@fabricorg/platform 0.8.0 → 0.10.0

package/CHANGELOG.md

@@ -1,5 +1,42 @@
 # @fabricorg/platform
 
+## 0.10.0
+
+### Minor Changes
+
+- fdd3e69: Add provider-neutral external mutation footprints, delegated principals, enforceable obligations,
+  execution attestations, and reconciliation evidence with durable host-store support.
+- 714ad06: Add enforceable Fabric-family compatibility controls and durable runtime contract-version evidence.
+- 43c5770: Initial pre-1.0 Fabric platform package with action, adapter, event, ID, and module contracts.
+- 986636b: New public subpath `@fabricorg/platform/manifest`: a stable, JSON-serializable, versioned manifest of a `FabricModule`'s ontology (object types, subject types, id prefixes, event types, actions, policies, state machines) for downstream tooling such as semantics exporters, docs generators, and tool generators.
+
+  - `MODULE_MANIFEST_VERSION` (`1`), `ModuleManifest`, and `ModuleManifestBundle` contract types.
+  - `exportModuleManifest(module)` — pure, registry-free export of a single module; no registration required.
+  - `exportModuleManifestBundle(modules)` — versioned bundle preserving input order.
+  - `JsonSchemaExportableValidator` + `isJsonSchemaExportableValidator` — actions whose schema exposes `toJSONSchema()` (e.g. Zod 4) emit `parameterSchema` / `parameterSchemaFormat: "json-schema"`.
+  - Function fields are never serialized (`handler`, `evaluate`, `guard` → `hasGuard`, dynamic `targetState`, adapter `getInput`); the manifest contains definitions only — never raw parameter values, secrets, or runtime data.
+  - Deterministic: declaration order is preserved everywhere, so the same module object always produces byte-identical JSON.
+
+  All changes are additive; no breaking API changes.
+
+### Patch Changes
+
+- bc7d3ab: BYO policy engine affordance + preview-safe enforcement bug fix.
+
+  - `PolicyContext.services?: FabricRuntimeServices` (mirrors `ActionContext.services`).
+  - `PolicyDispatchEvidence.engine?: { name; version?; metadata? }` for external-engine provenance (OPA, Cedar, Cerbos, …). `normalizeOutcome` preserves evaluator-supplied `engine` blocks.
+  - `PolicyDispatchEvidence.code.skipped` / `code.skipReason` for first-class preview-skip evidence.
+  - `evaluateCodePolicy` now honors `PolicyEvaluator.previewSafe`: in `preview` mode, non-preview-safe evaluators are skipped and yield `result: "warn"` with structured evidence. Data policies still evaluate; hybrid fallback inherits the skip.
+  - New docs: `governance/byo-engine` (worked OPA example, layering, failure modes, preview semantics).
+
+  All changes are additive; no breaking API changes.
+
+## 0.9.0
+
+- Add versioned runtime-governance evidence shared by TypeScript and .NET hosts.
+- Publish the canonical governance contract generation and validation helpers.
+- Add language-neutral Fabric-family compatibility and conformance contracts.
+
 ## 0.8.0 — 2026-07-20
 
 - Add provider-neutral external mutation governance contracts for footprints, delegated execution
@@ -40,7 +77,7 @@
 
 - **BYO policy engine affordance.** Made it possible for code policy evaluators to delegate to external policy engines (OPA, Cedar, Cerbos, …) while keeping Fabric's `policyId.vN` and `policyVersion` canonical for audit. Three additive, vendor-neutral changes to the policy contract:
   - `PolicyContext.services?: FabricRuntimeServices` — mirrors `ActionContext.services`. Lets the runtime host inject HTTP clients, external policy engine clients, feature flags, etc. into policy evaluation without module-level globals.
-  - `PolicyDispatchEvidence.engine?: { name; version?; metadata? }` — open-ended engine provenance slot. Adapters populate it (e.g. OPA: `decisionPath`, `bundleRevision`, `decisionId`, `inputHash`). Platform `policyId` / `policyVersion` remain load-bearing; `engine` answers "*which artifact* produced the decision?". `normalizeOutcome` merges evaluator-supplied `engine` provenance into the platform-controlled dispatch envelope so adapters can attach it without being overwritten.
+  - `PolicyDispatchEvidence.engine?: { name; version?; metadata? }` — open-ended engine provenance slot. Adapters populate it (e.g. OPA: `decisionPath`, `bundleRevision`, `decisionId`, `inputHash`). Platform `policyId` / `policyVersion` remain load-bearing; `engine` answers "_which artifact_ produced the decision?". `normalizeOutcome` merges evaluator-supplied `engine` provenance into the platform-controlled dispatch envelope so adapters can attach it without being overwritten.
   - `PolicyDispatchEvidence.code.skipped` / `code.skipReason` — first-class evidence shape for preview skips.
 - **Preview-safe enforcement (bug fix).** `PolicyEvaluator.previewSafe` was previously documentation-only; `evaluateCodePolicy` ran every evaluator regardless of `ctx.mode`. Now: when `ctx.mode === "preview"` and an evaluator is not declared `previewSafe: true`, the platform skips evaluation and returns `result: "warn"` with structured skip evidence (`code.skipped`, `code.skipReason`, `metadata.previewSkipped`). `warn` is the honest preview outcome: not proven pass, not proven block. Data policies are deterministic and continue to evaluate in preview unchanged. Hybrid policies inherit the skip behavior on their fallback code evaluator automatically.
 - **Docs:** new `governance/byo-engine` page — worked OPA example covering the four-piece pattern (vertical policy manifest, fact builder owned by TS, Rego house style returning structured decision shape, evaluator factory), failure-mode policy table, preview semantics, and the platform/adapter/vertical layering. `governance/policy-model` updated to reflect `services` and the `engine` evidence block.
@@ -62,7 +99,7 @@
   - New optional method on `SagaContext`: `awaitSignal?<T>(signalName: string, timeoutMs: number) => Promise<T | null>`.
   - Returns the payload of the first signal received, or `null` if the timeout fires.
   - Optional: runtimes that cannot support push-based signaling (in-memory test harnesses, simple polling drivers) may omit it. Sagas should treat absence as a fallback condition and use `sleep` + `query` polling instead.
-  - Signal *senders* remain runtime-specific (e.g. Temporal `WorkflowClient.signal()` from an action handler activity, or an HTTP-based coordination service if an app exposes one). The platform does not prescribe the sender API to keep the runtime layer agnostic.
+  - Signal _senders_ remain runtime-specific (e.g. Temporal `WorkflowClient.signal()` from an action handler activity, or an HTTP-based coordination service if an app exposes one). The platform does not prescribe the sender API to keep the runtime layer agnostic.
   - **Use case:** any saga that previously polled for an external event (a user response, an upload landing, an upstream system completing) can now exit the polling loop and resume immediately when the event fires.
 - **Tests:** 77 → 81 (added 4 tests covering the optional shape, push-vs-poll fallback pattern, and runtime mock implementations).
 - **No breaking changes.** `SagaContext.awaitSignal` is optional; existing sagas and runtimes continue to work unchanged.

package/README.md

@@ -49,6 +49,7 @@ That's what this package gives you. Nothing more.
 | `@fabricorg/platform/projections` | Replay/snapshot framework |
 | `@fabricorg/platform/adapters` | `AdapterRegistry`, retry + circuit-breaker |
 | `@fabricorg/platform/modules` | `FabricModule<TDb>`, `registerFabricModules` |
+| `@fabricorg/platform/manifest` | `exportModuleManifest`, `exportModuleManifestBundle`, `ModuleManifest` |
 | `@fabricorg/platform/ids` | `createFabricId`, `FABRIC_ID_PREFIXES` |
 | `@fabricorg/platform/displays` | `DisplayRendererRegistration` |
 | `@fabricorg/platform/privacy` | Redaction + data classification |
@@ -81,6 +82,19 @@ registerFabricModules([myModule]);
 
 The platform never auto-loads a module. The host app composes them explicitly — no implicit defaults, no globals, no surprises.
 
+## Exporting a module manifest
+
+Downstream tooling — semantics exporters, docs generators, tool generators — often needs a module's ontology as data rather than live code. `@fabricorg/platform/manifest` exports a stable, JSON-serializable, versioned description of any `FabricModule`:
+
+```ts
+import { exportModuleManifest } from "@fabricorg/platform/manifest";
+
+const manifest = exportModuleManifest(myModule);
+const json = JSON.stringify(manifest, null, 2);
+```
+
+`exportModuleManifest` is a pure function of the module object: it does not touch the registries and the module does not need to be registered first. Declaration order is preserved everywhere, so the same module always produces byte-identical JSON. Function fields (`handler`, policy `evaluate`, transition `guard`, dynamic `targetState`, adapter `getInput`) are never serialized — the manifest contains definitions only, never raw parameter values, secrets, or runtime data. Actions whose schema validator exposes `toJSONSchema()` (for example Zod 4) include a `parameterSchema` in JSON Schema format. Use `exportModuleManifestBundle(modules)` to export several modules at once.
+
 ## The action lifecycle
 
 Every `invokeAction(id, params)` call goes through:

package/dist/chunk-3OWMPDBD.js

@@ -0,0 +1,30 @@
+// governance/index.ts
+var FABRIC_GOVERNANCE_CONTRACT_VERSION = 1;
+function assertMutationGovernanceContext(value) {
+  if (!Number.isInteger(value.footprint.version) || value.footprint.version < 1) {
+    throw new Error("Mutation footprint version must be a positive integer");
+  }
+  for (const entry of value.footprint.resources) {
+    if (!entry.resource.provider.trim()) throw new Error("Resource provider is required");
+    if (!entry.resource.resourceType.trim()) throw new Error("Resource type is required");
+    if (!entry.resource.resourceId.trim()) throw new Error("Resource id is required");
+  }
+  if (!value.executionPrincipal.principalId.trim()) {
+    throw new Error("Execution principal id is required");
+  }
+}
+function assertGovernanceRuntimeEvidence(value) {
+  if (!Number.isInteger(value.governanceContractVersion) || value.governanceContractVersion < 1) {
+    throw new Error("Governance contract version must be a positive integer");
+  }
+  if (!Number.isInteger(value.hostContractVersion) || value.hostContractVersion < 1) {
+    throw new Error("Host contract version must be a positive integer");
+  }
+  if (value.providerBridge && (!value.providerBridge.name.trim() || !value.providerBridge.version.trim())) {
+    throw new Error("Provider bridge name and version are required");
+  }
+}
+
+export { FABRIC_GOVERNANCE_CONTRACT_VERSION, assertGovernanceRuntimeEvidence, assertMutationGovernanceContext };
+//# sourceMappingURL=chunk-3OWMPDBD.js.map
+//# sourceMappingURL=chunk-3OWMPDBD.js.map

