@knpkv/control-center 0.1.0

package/dist/server/server/persistence/repositories/governed-action/contract.d.ts

@@ -0,0 +1,858 @@
+import * as Schema from "effect/Schema";
+import { GovernedActionTransitionV1 } from "../../../../domain/governedAction/index.js";
+/** Immutable identity of the audit record paired with one action transition. */
+export declare const GovernedActionAuditEventId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">;
+/** Decoded governed-action audit identity. */
+export type GovernedActionAuditEventId = typeof GovernedActionAuditEventId.Type;
+/** Authority records that must commit in the same transaction as their transition. */
+export declare const GovernedActionCommitCompanion: Schema.TaggedUnion<{
+    readonly authorization: Schema.TaggedStruct<"authorization", {
+        readonly authorization: Schema.Struct<{
+            readonly schemaVersion: Schema.Literal<1>;
+            readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+            readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+            readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+            readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+            readonly pluginConnectionRevision: Schema.brand<Schema.Int, "GovernedActionPluginConnectionRevision">;
+            readonly pluginConnectionAuthorityDigest: Schema.brand<Schema.String, string>;
+            readonly actionEnvelopeDigest: Schema.brand<Schema.String, string>;
+            readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+            readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+            readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+            readonly policyDigest: Schema.brand<Schema.String, string>;
+            readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+            readonly capabilityVersion: Schema.Int;
+            readonly actor: Schema.TaggedStruct<"human", {
+                readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+            }>;
+            readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+            readonly sessionPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+            readonly sessionExpiresAt: Schema.DateTimeUtcFromString;
+            readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+            readonly authorizedAt: Schema.DateTimeUtcFromString;
+            readonly expiresAt: Schema.DateTimeUtcFromString;
+        }>;
+    }>;
+    readonly none: Schema.TaggedStruct<"none", {}>;
+    readonly dispatch: Schema.TaggedStruct<"dispatch", {
+        readonly policyEvaluation: Schema.Struct<{
+            readonly schemaVersion: Schema.Literal<1>;
+            readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+            readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+            readonly policy: Schema.Struct<{
+                readonly policyId: Schema.brand<Schema.String, string>;
+                readonly policyVersion: Schema.Int;
+                readonly policyDigest: Schema.brand<Schema.String, string>;
+                readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+            }>;
+            readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+            readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+            readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+            readonly decision: Schema.Literals<readonly ["allowed", "denied"]>;
+            readonly evaluatedAt: Schema.DateTimeUtcFromString;
+        }>;
+        readonly attempt: Schema.Struct<{
+            readonly schemaVersion: Schema.Literal<1>;
+            readonly attemptId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAttemptId">;
+            readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+            readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+            readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+            readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+            readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+            readonly attemptNumber: Schema.Literal<1>;
+            readonly actionEnvelopeDigest: Schema.brand<Schema.String, string>;
+            readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+            readonly policyEvaluationDigest: Schema.brand<Schema.String, string>;
+            readonly preflight: Schema.TaggedStruct<"ready", {
+                readonly checkedRevision: Schema.brand<Schema.String, "Revision">;
+                readonly checkedAt: Schema.DateTimeUtcFromString;
+            }>;
+            readonly startedAt: Schema.DateTimeUtcFromString;
+        }>;
+    }>;
+    readonly policyDenial: Schema.TaggedStruct<"policyDenial", {
+        readonly policyEvaluation: Schema.Struct<{
+            readonly schemaVersion: Schema.Literal<1>;
+            readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+            readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+            readonly policy: Schema.Struct<{
+                readonly policyId: Schema.brand<Schema.String, string>;
+                readonly policyVersion: Schema.Int;
+                readonly policyDigest: Schema.brand<Schema.String, string>;
+                readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+            }>;
+            readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+            readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+            readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+            readonly decision: Schema.Literals<readonly ["allowed", "denied"]>;
+            readonly evaluatedAt: Schema.DateTimeUtcFromString;
+        }>;
+    }>;
+}>;
+/** Decoded authority companion. */
+export type GovernedActionCommitCompanion = typeof GovernedActionCommitCompanion.Type;
