@company-semantics/contracts 87.0.0 → 88.0.1

package/src/root-exports/org-structure.ts

@@ -0,0 +1,214 @@
+/**
+ * Package root exports — Org: Structure
+ *
+ * Sync runs, conflicts, reconciliation, structure findings, transformations,
+ * canonical facts, structure inference and authority/delegation vocabulary
+ * re-exported from the org domain.
+ *
+ * A slice of the `@company-semantics/contracts` root entry, moved here verbatim
+ * from `src/index.ts`, which re-exports it with `export *`. Each list is the
+ * exact subset of its domain the root exposes. Import from the package root,
+ * never from this file.
+ */
+
+// Sync run summary: the outcome record of one adapter sync run (counts +
+// cursor watermark). A flat report shape, not a structure fact. (ADR-CONT-085)
+export { SyncRunSummarySchema } from "../org/index";
+export type { SyncRunSummary } from "../org/index";
+
+// Conflict record: one recorded reconciliation conflict surfaced during a sync.
+// Operational audit record about a sync, not a structure fact. (ADR-CONT-085)
+export { ConflictRecordSchema } from "../org/index";
+export type { ConflictRecord } from "../org/index";
+
+// Org reconciliation ledger: the org's STANDING disagreements with the connected
+// HRIS — the open ones only, sync-time (runId set) and app-time (runId null)
+// alike. Complements the run-scoped conflicts view rather than replacing it, and
+// resolution is a LOCAL decision only. (ADR-BE-564)
+export {
+  OrgDivergenceSchema,
+  OrgReconciliationLedgerSchema,
+  OrgDivergenceResolutionSchema,
+  ResolveOrgDivergenceResultSchema,
+} from "../org/index";
+export type {
+  OrgDivergence,
+  OrgReconciliationLedger,
+  OrgDivergenceResolution,
+  ResolveOrgDivergenceResult,
+} from "../org/index";
+
+// Structure findings: standing observations about recorded org data, with a
+// fact-driven lifecycle and a content-pinned dismissal. (ADR-BE-765)
+export {
+  STRUCTURE_FINDING_KINDS,
+  STRUCTURE_FINDING_STATUSES,
+  StructureFindingKindSchema,
+  StructureFindingStatusSchema,
+  ReportingLineAnomalyReportSchema,
+  ReportingLineAnomalyFactsSchema,
+  SubunitCandidateFactsSchema,
+  StructureFindingDismissalSchema,
+  StructureFindingSchema,
+  StructureFindingListStatusSchema,
+  StructureFindingListResponseSchema,
+  DismissStructureFindingRequestSchema,
+  StructureFindingResponseSchema,
+} from "../org/index";
+export type {
+  StructureFindingKind,
+  StructureFindingStatus,
+  ReportingLineAnomalyReport,
+  ReportingLineAnomalyFacts,
+  SubunitCandidateFacts,
+  StructureFindingDismissal,
+  StructureFinding,
+  StructureFindingListStatus,
+  StructureFindingListResponse,
+  DismissStructureFindingRequest,
+  StructureFindingResponse,
+} from "../org/index";
+
+// Org transformation wire vocabulary: intent -> simulation -> preview. The
+// engine turns a TransformationRequest into scored mutation bundles and returns
+// a TransformationPreview the operator confirms before apply. (ADR-CONTRACTS-072)
+export {
+  OrgIntentSchema,
+  FactMutationSchema,
+  TransformationOriginSchema,
+  ProvenanceSchema,
+  ExecutionContextSchema,
+  TransformationRequestSchema,
+  ConstraintViolationSchema,
+  RecommendationSchema,
+  FindingSeveritySchema,
+  FindingSchema,
+  TransformStrategySchema,
+  SelectionRationaleSchema,
+  ReportingEdgeProvenanceSchema,
+  SupersededReportingEdgeSchema,
+  TransformationPreviewSchema,
+} from "../org/index";
+export type {
+  OrgIntent,
+  FactMutation,
+  TransformationOrigin,
