@lssm/lib.companyos-spec 3.0.2

package/README.md

@@ -0,0 +1,308 @@
+# `@lssm/lib.companyos-spec`
+
+## VoiceOps governed-action scenario
+
+CompanyOS VoiceOps is represented as a governed-action scenario, not as a provider runtime. The canonical Voice-to-Product-Gap path starts from CommunicationOS voice/transcript evidence, redacts customer identifiers, proposes an internal product-gap work item, blocks the next-day customer promise, routes PM approval for internal work, and emits replay/receipt material with no production-write claim.
+
+This package owns the CompanyOS side of that story: action origin, authority explanation, policy verdict, approval gate, governed-action lifecycle, replay trace, and evidence receipt material. CommunicationOS owns the source thread/transcript evidence and proposed-action extraction. Provider STT/TTS adapters, live customer sends, CRM writes, and compliance claims stay outside the spec boundary.
+
+Canonical CompanyOS V0 contracts for ContractSpec.
+
+CompanyOS models company operations as explicit, inspectable, and bounded contracts:
+
+- company identity and operating model
+- authority, roles, principals, and accountable owners
+- autonomy policies and approval boundaries
+- company brain entries and knowledge gaps
+- decisions, commitments, and operating projections over canonical Work refs
+- provider-agnostic operating connector capabilities
+- operator inbox items and operating review summaries
+
+## Enterprise purpose and multi-company governance
+
+The additive V1 enterprise surface models a company mission and vision over the
+canonical LSSM OS goal, outcome, conflict, and harm-guardrail contracts. It also
+models holdings, legal entities, operating companies, joint ventures, brands,
+products, and workspaces without treating those categories as interchangeable.
+
+Enterprise portfolios make ownership and control, consolidation boundaries,
+shared-service mandates, capital and budget responsibility, residency and
+compliance scopes, cross-company grants, delegated business authority, goal
+cascades, conflicts, escalation, provenance, evidence, and redaction explicit.
+Semantic validation fails closed for cycles, dangling references, incompatible
+controlling interests, unauthorized cross-company grants, exceptions to
+non-waivable boundaries, and embedded secret material.
+
+CompanyOS records business intent and approval evidence; it does not authorize a
+technical effect. Every cross-company grant structurally declares that
+ContractSpec Connect authorization is still required.
+
+## Positioning
+
+Long-term governance/runtime layer behind proofs like CompanyOS VoiceOps.
+
+## V0 scope
+
+This package intentionally implements contracts only. It does not include runtime execution, real providers, UI, app shells, modules, or autonomous customer sends.
+
+## Work OS v2 boundary
+
+Canonical tasks, projects, goals, portfolios, views, collaboration metadata,
+external bindings, and sync conflicts belong exclusively to
+`@lssm/lib.work-spec`. CompanyOS no longer exports `CompanyWorkItem`,
+`CompanyWorkGraph`, or the `./types/work` subpath. Its operating loop carries a
+`CompanyOperatingWorkProjection` containing `WorkObjectRef` values alongside
+CompanyOS-owned feedback, commitments, and decisions.
+
+The V0 fixture proves one deterministic loop:
+
+```txt
+customer onboarding-confusion conversation
+-> product feedback item
+-> customer commitment
+-> company brain entry / knowledge gap
+-> CompanyOS decision/commitment + canonical Work object reference
+-> ContractSpec proposal reference
+-> agent action proposal
+-> autonomy policy decision
+-> operator inbox item
+-> operating review summary
+```
+
+## V1 operating loop
+
+The additive V1 surface extends the V0 loop with contract-only operating review primitives:
+
+- objectives, metrics, observations, outcomes, and drift signals
+- temporal company memory snapshots, facts, procedures, policies, and supersession refs
+- operating cadence specs, review input sets, and review output plans
+- bounded agent organization: roles, teams, delegation rules, handoff policies, conflict resolution policies, and tool assignments
+- agent-native operation/tool descriptors with dry-run and approval semantics
+- dynamic surface profiles for role, locale, risk, data-density, and guidance-mode descriptors
+- execution lifecycle, claim/lease, idempotency, policy-gate envelope, dispatch, receipt, checkpoint/replay, and outcome descriptors
+
+V1 remains provider-free and side-effect-free. It describes executable work semantics and evidence, but does not execute those operations.
+
+### Governed company metrics V1
+
+The additive `types/company-metrics` and `types/company-metrics-governance`
+subpaths define CompanyOS-owned metric definitions, typed aggregations and
+filters, source bindings, four comparison windows, discovery proposals,
+collection runs, alerts, digests, scoped shareholder grants, immutable
+snapshots/publications, and CommunicationOS delivery receipts. Legacy
+`CompanyMetricSchema` and `MetricObservationSchema` remain unchanged.
+
+## Operating graph / AI OS contracts
+
+The additive operating graph surface keeps Company Brain semantics inside CompanyOS without creating a separate package. It includes contract-only schemas for:
+
+- source systems and source record refs with evidence, freshness, ACL, and Knowledge fragment refs
+- graph nodes, edges, conflicts, tombstones, supersession, confidence, and review state
+- cross-source identity candidates and reviewed link decisions
+- actor/session/source ACL/policy permission requests, decisions, and redactions
+- data-transmission-compatible realtime room refs, idempotent change events, replay cursors
+- runbook procedures, readiness checks, and conformance cases that fail closed for stale, unauthorized, conflicted, or low-confidence evidence
+
+The package still does not ingest Knowledge, evaluate AuthOS/RBAC, open realtime transports, execute runbooks, or mutate providers. Those are substrate/runtime responsibilities.
+
+## Agentic Company Brain contract surfaces
+
+The V2 operating graph packet also carries additive agentic Company Brain contracts for compiled, versioned skill/runbook artifacts; source/identity/ACL readiness checks; conformance evidence; and correction/outcome receipts. These surfaces prove that a Company Brain procedure can become an agent-readable artifact only when source records, identity decisions, ACL decisions, freshness, runbook readiness, and conformance evidence are explicit. They remain references and receipts only: no runtime execution, provider SDK, credential material, source mutation, or production write is introduced here.
+
+## Canonical Company Intelligence records
+
+The additive `@lssm/lib.companyos-spec/types/company-intelligence`
+surface closes the canonical record vocabulary needed by production Company
+Intelligence without replacing existing CompanyOS owners. It covers source and
+immutable source-version lineage, raw assets, extracted parts and stable
+fragments, locator-backed evidence, claims, policies, entities, relations,
+conflicts, gaps, bounded graph snapshots, immutable editions, grounded queries,
+answers and verification, feedback/outcomes, experiments, independent
+evaluations, promotions, rollback, and replay.
+
+Every record carries tenant, accountable owner, recorded time, valid time,
+explicit record/evidence refs, `contractVersion: "1.0.0"`, and a
+`company-intelligence-sha256:v1` fingerprint over canonical JSON. Semantic
+validation adds stable `CI_*` codes for missing tenant/owner/time/evidence,
