@codemem/core 0.39.1 → 0.40.0

package/dist/recipient-policy-edges.d.ts

@@ -0,0 +1,85 @@
+import type { Database } from "./db.js";
+export type RecipientPolicyEdgeRecipientRefV1 = {
+    recipientKind: "identity";
+    identityId: string;
+} | {
+    recipientKind: "team";
+    teamId: string;
+};
+export interface RecipientPolicyEdgeChangeV1 {
+    canonicalProjectIdentity: string;
+    recipient: RecipientPolicyEdgeRecipientRefV1;
+    action: "add" | "remove";
+}
+export interface RecipientPolicyEdgePreviewRequestV1 {
+    version: 1;
+    changes: RecipientPolicyEdgeChangeV1[];
+}
+export interface RecipientPolicyEdgeCommitRequestV1 extends RecipientPolicyEdgePreviewRequestV1 {
+    reviewedPolicyDigest: string;
+}
+export interface RecipientPolicyEdgePreviewProjectV1 {
+    canonicalProjectIdentity: string;
+    displayName: string;
+    existingMemoryCount: number;
+    futureMemoriesShared: true;
+}
+export interface RecipientPolicyEdgeIdentitySummaryV1 {
+    identityId: string;
+    displayName: string;
+    verification: "local";
+}
+export type RecipientPolicyEdgeSelectedRecipientV1 = ({
+    recipientKind: "identity";
+} & RecipientPolicyEdgeIdentitySummaryV1) | {
+    recipientKind: "team";
+    teamId: string;
+    displayName: string;
+    currentMembers: RecipientPolicyEdgeIdentitySummaryV1[];
+    futureMembersInherit: true;
+};
+export interface RecipientPolicyEdgeEffectiveDeviceV1 {
+    canonicalProjectIdentity: string;
+    identityId: string;
+    deviceId: string;
+    displayName: string;
+}
+export interface RecipientPolicyEdgePreviewResponseV1 {
+    version: 1;
+    normalizedChanges: RecipientPolicyEdgeChangeV1[];
+    outcomes: RecipientPolicyEdgeCommitOutcomeV1[];
+    projects: RecipientPolicyEdgePreviewProjectV1[];
+    selectedRecipients: RecipientPolicyEdgeSelectedRecipientV1[];
+    effectiveDevices: RecipientPolicyEdgeEffectiveDeviceV1[];
+    unchangedProjects: RecipientPolicyEdgePreviewProjectV1[];
+    reviewedPolicyDigest: string;
+    addCount: number;
+    removeCount: number;
+    netWriteCount: number;
+}
+export type RecipientPolicyEdgeOutcomeV1 = "added" | "removed" | "already_present" | "already_absent";
+export interface RecipientPolicyEdgeCommitOutcomeV1 {
+    change: RecipientPolicyEdgeChangeV1;
+    outcome: RecipientPolicyEdgeOutcomeV1;
+}
+export interface RecipientPolicyEdgeCommitResultV1 {
+    version: 1;
+    status: "applied" | "stale" | "invalid" | "not_found" | "conflict";
+    reviewedPolicyDigest: string;
+    errorCode: string | null;
+    outcomes: RecipientPolicyEdgeCommitOutcomeV1[];
+    writeCount: number;
+    idempotent: boolean;
+}
+export declare class RecipientPolicyEdgeRequestError extends Error {
+    readonly status: "invalid" | "not_found";
+    readonly errorCode: string;
+    constructor(status: "invalid" | "not_found", errorCode: string);
+}
+export declare function parseRecipientPolicyEdgePreviewRequest(value: unknown): RecipientPolicyEdgePreviewRequestV1 | null;
+export declare function parseRecipientPolicyEdgeCommitRequest(value: unknown): RecipientPolicyEdgeCommitRequestV1 | null;
+export declare function previewRecipientPolicyEdges(db: Database, value: unknown): RecipientPolicyEdgePreviewResponseV1;
+export declare function commitRecipientPolicyEdges(db: Database, value: unknown, options?: {
+    now?: () => string;
+}): RecipientPolicyEdgeCommitResultV1;
+//# sourceMappingURL=recipient-policy-edges.d.ts.map

package/dist/recipient-policy-edges.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-policy-edges.d.ts","sourceRoot":"","sources":["../src/recipient-policy-edges.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAIxC,MAAM,MAAM,iCAAiC,GAC1C;IAAE,aAAa,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C,MAAM,WAAW,2BAA2B;IAC3C,wBAAwB,EAAE,MAAM,CAAC;IACjC,SAAS,EAAE,iCAAiC,CAAC;IAC7C,MAAM,EAAE,KAAK,GAAG,QAAQ,CAAC;CACzB;AAED,MAAM,WAAW,mCAAmC;IACnD,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,2BAA2B,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,kCAAmC,SAAQ,mCAAmC;IAC9F,oBAAoB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,mCAAmC;IACnD,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,oCAAoC;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,MAAM,sCAAsC,GAC/C,CAAC;IAAE,aAAa,EAAE,UAAU,CAAA;CAAE,GAAG,oCAAoC,CAAC,GACtE;IACA,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,oCAAoC,EAAE,CAAC;IACvD,oBAAoB,EAAE,IAAI,CAAC;CAC1B,CAAC;AAEL,MAAM,WAAW,oCAAoC;IACpD,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oCAAoC;IACpD,OAAO,EAAE,CAAC,CAAC;IACX,iBAAiB,EAAE,2BAA2B,EAAE,CAAC;IACjD,QAAQ,EAAE,kCAAkC,EAAE,CAAC;IAC/C,QAAQ,EAAE,mCAAmC,EAAE,CAAC;IAChD,kBAAkB,EAAE,sCAAsC,EAAE,CAAC;IAC7D,gBAAgB,EAAE,oCAAoC,EAAE,CAAC;IACzD,iBAAiB,EAAE,mCAAmC,EAAE,CAAC;IACzD,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,4BAA4B,GACrC,OAAO,GACP,SAAS,GACT,iBAAiB,GACjB,gBAAgB,CAAC;AAEpB,MAAM,WAAW,kCAAkC;IAClD,MAAM,EAAE,2BAA2B,CAAC;IACpC,OAAO,EAAE,4BAA4B,CAAC;CACtC;AAED,MAAM,WAAW,iCAAiC;IACjD,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,CAAC;IACnE,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,kCAAkC,EAAE,CAAC;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,qBAAa,+BAAgC,SAAQ,KAAK;IACzD,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,MAAM,EAAE,SAAS,GAAG,WAAW,EAAE,SAAS,EAAE,MAAM;CAM9D;AAgJD,wBAAgB,sCAAsC,CACrD,KAAK,EAAE,OAAO,GACZ,mCAAmC,GAAG,IAAI,CAM5C;AAED,wBAAgB,qCAAqC,CACpD,KAAK,EAAE,OAAO,GACZ,kCAAkC,GAAG,IAAI,CAa3C;AA0aD,wBAAgB,2BAA2B,CAC1C,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,OAAO,GACZ,oCAAoC,CAItC;AA2BD,wBAAgB,0BAA0B,CACzC,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,OAAO,EACd,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAO,GAClC,iCAAiC,CAsHnC"}

