+import { MethodParams, WorkspaceCreateResult, WorkspaceDescribeResult, OkResult, TaskCreateResult, TaskRouteResult, ReviewRequestResult, ReviewDepthResult, DecideOverrideResult, EscalateRaiseResult, EscalateAutoResult, WhisperAskResult, DeliberateOpenResult, DeliberateCloseResult, HandoffProposeResult, ControlSupersedeResult, ControlSnapshotResult, AuditReadResult, AuditSubmitToScittResult, AuditVerifyReceiptResult, AuditVerifyChainResult, MethodName, MethodResult } from './methods.js';
+import { Store } from './storage/store.js';
+import { Workspace, AuditListener, Task, ParticipantUri, Envelope, WorkspaceId, Member, KeyRecord } from './types.js';
+
+/**
+ * @brightbeamai/chap-coordinator/ids
+ *
+ * ULID-format identifier generation. Supports a deterministic mode
+ * for tests/demos so byte-for-byte replay works.
+ */
+declare class IdFactory {
+    readonly deterministic: boolean;
+    private counter;
+    private clockMs;
+    constructor(deterministic?: boolean, seed?: bigint, startMs?: number);
+    nowMs(): number;
+    private randomness;
+    ulid(): string;
+    envelopeId(): string;
+    taskId(): string;
+    artefactId(): string;
+    logicalId(): string;
+    workspaceId(): string;
+    deliberationId(): string;
+    handoffId(): string;
+    snapshotId(): string;
+}
+
+/**
+ * @brightbeamai/chap-coordinator/coordinator
+ *
+ * The Coordinator class. CHAP protocol logic, packaged as a library
+ * rather than a CLI server. Applications instantiate one, call
+ * `dispatch(envelope)`, subscribe to audit events, and persist via
+ * the provided hooks.
+ *
+ * Coverage:
+ *   - Core (9 methods)
+ *   - review/1.0 (6 methods)
+ *   - whisper/1.0 (2 methods + lapse handling)
+ *   - deliberation/1.0 (4 methods)
+ *   - modes/1.0 (mode handling at task.create; trial forces review)
+ *   - handoff/1.0 (3 methods with multi-task and group support)
+ *   - control/1.0 (7 methods with task/participant/workspace scopes)
+ *   - routing/1.0 (3 methods producing route_decision artefacts)
+ *   - security-signed/1.0 (top-level `sig` field; key history)
+ *   - audit-scitt/1.0 (statement assembly + local chain linkage)
+ *   - identity-oidc/1.0 + identity-vc/1.0 (binding hooks at join)
+ */
+
+type TokenVerifier = (token: string) => Record<string, unknown> | null;
+type CredentialVerifier = (presentation: Record<string, unknown>) => Record<string, unknown> | null;
+type ScittSubmitter = (statement: Record<string, unknown>) => Record<string, unknown> | null;
+type ScittReceiptVerifier = (receipt: Record<string, unknown>) => boolean;
+type RoutingPolicyFn = (task: Task, candidates: ParticipantUri[]) => {
+    selected: ParticipantUri;
+    rationale: Record<string, unknown>;
+};
+type ReviewDepthPolicyFn = (task: Task, hints: Record<string, unknown>) => {
+    depth: "skip" | "spot_check" | "full" | "escalated";
+    sampling_probability?: number;
+    rationale: Record<string, unknown>;
+};
+type EscalationPolicyFn = (task: Task, hints: Record<string, unknown>) => {
+    escalate: boolean;
+    to?: ParticipantUri;
+    triggered_rule?: Record<string, unknown>;
+};
+/** Methods classified as privileged for step-up auth. */
+declare const PRIVILEGED_METHODS: Set<string>;
+interface CoordinatorOptions {
+    deterministicIds?: boolean;
+    deterministicClock?: boolean;
+    enableChain?: boolean;
+    requireSignatures?: boolean;
+    enforceStepUp?: boolean;
+    onAudit?: AuditListener;
+    onAutoEscalate?: (task: Task, to: ParticipantUri) => void;
+    verifyOidcToken?: TokenVerifier;
+    verifyVc?: CredentialVerifier;
+    scittSubmitter?: ScittSubmitter;
+    verifyScittReceipt?: ScittReceiptVerifier;
+    routingPolicy?: RoutingPolicyFn;
+    reviewDepthPolicy?: ReviewDepthPolicyFn;
+    escalationPolicy?: EscalationPolicyFn;
+    defaultProfiles?: string[];
+    /**
+     * Persistence backend. Defaults to MemoryStore (no persistence).
