@knpkv/control-center 0.1.0

package/dist/server/domain/governedAction/bindings.d.ts

@@ -0,0 +1,264 @@
+import * as Schema from "effect/Schema";
+import type { Role } from "../actors.js";
+import { GovernedActionAuthorizationV1 } from "./model.js";
+import type { GovernedActionTransitionV1 } from "./stateMachine.js";
+/** Closed reasons why durable authorization or dispatch intent does not match its action. */
+export declare const GovernedActionAuthorityMismatch: Schema.Literals<readonly ["authorization-action-mismatch", "authorization-workspace-mismatch", "authorization-connection-mismatch", "authorization-connection-revision-mismatch", "authorization-connection-authority-mismatch", "authorization-envelope-mismatch", "authorization-idempotency-mismatch", "authorization-payload-mismatch", "authorization-evidence-mismatch", "authorization-policy-mismatch", "authorization-revision-mismatch", "authorization-capability-mismatch", "authorization-permission-mismatch", "authorization-outside-proposal-window", "authorization-expired", "authorization-session-expired", "evidence-not-current", "evidence-set-changed", "evidence-workspace-mismatch", "session-id-mismatch", "session-actor-mismatch", "session-workspace-mismatch", "session-permission-mismatch", "session-revoked", "authorization-session-chronology", "current-plugin-connection-mismatch", "current-plugin-workspace-mismatch", "current-plugin-provider-mismatch", "current-plugin-revision-mismatch", "current-plugin-authority-mismatch", "current-plugin-unavailable", "current-plugin-mismatch", "current-capability-unavailable", "current-capability-version-mismatch", "current-policy-denied", "current-policy-mismatch", "current-target-workspace-mismatch", "current-target-entity-mismatch", "current-target-type-mismatch", "current-target-source-mismatch", "current-target-revision-mismatch", "attempt-action-mismatch", "attempt-authorization-mismatch", "attempt-workspace-mismatch", "attempt-connection-mismatch", "attempt-envelope-mismatch", "attempt-idempotency-mismatch", "attempt-policy-evaluation-mismatch", "attempt-revision-mismatch", "attempt-outside-authorization-window"]>;
+/** Decoded governed-action authority mismatch. */
+export type GovernedActionAuthorityMismatch = typeof GovernedActionAuthorityMismatch.Type;
+/** Complete aggregate authority checked immediately before durable dispatch intent. */
+export declare const GovernedActionAuthorityBindingInput: Schema.Struct<{
+    readonly envelope: Schema.Struct<{
+        readonly envelopeDigest: Schema.brand<Schema.String, string>;
+        readonly schemaVersion: Schema.Literal<1>;
+        readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+        readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly pluginConnectionRevision: Schema.brand<Schema.Int, "GovernedActionPluginConnectionRevision">;
+        readonly pluginConnectionAuthorityDigest: Schema.brand<Schema.String, string>;
+        readonly pluginId: Schema.brand<Schema.String, string>;
+        readonly pluginContractVersion: Schema.Struct<{
+            readonly major: Schema.Int;
+            readonly minor: Schema.Int;
+            readonly patch: Schema.Int;
+        }>;
+        readonly pluginAdapterVersion: Schema.Struct<{
+            readonly major: Schema.Int;
+            readonly minor: Schema.Int;
+            readonly patch: Schema.Int;
+        }>;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly capability: Schema.Struct<{
+            readonly capabilityId: Schema.Literal<"action.execute">;
+            readonly version: Schema.Int;
+        }>;
+        readonly targetEntityId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EntityId">;
+        readonly proposal: Schema.Struct<{
+            readonly proposalKey: Schema.brand<Schema.String, string>;
+            readonly capabilityVersion: Schema.Int;
+            readonly request: Schema.Struct<{
+                readonly actionKind: Schema.brand<Schema.String, string>;
+                readonly target: Schema.Struct<{
+                    entityType: Schema.brand<Schema.String, string>;
+                    vendorImmutableId: Schema.brand<Schema.String, "VendorImmutableId">;
+                }>;
+                readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                readonly payload: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+                readonly evidenceIds: Schema.$Array<Schema.brand<Schema.String, string>>;
+            }>;
+            readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+            readonly summary: Schema.String;
+            readonly impact: Schema.Struct<{
+                readonly level: Schema.Literals<readonly ["low", "medium", "high", "critical"]>;
