@fabricorg/platform 1.10.0 → 1.10.1

package/dist/certification/index.d.ts

@@ -1,43 +1,37 @@
-import { ActionCompletionMode } from '../actions/index.js';
-import { ModuleManifest } from '../manifest/index.js';
-import { FabricModule } from '../modules/index.js';
-import '../discovery/index.js';
-import '../objects/index.js';
-import '../policies/index.js';
-import '../state-machines/index.js';
-import '../projections/index.js';
-
-type ExecutionContractFindingCode = "missing_execution_contract" | "invalid_execution_dimension" | "missing_sensitivity" | "missing_completion_deadline" | "unexpected_completion_deadline";
-interface ExecutionContractFinding {
-    code: ExecutionContractFindingCode;
-    actionId: string;
-    message: string;
+import { ActionCompletionMode } from "../actions/index.js";
+import { FabricModule } from "../modules/index.js";
+import { ModuleManifest } from "../manifest/index.js";
+//#region certification/index.d.ts
+export type ExecutionContractFindingCode = "missing_execution_contract" | "invalid_execution_dimension" | "missing_sensitivity" | "missing_completion_deadline" | "unexpected_completion_deadline";
+export interface ExecutionContractFinding {
+  code: ExecutionContractFindingCode;
+  actionId: string;
+  message: string;
 }
-interface ExecutionContractProfileOptions {
-    /** Adapter and profile id. Defaults to the strict profile's id. */
-    id?: string;
-    /** Require `sensitivity`, which the base contract leaves optional. Defaults to true. */
-    requireSensitivity?: boolean;
-    /**
-     * Completion modes that must declare `completionDeadlineMs`. Defaults to
-     * both modes that hand work off, since without a deadline nothing sweeps a
-     * callback that never comes.
-     */
-    requireDeadlineFor?: readonly ActionCompletionMode[];
+export interface ExecutionContractProfileOptions {
+  /** Adapter and profile id. Defaults to the strict profile's id. */
+  id?: string;
+  /** Require `sensitivity`, which the base contract leaves optional. Defaults to true. */
+  requireSensitivity?: boolean;
+  /**
+   * Completion modes that must declare `completionDeadlineMs`. Defaults to
+   * both modes that hand work off, since without a deadline nothing sweeps a
+   * callback that never comes.
+   */
+  requireDeadlineFor?: readonly ActionCompletionMode[];
 }
-interface ExecutionContractProfile {
-    readonly id: string;
-    validate(manifest: ModuleManifest): ExecutionContractFinding[];
-    assert(subject: FabricModule<unknown> | ModuleManifest): void;
-    /** For certification tooling: the compiler's conformance adapter shape. */
-    readonly adapter: {
-        id: string;
-        evaluate(manifest: ModuleManifest): ExecutionContractFinding[];
-    };
+export interface ExecutionContractProfile {
+  readonly id: string;
+  validate(manifest: ModuleManifest): ExecutionContractFinding[];
+  assert(subject: FabricModule<unknown> | ModuleManifest): void;
+  /** For certification tooling: the compiler's conformance adapter shape. */
+  readonly adapter: {
+    id: string;
+    evaluate(manifest: ModuleManifest): ExecutionContractFinding[];
+  };
 }
-declare const STRICT_EXECUTION_CONTRACT_PROFILE_ID = "fabric.execution-contract.strict";
-declare function executionContractProfile(options?: ExecutionContractProfileOptions): ExecutionContractProfile;
+export declare const STRICT_EXECUTION_CONTRACT_PROFILE_ID = "fabric.execution-contract.strict";
+export declare function executionContractProfile(options?: ExecutionContractProfileOptions): ExecutionContractProfile;
 /** All six dimensions on every action, and a deadline wherever work is handed off. */
-declare const STRICT_EXECUTION_CONTRACT_PROFILE: ExecutionContractProfile;
-
-export { type ExecutionContractFinding, type ExecutionContractFindingCode, type ExecutionContractProfile, type ExecutionContractProfileOptions, STRICT_EXECUTION_CONTRACT_PROFILE, STRICT_EXECUTION_CONTRACT_PROFILE_ID, executionContractProfile };
+export declare const STRICT_EXECUTION_CONTRACT_PROFILE: ExecutionContractProfile;
+//#endregion

package/dist/certification/index.js

@@ -1,9 +1,108 @@
-export { STRICT_EXECUTION_CONTRACT_PROFILE, STRICT_EXECUTION_CONTRACT_PROFILE_ID, executionContractProfile } from '../chunk-EMSAFNPX.js';
-import '../chunk-PDN5DOLQ.js';
-import '../chunk-WNZP53GI.js';
-import '../chunk-ZAEVQSB5.js';
-import '../chunk-MLBALEUR.js';
-import '../chunk-LFE74IJX.js';
-import '../chunk-B5DOGDPG.js';
-//# sourceMappingURL=index.js.map
+import { exportModuleManifest } from "../manifest/index.js";
+//#region certification/index.ts
+const STRICT_EXECUTION_CONTRACT_PROFILE_ID = "fabric.execution-contract.strict";
+/** The permitted values of each required dimension, mirrored from the action types. */
+function permittedDimensions() {
+	return [
+		["connectivity", /* @__PURE__ */ new Set(["online-required", "offline-capturable"])],
+		["authorityMoment", /* @__PURE__ */ new Set([
+			"capture",
+			"execution",
+			"both"
+		])],
+		["idempotency", /* @__PURE__ */ new Set([
+			"required",
+			"supported",
+			"prohibited"
+		])],
+		["completion", /* @__PURE__ */ new Set([
+			"immediate",
+			"accepted",
+			"long-running"
+		])],
+		["consistency", /* @__PURE__ */ new Set(["authoritative-now", "provisional-until-reconciled"])]
+	];
+}
+const permittedSensitivities = () => /* @__PURE__ */ new Set([
+	"public",
+	"internal",
+	"confidential",
+	"restricted"
+]);
+function executionContractProfile(options = {}) {
+	const id = options.id ?? "fabric.execution-contract.strict";
+	const requireSensitivity = options.requireSensitivity ?? true;
+	const requireDeadlineFor = new Set(options.requireDeadlineFor ?? ["accepted", "long-running"]);
+	const dimensions = permittedDimensions();
+	const sensitivities = permittedSensitivities();
+	const validate = (manifest) => {
+		const findings = [];
+		for (const action of manifest.actions) {
+			const contract = action.execution;
+			if (!contract) {
+				findings.push({
+					code: "missing_execution_contract",
+					actionId: action.actionId,
+					message: `Action "${action.actionId}" declares no execution contract; connectivity, authorityMoment, idempotency, completion, and consistency are required.`
+				});
+				continue;
+			}
+			let complete = true;
+			for (const [dimension, permitted] of dimensions) {
+				const value = contract[dimension];
+				if (!permitted.has(value)) {
+					complete = false;
+					findings.push({
+						code: "invalid_execution_dimension",
+						actionId: action.actionId,
+						message: `Action "${action.actionId}" ${value === void 0 ? "declares no" : `declares an unknown`} ${dimension}${value === void 0 ? "" : ` "${String(value)}"`}; permitted values are ${[...permitted].map((item) => `"${String(item)}"`).join(", ")}.`
+					});
+				}
+			}
+			if (contract.sensitivity !== void 0 && !sensitivities.has(contract.sensitivity)) findings.push({
+				code: "invalid_execution_dimension",
+				actionId: action.actionId,
+				message: `Action "${action.actionId}" declares an unknown sensitivity "${String(contract.sensitivity)}"; permitted values are ${[...sensitivities].map((item) => `"${item}"`).join(", ")}.`
+			});
+			if (!complete) continue;
+			if (contract.completion === "immediate" && contract.completionDeadlineMs !== void 0) findings.push({
+				code: "unexpected_completion_deadline",
+				actionId: action.actionId,
+				message: `Action "${action.actionId}" declares immediate completion and a completionDeadlineMs; nothing external completes it.`
+			});
+			if (requireSensitivity && contract.sensitivity === void 0) findings.push({
+				code: "missing_sensitivity",
+				actionId: action.actionId,
+				message: `Action "${action.actionId}" declares no sensitivity; say whether its durable data is public, internal, confidential, or restricted.`
+			});
+			if (requireDeadlineFor.has(contract.completion) && !(typeof contract.completionDeadlineMs === "number" && contract.completionDeadlineMs > 0)) findings.push({
+				code: "missing_completion_deadline",
+				actionId: action.actionId,
+				message: `Action "${action.actionId}" declares ${contract.completion} completion and no completionDeadlineMs; a callback that never comes would never be noticed.`
+			});
+		}
+		return findings;
+	};
+	return {
+		id,
+		validate,
+		assert(subject) {
+			const manifest = isManifest(subject) ? subject : exportModuleManifest(subject);
+			const findings = validate(manifest);
+			if (findings.length > 0) throw new Error(`Execution-contract profile "${id}" failed for "${manifest.namespace}":\n${findings.map((finding) => `- ${finding.message}`).join("\n")}`);
+		},
+		adapter: {
+			id,
+			evaluate: validate
+		}
+	};
+}
+/** All six dimensions on every action, and a deadline wherever work is handed off. */
+const STRICT_EXECUTION_CONTRACT_PROFILE = executionContractProfile();
+function isManifest(subject) {
+	return typeof subject.manifestVersion === "number" && Array.isArray(subject.actions);
+}
+//#endregion
+export { STRICT_EXECUTION_CONTRACT_PROFILE, STRICT_EXECUTION_CONTRACT_PROFILE_ID, executionContractProfile };
+
 //# sourceMappingURL=index.js.map

