@lssm/lib.companyos-spec 3.0.2

package/dist/browser/validation/semantic-operating-graph.js

@@ -0,0 +1,27 @@
+import{z as Ie}from"zod";import{z as te}from"zod";var v=te.record(te.string(),te.unknown()),w=te.object({id:te.string().min(1),connectorCapability:te.string().min(1),providerKey:te.string().min(1).optional(),externalId:te.string().min(1).optional(),url:te.string().url().optional(),observedAt:te.string().min(1),metadata:v.default({})}),bn=te.object({default:te.string().min(1),translations:te.record(te.string(),te.string()).default({})}),C=te.object({id:te.string().min(1),type:te.string().min(1),label:te.string().min(1).optional()});var Cs={id:"companyos-spec.action-origin",title:"CompanyOS Action Origin",summary:"Discriminated origin schema for actions entering the CompanyOS operating graph.",body:`# CompanyOS Action Origin
+
+Captures the channel and actor context from which an action entered the CompanyOS operating graph.
+
+## Origin kinds
+
+- \`messaging\` — Action arrived via a messaging channel (e.g. Slack, email thread).
+- \`voice\` — Action arrived via a voice conversation routed through a connector capability.
+- \`agent\` — Action was autonomously proposed or executed by an AI agent principal.
+- \`operator\` — Action was directly initiated by a human operator.
+- \`system\` — Action was emitted by an internal system or scheduled process.
+
+> Note: \`meeting\` is a transcript medium, not an actor class. Meeting-sourced actions
+> are routed via the \`voice\` origin kind through the appropriate connector capability.
+
+## Temporal invariant
+
+\`capturedAt\` must be >= \`sourceRef.observedAt\`. The capture timestamp records when
+the operating graph ingested the action; the observation timestamp records when the
+source connector observed the raw event.
+
+## transcriptRef
+
+An opaque reference to an upstream transcript artifact. Only the \`id\` and \`source\`
+kind are embedded here — no transcript-turn shape is inlined. Consumers that need
+full transcript content must resolve via the appropriate connector surface.
+`,kind:"reference",visibility:"public",route:"/docs/companyos-spec/action-origin",tags:["companyos","origin","voice","messaging","agent"],domain:"companyos-spec",stability:"experimental"},Xi=Ie.enum(["messaging","voice","agent","operator","system"]),Ji=Ie.object({id:Ie.string().min(1),source:Ie.enum(["voice","meeting","fixture"])}),Rs=Ie.object({kind:Xi,actorPrincipalId:Ie.string().min(1),sessionId:Ie.string().min(1).optional(),transcriptRef:Ji.optional(),sourceRef:w,capturedAt:Ie.string().min(1),metadata:v.default({})}).refine((n)=>new Date(n.capturedAt)>=new Date(n.sourceRef.observedAt),{message:"capturedAt must be >= sourceRef.observedAt: the operating graph cannot capture an action before the connector observed it",path:["capturedAt"]});import{z as ie}from"zod";import{z as Te}from"zod";var le=Te.enum(["observe_only","draft_only","recommend","execute_with_approval","execute_within_limits","fully_autonomous_bounded","reserved_human_only"]),Xn=Te.enum(["human","agent","service","external_party"]),Jn=Te.enum(["communication","work_tracking","code_repository","knowledge_source","document_store","crm","analytics","identity","calendar","meeting_recorder","support_desk","messaging_channel"]),xs=Te.enum(["proposed","accepted","in_progress","blocked","done","cancelled"]),et=Te.enum(["approval_required","customer_commitment","risky_reply","blocked_work","contract_proposal","operating_review_item"]);var eo=ie.object({required:ie.boolean().default(!0),previewArtifactKind:ie.string().min(1),approvalRequiredForExecute:ie.boolean().default(!0)}),nt=ie.object({id:ie.string().min(1),name:ie.string().min(1),mode:ie.enum(["read","draft","dry_run","execute"]),agentRoleId:ie.string().min(1),authorityCapability:ie.string().min(1),autonomyCeiling:le,accountableOwnerPrincipalId:ie.string().min(1),dryRunPolicy:eo,deniedActionExplanation:ie.string().min(1)}),tt=ie.object({id:ie.string().min(1),operationId:ie.string().min(1),displayName:ie.string().min(1),inputContractRef:ie.string().min(1),outputContractRef:ie.string().min(1),requiresAuthorityCheck:ie.boolean().default(!0)});import{z as _}from"zod";var it=_.object({id:_.string().min(1),toolRef:C,connectorCapabilityId:_.string().min(1).optional(),maxAutonomyLevel:le,requiresDryRun:_.boolean().default(!0)}),ot=_.object({id:_.string().min(1),title:_.string().min(1),principalId:_.string().min(1),accountableOwnerPrincipalId:_.string().min(1),authorityScope:_.string().min(1),maxAutonomyLevel:le,toolAssignmentIds:_.array(_.string().min(1)).default([]),escalationPrincipalIds:_.array(_.string().min(1)).min(1)}),at=_.object({id:_.string().min(1),name:_.string().min(1),managerRoleId:_.string().min(1),roleIds:_.array(_.string().min(1)).min(1),purpose:_.string().min(1)}),rt=_.object({id:_.string().min(1),fromRoleId:_.string().min(1),toRoleId:_.string().min(1),allowedWorkKinds:_.array(_.string().min(1)).min(1),maxAutonomyLevel:le,requiresHandoffSummary:_.boolean().default(!0),escalationPrincipalId:_.string().min(1)}),st=_.object({id:_.string().min(1),delegationRuleId:_.string().min(1),requiredContextRefTypes:_.array(_.string().min(1)).default([]),approvalRequiredAboveAutonomy:le}),ct=_.object({id:_.string().min(1),teamId:_.string().min(1),resolverPrincipalId:_.string().min(1),escalationPrincipalIds:_.array(_.string().min(1)).min(1),summary:_.string().min(1)});import{z as f}from"zod";import{z as d}from"zod";import{z as E}from"zod";var Qe=E.object({id:E.string().min(1),substrate:E.enum(["knowledge","data_transmission","authos","rbac"]),ref:E.string().min(1),evidenceRefIds:E.array(E.string().min(1)).default([]),metadata:v.default({})}),no=Qe.extend({substrate:E.literal("knowledge"),spaceKey:E.string().min(1).optional(),fragmentId:E.string().min(1),sourceRef:w.optional(),queryEvidenceRef:E.string().min(1).optional()}),qe=Qe.extend({substrate:E.literal("data_transmission"),protocolVersion:E.literal("data-transmission.v0"),roomId:E.string().min(1),cursor:E.string().min(1).optional(),idempotencyKey:E.string().min(1).optional()}),Xe=Qe.extend({substrate:E.literal("authos"),actorId:E.string().min(1),sessionRef:E.string().min(1).optional(),tenantId:E.string().min(1).optional()}),Je=Qe.extend({substrate:E.literal("rbac"),decisionId:E.string().min(1),verdict:E.enum(["allow","deny","redacted","redact","requires_review"]),permissionIds:E.array(E.string().min(1)).default([]),redactedFieldRefs:E.array(E.string().min(1)).default([])}),mt=E.discriminatedUnion("substrate",[no,qe,Xe,Je]),zs=E.object({actorRef:Xe,rbacDecisionRef:Je,resourceRef:E.string().min(1),sourceAclRefIds:E.array(E.string().min(1)).default([]),policyRefIds:E.array(E.string().min(1)).default([]),evidenceRefIds:E.array(E.string().min(1)).default([])}),Ls=E.object({roomRef:qe,changeRef:E.string().min(1),sequence:E.number().int().nonnegative(),idempotencyKey:E.string().min(1),replayRef:E.string().min(1)});var to=d.object({id:d.string().min(1),kind:d.enum(["knowledge","communication","issue_tracker","code_host","documentation","customer_system","incident_system","manual_record"]),label:d.string().min(1),connectorCapability:d.string().min(1),freshnessSla:d.enum(["manual","hourly","daily","near_realtime"]),metadata:v.default({})}),On=d.object({id:d.string().min(1),sourceSystemId:d.string().min(1),externalId:d.string().min(1),recordType:d.string().min(1),sourceHash:d.string().min(1),observedAt:d.string().min(1),provenance:d.array(w).min(1),substrateRefs:d.array(mt).default([]),evidenceRefIds:d.array(d.string().min(1)).min(1),metadata:v.default({})}),kn=d.enum(["person","team","customer","project","repository","ticket","meeting","document","incident","decision","commitment","procedure","runbook","objective","work_item","knowledge_fragment"]),Be=d.object({status:d.enum(["fresh","stale","unknown"]),observedAt:d.string().min(1),expiresAt:d.string().min(1).optional(),evidenceRefIds:d.array(d.string().min(1)).min(1)}),io=d.object({reason:d.enum(["deleted_source","superseded","privacy_request","merged"]),tombstonedAt:d.string().min(1),supersededByNodeId:d.string().min(1).optional(),evidenceRefIds:d.array(d.string().min(1)).min(1)}),_n=d.object({id:d.string().min(1),kind:kn,label:d.string().min(1),sourceRecordRefIds:d.array(d.string().min(1)).min(1),evidenceRefIds:d.array(d.string().min(1)).min(1),sourceAclRefIds:d.array(d.string().min(1)).default([]),policyRefIds:d.array(d.string().min(1)).default([]),confidence:d.number().min(0).max(1),reviewState:d.enum(["unreviewed","review_required","reviewed","rejected"]),freshness:Be,tombstone:io.optional(),conflictRefIds:d.array(d.string().min(1)).default([]),metadata:v.default({})}),An=d.object({id:d.string().min(1),kind:d.enum(["owns","member_of","relates_to","blocks","depends_on","documents","decides","commits_to","implements","escalates_to","runbook_for","evidence_for"]),fromNodeId:d.string().min(1),toNodeId:d.string().min(1),sourceRecordRefIds:d.array(d.string().min(1)).min(1),evidenceRefIds:d.array(d.string().min(1)).min(1),confidence:d.number().min(0).max(1),reviewState:d.enum(["unreviewed","review_required","reviewed","rejected"]),metadata:v.default({})}),oo=d.object({id:d.string().min(1),subjectNodeId:d.string().min(1),conflictingNodeIds:d.array(d.string().min(1)).default([]),conflictingRecordRefIds:d.array(d.string().min(1)).min(1),status:d.enum(["review_required","resolved","accepted_conflict"]),summary:d.string().min(1),evidenceRefIds:d.array(d.string().min(1)).min(1)}),pt=d.object({id:d.string().min(1),generatedAt:d.string().min(1),snapshotHash:d.string().min(1),sourceSystems:d.array(to).min(1),sourceRecords:d.array(On).min(1),nodes:d.array(_n).min(1),edges:d.array(An).default([]),conflicts:d.array(oo).default([]),replayCursorRef:d.string().min(1).optional(),evidenceRefIds:d.array(d.string().min(1)).min(1),metadata:v.default({})});var ao=f.enum(["skill_file","runbook_pack","agent_prompt","conformance_pack"]),ro=f.enum(["ready","blocked","review_required","stale","unauthorized","identity_unresolved","acl_redacted","conflicted"]),so=f.enum(["pass","fail","not_run","blocked"]),co=f.enum(["proposed","accepted","rejected","superseded","applied_to_contract"]),en=f.object({id:f.string().min(1),artifactKind:ao,version:f.string().min(1),artifactRef:C,runbookProcedureId:f.string().min(1),sourceRecordRefIds:f.array(f.string().min(1)).min(1),identityDecisionIds:f.array(f.string().min(1)).default([]),accessDecisionIds:f.array(f.string().min(1)).min(1),compiledFromBrainEntryIds:f.array(f.string().min(1)).default([]),compilerPrincipalId:f.string().min(1),compiledAt:f.string().min(1),freshness:Be,evidenceRefIds:f.array(f.string().min(1)).min(1),sourceRefs:f.array(w).default([]),noProviderBinding:f.literal(!0).default(!0),metadata:v.default({})}).strict(),dt=f.object({id:f.string().min(1),compiledArtifactId:f.string().min(1),runbookReadinessId:f.string().min(1),status:ro,evaluatedAt:f.string().min(1),sourceRecordRefIds:f.array(f.string().min(1)).min(1),identityDecisionIds:f.array(f.string().min(1)).default([]),accessDecisionIds:f.array(f.string().min(1)).min(1),blockedReasons:f.array(f.string().min(1)).default([]),evidenceRefIds:f.array(f.string().min(1)).min(1),metadata:v.default({})}).superRefine((n,o)=>{if(n.status!=="ready"&&n.blockedReasons.length===0)o.addIssue({code:f.ZodIssueCode.custom,message:"Non-ready agentic readiness checks require blocked reasons.",path:["blockedReasons"]});if(n.status==="ready"&&n.blockedReasons.length>0)o.addIssue({code:f.ZodIssueCode.custom,message:"Ready agentic readiness checks must not carry blocked reasons.",path:["blockedReasons"]})}),lt=f.object({id:f.string().min(1),compiledArtifactId:f.string().min(1),readinessCheckId:f.string().min(1),runbookConformanceCaseId:f.string().min(1),status:so,assertion:f.string().min(1),checkedAt:f.string().min(1),failureReason:f.string().min(1).optional(),replayRefIds:f.array(f.string().min(1)).default([]),executionReceiptIds:f.array(f.string().min(1)).default([]),evidenceRefIds:f.array(f.string().min(1)).min(1),noRuntimeExecution:f.literal(!0).default(!0),metadata:v.default({})}).superRefine((n,o)=>{if(["fail","blocked"].includes(n.status)&&!n.failureReason)o.addIssue({code:f.ZodIssueCode.custom,message:"Failing or blocked agentic conformance evidence requires a failure reason.",path:["failureReason"]})}),yt=f.object({id:f.string().min(1),compiledArtifactId:f.string().min(1),conformanceEvidenceId:f.string().min(1),correctionKind:f.enum(["source_correction","identity_correction","acl_correction","runbook_correction","outcome_correction"]),status:co,summary:f.string().min(1),outcomeReceiptId:f.string().min(1),observedAt:f.string().min(1),sourceEvidenceRefIds:f.array(f.string().min(1)).min(1),evidenceRefIds:f.array(f.string().min(1)).min(1),noProviderMutation:f.literal(!0).default(!0),metadata:v.default({})}).strict();import{z as oe}from"zod";var mo=oe.object({id:oe.string().min(1),kind:Xn,displayName:oe.string().min(1),accountableOwnerPrincipalId:oe.string().min(1).optional()}),po=oe.object({id:oe.string().min(1),principalId:oe.string().min(1),capability:oe.string().min(1),scope:oe.string().min(1),requiresApprovalAboveRisk:oe.enum(["low","medium","high"]).default("medium")}),ut=oe.object({id:oe.string().min(1),accountableOwnerPrincipalId:oe.string().min(1),principals:oe.array(mo).min(1),grants:oe.array(po).default([]),escalationPrincipalIds:oe.array(oe.string().min(1)).default([]),reservedPowerPrincipalIds:oe.array(oe.string().min(1)).default([])});import{z as Y}from"zod";var ft=Y.object({id:Y.string().min(1),defaultLevel:le.default("draft_only"),maxCustomerFacingLevel:le.default("execute_with_approval"),reservedHumanOnlyOperations:Y.array(Y.string().min(1)).default([]),approvalRequiredOperations:Y.array(Y.string().min(1)).default([]),emergencyStopPrincipalIds:Y.array(Y.string().min(1)).min(1)}),nn=Y.object({id:Y.string().min(1),operation:Y.string().min(1),proposedLevel:le,approvedLevel:le,customerFacing:Y.boolean().default(!1),requiredApprovalIds:Y.array(Y.string().min(1)).default([]),accountableOwnerPrincipalId:Y.string().min(1),sourceRefs:Y.array(w).default([]),reasoning:Y.string().min(1)}),gt=Y.object({id:Y.string().min(1),agentPrincipalId:Y.string().min(1),operation:Y.string().min(1),targetType:Y.string().min(1),targetRefId:Y.string().min(1),draftOnly:Y.boolean().default(!0),autonomyDecisionId:Y.string().min(1)});import{z as h}from"zod";var on=h.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/),_e=h.string().regex(/^sha256:[a-f0-9]{64}$/),Ce=h.object({recordRef:h.string().min(1),version:on,schemaRef:h.string().min(1),contentFingerprint:_e}).strict().readonly(),tn=h.object({id:h.string().min(1),version:on,contentFingerprint:_e,schemaFingerprint:_e}).strict().readonly(),ht=h.object({namespace:h.string().regex(/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/),schemaRef:h.string().min(1),recordRef:h.string().min(1),version:on,contentFingerprint:_e}).strict().readonly(),lo=h.object({targetSchemaRef:h.string().min(1),independentConsumerRefs:h.array(C.strict()).min(2).refine((n)=>new Set(n.map((o)=>`${o.type}:${o.id}`)).size>=2,"two distinct vertical consumers are required"),migrationDecisionRef:C.strict()}).strict().readonly(),yo=h.object({extensionRef:ht,namespaceOwnerRef:C.strict(),schemaFingerprint:_e,compatibilityIntent:h.enum(["additive","backward_compatible","breaking"]),evidenceRequirementRefs:h.array(C.strict()).min(1).readonly(),allowedRefTypes:h.array(h.string().min(1)).min(1).readonly(),sourcePolicyRef:C.strict(),legalReviewRef:C.strict(),lifecycleStatus:h.enum(["active","deprecated","promoted"]),deprecationDecisionRef:C.strict().optional(),replacementNamespace:h.string().min(1).optional(),promotion:lo.optional(),collisionPolicy:h.literal("reject_incompatible_namespace_or_schema_reuse")}).strict().superRefine((n,o)=>{if(n.lifecycleStatus==="deprecated"&&!n.deprecationDecisionRef)o.addIssue({code:"custom",path:["deprecationDecisionRef"],message:"deprecated extensions require a decision ref"});if(n.lifecycleStatus==="promoted"&&!n.promotion)o.addIssue({code:"custom",path:["promotion"],message:"promoted extensions require approved migration evidence"})}),Js=h.array(yo).readonly().superRefine((n,o)=>{let T=new Set,pe=new Map;for(let[se,re]of n.entries()){let{namespace:Ve,schemaRef:Me}=re.extensionRef;if(T.has(Ve))o.addIssue({code:"custom",path:[se,"extensionRef","namespace"],message:`namespace collision: ${Ve}`});T.add(Ve);let Ye=pe.get(Me);if(Ye&&Ye!==re.schemaFingerprint)o.addIssue({code:"custom",path:[se,"schemaFingerprint"],message:`incompatible schema reuse: ${Me}`});pe.set(Me,re.schemaFingerprint)}}),uo=h.object({identityContextRefs:h.array(Ce).readonly().default([]),knowledgeAssertionRefs:h.array(Ce).readonly().default([]),procedureRefs:h.array(Ce).readonly().default([]),policyRefs:h.array(Ce).readonly().default([]),hypothesisRefs:h.array(Ce).readonly().default([]),decisionRefs:h.array(Ce).readonly().default([]),evidenceRefs:h.array(Ce).readonly().default([])}).strict().readonly(),ec=h.object({id:h.string().min(1),version:on,recordedAt:h.iso.datetime({offset:!0}),effectiveFrom:h.iso.datetime({offset:!0}).optional(),parentEditionRef:tn.optional(),baseEditionRef:tn.optional(),contentFingerprint:_e,schemaFingerprint:_e,sections:uo,graphSnapshotRef:Ce.optional(),evidenceReceiptRefs:h.array(h.string().min(1)).readonly().default([]),replayRef:h.string().min(1).optional(),reviewDecisionRef:h.string().min(1).optional(),extensionRefs:h.array(ht).readonly().default([])}).strict().readonly(),En=h.object({id:h.string().min(1),title:h.string().min(1),kind:h.enum(["knowledge","procedure","policy","skill_candidate"]),summary:h.string().min(1),ownerPrincipalId:h.string().min(1),trustLevel:h.enum(["low","medium","high"]),freshness:h.enum(["fresh","stale","unknown"]),sourceRefs:h.array(w).min(1)}),fo=h.object({id:h.string().min(1),summary:h.string().min(1),severity:h.enum(["low","medium","high"]),relatedSourceRefs:h.array(w).default([]),ownerPrincipalId:h.string().min(1)}),Ct=h.object({id:h.string().min(1),entries:h.array(En).default([]),gaps:h.array(fo).default([])});import{z as A}from"zod";var Rt=A.object({id:A.string().min(1),name:A.string().min(1),cadence:A.enum(["daily","weekly","monthly","quarterly"]),ownerPrincipalId:A.string().min(1),participantPrincipalIds:A.array(A.string().min(1)).default([]),requiredInputKinds:A.array(A.enum(["feedback","commitments","work","objectives","memory"])).min(1),outputKinds:A.array(A.enum(["decision","work_item","inbox_item","review_summary"])).min(1),escalationPrincipalIds:A.array(A.string().min(1)).default([])}),St=A.object({id:A.string().min(1),cadenceId:A.string().min(1),capturedAt:A.string().min(1),feedbackItemIds:A.array(A.string().min(1)).default([]),commitmentIds:A.array(A.string().min(1)).default([]),workItemIds:A.array(A.string().min(1)).default([]),objectiveIds:A.array(A.string().min(1)).default([]),memorySnapshotIds:A.array(A.string().min(1)).default([])}),It=A.object({id:A.string().min(1),cadenceId:A.string().min(1),generatedAt:A.string().min(1),decisionIds:A.array(A.string().min(1)).default([]),workItemIds:A.array(A.string().min(1)).default([]),actionProposalIds:A.array(A.string().min(1)).default([]),inboxItemIds:A.array(A.string().min(1)).default([]),health:A.enum(["healthy","watch","at_risk"]),summary:A.string().min(1)});import{z as J}from"zod";var go=J.object({key:J.string().min(1),legalName:J.string().min(1),displayName:bn,description:bn.optional(),localeDefaults:J.array(J.string().min(2)).default(["en"])}),ho=J.object({id:J.string().min(1),name:J.string().min(1),domain:J.string().min(1),ownerPrincipalId:J.string().min(1)}),xt=J.object({key:J.string().min(1),version:J.string().min(1),identity:go,operatingModel:J.object({description:J.string().min(1),primaryDomains:J.array(J.string().min(1)).min(1)}),units:J.array(ho).default([]),authorityRef:C,autonomyPolicyRef:C,brainRef:C,workGraphRef:C,connectorRefs:J.array(C).default([]),operatorSurfaceRefs:J.array(C).default([])});import{z as Ee}from"zod";import{z as B}from"zod";var wn="1.0.0",Co="company-intelligence-sha256:v1",Ro="canonical-json:v1",mc=B.enum(["truth","policy","proposal","approval","execution","outcome"]),pc=B.enum(["source","source_version","asset","part","fragment","evidence","claim","policy","entity","relation","conflict","gap","graph","edition","query","answer","verification","feedback","experiment","evaluation","promotion","rollback","replay"]),l=B.string().regex(/^sha256:[a-f0-9]{64}$/),So=B.object({version:B.literal(Co),canonicalization:B.literal(Ro),value:l}).strict(),Pn=B.object({from:B.iso.datetime({offset:!0}),to:B.iso.datetime({offset:!0}).optional()}).strict(),Io=B.object({reason:B.enum(["source_deleted","acl_revoked","superseded","retention_expired","privacy_request"]),tombstonedAt:B.iso.datetime({offset:!0})}).strict(),xe=B.object({page:B.number().int().positive().optional(),section:B.string().min(1).optional(),lineStart:B.number().int().positive().optional(),lineEnd:B.number().int().positive().optional(),cell:B.string().min(1).optional(),messageId:B.string().min(1).optional(),timeStartMs:B.number().int().nonnegative().optional(),timeEndMs:B.number().int().nonnegative().optional()}).strict().refine((n)=>Object.values(n).some((o)=>o!==void 0),{message:"At least one stable evidence locator is required."}),vt=B.array(B.string().min(1)).refine((n)=>new Set(n).size===n.length,{message:"Reference ids must be unique."}),K=B.object({contractVersion:B.literal(wn),id:B.string().min(1),tenantId:B.string().min(1),ownerRef:C.strict(),recordedAt:B.iso.datetime({offset:!0}),validTime:Pn,recordRefIds:vt.default([]),evidenceRefIds:vt.default([]),supersedesRefId:B.string().min(1).optional(),tombstone:Io.optional(),fingerprint:So}).strict();import{z as x}from"zod";var jn=x.enum(["answered","abstained","refused","conflicted","degraded"]),zn=K.extend({kind:x.literal("query"),authorityClass:x.literal("proposal"),payload:x.object({actorRef:x.string().min(1),questionDigest:x.string().regex(/^sha256:[a-f0-9]{64}$/),authorizationDecisionRef:x.string().min(1),retrievalConfigRef:x.string().min(1),requestedAt:x.iso.datetime({offset:!0}),maxEvidenceRecords:x.number().int().positive(),filters:x.record(x.string(),x.string()).default({})}).strict()}).strict(),Ln=K.extend({kind:x.literal("answer"),authorityClass:x.literal("truth"),payload:x.object({queryRefId:x.string().min(1),status:jn,text:x.string().min(1).optional(),claimRefIds:x.array(x.string().min(1)).default([]),citationEvidenceRefIds:x.array(x.string().min(1)).default([]),conflictRefIds:x.array(x.string().min(1)).default([]),retrievalRunRef:x.string().min(1),verificationRefId:x.string().min(1).optional(),policyDecisionRef:x.string().min(1).optional(),graphSnapshotRefId:x.string().min(1).optional(),editionRefId:x.string().min(1).optional(),replayRefId:x.string().min(1),reasons:x.array(x.string().min(1)).default([]),usage:x.object({modelRef:x.string().min(1),promptFingerprint:x.string().regex(/^sha256:[a-f0-9]{64}$/),latencyMs:x.number().int().nonnegative(),costMicros:x.number().int().nonnegative()}).strict(),knowledgeAuthorizesAction:x.literal(!1)}).strict()}).strict(),Dn=K.extend({kind:x.literal("verification"),authorityClass:x.literal("truth"),payload:x.object({answerRefId:x.string().min(1),verdict:x.enum(["supported","unsupported","blocked"]),claimSupport:x.array(x.object({claimRefId:x.string().min(1),evidenceRefIds:x.array(x.string().min(1)).min(1),verdict:x.enum(["supported","unsupported"]),confidence:x.number().min(0).max(1)}).strict()).default([]),deterministicRefsValidated:x.boolean(),independentVerifierRef:x.string().min(1),verifiedAt:x.iso.datetime({offset:!0})}).strict()}).strict(),bt=[zn,Ln,Dn];import{z as y}from"zod";var an=y.enum(["unreviewed","review_required","approved","rejected","superseded"]),xo=K.extend({kind:y.literal("claim"),authorityClass:y.literal("truth"),payload:y.object({claimType:y.enum(["fact","procedure","decision","hypothesis","commitment","objective","risk","skill_candidate"]),statement:y.string().min(1),confidence:y.number().min(0).max(1),reviewState:an,freshness:y.enum(["fresh","stale","unknown"])}).strict()}).strict(),vo=K.extend({kind:y.literal("policy"),authorityClass:y.literal("policy"),payload:y.object({normativeStatement:y.string().min(1),scopeRefIds:y.array(y.string().min(1)).min(1),approvalRequired:y.boolean(),exceptionRefIds:y.array(y.string().min(1)).default([]),reviewState:an}).strict()}).strict(),bo=K.extend({kind:y.literal("entity"),authorityClass:y.literal("truth"),payload:y.object({entityType:y.string().min(1),label:y.string().min(1),resolutionState:y.enum(["candidate","canonical","rejected","merged"]),stableIdentifierDigests:y.array(l).default([]),confidence:y.number().min(0).max(1),reviewState:an}).strict()}).strict(),Oo=K.extend({kind:y.literal("relation"),authorityClass:y.literal("truth"),payload:y.object({fromEntityRefId:y.string().min(1),toEntityRefId:y.string().min(1),predicate:y.string().min(1),confidence:y.number().min(0).max(1),reviewState:an}).strict()}).strict(),ko=K.extend({kind:y.literal("conflict"),authorityClass:y.literal("truth"),payload:y.object({subjectRefId:y.string().min(1),competingRecordRefIds:y.array(y.string().min(1)).min(2),status:y.enum(["review_required","resolved","accepted_conflict"]),summary:y.string().min(1)}).strict()}).strict(),_o=K.extend({kind:y.literal("gap"),authorityClass:y.literal("truth"),payload:y.object({question:y.string().min(1),reason:y.enum(["missing_evidence","conflict","stale","ownerless","unauthorized"]),severity:y.enum(["low","medium","high","critical"]),remediationRefId:y.string().min(1).optional(),state:y.enum(["open","in_review","resolved","accepted_unknown"])}).strict()}).strict(),Ao=K.extend({kind:y.literal("graph"),authorityClass:y.literal("truth"),payload:y.object({nodeRefIds:y.array(y.string().min(1)).min(1),edgeRefIds:y.array(y.string().min(1)).default([]),conflictRefIds:y.array(y.string().min(1)).default([]),snapshotAt:y.iso.datetime({offset:!0}),bounds:y.object({maxDepth:y.number().int().positive(),maxNodes:y.number().int().positive(),maxEdges:y.number().int().positive(),timeoutMs:y.number().int().positive()}).strict()}).strict()}).strict(),Eo=K.extend({kind:y.literal("edition"),authorityClass:y.literal("truth"),payload:y.object({version:y.