@lssm/lib.communication-spec 3.1.1

package/dist/browser/contracts/ecosystem-identity-v3.operations.js

@@ -0,0 +1 @@
+import{defineQuery as V,docId as Y}from"@lssm/lib.contracts-spec";import{defineSchemaModel as A}from"@lssm/lib.schema";import{defineCommand as N,defineQuery as _,docId as j}from"@lssm/lib.contracts-spec";import{defineEnum as B,defineSchemaModel as o,ScalarTypeEnum as t}from"@lssm/lib.schema";import{defineEnum as n,defineSchemaModel as i,ScalarTypeEnum as e}from"@lssm/lib.schema";var D=n("CommunicationSpaceKind",["personal","organization"]),k=n("CommunicationPrincipalKind",["human","agent","system"]),T=n("CommunicationConnectionPlacement",["device","managed_cloud","self_hosted"]),ne=n("CommunicationConnectionNetwork",["email","sms","slack","teams","telegram","whatsapp","discord","matrix"]),E=n("CommunicationEncryptionMode",["client_encrypted","governed_server_indexable"]),R=n("CommunicationMembershipState",["active","revoked"]),oe=n("CommunicationReceiptKind",["delivered","read"]),M=n("CommunicationConnectionHealth",["connecting","healthy","degraded","offline","revoked"]),h={id:"communication-os.ecosystem-messaging.v2",title:"CommunicationOS ecosystem messaging contracts",body:"Versioned, workspace-scoped contracts for personal and organization spaces, rooms, human and agent membership, hybrid channel connections, synchronized messages, and revocable outbound authority. CommunicationSpec remains canonical; provider protocols are adapters. V1 thread and draft-only operations remain unchanged.",kind:"reference",route:"/docs/communication-os/ecosystem-messaging-v2",visibility:"public"},p=i({name:"CommunicationScopeV2",description:"Strict tenant, workspace, and space boundary for messaging state",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1}}}),C=i({name:"CommunicationSpaceV2",description:"Personal or organization messaging boundary under one account",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},kind:{type:D,isOptional:!1},encryptionMode:{type:E,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),ae=i({name:"CommunicationPrincipalV2",description:"Auditable human, agent, or system identity",fields:{id:{type:e.String_unsecure(),isOptional:!1},kind:{type:k,isOptional:!1},displayName:{type:e.String_unsecure(),isOptional:!1},ownerPrincipalId:{type:e.String_unsecure(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),u=i({name:"CommunicationRoomV2",description:"Room or direct-message projection inside one space",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!0},roomKind:{type:e.String_unsecure(),isOptional:!1},connectionIds:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),se=i({name:"CommunicationRoomMembershipV2",description:"Revocable principal membership and room-scoped capabilities",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},principalId:{type:e.String_unsecure(),isOptional:!1},role:{type:e.String_unsecure(),isOptional:!1},state:{type:R,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),re=i({name:"CommunicationChannelConnectionV2",description:"Credential-reference-only local, managed, or self-hosted channel connection",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},network:{type:e.String_unsecure(),isOptional:!1},placement:{type:T,isOptional:!1},externalAccountRef:{type:e.String_unsecure(),isOptional:!1},credentialRef:{type:e.String_unsecure(),isOptional:!1},health:{type:M,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),L=i({name:"CommunicationAttachmentV2",description:"Public-safe metadata for an opaque, scope-bound message attachment",fields:{id:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},mimeType:{type:e.String_unsecure(),isOptional:!1},sizeBytes:{type:e.Int_unsecure(),isOptional:!1},sha256:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),ce=i({name:"CommunicationMessageV2",description:"Canonical room message with explicit author and encryption posture",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},authorPrincipalId:{type:e.String_unsecure(),isOptional:!1},connectionId:{type:e.String_unsecure(),isOptional:!0},externalMessageId:{type:e.String_unsecure(),isOptional:!0},body:{type:e.String_unsecure(),isOptional:!0},encryptedEnvelope:{type:e.JSONObject(),isOptional:!0},attachments:{type:L,isArray:!0,isOptional:!0},replyToMessageId:{type:e.String_unsecure(),isOptional:!0},revision:{type:e.Int_unsecure(),isOptional:!1},deletedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),pe=i({name:"CommunicationAuthorityGrantV2",description:"Explicit, revocable messaging authority granted to one principal",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!0},connectionId:{type:e.String_unsecure(),isOptional:!0},principalId:{type:e.String_unsecure(),isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},grantedBy:{type:e.String_unsecure(),isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}});var m=["platform.communication-os"],l={id:"communication-os.identity-resolution.v1",title:"CommunicationOS identity resolution contracts",body:"Scope-isolated account and contact projections plus a human-reviewed identity merge or rejection lifecycle. Provider credentials and raw identity evidence never enter public outputs.",kind:"reference",route:"/docs/communication-os/identity-resolution-v1",visibility:"public"},d=[j(l.id)],S=B("CommunicationIdentityReviewStatus",["pending","merged","rejected"]),y=o({name:"CommunicationAccountV2",description:"Public-safe provider account projection in one authorized space",fields:{id:{type:t.String_unsecure(),isOptional:!1},network:{type:t.String_unsecure(),isOptional:!1},externalAccountRef:{type:t.String_unsecure(),isOptional:!1},placement:{type:t.String_unsecure(),isOptional:!1},health:{type:t.String_unsecure(),isOptional:!1},createdAt:{type:t.DateTime(),isOptional:!1},updatedAt:{type:t.DateTime(),isOptional:!1}}}),f=o({name:"CommunicationContactV2",description:"Participant projection derived from persisted scoped messages",fields:{principalId:{type:t.String_unsecure(),isOptional:!1},displayName:{type:t.String_unsecure(),isOptional:!0},roomIds:{type:t.String_unsecure(),isArray:!0,isOptional:!1},messageCount:{type:t.Int_unsecure(),isOptional:!1},lastSeenAt:{type:t.DateTime(),isOptional:!1}}}),P=o({name:"ListCommunicationAccountsV2Output",fields:{accounts:{type:y,isArray:!0,isOptional:!1}}}),K=o({name:"ListCommunicationContactsV2Output",fields:{contacts:{type:f,isArray:!0,isOptional:!1}}}),ye=_({meta:{key:"communication.account.list",version:"2.0.0",stability:"experimental",owners:[...m],tags:["communication","account","identity"],description:"List public-safe provider accounts in one authorized space",goal:"Expose account readiness without leaking credential references",context:"Authority is derived by the server from the authenticated scope",docId:d},io:{input:p,output:P},policy:{auth:"user"}}),fe=_({meta:{key:"communication.contact.list",version:"2.0.0",stability:"experimental",owners:[...m],tags:["communication","contact","identity"],description:"List persisted participant projections in one authorized space",goal:"Provide a real scoped contact index without provider identity leakage",context:"Contacts are replayable projections, never transient UI inference",docId:d},io:{input:p,output:K},policy:{auth:"user"}}),ge=N({meta:{key:"communication.identity.decide",version:"1.0.0",stability:"experimental",owners:[...m],tags:["communication","identity","review","governance"],description:"Merge or reject one pending identity review",goal:"Require an auditable human decision before cross-channel identity linkage",context:"Only authorized managers may decide and each review is single-transition",docId:d},io:{input:o({name:"DecideCommunicationIdentityV1Input",fields:{reviewId:{type:t.String_unsecure(),isOptional:!1},decision:{type:S,isOptional:!1},reason:{type:t.String_unsecure(),isOptional:!0}}}),output:o({name:"DecideCommunicationIdentityV1Output",fields:{reviewId:{type:t.String_unsecure(),isOptional:!1},status:{type:S,isOptional:!1},revision:{type:t.Int_unsecure(),isOptional:!1}}})},policy:{auth:"admin"}});import{defineCommand as z,defineQuery as v,docId as Q}from"@lssm/lib.contracts-spec";import{defineEnum as q,defineSchemaModel as s,ScalarTypeEnum as I}from"@lssm/lib.schema";var F=["platform.communication-os"],G=[Q(h.id)],g={VALIDATION_FAILED:{description:"The room intent or replay key is invalid.",http:422,when:"The request is malformed, blank, or exceeds a declared limit."},FORBIDDEN:{description:"The authenticated principal cannot access this scope.",http:403,when:"The server-derived membership or room authority is absent."},SERVICE_UNAVAILABLE:{description:"The scoped messaging projection is unavailable.",http:503,when:"The durable journal cannot safely answer the operation."}},U=q("CommunicationRoomKindV3",["direct","group"]),a=s({name:"CommunicationNavigationV3Input",fields:{}}),W=s({name:"CreateCommunicationRoomV3Input",fields:{name:{type:I.String_unsecure(),isOptional:!1},roomKind:{type:U,isOptional:!1},idempotencyKey:{type:I.String_unsecure(),isOptional:!1}}}),H=s({name:"ListCommunicationSpacesV3Output",fields:{spaces:{type:C,isArray:!0,isOptional:!1}}}),J=s({name:"ListCommunicationRoomsV3Output",fields:{rooms:{type:u,isArray:!0,isOptional:!1}}}),_e=v({meta:O("communication.space.list","List server-authorized messaging spaces","Drive space switching without accepting browser scope authority"),io:{input:a,output:H,errors:g},policy:{auth:"user"}}),Ie=v({meta:O("communication.room.list","List rooms in the server-selected messaging space","Drive room navigation from one authenticated journal partition"),io:{input:a,output:J,errors:g},policy:{auth:"user"}}),ve=z({meta:O("communication.room.create","Create a room from replay-safe client intent","Keep scope, principal, identifiers, and timestamps server-owned"),io:{input:W,output:u,errors:g},policy:{auth:"user"}});function O(r,c,w){return{key:r,version:"3.0.0",stability:"experimental",owners:[...F],tags:["communication","navigation","authority","server-scope"],description:c,goal:w,context:"The runtime derives tenant, workspace, space, and principal from the authenticated server context.",docId:G}}var X=["platform.communication-os"],Z=[Y(l.id)],x={FORBIDDEN:{description:"The authenticated principal cannot inspect this scope.",http:403,when:"The server-derived workspace or space membership is absent."},SERVICE_UNAVAILABLE:{description:"The scoped identity projection is unavailable.",http:503,when:"The durable projection cannot safely answer the operation."}},ee=A({name:"ListCommunicationAccountsV3Output",fields:{accounts:{type:y,isArray:!0,isOptional:!1}}}),te=A({name:"ListCommunicationContactsV3Output",fields:{contacts:{type:f,isArray:!0,isOptional:!1}}}),De=V({meta:b("communication.account.list","List public-safe provider accounts in the authenticated space"),io:{input:a,output:ee,errors:x},policy:{auth:"user"}}),ke=V({meta:b("communication.contact.list","List persisted contacts in the authenticated space"),io:{input:a,output:te,errors:x},policy:{auth:"user"}});function b(r,c){return{key:r,version:"3.0.0",stability:"experimental",owners:[...X],tags:["communication","identity","authority","server-scope"],description:c,goal:"Remove client-supplied tenant and space authority from identity reads",context:"The runtime derives tenant, workspace, space, and principal from the authenticated server context.",docId:Z}}export{De as ListCommunicationAccountsV3Query,ke as ListCommunicationContactsV3Query};