package/dist/chunk-3OWMPDBD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../governance/index.ts"],"names":[],"mappings":";AAIO,IAAM,kCAAA,GAAqC;AA4G3C,SAAS,gCACf,KAAA,EACO;AACP,EAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,KAAA,CAAM,SAAA,CAAU,OAAO,CAAA,IAAK,KAAA,CAAM,SAAA,CAAU,OAAA,GAAU,CAAA,EAAG;AAC9E,IAAA,MAAM,IAAI,MAAM,uDAAuD,CAAA;AAAA,EACxE;AACA,EAAA,KAAA,MAAW,KAAA,IAAS,KAAA,CAAM,SAAA,CAAU,SAAA,EAAW;AAC9C,IAAA,IAAI,CAAC,MAAM,QAAA,CAAS,QAAA,CAAS,MAAK,EAAG,MAAM,IAAI,KAAA,CAAM,+BAA+B,CAAA;AACpF,IAAA,IAAI,CAAC,MAAM,QAAA,CAAS,YAAA,CAAa,MAAK,EAAG,MAAM,IAAI,KAAA,CAAM,2BAA2B,CAAA;AACpF,IAAA,IAAI,CAAC,MAAM,QAAA,CAAS,UAAA,CAAW,MAAK,EAAG,MAAM,IAAI,KAAA,CAAM,yBAAyB,CAAA;AAAA,EACjF;AACA,EAAA,IAAI,CAAC,KAAA,CAAM,kBAAA,CAAmB,WAAA,CAAY,MAAK,EAAG;AACjD,IAAA,MAAM,IAAI,MAAM,oCAAoC,CAAA;AAAA,EACrD;AACD;AAEO,SAAS,gCAAgC,KAAA,EAAwC;AACvF,EAAA,IAAI,CAAC,OAAO,SAAA,CAAU,KAAA,CAAM,yBAAyB,CAAA,IAAK,KAAA,CAAM,4BAA4B,CAAA,EAAG;AAC9F,IAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAAA,EACzE;AACA,EAAA,IAAI,CAAC,OAAO,SAAA,CAAU,KAAA,CAAM,mBAAmB,CAAA,IAAK,KAAA,CAAM,sBAAsB,CAAA,EAAG;AAClF,IAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,EACnE;AACA,EAAA,IAAI,KAAA,CAAM,cAAA,KAAmB,CAAC,KAAA,CAAM,cAAA,CAAe,IAAA,CAAK,IAAA,EAAK,IAAK,CAAC,KAAA,CAAM,cAAA,CAAe,OAAA,CAAQ,MAAK,CAAA,EAAI;AACxG,IAAA,MAAM,IAAI,MAAM,+CAA+C,CAAA;AAAA,EAChE;AACD","file":"chunk-3OWMPDBD.js","sourcesContent":["import type { ActorType } from \"../actions\";\nimport type { EvidencePacketReference } from \"../evidence\";\n\n/** Language-neutral governance contract version shared by TypeScript and .NET. */\nexport const FABRIC_GOVERNANCE_CONTRACT_VERSION = 1 as const;\n\nexport type ExternalResourceOperation =\n\t| \"read\"\n\t| \"create\"\n\t| \"update\"\n\t| \"delete\"\n\t| \"execute\"\n\t| \"publish\";\n\n/** Provider-neutral identity for infrastructure touched by a governed mutation. */\nexport interface ExternalResourceRef {\n\tprovider: string;\n\tresourceType: string;\n\tresourceId: string;\n\tdisplayName?: string;\n\tmetadata?: Record<string, unknown>;\n}\n\nexport interface MutationFootprintEntry {\n\tresource: ExternalResourceRef;\n\toperation: ExternalResourceOperation;\n\tdataClassifications?: string[];\n}\n\n/** Durable declaration of the external effects an invocation is allowed to produce. */\nexport interface MutationFootprint {\n\tversion: number;\n\tresources: MutationFootprintEntry[];\n}\n\n/** Effective execution identity, including the delegation chain that produced it. */\nexport interface ExecutionPrincipal {\n\tprincipalId: string;\n\tprincipalType: ActorType | string;\n\tprovider?: string;\n\tdelegatedBy?: ExecutionPrincipal;\n\tmetadata?: Record<string, unknown>;\n}\n\nexport type PolicyObligationStatus = \"pending\" | \"satisfied\" | \"waived\" | \"failed\";\n\nexport interface PolicyObligation {\n\tid: string;\n\ttype: string;\n\tstatus: PolicyObligationStatus;\n\trequired?: boolean;\n\tdescription?: string;\n\tevidenceReferences?: EvidencePacketReference[];\n\tmetadata?: Record<string, unknown>;\n}\n\n/** Audit-safe proof returned by an external execution provider. */\nexport interface ExecutionAttestation {\n\tprovider: string;\n\toperation: string;\n\texternalOperationId?: string;\n\tresource?: ExternalResourceRef;\n\tevidenceReferences: EvidencePacketReference[];\n\tsatisfiesObligations?: string[];\n\tstartedAt: Date | string;\n\tcompletedAt?: Date | string;\n\tmetadata?: Record<string, unknown>;\n}\n\nexport type ReconciliationStatus = \"not_required\" | \"pending\" | \"reconciled\" | \"failed\";\n\nexport interface ExternalReconciliation {\n\tstatus: ReconciliationStatus;\n\tprovider: string;\n\texternalOperationId?: string;\n\tattempt: number;\n\treason?: string;\n\tevidenceReferences?: EvidencePacketReference[];\n\tobservedAt: Date | string;\n}\n\nexport interface MutationGovernanceContext {\n\tfootprint: MutationFootprint;\n\texecutionPrincipal: ExecutionPrincipal;\n}\n\n/** Runtime generations durably attached to every new hosted invocation. */\nexport interface GovernanceRuntimeEvidence {\n\tgovernanceContractVersion: number;\n\thostContractVersion: number;\n\thostPackageVersion?: string;\n\tproviderBridge?: {\n\t\tname: string;\n\t\tversion: string;\n\t};\n\tpolicyRulesetVersion?: string;\n}\n\nexport interface MutationGovernanceResolutionInput {\n\tactionInvocationId: string;\n\tactionId: string;\n\ttenantId: string;\n\tspaceId: string;\n\tactorId: string;\n\tactorType: ActorType;\n\tparameters: unknown;\n}\n\nexport type MutationGovernanceResolver = (\n\tinput: MutationGovernanceResolutionInput,\n) => Promise<MutationGovernanceContext> | MutationGovernanceContext;\n\nexport function assertMutationGovernanceContext(\n\tvalue: MutationGovernanceContext,\n): void {\n\tif (!Number.isInteger(value.footprint.version) || value.footprint.version < 1) {\n\t\tthrow new Error(\"Mutation footprint version must be a positive integer\");\n\t}\n\tfor (const entry of value.footprint.resources) {\n\t\tif (!entry.resource.provider.trim()) throw new Error(\"Resource provider is required\");\n\t\tif (!entry.resource.resourceType.trim()) throw new Error(\"Resource type is required\");\n\t\tif (!entry.resource.resourceId.trim()) throw new Error(\"Resource id is required\");\n\t}\n\tif (!value.executionPrincipal.principalId.trim()) {\n\t\tthrow new Error(\"Execution principal id is required\");\n\t}\n}\n\nexport function assertGovernanceRuntimeEvidence(value: GovernanceRuntimeEvidence): void {\n\tif (!Number.isInteger(value.governanceContractVersion) || value.governanceContractVersion < 1) {\n\t\tthrow new Error(\"Governance contract version must be a positive integer\");\n\t}\n\tif (!Number.isInteger(value.hostContractVersion) || value.hostContractVersion < 1) {\n\t\tthrow new Error(\"Host contract version must be a positive integer\");\n\t}\n\tif (value.providerBridge && (!value.providerBridge.name.trim() || !value.providerBridge.version.trim())) {\n\t\tthrow new Error(\"Provider bridge name and version are required\");\n\t}\n}\n"]}

package/dist/chunk-54EQTOH6.cjs

@@ -0,0 +1,165 @@
+'use strict';
+
+var chunkSSYKDXR4_cjs = require('./chunk-SSYKDXR4.cjs');
+
+// manifest/index.ts
+var MODULE_MANIFEST_VERSION = 1;
+function isJsonSchemaExportableValidator(schema) {
+  return typeof schema.toJSONSchema === "function";
+}
+function isRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function exportDependency(dependency) {
+  const namespace = chunkSSYKDXR4_cjs.getModuleDependencyNamespace(dependency);
+  if (typeof dependency === "string") {
+    return { namespace };
+  }
+  const normalized = { namespace };
+  if (dependency.version !== void 0) normalized.version = dependency.version;
+  if (dependency.optional !== void 0) normalized.optional = dependency.optional;
+  return normalized;
+}
+function exportObjectType(objectType) {
+  if (typeof objectType === "string") {
+    return { type: objectType };
+  }
+  const normalized = { type: chunkSSYKDXR4_cjs.getObjectTypeName(objectType) };
+  if (objectType.displayName !== void 0) normalized.displayName = objectType.displayName;
+  if (objectType.idPrefix !== void 0) normalized.idPrefix = objectType.idPrefix;
+  return normalized;
+}
+function exportEventType(eventType) {
+  if (typeof eventType === "string") {
+    return { eventType, schemaVersion: 1 };
+  }
+  const normalized = {
+    eventType: chunkSSYKDXR4_cjs.getEventTypeName(eventType),
+    schemaVersion: eventType.schemaVersion
+  };
+  if (eventType.description !== void 0) normalized.description = eventType.description;
+  return normalized;
+}
+function exportAction(action) {
+  const manifest = {
+    actionId: action.actionId,
+    version: action.version,
+    kind: action.kind ?? "atomic",
+    idempotent: action.idempotent,
+    mutatesDomain: action.mutatesDomain,
+    emitsEvents: [...action.emitsEvents]
+  };
+  if (action.policies !== void 0) manifest.policies = [...action.policies];
+  if (action.requiredRoles !== void 0) manifest.requiredRoles = [...action.requiredRoles];
+  if (action.requiredPermissions !== void 0) {
+    manifest.requiredPermissions = [...action.requiredPermissions];
+  }
+  if (action.eventPhase !== void 0) manifest.eventPhase = action.eventPhase;
+  if (isJsonSchemaExportableValidator(action.schema)) {
+    manifest.parameterSchema = action.schema.toJSONSchema();
+    manifest.parameterSchemaFormat = "json-schema";
+  }
+  if (action.stateMachine !== void 0) {
+    const binding = {
+      entityType: action.stateMachine.entityType
+    };
+    if (typeof action.stateMachine.targetState === "string") {
+      binding.targetState = action.stateMachine.targetState;
+    }
+    manifest.stateMachine = binding;
+  }
+  if (action.adapterSteps !== void 0) {
+    manifest.adapterSteps = action.adapterSteps.map((step) => {
+      const exported = {
+        adapterType: step.adapterType,
+        operation: step.operation
+      };
+      if (step.retryPolicy !== void 0) exported.retryPolicy = { ...step.retryPolicy };
+      return exported;
+    });
+  }
+  return manifest;
+}
+function exportPolicy(policy) {
+  if (!isRecord(policy) || typeof policy.policyId !== "string") {
+    return void 0;
+  }
+  if (typeof policy.evaluate === "function") {
+    const exported = {
+      type: "code",
+      policyId: policy.policyId,
+      version: typeof policy.version === "number" ? policy.version : 1
+    };
+    if (typeof policy.previewSafe === "boolean") exported.previewSafe = policy.previewSafe;
+    return exported;
+  }
+  if (typeof policy.kind === "string" && typeof policy.policyVersion === "number") {
+    const exported = {
+      type: "data",
+      policyId: policy.policyId,
+      policyVersion: policy.policyVersion,
+      kind: policy.kind
+    };
+    if (isRecord(policy.dataDefinition)) {
+      exported.dataDefinition = policy.dataDefinition;
+    }
+    if (typeof policy.codeEvaluatorPolicyId === "string") {
+      exported.codeEvaluatorPolicyId = policy.codeEvaluatorPolicyId;
+    }
+    if (isRecord(policy.fallback)) {
+      exported.fallback = policy.fallback;
+    }
+    return exported;
+  }
+  return void 0;
+}
+function exportStateMachine(machine) {
+  if (!isRecord(machine) || typeof machine.entityType !== "string" || !isRecord(machine.states) || !Array.isArray(machine.transitions)) {
+    return void 0;
+  }
+  const definition = machine;
+  return {
+    entityType: definition.entityType,
+    states: Object.values(definition.states),
+    transitions: definition.transitions.map((transition) => ({
+      from: transition.from,
+      to: transition.to,
+      causedByAction: transition.causedByAction,
+      hasGuard: typeof transition.guard === "function"
+    }))
+  };
+}
+function exportModuleManifest(module) {
+  const manifest = {
+    manifestVersion: MODULE_MANIFEST_VERSION,
+    namespace: module.namespace,
+    dependencies: (module.dependencies ?? []).map(exportDependency),
+    objectTypes: (module.objectTypes ?? []).map(exportObjectType),
+    subjectTypes: [...module.subjectTypes ?? []],
+    idPrefixes: (module.idPrefixes ?? []).map((registration) => ({
+      prefix: registration.prefix,
+      name: registration.name
+    })),
+    eventTypes: (module.eventTypes ?? []).map(exportEventType),
+    actions: (module.actions ?? []).map(exportAction),
+    policies: (module.policies ?? []).map(exportPolicy).filter((policy) => policy !== void 0),
+    stateMachines: (module.stateMachines ?? []).map(exportStateMachine).filter((machine) => machine !== void 0)
+  };
+  if (module.version !== void 0) manifest.version = module.version;
+  if (module.displayName !== void 0) manifest.displayName = module.displayName;
+  if (module.description !== void 0) manifest.description = module.description;
+  return manifest;
+}
+function exportModuleManifestBundle(modules) {
+  return {
+    manifestVersion: MODULE_MANIFEST_VERSION,
+    modules: modules.map(exportModuleManifest)
+  };
+}
+
+exports.MODULE_MANIFEST_VERSION = MODULE_MANIFEST_VERSION;
+exports.exportModuleManifest = exportModuleManifest;
+exports.exportModuleManifestBundle = exportModuleManifestBundle;
+exports.isJsonSchemaExportableValidator = isJsonSchemaExportableValidator;
+//# sourceMappingURL=chunk-54EQTOH6.cjs.map
+//# sourceMappingURL=chunk-54EQTOH6.cjs.map

