npm - @knpkv/control-center - Versions diffs - 0.1.0 - Mend

@knpkv/control-center 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (664) hide show

package/dist/server/server/persistence/repositories/governed-action/write-replay.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"write-replay.d.ts","sourceRoot":"","sources":["../../../../../../src/server/persistence/repositories/governed-action/write-replay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAavC,OAAO,EAQL,KAAK,iBAAiB,EAEvB,MAAM,wBAAwB,CAAA;AAE/B,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkClC,CAAA;AAEF,MAAM,MAAM,uBAAuB,GAAG,OAAO,uBAAuB,CAAC,IAAI,CAAA;AAEzE,eAAO,MAAM,wBAAwB,GAAI,eAAe,MAAM,CAAC,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqSpE,CAAA"}

package/dist/server/server/persistence/repositories/governed-action/write.d.ts ADDED Viewed

@@ -0,0 +1,618 @@
+import * as Crypto from "effect/Crypto";
+import * as Effect from "effect/Effect";
+import * as Schema from "effect/Schema";
+import { GovernedActionTransitionV1 } from "../../../../domain/governedAction/index.js";
+import { Database } from "../../Database.js";
+import { PersistenceOperationError } from "../../errors.js";
+/**
+ * Private governed-action writer that participates in the caller's current transaction.
+ *
+ * It never opens a transaction. Execution coordination uses this seam to commit a lifecycle
+ * transition and its lease atomically; ordinary repository callers use `makeGovernedActionWrite`.
+ */
+export declare const makeGovernedActionTransactionWrite: Effect.Effect<{
+    commit: (input: Schema.Struct.ReadonlySide<{
+        readonly envelope: Schema.Struct<{
+            readonly envelopeDigest: Schema.brand<Schema.String, string>;
+            readonly schemaVersion: Schema.Literal<1>;
+            readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+            readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+            readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+            readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+            readonly pluginConnectionRevision: Schema.brand<Schema.Int, "GovernedActionPluginConnectionRevision">;
+            readonly pluginConnectionAuthorityDigest: Schema.brand<Schema.String, string>;
+            readonly pluginId: Schema.brand<Schema.String, string>;
+            readonly pluginContractVersion: Schema.Struct<{
+                readonly major: Schema.Int;
+                readonly minor: Schema.Int;
+                readonly patch: Schema.Int;
+            }>;
+            readonly pluginAdapterVersion: Schema.Struct<{
+                readonly major: Schema.Int;
+                readonly minor: Schema.Int;
+                readonly patch: Schema.Int;
+            }>;
+            readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+            readonly capability: Schema.Struct<{
+                readonly capabilityId: Schema.Literal<"action.execute">;
+                readonly version: Schema.Int;
+            }>;
+            readonly targetEntityId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EntityId">;
+            readonly proposal: Schema.Struct<{
+                readonly proposalKey: Schema.brand<Schema.String, string>;
+                readonly capabilityVersion: Schema.Int;
+                readonly request: Schema.Struct<{
+                    readonly actionKind: Schema.brand<Schema.String, string>;
+                    readonly target: Schema.Struct<{
+                        entityType: Schema.brand<Schema.String, string>;
+                        vendorImmutableId: Schema.brand<Schema.String, "VendorImmutableId">;
+                    }>;
+                    readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                    readonly payload: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+                    readonly evidenceIds: Schema.$Array<Schema.brand<Schema.String, string>>;
+                }>;
+                readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+                readonly summary: Schema.String;
+                readonly impact: Schema.Struct<{
+                    readonly level: Schema.Literals<readonly ["low", "medium", "high", "critical"]>;
+                    readonly summary: Schema.String;
+                }>;
+                readonly proposedAt: Schema.DateTimeUtcFromString;
+            }>;
+            readonly evidence: Schema.$Array<Schema.Struct<{
+                readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+                readonly evidenceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceId">;
+                readonly evidenceClaimIds: Schema.$Array<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceClaimId">>;
+                readonly observedAt: Schema.DateTimeUtcFromString;
+                readonly validUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
+                readonly currentUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
+                readonly evaluatedAt: Schema.DateTimeUtcFromString;
+                readonly source: Schema.Literals<readonly ["current", "stale", "missing", "unavailable"]>;
+                readonly validity: Schema.Literals<readonly ["valid", "expired"]>;
+            }>>;
+            readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+            readonly policy: Schema.Struct<{