package/dist/recipient-policy-intent.d.ts

@@ -0,0 +1,12 @@
+import type { Database } from "./db.js";
+import { type RecipientPolicyContractVersion, type RecipientPolicyIdentityDeviceV1, type RecipientPolicyIdentityV1, type RecipientPolicyProjectRecipientV1, type RecipientPolicyTeamMembershipV1, type RecipientPolicyTeamV1 } from "./recipient-policy-contract.js";
+export interface RecipientPolicyIntentGraphV1 {
+    version: RecipientPolicyContractVersion;
+    identities: RecipientPolicyIdentityV1[];
+    teams: RecipientPolicyTeamV1[];
+    teamMemberships: RecipientPolicyTeamMembershipV1[];
+    identityDevices: RecipientPolicyIdentityDeviceV1[];
+    projectRecipients: RecipientPolicyProjectRecipientV1[];
+}
+export declare function listRecipientPolicyIntent(db: Database): RecipientPolicyIntentGraphV1;
+//# sourceMappingURL=recipient-policy-intent.d.ts.map

package/dist/recipient-policy-intent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-policy-intent.d.ts","sourceRoot":"","sources":["../src/recipient-policy-intent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAEN,KAAK,8BAA8B,EACnC,KAAK,+BAA+B,EACpC,KAAK,yBAAyB,EAC9B,KAAK,iCAAiC,EACtC,KAAK,+BAA+B,EACpC,KAAK,qBAAqB,EAC1B,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,4BAA4B;IAC5C,OAAO,EAAE,8BAA8B,CAAC;IACxC,UAAU,EAAE,yBAAyB,EAAE,CAAC;IACxC,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC/B,eAAe,EAAE,+BAA+B,EAAE,CAAC;IACnD,eAAe,EAAE,+BAA+B,EAAE,CAAC;IACnD,iBAAiB,EAAE,iCAAiC,EAAE,CAAC;CACvD;AAMD,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,QAAQ,GAAG,4BAA4B,CAwGpF"}

package/dist/recipient-policy-migration.d.ts

@@ -0,0 +1,22 @@
+import type { Database } from "./db.js";
+import { RECIPIENT_POLICY_CONTRACT_VERSION } from "./recipient-policy-contract.js";
+import type { RecipientPolicyReviewContext } from "./recipient-policy-review.js";
+export interface RecipientPolicyMigrationOptions {
+    dryRun?: boolean;
+}
+export type RecipientPolicyMigrationProjectStatus = "migrated" | "would_migrate" | "unchanged" | "skipped" | "blocked";
+export interface RecipientPolicyMigrationProjectResultV1 {
+    canonicalProjectIdentity: string;
+    status: RecipientPolicyMigrationProjectStatus;
+    writeCount: number;
+    idempotent: boolean;
+    errorCode: string | null;
+}
+export interface RecipientPolicyMigrationResultV1 {
+    version: typeof RECIPIENT_POLICY_CONTRACT_VERSION;
+    dryRun: boolean;
+    results: RecipientPolicyMigrationProjectResultV1[];
+}
+export declare function deterministicPolicyTeamId(teamCandidateId: string): string;
+export declare function migrateRecipientPolicyIntent(db: Database, context: RecipientPolicyReviewContext, options?: RecipientPolicyMigrationOptions): RecipientPolicyMigrationResultV1;
+//# sourceMappingURL=recipient-policy-migration.d.ts.map

package/dist/recipient-policy-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-policy-migration.d.ts","sourceRoot":"","sources":["../src/recipient-policy-migration.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAKxC,OAAO,EAAE,iCAAiC,EAAE,MAAM,gCAAgC,CAAC;AACnF,OAAO,KAAK,EAEX,4BAA4B,EAC5B,MAAM,8BAA8B,CAAC;AAItC,MAAM,WAAW,+BAA+B;IAC/C,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,qCAAqC,GAC9C,UAAU,GACV,eAAe,GACf,WAAW,GACX,SAAS,GACT,SAAS,CAAC;AAEb,MAAM,WAAW,uCAAuC;IACvD,wBAAwB,EAAE,MAAM,CAAC;IACjC,MAAM,EAAE,qCAAqC,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,gCAAgC;IAChD,OAAO,EAAE,OAAO,iCAAiC,CAAC;IAClD,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,uCAAuC,EAAE,CAAC;CACnD;AA0DD,wBAAgB,yBAAyB,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAEzE;AA4jBD,wBAAgB,4BAA4B,CAC3C,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,4BAA4B,EACrC,OAAO,GAAE,+BAAoC,GAC3C,gCAAgC,CA0IlC"}