package/dist/chunk-54EQTOH6.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../manifest/index.ts"],"names":["getModuleDependencyNamespace","getObjectTypeName","getEventTypeName"],"mappings":";;;;;AAwBO,IAAM,uBAAA,GAA0B;AA+HhC,SAAS,gCACf,MAAA,EAC0C;AAC1C,EAAA,OACC,OAAQ,OAAkD,YAAA,KAAiB,UAAA;AAE7E;AAEA,SAAS,SAAS,KAAA,EAAkD;AACnE,EAAA,OAAO,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,YAAY,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC3E;AAEA,SAAS,iBAAiB,UAAA,EAAqD;AAC9E,EAAA,MAAM,SAAA,GAAYA,+CAA6B,UAAU,CAAA;AACzD,EAAA,IAAI,OAAO,eAAe,QAAA,EAAU;AACnC,IAAA,OAAO,EAAE,SAAA,EAAU;AAAA,EACpB;AACA,EAAA,MAAM,UAAA,GAA+B,EAAE,SAAA,EAAU;AACjD,EAAA,IAAI,UAAA,CAAW,OAAA,KAAY,MAAA,EAAW,UAAA,CAAW,UAAU,UAAA,CAAW,OAAA;AACtE,EAAA,IAAI,UAAA,CAAW,QAAA,KAAa,MAAA,EAAW,UAAA,CAAW,WAAW,UAAA,CAAW,QAAA;AACxE,EAAA,OAAO,UAAA;AACR;AAEA,SAAS,iBACR,UAAA,EAC2B;AAC3B,EAAA,IAAI,OAAO,eAAe,QAAA,EAAU;AACnC,IAAA,OAAO,EAAE,MAAM,UAAA,EAAW;AAAA,EAC3B;AACA,EAAA,MAAM,UAAA,GAAuC,EAAE,IAAA,EAAMC,mCAAA,CAAkB,UAAU,CAAA,EAAE;AACnF,EAAA,IAAI,UAAA,CAAW,WAAA,KAAgB,MAAA,EAAW,UAAA,CAAW,cAAc,UAAA,CAAW,WAAA;AAC9E,EAAA,IAAI,UAAA,CAAW,QAAA,KAAa,MAAA,EAAW,UAAA,CAAW,WAAW,UAAA,CAAW,QAAA;AACxE,EAAA,OAAO,UAAA;AACR;AAEA,SAAS,gBACR,SAAA,EAC0B;AAC1B,EAAA,IAAI,OAAO,cAAc,QAAA,EAAU;AAGlC,IAAA,OAAO,EAAE,SAAA,EAAW,aAAA,EAAe,CAAA,EAAE;AAAA,EACtC;AACA,EAAA,MAAM,UAAA,GAAsC;AAAA,IAC3C,SAAA,EAAWC,mCAAiB,SAAS,CAAA;AAAA,IACrC,eAAe,SAAA,CAAU;AAAA,GAC1B;AACA,EAAA,IAAI,SAAA,CAAU,WAAA,KAAgB,MAAA,EAAW,UAAA,CAAW,cAAc,SAAA,CAAU,WAAA;AAC5E,EAAA,OAAO,UAAA;AACR;AAEA,SAAS,aAAa,MAAA,EAAgD;AACrE,EAAA,MAAM,QAAA,GAAiC;AAAA,IACtC,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,IAAA,EAAM,OAAO,IAAA,IAAQ,QAAA;AAAA,IACrB,YAAY,MAAA,CAAO,UAAA;AAAA,IACnB,eAAe,MAAA,CAAO,aAAA;AAAA,IACtB,WAAA,EAAa,CAAC,GAAG,MAAA,CAAO,WAAW;AAAA,GACpC;AAEA,EAAA,IAAI,MAAA,CAAO,aAAa,MAAA,EAAW,QAAA,CAAS,WAAW,CAAC,GAAG,OAAO,QAAQ,CAAA;AAC1E,EAAA,IAAI,MAAA,CAAO,kBAAkB,MAAA,EAAW,QAAA,CAAS,gBAAgB,CAAC,GAAG,OAAO,aAAa,CAAA;AACzF,EAAA,IAAI,MAAA,CAAO,wBAAwB,MAAA,EAAW;AAC7C,IAAA,QAAA,CAAS,mBAAA,GAAsB,CAAC,GAAG,MAAA,CAAO,mBAAmB,CAAA;AAAA,EAC9D;AACA,EAAA,IAAI,MAAA,CAAO,UAAA,KAAe,MAAA,EAAW,QAAA,CAAS,aAAa,MAAA,CAAO,UAAA;AAElE,EAAA,IAAI,+BAAA,CAAgC,MAAA,CAAO,MAAM,CAAA,EAAG;AACnD,IAAA,QAAA,CAAS,eAAA,GAAkB,MAAA,CAAO,MAAA,CAAO,YAAA,EAAa;AACtD,IAAA,QAAA,CAAS,qBAAA,GAAwB,aAAA;AAAA,EAClC;AAEA,EAAA,IAAI,MAAA,CAAO,iBAAiB,MAAA,EAAW;AACtC,IAAA,MAAM,OAAA,GAA4C;AAAA,MACjD,UAAA,EAAY,OAAO,YAAA,CAAa;AAAA,KACjC;AACA,IAAA,IAAI,OAAO,MAAA,CAAO,YAAA,CAAa,WAAA,KAAgB,QAAA,EAAU;AACxD,MAAA,OAAA,CAAQ,WAAA,GAAc,OAAO,YAAA,CAAa,WAAA;AAAA,IAC3C;AACA,IAAA,QAAA,CAAS,YAAA,GAAe,OAAA;AAAA,EACzB;AAEA,EAAA,IAAI,MAAA,CAAO,iBAAiB,MAAA,EAAW;AACtC,IAAA,QAAA,CAAS,YAAA,GAAe,MAAA,CAAO,YAAA,CAAa,GAAA,CAAI,CAAC,IAAA,KAAS;AACzD,MAAA,MAAM,QAAA,GAAsC;AAAA,QAC3C,aAAa,IAAA,CAAK,WAAA;AAAA,QAClB,WAAW,IAAA,CAAK;AAAA,OACjB;AACA,MAAA,IAAI,IAAA,CAAK,gBAAgB,MAAA,EAAW,QAAA,CAAS,cAAc,EAAE,GAAG,KAAK,WAAA,EAAY;AACjF,MAAA,OAAO,QAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAEA,EAAA,OAAO,QAAA;AACR;AAEA,SAAS,aAAa,MAAA,EAAmD;AACxE,EAAA,IAAI,CAAC,QAAA,CAAS,MAAM,KAAK,OAAO,MAAA,CAAO,aAAa,QAAA,EAAU;AAC7D,IAAA,OAAO,MAAA;AAAA,EACR;AAGA,EAAA,IAAI,OAAO,MAAA,CAAO,QAAA,KAAa,UAAA,EAAY;AAC1C,IAAA,MAAM,QAAA,GAAqC;AAAA,MAC1C,IAAA,EAAM,MAAA;AAAA,MACN,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,SAAS,OAAO,MAAA,CAAO,OAAA,KAAY,QAAA,GAAW,OAAO,OAAA,GAAU;AAAA,KAChE;AACA,IAAA,IAAI,OAAO,MAAA,CAAO,WAAA,KAAgB,SAAA,EAAW,QAAA,CAAS,cAAc,MAAA,CAAO,WAAA;AAC3E,IAAA,OAAO,QAAA;AAAA,EACR;AAGA,EAAA,IAAI,OAAO,MAAA,CAAO,IAAA,KAAS,YAAY,OAAO,MAAA,CAAO,kBAAkB,QAAA,EAAU;AAChF,IAAA,MAAM,QAAA,GAAqC;AAAA,MAC1C,IAAA,EAAM,MAAA;AAAA,MACN,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,eAAe,MAAA,CAAO,aAAA;AAAA,MACtB,MAAM,MAAA,CAAO;AAAA,KACd;AACA,IAAA,IAAI,QAAA,CAAS,MAAA,CAAO,cAAc,CAAA,EAAG;AACpC,MAAA,QAAA,CAAS,iBAAiB,MAAA,CAAO,cAAA;AAAA,IAClC;AACA,IAAA,IAAI,OAAO,MAAA,CAAO,qBAAA,KAA0B,QAAA,EAAU;AACrD,MAAA,QAAA,CAAS,wBAAwB,MAAA,CAAO,qBAAA;AAAA,IACzC;AACA,IAAA,IAAI,QAAA,CAAS,MAAA,CAAO,QAAQ,CAAA,EAAG;AAC9B,MAAA,QAAA,CAAS,WAAW,MAAA,CAAO,QAAA;AAAA,IAC5B;AACA,IAAA,OAAO,QAAA;AAAA,EACR;AAGA,EAAA,OAAO,MAAA;AACR;AAEA,SAAS,mBAAmB,OAAA,EAA0D;AACrF,EAAA,IACC,CAAC,QAAA,CAAS,OAAO,KACjB,OAAO,OAAA,CAAQ,eAAe,QAAA,IAC9B,CAAC,QAAA,CAAS,OAAA,CAAQ,MAAM,CAAA,IACxB,CAAC,MAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EACjC;AACD,IAAA,OAAO,MAAA;AAAA,EACR;AAEA,EAAA,MAAM,UAAA,GAAa,OAAA;AACnB,EAAA,OAAO;AAAA,IACN,YAAY,UAAA,CAAW,UAAA;AAAA,IACvB,MAAA,EAAQ,MAAA,CAAO,MAAA,CAAO,UAAA,CAAW,MAAM,CAAA;AAAA,IACvC,WAAA,EAAa,UAAA,CAAW,WAAA,CAAY,GAAA,CAAI,CAAC,UAAA,MAAgB;AAAA,MACxD,MAAM,UAAA,CAAW,IAAA;AAAA,MACjB,IAAI,UAAA,CAAW,EAAA;AAAA,MACf,gBAAgB,UAAA,CAAW,cAAA;AAAA,MAC3B,QAAA,EAAU,OAAO,UAAA,CAAW,KAAA,KAAU;AAAA,KACvC,CAAE;AAAA,GACH;AACD;AAgBO,SAAS,qBAAqB,MAAA,EAA+C;AACnF,EAAA,MAAM,QAAA,GAA2B;AAAA,IAChC,eAAA,EAAiB,uBAAA;AAAA,IACjB,WAAW,MAAA,CAAO,SAAA;AAAA,IAClB,eAAe,MAAA,CAAO,YAAA,IAAgB,EAAC,EAAG,IAAI,gBAAgB,CAAA;AAAA,IAC9D,cAAc,MAAA,CAAO,WAAA,IAAe,EAAC,EAAG,IAAI,gBAAgB,CAAA;AAAA,IAC5D,cAAc,CAAC,GAAI,MAAA,CAAO,YAAA,IAAgB,EAAG,CAAA;AAAA,IAC7C,aAAa,MAAA,CAAO,UAAA,IAAc,EAAC,EAAG,GAAA,CAAI,CAAC,YAAA,MAAkB;AAAA,MAC5D,QAAQ,YAAA,CAAa,MAAA;AAAA,MACrB,MAAM,YAAA,CAAa;AAAA,KACpB,CAAE,CAAA;AAAA,IACF,aAAa,MAAA,CAAO,UAAA,IAAc,EAAC,EAAG,IAAI,eAAe,CAAA;AAAA,IACzD,UAAU,MAAA,CAAO,OAAA,IAAW,EAAC,EAAG,IAAI,YAAY,CAAA;AAAA,IAChD,QAAA,EAAA,CAAW,MAAA,CAAO,QAAA,IAAY,EAAC,EAC7B,GAAA,CAAI,YAAY,CAAA,CAChB,MAAA,CAAO,CAAC,MAAA,KAA2C,MAAA,KAAW,MAAS,CAAA;AAAA,IACzE,aAAA,EAAA,CAAgB,MAAA,CAAO,aAAA,IAAiB,EAAC,EACvC,GAAA,CAAI,kBAAkB,CAAA,CACtB,MAAA,CAAO,CAAC,OAAA,KAAmD,OAAA,KAAY,MAAS;AAAA,GACnF;AAEA,EAAA,IAAI,MAAA,CAAO,OAAA,KAAY,MAAA,EAAW,QAAA,CAAS,UAAU,MAAA,CAAO,OAAA;AAC5D,EAAA,IAAI,MAAA,CAAO,WAAA,KAAgB,MAAA,EAAW,QAAA,CAAS,cAAc,MAAA,CAAO,WAAA;AACpE,EAAA,IAAI,MAAA,CAAO,WAAA,KAAgB,MAAA,EAAW,QAAA,CAAS,cAAc,MAAA,CAAO,WAAA;AAEpE,EAAA,OAAO,QAAA;AACR;AAMO,SAAS,2BACf,OAAA,EACuB;AACvB,EAAA,OAAO;AAAA,IACN,eAAA,EAAiB,uBAAA;AAAA,IACjB,OAAA,EAAS,OAAA,CAAQ,GAAA,CAAI,oBAAoB;AAAA,GAC1C;AACD","file":"chunk-54EQTOH6.cjs","sourcesContent":["import type {\n\tActionDefinition,\n\tAdapterStepRetryPolicy,\n\tSchemaValidator,\n} from \"../actions\";\nimport {\n\tgetEventTypeName,\n\tgetModuleDependencyNamespace,\n\tgetObjectTypeName,\n\ttype FabricModule,\n\ttype ModuleDependency,\n\ttype ModuleDependencyInput,\n} from \"../modules\";\nimport type {\n\tDataPolicyDefinition,\n\tPolicyFallbackDefinition,\n\tPolicyKind,\n} from \"../policies\";\nimport type { StateDefinition, StateMachineDefinition } from \"../state-machines\";\n\n/**\n * Version of the module manifest contract. Bump when the serialized shape\n * changes in a way consumers must detect.\n */\nexport const MODULE_MANIFEST_VERSION = 1 as const;\n\nexport interface ModuleManifestObjectType {\n\ttype: string;\n\tdisplayName?: string;\n\tidPrefix?: string;\n}\n\nexport interface ModuleManifestIdPrefix {\n\tprefix: string;\n\tname: string;\n}\n\nexport interface ModuleManifestEventType {\n\teventType: string;\n\tschemaVersion: number;\n\tdescription?: string;\n}\n\nexport interface ModuleManifestActionStateMachine {\n\tentityType: string;\n\t/** Present only when the binding declares a static target state. */\n\ttargetState?: string;\n}\n\nexport interface ModuleManifestAdapterStep {\n\tadapterType: string;\n\toperation: string;\n\tretryPolicy?: AdapterStepRetryPolicy;\n}\n\nexport interface ModuleManifestAction {\n\tactionId: string;\n\tversion: number;\n\tkind: \"atomic\" | \"saga\";\n\tidempotent: boolean;\n\tmutatesDomain: boolean;\n\temitsEvents: string[];\n\tpolicies?: string[];\n\trequiredRoles?: string[];\n\trequiredPermissions?: string[];\n\teventPhase?: \"before_adapters\" | \"after_adapters\";\n\t/**\n\t * JSON Schema for the action parameters, present only when the action's\n\t * `schema` validator implements {@link JsonSchemaExportableValidator}.\n\t */\n\tparameterSchema?: unknown;\n\tparameterSchemaFormat?: \"json-schema\";\n\tstateMachine?: ModuleManifestActionStateMachine;\n\tadapterSteps?: ModuleManifestAdapterStep[];\n}\n\nexport interface ModuleManifestCodePolicy {\n\ttype: \"code\";\n\tpolicyId: string;\n\tversion: number;\n\tpreviewSafe?: boolean;\n}\n\nexport interface ModuleManifestDataPolicy {\n\ttype: \"data\";\n\tpolicyId: string;\n\tpolicyVersion: number;\n\tkind: PolicyKind;\n\tdataDefinition?: DataPolicyDefinition;\n\tcodeEvaluatorPolicyId?: string;\n\tfallback?: PolicyFallbackDefinition;\n}\n\nexport type ModuleManifestPolicy = ModuleManifestCodePolicy | ModuleManifestDataPolicy;\n\nexport interface ModuleManifestStateMachineTransition {\n\tfrom: string;\n\tto: string;\n\tcausedByAction: string;\n\t/** `true` when the transition declares a guard function. The guard itself is never serialized. */\n\thasGuard: boolean;\n}\n\nexport interface ModuleManifestStateMachine {\n\tentityType: string;\n\t/** States in declaration order (`Object.values` order of the definition record). */\n\tstates: StateDefinition[];\n\ttransitions: ModuleManifestStateMachineTransition[];\n}\n\n/**\n * Stable, JSON-serializable description of a {@link FabricModule}'s ontology:\n * object types, subject types, id prefixes, event types, actions, policies,\n * and state machines. Intended for downstream tooling (semantics exporters,\n * docs generators, tool generators) that cannot consume live module code.