+/** Caller intent; lifecycle state, sequence, lineage, and audit payload are derived by the repository. */
+export declare const GovernedActionCommitInput: Schema.Struct<{
+    readonly envelope: Schema.Struct<{
+        readonly envelopeDigest: Schema.brand<Schema.String, string>;
+        readonly schemaVersion: Schema.Literal<1>;
+        readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+        readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly pluginConnectionRevision: Schema.brand<Schema.Int, "GovernedActionPluginConnectionRevision">;
+        readonly pluginConnectionAuthorityDigest: Schema.brand<Schema.String, string>;
+        readonly pluginId: Schema.brand<Schema.String, string>;
+        readonly pluginContractVersion: Schema.Struct<{
+            readonly major: Schema.Int;
+            readonly minor: Schema.Int;
+            readonly patch: Schema.Int;
+        }>;
+        readonly pluginAdapterVersion: Schema.Struct<{
+            readonly major: Schema.Int;
+            readonly minor: Schema.Int;
+            readonly patch: Schema.Int;
+        }>;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly capability: Schema.Struct<{
+            readonly capabilityId: Schema.Literal<"action.execute">;
+            readonly version: Schema.Int;
+        }>;
+        readonly targetEntityId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EntityId">;
+        readonly proposal: Schema.Struct<{
+            readonly proposalKey: Schema.brand<Schema.String, string>;
+            readonly capabilityVersion: Schema.Int;
+            readonly request: Schema.Struct<{
+                readonly actionKind: Schema.brand<Schema.String, string>;
+                readonly target: Schema.Struct<{
+                    entityType: Schema.brand<Schema.String, string>;
+                    vendorImmutableId: Schema.brand<Schema.String, "VendorImmutableId">;
+                }>;
+                readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                readonly payload: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+                readonly evidenceIds: Schema.$Array<Schema.brand<Schema.String, string>>;
+            }>;
+            readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+            readonly summary: Schema.String;
+            readonly impact: Schema.Struct<{
+                readonly level: Schema.Literals<readonly ["low", "medium", "high", "critical"]>;
+                readonly summary: Schema.String;
+            }>;
+            readonly proposedAt: Schema.DateTimeUtcFromString;
+        }>;
+        readonly evidence: Schema.$Array<Schema.Struct<{
+            readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+            readonly evidenceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceId">;
+            readonly evidenceClaimIds: Schema.$Array<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceClaimId">>;
+            readonly observedAt: Schema.DateTimeUtcFromString;
+            readonly validUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            readonly currentUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            readonly evaluatedAt: Schema.DateTimeUtcFromString;
+            readonly source: Schema.Literals<readonly ["current", "stale", "missing", "unavailable"]>;
+            readonly validity: Schema.Literals<readonly ["valid", "expired"]>;
+        }>>;
+        readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+        readonly policy: Schema.Struct<{
+            readonly policyId: Schema.brand<Schema.String, string>;
+            readonly policyVersion: Schema.Int;
+            readonly policyDigest: Schema.brand<Schema.String, string>;
+            readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+        }>;
+        readonly origin: Schema.TaggedUnion<{
+            readonly human: Schema.TaggedStruct<"human", {
+                readonly actor: Schema.TaggedStruct<"human", {
+                    readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+                }>;
+                readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+            }>;
+            readonly agent: Schema.TaggedStruct<"agent", {
+                readonly actor: Schema.TaggedStruct<"agent", {
+                    readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+                }>;
+                readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+                readonly initiatingSessionId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">>;
+            }>;
+        }>;
+        readonly proposalExpiresAt: Schema.DateTimeUtcFromString;
+        readonly causationId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">>;
+        readonly correlationId: Schema.NullOr<Schema.brand<Schema.String, "DomainEventCorrelationId">>;
+    }>;
+    readonly expectedHeadTransitionId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionTransitionId">>;
+    readonly transitionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionTransitionId">;
+    readonly commandId: Schema.brand<Schema.String, string>;
+    readonly command: Schema.TaggedUnion<{
+        readonly propose: Schema.TaggedStruct<"propose", {}>;
+        readonly authorize: Schema.TaggedStruct<"authorize", {
+            readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+        }>;
+        readonly deny: Schema.TaggedStruct<"deny", {
+            readonly reason: Schema.Literals<readonly ["revision-changed", "evidence-stale", "evidence-invalid", "policy-denied", "session-invalid", "capability-changed", "plugin-unavailable", "preflight-blocked"]>;
+            readonly safeSummary: Schema.String;
+        }>;
+        readonly expire: Schema.TaggedStruct<"expire", {
+            readonly reason: Schema.Literals<readonly ["proposal-expired", "authorization-expired"]>;
+        }>;
+        readonly cancel: Schema.TaggedStruct<"cancel", {
