@knpkv/control-center 0.1.0

package/dist/server/server/persistence/repositories/governed-action/transaction.d.ts

@@ -0,0 +1,457 @@
+import * as Crypto from "effect/Crypto";
+import * as Effect from "effect/Effect";
+import { Database } from "../../Database.js";
+import type { PersistedRecordError, PersistenceOperationError, QuarantineWriteError } from "../../errors.js";
+import { QuarantineRepository } from "../quarantineRepository.js";
+import type { GovernedActionReadInput } from "./contract.js";
+import type { MalformedGovernedActionRecord } from "./quarantine.js";
+/**
+ * Build the rollback-then-quarantine boundary shared by verified governed-action transactions.
+ * Raw malformed rows never escape this module or enter the quarantine table before rollback.
+ */
+export declare const makeGovernedActionTransaction: Effect.Effect<{
+    capture: <Value, Failure, Requirements>(effect: Effect.Effect<Value, Failure, Requirements>) => Effect.Effect<Value, Failure | PersistedRecordError | PersistenceOperationError | QuarantineWriteError, Requirements>;
+    read: (request: GovernedActionReadInput) => Effect.Effect<{
+        envelope: import("effect/Schema").Struct.ReadonlySide<{
+            readonly envelopeDigest: import("effect/Schema").brand<import("effect/Schema").String, string>;
+            readonly schemaVersion: import("effect/Schema").Literal<1>;
+            readonly actionId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "GovernedActionId">;
+            readonly idempotencyKey: import("effect/Schema").brand<import("effect/Schema").String, "GovernedActionIdempotencyKey">;
+            readonly workspaceId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "WorkspaceId">;
+            readonly pluginConnectionId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "PluginConnectionId">;
+            readonly pluginConnectionRevision: import("effect/Schema").brand<import("effect/Schema").Int, "GovernedActionPluginConnectionRevision">;
+            readonly pluginConnectionAuthorityDigest: import("effect/Schema").brand<import("effect/Schema").String, string>;
+            readonly pluginId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+            readonly pluginContractVersion: import("effect/Schema").Struct<{
+                readonly major: import("effect/Schema").Int;
+                readonly minor: import("effect/Schema").Int;
+                readonly patch: import("effect/Schema").Int;
+            }>;
+            readonly pluginAdapterVersion: import("effect/Schema").Struct<{
+                readonly major: import("effect/Schema").Int;
+                readonly minor: import("effect/Schema").Int;
+                readonly patch: import("effect/Schema").Int;
+            }>;
+            readonly providerId: import("effect/Schema").Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+            readonly capability: import("effect/Schema").Struct<{
+                readonly capabilityId: import("effect/Schema").Literal<"action.execute">;
+                readonly version: import("effect/Schema").Int;
+            }>;
+            readonly targetEntityId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "EntityId">;
+            readonly proposal: import("effect/Schema").Struct<{
+                readonly proposalKey: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                readonly capabilityVersion: import("effect/Schema").Int;
+                readonly request: import("effect/Schema").Struct<{
+                    readonly actionKind: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                    readonly target: import("effect/Schema").Struct<{
+                        entityType: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        vendorImmutableId: import("effect/Schema").brand<import("effect/Schema").String, "VendorImmutableId">;
+                    }>;
+                    readonly expectedRevision: import("effect/Schema").brand<import("effect/Schema").String, "Revision">;
+                    readonly payload: import("effect/Schema").Codec<import("effect/Schema").Json, import("effect/Schema").Json, never, never>;
+                    readonly evidenceIds: import("effect/Schema").$Array<import("effect/Schema").brand<import("effect/Schema").String, string>>;
+                }>;
+                readonly payloadDigest: import("effect/Schema").brand<import("effect/Schema").String, "PluginActionPayloadDigest">;
+                readonly summary: import("effect/Schema").String;
+                readonly impact: import("effect/Schema").Struct<{
+                    readonly level: import("effect/Schema").Literals<readonly ["low", "medium", "high", "critical"]>;
+                    readonly summary: import("effect/Schema").String;
+                }>;
+                readonly proposedAt: import("effect/Schema").DateTimeUtcFromString;
+            }>;
+            readonly evidence: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+                readonly workspaceId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "WorkspaceId">;
+                readonly evidenceId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "EvidenceId">;
+                readonly evidenceClaimIds: import("effect/Schema").$Array<import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "EvidenceClaimId">>;
+                readonly observedAt: import("effect/Schema").DateTimeUtcFromString;
+                readonly validUntil: import("effect/Schema").NullOr<import("effect/Schema").DateTimeUtcFromString>;