\n *\n * The manifest contains definitions only — never raw parameter values,\n * secrets, or runtime data. Function fields (`handler`, `evaluate`, `guard`,\n * dynamic `targetState`, adapter `getInput`) are never serialized.\n */\nexport interface ModuleManifest {\n\tmanifestVersion: typeof MODULE_MANIFEST_VERSION;\n\tnamespace: string;\n\tversion?: string;\n\tdisplayName?: string;\n\tdescription?: string;\n\tdependencies: ModuleDependency[];\n\tobjectTypes: ModuleManifestObjectType[];\n\tsubjectTypes: string[];\n\tidPrefixes: ModuleManifestIdPrefix[];\n\teventTypes: ModuleManifestEventType[];\n\tactions: ModuleManifestAction[];\n\tpolicies: ModuleManifestPolicy[];\n\tstateMachines: ModuleManifestStateMachine[];\n}\n\nexport interface ModuleManifestBundle {\n\tmanifestVersion: typeof MODULE_MANIFEST_VERSION;\n\t/** Manifests in the input module order. */\n\tmodules: ModuleManifest[];\n}\n\n/**\n * A {@link SchemaValidator} that can also export its parameter schema as JSON\n * Schema (for example a Zod 4 schema via `z.toJSONSchema`). Keeps the platform\n * zero-dependency while letting schema-bearing actions flow into manifests.\n */\nexport interface JsonSchemaExportableValidator extends SchemaValidator {\n\ttoJSONSchema(): Record<string, unknown>;\n}\n\nexport function isJsonSchemaExportableValidator(\n\tschema: SchemaValidator,\n): schema is JsonSchemaExportableValidator {\n\treturn (\n\t\ttypeof (schema as Partial<JsonSchemaExportableValidator>).toJSONSchema === \"function\"\n\t);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn value !== null && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction exportDependency(dependency: ModuleDependencyInput): ModuleDependency {\n\tconst namespace = getModuleDependencyNamespace(dependency);\n\tif (typeof dependency === \"string\") {\n\t\treturn { namespace };\n\t}\n\tconst normalized: ModuleDependency = { namespace };\n\tif (dependency.version !== undefined) normalized.version = dependency.version;\n\tif (dependency.optional !== undefined) normalized.optional = dependency.optional;\n\treturn normalized;\n}\n\nfunction exportObjectType(\n\tobjectType: NonNullable<FabricModule[\"objectTypes\"]>[number],\n): ModuleManifestObjectType {\n\tif (typeof objectType === \"string\") {\n\t\treturn { type: objectType };\n\t}\n\tconst normalized: ModuleManifestObjectType = { type: getObjectTypeName(objectType) };\n\tif (objectType.displayName !== undefined) normalized.displayName = objectType.displayName;\n\tif (objectType.idPrefix !== undefined) normalized.idPrefix = objectType.idPrefix;\n\treturn normalized;\n}\n\nfunction exportEventType(\n\teventType: NonNullable<FabricModule[\"eventTypes\"]>[number],\n): ModuleManifestEventType {\n\tif (typeof eventType === \"string\") {\n\t\t// String registrations carry no explicit schema version; the events\n\t\t// registry treats the bare name as the initial version of the type.\n\t\treturn { eventType, schemaVersion: 1 };\n\t}\n\tconst normalized: ModuleManifestEventType = {\n\t\teventType: getEventTypeName(eventType),\n\t\tschemaVersion: eventType.schemaVersion,\n\t};\n\tif (eventType.description !== undefined) normalized.description = eventType.description;\n\treturn normalized;\n}\n\nfunction exportAction(action: ActionDefinition): ModuleManifestAction {\n\tconst manifest: ModuleManifestAction = {\n\t\tactionId: action.actionId,\n\t\tversion: action.version,\n\t\tkind: action.kind ?? \"atomic\",\n\t\tidempotent: action.idempotent,\n\t\tmutatesDomain: action.mutatesDomain,\n\t\temitsEvents: [...action.emitsEvents],\n\t};\n\n\tif (action.policies !== undefined) manifest.policies = [...action.policies];\n\tif (action.requiredRoles !== undefined) manifest.requiredRoles = [...action.requiredRoles];\n\tif (action.requiredPermissions !== undefined) {\n\t\tmanifest.requiredPermissions = [...action.requiredPermissions];\n\t}\n\tif (action.eventPhase !== undefined) manifest.eventPhase = action.eventPhase;\n\n\tif (isJsonSchemaExportableValidator(action.schema)) {\n\t\tmanifest.parameterSchema = action.schema.toJSONSchema();\n\t\tmanifest.parameterSchemaFormat = \"json-schema\";\n\t}\n\n\tif (action.stateMachine !== undefined) {\n\t\tconst binding: ModuleManifestActionStateMachine = {\n\t\t\tentityType: action.stateMachine.entityType,\n\t\t};\n\t\tif (typeof action.stateMachine.targetState === \"string\") {\n\t\t\tbinding.targetState = action.stateMachine.targetState;\n\t\t}\n\t\tmanifest.stateMachine = binding;\n\t}\n\n\tif (action.adapterSteps !== undefined) {\n\t\tmanifest.adapterSteps = action.adapterSteps.map((step) => {\n\t\t\tconst exported: ModuleManifestAdapterStep = {\n\t\t\t\tadapterType: step.adapterType,\n\t\t\t\toperation: step.operation,\n\t\t\t};\n\t\t\tif (step.retryPolicy !== undefined) exported.retryPolicy = { ...step.retryPolicy };\n\t\t\treturn exported;\n\t\t});\n\t}\n\n\treturn manifest;\n}\n\nfunction exportPolicy(policy: unknown): ModuleManifestPolicy | undefined {\n\tif (!isRecord(policy) || typeof policy.policyId !== \"string\") {\n\t\treturn undefined;\n\t}\n\n\t// Code evaluator: identified by its `evaluate` function (never serialized).\n\tif (typeof policy.evaluate === \"function\") {\n\t\tconst exported: ModuleManifestCodePolicy = {\n\t\t\ttype: \"code\",\n\t\t\tpolicyId: policy.policyId,\n\t\t\tversion: typeof policy.version === \"number\" ? policy.version : 1,\n\t\t};\n\t\tif (typeof policy.previewSafe === \"boolean\") exported.previewSafe = policy.previewSafe;\n\t\treturn exported;\n\t}\n\n\t// Declarative runtime policy definition: pure data, serialized as-is.\n\tif (typeof policy.kind === \"string\" && typeof policy.policyVersion === \"number\") {\n\t\tconst exported: ModuleManifestDataPolicy = {\n\t\t\ttype: \"data\",\n\t\t\tpolicyId: policy.policyId,\n\t\t\tpolicyVersion: policy.policyVersion,\n\t\t\tkind: policy.kind as PolicyKind,\n\t\t};\n\t\tif (isRecord(policy.dataDefinition)) {\n\t\t\texported.dataDefinition = policy.dataDefinition as unknown as DataPolicyDefinition;\n\t\t}\n\t\tif (typeof policy.codeEvaluatorPolicyId === \"string\") {\n\t\t\texported.codeEvaluatorPolicyId = policy.codeEvaluatorPolicyId;\n\t\t}\n\t\tif (isRecord(policy.fallback)) {\n\t\t\texported.fallback = policy.fallback as unknown as PolicyFallbackDefinition;\n\t\t}\n\t\treturn exported;\n\t}\n\n\t// Unknown policy shape: omit rather than guess.\n\treturn undefined;\n}\n\nfunction exportStateMachine(machine: unknown): ModuleManifestStateMachine | undefined {\n\tif (\n\t\t!isRecord(machine) ||\n\t\ttypeof machine.entityType !== \"string\" ||\n\t\t!isRecord(machine.states) ||\n\t\t!Array.isArray(machine.transitions)\n\t) {\n\t\treturn undefined;\n\t}\n\n\tconst definition = machine as unknown as StateMachineDefinition;\n\treturn {\n\t\tentityType: definition.entityType,\n\t\tstates: Object.values(definition.states),\n\t\ttransitions: definition.transitions.map((transition) => ({\n\t\t\tfrom: transition.from,\n\t\t\tto: transition.to,\n\t\t\tcausedByAction: transition.causedByAction,\n\t\t\thasGuard: typeof transition.guard === \"function\",\n\t\t})),\n\t};\n}\n\n/**\n * Export a stable, JSON-serializable manifest of a module's ontology.\n *\n * This is a pure function of the module object: it does not read or mutate the\n * global module/action/policy/state-machine registries, and the module does\n * not need to be registered first. Declaration order is preserved everywhere\n * (nothing is sorted), so the same module object always produces a\n * byte-identical `JSON.stringify` result.\n *\n * The manifest contains definitions only — never raw parameter values,\n * secrets, or runtime data. Function fields are elided (`handler`,\n * policy `evaluate`, transition `guard` → `hasGuard`, dynamic `targetState`,\n * adapter `getInput`).\n */\nexport function exportModuleManifest(module: FabricModule<unknown>): ModuleManifest {\n\tconst manifest: ModuleManifest = {\n\t\tmanifestVersion: MODULE_MANIFEST_VERSION,\n\t\tnamespace: module.namespace,\n\t\tdependencies: (module.dependencies ?? []).map(exportDependency),\n\t\tobjectTypes: (module.objectTypes ?? []).map(exportObjectType),\n\t\tsubjectTypes: [...(module.subjectTypes ?? [])],\n\t\tidPrefixes: (module.idPrefixes ?? []).map((registration) => ({\n\t\t\tprefix: registration.prefix,\n\t\t\tname: registration.name,\n\t\t})),\n\t\teventTypes: (module.eventTypes ?? []).map(exportEventType),\n\t\tactions: (module.actions ?? []).map(exportAction),\n\t\tpolicies: (module.policies ?? [])\n\t\t\t.map(exportPolicy)\n\t\t\t.filter((policy): policy is ModuleManifestPolicy => policy !== undefined),\n\t\tstateMachines: (module.stateMachines ?? [])\n\t\t\t.map(exportStateMachine)\n\t\t\t.filter((machine): machine is ModuleManifestStateMachine => machine !== undefined),\n\t};\n\n\tif (module.version !== undefined) manifest.version = module.version;\n\tif (module.displayName !== undefined) manifest.displayName = module.displayName;\n\tif (module.description !== undefined) manifest.description = module.description;\n\n\treturn manifest;\n}\n\n/**\n * Export manifests for a set of modules, preserving the input order.\n * Like {@link exportModuleManifest}, this is pure and registry-free.\n */\nexport function exportModuleManifestBundle(\n\tmodules: FabricModule<unknown>[],\n): ModuleManifestBundle {\n\treturn {\n\t\tmanifestVersion: MODULE_MANIFEST_VERSION,\n\t\tmodules: modules.map(exportModuleManifest),\n\t};\n}\n"]}