package/dist/recipient-policy-onboarding.d.ts

@@ -0,0 +1,111 @@
+import type { Database } from "./db.js";
+import { type RecipientReviewedIntentV1 } from "./recipient-reviewed-intent.js";
+export type RecipientPolicyOnboardingJourneyV1 = "team" | "direct_project" | "add_device";
+export interface RecipientPolicyOnboardingBindingV1 {
+    invitationId: string;
+    identityId: string;
+    deviceId: string;
+    deviceKeyFingerprint: string;
+    deviceDisplayName: string;
+}
+interface RecipientPolicyOnboardingRequestBaseV1 {
+    version: 1;
+    invitationId: string;
+    identityId: string;
+    deviceId: string;
+    devicePublicKey: string;
+    deviceDisplayName: string;
+}
+export interface RecipientPolicyTeamOnboardingRequestV1 extends RecipientPolicyOnboardingRequestBaseV1 {
+    journey: "team";
+    teamId: string;
+}
+export interface RecipientPolicyDirectProjectOnboardingRequestV1 extends RecipientPolicyOnboardingRequestBaseV1 {
+    journey: "direct_project";
+    canonicalProjectIdentities: string[];
+}
+export interface RecipientPolicyAddDeviceOnboardingRequestV1 extends RecipientPolicyOnboardingRequestBaseV1 {
+    journey: "add_device";
+}
+export type RecipientPolicyOnboardingPreviewRequestV1 = RecipientPolicyTeamOnboardingRequestV1 | RecipientPolicyDirectProjectOnboardingRequestV1 | RecipientPolicyAddDeviceOnboardingRequestV1;
+export type RecipientPolicyOnboardingCommitRequestV1 = RecipientPolicyOnboardingPreviewRequestV1 & {
+    reviewedOnboardingDigest: string;
+};
+export type RecipientPolicyReviewedIntentPreviewRequestV1 = RecipientPolicyTeamOnboardingRequestV1 | RecipientPolicyAddDeviceOnboardingRequestV1;
+export type RecipientPolicyReviewedIntentCommitRequestV1 = RecipientPolicyReviewedIntentPreviewRequestV1 & {
+    identityDisplayName: string;
+    reviewedIntent: RecipientReviewedIntentV1;
+    reviewedOnboardingDigest: string;
+};
+export type RecipientPolicyOnboardingProjectSourceV1 = {
+    kind: "direct";
+} | {
+    kind: "team";
+    teamId: string;
+    displayName: string;
+};
+export interface RecipientPolicyOnboardingProjectV1 {
+    canonicalProjectIdentity: string;
+    displayName: string;
+    existingMemoryCount: number;
+    futureMemoriesShared: true;
+    sources: RecipientPolicyOnboardingProjectSourceV1[];
+}
+export interface RecipientPolicyOnboardingExcludedProjectV1 {
+    canonicalProjectIdentity: string;
+    displayName: string;
+    existingMemoryCount: number;
+}
+export interface RecipientPolicyOnboardingPreviewV1 {
+    version: 1;
+    journey: RecipientPolicyOnboardingJourneyV1;
+    binding: RecipientPolicyOnboardingBindingV1;
+    team: {
+        teamId: string;
+        displayName: string;
+        futureProjectsInherit: true;
+    } | null;
+    projects: RecipientPolicyOnboardingProjectV1[];
+    excludedProjects: RecipientPolicyOnboardingExcludedProjectV1[];
+    reviewedOnboardingDigest: string;
+}
+export interface RecipientPolicyOnboardingCommitResultV1 {
+    version: 1;
+    status: "applied" | "stale" | "invalid" | "not_found" | "conflict";
+    journey: RecipientPolicyOnboardingJourneyV1 | null;
+    reviewedOnboardingDigest: string;
+    errorCode: string | null;
+    writeCount: number;
+    idempotent: boolean;
+}
+export interface DirectProjectSharePolicyCommitInput {
+    operationId: string;
+    inviterIdentityId: string;
+    inviterDevices: Array<{
+        deviceId: string;
+        displayName: string;
+    }>;
+    recipientIdentityId: string;
+    recipientDeviceId: string;
+    recipientDevicePublicKey: string;
+    recipientDeviceDisplayName: string;
+    canonicalProjectIdentities: string[];
+    now: string;
+}
+export declare class RecipientPolicyOnboardingRequestError extends Error {
+    readonly status: "invalid" | "not_found";
+    readonly errorCode: string;
+    constructor(status: "invalid" | "not_found", errorCode: string);
+}
+export declare function previewRecipientPolicyOnboarding(db: Database, request: RecipientPolicyOnboardingPreviewRequestV1): RecipientPolicyOnboardingPreviewV1;
+export declare function previewRecipientPolicyOnboardingFromReviewedIntent(reviewedIntent: RecipientReviewedIntentV1, request: RecipientPolicyReviewedIntentPreviewRequestV1): RecipientPolicyOnboardingPreviewV1;
+export declare function assertAddDeviceIdentityAdoptionAllowed(db: Database, targetIdentityId: string, deviceId: string): void;
+export declare function commitDirectProjectSharePolicyInTransaction(db: Database, input: DirectProjectSharePolicyCommitInput): number;
+export declare function commitRecipientPolicyOnboarding(db: Database, request: RecipientPolicyOnboardingCommitRequestV1, options?: {
+    now?: () => string;
+}): RecipientPolicyOnboardingCommitResultV1;
+export declare function commitRecipientPolicyOnboardingFromReviewedIntent(db: Database, request: RecipientPolicyReviewedIntentCommitRequestV1, options?: {
+    now?: () => string;
+}): RecipientPolicyOnboardingCommitResultV1;
+export {};
+//# sourceMappingURL=recipient-policy-onboarding.d.ts.map