+                readonly currentUntil: import("effect/Schema").NullOr<import("effect/Schema").DateTimeUtcFromString>;
+                readonly evaluatedAt: import("effect/Schema").DateTimeUtcFromString;
+                readonly source: import("effect/Schema").Literals<readonly ["current", "stale", "missing", "unavailable"]>;
+                readonly validity: import("effect/Schema").Literals<readonly ["valid", "expired"]>;
+            }>>;
+            readonly evidenceSetDigest: import("effect/Schema").brand<import("effect/Schema").String, string>;
+            readonly policy: import("effect/Schema").Struct<{
+                readonly policyId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                readonly policyVersion: import("effect/Schema").Int;
+                readonly policyDigest: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                readonly requiredPermission: import("effect/Schema").Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+            }>;
+            readonly origin: import("effect/Schema").TaggedUnion<{
+                readonly human: import("effect/Schema").TaggedStruct<"human", {
+                    readonly actor: import("effect/Schema").TaggedStruct<"human", {
+                        readonly personId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "PersonId">;
+                    }>;
+                    readonly sessionId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "SessionId">;
+                }>;
+                readonly agent: import("effect/Schema").TaggedStruct<"agent", {
+                    readonly actor: import("effect/Schema").TaggedStruct<"agent", {
+                        readonly agentId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "AgentId">;
+                    }>;
+                    readonly jobId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "JobId">;
+                    readonly initiatingSessionId: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "SessionId">>;
+                }>;
+            }>;
+            readonly proposalExpiresAt: import("effect/Schema").DateTimeUtcFromString;
+            readonly causationId: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "DomainEventId">>;
+            readonly correlationId: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").String, "DomainEventCorrelationId">>;
+        }, "Type">;
+        head: import("effect/Schema").Struct.ReadonlySide<{
+            readonly state: import("effect/Schema").Literals<readonly ["proposed", "authorized", "denied", "expired", "cancelled", "started", "cancel-requested", "cancel-requested-unknown", "succeeded", "failed", "unknown"]>;
+            readonly lineage: import("effect/Schema").TaggedUnion<{
+                readonly none: import("effect/Schema").TaggedStruct<"none", {}>;
+                readonly accepted: import("effect/Schema").TaggedStruct<"accepted", {
+                    readonly receipt: import("effect/Schema").Struct<{
+                        readonly status: import("effect/Schema").Literal<"accepted">;
+                        readonly reconciliationKey: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        readonly providerOperationId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        readonly safeSummary: import("effect/Schema").String;
+                        readonly observedAt: import("effect/Schema").DateTimeUtcFromString;
+                    }>;
+                }>;
+                readonly reconcilable: import("effect/Schema").TaggedStruct<"reconcilable", {
+                    readonly providerOperationId: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").String, string>>;
+                    readonly reconciliationKey: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                }>;
+                readonly manual: import("effect/Schema").TaggedStruct<"manual", {
+                    readonly providerOperationId: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").String, string>>;
+                }>;
+                readonly terminal: import("effect/Schema").TaggedStruct<"terminal", {
+                    readonly receipt: import("effect/Schema").Struct<{
+                        readonly status: import("effect/Schema").Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                        readonly providerOperationId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        readonly safeSummary: import("effect/Schema").String;
+                        readonly observedAt: import("effect/Schema").DateTimeUtcFromString;
+                    }>;
+                }>;
+            }>;
+        }, "Type">;
+        headTransition: import("effect/Schema").Struct.ReadonlySide<{
+            readonly commandDigest: import("effect/Schema").brand<import("effect/Schema").String, "GovernedActionCommandDigest">;
+            readonly schemaVersion: import("effect/Schema").Literal<1>;
+            readonly transitionId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "GovernedActionTransitionId">;
+            readonly previousTransitionId: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "GovernedActionTransitionId">>;
+            readonly commandId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+            readonly actionId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "GovernedActionId">;
+            readonly workspaceId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "WorkspaceId">;