+            readonly safeSummary: Schema.String;
+        }>;
+        readonly start: Schema.TaggedStruct<"start", {
+            readonly attemptId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAttemptId">;
+        }>;
+        readonly requestCancellation: Schema.TaggedStruct<"requestCancellation", {
+            readonly safeSummary: Schema.String;
+        }>;
+        readonly recordAccepted: Schema.TaggedStruct<"recordAccepted", {
+            readonly receipt: Schema.Struct<{
+                readonly status: Schema.Literal<"accepted">;
+                readonly reconciliationKey: Schema.brand<Schema.String, string>;
+                readonly providerOperationId: Schema.brand<Schema.String, string>;
+                readonly safeSummary: Schema.String;
+                readonly observedAt: Schema.DateTimeUtcFromString;
+            }>;
+        }>;
+        readonly recordSucceeded: Schema.TaggedStruct<"recordSucceeded", {
+            readonly receipt: Schema.Struct<{
+                readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                readonly providerOperationId: Schema.brand<Schema.String, string>;
+                readonly safeSummary: Schema.String;
+                readonly observedAt: Schema.DateTimeUtcFromString;
+            }>;
+            readonly source: Schema.TaggedUnion<{
+                readonly direct: Schema.TaggedStruct<"direct", {}>;
+                readonly providerOperation: Schema.TaggedStruct<"providerOperation", {
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                }>;
+                readonly reconciliation: Schema.TaggedStruct<"reconciliation", {
+                    readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+                }>;
+            }>;
+        }>;
+        readonly recordFailed: Schema.TaggedStruct<"recordFailed", {
+            readonly receipt: Schema.Struct<{
+                readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                readonly providerOperationId: Schema.brand<Schema.String, string>;
+                readonly safeSummary: Schema.String;
+                readonly observedAt: Schema.DateTimeUtcFromString;
+            }>;
+            readonly source: Schema.TaggedUnion<{
+                readonly direct: Schema.TaggedStruct<"direct", {}>;
+                readonly providerOperation: Schema.TaggedStruct<"providerOperation", {
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                }>;
+                readonly reconciliation: Schema.TaggedStruct<"reconciliation", {
+                    readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+                }>;
+            }>;
+        }>;
+        readonly recordUnknown: Schema.TaggedStruct<"recordUnknown", {
+            readonly outcome: Schema.TaggedUnion<{
+                readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
+                    readonly reconciliationKey: Schema.brand<Schema.String, string>;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                    readonly safeSummary: Schema.String;
+                }>;
+                readonly manual: Schema.TaggedStruct<"manual", {
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                    readonly safeSummary: Schema.String;
+                    readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
+                }>;
+            }>;
+        }>;
+        readonly recordCancelled: Schema.TaggedStruct<"recordCancelled", {
+            readonly receipt: Schema.Struct<{
+                readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                readonly providerOperationId: Schema.brand<Schema.String, string>;
+                readonly safeSummary: Schema.String;
+                readonly observedAt: Schema.DateTimeUtcFromString;
+            }>;
+            readonly source: Schema.TaggedUnion<{
+                readonly direct: Schema.TaggedStruct<"direct", {}>;
+                readonly providerOperation: Schema.TaggedStruct<"providerOperation", {
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                }>;
+                readonly reconciliation: Schema.TaggedStruct<"reconciliation", {
+                    readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+                }>;
+            }>;
+        }>;
+        readonly reconciliationPending: Schema.TaggedStruct<"reconciliationPending", {
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+            readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+        }>;
+    }>;
+    readonly cause: Schema.TaggedUnion<{
+        readonly human: Schema.TaggedStruct<"human", {
+            readonly actor: Schema.TaggedStruct<"human", {
+                readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+            }>;
+            readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+        }>;
+        readonly agent: Schema.TaggedStruct<"agent", {
+            readonly actor: Schema.TaggedStruct<"agent", {
+                readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+            }>;
+            readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+        }>;
+        readonly system: Schema.TaggedStruct<"system", {
+            readonly component: Schema.brand<Schema.String, string>;
+        }>;
+    }>;
+    readonly occurredAt: Schema.DateTimeUtcFromString;
+    readonly causationId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">>;
+    readonly correlationId: Schema.NullOr<Schema.brand<Schema.String, "DomainEventCorrelationId">>;
+    readonly companion: Schema.TaggedUnion<{
+        readonly authorization: Schema.TaggedStruct<"authorization", {
+            readonly authorization: Schema.Struct<{
+                readonly schemaVersion: Schema.Literal<1>;