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/),recordRefIds:y.array(y.string().min(1)).min(1),graphSnapshotRefId:y.string().min(1),reviewDecisionRef:y.string().min(1),parentEditionRefId:y.string().min(1).optional(),schemaFingerprint:l}).strict()}).strict(),Gn=[xo,vo,bo,Oo,ko,_o,Ao,Eo];import{z as c}from"zod";import{z as p}from"zod";import{z as ue}from"zod";var wo="company-intelligence-governed-learning:v1",Po=Object.freeze({maxTransitions:64,maxMonitoringComparisons:8,maxPacketClosureRecords:128,maxRecordRefs:64,maxEvidenceRefs:64,maxMetrics:16,maxGuardrails:16,maxReasonCodes:16,minSampleObservations:1000,maxSampleObservations:1e4,maxSerializedBytes:65536,defaultDecisionDeadlineMs:1000,maxDecisionDeadlineMs:5000,maxAppendDeadlineMs:5000,maxGateAgeMs:86400000,maxApprovalValidityMs:86400000,maxReviewIntervalMs:2592000000,maxPromotionExpiryMs:7776000000}),jo=ue.enum(["signal_captured","consent_redaction_recorded","classified","baseline_objective_recorded","candidate_proposed","risk_policy_decided","offline_evaluated","holdout_evaluated","adversarial_evaluated","shadow_evaluated","approval_recorded","canary_started","comparison_recorded","promotion_decided","rollback_executed","outcome_recorded","review_due","expired","replay_verified"]),Ot=ue.enum(["signal_pending","feedback_accepted","classified","candidate_pending","evaluating","shadow","awaiting_approval","canary","promoted","rejected","rolled_back","outcome_recorded","review_due","expired","replay_exact","replay_drifted","blocked"]),zo=["G01","G02","G03","G04","G05","G06","G07","G08","G09","G10","G11","G12","G13","G14","G15","G16","G17","G18","G19","G20","G21","G22","G23","G24","G25"],kt=ue.enum(zo),Lo=["CI_LEARNING_BASELINE_REQUIRED","CI_LEARNING_BASELINE_NOT_IMMUTABLE","CI_LEARNING_OBJECTIVE_REQUIRED","CI_LEARNING_CANDIDATE_REQUIRED","CI_LEARNING_CANDIDATE_VERSION_REQUIRED","CI_LEARNING_CANDIDATE_FINGERPRINT_MISMATCH","CI_LEARNING_METRICS_REQUIRED","CI_LEARNING_GUARDRAILS_REQUIRED","CI_LEARNING_SAMPLE_NOT_REPRESENTATIVE","CI_LEARNING_TESTS_FAILED","CI_LEARNING_SAFETY_FAILED","CI_LEARNING_PRIVACY_FAILED","CI_LEARNING_COST_FAILED","CI_LEARNING_OFFLINE_REQUIRED","CI_LEARNING_HOLDOUT_REQUIRED","CI_LEARNING_ADVERSARIAL_REQUIRED","CI_LEARNING_EVALUATOR_NOT_INDEPENDENT","CI_LEARNING_POLICY_DENIED","CI_LEARNING_APPROVAL_REQUIRED","CI_LEARNING_APPROVER_NOT_INDEPENDENT","CI_LEARNING_ROLLBACK_PLAN_REQUIRED","CI_LEARNING_KILL_SWITCH_REQUIRED","CI_LEARNING_SHADOW_REQUIRED","CI_LEARNING_CANARY_REQUIRED","CI_LEARNING_COMPARISON_FAILED"],Do=[...Lo,"CI_LEARNING_SIGNAL_ACCEPTED","CI_LEARNING_FEEDBACK_POISONED","CI_LEARNING_CONSENT_REQUIRED","CI_LEARNING_REDACTION_REQUIRED","CI_LEARNING_AUTHORITY_REQUIRED","CI_LEARNING_CLASSIFICATION_REQUIRED","CI_LEARNING_SIGNAL_DUPLICATE","CI_LEARNING_SIGNAL_ORIGIN_INVALID","CI_LEARNING_SELF_APPLY_FORBIDDEN","CI_LEARNING_RUNTIME_ARTIFACT_NOT_BOUNDED","CI_LEARNING_VENDOR_EXPORT_DENIED","CI_LEARNING_VENDOR_LEARNING_DENIED","CI_LEARNING_EGRESS_EVIDENCE_REQUIRED","CI_LEARNING_CANARY_GATES_INCOMPLETE","CI_LEARNING_CANARY_REGRESSION","CI_LEARNING_ROLLBACK_REPRODUCTION_FAILED","CI_LEARNING_OUTCOME_REQUIRED","CI_LEARNING_REVIEW_DUE","CI_LEARNING_EXPIRED","CI_LEARNING_REPLAY_EXACT","CI_LEARNING_REPLAY_DRIFT"],Nn=ue.enum(Do),Go=ue.array(Nn).max(Po.maxReasonCodes).refine((n)=>n.every((o,T)=>T===0||n[T-1]<o),"Reason codes must be sorted and unique."),ve=ue.object({version:ue.literal(wo),lifecycleId:ue.string().min(1),sequence:ue.number().int().min(0).max(63),event:jo,stateBefore:Ot.nullable(),stateAfter:Ot,previousTransitionRecordRefId:ue.string().min(1).optional(),previousStateFingerprint:l.optional(),inputFingerprint:l,stateFingerprint:l,reasonCodes:Go,occurredAt:ue.iso.datetime({offset:!0})}).strict();import{z as Q}from"zod";var rn=Q.object({receiptRef:Q.string().min(1),status:Q.literal("allow"),fingerprint:l,decidedAt:Q.iso.datetime({offset:!0}),signerRef:Q.string().min(1)}),_t=Q.object({consentReceiptRef:Q.string().min(1),redactionReceiptRef:Q.string().min(1),authorityReceiptRef:Q.string().min(1),originIntegrityReceiptRef:Q.string().min(1)}).strict(),At=Q.object({signalFingerprint:l,originRefId:Q.string().min(1),consentReceipt:rn.extend({purpose:Q.literal("governed_learning"),scopeRefId:Q.string().min(1),signalFingerprint:l}).strict(),redactionReceipt:rn.extend({targetRefId:Q.string().min(1)}).strict(),authorityReceipt:rn.extend({tenantId:Q.string().min(1),objectiveRefId:Q.string().min(1),actorRef:Q.string().min(1)}).strict(),originIntegrityReceipt:rn.extend({originRefId:Q.string().min(1),classification:Q.literal("verified_first_party"),signalFingerprint:l}).strict(),duplicate:Q.literal(!1)}).strict();var sn=p.object({artifactRef:p.string().min(1),semanticVersion:p.string().regex(/^\d+\.\d+\.\d+$/),fingerprint:l}).strict(),Et=p.object({id:p.string().min(1),metric:p.string().min(1),direction:p.enum(["increase","decrease"]),threshold:p.number(),ownerRef:p.string().min(1)}).strict(),Fe=p.object({receiptRef:p.string().min(1),status:p.enum(["allow","deny","missing","failed","blocked","expired"]),fingerprint:l,decidedAt:p.iso.datetime({offset:!0}),signerRef:p.string().min(1)}).strict(),wt=p.object({suiteVersion:p.string().min(1),status:p.literal("allow"),fingerprint:l,decidedAt:p.iso.datetime({offset:!0}),signerRef:p.string().min(1)}).strict(),Pt=p.object({baselineNormalizedCost:p.number().positive(),candidateNormalizedCost:p.number().positive(),ratio:p.number().positive().max(1.2),tenantBudgetAllowed:p.literal(!0),fingerprint:l}).strict().superRefine((n,o)=>{let T=n.candidateNormalizedCost/n.baselineNormalizedCost;if(Math.abs(T-n.ratio)>Number.EPSILON)o.addIssue({code:"custom",path:["ratio"],message:"Cost ratio must match candidate divided by baseline."})}),jt=p.object({expectedBaselineFingerprint:l,observedRestoredFingerprint:l,status:p.literal("allow"),fingerprint:l}).strict().superRefine((n,o)=>{if(n.expectedBaselineFingerprint!==n.observedRestoredFingerprint)o.addIssue({code:"custom",path:["observedRestoredFingerprint"],message:"Rollback test must reproduce the exact baseline."})}),Vn=p.object({principalRef:p.string().min(1),implementationFingerprint:l,modelFingerprint:l,signerRef:p.string().min(1)}).strict(),zt=p.object({datasetVersion:p.string().min(1),seed:p.number().int(),selectionMethod:p.string().min(1),observationCount:p.number().int().min(1000).max(1e4),strataCounts:p.record(p.string(),p.number().int().nonnegative()),languageCounts:p.record(p.string(),p.number().int().nonnegative()),fingerprint:l}).strict(),Mn=p.object({metricRef:p.string().min(1),baseline:p.number(),candidate:p.number(),lowerConfidenceBound:p.number().optional(),passed:p.boolean()}).strict(),Tn=p.object({guardrailRef:p.string().min(1),observed:p.number(),threshold:p.number(),operator:p.enum(["eq","lte","gte"]),passed:p.boolean(),hard:p.literal(!0)}).strict(),Lt=p.object({headFingerprint:l,gates:p.array(p.object({id:kt,status:p.enum(["passed","missing","failed","blocked","expired"]),reasonCode:Nn,receiptFingerprint:l.optional()}).strict()).max(25)}).strict(),Dt=p.discriminatedUnion("type",[p.object({type:p.literal("runtime_artifact"),artifactKind:p.enum(["prompt","provider_route","retrieval_configuration","ranking_rule","extraction_rule","entity_resolution_rule","memory_rule","compiled_skill","runbook_artifact","runtime_policy"]),artifact:sn,activation:p.literal("governed_runtime_activation"),selfApply:p.literal(!1)}).strict(),p.object({type:p.literal("repository_work_item"),changeKind:p.enum(["code","public_contract","migration","deployment_configuration"]),workItemRef:p.string().min(1),fingerprint:l,promotable:p.literal(!1),selfApply:p.literal(!1)}).strict()]),Gt=p.object({vendorExportRequested:p.boolean(),vendorLearningRequested:p.boolean(),vendorExportAllowed:p.boolean().default(!1),vendorLearningAllowed:p.boolean().default(!1),receiptFingerprints:p.array(l).max(5),binding:p.object({signalFingerprint:l,sampleFingerprint:l,artifactFingerprint:l}).strict().optional()}).strict().superRefine((n,o)=>{if(!n.vendorExportAllowed&&!n.vendorLearningAllowed)return;if(!n.binding||n.receiptFingerprints.length!==5||new Set(n.receiptFingerprints).size!==5)o.addIssue({code:"custom",message:"Allowed vendor eligibility requires five unique bound receipts."})}),Nt=p.object({baselineFingerprint:l,candidateFingerprint:l,sampleFingerprint:l,metrics:p.array(Mn).min(1).max(16),guardrails:p.array(Tn).min(1).max(16),costRatio:p.number().positive(),latencyRatio:p.number().positive(),passed:p.boolean(),fingerprint:l}).strict(),Vt=p.object({expectedBaselineFingerprint:l,observedActiveFingerprint:l,restoredArtifactRef:p.string().min(1),reproductionReceiptFingerprint:l}).strict();var Mt=c.enum(["prompt","provider_route","retrieval_configuration","ranking_rule","extraction_rule","entity_resolution_rule","memory_rule","compiled_skill","runbook_artifact","runtime_policy"]),Vo=c.object({answerRefId:c.string().min(1),actorRef:c.string().min(1),feedbackType:c.enum(["correction","outcome","retrieval_failure","drift"]),consentDecisionRef:c.string().min(1),redactionDecisionRef:c.string().min(1),correctionRefId:c.string().min(1).optional(),outcomeRefId:c.string().min(1).optional(),status:c.enum(["accepted","rejected","quarantined"]),governedLearning:ve.optional(),dispositionEvidence:At.optional()}).strict(),Mo=c.object({feedbackType:c.literal("signal"),signalRefId:c.string().min(1),originRefId:c.string().min(1),actorRef:c.string().min(1),signalFingerprint:l,objectiveRefId:c.string().min(1),consentScopeRefId:c.string().min(1),originClassification:c.literal("verified_first_party"),dispositionRefs:_t,status:c.enum(["quarantined","rejected"]),governedLearning:ve}).strict(),To=K.extend({kind:c.literal("feedback"),authorityClass:c.literal("outcome"),payload:c.union([Vo,Mo])}).strict(),qo=K.extend({kind:c.literal("experiment"),authorityClass:c.literal("proposal"),payload:c.object({baselineRefId:c.string().min(1),candidateArtifactRef:c.string().min(1),candidateKind:Mt,objective:c.string().min(1),policyDecisionRef:c.string().min(1),metricRefIds:c.array(c.string().min(1)).min(1),guardrailRefIds:c.array(c.string().min(1)).min(1),holdoutDatasetRef:c.string().min(1),adversarialDatasetRef:c.string().min(1),governedLearning:ve.optional(),baseline:sn.optional(),candidate:Dt.optional(),objectiveDefinition:Et.optional(),riskDecision:Fe.optional(),egressDecision:Gt.optional(),reviewDueAt:c.iso.datetime({offset:!0}).optional(),expiresAt:c.iso.datetime({offset:!0}).optional(),state:c.enum(["proposed","offline_evaluation","shadow","canary","completed","rejected"])}).strict()}).strict(),Bo=K.extend({kind:c.literal("evaluation"),authorityClass:c.literal("truth"),payload:c.object({experimentRefId:c.string().min(1),candidateArtifactRef:c.string().min(1),evaluatorRef:c.string().min(1),independent:c.literal(!0),datasetRef:c.string().min(1),metricResults:c.record(c.string(),c.number()),safetyPassed:c.boolean(),privacyPassed:c.boolean(),costPassed:c.boolean(),verdict:c.enum(["pass","fail","blocked"]),evaluatedAt:c.iso.datetime({offset:!0}),governedLearning:ve.optional(),phase:c.enum(["offline","holdout","adversarial","shadow","canary_compare","post_promotion"]).optional(),sampleReceipt:zt.optional(),typedMetrics:c.array(Mn).max(16).optional(),typedGuardrails:c.array(Tn).max(16).optional(),generatorIdentity:Vn.optional(),evaluatorIdentity:Vn.optional(),independenceReceipt:Fe.optional(),testsReceipt:wt.optional(),costEvidence:Pt.optional()}).strict()}).strict(),Fo=K.extend({kind:c.literal("promotion"),authorityClass:c.literal("approval"),payload:c.object({experimentRefId:c.string().min(1),evaluationRefId:c.string().min(1),candidateArtifactRef:c.string().min(1),candidateKind:Mt,approvalDecisionRef:c.string().min(1),policyDecisionRef:c.string().min(1),rollbackRefId:c.string().min(1),killSwitchRef:c.string().min(1),stage:c.enum(["shadow","canary","promoted","rejected"]),approvedAt:c.iso.datetime({offset:!0}).optional(),governedLearning:ve.optional(),gateBundle:Lt.optional(),approvalReceipt:Fe.optional(),rollbackTestReceipt:jt.optional(),killSwitchReceipt:Fe.optional(),comparisonReceipt:Nt.optional(),effectiveArtifact:sn.optional()}).strict().superRefine((n,o)=>{if(n.governedLearning&&(n.stage==="canary"||n.stage==="promoted")&&!n.gateBundle)o.addIssue({code:"custom",path:["gateBundle"],message:"Governed canary and promotion require a gate bundle."})})}).strict(),Ko=K.extend({kind:c.literal("rollback"),authorityClass:c.literal("execution"),payload:c.object({promotionRefId:c.string().min(1),baselineRefId:c.string().min(1),triggerRef:c.string().min(1),status:c.enum(["ready","executed","failed"]),executedAt:c.iso.datetime({offset:!0}).optional(),outcomeRefId:c.string().min(1).optional(),replayRefId:c.string().min(1),governedLearning:ve.optional(),reproduction:Vt.optional()}).strict()}).strict(),$o=K.extend({kind:c.literal("replay"),authorityClass:c.literal("truth"),payload:c.object({inputFingerprint:l,configurationRefIds:c.array(c.string().min(1)).min(1),codeVersionRef:c.string().min(1),providerFixtureRef:c.string().min(1),orderedEventRefIds:c.array(c.string().min(1)),outputFingerprint:l,status:c.enum(["exact","drifted","blocked"]),replayedAt:c.iso.datetime({offset:!0}),governedLearning:ve.optional(),lifecycleHeadFingerprint:l.optional(),baselineFingerprint:l.optional(),effectiveArtifactFingerprint:l.optional(),orderedTransitionFingerprints:c.array(l).optional()}).strict()}).strict(),qn=[To,qo,Bo,Fo,Ko,$o];import{z as R}from"zod";var Uo=K.extend({kind:R.literal("source"),authorityClass:R.literal("truth"),payload:R.object({connectionRef:R.string().min(1),authorizationRef:R.string().min(1),externalId:R.string().min(1),sourceType:R.string().min(1),aclRefIds:R.array(R.string().min(1)).min(1),state:R.enum(["registered","ready","degraded","revoked","deleted"])}).strict()}).strict(),Wo=K.extend({kind:R.literal("source_version"),authorityClass:R.literal("truth"),payload:R.object({sourceRecordRefId:R.string().min(1),version:R.number().int().positive(),observedAt:R.iso.datetime({offset:!0}),sourceFingerprint:l,assetRefIds:R.array(R.string().min(1)).default([])}).strict()}).strict(),Ho=K.extend({kind:R.literal("asset"),authorityClass:R.literal("truth"),payload:R.object({sourceVersionRefId:R.string().min(1),mediaType:R.string().min(1),byteLength:R.number().int().nonnegative(),storageRef:R.string().min(1),contentFingerprint:l,classification:R.enum(["public","internal","confidential","restricted"]),aclRefIds:R.array(R.string().min(1)).min(1)}).strict()}).strict(),Yo=K.extend({kind:R.literal("part"),authorityClass:R.literal("truth"),payload:R.object({assetRefId:R.string().min(1),partKind:R.enum(["page","section","table","line","cell","message","time_range"]),ordinal:R.number().int().nonnegative(),locator:xe,contentFingerprint:l,language:R.string().min(2).optional(),parentPartRefId:R.string().min(1).optional()}).strict()}).strict(),Zo=K.extend({kind:R.literal("fragment"),authorityClass:R.literal("truth"),payload:R.object({partRefId:R.string().min(1),stableFragmentId:R.string().min(1),ordinal:R.number().int().nonnegative(),locator:xe,contentFingerprint:l,tokenCount:R.number().int().nonnegative(),previousFragmentRefId:R.string().min(1).optional(),nextFragmentRefId:R.string().min(1).optional(),aclRefIds:R.array(R.string().min(1)).min(1)}).strict()}).strict(),Qo=K.extend({kind:R.literal("evidence"),authorityClass:R.literal("truth"),payload:R.object({sourceVersionRefId:R.string().min(1),assetRefId:R.string().min(1).optional(),partRefId:R.string().min(1),fragmentRefId:R.string().min(1),locator:xe,authorizationDecisionRef:R.string().min(1),redactionDecisionRef:R.string().min(1),contentFingerprint:l}).strict()}).strict(),Bn=[Uo,Wo,Ho,Yo,Zo,Qo];import{z as m}from"zod";var Xo=m.enum(["fact","hypothesis","policy","procedure","decision","skill_candidate"]),Jo=m.enum(["unreviewed","review_required","approved","rejected","superseded"]),Tt=m.object({statement:m.string().min(1),normativeLanguage:m.array(m.string().min(1)).default([]),scope:m.array(m.string().min(1)).default([]),prerequisites:m.array(m.string().min(1)).default([]),orderedSteps:m.array(m.string().min(1)).default([]),expectedOutputs:m.array(m.string().min(1)).default([]),failureBranches:m.array(m.string().min(1)).default([]),exceptions:m.array(m.string().min(1)).default([]),approvalBoundaries:m.array(m.string().min(1)).default([])}).strict(),Tc=m.object({tenantId:m.string().min(1),workspaceId:m.string().min(1),entryId:m.string().min(1),version:m.number().int().positive(),kind:Xo,title:m.string().min(1),content:Tt,ownerRef:m.string().min(1).optional(),sourceRecordRefs:m.array(Ce).default([]),evidenceRefIds:m.array(m.string().min(1)).default([]),policyRefIds:m.array(m.string().min(1)).default([]),domain:m.string().min(1),trustLevel:m.enum(["low","medium","high"]),confidence:m.number().min(0).max(1),freshness:m.enum(["fresh","stale","unknown"]),reviewState:Jo,conflictState:m.enum(["clear","contradictory","resolved"]),risk:m.enum(["low","medium","high","critical"]),recordedAt:m.iso.datetime({offset:!0}),validTime:Pn,requiredCapabilities:m.array(m.string().min(1)).default([]),sensitiveFields:m.array(m.string().min(1)).default([]),tombstoneReason:m.enum(["source_deleted","acl_revoked","superseded","privacy_request"]).optional(),fingerprint:l}).strict(),qc=m.object({tenantId:m.string().min(1),workspaceId:m.string().min(1),decisionId:m.string().min(1),entryId:m.string().min(1),entryVersion:m.number().int().positive(),verdict:m.enum(["approved","rejected"]),reviewerRef:m.string().min(1),decidedAt:m.iso.datetime({offset:!0}),evidenceRefIds:m.array(m.string().min(1)).min(1),reason:m.string().min(1),fingerprint:l}).strict(),Bc=m.object({tenantId:m.string().min(1),workspaceId:m.string().min(1),gapId:m.string().min(1),entryRef:m.string().min(1),reason:m.enum(["ownerless","stale","unsupported","low_confidence","contradictory"]),status:m.enum(["open","in_progress","resolved","accepted_unknown"]),ownerRef:m.string().min(1).optional(),evidenceRefIds:m.array(m.string().min(1)).min(1),recordedAt:m.iso.datetime({offset:!0}),fingerprint:l}).strict(),Fc=m.object({tenantId:m.string().min(1),workspaceId:m.string().min(1),remediationId:m.string().min(1),gapId:m.string().min(1),status:m.enum(["proposed","accepted","in_progress","completed","cancelled"]),ownerRef:m.string().min(1),workRef:m.string().min(1),evidenceRefIds:m.array(m.string().min(1)).min(1),recordedAt:m.iso.datetime({offset:!0}),fingerprint:l}).strict(),Kc=m.object({artifact:en,sourceEntryRef:m.string().min(1),accountableOwnerRef:m.string().min(1),policyRefIds:m.array(m.string().min(1)).default([]),content:Tt,conformanceEvidenceRefIds:m.array(m.string().min(1)).min(1),contentFingerprint:l,noActionAuthorization:m.literal(!0),noActionExecution:m.literal(!0)}).strict();var Uc=[{surface:"@lssm/lib.companyos-spec/types/company-intelligence",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/validation/company-intelligence",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/fixtures/company-intelligence",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/docs/company-intelligence.docblock",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/types/company-intelligence/grounding-result",kind:"schema",intent:"additive"},{surface:"@lssm/lib.companyos-spec/validation/company-intelligence-grounding",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/fixtures/company-intelligence/grounding-result",kind:"export",intent:"additive"},{surface:"companyIntelligence.feedback.signal@1.0.0",kind:"schema",intent:"additive"},{surface:"companyIntelligence.governedLearning.transition@1.0.0",kind:"schema",intent:"additive"},{surface:"@lssm/lib.companyos-spec/validation/company-intelligence#validateCompanyIntelligenceGovernedLearningHistory",kind:"export",intent:"additive"},{surface:"companyIntelligence.extraction.candidate@1.0.0",kind:"schema",intent:"additive"},{surface:"@lssm/lib.contracts-spec/companyos/company-intelligence",kind:"export",intent:"additive"},...["companyIntelligence.brain.entry.create","companyIntelligence.brain.entry.version.append","companyIntelligence.brain.entry.review","companyIntelligence.brain.edition.create","companyIntelligence.brain.edition.compare","companyIntelligence.brain.gap.remediate","companyIntelligence.brain.artifact.compile","companyIntelligence.record.validate","companyIntelligence.graph.query","companyIntelligence.answer.query","companyIntelligence.feedback.record","companyIntelligence.experiment.evaluate","companyIntelligence.promotion.decide","companyIntelligence.rollback.execute","companyIntelligence.replay.get"].map((n)=>({surface:n,kind:"operation",intent:"additive"})),...["companyIntelligence.brain.entry.versioned","companyIntelligence.brain.entry.reviewed","companyIntelligence.brain.edition.created","companyIntelligence.brain.gap.recorded","companyIntelligence.brain.remediation.recorded","companyIntelligence.brain.artifact.compiled","companyIntelligence.record.committed","companyIntelligence.answer.verified","companyIntelligence.feedback.recorded","companyIntelligence.promotion.decided","companyIntelligence.rollback.completed"].map((n)=>({surface:n,kind:"event",intent:"additive"}))];import{z as S}from"zod";var qt="companyos.company-intelligence-extraction-candidate",Bt="1.0.0",Zc=S.enum(["fact","entity","relation","policy","procedure"]),ea=S.object({evidenceRecordId:S.string().min(1),locator:xe}).strict(),Ke=S.object({candidateKey:S.string().min(1),evidenceRefs:S.array(ea).min(1),confidence:S.number().min(0).max(1),risk:S.enum(["low","medium","high","critical"])}),na=S.discriminatedUnion("kind",[Ke.extend({kind:S.literal("fact"),statement:S.string().min(1)}).strict(),Ke.extend({kind:S.literal("entity"),entityType:S.string().min(1),label:S.string().min(1)}).strict(),Ke.extend({kind:S.literal("relation"),fromCandidateKey:S.string().min(1),toCandidateKey:S.string().min(1),predicate:S.string().min(1)}).strict(),Ke.extend({kind:S.literal("policy"),normativeStatement:S.string().min(1),scopeRefIds:S.array(S.string().min(1)).min(1)}).strict(),Ke.extend({kind:S.literal("procedure"),statement:S.string().min(1)}).strict()]),Qc=S.object({schemaId:S.literal(qt),schemaVersion:S.literal(Bt),candidates:S.array(na).min(1)}).strict().refine(({candidates:n})=>new Set(n.map(({candidateKey:o})=>o)).size===n.length,{message:"Candidate keys must be unique.",path:["candidates"]}),Xc=S.object({decisionRef:S.string().min(1),reviewerRef:S.string().min(1),candidateKeys:S.array(S.string().min(1)).min(1),verdict:S.enum(["approved","rejected"]),decidedAt:S.iso.datetime({offset:!0})}).strict(),Jc=S.object({receiptId:S.string().min(1),tenantId:S.string().min(1),attemptId:S.string().min(1),modelRef:S.string().min(1),promptFingerprint:l,candidateSchema:S.object({id:S.literal(qt),version:S.literal(Bt),fingerprint:l}).strict(),runtimeVersion:S.string().min(1),costMicros:S.number().int().nonnegative(),redactionDecisionRef:S.string().min(1),evidenceRefIds:S.array(S.string().min(1)),dispositions:S.array(S.object({candidateKey:S.string().min(1),status:S.enum(["accepted","rejected","review_required"]),reason:S.string().min(1),recordId:S.string().min(1).optional()}).strict()),version:S.number().int().positive(),supersedesReceiptId:S.string().min(1).optional(),fingerprint:l}).strict();import{z as s}from"zod";var ta=s.enum(["authorization_denied","scope_mismatch","policy_refused","no_authorized_evidence","retrieval_degraded","conflicting_authorized_evidence","stale_authorized_evidence","verifier_not_independent","drafting_degraded","draft_schema_invalid","verification_degraded","insufficient_claim_support","deadline_exceeded","budget_exceeded","fixture_adapter_forbidden","supported"]),Ue=s.array(s.string().min(1)).refine((n)=>new Set(n).size===n.length,{message:"Values must be unique."