package/dist/recipient-policy-onboarding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-policy-onboarding.d.ts","sourceRoot":"","sources":["../src/recipient-policy-onboarding.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC,OAAO,EAEN,KAAK,yBAAyB,EAC9B,MAAM,gCAAgC,CAAC;AAOxC,MAAM,MAAM,kCAAkC,GAAG,MAAM,GAAG,gBAAgB,GAAG,YAAY,CAAC;AAE1F,MAAM,WAAW,kCAAkC;IAClD,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;CAC1B;AAED,UAAU,sCAAsC;IAC/C,OAAO,EAAE,CAAC,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,sCAChB,SAAQ,sCAAsC;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,+CAChB,SAAQ,sCAAsC;IAC9C,OAAO,EAAE,gBAAgB,CAAC;IAC1B,0BAA0B,EAAE,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,2CAChB,SAAQ,sCAAsC;IAC9C,OAAO,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,MAAM,yCAAyC,GAClD,sCAAsC,GACtC,+CAA+C,GAC/C,2CAA2C,CAAC;AAE/C,MAAM,MAAM,wCAAwC,GAAG,yCAAyC,GAAG;IAClG,wBAAwB,EAAE,MAAM,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,6CAA6C,GACtD,sCAAsC,GACtC,2CAA2C,CAAC;AAE/C,MAAM,MAAM,4CAA4C,GACvD,6CAA6C,GAAG;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,yBAAyB,CAAC;IAC1C,wBAAwB,EAAE,MAAM,CAAC;CACjC,CAAC;AAEH,MAAM,MAAM,wCAAwC,GACjD;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD,MAAM,WAAW,kCAAkC;IAClD,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,IAAI,CAAC;IAC3B,OAAO,EAAE,wCAAwC,EAAE,CAAC;CACpD;AAED,MAAM,WAAW,0CAA0C;IAC1D,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kCAAkC;IAClD,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,kCAAkC,CAAC;IAC5C,OAAO,EAAE,kCAAkC,CAAC;IAC5C,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,qBAAqB,EAAE,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAClF,QAAQ,EAAE,kCAAkC,EAAE,CAAC;IAC/C,gBAAgB,EAAE,0CAA0C,EAAE,CAAC;IAC/D,wBAAwB,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,uCAAuC;IACvD,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,CAAC;IACnE,OAAO,EAAE,kCAAkC,GAAG,IAAI,CAAC;IACnD,wBAAwB,EAAE,MAAM,CAAC;IACjC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,mCAAmC;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,wBAAwB,EAAE,MAAM,CAAC;IACjC,0BAA0B,EAAE,MAAM,CAAC;IACnC,0BAA0B,EAAE,MAAM,EAAE,CAAC;IACrC,GAAG,EAAE,MAAM,CAAC;CACZ;AAED,qBAAa,qCAAsC,SAAQ,KAAK;IAC/D,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,MAAM,EAAE,SAAS,GAAG,WAAW,EAAE,SAAS,EAAE,MAAM;CAM9D;AA2eD,wBAAgB,gCAAgC,CAC/C,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,yCAAyC,GAChD,kCAAkC,CAEpC;AAyCD,wBAAgB,kDAAkD,CACjE,cAAc,EAAE,yBAAyB,EACzC,OAAO,EAAE,6CAA6C,GACpD,kCAAkC,CAEpC;AAkQD,wBAAgB,sCAAsC,CACrD,EAAE,EAAE,QAAQ,EACZ,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,MAAM,GACd,IAAI,CA+BN;AAuKD,wBAAgB,2CAA2C,CAC1D,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,mCAAmC,GACxC,MAAM,CA4CR;AA4BD,wBAAgB,+BAA+B,CAC9C,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,wCAAwC,EACjD,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAO,GAClC,uCAAuC,CA6DzC;AAED,wBAAgB,iDAAiD,CAChE,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,4CAA4C,EACrD,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAO,GAClC,uCAAuC,CA2FzC"}

package/dist/recipient-policy-reconciler.d.ts

@@ -0,0 +1,83 @@
+import type { Database } from "./db.js";
+export type RecipientPolicyPeerCapability = "supported" | "unsupported" | "undetermined";
+export interface RecipientPolicyCoordinatorSnapshot {
+    authoritative: boolean;
+    scopeId: string;
+    scopeMembershipEpoch?: number;
+    fingerprint: string;
+    observedAt: string;
+    memberships: Array<{
+        deviceId: string;
+        status: "active" | "revoked";
+        membershipEpoch?: number;
+    }>;
+}
+export interface RecipientPolicyCoordinatorEffectReceipt {
+    effectId: string;
+    scopeId: string;
+    deviceId: string;
+    status: "active" | "revoked";
+}
+export interface RecipientPolicyBoundaryEnrollment {
+    deviceId: string;
+    identityId: string | null;
+    publicKey: string;
+    fingerprint: string;
+    enabled: boolean;
+}
+export interface RecipientPolicyReconcilerEffects {
+    now(): string;
+    snapshot(input: {
+        canonicalProjectIdentity: string;
+        scopeId: string;
+    }): Promise<RecipientPolicyCoordinatorSnapshot>;
+    listBoundaryEnrollments(input: {
+        canonicalProjectIdentity: string;
+        scopeId: string;
+    }): Promise<RecipientPolicyBoundaryEnrollment[]>;
+    probeCapability(input: {
+        deviceId: string;
+        scopeId: string;
+    }): Promise<RecipientPolicyPeerCapability>;
+    revoke(input: {
+        effectId: string;
+        canonicalProjectIdentity: string;
+        generation: number;
+        scopeId: string;
+        deviceId: string;
+    }): Promise<RecipientPolicyCoordinatorEffectReceipt>;
+    grant(input: {
+        effectId: string;
+        canonicalProjectIdentity: string;
+        generation: number;
+        scopeId: string;
+        deviceId: string;
+        role: "member";
+    }): Promise<RecipientPolicyCoordinatorEffectReceipt>;
+    refresh(input: {
+        canonicalProjectIdentity: string;
+        scopeId: string;
+    }): Promise<void>;
+}
+export type RecipientPolicyReconcileStatus = "active" | "busy" | "needs_attention" | "parity_pending" | "stale" | "waiting";
+export interface RecipientPolicyReconcileResult {
+    canonicalProjectIdentity: string;
+    status: RecipientPolicyReconcileStatus;
+    generation: number;
+    safeErrorCode: string | null;
+    revokedDeviceIds: string[];
+    grantedDeviceIds: string[];
+    deliveredCopiesMayRemain: true;
+    revocationWarning: string;
+}
+export interface ReconcileRecipientPolicyProjectInput {
+    canonicalProjectIdentity: string;
+    leaseOwner: string;
+    leaseDurationMs?: number;
+}
+export declare function assertLegacyShareGrantAllowed(db: Database, input: {
+    canonicalProjectIdentity: string;
+    deviceId: string;
+}): void;
+export declare function reconcileRecipientPolicyProject(db: Database, input: ReconcileRecipientPolicyProjectInput, effects: RecipientPolicyReconcilerEffects): Promise<RecipientPolicyReconcileResult>;
+//# sourceMappingURL=recipient-policy-reconciler.d.ts.map