+                readonly policyId: Schema.brand<Schema.String, string>;
+                readonly policyVersion: Schema.Int;
+                readonly policyDigest: Schema.brand<Schema.String, string>;
+                readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+            }>;
+            readonly origin: Schema.TaggedUnion<{
+                readonly human: Schema.TaggedStruct<"human", {
+                    readonly actor: Schema.TaggedStruct<"human", {
+                        readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+                    }>;
+                    readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+                }>;
+                readonly agent: Schema.TaggedStruct<"agent", {
+                    readonly actor: Schema.TaggedStruct<"agent", {
+                        readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+                    }>;
+                    readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+                    readonly initiatingSessionId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">>;
+                }>;
+            }>;
+            readonly proposalExpiresAt: Schema.DateTimeUtcFromString;
+            readonly causationId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">>;
+            readonly correlationId: Schema.NullOr<Schema.brand<Schema.String, "DomainEventCorrelationId">>;
+        }>;
+        readonly expectedHeadTransitionId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionTransitionId">>;
+        readonly transitionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionTransitionId">;
+        readonly commandId: Schema.brand<Schema.String, string>;
+        readonly command: Schema.TaggedUnion<{
+            readonly propose: Schema.TaggedStruct<"propose", {}>;
+            readonly authorize: Schema.TaggedStruct<"authorize", {
+                readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+            }>;
+            readonly deny: Schema.TaggedStruct<"deny", {
+                readonly reason: Schema.Literals<readonly ["revision-changed", "evidence-stale", "evidence-invalid", "policy-denied", "session-invalid", "capability-changed", "plugin-unavailable", "preflight-blocked"]>;
+                readonly safeSummary: Schema.String;
+            }>;
+            readonly expire: Schema.TaggedStruct<"expire", {
+                readonly reason: Schema.Literals<readonly ["proposal-expired", "authorization-expired"]>;
+            }>;
+            readonly cancel: Schema.TaggedStruct<"cancel", {
+                readonly safeSummary: Schema.String;
+            }>;
+            readonly start: Schema.TaggedStruct<"start", {
+                readonly attemptId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAttemptId">;
+            }>;
+            readonly requestCancellation: Schema.TaggedStruct<"requestCancellation", {
+                readonly safeSummary: Schema.String;
+            }>;
+            readonly recordAccepted: Schema.TaggedStruct<"recordAccepted", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literal<"accepted">;
+                    readonly reconciliationKey: Schema.brand<Schema.String, string>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+            }>;
+            readonly recordSucceeded: Schema.TaggedStruct<"recordSucceeded", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+                readonly source: Schema.TaggedUnion<{
+                    readonly direct: Schema.TaggedStruct<"direct", {}>;
+                    readonly providerOperation: Schema.TaggedStruct<"providerOperation", {
+                        readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    }>;
+                    readonly reconciliation: Schema.TaggedStruct<"reconciliation", {
+                        readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+                    }>;
+                }>;
+            }>;
+            readonly recordFailed: Schema.TaggedStruct<"recordFailed", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+                readonly source: Schema.TaggedUnion<{
+                    readonly direct: Schema.TaggedStruct<"direct", {}>;
+                    readonly providerOperation: Schema.TaggedStruct<"providerOperation", {
+                        readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    }>;
+                    readonly reconciliation: Schema.TaggedStruct<"reconciliation", {
+                        readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+                    }>;
+                }>;
+            }>;
+            readonly recordUnknown: Schema.TaggedStruct<"recordUnknown", {
+                readonly outcome: Schema.TaggedUnion<{
+                    readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
+                        readonly reconciliationKey: Schema.brand<Schema.String, string>;
+                        readonly observedAt: Schema.DateTimeUtcFromString;
+                        readonly safeSummary: Schema.String;
+                    }>;
+                    readonly manual: Schema.TaggedStruct<"manual", {
+                        readonly observedAt: Schema.DateTimeUtcFromString;
+                        readonly safeSummary: Schema.String;
+                        readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
+                    }>;