+                readonly summary: Schema.String;
+            }>;
+            readonly proposedAt: Schema.DateTimeUtcFromString;
+        }>;
+        readonly evidence: Schema.$Array<Schema.Struct<{
+            readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+            readonly evidenceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceId">;
+            readonly evidenceClaimIds: Schema.$Array<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceClaimId">>;
+            readonly observedAt: Schema.DateTimeUtcFromString;
+            readonly validUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            readonly currentUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            readonly evaluatedAt: Schema.DateTimeUtcFromString;
+            readonly source: Schema.Literals<readonly ["current", "stale", "missing", "unavailable"]>;
+            readonly validity: Schema.Literals<readonly ["valid", "expired"]>;
+        }>>;
+        readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+        readonly policy: Schema.Struct<{
+            readonly policyId: Schema.brand<Schema.String, string>;
+            readonly policyVersion: Schema.Int;
+            readonly policyDigest: Schema.brand<Schema.String, string>;
+            readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+        }>;
+        readonly origin: Schema.TaggedUnion<{
+            readonly human: Schema.TaggedStruct<"human", {
+                readonly actor: Schema.TaggedStruct<"human", {
+                    readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+                }>;
+                readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+            }>;
+            readonly agent: Schema.TaggedStruct<"agent", {
+                readonly actor: Schema.TaggedStruct<"agent", {
+                    readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+                }>;
+                readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+                readonly initiatingSessionId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">>;
+            }>;
+        }>;
+        readonly proposalExpiresAt: Schema.DateTimeUtcFromString;
+        readonly causationId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">>;
+        readonly correlationId: Schema.NullOr<Schema.brand<Schema.String, "DomainEventCorrelationId">>;
+    }>;
+    readonly authorization: Schema.Struct<{
+        readonly schemaVersion: Schema.Literal<1>;
+        readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+        readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly pluginConnectionRevision: Schema.brand<Schema.Int, "GovernedActionPluginConnectionRevision">;
+        readonly pluginConnectionAuthorityDigest: Schema.brand<Schema.String, string>;
+        readonly actionEnvelopeDigest: Schema.brand<Schema.String, string>;
+        readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+        readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+        readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+        readonly policyDigest: Schema.brand<Schema.String, string>;
+        readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+        readonly capabilityVersion: Schema.Int;
+        readonly actor: Schema.TaggedStruct<"human", {
+            readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+        }>;
+        readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+        readonly sessionPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+        readonly sessionExpiresAt: Schema.DateTimeUtcFromString;
+        readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+        readonly authorizedAt: Schema.DateTimeUtcFromString;
+        readonly expiresAt: Schema.DateTimeUtcFromString;
+    }>;
+    readonly attempt: Schema.Struct<{
+        readonly schemaVersion: Schema.Literal<1>;
+        readonly attemptId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAttemptId">;
+        readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+        readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+        readonly attemptNumber: Schema.Literal<1>;
+        readonly actionEnvelopeDigest: Schema.brand<Schema.String, string>;
+        readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+        readonly policyEvaluationDigest: Schema.brand<Schema.String, string>;
+        readonly preflight: Schema.TaggedStruct<"ready", {
+            readonly checkedRevision: Schema.brand<Schema.String, "Revision">;
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+        }>;
+        readonly startedAt: Schema.DateTimeUtcFromString;
+    }>;
+    readonly evaluatedAt: Schema.DateTimeUtcFromString;
