@codemem/core 0.39.0 → 0.40.0-alpha.1

package/dist/recipient-policy-reconciler.d.ts

@@ -0,0 +1,69 @@
+import type { Database } from "./db.js";
+export type RecipientPolicyPeerCapability = "supported" | "unsupported" | "undetermined";
+export interface RecipientPolicyCoordinatorSnapshot {
+    authoritative: boolean;
+    scopeId: string;
+    scopeMembershipEpoch?: number;
+    fingerprint: string;
+    observedAt: string;
+    memberships: Array<{
+        deviceId: string;
+        status: "active" | "revoked";
+        membershipEpoch?: number;
+    }>;
+}
+export interface RecipientPolicyCoordinatorEffectReceipt {
+    effectId: string;
+    scopeId: string;
+    deviceId: string;
+    status: "active" | "revoked";
+}
+export interface RecipientPolicyReconcilerEffects {
+    now(): string;
+    snapshot(input: {
+        canonicalProjectIdentity: string;
+        scopeId: string;
+    }): Promise<RecipientPolicyCoordinatorSnapshot>;
+    probeCapability(deviceId: string): Promise<RecipientPolicyPeerCapability>;
+    revoke(input: {
+        effectId: string;
+        canonicalProjectIdentity: string;
+        generation: number;
+        scopeId: string;
+        deviceId: string;
+    }): Promise<RecipientPolicyCoordinatorEffectReceipt>;
+    grant(input: {
+        effectId: string;
+        canonicalProjectIdentity: string;
+        generation: number;
+        scopeId: string;
+        deviceId: string;
+        role: "member";
+    }): Promise<RecipientPolicyCoordinatorEffectReceipt>;
+    refresh(input: {
+        canonicalProjectIdentity: string;
+        scopeId: string;
+    }): Promise<void>;
+}
+export type RecipientPolicyReconcileStatus = "active" | "busy" | "needs_attention" | "parity_pending" | "stale" | "waiting";
+export interface RecipientPolicyReconcileResult {
+    canonicalProjectIdentity: string;
+    status: RecipientPolicyReconcileStatus;
+    generation: number;
+    safeErrorCode: string | null;
+    revokedDeviceIds: string[];
+    grantedDeviceIds: string[];
+    deliveredCopiesMayRemain: true;
+    revocationWarning: string;
+}
+export interface ReconcileRecipientPolicyProjectInput {
+    canonicalProjectIdentity: string;
+    leaseOwner: string;
+    leaseDurationMs?: number;
+}
+export declare function assertLegacyShareGrantAllowed(db: Database, input: {
+    canonicalProjectIdentity: string;
+    deviceId: string;
+}): void;
+export declare function reconcileRecipientPolicyProject(db: Database, input: ReconcileRecipientPolicyProjectInput, effects: RecipientPolicyReconcilerEffects): Promise<RecipientPolicyReconcileResult>;
+//# sourceMappingURL=recipient-policy-reconciler.d.ts.map

package/dist/recipient-policy-reconciler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-policy-reconciler.d.ts","sourceRoot":"","sources":["../src/recipient-policy-reconciler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAcxC,MAAM,MAAM,6BAA6B,GAAG,WAAW,GAAG,aAAa,GAAG,cAAc,CAAC;AAEzF,MAAM,WAAW,kCAAkC;IAClD,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,KAAK,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;QAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC,CAAC;CACH;AAED,MAAM,WAAW,uCAAuC;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;CAC7B;AAED,MAAM,WAAW,gCAAgC;IAChD,GAAG,IAAI,MAAM,CAAC;IACd,QAAQ,CAAC,KAAK,EAAE;QACf,wBAAwB,EAAE,MAAM,CAAC;QACjC,OAAO,