+                }>;
+            }>;
+            readonly recordCancelled: Schema.TaggedStruct<"recordCancelled", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+                readonly source: Schema.TaggedUnion<{
+                    readonly direct: Schema.TaggedStruct<"direct", {}>;
+                    readonly providerOperation: Schema.TaggedStruct<"providerOperation", {
+                        readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    }>;
+                    readonly reconciliation: Schema.TaggedStruct<"reconciliation", {
+                        readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+                    }>;
+                }>;
+            }>;
+            readonly reconciliationPending: Schema.TaggedStruct<"reconciliationPending", {
+                readonly checkedAt: Schema.DateTimeUtcFromString;
+                readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+            }>;
+        }>;
+        readonly cause: Schema.TaggedUnion<{
+            readonly human: Schema.TaggedStruct<"human", {
+                readonly actor: Schema.TaggedStruct<"human", {
+                    readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+                }>;
+                readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+            }>;
+            readonly agent: Schema.TaggedStruct<"agent", {
+                readonly actor: Schema.TaggedStruct<"agent", {
+                    readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+                }>;
+                readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+            }>;
+            readonly system: Schema.TaggedStruct<"system", {
+                readonly component: Schema.brand<Schema.String, string>;
+            }>;
+        }>;
+        readonly occurredAt: Schema.DateTimeUtcFromString;
+        readonly causationId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">>;
+        readonly correlationId: Schema.NullOr<Schema.brand<Schema.String, "DomainEventCorrelationId">>;
+        readonly companion: Schema.TaggedUnion<{
+            readonly authorization: Schema.TaggedStruct<"authorization", {
+                readonly authorization: Schema.Struct<{
+                    readonly schemaVersion: Schema.Literal<1>;
+                    readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+                    readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+                    readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+                    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+                    readonly pluginConnectionRevision: Schema.brand<Schema.Int, "GovernedActionPluginConnectionRevision">;
+                    readonly pluginConnectionAuthorityDigest: Schema.brand<Schema.String, string>;
+                    readonly actionEnvelopeDigest: Schema.brand<Schema.String, string>;
+                    readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+                    readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+                    readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+                    readonly policyDigest: Schema.brand<Schema.String, string>;
+                    readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                    readonly capabilityVersion: Schema.Int;
+                    readonly actor: Schema.TaggedStruct<"human", {
+                        readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+                    }>;
+                    readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+                    readonly sessionPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+                    readonly sessionExpiresAt: Schema.DateTimeUtcFromString;
+                    readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+                    readonly authorizedAt: Schema.DateTimeUtcFromString;
+                    readonly expiresAt: Schema.DateTimeUtcFromString;
+                }>;
+            }>;
+            readonly none: Schema.TaggedStruct<"none", {}>;
+            readonly dispatch: Schema.TaggedStruct<"dispatch", {
+                readonly policyEvaluation: Schema.Struct<{
+                    readonly schemaVersion: Schema.Literal<1>;
+                    readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+                    readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+                    readonly policy: Schema.Struct<{
+                        readonly policyId: Schema.brand<Schema.String, string>;
+                        readonly policyVersion: Schema.Int;
+                        readonly policyDigest: Schema.brand<Schema.String, string>;
+                        readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+                    }>;
+                    readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+                    readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+                    readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                    readonly decision: Schema.Literals<readonly ["allowed", "denied"]>;
+                    readonly evaluatedAt: Schema.DateTimeUtcFromString;
+                }>;
+                readonly attempt: Schema.Struct<{
+                    readonly schemaVersion: Schema.Literal<1>;
