@knpkv/control-center 0.3.0 → 0.4.0

package/dist/server/server/governance/governedActionDigests.d.ts

@@ -106,15 +106,15 @@ export declare const encodeGovernedActionDispatchOutcome: (result: Schema.Struct
 }, "Type">) => Effect.Effect<EncodedGovernedActionDispatchOutcome, GovernedActionDigestError, Crypto.Crypto>;
 /** Encode and hash one locally observed unknown result retained by the dispatch inbox. */
 export declare const encodeGovernedActionUnknownOutcome: (outcome: Schema.Struct.ReadonlySide<{
-    readonly _tag: Schema.tag<"manual">;
+    readonly _tag: Schema.tag<"reconcilable">;
+    readonly reconciliationKey: Schema.brand<Schema.String, string>;
     readonly observedAt: Schema.DateTimeUtcFromString;
     readonly safeSummary: Schema.String;
-    readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
 }, "Type"> | Schema.Struct.ReadonlySide<{
-    readonly _tag: Schema.tag<"reconcilable">;
-    readonly reconciliationKey: Schema.brand<Schema.String, string>;
+    readonly _tag: Schema.tag<"manual">;
     readonly observedAt: Schema.DateTimeUtcFromString;
     readonly safeSummary: Schema.String;
+    readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
 }, "Type">) => Effect.Effect<EncodedGovernedActionDispatchOutcome, GovernedActionDigestError, Crypto.Crypto>;
 /** Hash one bounded provider payload independently of object insertion order. */
 export declare const digestGovernedActionPayload: (payload: Schema.Json) => Effect.Effect<string & import("effect/Brand").Brand<"PluginActionPayloadDigest">, GovernedActionDigestError, Crypto.Crypto>;
@@ -188,15 +188,15 @@ export declare const digestGovernedActionTransitionCommand: (command: Schema.Str
 }, "Type"> | Schema.Struct.ReadonlySide<{
     readonly _tag: Schema.tag<"recordUnknown">;
     readonly outcome: Schema.TaggedUnion<{
-        readonly manual: Schema.TaggedStruct<"manual", {
+        readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
+            readonly reconciliationKey: Schema.brand<Schema.String, string>;
             readonly observedAt: Schema.DateTimeUtcFromString;
             readonly safeSummary: Schema.String;
-            readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
         }>;
-        readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
-            readonly reconciliationKey: Schema.brand<Schema.String, string>;
+        readonly manual: Schema.TaggedStruct<"manual", {
             readonly observedAt: Schema.DateTimeUtcFromString;
             readonly safeSummary: Schema.String;
+            readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
         }>;
     }>;
 }, "Type"> | Schema.Struct.ReadonlySide<{
@@ -292,15 +292,15 @@ export declare const verifyGovernedActionTransitionCommandDigest: (command: Sche
 }, "Type"> | Schema.Struct.ReadonlySide<{
     readonly _tag: Schema.tag<"recordUnknown">;
     readonly outcome: Schema.TaggedUnion<{
-        readonly manual: Schema.TaggedStruct<"manual", {
+        readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
+            readonly reconciliationKey: Schema.brand<Schema.String, string>;
             readonly observedAt: Schema.DateTimeUtcFromString;
             readonly safeSummary: Schema.String;
-            readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
         }>;
-        readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
-            readonly reconciliationKey: Schema.brand<Schema.String, string>;
+        readonly manual: Schema.TaggedStruct<"manual", {
             readonly observedAt: Schema.DateTimeUtcFromString;
             readonly safeSummary: Schema.String;
+            readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
         }>;
     }>;
 }, "Type"> | Schema.Struct.ReadonlySide<{
@@ -394,15 +394,15 @@ export declare const verifyGovernedActionTransitionCommandDigest: (command: Sche
 }, "Type"> | Schema.Struct.ReadonlySide<{
     readonly _tag: Schema.tag<"recordUnknown">;
     readonly outcome: Schema.TaggedUnion<{
-        readonly manual: Schema.TaggedStruct<"manual", {
+        readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
+            readonly reconciliationKey: Schema.brand<Schema.String, string>;
             readonly observedAt: Schema.DateTimeUtcFromString;
             readonly safeSummary: Schema.String;
-            readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
         }>;
-        readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
-            readonly reconciliationKey: Schema.brand<Schema.String, string>;
+        readonly manual: Schema.TaggedStruct<"manual", {
             readonly observedAt: Schema.DateTimeUtcFromString;
             readonly safeSummary: Schema.String;
+            readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
         }>;
     }>;
 }, "Type"> | Schema.Struct.ReadonlySide<{