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAChD,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,EAAE;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,wBAAwB,EAAE,MAAM,CAAC;QACjC,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,uCAAuC,CAAC,CAAC;IACrD,KAAK,CAAC,KAAK,EAAE;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,wBAAwB,EAAE,MAAM,CAAC;QACjC,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,QAAQ,CAAC;KACf,GAAG,OAAO,CAAC,uCAAuC,CAAC,CAAC;IACrD,OAAO,CAAC,KAAK,EAAE;QAAE,wBAAwB,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrF;AAED,MAAM,MAAM,8BAA8B,GACvC,QAAQ,GACR,MAAM,GACN,iBAAiB,GACjB,gBAAgB,GAChB,OAAO,GACP,SAAS,CAAC;AAEb,MAAM,WAAW,8BAA8B;IAC9C,wBAAwB,EAAE,MAAM,CAAC;IACjC,MAAM,EAAE,8BAA8B,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,wBAAwB,EAAE,IAAI,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oCAAoC;IACpD,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB;AA6aD,wBAAgB,6BAA6B,CAC5C,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE;IAAE,wBAAwB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC3D,IAAI,CAaN;AAED,wBAAsB,+BAA+B,CACpD,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,oCAAoC,EAC3C,OAAO,EAAE,gCAAgC,GACvC,OAAO,CAAC,8BAA8B,CAAC,CAmUzC"}

package/dist/recipient-policy-reconciliation.d.ts

@@ -0,0 +1,199 @@
+import type { Database } from "./db.js";
+export type RecipientPolicyAuthorityState = "legacy" | "eligible" | "active" | "rolled_back";
+export type RecipientPolicyDerivationBlockCode = "canonical_project_identity_invalid" | "project_recipient_invalid" | "identity_missing" | "identity_not_active" | "identity_merged" | "team_missing" | "team_not_active" | "team_membership_invalid" | "team_member_identity_missing" | "team_member_identity_not_active" | "team_member_identity_merged" | "identity_device_invalid" | "device_identity_conflict";
+export interface RecipientPolicyDerivationIdentity {
+    identityId: string;
+    status: string;
+    mergedIntoIdentityId?: string | null;
+}
+export interface RecipientPolicyDerivationTeam {
+    teamId: string;
+    status: string;
+}
+export interface RecipientPolicyDerivationTeamMembership {
+    teamId: string;
+    identityId: string;
+    status: string;
+}
+export interface RecipientPolicyDerivationIdentityDevice {
+    identityId: string;
+    deviceId: string;
+    status: string;
+}
+export interface RecipientPolicyDerivationProjectRecipient {
+    canonicalProjectIdentity: string;
+    recipientKind: string;
+    recipientId: string;
+    status: string;
+}
+export interface RecipientPolicyEffectiveDeviceSource {
+    kind: "direct_identity" | "team_membership";
+    teamId?: string;
+}
+export interface StrictRecipientPolicyEffectiveDevice {
+    canonicalProjectIdentity: string;
+    identityId: string;
+    deviceId: string;
+    sources: RecipientPolicyEffectiveDeviceSource[];
+}
+export interface RecipientPolicyDerivationBlock {
+    code: RecipientPolicyDerivationBlockCode;
+    referenceId: string;
+}
+export interface DeriveRecipientPolicyEffectiveDevicesInput {
+    canonicalProjectIdentity: string;
+    projectRecipients: RecipientPolicyDerivationProjectRecipient[];
+    identities: RecipientPolicyDerivationIdentity[];
+    teams: RecipientPolicyDerivationTeam[];
+    teamMemberships: RecipientPolicyDerivationTeamMembership[];
+    identityDevices: RecipientPolicyDerivationIdentityDevice[];
