@globiguard/contracts 1.0.1

package/dist/queue.d.ts

@@ -0,0 +1,47 @@
+export declare const GLOBIGUARD_QUEUE_STATUSES: readonly ["PENDING", "APPROVED", "REJECTED", "EXPIRED", "AUTO_APPROVED"];
+export type GlobiguardQueueStatus = (typeof GLOBIGUARD_QUEUE_STATUSES)[number];
+export declare const GLOBIGUARD_QUEUE_ACTIONS: readonly ["approve", "reject"];
+export type GlobiguardQueueAction = (typeof GLOBIGUARD_QUEUE_ACTIONS)[number];
+export interface GlobiguardQueueEntry {
+    id: string;
+    orgId: string;
+    workflowRunId: string;
+    workflowStepId: string;
+    actionType: string;
+    destinationSystem: string;
+    riskScore: number;
+    policyId: string;
+    payloadSummary: Record<string, unknown>;
+    fieldsInvolved: string[];
+    status: GlobiguardQueueStatus;
+    reviewedBy?: string | null;
+    reviewNotes?: string | null;
+    createdAt: string;
+    resolvedAt?: string | null;
+    authorizationId?: string | null;
+    correlationId?: string | null;
+    idempotencyKey?: string | null;
+    evidencePackageId?: string | null;
+    resumeTokenRef?: string | null;
+}
+export interface GlobiguardQueueListRequest {
+    status?: GlobiguardQueueStatus;
+}
+export interface GlobiguardQueueDecisionRequest {
+    action: GlobiguardQueueAction;
+    reviewedBy?: string;
+    notes?: string;
+}
+export interface GlobiguardQueueDecisionResponse {
+    id: string;
+    decision: GlobiguardQueueStatus;
+    status: GlobiguardQueueStatus;
+}
+export interface GlobiguardQueueReadClient {
+    list(request?: GlobiguardQueueListRequest): Promise<GlobiguardQueueEntry[]>;
+    get(queueEntryId: string): Promise<GlobiguardQueueEntry>;
+}
+export interface GlobiguardQueueClient extends GlobiguardQueueReadClient {
+    decide(queueEntryId: string, request: GlobiguardQueueDecisionRequest): Promise<GlobiguardQueueDecisionResponse>;
+}
+//# sourceMappingURL=queue.d.ts.map

package/dist/queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../src/queue.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,yBAAyB,0EAM5B,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAC/B,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7C,eAAO,MAAM,wBAAwB,gCAAiC,CAAC;AAEvE,MAAM,MAAM,qBAAqB,GAC/B,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5C,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,qBAAqB,CAAC;CAChC;AAED,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,qBAAqB,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,+BAA+B;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,qBAAqB,CAAC;IAChC,MAAM,EAAE,qBAAqB,CAAC;CAC/B;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,OAAO,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC5E,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,MAAM,CACJ,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,+BAA+B,CAAC,CAAC;CAC7C"}

package/dist/queue.js

@@ -0,0 +1,9 @@
+export const GLOBIGUARD_QUEUE_STATUSES = [
+    "PENDING",
+    "APPROVED",
+    "REJECTED",
+    "EXPIRED",
+    "AUTO_APPROVED"
+];
+export const GLOBIGUARD_QUEUE_ACTIONS = ["approve", "reject"];
+//# sourceMappingURL=queue.js.map

package/dist/queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.js","sourceRoot":"","sources":["../src/queue.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,SAAS;IACT,UAAU;IACV,UAAU;IACV,SAAS;IACT,eAAe;CACP,CAAC;AAKX,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAU,CAAC"}

