@happyvertical/smrt-sales 0.40.0 → 0.40.2

package/AGENTS.md

@@ -1,13 +1,14 @@
 # @happyvertical/smrt-sales
 
-Modular sales: CRM (Leads, Opportunities, Pipelines), referral intake with versioned attribution policies, a neutral commissions financial core with immutable term snapshots, and reusable Svelte surfaces. One installable package, four modules with distinct subpath exports:
+Modular sales: provider-neutral agreement execution, CRM, referral intake, a neutral commissions financial core, and reusable Svelte surfaces. One installable package with distinct subpath exports:
 
+- `@happyvertical/smrt-sales/agreements`
 - `@happyvertical/smrt-sales/crm`
 - `@happyvertical/smrt-sales/referrals`
 - `@happyvertical/smrt-sales/commissions`
 - `@happyvertical/smrt-sales/svelte`
 
-The root export re-exports every TS module. Internal module dependency order is `crm → commissions` and `referrals → commissions` (by string references only); `commissions` never imports from `crm`/`referrals` and never assumes advertising, Referral, Lead, or Opportunity semantics.
+The root export re-exports every TS module. `agreements` depends on the provider-neutral `@happyvertical/signatures` contract and `smrt-assets`; provider credentials stay in the injected SDK adapter/secret store. `referrals` binds its versioned terms to `agreements`.
 
 ## Validation
 
@@ -22,6 +23,13 @@ Referrers and Sales Representatives are **distinct roles** and stay that way. Bo
 
 ## Modules
 
+### agreements — verified execution evidence
+
+- **AgreementExecution**: private required-tenant orchestration state keyed by `(tenant_id, idempotency_key)`, with a collision-checked provider request/status, an expiring create-operation lease, source version/hash/size/Asset, intended signer identity/auth method, cancellation/expiry, reconciliation, exact staged artifact metadata, and secret-store references only.
+- **AgreementExecutionEvent**: private append-only evidence for verified webhooks and operator/provider operations. Provider events are deduped by tenant/provider replay key; explicit occurrence/first-receipt timestamps and the exact payload/hash are retained, while signature headers are never stored. A later receipt time for the same verified provider event is an idempotent replay. Stale, regressive, or conflicting terminal events are audited without regressing lifecycle state or creating executed evidence.
+- **ExecutedAgreement**: immutable read-only source version plus signed-document and audit-trail Asset ids/hashes/sizes/filenames/media types, completed signer evidence, acceptance/effective dates, and supersession reference. Amendments create new records.
+- **AgreementExecutionService**: accepts an SDK `SignatureProvider` and shared `AssetRuntimeLike`; enforces ambient tenant equality, expiring remote-attempt fencing, create idempotency, verified webhook ingestion/replay, tenant-fenced lifecycle compare-and-set with monotonic provider-event ordering, partial audit/failure updates that cannot overwrite lifecycle state, cancellation/expiry/reconciliation, exact artifact hashing, and immutable finalization. An expired create lease may be reclaimed only when the provider advertises atomic idempotency; otherwise a create with no confirmed request id must be reconciled/adopted before retry.
+
 ### commissions — neutral financial core
 
 - **Earner**: `profileId`, `status` (`pending|active|suspended`), `payoutMethod` (`bank_transfer|check|paypal|credit|other`), `payoutThresholdCents`, `payoutScheduleKey` (open string: `manual`, `monthly`, …), `currency`, `metadata`.
@@ -53,9 +61,9 @@ Referrers and Sales Representatives are **distinct roles** and stay that way. Bo
 - **ReferralTouch**: immutable attribution evidence (`click|code_entry|manual_assignment|partner_entry`) with subject hints and evidence JSON.
 - **Referral**: the introduction — generic qualifying target (`targetKind`/`targetId`: lead, opportunity, client, project, subscription, …), resolved policy version, credit fraction (splits create sibling Referrals sharing `splitGroupId`), lifecycle `pending → attributed → qualified | disqualified | expired | under_review`.
 - **AttributionException**: conflict review queue. Conclusive policy resolves automatically; ambiguity creates an exception; overrides require a `resolutionReason` and are audited.
-- **ReferralAgreement**: versioned per-Referrer terms binding — pins `commissionPlanKey`/`planVersion`, effective dating, optional cross-package string refs to a commerce Contract and executed-artifact evidence (e-signature execution lives downstream).
+- **ReferralAgreement**: versioned per-Referrer terms binding — pins `commissionPlanKey`/`planVersion`, effective dating, and an immutable `ExecutedAgreement` before activation. Amendments are fresh unsigned drafts and never inherit execution evidence.
 - **ReferralTermSnapshot**: immutable at qualification — freezes agreement/plan/policy version refs plus the calculation inputs needed to reproduce every later earning.
-- **Services**: `AttributionService` (resolve touches → Referral(s) or exception; typed refusals `existing_client_ineligible | no_active_policy | no_eligible_touches`; `override()` requires a reason, audits via a resolved AttributionException, pins the displaced credit's policy version, and throws `QualifiedReferralOverrideError` on qualified referrals), `ReferralQualificationService` (eligibility + frozen snapshot + transition; `requalify()` is the explicit apply-amendment path), `ReferralCommissionService` (bridge: qualified Referral + EarningEvent → Commissions through the snapshot with `termsSnapshotKind = REFERRAL_TERMS_SNAPSHOT_KIND`; occurrence limits counted per `(termsSnapshotId, componentKey)`; fully idempotent on replay).
+- **Services**: `ReferralAgreementExecutionService` binds generated Referral Agreement versions to the generic execution service and activates/supersedes them transactionally with future-effective amendment support; `AttributionService`, `ReferralQualificationService`, and `ReferralCommissionService` retain their existing attribution/qualification/earning responsibilities.
 
 ### svelte
 
@@ -71,7 +79,7 @@ Every model is `@TenantScoped({ mode: 'optional' })` with `@tenantId({ nullable:
 
 ## Cross-package references (plain strings)
 
-`profileId` → smrt-profiles Profile; `invoiceId` (CommissionPayout) → smrt-commerce Invoice; `contractRef` (ReferralAgreement) → smrt-commerce Contract. No static imports of sibling domain packages.
+`profileId` → smrt-profiles Profile; `invoiceId` (CommissionPayout) → smrt-commerce Invoice; agreement artifacts → smrt-assets Asset ids. No static imports of unrelated sibling domain packages.
 