+invalid refs, unsupported answers, failed evaluation/promotion gates, rollback
+time, replay order, and fingerprint drift. Knowledge answers explicitly set
+`knowledgeAuthorizesAction: false`; policy, proposal, approval, execution, and
+outcome remain separate authority classes.
+
+Public subpaths are additive:
+
+- `@lssm/lib.companyos-spec/types/company-intelligence`
+- `@lssm/lib.companyos-spec/validation/company-intelligence`
+- `@lssm/lib.companyos-spec/fixtures/company-intelligence`
+- `@lssm/lib.companyos-spec/docs/company-intelligence.docblock`
+
+`COMPANY_INTELLIGENCE_COMPATIBILITY_MATRIX` is the machine-readable S1
+classification for every new export, operation, and event. All entries are
+`additive`; existing graph, edition, answer, learning, receipt, approval,
+execution, outcome, and replay identities remain unchanged. The package stays
+platform-neutral and contains no persistence, I/O, provider SDK, credential
+material, or execution path.
+
+The additive structured-extraction contract fixes candidate kinds to fact,
+entity, relation, policy, and procedure; requires exact evidence record IDs and
+stable locators; and defines trusted review decisions plus redacted versioned
+receipts. Candidates cannot carry authority, review thresholds, or approval.
+Policy remains `authorityClass: "policy"`; procedure remains an evidence-backed
+claim and never becomes policy through source text.
+
+### Governed learning lifecycle
+
+The existing learning record kinds now accept the optional
+`company-intelligence-governed-learning:v1` marker. Marked histories are
+append-only, sequence- and head-bound, and enforce all 25 stable promotion
+gates: G01–G23 before a deterministic canary receipt and G01–G25 before a
+promotion decision. Generator, evaluator, and approver identities must be
+independent; poisoned or quarantined feedback carries zero weight. Canary is
+evidence only, never live activation. Repository work items for code, public
+contracts, migrations, or deployment configuration are proposal-only and have
+no self-application path. Legacy S1 records remain valid and unchanged.
+
+## Company Intelligence Brain runtime contracts
+
+The existing Company Intelligence subpath now defines immutable Brain entry
+versions, review decisions, explicit gaps and remediation, and bounded compiled
+policy/procedure envelopes. Entries preserve exact source-version and evidence
+refs, bitemporal coordinates, owner and permission fields, review/conflict state,
+and versioned SHA-256 fingerprints. Compiled artifacts reuse
+`CompanyOsCompiledAgenticArtifact`, preserve normative content and approval
+boundaries, and assert that compilation neither authorizes nor executes action.
+
+## Managed CompanyOS contract inventory
+
+The additive managed CompanyOS surface classifies the public contracts and release anchors needed by managed app/API/worker lanes before those lanes depend on them: tenant profiles, managed/BYOK credential refs, workflow correlation, WebSocket job events, runtime health/degraded state, evidence receipts, package export, and docs-release evidence. The contracts remain provider-neutral, use redacted credential refs only, and fail closed when worker/WebSocket/replay/evidence degradation would otherwise be hidden behind green API health.
+
+## Foundation P1/P2 compatibility
+
+The additive Foundation surface exposes the tenant governance envelope and the
+storage-neutral temporal store contract without selecting persistence or a
+provider. Each surface publishes a canonical schema identity and pinned SHA-256
+fingerprint so packed consumers can detect drift before runtime composition.
+
+- `types/tenant-governance-envelope` keeps authority server-derived and binds
+  residency, retention, legal basis, idempotency, evidence, and replay refs to
+  tenant/workspace scope.
+- `fixtures/tenant-governance-envelope` provides current, legacy, and unknown
+  neutral fixtures; `validation/tenant-governance-envelope` accepts current
+  state, requires explicit legacy migration, and quarantines unknown shapes.
+- `types/temporal-store` declares append/query/erasure transaction semantics
+  over existing temporal assertions. Durable adapter selection remains outside
+  this package.
+
+## Design-partner readiness contracts
+
+`@lssm/lib.companyos-spec/types/design-partner-readiness` defines the additive Managed CompanyOS design-partner schemas:
+
+- mission command cycle;
+- decision packet;
+- expert attestation;
+- founder approval;
+- readiness state (`draft`, `degraded`, `blocked`, `ready_for_design_partner_review`);
+- by-reference evidence/replay links that reuse existing receipt and replay IDs.
+
+The companion fixture subpath `@lssm/lib.companyos-spec/fixtures/design-partner-readiness` is fictive only:
+
+| Field | Value |
+| --- | --- |
+| Tenant ID | `tenant_ndconsulting_design_partner_demo` |
+| Workspace ID | `workspace_ndconsulting_desliance_demo` |
+| Scenario ID | `scenario_atlantique_industrie_mission_retournement` |
+| Scenario title | `Atlantique Industrie — mission retournement` |
+
+The schemas enforce the safety boundary: expert attestation requires `expert_reviewer`, founder approval requires `founder_approver`, AI cannot dispatch reserved work, evidence/replay are referenced by ID only, and `noProductionReadinessClaim` / `noProviderDispatch` remain explicit assertions. The package still owns contracts only: no UI, DB, provider SDK, runtime execution, real customer data, or production writes.
+
+
+
+## Layer 0 action-packet contracts
+
+`@lssm/lib.companyos-spec/types/layer0-action-packet` and related Layer 0 subpaths define sponsor-neutral packet, routing-rule, adapter-contract, core, and unknown schemas. They are additive over existing CompanyOS authority, policy, evidence, and execution primitives; active routing rules require completed review before use.
+
+## Outcome value projection contracts
+
+`@lssm/lib.companyos-spec/types/outcome-value` defines CompanyOS-only business value contracts over ContractSpec outcome claim refs: `BusinessValueEvent`, `OperationalValueClaim`, `BusinessValueReport`, `SalesValueReport`, `ReviewQueue`, `AutonomyReadinessSignal`, and `PromptSkillInfluenceReport`. These contracts do not redefine the generic `OutcomeClaim` kernel. Business meaning stays in CompanyOS, while the source claim, evidence, review, correction, and attribution identity remains a portable ContractSpec claim ref. No evidence means no business value event.
+
+## Rich outcome ingestion contracts
+
+`@lssm/lib.companyos-spec/types/outcome-observation` normalizes provider-neutral reply, call, meeting, CRM activity, and deal outcome observations before they are projected into the existing ContractSpec `OutcomeClaim` kernel. Corrections are evidence-backed and append-only, supersession lineage is explicit, and attribution windows use half-open time intervals. Window membership remains correlation evidence, not causal proof. The companion fixture is deterministic, fictive, and performs no provider or CRM mutation.
+
+## Public entrypoints
+
+Grounded Company Intelligence answers are additive contracts under
+`@lssm/lib.companyos-spec/types/company-intelligence/grounding-result`, with
+semantic validation under `./validation/company-intelligence-grounding` and
+deterministic fictive fixtures under `./fixtures/company-intelligence/grounding-result`.
+The result is a strict answered/abstained/refused/conflicted/degraded union with
+server-minted citation support, replay fingerprints, bounded call receipts, and
+`knowledgeAuthorizesAction: false`. Existing Company Intelligence record,
+operation, event, status, and fingerprint identities are unchanged.
+
