@contractspec/example.kb-update-pipeline 1.57.0 → 1.59.0

package/.turbo/turbo-build.log

@@ -1,61 +1,59 @@
-$ bun build:types && bun build:bundle
-$ tsc --noEmit
-$ tsdown
-ℹ tsdown v0.20.3 powered by rolldown v1.0.0-rc.3
-ℹ config file: /home/runner/work/contractspec/contractspec/packages/examples/kb-update-pipeline/tsdown.config.js 
-ℹ entry: src/events.ts, src/example.ts, src/index.ts, src/kb-update-pipeline.feature.ts, src/presentations.ts, src/docs/index.ts, src/docs/kb-update-pipeline.docblock.ts, src/entities/index.ts, src/entities/models.ts, src/handlers/index.ts, src/handlers/memory.handlers.ts, src/operations/index.ts, src/operations/pipeline.ts, src/tests/operations.test-spec.ts
-ℹ target: esnext
-ℹ tsconfig: tsconfig.json
-ℹ Build start
-ℹ dist/operations/pipeline.js                   4.95 kB │ gzip: 1.37 kB
-ℹ dist/events.js                                3.69 kB │ gzip: 0.73 kB
-ℹ dist/handlers/memory.handlers.js              3.37 kB │ gzip: 1.12 kB
-ℹ dist/kb-update-pipeline.feature.js            2.35 kB │ gzip: 0.68 kB
-ℹ dist/tests/operations.test-spec.js            2.13 kB │ gzip: 0.50 kB
-ℹ dist/presentations.js                         1.90 kB │ gzip: 0.63 kB
-ℹ dist/entities/models.js                       1.81 kB │ gzip: 0.53 kB
-ℹ dist/docs/kb-update-pipeline.docblock.js      1.49 kB │ gzip: 0.71 kB
-ℹ dist/index.js                                 1.41 kB │ gzip: 0.41 kB
-ℹ dist/example.js                               1.01 kB │ gzip: 0.54 kB
-ℹ dist/operations/index.js                      0.31 kB │ gzip: 0.14 kB
-ℹ dist/entities/index.js                        0.25 kB │ gzip: 0.13 kB
-ℹ dist/handlers/index.js                        0.16 kB │ gzip: 0.10 kB
-ℹ dist/docs/index.js                            0.04 kB │ gzip: 0.06 kB
-ℹ dist/handlers/memory.handlers.js.map          8.13 kB │ gzip: 2.34 kB
-ℹ dist/operations/pipeline.js.map               7.20 kB │ gzip: 1.81 kB
-ℹ dist/events.js.map                            5.65 kB │ gzip: 1.04 kB
-ℹ dist/tests/operations.test-spec.js.map        3.64 kB │ gzip: 0.76 kB
-ℹ dist/kb-update-pipeline.feature.js.map        3.48 kB │ gzip: 1.02 kB
-ℹ dist/presentations.js.map                     2.87 kB │ gzip: 0.83 kB
-ℹ dist/entities/models.js.map                   2.68 kB │ gzip: 0.81 kB
-ℹ dist/docs/kb-update-pipeline.docblock.js.map  2.00 kB │ gzip: 0.89 kB
-ℹ dist/example.js.map                           1.50 kB │ gzip: 0.74 kB
-ℹ dist/handlers/memory.handlers.d.ts.map        1.03 kB │ gzip: 0.40 kB
-ℹ dist/operations/pipeline.d.ts.map             0.54 kB │ gzip: 0.22 kB
-ℹ dist/events.d.ts.map                          0.47 kB │ gzip: 0.19 kB
-ℹ dist/entities/models.d.ts.map                 0.33 kB │ gzip: 0.20 kB
-ℹ dist/tests/operations.test-spec.d.ts.map      0.25 kB │ gzip: 0.17 kB
-ℹ dist/presentations.d.ts.map                   0.23 kB │ gzip: 0.15 kB
-ℹ dist/kb-update-pipeline.feature.d.ts.map      0.17 kB │ gzip: 0.14 kB
-ℹ dist/example.d.ts.map                         0.13 kB │ gzip: 0.13 kB
-ℹ dist/operations/pipeline.d.ts                 4.33 kB │ gzip: 0.58 kB
-ℹ dist/events.d.ts                              2.52 kB │ gzip: 0.42 kB
-ℹ dist/entities/models.d.ts                     1.98 kB │ gzip: 0.41 kB
-ℹ dist/handlers/memory.handlers.d.ts            1.94 kB │ gzip: 0.64 kB
-ℹ dist/index.d.ts                               1.48 kB │ gzip: 0.41 kB
-ℹ dist/presentations.d.ts                       0.52 kB │ gzip: 0.20 kB
-ℹ dist/tests/operations.test-spec.d.ts          0.47 kB │ gzip: 0.22 kB
-ℹ dist/kb-update-pipeline.feature.d.ts          0.32 kB │ gzip: 0.19 kB
-ℹ dist/operations/index.d.ts                    0.31 kB │ gzip: 0.13 kB
-ℹ dist/handlers/index.d.ts                      0.25 kB │ gzip: 0.10 kB
-ℹ dist/example.d.ts                             0.25 kB │ gzip: 0.17 kB
-ℹ dist/entities/index.d.ts                      0.25 kB │ gzip: 0.13 kB
-ℹ dist/docs/index.d.ts                          0.01 kB │ gzip: 0.03 kB
-ℹ dist/docs/kb-update-pipeline.docblock.d.ts    0.01 kB │ gzip: 0.03 kB
-ℹ 45 files, total: 79.79 kB
-[PLUGIN_TIMINGS] Warning: Your build spent significant time in plugins. Here is a breakdown:
-  - tsdown:external (53%)
-  - rolldown-plugin-dts:generate (34%)
-See https://rolldown.rs/options/checks#plugintimings for more details.
+$ contractspec-bun-build prebuild
+$ bun run prebuild && bun run build:bundle && bun run build:types
+$ contractspec-bun-build prebuild
+$ contractspec-bun-build transpile
+[contractspec-bun-build] transpile target=bun root=src entries=14
+Bundled 14 modules in 33ms
 