+                    readonly attemptId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAttemptId">;
+                    readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+                    readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+                    readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+                    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+                    readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+                    readonly attemptNumber: Schema.Literal<1>;
+                    readonly actionEnvelopeDigest: Schema.brand<Schema.String, string>;
+                    readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                    readonly policyEvaluationDigest: Schema.brand<Schema.String, string>;
+                    readonly preflight: Schema.TaggedStruct<"ready", {
+                        readonly checkedRevision: Schema.brand<Schema.String, "Revision">;
+                        readonly checkedAt: Schema.DateTimeUtcFromString;
+                    }>;
+                    readonly startedAt: Schema.DateTimeUtcFromString;
+                }>;
+            }>;
+            readonly policyDenial: Schema.TaggedStruct<"policyDenial", {
+                readonly policyEvaluation: Schema.Struct<{
+                    readonly schemaVersion: Schema.Literal<1>;
+                    readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+                    readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+                    readonly policy: Schema.Struct<{
+                        readonly policyId: Schema.brand<Schema.String, string>;
+                        readonly policyVersion: Schema.Int;
+                        readonly policyDigest: Schema.brand<Schema.String, string>;
+                        readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+                    }>;
+                    readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+                    readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+                    readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                    readonly decision: Schema.Literals<readonly ["allowed", "denied"]>;
+                    readonly evaluatedAt: Schema.DateTimeUtcFromString;
+                }>;
+            }>;
+        }>;
+        readonly auditEventId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">;
+    }, "Type">) => Effect.Effect<{
+        readonly _tag: "committed";
+        readonly transition: GovernedActionTransitionV1;
+    } | {
+        readonly _tag: "replayed";
+        readonly transition: GovernedActionTransitionV1;
+    }, PersistenceOperationError | import("effect/unstable/sql/SqlError").SqlError | import("./contract.js").GovernedActionInputError | import("./quarantine.js").MalformedGovernedActionRecord, never>;
+}, never, Crypto.Crypto | Database>;
+/** Private transactional governed-action writer used by the repository facade. */
+export declare const makeGovernedActionWrite: Effect.Effect<{
+    commit: (input: Schema.Struct.ReadonlySide<{
+        readonly envelope: Schema.Struct<{
+            readonly envelopeDigest: Schema.brand<Schema.String, string>;
+            readonly schemaVersion: Schema.Literal<1>;
+            readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+            readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+            readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+            readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+            readonly pluginConnectionRevision: Schema.brand<Schema.Int, "GovernedActionPluginConnectionRevision">;
+            readonly pluginConnectionAuthorityDigest: Schema.brand<Schema.String, string>;
+            readonly pluginId: Schema.brand<Schema.String, string>;
+            readonly pluginContractVersion: Schema.Struct<{
+                readonly major: Schema.Int;
+                readonly minor: Schema.Int;
+                readonly patch: Schema.Int;
+            }>;
+            readonly pluginAdapterVersion: Schema.Struct<{
+                readonly major: Schema.Int;
+                readonly minor: Schema.Int;
+                readonly patch: Schema.Int;
+            }>;
+            readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+            readonly capability: Schema.Struct<{
+                readonly capabilityId: Schema.Literal<"action.execute">;
+                readonly version: Schema.Int;
+            }>;
+            readonly targetEntityId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EntityId">;
+            readonly proposal: Schema.Struct<{
+                readonly proposalKey: Schema.brand<Schema.String, string>;
+                readonly capabilityVersion: Schema.Int;
+                readonly request: Schema.Struct<{
+                    readonly actionKind: Schema.brand<Schema.String, string>;
+                    readonly target: Schema.Struct<{
+                        entityType: Schema.brand<Schema.String, string>;
+                        vendorImmutableId: Schema.brand<Schema.String, "VendorImmutableId">;
+                    }>;
+                    readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                    readonly payload: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+                    readonly evidenceIds: Schema.$Array<Schema.brand<Schema.String, string>>;