package/dist/recipient-policy-reconciler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-policy-reconciler.d.ts","sourceRoot":"","sources":["../src/recipient-policy-reconciler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAmBxC,MAAM,MAAM,6BAA6B,GAAG,WAAW,GAAG,aAAa,GAAG,cAAc,CAAC;AAEzF,MAAM,WAAW,kCAAkC;IAClD,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,KAAK,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;QAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC,CAAC;CACH;AAED,MAAM,WAAW,uCAAuC;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;CAC7B;AAED,MAAM,WAAW,iCAAiC;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,gCAAgC;IAChD,GAAG,IAAI,MAAM,CAAC;IACd,QAAQ,CAAC,KAAK,EAAE;QACf,wBAAwB,EAAE,MAAM,CAAC;QACjC,OAAO,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAChD,uBAAuB,CAAC,KAAK,EAAE;QAC9B,wBAAwB,EAAE,MAAM,CAAC;QACjC,OAAO,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,iCAAiC,EAAE,CAAC,CAAC;IACjD,eAAe,CAAC,KAAK,EAAE;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,EAAE;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,wBAAwB,EAAE,MAAM,CAAC;QACjC,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,uCAAuC,CAAC,CAAC;IACrD,KAAK,CAAC,KAAK,EAAE;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,wBAAwB,EAAE,MAAM,CAAC;QACjC,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,QAAQ,CAAC;KACf,GAAG,OAAO,CAAC,uCAAuC,CAAC,CAAC;IACrD,OAAO,CAAC,KAAK,EAAE;QAAE,wBAAwB,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrF;AAED,MAAM,MAAM,8BAA8B,GACvC,QAAQ,GACR,MAAM,GACN,iBAAiB,GACjB,gBAAgB,GAChB,OAAO,GACP,SAAS,CAAC;AAEb,MAAM,WAAW,8BAA8B;IAC9C,wBAAwB,EAAE,MAAM,CAAC;IACjC,MAAM,EAAE,8BAA8B,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,wBAAwB,EAAE,IAAI,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oCAAoC;IACpD,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB;AA0wBD,wBAAgB,6BAA6B,CAC5C,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE;IAAE,wBAAwB,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC3D,IAAI,CAkBN;AAED,wBAAsB,+BAA+B,CACpD,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,oCAAoC,EAC3C,OAAO,EAAE,gCAAgC,GACvC,OAAO,CAAC,8BAA8B,CAAC,CAkjBzC"}