@@ -508,15 +508,15 @@ export declare const makeGovernedActionTransition: (material: Schema.Struct.Read
         }>;
         readonly recordUnknown: Schema.TaggedStruct<"recordUnknown", {
             readonly outcome: Schema.TaggedUnion<{
-                readonly manual: Schema.TaggedStruct<"manual", {
+                readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
+                    readonly reconciliationKey: Schema.brand<Schema.String, string>;
                     readonly observedAt: Schema.DateTimeUtcFromString;
                     readonly safeSummary: Schema.String;
-                    readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
                 }>;
-                readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
-                    readonly reconciliationKey: Schema.brand<Schema.String, string>;
+                readonly manual: Schema.TaggedStruct<"manual", {
                     readonly observedAt: Schema.DateTimeUtcFromString;
                     readonly safeSummary: Schema.String;
+                    readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
                 }>;
             }>;
         }>;
@@ -544,18 +544,18 @@ export declare const makeGovernedActionTransition: (material: Schema.Struct.Read
         }>;
     }>;
     cause: Schema.TaggedUnion<{
-        readonly agent: Schema.TaggedStruct<"agent", {
-            readonly actor: Schema.TaggedStruct<"agent", {
-                readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
-            }>;
-            readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
-        }>;
         readonly human: Schema.TaggedStruct<"human", {
             readonly actor: Schema.TaggedStruct<"human", {
                 readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
             }>;
             readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
         }>;
+        readonly agent: Schema.TaggedStruct<"agent", {
+            readonly actor: Schema.TaggedStruct<"agent", {
+                readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+            }>;
+            readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+        }>;
         readonly system: Schema.TaggedStruct<"system", {
             readonly component: Schema.brand<Schema.String, string>;
         }>;
@@ -645,15 +645,15 @@ export declare const verifyGovernedActionTransition: (transition: Schema.Struct.
         }>;
         readonly recordUnknown: Schema.TaggedStruct<"recordUnknown", {
             readonly outcome: Schema.TaggedUnion<{
-                readonly manual: Schema.TaggedStruct<"manual", {
+                readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
+                    readonly reconciliationKey: Schema.brand<Schema.String, string>;
                     readonly observedAt: Schema.DateTimeUtcFromString;
                     readonly safeSummary: Schema.String;
-                    readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
                 }>;
-                readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
-                    readonly reconciliationKey: Schema.brand<Schema.String, string>;
+                readonly manual: Schema.TaggedStruct<"manual", {
                     readonly observedAt: Schema.DateTimeUtcFromString;
                     readonly safeSummary: Schema.String;
+                    readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
                 }>;
             }>;
         }>;
@@ -681,18 +681,18 @@ export declare const verifyGovernedActionTransition: (transition: Schema.Struct.
         }>;
     }>;
     readonly cause: Schema.TaggedUnion<{
-        readonly agent: Schema.TaggedStruct<"agent", {
-            readonly actor: Schema.TaggedStruct<"agent", {
-                readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
-            }>;
-            readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
-        }>;
         readonly human: Schema.TaggedStruct<"human", {
             readonly actor: Schema.TaggedStruct<"human", {
                 readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
             }>;
             readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
         }>;
+        readonly agent: Schema.TaggedStruct<"agent", {
+            readonly actor: Schema.TaggedStruct<"agent", {
+                readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+            }>;
+            readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+        }>;
         readonly system: Schema.TaggedStruct<"system", {
             readonly component: Schema.brand<Schema.String, string>;
         }>;
@@ -858,15 +858,15 @@ export declare const digestGovernedActionTransition: (transition: Schema.Struct.