package/dist/realtime.d.ts

@@ -0,0 +1,33 @@
+export interface GlobiguardRealtimeEvent<TPayload = Record<string, unknown>> {
+    channel: string;
+    data: TPayload;
+}
+export interface GlobiguardRealtimeSubscription {
+    channel: string;
+    unsubscribe(): void;
+}
+export interface GlobiguardRealtimeSubscribeOptions<TPayload = Record<string, unknown>> {
+    onEvent(event: GlobiguardRealtimeEvent<TPayload>): void;
+    onError?: (error: Error) => void;
+}
+export interface GlobiguardRealtimeBearerAuth {
+    kind: "bearer";
+    token: string;
+}
+export interface GlobiguardRealtimeApiKeyAuth {
+    kind: "apiKey";
+    token: string;
+}
+export type GlobiguardRealtimeAuth = GlobiguardRealtimeBearerAuth | GlobiguardRealtimeApiKeyAuth;
+export interface GlobiguardRealtimeConnectionConfig {
+    auth: GlobiguardRealtimeAuth;
+    path?: string;
+}
+export interface GlobiguardRealtimeClient {
+    subscribeTransparency(sessionId: string, options: GlobiguardRealtimeSubscribeOptions): GlobiguardRealtimeSubscription;
+    subscribeWorkflow(runId: string, options: GlobiguardRealtimeSubscribeOptions): GlobiguardRealtimeSubscription;
+    subscribeQueue(orgId: string, options: GlobiguardRealtimeSubscribeOptions): GlobiguardRealtimeSubscription;
+    subscribeDecision(authorizationId: string, options: GlobiguardRealtimeSubscribeOptions): GlobiguardRealtimeSubscription;
+    disconnect(): void;
+}
+//# sourceMappingURL=realtime.d.ts.map

package/dist/realtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.d.ts","sourceRoot":"","sources":["../src/realtime.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,uBAAuB,CACtC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAElC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,IAAI,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,kCAAkC,CACjD,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAElC,OAAO,CAAC,KAAK,EAAE,uBAAuB,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IACxD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,sBAAsB,GAC9B,4BAA4B,GAC5B,4BAA4B,CAAC;AAEjC,MAAM,WAAW,kCAAkC;IACjD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACvC,qBAAqB,CACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,kCAAkC,GAC1C,8BAA8B,CAAC;IAClC,iBAAiB,CACf,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,kCAAkC,GAC1C,8BAA8B,CAAC;IAClC,cAAc,CACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,kCAAkC,GAC1C,8BAA8B,CAAC;IAClC,iBAAiB,CACf,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,kCAAkC,GAC1C,8BAA8B,CAAC;IAClC,UAAU,IAAI,IAAI,CAAC;CACpB"}

package/dist/realtime.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=realtime.js.map

package/dist/realtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.js","sourceRoot":"","sources":["../src/realtime.ts"],"names":[],"mappings":""}

package/dist/service-targets.d.ts

@@ -0,0 +1,13 @@
+export interface GlobiguardServiceTargets {
+    controlPlane: string;
+    brain?: string;
+    gateway?: string;
+    sidecar?: string;
+}
+export type GlobiguardServiceName = "controlPlane" | "brain" | "gateway" | "sidecar";
+export declare const GLOBIGUARD_BROWSER_CAPABILITIES: {
+    readonly directBrainAccess: false;
+    readonly directControlPlaneAccess: true;
+    readonly directActionAuthority: false;
+};
+//# sourceMappingURL=service-targets.d.ts.map

package/dist/service-targets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-targets.d.ts","sourceRoot":"","sources":["../src/service-targets.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,qBAAqB,GAC7B,cAAc,GACd,OAAO,GACP,SAAS,GACT,SAAS,CAAC;AAEd,eAAO,MAAM,+BAA+B;;;;CAIlC,CAAC"}

package/dist/service-targets.js

@@ -0,0 +1,6 @@
+export const GLOBIGUARD_BROWSER_CAPABILITIES = {
+    directBrainAccess: false,
+    directControlPlaneAccess: true,
+    directActionAuthority: false
+};
+//# sourceMappingURL=service-targets.js.map

package/dist/service-targets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-targets.js","sourceRoot":"","sources":["../src/service-targets.ts"],"names":[],"mappings":"AAaA,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,iBAAiB,EAAE,KAAK;IACxB,wBAAwB,EAAE,IAAI;IAC9B,qBAAqB,EAAE,KAAK;CACpB,CAAC"}