}),ia=s.object({tenantId:s.string().min(1),workspaceId:s.string().min(1),actorRef:s.string().min(1),viewerRef:s.string().min(1),capabilityRefs:Ue,authorizationDecisionRef:s.string().min(1),policyDecisionRef:s.string().min(1).optional()}).strict(),oa=s.object({questionBytes:s.number().int().positive().max(4096),filterEntries:s.number().int().nonnegative().max(20),channelCount:s.number().int().positive().max(3),perChannelTopK:s.number().int().positive().max(32),mergedEvidenceRecords:s.number().int().positive().max(16),excerptBytesPerEvidence:s.number().int().positive().max(2048),totalModelEvidenceBytes:s.number().int().positive().max(16384),maxClaims:s.number().int().positive().max(8),maxClaimStatementBytes:s.number().int().positive().max(512),maxCitationsPerClaim:s.number().int().positive().max(4),maxDraftAttempts:s.literal(2),maxVerificationAttempts:s.literal(2),maxRetrievalCalls:s.literal(3),runDeadlineMs:s.number().int().positive().max(12000)}).strict(),Kt=s.object({claimId:s.string().regex(/^clm_sha256:[a-f0-9]{64}$/),statement:s.string().min(1)}).strict(),$t=s.object({citationId:s.string().regex(/^cit_sha256:[a-f0-9]{64}$/),evidenceRefId:s.string().min(1),tenantId:s.string().min(1),workspaceId:s.string().min(1),viewerRef:s.string().min(1),locator:xe,excerpt:s.string().min(1),sourceContentFingerprint:l,viewerProjectionFingerprint:l,redactionDecisionRef:s.string().min(1),fusedScoreMicros:s.number().int().nonnegative()}).strict(),Ut=s.object({claimId:s.string().regex(/^clm_sha256:[a-f0-9]{64}$/),citationIds:s.array(s.string().regex(/^cit_sha256:[a-f0-9]{64}$/)).min(1).max(4),verdict:s.literal("supported"),confidence:s.number().min(0).max(1)}).strict(),Ft=s.object({providerRef:s.string().min(1),modelRef:s.string().min(1),promptOrRuleVersion:s.string().min(1),independenceDomain:s.string().min(1),provenance:s.enum(["runtime","fixture"])}).strict(),aa=s.object({request:l,retrieval:l.optional(),draft:l.optional(),validation:l.optional(),verification:l.optional(),output:l,replay:l}).strict(),ra=s.object({drafterIdentity:Ft.optional(),verifierIdentity:Ft.optional(),retrievedCitationLedger:Ue,callCounts:s.object({retrieval:s.number().int().nonnegative().max(3),draft:s.number().int().nonnegative().max(2),verify:s.number().int().nonnegative().max(2)}).strict(),repairCount:s.number().int().nonnegative().max(1),warnings:Ue,fingerprints:aa}).strict(),sa=s.object({schemaVersion:s.literal("company-intelligence-grounded-answer:v1"),codeVersionRef:s.string().min(1),retrievalConfigRef:s.string().min(1),recordedAt:s.iso.datetime({offset:!0}),modelVisibleEvidenceBytes:s.number().int().nonnegative().max(16384),supportThreshold:s.number().min(0).max(1)}).strict(),$e=s.object({schemaVersion:s.literal("company-intelligence-grounded-answer:v1"),scope:ia,status:jn,reasonCodes:s.array(ta).min(1),text:s.string().min(1).optional(),claims:s.array(Kt),citations:s.array($t),claimSupport:s.array(Ut),conflictRefIds:Ue,receipt:ra,metadata:sa,bounds:oa,knowledgeAuthorizesAction:s.literal(!1)}).strict(),cn={text:s.undefined().optional(),claims:s.array(s.never()).max(0),citations:s.array(s.never()).max(0),claimSupport:s.array(s.never()).max(0)},om=s.discriminatedUnion("status",[$e.extend({status:s.literal("answered"),text:s.string().min(1),claims:s.array(Kt).min(1).max(8),citations:s.array($t).min(1),claimSupport:s.array(Ut).min(1),conflictRefIds:s.array(s.never()).max(0)}),$e.extend({status:s.literal("abstained"),...cn}),$e.extend({status:s.literal("refused"),...cn}),$e.extend({status:s.literal("conflicted"),...cn,conflictRefIds:Ue.pipe(s.array(s.string()).min(1))}),$e.extend({status:s.literal("degraded"),...cn})]);var ca=Ee.discriminatedUnion("kind",[...Bn,...Gn,...bt,...qn]),ma=[...Bn,...Gn,zn,Ln,Dn,...qn].map((n)=>n.omit({fingerprint:!0})),lm=Ee.union(ma),ym=Ee.object({contractVersion:Ee.literal(wn),tenantId:Ee.string().min(1),records:Ee.array(ca).min(1)}).strict();import{z as r}from"zod";var Fn=r.object({tenantId:r.string().min(1),workspaceId:r.string().min(1),teamId:r.string().min(1).optional()}),Kn=r.enum(["core","marketing","product","infrastructure","finance","sales","custom"]),pa=r.enum(["signup","activation","active_users","customer_churn","user_churn"]),we=r.object({field:r.string().min(1).max(160),operator:r.enum(["eq","not_eq","in","not_in","exists","gt","gte","lt","lte"]),value:r.union([r.string(),r.number(),r.boolean(),r.array(r.union([r.string(),r.number(),r.boolean()])).max(100)]).optional()}),da=r.discriminatedUnion("operator",[r.object({operator:r.literal("count"),filters:r.array(we).max(25).default([])}),r.object({operator:r.literal("distinct"),identityField:r.string().min(1),filters:r.array(we).max(25).default([])}),r.object({operator:r.literal("sum"),valueField:r.string().min(1),filters:r.array(we).max(25).default([])}),r.object({operator:r.literal("ratio"),numeratorFilters:r.array(we).max(25).default([]),denominatorFilters:r.array(we).max(25).default([]),scale:r.number().positive().default(100)}),r.object({operator:r.literal("cohort_loss"),identityField:r.string().min(1),eligibilityAction:r.string().min(1),filters:r.array(we).max(25).default([])})]),la=r.object({id:r.string().min(1),provider:r.enum(["posthog","stripe","postgres_named_query","github","linear","vercel","google_search_console","remote_mcp","http","runtime_node_cli"]),connectionRef:r.string().min(1),approvedOperation:r.string().min(1).optional(),allowedToolNames:r.array(r.string().min(1)).max(50).default([]),inputSchemaRef:r.string().min(1).optional(),expectedCadenceMinutes:r.number().int().min(5).max(1440),freshnessSlaMinutes:r.number().int().min(5).max(10080),evidenceRefIds:r.array(r.string().min(1)).min(1),approvedDefinitionVersion:r.number().int().positive()}),ya=r.object({capabilities:r.array(r.enum(["metrics.read_live","metrics.manage","metrics.collect","metrics.publish","metrics.deliver","metrics.audit"])).min(1),teamIds:r.array(r.string().min(1)).default([]),shareholderMode:r.enum(["disabled","published_snapshots","expiring_live_grant"])}),Om=r.object({id:r.string().min(1),scope:Fn,name:r.string().min(1).max(160),category:Kn,kind:r.discriminatedUnion("type",[r.object({type:r.literal("core"),coreKind:pa}),r.object({type:r.literal("custom"),key:r.string().min(1).max(120)})]),aggregation:da,unit:r.string().min(1).max(64),direction:r.enum(["increase","decrease","maintain"]),sourceBindings:r.array(la).min(1),accessPolicy:ya,ownerPrincipalId:r.string().min(1),version:r.number().int().positive(),status:r.enum(["draft","active","paused","retired"]),meaningfulAction:r.string().min(1).optional(),createdAt:r.string().datetime(),updatedAt:r.string().datetime()}),ua=r.enum(["today","last_24_hours","last_7_days","last_30_days"]),Wt=r.object({window:ua,current:r.number().nullable(),previous:r.number().nullable(),absoluteDelta:r.number().nullable(),growthPercent:r.number().nullable(),growthState:r.enum(["available","new","unavailable"]),percentagePointDelta:r.number().nullable(),freshness:r.enum(["fresh","stale","unavailable"]),completeness:r.number().min(0).max(1),provisional:r.boolean(),comparisonLabel:r.string().min(1),evidenceRefIds:r.array(r.string().min(1)),currentStart:r.string().datetime(),currentEnd:r.string().datetime(),previousStart:r.string().datetime(),previousEnd:r.string().datetime()});import{z as a}from"zod";var be={id:a.string().min(1),scope:Fn,createdAt:a.string().datetime()},Em=a.object({...be,definitionId:a.string().min(1),definitionVersion:a.number().int().positive(),status:a.enum(["draft","pending_review","approved","rejected","superseded"]),mapping:a.record(a.string(),a.unknown()),samplePreview:a.array(a.record(a.string(),a.union([a.string(),a.number(),a.boolean(),a.null()]))).max(20),confidence:a.number().min(0).max(1),requiredScopes:a.array(a.string().min(1)),estimatedCallsPerDay:a.number().int().nonnegative(),estimatedCostMinor:a.number().int().nonnegative(),toolRefs:a.array(a.string().min(1)).min(1),dryRunEvidenceRefIds:a.array(a.string().min(1)),reviewedByPrincipalId:a.string().min(1).optional(),workOrderRef:a.string().min(1).optional(),expiresAt:a.string().datetime().optional()}),wm=a.object({...be,metricDefinitionIds:a.array(a.string().min(1)).min(1),type:a.enum(["value_threshold","growth_threshold","source_freshness","source_failure"]),operator:a.enum(["gt","gte","lt","lte","eq"]),threshold:a.number(),cooldownMinutes:a.number().int().min(5).max(43200),status:a.enum(["active","paused"])}),Pm=a.object({...be,enabled:a.boolean().default(!1),metricDefinitionIds:a.array(a.string().min(1)).min(1),recipientRefs:a.array(a.string().min(1)).min(1),locale:a.enum(["en","fr","es"]),timezone:a.string().min(1),cadence:a.object({hour:a.number().int().min(0).max(23).default(9),minute:a.number().int().min(0).max(59).default(0),weekdays:a.array(a.number().int().min(0).max(6)).min(1)}),destinations:a.array(a.enum(["email","slack","discord"])).min(1)}),jm=a.object({...be,principalRef:a.string().min(1),mode:a.enum(["published_snapshots","expiring_live_grant"]),metricDefinitionIds:a.array(a.string().min(1)).default([]),categories:a.array(Kn).default([]),expiresAt:a.string().datetime().optional(),revokedAt:a.string().datetime().optional()}),zm=a.object({...be,definitionId:a.string().min(1),definitionVersion:a.number().int().positive(),values:a.array(Wt).length(4),fingerprint:a.string().regex(/^sha256:[a-f0-9]{64}$/),evidenceRefIds:a.array(a.string().min(1))}),Lm=a.object({...be,status:a.enum(["draft","published","revoked"]),snapshotIds:a.array(a.string().min(1)).min(1),metricVersionFingerprints:a.array(a.string().min(1)).min(1),visibility:a.enum(["shareholder_scope","named_recipients"]),recipientRefs:a.array(a.string().min(1)),contentHash:a.string().regex(/^sha256:[a-f0-9]{64}$/),approvalRef:a.string().min(1).optional(),publishedAt:a.string().datetime().optional(),revokedAt:a.string().datetime().optional()}),Dm=a.object({...be,bindingId:a.string().min(1),definitionId:a.string().min(1),definitionVersion:a.number().int().positive(),idempotencyKey:a.string().min(1),status:a.enum(["claimed","running","succeeded","failed","deferred","circuit_open"]),scheduledAt:a.string().datetime(),startedAt:a.string().datetime().optional(),completedAt:a.string().datetime().optional(),attempt:a.number().int().positive(),retryAfter:a.string().datetime().optional(),failureCode:a.string().min(1).optional(),evidenceRefIds:a.array(a.string().min(1))}),Gm=a.object({...be,digestPolicyId:a.string().min(1).optional(),publicationId:a.string().min(1).optional(),destination:a.enum(["email","slack","discord"]),outboxMessageRef:a.string().min(1),status:a.enum(["queued","delivered","failed","revoked_before_delivery"]),deliveredAt:a.string().datetime().optional(),evidenceRefIds:a.array(a.string().min(1))});import{LssmGoalConflictV1Schema as Ca,LssmGoalV1Schema as Ra,LssmHarmGuardrailV1Schema as Sa,LssmIdSchema as fe,LssmOutcomeMetricV1Schema as Ia,LssmStableRefV1Schema as Zt,LssmUtcTimestampSchema as xa}from"@lssm/lib.lssm-os-spec";import{z as ee}from"zod";import{LssmDataHandlingV1Schema as fa,LssmEvidenceRefV1Schema as Ht,LssmIdSchema as Mm,LssmStableRefV1Schema as $n,LssmUtcTimestampSchema as ga}from"@lssm/lib.lssm-os-spec";import{z as Oe}from"zod";var ha="1.0.0",ke=Oe.literal(ha),qm=$n.extend({kind:Oe.enum(["enterprise","holding_company","legal_entity","operating_company","brand","product","workspace"])}).strict(),Pe=Oe.object({recordedAt:ga,recordedByRef:$n,sourceRefs:Oe.array(Ht).min(1).max(32),decisionRef:Ht.optional(),dataHandling:fa}).strict(),Yt=Oe.object({businessIntentRecordedByCompanyOs:Oe.literal(!0),technicalExecutionAuthorizedByCompanyOs:Oe.literal(!1),connectAuthorizationRequired:Oe.literal(!0),connectPolicyRef:$n}).strict();var va=ee.object({id:fe,name:ee.string().trim().min(1).max(120),description:ee.string().trim().min(1).max(4000),behavioralCommitments:ee.array(ee.string().trim().min(1).max(500)).min(1),evidenceRefIds:ee.array(fe).max(16)}).strict(),ba=ee.object({id:fe,goalId:fe,companyEntityId:fe,parentCascadeId:fe.optional(),alignment:ee.enum(["direct","supporting","guardrail","conflicting"]),contributionWeight:ee.number().min(0).max(1),accountableOwnerRef:Zt,escalationRouteId:fe}).strict(),Qt=ee.object({contractVersion:ke,id:fe,companyEntityId:fe,mission:ee.string().trim().min(1).max(4000),vision:ee.string().trim().min(1).max(4000),values:ee.array(va).min(1).max(32),goals:ee.array(Ra).min(1),outcomeMetrics:ee.array(Ia),goalConflicts:ee.array(Ca),harmGuardrails:ee.array(Sa),goalCascades:ee.array(ba).min(1),capitalResponsibilityRefIds:ee.array(fe),budgetResponsibilityRefIds:ee.array(fe),effectiveFrom:xa,supersedesPurposeRef:Zt.optional(),provenance:Pe}).strict();import{z as ce}from"zod";var Oa=ce.object({id:ce.string().min(1),providerKey:ce.string().min(1),displayName:ce.string().min(1),externalObjectTypes:ce.array(ce.string().min(1)).default([])}),Xt=ce.object({id:ce.string().min(1),capability:Jn,readSupported:ce.boolean().default(!0),draftSupported:ce.boolean().default(!1),writeSupported:ce.boolean().default(!1),syncPolicy:ce.enum(["manual","scheduled","event_driven"]).default("manual"),freshnessPolicy:ce.enum(["best_effort","daily","near_realtime"]),providerBindings:ce.array(Oa).default([])});import{defineContractEdge as ka,defineContractEntity as pn}from"@lssm/lib.contracts-spec";import{ControlPlaneExecutionApproveCommand as Jt}from"@lssm/lib.contracts-spec/control-plane/commands/controlPlaneExecutionApprove.command";import{ControlPlaneExecutionRejectCommand as ei}from"@lssm/lib.contracts-spec/control-plane/commands/controlPlaneExecutionReject.command";import{ControlPlaneTraceGetQuery as ni}from"@lssm/lib.contracts-spec/control-plane/queries/controlPlaneTraceGet.query";import{defineDataView as _a}from"@lssm/lib.contracts-spec/data-views";import{GraphArtifactSchemaVersionV1 as Aa,GraphArtifactVersionV1 as Ea}from"@lssm/lib.contracts-spec/graph-artifacts";import{defineTranslation as wa}from"@lssm/lib.contracts-spec/translations";var ti="1.0.0",ii=[{path:"packages/libs/companyos-spec/src/types/control-plane-projections.ts"}],je={owners:["companyos.core"],tags:["companyos","control-plane","projection"],provenance:ii},mn={provenance:ii},We={version:ti,stability:"experimental",owners:["companyos.core"],tags:["companyos","control-plane","projection"]},oi=pn({meta:{...We,key:"companyos.graph.node",title:"CompanyOS graph node",description:"Provider-neutral CompanyOS operating-graph node projected for control-plane review surfaces.",domain:"companyos"},edges:[{id:"companyos.graph.node-evidence-for-control-plane.execution",from:"companyos.graph.node",to:"control-plane.execution",relation:"evidence-for",cardinality:"many-to-many",directed:!0,label:"evidence for execution"}]}),Pa=pn({meta:{...We,key:"companyos.graph.edge",title:"CompanyOS graph edge",description:"Provider-neutral CompanyOS operating-graph relationship projected for control-plane review surfaces.",domain:"companyos"}}),ai=pn({meta:{...We,key:"control-plane.execution",title:"Control-plane execution",description:"Execution projection that lets CompanyOS approval evidence and trace entries align with control-plane commands.",domain:"control-plane"},edges:[{id:"control-plane.execution-requires-companyos.approval-gate",from:"control-plane.execution",to:"companyos.approval-gate",relation:"requires",cardinality:"many-to-one",directed:!0,label:"requires CompanyOS approval gate"}]}),ri=pn({meta:{...We,key:"companyos.approval-gate",title:"CompanyOS approval gate",description:"Authority boundary for high-impact CompanyOS actions before control-plane approval or rejection commands continue execution.",domain:"companyos"}}),ip=[ka({meta:{...We,key:"companyos.approval-gate.controls-control-plane.execution",title:"CompanyOS approval controls execution",description:"Links CompanyOS approval-gate state to the control-plane execution it may approve or reject.",domain:"companyos"},edge:{id:"companyos.approval-gate-controls-control-plane.execution",from:"companyos.approval-gate",to:"control-plane.execution",relation:"controls",cardinality:"one-to-many",directed:!0,label:"controls execution"}})],op=[oi,Pa,ai,ri],ja=wa({meta:{key:"companyos.control-plane.approval-graph",version:"1.0.0",domain:"companyos",owners:["companyos.core"]},locale:"en",messages:{Label:{value:"Label"},Kind:{value:"Kind"},"Review state":{value:"Review state"}}}),ap=_a(ja,{meta:{key:"companyos.control-plane.approval-graph",version:ti,title:"CompanyOS control-plane approval graph",description:"Entity-declarative graph projection for reviewing CompanyOS evidence, approval gates, and control-plane executions together.",stability:"experimental",owners:["companyos.core"],tags:["companyos","control-plane","approval","graph"],entity:"control-plane.execution",domain:"companyos"},source:{variant:"entity-declarative",entity:"control-plane.execution",edges:[{from:"control-plane.execution",to:"companyos.approval-gate",relation:"requires"},{from:"companyos.graph.node",to:"control-plane.execution",relation:"evidence-for"}]},view:{kind:"graph",layout:{kind:"dag",direction:"TB"},nodeKindField:"kind",edgeKindField:"relation",inspector:"panel",fields:[{key:"label",label:"Label",dataPath:"label",roles:["title"]},{key:"kind",label:"Kind",dataPath:"kind",roles:["tag"]},{key:"reviewState",label:"Review state",dataPath:"reviewState",roles:["status"]}]},policy:{flags:["approval-required","operator-review"],pii:[]}}),rp={schemaVersion:Aa,artifactVersion:Ea,kind:"contract-graph",generatedAt:"2026-05-17T00:00:00.000Z",workspaceRoot:"contractspec://companyos/control-plane-projections",redactionMode:"path-only",nodes:[{...je,id:"entity:companyos.graph.node",key:oi.meta.key,kind:"data-view",label:"CompanyOS graph node",confidence:"explicit"},{...je,id:"entity:companyos.approval-gate",key:ri.meta.key,kind:"policy",label:"CompanyOS approval gate",confidence:"explicit"},{...je,id:"entity:control-plane.execution",key:ai.meta.key,kind:"workflow",label:"Control-plane execution",confidence:"explicit"},{...je,id:"operation:controlPlane.execution.approve",key:Jt.meta.key,kind:"command",label:Jt.meta.title??"Approve Execution Step",confidence:"explicit"},{...je,id:"operation:controlPlane.execution.reject",key:ei.meta.key,kind:"command",label:ei.meta.title??"Reject Execution Step",confidence:"explicit"},{...je,id:"query:controlPlane.trace.get",key:ni.meta.key,kind:"query",label:ni.meta.title??"Get Execution Trace",confidence:"explicit"}],edges:[{...mn,id:"edge:approval-gate-controls-execution",from:"entity:companyos.approval-gate",to:"entity:control-plane.execution",kind:"requires",confidence:"explicit",reason:"CompanyOS approval gates must resolve before high-impact execution continuation."},{...mn,id:"edge:approve-targets-execution",from:"operation:controlPlane.execution.approve",to:"entity:control-plane.execution",kind:"targets",confidence:"explicit"},{...mn,id:"edge:reject-targets-execution",from:"operation:controlPlane.execution.reject",to:"entity:control-plane.execution",kind:"targets",confidence:"explicit"},{...mn,id:"edge:trace-documents-execution",from:"query:controlPlane.trace.get",to:"entity:control-plane.execution",kind:"documents",confidence:"explicit"}],diagnostics:[],counts:{nodes:6,edges:4,diagnostics:0}};import{z as i}from"zod";var pp=i.enum(["evidence.get-receipt","replay.get-packet"]),si=i.object({id:i.string().min(1),tenantId:i.string().min(1),workspaceId:i.string().min(1),correlationId:i.string().min(1),evidenceReceiptId:i.string().min(1),replayPacketId:i.string().min(1),operationKeys:i.object({evidenceReceipt:i.literal("evidence.get-receipt"),replayPacket:i.literal("replay.get-packet")}).strict(),summary:i.string().min(1),linkedAt:i.string().min(1),metadata:v.default({})}).strict(),za=i.object({id:i.string().min(1),authorized:i.literal(!1).default(!1),mode:i.enum(["not_authorized","dry_run_only","human_record_only"]),policyGateDecisionId:i.string().min(1),reason:i.string().min(1),rejectedDispatchLanes:i.array(i.enum(["agent","job","integration"])).min(1),reservedHumanOnly:i.literal(!1).default(!1),reservedWorkClassification:i.enum(["customer_facing","legal","financial","production_impacting"]).array().min(1),asOf:i.string().min(1),metadata:v.default({})}).strict(),La=i.object({id:i.string().min(1),tenantId:i.string().min(1),workspaceId:i.string().min(1),scenarioId:i.string().min(1),title:i.string().min(1),missionStatement:i.string().min(1),commandCycle:i.enum(["capture","decide","approve","review"]),status:i.enum(["draft","degraded","blocked","ready_for_design_partner_review"]),inputs:i.array(i.string().min(1)).min(1),facts:i.array(i.string().min(1)).min(1),sourceRefs:i.array(w).min(1),missingInformation:i.array(i.string().min(1)).default([]),delays:i.array(i.string().min(1)).default([]),inconsistencies:i.array(i.string().min(1)).default([]),risks:i.array(i.string().min(1)).min(1),reportDraftId:i.string().min(1),reportDraftEvidenceReplayLinkId:i.string().min(1),decisionPacketId:i.string().min(1),evidenceReplayLinkId:i.string().min(1),replayRefIds:i.array(i.string().min(1)).min(1),evidenceReceiptIds:i.array(i.string().min(1)).min(1),dispatchAuthorization:za,createdAt:i.string().min(1),metadata:v.default({})}).strict(),Da=i.object({id:i.string().min(1),decisionPacketId:i.string().min(1),attesterPrincipalId:i.string().min(1),attesterRole:i.literal("expert_reviewer"),attestationState:i.enum(["attested","rejected"]),statement:i.string().min(1),evidenceReplayLinkId:i.string().min(1),attestedAt:i.string().min(1),metadata:v.default({})}).strict(),Ga=i.object({id:i.string().min(1),decisionPacketId:i.string().min(1),approverPrincipalId:i.string().min(1),approverRole:i.literal("founder_approver"),approvalState:i.enum(["approved","rejected"]),statement:i.string().min(1),approvalOperationKey:i.enum(["specialOps.reviewCard.decide","specialOps.weeklyReport.approve"]),evidenceReplayLinkId:i.string().min(1),approvedAt:i.string().min(1),metadata:v.default({})}).strict(),Na=i.object({id:i.string().min(1),tenantId:i.string().min(1),workspaceId:i.string().min(1),scenarioId:i.string().min(1),title:i.string().min(1),missionCommandCycleId:i.string().min(1),decisionSummary:i.string().min(1),recommendedAction:i.string().min(1),proposedActions:i.array(i.string().min(1)).min(1),options:i.array(i.object({id:i.string().min(1),label:i.string().min(1),tradeoff:i.string().min(1)}).strict()).min(1),constraints:i.array(i.string().min(1)).min(1),sourceRefs:i.array(w).min(1),aiContribution:i.object({summary:i.string().min(1),boundaries:i.array(i.string().min(1)).min(1),canDispatchReservedWork:i.literal(!1).default(!1)}).strict(),reservedWorkClassification:i.enum(["customer_facing","legal","financial","production_impacting"]).array().min(1),attestationStatus:i.enum(["missing","attested","rejected"]),founderApprovalStatus:i.enum(["missing","approved","rejected"]),evidenceReceiptIds:i.array(i.string().min(1)).min(1),replayPacketIds:i.array(i.string().min(1)).min(1),evidenceReplayLinks:i.array(si).min(1),referencedOperationKeys:i.array(i.enum(["evidence.get-receipt","replay.get-packet","specialOps.reviewCard.decide","specialOps.weeklyReport.approve"])).min(1),noRawRunRecords:i.literal(!0).default(!0),noProviderDispatch:i.literal(!0).default(!0),noProductionReadinessClaim:i.literal(!0).default(!0),createdAt:i.string().min(1),metadata:v.default({})}).strict(),Va=i.object({id:i.string().min(1),summary:i.string().min(1),severity:i.enum(["low","medium","high"]),status:i.enum(["mitigated","accepted","open"]),evidenceReplayLinkId:i.string().min(1).optional()}).strict(),dp=i.object({id:i.string().min(1),tenantId:i.string().min(1),workspaceId:i.string().min(1),scenarioId:i.string().min(1),state:i.enum(["draft","degraded","blocked","ready_for_design_partner_review"]),missionCommandCycle:La,decisionPacket:Na,evidenceReplayLinks:i.array(si).default([]),expertAttestations:i.array(Da).default([]),founderApproval:Ga.optional(),gapList:i.array(Va).default([]),assertions:i.object({fictiveFixtureOnly:i.literal(!0),noStandaloneApp:i.literal(!0),noProviderDispatch:i.literal(!0),noAiOrReservedHumanDispatch:i.literal(!0),noProductionReadinessClaim:i.literal(!0)}).strict(),asOf:i.string().min(1),metadata:v.default({})}).strict().superRefine((n,o)=>{if(n.tenantId!==n.decisionPacket.tenantId)o.addIssue({code:i.ZodIssueCode.custom,message:"Readiness tenantId must match the decision packet tenantId.",path:["decisionPacket","tenantId"]});if(n.workspaceId!==n.decisionPacket.workspaceId)o.addIssue({code:i.ZodIssueCode.custom,message:"Readiness workspaceId must match the decision packet workspaceId.",path:["decisionPacket","workspaceId"]});if(n.state!=="ready_for_design_partner_review")return;if(n.evidenceReplayLinks.length===0)o.addIssue({code:i.ZodIssueCode.custom,message:"Ready-for-design-partner-review state requires evidence/replay links.",path:["evidenceReplayLinks"]});if(!n.expertAttestations.some((T)=>T.attestationState==="attested"))o.addIssue({code:i.ZodIssueCode.custom,message:"Ready-for-design-partner-review state requires expert attestation.",path:["expertAttestations"]});if(n.founderApproval?.approvalState!