+  Provenance,
+  ExecutionContext,
+  TransformationRequest,
+  ConstraintViolation,
+  Recommendation,
+  FindingSeverity,
+  Finding,
+  TransformStrategy,
+  SelectionRationale,
+  ReportingEdgeProvenance,
+  SupersededReportingEdge,
+  TransformationPreview,
+} from "../org/index";
+
+// Canonical facts: the adapter-seam ingestion batch — external-keyed Canonical*
+// facts (each with provenance) plus a CanonicalFacts envelope. The reconciler
+// consumes the batch into the internal org graph. (ADR-CONT-085 / ADR-CTRL-183)
+export {
+  CanonicalPersonSchema,
+  CanonicalOrgUnitSchema,
+  CanonicalPositionStatusSchema,
+  CanonicalPositionSchema,
+  CanonicalOccupancySchema,
+  CanonicalReportingEdgeSchema,
+  CanonicalUnresolvedManagerResolutionSchema,
+  CanonicalUnresolvedManagerSchema,
+  CanonicalFactsSchema,
+} from "../org/index";
+export type {
+  CanonicalPerson,
+  CanonicalOrgUnit,
+  CanonicalPositionStatus,
+  CanonicalPosition,
+  CanonicalOccupancy,
+  CanonicalReportingEdge,
+  CanonicalUnresolvedManagerResolution,
+  CanonicalUnresolvedManager,
+  CanonicalFacts,
+} from "../org/index";
+
+// Org-structure inference: a StructureInferenceSnapshot of the persisted graph
+// goes in, a StructureProposal — a proposed desired state, never database
+// commands — comes out. Typed evidence, targetUnitId for durable identity, and
+// exactly one PersonStructureOutcome per person in the snapshot. (PRD-00955)
+//
+// Acceptance attaches StructureProvenance — proposalOrigin, acceptedBy and
+// authority as three ORTHOGONAL axes, so accepting an AI proposal never rewrites
+// its origin as manual. mayOverrideAuthority is the single definition of
+// precedence, and it consults `authority` only. (PRD-00956)
+export {
+  StructureEvidenceSchema,
+  TOPOLOGY_ONLY_EVIDENCE_KINDS,
+  StructureUnitAuthoritySchema,
+  StructureProposalOriginSchema,
+  StructureAcceptedBySchema,
+  StructureAuthoritySchema,
+  StructureProvenanceSchema,
+  mayOverrideAuthority,
+  ProposedOrgUnitSchema,
+  PersonStructureOutcomeSchema,
+  StructureReviewItemSchema,
+  StructureProposalSchema,
+  StructurePersonFactSchema,
+  StructureReportingFactSchema,
+  ExistingUnitFactSchema,
+  ExistingPlacementFactSchema,
+  StructureInferenceSnapshotSchema,
+} from "../org/index";
+export type {
+  StructureEvidence,
+  StructureUnitAuthority,
+  StructureProposalOrigin,
+  StructureAcceptedBy,
+  StructureAuthority,
+  StructureProvenance,
+  ProposedOrgUnit,
+  PersonStructureOutcome,
+  StructureReviewItem,
+  StructureProposal,
+  StructurePersonFact,
+  StructureReportingFact,
+  ExistingUnitFact,
+  ExistingPlacementFact,
+  StructureInferenceSnapshot,
+} from "../org/index";
+
+// Authority & Delegation vocabulary
+export {
+  AuthoritySourceSchema,
+  AuthorityOriginSchema,
+  AuthorityConfidenceSchema,
+  AuthorityMechanismSchema,
+  AuthorityLocalitySchema,
+  AuthorityMutabilitySchema,
+  OwnerAuthoritySchema,
+  OrgUnitOwnerSchema,
+  PendingUnitOwnerSchema,
+  UnitLeadClearedSchema,
+  OrgUnitOwnersResponseSchema,
+  DelegationSchema,
+  CreateDelegationRequestSchema,
+  DelegationListResponseSchema,
+} from "../org/index";
+export type {
+  AuthoritySource,
+  AuthorityOrigin,
+  AuthorityConfidence,
+  AuthorityMechanism,
+  AuthorityLocality,
+  AuthorityMutability,
+  OwnerAuthority,
+  OrgUnitOwner,
+  PendingUnitOwner,
+  UnitLeadCleared,
+  OrgUnitOwnersResponse,
+  Delegation,
+  CreateDelegationRequest,
+  DelegationListResponse,
+} from "../org/index";