+}
+export interface StrictRecipientPolicyEffectiveDeviceDerivation {
+    canonicalProjectIdentity: string;
+    status: "eligible" | "blocked";
+    devices: StrictRecipientPolicyEffectiveDevice[];
+    blocked: RecipientPolicyDerivationBlock[];
+    desiredDevicesDigest: string;
+}
+export interface RecipientPolicyAuthorityStateRecord {
+    canonicalProjectIdentity: string;
+    authorityState: RecipientPolicyAuthorityState;
+    generation: number;
+    desiredDevicesDigest: string | null;
+    currentDevicesDigest: string | null;
+    stableParityEvidenceDigest: string | null;
+    stableParityPassedAt: string | null;
+    freshSnapshotFingerprint: string | null;
+    freshSnapshotObservedAt: string | null;
+    safeErrorCode: string | null;
+    stateChangedAt: string;
+    lastErrorAt: string | null;
+    attemptCount: number;
+    lastAttemptAt: string | null;
+    lastCompletedAt: string | null;
+    leaseOwner: string | null;
+    leaseAcquiredAt: string | null;
+    leaseExpiresAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface UpsertRecipientPolicyAuthorityObservationInput {
+    canonicalProjectIdentity: string;
+    generation: number;
+    desiredDevicesDigest: string;
+    currentDevicesDigest: string | null;
+    freshSnapshotFingerprint: string | null;
+    freshSnapshotObservedAt: string | null;
+    now: string;
+}
+export interface RecordRecipientPolicyAuthorityExecutionInput {
+    canonicalProjectIdentity: string;
+    generation: number;
+    attemptCount: number;
+    lastAttemptAt: string | null;
+    lastCompletedAt: string | null;
+    safeErrorCode: string | null;
+    lastErrorAt: string | null;
+    leaseOwner: string | null;
+    leaseAcquiredAt: string | null;
+    leaseExpiresAt: string | null;
+    updatedAt: string;
+}
+export interface EnsureRecipientPolicyReconciliationStepInput {
+    canonicalProjectIdentity: string;
+    generation: number;
+    stepKey: string;
+    payloadDigest: string;
+    now: string;
+}
+export interface RecordRecipientPolicyReconciliationStepStateInput {
+    canonicalProjectIdentity: string;
+    generation: number;
+    stepKey: string;
+    effectId: string;
+    status: "pending" | "running" | "waiting" | "completed" | "failed";
+    attemptCount: number;
+    startedAt: string | null;
+    completedAt: string | null;
+    lastAttemptAt: string | null;
+    safeErrorCode: string | null;
+    errorAt: string | null;
+    leaseOwner: string | null;
+    leaseAcquiredAt: string | null;
+    leaseExpiresAt: string | null;
+    updatedAt: string;
+}
+export interface RecipientPolicyReconciliationStepRecord {
+    canonicalProjectIdentity: string;
+    generation: number;
+    stepKey: string;
+    effectId: string;
+    payloadDigest: string;
+    status: string;
+    attemptCount: number;
+    startedAt: string | null;
+    completedAt: string | null;
+    lastAttemptAt: string | null;
+    safeErrorCode: string | null;
+    errorAt: string | null;
+    leaseOwner: string | null;
+    leaseAcquiredAt: string | null;
+    leaseExpiresAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface RecipientPolicyDenyOverlayRecord {
+    canonicalProjectIdentity: string;
+    scopeId: string;
+    deviceId: string;
+    generation: number;
+    reasonCode: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export declare function recipientPolicyDevicesDigest(devices: readonly StrictRecipientPolicyEffectiveDevice[]): string;