+- `@lssm/lib.companyos-spec` — root barrel
+- `@lssm/lib.companyos-spec/types` — schemas and inferred types
+- `@lssm/lib.companyos-spec/validation` — validation helpers
+- `@lssm/lib.companyos-spec/validation/company-intelligence-grounding` — strict grounded-answer scope, support, ledger, independence, call-cap, and fingerprint validation
+- `@lssm/lib.companyos-spec/fixtures` — deterministic V0 fixture
+- `@lssm/lib.companyos-spec/docs` — documentation-facing DocBlocks
+- `@lssm/lib.companyos-spec/types/tenant-governance-envelope` — tenant-scoped governance envelope and pinned schema identity
+- `@lssm/lib.companyos-spec/fixtures/tenant-governance-envelope` — neutral current/legacy/unknown governance fixtures
+- `@lssm/lib.companyos-spec/validation/tenant-governance-envelope` — fail-closed compatibility assessment
+- `@lssm/lib.companyos-spec/types/temporal-store` — storage-neutral temporal store transaction contract and pinned schema identity
+- `@lssm/lib.companyos-spec/types/company-intelligence/grounding-result` — additive grounded-answer result, citation, support, receipt, and bounds contracts
+- `@lssm/lib.companyos-spec/fixtures/company-intelligence/grounding-result` — deterministic fictive valid and invalid grounded-answer fixtures
+
+- `@lssm/lib.companyos-spec/types/operating-graph` — operating graph, identity, permission, realtime, and runbook schemas
+- `@lssm/lib.companyos-spec/fixtures/v2-operating-graph` — deterministic operating graph fixture
+- `@lssm/lib.companyos-spec/validation/semantic-operating-graph` — semantic validation for graph refs, fail-closed runbook readiness, compiled agentic artifacts, readiness checks, conformance evidence, and correction receipts
+- `@lssm/lib.companyos-spec/docs/companyos-operating-graph.docblock` — documentation-facing operating graph DocBlock
+
+- `@lssm/lib.companyos-spec/types/v1` — V1 operating loop schema/type
+- `@lssm/lib.companyos-spec/types/objectives` — objective and metric contracts
+- `@lssm/lib.companyos-spec/types/memory` — temporal memory contracts
+- `@lssm/lib.companyos-spec/types/cadence` — operating cadence contracts
+- `@lssm/lib.companyos-spec/types/agent-org` — bounded agent organization contracts
+- `@lssm/lib.companyos-spec/types/agent-interfaces` — agent-native operation descriptors
+- `@lssm/lib.companyos-spec/types/agentic-contracts` — compiled skill/runbook artifacts, agentic readiness, conformance evidence, and correction/outcome receipt contracts
+- `@lssm/lib.companyos-spec/types/dynamic-surfaces` — dynamic surface profile descriptors
+- `@lssm/lib.companyos-spec/types/execution` — execution lifecycle, policy-gate envelope, dispatch, receipt, and outcome descriptors
+- `@lssm/lib.companyos-spec/types/managed-companyos` — managed tenant, integration ownership, workflow correlation, WebSocket, health, evidence receipt, and public-surface inventory contracts
+- `@lssm/lib.companyos-spec/types/design-partner-readiness` — design-partner mission cycle, decision packet, expert attestation, founder approval, readiness state, and by-reference evidence/replay link contracts
+- `@lssm/lib.companyos-spec/types/layer0-action-packet` — sponsor-neutral Layer 0 action packet, policy gate, dispatch authorization, and export accountability contracts
+- `@lssm/lib.companyos-spec/types/layer0-adapter-contract` — sponsor-neutral Layer 0 adapter contract schemas for bounded external handoffs
+- `@lssm/lib.companyos-spec/types/layer0-core` — shared sponsor-neutral Layer 0 core contract primitives
+- `@lssm/lib.companyos-spec/types/layer0-routing-rule` — reviewed Layer 0 routing-rule contracts; active rules cannot still require review
+- `@lssm/lib.companyos-spec/types/layer0-unknown` — sponsor-neutral Layer 0 unknown-input classification contracts
+- `@lssm/lib.companyos-spec/fixtures/layer0-action-packet` — deterministic sponsor-neutral Layer 0 action packet fixture
+- `@lssm/lib.companyos-spec/types/outcome-value` — CompanyOS business value projection contracts over ContractSpec OutcomeClaim refs
+- `@lssm/lib.companyos-spec/types/outcome-observation` — normalized rich outcome observations, correction lineage, and half-open attribution windows
+- `@lssm/lib.companyos-spec/fixtures/rich-outcome-observations` — deterministic reply/deal correction and attribution fixture
+- `@lssm/lib.companyos-spec/types/temporal-assertion` — neutral bitemporal assertion envelopes with half-open valid-time intervals, known time, contradictions, and supersession lineage
+- `@lssm/lib.companyos-spec/fixtures/temporal-assertions` — deterministic neutral contradiction and supersession fixture
+- `@lssm/lib.companyos-spec/validation/temporal-assertion` — schema and reciprocal-lineage validation without persistence or destructive merge semantics
+- `@lssm/lib.companyos-spec/fixtures/v1-operating-loop` — deterministic V1 fixture
+- `@lssm/lib.companyos-spec/fixtures/v1-execution.parts` — deterministic execution/evidence fixture parts
+- `@lssm/lib.companyos-spec/validation/semantic-v1-execution` — semantic validation for execution refs and fail-closed invariants
+
+## Safety model
+
+Authority answers who may act and who is accountable. Autonomy answers how independently the action may proceed. They are related but not interchangeable.
+
+Customer-facing sends, legal/financial changes, and production-impacting work should default to approval-required or reserved-human-only until a future runtime explicitly proves stricter policy gates. V1 agent-native descriptors must require dry-run and approval semantics for execute-capable operations.
+
+Execution descriptors are evidence contracts, not runtime permission. A later CompanyOS module may coordinate agent, job, integration, human, dry-run, or manual-record lanes only after policy-gate evidence, idempotency, claim/lease, approval, and replay requirements are satisfied.
+
+Managed CompanyOS credential refs never carry raw secrets (`secretMaterialAvailable` is contractually false). Managed provider defaults, SDK wiring, procurement, and credential custody claims remain approval-gated outside this spec package.
+
+Dispatch authorization is modeled as an explicit substrate contract. `CompanyOsExecutionDispatchAuthorizationSchema` binds a dispatch lane to a policy-gate decision, accountable owner, approvals, and optional fail-closed `CompanyOsDispatchAuthorizationFailureSchema`. `CompanyOsSourceEvidenceRefSchema` records AIP, command-inbox, dry-run, operator, and outcome provenance with `authorizationAuthority: false`; source evidence can explain a request, but it cannot authorize dispatch. `CompanyOsPolicyReplayPacketSchema`, `CompanyOsReplayDeterminismCaseSchema`, `CompanyOsOperatorInboxRouteSchema`, and `CompanyOsOutcomeLinkageSchema` complete the deterministic replay, operator handoff, and outcome trace without introducing provider or module execution.
+
+## Policy Runtime Hardening
+
+This package now includes additive policy-runtime contracts under `@lssm/lib.companyos-spec/types/policy-runtime`, fixtures under `./fixtures/v1-policy-runtime`, and validation under `./validation/semantic-v1-policy-runtime`.
+
+These contracts extend existing CompanyOS policy gate request/decision semantics with authority, RBAC, risk, budget, tool-scope, dry-run, approval workflow, fallback, explanation, and assurance packet refs. They do not replace autonomy levels, authority graphs, execution plans, receipts, or outcome contracts.
+
+Published export maps include explicit browser conditions for the emitted browser
+artifacts, alongside the existing Node and Bun conditions. A browser bundler can
+select these without relying on the default server-runtime condition.