+                readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+                readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+                readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+                readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+                readonly pluginConnectionRevision: Schema.brand<Schema.Int, "GovernedActionPluginConnectionRevision">;
+                readonly pluginConnectionAuthorityDigest: Schema.brand<Schema.String, string>;
+                readonly actionEnvelopeDigest: Schema.brand<Schema.String, string>;
+                readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+                readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+                readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+                readonly policyDigest: Schema.brand<Schema.String, string>;
+                readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                readonly capabilityVersion: Schema.Int;
+                readonly actor: Schema.TaggedStruct<"human", {
+                    readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+                }>;
+                readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+                readonly sessionPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+                readonly sessionExpiresAt: Schema.DateTimeUtcFromString;
+                readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+                readonly authorizedAt: Schema.DateTimeUtcFromString;
+                readonly expiresAt: Schema.DateTimeUtcFromString;
+            }>;
+        }>;
+        readonly none: Schema.TaggedStruct<"none", {}>;
+        readonly dispatch: Schema.TaggedStruct<"dispatch", {
+            readonly policyEvaluation: Schema.Struct<{
+                readonly schemaVersion: Schema.Literal<1>;
+                readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+                readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+                readonly policy: Schema.Struct<{
+                    readonly policyId: Schema.brand<Schema.String, string>;
+                    readonly policyVersion: Schema.Int;
+                    readonly policyDigest: Schema.brand<Schema.String, string>;
+                    readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+                }>;
+                readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+                readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+                readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                readonly decision: Schema.Literals<readonly ["allowed", "denied"]>;
+                readonly evaluatedAt: Schema.DateTimeUtcFromString;
+            }>;
+            readonly attempt: Schema.Struct<{
+                readonly schemaVersion: Schema.Literal<1>;
+                readonly attemptId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAttemptId">;
+                readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+                readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+                readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+                readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+                readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+                readonly attemptNumber: Schema.Literal<1>;
+                readonly actionEnvelopeDigest: Schema.brand<Schema.String, string>;
+                readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                readonly policyEvaluationDigest: Schema.brand<Schema.String, string>;
+                readonly preflight: Schema.TaggedStruct<"ready", {
+                    readonly checkedRevision: Schema.brand<Schema.String, "Revision">;
+                    readonly checkedAt: Schema.DateTimeUtcFromString;
+                }>;
+                readonly startedAt: Schema.DateTimeUtcFromString;
+            }>;
+        }>;
+        readonly policyDenial: Schema.TaggedStruct<"policyDenial", {
+            readonly policyEvaluation: Schema.Struct<{
+                readonly schemaVersion: Schema.Literal<1>;
+                readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+                readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+                readonly policy: Schema.Struct<{
+                    readonly policyId: Schema.brand<Schema.String, string>;
+                    readonly policyVersion: Schema.Int;
+                    readonly policyDigest: Schema.brand<Schema.String, string>;
+                    readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+                }>;
+                readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+                readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+                readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                readonly decision: Schema.Literals<readonly ["allowed", "denied"]>;
+                readonly evaluatedAt: Schema.DateTimeUtcFromString;
+            }>;
+        }>;
+    }>;
+    readonly auditEventId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">;
+}>;
+/** Decoded atomic governed-action commit intent. */
+export type GovernedActionCommitInput = typeof GovernedActionCommitInput.Type;
+/** Workspace-scoped aggregate lookup. */
+export declare const GovernedActionReadInput: Schema.Struct<{
+    readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+    readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+}>;
+/** Decoded governed-action lookup. */
+export type GovernedActionReadInput = typeof GovernedActionReadInput.Type;
+/** Trusted governed action reconstructed from its immutable ordered history. */
+export declare const GovernedActionRecord: Schema.Struct<{
+    readonly envelope: Schema.Struct<{
+        readonly envelopeDigest: Schema.brand<Schema.String, string>;
+        readonly schemaVersion: Schema.Literal<1>;