+export declare function deriveRecipientPolicyEffectiveDevices(input: DeriveRecipientPolicyEffectiveDevicesInput): StrictRecipientPolicyEffectiveDeviceDerivation;
+export declare function deriveRecipientPolicyEffectiveDevicesFromDatabase(db: Database, canonicalProjectIdentity: string): StrictRecipientPolicyEffectiveDeviceDerivation;
+export declare function getRecipientPolicyAuthorityState(db: Database, canonicalProjectIdentity: string): RecipientPolicyAuthorityStateRecord | null;
+export declare function upsertRecipientPolicyAuthorityObservation(db: Database, input: UpsertRecipientPolicyAuthorityObservationInput): RecipientPolicyAuthorityStateRecord;
+export declare function recordRecipientPolicyStableParityPass(db: Database, input: {
+    canonicalProjectIdentity: string;
+    generation: number;
+    evidenceDigest: string;
+    snapshotFingerprint: string;
+    passedAt: string;
+}): RecipientPolicyAuthorityStateRecord;
+export declare function recordRecipientPolicyAuthorityExecution(db: Database, input: RecordRecipientPolicyAuthorityExecutionInput): RecipientPolicyAuthorityStateRecord;
+export declare function deterministicRecipientPolicyReconciliationEffectId(input: {
+    canonicalProjectIdentity: string;
+    generation: number;
+    stepKey: string;
+    payloadDigest: string;
+}): string;
+export declare function ensureRecipientPolicyReconciliationStep(db: Database, input: EnsureRecipientPolicyReconciliationStepInput): RecipientPolicyReconciliationStepRecord;
+export declare function recordRecipientPolicyReconciliationStepState(db: Database, input: RecordRecipientPolicyReconciliationStepStateInput): RecipientPolicyReconciliationStepRecord;
+export declare function putRecipientPolicyDenyOverlay(db: Database, input: {
+    canonicalProjectIdentity: string;
+    scopeId: string;
+    deviceId: string;
+    generation: number;
+    reasonCode: string;
+    now: string;
+}): RecipientPolicyDenyOverlayRecord;
+export declare function listRecipientPolicyDenyOverlays(db: Database, canonicalProjectIdentity: string): RecipientPolicyDenyOverlayRecord[];
+/**
+ * Returns any deny for a scope/device pair. Active policy reconciliation requires
+ * one exact Project per managed scope, so enforcement intentionally fails closed
+ * if corrupt legacy state contains more than one Project overlay for the pair.
+ */
+export declare function getAnyRecipientPolicyDenyOverlayForScopeDevice(db: Database, input: {
+    scopeId: string;
+    deviceId: string;
+}): RecipientPolicyDenyOverlayRecord | null;
+export declare function clearRecipientPolicyDenyOverlay(db: Database, input: {
+    canonicalProjectIdentity: string;
+    scopeId: string;
+    deviceId: string;
+    verifiedGeneration: number;
+}): boolean;
+//# sourceMappingURL=recipient-policy-reconciliation.d.ts.map