         }>;
         readonly recordUnknown: Schema.TaggedStruct<"recordUnknown", {
             readonly outcome: Schema.TaggedUnion<{
-                readonly manual: Schema.TaggedStruct<"manual", {
+                readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
+                    readonly reconciliationKey: Schema.brand<Schema.String, string>;
                     readonly observedAt: Schema.DateTimeUtcFromString;
                     readonly safeSummary: Schema.String;
-                    readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
                 }>;
-                readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
-                    readonly reconciliationKey: Schema.brand<Schema.String, string>;
+                readonly manual: Schema.TaggedStruct<"manual", {
                     readonly observedAt: Schema.DateTimeUtcFromString;
                     readonly safeSummary: Schema.String;
+                    readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
                 }>;
             }>;
         }>;
@@ -894,18 +894,18 @@ export declare const digestGovernedActionTransition: (transition: Schema.Struct.
         }>;
     }>;
     readonly cause: Schema.TaggedUnion<{
-        readonly agent: Schema.TaggedStruct<"agent", {
-            readonly actor: Schema.TaggedStruct<"agent", {
-                readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
-            }>;
-            readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
-        }>;
         readonly human: Schema.TaggedStruct<"human", {
             readonly actor: Schema.TaggedStruct<"human", {
                 readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
             }>;
             readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
         }>;
+        readonly agent: Schema.TaggedStruct<"agent", {
+            readonly actor: Schema.TaggedStruct<"agent", {
+                readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+            }>;
+            readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+        }>;
         readonly system: Schema.TaggedStruct<"system", {
             readonly component: Schema.brand<Schema.String, string>;
         }>;
@@ -1057,15 +1057,15 @@ export declare const verifyGovernedActionTransitionDigest: (transition: Schema.S
         }>;
         readonly recordUnknown: Schema.TaggedStruct<"recordUnknown", {
             readonly outcome: Schema.TaggedUnion<{
-                readonly manual: Schema.TaggedStruct<"manual", {
+                readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
+                    readonly reconciliationKey: Schema.brand<Schema.String, string>;
                     readonly observedAt: Schema.DateTimeUtcFromString;
                     readonly safeSummary: Schema.String;
-                    readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
                 }>;
-                readonly reconcilable: Schema.TaggedStruct<"reconcilable", {
-                    readonly reconciliationKey: Schema.brand<Schema.String, string>;
+                readonly manual: Schema.TaggedStruct<"manual", {
                     readonly observedAt: Schema.DateTimeUtcFromString;
                     readonly safeSummary: Schema.String;
+                    readonly reason: Schema.Literals<readonly ["dispatch-deadline-exceeded", "interrupted-after-intent", "provider-defect-after-intent", "malformed-provider-result", "receipt-persistence-failed", "missing-reconciliation-locator"]>;
                 }>;
             }>;
         }>;
@@ -1093,18 +1093,18 @@ export declare const verifyGovernedActionTransitionDigest: (transition: Schema.S
         }>;
     }>;
     readonly cause: Schema.TaggedUnion<{
-        readonly agent: Schema.TaggedStruct<"agent", {
-            readonly actor: Schema.TaggedStruct<"agent", {
-                readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
-            }>;
-            readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
-        }>;
         readonly human: Schema.TaggedStruct<"human", {
             readonly actor: Schema.TaggedStruct<"human", {
                 readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
             }>;
             readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
         }>;
+        readonly agent: Schema.TaggedStruct<"agent", {
+            readonly actor: Schema.TaggedStruct<"agent", {
+                readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+            }>;
+            readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+        }>;
         readonly system: Schema.TaggedStruct<"system", {