package/dist/chunk-ANPJYXBK.cjs

@@ -0,0 +1,34 @@
+'use strict';
+
+// governance/index.ts
+var FABRIC_GOVERNANCE_CONTRACT_VERSION = 1;
+function assertMutationGovernanceContext(value) {
+  if (!Number.isInteger(value.footprint.version) || value.footprint.version < 1) {
+    throw new Error("Mutation footprint version must be a positive integer");
+  }
+  for (const entry of value.footprint.resources) {
+    if (!entry.resource.provider.trim()) throw new Error("Resource provider is required");
+    if (!entry.resource.resourceType.trim()) throw new Error("Resource type is required");
+    if (!entry.resource.resourceId.trim()) throw new Error("Resource id is required");
+  }
+  if (!value.executionPrincipal.principalId.trim()) {
+    throw new Error("Execution principal id is required");
+  }
+}
+function assertGovernanceRuntimeEvidence(value) {
+  if (!Number.isInteger(value.governanceContractVersion) || value.governanceContractVersion < 1) {
+    throw new Error("Governance contract version must be a positive integer");
+  }
+  if (!Number.isInteger(value.hostContractVersion) || value.hostContractVersion < 1) {
+    throw new Error("Host contract version must be a positive integer");
+  }
+  if (value.providerBridge && (!value.providerBridge.name.trim() || !value.providerBridge.version.trim())) {
+    throw new Error("Provider bridge name and version are required");
+  }
+}
+
+exports.FABRIC_GOVERNANCE_CONTRACT_VERSION = FABRIC_GOVERNANCE_CONTRACT_VERSION;
+exports.assertGovernanceRuntimeEvidence = assertGovernanceRuntimeEvidence;
+exports.assertMutationGovernanceContext = assertMutationGovernanceContext;
+//# sourceMappingURL=chunk-ANPJYXBK.cjs.map
+//# sourceMappingURL=chunk-ANPJYXBK.cjs.map

package/dist/chunk-ANPJYXBK.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../governance/index.ts"],"names":[],"mappings":";;;AAIO,IAAM,kCAAA,GAAqC;AA4G3C,SAAS,gCACf,KAAA,EACO;AACP,EAAA,IAAI,CAAC,MAAA,CAAO,SAAA,CAAU,KAAA,CAAM,SAAA,CAAU,OAAO,CAAA,IAAK,KAAA,CAAM,SAAA,CAAU,OAAA,GAAU,CAAA,EAAG;AAC9E,IAAA,MAAM,IAAI,MAAM,uDAAuD,CAAA;AAAA,EACxE;AACA,EAAA,KAAA,MAAW,KAAA,IAAS,KAAA,CAAM,SAAA,CAAU,SAAA,EAAW;AAC9C,IAAA,IAAI,CAAC,MAAM,QAAA,CAAS,QAAA,CAAS,MAAK,EAAG,MAAM,IAAI,KAAA,CAAM,+BAA+B,CAAA;AACpF,IAAA,IAAI,CAAC,MAAM,QAAA,CAAS,YAAA,CAAa,MAAK,EAAG,MAAM,IAAI,KAAA,CAAM,2BAA2B,CAAA;AACpF,IAAA,IAAI,CAAC,MAAM,QAAA,CAAS,UAAA,CAAW,MAAK,EAAG,MAAM,IAAI,KAAA,CAAM,yBAAyB,CAAA;AAAA,EACjF;AACA,EAAA,IAAI,CAAC,KAAA,CAAM,kBAAA,CAAmB,WAAA,CAAY,MAAK,EAAG;AACjD,IAAA,MAAM,IAAI,MAAM,oCAAoC,CAAA;AAAA,EACrD;AACD;AAEO,SAAS,gCAAgC,KAAA,EAAwC;AACvF,EAAA,IAAI,CAAC,OAAO,SAAA,CAAU,KAAA,CAAM,yBAAyB,CAAA,IAAK,KAAA,CAAM,4BAA4B,CAAA,EAAG;AAC9F,IAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAAA,EACzE;AACA,EAAA,IAAI,CAAC,OAAO,SAAA,CAAU,KAAA,CAAM,mBAAmB,CAAA,IAAK,KAAA,CAAM,sBAAsB,CAAA,EAAG;AAClF,IAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,EACnE;AACA,EAAA,IAAI,KAAA,CAAM,cAAA,KAAmB,CAAC,KAAA,CAAM,cAAA,CAAe,IAAA,CAAK,IAAA,EAAK,IAAK,CAAC,KAAA,CAAM,cAAA,CAAe,OAAA,CAAQ,MAAK,CAAA,EAAI;AACxG,IAAA,MAAM,IAAI,MAAM,+CAA+C,CAAA;AAAA,EAChE;AACD","file":"chunk-ANPJYXBK.cjs","sourcesContent":["import type { ActorType } from \"../actions\";\nimport type { EvidencePacketReference } from \"../evidence\";\n\n/** Language-neutral governance contract version shared by TypeScript and .NET. */\nexport const FABRIC_GOVERNANCE_CONTRACT_VERSION = 1 as const;\n\nexport type ExternalResourceOperation =\n\t| \"read\"\n\t| \"create\"\n\t| \"update\"\n\t| \"delete\"\n\t| \"execute\"\n\t| \"publish\";\n\n/** Provider-neutral identity for infrastructure touched by a governed mutation. */\nexport interface ExternalResourceRef {\n\tprovider: string;\n\tresourceType: string;\n\tresourceId: string;\n\tdisplayName?: string;\n\tmetadata?: Record<string, unknown>;\n}\n\nexport interface MutationFootprintEntry {\n\tresource: ExternalResourceRef;\n\toperation: ExternalResourceOperation;\n\tdataClassifications?: string[];\n}\n\n/** Durable declaration of the external effects an invocation is allowed to produce. */\nexport interface MutationFootprint {\n\tversion: number;\n\tresources: MutationFootprintEntry[];\n}\n\n/** Effective execution identity, including the delegation chain that produced it. */\nexport interface ExecutionPrincipal {\n\tprincipalId: string;\n\tprincipalType: ActorType | string;\n\tprovider?: string;\n\tdelegatedBy?: ExecutionPrincipal;\n\tmetadata?: Record<string, unknown>;\n}\n\nexport type PolicyObligationStatus = \"pending\" | \"satisfied\" | \"waived\" | \"failed\";\n\nexport interface PolicyObligation {\n\tid: string;\n\ttype: string;\n\tstatus: PolicyObligationStatus;\n\trequired?: boolean;\n\tdescription?: string;\n\tevidenceReferences?: EvidencePacketReference[];\n\tmetadata?: Record<string, unknown>;\n}\n\n/** Audit-safe proof returned by an external execution provider. */\nexport interface ExecutionAttestation {\n\tprovider: string;\n\toperation: string;\n\texternalOperationId?: string;\n\tresource?: ExternalResourceRef;\n\tevidenceReferences: EvidencePacketReference[];\n\tsatisfiesObligations?: string[];\n\tstartedAt: Date | string;\n\tcompletedAt?: Date | string;\n\tmetadata?: Record<string, unknown>;\n}\n\nexport type ReconciliationStatus = \"not_required\" | \"pending\" | \"reconciled\" | \"failed\";\n\nexport interface ExternalReconciliation {\n\tstatus: ReconciliationStatus;\n\tprovider: string;\n\texternalOperationId?: string;\n\tattempt: number;\n\treason?: string;\n\tevidenceReferences?: EvidencePacketReference[];\n\tobservedAt: Date | string;\n}\n\nexport interface MutationGovernanceContext {\n\tfootprint: MutationFootprint;\n\texecutionPrincipal: ExecutionPrincipal;\n}\n\n/** Runtime generations durably attached to every new hosted invocation. */\nexport interface GovernanceRuntimeEvidence {\n\tgovernanceContractVersion: number;\n\thostContractVersion: number;\n\thostPackageVersion?: string;\n\tproviderBridge?: {\n\t\tname: string;\n\t\tversion: string;\n\t};\n\tpolicyRulesetVersion?: string;\n}\n\nexport interface MutationGovernanceResolutionInput {\n\tactionInvocationId: string;\n\tactionId: string;\n\ttenantId: string;\n\tspaceId: string;\n\tactorId: string;\n\tactorType: ActorType;\n\tparameters: unknown;\n}\n\nexport type MutationGovernanceResolver = (\n\tinput: MutationGovernanceResolutionInput,\n) => Promise<MutationGovernanceContext> | MutationGovernanceContext;\n\nexport function assertMutationGovernanceContext(\n\tvalue: MutationGovernanceContext,\n): void {\n\tif (!Number.isInteger(value.footprint.version) || value.footprint.version < 1) {\n\t\tthrow new Error(\"Mutation footprint version must be a positive integer\");\n\t}\n\tfor (const entry of value.footprint.resources) {\n\t\tif (!entry.resource.provider.trim()) throw new Error(\"Resource provider is required\");\n\t\tif (!entry.resource.resourceType.trim()) throw new Error(\"Resource type is required\");\n\t\tif (!entry.resource.resourceId.trim()) throw new Error(\"Resource id is required\");\n\t}\n\tif (!value.executionPrincipal.principalId.trim()) {\n\t\tthrow new Error(\"Execution principal id is required\");\n\t}\n}\n\nexport function assertGovernanceRuntimeEvidence(value: GovernanceRuntimeEvidence): void {\n\tif (!Number.isInteger(value.governanceContractVersion) || value.governanceContractVersion < 1) {\n\t\tthrow new Error(\"Governance contract version must be a positive integer\");\n\t}\n\tif (!Number.isInteger(value.hostContractVersion) || value.hostContractVersion < 1) {\n\t\tthrow new Error(\"Host contract version must be a positive integer\");\n\t}\n\tif (value.providerBridge && (!value.providerBridge.name.trim() || !value.providerBridge.version.trim())) {\n\t\tthrow new Error(\"Provider bridge name and version are required\");\n\t}\n}\n"]}

