@lssm/lib.companyos-spec 3.0.2

package/dist/node/validation/company-intelligence-learning.js

@@ -0,0 +1 @@
+import{z as B}from"zod";import{z as h}from"zod";import{z as b}from"zod";var N=b.record(b.string(),b.unknown()),D=b.object({id:b.string().min(1),connectorCapability:b.string().min(1),providerKey:b.string().min(1).optional(),externalId:b.string().min(1).optional(),url:b.string().url().optional(),observedAt:b.string().min(1),metadata:N.default({})}),Et=b.object({default:b.string().min(1),translations:b.record(b.string(),b.string()).default({})}),L=b.object({id:b.string().min(1),type:b.string().min(1),label:b.string().min(1).optional()});var te="1.0.0",sn="company-intelligence-sha256:v1",dn="canonical-json:v1",At=h.enum(["truth","policy","proposal","approval","execution","outcome"]),Gt=h.enum(["source","source_version","asset","part","fragment","evidence","claim","policy","entity","relation","conflict","gap","graph","edition","query","answer","verification","feedback","experiment","evaluation","promotion","rollback","replay"]),d=h.string().regex(/^sha256:[a-f0-9]{64}$/),ln=h.object({version:h.literal(sn),canonicalization:h.literal(dn),value:d}).strict(),ie=h.object({from:h.iso.datetime({offset:!0}),to:h.iso.datetime({offset:!0}).optional()}).strict(),pn=h.object({reason:h.enum(["source_deleted","acl_revoked","superseded","retention_expired","privacy_request"]),tombstonedAt:h.iso.datetime({offset:!0})}).strict(),T=h.object({page:h.number().int().positive().optional(),section:h.string().min(1).optional(),lineStart:h.number().int().positive().optional(),lineEnd:h.number().int().positive().optional(),cell:h.string().min(1).optional(),messageId:h.string().min(1).optional(),timeStartMs:h.number().int().nonnegative().optional(),timeEndMs:h.number().int().nonnegative().optional()}).strict().refine((e)=>Object.values(e).some((n)=>n!==void 0),{message:"At least one stable evidence locator is required."}),Ie=h.array(h.string().min(1)).refine((e)=>new Set(e).size===e.length,{message:"Reference ids must be unique."}),x=h.object({contractVersion:h.literal(te),id:h.string().min(1),tenantId:h.string().min(1),ownerRef:L.strict(),recordedAt:h.iso.datetime({offset:!0}),validTime:ie,recordRefIds:Ie.default([]),evidenceRefIds:Ie.default([]),supersedesRefId:h.string().min(1).optional(),tombstone:pn.optional(),fingerprint:ln}).strict();import{z as R}from"zod";var ae=R.enum(["answered","abstained","refused","conflicted","degraded"]),re=x.extend({kind:R.literal("query"),authorityClass:R.literal("proposal"),payload:R.object({actorRef:R.string().min(1),questionDigest:R.string().regex(/^sha256:[a-f0-9]{64}$/),authorizationDecisionRef:R.string().min(1),retrievalConfigRef:R.string().min(1),requestedAt:R.iso.datetime({offset:!0}),maxEvidenceRecords:R.number().int().positive(),filters:R.record(R.string(),R.string()).default({})}).strict()}).strict(),oe=x.extend({kind:R.literal("answer"),authorityClass:R.literal("truth"),payload:R.object({queryRefId:R.string().min(1),status:ae,text:R.string().min(1).optional(),claimRefIds:R.array(R.string().min(1)).default([]),citationEvidenceRefIds:R.array(R.string().min(1)).default([]),conflictRefIds:R.array(R.string().min(1)).default([]),retrievalRunRef:R.string().min(1),verificationRefId:R.string().min(1).optional(),policyDecisionRef:R.string().min(1).optional(),graphSnapshotRefId:R.string().min(1).optional(),editionRefId:R.string().min(1).optional(),replayRefId:R.string().min(1),reasons:R.array(R.string().min(1)).default([]),usage:R.object({modelRef:R.string().min(1),promptFingerprint:R.string().regex(/^sha256:[a-f0-9]{64}$/),latencyMs:R.number().int().nonnegative(),costMicros:R.number().int().nonnegative()}).strict(),knowledgeAuthorizesAction:R.literal(!1)}).strict()}).strict(),ce=x.extend({kind:R.literal("verification"),authorityClass:R.literal("truth"),payload:R.object({answerRefId:R.string().min(1),verdict:R.enum(["supported","unsupported","blocked"]),claimSupport:R.array(R.object({claimRefId:R.string().min(1),evidenceRefIds:R.array(R.string().min(1)).min(1),verdict:R.enum(["supported","unsupported"]),confidence:R.number().min(0).max(1)}).strict()).default([]),deterministicRefsValidated:R.boolean(),independentVerifierRef:R.string().min(1),verifiedAt:R.iso.datetime({offset:!0})}).strict()}).strict(),Re=[re,oe,ce];import{z as l}from"zod";var H=l.enum(["unreviewed","review_required","approved","rejected","superseded"]),mn=x.extend({kind:l.literal("claim"),authorityClass:l.literal("truth"),payload:l.object({claimType:l.enum(["fact","procedure","decision","hypothesis","commitment","objective","risk","skill_candidate"]),statement:l.string().min(1),confidence:l.number().min(0).max(1),reviewState:H,freshness:l.enum(["fresh","stale","unknown"])}).strict()}).strict(),gn=x.extend({kind:l.literal("policy"),authorityClass:l.literal("policy"),payload:l.object({normativeStatement:l.string().min(1),scopeRefIds:l.array(l.string().min(1)).min(1),approvalRequired:l.boolean(),exceptionRefIds:l.array(l.string().min(1)).default([]),reviewState:H}).strict()}).strict(),yn=x.extend({kind:l.literal("entity"),authorityClass:l.literal("truth"),payload:l.object({entityType:l.string().min(1),label:l.string().min(1),resolutionState:l.enum(["candidate","canonical","rejected","merged"]),stableIdentifierDigests:l.array(d).default([]),confidence:l.number().min(0).max(1),reviewState:H}).strict()}).strict(),fn=x.extend({kind:l.literal("relation"),authorityClass:l.literal("truth"),payload:l.object({fromEntityRefId:l.string().min(1),toEntityRefId:l.string().min(1),predicate:l.string().min(1),confidence:l.number().min(0).max(1),reviewState:H}).strict()}).strict(),un=x.extend({kind:l.literal("conflict"),authorityClass:l.literal("truth"),payload:l.object({subjectRefId:l.string().min(1),competingRecordRefIds:l.array(l.string().min(1)).min(2),status:l.enum(["review_required","resolved","accepted_conflict"]),summary:l.string().min(1)}).strict()}).strict(),In=x.extend({kind:l.literal("gap"),authorityClass:l.literal("truth"),payload:l.object({question:l.string().min(1),reason:l.enum(["missing_evidence","conflict","stale","ownerless","unauthorized"]),severity:l.enum(["low","medium","high","critical"]),remediationRefId:l.string().min(1).optional(),state:l.enum(["open","in_review","resolved","accepted_unknown"])}).strict()}).strict(),Rn=x.extend({kind:l.literal("graph"),authorityClass:l.literal("truth"),payload:l.object({nodeRefIds:l.array(l.string().min(1)).min(1),edgeRefIds:l.array(l.string().min(1)).default([]),conflictRefIds:l.array(l.string().min(1)).default([]),snapshotAt:l.iso.datetime({offset:!0}),bounds:l.object({maxDepth:l.number().int().positive(),maxNodes:l.number().int().positive(),maxEdges:l.number().int().positive(),timeoutMs:l.number().int().positive()}).strict()}).strict()}).strict(),Cn=x.extend({kind:l.literal("edition"),authorityClass:l.literal("truth"),payload:l.object({version:l.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/),recordRefIds:l.array(l.string().min(1)).min(1),graphSnapshotRefId:l.string().min(1),reviewDecisionRef:l.string().min(1),parentEditionRefId:l.string().min(1).optional(),schemaFingerprint:d}).strict()}).strict(),se=[mn,gn,yn,fn,un,In,Rn,Cn];import{z as a}from"zod";import{z as o}from"zod";import{z as k}from"zod";var _n="company-intelligence-governed-learning:v1",A=Object.freeze({maxTransitions:64,maxMonitoringComparisons:8,maxPacketClosureRecords:128,maxRecordRefs:64,maxEvidenceRefs:64,maxMetrics:16,maxGuardrails:16,maxReasonCodes:16,minSampleObservations:1000,maxSampleObservations:1e4,maxSerializedBytes:65536,defaultDecisionDeadlineMs:1000,maxDecisionDeadlineMs:5000,maxAppendDeadlineMs:5000,maxGateAgeMs:86400000,maxApprovalValidityMs:86400000,maxReviewIntervalMs:2592000000,maxPromotionExpiryMs:7776000000}),vn=k.enum(["signal_captured","consent_redaction_recorded","classified","baseline_objective_recorded","candidate_proposed","risk_policy_decided","offline_evaluated","holdout_evaluated","adversarial_evaluated","shadow_evaluated","approval_recorded","canary_started","comparison_recorded","promotion_decided","rollback_executed","outcome_recorded","review_due","expired","replay_verified"]),Ce=k.enum(["signal_pending","feedback_accepted","classified","candidate_pending","evaluating","shadow","awaiting_approval","canary","promoted","rejected","rolled_back","outcome_recorded","review_due","expired","replay_exact","replay_drifted","blocked"]),de=["G01","G02","G03","G04","G05","G06","G07","G08","G09","G10","G11","G12","G13","G14","G15","G16","G17","G18","G19","G20","G21","G22","G23","G24","G25"],_e=k.enum(de),hn=["CI_LEARNING_BASELINE_REQUIRED","CI_LEARNING_BASELINE_NOT_IMMUTABLE","CI_LEARNING_OBJECTIVE_REQUIRED","CI_LEARNING_CANDIDATE_REQUIRED","CI_LEARNING_CANDIDATE_VERSION_REQUIRED","CI_LEARNING_CANDIDATE_FINGERPRINT_MISMATCH","CI_LEARNING_METRICS_REQUIRED","CI_LEARNING_GUARDRAILS_REQUIRED","CI_LEARNING_SAMPLE_NOT_REPRESENTATIVE","CI_LEARNING_TESTS_FAILED","CI_LEARNING_SAFETY_FAILED","CI_LEARNING_PRIVACY_FAILED","CI_LEARNING_COST_FAILED","CI_LEARNING_OFFLINE_REQUIRED","CI_LEARNING_HOLDOUT_REQUIRED","CI_LEARNING_ADVERSARIAL_REQUIRED","CI_LEARNING_EVALUATOR_NOT_INDEPENDENT","CI_LEARNING_POLICY_DENIED","CI_LEARNING_APPROVAL_REQUIRED","CI_LEARNING_APPROVER_NOT_INDEPENDENT","CI_LEARNING_ROLLBACK_PLAN_REQUIRED","CI_LEARNING_KILL_SWITCH_REQUIRED","CI_LEARNING_SHADOW_REQUIRED","CI_LEARNING_CANARY_REQUIRED","CI_LEARNING_COMPARISON_FAILED"],xn=[...hn,"CI_LEARNING_SIGNAL_ACCEPTED","CI_LEARNING_FEEDBACK_POISONED","CI_LEARNING_CONSENT_REQUIRED","CI_LEARNING_REDACTION_REQUIRED","CI_LEARNING_AUTHORITY_REQUIRED","CI_LEARNING_CLASSIFICATION_REQUIRED","CI_LEARNING_SIGNAL_DUPLICATE","CI_LEARNING_SIGNAL_ORIGIN_INVALID","CI_LEARNING_SELF_APPLY_FORBIDDEN","CI_LEARNING_RUNTIME_ARTIFACT_NOT_BOUNDED","CI_LEARNING_VENDOR_EXPORT_DENIED","CI_LEARNING_VENDOR_LEARNING_DENIED","CI_LEARNING_EGRESS_EVIDENCE_REQUIRED","CI_LEARNING_CANARY_GATES_INCOMPLETE","CI_LEARNING_CANARY_REGRESSION","CI_LEARNING_ROLLBACK_REPRODUCTION_FAILED","CI_LEARNING_OUTCOME_REQUIRED","CI_LEARNING_REVIEW_DUE","CI_LEARNING_EXPIRED","CI_LEARNING_REPLAY_EXACT","CI_LEARNING_REPLAY_DRIFT"],le=k.enum(xn),En=k.array(le).max(A.maxReasonCodes).refine((e)=>e.every((n,t)=>t===0||e[t-1]<n),"Reason codes must be sorted and unique."),j=k.object({version:k.literal(_n),lifecycleId:k.string().min(1),sequence:k.number().int().min(0).max(63),event:vn,stateBefore:Ce.nullable(),stateAfter:Ce,previousTransitionRecordRefId:k.string().min(1).optional(),previousStateFingerprint:d.optional(),inputFingerprint:d,stateFingerprint:d,reasonCodes:En,occurredAt:k.iso.datetime({offset:!0})}).strict();import{z as S}from"zod";var Q=S.object({receiptRef:S.string().min(1),status:S.literal("allow"),fingerprint:d,decidedAt:S.iso.datetime({offset:!0}),signerRef:S.string().min(1)}),ve=S.object({consentReceiptRef:S.string().min(1),redactionReceiptRef:S.string().min(1),authorityReceiptRef:S.string().min(1),originIntegrityReceiptRef:S.string().min(1)}).strict(),he=S.object({signalFingerprint:d,originRefId:S.string().min(1),consentReceipt:Q.extend({purpose:S.literal("governed_learning"),scopeRefId:S.string().min(1),signalFingerprint:d}).strict(),redactionReceipt:Q.extend({targetRefId:S.string().min(1)}).strict(),authorityReceipt:Q.extend({tenantId:S.string().min(1),objectiveRefId:S.string().min(1),actorRef:S.string().min(1)}).strict(),originIntegrityReceipt:Q.extend({originRefId:S.string().min(1),classification:S.literal("verified_first_party"),signalFingerprint:d}).strict(),duplicate:S.literal(!1)}).strict();var X=o.object({artifactRef:o.string().min(1),semanticVersion:o.string().regex(/^\d+\.\d+\.\d+$/),fingerprint:d}).strict(),xe=o.object({id:o.string().min(1),metric:o.string().min(1),direction:o.enum(["increase","decrease"]),threshold:o.number(),ownerRef:o.string().min(1)}).strict(),V=o.object({receiptRef:o.string().min(1),status:o.enum(["allow","deny","missing","failed","blocked","expired"]),fingerprint:d,decidedAt:o.iso.datetime({offset:!0}),signerRef:o.string().min(1)}).strict(),Ee=o.object({suiteVersion:o.string().min(1),status:o.literal("allow"),fingerprint:d,decidedAt:o.iso.datetime({offset:!0}),signerRef:o.string().min(1)}).strict(),Se=o.object({baselineNormalizedCost:o.number().positive(),candidateNormalizedCost:o.number().positive(),ratio:o.number().positive().max(1.2),tenantBudgetAllowed:o.literal(!0),fingerprint:d}).strict().superRefine((e,n)=>{let t=e.candidateNormalizedCost/e.baselineNormalizedCost;if(Math.abs(t-e.ratio)>Number.EPSILON)n.addIssue({code:"custom",path:["ratio"],message:"Cost ratio must match candidate divided by baseline."})}),be=o.object({expectedBaselineFingerprint:d,observedRestoredFingerprint:d,status:o.literal("allow"),fingerprint:d}).strict().superRefine((e,n)=>{if(e.expectedBaselineFingerprint!==e.observedRestoredFingerprint)n.addIssue({code:"custom",path:["observedRestoredFingerprint"],message:"Rollback test must reproduce the exact baseline."})}),pe=o.object({principalRef:o.string().min(1),implementationFingerprint:d,modelFingerprint:d,signerRef:o.string().min(1)}).strict(),Ne=o.object({datasetVersion:o.string().min(1),seed:o.number().int(),selectionMethod:o.string().min(1),observationCount:o.number().int().min(1000).max(1e4),strataCounts:o.record(o.string(),o.number().int().nonnegative()),languageCounts:o.record(o.string(),o.number().int().nonnegative()),fingerprint:d}).strict(),me=o.object({metricRef:o.string().min(1),baseline:o.number(),candidate:o.number(),lowerConfidenceBound:o.number().optional(),passed:o.boolean()}).strict(),ge=o.object({guardrailRef:o.string().min(1),observed:o.number(),threshold:o.number(),operator:o.enum(["eq","lte","gte"]),passed:o.boolean(),hard:o.literal(!0)}).strict(),Ae=o.object({headFingerprint:d,gates:o.array(o.object({id:_e,status:o.enum(["passed","missing","failed","blocked","expired"]),reasonCode:le,receiptFingerprint:d.optional()}).strict()).max(25)}).strict(),Ge=o.discriminatedUnion("type",[o.object({type:o.literal("runtime_artifact"),artifactKind:o.enum(["prompt","provider_route","retrieval_configuration","ranking_rule","extraction_rule","entity_resolution_rule","memory_rule","compiled_skill","runbook_artifact","runtime_policy"]),artifact:X,activation:o.literal("governed_runtime_activation"),selfApply:o.literal(!1)}).strict(),o.object({type:o.literal("repository_work_item"),changeKind:o.enum(["code","public_contract","migration","deployment_configuration"]),workItemRef:o.string().min(1),fingerprint:d,promotable:o.literal(!1),selfApply:o.literal(!1)}).strict()]),Le=o.object({vendorExportRequested:o.boolean(),vendorLearningRequested:o.boolean(),vendorExportAllowed:o.boolean().default(!1),vendorLearningAllowed:o.boolean().default(!1),receiptFingerprints:o.array(d).max(5),binding:o.object({signalFingerprint:d,sampleFingerprint:d,artifactFingerprint:d}).strict().optional()}).strict().superRefine((e,n)=>{if(!e.vendorExportAllowed&&!e.vendorLearningAllowed)return;if(!e.binding||e.receiptFingerprints.length!==5||new Set(e.receiptFingerprints).size!==5)n.addIssue({code:"custom",message:"Allowed vendor eligibility requires five unique bound receipts."})}),ke=o.object({baselineFingerprint:d,candidateFingerprint:d,sampleFingerprint:d,metrics:o.array(me).min(1).max(16),guardrails:o.array(ge).min(1).max(16),costRatio:o.number().positive(),latencyRatio:o.number().positive(),passed:o.boolean(),fingerprint:d}).strict(),Oe=o.object({expectedBaselineFingerprint:d,observedActiveFingerprint:d,restoredArtifactRef:o.string().min(1),reproductionReceiptFingerprint:d}).strict();var we=a.enum(["prompt","provider_route","retrieval_configuration","ranking_rule","extraction_rule","entity_resolution_rule","memory_rule","compiled_skill","runbook_artifact","runtime_policy"]),bn=a.object({answerRefId:a.string().min(1),actorRef:a.string().min(1),feedbackType:a.enum(["correction","outcome","retrieval_failure","drift"]),consentDecisionRef:a.string().min(1),redactionDecisionRef:a.string().min(1),correctionRefId:a.string().min(1).optional(),outcomeRefId:a.string().min(1).optional(),status:a.enum(["accepted","rejected","quarantined"]),governedLearning:j.optional(),dispositionEvidence:he.optional()}).strict(),Nn=a.object({feedbackType:a.literal("signal"),signalRefId:a.string().min(1),originRefId:a.string().min(1),actorRef:a.string().min(1),signalFingerprint:d,objectiveRefId:a.string().min(1),consentScopeRefId:a.string().min(1),originClassification:a.literal("verified_first_party"),dispositionRefs:ve,status:a.enum(["quarantined","rejected"]),governedLearning:j}).strict(),An=x.extend({kind:a.literal("feedback"),authorityClass:a.literal("outcome"),payload:a.union([bn,Nn])}).strict(),Gn=x.extend({kind:a.literal("experiment"),authorityClass:a.literal("proposal"),payload:a.object({baselineRefId:a.string().min(1),candidateArtifactRef:a.string().min(1),candidateKind:we,objective:a.string().min(1),policyDecisionRef:a.string().min(1),metricRefIds:a.array(a.string().min(1)).min(1),guardrailRefIds:a.array(a.string().min(1)).min(1),holdoutDatasetRef:a.string().min(1),adversarialDatasetRef:a.string().min(1),governedLearning:j.optional(),baseline:X.optional(),candidate:Ge.optional(),objectiveDefinition:xe.optional(),riskDecision:V.optional(),egressDecision:Le.optional(),reviewDueAt:a.iso.datetime({offset:!0}).optional(),expiresAt:a.iso.datetime({offset:!0}).optional(),state:a.enum(["proposed","offline_evaluation","shadow","canary","completed","rejected"])}).strict()}).strict(),Ln=x.extend({kind:a.literal("evaluation"),authorityClass:a.literal("truth"),payload:a.object({experimentRefId:a.string().min(1),candidateArtifactRef:a.string().min(1),evaluatorRef:a.string().min(1),independent:a.literal(!0),datasetRef:a.string().min(1),metricResults:a.record(a.string(),a.number()),safetyPassed:a.boolean(),privacyPassed:a.boolean(),costPassed:a.boolean(),verdict:a.enum(["pass","fail","blocked"]),evaluatedAt:a.iso.datetime({offset:!0}),governedLearning:j.optional(),phase:a.enum(["offline","holdout","adversarial","shadow","canary_compare","post_promotion"]).optional(),sampleReceipt:Ne.optional(),typedMetrics:a.array(me).max(16).optional(),typedGuardrails:a.array(ge).max(16).optional(),generatorIdentity:pe.optional(),evaluatorIdentity:pe.optional(),independenceReceipt:V.optional(),testsReceipt:Ee.optional(),costEvidence:Se.optional()}).strict()}).strict(),kn=x.extend({kind:a.literal("promotion"),authorityClass:a.literal("approval"),payload:a.object({experimentRefId:a.string().min(1),evaluationRefId:a.string().min(1),candidateArtifactRef:a.string().min(1),candidateKind:we,approvalDecisionRef:a.string().min(1),policyDecisionRef:a.string().min(1),rollbackRefId:a.string().min(1),killSwitchRef:a.string().min(1),stage:a.enum(["shadow","canary","promoted","rejected"]),approvedAt:a.iso.datetime({offset:!0}).optional(),governedLearning:j.optional(),gateBundle:Ae.optional(),approvalReceipt:V.optional(),rollbackTestReceipt:be.optional(),killSwitchReceipt:V.optional(),comparisonReceipt:ke.optional(),effectiveArtifact:X.optional()}).strict().superRefine((e,n)=>{if(e.governedLearning&&(e.stage==="canary"||e.stage==="promoted")&&!e.gateBundle)n.addIssue({code:"custom",path:["gateBundle"],message:"Governed canary and promotion require a gate bundle."})})}).strict(),On=x.extend({kind:a.literal("rollback"),authorityClass:a.literal("execution"),payload:a.object({promotionRefId:a.string().min(1),baselineRefId:a.string().min(1),triggerRef:a.string().min(1),status:a.enum(["ready","executed","failed"]),executedAt:a.iso.datetime({offset:!0}).optional(),outcomeRefId:a.string().min(1).optional(),replayRefId:a.string().min(1),governedLearning:j.optional(),reproduction:Oe.optional()}).strict()}).strict(),wn=x.extend({kind:a.literal("replay"),authorityClass:a.literal("truth"),payload:a.object({inputFingerprint:d,configurationRefIds:a.array(a.string().min(1)).min(1),codeVersionRef:a.string().min(1),providerFixtureRef:a.string().min(1),orderedEventRefIds:a.array(a.string().min(1)),outputFingerprint:d,status:a.enum(["exact","drifted","blocked"]),replayedAt:a.iso.datetime({offset:!0}),governedLearning:j.optional(),lifecycleHeadFingerprint:d.optional(),baselineFingerprint:d.optional(),effectiveArtifactFingerprint:d.optional(),orderedTransitionFingerprints:a.array(d).optional()}).strict()}).strict(),ye=[An,Gn,Ln,kn,On,wn];import{z as f}from"zod";var Dn=x.extend({kind:f.literal("source"),authorityClass:f.literal("truth"),payload:f.object({connectionRef:f.string().min(1),authorizationRef:f.string().min(1),externalId:f.string().min(1),sourceType:f.string().min(1),aclRefIds:f.array(f.string().min(1)).min(1),state:f.enum(["registered","ready","degraded","revoked","deleted"])}).strict()}).strict(),Tn=x.extend({kind:f.literal("source_version"),authorityClass:f.literal("truth"),payload:f.object({sourceRecordRefId:f.string().min(1),version:f.number().int().positive(),observedAt:f.iso.datetime({offset:!0}),sourceFingerprint:d,assetRefIds:f.array(f.string().min(1)).default([])}).strict()}).strict(),jn=x.extend({kind:f.literal("asset"),authorityClass:f.literal("truth"),payload:f.object({sourceVersionRefId:f.string().min(1),mediaType:f.string().min(1),byteLength:f.number().int().nonnegative(),storageRef:f.string().min(1),contentFingerprint:d,classification:f.enum(["public","internal","confidential","restricted"]),aclRefIds:f.array(f.string().min(1)).min(1)}).strict()}).strict(),Fn=x.extend({kind:f.literal("part"),authorityClass:f.literal("truth"),payload:f.object({assetRefId:f.string().min(1),partKind:f.enum(["page","section","table","line","cell","message","time_range"]),ordinal:f.number().int().nonnegative(),locator:T,contentFingerprint:d,language:f.string().min(2).optional(),parentPartRefId:f.string().min(1).optional()}).strict()}).strict(),zn=x.extend({kind:f.literal("fragment"),authorityClass:f.literal("truth"),payload:f.object({partRefId:f.string().min(1),stableFragmentId:f.string().min(1),ordinal:f.number().int().nonnegative(),locator:T,contentFingerprint:d,tokenCount:f.number().int().nonnegative(),previousFragmentRefId:f.string().min(1).optional(),nextFragmentRefId:f.string().min(1).optional(),aclRefIds:f.array(f.string().min(1)).min(1)}).strict()}).strict(),Pn=x.extend({kind:f.literal("evidence"),authorityClass:f.literal("truth"),payload:f.object({sourceVersionRefId:f.string().min(1),assetRefId:f.string().min(1).optional(),partRefId:f.string().min(1),fragmentRefId:f.string().min(1),locator:T,authorizationDecisionRef:f.string().min(1),redactionDecisionRef:f.string().min(1),contentFingerprint:d}).strict()}).strict(),fe=[Dn,Tn,jn,Fn,zn,Pn];import{z as r}from"zod";import{z as p}from"zod";import{z as c}from"zod";import{z as C}from"zod";var Z=C.object({id:C.string().min(1),substrate:C.enum(["knowledge","data_transmission","authos","rbac"]),ref:C.string().min(1),evidenceRefIds:C.array(C.string().min(1)).default([]),metadata:N.default({})}),Bn=Z.extend({substrate:C.literal("knowledge"),spaceKey:C.string().min(1).optional(),fragmentId:C.string().min(1),sourceRef:D.optional(),queryEvidenceRef:C.string().min(1).optional()}),De=Z.extend({substrate:C.literal("data_transmission"),protocolVersion:C.literal("data-transmission.v0"),roomId:C.string().min(1),cursor:C.string().min(1).optional(),idempotencyKey:C.string().min(1).optional()}),Te=Z.extend({substrate:C.literal("authos"),actorId:C.string().min(1),sessionRef:C.string().min(1).optional(),tenantId:C.string().min(1).optional()}),je=Z.extend({substrate:C.literal("rbac"),decisionId:C.string().min(1),verdict:C.enum(["allow","deny","redacted","redact","requires_review"]),permissionIds:C.array(C.string().min(1)).default([]),redactedFieldRefs:C.array(C.string().min(1)).default([])}),Fe=C.discriminatedUnion("substrate",[Bn,De,Te,je]),ii=C.object({actorRef:Te,rbacDecisionRef:je,resourceRef:C.string().min(1),sourceAclRefIds:C.array(C.string().min(1)).default([]),policyRefIds:C.array(C.string().min(1)).default([]),evidenceRefIds:C.array(C.string().min(1)).default([])}),ai=C.object({roomRef:De,changeRef:C.string().min(1),sequence:C.number().int().nonnegative(),idempotencyKey:C.string().min(1),replayRef:C.string().min(1)});var Vn=c.object({id:c.string().min(1),kind:c.enum(["knowledge","communication","issue_tracker","code_host","documentation","customer_system","incident_system","manual_record"]),label:c.string().min(1),connectorCapability:c.string().min(1),freshnessSla:c.enum(["manual","hourly","daily","near_realtime"]),metadata:N.default({})}),Mn=c.object({id:c.string().min(1),sourceSystemId:c.string().min(1),externalId:c.string().min(1),recordType:c.string().min(1),sourceHash:c.string().min(1),observedAt:c.string().min(1),provenance:c.array(D).min(1),substrateRefs:c.array(Fe).default([]),evidenceRefIds:c.array(c.string().min(1)).min(1),metadata:N.default({})}),qn=c.enum(["person","team","customer","project","repository","ticket","meeting","document","incident","decision","commitment","procedure","runbook","objective","work_item","knowledge_fragment"]),ue=c.object({status:c.enum(["fresh","stale","unknown"]),observedAt:c.string().min(1),expiresAt:c.string().min(1).optional(),evidenceRefIds:c.array(c.string().min(1)).min(1)}),Un=c.object({reason:c.enum(["deleted_source","superseded","privacy_request","merged"]),tombstonedAt:c.string().min(1),supersededByNodeId:c.string().min(1).optional(),evidenceRefIds:c.array(c.string().min(1)).min(1)}),$n=c.object({id:c.string().min(1),kind:qn,label:c.string().min(1),sourceRecordRefIds:c.array(c.string().min(1)).min(1),evidenceRefIds:c.array(c.string().min(1)).min(1),sourceAclRefIds:c.array(c.string().min(1)).default([]),policyRefIds:c.array(c.string().min(1)).default([]),confidence:c.number().min(0).max(1),reviewState:c.enum(["unreviewed","review_required","reviewed","rejected"]),freshness:ue,tombstone:Un.optional(),conflictRefIds:c.array(c.string().min(1)).default([]),metadata:N.default({})}),Kn=c.object({id:c.string().min(1),kind:c.enum(["owns","member_of","relates_to","blocks","depends_on","documents","decides","commits_to","implements","escalates_to","runbook_for","evidence_for"]),fromNodeId:c.string().min(1),toNodeId:c.string().min(1),sourceRecordRefIds:c.array(c.string().min(1)).min(1),evidenceRefIds:c.array(c.string().min(1)).min(1),confidence:c.number().min(0).max(1),reviewState:c.enum(["unreviewed","review_required","reviewed","rejected"]),metadata:N.default({})}),Yn=c.object({id:c.string().min(1),subjectNodeId:c.string().min(1),conflictingNodeIds:c.array(c.string().min(1)).default([]),conflictingRecordRefIds:c.array(c.string().min(1)).min(1),status:c.enum(["review_required","resolved","accepted_conflict"]),summary:c.string().min(1),evidenceRefIds:c.array(c.string().min(1)).min(1)}),di=c.object({id:c.string().min(1),generatedAt:c.string().min(1),snapshotHash:c.string().min(1),sourceSystems:c.array(Vn).min(1),sourceRecords:c.array(Mn).min(1),nodes:c.array($n).min(1),edges:c.array(Kn).default([]),conflicts:c.array(Yn).default([]),replayCursorRef:c.string().min(1).optional(),evidenceRefIds:c.array(c.string().min(1)).min(1),metadata:N.default({})});var Hn=p.enum(["skill_file","runbook_pack","agent_prompt","conformance_pack"]),Qn=p.enum(["ready","blocked","review_required","stale","unauthorized","identity_unresolved","acl_redacted","conflicted"]),Xn=p.enum(["pass","fail","not_run","blocked"]),Zn=p.enum(["proposed","accepted","rejected","superseded","applied_to_contract"]),ze=p.object({id:p.string().min(1),artifactKind:Hn,version:p.string().min(1),artifactRef:L,runbookProcedureId:p.string().min(1),sourceRecordRefIds:p.array(p.string().min(1)).min(1),identityDecisionIds:p.array(p.string().min(1)).default([]),accessDecisionIds:p.array(p.string().min(1)).min(1),compiledFromBrainEntryIds:p.array(p.string().min(1)).default([]),compilerPrincipalId:p.string().min(1),compiledAt:p.string().min(1),freshness:ue,evidenceRefIds:p.array(p.string().min(1)).min(1),sourceRefs:p.array(D).default([]),noProviderBinding:p.literal(!0).default(!0),metadata:N.default({})}).strict(),yi=p.object({id:p.string().min(1),compiledArtifactId:p.string().min(1),runbookReadinessId:p.string().min(1),status:Qn,evaluatedAt:p.string().min(1),sourceRecordRefIds:p.array(p.string().min(1)).min(1),identityDecisionIds:p.array(p.string().min(1)).default([]),accessDecisionIds:p.array(p.string().min(1)).min(1),blockedReasons:p.array(p.string().min(1)).default([]),evidenceRefIds:p.array(p.string().min(1)).min(1),metadata:N.default({})}).superRefine((e,n)=>{if(e.status!=="ready"&&e.blockedReasons.length===0)n.addIssue({code:p.ZodIssueCode.custom,message:"Non-ready agentic readiness checks require blocked reasons.",path:["blockedReasons"]});if(e.status==="ready"&&e.blockedReasons.length>0)n.addIssue({code:p.ZodIssueCode.custom,message:"Ready agentic readiness checks must not carry blocked reasons.",path:["blockedReasons"]})}),fi=p.object({id:p.string().min(1),compiledArtifactId:p.string().min(1),readinessCheckId:p.string().min(1),runbookConformanceCaseId:p.string().min(1),status:Xn,assertion:p.string().min(1),checkedAt:p.string().min(1),failureReason:p.string().min(1).optional(),replayRefIds:p.array(p.string().min(1)).default([]),executionReceiptIds:p.array(p.string().min(1)).default([]),evidenceRefIds:p.array(p.string().min(1)).min(1),noRuntimeExecution:p.literal(!0).default(!0),metadata:N.default({})}).superRefine((e,n)=>{if(["fail","blocked"].includes(e.status)&&!e.failureReason)n.addIssue({code:p.ZodIssueCode.custom,message:"Failing or blocked agentic conformance evidence requires a failure reason.",path:["failureReason"]})}),ui=p.object({id:p.string().min(1),compiledArtifactId:p.string().min(1),conformanceEvidenceId:p.string().min(1),correctionKind:p.enum(["source_correction","identity_correction","acl_correction","runbook_correction","outcome_correction"]),status:Zn,summary:p.string().min(1),outcomeReceiptId:p.string().min(1),observedAt:p.string().min(1),sourceEvidenceRefIds:p.array(p.string().min(1)).min(1),evidenceRefIds:p.array(p.string().min(1)).min(1),noProviderMutation:p.literal(!0).default(!0),metadata:N.default({})}).strict();import{z as g}from"zod";var W=g.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/),F=g.string().regex(/^sha256:[a-f0-9]{64}$/),O=g.object({recordRef:g.string().min(1),version:W,schemaRef:g.string().min(1),contentFingerprint:F}).strict().readonly(),Pe=g.object({id:g.string().min(1),version:W,contentFingerprint:F,schemaFingerprint:F}).strict().readonly(),Be=g.object({namespace:g.string().regex(/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/),schemaRef:g.string().min(1),recordRef:g.string().min(1),version:W,contentFingerprint:F}).strict().readonly(),Wn=g.object({targetSchemaRef:g.string().min(1),independentConsumerRefs:g.array(L.strict()).min(2).refine((e)=>new Set(e.map((n)=>`${n.type}:${n.id}`)).size>=2,"two distinct vertical consumers are required"),migrationDecisionRef:L.strict()}).strict().readonly(),Jn=g.object({extensionRef:Be,namespaceOwnerRef:L.strict(),schemaFingerprint:F,compatibilityIntent:g.enum(["additive","backward_compatible","breaking"]),evidenceRequirementRefs:g.array(L.strict()).min(1).readonly(),allowedRefTypes:g.array(g.string().min(1)).min(1).readonly(),sourcePolicyRef:L.strict(),legalReviewRef:L.strict(),lifecycleStatus:g.enum(["active","deprecated","promoted"]),deprecationDecisionRef:L.strict().optional(),replacementNamespace:g.string().min(1).optional(),promotion:Wn.optional(),collisionPolicy:g.literal("reject_incompatible_namespace_or_schema_reuse")}).strict().superRefine((e,n)=>{if(e.lifecycleStatus==="deprecated"&&!e.deprecationDecisionRef)n.addIssue({code:"custom",path:["deprecationDecisionRef"],message:"deprecated extensions require a decision ref"});if(e.lifecycleStatus==="promoted"&&!e.promotion)n.addIssue({code:"custom",path:["promotion"],message:"promoted extensions require approved migration evidence"})}),_i=g.array(Jn).readonly().superRefine((e,n)=>{let t=new Set,s=new Map;for(let[m,I]of e.entries()){let{namespace:y,schemaRef:_}=I.extensionRef;if(t.has(y))n.addIssue({code:"custom",path:[m,"extensionRef","namespace"],message:`namespace collision: ${y}`});t.add(y);let E=s.get(_);if(E&&E!