package/dist/browser/companyos-spec.feature.js

@@ -0,0 +1 @@
+import{defineFeature as o}from"@lssm/lib.contracts-spec/features";var t=o({meta:{key:"libs.companyos-spec",version:"0.1.0",title:"CompanyOS Spec",description:"Contract-first CompanyOS V0 contracts for bounded company operations.",domain:"companyos-spec",owners:["@contractspec-core"],tags:["package","libs","companyos","autonomy","authority"],stability:"experimental"}});export{t as CompanyOsSpecFeature};

package/dist/browser/docs/company-intelligence.docblock.js

@@ -0,0 +1 @@
+var e={packageName:"@lssm/lib.companyos-spec",title:"Canonical Company Intelligence Records",summary:"Additive tenant-scoped contracts for source lineage, evidence-backed knowledge, graph and editions, grounded answers, governed learning, promotion, rollback, and replay.",contractVersion:"1.0.0",fingerprintVersion:"company-intelligence-sha256:v1",recordKinds:["source","source_version","asset","part","fragment","evidence","claim","policy","entity","relation","conflict","gap","graph","edition","query","answer","verification","feedback","experiment","evaluation","promotion","rollback","replay"],guardrails:["Grounded answers expose stable typed statuses and reasons; unsafe states contain no claims, citations, or answer text.","Grounding citations are server-minted only after viewer redaction and must resolve to the retrieved citation ledger.","Every answered atomic claim has independently verified authorized support; one unsupported claim makes the result non-answered.","Company Brain editions contain only exact versioned record refs and an exact graph snapshot ref; current and bitemporal projections never rewrite history.","Brain reviews, gaps, remediation, and compiled artifacts are immutable evidence-backed records with accountable owner paths.","Compiled policy and procedure artifacts preserve normative content and boundaries, enforce explicit caps, and neither authorize nor execute actions.","Every record carries tenant, accountable owner, recorded time, valid time, refs, and a versioned SHA-256 fingerprint.","Extracted semantic records require canonical evidence records with stable source locators.","Truth, policy, proposal, approval, execution, and outcome remain distinct authority classes.","Knowledge never authorizes action; answered results require claims, authorized citations, and independent verification.","Promotion is limited to bounded artifacts and requires policy, approval, evaluation, rollback, and kill-switch refs.","Governed learning uses an append-only v1 marker, enforces G01-G23 before canary and G01-G25 before promotion, and preserves all legacy S1 payloads.","Generator, evaluator, and approver identities are independent; poisoned or quarantined feedback has zero learning weight.","Canary is a signed deterministic receipt only; code, contracts, migrations, and deployment work items cannot self-apply.","Contracts contain no persistence, I/O, provider SDK, credential material, or production execution.","Structured extraction candidates are schema constrained; trusted runtime code alone resolves authorized evidence and creates canonical records.","Extraction receipts are redacted, deterministic, versioned, and preserve correction lineage without source or provider content."]};export{e as CompanyIntelligenceDocBlock};

