@decionis/agent-safe-pipeline 0.3.7 → 0.4.0

package/dist/execution/ExecutionJournal.js

@@ -0,0 +1,157 @@
+import { z } from "zod";
+export const JOURNAL_VERSION = "agent-safe.attempts/1";
+const identifier = z.string().trim().min(1).max(200);
+const hash = z.string().regex(/^sha256:[0-9a-f]{64}$/);
+/**
+ * What the journal records about one attempt, in the order it happens:
+ * opened before the executor runs, claimed after the grant is consumed and
+ * before the provider is touched, closed once the outcome is known, and
+ * reconciled when a lost outcome is resolved later. The intent is stored
+ * whole on `ATTEMPT_OPENED`, because reconciliation needs the exact intent
+ * it was and nothing less will re-hash to the same value.
+ */
+export const JournalRecordSchema = z.discriminatedUnion("record", [
+    z.strictObject({
+        record: z.literal("ATTEMPT_OPENED"),
+        at: z.string().datetime(),
+        intent_id: identifier,
+        intent_hash: hash,
+        idempotency_key: z.string().trim().min(1).max(180),
+        decision_id: identifier,
+        dossier_id: identifier,
+        caller_principal: identifier.nullable(),
+        /** The captured intent, verbatim, so a restart can present it again. */
+        intent: z.record(z.string(), z.unknown()),
+    }),
+    z.strictObject({
+        record: z.literal("GRANT_CLAIMED"),
+        at: z.string().datetime(),
+        intent_id: identifier,
+        intent_hash: hash,
+        idempotency_key: z.string().trim().min(1).max(180),
+        grant_id: identifier,
+        expires_at: z.string().datetime(),
+        /** SHA-256 over the canonical parameters the handler is about to send. */
+        request_digest: hash,
+    }),
+    z.strictObject({
+        record: z.literal("ATTEMPT_CLOSED"),
+        at: z.string().datetime(),
+        intent_id: identifier,
+        intent_hash: hash,
+        outcome: z.string().trim().min(1).max(64),
+        executed: z.boolean().nullable(),
+        finalization: z.enum(["RECORDED", "PENDING", "UNSUPPORTED"]).nullable(),
+    }),
+    z.strictObject({
+        record: z.literal("RECONCILED"),
+        at: z.string().datetime(),
+        intent_id: identifier,
+        intent_hash: hash,
+        status: z.enum(["COMPLETED", "DEFINITELY_NOT_EXECUTED", "UNKNOWN_AFTER_DISPATCH", "BLOCKED"]),
+        source: z.enum(["STARTUP", "CALLER"]),
+    }),
+]);
+/** A refusal by the journal: the code, never a path or a value. */
+export class JournalError extends Error {
+    code;
+    constructor(code) {
+        super(code);
+        this.code = code;
+        this.name = "JournalError";
+    }
+}
+/** The journal's refusal of a second claim under one idempotency key. */
+export const IDEMPOTENCY_KEY_DISPATCHED = "IDEMPOTENCY_KEY_DISPATCHED";
+/** Folds a stream of records into the attempts still open, oldest first. */
+export function openAttemptsFrom(records) {
+    const open = new Map();
+    for (const record of records) {
+        if (record.record === "ATTEMPT_OPENED") {
+            open.set(record.intent_id, {
+                intentId: record.intent_id,
+                intentHash: record.intent_hash,
+                idempotencyKey: record.idempotency_key,
+                openedAt: record.at,
+                decisionId: record.decision_id,
+                dossierId: record.dossier_id,
+                grantId: null,
+                expiresAt: null,
+                callerPrincipal: record.caller_principal,
+                state: "OPENED",
+                intent: record.intent,
+            });
+            continue;
+        }
+        if (record.record === "GRANT_CLAIMED") {
+            const attempt = open.get(record.intent_id);
+            if (attempt !== undefined) {
+                open.set(record.intent_id, {
+                    ...attempt,
+                    grantId: record.grant_id,
+                    expiresAt: record.expires_at,
+                    state: "CLAIMED",
+                });
+            }
+            continue;
+        }
+        open.delete(record.intent_id);
+    }
+    return [...open.values()];
+}
+/**
+ * Folds a stream of records into the authorizations one intent was
+ * dispatched under, oldest first. Only a claimed attempt was dispatched: one
+ * opened and never claimed consumed no grant, and a claim with no opening
+ * record names no decision, so neither is anything to reconcile. Closing and
+ * reconciling records are ignored, because what an attempt was dispatched
+ * under does not change when its outcome becomes known.
+ */
+export function authorizationsFrom(records, intentId) {
+    const dispatched = [];
+    let opened = null;
+    for (const record of records) {
+        if (record.intent_id !== intentId)
+            continue;
+        if (record.record === "ATTEMPT_OPENED")
+            opened = record;
+        if (record.record === "GRANT_CLAIMED" && opened !== null) {
+            dispatched.push({
+                decisionId: opened.decision_id,
+                dossierId: opened.dossier_id,
+                grantId: record.grant_id,
+                intentHash: record.intent_hash,
+                expiresAt: record.expires_at,
+            });
+        }
+    }
+    return dispatched;
+}
+/**
+ * Folds a stream of records into the authorizations claimed under one
+ * idempotency key, oldest first, whichever intent each was opened for. The
+ * claim record names the key it was claimed under; the decision comes from
+ * the opening record of the same intent, as in `authorizationsFrom`.
+ */
+export function dispatchedUnderFrom(records, idempotencyKey) {
+    const dispatched = [];
+    const opened = new Map();
+    for (const record of records) {
+        if (record.record === "ATTEMPT_OPENED")
+            opened.set(record.intent_id, record);
+        if (record.record !== "GRANT_CLAIMED" || record.idempotency_key !== idempotencyKey)
+            continue;
+        const opening = opened.get(record.intent_id);
+        if (opening === undefined)
+            continue;
+        dispatched.push({
+            decisionId: opening.decision_id,
+            dossierId: opening.dossier_id,
+            grantId: record.grant_id,
+            intentHash: record.intent_hash,
+            expiresAt: record.expires_at,
+        });
+    }
+    return dispatched;
+}
+//# sourceMappingURL=ExecutionJournal.js.map