+}>;
+/** Decoded aggregate authority inputs checked immediately before dispatch. */
+export type GovernedActionAuthorityBindingInput = typeof GovernedActionAuthorityBindingInput.Type;
+/** Immutable authorization inputs that can be verified before a dispatch attempt exists. */
+export declare const GovernedActionAuthorizationBindingInput: Schema.Struct<{
+    readonly envelope: Schema.Struct<{
+        readonly envelopeDigest: Schema.brand<Schema.String, string>;
+        readonly schemaVersion: Schema.Literal<1>;
+        readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+        readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly pluginConnectionRevision: Schema.brand<Schema.Int, "GovernedActionPluginConnectionRevision">;
+        readonly pluginConnectionAuthorityDigest: Schema.brand<Schema.String, string>;
+        readonly pluginId: Schema.brand<Schema.String, string>;
+        readonly pluginContractVersion: Schema.Struct<{
+            readonly major: Schema.Int;
+            readonly minor: Schema.Int;
+            readonly patch: Schema.Int;
+        }>;
+        readonly pluginAdapterVersion: Schema.Struct<{
+            readonly major: Schema.Int;
+            readonly minor: Schema.Int;
+            readonly patch: Schema.Int;
+        }>;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly capability: Schema.Struct<{
+            readonly capabilityId: Schema.Literal<"action.execute">;
+            readonly version: Schema.Int;
+        }>;
+        readonly targetEntityId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EntityId">;
+        readonly proposal: Schema.Struct<{
+            readonly proposalKey: Schema.brand<Schema.String, string>;
+            readonly capabilityVersion: Schema.Int;
+            readonly request: Schema.Struct<{
+                readonly actionKind: Schema.brand<Schema.String, string>;
+                readonly target: Schema.Struct<{
+                    entityType: Schema.brand<Schema.String, string>;
+                    vendorImmutableId: Schema.brand<Schema.String, "VendorImmutableId">;
+                }>;
+                readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                readonly payload: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+                readonly evidenceIds: Schema.$Array<Schema.brand<Schema.String, string>>;
+            }>;
+            readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+            readonly summary: Schema.String;
+            readonly impact: Schema.Struct<{
+                readonly level: Schema.Literals<readonly ["low", "medium", "high", "critical"]>;
+                readonly summary: Schema.String;
+            }>;
+            readonly proposedAt: Schema.DateTimeUtcFromString;
+        }>;
+        readonly evidence: Schema.$Array<Schema.Struct<{
+            readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+            readonly evidenceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceId">;
+            readonly evidenceClaimIds: Schema.$Array<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceClaimId">>;
+            readonly observedAt: Schema.DateTimeUtcFromString;
+            readonly validUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            readonly currentUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            readonly evaluatedAt: Schema.DateTimeUtcFromString;
+            readonly source: Schema.Literals<readonly ["current", "stale", "missing", "unavailable"]>;
+            readonly validity: Schema.Literals<readonly ["valid", "expired"]>;
+        }>>;
+        readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+        readonly policy: Schema.Struct<{
+            readonly policyId: Schema.brand<Schema.String, string>;
+            readonly policyVersion: Schema.Int;
+            readonly policyDigest: Schema.brand<Schema.String, string>;
+            readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+        }>;
+        readonly origin: Schema.TaggedUnion<{
+            readonly human: Schema.TaggedStruct<"human", {
+                readonly actor: Schema.TaggedStruct<"human", {
+                    readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+                }>;
+                readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+            }>;
+            readonly agent: Schema.TaggedStruct<"agent", {
+                readonly actor: Schema.TaggedStruct<"agent", {
+                    readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+                }>;
+                readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+                readonly initiatingSessionId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">>;