+     * Pass SqliteStore or any other Store implementation to persist
+     * workspaces between process restarts. The Coordinator calls
+     * `store.load()` once during `start()` and `store.save()` after
+     * every successful mutation.
+     */
+    store?: Store;
+}
+type Handler = (params: Record<string, unknown>) => {
+    result?: unknown;
+    error?: {
+        code: number;
+        message: string;
+        data?: unknown;
+    };
+};
+declare class Coordinator {
+    readonly workspaces: Map<string, Workspace>;
+    readonly options: CoordinatorOptions;
+    readonly ids: IdFactory;
+    readonly store: Store;
+    private wsVersions;
+    private clockMs?;
+    private auditListeners;
+    /** Method handler registry; profiles plug into this. */
+    readonly handlers: Map<string, Handler>;
+    /** Custom lapse-check function (whisper/1.0). Set by the whisper profile. */
+    checkWhisperLapses?: (workspaceId: string, now?: string) => Envelope[];
+    /** Typed method facade. Defined via getter in the constructor. */
+    readonly api: CoordinatorApi;
+    /** @internal cached facade instance */
+    private _api?;
+    constructor(options?: CoordinatorOptions);
+    /**
+     * Asynchronously hydrate workspaces from the store. Required only for
+     * stores whose `load()` returns a Promise. Idempotent.
+     */
+    start(): Promise<void>;
+    private applyRecords;
+    /** Persist the current snapshot of one workspace to the store. */
+    private persist;
+    now(): string;
+    onAudit(listener: AuditListener): () => void;
+    /** Convenience: get a workspace by id, or undefined. */
+    getWorkspace(id: WorkspaceId): Workspace | undefined;
+    /**
+     * Assert that `sender` is a joined member of `ws`. Returns an error
+     * fragment if not, else null. Every actor-action method runs this on
+     * its `from` so a decision, completion, or review request can never
+     * be attributed to a participant who never joined. See
+     * SPECIFICATION.md S6.3 and the `unknown_participant` condition in
+     * S13.3. (The published spec assigns -32403; the reference
+     * implementations use NOT_AUTHORISED -32011 because -32403 already
+     * denotes OIDC_TOKEN_INVALID in their private range. The spec/impl
+     * error-table divergence is tracked separately.)
+     */
+    private requireMember;
+    /**
+     * Assert that `sender` was addressed in the task's review. Applied to
+     * review-decision methods (decide.* and abstain.declare): to act on a
+     * review you must be one of the reviewers it was addressed to (the
+     * `to` set on review.request). Membership is the floor; this is the
+     * eligibility ceiling for decisions. Returns an error fragment if not
+     * eligible, else null.
+     */
+    private requireReviewer;
+    /** Serialise all workspaces to a JSON-safe structure for persistence. */
+    snapshot(): unknown;
+    /** Restore from a snapshot produced by ``snapshot()``. Replaces
+     *  any existing in-memory workspaces. */
+    restore(data: unknown): void;
+    dispatch(envelope: Envelope): Envelope;
+    recordAudit(ws: Workspace, envelope: Envelope): void;
+    private verifySignature;
+    /** Lookup the key valid for a given participant at a given time. */
+    lookupKey(member: Member, kid: string, ts: string): KeyRecord | null;
+    private checkStepUp;
+    private registerCoreHandlers;
+    private registerProfileHandlers;
+    private opWorkspaceCreate;
+    private opWorkspaceDescribe;
+    private opWorkspaceSetProfiles;
+    private opParticipantJoin;
+    private opParticipantLeave;
+    private opTaskCreate;
+    private opTaskUpdate;
+    private opTaskComplete;
+    private opAuditRead;
+    private opReviewRequest;
+    private opDecide;
+    private opDecideOverride;
+    private opAbstainDeclare;
+    private opEscalateRaise;
+}
+
+declare class CoordinatorError extends Error {
+    readonly code: number;
+    readonly data?: unknown;
+    constructor(code: number, message: string, data?: unknown);
+}
+/**
+ * Single-call helper. Type-safe wrapper around `coord.dispatch()`.
