@fabricorg/platform-host 7.5.0 → 8.0.0

package/dist/index.d.ts

@@ -1,193 +1,194 @@
-import { ActorType, ActionId, ActionStatus, EvidencePacketReference, AgentActionRoute, AgentActionRiskTier, MutationFootprint, ExecutionPrincipal, GovernanceRuntimeEvidence, PolicyOutcome, AssetEventEnvelope, ExecutionAttestation, ExternalReconciliation, PolicyObligation, PolicyObligationStatus, ModuleRegistry, ActionDefinition, AdapterImplementation, AdapterCircuitBreakerProvider, FabricRuntimeServices, AgentActionPolicyEvaluator, MutationGovernanceResolver, RuntimePolicyDefinition } from '@fabricorg/platform';
-export { canonicalJson } from '@fabricorg/platform';
-import { AssemblyLockfile } from '@fabricorg/assembly';
-
+import { ActionDefinition, ActionId, ActionStatus, ActorType, AdapterCircuitBreakerProvider, AdapterImplementation, AgentActionPolicyEvaluator, AgentActionRiskTier, AgentActionRoute, AssetEventEnvelope, EvidencePacketReference, ExecutionAttestation, ExecutionPrincipal, ExternalReconciliation, FabricRuntimeServices, GovernanceRuntimeEvidence, ModuleRegistry, MutationFootprint, MutationGovernanceResolver, PolicyObligation, PolicyObligationStatus, PolicyOutcome, RuntimePolicyDefinition, canonicalJson } from "@fabricorg/platform";
+import { AssemblyLockfile } from "@fabricorg/assembly";
+//#region src/observability.d.ts
 /** Version of the vendor-neutral health/readiness contract. */
-declare const PLATFORM_HOST_HEALTH_CONTRACT_VERSION: 1;
+export declare const PLATFORM_HOST_HEALTH_CONTRACT_VERSION: 1;
 /**
  * Stable metric names. Adapters may translate these names to a vendor's
  * naming convention, but applications should not derive names from labels.
  */
-declare const PLATFORM_HOST_METRIC_NAMES: {
-    readonly workerCyclesStarted: "fabric.platform.worker.cycles.started";
-    readonly workerCyclesCompleted: "fabric.platform.worker.cycles.completed";
-    readonly workerCyclesFailed: "fabric.platform.worker.cycles.failed";
-    readonly invocationSubmitted: "fabric.platform.invocation.submitted";
-    readonly invocationAdmissionRefused: "fabric.platform.invocation.admission_refused";
-    readonly invocationExecutionStarted: "fabric.platform.invocation.execution_started";
-    readonly invocationLeaseClaimed: "fabric.platform.invocation.lease_claimed";
-    readonly invocationCompleted: "fabric.platform.invocation.completed";
-    readonly invocationFailed: "fabric.platform.invocation.failed";
-    readonly invocationPolicyBlocked: "fabric.platform.invocation.policy_blocked";
-    readonly invocationValidationFailed: "fabric.platform.invocation.validation_failed";
-    readonly invocationApprovalWaited: "fabric.platform.invocation.approval_waited";
-    readonly invocationReconciliationRequired: "fabric.platform.invocation.reconciliation_required";
-    readonly outboxRelayCyclesStarted: "fabric.platform.outbox.relay_cycles.started";
-    readonly outboxRelayCyclesCompleted: "fabric.platform.outbox.relay_cycles.completed";
-    readonly outboxRelayCyclesFailed: "fabric.platform.outbox.relay_cycles.failed";
-    readonly outboxLeaseClaimed: "fabric.platform.outbox.lease_claimed";
-    readonly outboxPublished: "fabric.platform.outbox.published";
-    readonly outboxFailed: "fabric.platform.outbox.failed";
-    readonly outboxDeadLettered: "fabric.platform.outbox.dead_lettered";
-    readonly outboxRequeued: "fabric.platform.outbox.requeued";
-    readonly outboxRequeueRefused: "fabric.platform.outbox.requeue_refused";
-    readonly invocationBacklog: "fabric.platform.invocation.backlog";
-    readonly invocationRunning: "fabric.platform.invocation.running";
-    readonly invocationExpiredLeases: "fabric.platform.invocation.expired_leases";
-    readonly invocationApprovalWaits: "fabric.platform.invocation.approval_waits";
-    readonly invocationReconciliationRequiredGauge: "fabric.platform.invocation.reconciliation_required.count";
-    readonly outboxBacklog: "fabric.platform.outbox.backlog";
-    readonly outboxExpiredLeases: "fabric.platform.outbox.expired_leases";
-    readonly outboxDeadLetters: "fabric.platform.outbox.dead_letters";
+export declare const PLATFORM_HOST_METRIC_NAMES: {
+  readonly workerCyclesStarted: "fabric.platform.worker.cycles.started";
+  readonly workerCyclesCompleted: "fabric.platform.worker.cycles.completed";
+  readonly workerCyclesFailed: "fabric.platform.worker.cycles.failed";
+  readonly invocationSubmitted: "fabric.platform.invocation.submitted";
+  readonly invocationAdmissionRefused: "fabric.platform.invocation.admission_refused";
+  readonly invocationExecutionStarted: "fabric.platform.invocation.execution_started";
+  readonly invocationLeaseClaimed: "fabric.platform.invocation.lease_claimed";
+  readonly invocationCompleted: "fabric.platform.invocation.completed";
+  readonly invocationFailed: "fabric.platform.invocation.failed";
+  readonly invocationPolicyBlocked: "fabric.platform.invocation.policy_blocked";
+  readonly invocationValidationFailed: "fabric.platform.invocation.validation_failed";
+  readonly invocationApprovalWaited: "fabric.platform.invocation.approval_waited";
+  readonly invocationReconciliationRequired: "fabric.platform.invocation.reconciliation_required";
+  readonly adapterEvidenceRefused: "fabric.platform.invocation.adapter_evidence_refused";
+  readonly outboxRelayCyclesStarted: "fabric.platform.outbox.relay_cycles.started";
+  readonly outboxRelayCyclesCompleted: "fabric.platform.outbox.relay_cycles.completed";
+  readonly outboxRelayCyclesFailed: "fabric.platform.outbox.relay_cycles.failed";
+  readonly outboxLeaseClaimed: "fabric.platform.outbox.lease_claimed";
+  readonly outboxPublished: "fabric.platform.outbox.published";
+  readonly outboxFailed: "fabric.platform.outbox.failed";
+  readonly outboxDeadLettered: "fabric.platform.outbox.dead_lettered";
+  readonly outboxRequeued: "fabric.platform.outbox.requeued";
+  readonly outboxRequeueRefused: "fabric.platform.outbox.requeue_refused";
+  readonly invocationBacklog: "fabric.platform.invocation.backlog";
+  readonly invocationRunning: "fabric.platform.invocation.running";
+  readonly invocationExpiredLeases: "fabric.platform.invocation.expired_leases";
+  readonly invocationApprovalWaits: "fabric.platform.invocation.approval_waits";
+  readonly invocationReconciliationRequiredGauge: "fabric.platform.invocation.reconciliation_required.count";
+  readonly outboxBacklog: "fabric.platform.outbox.backlog";
+  readonly outboxExpiredLeases: "fabric.platform.outbox.expired_leases";
+  readonly outboxDeadLetters: "fabric.platform.outbox.dead_letters";
 };
-type PlatformHostMetricName = (typeof PLATFORM_HOST_METRIC_NAMES)[keyof typeof PLATFORM_HOST_METRIC_NAMES];
-type PlatformHostTelemetryEventName = "worker.cycle.started" | "worker.cycle.completed" | "worker.cycle.failed" | "invocation.submitted" | "invocation.admission_refused" | "invocation.execution_started" | "invocation.lease_claimed" | "invocation.completed" | "invocation.failed" | "invocation.policy_blocked" | "invocation.validation_failed" | "invocation.approval_waited" | "invocation.reconciliation_required" | "outbox.relay.started" | "outbox.relay.completed" | "outbox.relay.failed" | "outbox.lease_claimed" | "outbox.published" | "outbox.failed" | "outbox.dead_lettered" | "outbox.requeued" | "outbox.requeue_refused";
-type PlatformHostMetricType = "counter" | "gauge";
-type PlatformHostTelemetryAttribute = string | number | boolean;
-interface PlatformHostLifecycleTelemetry {
-    kind: "event";
-    name: PlatformHostTelemetryEventName;
-    metricName: PlatformHostMetricName;
-    metricType: "counter";
-    occurredAt: Date;
-    tenantId?: string;
-    spaceId?: string;
-    attributes?: Readonly<Record<string, PlatformHostTelemetryAttribute>>;
-}
-interface PlatformHostMetricTelemetry {
-    kind: "metric";
-    name: PlatformHostMetricName;
-    metricType: PlatformHostMetricType;
-    value: number;
-    observedAt: Date;
-    tenantId?: string;
-    spaceId?: string;
-}
-type PlatformHostTelemetryRecord = PlatformHostLifecycleTelemetry | PlatformHostMetricTelemetry;
-type PlatformHostTelemetryHook = (record: PlatformHostTelemetryRecord) => void | Promise<void>;
+export type PlatformHostMetricName = (typeof PLATFORM_HOST_METRIC_NAMES)[keyof typeof PLATFORM_HOST_METRIC_NAMES];
+export type PlatformHostTelemetryEventName = "worker.cycle.started" | "worker.cycle.completed" | "worker.cycle.failed" | "invocation.submitted" | "invocation.admission_refused" | "invocation.execution_started" | "invocation.lease_claimed" | "invocation.completed" | "invocation.failed" | "invocation.policy_blocked" | "invocation.validation_failed" | "invocation.approval_waited" | "invocation.reconciliation_required" | "invocation.adapter_evidence_refused" | "outbox.relay.started" | "outbox.relay.completed" | "outbox.relay.failed" | "outbox.lease_claimed" | "outbox.published" | "outbox.failed" | "outbox.dead_lettered" | "outbox.requeued" | "outbox.requeue_refused";
+export type PlatformHostMetricType = "counter" | "gauge";
+export type PlatformHostTelemetryAttribute = string | number | boolean;
+export interface PlatformHostLifecycleTelemetry {
+  kind: "event";
+  name: PlatformHostTelemetryEventName;
+  metricName: PlatformHostMetricName;
+  metricType: "counter";
+  occurredAt: Date;
+  tenantId?: string;
+  spaceId?: string;
+  attributes?: Readonly<Record<string, PlatformHostTelemetryAttribute>>;
+}
+export interface PlatformHostMetricTelemetry {
+  kind: "metric";
+  name: PlatformHostMetricName;
+  metricType: PlatformHostMetricType;
+  value: number;
+  observedAt: Date;
+  tenantId?: string;
+  spaceId?: string;
+}
+export type PlatformHostTelemetryRecord = PlatformHostLifecycleTelemetry | PlatformHostMetricTelemetry;
+export type PlatformHostTelemetryHook = (record: PlatformHostTelemetryRecord) => void | Promise<void>;
 /**
  * A deliberately small sink contract. No OpenTelemetry, Prometheus, or
  * vendor SDK is required by Platform Host.
  */
-type PlatformHostTelemetry = PlatformHostTelemetryHook | {
-    record: PlatformHostTelemetryHook;
+export type PlatformHostTelemetry = PlatformHostTelemetryHook | {
+  record: PlatformHostTelemetryHook;
 };
-type PlatformHostTelemetryInput = Omit<PlatformHostLifecycleTelemetry, "occurredAt" | "metricType"> & {
-    occurredAt?: Date;
+export type PlatformHostTelemetryInput = Omit<PlatformHostLifecycleTelemetry, "occurredAt" | "metricType"> & {
+  occurredAt?: Date;
 } | Omit<PlatformHostMetricTelemetry, "observedAt"> & {
-    observedAt?: Date;
+  observedAt?: Date;
 };
 /**
  * Telemetry is best effort and must never change governed mutation behavior.
  * Promise-returning hooks are detached and rejected hooks are swallowed.
  */
-declare function emitPlatformHostTelemetry(telemetry: PlatformHostTelemetry | undefined, input: PlatformHostTelemetryInput): void;
-interface PlatformHostHealthQuery {
+export declare function emitPlatformHostTelemetry(telemetry: PlatformHostTelemetry | undefined, input: PlatformHostTelemetryInput): void;
+export interface PlatformHostHealthQuery {
+  tenantId?: string;
+  spaceId?: string;
+  now: Date;
+}
+export interface PlatformHostHealthCounts {
+  invocationBacklog: number;
+  invocationRunning: number;
+  invocationExpiredLeases: number;
+  invocationApprovalWaits: number;
+  invocationReconciliationRequired: number;
+  outboxBacklog: number;
+  outboxExpiredLeases: number;
+  outboxDeadLetters: number;
+}
+export interface PlatformHostWorkerHealthInput {
+  lastHeartbeatAt: Date;
+  staleAfterMs: number;
+}
+export interface PlatformHostHealthOptions<TDb> {
+  store: PlatformHostStore<TDb>;
+  tenantId?: string;
+  spaceId?: string;
+  now?: () => Date;
+  /**
+   * Worker liveness is supplied by the deployment's supervisor or telemetry
+   * bridge. Only aggregate healthy/stale counts are returned.
+   */
+  workers?: readonly PlatformHostWorkerHealthInput[];
+  telemetry?: PlatformHostTelemetry;
+}
+export interface PlatformHostHealthStore<TDb> extends RecoverablePlatformHostStore<TDb> {
+  getHealthCounts(input: PlatformHostHealthQuery): Promise<PlatformHostHealthCounts>;
+}
+export type PlatformHostHealthStatus = "healthy" | "degraded" | "unhealthy";
+export interface PlatformHostHealthSnapshot {
+  contractVersion: typeof PLATFORM_HOST_HEALTH_CONTRACT_VERSION;
+  generatedAt: Date;
+  scope: {
     tenantId?: string;
     spaceId?: string;
-    now: Date;
-}
-interface PlatformHostHealthCounts {
-    invocationBacklog: number;
-    invocationRunning: number;
-    invocationExpiredLeases: number;
-    invocationApprovalWaits: number;
-    invocationReconciliationRequired: number;
-    outboxBacklog: number;
-    outboxExpiredLeases: number;
-    outboxDeadLetters: number;
-}
-interface PlatformHostWorkerHealthInput {
-    lastHeartbeatAt: Date;
-    staleAfterMs: number;
-}
-interface PlatformHostHealthOptions<TDb> {
-    store: PlatformHostStore<TDb>;
-    tenantId?: string;
-    spaceId?: string;
-    now?: () => Date;
-    /**
-     * Worker liveness is supplied by the deployment's supervisor or telemetry
-     * bridge. Only aggregate healthy/stale counts are returned.
-     */
-    workers?: readonly PlatformHostWorkerHealthInput[];
-    telemetry?: PlatformHostTelemetry;
-}
-interface PlatformHostHealthStore<TDb> extends RecoverablePlatformHostStore<TDb> {
-    getHealthCounts(input: PlatformHostHealthQuery): Promise<PlatformHostHealthCounts>;
-}
-type PlatformHostHealthStatus = "healthy" | "degraded" | "unhealthy";
-interface PlatformHostHealthSnapshot {
-    contractVersion: typeof PLATFORM_HOST_HEALTH_CONTRACT_VERSION;
-    generatedAt: Date;
-    scope: {
-        tenantId?: string;
-        spaceId?: string;
-    };
-    dataAvailable: boolean;
-    status: PlatformHostHealthStatus;
-    readiness: {
-        ready: boolean;
-        reasonCodes: readonly PlatformHostReadinessReason[];
-    };
-    workers: {
-        reported: number;
-        healthy: number;
-        stale: number;
-    };
-    invocations: {
-        backlog: number;
-        running: number;
-        expiredLeases: number;
-        approvalWaits: number;
-        reconciliationRequired: number;
-    };
-    outbox: {
-        backlog: number;
-        expiredLeases: number;
-        deadLetters: number;
-    };
-}
-type PlatformHostReadinessReason = "health_source_unavailable" | "workers_stale" | "invocation_expired_leases" | "outbox_expired_leases" | "outbox_dead_letters" | "reconciliation_required";
+  };
+  dataAvailable: boolean;
+  status: PlatformHostHealthStatus;
+  readiness: {
+    ready: boolean;
+    reasonCodes: readonly PlatformHostReadinessReason[];
+  };
+  workers: {
+    reported: number;
+    healthy: number;
+    stale: number;
+  };
+  invocations: {
+    backlog: number;
+    running: number;
+    expiredLeases: number;
+    approvalWaits: number;
+    reconciliationRequired: number;
+  };
+  outbox: {
+    backlog: number;
+    expiredLeases: number;
+    deadLetters: number;
+  };
+}
+export type PlatformHostReadinessReason = "health_source_unavailable" | "workers_stale" | "invocation_expired_leases" | "outbox_expired_leases" | "outbox_dead_letters" | "reconciliation_required";
 /**
  * Read tenant/space-scoped operational counts without returning invocation,
  * actor, parameter, error, event, or adapter data.
  */
-declare function getPlatformHostHealthSnapshot<TDb>(options: PlatformHostHealthOptions<TDb>): Promise<PlatformHostHealthSnapshot>;
-
+export declare function getPlatformHostHealthSnapshot<TDb>(options: PlatformHostHealthOptions<TDb>): Promise<PlatformHostHealthSnapshot>;
+//#endregion
+//#region src/types.d.ts
 /** Durable Host lifecycle generation, independent from the npm package version. */
-declare const PLATFORM_HOST_CONTRACT_VERSION: 2;
-type InvocationSource = "ui" | "api" | "agent" | "worker" | "system" | (string & {});
-type NamespacedAttributes = Record<string, string>;
-interface InvocationProvenance {
-    source: InvocationSource;
-    correlationId: string;
-    causationId?: string;
-    traceAttributes?: NamespacedAttributes;
-    auditAttributes?: NamespacedAttributes;
-}
-type AuthorizationGoverningMoment = "capture" | "execution" | "both";
-interface AuthorizationBinding {
-    id: string;
-    tenantId: string;
-    actorId: string;
-    actionId: string;
-    parameterDigest: string;
-    resourceScope?: string;
-    capturedAt: string;
-    expiresAt?: string;
-    governingMoment: AuthorizationGoverningMoment;
-}
-interface IdempotencyConflict {
-    code: "IDEMPOTENCY_CONFLICT";
-    idempotencyKey: string;
-    existingInvocationId: string;
-    reasons: Array<"actor" | "authority_binding" | "action_version" | "parameters">;
-}
-declare class IdempotencyConflictError extends Error {
-    readonly conflict: IdempotencyConflict;
-    readonly code: "IDEMPOTENCY_CONFLICT";
-    constructor(conflict: IdempotencyConflict);
+export declare const PLATFORM_HOST_CONTRACT_VERSION: 2;
+export type InvocationSource = "ui" | "api" | "agent" | "worker" | "system" | (string & {});
+export type NamespacedAttributes = Record<string, string>;
+export interface InvocationProvenance {
+  source: InvocationSource;
+  correlationId: string;
+  causationId?: string;
+  traceAttributes?: NamespacedAttributes;
+  auditAttributes?: NamespacedAttributes;
+}
+export type AuthorizationGoverningMoment = "capture" | "execution" | "both";
+export interface AuthorizationBinding {
+  id: string;
+  tenantId: string;
+  actorId: string;
+  actionId: string;
+  parameterDigest: string;
+  resourceScope?: string;
+  capturedAt: string;
+  expiresAt?: string;
+  governingMoment: AuthorizationGoverningMoment;
+}
+export interface IdempotencyConflict {
+  code: "IDEMPOTENCY_CONFLICT";
+  idempotencyKey: string;
+  existingInvocationId: string;
+  reasons: Array<"actor" | "authority_binding" | "action_version" | "parameters">;
+}
+export declare class IdempotencyConflictError extends Error {
+  readonly conflict: IdempotencyConflict;
+  readonly code: "IDEMPOTENCY_CONFLICT";
+  constructor(conflict: IdempotencyConflict);
 }
 /**
  * Why `submitAction` did not admit a submission of an action that declares
@@ -199,7 +200,7 @@ declare class IdempotencyConflictError extends Error {
  * JSON-data object Host could copy at submission (a Proxy, a function, a
  * Date, a typed array or SharedArrayBuffer, a cycle, a getter that throws).