 ## smrt-affiliates migration
 
@@ -90,7 +98,7 @@ Every model is `@TenantScoped({ mode: 'optional' })` with `@tenantId({ nullable:
 - **`reject()` alone strands rows**: the model method only flips status — always reject through `transitionPayoutForSource`, which releases the batch's membership in the same transaction; stamped rows on a rejected payout would be unsettleable forever.
 - **The payout source stamp is derived data, never authorization**: `sourceKind`/`sourceId` on CommissionPayout index the history listing; both the listing and the lifecycle service re-verify actual membership and fail closed when the stamp cannot be proven.
 - **`sweepClearing` treats `clearingEndsAt: null` as immediately sweepable** (no clearing configured ⇒ nothing to wait for).
-- **Agreement freeze scope**: activating a ReferralAgreement freezes referrer/program/version/plan refs/clearingDays/approvalMode/effectiveFrom; `effectiveTo` (end-dating) and the evidence fields (`contractRef`, artifact url/hash, `acceptanceEvidence`) stay writable — e-signature completes downstream.
+- **Agreement freeze scope**: activating a ReferralAgreement requires and freezes its execution/evidence refs along with its commercial terms. `effectiveTo` remains writable for explicit end-dating; signed bytes, hashes, signer evidence, and audit trail exist only on immutable ExecutedAgreement/Asset records.
 - **Circular FK pair by design**: `Referral.snapshotId ↔ ReferralTermSnapshot.referralId`. Fine on SQLite (and no cross-table DDL constraints are emitted for these string FKs); keep an eye on strict-DDL environments.
 - **Attribution resolution is single-writer per (target, program)**: `resolve()` is idempotent against PERSISTED state, but two workers resolving the same target concurrently can both pass the existence check and create duplicate credit — the collection layer has no cross-row transaction (the same stance as payout batching, which relies on disjoint scopes for concurrency). Run intake resolution serially per target (it naturally is, in a request handler); duplicates are visible in the portal and correctable via `override()`.
 - **`ObjectRegistry.getConfig(X)` needs the class module imported** (decorator side effects) — manifest-only registration doesn't carry api/mcp/conflictColumns; tests asserting surface configs need a side-effect import of the module barrel.

package/dist/agreements/collections/AgreementExecutionCollection.d.ts

@@ -0,0 +1,106 @@
+import { SmrtCollection } from '@happyvertical/smrt-core';
+import { AgreementExecution } from '../models/AgreementExecution.js';
+import { AgreementExecutionStatus } from '../types.js';
+export interface ClaimAgreementCreateAttemptInput {
+    tenantId: string;
+    executionId: string;
+    expectedAttemptCount: number;
+    expectedLeaseId: string;
+    expectedStatus: string;
+    expectedLastError: string;
+    operationId: string;
+    leaseExpiresAt: Date;
+    now: Date;
+}
+export interface CompleteAgreementCreateAttemptInput {
+    tenantId: string;
+    executionId: string;
+    operationId: string;
+    provider: string;
+    providerRequestId: string;
+    status: AgreementExecutionStatus;
+    expiresAt: Date | null;
+}
+export interface FailAgreementCreateAttemptInput {
+    tenantId: string;
+    executionId: string;
+    operationId: string;
+    lastError: string;
+}
+export interface BindAgreementProviderRequestInput {
+    tenantId: string;
+    executionId: string;
+    provider: string;
+    providerRequestId: string;
+}
+export interface CompareAndSetAgreementLifecycleInput {
+    tenantId: string;
+    executionId: string;
+    expectedStatus: AgreementExecutionStatus;
+    status: AgreementExecutionStatus;
+    expiresAt: Date | null;
+    cancellationReason: string;
+    lastProviderEventAt: Date;
+    lastReconciledAt: Date | null;
+    completedAt: Date | null;
+}
+export interface UpdateAgreementExecutionErrorInput {
+    tenantId: string;
+    executionId: string;
+    lastError: string;
+}
+export type AgreementEvidenceArtifactKind = 'signed_document' | 'audit_trail';
+export interface BindAgreementEvidenceArtifactInput {
+    tenantId: string;
+    executionId: string;
+    kind: AgreementEvidenceArtifactKind;
+    assetId: string;
+    sha256: string;
+    sizeBytes: number;
+    mediaType: string;
+    filename: string;
+}
+export declare class AgreementExecutionCollection extends SmrtCollection<AgreementExecution> {
+    static readonly _itemClass: typeof AgreementExecution;
+    findByIdempotencyKey(idempotencyKey: string): Promise<AgreementExecution | null>;
+    findByProviderRequest(provider: string, providerRequestId: string): Promise<AgreementExecution | null>;
+    /**
+     * Atomically claim an expired or cleared provider-create lease.
+     *
+     * The explicit tenant predicate and expected-state predicates make the raw
+     * compare-and-swap fail closed across workers. `RETURNING id` is used
+     * because not every database adapter reports affected-row counts reliably.
+     */
+    claimCreateAttempt(input: ClaimAgreementCreateAttemptInput): Promise<AgreementExecution | null>;
+    /**
+     * Persist a provider-create result only while the caller still owns its
+     * lease. This prevents a slow, expired attempt from overwriting a newer
+     * recovery attempt after returning from the provider.
+     */
+    completeCreateAttempt(input: CompleteAgreementCreateAttemptInput): Promise<AgreementExecution | null>;
+    /** Record a create failure only while the caller still owns its lease. */
+    failCreateAttempt(input: FailAgreementCreateAttemptInput): Promise<AgreementExecution | null>;
+    /** Bind an adopted provider request without saving a stale object snapshot. */
+    bindProviderRequest(input: BindAgreementProviderRequestInput): Promise<AgreementExecution | null>;
+    /**
+     * Apply provider lifecycle state only while status still matches the
+     * caller's snapshot and the candidate observation is not older than the
+     * persisted provider event. Service retries re-read the winner before
+     * deciding whether the candidate state remains monotonic.
+     */
+    compareAndSetLifecycle(input: CompareAndSetAgreementLifecycleInput): Promise<AgreementExecution | null>;
+    /** Increment audit attempts without writing any lifecycle columns. */
+    incrementAttemptCount(tenantId: string, executionId: string): Promise<AgreementExecution>;
+    /** Update failure diagnostics without writing a stale lifecycle snapshot. */
+    updateLastError(input: UpdateAgreementExecutionErrorInput): Promise<AgreementExecution>;
+    /**
+     * Bind one immutable evidence artifact with a tenant-fenced compare-and-swap.
+     * Concurrent finalizers can only publish one asset identity for each kind.
+     */
+    bindEvidenceArtifact(input: BindAgreementEvidenceArtifactInput): Promise<AgreementExecution | null>;
+    findBySource(sourceKind: string, sourceId: string): Promise<AgreementExecution[]>;
+    private assertCreateAttemptTenant;
+    private getReturnedExecution;
+}
+export default AgreementExecutionCollection;
+//# sourceMappingURL=AgreementExecutionCollection.d.ts.map