==I.schemaFingerprint)n.addIssue({code:"custom",path:[m,"schemaFingerprint"],message:`incompatible schema reuse: ${_}`});s.set(_,I.schemaFingerprint)}}),et=g.object({identityContextRefs:g.array(O).readonly().default([]),knowledgeAssertionRefs:g.array(O).readonly().default([]),procedureRefs:g.array(O).readonly().default([]),policyRefs:g.array(O).readonly().default([]),hypothesisRefs:g.array(O).readonly().default([]),decisionRefs:g.array(O).readonly().default([]),evidenceRefs:g.array(O).readonly().default([])}).strict().readonly(),vi=g.object({id:g.string().min(1),version:W,recordedAt:g.iso.datetime({offset:!0}),effectiveFrom:g.iso.datetime({offset:!0}).optional(),parentEditionRef:Pe.optional(),baseEditionRef:Pe.optional(),contentFingerprint:F,schemaFingerprint:F,sections:et,graphSnapshotRef:O.optional(),evidenceReceiptRefs:g.array(g.string().min(1)).readonly().default([]),replayRef:g.string().min(1).optional(),reviewDecisionRef:g.string().min(1).optional(),extensionRefs:g.array(Be).readonly().default([])}).strict().readonly(),nt=g.object({id:g.string().min(1),title:g.string().min(1),kind:g.enum(["knowledge","procedure","policy","skill_candidate"]),summary:g.string().min(1),ownerPrincipalId:g.string().min(1),trustLevel:g.enum(["low","medium","high"]),freshness:g.enum(["fresh","stale","unknown"]),sourceRefs:g.array(D).min(1)}),tt=g.object({id:g.string().min(1),summary:g.string().min(1),severity:g.enum(["low","medium","high"]),relatedSourceRefs:g.array(D).default([]),ownerPrincipalId:g.string().min(1)}),hi=g.object({id:g.string().min(1),entries:g.array(nt).default([]),gaps:g.array(tt).default([])});var it=r.enum(["fact","hypothesis","policy","procedure","decision","skill_candidate"]),at=r.enum(["unreviewed","review_required","approved","rejected","superseded"]),Ve=r.object({statement:r.string().min(1),normativeLanguage:r.array(r.string().min(1)).default([]),scope:r.array(r.string().min(1)).default([]),prerequisites:r.array(r.string().min(1)).default([]),orderedSteps:r.array(r.string().min(1)).default([]),expectedOutputs:r.array(r.string().min(1)).default([]),failureBranches:r.array(r.string().min(1)).default([]),exceptions:r.array(r.string().min(1)).default([]),approvalBoundaries:r.array(r.string().min(1)).default([])}).strict(),Ai=r.object({tenantId:r.string().min(1),workspaceId:r.string().min(1),entryId:r.string().min(1),version:r.number().int().positive(),kind:it,title:r.string().min(1),content:Ve,ownerRef:r.string().min(1).optional(),sourceRecordRefs:r.array(O).default([]),evidenceRefIds:r.array(r.string().min(1)).default([]),policyRefIds:r.array(r.string().min(1)).default([]),domain:r.string().min(1),trustLevel:r.enum(["low","medium","high"]),confidence:r.number().min(0).max(1),freshness:r.enum(["fresh","stale","unknown"]),reviewState:at,conflictState:r.enum(["clear","contradictory","resolved"]),risk:r.enum(["low","medium","high","critical"]),recordedAt:r.iso.datetime({offset:!0}),validTime:ie,requiredCapabilities:r.array(r.string().min(1)).default([]),sensitiveFields:r.array(r.string().min(1)).default([]),tombstoneReason:r.enum(["source_deleted","acl_revoked","superseded","privacy_request"]).optional(),fingerprint:d}).strict(),Gi=r.object({tenantId:r.string().min(1),workspaceId:r.string().min(1),decisionId:r.string().min(1),entryId:r.string().min(1),entryVersion:r.number().int().positive(),verdict:r.enum(["approved","rejected"]),reviewerRef:r.string().min(1),decidedAt:r.iso.datetime({offset:!0}),evidenceRefIds:r.array(r.string().min(1)).min(1),reason:r.string().min(1),fingerprint:d}).strict(),Li=r.object({tenantId:r.string().min(1),workspaceId:r.string().min(1),gapId:r.string().min(1),entryRef:r.string().min(1),reason:r.enum(["ownerless","stale","unsupported","low_confidence","contradictory"]),status:r.enum(["open","in_progress","resolved","accepted_unknown"]),ownerRef:r.string().min(1).optional(),evidenceRefIds:r.array(r.string().min(1)).min(1),recordedAt:r.iso.datetime({offset:!0}),fingerprint:d}).strict(),ki=r.object({tenantId:r.string().min(1),workspaceId:r.string().min(1),remediationId:r.string().min(1),gapId:r.string().min(1),status:r.enum(["proposed","accepted","in_progress","completed","cancelled"]),ownerRef:r.string().min(1),workRef:r.string().min(1),evidenceRefIds:r.array(r.string().min(1)).min(1),recordedAt:r.iso.datetime({offset:!0}),fingerprint:d}).strict(),Oi=r.object({artifact:ze,sourceEntryRef:r.string().min(1),accountableOwnerRef:r.string().min(1),policyRefIds:r.array(r.string().min(1)).default([]),content:Ve,conformanceEvidenceRefIds:r.array(r.string().min(1)).min(1),contentFingerprint:d,noActionAuthorization:r.literal(!0),noActionExecution:r.literal(!0)}).strict();var Di=[{surface:"@lssm/lib.companyos-spec/types/company-intelligence",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/validation/company-intelligence",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/fixtures/company-intelligence",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/docs/company-intelligence.docblock",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/types/company-intelligence/grounding-result",kind:"schema",intent:"additive"},{surface:"@lssm/lib.companyos-spec/validation/company-intelligence-grounding",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/fixtures/company-intelligence/grounding-result",kind:"export",intent:"additive"},{surface:"companyIntelligence.feedback.signal@1.0.0",kind:"schema",intent:"additive"},{surface:"companyIntelligence.governedLearning.transition@1.0.0",kind:"schema",intent:"additive"},{surface:"@lssm/lib.companyos-spec/validation/company-intelligence#validateCompanyIntelligenceGovernedLearningHistory",kind:"export",intent:"additive"},{surface:"companyIntelligence.extraction.candidate@1.0.0",kind:"schema",intent:"additive"},{surface:"@lssm/lib.contracts-spec/companyos/company-intelligence",kind:"export",intent:"additive"},...["companyIntelligence.brain.entry.create","companyIntelligence.brain.entry.version.append","companyIntelligence.brain.entry.review","companyIntelligence.brain.edition.create","companyIntelligence.brain.edition.compare","companyIntelligence.brain.gap.remediate","companyIntelligence.brain.artifact.compile","companyIntelligence.record.validate","companyIntelligence.graph.query","companyIntelligence.answer.query","companyIntelligence.feedback.record","companyIntelligence.experiment.evaluate","companyIntelligence.promotion.decide","companyIntelligence.rollback.execute","companyIntelligence.replay.get"].map((e)=>({surface:e,kind:"operation",intent:"additive"})),...["companyIntelligence.brain.entry.versioned","companyIntelligence.brain.entry.reviewed","companyIntelligence.brain.edition.created","companyIntelligence.brain.gap.recorded","companyIntelligence.brain.remediation.recorded","companyIntelligence.brain.artifact.compiled","companyIntelligence.record.committed","companyIntelligence.answer.verified","companyIntelligence.feedback.recorded","companyIntelligence.promotion.decided","companyIntelligence.rollback.completed"].map((e)=>({surface:e,kind:"event",intent:"additive"}))];import{z as u}from"zod";var Me="companyos.company-intelligence-extraction-candidate",qe="1.0.0",zi=u.enum(["fact","entity","relation","policy","procedure"]),rt=u.object({evidenceRecordId:u.string().min(1),locator:T}).strict(),M=u.object({candidateKey:u.string().min(1),evidenceRefs:u.array(rt).min(1),confidence:u.number().min(0).max(1),risk:u.enum(["low","medium","high","critical"])}),ot=u.discriminatedUnion("kind",[M.extend({kind:u.literal("fact"),statement:u.string().min(1)}).strict(),M.extend({kind:u.literal("entity"),entityType:u.string().min(1),label:u.string().min(1)}).strict(),M.extend({kind:u.literal("relation"),fromCandidateKey:u.string().min(1),toCandidateKey:u.string().min(1),predicate:u.string().min(1)}).strict(),M.extend({kind:u.literal("policy"),normativeStatement:u.string().min(1),scopeRefIds:u.array(u.string().min(1)).min(1)}).strict(),M.extend({kind:u.literal("procedure"),statement:u.string().min(1)}).strict()]),Pi=u.object({schemaId:u.literal(Me),schemaVersion:u.literal(qe),candidates:u.array(ot).min(1)}).strict().refine(({candidates:e})=>new Set(e.map(({candidateKey:n})=>n)).size===e.length,{message:"Candidate keys must be unique.",path:["candidates"]}),Bi=u.object({decisionRef:u.string().min(1),reviewerRef:u.string().min(1),candidateKeys:u.array(u.string().min(1)).min(1),verdict:u.enum(["approved","rejected"]),decidedAt:u.iso.datetime({offset:!0})}).strict(),Vi=u.object({receiptId:u.string().min(1),tenantId:u.string().min(1),attemptId:u.string().min(1),modelRef:u.string().min(1),promptFingerprint:d,candidateSchema:u.object({id:u.literal(Me),version:u.literal(qe),fingerprint:d}).strict(),runtimeVersion:u.string().min(1),costMicros:u.number().int().nonnegative(),redactionDecisionRef:u.string().min(1),evidenceRefIds:u.array(u.string().min(1)),dispositions:u.array(u.object({candidateKey:u.string().min(1),status:u.enum(["accepted","rejected","review_required"]),reason:u.string().min(1),recordId:u.string().min(1).optional()}).strict()),version:u.number().int().positive(),supersedesReceiptId:u.string().min(1).optional(),fingerprint:d}).strict();import{z as i}from"zod";var ct=i.enum(["authorization_denied","scope_mismatch","policy_refused","no_authorized_evidence","retrieval_degraded","conflicting_authorized_evidence","stale_authorized_evidence","verifier_not_independent","drafting_degraded","draft_schema_invalid","verification_degraded","insufficient_claim_support","deadline_exceeded","budget_exceeded","fixture_adapter_forbidden","supported"]),U=i.array(i.string().min(1)).refine((e)=>new Set(e).size===e.length,{message:"Values must be unique."}),st=i.object({tenantId:i.string().min(1),workspaceId:i.string().min(1),actorRef:i.string().min(1),viewerRef:i.string().min(1),capabilityRefs:U,authorizationDecisionRef:i.string().min(1),policyDecisionRef:i.string().min(1).optional()}).strict(),dt=i.object({questionBytes:i.number().int().positive().max(4096),filterEntries:i.number().int().nonnegative().max(20),channelCount:i.number().int().positive().max(3),perChannelTopK:i.number().int().positive().max(32),mergedEvidenceRecords:i.number().int().positive().max(16),excerptBytesPerEvidence:i.number().int().positive().max(2048),totalModelEvidenceBytes:i.number().int().positive().max(16384),maxClaims:i.number().int().positive().max(8),maxClaimStatementBytes:i.number().int().positive().max(512),maxCitationsPerClaim:i.number().int().positive().max(4),maxDraftAttempts:i.literal(2),maxVerificationAttempts:i.literal(2),maxRetrievalCalls:i.literal(3),runDeadlineMs:i.number().int().positive().max(12000)}).strict(),$e=i.object({claimId:i.string().regex(/^clm_sha256:[a-f0-9]{64}$/),statement:i.string().min(1)}).strict(),Ke=i.object({citationId:i.string().regex(/^cit_sha256:[a-f0-9]{64}$/),evidenceRefId:i.string().min(1),tenantId:i.string().min(1),workspaceId:i.string().min(1),viewerRef:i.string().min(1),locator:T,excerpt:i.string().min(1),sourceContentFingerprint:d,viewerProjectionFingerprint:d,redactionDecisionRef:i.string().min(1),fusedScoreMicros:i.number().int().nonnegative()}).strict(),Ye=i.object({claimId:i.string().regex(/^clm_sha256:[a-f0-9]{64}$/),citationIds:i.array(i.string().regex(/^cit_sha256:[a-f0-9]{64}$/)).min(1).max(4),verdict:i.literal("supported"),confidence:i.number().min(0).max(1)}).strict(),Ue=i.object({providerRef:i.string().min(1),modelRef:i.string().min(1),promptOrRuleVersion:i.string().min(1),independenceDomain:i.string().min(1),provenance:i.enum(["runtime","fixture"])}).strict(),lt=i.object({request:d,retrieval:d.optional(),draft:d.optional(),validation:d.optional(),verification:d.optional(),output:d,replay:d}).strict(),pt=i.object({drafterIdentity:Ue.optional(),verifierIdentity:Ue.optional(),retrievedCitationLedger:U,callCounts:i.object({retrieval:i.number().int().nonnegative().max(3),draft:i.number().int().nonnegative().max(2),verify:i.number().int().nonnegative().max(2)}).strict(),repairCount:i.number().int().nonnegative().max(1),warnings:U,fingerprints:lt}).strict(),mt=i.object({schemaVersion:i.literal("company-intelligence-grounded-answer:v1"),codeVersionRef:i.string().min(1),retrievalConfigRef:i.string().min(1),recordedAt:i.iso.datetime({offset:!0}),modelVisibleEvidenceBytes:i.number().int().nonnegative().max(16384),supportThreshold:i.number().min(0).max(1)}).strict(),q=i.object({schemaVersion:i.literal("company-intelligence-grounded-answer:v1"),scope:st,status:ae,reasonCodes:i.array(ct).min(1),text:i.string().min(1).optional(),claims:i.array($e),citations:i.array(Ke),claimSupport:i.array(Ye),conflictRefIds:U,receipt:pt,metadata:mt,bounds:dt,knowledgeAuthorizesAction:i.literal(!1)}).strict(),J={text:i.undefined().optional(),claims:i.array(i.never()).max(0),citations:i.array(i.never()).max(0),claimSupport:i.array(i.never()).max(0)},Ki=i.discriminatedUnion("status",[q.extend({status:i.literal("answered"),text:i.string().min(1),claims:i.array($e).min(1).max(8),citations:i.array(Ke).min(1),claimSupport:i.array(Ye).min(1),conflictRefIds:i.array(i.never()).max(0)}),q.extend({status:i.literal("abstained"),...J}),q.extend({status:i.literal("refused"),...J}),q.extend({status:i.literal("conflicted"),...J,conflictRefIds:U.pipe(i.array(i.string()).min(1))}),q.extend({status:i.literal("degraded"),...J})]);var gt=B.discriminatedUnion("kind",[...fe,...se,...Re,...ye]),yt=[...fe,...se,re,oe,ce,...ye].map((e)=>e.omit({fingerprint:!0})),ea=B.union(yt),na=B.object({contractVersion:B.literal(te),tenantId:B.string().min(1),records:B.array(gt).min(1)}).strict();function v(e,n,t,s){e.push({code:n,path:t,message:s})}function He(e,n){let t=e.flatMap((y)=>y.kind==="evaluation"&&y.payload.phase?[y.payload.phase]:[]),s=["offline","holdout","adversarial","shadow"];for(let[y,_]of s.entries())if(t[y]!==void 0&&t[y]!==_)v(n,"CI_LEARNING_TRANSITION_INVALID",`records.phases.${y}`,"Evaluation phases cannot be skipped or reordered.");let m=t.indexOf("canary_compare");if(m>=0&&m!==4)v(n,"CI_LEARNING_TRANSITION_INVALID","records.phases.canary_compare","Canary comparison requires all four prior phases.");if(t.filter((y)=>y==="post_promotion").length>A.maxMonitoringComparisons)v(n,"CI_LEARNING_CAP_EXCEEDED","records.phases.post_promotion","Post-promotion comparison cap exceeded.")}function Qe(e,n,t){if(!e.payload.governedLearning)return;if(!e.payload.phase||!e.payload.sampleReceipt||!e.payload.typedMetrics?.length||!e.payload.typedGuardrails?.length||!e.payload.generatorIdentity||!e.payload.evaluatorIdentity||!e.payload.independenceReceipt||!e.payload.testsReceipt||!e.payload.costEvidence)v(t,"CI_LEARNING_HISTORY_INCOMPLETE",`${n}.payload`,"Governed evaluation requires phase, sample, typed metrics and guardrails, identities, independence, tests, and cost evidence.")}function Xe(e,n,t,s,m){if(t.kind!=="experiment"||!t.payload.egressDecision)return;let I=t.payload.egressDecision;if(!(I.vendorExportAllowed||I.vendorLearningAllowed))return;let _=e.find((G)=>G.kind==="feedback"&&G.payload.feedbackType==="signal"),E=e.find((G)=>G.kind==="evaluation"&&G.payload.sampleReceipt),w=t.payload.candidate,Y=w?.type==="runtime_artifact"?w.artifact.fingerprint:w?.fingerprint,P=new Set(e.slice(0,n).map(({fingerprint:G})=>G.value));if(I.vendorExportAllowed&&!I.vendorExportRequested||I.vendorLearningAllowed&&!I.vendorLearningRequested||!I.binding||I.binding.signalFingerprint!==(_?.kind==="feedback"&&_.payload.feedbackType==="signal"?_.payload.signalFingerprint:void 0)||I.binding.sampleFingerprint!==(E?.kind==="evaluation"?E.payload.sampleReceipt?.fingerprint:void 0)||I.binding.artifactFingerprint!==Y||I.receiptFingerprints.some((G)=>!P.has(G)))v(m,"CI_LEARNING_TRANSITION_INVALID",`${s}.payload.egressDecision`,"Vendor eligibility requires five prior receipts bound to one signal, sample, and artifact.")}var ft={G01:"candidate_proposed",G02:"candidate_proposed",G03:"candidate_proposed",G04:"candidate_proposed",G05:"candidate_proposed",G06:"candidate_proposed",G07:"offline_evaluated",G08:"offline_evaluated",G09:"offline_evaluated",G10:"offline_evaluated",G11:"offline_evaluated",G12:"offline_evaluated",G13:"offline_evaluated",G14:"offline_evaluated",G15:"holdout_evaluated",G16:"adversarial_evaluated",G17:"adversarial_evaluated",G18:"risk_policy_decided",G19:"approval_recorded",G20:"approval_recorded",G21:"approval_recorded",G22:"approval_recorded",G23:"shadow_evaluated",G24:"canary_started",G25:"comparison_recorded"};function We(e,n,t){let s=ft[n];return e.findLast((m)=>("governedLearning"in m.payload)&&m.payload.governedLearning?.lifecycleId===t&&m.payload.governedLearning.event===s)}function Je(e,n){let t=Date.parse(n)-Date.parse(e.recordedAt);return Number.isFinite(t)&&t>=0&&t<=A.maxGateAgeMs}function en(e,n,t){let s="governedLearning"in t.payload?t.payload.governedLearning:void 0;if(s?.event!=="review_due"&&s?.event!=="expired")return!0;let m=e.slice(0,n).findLast((y)=>y.kind==="promotion"&&y.payload.stage==="promoted"&&y.payload.governedLearning?.lifecycleId===s.lifecycleId);if(!m)return!1;let I=s.event==="review_due"?A.maxReviewIntervalMs:A.maxPromotionExpiryMs;return Date.parse(t.recordedAt)===Date.parse(m.recordedAt)+I}function nn(e,n){let t=ee(n,"candidate_proposed","experiment"),s=ee(n,"risk_policy_decided","experiment"),m=K(n,"offline"),I=K(n,"holdout"),y=K(n,"adversarial"),_=K(n,"shadow"),E=ee(n,"approval_recorded","promotion"),w=ee(n,"canary_started","promotion"),Y=K(n,"canary_compare"),P=t?.payload.candidate,G=P?.type==="runtime_artifact";return{G01:!!t?.payload.baseline,G02:!!t?.payload.baseline?.semanticVersion,G03:!!t?.payload.objectiveDefinition,G04:!!P,G05:G&&!!P.artifact.semanticVersion,G06:G&&P.artifact.artifactRef===t?.payload.candidateArtifactRef,G07:Ze(m?.payload.typedMetrics),G08:Ze(m?.payload.typedGuardrails)&&m.payload.typedGuardrails.every(({hard:ne})=>ne),G09:!!m?.payload.sampleReceipt,G10:m?.payload.verdict==="pass"&&m.payload.testsReceipt?.status==="allow"&&!!m.payload.testsReceipt.suiteVersion,G11:m?.payload.safetyPassed===!0,G12:m?.payload.privacyPassed===!0,G13:m?.payload.costPassed===!0&&m.payload.costEvidence?.tenantBudgetAllowed===!0&&m.payload.costEvidence.ratio<=1.2,G14:m?.payload.verdict==="pass",G15:I?.payload.verdict==="pass"&&I.payload.datasetRef!==m?.payload.datasetRef,G16:y?.payload.verdict==="pass",G17:ut(y),G18:s?.payload.riskDecision?.status==="allow",G19:E?.payload.approvalReceipt?.status==="allow",G20:It(E,y),G21:!!t?.payload.baseline&&E?.payload.rollbackTestReceipt?.status==="allow"&&E.payload.rollbackTestReceipt.expectedBaselineFingerprint===t.payload.baseline.fingerprint&&E.payload.rollbackTestReceipt.observedRestoredFingerprint===t.payload.baseline.fingerprint,G22:E?.payload.killSwitchReceipt?.status==="allow"&&E.payload.killSwitchReceipt.receiptRef===E.payload.killSwitchRef,G23:_?.payload.verdict==="pass",G24:w?.payload.stage==="canary",G25:Y?.payload.verdict==="pass"&&Y.payload.typedGuardrails?.every(({passed:ne})=>ne)===!0}[e]}var Ze=(e)=>!!e&&e.length>0&&e.length<=16,ee=(e,n,t)=>e.find((s)=>s.kind===t&&("governedLearning"in s.payload)&&s.payload.governedLearning?.event===n),K=(e,n)=>e.find((t)=>t.kind==="evaluation"&&t.payload.phase===n),ut=(e)=>!!e?.payload.generatorIdentity&&!!e.payload.evaluatorIdentity&&!!e.payload.independenceReceipt&&e.payload.independenceReceipt.status==="allow"&&e.payload.generatorIdentity.principalRef!==e.payload.evaluatorIdentity.principalRef&&e.payload.generatorIdentity.implementationFingerprint!==e.payload.evaluatorIdentity.implementationFingerprint&&e.payload.generatorIdentity.modelFingerprint!==e.payload.evaluatorIdentity.modelFingerprint&&e.payload.generatorIdentity.signerRef!==e.payload.evaluatorIdentity.signerRef,It=(e,n)=>!!e?.payload.approvalReceipt?.signerRef&&!!n?.payload.generatorIdentity&&!!n.payload.evaluatorIdentity&&![n.payload.generatorIdentity.signerRef,n.payload.evaluatorIdentity.signerRef,n.payload.generatorIdentity.principalRef,n.payload.evaluatorIdentity.principalRef].includes(e.payload.approvalReceipt.signerRef);function tn(e,n,t,s,m,I){if(Rt(t,m,I),Xe(e,n,t,m,I),!en(e,n,t))v(I,"CI_LEARNING_TRANSITION_INVALID",`${m}.recordedAt`,"Governed review and expiry must equal their promotion-derived deadline.");if(t.kind==="evaluation")Qe(t,m,I);if(t.kind==="evaluation"&&t.payload.phase){let y=t.payload.phase==="canary_compare"||t.payload.phase==="post_promotion"?"comparison":t.payload.phase;if(!s.event.startsWith(y))v(I,"CI_LEARNING_TRANSITION_INVALID",`${m}.payload.phase`,"Evaluation phase and event disagree.")}if(t.kind==="evaluation"&&t.payload.generatorIdentity&&t.payload.evaluatorIdentity){let y=t.payload.generatorIdentity,_=t.payload.evaluatorIdentity;if(y.principalRef===_.principalRef||y.implementationFingerprint===_.implementationFingerprint||y.modelFingerprint===_.modelFingerprint||y.signerRef===_.signerRef)v(I,"CI_LEARNING_TRANSITION_INVALID",`${m}.payload.evaluatorIdentity`,"Generator and evaluator must be independently identified.")}if(t.kind==="promotion"&&t.payload.gateBundle){let y=t.payload.stage==="canary"?23:t.payload.stage==="promoted"?25:0;if(y>0)Ct(t.payload.gateBundle.gates,y,m,I);let _=e.slice(0,n);if(t.payload.gateBundle.gates.some((E)=>{let w=We(_,E.id,s.lifecycleId);return!w||E.receiptFingerprint!==w.fingerprint.value||!Je(w,t.recordedAt)||!nn(E.id,_)}))v(I,"CI_LEARNING_HISTORY_INCOMPLETE",`${m}.payload.gateBundle.gates`,"Every gate must cite the exact lifecycle-scoped record that proves its concrete fact.");if((t.payload.stage==="canary"||t.payload.stage==="promoted")&&t.payload.approvalReceipt?.status!=="allow")v(I,"CI_LEARNING_HISTORY_INCOMPLETE",`${m}.payload.approvalReceipt`,"Governed canary and promotion require a concrete approval allow receipt.");if(t.payload.approvalReceipt&&Date.parse(t.payload.approvalReceipt.decidedAt)+A.maxApprovalValidityMs<Date.parse(t.recordedAt))v(I,"CI_LEARNING_TRANSITION_INVALID",`${m}.payload.approvalReceipt`,"Approval receipt expired before use.")}if(t.kind==="promotion"&&(t.payload.stage==="canary"||t.payload.stage==="promoted")){let y=e.find((_)=>_.kind==="experiment"&&_.payload.governedLearning?.event==="candidate_proposed");if(y?.kind!=="experiment"||y.payload.candidate?.type!=="runtime_artifact")v(I,"CI_LEARNING_TRANSITION_INVALID",`${m}.payload.candidateArtifactRef`,"Repository work items cannot enter canary or promotion.")}if(t.kind==="rollback"&&t.payload.status==="executed"){let y=t.payload.reproduction;if(!y||y.expectedBaselineFingerprint!==y.observedActiveFingerprint)v(I,"CI_LEARNING_REPLAY_DRIFT",`${m}.payload.reproduction`,"Executed rollback must reproduce the exact baseline.")}if(t.kind==="replay"&&t.payload.status==="exact"&&(!t.payload.lifecycleHeadFingerprint||!t.payload.baselineFingerprint||!t.payload.effectiveArtifactFingerprint||t.payload.orderedTransitionFingerprints?.length!==s.sequence))v(I,"CI_LEARNING_REPLAY_DRIFT",`${m}.payload`,"Exact replay requires complete ordered fingerprints.")}function Rt(e,n,t){if(e.recordRefIds.length>A.maxRecordRefs||e.evidenceRefIds.length>A.maxEvidenceRefs||new TextEncoder().encode(JSON.stringify(e.payload)).length>A.maxSerializedBytes)v(t,"CI_LEARNING_CAP_EXCEEDED",n,"Governed record exceeds a frozen v1 cap.");if(e.kind==="evaluation"&&e.payload.sampleReceipt){let s=e.payload.sampleReceipt,m=Object.values(s.strataCounts).reduce((y,_)=>y+_,0),I=Object.values(s.languageCounts).reduce((y,_)=>y+_,0);if(m!==s.observationCount||I!==s.observationCount)v(t,"CI_LEARNING_TRANSITION_INVALID",`${n}.payload.sampleReceipt`,"Sample strata and language counts must each cover the exact observation count.")}}function Ct(e,n,t,s){let m=de.slice(0,n);if(e.length!==n||e.some((I,y)=>I.id!==m[y]||I.status!=="passed"||!I.receiptFingerprint))v(s,"CI_LEARNING_HISTORY_INCOMPLETE",`${t}.payload.gateBundle.gates`,n===23?"Canary requires G01-G23 green.":"Promotion requires G01-G25 green.")}function an(e,n,t){if(e.kind!=="feedback"||e.payload.feedbackType==="signal"||n.kind!=="feedback"||n.payload.feedbackType!=="signal")return!1;let s=e.payload.dispositionEvidence,m=n.payload.dispositionRefs;if(!s)return!1;return s.duplicate===!1&&s.signalFingerprint===n.payload.signalFingerprint&&s.originRefId===n.payload.originRefId&&s.consentReceipt.receiptRef===m.consentReceiptRef&&s.consentReceipt.receiptRef===e.payload.consentDecisionRef&&s.consentReceipt.purpose==="governed_learning"&&s.consentReceipt.scopeRefId===n.payload.consentScopeRefId&&s.consentReceipt.scopeRefId===t&&s.consentReceipt.signalFingerprint===n.payload.signalFingerprint&&s.redactionReceipt.receiptRef===m.redactionReceiptRef&&s.redactionReceipt.receiptRef===e.payload.redactionDecisionRef&&s.redactionReceipt.targetRefId===n.payload.originRefId&&s.authorityReceipt.receiptRef===m.authorityReceiptRef&&s.authorityReceipt.tenantId===n.tenantId&&s.authorityReceipt.tenantId===e.tenantId&&s.authorityReceipt.objectiveRefId===n.payload.objectiveRefId&&s.authorityReceipt.actorRef===n.payload.actorRef&&s.authorityReceipt.actorRef===e.payload.actorRef&&s.originIntegrityReceipt.receiptRef===m.originIntegrityReceiptRef&&s.originIntegrityReceipt.originRefId===n.payload.originRefId&&s.originIntegrityReceipt.classification===n.payload.originClassification&&s.originIntegrityReceipt.signalFingerprint===n.payload.signalFingerprint}var _t={signal_captured:"feedback",consent_redaction_recorded:"feedback",classified:"experiment",baseline_objective_recorded:"experiment",candidate_proposed:"experiment",risk_policy_decided:"experiment",offline_evaluated:"evaluation",holdout_evaluated:"evaluation",adversarial_evaluated:"evaluation",shadow_evaluated:"evaluation",approval_recorded:"promotion",canary_started:"promotion",comparison_recorded:"evaluation",promotion_decided:"promotion",rollback_executed:"rollback",outcome_recorded:"feedback",review_due:"experiment",expired:"experiment",replay_verified:"replay"},vt=new Set(["signal_captured:null:signal_pending","consent_redaction_recorded:signal_pending:feedback_accepted","classified:feedback_accepted:classified","baseline_objective_recorded:classified:candidate_pending","candidate_proposed:candidate_pending:candidate_pending","risk_policy_decided:candidate_pending:evaluating","risk_policy_decided:candidate_pending:rejected","offline_evaluated:evaluating:evaluating","holdout_evaluated:evaluating:evaluating","adversarial_evaluated:evaluating:evaluating","adversarial_evaluated:evaluating:rejected","shadow_evaluated:evaluating:shadow","shadow_evaluated:evaluating:rejected","approval_recorded:shadow:awaiting_approval","canary_started:awaiting_approval:canary","comparison_recorded:canary:canary","comparison_recorded:canary:rejected","promotion_decided:canary:promoted","promotion_decided:canary:rejected","comparison_recorded:promoted:promoted","comparison_recorded:promoted:rejected","rollback_executed:rejected:rolled_back","rollback_executed:promoted:rolled_back","rollback_executed:review_due:rolled_back","outcome_recorded:promoted:outcome_recorded","outcome_recorded:rejected:outcome_recorded","outcome_recorded:rolled_back:outcome_recorded","review_due:outcome_recorded:review_due","expired:review_due:expired","replay_verified:expired:replay_exact","replay_verified:expired:replay_drifted","replay_verified:expired:blocked"]);function z(e){if(!("governedLearning"in e.payload))return;return e.payload.governedLearning}function rn(e,n,t,s){return e.tenantId===n.tenantId&&t.lifecycleId===s.lifecycleId&&e.ownerRef.id===n.ownerRef.id&&e.ownerRef.type===n.ownerRef.type&&e.ownerRef.label===n.ownerRef.label&&e.contractVersion===n.contractVersion&&e.fingerprint.version===n.fingerprint.version&&e.fingerprint.canonicalization===n.fingerprint.canonicalization}function on(e,n,t,s){if(n.occurredAt!==e.recordedAt)v(s,"CI_LEARNING_FINGERPRINT_MISMATCH",`${t}.recordedAt`,"Recorded and governed occurrence time must match.");if(e.kind!==_t[n.event])v(s,"CI_LEARNING_TRANSITION_INVALID",`${t}.kind`,"Event is stored in the wrong canonical record kind.");if(n.event==="signal_captured"&&(e.kind!=="feedback"||e.payload.feedbackType!=="signal"||e.payload.status!=="quarantined"))v(s,"CI_LEARNING_TRANSITION_INVALID",`${t}.payload.status`,"Only a zero-weight quarantined signal may await consent and redaction.");if(n.event==="consent_redaction_recorded"&&(e.kind!=="feedback"||e.payload.feedbackType==="signal"||e.payload.status!=="accepted"))v(s,"CI_LEARNING_TRANSITION_INVALID",`${t}.payload.status`,"Learning requires accepted feedback with consent and redaction refs.");let m=`${n.event}:${n.stateBefore??"null"}:${n.stateAfter}`;if(!vt.has(m))v(s,"CI_LEARNING_TRANSITION_INVALID",`${t}.payload.governedLearning`,`Illegal governed transition ${m}.`)}function cn(e,n,t,s,m){if(n===0){if(s.event!=="signal_captured"||s.stateBefore!==null||s.previousTransitionRecordRefId||s.previousStateFingerprint)v(m,"CI_LEARNING_HISTORY_INCOMPLETE","records.0","Sequence zero must be an unlinked signal capture.");return}let I=e[n-1],y=z(I);if(s.event==="consent_redaction_recorded"&&!an(t,I,s.lifecycleId))v(m,"CI_LEARNING_HISTORY_INCOMPLETE",`records.${n}.payload.dispositionEvidence`,"Accepted governed feedback requires exact allow disposition evidence.");if(!y||s.previousTransitionRecordRefId!==I.id||s.previousStateFingerprint!==y.stateFingerprint||s.stateBefore!==y.stateAfter||!t.recordRefIds.includes(I.id))v(m,"CI_LEARNING_HEAD_CONFLICT",`records.${n}`,"Transition does not extend the exact previous head.")}function Ta(e){let n=e.filter((I)=>z(I)!==void 0).sort((I,y)=>(z(I)?.sequence??0)-(z(y)?.sequence??0)),t=[];if(n.length===0)return{ok:!0,issues:t};if(n.length>A.maxTransitions)v(t,"CI_LEARNING_CAP_EXCEEDED","records","Lifecycle transition cap exceeded.");let s=n[0],m=z(s);if(!m)return{ok:!0,issues:t};for(let[I,y]of n.entries()){let _=z(y);if(!_)continue;let E=`records.${I}`;if(!rn(y,s,_,m))v(t,"CI_LEARNING_TENANT_MISMATCH",E,"Governed history must share exact tenant, lifecycle, owner, and contract identity.");if(_.sequence!==I)v(t,"CI_LEARNING_SEQUENCE_CONFLICT",`${E}.payload.governedLearning.sequence`,"Sequences must be contiguous from zero.");on(y,_,E,t),cn(n,I,y,_,t),tn(n,I,y,_,E,t)}return He(n,t),{ok:t.length===0,issues:t}}export{v as addLearningIssue,Ta as validateCompanyIntelligenceGovernedLearningHistory};