package/dist/webhooks.d.ts

@@ -0,0 +1,61 @@
+import type { GlobiguardSdkErrorShape, GlobiguardServerAuthorityContract } from "./authority.js";
+export declare const GLOBIGUARD_TRUST_WEBHOOK_CONTRACT_VERSION: "2026-05-trust-webhook-beta";
+export declare const GLOBIGUARD_TRUST_WEBHOOK_SIGNATURE_SCHEME: "globiguard-hmac-sha256-v1";
+export declare const GLOBIGUARD_TRUST_WEBHOOK_HEADER_NAMES: Readonly<{
+    deliveryId: "x-globiguard-delivery-id";
+    timestamp: "x-globiguard-timestamp";
+    eventType: "x-globiguard-event-type";
+    signature: "x-globiguard-signature";
+}>;
+export declare const GLOBIGUARD_TRUST_WEBHOOK_EVENT_TYPES: readonly ["approval.requested", "approval.approved", "approval.rejected", "action.blocked", "action.queued", "evidence.ready", "incident.replay_ready", "trust.material_updated"];
+export type GlobiguardTrustWebhookEventType = (typeof GLOBIGUARD_TRUST_WEBHOOK_EVENT_TYPES)[number];
+export interface GlobiguardTrustWebhookHeaders {
+    deliveryId: string;
+    timestamp: string;
+    eventType: GlobiguardTrustWebhookEventType | string;
+    signature: string;
+}
+export interface GlobiguardTrustWebhookEnvelope<TData = Record<string, unknown>> {
+    contractVersion: typeof GLOBIGUARD_TRUST_WEBHOOK_CONTRACT_VERSION | string;
+    id: string;
+    timestamp: string;
+    type: GlobiguardTrustWebhookEventType | string;
+    apiFamily: "webhooks.v1";
+    data: TData;
+    related?: {
+        authorizationId?: string;
+        queueEntryId?: string;
+        approvalId?: string;
+        evidencePackageId?: string;
+        incidentReplayId?: string;
+        workflowRunId?: string;
+        correlationId?: string;
+    };
+}
+export interface GlobiguardTrustWebhookVerificationRequest extends GlobiguardServerAuthorityContract {
+    headers: GlobiguardTrustWebhookHeaders;
+    rawBody: string | Uint8Array;
+    signingSecret: string;
+    toleranceSeconds?: number;
+    now?: Date;
+    seenDelivery?: (deliveryId: string) => boolean | Promise<boolean>;
+}
+export interface GlobiguardTrustWebhookVerificationSuccess {
+    ok: true;
+    deliveryId: string;
+    eventType: GlobiguardTrustWebhookEventType | string;
+    timestamp: string;
+    envelope: GlobiguardTrustWebhookEnvelope;
+    duplicateDelivery: boolean;
+}
+export interface GlobiguardTrustWebhookVerificationFailure {
+    ok: false;
+    deliveryId?: string;
+    eventType?: string;
+    timestamp?: string;
+    error: GlobiguardSdkErrorShape & {
+        kind: "WEBHOOK_VERIFICATION_FAILED";
+    };
+}
+export type GlobiguardTrustWebhookVerificationResult = GlobiguardTrustWebhookVerificationSuccess | GlobiguardTrustWebhookVerificationFailure;
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../src/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,iCAAiC,EAClC,MAAM,gBAAgB,CAAC;AAExB,eAAO,MAAM,yCAAyC,EACpD,4BAAqC,CAAC;AAExC,eAAO,MAAM,yCAAyC,EACpD,2BAAoC,CAAC;AAEvC,eAAO,MAAM,qCAAqC;;;;;EAKhD,CAAC;AAEH,eAAO,MAAM,oCAAoC,mLASvC,CAAC;AAEX,MAAM,MAAM,+BAA+B,GACzC,CAAC,OAAO,oCAAoC,CAAC,CAAC,MAAM,CAAC,CAAC;AAExD,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,+BAA+B,GAAG,MAAM,CAAC;IACpD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,8BAA8B,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC7E,eAAe,EACX,OAAO,yCAAyC,GAChD,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,+BAA+B,GAAG,MAAM,CAAC;IAC/C,SAAS,EAAE,aAAa,CAAC;IACzB,IAAI,EAAE,KAAK,CAAC;IACZ,OAAO,CAAC,EAAE;QACR,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,yCACf,SAAQ,iCAAiC;IACzC,OAAO,EAAE,6BAA6B,CAAC;IACvC,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,yCAAyC;IACxD,EAAE,EAAE,IAAI,CAAC;IACT,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,+BAA+B,GAAG,MAAM,CAAC;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,8BAA8B,CAAC;IACzC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,yCAAyC;IACxD,EAAE,EAAE,KAAK,CAAC;IACV,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,uBAAuB,GAAG;QAC/B,IAAI,EAAE,6BAA6B,CAAC;KACrC,CAAC;CACH;AAED,MAAM,MAAM,wCAAwC,GAChD,yCAAyC,GACzC,yCAAyC,CAAC"}