  */
-type ActionAdmissionRefusal = "refused" | "failed" | "timed_out" | "invalid_decision" | "invalid_parameters";
+export type ActionAdmissionRefusal = "refused" | "failed" | "timed_out" | "invalid_decision" | "invalid_parameters";
 /**
  * Thrown by `submitAction` when a declared admission check did not admit the
  * submission. Host wrote nothing for it: no invocation, idempotency key,
@@ -207,17 +208,17 @@ type ActionAdmissionRefusal = "refused" | "failed" | "timed_out" | "invalid_deci
  * refusal and, for `refused`, the check's code; never a submitted value or
  * anything the check threw.
  */
-declare class ActionAdmissionError extends Error {
-    readonly actionId: string;
-    readonly refusal: ActionAdmissionRefusal;
-    /** The check's own code, present only for `refused`. */
-    readonly refusalCode?: string | undefined;
-    readonly code: "ACTION_ADMISSION_REFUSED";
-    constructor(actionId: string, refusal: ActionAdmissionRefusal, 
-    /** The check's own code, present only for `refused`. */
-    refusalCode?: string | undefined);
-}
-type ExternalCompletionRefusal = "still_executing" | "not_found" | "not_awaiting" | "immediate_contract" | "reference_mismatch" | "provider_mismatch" | "invalid_completion" | "result_invalid" | "redaction_failed";
+export declare class ActionAdmissionError extends Error {
+  readonly actionId: string;
+  readonly refusal: ActionAdmissionRefusal;
+  /** The check's own code, present only for `refused`. */
+  readonly refusalCode?: string | undefined;
+  readonly code: "ACTION_ADMISSION_REFUSED";
+  constructor(actionId: string, refusal: ActionAdmissionRefusal,
+  /** The check's own code, present only for `refused`. */
+  refusalCode?: string | undefined);
+}
+export type ExternalCompletionRefusal = "still_executing" | "not_found" | "not_awaiting" | "immediate_contract" | "reference_mismatch" | "provider_mismatch" | "invalid_completion" | "result_invalid" | "redaction_failed";
 /**
  * Why a completion was not applied, typed so a webhook handler can answer
  * the external system correctly: `retryable` means the invocation is still
@@ -227,147 +228,162 @@ type ExternalCompletionRefusal = "still_executing" | "not_found" | "not_awaiting
  * `redaction_failed` means completion result or error-text redaction failed before writes;
  * it is not retryable.
  */
-declare class ExternalCompletionError extends Error {
-    readonly refusal: ExternalCompletionRefusal;
-    readonly code: "EXTERNAL_COMPLETION_REFUSED";
-    constructor(refusal: ExternalCompletionRefusal, message: string);
-    get retryable(): boolean;
-}
-interface PendingAssetEvent {
-    eventType: string;
-    subjectType: string;
-    subjectId: string;
-    payload: unknown;
-    eventSchemaVersion?: number;
-}
-interface ActionInvocationRecord {
-    id: string;
-    tenantId: string;
-    spaceId: string;
-    actionId: ActionId;
-    actionVersion: number;
-    actorId: string;
-    actorType: ActorType;
-    status: ActionStatus;
-    parameters: Record<string, unknown>;
-    result: Record<string, unknown>;
-    correlationId: string;
-    causationId?: string;
-    idempotencyKey?: string;
-    parameterDigest?: string;
-    parameterDigestAlgorithm?: "fabric-canonical-json-sha256-v1";
-    idempotencyActorId?: string;
-    idempotencyAuthorizationBindingId?: string;
-    provenance?: Omit<InvocationProvenance, "traceAttributes">;
-    authorizationBinding?: AuthorizationBinding;
-    executionReason?: ActionExecutionReason;
-    authorizationReconciliation?: AuthorizationReconciliationOutcome;
-    /** Durable evidence when an adapter returned an ambiguous outcome requiring reconciliation. */
-    adapterReconciliation?: AdapterReconciliationOutcome;
-    /**
-     * A handoff the host is waiting on. While present the invocation is
-     * `running` without a lease: it is not stuck, it is somebody else's turn,
-     * and the recovery worker must not re-execute it.
-     */
-    pendingCompletion?: PendingExternalCompletion;
-    /** The completion an external system delivered, kept so a repeat is recognised and a contradiction is caught. */
-    externalCompletion?: RecordedExternalCompletion;
-    /** Opaque, non-secret reference used to revalidate delegated execution authority. */
-    authorizationBindingId?: string;
-    attemptCount: number;
-    leaseOwner?: string;
-    leaseExpiresAt?: Date;
-    /** Monotonic claim generation used to reject writes from expired workers. */
-    leaseToken?: number;
-    hitlRoute?: AgentActionRoute;
-    hitlRiskTier?: AgentActionRiskTier;
-    hitlReason?: string;
-    hitlPolicyVersion?: string;
-    approvalDecision?: PersistedActionApprovalDecision;
-    mutationFootprint?: MutationFootprint;
-    executionPrincipal?: ExecutionPrincipal;
-    runtimeEvidence?: GovernanceRuntimeEvidence;
-    /**
-     * When `submitAction` admitted the submission through the action's
-     * `admitSubmission` check, set on creation and never patched. Host refuses
-     * to execute an invocation of an action that declares the check when this
-     * is absent, and passes it to the handler as `ActionContext.admittedAt`.
-     */
-    admittedAt?: Date;
-    error?: string;
-    createdAt: Date;
-    updatedAt: Date;
-}
-interface AuthorizationReconciliationOutcome {
-    kind: "authorization_expired" | "authorization_denied" | "authorization_missing_capture_evidence";
-    governingMoment: AuthorizationGoverningMoment;
-    executionReason: ActionExecutionReason;
-    authorizationBindingId?: string;
-    provenance?: Omit<InvocationProvenance, "traceAttributes">;
-    message: string;
-}
-interface HitlDecisionEvidence {
-    route: AgentActionRoute;
-    riskTier: AgentActionRiskTier;
-    reason: string;
-    policyVersion?: string;
-    evaluatedAt: Date;
-}
-interface ActionApprovalDecision {
-    approved: boolean;
-    approverId: string;
-    approverType: ActorType;
-    reason?: string;
-    editsReference?: string;
-    decidedAt?: Date;
-}
-interface PersistedActionApprovalDecision extends Omit<ActionApprovalDecision, "decidedAt"> {
-    decidedAt: Date;
-}
-interface PolicyEvaluationRecord {
-    id: string;
-    actionInvocationId: string;
-    tenantId: string;
-    spaceId: string;
-    outcome: PolicyOutcome;
-    createdAt: Date;
-}
-interface PolicyObligationRecord extends PolicyObligation {
-    actionInvocationId: string;
-    tenantId: string;
-    spaceId: string;
-    createdAt: Date;
-    updatedAt: Date;
-}
-interface ExecutionAttestationRecord extends ExecutionAttestation {
-    id: string;
-    actionInvocationId: string;
-    tenantId: string;
-    spaceId: string;
-    adapterInvocationId?: string;
-    recordedAt: Date;
-}
-interface ExternalReconciliationRecord extends ExternalReconciliation {
-    id: string;
-    actionInvocationId: string;
-    tenantId: string;
-    spaceId: string;
-}
-interface PendingExternalCompletion {
-    provider: string;
-    adapterType: string;
-    operation: string;
-    adapterInvocationId: string;
-    externalReference: string;
-    acceptedAt: Date;
-    /** Past this instant the host moves the invocation to reconciliation. */
-    dueAt?: Date;
-    /**
-     * Set when the invocation finished executing and parked. A handoff is
-     * recorded before the remaining steps run, so until this is set a
-     * completion has nothing settled to settle into; it is asked to retry.
-     */
-    parkedAt?: Date;
+export declare class ExternalCompletionError extends Error {
+  readonly refusal: ExternalCompletionRefusal;
+  readonly code: "EXTERNAL_COMPLETION_REFUSED";
+  constructor(refusal: ExternalCompletionRefusal, message: string);
+  get retryable(): boolean;
+}
+export interface PendingAssetEvent {
+  eventType: string;
+  subjectType: string;
+  subjectId: string;
+  payload: unknown;
+  eventSchemaVersion?: number;
+}
+export interface ActionInvocationRecord {
+  id: string;
+  tenantId: string;
+  spaceId: string;
+  actionId: ActionId;
+  actionVersion: number;
+  actorId: string;
+  actorType: ActorType;
+  status: ActionStatus;
+  parameters: Record<string, unknown>;
+  result: Record<string, unknown>;
+  correlationId: string;
+  causationId?: string;
+  idempotencyKey?: string;
+  parameterDigest?: string;
+  parameterDigestAlgorithm?: "fabric-canonical-json-sha256-v1";
+  idempotencyActorId?: string;
+  idempotencyAuthorizationBindingId?: string;
+  provenance?: Omit<InvocationProvenance, "traceAttributes">;
+  authorizationBinding?: AuthorizationBinding;
+  executionReason?: ActionExecutionReason;
+  authorizationReconciliation?: AuthorizationReconciliationOutcome;
+  /** Durable evidence when an adapter returned an ambiguous outcome requiring reconciliation. */
+  adapterReconciliation?: AdapterReconciliationOutcome;
+  /**
+   * Transition Host validated for an idempotent after_adapters action, saved
+   * after handler/result/event validation inside a mutation transaction, or before
+   * the handler otherwise. Supports recovered StateTransitioned emission and is
+   * retained as evidence after completion.
+   */
+  pendingStateTransition?: {
+    entityType: string;
+    entityId: string;
+    fromState: string;
+    toState: string;
+  };
+  /**
+   * A handoff the host is waiting on. While present the invocation is
+   * `running` without a lease: it is not stuck, it is somebody else's turn,
+   * and the recovery worker must not re-execute it.
+   */
+  pendingCompletion?: PendingExternalCompletion;
+  /** The completion an external system delivered, kept so a repeat is recognised and a contradiction is caught. */
+  externalCompletion?: RecordedExternalCompletion;
+  /** Opaque, non-secret reference used to revalidate delegated execution authority. */
+  authorizationBindingId?: string;
+  /** Worker claims including the first; approval acceptance sets a minimum of 1. */
+  attemptCount: number;
+  leaseOwner?: string;
+  leaseExpiresAt?: Date;
+  /** Monotonic claim generation used to reject writes from expired workers. */
+  leaseToken?: number;
+  hitlRoute?: AgentActionRoute;
+  hitlRiskTier?: AgentActionRiskTier;
+  hitlReason?: string;
+  hitlPolicyVersion?: string;
+  approvalDecision?: PersistedActionApprovalDecision;
+  mutationFootprint?: MutationFootprint;
+  executionPrincipal?: ExecutionPrincipal;
+  runtimeEvidence?: GovernanceRuntimeEvidence;
+  /**
+   * When `submitAction` admitted the submission through the action's
+   * `admitSubmission` check, set on creation and never patched. Host refuses
+   * to execute an invocation of an action that declares the check when this
+   * is absent, and passes it to the handler as `ActionContext.admittedAt`.
+   */
+  admittedAt?: Date;
+  error?: string;
+  createdAt: Date;
+  updatedAt: Date;
+}
+export interface AuthorizationReconciliationOutcome {
+  kind: "authorization_expired" | "authorization_denied" | "authorization_missing_capture_evidence";
+  governingMoment: AuthorizationGoverningMoment;
+  executionReason: ActionExecutionReason;
+  authorizationBindingId?: string;
+  provenance?: Omit<InvocationProvenance, "traceAttributes">;
+  message: string;
+}
+export interface HitlDecisionEvidence {
+  route: AgentActionRoute;
+  riskTier: AgentActionRiskTier;
+  reason: string;
+  policyVersion?: string;
+  evaluatedAt: Date;
+}
+export interface ActionApprovalDecision {
+  approved: boolean;
+  approverId: string;
+  approverType: ActorType;
+  reason?: string;
+  editsReference?: string;
+  decidedAt?: Date;
+}
+export interface PersistedActionApprovalDecision extends Omit<ActionApprovalDecision, "decidedAt"> {
+  decidedAt: Date;
+}
+export interface PolicyEvaluationRecord {
+  id: string;
+  actionInvocationId: string;
+  tenantId: string;
+  spaceId: string;
+  outcome: PolicyOutcome;
+  createdAt: Date;
+}
+export interface PolicyObligationRecord extends PolicyObligation {
+  actionInvocationId: string;
+  tenantId: string;
+  spaceId: string;
+  createdAt: Date;
+  updatedAt: Date;
+}
+export interface ExecutionAttestationRecord extends ExecutionAttestation {
+  id: string;
+  actionInvocationId: string;
+  tenantId: string;
+  spaceId: string;
+  adapterInvocationId?: string;
+  recordedAt: Date;
+}
+export interface ExternalReconciliationRecord extends ExternalReconciliation {
+  id: string;
+  actionInvocationId: string;
+  tenantId: string;
+  spaceId: string;
+}
+export interface PendingExternalCompletion {
+  provider: string;
+  adapterType: string;
+  operation: string;
+  adapterInvocationId: string;
+  externalReference: string;
+  acceptedAt: Date;
+  /** Past this instant the host moves the invocation to reconciliation. */
+  dueAt?: Date;
+  /**
+   * Set when the invocation finished executing and parked. A handoff is
+   * recorded before the remaining steps run, so until this is set a
+   * completion has nothing settled to settle into; it is asked to retry.
+   */
+  parkedAt?: Date;
+  /** Set with the overdue sweep verdict; does not prove execution parked. */
+  overdueAt?: Date;
 }
 /**
  * What an external system reports when it finishes work the host accepted.
@@ -377,109 +393,180 @@ interface PendingExternalCompletion {
  * refused, because completing the wrong invocation is worse than dropping a
  * callback.
  */
-interface ExternalCompletion {
-    externalReference: string;
-    outcome: "completed" | "failed";
-    /** Merged over the handler's result on completion. */
-    result?: Record<string, unknown>;
-    error?: string;
-    provider?: string;
-    evidenceReferences?: EvidencePacketReference[];
-    observedAt: Date | string;
-}
-interface RecordedExternalCompletion extends ExternalCompletion {
-    recordedAt: Date;
-    /**
-     * Canonical digest of provider, reference, outcome, result, error, and
-     * evidence. A repeat with the same digest is the same news; a repeat with
-     * the same outcome and a different digest is changed evidence, and is a
-     * contradiction like a flipped outcome. Observation time is left out,
-     * since a redelivery legitimately carries a new one.
-     */
-    digest: string;
-}
-interface ReconcileOverdueCompletionsInput {
-    tenantId?: string;
-    spaceId?: string;
-    limit?: number;
-    now?: Date;
-}
-type AdapterInvocationStatus = "running" | "succeeded" | "failed" | "ambiguous";
-interface AdapterReconciliationOutcome {
-    kind: "adapter_outcome_ambiguous";
-    adapterType: string;
-    operation: string;
-    vendor: string;
-    adapterInvocationId: string;
-    reason?: string;
-    /** Opaque, non-secret reference to external operation state for reconciliation. */
-    externalReference?: string;
-    message: string;
-}
-interface AdapterInvocationRecord {
-    id: string;
-    actionInvocationId: string;
-    tenantId: string;
-    spaceId: string;
-    adapterType: string;
-    operation: string;
-    vendor: string;
-    status: AdapterInvocationStatus;
-    input: Record<string, unknown>;
-    output?: Record<string, unknown>;
-    error?: string;
-    attempt: number;
-    createdAt: Date;
-    updatedAt: Date;
-}
-interface CreateActionInvocationInput extends Omit<ActionInvocationRecord, "createdAt" | "updatedAt" | "attemptCount" | "leaseOwner" | "leaseExpiresAt" | "leaseToken"> {
+export interface ExternalCompletion {
+  externalReference: string;
+  outcome: "completed" | "failed";
+  /** Merged over the handler's result on completion. */
+  result?: Record<string, unknown>;
+  error?: string;
+  provider?: string;
+  evidenceReferences?: EvidencePacketReference[];
+  observedAt: Date | string;
+}
+export interface RecordedExternalCompletion extends ExternalCompletion {
+  recordedAt: Date;
+  /**
+   * Canonical digest of provider, reference, outcome, result, error, and
+   * evidence. A repeat with the same digest is the same news; a repeat with
+   * the same outcome and a different digest is changed evidence, and is a
+   * contradiction like a flipped outcome. Observation time is left out,
+   * since a redelivery legitimately carries a new one.
+   */
+  digest: string;
+}
+export interface ReconcileOverdueCompletionsInput {
+  tenantId?: string;
+  spaceId?: string;
+  limit?: number;
+  now?: Date;
+}
+export type AdapterInvocationStatus = "running" | "succeeded" | "failed" | "ambiguous";
+export interface AdapterReconciliationOutcome {
+  kind: "adapter_outcome_ambiguous";
+  adapterType: string;
+  operation: string;
+  vendor: string;
+  adapterInvocationId: string;
+  reason?: string;
+  /** Opaque, non-secret reference to external operation state for reconciliation. */
+  externalReference?: string;
+  message: string;
+}
+export interface AdapterInvocationRecord {
+  id: string;
+  actionInvocationId: string;
+  tenantId: string;
+  spaceId: string;
+  adapterType: string;
+  operation: string;
+  vendor: string;
+  status: AdapterInvocationStatus;
+  input: Record<string, unknown>;
+  output?: Record<string, unknown>;
+  error?: string;
+  /** Redacted checkpoint for replaying an ambiguous settlement without another provider call. */
+  reconciliation?: AdapterReconciliationOutcome & {
+    /** Original event subject, stored only for settlement recovery. */
+    adapterEventSubject?: {
+      subjectType: string;
+      subjectId: string;
+    };
+  };
+  attempt: number;
+  createdAt: Date;
+  updatedAt: Date;
 }
+export interface CreateActionInvocationInput extends Omit<ActionInvocationRecord, "createdAt" | "updatedAt" | "attemptCount" | "leaseOwner" | "leaseExpiresAt" | "leaseToken"> {}
 /** Scope of an adapter checkpoint within its owning action invocation. */
-interface AdapterInvocationScope {
-    tenantId: string;
-    spaceId: string;
+export interface AdapterInvocationScope {
+  tenantId: string;
+  spaceId: string;
+  actionInvocationId: string;
+}
+/** Authority for an adapter mutation; verdict evidence uses exact status/error equality. */
+export type AdapterInvocationWriteCondition = {
+  kind: "lease";
+  leaseOwner: string;
+  leaseToken: number;
+} | {
+  kind: "verdict";
+  status: Exclude<ActionInvocationRecord["status"], "pending" | "running" | "waiting_for_approval">;
+  error?: string;
+  /** Absent requires no recorded completion; a digest requires that same completion. */
+  externalCompletionDigest?: string;
+  /** Captured handoff row; other adapter rows need only status/error and row-status fencing.
+   * Omit to retain the conservative completion check for adapter writes. Parent enrichment
+   * compares the completion digest regardless of this member. */
+  completionAdapterInvocationId?: string;
+};
+/** Conditionally enrich this execution's settled parent without changing its status. */
+export interface UpdateSettledActionInvocationInput {
+  id: string;
+  tenantId: string;
+  spaceId: string;
+  condition: Extract<AdapterInvocationWriteCondition, {
+    kind: "verdict";
+  }>;
+  patch: Pick<ActionInvocationPatch, "error" | "adapterReconciliation">;
+}
+export type AdapterInvocationPatch = Partial<Pick<AdapterInvocationRecord, "status" | "output" | "error" | "attempt" | "updatedAt" | "reconciliation">>;
+export interface AdapterInvocationWriteInput {
+  scope: AdapterInvocationScope;
+  condition: AdapterInvocationWriteCondition;
+  /** Compare against the current row, inside the same atomic operation. */
+  expectedStatuses?: readonly AdapterInvocationRecord["status"][];
+  mutation: {
+    kind: "create";
+    record: AdapterInvocationRecord;
+  } | {
+    kind: "update";
+    id: string;
+    patch: AdapterInvocationPatch;
+  };
+}
+export interface PlatformHostStore<TDb> {
+  readonly db: TDb;
+  /**
+   * Run against the store's domain handle. This base seam does not promise a
+   * database transaction. Use `transactionWithEvents` when domain writes,
+   * canonical events, and invocation state must commit atomically.
