@lssm/lib.communication-spec 3.1.1

package/dist/contracts/ecosystem-webhook.operations.d.ts

@@ -0,0 +1,187 @@
+export declare const CommunicationProviderWebhookOutcomeEnum: import("@lssm/lib.schema").EnumType<[string, string, string]>;
+export declare const CommunicationProviderWebhookIngressV2Input: import("@lssm/lib.schema").SchemaModel<{
+    tenantId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    workspaceId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    spaceId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    connectionId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    network: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    providerDeliveryId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: true;
+    };
+    payloadSha256: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    authenticationEvidenceRef: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    receivedAt: {
+        type: import("@lssm/lib.schema").FieldType<Date, string>;
+        isOptional: false;
+    };
+}>;
+export declare const CommunicationProviderWebhookIngressV2Output: import("@lssm/lib.schema").SchemaModel<{
+    outcome: {
+        type: import("@lssm/lib.schema").EnumType<[string, string, string]>;
+        isOptional: false;
+    };
+    acceptedEventCount: {
+        type: import("@lssm/lib.schema").FieldType<number, number>;
+        isOptional: false;
+    };
+    journalEventIds: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isArray: true;
+        isOptional: false;
+    };
+    replayRef: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+}>;
+export declare const IngestCommunicationProviderWebhookV2Command: import("@lssm/lib.contracts-spec").OperationSpec<import("@lssm/lib.schema").SchemaModel<{
+    tenantId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    workspaceId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    spaceId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    connectionId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    network: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    providerDeliveryId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: true;
+    };
+    payloadSha256: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    authenticationEvidenceRef: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    receivedAt: {
+        type: import("@lssm/lib.schema").FieldType<Date, string>;
+        isOptional: false;
+    };
+}>, import("@lssm/lib.schema").SchemaModel<{
+    outcome: {
+        type: import("@lssm/lib.schema").EnumType<[string, string, string]>;
+        isOptional: false;
+    };
+    acceptedEventCount: {
+        type: import("@lssm/lib.schema").FieldType<number, number>;
+        isOptional: false;
+    };
+    journalEventIds: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isArray: true;
+        isOptional: false;
+    };
+    replayRef: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+}>, undefined>;
+export declare const CommunicationProviderWebhookEndpointV2Model: import("@lssm/lib.schema").SchemaModel<{
+    connectionId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    network: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    callbackUrl: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    endpointToken: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    tokenFingerprint: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    issuedAt: {
+        type: import("@lssm/lib.schema").FieldType<Date, string>;
+        isOptional: false;
+    };
+}>;
+export declare const IssueCommunicationProviderWebhookEndpointV2Command: import("@lssm/lib.contracts-spec").OperationSpec<import("@lssm/lib.schema").SchemaModel<{
+    tenantId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    workspaceId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    spaceId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    connectionId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    network: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+}>, import("@lssm/lib.schema").SchemaModel<{
+    connectionId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    network: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    callbackUrl: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    endpointToken: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    tokenFingerprint: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    issuedAt: {
+        type: import("@lssm/lib.schema").FieldType<Date, string>;
+        isOptional: false;
+    };
+}>, undefined>;

package/dist/contracts/ecosystem-webhook.operations.js

@@ -0,0 +1,2 @@
+// @bun