package/dist/recipient-policy-reconciliation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-policy-reconciliation.d.ts","sourceRoot":"","sources":["../src/recipient-policy-reconciliation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC,MAAM,MAAM,6BAA6B,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,aAAa,CAAC;AAE7F,MAAM,MAAM,kCAAkC,GAC3C,oCAAoC,GACpC,2BAA2B,GAC3B,kBAAkB,GAClB,qBAAqB,GACrB,iBAAiB,GACjB,cAAc,GACd,iBAAiB,GACjB,yBAAyB,GACzB,8BAA8B,GAC9B,iCAAiC,GACjC,6BAA6B,GAC7B,yBAAyB,GACzB,0BAA0B,CAAC;AAE9B,MAAM,WAAW,iCAAiC;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,6BAA6B;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uCAAuC;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uCAAuC;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,yCAAyC;IACzD,wBAAwB,EAAE,MAAM,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oCAAoC;IACpD,IAAI,EAAE,iBAAiB,GAAG,iBAAiB,CAAC;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oCAAoC;IACpD,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,oCAAoC,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,8BAA8B;IAC9C,IAAI,EAAE,kCAAkC,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0CAA0C;IAC1D,wBAAwB,EAAE,MAAM,CAAC;IACjC,iBAAiB,EAAE,yCAAyC,EAAE,CAAC;IAC/D,UAAU,EAAE,iCAAiC,EAAE,CAAC;IAChD,KAAK,EAAE,6BAA6B,EAAE,CAAC;IACvC,eAAe,EAAE,uCAAuC,EAAE,CAAC;IAC3D,eAAe,EAAE,uCAAuC,EAAE,CAAC;CAC3D;AAED,MAAM,WAAW,8CAA8C;IAC9D,wBAAwB,EAAE,MAAM,CAAC;IACjC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAChD,OAAO,EAAE,8BAA8B,EAAE,CAAC;IAC1C,oBAAoB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,mCAAmC;IACnD,wBAAwB,EAAE,MAAM,CAAC;IACjC,cAAc,EAAE,6BAA6B,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,8CAA8C;IAC9D,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,GAAG,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,4CAA4C;IAC5D,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,4CAA4C;IAC5D,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,iDAAiD;IACjE,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IACnE,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uCAAuC;IACvD,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gCAAgC;IAChD,wBAAwB,EAAE,MAAM,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB;AAkFD,wBAAgB,4BAA4B,CAC3C,OAAO,EAAE,SAAS,oCAAoC,EAAE,GACtD,MAAM,CAmBR;AAED,wBAAgB,qCAAqC,CACpD,KAAK,EAAE,0CAA0C,GAC/C,8CAA8C,CA2HhD;AAED,wBAAgB,iDAAiD,CAChE,EAAE,EAAE,QAAQ,EACZ,wBAAwB,EAAE,MAAM,GAC9B,8CAA8C,CAyDhD;AA2BD,wBAAgB,gCAAgC,CAC/C,EAAE,EAAE,QAAQ,EACZ,wBAAwB,EAAE,MAAM,GAC9B,mCAAmC,GAAG,IAAI,CAK5C;AAED,wBAAgB,yCAAyC,CACxD,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,8CAA8C,GACnD,mCAAmC,CAoDrC;AAED,wBAAgB,qCAAqC,CACpD,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE;IACN,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;CACjB,GACC,mCAAmC,CA0BrC;AAED,wBAAgB,uCAAuC,CACtD,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,4CAA4C,GACjD,mCAAmC,CA8BrC;AAED,wBAAgB,kDAAkD,CAAC,KAAK,EAAE;IACzE,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CAOT;AAwBD,wBAAgB,uCAAuC,CACtD,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,4CAA4C,GACjD,uCAAuC,CAgDzC;AAED,wBAAgB,4CAA4C,CAC3D,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,iDAAiD,GACtD,uCAAuC,CAmDzC;AAcD,wBAAgB,6BAA6B,CAC5C,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE;IACN,wBAAwB,EAAE,MAAM,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACZ,GACC,gCAAgC,CAoDlC;AAED,wBAAgB,+BAA+B,CAC9C,EAAE,EAAE,QAAQ,EACZ,wBAAwB,EAAE,MAAM,GAC9B,gCAAgC,EAAE,CASpC;AAED;;;;GAIG;AACH,wBAAgB,8CAA8C,CAC7D,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC1C,gCAAgC,GAAG,IAAI,CAUzC;AAED,wBAAgB,+BAA+B,CAC9C,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE;IACN,wBAAwB,EAAE,MAAM,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;CAC3B,GACC,OAAO,CAST"}

package/dist/recipient-policy-review.d.ts