+        readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+        readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly pluginConnectionRevision: Schema.brand<Schema.Int, "GovernedActionPluginConnectionRevision">;
+        readonly pluginConnectionAuthorityDigest: Schema.brand<Schema.String, string>;
+        readonly pluginId: Schema.brand<Schema.String, string>;
+        readonly pluginContractVersion: Schema.Struct<{
+            readonly major: Schema.Int;
+            readonly minor: Schema.Int;
+            readonly patch: Schema.Int;
+        }>;
+        readonly pluginAdapterVersion: Schema.Struct<{
+            readonly major: Schema.Int;
+            readonly minor: Schema.Int;
+            readonly patch: Schema.Int;
+        }>;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly capability: Schema.Struct<{
+            readonly capabilityId: Schema.Literal<"action.execute">;
+            readonly version: Schema.Int;
+        }>;
+        readonly targetEntityId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EntityId">;
+        readonly proposal: Schema.Struct<{
+            readonly proposalKey: Schema.brand<Schema.String, string>;
+            readonly capabilityVersion: Schema.Int;
+            readonly request: Schema.Struct<{
+                readonly actionKind: Schema.brand<Schema.String, string>;
+                readonly target: Schema.Struct<{
+                    entityType: Schema.brand<Schema.String, string>;
+                    vendorImmutableId: Schema.brand<Schema.String, "VendorImmutableId">;
+                }>;
+                readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                readonly payload: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+                readonly evidenceIds: Schema.$Array<Schema.brand<Schema.String, string>>;
+            }>;
+            readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+            readonly summary: Schema.String;
+            readonly impact: Schema.Struct<{
+                readonly level: Schema.Literals<readonly ["low", "medium", "high", "critical"]>;
+                readonly summary: Schema.String;
+            }>;
+            readonly proposedAt: Schema.DateTimeUtcFromString;
+        }>;
+        readonly evidence: Schema.$Array<Schema.Struct<{
+            readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+            readonly evidenceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceId">;
+            readonly evidenceClaimIds: Schema.$Array<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceClaimId">>;
+            readonly observedAt: Schema.DateTimeUtcFromString;
+            readonly validUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            readonly currentUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            readonly evaluatedAt: Schema.DateTimeUtcFromString;
+            readonly source: Schema.Literals<readonly ["current", "stale", "missing", "unavailable"]>;
+            readonly validity: Schema.Literals<readonly ["valid", "expired"]>;
+        }>>;
+        readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+        readonly policy: Schema.Struct<{
+            readonly policyId: Schema.brand<Schema.String, string>;
+            readonly policyVersion: Schema.Int;
+            readonly policyDigest: Schema.brand<Schema.String, string>;
+            readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+        }>;
+        readonly origin: Schema.TaggedUnion<{
+            readonly human: Schema.TaggedStruct<"human", {
+                readonly actor: Schema.TaggedStruct<"human", {
+                    readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+                }>;
+                readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+            }>;
+            readonly agent: Schema.TaggedStruct<"agent", {
+                readonly actor: Schema.TaggedStruct<"agent", {
+                    readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+                }>;
+                readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+                readonly initiatingSessionId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">>;
+            }>;
+        }>;
+        readonly proposalExpiresAt: Schema.DateTimeUtcFromString;
+        readonly causationId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">>;
+        readonly correlationId: Schema.NullOr<Schema.brand<Schema.String, "DomainEventCorrelationId">>;
+    }>;
+    readonly head: Schema.Struct<{
+        readonly state: Schema.Literals<readonly ["proposed", "authorized", "denied", "expired", "cancelled", "started", "cancel-requested", "cancel-requested-unknown", "succeeded", "failed", "unknown"]>;
+        readonly lineage: Schema.TaggedUnion<{
+            readonly none: Schema.TaggedStruct<"none", {}>;
+            readonly accepted: Schema.TaggedStruct<"accepted", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literal<"accepted">;
+                    readonly reconciliationKey: Schema.brand<Schema.String, string>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+            }>;
+            readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
+                readonly providerOperationId: Schema.NullOr<Schema.brand<Schema.String, string>>;
+                readonly reconciliationKey: Schema.brand<Schema.String, string>;
+            }>;
+            readonly manual: Schema.TaggedStruct<"manual", {
+                readonly providerOperationId: Schema.NullOr<Schema.brand<Schema.String, string>>;
+            }>;
+            readonly terminal: Schema.TaggedStruct<"terminal", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+            }>;
+        }>;
+    }>;
+    readonly headTransition: Schema.Struct<{
+        readonly commandDigest: Schema.brand<Schema.String, "GovernedActionCommandDigest">;