package/dist/chunk-N72WJ4AU.js

@@ -0,0 +1,160 @@
+import { getEventTypeName, getObjectTypeName, getModuleDependencyNamespace } from './chunk-35DD3H55.js';
+
+// manifest/index.ts
+var MODULE_MANIFEST_VERSION = 1;
+function isJsonSchemaExportableValidator(schema) {
+  return typeof schema.toJSONSchema === "function";
+}
+function isRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function exportDependency(dependency) {
+  const namespace = getModuleDependencyNamespace(dependency);
+  if (typeof dependency === "string") {
+    return { namespace };
+  }
+  const normalized = { namespace };
+  if (dependency.version !== void 0) normalized.version = dependency.version;
+  if (dependency.optional !== void 0) normalized.optional = dependency.optional;
+  return normalized;
+}
+function exportObjectType(objectType) {
+  if (typeof objectType === "string") {
+    return { type: objectType };
+  }
+  const normalized = { type: getObjectTypeName(objectType) };
+  if (objectType.displayName !== void 0) normalized.displayName = objectType.displayName;
+  if (objectType.idPrefix !== void 0) normalized.idPrefix = objectType.idPrefix;
+  return normalized;
+}
+function exportEventType(eventType) {
+  if (typeof eventType === "string") {
+    return { eventType, schemaVersion: 1 };
+  }
+  const normalized = {
+    eventType: getEventTypeName(eventType),
+    schemaVersion: eventType.schemaVersion
+  };
+  if (eventType.description !== void 0) normalized.description = eventType.description;
+  return normalized;
+}
+function exportAction(action) {
+  const manifest = {
+    actionId: action.actionId,
+    version: action.version,
+    kind: action.kind ?? "atomic",
+    idempotent: action.idempotent,
+    mutatesDomain: action.mutatesDomain,
+    emitsEvents: [...action.emitsEvents]
+  };
+  if (action.policies !== void 0) manifest.policies = [...action.policies];
+  if (action.requiredRoles !== void 0) manifest.requiredRoles = [...action.requiredRoles];
+  if (action.requiredPermissions !== void 0) {
+    manifest.requiredPermissions = [...action.requiredPermissions];
+  }
+  if (action.eventPhase !== void 0) manifest.eventPhase = action.eventPhase;
+  if (isJsonSchemaExportableValidator(action.schema)) {
+    manifest.parameterSchema = action.schema.toJSONSchema();
+    manifest.parameterSchemaFormat = "json-schema";
+  }
+  if (action.stateMachine !== void 0) {
+    const binding = {
+      entityType: action.stateMachine.entityType
+    };
+    if (typeof action.stateMachine.targetState === "string") {
+      binding.targetState = action.stateMachine.targetState;
+    }
+    manifest.stateMachine = binding;
+  }
+  if (action.adapterSteps !== void 0) {
+    manifest.adapterSteps = action.adapterSteps.map((step) => {
+      const exported = {
+        adapterType: step.adapterType,
+        operation: step.operation
+      };
+      if (step.retryPolicy !== void 0) exported.retryPolicy = { ...step.retryPolicy };
+      return exported;
+    });
+  }
+  return manifest;
+}
+function exportPolicy(policy) {
+  if (!isRecord(policy) || typeof policy.policyId !== "string") {
+    return void 0;
+  }
+  if (typeof policy.evaluate === "function") {
+    const exported = {
+      type: "code",
+      policyId: policy.policyId,
+      version: typeof policy.version === "number" ? policy.version : 1
+    };
+    if (typeof policy.previewSafe === "boolean") exported.previewSafe = policy.previewSafe;
+    return exported;
+  }
+  if (typeof policy.kind === "string" && typeof policy.policyVersion === "number") {
+    const exported = {
+      type: "data",
+      policyId: policy.policyId,
+      policyVersion: policy.policyVersion,
+      kind: policy.kind
+    };
+    if (isRecord(policy.dataDefinition)) {
+      exported.dataDefinition = policy.dataDefinition;
+    }
+    if (typeof policy.codeEvaluatorPolicyId === "string") {
+      exported.codeEvaluatorPolicyId = policy.codeEvaluatorPolicyId;
+    }
+    if (isRecord(policy.fallback)) {
+      exported.fallback = policy.fallback;
+    }
+    return exported;
+  }
+  return void 0;
+}
+function exportStateMachine(machine) {
+  if (!isRecord(machine) || typeof machine.entityType !== "string" || !isRecord(machine.states) || !Array.isArray(machine.transitions)) {
+    return void 0;
+  }
+  const definition = machine;
+  return {
+    entityType: definition.entityType,
+    states: Object.values(definition.states),
+    transitions: definition.transitions.map((transition) => ({
+      from: transition.from,
+      to: transition.to,
+      causedByAction: transition.causedByAction,
+      hasGuard: typeof transition.guard === "function"
+    }))
+  };
+}
+function exportModuleManifest(module) {
+  const manifest = {
+    manifestVersion: MODULE_MANIFEST_VERSION,
+    namespace: module.namespace,
+    dependencies: (module.dependencies ?? []).map(exportDependency),
+    objectTypes: (module.objectTypes ?? []).map(exportObjectType),
+    subjectTypes: [...module.subjectTypes ?? []],
+    idPrefixes: (module.idPrefixes ?? []).map((registration) => ({
+      prefix: registration.prefix,
+      name: registration.name
+    })),
+    eventTypes: (module.eventTypes ?? []).map(exportEventType),
+    actions: (module.actions ?? []).map(exportAction),
+    policies: (module.policies ?? []).map(exportPolicy).filter((policy) => policy !== void 0),
+    stateMachines: (module.stateMachines ?? []).map(exportStateMachine).filter((machine) => machine !== void 0)
+  };
+  if (module.version !== void 0) manifest.version = module.version;
+  if (module.displayName !== void 0) manifest.displayName = module.displayName;
+  if (module.description !== void 0) manifest.description = module.description;
+  return manifest;
+}
+function exportModuleManifestBundle(modules) {
+  return {
+    manifestVersion: MODULE_MANIFEST_VERSION,
+    modules: modules.map(exportModuleManifest)
+  };
+}
+
+export { MODULE_MANIFEST_VERSION, exportModuleManifest, exportModuleManifestBundle, isJsonSchemaExportableValidator };
+//# sourceMappingURL=chunk-N72WJ4AU.js.map
+//# sourceMappingURL=chunk-N72WJ4AU.js.map