package/dist/recipient-policy-reconciliation.d.ts

@@ -0,0 +1,221 @@
+import type { Database } from "./db.js";
+export type RecipientPolicyAuthorityState = "legacy" | "eligible" | "active" | "rolled_back";
+export type RecipientPolicyDerivationBlockCode = "canonical_project_identity_invalid" | "project_recipient_invalid" | "identity_missing" | "identity_not_active" | "identity_merged" | "team_missing" | "team_not_active" | "team_membership_invalid" | "team_member_identity_missing" | "team_member_identity_not_active" | "team_member_identity_merged" | "identity_device_invalid" | "device_identity_conflict";
+export interface RecipientPolicyDerivationIdentity {
+    identityId: string;
+    status: string;
+    mergedIntoIdentityId?: string | null;
+}
+export interface RecipientPolicyDerivationTeam {
+    teamId: string;
+    status: string;
+}
+export interface RecipientPolicyDerivationTeamMembership {
+    teamId: string;
+    identityId: string;
+    status: string;
+}
+export interface RecipientPolicyDerivationIdentityDevice {
+    identityId: string;
+    deviceId: string;
+    status: string;
+}
+export interface RecipientPolicyDerivationProjectRecipient {
+    canonicalProjectIdentity: string;
+    recipientKind: string;
+    recipientId: string;
+    status: string;
+}
+export interface RecipientPolicyEffectiveDeviceSource {
+    kind: "direct_identity" | "team_membership";
+    teamId?: string;
+}
+export interface StrictRecipientPolicyEffectiveDevice {
+    canonicalProjectIdentity: string;
+    identityId: string;
+    deviceId: string;
+    sources: RecipientPolicyEffectiveDeviceSource[];
+}
+export interface RecipientPolicyDerivationBlock {
+    code: RecipientPolicyDerivationBlockCode;
+    referenceId: string;
+}
+export interface DeriveRecipientPolicyEffectiveDevicesInput {
+    canonicalProjectIdentity: string;
+    projectRecipients: RecipientPolicyDerivationProjectRecipient[];
+    identities: RecipientPolicyDerivationIdentity[];
+    teams: RecipientPolicyDerivationTeam[];
+    teamMemberships: RecipientPolicyDerivationTeamMembership[];
+    identityDevices: RecipientPolicyDerivationIdentityDevice[];
+}
+export interface StrictRecipientPolicyEffectiveDeviceDerivation {
+    canonicalProjectIdentity: string;
+    status: "eligible" | "blocked";
+    devices: StrictRecipientPolicyEffectiveDevice[];
+    blocked: RecipientPolicyDerivationBlock[];
+    desiredDevicesDigest: string;
+}
+export interface RecipientPolicyAuthorityStateRecord {
+    canonicalProjectIdentity: string;
+    authorityState: RecipientPolicyAuthorityState;
+    generation: number;
+    desiredDevicesDigest: string | null;
+    currentDevicesDigest: string | null;
+    stableParityEvidenceDigest: string | null;
+    stableParityPassedAt: string | null;
+    freshSnapshotFingerprint: string | null;
+    freshSnapshotObservedAt: string | null;
+    safeErrorCode: string | null;
+    stateChangedAt: string;
+    lastErrorAt: string | null;
+    attemptCount: number;
+    lastAttemptAt: string | null;
+    lastCompletedAt: string | null;
+    leaseOwner: string | null;
+    leaseAcquiredAt: string | null;
+    leaseExpiresAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface UpsertRecipientPolicyAuthorityObservationInput {
+    canonicalProjectIdentity: string;
+    generation: number;
+    desiredDevicesDigest: string;
+    currentDevicesDigest: string | null;
+    freshSnapshotFingerprint: string | null;
+    freshSnapshotObservedAt: string | null;
+    now: string;
+}
+export interface RecordRecipientPolicyAuthorityExecutionInput {
+    canonicalProjectIdentity: string;
+    generation: number;
+    attemptCount: number;
+    lastAttemptAt: string | null;
+    lastCompletedAt: string | null;
+    safeErrorCode: string | null;
+    lastErrorAt: string | null;
+    leaseOwner: string | null;
+    leaseAcquiredAt: string | null;
+    leaseExpiresAt: string | null;
+    updatedAt: string;
+}
+export interface EnsureRecipientPolicyReconciliationStepInput {
+    canonicalProjectIdentity: string;
+    generation: number;
+    stepKey: string;
+    payloadDigest: string;
+    now: string;
+}
+export interface RecordRecipientPolicyReconciliationStepStateInput {
+    canonicalProjectIdentity: string;
+    generation: number;
+    stepKey: string;
+    effectId: string;
+    status: "pending" | "running" | "waiting" | "completed" | "failed";
+    attemptCount: number;
+    startedAt: string | null;
+    completedAt: string | null;
+    lastAttemptAt: string | null;
+    safeErrorCode: string | null;
+    errorAt: string | null;
+    leaseOwner: string | null;
+    leaseAcquiredAt: string | null;
+    leaseExpiresAt: string | null;
+    updatedAt: string;
+}
+export interface RecipientPolicyReconciliationStepRecord {
+    canonicalProjectIdentity: string;
+    generation: number;
+    stepKey: string;
+    effectId: string;
+    payloadDigest: string;
+    status: string;
+    attemptCount: number;
+    startedAt: string | null;
+    completedAt: string | null;
+    lastAttemptAt: string | null;
+    safeErrorCode: string | null;
+    errorAt: string | null;
+    leaseOwner: string | null;
+    leaseAcquiredAt: string | null;
+    leaseExpiresAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface PendingRecipientPolicyRevocationRefreshStep {
+    generation: number;
+    stepKey: string;
+}
+export interface PendingRecipientPolicyRefreshStep {
+    generation: number;
+    stepKey: string;
+}
+export interface PruneRecipientPolicyReconciliationStepsInput {
+    canonicalProjectIdentity: string;
+    retainCompletedPerKind?: number;
+}
+export interface PruneSupersededRecipientPolicyCapabilityStepsInput {
+    canonicalProjectIdentity: string;
+    activeGeneration: number;
+    activePassKey: string;
+}
+export interface RecipientPolicyDenyOverlayRecord {
+    canonicalProjectIdentity: string;
+    scopeId: string;
+    deviceId: string;
+    generation: number;
+    reasonCode: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export declare const PENDING_RECIPIENT_POLICY_REVOCATION_REFRESH_STEPS_SQL = "SELECT generation, step_key FROM recipient_policy_reconciliation_steps\n\t WHERE canonical_project_identity = ?\n\t AND step_key GLOB 'refresh-after-revocations-v2:*'\n\t AND status IN ('pending', 'running', 'failed')\n\t ORDER BY generation, step_key\n\t LIMIT ?";
+export declare function recipientPolicyDevicesDigest(devices: readonly StrictRecipientPolicyEffectiveDevice[]): string;
+export declare function deriveRecipientPolicyEffectiveDevices(input: DeriveRecipientPolicyEffectiveDevicesInput): StrictRecipientPolicyEffectiveDeviceDerivation;
+export declare function deriveRecipientPolicyEffectiveDevicesFromDatabase(db: Database, canonicalProjectIdentity: string): StrictRecipientPolicyEffectiveDeviceDerivation;
+export declare function getRecipientPolicyAuthorityState(db: Database, canonicalProjectIdentity: string): RecipientPolicyAuthorityStateRecord | null;
+export declare function upsertRecipientPolicyAuthorityObservation(db: Database, input: UpsertRecipientPolicyAuthorityObservationInput): RecipientPolicyAuthorityStateRecord;
+export declare function recordRecipientPolicyStableParityPass(db: Database, input: {
+    canonicalProjectIdentity: string;
+    generation: number;
+    evidenceDigest: string;
+    snapshotFingerprint: string;
+    passedAt: string;
+}): RecipientPolicyAuthorityStateRecord;
+export declare function recordRecipientPolicyAuthorityExecution(db: Database, input: RecordRecipientPolicyAuthorityExecutionInput): RecipientPolicyAuthorityStateRecord;
+export declare function deterministicRecipientPolicyReconciliationEffectId(input: {
+    canonicalProjectIdentity: string;
+    generation: number;
+    stepKey: string;
+    payloadDigest: string;
+}): string;
+export declare function listPendingRecipientPolicyRevocationRefreshSteps(db: Database, canonicalProjectIdentity: string, limit?: number): PendingRecipientPolicyRevocationRefreshStep[];
+export declare function listPendingRecipientPolicyRefreshSteps(db: Database, canonicalProjectIdentity: string, limit?: number): PendingRecipientPolicyRefreshStep[];
+export declare function pruneRecipientPolicyReconciliationSteps(db: Database, input: PruneRecipientPolicyReconciliationStepsInput): number;
+export declare function pruneSupersededRecipientPolicyCapabilitySteps(db: Database, input: PruneSupersededRecipientPolicyCapabilityStepsInput): number;
+export declare function ensureRecipientPolicyReconciliationStep(db: Database, input: EnsureRecipientPolicyReconciliationStepInput): RecipientPolicyReconciliationStepRecord;
+export declare function recordRecipientPolicyReconciliationStepState(db: Database, input: RecordRecipientPolicyReconciliationStepStateInput): RecipientPolicyReconciliationStepRecord;
+export declare function putRecipientPolicyDenyOverlay(db: Database, input: {
+    canonicalProjectIdentity: string;
+    scopeId: string;
+    deviceId: string;
+    generation: number;
+    reasonCode: string;
+    now: string;
+}): RecipientPolicyDenyOverlayRecord;
+export declare function listRecipientPolicyDenyOverlays(db: Database, canonicalProjectIdentity: string): RecipientPolicyDenyOverlayRecord[];
+/**
+ * Returns any deny for a scope/device pair. Active policy reconciliation requires
+ * one exact Project per managed scope, so enforcement intentionally fails closed
+ * if corrupt legacy state contains more than one Project overlay for the pair.
+ */
+export declare function getAnyRecipientPolicyDenyOverlayForScopeDevice(db: Database, input: {
+    scopeId: string;
+    deviceId: string;
+}): RecipientPolicyDenyOverlayRecord | null;
+export declare function clearRecipientPolicyDenyOverlay(db: Database, input: {
+    canonicalProjectIdentity: string;
+    scopeId: string;
+    deviceId: string;
+    verifiedGeneration: number;
+}): boolean;
+//# sourceMappingURL=recipient-policy-reconciliation.d.ts.map

