@lssm/lib.companyos-spec 3.0.2

package/dist/node/validation/index.js

@@ -0,0 +1,28 @@
+import{z as Te}from"zod";import{z as fe}from"zod";var L=fe.record(fe.string(),fe.unknown()),q=fe.object({id:fe.string().min(1),connectorCapability:fe.string().min(1),providerKey:fe.string().min(1).optional(),externalId:fe.string().min(1).optional(),url:fe.string().url().optional(),observedAt:fe.string().min(1),metadata:L.default({})}),Qn=fe.object({default:fe.string().min(1),translations:fe.record(fe.string(),fe.string()).default({})}),E=fe.object({id:fe.string().min(1),type:fe.string().min(1),label:fe.string().min(1).optional()});var Yp={id:"companyos-spec.action-origin",title:"CompanyOS Action Origin",summary:"Discriminated origin schema for actions entering the CompanyOS operating graph.",body:`# CompanyOS Action Origin
+
+Captures the channel and actor context from which an action entered the CompanyOS operating graph.
+
+## Origin kinds
+
+- \`messaging\` — Action arrived via a messaging channel (e.g. Slack, email thread).
+- \`voice\` — Action arrived via a voice conversation routed through a connector capability.
+- \`agent\` — Action was autonomously proposed or executed by an AI agent principal.
+- \`operator\` — Action was directly initiated by a human operator.
+- \`system\` — Action was emitted by an internal system or scheduled process.
+
+> Note: \`meeting\` is a transcript medium, not an actor class. Meeting-sourced actions
+> are routed via the \`voice\` origin kind through the appropriate connector capability.
+
+## Temporal invariant
+
+\`capturedAt\` must be >= \`sourceRef.observedAt\`. The capture timestamp records when
+the operating graph ingested the action; the observation timestamp records when the
+source connector observed the raw event.
+
+## transcriptRef
+
+An opaque reference to an upstream transcript artifact. Only the \`id\` and \`source\`
+kind are embedded here — no transcript-turn shape is inlined. Consumers that need
+full transcript content must resolve via the appropriate connector surface.
+`,kind:"reference",visibility:"public",route:"/docs/companyos-spec/action-origin",tags:["companyos","origin","voice","messaging","agent"],domain:"companyos-spec",stability:"experimental"},Oa=Te.enum(["messaging","voice","agent","operator","system"]),xa=Te.object({id:Te.string().min(1),source:Te.enum(["voice","meeting","fixture"])}),Hp=Te.object({kind:Oa,actorPrincipalId:Te.string().min(1),sessionId:Te.string().min(1).optional(),transcriptRef:xa.optional(),sourceRef:q,capturedAt:Te.string().min(1),metadata:L.default({})}).refine((e)=>new Date(e.capturedAt)>=new Date(e.sourceRef.observedAt),{message:"capturedAt must be >= sourceRef.observedAt: the operating graph cannot capture an action before the connector observed it",path:["capturedAt"]});import{z as ge}from"zod";import{z as an}from"zod";var be=an.enum(["observe_only","draft_only","recommend","execute_with_approval","execute_within_limits","fully_autonomous_bounded","reserved_human_only"]),Tt=an.enum(["human","agent","service","external_party"]),Vt=an.enum(["communication","work_tracking","code_repository","knowledge_source","document_store","crm","analytics","identity","calendar","meeting_recorder","support_desk","messaging_channel"]),Zp=an.enum(["proposed","accepted","in_progress","blocked","done","cancelled"]),jt=an.enum(["approval_required","customer_commitment","risky_reply","blocked_work","contract_proposal","operating_review_item"]);var ba=ge.object({required:ge.boolean().default(!0),previewArtifactKind:ge.string().min(1),approvalRequiredForExecute:ge.boolean().default(!0)}),zt=ge.object({id:ge.string().min(1),name:ge.string().min(1),mode:ge.enum(["read","draft","dry_run","execute"]),agentRoleId:ge.string().min(1),authorityCapability:ge.string().min(1),autonomyCeiling:be,accountableOwnerPrincipalId:ge.string().min(1),dryRunPolicy:ba,deniedActionExplanation:ge.string().min(1)}),Mt=ge.object({id:ge.string().min(1),operationId:ge.string().min(1),displayName:ge.string().min(1),inputContractRef:ge.string().min(1),outputContractRef:ge.string().min(1),requiresAuthorityCheck:ge.boolean().default(!0)});import{z as j}from"zod";var qt=j.object({id:j.string().min(1),toolRef:E,connectorCapabilityId:j.string().min(1).optional(),maxAutonomyLevel:be,requiresDryRun:j.boolean().default(!0)}),Bt=j.object({id:j.string().min(1),title:j.string().min(1),principalId:j.string().min(1),accountableOwnerPrincipalId:j.string().min(1),authorityScope:j.string().min(1),maxAutonomyLevel:be,toolAssignmentIds:j.array(j.string().min(1)).default([]),escalationPrincipalIds:j.array(j.string().min(1)).min(1)}),Ft=j.object({id:j.string().min(1),name:j.string().min(1),managerRoleId:j.string().min(1),roleIds:j.array(j.string().min(1)).min(1),purpose:j.string().min(1)}),$t=j.object({id:j.string().min(1),fromRoleId:j.string().min(1),toRoleId:j.string().min(1),allowedWorkKinds:j.array(j.string().min(1)).min(1),maxAutonomyLevel:be,requiresHandoffSummary:j.boolean().default(!0),escalationPrincipalId:j.string().min(1)}),Ut=j.object({id:j.string().min(1),delegationRuleId:j.string().min(1),requiredContextRefTypes:j.array(j.string().min(1)).default([]),approvalRequiredAboveAutonomy:be}),Kt=j.object({id:j.string().min(1),teamId:j.string().min(1),resolverPrincipalId:j.string().min(1),escalationPrincipalIds:j.array(j.string().min(1)).min(1),summary:j.string().min(1)});import{z as O}from"zod";import{z as h}from"zod";import{z as M}from"zod";var In=M.object({id:M.string().min(1),substrate:M.enum(["knowledge","data_transmission","authos","rbac"]),ref:M.string().min(1),evidenceRefIds:M.array(M.string().min(1)).default([]),metadata:L.default({})}),_a=In.extend({substrate:M.literal("knowledge"),spaceKey:M.string().min(1).optional(),fragmentId:M.string().min(1),sourceRef:q.optional(),queryEvidenceRef:M.string().min(1).optional()}),rn=In.extend({substrate:M.literal("data_transmission"),protocolVersion:M.literal("data-transmission.v0"),roomId:M.string().min(1),cursor:M.string().min(1).optional(),idempotencyKey:M.string().min(1).optional()}),Cn=In.extend({substrate:M.literal("authos"),actorId:M.string().min(1),sessionRef:M.string().min(1).optional(),tenantId:M.string().min(1).optional()}),hn=In.extend({substrate:M.literal("rbac"),decisionId:M.string().min(1),verdict:M.enum(["allow","deny","redacted","redact","requires_review"]),permissionIds:M.array(M.string().min(1)).default([]),redactedFieldRefs:M.array(M.string().min(1)).default([])}),Yt=M.discriminatedUnion("substrate",[_a,rn,Cn,hn]),cd=M.object({actorRef:Cn,rbacDecisionRef:hn,resourceRef:M.string().min(1),sourceAclRefIds:M.array(M.string().min(1)).default([]),policyRefIds:M.array(M.string().min(1)).default([]),evidenceRefIds:M.array(M.string().min(1)).default([])}),pd=M.object({roomRef:rn,changeRef:M.string().min(1),sequence:M.number().int().nonnegative(),idempotencyKey:M.string().min(1),replayRef:M.string().min(1)});var Ea=h.object({id:h.string().min(1),kind:h.enum(["knowledge","communication","issue_tracker","code_host","documentation","customer_system","incident_system","manual_record"]),label:h.string().min(1),connectorCapability:h.string().min(1),freshnessSla:h.enum(["manual","hourly","daily","near_realtime"]),metadata:L.default({})}),Zn=h.object({id:h.string().min(1),sourceSystemId:h.string().min(1),externalId:h.string().min(1),recordType:h.string().min(1),sourceHash:h.string().min(1),observedAt:h.string().min(1),provenance:h.array(q).min(1),substrateRefs:h.array(Yt).default([]),evidenceRefIds:h.array(h.string().min(1)).min(1),metadata:L.default({})}),Xn=h.enum(["person","team","customer","project","repository","ticket","meeting","document","incident","decision","commitment","procedure","runbook","objective","work_item","knowledge_fragment"]),sn=h.object({status:h.enum(["fresh","stale","unknown"]),observedAt:h.string().min(1),expiresAt:h.string().min(1).optional(),evidenceRefIds:h.array(h.string().min(1)).min(1)}),Aa=h.object({reason:h.enum(["deleted_source","superseded","privacy_request","merged"]),tombstonedAt:h.string().min(1),supersededByNodeId:h.string().min(1).optional(),evidenceRefIds:h.array(h.string().min(1)).min(1)}),Jn=h.object({id:h.string().min(1),kind:Xn,label:h.string().min(1),sourceRecordRefIds:h.array(h.string().min(1)).min(1),evidenceRefIds:h.array(h.string().min(1)).min(1),sourceAclRefIds:h.array(h.string().min(1)).default([]),policyRefIds:h.array(h.string().min(1)).default([]),confidence:h.number().min(0).max(1),reviewState:h.enum(["unreviewed","review_required","reviewed","rejected"]),freshness:sn,tombstone:Aa.optional(),conflictRefIds:h.array(h.string().min(1)).default([]),metadata:L.default({})}),et=h.object({id:h.string().min(1),kind:h.enum(["owns","member_of","relates_to","blocks","depends_on","documents","decides","commits_to","implements","escalates_to","runbook_for","evidence_for"]),fromNodeId:h.string().min(1),toNodeId:h.string().min(1),sourceRecordRefIds:h.array(h.string().min(1)).min(1),evidenceRefIds:h.array(h.string().min(1)).min(1),confidence:h.number().min(0).max(1),reviewState:h.enum(["unreviewed","review_required","reviewed","rejected"]),metadata:L.default({})}),ka=h.object({id:h.string().min(1),subjectNodeId:h.string().min(1),conflictingNodeIds:h.array(h.string().min(1)).default([]),conflictingRecordRefIds:h.array(h.string().min(1)).min(1),status:h.enum(["review_required","resolved","accepted_conflict"]),summary:h.string().min(1),evidenceRefIds:h.array(h.string().min(1)).min(1)}),Ht=h.object({id:h.string().min(1),generatedAt:h.string().min(1),snapshotHash:h.string().min(1),sourceSystems:h.array(Ea).min(1),sourceRecords:h.array(Zn).min(1),nodes:h.array(Jn).min(1),edges:h.array(et).default([]),conflicts:h.array(ka).default([]),replayCursorRef:h.string().min(1).optional(),evidenceRefIds:h.array(h.string().min(1)).min(1),metadata:L.default({})});var wa=O.enum(["skill_file","runbook_pack","agent_prompt","conformance_pack"]),Na=O.enum(["ready","blocked","review_required","stale","unauthorized","identity_unresolved","acl_redacted","conflicted"]),Pa=O.enum(["pass","fail","not_run","blocked"]),La=O.enum(["proposed","accepted","rejected","superseded","applied_to_contract"]),Rn=O.object({id:O.string().min(1),artifactKind:wa,version:O.string().min(1),artifactRef:E,runbookProcedureId:O.string().min(1),sourceRecordRefIds:O.array(O.string().min(1)).min(1),identityDecisionIds:O.array(O.string().min(1)).default([]),accessDecisionIds:O.array(O.string().min(1)).min(1),compiledFromBrainEntryIds:O.array(O.string().min(1)).default([]),compilerPrincipalId:O.string().min(1),compiledAt:O.string().min(1),freshness:sn,evidenceRefIds:O.array(O.string().min(1)).min(1),sourceRefs:O.array(q).default([]),noProviderBinding:O.literal(!0).default(!0),metadata:L.default({})}).strict(),Wt=O.object({id:O.string().min(1),compiledArtifactId:O.string().min(1),runbookReadinessId:O.string().min(1),status:Na,evaluatedAt:O.string().min(1),sourceRecordRefIds:O.array(O.string().min(1)).min(1),identityDecisionIds:O.array(O.string().min(1)).default([]),accessDecisionIds:O.array(O.string().min(1)).min(1),blockedReasons:O.array(O.string().min(1)).default([]),evidenceRefIds:O.array(O.string().min(1)).min(1),metadata:L.default({})}).superRefine((e,n)=>{if(e.status!