+   */
+  transaction<TResult>(run: (db: TDb) => Promise<TResult>): Promise<TResult>;
+  createActionInvocation(input: CreateActionInvocationInput): Promise<ActionInvocationRecord>;
+  getActionInvocation(id: string, tenantId: string, spaceId: string): Promise<ActionInvocationRecord | undefined>;
+  updateActionInvocation(id: string, tenantId: string, spaceId: string, patch: ActionInvocationPatch): Promise<void>;
+  appendPolicyEvaluation(record: PolicyEvaluationRecord): Promise<void>;
+  createAdapterInvocation(record: AdapterInvocationRecord): Promise<void>;
+  /**
+   * Optional atomic parent-authorized adapter create/update. Lease authority
+   * requires a running parent with the supplied owner/token; verdict authority
+   * requires the exact parent status/error (undefined error equals no error).
+   * The completion digest guards the captured completionAdapterInvocationId;
+   * other rows retain status/error and expectedStatuses checks. Without a captured
+   * row ID the digest check applies conservatively to the mutation too.
+   * Match tenant, space and invocation on both rows, locking the parent before
+   * the adapter. Return false for a predicate miss, missing parent/row, or a
+   * duplicate create. Updates cannot move succeeded/ambiguous to running/failed,
+   * even when expectedStatuses is omitted. Creation must match input.scope.
+   * Transaction implementations recheck predicates at commit or retain locks.
+   * Host uses unchecked legacy writes when this capability is absent: custom
+   * stores without it do not protect adapter rows against stale workers.
+   */
+  writeAdapterInvocation?(input: AdapterInvocationWriteInput): Promise<boolean>;
+  /**
+   * Atomic scoped status/error/completion compare-and-set for post-verdict enrichment.
+   * Expected alongside writeAdapterInvocation. When absent, Host skips only parent
+   * enrichment and still attempts the remaining evidence writes. Refusal is telemetry;
+   * thrown errors join the evidence collector.
+   */
+  updateSettledActionInvocation?(input: UpdateSettledActionInvocationInput): Promise<boolean>;
+  /**
+   * Host supplies scope from its store-loaded invocation at adapter call sites.
+   * When supplied, stores must match tenant, space, and action invocation:
+   * an out-of-scope record returns undefined. Optional for compatibility with
+   * existing custom stores and direct callers; tenantIsolationChecks tests
+   * scoped read and write conformance.
+   */
+  getAdapterInvocation(id: string, scope?: AdapterInvocationScope): Promise<AdapterInvocationRecord | undefined>;
+  /**
+   * Match all three scope fields when supplied, changing nothing outside it
+   * (a not-found error is permitted). Host supplies scope as described above;
+   * optional only for compatibility with existing stores and direct callers.
+   */
+  updateAdapterInvocation(id: string, patch: Partial<Pick<AdapterInvocationRecord, "status" | "output" | "error" | "attempt" | "updatedAt" | "reconciliation">>, scope?: AdapterInvocationScope): Promise<void>;
+  appendEvent(event: AssetEventEnvelope): Promise<void>;
+  nextEventSequence(tenantId: string, spaceId: string): Promise<number>;
+  /**
+   * Return the state and invocation writer of the same event selected by
+   * getEntityState, scoped to this subject and tenant/space. Return undefined
+   * when that event or its invocation provenance is unavailable. Transaction
+   * implementations include pending events visible to getEntityState.
+   */
+  getEntityStateSource?(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<{
+    state: string;
     actionInvocationId: string;
-}
-interface PlatformHostStore<TDb> {
-    readonly db: TDb;
-    /**
-     * Run against the store's domain handle. This base seam does not promise a
-     * database transaction. Use `transactionWithEvents` when domain writes,
-     * canonical events, and invocation state must commit atomically.
-     */
-    transaction<TResult>(run: (db: TDb) => Promise<TResult>): Promise<TResult>;
-    createActionInvocation(input: CreateActionInvocationInput): Promise<ActionInvocationRecord>;
-    getActionInvocation(id: string, tenantId: string, spaceId: string): Promise<ActionInvocationRecord | undefined>;
-    updateActionInvocation(id: string, tenantId: string, spaceId: string, patch: ActionInvocationPatch): Promise<void>;
-    appendPolicyEvaluation(record: PolicyEvaluationRecord): Promise<void>;
-    createAdapterInvocation(record: AdapterInvocationRecord): Promise<void>;
-    /**
-     * Host supplies scope from its store-loaded invocation at adapter call sites.
-     * When supplied, stores must match tenant, space, and action invocation:
-     * an out-of-scope record returns undefined. Optional for compatibility with
-     * existing custom stores and direct callers; tenantIsolationChecks tests
-     * scoped read and write conformance.
-     */
-    getAdapterInvocation(id: string, scope?: AdapterInvocationScope): Promise<AdapterInvocationRecord | undefined>;
-    /**
-     * Match all three scope fields when supplied, changing nothing outside it
-     * (a not-found error is permitted). Host supplies scope as described above;
-     * optional only for compatibility with existing stores and direct callers.
-     */
-    updateAdapterInvocation(id: string, patch: Partial<Pick<AdapterInvocationRecord, "status" | "output" | "error" | "attempt" | "updatedAt">>, scope?: AdapterInvocationScope): Promise<void>;
-    appendEvent(event: AssetEventEnvelope): Promise<void>;
-    nextEventSequence(tenantId: string, spaceId: string): Promise<number>;
-    /**
-     * Return the state and invocation writer of the same event selected by
-     * getEntityState, scoped to this subject and tenant/space. Return undefined
-     * when that event or its invocation provenance is unavailable. Transaction
-     * implementations include pending events visible to getEntityState.
-     */
-    getEntityStateSource?(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<{
-        state: string;
-        actionInvocationId: string;
-    } | undefined>;
-    getEntityState(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<string | undefined>;
+  } | undefined>;
+  getEntityState(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<string | undefined>;
 }
 /**
  * Transaction-scoped Host operations used to commit domain writes and their
@@ -489,141 +576,159 @@ interface PlatformHostStore<TDb> {
  * lifecycle method on this object. Implementations must roll the whole unit
  * back when `run` throws.
  */
-interface PlatformHostMutationTransaction<TDb> {
-    readonly db: TDb;
-    /**
-     * Read and lock an invocation until this transaction completes.
-     * Required by serialized saga parent lifecycle transitions.
-     */
-    getActionInvocationForUpdate?(id: string, tenantId: string, spaceId: string): Promise<ActionInvocationRecord | undefined>;
-    /**
-     * Read one event by its stable identity inside the transaction.
-     * Required by serialized saga parent lifecycle transitions.
-     */
-    getEvent?(id: string, tenantId: string, spaceId: string): Promise<AssetEventEnvelope | undefined>;
-    appendEvent(event: AssetEventEnvelope): Promise<void>;
-    appendEventWithOutbox?(event: AssetEventEnvelope, metadata: OutboxEventMetadata): Promise<void>;
-    nextEventSequence(tenantId: string, spaceId: string): Promise<number>;
-    listEvents(tenantId: string, spaceId: string): Promise<AssetEventEnvelope[]>;
-    /**
-     * Return the state and invocation writer of the same event selected by
-     * getEntityState, scoped to this subject and tenant/space. Return undefined
-     * when that event or its invocation provenance is unavailable. Transaction
-     * implementations include pending events visible to getEntityState.
-     */
-    getEntityStateSource?(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<{
-        state: string;
-        actionInvocationId: string;
-    } | undefined>;
-    getEntityState?(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<string | undefined>;
-    updateActionInvocation(id: string, tenantId: string, spaceId: string, patch: ActionInvocationPatch): Promise<void>;
-    updateLeasedActionInvocation?(input: UpdateLeasedActionInvocationInput): Promise<boolean>;
-}
-type OutboxStatus = "pending" | "published" | "dead_letter";
-type EventPayloadClassification = "public" | "internal" | "confidential" | "restricted";
-interface OutboxEventMetadata {
-    producerModuleVersion: string;
-    payloadClassification: EventPayloadClassification;
-    traceContext?: Record<string, string>;
-    includeProvenance?: boolean;
-    /**
-     * Only `true` puts the event's `actorId` and `actorType` on the outbox envelope. Absent or any
-     * other value leaves them off, and the outbox record says the actor was `suppressed`.
-     */
-    includeActor?: boolean;
+export interface PlatformHostMutationTransaction<TDb> {
+  readonly db: TDb;
+  /**
+   * Read and lock an invocation until this transaction completes.
+   * Required by serialized saga parent lifecycle transitions.
+   */
+  getActionInvocationForUpdate?(id: string, tenantId: string, spaceId: string): Promise<ActionInvocationRecord | undefined>;
+  /**
+   * Read one event by its stable identity inside the transaction.
+   * Required by serialized saga parent lifecycle transitions.
+   */
+  getEvent?(id: string, tenantId: string, spaceId: string): Promise<AssetEventEnvelope | undefined>;
+  appendEvent(event: AssetEventEnvelope): Promise<void>;
+  appendEventWithOutbox?(event: AssetEventEnvelope, metadata: OutboxEventMetadata): Promise<void>;
+  nextEventSequence(tenantId: string, spaceId: string): Promise<number>;
+  listEvents(tenantId: string, spaceId: string): Promise<AssetEventEnvelope[]>;
+  /**
+   * Return the state and invocation writer of the same event selected by
+   * getEntityState, scoped to this subject and tenant/space. Return undefined
+   * when that event or its invocation provenance is unavailable. Transaction
+   * implementations include pending events visible to getEntityState.
+   */
+  getEntityStateSource?(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<{
+    state: string;
+    actionInvocationId: string;
+  } | undefined>;
+  getEntityState?(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<string | undefined>;
+  updateActionInvocation(id: string, tenantId: string, spaceId: string, patch: ActionInvocationPatch): Promise<void>;
+  updateLeasedActionInvocation?(input: UpdateLeasedActionInvocationInput): Promise<boolean>;
+  /**
+   * Update an adapter row in this transaction, with the same optional
+   * tenant/space/invocation scope semantics as the store method. Host uses
+   * this to commit degraded adapter evidence and its terminal verdict together.
+   * Omit this member if the adapter row cannot share this transaction.
+   */
+  updateAdapterInvocation?: PlatformHostStore<TDb>["updateAdapterInvocation"];
+  /** Same conditional write, sharing this transaction and its rollback. */
+  writeAdapterInvocation?: PlatformHostStore<TDb>["writeAdapterInvocation"];
+  /**
+   * Append governance reconciliation evidence in this transaction. Host uses
+   * this for overdue sweeps and degraded finalization when adapter output is
+   * withheld or a handoff is refused. Implement it alongside the transaction's
+   * invocation row lock; an outer-store append while that lock is held can
+   * block on a foreign key referencing the invocation. Omit this member if
+   * governance evidence cannot share the event/verdict transaction.
+   */
+  appendExternalReconciliation?: GovernancePlatformHostStore<TDb>["appendExternalReconciliation"];
+}
+export type OutboxStatus = "pending" | "published" | "dead_letter";
+export type EventPayloadClassification = "public" | "internal" | "confidential" | "restricted";
+export interface OutboxEventMetadata {
+  producerModuleVersion: string;
+  payloadClassification: EventPayloadClassification;
+  traceContext?: Record<string, string>;
+  includeProvenance?: boolean;
+  /**
+   * Only `true` puts the event's `actorId` and `actorType` on the outbox envelope. Absent or any
+   * other value leaves them off, and the outbox record says the actor was `suppressed`.
+   */
+  includeActor?: boolean;
 }
 /**
  * Whether Host put actor identity on an outbox record's envelope, decided by `includeActor` when
  * the record was written. A record has no value when it predates the decision (`legacy`).
  */
-type OutboxActorDisclosure = "included" | "suppressed";
+export type OutboxActorDisclosure = "included" | "suppressed";
 /**
  * What the relay tells a publisher about an envelope's actor identity: the record's
  * `OutboxActorDisclosure`, or `legacy` for a record with none. The memory and PostgreSQL stores
  * hydrate actor identity only for `included` records, so their legacy and suppressed envelopes carry
  * none; a consumer that needs it reads the canonical event.
  */
-type EnterpriseEventActorDisclosure = OutboxActorDisclosure | "legacy";
-interface EnterpriseEventEnvelope {
-    eventId: string;
-    eventType: string;
-    eventSchemaVersion: number;
-    tenantId: string;
-    spaceId: string;
-    subjectType: string;
-    subjectId: string;
-    sequence: number;
-    actionInvocationId?: string;
-    correlationId: string;
-    causationId?: string;
-    /** Present only when `includeActor` opted this event in; the key is absent otherwise. */
-    actorId?: string;
-    /** Present only when `includeActor` opted this event in; the key is absent otherwise. */
-    actorType?: string;
-    occurredAt: Date;
-    recordedAt: Date;
-    producerModuleVersion: string;
-    payloadClassification: EventPayloadClassification;
-    traceContext?: Record<string, string>;
-    provenance?: {
-        source: InvocationSource;
-        auditAttributes?: NamespacedAttributes;
-    };
-    /** Present only for events an action declaring provisional consistency emitted. */
-    consistency?: "authoritative-now" | "provisional-until-reconciled";
-    payload: unknown;
-}
-interface OutboxRecord {
+export type EnterpriseEventActorDisclosure = OutboxActorDisclosure | "legacy";
+export interface EnterpriseEventEnvelope {
+  eventId: string;
+  eventType: string;
+  eventSchemaVersion: number;
+  tenantId: string;
+  spaceId: string;
+  subjectType: string;
+  subjectId: string;
+  sequence: number;
+  actionInvocationId?: string;
+  correlationId: string;
+  causationId?: string;
+  /** Present only when `includeActor` opted this event in; the key is absent otherwise. */
+  actorId?: string;
+  /** Present only when `includeActor` opted this event in; the key is absent otherwise. */
+  actorType?: string;
+  occurredAt: Date;
+  recordedAt: Date;
+  producerModuleVersion: string;
+  payloadClassification: EventPayloadClassification;
+  traceContext?: Record<string, string>;
+  provenance?: {
+    source: InvocationSource;
+    auditAttributes?: NamespacedAttributes;
+  };
+  /** Present only for events an action declaring provisional consistency emitted. */
+  consistency?: "authoritative-now" | "provisional-until-reconciled";
+  payload: unknown;
+}
+export interface OutboxRecord {
+  id: string;
+  tenantId: string;
+  spaceId: string;
+  event: EnterpriseEventEnvelope;
+  /** Absent for a record written before Host recorded the `includeActor` decision. */
+  actorDisclosure?: OutboxActorDisclosure;
+  status: OutboxStatus;
+  attemptCount: number;
+  availableAt: Date;
+  leaseOwner?: string;
+  leaseExpiresAt?: Date;
+  leaseToken?: number;
+  lastError?: string;
+  createdAt: Date;
+  publishedAt?: Date;
+}
+export interface ClaimOutboxInput {
+  workerId: string;
+  leaseDurationMs: number;
+  limit?: number;
+  tenantId?: string;
+  spaceId?: string;
+  now?: Date;
+}
+export interface OutboxPlatformHostStore<TDb> extends PlatformHostStore<TDb> {
+  /** True only when transactionWithEvents supplies appendEventWithOutbox in the same unit of work. */
+  readonly transactionalOutbox?: boolean;
+  appendEventWithOutbox(event: AssetEventEnvelope, metadata: OutboxEventMetadata): Promise<void>;
+  claimOutbox(input: ClaimOutboxInput): Promise<OutboxRecord[]>;
+  markOutboxPublished(id: string, workerId: string, publishedAt: Date, leaseToken?: number): Promise<void>;
+  markOutboxFailed(input: {
     id: string;
-    tenantId: string;
-    spaceId: string;
-    event: EnterpriseEventEnvelope;
-    /** Absent for a record written before Host recorded the `includeActor` decision. */
-    actorDisclosure?: OutboxActorDisclosure;
-    status: OutboxStatus;
-    attemptCount: number;
-    availableAt: Date;
-    leaseOwner?: string;
-    leaseExpiresAt?: Date;
+    workerId: string;
     leaseToken?: number;
-    lastError?: string;
-    createdAt: Date;
-    publishedAt?: Date;
-}
-interface ClaimOutboxInput {
+    error: string;
+    availableAt: Date;
+    deadLetter: boolean;
+  }): Promise<void>;
+  renewOutboxLease(input: {
+    id: string;
     workerId: string;
+    leaseToken: number;
     leaseDurationMs: number;
-    limit?: number;
+    now?: Date;
+  }): Promise<boolean>;
+  listOutbox(input?: {
     tenantId?: string;
     spaceId?: string;
-    now?: Date;
-}
-interface OutboxPlatformHostStore<TDb> extends PlatformHostStore<TDb> {
-    /** True only when transactionWithEvents supplies appendEventWithOutbox in the same unit of work. */
-    readonly transactionalOutbox?: boolean;
-    appendEventWithOutbox(event: AssetEventEnvelope, metadata: OutboxEventMetadata): Promise<void>;
-    claimOutbox(input: ClaimOutboxInput): Promise<OutboxRecord[]>;
-    markOutboxPublished(id: string, workerId: string, publishedAt: Date, leaseToken?: number): Promise<void>;
-    markOutboxFailed(input: {
-        id: string;
-        workerId: string;
-        leaseToken?: number;
-        error: string;
-        availableAt: Date;
-        deadLetter: boolean;
-    }): Promise<void>;
-    renewOutboxLease(input: {
-        id: string;
-        workerId: string;
-        leaseToken: number;
-        leaseDurationMs: number;
-        now?: Date;
-    }): Promise<boolean>;
-    listOutbox(input?: {
-        tenantId?: string;
-        spaceId?: string;
-        statuses?: OutboxStatus[];
-    }): Promise<OutboxRecord[]>;
+    statuses?: OutboxStatus[];
+  }): Promise<OutboxRecord[]>;
 }
 /**
  * Append-only evidence of one operator requeue of a dead-lettered outbox
@@ -631,42 +736,42 @@ interface OutboxPlatformHostStore<TDb> extends PlatformHostStore<TDb> {
  * so the failure that exhausted the record stays readable after its attempt
  * budget is reset.
  */
-interface OutboxRequeueRecord {
-    id: string;
-    outboxId: string;
-    tenantId: string;
-    spaceId: string;
-    eventId: string;
-    actorId: string;
-    actorType: ActorType;
-    /** Operator-supplied justification, persisted as audit evidence. Must not carry secrets. */
-    reason: string;
-    requeuedAt: Date;
-    /** When the requeued record became claimable again. */
-    availableAt: Date;
-    priorAttemptCount: number;
-    priorLastError?: string;
-    priorAvailableAt: Date;
-    priorLeaseToken: number;
-}
-interface RequeueOutboxDeadLetterStoreInput {
-    id: string;
-    tenantId: string;
-    spaceId: string;
-    /** Identity of the evidence row written with the transition. */
-    requeueId: string;
-    actorId: string;
-    actorType: ActorType;
-    reason: string;
-    requeuedAt: Date;
-    availableAt: Date;
-    /**
-     * The lease token of the dead letter the caller read and authorized. Every
-     * claim increments the token and a requeue never lowers it, so a record
-     * that was requeued, claimed and dead-lettered again carries a higher token
-     * than the one observed, and the requeue is refused as `stale`.