package/dist/browser/contracts/ecosystem-identity.operations.js

@@ -0,0 +1 @@
+import{defineCommand as O,defineQuery as p,docId as S}from"@lssm/lib.contracts-spec";import{defineEnum as _,defineSchemaModel as o,ScalarTypeEnum as t}from"@lssm/lib.schema";import{defineEnum as n,defineSchemaModel as i,ScalarTypeEnum as e}from"@lssm/lib.schema";var u=n("CommunicationSpaceKind",["personal","organization"]),l=n("CommunicationPrincipalKind",["human","agent","system"]),m=n("CommunicationConnectionPlacement",["device","managed_cloud","self_hosted"]),A=n("CommunicationConnectionNetwork",["email","sms","slack","teams","telegram","whatsapp","discord","matrix"]),d=n("CommunicationEncryptionMode",["client_encrypted","governed_server_indexable"]),y=n("CommunicationMembershipState",["active","revoked"]),k=n("CommunicationReceiptKind",["delivered","read"]),f=n("CommunicationConnectionHealth",["connecting","healthy","degraded","offline","revoked"]),V={id:"communication-os.ecosystem-messaging.v2",title:"CommunicationOS ecosystem messaging contracts",body:"Versioned, workspace-scoped contracts for personal and organization spaces, rooms, human and agent membership, hybrid channel connections, synchronized messages, and revocable outbound authority. CommunicationSpec remains canonical; provider protocols are adapters. V1 thread and draft-only operations remain unchanged.",kind:"reference",route:"/docs/communication-os/ecosystem-messaging-v2",visibility:"public"},a=i({name:"CommunicationScopeV2",description:"Strict tenant, workspace, and space boundary for messaging state",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1}}}),D=i({name:"CommunicationSpaceV2",description:"Personal or organization messaging boundary under one account",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},kind:{type:u,isOptional:!1},encryptionMode:{type:d,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),w=i({name:"CommunicationPrincipalV2",description:"Auditable human, agent, or system identity",fields:{id:{type:e.String_unsecure(),isOptional:!1},kind:{type:l,isOptional:!1},displayName:{type:e.String_unsecure(),isOptional:!1},ownerPrincipalId:{type:e.String_unsecure(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),M=i({name:"CommunicationRoomV2",description:"Room or direct-message projection inside one space",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!0},roomKind:{type:e.String_unsecure(),isOptional:!1},connectionIds:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),T=i({name:"CommunicationRoomMembershipV2",description:"Revocable principal membership and room-scoped capabilities",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},principalId:{type:e.String_unsecure(),isOptional:!1},role:{type:e.String_unsecure(),isOptional:!1},state:{type:y,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),E=i({name:"CommunicationChannelConnectionV2",description:"Credential-reference-only local, managed, or self-hosted channel connection",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},network:{type:e.String_unsecure(),isOptional:!1},placement:{type:m,isOptional:!1},externalAccountRef:{type:e.String_unsecure(),isOptional:!1},credentialRef:{type:e.String_unsecure(),isOptional:!1},health:{type:f,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),g=i({name:"CommunicationAttachmentV2",description:"Public-safe metadata for an opaque, scope-bound message attachment",fields:{id:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},mimeType:{type:e.String_unsecure(),isOptional:!1},sizeBytes:{type:e.Int_unsecure(),isOptional:!1},sha256:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),R=i({name:"CommunicationMessageV2",description:"Canonical room message with explicit author and encryption posture",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},authorPrincipalId:{type:e.String_unsecure(),isOptional:!1},connectionId:{type:e.String_unsecure(),isOptional:!0},externalMessageId:{type:e.String_unsecure(),isOptional:!0},body:{type:e.String_unsecure(),isOptional:!0},encryptedEnvelope:{type:e.JSONObject(),isOptional:!0},attachments:{type:g,isArray:!0,isOptional:!0},replyToMessageId:{type:e.String_unsecure(),isOptional:!0},revision:{type:e.Int_unsecure(),isOptional:!1},deletedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),P=i({name:"CommunicationAuthorityGrantV2",description:"Explicit, revocable messaging authority granted to one principal",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!0},connectionId:{type:e.String_unsecure(),isOptional:!0},principalId:{type:e.String_unsecure(),isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},grantedBy:{type:e.String_unsecure(),isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}});var s=["platform.communication-os"],C={id:"communication-os.identity-resolution.v1",title:"CommunicationOS identity resolution contracts",body:"Scope-isolated account and contact projections plus a human-reviewed identity merge or rejection lifecycle. Provider credentials and raw identity evidence never enter public outputs.",kind:"reference",route:"/docs/communication-os/identity-resolution-v1",visibility:"public"},r=[S(C.id)],c=_("CommunicationIdentityReviewStatus",["pending","merged","rejected"]),h=o({name:"CommunicationAccountV2",description:"Public-safe provider account projection in one authorized space",fields:{id:{type:t.String_unsecure(),isOptional:!1},network:{type:t.String_unsecure(),isOptional:!1},externalAccountRef:{type:t.String_unsecure(),isOptional:!1},placement:{type:t.String_unsecure(),isOptional:!1},health:{type:t.String_unsecure(),isOptional:!1},createdAt:{type:t.DateTime(),isOptional:!1},updatedAt:{type:t.DateTime(),isOptional:!1}}}),I=o({name:"CommunicationContactV2",description:"Participant projection derived from persisted scoped messages",fields:{principalId:{type:t.String_unsecure(),isOptional:!1},displayName:{type:t.String_unsecure(),isOptional:!0},roomIds:{type:t.String_unsecure(),isArray:!0,isOptional:!1},messageCount:{type:t.Int_unsecure(),isOptional:!1},lastSeenAt:{type:t.DateTime(),isOptional:!1}}}),v=o({name:"ListCommunicationAccountsV2Output",fields:{accounts:{type:h,isArray:!0,isOptional:!1}}}),x=o({name:"ListCommunicationContactsV2Output",fields:{contacts:{type:I,isArray:!0,isOptional:!1}}}),K=p({meta:{key:"communication.account.list",version:"2.0.0",stability:"experimental",owners:[...s],tags:["communication","account","identity"],description:"List public-safe provider accounts in one authorized space",goal:"Expose account readiness without leaking credential references",context:"Authority is derived by the server from the authenticated scope",docId:r},io:{input:a,output:v},policy:{auth:"user"}}),N=p({meta:{key:"communication.contact.list",version:"2.0.0",stability:"experimental",owners:[...s],tags:["communication","contact","identity"],description:"List persisted participant projections in one authorized space",goal:"Provide a real scoped contact index without provider identity leakage",context:"Contacts are replayable projections, never transient UI inference",docId:r},io:{input:a,output:x},policy:{auth:"user"}}),Q=O({meta:{key:"communication.identity.decide",version:"1.0.0",stability:"experimental",owners:[...s],tags:["communication","identity","review","governance"],description:"Merge or reject one pending identity review",goal:"Require an auditable human decision before cross-channel identity linkage",context:"Only authorized managers may decide and each review is single-transition",docId:r},io:{input:o({name:"DecideCommunicationIdentityV1Input",fields:{reviewId:{type:t.String_unsecure(),isOptional:!1},decision:{type:c,isOptional:!1},reason:{type:t.String_unsecure(),isOptional:!0}}}),output:o({name:"DecideCommunicationIdentityV1Output",fields:{reviewId:{type:t.String_unsecure(),isOptional:!1},status:{type:c,isOptional:!1},revision:{type:t.Int_unsecure(),isOptional:!1}}})},policy:{auth:"admin"}});export{h as CommunicationAccountV2Model,I as CommunicationContactV2Model,C as CommunicationIdentityDocBlock,c as CommunicationIdentityReviewStatusEnum,Q as DecideCommunicationIdentityV1Command,K as ListCommunicationAccountsV2Query,N as ListCommunicationContactsV2Query};