=="ready"&&e.blockedReasons.length===0)n.addIssue({code:O.ZodIssueCode.custom,message:"Non-ready agentic readiness checks require blocked reasons.",path:["blockedReasons"]});if(e.status==="ready"&&e.blockedReasons.length>0)n.addIssue({code:O.ZodIssueCode.custom,message:"Ready agentic readiness checks must not carry blocked reasons.",path:["blockedReasons"]})}),Qt=O.object({id:O.string().min(1),compiledArtifactId:O.string().min(1),readinessCheckId:O.string().min(1),runbookConformanceCaseId:O.string().min(1),status:Pa,assertion:O.string().min(1),checkedAt:O.string().min(1),failureReason:O.string().min(1).optional(),replayRefIds:O.array(O.string().min(1)).default([]),executionReceiptIds:O.array(O.string().min(1)).default([]),evidenceRefIds:O.array(O.string().min(1)).min(1),noRuntimeExecution:O.literal(!0).default(!0),metadata:L.default({})}).superRefine((e,n)=>{if(["fail","blocked"].includes(e.status)&&!e.failureReason)n.addIssue({code:O.ZodIssueCode.custom,message:"Failing or blocked agentic conformance evidence requires a failure reason.",path:["failureReason"]})}),Zt=O.object({id:O.string().min(1),compiledArtifactId:O.string().min(1),conformanceEvidenceId:O.string().min(1),correctionKind:O.enum(["source_correction","identity_correction","acl_correction","runbook_correction","outcome_correction"]),status:La,summary:O.string().min(1),outcomeReceiptId:O.string().min(1),observedAt:O.string().min(1),sourceEvidenceRefIds:O.array(O.string().min(1)).min(1),evidenceRefIds:O.array(O.string().min(1)).min(1),noProviderMutation:O.literal(!0).default(!0),metadata:L.default({})}).strict();import{z as Ie}from"zod";var Ga=Ie.object({id:Ie.string().min(1),kind:Tt,displayName:Ie.string().min(1),accountableOwnerPrincipalId:Ie.string().min(1).optional()}),Da=Ie.object({id:Ie.string().min(1),principalId:Ie.string().min(1),capability:Ie.string().min(1),scope:Ie.string().min(1),requiresApprovalAboveRisk:Ie.enum(["low","medium","high"]).default("medium")}),Xt=Ie.object({id:Ie.string().min(1),accountableOwnerPrincipalId:Ie.string().min(1),principals:Ie.array(Ga).min(1),grants:Ie.array(Da).default([]),escalationPrincipalIds:Ie.array(Ie.string().min(1)).default([]),reservedPowerPrincipalIds:Ie.array(Ie.string().min(1)).default([])});import{z as ce}from"zod";var Jt=ce.object({id:ce.string().min(1),defaultLevel:be.default("draft_only"),maxCustomerFacingLevel:be.default("execute_with_approval"),reservedHumanOnlyOperations:ce.array(ce.string().min(1)).default([]),approvalRequiredOperations:ce.array(ce.string().min(1)).default([]),emergencyStopPrincipalIds:ce.array(ce.string().min(1)).min(1)}),vn=ce.object({id:ce.string().min(1),operation:ce.string().min(1),proposedLevel:be,approvedLevel:be,customerFacing:ce.boolean().default(!1),requiredApprovalIds:ce.array(ce.string().min(1)).default([]),accountableOwnerPrincipalId:ce.string().min(1),sourceRefs:ce.array(q).default([]),reasoning:ce.string().min(1)}),ei=ce.object({id:ce.string().min(1),agentPrincipalId:ce.string().min(1),operation:ce.string().min(1),targetType:ce.string().min(1),targetRefId:ce.string().min(1),draftOnly:ce.boolean().default(!0),autonomyDecisionId:ce.string().min(1)});import{z as _}from"zod";var On=_.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/),Fe=_.string().regex(/^sha256:[a-f0-9]{64}$/),Pe=_.object({recordRef:_.string().min(1),version:On,schemaRef:_.string().min(1),contentFingerprint:Fe}).strict().readonly(),Sn=_.object({id:_.string().min(1),version:On,contentFingerprint:Fe,schemaFingerprint:Fe}).strict().readonly(),ni=_.object({namespace:_.string().regex(/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/),schemaRef:_.string().min(1),recordRef:_.string().min(1),version:On,contentFingerprint:Fe}).strict().readonly(),Ta=_.object({targetSchemaRef:_.string().min(1),independentConsumerRefs:_.array(E.strict()).min(2).refine((e)=>new Set(e.map((n)=>`${n.type}:${n.id}`)).size>=2,"two distinct vertical consumers are required"),migrationDecisionRef:E.strict()}).strict().readonly(),Va=_.object({extensionRef:ni,namespaceOwnerRef:E.strict(),schemaFingerprint:Fe,compatibilityIntent:_.enum(["additive","backward_compatible","breaking"]),evidenceRequirementRefs:_.array(E.strict()).min(1).readonly(),allowedRefTypes:_.array(_.string().min(1)).min(1).readonly(),sourcePolicyRef:E.strict(),legalReviewRef:E.strict(),lifecycleStatus:_.enum(["active","deprecated","promoted"]),deprecationDecisionRef:E.strict().optional(),replacementNamespace:_.string().min(1).optional(),promotion:Ta.optional(),collisionPolicy:_.literal("reject_incompatible_namespace_or_schema_reuse")}).strict().superRefine((e,n)=>{if(e.lifecycleStatus==="deprecated"&&!e.deprecationDecisionRef)n.addIssue({code:"custom",path:["deprecationDecisionRef"],message:"deprecated extensions require a decision ref"});if(e.lifecycleStatus==="promoted"&&!e.promotion)n.addIssue({code:"custom",path:["promotion"],message:"promoted extensions require approved migration evidence"})}),Ad=_.array(Va).readonly().superRefine((e,n)=>{let t=new Set,i=new Map;for(let[o,a]of e.entries()){let{namespace:r,schemaRef:d}=a.extensionRef;if(t.has(r))n.addIssue({code:"custom",path:[o,"extensionRef","namespace"],message:`namespace collision: ${r}`});t.add(r);let l=i.get(d);if(l&&l!==a.schemaFingerprint)n.addIssue({code:"custom",path:[o,"schemaFingerprint"],message:`incompatible schema reuse: ${d}`});i.set(d,a.schemaFingerprint)}}),ja=_.object({identityContextRefs:_.array(Pe).readonly().default([]),knowledgeAssertionRefs:_.array(Pe).readonly().default([]),procedureRefs:_.array(Pe).readonly().default([]),policyRefs:_.array(Pe).readonly().default([]),hypothesisRefs:_.array(Pe).readonly().default([]),decisionRefs:_.array(Pe).readonly().default([]),evidenceRefs:_.array(Pe).readonly().default([])}).strict().readonly(),nt=_.object({id:_.string().min(1),version:On,recordedAt:_.iso.datetime({offset:!0}),effectiveFrom:_.iso.datetime({offset:!0}).optional(),parentEditionRef:Sn.optional(),baseEditionRef:Sn.optional(),contentFingerprint:Fe,schemaFingerprint:Fe,sections:ja,graphSnapshotRef:Pe.optional(),evidenceReceiptRefs:_.array(_.string().min(1)).readonly().default([]),replayRef:_.string().min(1).optional(),reviewDecisionRef:_.string().min(1).optional(),extensionRefs:_.array(ni).readonly().default([])}).strict().readonly(),tt=_.object({id:_.string().min(1),title:_.string().min(1),kind:_.enum(["knowledge","procedure","policy","skill_candidate"]),summary:_.string().min(1),ownerPrincipalId:_.string().min(1),trustLevel:_.enum(["low","medium","high"]),freshness:_.enum(["fresh","stale","unknown"]),sourceRefs:_.array(q).min(1)}),za=_.object({id:_.string().min(1),summary:_.string().min(1),severity:_.enum(["low","medium","high"]),relatedSourceRefs:_.array(q).default([]),ownerPrincipalId:_.string().min(1)}),ti=_.object({id:_.string().min(1),entries:_.array(tt).default([]),gaps:_.array(za).default([])});import{z}from"zod";var ii=z.object({id:z.string().min(1),name:z.string().min(1),cadence:z.enum(["daily","weekly","monthly","quarterly"]),ownerPrincipalId:z.string().min(1),participantPrincipalIds:z.array(z.string().min(1)).default([]),requiredInputKinds:z.array(z.enum(["feedback","commitments","work","objectives","memory"])).min(1),outputKinds:z.array(z.enum(["decision","work_item","inbox_item","review_summary"])).min(1),escalationPrincipalIds:z.array(z.string().min(1)).default([])}),oi=z.object({id:z.string().min(1),cadenceId:z.string().min(1),capturedAt:z.string().min(1),feedbackItemIds:z.array(z.string().min(1)).default([]),commitmentIds:z.array(z.string().min(1)).default([]),workItemIds:z.array(z.string().min(1)).default([]),objectiveIds:z.array(z.string().min(1)).default([]),memorySnapshotIds:z.array(z.string().min(1)).default([])}),ai=z.object({id:z.string().min(1),cadenceId:z.string().min(1),generatedAt:z.string().min(1),decisionIds:z.array(z.string().min(1)).default([]),workItemIds:z.array(z.string().min(1)).default([]),actionProposalIds:z.array(z.string().min(1)).default([]),inboxItemIds:z.array(z.string().min(1)).default([]),health:z.enum(["healthy","watch","at_risk"]),summary:z.string().min(1)});import{z as le}from"zod";var Ma=le.object({key:le.string().min(1),legalName:le.string().min(1),displayName:Qn,description:Qn.optional(),localeDefaults:le.array(le.string().min(2)).default(["en"])}),qa=le.object({id:le.string().min(1),name:le.string().min(1),domain:le.string().min(1),ownerPrincipalId:le.string().min(1)}),ri=le.object({key:le.string().min(1),version:le.string().min(1),identity:Ma,operatingModel:le.object({description:le.string().min(1),primaryDomains:le.array(le.string().min(1)).min(1)}),units:le.array(qa).default([]),authorityRef:E,autonomyPolicyRef:E,brainRef:E,workGraphRef:E,connectorRefs:le.array(E).default([]),operatorSurfaceRefs:le.array(E).default([])});import{z as We}from"zod";import{z as ne}from"zod";var it="1.0.0",xn="company-intelligence-sha256:v1",bn="canonical-json:v1",Vd=ne.enum(["truth","policy","proposal","approval","execution","outcome"]),jd=ne.enum(["source","source_version","asset","part","fragment","evidence","claim","policy","entity","relation","conflict","gap","graph","edition","query","answer","verification","feedback","experiment","evaluation","promotion","rollback","replay"]),R=ne.string().regex(/^sha256:[a-f0-9]{64}$/),Ba=ne.object({version:ne.literal(xn),canonicalization:ne.literal(bn),value:R}).strict(),ot=ne.object({from:ne.iso.datetime({offset:!0}),to:ne.iso.datetime({offset:!0}).optional()}).strict(),Fa=ne.object({reason:ne.enum(["source_deleted","acl_revoked","superseded","retention_expired","privacy_request"]),tombstonedAt:ne.iso.datetime({offset:!0})}).strict(),Ve=ne.object({page:ne.number().int().positive().optional(),section:ne.string().min(1).optional(),lineStart:ne.number().int().positive().optional(),lineEnd:ne.number().int().positive().optional(),cell:ne.string().min(1).optional(),messageId:ne.string().min(1).optional(),timeStartMs:ne.number().int().nonnegative().optional(),timeEndMs:ne.number().int().nonnegative().optional()}).strict().refine((e)=>Object.values(e).some((n)=>n!==void 0),{message:"At least one stable evidence locator is required."}),si=ne.array(ne.string().min(1)).refine((e)=>new Set(e).size===e.length,{message:"Reference ids must be unique."}),ie=ne.object({contractVersion:ne.literal(it),id:ne.string().min(1),tenantId:ne.string().min(1),ownerRef:E.strict(),recordedAt:ne.iso.datetime({offset:!0}),validTime:ot,recordRefIds:si.default([]),evidenceRefIds:si.default([]),supersedesRefId:ne.string().min(1).optional(),tombstone:Fa.optional(),fingerprint:Ba}).strict();import{z as P}from"zod";var at=P.enum(["answered","abstained","refused","conflicted","degraded"]),rt=ie.extend({kind:P.literal("query"),authorityClass:P.literal("proposal"),payload:P.object({actorRef:P.string().min(1),questionDigest:P.string().regex(/^sha256:[a-f0-9]{64}$/),authorizationDecisionRef:P.string().min(1),retrievalConfigRef:P.string().min(1),requestedAt:P.iso.datetime({offset:!0}),maxEvidenceRecords:P.number().int().positive(),filters:P.record(P.string(),P.string()).default({})}).strict()}).strict(),st=ie.extend({kind:P.literal("answer"),authorityClass:P.literal("truth"),payload:P.object({queryRefId:P.string().min(1),status:at,text:P.string().min(1).optional(),claimRefIds:P.array(P.string().min(1)).default([]),citationEvidenceRefIds:P.array(P.string().min(1)).default([]),conflictRefIds:P.array(P.string().min(1)).default([]),retrievalRunRef:P.string().min(1),verificationRefId:P.string().min(1).optional(),policyDecisionRef:P.string().min(1).optional(),graphSnapshotRefId:P.string().min(1).optional(),editionRefId:P.string().min(1).optional(),replayRefId:P.string().min(1),reasons:P.array(P.string().min(1)).default([]),usage:P.object({modelRef:P.string().min(1),promptFingerprint:P.string().regex(/^sha256:[a-f0-9]{64}$/),latencyMs:P.number().int().nonnegative(),costMicros:P.number().int().nonnegative()}).strict(),knowledgeAuthorizesAction:P.literal(!1)}).strict()}).strict(),ct=ie.extend({kind:P.literal("verification"),authorityClass:P.literal("truth"),payload:P.object({answerRefId:P.string().min(1),verdict:P.enum(["supported","unsupported","blocked"]),claimSupport:P.array(P.object({claimRefId:P.string().min(1),evidenceRefIds:P.array(P.string().min(1)).min(1),verdict:P.enum(["supported","unsupported"]),confidence:P.number().min(0).max(1)}).strict()).default([]),deterministicRefsValidated:P.boolean(),independentVerifierRef:P.string().min(1),verifiedAt:P.iso.datetime({offset:!0})}).strict()}).strict(),ci=[rt,st,ct];import{z as v}from"zod";var _n=v.enum(["unreviewed","review_required","approved","rejected","superseded"]),$a=ie.extend({kind:v.literal("claim"),authorityClass:v.literal("truth"),payload:v.object({claimType:v.enum(["fact","procedure","decision","hypothesis","commitment","objective","risk","skill_candidate"]),statement:v.string().min(1),confidence:v.number().min(0).max(1),reviewState:_n,freshness:v.enum(["fresh","stale","unknown"])}).strict()}).strict(),Ua=ie.extend({kind:v.literal("policy"),authorityClass:v.literal("policy"),payload:v.object({normativeStatement:v.string().min(1),scopeRefIds:v.array(v.string().min(1)).min(1),approvalRequired:v.boolean(),exceptionRefIds:v.array(v.string().min(1)).default([]),reviewState:_n}).strict()}).strict(),Ka=ie.extend({kind:v.literal("entity"),authorityClass:v.literal("truth"),payload:v.object({entityType:v.string().min(1),label:v.string().min(1),resolutionState:v.enum(["candidate","canonical","rejected","merged"]),stableIdentifierDigests:v.array(R).default([]),confidence:v.number().min(0).max(1),reviewState:_n}).strict()}).strict(),Ya=ie.extend({kind:v.literal("relation"),authorityClass:v.literal("truth"),payload:v.object({fromEntityRefId:v.string().min(1),toEntityRefId:v.string().min(1),predicate:v.string().min(1),confidence:v.number().min(0).max(1),reviewState:_n}).strict()}).strict(),Ha=ie.extend({kind:v.literal("conflict"),authorityClass:v.literal("truth"),payload:v.object({subjectRefId:v.string().min(1),competingRecordRefIds:v.array(v.string().min(1)).min(2),status:v.enum(["review_required","resolved","accepted_conflict"]),summary:v.string().min(1)}).strict()}).strict(),Wa=ie.extend({kind:v.literal("gap"),authorityClass:v.literal("truth"),payload:v.object({question:v.string().min(1),reason:v.enum(["missing_evidence","conflict","stale","ownerless","unauthorized"]),severity:v.enum(["low","medium","high","critical"]),remediationRefId:v.string().min(1).optional(),state:v.enum(["open","in_review","resolved","accepted_unknown"])}).strict()}).strict(),Qa=ie.extend({kind:v.literal("graph"),authorityClass:v.literal("truth"),payload:v.object({nodeRefIds:v.array(v.string().min(1)).min(1),edgeRefIds:v.array(v.string().min(1)).default([]),conflictRefIds:v.array(v.string().min(1)).default([]),snapshotAt:v.iso.datetime({offset:!0}),bounds:v.object({maxDepth:v.number().int().positive(),maxNodes:v.number().int().positive(),maxEdges:v.number().int().positive(),timeoutMs:v.number().int().positive()}).strict()}).strict()}).strict(),Za=ie.extend({kind:v.literal("edition"),authorityClass:v.literal("truth"),payload:v.object({version:v.