-     */
-    expectedLeaseToken: number;
+export interface OutboxRequeueRecord {
+  id: string;
+  outboxId: string;
+  tenantId: string;
+  spaceId: string;
+  eventId: string;
+  actorId: string;
+  actorType: ActorType;
+  /** Operator-supplied justification, persisted as audit evidence. Must not carry secrets. */
+  reason: string;
+  requeuedAt: Date;
+  /** When the requeued record became claimable again. */
+  availableAt: Date;
+  priorAttemptCount: number;
+  priorLastError?: string;
+  priorAvailableAt: Date;
+  priorLeaseToken: number;
+}
+export interface RequeueOutboxDeadLetterStoreInput {
+  id: string;
+  tenantId: string;
+  spaceId: string;
+  /** Identity of the evidence row written with the transition. */
+  requeueId: string;
+  actorId: string;
+  actorType: ActorType;
+  reason: string;
+  requeuedAt: Date;
+  availableAt: Date;
+  /**
+   * The lease token of the dead letter the caller read and authorized. Every
+   * claim increments the token and a requeue never lowers it, so a record
+   * that was requeued, claimed and dead-lettered again carries a higher token
+   * than the one observed, and the requeue is refused as `stale`.
+   */
+  expectedLeaseToken: number;
 }
 /**
  * `not_found`: no record with this id in the tenant and space, including a
@@ -675,74 +780,74 @@ interface RequeueOutboxDeadLetterStoreInput {
  * requeue won the compare-and-set. `stale`: the record is a dead letter
  * again, but not the one the caller observed; read and authorize it afresh.
  */
-type OutboxRequeueRefusal = "not_found" | "not_dead_letter" | "stale";
-type RequeueOutboxDeadLetterStoreResult = {
-    applied: true;
-    record: OutboxRecord;
-    requeue: OutboxRequeueRecord;
+export type OutboxRequeueRefusal = "not_found" | "not_dead_letter" | "stale";
+export type RequeueOutboxDeadLetterStoreResult = {
+  applied: true;
+  record: OutboxRecord;
+  requeue: OutboxRequeueRecord;
 } | {
-    applied: false;
-    refusal: OutboxRequeueRefusal;
-    currentStatus?: OutboxStatus;
+  applied: false;
+  refusal: OutboxRequeueRefusal;
+  currentStatus?: OutboxStatus;
 };
 /**
  * Optional outbox capability that moves a dead-lettered record back to
  * pending. Kept apart from `OutboxPlatformHostStore` so a custom outbox store
  * that predates it still satisfies that interface.
  */
-interface OutboxRequeuePlatformHostStore<TDb> extends OutboxPlatformHostStore<TDb> {
-    getOutboxRecord(id: string, tenantId: string, spaceId: string): Promise<OutboxRecord | undefined>;
-    /**
-     * Compare-and-set from `dead_letter` at `expectedLeaseToken` to `pending`
-     * within the tenant and space: resets `attemptCount` to 0, sets
-     * `availableAt`, clears any lease owner while keeping the lease token,
-     * keeps `lastError`, and appends one `OutboxRequeueRecord` in the same
-     * atomic step. A record in any other state, at another lease token, or in
-     * another scope is refused and nothing is written. The returned requeue
-     * evidence shares nothing with stored history. The returned outbox record
-     * has its own Date fields; its event payload and provenance are shallow.
-     */
-    requeueOutboxDeadLetter(input: RequeueOutboxDeadLetterStoreInput): Promise<RequeueOutboxDeadLetterStoreResult>;
-    /** Requeue evidence for a scope, oldest first; `outboxId` narrows it to one record. */
-    listOutboxRequeues(input: {
-        tenantId: string;
-        spaceId: string;
-        outboxId?: string;
-    }): Promise<OutboxRequeueRecord[]>;
-}
-interface RequeueOutboxDeadLetterInput {
-    outboxId: string;
+export interface OutboxRequeuePlatformHostStore<TDb> extends OutboxPlatformHostStore<TDb> {
+  getOutboxRecord(id: string, tenantId: string, spaceId: string): Promise<OutboxRecord | undefined>;
+  /**
+   * Compare-and-set from `dead_letter` at `expectedLeaseToken` to `pending`
+   * within the tenant and space: resets `attemptCount` to 0, sets
+   * `availableAt`, clears any lease owner while keeping the lease token,
+   * keeps `lastError`, and appends one `OutboxRequeueRecord` in the same
+   * atomic step. A record in any other state, at another lease token, or in
+   * another scope is refused and nothing is written. The returned requeue
+   * evidence shares nothing with stored history. The returned outbox record
+   * has its own Date fields; its event payload and provenance are shallow.
+   */
+  requeueOutboxDeadLetter(input: RequeueOutboxDeadLetterStoreInput): Promise<RequeueOutboxDeadLetterStoreResult>;
+  /** Requeue evidence for a scope, oldest first; `outboxId` narrows it to one record. */
+  listOutboxRequeues(input: {
     tenantId: string;
     spaceId: string;
-    /** Trusted operator identity from the caller's authenticated session, never from request input. */
-    actorId: string;
-    actorType: ActorType;
-    /** Required justification, at most 1,000 characters, persisted as audit evidence. */
-    reason: string;
-    /** When the record becomes claimable again; defaults to the host clock. */
-    availableAt?: Date;
-}
-type RequeueOutboxDeadLetterRefusal = OutboxRequeueRefusal | "not_authorized";
-type RequeueOutboxDeadLetterResult = {
-    status: "requeued";
-    record: OutboxRecord;
-    requeue: OutboxRequeueRecord;
+    outboxId?: string;
+  }): Promise<OutboxRequeueRecord[]>;
+}
+export interface RequeueOutboxDeadLetterInput {
+  outboxId: string;
+  tenantId: string;
+  spaceId: string;
+  /** Trusted operator identity from the caller's authenticated session, never from request input. */
+  actorId: string;
+  actorType: ActorType;
+  /** Required justification, at most 1,000 characters, persisted as audit evidence. */
+  reason: string;
+  /** When the record becomes claimable again; defaults to the host clock. */
+  availableAt?: Date;
+}
+export type RequeueOutboxDeadLetterRefusal = OutboxRequeueRefusal | "not_authorized";
+export type RequeueOutboxDeadLetterResult = {
+  status: "requeued";
+  record: OutboxRecord;
+  requeue: OutboxRequeueRecord;
 } | {
-    status: "refused";
-    refusal: RequeueOutboxDeadLetterRefusal;
-    /** Present for `not_dead_letter` and `stale`: the state the record was found in. */
-    currentStatus?: OutboxStatus;
-    message: string;
+  status: "refused";
+  refusal: RequeueOutboxDeadLetterRefusal;
+  /** Present for `not_dead_letter` and `stale`: the state the record was found in. */
+  currentStatus?: OutboxStatus;
+  message: string;
 };
 /** Facts given to `authorizeOutboxRequeue`. `record` is absent when no record with this id exists in the scope. */
-interface OutboxRequeueAuthorizationInput {
-    tenantId: string;
-    spaceId: string;
-    actorId: string;
-    actorType: ActorType;
-    outboxId: string;
-    reason: string;
-    record?: Pick<OutboxRecord["event"], "eventId" | "eventType" | "payloadClassification"> & Pick<OutboxRecord, "status" | "attemptCount">;
+export interface OutboxRequeueAuthorizationInput {
+  tenantId: string;
+  spaceId: string;
+  actorId: string;
+  actorType: ActorType;
+  outboxId: string;
+  reason: string;
+  record?: Pick<OutboxRecord["event"], "eventId" | "eventType" | "payloadClassification"> & Pick<OutboxRecord, "status" | "attemptCount">;
 }
 /**
  * Optional production capability for atomic domain/event persistence.
@@ -751,60 +856,60 @@ interface OutboxRequeueAuthorizationInput {
  * not implement it retain the legacy transaction boundary for compatibility,
  * but cannot claim atomic domain-write/event persistence.
  */
-interface AtomicMutationPlatformHostStore<TDb> extends PlatformHostStore<TDb> {
-    transactionWithEvents<TResult>(run: (transaction: PlatformHostMutationTransaction<TDb>) => Promise<TResult>): Promise<TResult>;
-}
-interface BeginApprovalDecisionInput {
-    actionInvocationId: string;
-    tenantId: string;
-    spaceId: string;
-    decision: PersistedActionApprovalDecision;
-    leaseOwner: string;
-    leaseDurationMs: number;
-    now: Date;
-}
-interface ApprovalDecisionTransitionResult {
-    applied: boolean;
-    invocation?: ActionInvocationRecord;
+export interface AtomicMutationPlatformHostStore<TDb> extends PlatformHostStore<TDb> {
+  transactionWithEvents<TResult>(run: (transaction: PlatformHostMutationTransaction<TDb>) => Promise<TResult>): Promise<TResult>;
+}
+export interface BeginApprovalDecisionInput {
+  actionInvocationId: string;
+  tenantId: string;
+  spaceId: string;
+  decision: PersistedActionApprovalDecision;
+  leaseOwner: string;
+  leaseDurationMs: number;
+  now: Date;
+}
+export interface ApprovalDecisionTransitionResult {
+  applied: boolean;
+  invocation?: ActionInvocationRecord;
 }
 /** Optional store capability required only when agent HITL or approval resume is used. */
-interface ApprovalPlatformHostStore<TDb> extends PlatformHostStore<TDb> {
-    recordHitlDecision(actionInvocationId: string, tenantId: string, spaceId: string, decision: HitlDecisionEvidence): Promise<ActionInvocationRecord>;
-    beginApprovalDecision(input: BeginApprovalDecisionInput): Promise<ApprovalDecisionTransitionResult>;
+export interface ApprovalPlatformHostStore<TDb> extends PlatformHostStore<TDb> {
+  recordHitlDecision(actionInvocationId: string, tenantId: string, spaceId: string, decision: HitlDecisionEvidence): Promise<ActionInvocationRecord>;
+  beginApprovalDecision(input: BeginApprovalDecisionInput): Promise<ApprovalDecisionTransitionResult>;
 }
 /** Optional durable capabilities used when external-governance enrichment is configured. */
-interface GovernancePlatformHostStore<TDb> extends PlatformHostStore<TDb> {
-    recordMutationGovernance(actionInvocationId: string, tenantId: string, spaceId: string, context: {
-        footprint: MutationFootprint;
-        executionPrincipal: ExecutionPrincipal;
-    }): Promise<ActionInvocationRecord>;
-    appendPolicyObligations(records: PolicyObligationRecord[]): Promise<void>;
-    listPolicyObligations(actionInvocationId: string, tenantId: string, spaceId: string): Promise<PolicyObligationRecord[]>;
-    updatePolicyObligation(actionInvocationId: string, obligationId: string, status: PolicyObligationStatus, evidenceReferences?: PolicyObligation["evidenceReferences"]): Promise<void>;
-    appendExecutionAttestation(record: ExecutionAttestationRecord): Promise<void>;
-    listExecutionAttestations(actionInvocationId: string, tenantId: string, spaceId: string): Promise<ExecutionAttestationRecord[]>;
-    appendExternalReconciliation(record: ExternalReconciliationRecord): Promise<void>;
-}
-interface ListActionInvocationsInput {
-    tenantId?: string;
-    spaceId?: string;
-    statuses?: readonly ActionStatus[];
-    updatedBefore?: Date;
-    /** Only invocations holding a pending external completion. */
-    awaitingCompletion?: boolean;
-    /** Only pending completions due at or before this instant. Implies `awaitingCompletion`. */
-    completionDueBefore?: Date;
-    /** Only invocations no worker holds a lease on. */
-    unleased?: boolean;
-    limit?: number;
-}
-interface ClaimActionInvocationsInput {
-    workerId: string;
-    leaseDurationMs: number;
-    limit?: number;
-    tenantId?: string;
-    spaceId?: string;
-    now?: Date;
+export interface GovernancePlatformHostStore<TDb> extends PlatformHostStore<TDb> {
+  recordMutationGovernance(actionInvocationId: string, tenantId: string, spaceId: string, context: {
+    footprint: MutationFootprint;
+    executionPrincipal: ExecutionPrincipal;
+  }): Promise<ActionInvocationRecord>;
+  appendPolicyObligations(records: PolicyObligationRecord[]): Promise<void>;
+  listPolicyObligations(actionInvocationId: string, tenantId: string, spaceId: string): Promise<PolicyObligationRecord[]>;
+  updatePolicyObligation(actionInvocationId: string, obligationId: string, status: PolicyObligationStatus, evidenceReferences?: PolicyObligation["evidenceReferences"]): Promise<void>;
+  appendExecutionAttestation(record: ExecutionAttestationRecord): Promise<void>;
+  listExecutionAttestations(actionInvocationId: string, tenantId: string, spaceId: string): Promise<ExecutionAttestationRecord[]>;
+  appendExternalReconciliation(record: ExternalReconciliationRecord): Promise<void>;
+}
+export interface ListActionInvocationsInput {
+  tenantId?: string;
+  spaceId?: string;
+  statuses?: readonly ActionStatus[];
+  updatedBefore?: Date;
+  /** Only invocations holding a pending external completion. */
+  awaitingCompletion?: boolean;
+  /** Only pending completions due at or before this instant. Implies `awaitingCompletion`. */
+  completionDueBefore?: Date;
+  /** Only invocations no worker holds a lease on. */
+  unleased?: boolean;
+  limit?: number;
+}
+export interface ClaimActionInvocationsInput {
+  workerId: string;
+  leaseDurationMs: number;
+  limit?: number;
+  tenantId?: string;
+  spaceId?: string;
+  now?: Date;
 }
 /**
  * What the host writes back to an invocation.
@@ -819,55 +924,55 @@ interface ClaimActionInvocationsInput {
  * - `claimActionInvocations` must never claim a running invocation without a
  *   lease, which is what a parked invocation is.
  */
-type ActionInvocationPatch = Partial<Pick<ActionInvocationRecord, "status" | "result" | "error" | "authorizationReconciliation" | "adapterReconciliation" | "pendingCompletion" | "externalCompletion">>;
-interface UpdateLeasedActionInvocationInput {
-    id: string;
-    tenantId: string;
-    spaceId: string;
-    workerId: string;
-    leaseToken: number;
-    patch: ActionInvocationPatch;
-}
-interface RenewActionInvocationLeaseInput {
-    id: string;
-    tenantId: string;
-    spaceId: string;
-    workerId: string;
-    leaseToken: number;
-    leaseDurationMs: number;
-    now?: Date;
+export type ActionInvocationPatch = Partial<Pick<ActionInvocationRecord, "status" | "result" | "error" | "authorizationReconciliation" | "adapterReconciliation" | "pendingStateTransition" | "pendingCompletion" | "externalCompletion">>;
+export interface UpdateLeasedActionInvocationInput {
+  id: string;
+  tenantId: string;
+  spaceId: string;
+  workerId: string;
+  leaseToken: number;
+  patch: ActionInvocationPatch;
+}
+export interface RenewActionInvocationLeaseInput {
+  id: string;
+  tenantId: string;
+  spaceId: string;
+  workerId: string;
+  leaseToken: number;
+  leaseDurationMs: number;
+  now?: Date;
 }
 /** Store capabilities required by the durable polling worker and operator tooling. */
-interface RecoverablePlatformHostStore<TDb> extends PlatformHostStore<TDb> {
-    listActionInvocations(input?: ListActionInvocationsInput): Promise<ActionInvocationRecord[]>;
-    claimActionInvocations(input: ClaimActionInvocationsInput): Promise<ActionInvocationRecord[]>;
-    updateLeasedActionInvocation(input: UpdateLeasedActionInvocationInput): Promise<boolean>;
-    renewActionInvocationLease(input: RenewActionInvocationLeaseInput): Promise<boolean>;
-    listEvents(tenantId: string, spaceId: string): Promise<AssetEventEnvelope[]>;
-}
-interface ActionAuthorizationInput {
-    actionId: ActionId;
-    namespace: string;
-    requiredPermissions: readonly string[];
-    requiredRoles: readonly string[];
-    tenantId: string;
-    spaceId: string;
-    actorId: string;
-    actorType: ActorType;
-}
-type KnownActionExecutionReason = "initial" | "approval_resume" | "recovery" | "offline_replay";
-type ActionExecutionReason = KnownActionExecutionReason | (string & {});
+export interface RecoverablePlatformHostStore<TDb> extends PlatformHostStore<TDb> {
+  listActionInvocations(input?: ListActionInvocationsInput): Promise<ActionInvocationRecord[]>;
+  claimActionInvocations(input: ClaimActionInvocationsInput): Promise<ActionInvocationRecord[]>;
+  updateLeasedActionInvocation(input: UpdateLeasedActionInvocationInput): Promise<boolean>;
+  renewActionInvocationLease(input: RenewActionInvocationLeaseInput): Promise<boolean>;
+  listEvents(tenantId: string, spaceId: string): Promise<AssetEventEnvelope[]>;
+}
+export interface ActionAuthorizationInput {
+  actionId: ActionId;
+  namespace: string;
+  requiredPermissions: readonly string[];
+  requiredRoles: readonly string[];
+  tenantId: string;
+  spaceId: string;
+  actorId: string;
+  actorType: ActorType;
+}
+export type KnownActionExecutionReason = "initial" | "approval_resume" | "recovery" | "offline_replay";
+export type ActionExecutionReason = KnownActionExecutionReason | (string & {});
 /**
  * Trusted execution-boundary authorization input.
  *
  * Parameters are the schema-parsed durable parameters, never caller-supplied
  * transient values. `invocation` is the canonical record that will execute.
  */
-interface ActionExecutionAuthorizationInput extends ActionAuthorizationInput {
-    actionInvocationId: string;
-    parameters: unknown;
-    invocation: Readonly<ActionInvocationRecord>;
-    executionReason: ActionExecutionReason;
+export interface ActionExecutionAuthorizationInput extends ActionAuthorizationInput {
+  actionInvocationId: string;
+  parameters: unknown;
+  invocation: Readonly<ActionInvocationRecord>;
+  executionReason: ActionExecutionReason;
 }
 /**
  * Input to `resolvePolicies`. Carries the invocation identity and the
@@ -876,41 +981,41 @@ interface ActionExecutionAuthorizationInput extends ActionAuthorizationInput {
  * persisted evaluation per invocation and policy, so return the same snapshot
  * for an `actionInvocationId` on every attempt.
  */
-interface ResolvePoliciesInput extends ActionExecutionAuthorizationInput {
-    declaredPolicyIds: readonly string[];
-}
-interface PlatformHostAuthorization {
-    checkEntitlement(input: ActionAuthorizationInput): Promise<boolean>;
-    authorize(input: ActionAuthorizationInput): Promise<boolean>;
-    /**
-     * Optional final authorization immediately before policies and mutation
-     * execution. When absent, the Host reuses `authorize` at this boundary.
-     */
-    authorizeExecution?(input: ActionExecutionAuthorizationInput): Promise<boolean>;
-    /** Optional distinct authorization boundary for human/system approval decisions. */
-    authorizeApproval?(input: ActionAuthorizationInput & {
-        decision: ActionApprovalDecision;
-    }): Promise<boolean>;
-    /**
-     * Authorization for `requeueOutboxDeadLetter`. There is no action to fall
-     * back to, so when this is absent every requeue is refused as
-     * `not_authorized`. A throw propagates and nothing is requeued.
-     */
-    authorizeOutboxRequeue?(input: OutboxRequeueAuthorizationInput): Promise<boolean>;
-}
-interface DispatchActionInput {
-    actionInvocationId: string;
-    actionId: ActionId;
-    tenantId: string;
-    spaceId: string;
-    workflowId: string;
-}
-interface DispatchActionResult {
-    workflowId: string;
-    runId?: string;
-}
-interface PlatformActionDispatcher {
-    dispatch(input: DispatchActionInput): Promise<DispatchActionResult>;
+export interface ResolvePoliciesInput extends ActionExecutionAuthorizationInput {
+  declaredPolicyIds: readonly string[];
+}
+export interface PlatformHostAuthorization {
+  checkEntitlement(input: ActionAuthorizationInput): Promise<boolean>;
+  authorize(input: ActionAuthorizationInput): Promise<boolean>;
+  /**
+   * Optional final authorization immediately before policies and mutation
+   * execution. When absent, the Host reuses `authorize` at this boundary.
+   */
+  authorizeExecution?(input: ActionExecutionAuthorizationInput): Promise<boolean>;
+  /** Optional distinct authorization boundary for human/system approval decisions. */
+  authorizeApproval?(input: ActionAuthorizationInput & {
+    decision: ActionApprovalDecision;
+  }): Promise<boolean>;
+  /**
+   * Authorization for `requeueOutboxDeadLetter`. There is no action to fall
+   * back to, so when this is absent every requeue is refused as
+   * `not_authorized`. A throw propagates and nothing is requeued.