+            readonly sequence: import("effect/Schema").Int;
+            readonly fromState: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["proposed", "authorized", "denied", "expired", "cancelled", "started", "cancel-requested", "cancel-requested-unknown", "succeeded", "failed", "unknown"]>>;
+            readonly toState: import("effect/Schema").Literals<readonly ["proposed", "authorized", "denied", "expired", "cancelled", "started", "cancel-requested", "cancel-requested-unknown", "succeeded", "failed", "unknown"]>;
+            readonly actionEnvelopeDigest: import("effect/Schema").brand<import("effect/Schema").String, string>;
+            readonly command: import("effect/Schema").TaggedUnion<{
+                readonly propose: import("effect/Schema").TaggedStruct<"propose", {}>;
+                readonly authorize: import("effect/Schema").TaggedStruct<"authorize", {
+                    readonly authorizationId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "GovernedActionAuthorizationId">;
+                }>;
+                readonly deny: import("effect/Schema").TaggedStruct<"deny", {
+                    readonly reason: import("effect/Schema").Literals<readonly ["revision-changed", "evidence-stale", "evidence-invalid", "policy-denied", "session-invalid", "capability-changed", "plugin-unavailable", "preflight-blocked"]>;
+                    readonly safeSummary: import("effect/Schema").String;
+                }>;
+                readonly expire: import("effect/Schema").TaggedStruct<"expire", {
+                    readonly reason: import("effect/Schema").Literals<readonly ["proposal-expired", "authorization-expired"]>;
+                }>;
+                readonly cancel: import("effect/Schema").TaggedStruct<"cancel", {
+                    readonly safeSummary: import("effect/Schema").String;
+                }>;
+                readonly start: import("effect/Schema").TaggedStruct<"start", {
+                    readonly attemptId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "GovernedActionAttemptId">;
+                }>;
+                readonly requestCancellation: import("effect/Schema").TaggedStruct<"requestCancellation", {
+                    readonly safeSummary: import("effect/Schema").String;
+                }>;
+                readonly recordAccepted: import("effect/Schema").TaggedStruct<"recordAccepted", {
+                    readonly receipt: import("effect/Schema").Struct<{
+                        readonly status: import("effect/Schema").Literal<"accepted">;
+                        readonly reconciliationKey: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        readonly providerOperationId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        readonly safeSummary: import("effect/Schema").String;
+                        readonly observedAt: import("effect/Schema").DateTimeUtcFromString;
+                    }>;
+                }>;
+                readonly recordSucceeded: import("effect/Schema").TaggedStruct<"recordSucceeded", {
+                    readonly receipt: import("effect/Schema").Struct<{
+                        readonly status: import("effect/Schema").Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                        readonly providerOperationId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        readonly safeSummary: import("effect/Schema").String;
+                        readonly observedAt: import("effect/Schema").DateTimeUtcFromString;
+                    }>;
+                    readonly source: import("effect/Schema").TaggedUnion<{
+                        readonly direct: import("effect/Schema").TaggedStruct<"direct", {}>;
+                        readonly providerOperation: import("effect/Schema").TaggedStruct<"providerOperation", {
+                            readonly providerOperationId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        }>;
+                        readonly reconciliation: import("effect/Schema").TaggedStruct<"reconciliation", {
+                            readonly reconciliationKey: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").String, string>>;
+                        }>;
+                    }>;
+                }>;
+                readonly recordFailed: import("effect/Schema").TaggedStruct<"recordFailed", {
+                    readonly receipt: import("effect/Schema").Struct<{
+                        readonly status: import("effect/Schema").Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                        readonly providerOperationId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        readonly safeSummary: import("effect/Schema").String;
+                        readonly observedAt: import("effect/Schema").DateTimeUtcFromString;
+                    }>;
+                    readonly source: import("effect/Schema").TaggedUnion<{
+                        readonly direct: import("effect/Schema").TaggedStruct<"direct", {}>;
+                        readonly providerOperation: import("effect/Schema").TaggedStruct<"providerOperation", {
+                            readonly providerOperationId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        }>;
+                        readonly reconciliation: import("effect/Schema").TaggedStruct<"reconciliation", {
+                            readonly reconciliationKey: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").String, string>>;