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/),recordRefIds:v.array(v.string().min(1)).min(1),graphSnapshotRefId:v.string().min(1),reviewDecisionRef:v.string().min(1),parentEditionRefId:v.string().min(1).optional(),schemaFingerprint:R}).strict()}).strict(),pt=[$a,Ua,Ka,Ya,Ha,Wa,Qa,Za];import{z as g}from"zod";import{z as C}from"zod";import{z as Ee}from"zod";var Xa="company-intelligence-governed-learning:v1",ve=Object.freeze({maxTransitions:64,maxMonitoringComparisons:8,maxPacketClosureRecords:128,maxRecordRefs:64,maxEvidenceRefs:64,maxMetrics:16,maxGuardrails:16,maxReasonCodes:16,minSampleObservations:1000,maxSampleObservations:1e4,maxSerializedBytes:65536,defaultDecisionDeadlineMs:1000,maxDecisionDeadlineMs:5000,maxAppendDeadlineMs:5000,maxGateAgeMs:86400000,maxApprovalValidityMs:86400000,maxReviewIntervalMs:2592000000,maxPromotionExpiryMs:7776000000}),Ja=Ee.enum(["signal_captured","consent_redaction_recorded","classified","baseline_objective_recorded","candidate_proposed","risk_policy_decided","offline_evaluated","holdout_evaluated","adversarial_evaluated","shadow_evaluated","approval_recorded","canary_started","comparison_recorded","promotion_decided","rollback_executed","outcome_recorded","review_due","expired","replay_verified"]),pi=Ee.enum(["signal_pending","feedback_accepted","classified","candidate_pending","evaluating","shadow","awaiting_approval","canary","promoted","rejected","rolled_back","outcome_recorded","review_due","expired","replay_exact","replay_drifted","blocked"]),dt=["G01","G02","G03","G04","G05","G06","G07","G08","G09","G10","G11","G12","G13","G14","G15","G16","G17","G18","G19","G20","G21","G22","G23","G24","G25"],di=Ee.enum(dt),er=["CI_LEARNING_BASELINE_REQUIRED","CI_LEARNING_BASELINE_NOT_IMMUTABLE","CI_LEARNING_OBJECTIVE_REQUIRED","CI_LEARNING_CANDIDATE_REQUIRED","CI_LEARNING_CANDIDATE_VERSION_REQUIRED","CI_LEARNING_CANDIDATE_FINGERPRINT_MISMATCH","CI_LEARNING_METRICS_REQUIRED","CI_LEARNING_GUARDRAILS_REQUIRED","CI_LEARNING_SAMPLE_NOT_REPRESENTATIVE","CI_LEARNING_TESTS_FAILED","CI_LEARNING_SAFETY_FAILED","CI_LEARNING_PRIVACY_FAILED","CI_LEARNING_COST_FAILED","CI_LEARNING_OFFLINE_REQUIRED","CI_LEARNING_HOLDOUT_REQUIRED","CI_LEARNING_ADVERSARIAL_REQUIRED","CI_LEARNING_EVALUATOR_NOT_INDEPENDENT","CI_LEARNING_POLICY_DENIED","CI_LEARNING_APPROVAL_REQUIRED","CI_LEARNING_APPROVER_NOT_INDEPENDENT","CI_LEARNING_ROLLBACK_PLAN_REQUIRED","CI_LEARNING_KILL_SWITCH_REQUIRED","CI_LEARNING_SHADOW_REQUIRED","CI_LEARNING_CANARY_REQUIRED","CI_LEARNING_COMPARISON_FAILED"],nr=[...er,"CI_LEARNING_SIGNAL_ACCEPTED","CI_LEARNING_FEEDBACK_POISONED","CI_LEARNING_CONSENT_REQUIRED","CI_LEARNING_REDACTION_REQUIRED","CI_LEARNING_AUTHORITY_REQUIRED","CI_LEARNING_CLASSIFICATION_REQUIRED","CI_LEARNING_SIGNAL_DUPLICATE","CI_LEARNING_SIGNAL_ORIGIN_INVALID","CI_LEARNING_SELF_APPLY_FORBIDDEN","CI_LEARNING_RUNTIME_ARTIFACT_NOT_BOUNDED","CI_LEARNING_VENDOR_EXPORT_DENIED","CI_LEARNING_VENDOR_LEARNING_DENIED","CI_LEARNING_EGRESS_EVIDENCE_REQUIRED","CI_LEARNING_CANARY_GATES_INCOMPLETE","CI_LEARNING_CANARY_REGRESSION","CI_LEARNING_ROLLBACK_REPRODUCTION_FAILED","CI_LEARNING_OUTCOME_REQUIRED","CI_LEARNING_REVIEW_DUE","CI_LEARNING_EXPIRED","CI_LEARNING_REPLAY_EXACT","CI_LEARNING_REPLAY_DRIFT"],mt=Ee.enum(nr),tr=Ee.array(mt).max(ve.maxReasonCodes).refine((e)=>e.every((n,t)=>t===0||e[t-1]<n),"Reason codes must be sorted and unique."),je=Ee.object({version:Ee.literal(Xa),lifecycleId:Ee.string().min(1),sequence:Ee.number().int().min(0).max(63),event:Ja,stateBefore:pi.nullable(),stateAfter:pi,previousTransitionRecordRefId:Ee.string().min(1).optional(),previousStateFingerprint:R.optional(),inputFingerprint:R,stateFingerprint:R,reasonCodes:tr,occurredAt:Ee.iso.datetime({offset:!0})}).strict();import{z as de}from"zod";var En=de.object({receiptRef:de.string().min(1),status:de.literal("allow"),fingerprint:R,decidedAt:de.iso.datetime({offset:!0}),signerRef:de.string().min(1)}),mi=de.object({consentReceiptRef:de.string().min(1),redactionReceiptRef:de.string().min(1),authorityReceiptRef:de.string().min(1),originIntegrityReceiptRef:de.string().min(1)}).strict(),li=de.object({signalFingerprint:R,originRefId:de.string().min(1),consentReceipt:En.extend({purpose:de.literal("governed_learning"),scopeRefId:de.string().min(1),signalFingerprint:R}).strict(),redactionReceipt:En.extend({targetRefId:de.string().min(1)}).strict(),authorityReceipt:En.extend({tenantId:de.string().min(1),objectiveRefId:de.string().min(1),actorRef:de.string().min(1)}).strict(),originIntegrityReceipt:En.extend({originRefId:de.string().min(1),classification:de.literal("verified_first_party"),signalFingerprint:R}).strict(),duplicate:de.literal(!1)}).strict();var An=C.object({artifactRef:C.string().min(1),semanticVersion:C.string().regex(/^\d+\.\d+\.\d+$/),fingerprint:R}).strict(),yi=C.object({id:C.string().min(1),metric:C.string().min(1),direction:C.enum(["increase","decrease"]),threshold:C.number(),ownerRef:C.string().min(1)}).strict(),cn=C.object({receiptRef:C.string().min(1),status:C.enum(["allow","deny","missing","failed","blocked","expired"]),fingerprint:R,decidedAt:C.iso.datetime({offset:!0}),signerRef:C.string().min(1)}).strict(),ui=C.object({suiteVersion:C.string().min(1),status:C.literal("allow"),fingerprint:R,decidedAt:C.iso.datetime({offset:!0}),signerRef:C.string().min(1)}).strict(),fi=C.object({baselineNormalizedCost:C.number().positive(),candidateNormalizedCost:C.number().positive(),ratio:C.number().positive().max(1.2),tenantBudgetAllowed:C.literal(!0),fingerprint:R}).strict().superRefine((e,n)=>{let t=e.candidateNormalizedCost/e.baselineNormalizedCost;if(Math.abs(t-e.ratio)>Number.EPSILON)n.addIssue({code:"custom",path:["ratio"],message:"Cost ratio must match candidate divided by baseline."})}),gi=C.object({expectedBaselineFingerprint:R,observedRestoredFingerprint:R,status:C.literal("allow"),fingerprint:R}).strict().superRefine((e,n)=>{if(e.expectedBaselineFingerprint!==e.observedRestoredFingerprint)n.addIssue({code:"custom",path:["observedRestoredFingerprint"],message:"Rollback test must reproduce the exact baseline."})}),lt=C.object({principalRef:C.string().min(1),implementationFingerprint:R,modelFingerprint:R,signerRef:C.string().min(1)}).strict(),Ii=C.object({datasetVersion:C.string().min(1),seed:C.number().int(),selectionMethod:C.string().min(1),observationCount:C.number().int().min(1000).max(1e4),strataCounts:C.record(C.string(),C.number().int().nonnegative()),languageCounts:C.record(C.string(),C.number().int().nonnegative()),fingerprint:R}).strict(),yt=C.object({metricRef:C.string().min(1),baseline:C.number(),candidate:C.number(),lowerConfidenceBound:C.number().optional(),passed:C.boolean()}).strict(),ut=C.object({guardrailRef:C.string().min(1),observed:C.number(),threshold:C.number(),operator:C.enum(["eq","lte","gte"]),passed:C.boolean(),hard:C.literal(!0)}).strict(),Ci=C.object({headFingerprint:R,gates:C.array(C.object({id:di,status:C.enum(["passed","missing","failed","blocked","expired"]),reasonCode:mt,receiptFingerprint:R.optional()}).strict()).max(25)}).strict(),hi=C.discriminatedUnion("type",[C.object({type:C.literal("runtime_artifact"),artifactKind:C.enum(["prompt","provider_route","retrieval_configuration","ranking_rule","extraction_rule","entity_resolution_rule","memory_rule","compiled_skill","runbook_artifact","runtime_policy"]),artifact:An,activation:C.literal("governed_runtime_activation"),selfApply:C.literal(!1)}).strict(),C.object({type:C.literal("repository_work_item"),changeKind:C.enum(["code","public_contract","migration","deployment_configuration"]),workItemRef:C.string().min(1),fingerprint:R,promotable:C.literal(!1),selfApply:C.literal(!1)}).strict()]),Ri=C.object({vendorExportRequested:C.boolean(),vendorLearningRequested:C.boolean(),vendorExportAllowed:C.boolean().default(!1),vendorLearningAllowed:C.boolean().default(!1),receiptFingerprints:C.array(R).max(5),binding:C.object({signalFingerprint:R,sampleFingerprint:R,artifactFingerprint:R}).strict().optional()}).strict().superRefine((e,n)=>{if(!e.vendorExportAllowed&&!e.vendorLearningAllowed)return;if(!e.binding||e.receiptFingerprints.length!==5||new Set(e.receiptFingerprints).size!==5)n.addIssue({code:"custom",message:"Allowed vendor eligibility requires five unique bound receipts."})}),vi=C.object({baselineFingerprint:R,candidateFingerprint:R,sampleFingerprint:R,metrics:C.array(yt).min(1).max(16),guardrails:C.array(ut).min(1).max(16),costRatio:C.number().positive(),latencyRatio:C.number().positive(),passed:C.boolean(),fingerprint:R}).strict(),Si=C.object({expectedBaselineFingerprint:R,observedActiveFingerprint:R,restoredArtifactRef:C.string().min(1),reproductionReceiptFingerprint:R}).strict();var Oi=g.enum(["prompt","provider_route","retrieval_configuration","ranking_rule","extraction_rule","entity_resolution_rule","memory_rule","compiled_skill","runbook_artifact","runtime_policy"]),or=g.object({answerRefId:g.string().min(1),actorRef:g.string().min(1),feedbackType:g.enum(["correction","outcome","retrieval_failure","drift"]),consentDecisionRef:g.string().min(1),redactionDecisionRef:g.string().min(1),correctionRefId:g.string().min(1).optional(),outcomeRefId:g.string().min(1).optional(),status:g.enum(["accepted","rejected","quarantined"]),governedLearning:je.optional(),dispositionEvidence:li.optional()}).strict(),ar=g.object({feedbackType:g.literal("signal"),signalRefId:g.string().min(1),originRefId:g.string().min(1),actorRef:g.string().min(1),signalFingerprint:R,objectiveRefId:g.string().min(1),consentScopeRefId:g.string().min(1),originClassification:g.literal("verified_first_party"),dispositionRefs:mi,status:g.enum(["quarantined","rejected"]),governedLearning:je}).strict(),rr=ie.extend({kind:g.literal("feedback"),authorityClass:g.literal("outcome"),payload:g.union([or,ar])}).strict(),sr=ie.extend({kind:g.literal("experiment"),authorityClass:g.literal("proposal"),payload:g.object({baselineRefId:g.string().min(1),candidateArtifactRef:g.string().min(1),candidateKind:Oi,objective:g.string().min(1),policyDecisionRef:g.string().min(1),metricRefIds:g.array(g.string().min(1)).min(1),guardrailRefIds:g.array(g.string().min(1)).min(1),holdoutDatasetRef:g.string().min(1),adversarialDatasetRef:g.string().min(1),governedLearning:je.optional(),baseline:An.optional(),candidate:hi.optional(),objectiveDefinition:yi.optional(),riskDecision:cn.optional(),egressDecision:Ri.optional(),reviewDueAt:g.iso.datetime({offset:!0}).optional(),expiresAt:g.iso.datetime({offset:!0}).optional(),state:g.enum(["proposed","offline_evaluation","shadow","canary","completed","rejected"])}).strict()}).strict(),cr=ie.extend({kind:g.literal("evaluation"),authorityClass:g.literal("truth"),payload:g.object({experimentRefId:g.string().min(1),candidateArtifactRef:g.string().min(1),evaluatorRef:g.string().min(1),independent:g.literal(!0),datasetRef:g.string().min(1),metricResults:g.record(g.string(),g.number()),safetyPassed:g.boolean(),privacyPassed:g.boolean(),costPassed:g.boolean(),verdict:g.enum(["pass","fail","blocked"]),evaluatedAt:g.iso.datetime({offset:!0}),governedLearning:je.optional(),phase:g.enum(["offline","holdout","adversarial","shadow","canary_compare","post_promotion"]).optional(),sampleReceipt:Ii.optional(),typedMetrics:g.array(yt).max(16).optional(),typedGuardrails:g.array(ut).max(16).optional(),generatorIdentity:lt.optional(),evaluatorIdentity:lt.optional(),independenceReceipt:cn.optional(),testsReceipt:ui.optional(),costEvidence:fi.optional()}).strict()}).strict(),pr=ie.extend({kind:g.literal("promotion"),authorityClass:g.literal("approval"),payload:g.object({experimentRefId:g.string().min(1),evaluationRefId:g.string().min(1),candidateArtifactRef:g.string().min(1),candidateKind:Oi,approvalDecisionRef:g.string().min(1),policyDecisionRef:g.string().min(1),rollbackRefId:g.string().min(1),killSwitchRef:g.string().min(1),stage:g.enum(["shadow","canary","promoted","rejected"]),approvedAt:g.iso.datetime({offset:!0}).optional(),governedLearning:je.optional(),gateBundle:Ci.optional(),approvalReceipt:cn.optional(),rollbackTestReceipt:gi.optional(),killSwitchReceipt:cn.optional(),comparisonReceipt:vi.optional(),effectiveArtifact:An.optional()}).strict().superRefine((e,n)=>{if(e.governedLearning&&(e.stage==="canary"||e.stage==="promoted")&&!e.gateBundle)n.addIssue({code:"custom",path:["gateBundle"],message:"Governed canary and promotion require a gate bundle."