@@ -0,0 +1,47 @@
+import type { Database } from "./db.js";
+import { type LegacyRecipientPolicyConditionCodeV1, type LegacyRecipientPolicyProjectionV1 } from "./legacy-recipient-policy-projection.js";
+import { type RecipientPolicyBlockedItemV1, type RecipientPolicyContractVersion, type RecipientPolicyReviewDecisionV1, type RecipientPolicyReviewItemV1, type RecipientPolicyReviewOptionV1, type RecipientPolicyReviewPreviewV1 } from "./recipient-policy-contract.js";
+export interface RecipientPolicyReviewContext {
+    localActorId: string;
+    localDeviceId: string;
+    now?: () => string;
+}
+export type RecipientPolicyReviewActionOptionV1 = RecipientPolicyReviewOptionV1 & {
+    preview: RecipientPolicyReviewPreviewV1;
+};
+export type RecipientPolicyActionableReviewItemV1 = Omit<RecipientPolicyReviewItemV1, "options"> & {
+    options: RecipientPolicyReviewActionOptionV1[];
+};
+export interface RecipientPolicyReviewListV1 {
+    version: RecipientPolicyContractVersion;
+    reviewItems: RecipientPolicyActionableReviewItemV1[];
+    blockedItems: RecipientPolicyBlockedItemV1[];
+}
+export interface RecipientPolicyReviewResolveRequestV1 {
+    reviewItemId: string;
+    sourceFingerprint: string;
+    decision: RecipientPolicyReviewDecisionV1;
+    decisionInput?: unknown;
+}
+export type RecipientPolicyReviewResolveStatusV1 = "applied" | "stale" | "not_found" | "invalid" | "conflict";
+export interface RecipientPolicyReviewResolveResultV1 {
+    reviewItemId: string;
+    sourceFingerprint: string;
+    status: RecipientPolicyReviewResolveStatusV1;
+    errorCode: string | null;
+    idempotent: boolean;
+}
+export interface RecipientPolicyReviewBulkResultV1 {
+    version: RecipientPolicyContractVersion;
+    results: RecipientPolicyReviewResolveResultV1[];
+}
+export interface RecipientPolicyDerivedReviewState {
+    allReviewItems: RecipientPolicyActionableReviewItemV1[];
+    blockedItems: RecipientPolicyBlockedItemV1[];
+}
+export declare function recipientPolicyReviewSourceFingerprint(projection: LegacyRecipientPolicyProjectionV1, conditionCode: LegacyRecipientPolicyConditionCodeV1): string;
+export declare function deriveRecipientPolicyReviewState(db: Database, context: RecipientPolicyReviewContext, projections?: LegacyRecipientPolicyProjectionV1[]): RecipientPolicyDerivedReviewState;
+export declare function listRecipientPolicyReview(db: Database, context: RecipientPolicyReviewContext): RecipientPolicyReviewListV1;
+export declare function resolveRecipientPolicyReview(db: Database, context: RecipientPolicyReviewContext, request: RecipientPolicyReviewResolveRequestV1): RecipientPolicyReviewResolveResultV1;
+export declare function resolveRecipientPolicyReviewBulk(db: Database, context: RecipientPolicyReviewContext, requests: RecipientPolicyReviewResolveRequestV1[]): RecipientPolicyReviewBulkResultV1;
+//# sourceMappingURL=recipient-policy-review.d.ts.map