             readonly component: Schema.brand<Schema.String, string>;
         }>;
@@ -1114,32 +1114,14 @@ export declare const verifyGovernedActionTransitionDigest: (transition: Schema.S
     readonly correlationId: Schema.NullOr<Schema.brand<Schema.String, "DomainEventCorrelationId">>;
 }, "Type">, expectedDigest: string & import("effect/Brand").Brand<"GovernedActionTransitionDigest">) => Effect.Effect<VerifiedTransitionRecord, GovernedActionDigestError | GovernedActionBindingMismatch, Crypto.Crypto>;
 /** Hash every digest-free field in a complete immutable V1 action envelope. */
-export declare const digestGovernedActionEnvelope: (material: Schema.Struct.ReadonlySide<{
-    schemaVersion: Schema.Literal<1>;
-    actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
-    idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
-    workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
-    pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
-    pluginConnectionRevision: Schema.brand<Schema.Int, "GovernedActionPluginConnectionRevision">;
-    pluginConnectionAuthorityDigest: Schema.brand<Schema.String, string>;
-    pluginId: Schema.brand<Schema.String, string>;
-    pluginContractVersion: Schema.Struct<{
-        readonly major: Schema.Int;
-        readonly minor: Schema.Int;
-        readonly patch: Schema.Int;
-    }>;
-    pluginAdapterVersion: Schema.Struct<{
-        readonly major: Schema.Int;
-        readonly minor: Schema.Int;
-        readonly patch: Schema.Int;
-    }>;
-    providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
-    capability: Schema.Struct<{
-        readonly capabilityId: Schema.Literal<"action.execute">;
-        readonly version: Schema.Int;
-    }>;
-    targetEntityId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EntityId">;
-    proposal: Schema.Struct<{
+export declare const digestGovernedActionEnvelope: (material: {
+    readonly providerId: "codecommit" | "codepipeline" | "jira" | "confluence" | "clockify";
+    readonly pluginConnectionId: string & import("effect/Brand").Brand<"PluginConnectionId">;
+    readonly workspaceId: string & import("effect/Brand").Brand<"WorkspaceId">;
+    readonly schemaVersion: 1;
+    readonly causationId: (string & import("effect/Brand").Brand<"DomainEventId">) | null;
+    readonly correlationId: (string & import("effect/Brand").Brand<"DomainEventCorrelationId">) | null;
+    readonly proposal: Schema.Struct.ReadonlySide<{
         readonly proposalKey: Schema.brand<Schema.String, string>;
         readonly capabilityVersion: Schema.Int;
         readonly request: Schema.Struct<{
@@ -1159,71 +1141,76 @@ export declare const digestGovernedActionEnvelope: (material: Schema.Struct.Read
             readonly summary: Schema.String;
         }>;
         readonly proposedAt: Schema.DateTimeUtcFromString;
-    }>;
-    evidence: Schema.$Array<Schema.Struct<{
-        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
-        readonly evidenceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceId">;
-        readonly evidenceClaimIds: Schema.$Array<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceClaimId">>;
-        readonly observedAt: Schema.DateTimeUtcFromString;
-        readonly validUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
-        readonly currentUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
-        readonly evaluatedAt: Schema.DateTimeUtcFromString;
-        readonly source: Schema.Literals<readonly ["current", "stale", "missing", "unavailable"]>;
-        readonly validity: Schema.Literals<readonly ["valid", "expired"]>;
-    }>>;
-    evidenceSetDigest: Schema.brand<Schema.String, string>;
-    policy: Schema.Struct<{
+    }, "Type">;
+    readonly idempotencyKey: string & import("effect/Brand").Brand<"GovernedActionIdempotencyKey">;
+    readonly pluginId: string & import("effect/Brand").Brand<string>;
+    readonly actionId: string & import("effect/Brand").Brand<"GovernedActionId">;
+    readonly policy: Schema.Struct.ReadonlySide<{
         readonly policyId: Schema.brand<Schema.String, string>;
         readonly policyVersion: Schema.Int;
         readonly policyDigest: Schema.brand<Schema.String, string>;
         readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
-    }>;
-    origin: Schema.TaggedUnion<{
-        readonly agent: Schema.TaggedStruct<"agent", {
-            readonly actor: Schema.TaggedStruct<"agent", {
-                readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
-            }>;
-            readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
-            readonly initiatingSessionId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">>;