+import{defineCommand as s,docId as g}from"@lssm/lib.contracts-spec";import{defineEnum as O,defineSchemaModel as o,ScalarTypeEnum as n}from"@lssm/lib.schema";import{defineEnum as i,defineSchemaModel as t,ScalarTypeEnum as e}from"@lssm/lib.schema";var c=i("CommunicationSpaceKind",["personal","organization"]),l=i("CommunicationPrincipalKind",["human","agent","system"]),u=i("CommunicationConnectionPlacement",["device","managed_cloud","self_hosted"]),I=i("CommunicationConnectionNetwork",["email","sms","slack","teams","telegram","whatsapp","discord","matrix"]),d=i("CommunicationEncryptionMode",["client_encrypted","governed_server_indexable"]),m=i("CommunicationMembershipState",["active","revoked"]),k=i("CommunicationReceiptKind",["delivered","read"]),y=i("CommunicationConnectionHealth",["connecting","healthy","degraded","offline","revoked"]),a={id:"communication-os.ecosystem-messaging.v2",title:"CommunicationOS ecosystem messaging contracts",body:"Versioned, workspace-scoped contracts for personal and organization spaces, rooms, human and agent membership, hybrid channel connections, synchronized messages, and revocable outbound authority. CommunicationSpec remains canonical; provider protocols are adapters. V1 thread and draft-only operations remain unchanged.",kind:"reference",route:"/docs/communication-os/ecosystem-messaging-v2",visibility:"public"},b=t({name:"CommunicationScopeV2",description:"Strict tenant, workspace, and space boundary for messaging state",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1}}}),T=t({name:"CommunicationSpaceV2",description:"Personal or organization messaging boundary under one account",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},kind:{type:c,isOptional:!1},encryptionMode:{type:d,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),A=t({name:"CommunicationPrincipalV2",description:"Auditable human, agent, or system identity",fields:{id:{type:e.String_unsecure(),isOptional:!1},kind:{type:l,isOptional:!1},displayName:{type:e.String_unsecure(),isOptional:!1},ownerPrincipalId:{type:e.String_unsecure(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),w=t({name:"CommunicationRoomV2",description:"Room or direct-message projection inside one space",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!0},roomKind:{type:e.String_unsecure(),isOptional:!1},connectionIds:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),E=t({name:"CommunicationRoomMembershipV2",description:"Revocable principal membership and room-scoped capabilities",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},principalId:{type:e.String_unsecure(),isOptional:!1},role:{type:e.String_unsecure(),isOptional:!1},state:{type:m,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),x=t({name:"CommunicationChannelConnectionV2",description:"Credential-reference-only local, managed, or self-hosted channel connection",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},network:{type:e.String_unsecure(),isOptional:!1},placement:{type:u,isOptional:!1},externalAccountRef:{type:e.String_unsecure(),isOptional:!1},credentialRef:{type:e.String_unsecure(),isOptional:!1},health:{type:y,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),f=t({name:"CommunicationAttachmentV2",description:"Public-safe metadata for an opaque, scope-bound message attachment",fields:{id:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},mimeType:{type:e.String_unsecure(),isOptional:!1},sizeBytes:{type:e.Int_unsecure(),isOptional:!1},sha256:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),D=t({name:"CommunicationMessageV2",description:"Canonical room message with explicit author and encryption posture",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},authorPrincipalId:{type:e.String_unsecure(),isOptional:!1},connectionId:{type:e.String_unsecure(),isOptional:!0},externalMessageId:{type:e.String_unsecure(),isOptional:!0},body:{type:e.String_unsecure(),isOptional:!0},encryptedEnvelope:{type:e.JSONObject(),isOptional:!0},attachments:{type:f,isArray:!0,isOptional:!0},replyToMessageId:{type:e.String_unsecure(),isOptional:!0},revision:{type:e.Int_unsecure(),isOptional:!1},deletedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),V=t({name:"CommunicationAuthorityGrantV2",description:"Explicit, revocable messaging authority granted to one principal",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!0},connectionId:{type:e.String_unsecure(),isOptional:!0},principalId:{type:e.String_unsecure(),isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},grantedBy:{type:e.String_unsecure(),isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}});var