@happyvertical/smrt-playbooks 0.51.32 → 0.51.34

package/dist/index.d.ts

@@ -1,632 +1,29 @@
-import { CapabilityClassification } from '@happyvertical/smrt-types';
-import { CapabilityDeclaration } from '@happyvertical/smrt-types';
-import { SmrtClassOptions } from '@happyvertical/smrt-core';
-import { SmrtCollection } from '@happyvertical/smrt-core';
-import { SmrtObject } from '@happyvertical/smrt-core';
-import { SmrtObjectOptions } from '@happyvertical/smrt-core';
-
-/**
- * Static layers a browser-plane step is evaluated against.
- *
- * Everything here is a build-time or configuration fact. The generated
- * `authMiddleware` is deliberately absent: it is request-bound, returns a
- * `Response` rather than a boolean, and may consult session stores, rate-limit,
- * or audit — so preflight never invokes it, synthetically or otherwise, and
- * `appAuthConfigured` is the only thing it is allowed to know about it.
- *
- * An `authPredicate` seam (option 1 in #2590) can later be added as an optional
- * member here, turning the `app-auth` layer's `unknown` into a real verdict
- * without changing the report contract.
- */
-export declare interface BrowserPreflightLayerSource {
-    /** `isApiActionEnabled` for the referenced model operation. */
-    isActionExposed(model: string, action: string): boolean;
-    /** `isRoutePublic` for the HTTP method the action maps to. */
-    isRoutePublic(model: string, action: string): boolean;
-    /** Field-level read-permission slugs the step's model declares. */
-    requiredFieldPermissions(model: string, action: string): readonly string[];
-    /** Whether an app-level auth middleware is wired. Never invoked. */
-    appAuthConfigured: boolean;
-}
-
-export declare interface BrowserPreflightOptions {
-    layers: BrowserPreflightLayerSource;
-    /**
-     * The caller's published permission slugs, when the host publishes them.
-     * `null`/absent makes the field layer report `unknown` rather than guess.
-     */
-    permissions?: Iterable<string> | null;
-}
-
-export declare interface BrowserPreflightProviderOptions {
-    /**
-     * Resolution options shared by every request — classifier, intent registry,
-     * and any host-level runtime override. The per-request database handle and
-     * tenant come from the route.
-     */
-    resolve?: Omit<ResolvePlaybookOptions, 'plane' | 'db'>;
-    /**
-     * Derives the cache-partitioning principal identity for a request. Opaque and
-     * never echoed; defaults to the caller's permission slugs, which is the only
-     * caller-distinguishing input the static layers actually read.
-     */
-    principal?: (request: {
-        permissions?: Iterable<string>;
-        appAuthConfigured: boolean;
-    }) => string;
-}
-
-export declare function clearPlaybookCache(): void;
-
-/** Drops every cached preflight result. Use in tests. */
-export declare function clearPlaybookPreflightCache(): void;
-
-/**
- * Builds the provider wired into `APIConfig.playbookPreflight`.
- *
- * ```typescript
- * const api = new APIGenerator(manifest, {
- *   playbookPreflight: createBrowserPlaybookPreflight(),
- * });
- * ```
- *
- * Every unresolvable key — unknown, disabled, browser-invalid, unresolvable
- * intent — comes back as the single uniform unavailable report, so the endpoint
- * is not an enumeration oracle.
- */
-export declare function createBrowserPlaybookPreflight(options?: BrowserPreflightProviderOptions): (request: {
-    key: string;
-    plane: 'browser';
-    permissions?: Iterable<string>;
-    appAuthConfigured: boolean;
-    db?: unknown;
-}) => Promise<PlaybookPreflightReport>;
-
-/**
- * Browser-plane evaluator: the static layers only.
- *
- * - `action-exposure` — `isApiActionEnabled`. A disabled action is a hard,
- *   statically knowable deny (the route answers 405).
- * - `public-access` — `isRoutePublic`. A non-public route with **no** app auth
- *   middleware wired is a hard deny (the generator's fail-closed 401); with one
- *   wired it is `unknown`, because whether that middleware passes is exactly
- *   what preflight refuses to guess.