package/src/root-exports/org-workspace.ts

@@ -0,0 +1,254 @@
+/**
+ * Package root exports — Org: Workspace
+ *
+ * Organization, workspace, membership, invite, directory, company.md and
+ * collaboration vocabulary re-exported from the org domain.
+ *
+ * A slice of the `@company-semantics/contracts` root entry, moved here verbatim
+ * from `src/index.ts`, which re-exports it with `export *`. Each list is the
+ * exact subset of its domain the root exposes. Import from the package root,
+ * never from this file.
+ */
+
+// Organization domain types
+// @see ADR-BE-XXX for design rationale (Personal vs Shared Organization Model)
+export type {
+  OrgType,
+  OrgSharedTransitionTrigger,
+  ExecutionScope,
+  OrganizationInfo,
+  OwnershipTransferRequest,
+  OwnershipTransferStatus,
+  // Workspace visibility DTOs (Phase 2)
+  // @see ADR-CONT-030 for design rationale
+  OrgLogos,
+  WorkspaceOverview,
+  WorkspaceMember,
+  AuthMethodConfig,
+  WorkspaceAuthConfig,
+  // SSO self-service setup types (PRD-00193)
+  SsoSetupInfo,
+  SsoReadinessCheck,
+  SsoReadiness,
+  SsoEnforcementStatus,
+  // SSO stepper types (PRD-00197)
+  ProviderStatus,
+  WorkspaceSsoState,
+  SsoStepperStep,
+  OwnerIdentityInfo,
+  OidcValidationResult,
+  TestSsoInitiation,
+  TestSsoResult,
+  ProviderSuggestion,
+  WorkspaceAuditEvent,
+  // Workspace expansion DTOs (Phase 3)
+  // @see ADR-CONT-031 for design rationale
+  OrgInviteStatus,
+  OrgInvite,
+  CreateInviteRequest,
+  AcceptInviteRequest,
+  RemoveMemberRequest,
+  ChangeMemberRoleRequest,
+  OrgAuthPolicy,
+  UpdateAuthPolicyRequest,
+  Phase3AuditAction,
+  // Domain and multi-org types (Phase 4)
+  // @see ADR-CONT-032 for design rationale
+  DomainStatus,
+  DomainVerificationMethod,
+  OrgDomain,
+  Phase4AuditAction,
+  UserOrgMembership,
+  // Authorization context types (Phase 5)
+  // @see ADR-CTRL-010 for design rationale
+  OrgScopedContext,
+  // Workspace Info/Settings surface types (PRD-00133)
+  WorkspaceSurface,
+  WorkspaceInfoOverview,
+  WorkspaceSettingsOverview,
+  IntegrationRequestStatus,
+  IntegrationRequest,
+  // Ownership transfer DTOs (PRD-00153)
+  TransferInitiateRequest,
+  TransferStatusResponse,
+  TransferAcceptanceView,
+  TransferResponsibility,
+  // Identity Trust Level types (PRD-00154)
+  IdentityTrustLevel,
+  TransferEligibilityResult,
+  TransferMemberEligibility,
+  // Company.md domain types (PRD-00173)
+  CompanyMdVisibility,
+  CompanyMdDiscoverabilityPolicy,
+  CompanyMdClassification,
+  CompanyMdDocLevel,
+  CompanyMdDocKind,
+  CompanyMdNodeType,
+  CompanyMdSource,
+  CompanyMdDependency,
+  CompanyMdTreeNode,
+  CompanyMdDoc,
+  CompanyMdContextBankItem,
+  // Sharing and ACL types (PRD-00306). Legacy AccessSource / AccessReason /
+  // EffectiveAccess / EvaluationStep / AccessExplanation removed with
+  // CompanyMdAccessEvaluator (ADR-BE-392); the ONE AccessSource is re-exported
+  // from ../permissions by the package root. AccessLevel (the sharing one) is
+  // exported by name from src/index.ts, not here — see the note there.
+  SharePolicy,
+  AclEntry,
+  ShareState,
+  PermissionAuditEntry,
+} from "../org/index";
+
+export {
+  VIEW_SCOPE_MAP,
+  getViewScope,
+  ORG_SHARED_TRANSITION_TRIGGERS,
+  TRANSFER_RESPONSIBILITIES,
+  IDENTITY_TRUST_LEVEL_LABELS,
+  ORG_UNIT_DESIGNED_MAX_DEPTH,
+  ORG_UNIT_ABSOLUTE_MAX_DEPTH,
+} from "../org/index";
+
+// The org unit route, built by backend hrefs and app routes alike (ADR-CONTRACTS-171)
+export {
+  levelSlugForDepth,
+  slugifyLevelLabel,
+  unitRouteSegments,
+} from "../org/index";
+export type { UnitRouteLevel } from "../org/index";
+
+// View authorization types (Phase 5 - ADR-APP-013)
+export type { AuthorizableView } from "../org/index";
+
+// Org structure facts: provenance + home/membership separation (ADR-CONTRACTS-066)
+export {
+  FactSourceTierSchema,
+  FACT_SOURCE_TIER_PRECEDENCE,
+  FactProvenanceSchema,
+  HomeAssignmentSchema,
+} from "../org/index";
+export type {
+  FactSourceTier,
+  FactProvenance,
+  HomeAssignment,
+} from "../org/index";
+
+// Occupancy: the holds_position relation (M:N, co-occupancy first-class).
+// Vacancy = a position with no active occupancy. (ADR-CONT-083 / ADR-CTRL-182)
+export { OccupancyStatusSchema, OccupancySchema } from "../org/index";