package/dist/recipient-policy-review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-policy-review.d.ts","sourceRoot":"","sources":["../src/recipient-policy-review.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EACN,KAAK,oCAAoC,EAEzC,KAAK,iCAAiC,EAGtC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAEN,KAAK,4BAA4B,EACjC,KAAK,8BAA8B,EACnC,KAAK,+BAA+B,EACpC,KAAK,2BAA2B,EAChC,KAAK,6BAA6B,EAClC,KAAK,8BAA8B,EACnC,MAAM,gCAAgC,CAAC;AAGxC,MAAM,WAAW,4BAA4B;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,mCAAmC,GAAG,6BAA6B,GAAG;IACjF,OAAO,EAAE,8BAA8B,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,qCAAqC,GAAG,IAAI,CAAC,2BAA2B,EAAE,SAAS,CAAC,GAAG;IAClG,OAAO,EAAE,mCAAmC,EAAE,CAAC;CAC/C,CAAC;AAEF,MAAM,WAAW,2BAA2B;IAC3C,OAAO,EAAE,8BAA8B,CAAC;IACxC,WAAW,EAAE,qCAAqC,EAAE,CAAC;IACrD,YAAY,EAAE,4BAA4B,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,qCAAqC;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,+BAA+B,CAAC;IAC1C,aAAa,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,oCAAoC,GAC7C,SAAS,GACT,OAAO,GACP,WAAW,GACX,SAAS,GACT,UAAU,CAAC;AAEd,MAAM,WAAW,oCAAoC;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,oCAAoC,CAAC;IAC7C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,iCAAiC;IACjD,OAAO,EAAE,8BAA8B,CAAC;IACxC,OAAO,EAAE,oCAAoC,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,iCAAiC;IACjD,cAAc,EAAE,qCAAqC,EAAE,CAAC;IACxD,YAAY,EAAE,4BAA4B,EAAE,CAAC;CAC7C;AAgFD,wBAAgB,sCAAsC,CACrD,UAAU,EAAE,iCAAiC,EAC7C,aAAa,EAAE,oCAAoC,GACjD,MAAM,CAER;AAmKD,wBAAgB,gCAAgC,CAC/C,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,4BAA4B,EACrC,WAAW,sCAAoD,GAC7D,iCAAiC,CAgEnC;AAaD,wBAAgB,yBAAyB,CACxC,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,4BAA4B,GACnC,2BAA2B,CAO7B;AAyMD,wBAAgB,4BAA4B,CAC3C,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,4BAA4B,EACrC,OAAO,EAAE,qCAAqC,GAC5C,oCAAoC,CAmBtC;AAED,wBAAgB,gCAAgC,CAC/C,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,4BAA4B,EACrC,QAAQ,EAAE,qCAAqC,EAAE,GAC/C,iCAAiC,CAanC"}

package/dist/recipient-reviewed-intent.d.ts

@@ -0,0 +1,63 @@
+export declare const RECIPIENT_REVIEWED_INTENT_VERSION: 1;
+export type RecipientReviewedIntentProjectSourceV1 = {
+    kind: "direct";
+} | {
+    kind: "team";
+    teamId: string;
+    displayName: string;
+};
+export interface RecipientReviewedIntentProjectV1 {
+    canonicalProjectIdentity: string;
+    displayName: string;
+    existingMemoryCount: number;
+    futureMemoriesShared: true;
+    sources: RecipientReviewedIntentProjectSourceV1[];
+}
+export interface RecipientReviewedIntentExcludedProjectV1 {
+    canonicalProjectIdentity: string;
+    displayName: string;
+    existingMemoryCount: number;
+}
+interface RecipientReviewedIntentBaseV1 {
+    version: 1;
+    projects: RecipientReviewedIntentProjectV1[];
+    excludedProjects: RecipientReviewedIntentExcludedProjectV1[];
+}
+export type RecipientReviewedIntentV1 = (RecipientReviewedIntentBaseV1 & {
+    journey: "team";
+    team: {
+        teamId: string;
+        displayName: string;
+        futureProjectsInherit: true;
+    };
+}) | (RecipientReviewedIntentBaseV1 & {
+    journey: "add_device";
+    targetIdentity: {
+        identityId: string;
+        displayName: string;
+    };
+});
+export type RecipientReviewedIntentTargetV1 = {
+    kind: "team_member";
+    policyTeamId: string;
+} | {
+    kind: "add_device";
+    targetIdentityId: string;
+};
+export declare class RecipientReviewedIntentError extends Error {
+    readonly code: "recipient_reviewed_intent_invalid" | "recipient_invite_intent_mismatch";
+    constructor(code: RecipientReviewedIntentError["code"]);
+}
+export declare function normalizeRecipientReviewedIntent(value: unknown, target?: RecipientReviewedIntentTargetV1): RecipientReviewedIntentV1;