-✔ Build complete in 26632ms
+  docs/index.js                         1.49 KB   (entry point)
+  ./index.js                            20.53 KB  (entry point)
+  ./kb-update-pipeline.feature.js       2.15 KB   (entry point)
+  operations/index.js                   6.57 KB   (entry point)
+  operations/pipeline.js                6.57 KB   (entry point)
+  ./presentations.js                    3.48 KB   (entry point)
+  tests/operations.test-spec.js         2.21 KB   (entry point)
+  docs/kb-update-pipeline.docblock.js   1.49 KB   (entry point)
+  entities/index.js                     1.75 KB   (entry point)
+  entities/models.js                    1.75 KB   (entry point)
+  ./events.js                           3.75 KB   (entry point)
+  ./example.js                          1.00 KB   (entry point)
+  handlers/index.js                     3.62 KB   (entry point)
+  handlers/memory.handlers.js           3.62 KB   (entry point)
+
+[contractspec-bun-build] transpile target=node root=src entries=14
+Bundled 14 modules in 28ms
+
+  docs/index.js                         1.47 KB   (entry point)
+  ./index.js                            20.52 KB  (entry point)
+  ./kb-update-pipeline.feature.js       2.14 KB   (entry point)
+  operations/index.js                   6.56 KB   (entry point)
+  operations/pipeline.js                6.56 KB   (entry point)
+  ./presentations.js                    3.47 KB   (entry point)
+  tests/operations.test-spec.js         2.21 KB   (entry point)
+  docs/kb-update-pipeline.docblock.js   1.47 KB   (entry point)
+  entities/index.js                     1.74 KB   (entry point)
+  entities/models.js                    1.74 KB   (entry point)
+  ./events.js                           3.74 KB   (entry point)
+  ./example.js                          0.99 KB   (entry point)
+  handlers/index.js                     3.61 KB   (entry point)
+  handlers/memory.handlers.js           3.61 KB   (entry point)
+
+[contractspec-bun-build] transpile target=browser root=src entries=14
+Bundled 14 modules in 28ms
+
+  docs/index.js                         1.47 KB   (entry point)
+  ./index.js                            20.52 KB  (entry point)
+  ./kb-update-pipeline.feature.js       2.14 KB   (entry point)
+  operations/index.js                   6.56 KB   (entry point)
+  operations/pipeline.js                6.56 KB   (entry point)
+  ./presentations.js                    3.47 KB   (entry point)
+  tests/operations.test-spec.js         2.21 KB   (entry point)
+  docs/kb-update-pipeline.docblock.js   1.47 KB   (entry point)
+  entities/index.js                     1.74 KB   (entry point)
+  entities/models.js                    1.74 KB   (entry point)
+  ./events.js                           3.74 KB   (entry point)
+  ./example.js                          0.99 KB   (entry point)
+  handlers/index.js                     3.61 KB   (entry point)
+  handlers/memory.handlers.js           3.61 KB   (entry point)
+
+$ contractspec-bun-build types