package/dist/agreements/collections/AgreementExecutionCollection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgreementExecutionCollection.d.ts","sourceRoot":"","sources":["../../../src/agreements/collections/AgreementExecutionCollection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE5D,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,IAAI,CAAC;IACrB,GAAG,EAAE,IAAI,CAAC;CACX;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,wBAAwB,CAAC;IACjC,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,wBAAwB,CAAC;IACzC,MAAM,EAAE,wBAAwB,CAAC;IACjC,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,IAAI,CAAC;IAC1B,gBAAgB,EAAE,IAAI,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,6BAA6B,GAAG,iBAAiB,GAAG,aAAa,CAAC;AAE9E,MAAM,WAAW,kCAAkC;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,6BAA6B,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,4BAA6B,SAAQ,cAAc,CAAC,kBAAkB,CAAC;IAClF,MAAM,CAAC,QAAQ,CAAC,UAAU,4BAAsB;IAE1C,oBAAoB,CACxB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAK/B,qBAAqB,CACzB,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAQrC;;;;;;OAMG;IACG,kBAAkB,CACtB,KAAK,EAAE,gCAAgC,GACtC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAqCrC;;;;OAIG;IACG,qBAAqB,CACzB,KAAK,EAAE,mCAAmC,GACzC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IA8BrC,0EAA0E;IACpE,iBAAiB,CACrB,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAsBrC,+EAA+E;IACzE,mBAAmB,CACvB,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAsBrC;;;;;OAKG;IACG,sBAAsB,CAC1B,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IA8BrC,sEAAsE;IAChE,qBAAqB,CACzB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,kBAAkB,CAAC;IAkB9B,6EAA6E;IACvE,eAAe,CACnB,KAAK,EAAE,kCAAkC,GACxC,OAAO,CAAC,kBAAkB,CAAC;IAqB9B;;;OAGG;IACG,oBAAoB,CACxB,KAAK,EAAE,kCAAkC,GACxC,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IA0C/B,YAAY,CAChB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAOhC,OAAO,CAAC,yBAAyB;YAMnB,oBAAoB;CAOnC;AAED,eAAe,4BAA4B,CAAC"}

package/dist/agreements/collections/AgreementExecutionEventCollection.d.ts

@@ -0,0 +1,16 @@
+import { SmrtCollection } from '@happyvertical/smrt-core';
+import { AgreementExecutionEvent } from '../models/AgreementExecutionEvent.js';
+import { VerifiedAgreementExecutionEventOptions } from '../types.js';
+export declare class AgreementExecutionEventCollection extends SmrtCollection<AgreementExecutionEvent> {
+    static readonly _itemClass: typeof AgreementExecutionEvent;
+    findByDedupeKey(dedupeKey: string): Promise<AgreementExecutionEvent | null>;
+    recordVerified(options: VerifiedAgreementExecutionEventOptions): Promise<{
+        event: AgreementExecutionEvent;
+        created: boolean;
+    }>;
+    private assertSameVerifiedEvent;
+    findByExecution(executionId: string): Promise<AgreementExecutionEvent[]>;
+    findProviderEventsByExecution(executionId: string): Promise<AgreementExecutionEvent[]>;
+}
+export default AgreementExecutionEventCollection;
+//# sourceMappingURL=AgreementExecutionEventCollection.d.ts.map

package/dist/agreements/collections/AgreementExecutionEventCollection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgreementExecutionEventCollection.d.ts","sourceRoot":"","sources":["../../../src/agreements/collections/AgreementExecutionEventCollection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,aAAa,CAAC;AAG1E,qBAAa,iCAAkC,SAAQ,cAAc,CAAC,uBAAuB,CAAC;IAC5F,MAAM,CAAC,QAAQ,CAAC,UAAU,iCAA2B;IAE/C,eAAe,CACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IAKpC,cAAc,CAClB,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC;QAAE,KAAK,EAAE,uBAAuB,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAwChE,OAAO,CAAC,uBAAuB;IAyBzB,eAAe,CACnB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAO/B,6BAA6B,CACjC,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,uBAAuB,EAAE,CAAC;CAMtC;AAED,eAAe,iCAAiC,CAAC"}

package/dist/agreements/collections/ExecutedAgreementCollection.d.ts

@@ -0,0 +1,17 @@
+import { SmrtCollection } from '@happyvertical/smrt-core';
+import { ExecutedAgreement } from '../models/ExecutedAgreement.js';
+import { ExecutedAgreementOptions } from '../types.js';
+export declare class ExecutedAgreementCollection extends SmrtCollection<ExecutedAgreement> {
+    static readonly _itemClass: typeof ExecutedAgreement;
+    findByExecution(executionId: string): Promise<ExecutedAgreement | null>;
+    createImmutable(options: ExecutedAgreementOptions): Promise<{
+        agreement: ExecutedAgreement;
+        created: boolean;
+    }>;
+    private assertSameEvidence;
+    private assertCompleteEvidence;
+    findVersionsBySource(sourceKind: string, sourceId: string): Promise<ExecutedAgreement[]>;
+    effectiveForSource(sourceKind: string, sourceId: string, at?: Date): Promise<ExecutedAgreement | null>;
+}
+export default ExecutedAgreementCollection;
+//# sourceMappingURL=ExecutedAgreementCollection.d.ts.map