+   */
+  authorizeOutboxRequeue?(input: OutboxRequeueAuthorizationInput): Promise<boolean>;
+}
+export interface DispatchActionInput {
+  actionInvocationId: string;
+  actionId: ActionId;
+  tenantId: string;
+  spaceId: string;
+  workflowId: string;
+}
+export interface DispatchActionResult {
+  workflowId: string;
+  runId?: string;
+}
+export interface PlatformActionDispatcher {
+  dispatch(input: DispatchActionInput): Promise<DispatchActionResult>;
 }
 /**
  * One submission. `submitAction` reads the scalar fields (`actionId`, scope,
@@ -924,452 +1029,474 @@ interface PlatformActionDispatcher {
  * as the caller's objects, read where and as often as before (README,
  * "Submission snapshot").
  */
-interface SubmitActionInput {
-    actionId: ActionId;
-    parameters: Record<string, unknown>;
-    tenantId: string;
-    spaceId: string;
-    actorId: string;
-    actorType: ActorType;
-    correlationId?: string;
-    causationId?: string;
-    provenance?: InvocationProvenance;
-    executionReason?: Extract<KnownActionExecutionReason, "initial" | "offline_replay">;
-    /** Stable logical command key. Reusing it returns the original invocation; a pending failed dispatch may retry its stable workflow ID. */
-    idempotencyKey?: string;
-    /** Opaque, non-secret authorization/admission reference persisted with the invocation. */
-    authorizationBindingId?: string;
-    authorizationBinding?: AuthorizationBinding;
-}
-interface SubmitActionResult {
-    actionInvocationId: string;
-    status: ActionStatus;
-    workflowId: string;
-    runId?: string;
-    result?: Record<string, unknown>;
-    error?: string;
-    reconciliation?: AuthorizationReconciliationOutcome;
-    adapterReconciliation?: AdapterReconciliationOutcome;
-    /** Present while the invocation waits for an external system to complete it. */
-    pendingCompletion?: PendingExternalCompletion;
-    /** Mirrors the action's declared consistency so a caller knows whether the result is settled. */
-    consistency?: "authoritative-now" | "provisional-until-reconciled";
-    hitlRoute?: AgentActionRoute;
-    hitlRiskTier?: AgentActionRiskTier;
-}
-interface ExecuteActionResult {
-    actionInvocationId: string;
-    status: ActionStatus;
-    result?: Record<string, unknown>;
-    error?: string;
-    reconciliation?: AuthorizationReconciliationOutcome;
-    adapterReconciliation?: AdapterReconciliationOutcome;
-    /** Present while the invocation waits for an external system to complete it. */
-    pendingCompletion?: PendingExternalCompletion;
-    /** Mirrors the action's declared consistency so a caller knows whether the result is settled. */
-    consistency?: "authoritative-now" | "provisional-until-reconciled";
-    hitlRoute?: AgentActionRoute;
-    hitlRiskTier?: AgentActionRiskTier;
-}
-interface ExecuteInvocationOptions {
-    /** Required when executing a row already protected by a worker or approval-resume lease. */
-    leaseOwner?: string;
-    /** Claim generation paired with leaseOwner; stale generations are rejected. */
-    leaseToken?: number;
-}
-interface PlatformActionWorkerOptions<TDb> {
-    host: GovernedActionHost;
-    store: RecoverablePlatformHostStore<TDb>;
-    workerId: string;
-    batchSize?: number;
-    leaseDurationMs?: number;
-    leaseRenewalIntervalMs?: number;
-    pollIntervalMs?: number;
-    tenantId?: string;
-    spaceId?: string;
-    signal?: AbortSignal;
-    onError?: (error: unknown, invocation?: ActionInvocationRecord) => void;
-    telemetry?: PlatformHostTelemetry;
-    /**
-     * Sweep overdue external handoffs each cycle. Defaults to on. Turn it off
-     * for a store without the governance seam, where the sweep would refuse
-     * on every cycle, and run the sweep elsewhere.
-     */
-    sweepOverdueCompletions?: boolean;
-}
-interface PlatformActionWorkerCycleResult {
-    claimed: number;
-    completed: number;
-    failed: number;
-    /** Present when claimed agent work was durably parked instead of failing. */
-    waitingForApproval?: number;
-    /**
-     * Present only when > 0: claimed invocations whose execution threw a
-     * RetryableExecutionError (counted by error type, not by where it was thrown).
-     * The row stays leased and a later claim retries it; excluded from failed.
-     */
-    deferred?: number;
+export interface SubmitActionInput {
+  actionId: ActionId;
+  parameters: Record<string, unknown>;
+  tenantId: string;
+  spaceId: string;
+  actorId: string;
+  actorType: ActorType;
+  correlationId?: string;
+  causationId?: string;
+  provenance?: InvocationProvenance;
+  executionReason?: Extract<KnownActionExecutionReason, "initial" | "offline_replay">;
+  /** Stable logical command key. Reusing it returns the original invocation; a pending failed dispatch may retry its stable workflow ID. */
+  idempotencyKey?: string;
+  /** Opaque, non-secret authorization/admission reference persisted with the invocation. */
+  authorizationBindingId?: string;
+  authorizationBinding?: AuthorizationBinding;
+}
+export interface SubmitActionResult {
+  actionInvocationId: string;
+  status: ActionStatus;
+  workflowId: string;
+  runId?: string;
+  result?: Record<string, unknown>;
+  error?: string;
+  reconciliation?: AuthorizationReconciliationOutcome;
+  adapterReconciliation?: AdapterReconciliationOutcome;
+  /** Present while the invocation waits for an external system to complete it. */
+  pendingCompletion?: PendingExternalCompletion;
+  /** Mirrors the action's declared consistency so a caller knows whether the result is settled. */
+  consistency?: "authoritative-now" | "provisional-until-reconciled";
+  hitlRoute?: AgentActionRoute;
+  hitlRiskTier?: AgentActionRiskTier;
+}
+export interface ExecuteActionResult {
+  actionInvocationId: string;
+  status: ActionStatus;
+  result?: Record<string, unknown>;
+  error?: string;
+  reconciliation?: AuthorizationReconciliationOutcome;
+  adapterReconciliation?: AdapterReconciliationOutcome;
+  /** Present while the invocation waits for an external system to complete it. */
+  pendingCompletion?: PendingExternalCompletion;
+  /** Mirrors the action's declared consistency so a caller knows whether the result is settled. */
+  consistency?: "authoritative-now" | "provisional-until-reconciled";
+  hitlRoute?: AgentActionRoute;
+  hitlRiskTier?: AgentActionRiskTier;
+}
+export interface ExecuteInvocationOptions {
+  /** Required when executing a row already protected by a worker or approval-resume lease. */
+  leaseOwner?: string;
+  /** Claim generation paired with leaseOwner; stale generations are rejected. */
+  leaseToken?: number;
+}
+export interface PlatformActionWorkerOptions<TDb> {
+  host: GovernedActionHost;
+  store: RecoverablePlatformHostStore<TDb>;
+  workerId: string;
+  batchSize?: number;
+  leaseDurationMs?: number;
+  leaseRenewalIntervalMs?: number;
+  pollIntervalMs?: number;
+  tenantId?: string;
+  spaceId?: string;
+  signal?: AbortSignal;
+  onError?: (error: unknown, invocation?: ActionInvocationRecord) => void;
+  telemetry?: PlatformHostTelemetry;
+  /**
+   * Sweep overdue external handoffs each cycle. Defaults to on. Turn it off
+   * for a store without the governance seam, where the sweep would refuse
+   * on every cycle, and run the sweep elsewhere.
+   */
+  sweepOverdueCompletions?: boolean;
+}
+export interface PlatformActionWorkerCycleResult {
+  claimed: number;
+  completed: number;
+  failed: number;
+  /** Present when claimed agent work was durably parked instead of failing. */
+  waitingForApproval?: number;
+  /**
+   * Present only when > 0: claimed invocations whose execution threw a
+   * RetryableExecutionError (counted by error type, not by where it was thrown).
+   * The row stays leased and a later claim retries it; excluded from failed.
+   */
+  deferred?: number;
 }
 /** Origin of error text redacted before Host records or returns it. */
-interface ErrorTextRedactionContext {
-    actionId: ActionId;
-    source: "handler" | "adapter" | "external_completion" | "execution";
-    adapterType?: string;
-    operation?: string;
-    /** Adapter vendor or external completion provider. */
-    provider?: string;
-}
-interface PlatformHostOptions<TDb> {
-    store: PlatformHostStore<TDb>;
-    authorization: PlatformHostAuthorization;
-    /** Preferred explicit catalog assembled from this runtime's Fabric modules. */
-    registry?: Pick<ModuleRegistry<TDb>, "resolveAction" | "resolvePolicy" | "resolveStateMachine"> & Partial<Pick<ModuleRegistry<TDb>, "orderedModules">>;
-    /** Resolve vertical- or runtime-local actions without mutating the process-wide registry. */
-    resolveAction?: (actionId: ActionId) => ActionDefinition<TDb> | undefined;
-    adapters?: readonly AdapterImplementation[];
-    /**
-     * Supplies the circuit breaker for each adapter call. Defaults to a new
-     * `AdapterCircuitBreakerRegistry` per Host instance, which creates one
-     * in-process breaker per `adapterType:operation` from that adapter's own
-     * `circuitBreaker` config, on first use, and none for adapters without one.
-     * Pass a shared registry or a custom provider to share breakers between
-     * Host instances, receive breaker telemetry, or set manual overrides.
-     * The default key shares failures across tenants and vendors in a registry.
-     * Use `new AdapterCircuitBreakerRegistry({ key: scopedAdapterCircuitBreakerKey })`
-     * for tenant/space/vendor isolation. Host passes trusted tenant/space scope
-     * to the provider. The registry keeps the first config seen for a key;
-     * later conflicting configs reuse that breaker without throwing. Breakers
-     * are never evicted, so scoped keys keep one breaker per scope seen.
-     */
-    adapterCircuitBreakers?: AdapterCircuitBreakerProvider;
-    /**
-     * Positive integer attempt cap for RetryableExecutionError during governance,
-     * before policy-evaluation persistence (default 5). A leased, idempotent action
-     * below the cap is left running for worker reclaim after lease expiry.
-     * Inline execution, approval resume, exhausted attempts, and non-idempotent
-     * actions fail. Policy persistence, obligation listing/resolution/persistence, state-machine checks,
-     * the handler transaction, handlers, adapters, and finalization are excluded;
-     * their existing failure/reconciliation/recovery semantics apply.
-     */
-    retryableExecutionMaxAttempts?: number;
-    dispatcher?: PlatformActionDispatcher;
-    services?: FabricRuntimeServices;
-    idempotency?: {
-        conflictMode?: "audit-only" | "enforce";
-        onConflict?(conflict: IdempotencyConflict): void;
-        onLegacyRecord?(invocation: ActionInvocationRecord): void;
-    };
-    provenance?: {
-        auditAttributeAllowlist?: readonly string[];
-        maxAttributes?: number;
-        maxValueLength?: number;
-        redactAuditAttributes?(attributes: NamespacedAttributes): NamespacedAttributes;
-        onTrace?(provenance: InvocationProvenance): void;
-    };
-    /** Requires an outbox-capable store; every canonical event is then appended with delivery state. */
-    outbox?: {
-        producerModuleVersion(actionId: ActionId, actionVersion: number): string;
-        classifyPayload(event: AssetEventEnvelope): EventPayloadClassification;
-        includeProvenance?(event: AssetEventEnvelope, classification: EventPayloadClassification): boolean;
-        /**
-         * Opt an event's `actorId` and `actorType` into its outbox envelope. Absent, the actor is
-         * excluded for every classification. Only `true` includes it. An included actor reaches every
-         * sink of every relay reading this outbox.
-         */
-        includeActor?(event: AssetEventEnvelope, classification: EventPayloadClassification): boolean;
-        traceContext?(event: AssetEventEnvelope): Record<string, string> | undefined;
-        /** Host lifecycle events are excluded by default; opt in only after making their payload audit-safe. */
-        shouldPublish?(event: AssetEventEnvelope): boolean;
-    };
-    /** Optional vertical-owned evaluator. When absent, agent behavior is unchanged. */
-    hitlEvaluator?: AgentActionPolicyEvaluator;
-    /** Durable evaluator/ruleset version recorded with every HITL decision. */
-    hitlPolicyVersion?: string;
-    /** Optional portable resolver; provider-specific implementations belong in integration packages. */
-    resolveMutationGovernance?: MutationGovernanceResolver;
-    /** Translate policy outcomes into durable, enforceable obligations. */
-    resolvePolicyObligations?: (outcomes: readonly PolicyOutcome[]) => Promise<PolicyObligation[]> | PolicyObligation[];
-    /** Translate a successful adapter result into audit-safe external execution evidence. */
-    extractExecutionAttestation?: (input: {
-        actionInvocationId: string;
-        adapterInvocationId: string;
-        adapterType: string;
-        operation: string;
-        vendor: string;
-        /** Audit-safe adapter input after redactAdapterInput has been applied. */
-        input: Record<string, unknown>;
-        startedAt: Date;
-        completedAt: Date;
-        /** Adapter output after redactAdapterOutput, when configured. */
-        output: Record<string, unknown>;
-    }) => Promise<ExecutionAttestation | undefined> | ExecutionAttestation | undefined;
-    /** Package/provider/ruleset generations persisted with every newly created invocation. */
-    runtimeEvidence?: Partial<GovernanceRuntimeEvidence>;
-    /**
-     * Trusted composition identity attached by the Host configuration, never
-     * accepted directly from submission input. Requires an explicit registry;
-     * its module namespaces and versions are checked against these identities.
-     */
-    composition?: {
-        assembly: AssemblyLockfile;
-        /**
-         * Receives a fresh object whose action, scope, actor, correlation,
-         * causation, idempotency key, binding id and execution reason are the
-         * ones Host read at submission and persists, whatever the caller
-         * changed on its own object since. For an action without
-         * `admitSubmission`, its `parameters`, `provenance` and
-         * `authorizationBinding` read and assign the caller's input, as when
-         * the callback was handed that input itself; for an action that
-         * declares it, they are fresh copies of Host's snapshot.
-         */
-        resolveInitiatingReleaseDigest?(input: SubmitActionInput): Promise<string | undefined> | string | undefined;
-    };
-    /** Lease held while an approved invocation resumes; defaults to five minutes. */
-    approvalResumeLeaseDurationMs?: number;
-    /**
-     * Remove forbidden/sensitive fields before durable invocation persistence.
-     * For an action without `admitSubmission`, receives the caller's
-     * parameters object, before provenance normalization and the composition
-     * callback, as before. For an action that declares it, receives Host's
-     * copy, after the check admitted the submission.
-     */
-    redactActionParameters?: (actionId: ActionId, parameters: Record<string, unknown>) => Record<string, unknown>;
-    /**
-     * The bound on an action's `admitSubmission` check. An answer that
-     * settles this many milliseconds or more after the check was called,
-     * measured on the monotonic clock when its promise settles, is refused as
-     * `timed_out` and the check's signal is aborted. A whole number from 1 to
-     * 2 147 483 647 (the timer maximum), or `createGovernedActionHost` throws;
-     * default 10 000.
-     */
-    admissionTimeoutMs?: number;
-    resolvePolicies?: (input: ResolvePoliciesInput) => Promise<RuntimePolicyDefinition[]>;
-    extractEvents?: (data: Record<string, unknown>) => PendingAssetEvent[];
-    /** Handler-result fields consumed by extractEvents and omitted from the durable result. */
-    eventResultFields?: readonly string[];
-    redactAdapterInput?: (actionId: ActionId, adapterType: string, operation: string, input: Record<string, unknown>) => Record<string, unknown>;
+export interface ErrorTextRedactionContext {
+  actionId: ActionId;
+  source: "handler" | "adapter" | "external_completion" | "execution";
+  adapterType?: string;
+  operation?: string;
+  /** Adapter vendor or external completion provider. */
+  provider?: string;
+}
+export interface PlatformHostOptions<TDb> {
+  store: PlatformHostStore<TDb>;
+  authorization: PlatformHostAuthorization;
+  /** Preferred explicit catalog assembled from this runtime's Fabric modules. */
+  registry?: Pick<ModuleRegistry<TDb>, "resolveAction" | "resolvePolicy" | "resolveStateMachine"> & Partial<Pick<ModuleRegistry<TDb>, "orderedModules">>;
+  /** Resolve vertical- or runtime-local actions without mutating the process-wide registry. */
+  resolveAction?: (actionId: ActionId) => ActionDefinition<TDb> | undefined;
+  adapters?: readonly AdapterImplementation[];
+  /**
+   * Supplies the circuit breaker for each adapter call. Defaults to a new
+   * `AdapterCircuitBreakerRegistry` per Host instance, which creates one
+   * in-process breaker per `adapterType:operation` from that adapter's own
+   * `circuitBreaker` config, on first use, and none for adapters without one.
+   * Pass a shared registry or a custom provider to share breakers between
+   * Host instances, receive breaker telemetry, or set manual overrides.
+   * The default key shares failures across tenants and vendors in a registry.
+   * Use `new AdapterCircuitBreakerRegistry({ key: scopedAdapterCircuitBreakerKey })`
+   * for tenant/space/vendor isolation. Host passes trusted tenant/space scope
+   * to the provider. The registry keeps the first config seen for a key;
+   * later conflicting configs reuse that breaker without throwing. Breakers
+   * are never evicted, so scoped keys keep one breaker per scope seen.
+   */
+  adapterCircuitBreakers?: AdapterCircuitBreakerProvider;
+  /**
+   * Positive integer attempt cap for RetryableExecutionError during governance,
+   * before policy-evaluation persistence (default 5). A leased, idempotent action
+   * below the cap is left running for worker reclaim after lease expiry.
+   * Inline execution, approval resume, exhausted attempts, and non-idempotent
+   * actions fail. Policy persistence, obligation listing/resolution/persistence, state-machine checks,
+   * the handler transaction, handlers, adapters, and finalization are excluded;
+   * their failure/reconciliation/recovery semantics apply, subject to recoveryMaxAttempts.
+   */
+  retryableExecutionMaxAttempts?: number;
+  /**
+   * Positive integer cap on worker claims for resumed leased running invocations
+   * including the first (default max(5, retryableExecutionMaxAttempts); Infinity is rejected).
+   * An explicit value must be at least retryableExecutionMaxAttempts. Claims above
+   * the cap settle reconciliation_required before
+   * handler or adapter execution. Inline/direct execution and approval resume
+   * do not increment this counter. Approval resume is admitted at the cap and settles
+   * reconciliation above it; approval does not reset the count. Parked handoffs are excluded. A worker dying
+   * before the check consumes a claim without executing a provider at that point.
+   */
+  recoveryMaxAttempts?: number;
+  dispatcher?: PlatformActionDispatcher;
+  services?: FabricRuntimeServices;
+  idempotency?: {
+    conflictMode?: "audit-only" | "enforce";
+    onConflict?(conflict: IdempotencyConflict): void;
+    onLegacyRecord?(invocation: ActionInvocationRecord): void;
+  };
+  provenance?: {
+    auditAttributeAllowlist?: readonly string[];
+    maxAttributes?: number;
+    maxValueLength?: number;
+    redactAuditAttributes?(attributes: NamespacedAttributes): NamespacedAttributes;
+    onTrace?(provenance: InvocationProvenance): void;
+  };
+  /** Requires an outbox-capable store; every canonical event is then appended with delivery state. */
+  outbox?: {
+    producerModuleVersion(actionId: ActionId, actionVersion: number): string;
+    classifyPayload(event: AssetEventEnvelope): EventPayloadClassification;
+    includeProvenance?(event: AssetEventEnvelope, classification: EventPayloadClassification): boolean;
     /**
-     * Redact successful adapter output before row/event persistence and attestation extraction.
-     * A throwing hook or a null, array or non-object return withholds output and requires reconciliation.
-     * Class instances and Dates are accepted, matching the adapter output record contract.
-     * Keep redactors deterministic and stable across deploys.