+                }>;
+                readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+                readonly summary: Schema.String;
+                readonly impact: Schema.Struct<{
+                    readonly level: Schema.Literals<readonly ["low", "medium", "high", "critical"]>;
+                    readonly summary: Schema.String;
+                }>;
+                readonly proposedAt: Schema.DateTimeUtcFromString;
+            }>;
+            readonly evidence: Schema.$Array<Schema.Struct<{
+                readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+                readonly evidenceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceId">;
+                readonly evidenceClaimIds: Schema.$Array<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceClaimId">>;
+                readonly observedAt: Schema.DateTimeUtcFromString;
+                readonly validUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
+                readonly currentUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
+                readonly evaluatedAt: Schema.DateTimeUtcFromString;
+                readonly source: Schema.Literals<readonly ["current", "stale", "missing", "unavailable"]>;
+                readonly validity: Schema.Literals<readonly ["valid", "expired"]>;
+            }>>;
+            readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+            readonly policy: Schema.Struct<{
+                readonly policyId: Schema.brand<Schema.String, string>;
+                readonly policyVersion: Schema.Int;
+                readonly policyDigest: Schema.brand<Schema.String, string>;
+                readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+            }>;
+            readonly origin: Schema.TaggedUnion<{
+                readonly human: Schema.TaggedStruct<"human", {
+                    readonly actor: Schema.TaggedStruct<"human", {
+                        readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+                    }>;
+                    readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+                }>;
+                readonly agent: Schema.TaggedStruct<"agent", {
+                    readonly actor: Schema.TaggedStruct<"agent", {
+                        readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+                    }>;
+                    readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+                    readonly initiatingSessionId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">>;
+                }>;
+            }>;
+            readonly proposalExpiresAt: Schema.DateTimeUtcFromString;
+            readonly causationId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">>;
+            readonly correlationId: Schema.NullOr<Schema.brand<Schema.String, "DomainEventCorrelationId">>;
+        }>;
+        readonly expectedHeadTransitionId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionTransitionId">>;
+        readonly transitionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionTransitionId">;
+        readonly commandId: Schema.brand<Schema.String, string>;
+        readonly command: Schema.TaggedUnion<{
+            readonly propose: Schema.TaggedStruct<"propose", {}>;
+            readonly authorize: Schema.TaggedStruct<"authorize", {
+                readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+            }>;
+            readonly deny: Schema.TaggedStruct<"deny", {
+                readonly reason: Schema.Literals<readonly ["revision-changed", "evidence-stale", "evidence-invalid", "policy-denied", "session-invalid", "capability-changed", "plugin-unavailable", "preflight-blocked"]>;
+                readonly safeSummary: Schema.String;
+            }>;
+            readonly expire: Schema.TaggedStruct<"expire", {
+                readonly reason: Schema.Literals<readonly ["proposal-expired", "authorization-expired"]>;
+            }>;
+            readonly cancel: Schema.TaggedStruct<"cancel", {
+                readonly safeSummary: Schema.String;
+            }>;
+            readonly start: Schema.TaggedStruct<"start", {
+                readonly attemptId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAttemptId">;
+            }>;
+            readonly requestCancellation: Schema.TaggedStruct<"requestCancellation", {
+                readonly safeSummary: Schema.String;
+            }>;
+            readonly recordAccepted: Schema.TaggedStruct<"recordAccepted", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literal<"accepted">;
+                    readonly reconciliationKey: Schema.brand<Schema.String, string>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+            }>;
+            readonly recordSucceeded: Schema.TaggedStruct<"recordSucceeded", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+                readonly source: Schema.TaggedUnion<{
+                    readonly direct: Schema.TaggedStruct<"direct", {}>;
+                    readonly providerOperation: Schema.TaggedStruct<"providerOperation", {
+                        readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    }>;
+                    readonly reconciliation: Schema.TaggedStruct<"reconciliation", {