+export type { OccupancyStatus, Occupancy } from "../org/index";
+
+// Position: the org seat (planned/open/filled/closed) — a seat, not a person
+// or a title. Carries a FactProvenance envelope. (ADR-CONT-083 / ADR-CTRL-182)
+export { PositionStatusSchema, PositionSchema } from "../org/index";
+export type { PositionStatus, Position } from "../org/index";
+
+// Position reporting: the canonical seat -> manager-seat reporting edge. The
+// person hierarchy derives from this composed with occupancy. (ADR-CONT-083 / ADR-CTRL-182)
+export {
+  PositionReportingRelationshipTypeSchema,
+  PositionReportingSchema,
+} from "../org/index";
+export type {
+  PositionReportingRelationshipType,
+  PositionReporting,
+} from "../org/index";
+
+// People directory: every `persons` row in the org, account-bearing or not.
+// Neither the member list (RBAC principals) nor the org chart (topology) — the
+// set an HRIS sync populates, and the only surface carrying a directory email.
+// Capability-gated, deliberately: the org-chart read is authenticated-only.
+export {
+  OrgDirectoryPersonSchema,
+  OrgDirectoryResponseSchema,
+} from "../org/index";
+export type { OrgDirectoryPerson, OrgDirectoryResponse } from "../org/index";
+
+// Bulk invite, keyed by personId so recipients are resolved server-side from the
+// caller's own directory rather than supplied by the caller.
+export {
+  BATCH_INVITE_PERSONS_MAX,
+  INVITE_EXPIRY_DAYS,
+  BATCH_INVITE_SKIP_REASONS,
+  BatchInviteSkipReasonSchema,
+  BatchInviteRequestSchema,
+  BatchInviteResponseSchema,
+} from "../org/index";
+export type {
+  BatchInviteSkipReason,
+  BatchInviteRequest,
+  BatchInviteResponse,
+} from "../org/index";
+
+// Invite batches: the persisted Prepare → Review → Send lifecycle that puts a
+// review boundary in front of bulk invite. The batch holds INTENT, never
+// credentials — there is no token field on a batch or an item, and there never
+// may be. Supersedes BatchInvite* above, which is removed in 58.0.0.
+export {
+  INVITE_BATCH_STATUSES,
+  INVITE_BATCH_ITEM_STATUSES,
+  INVITE_BATCH_ITEM_REASONS,
+  INVITE_BATCH_CHANGED,
+  InviteBatchStatusSchema,
+  InviteBatchItemStatusSchema,
+  InviteBatchItemReasonSchema,
+  InviteBatchItemSchema,
+  InviteBatchCountsSchema,
+  InviteBatchSchema,
+  InviteBatchResponseSchema,
+  CreateInviteBatchRequestSchema,
+  UpdateInviteBatchRequestSchema,
+  SendInviteBatchRequestSchema,
+} from "../org/index";
+export type {
+  InviteBatchStatus,
+  InviteBatchItemStatus,
+  InviteBatchItemReason,
+  InviteBatchItem,
+  InviteBatchCounts,
+  InviteBatch,
+  InviteBatchResponse,
+  CreateInviteBatchRequest,
+  UpdateInviteBatchRequest,
+  SendInviteBatchRequest,
+} from "../org/index";
+
+// Source authority: per-field ownership — who may WRITE a given entity field.
+// Orthogonal to provenance (who reported). (ADR-CONT-083 / ADR-CTRL-182)
+export { SourceAuthoritySchema } from "../org/index";
+export type { SourceAuthority } from "../org/index";
+
+// Company.md real-time collaboration wire contract: sync/update-accepted
+// responses, the SSE frame union, the Y.Doc shape constant, and the published
+// size limits. Sequences are ALWAYS decimal strings. (ADR-CONT-102)
+export {
+  COMPANY_MD_COLLAB_TEXT_KEY,
+  COMPANY_MD_COLLAB_MAX_UPDATE_B64_CHARS,
+  COMPANY_MD_COLLAB_MAX_DOC_TEXT_BYTES,
+  COMPANY_MD_COLLAB_MAX_PRESENCE_POSITION_CHARS,
+  COMPANY_MD_COLLAB_PRESENCE_TTL_MS,
+  COMPANY_MD_COLLAB_PRESENCE_HEARTBEAT_MS,
+  CompanyMdCollabSyncLimitsSchema,
+  CompanyMdCollabSyncResponseSchema,
+  CompanyMdCollabUpdateAcceptedSchema,
+  CompanyMdCollabUpdateEventSchema,
+  CompanyMdCollabPresenceEventSchema,
+  CompanyMdCollabResetEventSchema,
+  CompanyMdCollabAccessRevokedEventSchema,
+  CompanyMdCollabConnectedEventSchema,
+  CompanyMdCollabServerDrainEventSchema,
+  CompanyMdCollabSseEventSchema,
+} from "../org/index";
+export type {
+  CompanyMdCollabSyncLimits,
+  CompanyMdCollabSyncResponse,
+  CompanyMdCollabUpdateAccepted,
+  CompanyMdCollabUpdateEvent,
+  CompanyMdCollabPresenceEvent,
+  CompanyMdCollabResetEvent,
+  CompanyMdCollabAccessRevokedEvent,
+  CompanyMdCollabConnectedEvent,
+  CompanyMdCollabServerDrainEvent,
+  CompanyMdCollabSseEvent,
+} from "../org/index";