package/dist/webhooks.js

@@ -0,0 +1,19 @@
+export const GLOBIGUARD_TRUST_WEBHOOK_CONTRACT_VERSION = "2026-05-trust-webhook-beta";
+export const GLOBIGUARD_TRUST_WEBHOOK_SIGNATURE_SCHEME = "globiguard-hmac-sha256-v1";
+export const GLOBIGUARD_TRUST_WEBHOOK_HEADER_NAMES = Object.freeze({
+    deliveryId: "x-globiguard-delivery-id",
+    timestamp: "x-globiguard-timestamp",
+    eventType: "x-globiguard-event-type",
+    signature: "x-globiguard-signature"
+});
+export const GLOBIGUARD_TRUST_WEBHOOK_EVENT_TYPES = [
+    "approval.requested",
+    "approval.approved",
+    "approval.rejected",
+    "action.blocked",
+    "action.queued",
+    "evidence.ready",
+    "incident.replay_ready",
+    "trust.material_updated"
+];
+//# sourceMappingURL=webhooks.js.map

package/dist/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../src/webhooks.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,yCAAyC,GACpD,4BAAqC,CAAC;AAExC,MAAM,CAAC,MAAM,yCAAyC,GACpD,2BAAoC,CAAC;AAEvC,MAAM,CAAC,MAAM,qCAAqC,GAAG,MAAM,CAAC,MAAM,CAAC;IACjE,UAAU,EAAE,0BAA0B;IACtC,SAAS,EAAE,wBAAwB;IACnC,SAAS,EAAE,yBAAyB;IACpC,SAAS,EAAE,wBAAwB;CACpC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,oBAAoB;IACpB,mBAAmB;IACnB,mBAAmB;IACnB,gBAAgB;IAChB,eAAe;IACf,gBAAgB;IAChB,uBAAuB;IACvB,wBAAwB;CAChB,CAAC"}