package/dist/chunk-N72WJ4AU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../manifest/index.ts"],"names":[],"mappings":";;;AAwBO,IAAM,uBAAA,GAA0B;AA+HhC,SAAS,gCACf,MAAA,EAC0C;AAC1C,EAAA,OACC,OAAQ,OAAkD,YAAA,KAAiB,UAAA;AAE7E;AAEA,SAAS,SAAS,KAAA,EAAkD;AACnE,EAAA,OAAO,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,YAAY,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC3E;AAEA,SAAS,iBAAiB,UAAA,EAAqD;AAC9E,EAAA,MAAM,SAAA,GAAY,6BAA6B,UAAU,CAAA;AACzD,EAAA,IAAI,OAAO,eAAe,QAAA,EAAU;AACnC,IAAA,OAAO,EAAE,SAAA,EAAU;AAAA,EACpB;AACA,EAAA,MAAM,UAAA,GAA+B,EAAE,SAAA,EAAU;AACjD,EAAA,IAAI,UAAA,CAAW,OAAA,KAAY,MAAA,EAAW,UAAA,CAAW,UAAU,UAAA,CAAW,OAAA;AACtE,EAAA,IAAI,UAAA,CAAW,QAAA,KAAa,MAAA,EAAW,UAAA,CAAW,WAAW,UAAA,CAAW,QAAA;AACxE,EAAA,OAAO,UAAA;AACR;AAEA,SAAS,iBACR,UAAA,EAC2B;AAC3B,EAAA,IAAI,OAAO,eAAe,QAAA,EAAU;AACnC,IAAA,OAAO,EAAE,MAAM,UAAA,EAAW;AAAA,EAC3B;AACA,EAAA,MAAM,UAAA,GAAuC,EAAE,IAAA,EAAM,iBAAA,CAAkB,UAAU,CAAA,EAAE;AACnF,EAAA,IAAI,UAAA,CAAW,WAAA,KAAgB,MAAA,EAAW,UAAA,CAAW,cAAc,UAAA,CAAW,WAAA;AAC9E,EAAA,IAAI,UAAA,CAAW,QAAA,KAAa,MAAA,EAAW,UAAA,CAAW,WAAW,UAAA,CAAW,QAAA;AACxE,EAAA,OAAO,UAAA;AACR;AAEA,SAAS,gBACR,SAAA,EAC0B;AAC1B,EAAA,IAAI,OAAO,cAAc,QAAA,EAAU;AAGlC,IAAA,OAAO,EAAE,SAAA,EAAW,aAAA,EAAe,CAAA,EAAE;AAAA,EACtC;AACA,EAAA,MAAM,UAAA,GAAsC;AAAA,IAC3C,SAAA,EAAW,iBAAiB,SAAS,CAAA;AAAA,IACrC,eAAe,SAAA,CAAU;AAAA,GAC1B;AACA,EAAA,IAAI,SAAA,CAAU,WAAA,KAAgB,MAAA,EAAW,UAAA,CAAW,cAAc,SAAA,CAAU,WAAA;AAC5E,EAAA,OAAO,UAAA;AACR;AAEA,SAAS,aAAa,MAAA,EAAgD;AACrE,EAAA,MAAM,QAAA,GAAiC;AAAA,IACtC,UAAU,MAAA,CAAO,QAAA;AAAA,IACjB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,IAAA,EAAM,OAAO,IAAA,IAAQ,QAAA;AAAA,IACrB,YAAY,MAAA,CAAO,UAAA;AAAA,IACnB,eAAe,MAAA,CAAO,aAAA;AAAA,IACtB,WAAA,EAAa,CAAC,GAAG,MAAA,CAAO,WAAW;AAAA,GACpC;AAEA,EAAA,IAAI,MAAA,CAAO,aAAa,MAAA,EAAW,QAAA,CAAS,WAAW,CAAC,GAAG,OAAO,QAAQ,CAAA;AAC1E,EAAA,IAAI,MAAA,CAAO,kBAAkB,MAAA,EAAW,QAAA,CAAS,gBAAgB,CAAC,GAAG,OAAO,aAAa,CAAA;AACzF,EAAA,IAAI,MAAA,CAAO,wBAAwB,MAAA,EAAW;AAC7C,IAAA,QAAA,CAAS,mBAAA,GAAsB,CAAC,GAAG,MAAA,CAAO,mBAAmB,CAAA;AAAA,EAC9D;AACA,EAAA,IAAI,MAAA,CAAO,UAAA,KAAe,MAAA,EAAW,QAAA,CAAS,aAAa,MAAA,CAAO,UAAA;AAElE,EAAA,IAAI,+BAAA,CAAgC,MAAA,CAAO,MAAM,CAAA,EAAG;AACnD,IAAA,QAAA,CAAS,eAAA,GAAkB,MAAA,CAAO,MAAA,CAAO,YAAA,EAAa;AACtD,IAAA,QAAA,CAAS,qBAAA,GAAwB,aAAA;AAAA,EAClC;AAEA,EAAA,IAAI,MAAA,CAAO,iBAAiB,MAAA,EAAW;AACtC,IAAA,MAAM,OAAA,GAA4C;AAAA,MACjD,UAAA,EAAY,OAAO,YAAA,CAAa;AAAA,KACjC;AACA,IAAA,IAAI,OAAO,MAAA,CAAO,YAAA,CAAa,WAAA,KAAgB,QAAA,EAAU;AACxD,MAAA,OAAA,CAAQ,WAAA,GAAc,OAAO,YAAA,CAAa,WAAA;AAAA,IAC3C;AACA,IAAA,QAAA,CAAS,YAAA,GAAe,OAAA;AAAA,EACzB;AAEA,EAAA,IAAI,MAAA,CAAO,iBAAiB,MAAA,EAAW;AACtC,IAAA,QAAA,CAAS,YAAA,GAAe,MAAA,CAAO,YAAA,CAAa,GAAA,CAAI,CAAC,IAAA,KAAS;AACzD,MAAA,MAAM,QAAA,GAAsC;AAAA,QAC3C,aAAa,IAAA,CAAK,WAAA;AAAA,QAClB,WAAW,IAAA,CAAK;AAAA,OACjB;AACA,MAAA,IAAI,IAAA,CAAK,gBAAgB,MAAA,EAAW,QAAA,CAAS,cAAc,EAAE,GAAG,KAAK,WAAA,EAAY;AACjF,MAAA,OAAO,QAAA;AAAA,IACR,CAAC,CAAA;AAAA,EACF;AAEA,EAAA,OAAO,QAAA;AACR;AAEA,SAAS,aAAa,MAAA,EAAmD;AACxE,EAAA,IAAI,CAAC,QAAA,CAAS,MAAM,KAAK,OAAO,MAAA,CAAO,aAAa,QAAA,EAAU;AAC7D,IAAA,OAAO,MAAA;AAAA,EACR;AAGA,EAAA,IAAI,OAAO,MAAA,CAAO,QAAA,KAAa,UAAA,EAAY;AAC1C,IAAA,MAAM,QAAA,GAAqC;AAAA,MAC1C,IAAA,EAAM,MAAA;AAAA,MACN,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,SAAS,OAAO,MAAA,CAAO,OAAA,KAAY,QAAA,GAAW,OAAO,OAAA,GAAU;AAAA,KAChE;AACA,IAAA,IAAI,OAAO,MAAA,CAAO,WAAA,KAAgB,SAAA,EAAW,QAAA,CAAS,cAAc,MAAA,CAAO,WAAA;AAC3E,IAAA,OAAO,QAAA;AAAA,EACR;AAGA,EAAA,IAAI,OAAO,MAAA,CAAO,IAAA,KAAS,YAAY,OAAO,MAAA,CAAO,kBAAkB,QAAA,EAAU;AAChF,IAAA,MAAM,QAAA,GAAqC;AAAA,MAC1C,IAAA,EAAM,MAAA;AAAA,MACN,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,eAAe,MAAA,CAAO,aAAA;AAAA,MACtB,MAAM,MAAA,CAAO;AAAA,KACd;AACA,IAAA,IAAI,QAAA,CAAS,MAAA,CAAO,cAAc,CAAA,EAAG;AACpC,MAAA,QAAA,CAAS,iBAAiB,MAAA,CAAO,cAAA;AAAA,IAClC;AACA,IAAA,IAAI,OAAO,MAAA,CAAO,qBAAA,KAA0B,QAAA,EAAU;AACrD,MAAA,QAAA,CAAS,wBAAwB,MAAA,CAAO,qBAAA;AAAA,IACzC;AACA,IAAA,IAAI,QAAA,CAAS,MAAA,CAAO,QAAQ,CAAA,EAAG;AAC9B,MAAA,QAAA,CAAS,WAAW,MAAA,CAAO,QAAA;AAAA,IAC5B;AACA,IAAA,OAAO,QAAA;AAAA,EACR;AAGA,EAAA,OAAO,MAAA;AACR;AAEA,SAAS,mBAAmB,OAAA,EAA0D;AACrF,EAAA,IACC,CAAC,QAAA,CAAS,OAAO,KACjB,OAAO,OAAA,CAAQ,eAAe,QAAA,IAC9B,CAAC,QAAA,CAAS,OAAA,CAAQ,MAAM,CAAA,IACxB,CAAC,MAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,CAAA,EACjC;AACD,IAAA,OAAO,MAAA;AAAA,EACR;AAEA,EAAA,MAAM,UAAA,GAAa,OAAA;AACnB,EAAA,OAAO;AAAA,IACN,YAAY,UAAA,CAAW,UAAA;AAAA,IACvB,MAAA,EAAQ,MAAA,CAAO,MAAA,CAAO,UAAA,CAAW,MAAM,CAAA;AAAA,IACvC,WAAA,EAAa,UAAA,CAAW,WAAA,CAAY,GAAA,CAAI,CAAC,UAAA,MAAgB;AAAA,MACxD,MAAM,UAAA,CAAW,IAAA;AAAA,MACjB,IAAI,UAAA,CAAW,EAAA;AAAA,MACf,gBAAgB,UAAA,CAAW,cAAA;AAAA,MAC3B,QAAA,EAAU,OAAO,UAAA,CAAW,KAAA,KAAU;AAAA,KACvC,CAAE;AAAA,GACH;AACD;AAgBO,SAAS,qBAAqB,MAAA,EAA+C;AACnF,EAAA,MAAM,QAAA,GAA2B;AAAA,IAChC,eAAA,EAAiB,uBAAA;AAAA,IACjB,WAAW,MAAA,CAAO,SAAA;AAAA,IAClB,eAAe,MAAA,CAAO,YAAA,IAAgB,EAAC,EAAG,IAAI,gBAAgB,CAAA;AAAA,IAC9D,cAAc,MAAA,CAAO,WAAA,IAAe,EAAC,EAAG,IAAI,gBAAgB,CAAA;AAAA,IAC5D,cAAc,CAAC,GAAI,MAAA,CAAO,YAAA,IAAgB,EAAG,CAAA;AAAA,IAC7C,aAAa,MAAA,CAAO,UAAA,IAAc,EAAC,EAAG,GAAA,CAAI,CAAC,YAAA,MAAkB;AAAA,MAC5D,QAAQ,YAAA,CAAa,MAAA;AAAA,MACrB,MAAM,YAAA,CAAa;AAAA,KACpB,CAAE,CAAA;AAAA,IACF,aAAa,MAAA,CAAO,UAAA,IAAc,EAAC,EAAG,IAAI,eAAe,CAAA;AAAA,IACzD,UAAU,MAAA,CAAO,OAAA,IAAW,EAAC,EAAG,IAAI,YAAY,CAAA;AAAA,IAChD,QAAA,EAAA,CAAW,MAAA,CAAO,QAAA,IAAY,EAAC,EAC7B,GAAA,CAAI,YAAY,CAAA,CAChB,MAAA,CAAO,CAAC,MAAA,KAA2C,MAAA,KAAW,MAAS,CAAA;AAAA,IACzE,aAAA,EAAA,CAAgB,MAAA,CAAO,aAAA,IAAiB,EAAC,EACvC,GAAA,CAAI,kBAAkB,CAAA,CACtB,MAAA,CAAO,CAAC,OAAA,KAAmD,OAAA,KAAY,MAAS;AAAA,GACnF;AAEA,EAAA,IAAI,MAAA,CAAO,OAAA,KAAY,MAAA,EAAW,QAAA,CAAS,UAAU,MAAA,CAAO,OAAA;AAC5D,EAAA,IAAI,MAAA,CAAO,WAAA,KAAgB,MAAA,EAAW,QAAA,CAAS,cAAc,MAAA,CAAO,WAAA;AACpE,EAAA,IAAI,MAAA,CAAO,WAAA,KAAgB,MAAA,EAAW,QAAA,CAAS,cAAc,MAAA,CAAO,WAAA;AAEpE,EAAA,OAAO,QAAA;AACR;AAMO,SAAS,2BACf,OAAA,EACuB;AACvB,EAAA,OAAO;AAAA,IACN,eAAA,EAAiB,uBAAA;AAAA,IACjB,OAAA,EAAS,OAAA,CAAQ,GAAA,CAAI,oBAAoB;AAAA,GAC1C;AACD","file":"chunk-N72WJ4AU.js","sourcesContent":["import type {\n\tActionDefinition,\n\tAdapterStepRetryPolicy,\n\tSchemaValidator,\n} from \"../actions\";\nimport {\n\tgetEventTypeName,\n\tgetModuleDependencyNamespace,\n\tgetObjectTypeName,\n\ttype FabricModule,\n\ttype ModuleDependency,\n\ttype ModuleDependencyInput,\n} from \"../modules\";\nimport type {\n\tDataPolicyDefinition,\n\tPolicyFallbackDefinition,\n\tPolicyKind,\n} from \"../policies\";\nimport type { StateDefinition, StateMachineDefinition } from \"../state-machines\";\n\n/**\n * Version of the module manifest contract. Bump when the serialized shape\n * changes in a way consumers must detect.\n */\nexport const MODULE_MANIFEST_VERSION = 1 as const;\n\nexport interface ModuleManifestObjectType {\n\ttype: string;\n\tdisplayName?: string;\n\tidPrefix?: string;\n}\n\nexport interface ModuleManifestIdPrefix {\n\tprefix: string;\n\tname: string;\n}\n\nexport interface ModuleManifestEventType {\n\teventType: string;\n\tschemaVersion: number;\n\tdescription?: string;\n}\n\nexport interface ModuleManifestActionStateMachine {\n\tentityType: string;\n\t/** Present only when the binding declares a static target state. */\n\ttargetState?: string;\n}\n\nexport interface ModuleManifestAdapterStep {\n\tadapterType: string;\n\toperation: string;\n\tretryPolicy?: AdapterStepRetryPolicy;\n}\n\nexport interface ModuleManifestAction {\n\tactionId: string;\n\tversion: number;\n\tkind: \"atomic\" | \"saga\";\n\tidempotent: boolean;\n\tmutatesDomain: boolean;\n\temitsEvents: string[];\n\tpolicies?: string[];\n\trequiredRoles?: string[];\n\trequiredPermissions?: string[];\n\teventPhase?: \"before_adapters\" | \"after_adapters\";\n\t/**\n\t * JSON Schema for the action parameters, present only when the action's\n\t * `schema` validator implements {@link JsonSchemaExportableValidator}.\n\t */\n\tparameterSchema?: unknown;\n\tparameterSchemaFormat?: \"json-schema\";\n\tstateMachine?: ModuleManifestActionStateMachine;\n\tadapterSteps?: ModuleManifestAdapterStep[];\n}\n\nexport interface ModuleManifestCodePolicy {\n\ttype: \"code\";\n\tpolicyId: string;\n\tversion: number;\n\tpreviewSafe?: boolean;\n}\n\nexport interface ModuleManifestDataPolicy {\n\ttype: \"data\";\n\tpolicyId: string;\n\tpolicyVersion: number;\n\tkind: PolicyKind;\n\tdataDefinition?: DataPolicyDefinition;\n\tcodeEvaluatorPolicyId?: string;\n\tfallback?: PolicyFallbackDefinition;\n}\n\nexport type ModuleManifestPolicy = ModuleManifestCodePolicy | ModuleManifestDataPolicy;\n\nexport interface ModuleManifestStateMachineTransition {\n\tfrom: string;\n\tto: string;\n\tcausedByAction: string;\n\t/** `true` when the transition declares a guard function. The guard itself is never serialized. */\n\thasGuard: boolean;\n}\n\nexport interface ModuleManifestStateMachine {\n\tentityType: string;\n\t/** States in declaration order (`Object.values` order of the definition record). */\n\tstates: StateDefinition[];\n\ttransitions: ModuleManifestStateMachineTransition[];\n}\n\n/**\n * Stable, JSON-serializable description of a {@link FabricModule}'s ontology:\n * object types, subject types, id prefixes, event types, actions, policies,\n * and state machines. Intended for downstream tooling (semantics exporters,\n * docs generators, tool generators) that cannot consume live module code.\n *\n * The manifest contains definitions only — never raw parameter values,\n * secrets, or runtime data. Function fields (`handler`, `evaluate`, `guard`,\n * dynamic `targetState`, adapter `getInput`) are never serialized.