-        }>;
-        readonly human: Schema.TaggedStruct<"human", {
-            readonly actor: Schema.TaggedStruct<"human", {
-                readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
-            }>;
-            readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
-        }>;
-    }>;
-    proposalExpiresAt: Schema.DateTimeUtcFromString;
-    causationId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">>;
-    correlationId: Schema.NullOr<Schema.brand<Schema.String, "DomainEventCorrelationId">>;
-}, "Type">) => Effect.Effect<string & import("effect/Brand").Brand<string>, GovernedActionDigestError, Crypto.Crypto>;
-/** Construct an envelope only after its payload and evidence bindings verify exactly. */
-export declare const makeGovernedActionEnvelope: (material: Schema.Struct.ReadonlySide<{
-    schemaVersion: Schema.Literal<1>;
-    actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
-    idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
-    workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
-    pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
-    pluginConnectionRevision: Schema.brand<Schema.Int, "GovernedActionPluginConnectionRevision">;
-    pluginConnectionAuthorityDigest: Schema.brand<Schema.String, string>;
-    pluginId: Schema.brand<Schema.String, string>;
-    pluginContractVersion: Schema.Struct<{
+    }, "Type">;
+    readonly evidenceSetDigest: string & import("effect/Brand").Brand<string>;
+    readonly pluginConnectionRevision: number & import("effect/Brand").Brand<"GovernedActionPluginConnectionRevision">;
+    readonly pluginConnectionAuthorityDigest: string & import("effect/Brand").Brand<string>;
+    readonly pluginContractVersion: Schema.Struct.ReadonlySide<{
         readonly major: Schema.Int;
         readonly minor: Schema.Int;
         readonly patch: Schema.Int;
-    }>;
-    pluginAdapterVersion: Schema.Struct<{
+    }, "Type">;
+    readonly pluginAdapterVersion: Schema.Struct.ReadonlySide<{
         readonly major: Schema.Int;
         readonly minor: Schema.Int;
         readonly patch: Schema.Int;
-    }>;
-    providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
-    capability: Schema.Struct<{
+    }, "Type">;
+    readonly capability: Schema.Struct.ReadonlySide<{
         readonly capabilityId: Schema.Literal<"action.execute">;
         readonly version: Schema.Int;
-    }>;
-    targetEntityId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EntityId">;
-    proposal: Schema.Struct<{
+    }, "Type">;
+    readonly targetEntityId: string & import("effect/Brand").Brand<"EntityId">;
+    readonly evidence: readonly Schema.Struct.ReadonlySide<{
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly evidenceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceId">;
+        readonly evidenceClaimIds: Schema.$Array<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceClaimId">>;
+        readonly observedAt: Schema.DateTimeUtcFromString;
+        readonly validUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly currentUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly evaluatedAt: Schema.DateTimeUtcFromString;
+        readonly source: Schema.Literals<readonly ["current", "stale", "missing", "unavailable"]>;
+        readonly validity: Schema.Literals<readonly ["valid", "expired"]>;
+    }, "Type">[];
+    readonly origin: Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"human">;
+        readonly actor: Schema.TaggedStruct<"human", {
+            readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+        }>;
+        readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"agent">;
+        readonly actor: Schema.TaggedStruct<"agent", {
+            readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+        }>;
+        readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+        readonly initiatingSessionId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">>;
+    }, "Type">;
+    readonly proposalExpiresAt: import("effect/DateTime").Utc;
+    readonly releasePublication?: {
+        readonly releaseId: string & import("effect/Brand").Brand<"ReleaseId">;
+        readonly sourceRevisionDigest: string & import("effect/Brand").Brand<string>;
+        readonly sourceRevisionCount: number;
+        readonly predecessorPublicationActionId?: (string & import("effect/Brand").Brand<"GovernedActionId">) | null;
+    };
+}) => Effect.Effect<string & import("effect/Brand").Brand<string>, GovernedActionDigestError, Crypto.Crypto>;
+/** Construct an envelope only after its payload and evidence bindings verify exactly. */
+export declare const makeGovernedActionEnvelope: (material: {