+ * Throws CoordinatorError if dispatch returns an error response.
+ */
+declare function call<M extends MethodName>(coord: Coordinator, method: M, params: MethodParams<M>): MethodResult<M>;
+declare function makeApi(coord: Coordinator): {
+    workspace: {
+        create: (p: MethodParams<"workspace.create">) => WorkspaceCreateResult;
+        describe: (p: MethodParams<"workspace.describe">) => WorkspaceDescribeResult;
+        set_profiles: (p: MethodParams<"workspace.set_profiles">) => OkResult;
+    };
+    participant: {
+        join: (p: MethodParams<"participant.join">) => OkResult;
+        leave: (p: MethodParams<"participant.leave">) => OkResult;
+        rotate_key: (p: MethodParams<"participant.rotate_key">) => OkResult;
+        revoke_key: (p: MethodParams<"participant.revoke_key">) => OkResult;
+    };
+    task: {
+        create: (p: MethodParams<"task.create">) => TaskCreateResult;
+        update: (p: MethodParams<"task.update">) => OkResult;
+        complete: (p: MethodParams<"task.complete">) => OkResult;
+        route: (p: MethodParams<"task.route">) => TaskRouteResult;
+    };
+    review: {
+        request: (p: MethodParams<"review.request">) => ReviewRequestResult;
+        depth: (p: MethodParams<"review.depth">) => ReviewDepthResult;
+    };
+    decide: {
+        approve: (p: MethodParams<"decide.approve">) => OkResult;
+        reject: (p: MethodParams<"decide.reject">) => OkResult;
+        override: (p: MethodParams<"decide.override">) => DecideOverrideResult;
+    };
+    abstain: {
+        declare: (p: MethodParams<"abstain.declare">) => OkResult;
+    };
+    escalate: {
+        raise: (p: MethodParams<"escalate.raise">) => EscalateRaiseResult;
+        auto: (p: MethodParams<"escalate.auto">) => EscalateAutoResult;
+    };
+    whisper: {
+        ask: (p: MethodParams<"whisper.ask">) => WhisperAskResult;
+        answer: (p: MethodParams<"whisper.answer">) => OkResult;
+    };
+    deliberate: {
+        open: (p: MethodParams<"deliberate.open">) => DeliberateOpenResult;
+        comment: (p: MethodParams<"deliberate.comment">) => OkResult;
+        vote: (p: MethodParams<"deliberate.vote">) => OkResult;
+        close: (p: MethodParams<"deliberate.close">) => DeliberateCloseResult;
+    };
+    handoff: {
+        propose: (p: MethodParams<"handoff.propose">) => HandoffProposeResult;
+        accept: (p: MethodParams<"handoff.accept">) => OkResult;
+        decline: (p: MethodParams<"handoff.decline">) => OkResult;
+    };
+    control: {
+        pause: (p: MethodParams<"control.pause">) => OkResult;
+        resume: (p: MethodParams<"control.resume">) => OkResult;
+        cancel: (p: MethodParams<"control.cancel">) => OkResult;
+        supersede: (p: MethodParams<"control.supersede">) => ControlSupersedeResult;
+        snapshot: (p: MethodParams<"control.snapshot">) => ControlSnapshotResult;
+        rollback: (p: MethodParams<"control.rollback">) => OkResult;
+        set_mode_ceiling: (p: MethodParams<"control.set_mode_ceiling">) => OkResult;
+    };
+    audit: {
+        read: (p: MethodParams<"audit.read">) => AuditReadResult;
+        submit_to_scitt: (p: MethodParams<"audit.submit_to_scitt">) => AuditSubmitToScittResult;
+        verify_receipt: (p: MethodParams<"audit.verify_receipt">) => AuditVerifyReceiptResult;