+        readonly schemaVersion: Schema.Literal<1>;
+        readonly transitionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionTransitionId">;
+        readonly previousTransitionId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionTransitionId">>;
+        readonly commandId: Schema.brand<Schema.String, string>;
+        readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly sequence: Schema.Int;
+        readonly fromState: Schema.NullOr<Schema.Literals<readonly ["proposed", "authorized", "denied", "expired", "cancelled", "started", "cancel-requested", "cancel-requested-unknown", "succeeded", "failed", "unknown"]>>;
+        readonly toState: Schema.Literals<readonly ["proposed", "authorized", "denied", "expired", "cancelled", "started", "cancel-requested", "cancel-requested-unknown", "succeeded", "failed", "unknown"]>;
+        readonly actionEnvelopeDigest: Schema.brand<Schema.String, string>;
+        readonly command: Schema.TaggedUnion<{
+            readonly propose: Schema.TaggedStruct<"propose", {}>;
+            readonly authorize: Schema.TaggedStruct<"authorize", {
+                readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+            }>;
+            readonly deny: Schema.TaggedStruct<"deny", {
+                readonly reason: Schema.Literals<readonly ["revision-changed", "evidence-stale", "evidence-invalid", "policy-denied", "session-invalid", "capability-changed", "plugin-unavailable", "preflight-blocked"]>;
+                readonly safeSummary: Schema.String;
+            }>;
+            readonly expire: Schema.TaggedStruct<"expire", {
+                readonly reason: Schema.Literals<readonly ["proposal-expired", "authorization-expired"]>;
+            }>;
+            readonly cancel: Schema.TaggedStruct<"cancel", {
+                readonly safeSummary: Schema.String;
+            }>;
+            readonly start: Schema.TaggedStruct<"start", {
+                readonly attemptId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAttemptId">;
+            }>;
+            readonly requestCancellation: Schema.TaggedStruct<"requestCancellation", {
+                readonly safeSummary: Schema.String;
+            }>;
+            readonly recordAccepted: Schema.TaggedStruct<"recordAccepted", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literal<"accepted">;
+                    readonly reconciliationKey: Schema.brand<Schema.String, string>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+            }>;
+            readonly recordSucceeded: Schema.TaggedStruct<"recordSucceeded", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+                readonly source: Schema.TaggedUnion<{
+                    readonly direct: Schema.TaggedStruct<"direct", {}>;
+                    readonly providerOperation: Schema.TaggedStruct<"providerOperation", {
+                        readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    }>;
+                    readonly reconciliation: Schema.TaggedStruct<"reconciliation", {
+                        readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+                    }>;
+                }>;
+            }>;
+            readonly recordFailed: Schema.TaggedStruct<"recordFailed", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+                readonly source: Schema.TaggedUnion<{
+                    readonly direct: Schema.TaggedStruct<"direct", {}>;
+                    readonly providerOperation: Schema.TaggedStruct<"providerOperation", {
+                        readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    }>;
+                    readonly reconciliation: Schema.TaggedStruct<"reconciliation", {
+                        readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+                    }>;
+                }>;
+            }>;
+            readonly recordUnknown: Schema.TaggedStruct<"recordUnknown", {
+                readonly outcome: Schema.TaggedUnion<{
+                    readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
+                        readonly reconciliationKey: Schema.brand<Schema.String, string>;
+                        readonly observedAt: Schema.DateTimeUtcFromString;
+                        readonly safeSummary: Schema.String;
+                    }>;
+                    readonly manual: Schema.TaggedStruct<"manual", {
+                        readonly observedAt: Schema.DateTimeUtcFromString;
+                        readonly safeSummary: Schema.String;
+                        readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
+                    }>;
+                }>;
+            }>;
+            readonly recordCancelled: Schema.TaggedStruct<"recordCancelled", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+                readonly source: Schema.TaggedUnion<{
+                    readonly direct: Schema.TaggedStruct<"direct", {}>;
+                    readonly providerOperation: Schema.TaggedStruct<"providerOperation", {
+                        readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    }>;
+                    readonly reconciliation: Schema.TaggedStruct<"reconciliation", {
+                        readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+                    }>;
+                }>;
+            }>;
+            readonly reconciliationPending: Schema.TaggedStruct<"reconciliationPending", {
+                readonly checkedAt: Schema.DateTimeUtcFromString;
+                readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+            }>;
+        }>;
+        readonly cause: Schema.TaggedUnion<{
+            readonly human: Schema.TaggedStruct<"human", {
+                readonly actor: Schema.TaggedStruct<"human", {
+                    readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+                }>;
+                readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+            }>;