package/dist/recipient-policy-reconciliation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-policy-reconciliation.d.ts","sourceRoot":"","sources":["../src/recipient-policy-reconciliation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC,MAAM,MAAM,6BAA6B,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,aAAa,CAAC;AAE7F,MAAM,MAAM,kCAAkC,GAC3C,oCAAoC,GACpC,2BAA2B,GAC3B,kBAAkB,GAClB,qBAAqB,GACrB,iBAAiB,GACjB,cAAc,GACd,iBAAiB,GACjB,yBAAyB,GACzB,8BAA8B,GAC9B,iCAAiC,GACjC,6BAA6B,GAC7B,yBAAyB,GACzB,0BAA0B,CAAC;AAE9B,MAAM,WAAW,iCAAiC;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,6BAA6B;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uCAAuC;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uCAAuC;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,yCAAyC;IACzD,wBAAwB,EAAE,MAAM,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oCAAoC;IACpD,IAAI,EAAE,iBAAiB,GAAG,iBAAiB,CAAC;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oCAAoC;IACpD,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,oCAAoC,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,8BAA8B;IAC9C,IAAI,EAAE,kCAAkC,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0CAA0C;IAC1D,wBAAwB,EAAE,MAAM,CAAC;IACjC,iBAAiB,EAAE,yCAAyC,EAAE,CAAC;IAC/D,UAAU,EAAE,iCAAiC,EAAE,CAAC;IAChD,KAAK,EAAE,6BAA6B,EAAE,CAAC;IACvC,eAAe,EAAE,uCAAuC,EAAE,CAAC;IAC3D,eAAe,EAAE,uCAAuC,EAAE,CAAC;CAC3D;AAED,MAAM,WAAW,8CAA8C;IAC9D,wBAAwB,EAAE,MAAM,CAAC;IACjC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAChD,OAAO,EAAE,8BAA8B,EAAE,CAAC;IAC1C,oBAAoB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,mCAAmC;IACnD,wBAAwB,EAAE,MAAM,CAAC;IACjC,cAAc,EAAE,6BAA6B,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,8CAA8C;IAC9D,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,GAAG,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,4CAA4C;IAC5D,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,4CAA4C;IAC5D,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,iDAAiD;IACjE,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IACnE,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uCAAuC;IACvD,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,2CAA2C;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iCAAiC;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,4CAA4C;IAC5D,wBAAwB,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,kDAAkD;IAClE,wBAAwB,EAAE,MAAM,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gCAAgC;IAChD,wBAAwB,EAAE,MAAM,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB;AAQD,eAAO,MAAM,qDAAqD,4QAKxD,CAAC;AA8EX,wBAAgB,4BAA4B,CAC3C,OAAO,EAAE,SAAS,oCAAoC,EAAE,GACtD,MAAM,CAmBR;AAED,wBAAgB,qCAAqC,CACpD,KAAK,EAAE,0CAA0C,GAC/C,8CAA8C,CA2HhD;AAED,wBAAgB,iDAAiD,CAChE,EAAE,EAAE,QAAQ,EACZ,wBAAwB,EAAE,MAAM,GAC9B,8CAA8C,CAyDhD;AA2BD,wBAAgB,gCAAgC,CAC/C,EAAE,EAAE,QAAQ,EACZ,wBAAwB,EAAE,MAAM,GAC9B,mCAAmC,GAAG,IAAI,CAK5C;AAED,wBAAgB,yCAAyC,CACxD,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,8CAA8C,GACnD,mCAAmC,CAoDrC;AAED,wBAAgB,qCAAqC,CACpD,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE;IACN,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;CACjB,GACC,mCAAmC,CA0BrC;AAED,wBAAgB,uCAAuC,CACtD,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,4CAA4C,GACjD,mCAAmC,CA8BrC;AAED,wBAAgB,kDAAkD,CAAC,KAAK,EAAE;IACzE,wBAAwB,EAAE,MAAM,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CAOT;AAwBD,wBAAgB,gDAAgD,CAC/D,EAAE,EAAE,QAAQ,EACZ,wBAAwB,EAAE,MAAM,EAChC,KAAK,SAAuC,GAC1C,2CAA2C,EAAE,CAa/C;AAED,wBAAgB,sCAAsC,CACrD,EAAE,EAAE,QAAQ,EACZ,wBAAwB,EAAE,MAAM,EAChC,KAAK,SAAuC,GAC1C,iCAAiC,EAAE,CAoBrC;AAED,wBAAgB,uCAAuC,CACtD,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,4CAA4C,GACjD,MAAM,CAmCR;AAED,wBAAgB,6CAA6C,CAC5D,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,kDAAkD,GACvD,MAAM,CAoBR;AAED,wBAAgB,uCAAuC,CACtD,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,4CAA4C,GACjD,uCAAuC,CAgDzC;AAED,wBAAgB,4CAA4C,CAC3D,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,iDAAiD,GACtD,uCAAuC,CAmDzC;AAcD,wBAAgB,6BAA6B,CAC5C,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE;IACN,wBAAwB,EAAE,MAAM,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACZ,GACC,gCAAgC,CA6ClC;AAED,wBAAgB,+BAA+B,CAC9C,EAAE,EAAE,QAAQ,EACZ,wBAAwB,EAAE,MAAM,GAC9B,gCAAgC,EAAE,CASpC;AAED;;;;GAIG;AACH,wBAAgB,8CAA8C,CAC7D,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC1C,gCAAgC,GAAG,IAAI,CAUzC;AAED,wBAAgB,+BAA+B,CAC9C,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE;IACN,wBAAwB,EAAE,MAAM,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;CAC3B,GACC,OAAO,CAST"}