})})}).strict(),dr=ie.extend({kind:g.literal("rollback"),authorityClass:g.literal("execution"),payload:g.object({promotionRefId:g.string().min(1),baselineRefId:g.string().min(1),triggerRef:g.string().min(1),status:g.enum(["ready","executed","failed"]),executedAt:g.iso.datetime({offset:!0}).optional(),outcomeRefId:g.string().min(1).optional(),replayRefId:g.string().min(1),governedLearning:je.optional(),reproduction:Si.optional()}).strict()}).strict(),mr=ie.extend({kind:g.literal("replay"),authorityClass:g.literal("truth"),payload:g.object({inputFingerprint:R,configurationRefIds:g.array(g.string().min(1)).min(1),codeVersionRef:g.string().min(1),providerFixtureRef:g.string().min(1),orderedEventRefIds:g.array(g.string().min(1)),outputFingerprint:R,status:g.enum(["exact","drifted","blocked"]),replayedAt:g.iso.datetime({offset:!0}),governedLearning:je.optional(),lifecycleHeadFingerprint:R.optional(),baselineFingerprint:R.optional(),effectiveArtifactFingerprint:R.optional(),orderedTransitionFingerprints:g.array(R).optional()}).strict()}).strict(),ft=[rr,sr,cr,pr,dr,mr];import{z as A}from"zod";var lr=ie.extend({kind:A.literal("source"),authorityClass:A.literal("truth"),payload:A.object({connectionRef:A.string().min(1),authorizationRef:A.string().min(1),externalId:A.string().min(1),sourceType:A.string().min(1),aclRefIds:A.array(A.string().min(1)).min(1),state:A.enum(["registered","ready","degraded","revoked","deleted"])}).strict()}).strict(),yr=ie.extend({kind:A.literal("source_version"),authorityClass:A.literal("truth"),payload:A.object({sourceRecordRefId:A.string().min(1),version:A.number().int().positive(),observedAt:A.iso.datetime({offset:!0}),sourceFingerprint:R,assetRefIds:A.array(A.string().min(1)).default([])}).strict()}).strict(),ur=ie.extend({kind:A.literal("asset"),authorityClass:A.literal("truth"),payload:A.object({sourceVersionRefId:A.string().min(1),mediaType:A.string().min(1),byteLength:A.number().int().nonnegative(),storageRef:A.string().min(1),contentFingerprint:R,classification:A.enum(["public","internal","confidential","restricted"]),aclRefIds:A.array(A.string().min(1)).min(1)}).strict()}).strict(),fr=ie.extend({kind:A.literal("part"),authorityClass:A.literal("truth"),payload:A.object({assetRefId:A.string().min(1),partKind:A.enum(["page","section","table","line","cell","message","time_range"]),ordinal:A.number().int().nonnegative(),locator:Ve,contentFingerprint:R,language:A.string().min(2).optional(),parentPartRefId:A.string().min(1).optional()}).strict()}).strict(),gr=ie.extend({kind:A.literal("fragment"),authorityClass:A.literal("truth"),payload:A.object({partRefId:A.string().min(1),stableFragmentId:A.string().min(1),ordinal:A.number().int().nonnegative(),locator:Ve,contentFingerprint:R,tokenCount:A.number().int().nonnegative(),previousFragmentRefId:A.string().min(1).optional(),nextFragmentRefId:A.string().min(1).optional(),aclRefIds:A.array(A.string().min(1)).min(1)}).strict()}).strict(),Ir=ie.extend({kind:A.literal("evidence"),authorityClass:A.literal("truth"),payload:A.object({sourceVersionRefId:A.string().min(1),assetRefId:A.string().min(1).optional(),partRefId:A.string().min(1),fragmentRefId:A.string().min(1),locator:Ve,authorizationDecisionRef:A.string().min(1),redactionDecisionRef:A.string().min(1),contentFingerprint:R}).strict()}).strict(),gt=[lr,yr,ur,fr,gr,Ir];import{z as I}from"zod";var Cr=I.enum(["fact","hypothesis","policy","procedure","decision","skill_candidate"]),hr=I.enum(["unreviewed","review_required","approved","rejected","superseded"]),xi=I.object({statement:I.string().min(1),normativeLanguage:I.array(I.string().min(1)).default([]),scope:I.array(I.string().min(1)).default([]),prerequisites:I.array(I.string().min(1)).default([]),orderedSteps:I.array(I.string().min(1)).default([]),expectedOutputs:I.array(I.string().min(1)).default([]),failureBranches:I.array(I.string().min(1)).default([]),exceptions:I.array(I.string().min(1)).default([]),approvalBoundaries:I.array(I.string().min(1)).default([])}).strict(),um=I.object({tenantId:I.string().min(1),workspaceId:I.string().min(1),entryId:I.string().min(1),version:I.number().int().positive(),kind:Cr,title:I.string().min(1),content:xi,ownerRef:I.string().min(1).optional(),sourceRecordRefs:I.array(Pe).default([]),evidenceRefIds:I.array(I.string().min(1)).default([]),policyRefIds:I.array(I.string().min(1)).default([]),domain:I.string().min(1),trustLevel:I.enum(["low","medium","high"]),confidence:I.number().min(0).max(1),freshness:I.enum(["fresh","stale","unknown"]),reviewState:hr,conflictState:I.enum(["clear","contradictory","resolved"]),risk:I.enum(["low","medium","high","critical"]),recordedAt:I.iso.datetime({offset:!0}),validTime:ot,requiredCapabilities:I.array(I.string().min(1)).default([]),sensitiveFields:I.array(I.string().min(1)).default([]),tombstoneReason:I.enum(["source_deleted","acl_revoked","superseded","privacy_request"]).optional(),fingerprint:R}).strict(),fm=I.object({tenantId:I.string().min(1),workspaceId:I.string().min(1),decisionId:I.string().min(1),entryId:I.string().min(1),entryVersion:I.number().int().positive(),verdict:I.enum(["approved","rejected"]),reviewerRef:I.string().min(1),decidedAt:I.iso.datetime({offset:!0}),evidenceRefIds:I.array(I.string().min(1)).min(1),reason:I.string().min(1),fingerprint:R}).strict(),gm=I.object({tenantId:I.string().min(1),workspaceId:I.string().min(1),gapId:I.string().min(1),entryRef:I.string().min(1),reason:I.enum(["ownerless","stale","unsupported","low_confidence","contradictory"]),status:I.enum(["open","in_progress","resolved","accepted_unknown"]),ownerRef:I.string().min(1).optional(),evidenceRefIds:I.array(I.string().min(1)).min(1),recordedAt:I.iso.datetime({offset:!0}),fingerprint:R}).strict(),Im=I.object({tenantId:I.string().min(1),workspaceId:I.string().min(1),remediationId:I.string().min(1),gapId:I.string().min(1),status:I.enum(["proposed","accepted","in_progress","completed","cancelled"]),ownerRef:I.string().min(1),workRef:I.string().min(1),evidenceRefIds:I.array(I.string().min(1)).min(1),recordedAt:I.iso.datetime({offset:!0}),fingerprint:R}).strict(),Cm=I.object({artifact:Rn,sourceEntryRef:I.string().min(1),accountableOwnerRef:I.string().min(1),policyRefIds:I.array(I.string().min(1)).default([]),content:xi,conformanceEvidenceRefIds:I.array(I.string().min(1)).min(1),contentFingerprint:R,noActionAuthorization:I.literal(!0),noActionExecution:I.literal(!0)}).strict();var Rm=[{surface:"@lssm/lib.companyos-spec/types/company-intelligence",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/validation/company-intelligence",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/fixtures/company-intelligence",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/docs/company-intelligence.docblock",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/types/company-intelligence/grounding-result",kind:"schema",intent:"additive"},{surface:"@lssm/lib.companyos-spec/validation/company-intelligence-grounding",kind:"export",intent:"additive"},{surface:"@lssm/lib.companyos-spec/fixtures/company-intelligence/grounding-result",kind:"export",intent:"additive"},{surface:"companyIntelligence.feedback.signal@1.0.0",kind:"schema",intent:"additive"},{surface:"companyIntelligence.governedLearning.transition@1.0.0",kind:"schema",intent:"additive"},{surface:"@lssm/lib.companyos-spec/validation/company-intelligence#validateCompanyIntelligenceGovernedLearningHistory",kind:"export",intent:"additive"},{surface:"companyIntelligence.extraction.candidate@1.0.0",kind:"schema",intent:"additive"},{surface:"@lssm/lib.contracts-spec/companyos/company-intelligence",kind:"export",intent:"additive"},...["companyIntelligence.brain.entry.create","companyIntelligence.brain.entry.version.append","companyIntelligence.brain.entry.review","companyIntelligence.brain.edition.create","companyIntelligence.brain.edition.compare","companyIntelligence.brain.gap.remediate","companyIntelligence.brain.artifact.compile","companyIntelligence.record.validate","companyIntelligence.graph.query","companyIntelligence.answer.query","companyIntelligence.feedback.record","companyIntelligence.experiment.evaluate","companyIntelligence.promotion.decide","companyIntelligence.rollback.execute","companyIntelligence.replay.get"].map((e)=>({surface:e,kind:"operation",intent:"additive"})),...["companyIntelligence.brain.entry.versioned","companyIntelligence.brain.entry.reviewed","companyIntelligence.brain.edition.created","companyIntelligence.brain.gap.recorded","companyIntelligence.brain.remediation.recorded","companyIntelligence.brain.artifact.compiled","companyIntelligence.record.committed","companyIntelligence.answer.verified","companyIntelligence.feedback.recorded","companyIntelligence.promotion.decided","companyIntelligence.rollback.completed"].map((e)=>({surface:e,kind:"event",intent:"additive"}))];import{z as k}from"zod";var bi="companyos.company-intelligence-extraction-candidate",_i="1.0.0",xm=k.enum(["fact","entity","relation","policy","procedure"]),Rr=k.object({evidenceRecordId:k.string().min(1),locator:Ve}).strict(),pn=k.object({candidateKey:k.string().min(1),evidenceRefs:k.array(Rr).min(1),confidence:k.number().min(0).max(1),risk:k.enum(["low","medium","high","critical"])}),vr=k.discriminatedUnion("kind",[pn.extend({kind:k.literal("fact"),statement:k.string().min(1)}).strict(),pn.extend({kind:k.literal("entity"),entityType:k.string().min(1),label:k.string().min(1)}).strict(),pn.extend({kind:k.literal("relation"),fromCandidateKey:k.string().min(1),toCandidateKey:k.string().min(1),predicate:k.string().min(1)}).strict(),pn.extend({kind:k.literal("policy"),normativeStatement:k.string().min(1),scopeRefIds:k.array(k.string().min(1)).min(1)}).strict(),pn.extend({kind:k.literal("procedure"),statement:k.string().min(1)}).strict()]),bm=k.object({schemaId:k.literal(bi),schemaVersion:k.literal(_i),candidates:k.array(vr).min(1)}).strict().refine(({candidates:e})=>new Set(e.map(({candidateKey:n})=>n)).size===e.length,{message:"Candidate keys must be unique.",path:["candidates"]}),_m=k.object({decisionRef:k.string().min(1),reviewerRef:k.string().min(1),candidateKeys:k.array(k.string().min(1)).min(1),verdict:k.enum(["approved","rejected"]),decidedAt:k.iso.datetime({offset:!0})}).strict(),Em=k.object({receiptId:k.string().min(1),tenantId:k.string().min(1),attemptId:k.string().min(1),modelRef:k.string().min(1),promptFingerprint:R,candidateSchema:k.object({id:k.literal(bi),version:k.literal(_i),fingerprint:R}).strict(),runtimeVersion:k.string().min(1),costMicros:k.number().int().nonnegative(),redactionDecisionRef:k.string().min(1),evidenceRefIds:k.array(k.string().min(1)),dispositions:k.array(k.object({candidateKey:k.string().min(1),status:k.enum(["accepted","rejected","review_required"]),reason:k.string().min(1),recordId:k.string().min(1).optional()}).strict()),version:k.number().int().positive(),supersedesReceiptId:k.string().min(1).optional(),fingerprint:R}).strict();import{z as u}from"zod";var Sr=u.enum(["authorization_denied","scope_mismatch","policy_refused","no_authorized_evidence","retrieval_degraded","conflicting_authorized_evidence","stale_authorized_evidence","verifier_not_independent","drafting_degraded","draft_schema_invalid","verification_degraded","insufficient_claim_support","deadline_exceeded","budget_exceeded","fixture_adapter_forbidden","supported"]),mn=u.array(u.string().min(1)).refine((e)=>new Set(e).size===e.length,{message:"Values must be unique."