package/dist/execution/ExecutionJournal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionJournal.js","sourceRoot":"","sources":["../../src/execution/ExecutionJournal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAEvD,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACrD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAEvD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IAChE,CAAC,CAAC,YAAY,CAAC;QACb,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACzB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,IAAI;QACjB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAClD,WAAW,EAAE,UAAU;QACvB,UAAU,EAAE,UAAU;QACtB,gBAAgB,EAAE,UAAU,CAAC,QAAQ,EAAE;QACvC,wEAAwE;QACxE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;KAC1C,CAAC;IACF,CAAC,CAAC,YAAY,CAAC;QACb,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;QAClC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACzB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,IAAI;QACjB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAClD,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,0EAA0E;QAC1E,cAAc,EAAE,IAAI;KACrB,CAAC;IACF,CAAC,CAAC,YAAY,CAAC;QACb,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACzB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,IAAI;QACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAChC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE;KACxE,CAAC;IACF,CAAC,CAAC,YAAY,CAAC;QACb,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QAC/B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACzB,SAAS,EAAE,UAAU;QACrB,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC;QAC7F,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;KACtC,CAAC;CACH,CAAC,CAAC;AAmCH,mEAAmE;AACnE,MAAM,OAAO,YAAa,SAAQ,KAAK;IACF;IAAnC,YAAmC,IAAY;QAC7C,KAAK,CAAC,IAAI,CAAC,CAAC;QADqB,SAAI,GAAJ,IAAI,CAAQ;QAE7C,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAsCD,yEAAyE;AACzE,MAAM,CAAC,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;AAEvE,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,OAAgC;IAC/D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YACvC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE;gBACzB,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,UAAU,EAAE,MAAM,CAAC,WAAW;gBAC9B,cAAc,EAAE,MAAM,CAAC,eAAe;gBACtC,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,UAAU,EAAE,MAAM,CAAC,WAAW;gBAC9B,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;gBACf,eAAe,EAAE,MAAM,CAAC,gBAAgB;gBACxC,KAAK,EAAE,QAAQ;gBACf,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE;oBACzB,GAAG,OAAO;oBACV,OAAO,EAAE,MAAM,CAAC,QAAQ;oBACxB,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC5B,KAAK,EAAE,SAAS;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAgC,EAChC,QAAgB;IAEhB,MAAM,UAAU,GAA8B,EAAE,CAAC;IACjD,IAAI,MAAM,GAAgE,IAAI,CAAC;IAC/E,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ;YAAE,SAAS;QAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB;YAAE,MAAM,GAAG,MAAM,CAAC;QACxD,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACzD,UAAU,CAAC,IAAI,CAAC;gBACd,UAAU,EAAE,MAAM,CAAC,WAAW;gBAC9B,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,OAAO,EAAE,MAAM,CAAC,QAAQ;gBACxB,UAAU,EAAE,MAAM,CAAC,WAAW;gBAC9B,SAAS,EAAE,MAAM,CAAC,UAAU;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAgC,EAChC,cAAsB;IAEtB,MAAM,UAAU,GAA8B,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAgE,CAAC;IACvF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7E,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe,IAAI,MAAM,CAAC,eAAe,KAAK,cAAc;YAAE,SAAS;QAC7F,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,UAAU,CAAC,IAAI,CAAC;YACd,UAAU,EAAE,OAAO,CAAC,WAAW;YAC/B,SAAS,EAAE,OAAO,CAAC,UAAU;YAC7B,OAAO,EAAE,MAAM,CAAC,QAAQ;YACxB,UAAU,EAAE,MAAM,CAAC,WAAW;YAC9B,SAAS,EAAE,MAAM,CAAC,UAAU;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/execution/ExecutionOutcome.d.ts