+        verify_chain: (p: MethodParams<"audit.verify_chain">) => AuditVerifyChainResult;
+    };
+};
+type CoordinatorApi = ReturnType<typeof makeApi>;
+
+export { type CoordinatorOptions as C, type EscalationPolicyFn as E, type Handler as H, IdFactory as I, PRIVILEGED_METHODS as P, type ReviewDepthPolicyFn as R, type ScittReceiptVerifier as S, type TokenVerifier as T, Coordinator as a, type CoordinatorApi as b, CoordinatorError as c, type CredentialVerifier as d, type RoutingPolicyFn as e, type ScittSubmitter as f, call as g, makeApi as m };

package/dist/api.cjs

@@ -0,0 +1,125 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/api.ts
+var api_exports = {};
+__export(api_exports, {
+  CoordinatorError: () => CoordinatorError,
+  call: () => call,
+  makeApi: () => makeApi
+});
+module.exports = __toCommonJS(api_exports);
+var CoordinatorError = class extends Error {
+  code;
+  data;
+  constructor(code, message, data) {
+    super(message);
+    this.name = "CoordinatorError";
+    this.code = code;
+    this.data = data;
+  }
+};
+function call(coord, method, params) {
+  const envelope = {
+    jsonrpc: "2.0",
+    id: coord.ids.envelopeId(),
+    method,
+    params
+  };
+  const out = coord.dispatch(envelope);
+  if (out.error) {
+    throw new CoordinatorError(out.error.code, out.error.message, out.error.data);
+  }
+  return out.result;
+}
+function makeApi(coord) {
+  const c = (m, p) => call(coord, m, p);
+  return {
+    workspace: {
+      create: (p) => c("workspace.create", p),
+      describe: (p) => c("workspace.describe", p),
+      set_profiles: (p) => c("workspace.set_profiles", p)
+    },
+    participant: {
+      join: (p) => c("participant.join", p),
+      leave: (p) => c("participant.leave", p),
+      rotate_key: (p) => c("participant.rotate_key", p),
+      revoke_key: (p) => c("participant.revoke_key", p)
+    },
+    task: {
+      create: (p) => c("task.create", p),
+      update: (p) => c("task.update", p),
+      complete: (p) => c("task.complete", p),
+      route: (p) => c("task.route", p)
+    },
+    review: {
+      request: (p) => c("review.request", p),
+      depth: (p) => c("review.depth", p)
+    },
+    decide: {
+      approve: (p) => c("decide.approve", p),
+      reject: (p) => c("decide.reject", p),
+      override: (p) => c("decide.override", p)
+    },
+    abstain: {
+      declare: (p) => c("abstain.declare", p)
+    },
+    escalate: {
+      raise: (p) => c("escalate.raise", p),
+      auto: (p) => c("escalate.auto", p)
+    },
+    whisper: {
+      ask: (p) => c("whisper.ask", p),
+      answer: (p) => c("whisper.answer", p)
+    },
+    deliberate: {
+      open: (p) => c("deliberate.open", p),
+      comment: (p) => c("deliberate.comment", p),
+      vote: (p) => c("deliberate.vote", p),
+      close: (p) => c("deliberate.close", p)
+    },
+    handoff: {
+      propose: (p) => c("handoff.propose", p),
+      accept: (p) => c("handoff.accept", p),
+      decline: (p) => c("handoff.decline", p)
+    },
+    control: {
+      pause: (p) => c("control.pause", p),
+      resume: (p) => c("control.resume", p),
+      cancel: (p) => c("control.cancel", p),
+      supersede: (p) => c("control.supersede", p),
+      snapshot: (p) => c("control.snapshot", p),
+      rollback: (p) => c("control.rollback", p),
+      set_mode_ceiling: (p) => c("control.set_mode_ceiling", p)
+    },
+    audit: {