package/dist/browser/contracts/ecosystem-message.operations.js

@@ -0,0 +1 @@
+import{defineCommand as c,defineQuery as y,docId as b}from"@lssm/lib.contracts-spec";import{defineSchemaModel as s,ScalarTypeEnum as t}from"@lssm/lib.schema";import{defineEnum as o,defineSchemaModel as n,ScalarTypeEnum as e}from"@lssm/lib.schema";var h=o("CommunicationSpaceKind",["personal","organization"]),S=o("CommunicationPrincipalKind",["human","agent","system"]),_=o("CommunicationConnectionPlacement",["device","managed_cloud","self_hosted"]),V=o("CommunicationConnectionNetwork",["email","sms","slack","teams","telegram","whatsapp","discord","matrix"]),I=o("CommunicationEncryptionMode",["client_encrypted","governed_server_indexable"]),C=o("CommunicationMembershipState",["active","revoked"]),p=o("CommunicationReceiptKind",["delivered","read"]),v=o("CommunicationConnectionHealth",["connecting","healthy","degraded","offline","revoked"]),u={id:"communication-os.ecosystem-messaging.v2",title:"CommunicationOS ecosystem messaging contracts",body:"Versioned, workspace-scoped contracts for personal and organization spaces, rooms, human and agent membership, hybrid channel connections, synchronized messages, and revocable outbound authority. CommunicationSpec remains canonical; provider protocols are adapters. V1 thread and draft-only operations remain unchanged.",kind:"reference",route:"/docs/communication-os/ecosystem-messaging-v2",visibility:"public"},T=n({name:"CommunicationScopeV2",description:"Strict tenant, workspace, and space boundary for messaging state",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1}}}),E=n({name:"CommunicationSpaceV2",description:"Personal or organization messaging boundary under one account",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},kind:{type:h,isOptional:!1},encryptionMode:{type:I,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),R=n({name:"CommunicationPrincipalV2",description:"Auditable human, agent, or system identity",fields:{id:{type:e.String_unsecure(),isOptional:!1},kind:{type:S,isOptional:!1},displayName:{type:e.String_unsecure(),isOptional:!1},ownerPrincipalId:{type:e.String_unsecure(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),D=n({name:"CommunicationRoomV2",description:"Room or direct-message projection inside one space",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!0},roomKind:{type:e.String_unsecure(),isOptional:!1},connectionIds:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),N=n({name:"CommunicationRoomMembershipV2",description:"Revocable principal membership and room-scoped capabilities",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},principalId:{type:e.String_unsecure(),isOptional:!1},role:{type:e.String_unsecure(),isOptional:!1},state:{type:C,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),P=n({name:"CommunicationChannelConnectionV2",description:"Credential-reference-only local, managed, or self-hosted channel connection",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},network:{type:e.String_unsecure(),isOptional:!1},placement:{type:_,isOptional:!1},externalAccountRef:{type:e.String_unsecure(),isOptional:!1},credentialRef:{type:e.String_unsecure(),isOptional:!1},health:{type:v,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),x=n({name:"CommunicationAttachmentV2",description:"Public-safe metadata for an opaque, scope-bound message attachment",fields:{id:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},mimeType:{type:e.String_unsecure(),isOptional:!1},sizeBytes:{type:e.Int_unsecure(),isOptional:!1},sha256:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),r=n({name:"CommunicationMessageV2",description:"Canonical room message with explicit author and encryption posture",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},authorPrincipalId:{type:e.String_unsecure(),isOptional:!1},connectionId:{type:e.String_unsecure(),isOptional:!0},externalMessageId:{type:e.String_unsecure(),isOptional:!0},body:{type:e.String_unsecure(),isOptional:!0},encryptedEnvelope:{type:e.JSONObject(),isOptional:!0},attachments:{type:x,isArray:!0,isOptional:!0},replyToMessageId:{type:e.String_unsecure(),isOptional:!0},revision:{type:e.Int_unsecure(),isOptional:!1},deletedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),z=n({name:"CommunicationAuthorityGrantV2",description:"Explicit, revocable messaging authority granted to one principal",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!0},connectionId:{type:e.String_unsecure(),isOptional:!0},principalId:{type:e.String_unsecure(),isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},grantedBy:{type:e.String_unsecure(),isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}});var i=["platform.communication-os"],a=[b(u.id)],g={VALIDATION_FAILED:{description:"Message content, replay key, or attachment references are invalid.",http:422,when:"The request is malformed, empty, duplicated, or exceeds a declared limit."},FORBIDDEN:{description:"The authenticated principal cannot access or mutate the selected room.",http:403,when:"Workspace, space, room membership, connection binding, or send authority is absent."},SERVICE_UNAVAILABLE:{description:"The scoped messaging runtime or search projection is unavailable.",http:503,when:"A required durable runtime dependency cannot safely answer the operation."}},U=c({meta:{key:"communication.message.send",version:"2.1.0",stability:"experimental",owners:[...i],tags:["communication","message","send","authority"],description:"Send a canonical room message as an explicitly attributed principal",goal:"Give authorized humans and agents the same audited messaging path",context:"The runtime must re-evaluate membership, authority, consent, encryption posture, and connection policy immediately before dispatch",docId:a},io:{input:r,output:r},policy:{auth:"user"}}),k=s({name:"SendCommunicationMessageV3Input",fields:{workspaceId:{type:t.String_unsecure(),isOptional:!1},spaceId:{type:t.String_unsecure(),isOptional:!1},roomId:{type:t.String_unsecure(),isOptional:!1},connectionId:{type:t.String_unsecure(),isOptional:!0},idempotencyKey:{type:t.String_unsecure(),isOptional:!1},body:{type:t.String_unsecure(),isOptional:!0},encryptedEnvelope:{type:t.JSONObject(),isOptional:!0},attachmentIds:{type:t.String_unsecure(),isArray:!0,isOptional:!0},replyToMessageId:{type:t.String_unsecure(),isOptional:!0}}}),L=c({meta:{key:"communication.message.send",version:"3.0.0",stability:"experimental",owners:[...i],tags:["communication","message","send","authority","idempotency"],description:"Send a canonical room message from a JSON-safe, replay-safe client intent",goal:"Keep tenant, author, revision, identifiers, and timestamps server-owned",context:"The runtime derives tenant and author from the authenticated context, verifies workspace/space/room membership and attachment ownership, then applies the idempotency key before dispatch",docId:a},io:{input:k,output:r,errors:g},policy:{auth:"user"}}),f=s({name:"MutateCommunicationMessageV2Input",fields:{tenantId:{type:t.String_unsecure(),isOptional:!1},workspaceId:{type:t.String_unsecure(),isOptional:!1},spaceId:{type:t.String_unsecure(),isOptional:!1},roomId:{type:t.String_unsecure(),isOptional:!1},messageId:{type:t.String_unsecure(),isOptional:!1},actorPrincipalId:{type:t.String_unsecure(),isOptional:!1},body:{type:t.String_unsecure(),isOptional:!0},encryptedEnvelope:{type:t.JSONObject(),isOptional:!0},expectedRevision:{type:t.Int_unsecure(),isOptional:!1}}}),G=c({meta:{key:"communication.message.edit",version:"2.0.0",stability:"experimental",owners:[...i],tags:["communication","message","edit"],description:"Edit a message with optimistic revision protection",goal:"Preserve provider edits in the canonical event journal without rewriting history",context:"Unsupported provider edits must return an explicit capability error rather than silently diverge",docId:a},io:{input:f,output:r},policy:{auth:"user"}}),Q=c({meta:{key:"communication.message.delete",version:"2.0.0",stability:"experimental",owners:[...i],tags:["communication","message","delete"],description:"Append an auditable message deletion or provider-retention marker",goal:"Represent local and provider deletion honestly across heterogeneous networks",context:"The event journal retains non-content evidence even when message content is erased",docId:a},io:{input:f,output:r},policy:{auth:"user"}}),l=s({name:"CommunicationReactionV2Input",fields:{tenantId:{type:t.String_unsecure(),isOptional:!1},workspaceId:{type:t.String_unsecure(),isOptional:!1},spaceId:{type:t.String_unsecure(),isOptional:!1},roomId:{type:t.String_unsecure(),isOptional:!1},messageId:{type:t.String_unsecure(),isOptional:!1},principalId:{type:t.String_unsecure(),isOptional:!1},reaction:{type:t.String_unsecure(),isOptional:!1},active:{type:t.Boolean(),isOptional:!1}}}),J=c({meta:{key:"communication.reaction.set",version:"2.0.0",stability:"experimental",owners:[...i],tags:["communication","message","reaction"],description:"Add or remove a reaction on a canonical message",goal:"Normalize lightweight acknowledgement across supported networks",context:"Adapters report unsupported reactions explicitly",docId:a},io:{input:l,output:l},policy:{auth:"user"}}),m=s({name:"CommunicationReceiptV2Input",fields:{tenantId:{type:t.String_unsecure(),isOptional:!1},workspaceId:{type:t.String_unsecure(),isOptional:!1},spaceId:{type:t.String_unsecure(),isOptional:!1},roomId:{type:t.String_unsecure(),isOptional:!1},messageId:{type:t.String_unsecure(),isOptional:!1},principalId:{type:t.String_unsecure(),isOptional:!1},kind:{type:p,isOptional:!1},occurredAt:{type:t.DateTime(),isOptional:!1}}}),F=c({meta:{key:"communication.receipt.record",version:"2.0.0",stability:"experimental",owners:[...i],tags:["communication","message","receipt"],description:"Record a delivered or read receipt",goal:"Keep unread and delivery projections consistent across clients",context:"Privacy policy may suppress outbound read receipts per space or connection",docId:a},io:{input:m,output:m},policy:{auth:"user"}}),d=s({name:"CommunicationInboxStateV2Input",fields:{tenantId:{type:t.String_unsecure(),isOptional:!1},workspaceId:{type:t.String_unsecure(),isOptional:!1},spaceId:{type:t.String_unsecure(),isOptional:!1},roomId:{type:t.String_unsecure(),isOptional:!1},principalId:{type:t.String_unsecure(),isOptional:!1},pinned:{type:t.Boolean(),isOptional:!1},archived:{type:t.Boolean(),isOptional:!1},snoozedUntil:{type:t.DateTime(),isOptional:!0},reminderAt:{type:t.DateTime(),isOptional:!0}}}),H=c({meta:{key:"communication.inbox-state.set",version:"2.0.0",stability:"experimental",owners:[...i],tags:["communication","inbox","pin","archive","snooze","reminder"],description:"Set one principal's pin, archive, snooze, and reminder state",goal:"Synchronize inbox organization without leaking message content",context:"Personal inbox state is principal-private even inside organization workspaces",docId:a},io:{input:d,output:d},policy:{auth:"user"}}),M=s({name:"SearchCommunicationMessagesV2Input",fields:{tenantId:{type:t.String_unsecure(),isOptional:!1},workspaceId:{type:t.String_unsecure(),isOptional:!1},spaceId:{type:t.String_unsecure(),isOptional:!1},query:{type:t.String_unsecure(),isOptional:!1},roomIds:{type:t.String_unsecure(),isArray:!0,isOptional:!0},limit:{type:t.Int_unsecure(),isOptional:!0}}}),O=s({name:"SearchCommunicationMessagesV2Output",fields:{messages:{type:r,isArray:!0,isOptional:!1},nextCursor:{type:t.String_unsecure(),isOptional:!0}}}),Y=y({meta:{key:"communication.message.search",version:"2.0.0",stability:"experimental",owners:[...i],tags:["communication","message","search"],description:"Search messages within exactly one authorized space",goal:"Provide cross-network search without cross-space index leakage",context:"Client-encrypted spaces search a local decrypted projection; server-indexable spaces use governed indexes",docId:a},io:{input:M,output:O},policy:{auth:"user"}}),A=s({name:"SearchCommunicationMessagesV3Input",fields:{workspaceId:{type:t.String_unsecure(),isOptional:!1},spaceId:{type:t.String_unsecure(),isOptional:!1},query:{type:t.String_unsecure(),isOptional:!1},roomIds:{type:t.String_unsecure(),isArray:!0,isOptional:!0},limit:{type:t.Int_unsecure(),isOptional:!0}}}),W=y({meta:{key:"communication.message.search",version:"3.0.0",stability:"experimental",owners:[...i],tags:["communication","message","search","authority"],description:"Search messages inside the authenticated tenant and an authorized selected space",goal:"Remove client-supplied tenant authority from canonical search transport",context:"The runtime derives tenant from the authenticated context and verifies workspace, space, and optional room filters before querying any index",docId:a},io:{input:A,output:O,errors:g},policy:{auth:"user"}}),X={key:"communication.message.replay-authority",version:"1.0.0",invariants:["Recheck current room membership and connection authority before returning a prior send result.","A request key cannot substitute principal, room, connection, text, subject, HTML, metadata, encryption envelope, reply target or attachment IDs.","Queued acceptance is not provider delivery.","Requested attachments require a complete resolved manifest; missing attachment support must not silently send an incomplete message."]},Z={key:"communication.message.queue-custody",version:"1.0.0",invariants:["An external send requires a durable journal-and-outbox adapter before it can be accepted.","Queued acceptance requires an exact persisted delivery record for the accepted message, connection and scope.","Outbox-key conflicts cannot silently drop provider delivery or report false success.","Message delivery uses delivery:<send idempotency key>; alternate delivery keys cannot duplicate a prior accepted message.","Message identity allocated by an atomic journal replay remains the delivery target; retries do not refer to discarded candidate IDs."]},ee={key:"communication.delivery.context-reproof",version:"1.0.0",invariants:["Resolve the current delivery context before adapter access and again after provider health checks immediately before send.","Changed recipient, connection, credential binding, content, reply, attachment or routing metadata invalidates the pending send.","Missing or changed context yields a definitive rejection without invoking provider.send.","Journal delivery resolution requires current active sender membership and applicable agent grants; revoked or deleted messages cannot resolve for sending.","Context reproof supplements canonical Runtime Node authority and does not replace its approval or effect fence."]};export{ee as COMMUNICATION_DELIVERY_REPROOF_CONTRACT,Z as COMMUNICATION_MESSAGE_QUEUE_CUSTODY_CONTRACT,X as COMMUNICATION_MESSAGE_REPLAY_CONTRACT,Q as DeleteCommunicationMessageV2Command,G as EditCommunicationMessageV2Command,F as RecordCommunicationReceiptV2Command,Y as SearchCommunicationMessagesV2Query,W as SearchCommunicationMessagesV3Query,U as SendCommunicationMessageV2Command,L as SendCommunicationMessageV3Command,k as SendCommunicationMessageV3Input,H as SetCommunicationInboxStateV2Command,J as SetCommunicationReactionV2Command};