@@ -0,0 +1,186 @@
+import type { DecisionGate } from "../decision/DecisionAuthority.js";
+import type { CapturedIntent } from "../intent/ExecutionIntent.js";
+import type { ExecutionFinalization, VerifiedAuthorization } from "./AuthorizationVerifier.js";
+import type { ExecutionPermit } from "./NativeExecutor.js";
+/**
+ * Every governed run ends in exactly one of these. They answer one question,
+ * "may the caller retry the side effect?", and the answers never overlap:
+ *
+ * | Outcome                   | Meaning                                                        |
+ * | ------------------------- | -------------------------------------------------------------- |
+ * | `BLOCKED`                 | No valid execution authority reached the executor              |
+ * | `HELD`                    | Admitted; the grant waits, unclaimed, for the native boundary  |
+ * | `FAILED_BEFORE_DISPATCH`  | A grant was consumed and nothing was sent                      |
+ * | `COMPLETED`               | The platform effected the action                               |
+ * | `DEFINITELY_NOT_EXECUTED` | The platform was reached and refused; nothing was effected     |
+ * | `UNKNOWN_AFTER_DISPATCH`  | The write left, and nobody can yet say what happened           |
+ */
+export type ExecutionOutcome = "BLOCKED" | "HELD" | "FAILED_BEFORE_DISPATCH" | "COMPLETED" | "DEFINITELY_NOT_EXECUTED" | "UNKNOWN_AFTER_DISPATCH";
+export type ExecutionBlockReason = "DECISION_NOT_AUTHORITATIVE" | "DECISION_NOT_ALLOW" | "DOSSIER_MISSING" | "INTENT_BINDING_MISMATCH" | "INTENT_CONFORMANCE_FAILED" | "AUTHORIZATION_MISSING" | "AUTHORIZATION_INVALID" | "RECOVERY_BINDING_MISMATCH" | "RECOVERY_ATTEMPT_UNKNOWN" | "BOUNDARY_MISMATCH" | "WORKLOAD_MISMATCH" | "AUDIT_UNAVAILABLE" | "CAPABILITY_UNAVAILABLE" | "IDEMPOTENCY_KEY_DISPATCHED" | "JOURNAL_UNAVAILABLE";
+/** Where an executor reads back the authorizations it dispatched an intent under. */
+export interface DispatchedAttempts {
+    /** Every authorization journaled for this intent, oldest first; none when it was never dispatched here. */
+    authorizationsOf(captured: CapturedIntent): Promise<readonly VerifiedAuthorization[]>;
+}
+export type ExecutionPreDispatchFailureReason = "HANDLER_FAILED_BEFORE_DISPATCH" | "AUDIT_UNAVAILABLE" | "JOURNAL_UNAVAILABLE";
+/**
+ * What a caller presents back to reconcile an attempt whose outcome was
+ * lost. The fields are listed rather than inherited, because this is a
+ * versioned wire object: a field that appears on `VerifiedAuthorization`
+ * later must be added here deliberately or not at all.
+ */
+export interface ExecutionRecoveryReference {
+    readonly version: "agent-safe.recovery/1";
+    readonly decisionId: string;
+    readonly dossierId: string;
+    readonly grantId: string;
+    readonly intentHash: string;
+    readonly expiresAt: string;
+    readonly idempotencyKey: string;
+}
+export interface ExecutionBlockedResult {
+    readonly outcome: "BLOCKED";
+    readonly executed: false;
+    readonly reason: ExecutionBlockReason;
+    /** Why, more narrowly, when the runner knows: a capability gap, a journal refusal. */
+    readonly code?: string;
+    /**
+     * Present only when the decision failed closed and the posture is not
+     * strict: what the surface may do with an action nobody could decide. The
+     * runner itself never writes it; an ungoverned continuation is the
+     * surface's act, and the evidence line reports it as one.
+     */
+    readonly unavailable?: {
+        readonly posture: "BOUNDED_CONTINUITY" | "CUSTOM";
+        readonly disposition: "NOT_FORWARDED" | "HELD" | "FORWARDED_UNGOVERNED";
+    };
+    readonly result: null;
+    readonly authorization: null;
+}
+/**
+ * The provider refused, definitively, after the dispatch boundary. The grant
+ * was consumed and the request was sent, and nothing was effected: the
+ * outcome is a fact, not an unknown, so there is nothing to reconcile and no
+ * recovery reference to present. A caller that wants the action after all
+ * needs a fresh decision and a fresh grant, because the refusal was about
+ * this attempt.
+ */
+export interface ProviderRefusedResult {
+    readonly outcome: "DEFINITELY_NOT_EXECUTED";
+    readonly executed: false;
+    readonly recovered: false;
+    /** The provider's own reason, as the handler reported it. */
+    readonly reason: string;
+    readonly result: null;
+    readonly authorization: VerifiedAuthorization;
+}
+export interface ProviderOutcomeUnknownResult {
+    readonly outcome: "UNKNOWN_AFTER_DISPATCH";
+    readonly executed: null;