+      read: (p) => c("audit.read", p),
+      submit_to_scitt: (p) => c("audit.submit_to_scitt", p),
+      verify_receipt: (p) => c("audit.verify_receipt", p),
+      verify_chain: (p) => c("audit.verify_chain", p)
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  CoordinatorError,
+  call,
+  makeApi
+});
+//# sourceMappingURL=api.cjs.map

package/dist/api.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/api.ts"],"sourcesContent":["/**\n * Typed method facade for the Coordinator.\n *\n * Replaces the verbose dispatch pattern:\n *\n *   const env = await coord.dispatch({\n *     jsonrpc: \"2.0\", id: \"x\",\n *     method: \"task.create\",\n *     params: { workspace, from, kind, input }\n *   });\n *   const taskId = env.result.task_id;\n *\n * with namespace-grouped calls that autocomplete and type-check:\n *\n *   const { task_id } = coord.api.task.create({ workspace, from, kind, input });\n *\n * Every method on the facade calls `dispatch(envelope)` internally with\n * an auto-generated envelope id, so the audit chain semantics, profile\n * gates, and signature checks all run identically.\n *\n * On dispatch error, the facade throws a `CoordinatorError` carrying the\n * JSON-RPC error code and message. Callers expecting `error` objects on\n * the wire can still use `dispatch()` directly.\n */\n\nimport type { Coordinator } from \"./coordinator.js\";\nimport type { Envelope } from \"./types.js\";\nimport type {\n  MethodName, MethodParams, MethodResult,\n} from \"./methods.js\";\n\nexport class CoordinatorError extends Error {\n  readonly code: number;\n  readonly data?: unknown;\n  constructor(code: number, message: string, data?: unknown) {\n    super(message);\n    this.name = \"CoordinatorError\";\n    this.code = code;\n    this.data = data;\n  }\n}\n\n/**\n * Single-call helper. Type-safe wrapper around `coord.dispatch()`.\n * Throws CoordinatorError if dispatch returns an error response.\n */\nexport function call<M extends MethodName>(\n  coord: Coordinator,\n  method: M,\n  params: MethodParams<M>,\n): MethodResult<M> {\n  const envelope: Envelope = {\n    jsonrpc: \"2.0\",\n    id: coord.ids.envelopeId(),\n    method,\n    params: params as unknown as Record<string, unknown>,\n  };\n  const out = coord.dispatch(envelope);\n  if (out.error) {\n    throw new CoordinatorError(out.error.code, out.error.message, out.error.data);\n  }\n  return out.result as MethodResult<M>;\n}\n\n// ============================================================\n//   Namespace-grouped facades\n// ============================================================\n//\n// Each namespace facade is a small object exposing one method per\n// CHAP verb. Implementations are one-liners that delegate to call().\n// The pattern is verbose but autocompletes well and type-checks\n// param shape and result shape from one declaration in methods.ts.