- * - `field-permissions` — the model's declared field read-permission slugs
- *   against the caller's published set. Missing slugs redact fields rather than
- *   fail the step, so the verdict stays `allow` and carries
- *   `reason: 'fields-redacted'` plus the missing slugs; an unpublished
- *   permission set reports `unknown`.
- * - `app-auth` — `unknown` whenever a middleware is wired. This is the layer an
- *   `authPredicate` seam would later fill in.
- *
- * An intent step never crosses the REST boundary at all, so it is reported
- * `unknown` against `intent-mount`: whether the surface is mounted and what its
- * staged-control review does are runtime facts of the page, not of the build.
- */
-export declare function createBrowserStepEvaluator(options: BrowserPreflightOptions): PreflightStepEvaluator;
-
-/**
- * A layer source reading the generated REST surface's own static rules.
- *
- * A model this build does not register resolves to no object name, and every
- * layer then fails closed: an unregistered model has no route, so a step naming
- * one can only die.
- */
-export declare function createRestPreflightLayerSource(options: {
-    appAuthConfigured: boolean;
-}): BrowserPreflightLayerSource;
-
-/**
- * Server-plane evaluator: the intersection of the persona tool allow-list and
- * the operation-permission predicate, per step, with nothing executed.
- *
- * An intent step is reported against its **declared** plane validity: an intent
- * that does not declare `server` is denied with reason `plane`, and one that
- * does is `unknown`, because server validity rides the #2446 command/ack bridge
- * whose acknowledgement is not statically knowable. This repeats a check
- * resolution already made, deliberately — the same defense-in-depth shape as
- * `assertToolAllowed()` gating both the tool offer and its execution.
- */
-export declare function createServerStepEvaluator(options: ServerPreflightOptions): PreflightStepEvaluator;
-
-/**
- * Registers a code-default playbook. Packages call this at import time so a
- * bundled playbook resolves without any application registration.
- */
-export declare function definePlaybook(input: PlaybookDefinitionInput): PlaybookDefinition;
-
-/**
- * Fail-closed capability classification, per epic #2585 invariant 3. Applied
- * whenever the host cannot tell us how a referenced operation is classified.
- */
-export declare const FAIL_CLOSED_CLASSIFICATION: CapabilityClassification;
-
-export declare function getPlaybookCacheTtlMs(): number;
-
-/** TTL applied to every cached preflight result. */
-export declare function getPlaybookPreflightCacheTtlMs(): number;
-
-export declare function normalizeEditableConfig(editable?: Partial<PlaybookEditableConfig>): PlaybookEditableConfig;
-
-/* Excluded from this release type: PACKAGE_VERSION_INITIALIZED */
-
-export declare const PLAYBOOK_PLANES: readonly PlaybookPlane[];
-
-/**
- * The one response every unresolvable playbook produces.
- *
- * Frozen and shared so an unknown key and an unauthorized key are byte-for-byte
- * identical: same shape, same values, no key echo, no reason code, no message.
- * Preflight answers only for playbooks resolvable through the caller's own
- * layer chain, and says nothing about anything else — including whether it
- * exists.
- */
-export declare const PLAYBOOK_PREFLIGHT_UNAVAILABLE: PlaybookPreflightUnavailableReport;
-
-export declare interface PlaybookAcceptance {
-    ok: true;
-    plan: PlaybookPlan;
-}
-
-export declare interface PlaybookCacheValue {
-    key: string;
-    title: string;
-    description: string;
-    planes: readonly PlaybookPlane[];
-    onStepFailure: PlaybookFailurePolicy;
-    enabled: boolean;
-    metadata: PlaybookMetadata;
-}
-
-/**
- * A partial override from any layer above the code default. There is no
- * `steps` key, and supplying one is rejected rather than ignored.