+    readonly reason: "PROVIDER_OUTCOME_UNKNOWN";
+    readonly result: null;
+    readonly authorization: VerifiedAuthorization;
+    readonly recovery: ExecutionRecoveryReference;
+}
+/**
+ * Every outcome that consumed a grant reports whether the attempt's commit
+ * evidence reached the authority. Finalization is evidence, not authority;
+ * it never changes `outcome` or `executed`.
+ */
+export type SafeExecutionResult<TResult = unknown> = {
+    readonly outcome: "COMPLETED";
+    readonly executed: true;
+    readonly recovered: false;
+    readonly result: TResult;
+    readonly authorization: VerifiedAuthorization;
+    readonly finalization: ExecutionFinalization;
+} | ExecutionBlockedResult | {
+    readonly outcome: "FAILED_BEFORE_DISPATCH";
+    readonly executed: false;
+    readonly reason: ExecutionPreDispatchFailureReason;
+    /** Why the handler refused, when it threw a `PreDispatchRefusal`. */
+    readonly code?: string;
+    readonly result: null;
+    readonly authorization: VerifiedAuthorization;
+    readonly finalization: ExecutionFinalization;
+} | (ProviderRefusedResult & {
+    readonly finalization: ExecutionFinalization;
+}) | (ProviderOutcomeUnknownResult & {
+    readonly finalization: ExecutionFinalization;
+});
+export type FailedBeforeDispatchResult = Extract<SafeExecutionResult<never>, {
+    outcome: "FAILED_BEFORE_DISPATCH";
+}>;
+export type ExecutionReconciliationResult<TResult = unknown> = {
+    readonly outcome: "COMPLETED";
+    readonly executed: true;
+    readonly recovered: true;
+    readonly result: TResult;
+    readonly authorization: VerifiedAuthorization;
+} | {
+    readonly outcome: "DEFINITELY_NOT_EXECUTED";
+    readonly executed: false;
+    readonly recovered: true;
+    readonly reason: "PROVIDER_CONFIRMED_NOT_EXECUTED";
+    readonly result: null;
+    readonly authorization: VerifiedAuthorization;
+} | ExecutionBlockedResult | ProviderOutcomeUnknownResult;
+/**
+ * A grant admitted for a later claim. Every check a run makes before it
+ * consumes a grant has passed, and nothing has been consumed: the grant is
+ * still the authority's to hand out once. Only a hold issues one, only the
+ * runner that issued it can claim it, and it is claimed at most once.
+ *
+ * This is for an effect that another system performs at a moment this
+ * process does not choose, such as a card authorization the issuer asks
+ * about in milliseconds or a posting an ERP makes when a clerk posts: the
+ * decision is made before, the grant waits here, and the claim happens when
+ * that system presents its permit.
+ */
+export interface HeldExecution {
+    readonly captured: CapturedIntent;
+    readonly decision: DecisionGate;
+    /** The grant's own expiry: after it there is nothing left to claim. */
+    readonly expiresAt: string;
+}
+export interface ExecutionHeldResult {
+    readonly outcome: "HELD";
+    readonly executed: false;
+    readonly result: null;
+    readonly authorization: null;
+    readonly held: HeldExecution;
+}
+/** A held permit-style execution: the hold, and the permit the native boundary presents. */
+export interface PermitHeldResult extends ExecutionHeldResult {
+    readonly permit: ExecutionPermit;
+}
+export type HeldClaimResult = {
+    readonly outcome: "CLAIMED";
+    readonly authorization: VerifiedAuthorization;
+} | ExecutionBlockedResult | FailedBeforeDispatchResult;
+/** A presented permit, claimed: what the boundary writes with. */
+export type PermitPresentationResult = {
+    readonly outcome: "CLAIMED";
+    readonly authorization: VerifiedAuthorization;
+    readonly permit: ExecutionPermit;
+} | ExecutionBlockedResult | FailedBeforeDispatchResult;
+/**
+ * How a held execution's receipt settled it. A receipt is accepted once: a
+ * second one, or one for a permit nobody presented, is refused and changes
+ * nothing that was recorded.
+ */
+export type ExecutionSettlement<TResult = unknown> = {
+    readonly status: "SETTLED";
+    readonly outcome: "COMPLETED" | "DEFINITELY_NOT_EXECUTED" | "UNKNOWN_AFTER_DISPATCH";
+    readonly executed: boolean | null;
+    readonly result: TResult | null;
+    readonly reason: string | null;
+    readonly authorization: VerifiedAuthorization;
+    readonly finalization: ExecutionFinalization;
+    /** Present when the receipt left the outcome unknown: what a reconciliation is held against. */
+    readonly recovery?: ExecutionRecoveryReference;
+} | {
+    readonly status: "REFUSED";
+    readonly reason: "RECEIPT_DUPLICATE" | "PERMIT_NOT_PRESENTED";
+};
+//# sourceMappingURL=ExecutionOutcome.d.ts.map