+                        }>;
+                    }>;
+                }>;
+                readonly recordUnknown: import("effect/Schema").TaggedStruct<"recordUnknown", {
+                    readonly outcome: import("effect/Schema").TaggedUnion<{
+                        readonly reconcilable: import("effect/Schema").TaggedStruct<"reconcilable", {
+                            readonly reconciliationKey: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                            readonly observedAt: import("effect/Schema").DateTimeUtcFromString;
+                            readonly safeSummary: import("effect/Schema").String;
+                        }>;
+                        readonly manual: import("effect/Schema").TaggedStruct<"manual", {
+                            readonly observedAt: import("effect/Schema").DateTimeUtcFromString;
+                            readonly safeSummary: import("effect/Schema").String;
+                            readonly reason: import("effect/Schema").Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
+                        }>;
+                    }>;
+                }>;
+                readonly recordCancelled: import("effect/Schema").TaggedStruct<"recordCancelled", {
+                    readonly receipt: import("effect/Schema").Struct<{
+                        readonly status: import("effect/Schema").Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                        readonly providerOperationId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        readonly safeSummary: import("effect/Schema").String;
+                        readonly observedAt: import("effect/Schema").DateTimeUtcFromString;
+                    }>;
+                    readonly source: import("effect/Schema").TaggedUnion<{
+                        readonly direct: import("effect/Schema").TaggedStruct<"direct", {}>;
+                        readonly providerOperation: import("effect/Schema").TaggedStruct<"providerOperation", {
+                            readonly providerOperationId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        }>;
+                        readonly reconciliation: import("effect/Schema").TaggedStruct<"reconciliation", {
+                            readonly reconciliationKey: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").String, string>>;
+                        }>;
+                    }>;
+                }>;
+                readonly reconciliationPending: import("effect/Schema").TaggedStruct<"reconciliationPending", {
+                    readonly checkedAt: import("effect/Schema").DateTimeUtcFromString;
+                    readonly reconciliationKey: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").String, string>>;
+                }>;
+            }>;
+            readonly cause: import("effect/Schema").TaggedUnion<{
+                readonly human: import("effect/Schema").TaggedStruct<"human", {
+                    readonly actor: import("effect/Schema").TaggedStruct<"human", {
+                        readonly personId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "PersonId">;
+                    }>;
+                    readonly sessionId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "SessionId">;
+                }>;
+                readonly agent: import("effect/Schema").TaggedStruct<"agent", {
+                    readonly actor: import("effect/Schema").TaggedStruct<"agent", {
+                        readonly agentId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "AgentId">;
+                    }>;
+                    readonly jobId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "JobId">;
+                }>;
+                readonly system: import("effect/Schema").TaggedStruct<"system", {
+                    readonly component: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                }>;
+            }>;
+            readonly occurredAt: import("effect/Schema").DateTimeUtcFromString;
+            readonly causationId: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "DomainEventId">>;
+            readonly correlationId: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").String, "DomainEventCorrelationId">>;
+        }, "Type">;
+        history: import("effect/Schema").Struct.ReadonlySide<{
+            readonly commandDigest: import("effect/Schema").brand<import("effect/Schema").String, "GovernedActionCommandDigest">;
+            readonly schemaVersion: import("effect/Schema").Literal<1>;
+            readonly transitionId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "GovernedActionTransitionId">;
+            readonly previousTransitionId: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "GovernedActionTransitionId">>;
+            readonly commandId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+            readonly actionId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "GovernedActionId">;
+            readonly workspaceId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "WorkspaceId">;
+            readonly sequence: import("effect/Schema").Int;
+            readonly fromState: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["proposed", "authorized", "denied", "expired", "cancelled", "started", "cancel-requested", "cancel-requested-unknown", "succeeded", "failed", "unknown"]>>;
+            readonly toState: import("effect/Schema").Literals<readonly ["proposed", "authorized", "denied", "expired", "cancelled", "started", "cancel-requested", "cancel-requested-unknown", "succeeded", "failed", "unknown"]>;