package/.turbo/turbo-prebuild.log

@@ -0,0 +1 @@
+$ contractspec-bun-build prebuild

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # @contractspec/example.kb-update-pipeline
 
+## 1.59.0
+
+### Minor Changes
+
+- 1a0cf44: fix: publishConfig not supported by bun
+
+### Patch Changes
+
+- Updated dependencies [1a0cf44]
+  - @contractspec/lib.contracts@1.59.0
+  - @contractspec/lib.schema@1.59.0
+
+## 1.58.0
+
+### Minor Changes
+
+- d1f0fd0: chore: Migrate non-app package builds from tsdown to shared Bun tooling, add `@contractspec/tool.bun`, and standardize `prebuild`/`build`/`typecheck` with platform-aware exports and `tsc` declaration emission into `dist`.
+
+### Patch Changes
+
+- Updated dependencies [d1f0fd0]
+- Updated dependencies [4355a9e]
+  - @contractspec/lib.contracts@1.58.0
+  - @contractspec/lib.schema@1.58.0
+
 ## 1.57.0
 
 ### Minor Changes

package/dist/browser/docs/index.js

@@ -0,0 +1,43 @@
+// src/docs/kb-update-pipeline.docblock.ts
+import { registerDocBlocks } from "@contractspec/lib.contracts/docs";
+var docBlocks = [
+  {
+    id: "docs.examples.kb-update-pipeline.goal",
+    title: "KB Update Pipeline — Goal",
+    summary: "Automation proposes KB patches; humans verify; publishing is blocked until approvals are complete.",
+    kind: "goal",
+    visibility: "public",
+    route: "/docs/examples/kb-update-pipeline/goal",
+    tags: ["knowledge", "pipeline", "hitl", "audit"],
+    body: `## Why it matters
+- Keeps humans as the verifiers (HITL) while automation does the busywork.
+- Produces an auditable chain: source change -> diff -> proposal -> review -> publish.
+
+## Guardrails
+- High-risk changes require expert approval.
+- Publishing fails if any included rule versions are not approved.
+- Review requests emit notifications/events.`
+  },
+  {
+    id: "docs.examples.kb-update-pipeline.reference",
+    title: "KB Update Pipeline — Reference",
+    summary: "Entities, contracts, and events for the KB update pipeline example.",
+    kind: "reference",
+    visibility: "public",
+    route: "/docs/examples/kb-update-pipeline",
+    tags: ["knowledge", "reference"],
+    body: `## Contracts
+- kbPipeline.runWatch
+- kbPipeline.createReviewTask
+- kbPipeline.submitDecision
+- kbPipeline.publishIfReady
+
+## Events
+- kb.change.detected
+- kb.change.summarized
+- kb.patch.proposed
+- kb.review.requested
+- kb.review.decided`
+  }
+];
+registerDocBlocks(docBlocks);