package/dist/agreements/collections/ExecutedAgreementCollection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutedAgreementCollection.d.ts","sourceRoot":"","sources":["../../../src/agreements/collections/ExecutedAgreementCollection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAG5D,qBAAa,2BAA4B,SAAQ,cAAc,CAAC,iBAAiB,CAAC;IAChF,MAAM,CAAC,QAAQ,CAAC,UAAU,2BAAqB;IAEzC,eAAe,CACnB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAK9B,eAAe,CACnB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC;QAAE,SAAS,EAAE,iBAAiB,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAoC9D,OAAO,CAAC,kBAAkB;IAwC1B,OAAO,CAAC,sBAAsB;IAgExB,oBAAoB,CACxB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAOzB,kBAAkB,CACtB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,EAAE,GAAE,IAAiB,GACpB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;CAIrC;AAED,eAAe,2BAA2B,CAAC"}

package/dist/agreements/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Provider-neutral agreement signature orchestration and immutable evidence.
+ *
+ * Provider adapters come from `@happyvertical/signatures`; this module owns
+ * tenant-scoped lifecycle, verified-event ingestion, Asset-backed evidence,
+ * idempotency, reconciliation, and versioned executed-agreement records.
+ *
+ * @packageDocumentation
+ */
+export { AgreementExecutionCollection } from './collections/AgreementExecutionCollection.js';
+export { AgreementExecutionEventCollection } from './collections/AgreementExecutionEventCollection.js';
+export { ExecutedAgreementCollection } from './collections/ExecutedAgreementCollection.js';
+export { AgreementExecution } from './models/AgreementExecution.js';
+export { AgreementExecutionEvent } from './models/AgreementExecutionEvent.js';
+export { ExecutedAgreement } from './models/ExecutedAgreement.js';
+export { type AdoptAgreementProviderRequestInput, type AgreementExecutionOperationInput, AgreementExecutionService, type AgreementExecutionServiceDeps, type CancelAgreementExecutionInput, type ExtendAgreementExecutionInput, } from './services/AgreementExecutionService.js';
+export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/agreements/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agreements/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,EAAE,iCAAiC,EAAE,MAAM,oDAAoD,CAAC;AACvG,OAAO,EAAE,2BAA2B,EAAE,MAAM,8CAA8C,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACL,KAAK,kCAAkC,EACvC,KAAK,gCAAgC,EACrC,yBAAyB,EACzB,KAAK,6BAA6B,EAClC,KAAK,6BAA6B,EAClC,KAAK,6BAA6B,GACnC,MAAM,yCAAyC,CAAC;AACjD,cAAc,YAAY,CAAC"}

package/dist/agreements/models/AgreementExecution.d.ts

@@ -0,0 +1,66 @@
+import { SmrtObject } from '@happyvertical/smrt-core';
+import { AgreementExecutionOptions, AgreementExecutionStatus, AgreementSignerIntent } from '../types.js';
+export declare class AgreementExecution extends SmrtObject {
+    tenantId: string;
+    provider: string;
+    /** Non-secret provider account/region reference used for operations. */
+    providerAccountRef: string;
+    /** SDK/SMRT secret-store reference only; never a credential value. */
+    credentialRef: string;
+    idempotencyKey: string;
+    sourceKind: string;
+    sourceId: string;
+    sourceVersion: number;
+    sourceAssetId: string;
+    sourceSha256: string;
+    sourceSizeBytes: number;
+    requestIntentSha256: string;
+    title: string;
+    signerIntent: string;
+    providerRequestId: string;
+    /** Unique tenant/provider/request binding fence; derived, never a secret. */
+    providerRequestKey: string | null;
+    status: AgreementExecutionStatus;
+    expiresAt: Date | null;
+    cancellationReason: string;
+    lastProviderEventAt: Date | null;
+    lastReconciledAt: Date | null;
+    completedAt: Date | null;
+    effectiveFrom: Date | null;
+    effectiveTo: Date | null;
+    /**
+     * Opaque prior-evidence provenance copied into the immutable result.
+     * The authoritative relationship is on ExecutedAgreement; making this
+     * mutable orchestration hint a foreign key would create a registry cycle.
+     */
+    supersedesExecutedAgreementId: string;
+    signedDocumentAssetId: string;
+    signedDocumentSha256: string;
+    signedDocumentSizeBytes: number;
+    signedDocumentMediaType: string;
+    signedDocumentFilename: string;
+    auditTrailAssetId: string;
+    auditTrailSha256: string;
+    auditTrailSizeBytes: number;
+    auditTrailMediaType: string;
+    auditTrailFilename: string;
+    attemptCount: number;
+    /** Operation id holding the current provider-create lease. */
+    createLeaseId: string;
+    /** A crashed create attempt stops fencing recovery after this instant. */
+    createLeaseExpiresAt: Date | null;
+    lastError: string;
+    metadata: string;
+    constructor(options?: AgreementExecutionOptions);
+    initialize(): Promise<this>;
+    save(): Promise<this>;
+    getSignerIntent(): AgreementSignerIntent[];
+    private captureIdentity;
+    private serializeIntent;
+    private serializeSignedDocumentEvidence;
+    private serializeAuditTrailEvidence;
+    private assertBoundValueUnchanged;
+    private syncProviderRequestKey;
+}
+export default AgreementExecution;
+//# sourceMappingURL=AgreementExecution.d.ts.map