+            readonly actionEnvelopeDigest: import("effect/Schema").brand<import("effect/Schema").String, string>;
+            readonly command: import("effect/Schema").TaggedUnion<{
+                readonly propose: import("effect/Schema").TaggedStruct<"propose", {}>;
+                readonly authorize: import("effect/Schema").TaggedStruct<"authorize", {
+                    readonly authorizationId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "GovernedActionAuthorizationId">;
+                }>;
+                readonly deny: import("effect/Schema").TaggedStruct<"deny", {
+                    readonly reason: import("effect/Schema").Literals<readonly ["revision-changed", "evidence-stale", "evidence-invalid", "policy-denied", "session-invalid", "capability-changed", "plugin-unavailable", "preflight-blocked"]>;
+                    readonly safeSummary: import("effect/Schema").String;
+                }>;
+                readonly expire: import("effect/Schema").TaggedStruct<"expire", {
+                    readonly reason: import("effect/Schema").Literals<readonly ["proposal-expired", "authorization-expired"]>;
+                }>;
+                readonly cancel: import("effect/Schema").TaggedStruct<"cancel", {
+                    readonly safeSummary: import("effect/Schema").String;
+                }>;
+                readonly start: import("effect/Schema").TaggedStruct<"start", {
+                    readonly attemptId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "GovernedActionAttemptId">;
+                }>;
+                readonly requestCancellation: import("effect/Schema").TaggedStruct<"requestCancellation", {
+                    readonly safeSummary: import("effect/Schema").String;
+                }>;
+                readonly recordAccepted: import("effect/Schema").TaggedStruct<"recordAccepted", {
+                    readonly receipt: import("effect/Schema").Struct<{
+                        readonly status: import("effect/Schema").Literal<"accepted">;
+                        readonly reconciliationKey: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        readonly providerOperationId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        readonly safeSummary: import("effect/Schema").String;
+                        readonly observedAt: import("effect/Schema").DateTimeUtcFromString;
+                    }>;
+                }>;
+                readonly recordSucceeded: import("effect/Schema").TaggedStruct<"recordSucceeded", {
+                    readonly receipt: import("effect/Schema").Struct<{
+                        readonly status: import("effect/Schema").Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                        readonly providerOperationId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        readonly safeSummary: import("effect/Schema").String;
+                        readonly observedAt: import("effect/Schema").DateTimeUtcFromString;
+                    }>;
+                    readonly source: import("effect/Schema").TaggedUnion<{
+                        readonly direct: import("effect/Schema").TaggedStruct<"direct", {}>;
+                        readonly providerOperation: import("effect/Schema").TaggedStruct<"providerOperation", {
+                            readonly providerOperationId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        }>;
+                        readonly reconciliation: import("effect/Schema").TaggedStruct<"reconciliation", {
+                            readonly reconciliationKey: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").String, string>>;
+                        }>;
+                    }>;
+                }>;
+                readonly recordFailed: import("effect/Schema").TaggedStruct<"recordFailed", {
+                    readonly receipt: import("effect/Schema").Struct<{
+                        readonly status: import("effect/Schema").Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                        readonly providerOperationId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        readonly safeSummary: import("effect/Schema").String;
+                        readonly observedAt: import("effect/Schema").DateTimeUtcFromString;
+                    }>;
+                    readonly source: import("effect/Schema").TaggedUnion<{
+                        readonly direct: import("effect/Schema").TaggedStruct<"direct", {}>;
+                        readonly providerOperation: import("effect/Schema").TaggedStruct<"providerOperation", {
+                            readonly providerOperationId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        }>;
+                        readonly reconciliation: import("effect/Schema").TaggedStruct<"reconciliation", {
+                            readonly reconciliationKey: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").String, string>>;
+                        }>;
+                    }>;
+                }>;
+                readonly recordUnknown: import("effect/Schema").TaggedStruct<"recordUnknown", {
+                    readonly outcome: import("effect/Schema").TaggedUnion<{
+                        readonly reconcilable: import("effect/Schema").TaggedStruct<"reconcilable", {
+                            readonly reconciliationKey: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                            readonly observedAt: import("effect/Schema").DateTimeUtcFromString;