package/dist/browser/docs/kb-update-pipeline.docblock.js

@@ -0,0 +1,43 @@
+// src/docs/kb-update-pipeline.docblock.ts
+import { registerDocBlocks } from "@contractspec/lib.contracts/docs";
+var docBlocks = [
+  {
+    id: "docs.examples.kb-update-pipeline.goal",
+    title: "KB Update Pipeline — Goal",
+    summary: "Automation proposes KB patches; humans verify; publishing is blocked until approvals are complete.",
+    kind: "goal",
+    visibility: "public",
+    route: "/docs/examples/kb-update-pipeline/goal",
+    tags: ["knowledge", "pipeline", "hitl", "audit"],
+    body: `## Why it matters
+- Keeps humans as the verifiers (HITL) while automation does the busywork.
+- Produces an auditable chain: source change -> diff -> proposal -> review -> publish.
+
+## Guardrails
+- High-risk changes require expert approval.
+- Publishing fails if any included rule versions are not approved.
+- Review requests emit notifications/events.`
+  },
+  {
+    id: "docs.examples.kb-update-pipeline.reference",
+    title: "KB Update Pipeline — Reference",
+    summary: "Entities, contracts, and events for the KB update pipeline example.",
+    kind: "reference",
+    visibility: "public",
+    route: "/docs/examples/kb-update-pipeline",
+    tags: ["knowledge", "reference"],
+    body: `## Contracts
+- kbPipeline.runWatch
+- kbPipeline.createReviewTask
+- kbPipeline.submitDecision
+- kbPipeline.publishIfReady
+
+## Events
+- kb.change.detected
+- kb.change.summarized
+- kb.patch.proposed
+- kb.review.requested
+- kb.review.decided`
+  }
+];
+registerDocBlocks(docBlocks);

package/dist/browser/entities/index.js

@@ -0,0 +1,56 @@
+// src/entities/models.ts
+import {
+  ScalarTypeEnum,
+  defineEnum,
+  defineSchemaModel
+} from "@contractspec/lib.schema";
+var ChangeRiskLevelEnum = defineEnum("ChangeRiskLevel", [
+  "low",
+  "medium",
+  "high"
+]);
+var ReviewAssignedRoleEnum = defineEnum("ReviewAssignedRole", [
+  "curator",
+  "expert"
+]);
+var ReviewDecisionEnum = defineEnum("ReviewDecision", [
+  "approve",
+  "reject"
+]);
+var ChangeCandidateModel = defineSchemaModel({
+  name: "ChangeCandidate",
+  description: "Candidate change detected in a source document.",
+  fields: {
+    id: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
+    sourceDocumentId: {
+      type: ScalarTypeEnum.String_unsecure(),
+      isOptional: false
+    },
+    detectedAt: { type: ScalarTypeEnum.DateTime(), isOptional: false },
+    diffSummary: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
+    riskLevel: { type: ChangeRiskLevelEnum, isOptional: false }
+  }
+});
+var ReviewTaskModel = defineSchemaModel({
+  name: "ReviewTask",
+  description: "Human verification task for a change candidate.",
+  fields: {
+    id: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
+    changeCandidateId: {
+      type: ScalarTypeEnum.String_unsecure(),
+      isOptional: false
+    },
+    status: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
+    assignedRole: { type: ReviewAssignedRoleEnum, isOptional: false },
+    decision: { type: ReviewDecisionEnum, isOptional: true },
+    decidedAt: { type: ScalarTypeEnum.DateTime(), isOptional: true },
+    decidedBy: { type: ScalarTypeEnum.String_unsecure(), isOptional: true }
+  }
+});
+export {
+  ReviewTaskModel,
+  ReviewDecisionEnum,
+  ReviewAssignedRoleEnum,
+  ChangeRiskLevelEnum,
+  ChangeCandidateModel
+};