package/dist/node/validation/company-intelligence-record-semantics.js

@@ -0,0 +1 @@
+function I(e,a,t){if((e.kind==="claim"||e.kind==="entity"||e.kind==="relation")&&e.payload.confidence<0.9&&e.payload.reviewState!=="review_required")i(t,"CI_REVIEW_REQUIRED",a,e,"Low-confidence semantic candidates require review.");if(e.kind==="answer")p(e,a,t);if(e.kind==="feedback"){let n=e.payload.feedbackType==="correction"&&!e.payload.correctionRefId,s=e.payload.feedbackType==="outcome"&&!e.payload.outcomeRefId;if(n||s)i(t,"CI_FEEDBACK_SEMANTICS_INVALID",a,e,"Feedback must reference its correction or outcome.")}if(e.kind==="evaluation"&&e.payload.verdict==="pass"&&(!e.payload.safetyPassed||!e.payload.privacyPassed||!e.payload.costPassed))i(t,"CI_EVALUATION_GATES_FAILED",a,e,"Passing evaluation requires safety, privacy, and cost gates.");if(e.kind==="promotion"&&e.payload.stage==="promoted"&&!e.payload.approvedAt)i(t,"CI_PROMOTION_GATES_REQUIRED",a,e,"Promoted records require approval time and gate refs.");if(e.kind==="rollback"&&e.payload.status==="executed"&&!e.payload.executedAt)i(t,"CI_ROLLBACK_TIME_REQUIRED",a,e,"Executed rollback requires execution time.");if(e.kind==="replay"&&new Set(e.payload.orderedEventRefIds).size!==e.payload.orderedEventRefIds.length)i(t,"CI_REPLAY_ORDER_INVALID",a,e,"Replay event order cannot contain duplicates.")}function p(e,a,t){let{payload:n}=e,s=n.status==="answered"&&(!n.text||n.claimRefIds.length===0||n.citationEvidenceRefIds.length===0||!n.verificationRefId),o=(n.status==="abstained"||n.status==="refused")&&(n.claimRefIds.length>0||n.citationEvidenceRefIds.length>0),l=n.status==="conflicted"&&n.conflictRefIds.length===0,c=n.status!=="answered"&&n.reasons.length===0,d=n.status==="refused"&&!n.policyDecisionRef;if(s||o||l||c||d)i(t,"CI_ANSWER_SEMANTICS_INVALID",a,e,"Answer status, support, policy, and reason fields are inconsistent.")}function i(e,a,t,n,s){e.push({code:a,path:`records.${t}.${n.kind}`,message:s})}export{I as validateCompanyIntelligenceRecordSemantics};