package/src/root-exports/platform.ts

@@ -0,0 +1,205 @@
+/**
+ * Package root exports — Platform
+ *
+ * Impersonation, usage and execution telemetry, resource keys, errors, the
+ * generated OpenAPI surface, security, request scheduling, observability, SSE,
+ * routing, pressure, safe-mode, timeouts, tracing and auto-tuning vocabulary.
+ *
+ * A slice of the `@company-semantics/contracts` root entry, moved here verbatim
+ * from `src/index.ts`, which re-exports it with `export *`. Each list is the
+ * exact subset of its domain the root exposes. Import from the package root,
+ * never from this file.
+ */
+
+// Impersonation types (break-glass emergency access)
+// @see ADR-BE-068 for trust model
+export type {
+  AuthMode,
+  ImpersonationSession,
+  RestrictedImpersonationAction,
+  ImpersonationCapability,
+  ImpersonationSessionSummary,
+  ImpersonationAuditEventType,
+} from "../impersonation";
+
+export { RESTRICTED_IMPERSONATION_ACTIONS } from "../impersonation";
+
+// Impersonation SSE event types (real-time push)
+// @see PRD-00176 for design rationale
+export type {
+  ImpersonationSessionSnapshotEvent,
+  ImpersonationSessionStartedEvent,
+  ImpersonationSessionEndedEvent,
+  ImpersonationSessionExpiredEvent,
+  ImpersonationSseEvent,
+} from "../impersonation-events";
+
+// AI features (INV-AI-ATTRIBUTION) and the internal-admin telemetry usage types
+export { AI_FEATURES, AI_FEATURE_LABELS } from "../usage/features";
+export type {
+  AiFeature,
+  // Unified usage types (PRD-00276/277)
+  UnifiedUsageSummary,
+  UnifiedDailyUsage,
+  UnifiedProfileUsage,
+  UnifiedUserUsage,
+  UnifiedModelUsage,
+  UnifiedFeatureUsage,
+  UnifiedUsageResponse,
+} from "../usage/types";
+
+// Runtime execution telemetry types
+// @see PRD-00200 for design rationale
+export type {
+  ExecutionFailureReason,
+  RuntimeExecutionTelemetry,
+  // Aggregation response types (PRD-00201)
+  ProfileStats,
+  OrgExecutionSummary,
+  DailyExecutionStats,
+  ExecutionByUser,
+  ExecutionDetail,
+  // Budget governance types (PRD-00232)
+  BudgetCheck,
+  OrgBudgetSettings,
+} from "../usage/execution-types";
+
+// Resource key types (shared vocabulary for data layer)
+// @see PRD-00321 for design rationale
+export type { ResourceKey, Action } from "../resource-keys";
+export {
+  resolveScope,
+  toQueryKey,
+  fromQueryKey,
+  matchesResourceKey,
+  isResourceKeyShape,
+} from "../resource-keys";
+
+// Resource response wrapper (typed versioning for cache invalidation)
+export type { ResourceResponse } from "../resource-response";
+
+// Error response types (canonical shape for all API surfaces)
+// @see ADR-BE-098 for design rationale
+export type { ValidationDetail, ErrorResponse } from "../errors/index";
+
+// OpenAPI generated types (from openapi/backend.yaml)
+// @see src/api/README.md for codegen details
+export type { paths, components, operations } from "../api/index";
+
+// Spec hash (SHA-256 of openapi/backend.yaml, generated at build time)
+export { SPEC_HASH, SPEC_HASH_FULL } from "../api/index";
+
+// OpenAPI route registry (generated from openapi/backend.yaml)
+export {
+  openApiRoutes,
+  type OpenApiRoute,
+  type OpenApiMethod,
+} from "../generated/openapi-routes";
+
+// Secret wrapper (multi-surface redaction for sensitive values)