}),Or=u.object({tenantId:u.string().min(1),workspaceId:u.string().min(1),actorRef:u.string().min(1),viewerRef:u.string().min(1),capabilityRefs:mn,authorizationDecisionRef:u.string().min(1),policyDecisionRef:u.string().min(1).optional()}).strict(),xr=u.object({questionBytes:u.number().int().positive().max(4096),filterEntries:u.number().int().nonnegative().max(20),channelCount:u.number().int().positive().max(3),perChannelTopK:u.number().int().positive().max(32),mergedEvidenceRecords:u.number().int().positive().max(16),excerptBytesPerEvidence:u.number().int().positive().max(2048),totalModelEvidenceBytes:u.number().int().positive().max(16384),maxClaims:u.number().int().positive().max(8),maxClaimStatementBytes:u.number().int().positive().max(512),maxCitationsPerClaim:u.number().int().positive().max(4),maxDraftAttempts:u.literal(2),maxVerificationAttempts:u.literal(2),maxRetrievalCalls:u.literal(3),runDeadlineMs:u.number().int().positive().max(12000)}).strict(),Ai=u.object({claimId:u.string().regex(/^clm_sha256:[a-f0-9]{64}$/),statement:u.string().min(1)}).strict(),ki=u.object({citationId:u.string().regex(/^cit_sha256:[a-f0-9]{64}$/),evidenceRefId:u.string().min(1),tenantId:u.string().min(1),workspaceId:u.string().min(1),viewerRef:u.string().min(1),locator:Ve,excerpt:u.string().min(1),sourceContentFingerprint:R,viewerProjectionFingerprint:R,redactionDecisionRef:u.string().min(1),fusedScoreMicros:u.number().int().nonnegative()}).strict(),wi=u.object({claimId:u.string().regex(/^clm_sha256:[a-f0-9]{64}$/),citationIds:u.array(u.string().regex(/^cit_sha256:[a-f0-9]{64}$/)).min(1).max(4),verdict:u.literal("supported"),confidence:u.number().min(0).max(1)}).strict(),Ei=u.object({providerRef:u.string().min(1),modelRef:u.string().min(1),promptOrRuleVersion:u.string().min(1),independenceDomain:u.string().min(1),provenance:u.enum(["runtime","fixture"])}).strict(),br=u.object({request:R,retrieval:R.optional(),draft:R.optional(),validation:R.optional(),verification:R.optional(),output:R,replay:R}).strict(),_r=u.object({drafterIdentity:Ei.optional(),verifierIdentity:Ei.optional(),retrievedCitationLedger:mn,callCounts:u.object({retrieval:u.number().int().nonnegative().max(3),draft:u.number().int().nonnegative().max(2),verify:u.number().int().nonnegative().max(2)}).strict(),repairCount:u.number().int().nonnegative().max(1),warnings:mn,fingerprints:br}).strict(),Er=u.object({schemaVersion:u.literal("company-intelligence-grounded-answer:v1"),codeVersionRef:u.string().min(1),retrievalConfigRef:u.string().min(1),recordedAt:u.iso.datetime({offset:!0}),modelVisibleEvidenceBytes:u.number().int().nonnegative().max(16384),supportThreshold:u.number().min(0).max(1)}).strict(),dn=u.object({schemaVersion:u.literal("company-intelligence-grounded-answer:v1"),scope:Or,status:at,reasonCodes:u.array(Sr).min(1),text:u.string().min(1).optional(),claims:u.array(Ai),citations:u.array(ki),claimSupport:u.array(wi),conflictRefIds:mn,receipt:_r,metadata:Er,bounds:xr,knowledgeAuthorizesAction:u.literal(!1)}).strict(),kn={text:u.undefined().optional(),claims:u.array(u.never()).max(0),citations:u.array(u.never()).max(0),claimSupport:u.array(u.never()).max(0)},Ni=u.discriminatedUnion("status",[dn.extend({status:u.literal("answered"),text:u.string().min(1),claims:u.array(Ai).min(1).max(8),citations:u.array(ki).min(1),claimSupport:u.array(wi).min(1),conflictRefIds:u.array(u.never()).max(0)}),dn.extend({status:u.literal("abstained"),...kn}),dn.extend({status:u.literal("refused"),...kn}),dn.extend({status:u.literal("conflicted"),...kn,conflictRefIds:mn.pipe(u.array(u.string()).min(1))}),dn.extend({status:u.literal("degraded"),...kn})]);var Ar=We.discriminatedUnion("kind",[...gt,...pt,...ci,...ft]),kr=[...gt,...pt,rt,st,ct,...ft].map((e)=>e.omit({fingerprint:!0})),Pi=We.union(kr),It=We.object({contractVersion:We.literal(it),tenantId:We.string().min(1),records:We.array(Ar).min(1)}).strict();import{z as y}from"zod";var Ct=y.object({tenantId:y.string().min(1),workspaceId:y.string().min(1),teamId:y.string().min(1).optional()}),ht=y.enum(["core","marketing","product","infrastructure","finance","sales","custom"]),wr=y.enum(["signup","activation","active_users","customer_churn","user_churn"]),Qe=y.object({field:y.string().min(1).max(160),operator:y.enum(["eq","not_eq","in","not_in","exists","gt","gte","lt","lte"]),value:y.union([y.string(),y.number(),y.boolean(),y.array(y.union([y.string(),y.number(),y.boolean()])).max(100)]).optional()}),Nr=y.discriminatedUnion("operator",[y.object({operator:y.literal("count"),filters:y.array(Qe).max(25).default([])}),y.object({operator:y.literal("distinct"),identityField:y.string().min(1),filters:y.array(Qe).max(25).default([])}),y.object({operator:y.literal("sum"),valueField:y.string().min(1),filters:y.array(Qe).max(25).default([])}),y.object({operator:y.literal("ratio"),numeratorFilters:y.array(Qe).max(25).default([]),denominatorFilters:y.array(Qe).max(25).default([]),scale:y.number().positive().default(100)}),y.object({operator:y.literal("cohort_loss"),identityField:y.string().min(1),eligibilityAction:y.string().min(1),filters:y.array(Qe).max(25).default([])})]),Pr=y.object({id:y.string().min(1),provider:y.enum(["posthog","stripe","postgres_named_query","github","linear","vercel","google_search_console","remote_mcp","http","runtime_node_cli"]),connectionRef:y.string().min(1),approvedOperation:y.string().min(1).optional(),allowedToolNames:y.array(y.string().min(1)).max(50).default([]),inputSchemaRef:y.string().min(1).optional(),expectedCadenceMinutes:y.number().int().min(5).max(1440),freshnessSlaMinutes:y.number().int().min(5).max(10080),evidenceRefIds:y.array(y.string().min(1)).min(1),approvedDefinitionVersion:y.number().int().positive()}),Lr=y.object({capabilities:y.array(y.enum(["metrics.read_live","metrics.manage","metrics.collect","metrics.publish","metrics.deliver","metrics.audit"])).min(1),teamIds:y.array(y.string().min(1)).default([]),shareholderMode:y.enum(["disabled","published_snapshots","expiring_live_grant"])}),Qm=y.object({id:y.string().min(1),scope:Ct,name:y.string().min(1).max(160),category:ht,kind:y.discriminatedUnion("type",[y.object({type:y.literal("core"),coreKind:wr}),y.object({type:y.literal("custom"),key:y.string().min(1).max(120)})]),aggregation:Nr,unit:y.string().min(1).max(64),direction:y.enum(["increase","decrease","maintain"]),sourceBindings:y.array(Pr).min(1),accessPolicy:Lr,ownerPrincipalId:y.string().min(1),version:y.number().int().positive(),status:y.enum(["draft","active","paused","retired"]),meaningfulAction:y.string().min(1).optional(),createdAt:y.string().datetime(),updatedAt:y.string().datetime()}),Gr=y.enum(["today","last_24_hours","last_7_days","last_30_days"]),Li=y.object({window:Gr,current:y.number().nullable(),previous:y.number().nullable(),absoluteDelta:y.number().nullable(),growthPercent:y.number().nullable(),growthState:y.enum(["available","new","unavailable"]),percentagePointDelta:y.number().nullable(),freshness:y.enum(["fresh","stale","unavailable"]),completeness:y.number().min(0).max(1),provisional:y.boolean(),comparisonLabel:y.string().min(1),evidenceRefIds:y.array(y.string().min(1)),currentStart:y.string().datetime(),currentEnd:y.string().datetime(),previousStart:y.string().datetime(),previousEnd:y.string().datetime()});import{z as m}from"zod";var ze={id:m.string().min(1),scope:Ct,createdAt:m.string().datetime()},el=m.object({...ze,definitionId:m.string().min(1),definitionVersion:m.number().int().positive(),status:m.enum(["draft","pending_review","approved","rejected","superseded"]),mapping:m.record(m.string(),m.unknown()),samplePreview:m.array(m.record(m.string(),m.union([m.string(),m.number(),m.boolean(),m.null()]))).max(20),confidence:m.number().min(0).max(1),requiredScopes:m.array(m.string().min(1)),estimatedCallsPerDay:m.number().int().nonnegative(),estimatedCostMinor:m.number().int().nonnegative(),toolRefs:m.array(m.string().min(1)).min(1),dryRunEvidenceRefIds:m.array(m.string().min(1)),reviewedByPrincipalId:m.string().min(1).optional(),workOrderRef:m.string().min(1).optional(),expiresAt:m.string().datetime().optional()}),nl=m.object({...ze,metricDefinitionIds:m.array(m.string().min(1)).min(1),type:m.enum(["value_threshold","growth_threshold","source_freshness","source_failure"]),operator:m.enum(["gt","gte","lt","lte","eq"]),threshold:m.number(),cooldownMinutes:m.number().int().min(5).max(43200),status:m.enum(["active","paused"])}),tl=m.object({...ze,enabled:m.boolean().default(!1),metricDefinitionIds:m.array(m.string().min(1)).min(1),recipientRefs:m.array(m.string().min(1)).min(1),locale:m.enum(["en","fr","es"]),timezone:m.string().min(1),cadence:m.object({hour:m.number().int().min(0).max(23).default(9),minute:m.number().int().min(0).max(59).default(0),weekdays:m.array(m.number().int().min(0).max(6)).min(1)}),destinations:m.array(m.enum(["email","slack","discord"])).min(1)}),il=m.object({...ze,principalRef:m.string().min(1),mode:m.enum(["published_snapshots","expiring_live_grant"]),metricDefinitionIds:m.array(m.string().min(1)).default([]),categories:m.array(ht).default([]),expiresAt:m.string().datetime().optional(),revokedAt:m.string().datetime().optional()}),ol=m.object({...ze,definitionId:m.string().min(1),definitionVersion:m.number().int().positive(),values:m.array(Li).length(4),fingerprint:m.string().regex(/^sha256:[a-f0-9]{64}$/),evidenceRefIds:m.array(m.string().min(1))}),al=m.object({...ze,status:m.enum(["draft","published","revoked"]),snapshotIds:m.array(m.string().min(1)).min(1),metricVersionFingerprints:m.array(m.string().min(1)).min(1),visibility:m.enum(["shareholder_scope","named_recipients"]),recipientRefs:m.array(m.string().min(1)),contentHash:m.string().regex(/^sha256:[a-f0-9]{64}$/),approvalRef:m.string().min(1).optional(),publishedAt:m.string().datetime().optional(),revokedAt:m.string().datetime().optional()}),rl=m.object({...ze,bindingId:m.string().min(1),definitionId:m.string().min(1),definitionVersion:m.number().int().positive(),idempotencyKey:m.string().min(1),status:m.enum(["claimed","running","succeeded","failed","deferred","circuit_open"]),scheduledAt:m.string().datetime(),startedAt:m.string().datetime().optional(),completedAt:m.string().datetime().optional(),attempt:m.number().int().positive(),retryAfter:m.string().datetime().optional(),failureCode:m.string().min(1).optional(),evidenceRefIds:m.array(m.string().min(1))}),sl=m.object({...ze,digestPolicyId:m.string().min(1).optional(),publicationId:m.string().min(1).optional(),destination:m.enum(["email","slack","discord"]),outboxMessageRef:m.string().min(1),status:m.enum(["queued","delivered","failed","revoked_before_delivery"]),deliveredAt:m.string().datetime().optional(),evidenceRefIds:m.array(m.string().min(1))});import{LssmGoalConflictV1Schema as jr,LssmGoalV1Schema as zr,LssmHarmGuardrailV1Schema as Mr,LssmIdSchema as Ae,LssmOutcomeMetricV1Schema as qr,LssmStableRefV1Schema as Ti,LssmUtcTimestampSchema as Br}from"@lssm/lib.lssm-os-spec";import{z as ye}from"zod";import{LssmDataHandlingV1Schema as Dr,LssmEvidenceRefV1Schema as Gi,LssmIdSchema as dl,LssmStableRefV1Schema as Rt,LssmUtcTimestampSchema as Tr}from"@lssm/lib.lssm-os-spec";import{z as Me}from"zod";var Vr="1.0.0",qe=Me.literal(Vr),ll=Rt.extend({kind:Me.enum(["enterprise","holding_company","legal_entity","operating_company","brand","product","workspace"])}).strict(),Ze=Me.object({recordedAt:Tr,recordedByRef:Rt,sourceRefs:Me.array(Gi).min(1).max(32),decisionRef:Gi.optional(),dataHandling:Dr}).strict(),Di=Me.object({businessIntentRecordedByCompanyOs:Me.literal(!0),technicalExecutionAuthorizedByCompanyOs:Me.literal(!1),connectAuthorizationRequired:Me.literal(!0),connectPolicyRef:Rt}).strict();var Fr=ye.object({id:Ae,name:ye.string().trim().min(1).max(120),description:ye.string().trim().min(1).max(4000),behavioralCommitments:ye.array(ye.string().trim().min(1).max(500)).min(1),evidenceRefIds:ye.array(Ae).max(16)}).strict(),$r=ye.object({id:Ae,goalId:Ae,companyEntityId:Ae,parentCascadeId:Ae.optional(),alignment:ye.enum(["direct","supporting","guardrail","conflicting"]),contributionWeight:ye.number().min(0).max(1),accountableOwnerRef:Ti,escalationRouteId:Ae}).strict(),Vi=ye.object({contractVersion:qe,id:Ae,companyEntityId:Ae,mission:ye.string().trim().min(1).max(4000),vision:ye.string().trim().min(1).max(4000),values:ye.array(Fr).min(1).max(32),goals:ye.array(zr).min(1),outcomeMetrics:ye.array(qr),goalConflicts:ye.array(jr),harmGuardrails:ye.array(Mr),goalCascades:ye.array($r).min(1),capitalResponsibilityRefIds:ye.array(Ae),budgetResponsibilityRefIds:ye.array(Ae),effectiveFrom:Br,supersedesPurposeRef:Ti.optional(),provenance:Ze}).strict();import{z as Se}from"zod";var Ur=Se.object({id:Se.string().min(1),providerKey:Se.string().min(1),displayName:Se.string().min(1),externalObjectTypes:Se.array(Se.string().min(1)).default([])}),ji=Se.object({id:Se.string().min(1),capability:Vt,readSupported:Se.boolean().default(!0),draftSupported:Se.boolean().default(!1),writeSupported:Se.boolean().default(!1),syncPolicy:Se.enum(["manual","scheduled","event_driven"]).default("manual"),freshnessPolicy:Se.enum(["best_effort","daily","near_realtime"]),providerBindings:Se.array(Ur).default([])});import{defineContractEdge as Kr,defineContractEntity as Nn}from"@lssm/lib.contracts-spec";import{ControlPlaneExecutionApproveCommand as