package/dist/node/validation/company-intelligence-semantics.js

@@ -0,0 +1 @@
+function d(e,i,t){if((e.kind==="claim"||e.kind==="entity"||e.kind==="relation")&&e.payload.confidence<0.9&&e.payload.reviewState!=="review_required")l(t,"CI_REVIEW_REQUIRED",i,e,"Low-confidence semantic candidates require review.");if(e.kind==="answer")p(e,i,t);if(e.kind==="feedback"){let n=e.payload.feedbackType==="correction"&&!e.payload.correctionRefId,a=e.payload.feedbackType==="outcome"&&!e.payload.outcomeRefId;if(n||a)l(t,"CI_FEEDBACK_SEMANTICS_INVALID",i,e,"Feedback must reference its correction or outcome.")}if(e.kind==="evaluation"&&e.payload.verdict==="pass"&&(!e.payload.safetyPassed||!e.payload.privacyPassed||!e.payload.costPassed))l(t,"CI_EVALUATION_GATES_FAILED",i,e,"Passing evaluation requires safety, privacy, and cost gates.");if(e.kind==="promotion"&&e.payload.stage==="promoted"&&!e.payload.approvedAt)l(t,"CI_PROMOTION_GATES_REQUIRED",i,e,"Promoted records require approval time and gate refs.");if(e.kind==="rollback"&&e.payload.status==="executed"&&!e.payload.executedAt)l(t,"CI_ROLLBACK_TIME_REQUIRED",i,e,"Executed rollback requires execution time.");if(e.kind==="replay"&&new Set(e.payload.orderedEventRefIds).size!==e.payload.orderedEventRefIds.length)l(t,"CI_REPLAY_ORDER_INVALID",i,e,"Replay event order cannot contain duplicates.")}function p(e,i,t){let{payload:n}=e,a=n.status==="answered"&&(!n.text||n.claimRefIds.length===0||n.citationEvidenceRefIds.length===0||!n.verificationRefId),o=(n.status==="abstained"||n.status==="refused")&&(n.claimRefIds.length>0||n.citationEvidenceRefIds.length>0),s=n.status==="conflicted"&&n.conflictRefIds.length===0,c=n.status!=="answered"&&n.reasons.length===0,r=n.status==="refused"&&!n.policyDecisionRef;if(a||o||s||c||r)l(t,"CI_ANSWER_SEMANTICS_INVALID",i,e,"Answer status, support, policy, and reason fields are inconsistent.")}function l(e,i,t,n,a){e.push({code:i,path:`records.${t}.${n.kind}`,message:a})}var E=new Set(["claim","policy","entity","relation","conflict","gap","graph","edition","answer","verification","feedback","experiment","evaluation","promotion","rollback","replay"]);function y(e){let i=[],t=new Map;for(let[n,a]of e.records.entries()){if(t.has(a.id))I(i,"CI_DUPLICATE_ID",n,a,"Record ids must be unique.");if(t.set(a.id,a),a.tenantId!==e.tenantId)I(i,"CI_TENANT_MISMATCH",n,a,"Record tenant must match packet tenant.");if(a.validTime.to&&Date.parse(a.validTime.to)<=Date.parse(a.validTime.from))I(i,"CI_VALID_TIME_INVALID",n,a,"Valid-to must be later than valid-from.");let o=a.kind==="feedback"&&a.payload.feedbackType==="signal";if(E.has(a.kind)&&a.evidenceRefIds.length===0&&!o)I(i,"CI_EVIDENCE_REQUIRED",n,a,"Semantic records require evidence refs.")}for(let[n,a]of e.records.entries()){for(let o of a.recordRefIds)if(!t.has(o))I(i,"CI_REFERENCE_NOT_FOUND",n,a,`Unknown record ref ${o}.`);for(let o of a.evidenceRefIds){let s=t.get(o);if(!s)I(i,"CI_EVIDENCE_NOT_FOUND",n,a,`Unknown evidence ref ${o}.`);else if(s.kind!=="evidence")I(i,"CI_EVIDENCE_KIND_INVALID",n,a,`${o} is not an evidence record.`)}d(a,n,i)}return i}function I(e,i,t,n,a){e.push({code:i,path:`records.${t}.${n.kind}`,message:a})}export{y as validateCompanyIntelligenceSemanticInvariants};