package/dist/recipient-policy-review.d.ts

@@ -0,0 +1,47 @@
+import type { Database } from "./db.js";
+import { type LegacyRecipientPolicyConditionCodeV1, type LegacyRecipientPolicyProjectionV1 } from "./legacy-recipient-policy-projection.js";
+import { type RecipientPolicyBlockedItemV1, type RecipientPolicyContractVersion, type RecipientPolicyReviewDecisionV1, type RecipientPolicyReviewItemV1, type RecipientPolicyReviewOptionV1, type RecipientPolicyReviewPreviewV1 } from "./recipient-policy-contract.js";
+export interface RecipientPolicyReviewContext {
+    localActorId: string;
+    localDeviceId: string;
+    now?: () => string;
+}
+export type RecipientPolicyReviewActionOptionV1 = RecipientPolicyReviewOptionV1 & {
+    preview: RecipientPolicyReviewPreviewV1;
+};
+export type RecipientPolicyActionableReviewItemV1 = Omit<RecipientPolicyReviewItemV1, "options"> & {
+    options: RecipientPolicyReviewActionOptionV1[];
+};
+export interface RecipientPolicyReviewListV1 {
+    version: RecipientPolicyContractVersion;
+    reviewItems: RecipientPolicyActionableReviewItemV1[];
+    blockedItems: RecipientPolicyBlockedItemV1[];
+}
+export interface RecipientPolicyReviewResolveRequestV1 {
+    reviewItemId: string;
+    sourceFingerprint: string;
+    decision: RecipientPolicyReviewDecisionV1;
+    decisionInput?: unknown;
+}
+export type RecipientPolicyReviewResolveStatusV1 = "applied" | "stale" | "not_found" | "invalid" | "conflict";
+export interface RecipientPolicyReviewResolveResultV1 {
+    reviewItemId: string;
+    sourceFingerprint: string;
+    status: RecipientPolicyReviewResolveStatusV1;
+    errorCode: string | null;
+    idempotent: boolean;
+}
+export interface RecipientPolicyReviewBulkResultV1 {
+    version: RecipientPolicyContractVersion;
+    results: RecipientPolicyReviewResolveResultV1[];
+}
+export interface RecipientPolicyDerivedReviewState {
+    allReviewItems: RecipientPolicyActionableReviewItemV1[];
+    blockedItems: RecipientPolicyBlockedItemV1[];
+}
+export declare function recipientPolicyReviewSourceFingerprint(projection: LegacyRecipientPolicyProjectionV1, conditionCode: LegacyRecipientPolicyConditionCodeV1): string;
+export declare function deriveRecipientPolicyReviewState(db: Database, context: RecipientPolicyReviewContext, projections?: LegacyRecipientPolicyProjectionV1[]): RecipientPolicyDerivedReviewState;
+export declare function listRecipientPolicyReview(db: Database, context: RecipientPolicyReviewContext): RecipientPolicyReviewListV1;
+export declare function resolveRecipientPolicyReview(db: Database, context: RecipientPolicyReviewContext, request: RecipientPolicyReviewResolveRequestV1): RecipientPolicyReviewResolveResultV1;
+export declare function resolveRecipientPolicyReviewBulk(db: Database, context: RecipientPolicyReviewContext, requests: RecipientPolicyReviewResolveRequestV1[]): RecipientPolicyReviewBulkResultV1;
+//# sourceMappingURL=recipient-policy-review.d.ts.map

package/dist/recipient-policy-review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-policy-review.d.ts","sourceRoot":"","sources":["../src/recipient-policy-review.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EACN,KAAK,oCAAoC,EAEzC,KAAK,iCAAiC,EAGtC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAEN,KAAK,4BAA4B,EACjC,KAAK,8BAA8B,EACnC,KAAK,+BAA+B,EACpC,KAAK,2BAA2B,EAChC,KAAK,6BAA6B,EAClC,KAAK,8BAA8B,EACnC,MAAM,gCAAgC,CAAC;AAGxC,MAAM,WAAW,4BAA4B;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,mCAAmC,GAAG,6BAA6B,GAAG;IACjF,OAAO,EAAE,8BAA8B,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,qCAAqC,GAAG,IAAI,CAAC,2BAA2B,EAAE,SAAS,CAAC,GAAG;IAClG,OAAO,EAAE,mCAAmC,EAAE,CAAC;CAC/C,CAAC;AAEF,MAAM,WAAW,2BAA2B;IAC3C,OAAO,EAAE,8BAA8B,CAAC;IACxC,WAAW,EAAE,qCAAqC,EAAE,CAAC;IACrD,YAAY,EAAE,4BAA4B,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,qCAAqC;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,+BAA+B,CAAC;IAC1C,aAAa,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,oCAAoC,GAC7C,SAAS,GACT,OAAO,GACP,WAAW,GACX,SAAS,GACT,UAAU,CAAC;AAEd,MAAM,WAAW,oCAAoC;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,oCAAoC,CAAC;IAC7C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,iCAAiC;IACjD,OAAO,EAAE,8BAA8B,CAAC;IACxC,OAAO,EAAE,oCAAoC,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,iCAAiC;IACjD,cAAc,EAAE,qCAAqC,EAAE,CAAC;IACxD,YAAY,EAAE,4BAA4B,EAAE,CAAC;CAC7C;AAgFD,wBAAgB,sCAAsC,CACrD,UAAU,EAAE,iCAAiC,EAC7C,aAAa,EAAE,oCAAoC,GACjD,MAAM,CAER;AAmKD,wBAAgB,gCAAgC,CAC/C,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,4BAA4B,EACrC,WAAW,sCAAoD,GAC7D,iCAAiC,CAgEnC;AAaD,wBAAgB,yBAAyB,CACxC,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,4BAA4B,GACnC,2BAA2B,CAO7B;AAyMD,wBAAgB,4BAA4B,CAC3C,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,4BAA4B,EACrC,OAAO,EAAE,qCAAqC,GAC5C,oCAAoC,CAmBtC;AAED,wBAAgB,gCAAgC,CAC/C,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,4BAA4B,EACrC,QAAQ,EAAE,qCAAqC,EAAE,GAC/C,iCAAiC,CAanC"}