zi}from"@lssm/lib.contracts-spec/control-plane/commands/controlPlaneExecutionApprove.command";import{ControlPlaneExecutionRejectCommand as Mi}from"@lssm/lib.contracts-spec/control-plane/commands/controlPlaneExecutionReject.command";import{ControlPlaneTraceGetQuery as qi}from"@lssm/lib.contracts-spec/control-plane/queries/controlPlaneTraceGet.query";import{defineDataView as Yr}from"@lssm/lib.contracts-spec/data-views";import{GraphArtifactSchemaVersionV1 as Hr,GraphArtifactVersionV1 as Wr}from"@lssm/lib.contracts-spec/graph-artifacts";import{defineTranslation as Qr}from"@lssm/lib.contracts-spec/translations";var Bi="1.0.0",Fi=[{path:"packages/libs/companyos-spec/src/types/control-plane-projections.ts"}],Xe={owners:["companyos.core"],tags:["companyos","control-plane","projection"],provenance:Fi},wn={provenance:Fi},ln={version:Bi,stability:"experimental",owners:["companyos.core"],tags:["companyos","control-plane","projection"]},$i=Nn({meta:{...ln,key:"companyos.graph.node",title:"CompanyOS graph node",description:"Provider-neutral CompanyOS operating-graph node projected for control-plane review surfaces.",domain:"companyos"},edges:[{id:"companyos.graph.node-evidence-for-control-plane.execution",from:"companyos.graph.node",to:"control-plane.execution",relation:"evidence-for",cardinality:"many-to-many",directed:!0,label:"evidence for execution"}]}),Zr=Nn({meta:{...ln,key:"companyos.graph.edge",title:"CompanyOS graph edge",description:"Provider-neutral CompanyOS operating-graph relationship projected for control-plane review surfaces.",domain:"companyos"}}),Ui=Nn({meta:{...ln,key:"control-plane.execution",title:"Control-plane execution",description:"Execution projection that lets CompanyOS approval evidence and trace entries align with control-plane commands.",domain:"control-plane"},edges:[{id:"control-plane.execution-requires-companyos.approval-gate",from:"control-plane.execution",to:"companyos.approval-gate",relation:"requires",cardinality:"many-to-one",directed:!0,label:"requires CompanyOS approval gate"}]}),Ki=Nn({meta:{...ln,key:"companyos.approval-gate",title:"CompanyOS approval gate",description:"Authority boundary for high-impact CompanyOS actions before control-plane approval or rejection commands continue execution.",domain:"companyos"}}),Al=[Kr({meta:{...ln,key:"companyos.approval-gate.controls-control-plane.execution",title:"CompanyOS approval controls execution",description:"Links CompanyOS approval-gate state to the control-plane execution it may approve or reject.",domain:"companyos"},edge:{id:"companyos.approval-gate-controls-control-plane.execution",from:"companyos.approval-gate",to:"control-plane.execution",relation:"controls",cardinality:"one-to-many",directed:!0,label:"controls execution"}})],kl=[$i,Zr,Ui,Ki],Xr=Qr({meta:{key:"companyos.control-plane.approval-graph",version:"1.0.0",domain:"companyos",owners:["companyos.core"]},locale:"en",messages:{Label:{value:"Label"},Kind:{value:"Kind"},"Review state":{value:"Review state"}}}),wl=Yr(Xr,{meta:{key:"companyos.control-plane.approval-graph",version:Bi,title:"CompanyOS control-plane approval graph",description:"Entity-declarative graph projection for reviewing CompanyOS evidence, approval gates, and control-plane executions together.",stability:"experimental",owners:["companyos.core"],tags:["companyos","control-plane","approval","graph"],entity:"control-plane.execution",domain:"companyos"},source:{variant:"entity-declarative",entity:"control-plane.execution",edges:[{from:"control-plane.execution",to:"companyos.approval-gate",relation:"requires"},{from:"companyos.graph.node",to:"control-plane.execution",relation:"evidence-for"}]},view:{kind:"graph",layout:{kind:"dag",direction:"TB"},nodeKindField:"kind",edgeKindField:"relation",inspector:"panel",fields:[{key:"label",label:"Label",dataPath:"label",roles:["title"]},{key:"kind",label:"Kind",dataPath:"kind",roles:["tag"]},{key:"reviewState",label:"Review state",dataPath:"reviewState",roles:["status"]}]},policy:{flags:["approval-required","operator-review"],pii:[]}}),Nl={schemaVersion:Hr,artifactVersion:Wr,kind:"contract-graph",generatedAt:"2026-05-17T00:00:00.000Z",workspaceRoot:"contractspec://companyos/control-plane-projections",redactionMode:"path-only",nodes:[{...Xe,id:"entity:companyos.graph.node",key:$i.meta.key,kind:"data-view",label:"CompanyOS graph node",confidence:"explicit"},{...Xe,id:"entity:companyos.approval-gate",key:Ki.meta.key,kind:"policy",label:"CompanyOS approval gate",confidence:"explicit"},{...Xe,id:"entity:control-plane.execution",key:Ui.meta.key,kind:"workflow",label:"Control-plane execution",confidence:"explicit"},{...Xe,id:"operation:controlPlane.execution.approve",key:zi.meta.key,kind:"command",label:zi.meta.title??"Approve Execution Step",confidence:"explicit"},{...Xe,id:"operation:controlPlane.execution.reject",key:Mi.meta.key,kind:"command",label:Mi.meta.title??"Reject Execution Step",confidence:"explicit"},{...Xe,id:"query:controlPlane.trace.get",key:qi.meta.key,kind:"query",label:qi.meta.title??"Get Execution Trace",confidence:"explicit"}],edges:[{...wn,id:"edge:approval-gate-controls-execution",from:"entity:companyos.approval-gate",to:"entity:control-plane.execution",kind:"requires",confidence:"explicit",reason:"CompanyOS approval gates must resolve before high-impact execution continuation."},{...wn,id:"edge:approve-targets-execution",from:"operation:controlPlane.execution.approve",to:"entity:control-plane.execution",kind:"targets",confidence:"explicit"},{...wn,id:"edge:reject-targets-execution",from:"operation:controlPlane.execution.reject",to:"entity:control-plane.execution",kind:"targets",confidence:"explicit"},{...wn,id:"edge:trace-documents-execution",from:"query:controlPlane.trace.get",to:"entity:control-plane.execution",kind:"documents",confidence:"explicit"}],diagnostics:[],counts:{nodes:6,edges:4,diagnostics:0}};import{z as p}from"zod";var Dl=p.enum(["evidence.get-receipt","replay.get-packet"]),Yi=p.object({id:p.string().min(1),tenantId:p.string().min(1),workspaceId:p.string().min(1),correlationId:p.string().min(1),evidenceReceiptId:p.string().min(1),replayPacketId:p.string().min(1),operationKeys:p.object({evidenceReceipt:p.literal("evidence.get-receipt"),replayPacket:p.literal("replay.get-packet")}).strict(),summary:p.string().min(1),linkedAt:p.string().min(1),metadata:L.default({})}).strict(),Jr=p.object({id:p.string().min(1),authorized:p.literal(!1).default(!1),mode:p.enum(["not_authorized","dry_run_only","human_record_only"]),policyGateDecisionId:p.string().min(1),reason:p.string().min(1),rejectedDispatchLanes:p.array(p.enum(["agent","job","integration"])).min(1),reservedHumanOnly:p.literal(!1).default(!1),reservedWorkClassification:p.enum(["customer_facing","legal","financial","production_impacting"]).array().min(1),asOf:p.string().min(1),metadata:L.default({})}).strict(),es=p.object({id:p.string().min(1),tenantId:p.string().min(1),workspaceId:p.string().min(1),scenarioId:p.string().min(1),title:p.string().min(1),missionStatement:p.string().min(1),commandCycle:p.enum(["capture","decide","approve","review"]),status:p.enum(["draft","degraded","blocked","ready_for_design_partner_review"]),inputs:p.array(p.string().min(1)).min(1),facts:p.array(p.string().min(1)).min(1),sourceRefs:p.array(q).min(1),missingInformation:p.array(p.string().min(1)).default([]),delays:p.array(p.string().min(1)).default([]),inconsistencies:p.array(p.string().min(1)).default([]),risks:p.array(p.string().min(1)).min(1),reportDraftId:p.string().min(1),reportDraftEvidenceReplayLinkId:p.string().min(1),decisionPacketId:p.string().min(1),evidenceReplayLinkId:p.string().min(1),replayRefIds:p.array(p.string().min(1)).min(1),evidenceReceiptIds:p.array(p.string().min(1)).min(1),dispatchAuthorization:Jr,createdAt:p.string().min(1),metadata:L.default({})}).strict(),ns=p.object({id:p.string().min(1),decisionPacketId:p.string().min(1),attesterPrincipalId:p.string().min(1),attesterRole:p.literal("expert_reviewer"),attestationState:p.enum(["attested","rejected"]),statement:p.string().min(1),evidenceReplayLinkId:p.string().min(1),attestedAt:p.string().min(1),metadata:L.default({})}).strict(),ts=p.object({id:p.string().min(1),decisionPacketId:p.string().min(1),approverPrincipalId:p.string().min(1),approverRole:p.literal("founder_approver"),approvalState:p.enum(["approved","rejected"]),statement:p.string().min(1),approvalOperationKey:p.enum(["specialOps.reviewCard.decide","specialOps.weeklyReport.approve"]),evidenceReplayLinkId:p.string().min(1),approvedAt:p.string().min(1),metadata:L.default({})}).strict(),is=p.object({id:p.string().min(1),tenantId:p.string().min(1),workspaceId:p.string().min(1),scenarioId:p.string().min(1),title:p.string().min(1),missionCommandCycleId:p.string().min(1),decisionSummary:p.string().min(1),recommendedAction:p.string().min(1),proposedActions:p.array(p.string().min(1)).min(1),options:p.array(p.object({id:p.string().min(1),label:p.string().min(1),tradeoff:p.string().min(1)}).strict()).min(1),constraints:p.array(p.string().min(1)).min(1),sourceRefs:p.array(q).min(1),aiContribution:p.object({summary:p.string().min(1),boundaries:p.array(p.string().min(1)).min(1),canDispatchReservedWork:p.literal(!1).default(!1)}).strict(),reservedWorkClassification:p.enum(["customer_facing","legal","financial","production_impacting"]).array().min(1),attestationStatus:p.enum(["missing","attested","rejected"]),founderApprovalStatus:p.enum(["missing","approved","rejected"]),evidenceReceiptIds:p.array(p.string().min(1)).min(1),replayPacketIds:p.array(p.string().min(1)).min(1),evidenceReplayLinks:p.array(Yi).min(1),referencedOperationKeys:p.array(p.enum(["evidence.get-receipt","replay.get-packet","specialOps.reviewCard.decide","specialOps.weeklyReport.approve"])).min(1),noRawRunRecords:p.literal(!0).default(!0),noProviderDispatch:p.literal(!0).default(!0),noProductionReadinessClaim:p.literal(!0).default(!0),createdAt:p.string().min(1),metadata:L.default({})}).strict(),os=p.object({id:p.string().min(1),summary:p.string().min(1),severity:p.enum(["low","medium","high"]),status:p.enum(["mitigated","accepted","open"]),evidenceReplayLinkId:p.string().min(1).optional()}).strict(),Tl=p.object({id:p.string().min(1),tenantId:p.string().min(1),workspaceId:p.string().min(1),scenarioId:p.string().min(1),state:p.enum(["draft","degraded","blocked","ready_for_design_partner_review"]),missionCommandCycle:es,decisionPacket:is,evidenceReplayLinks:p.array(Yi).default([]),expertAttestations:p.array(ns).default([]),founderApproval:ts.optional(),gapList:p.array(os).default([]),assertions:p.object({fictiveFixtureOnly:p.literal(!0),noStandaloneApp:p.literal(!0),noProviderDispatch:p.literal(!0),noAiOrReservedHumanDispatch:p.literal(!0),noProductionReadinessClaim:p.literal(!0)}).strict(),asOf:p.string().min(1),metadata:L.default({})}).strict().superRefine((e,n)=>{if(e.tenantId!==e.decisionPacket.tenantId)n.addIssue({code:p.ZodIssueCode.custom,message:"Readiness tenantId must match the decision packet tenantId.",path:["decisionPacket","tenantId"]});if(e.workspaceId!==e.decisionPacket.workspaceId)n.addIssue({code:p.ZodIssueCode.custom,message:"Readiness workspaceId must match the decision packet workspaceId.",path:["decisionPacket","workspaceId"]});if(e.state!=="ready_for_design_partner_review")return;if(e.evidenceReplayLinks.length===0)n.addIssue({code:p.ZodIssueCode.custom,message:"Ready-for-design-partner-review state requires evidence/replay links.",path:["evidenceReplayLinks"]});if(!e.expertAttestations.some((t)=>t.attestationState==="attested"))n.addIssue({code:p.ZodIssueCode.custom,message:"Ready-for-design-partner-review state requires expert attestation.",path:["expertAttestations"]});if(e.founderApproval?.approvalState!