package/dist/browser/entities/models.js

@@ -0,0 +1,56 @@
+// src/entities/models.ts
+import {
+  ScalarTypeEnum,
+  defineEnum,
+  defineSchemaModel
+} from "@contractspec/lib.schema";
+var ChangeRiskLevelEnum = defineEnum("ChangeRiskLevel", [
+  "low",
+  "medium",
+  "high"
+]);
+var ReviewAssignedRoleEnum = defineEnum("ReviewAssignedRole", [
+  "curator",
+  "expert"
+]);
+var ReviewDecisionEnum = defineEnum("ReviewDecision", [
+  "approve",
+  "reject"
+]);
+var ChangeCandidateModel = defineSchemaModel({
+  name: "ChangeCandidate",
+  description: "Candidate change detected in a source document.",
+  fields: {
+    id: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
+    sourceDocumentId: {
+      type: ScalarTypeEnum.String_unsecure(),
+      isOptional: false
+    },
+    detectedAt: { type: ScalarTypeEnum.DateTime(), isOptional: false },
+    diffSummary: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
+    riskLevel: { type: ChangeRiskLevelEnum, isOptional: false }
+  }
+});
+var ReviewTaskModel = defineSchemaModel({
+  name: "ReviewTask",
+  description: "Human verification task for a change candidate.",
+  fields: {
+    id: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
+    changeCandidateId: {
+      type: ScalarTypeEnum.String_unsecure(),
+      isOptional: false
+    },
+    status: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
+    assignedRole: { type: ReviewAssignedRoleEnum, isOptional: false },
+    decision: { type: ReviewDecisionEnum, isOptional: true },
+    decidedAt: { type: ScalarTypeEnum.DateTime(), isOptional: true },
+    decidedBy: { type: ScalarTypeEnum.String_unsecure(), isOptional: true }
+  }
+});
+export {
+  ReviewTaskModel,
+  ReviewDecisionEnum,
+  ReviewAssignedRoleEnum,
+  ChangeRiskLevelEnum,
+  ChangeCandidateModel
+};