+                        readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+                    }>;
+                }>;
+            }>;
+            readonly recordFailed: Schema.TaggedStruct<"recordFailed", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+                readonly source: Schema.TaggedUnion<{
+                    readonly direct: Schema.TaggedStruct<"direct", {}>;
+                    readonly providerOperation: Schema.TaggedStruct<"providerOperation", {
+                        readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    }>;
+                    readonly reconciliation: Schema.TaggedStruct<"reconciliation", {
+                        readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+                    }>;
+                }>;
+            }>;
+            readonly recordUnknown: Schema.TaggedStruct<"recordUnknown", {
+                readonly outcome: Schema.TaggedUnion<{
+                    readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
+                        readonly reconciliationKey: Schema.brand<Schema.String, string>;
+                        readonly observedAt: Schema.DateTimeUtcFromString;
+                        readonly safeSummary: Schema.String;
+                    }>;
+                    readonly manual: Schema.TaggedStruct<"manual", {
+                        readonly observedAt: Schema.DateTimeUtcFromString;
+                        readonly safeSummary: Schema.String;
+                        readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
+                    }>;
+                }>;
+            }>;
+            readonly recordCancelled: Schema.TaggedStruct<"recordCancelled", {
+                readonly receipt: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["succeeded", "failed", "cancelled"]>;
+                    readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    readonly safeSummary: Schema.String;
+                    readonly observedAt: Schema.DateTimeUtcFromString;
+                }>;
+                readonly source: Schema.TaggedUnion<{
+                    readonly direct: Schema.TaggedStruct<"direct", {}>;
+                    readonly providerOperation: Schema.TaggedStruct<"providerOperation", {
+                        readonly providerOperationId: Schema.brand<Schema.String, string>;
+                    }>;
+                    readonly reconciliation: Schema.TaggedStruct<"reconciliation", {
+                        readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+                    }>;
+                }>;
+            }>;
+            readonly reconciliationPending: Schema.TaggedStruct<"reconciliationPending", {
+                readonly checkedAt: Schema.DateTimeUtcFromString;
+                readonly reconciliationKey: Schema.NullOr<Schema.brand<Schema.String, string>>;
+            }>;
+        }>;
+        readonly cause: Schema.TaggedUnion<{
+            readonly human: Schema.TaggedStruct<"human", {
+                readonly actor: Schema.TaggedStruct<"human", {
+                    readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+                }>;
+                readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+            }>;
+            readonly agent: Schema.TaggedStruct<"agent", {
+                readonly actor: Schema.TaggedStruct<"agent", {
+                    readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+                }>;
+                readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+            }>;
+            readonly system: Schema.TaggedStruct<"system", {
+                readonly component: Schema.brand<Schema.String, string>;
+            }>;
+        }>;
+        readonly occurredAt: Schema.DateTimeUtcFromString;
+        readonly causationId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">>;
+        readonly correlationId: Schema.NullOr<Schema.brand<Schema.String, "DomainEventCorrelationId">>;
+        readonly companion: Schema.TaggedUnion<{
+            readonly authorization: Schema.TaggedStruct<"authorization", {
+                readonly authorization: Schema.Struct<{
+                    readonly schemaVersion: Schema.Literal<1>;
+                    readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+                    readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+                    readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+                    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+                    readonly pluginConnectionRevision: Schema.brand<Schema.Int, "GovernedActionPluginConnectionRevision">;
+                    readonly pluginConnectionAuthorityDigest: Schema.brand<Schema.String, string>;
+                    readonly actionEnvelopeDigest: Schema.brand<Schema.String, string>;
+                    readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+                    readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+                    readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+                    readonly policyDigest: Schema.brand<Schema.String, string>;
+                    readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                    readonly capabilityVersion: Schema.Int;
+                    readonly actor: Schema.TaggedStruct<"human", {
+                        readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+                    }>;