+            readonly agent: Schema.TaggedStruct<"agent", {
+                readonly actor: Schema.TaggedStruct<"agent", {
+                    readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+                }>;
+                readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+            }>;
+            readonly system: Schema.TaggedStruct<"system", {
+                readonly component: Schema.brand<Schema.String, string>;
+            }>;
+        }>;
+        readonly occurredAt: Schema.DateTimeUtcFromString;
+        readonly causationId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">>;
+        readonly correlationId: Schema.NullOr<Schema.brand<Schema.String, "DomainEventCorrelationId">>;
+    }>;
+    readonly history: Schema.$Array<Schema.Struct<{
+        readonly commandDigest: Schema.brand<Schema.String, "GovernedActionCommandDigest">;
+        readonly schemaVersion: Schema.Literal<1>;
+        readonly transitionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionTransitionId">;
+        readonly previousTransitionId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionTransitionId">>;
+        readonly commandId: Schema.brand<Schema.String, string>;
+        readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly sequence: Schema.Int;
+        readonly fromState: Schema.NullOr<Schema.Literals<readonly ["proposed", "authorized", "denied", "expired", "cancelled", "started", "cancel-requested", "cancel-requested-unknown", "succeeded", "failed", "unknown"]>>;
+        readonly toState: Schema.Literals<readonly ["proposed", "authorized", "denied", "expired", "cancelled", "started", "cancel-requested", "cancel-requested-unknown", "succeeded", "failed", "unknown"]>;
+        readonly actionEnvelopeDigest: Schema.brand<Schema.String, string>;
+        readonly command: Schema.TaggedUnion<{
+            readonly propose: Schema.TaggedStruct<"propose", {}>;
+            readonly authorize: Schema.TaggedStruct<"authorize", {
+                readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+            }>;
+            readonly deny: Schema.TaggedStruct<"deny", {
+                readonly reason: Schema.Literals<readonly ["revision-changed", "evidence-stale", "evidence-invalid", "policy-denied", "session-invalid", "capability-changed", "plugin-unavailable", "preflight-blocked"]>;
+                readonly safeSummary: Schema.String;
+            }>;
+            readonly expire: Schema.TaggedStruct<"expire", {
+                readonly reason: Schema.Literals<readonly ["proposal-expired", "authorization-expired"]>;
+            }>;
+            readonly cancel: Schema.TaggedStruct<"cancel", {
+                readonly safeSummary: Schema.String;
+            }>;
+            readonly start: Schema.TaggedStruct<"start", {
+                readonly attemptId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAttemptId">;
+            }>;
+            readonly requestCancellation: Schema.TaggedStruct<"requestCancellation", {
+                readonly safeSummary: Schema.String;
+            }>;
+            readonly recordAccepted: Schema.TaggedStruct<"recordAccepted", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literal<"accepted">;
+                    readonly reconciliationKey: Schema.brand<Schema.String, string>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+            }>;
+            readonly recordSucceeded: Schema.TaggedStruct<"recordSucceeded", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+                readonly source: Schema.TaggedUnion<{
+                    readonly direct: Schema.TaggedStruct<"direct", {}>;
+                    readonly providerOperation: Schema.TaggedStruct<"providerOperation", {
+                        readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    }>;
+                    readonly reconciliation: Schema.TaggedStruct<"reconciliation", {
+                        readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+                    }>;
+                }>;
+            }>;
+            readonly recordFailed: Schema.TaggedStruct<"recordFailed", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+                readonly source: Schema.TaggedUnion<{
+                    readonly direct: Schema.TaggedStruct<"direct", {}>;
+                    readonly providerOperation: Schema.TaggedStruct<"providerOperation", {
+                        readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    }>;
+                    readonly reconciliation: Schema.TaggedStruct<"reconciliation", {
+                        readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+                    }>;
+                }>;
+            }>;
+            readonly recordUnknown: Schema.TaggedStruct<"recordUnknown", {
+                readonly outcome: Schema.TaggedUnion<{
+                    readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
+                        readonly reconciliationKey: Schema.brand<Schema.String, string>;
+                        readonly observedAt: Schema.DateTimeUtcFromString;
+                        readonly safeSummary: Schema.String;
+                    }>;
+                    readonly manual: Schema.TaggedStruct<"manual", {
+                        readonly observedAt: Schema.DateTimeUtcFromString;
+                        readonly safeSummary: Schema.String;
+                        readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
+                    }>;
+                }>;
+            }>;
+            readonly recordCancelled: Schema.TaggedStruct<"recordCancelled", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+                readonly source: Schema.TaggedUnion<{
+                    readonly direct: Schema.TaggedStruct<"direct", {}>;
+                    readonly providerOperation: Schema.TaggedStruct<"providerOperation", {