package/dist/agreements/models/AgreementExecution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgreementExecution.d.ts","sourceRoot":"","sources":["../../../src/agreements/models/AgreementExecution.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAE3E,OAAO,EAGL,UAAU,EAEX,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EACV,yBAAyB,EACzB,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,aAAa,CAAC;AAgBrB,qBAOa,kBAAmB,SAAQ,UAAU;IAEhD,QAAQ,EAAE,MAAM,CAAM;IAGtB,QAAQ,EAAE,MAAM,CAAM;IAEtB,wEAAwE;IACxE,kBAAkB,EAAE,MAAM,CAAM;IAEhC,sEAAsE;IACtE,aAAa,EAAE,MAAM,CAAM;IAG3B,cAAc,EAAE,MAAM,CAAM;IAG5B,UAAU,EAAE,MAAM,CAAM;IAGxB,QAAQ,EAAE,MAAM,CAAM;IAEtB,aAAa,EAAE,MAAM,CAAK;IAG1B,aAAa,EAAE,MAAM,CAAM;IAE3B,YAAY,EAAE,MAAM,CAAM;IAC1B,eAAe,EAAE,MAAM,CAAK;IAC5B,mBAAmB,EAAE,MAAM,CAAM;IACjC,KAAK,EAAE,MAAM,CAAM;IACnB,YAAY,EAAE,MAAM,CAAQ;IAC5B,iBAAiB,EAAE,MAAM,CAAM;IAE/B,6EAA6E;IAE7E,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAQ;IAEzC,MAAM,EAAE,wBAAwB,CAAc;IAC9C,SAAS,EAAE,IAAI,GAAG,IAAI,CAAQ;IAC9B,kBAAkB,EAAE,MAAM,CAAM;IAChC,mBAAmB,EAAE,IAAI,GAAG,IAAI,CAAQ;IACxC,gBAAgB,EAAE,IAAI,GAAG,IAAI,CAAQ;IACrC,WAAW,EAAE,IAAI,GAAG,IAAI,CAAQ;IAChC,aAAa,EAAE,IAAI,GAAG,IAAI,CAAQ;IAClC,WAAW,EAAE,IAAI,GAAG,IAAI,CAAQ;IAEhC;;;;OAIG;IACH,6BAA6B,EAAE,MAAM,CAAM;IAG3C,qBAAqB,EAAE,MAAM,CAAM;IAEnC,oBAAoB,EAAE,MAAM,CAAM;IAClC,uBAAuB,EAAE,MAAM,CAAK;IACpC,uBAAuB,EAAE,MAAM,CAAM;IACrC,sBAAsB,EAAE,MAAM,CAAM;IAGpC,iBAAiB,EAAE,MAAM,CAAM;IAE/B,gBAAgB,EAAE,MAAM,CAAM;IAC9B,mBAAmB,EAAE,MAAM,CAAK;IAChC,mBAAmB,EAAE,MAAM,CAAM;IACjC,kBAAkB,EAAE,MAAM,CAAM;IAChC,YAAY,EAAE,MAAM,CAAK;IAEzB,8DAA8D;IAC9D,aAAa,EAAE,MAAM,CAAM;IAE3B,0EAA0E;IAC1E,oBAAoB,EAAE,IAAI,GAAG,IAAI,CAAQ;IAEzC,SAAS,EAAE,MAAM,CAAM;IACvB,QAAQ,EAAE,MAAM,CAAQ;gBAEZ,OAAO,GAAE,yBAA8B;IAkFpC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAc3B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAqCpC,eAAe,IAAI,qBAAqB,EAAE;IAS1C,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,eAAe;IAuBvB,OAAO,CAAC,+BAA+B;IAWvC,OAAO,CAAC,2BAA2B;IAWnC,OAAO,CAAC,yBAAyB;IAYjC,OAAO,CAAC,sBAAsB;CAkB/B;AAED,eAAe,kBAAkB,CAAC"}

package/dist/agreements/models/AgreementExecutionEvent.d.ts

@@ -0,0 +1,25 @@
+import { SmrtObject } from '@happyvertical/smrt-core';
+import { AgreementExecutionEventOptions, AgreementExecutionStatus } from '../types.js';
+export declare class AgreementExecutionEvent extends SmrtObject {
+    tenantId: string;
+    executionId: string;
+    provider: string;
+    providerEventId: string;
+    eventOrigin: string;
+    operationId: string;
+    dedupeKey: string;
+    orderingKey: string;
+    eventType: string;
+    status: AgreementExecutionStatus;
+    occurredAt: Date;
+    receivedAt: Date;
+    payloadSha256: string;
+    signerEvidence: string;
+    payload: string;
+    constructor(options?: AgreementExecutionEventOptions);
+    initialize(): Promise<this>;
+    save(): Promise<this>;
+    private serializeState;
+}
+export default AgreementExecutionEvent;
+//# sourceMappingURL=AgreementExecutionEvent.d.ts.map

package/dist/agreements/models/AgreementExecutionEvent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgreementExecutionEvent.d.ts","sourceRoot":"","sources":["../../../src/agreements/models/AgreementExecutionEvent.ts"],"names":[],"mappings":"AAAA,mEAAmE;AAEnE,OAAO,EAAqB,UAAU,EAAQ,MAAM,0BAA0B,CAAC;AAE/E,OAAO,KAAK,EACV,8BAA8B,EAC9B,wBAAwB,EACzB,MAAM,aAAa,CAAC;AAKrB,qBAOa,uBAAwB,SAAQ,UAAU;IAErD,QAAQ,EAAE,MAAM,CAAM;IAGtB,WAAW,EAAE,MAAM,CAAM;IAEzB,QAAQ,EAAE,MAAM,CAAM;IACtB,eAAe,EAAE,MAAM,CAAM;IAC7B,WAAW,EAAE,MAAM,CAAsB;IACzC,WAAW,EAAE,MAAM,CAAM;IAGzB,SAAS,EAAE,MAAM,CAAM;IAEvB,WAAW,EAAE,MAAM,CAAM;IACzB,SAAS,EAAE,MAAM,CAAM;IACvB,MAAM,EAAE,wBAAwB,CAAc;IAC9C,UAAU,EAAE,IAAI,CAAc;IAC9B,UAAU,EAAE,IAAI,CAAc;IAC9B,aAAa,EAAE,MAAM,CAAM;IAC3B,cAAc,EAAE,MAAM,CAAQ;IAC9B,OAAO,EAAE,MAAM,CAAQ;gBAEX,OAAO,GAAE,8BAAmC;IA4BzC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ3B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAapC,OAAO,CAAC,cAAc;CAmBvB;AAED,eAAe,uBAAuB,CAAC"}