+            }>;
+        }>;
+        readonly proposalExpiresAt: Schema.DateTimeUtcFromString;
+        readonly causationId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">>;
+        readonly correlationId: Schema.NullOr<Schema.brand<Schema.String, "DomainEventCorrelationId">>;
+    }>;
+    readonly authorization: Schema.Struct<{
+        readonly schemaVersion: Schema.Literal<1>;
+        readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+        readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly pluginConnectionRevision: Schema.brand<Schema.Int, "GovernedActionPluginConnectionRevision">;
+        readonly pluginConnectionAuthorityDigest: Schema.brand<Schema.String, string>;
+        readonly actionEnvelopeDigest: Schema.brand<Schema.String, string>;
+        readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+        readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+        readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+        readonly policyDigest: Schema.brand<Schema.String, string>;
+        readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+        readonly capabilityVersion: Schema.Int;
+        readonly actor: Schema.TaggedStruct<"human", {
+            readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+        }>;
+        readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+        readonly sessionPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+        readonly sessionExpiresAt: Schema.DateTimeUtcFromString;
+        readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+        readonly authorizedAt: Schema.DateTimeUtcFromString;
+        readonly expiresAt: Schema.DateTimeUtcFromString;
+    }>;
+}>;
+/** Decoded authorization-only binding inputs. */
+export type GovernedActionAuthorizationBindingInput = typeof GovernedActionAuthorizationBindingInput.Type;
+/** Explicit V1 permission implication: workspace owner or an exact scoped role. */
+export declare const governedActionPermissionGrants: (sessionPermission: Role, requiredPermission: Role) => boolean;
+/** Return every fail-closed mismatch between an envelope and its human grant. */
+export declare const governedActionAuthorizationMismatches: ({ authorization, envelope }: GovernedActionAuthorizationBindingInput) => ReadonlyArray<GovernedActionAuthorityMismatch>;
+/** Whether a human grant is attributable to its exact immutable authorize transition. */
+export declare const governedActionAuthorizationMatchesTransition: (authorization: GovernedActionAuthorizationV1, transition: GovernedActionTransitionV1) => boolean;
+/** Return every fail-closed mismatch between an envelope, human grant, and dispatch intent. */
+export declare const governedActionAuthorityMismatches: ({ attempt, authorization, envelope, evaluatedAt }: GovernedActionAuthorityBindingInput) => ReadonlyArray<GovernedActionAuthorityMismatch>;
+//# sourceMappingURL=bindings.d.ts.map

package/dist/server/domain/governedAction/bindings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindings.d.ts","sourceRoot":"","sources":["../../../../src/domain/governedAction/bindings.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAExC,OAAO,EAA2B,6BAA6B,EAA4B,MAAM,YAAY,CAAA;AAC7G,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAA;AAEnE,6FAA6F;AAC7F,eAAO,MAAM,+BAA+B,mpDAmD1C,CAAA;AAEF,kDAAkD;AAClD,MAAM,MAAM,+BAA+B,GAAG,OAAO,+BAA+B,CAAC,IAAI,CAAA;AAEzF,uFAAuF;AACvF,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAK9C,CAAA;AAEF,8EAA8E;AAC9E,MAAM,MAAM,mCAAmC,GAAG,OAAO,mCAAmC,CAAC,IAAI,CAAA;AAEjG,4FAA4F;AAC5F,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGlD,CAAA;AAEF,iDAAiD;AACjD,MAAM,MAAM,uCAAuC,GAAG,OAAO,uCAAuC,CAAC,IAAI,CAAA;AAEzG,mFAAmF;AACnF,eAAO,MAAM,8BAA8B,GAAI,mBAAmB,IAAI,EAAE,oBAAoB,IAAI,KAAG,OACd,CAAA;AAErF,iFAAiF;AACjF,eAAO,MAAM,qCAAqC,GAAI,6BAGnD,uCAAuC,KAAG,aAAa,CAAC,+BAA+B,CA0DzF,CAAA;AAED,yFAAyF;AACzF,eAAO,MAAM,4CAA4C,GACvD,eAAe,6BAA6B,EAC5C,YAAY,0BAA0B,KACrC,OASqD,CAAA;AAExD,+FAA+F;AAC/F,eAAO,MAAM,iCAAiC,GAAI,mDAK/C,mCAAmC,KAAG,aAAa,CAAC,+BAA+B,CA2CrF,CAAA"}

package/dist/server/domain/governedAction/index.d.ts

@@ -0,0 +1,6 @@
+/** Governed provider-action domain contracts and lifecycle. */
+export * from "./bindings.js";
+export * from "./lifecycle.js";
+export * from "./model.js";
+export * from "./stateMachine.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/server/domain/governedAction/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/domain/governedAction/index.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,cAAc,eAAe,CAAA;AAC7B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA;AAC1B,cAAc,mBAAmB,CAAA"}

package/dist/server/domain/governedAction/lifecycle.d.ts

@@ -0,0 +1,71 @@