\n */\nexport interface ModuleManifest {\n\tmanifestVersion: typeof MODULE_MANIFEST_VERSION;\n\tnamespace: string;\n\tversion?: string;\n\tdisplayName?: string;\n\tdescription?: string;\n\tdependencies: ModuleDependency[];\n\tobjectTypes: ModuleManifestObjectType[];\n\tsubjectTypes: string[];\n\tidPrefixes: ModuleManifestIdPrefix[];\n\teventTypes: ModuleManifestEventType[];\n\tactions: ModuleManifestAction[];\n\tpolicies: ModuleManifestPolicy[];\n\tstateMachines: ModuleManifestStateMachine[];\n}\n\nexport interface ModuleManifestBundle {\n\tmanifestVersion: typeof MODULE_MANIFEST_VERSION;\n\t/** Manifests in the input module order. */\n\tmodules: ModuleManifest[];\n}\n\n/**\n * A {@link SchemaValidator} that can also export its parameter schema as JSON\n * Schema (for example a Zod 4 schema via `z.toJSONSchema`). Keeps the platform\n * zero-dependency while letting schema-bearing actions flow into manifests.\n */\nexport interface JsonSchemaExportableValidator extends SchemaValidator {\n\ttoJSONSchema(): Record<string, unknown>;\n}\n\nexport function isJsonSchemaExportableValidator(\n\tschema: SchemaValidator,\n): schema is JsonSchemaExportableValidator {\n\treturn (\n\t\ttypeof (schema as Partial<JsonSchemaExportableValidator>).toJSONSchema === \"function\"\n\t);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn value !== null && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction exportDependency(dependency: ModuleDependencyInput): ModuleDependency {\n\tconst namespace = getModuleDependencyNamespace(dependency);\n\tif (typeof dependency === \"string\") {\n\t\treturn { namespace };\n\t}\n\tconst normalized: ModuleDependency = { namespace };\n\tif (dependency.version !== undefined) normalized.version = dependency.version;\n\tif (dependency.optional !== undefined) normalized.optional = dependency.optional;\n\treturn normalized;\n}\n\nfunction exportObjectType(\n\tobjectType: NonNullable<FabricModule[\"objectTypes\"]>[number],\n): ModuleManifestObjectType {\n\tif (typeof objectType === \"string\") {\n\t\treturn { type: objectType };\n\t}\n\tconst normalized: ModuleManifestObjectType = { type: getObjectTypeName(objectType) };\n\tif (objectType.displayName !== undefined) normalized.displayName = objectType.displayName;\n\tif (objectType.idPrefix !== undefined) normalized.idPrefix = objectType.idPrefix;\n\treturn normalized;\n}\n\nfunction exportEventType(\n\teventType: NonNullable<FabricModule[\"eventTypes\"]>[number],\n): ModuleManifestEventType {\n\tif (typeof eventType === \"string\") {\n\t\t// String registrations carry no explicit schema version; the events\n\t\t// registry treats the bare name as the initial version of the type.\n\t\treturn { eventType, schemaVersion: 1 };\n\t}\n\tconst normalized: ModuleManifestEventType = {\n\t\teventType: getEventTypeName(eventType),\n\t\tschemaVersion: eventType.schemaVersion,\n\t};\n\tif (eventType.description !== undefined) normalized.description = eventType.description;\n\treturn normalized;\n}\n\nfunction exportAction(action: ActionDefinition): ModuleManifestAction {\n\tconst manifest: ModuleManifestAction = {\n\t\tactionId: action.actionId,\n\t\tversion: action.version,\n\t\tkind: action.kind ?? \"atomic\",\n\t\tidempotent: action.idempotent,\n\t\tmutatesDomain: action.mutatesDomain,\n\t\temitsEvents: [...action.emitsEvents],\n\t};\n\n\tif (action.policies !== undefined) manifest.policies = [...action.policies];\n\tif (action.requiredRoles !== undefined) manifest.requiredRoles = [...action.requiredRoles];\n\tif (action.requiredPermissions !== undefined) {\n\t\tmanifest.requiredPermissions = [...action.requiredPermissions];\n\t}\n\tif (action.eventPhase !== undefined) manifest.eventPhase = action.eventPhase;\n\n\tif (isJsonSchemaExportableValidator(action.schema)) {\n\t\tmanifest.parameterSchema = action.schema.toJSONSchema();\n\t\tmanifest.parameterSchemaFormat = \"json-schema\";\n\t}\n\n\tif (action.stateMachine !== undefined) {\n\t\tconst binding: ModuleManifestActionStateMachine = {\n\t\t\tentityType: action.stateMachine.entityType,\n\t\t};\n\t\tif (typeof action.stateMachine.targetState === \"string\") {\n\t\t\tbinding.targetState = action.stateMachine.targetState;\n\t\t}\n\t\tmanifest.stateMachine = binding;\n\t}\n\n\tif (action.adapterSteps !== undefined) {\n\t\tmanifest.adapterSteps = action.adapterSteps.map((step) => {\n\t\t\tconst exported: ModuleManifestAdapterStep = {\n\t\t\t\tadapterType: step.adapterType,\n\t\t\t\toperation: step.operation,\n\t\t\t};\n\t\t\tif (step.retryPolicy !== undefined) exported.retryPolicy = { ...step.retryPolicy };\n\t\t\treturn exported;\n\t\t});\n\t}\n\n\treturn manifest;\n}\n\nfunction exportPolicy(policy: unknown): ModuleManifestPolicy | undefined {\n\tif (!isRecord(policy) || typeof policy.policyId !== \"string\") {\n\t\treturn undefined;\n\t}\n\n\t// Code evaluator: identified by its `evaluate` function (never serialized).\n\tif (typeof policy.evaluate === \"function\") {\n\t\tconst exported: ModuleManifestCodePolicy = {\n\t\t\ttype: \"code\",\n\t\t\tpolicyId: policy.policyId,\n\t\t\tversion: typeof policy.version === \"number\" ? policy.version : 1,\n\t\t};\n\t\tif (typeof policy.previewSafe === \"boolean\") exported.previewSafe = policy.previewSafe;\n\t\treturn exported;\n\t}\n\n\t// Declarative runtime policy definition: pure data, serialized as-is.\n\tif (typeof policy.kind === \"string\" && typeof policy.policyVersion === \"number\") {\n\t\tconst exported: ModuleManifestDataPolicy = {\n\t\t\ttype: \"data\",\n\t\t\tpolicyId: policy.policyId,\n\t\t\tpolicyVersion: policy.policyVersion,\n\t\t\tkind: policy.kind as PolicyKind,\n\t\t};\n\t\tif (isRecord(policy.dataDefinition)) {\n\t\t\texported.dataDefinition = policy.dataDefinition as unknown as DataPolicyDefinition;\n\t\t}\n\t\tif (typeof policy.codeEvaluatorPolicyId === \"string\") {\n\t\t\texported.codeEvaluatorPolicyId = policy.codeEvaluatorPolicyId;\n\t\t}\n\t\tif (isRecord(policy.fallback)) {\n\t\t\texported.fallback = policy.fallback as unknown as PolicyFallbackDefinition;\n\t\t}\n\t\treturn exported;\n\t}\n\n\t// Unknown policy shape: omit rather than guess.\n\treturn undefined;\n}\n\nfunction exportStateMachine(machine: unknown): ModuleManifestStateMachine | undefined {\n\tif (\n\t\t!isRecord(machine) ||\n\t\ttypeof machine.entityType !== \"string\" ||\n\t\t!isRecord(machine.states) ||\n\t\t!Array.isArray(machine.transitions)\n\t) {\n\t\treturn undefined;\n\t}\n\n\tconst definition = machine as unknown as StateMachineDefinition;\n\treturn {\n\t\tentityType: definition.entityType,\n\t\tstates: Object.values(definition.states),\n\t\ttransitions: definition.transitions.map((transition) => ({\n\t\t\tfrom: transition.from,\n\t\t\tto: transition.to,\n\t\t\tcausedByAction: transition.causedByAction,\n\t\t\thasGuard: typeof transition.guard === \"function\",\n\t\t})),\n\t};\n}\n\n/**\n * Export a stable, JSON-serializable manifest of a module's ontology.\n *\n * This is a pure function of the module object: it does not read or mutate the\n * global module/action/policy/state-machine registries, and the module does\n * not need to be registered first. Declaration order is preserved everywhere\n * (nothing is sorted), so the same module object always produces a\n * byte-identical `JSON.stringify` result.\n *\n * The manifest contains definitions only — never raw parameter values,\n * secrets, or runtime data. Function fields are elided (`handler`,\n * policy `evaluate`, transition `guard` → `hasGuard`, dynamic `targetState`,\n * adapter `getInput`).\n */\nexport function exportModuleManifest(module: FabricModule<unknown>): ModuleManifest {\n\tconst manifest: ModuleManifest = {\n\t\tmanifestVersion: MODULE_MANIFEST_VERSION,\n\t\tnamespace: module.namespace,\n\t\tdependencies: (module.dependencies ?? []).map(exportDependency),\n\t\tobjectTypes: (module.objectTypes ?? []).map(exportObjectType),\n\t\tsubjectTypes: [...(module.subjectTypes ?? [])],\n\t\tidPrefixes: (module.idPrefixes ?? []).map((registration) => ({\n\t\t\tprefix: registration.prefix,\n\t\t\tname: registration.name,\n\t\t})),\n\t\teventTypes: (module.eventTypes ?? []).map(exportEventType),\n\t\tactions: (module.actions ?? []).map(exportAction),\n\t\tpolicies: (module.policies ?? [])\n\t\t\t.map(exportPolicy)\n\t\t\t.filter((policy): policy is ModuleManifestPolicy => policy !== undefined),\n\t\tstateMachines: (module.stateMachines ?? [])\n\t\t\t.map(exportStateMachine)\n\t\t\t.filter((machine): machine is ModuleManifestStateMachine => machine !== undefined),\n\t};\n\n\tif (module.version !== undefined) manifest.version = module.version;\n\tif (module.displayName !== undefined) manifest.displayName = module.displayName;\n\tif (module.description !== undefined) manifest.description = module.description;\n\n\treturn manifest;\n}\n\n/**\n * Export manifests for a set of modules, preserving the input order.\n * Like {@link exportModuleManifest}, this is pure and registry-free.\n */\nexport function exportModuleManifestBundle(\n\tmodules: FabricModule<unknown>[],\n): ModuleManifestBundle {\n\treturn {\n\t\tmanifestVersion: MODULE_MANIFEST_VERSION,\n\t\tmodules: modules.map(exportModuleManifest),\n\t};\n}\n"]}

package/dist/governance/index.cjs

@@ -1,12 +1,20 @@
 'use strict';
 
-var chunkC72F6IRQ_cjs = require('../chunk-C72F6IRQ.cjs');
+var chunkANPJYXBK_cjs = require('../chunk-ANPJYXBK.cjs');
 
 
 
+Object.defineProperty(exports, "FABRIC_GOVERNANCE_CONTRACT_VERSION", {
+  enumerable: true,
+  get: function () { return chunkANPJYXBK_cjs.FABRIC_GOVERNANCE_CONTRACT_VERSION; }
+});
+Object.defineProperty(exports, "assertGovernanceRuntimeEvidence", {
+  enumerable: true,
+  get: function () { return chunkANPJYXBK_cjs.assertGovernanceRuntimeEvidence; }
+});
 Object.defineProperty(exports, "assertMutationGovernanceContext", {
   enumerable: true,
-  get: function () { return chunkC72F6IRQ_cjs.assertMutationGovernanceContext; }
+  get: function () { return chunkANPJYXBK_cjs.assertMutationGovernanceContext; }
 });
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map