package/dist/workflows.d.ts

@@ -0,0 +1,101 @@
+import type { GlobiguardDecision } from "./decision.js";
+import type { GlobiguardIndustry } from "./industry.js";
+export declare const GLOBIGUARD_TRIGGER_TYPES: readonly ["EMAIL_RECEIVED", "FILE_UPLOADED", "WEBHOOK", "SCHEDULE", "MANUAL", "RECORD_UPDATED"];
+export type GlobiguardWorkflowTriggerType = (typeof GLOBIGUARD_TRIGGER_TYPES)[number];
+export declare const GLOBIGUARD_WORKFLOW_STEP_TYPES: readonly ["READ_DATA", "PROCESS_FILE", "DETECT_PII", "CALL_LLM", "GATE_CHECK", "WRITE_RECORD", "SEND_MESSAGE", "REQUIRE_APPROVAL", "BRANCH", "NOTIFY"];
+export type GlobiguardWorkflowStepType = (typeof GLOBIGUARD_WORKFLOW_STEP_TYPES)[number];
+export declare const GLOBIGUARD_WORKFLOW_RUN_STATUSES: readonly ["RUNNING", "WAITING_APPROVAL", "COMPLETED", "FAILED", "CANCELLED"];
+export type GlobiguardWorkflowRunStatus = (typeof GLOBIGUARD_WORKFLOW_RUN_STATUSES)[number];
+export declare const GLOBIGUARD_WORKFLOW_STEP_STATUSES: readonly ["PENDING", "RUNNING", "COMPLETED", "FAILED", "SKIPPED", "WAITING_APPROVAL"];
+export type GlobiguardWorkflowStepStatus = (typeof GLOBIGUARD_WORKFLOW_STEP_STATUSES)[number];
+export interface GlobiguardWorkflowStep {
+    id: string;
+    workflowId: string;
+    order: number;
+    name: string;
+    stepType: GlobiguardWorkflowStepType;
+    config: Record<string, unknown>;
+    nextStepId?: string | null;
+    onApproveStepId?: string | null;
+    onRejectStepId?: string | null;
+    condition?: Record<string, unknown> | null;
+}
+export interface GlobiguardWorkflowRecord {
+    id: string;
+    orgId: string;
+    name: string;
+    description?: string | null;
+    triggerType: GlobiguardWorkflowTriggerType;
+    triggerConfig: Record<string, unknown>;
+    active: boolean;
+    industry: GlobiguardIndustry;
+    templateId?: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface GlobiguardWorkflow extends GlobiguardWorkflowRecord {
+    steps: GlobiguardWorkflowStep[];
+}
+export interface GlobiguardWorkflowStepInput {
+    name: string;
+    stepType: GlobiguardWorkflowStepType;
+    config?: Record<string, unknown>;
+}
+export interface GlobiguardWorkflowRunStep {
+    id: string;
+    runId: string;
+    stepId: string;
+    status: GlobiguardWorkflowStepStatus;
+    decision?: GlobiguardDecision | null;
+    inputSummary?: Record<string, unknown> | null;
+    outputSummary?: Record<string, unknown> | null;
+    maskedFields: string[];
+    startedAt?: string | null;
+    completedAt?: string | null;
+    error?: string | null;
+}
+export interface GlobiguardWorkflowRun {
+    id: string;
+    workflowId: string;
+    orgId: string;
+    status: GlobiguardWorkflowRunStatus;
+    triggerData: GlobiguardWorkflowTriggerSummary;
+    startedAt: string;
+    completedAt?: string | null;
+    failedAt?: string | null;
+    error?: string | null;
+    steps?: GlobiguardWorkflowRunStep[];
+}
+export interface GlobiguardWorkflowListRequest {
+    active: boolean;
+}
+export interface GlobiguardWorkflowCreateRequest {
+    name: string;
+    description?: string;
+    triggerType: GlobiguardWorkflowTriggerType;
+    industry: GlobiguardIndustry;
+    triggerConfig?: Record<string, unknown>;
+    steps?: GlobiguardWorkflowStepInput[];
+}
+export interface GlobiguardWorkflowUpdateRequest {
+    name: string;
+}
+export interface GlobiguardWorkflowTriggerSummary {
+    sha256: string;
+    approxBytes: number;
+    topLevelKeys: string[];
+    topLevelValueKinds: Record<string, string>;
+}
+export interface GlobiguardWorkflowsReadClient {
+    list(request: GlobiguardWorkflowListRequest): Promise<GlobiguardWorkflow[]>;
+    get(workflowId: string): Promise<GlobiguardWorkflow>;
+}
+export interface GlobiguardWorkflowsClient extends GlobiguardWorkflowsReadClient {
+    create(request: GlobiguardWorkflowCreateRequest): Promise<GlobiguardWorkflow>;
+    update(workflowId: string, request: GlobiguardWorkflowUpdateRequest): Promise<GlobiguardWorkflowRecord>;
+    remove(workflowId: string): Promise<void>;
+    activate(workflowId: string): Promise<GlobiguardWorkflowRecord>;
+    run(workflowId: string, triggerData?: Record<string, unknown>): Promise<GlobiguardWorkflowRun>;
+    listRuns(workflowId: string): Promise<GlobiguardWorkflowRun[]>;
+}
+//# sourceMappingURL=workflows.d.ts.map