=="approved")o.addIssue({code:i.ZodIssueCode.custom,message:"Ready-for-design-partner-review state requires founder approval.",path:["founderApproval"]});if(n.gapList.length===0)o.addIssue({code:i.ZodIssueCode.custom,message:"Ready-for-design-partner-review state requires an explicit known-gap list.",path:["gapList"]});if(n.gapList.some((T)=>T.status==="open"))o.addIssue({code:i.ZodIssueCode.custom,message:"Ready-for-design-partner-review state cannot include open gaps.",path:["gapList"]})});import{z as ge}from"zod";var ci=ge.object({id:ge.string().min(1),roleId:ge.string().min(1),locale:ge.string().min(2),riskMode:ge.enum(["normal","heightened","restricted"]),dataDensity:ge.enum(["compact","standard","detailed"]),guidanceMode:ge.enum(["guided","expert"]),visibleRefTypes:ge.array(ge.string().min(1)).min(1),primaryActionOperationIds:ge.array(ge.string().min(1)).default([])});import{LssmEvidenceRefV1Schema as ln,LssmIdSchema as F,LssmStableRefV1Schema as me,LssmUtcTimestampSchema as He}from"@lssm/lib.lssm-os-spec";import{z as I}from"zod";import{LssmIdSchema as Re,LssmStableRefV1Schema as dn}from"@lssm/lib.lssm-os-spec";import{z as ne}from"zod";var Ma=ne.enum(["holding_company","legal_entity","operating_company","brand","product","workspace"]),Ta=ne.object({id:Re,kind:Ma,name:ne.string().trim().min(1).max(200),legalName:ne.string().trim().min(1).max(300).optional(),jurisdiction:ne.string().trim().min(2).max(80).optional(),registrationRef:dn.optional(),accountableOwnerRef:dn,active:ne.boolean()}).strict().superRefine((n,o)=>{if(new Set(["holding_company","legal_entity","operating_company"]).has(n.kind)&&!n.legalName)o.addIssue({code:"custom",path:["legalName"],message:`${n.kind} requires a legalName`})}),qa=ne.object({id:Re,fromEntityId:Re,toEntityId:Re,kind:ne.enum(["owns","controls","operates","brand_owner","product_owner","workspace_owner"]),ownershipShare:ne.number().min(0).max(1).optional(),votingShare:ne.number().min(0).max(1).optional(),controllingInterest:ne.boolean(),jointVenture:ne.boolean(),governanceAgreementRef:dn.optional()}).strict().superRefine((n,o)=>{if(n.fromEntityId===n.toEntityId)o.addIssue({code:"custom",path:["toEntityId"],message:"An entity cannot relate to itself"});if(n.jointVenture&&!n.governanceAgreementRef)o.addIssue({code:"custom",path:["governanceAgreementRef"],message:"Joint ventures require a governance agreement reference"})}),Ba=ne.object({id:Re,reportingEntityId:Re,memberEntityIds:ne.array(Re).min(1),method:ne.enum(["full","proportional","equity","not_consolidated"]),standard:ne.enum(["ifrs","gaap","local","management"]),policyRef:dn}).strict(),mi=ne.object({contractVersion:ke,id:Re,rootEntityId:Re,entities:ne.array(Ta).min(1),relationships:ne.array(qa),consolidationBoundaries:ne.array(Ba),provenance:Pe}).strict();var Fa=I.object({id:F,delegatorEntityId:F,delegateRef:me,capabilities:I.array(F).min(1),entityScopeIds:I.array(F).min(1),delegable:I.boolean(),riskCeiling:I.enum(["low","medium","high","critical"]),effectiveFrom:He,expiresAt:He,approvalEvidenceRefs:I.array(ln).min(1)}).strict().superRefine((n,o)=>{if(n.expiresAt<=n.effectiveFrom)o.addIssue({code:"custom",path:["expiresAt"],message:"Delegated authority must expire after it becomes effective"})}),Ka=I.object({id:F,grantorEntityId:F,granteeEntityId:F,delegateRef:me,delegatedAuthorityId:F,capabilities:I.array(F).min(1),resourceScopeRefs:I.array(me).min(1),purpose:I.string().trim().min(1).max(2000),status:I.enum(["proposed","approved","suspended","revoked","expired"]),effectiveFrom:He.optional(),expiresAt:He,approvalEvidenceRefs:I.array(ln).min(1),authorityBoundary:Yt}).strict().superRefine((n,o)=>{if(n.status==="approved"&&!n.effectiveFrom)o.addIssue({code:"custom",path:["effectiveFrom"],message:"Approved grants require an effectiveFrom timestamp"});if(n.effectiveFrom&&n.expiresAt<=n.effectiveFrom)o.addIssue({code:"custom",path:["expiresAt"],message:"Cross-company grant must expire after it becomes effective"})}),$a=I.object({id:F,providerEntityId:F,consumerEntityIds:I.array(F).min(1),capability:F,serviceContractRef:me,costAllocationPolicyRef:me,sloRef:me,mandatory:I.boolean(),exceptionPolicyRef:me.optional(),accountableOwnerRef:me}).strict(),Ua=I.object({id:F,kind:I.enum(["capital","budget"]),companyEntityId:F,accountableOwnerRef:me,financePolicyRef:me,costCenterRefs:I.array(me).min(1),currency:I.string().regex(/^[A-Z]{3}$/),minorUnitLimit:I.string().regex(/^\d+$/),period:I.enum(["monthly","quarterly","annual","transaction"]),approvalThresholdRef:me}).strict(),Wa=I.object({id:F,entityScopeIds:I.array(F).min(1),workspaceScopeIds:I.array(F),jurisdictions:I.array(I.string().trim().min(2).max(80)).min(1),residencyRegions:I.array(I.string().trim().min(2).max(80)).min(1),classificationCeiling:I.enum(["public","internal","confidential","restricted"]),nonWaivable:I.boolean(),policyRefs:I.array(me).min(1)}).strict(),Ha=I.object({id:F,boundaryId:F,entityScopeIds:I.array(F).min(1),reason:I.string().trim().min(1).max(2000),expiresAt:He,approvalEvidenceRefs:I.array(ln).min(1)}).strict(),Ya=I.object({id:F,companyEntityId:F,principalRefs:I.array(me).min(1),parentRouteId:F.optional(),triggerKinds:I.array(I.enum(["authority","financial","compliance","goal","operational"])).min(1),responseTimeMinutes:I.number().int().positive()}).strict(),Za=I.object({id:F,entityIds:I.array(F).min(2),kind:I.enum(["control","ownership","authority","goal_alignment","capital","compliance"]),description:I.string().trim().min(1).max(4000),status:I.enum(["open","mitigated","resolved","accepted"]),escalationRouteId:F,decisionEvidenceRefs:I.array(ln)}).strict(),pi=I.object({contractVersion:ke,id:F,topology:mi,purposeSpecIds:I.array(F).min(1),delegatedAuthorities:I.array(Fa),crossCompanyGrants:I.array(Ka),sharedServiceMandates:I.array($a),responsibilities:I.array(Ua),complianceBoundaries:I.array(Wa),boundaryExceptions:I.array(Ha),escalationRoutes:I.array(Ya).min(1),conflicts:I.array(Za),provenance:Pe}).strict();import{LssmIdSchema as Qa}from"@lssm/lib.lssm-os-spec";import{z as di}from"zod";var Ep=di.object({contractVersion:ke,id:Qa,governance:pi,companyPurposes:di.array(Qt).min(1)}).strict();import{z as he}from"zod";var Xa=he.object({runId:he.string().min(1),harnessTarget:he.string().min(1).optional()}).strict(),Ja=he.object({redactedFieldCount:he.number().int().min(0),redactedFieldPaths:he.array(he.string().min(1)).default([]),redactedBy:he.string().min(1).optional(),redactedAt:he.string().min(1).optional()}).strict(),Vp=he.object({runRecordRef:Xa,redactionSummary:Ja.optional(),derivedAt:he.string().min(1)}).strict();import{z as e}from"zod";var er=e.enum(["planned","claimed","policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]),ze=e.enum(["agent","job","integration","human","dry_run","manual_record"]),li=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),workItemId:e.string().min(1),claimantPrincipalId:e.string().min(1),accountableOwnerPrincipalId:e.string().min(1),leaseId:e.string().min(1),leaseExpiresAt:e.string().min(1),status:e.enum(["active","released","expired","cancelled"]),scope:e.string().min(1),claimedAt:e.string().min(1),sourceRefs:e.array(w).default([])}),nr=e.object({key:e.string().min(1),dedupeKey:e.string().min(1),strategy:e.enum(["reject_duplicate","reuse_receipt","append_attempt"]),firstSeenAt:e.string().min(1),duplicateOfExecutionPlanId:e.string().min(1).optional()}),tr=e.object({id:e.string().min(1),maxAttempts:e.number().int().min(1),backoff:e.enum(["none","fixed","exponential"]),deadLetterRef:C.optional()}),yn=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),workItemId:e.string().min(1),operation:e.string().min(1),requestedByPrincipalId:e.string().min(1),autonomyDecisionId:e.string().min(1),authorityEvidenceRefIds:e.array(e.string().min(1)).min(1),rbacEvidenceRefIds:e.array(e.string().min(1)).default([]),riskEvidenceRefIds:e.array(e.string().min(1)).default([]),budgetEvidenceRefIds:e.array(e.string().min(1)).default([]),toolEvidenceRefIds:e.array(e.string().min(1)).default([]),dryRunRefIds:e.array(e.string().min(1)).default([]),sourceRefs:e.array(w).default([])}),Le=e.object({id:e.string().min(1),requestId:e.string().min(1),autonomyDecision:nn,authorityStatus:e.enum(["allowed","requires_approval","missing_principal","missing_owner","no_matching_grant"]),verdict:e.enum(["allow","dry_run_required","approval_required","reserved_human_only","denied"]),approvedDispatchLane:ze.optional(),requiredApprovalIds:e.array(e.string().min(1)).default([]),evidenceRefIds:e.array(e.string().min(1)).default([]),reasons:e.array(e.string().min(1)).min(1),decidedAt:e.string().min(1)}),yi=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),lane:ze,status:e.enum(["queued","dispatched","completed","failed","cancelled"]),targetRef:C,idempotencyKey:e.string().min(1),requiresReceipt:e.boolean().default(!0),dispatchedAt:e.string().min(1).optional(),metadata:v.default({})}),ir=w.extend({evidenceRole:e.enum(["source_observation","command_intent","policy_input","dry_run_output","operator_decision","outcome_observation"]),authorizationAuthority:e.literal(!1).default(!1),sourceTraceId:e.string().min(1).optional(),agenticInteractionPacketId:e.string().min(1).optional(),commandInboxItemId:e.string().min(1).optional(),asOf:e.string().min(1)}),or=e.object({code:e.enum(["missing_policy_gate_decision","policy_verdict_denied","lane_not_authorized","missing_accountable_owner","missing_required_approval","missing_dry_run_proof","source_evidence_only","replay_not_deterministic"]),message:e.string().min(1),evidenceRefIds:e.array(e.string().min(1)).default([]),sourceEvidenceRefIds:e.array(e.string().min(1)).default([])}),un=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),executionClaimId:e.string().min(1),dispatchId:e.string().min(1).optional(),policyGateRequestId:e.string().min(1),policyGateDecisionId:e.string().min(1),authorizedLane:ze,verdict:e.enum(["allow","dry_run_only","operator_approval_required","denied"]),accountableOwnerPrincipalId:e.string().min(1),authorizedByPrincipalId:e.string().min(1).optional(),requiredApprovalIds:e.array(e.string().min(1)).default([]),dryRunProofRefIds:e.array(e.string().min(1)).default([]),sourceEvidenceRefIds:e.array(e.string().min(1)).default([]),failure:or.optional(),authorizedAt:e.string().min(1),asOf:e.string().min(1),expiresAt:e.string().min(1).optional(),metadata:v.default({})}).superRefine((n,o)=>{if(n.verdict==="dry_run_only"&&n.authorizedLane!=="dry_run")o.addIssue({code:e.ZodIssueCode.custom,message:"dry_run_only authorizations must use the dry_run lane.",path:["authorizedLane"]});if(n.verdict==="allow"&&n.authorizedLane!=="dry_run"&&n.dryRunProofRefIds.length===0)o.addIssue({code:e.ZodIssueCode.custom,message:"Non-dry-run dispatch authorization requires dry-run proof refs.",path:["dryRunProofRefIds"]})}),ui=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),authorizationId:e.string().min(1).optional(),routeKind:e.enum(["approval_required","operator_review","dry_run_review","blocked"]),requiredPrincipalIds:e.array(e.string().min(1)).default([]),reason:e.string().min(1),sourceEvidenceRefIds:e.array(e.string().min(1)).default([]),createdAt:e.string().min(1),asOf:e.string().min(1)}),fn=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),policyGateRequestId:e.string().min(1),policyGateDecisionId:e.string().min(1).optional(),authorizationId:e.string().min(1).optional(),sourceEvidenceRefs:e.array(ir).default([]),decisionRefIds:e.array(e.string().min(1)).default([]),inputHash:e.string().min(1),outputHash:e.string().min(1),deterministic:e.literal(!0).default(!0),createdAt:e.string().min(1),asOf:e.string().min(1),metadata:v.default({})}),gn=e.object({id:e.string().min(1),replayPacketId:e.string().min(1),executionPlanId:e.string().min(1),inputHash:e.string().min(1),expectedOutputHash:e.string().min(1),actualOutputHash:e.string().min(1).optional(),status:e.enum(["pass","fail","not_run"]),varianceReason:e.string().min(1).optional(),checkedAt:e.string().min(1).optional(),asOf:e.string().min(1),sourceEvidenceRefIds:e.array(e.string().min(1)).default([])}),fi=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),dispatchId:e.string().min(1).optional(),receiptIds:e.array(e.string().min(1)).default([]),outcomeReceiptId:e.string().min(1),objectiveIds:e.array(e.string().min(1)).default([]),reviewOutputPlanIds:e.array(e.string().min(1)).optional(),sourceEvidenceRefIds:e.array(e.string().min(1)).default([]),status:e.enum(["linked","partial","blocked"]),linkedAt:e.string().min(1),asOf:e.string().min(1)}),hn=e.object({id:e.string().min(1),workItemId:e.string().min(1),operation:e.string().min(1),lifecycleState:er,accountableOwnerPrincipalId:e.string().min(1),claimId:e.string().min(1).optional(),idempotency:nr,retryPolicy:tr.optional(),policyGateRequestId:e.string().min(1),policyGateDecisionId:e.string().min(1).optional(),dispatchIds:e.array(e.string().min(1)).default([]),receiptIds:e.array(e.string().min(1)).default([]),outcomeReceiptIds:e.array(e.string().min(1)).default([]),checkpointRefIds:e.array(e.string().min(1)).default([]),replayRefIds:e.array(e.string().min(1)).default([]),cancellationRefIds:e.array(e.string().min(1)).default([]),sourceRefs:e.array(w).default([])}),gi=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),dispatchId:e.string().min(1),lane:ze,status:e.enum(["dry_run_completed","dispatched","succeeded","failed","cancelled","blocked"]),idempotencyKey:e.string().min(1),startedAt:e.string().min(1),completedAt:e.string().min(1).optional(),outputRef:C.optional(),errorSummary:e.string().min(1).optional(),evidenceRefIds:e.array(e.string().min(1)).default([])}),hi=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),workItemId:e.string().min(1),status:e.enum(["achieved","partial","no_change","regressed","unknown"]),summary:e.string().min(1),objectiveIds:e.array(e.string().min(1)).default([]),memorySnapshotIds:e.array(e.string().min(1)).default([]),cadenceIds:e.array(e.string().min(1)).default([]),receiptIds:e.array(e.string().min(1)).min(1),observedAt:e.string().min(1),sourceRefs:e.array(w).default([])});import{z as Cn}from"zod";var Rn=Cn.enum(["proposed","blocked","needs_approval","approved","rejected","escalated","executed"]),$p=["proposed","blocked","needs_approval","approved","rejected","escalated","executed"],Up=["executed","rejected","escalated"],Wp=Cn.object({from:Rn,to:Rn,reason:Cn.string().min(1).optional(),at:Cn.string().min(1)});import{z}from"zod";var u=C.strict(),Ci=z.object({policyGateRequestRef:u,actionPacketRef:u,routingRuleRef:u,workItemRef:u}).strict(),Qp=z.object({id:z.string().min(1),experimentRef:u,parentExperimentRef:u.optional(),changeSetRef:u,actionPacketRefs:z.array(u).min(1),executionPlanRef:u,executionRunRef:u,outcomeClaimRefs:z.array(u).min(1),approvalDecisionRefs:z.array(u).default([]),policyDecisionRefs:z.array(u).default([]),routingRuleCandidateRef:u,activationAuthorization:Ci.optional(),exportReceiptRef:u,replayBundleRef:u,ownerRef:u,nextStepRef:u,followUpRef:u,costRefs:z.array(u).default([]),coverageRefs:z.array(u).default([]),freshnessRefs:z.array(u).default([]),contradictionRefs:z.array(u).default([]),attributionRefs:z.array(u).default([]),selectionExplanationRefs:z.array(u).default([]),evidenceRefs:z.array(u).min(1),unknownRefs:z.array(u).default([]),versionRef:u,reportRef:u}).strict(),Xp=z.object({envelopeRef:u,branchExperimentRefs:z.array(u).min(1),outcomeClaimRefs:z.array(u).min(1),promotionDecisionRef:u,costRefs:z.array(u).default([]),evidenceRefs:z.array(u).min(1),unknownRefs:z.array(u).default([])}).strict(),Jp=z.object({envelopeRef:u,experimentRef:u,outcomeClaimRefs:z.array(u).min(1),routingRuleCandidateRef:u,approvalDecisionRef:u.optional(),actionPacketRef:u,changeSetRef:u.optional(),actionPacketRefs:z.array(u).default([]),executionPlanRef:u.optional(),executionRunRef:u.optional(),approvalDecisionRefs:z.array(u).default([]),policyDecisionRefs:z.array(u).default([]),activationAuthorization:Ci.optional(),exportReceiptRef:u,replaySummaryRef:u,ownerRef:u,nextStepRef:u,followUpRef:u,costRefs:z.array(u).default([]),coverageRefs:z.array(u).default([]),freshnessRefs:z.array(u).default([]),contradictionRefs:z.array(u).default([]),attributionRefs:z.array(u).default([]),selectionExplanationRefs:z.array(u).default([]),evidenceRefs:z.array(u).min(1),unknownRefs:z.array(u).default([]),versionRef:u,reportRef:u.optional()}).strict();import{z as U}from"zod";var Ri=U.object({id:U.string().min(1),actorRef:Xe,rbacDecisionRef:Je,requestedNodeIds:U.array(U.string().min(1)).min(1),purpose:U.string().min(1),sourceAclRefIds:U.array(U.string().min(1)).min(1),policyRefIds:U.array(U.string().min(1)).default([]),evidenceRefIds:U.array(U.string().min(1)).min(1)}),Si=U.object({id:U.string().min(1),requestId:U.string().min(1),verdict:U.enum(["allow","deny","redacted"]),visibleNodeIds:U.array(U.string().min(1)).default([]),redactedNodeIds:U.array(U.string().min(1)).default([]),redactedFieldRefs:U.array(U.string().min(1)).default([]),failClosed:U.boolean().default(!0),decidedAt:U.string().min(1),evidenceRefIds:U.array(U.string().min(1)).min(1),reasons:U.array(U.string().min(1)).min(1)});import{z as Z}from"zod";var Ii=Z.object({id:Z.string().min(1),cursor:Z.string().min(1),sequence:Z.number().int().nonnegative(),lastEventId:Z.string().min(1),replayRef:Z.string().min(1)}),xi=Z.object({id:Z.string().min(1),snapshotId:Z.string().min(1),operation:Z.enum(["node_upsert","edge_upsert","tombstone","conflict_recorded","permission_projection","runbook_readiness"]),sequence:Z.number().int().nonnegative(),idempotencyKey:Z.string().min(1),roomRef:qe,replayCursor:Ii,nodeId:Z.string().min(1).optional(),edgeId:Z.string().min(1).optional(),occurredAt:Z.string().min(1),evidenceRefIds:Z.array(Z.string().min(1)).min(1)}),rd=Z.object({id:Z.string().min(1),roomRef:qe,snapshotId:Z.string().min(1),cursor:Ii,eventIds:Z.array(Z.string().min(1)).default([]),evidenceRefIds:Z.array(Z.string().min(1)).min(1)});import{z as X}from"zod";var vi=X.object({id:X.string().min(1),leftNodeId:X.string().min(1),rightNodeId:X.string().min(1),entityKind:kn,confidence:X.number().min(0).max(1),reasonCodes:X.array(X.string().min(1)).min(1),evidenceRefIds:X.array(X.string().min(1)).min(1),reviewState:X.enum(["candidate","review_required","approved","rejected"])}),bi=X.object({id:X.string().min(1),candidateId:X.string().min(1),decision:X.enum(["approved","rejected","superseded"]),canonicalNodeId:X.string().min(1).optional(),reviewerPrincipalId:X.string().min(1),reviewedAt:X.string().min(1),reviewEvidenceRefIds:X.array(X.string().min(1)).min(1),destructiveMerge:X.boolean().default(!1),sourceMutationAllowed:X.literal(!1).default(!1)});import{z as b}from"zod";import{z as Se}from"zod";var Un=Se.enum(["none","informational","material","blocking"]),Oi=Se.object({id:Se.string().min(1),question:Se.string().min(1),blockingLevel:Un,relatedRefs:Se.array(C).default([]),evidenceRefIds:Se.array(Se.string().min(1)).default([]),createdAt:Se.string().min(1),resolutionPath:Se.string().min(1).optional(),resolvedByRef:C.optional(),metadata:v.default({})});var ar=b.enum(["follow_up","approval","handoff","review","create_task","no_action"]),rr=b.enum(["draft","policy_evaluated","approval_pending","ready","blocked","approved","rejected","exported","closed"]),sr=b.enum(["not_required","required","pending","approved","rejected","edited","ignored","escalated"]),cr=b.enum(["not_requested","approved_not_sent","queued","exported","failed","cancelled"]),mr=b.enum(["not_recorded","recorded","verified","mismatch","not_replayable"]),pr=b.object({id:b.string().min(1),motionKind:ar,rationale:b.string().min(1),confidence:b.number().min(0).max(1),ruleRefs:b.array(C).default([]),evidenceRefIds:b.array(b.string().min(1)).default([]),unknownRefs:b.array(C).default([]),decidedByRef:C,decidedAt:b.string().min(1)}),dr=b.object({id:b.string().min(1),title:b.string().min(1),summary:b.string().min(1),governedState:Rn,workItemRef:C.optional(),executionPlanRef:C.optional(),evidenceRefIds:b.array(b.string().min(1)).default([])}),lr=b.object({ownerRef:C,nextStep:b.string().min(1),dueAt:b.string().min(1).optional()}),Id=b.object({id:b.string().min(1),createdAt:b.string().min(1),state:rr,signalRef:C,workflowRunRef:C.optional(),entityRefs:b.array(C).default([]),sourceRefs:b.array(w).default([]),sourceRecordRefs:b.array(On).default([]),graphNodes:b.array(_n).default([]),graphEdges:b.array(An).default([]),brainEntryRefs:b.array(En).default([]),brainEditionRef:tn.optional(),motionDecision:pr,actionDrafts:b.array(dr).default([]),actionRefs:b.array(C).default([]),executionPlanRefs:b.array(hn).default([]),policyGateRequestRefs:b.array(yn).default([]),policyGateDecisionRefs:b.array(Le).default([]),dispatchAuthorizationRefs:b.array(un).default([]),policyReplayRefs:b.array(fn).default([]),replayDeterminismRefs:b.array(gn).default([]),evidenceRefIds:b.array(b.string().min(1)).default([]),unknowns:b.array(Oi).default([]),approvalState:sr,exportState:cr.default("not_requested"),replayState:mr.default("not_recorded"),ownerNextStep:lr.optional(),metadata:v.default({})});import{canonicalJsonString as yr}from"@lssm/lib.contracts-spec/rich-reference/canonical-serializer";import{z as ye}from"zod";var ur=ye.enum(["knowledge","document","task","review","communication","manual"]),fr=ye.enum(["none","read_only","dry_run","internal_write","external_write"]),gr=ye.object({id:ye.string().min(1),adapterKind:ur,capabilities:ye.array(ye.string().min(1)).min(1),inputSchemaRef:C,outputSchemaRef:C,sideEffectClass:fr,authRequirement:ye.enum(["none","actor_ref","delegated_authority_ref"]),dryRunSupported:ye.boolean(),approvalRequirement:ye.enum(["not_required","required","reserved_human_only"]),createdAt:ye.string().min(1),metadata:v.default({})}).superRefine((n,o)=>{if((n.sideEffectClass==="internal_write"||n.sideEffectClass==="external_write")&&n.approvalRequirement==="not_required")o.addIssue({code:ye.ZodIssueCode.custom,message:"Write-capable adapters must declare approval requirements.",path:["approvalRequirement"]});if(n.sideEffectClass==="dry_run"&&!n.dryRunSupported)o.addIssue({code:ye.ZodIssueCode.custom,message:"Dry-run adapters must declare dryRunSupported.",path:["dryRunSupported"]})});async function kd(n){let o=gr.parse(n),T=new TextEncoder().encode(yr(o)),pe=await crypto.subtle.digest("SHA-256",T);return`sha256:${Array.from(new Uint8Array(pe),(se)=>se.toString(16).padStart(2,"0")).join("")}`}import{z as N}from"zod";var hr=N.enum(["motionKind","signalType","riskLevel","approvalState","unknownBlockingLevel","adapterKind","companyBrainVersion","tagRef","workflowRefId","entityType"]),Cr=N.enum(["equals","in","exists","includes"]),Rr=N.union([N.string().min(1),N.boolean(),N.array(N.string().min(1)).min(1)]),Sr=/(?:[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}|\+?\d[\d .()\-]{7,}\d|(?:api[_-]?key|secret|token|password|bearer)[:=\s]+\S+)/i;function ki(n){if(typeof n==="string")return Sr.test(n);if(Array.isArray(n))return n.some((o)=>ki(o));return!1}var Ir=N.object({field:hr,operator:Cr,value:Rr.optional()}).superRefine((n,o)=>{if(n.operator!=="exists"&&n.value===void 0)o.addIssue({code:N.ZodIssueCode.custom,message:"Non-exists routing predicates require a value.",path:["value"]});if(n.operator==="exists"&&n.value!==void 0)o.addIssue({code:N.ZodIssueCode.custom,message:"Exists routing predicates must not include a value.",path:["value"]});if(n.operator==="in"&&!Array.isArray(n.value))o.addIssue({code:N.ZodIssueCode.custom,message:"In routing predicates require an array value.",path:["value"]});if(ki(n.value))o.addIssue({code:N.ZodIssueCode.custom,message:"Routing predicate values must not contain PII or secrets.",path:["value"]})}),xr=N.object({workflowRefId:N.string().min(1).optional(),companyBrainVersion:N.string().min(1).optional(),entityTypes:N.array(N.string().min(1)).default([]),global:N.boolean().default(!1)}),vr=N.object({motionKind:N.enum(["follow_up","approval","handoff","review","create_task","no_action"]).optional(),requiredApprovalState:N.enum(["not_required","required","pending","approved","rejected","escalated"]).optional(),targetRef:C.optional(),reason:N.string().min(1)}),Pd=N.object({id:N.string().min(1),scope:xr,predicates:N.array(Ir).min(1),outcome:vr,provenanceRef:C,status:N.enum(["candidate","active","retired","rejected"]),confidence:N.number().min(0).max(1),createdAt:N.string().min(1),expiresAt:N.string().min(1).optional(),reviewRequired:N.boolean().default(!0),unknownBlockingLevel:Un.optional(),metadata:v.default({})}).superRefine((n,o)=>{if(n.status==="active"&&n.reviewRequired)o.addIssue({code:N.ZodIssueCode.custom,message:"Active routing rules require completed human review.",path:["reviewRequired"]});if(!n.scope.global&&!n.scope.workflowRefId&&n.scope.entityTypes.length===0)o.addIssue({code:N.ZodIssueCode.custom,message:"Routing rules require workflow, entity, or reviewed global scope.",path:["scope"]})});import{z as g}from"zod";var Wn=g.enum(["managed","byok"]),br=g.enum(["provider-neutral","provider-gated"]),Or=g.enum(["additive","compatible-behavior","migration-required","breaking"]),kr=g.enum(["package-export","app-entrypoint","api-route","worker-job","websocket-event","workflow-contract","replay-packet","evidence-receipt","health-contract","docs-release"]),De=g.enum(["healthy","degraded","unavailable"]),_r=g.enum(["proposed","approved","denied","blocked"]),Td=g.object({id:g.string().min(1),label:g.string().min(1),ownershipMode:Wn,custodyBoundary:g.enum(["managed_platform","tenant_owned"]),redactedPreview:g.string().min(1),secretMaterialAvailable:g.literal(!1).default(!1),metadata:v.default({})}),qd=g.object({tenantId:g.string().min(1),displayName:g.string().min(1),operatorRoleIds:g.array(g.string().min(1)).min(1),integrationOwnershipModes:g.array(Wn).min(1),metadata:v.default({})}),Ar=g.object({id:g.string().min(1),kind:kr,packageName:g.string().min(1),sourcePath:g.string().min(1),contractSchema:g.string().min(1),compatibilityIntent:Or,providerMode:br,evidenceRefs:g.array(g.string().min(1)).min(1),metadata:v.default({})}),Er=g.object({status:De,api:De,worker:De,websocket:De,replay:De,evidence:De,degradedReasons:g.array(g.string().min(1)).default([]),checkedAt:g.string().min(1)}).superRefine((n,o)=>{let pe=[n.worker,n.websocket,n.replay,n.evidence].some((se)=>se!