- */
-export declare interface PlaybookConfigOverrideInput {
-    title?: string | null;
-    description?: string | null;
-    planes?: readonly PlaybookPlane[] | null;
-    onStepFailure?: PlaybookFailurePolicy | null;
-    enabled?: boolean | null;
-    metadata?: PlaybookMetadata | null;
-    [key: string]: unknown;
-}
-
-export declare interface PlaybookDefinition {
-    key: string;
-    title: string;
-    description: string;
-    steps: readonly PlaybookStep[];
-    planes: readonly PlaybookPlane[];
-    onStepFailure: PlaybookFailurePolicy;
-    enabled: boolean;
-    metadata: PlaybookMetadata;
-    editable: PlaybookEditableConfig;
-}
-
-export declare interface PlaybookDefinitionInput {
-    key: string;
-    title: string;
-    description: string;
-    steps: readonly PlaybookStep[];
-    /**
-     * Planes this playbook is valid on. Defaults to both planes when every step
-     * is a model operation, and to `['browser']` when any step is a view intent
-     * — server validity for an intent-bearing playbook rides the #2446 browser
-     * command/ack bridge and must be declared explicitly.
-     */
-    planes?: readonly PlaybookPlane[];
-    onStepFailure?: PlaybookFailurePolicy;
-    enabled?: boolean;
-    metadata?: PlaybookMetadata | null;
-    editable?: Partial<PlaybookEditableConfig>;
-}
-
-/**
- * Fields a stored override layer may change when the definition opts in.
- *
- * `steps` is deliberately absent: it is structurally non-editable, not merely
- * defaulted false. No override layer can carry a step list at all.
- */
-export declare interface PlaybookEditableConfig {
-    title: boolean;
-    description: boolean;
-    planes: boolean;
-    onStepFailure: boolean;
-    enabled: boolean;
-    metadata: boolean;
-}
-
-/**
- * What an agent does when a step fails partway through a plan. Playbooks are
- * scripts, never atomic units, so there is no compensation: the definition
- * says only whether the remainder of the plan is abandoned.
- */
-export declare type PlaybookFailurePolicy = 'abort' | 'continue';
-
-/**
- * Record returned by an intent registry for a declared view intent.
- *
- * Seam for #2588: until an intent registry exists, no resolver is supplied and
- * an intent step fails resolution closed.
- */
-export declare interface PlaybookIntentRecord {
-    id: string;
-    classification?: CapabilityDeclaration | null;
-    planes?: readonly PlaybookPlane[] | null;
-}
-
-/** Seam for #2588. */
-export declare type PlaybookIntentResolver = (id: string) => PlaybookIntentRecord | null | undefined;
-
-/**
- * A step naming a declared view intent by its identity (#2588). Valid only
- * where a surface is mounted.
- */
-export declare interface PlaybookIntentStep {
-    kind: 'intent';
-    /** Declared intent identity from the #2588 intent registry. */
-    id: string;
-    label?: string;
-    description?: string;
-    optional?: boolean;
-}
-
-/** One normalized override layer. `null` means "clear"; `undefined` means "inherit". */
-export declare interface PlaybookLayer {
-    title?: string | null;
-    description?: string | null;
-    planes?: readonly PlaybookPlane[] | null;
-    onStepFailure?: PlaybookFailurePolicy | null;
-    enabled?: boolean | null;
-    metadata?: PlaybookMetadata | null;
-}
-
-export declare type PlaybookMetadata = Record<string, unknown>;
-
-/**
- * Resolves the capability classification of a referenced model operation.
- *
- * Playbooks never classify a step themselves. A host that knows the emitted
- * build-time classification (core's `tool-schema.ts` output, or the runtime
- * manifest) supplies it here; anything it does not know resolves fail-closed
- * to `{ effect: 'destructive', idempotent: false, openWorld: true }`.
- */
-export declare type PlaybookOperationClassifier = (step: PlaybookOperationStep) => CapabilityDeclaration | null | undefined;
-
-/**
- * A step naming a model operation by qualified pair — the same qualified
- * form STI discriminators and `@crossPackageRef` already use. Never a
- * generated tool name: that is derived from model, action, and namespace and
- * would silently orphan stored tenant overrides on a namespace change.
- *
- * The step never classifies itself; classification is inherited from the
- * referenced operation (see {@link PlaybookOperationClassifier}).
- */
-export declare interface PlaybookOperationStep {
-    kind: 'operation';
-    /** Qualified model name, e.g. `@happyvertical/smrt-commerce:Order`. */
-    model: string;
-    /** Operation name exposed by the model's `@smrt({ api })` surface. */
-    action: string;
-    /** Human-facing label for the agent's narration of this step. */
-    label?: string;
-    /** Longer human-facing description of the step. */
-    description?: string;
-    /** When true, an agent may skip this step without abandoning the plan. */
-    optional?: boolean;
-}
-
-/**
- * Stored app-level (`tenantId = null`) and tenant-level playbook overrides.