+export type { Secret } from "../security/index";
+export { wrapSecret, unwrapSecret } from "../security/index";
+
+// Org secrets DTO schemas (PRD-00629)
+// @see src/security/org-secrets.ts for invariants (no value field on summary)
+export {
+  UsageClassSchema,
+  OrgSecretsActionSchema,
+  SecretValueStringSchema,
+  OrgSecretSummarySchema,
+  CreateSecretRequestSchema,
+  RotateSecretRequestSchema,
+  DisableSecretRequestSchema,
+} from "../security/index";
+export type {
+  UsageClass,
+  OrgSecretsAction,
+  SecretValueString,
+  OrgSecretSummary,
+  CreateSecretRequest,
+  RotateSecretRequest,
+  DisableSecretRequest,
+} from "../security/index";
+
+// Auth token storage/entropy policy (PRD-00901)
+// @see src/security/token-policy.ts — single source for the runtime issuance
+// path and the secure-token-generation CI guard
+export { AUTH_TOKEN_POLICY_REQUIREMENTS } from "../security/index";
+export type {
+  TokenStorageFormat,
+  TokenPolicyConformance,
+  TokenPolicyRequirement,
+  AuthTokenPolicyClass,
+} from "../security/index";
+
+// Analytics response metadata (shared vocabulary for OLTP/OLAP separation)
+// @see ADR-CTRL-053 for design rationale
+export type {
+  AnalyticsBackend,
+  AnalyticsResponseMeta,
+} from "../types/analytics";
+
+// Client request scheduler types (shared tier vocabulary)
+export type {
+  Tier,
+  MutationBehavior,
+  SchedulerResourceKey,
+  RequestDescriptor,
+  SchedulerEvent,
+} from "../requests";
+
+// Mutation policy types (lane behavior semantics)
+export type { MutationPolicy } from "../mutations";
+
+// Observability envelope types (shared metric shape)
+export { REQUEST_ID_HEADER } from "../observability";
+export type {
+  Labels,
+  MetricEnvelope,
+  SchedulerMetricName,
+} from "../observability";
+
+// Long-lived route vocabulary (PRD-00485 SSE / event-stream isolation)
+export type { LongLivedRouteOptions, LongLivedPlugin } from "../sse";
+export { longLivedPlugin } from "../sse";
+
+// Route builder (PRD-00499 h5): required tier + resourceKey at the type level
+export type { HttpMethod, RouteDefinition } from "../route-builder";
+export { routeBuilder } from "../route-builder";
+
+// Query intent vocabulary (PRD-00486 per-tier DB query timeouts + circuit breaker)
+export type { QueryIntent } from "../queryIntent";
+
+// System pressure vocabulary (PRD-00489 load-shed + progressive degradation)
+export {
+  SYSTEM_PRESSURE_HEADER,
+  HEAP_SHED_PCT,
+  HEAP_CLEAR_PCT,
+  CLEAR_HOLDDOWN_MS,
+} from "../pressure";
+export type { SystemPressureValue, ShedResponse } from "../pressure";
+
+// Safe-mode vocabulary (PRD-00495 global freeze / circuit breaker)
+export { SYSTEM_SAFE_MODE_HEADER } from "../safe-mode";
+export type { SafeModeValue, SafeModeState } from "../safe-mode";
+
+// Timeout ladder (PRD-00491 end-to-end timing budgets)
+export { TIMEOUT_LADDER_MS, getTimeoutForTier } from "../timeouts";
+
+// Tracing vocabulary (PRD-00497 canonical request lifecycle)
+export { LIFECYCLE_PHASES } from "../tracing";
+export type {
+  LifecyclePhase,
+  TraceId,
+  RequestId,
+  TraceMetadata,
+} from "../tracing";
+
+// Damped auto-tuning controller vocabulary (PRD-00500 a1)
+export { bounded } from "../autotune";
+export type {
+  Bounded,
+  ControllerConfig,
+  ControllerInput,
+  ControllerOutput,
+} from "../autotune";