+                            readonly safeSummary: import("effect/Schema").String;
+                        }>;
+                        readonly manual: import("effect/Schema").TaggedStruct<"manual", {
+                            readonly observedAt: import("effect/Schema").DateTimeUtcFromString;
+                            readonly safeSummary: import("effect/Schema").String;
+                            readonly reason: import("effect/Schema").Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
+                        }>;
+                    }>;
+                }>;
+                readonly recordCancelled: import("effect/Schema").TaggedStruct<"recordCancelled", {
+                    readonly receipt: import("effect/Schema").Struct<{
+                        readonly status: import("effect/Schema").Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                        readonly providerOperationId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        readonly safeSummary: import("effect/Schema").String;
+                        readonly observedAt: import("effect/Schema").DateTimeUtcFromString;
+                    }>;
+                    readonly source: import("effect/Schema").TaggedUnion<{
+                        readonly direct: import("effect/Schema").TaggedStruct<"direct", {}>;
+                        readonly providerOperation: import("effect/Schema").TaggedStruct<"providerOperation", {
+                            readonly providerOperationId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                        }>;
+                        readonly reconciliation: import("effect/Schema").TaggedStruct<"reconciliation", {
+                            readonly reconciliationKey: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").String, string>>;
+                        }>;
+                    }>;
+                }>;
+                readonly reconciliationPending: import("effect/Schema").TaggedStruct<"reconciliationPending", {
+                    readonly checkedAt: import("effect/Schema").DateTimeUtcFromString;
+                    readonly reconciliationKey: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").String, string>>;
+                }>;
+            }>;
+            readonly cause: import("effect/Schema").TaggedUnion<{
+                readonly human: import("effect/Schema").TaggedStruct<"human", {
+                    readonly actor: import("effect/Schema").TaggedStruct<"human", {
+                        readonly personId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "PersonId">;
+                    }>;
+                    readonly sessionId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "SessionId">;
+                }>;
+                readonly agent: import("effect/Schema").TaggedStruct<"agent", {
+                    readonly actor: import("effect/Schema").TaggedStruct<"agent", {
+                        readonly agentId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "AgentId">;
+                    }>;
+                    readonly jobId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "JobId">;
+                }>;
+                readonly system: import("effect/Schema").TaggedStruct<"system", {
+                    readonly component: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                }>;
+            }>;
+            readonly occurredAt: import("effect/Schema").DateTimeUtcFromString;
+            readonly causationId: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "DomainEventId">>;
+            readonly correlationId: import("effect/Schema").NullOr<import("effect/Schema").brand<import("effect/Schema").String, "DomainEventCorrelationId">>;
+        }, "Type">[];
+        authorization: import("effect/Schema").Struct.ReadonlySide<{
+            readonly schemaVersion: import("effect/Schema").Literal<1>;
+            readonly authorizationId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "GovernedActionAuthorizationId">;
+            readonly actionId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "GovernedActionId">;
+            readonly workspaceId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "WorkspaceId">;
+            readonly pluginConnectionId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "PluginConnectionId">;
+            readonly pluginConnectionRevision: import("effect/Schema").brand<import("effect/Schema").Int, "GovernedActionPluginConnectionRevision">;
+            readonly pluginConnectionAuthorityDigest: import("effect/Schema").brand<import("effect/Schema").String, string>;
+            readonly actionEnvelopeDigest: import("effect/Schema").brand<import("effect/Schema").String, string>;
+            readonly idempotencyKey: import("effect/Schema").brand<import("effect/Schema").String, "GovernedActionIdempotencyKey">;
+            readonly payloadDigest: import("effect/Schema").brand<import("effect/Schema").String, "PluginActionPayloadDigest">;
+            readonly evidenceSetDigest: import("effect/Schema").brand<import("effect/Schema").String, string>;
+            readonly policyDigest: import("effect/Schema").brand<import("effect/Schema").String, string>;
+            readonly expectedRevision: import("effect/Schema").brand<import("effect/Schema").String, "Revision">;
+            readonly capabilityVersion: import("effect/Schema").Int;