package/dist/node/validation/company-intelligence.js

@@ -0,0 +1 @@
+import{canonicalJsonString as he}from"@lssm/lib.contracts-spec/rich-reference/canonical-serializer";import{z as B}from"zod";import{z as h}from"zod";import{z as b}from"zod";var N=b.record(b.string(),b.unknown()),T=b.object({id:b.string().min(1),connectorCapability:b.string().min(1),providerKey:b.string().min(1).optional(),externalId:b.string().min(1).optional(),url:b.string().url().optional(),observedAt:b.string().min(1),metadata:N.default({})}),Pt=b.object({default:b.string().min(1),translations:b.record(b.string(),b.string()).default({})}),G=b.object({id:b.string().min(1),type:b.string().min(1),label:b.string().min(1).optional()});var re="1.0.0",Z="company-intelligence-sha256:v1",W="canonical-json:v1",qt=h.enum(["truth","policy","proposal","approval","execution","outcome"]),Ut=h.enum(["source","source_version","asset","part","fragment","evidence","claim","policy","entity","relation","conflict","gap","graph","edition","query","answer","verification","feedback","experiment","evaluation","promotion","rollback","replay"]),l=h.string().regex(/^sha256:[a-f0-9]{64}$/),_n=h.object({version:h.literal(Z),canonicalization:h.literal(W),value:l}).strict(),ce=h.object({from:h.iso.datetime({offset:!0}),to:h.iso.datetime({offset:!0}).optional()}).strict(),vn=h.object({reason:h.enum(["source_deleted","acl_revoked","superseded","retention_expired","privacy_request"]),tombstonedAt:h.iso.datetime({offset:!0})}).strict(),w=h.object({page:h.number().int().positive().optional(),section:h.string().min(1).optional(),lineStart:h.number().int().positive().optional(),lineEnd:h.number().int().positive().optional(),cell:h.string().min(1).optional(),messageId:h.string().min(1).optional(),timeStartMs:h.number().int().nonnegative().optional(),timeEndMs:h.number().int().nonnegative().optional()}).strict().refine((e)=>Object.values(e).some((n)=>n!==void 0),{message:"At least one stable evidence locator is required."}),xe=h.array(h.string().min(1)).refine((e)=>new Set(e).size===e.length,{message:"Reference ids must be unique."}),E=h.object({contractVersion:h.literal(re),id:h.string().min(1),tenantId:h.string().min(1),ownerRef:G.strict(),recordedAt:h.iso.datetime({offset:!0}),validTime:ce,recordRefIds:xe.default([]),evidenceRefIds:xe.default([]),supersedesRefId:h.string().min(1).optional(),tombstone:vn.optional(),fingerprint:_n}).strict();import{z as R}from"zod";var se=R.enum(["answered","abstained","refused","conflicted","degraded"]),de=E.extend({kind:R.literal("query"),authorityClass:R.literal("proposal"),payload:R.object({actorRef:R.string().min(1),questionDigest:R.string().regex(/^sha256:[a-f0-9]{64}$/),authorizationDecisionRef:R.string().min(1),retrievalConfigRef:R.string().min(1),requestedAt:R.iso.datetime({offset:!0}),maxEvidenceRecords:R.number().int().positive(),filters:R.record(R.string(),R.string()).default({})}).strict()}).strict(),le=E.extend({kind:R.literal("answer"),authorityClass:R.literal("truth"),payload:R.object({queryRefId:R.string().min(1),status:se,text:R.string().min(1).optional(),claimRefIds:R.array(R.string().min(1)).default([]),citationEvidenceRefIds:R.array(R.string().min(1)).default([]),conflictRefIds:R.array(R.string().min(1)).default([]),retrievalRunRef:R.string().min(1),verificationRefId:R.string().min(1).optional(),policyDecisionRef:R.string().min(1).optional(),graphSnapshotRefId:R.string().min(1).optional(),editionRefId:R.string().min(1).optional(),replayRefId:R.string().min(1),reasons:R.array(R.string().min(1)).default([]),usage:R.object({modelRef:R.string().min(1),promptFingerprint:R.string().regex(/^sha256:[a-f0-9]{64}$/),latencyMs:R.number().int().nonnegative(),costMicros:R.number().int().nonnegative()}).strict(),knowledgeAuthorizesAction:R.literal(!1)}).strict()}).strict(),pe=E.extend({kind:R.literal("verification"),authorityClass:R.literal("truth"),payload:R.object({answerRefId:R.string().min(1),verdict:R.enum(["supported","unsupported","blocked"]),claimSupport:R.array(R.object({claimRefId:R.string().min(1),evidenceRefIds:R.array(R.string().min(1)).min(1),verdict:R.enum(["supported","unsupported"]),confidence:R.number().min(0).max(1)}).strict()).default([]),deterministicRefsValidated:R.boolean(),independentVerifierRef:R.string().min(1),verifiedAt:R.iso.datetime({offset:!0})}).strict()}).strict(),Se=[de,le,pe];import{z as p}from"zod";var X=p.enum(["unreviewed","review_required","approved","rejected","superseded"]),hn=E.extend({kind:p.literal("claim"),authorityClass:p.literal("truth"),payload:p.object({claimType:p.enum(["fact","procedure","decision","hypothesis","commitment","objective","risk","skill_candidate"]),statement:p.string().min(1),confidence:p.number().min(0).max(1),reviewState:X,freshness:p.enum(["fresh","stale","unknown"])}).strict()}).strict(),En=E.extend({kind:p.literal("policy"),authorityClass:p.literal("policy"),payload:p.object({normativeStatement:p.string().min(1),scopeRefIds:p.array(p.string().min(1)).min(1),approvalRequired:p.boolean(),exceptionRefIds:p.array(p.string().min(1)).default([]),reviewState:X}).strict()}).strict(),xn=E.extend({kind:p.literal("entity"),authorityClass:p.literal("truth"),payload:p.object({entityType:p.string().min(1),label:p.string().min(1),resolutionState:p.enum(["candidate","canonical","rejected","merged"]),stableIdentifierDigests:p.array(l).default([]),confidence:p.number().min(0).max(1),reviewState:X}).strict()}).strict(),Sn=E.extend({kind:p.literal("relation"),authorityClass:p.literal("truth"),payload:p.object({fromEntityRefId:p.string().min(1),toEntityRefId:p.string().min(1),predicate:p.string().min(1),confidence:p.number().min(0).max(1),reviewState:X}).strict()}).strict(),bn=E.extend({kind:p.literal("conflict"),authorityClass:p.literal("truth"),payload:p.object({subjectRefId:p.string().min(1),competingRecordRefIds:p.array(p.string().min(1)).min(2),status:p.enum(["review_required","resolved","accepted_conflict"]),summary:p.string().min(1)}).strict()}).strict(),Nn=E.extend({kind:p.literal("gap"),authorityClass:p.literal("truth"),payload:p.object({question:p.string().min(1),reason:p.enum(["missing_evidence","conflict","stale","ownerless","unauthorized"]),severity:p.enum(["low","medium","high","critical"]),remediationRefId:p.string().min(1).optional(),state:p.enum(["open","in_review","resolved","accepted_unknown"])}).strict()}).strict(),An=E.extend({kind:p.literal("graph"),authorityClass:p.literal("truth"),payload:p.object({nodeRefIds:p.array(p.string().min(1)).min(1),edgeRefIds:p.array(p.string().min(1)).default([]),conflictRefIds:p.array(p.string().min(1)).default([]),snapshotAt:p.iso.datetime({offset:!0}),bounds:p.object({maxDepth:p.number().int().positive(),maxNodes:p.number().int().positive(),maxEdges:p.number().int().positive(),timeoutMs:p.number().int().positive()}).strict()}).strict()}).strict(),Ln=E.extend({kind:p.literal("edition"),authorityClass:p.literal("truth"),payload:p.object({version:p.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/),recordRefIds:p.array(p.string().min(1)).min(1),graphSnapshotRefId:p.string().min(1),reviewDecisionRef:p.string().min(1),parentEditionRefId:p.string().min(1).optional(),schemaFingerprint:l}).strict()}).strict(),me=[hn,En,xn,Sn,bn,Nn,An,Ln];import{z as r}from"zod";import{z as s}from"zod";import{z as k}from"zod";var Gn="company-intelligence-governed-learning:v1",A=Object.freeze({maxTransitions:64,maxMonitoringComparisons:8,maxPacketClosureRecords:128,maxRecordRefs:64,maxEvidenceRefs:64,maxMetrics:16,maxGuardrails:16,maxReasonCodes:16,minSampleObservations:1000,maxSampleObservations:1e4,maxSerializedBytes:65536,defaultDecisionDeadlineMs:1000,maxDecisionDeadlineMs:5000,maxAppendDeadlineMs:5000,maxGateAgeMs:86400000,maxApprovalValidityMs:86400000,maxReviewIntervalMs:2592000000,maxPromotionExpiryMs:7776000000}),kn=k.enum(["signal_captured","consent_redaction_recorded","classified","baseline_objective_recorded","candidate_proposed","risk_policy_decided","offline_evaluated","holdout_evaluated","adversarial_evaluated","shadow_evaluated","approval_recorded","canary_started","comparison_recorded","promotion_decided","rollback_executed","outcome_recorded","review_due","expired","replay_verified"]),be=k.enum(["signal_pending","feedback_accepted","classified","candidate_pending","evaluating","shadow","awaiting_approval","canary","promoted","rejected","rolled_back","outcome_recorded","review_due","expired","replay_exact","replay_drifted","blocked"]),ge=["G01","G02","G03","G04","G05","G06","G07","G08","G09","G10","G11","G12","G13","G14","G15","G16","G17","G18","G19","G20","G21","G22","G23","G24","G25"],Ne=k.enum(ge),On=["CI_LEARNING_BASELINE_REQUIRED","CI_LEARNING_BASELINE_NOT_IMMUTABLE","CI_LEARNING_OBJECTIVE_REQUIRED","CI_LEARNING_CANDIDATE_REQUIRED","CI_LEARNING_CANDIDATE_VERSION_REQUIRED","CI_LEARNING_CANDIDATE_FINGERPRINT_MISMATCH","CI_LEARNING_METRICS_REQUIRED","CI_LEARNING_GUARDRAILS_REQUIRED","CI_LEARNING_SAMPLE_NOT_REPRESENTATIVE","CI_LEARNING_TESTS_FAILED","CI_LEARNING_SAFETY_FAILED","CI_LEARNING_PRIVACY_FAILED","CI_LEARNING_COST_FAILED","CI_LEARNING_OFFLINE_REQUIRED","CI_LEARNING_HOLDOUT_REQUIRED","CI_LEARNING_ADVERSARIAL_REQUIRED","CI_LEARNING_EVALUATOR_NOT_INDEPENDENT","CI_LEARNING_POLICY_DENIED","CI_LEARNING_APPROVAL_REQUIRED","CI_LEARNING_APPROVER_NOT_INDEPENDENT","CI_LEARNING_ROLLBACK_PLAN_REQUIRED","CI_LEARNING_KILL_SWITCH_REQUIRED","CI_LEARNING_SHADOW_REQUIRED","CI_LEARNING_CANARY_REQUIRED","CI_LEARNING_COMPARISON_FAILED"],Dn=[...On,"CI_LEARNING_SIGNAL_ACCEPTED","CI_LEARNING_FEEDBACK_POISONED","CI_LEARNING_CONSENT_REQUIRED","CI_LEARNING_REDACTION_REQUIRED","CI_LEARNING_AUTHORITY_REQUIRED","CI_LEARNING_CLASSIFICATION_REQUIRED","CI_LEARNING_SIGNAL_DUPLICATE","CI_LEARNING_SIGNAL_ORIGIN_INVALID","CI_LEARNING_SELF_APPLY_FORBIDDEN","CI_LEARNING_RUNTIME_ARTIFACT_NOT_BOUNDED","CI_LEARNING_VENDOR_EXPORT_DENIED","CI_LEARNING_VENDOR_LEARNING_DENIED","CI_LEARNING_EGRESS_EVIDENCE_REQUIRED","CI_LEARNING_CANARY_GATES_INCOMPLETE","CI_LEARNING_CANARY_REGRESSION","CI_LEARNING_ROLLBACK_REPRODUCTION_FAILED","CI_LEARNING_OUTCOME_REQUIRED","CI_LEARNING_REVIEW_DUE","CI_LEARNING_EXPIRED","CI_LEARNING_REPLAY_EXACT","CI_LEARNING_REPLAY_DRIFT"],ye=k.enum(Dn),Tn=k.array(ye).max(A.maxReasonCodes).refine((e)=>e.every((n,t)=>t===0||e[t-1]<n),"Reason codes must be sorted and unique."),F=k.object({version:k.literal(Gn),lifecycleId:k.string().min(1),sequence:k.number().int().min(0).max(63),event:kn,stateBefore:be.nullable(),stateAfter:be,previousTransitionRecordRefId:k.string().min(1).optional(),previousStateFingerprint:l.optional(),inputFingerprint:l,stateFingerprint:l,reasonCodes:Tn,occurredAt:k.iso.datetime({offset:!0})}).strict();import{z as S}from"zod";var J=S.object({receiptRef:S.string().min(1),status:S.literal("allow"),fingerprint:l,decidedAt:S.iso.datetime({offset:!0}),signerRef:S.string().min(1)}),Ae=S.object({consentReceiptRef:S.string().min(1),redactionReceiptRef:S.string().min(1),authorityReceiptRef:S.string().min(1),originIntegrityReceiptRef:S.string().min(1)}).strict(),Le=S.object({signalFingerprint:l,originRefId:S.string().min(1),consentReceipt:J.extend({purpose:S.literal("governed_learning"),scopeRefId:S.string().min(1),signalFingerprint:l}).strict(),redactionReceipt:J.extend({targetRefId:S.string().min(1)}).strict(),authorityReceipt:J.extend({tenantId:S.string().min(1),objectiveRefId:S.string().min(1),actorRef:S.string().min(1)}).strict(),originIntegrityReceipt:J.extend({originRefId:S.string().min(1),classification:S.literal("verified_first_party"),signalFingerprint:l}).strict(),duplicate:S.literal(!1)}).strict();var ee=s.object({artifactRef:s.string().min(1),semanticVersion:s.string().regex(/^\d+\.\d+\.\d+$/),fingerprint:l}).strict(),Ge=s.object({id:s.string().min(1),metric:s.string().min(1),direction:s.enum(["increase","decrease"]),threshold:s.number(),ownerRef:s.string().min(1)}).strict(),q=s.object({receiptRef:s.string().min(1),status:s.enum(["allow","deny","missing","failed","blocked","expired"]),fingerprint:l,decidedAt:s.iso.datetime({offset:!0}),signerRef:s.string().min(1)}).strict(),ke=s.object({suiteVersion:s.string().min(1),status:s.literal("allow"),fingerprint:l,decidedAt:s.iso.datetime({offset:!0}),signerRef:s.string().min(1)}).strict(),Oe=s.object({baselineNormalizedCost:s.number().positive(),candidateNormalizedCost:s.number().positive(),ratio:s.number().positive().max(1.2),tenantBudgetAllowed:s.literal(!0),fingerprint:l}).strict().superRefine((e,n)=>{let t=e.candidateNormalizedCost/e.baselineNormalizedCost;if(Math.abs(t-e.ratio)>Number.EPSILON)n.addIssue({code:"custom",path:["ratio"],message:"Cost ratio must match candidate divided by baseline."})}),De=s.object({expectedBaselineFingerprint:l,observedRestoredFingerprint:l,status:s.literal("allow"),fingerprint:l}).strict().superRefine((e,n)=>{if(e.expectedBaselineFingerprint!==e.observedRestoredFingerprint)n.addIssue({code:"custom",path:["observedRestoredFingerprint"],message:"Rollback test must reproduce the exact baseline."})}),fe=s.object({principalRef:s.string().min(1),implementationFingerprint:l,modelFingerprint:l,signerRef:s.string().min(1)}).strict(),Te=s.object({datasetVersion:s.string().min(1),seed:s.number().int(),selectionMethod:s.string().min(1),observationCount:s.number().int().min(1000).max(1e4),strataCounts:s.record(s.string(),s.number().int().nonnegative()),languageCounts:s.record(s.string(),s.number().int().nonnegative()),fingerprint:l}).strict(),Ie=s.object({metricRef:s.string().min(1),baseline:s.number(),candidate:s.number(),lowerConfidenceBound:s.number().optional(),passed:s.boolean()}).strict(),ue=s.object({guardrailRef:s.string().min(1),observed:s.number(),threshold:s.number(),operator:s.enum(["eq","lte","gte"]),passed:s.boolean(),hard:s.literal(!0)}).strict(),we=s.object({headFingerprint:l,gates:s.array(s.object({id:Ne,status:s.enum(["passed","missing","failed","blocked","expired"]),reasonCode:ye,receiptFingerprint:l.optional()}).strict()).max(25)}).strict(),Fe=s.discriminatedUnion("type",[s.object({type:s.literal("runtime_artifact"),artifactKind:s.enum(["prompt","provider_route","retrieval_configuration","ranking_rule","extraction_rule","entity_resolution_rule","memory_rule","compiled_skill","runbook_artifact","runtime_policy"]),artifact:ee,activation:s.literal("governed_runtime_activation"),selfApply:s.literal(!1)}).strict(),s.object({type:s.literal("repository_work_item"),changeKind:s.enum(["code","public_contract","migration","deployment_configuration"]),workItemRef:s.string().min(1),fingerprint:l,promotable:s.literal(!1),selfApply:s.literal(!1)}).strict()]),je=s.object({vendorExportRequested:s.boolean(),vendorLearningRequested:s.boolean(),vendorExportAllowed:s.boolean().default(!1),vendorLearningAllowed:s.boolean().default(!1),receiptFingerprints:s.array(l).max(5),binding:s.object({signalFingerprint:l,sampleFingerprint:l,artifactFingerprint:l}).strict().optional()}).strict().superRefine((e,n)=>{if(!e.vendorExportAllowed&&!e.vendorLearningAllowed)return;if(!e.binding||e.receiptFingerprints.length!==5||new Set(e.receiptFingerprints).size!==5)n.addIssue({code:"custom",message:"Allowed vendor eligibility requires five unique bound receipts."})}),Ve=s.object({baselineFingerprint:l,candidateFingerprint:l,sampleFingerprint:l,metrics:s.array(Ie).min(1).max(16),guardrails:s.array(ue).min(1).max(16),costRatio:s.number().positive(),latencyRatio:s.number().positive(),passed:s.boolean(),fingerprint:l}).strict(),Pe=s.object({expectedBaselineFingerprint:l,observedActiveFingerprint:l,restoredArtifactRef:s.string().min(1),reproductionReceiptFingerprint:l}).strict();var ze=r.enum(["prompt","provider_route","retrieval_configuration","ranking_rule","extraction_rule","entity_resolution_rule","memory_rule","compiled_skill","runbook_artifact","runtime_policy"]),Fn=r.object({answerRefId:r.string().min(1),actorRef:r.string().min(1),feedbackType:r.enum(["correction","outcome","retrieval_failure","drift"]),consentDecisionRef:r.string().min(1),redactionDecisionRef:r.string().min(1),correctionRefId:r.string().min(1).optional(),outcomeRefId:r.string().min(1).optional(),status:r.enum(["accepted","rejected","quarantined"]),governedLearning:F.optional(),dispositionEvidence:Le.optional()}).strict(),jn=r.object({feedbackType:r.literal("signal"),signalRefId:r.string().min(1),originRefId:r.string().min(1),actorRef:r.string().min(1),signalFingerprint:l,objectiveRefId:r.string().min(1),consentScopeRefId:r.string().min(1),originClassification:r.literal("verified_first_party"),dispositionRefs:Ae,status:r.enum(["quarantined","rejected"]),governedLearning:F}).strict(),Vn=E.extend({kind:r.literal("feedback"),authorityClass:r.literal("outcome"),payload:r.union([Fn,jn])}).strict(),Pn=E.extend({kind:r.literal("experiment"),authorityClass:r.literal("proposal"),payload:r.object({baselineRefId:r.string().min(1),candidateArtifactRef:r.string().min(1),candidateKind:ze,objective:r.string().min(1),policyDecisionRef:r.string().min(1),metricRefIds:r.array(r.string().min(1)).min(1),guardrailRefIds:r.array(r.string().min(1)).min(1),holdoutDatasetRef:r.string().min(1),adversarialDatasetRef:r.string().min(1),governedLearning:F.optional(),baseline:ee.optional(),candidate:Fe.optional(),objectiveDefinition:Ge.optional(),riskDecision:q.optional(),egressDecision:je.optional(),reviewDueAt:r.iso.datetime({offset:!0}).optional(),expiresAt:r.iso.datetime({offset:!0}).optional(),state:r.enum(["proposed","offline_evaluation","shadow","canary","completed","rejected"])}).strict()}).strict(),zn=E.extend({kind:r.literal("evaluation"),authorityClass:r.literal("truth"),payload:r.object({experimentRefId:r.string().min(1),candidateArtifactRef:r.string().min(1),evaluatorRef:r.string().min(1),independent:r.literal(!0),datasetRef:r.string().min(1),metricResults:r.record(r.string(),r.number()),safetyPassed:r.boolean(),privacyPassed:r.boolean(),costPassed:r.boolean(),verdict:r.enum(["pass","fail","blocked"]),evaluatedAt:r.iso.datetime({offset:!0}),governedLearning:F.optional(),phase:r.enum(["offline","holdout","adversarial","shadow","canary_compare","post_promotion"]).optional(),sampleReceipt:Te.optional(),typedMetrics:r.array(Ie).max(16).optional(),typedGuardrails:r.array(ue).max(16).optional(),generatorIdentity:fe.optional(),evaluatorIdentity:fe.optional(),independenceReceipt:q.optional(),testsReceipt:ke.optional(),costEvidence:Oe.optional()}).strict()}).strict(),Mn=E.extend({kind:r.literal("promotion"),authorityClass:r.literal("approval"),payload:r.object({experimentRefId:r.string().min(1),evaluationRefId:r.string().min(1),candidateArtifactRef:r.string().min(1),candidateKind:ze,approvalDecisionRef:r.string().min(1),policyDecisionRef:r.string().min(1),rollbackRefId:r.string().min(1),killSwitchRef:r.string().min(1),stage:r.enum(["shadow","canary","promoted","rejected"]),approvedAt:r.iso.datetime({offset:!0}).optional(),governedLearning:F.optional(),gateBundle:we.optional(),approvalReceipt:q.optional(),rollbackTestReceipt:De.optional(),killSwitchReceipt:q.optional(),comparisonReceipt:Ve.optional(),effectiveArtifact:ee.optional()}).strict().superRefine((e,n)=>{if(e.governedLearning&&(e.stage==="canary"||e.stage==="promoted")&&!e.gateBundle)n.addIssue({code:"custom",path:["gateBundle"],message:"Governed canary and promotion require a gate bundle."})})}).strict(),Bn=E.extend({kind:r.literal("rollback"),authorityClass:r.literal("execution"),payload:r.object({promotionRefId:r.string().min(1),baselineRefId:r.string().min(1),triggerRef:r.string().min(1),status:r.enum(["ready","executed","failed"]),executedAt:r.iso.datetime({offset:!0}).optional(),outcomeRefId:r.string().min(1).optional(),replayRefId:r.string().min(1),governedLearning:F.optional(),reproduction:Pe.optional()}).strict()}).strict(),qn=E.extend({kind:r.literal("replay"),authorityClass:r.literal("truth"),payload:r.object({inputFingerprint:l,configurationRefIds:r.array(r.string().min(1)).min(1),codeVersionRef:r.string().min(1),providerFixtureRef:r.string().min(1),orderedEventRefIds:r.array(r.string().min(1)),outputFingerprint:l,status:r.enum(["exact","drifted","blocked"]),replayedAt:r.iso.datetime({offset:!0}),governedLearning:F.optional(),lifecycleHeadFingerprint:l.optional(),baselineFingerprint:l.optional(),effectiveArtifactFingerprint:l.optional(),orderedTransitionFingerprints:r.array(l).optional()}).strict()}).strict(),Re=[Vn,Pn,zn,Mn,Bn,qn];import{z as I}from"zod";var Un=E.extend({kind:I.literal("source"),authorityClass:I.literal("truth"),payload:I.object({connectionRef:I.string().min(1),authorizationRef:I.string().min(1),externalId:I.string().min(1),sourceType:I.string().min(1),aclRefIds:I.array(I.string().min(1)).min(1),state:I.enum(["registered","ready","degraded","revoked","deleted"])}).strict()}).strict(),$n=E.extend({kind:I.literal("source_version"),authorityClass:I.literal("truth"),payload:I.object({sourceRecordRefId:I.string().min(1),version:I.number().int().positive(),observedAt:I.iso.datetime({offset:!0}),sourceFingerprint:l,assetRefIds:I.array(I.string().min(1)).default([])}).strict()}).strict(),Kn=E.extend({kind:I.literal("asset"),authorityClass:I.literal("truth"),payload:I.object({sourceVersionRefId:I.string().min(1),mediaType:I.string().min(1),byteLength:I.number().int().nonnegative(),storageRef:I.string().min(1),contentFingerprint:l,classification:I.enum(["public","internal","confidential","restricted"]),aclRefIds:I.array(I.string().min(1)).min(1)}).strict()}).strict(),Yn=E.extend({kind:I.literal("part"),authorityClass:I.literal("truth"),payload:I.object({assetRefId:I.string().min(1),partKind:I.enum(["page","section","table","line","cell","message","time_range"]),ordinal:I.number().int().nonnegative(),locator:w,contentFingerprint:l,language:I.string().min(2).optional(),parentPartRefId:I.string().min(1).optional()}).strict()}).strict(),Hn=E.extend({kind:I.literal("fragment"),authorityClass:I.literal("truth"),payload:I.object({partRefId:I.string().min(1),stableFragmentId:I.string().min(1),ordinal:I.number().int().nonnegative(),locator:w,contentFingerprint:l,tokenCount:I.number().int().nonnegative(),previousFragmentRefId:I.string().min(1).optional(),nextFragmentRefId:I.string().min(1).optional(),aclRefIds:I.array(I.string().min(1)).min(1)}).strict()}).strict(),Qn=E.extend({kind:I.literal("evidence"),authorityClass:I.literal("truth"),payload:I.object({sourceVersionRefId:I.string().min(1),assetRefId:I.string().min(1).optional(),partRefId:I.string().min(1),fragmentRefId:I.string().min(1),locator:w,authorizationDecisionRef:I.string().min(1),redactionDecisionRef:I.string().min(1),contentFingerprint:l}).strict()}).strict(),Ce=[Un,$n,Kn,Yn,Hn,Qn];import{z as c}from"zod";import{z as g}from"zod";import{z as d}from"zod";import{z as C}from"zod";var ne=C.object({id:C.string().min(1),substrate:C.enum(["knowledge","data_transmission","authos","rbac"]),ref:C.string().min(1),evidenceRefIds:C.array(C.string().min(1)).default([]),metadata:N.default({})}),Zn=ne.extend({substrate:C.literal("knowledge"),spaceKey:C.string().min(1).optional(),fragmentId:C.string().min(1),sourceRef:T.optional(),queryEvidenceRef:C.string().min(1).optional()}),Me=ne.extend({substrate:C.literal("data_transmission"),protocolVersion:C.literal("data-transmission.v0"),roomId:C.string().min(1),cursor:C.string().min(1).optional(),idempotencyKey:C.string().min(1).optional()}),Be=ne.extend({substrate:C.literal("authos"),actorId:C.string().min(1),sessionRef:C.string().min(1).optional(),tenantId:C.string().min(1).optional()}),qe=ne.extend({substrate:C.literal("rbac"),decisionId:C.string().min(1),verdict:C.enum(["allow","deny","redacted","redact","requires_review"]),permissionIds:C.array(C.string().min(1)).default([]),redactedFieldRefs:C.array(C.string().min(1)).default([])}),Ue=C.discriminatedUnion("substrate",[Zn,Me,Be,qe]),Ri=C.object({actorRef:Be,rbacDecisionRef:qe,resourceRef:C.string().min(1),sourceAclRefIds:C.array(C.string().min(1)).default([]),policyRefIds:C.array(C.string().min(1)).default([]),evidenceRefIds:C.array(C.string().min(1)).default([])}),Ci=C.object({roomRef:Me,changeRef:C.string().min(1),sequence:C.number().int().nonnegative(),idempotencyKey:C.string().min(1),replayRef:C.string().min(1)});var Wn=d.object({id:d.string().min(1),kind:d.enum(["knowledge","communication","issue_tracker","code_host","documentation","customer_system","incident_system","manual_record"]),label:d.string().min(1),connectorCapability:d.string().min(1),freshnessSla:d.enum(["manual","hourly","daily","near_realtime"]),metadata:N.default({})}),Xn=d.object({id:d.string().min(1),sourceSystemId:d.string().min(1),externalId:d.string().min(1),recordType:d.string().min(1),sourceHash:d.string().min(1),observedAt:d.string().min(1),provenance:d.array(T).min(1),substrateRefs:d.array(Ue).default([]),evidenceRefIds:d.array(d.string().min(1)).min(1),metadata:N.default({})}),Jn=d.enum(["person","team","customer","project","repository","ticket","meeting","document","incident","decision","commitment","procedure","runbook","objective","work_item","knowledge_fragment"]),_e=d.object({status:d.enum(["fresh","stale","unknown"]),observedAt:d.string().min(1),expiresAt:d.string().min(1).optional(),evidenceRefIds:d.array(d.string().min(1)).min(1)}),et=d.object({reason:d.enum(["deleted_source","superseded","privacy_request","merged"]),tombstonedAt:d.string().min(1),supersededByNodeId:d.string().min(1).optional(),evidenceRefIds:d.array(d.string().min(1)).min(1)}),nt=d.object({id:d.string().min(1),kind:Jn,label:d.string().min(1),sourceRecordRefIds:d.array(d.string().min(1)).min(1),evidenceRefIds:d.array(d.string().min(1)).min(1),sourceAclRefIds:d.array(d.string().min(1)).default([]),policyRefIds:d.array(d.string().min(1)).default([]),confidence:d.number().min(0).max(1),reviewState:d.enum(["unreviewed","review_required","reviewed","rejected"]),freshness:_e,tombstone:et.optional(),conflictRefIds:d.array(d.string().min(1)).default([]),metadata:N.default({})}),tt=d.object({id:d.string().min(1),kind:d.enum(["owns","member_of","relates_to","blocks","depends_on","documents","decides","commits_to","implements","escalates_to","runbook_for","evidence_for"]),fromNodeId:d.string().min(1),toNodeId:d.string().min(1),sourceRecordRefIds:d.array(d.string().min(1)).min(1),evidenceRefIds:d.array(d.string().min(1)).min(1),confidence:d.number().min(0).max(1),reviewState:d.enum(["unreviewed","review_required","reviewed","rejected"]),metadata:N.default({})}),it=d.object({id:d.string().min(1),subjectNodeId:d.string().min(1),conflictingNodeIds:d.array(d.string().min(1)).default([]),conflictingRecordRefIds:d.array(d.string().min(1)).min(1),status:d.enum(["review_required","resolved","accepted_conflict"]),summary:d.string().min(1),evidenceRefIds:d.array(d.string().min(1)).min(1)}),xi=d.object({id:d.string().min(1),generatedAt:d.string().min(1),snapshotHash:d.string().min(1),sourceSystems:d.array(Wn).min(1),sourceRecords:d.array(Xn).min(1),nodes:d.array(nt).min(1),edges:d.array(tt).default([]),conflicts:d.array(it).default([]),replayCursorRef:d.string().min(1).optional(),evidenceRefIds:d.array(d.string().min(1)).min(1),metadata:N.default({})});var at=g.enum(["skill_file","runbook_pack","agent_prompt","conformance_pack"]),ot=g.enum(["ready","blocked","review_required","stale","unauthorized","identity_unresolved","acl_redacted","conflicted"]),rt=g.enum(["pass","fail","not_run","blocked"]),ct=g.enum(["proposed","accepted","rejected","superseded","applied_to_contract"]),$e=g.object({id:g.string().min(1),artifactKind:at,version:g.string().min(1),artifactRef:G,runbookProcedureId:g.string().min(1),sourceRecordRefIds:g.array(g.string().min(1)).min(1),identityDecisionIds:g.array(g.string().min(1)).default([]),accessDecisionIds:g.array(g.string().min(1)).min(1),compiledFromBrainEntryIds:g.array(g.string().min(1)).default([]),compilerPrincipalId:g.string().min(1),compiledAt:g.string().min(1),freshness:_e,evidenceRefIds:g.array(g.string().min(1)).min(1),sourceRefs:g.array(T).default([]),noProviderBinding:g.literal(!0).default(!0),metadata:N.default({})}).strict(),Li=g.object({id:g.string().min(1),compiledArtifactId:g.string().min(1),runbookReadinessId:g.string().min(1),status:ot,evaluatedAt:g.string().min(1),sourceRecordRefIds:g.array(g.string().min(1)).min(1),identityDecisionIds:g.array(g.string().min(1)).default([]),accessDecisionIds:g.array(g.string().min(1)).min(1),blockedReasons:g.array(g.string().min(1)).default([]),evidenceRefIds:g.array(g.string().min(1)).min(1),metadata:N.default({})}).superRefine((e,n)=>{if(e.status!=="ready"&&e.blockedReasons.length===0)n.addIssue({code:g.ZodIssueCode.custom,message:"Non-ready agentic readiness checks require blocked reasons.",path:["blockedReasons"]});if(e.status==="ready"&&e.blockedReasons.length>0)n.addIssue({code:g.ZodIssueCode.custom,message:"Ready agentic readiness checks must not carry blocked reasons.",path:["blockedReasons"]})}),Gi=g.object({id:g.string().min(1),compiledArtifactId:g.string().min(1),readinessCheckId:g.string().min(1),runbookConformanceCaseId:g.string().min(1),status:rt,assertion:g.string().min(1),checkedAt:g.string().min(1),failureReason:g.string().min(1).optional(),replayRefIds:g.array(g.string().min(1)).default([]),executionReceiptIds:g.array(g.string().min(1)).default([]),evidenceRefIds:g.array(g.string().min(1)).min(1),noRuntimeExecution:g.literal(!0).default(!0),metadata:N.default({})}).superRefine((e,n)=>{if(["fail","blocked"].includes(e.status)&&!e.failureReason)n.addIssue({code:g.ZodIssueCode.custom,message:"Failing or blocked agentic conformance evidence requires a failure reason.",path:["failureReason"]})}),ki=g.object({id:g.string().min(1),compiledArtifactId:g.string().min(1),conformanceEvidenceId:g.string().min(1),correctionKind:g.enum(["source_correction","identity_correction","acl_correction","runbook_correction","outcome_correction"]),status:ct,summary:g.string().min(1),outcomeReceiptId:g.string().min(1),observedAt:g.string().min(1),sourceEvidenceRefIds:g.array(g.string().min(1)).min(1),evidenceRefIds:g.array(g.string().min(1)).min(1),noProviderMutation:g.literal(!0).default(!0),metadata:N.default({})}).strict();import{z as f}from"zod";var te=f.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/),j=f.string().regex(/^sha256:[a-f0-9]{64}$/),O=f.object({recordRef:f.string().min(1),version:te,schemaRef:f.string().min(1),contentFingerprint:j}).strict().readonly(),Ke=f.object({id:f.string().min(1),version:te,contentFingerprint:j,schemaFingerprint:j}).strict().readonly(),Ye=f.object({namespace:f.string().regex(/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/),schemaRef:f.string().min(1),recordRef:f.string().min(1),version:te,contentFingerprint:j}).strict().readonly(),st=f.object({targetSchemaRef:f.string().min(1),independentConsumerRefs:f.array(G.strict()).min(2).refine((e)=>new Set(e.map((n)=>`${n.type}:${n.id}`)).size>=2,"two distinct vertical consumers are required"),migrationDecisionRef:G.strict()}).strict().readonly(),dt=f.object({extensionRef:Ye,namespaceOwnerRef:G.strict(),schemaFingerprint:j,compatibilityIntent:f.enum(["additive","backward_compatible","breaking"]),evidenceRequirementRefs:f.array(G.strict()).min(1).readonly(),allowedRefTypes:f.array(f.string().min(1)).min(1).readonly(),sourcePolicyRef:G.strict(),legalReviewRef:G.strict(),lifecycleStatus:f.enum(["active","deprecated","promoted"]),deprecationDecisionRef:G.strict().optional(),replacementNamespace:f.string().min(1).optional(),promotion:st.optional(),collisionPolicy:f.literal("reject_incompatible_namespace_or_schema_reuse")}).strict().superRefine((e,n)=>{if(e.lifecycleStatus==="deprecated"&&!e.deprecationDecisionRef)n.addIssue({code:"custom",path:["deprecationDecisionRef"],message:"deprecated extensions require a decision ref"});if(e.lifecycleStatus==="promoted"&&!e.promotion)n.addIssue({code:"custom",path:["promotion"],message:"promoted extensions require approved migration evidence"})}),wi=f.array(dt).readonly().superRefine((e,n)=>{let t=new Set,i=new Map;for(let[a,m]of e.entries()){let{namespace:y,schemaRef:_}=m.extensionRef;if(t.has(y))n.addIssue({code:"custom",path:[a,"extensionRef","namespace"],message:`namespace collision: ${y}`});t.add(y);let x=i.get(_);if(x&&x!