package/dist/execution/ExecutionOutcome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionOutcome.d.ts","sourceRoot":"","sources":["../../src/execution/ExecutionOutcome.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAC/F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,MAAM,GACN,wBAAwB,GACxB,WAAW,GACX,yBAAyB,GACzB,wBAAwB,CAAC;AAE7B,MAAM,MAAM,oBAAoB,GAC5B,4BAA4B,GAC5B,oBAAoB,GACpB,iBAAiB,GACjB,yBAAyB,GACzB,2BAA2B,GAC3B,uBAAuB,GACvB,uBAAuB,GACvB,2BAA2B,GAC3B,0BAA0B,GAC1B,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,wBAAwB,GACxB,4BAA4B,GAC5B,qBAAqB,CAAC;AAE1B,qFAAqF;AACrF,MAAM,WAAW,kBAAkB;IACjC,2GAA2G;IAC3G,gBAAgB,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAAC;CACvF;AAED,MAAM,MAAM,iCAAiC,GAC3C,gCAAgC,GAAG,mBAAmB,GAAG,qBAAqB,CAAC;AAEjF;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,sFAAsF;IACtF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE;QACrB,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG,QAAQ,CAAC;QAClD,QAAQ,CAAC,WAAW,EAAE,eAAe,GAAG,MAAM,GAAG,sBAAsB,CAAC;KACzE,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;CAC/C;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;CAC/C;AAED;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,CAAC,OAAO,GAAG,OAAO,IAC7C;IACE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;CAC9C,GACD,sBAAsB,GACtB;IACE,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAC;IACnD,qEAAqE;IACrE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;CAC9C,GACD,CAAC,qBAAqB,GAAG;IAAE,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAA;CAAE,CAAC,GAC1E,CAAC,4BAA4B,GAAG;IAAE,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAA;CAAE,CAAC,CAAC;AAEtF,MAAM,MAAM,0BAA0B,GAAG,OAAO,CAC9C,mBAAmB,CAAC,KAAK,CAAC,EAC1B;IAAE,OAAO,EAAE,wBAAwB,CAAA;CAAE,CACtC,CAAC;AAEF,MAAM,MAAM,6BAA6B,CAAC,OAAO,GAAG,OAAO,IACvD;IACE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;CAC/C,GACD;IACE,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;CAC/C,GACD,sBAAsB,GACtB,4BAA4B,CAAC;AAEjC;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,uEAAuE;IACvE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;CAC9B;AAED,4FAA4F;AAC5F,MAAM,WAAW,gBAAiB,SAAQ,mBAAmB;IAC3D,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;CAClC;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAA;CAAE,GAC9E,sBAAsB,GACtB,0BAA0B,CAAC;AAE/B,kEAAkE;AAClE,MAAM,MAAM,wBAAwB,GAChC;IACE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;CAClC,GACD,sBAAsB,GACtB,0BAA0B,CAAC;AAE/B;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,CAAC,OAAO,GAAG,OAAO,IAC7C;IACE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,yBAAyB,GAAG,wBAAwB,CAAC;IACrF,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;IAC7C,gGAAgG;IAChG,QAAQ,CAAC,QAAQ,CAAC,EAAE,0BAA0B,CAAC;CAChD,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,sBAAsB,CAAC;CAC/D,CAAC"}