package/dist/browser/events.js

@@ -0,0 +1,132 @@
+// src/events.ts
+import {
+  defineEvent,
+  defineSchemaModel,
+  StabilityEnum
+} from "@contractspec/lib.contracts";
+import { ScalarTypeEnum } from "@contractspec/lib.schema";
+var KbChangeDetectedPayload = defineSchemaModel({
+  name: "KbChangeDetectedPayload",
+  description: "Emitted when a source change is detected.",
+  fields: {
+    changeCandidateId: {
+      type: ScalarTypeEnum.String_unsecure(),
+      isOptional: false
+    },
+    sourceDocumentId: {
+      type: ScalarTypeEnum.String_unsecure(),
+      isOptional: false
+    },
+    riskLevel: { type: ScalarTypeEnum.String_unsecure(), isOptional: false }
+  }
+});
+var KbChangeDetectedEvent = defineEvent({
+  meta: {
+    key: "kb.change.detected",
+    version: "1.0.0",
+    description: "KB source change detected.",
+    stability: StabilityEnum.Experimental,
+    owners: [],
+    tags: []
+  },
+  payload: KbChangeDetectedPayload
+});
+var KbChangeSummarizedPayload = defineSchemaModel({
+  name: "KbChangeSummarizedPayload",
+  description: "Emitted when a change summary is produced.",
+  fields: {
+    changeCandidateId: {
+      type: ScalarTypeEnum.String_unsecure(),
+      isOptional: false
+    },
+    summary: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
+    riskLevel: { type: ScalarTypeEnum.String_unsecure(), isOptional: false }
+  }
+});
+var KbChangeSummarizedEvent = defineEvent({
+  meta: {
+    key: "kb.change.summarized",
+    version: "1.0.0",
+    description: "KB change summarized.",
+    stability: StabilityEnum.Experimental,
+    owners: [],
+    tags: []
+  },
+  payload: KbChangeSummarizedPayload
+});
+var KbPatchProposedPayload = defineSchemaModel({
+  name: "KbPatchProposedPayload",
+  description: "Emitted when draft rule patches are proposed.",
+  fields: {
+    changeCandidateId: {
+      type: ScalarTypeEnum.String_unsecure(),
+      isOptional: false
+    },
+    proposedRuleVersionIds: {
+      type: ScalarTypeEnum.String_unsecure(),
+      isArray: true,
+      isOptional: false
+    }
+  }
+});
+var KbPatchProposedEvent = defineEvent({
+  meta: {
+    key: "kb.patch.proposed",
+    version: "1.0.0",
+    description: "KB rule patch proposed (draft versions created).",
+    stability: StabilityEnum.Experimental,
+    owners: [],
+    tags: []
+  },
+  payload: KbPatchProposedPayload
+});
+var KbReviewRequestedPayload = defineSchemaModel({
+  name: "KbReviewRequestedPayload",
+  description: "Emitted when a review is requested.",
+  fields: {
+    reviewTaskId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
+    changeCandidateId: {
+      type: ScalarTypeEnum.String_unsecure(),
+      isOptional: false
+    },
+    assignedRole: { type: ScalarTypeEnum.String_unsecure(), isOptional: false }
+  }
+});
+var KbReviewRequestedEvent = defineEvent({
+  meta: {
+    key: "kb.review.requested",
+    version: "1.0.0",
+    description: "KB review requested.",
+    stability: StabilityEnum.Experimental,
+    owners: [],
+    tags: []
+  },
+  payload: KbReviewRequestedPayload
+});
+var KbReviewDecidedPayload = defineSchemaModel({
+  name: "KbReviewDecidedPayload",
+  description: "Emitted when a review task is decided.",
+  fields: {
+    reviewTaskId: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
+    decision: { type: ScalarTypeEnum.String_unsecure(), isOptional: false },
+    decidedBy: { type: ScalarTypeEnum.String_unsecure(), isOptional: false }
+  }
+});
+var KbReviewDecidedEvent = defineEvent({
+  meta: {
+    key: "kb.review.decided",
+    version: "1.0.0",
+    description: "KB review decided.",
+    stability: StabilityEnum.Experimental,
+    owners: [],
+    tags: []
+  },
+  payload: KbReviewDecidedPayload
+});
+export {
+  KbReviewRequestedEvent,
+  KbReviewDecidedEvent,
+  KbPatchProposedEvent,
+  KbChangeSummarizedEvent,
+  KbChangeDetectedEvent
+};

package/dist/browser/example.js

@@ -0,0 +1,35 @@
+// src/example.ts
+import { defineExample } from "@contractspec/lib.contracts";
+var example = defineExample({
+  meta: {
+    key: "kb-update-pipeline",
+    version: "1.0.0",
+    title: "KB Update Pipeline",
+    description: "Automation proposes KB updates; humans verify; everything audited and notified.",
+    kind: "knowledge",
+    visibility: "public",
+    stability: "experimental",
+    owners: ["@platform.core"],
+    tags: ["knowledge", "pipeline", "hitl", "audit"]
+  },
+  docs: {
+    rootDocId: "docs.examples.kb-update-pipeline"
+  },
+  entrypoints: {
+    packageName: "@contractspec/example.kb-update-pipeline",
+    feature: "./feature",
+    contracts: "./contracts",
+    handlers: "./handlers",
+    docs: "./docs"
+  },
+  surfaces: {
+    templates: true,
+    sandbox: { enabled: true, modes: ["markdown", "specs", "builder"] },
+    studio: { enabled: true, installable: true },
+    mcp: { enabled: true }
+  }
+});
+var example_default = example;
+export {
+  example_default as default
+};