package/dist/certification/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"index.js"}
+{"version":3,"file":"index.js","names":[],"sources":["../../certification/index.ts"],"sourcesContent":["import type { ActionCompletionMode } from \"../actions\";\nimport { exportModuleManifest, type ModuleManifest } from \"../manifest\";\nimport type { FabricModule } from \"../modules\";\n\n// ── Execution-contract certification ────────────────────────────────────────\n//\n// The base types keep the execution contract optional, because making it\n// mandatory is a break for every existing manifest. A deployment that wants\n// the guarantee applies a profile at certification instead: every governed\n// action declares all six dimensions, and any action that hands work to an\n// external system says how long it may wait. The profile is a seam a\n// vertical applies, not content the platform assumes.\n\nexport type ExecutionContractFindingCode =\n\t| \"missing_execution_contract\"\n\t| \"invalid_execution_dimension\"\n\t| \"missing_sensitivity\"\n\t| \"missing_completion_deadline\"\n\t| \"unexpected_completion_deadline\";\n\nexport interface ExecutionContractFinding {\n\tcode: ExecutionContractFindingCode;\n\tactionId: string;\n\tmessage: string;\n}\n\nexport interface ExecutionContractProfileOptions {\n\t/** Adapter and profile id. Defaults to the strict profile's id. */\n\tid?: string;\n\t/** Require `sensitivity`, which the base contract leaves optional. Defaults to true. */\n\trequireSensitivity?: boolean;\n\t/**\n\t * Completion modes that must declare `completionDeadlineMs`. Defaults to\n\t * both modes that hand work off, since without a deadline nothing sweeps a\n\t * callback that never comes.\n\t */\n\trequireDeadlineFor?: readonly ActionCompletionMode[];\n}\n\nexport interface ExecutionContractProfile {\n\treadonly id: string;\n\tvalidate(manifest: ModuleManifest): ExecutionContractFinding[];\n\tassert(subject: FabricModule<unknown> | ModuleManifest): void;\n\t/** For certification tooling: the compiler's conformance adapter shape. */\n\treadonly adapter: { id: string; evaluate(manifest: ModuleManifest): ExecutionContractFinding[] };\n}\n\nexport const STRICT_EXECUTION_CONTRACT_PROFILE_ID = \"fabric.execution-contract.strict\";\n\n/** The permitted values of each required dimension, mirrored from the action types. */\nfunction permittedDimensions(): ReadonlyArray<[string, ReadonlySet<unknown>]> {\n\treturn [\n\t\t[\"connectivity\", new Set([\"online-required\", \"offline-capturable\"])],\n\t\t[\"authorityMoment\", new Set([\"capture\", \"execution\", \"both\"])],\n\t\t[\"idempotency\", new Set([\"required\", \"supported\", \"prohibited\"])],\n\t\t[\"completion\", new Set([\"immediate\", \"accepted\", \"long-running\"])],\n\t\t[\"consistency\", new Set([\"authoritative-now\", \"provisional-until-reconciled\"])],\n\t];\n}\nconst permittedSensitivities = (): ReadonlySet<string> => new Set([\"public\", \"internal\", \"confidential\", \"restricted\"]);\n\nexport function executionContractProfile(options: ExecutionContractProfileOptions = {}): ExecutionContractProfile {\n\tconst id = options.id ?? STRICT_EXECUTION_CONTRACT_PROFILE_ID;\n\tconst requireSensitivity = options.requireSensitivity ?? true;\n\tconst requireDeadlineFor = new Set<ActionCompletionMode>(options.requireDeadlineFor ?? [\"accepted\", \"long-running\"]);\n\tconst dimensions = permittedDimensions();\n\tconst sensitivities = permittedSensitivities();\n\tconst validate = (manifest: ModuleManifest): ExecutionContractFinding[] => {\n\t\tconst findings: ExecutionContractFinding[] = [];\n\t\tfor (const action of manifest.actions) {\n\t\t\tconst contract = action.execution;\n\t\t\tif (!contract) {\n\t\t\t\tfindings.push({\n\t\t\t\t\tcode: \"missing_execution_contract\",\n\t\t\t\t\tactionId: action.actionId,\n\t\t\t\t\tmessage: `Action \"${action.actionId}\" declares no execution contract; connectivity, authorityMoment, idempotency, completion, and consistency are required.`,\n\t\t\t\t});\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\t// The contract's presence proves nothing about its content: a manifest\n\t\t\t// reaches certification without passing through the registry, so each\n\t\t\t// dimension is checked against its permitted values here.\n\t\t\tlet complete = true;\n\t\t\tfor (const [dimension, permitted] of dimensions) {\n\t\t\t\tconst value = (contract as unknown as Record<string, unknown>)[dimension];\n\t\t\t\tif (!permitted.has(value)) {\n\t\t\t\t\tcomplete = false;\n\t\t\t\t\tfindings.push({\n\t\t\t\t\t\tcode: \"invalid_execution_dimension\",\n\t\t\t\t\t\tactionId: action.actionId,\n\t\t\t\t\t\tmessage: `Action \"${action.actionId}\" ${value === undefined ? \"declares no\" : `declares an unknown`} ${dimension}${value === undefined ? \"\" : ` \"${String(value)}\"`}; permitted values are ${[...permitted].map((item) => `\"${String(item)}\"`).join(\", \")}.`,\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (contract.sensitivity !== undefined && !sensitivities.has(contract.sensitivity)) {\n\t\t\t\tfindings.push({\n\t\t\t\t\tcode: \"invalid_execution_dimension\",\n\t\t\t\t\tactionId: action.actionId,\n\t\t\t\t\tmessage: `Action \"${action.actionId}\" declares an unknown sensitivity \"${String(contract.sensitivity)}\"; permitted values are ${[...sensitivities].map((item) => `\"${item}\"`).join(\", \")}.`,\n\t\t\t\t});\n\t\t\t}\n\t\t\tif (!complete) continue;\n\t\t\tif (contract.completion === \"immediate\" && contract.completionDeadlineMs !== undefined) {\n\t\t\t\tfindings.push({\n\t\t\t\t\tcode: \"unexpected_completion_deadline\",\n\t\t\t\t\tactionId: action.actionId,\n\t\t\t\t\tmessage: `Action \"${action.actionId}\" declares immediate completion and a completionDeadlineMs; nothing external completes it.`,\n\t\t\t\t});\n\t\t\t}\n\t\t\tif (requireSensitivity && contract.sensitivity === undefined) {\n\t\t\t\tfindings.push({\n\t\t\t\t\tcode: \"missing_sensitivity\",\n\t\t\t\t\tactionId: action.actionId,\n\t\t\t\t\tmessage: `Action \"${action.actionId}\" declares no sensitivity; say whether its durable data is public, internal, confidential, or restricted.`,\n\t\t\t\t});\n\t\t\t}\n\t\t\tif (requireDeadlineFor.has(contract.completion) && !(typeof contract.completionDeadlineMs === \"number\" && contract.completionDeadlineMs > 0)) {\n\t\t\t\tfindings.push({\n\t\t\t\t\tcode: \"missing_completion_deadline\",\n\t\t\t\t\tactionId: action.actionId,\n\t\t\t\t\tmessage: `Action \"${action.actionId}\" declares ${contract.completion} completion and no completionDeadlineMs; a callback that never comes would never be noticed.`,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t\treturn findings;\n\t};\n\treturn {\n\t\tid,\n\t\tvalidate,\n\t\tassert(subject) {\n\t\t\tconst manifest = isManifest(subject) ? subject : exportModuleManifest(subject);\n\t\t\tconst findings = validate(manifest);\n\t\t\tif (findings.length > 0) {\n\t\t\t\tthrow new Error(`Execution-contract profile \"${id}\" failed for \"${manifest.namespace}\":\\n${findings.map((finding) => `- ${finding.message}`).join(\"\\n\")}`);\n\t\t\t}\n\t\t},\n\t\tadapter: { id, evaluate: validate },\n\t};\n}\n\n/** All six dimensions on every action, and a deadline wherever work is handed off. */\nexport const STRICT_EXECUTION_CONTRACT_PROFILE: ExecutionContractProfile = executionContractProfile();\n\nfunction isManifest(subject: FabricModule<unknown> | ModuleManifest): subject is ModuleManifest {\n\treturn typeof (subject as ModuleManifest).manifestVersion === \"number\" && Array.isArray((subject as ModuleManifest).actions);\n}\n"],"mappings":";;AA+CA,MAAa,uCAAuC;;AAGpD,SAAS,sBAAqE;CAC7E,OAAO;EACN,CAAC,gCAAgB,IAAI,IAAI,CAAC,mBAAmB,oBAAoB,CAAC,CAAC;EACnE,CAAC,mCAAmB,IAAI,IAAI;GAAC;GAAW;GAAa;EAAM,CAAC,CAAC;EAC7D,CAAC,+BAAe,IAAI,IAAI;GAAC;GAAY;GAAa;EAAY,CAAC,CAAC;EAChE,CAAC,8BAAc,IAAI,IAAI;GAAC;GAAa;GAAY;EAAc,CAAC,CAAC;EACjE,CAAC,+BAAe,IAAI,IAAI,CAAC,qBAAqB,8BAA8B,CAAC,CAAC;CAC/E;AACD;AACA,MAAM,+CAAoD,IAAI,IAAI;CAAC;CAAU;CAAY;CAAgB;AAAY,CAAC;AAEtH,SAAgB,yBAAyB,UAA2C,CAAC,GAA6B;CACjH,MAAM,KAAK,QAAQ,MAAA;CACnB,MAAM,qBAAqB,QAAQ,sBAAsB;CACzD,MAAM,qBAAqB,IAAI,IAA0B,QAAQ,sBAAsB,CAAC,YAAY,cAAc,CAAC;CACnH,MAAM,aAAa,oBAAoB;CACvC,MAAM,gBAAgB,uBAAuB;CAC7C,MAAM,YAAY,aAAyD;EAC1E,MAAM,WAAuC,CAAC;EAC9C,KAAK,MAAM,UAAU,SAAS,SAAS;GACtC,MAAM,WAAW,OAAO;GACxB,IAAI,CAAC,UAAU;IACd,SAAS,KAAK;KACb,MAAM;KACN,UAAU,OAAO;KACjB,SAAS,WAAW,OAAO,SAAS;IACrC,CAAC;IACD;GACD;GAIA,IAAI,WAAW;GACf,KAAK,MAAM,CAAC,WAAW,cAAc,YAAY;IAChD,MAAM,QAAS,SAAgD;IAC/D,IAAI,CAAC,UAAU,IAAI,KAAK,GAAG;KAC1B,WAAW;KACX,SAAS,KAAK;MACb,MAAM;MACN,UAAU,OAAO;MACjB,SAAS,WAAW,OAAO,SAAS,IAAI,UAAU,KAAA,IAAY,gBAAgB,sBAAsB,GAAG,YAAY,UAAU,KAAA,IAAY,KAAK,KAAK,OAAO,KAAK,EAAE,GAAG,yBAAyB,CAAC,GAAG,SAAS,CAAC,CAAC,KAAK,SAAS,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;KAC3P,CAAC;IACF;GACD;GACA,IAAI,SAAS,gBAAgB,KAAA,KAAa,CAAC,cAAc,IAAI,SAAS,WAAW,GAChF,SAAS,KAAK;IACb,MAAM;IACN,UAAU,OAAO;IACjB,SAAS,WAAW,OAAO,SAAS,qCAAqC,OAAO,SAAS,WAAW,EAAE,0BAA0B,CAAC,GAAG,aAAa,CAAC,CAAC,KAAK,SAAS,IAAI,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;GAC1L,CAAC;GAEF,IAAI,CAAC,UAAU;GACf,IAAI,SAAS,eAAe,eAAe,SAAS,yBAAyB,KAAA,GAC5E,SAAS,KAAK;IACb,MAAM;IACN,UAAU,OAAO;IACjB,SAAS,WAAW,OAAO,SAAS;GACrC,CAAC;GAEF,IAAI,sBAAsB,SAAS,gBAAgB,KAAA,GAClD,SAAS,KAAK;IACb,MAAM;IACN,UAAU,OAAO;IACjB,SAAS,WAAW,OAAO,SAAS;GACrC,CAAC;GAEF,IAAI,mBAAmB,IAAI,SAAS,UAAU,KAAK,EAAE,OAAO,SAAS,yBAAyB,YAAY,SAAS,uBAAuB,IACzI,SAAS,KAAK;IACb,MAAM;IACN,UAAU,OAAO;IACjB,SAAS,WAAW,OAAO,SAAS,aAAa,SAAS,WAAW;GACtE,CAAC;EAEH;EACA,OAAO;CACR;CACA,OAAO;EACN;EACA;EACA,OAAO,SAAS;GACf,MAAM,WAAW,WAAW,OAAO,IAAI,UAAU,qBAAqB,OAAO;GAC7E,MAAM,WAAW,SAAS,QAAQ;GAClC,IAAI,SAAS,SAAS,GACrB,MAAM,IAAI,MAAM,+BAA+B,GAAG,gBAAgB,SAAS,UAAU,MAAM,SAAS,KAAK,YAAY,KAAK,QAAQ,SAAS,CAAC,CAAC,KAAK,IAAI,GAAG;EAE3J;EACA,SAAS;GAAE;GAAI,UAAU;EAAS;CACnC;AACD;;AAGA,MAAa,oCAA8D,yBAAyB;AAEpG,SAAS,WAAW,SAA4E;CAC/F,OAAO,OAAQ,QAA2B,oBAAoB,YAAY,MAAM,QAAS,QAA2B,OAAO;AAC5H"}