+                    readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+                    readonly sessionPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+                    readonly sessionExpiresAt: Schema.DateTimeUtcFromString;
+                    readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+                    readonly authorizedAt: Schema.DateTimeUtcFromString;
+                    readonly expiresAt: Schema.DateTimeUtcFromString;
+                }>;
+            }>;
+            readonly none: Schema.TaggedStruct<"none", {}>;
+            readonly dispatch: Schema.TaggedStruct<"dispatch", {
+                readonly policyEvaluation: Schema.Struct<{
+                    readonly schemaVersion: Schema.Literal<1>;
+                    readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+                    readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+                    readonly policy: Schema.Struct<{
+                        readonly policyId: Schema.brand<Schema.String, string>;
+                        readonly policyVersion: Schema.Int;
+                        readonly policyDigest: Schema.brand<Schema.String, string>;
+                        readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+                    }>;
+                    readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+                    readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+                    readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                    readonly decision: Schema.Literals<readonly ["allowed", "denied"]>;
+                    readonly evaluatedAt: Schema.DateTimeUtcFromString;
+                }>;
+                readonly attempt: Schema.Struct<{
+                    readonly schemaVersion: Schema.Literal<1>;
+                    readonly attemptId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAttemptId">;
+                    readonly authorizationId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionAuthorizationId">;
+                    readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+                    readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+                    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+                    readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
+                    readonly attemptNumber: Schema.Literal<1>;
+                    readonly actionEnvelopeDigest: Schema.brand<Schema.String, string>;
+                    readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                    readonly policyEvaluationDigest: Schema.brand<Schema.String, string>;
+                    readonly preflight: Schema.TaggedStruct<"ready", {
+                        readonly checkedRevision: Schema.brand<Schema.String, "Revision">;
+                        readonly checkedAt: Schema.DateTimeUtcFromString;
+                    }>;
+                    readonly startedAt: Schema.DateTimeUtcFromString;
+                }>;
+            }>;
+            readonly policyDenial: Schema.TaggedStruct<"policyDenial", {
+                readonly policyEvaluation: Schema.Struct<{
+                    readonly schemaVersion: Schema.Literal<1>;
+                    readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
+                    readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+                    readonly policy: Schema.Struct<{
+                        readonly policyId: Schema.brand<Schema.String, string>;
+                        readonly policyVersion: Schema.Int;
+                        readonly policyDigest: Schema.brand<Schema.String, string>;
+                        readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+                    }>;
+                    readonly payloadDigest: Schema.brand<Schema.String, "PluginActionPayloadDigest">;
+                    readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
+                    readonly expectedRevision: Schema.brand<Schema.String, "Revision">;
+                    readonly decision: Schema.Literals<readonly ["allowed", "denied"]>;
+                    readonly evaluatedAt: Schema.DateTimeUtcFromString;
+                }>;
+            }>;
+        }>;
+        readonly auditEventId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">;
+    }, "Type">) => Effect.Effect<{
+        readonly _tag: "committed";
+        readonly transition: GovernedActionTransitionV1;
+    } | {
+        readonly _tag: "replayed";
+        readonly transition: GovernedActionTransitionV1;
+    }, PersistenceOperationError | import("./contract.js").GovernedActionInputError | import("./quarantine.js").MalformedGovernedActionRecord, never>;
+}, never, Crypto.Crypto | Database>;
+//# sourceMappingURL=write.d.ts.map

package/dist/server/server/persistence/repositories/governed-action/write.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../../../../../src/server/persistence/repositories/governed-action/write.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAGvC,OAAO,EAIL,0BAA0B,EAC3B,MAAM,4CAA4C,CAAA;AAQnD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA;AAshB3D;;;;;GAKG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAAsC,CAAA;AAerF,kFAAkF;AAClF,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAA2B,CAAA"}