=="healthy");if(pe&&n.status==="healthy")o.addIssue({code:g.ZodIssueCode.custom,message:"Managed CompanyOS health cannot be green while worker, WebSocket, replay, or evidence state is degraded.",path:["status"]});if(pe&&n.degradedReasons.length===0)o.addIssue({code:g.ZodIssueCode.custom,message:"Managed CompanyOS degraded health requires visible degraded reasons.",path:["degradedReasons"]})}),Bd=g.object({id:g.string().min(1),tenantId:g.string().min(1),correlationId:g.string().min(1),integrationOwnershipMode:Wn,approvalState:_r,policyGateDecisionId:g.string().min(1),workerJobId:g.string().min(1),websocketEventId:g.string().min(1),replayPacketId:g.string().min(1),evidenceReceiptId:g.string().min(1),sourceRefs:g.array(w).default([]),metadata:v.default({})}),Fd=g.object({id:g.string().min(1),type:g.enum(["managed-companyos.job.accepted","managed-companyos.job.progress","managed-companyos.job.completed","managed-companyos.job.failed","managed-companyos.health.degraded"]),tenantId:g.string().min(1),jobId:g.string().min(1),correlationId:g.string().min(1),health:Er.optional(),occurredAt:g.string().min(1),metadata:v.default({})}),Kd=g.object({id:g.string().min(1),tenantId:g.string().min(1),correlationId:g.string().min(1),workflowContractId:g.string().min(1),replayPacketId:g.string().min(1),sourceRefIds:g.array(g.string().min(1)).default([]),policyDecisionCount:g.number().int().min(1),approvalTrailCount:g.number().int().min(0),replayEventCount:g.number().int().min(1),redactionCount:g.number().int().min(0),receiptHash:g.string().min(1),issuedAt:g.string().min(1),metadata:v.default({})}),wr=[{id:"companyos-managed-tenant-profile-contract",kind:"package-export",packageName:"@lssm/lib.companyos-spec",sourcePath:"packages/libs/companyos-spec/src/types/managed-companyos.ts",contractSchema:"CompanyOsManagedTenantProfileSchema",compatibilityIntent:"additive",providerMode:"provider-neutral",evidenceRefs:["packages/libs/companyos-spec/src/companyos-spec.public-surface.test.ts"],metadata:{}},{id:"companyos-managed-credential-ref-contract",kind:"package-export",packageName:"@lssm/lib.companyos-spec",sourcePath:"packages/libs/companyos-spec/src/types/managed-companyos.ts",contractSchema:"CompanyOsManagedCredentialRefSchema",compatibilityIntent:"additive",providerMode:"provider-gated",evidenceRefs:["packages/libs/companyos-spec/src/companyos-spec.public-surface.test.ts"],metadata:{}},{id:"companyos-managed-workflow-correlation-contract",kind:"workflow-contract",packageName:"@lssm/lib.companyos-spec",sourcePath:"packages/libs/companyos-spec/src/types/managed-companyos.ts",contractSchema:"CompanyOsManagedWorkflowContractSchema",compatibilityIntent:"additive",providerMode:"provider-neutral",evidenceRefs:["packages/libs/companyos-spec/src/companyos-spec.public-surface.test.ts"],metadata:{}},{id:"companyos-managed-websocket-event-contract",kind:"websocket-event",packageName:"@lssm/lib.companyos-spec",sourcePath:"packages/libs/companyos-spec/src/types/managed-companyos.ts",contractSchema:"CompanyOsManagedWebSocketEventSchema",compatibilityIntent:"additive",providerMode:"provider-neutral",evidenceRefs:["packages/libs/companyos-spec/src/companyos-spec.public-surface.test.ts"],metadata:{}},{id:"companyos-managed-health-contract",kind:"health-contract",packageName:"@lssm/lib.companyos-spec",sourcePath:"packages/libs/companyos-spec/src/types/managed-companyos.ts",contractSchema:"CompanyOsManagedRuntimeHealthSchema",compatibilityIntent:"additive",providerMode:"provider-neutral",evidenceRefs:["packages/libs/companyos-spec/src/companyos-spec.public-surface.test.ts"],metadata:{}},{id:"companyos-managed-evidence-receipt-contract",kind:"evidence-receipt",packageName:"@lssm/lib.companyos-spec",sourcePath:"packages/libs/companyos-spec/src/types/managed-companyos.ts",contractSchema:"CompanyOsManagedEvidenceReceiptSchema",compatibilityIntent:"additive",providerMode:"provider-neutral",evidenceRefs:["packages/libs/companyos-spec/src/companyos-spec.public-surface.test.ts"],metadata:{}},{id:"companyos-managed-package-export",kind:"package-export",packageName:"@lssm/lib.companyos-spec",sourcePath:"packages/libs/companyos-spec/package.json",contractSchema:"@lssm/lib.companyos-spec/types/managed-companyos",compatibilityIntent:"additive",providerMode:"provider-neutral",evidenceRefs:["packages/libs/companyos-spec/package.json","docs/managed-companyos-s0-contract-inventory.md"],metadata:{}},{id:"companyos-managed-docs-release",kind:"docs-release",packageName:"@lssm/lib.companyos-spec",sourcePath:".changeset/managed-companyos-contract-inventory.release.yaml",contractSchema:"ManagedCompanyOsContractInventoryReleaseCapsule",compatibilityIntent:"additive",providerMode:"provider-neutral",evidenceRefs:[".changeset/managed-companyos-contract-inventory.release.yaml",".contractspec/connect/managed-companyos-s0-inventory-20260515T175000Z.md"],metadata:{}}];function $d(n=wr){return g.array(Ar).parse(n)}import{z as j}from"zod";var _i=j.object({companyKey:j.string().min(1),unitId:j.string().min(1).optional(),customerAccountId:j.string().min(1).optional(),projectId:j.string().min(1).optional()}),Pr=j.object({previousRefId:j.string().min(1),reason:j.string().min(1),supersededAt:j.string().min(1)}),Ai={id:j.string().min(1),title:j.string().min(1),version:j.string().min(1),ownerPrincipalId:j.string().min(1),validFrom:j.string().min(1),validUntil:j.string().min(1).optional(),freshness:j.enum(["fresh","stale","unknown"]),scope:_i,sourceRefs:j.array(w).min(1),supersedes:j.array(Pr).default([])},Ei=j.object({...Ai,kind:j.literal("fact"),statement:j.string().min(1)}),wi=j.object({...Ai,kind:j.enum(["procedure","policy"]),steps:j.array(j.string().min(1)).min(1)}),Pi=j.object({id:j.string().min(1),capturedAt:j.string().min(1),scope:_i,factIds:j.array(j.string().min(1)).default([]),procedureIds:j.array(j.string().min(1)).default([]),decisionIds:j.array(j.string().min(1)).default([]),compactionSummary:j.string().min(1)});import{z as O}from"zod";var ji=O.object({id:O.string().min(1),title:O.string().min(1),ownerPrincipalId:O.string().min(1),horizon:O.enum(["weekly","monthly","quarterly","annual"]),status:O.enum(["active","at_risk","achieved","paused"]),metricIds:O.array(O.string().min(1)).default([]),workItemIds:O.array(O.string().min(1)).default([]),sourceRefs:O.array(w).default([])}),zi=O.object({id:O.string().min(1),objectiveId:O.string().min(1),name:O.string().min(1),ownerPrincipalId:O.string().min(1),unit:O.string().min(1),targetValue:O.number(),currentValue:O.number().optional(),direction:O.enum(["increase","decrease","maintain"]),sourceRefs:O.array(w).default([])}),Li=O.object({id:O.string().min(1),metricId:O.string().min(1),observedAt:O.string().min(1),value:O.number(),sourceRefs:O.array(w).default([])}),Di=O.object({id:O.string().min(1),objectiveId:O.string().min(1),observedAt:O.string().min(1),summary:O.string().min(1),status:O.enum(["improved","flat","regressed","unknown"]),relatedWorkItemIds:O.array(O.string().min(1)).default([])}),Gi=O.object({id:O.string().min(1),objectiveId:O.string().min(1),metricId:O.string().min(1).optional(),severity:O.enum(["low","medium","high"]),summary:O.string().min(1),recommendedActionRefIds:O.array(O.string().min(1)).default([])});import{z as V}from"zod";var jr=V.enum(["landing","home","dashboard","communication-inbox","thread-detail","evidence-map","companyos-work-graph","policy-autonomy-gate","execution-dry-run-console","audit-feedback-loop","starter-kit-guide"]),zr=V.object({screen:jr,label:V.string().min(1),href:V.string().startsWith("#"),description:V.string().min(1)}),Lr=V.object({communicationThreadId:V.string().min(1),communicationActionId:V.string().min(1),companyOsWorkItemId:V.string().min(1),companyOsExecutionPlanId:V.string().min(1),auditEventKey:V.string().min(1)}),Dr=V.object({id:V.string().min(1),label:V.string().min(1),owner:V.enum(["communication-os","companyos","operator"]),status:V.enum(["observed","mapped","gated","dry_run_completed","audited"]),evidenceRefIds:V.array(V.string().min(1)).min(1)}),Gr=V.object({id:V.string().min(1),executionPlanId:V.string().min(1),lane:ze.extract(["dry_run"]),outboundEffects:V.literal(!1),filesystemMutation:V.literal(!1),networkRequired:V.literal(!1),status:V.enum(["ready","completed","blocked"]),summary:V.string().min(1)}),nl=V.object({id:V.string().min(1),version:V.string().min(1),navigation:V.array(zr).min(8),stages:V.array(Dr).min(4),dryRun:Gr,evidenceLinks:V.array(Lr).min(1)});import{z as ae}from"zod";import{z as L}from"zod";var Nr=L.object({id:L.string().min(1),title:L.string().min(1),instruction:L.string().min(1),evidenceRefIds:L.array(L.string().min(1)).min(1)}),Ni=L.object({id:L.string().min(1),nodeId:L.string().min(1),ownerPrincipalId:L.string().min(1),policyGateRequestId:L.string().min(1),steps:L.array(Nr).min(1),freshness:Be,requiredPermissionDecisionIds:L.array(L.string().min(1)).min(1),evidenceRefIds:L.array(L.string().min(1)).min(1)}),Hn=L.object({id:L.string().min(1),procedureId:L.string().min(1),status:L.enum(["ready","blocked","review_required","stale","unauthorized","conflicted"]),evaluatedAt:L.string().min(1),policyGateDecisionId:L.string().min(1),permissionDecisionId:L.string().min(1),blockedReasons:L.array(L.string().min(1)).default([]),evidenceRefIds:L.array(L.string().min(1)).min(1)}),Vi=L.object({id:L.string().min(1),procedureId:L.string().min(1),readinessId:L.string().min(1),expectedStatus:Hn.shape.status,assertion:L.string().min(1),evidenceRefIds:L.array(L.string().min(1)).min(1)});var Mi=ae.object({id:ae.string().min(1),graphSnapshot:pt,identityCandidates:ae.array(vi).default([]),identityLinkDecisions:ae.array(bi).default([]),accessRequests:ae.array(Ri).default([]),accessDecisions:ae.array(Si).default([]),realtimeEvents:ae.array(xi).default([]),runbookProcedures:ae.array(Ni).default([]),runbookReadiness:ae.array(Hn).default([]),runbookConformanceCases:ae.array(Vi).default([]),compiledAgenticArtifacts:ae.array(en).default([]),agenticReadinessChecks:ae.array(dt).default([]),agenticConformanceEvidence:ae.array(lt).default([]),agenticCorrectionOutcomeReceipts:ae.array(yt).default([]),evidenceRefIds:ae.array(ae.string().min(1)).min(1),noProductionWriteAssertion:ae.literal(!0)});import{claimEvidenceSchema as Ti,claimPortableRefSchema as Sn,outcomeClaimSchema as Vr}from"@lssm/lib.contracts-spec/outcome-claims";import{z as D}from"zod";var Ge=D.string().datetime({offset:!0}),Mr="companyos.outcome-ingestion.v1",Tr=D.enum(["reply","call","meeting","crm_activity","deal_outcome"]),qr=D.enum(["positive","negative","neutral","unknown"]),Br=D.object({id:D.string().min(1),reason:D.string().min(1),reviewer:Sn,evidenceRefs:D.array(Ti).min(1),correctedAt:Ge}).strict(),Fr=D.object({id:D.string().min(1),kind:Tr,disposition:qr,label:D.string().min(1),subjectRefs:D.array(Sn).min(1),sourceRefs:D.array(Sn).min(1),evidenceRefs:D.array(Ti).min(1),confidence:D.number().min(0).max(1),occurredAt:Ge,recordedAt:Ge,supersedesObservationIds:D.array(D.string().min(1)).default([]),supersededByObservationIds:D.array(D.string().min(1)).default([]),correction:Br.optional(),unknownRefs:D.array(u).default([])}).strict().superRefine((n,o)=>{if(n.supersedesObservationIds.includes(n.id))o.addIssue({code:"custom",path:["supersedesObservationIds"],message:"an outcome observation cannot supersede itself"});if(n.supersededByObservationIds.includes(n.id))o.addIssue({code:"custom",path:["supersededByObservationIds"],message:"an outcome observation cannot be superseded by itself"});if(n.correction&&n.supersedesObservationIds.length===0)o.addIssue({code:"custom",path:["correction"],message:"a correction must supersede at least one observation"})}),Kr=D.object({id:D.string().min(1),attributionRef:Sn,startsAt:Ge,endsAt:Ge,priority:D.number().int().default(0),subjectRefIds:D.array(D.string().min(1)).default([]),evidenceRefIds:D.array(D.string().min(1)).min(1)}).strict().refine((n)=>Date.parse(n.startsAt)<Date.parse(n.endsAt),{path:["endsAt"],message:"endsAt must be later than startsAt"}),hl=D.object({id:D.string().min(1),schemaVersion:D.literal(Mr),governanceEnvelopeRef:u,learningEnvelopeRef:u,observations:D.array(Fr).min(1),attributionWindows:D.array(Kr).default([]),replayRef:u,createdAt:Ge,noProviderMutation:D.literal(!0)}).strict(),Cl=D.object({observationRef:u,attributionWindowRefs:D.array(u).default([]),outcomeClaim:Vr}).strict();import{z as G}from"zod";var Ae=G.object({id:G.string().min(1),kind:G.string().min(1),status:G.enum(["satisfied","missing","failed","requires_approval"]),evidenceRefIds:G.array(G.string().min(1)).default([])}),$r=Ae.extend({kind:G.literal("authority_evaluation")}),Ur=Ae.extend({kind:G.literal("rbac_evaluation")}),Wr=Ae.extend({kind:G.literal("risk_evaluation"),riskLevel:G.enum(["low","medium","high","critical"])}),Hr=Ae.extend({kind:G.literal("budget_evaluation"),budgetImpacting:G.boolean().default(!1)}),Yr=Ae.extend({kind:G.literal("tool_scope_evaluation"),toolExecution:G.boolean().default(!1)}),Zr=Ae.extend({kind:G.literal("dry_run_proof")}),Qr=Ae.extend({kind:G.literal("approval_workflow")}),Xr=G.object({id:G.string().min(1),kind:G.literal("assurance_packet"),packetId:G.string().min(1)}),Jr=G.object({id:G.string().min(1),mode:G.enum(["deny","operator_review","dry_run_only","manual_record"]),reason:G.string().min(1)}),es=G.object({id:G.string().min(1),decisionId:G.string().min(1),summary:G.string().min(1),blockedReasons:G.array(G.string().min(1)).default([]),fallbackReason:G.string().min(1).optional()}),xl=G.object({id:G.string().min(1),policyGateDecision:Le,authorityRef:$r,rbacRef:Ur,riskRef:Wr,budgetRef:Hr,toolScopeRef:Yr,dryRunProofRef:Zr.optional(),approvalWorkflowRef:Qr.optional(),fallback:Jr.optional(),explanation:es,assurancePacketRef:Xr});import{z as de}from"zod";var qi=de.string().regex(/^sha256:[a-f0-9]{64}$/),kl=de.object({id:de.string().min(1),providerDeclaration:de.object({id:de.string().min(1),version:de.string().regex(/^\d+\.\d+\.\d+$/),fingerprint:qi}),adapterContract:de.object({id:de.string().min(1),fingerprint:qi,inputSchemaRef:C,outputSchemaRef:C}),normalizationContractRef:C,scope:de.object({tenantRef:de.string().min(1),workflowRef:de.string().min(1),policyRefs:de.array(de.string().min(1)).min(1)})});import{z as W}from"zod";var Bi=W.object({id:W.string().min(1),title:W.string().min(1),targetContractRef:W.string().min(1),sourceFeedbackItemIds:W.array(W.string().min(1)).min(1)}),Fi=W.object({id:W.string().min(1),kind:et,title:W.string().min(1),priority:W.enum(["low","medium","high"]),accountableOwnerPrincipalId:W.string().min(1),relatedRefIds:W.array(W.string().min(1)).default([]),requiredApprovalIds:W.array(W.string().min(1)).default([])}),Ki=W.object({id:W.string().min(1),cadence:W.enum(["daily","weekly","monthly"]),summary:W.string().min(1),feedbackItemIds:W.array(W.string().min(1)).default([]),commitmentIdsAtRisk:W.array(W.string().min(1)).default([]),workItemIds:W.array(W.string().min(1)).default([]),recommendedActionIds:W.array(W.string().min(1)).default([])});import{z as P}from"zod";var In=P.string().datetime({offset:!0}),ns=P.discriminatedUnion("kind",[P.object({kind:P.literal("string"),value:P.string()}),P.object({kind:P.literal("number"),value:P.number().finite()}),P.object({kind:P.literal("boolean"),value:P.boolean()}),P.object({kind:P.literal("reference"),value:C})]),ts=P.object({id:P.string().min(1),subjectRef:C,predicate:P.string().min(1),value:ns,canonicalEntityRefs:P.array(C).default([]),sourceRefs:P.array(w).min(1),evidenceRefIds:P.array(P.string().min(1)).min(1),reviewDecisionRefIds:P.array(P.string().min(1)).default([]),observedAt:In,validFrom:In,validTo:In.optional(),recordedAt:In,supersedesClaimIds:P.array(P.string().min(1)).default([]),supersededByClaimIds:P.array(P.string().min(1)).default([]),contradictionGroupRef:P.string().min(1).optional(),conflictRefIds:P.array(P.string().min(1)).default([]),schemaRef:P.string().min(1),version:P.string().min(1),contentFingerprint:P.string().min(1),replayRef:P.string().min(1).optional(),derivedConfidence:P.number().min(0).max(1).optional(),derivedFreshness:P.enum(["fresh","stale","unknown"]).optional(),metadata:v.default({})}).superRefine((n,o)=>{if(n.validTo&&Date.parse(n.validFrom)>=Date.parse(n.validTo))o.addIssue({code:"custom",path:["validTo"],message:"validTo must be later than validFrom for [validFrom, validTo)"});if(n.supersedesClaimIds.includes(n.id))o.addIssue({code:"custom",path:["supersedesClaimIds"],message:"a temporal assertion cannot supersede itself"});if(n.supersededByClaimIds.includes(n.id))o.addIssue({code:"custom",path:["supersededByClaimIds"],message:"a temporal assertion cannot be superseded by itself"})}),zl=P.object({schemaVersion:P.literal("companyos.temporal-assertions.v1"),assertions:P.array(ts).min(1)});var Dl="companyos.temporal-store.v1",Gl="companyos.temporal-store.v1|append,commit,query,erasure-tombstone,conflict,recoverable-fault,port|tenant-bound,opaque-version-token,optimistic-concurrency,idempotency,evidence-outbox,immutable-history",Nl="sha256:4314fca38c29b0ce613089493f8817fee20c6101b634377ee0e0ca32802f84ac";function Vl(n){let o=String(n);if(!/^(0|[1-9]\d*)$/.test(o))throw Error("CompanyOS temporal store version must be a non-negative integer");return o}import{z as k}from"zod";var Yn=k.string().datetime({offset:!0}),$i="companyos.tenant-governance-envelope.v1",Bl="companyos.tenant-governance-envelope.v1|scope,subjectRef,authority,dataGovernance,idempotency,evidenceReplayRefs,governanceState,createdAt,metadata|server-derived-authority,tenant-workspace-subject-idempotency,evidence-replay-required",Fl="sha256:d6f5fd6944c14279351120a212b3580afc4e3781c6ecaea1e89d6d498dc740cf",Kl=["companyos.tenant-governance-envelope.v0"],is=k.enum(["active","migration_required","quarantined"]),os=k.object({tenantId:k.string().min(1),workspaceId:k.string().min(1)}),as=k.object({derivation:k.literal("server_derived"),actorPrincipalId:k.string().min(1),accountableOwnerPrincipalId:k.string().min(1),authorityEvaluationRefId:k.string().min(1),rbacDecisionRefId:k.string().min(1)}),rs=k.object({residencyRegion:k.string().min(1),residencyEvidenceRefIds:k.array(k.string().min(1)).min(1),providerResidencyVerified:k.boolean(),retentionPolicyRefId:k.string().min(1),retainUntil:Yn,legalBasis:k.enum(["contract","legal_obligation","legitimate_interest","consent"]),consentRefId:k.string().min(1).optional()}).superRefine((n,o)=>{if(n.legalBasis==="consent"&&!n.consentRefId)o.addIssue({code:"custom",path:["consentRefId"],message:"consent legal basis requires a consent reference"})}),ss=k.object({key:k.string().min(1),scope:k.literal("tenant_workspace_subject"),tenantId:k.string().min(1),workspaceId:k.string().min(1),subjectRefId:k.string().min(1)}),cs=k.object({evidenceReceiptIds:k.array(k.string().min(1)).min(1),replayPacketIds:k.array(k.string().min(1)).min(1)}),$l=k.object({id:k.string().min(1),schemaVersion:k.literal($i),policyVersion:k.string().min(1),scope:os,subjectRef:C,authority:as,dataGovernance:rs,idempotency:ss,evidenceReplayRefs:cs,governanceState:k.literal("active"),createdAt:Yn,metadata:v.default({})}).superRefine((n,o)=>{let T={tenantId:n.scope.tenantId,workspaceId:n.scope.workspaceId,subjectRefId:n.subjectRef.id};for(let[pe,se]of Object.entries(T))if(n.idempotency[pe]!==se)o.addIssue({code:"custom",path:["idempotency",pe],message:`${pe} must match the governed envelope scope`})}),Ul=k.object({envelopeId:k.string().min(1).optional(),sourceSchemaVersion:k.string().min(1).optional(),targetSchemaVersion:k.literal($i),state:is,reasonCodes:k.array(k.string().min(1)).min(1),migrationPerformed:k.literal(!1),persistenceMutationAllowed:k.literal(!1),assessedAt:Yn});import{z as Ne}from"zod";import{WorkObjectRefSchema as ms}from"@lssm/lib.work-spec";import{z as H}from"zod";var ps=H.object({id:H.string().min(1),summary:H.string().min(1),customerAccountId:H.string().min(1),productArea:H.string().min(1),impact:H.enum(["low","medium","high"]),sourceRefs:H.array(w).min(1)}),ds=H.object({id:H.string().min(1),summary:H.string().min(1),customerAccountId:H.string().min(1),dueDate:H.string().min(1),accountableOwnerPrincipalId:H.string().min(1),sourceRefs:H.array(w).min(1)}),ls=H.object({id:H.string().min(1),summary:H.string().min(1),status:H.enum(["candidate","approved","rejected"]),ownerPrincipalId:H.string().min(1),sourceRefs:H.array(w).default([])}),Ui=H.object({id:H.string().min(1),feedbackItems:H.array(ps).default([]),commitments:H.array(ds).default([]),decisions:H.array(ls).default([]),workRefs:H.array(ms).default([])});var Wi=Ne.object({company:xt,authority:ut,autonomyPolicy:ft,connectors:Ne.array(Xt).min(1),brain:Ct,workGraph:Ui,proposalLinks:Ne.array(Bi).default([]),agentActionProposals:Ne.array(gt).default([]),autonomyDecisions:Ne.array(nn).default([]),operatorInbox:Ne.array(Fi).default([]),operatingReview:Ki});import{z as M}from"zod";var gy=Wi.extend({objectives:M.array(ji).min(1),metrics:M.array(zi).default([]),metricObservations:M.array(Li).default([]),objectiveOutcomes:M.array(Di).default([]),objectiveDriftSignals:M.array(Gi).default([]),memorySnapshots:M.array(Pi).min(1),memoryFacts:M.array(Ei).default([]),memoryProcedures:M.array(wi).default([]),cadences:M.array(Rt).min(1),reviewInputSets:M.array(St).default([]),reviewOutputPlans:M.array(It).default([]),agentRoles:M.array(ot).min(1),agentTeams:M.array(at).default([]),delegationRules:M.array(rt).default([]),handoffPolicies:M.array(st).default([]),conflictResolutionPolicies:M.array(ct).default([]),toolAssignments:M.array(it).default([]),agentNativeOperations:M.array(nt).default([]),agentToolDescriptors:M.array(tt).default([]),surfaceProfiles:M.array(ci).default([]),executionPlans:M.array(hn).default([]),executionClaims:M.array(li).default([]),policyGateRequests:M.array(yn).default([]),policyGateDecisions:M.array(Le).default([]),executionDispatches:M.array(yi).default([]),executionDispatchAuthorizations:M.array(un).default([]),operatorInboxRoutes:M.array(ui).default([]),policyReplayPackets:M.array(fn).default([]),replayDeterminismCases:M.array(gn).default([]),executionReceipts:M.array(gi).default([]),outcomeReceipts:M.array(hi).default([]),outcomeLinkages:M.array(fi).default([])});function Iu(n){let o=Mi.safeParse(n);if(!o.success)return o.error.issues.map((T)=>T.message);return ys(o.data)}function ys(n){let o=[],T=n.graphSnapshot,pe=new Set(T.sourceSystems.map((t)=>t.id)),se=new Set(T.sourceRecords.map((t)=>t.id)),re=new Set(T.nodes.map((t)=>t.id)),Ve=new Set(T.edges.map((t)=>t.id)),Me=new Set(T.conflicts.map((t)=>t.id)),Ye=new Set(n.accessRequests.map((t)=>t.id)),Ze=new Set(n.accessDecisions.map((t)=>t.id)),Zn=new Set(n.identityCandidates.map((t)=>t.id)),xn=new Set(n.runbookProcedures.map((t)=>t.id)),Hi=new Set(n.runbookConformanceCases.map((t)=>t.id)),Qn=new Set(n.runbookReadiness.map((t)=>t.id)),vn=new Set(n.compiledAgenticArtifacts.map((t)=>t.id)),Yi=new Set(n.agenticReadinessChecks.map((t)=>t.id)),Zi=new Set(n.agenticConformanceEvidence.map((t)=>t.id));for(let t of T.sourceRecords)if(!pe.has(t.sourceSystemId))o.push(`Source record ${t.id} references unknown source system ${t.sourceSystemId}.`);for(let t of T.nodes){for(let q of t.sourceRecordRefIds)if(!se.has(q))o.push(`Graph node ${t.id} references unknown source record ${q}.`);if(t.tombstone?.supersededByNodeId&&!t.tombstone.reason)o.push(`Graph node ${t.id} has invalid tombstone metadata.`);for(let q of t.conflictRefIds)if(!Me.has(q))o.push(`Graph node ${t.id} references unknown conflict ${q}.`)}for(let t of T.edges){if(!re.has(t.fromNodeId)||!re.has(t.toNodeId))o.push(`Graph edge ${t.id} must connect known nodes.`);for(let q of t.sourceRecordRefIds)if(!se.has(q))o.push(`Graph edge ${t.id} references unknown source record ${q}.`)}for(let t of T.conflicts){if(!re.has(t.subjectNodeId))o.push(`Graph conflict ${t.id} references unknown subject node.`);for(let q of t.conflictingNodeIds)if(!re.has(q))o.push(`Graph conflict ${t.id} references unknown node.`);for(let q of t.conflictingRecordRefIds)if(!se.has(q))o.push(`Graph conflict ${t.id} references unknown source record.`)}for(let t of n.identityCandidates){if(!re.has(t.leftNodeId)||!re.has(t.rightNodeId))o.push(`Identity candidate ${t.id} must reference known nodes.`);if(t.confidence<0.9&&t.reviewState!=="review_required")o.push(`Identity candidate ${t.id} below confidence threshold must require review.`)}for(let t of n.identityLinkDecisions){if(!Zn.has(t.candidateId))o.push(`Identity decision ${t.id} references unknown candidate ${t.candidateId}.`);if(t.canonicalNodeId&&!re.has(t.canonicalNodeId))o.push(`Identity decision ${t.id} references unknown canonical node.`);if(t.destructiveMerge||t.sourceMutationAllowed)o.push(`Identity decision ${t.id} cannot mutate sources or destructive-merge identities.`)}for(let t of n.accessRequests){for(let q of t.requestedNodeIds)if(!re.has(q))o.push(`Access request ${t.id} references unknown node.`);if(t.rbacDecisionRef.verdict!=="allow")o.push(`Access request ${t.id} must carry an allow RBAC ref.`)}for(let t of n.accessDecisions){if(!Ye.has(t.requestId))o.push(`Access decision ${t.id} references unknown request.`);if(t.verdict!=="allow"&&!t.failClosed)o.push(`Access decision ${t.id} must fail closed.`);for(let q of[...t.visibleNodeIds,...t.redactedNodeIds])if(!re.has(q))o.push(`Access decision ${t.id} references unknown node.`)}for(let t of n.realtimeEvents){if(t.snapshotId!==T.id)o.push(`Realtime event ${t.id} references unknown snapshot.`);if(t.nodeId&&!re.has(t.nodeId))o.push(`Realtime event ${t.id} references unknown node.`);if(t.edgeId&&!Ve.has(t.edgeId))o.push(`Realtime event ${t.id} references unknown edge.`);if(t.replayCursor.sequence>t.sequence)o.push(`Realtime event ${t.id} has a cursor beyond the event.`)}for(let t of n.runbookProcedures){if(!re.has(t.nodeId))o.push(`Runbook procedure ${t.id} references unknown node.`);for(let q of t.requiredPermissionDecisionIds)if(!Ze.has(q))o.push(`Runbook procedure ${t.id} references unknown permission decision.`)}for(let t of n.runbookReadiness){if(!xn.has(t.procedureId))o.push(`Runbook readiness ${t.id} references unknown procedure.`);if(!Ze.has(t.permissionDecisionId))o.push(`Runbook readiness ${t.id} references unknown permission decision.`);if(t.status!=="ready"&&t.blockedReasons.length===0)o.push(`Runbook readiness ${t.id} must explain non-ready status.`)}for(let t of n.runbookConformanceCases){if(!xn.has(t.procedureId))o.push(`Runbook conformance case ${t.id} references unknown procedure.`);if(!Qn.has(t.readinessId))o.push(`Runbook conformance case ${t.id} references unknown readiness.`)}for(let t of n.compiledAgenticArtifacts){if(!xn.has(t.runbookProcedureId))o.push(`Compiled agentic artifact ${t.id} references unknown runbook procedure.`);for(let q of t.sourceRecordRefIds)if(!se.has(q))o.push(`Compiled agentic artifact ${t.id} references unknown source record.`);for(let q of t.identityDecisionIds)if(!Zn.has(q)&&!n.identityLinkDecisions.some((Qi)=>Qi.id===q))o.push(`Compiled agentic artifact ${t.id} references unknown identity decision.`);for(let q of t.accessDecisionIds)if(!Ze.has(q))o.push(`Compiled agentic artifact ${t.id} references unknown access decision.`);if(t.freshness.status!=="fresh")o.push(`Compiled agentic artifact ${t.id} must compile from fresh graph evidence.`)}for(let t of n.agenticReadinessChecks){if(!vn.has(t.compiledArtifactId))o.push(`Agentic readiness check ${t.id} references unknown compiled artifact.`);if(!Qn.has(t.runbookReadinessId))o.push(`Agentic readiness check ${t.id} references unknown runbook readiness.`);for(let q of t.sourceRecordRefIds)if(!se.has(q))o.push(`Agentic readiness check ${t.id} references unknown source record.`);for(let q of t.accessDecisionIds)if(!Ze.has(q))o.push(`Agentic readiness check ${t.id} references unknown access decision.`)}for(let t of n.agenticConformanceEvidence){if(!vn.has(t.compiledArtifactId))o.push(`Agentic conformance evidence ${t.id} references unknown compiled artifact.`);if(!Yi.has(t.readinessCheckId))o.push(`Agentic conformance evidence ${t.id} references unknown agentic readiness check.`);if(!Hi.has(t.runbookConformanceCaseId))o.push(`Agentic conformance evidence ${t.id} references unknown runbook conformance case.`)}for(let t of n.agenticCorrectionOutcomeReceipts){if(!vn.has(t.compiledArtifactId))o.push(`Agentic correction receipt ${t.id} references unknown compiled artifact.`);if(!Zi.has(t.conformanceEvidenceId))o.push(`Agentic correction receipt ${t.id} references unknown conformance evidence.`)}return o}export{Iu as validateCompanyOsOperatingGraphContractPacket,ys as validateCompanyOsOperatingGraphSemanticInvariants};