package/dist/browser/contracts/ecosystem-messaging.events.js

@@ -0,0 +1 @@
+import{defineEvent as n,docId as C}from"@lssm/lib.contracts-spec";import{defineSchemaModel as s,ScalarTypeEnum as t}from"@lssm/lib.schema";import{defineEnum as o,defineSchemaModel as a,ScalarTypeEnum as e}from"@lssm/lib.schema";var y=o("CommunicationSpaceKind",["personal","organization"]),g=o("CommunicationPrincipalKind",["human","agent","system"]),f=o("CommunicationConnectionPlacement",["device","managed_cloud","self_hosted"]),A=o("CommunicationConnectionNetwork",["email","sms","slack","teams","telegram","whatsapp","discord","matrix"]),O=o("CommunicationEncryptionMode",["client_encrypted","governed_server_indexable"]),S=o("CommunicationMembershipState",["active","revoked"]),V=o("CommunicationReceiptKind",["delivered","read"]),_=o("CommunicationConnectionHealth",["connecting","healthy","degraded","offline","revoked"]),l={id:"communication-os.ecosystem-messaging.v2",title:"CommunicationOS ecosystem messaging contracts",body:"Versioned, workspace-scoped contracts for personal and organization spaces, rooms, human and agent membership, hybrid channel connections, synchronized messages, and revocable outbound authority. CommunicationSpec remains canonical; provider protocols are adapters. V1 thread and draft-only operations remain unchanged.",kind:"reference",route:"/docs/communication-os/ecosystem-messaging-v2",visibility:"public"},k=a({name:"CommunicationScopeV2",description:"Strict tenant, workspace, and space boundary for messaging state",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1}}}),D=a({name:"CommunicationSpaceV2",description:"Personal or organization messaging boundary under one account",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},kind:{type:y,isOptional:!1},encryptionMode:{type:O,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),M=a({name:"CommunicationPrincipalV2",description:"Auditable human, agent, or system identity",fields:{id:{type:e.String_unsecure(),isOptional:!1},kind:{type:g,isOptional:!1},displayName:{type:e.String_unsecure(),isOptional:!1},ownerPrincipalId:{type:e.String_unsecure(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),w=a({name:"CommunicationRoomV2",description:"Room or direct-message projection inside one space",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!0},roomKind:{type:e.String_unsecure(),isOptional:!1},connectionIds:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),T=a({name:"CommunicationRoomMembershipV2",description:"Revocable principal membership and room-scoped capabilities",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},principalId:{type:e.String_unsecure(),isOptional:!1},role:{type:e.String_unsecure(),isOptional:!1},state:{type:S,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),P=a({name:"CommunicationChannelConnectionV2",description:"Credential-reference-only local, managed, or self-hosted channel connection",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},network:{type:e.String_unsecure(),isOptional:!1},placement:{type:f,isOptional:!1},externalAccountRef:{type:e.String_unsecure(),isOptional:!1},credentialRef:{type:e.String_unsecure(),isOptional:!1},health:{type:_,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),h=a({name:"CommunicationAttachmentV2",description:"Public-safe metadata for an opaque, scope-bound message attachment",fields:{id:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},mimeType:{type:e.String_unsecure(),isOptional:!1},sizeBytes:{type:e.Int_unsecure(),isOptional:!1},sha256:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),R=a({name:"CommunicationMessageV2",description:"Canonical room message with explicit author and encryption posture",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},authorPrincipalId:{type:e.String_unsecure(),isOptional:!1},connectionId:{type:e.String_unsecure(),isOptional:!0},externalMessageId:{type:e.String_unsecure(),isOptional:!0},body:{type:e.String_unsecure(),isOptional:!0},encryptedEnvelope:{type:e.JSONObject(),isOptional:!0},attachments:{type:h,isArray:!0,isOptional:!0},replyToMessageId:{type:e.String_unsecure(),isOptional:!0},revision:{type:e.Int_unsecure(),isOptional:!1},deletedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),B=a({name:"CommunicationAuthorityGrantV2",description:"Explicit, revocable messaging authority granted to one principal",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!0},connectionId:{type:e.String_unsecure(),isOptional:!0},principalId:{type:e.String_unsecure(),isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},grantedBy:{type:e.String_unsecure(),isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}});var I=["platform.communication-os"],v=[C(l.id)];function i(u,m,d){return{key:u,version:"2.0.0",description:m,stability:"experimental",owners:[...I],tags:["communication","ecosystem-messaging",...d],docId:v}}var r=s({name:"CommunicationScopedEntityV2Payload",fields:{tenantId:{type:t.String_unsecure(),isOptional:!1},workspaceId:{type:t.String_unsecure(),isOptional:!1},spaceId:{type:t.String_unsecure(),isOptional:!1},entityId:{type:t.String_unsecure(),isOptional:!1},actorPrincipalId:{type:t.String_unsecure(),isOptional:!1},occurredAt:{type:t.DateTime(),isOptional:!1}}}),H=n({meta:i("communication.space.created","Emitted when an isolated messaging space is created",["space","created"]),payload:r}),q=n({meta:i("communication.room.created","Emitted when a room or direct-message projection is created",["room","created"]),payload:r}),E=s({name:"CommunicationMembershipChangedV2Payload",fields:{tenantId:{type:t.String_unsecure(),isOptional:!1},workspaceId:{type:t.String_unsecure(),isOptional:!1},spaceId:{type:t.String_unsecure(),isOptional:!1},roomId:{type:t.String_unsecure(),isOptional:!1},membershipId:{type:t.String_unsecure(),isOptional:!1},principalId:{type:t.String_unsecure(),isOptional:!1},state:{type:t.String_unsecure(),isOptional:!1},changedBy:{type:t.String_unsecure(),isOptional:!1},occurredAt:{type:t.DateTime(),isOptional:!1}}}),G=n({meta:i("communication.membership.changed","Emitted when a human, agent, or system membership changes",["membership","authority"]),payload:E}),J=n({meta:i("communication.authority.changed","Emitted when a principal authority grant is added, changed, expired, or revoked",["agent","authority","revocation"]),payload:r}),c=s({name:"CommunicationMessageEventV2Payload",fields:{tenantId:{type:t.String_unsecure(),isOptional:!1},workspaceId:{type:t.String_unsecure(),isOptional:!1},spaceId:{type:t.String_unsecure(),isOptional:!1},roomId:{type:t.String_unsecure(),isOptional:!1},messageId:{type:t.String_unsecure(),isOptional:!1},authorPrincipalId:{type:t.String_unsecure(),isOptional:!1},connectionId:{type:t.String_unsecure(),isOptional:!0},providerReceiptRef:{type:t.String_unsecure(),isOptional:!0},revision:{type:t.Int_unsecure(),isOptional:!1},occurredAt:{type:t.DateTime(),isOptional:!1}}}),W=n({meta:i("communication.message.sent","Emitted after provider acceptance or canonical local delivery of a v2 message",["message","sent"]),payload:c}),F=n({meta:i("communication.message.edited","Emitted when a new message revision is accepted",["message","edited"]),payload:c}),L=n({meta:i("communication.message.deleted","Emitted when message content is deleted or provider retention is documented",["message","deleted","erasure"]),payload:c}),p=s({name:"CommunicationConnectionEventV2Payload",fields:{tenantId:{type:t.String_unsecure(),isOptional:!1},workspaceId:{type:t.String_unsecure(),isOptional:!1},spaceId:{type:t.String_unsecure(),isOptional:!1},connectionId:{type:t.String_unsecure(),isOptional:!1},network:{type:t.String_unsecure(),isOptional:!1},placement:{type:t.String_unsecure(),isOptional:!1},health:{type:t.String_unsecure(),isOptional:!1},cursor:{type:t.String_unsecure(),isOptional:!0},invalidationRef:{type:t.String_unsecure(),isOptional:!0},subscriptionRef:{type:t.String_unsecure(),isOptional:!0},targetExpiresAt:{type:t.DateTime(),isOptional:!0},expiresAt:{type:t.DateTime(),isOptional:!0},workOrderDigest:{type:t.String_unsecure(),isOptional:!0},idempotencyKey:{type:t.String_unsecure(),isOptional:!0},providerReceiptRef:{type:t.String_unsecure(),isOptional:!0},evidenceRefs:{type:t.String_unsecure(),isArray:!0,isOptional:!0},failureCode:{type:t.String_unsecure(),isOptional:!0},retryable:{type:t.Boolean(),isOptional:!0},retryAt:{type:t.DateTime(),isOptional:!0},occurredAt:{type:t.DateTime(),isOptional:!1}}}),Q=n({meta:i("communication.connection.health.changed","Emitted when a local or server connection health state changes",["connection","health"]),payload:p}),U=n({meta:i("communication.connection.sync.advanced","Emitted after a connection cursor advances durably",["connection","sync","cursor"]),payload:p}),X=n({meta:i("communication.connection.sync.invalidated","Emitted after an authenticated provider callback durably requests synchronization",["connection","sync","invalidation"]),payload:p}),x=s({name:"CommunicationRealtimeStateV2Payload",fields:{tenantId:{type:t.String_unsecure(),isOptional:!1},workspaceId:{type:t.String_unsecure(),isOptional:!1},spaceId:{type:t.String_unsecure(),isOptional:!1},roomId:{type:t.String_unsecure(),isOptional:!1},principalId:{type:t.String_unsecure(),isOptional:!1},stateKind:{type:t.String_unsecure(),isOptional:!1},messageId:{type:t.String_unsecure(),isOptional:!0},occurredAt:{type:t.DateTime(),isOptional:!1}}}),Y=n({meta:i("communication.realtime-state.changed","Emitted for reaction, receipt, presence, typing, and inbox-state projection updates",["realtime","receipt","presence","reaction"]),payload:x});export{J as CommunicationAuthorityChangedV2Event,p as CommunicationConnectionEventV2Payload,Q as CommunicationConnectionHealthChangedV2Event,U as CommunicationConnectionSyncAdvancedV2Event,X as CommunicationConnectionSyncInvalidatedV2Event,G as CommunicationMembershipChangedV2Event,L as CommunicationMessageDeletedV2Event,F as CommunicationMessageEditedV2Event,W as CommunicationMessageSentV2Event,Y as CommunicationRealtimeStateChangedV2Event,q as CommunicationRoomCreatedV2Event,H as CommunicationSpaceCreatedV2Event};