+import * as Schema from "effect/Schema";
+import { type GovernedActionTransitionCommand } from "./stateMachine.js";
+/** Provider identity retained by the durable action head across async and ambiguous work. */
+export declare const GovernedActionProviderLineage: Schema.TaggedUnion<{
+    readonly none: Schema.TaggedStruct<"none", {}>;
+    readonly accepted: Schema.TaggedStruct<"accepted", {
+        readonly receipt: Schema.Struct<{
+            readonly status: Schema.Literal<"accepted">;
+            readonly reconciliationKey: Schema.brand<Schema.String, string>;
+            readonly providerOperationId: Schema.brand<Schema.String, string>;
+            readonly safeSummary: Schema.String;
+            readonly observedAt: Schema.DateTimeUtcFromString;
+        }>;
+    }>;
+    readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
+        readonly providerOperationId: Schema.NullOr<Schema.brand<Schema.String, string>>;
+        readonly reconciliationKey: Schema.brand<Schema.String, string>;
+    }>;
+    readonly manual: Schema.TaggedStruct<"manual", {
+        readonly providerOperationId: Schema.NullOr<Schema.brand<Schema.String, string>>;
+    }>;
+    readonly terminal: Schema.TaggedStruct<"terminal", {
+        readonly receipt: Schema.Struct<{
+            readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+            readonly providerOperationId: Schema.brand<Schema.String, string>;
+            readonly safeSummary: Schema.String;
+            readonly observedAt: Schema.DateTimeUtcFromString;
+        }>;
+    }>;
+}>;
+/** Decoded provider lineage retained by a governed-action lifecycle head. */
+export type GovernedActionProviderLineage = typeof GovernedActionProviderLineage.Type;
+/** Durable lifecycle state plus the exact provider identity needed for safe recovery. */
+export declare const GovernedActionLifecycleHeadV1: Schema.Struct<{
+    readonly state: Schema.Literals<readonly ["proposed", "authorized", "denied", "expired", "cancelled", "started", "cancel-requested", "cancel-requested-unknown", "succeeded", "failed", "unknown"]>;
+    readonly lineage: Schema.TaggedUnion<{
+        readonly none: Schema.TaggedStruct<"none", {}>;
+        readonly accepted: Schema.TaggedStruct<"accepted", {
+            readonly receipt: Schema.Struct<{
+                readonly status: Schema.Literal<"accepted">;
+                readonly reconciliationKey: Schema.brand<Schema.String, string>;
+                readonly providerOperationId: Schema.brand<Schema.String, string>;
+                readonly safeSummary: Schema.String;
+                readonly observedAt: Schema.DateTimeUtcFromString;
+            }>;
+        }>;
+        readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
+            readonly providerOperationId: Schema.NullOr<Schema.brand<Schema.String, string>>;
+            readonly reconciliationKey: Schema.brand<Schema.String, string>;
+        }>;
+        readonly manual: Schema.TaggedStruct<"manual", {
+            readonly providerOperationId: Schema.NullOr<Schema.brand<Schema.String, string>>;
+        }>;
+        readonly terminal: Schema.TaggedStruct<"terminal", {
+            readonly receipt: Schema.Struct<{
+                readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                readonly providerOperationId: Schema.brand<Schema.String, string>;
+                readonly safeSummary: Schema.String;
+                readonly observedAt: Schema.DateTimeUtcFromString;
+            }>;
+        }>;
+    }>;
+}>;
+/** Decoded governed-action lifecycle head. */
+export type GovernedActionLifecycleHeadV1 = typeof GovernedActionLifecycleHeadV1.Type;
+/**
+ * Advance a durable lifecycle head while retaining and matching opaque provider identity.
+ * A null result rejects illegal edges, fabricated locators, and unrelated receipts.
+ */
+export declare const advanceGovernedActionLifecycle: (current: GovernedActionLifecycleHeadV1 | null, command: GovernedActionTransitionCommand) => GovernedActionLifecycleHeadV1 | null;
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/server/domain/governedAction/lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../../src/domain/governedAction/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAQvC,OAAO,EAGL,KAAK,+BAA+B,EAErC,MAAM,mBAAmB,CAAA;AAE1B,6FAA6F;AAC7F,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;EAWxC,CAAA;AAEF,6EAA6E;AAC7E,MAAM,MAAM,6BAA6B,GAAG,OAAO,6BAA6B,CAAC,IAAI,CAAA;AA2BrF,yFAAyF;AACzF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQzC,CAAA;AAED,8CAA8C;AAC9C,MAAM,MAAM,6BAA6B,GAAG,OAAO,6BAA6B,CAAC,IAAI,CAAA;AA8FrF;;;GAGG;AACH,eAAO,MAAM,8BAA8B,GACzC,SAAS,6BAA6B,GAAG,IAAI,EAC7C,SAAS,+BAA+B,KACvC,6BAA6B,GAAG,IA+BlC,CAAA"}