package/dist/discovery/index.cjs

@@ -1,12 +1,14 @@
-'use strict';
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region discovery/index.ts
+function assertSurfaceDeclaration(value, label = "Contract") {
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${label}: discovery surface declaration must be an object`);
+	const { surface, surfaceReason } = value;
+	if (surface !== void 0 && surface !== "public" && surface !== "internal") throw new Error(`${label}: Unknown discovery surface`);
+	if (surface === "internal") {
+		if (typeof surfaceReason !== "string" || !surfaceReason.trim()) throw new Error(`${label}: Internal discovery surface requires a reason`);
+	} else if (surfaceReason !== void 0) throw new Error(`${label}: Discovery surface reason requires an internal surface`);
+}
+//#endregion
+exports.assertSurfaceDeclaration = assertSurfaceDeclaration;
 
-var chunkD4SWRBUH_cjs = require('../chunk-D4SWRBUH.cjs');
-
-
-
-Object.defineProperty(exports, "assertSurfaceDeclaration", {
-  enumerable: true,
-  get: function () { return chunkD4SWRBUH_cjs.assertSurfaceDeclaration; }
-});
-//# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/discovery/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"index.cjs"}
+{"version":3,"file":"index.cjs","names":[],"sources":["../../discovery/index.ts"],"sourcesContent":["/** Portable discovery metadata. It never grants or denies runtime invocation authority. */\nexport interface SurfaceDeclaration {\n\t/** Omitted is public discovery; internal contracts are withheld from external catalogs. */\n\tsurface?: \"public\" | \"internal\";\n\t/** Required, non-blank explanation when surface is internal; never include sensitive data. */\n\tsurfaceReason?: string;\n}\n\nexport function assertSurfaceDeclaration(value: unknown, label = \"Contract\"): asserts value is SurfaceDeclaration {\n\tif (!value || typeof value !== \"object\" || Array.isArray(value))\n\t\tthrow new Error(`${label}: discovery surface declaration must be an object`);\n\tconst { surface, surfaceReason } = value as SurfaceDeclaration;\n\tif (surface !== undefined && surface !== \"public\" && surface !== \"internal\") {\n\t\tthrow new Error(`${label}: Unknown discovery surface`);\n\t}\n\tif (surface === \"internal\") {\n\t\tif (typeof surfaceReason !== \"string\" || !surfaceReason.trim()) {\n\t\t\tthrow new Error(`${label}: Internal discovery surface requires a reason`);\n\t\t}\n\t} else if (surfaceReason !== undefined) {\n\t\tthrow new Error(`${label}: Discovery surface reason requires an internal surface`);\n\t}\n}\n"],"mappings":";;AAQA,SAAgB,yBAAyB,OAAgB,QAAQ,YAAiD;CACjH,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAC7D,MAAM,IAAI,MAAM,GAAG,MAAM,kDAAkD;CAC5E,MAAM,EAAE,SAAS,kBAAkB;CACnC,IAAI,YAAY,KAAA,KAAa,YAAY,YAAY,YAAY,YAChE,MAAM,IAAI,MAAM,GAAG,MAAM,4BAA4B;CAEtD,IAAI,YAAY,YACX;MAAA,OAAO,kBAAkB,YAAY,CAAC,cAAc,KAAK,GAC5D,MAAM,IAAI,MAAM,GAAG,MAAM,+CAA+C;CAAA,OAEnE,IAAI,kBAAkB,KAAA,GAC5B,MAAM,IAAI,MAAM,GAAG,MAAM,wDAAwD;AAEnF"}