package/dist/agreements/models/ExecutedAgreement.d.ts

@@ -0,0 +1,35 @@
+import { SmrtObject } from '@happyvertical/smrt-core';
+import { ExecutedAgreementOptions } from '../types.js';
+export declare class ExecutedAgreement extends SmrtObject {
+    tenantId: string;
+    executionId: string;
+    sourceKind: string;
+    sourceId: string;
+    sourceVersion: number;
+    sourceAssetId: string;
+    sourceSha256: string;
+    sourceSizeBytes: number;
+    signedDocumentAssetId: string;
+    signedDocumentSha256: string;
+    signedDocumentSizeBytes: number;
+    signedDocumentMediaType: string;
+    signedDocumentFilename: string;
+    auditTrailAssetId: string;
+    auditTrailSha256: string;
+    auditTrailSizeBytes: number;
+    auditTrailMediaType: string;
+    auditTrailFilename: string;
+    signerEvidence: string;
+    acceptedAt: Date;
+    effectiveFrom: Date | null;
+    effectiveTo: Date | null;
+    supersedesExecutedAgreementId: string;
+    metadata: string;
+    constructor(options?: ExecutedAgreementOptions);
+    initialize(): Promise<this>;
+    isEffectiveAt(at: Date): boolean;
+    save(): Promise<this>;
+    private serializeState;
+}
+export default ExecutedAgreement;
+//# sourceMappingURL=ExecutedAgreement.d.ts.map

package/dist/agreements/models/ExecutedAgreement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutedAgreement.d.ts","sourceRoot":"","sources":["../../../src/agreements/models/ExecutedAgreement.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAE/E,OAAO,EAIL,UAAU,EAEX,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAK5D,qBAOa,iBAAkB,SAAQ,UAAU;IAE/C,QAAQ,EAAE,MAAM,CAAM;IAGtB,WAAW,EAAE,MAAM,CAAM;IAGzB,UAAU,EAAE,MAAM,CAAM;IAGxB,QAAQ,EAAE,MAAM,CAAM;IAEtB,aAAa,EAAE,MAAM,CAAK;IAG1B,aAAa,EAAE,MAAM,CAAM;IAE3B,YAAY,EAAE,MAAM,CAAM;IAC1B,eAAe,EAAE,MAAM,CAAK;IAG5B,qBAAqB,EAAE,MAAM,CAAM;IAEnC,oBAAoB,EAAE,MAAM,CAAM;IAClC,uBAAuB,EAAE,MAAM,CAAK;IACpC,uBAAuB,EAAE,MAAM,CAAM;IACrC,sBAAsB,EAAE,MAAM,CAAM;IAGpC,iBAAiB,EAAE,MAAM,CAAM;IAE/B,gBAAgB,EAAE,MAAM,CAAM;IAC9B,mBAAmB,EAAE,MAAM,CAAK;IAChC,mBAAmB,EAAE,MAAM,CAAM;IACjC,kBAAkB,EAAE,MAAM,CAAM;IAChC,cAAc,EAAE,MAAM,CAAQ;IAC9B,UAAU,EAAE,IAAI,CAAc;IAC9B,aAAa,EAAE,IAAI,GAAG,IAAI,CAAQ;IAClC,WAAW,EAAE,IAAI,GAAG,IAAI,CAAQ;IAGhC,6BAA6B,EAAE,MAAM,CAAM;IAE3C,QAAQ,EAAE,MAAM,CAAQ;gBAEZ,OAAO,GAAE,wBAA6B;IAiDnC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAU1C,aAAa,CAAC,EAAE,EAAE,IAAI,GAAG,OAAO;IAOjB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAapC,OAAO,CAAC,cAAc;CA4BvB;AAED,eAAe,iBAAiB,CAAC"}

package/dist/agreements/services/AgreementExecutionService.d.ts

@@ -0,0 +1,85 @@
+import { SignatureProvider } from '@happyvertical/signatures';
+import { AssetRuntimeLike } from '@happyvertical/smrt-assets';
+import { AgreementExecutionCollection } from '../collections/AgreementExecutionCollection.js';
+import { AgreementExecutionEventCollection } from '../collections/AgreementExecutionEventCollection.js';
+import { ExecutedAgreementCollection } from '../collections/ExecutedAgreementCollection.js';
+import { AgreementExecutionResult, AgreementWebhookIngestionResult, CreateAgreementExecutionInput, IngestAgreementWebhookInput } from '../types.js';
+export interface AgreementExecutionServiceDeps {
+    provider: SignatureProvider;
+    assets: AssetRuntimeLike;
+    executions: AgreementExecutionCollection;
+    events: AgreementExecutionEventCollection;
+    executedAgreements: ExecutedAgreementCollection;
+    now?: () => Date;
+    createLeaseDurationMs?: number;
+}
+export interface AdoptAgreementProviderRequestInput {
+    tenantId: string;
+    executionId: string;
+    providerRequestId: string;
+    signal?: AbortSignal;
+}
+export interface AgreementExecutionOperationInput {
+    tenantId: string;
+    executionId: string;
+    signal?: AbortSignal;
+}
+export interface CancelAgreementExecutionInput extends AgreementExecutionOperationInput {
+    reason: string;
+}
+export interface ExtendAgreementExecutionInput extends AgreementExecutionOperationInput {
+    expiresAt: Date | string;
+    warnPrior?: boolean;
+}
+export declare class AgreementExecutionService {
+    private readonly deps;
+    private readonly now;
+    private readonly createLeaseDurationMs;
+    constructor(deps: AgreementExecutionServiceDeps);
+    createExecution(input: CreateAgreementExecutionInput): Promise<AgreementExecutionResult>;
+    private sendProviderRequest;
+    private resumeOrReplayCreate;
+    /**
+     * Bind an operator-reconciled provider request after an uncertain create.
+     * This is the safe recovery path for providers without atomic idempotency.
+     */
+    adoptProviderRequest(input: AdoptAgreementProviderRequestInput): Promise<AgreementExecutionResult>;
+    reconcile(input: AgreementExecutionOperationInput): Promise<AgreementExecutionResult>;
+    cancel(input: CancelAgreementExecutionInput): Promise<AgreementExecutionResult>;
+    extendExpiry(input: ExtendAgreementExecutionInput): Promise<AgreementExecutionResult>;
+    ingestWebhook(input: IngestAgreementWebhookInput): Promise<AgreementWebhookIngestionResult>;
+    private finalizeExecution;
+    private ensureEvidenceArtifact;
+    private retrieveAndStoreArtifact;
+    private getStoredArtifactMetadata;
+    private requireStoredArtifactMetadata;
+    private removeStoredAsset;
+    private ensureExecutedAgreementAssociations;
+    private applyProviderState;
+    private persistLifecycleState;
+    private assertProviderRequest;
+    private assertArtifact;
+    private assertProviderCapabilities;
+    private assertSameIntent;
+    private assertCreateInput;
+    private requireExecution;
+    private requireProviderRequestId;
+    private assertProviderRequestAvailable;
+    private bindProviderRequest;
+    private canSafelyRetryCreate;
+    private isAbandonedCreate;
+    private isCreateLeaseActive;
+    private newCreateLeaseExpiry;
+    private failOwnedCreateAttempt;
+    private ensureAssetAssociation;
+    private beginAuditedOperation;
+    private completeAuditedOperation;
+    private failAuditedOperation;
+    private recordOperationAudit;
+    private assertNonTerminalOperation;
+    private result;
+    private assertTenant;
+    private assertTenantValue;
+}
+export default AgreementExecutionService;
+//# sourceMappingURL=AgreementExecutionService.d.ts.map