package/dist/execution/ExecutionOutcome.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ExecutionOutcome.js.map

package/dist/execution/ExecutionOutcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionOutcome.js","sourceRoot":"","sources":["../../src/execution/ExecutionOutcome.ts"],"names":[],"mappings":""}

package/dist/execution/ExecutionPosture.d.ts

@@ -0,0 +1,50 @@
+import type { DecisionGate } from "../decision/DecisionAuthority.js";
+import type { CapturedIntent } from "../intent/ExecutionIntent.js";
+/**
+ * What a governed surface does with an action when it cannot reach the
+ * authority. The vocabulary is Decionis Core's (`FailurePosture`, shared
+ * with the AgentSafe gateway), and so is the invariant every posture keeps:
+ * failing to reach the authority is never an authorization.
+ *
+ * - `STRICT`: the action does not run.
+ * - `BOUNDED_CONTINUITY`: the surface may let the action continue without
+ *   an evaluation, ungoverned and never approved, where it was configured
+ *   for a bounded exposure.
+ * - `CUSTOM`: the institution decides, per action.
+ *
+ * The runner applies posture only to a decision that failed closed: an
+ * authority that answered `BLOCK` was reached, and no posture overrides it.
+ * And the runner itself never writes without a grant, under any posture: an
+ * ungoverned continuation is the surface's own act, which the runner reports
+ * as a coverage gap in the evidence line instead of hiding it.
+ */
+export type FailurePosture = "STRICT" | "BOUNDED_CONTINUITY" | "CUSTOM";
+/**
+ * What happened to an action the authority could not decide, in the gateway's
+ * own tokens: refused, held for someone to look at, or let through
+ * ungoverned by the surface.
+ */
+export type UnavailableDisposition = "NOT_FORWARDED" | "HELD" | "FORWARDED_UNGOVERNED";
+/** The authority state an evidence line names: decided, or unreachable. */
+export type AuthorityState = "DECIDED" | "AUTHORITY_UNAVAILABLE";
+export interface PostureContext {
+    readonly captured: CapturedIntent;
+    readonly decision: DecisionGate;
+}
+export type ExecutionPosture = {
+    readonly posture: "STRICT";
+} | {
+    readonly posture: "BOUNDED_CONTINUITY";
+} | {
+    readonly posture: "CUSTOM";
+    /** The institution's choice for one action; it may hold or refuse, never authorize. */
+    readonly decide: (context: PostureContext) => UnavailableDisposition;
+};
+export declare const STRICT_POSTURE: ExecutionPosture;
+/**
+ * The disposition for an action whose decision failed closed. A custom rule
+ * that throws, or answers something else, is `NOT_FORWARDED`: the posture
+ * that cannot be read is the strict one.
+ */
+export declare function unavailableDisposition(posture: ExecutionPosture, context: PostureContext): UnavailableDisposition;
+//# sourceMappingURL=ExecutionPosture.d.ts.map