=="approved")n.addIssue({code:p.ZodIssueCode.custom,message:"Ready-for-design-partner-review state requires founder approval.",path:["founderApproval"]});if(e.gapList.length===0)n.addIssue({code:p.ZodIssueCode.custom,message:"Ready-for-design-partner-review state requires an explicit known-gap list.",path:["gapList"]});if(e.gapList.some((t)=>t.status==="open"))n.addIssue({code:p.ZodIssueCode.custom,message:"Ready-for-design-partner-review state cannot include open gaps.",path:["gapList"]})});import{z as ke}from"zod";var Hi=ke.object({id:ke.string().min(1),roleId:ke.string().min(1),locale:ke.string().min(2),riskMode:ke.enum(["normal","heightened","restricted"]),dataDensity:ke.enum(["compact","standard","detailed"]),guidanceMode:ke.enum(["guided","expert"]),visibleRefTypes:ke.array(ke.string().min(1)).min(1),primaryActionOperationIds:ke.array(ke.string().min(1)).default([])});import{LssmEvidenceRefV1Schema as Ln,LssmIdSchema as te,LssmStableRefV1Schema as Oe,LssmUtcTimestampSchema as yn}from"@lssm/lib.lssm-os-spec";import{z as w}from"zod";import{LssmIdSchema as Le,LssmStableRefV1Schema as Pn}from"@lssm/lib.lssm-os-spec";import{z as ue}from"zod";var as=ue.enum(["holding_company","legal_entity","operating_company","brand","product","workspace"]),rs=ue.object({id:Le,kind:as,name:ue.string().trim().min(1).max(200),legalName:ue.string().trim().min(1).max(300).optional(),jurisdiction:ue.string().trim().min(2).max(80).optional(),registrationRef:Pn.optional(),accountableOwnerRef:Pn,active:ue.boolean()}).strict().superRefine((e,n)=>{if(new Set(["holding_company","legal_entity","operating_company"]).has(e.kind)&&!e.legalName)n.addIssue({code:"custom",path:["legalName"],message:`${e.kind} requires a legalName`})}),ss=ue.object({id:Le,fromEntityId:Le,toEntityId:Le,kind:ue.enum(["owns","controls","operates","brand_owner","product_owner","workspace_owner"]),ownershipShare:ue.number().min(0).max(1).optional(),votingShare:ue.number().min(0).max(1).optional(),controllingInterest:ue.boolean(),jointVenture:ue.boolean(),governanceAgreementRef:Pn.optional()}).strict().superRefine((e,n)=>{if(e.fromEntityId===e.toEntityId)n.addIssue({code:"custom",path:["toEntityId"],message:"An entity cannot relate to itself"});if(e.jointVenture&&!e.governanceAgreementRef)n.addIssue({code:"custom",path:["governanceAgreementRef"],message:"Joint ventures require a governance agreement reference"})}),cs=ue.object({id:Le,reportingEntityId:Le,memberEntityIds:ue.array(Le).min(1),method:ue.enum(["full","proportional","equity","not_consolidated"]),standard:ue.enum(["ifrs","gaap","local","management"]),policyRef:Pn}).strict(),Wi=ue.object({contractVersion:qe,id:Le,rootEntityId:Le,entities:ue.array(rs).min(1),relationships:ue.array(ss),consolidationBoundaries:ue.array(cs),provenance:Ze}).strict();var ps=w.object({id:te,delegatorEntityId:te,delegateRef:Oe,capabilities:w.array(te).min(1),entityScopeIds:w.array(te).min(1),delegable:w.boolean(),riskCeiling:w.enum(["low","medium","high","critical"]),effectiveFrom:yn,expiresAt:yn,approvalEvidenceRefs:w.array(Ln).min(1)}).strict().superRefine((e,n)=>{if(e.expiresAt<=e.effectiveFrom)n.addIssue({code:"custom",path:["expiresAt"],message:"Delegated authority must expire after it becomes effective"})}),ds=w.object({id:te,grantorEntityId:te,granteeEntityId:te,delegateRef:Oe,delegatedAuthorityId:te,capabilities:w.array(te).min(1),resourceScopeRefs:w.array(Oe).min(1),purpose:w.string().trim().min(1).max(2000),status:w.enum(["proposed","approved","suspended","revoked","expired"]),effectiveFrom:yn.optional(),expiresAt:yn,approvalEvidenceRefs:w.array(Ln).min(1),authorityBoundary:Di}).strict().superRefine((e,n)=>{if(e.status==="approved"&&!e.effectiveFrom)n.addIssue({code:"custom",path:["effectiveFrom"],message:"Approved grants require an effectiveFrom timestamp"});if(e.effectiveFrom&&e.expiresAt<=e.effectiveFrom)n.addIssue({code:"custom",path:["expiresAt"],message:"Cross-company grant must expire after it becomes effective"})}),ms=w.object({id:te,providerEntityId:te,consumerEntityIds:w.array(te).min(1),capability:te,serviceContractRef:Oe,costAllocationPolicyRef:Oe,sloRef:Oe,mandatory:w.boolean(),exceptionPolicyRef:Oe.optional(),accountableOwnerRef:Oe}).strict(),ls=w.object({id:te,kind:w.enum(["capital","budget"]),companyEntityId:te,accountableOwnerRef:Oe,financePolicyRef:Oe,costCenterRefs:w.array(Oe).min(1),currency:w.string().regex(/^[A-Z]{3}$/),minorUnitLimit:w.string().regex(/^\d+$/),period:w.enum(["monthly","quarterly","annual","transaction"]),approvalThresholdRef:Oe}).strict(),ys=w.object({id:te,entityScopeIds:w.array(te).min(1),workspaceScopeIds:w.array(te),jurisdictions:w.array(w.string().trim().min(2).max(80)).min(1),residencyRegions:w.array(w.string().trim().min(2).max(80)).min(1),classificationCeiling:w.enum(["public","internal","confidential","restricted"]),nonWaivable:w.boolean(),policyRefs:w.array(Oe).min(1)}).strict(),us=w.object({id:te,boundaryId:te,entityScopeIds:w.array(te).min(1),reason:w.string().trim().min(1).max(2000),expiresAt:yn,approvalEvidenceRefs:w.array(Ln).min(1)}).strict(),fs=w.object({id:te,companyEntityId:te,principalRefs:w.array(Oe).min(1),parentRouteId:te.optional(),triggerKinds:w.array(w.enum(["authority","financial","compliance","goal","operational"])).min(1),responseTimeMinutes:w.number().int().positive()}).strict(),gs=w.object({id:te,entityIds:w.array(te).min(2),kind:w.enum(["control","ownership","authority","goal_alignment","capital","compliance"]),description:w.string().trim().min(1).max(4000),status:w.enum(["open","mitigated","resolved","accepted"]),escalationRouteId:te,decisionEvidenceRefs:w.array(Ln)}).strict(),Qi=w.object({contractVersion:qe,id:te,topology:Wi,purposeSpecIds:w.array(te).min(1),delegatedAuthorities:w.array(ps),crossCompanyGrants:w.array(ds),sharedServiceMandates:w.array(ms),responsibilities:w.array(ls),complianceBoundaries:w.array(ys),boundaryExceptions:w.array(us),escalationRoutes:w.array(fs).min(1),conflicts:w.array(gs),provenance:Ze}).strict();import{LssmIdSchema as Is}from"@lssm/lib.lssm-os-spec";import{z as Zi}from"zod";var vt=Zi.object({contractVersion:qe,id:Is,governance:Qi,companyPurposes:Zi.array(Vi).min(1)}).strict();import{z as we}from"zod";var Cs=we.object({runId:we.string().min(1),harnessTarget:we.string().min(1).optional()}).strict(),hs=we.object({redactedFieldCount:we.number().int().min(0),redactedFieldPaths:we.array(we.string().min(1)).default([]),redactedBy:we.string().min(1).optional(),redactedAt:we.string().min(1).optional()}).strict(),cy=we.object({runRecordRef:Cs,redactionSummary:hs.optional(),derivedAt:we.string().min(1)}).strict();import{z as s}from"zod";var Rs=s.enum(["planned","claimed","policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]),Je=s.enum(["agent","job","integration","human","dry_run","manual_record"]),Xi=s.object({id:s.string().min(1),executionPlanId:s.string().min(1),workItemId:s.string().min(1),claimantPrincipalId:s.string().min(1),accountableOwnerPrincipalId:s.string().min(1),leaseId:s.string().min(1),leaseExpiresAt:s.string().min(1),status:s.enum(["active","released","expired","cancelled"]),scope:s.string().min(1),claimedAt:s.string().min(1),sourceRefs:s.array(q).default([])}),vs=s.object({key:s.string().min(1),dedupeKey:s.string().min(1),strategy:s.enum(["reject_duplicate","reuse_receipt","append_attempt"]),firstSeenAt:s.string().min(1),duplicateOfExecutionPlanId:s.string().min(1).optional()}),Ss=s.object({id:s.string().min(1),maxAttempts:s.number().int().min(1),backoff:s.enum(["none","fixed","exponential"]),deadLetterRef:E.optional()}),Gn=s.object({id:s.string().min(1),executionPlanId:s.string().min(1),workItemId:s.string().min(1),operation:s.string().min(1),requestedByPrincipalId:s.string().min(1),autonomyDecisionId:s.string().min(1),authorityEvidenceRefIds:s.array(s.string().min(1)).min(1),rbacEvidenceRefIds:s.array(s.string().min(1)).default([]),riskEvidenceRefIds:s.array(s.string().min(1)).default([]),budgetEvidenceRefIds:s.array(s.string().min(1)).default([]),toolEvidenceRefIds:s.array(s.string().min(1)).default([]),dryRunRefIds:s.array(s.string().min(1)).default([]),sourceRefs:s.array(q).default([])}),en=s.object({id:s.string().min(1),requestId:s.string().min(1),autonomyDecision:vn,authorityStatus:s.enum(["allowed","requires_approval","missing_principal","missing_owner","no_matching_grant"]),verdict:s.enum(["allow","dry_run_required","approval_required","reserved_human_only","denied"]),approvedDispatchLane:Je.optional(),requiredApprovalIds:s.array(s.string().min(1)).default([]),evidenceRefIds:s.array(s.string().min(1)).default([]),reasons:s.array(s.string().min(1)).min(1),decidedAt:s.string().min(1)}),Ji=s.object({id:s.string().min(1),executionPlanId:s.string().min(1),lane:Je,status:s.enum(["queued","dispatched","completed","failed","cancelled"]),targetRef:E,idempotencyKey:s.string().min(1),requiresReceipt:s.boolean().default(!0),dispatchedAt:s.string().min(1).optional(),metadata:L.default({})}),Os=q.extend({evidenceRole:s.enum(["source_observation","command_intent","policy_input","dry_run_output","operator_decision","outcome_observation"]),authorizationAuthority:s.literal(!1).default(!1),sourceTraceId:s.string().min(1).optional(),agenticInteractionPacketId:s.string().min(1).optional(),commandInboxItemId:s.string().min(1).optional(),asOf:s.string().min(1)}),xs=s.object({code:s.enum(["missing_policy_gate_decision","policy_verdict_denied","lane_not_authorized","missing_accountable_owner","missing_required_approval","missing_dry_run_proof","source_evidence_only","replay_not_deterministic"]),message:s.string().min(1),evidenceRefIds:s.array(s.string().min(1)).default([]),sourceEvidenceRefIds:s.array(s.string().min(1)).default([])}),Dn=s.object({id:s.string().min(1),executionPlanId:s.string().min(1),executionClaimId:s.string().min(1),dispatchId:s.string().min(1).optional(),policyGateRequestId:s.string().min(1),policyGateDecisionId:s.string().min(1),authorizedLane:Je,verdict:s.enum(["allow","dry_run_only","operator_approval_required","denied"]),accountableOwnerPrincipalId:s.string().min(1),authorizedByPrincipalId:s.string().min(1).optional(),requiredApprovalIds:s.array(s.string().min(1)).default([]),dryRunProofRefIds:s.array(s.string().min(1)).default([]),sourceEvidenceRefIds:s.array(s.string().min(1)).default([]),failure:xs.optional(),authorizedAt:s.string().min(1),asOf:s.string().min(1),expiresAt:s.string().min(1).optional(),metadata:L.default({})}).superRefine((e,n)=>{if(e.verdict==="dry_run_only"&&e.authorizedLane!=="dry_run")n.addIssue({code:s.ZodIssueCode.custom,message:"dry_run_only authorizations must use the dry_run lane.",path:["authorizedLane"]});if(e.verdict==="allow"&&e.authorizedLane!=="dry_run"&&e.dryRunProofRefIds.length===0)n.addIssue({code:s.ZodIssueCode.custom,message:"Non-dry-run dispatch authorization requires dry-run proof refs.",path:["dryRunProofRefIds"]})}),eo=s.object({id:s.string().min(1),executionPlanId:s.string().min(1),authorizationId:s.string().min(1).optional(),routeKind:s.enum(["approval_required","operator_review","dry_run_review","blocked"]),requiredPrincipalIds:s.array(s.string().min(1)).default([]),reason:s.string().min(1),sourceEvidenceRefIds:s.array(s.string().min(1)).default([]),createdAt:s.string().min(1),asOf:s.string().min(1)}),Tn=s.object({id:s.string().min(1),executionPlanId:s.string().min(1),policyGateRequestId:s.string().min(1),policyGateDecisionId:s.string().min(1).optional(),authorizationId:s.string().min(1).optional(),sourceEvidenceRefs:s.array(Os).default([]),decisionRefIds:s.array(s.string().min(1)).default([]),inputHash:s.string().min(1),outputHash:s.string().min(1),deterministic:s.literal(!0).default(!0),createdAt:s.string().min(1),asOf:s.string().min(1),metadata:L.default({})}),Vn=s.object({id:s.string().min(1),replayPacketId:s.string().min(1),executionPlanId:s.string().min(1),inputHash:s.string().min(1),expectedOutputHash:s.string().min(1),actualOutputHash:s.string().min(1).optional(),status:s.enum(["pass","fail","not_run"]),varianceReason:s.string().min(1).optional(),checkedAt:s.string().min(1).optional(),asOf:s.string().min(1),sourceEvidenceRefIds:s.array(s.string().min(1)).default([])}),no=s.object({id:s.string().min(1),executionPlanId:s.string().min(1),dispatchId:s.string().min(1).optional(),receiptIds:s.array(s.string().min(1)).default([]),outcomeReceiptId:s.string().min(1),objectiveIds:s.array(s.string().min(1)).default([]),reviewOutputPlanIds:s.array(s.string().min(1)).optional(),sourceEvidenceRefIds:s.array(s.string().min(1)).default([]),status:s.enum(["linked","partial","blocked"]),linkedAt:s.string().min(1),asOf:s.string().min(1)}),jn=s.object({id:s.string().min(1),workItemId:s.string().min(1),operation:s.string().min(1),lifecycleState:Rs,accountableOwnerPrincipalId:s.string().min(1),claimId:s.string().min(1).optional(),idempotency:vs,retryPolicy:Ss.optional(),policyGateRequestId:s.string().min(1),policyGateDecisionId:s.string().min(1).optional(),dispatchIds:s.array(s.string().min(1)).default([]),receiptIds:s.array(s.string().min(1)).default([]),outcomeReceiptIds:s.array(s.string().min(1)).default([]),checkpointRefIds:s.array(s.string().min(1)).default([]),replayRefIds:s.array(s.string().min(1)).default([]),cancellationRefIds:s.array(s.string().min(1)).default([]),sourceRefs:s.array(q).default([])}),to=s.object({id:s.string().min(1),executionPlanId:s.string().min(1),dispatchId:s.string().min(1),lane:Je,status:s.enum(["dry_run_completed","dispatched","succeeded","failed","cancelled","blocked"]),idempotencyKey:s.string().min(1),startedAt:s.string().min(1),completedAt:s.string().min(1).optional(),outputRef:E.optional(),errorSummary:s.string().min(1).optional(),evidenceRefIds:s.array(s.string().min(1)).default([])}),io=s.object({id:s.string().min(1),executionPlanId:s.string().min(1),workItemId:s.string().min(1),status:s.enum(["achieved","partial","no_change","regressed","unknown"]),summary:s.string().min(1),objectiveIds:s.array(s.string().min(1)).default([]),memorySnapshotIds:s.array(s.string().min(1)).default([]),cadenceIds:s.array(s.string().min(1)).default([]),receiptIds:s.array(s.string().min(1)).min(1),observedAt:s.string().min(1),sourceRefs:s.array(q).default([])});import{z