-     * Accepted-operation references are read from the original adapter result.
+     * Opt an event's `actorId` and `actorType` into its outbox envelope. Absent, the actor is
+     * excluded for every classification. Only `true` includes it. An included actor reaches every
+     * sink of every relay reading this outbox.
      */
-    redactAdapterOutput?: (actionId: ActionId, adapterType: string, operation: string, output: Record<string, unknown>) => Record<string, unknown>;
-    /**
-     * Redact originating handler, adapter, completion and caught execution error text.
-     * Host-authored fixed text bypasses this hook; circuit and consistency errors use adapter context.
-     * Empty originating text bypasses the hook unchanged. For non-empty input, throwing or returning
-     * a non-string or empty string uses a placeholder on execution paths, but refuses a completion
-     * as redaction_failed before writes. State-machine `transition.error` text uses `source: "handler"`.
-     * Keep redactors deterministic and stable across deploys: changed output can make a repeat
-     * completion look like different evidence.
-     */
-    redactErrorText?: (context: ErrorTextRedactionContext, message: string) => string;
-    /**
-     * Redact completion results before merging, schema validation, persistence and digesting.
-     * Contradiction detection compares retained values; legacy raw digests also match repeats.
-     * A throwing hook or a null, array or non-object return refuses as redaction_failed before writes.
-     * Class instances and Dates are accepted by the same record predicate as adapter output.
-     * Keep redactors deterministic and stable across deploys: changes can make a repeat look like
-     * different evidence. A matching legacy raw digest is acknowledged before invoking hooks.
-     */
-    redactExternalCompletionResult?: (actionId: ActionId, provider: string, result: Record<string, unknown>) => Record<string, unknown>;
-    adapterEventSubject?: (actionId: ActionId, parameters: unknown, handlerResult: Record<string, unknown>) => {
-        subjectType: string;
-        subjectId: string;
-    } | undefined;
-    now?: () => Date;
-    /** Vendor-neutral lifecycle and metric sink. Telemetry is best effort. */
-    telemetry?: PlatformHostTelemetry;
-    /**
-     * Epoch-millis deadline delivered to every adapter execution context.
-     * When omitted, no deadline is set and adapters receive no AbortSignal.
-     */
-    adapterDeadlineMs?: number;
-}
-interface GovernedActionHost {
-    submitAction(input: SubmitActionInput): Promise<SubmitActionResult>;
-    executeInvocation(actionInvocationId: string, tenantId: string, spaceId: string, options?: ExecuteInvocationOptions): Promise<ExecuteActionResult>;
-    resumeApprovedInvocation(actionInvocationId: string, tenantId: string, spaceId: string, decision: ActionApprovalDecision): Promise<ExecuteActionResult>;
-    recordExecutionAttestation(actionInvocationId: string, tenantId: string, spaceId: string, attestation: ExecutionAttestation): Promise<void>;
-    recordExternalReconciliation(actionInvocationId: string, tenantId: string, spaceId: string, reconciliation: ExternalReconciliation): Promise<void>;
-    /**
-     * Complete an invocation an adapter handed off, by the reference the
-     * external system was given. Idempotent for a repeated identical
-     * completion; a contradictory one moves the invocation to reconciliation.
-     */
-    completeExternalInvocation(actionInvocationId: string, tenantId: string, spaceId: string, completion: ExternalCompletion): Promise<ExecuteActionResult>;
+    includeActor?(event: AssetEventEnvelope, classification: EventPayloadClassification): boolean;
+    traceContext?(event: AssetEventEnvelope): Record<string, string> | undefined;
+    /** Host lifecycle events are excluded by default; opt in only after making their payload audit-safe. */
+    shouldPublish?(event: AssetEventEnvelope): boolean;
+  };
+  /** Optional vertical-owned evaluator. When absent, agent behavior is unchanged. */
+  hitlEvaluator?: AgentActionPolicyEvaluator;
+  /** Durable evaluator/ruleset version recorded with every HITL decision. */
+  hitlPolicyVersion?: string;
+  /** Optional portable resolver; provider-specific implementations belong in integration packages. */
+  resolveMutationGovernance?: MutationGovernanceResolver;
+  /** Translate policy outcomes into durable, enforceable obligations. */
+  resolvePolicyObligations?: (outcomes: readonly PolicyOutcome[]) => Promise<PolicyObligation[]> | PolicyObligation[];
+  /** Translate a successful adapter result into audit-safe evidence. Recovery may call this
+   * again with stored input/output; return deterministic evidence for the same input. */
+  extractExecutionAttestation?: (input: {
+    actionInvocationId: string;
+    adapterInvocationId: string;
+    adapterType: string;
+    operation: string;
+    vendor: string;
+    /** Audit-safe adapter input after redactAdapterInput has been applied. */
+    input: Record<string, unknown>;
+    startedAt: Date;
+    completedAt: Date;
+    /** Adapter output after redactAdapterOutput, when configured. */
+    output: Record<string, unknown>;
+  }) => Promise<ExecutionAttestation | undefined> | ExecutionAttestation | undefined;
+  /** Package/provider/ruleset generations persisted with every newly created invocation. */
+  runtimeEvidence?: Partial<GovernanceRuntimeEvidence>;
+  /**
+   * Trusted composition identity attached by the Host configuration, never
+   * accepted directly from submission input. Requires an explicit registry;
+   * its module namespaces and versions are checked against these identities.
+   */
+  composition?: {
+    assembly: AssemblyLockfile;
     /**
-     * Move handoffs past their deadline to `reconciliation_required`, so a
-     * callback that never comes is a finding and not a silent wait. The
-     * pending handoff is kept, so a late completion can still land.
+     * Receives a fresh object whose action, scope, actor, correlation,
+     * causation, idempotency key, binding id and execution reason are the
+     * ones Host read at submission and persists, whatever the caller
+     * changed on its own object since. For an action without
+     * `admitSubmission`, its `parameters`, `provenance` and
+     * `authorizationBinding` read and assign the caller's input, as when
+     * the callback was handed that input itself; for an action that
+     * declares it, they are fresh copies of Host's snapshot.
      */
-    reconcileOverdueCompletions(input?: ReconcileOverdueCompletionsInput): Promise<{
-        overdue: string[];
-    }>;
+    resolveInitiatingReleaseDigest?(input: SubmitActionInput): Promise<string | undefined> | string | undefined;
+  };
+  /** Lease held while an approved invocation resumes; defaults to five minutes. */
+  approvalResumeLeaseDurationMs?: number;
+  /**
+   * Remove forbidden/sensitive fields before durable invocation persistence.
+   * For an action without `admitSubmission`, receives the caller's
+   * parameters object, before provenance normalization and the composition
+   * callback, as before. For an action that declares it, receives Host's
+   * copy, after the check admitted the submission.
+   */
+  redactActionParameters?: (actionId: ActionId, parameters: Record<string, unknown>) => Record<string, unknown>;
+  /**
+   * The bound on an action's `admitSubmission` check. An answer that
+   * settles this many milliseconds or more after the check was called,
+   * measured on the monotonic clock when its promise settles, is refused as
+   * `timed_out` and the check's signal is aborted. A whole number from 1 to
+   * 2 147 483 647 (the timer maximum), or `createGovernedActionHost` throws;
+   * default 10 000.
+   */
+  admissionTimeoutMs?: number;
+  resolvePolicies?: (input: ResolvePoliciesInput) => Promise<RuntimePolicyDefinition[]>;
+  extractEvents?: (data: Record<string, unknown>) => PendingAssetEvent[];
+  /** Handler-result fields consumed by extractEvents and omitted from the durable result. */
+  eventResultFields?: readonly string[];
+  redactAdapterInput?: (actionId: ActionId, adapterType: string, operation: string, input: Record<string, unknown>) => Record<string, unknown>;
+  /**
+   * Redact successful adapter output before row/event persistence and attestation extraction.
+   * A throwing hook or a null, array or non-object return withholds output and requires reconciliation.
+   * Class instances and Dates are accepted, matching the adapter output record contract.
+   * Keep redactors deterministic and stable across deploys.
+   * Accepted-operation references are read from the original adapter result.
+   */
+  redactAdapterOutput?: (actionId: ActionId, adapterType: string, operation: string, output: Record<string, unknown>) => Record<string, unknown>;
+  /**
+   * Redact originating handler, adapter, completion and caught execution error text.
+   * Host-authored fixed text bypasses this hook; circuit and consistency errors use adapter context.
+   * Empty originating text bypasses the hook unchanged. For non-empty input, throwing or returning
+   * a non-string or empty string uses a placeholder on execution paths, but refuses a completion
+   * as redaction_failed before writes. State-machine `transition.error` text uses `source: "handler"`.
+   * Keep redactors deterministic and stable across deploys: changed output can make a repeat
+   * completion look like different evidence.
+   */
+  redactErrorText?: (context: ErrorTextRedactionContext, message: string) => string;
+  /**
+   * Redact completion results before merging, schema validation, persistence and digesting.
+   * Contradiction detection compares retained values; legacy raw digests also match repeats.
+   * A throwing hook or a null, array or non-object return refuses as redaction_failed before writes.
+   * Class instances and Dates are accepted by the same record predicate as adapter output.
+   * Keep redactors deterministic and stable across deploys: changes can make a repeat look like
+   * different evidence. A matching legacy raw digest is acknowledged before invoking hooks.
+   */
+  redactExternalCompletionResult?: (actionId: ActionId, provider: string, result: Record<string, unknown>) => Record<string, unknown>;
+  adapterEventSubject?: (actionId: ActionId, parameters: unknown, handlerResult: Record<string, unknown>) => {
+    subjectType: string;
+    subjectId: string;
+  } | undefined;
+  now?: () => Date;
+  /** Vendor-neutral lifecycle and metric sink. Telemetry is best effort. */
+  telemetry?: PlatformHostTelemetry;
+  /**
+   * Epoch-millis deadline delivered to every adapter execution context.
+   * When omitted, no deadline is set and adapters receive no AbortSignal.
+   */
+  adapterDeadlineMs?: number;
+}
+export interface GovernedActionHost {
+  submitAction(input: SubmitActionInput): Promise<SubmitActionResult>;
+  executeInvocation(actionInvocationId: string, tenantId: string, spaceId: string, options?: ExecuteInvocationOptions): Promise<ExecuteActionResult>;
+  resumeApprovedInvocation(actionInvocationId: string, tenantId: string, spaceId: string, decision: ActionApprovalDecision): Promise<ExecuteActionResult>;
+  recordExecutionAttestation(actionInvocationId: string, tenantId: string, spaceId: string, attestation: ExecutionAttestation): Promise<void>;
+  recordExternalReconciliation(actionInvocationId: string, tenantId: string, spaceId: string, reconciliation: ExternalReconciliation): Promise<void>;
+  /**
+   * Complete an invocation an adapter handed off, by the reference the
+   * external system was given. Idempotent for a repeated identical
+   * completion; a contradictory one moves the invocation to reconciliation.
+   */
+  completeExternalInvocation(actionInvocationId: string, tenantId: string, spaceId: string, completion: ExternalCompletion): Promise<ExecuteActionResult>;
+  /**
+   * Move eligible running, unleased overdue handoffs to `reconciliation_required`
+   * and retain the handoff with overdueAt. A callback can settle that verdict
+   * only after parking; callbacks for swept unparked invocations record redacted
+   * evidence without result-schema validation. Parked rows lacking overdueAt
+   * retain the weaker "did not complete by" error-substring fallback.
+   */
+  reconcileOverdueCompletions(input?: ReconcileOverdueCompletionsInput): Promise<{
+    overdue: string[];
+  }>;
 }
 /**
  * Host operator operations kept outside `GovernedActionHost`, so an existing
  * hand-written `GovernedActionHost` still satisfies that interface.
  * `createGovernedActionHost()` returns both.
  */
-interface OutboxRequeueHost {
-    /**
-     * Operator replay of a dead-lettered outbox record: authorize the trusted
-     * actor for the tenant and space against the record as read, then move
-     * that same dead letter back to pending with a fresh attempt budget and
-     * append who, when, and why beside the earlier failure. The relay
-     * republishes it under the same `eventId`. Requires an
-     * `OutboxRequeuePlatformHostStore`; refusals are returned, not thrown.
-     */
-    requeueOutboxDeadLetter(input: RequeueOutboxDeadLetterInput): Promise<RequeueOutboxDeadLetterResult>;
-}
-
-declare function createGovernedActionHost<TDb>(options: PlatformHostOptions<TDb>): GovernedActionHost & OutboxRequeueHost;
-
-interface MemoryPlatformHostTransactionProvider<TDb> {
-    snapshot(db: TDb): TDb;
-    restore(db: TDb, snapshot: TDb): void;
-}
-declare class MemoryPlatformHostStore<TDb> implements RecoverablePlatformHostStore<TDb>, ApprovalPlatformHostStore<TDb>, GovernancePlatformHostStore<TDb>, OutboxPlatformHostStore<TDb>, OutboxRequeuePlatformHostStore<TDb> {
-    readonly db: TDb;
-    readonly transactionalOutbox: boolean;
-    transactionWithEvents?: <TResult>(run: (transaction: PlatformHostMutationTransaction<TDb>) => Promise<TResult>) => Promise<TResult>;
-    private transactionTail;
-    readonly invocations: ActionInvocationRecord[];
-    readonly policyEvaluations: PolicyEvaluationRecord[];
-    readonly adapterInvocations: AdapterInvocationRecord[];
-    readonly events: AssetEventEnvelope[];
-    readonly policyObligations: PolicyObligationRecord[];
-    readonly executionAttestations: ExecutionAttestationRecord[];
-    readonly externalReconciliations: ExternalReconciliationRecord[];
-    readonly outbox: OutboxRecord[];
-    /**
-     * Requeue evidence is append-only audit history, so unlike the ledger
-     * arrays above, which tests have always inspected and seeded directly, it
-     * is not public: `listOutboxRequeues` returns copies with their own Dates. TypeScript
-     * `private`, as for the store's other internals, is a compile-time guard.
-     */
-    private readonly outboxRequeues;
-    constructor(db: TDb, transactionProvider?: MemoryPlatformHostTransactionProvider<TDb>);
-    transaction<TResult>(run: (db: TDb) => Promise<TResult>): Promise<TResult>;
-    private runTransactionWithEvents;
-    createActionInvocation(input: CreateActionInvocationInput): Promise<ActionInvocationRecord>;
-    getActionInvocation(id: string, tenantId: string, spaceId: string): Promise<ActionInvocationRecord | undefined>;
-    updateActionInvocation(id: string, tenantId: string, spaceId: string, patch: ActionInvocationPatch): Promise<void>;
-    recordHitlDecision(actionInvocationId: string, tenantId: string, spaceId: string, decision: HitlDecisionEvidence): Promise<ActionInvocationRecord>;
-    beginApprovalDecision(input: BeginApprovalDecisionInput): Promise<ApprovalDecisionTransitionResult>;
-    appendPolicyEvaluation(record: PolicyEvaluationRecord): Promise<void>;
-    recordMutationGovernance(actionInvocationId: string, tenantId: string, spaceId: string, context: Pick<ActionInvocationRecord, "mutationFootprint" | "executionPrincipal"> & {
-        footprint: NonNullable<ActionInvocationRecord["mutationFootprint"]>;
-        executionPrincipal: NonNullable<ActionInvocationRecord["executionPrincipal"]>;
-    }): Promise<ActionInvocationRecord>;
-    appendPolicyObligations(records: PolicyObligationRecord[]): Promise<void>;
-    listPolicyObligations(actionInvocationId: string, tenantId: string, spaceId: string): Promise<PolicyObligationRecord[]>;
-    updatePolicyObligation(actionInvocationId: string, obligationId: string, status: PolicyObligationRecord["status"], evidenceReferences?: PolicyObligationRecord["evidenceReferences"]): Promise<void>;
-    appendExecutionAttestation(record: ExecutionAttestationRecord): Promise<void>;
-    listExecutionAttestations(actionInvocationId: string, tenantId: string, spaceId: string): Promise<ExecutionAttestationRecord[]>;
-    appendExternalReconciliation(record: ExternalReconciliationRecord): Promise<void>;
-    createAdapterInvocation(record: AdapterInvocationRecord): Promise<void>;
-    getAdapterInvocation(id: string, scope?: AdapterInvocationScope): Promise<AdapterInvocationRecord | undefined>;
-    updateAdapterInvocation(id: string, patch: Partial<Pick<AdapterInvocationRecord, "status" | "output" | "error" | "attempt" | "updatedAt">>, scope?: AdapterInvocationScope): Promise<void>;
-    appendEvent(event: AssetEventEnvelope): Promise<void>;
-    appendEventWithOutbox(event: AssetEventEnvelope, metadata: OutboxEventMetadata): Promise<void>;
-    claimOutbox(input: ClaimOutboxInput): Promise<OutboxRecord[]>;
-    markOutboxPublished(id: string, workerId: string, publishedAt: Date, leaseToken?: number): Promise<void>;
-    markOutboxFailed(input: {
-        id: string;
-        workerId: string;
-        leaseToken?: number;
-        error: string;
-        availableAt: Date;
-        deadLetter: boolean;
-    }): Promise<void>;
-    renewOutboxLease(input: {
-        id: string;
-        workerId: string;
-        leaseToken: number;
-        leaseDurationMs: number;
-        now?: Date;
-    }): Promise<boolean>;
-    listOutbox(input?: {
-        tenantId?: string;
-        spaceId?: string;
-        statuses?: OutboxStatus[];
-    }): Promise<OutboxRecord[]>;
-    getOutboxRecord(id: string, tenantId: string, spaceId: string): Promise<OutboxRecord | undefined>;
-    requeueOutboxDeadLetter(input: RequeueOutboxDeadLetterStoreInput): Promise<RequeueOutboxDeadLetterStoreResult>;
-    listOutboxRequeues(input: {
-        tenantId: string;
-        spaceId: string;
-        outboxId?: string;
-    }): Promise<OutboxRequeueRecord[]>;
-    private requireLeasedOutbox;
-    nextEventSequence(tenantId: string, spaceId: string): Promise<number>;
-    getEntityStateSource(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<{
-        state: string;
-        actionInvocationId: string;
-    } | undefined>;
-    getEntityState(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<string | undefined>;
-    listActionInvocations(input?: ListActionInvocationsInput): Promise<ActionInvocationRecord[]>;
-    getHealthCounts(input: PlatformHostHealthQuery): Promise<PlatformHostHealthCounts>;
-    claimActionInvocations(input: ClaimActionInvocationsInput): Promise<ActionInvocationRecord[]>;
-    updateLeasedActionInvocation(input: UpdateLeasedActionInvocationInput): Promise<boolean>;
-    renewActionInvocationLease(input: RenewActionInvocationLeaseInput): Promise<boolean>;
-    listEvents(tenantId: string, spaceId: string): Promise<AssetEventEnvelope[]>;
-}
-
-declare function toEnterpriseEventEnvelope(event: AssetEventEnvelope, metadata: OutboxEventMetadata): EnterpriseEventEnvelope;
-/** The `includeActor` decision a store records with the outbox record it writes from `metadata`. */
-declare function outboxActorDisclosure(metadata: OutboxEventMetadata): OutboxActorDisclosure;
-interface EnterpriseEventPublishContext {
-    signal: AbortSignal;
-    /**
-     * Why the envelope does or does not carry `actorId`/`actorType`. `runOutboxRelayCycle()` always
-     * sets it; a caller other than the relay may omit it, which a consumer should treat like `legacy`.
-     */
-    actorDisclosure?: EnterpriseEventActorDisclosure;
-}
-interface EnterpriseEventPublisher {
-    publish(event: EnterpriseEventEnvelope, context?: EnterpriseEventPublishContext): Promise<void>;
-}
-interface OutboxRelayOptions<TDb> {
-    store: OutboxPlatformHostStore<TDb>;
-    publisher: EnterpriseEventPublisher;
+export interface OutboxRequeueHost {
+  /**
+   * Operator replay of a dead-lettered outbox record: authorize the trusted
+   * actor for the tenant and space against the record as read, then move
+   * that same dead letter back to pending with a fresh attempt budget and
+   * append who, when, and why beside the earlier failure. The relay
+   * republishes it under the same `eventId`. Requires an
+   * `OutboxRequeuePlatformHostStore`; refusals are returned, not thrown.