package/dist/discovery/index.d.cts

@@ -1,10 +1,2 @@
-/** Portable discovery metadata. It never grants or denies runtime invocation authority. */
-interface SurfaceDeclaration {
-    /** Omitted is public discovery; internal contracts are withheld from external catalogs. */
-    surface?: "public" | "internal";
-    /** Required, non-blank explanation when surface is internal; never include sensitive data. */
-    surfaceReason?: string;
-}
-declare function assertSurfaceDeclaration(value: unknown, label?: string): asserts value is SurfaceDeclaration;
-
-export { type SurfaceDeclaration, assertSurfaceDeclaration };
+import { n as assertSurfaceDeclaration, t as SurfaceDeclaration } from "../index-CIl1rYRv.cjs";
+export { SurfaceDeclaration, assertSurfaceDeclaration };

package/dist/discovery/index.d.ts

@@ -1,10 +1,2 @@
-/** Portable discovery metadata. It never grants or denies runtime invocation authority. */
-interface SurfaceDeclaration {
-    /** Omitted is public discovery; internal contracts are withheld from external catalogs. */
-    surface?: "public" | "internal";
-    /** Required, non-blank explanation when surface is internal; never include sensitive data. */
-    surfaceReason?: string;
-}
-declare function assertSurfaceDeclaration(value: unknown, label?: string): asserts value is SurfaceDeclaration;
-
-export { type SurfaceDeclaration, assertSurfaceDeclaration };
+import { n as assertSurfaceDeclaration, t as SurfaceDeclaration } from "../index-CIl1rYRv.js";
+export { SurfaceDeclaration, assertSurfaceDeclaration };

package/dist/discovery/index.js

@@ -1,3 +1,13 @@
-export { assertSurfaceDeclaration } from '../chunk-LFE74IJX.js';
-//# sourceMappingURL=index.js.map
+//#region discovery/index.ts
+function assertSurfaceDeclaration(value, label = "Contract") {
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${label}: discovery surface declaration must be an object`);
+	const { surface, surfaceReason } = value;
+	if (surface !== void 0 && surface !== "public" && surface !== "internal") throw new Error(`${label}: Unknown discovery surface`);
+	if (surface === "internal") {
+		if (typeof surfaceReason !== "string" || !surfaceReason.trim()) throw new Error(`${label}: Internal discovery surface requires a reason`);
+	} else if (surfaceReason !== void 0) throw new Error(`${label}: Discovery surface reason requires an internal surface`);
+}
+//#endregion
+export { assertSurfaceDeclaration };
+
 //# sourceMappingURL=index.js.map

package/dist/discovery/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"index.js"}
+{"version":3,"file":"index.js","names":[],"sources":["../../discovery/index.ts"],"sourcesContent":["/** Portable discovery metadata. It never grants or denies runtime invocation authority. */\nexport interface SurfaceDeclaration {\n\t/** Omitted is public discovery; internal contracts are withheld from external catalogs. */\n\tsurface?: \"public\" | \"internal\";\n\t/** Required, non-blank explanation when surface is internal; never include sensitive data. */\n\tsurfaceReason?: string;\n}\n\nexport function assertSurfaceDeclaration(value: unknown, label = \"Contract\"): asserts value is SurfaceDeclaration {\n\tif (!value || typeof value !== \"object\" || Array.isArray(value))\n\t\tthrow new Error(`${label}: discovery surface declaration must be an object`);\n\tconst { surface, surfaceReason } = value as SurfaceDeclaration;\n\tif (surface !== undefined && surface !== \"public\" && surface !== \"internal\") {\n\t\tthrow new Error(`${label}: Unknown discovery surface`);\n\t}\n\tif (surface === \"internal\") {\n\t\tif (typeof surfaceReason !== \"string\" || !surfaceReason.trim()) {\n\t\t\tthrow new Error(`${label}: Internal discovery surface requires a reason`);\n\t\t}\n\t} else if (surfaceReason !== undefined) {\n\t\tthrow new Error(`${label}: Discovery surface reason requires an internal surface`);\n\t}\n}\n"],"mappings":";AAQA,SAAgB,yBAAyB,OAAgB,QAAQ,YAAiD;CACjH,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAC7D,MAAM,IAAI,MAAM,GAAG,MAAM,kDAAkD;CAC5E,MAAM,EAAE,SAAS,kBAAkB;CACnC,IAAI,YAAY,KAAA,KAAa,YAAY,YAAY,YAAY,YAChE,MAAM,IAAI,MAAM,GAAG,MAAM,4BAA4B;CAEtD,IAAI,YAAY,YACX;MAAA,OAAO,kBAAkB,YAAY,CAAC,cAAc,KAAK,GAC5D,MAAM,IAAI,MAAM,GAAG,MAAM,+CAA+C;CAAA,OAEnE,IAAI,kBAAkB,KAAA,GAC5B,MAAM,IAAI,MAAM,GAAG,MAAM,wDAAwD;AAEnF"}