\n\nexport function makeApi(coord: Coordinator) {\n  const c = <M extends MethodName>(m: M, p: MethodParams<M>) => call(coord, m, p);\n\n  return {\n    workspace: {\n      create:       (p: MethodParams<\"workspace.create\">)       => c(\"workspace.create\", p),\n      describe:     (p: MethodParams<\"workspace.describe\">)     => c(\"workspace.describe\", p),\n      set_profiles: (p: MethodParams<\"workspace.set_profiles\">) => c(\"workspace.set_profiles\", p),\n    },\n    participant: {\n      join:       (p: MethodParams<\"participant.join\">)       => c(\"participant.join\", p),\n      leave:      (p: MethodParams<\"participant.leave\">)      => c(\"participant.leave\", p),\n      rotate_key: (p: MethodParams<\"participant.rotate_key\">) => c(\"participant.rotate_key\", p),\n      revoke_key: (p: MethodParams<\"participant.revoke_key\">) => c(\"participant.revoke_key\", p),\n    },\n    task: {\n      create:   (p: MethodParams<\"task.create\">)   => c(\"task.create\", p),\n      update:   (p: MethodParams<\"task.update\">)   => c(\"task.update\", p),\n      complete: (p: MethodParams<\"task.complete\">) => c(\"task.complete\", p),\n      route:    (p: MethodParams<\"task.route\">)    => c(\"task.route\", p),\n    },\n    review: {\n      request: (p: MethodParams<\"review.request\">) => c(\"review.request\", p),\n      depth:   (p: MethodParams<\"review.depth\">)   => c(\"review.depth\", p),\n    },\n    decide: {\n      approve:  (p: MethodParams<\"decide.approve\">)  => c(\"decide.approve\", p),\n      reject:   (p: MethodParams<\"decide.reject\">)   => c(\"decide.reject\", p),\n      override: (p: MethodParams<\"decide.override\">) => c(\"decide.override\", p),\n    },\n    abstain: {\n      declare: (p: MethodParams<\"abstain.declare\">) => c(\"abstain.declare\", p),\n    },\n    escalate: {\n      raise: (p: MethodParams<\"escalate.raise\">) => c(\"escalate.raise\", p),\n      auto:  (p: MethodParams<\"escalate.auto\">)  => c(\"escalate.auto\", p),\n    },\n    whisper: {\n      ask:    (p: MethodParams<\"whisper.ask\">)    => c(\"whisper.ask\", p),\n      answer: (p: MethodParams<\"whisper.answer\">) => c(\"whisper.answer\", p),\n    },\n    deliberate: {\n      open:    (p: MethodParams<\"deliberate.open\">)    => c(\"deliberate.open\", p),\n      comment: (p: MethodParams<\"deliberate.comment\">) => c(\"deliberate.comment\", p),\n      vote:    (p: MethodParams<\"deliberate.vote\">)    => c(\"deliberate.vote\", p),\n      close:   (p: MethodParams<\"deliberate.close\">)   => c(\"deliberate.close\", p),\n    },\n    handoff: {\n      propose: (p: MethodParams<\"handoff.propose\">) => c(\"handoff.propose\", p),\n      accept:  (p: MethodParams<\"handoff.accept\">)  => c(\"handoff.accept\", p),\n      decline: (p: MethodParams<\"handoff.decline\">) => c(\"handoff.decline\", p),\n    },\n    control: {\n      pause:             (p: MethodParams<\"control.pause\">)             => c(\"control.pause\", p),\n      resume:            (p: MethodParams<\"control.resume\">)            => c(\"control.resume\", p),\n      cancel:            (p: MethodParams<\"control.cancel\">)            => c(\"control.cancel\", p),\n      supersede:         (p: MethodParams<\"control.supersede\">)         => c(\"control.supersede\", p),\n      snapshot:          (p: MethodParams<\"control.snapshot\">)          => c(\"control.snapshot\", p),\n      rollback:          (p: MethodParams<\"control.rollback\">)          => c(\"control.rollback\", p),\n      set_mode_ceiling:  (p: MethodParams<\"control.set_mode_ceiling\">)  => c(\"control.set_mode_ceiling\", p),\n    },\n    audit: {\n      read:            (p: MethodParams<\"audit.read\">)            => c(\"audit.read\", p),\n      submit_to_scitt: (p: MethodParams<\"audit.submit_to_scitt\">) => c(\"audit.submit_to_scitt\", p),\n      verify_receipt:  (p: MethodParams<\"audit.verify_receipt\">)  => c(\"audit.verify_receipt\", p),\n      verify_chain:    (p: MethodParams<\"audit.verify_chain\">)    => c(\"audit.verify_chain\", p),\n    },\n  };\n}\n\nexport type CoordinatorApi = ReturnType<typeof makeApi>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA+BO,IAAM,mBAAN,cAA+B,MAAM;AAAA,EACjC;AAAA,EACA;AAAA,EACT,YAAY,MAAc,SAAiB,MAAgB;AACzD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAMO,SAAS,KACd,OACA,QACA,QACiB;AACjB,QAAM,WAAqB;AAAA,IACzB,SAAS;AAAA,IACT,IAAI,MAAM,IAAI,WAAW;AAAA,IACzB;AAAA,IACA;AAAA,EACF;AACA,QAAM,MAAM,MAAM,SAAS,QAAQ;AACnC,MAAI,IAAI,OAAO;AACb,UAAM,IAAI,iBAAiB,IAAI,MAAM,MAAM,IAAI,MAAM,SAAS,IAAI,MAAM,IAAI;AAAA,EAC9E;AACA,SAAO,IAAI;AACb;AAWO,SAAS,QAAQ,OAAoB;AAC1C,QAAM,IAAI,CAAuB,GAAM,MAAuB,KAAK,OAAO,GAAG,CAAC;AAE9E,SAAO;AAAA,IACL,WAAW;AAAA,MACT,QAAc,CAAC,MAA8C,EAAE,oBAAoB,CAAC;AAAA,MACpF,UAAc,CAAC,MAA8C,EAAE,sBAAsB,CAAC;AAAA,MACtF,cAAc,CAAC,MAA8C,EAAE,0BAA0B,CAAC;AAAA,IAC5F;AAAA,IACA,aAAa;AAAA,MACX,MAAY,CAAC,MAA8C,EAAE,oBAAoB,CAAC;AAAA,MAClF,OAAY,CAAC,MAA8C,EAAE,qBAAqB,CAAC;AAAA,MACnF,YAAY,CAAC,MAA8C,EAAE,0BAA0B,CAAC;AAAA,MACxF,YAAY,CAAC,MAA8C,EAAE,0BAA0B,CAAC;AAAA,IAC1F;AAAA,IACA,MAAM;AAAA,MACJ,QAAU,CAAC,MAAqC,EAAE,eAAe,CAAC;AAAA,MAClE,QAAU,CAAC,MAAqC,EAAE,eAAe,CAAC;AAAA,MAClE,UAAU,CAAC,MAAqC,EAAE,iBAAiB,CAAC;AAAA,MACpE,OAAU,CAAC,MAAqC,EAAE,cAAc,CAAC;AAAA,IACnE;AAAA,IACA,QAAQ;AAAA,MACN,SAAS,CAAC,MAAsC,EAAE,kBAAkB,CAAC;AAAA,MACrE,OAAS,CAAC,MAAsC,EAAE,gBAAgB,CAAC;AAAA,IACrE;AAAA,IACA,QAAQ;AAAA,MACN,SAAU,CAAC,MAAuC,EAAE,kBAAkB,CAAC;AAAA,MACvE,QAAU,CAAC,MAAuC,EAAE,iBAAiB,CAAC;AAAA,MACtE,UAAU,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,IAC1E;AAAA,IACA,SAAS;AAAA,MACP,SAAS,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,IACzE;AAAA,IACA,UAAU;AAAA,MACR,OAAO,CAAC,MAAsC,EAAE,kBAAkB,CAAC;AAAA,MACnE,MAAO,CAAC,MAAsC,EAAE,iBAAiB,CAAC;AAAA,IACpE;AAAA,IACA,SAAS;AAAA,MACP,KAAQ,CAAC,MAAsC,EAAE,eAAe,CAAC;AAAA,MACjE,QAAQ,CAAC,MAAsC,EAAE,kBAAkB,CAAC;AAAA,IACtE;AAAA,IACA,YAAY;AAAA,MACV,MAAS,CAAC,MAA0C,EAAE,mBAAmB,CAAC;AAAA,MAC1E,SAAS,CAAC,MAA0C,EAAE,sBAAsB,CAAC;AAAA,MAC7E,MAAS,CAAC,MAA0C,EAAE,mBAAmB,CAAC;AAAA,MAC1E,OAAS,CAAC,MAA0C,EAAE,oBAAoB,CAAC;AAAA,IAC7E;AAAA,IACA,SAAS;AAAA,MACP,SAAS,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,MACvE,QAAS,CAAC,MAAuC,EAAE,kBAAkB,CAAC;AAAA,MACtE,SAAS,CAAC,MAAuC,EAAE,mBAAmB,CAAC;AAAA,IACzE;AAAA,IACA,SAAS;AAAA,MACP,OAAmB,CAAC,MAAiD,EAAE,iBAAiB,CAAC;AAAA,MACzF,QAAmB,CAAC,MAAiD,EAAE,kBAAkB,CAAC;AAAA,MAC1F,QAAmB,CAAC,MAAiD,EAAE,kBAAkB,CAAC;AAAA,MAC1F,WAAmB,CAAC,MAAiD,EAAE,qBAAqB,CAAC;AAAA,MAC7F,UAAmB,CAAC,MAAiD,EAAE,oBAAoB,CAAC;AAAA,MAC5F,UAAmB,CAAC,MAAiD,EAAE,oBAAoB,CAAC;AAAA,MAC5F,kBAAmB,CAAC,MAAiD,EAAE,4BAA4B,CAAC;AAAA,IACtG;AAAA,IACA,OAAO;AAAA,MACL,MAAiB,CAAC,MAA6C,EAAE,cAAc,CAAC;AAAA,MAChF,iBAAiB,CAAC,MAA6C,EAAE,yBAAyB,CAAC;AAAA,MAC3F,gBAAiB,CAAC,MAA6C,EAAE,wBAAwB,CAAC;AAAA,MAC1F,cAAiB,CAAC,MAA6C,EAAE,sBAAsB,CAAC;AAAA,IAC1F;AAAA,EACF;AACF;","names":[]}

package/dist/api.d.cts

@@ -0,0 +1,4 @@
+import './methods.cjs';
+export { b as CoordinatorApi, c as CoordinatorError, g as call, m as makeApi } from './api-C3nkEk-B.cjs';
+import './types.cjs';
+import './storage/store.cjs';

package/dist/api.d.ts

@@ -0,0 +1,4 @@
+import './methods.js';
+export { b as CoordinatorApi, c as CoordinatorError, g as call, m as makeApi } from './api-CmSvlIqO.js';
+import './types.js';
+import './storage/store.js';