- *
- * There is deliberately **no `steps` column**. `steps` is structurally
- * non-editable: an override layer has nowhere to put a step list, and
- * assigning one is rejected in `save()` rather than silently dropped. That is
- * the description-behavior guarantee from epic #2585 — an agent announcing
- * "checking out your cart" must not be following a rewritten script.
- */
-export declare class PlaybookOverride extends SmrtObject {
-    key: string;
-    tenantId: string | null;
-    title: string | null;
-    description: string | null;
-    /** JSON array of plane names; null inherits the lower layer. */
-    planes: string | null;
-    onStepFailure: string | null;
-    /** Tri-state: null inherits, false disables. True can never widen. */
-    enabled: boolean | null;
-    /** JSON object; stored as a string with guarded get/set helpers. */
-    metadata: string | null;
-    constructor(options?: PlaybookOverrideOptions);
-    getMetadata(): PlaybookMetadata;
-    setMetadata(metadata: PlaybookMetadata | null): void;
-    getPlanes(): readonly PlaybookPlane[] | null;
-    setPlanes(planes: readonly PlaybookPlane[] | null): void;
-    toPlaybookLayer(): PlaybookLayer;
-    save(): Promise<this>;
-    private saveAfterIdentityChange;
-    private saveAfterIdentityChangeInTransaction;
-    private saveAfterIdentityChangeWithDeferredDelete;
-    delete(): Promise<void>;
-    private validatePlaybookOverride;
-    private getLowerPrecedenceLayers;
-    private normalizeForPersistence;
-    private getPersistedIdentity;
-}
-
-export declare class PlaybookOverrideCollection extends SmrtCollection<PlaybookOverride> {
-    static readonly _itemClass: typeof PlaybookOverride;
-    private excludeOverrideId;
-    getAppOverride(key: string, options?: {
-        excludeId?: string;
-    }): Promise<PlaybookOverride | null>;
-    getTenantOverride(key: string, tenantId: string, options?: {
-        excludeId?: string;
-    }): Promise<PlaybookOverride | null>;
-    getResolutionLayers(key: string, tenantId?: string | null, options?: {
-        excludeId?: string;
-    }): Promise<{
-        app: PlaybookOverride | null;
-        tenant: PlaybookOverride | null;
-    }>;
-}
-
-export declare interface PlaybookOverrideOptions extends SmrtObjectOptions, PlaybookOverrideOptions_2 {
-}
-
-declare interface PlaybookOverrideOptions_2 {
-    key?: string;
-    tenantId?: string | null;
-    title?: string | null;
-    description?: string | null;
-    planes?: string | readonly PlaybookPlane[] | null;
-    onStepFailure?: PlaybookFailurePolicy | null;
-    enabled?: boolean | null;
-    metadata?: string | PlaybookMetadata | null;
-}
-
-export declare interface PlaybookPackageConfig {
-    playbooks?: Record<string, PlaybookConfigOverrideInput>;
-    [key: string]: unknown;
-}
-
-/**
- * The output of resolution: a plan an agent follows step by step. Nothing in
- * this package executes a step, and the plan is not an authority boundary —
- * every step is authorized independently where it runs.
- */
-export declare interface PlaybookPlan {
-    key: string;
-    title: string;
-    description: string;
-    plane: PlaybookPlane;
-    planes: readonly PlaybookPlane[];
-    onStepFailure: PlaybookFailurePolicy;
-    metadata: PlaybookMetadata;
-    steps: readonly PlaybookPlanStep[];
-}
-
-/**
- * Execution planes a playbook can declare validity for.
- *
- * `browser` covers WebMCP / in-page agents driving mounted surfaces;
- * `server` covers Node MCP, CLI, and in-app agents running under
- * `executeAsPrincipal`.