package/dist/engine-B4csEOEc.js

@@ -0,0 +1,223 @@
+import { createHash } from "crypto";
+//#region privacy/engine.ts
+const ANONYMIZATION_POLICY_VERSION = "adr-026-platform-anonymization-v1";
+function normalizeKey(key) {
+	return key.replace(/[^a-zA-Z0-9]/g, "").toLowerCase();
+}
+function stableChecksum(value) {
+	return createHash("sha256").update(JSON.stringify(value)).digest("hex");
+}
+function stableScopedToken(value, context, fieldPath) {
+	const scope = `${context.tenantId}:${context.spaceId ?? "global"}:${fieldPath}`;
+	return `tok_${createHash("sha256").update(`${context.policyVersion ?? "adr-026-platform-anonymization-v1"}:${scope}:${String(value)}`).digest("hex").slice(0, 24)}`;
+}
+function maskValue(value) {
+	if (value === null || value === void 0) return null;
+	const stringValue = String(value);
+	if (stringValue.length <= 4) return "****";
+	return `${"*".repeat(Math.max(stringValue.length - 4, 4))}${stringValue.slice(-4)}`;
+}
+function generalizeValue(value) {
+	if (typeof value === "number") return Math.round(value / 1e3) * 1e3;
+	if (typeof value === "string" && /^\d{5}(?:-\d{4})?$/.test(value)) return `${value.slice(0, 3)}**`;
+	return null;
+}
+function applyMethod(value, method, context, path) {
+	switch (method) {
+		case "drop": return;
+		case "nullify": return null;
+		case "mask": return maskValue(value);
+		case "hash": return `sha256_${stableChecksum(value)}`;
+		case "tokenize": return stableScopedToken(value, context, path);
+		case "generalize": return generalizeValue(value);
+	}
+}
+function policyForPath(policies, path, key) {
+	const normalizedPath = normalizeKey(path);
+	const normalizedKey = key ? normalizeKey(key) : void 0;
+	return policies.find((policy) => {
+		const normalizedValue = normalizeKey(policy.value);
+		if (policy.match === "key") return normalizedValue === normalizedKey;
+		return normalizedValue === normalizedPath;
+	});
+}
+function isPlainObject(value) {
+	return Boolean(value) && typeof value === "object" && !Array.isArray(value) && !(value instanceof Date);
+}
+function anonymizeRecursive(value, context, dataClass, path, redactedFields, policies, key) {
+	const fieldPolicy = policyForPath(policies, path, key);
+	if (fieldPolicy && value !== null && value !== void 0) {
+		redactedFields.push({
+			fieldPath: path,
+			method: fieldPolicy.method,
+			policyVersion: context.policyVersion ?? "adr-026-platform-anonymization-v1",
+			jobId: context.jobId,
+			redactedAt: (context.redactedAt ?? /* @__PURE__ */ new Date()).toISOString(),
+			reason: context.reason,
+			dataClass,
+			beforeChecksum: stableChecksum(value)
+		});
+		return applyMethod(value, fieldPolicy.method, context, path);
+	}
+	if (Array.isArray(value)) return value.map((item, index) => anonymizeRecursive(item, context, dataClass, `${path}[${index}]`, redactedFields, policies));
+	if (!isPlainObject(value)) return value;
+	const result = {};
+	for (const [childKey, childValue] of Object.entries(value)) {
+		if (childKey === "_privacy") {
+			result[childKey] = childValue;
+			continue;
+		}
+		const anonymized = anonymizeRecursive(childValue, context, dataClass, `${path}.${childKey}`, redactedFields, policies, childKey);
+		if (anonymized !== void 0) result[childKey] = anonymized;
+	}
+	return result;
+}
+function buildMetadata(context, dataClass, redactedFields, preservedSemantics) {
+	return {
+		redactionState: "anonymized",
+		policyVersion: context.policyVersion ?? "adr-026-platform-anonymization-v1",
+		jobId: context.jobId,
+		redactedAt: (context.redactedAt ?? /* @__PURE__ */ new Date()).toISOString(),
+		reason: context.reason,
+		dataClass,
+		redactedFields,
+		preservedSemantics: [...preservedSemantics]
+	};
+}
+var FieldRedactor = class {
+	redactField(value, method, context, path) {
+		return applyMethod(value, method, context, path);
+	}
+	mask(value) {
+		return maskValue(value);
+	}
+	hash(value) {
+		return `sha256_${stableChecksum(value)}`;
+	}
+	tokenize(value, context, path) {
+		return stableScopedToken(value, context, path);
+	}
+	generalize(value) {
+		return generalizeValue(value);
+	}
+};
+var AnonymizationEngine = class {
+	#policy;
+	constructor(policy) {
+		this.#policy = {
+			fields: policy.fields.map((field) => ({ ...field })),
+			preservedSemantics: [...policy.preservedSemantics ?? []]
+		};
+	}
+	anonymizeJsonValue(value, context, dataClass) {
+		return this.anonymizeJsonValueAtPath(value, context, dataClass, "$");
+	}
+	anonymizeJsonValueAtPath(value, context, dataClass, basePath) {
+		const redactedFields = [];
+		return {
+			value: anonymizeRecursive(value, context, dataClass, basePath, redactedFields, this.#policy.fields),
+			metadata: buildMetadata(context, dataClass, redactedFields, this.#policy.preservedSemantics ?? [])
+		};
+	}
+	anonymizeAssetEventPayload(event, context) {
+		const result = this.anonymizeJsonValue(event.payload, context, "asset_event");
+		return {
+			value: isPlainObject(result.value) ? {
+				...result.value,
+				_privacy: result.metadata
+			} : {
+				value: result.value,
+				_privacy: result.metadata
+			},
+			metadata: result.metadata
+		};
+	}
+	anonymizeEvidencePacket(packet, context) {
+		const result = this.anonymizeJsonValue(packet.packet, context, "evidence_packet");
+		const redactionMetadata = {
+			...isPlainObject(packet.redactionMetadata) ? packet.redactionMetadata : {},
+			lifecycleAnonymization: result.metadata
+		};
+		const anonymizedPacket = isPlainObject(result.value) ? {
+			...result.value,
+			_privacy: result.metadata
+		} : {
+			value: result.value,
+			_privacy: result.metadata
+		};
+		return {
+			value: {
+				packet: anonymizedPacket,
+				redactionMetadata,
+				checksum: stableChecksum({
+					packet: anonymizedPacket,
+					redactionMetadata
+				})
+			},
+			metadata: result.metadata
+		};
+	}
+	buildAnonymizationLifecycleEvidence(input) {
+		const assetEvents = input.assetEvents ?? [];
+		const readModels = input.readModels ?? [];
+		const evidencePackets = input.evidencePackets ?? [];
+		const redactedFields = [
+			...assetEvents.flatMap((item) => item.metadata.redactedFields),
+			...readModels.flatMap((item) => item.metadata.redactedFields),
+			...evidencePackets.flatMap((item) => item.metadata.redactedFields)
+		];
+		return {
+			eventType: "AnonymizationApplied",
+			policyVersion: input.context.policyVersion ?? "adr-026-platform-anonymization-v1",
+			jobId: input.context.jobId,
+			reason: input.context.reason,
+			appliedAt: (input.context.redactedAt ?? /* @__PURE__ */ new Date()).toISOString(),
+			tenantId: input.context.tenantId,
+			spaceId: input.context.spaceId ?? null,
+			counts: {
+				assetEvents: assetEvents.length,
+				readModels: readModels.length,
+				evidencePackets: evidencePackets.length,
+				redactedFields: redactedFields.length
+			},
+			records: [
+				...assetEvents.map((item) => ({
+					recordClass: "asset_event",
+					recordId: item.event.id,
+					subjectType: item.event.subjectType,
+					subjectId: item.event.subjectId,
+					fieldManifest: item.metadata.redactedFields.map(({ fieldPath, method, beforeChecksum }) => ({
+						fieldPath,
+						method,
+						beforeChecksum
+					}))
+				})),
+				...readModels.map((item) => ({
+					recordClass: "read_model",
+					recordId: item.record.id,
+					subjectType: item.modelKind,
+					subjectId: item.record.id,
+					fieldManifest: item.metadata.redactedFields.map(({ fieldPath, method, beforeChecksum }) => ({
+						fieldPath,
+						method,
+						beforeChecksum
+					}))
+				})),
+				...evidencePackets.map((item) => ({
+					recordClass: "evidence_packet",
+					recordId: item.packet.id,
+					fieldManifest: item.metadata.redactedFields.map(({ fieldPath, method, beforeChecksum }) => ({
+						fieldPath,
+						method,
+						beforeChecksum
+					}))
+				}))
+			],
+			preservedSemantics: [...this.#policy.preservedSemantics ?? []]
+		};
+	}
+};
+//#endregion
+export { stableChecksum as i, AnonymizationEngine as n, FieldRedactor as r, ANONYMIZATION_POLICY_VERSION as t };
+
+//# sourceMappingURL=engine-B4csEOEc.js.map