package/dist/browser/contracts/ecosystem-messaging.models.js

@@ -0,0 +1 @@
+import{defineEnum as n,defineSchemaModel as t,ScalarTypeEnum as e}from"@lssm/lib.schema";var i=n("CommunicationSpaceKind",["personal","organization"]),a=n("CommunicationPrincipalKind",["human","agent","system"]),o=n("CommunicationConnectionPlacement",["device","managed_cloud","self_hosted"]),u=n("CommunicationConnectionNetwork",["email","sms","slack","teams","telegram","whatsapp","discord","matrix"]),s=n("CommunicationEncryptionMode",["client_encrypted","governed_server_indexable"]),r=n("CommunicationMembershipState",["active","revoked"]),m=n("CommunicationReceiptKind",["delivered","read"]),p=n("CommunicationConnectionHealth",["connecting","healthy","degraded","offline","revoked"]),d={id:"communication-os.ecosystem-messaging.v2",title:"CommunicationOS ecosystem messaging contracts",body:"Versioned, workspace-scoped contracts for personal and organization spaces, rooms, human and agent membership, hybrid channel connections, synchronized messages, and revocable outbound authority. CommunicationSpec remains canonical; provider protocols are adapters. V1 thread and draft-only operations remain unchanged.",kind:"reference",route:"/docs/communication-os/ecosystem-messaging-v2",visibility:"public"},y=t({name:"CommunicationScopeV2",description:"Strict tenant, workspace, and space boundary for messaging state",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1}}}),f=t({name:"CommunicationSpaceV2",description:"Personal or organization messaging boundary under one account",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},kind:{type:i,isOptional:!1},encryptionMode:{type:s,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),g=t({name:"CommunicationPrincipalV2",description:"Auditable human, agent, or system identity",fields:{id:{type:e.String_unsecure(),isOptional:!1},kind:{type:a,isOptional:!1},displayName:{type:e.String_unsecure(),isOptional:!1},ownerPrincipalId:{type:e.String_unsecure(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),O=t({name:"CommunicationRoomV2",description:"Room or direct-message projection inside one space",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!0},roomKind:{type:e.String_unsecure(),isOptional:!1},connectionIds:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),S=t({name:"CommunicationRoomMembershipV2",description:"Revocable principal membership and room-scoped capabilities",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},principalId:{type:e.String_unsecure(),isOptional:!1},role:{type:e.String_unsecure(),isOptional:!1},state:{type:r,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),_=t({name:"CommunicationChannelConnectionV2",description:"Credential-reference-only local, managed, or self-hosted channel connection",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},network:{type:e.String_unsecure(),isOptional:!1},placement:{type:o,isOptional:!1},externalAccountRef:{type:e.String_unsecure(),isOptional:!1},credentialRef:{type:e.String_unsecure(),isOptional:!1},health:{type:p,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),c=t({name:"CommunicationAttachmentV2",description:"Public-safe metadata for an opaque, scope-bound message attachment",fields:{id:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},mimeType:{type:e.String_unsecure(),isOptional:!1},sizeBytes:{type:e.Int_unsecure(),isOptional:!1},sha256:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),C=t({name:"CommunicationMessageV2",description:"Canonical room message with explicit author and encryption posture",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},authorPrincipalId:{type:e.String_unsecure(),isOptional:!1},connectionId:{type:e.String_unsecure(),isOptional:!0},externalMessageId:{type:e.String_unsecure(),isOptional:!0},body:{type:e.String_unsecure(),isOptional:!0},encryptedEnvelope:{type:e.JSONObject(),isOptional:!0},attachments:{type:c,isArray:!0,isOptional:!0},replyToMessageId:{type:e.String_unsecure(),isOptional:!0},revision:{type:e.Int_unsecure(),isOptional:!1},deletedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),h=t({name:"CommunicationAuthorityGrantV2",description:"Explicit, revocable messaging authority granted to one principal",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!0},connectionId:{type:e.String_unsecure(),isOptional:!0},principalId:{type:e.String_unsecure(),isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},grantedBy:{type:e.String_unsecure(),isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}});export{c as CommunicationAttachmentV2Model,h as CommunicationAuthorityGrantV2Model,_ as CommunicationChannelConnectionV2Model,p as CommunicationConnectionHealthEnum,u as CommunicationConnectionNetworkEnum,o as CommunicationConnectionPlacementEnum,s as CommunicationEncryptionModeEnum,r as CommunicationMembershipStateEnum,C as CommunicationMessageV2Model,a as CommunicationPrincipalKindEnum,g as CommunicationPrincipalV2Model,m as CommunicationReceiptKindEnum,S as CommunicationRoomMembershipV2Model,O as CommunicationRoomV2Model,y as CommunicationScopeV2Model,i as CommunicationSpaceKindEnum,f as CommunicationSpaceV2Model,d as EcosystemMessagingDocBlock};

package/dist/browser/contracts/ecosystem-navigation-v3.operations.js

@@ -0,0 +1 @@
+import{defineCommand as I,defineQuery as u,docId as V}from"@lssm/lib.contracts-spec";import{defineEnum as A,defineSchemaModel as i,ScalarTypeEnum as p}from"@lssm/lib.schema";import{defineEnum as n,defineSchemaModel as t,ScalarTypeEnum as e}from"@lssm/lib.schema";var f=n("CommunicationSpaceKind",["personal","organization"]),g=n("CommunicationPrincipalKind",["human","agent","system"]),O=n("CommunicationConnectionPlacement",["device","managed_cloud","self_hosted"]),E=n("CommunicationConnectionNetwork",["email","sms","slack","teams","telegram","whatsapp","discord","matrix"]),S=n("CommunicationEncryptionMode",["client_encrypted","governed_server_indexable"]),h=n("CommunicationMembershipState",["active","revoked"]),w=n("CommunicationReceiptKind",["delivered","read"]),_=n("CommunicationConnectionHealth",["connecting","healthy","degraded","offline","revoked"]),r={id:"communication-os.ecosystem-messaging.v2",title:"CommunicationOS ecosystem messaging contracts",body:"Versioned, workspace-scoped contracts for personal and organization spaces, rooms, human and agent membership, hybrid channel connections, synchronized messages, and revocable outbound authority. CommunicationSpec remains canonical; provider protocols are adapters. V1 thread and draft-only operations remain unchanged.",kind:"reference",route:"/docs/communication-os/ecosystem-messaging-v2",visibility:"public"},R=t({name:"CommunicationScopeV2",description:"Strict tenant, workspace, and space boundary for messaging state",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1}}}),c=t({name:"CommunicationSpaceV2",description:"Personal or organization messaging boundary under one account",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},kind:{type:f,isOptional:!1},encryptionMode:{type:S,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),K=t({name:"CommunicationPrincipalV2",description:"Auditable human, agent, or system identity",fields:{id:{type:e.String_unsecure(),isOptional:!1},kind:{type:g,isOptional:!1},displayName:{type:e.String_unsecure(),isOptional:!1},ownerPrincipalId:{type:e.String_unsecure(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),o=t({name:"CommunicationRoomV2",description:"Room or direct-message projection inside one space",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!0},roomKind:{type:e.String_unsecure(),isOptional:!1},connectionIds:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),L=t({name:"CommunicationRoomMembershipV2",description:"Revocable principal membership and room-scoped capabilities",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},principalId:{type:e.String_unsecure(),isOptional:!1},role:{type:e.String_unsecure(),isOptional:!1},state:{type:h,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),N=t({name:"CommunicationChannelConnectionV2",description:"Credential-reference-only local, managed, or self-hosted channel connection",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},network:{type:e.String_unsecure(),isOptional:!1},placement:{type:O,isOptional:!1},externalAccountRef:{type:e.String_unsecure(),isOptional:!1},credentialRef:{type:e.String_unsecure(),isOptional:!1},health:{type:_,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),C=t({name:"CommunicationAttachmentV2",description:"Public-safe metadata for an opaque, scope-bound message attachment",fields:{id:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},mimeType:{type:e.String_unsecure(),isOptional:!1},sizeBytes:{type:e.Int_unsecure(),isOptional:!1},sha256:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),P=t({name:"CommunicationMessageV2",description:"Canonical room message with explicit author and encryption posture",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},authorPrincipalId:{type:e.String_unsecure(),isOptional:!1},connectionId:{type:e.String_unsecure(),isOptional:!0},externalMessageId:{type:e.String_unsecure(),isOptional:!0},body:{type:e.String_unsecure(),isOptional:!0},encryptedEnvelope:{type:e.JSONObject(),isOptional:!0},attachments:{type:C,isArray:!0,isOptional:!0},replyToMessageId:{type:e.String_unsecure(),isOptional:!0},revision:{type:e.Int_unsecure(),isOptional:!1},deletedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),B=t({name:"CommunicationAuthorityGrantV2",description:"Explicit, revocable messaging authority granted to one principal",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!0},connectionId:{type:e.String_unsecure(),isOptional:!0},principalId:{type:e.String_unsecure(),isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},grantedBy:{type:e.String_unsecure(),isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}});var v=["platform.communication-os"],x=[V(r.id)],a={VALIDATION_FAILED:{description:"The room intent or replay key is invalid.",http:422,when:"The request is malformed, blank, or exceeds a declared limit."},FORBIDDEN:{description:"The authenticated principal cannot access this scope.",http:403,when:"The server-derived membership or room authority is absent."},SERVICE_UNAVAILABLE:{description:"The scoped messaging projection is unavailable.",http:503,when:"The durable journal cannot safely answer the operation."}},b=A("CommunicationRoomKindV3",["direct","group"]),l=i({name:"CommunicationNavigationV3Input",fields:{}}),D=i({name:"CreateCommunicationRoomV3Input",fields:{name:{type:p.String_unsecure(),isOptional:!1},roomKind:{type:b,isOptional:!1},idempotencyKey:{type:p.String_unsecure(),isOptional:!1}}}),T=i({name:"ListCommunicationSpacesV3Output",fields:{spaces:{type:c,isArray:!0,isOptional:!1}}}),k=i({name:"ListCommunicationRoomsV3Output",fields:{rooms:{type:o,isArray:!0,isOptional:!1}}}),q=u({meta:s("communication.space.list","List server-authorized messaging spaces","Drive space switching without accepting browser scope authority"),io:{input:l,output:T,errors:a},policy:{auth:"user"}}),F=u({meta:s("communication.room.list","List rooms in the server-selected messaging space","Drive room navigation from one authenticated journal partition"),io:{input:l,output:k,errors:a},policy:{auth:"user"}}),H=I({meta:s("communication.room.create","Create a room from replay-safe client intent","Keep scope, principal, identifiers, and timestamps server-owned"),io:{input:D,output:o,errors:a},policy:{auth:"user"}});function s(m,d,y){return{key:m,version:"3.0.0",stability:"experimental",owners:[...v],tags:["communication","navigation","authority","server-scope"],description:d,goal:y,context:"The runtime derives tenant, workspace, space, and principal from the authenticated server context.",docId:x}}export{l as CommunicationNavigationV3Input,b as CommunicationRoomKindV3Enum,H as CreateCommunicationRoomV3Command,D as CreateCommunicationRoomV3Input,F as ListCommunicationRoomsV3Query,q as ListCommunicationSpacesV3Query};