- */
-export declare type PlaybookPlane = 'browser' | 'server';
-
-/** One step of a resolved plan, with its inherited classification. */
-export declare interface PlaybookPlanStep {
-    index: number;
-    step: PlaybookStep;
-    classification: CapabilityClassification;
-    /** True when the classification is the fail-closed default. */
-    classificationDeclared: boolean;
-}
-
-export declare interface PlaybookPreflightAvailableReport {
-    available: true;
-    /**
-     * Literal `true` on every report, as a type-level reminder: a report is a
-     * prediction, never a grant, and every step is authorized again where it
-     * executes.
-     */
-    advisory: true;
-    key: string;
-    plane: PlaybookPlane;
-    title: string;
-    description: string;
-    verdict: PreflightVerdict;
-    steps: readonly PreflightStepReport[];
-    summary: PreflightSummary;
-}
-
-/** A preflight result. Advisory only — see the two variants above. */
-export declare type PlaybookPreflightReport = PlaybookPreflightAvailableReport | PlaybookPreflightUnavailableReport;
-
-export declare interface PlaybookPreflightRequest {
-    key: string;
-    plane: PlaybookPlane;
-    /**
-     * Opaque, caller-scoped principal identity used to partition the cache. It is
-     * never echoed in the report and never consulted for authority. The cache key
-     * also folds in `resolve.tenantId`, so a principal string need not encode the
-     * tenant to stay correct.
-     */
-    principal: string;
-    /** Options handed to `resolvePlaybook()` — the caller's own layer chain. */
-    resolve?: ResolvePlaybookOptions;
-    /** Evaluates each resolved step. */
-    evaluate: PreflightStepEvaluator;
-}
-
-/**
- * The single, uniform answer for every playbook the caller's own layer chain
- * cannot resolve. An unknown key and an unauthorized key produce this exact
- * frozen value, so preflight is not an enumeration oracle: it carries no key,
- * no plane, and no reason to tell the two apart.
- */
-export declare interface PlaybookPreflightUnavailableReport {
-    available: false;
-    advisory: true;
-    verdict: 'deny';
-    steps: readonly [];
-    summary: PreflightSummary;
-}
-
-/**
- * Global process registry of code-default playbooks, keyed by namespaced key.
- *
- * Held on `globalThis` so it survives HMR, mirroring `PromptRegistry`.
- */
-export declare const PlaybookRegistry: {
-    register(input: PlaybookDefinitionInput): PlaybookDefinition;
-    get(key: string): PlaybookDefinition | undefined;
-    has(key: string): boolean;
-    getAll(): PlaybookDefinition[];
-    clear(): void;
-};
-
-export declare interface PlaybookRejection {
-    ok: false;
-    reason: PlaybookRejectionReason;
-    message: string;
-    key: string;
-    /** Index of the offending step, when the rejection is step-scoped. */
-    stepIndex?: number;
-}
-
-export declare type PlaybookRejectionReason = 'unknown-playbook' | 'disabled' | 'plane-not-declared' | 'intent-registry-unavailable' | 'unknown-intent' | 'intent-plane-not-declared';
-
-/** Resolution fails closed: every rejection carries a specific reason. */
-export declare type PlaybookResolution = PlaybookAcceptance | PlaybookRejection;
-
-/** A playbook step. Exactly two kinds exist in v1; playbooks cannot nest. */
-export declare type PlaybookStep = PlaybookOperationStep | PlaybookIntentStep;
-
-/**
- * The authority layers preflight reports on. The two planes are deliberately
- * asymmetric and report different layers:
- *
- * - server plane — `tool-allowlist`, `operation-permission`, and `plane` for an
- *   intent step;
- * - browser plane — `action-exposure`, `public-access`, `field-permissions`,
- *   `app-auth`, and `intent-mount` for an intent step.
- */
-export declare type PreflightLayer = 'tool-allowlist' | 'operation-permission' | 'plane' | 'action-exposure' | 'public-access' | 'field-permissions' | 'app-auth' | 'intent-mount';
-
-/** One authority layer's verdict for one step. */
-export declare interface PreflightLayerReport {
-    layer: PreflightLayer;
-    verdict: PreflightVerdict;
-    reason: PreflightReason;
-    /**
-     * Permission slugs this layer found missing, when it knows them. Present only
-     * on layers that evaluate a slug set.
-     */
-    missingPermissions?: readonly string[];
-}
-
-/**
- * Decomposes a resolved plan into per-step verdicts using `evaluate`.