package/dist/browser/docs/companyos-enterprise.docblock.js

@@ -0,0 +1 @@
+var e={id:"companyos.enterprise-governance.v1",title:"CompanyOS enterprise purpose and governance",summary:"Additive contracts for mission-led, multi-company and holding governance.",compatibility:"additive",authorityBoundary:{companyOs:"Records business intent, ownership, delegation, shared-service mandates, and approval evidence.",connect:"Remains the fail-closed authority for every technical effect and exact execution plan."},invariants:["Legal entities, operating companies, brands, products, and workspaces remain distinct.","Ownership, control, consolidation, and joint-venture semantics are explicit.","Cross-company access requires a matching, delegable business authority and Connect policy reference.","Non-waivable residency and compliance boundaries cannot receive exceptions.","Mission and goal cascades reuse canonical LSSM OS goals, metrics, conflicts, and guardrails.","Secrets are references only and are rejected from portfolio material."]};export{e as companyOsEnterpriseDocBlock};

package/dist/browser/docs/companyos-operating-graph.docblock.js

@@ -0,0 +1 @@
+var e={packageName:"@lssm/lib.companyos-spec",title:"CompanyOS Operating Graph Contracts",summary:"Additive CompanyOS-owned graph, identity, permission, realtime, and runbook contracts for knowledge-backed AI OS use cases without provider execution.",guardrails:["CompanyOS owns operating semantics; Knowledge/data-transmission/AuthOS/RBAC remain substrates.","Every graph node, identity decision, permission projection, realtime event, and runbook readiness decision carries evidence refs.","Contracts are side-effect-free and contain no credentials, network calls, paid provider calls, or production writes.","Runbooks fail closed when stale, conflicted, unauthorized, or missing evidence.","Compiled skills require fresh source, identity, ACL, readiness, conformance, and correction/outcome receipt refs before agentic use."]};export{e as CompanyOsOperatingGraphDocBlock};

package/dist/browser/docs/companyos-v0.docblock.js

@@ -0,0 +1 @@
+var o={id:"companyos-v0-spec",title:"CompanyOS V0 Spec",packageName:"@lssm/lib.companyos-spec",summary:"Defines CompanyOS authority, autonomy, evidence, brain, connector, inbox, review, and operating projections over canonical Work refs.",sections:[{title:"V0 story",body:"A customer conversation becomes structured feedback, a customer commitment, a canonical Work object reference, a safe agent proposal, an operator inbox approval, and an operating review summary."},{title:"Safety boundary",body:"CompanyOS distinguishes authority from autonomy. Customer-facing actions require explicit approval metadata and an accountable owner."}]};export{o as CompanyOsV0DocBlock};

package/dist/browser/docs/companyos-v1-operating-loop.docblock.js

@@ -0,0 +1 @@
+var e={title:"CompanyOS V1 Operating Loop",description:"Additive CompanyOS contracts for objective-aware, time-scoped, cadence-driven, bounded-agent operating reviews.",sections:[{title:"Scope",body:"V1 deepens the deterministic CompanyOS loop with objectives, metrics, temporal memory, operating cadence, agent organization, agent-native descriptors, and dynamic surface profiles."},{title:"Safety",body:"The V1 surface is contract-only. It does not execute provider writes, customer sends, finance/legal actions, MCP tools, modules, apps, bundles, or UI rendering."}]};export{e as CompanyOsV1OperatingLoopDocBlock};