package/dist/browser/contracts/ecosystem-webhook.operations.js

@@ -0,0 +1 @@
+import{defineCommand as s,docId as g}from"@lssm/lib.contracts-spec";import{defineEnum as O,defineSchemaModel as o,ScalarTypeEnum as n}from"@lssm/lib.schema";import{defineEnum as i,defineSchemaModel as t,ScalarTypeEnum as e}from"@lssm/lib.schema";var c=i("CommunicationSpaceKind",["personal","organization"]),l=i("CommunicationPrincipalKind",["human","agent","system"]),u=i("CommunicationConnectionPlacement",["device","managed_cloud","self_hosted"]),I=i("CommunicationConnectionNetwork",["email","sms","slack","teams","telegram","whatsapp","discord","matrix"]),d=i("CommunicationEncryptionMode",["client_encrypted","governed_server_indexable"]),m=i("CommunicationMembershipState",["active","revoked"]),k=i("CommunicationReceiptKind",["delivered","read"]),y=i("CommunicationConnectionHealth",["connecting","healthy","degraded","offline","revoked"]),a={id:"communication-os.ecosystem-messaging.v2",title:"CommunicationOS ecosystem messaging contracts",body:"Versioned, workspace-scoped contracts for personal and organization spaces, rooms, human and agent membership, hybrid channel connections, synchronized messages, and revocable outbound authority. CommunicationSpec remains canonical; provider protocols are adapters. V1 thread and draft-only operations remain unchanged.",kind:"reference",route:"/docs/communication-os/ecosystem-messaging-v2",visibility:"public"},b=t({name:"CommunicationScopeV2",description:"Strict tenant, workspace, and space boundary for messaging state",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1}}}),T=t({name:"CommunicationSpaceV2",description:"Personal or organization messaging boundary under one account",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},kind:{type:c,isOptional:!1},encryptionMode:{type:d,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),A=t({name:"CommunicationPrincipalV2",description:"Auditable human, agent, or system identity",fields:{id:{type:e.String_unsecure(),isOptional:!1},kind:{type:l,isOptional:!1},displayName:{type:e.String_unsecure(),isOptional:!1},ownerPrincipalId:{type:e.String_unsecure(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),w=t({name:"CommunicationRoomV2",description:"Room or direct-message projection inside one space",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!0},roomKind:{type:e.String_unsecure(),isOptional:!1},connectionIds:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),E=t({name:"CommunicationRoomMembershipV2",description:"Revocable principal membership and room-scoped capabilities",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},principalId:{type:e.String_unsecure(),isOptional:!1},role:{type:e.String_unsecure(),isOptional:!1},state:{type:m,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),x=t({name:"CommunicationChannelConnectionV2",description:"Credential-reference-only local, managed, or self-hosted channel connection",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},network:{type:e.String_unsecure(),isOptional:!1},placement:{type:u,isOptional:!1},externalAccountRef:{type:e.String_unsecure(),isOptional:!1},credentialRef:{type:e.String_unsecure(),isOptional:!1},health:{type:y,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),f=t({name:"CommunicationAttachmentV2",description:"Public-safe metadata for an opaque, scope-bound message attachment",fields:{id:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},mimeType:{type:e.String_unsecure(),isOptional:!1},sizeBytes:{type:e.Int_unsecure(),isOptional:!1},sha256:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),D=t({name:"CommunicationMessageV2",description:"Canonical room message with explicit author and encryption posture",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},authorPrincipalId:{type:e.String_unsecure(),isOptional:!1},connectionId:{type:e.String_unsecure(),isOptional:!0},externalMessageId:{type:e.String_unsecure(),isOptional:!0},body:{type:e.String_unsecure(),isOptional:!0},encryptedEnvelope:{type:e.JSONObject(),isOptional:!0},attachments:{type:f,isArray:!0,isOptional:!0},replyToMessageId:{type:e.String_unsecure(),isOptional:!0},revision:{type:e.Int_unsecure(),isOptional:!1},deletedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),V=t({name:"CommunicationAuthorityGrantV2",description:"Explicit, revocable messaging authority granted to one principal",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!0},connectionId:{type:e.String_unsecure(),isOptional:!0},principalId:{type:e.String_unsecure(),isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},grantedBy:{type:e.String_unsecure(),isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}});var r=["platform.communication-os"],p=[g(a.id)],h=O("CommunicationProviderWebhookOutcome",["accepted","duplicate","ignored"]),_=o({name:"CommunicationProviderWebhookIngressV2Input",description:"Authenticated provider delivery metadata after raw-body verification and before canonical journal ingestion",fields:{tenantId:{type:n.String_unsecure(),isOptional:!1},workspaceId:{type:n.String_unsecure(),isOptional:!1},spaceId:{type:n.String_unsecure(),isOptional:!1},connectionId:{type:n.String_unsecure(),isOptional:!1},network:{type:n.String_unsecure(),isOptional:!1},providerDeliveryId:{type:n.String_unsecure(),isOptional:!0},payloadSha256:{type:n.String_unsecure(),isOptional:!1},authenticationEvidenceRef:{type:n.String_unsecure(),isOptional:!1},receivedAt:{type:n.DateTime(),isOptional:!1}}}),S=o({name:"CommunicationProviderWebhookIngressV2Output",description:"Replay-safe result of projecting authenticated provider events into the canonical communication journal",fields:{outcome:{type:h,isOptional:!1},acceptedEventCount:{type:n.Int_unsecure(),isOptional:!1},journalEventIds:{type:n.String_unsecure(),isArray:!0,isOptional:!1},replayRef:{type:n.String_unsecure(),isOptional:!1}}}),W=s({meta:{key:"communication.provider-webhook.ingest",version:"2.0.0",stability:"experimental",owners:[...r],tags:["communication","provider","webhook","ingest","replay"],description:"Ingest an authenticated provider webhook into the scoped append-only communication journal",goal:"Centralize provider callbacks without trusting raw payloads or permitting duplicate canonical effects",context:"Raw bytes and signature material remain adapter-private; this operation starts only after endpoint, network, and provider authentication succeed",docId:p},io:{input:_,output:S,errors:{WEBHOOK_AUTHENTICATION_FAILED:{description:"Provider authenticity could not be established",http:401,when:"The endpoint token, provider signature, timestamp, or secret token is absent or invalid"},WEBHOOK_CONNECTION_NOT_FOUND:{description:"The signed endpoint does not resolve to an active connection",http:404,when:"The scoped connection was removed, revoked, or never existed"},WEBHOOK_NETWORK_MISMATCH:{description:"The callback network differs from the connection network",http:409,when:"A valid endpoint token is replayed against another provider route"},WEBHOOK_PAYLOAD_INVALID:{description:"The authenticated payload cannot be normalized safely",http:422,when:"The provider payload is malformed or exceeds configured limits"},WEBHOOK_ADAPTER_UNAVAILABLE:{description:"The scoped provider adapter cannot be resolved",http:503,when:"Credential resolution or the configured provider adapter is unavailable"}}},policy:{auth:"admin"}}),v=o({name:"CommunicationProviderWebhookEndpointV2",description:"One-time callback token projection for a scoped provider connection",fields:{connectionId:{type:n.String_unsecure(),isOptional:!1},network:{type:n.String_unsecure(),isOptional:!1},callbackUrl:{type:n.String_unsecure(),isOptional:!1},endpointToken:{type:n.String_unsecure(),isOptional:!1},tokenFingerprint:{type:n.String_unsecure(),isOptional:!1},issuedAt:{type:n.DateTime(),isOptional:!1}}}),B=s({meta:{key:"communication.provider-webhook-endpoint.issue",version:"2.0.0",stability:"experimental",owners:[...r],tags:["communication","provider","webhook","connection","secret"],description:"Issue a signed opaque callback endpoint for an authorized provider connection",goal:"Resolve webhook scope server-side without trusting tenant identifiers supplied by providers",context:"The endpoint token is returned once and must be treated as secret callback configuration; logs and analytics retain only its fingerprint",docId:p},io:{input:o({name:"IssueCommunicationProviderWebhookEndpointV2Input",fields:{tenantId:{type:n.String_unsecure(),isOptional:!1},workspaceId:{type:n.String_unsecure(),isOptional:!1},spaceId:{type:n.String_unsecure(),isOptional:!1},connectionId:{type:n.String_unsecure(),isOptional:!1},network:{type:n.String_unsecure(),isOptional:!1}}}),output:v,errors:{WEBHOOK_CONNECTION_NOT_FOUND:{description:"The scoped connection does not exist or is revoked",http:404,when:"Current membership cannot resolve an active connection in the requested scope"},WEBHOOK_ENDPOINT_NOT_AUTHORIZED:{description:"The actor cannot manage provider callbacks",http:403,when:"Current policy or RoleMorph action boundaries deny connection administration"}}},policy:{auth:"admin"}});export{v as CommunicationProviderWebhookEndpointV2Model,_ as CommunicationProviderWebhookIngressV2Input,S as CommunicationProviderWebhookIngressV2Output,h as CommunicationProviderWebhookOutcomeEnum,W as IngestCommunicationProviderWebhookV2Command,B as IssueCommunicationProviderWebhookEndpointV2Command};