- *
- * Every step is evaluated — evaluation does not short-circuit on the first
- * denial, because the point of preflight is to show the caller *which* step of
- * five would die, not merely that one would.
- */
-export declare function preflightPlan(plan: PlaybookPlan, evaluate: PreflightStepEvaluator): Promise<PlaybookPreflightAvailableReport>;
-
-/**
- * Preflights one playbook for one caller on one plane.
- *
- * Resolves through the **caller's own layer chain** (their tenant, their
- * overrides, their plane), decomposes the plan, and evaluates each step with the
- * plane's evaluator. Any playbook the chain cannot resolve — unknown, disabled,
- * wrong plane, unresolvable intent — returns the single
- * {@link PLAYBOOK_PREFLIGHT_UNAVAILABLE} value.
- *
- * Results are cached per `(principal, key, plane)` under the playbook cache's
- * generation counter; see `preflight-cache.ts` for why that is safe.
- */
-export declare function preflightPlaybook(request: PlaybookPreflightRequest): Promise<PlaybookPreflightReport>;
-
-/** Why a layer reached its verdict. A stable code, never a free-form message. */
-export declare type PreflightReason = 'ok' | 'tool-not-allowed' | 'permission-denied' | 'permission-unknown' | 'plane' | 'action-not-exposed' | 'not-public' | 'auth-required' | 'app-auth-not-evaluated' | 'app-auth-not-configured' | 'fields-redacted' | 'field-permissions-unknown' | 'intent-not-mounted' | 'intent-bridge-not-evaluated' | 'not-evaluated';
-
-/** What a step evaluator returns; `preflightPlan` supplies `index` and `kind`. */
-export declare interface PreflightStepEvaluation {
-    layers: readonly PreflightLayerReport[];
-}
-
-/** Evaluates one resolved plan step without executing any part of it. */
-export declare type PreflightStepEvaluator = (step: PlaybookPlanStep) => PreflightStepEvaluation | Promise<PreflightStepEvaluation>;
-
-/** A step's aggregate verdict plus the per-layer detail behind it. */
-export declare interface PreflightStepReport {
-    index: number;
-    kind: PlaybookStep['kind'];
-    verdict: PreflightVerdict;
-    /** Reason of the first layer that produced the step's aggregate verdict. */
-    reason: PreflightReason;
-    layers: readonly PreflightLayerReport[];
-}
-
-export declare interface PreflightSummary {
-    allow: number;
-    deny: number;
-    unknown: number;
-}
-
-/**
- * Verdict for one authority layer, one step, or a whole plan.
- *
- * `unknown` is a first-class answer, never a rounded-down `allow`: a layer that
- * cannot be evaluated without executing something says so.
- */
-export declare type PreflightVerdict = 'allow' | 'deny' | 'unknown';
-
-/**
- * Resolves a playbook to a plan for a caller on a given plane.
- *
- * Returns a discriminated result rather than throwing: resolution fails closed
- * and every rejection names a specific reason. Nothing here executes a step —
- * the plan is followed step by step by the agent, and each step is authorized
- * independently at the REST boundary or by `PrincipalRun.assertToolAllowed()`.
- */
-export declare function resolvePlaybook(key: string, options?: ResolvePlaybookOptions): Promise<PlaybookResolution>;
-
-export declare interface ResolvePlaybookOptions {
-    db?: SmrtClassOptions['db'];
-    tenantId?: string | null;
-    /** Plane the calling agent runs on. Defaults to `'server'`. */
-    plane?: PlaybookPlane;
-    /** Highest-precedence layer, supplied per call. */
-    override?: PlaybookConfigOverrideInput;
-    /** Host-supplied classification source for model-operation steps. */
-    classifier?: PlaybookOperationClassifier;
-    /** Host-supplied intent registry (#2588). */
-    intents?: PlaybookIntentResolver;
-}
-
-export declare interface ServerPreflightOptions {
-    /** `PrincipalRun.isToolAllowed` for the slug that gates this step. */
-    isToolAllowed(step: PlaybookOperationStep): boolean;
-    /**
-     * The operation-permission predicate. Evaluates the catalog gate for the
-     * step's `(collection, action)` without performing the operation.