+    readonly providerId: "codecommit" | "codepipeline" | "jira" | "confluence" | "clockify";
+    readonly pluginConnectionId: string & import("effect/Brand").Brand<"PluginConnectionId">;
+    readonly workspaceId: string & import("effect/Brand").Brand<"WorkspaceId">;
+    readonly schemaVersion: 1;
+    readonly causationId: (string & import("effect/Brand").Brand<"DomainEventId">) | null;
+    readonly correlationId: (string & import("effect/Brand").Brand<"DomainEventCorrelationId">) | null;
+    readonly proposal: Schema.Struct.ReadonlySide<{
         readonly proposalKey: Schema.brand<Schema.String, string>;
         readonly capabilityVersion: Schema.Int;
         readonly request: Schema.Struct<{
@@ -1243,72 +1230,76 @@ export declare const makeGovernedActionEnvelope: (material: Schema.Struct.Readon
             readonly summary: Schema.String;
         }>;
         readonly proposedAt: Schema.DateTimeUtcFromString;
-    }>;
-    evidence: Schema.$Array<Schema.Struct<{
-        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
-        readonly evidenceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceId">;
-        readonly evidenceClaimIds: Schema.$Array<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceClaimId">>;
-        readonly observedAt: Schema.DateTimeUtcFromString;
-        readonly validUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
-        readonly currentUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
-        readonly evaluatedAt: Schema.DateTimeUtcFromString;
-        readonly source: Schema.Literals<readonly ["current", "stale", "missing", "unavailable"]>;
-        readonly validity: Schema.Literals<readonly ["valid", "expired"]>;
-    }>>;
-    evidenceSetDigest: Schema.brand<Schema.String, string>;
-    policy: Schema.Struct<{
+    }, "Type">;
+    readonly idempotencyKey: string & import("effect/Brand").Brand<"GovernedActionIdempotencyKey">;
+    readonly pluginId: string & import("effect/Brand").Brand<string>;
+    readonly actionId: string & import("effect/Brand").Brand<"GovernedActionId">;
+    readonly policy: Schema.Struct.ReadonlySide<{
         readonly policyId: Schema.brand<Schema.String, string>;
         readonly policyVersion: Schema.Int;
         readonly policyDigest: Schema.brand<Schema.String, string>;
         readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
-    }>;
-    origin: Schema.TaggedUnion<{
-        readonly agent: Schema.TaggedStruct<"agent", {
-            readonly actor: Schema.TaggedStruct<"agent", {
-                readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
-            }>;
-            readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
-            readonly initiatingSessionId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">>;
-        }>;
-        readonly human: Schema.TaggedStruct<"human", {
-            readonly actor: Schema.TaggedStruct<"human", {
-                readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
-            }>;
-            readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
-        }>;
-    }>;
-    proposalExpiresAt: Schema.DateTimeUtcFromString;
-    causationId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">>;
-    correlationId: Schema.NullOr<Schema.brand<Schema.String, "DomainEventCorrelationId">>;
-}, "Type">) => Effect.Effect<VerifiedEnvelope, GovernedActionDigestError | GovernedActionBindingMismatch, Crypto.Crypto>;
-/** Recompute every canonical binding before trusting a decoded persisted envelope. */
-export declare const verifyGovernedActionEnvelope: (envelope: Schema.Struct.ReadonlySide<{
-    readonly envelopeDigest: Schema.brand<Schema.String, string>;
-    readonly schemaVersion: Schema.Literal<1>;
-    readonly actionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "GovernedActionId">;
-    readonly idempotencyKey: Schema.brand<Schema.String, "GovernedActionIdempotencyKey">;
-    readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
-    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
-    readonly pluginConnectionRevision: Schema.brand<Schema.Int, "GovernedActionPluginConnectionRevision">;
-    readonly pluginConnectionAuthorityDigest: Schema.brand<Schema.String, string>;
-    readonly pluginId: Schema.brand<Schema.String, string>;
-    readonly pluginContractVersion: Schema.Struct<{
+    }, "Type">;
+    readonly evidenceSetDigest: string & import("effect/Brand").Brand<string>;
+    readonly pluginConnectionRevision: number & import("effect/Brand").Brand<"GovernedActionPluginConnectionRevision">;
+    readonly pluginConnectionAuthorityDigest: string & import("effect/Brand").Brand<string>;