package/dist/workflows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflows.d.ts","sourceRoot":"","sources":["../src/workflows.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,eAAO,MAAM,wBAAwB,iGAO3B,CAAC;AAEX,MAAM,MAAM,6BAA6B,GACvC,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5C,eAAO,MAAM,8BAA8B,wJAWjC,CAAC;AAEX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC;AAElD,eAAO,MAAM,gCAAgC,8EAMnC,CAAC;AAEX,MAAM,MAAM,2BAA2B,GACrC,CAAC,OAAO,gCAAgC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpD,eAAO,MAAM,iCAAiC,uFAOpC,CAAC;AAEX,MAAM,MAAM,4BAA4B,GACtC,CAAC,OAAO,iCAAiC,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,0BAA0B,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC5C;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,6BAA6B,CAAC;IAC3C,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAmB,SAAQ,wBAAwB;IAClE,KAAK,EAAE,sBAAsB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,0BAA0B,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,4BAA4B,CAAC;IACrC,QAAQ,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9C,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/C,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,2BAA2B,CAAC;IACpC,WAAW,EAAE,gCAAgC,CAAC;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,yBAAyB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,6BAA6B,CAAC;IAC3C,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,KAAK,CAAC,EAAE,2BAA2B,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,gCAAgC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,6BAA6B;IAC5C,IAAI,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC5E,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,yBAA0B,SAAQ,6BAA6B;IAC9E,MAAM,CAAC,OAAO,EAAE,+BAA+B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC9E,MAAM,CACJ,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACrC,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAChE,GAAG,CACD,UAAU,EAAE,MAAM,EAClB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;CAChE"}

package/dist/workflows.js

@@ -0,0 +1,36 @@
+export const GLOBIGUARD_TRIGGER_TYPES = [
+    "EMAIL_RECEIVED",
+    "FILE_UPLOADED",
+    "WEBHOOK",
+    "SCHEDULE",
+    "MANUAL",
+    "RECORD_UPDATED"
+];
+export const GLOBIGUARD_WORKFLOW_STEP_TYPES = [
+    "READ_DATA",
+    "PROCESS_FILE",
+    "DETECT_PII",
+    "CALL_LLM",
+    "GATE_CHECK",
+    "WRITE_RECORD",
+    "SEND_MESSAGE",
+    "REQUIRE_APPROVAL",
+    "BRANCH",
+    "NOTIFY"
+];
+export const GLOBIGUARD_WORKFLOW_RUN_STATUSES = [
+    "RUNNING",
+    "WAITING_APPROVAL",
+    "COMPLETED",
+    "FAILED",
+    "CANCELLED"
+];
+export const GLOBIGUARD_WORKFLOW_STEP_STATUSES = [
+    "PENDING",
+    "RUNNING",
+    "COMPLETED",
+    "FAILED",
+    "SKIPPED",
+    "WAITING_APPROVAL"
+];
+//# sourceMappingURL=workflows.js.map

package/dist/workflows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflows.js","sourceRoot":"","sources":["../src/workflows.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,gBAAgB;IAChB,eAAe;IACf,SAAS;IACT,UAAU;IACV,QAAQ;IACR,gBAAgB;CACR,CAAC;AAKX,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,WAAW;IACX,cAAc;IACd,YAAY;IACZ,UAAU;IACV,YAAY;IACZ,cAAc;IACd,cAAc;IACd,kBAAkB;IAClB,QAAQ;IACR,QAAQ;CACA,CAAC;AAKX,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,SAAS;IACT,kBAAkB;IAClB,WAAW;IACX,QAAQ;IACR,WAAW;CACH,CAAC;AAKX,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,SAAS;IACT,SAAS;IACT,WAAW;IACX,QAAQ;IACR,SAAS;IACT,kBAAkB;CACV,CAAC"}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@globiguard/contracts",
+  "version": "1.0.1",
+  "description": "Shared public contracts for GlobiGuard distribution-layer packages.",
+  "author": "GuideGDM",
+  "license": "Apache-2.0",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/globiguard/globiguard-open.git",
+    "directory": "packages/contracts"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run --passWithNoTests"
+  }
+}