package/dist/browser/docs/index.js

@@ -0,0 +1 @@
+var e={packageName:"@lssm/lib.companyos-spec",title:"Canonical Company Intelligence Records",summary:"Additive tenant-scoped contracts for source lineage, evidence-backed knowledge, graph and editions, grounded answers, governed learning, promotion, rollback, and replay.",contractVersion:"1.0.0",fingerprintVersion:"company-intelligence-sha256:v1",recordKinds:["source","source_version","asset","part","fragment","evidence","claim","policy","entity","relation","conflict","gap","graph","edition","query","answer","verification","feedback","experiment","evaluation","promotion","rollback","replay"],guardrails:["Grounded answers expose stable typed statuses and reasons; unsafe states contain no claims, citations, or answer text.","Grounding citations are server-minted only after viewer redaction and must resolve to the retrieved citation ledger.","Every answered atomic claim has independently verified authorized support; one unsupported claim makes the result non-answered.","Company Brain editions contain only exact versioned record refs and an exact graph snapshot ref; current and bitemporal projections never rewrite history.","Brain reviews, gaps, remediation, and compiled artifacts are immutable evidence-backed records with accountable owner paths.","Compiled policy and procedure artifacts preserve normative content and boundaries, enforce explicit caps, and neither authorize nor execute actions.","Every record carries tenant, accountable owner, recorded time, valid time, refs, and a versioned SHA-256 fingerprint.","Extracted semantic records require canonical evidence records with stable source locators.","Truth, policy, proposal, approval, execution, and outcome remain distinct authority classes.","Knowledge never authorizes action; answered results require claims, authorized citations, and independent verification.","Promotion is limited to bounded artifacts and requires policy, approval, evaluation, rollback, and kill-switch refs.","Governed learning uses an append-only v1 marker, enforces G01-G23 before canary and G01-G25 before promotion, and preserves all legacy S1 payloads.","Generator, evaluator, and approver identities are independent; poisoned or quarantined feedback has zero learning weight.","Canary is a signed deterministic receipt only; code, contracts, migrations, and deployment work items cannot self-apply.","Contracts contain no persistence, I/O, provider SDK, credential material, or production execution.","Structured extraction candidates are schema constrained; trusted runtime code alone resolves authorized evidence and creates canonical records.","Extraction receipts are redacted, deterministic, versioned, and preserve correction lineage without source or provider content."]};var o={id:"companyos.enterprise-governance.v1",title:"CompanyOS enterprise purpose and governance",summary:"Additive contracts for mission-led, multi-company and holding governance.",compatibility:"additive",authorityBoundary:{companyOs:"Records business intent, ownership, delegation, shared-service mandates, and approval evidence.",connect:"Remains the fail-closed authority for every technical effect and exact execution plan."},invariants:["Legal entities, operating companies, brands, products, and workspaces remain distinct.","Ownership, control, consolidation, and joint-venture semantics are explicit.","Cross-company access requires a matching, delegable business authority and Connect policy reference.","Non-waivable residency and compliance boundaries cannot receive exceptions.","Mission and goal cascades reuse canonical LSSM OS goals, metrics, conflicts, and guardrails.","Secrets are references only and are rejected from portfolio material."]};var r={packageName:"@lssm/lib.companyos-spec",title:"CompanyOS Operating Graph Contracts",summary:"Additive CompanyOS-owned graph, identity, permission, realtime, and runbook contracts for knowledge-backed AI OS use cases without provider execution.",guardrails:["CompanyOS owns operating semantics; Knowledge/data-transmission/AuthOS/RBAC remain substrates.","Every graph node, identity decision, permission projection, realtime event, and runbook readiness decision carries evidence refs.","Contracts are side-effect-free and contain no credentials, network calls, paid provider calls, or production writes.","Runbooks fail closed when stale, conflicted, unauthorized, or missing evidence.","Compiled skills require fresh source, identity, ACL, readiness, conformance, and correction/outcome receipt refs before agentic use."]};var i={id:"companyos-v0-spec",title:"CompanyOS V0 Spec",packageName:"@lssm/lib.companyos-spec",summary:"Defines CompanyOS authority, autonomy, evidence, brain, connector, inbox, review, and operating projections over canonical Work refs.",sections:[{title:"V0 story",body:"A customer conversation becomes structured feedback, a customer commitment, a canonical Work object reference, a safe agent proposal, an operator inbox approval, and an operating review summary."},{title:"Safety boundary",body:"CompanyOS distinguishes authority from autonomy. Customer-facing actions require explicit approval metadata and an accountable owner."}]};var c={title:"CompanyOS V1 Operating Loop",description:"Additive CompanyOS contracts for objective-aware, time-scoped, cadence-driven, bounded-agent operating reviews.",sections:[{title:"Scope",body:"V1 deepens the deterministic CompanyOS loop with objectives, metrics, temporal memory, operating cadence, agent organization, agent-native descriptors, and dynamic surface profiles."},{title:"Safety",body:"The V1 surface is contract-only. It does not execute provider writes, customer sends, finance/legal actions, MCP tools, modules, apps, bundles, or UI rendering."}]};export{e as CompanyIntelligenceDocBlock,r as CompanyOsOperatingGraphDocBlock,i as CompanyOsV0DocBlock,c as CompanyOsV1OperatingLoopDocBlock,o as companyOsEnterpriseDocBlock};