package/dist/browser/validation/semantic-v1-agents.js

@@ -0,0 +1 @@
+var m=new Map([["observe_only",0],["draft_only",1],["recommend",2],["execute_with_approval",3],["execute_within_limits",4],["fully_autonomous_bounded",5],["reserved_human_only",6]]);function g(o){return new Set(o.authority.principals.map((t)=>t.id))}function i(o,t,r,c,a){if(!o.has(t))r.push(`CompanyOS ${c} ${a} must reference a known id.`)}function d(o){return m.get(o)??Number.POSITIVE_INFINITY}function v(o){let t=g(o),r=new Set(o.connectors.map((n)=>n.id)),c=new Set(o.agentRoles.map((n)=>n.id)),a=new Set(o.agentTeams.map((n)=>n.id)),e=new Set(o.delegationRules.map((n)=>n.id)),p=new Set(o.toolAssignments.map((n)=>n.id)),s=[];for(let n of o.agentRoles){i(t,n.principalId,s,"agent role principal",n.id),i(t,n.accountableOwnerPrincipalId,s,"agent role owner",n.id);for(let l of n.escalationPrincipalIds)i(t,l,s,"agent role escalation",n.id);for(let l of n.toolAssignmentIds)i(p,l,s,"agent role tool assignment",n.id)}for(let n of o.agentTeams){i(c,n.managerRoleId,s,"agent team manager",n.id);for(let l of n.roleIds)i(c,l,s,"agent team role",n.id)}for(let n of o.delegationRules)f(o,c,t,n.id,s);for(let n of o.toolAssignments)if(n.connectorCapabilityId)i(r,n.connectorCapabilityId,s,"tool assignment connector",n.id);for(let n of o.handoffPolicies)i(e,n.delegationRuleId,s,"handoff delegation",n.id);for(let n of o.conflictResolutionPolicies){i(a,n.teamId,s,"conflict team",n.id),i(t,n.resolverPrincipalId,s,"conflict resolver",n.id);for(let l of n.escalationPrincipalIds)i(t,l,s,"conflict escalation",n.id)}return s}function O(o){let t=g(o),r=new Set(o.agentRoles.map((e)=>e.id)),c=new Set(o.agentNativeOperations.map((e)=>e.id)),a=[];for(let e of o.agentNativeOperations){if(!r.has(e.agentRoleId))a.push(`Agent-native operation ${e.id} must reference a role.`);if(i(t,e.accountableOwnerPrincipalId,a,"operation owner",e.id),I(e))a.push(`Agent-native execute operation ${e.id} must require dry-run and approval.`);if(d(e.autonomyCeiling)>d("execute_with_approval"))a.push(`Agent-native operation ${e.id} cannot exceed execute_with_approval in V1.`)}for(let e of o.agentToolDescriptors)i(c,e.operationId,a,"agent tool operation",e.id);for(let e of o.surfaceProfiles){i(r,e.roleId,a,"surface role",e.id);for(let p of e.primaryActionOperationIds)i(c,p,a,"surface primary operation",e.id)}return a}function f(o,t,r,c,a){let e=o.delegationRules.find((n)=>n.id===c);if(!e)return;if(!t.has(e.fromRoleId)||!t.has(e.toRoleId))a.push(`Agent delegation ${e.id} must reference known roles.`);let p=o.agentRoles.find((n)=>n.id===e.fromRoleId),s=o.agentRoles.find((n)=>n.id===e.toRoleId);if(p&&s&&u(e.maxAutonomyLevel,p.maxAutonomyLevel,s.maxAutonomyLevel))a.push(`Agent delegation ${e.id} cannot exceed role autonomy ceilings.`);i(r,e.escalationPrincipalId,a,"delegation escalation",e.id)}function u(o,t,r){return d(o)>d(t)||d(o)>d(r)}function I(o){return o.mode==="execute"&&(!o.dryRunPolicy.required||!o.dryRunPolicy.approvalRequiredForExecute)}export{O as validateAgentNativeOperations,v as validateAgentOrgRefs};

package/dist/browser/validation/semantic-v1-cadence.js

@@ -0,0 +1 @@
+var v=new Map([["observe_only",0],["draft_only",1],["recommend",2],["execute_with_approval",3],["execute_within_limits",4],["fully_autonomous_bounded",5],["reserved_human_only",6]]);function p(n){return new Set(n.authority.principals.map((s)=>s.id))}function i(n,s,r,c,d){if(!n.has(s))r.push(`CompanyOS ${c} ${d} must reference a known id.`)}function g(n){return v.get(n)??Number.POSITIVE_INFINITY}function k(n){let s=p(n),r=new Set(n.cadences.map((o)=>o.id)),c=new Set(n.workGraph.feedbackItems.map((o)=>o.id)),d=new Set(n.workGraph.commitments.map((o)=>o.id)),a=new Set(n.workGraph.workRefs.map((o)=>o.id)),m=new Set(n.workGraph.decisions.map((o)=>o.id)),I=new Set(n.objectives.map((o)=>o.id)),w=new Set(n.memorySnapshots.map((o)=>o.id)),u=new Set(n.agentActionProposals.map((o)=>o.id)),f=new Set(n.operatorInbox.map((o)=>o.id)),t=[];for(let o of n.cadences){for(let e of o.participantPrincipalIds)i(s,e,t,"cadence participant",o.id);for(let e of o.escalationPrincipalIds)i(s,e,t,"cadence escalation",o.id)}for(let o of n.reviewInputSets){i(r,o.cadenceId,t,"review input cadence",o.id);for(let e of o.feedbackItemIds)i(c,e,t,"review input feedback",o.id);for(let e of o.commitmentIds)i(d,e,t,"review input commitment",o.id);for(let e of o.workItemIds)i(a,e,t,"review input work item",o.id);for(let e of o.objectiveIds)i(I,e,t,"review input objective",o.id);for(let e of o.memorySnapshotIds)i(w,e,t,"review input memory",o.id)}for(let o of n.reviewOutputPlans){i(r,o.cadenceId,t,"review output cadence",o.id);for(let e of o.decisionIds)i(m,e,t,"review output decision",o.id);for(let e of o.workItemIds)i(a,e,t,"review output work item",o.id);for(let e of o.actionProposalIds)i(u,e,t,"review output action proposal",o.id);for(let e of o.inboxItemIds)i(f,e,t,"review output inbox item",o.id)}return t}export{k as validateCadenceRefs};

package/dist/browser/validation/semantic-v1-execution-refs.js

@@ -0,0 +1 @@
+var c=new Set(["claimed","policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]),r=new Set(["policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]);var d=new Map([["observe_only",0],["draft_only",1],["recommend",2],["execute_with_approval",3],["execute_within_limits",4],["fully_autonomous_bounded",5],["reserved_human_only",6]]);function I(t){return new Set(t.authority.principals.map((i)=>i.id))}function o(t,i,n,e,a){if(!t.has(i))n.push(`CompanyOS ${e} ${a} must reference a known id.`)}function y(t){return d.get(t)??Number.POSITIVE_INFINITY}function h(t,i,n){p(t,i,n),l(t,i,n),u(t,i,n)}function p(t,i,n){for(let e of t.executionPlans){if(o(n.workItemIds,e.workItemId,i,"execution work item",e.id),o(n.principalIds,e.accountableOwnerPrincipalId,i,"execution owner",e.id),o(n.requestIds,e.policyGateRequestId,i,"execution policy gate request",e.id),c.has(e.lifecycleState)&&!e.claimId)i.push(`CompanyOS execution plan ${e.id} requires a claim.`);if(!r.has(e.lifecycleState))continue;if(!e.policyGateDecisionId){i.push(`CompanyOS execution plan ${e.id} requires a policy gate decision.`);continue}o(n.decisionIds,e.policyGateDecisionId,i,"execution policy gate decision",e.id)}s(t,i,n)}function s(t,i,n){for(let e of t.executionPlans){for(let a of e.dispatchIds)o(n.dispatchIds,a,i,"execution dispatch",e.id);for(let a of e.receiptIds)o(n.receiptIds,a,i,"execution receipt",e.id)}}function l(t,i,n){for(let e of t.executionClaims)o(n.planIds,e.executionPlanId,i,"execution claim plan",e.id),o(n.workItemIds,e.workItemId,i,"execution claim work item",e.id),o(n.principalIds,e.claimantPrincipalId,i,"execution claim principal",e.id),o(n.principalIds,e.accountableOwnerPrincipalId,i,"execution claim owner",e.id)}function u(t,i,n){for(let e of t.policyGateRequests)o(n.planIds,e.executionPlanId,i,"policy gate plan",e.id),o(n.workItemIds,e.workItemId,i,"policy gate work item",e.id),o(n.autonomyDecisionIds,e.autonomyDecisionId,i,"policy gate autonomy decision",e.id);for(let e of t.policyGateDecisions){if(!n.autonomyDecisionIds.has(e.autonomyDecision.id))i.push(`CompanyOS policy gate ${e.id} must wrap an existing autonomy decision.`);if(["approval_required","reserved_human_only"].includes(e.verdict)&&e.requiredApprovalIds.length===0)i.push(`CompanyOS policy gate ${e.id} requires approval evidence.`);if(e.verdict==="reserved_human_only"&&e.approvedDispatchLane)i.push(`CompanyOS policy gate ${e.id} cannot dispatch reserved-human-only work.`)}}export{h as validateExecutionPlanRefs};

package/dist/browser/validation/semantic-v1-execution-results.js

@@ -0,0 +1 @@
+var r=new Map([["observe_only",0],["draft_only",1],["recommend",2],["execute_with_approval",3],["execute_within_limits",4],["fully_autonomous_bounded",5],["reserved_human_only",6]]);function g(a){return new Set(a.authority.principals.map((t)=>t.id))}function p(a,t,o,i,e){if(!a.has(t))o.push(`CompanyOS ${i} ${e} must reference a known id.`)}function O(a){return r.get(a)??Number.POSITIVE_INFINITY}function C(a,t,o){s(a,t,o),l(a,t,o),m(a,t,o),u(a,t,o),y(a,t,o),h(a,t,o),I(a,t,o),f(a,t)}function s(a,t,o){let i=new Map(a.policyGateDecisions.map((e)=>[e.id,e]));for(let e of a.executionDispatchAuthorizations){if(p(o.planIds,e.executionPlanId,t,"dispatch authorization plan",e.id),e.dispatchId)p(o.dispatchIds,e.dispatchId,t,"dispatch authorization dispatch",e.id);if(e.policyGateRequestId)p(o.requestIds,e.policyGateRequestId,t,"dispatch authorization policy gate request",e.id);if(p(o.decisionIds,e.policyGateDecisionId,t,"dispatch authorization policy gate decision",e.id),p(o.principalIds,e.accountableOwnerPrincipalId,t,"dispatch authorization accountable owner",e.id),e.authorizedByPrincipalId)p(o.principalIds,e.authorizedByPrincipalId,t,"dispatch authorization principal",e.id);if(!e.asOf)t.push(`CompanyOS dispatch authorization ${e.id} requires asOf policy time.`);if(e.executionClaimId)p(o.claimIds,e.executionClaimId,t,"dispatch authorization claim",e.id);let n=i.get(e.policyGateDecisionId);if(!n)continue;if(e.authorizedLane!=="dry_run"){if(n.verdict!=="allow")t.push(`CompanyOS dispatch authorization ${e.id} cannot authorize ${e.authorizedLane} for policy verdict ${n.verdict}.`);if(n.approvedDispatchLane!==e.authorizedLane)t.push(`CompanyOS dispatch authorization ${e.id} must match the approved dispatch lane.`)}if(e.authorizedLane==="dry_run"&&e.dryRunProofRefIds.length===0&&e.verdict!=="denied")t.push(`CompanyOS dispatch authorization ${e.id} requires dry-run proof refs for dry_run lane.`);if(e.verdict==="denied"&&!e.failure)t.push(`CompanyOS dispatch authorization ${e.id} requires failure details when denied.`);if(e.verdict!=="denied"&&e.failure)t.push(`CompanyOS dispatch authorization ${e.id} must not carry failure details when authorized.`)}}function l(a,t,o){for(let i of a.operatorInboxRoutes){if(p(o.planIds,i.executionPlanId,t,"operator inbox route plan",i.id),i.authorizationId)p(o.authorizationIds,i.authorizationId,t,"operator inbox route authorization",i.id);for(let e of i.requiredPrincipalIds)p(o.principalIds,e,t,"operator inbox route principal",i.id)}}function m(a,t,o){for(let i of a.policyReplayPackets){if(!i.asOf)t.push(`CompanyOS policy replay packet ${i.id} requires asOf replay time.`);if(p(o.planIds,i.executionPlanId,t,"policy replay plan",i.id),p(o.requestIds,i.policyGateRequestId,t,"policy replay request",i.id),i.policyGateDecisionId)p(o.decisionIds,i.policyGateDecisionId,t,"policy replay decision",i.id);if(i.authorizationId)p(o.authorizationIds,i.authorizationId,t,"policy replay authorization",i.id);if(i.sourceEvidenceRefs.some((e)=>e.authorizationAuthority!==!1))t.push(`CompanyOS policy replay packet ${i.id} includes source evidence with authorization authority.`)}}function u(a,t,o){let i=new Map(a.policyReplayPackets.map((e)=>[e.id,e]));for(let e of a.replayDeterminismCases){if(p(o.replayPacketIds,e.replayPacketId,t,"replay determinism packet",e.id),p(o.planIds,e.executionPlanId,t,"replay determinism plan",e.id),!e.asOf)t.push(`CompanyOS replay determinism case ${e.id} requires asOf replay time.`);let n=i.get(e.replayPacketId);if(n?.asOf&&e.asOf&&n.asOf!==e.asOf)t.push(`CompanyOS replay determinism case ${e.id} must use the policy replay packet asOf time.`);if(e.status==="pass"&&e.actualOutputHash!==e.expectedOutputHash)t.push(`CompanyOS replay determinism case ${e.id} must match expected and actual output hashes when passing.`);if(e.status==="fail"&&!e.varianceReason)t.push(`CompanyOS replay determinism case ${e.id} requires a variance reason when failing.`)}}function y(a,t,o){let i=new Map(a.executionPlans.map((n)=>[n.id,n])),e=new Set(a.executionReceipts.map((n)=>n.dispatchId));for(let n of a.executionDispatches){if(p(o.planIds,n.executionPlanId,t,"dispatch plan",n.id),n.requiresReceipt&&!e.has(n.id))t.push(`CompanyOS dispatch ${n.id} requires an execution receipt.`);let c=i.get(n.executionPlanId);if(c&&n.idempotencyKey!==c.idempotency.key)t.push(`CompanyOS dispatch ${n.id} must reuse its plan idempotency key.`)}for(let n of a.executionReceipts){p(o.planIds,n.executionPlanId,t,"receipt plan",n.id),p(o.dispatchIds,n.dispatchId,t,"receipt dispatch",n.id);let c=i.get(n.executionPlanId);if(c&&n.idempotencyKey!==c.idempotency.key)t.push(`CompanyOS receipt ${n.id} must reuse its plan idempotency key.`)}}function h(a,t,o){let i=new Set(a.objectives.map((c)=>c.id)),e=new Set(a.memorySnapshots.map((c)=>c.id)),n=new Set(a.cadences.map((c)=>c.id));for(let c of a.outcomeReceipts){p(o.planIds,c.executionPlanId,t,"outcome plan",c.id),p(o.workItemIds,c.workItemId,t,"outcome work item",c.id);for(let d of c.receiptIds)p(o.receiptIds,d,t,"outcome receipt",c.id);for(let d of c.objectiveIds)p(i,d,t,"outcome objective",c.id);for(let d of c.memorySnapshotIds)p(e,d,t,"outcome memory",c.id);for(let d of c.cadenceIds)p(n,d,t,"outcome cadence",c.id)}}function I(a,t,o){for(let i of a.outcomeLinkages){if(p(o.planIds,i.executionPlanId,t,"outcome linkage plan",i.id),i.dispatchId)p(o.dispatchIds,i.dispatchId,t,"outcome linkage dispatch",i.id);p(o.outcomeReceiptIds,i.outcomeReceiptId,t,"outcome linkage receipt",i.id);for(let e of i.receiptIds)p(o.receiptIds,e,t,"outcome linkage execution receipt",i.id);if(i.status==="linked"&&i.receiptIds.length===0)t.push(`CompanyOS outcome linkage ${i.id} requires execution receipts when linked.`)}}function f(a,t){let o=new Map;for(let i of a.executionPlans){let e=o.get(i.idempotency.dedupeKey);if(e&&i.idempotency.strategy==="reject_duplicate")t.push(`CompanyOS execution plan ${i.id} duplicates dedupe key from ${e}.`);o.set(i.idempotency.dedupeKey,i.id)}}export{C as validateExecutionResultRefs};

package/dist/browser/validation/semantic-v1-execution-shared.js

@@ -0,0 +1 @@
+var e=new Set(["claimed","policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]),t=new Set(["policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]);export{e as statesRequiringClaim,t as statesRequiringDecision};

package/dist/browser/validation/semantic-v1-execution.js

@@ -0,0 +1 @@
+var r=new Set(["claimed","policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]),s=new Set(["policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]);var y=new Map([["observe_only",0],["draft_only",1],["recommend",2],["execute_with_approval",3],["execute_within_limits",4],["fully_autonomous_bounded",5],["reserved_human_only",6]]);function l(n){return new Set(n.authority.principals.map((i)=>i.id))}function a(n,i,o,e,t){if(!n.has(i))o.push(`CompanyOS ${e} ${t} must reference a known id.`)}function q(n){return y.get(n)??Number.POSITIVE_INFINITY}function m(n,i,o){I(n,i,o),f(n,i,o),g(n,i,o)}function I(n,i,o){for(let e of n.executionPlans){if(a(o.workItemIds,e.workItemId,i,"execution work item",e.id),a(o.principalIds,e.accountableOwnerPrincipalId,i,"execution owner",e.id),a(o.requestIds,e.policyGateRequestId,i,"execution policy gate request",e.id),r.has(e.lifecycleState)&&!e.claimId)i.push(`CompanyOS execution plan ${e.id} requires a claim.`);if(!s.has(e.lifecycleState))continue;if(!e.policyGateDecisionId){i.push(`CompanyOS execution plan ${e.id} requires a policy gate decision.`);continue}a(o.decisionIds,e.policyGateDecisionId,i,"execution policy gate decision",e.id)}h(n,i,o)}function h(n,i,o){for(let e of n.executionPlans){for(let t of e.dispatchIds)a(o.dispatchIds,t,i,"execution dispatch",e.id);for(let t of e.receiptIds)a(o.receiptIds,t,i,"execution receipt",e.id)}}function f(n,i,o){for(let e of n.executionClaims)a(o.planIds,e.executionPlanId,i,"execution claim plan",e.id),a(o.workItemIds,e.workItemId,i,"execution claim work item",e.id),a(o.principalIds,e.claimantPrincipalId,i,"execution claim principal",e.id),a(o.principalIds,e.accountableOwnerPrincipalId,i,"execution claim owner",e.id)}function g(n,i,o){for(let e of n.policyGateRequests)a(o.planIds,e.executionPlanId,i,"policy gate plan",e.id),a(o.workItemIds,e.workItemId,i,"policy gate work item",e.id),a(o.autonomyDecisionIds,e.autonomyDecisionId,i,"policy gate autonomy decision",e.id);for(let e of n.policyGateDecisions){if(!o.autonomyDecisionIds.has(e.autonomyDecision.id))i.push(`CompanyOS policy gate ${e.id} must wrap an existing autonomy decision.`);if(["approval_required","reserved_human_only"].includes(e.verdict)&&e.requiredApprovalIds.length===0)i.push(`CompanyOS policy gate ${e.id} requires approval evidence.`);if(e.verdict==="reserved_human_only"&&e.approvedDispatchLane)i.push(`CompanyOS policy gate ${e.id} cannot dispatch reserved-human-only work.`)}}function u(n,i,o){O(n,i,o),S(n,i,o),v(n,i,o),w(n,i,o),x(n,i,o),C(n,i,o),k(n,i,o),P(n,i)}function O(n,i,o){let e=new Map(n.policyGateDecisions.map((t)=>[t.id,t]));for(let t of n.executionDispatchAuthorizations){if(a(o.planIds,t.executionPlanId,i,"dispatch authorization plan",t.id),t.dispatchId)a(o.dispatchIds,t.dispatchId,i,"dispatch authorization dispatch",t.id);if(t.policyGateRequestId)a(o.requestIds,t.policyGateRequestId,i,"dispatch authorization policy gate request",t.id);if(a(o.decisionIds,t.policyGateDecisionId,i,"dispatch authorization policy gate decision",t.id),a(o.principalIds,t.accountableOwnerPrincipalId,i,"dispatch authorization accountable owner",t.id),t.authorizedByPrincipalId)a(o.principalIds,t.authorizedByPrincipalId,i,"dispatch authorization principal",t.id);if(!t.asOf)i.push(`CompanyOS dispatch authorization ${t.id} requires asOf policy time.`);if(t.executionClaimId)a(o.claimIds,t.executionClaimId,i,"dispatch authorization claim",t.id);let c=e.get(t.policyGateDecisionId);if(!c)continue;if(t.authorizedLane!=="dry_run"){if(c.verdict!=="allow")i.push(`CompanyOS dispatch authorization ${t.id} cannot authorize ${t.authorizedLane} for policy verdict ${c.verdict}.`);if(c.approvedDispatchLane!==t.authorizedLane)i.push(`CompanyOS dispatch authorization ${t.id} must match the approved dispatch lane.`)}if(t.authorizedLane==="dry_run"&&t.dryRunProofRefIds.length===0&&t.verdict!=="denied")i.push(`CompanyOS dispatch authorization ${t.id} requires dry-run proof refs for dry_run lane.`);if(t.verdict==="denied"&&!t.failure)i.push(`CompanyOS dispatch authorization ${t.id} requires failure details when denied.`);if(t.verdict!=="denied"&&t.failure)i.push(`CompanyOS dispatch authorization ${t.id} must not carry failure details when authorized.`)}}function S(n,i,o){for(let e of n.operatorInboxRoutes){if(a(o.planIds,e.executionPlanId,i,"operator inbox route plan",e.id),e.authorizationId)a(o.authorizationIds,e.authorizationId,i,"operator inbox route authorization",e.id);for(let t of e.requiredPrincipalIds)a(o.principalIds,t,i,"operator inbox route principal",e.id)}}function v(n,i,o){for(let e of n.policyReplayPackets){if(!e.asOf)i.push(`CompanyOS policy replay packet ${e.id} requires asOf replay time.`);if(a(o.planIds,e.executionPlanId,i,"policy replay plan",e.id),a(o.requestIds,e.policyGateRequestId,i,"policy replay request",e.id),e.policyGateDecisionId)a(o.decisionIds,e.policyGateDecisionId,i,"policy replay decision",e.id);if(e.authorizationId)a(o.authorizationIds,e.authorizationId,i,"policy replay authorization",e.id);if(e.sourceEvidenceRefs.some((t)=>t.authorizationAuthority!==!1))i.push(`CompanyOS policy replay packet ${e.id} includes source evidence with authorization authority.`)}}function w(n,i,o){let e=new Map(n.policyReplayPackets.map((t)=>[t.id,t]));for(let t of n.replayDeterminismCases){if(a(o.replayPacketIds,t.replayPacketId,i,"replay determinism packet",t.id),a(o.planIds,t.executionPlanId,i,"replay determinism plan",t.id),!t.asOf)i.push(`CompanyOS replay determinism case ${t.id} requires asOf replay time.`);let c=e.get(t.replayPacketId);if(c?.asOf&&t.asOf&&c.asOf!==t.asOf)i.push(`CompanyOS replay determinism case ${t.id} must use the policy replay packet asOf time.`);if(t.status==="pass"&&t.actualOutputHash!==t.expectedOutputHash)i.push(`CompanyOS replay determinism case ${t.id} must match expected and actual output hashes when passing.`);if(t.status==="fail"&&!t.varianceReason)i.push(`CompanyOS replay determinism case ${t.id} requires a variance reason when failing.`)}}function x(n,i,o){let e=new Map(n.executionPlans.map((c)=>[c.id,c])),t=new Set(n.executionReceipts.map((c)=>c.dispatchId));for(let c of n.executionDispatches){if(a(o.planIds,c.executionPlanId,i,"dispatch plan",c.id),c.requiresReceipt&&!t.has(c.id))i.push(`CompanyOS dispatch ${c.id} requires an execution receipt.`);let p=e.get(c.executionPlanId);if(p&&c.idempotencyKey!==p.idempotency.key)i.push(`CompanyOS dispatch ${c.id} must reuse its plan idempotency key.`)}for(let c of n.executionReceipts){a(o.planIds,c.executionPlanId,i,"receipt plan",c.id),a(o.dispatchIds,c.dispatchId,i,"receipt dispatch",c.id);let p=e.get(c.executionPlanId);if(p&&c.idempotencyKey!==p.idempotency.key)i.push(`CompanyOS receipt ${c.id} must reuse its plan idempotency key.`)}}function C(n,i,o){let e=new Set(n.objectives.map((p)=>p.id)),t=new Set(n.memorySnapshots.map((p)=>p.id)),c=new Set(n.cadences.map((p)=>p.id));for(let p of n.outcomeReceipts){a(o.planIds,p.executionPlanId,i,"outcome plan",p.id),a(o.workItemIds,p.workItemId,i,"outcome work item",p.id);for(let d of p.receiptIds)a(o.receiptIds,d,i,"outcome receipt",p.id);for(let d of p.objectiveIds)a(e,d,i,"outcome objective",p.id);for(let d of p.memorySnapshotIds)a(t,d,i,"outcome memory",p.id);for(let d of p.cadenceIds)a(c,d,i,"outcome cadence",p.id)}}function k(n,i,o){for(let e of n.outcomeLinkages){if(a(o.planIds,e.executionPlanId,i,"outcome linkage plan",e.id),e.dispatchId)a(o.dispatchIds,e.dispatchId,i,"outcome linkage dispatch",e.id);a(o.outcomeReceiptIds,e.outcomeReceiptId,i,"outcome linkage receipt",e.id);for(let t of e.receiptIds)a(o.receiptIds,t,i,"outcome linkage execution receipt",e.id);if(e.status==="linked"&&e.receiptIds.length===0)i.push(`CompanyOS outcome linkage ${e.id} requires execution receipts when linked.`)}}function P(n,i){let o=new Map;for(let e of n.executionPlans){let t=o.get(e.idempotency.dedupeKey);if(t&&e.idempotency.strategy==="reject_duplicate")i.push(`CompanyOS execution plan ${e.id} duplicates dedupe key from ${t}.`);o.set(e.idempotency.dedupeKey,e.id)}}function j(n){let i=[],o={principalIds:l(n),workItemIds:new Set(n.workGraph.workRefs.map((e)=>e.id)),autonomyDecisionIds:new Set(n.autonomyDecisions.map((e)=>e.id)),planIds:new Set(n.executionPlans.map((e)=>e.id)),requestIds:new Set(n.policyGateRequests.map((e)=>e.id)),decisionIds:new Set(n.policyGateDecisions.map((e)=>e.id)),dispatchIds:new Set(n.executionDispatches.map((e)=>e.id)),receiptIds:new Set(n.executionReceipts.map((e)=>e.id)),claimIds:new Set(n.executionClaims.map((e)=>e.id)),authorizationIds:new Set(n.executionDispatchAuthorizations.map((e)=>e.id)),replayPacketIds:new Set(n.policyReplayPackets.map((e)=>e.id)),outcomeReceiptIds:new Set(n.outcomeReceipts.map((e)=>e.id))};return m(n,i,o),u(n,i,o),i}export{j as validateExecutionRefs};