package/dist/browser/contracts/ecosystem-workspace.operations.js

@@ -0,0 +1 @@
+import{defineCommand as s,defineQuery as g,docId as x}from"@lssm/lib.contracts-spec";import{defineSchemaModel as p,ScalarTypeEnum as t}from"@lssm/lib.schema";import{defineEnum as i,defineSchemaModel as n,ScalarTypeEnum as e}from"@lssm/lib.schema";var f=i("CommunicationSpaceKind",["personal","organization"]),O=i("CommunicationPrincipalKind",["human","agent","system"]),h=i("CommunicationConnectionPlacement",["device","managed_cloud","self_hosted"]),M=i("CommunicationConnectionNetwork",["email","sms","slack","teams","telegram","whatsapp","discord","matrix"]),S=i("CommunicationEncryptionMode",["client_encrypted","governed_server_indexable"]),C=i("CommunicationMembershipState",["active","revoked"]),A=i("CommunicationReceiptKind",["delivered","read"]),_=i("CommunicationConnectionHealth",["connecting","healthy","degraded","offline","revoked"]),y={id:"communication-os.ecosystem-messaging.v2",title:"CommunicationOS ecosystem messaging contracts",body:"Versioned, workspace-scoped contracts for personal and organization spaces, rooms, human and agent membership, hybrid channel connections, synchronized messages, and revocable outbound authority. CommunicationSpec remains canonical; provider protocols are adapters. V1 thread and draft-only operations remain unchanged.",kind:"reference",route:"/docs/communication-os/ecosystem-messaging-v2",visibility:"public"},u=n({name:"CommunicationScopeV2",description:"Strict tenant, workspace, and space boundary for messaging state",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1}}}),r=n({name:"CommunicationSpaceV2",description:"Personal or organization messaging boundary under one account",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},kind:{type:f,isOptional:!1},encryptionMode:{type:S,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),D=n({name:"CommunicationPrincipalV2",description:"Auditable human, agent, or system identity",fields:{id:{type:e.String_unsecure(),isOptional:!1},kind:{type:O,isOptional:!1},displayName:{type:e.String_unsecure(),isOptional:!1},ownerPrincipalId:{type:e.String_unsecure(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),c=n({name:"CommunicationRoomV2",description:"Room or direct-message projection inside one space",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!0},roomKind:{type:e.String_unsecure(),isOptional:!1},connectionIds:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),l=n({name:"CommunicationRoomMembershipV2",description:"Revocable principal membership and room-scoped capabilities",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},principalId:{type:e.String_unsecure(),isOptional:!1},role:{type:e.String_unsecure(),isOptional:!1},state:{type:C,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}}),m=n({name:"CommunicationChannelConnectionV2",description:"Credential-reference-only local, managed, or self-hosted channel connection",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},network:{type:e.String_unsecure(),isOptional:!1},placement:{type:h,isOptional:!1},externalAccountRef:{type:e.String_unsecure(),isOptional:!1},credentialRef:{type:e.String_unsecure(),isOptional:!1},health:{type:_,isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),b=n({name:"CommunicationAttachmentV2",description:"Public-safe metadata for an opaque, scope-bound message attachment",fields:{id:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},mimeType:{type:e.String_unsecure(),isOptional:!1},sizeBytes:{type:e.Int_unsecure(),isOptional:!1},sha256:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}}),T=n({name:"CommunicationMessageV2",description:"Canonical room message with explicit author and encryption posture",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!1},authorPrincipalId:{type:e.String_unsecure(),isOptional:!1},connectionId:{type:e.String_unsecure(),isOptional:!0},externalMessageId:{type:e.String_unsecure(),isOptional:!0},body:{type:e.String_unsecure(),isOptional:!0},encryptedEnvelope:{type:e.JSONObject(),isOptional:!0},attachments:{type:b,isArray:!0,isOptional:!0},replyToMessageId:{type:e.String_unsecure(),isOptional:!0},revision:{type:e.Int_unsecure(),isOptional:!1},deletedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),d=n({name:"CommunicationAuthorityGrantV2",description:"Explicit, revocable messaging authority granted to one principal",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!1},spaceId:{type:e.String_unsecure(),isOptional:!1},roomId:{type:e.String_unsecure(),isOptional:!0},connectionId:{type:e.String_unsecure(),isOptional:!0},principalId:{type:e.String_unsecure(),isOptional:!1},capabilities:{type:e.String_unsecure(),isArray:!0,isOptional:!1},grantedBy:{type:e.String_unsecure(),isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!0},revokedAt:{type:e.DateTime(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1}}});var o=["platform.communication-os"],a=[x(y.id)],B=s({meta:{key:"communication.space.create",version:"2.0.0",stability:"experimental",owners:[...o],tags:["communication","space","workspace"],description:"Create an isolated personal or organization messaging space",goal:"Keep messages, identities, agents, search, and policy inside one explicit boundary",context:"The caller must already have access to the containing tenant and workspace",docId:a},io:{input:r,output:r},policy:{auth:"user"}}),K=s({meta:{key:"communication.room.create",version:"2.0.0",stability:"experimental",owners:[...o],tags:["communication","room","membership"],description:"Create a room or direct-message projection inside one space",goal:"Give humans and agents one canonical collaboration container",context:"Connection-backed rooms retain provider identifiers only through connection references",docId:a},io:{input:c,output:c},policy:{auth:"user"}}),I=p({name:"ListCommunicationSpacesV2Output",fields:{spaces:{type:r,isArray:!0,isOptional:!1}}}),L=g({meta:{key:"communication.space.list",version:"2.0.0",stability:"experimental",owners:[...o],tags:["communication","space","workspace","query"],description:"List messaging spaces visible inside an authorized scope",goal:"Make space switching explicit without crossing an isolation boundary",context:"The authorization layer resolves accessible scopes; this query never widens the supplied scope",docId:a},io:{input:u,output:I},policy:{auth:"user"}}),v=p({name:"ListCommunicationRoomsV2Output",fields:{rooms:{type:c,isArray:!0,isOptional:!1}}}),j=g({meta:{key:"communication.room.list",version:"2.0.0",stability:"experimental",owners:[...o],tags:["communication","room","workspace","query"],description:"List canonical rooms inside one authorized messaging space",goal:"Drive inbox and room navigation from a replayable projection",context:"Rooms are projected only from the append-only journal partition selected by the supplied scope",docId:a},io:{input:u,output:v},policy:{auth:"user"}}),G=s({meta:{key:"communication.membership.set",version:"2.0.0",stability:"experimental",owners:[...o],tags:["communication","membership","agent","authority"],description:"Add, update, or revoke a human, agent, or system room membership",goal:"Make every participant and its capabilities explicit and auditable",context:"Revocation takes effect before the next effect-bearing operation",docId:a},io:{input:l,output:l},policy:{auth:"admin"}}),q=s({meta:{key:"communication.authority.set",version:"2.0.0",stability:"experimental",owners:[...o],tags:["communication","agent","authority","revocation"],description:"Grant or revoke scoped messaging authority for one principal",goal:"Permit human-equivalent agents without implicit or unbounded send access",context:"The runtime re-evaluates active membership, grant scope, expiry, and channel policy immediately before dispatch",docId:a},io:{input:d,output:d},policy:{auth:"admin"}}),N=s({meta:{key:"communication.connection.connect",version:"2.0.0",stability:"experimental",owners:[...o],tags:["communication","connection","hybrid","credentials"],description:"Register a device, managed-cloud, or self-hosted channel connection",goal:"Use one provider-neutral connection contract across all clients and workers",context:"Only a secret-manager reference may be persisted; raw provider credentials are forbidden",docId:a},io:{input:m,output:m},policy:{auth:"user"}}),k=p({name:"SyncCommunicationConnectionV2Input",fields:{tenantId:{type:t.String_unsecure(),isOptional:!1},workspaceId:{type:t.String_unsecure(),isOptional:!1},spaceId:{type:t.String_unsecure(),isOptional:!1},connectionId:{type:t.String_unsecure(),isOptional:!1},cursor:{type:t.String_unsecure(),isOptional:!0},limit:{type:t.Int_unsecure(),isOptional:!0}}}),V=p({name:"SyncCommunicationConnectionV2Output",fields:{connectionId:{type:t.String_unsecure(),isOptional:!1},nextCursor:{type:t.String_unsecure(),isOptional:!0},acceptedEventIds:{type:t.String_unsecure(),isArray:!0,isOptional:!1},hasMore:{type:t.Boolean(),isOptional:!1}}}),Q=s({meta:{key:"communication.connection.sync",version:"2.0.0",stability:"experimental",owners:[...o],tags:["communication","connection","sync","cursor"],description:"Advance an authenticated channel connection from a cursor",goal:"Provide deterministic, resumable synchronization across device and server workers",context:"Duplicate provider events must be suppressed by their connection-scoped idempotency key",docId:a},io:{input:k,output:V},policy:{auth:"user"}});export{N as ConnectCommunicationChannelV2Command,K as CreateCommunicationRoomV2Command,B as CreateCommunicationSpaceV2Command,j as ListCommunicationRoomsV2Query,L as ListCommunicationSpacesV2Query,q as SetCommunicationAuthorityGrantV2Command,G as SetCommunicationMembershipV2Command,Q as SyncCommunicationConnectionV2Command};

package/dist/browser/contracts/enums.js

@@ -0,0 +1 @@
+import{defineEnum as e}from"@lssm/lib.schema";var a=e("ChannelType",["email","sms","whatsapp","telegram","matrix","web_chat","voice","internal_chat","custom_adapter","future_bridge","unknown"]),n=e("ThreadStatus",["open","waiting_on_human","waiting_on_external_party","action_required","resolved","archived"]),o=e("MessageStatus",["received","normalized","classified","linked","triaged","replied","archived"]),r=e("ReplyStatus",["drafted","requires_review","approved","sent","failed","blocked_by_policy"]),d=e("HandoffStatus",["created","assigned","acknowledged","completed","reopened"]),i=e("SuggestionStatus",["generated","shown","accepted","edited","rejected","applied","expired"]),s=e("IntentCategory",["support","sales","bug_report","feature_request","billing","onboarding","coordination","general","spam","escalation"]),c=e("ActionSafetyMode",["read_only","draft_only","requires_review","policy_executable","blocked"]),u=e("FeedbackOutcome",["accepted","edited","rejected","unsafe","incomplete"]);export{c as ActionSafetyModeEnum,a as ChannelTypeEnum,u as FeedbackOutcomeEnum,d as HandoffStatusEnum,s as IntentCategoryEnum,o as MessageStatusEnum,r as ReplyStatusEnum,i as SuggestionStatusEnum,n as ThreadStatusEnum};