+    readonly pluginContractVersion: Schema.Struct.ReadonlySide<{
         readonly major: Schema.Int;
         readonly minor: Schema.Int;
         readonly patch: Schema.Int;
-    }>;
-    readonly pluginAdapterVersion: Schema.Struct<{
+    }, "Type">;
+    readonly pluginAdapterVersion: Schema.Struct.ReadonlySide<{
         readonly major: Schema.Int;
         readonly minor: Schema.Int;
         readonly patch: Schema.Int;
-    }>;
-    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
-    readonly capability: Schema.Struct<{
+    }, "Type">;
+    readonly capability: Schema.Struct.ReadonlySide<{
         readonly capabilityId: Schema.Literal<"action.execute">;
         readonly version: Schema.Int;
-    }>;
-    readonly targetEntityId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EntityId">;
-    readonly proposal: Schema.Struct<{
+    }, "Type">;
+    readonly targetEntityId: string & import("effect/Brand").Brand<"EntityId">;
+    readonly evidence: readonly Schema.Struct.ReadonlySide<{
+        readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+        readonly evidenceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceId">;
+        readonly evidenceClaimIds: Schema.$Array<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceClaimId">>;
+        readonly observedAt: Schema.DateTimeUtcFromString;
+        readonly validUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly currentUntil: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly evaluatedAt: Schema.DateTimeUtcFromString;
+        readonly source: Schema.Literals<readonly ["current", "stale", "missing", "unavailable"]>;
+        readonly validity: Schema.Literals<readonly ["valid", "expired"]>;
+    }, "Type">[];
+    readonly origin: Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"human">;
+        readonly actor: Schema.TaggedStruct<"human", {
+            readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+        }>;
+        readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"agent">;
+        readonly actor: Schema.TaggedStruct<"agent", {
+            readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+        }>;
+        readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+        readonly initiatingSessionId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">>;
+    }, "Type">;
+    readonly proposalExpiresAt: import("effect/DateTime").Utc;
+    readonly releasePublication?: {
+        readonly releaseId: string & import("effect/Brand").Brand<"ReleaseId">;
+        readonly sourceRevisionDigest: string & import("effect/Brand").Brand<string>;
+        readonly sourceRevisionCount: number;
+        readonly predecessorPublicationActionId?: (string & import("effect/Brand").Brand<"GovernedActionId">) | null;
+    };
+}) => Effect.Effect<VerifiedEnvelope, GovernedActionDigestError | GovernedActionBindingMismatch, Crypto.Crypto>;
+/** Recompute every canonical binding before trusting a decoded persisted envelope. */
+export declare const verifyGovernedActionEnvelope: (envelope: {
+    readonly providerId: "codecommit" | "codepipeline" | "jira" | "confluence" | "clockify";
+    readonly pluginConnectionId: string & import("effect/Brand").Brand<"PluginConnectionId">;
+    readonly workspaceId: string & import("effect/Brand").Brand<"WorkspaceId">;
+    readonly schemaVersion: 1;
+    readonly causationId: (string & import("effect/Brand").Brand<"DomainEventId">) | null;
+    readonly correlationId: (string & import("effect/Brand").Brand<"DomainEventCorrelationId">) | null;
+    readonly proposal: Schema.Struct.ReadonlySide<{
         readonly proposalKey: Schema.brand<Schema.String, string>;
         readonly capabilityVersion: Schema.Int;
         readonly request: Schema.Struct<{
@@ -1328,8 +1319,35 @@ export declare const verifyGovernedActionEnvelope: (envelope: Schema.Struct.Read
             readonly summary: Schema.String;
         }>;
         readonly proposedAt: Schema.DateTimeUtcFromString;
-    }>;
-    readonly evidence: Schema.$Array<Schema.Struct<{
+    }, "Type">;
+    readonly idempotencyKey: string & import("effect/Brand").Brand<"GovernedActionIdempotencyKey">;
+    readonly pluginId: string & import("effect/Brand").Brand<string>;
+    readonly actionId: string & import("effect/Brand").Brand<"GovernedActionId">;
+    readonly policy: Schema.Struct.ReadonlySide<{
+        readonly policyId: Schema.brand<Schema.String, string>;
+        readonly policyVersion: Schema.Int;
+        readonly policyDigest: Schema.brand<Schema.String, string>;
+        readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
+    }, "Type">;
+    readonly evidenceSetDigest: string & import("effect/Brand").Brand<string>;