package/dist/browser/validation/semantic-v1-policy-runtime.js

@@ -0,0 +1 @@
+import{z as t}from"zod";import{z as e}from"zod";import{z as i}from"zod";import{z as a}from"zod";var l=a.record(a.string(),a.unknown()),p=a.object({id:a.string().min(1),connectorCapability:a.string().min(1),providerKey:a.string().min(1).optional(),externalId:a.string().min(1).optional(),url:a.string().url().optional(),observedAt:a.string().min(1),metadata:l.default({})}),H=a.object({default:a.string().min(1),translations:a.record(a.string(),a.string()).default({})}),y=a.object({id:a.string().min(1),type:a.string().min(1),label:a.string().min(1).optional()});import{z as d}from"zod";var u=d.enum(["observe_only","draft_only","recommend","execute_with_approval","execute_within_limits","fully_autonomous_bounded","reserved_human_only"]),Z=d.enum(["human","agent","service","external_party"]),N=d.enum(["communication","work_tracking","code_repository","knowledge_source","document_store","crm","analytics","identity","calendar","meeting_recorder","support_desk","messaging_channel"]),J=d.enum(["proposed","accepted","in_progress","blocked","done","cancelled"]),Q=d.enum(["approval_required","customer_commitment","risky_reply","blocked_work","contract_proposal","operating_review_item"]);var ee=i.object({id:i.string().min(1),defaultLevel:u.default("draft_only"),maxCustomerFacingLevel:u.default("execute_with_approval"),reservedHumanOnlyOperations:i.array(i.string().min(1)).default([]),approvalRequiredOperations:i.array(i.string().min(1)).default([]),emergencyStopPrincipalIds:i.array(i.string().min(1)).min(1)}),g=i.object({id:i.string().min(1),operation:i.string().min(1),proposedLevel:u,approvedLevel:u,customerFacing:i.boolean().default(!1),requiredApprovalIds:i.array(i.string().min(1)).default([]),accountableOwnerPrincipalId:i.string().min(1),sourceRefs:i.array(p).default([]),reasoning:i.string().min(1)}),ne=i.object({id:i.string().min(1),agentPrincipalId:i.string().min(1),operation:i.string().min(1),targetType:i.string().min(1),targetRefId:i.string().min(1),draftOnly:i.boolean().default(!0),autonomyDecisionId:i.string().min(1)});var R=e.enum(["planned","claimed","policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]),f=e.enum(["agent","job","integration","human","dry_run","manual_record"]),re=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),workItemId:e.string().min(1),claimantPrincipalId:e.string().min(1),accountableOwnerPrincipalId:e.string().min(1),leaseId:e.string().min(1),leaseExpiresAt:e.string().min(1),status:e.enum(["active","released","expired","cancelled"]),scope:e.string().min(1),claimedAt:e.string().min(1),sourceRefs:e.array(p).default([])}),v=e.object({key:e.string().min(1),dedupeKey:e.string().min(1),strategy:e.enum(["reject_duplicate","reuse_receipt","append_attempt"]),firstSeenAt:e.string().min(1),duplicateOfExecutionPlanId:e.string().min(1).optional()}),C=e.object({id:e.string().min(1),maxAttempts:e.number().int().min(1),backoff:e.enum(["none","fixed","exponential"]),deadLetterRef:y.optional()}),se=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),workItemId:e.string().min(1),operation:e.string().min(1),requestedByPrincipalId:e.string().min(1),autonomyDecisionId:e.string().min(1),authorityEvidenceRefIds:e.array(e.string().min(1)).min(1),rbacEvidenceRefIds:e.array(e.string().min(1)).default([]),riskEvidenceRefIds:e.array(e.string().min(1)).default([]),budgetEvidenceRefIds:e.array(e.string().min(1)).default([]),toolEvidenceRefIds:e.array(e.string().min(1)).default([]),dryRunRefIds:e.array(e.string().min(1)).default([]),sourceRefs:e.array(p).default([])}),h=e.object({id:e.string().min(1),requestId:e.string().min(1),autonomyDecision:g,authorityStatus:e.enum(["allowed","requires_approval","missing_principal","missing_owner","no_matching_grant"]),verdict:e.enum(["allow","dry_run_required","approval_required","reserved_human_only","denied"]),approvedDispatchLane:f.optional(),requiredApprovalIds:e.array(e.string().min(1)).default([]),evidenceRefIds:e.array(e.string().min(1)).default([]),reasons:e.array(e.string().min(1)).min(1),decidedAt:e.string().min(1)}),ce=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),lane:f,status:e.enum(["queued","dispatched","completed","failed","cancelled"]),targetRef:y,idempotencyKey:e.string().min(1),requiresReceipt:e.boolean().default(!0),dispatchedAt:e.string().min(1).optional(),metadata:l.default({})}),S=p.extend({evidenceRole:e.enum(["source_observation","command_intent","policy_input","dry_run_output","operator_decision","outcome_observation"]),authorizationAuthority:e.literal(!1).default(!1),sourceTraceId:e.string().min(1).optional(),agenticInteractionPacketId:e.string().min(1).optional(),commandInboxItemId:e.string().min(1).optional(),asOf:e.string().min(1)}),I=e.object({code:e.enum(["missing_policy_gate_decision","policy_verdict_denied","lane_not_authorized","missing_accountable_owner","missing_required_approval","missing_dry_run_proof","source_evidence_only","replay_not_deterministic"]),message:e.string().min(1),evidenceRefIds:e.array(e.string().min(1)).default([]),sourceEvidenceRefIds:e.array(e.string().min(1)).default([])}),pe=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),executionClaimId:e.string().min(1),dispatchId:e.string().min(1).optional(),policyGateRequestId:e.string().min(1),policyGateDecisionId:e.string().min(1),authorizedLane:f,verdict:e.enum(["allow","dry_run_only","operator_approval_required","denied"]),accountableOwnerPrincipalId:e.string().min(1),authorizedByPrincipalId:e.string().min(1).optional(),requiredApprovalIds:e.array(e.string().min(1)).default([]),dryRunProofRefIds:e.array(e.string().min(1)).default([]),sourceEvidenceRefIds:e.array(e.string().min(1)).default([]),failure:I.optional(),authorizedAt:e.string().min(1),asOf:e.string().min(1),expiresAt:e.string().min(1).optional(),metadata:l.default({})}).superRefine((n,o)=>{if(n.verdict==="dry_run_only"&&n.authorizedLane!=="dry_run")o.addIssue({code:e.ZodIssueCode.custom,message:"dry_run_only authorizations must use the dry_run lane.",path:["authorizedLane"]});if(n.verdict==="allow"&&n.authorizedLane!=="dry_run"&&n.dryRunProofRefIds.length===0)o.addIssue({code:e.ZodIssueCode.custom,message:"Non-dry-run dispatch authorization requires dry-run proof refs.",path:["dryRunProofRefIds"]})}),me=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),authorizationId:e.string().min(1).optional(),routeKind:e.enum(["approval_required","operator_review","dry_run_review","blocked"]),requiredPrincipalIds:e.array(e.string().min(1)).default([]),reason:e.string().min(1),sourceEvidenceRefIds:e.array(e.string().min(1)).default([]),createdAt:e.string().min(1),asOf:e.string().min(1)}),le=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),policyGateRequestId:e.string().min(1),policyGateDecisionId:e.string().min(1).optional(),authorizationId:e.string().min(1).optional(),sourceEvidenceRefs:e.array(S).default([]),decisionRefIds:e.array(e.string().min(1)).default([]),inputHash:e.string().min(1),outputHash:e.string().min(1),deterministic:e.literal(!0).default(!0),createdAt:e.string().min(1),asOf:e.string().min(1),metadata:l.default({})}),de=e.object({id:e.string().min(1),replayPacketId:e.string().min(1),executionPlanId:e.string().min(1),inputHash:e.string().min(1),expectedOutputHash:e.string().min(1),actualOutputHash:e.string().min(1).optional(),status:e.enum(["pass","fail","not_run"]),varianceReason:e.string().min(1).optional(),checkedAt:e.string().min(1).optional(),asOf:e.string().min(1),sourceEvidenceRefIds:e.array(e.string().min(1)).default([])}),ue=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),dispatchId:e.string().min(1).optional(),receiptIds:e.array(e.string().min(1)).default([]),outcomeReceiptId:e.string().min(1),objectiveIds:e.array(e.string().min(1)).default([]),reviewOutputPlanIds:e.array(e.string().min(1)).optional(),sourceEvidenceRefIds:e.array(e.string().min(1)).default([]),status:e.enum(["linked","partial","blocked"]),linkedAt:e.string().min(1),asOf:e.string().min(1)}),ye=e.object({id:e.string().min(1),workItemId:e.string().min(1),operation:e.string().min(1),lifecycleState:R,accountableOwnerPrincipalId:e.string().min(1),claimId:e.string().min(1).optional(),idempotency:v,retryPolicy:C.optional(),policyGateRequestId:e.string().min(1),policyGateDecisionId:e.string().min(1).optional(),dispatchIds:e.array(e.string().min(1)).default([]),receiptIds:e.array(e.string().min(1)).default([]),outcomeReceiptIds:e.array(e.string().min(1)).default([]),checkpointRefIds:e.array(e.string().min(1)).default([]),replayRefIds:e.array(e.string().min(1)).default([]),cancellationRefIds:e.array(e.string().min(1)).default([]),sourceRefs:e.array(p).default([])}),fe=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),dispatchId:e.string().min(1),lane:f,status:e.enum(["dry_run_completed","dispatched","succeeded","failed","cancelled","blocked"]),idempotencyKey:e.string().min(1),startedAt:e.string().min(1),completedAt:e.string().min(1).optional(),outputRef:y.optional(),errorSummary:e.string().min(1).optional(),evidenceRefIds:e.array(e.string().min(1)).default([])}),ge=e.object({id:e.string().min(1),executionPlanId:e.string().min(1),workItemId:e.string().min(1),status:e.enum(["achieved","partial","no_change","regressed","unknown"]),summary:e.string().min(1),objectiveIds:e.array(e.string().min(1)).default([]),memorySnapshotIds:e.array(e.string().min(1)).default([]),cadenceIds:e.array(e.string().min(1)).default([]),receiptIds:e.array(e.string().min(1)).min(1),observedAt:e.string().min(1),sourceRefs:e.array(p).default([])});var m=t.object({id:t.string().min(1),kind:t.string().min(1),status:t.enum(["satisfied","missing","failed","requires_approval"]),evidenceRefIds:t.array(t.string().min(1)).default([])}),_=m.extend({kind:t.literal("authority_evaluation")}),P=m.extend({kind:t.literal("rbac_evaluation")}),b=m.extend({kind:t.literal("risk_evaluation"),riskLevel:t.enum(["low","medium","high","critical"])}),k=m.extend({kind:t.literal("budget_evaluation"),budgetImpacting:t.boolean().default(!1)}),E=m.extend({kind:t.literal("tool_scope_evaluation"),toolExecution:t.boolean().default(!1)}),z=m.extend({kind:t.literal("dry_run_proof")}),A=m.extend({kind:t.literal("approval_workflow")}),D=t.object({id:t.string().min(1),kind:t.literal("assurance_packet"),packetId:t.string().min(1)}),w=t.object({id:t.string().min(1),mode:t.enum(["deny","operator_review","dry_run_only","manual_record"]),reason:t.string().min(1)}),q=t.object({id:t.string().min(1),decisionId:t.string().min(1),summary:t.string().min(1),blockedReasons:t.array(t.string().min(1)).default([]),fallbackReason:t.string().min(1).optional()}),x=t.object({id:t.string().min(1),policyGateDecision:h,authorityRef:_,rbacRef:P,riskRef:b,budgetRef:k,toolScopeRef:E,dryRunProofRef:z.optional(),approvalWorkflowRef:A.optional(),fallback:w.optional(),explanation:q,assurancePacketRef:D});function Ce(n,o=[]){let s=x.safeParse(n);if(!s.success)return s.error.issues.map((O)=>O.message);let r=s.data,c=[];if(j(r,c),L(r,c),G(r,c),K(r,c),W(r,c),T(r,c),o.length>0&&!o.includes(r.assurancePacketRef.packetId))c.push(`Policy evaluation packet ${r.id} references unknown assurance packet ${r.assurancePacketRef.packetId}.`);return c}function j(n,o){let s=[n.authorityRef,n.rbacRef,n.riskRef,n.budgetRef,n.toolScopeRef];for(let r of s)if(r.status==="missing")o.push(`Policy evaluation packet ${n.id} has missing ${r.kind}.`)}function L(n,o){let s=n.policyGateDecision.verdict;if((s==="allow"||s==="approval_required")&&!n.dryRunProofRef)o.push(`Policy evaluation packet ${n.id} requires dry-run proof before execute-capable decisions.`)}function G(n,o){if(n.policyGateDecision.verdict==="approval_required"&&!n.approvalWorkflowRef)o.push(`Policy evaluation packet ${n.id} requires approval workflow ref.`)}function K(n,o){if(n.policyGateDecision.verdict==="reserved_human_only"&&n.policyGateDecision.approvedDispatchLane)o.push(`Policy evaluation packet ${n.id} cannot dispatch reserved-human-only decisions.`)}function W(n,o){if(["high","critical"].includes(n.riskRef.riskLevel)&&n.riskRef.evidenceRefIds.length===0)o.push(`Policy evaluation packet ${n.id} requires risk evidence.`);if(n.budgetRef.budgetImpacting&&n.budgetRef.evidenceRefIds.length===0)o.push(`Policy evaluation packet ${n.id} requires budget evidence.`);if(n.toolScopeRef.toolExecution&&n.toolScopeRef.evidenceRefIds.length===0)o.push(`Policy evaluation packet ${n.id} requires tool-scope evidence.`)}function T(n,o){if(["denied","reserved_human_only","approval_required"].includes(n.policyGateDecision.verdict)&&n.explanation.blockedReasons.length===0)o.push(`Policy explanation ${n.explanation.id} requires blocked reasons.`);if(n.fallback&&!n.explanation.fallbackReason)o.push(`Policy explanation ${n.explanation.id} requires fallback reason.`)}export{Ce as validateCompanyOsPolicyEvaluationPacket};

package/dist/browser/validation/semantic-v1-refs.js

@@ -0,0 +1 @@
+var a=new Map([["observe_only",0],["draft_only",1],["recommend",2],["execute_with_approval",3],["execute_within_limits",4],["fully_autonomous_bounded",5],["reserved_human_only",6]]);function m(e){return new Set(e.authority.principals.map((r)=>r.id))}function i(e,r,s,n,c){if(!e.has(r))s.push(`CompanyOS ${n} ${c} must reference a known id.`)}function p(e){return a.get(e)??Number.POSITIVE_INFINITY}function v(e){let r=m(e),s=[];for(let n of e.objectives)i(r,n.ownerPrincipalId,s,"objective",n.id);for(let n of e.metrics)i(r,n.ownerPrincipalId,s,"metric",n.id);for(let n of[...e.memoryFacts,...e.memoryProcedures])i(r,n.ownerPrincipalId,s,"memory owner",n.id);for(let n of e.cadences)i(r,n.ownerPrincipalId,s,"cadence",n.id);return s}function b(e){let r=new Set(e.objectives.map((o)=>o.id)),s=new Set(e.metrics.map((o)=>o.id)),n=new Set(e.workGraph.workRefs.map((o)=>o.id)),c=new Set(e.agentActionProposals.map((o)=>o.id)),t=[];for(let o of e.objectives){for(let d of o.metricIds)i(s,d,t,"objective metric",o.id);for(let d of o.workItemIds)i(n,d,t,"objective work item",o.id)}for(let o of e.metrics)i(r,o.objectiveId,t,"metric objective",o.id);for(let o of e.metricObservations)i(s,o.metricId,t,"metric observation",o.id);for(let o of e.objectiveOutcomes){i(r,o.objectiveId,t,"objective outcome",o.id);for(let d of o.relatedWorkItemIds)i(n,d,t,"objective outcome work item",o.id)}for(let o of e.objectiveDriftSignals){if(i(r,o.objectiveId,t,"objective drift",o.id),o.metricId)i(s,o.metricId,t,"objective drift metric",o.id);for(let d of o.recommendedActionRefIds)i(c,d,t,"objective drift action",o.id)}return t}function g(e){let r=new Set(e.memoryFacts.map((t)=>t.id)),s=new Set(e.memoryProcedures.map((t)=>t.id)),n=new Set(e.workGraph.decisions.map((t)=>t.id)),c=[];for(let t of e.memorySnapshots){for(let o of t.factIds)i(r,o,c,"memory snapshot fact",t.id);for(let o of t.procedureIds)i(s,o,c,"memory snapshot procedure",t.id);for(let o of t.decisionIds)i(n,o,c,"memory snapshot decision",t.id)}return c}export{g as validateMemoryRefs,b as validateObjectiveRefs,v as validateOwnedRefs};

package/dist/browser/validation/semantic-v1-shared.js

@@ -0,0 +1 @@
+var i=new Map([["observe_only",0],["draft_only",1],["recommend",2],["execute_with_approval",3],["execute_within_limits",4],["fully_autonomous_bounded",5],["reserved_human_only",6]]);function s(n){return new Set(n.authority.principals.map((e)=>e.id))}function u(n,e,t,r,o){if(!n.has(e))t.push(`CompanyOS ${r} ${o} must reference a known id.`)}function p(n){return i.get(n)??Number.POSITIVE_INFINITY}export{s as getPrincipalIds,u as pushMissing,p as rank};

package/dist/browser/validation/semantic-v1.js

@@ -0,0 +1 @@
+var L=new Map([["observe_only",0],["draft_only",1],["recommend",2],["execute_with_approval",3],["execute_within_limits",4],["fully_autonomous_bounded",5],["reserved_human_only",6]]);function u(o){return new Set(o.authority.principals.map((t)=>t.id))}function c(o,t,n,e,i){if(!o.has(t))n.push(`CompanyOS ${e} ${i} must reference a known id.`)}function y(o){return L.get(o)??Number.POSITIVE_INFINITY}function f(o){let t=u(o),n=new Set(o.connectors.map((r)=>r.id)),e=new Set(o.agentRoles.map((r)=>r.id)),i=new Set(o.agentTeams.map((r)=>r.id)),a=new Set(o.delegationRules.map((r)=>r.id)),d=new Set(o.toolAssignments.map((r)=>r.id)),s=[];for(let r of o.agentRoles){c(t,r.principalId,s,"agent role principal",r.id),c(t,r.accountableOwnerPrincipalId,s,"agent role owner",r.id);for(let I of r.escalationPrincipalIds)c(t,I,s,"agent role escalation",r.id);for(let I of r.toolAssignmentIds)c(d,I,s,"agent role tool assignment",r.id)}for(let r of o.agentTeams){c(e,r.managerRoleId,s,"agent team manager",r.id);for(let I of r.roleIds)c(e,I,s,"agent team role",r.id)}for(let r of o.delegationRules)q(o,e,t,r.id,s);for(let r of o.toolAssignments)if(r.connectorCapabilityId)c(n,r.connectorCapabilityId,s,"tool assignment connector",r.id);for(let r of o.handoffPolicies)c(a,r.delegationRuleId,s,"handoff delegation",r.id);for(let r of o.conflictResolutionPolicies){c(i,r.teamId,s,"conflict team",r.id),c(t,r.resolverPrincipalId,s,"conflict resolver",r.id);for(let I of r.escalationPrincipalIds)c(t,I,s,"conflict escalation",r.id)}return s}function g(o){let t=u(o),n=new Set(o.agentRoles.map((a)=>a.id)),e=new Set(o.agentNativeOperations.map((a)=>a.id)),i=[];for(let a of o.agentNativeOperations){if(!n.has(a.agentRoleId))i.push(`Agent-native operation ${a.id} must reference a role.`);if(c(t,a.accountableOwnerPrincipalId,i,"operation owner",a.id),V(a))i.push(`Agent-native execute operation ${a.id} must require dry-run and approval.`);if(y(a.autonomyCeiling)>y("execute_with_approval"))i.push(`Agent-native operation ${a.id} cannot exceed execute_with_approval in V1.`)}for(let a of o.agentToolDescriptors)c(e,a.operationId,i,"agent tool operation",a.id);for(let a of o.surfaceProfiles){c(n,a.roleId,i,"surface role",a.id);for(let d of a.primaryActionOperationIds)c(e,d,i,"surface primary operation",a.id)}return i}function q(o,t,n,e,i){let a=o.delegationRules.find((r)=>r.id===e);if(!a)return;if(!t.has(a.fromRoleId)||!t.has(a.toRoleId))i.push(`Agent delegation ${a.id} must reference known roles.`);let d=o.agentRoles.find((r)=>r.id===a.fromRoleId),s=o.agentRoles.find((r)=>r.id===a.toRoleId);if(d&&s&&z(a.maxAutonomyLevel,d.maxAutonomyLevel,s.maxAutonomyLevel))i.push(`Agent delegation ${a.id} cannot exceed role autonomy ceilings.`);c(n,a.escalationPrincipalId,i,"delegation escalation",a.id)}function z(o,t,n){return y(o)>y(t)||y(o)>y(n)}function V(o){return o.mode==="execute"&&(!o.dryRunPolicy.required||!o.dryRunPolicy.approvalRequiredForExecute)}function h(o){let t=u(o),n=new Set(o.cadences.map((p)=>p.id)),e=new Set(o.workGraph.feedbackItems.map((p)=>p.id)),i=new Set(o.workGraph.commitments.map((p)=>p.id)),a=new Set(o.workGraph.workRefs.map((p)=>p.id)),d=new Set(o.workGraph.decisions.map((p)=>p.id)),s=new Set(o.objectives.map((p)=>p.id)),r=new Set(o.memorySnapshots.map((p)=>p.id)),I=new Set(o.agentActionProposals.map((p)=>p.id)),b=new Set(o.operatorInbox.map((p)=>p.id)),l=[];for(let p of o.cadences){for(let m of p.participantPrincipalIds)c(t,m,l,"cadence participant",p.id);for(let m of p.escalationPrincipalIds)c(t,m,l,"cadence escalation",p.id)}for(let p of o.reviewInputSets){c(n,p.cadenceId,l,"review input cadence",p.id);for(let m of p.feedbackItemIds)c(e,m,l,"review input feedback",p.id);for(let m of p.commitmentIds)c(i,m,l,"review input commitment",p.id);for(let m of p.workItemIds)c(a,m,l,"review input work item",p.id);for(let m of p.objectiveIds)c(s,m,l,"review input objective",p.id);for(let m of p.memorySnapshotIds)c(r,m,l,"review input memory",p.id)}for(let p of o.reviewOutputPlans){c(n,p.cadenceId,l,"review output cadence",p.id);for(let m of p.decisionIds)c(d,m,l,"review output decision",p.id);for(let m of p.workItemIds)c(a,m,l,"review output work item",p.id);for(let m of p.actionProposalIds)c(I,m,l,"review output action proposal",p.id);for(let m of p.inboxItemIds)c(b,m,l,"review output inbox item",p.id)}return l}var v=new Set(["claimed","policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]),w=new Set(["policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]);function O(o,t,n){_(o,t,n),D(o,t,n),E(o,t,n)}function _(o,t,n){for(let e of o.executionPlans){if(c(n.workItemIds,e.workItemId,t,"execution work item",e.id),c(n.principalIds,e.accountableOwnerPrincipalId,t,"execution owner",e.id),c(n.requestIds,e.policyGateRequestId,t,"execution policy gate request",e.id),v.has(e.lifecycleState)&&!e.claimId)t.push(`CompanyOS execution plan ${e.id} requires a claim.`);if(!w.has(e.lifecycleState))continue;if(!e.policyGateDecisionId){t.push(`CompanyOS execution plan ${e.id} requires a policy gate decision.`);continue}c(n.decisionIds,e.policyGateDecisionId,t,"execution policy gate decision",e.id)}j(o,t,n)}function j(o,t,n){for(let e of o.executionPlans){for(let i of e.dispatchIds)c(n.dispatchIds,i,t,"execution dispatch",e.id);for(let i of e.receiptIds)c(n.receiptIds,i,t,"execution receipt",e.id)}}function D(o,t,n){for(let e of o.executionClaims)c(n.planIds,e.executionPlanId,t,"execution claim plan",e.id),c(n.workItemIds,e.workItemId,t,"execution claim work item",e.id),c(n.principalIds,e.claimantPrincipalId,t,"execution claim principal",e.id),c(n.principalIds,e.accountableOwnerPrincipalId,t,"execution claim owner",e.id)}function E(o,t,n){for(let e of o.policyGateRequests)c(n.planIds,e.executionPlanId,t,"policy gate plan",e.id),c(n.workItemIds,e.workItemId,t,"policy gate work item",e.id),c(n.autonomyDecisionIds,e.autonomyDecisionId,t,"policy gate autonomy decision",e.id);for(let e of o.policyGateDecisions){if(!n.autonomyDecisionIds.has(e.autonomyDecision.id))t.push(`CompanyOS policy gate ${e.id} must wrap an existing autonomy decision.`);if(["approval_required","reserved_human_only"].includes(e.verdict)&&e.requiredApprovalIds.length===0)t.push(`CompanyOS policy gate ${e.id} requires approval evidence.`);if(e.verdict==="reserved_human_only"&&e.approvedDispatchLane)t.push(`CompanyOS policy gate ${e.id} cannot dispatch reserved-human-only work.`)}}function S(o,t,n){x(o,t,n),A(o,t,n),G(o,t,n),M(o,t,n),N(o,t,n),T(o,t,n),F(o,t,n),K(o,t)}function x(o,t,n){let e=new Map(o.policyGateDecisions.map((i)=>[i.id,i]));for(let i of o.executionDispatchAuthorizations){if(c(n.planIds,i.executionPlanId,t,"dispatch authorization plan",i.id),i.dispatchId)c(n.dispatchIds,i.dispatchId,t,"dispatch authorization dispatch",i.id);if(i.policyGateRequestId)c(n.requestIds,i.policyGateRequestId,t,"dispatch authorization policy gate request",i.id);if(c(n.decisionIds,i.policyGateDecisionId,t,"dispatch authorization policy gate decision",i.id),c(n.principalIds,i.accountableOwnerPrincipalId,t,"dispatch authorization accountable owner",i.id),i.authorizedByPrincipalId)c(n.principalIds,i.authorizedByPrincipalId,t,"dispatch authorization principal",i.id);if(!i.asOf)t.push(`CompanyOS dispatch authorization ${i.id} requires asOf policy time.`);if(i.executionClaimId)c(n.claimIds,i.executionClaimId,t,"dispatch authorization claim",i.id);let a=e.get(i.policyGateDecisionId);if(!a)continue;if(i.authorizedLane!=="dry_run"){if(a.verdict!=="allow")t.push(`CompanyOS dispatch authorization ${i.id} cannot authorize ${i.authorizedLane} for policy verdict ${a.verdict}.`);if(a.approvedDispatchLane!==i.authorizedLane)t.push(`CompanyOS dispatch authorization ${i.id} must match the approved dispatch lane.`)}if(i.authorizedLane==="dry_run"&&i.dryRunProofRefIds.length===0&&i.verdict!=="denied")t.push(`CompanyOS dispatch authorization ${i.id} requires dry-run proof refs for dry_run lane.`);if(i.verdict==="denied"&&!i.failure)t.push(`CompanyOS dispatch authorization ${i.id} requires failure details when denied.`);if(i.verdict!=="denied"&&i.failure)t.push(`CompanyOS dispatch authorization ${i.id} must not carry failure details when authorized.`)}}function A(o,t,n){for(let e of o.operatorInboxRoutes){if(c(n.planIds,e.executionPlanId,t,"operator inbox route plan",e.id),e.authorizationId)c(n.authorizationIds,e.authorizationId,t,"operator inbox route authorization",e.id);for(let i of e.requiredPrincipalIds)c(n.principalIds,i,t,"operator inbox route principal",e.id)}}function G(o,t,n){for(let e of o.policyReplayPackets){if(!e.asOf)t.push(`CompanyOS policy replay packet ${e.id} requires asOf replay time.`);if(c(n.planIds,e.executionPlanId,t,"policy replay plan",e.id),c(n.requestIds,e.policyGateRequestId,t,"policy replay request",e.id),e.policyGateDecisionId)c(n.decisionIds,e.policyGateDecisionId,t,"policy replay decision",e.id);if(e.authorizationId)c(n.authorizationIds,e.authorizationId,t,"policy replay authorization",e.id);if(e.sourceEvidenceRefs.some((i)=>i.authorizationAuthority!==!1))t.push(`CompanyOS policy replay packet ${e.id} includes source evidence with authorization authority.`)}}function M(o,t,n){let e=new Map(o.policyReplayPackets.map((i)=>[i.id,i]));for(let i of o.replayDeterminismCases){if(c(n.replayPacketIds,i.replayPacketId,t,"replay determinism packet",i.id),c(n.planIds,i.executionPlanId,t,"replay determinism plan",i.id),!i.asOf)t.push(`CompanyOS replay determinism case ${i.id} requires asOf replay time.`);let a=e.get(i.replayPacketId);if(a?.asOf&&i.asOf&&a.asOf!==i.asOf)t.push(`CompanyOS replay determinism case ${i.id} must use the policy replay packet asOf time.`);if(i.status==="pass"&&i.actualOutputHash!==i.expectedOutputHash)t.push(`CompanyOS replay determinism case ${i.id} must match expected and actual output hashes when passing.`);if(i.status==="fail"&&!i.varianceReason)t.push(`CompanyOS replay determinism case ${i.id} requires a variance reason when failing.`)}}function N(o,t,n){let e=new Map(o.executionPlans.map((a)=>[a.id,a])),i=new Set(o.executionReceipts.map((a)=>a.dispatchId));for(let a of o.executionDispatches){if(c(n.planIds,a.executionPlanId,t,"dispatch plan",a.id),a.requiresReceipt&&!i.has(a.id))t.push(`CompanyOS dispatch ${a.id} requires an execution receipt.`);let d=e.get(a.executionPlanId);if(d&&a.idempotencyKey!==d.idempotency.key)t.push(`CompanyOS dispatch ${a.id} must reuse its plan idempotency key.`)}for(let a of o.executionReceipts){c(n.planIds,a.executionPlanId,t,"receipt plan",a.id),c(n.dispatchIds,a.dispatchId,t,"receipt dispatch",a.id);let d=e.get(a.executionPlanId);if(d&&a.idempotencyKey!==d.idempotency.key)t.push(`CompanyOS receipt ${a.id} must reuse its plan idempotency key.`)}}function T(o,t,n){let e=new Set(o.objectives.map((d)=>d.id)),i=new Set(o.memorySnapshots.map((d)=>d.id)),a=new Set(o.cadences.map((d)=>d.id));for(let d of o.outcomeReceipts){c(n.planIds,d.executionPlanId,t,"outcome plan",d.id),c(n.workItemIds,d.workItemId,t,"outcome work item",d.id);for(let s of d.receiptIds)c(n.receiptIds,s,t,"outcome receipt",d.id);for(let s of d.objectiveIds)c(e,s,t,"outcome objective",d.id);for(let s of d.memorySnapshotIds)c(i,s,t,"outcome memory",d.id);for(let s of d.cadenceIds)c(a,s,t,"outcome cadence",d.id)}}function F(o,t,n){for(let e of o.outcomeLinkages){if(c(n.planIds,e.executionPlanId,t,"outcome linkage plan",e.id),e.dispatchId)c(n.dispatchIds,e.dispatchId,t,"outcome linkage dispatch",e.id);c(n.outcomeReceiptIds,e.outcomeReceiptId,t,"outcome linkage receipt",e.id);for(let i of e.receiptIds)c(n.receiptIds,i,t,"outcome linkage execution receipt",e.id);if(e.status==="linked"&&e.receiptIds.length===0)t.push(`CompanyOS outcome linkage ${e.id} requires execution receipts when linked.`)}}function K(o,t){let n=new Map;for(let e of o.executionPlans){let i=n.get(e.idempotency.dedupeKey);if(i&&e.idempotency.strategy==="reject_duplicate")t.push(`CompanyOS execution plan ${e.id} duplicates dedupe key from ${i}.`);n.set(e.idempotency.dedupeKey,e.id)}}function k(o){let t=[],n={principalIds:u(o),workItemIds:new Set(o.workGraph.workRefs.map((e)=>e.id)),autonomyDecisionIds:new Set(o.autonomyDecisions.map((e)=>e.id)),planIds:new Set(o.executionPlans.map((e)=>e.id)),requestIds:new Set(o.policyGateRequests.map((e)=>e.id)),decisionIds:new Set(o.policyGateDecisions.map((e)=>e.id)),dispatchIds:new Set(o.executionDispatches.map((e)=>e.id)),receiptIds:new Set(o.executionReceipts.map((e)=>e.id)),claimIds:new Set(o.executionClaims.map((e)=>e.id)),authorizationIds:new Set(o.executionDispatchAuthorizations.map((e)=>e.id)),replayPacketIds:new Set(o.policyReplayPackets.map((e)=>e.id)),outcomeReceiptIds:new Set(o.outcomeReceipts.map((e)=>e.id))};return O(o,t,n),S(o,t,n),t}function R(o){let t=u(o),n=[];for(let e of o.objectives)c(t,e.ownerPrincipalId,n,"objective",e.id);for(let e of o.metrics)c(t,e.ownerPrincipalId,n,"metric",e.id);for(let e of[...o.memoryFacts,...o.memoryProcedures])c(t,e.ownerPrincipalId,n,"memory owner",e.id);for(let e of o.cadences)c(t,e.ownerPrincipalId,n,"cadence",e.id);return n}function C(o){let t=new Set(o.objectives.map((d)=>d.id)),n=new Set(o.metrics.map((d)=>d.id)),e=new Set(o.workGraph.workRefs.map((d)=>d.id)),i=new Set(o.agentActionProposals.map((d)=>d.id)),a=[];for(let d of o.objectives){for(let s of d.metricIds)c(n,s,a,"objective metric",d.id);for(let s of d.workItemIds)c(e,s,a,"objective work item",d.id)}for(let d of o.metrics)c(t,d.objectiveId,a,"metric objective",d.id);for(let d of o.metricObservations)c(n,d.metricId,a,"metric observation",d.id);for(let d of o.objectiveOutcomes){c(t,d.objectiveId,a,"objective outcome",d.id);for(let s of d.relatedWorkItemIds)c(e,s,a,"objective outcome work item",d.id)}for(let d of o.objectiveDriftSignals){if(c(t,d.objectiveId,a,"objective drift",d.id),d.metricId)c(n,d.metricId,a,"objective drift metric",d.id);for(let s of d.recommendedActionRefIds)c(i,s,a,"objective drift action",d.id)}return a}function P(o){let t=new Set(o.memoryFacts.map((a)=>a.id)),n=new Set(o.memoryProcedures.map((a)=>a.id)),e=new Set(o.workGraph.decisions.map((a)=>a.id)),i=[];for(let a of o.memorySnapshots){for(let d of a.factIds)c(t,d,i,"memory snapshot fact",a.id);for(let d of a.procedureIds)c(n,d,i,"memory snapshot procedure",a.id);for(let d of a.decisionIds)c(e,d,i,"memory snapshot decision",a.id)}return i}function le(o){return[...R(o),...C(o),...P(o),...h(o),...f(o),...g(o),...k(o)]}export{le as validateV1SemanticInvariants};