package/dist/execution/ExecutionPosture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionPosture.d.ts","sourceRoot":"","sources":["../../src/execution/ExecutionPosture.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,oBAAoB,GAAG,QAAQ,CAAC;AAExE;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,eAAe,GAAG,MAAM,GAAG,sBAAsB,CAAC;AAEvF,2EAA2E;AAC3E,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,uBAAuB,CAAC;AAEjE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;CACjC;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;CAAE,GAC1C;IACE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC3B,uFAAuF;IACvF,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,sBAAsB,CAAC;CACtE,CAAC;AAEN,eAAO,MAAM,cAAc,EAAE,gBAAuD,CAAC;AAErF;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,cAAc,GACtB,sBAAsB,CASxB"}

package/dist/execution/ExecutionPosture.js

@@ -0,0 +1,20 @@
+export const STRICT_POSTURE = Object.freeze({ posture: "STRICT" });
+/**
+ * The disposition for an action whose decision failed closed. A custom rule
+ * that throws, or answers something else, is `NOT_FORWARDED`: the posture
+ * that cannot be read is the strict one.
+ */
+export function unavailableDisposition(posture, context) {
+    if (posture.posture === "STRICT")
+        return "NOT_FORWARDED";
+    if (posture.posture === "BOUNDED_CONTINUITY")
+        return "FORWARDED_UNGOVERNED";
+    try {
+        const chosen = posture.decide(context);
+        return chosen === "HELD" || chosen === "FORWARDED_UNGOVERNED" ? chosen : "NOT_FORWARDED";
+    }
+    catch {
+        return "NOT_FORWARDED";
+    }
+}
+//# sourceMappingURL=ExecutionPosture.js.map

package/dist/execution/ExecutionPosture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionPosture.js","sourceRoot":"","sources":["../../src/execution/ExecutionPosture.ts"],"names":[],"mappings":"AA+CA,MAAM,CAAC,MAAM,cAAc,GAAqB,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;AAErF;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAyB,EACzB,OAAuB;IAEvB,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC;IACzD,IAAI,OAAO,CAAC,OAAO,KAAK,oBAAoB;QAAE,OAAO,sBAAsB,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,sBAAsB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,eAAe,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/execution/ExecutorEvidence.d.ts