+    readonly pluginConnectionRevision: number & import("effect/Brand").Brand<"GovernedActionPluginConnectionRevision">;
+    readonly pluginConnectionAuthorityDigest: string & import("effect/Brand").Brand<string>;
+    readonly pluginContractVersion: Schema.Struct.ReadonlySide<{
+        readonly major: Schema.Int;
+        readonly minor: Schema.Int;
+        readonly patch: Schema.Int;
+    }, "Type">;
+    readonly pluginAdapterVersion: Schema.Struct.ReadonlySide<{
+        readonly major: Schema.Int;
+        readonly minor: Schema.Int;
+        readonly patch: Schema.Int;
+    }, "Type">;
+    readonly capability: Schema.Struct.ReadonlySide<{
+        readonly capabilityId: Schema.Literal<"action.execute">;
+        readonly version: Schema.Int;
+    }, "Type">;
+    readonly targetEntityId: string & import("effect/Brand").Brand<"EntityId">;
+    readonly evidence: readonly Schema.Struct.ReadonlySide<{
         readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
         readonly evidenceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceId">;
         readonly evidenceClaimIds: Schema.$Array<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceClaimId">>;
@@ -1339,32 +1357,29 @@ export declare const verifyGovernedActionEnvelope: (envelope: Schema.Struct.Read
         readonly evaluatedAt: Schema.DateTimeUtcFromString;
         readonly source: Schema.Literals<readonly ["current", "stale", "missing", "unavailable"]>;
         readonly validity: Schema.Literals<readonly ["valid", "expired"]>;
-    }>>;
-    readonly evidenceSetDigest: Schema.brand<Schema.String, string>;
-    readonly policy: Schema.Struct<{
-        readonly policyId: Schema.brand<Schema.String, string>;
-        readonly policyVersion: Schema.Int;
-        readonly policyDigest: Schema.brand<Schema.String, string>;
-        readonly requiredPermission: Schema.Literals<readonly ["workspace-owner", "workspace-approver", "release-owner", "release-approver", "change-owner", "issue-owner", "issue-assignee", "page-owner", "author", "contributor", "reviewer", "operator", "deployment-approver", "merge-approver", "watcher"]>;
-    }>;
-    readonly origin: Schema.TaggedUnion<{
-        readonly agent: Schema.TaggedStruct<"agent", {
-            readonly actor: Schema.TaggedStruct<"agent", {
-                readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
-            }>;
-            readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
-            readonly initiatingSessionId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">>;
-        }>;
-        readonly human: Schema.TaggedStruct<"human", {
-            readonly actor: Schema.TaggedStruct<"human", {
-                readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
-            }>;
-            readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
-        }>;
-    }>;
-    readonly proposalExpiresAt: Schema.DateTimeUtcFromString;
-    readonly causationId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "DomainEventId">>;
-    readonly correlationId: Schema.NullOr<Schema.brand<Schema.String, "DomainEventCorrelationId">>;
-}, "Type">) => Effect.Effect<VerifiedEnvelope, GovernedActionDigestError | GovernedActionBindingMismatch, Crypto.Crypto>;
+    }, "Type">[];
+    readonly origin: Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"human">;
+        readonly actor: Schema.TaggedStruct<"human", {
+            readonly personId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PersonId">;
+        }>;
+        readonly sessionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"agent">;
+        readonly actor: Schema.TaggedStruct<"agent", {
+            readonly agentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "AgentId">;
+        }>;
+        readonly jobId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "JobId">;
+        readonly initiatingSessionId: Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "SessionId">>;
+    }, "Type">;
+    readonly proposalExpiresAt: import("effect/DateTime").Utc;
+    readonly envelopeDigest: string & import("effect/Brand").Brand<string>;
+    readonly releasePublication?: {
+        readonly releaseId: string & import("effect/Brand").Brand<"ReleaseId">;
+        readonly sourceRevisionDigest: string & import("effect/Brand").Brand<string>;
+        readonly sourceRevisionCount: number;
+        readonly predecessorPublicationActionId?: (string & import("effect/Brand").Brand<"GovernedActionId">) | null;
+    };
+}) => Effect.Effect<VerifiedEnvelope, GovernedActionDigestError | GovernedActionBindingMismatch, Crypto.Crypto>;
 export {};
 //# sourceMappingURL=governedActionDigests.d.ts.map