package/dist/browser/validation/semantic.js

@@ -0,0 +1 @@
+var L=new Map([["observe_only",0],["draft_only",1],["recommend",2],["execute_with_approval",3],["execute_within_limits",4],["fully_autonomous_bounded",5],["reserved_human_only",6]]);function u(o){return new Set(o.authority.principals.map((t)=>t.id))}function c(o,t,n,e,i){if(!o.has(t))n.push(`CompanyOS ${e} ${i} must reference a known id.`)}function f(o){return L.get(o)??Number.POSITIVE_INFINITY}function y(o){let t=u(o),n=new Set(o.connectors.map((d)=>d.id)),e=new Set(o.agentRoles.map((d)=>d.id)),i=new Set(o.agentTeams.map((d)=>d.id)),a=new Set(o.delegationRules.map((d)=>d.id)),r=new Set(o.toolAssignments.map((d)=>d.id)),s=[];for(let d of o.agentRoles){c(t,d.principalId,s,"agent role principal",d.id),c(t,d.accountableOwnerPrincipalId,s,"agent role owner",d.id);for(let I of d.escalationPrincipalIds)c(t,I,s,"agent role escalation",d.id);for(let I of d.toolAssignmentIds)c(r,I,s,"agent role tool assignment",d.id)}for(let d of o.agentTeams){c(e,d.managerRoleId,s,"agent team manager",d.id);for(let I of d.roleIds)c(e,I,s,"agent team role",d.id)}for(let d of o.delegationRules)q(o,e,t,d.id,s);for(let d of o.toolAssignments)if(d.connectorCapabilityId)c(n,d.connectorCapabilityId,s,"tool assignment connector",d.id);for(let d of o.handoffPolicies)c(a,d.delegationRuleId,s,"handoff delegation",d.id);for(let d of o.conflictResolutionPolicies){c(i,d.teamId,s,"conflict team",d.id),c(t,d.resolverPrincipalId,s,"conflict resolver",d.id);for(let I of d.escalationPrincipalIds)c(t,I,s,"conflict escalation",d.id)}return s}function g(o){let t=u(o),n=new Set(o.agentRoles.map((a)=>a.id)),e=new Set(o.agentNativeOperations.map((a)=>a.id)),i=[];for(let a of o.agentNativeOperations){if(!n.has(a.agentRoleId))i.push(`Agent-native operation ${a.id} must reference a role.`);if(c(t,a.accountableOwnerPrincipalId,i,"operation owner",a.id),_(a))i.push(`Agent-native execute operation ${a.id} must require dry-run and approval.`);if(f(a.autonomyCeiling)>f("execute_with_approval"))i.push(`Agent-native operation ${a.id} cannot exceed execute_with_approval in V1.`)}for(let a of o.agentToolDescriptors)c(e,a.operationId,i,"agent tool operation",a.id);for(let a of o.surfaceProfiles){c(n,a.roleId,i,"surface role",a.id);for(let r of a.primaryActionOperationIds)c(e,r,i,"surface primary operation",a.id)}return i}function q(o,t,n,e,i){let a=o.delegationRules.find((d)=>d.id===e);if(!a)return;if(!t.has(a.fromRoleId)||!t.has(a.toRoleId))i.push(`Agent delegation ${a.id} must reference known roles.`);let r=o.agentRoles.find((d)=>d.id===a.fromRoleId),s=o.agentRoles.find((d)=>d.id===a.toRoleId);if(r&&s&&V(a.maxAutonomyLevel,r.maxAutonomyLevel,s.maxAutonomyLevel))i.push(`Agent delegation ${a.id} cannot exceed role autonomy ceilings.`);c(n,a.escalationPrincipalId,i,"delegation escalation",a.id)}function V(o,t,n){return f(o)>f(t)||f(o)>f(n)}function _(o){return o.mode==="execute"&&(!o.dryRunPolicy.required||!o.dryRunPolicy.approvalRequiredForExecute)}function h(o){let t=u(o),n=new Set(o.cadences.map((p)=>p.id)),e=new Set(o.workGraph.feedbackItems.map((p)=>p.id)),i=new Set(o.workGraph.commitments.map((p)=>p.id)),a=new Set(o.workGraph.workRefs.map((p)=>p.id)),r=new Set(o.workGraph.decisions.map((p)=>p.id)),s=new Set(o.objectives.map((p)=>p.id)),d=new Set(o.memorySnapshots.map((p)=>p.id)),I=new Set(o.agentActionProposals.map((p)=>p.id)),b=new Set(o.operatorInbox.map((p)=>p.id)),l=[];for(let p of o.cadences){for(let m of p.participantPrincipalIds)c(t,m,l,"cadence participant",p.id);for(let m of p.escalationPrincipalIds)c(t,m,l,"cadence escalation",p.id)}for(let p of o.reviewInputSets){c(n,p.cadenceId,l,"review input cadence",p.id);for(let m of p.feedbackItemIds)c(e,m,l,"review input feedback",p.id);for(let m of p.commitmentIds)c(i,m,l,"review input commitment",p.id);for(let m of p.workItemIds)c(a,m,l,"review input work item",p.id);for(let m of p.objectiveIds)c(s,m,l,"review input objective",p.id);for(let m of p.memorySnapshotIds)c(d,m,l,"review input memory",p.id)}for(let p of o.reviewOutputPlans){c(n,p.cadenceId,l,"review output cadence",p.id);for(let m of p.decisionIds)c(r,m,l,"review output decision",p.id);for(let m of p.workItemIds)c(a,m,l,"review output work item",p.id);for(let m of p.actionProposalIds)c(I,m,l,"review output action proposal",p.id);for(let m of p.inboxItemIds)c(b,m,l,"review output inbox item",p.id)}return l}var v=new Set(["claimed","policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]),w=new Set(["policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]);function O(o,t,n){z(o,t,n),D(o,t,n),E(o,t,n)}function z(o,t,n){for(let e of o.executionPlans){if(c(n.workItemIds,e.workItemId,t,"execution work item",e.id),c(n.principalIds,e.accountableOwnerPrincipalId,t,"execution owner",e.id),c(n.requestIds,e.policyGateRequestId,t,"execution policy gate request",e.id),v.has(e.lifecycleState)&&!e.claimId)t.push(`CompanyOS execution plan ${e.id} requires a claim.`);if(!w.has(e.lifecycleState))continue;if(!e.policyGateDecisionId){t.push(`CompanyOS execution plan ${e.id} requires a policy gate decision.`);continue}c(n.decisionIds,e.policyGateDecisionId,t,"execution policy gate decision",e.id)}j(o,t,n)}function j(o,t,n){for(let e of o.executionPlans){for(let i of e.dispatchIds)c(n.dispatchIds,i,t,"execution dispatch",e.id);for(let i of e.receiptIds)c(n.receiptIds,i,t,"execution receipt",e.id)}}function D(o,t,n){for(let e of o.executionClaims)c(n.planIds,e.executionPlanId,t,"execution claim plan",e.id),c(n.workItemIds,e.workItemId,t,"execution claim work item",e.id),c(n.principalIds,e.claimantPrincipalId,t,"execution claim principal",e.id),c(n.principalIds,e.accountableOwnerPrincipalId,t,"execution claim owner",e.id)}function E(o,t,n){for(let e of o.policyGateRequests)c(n.planIds,e.executionPlanId,t,"policy gate plan",e.id),c(n.workItemIds,e.workItemId,t,"policy gate work item",e.id),c(n.autonomyDecisionIds,e.autonomyDecisionId,t,"policy gate autonomy decision",e.id);for(let e of o.policyGateDecisions){if(!n.autonomyDecisionIds.has(e.autonomyDecision.id))t.push(`CompanyOS policy gate ${e.id} must wrap an existing autonomy decision.`);if(["approval_required","reserved_human_only"].includes(e.verdict)&&e.requiredApprovalIds.length===0)t.push(`CompanyOS policy gate ${e.id} requires approval evidence.`);if(e.verdict==="reserved_human_only"&&e.approvedDispatchLane)t.push(`CompanyOS policy gate ${e.id} cannot dispatch reserved-human-only work.`)}}function S(o,t,n){x(o,t,n),A(o,t,n),G(o,t,n),M(o,t,n),N(o,t,n),F(o,t,n),T(o,t,n),K(o,t)}function x(o,t,n){let e=new Map(o.policyGateDecisions.map((i)=>[i.id,i]));for(let i of o.executionDispatchAuthorizations){if(c(n.planIds,i.executionPlanId,t,"dispatch authorization plan",i.id),i.dispatchId)c(n.dispatchIds,i.dispatchId,t,"dispatch authorization dispatch",i.id);if(i.policyGateRequestId)c(n.requestIds,i.policyGateRequestId,t,"dispatch authorization policy gate request",i.id);if(c(n.decisionIds,i.policyGateDecisionId,t,"dispatch authorization policy gate decision",i.id),c(n.principalIds,i.accountableOwnerPrincipalId,t,"dispatch authorization accountable owner",i.id),i.authorizedByPrincipalId)c(n.principalIds,i.authorizedByPrincipalId,t,"dispatch authorization principal",i.id);if(!i.asOf)t.push(`CompanyOS dispatch authorization ${i.id} requires asOf policy time.`);if(i.executionClaimId)c(n.claimIds,i.executionClaimId,t,"dispatch authorization claim",i.id);let a=e.get(i.policyGateDecisionId);if(!a)continue;if(i.authorizedLane!=="dry_run"){if(a.verdict!=="allow")t.push(`CompanyOS dispatch authorization ${i.id} cannot authorize ${i.authorizedLane} for policy verdict ${a.verdict}.`);if(a.approvedDispatchLane!==i.authorizedLane)t.push(`CompanyOS dispatch authorization ${i.id} must match the approved dispatch lane.`)}if(i.authorizedLane==="dry_run"&&i.dryRunProofRefIds.length===0&&i.verdict!=="denied")t.push(`CompanyOS dispatch authorization ${i.id} requires dry-run proof refs for dry_run lane.`);if(i.verdict==="denied"&&!i.failure)t.push(`CompanyOS dispatch authorization ${i.id} requires failure details when denied.`);if(i.verdict!=="denied"&&i.failure)t.push(`CompanyOS dispatch authorization ${i.id} must not carry failure details when authorized.`)}}function A(o,t,n){for(let e of o.operatorInboxRoutes){if(c(n.planIds,e.executionPlanId,t,"operator inbox route plan",e.id),e.authorizationId)c(n.authorizationIds,e.authorizationId,t,"operator inbox route authorization",e.id);for(let i of e.requiredPrincipalIds)c(n.principalIds,i,t,"operator inbox route principal",e.id)}}function G(o,t,n){for(let e of o.policyReplayPackets){if(!e.asOf)t.push(`CompanyOS policy replay packet ${e.id} requires asOf replay time.`);if(c(n.planIds,e.executionPlanId,t,"policy replay plan",e.id),c(n.requestIds,e.policyGateRequestId,t,"policy replay request",e.id),e.policyGateDecisionId)c(n.decisionIds,e.policyGateDecisionId,t,"policy replay decision",e.id);if(e.authorizationId)c(n.authorizationIds,e.authorizationId,t,"policy replay authorization",e.id);if(e.sourceEvidenceRefs.some((i)=>i.authorizationAuthority!==!1))t.push(`CompanyOS policy replay packet ${e.id} includes source evidence with authorization authority.`)}}function M(o,t,n){let e=new Map(o.policyReplayPackets.map((i)=>[i.id,i]));for(let i of o.replayDeterminismCases){if(c(n.replayPacketIds,i.replayPacketId,t,"replay determinism packet",i.id),c(n.planIds,i.executionPlanId,t,"replay determinism plan",i.id),!i.asOf)t.push(`CompanyOS replay determinism case ${i.id} requires asOf replay time.`);let a=e.get(i.replayPacketId);if(a?.asOf&&i.asOf&&a.asOf!==i.asOf)t.push(`CompanyOS replay determinism case ${i.id} must use the policy replay packet asOf time.`);if(i.status==="pass"&&i.actualOutputHash!==i.expectedOutputHash)t.push(`CompanyOS replay determinism case ${i.id} must match expected and actual output hashes when passing.`);if(i.status==="fail"&&!i.varianceReason)t.push(`CompanyOS replay determinism case ${i.id} requires a variance reason when failing.`)}}function N(o,t,n){let e=new Map(o.executionPlans.map((a)=>[a.id,a])),i=new Set(o.executionReceipts.map((a)=>a.dispatchId));for(let a of o.executionDispatches){if(c(n.planIds,a.executionPlanId,t,"dispatch plan",a.id),a.requiresReceipt&&!i.has(a.id))t.push(`CompanyOS dispatch ${a.id} requires an execution receipt.`);let r=e.get(a.executionPlanId);if(r&&a.idempotencyKey!==r.idempotency.key)t.push(`CompanyOS dispatch ${a.id} must reuse its plan idempotency key.`)}for(let a of o.executionReceipts){c(n.planIds,a.executionPlanId,t,"receipt plan",a.id),c(n.dispatchIds,a.dispatchId,t,"receipt dispatch",a.id);let r=e.get(a.executionPlanId);if(r&&a.idempotencyKey!==r.idempotency.key)t.push(`CompanyOS receipt ${a.id} must reuse its plan idempotency key.`)}}function F(o,t,n){let e=new Set(o.objectives.map((r)=>r.id)),i=new Set(o.memorySnapshots.map((r)=>r.id)),a=new Set(o.cadences.map((r)=>r.id));for(let r of o.outcomeReceipts){c(n.planIds,r.executionPlanId,t,"outcome plan",r.id),c(n.workItemIds,r.workItemId,t,"outcome work item",r.id);for(let s of r.receiptIds)c(n.receiptIds,s,t,"outcome receipt",r.id);for(let s of r.objectiveIds)c(e,s,t,"outcome objective",r.id);for(let s of r.memorySnapshotIds)c(i,s,t,"outcome memory",r.id);for(let s of r.cadenceIds)c(a,s,t,"outcome cadence",r.id)}}function T(o,t,n){for(let e of o.outcomeLinkages){if(c(n.planIds,e.executionPlanId,t,"outcome linkage plan",e.id),e.dispatchId)c(n.dispatchIds,e.dispatchId,t,"outcome linkage dispatch",e.id);c(n.outcomeReceiptIds,e.outcomeReceiptId,t,"outcome linkage receipt",e.id);for(let i of e.receiptIds)c(n.receiptIds,i,t,"outcome linkage execution receipt",e.id);if(e.status==="linked"&&e.receiptIds.length===0)t.push(`CompanyOS outcome linkage ${e.id} requires execution receipts when linked.`)}}function K(o,t){let n=new Map;for(let e of o.executionPlans){let i=n.get(e.idempotency.dedupeKey);if(i&&e.idempotency.strategy==="reject_duplicate")t.push(`CompanyOS execution plan ${e.id} duplicates dedupe key from ${i}.`);n.set(e.idempotency.dedupeKey,e.id)}}function k(o){let t=[],n={principalIds:u(o),workItemIds:new Set(o.workGraph.workRefs.map((e)=>e.id)),autonomyDecisionIds:new Set(o.autonomyDecisions.map((e)=>e.id)),planIds:new Set(o.executionPlans.map((e)=>e.id)),requestIds:new Set(o.policyGateRequests.map((e)=>e.id)),decisionIds:new Set(o.policyGateDecisions.map((e)=>e.id)),dispatchIds:new Set(o.executionDispatches.map((e)=>e.id)),receiptIds:new Set(o.executionReceipts.map((e)=>e.id)),claimIds:new Set(o.executionClaims.map((e)=>e.id)),authorizationIds:new Set(o.executionDispatchAuthorizations.map((e)=>e.id)),replayPacketIds:new Set(o.policyReplayPackets.map((e)=>e.id)),outcomeReceiptIds:new Set(o.outcomeReceipts.map((e)=>e.id))};return O(o,t,n),S(o,t,n),t}function P(o){let t=u(o),n=[];for(let e of o.objectives)c(t,e.ownerPrincipalId,n,"objective",e.id);for(let e of o.metrics)c(t,e.ownerPrincipalId,n,"metric",e.id);for(let e of[...o.memoryFacts,...o.memoryProcedures])c(t,e.ownerPrincipalId,n,"memory owner",e.id);for(let e of o.cadences)c(t,e.ownerPrincipalId,n,"cadence",e.id);return n}function C(o){let t=new Set(o.objectives.map((r)=>r.id)),n=new Set(o.metrics.map((r)=>r.id)),e=new Set(o.workGraph.workRefs.map((r)=>r.id)),i=new Set(o.agentActionProposals.map((r)=>r.id)),a=[];for(let r of o.objectives){for(let s of r.metricIds)c(n,s,a,"objective metric",r.id);for(let s of r.workItemIds)c(e,s,a,"objective work item",r.id)}for(let r of o.metrics)c(t,r.objectiveId,a,"metric objective",r.id);for(let r of o.metricObservations)c(n,r.metricId,a,"metric observation",r.id);for(let r of o.objectiveOutcomes){c(t,r.objectiveId,a,"objective outcome",r.id);for(let s of r.relatedWorkItemIds)c(e,s,a,"objective outcome work item",r.id)}for(let r of o.objectiveDriftSignals){if(c(t,r.objectiveId,a,"objective drift",r.id),r.metricId)c(n,r.metricId,a,"objective drift metric",r.id);for(let s of r.recommendedActionRefIds)c(i,s,a,"objective drift action",r.id)}return a}function R(o){let t=new Set(o.memoryFacts.map((a)=>a.id)),n=new Set(o.memoryProcedures.map((a)=>a.id)),e=new Set(o.workGraph.decisions.map((a)=>a.id)),i=[];for(let a of o.memorySnapshots){for(let r of a.factIds)c(t,r,i,"memory snapshot fact",a.id);for(let r of a.procedureIds)c(n,r,i,"memory snapshot procedure",a.id);for(let r of a.decisionIds)c(e,r,i,"memory snapshot decision",a.id)}return i}function B(o){return[...P(o),...C(o),...R(o),...h(o),...y(o),...g(o),...k(o)]}var H=new Set(["execute_within_limits","fully_autonomous_bounded"]);function ye(o){let t=[],n=U(o);if(!n.has(o.authority.accountableOwnerPrincipalId))t.push("AuthorityGraph.accountableOwnerPrincipalId must reference a principal.");for(let e of o.autonomyDecisions){if(!n.has(e.accountableOwnerPrincipalId))t.push(`Autonomy decision ${e.id} must reference an accountable owner.`);if(e.customerFacing&&H.has(e.approvedLevel))t.push(`Customer-facing decision ${e.id} cannot approve ${e.approvedLevel}.`);if(e.customerFacing&&e.requiredApprovalIds.length===0)t.push(`Customer-facing decision ${e.id} must require approval.`)}for(let e of o.operatorInbox)if(!n.has(e.accountableOwnerPrincipalId))t.push(`Inbox item ${e.id} must reference an accountable owner.`);return t}function U(o){return new Set(o.authority.principals.map((t)=>t.id))}export{ye as validateV0SemanticInvariants,B as validateV1SemanticInvariants};

package/dist/browser/validation/temporal-assertion.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{z as n}from"zod";var c=n.record(n.string(),n.unknown()),g=n.object({id:n.string().min(1),connectorCapability:n.string().min(1),providerKey:n.string().min(1).optional(),externalId:n.string().min(1).optional(),url:n.string().url().optional(),observedAt:n.string().min(1),metadata:c.default({})}),v=n.object({default:n.string().min(1),translations:n.record(n.string(),n.string()).default({})}),m=n.object({id:n.string().min(1),type:n.string().min(1),label:n.string().min(1).optional()});var d=e.string().datetime({offset:!0}),C=e.discriminatedUnion("kind",[e.object({kind:e.literal("string"),value:e.string()}),e.object({kind:e.literal("number"),value:e.number().finite()}),e.object({kind:e.literal("boolean"),value:e.boolean()}),e.object({kind:e.literal("reference"),value:m})]),S=e.object({id:e.string().min(1),subjectRef:m,predicate:e.string().min(1),value:C,canonicalEntityRefs:e.array(m).default([]),sourceRefs:e.array(g).min(1),evidenceRefIds:e.array(e.string().min(1)).min(1),reviewDecisionRefIds:e.array(e.string().min(1)).default([]),observedAt:d,validFrom:d,validTo:d.optional(),recordedAt:d,supersedesClaimIds:e.array(e.string().min(1)).default([]),supersededByClaimIds:e.array(e.string().min(1)).default([]),contradictionGroupRef:e.string().min(1).optional(),conflictRefIds:e.array(e.string().min(1)).default([]),schemaRef:e.string().min(1),version:e.string().min(1),contentFingerprint:e.string().min(1),replayRef:e.string().min(1).optional(),derivedConfidence:e.number().min(0).max(1).optional(),derivedFreshness:e.enum(["fresh","stale","unknown"]).optional(),metadata:c.default({})}).superRefine((o,t)=>{if(o.validTo&&Date.parse(o.validFrom)>=Date.parse(o.validTo))t.addIssue({code:"custom",path:["validTo"],message:"validTo must be later than validFrom for [validFrom, validTo)"});if(o.supersedesClaimIds.includes(o.id))t.addIssue({code:"custom",path:["supersedesClaimIds"],message:"a temporal assertion cannot supersede itself"});if(o.supersededByClaimIds.includes(o.id))t.addIssue({code:"custom",path:["supersededByClaimIds"],message:"a temporal assertion cannot be superseded by itself"})}),u=e.object({schemaVersion:e.literal("companyos.temporal-assertions.v1"),assertions:e.array(S).min(1)});function k(o){let t=u.safeParse(o);if(!t.success)return{ok:!1,issues:t.error.issues.map((i)=>`${i.path.length>0?i.path.join("."):"root"}: ${i.message}`)};let r=h(t.data);return{ok:r.length===0,issues:r}}function A(o){let t=u.parse(o),r=h(t);if(r.length>0)throw Error(r.join("; "));return t}function h(o){let t=[],r=new Map(o.assertions.map((s)=>[s.id,s]));if(r.size!==o.assertions.length)t.push("Claim IDs must be unique.");for(let s of o.assertions){for(let a of s.supersedesClaimIds){let p=r.get(a);if(!p)t.push(`${s.id} supersedes unknown claim ${a}.`);else if(!p.supersededByClaimIds.includes(s.id))t.push(`${s.id} and ${a} must declare reciprocal supersession lineage.`)}for(let a of s.supersededByClaimIds){let p=r.get(a);if(!p)t.push(`${s.id} is superseded by unknown claim ${a}.`);else if(!p.supersedesClaimIds.includes(s.id))t.push(`${s.id} and ${a} must declare reciprocal supersession lineage.`)}}let i=new Set,l=new Set,f=(s)=>{if(i.has(s))return!0;if(l.has(s))return!1;i.add(s);let p=r.get(s)?.supersedesClaimIds.some((y)=>r.has(y)&&f(y))??!1;return i.delete(s),l.add(s),p};for(let s of r.keys())if(f(s)){t.push("Supersession lineage must be acyclic.");break}return t}export{A as assertCompanyOsTemporalAssertionSet,k as validateCompanyOsTemporalAssertionSet};