package/dist/engine-B4csEOEc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-B4csEOEc.js","names":[],"sources":["../privacy/engine.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\n\nimport type {\n\tAnonymizationContext,\n\tAnonymizationFieldMetadata,\n\tAnonymizationMetadata,\n\tAnonymizationResult,\n\tPlatformDataClass,\n\tRedactionMethod,\n} from \"./index\";\n\nexport const ANONYMIZATION_POLICY_VERSION = \"adr-026-platform-anonymization-v1\";\n\ntype JsonObject = Record<string, unknown>;\n\nexport interface AnonymizationFieldPolicy {\n\tmethod: RedactionMethod;\n\tmatch: \"key\" | \"path\";\n\tvalue: string;\n}\n\nexport interface AnonymizationPolicy {\n\tfields: readonly AnonymizationFieldPolicy[];\n\tpreservedSemantics?: readonly string[];\n}\n\nexport interface AssetEventLike {\n\tid: string;\n\ttenantId: string;\n\tspaceId: string;\n\teventType: string;\n\tsubjectType: string;\n\tsubjectId: string;\n\tactionInvocationId: string;\n\tpayload: unknown;\n\tsequence: number;\n\toccurredAt: Date;\n\trecordedAt: Date;\n\tcorrelationId: string;\n\tcausationId?: string | null;\n}\n\nexport interface EvidencePacketLike {\n\tid: string;\n\tpacket: unknown;\n\tredactionMetadata: unknown;\n\tchecksum: string;\n}\n\nexport interface AnonymizationLifecycleEvidence {\n\teventType: \"AnonymizationApplied\";\n\tpolicyVersion: string;\n\tjobId: string;\n\treason: string;\n\tappliedAt: string;\n\ttenantId: string;\n\tspaceId: string | null;\n\tcounts: {\n\t\tassetEvents: number;\n\t\treadModels: number;\n\t\tevidencePackets: number;\n\t\tredactedFields: number;\n\t};\n\trecords: Array<{\n\t\trecordClass: PlatformDataClass;\n\t\trecordId: string;\n\t\tsubjectType?: string;\n\t\tsubjectId?: string;\n\t\tfieldManifest: Array<\n\t\t\tPick<AnonymizationFieldMetadata, \"fieldPath\" | \"method\" | \"beforeChecksum\">\n\t\t>;\n\t}>;\n\tpreservedSemantics: string[];\n}\n\nfunction normalizeKey(key: string): string {\n\treturn key.replace(/[^a-zA-Z0-9]/g, \"\").toLowerCase();\n}\n\nexport function stableChecksum(value: unknown): string {\n\treturn createHash(\"sha256\").update(JSON.stringify(value)).digest(\"hex\");\n}\n\nfunction stableScopedToken(\n\tvalue: unknown,\n\tcontext: AnonymizationContext,\n\tfieldPath: string,\n): string {\n\tconst scope = `${context.tenantId}:${context.spaceId ?? \"global\"}:${fieldPath}`;\n\treturn `tok_${createHash(\"sha256\")\n\t\t.update(`${context.policyVersion ?? ANONYMIZATION_POLICY_VERSION}:${scope}:${String(value)}`)\n\t\t.digest(\"hex\")\n\t\t.slice(0, 24)}`;\n}\n\nfunction maskValue(value: unknown): string | null {\n\tif (value === null || value === undefined) {\n\t\treturn null;\n\t}\n\n\tconst stringValue = String(value);\n\tif (stringValue.length <= 4) {\n\t\treturn \"****\";\n\t}\n\n\treturn `${\"*\".repeat(Math.max(stringValue.length - 4, 4))}${stringValue.slice(-4)}`;\n}\n\nfunction generalizeValue(value: unknown): unknown {\n\tif (typeof value === \"number\") {\n\t\treturn Math.round(value / 1000) * 1000;\n\t}\n\n\tif (typeof value === \"string\" && /^\\d{5}(?:-\\d{4})?$/.test(value)) {\n\t\treturn `${value.slice(0, 3)}**`;\n\t}\n\n\treturn null;\n}\n\nfunction applyMethod(\n\tvalue: unknown,\n\tmethod: RedactionMethod,\n\tcontext: AnonymizationContext,\n\tpath: string,\n): unknown {\n\tswitch (method) {\n\t\tcase \"drop\":\n\t\t\treturn undefined;\n\t\tcase \"nullify\":\n\t\t\treturn null;\n\t\tcase \"mask\":\n\t\t\treturn maskValue(value);\n\t\tcase \"hash\":\n\t\t\treturn `sha256_${stableChecksum(value)}`;\n\t\tcase \"tokenize\":\n\t\t\treturn stableScopedToken(value, context, path);\n\t\tcase \"generalize\":\n\t\t\treturn generalizeValue(value);\n\t}\n}\n\nfunction policyForPath(policies: readonly AnonymizationFieldPolicy[], path: string, key?: string): AnonymizationFieldPolicy | undefined {\n\tconst normalizedPath = normalizeKey(path);\n\tconst normalizedKey = key ? normalizeKey(key) : undefined;\n\n\treturn policies.find((policy) => {\n\t\tconst normalizedValue = normalizeKey(policy.value);\n\t\tif (policy.match === \"key\") {\n\t\t\treturn normalizedValue === normalizedKey;\n\t\t}\n\n\t\treturn normalizedValue === normalizedPath;\n\t});\n}\n\nfunction isPlainObject(value: unknown): value is JsonObject {\n\treturn (\n\t\tBoolean(value) && typeof value === \"object\" && !Array.isArray(value) && !(value instanceof Date)\n\t);\n}\n\nfunction anonymizeRecursive(\n\tvalue: unknown,\n\tcontext: AnonymizationContext,\n\tdataClass: PlatformDataClass,\n\tpath: string,\n\tredactedFields: AnonymizationFieldMetadata[],\n\tpolicies: readonly AnonymizationFieldPolicy[],\n\tkey?: string,\n): unknown {\n\tconst fieldPolicy = policyForPath(policies, path, key);\n\tif (fieldPolicy && value !== null && value !== undefined) {\n\t\tredactedFields.push({\n\t\t\tfieldPath: path,\n\t\t\tmethod: fieldPolicy.method,\n\t\t\tpolicyVersion: context.policyVersion ?? ANONYMIZATION_POLICY_VERSION,\n\t\t\tjobId: context.jobId,\n\t\t\tredactedAt: (context.redactedAt ?? new Date()).toISOString(),\n\t\t\treason: context.reason,\n\t\t\tdataClass,\n\t\t\tbeforeChecksum: stableChecksum(value),\n\t\t});\n\n\t\treturn applyMethod(value, fieldPolicy.method, context, path);\n\t}\n\n\tif (Array.isArray(value)) {\n\t\treturn value.map((item, index) =>\n\t\t\tanonymizeRecursive(item, context, dataClass, `${path}[${index}]`, redactedFields, policies),\n\t\t);\n\t}\n\n\tif (!isPlainObject(value)) {\n\t\treturn value;\n\t}\n\n\tconst result: JsonObject = {};\n\tfor (const [childKey, childValue] of Object.entries(value)) {\n\t\tif (childKey === \"_privacy\") {\n\t\t\tresult[childKey] = childValue;\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst anonymized = anonymizeRecursive(\n\t\t\tchildValue,\n\t\t\tcontext,\n\t\t\tdataClass,\n\t\t\t`${path}.${childKey}`,\n\t\t\tredactedFields,\n\t\t\tpolicies,\n\t\t\tchildKey,\n\t\t);\n\n\t\tif (anonymized !