+            readonly actor: import("effect/Schema").TaggedStruct<"human", {
+                readonly personId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "PersonId">;
+            }>;
+            readonly sessionId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "SessionId">;
+            readonly sessionPermission: import("effect/Schema").Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+            readonly sessionExpiresAt: import("effect/Schema").DateTimeUtcFromString;
+            readonly requiredPermission: import("effect/Schema").Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+            readonly authorizedAt: import("effect/Schema").DateTimeUtcFromString;
+            readonly expiresAt: import("effect/Schema").DateTimeUtcFromString;
+        }, "Type"> | null;
+        policyEvaluation: import("effect/Schema").Struct.ReadonlySide<{
+            readonly schemaVersion: import("effect/Schema").Literal<1>;
+            readonly actionId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "GovernedActionId">;
+            readonly workspaceId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "WorkspaceId">;
+            readonly policy: import("effect/Schema").Struct<{
+                readonly policyId: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                readonly policyVersion: import("effect/Schema").Int;
+                readonly policyDigest: import("effect/Schema").brand<import("effect/Schema").String, string>;
+                readonly requiredPermission: import("effect/Schema").Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+            }>;
+            readonly payloadDigest: import("effect/Schema").brand<import("effect/Schema").String, "PluginActionPayloadDigest">;
+            readonly evidenceSetDigest: import("effect/Schema").brand<import("effect/Schema").String, string>;
+            readonly expectedRevision: import("effect/Schema").brand<import("effect/Schema").String, "Revision">;
+            readonly decision: import("effect/Schema").Literals<readonly ["allowed", "denied"]>;
+            readonly evaluatedAt: import("effect/Schema").DateTimeUtcFromString;
+        }, "Type"> | null;
+        attempt: import("effect/Schema").Struct.ReadonlySide<{
+            readonly schemaVersion: import("effect/Schema").Literal<1>;
+            readonly attemptId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "GovernedActionAttemptId">;
+            readonly authorizationId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "GovernedActionAuthorizationId">;
+            readonly actionId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "GovernedActionId">;
+            readonly workspaceId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "WorkspaceId">;
+            readonly pluginConnectionId: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").String, import("effect/Schema").String, never, never>, "PluginConnectionId">;
+            readonly idempotencyKey: import("effect/Schema").brand<import("effect/Schema").String, "GovernedActionIdempotencyKey">;
+            readonly attemptNumber: import("effect/Schema").Literal<1>;
+            readonly actionEnvelopeDigest: import("effect/Schema").brand<import("effect/Schema").String, string>;
+            readonly expectedRevision: import("effect/Schema").brand<import("effect/Schema").String, "Revision">;
+            readonly policyEvaluationDigest: import("effect/Schema").brand<import("effect/Schema").String, string>;
+            readonly preflight: import("effect/Schema").TaggedStruct<"ready", {
+                readonly checkedRevision: import("effect/Schema").brand<import("effect/Schema").String, "Revision">;
+                readonly checkedAt: import("effect/Schema").DateTimeUtcFromString;
+            }>;
+            readonly startedAt: import("effect/Schema").DateTimeUtcFromString;
+        }, "Type"> | null;
+    }, import("../../errors.js").RecordNotFoundError | PersistenceOperationError | PersistedRecordError | import("effect/unstable/sql/SqlError").SqlError | MalformedGovernedActionRecord, never>;
+    transact: <Value, Failure, Requirements>(operation: string, effect: Effect.Effect<Value, Failure, Requirements>) => Effect.Effect<Value, Failure | PersistedRecordError | PersistenceOperationError | QuarantineWriteError, Requirements>;
+}, never, Crypto.Crypto | Database | QuarantineRepository>;
+//# sourceMappingURL=transaction.d.ts.map

package/dist/server/server/persistence/repositories/governed-action/transaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction.d.ts","sourceRoot":"","sources":["../../../../../../src/server/persistence/repositories/governed-action/transaction.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAIvC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,KAAK,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAG5G,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AACjE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAA;AAC5D,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAA;AAUpE;;;GAGG;AACH,eAAO,MAAM,6BAA6B;cAwBvB,KAAK,EAAE,OAAO,EAAE,YAAY,UACnC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,KAClD,MAAM,CAAC,MAAM,CACd,KAAK,EACL,OAAO,GAAG,oBAAoB,GAAG,yBAAyB,GAAG,oBAAoB,EACjF,YAAY,CACb;oBA4BsB,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAT5B,KAAK,EAAE,OAAO,EAAE,YAAY,aACjC,MAAM,UACT,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,KAClD,MAAM,CAAC,MAAM,CACd,KAAK,EACL,OAAO,GAAG,oBAAoB,GAAG,yBAAyB,GAAG,oBAAoB,EACjF,YAAY,CACb;0DAMD,CAAA"}