@@ -0,0 +1,64 @@
+import type { ExecutionFinalization } from "./AuthorizationVerifier.js";
+import type { ExecutionOutcome } from "./ExecutionOutcome.js";
+import type { AuthorityState, FailurePosture, UnavailableDisposition } from "./ExecutionPosture.js";
+import type { NATIVE_EXECUTOR_CONTRACT, ExecutionStyle, ExecutorScope, PlatformId } from "./NativeExecutor.js";
+export declare const EXECUTOR_EVIDENCE_VERSION = "agent-safe.executor-evidence/1";
+/** Which step of a governed execution a line records. */
+export type EvidenceStage = "RUN" | "PRESENTATION" | "SETTLEMENT" | "RECONCILIATION";
+/**
+ * One line per step of a governed execution, written by the runner and by
+ * nothing else: which executor ran what, under which decision and grant, and
+ * how it ended. It is the evidence an operator counts governed writes with,
+ * and it carries identifiers, statuses and timings only — never a parameter,
+ * a token, a receipt, a credential or a response body. Snake case, because
+ * it is a wire object other languages read.
+ */
+export interface ExecutorEvidenceLine {
+    readonly version: typeof EXECUTOR_EVIDENCE_VERSION;
+    readonly contract: typeof NATIVE_EXECUTOR_CONTRACT;
+    readonly at: string;
+    readonly stage: EvidenceStage;
+    readonly executor: {
+        readonly platform: PlatformId;
+        readonly version: string;
+        readonly style: ExecutionStyle;
+    };
+    readonly action_type: string;
+    readonly intent_id: string;
+    readonly intent_hash: string;
+    readonly decision_id: string | null;
+    readonly dossier_id: string | null;
+    readonly verdict: string | null;
+    readonly grant_id: string | null;
+    /** The step's result: an outcome, or `CLAIMED` for a presented permit. */
+    readonly outcome: ExecutionOutcome | "CLAIMED";
+    readonly executed: boolean | null;
+    readonly reason: string | null;
+    readonly code: string | null;
+    /** True only when a grant governed the step: held, claimed or consumed. */
+    readonly governed: boolean;
+    readonly authority_state: AuthorityState;
+    readonly posture: FailurePosture;
+    /** What became of an action nobody could decide; null when the authority decided. */
+    readonly disposition: UnavailableDisposition | null;
+    readonly finalization: ExecutionFinalization | null;
+    readonly duration_ms: number;
+    readonly scope: {
+        readonly org_id: string;
+        readonly workspace_id: string;
+        readonly connection_id: string;
+        readonly connection_revision: string;
+        readonly environment: "sandbox" | "production";
+    } | null;
+}
+/**
+ * Where evidence lines go. A sink is told after the fact and may be slow or
+ * fail: the runner awaits it, ignores its errors, and never lets it change an
+ * outcome, because evidence is not authority.
+ */
+export interface ExecutorEvidenceSink {
+    emit(line: ExecutorEvidenceLine): void | Promise<void>;
+}
+/** The scope as a line carries it: the connection, never the company or store names. */
+export declare function evidenceScope(scope: ExecutorScope | null): ExecutorEvidenceLine["scope"];
+//# sourceMappingURL=ExecutorEvidence.d.ts.map

package/dist/execution/ExecutorEvidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutorEvidence.d.ts","sourceRoot":"","sources":["../../src/execution/ExecutorEvidence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpG,OAAO,KAAK,EACV,wBAAwB,EACxB,cAAc,EACd,aAAa,EACb,UAAU,EACX,MAAM,qBAAqB,CAAC;AAE7B,eAAO,MAAM,yBAAyB,mCAAmC,CAAC;AAE1E,yDAAyD;AACzD,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,cAAc,GAAG,YAAY,GAAG,gBAAgB,CAAC;AAErF;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,yBAAyB,CAAC;IACnD,QAAQ,CAAC,QAAQ,EAAE,OAAO,wBAAwB,CAAC;IACnD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;KAChC,CAAC;IACF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,cAAc,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,qFAAqF;IACrF,QAAQ,CAAC,WAAW,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACpD,QAAQ,CAAC,YAAY,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACpD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;QACrC,QAAQ,CAAC,WAAW,EAAE,SAAS,GAAG,YAAY,CAAC;KAChD,GAAG,IAAI,CAAC;CACV;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED,wFAAwF;AACxF,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,CASxF"}

package/dist/execution/ExecutorEvidence.js

@@ -0,0 +1,14 @@
+export const EXECUTOR_EVIDENCE_VERSION = "agent-safe.executor-evidence/1";
+/** The scope as a line carries it: the connection, never the company or store names. */
+export function evidenceScope(scope) {
+    if (scope === null)
+        return null;
+    return {
+        org_id: scope.orgId,
+        workspace_id: scope.workspaceId,
+        connection_id: scope.connectionId,
+        connection_revision: scope.connectionRevision,
+        environment: scope.environment,
+    };
+}
+//# sourceMappingURL=ExecutorEvidence.js.map

package/dist/execution/ExecutorEvidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutorEvidence.js","sourceRoot":"","sources":["../../src/execution/ExecutorEvidence.ts"],"names":[],"mappings":"AAUA,MAAM,CAAC,MAAM,yBAAyB,GAAG,gCAAgC,CAAC;AA6D1E,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,KAA2B;IACvD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,KAAK;QACnB,YAAY,EAAE,KAAK,CAAC,WAAW;QAC/B,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,mBAAmB,EAAE,KAAK,CAAC,kBAAkB;QAC7C,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;AACJ,CAAC"}