+   */
+  requeueOutboxDeadLetter(input: RequeueOutboxDeadLetterInput): Promise<RequeueOutboxDeadLetterResult>;
+}
+//#endregion
+//#region src/host.d.ts
+export declare function createGovernedActionHost<TDb>(options: PlatformHostOptions<TDb>): GovernedActionHost & OutboxRequeueHost;
+//#endregion
+//#region src/memory-store.d.ts
+export interface MemoryPlatformHostTransactionProvider<TDb> {
+  snapshot(db: TDb): TDb;
+  restore(db: TDb, snapshot: TDb): void;
+}
+export declare class MemoryPlatformHostStore<TDb> implements RecoverablePlatformHostStore<TDb>, ApprovalPlatformHostStore<TDb>, GovernancePlatformHostStore<TDb>, OutboxPlatformHostStore<TDb>, OutboxRequeuePlatformHostStore<TDb> {
+  readonly db: TDb;
+  readonly transactionalOutbox: boolean;
+  transactionWithEvents?: <TResult>(run: (transaction: PlatformHostMutationTransaction<TDb>) => Promise<TResult>) => Promise<TResult>;
+  private adapterCommit;
+  private transactionTail;
+  readonly invocations: ActionInvocationRecord[];
+  readonly policyEvaluations: PolicyEvaluationRecord[];
+  readonly adapterInvocations: AdapterInvocationRecord[];
+  readonly events: AssetEventEnvelope[];
+  readonly policyObligations: PolicyObligationRecord[];
+  readonly executionAttestations: ExecutionAttestationRecord[];
+  readonly externalReconciliations: ExternalReconciliationRecord[];
+  readonly outbox: OutboxRecord[];
+  /**
+   * Requeue evidence is append-only audit history, so unlike the ledger
+   * arrays above, which tests have always inspected and seeded directly, it
+   * is not public: `listOutboxRequeues` returns copies with their own Dates. TypeScript
+   * `private`, as for the store's other internals, is a compile-time guard.
+   */
+  private readonly outboxRequeues;
+  constructor(db: TDb, transactionProvider?: MemoryPlatformHostTransactionProvider<TDb>);
+  transaction<TResult>(run: (db: TDb) => Promise<TResult>): Promise<TResult>;
+  private runTransactionWithEvents;
+  createActionInvocation(input: CreateActionInvocationInput): Promise<ActionInvocationRecord>;
+  getActionInvocation(id: string, tenantId: string, spaceId: string): Promise<ActionInvocationRecord | undefined>;
+  updateActionInvocation(id: string, tenantId: string, spaceId: string, patch: ActionInvocationPatch): Promise<void>;
+  recordHitlDecision(actionInvocationId: string, tenantId: string, spaceId: string, decision: HitlDecisionEvidence): Promise<ActionInvocationRecord>;
+  beginApprovalDecision(input: BeginApprovalDecisionInput): Promise<ApprovalDecisionTransitionResult>;
+  appendPolicyEvaluation(record: PolicyEvaluationRecord): Promise<void>;
+  recordMutationGovernance(actionInvocationId: string, tenantId: string, spaceId: string, context: Pick<ActionInvocationRecord, "mutationFootprint" | "executionPrincipal"> & {
+    footprint: NonNullable<ActionInvocationRecord["mutationFootprint"]>;
+    executionPrincipal: NonNullable<ActionInvocationRecord["executionPrincipal"]>;
+  }): Promise<ActionInvocationRecord>;
+  appendPolicyObligations(records: PolicyObligationRecord[]): Promise<void>;
+  listPolicyObligations(actionInvocationId: string, tenantId: string, spaceId: string): Promise<PolicyObligationRecord[]>;
+  updatePolicyObligation(actionInvocationId: string, obligationId: string, status: PolicyObligationRecord["status"], evidenceReferences?: PolicyObligationRecord["evidenceReferences"]): Promise<void>;
+  appendExecutionAttestation(record: ExecutionAttestationRecord): Promise<void>;
+  listExecutionAttestations(actionInvocationId: string, tenantId: string, spaceId: string): Promise<ExecutionAttestationRecord[]>;
+  appendExternalReconciliation(record: ExternalReconciliationRecord): Promise<void>;
+  private adapterWriteMatches;
+  updateSettledActionInvocation(input: UpdateSettledActionInvocationInput): Promise<boolean>;
+  writeAdapterInvocation(input: AdapterInvocationWriteInput): Promise<boolean>;
+  createAdapterInvocation(record: AdapterInvocationRecord): Promise<void>;
+  getAdapterInvocation(id: string, scope?: AdapterInvocationScope): Promise<AdapterInvocationRecord | undefined>;
+  updateAdapterInvocation(id: string, patch: Partial<Pick<AdapterInvocationRecord, "status" | "output" | "error" | "attempt" | "updatedAt" | "reconciliation">>, scope?: AdapterInvocationScope): Promise<void>;
+  appendEvent(event: AssetEventEnvelope): Promise<void>;
+  appendEventWithOutbox(event: AssetEventEnvelope, metadata: OutboxEventMetadata): Promise<void>;
+  claimOutbox(input: ClaimOutboxInput): Promise<OutboxRecord[]>;
+  markOutboxPublished(id: string, workerId: string, publishedAt: Date, leaseToken?: number): Promise<void>;
+  markOutboxFailed(input: {
+    id: string;
+    workerId: string;
+    leaseToken?: number;
+    error: string;
+    availableAt: Date;
+    deadLetter: boolean;
+  }): Promise<void>;
+  renewOutboxLease(input: {
+    id: string;
     workerId: string;
-    leaseDurationMs?: number;
-    leaseRenewalIntervalMs?: number;
-    publishTimeoutMs?: number;
-    batchSize?: number;
-    maxAttempts?: number;
-    retryDelayMs?: (attempt: number) => number;
-    now?: () => Date;
-    telemetry?: PlatformHostTelemetry;
-}
-interface OutboxRelayResult {
-    claimed: number;
-    published: number;
-    failed: number;
-    deadLettered: number;
-}
-declare function runOutboxRelayCycle<TDb>(options: OutboxRelayOptions<TDb>): Promise<OutboxRelayResult>;
+    leaseToken: number;
+    leaseDurationMs: number;
+    now?: Date;
+  }): Promise<boolean>;
+  listOutbox(input?: {
+    tenantId?: string;
+    spaceId?: string;
+    statuses?: OutboxStatus[];
+  }): Promise<OutboxRecord[]>;
+  getOutboxRecord(id: string, tenantId: string, spaceId: string): Promise<OutboxRecord | undefined>;
+  requeueOutboxDeadLetter(input: RequeueOutboxDeadLetterStoreInput): Promise<RequeueOutboxDeadLetterStoreResult>;
+  listOutboxRequeues(input: {
+    tenantId: string;
+    spaceId: string;
+    outboxId?: string;
+  }): Promise<OutboxRequeueRecord[]>;
+  private requireLeasedOutbox;
+  nextEventSequence(tenantId: string, spaceId: string): Promise<number>;
+  getEntityStateSource(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<{
+    state: string;
+    actionInvocationId: string;
+  } | undefined>;
+  getEntityState(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<string | undefined>;
+  listActionInvocations(input?: ListActionInvocationsInput): Promise<ActionInvocationRecord[]>;
+  getHealthCounts(input: PlatformHostHealthQuery): Promise<PlatformHostHealthCounts>;
+  claimActionInvocations(input: ClaimActionInvocationsInput): Promise<ActionInvocationRecord[]>;
+  updateLeasedActionInvocation(input: UpdateLeasedActionInvocationInput): Promise<boolean>;
+  renewActionInvocationLease(input: RenewActionInvocationLeaseInput): Promise<boolean>;
+  listEvents(tenantId: string, spaceId: string): Promise<AssetEventEnvelope[]>;
+}
+//#endregion
+//#region src/outbox.d.ts
+export declare function toEnterpriseEventEnvelope(event: AssetEventEnvelope, metadata: OutboxEventMetadata): EnterpriseEventEnvelope;
+/** The `includeActor` decision a store records with the outbox record it writes from `metadata`. */
+export declare function outboxActorDisclosure(metadata: OutboxEventMetadata): OutboxActorDisclosure;
+export interface EnterpriseEventPublishContext {
+  signal: AbortSignal;
+  /**
+   * Why the envelope does or does not carry `actorId`/`actorType`. `runOutboxRelayCycle()` always
+   * sets it; a caller other than the relay may omit it, which a consumer should treat like `legacy`.
+   */
+  actorDisclosure?: EnterpriseEventActorDisclosure;
+}
+export interface EnterpriseEventPublisher {
+  publish(event: EnterpriseEventEnvelope, context?: EnterpriseEventPublishContext): Promise<void>;
+}
+export interface OutboxRelayOptions<TDb> {
+  store: OutboxPlatformHostStore<TDb>;
+  publisher: EnterpriseEventPublisher;
+  workerId: string;
+  leaseDurationMs?: number;
+  leaseRenewalIntervalMs?: number;
+  publishTimeoutMs?: number;
+  batchSize?: number;
+  maxAttempts?: number;
+  retryDelayMs?: (attempt: number) => number;
+  now?: () => Date;
+  telemetry?: PlatformHostTelemetry;
+}
+export interface OutboxRelayResult {
+  claimed: number;
+  published: number;
+  failed: number;
+  deadLettered: number;
+}
+export declare function runOutboxRelayCycle<TDb>(options: OutboxRelayOptions<TDb>): Promise<OutboxRelayResult>;
 /**
  * A copy with its own Date fields and trace context. The event payload and
  * provenance are shallow: the copy shares them with the record, as before.
  */
-declare function cloneOutboxRecord(record: OutboxRecord): OutboxRecord;
-
-interface PlatformHostSqlResult<Row = Record<string, unknown>> {
-    rows: Row[];
+export declare function cloneOutboxRecord(record: OutboxRecord): OutboxRecord;
+//#endregion
+//#region src/postgres-store.d.ts
+export interface PlatformHostSqlResult<Row = Record<string, unknown>> {
+  rows: Row[];
 }
 /** Structural subset implemented by `pg.Pool` and Lakebase-compatible clients. */
-interface PlatformHostSqlClient {
-    query<Row = Record<string, unknown>>(sql: string, values?: unknown[]): Promise<PlatformHostSqlResult<Row>>;
+export interface PlatformHostSqlClient {
+  query<Row = Record<string, unknown>>(sql: string, values?: unknown[]): Promise<PlatformHostSqlResult<Row>>;
 }
-interface PostgresPlatformHostTransactionContext<TDb> {
-    db: TDb;
-    sql: PlatformHostSqlClient;
+export interface PostgresPlatformHostTransactionContext<TDb> {
+  db: TDb;
+  sql: PlatformHostSqlClient;
 }
 /**
  * Application-owned transaction binder.
@@ -1378,87 +1505,90 @@ interface PostgresPlatformHostTransactionContext<TDb> {
  * `pg.PoolClient`. Production applications provide this adapter so domain
  * methods and Host ledger writes share one PostgreSQL transaction.
  */
-interface PostgresPlatformHostTransactionProvider<TDb> {
-    run<TResult>(run: (context: PostgresPlatformHostTransactionContext<TDb>) => Promise<TResult>): Promise<TResult>;
+export interface PostgresPlatformHostTransactionProvider<TDb> {
+  run<TResult>(run: (context: PostgresPlatformHostTransactionContext<TDb>) => Promise<TResult>): Promise<TResult>;
 }
 /** Durable mutation-pipeline ledger for Databricks Lakebase or standard Postgres. */
-declare class PostgresPlatformHostStore<TDb> implements RecoverablePlatformHostStore<TDb>, ApprovalPlatformHostStore<TDb>, GovernancePlatformHostStore<TDb>, OutboxPlatformHostStore<TDb>, OutboxRequeuePlatformHostStore<TDb> {
-    readonly db: TDb;
-    private readonly sql;
-    readonly transactionWithEvents?: AtomicMutationPlatformHostStore<TDb>["transactionWithEvents"];
-    readonly transactionalOutbox: boolean;
-    constructor(db: TDb, sql: PlatformHostSqlClient, transactionProvider?: PostgresPlatformHostTransactionProvider<TDb>);
-    ensureSchema(): Promise<void>;
-    transaction<TResult>(run: (db: TDb) => Promise<TResult>): Promise<TResult>;
-    createActionInvocation(input: CreateActionInvocationInput): Promise<ActionInvocationRecord>;
-    getActionInvocation(id: string, tenantId: string, spaceId: string): Promise<ActionInvocationRecord | undefined>;
-    updateActionInvocation(id: string, tenantId: string, spaceId: string, patch: ActionInvocationPatch): Promise<void>;
-    recordHitlDecision(actionInvocationId: string, tenantId: string, spaceId: string, decision: HitlDecisionEvidence): Promise<ActionInvocationRecord>;
-    beginApprovalDecision(input: BeginApprovalDecisionInput): Promise<ApprovalDecisionTransitionResult>;
-    appendPolicyEvaluation(record: PolicyEvaluationRecord): Promise<void>;
-    recordMutationGovernance(actionInvocationId: string, tenantId: string, spaceId: string, context: {
-        footprint: NonNullable<ActionInvocationRecord["mutationFootprint"]>;
-        executionPrincipal: NonNullable<ActionInvocationRecord["executionPrincipal"]>;
-    }): Promise<ActionInvocationRecord>;
-    appendPolicyObligations(records: PolicyObligationRecord[]): Promise<void>;
-    listPolicyObligations(actionInvocationId: string, tenantId: string, spaceId: string): Promise<PolicyObligationRecord[]>;
-    updatePolicyObligation(actionInvocationId: string, obligationId: string, status: PolicyObligationRecord["status"], evidenceReferences?: PolicyObligationRecord["evidenceReferences"]): Promise<void>;
-    appendExecutionAttestation(record: ExecutionAttestationRecord): Promise<void>;
-    listExecutionAttestations(actionInvocationId: string, tenantId: string, spaceId: string): Promise<ExecutionAttestationRecord[]>;
-    appendExternalReconciliation(record: ExternalReconciliationRecord): Promise<void>;
-    createAdapterInvocation(record: AdapterInvocationRecord): Promise<void>;
-    getAdapterInvocation(id: string, scope?: AdapterInvocationScope): Promise<AdapterInvocationRecord | undefined>;
-    updateAdapterInvocation(id: string, patch: Partial<Pick<AdapterInvocationRecord, "status" | "output" | "error" | "attempt" | "updatedAt">>, scope?: AdapterInvocationScope): Promise<void>;
-    appendEvent(event: AssetEventEnvelope): Promise<void>;
-    appendEventWithOutbox(event: AssetEventEnvelope, metadata: OutboxEventMetadata): Promise<void>;
-    claimOutbox(input: ClaimOutboxInput): Promise<OutboxRecord[]>;
-    markOutboxPublished(id: string, workerId: string, publishedAt: Date, leaseToken?: number): Promise<void>;
-    markOutboxFailed(input: {
-        id: string;
-        workerId: string;
-        leaseToken?: number;
-        error: string;
-        availableAt: Date;
-        deadLetter: boolean;
-    }): Promise<void>;
-    renewOutboxLease(input: {
-        id: string;
-        workerId: string;
-        leaseToken: number;
-        leaseDurationMs: number;
-        now?: Date;
-    }): Promise<boolean>;
-    listOutbox(input?: {
-        tenantId?: string;
-        spaceId?: string;
-        statuses?: OutboxStatus[];
-    }): Promise<OutboxRecord[]>;
-    getOutboxRecord(id: string, tenantId: string, spaceId: string): Promise<OutboxRecord | undefined>;
-    requeueOutboxDeadLetter(input: RequeueOutboxDeadLetterStoreInput): Promise<RequeueOutboxDeadLetterStoreResult>;
-    listOutboxRequeues(input: {
-        tenantId: string;
-        spaceId: string;
-        outboxId?: string;
-    }): Promise<OutboxRequeueRecord[]>;
-    nextEventSequence(tenantId: string, spaceId: string): Promise<number>;
-    getEntityStateSource(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<{
-        state: string;
-        actionInvocationId: string;
-    } | undefined>;
-    getEntityState(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<string | undefined>;
-    listActionInvocations(input?: ListActionInvocationsInput): Promise<ActionInvocationRecord[]>;
-    getHealthCounts(input: PlatformHostHealthQuery): Promise<PlatformHostHealthCounts>;
-    claimActionInvocations(input: ClaimActionInvocationsInput): Promise<ActionInvocationRecord[]>;
-    updateLeasedActionInvocation(input: UpdateLeasedActionInvocationInput): Promise<boolean>;
-    renewActionInvocationLease(input: RenewActionInvocationLeaseInput): Promise<boolean>;
-    listEvents(tenantId: string, spaceId: string): Promise<AssetEventEnvelope[]>;
-    getEvent(id: string, tenantId: string, spaceId: string): Promise<AssetEventEnvelope | undefined>;
-}
-
-interface PostgresMigration {
-    version: number;
-    name: string;
-    sql: string;
+export declare class PostgresPlatformHostStore<TDb> implements RecoverablePlatformHostStore<TDb>, ApprovalPlatformHostStore<TDb>, GovernancePlatformHostStore<TDb>, OutboxPlatformHostStore<TDb>, OutboxRequeuePlatformHostStore<TDb> {
+  readonly db: TDb;
+  private readonly sql;
+  readonly transactionWithEvents?: AtomicMutationPlatformHostStore<TDb>["transactionWithEvents"];
+  readonly transactionalOutbox: boolean;
+  constructor(db: TDb, sql: PlatformHostSqlClient, transactionProvider?: PostgresPlatformHostTransactionProvider<TDb>);
+  ensureSchema(): Promise<void>;
+  transaction<TResult>(run: (db: TDb) => Promise<TResult>): Promise<TResult>;
+  createActionInvocation(input: CreateActionInvocationInput): Promise<ActionInvocationRecord>;
+  getActionInvocation(id: string, tenantId: string, spaceId: string): Promise<ActionInvocationRecord | undefined>;
+  updateActionInvocation(id: string, tenantId: string, spaceId: string, patch: ActionInvocationPatch): Promise<void>;
+  recordHitlDecision(actionInvocationId: string, tenantId: string, spaceId: string, decision: HitlDecisionEvidence): Promise<ActionInvocationRecord>;
+  beginApprovalDecision(input: BeginApprovalDecisionInput): Promise<ApprovalDecisionTransitionResult>;
+  appendPolicyEvaluation(record: PolicyEvaluationRecord): Promise<void>;
+  recordMutationGovernance(actionInvocationId: string, tenantId: string, spaceId: string, context: {
+    footprint: NonNullable<ActionInvocationRecord["mutationFootprint"]>;
+    executionPrincipal: NonNullable<ActionInvocationRecord["executionPrincipal"]>;
+  }): Promise<ActionInvocationRecord>;
+  appendPolicyObligations(records: PolicyObligationRecord[]): Promise<void>;
+  listPolicyObligations(actionInvocationId: string, tenantId: string, spaceId: string): Promise<PolicyObligationRecord[]>;
+  updatePolicyObligation(actionInvocationId: string, obligationId: string, status: PolicyObligationRecord["status"], evidenceReferences?: PolicyObligationRecord["evidenceReferences"]): Promise<void>;
+  appendExecutionAttestation(record: ExecutionAttestationRecord): Promise<void>;
+  listExecutionAttestations(actionInvocationId: string, tenantId: string, spaceId: string): Promise<ExecutionAttestationRecord[]>;
+  appendExternalReconciliation(record: ExternalReconciliationRecord): Promise<void>;
+  updateSettledActionInvocation(input: UpdateSettledActionInvocationInput): Promise<boolean>;
+  writeAdapterInvocation(input: AdapterInvocationWriteInput): Promise<boolean>;
+  createAdapterInvocation(record: AdapterInvocationRecord): Promise<void>;
+  getAdapterInvocation(id: string, scope?: AdapterInvocationScope): Promise<AdapterInvocationRecord | undefined>;
+  updateAdapterInvocation(id: string, patch: Partial<Pick<AdapterInvocationRecord, "status" | "output" | "error" | "attempt" | "updatedAt" | "reconciliation">>, scope?: AdapterInvocationScope): Promise<void>;
+  appendEvent(event: AssetEventEnvelope): Promise<void>;
+  appendEventWithOutbox(event: AssetEventEnvelope, metadata: OutboxEventMetadata): Promise<void>;
+  claimOutbox(input: ClaimOutboxInput): Promise<OutboxRecord[]>;
+  markOutboxPublished(id: string, workerId: string, publishedAt: Date, leaseToken?: number): Promise<void>;
+  markOutboxFailed(input: {
+    id: string;
+    workerId: string;
+    leaseToken?: number;
+    error: string;
+    availableAt: Date;
+    deadLetter: boolean;
+  }): Promise<void>;
+  renewOutboxLease(input: {
+    id: string;
+    workerId: string;
+    leaseToken: number;
+    leaseDurationMs: number;
+    now?: Date;
+  }): Promise<boolean>;
+  listOutbox(input?: {
+    tenantId?: string;
+    spaceId?: string;
+    statuses?: OutboxStatus[];
+  }): Promise<OutboxRecord[]>;
+  getOutboxRecord(id: string, tenantId: string, spaceId: string): Promise<OutboxRecord | undefined>;
+  requeueOutboxDeadLetter(input: RequeueOutboxDeadLetterStoreInput): Promise<RequeueOutboxDeadLetterStoreResult>;
+  listOutboxRequeues(input: {
+    tenantId: string;
+    spaceId: string;
+    outboxId?: string;
+  }): Promise<OutboxRequeueRecord[]>;
+  nextEventSequence(tenantId: string, spaceId: string): Promise<number>;
+  getEntityStateSource(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<{
+    state: string;
+    actionInvocationId: string;
+  } | undefined>;
+  getEntityState(tenantId: string, spaceId: string, entityType: string, entityId: string): Promise<string | undefined>;
+  listActionInvocations(input?: ListActionInvocationsInput): Promise<ActionInvocationRecord[]>;
+  getHealthCounts(input: PlatformHostHealthQuery): Promise<PlatformHostHealthCounts>;
+  claimActionInvocations(input: ClaimActionInvocationsInput): Promise<ActionInvocationRecord[]>;
+  updateLeasedActionInvocation(input: UpdateLeasedActionInvocationInput): Promise<boolean>;
+  renewActionInvocationLease(input: RenewActionInvocationLeaseInput): Promise<boolean>;
+  listEvents(tenantId: string, spaceId: string): Promise<AssetEventEnvelope[]>;
+  getEvent(id: string, tenantId: string, spaceId: string): Promise<AssetEventEnvelope | undefined>;
+}
+//#endregion
+//#region src/postgres-migrations.d.ts
+export interface PostgresMigration {
+  version: number;
+  name: string;
+  sql: string;
 }
 /**
  * Applies an immutable, ordered migration set in one PostgreSQL transaction.