==m.schemaFingerprint)n.addIssue({code:"custom",path:[a,"schemaFingerprint"],message:`incompatible schema reuse: ${_}`});i.set(_,m.schemaFingerprint)}}),lt=f.object({identityContextRefs:f.array(O).readonly().default([]),knowledgeAssertionRefs:f.array(O).readonly().default([]),procedureRefs:f.array(O).readonly().default([]),policyRefs:f.array(O).readonly().default([]),hypothesisRefs:f.array(O).readonly().default([]),decisionRefs:f.array(O).readonly().default([]),evidenceRefs:f.array(O).readonly().default([])}).strict().readonly(),Fi=f.object({id:f.string().min(1),version:te,recordedAt:f.iso.datetime({offset:!0}),effectiveFrom:f.iso.datetime({offset:!0}).optional(),parentEditionRef:Ke.optional(),baseEditionRef:Ke.optional(),contentFingerprint:j,schemaFingerprint:j,sections:lt,graphSnapshotRef:O.optional(),evidenceReceiptRefs:f.array(f.string().min(1)).readonly().default([]),replayRef:f.string().min(1).optional(),reviewDecisionRef:f.string().min(1).optional(),extensionRefs:f.array(Ye).readonly().default([])}).strict().readonly(),pt=f.object({id:f.string().min(1),title:f.string().min(1),kind:f.enum(["knowledge","procedure","policy","skill_candidate"]),summary:f.string().min(1),ownerPrincipalId:f.string().min(1),trustLevel:f.enum(["low","medium","high"]),freshness:f.enum(["fresh","stale","unknown"]),sourceRefs:f.array(T).min(1)}),mt=f.object({id:f.string().min(1),summary:f.string().min(1),severity:f.enum(["low","medium","high"]),relatedSourceRefs:f.array(T).default([]),ownerPrincipalId:f.string().min(1)}),ji=f.object({id:f.string().min(1),entries:f.array(pt).default([]),gaps:f.array(mt).default([])});var gt=c.enum(["fact","hypothesis","policy","procedure","decision","skill_candidate"]),yt=c.enum(["unreviewed","review_required","approved","rejected","superseded"]),He=c.object({statement:c.string().min(1),normativeLanguage:c.array(c.string().min(1)).default([]),scope:c.array(c.string().min(1)).default([]),prerequisites:c.array(c.string().min(1)).default([]),orderedSteps:c.array(c.string().min(1)).default([]),expectedOutputs:c.array(c.string().min(1)).default([]),failureBranches:c.array(c.string().min(1)).default([]),exceptions:c.array(c.string().min(1)).default([]),approvalBoundaries:c.array(c.string().min(1)).default([])}).strict(),qi=c.object({tenantId:c.string().min(1),workspaceId:c.string().min(1),entryId:c.string().min(1),version:c.number().int().positive(),kind:gt,title:c.string().min(1),content:He,ownerRef:c.string().min(1).optional(),sourceRecordRefs:c.array(O).default([]),evidenceRefIds:c.array(c.string().min(1)).default([]),policyRefIds:c.array(c.string().min(1)).default([]),domain:c.string().min(1),trustLevel:c.enum(["low","medium","high"]),confidence:c.number().min(0).max(1),freshness:c.enum(["fresh","stale","unknown"]),reviewState:yt,conflictState:c.enum(["clear","contradictory","resolved"]),risk:c.enum(["low","medium","high","critical"]),recordedAt:c.iso.datetime({offset:!0}),validTime:ce,requiredCapabilities:c.array(c.string().min(1)).default([]),sensitiveFields:c.array(c.string().min(1)).default([]),tombstoneReason:c.enum(["source_deleted","acl_revoked","superseded","privacy_request"]).optional(),fingerprint:l}).strict(),Ui=c.object({tenantId:c.string().min(1),workspaceId:c.string().min(1),decisionId:c.string().min(1),entryId:c.string().min(1),entryVersion:c.number().int().positive(),verdict:c.enum(["approved","rejected"]),reviewerRef:c.string().min(1),decidedAt:c.iso.datetime({offset:!0}),evidenceRefIds:c.array(c.string().min(1)).min(1),reason:c.string().min(1),fingerprint:l}).strict(),$i=c.object({tenantId:c.string().min(1),workspaceId:c.string().min(1),gapId:c.string().min(1),entryRef:c.string().min(1),reason:c.enum(["ownerless","stale","unsupported","low_confidence","contradictory"]),status:c.enum(["open","in_progress","resolved","accepted_unknown"]),ownerRef:c.string().min(1).optional(),evidenceRefIds:c.array(c.string().min(1)).min(1),recordedAt:c.iso.datetime({offset:!0}),fingerprint:l}).strict(),Ki=c.object({tenantId:c.string().min(1),workspaceId:c.string().min(1),remediationId:c.string().min(1),gapId:c.string().min(1),status:c.enum(["proposed","accepted","in_progress","completed","cancelled"]),ownerRef:c.string().min(1),workRef:c.string().min(1),evidenceRefIds:c.array(c.string().min(1)).min(1),recordedAt:c.iso.datetime({offset:!0}),fingerprint:l}).strict(),Yi=c.object({artifact:$e,sourceEntryRef:c.string().min(1),accountableOwnerRef:c.string().min(1),policyRefIds:c.array(c.string().min(1)).default([]),content:He,conformanceEvidenceRefIds:c.array(c.string().min(1)).min(1),contentFingerprint:l,noActionAuthorization:c.literal(!0),noActionExecution:c.literal(!0)}).strict();var Qi=[{surface:"@lssm/lib.companyos-spec/types/company-intelligence",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/validation/company-intelligence",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/fixtures/company-intelligence",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/docs/company-intelligence.docblock",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/types/company-intelligence/grounding-result",kind:"schema",intent:"additive"},{surface:"@lssm/lib.companyos-spec/validation/company-intelligence-grounding",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/fixtures/company-intelligence/grounding-result",kind:"export",intent:"additive"},{surface:"companyIntelligence.feedback.signal@1.0.0",kind:"schema",intent:"additive"},{surface:"companyIntelligence.governedLearning.transition@1.0.0",kind:"schema",intent:"additive"},{surface:"@lssm/lib.companyos-spec/validation/company-intelligence#validateCompanyIntelligenceGovernedLearningHistory",kind:"export",intent:"additive"},{surface:"companyIntelligence.extraction.candidate@1.0.0",kind:"schema",intent:"additive"},{surface:"@lssm/lib.contracts-spec/companyos/company-intelligence",kind:"export",intent:"additive"},...["companyIntelligence.brain.entry.create","companyIntelligence.brain.entry.version.append","companyIntelligence.brain.entry.review","companyIntelligence.brain.edition.create","companyIntelligence.brain.edition.compare","companyIntelligence.brain.gap.remediate","companyIntelligence.brain.artifact.compile","companyIntelligence.record.validate","companyIntelligence.graph.query","companyIntelligence.answer.query","companyIntelligence.feedback.record","companyIntelligence.experiment.evaluate","companyIntelligence.promotion.decide","companyIntelligence.rollback.execute","companyIntelligence.replay.get"].map((e)=>({surface:e,kind:"operation",intent:"additive"})),...["companyIntelligence.brain.entry.versioned","companyIntelligence.brain.entry.reviewed","companyIntelligence.brain.edition.created","companyIntelligence.brain.gap.recorded","companyIntelligence.brain.remediation.recorded","companyIntelligence.brain.artifact.compiled","companyIntelligence.record.committed","companyIntelligence.answer.verified","companyIntelligence.feedback.recorded","companyIntelligence.promotion.decided","companyIntelligence.rollback.completed"].map((e)=>({surface:e,kind:"event",intent:"additive"}))];import{z as u}from"zod";var Qe="companyos.company-intelligence-extraction-candidate",Ze="1.0.0",Ji=u.enum(["fact","entity","relation","policy","procedure"]),ft=u.object({evidenceRecordId:u.string().min(1),locator:w}).strict(),U=u.object({candidateKey:u.string().min(1),evidenceRefs:u.array(ft).min(1),confidence:u.number().min(0).max(1),risk:u.enum(["low","medium","high","critical"])}),It=u.discriminatedUnion("kind",[U.extend({kind:u.literal("fact"),statement:u.string().min(1)}).strict(),U.extend({kind:u.literal("entity"),entityType:u.string().min(1),label:u.string().min(1)}).strict(),U.extend({kind:u.literal("relation"),fromCandidateKey:u.string().min(1),toCandidateKey:u.string().min(1),predicate:u.string().min(1)}).strict(),U.extend({kind:u.literal("policy"),normativeStatement:u.string().min(1),scopeRefIds:u.array(u.string().min(1)).min(1)}).strict(),U.extend({kind:u.literal("procedure"),statement:u.string().min(1)}).strict()]),ea=u.object({schemaId:u.literal(Qe),schemaVersion:u.literal(Ze),candidates:u.array(It).min(1)}).strict().refine(({candidates:e})=>new Set(e.map(({candidateKey:n})=>n)).size===e.length,{message:"Candidate keys must be unique.",path:["candidates"]}),na=u.object({decisionRef:u.string().min(1),reviewerRef:u.string().min(1),candidateKeys:u.array(u.string().min(1)).min(1),verdict:u.enum(["approved","rejected"]),decidedAt:u.iso.datetime({offset:!0})}).strict(),ta=u.object({receiptId:u.string().min(1),tenantId:u.string().min(1),attemptId:u.string().min(1),modelRef:u.string().min(1),promptFingerprint:l,candidateSchema:u.object({id:u.literal(Qe),version:u.literal(Ze),fingerprint:l}).strict(),runtimeVersion:u.string().min(1),costMicros:u.number().int().nonnegative(),redactionDecisionRef:u.string().min(1),evidenceRefIds:u.array(u.string().min(1)),dispositions:u.array(u.object({candidateKey:u.string().min(1),status:u.enum(["accepted","rejected","review_required"]),reason:u.string().min(1),recordId:u.string().min(1).optional()}).strict()),version:u.number().int().positive(),supersedesReceiptId:u.string().min(1).optional(),fingerprint:l}).strict();import{z as o}from"zod";var ut=o.enum(["authorization_denied","scope_mismatch","policy_refused","no_authorized_evidence","retrieval_degraded","conflicting_authorized_evidence","stale_authorized_evidence","verifier_not_independent","drafting_degraded","draft_schema_invalid","verification_degraded","insufficient_claim_support","deadline_exceeded","budget_exceeded","fixture_adapter_forbidden","supported"]),Y=o.array(o.string().min(1)).refine((e)=>new Set(e).size===e.length,{message:"Values must be unique."}),Rt=o.object({tenantId:o.string().min(1),workspaceId:o.string().min(1),actorRef:o.string().min(1),viewerRef:o.string().min(1),capabilityRefs:Y,authorizationDecisionRef:o.string().min(1),policyDecisionRef:o.string().min(1).optional()}).strict(),Ct=o.object({questionBytes:o.number().int().positive().max(4096),filterEntries:o.number().int().nonnegative().max(20),channelCount:o.number().int().positive().max(3),perChannelTopK:o.number().int().positive().max(32),mergedEvidenceRecords:o.number().int().positive().max(16),excerptBytesPerEvidence:o.number().int().positive().max(2048),totalModelEvidenceBytes:o.number().int().positive().max(16384),maxClaims:o.number().int().positive().max(8),maxClaimStatementBytes:o.number().int().positive().max(512),maxCitationsPerClaim:o.number().int().positive().max(4),maxDraftAttempts:o.literal(2),maxVerificationAttempts:o.literal(2),maxRetrievalCalls:o.literal(3),runDeadlineMs:o.number().int().positive().max(12000)}).strict(),Xe=o.object({claimId:o.string().regex(/^clm_sha256:[a-f0-9]{64}$/),statement:o.string().min(1)}).strict(),Je=o.object({citationId:o.string().regex(/^cit_sha256:[a-f0-9]{64}$/),evidenceRefId:o.string().min(1),tenantId:o.string().min(1),workspaceId:o.string().min(1),viewerRef:o.string().min(1),locator:w,excerpt:o.string().min(1),sourceContentFingerprint:l,viewerProjectionFingerprint:l,redactionDecisionRef:o.string().min(1),fusedScoreMicros:o.number().int().nonnegative()}).strict(),en=o.object({claimId:o.string().regex(/^clm_sha256:[a-f0-9]{64}$/),citationIds:o.array(o.string().regex(/^cit_sha256:[a-f0-9]{64}$/)).min(1).max(4),verdict:o.literal("supported"),confidence:o.number().min(0).max(1)}).strict(),We=o.object({providerRef:o.string().min(1),modelRef:o.string().min(1),promptOrRuleVersion:o.string().min(1),independenceDomain:o.string().min(1),provenance:o.enum(["runtime","fixture"])}).strict(),_t=o.object({request:l,retrieval:l.optional(),draft:l.optional(),validation:l.optional(),verification:l.optional(),output:l,replay:l}).strict(),vt=o.object({drafterIdentity:We.optional(),verifierIdentity:We.optional(),retrievedCitationLedger:Y,callCounts:o.object({retrieval:o.number().int().nonnegative().max(3),draft:o.number().int().nonnegative().max(2),verify:o.number().int().nonnegative().max(2)}).strict(),repairCount:o.number().int().nonnegative().max(1),warnings:Y,fingerprints:_t}).strict(),ht=o.object({schemaVersion:o.literal("company-intelligence-grounded-answer:v1"),codeVersionRef:o.string().min(1),retrievalConfigRef:o.string().min(1),recordedAt:o.iso.datetime({offset:!0}),modelVisibleEvidenceBytes:o.number().int().nonnegative().max(16384),supportThreshold:o.number().min(0).max(1)}).strict(),K=o.object({schemaVersion:o.literal("company-intelligence-grounded-answer:v1"),scope:Rt,status:se,reasonCodes:o.array(ut).min(1),text:o.string().min(1).optional(),claims:o.array(Xe),citations:o.array(Je),claimSupport:o.array(en),conflictRefIds:Y,receipt:vt,metadata:ht,bounds:Ct,knowledgeAuthorizesAction:o.literal(!1)}).strict(),ie={text:o.undefined().optional(),claims:o.array(o.never()).max(0),citations:o.array(o.never()).max(0),claimSupport:o.array(o.never()).max(0)},ca=o.discriminatedUnion("status",[K.extend({status:o.literal("answered"),text:o.string().min(1),claims:o.array(Xe).min(1).max(8),citations:o.array(Je).min(1),claimSupport:o.array(en).min(1),conflictRefIds:o.array(o.never()).max(0)}),K.extend({status:o.literal("abstained"),...ie}),K.extend({status:o.literal("refused"),...ie}),K.extend({status:o.literal("conflicted"),...ie,conflictRefIds:Y.pipe(o.array(o.string()).min(1))}),K.extend({status:o.literal("degraded"),...ie})]);var Et=B.discriminatedUnion("kind",[...Ce,...me,...Se,...Re]),xt=[...Ce,...me,de,le,pe,...Re].map((e)=>e.omit({fingerprint:!0})),nn=B.union(xt),ve=B.object({contractVersion:B.literal(re),tenantId:B.string().min(1),records:B.array(Et).min(1)}).strict();function v(e,n,t,i){e.push({code:n,path:t,message:i})}function tn(e,n){let t=e.flatMap((y)=>y.kind==="evaluation"&&y.payload.phase?[y.payload.phase]:[]),i=["offline","holdout","adversarial","shadow"];for(let[y,_]of i.entries())if(t[y]!==void 0&&t[y]!==_)v(n,"CI_LEARNING_TRANSITION_INVALID",`records.phases.${y}`,"Evaluation phases cannot be skipped or reordered.");let a=t.indexOf("canary_compare");if(a>=0&&a!==4)v(n,"CI_LEARNING_TRANSITION_INVALID","records.phases.canary_compare","Canary comparison requires all four prior phases.");if(t.filter((y)=>y==="post_promotion").length>A.maxMonitoringComparisons)v(n,"CI_LEARNING_CAP_EXCEEDED","records.phases.post_promotion","Post-promotion comparison cap exceeded.")}function an(e,n,t){if(!e.payload.governedLearning)return;if(!e.payload.phase||!e.payload.sampleReceipt||!e.payload.typedMetrics?.length||!e.payload.typedGuardrails?.length||!e.payload.generatorIdentity||!e.payload.evaluatorIdentity||!e.payload.independenceReceipt||!e.payload.testsReceipt||!e.payload.costEvidence)v(t,"CI_LEARNING_HISTORY_INCOMPLETE",`${n}.payload`,"Governed evaluation requires phase, sample, typed metrics and guardrails, identities, independence, tests, and cost evidence.")}function on(e,n,t,i,a){if(t.kind!=="experiment"||!t.payload.egressDecision)return;let m=t.payload.egressDecision;if(!(m.vendorExportAllowed||m.vendorLearningAllowed))return;let _=e.find((L)=>L.kind==="feedback"&&L.payload.feedbackType==="signal"),x=e.find((L)=>L.kind==="evaluation"&&L.payload.sampleReceipt),D=t.payload.candidate,Q=D?.type==="runtime_artifact"?D.artifact.fingerprint:D?.fingerprint,M=new Set(e.slice(0,n).map(({fingerprint:L})=>L.value));if(m.vendorExportAllowed&&!m.vendorExportRequested||m.vendorLearningAllowed&&!m.vendorLearningRequested||!m.binding||m.binding.signalFingerprint!==(_?.kind==="feedback"&&_.payload.feedbackType==="signal"?_.payload.signalFingerprint:void 0)||m.binding.sampleFingerprint!==(x?.kind==="evaluation"?x.payload.sampleReceipt?.fingerprint:void 0)||m.binding.artifactFingerprint!==Q||m.receiptFingerprints.some((L)=>!M.has(L)))v(a,"CI_LEARNING_TRANSITION_INVALID",`${i}.payload.egressDecision`,"Vendor eligibility requires five prior receipts bound to one signal, sample, and artifact.")}var St={G01:"candidate_proposed",G02:"candidate_proposed",G03:"candidate_proposed",G04:"candidate_proposed",G05:"candidate_proposed",G06:"candidate_proposed",G07:"offline_evaluated",G08:"offline_evaluated",G09:"offline_evaluated",G10:"offline_evaluated",G11:"offline_evaluated",G12:"offline_evaluated",G13:"offline_evaluated",G14:"offline_evaluated",G15:"holdout_evaluated",G16:"adversarial_evaluated",G17:"adversarial_evaluated",G18:"risk_policy_decided",G19:"approval_recorded",G20:"approval_recorded",G21:"approval_recorded",G22:"approval_recorded",G23:"shadow_evaluated",G24:"canary_started",G25:"comparison_recorded"};function cn(e,n,t){let i=St[n];return e.findLast((a)=>("governedLearning"in a.payload)&&a.payload.governedLearning?.lifecycleId===t&&a.payload.governedLearning.event===i)}function sn(e,n){let t=Date.parse(n)-Date.parse(e.recordedAt);return Number.isFinite(t)&&t>=0&&t<=A.maxGateAgeMs}function dn(e,n,t){let i="governedLearning"in t.payload?t.payload.governedLearning:void 0;if(i?.event!=="review_due"&&i?.event!=="expired")return!0;let a=e.slice(0,n).findLast((y)=>y.kind==="promotion"&&y.payload.stage==="promoted"&&y.payload.governedLearning?.lifecycleId===i.lifecycleId);if(!a)return!1;let m=i.event==="review_due"?A.maxReviewIntervalMs:A.maxPromotionExpiryMs;return Date.parse(t.recordedAt)===Date.parse(a.recordedAt)+m}function ln(e,n){let t=ae(n,"candidate_proposed","experiment"),i=ae(n,"risk_policy_decided","experiment"),a=H(n,"offline"),m=H(n,"holdout"),y=H(n,"adversarial"),_=H(n,"shadow"),x=ae(n,"approval_recorded","promotion"),D=ae(n,"canary_started","promotion"),Q=H(n,"canary_compare"),M=t?.payload.candidate,L=M?.type==="runtime_artifact";return{G01:!!t?.payload.baseline,G02:!!t?.payload.baseline?.semanticVersion,G03:!!t?.payload.objectiveDefinition,G04:!!M,G05:L&&!!M.artifact.semanticVersion,G06:L&&M.artifact.artifactRef===t?.payload.candidateArtifactRef,G07:rn(a?.payload.typedMetrics),G08:rn(a?.payload.typedGuardrails)&&a.payload.typedGuardrails.every(({hard:oe})=>oe),G09:!!a?.payload.sampleReceipt,G10:a?.payload.verdict==="pass"&&a.payload.testsReceipt?.status==="allow"&&!!a.payload.testsReceipt.suiteVersion,G11:a?.payload.safetyPassed===!0,G12:a?.payload.privacyPassed===!0,G13:a?.payload.costPassed===!0&&a.payload.costEvidence?.tenantBudgetAllowed===!0&&a.payload.costEvidence.ratio<=1.2,G14:a?.payload.verdict==="pass",G15:m?.payload.verdict==="pass"&&m.payload.datasetRef!==a?.payload.datasetRef,G16:y?.payload.verdict==="pass",G17:bt(y),G18:i?.payload.riskDecision?.status==="allow",G19:x?.payload.approvalReceipt?.status==="allow",G20:Nt(x,y),G21:!!t?.payload.baseline&&x?.payload.rollbackTestReceipt?.status==="allow"&&x.payload.rollbackTestReceipt.expectedBaselineFingerprint===t.payload.baseline.fingerprint&&x.payload.rollbackTestReceipt.observedRestoredFingerprint===t.payload.baseline.fingerprint,G22:x?.payload.killSwitchReceipt?.status==="allow"&&x.payload.killSwitchReceipt.receiptRef===x.payload.killSwitchRef,G23:_?.payload.verdict==="pass",G24:D?.payload.stage==="canary",G25:Q?.payload.verdict==="pass"&&Q.payload.typedGuardrails?.every(({passed:oe})=>oe)===!0}[e]}var rn=(e)=>!!e&&e.length>0&&e.length<=16,ae=(e,n,t)=>e.find((i)=>i.kind===t&&("governedLearning"in i.payload)&&i.payload.governedLearning?.event===n),H=(e,n)=>e.find((t)=>t.kind==="evaluation"&&t.payload.phase===n),bt=(e)=>!!e?.payload.generatorIdentity&&!!e.payload.evaluatorIdentity&&!!e.payload.independenceReceipt&&e.payload.independenceReceipt.status==="allow"&&e.payload.generatorIdentity.principalRef!==e.payload.evaluatorIdentity.principalRef&&e.payload.generatorIdentity.implementationFingerprint!==e.payload.evaluatorIdentity.implementationFingerprint&&e.payload.generatorIdentity.modelFingerprint!==e.payload.evaluatorIdentity.modelFingerprint&&e.payload.generatorIdentity.signerRef!==e.payload.evaluatorIdentity.signerRef,Nt=(e,n)=>!!e?.payload.approvalReceipt?.signerRef&&!!n?.payload.generatorIdentity&&!!n.payload.evaluatorIdentity&&![n.payload.generatorIdentity.signerRef,n.payload.evaluatorIdentity.signerRef,n.payload.generatorIdentity.principalRef,n.payload.evaluatorIdentity.principalRef].includes(e.payload.approvalReceipt.signerRef);function pn(e,n,t,i,a,m){if(At(t,a,m),on(e,n,t,a,m),!dn(e,n,t))v(m,"CI_LEARNING_TRANSITION_INVALID",`${a}.recordedAt`,"Governed review and expiry must equal their promotion-derived deadline.");if(t.kind==="evaluation")an(t,a,m);if(t.kind==="evaluation"&&t.payload.phase){let y=t.payload.phase==="canary_compare"||t.payload.phase==="post_promotion"?"comparison":t.payload.phase;if(!i.event.startsWith(y))v(m,"CI_LEARNING_TRANSITION_INVALID",`${a}.payload.phase`,"Evaluation phase and event disagree.")}if(t.kind==="evaluation"&&t.payload.generatorIdentity&&t.payload.evaluatorIdentity){let y=t.payload.generatorIdentity,_=t.payload.evaluatorIdentity;if(y.principalRef===_.principalRef||y.implementationFingerprint===_.implementationFingerprint||y.modelFingerprint===_.modelFingerprint||y.signerRef===_.signerRef)v(m,"CI_LEARNING_TRANSITION_INVALID",`${a}.payload.evaluatorIdentity`,"Generator and evaluator must be independently identified.")}if(t.kind==="promotion"&&t.payload.gateBundle){let y=t.payload.stage==="canary"?23:t.payload.stage==="promoted"?25:0;if(y>0)Lt(t.payload.gateBundle.gates,y,a,m);let _=e.slice(0,n);if(t.payload.gateBundle.gates.some((x)=>{let D=cn(_,x.id,i.lifecycleId);return!D||x.receiptFingerprint!==D.fingerprint.value||!sn(D,t.recordedAt)||!ln(x.id,_)}))v(m,"CI_LEARNING_HISTORY_INCOMPLETE",`${a}.payload.gateBundle.gates`,"Every gate must cite the exact lifecycle-scoped record that proves its concrete fact.");if((t.payload.stage==="canary"||t.payload.stage==="promoted")&&t.payload.approvalReceipt?.status!=="allow")v(m,"CI_LEARNING_HISTORY_INCOMPLETE",`${a}.payload.approvalReceipt`,"Governed canary and promotion require a concrete approval allow receipt.");if(t.payload.approvalReceipt&&Date.parse(t.payload.approvalReceipt.decidedAt)+A.maxApprovalValidityMs<Date.parse(t.recordedAt))v(m,"CI_LEARNING_TRANSITION_INVALID",`${a}.payload.approvalReceipt`,"Approval receipt expired before use.")}if(t.kind==="promotion"&&(t.payload.stage==="canary"||t.payload.stage==="promoted")){let y=e.find((_)=>_.kind==="experiment"&&_.payload.governedLearning?.event==="candidate_proposed");if(y?.kind!=="experiment"||y.payload.candidate?.type!=="runtime_artifact")v(m,"CI_LEARNING_TRANSITION_INVALID",`${a}.payload.candidateArtifactRef`,"Repository work items cannot enter canary or promotion.")}if(t.kind==="rollback"&&t.payload.status==="executed"){let y=t.payload.reproduction;if(!y||y.expectedBaselineFingerprint!==y.observedActiveFingerprint)v(m,"CI_LEARNING_REPLAY_DRIFT",`${a}.payload.reproduction`,"Executed rollback must reproduce the exact baseline.")}if(t.kind==="replay"&&t.payload.status==="exact"&&(!t.payload.lifecycleHeadFingerprint||!t.payload.baselineFingerprint||!t.payload.effectiveArtifactFingerprint||t.payload.orderedTransitionFingerprints?.length!==i.sequence))v(m,"CI_LEARNING_REPLAY_DRIFT",`${a}.payload`,"Exact replay requires complete ordered fingerprints.")}function At(e,n,t){if(e.recordRefIds.length>A.maxRecordRefs||e.evidenceRefIds.length>A.maxEvidenceRefs||new TextEncoder().encode(JSON.stringify(e.payload)).length>A.maxSerializedBytes)v(t,"CI_LEARNING_CAP_EXCEEDED",n,"Governed record exceeds a frozen v1 cap.");if(e.kind==="evaluation"&&e.payload.sampleReceipt){let i=e.payload.sampleReceipt,a=Object.values(i.strataCounts).reduce((y,_)=>y+_,0),m=Object.values(i.languageCounts).reduce((y,_)=>y+_,0);if(a!==i.observationCount||m!==i.observationCount)v(t,"CI_LEARNING_TRANSITION_INVALID",`${n}.payload.sampleReceipt`,"Sample strata and language counts must each cover the exact observation count.")}}function Lt(e,n,t,i){let a=ge.slice(0,n);if(e.length!==n||e.some((m,y)=>m.id!==a[y]||m.status!=="passed"||!m.receiptFingerprint))v(i,"CI_LEARNING_HISTORY_INCOMPLETE",`${t}.payload.gateBundle.gates`,n===23?"Canary requires G01-G23 green.":"Promotion requires G01-G25 green.")}function mn(e,n,t){if(e.kind!=="feedback"||e.payload.feedbackType==="signal"||n.kind!=="feedback"||n.payload.feedbackType!=="signal")return!1;let i=e.payload.dispositionEvidence,a=n.payload.dispositionRefs;if(!i)return!1;return i.duplicate===!1&&i.signalFingerprint===n.payload.signalFingerprint&&i.originRefId===n.payload.originRefId&&i.consentReceipt.receiptRef===a.consentReceiptRef&&i.consentReceipt.receiptRef===e.payload.consentDecisionRef&&i.consentReceipt.purpose==="governed_learning"&&i.consentReceipt.scopeRefId===n.payload.consentScopeRefId&&i.consentReceipt.scopeRefId===t&&i.consentReceipt.signalFingerprint===n.payload.signalFingerprint&&i.redactionReceipt.receiptRef===a.redactionReceiptRef&&i.redactionReceipt.receiptRef===e.payload.redactionDecisionRef&&i.redactionReceipt.targetRefId===n.payload.originRefId&&i.authorityReceipt.receiptRef===a.authorityReceiptRef&&i.authorityReceipt.tenantId===n.tenantId&&i.authorityReceipt.tenantId===e.tenantId&&i.authorityReceipt.objectiveRefId===n.payload.objectiveRefId&&i.authorityReceipt.actorRef===n.payload.actorRef&&i.authorityReceipt.actorRef===e.payload.actorRef&&i.originIntegrityReceipt.receiptRef===a.originIntegrityReceiptRef&&i.originIntegrityReceipt.originRefId===n.payload.originRefId&&i.originIntegrityReceipt.classification===n.payload.originClassification&&i.originIntegrityReceipt.signalFingerprint===n.payload.signalFingerprint}var Gt={signal_captured:"feedback",consent_redaction_recorded:"feedback",classified:"experiment",baseline_objective_recorded:"experiment",candidate_proposed:"experiment",risk_policy_decided:"experiment",offline_evaluated:"evaluation",holdout_evaluated:"evaluation",adversarial_evaluated:"evaluation",shadow_evaluated:"evaluation",approval_recorded:"promotion",canary_started:"promotion",comparison_recorded:"evaluation",promotion_decided:"promotion",rollback_executed:"rollback",outcome_recorded:"feedback",review_due:"experiment",expired:"experiment",replay_verified:"replay"},kt=new Set(["signal_captured:null:signal_pending","consent_redaction_recorded:signal_pending:feedback_accepted","classified:feedback_accepted:classified","baseline_objective_recorded:classified:candidate_pending","candidate_proposed:candidate_pending:candidate_pending","risk_policy_decided:candidate_pending:evaluating","risk_policy_decided:candidate_pending:rejected","offline_evaluated:evaluating:evaluating","holdout_evaluated:evaluating:evaluating","adversarial_evaluated:evaluating:evaluating","adversarial_evaluated:evaluating:rejected","shadow_evaluated:evaluating:shadow","shadow_evaluated:evaluating:rejected","approval_recorded:shadow:awaiting_approval","canary_started:awaiting_approval:canary","comparison_recorded:canary:canary","comparison_recorded:canary:rejected","promotion_decided:canary:promoted","promotion_decided:canary:rejected","comparison_recorded:promoted:promoted","comparison_recorded:promoted:rejected","rollback_executed:rejected:rolled_back","rollback_executed:promoted:rolled_back","rollback_executed:review_due:rolled_back","outcome_recorded:promoted:outcome_recorded","outcome_recorded:rejected:outcome_recorded","outcome_recorded:rolled_back:outcome_recorded","review_due:outcome_recorded:review_due","expired:review_due:expired","replay_verified:expired:replay_exact","replay_verified:expired:replay_drifted","replay_verified:expired:blocked"]);function V(e){if(!("governedLearning"in e.payload))return;return e.payload.governedLearning}function gn(e,n,t,i){return e.tenantId===n.tenantId&&t.lifecycleId===i.lifecycleId&&e.ownerRef.id===n.ownerRef.id&&e.ownerRef.type===n.ownerRef.type&&e.ownerRef.label===n.ownerRef.label&&e.contractVersion===n.contractVersion&&e.fingerprint.version===n.fingerprint.version&&e.fingerprint.canonicalization===n.fingerprint.canonicalization}function yn(e,n,t,i){if(n.occurredAt!==e.recordedAt)v(i,"CI_LEARNING_FINGERPRINT_MISMATCH",`${t}.recordedAt`,"Recorded and governed occurrence time must match.");if(e.kind!==Gt[n.event])v(i,"CI_LEARNING_TRANSITION_INVALID",`${t}.kind`,"Event is stored in the wrong canonical record kind.");if(n.event==="signal_captured"&&(e.kind!=="feedback"||e.payload.feedbackType!=="signal"||e.payload.status!=="quarantined"))v(i,"CI_LEARNING_TRANSITION_INVALID",`${t}.payload.status`,"Only a zero-weight quarantined signal may await consent and redaction.");if(n.event==="consent_redaction_recorded"&&(e.kind!=="feedback"||e.payload.feedbackType==="signal"||e.payload.status!=="accepted"))v(i,"CI_LEARNING_TRANSITION_INVALID",`${t}.payload.status`,"Learning requires accepted feedback with consent and redaction refs.");let a=`${n.event}:${n.stateBefore??"null"}:${n.stateAfter}`;if(!kt.has(a))v(i,"CI_LEARNING_TRANSITION_INVALID",`${t}.payload.governedLearning`,`Illegal governed transition ${a}.`)}function fn(e,n,t,i,a){if(n===0){if(i.event!=="signal_captured"||i.stateBefore!==null||i.previousTransitionRecordRefId||i.previousStateFingerprint)v(a,"CI_LEARNING_HISTORY_INCOMPLETE","records.0","Sequence zero must be an unlinked signal capture.");return}let m=e[n-1],y=V(m);if(i.event==="consent_redaction_recorded"&&!mn(t,m,i.lifecycleId))v(a,"CI_LEARNING_HISTORY_INCOMPLETE",`records.${n}.payload.dispositionEvidence`,"Accepted governed feedback requires exact allow disposition evidence.");if(!y||i.previousTransitionRecordRefId!==m.id||i.previousStateFingerprint!==y.stateFingerprint||i.stateBefore!==y.stateAfter||!t.recordRefIds.includes(m.id))v(a,"CI_LEARNING_HEAD_CONFLICT",`records.${n}`,"Transition does not extend the exact previous head.")}function In(e){let n=e.filter((m)=>V(m)!==void 0).sort((m,y)=>(V(m)?.sequence??0)-(V(y)?.sequence??0)),t=[];if(n.length===0)return{ok:!0,issues:t};if(n.length>A.maxTransitions)v(t,"CI_LEARNING_CAP_EXCEEDED","records","Lifecycle transition cap exceeded.");let i=n[0],a=V(i);if(!a)return{ok:!0,issues:t};for(let[m,y]of n.entries()){let _=V(y);if(!_)continue;let x=`records.${m}`;if(!gn(y,i,_,a))v(t,"CI_LEARNING_TENANT_MISMATCH",x,"Governed history must share exact tenant, lifecycle, owner, and contract identity.");if(_.sequence!==m)v(t,"CI_LEARNING_SEQUENCE_CONFLICT",`${x}.payload.governedLearning.sequence`,"Sequences must be contiguous from zero.");yn(y,_,x,t),fn(n,m,y,_,t),pn(n,m,y,_,x,t)}return tn(n,t),{ok:t.length===0,issues:t}}function un(e,n,t){if((e.kind==="claim"||e.kind==="entity"||e.kind==="relation")&&e.payload.confidence<0.9&&e.payload.reviewState!=="review_required")P(t,"CI_REVIEW_REQUIRED",n,e,"Low-confidence semantic candidates require review.");if(e.kind==="answer")Ot(e,n,t);if(e.kind==="feedback"){let i=e.payload.feedbackType==="correction"&&!e.payload.correctionRefId,a=e.payload.feedbackType==="outcome"&&!e.payload.outcomeRefId;if(i||a)P(t,"CI_FEEDBACK_SEMANTICS_INVALID",n,e,"Feedback must reference its correction or outcome.")}if(e.kind==="evaluation"&&e.payload.verdict==="pass"&&(!e.payload.safetyPassed||!e.payload.privacyPassed||!e.payload.costPassed))P(t,"CI_EVALUATION_GATES_FAILED",n,e,"Passing evaluation requires safety, privacy, and cost gates.");if(e.kind==="promotion"&&e.payload.stage==="promoted"&&!e.payload.approvedAt)P(t,"CI_PROMOTION_GATES_REQUIRED",n,e,"Promoted records require approval time and gate refs.");if(e.kind==="rollback"&&e.payload.status==="executed"&&!e.payload.executedAt)P(t,"CI_ROLLBACK_TIME_REQUIRED",n,e,"Executed rollback requires execution time.");if(e.kind==="replay"&&new Set(e.payload.orderedEventRefIds).size!==e.payload.orderedEventRefIds.length)P(t,"CI_REPLAY_ORDER_INVALID",n,e,"Replay event order cannot contain duplicates.")}function Ot(e,n,t){let{payload:i}=e,a=i.status==="answered"&&(!i.text||i.claimRefIds.length===0||i.citationEvidenceRefIds.length===0||!i.verificationRefId),m=(i.status==="abstained"||i.status==="refused")&&(i.claimRefIds.length>0||i.citationEvidenceRefIds.length>0),y=i.status==="conflicted"&&i.conflictRefIds.length===0,_=i.status!=="answered"&&i.reasons.length===0,x=i.status==="refused"&&!i.policyDecisionRef;if(a||m||y||_||x)P(t,"CI_ANSWER_SEMANTICS_INVALID",n,e,"Answer status, support, policy, and reason fields are inconsistent.")}function P(e,n,t,i,a){e.push({code:n,path:`records.${t}.${i.kind}`,message:a})}var Dt=new Set(["claim","policy","entity","relation","conflict","gap","graph","edition","answer","verification","feedback","experiment","evaluation","promotion","rollback","replay"]);function Rn(e){let n=[],t=new Map;for(let[i,a]of e.records.entries()){if(t.has(a.id))z(n,"CI_DUPLICATE_ID",i,a,"Record ids must be unique.");if(t.set(a.id,a),a.tenantId!==e.tenantId)z(n,"CI_TENANT_MISMATCH",i,a,"Record tenant must match packet tenant.");if(a.validTime.to&&Date.parse(a.validTime.to)<=Date.parse(a.validTime.from))z(n,"CI_VALID_TIME_INVALID",i,a,"Valid-to must be later than valid-from.");let m=a.kind==="feedback"&&a.payload.feedbackType==="signal";if(Dt.has(a.kind)&&a.evidenceRefIds.length===0&&!m)z(n,"CI_EVIDENCE_REQUIRED",i,a,"Semantic records require evidence refs.")}for(let[i,a]of e.records.entries()){for(let m of a.recordRefIds)if(!t.has(m))z(n,"CI_REFERENCE_NOT_FOUND",i,a,`Unknown record ref ${m}.`);for(let m of a.evidenceRefIds){let y=t.get(m);if(!y)z(n,"CI_EVIDENCE_NOT_FOUND",i,a,`Unknown evidence ref ${m}.`);else if(y.kind!=="evidence")z(n,"CI_EVIDENCE_KIND_INVALID",i,a,`${m} is not an evidence record.`)}un(a,i,n)}return n}function z(e,n,t,i,a){e.push({code:n,path:`records.${t}.${i.kind}`,message:a})}var Tt={schemaId:"companyos.company-intelligence-record",version:"1.0.0",compatibility:"additive",canonicalization:W,fingerprint:Z,recordKinds:["source","source_version","asset","part","fragment","evidence","claim","policy","entity","relation","conflict","gap","graph","edition","query","answer","verification","feedback","experiment","evaluation","promotion","rollback","replay"]};function wt(e){let{fingerprint:n,...t}=e;return he(t)}async function Cn(e){return Ee(wt(e))}async function io(e){return Ee(he(e))}async function ao(){return Ee(he(Tt))}async function oo(e){let n=nn.parse(e);return ve.shape.records.element.parse({...n,fingerprint:{version:Z,canonicalization:W,value:await Cn(n)}})}async function ro(e){let n=ve.safeParse(e);if(!n.success)return{ok:!1,issues:n.error.issues.map(Ft)};let t=Rn(n.data);t.push(...In(n.data.records).issues);for(let[i,a]of n.data.records.entries()){let m=await Cn(a);if(a.fingerprint.value!==m)t.push({code:"CI_FINGERPRINT_MISMATCH",path:`records.${i}.fingerprint.value`,message:`Record ${a.id} fingerprint does not match canonical content.`})}return{ok:t.length===0,issues:t}}function Ft(e){let n=e.path.join(".")||"root",t="CI_SCHEMA_INVALID";if(n.endsWith("tenantId"))t="CI_TENANT_REQUIRED";else if(n.includes("ownerRef"))t="CI_OWNER_REQUIRED";else if(n.includes("recordedAt")||n.includes("validTime"))t="CI_TIME_REQUIRED";return{code:t,path:n,message:e.message}}async function Ee(e){let n=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(e));return`sha256:${Array.from(new Uint8Array(n),(i)=>i.toString(16).padStart(2,"0")).join("")}`}export{Tt as COMPANY_INTELLIGENCE_SCHEMA_IDENTITY,v as addLearningIssue,wt as canonicalSerializeCompanyIntelligenceRecord,io as fingerprintCompanyIntelligenceCanonicalValue,Cn as fingerprintCompanyIntelligenceRecord,ao as fingerprintCompanyIntelligenceSchema,In as validateCompanyIntelligenceGovernedLearningHistory,ro as validateCompanyIntelligenceRecordPacket,Rn as validateCompanyIntelligenceSemanticInvariants,oo as withCompanyIntelligenceFingerprint};