package/dist/agreements/services/AgreementExecutionService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgreementExecutionService.d.ts","sourceRoot":"","sources":["../../../src/agreements/services/AgreementExecutionService.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAGjF,OAAO,KAAK,EAGV,iBAAiB,EAGlB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAS,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAE1E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AACnG,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,qDAAqD,CAAC;AAC7G,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAGjG,OAAO,KAAK,EACV,wBAAwB,EACxB,+BAA+B,EAC/B,6BAA6B,EAC7B,2BAA2B,EAC5B,MAAM,aAAa,CAAC;AAOrB,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,EAAE,gBAAgB,CAAC;IACzB,UAAU,EAAE,4BAA4B,CAAC;IACzC,MAAM,EAAE,iCAAiC,CAAC;IAC1C,kBAAkB,EAAE,2BAA2B,CAAC;IAChD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,6BACf,SAAQ,gCAAgC;IACxC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,6BACf,SAAQ,gCAAgC;IACxC,SAAS,EAAE,IAAI,GAAG,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAmCD,qBAAa,yBAAyB;IAIxB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAS;gBAElB,IAAI,EAAE,6BAA6B;IAY1D,eAAe,CACnB,KAAK,EAAE,6BAA6B,GACnC,OAAO,CAAC,wBAAwB,CAAC;YAiItB,mBAAmB;YAkHnB,oBAAoB;IA8DlC;;;OAGG;IACG,oBAAoB,CACxB,KAAK,EAAE,kCAAkC,GACxC,OAAO,CAAC,wBAAwB,CAAC;IA4D9B,SAAS,CACb,KAAK,EAAE,gCAAgC,GACtC,OAAO,CAAC,wBAAwB,CAAC;IAgD9B,MAAM,CACV,KAAK,EAAE,6BAA6B,GACnC,OAAO,CAAC,wBAAwB,CAAC;IAsD9B,YAAY,CAChB,KAAK,EAAE,6BAA6B,GACnC,OAAO,CAAC,wBAAwB,CAAC;IAwD9B,aAAa,CACjB,KAAK,EAAE,2BAA2B,GACjC,OAAO,CAAC,+BAA+B,CAAC;YAoG7B,iBAAiB;YAkFjB,sBAAsB;YAoDtB,wBAAwB;IAqDtC,OAAO,CAAC,yBAAyB;IAmCjC,OAAO,CAAC,6BAA6B;YAavB,iBAAiB;YAIjB,mCAAmC;YAwBnC,kBAAkB;YA2BlB,qBAAqB;IA6CnC,OAAO,CAAC,qBAAqB;IAiB7B,OAAO,CAAC,cAAc;IAetB,OAAO,CAAC,0BAA0B;IAelC,OAAO,CAAC,gBAAgB;IAmBxB,OAAO,CAAC,iBAAiB;YAuCX,gBAAgB;IAM9B,OAAO,CAAC,wBAAwB;YAQlB,8BAA8B;YAe9B,mBAAmB;IAwBjC,OAAO,CAAC,oBAAoB;IAc5B,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,mBAAmB;IAY3B,OAAO,CAAC,oBAAoB;YAId,sBAAsB;YAetB,sBAAsB;YAiBtB,qBAAqB;YA8BrB,wBAAwB;YAexB,oBAAoB;YA2BpB,oBAAoB;IA4BlC,OAAO,CAAC,0BAA0B;IAWlC,OAAO,CAAC,MAAM;IAcd,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,iBAAiB;CAW1B;AA6LD,eAAe,yBAAyB,CAAC"}