package/dist/browser/fixtures/company-brain-edition.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{z as n}from"zod";var E=n.record(n.string(),n.unknown()),l=n.object({id:n.string().min(1),connectorCapability:n.string().min(1),providerKey:n.string().min(1).optional(),externalId:n.string().min(1).optional(),url:n.string().url().optional(),observedAt:n.string().min(1),metadata:E.default({})}),z=n.object({default:n.string().min(1),translations:n.record(n.string(),n.string()).default({})}),o=n.object({id:n.string().min(1),type:n.string().min(1),label:n.string().min(1).optional()});var p=e.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/),s=e.string().regex(/^sha256:[a-f0-9]{64}$/),a=e.object({recordRef:e.string().min(1),version:p,schemaRef:e.string().min(1),contentFingerprint:s}).strict().readonly(),x=e.object({id:e.string().min(1),version:p,contentFingerprint:s,schemaFingerprint:s}).strict().readonly(),C=e.object({namespace:e.string().regex(/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/),schemaRef:e.string().min(1),recordRef:e.string().min(1),version:p,contentFingerprint:s}).strict().readonly(),b=e.object({targetSchemaRef:e.string().min(1),independentConsumerRefs:e.array(o.strict()).min(2).refine((t)=>new Set(t.map((i)=>`${i.type}:${i.id}`)).size>=2,"two distinct vertical consumers are required"),migrationDecisionRef:o.strict()}).strict().readonly(),B=e.object({extensionRef:C,namespaceOwnerRef:o.strict(),schemaFingerprint:s,compatibilityIntent:e.enum(["additive","backward_compatible","breaking"]),evidenceRequirementRefs:e.array(o.strict()).min(1).readonly(),allowedRefTypes:e.array(e.string().min(1)).min(1).readonly(),sourcePolicyRef:o.strict(),legalReviewRef:o.strict(),lifecycleStatus:e.enum(["active","deprecated","promoted"]),deprecationDecisionRef:o.strict().optional(),replacementNamespace:e.string().min(1).optional(),promotion:b.optional(),collisionPolicy:e.literal("reject_incompatible_namespace_or_schema_reuse")}).strict().superRefine((t,i)=>{if(t.lifecycleStatus==="deprecated"&&!t.deprecationDecisionRef)i.addIssue({code:"custom",path:["deprecationDecisionRef"],message:"deprecated extensions require a decision ref"});if(t.lifecycleStatus==="promoted"&&!t.promotion)i.addIssue({code:"custom",path:["promotion"],message:"promoted extensions require approved migration evidence"})}),k=e.array(B).readonly().superRefine((t,i)=>{let r=new Set,m=new Map;for(let[u,d]of t.entries()){let{namespace:y,schemaRef:f}=d.extensionRef;if(r.has(y))i.addIssue({code:"custom",path:[u,"extensionRef","namespace"],message:`namespace collision: ${y}`});r.add(y);let h=m.get(f);if(h&&h!==d.schemaFingerprint)i.addIssue({code:"custom",path:[u,"schemaFingerprint"],message:`incompatible schema reuse: ${f}`});m.set(f,d.schemaFingerprint)}}),v=e.object({identityContextRefs:e.array(a).readonly().default([]),knowledgeAssertionRefs:e.array(a).readonly().default([]),procedureRefs:e.array(a).readonly().default([]),policyRefs:e.array(a).readonly().default([]),hypothesisRefs:e.array(a).readonly().default([]),decisionRefs:e.array(a).readonly().default([]),evidenceRefs:e.array(a).readonly().default([])}).strict().readonly(),c=e.object({id:e.string().min(1),version:p,recordedAt:e.iso.datetime({offset:!0}),effectiveFrom:e.iso.datetime({offset:!0}).optional(),parentEditionRef:x.optional(),baseEditionRef:x.optional(),contentFingerprint:s,schemaFingerprint:s,sections:v,graphSnapshotRef:a.optional(),evidenceReceiptRefs:e.array(e.string().min(1)).readonly().default([]),replayRef:e.string().min(1).optional(),reviewDecisionRef:e.string().min(1).optional(),extensionRefs:e.array(C).readonly().default([])}).strict().readonly(),I=e.object({id:e.string().min(1),title:e.string().min(1),kind:e.enum(["knowledge","procedure","policy","skill_candidate"]),summary:e.string().min(1),ownerPrincipalId:e.string().min(1),trustLevel:e.enum(["low","medium","high"]),freshness:e.enum(["fresh","stale","unknown"]),sourceRefs:e.array(l).min(1)}),_=e.object({id:e.string().min(1),summary:e.string().min(1),severity:e.enum(["low","medium","high"]),relatedSourceRefs:e.array(l).default([]),ownerPrincipalId:e.string().min(1)}),M=e.object({id:e.string().min(1),entries:e.array(I).default([]),gaps:e.array(_).default([])});import{canonicalJsonString as w}from"@lssm/lib.contracts-spec/rich-reference/canonical-serializer";var S="sha256:bb2a951fffcc56c7bf9ea85e91d69d0f8c8f701e65f1fafbbdffec41233e709a",A={schemaId:"companyos.company-brain-edition",version:"1.0.0",compatibility:"additive",contentModel:"immutable-ref-only",sectionKeys:["identityContextRefs","knowledgeAssertionRefs","procedureRefs","policyRefs","hypothesisRefs","decisionRefs","evidenceRefs"]},N={schemaId:"companyos.company-brain-extension-registry",version:"1.0.0",stability:"provisional",compatibility:"additive",contentModel:"governed-namespaced-extension-records",lifecycleStates:["proposed","active","deprecated","promoted"],collisionPolicy:"reject-incompatible-namespace-or-schema-reuse",promotionRequirement:"two-independent-real-vertical-consumers"},H="sha256:a51b0b5431be87b31b5d56f0e91f6eb1fe97192266df868a5c3bae58eee70fa2";function V(t){let i=c.safeParse(t);if(i.success)return{ok:!0,issues:[]};return{ok:!1,issues:i.error.issues.map((r)=>`${r.path.length>0?r.path.join("."):"root"}: ${r.message}`)}}function q(t){return c.parse(t)}async function L(t){return R(t)}async function Z(){return R(A)}async function K(){return R(N)}async function R(t){let i=new TextEncoder().encode(w(t)),r=await crypto.subtle.digest("SHA-256",i);return`sha256:${F(new Uint8Array(r))}`}function F(t){return Array.from(t,(i)=>i.toString(16).padStart(2,"0")).join("")}var g="sha256:43acddbfedab78a40d1016500814724ed9168064af2bd89069ec476caa15d8ce",Q=c.parse({id:"company-brain-edition:example",version:"1.0.0",recordedAt:"2026-07-12T00:00:00.000Z",effectiveFrom:"2026-07-12T00:00:00.000Z",contentFingerprint:"sha256:a7730f417a939e7a56fca41180403725cb116de2be34206ba48d7d7ec5b5257e",schemaFingerprint:S,sections:{knowledgeAssertionRefs:[{recordRef:"company-brain-entry:context-001",version:"1.0.0",schemaRef:"companyos.company-brain-entry@1",contentFingerprint:g}],procedureRefs:[{recordRef:"company-brain-entry:procedure-001",version:"1.0.0",schemaRef:"companyos.company-brain-entry@1",contentFingerprint:g}]},evidenceReceiptRefs:["evidence:context-001"],replayRef:"harness:replay:context-001",reviewDecisionRef:"decision:context-review-001",extensionRefs:[{namespace:"example.context",schemaRef:"example.context@1",recordRef:"example-context:001",version:"1.0.0",contentFingerprint:g}]});export{Q as companyBrainEditionNeutralFixture};

package/dist/browser/fixtures/company-intelligence/base.js

@@ -0,0 +1 @@
+var E="tenant_company_intelligence",I="2026-07-18T10:00:00.000+00:00",i="sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa";function o(a,n,e=[],t=[]){return{contractVersion:"1.0.0",id:a,tenantId:"tenant_company_intelligence",ownerRef:{id:"principal_ci_owner",type:"principal"},authorityClass:n,recordedAt:"2026-07-18T10:00:00.000+00:00",validTime:{from:"2026-07-18T10:00:00.000+00:00"},recordRefIds:e,evidenceRefIds:t}}export{i as COMPANY_INTELLIGENCE_FIXTURE_HASH,E as COMPANY_INTELLIGENCE_FIXTURE_TENANT,I as COMPANY_INTELLIGENCE_FIXTURE_TIME,o as companyIntelligenceFixtureBase};