-     */
-    checkOperationPermission(step: PlaybookOperationStep): PreflightVerdict | Promise<PreflightVerdict>;
-    /** Declared plane validity of a view intent, from the #2588 registry. */
-    intentPlanes?(id: string): readonly PlaybookPlane[] | null | undefined;
-}
-
-/** Fail-closed combination: `deny` beats `unknown` beats `allow`. */
-export declare function worstVerdict(left: PreflightVerdict, right: PreflightVerdict): PreflightVerdict;
-
-export { }
-
-
-declare global {
-    var __smrtPlaybookRegistry: Map<string, PlaybookDefinition> | undefined;
-}
+/**
+ * @happyvertical/smrt-playbooks
+ *
+ * Code-first playbooks — named, described, layered step sequences an agent
+ * follows — with config, app-level, tenant-level, and runtime overrides.
+ *
+ * A playbook resolves to a plan the agent executes step by step. Nothing in
+ * this package executes a step, so a playbook is never an authority boundary:
+ * every step is authorized independently at the REST boundary or, server-side,
+ * by `PrincipalRun.assertToolAllowed()`.
+ *
+ * @packageDocumentation
+ */
+import './__smrt-register__.js';
+export { clearPlaybookCache, getPlaybookCacheTtlMs } from './cache.js';
+export { PlaybookOverrideCollection } from './collections/PlaybookOverrideCollection.js';
+export { PlaybookOverride, type PlaybookOverrideOptions, } from './models/PlaybookOverride.js';
+export { definePlaybook, PlaybookRegistry } from './playbook-registry.js';
+export { resolvePlaybook } from './playbook-resolver.js';
+export { createBrowserStepEvaluator, createServerStepEvaluator, PLAYBOOK_PREFLIGHT_UNAVAILABLE, preflightPlan, preflightPlaybook, worstVerdict, } from './preflight.js';
+export { clearPlaybookPreflightCache, getPlaybookPreflightCacheTtlMs, } from './preflight-cache.js';
+export type { BrowserPreflightLayerSource, BrowserPreflightOptions, PlaybookPreflightAvailableReport, PlaybookPreflightReport, PlaybookPreflightRequest, PlaybookPreflightUnavailableReport, PreflightLayer, PreflightLayerReport, PreflightReason, PreflightStepEvaluation, PreflightStepEvaluator, PreflightStepReport, PreflightSummary, PreflightVerdict, ServerPreflightOptions, } from './preflight-types.js';
+export { type BrowserPreflightProviderOptions, createBrowserPlaybookPreflight, createRestPreflightLayerSource, } from './rest-preflight.js';
+export type { PlaybookAcceptance, PlaybookCacheValue, PlaybookConfigOverrideInput, PlaybookDefinition, PlaybookDefinitionInput, PlaybookEditableConfig, PlaybookFailurePolicy, PlaybookIntentRecord, PlaybookIntentResolver, PlaybookIntentStep, PlaybookLayer, PlaybookMetadata, PlaybookOperationClassifier, PlaybookOperationStep, PlaybookPackageConfig, PlaybookPlan, PlaybookPlane, PlaybookPlanStep, PlaybookRejection, PlaybookRejectionReason, PlaybookResolution, PlaybookStep, ResolvePlaybookOptions, } from './types.js';
+export { PLAYBOOK_PLANES } from './types.js';
+export { FAIL_CLOSED_CLASSIFICATION, normalizeEditableConfig, } from './utils.js';
+/** @internal */
+export declare const PACKAGE_VERSION_INITIALIZED = true;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,wBAAwB,CAAC;AAEhC,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,GAC7B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,8BAA8B,EAC9B,aAAa,EACb,iBAAiB,EACjB,YAAY,GACb,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,2BAA2B,EAC3B,uBAAuB,EACvB,gCAAgC,EAChC,uBAAuB,EACvB,wBAAwB,EACxB,kCAAkC,EAClC,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,+BAA+B,EACpC,8BAA8B,EAC9B,8BAA8B,GAC/B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,2BAA2B,EAC3B,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,2BAA2B,EAC3B,qBAAqB,EACrB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EACvB,kBAAkB,EAClB,YAAY,EACZ,sBAAsB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAEpB,gBAAgB;AAChB,eAAO,MAAM,2BAA2B,OAAO,CAAC"}