package/dist/browser/contracts/erasure.operations.js

@@ -0,0 +1 @@
+import{defineCommand as m,defineQuery as f}from"@lssm/lib.contracts-spec/operations";import{defineSchemaModel as i,ScalarTypeEnum as t}from"@lssm/lib.schema";import{defineEnum as n,defineSchemaModel as o,ScalarTypeEnum as e}from"@lssm/lib.schema";var l=n("ResidencyRegion",["eu","eu_fr","eu_de","us","uk","apac","self_managed"]),d=n("HostingMode",["saas","self_host","on_prem"]),a=n("DataClass",["message_body","participant_identity","channel_account","attachment","ai_derived","audit_evidence"]),s=n("ConsentBasis",["consent","contract","legal_obligation","legitimate_interest"]),r=n("ConsentStatus",["granted","withdrawn","expired","not_recorded"]),p=o({name:"RetentionWindow",description:"Documented retention window for a single governed data class.",fields:{dataClass:{type:a,isOptional:!1},retentionDays:{type:e.Int_unsecure(),isOptional:!1},basis:{type:s,isOptional:!1},description:{type:e.String_unsecure(),isOptional:!0}}}),g=o({name:"SovereigntyProfile",description:"Residency, retention, sovereign LLM provider and hosting posture for a tenant.",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},residencyRegion:{type:l,isOptional:!1,defaultValue:"eu"},hostingMode:{type:d,isOptional:!1,defaultValue:"saas"},llmProviderId:{type:e.String_unsecure(),isOptional:!1},retentionWindows:{type:p,isArray:!0,isOptional:!1},dataResidencyEnforced:{type:e.Boolean(),isOptional:!1,defaultValue:!0},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),h=o({name:"SubjectConsent",description:"Recorded RGPD consent decision for a single data subject.",fields:{id:{type:e.String_unsecure(),isOptional:!1},tenantId:{type:e.String_unsecure(),isOptional:!1},subjectId:{type:e.String_unsecure(),isOptional:!1},basis:{type:s,isOptional:!1},status:{type:r,isOptional:!1,defaultValue:"not_recorded"},grantedAt:{type:e.DateTime(),isOptional:!0},withdrawnAt:{type:e.DateTime(),isOptional:!0},expiresAt:{type:e.DateTime(),isOptional:!0},evidenceRef:{type:e.String_unsecure(),isOptional:!0}}}),u=n("ErasureOutcome",["erased_local","erased_local_and_channel","erased_local_provider_retained_documented"]);var c=["platform.communication-os"],E=m({meta:{key:"communication.subject.erase",version:"1.0.0",stability:"experimental",owners:[...c],tags:["communication","gdpr","rgpd","erasure","sovereignty"],description:"Erase a data subject across local persistence and channel providers",goal:"Honor a GDPR/RGPD right-to-erasure request with an auditable, three-state outcome that documents irrecoverable provider retention rather than failing closed",context:"Governed by ContractSpec Connect; handler emits a local delete descriptor plus ChannelAdapter.eraseSubject; provider-unrecallable channels (email/SMTP) resolve to a documented retention window from the Sovereignty Profile"},io:{input:i({name:"EraseSubjectInput",description:"Right-to-erasure request for a single data subject.",fields:{tenantId:{type:t.String_unsecure(),isOptional:!1},subjectId:{type:t.String_unsecure(),isOptional:!1},requestedBy:{type:t.String_unsecure(),isOptional:!1},reason:{type:t.String_unsecure(),isOptional:!0},dataClasses:{type:a,isArray:!0,isOptional:!0}}}),output:i({name:"EraseSubjectOutput",description:"Three-state erasure outcome with optional documented provider retention.",fields:{subjectId:{type:t.String_unsecure(),isOptional:!1},outcome:{type:u,isOptional:!1},localDeleted:{type:t.Boolean(),isOptional:!1},channelErased:{type:t.Boolean(),isOptional:!1},providerRetainedDataClass:{type:a,isOptional:!0},providerRetentionDays:{type:t.Int_unsecure(),isOptional:!0},retentionWindowRef:{type:t.String_unsecure(),isOptional:!0},auditEventRef:{type:t.String_unsecure(),isOptional:!1},erasedAt:{type:t.DateTime(),isOptional:!1}}}),errors:{SUBJECT_NOT_FOUND:{description:"No data subject exists for the provided subjectId",http:404,when:"subjectId does not resolve to any local persistence record"},SOVEREIGNTY_PROFILE_MISSING:{description:"No Sovereignty Profile is configured for the tenant; retention window cannot be documented",http:422,when:"A provider cannot recall data but no documented retention window exists to reference"},CHANNEL_ADAPTER_UNAVAILABLE:{description:"The channel adapter required to attempt provider erasure could not be reached",http:503,when:"ChannelAdapter.eraseSubject cannot be invoked; erasure fails closed rather than reporting an unverified outcome"},ERASURE_NOT_AUTHORIZED:{description:"The requesting actor is not authorized to erase this subject",http:403,when:"Policy gate denies the erasure request for the actor/tenant"}}},policy:{auth:"admin"}}),v=f({meta:{key:"communication.subject.consent.check",version:"1.0.0",stability:"experimental",owners:[...c],tags:["communication","gdpr","rgpd","consent"],description:"Check the recorded RGPD consent state for a data subject",goal:"Let runtime gate processing on a subject lawful basis before side effects",context:"Read-only; returns the recorded consent status and lawful basis, never mutates consent"},io:{input:i({name:"CheckSubjectConsentInput",fields:{tenantId:{type:t.String_unsecure(),isOptional:!1},subjectId:{type:t.String_unsecure(),isOptional:!1}}}),output:i({name:"CheckSubjectConsentOutput",fields:{subjectId:{type:t.String_unsecure(),isOptional:!1},status:{type:r,isOptional:!1},basis:{type:s,isOptional:!0},mayProcess:{type:t.Boolean(),isOptional:!1}}})},policy:{auth:"admin"}});export{v as CheckSubjectConsentQuery,E as EraseSubjectCommand};

package/dist/browser/contracts/events.js

@@ -0,0 +1 @@
+import{defineEvent as t}from"@lssm/lib.contracts-spec/events";import{defineSchemaModel as a,ScalarTypeEnum as e}from"@lssm/lib.schema";import{defineEnum as i}from"@lssm/lib.schema";var o=i("ChannelType",["email","sms","whatsapp","telegram","matrix","web_chat","voice","internal_chat","custom_adapter","future_bridge","unknown"]),s=i("ThreadStatus",["open","waiting_on_human","waiting_on_external_party","action_required","resolved","archived"]),r=i("MessageStatus",["received","normalized","classified","linked","triaged","replied","archived"]),d=i("ReplyStatus",["drafted","requires_review","approved","sent","failed","blocked_by_policy"]),y=i("HandoffStatus",["created","assigned","acknowledged","completed","reopened"]),f=i("SuggestionStatus",["generated","shown","accepted","edited","rejected","applied","expired"]),g=i("IntentCategory",["support","sales","bug_report","feature_request","billing","onboarding","coordination","general","spam","escalation"]),h=i("ActionSafetyMode",["read_only","draft_only","requires_review","policy_executable","blocked"]),S=i("FeedbackOutcome",["accepted","edited","rejected","unsafe","incomplete"]);var u=["platform.communication-os"],n=(l,p,c)=>({key:l,version:"1.0.0",description:p,stability:"experimental",owners:[...u],tags:["communication","event",...c]}),w=t({meta:n("communication.message.received","Emitted when a new message is accepted from a channel",["message","received"]),payload:a({name:"MessageReceivedPayload",fields:{messageId:{type:e.String_unsecure(),isOptional:!1},threadId:{type:e.String_unsecure(),isOptional:!1},channelType:{type:o,isOptional:!1}}})}),x=t({meta:n("communication.message.normalized","Emitted when a raw channel payload is normalized into a CommunicationMessage",["message","normalized"]),payload:a({name:"MessageNormalizedPayload",fields:{messageId:{type:e.String_unsecure(),isOptional:!1},threadId:{type:e.String_unsecure(),isOptional:!1},status:{type:r,isOptional:!1}}})}),k=t({meta:n("communication.intent.classified","Emitted when a message or thread intent is classified",["intent","classified"]),payload:a({name:"IntentClassifiedPayload",fields:{threadId:{type:e.String_unsecure(),isOptional:!1},messageId:{type:e.String_unsecure(),isOptional:!0},category:{type:e.String_unsecure(),isOptional:!1},confidence:{type:e.Float_unsecure(),isOptional:!1}}})}),I=t({meta:n("communication.thread.linked","Emitted when a thread is linked to a business object",["thread","linked"]),payload:a({name:"ThreadLinkedPayload",fields:{threadId:{type:e.String_unsecure(),isOptional:!1},objectType:{type:e.String_unsecure(),isOptional:!1},objectId:{type:e.String_unsecure(),isOptional:!1}}})}),b=t({meta:n("communication.thread.status.changed","Emitted when a thread status changes",["thread","status"]),payload:a({name:"ThreadStatusChangedPayload",fields:{threadId:{type:e.String_unsecure(),isOptional:!1},previousStatus:{type:s,isOptional:!1},newStatus:{type:s,isOptional:!1},changedBy:{type:e.String_unsecure(),isOptional:!0}}})}),P=t({meta:n("communication.reply.drafted","Emitted when a reply draft is created",["reply","drafted"]),payload:a({name:"ReplyDraftedPayload",fields:{draftId:{type:e.String_unsecure(),isOptional:!1},threadId:{type:e.String_unsecure(),isOptional:!1},status:{type:d,isOptional:!1}}})}),R=t({meta:n("communication.reply.blocked_by_policy","Emitted when a reply draft is blocked before send",["reply","blocked"]),payload:a({name:"ReplyBlockedByPolicyPayload",fields:{draftId:{type:e.String_unsecure(),isOptional:!1},threadId:{type:e.String_unsecure(),isOptional:!1},policyRef:{type:e.String_unsecure(),isOptional:!1},reason:{type:e.String_unsecure(),isOptional:!1}}})}),T=t({meta:n("communication.reply.sent","Emitted when a reply is sent",["reply","sent"]),payload:a({name:"ReplySentPayload",fields:{draftId:{type:e.String_unsecure(),isOptional:!1},threadId:{type:e.String_unsecure(),isOptional:!1},sentAt:{type:e.DateTime(),isOptional:!1}}})}),C=t({meta:n("communication.handoff.created","Emitted when a handoff packet is created",["handoff","created"]),payload:a({name:"HandoffCreatedPayload",fields:{handoffId:{type:e.String_unsecure(),isOptional:!1},threadId:{type:e.String_unsecure(),isOptional:!1},fromOwner:{type:e.String_unsecure(),isOptional:!1},toOwner:{type:e.String_unsecure(),isOptional:!1}}})}),M=t({meta:n("communication.escalation.requested","Emitted when a thread is escalated for human attention",["escalation","requested"]),payload:a({name:"EscalationRequestedPayload",fields:{threadId:{type:e.String_unsecure(),isOptional:!1},reason:{type:e.String_unsecure(),isOptional:!1},targetOwner:{type:e.String_unsecure(),isOptional:!0}}})}),q=t({meta:n("communication.participant.linked","Emitted when a participant identity link is proposed or confirmed",["participant","identity"]),payload:a({name:"ParticipantLinkedPayload",fields:{participantId:{type:e.String_unsecure(),isOptional:!1},linkedParticipantId:{type:e.String_unsecure(),isOptional:!1},linkType:{type:e.String_unsecure(),isOptional:!1},confidence:{type:e.Float_unsecure(),isOptional:!0}}})});export{M as EscalationRequestedEvent,C as HandoffCreatedEvent,k as IntentClassifiedEvent,x as MessageNormalizedEvent,w as MessageReceivedEvent,q as ParticipantLinkedEvent,R as ReplyBlockedByPolicyEvent,P as ReplyDraftedEvent,T as ReplySentEvent,I as ThreadLinkedEvent,b as ThreadStatusChangedEvent};