package/dist/node/validation/enterprise-authority.js

@@ -0,0 +1 @@
+function p(i){let a=[],t=new Map(i.delegatedAuthorities.map((e)=>[e.id,e]));for(let e of i.crossCompanyGrants){if(e.grantorEntityId===e.granteeEntityId)a.push(`ENTERPRISE_GRANT_NOT_CROSS_COMPANY:${e.id}`);let n=t.get(e.delegatedAuthorityId),r=e.capabilities.every((d)=>n?.capabilities.includes(d)),o=n?.entityScopeIds.includes(e.granteeEntityId),s=n?.delegateRef.id===e.delegateRef.id;if(e.status==="approved"&&(!n||n.delegatorEntityId!==e.grantorEntityId||!n.delegable||!r||!o||!s))a.push(`ENTERPRISE_UNAUTHORIZED_CROSS_COMPANY_GRANT:${e.id}`)}return a}function c(i){let a=new Map(i.complianceBoundaries.map((t)=>[t.id,t]));return i.boundaryExceptions.flatMap((t)=>{let e=a.get(t.boundaryId);if(!e)return[`ENTERPRISE_DANGLING_BOUNDARY:${t.id}`];return e.nonWaivable?[`ENTERPRISE_NON_WAIVABLE_BOUNDARY:${t.id}`]:[]})}export{c as validateBoundaryExceptions,p as validateCrossCompanyAuthority};

package/dist/node/validation/enterprise-governance-references.js

@@ -0,0 +1 @@
+function c(i,n,f,t){let e=i.governance;for(let o of e.delegatedAuthorities){r(n,o.delegatorEntityId,"AUTHORITY",t);for(let a of o.entityScopeIds)r(n,a,"AUTHORITY_SCOPE",t)}for(let o of e.crossCompanyGrants)r(n,o.grantorEntityId,"GRANT",t),r(n,o.granteeEntityId,"GRANT",t);for(let o of e.sharedServiceMandates){r(n,o.providerEntityId,"MANDATE",t);for(let a of o.consumerEntityIds)r(n,a,"MANDATE",t)}for(let o of e.responsibilities)r(n,o.companyEntityId,"RESPONSIBILITY",t);for(let o of e.escalationRoutes)if(r(n,o.companyEntityId,"ESCALATION",t),o.parentRouteId)r(f,o.parentRouteId,"ESCALATION_PARENT",t);for(let o of e.conflicts){for(let a of o.entityIds)r(n,a,"CONFLICT",t);r(f,o.escalationRouteId,"CONFLICT_ROUTE",t)}}function r(i,n,f,t){if(!i.has(n))t.push(`ENTERPRISE_DANGLING_${f}:${n}`)}export{c as validateGovernanceEntityRefs};

package/dist/node/validation/enterprise-graph.js

@@ -0,0 +1 @@
+function c(d){let r=new Map(d.map((e)=>[e.id,e.parentId]));for(let e of d){let i=[],s=new Map,t=e.id;while(t){let n=s.get(t);if(n!==void 0)return[...i.slice(n),t];s.set(t,i.length),i.push(t),t=r.get(t)}}return}function u(d){let r=new Map;for(let n of d)r.set(n.fromEntityId,[...r.get(n.fromEntityId)??[],n.toEntityId]);let e=new Set,i=new Set,s=[];function t(n){if(e.has(n))return[...s,n];if(i.has(n))return;e.add(n),s.push(n);for(let o of r.get(n)??[]){let f=t(o);if(f)return f}s.pop(),e.delete(n),i.add(n);return}for(let n of r.keys()){let o=t(n);if(o)return o}return}export{c as findDirectedCycle,u as findRelationshipCycle};

package/dist/node/validation/enterprise-integrity.js

@@ -0,0 +1 @@
+function c(o){let e=o.governance,n=[];for(let[t,i]of d(o))for(let s of a(i))n.push(`ENTERPRISE_DUPLICATE_${t}:${s}`);let r=new Map(e.topology.entities.map((t)=>[t.id,t.kind]));for(let t of e.topology.relationships){let i=p(t.kind);if(i&&r.get(t.toEntityId)!==i)n.push(`ENTERPRISE_RELATION_TARGET_KIND:${t.id}`)}for(let t of e.sharedServiceMandates)if(t.consumerEntityIds.includes(t.providerEntityId))n.push(`ENTERPRISE_SHARED_SERVICE_SELF_CONSUMER:${t.id}`);for(let t of e.boundaryExceptions){let i=e.complianceBoundaries.find((s)=>s.id===t.boundaryId);if(i&&t.entityScopeIds.some((s)=>!i.entityScopeIds.includes(s)))n.push(`ENTERPRISE_EXCEPTION_OUTSIDE_BOUNDARY:${t.id}`)}return n}function d(o){let e=o.governance;return[["ENTITY_ID",e.topology.entities.map((n)=>n.id)],["RELATION_ID",e.topology.relationships.map((n)=>n.id)],["PURPOSE_ID",o.companyPurposes.map((n)=>n.id)],["AUTHORITY_ID",e.delegatedAuthorities.map((n)=>n.id)],["GRANT_ID",e.crossCompanyGrants.map((n)=>n.id)],["ROUTE_ID",e.escalationRoutes.map((n)=>n.id)],["RESPONSIBILITY_ID",e.responsibilities.map((n)=>n.id)],["BOUNDARY_ID",e.complianceBoundaries.map((n)=>n.id)]]}function a(o){let e=new Set,n=new Set;for(let r of o){if(e.has(r))n.add(r);e.add(r)}return[...n]}function p(o){if(o==="brand_owner")return"brand";if(o==="product_owner")return"product";if(o==="workspace_owner")return"workspace";return}export{c as validateEnterpriseIntegrity};

package/dist/node/validation/enterprise-references.js

@@ -0,0 +1 @@
+function p(c,n,I,r){let E=c.governance;for(let o of E.delegatedAuthorities){R(n,o.delegatorEntityId,"AUTHORITY",r);for(let e of o.entityScopeIds)R(n,e,"AUTHORITY_SCOPE",r)}for(let o of E.crossCompanyGrants)R(n,o.grantorEntityId,"GRANT",r),R(n,o.granteeEntityId,"GRANT",r);for(let o of E.sharedServiceMandates){R(n,o.providerEntityId,"MANDATE",r);for(let e of o.consumerEntityIds)R(n,e,"MANDATE",r)}for(let o of E.responsibilities)R(n,o.companyEntityId,"RESPONSIBILITY",r);for(let o of E.escalationRoutes)if(R(n,o.companyEntityId,"ESCALATION",r),o.parentRouteId)R(I,o.parentRouteId,"ESCALATION_PARENT",r);for(let o of E.conflicts){for(let e of o.entityIds)R(n,e,"CONFLICT",r);R(I,o.escalationRouteId,"CONFLICT_ROUTE",r)}}function R(c,n,I,r){if(!c.has(n))r.push(`ENTERPRISE_DANGLING_${I}:${n}`)}function _(c){let n=[],I=c.governance,r=I.topology,E=new Set(r.entities.map((i)=>i.id)),o=new Set(I.escalationRoutes.map((i)=>i.id)),e=new Set(c.companyPurposes.map((i)=>i.id)),N=new Set(I.responsibilities.map((i)=>i.id)),d=new Map(I.responsibilities.map((i)=>[i.id,i.kind]));a(E,r.rootEntityId,"ENTERPRISE_DANGLING_ROOT",n);for(let i of r.relationships)a(E,i.fromEntityId,"ENTERPRISE_DANGLING_RELATION",n),a(E,i.toEntityId,"ENTERPRISE_DANGLING_RELATION",n);for(let i of r.consolidationBoundaries){a(E,i.reportingEntityId,"ENTERPRISE_DANGLING_CONSOLIDATION",n);for(let t of i.memberEntityIds)a(E,t,"ENTERPRISE_DANGLING_CONSOLIDATION",n)}for(let i of I.purposeSpecIds)a(e,i,"ENTERPRISE_DANGLING_PURPOSE",n);return p(c,E,o,n),s(c,E,o,N,d,n),n}function s(c,n,I,r,E,o){for(let e of c.companyPurposes){a(n,e.companyEntityId,"ENTERPRISE_DANGLING_PURPOSE_ENTITY",o);let N=new Set(e.goals.map((t)=>t.id)),d=new Set(e.outcomeMetrics.map((t)=>t.id)),i=new Set(e.goalCascades.map((t)=>t.id));for(let t of e.goalCascades)if(a(N,t.goalId,"ENTERPRISE_DANGLING_CASCADE_GOAL",o),a(n,t.companyEntityId,"ENTERPRISE_DANGLING_CASCADE_ENTITY",o),a(I,t.escalationRouteId,"ENTERPRISE_DANGLING_CASCADE_ROUTE",o),t.parentCascadeId)a(i,t.parentCascadeId,"ENTERPRISE_DANGLING_CASCADE_PARENT",o);for(let t of e.goals)if(t.parentGoalId)a(N,t.parentGoalId,"ENTERPRISE_DANGLING_PARENT_GOAL",o);for(let t of e.harmGuardrails)if(t.goalIds.forEach((f)=>a(N,f,"ENTERPRISE_DANGLING_GUARDRAIL_GOAL",o)),t.metricId)a(d,t.metricId,"ENTERPRISE_DANGLING_GUARDRAIL_METRIC",o);for(let t of e.goalConflicts)t.goalIds.forEach((f)=>a(N,f,"ENTERPRISE_DANGLING_GOAL_CONFLICT",o)),a(I,t.escalationRouteId,"ENTERPRISE_DANGLING_GOAL_CONFLICT_ROUTE",o);for(let t of[...e.capitalResponsibilityRefIds,...e.budgetResponsibilityRefIds])a(r,t,"ENTERPRISE_DANGLING_PURPOSE_RESPONSIBILITY",o);for(let t of e.capitalResponsibilityRefIds)if(E.get(t)==="budget")o.push(`ENTERPRISE_RESPONSIBILITY_KIND_MISMATCH:${t}`);for(let t of e.budgetResponsibilityRefIds)if(E.get(t)==="capital")o.push(`ENTERPRISE_RESPONSIBILITY_KIND_MISMATCH:${t}`)}}function a(c,n,I,r){if(!c.has(n))r.push(`${I}:${n}`)}export{_ as validateEnterpriseReferences};

package/dist/node/validation/enterprise-secrets.js

@@ -0,0 +1 @@
+var p=/(password|secret|private.?key|access.?token|api.?key)/i,y=/(?:sk-|ghp_|Bearer\s+)[A-Za-z0-9._-]{8,}/;function c(r,o="root",t=[]){if(typeof r==="string"){if(y.test(r))t.push(o);return t}if(Array.isArray(r))return r.forEach((e,n)=>c(e,`${o}.${n}`,t)),t;if(!r||typeof r!=="object")return t;for(let[e,n]of Object.entries(r)){let f=`${o}.${e}`,i=/(ref|refId|refIds)$/i.test(e);if(p.test(e)&&!i&&n!==!1&&n!=null)t.push(f);c(n,f,t)}return t}export{c as findSecretMaterial};

package/dist/node/validation/enterprise-semantics.js

@@ -0,0 +1 @@
+function g(s){let n=[],t=new Map(s.delegatedAuthorities.map((e)=>[e.id,e]));for(let e of s.crossCompanyGrants){if(e.grantorEntityId===e.granteeEntityId)n.push(`ENTERPRISE_GRANT_NOT_CROSS_COMPANY:${e.id}`);let i=t.get(e.delegatedAuthorityId),o=e.capabilities.every((E)=>i?.capabilities.includes(E)),r=i?.entityScopeIds.includes(e.granteeEntityId),d=i?.delegateRef.id===e.delegateRef.id;if(e.status==="approved"&&(!i||i.delegatorEntityId!==e.grantorEntityId||!i.delegable||!o||!r||!d))n.push(`ENTERPRISE_UNAUTHORIZED_CROSS_COMPANY_GRANT:${e.id}`)}return n}function N(s){let n=new Map(s.complianceBoundaries.map((t)=>[t.id,t]));return s.boundaryExceptions.flatMap((t)=>{let e=n.get(t.boundaryId);if(!e)return[`ENTERPRISE_DANGLING_BOUNDARY:${t.id}`];return e.nonWaivable?[`ENTERPRISE_NON_WAIVABLE_BOUNDARY:${t.id}`]:[]})}function I(s){let n=new Map(s.map((t)=>[t.id,t.parentId]));for(let t of s){let e=[],i=new Map,o=t.id;while(o){let r=i.get(o);if(r!==void 0)return[...e.slice(r),o];i.set(o,e.length),e.push(o),o=n.get(o)}}return}function y(s){let n=new Map;for(let r of s)n.set(r.fromEntityId,[...n.get(r.fromEntityId)??[],r.toEntityId]);let t=new Set,e=new Set,i=[];function o(r){if(t.has(r))return[...i,r];if(e.has(r))return;t.add(r),i.push(r);for(let d of n.get(r)??[]){let E=o(d);if(E)return E}i.pop(),t.delete(r),e.add(r);return}for(let r of n.keys()){let d=o(r);if(d)return d}return}function _(s){let n=s.governance,t=[];for(let[i,o]of T(s))for(let r of A(o))t.push(`ENTERPRISE_DUPLICATE_${i}:${r}`);let e=new Map(n.topology.entities.map((i)=>[i.id,i.kind]));for(let i of n.topology.relationships){let o=m(i.kind);if(o&&e.get(i.toEntityId)!==o)t.push(`ENTERPRISE_RELATION_TARGET_KIND:${i.id}`)}for(let i of n.sharedServiceMandates)if(i.consumerEntityIds.includes(i.providerEntityId))t.push(`ENTERPRISE_SHARED_SERVICE_SELF_CONSUMER:${i.id}`);for(let i of n.boundaryExceptions){let o=n.complianceBoundaries.find((r)=>r.id===i.boundaryId);if(o&&i.entityScopeIds.some((r)=>!o.entityScopeIds.includes(r)))t.push(`ENTERPRISE_EXCEPTION_OUTSIDE_BOUNDARY:${i.id}`)}return t}function T(s){let n=s.governance;return[["ENTITY_ID",n.topology.entities.map((t)=>t.id)],["RELATION_ID",n.topology.relationships.map((t)=>t.id)],["PURPOSE_ID",s.companyPurposes.map((t)=>t.id)],["AUTHORITY_ID",n.delegatedAuthorities.map((t)=>t.id)],["GRANT_ID",n.crossCompanyGrants.map((t)=>t.id)],["ROUTE_ID",n.escalationRoutes.map((t)=>t.id)],["RESPONSIBILITY_ID",n.responsibilities.map((t)=>t.id)],["BOUNDARY_ID",n.complianceBoundaries.map((t)=>t.id)]]}function A(s){let n=new Set,t=new Set;for(let e of s){if(n.has(e))t.add(e);n.add(e)}return[...t]}function m(s){if(s==="brand_owner")return"brand";if(s==="product_owner")return"product";if(s==="workspace_owner")return"workspace";return}function u(s,n,t,e){let i=s.governance;for(let o of i.delegatedAuthorities){f(n,o.delegatorEntityId,"AUTHORITY",e);for(let r of o.entityScopeIds)f(n,r,"AUTHORITY_SCOPE",e)}for(let o of i.crossCompanyGrants)f(n,o.grantorEntityId,"GRANT",e),f(n,o.granteeEntityId,"GRANT",e);for(let o of i.sharedServiceMandates){f(n,o.providerEntityId,"MANDATE",e);for(let r of o.consumerEntityIds)f(n,r,"MANDATE",e)}for(let o of i.responsibilities)f(n,o.companyEntityId,"RESPONSIBILITY",e);for(let o of i.escalationRoutes)if(f(n,o.companyEntityId,"ESCALATION",e),o.parentRouteId)f(t,o.parentRouteId,"ESCALATION_PARENT",e);for(let o of i.conflicts){for(let r of o.entityIds)f(n,r,"CONFLICT",e);f(t,o.escalationRouteId,"CONFLICT_ROUTE",e)}}function f(s,n,t,e){if(!s.has(n))e.push(`ENTERPRISE_DANGLING_${t}:${n}`)}function S(s){let n=[],t=s.governance,e=t.topology,i=new Set(e.entities.map((c)=>c.id)),o=new Set(t.escalationRoutes.map((c)=>c.id)),r=new Set(s.companyPurposes.map((c)=>c.id)),d=new Set(t.responsibilities.map((c)=>c.id)),E=new Map(t.responsibilities.map((c)=>[c.id,c.kind]));p(i,e.rootEntityId,"ENTERPRISE_DANGLING_ROOT",n);for(let c of e.relationships)p(i,c.fromEntityId,"ENTERPRISE_DANGLING_RELATION",n),p(i,c.toEntityId,"ENTERPRISE_DANGLING_RELATION",n);for(let c of e.consolidationBoundaries){p(i,c.reportingEntityId,"ENTERPRISE_DANGLING_CONSOLIDATION",n);for(let a of c.memberEntityIds)p(i,a,"ENTERPRISE_DANGLING_CONSOLIDATION",n)}for(let c of t.purposeSpecIds)p(r,c,"ENTERPRISE_DANGLING_PURPOSE",n);return u(s,i,o,n),C(s,i,o,d,E,n),n}function C(s,n,t,e,i,o){for(let r of s.companyPurposes){p(n,r.companyEntityId,"ENTERPRISE_DANGLING_PURPOSE_ENTITY",o);let d=new Set(r.goals.map((a)=>a.id)),E=new Set(r.outcomeMetrics.map((a)=>a.id)),c=new Set(r.goalCascades.map((a)=>a.id));for(let a of r.goalCascades)if(p(d,a.goalId,"ENTERPRISE_DANGLING_CASCADE_GOAL",o),p(n,a.companyEntityId,"ENTERPRISE_DANGLING_CASCADE_ENTITY",o),p(t,a.escalationRouteId,"ENTERPRISE_DANGLING_CASCADE_ROUTE",o),a.parentCascadeId)p(c,a.parentCascadeId,"ENTERPRISE_DANGLING_CASCADE_PARENT",o);for(let a of r.goals)if(a.parentGoalId)p(d,a.parentGoalId,"ENTERPRISE_DANGLING_PARENT_GOAL",o);for(let a of r.harmGuardrails)if(a.goalIds.forEach((l)=>p(d,l,"ENTERPRISE_DANGLING_GUARDRAIL_GOAL",o)),a.metricId)p(E,a.metricId,"ENTERPRISE_DANGLING_GUARDRAIL_METRIC",o);for(let a of r.goalConflicts)a.goalIds.forEach((l)=>p(d,l,"ENTERPRISE_DANGLING_GOAL_CONFLICT",o)),p(t,a.escalationRouteId,"ENTERPRISE_DANGLING_GOAL_CONFLICT_ROUTE",o);for(let a of[...r.capitalResponsibilityRefIds,...r.budgetResponsibilityRefIds])p(e,a,"ENTERPRISE_DANGLING_PURPOSE_RESPONSIBILITY",o);for(let a of r.capitalResponsibilityRefIds)if(i.get(a)==="budget")o.push(`ENTERPRISE_RESPONSIBILITY_KIND_MISMATCH:${a}`);for(let a of r.budgetResponsibilityRefIds)if(i.get(a)==="capital")o.push(`ENTERPRISE_RESPONSIBILITY_KIND_MISMATCH:${a}`)}}function p(s,n,t,e){if(!s.has(n))e.push(`${t}:${n}`)}var P=/(password|secret|private.?key|access.?token|api.?key)/i,G=/(?:sk-|ghp_|Bearer\s+)[A-Za-z0-9._-]{8,}/;function R(s,n="root",t=[]){if(typeof s==="string"){if(G.test(s))t.push(n);return t}if(Array.isArray(s))return s.forEach((e,i)=>R(e,`${n}.${i}`,t)),t;if(!s||typeof s!=="object")return t;for(let[e,i]of Object.entries(s)){let o=`${n}.${e}`,r=/(ref|refId|refIds)$/i.test(e);if(P.test(e)&&!r&&i!==!1&&i!=null)t.push(o);R(i,o,t)}return t}function k(s){let n=s.governance,t=n.topology.relationships.filter((r)=>r.kind==="owns"||r.kind==="controls"),e=y(t),i=I(n.escalationRoutes.map((r)=>({id:r.id,parentId:r.parentRouteId}))),o=[...S(s),...g(n),...N(n),..._(s),...h(s)];if(e)o.push(`ENTERPRISE_TOPOLOGY_CYCLE:${e.join(">")}`);if(i)o.push(`ENTERPRISE_ESCALATION_CYCLE:${i.join(">")}`);for(let r of s.companyPurposes){let d=I(r.goals.map((c)=>({id:c.id,parentId:c.parentGoalId}))),E=I(r.goalCascades.map((c)=>({id:c.id,parentId:c.parentCascadeId})));if(d)o.push(`ENTERPRISE_GOAL_CYCLE:${d.join(">")}`);if(E)o.push(`ENTERPRISE_GOAL_CASCADE_CYCLE:${E.join(">")}`)}for(let r of R(s))o.push(`ENTERPRISE_SECRET_MATERIAL:${r}`);return[...new Set(o)].sort()}function h(s){let n=new Map;for(let e of s.governance.topology.relationships){if(e.kind!=="owns"&&e.kind!=="controls")continue;n.set(e.toEntityId,[...n.get(e.toEntityId)??[],e])}let t=[];for(let[e,i]of n){if(i.reduce((d,E)=>d+(E.ownershipShare??0),0)>1.000001)t.push(`ENTERPRISE_OWNERSHIP_EXCEEDS_ONE:${e}`);let r=i.filter((d)=>d.controllingInterest);if(r.length>1&&r.some((d)=>!d.jointVenture))t.push(`ENTERPRISE_INCOMPATIBLE_CONTROLLING_INTEREST:${e}`)}return t}export{k as validateEnterpriseSemantics};