package/dist/agreements/types.d.ts

@@ -0,0 +1,140 @@
+import { SignatureAuthenticationMethod, SignatureDocument, SignatureSigner, SignatureSignerInput } from '@happyvertical/signatures';
+import { SmrtObjectOptions } from '@happyvertical/smrt-core';
+export declare const AGREEMENT_EXECUTION_STATUSES: readonly ["prepared", "sent", "delivered", "viewed", "partially_signed", "completed", "declined", "cancelled", "expired", "failed"];
+export type AgreementExecutionStatus = (typeof AGREEMENT_EXECUTION_STATUSES)[number];
+export interface AgreementSignerIntent {
+    name: string;
+    email: string;
+    role?: string;
+    order?: number;
+    authenticationMethod: SignatureAuthenticationMethod;
+}
+export interface AgreementExecutionOptions extends SmrtObjectOptions {
+    tenantId?: string;
+    provider?: string;
+    providerAccountRef?: string;
+    credentialRef?: string;
+    idempotencyKey?: string;
+    sourceKind?: string;
+    sourceId?: string;
+    sourceVersion?: number;
+    sourceAssetId?: string;
+    sourceSha256?: string;
+    sourceSizeBytes?: number;
+    requestIntentSha256?: string;
+    title?: string;
+    signerIntent?: string;
+    providerRequestId?: string;
+    providerRequestKey?: string | null;
+    status?: AgreementExecutionStatus;
+    expiresAt?: Date | string | number | null;
+    cancellationReason?: string;
+    lastProviderEventAt?: Date | string | number | null;
+    lastReconciledAt?: Date | string | number | null;
+    completedAt?: Date | string | number | null;
+    effectiveFrom?: Date | string | number | null;
+    effectiveTo?: Date | string | number | null;
+    supersedesExecutedAgreementId?: string;
+    signedDocumentAssetId?: string;
+    signedDocumentSha256?: string;
+    signedDocumentSizeBytes?: number;
+    signedDocumentMediaType?: string;
+    signedDocumentFilename?: string;
+    auditTrailAssetId?: string;
+    auditTrailSha256?: string;
+    auditTrailSizeBytes?: number;
+    auditTrailMediaType?: string;
+    auditTrailFilename?: string;
+    attemptCount?: number;
+    createLeaseId?: string;
+    createLeaseExpiresAt?: Date | string | number | null;
+    lastError?: string;
+    metadata?: string;
+}
+export interface AgreementExecutionEventOptions extends SmrtObjectOptions {
+    tenantId?: string;
+    executionId?: string;
+    provider?: string;
+    providerEventId?: string;
+    eventOrigin?: string;
+    operationId?: string;
+    dedupeKey?: string;
+    orderingKey?: string;
+    eventType?: string;
+    status?: AgreementExecutionStatus;
+    occurredAt?: Date | string | number;
+    receivedAt?: Date | string | number;
+    payloadSha256?: string;
+    signerEvidence?: string;
+    payload?: string;
+}
+export type VerifiedAgreementExecutionEventOptions = AgreementExecutionEventOptions & Required<Pick<AgreementExecutionEventOptions, 'dedupeKey' | 'occurredAt' | 'receivedAt'>>;
+export interface ExecutedAgreementOptions extends SmrtObjectOptions {
+    tenantId?: string;
+    executionId?: string;
+    sourceKind?: string;
+    sourceId?: string;
+    sourceVersion?: number;
+    sourceAssetId?: string;
+    sourceSha256?: string;
+    sourceSizeBytes?: number;
+    signedDocumentAssetId?: string;
+    signedDocumentSha256?: string;
+    signedDocumentSizeBytes?: number;
+    signedDocumentMediaType?: string;
+    signedDocumentFilename?: string;
+    auditTrailAssetId?: string;
+    auditTrailSha256?: string;
+    auditTrailSizeBytes?: number;
+    auditTrailMediaType?: string;
+    auditTrailFilename?: string;
+    signerEvidence?: string;
+    acceptedAt?: Date | string | number;
+    effectiveFrom?: Date | string | number | null;
+    effectiveTo?: Date | string | number | null;
+    supersedesExecutedAgreementId?: string;
+    metadata?: string;
+}
+export interface CreateAgreementExecutionInput {
+    tenantId: string;
+    idempotencyKey: string;
+    sourceKind: string;
+    sourceId: string;
+    sourceVersion: number;
+    title: string;
+    document: SignatureDocument;
+    signers: readonly SignatureSignerInput[];
+    message?: string;
+    signingOrder?: boolean;
+    expiresInDays?: number;
+    providerAccountRef?: string;
+    /** Secret-store reference only. Credential values must stay in the provider. */
+    credentialRef?: string;
+    effectiveFrom?: Date | string | number | null;
+    effectiveTo?: Date | string | number | null;
+    supersedesExecutedAgreementId?: string;
+    metadata?: Readonly<Record<string, string>>;
+    signal?: AbortSignal;
+}
+export interface IngestAgreementWebhookInput {
+    tenantId: string;
+    payload: string;
+    signature: string;
+}
+export interface AgreementExecutionResult {
+    executionId: string;
+    /** Absent only while another idempotent create caller owns the remote attempt. */
+    providerRequestId?: string;
+    status: AgreementExecutionStatus;
+    replayed: boolean;
+}
+export interface AgreementWebhookIngestionResult {
+    executionId: string;
+    eventId: string;
+    replayed: boolean;
+    executedAgreementId?: string;
+}
+export declare function sanitizeSignerIntent(signers: readonly SignatureSignerInput[]): AgreementSignerIntent[];
+export declare function sanitizeSignerEvidence(signers: readonly SignatureSigner[]): SignatureSigner[];
+export declare function coerceAgreementDate(value: unknown): Date | null;
+//# sourceMappingURL=types.d.ts.map

package/dist/agreements/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/agreements/types.ts"],"names":[],"mappings":"AAAA,sDAAsD;AAEtD,OAAO,KAAK,EACV,6BAA6B,EAC7B,iBAAiB,EAEjB,eAAe,EACf,oBAAoB,EACrB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAElE,eAAO,MAAM,4BAA4B,qIAWa,CAAC;AAEvD,MAAM,MAAM,wBAAwB,GAClC,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB,EAAE,6BAA6B,CAAC;CACrD;AAED,MAAM,WAAW,yBAA0B,SAAQ,iBAAiB;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,SAAS,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC1C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mBAAmB,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpD,gBAAgB,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACjD,WAAW,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5C,aAAa,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC9C,WAAW,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5C,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,8BAA+B,SAAQ,iBAAiB;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,UAAU,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;IACpC,UAAU,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,sCAAsC,GAChD,8BAA8B,GAC5B,QAAQ,CACN,IAAI,CACF,8BAA8B,EAC9B,WAAW,GAAG,YAAY,GAAG,YAAY,CAC1C,CACF,CAAC;AAEN,MAAM,WAAW,wBAAyB,SAAQ,iBAAiB;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;IACpC,aAAa,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC9C,WAAW,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5C,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC9C,WAAW,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5C,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5C,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,kFAAkF;IAClF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,wBAAwB,CAAC;IACjC,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,+BAA+B;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,SAAS,oBAAoB,EAAE,GACvC,qBAAqB,EAAE,CAQzB;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,SAAS,eAAe,EAAE,GAClC,eAAe,EAAE,CAgBnB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,GAAG,IAAI,CAQ/D"}