== undefined) {\n\t\t\tresult[childKey] = anonymized;\n\t\t}\n\t}\n\n\treturn result;\n}\n\nfunction buildMetadata(\n\tcontext: AnonymizationContext,\n\tdataClass: PlatformDataClass,\n\tredactedFields: AnonymizationFieldMetadata[],\n\tpreservedSemantics: readonly string[],\n): AnonymizationMetadata {\n\treturn {\n\t\tredactionState: \"anonymized\",\n\t\tpolicyVersion: context.policyVersion ?? ANONYMIZATION_POLICY_VERSION,\n\t\tjobId: context.jobId,\n\t\tredactedAt: (context.redactedAt ?? new Date()).toISOString(),\n\t\treason: context.reason,\n\t\tdataClass,\n\t\tredactedFields,\n\t\tpreservedSemantics: [...preservedSemantics],\n\t};\n}\n\nexport class FieldRedactor {\n\tredactField(value: unknown, method: RedactionMethod, context: AnonymizationContext, path: string): unknown {\n\t\treturn applyMethod(value, method, context, path);\n\t}\n\n\tmask(value: unknown): string | null {\n\t\treturn maskValue(value);\n\t}\n\n\thash(value: unknown): string {\n\t\treturn `sha256_${stableChecksum(value)}`;\n\t}\n\n\ttokenize(value: unknown, context: AnonymizationContext, path: string): string {\n\t\treturn stableScopedToken(value, context, path);\n\t}\n\n\tgeneralize(value: unknown): unknown {\n\t\treturn generalizeValue(value);\n\t}\n}\n\nexport class AnonymizationEngine {\n\treadonly #policy: AnonymizationPolicy;\n\n\tconstructor(policy: AnonymizationPolicy) {\n\t\tthis.#policy = {\n\t\t\tfields: policy.fields.map((field) => ({ ...field })),\n\t\t\tpreservedSemantics: [...(policy.preservedSemantics ?? [])],\n\t\t};\n\t}\n\n\tanonymizeJsonValue<TValue>(\n\t\tvalue: TValue,\n\t\tcontext: AnonymizationContext,\n\t\tdataClass: PlatformDataClass,\n\t): AnonymizationResult<TValue> {\n\t\treturn this.anonymizeJsonValueAtPath(value, context, dataClass, \"$\");\n\t}\n\n\tanonymizeJsonValueAtPath<TValue>(\n\t\tvalue: TValue,\n\t\tcontext: AnonymizationContext,\n\t\tdataClass: PlatformDataClass,\n\t\tbasePath: string,\n\t): AnonymizationResult<TValue> {\n\t\tconst redactedFields: AnonymizationFieldMetadata[] = [];\n\t\tconst anonymizedValue = anonymizeRecursive(\n\t\t\tvalue,\n\t\t\tcontext,\n\t\t\tdataClass,\n\t\t\tbasePath,\n\t\t\tredactedFields,\n\t\t\tthis.#policy.fields,\n\t\t) as TValue;\n\n\t\treturn {\n\t\t\tvalue: anonymizedValue,\n\t\t\tmetadata: buildMetadata(context, dataClass, redactedFields, this.#policy.preservedSemantics ?? []),\n\t\t};\n\t}\n\n\tanonymizeAssetEventPayload(\n\t\tevent: AssetEventLike,\n\t\tcontext: AnonymizationContext,\n\t): AnonymizationResult<unknown> {\n\t\tconst result = this.anonymizeJsonValue(event.payload, context, \"asset_event\");\n\t\tconst payload = isPlainObject(result.value)\n\t\t\t? { ...result.value, _privacy: result.metadata }\n\t\t\t: { value: result.value, _privacy: result.metadata };\n\n\t\treturn { value: payload, metadata: result.metadata };\n\t}\n\n\tanonymizeEvidencePacket(\n\t\tpacket: EvidencePacketLike,\n\t\tcontext: AnonymizationContext,\n\t): AnonymizationResult<Pick<EvidencePacketLike, \"packet\" | \"redactionMetadata\" | \"checksum\">> {\n\t\tconst result = this.anonymizeJsonValue(packet.packet, context, \"evidence_packet\");\n\t\tconst redactionMetadata = {\n\t\t\t...(isPlainObject(packet.redactionMetadata) ? packet.redactionMetadata : {}),\n\t\t\tlifecycleAnonymization: result.metadata,\n\t\t};\n\t\tconst anonymizedPacket = isPlainObject(result.value)\n\t\t\t? { ...result.value, _privacy: result.metadata }\n\t\t\t: { value: result.value, _privacy: result.metadata };\n\n\t\treturn {\n\t\t\tvalue: {\n\t\t\t\tpacket: anonymizedPacket,\n\t\t\t\tredactionMetadata,\n\t\t\t\tchecksum: stableChecksum({ packet: anonymizedPacket, redactionMetadata }),\n\t\t\t},\n\t\t\tmetadata: result.metadata,\n\t\t};\n\t}\n\n\tbuildAnonymizationLifecycleEvidence(input: {\n\t\tcontext: AnonymizationContext;\n\t\tassetEvents?: Array<{ event: AssetEventLike; metadata: AnonymizationMetadata }>;\n\t\treadModels?: Array<{\n\t\t\tmodelKind: string;\n\t\t\trecord: JsonObject & { id: string };\n\t\t\tmetadata: AnonymizationMetadata;\n\t\t}>;\n\t\tevidencePackets?: Array<{ packet: EvidencePacketLike; metadata: AnonymizationMetadata }>;\n\t}): AnonymizationLifecycleEvidence {\n\t\tconst assetEvents = input.assetEvents ?? [];\n\t\tconst readModels = input.readModels ?? [];\n\t\tconst evidencePackets = input.evidencePackets ?? [];\n\t\tconst redactedFields = [\n\t\t\t...assetEvents.flatMap((item) => item.metadata.redactedFields),\n\t\t\t...readModels.flatMap((item) => item.metadata.redactedFields),\n\t\t\t...evidencePackets.flatMap((item) => item.metadata.redactedFields),\n\t\t];\n\n\t\treturn {\n\t\t\teventType: \"AnonymizationApplied\",\n\t\t\tpolicyVersion: input.context.policyVersion ?? ANONYMIZATION_POLICY_VERSION,\n\t\t\tjobId: input.context.jobId,\n\t\t\treason: input.context.reason,\n\t\t\tappliedAt: (input.context.redactedAt ?? new Date()).toISOString(),\n\t\t\ttenantId: input.context.tenantId,\n\t\t\tspaceId: input.context.spaceId ?? null,\n\t\t\tcounts: {\n\t\t\t\tassetEvents: assetEvents.length,\n\t\t\t\treadModels: readModels.length,\n\t\t\t\tevidencePackets: evidencePackets.length,\n\t\t\t\tredactedFields: redactedFields.length,\n\t\t\t},\n\t\t\trecords: [\n\t\t\t\t...assetEvents.map((item) => ({\n\t\t\t\t\trecordClass: \"asset_event\" as PlatformDataClass,\n\t\t\t\t\trecordId: item.event.id,\n\t\t\t\t\tsubjectType: item.event.subjectType,\n\t\t\t\t\tsubjectId: item.event.subjectId,\n\t\t\t\t\tfieldManifest: item.metadata.redactedFields.map(\n\t\t\t\t\t\t({ fieldPath, method, beforeChecksum }) => ({\n\t\t\t\t\t\t\tfieldPath,\n\t\t\t\t\t\t\tmethod,\n\t\t\t\t\t\t\tbeforeChecksum,\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t})),\n\t\t\t\t...readModels.map((item) => ({\n\t\t\t\t\trecordClass: \"read_model\" as PlatformDataClass,\n\t\t\t\t\trecordId: item.record.id,\n\t\t\t\t\tsubjectType: item.modelKind,\n\t\t\t\t\tsubjectId: item.record.id,\n\t\t\t\t\tfieldManifest: item.metadata.redactedFields.map(\n\t\t\t\t\t\t({ fieldPath, method, beforeChecksum }) => ({\n\t\t\t\t\t\t\tfieldPath,\n\t\t\t\t\t\t\tmethod,\n\t\t\t\t\t\t\tbeforeChecksum,\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t})),\n\t\t\t\t...evidencePackets.map((item) => ({\n\t\t\t\t\trecordClass: \"evidence_packet\" as PlatformDataClass,\n\t\t\t\t\trecordId: item.packet.id,\n\t\t\t\t\tfieldManifest: item.metadata.redactedFields.map(\n\t\t\t\t\t\t({ fieldPath, method, beforeChecksum }) => ({\n\t\t\t\t\t\t\tfieldPath,\n\t\t\t\t\t\t\tmethod,\n\t\t\t\t\t\t\tbeforeChecksum,\n\t\t\t\t\t\t}),\n\t\t\t\t\t),\n\t\t\t\t})),\n\t\t\t],\n\t\t\tpreservedSemantics: [...