package/dist/browser/fixtures/company-intelligence/grounding-result.js

@@ -0,0 +1 @@
+var t=`sha256:${"a".repeat(64)}`;var r=`cit_sha256:${"b".repeat(64)}`,n=`clm_sha256:${"c".repeat(64)}`,o={tenantId:"tenant_company_intelligence_fixture",workspaceId:"workspace_company_intelligence_fixture",actorRef:"actor_fixture",viewerRef:"viewer_fixture",capabilityRefs:["knowledge.read"],authorizationDecisionRef:"authorization_fixture_allow"},a={schemaVersion:"company-intelligence-grounded-answer:v1",scope:o,status:"answered",reasonCodes:["supported"],text:"Customer-facing dispatch requires approval.",claims:[{claimId:n,statement:"Customer-facing dispatch requires approval."}],citations:[{citationId:r,evidenceRefId:"evidence_policy_approval",tenantId:"tenant_company_intelligence_fixture",workspaceId:"workspace_company_intelligence_fixture",viewerRef:"viewer_fixture",locator:{section:"Approval"},excerpt:"Approval is required before customer-facing dispatch.",sourceContentFingerprint:t,viewerProjectionFingerprint:t,redactionDecisionRef:"redaction_fixture",fusedScoreMicros:16393}],claimSupport:[{claimId:n,citationIds:[r],verdict:"supported",confidence:1}],conflictRefIds:[],receipt:{drafterIdentity:{providerRef:"fixture-drafter",modelRef:"deterministic-v1",promptOrRuleVersion:"prompt-v1",independenceDomain:"draft",provenance:"fixture"},verifierIdentity:{providerRef:"fixture-verifier",modelRef:"rules-v1",promptOrRuleVersion:"rule-v1",independenceDomain:"verify",provenance:"fixture"},retrievedCitationLedger:[r],callCounts:{retrieval:1,draft:1,verify:1},repairCount:0,warnings:[],fingerprints:{request:t,retrieval:t,draft:t,validation:t,verification:t,output:"sha256:7f19f505b9d695ff601a093ec2c8bdf3c28c8e0b792048ed6552b10d9faa5e52",replay:"sha256:93972216f610fe358bfe354f68b43c9dbbb06750e337ea1e34b4cb24ed9219a3"}},metadata:{schemaVersion:"company-intelligence-grounded-answer:v1",codeVersionRef:"fixture-code-v1",retrievalConfigRef:"fixture-retrieval-v1",recordedAt:"2026-07-18T00:00:00.000+00:00",modelVisibleEvidenceBytes:53,supportThreshold:0.9},bounds:{questionBytes:35,filterEntries:0,channelCount:1,perChannelTopK:16,mergedEvidenceRecords:8,excerptBytesPerEvidence:2048,totalModelEvidenceBytes:16384,maxClaims:8,maxClaimStatementBytes:512,maxCitationsPerClaim:4,maxDraftAttempts:2,maxVerificationAttempts:2,maxRetrievalCalls:3,runDeadlineMs:8000},knowledgeAuthorizesAction:!1};function c(){return structuredClone(a)}function s(){let e=c();return{unsupported:{...e,claimSupport:e.claimSupport.map((i)=>({...i,citationIds:[`cit_sha256:${"e".repeat(64)}`]}))},scopeMismatch:{...e,scope:{...e.scope,workspaceId:"workspace_wrong"}},fingerprintMismatch:{...e,receipt:{...e.receipt,fingerprints:{...e.receipt.fingerprints,replay:`sha256:${"d".repeat(64)}`}}}}}export{r as COMPANY_INTELLIGENCE_GROUNDING_FIXTURE_CITATION,n as COMPANY_INTELLIGENCE_GROUNDING_FIXTURE_CLAIM,t as COMPANY_INTELLIGENCE_GROUNDING_FIXTURE_HASH,o as COMPANY_INTELLIGENCE_GROUNDING_SCOPE_FIXTURE,a as companyIntelligenceGroundedAnswerFixture,c as createCompanyIntelligenceGroundedAnswerFixture,s as createCompanyIntelligenceInvalidGroundingFixtures};

package/dist/browser/fixtures/company-intelligence/grounding.js

@@ -0,0 +1 @@
+var s="tenant_company_intelligence",i="2026-07-18T10:00:00.000+00:00",t="sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa";function a(r,n,o=[],c=[]){return{contractVersion:"1.0.0",id:r,tenantId:"tenant_company_intelligence",ownerRef:{id:"principal_ci_owner",type:"principal"},authorityClass:n,recordedAt:"2026-07-18T10:00:00.000+00:00",validTime:{from:"2026-07-18T10:00:00.000+00:00"},recordRefIds:o,evidenceRefIds:c}}var e=["evidence_policy_approval"],_=[{...a("query_customer_dispatch","proposal",["edition_company_brain_v1"]),kind:"query",payload:{actorRef:"principal_ci_reader",questionDigest:t,authorizationDecisionRef:"acl-decision-allow-internal",retrievalConfigRef:"retrieval-config-v1",requestedAt:i,maxEvidenceRecords:8,filters:{locale:"en"}}},{...a("verification_customer_dispatch","truth",["claim_approval_required",...e],e),kind:"verification",payload:{answerRefId:"answer_customer_dispatch",verdict:"supported",claimSupport:[{claimRefId:"claim_approval_required",evidenceRefIds:e,verdict:"supported",confidence:1}],deterministicRefsValidated:!0,independentVerifierRef:"verifier-independent-v1",verifiedAt:i}},{...a("answer_customer_dispatch","truth",["query_customer_dispatch","claim_approval_required","verification_customer_dispatch","replay_customer_dispatch",...e],e),kind:"answer",payload:{queryRefId:"query_customer_dispatch",status:"answered",text:"Customer-facing provider dispatch requires accountable approval.",claimRefIds:["claim_approval_required"],citationEvidenceRefIds:e,conflictRefIds:[],retrievalRunRef:"retrieval-run-customer-dispatch",verificationRefId:"verification_customer_dispatch",policyDecisionRef:"policy-decision-knowledge-only",graphSnapshotRefId:"graph_company_intelligence_v1",editionRefId:"edition_company_brain_v1",replayRefId:"replay_customer_dispatch",reasons:[],usage:{modelRef:"deterministic-model-fixture",promptFingerprint:t,latencyMs:12,costMicros:0},knowledgeAuthorizesAction:!1}}];export{_ as companyIntelligenceGroundingDrafts};