+                        readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    }>;
+                    readonly reconciliation: Schema.TaggedStruct<"reconciliation", {
+                        readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+                    }>;
+                }>;
+            }>;
+            readonly reconciliationPending: Schema.TaggedStruct<"reconciliationPending", {
+                readonly checkedAt: Schema.DateTimeUtcFromString;
+                readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+            }>;
+        }>;
+        readonly cause: Schema.TaggedUnion<{
+            readonly human: Schema.TaggedStruct<"human", {
+                readonly actor: Schema.TaggedStruct<"human", {
+                    readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+                }>;
+                readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+            }>;
+            readonly agent: Schema.TaggedStruct<"agent", {
+                readonly actor: Schema.TaggedStruct<"agent", {
+                    readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+                }>;
+                readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+            }>;
+            readonly system: Schema.TaggedStruct<"system", {
+                readonly component: Schema.brand<Schema.String, string>;
+            }>;
+        }>;
+        readonly occurredAt: Schema.DateTimeUtcFromString;
+        readonly causationId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">>;
+        readonly correlationId: Schema.NullOr<Schema.brand<Schema.String, "DomainEventCorrelationId">>;
+    }>>;
+    readonly authorization: Schema.NullOr<Schema.Struct<{
+        readonly schemaVersion: Schema.Literal<1>;
+        readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+        readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly pluginConnectionRevision: Schema.brand<Schema.Int, "GovernedActionPluginConnectionRevision">;
+        readonly pluginConnectionAuthorityDigest: Schema.brand<Schema.String, string>;
+        readonly actionEnvelopeDigest: Schema.brand<Schema.String, string>;
+        readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+        readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+        readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+        readonly policyDigest: Schema.brand<Schema.String, string>;
+        readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+        readonly capabilityVersion: Schema.Int;
+        readonly actor: Schema.TaggedStruct<"human", {
+            readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+        }>;
+        readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+        readonly sessionPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+        readonly sessionExpiresAt: Schema.DateTimeUtcFromString;
+        readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+        readonly authorizedAt: Schema.DateTimeUtcFromString;
+        readonly expiresAt: Schema.DateTimeUtcFromString;
+    }>>;
+    readonly policyEvaluation: Schema.NullOr<Schema.Struct<{
+        readonly schemaVersion: Schema.Literal<1>;
+        readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly policy: Schema.Struct<{
+            readonly policyId: Schema.brand<Schema.String, string>;
+            readonly policyVersion: Schema.Int;
+            readonly policyDigest: Schema.brand<Schema.String, string>;
+            readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+        }>;
+        readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+        readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+        readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+        readonly decision: Schema.Literals<readonly ["allowed", "denied"]>;
+        readonly evaluatedAt: Schema.DateTimeUtcFromString;
+    }>>;
+    readonly attempt: Schema.NullOr<Schema.Struct<{
+        readonly schemaVersion: Schema.Literal<1>;
+        readonly attemptId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAttemptId">;
+        readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+        readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+        readonly attemptNumber: Schema.Literal<1>;
+        readonly actionEnvelopeDigest: Schema.brand<Schema.String, string>;
+        readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+        readonly policyEvaluationDigest: Schema.brand<Schema.String, string>;
+        readonly preflight: Schema.TaggedStruct<"ready", {
+            readonly checkedRevision: Schema.brand<Schema.String, "Revision">;
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+        }>;
+        readonly startedAt: Schema.DateTimeUtcFromString;
+    }>>;
+}>;
+/** Decoded governed-action aggregate. */
+export type GovernedActionRecord = typeof GovernedActionRecord.Type;
+/** Exact command commit or replay result. Replays never carry an execution permit. */
+export type GovernedActionCommitResult = {
+    readonly _tag: "committed";
+    readonly transition: GovernedActionTransitionV1;
+} | {
+    readonly _tag: "replayed";
+    readonly transition: GovernedActionTransitionV1;
+};
+declare const GovernedActionInputError_base: Schema.Class<GovernedActionInputError, Schema.TaggedStruct<"GovernedActionInputError", {
+    readonly operation: Schema.Literals<readonly ["commit", "read"]>;
+    readonly reason: Schema.Literals<readonly ["changed-command-retry", "conflicting-action-identity", "illegal-transition", "invalid-request", "stale-head"]>;
+}>, import("effect/Cause").YieldableError>;
+/** Caller material is invalid or conflicts with immutable governed-action identity. */
+export declare class GovernedActionInputError extends GovernedActionInputError_base {
+}
+export {};
+//# sourceMappingURL=contract.d.ts.map