(this.#policy.preservedSemantics ?? [])],\n\t\t};\n\t}\n}\n"],"mappings":";;AAWA,MAAa,+BAA+B;AAgE5C,SAAS,aAAa,KAAqB;CAC1C,OAAO,IAAI,QAAQ,iBAAiB,EAAE,CAAC,CAAC,YAAY;AACrD;AAEA,SAAgB,eAAe,OAAwB;CACtD,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,UAAU,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK;AACvE;AAEA,SAAS,kBACR,OACA,SACA,WACS;CACT,MAAM,QAAQ,GAAG,QAAQ,SAAS,GAAG,QAAQ,WAAW,SAAS,GAAG;CACpE,OAAO,OAAO,WAAW,QAAQ,CAAC,CAChC,OAAO,GAAG,QAAQ,iBAAA,oCAA8C,GAAG,MAAM,GAAG,OAAO,KAAK,GAAG,CAAC,CAC5F,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,EAAE;AACd;AAEA,SAAS,UAAU,OAA+B;CACjD,IAAI,UAAU,QAAQ,UAAU,KAAA,GAC/B,OAAO;CAGR,MAAM,cAAc,OAAO,KAAK;CAChC,IAAI,YAAY,UAAU,GACzB,OAAO;CAGR,OAAO,GAAG,IAAI,OAAO,KAAK,IAAI,YAAY,SAAS,GAAG,CAAC,CAAC,IAAI,YAAY,MAAM,EAAE;AACjF;AAEA,SAAS,gBAAgB,OAAyB;CACjD,IAAI,OAAO,UAAU,UACpB,OAAO,KAAK,MAAM,QAAQ,GAAI,IAAI;CAGnC,IAAI,OAAO,UAAU,YAAY,qBAAqB,KAAK,KAAK,GAC/D,OAAO,GAAG,MAAM,MAAM,GAAG,CAAC,EAAE;CAG7B,OAAO;AACR;AAEA,SAAS,YACR,OACA,QACA,SACA,MACU;CACV,QAAQ,QAAR;EACC,KAAK,QACJ;EACD,KAAK,WACJ,OAAO;EACR,KAAK,QACJ,OAAO,UAAU,KAAK;EACvB,KAAK,QACJ,OAAO,UAAU,eAAe,KAAK;EACtC,KAAK,YACJ,OAAO,kBAAkB,OAAO,SAAS,IAAI;EAC9C,KAAK,cACJ,OAAO,gBAAgB,KAAK;CAC9B;AACD;AAEA,SAAS,cAAc,UAA+C,MAAc,KAAoD;CACvI,MAAM,iBAAiB,aAAa,IAAI;CACxC,MAAM,gBAAgB,MAAM,aAAa,GAAG,IAAI,KAAA;CAEhD,OAAO,SAAS,MAAM,WAAW;EAChC,MAAM,kBAAkB,aAAa,OAAO,KAAK;EACjD,IAAI,OAAO,UAAU,OACpB,OAAO,oBAAoB;EAG5B,OAAO,oBAAoB;CAC5B,CAAC;AACF;AAEA,SAAS,cAAc,OAAqC;CAC3D,OACC,QAAQ,KAAK,KAAK,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,KAAK,EAAE,iBAAiB;AAE7F;AAEA,SAAS,mBACR,OACA,SACA,WACA,MACA,gBACA,UACA,KACU;CACV,MAAM,cAAc,cAAc,UAAU,MAAM,GAAG;CACrD,IAAI,eAAe,UAAU,QAAQ,UAAU,KAAA,GAAW;EACzD,eAAe,KAAK;GACnB,WAAW;GACX,QAAQ,YAAY;GACpB,eAAe,QAAQ,iBAAA;GACvB,OAAO,QAAQ;GACf,aAAa,QAAQ,8BAAc,IAAI,KAAK,EAAA,CAAG,YAAY;GAC3D,QAAQ,QAAQ;GAChB;GACA,gBAAgB,eAAe,KAAK;EACrC,CAAC;EAED,OAAO,YAAY,OAAO,YAAY,QAAQ,SAAS,IAAI;CAC5D;CAEA,IAAI,MAAM,QAAQ,KAAK,GACtB,OAAO,MAAM,KAAK,MAAM,UACvB,mBAAmB,MAAM,SAAS,WAAW,GAAG,KAAK,GAAG,MAAM,IAAI,gBAAgB,QAAQ,CAC3F;CAGD,IAAI,CAAC,cAAc,KAAK,GACvB,OAAO;CAGR,MAAM,SAAqB,CAAC;CAC5B,KAAK,MAAM,CAAC,UAAU,eAAe,OAAO,QAAQ,KAAK,GAAG;EAC3D,IAAI,aAAa,YAAY;GAC5B,OAAO,YAAY;GACnB;EACD;EAEA,MAAM,aAAa,mBAClB,YACA,SACA,WACA,GAAG,KAAK,GAAG,YACX,gBACA,UACA,QACD;EAEA,IAAI,eAAe,KAAA,GAClB,OAAO,YAAY;CAErB;CAEA,OAAO;AACR;AAEA,SAAS,cACR,SACA,WACA,gBACA,oBACwB;CACxB,OAAO;EACN,gBAAgB;EAChB,eAAe,QAAQ,iBAAA;EACvB,OAAO,QAAQ;EACf,aAAa,QAAQ,8BAAc,IAAI,KAAK,EAAA,CAAG,YAAY;EAC3D,QAAQ,QAAQ;EAChB;EACA;EACA,oBAAoB,CAAC,GAAG,kBAAkB;CAC3C;AACD;AAEA,IAAa,gBAAb,MAA2B;CAC1B,YAAY,OAAgB,QAAyB,SAA+B,MAAuB;EAC1G,OAAO,YAAY,OAAO,QAAQ,SAAS,IAAI;CAChD;CAEA,KAAK,OAA+B;EACnC,OAAO,UAAU,KAAK;CACvB;CAEA,KAAK,OAAwB;EAC5B,OAAO,UAAU,eAAe,KAAK;CACtC;CAEA,SAAS,OAAgB,SAA+B,MAAsB;EAC7E,OAAO,kBAAkB,OAAO,SAAS,IAAI;CAC9C;CAEA,WAAW,OAAyB;EACnC,OAAO,gBAAgB,KAAK;CAC7B;AACD;AAEA,IAAa,sBAAb,MAAiC;CAChC;CAEA,YAAY,QAA6B;EACxC,KAAK,UAAU;GACd,QAAQ,OAAO,OAAO,KAAK,WAAW,EAAE,GAAG,MAAM,EAAE;GACnD,oBAAoB,CAAC,GAAI,OAAO,sBAAsB,CAAC,CAAE;EAC1D;CACD;CAEA,mBACC,OACA,SACA,WAC8B;EAC9B,OAAO,KAAK,yBAAyB,OAAO,SAAS,WAAW,GAAG;CACpE;CAEA,yBACC,OACA,SACA,WACA,UAC8B;EAC9B,MAAM,iBAA+C,CAAC;EAUtD,OAAO;GACN,OAVuB,mBACvB,OACA,SACA,WACA,UACA,gBACA,KAAK,QAAQ,MAIQ;GACrB,UAAU,cAAc,SAAS,WAAW,gBAAgB,KAAK,QAAQ,sBAAsB,CAAC,CAAC;EAClG;CACD;CAEA,2BACC,OACA,SAC+B;EAC/B,MAAM,SAAS,KAAK,mBAAmB,MAAM,SAAS,SAAS,aAAa;EAK5E,OAAO;GAAE,OAJO,cAAc,OAAO,KAAK,IACvC;IAAE,GAAG,OAAO;IAAO,UAAU,OAAO;GAAS,IAC7C;IAAE,OAAO,OAAO;IAAO,UAAU,OAAO;GAAS;GAE3B,UAAU,OAAO;EAAS;CACpD;CAEA,wBACC,QACA,SAC6F;EAC7F,MAAM,SAAS,KAAK,mBAAmB,OAAO,QAAQ,SAAS,iBAAiB;EAChF,MAAM,oBAAoB;GACzB,GAAI,cAAc,OAAO,iBAAiB,IAAI,OAAO,oBAAoB,CAAC;GAC1E,wBAAwB,OAAO;EAChC;EACA,MAAM,mBAAmB,cAAc,OAAO,KAAK,IAChD;GAAE,GAAG,OAAO;GAAO,UAAU,OAAO;EAAS,IAC7C;GAAE,OAAO,OAAO;GAAO,UAAU,OAAO;EAAS;EAEpD,OAAO;GACN,OAAO;IACN,QAAQ;IACR;IACA,UAAU,eAAe;KAAE,QAAQ;KAAkB;IAAkB,CAAC;GACzE;GACA,UAAU,OAAO;EAClB;CACD;CAEA,oCAAoC,OASD;EAClC,MAAM,cAAc,MAAM,eAAe,CAAC;EAC1C,MAAM,aAAa,MAAM,cAAc,CAAC;EACxC,MAAM,kBAAkB,MAAM,mBAAmB,CAAC;EAClD,MAAM,iBAAiB;GACtB,GAAG,YAAY,SAAS,SAAS,KAAK,SAAS,cAAc;GAC7D,GAAG,WAAW,SAAS,SAAS,KAAK,SAAS,cAAc;GAC5D,GAAG,gBAAgB,SAAS,SAAS,KAAK,SAAS,cAAc;EAClE;EAEA,OAAO;GACN,WAAW;GACX,eAAe,MAAM,QAAQ,iBAAA;GAC7B,OAAO,MAAM,QAAQ;GACrB,QAAQ,MAAM,QAAQ;GACtB,YAAY,MAAM,QAAQ,8BAAc,IAAI,KAAK,EAAA,CAAG,YAAY;GAChE,UAAU,MAAM,QAAQ;GACxB,SAAS,MAAM,QAAQ,WAAW;GAClC,QAAQ;IACP,aAAa,YAAY;IACzB,YAAY,WAAW;IACvB,iBAAiB,gBAAgB;IACjC,gBAAgB,eAAe;GAChC;GACA,SAAS;IACR,GAAG,YAAY,KAAK,UAAU;KAC7B,aAAa;KACb,UAAU,KAAK,MAAM;KACrB,aAAa,KAAK,MAAM;KACxB,WAAW,KAAK,MAAM;KACtB,eAAe,KAAK,SAAS,eAAe,KAC1C,EAAE,WAAW,QAAQ,sBAAsB;MAC3C;MACA;MACA;KACD,EACD;IACD,EAAE;IACF,GAAG,WAAW,KAAK,UAAU;KAC5B,aAAa;KACb,UAAU,KAAK,OAAO;KACtB,aAAa,KAAK;KAClB,WAAW,KAAK,OAAO;KACvB,eAAe,KAAK,SAAS,eAAe,KAC1C,EAAE,WAAW,QAAQ,sBAAsB;MAC3C;MACA;MACA;KACD,EACD;IACD,EAAE;IACF,GAAG,gBAAgB,KAAK,UAAU;KACjC,aAAa;KACb,UAAU,KAAK,OAAO;KACtB,eAAe,KAAK,SAAS,eAAe,KAC1C,EAAE,WAAW,QAAQ,sBAAsB;MAC3C;MACA;MACA;KACD,EACD;IACD,EAAE;GACH;GACA,oBAAoB,CAAC,GAAI,KAAK,QAAQ,sBAAsB,CAAC,CAAE;EAChE;CACD;AACD"}