+export declare function canonicalRecipientReviewedIntentJson(value: unknown, target?: RecipientReviewedIntentTargetV1): string;
+export declare function recipientReviewedIntentDigest(value: unknown, target?: RecipientReviewedIntentTargetV1): Promise<string>;
+export declare function verifyRecipientReviewedIntent(value: unknown, options: {
+    target: RecipientReviewedIntentTargetV1;
+    digest: string;
+}): Promise<RecipientReviewedIntentV1>;
+export declare function parseStoredRecipientReviewedIntent(json: string | null | undefined, options: {
+    target: RecipientReviewedIntentTargetV1;
+    digest: string;
+}): Promise<RecipientReviewedIntentV1>;
+export {};
+//# sourceMappingURL=recipient-reviewed-intent.d.ts.map

package/dist/recipient-reviewed-intent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-reviewed-intent.d.ts","sourceRoot":"","sources":["../src/recipient-reviewed-intent.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,iCAAiC,EAAG,CAAU,CAAC;AAE5D,MAAM,MAAM,sCAAsC,GAC/C;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD,MAAM,WAAW,gCAAgC;IAChD,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,IAAI,CAAC;IAC3B,OAAO,EAAE,sCAAsC,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,wCAAwC;IACxD,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,CAAC;CAC5B;AAED,UAAU,6BAA6B;IACtC,OAAO,EAAE,CAAC,CAAC;IACX,QAAQ,EAAE,gCAAgC,EAAE,CAAC;IAC7C,gBAAgB,EAAE,wCAAwC,EAAE,CAAC;CAC7D;AAED,MAAM,MAAM,yBAAyB,GAClC,CAAC,6BAA6B,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,qBAAqB,EAAE,IAAI,CAAA;KAAE,CAAC;CAC1E,CAAC,GACF,CAAC,6BAA6B,GAAG;IACjC,OAAO,EAAE,YAAY,CAAC;IACtB,cAAc,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3D,CAAC,CAAC;AAEN,MAAM,MAAM,+BAA+B,GACxC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpD,qBAAa,4BAA6B,SAAQ,KAAK;IACtD,QAAQ,CAAC,IAAI,EAAE,mCAAmC,GAAG,kCAAkC,CAAC;gBAE5E,IAAI,EAAE,4BAA4B,CAAC,MAAM,CAAC;CAKtD;AAiKD,wBAAgB,gCAAgC,CAC/C,KAAK,EAAE,OAAO,EACd,MAAM,CAAC,EAAE,+BAA+B,GACtC,yBAAyB,CAuC3B;AAaD,wBAAgB,oCAAoC,CACnD,KAAK,EAAE,OAAO,EACd,MAAM,CAAC,EAAE,+BAA+B,GACtC,MAAM,CAER;AAED,wBAAsB,6BAA6B,CAClD,KAAK,EAAE,OAAO,EACd,MAAM,CAAC,EAAE,+BAA+B,GACtC,OAAO,CAAC,MAAM,CAAC,CAKjB;AAED,wBAAsB,6BAA6B,CAClD,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;IAAE,MAAM,EAAE,+BAA+B,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClE,OAAO,CAAC,yBAAyB,CAAC,CAMpC;AAED,wBAAsB,kCAAkC,CACvD,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC/B,OAAO,EAAE;IAAE,MAAM,EAAE,+BAA+B,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClE,OAAO,CAAC,yBAAyB,CAAC,CA0BpC"}

package/dist/schema-bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-bootstrap.d.ts","sourceRoot":"","sources":["../src/schema-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAgKxC;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,GAAG,IAAI,CAUrD;AAWD,wBAAgB,eAAe,CAAC,EAAE,EAAE,QAAQ,GAAG,IAAI,CAYlD;AA2BD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,QAAQ,GAAG,IAAI,CAI3D;AAED,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAE5D"}
+{"version":3,"file":"schema-bootstrap.d.ts","sourceRoot":"","sources":["../src/schema-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAgSxC;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,QAAQ,GAAG,IAAI,CAUrD;AAWD,wBAAgB,eAAe,CAAC,EAAE,EAAE,QAAQ,GAAG,IAAI,CAYlD;AA2BD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,QAAQ,GAAG,IAAI,CAI3D;AAED,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAE5D"}