r=["platform.communication-os"],p=[g(a.id)],h=O("CommunicationProviderWebhookOutcome",["accepted","duplicate","ignored"]),_=o({name:"CommunicationProviderWebhookIngressV2Input",description:"Authenticated provider delivery metadata after raw-body verification and before canonical journal ingestion",fields:{tenantId:{type:n.String_unsecure(),isOptional:!1},workspaceId:{type:n.String_unsecure(),isOptional:!1},spaceId:{type:n.String_unsecure(),isOptional:!1},connectionId:{type:n.String_unsecure(),isOptional:!1},network:{type:n.String_unsecure(),isOptional:!1},providerDeliveryId:{type:n.String_unsecure(),isOptional:!0},payloadSha256:{type:n.String_unsecure(),isOptional:!1},authenticationEvidenceRef:{type:n.String_unsecure(),isOptional:!1},receivedAt:{type:n.DateTime(),isOptional:!1}}}),S=o({name:"CommunicationProviderWebhookIngressV2Output",description:"Replay-safe result of projecting authenticated provider events into the canonical communication journal",fields:{outcome:{type:h,isOptional:!1},acceptedEventCount:{type:n.Int_unsecure(),isOptional:!1},journalEventIds:{type:n.String_unsecure(),isArray:!0,isOptional:!1},replayRef:{type:n.String_unsecure(),isOptional:!1}}}),W=s({meta:{key:"communication.provider-webhook.ingest",version:"2.0.0",stability:"experimental",owners:[...r],tags:["communication","provider","webhook","ingest","replay"],description:"Ingest an authenticated provider webhook into the scoped append-only communication journal",goal:"Centralize provider callbacks without trusting raw payloads or permitting duplicate canonical effects",context:"Raw bytes and signature material remain adapter-private; this operation starts only after endpoint, network, and provider authentication succeed",docId:p},io:{input:_,output:S,errors:{WEBHOOK_AUTHENTICATION_FAILED:{description:"Provider authenticity could not be established",http:401,when:"The endpoint token, provider signature, timestamp, or secret token is absent or invalid"},WEBHOOK_CONNECTION_NOT_FOUND:{description:"The signed endpoint does not resolve to an active connection",http:404,when:"The scoped connection was removed, revoked, or never existed"},WEBHOOK_NETWORK_MISMATCH:{description:"The callback network differs from the connection network",http:409,when:"A valid endpoint token is replayed against another provider route"},WEBHOOK_PAYLOAD_INVALID:{description:"The authenticated payload cannot be normalized safely",http:422,when:"The provider payload is malformed or exceeds configured limits"},WEBHOOK_ADAPTER_UNAVAILABLE:{description:"The scoped provider adapter cannot be resolved",http:503,when:"Credential resolution or the configured provider adapter is unavailable"}}},policy:{auth:"admin"}}),v=o({name:"CommunicationProviderWebhookEndpointV2",description:"One-time callback token projection for a scoped provider connection",fields:{connectionId:{type:n.String_unsecure(),isOptional:!1},network:{type:n.String_unsecure(),isOptional:!1},callbackUrl:{type:n.String_unsecure(),isOptional:!1},endpointToken:{type:n.String_unsecure(),isOptional:!1},tokenFingerprint:{type:n.String_unsecure(),isOptional:!1},issuedAt:{type:n.DateTime(),isOptional:!1}}}),B=s({meta:{key:"communication.provider-webhook-endpoint.issue",version:"2.0.0",stability:"experimental",owners:[...r],tags:["communication","provider","webhook","connection","secret"],description:"Issue a signed opaque callback endpoint for an authorized provider connection",goal:"Resolve webhook scope server-side without trusting tenant identifiers supplied by providers",context:"The endpoint token is returned once and must be treated as secret callback configuration; logs and analytics retain only its fingerprint",docId:p},io:{input:o({name:"IssueCommunicationProviderWebhookEndpointV2Input",fields:{tenantId:{type:n.String_unsecure(),isOptional:!1},workspaceId:{type:n.String_unsecure(),isOptional:!1},spaceId:{type:n.String_unsecure(),isOptional:!1},connectionId:{type:n.String_unsecure(),isOptional:!1},network:{type:n.String_unsecure(),isOptional:!1}}}),output:v,errors:{WEBHOOK_CONNECTION_NOT_FOUND:{description:"The scoped connection does not exist or is revoked",http:404,when:"Current membership cannot resolve an active connection in the requested scope"},WEBHOOK_ENDPOINT_NOT_AUTHORIZED:{description:"The actor cannot manage provider callbacks",http:403,when:"Current policy or RoleMorph action boundaries deny connection administration"}}},policy:{auth:"admin"}});export{v as CommunicationProviderWebhookEndpointV2Model,_ as CommunicationProviderWebhookIngressV2Input,S as CommunicationProviderWebhookIngressV2Output,h as CommunicationProviderWebhookOutcomeEnum,W as IngestCommunicationProviderWebhookV2Command,B as IssueCommunicationProviderWebhookEndpointV2Command};