@@ -1466,74 +1596,76 @@ interface PostgresMigration {
  * The transaction-scoped advisory lock serializes migrators. A previously
  * applied version may be presented again only when its checksum is unchanged.
  */
-declare function applyPostgresMigrations(client: PlatformHostSqlClient, migrations: readonly PostgresMigration[]): Promise<void>;
-
-declare const PARAMETER_DIGEST_ALGORITHM: "fabric-canonical-json-sha256-v1";
-
-declare function digestParameters(parameters: unknown): string;
-
+export declare function applyPostgresMigrations(client: PlatformHostSqlClient, migrations: readonly PostgresMigration[]): Promise<void>;
+//#endregion
+//#region src/command-identity.d.ts
+export declare const PARAMETER_DIGEST_ALGORITHM: "fabric-canonical-json-sha256-v1";
+export declare function digestParameters(parameters: unknown): string;
+//#endregion
+//#region src/worker.d.ts
 /**
  * Durable store-backed dispatch: the pending invocation row is the queue item.
  * Repeated dispatches are safe because the workflow id is stable per invocation.
  */
-declare function createStoreBackedActionDispatcher(): PlatformActionDispatcher;
+export declare function createStoreBackedActionDispatcher(): PlatformActionDispatcher;
 /** Claim and execute one bounded batch. Safe to run concurrently across workers. */
-declare function runPlatformActionWorkerCycle<TDb>(options: PlatformActionWorkerOptions<TDb>): Promise<PlatformActionWorkerCycleResult>;
+export declare function runPlatformActionWorkerCycle<TDb>(options: PlatformActionWorkerOptions<TDb>): Promise<PlatformActionWorkerCycleResult>;
 /** Poll until aborted. Each iteration is bounded and waits without busy-spinning. */
-declare function runPlatformActionWorker<TDb>(options: PlatformActionWorkerOptions<TDb>): Promise<void>;
-
+export declare function runPlatformActionWorker<TDb>(options: PlatformActionWorkerOptions<TDb>): Promise<void>;
+//#endregion
+//#region src/saga-parent-lifecycle.d.ts
 interface HostSagaParentLifecycleIdentity {
-    /** Stable identity shared by every retry of the same lifecycle transition. */
-    lifecycleId?: string;
+  /** Stable identity shared by every retry of the same lifecycle transition. */
+  lifecycleId?: string;
 }
 /**
  * Durable record of a single step completing within a saga parent.
  * Structurally compatible with {@link import("@fabricorg/platform-temporal").SagaParentProgressRecord}.
  */
-interface HostSagaParentProgressRecord {
-    stepId: string;
-    index: number;
-    total: number;
-    completedAt: string;
-}
-interface HostSagaParentProgressInput extends HostSagaParentLifecycleIdentity {
-    parentInvocationId: string;
-    tenantId: string;
-    spaceId: string;
-    progress: HostSagaParentProgressRecord;
-}
-interface HostSagaParentApprovalInput extends HostSagaParentLifecycleIdentity {
-    parentInvocationId: string;
-    tenantId: string;
-    spaceId: string;
-    stepId: string;
-    approvalId: string;
-    reason: string;
-}
-interface HostSagaParentCancellationInput extends HostSagaParentLifecycleIdentity {
-    parentInvocationId: string;
-    tenantId: string;
-    spaceId: string;
-    reason: string;
-    actorId: string;
-}
-interface HostSagaParentCompletionInput extends HostSagaParentLifecycleIdentity {
-    parentInvocationId: string;
-    tenantId: string;
-    spaceId: string;
-    result: Record<string, unknown>;
-}
-interface HostSagaParentFailureInput extends HostSagaParentLifecycleIdentity {
-    parentInvocationId: string;
-    tenantId: string;
-    spaceId: string;
-    error: string;
-    compensation: HostCompensationRecord[];
-}
-interface HostCompensationRecord {
-    stepId: string;
-    actionId: string;
-    error?: string;
+export interface HostSagaParentProgressRecord {
+  stepId: string;
+  index: number;
+  total: number;
+  completedAt: string;
+}
+export interface HostSagaParentProgressInput extends HostSagaParentLifecycleIdentity {
+  parentInvocationId: string;
+  tenantId: string;
+  spaceId: string;
+  progress: HostSagaParentProgressRecord;
+}
+export interface HostSagaParentApprovalInput extends HostSagaParentLifecycleIdentity {
+  parentInvocationId: string;
+  tenantId: string;
+  spaceId: string;
+  stepId: string;
+  approvalId: string;
+  reason: string;
+}
+export interface HostSagaParentCancellationInput extends HostSagaParentLifecycleIdentity {
+  parentInvocationId: string;
+  tenantId: string;
+  spaceId: string;
+  reason: string;
+  actorId: string;
+}
+export interface HostSagaParentCompletionInput extends HostSagaParentLifecycleIdentity {
+  parentInvocationId: string;
+  tenantId: string;
+  spaceId: string;
+  result: Record<string, unknown>;
+}
+export interface HostSagaParentFailureInput extends HostSagaParentLifecycleIdentity {
+  parentInvocationId: string;
+  tenantId: string;
+  spaceId: string;
+  error: string;
+  compensation: HostCompensationRecord[];
+}
+export interface HostCompensationRecord {
+  stepId: string;
+  actionId: string;
+  error?: string;
 }
 /**
  * Durable saga parent lifecycle contract backed by a Platform Host store.
@@ -1548,17 +1680,17 @@ interface HostCompensationRecord {
  * the persisted progress, approval park, cancellation, completion, or failure
  * without in-memory state.
  */
-interface HostSagaParentLifecycle {
-    recordProgress(input: HostSagaParentProgressInput): Promise<void>;
-    parkApproval(input: HostSagaParentApprovalInput): Promise<void>;
-    cancel(input: HostSagaParentCancellationInput): Promise<void>;
-    complete(input: HostSagaParentCompletionInput): Promise<void>;
-    fail(input: HostSagaParentFailureInput): Promise<void>;
-}
-interface CreateDurableSagaParentLifecycleOptions<TDb> {
-    store: PlatformHostStore<TDb>;
-    /** Optional clock for deterministic tests. */
-    now?: () => Date;
+export interface HostSagaParentLifecycle {
+  recordProgress(input: HostSagaParentProgressInput): Promise<void>;
+  parkApproval(input: HostSagaParentApprovalInput): Promise<void>;
+  cancel(input: HostSagaParentCancellationInput): Promise<void>;
+  complete(input: HostSagaParentCompletionInput): Promise<void>;
+  fail(input: HostSagaParentFailureInput): Promise<void>;
+}
+export interface CreateDurableSagaParentLifecycleOptions<TDb> {
+  store: PlatformHostStore<TDb>;
+  /** Optional clock for deterministic tests. */
+  now?: () => Date;
 }
 /**
  * Create a {@link HostSagaParentLifecycle} backed by a Platform Host store.
@@ -1568,55 +1700,56 @@ interface CreateDurableSagaParentLifecycleOptions<TDb> {
  * lifecycle event and transitions the parent invocation to the appropriate
  * status so a fresh worker can observe the persisted state after a rollover.
  */
-declare function createDurableSagaParentLifecycle<TDb>(options: CreateDurableSagaParentLifecycleOptions<TDb>): HostSagaParentLifecycle;
-
-interface TenantIsolationScope {
-    tenantId: string;
-    spaceId: string;
-    actorId: string;
-    actorType: ActorType;
-}
-interface TenantIsolationSubject<TDb = unknown> {
-    host: GovernedActionHost;
-    store: RecoverablePlatformHostStore<TDb>;
-    /** A governed action registered on the host, and parameters it accepts. */
-    actionId: ActionId;
-    parameters?: Record<string, unknown>;
-    /** Two scopes in different tenants. */
-    ours: TenantIsolationScope;
-    theirs: TenantIsolationScope;
-    /**
-     * Optional: a governed read the subject exposes, scoped as the projection
-     * host scopes it. Returns what a viewer in `scope` sees for the view. Every
-     * row must carry the `tenantId` it belongs to, so the check can tell a row
-     * of ours from a row of theirs that merely looks the same; two tenants may
-     * legitimately hold equal-looking rows.
-     */
-    read?(scope: TenantIsolationScope): Promise<{
-        allowed: boolean;
-        rows: readonly {
-            tenantId: string;
-        }[];
-    }>;
-    /**
-     * Optional: put the host and store back to a known state before a check.
-     * The checks tolerate accumulated state, and each retires any row it
-     * creates directly, so this exists for subjects whose store is shared.
-     */
-    reset?(): Promise<void> | void;
-}
-interface TenantIsolationCheck {
-    id: "fabric.tenancy.invocation-scoped-read.v1" | "fabric.tenancy.idempotency-key-scoped.v1" | "fabric.tenancy.events-scoped.v1" | "fabric.tenancy.worker-claim-scoped.v1" | "fabric.tenancy.completion-scoped.v1" | "fabric.tenancy.projection-scoped.v1" | "fabric.tenancy.adapter-invocation-read-scoped.v1" | "fabric.tenancy.adapter-invocation-write-scoped.v1";
-    run(subject: TenantIsolationSubject): Promise<string[]>;
-}
-interface TenantIsolationResult {
-    passed: boolean;
-    checks: Array<{
-        id: TenantIsolationCheck["id"];
-        status: "passed" | "failed" | "skipped";
-        evidence: string[];
-        error?: string;
-    }>;
+export declare function createDurableSagaParentLifecycle<TDb>(options: CreateDurableSagaParentLifecycleOptions<TDb>): HostSagaParentLifecycle;
+//#endregion
+//#region src/tenant-isolation.d.ts
+export interface TenantIsolationScope {
+  tenantId: string;
+  spaceId: string;
+  actorId: string;
+  actorType: ActorType;
+}
+export interface TenantIsolationSubject<TDb = unknown> {
+  host: GovernedActionHost;
+  store: RecoverablePlatformHostStore<TDb>;
+  /** A governed action registered on the host, and parameters it accepts. */
+  actionId: ActionId;
+  parameters?: Record<string, unknown>;
+  /** Two scopes in different tenants. */
+  ours: TenantIsolationScope;
+  theirs: TenantIsolationScope;
+  /**
+   * Optional: a governed read the subject exposes, scoped as the projection
+   * host scopes it. Returns what a viewer in `scope` sees for the view. Every
+   * row must carry the `tenantId` it belongs to, so the check can tell a row
+   * of ours from a row of theirs that merely looks the same; two tenants may
+   * legitimately hold equal-looking rows.
+   */
+  read?(scope: TenantIsolationScope): Promise<{
+    allowed: boolean;
+    rows: readonly {
+      tenantId: string;
+    }[];
+  }>;
+  /**
+   * Optional: put the host and store back to a known state before a check.
+   * The checks tolerate accumulated state, and each retires any row it
+   * creates directly, so this exists for subjects whose store is shared.
+   */
+  reset?(): Promise<void> | void;
+}
+export interface TenantIsolationCheck {
+  id: "fabric.tenancy.invocation-scoped-read.v1" | "fabric.tenancy.idempotency-key-scoped.v1" | "fabric.tenancy.events-scoped.v1" | "fabric.tenancy.worker-claim-scoped.v1" | "fabric.tenancy.completion-scoped.v1" | "fabric.tenancy.projection-scoped.v1" | "fabric.tenancy.adapter-invocation-read-scoped.v1" | "fabric.tenancy.adapter-invocation-write-scoped.v1";
+  run(subject: TenantIsolationSubject): Promise<string[]>;
+}
+export interface TenantIsolationResult {
+  passed: boolean;
+  checks: Array<{
+    id: TenantIsolationCheck["id"];
+    status: "passed" | "failed" | "skipped";
+    evidence: string[];
+    error?: string;
+  }>;
 }
 /**
  * The suite any deployment of the host must pass before it claims isolation.
@@ -1629,8 +1762,8 @@ interface TenantIsolationResult {
  * space, or owning invocation; and, when the subject lends a read, a viewer in
  * the other tenant sees nothing of ours.
  */
-declare function tenantIsolationChecks(): readonly TenantIsolationCheck[];
+export declare function tenantIsolationChecks(): readonly TenantIsolationCheck[];
 /** Run every check, returning each result rather than throwing on the first. */
-declare function runTenantIsolationChecks(subject: TenantIsolationSubject): Promise<TenantIsolationResult>;
-
-export { ActionAdmissionError, type ActionAdmissionRefusal, type ActionApprovalDecision, type ActionAuthorizationInput, type ActionExecutionAuthorizationInput, type ActionExecutionReason, type ActionInvocationPatch, type ActionInvocationRecord, type AdapterInvocationRecord, type AdapterInvocationScope, type AdapterInvocationStatus, type AdapterReconciliationOutcome, type ApprovalDecisionTransitionResult, type ApprovalPlatformHostStore, type AtomicMutationPlatformHostStore, type AuthorizationBinding, type AuthorizationGoverningMoment, type AuthorizationReconciliationOutcome, type BeginApprovalDecisionInput, type ClaimActionInvocationsInput, type ClaimOutboxInput, type CreateActionInvocationInput, type CreateDurableSagaParentLifecycleOptions, type DispatchActionInput, type DispatchActionResult, type EnterpriseEventActorDisclosure, type EnterpriseEventEnvelope, type EnterpriseEventPublishContext, type EnterpriseEventPublisher, type ErrorTextRedactionContext, type EventPayloadClassification, type ExecuteActionResult, type ExecuteInvocationOptions, type ExecutionAttestationRecord, type ExternalCompletion, ExternalCompletionError, type ExternalCompletionRefusal, type ExternalReconciliationRecord, type GovernancePlatformHostStore, type GovernedActionHost, type HitlDecisionEvidence, type HostCompensationRecord, type HostSagaParentApprovalInput, type HostSagaParentCancellationInput, type HostSagaParentCompletionInput, type HostSagaParentFailureInput, type HostSagaParentLifecycle, type HostSagaParentProgressInput, type HostSagaParentProgressRecord, type IdempotencyConflict, IdempotencyConflictError, type InvocationProvenance, type InvocationSource, type KnownActionExecutionReason, type ListActionInvocationsInput, MemoryPlatformHostStore, type MemoryPlatformHostTransactionProvider, type NamespacedAttributes, type OutboxActorDisclosure, type OutboxEventMetadata, type OutboxPlatformHostStore, type OutboxRecord, type OutboxRelayOptions, type OutboxRelayResult, type OutboxRequeueAuthorizationInput, type OutboxRequeueHost, type OutboxRequeuePlatformHostStore, type OutboxRequeueRecord, type OutboxRequeueRefusal, type OutboxStatus, PARAMETER_DIGEST_ALGORITHM, PLATFORM_HOST_CONTRACT_VERSION, PLATFORM_HOST_HEALTH_CONTRACT_VERSION, PLATFORM_HOST_METRIC_NAMES, type PendingAssetEvent, type PendingExternalCompletion, type PersistedActionApprovalDecision, type PlatformActionDispatcher, type PlatformActionWorkerCycleResult, type PlatformActionWorkerOptions, type PlatformHostAuthorization, type PlatformHostHealthCounts, type PlatformHostHealthOptions, type PlatformHostHealthQuery, type PlatformHostHealthSnapshot, type PlatformHostHealthStatus, type PlatformHostHealthStore, type PlatformHostLifecycleTelemetry, type PlatformHostMetricName, type PlatformHostMetricTelemetry, type PlatformHostMetricType, type PlatformHostMutationTransaction, type PlatformHostOptions, type PlatformHostReadinessReason, type PlatformHostSqlClient, type PlatformHostSqlResult, type PlatformHostStore, type PlatformHostTelemetry, type PlatformHostTelemetryAttribute, type PlatformHostTelemetryEventName, type PlatformHostTelemetryHook, type PlatformHostTelemetryInput, type PlatformHostTelemetryRecord, type PlatformHostWorkerHealthInput, type PolicyEvaluationRecord, type PolicyObligationRecord, type PostgresMigration, PostgresPlatformHostStore, type PostgresPlatformHostTransactionContext, type PostgresPlatformHostTransactionProvider, type ReconcileOverdueCompletionsInput, type RecordedExternalCompletion, type RecoverablePlatformHostStore, type RenewActionInvocationLeaseInput, type RequeueOutboxDeadLetterInput, type RequeueOutboxDeadLetterRefusal, type RequeueOutboxDeadLetterResult, type RequeueOutboxDeadLetterStoreInput, type RequeueOutboxDeadLetterStoreResult, type ResolvePoliciesInput, type SubmitActionInput, type SubmitActionResult, type TenantIsolationCheck, type TenantIsolationResult, type TenantIsolationScope, type TenantIsolationSubject, type UpdateLeasedActionInvocationInput, applyPostgresMigrations, cloneOutboxRecord, createDurableSagaParentLifecycle, createGovernedActionHost, createStoreBackedActionDispatcher, digestParameters, emitPlatformHostTelemetry, getPlatformHostHealthSnapshot, outboxActorDisclosure, runOutboxRelayCycle, runPlatformActionWorker, runPlatformActionWorkerCycle, runTenantIsolationChecks, tenantIsolationChecks, toEnterpriseEventEnvelope };
+export declare function runTenantIsolationChecks(subject: TenantIsolationSubject): Promise<TenantIsolationResult>;
+//#endregion
+export { canonicalJson };