package/src/system/README.md

@@ -33,7 +33,7 @@ Defines the semantic contract between backend (producer) and site (renderer).
 - `DiagramSnapshot` _(type)_ — Snapshot of a diagram for cross-repo distribution.
 - `DiagramSpec` _(type)_ — Complete diagram specification.
 - `EdgeDirection` _(type)_ — Edge direction semantics.
-- `FeatureStatus` _(type)_
+- `FeatureStatus` _(type)_ — Feature maturity status.
 - `FlowStage` _(type)_ — Architecture layers for horizontal organization.
 - `PipelinePhase` _(type)_ — Data lifecycle phase for coloring/filtering.
 - `RepoCapability` _(type)_ — Repository Capability Extends DiagramNode with repo-specific fields.

package/src/system/capabilities.ts

@@ -15,7 +15,7 @@
  * @see ADR-CONTRACTS-NNN in DECISIONS.md
  */
 
-import type { DiagramNode, FlowStage } from "./index";
+import type { DiagramNode, FlowStage } from "./diagram";
 
 // =============================================================================
 // Types

package/src/system/diagram.ts

@@ -38,7 +38,7 @@
  * - Added DiagramSnapshot for cross-repo distribution
  */
 
-import type { FeatureStatus } from "./index";
+import type { FeatureStatus } from "./feature-status";
 
 /**
  * The semantic role of a node in the diagram.