package/dist/browser/handlers/index.js

@@ -0,0 +1,109 @@
+// src/handlers/memory.handlers.ts
+function createPipelineMemoryStore() {
+  return {
+    candidates: new Map,
+    reviewTasks: new Map,
+    proposedRuleVersionIdsByCandidate: new Map,
+    approvedRuleVersionIds: new Set,
+    notifications: []
+  };
+}
+function stableId(prefix, value) {
+  return `${prefix}_${value.replace(/[^a-zA-Z0-9_-]/g, "_")}`;
+}
+function createPipelineMemoryHandlers(store) {
+  async function runWatch(input) {
+    const candidates = [...store.candidates.values()].filter((c) => c.sourceDocumentId.startsWith(`${input.jurisdiction}_`) || true);
+    return { candidates };
+  }
+  async function createReviewTask(input) {
+    const candidate = store.candidates.get(input.changeCandidateId);
+    if (!candidate)
+      throw new Error("CHANGE_CANDIDATE_NOT_FOUND");
+    const assignedRole = candidate.riskLevel === "high" ? "expert" : "curator";
+    const id = stableId("review", input.changeCandidateId);
+    const task = {
+      id,
+      changeCandidateId: input.changeCandidateId,
+      status: "open",
+      assignedRole,
+      decision: undefined,
+      decidedAt: undefined,
+      decidedBy: undefined
+    };
+    store.reviewTasks.set(id, task);
+    store.notifications.push({
+      kind: "kb.review.requested",
+      reviewTaskId: id,
+      changeCandidateId: input.changeCandidateId,
+      assignedRole,
+      createdAt: new Date
+    });
+    return task;
+  }
+  async function proposeRulePatch(input) {
+    if (!store.candidates.has(input.changeCandidateId)) {
+      throw new Error("CHANGE_CANDIDATE_NOT_FOUND");
+    }
+    store.proposedRuleVersionIdsByCandidate.set(input.changeCandidateId, [
+      ...input.proposedRuleVersionIds
+    ]);
+    return { proposedRuleVersionIds: [...input.proposedRuleVersionIds] };
+  }
+  async function markRuleVersionApproved(input) {
+    store.approvedRuleVersionIds.add(input.ruleVersionId);
+    return { ruleVersionId: input.ruleVersionId };
+  }
+  async function submitDecision(input) {
+    const task = store.reviewTasks.get(input.reviewTaskId);
+    if (!task)
+      throw new Error("REVIEW_TASK_NOT_FOUND");
+    const candidate = store.candidates.get(task.changeCandidateId);
+    if (!candidate)
+      throw new Error("CHANGE_CANDIDATE_NOT_FOUND");
+    if (candidate.riskLevel === "high" && input.decision === "approve") {
+      if (input.decidedByRole !== "expert")
+        throw new Error("FORBIDDEN_ROLE");
+    }
+    const decided = {
+      ...task,
+      status: "decided",
+      decision: input.decision,
+      decidedAt: new Date,
+      decidedBy: input.decidedBy
+    };
+    store.reviewTasks.set(decided.id, decided);
+    return decided;
+  }
+  async function publishIfReady(_input) {
+    const openTasks = [...store.reviewTasks.values()].filter((t) => t.status !== "decided");
+    if (openTasks.length) {
+      throw new Error("NOT_READY");
+    }
+    const rejected = [...store.reviewTasks.values()].some((t) => t.decision === "reject");
+    if (rejected)
+      return { published: false, reason: "REJECTED" };
+    for (const task of store.reviewTasks.values()) {
+      if (task.decision !== "approve")
+        continue;
+      const proposed = store.proposedRuleVersionIdsByCandidate.get(task.changeCandidateId) ?? [];
+      const unapproved = proposed.filter((id) => !store.approvedRuleVersionIds.has(id));
+      if (unapproved.length) {
+        throw new Error("NOT_READY");
+      }
+    }
+    return { published: true };
+  }
+  return {
+    runWatch,
+    createReviewTask,
+    proposeRulePatch,
+    markRuleVersionApproved,
+    submitDecision,
+    publishIfReady
+  };
+}
+export {
+  createPipelineMemoryStore,
+  createPipelineMemoryHandlers
+};