package/dist/node/validation/enterprise.js

@@ -0,0 +1 @@
+import{LssmIdSchema as Ee}from"@lssm/lib.lssm-os-spec";import{z as M}from"zod";import{LssmGoalConflictV1Schema as Z,LssmGoalV1Schema as X,LssmHarmGuardrailV1Schema as J,LssmIdSchema as I,LssmOutcomeMetricV1Schema as Q,LssmStableRefV1Schema as O,LssmUtcTimestampSchema as ee}from"@lssm/lib.lssm-os-spec";import{z as y}from"zod";import{LssmDataHandlingV1Schema as K,LssmEvidenceRefV1Schema as G,LssmIdSchema as Ae,LssmStableRefV1Schema as x,LssmUtcTimestampSchema as q}from"@lssm/lib.lssm-os-spec";import{z as S}from"zod";var W="1.0.0",C=S.literal(W),Te=x.extend({kind:S.enum(["enterprise","holding_company","legal_entity","operating_company","brand","product","workspace"])}).strict(),h=S.object({recordedAt:q,recordedByRef:x,sourceRefs:S.array(G).min(1).max(32),decisionRef:G.optional(),dataHandling:K}).strict(),L=S.object({businessIntentRecordedByCompanyOs:S.literal(!0),technicalExecutionAuthorizedByCompanyOs:S.literal(!1),connectAuthorizationRequired:S.literal(!0),connectPolicyRef:x}).strict();var te=y.object({id:I,name:y.string().trim().min(1).max(120),description:y.string().trim().min(1).max(4000),behavioralCommitments:y.array(y.string().trim().min(1).max(500)).min(1),evidenceRefIds:y.array(I).max(16)}).strict(),oe=y.object({id:I,goalId:I,companyEntityId:I,parentCascadeId:I.optional(),alignment:y.enum(["direct","supporting","guardrail","conflicting"]),contributionWeight:y.number().min(0).max(1),accountableOwnerRef:O,escalationRouteId:I}).strict(),D=y.object({contractVersion:C,id:I,companyEntityId:I,mission:y.string().trim().min(1).max(4000),vision:y.string().trim().min(1).max(4000),values:y.array(te).min(1).max(32),goals:y.array(X).min(1),outcomeMetrics:y.array(Q),goalConflicts:y.array(Z),harmGuardrails:y.array(J),goalCascades:y.array(oe).min(1),capitalResponsibilityRefIds:y.array(I),budgetResponsibilityRefIds:y.array(I),effectiveFrom:ee,supersedesPurposeRef:O.optional(),provenance:h}).strict();import{LssmEvidenceRefV1Schema as A,LssmIdSchema as c,LssmStableRefV1Schema as E,LssmUtcTimestampSchema as _}from"@lssm/lib.lssm-os-spec";import{z as s}from"zod";import{LssmIdSchema as R,LssmStableRefV1Schema as N}from"@lssm/lib.lssm-os-spec";import{z as f}from"zod";var ne=f.enum(["holding_company","legal_entity","operating_company","brand","product","workspace"]),re=f.object({id:R,kind:ne,name:f.string().trim().min(1).max(200),legalName:f.string().trim().min(1).max(300).optional(),jurisdiction:f.string().trim().min(2).max(80).optional(),registrationRef:N.optional(),accountableOwnerRef:N,active:f.boolean()}).strict().superRefine((t,e)=>{if(new Set(["holding_company","legal_entity","operating_company"]).has(t.kind)&&!t.legalName)e.addIssue({code:"custom",path:["legalName"],message:`${t.kind} requires a legalName`})}),ie=f.object({id:R,fromEntityId:R,toEntityId:R,kind:f.enum(["owns","controls","operates","brand_owner","product_owner","workspace_owner"]),ownershipShare:f.number().min(0).max(1).optional(),votingShare:f.number().min(0).max(1).optional(),controllingInterest:f.boolean(),jointVenture:f.boolean(),governanceAgreementRef:N.optional()}).strict().superRefine((t,e)=>{if(t.fromEntityId===t.toEntityId)e.addIssue({code:"custom",path:["toEntityId"],message:"An entity cannot relate to itself"});if(t.jointVenture&&!t.governanceAgreementRef)e.addIssue({code:"custom",path:["governanceAgreementRef"],message:"Joint ventures require a governance agreement reference"})}),ae=f.object({id:R,reportingEntityId:R,memberEntityIds:f.array(R).min(1),method:f.enum(["full","proportional","equity","not_consolidated"]),standard:f.enum(["ifrs","gaap","local","management"]),policyRef:N}).strict(),w=f.object({contractVersion:C,id:R,rootEntityId:R,entities:f.array(re).min(1),relationships:f.array(ie),consolidationBoundaries:f.array(ae),provenance:h}).strict();var se=s.object({id:c,delegatorEntityId:c,delegateRef:E,capabilities:s.array(c).min(1),entityScopeIds:s.array(c).min(1),delegable:s.boolean(),riskCeiling:s.enum(["low","medium","high","critical"]),effectiveFrom:_,expiresAt:_,approvalEvidenceRefs:s.array(A).min(1)}).strict().superRefine((t,e)=>{if(t.expiresAt<=t.effectiveFrom)e.addIssue({code:"custom",path:["expiresAt"],message:"Delegated authority must expire after it becomes effective"})}),pe=s.object({id:c,grantorEntityId:c,granteeEntityId:c,delegateRef:E,delegatedAuthorityId:c,capabilities:s.array(c).min(1),resourceScopeRefs:s.array(E).min(1),purpose:s.string().trim().min(1).max(2000),status:s.enum(["proposed","approved","suspended","revoked","expired"]),effectiveFrom:_.optional(),expiresAt:_,approvalEvidenceRefs:s.array(A).min(1),authorityBoundary:L}).strict().superRefine((t,e)=>{if(t.status==="approved"&&!t.effectiveFrom)e.addIssue({code:"custom",path:["effectiveFrom"],message:"Approved grants require an effectiveFrom timestamp"});if(t.effectiveFrom&&t.expiresAt<=t.effectiveFrom)e.addIssue({code:"custom",path:["expiresAt"],message:"Cross-company grant must expire after it becomes effective"})}),ce=s.object({id:c,providerEntityId:c,consumerEntityIds:s.array(c).min(1),capability:c,serviceContractRef:E,costAllocationPolicyRef:E,sloRef:E,mandatory:s.boolean(),exceptionPolicyRef:E.optional(),accountableOwnerRef:E}).strict(),me=s.object({id:c,kind:s.enum(["capital","budget"]),companyEntityId:c,accountableOwnerRef:E,financePolicyRef:E,costCenterRefs:s.array(E).min(1),currency:s.string().regex(/^[A-Z]{3}$/),minorUnitLimit:s.string().regex(/^\d+$/),period:s.enum(["monthly","quarterly","annual","transaction"]),approvalThresholdRef:E}).strict(),de=s.object({id:c,entityScopeIds:s.array(c).min(1),workspaceScopeIds:s.array(c),jurisdictions:s.array(s.string().trim().min(2).max(80)).min(1),residencyRegions:s.array(s.string().trim().min(2).max(80)).min(1),classificationCeiling:s.enum(["public","internal","confidential","restricted"]),nonWaivable:s.boolean(),policyRefs:s.array(E).min(1)}).strict(),ye=s.object({id:c,boundaryId:c,entityScopeIds:s.array(c).min(1),reason:s.string().trim().min(1).max(2000),expiresAt:_,approvalEvidenceRefs:s.array(A).min(1)}).strict(),fe=s.object({id:c,companyEntityId:c,principalRefs:s.array(E).min(1),parentRouteId:c.optional(),triggerKinds:s.array(s.enum(["authority","financial","compliance","goal","operational"])).min(1),responseTimeMinutes:s.number().int().positive()}).strict(),le=s.object({id:c,entityIds:s.array(c).min(2),kind:s.enum(["control","ownership","authority","goal_alignment","capital","compliance"]),description:s.string().trim().min(1).max(4000),status:s.enum(["open","mitigated","resolved","accepted"]),escalationRouteId:c,decisionEvidenceRefs:s.array(A)}).strict(),B=s.object({contractVersion:C,id:c,topology:w,purposeSpecIds:s.array(c).min(1),delegatedAuthorities:s.array(se),crossCompanyGrants:s.array(pe),sharedServiceMandates:s.array(ce),responsibilities:s.array(me),complianceBoundaries:s.array(de),boundaryExceptions:s.array(ye),escalationRoutes:s.array(fe).min(1),conflicts:s.array(le),provenance:h}).strict();var v=M.object({contractVersion:C,id:Ee,governance:B,companyPurposes:M.array(D).min(1)}).strict();function j(t){let e=[],o=new Map(t.delegatedAuthorities.map((n)=>[n.id,n]));for(let n of t.crossCompanyGrants){if(n.grantorEntityId===n.granteeEntityId)e.push(`ENTERPRISE_GRANT_NOT_CROSS_COMPANY:${n.id}`);let a=o.get(n.delegatedAuthorityId),r=n.capabilities.every((u)=>a?.capabilities.includes(u)),i=a?.entityScopeIds.includes(n.granteeEntityId),d=a?.delegateRef.id===n.delegateRef.id;if(n.status==="approved"&&(!a||a.delegatorEntityId!==n.grantorEntityId||!a.delegable||!r||!i||!d))e.push(`ENTERPRISE_UNAUTHORIZED_CROSS_COMPANY_GRANT:${n.id}`)}return e}function k(t){let e=new Map(t.complianceBoundaries.map((o)=>[o.id,o]));return t.boundaryExceptions.flatMap((o)=>{let n=e.get(o.boundaryId);if(!n)return[`ENTERPRISE_DANGLING_BOUNDARY:${o.id}`];return n.nonWaivable?[`ENTERPRISE_NON_WAIVABLE_BOUNDARY:${o.id}`]:[]})}function V(t){let e=new Map(t.map((o)=>[o.id,o.parentId]));for(let o of t){let n=[],a=new Map,r=o.id;while(r){let i=a.get(r);if(i!==void 0)return[...n.slice(i),r];a.set(r,n.length),n.push(r),r=e.get(r)}}return}function z(t){let e=new Map;for(let i of t)e.set(i.fromEntityId,[...e.get(i.fromEntityId)??[],i.toEntityId]);let o=new Set,n=new Set,a=[];function r(i){if(o.has(i))return[...a,i];if(n.has(i))return;o.add(i),a.push(i);for(let d of e.get(i)??[]){let u=r(d);if(u)return u}a.pop(),o.delete(i),n.add(i);return}for(let i of e.keys()){let d=r(i);if(d)return d}return}function U(t){let e=t.governance,o=[];for(let[a,r]of ue(t))for(let i of Ie(r))o.push(`ENTERPRISE_DUPLICATE_${a}:${i}`);let n=new Map(e.topology.entities.map((a)=>[a.id,a.kind]));for(let a of e.topology.relationships){let r=ge(a.kind);if(r&&n.get(a.toEntityId)!==r)o.push(`ENTERPRISE_RELATION_TARGET_KIND:${a.id}`)}for(let a of e.sharedServiceMandates)if(a.consumerEntityIds.includes(a.providerEntityId))o.push(`ENTERPRISE_SHARED_SERVICE_SELF_CONSUMER:${a.id}`);for(let a of e.boundaryExceptions){let r=e.complianceBoundaries.find((i)=>i.id===a.boundaryId);if(r&&a.entityScopeIds.some((i)=>!r.entityScopeIds.includes(i)))o.push(`ENTERPRISE_EXCEPTION_OUTSIDE_BOUNDARY:${a.id}`)}return o}function ue(t){let e=t.governance;return[["ENTITY_ID",e.topology.entities.map((o)=>o.id)],["RELATION_ID",e.topology.relationships.map((o)=>o.id)],["PURPOSE_ID",t.companyPurposes.map((o)=>o.id)],["AUTHORITY_ID",e.delegatedAuthorities.map((o)=>o.id)],["GRANT_ID",e.crossCompanyGrants.map((o)=>o.id)],["ROUTE_ID",e.escalationRoutes.map((o)=>o.id)],["RESPONSIBILITY_ID",e.responsibilities.map((o)=>o.id)],["BOUNDARY_ID",e.complianceBoundaries.map((o)=>o.id)]]}function Ie(t){let e=new Set,o=new Set;for(let n of t){if(e.has(n))o.add(n);e.add(n)}return[...o]}function ge(t){if(t==="brand_owner")return"brand";if(t==="product_owner")return"product";if(t==="workspace_owner")return"workspace";return}function Y(t,e,o,n){let a=t.governance;for(let r of a.delegatedAuthorities){g(e,r.delegatorEntityId,"AUTHORITY",n);for(let i of r.entityScopeIds)g(e,i,"AUTHORITY_SCOPE",n)}for(let r of a.crossCompanyGrants)g(e,r.grantorEntityId,"GRANT",n),g(e,r.granteeEntityId,"GRANT",n);for(let r of a.sharedServiceMandates){g(e,r.providerEntityId,"MANDATE",n);for(let i of r.consumerEntityIds)g(e,i,"MANDATE",n)}for(let r of a.responsibilities)g(e,r.companyEntityId,"RESPONSIBILITY",n);for(let r of a.escalationRoutes)if(g(e,r.companyEntityId,"ESCALATION",n),r.parentRouteId)g(o,r.parentRouteId,"ESCALATION_PARENT",n);for(let r of a.conflicts){for(let i of r.entityIds)g(e,i,"CONFLICT",n);g(o,r.escalationRouteId,"CONFLICT_ROUTE",n)}}function g(t,e,o,n){if(!t.has(e))n.push(`ENTERPRISE_DANGLING_${o}:${e}`)}function F(t){let e=[],o=t.governance,n=o.topology,a=new Set(n.entities.map((m)=>m.id)),r=new Set(o.escalationRoutes.map((m)=>m.id)),i=new Set(t.companyPurposes.map((m)=>m.id)),d=new Set(o.responsibilities.map((m)=>m.id)),u=new Map(o.responsibilities.map((m)=>[m.id,m.kind]));l(a,n.rootEntityId,"ENTERPRISE_DANGLING_ROOT",e);for(let m of n.relationships)l(a,m.fromEntityId,"ENTERPRISE_DANGLING_RELATION",e),l(a,m.toEntityId,"ENTERPRISE_DANGLING_RELATION",e);for(let m of n.consolidationBoundaries){l(a,m.reportingEntityId,"ENTERPRISE_DANGLING_CONSOLIDATION",e);for(let p of m.memberEntityIds)l(a,p,"ENTERPRISE_DANGLING_CONSOLIDATION",e)}for(let m of o.purposeSpecIds)l(i,m,"ENTERPRISE_DANGLING_PURPOSE",e);return Y(t,a,r,e),Re(t,a,r,d,u,e),e}function Re(t,e,o,n,a,r){for(let i of t.companyPurposes){l(e,i.companyEntityId,"ENTERPRISE_DANGLING_PURPOSE_ENTITY",r);let d=new Set(i.goals.map((p)=>p.id)),u=new Set(i.outcomeMetrics.map((p)=>p.id)),m=new Set(i.goalCascades.map((p)=>p.id));for(let p of i.goalCascades)if(l(d,p.goalId,"ENTERPRISE_DANGLING_CASCADE_GOAL",r),l(e,p.companyEntityId,"ENTERPRISE_DANGLING_CASCADE_ENTITY",r),l(o,p.escalationRouteId,"ENTERPRISE_DANGLING_CASCADE_ROUTE",r),p.parentCascadeId)l(m,p.parentCascadeId,"ENTERPRISE_DANGLING_CASCADE_PARENT",r);for(let p of i.goals)if(p.parentGoalId)l(d,p.parentGoalId,"ENTERPRISE_DANGLING_PARENT_GOAL",r);for(let p of i.harmGuardrails)if(p.goalIds.forEach((P)=>l(d,P,"ENTERPRISE_DANGLING_GUARDRAIL_GOAL",r)),p.metricId)l(u,p.metricId,"ENTERPRISE_DANGLING_GUARDRAIL_METRIC",r);for(let p of i.goalConflicts)p.goalIds.forEach((P)=>l(d,P,"ENTERPRISE_DANGLING_GOAL_CONFLICT",r)),l(o,p.escalationRouteId,"ENTERPRISE_DANGLING_GOAL_CONFLICT_ROUTE",r);for(let p of[...i.capitalResponsibilityRefIds,...i.budgetResponsibilityRefIds])l(n,p,"ENTERPRISE_DANGLING_PURPOSE_RESPONSIBILITY",r);for(let p of i.capitalResponsibilityRefIds)if(a.get(p)==="budget")r.push(`ENTERPRISE_RESPONSIBILITY_KIND_MISMATCH:${p}`);for(let p of i.budgetResponsibilityRefIds)if(a.get(p)==="capital")r.push(`ENTERPRISE_RESPONSIBILITY_KIND_MISMATCH:${p}`)}}function l(t,e,o,n){if(!t.has(e))n.push(`${o}:${e}`)}var Se=/(password|secret|private.?key|access.?token|api.?key)/i,Ce=/(?:sk-|ghp_|Bearer\s+)[A-Za-z0-9._-]{8,}/;function T(t,e="root",o=[]){if(typeof t==="string"){if(Ce.test(t))o.push(e);return o}if(Array.isArray(t))return t.forEach((n,a)=>T(n,`${e}.${a}`,o)),o;if(!t||typeof t!=="object")return o;for(let[n,a]of Object.entries(t)){let r=`${e}.${n}`,i=/(ref|refId|refIds)$/i.test(n);if(Se.test(n)&&!i&&a!==!1&&a!=null)o.push(r);T(a,r,o)}return o}function b(t){let e=t.governance,o=e.topology.relationships.filter((i)=>i.kind==="owns"||i.kind==="controls"),n=z(o),a=V(e.escalationRoutes.map((i)=>({id:i.id,parentId:i.parentRouteId}))),r=[...F(t),...j(e),...k(e),...U(t),...he(t)];if(n)r.push(`ENTERPRISE_TOPOLOGY_CYCLE:${n.join(">")}`);if(a)r.push(`ENTERPRISE_ESCALATION_CYCLE:${a.join(">")}`);for(let i of t.companyPurposes){let d=V(i.goals.map((m)=>({id:m.id,parentId:m.parentGoalId}))),u=V(i.goalCascades.map((m)=>({id:m.id,parentId:m.parentCascadeId})));if(d)r.push(`ENTERPRISE_GOAL_CYCLE:${d.join(">")}`);if(u)r.push(`ENTERPRISE_GOAL_CASCADE_CYCLE:${u.join(">")}`)}for(let i of T(t))r.push(`ENTERPRISE_SECRET_MATERIAL:${i}`);return[...new Set(r)].sort()}function he(t){let e=new Map;for(let n of t.governance.topology.relationships){if(n.kind!=="owns"&&n.kind!=="controls")continue;e.set(n.toEntityId,[...e.get(n.toEntityId)??[],n])}let o=[];for(let[n,a]of e){if(a.reduce((d,u)=>d+(u.ownershipShare??0),0)>1.000001)o.push(`ENTERPRISE_OWNERSHIP_EXCEEDS_ONE:${n}`);let i=a.filter((d)=>d.controllingInterest);if(i.length>1&&i.some((d)=>!d.jointVenture))o.push(`ENTERPRISE_INCOMPATIBLE_CONTROLLING_INTEREST:${n}`)}return o}function ct(t){let e=v.safeParse(t);if(!e.success)return{ok:!1,issues:e.error.issues.map(_e)};let o=b(e.data);return{ok:o.length===0,issues:o}}function mt(t){let e=v.parse(t),o=b(e);if(o.length>0)throw new H(o);return e}class H extends Error{issues;constructor(t){super(`CompanyOS enterprise validation failed: ${t.join("; ")}`);this.name="CompanyEnterpriseValidationError",this.issues=t}}function _e(t){return`ENTERPRISE_SCHEMA:${t.path.length>0?t.path.join("."):"root"}:${t.message}`}export{H as CompanyEnterpriseValidationError,mt as assertCompanyEnterprisePortfolioV1,ct as validateCompanyEnterprisePortfolioV1};