as zn}from"zod";var Mn=zn.enum(["proposed","blocked","needs_approval","approved","rejected","escalated","executed"]),fy=["proposed","blocked","needs_approval","approved","rejected","escalated","executed"],gy=["executed","rejected","escalated"],Iy=zn.object({from:Mn,to:Mn,reason:zn.string().min(1).optional(),at:zn.string().min(1)});import{z as U}from"zod";var S=E.strict(),oo=U.object({policyGateRequestRef:S,actionPacketRef:S,routingRuleRef:S,workItemRef:S}).strict(),St=U.object({id:U.string().min(1),experimentRef:S,parentExperimentRef:S.optional(),changeSetRef:S,actionPacketRefs:U.array(S).min(1),executionPlanRef:S,executionRunRef:S,outcomeClaimRefs:U.array(S).min(1),approvalDecisionRefs:U.array(S).default([]),policyDecisionRefs:U.array(S).default([]),routingRuleCandidateRef:S,activationAuthorization:oo.optional(),exportReceiptRef:S,replayBundleRef:S,ownerRef:S,nextStepRef:S,followUpRef:S,costRefs:U.array(S).default([]),coverageRefs:U.array(S).default([]),freshnessRefs:U.array(S).default([]),contradictionRefs:U.array(S).default([]),attributionRefs:U.array(S).default([]),selectionExplanationRefs:U.array(S).default([]),evidenceRefs:U.array(S).min(1),unknownRefs:U.array(S).default([]),versionRef:S,reportRef:S}).strict(),vy=U.object({envelopeRef:S,branchExperimentRefs:U.array(S).min(1),outcomeClaimRefs:U.array(S).min(1),promotionDecisionRef:S,costRefs:U.array(S).default([]),evidenceRefs:U.array(S).min(1),unknownRefs:U.array(S).default([])}).strict(),Sy=U.object({envelopeRef:S,experimentRef:S,outcomeClaimRefs:U.array(S).min(1),routingRuleCandidateRef:S,approvalDecisionRef:S.optional(),actionPacketRef:S,changeSetRef:S.optional(),actionPacketRefs:U.array(S).default([]),executionPlanRef:S.optional(),executionRunRef:S.optional(),approvalDecisionRefs:U.array(S).default([]),policyDecisionRefs:U.array(S).default([]),activationAuthorization:oo.optional(),exportReceiptRef:S,replaySummaryRef:S,ownerRef:S,nextStepRef:S,followUpRef:S,costRefs:U.array(S).default([]),coverageRefs:U.array(S).default([]),freshnessRefs:U.array(S).default([]),contradictionRefs:U.array(S).default([]),attributionRefs:U.array(S).default([]),selectionExplanationRefs:U.array(S).default([]),evidenceRefs:U.array(S).min(1),unknownRefs:U.array(S).default([]),versionRef:S,reportRef:S.optional()}).strict();import{z as oe}from"zod";var ao=oe.object({id:oe.string().min(1),actorRef:Cn,rbacDecisionRef:hn,requestedNodeIds:oe.array(oe.string().min(1)).min(1),purpose:oe.string().min(1),sourceAclRefIds:oe.array(oe.string().min(1)).min(1),policyRefIds:oe.array(oe.string().min(1)).default([]),evidenceRefIds:oe.array(oe.string().min(1)).min(1)}),ro=oe.object({id:oe.string().min(1),requestId:oe.string().min(1),verdict:oe.enum(["allow","deny","redacted"]),visibleNodeIds:oe.array(oe.string().min(1)).default([]),redactedNodeIds:oe.array(oe.string().min(1)).default([]),redactedFieldRefs:oe.array(oe.string().min(1)).default([]),failClosed:oe.boolean().default(!0),decidedAt:oe.string().min(1),evidenceRefIds:oe.array(oe.string().min(1)).min(1),reasons:oe.array(oe.string().min(1)).min(1)});import{z as pe}from"zod";var so=pe.object({id:pe.string().min(1),cursor:pe.string().min(1),sequence:pe.number().int().nonnegative(),lastEventId:pe.string().min(1),replayRef:pe.string().min(1)}),co=pe.object({id:pe.string().min(1),snapshotId:pe.string().min(1),operation:pe.enum(["node_upsert","edge_upsert","tombstone","conflict_recorded","permission_projection","runbook_readiness"]),sequence:pe.number().int().nonnegative(),idempotencyKey:pe.string().min(1),roomRef:rn,replayCursor:so,nodeId:pe.string().min(1).optional(),edgeId:pe.string().min(1).optional(),occurredAt:pe.string().min(1),evidenceRefIds:pe.array(pe.string().min(1)).min(1)}),ky=pe.object({id:pe.string().min(1),roomRef:rn,snapshotId:pe.string().min(1),cursor:so,eventIds:pe.array(pe.string().min(1)).default([]),evidenceRefIds:pe.array(pe.string().min(1)).min(1)});import{z as me}from"zod";var po=me.object({id:me.string().min(1),leftNodeId:me.string().min(1),rightNodeId:me.string().min(1),entityKind:Xn,confidence:me.number().min(0).max(1),reasonCodes:me.array(me.string().min(1)).min(1),evidenceRefIds:me.array(me.string().min(1)).min(1),reviewState:me.enum(["candidate","review_required","approved","rejected"])}),mo=me.object({id:me.string().min(1),candidateId:me.string().min(1),decision:me.enum(["approved","rejected","superseded"]),canonicalNodeId:me.string().min(1).optional(),reviewerPrincipalId:me.string().min(1),reviewedAt:me.string().min(1),reviewEvidenceRefIds:me.array(me.string().min(1)).min(1),destructiveMerge:me.boolean().default(!1),sourceMutationAllowed:me.literal(!1).default(!1)});import{z as G}from"zod";import{z as Ge}from"zod";var Ot=Ge.enum(["none","informational","material","blocking"]),lo=Ge.object({id:Ge.string().min(1),question:Ge.string().min(1),blockingLevel:Ot,relatedRefs:Ge.array(E).default([]),evidenceRefIds:Ge.array(Ge.string().min(1)).default([]),createdAt:Ge.string().min(1),resolutionPath:Ge.string().min(1).optional(),resolvedByRef:E.optional(),metadata:L.default({})});var bs=G.enum(["follow_up","approval","handoff","review","create_task","no_action"]),_s=G.enum(["draft","policy_evaluated","approval_pending","ready","blocked","approved","rejected","exported","closed"]),Es=G.enum(["not_required","required","pending","approved","rejected","edited","ignored","escalated"]),As=G.enum(["not_requested","approved_not_sent","queued","exported","failed","cancelled"]),ks=G.enum(["not_recorded","recorded","verified","mismatch","not_replayable"]),ws=G.object({id:G.string().min(1),motionKind:bs,rationale:G.string().min(1),confidence:G.number().min(0).max(1),ruleRefs:G.array(E).default([]),evidenceRefIds:G.array(G.string().min(1)).default([]),unknownRefs:G.array(E).default([]),decidedByRef:E,decidedAt:G.string().min(1)}),Ns=G.object({id:G.string().min(1),title:G.string().min(1),summary:G.string().min(1),governedState:Mn,workItemRef:E.optional(),executionPlanRef:E.optional(),evidenceRefIds:G.array(G.string().min(1)).default([])}),Ps=G.object({ownerRef:E,nextStep:G.string().min(1),dueAt:G.string().min(1).optional()}),$y=G.object({id:G.string().min(1),createdAt:G.string().min(1),state:_s,signalRef:E,workflowRunRef:E.optional(),entityRefs:G.array(E).default([]),sourceRefs:G.array(q).default([]),sourceRecordRefs:G.array(Zn).default([]),graphNodes:G.array(Jn).default([]),graphEdges:G.array(et).default([]),brainEntryRefs:G.array(tt).default([]),brainEditionRef:Sn.optional(),motionDecision:ws,actionDrafts:G.array(Ns).default([]),actionRefs:G.array(E).default([]),executionPlanRefs:G.array(jn).default([]),policyGateRequestRefs:G.array(Gn).default([]),policyGateDecisionRefs:G.array(en).default([]),dispatchAuthorizationRefs:G.array(Dn).default([]),policyReplayRefs:G.array(Tn).default([]),replayDeterminismRefs:G.array(Vn).default([]),evidenceRefIds:G.array(G.string().min(1)).default([]),unknowns:G.array(lo).default([]),approvalState:Es,exportState:As.default("not_requested"),replayState:ks.default("not_recorded"),ownerNextStep:Ps.optional(),metadata:L.default({})});import{canonicalJsonString as Ls}from"@lssm/lib.contracts-spec/rich-reference/canonical-serializer";import{z as _e}from"zod";var Gs=_e.enum(["knowledge","document","task","review","communication","manual"]),Ds=_e.enum(["none","read_only","dry_run","internal_write","external_write"]),Ts=_e.object({id:_e.string().min(1),adapterKind:Gs,capabilities:_e.array(_e.string().min(1)).min(1),inputSchemaRef:E,outputSchemaRef:E,sideEffectClass:Ds,authRequirement:_e.enum(["none","actor_ref","delegated_authority_ref"]),dryRunSupported:_e.boolean(),approvalRequirement:_e.enum(["not_required","required","reserved_human_only"]),createdAt:_e.string().min(1),metadata:L.default({})}).superRefine((e,n)=>{if((e.sideEffectClass==="internal_write"||e.sideEffectClass==="external_write")&&e.approvalRequirement==="not_required")n.addIssue({code:_e.ZodIssueCode.custom,message:"Write-capable adapters must declare approval requirements.",path:["approvalRequirement"]});if(e.sideEffectClass==="dry_run"&&!e.dryRunSupported)n.addIssue({code:_e.ZodIssueCode.custom,message:"Dry-run adapters must declare dryRunSupported.",path:["dryRunSupported"]})});async function Wy(e){let n=Ts.parse(e),t=new TextEncoder().encode(Ls(n)),i=await crypto.subtle.digest("SHA-256",t);return`sha256:${Array.from(new Uint8Array(i),(o)=>o.toString(16).padStart(2,"0")).join("")}`}import{z as Q}from"zod";var Vs=Q.enum(["motionKind","signalType","riskLevel","approvalState","unknownBlockingLevel","adapterKind","companyBrainVersion","tagRef","workflowRefId","entityType"]),js=Q.enum(["equals","in","exists","includes"]),zs=Q.union([Q.string().min(1),Q.boolean(),Q.array(Q.string().min(1)).min(1)]),Ms=/(?:[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}|\+?\d[\d .()\-]{7,}\d|(?:api[_-]?key|secret|token|password|bearer)[:=\s]+\S+)/i;function yo(e){if(typeof e==="string")return Ms.test(e);if(Array.isArray(e))return e.some((n)=>yo(n));return!1}var qs=Q.object({field:Vs,operator:js,value:zs.optional()}).superRefine((e,n)=>{if(e.operator!=="exists"&&e.value===void 0)n.addIssue({code:Q.ZodIssueCode.custom,message:"Non-exists routing predicates require a value.",path:["value"]});if(e.operator==="exists"&&e.value!==void 0)n.addIssue({code:Q.ZodIssueCode.custom,message:"Exists routing predicates must not include a value.",path:["value"]});if(e.operator==="in"&&!Array.isArray(e.value))n.addIssue({code:Q.ZodIssueCode.custom,message:"In routing predicates require an array value.",path:["value"]});if(yo(e.value))n.addIssue({code:Q.ZodIssueCode.custom,message:"Routing predicate values must not contain PII or secrets.",path:["value"]})}),Bs=Q.object({workflowRefId:Q.string().min(1).optional(),companyBrainVersion:Q.string().min(1).optional(),entityTypes:Q.array(Q.string().min(1)).default([]),global:Q.boolean().default(!1)}),Fs=Q.object({motionKind:Q.enum(["follow_up","approval","handoff","review","create_task","no_action"]).optional(),requiredApprovalState:Q.enum(["not_required","required","pending","approved","rejected","escalated"]).optional(),targetRef:E.optional(),reason:Q.string().min(1)}),eu=Q.object({id:Q.string().min(1),scope:Bs,predicates:Q.array(qs).min(1),outcome:Fs,provenanceRef:E,status:Q.enum(["candidate","active","retired","rejected"]),confidence:Q.number().min(0).max(1),createdAt:Q.string().min(1),expiresAt:Q.string().min(1).optional(),reviewRequired:Q.boolean().default(!0),unknownBlockingLevel:Ot.optional(),metadata:L.default({})}).superRefine((e,n)=>{if(e.status==="active"&&e.reviewRequired)n.addIssue({code:Q.ZodIssueCode.custom,message:"Active routing rules require completed human review.",path:["reviewRequired"]});if(!e.scope.global&&!e.scope.workflowRefId&&e.scope.entityTypes.length===0)n.addIssue({code:Q.ZodIssueCode.custom,message:"Routing rules require workflow, entity, or reviewed global scope.",path:["scope"]})});import{z as x}from"zod";var xt=x.enum(["managed","byok"]),$s=x.enum(["provider-neutral","provider-gated"]),Us=x.enum(["additive","compatible-behavior","migration-required","breaking"]),Ks=x.enum(["package-export","app-entrypoint","api-route","worker-job","websocket-event","workflow-contract","replay-packet","evidence-receipt","health-contract","docs-release"]),nn=x.enum(["healthy","degraded","unavailable"]),Ys=x.enum(["proposed","approved","denied","blocked"]),pu=x.object({id:x.string().min(1),label:x.string().min(1),ownershipMode:xt,custodyBoundary:x.enum(["managed_platform","tenant_owned"]),redactedPreview:x.string().min(1),secretMaterialAvailable:x.literal(!1).default(!1),metadata:L.default({})}),du=x.object({tenantId:x.string().min(1),displayName:x.string().min(1),operatorRoleIds:x.array(x.string().min(1)).min(1),integrationOwnershipModes:x.array(xt).min(1),metadata:L.default({})}),Hs=x.object({id:x.string().min(1),kind:Ks,packageName:x.string().min(1),sourcePath:x.string().min(1),contractSchema:x.string().min(1),compatibilityIntent:Us,providerMode:$s,evidenceRefs:x.array(x.string().min(1)).min(1),metadata:L.default({})}),Ws=x.object({status:nn,api:nn,worker:nn,websocket:nn,replay:nn,evidence:nn,degradedReasons:x.array(x.string().min(1)).default([]),checkedAt:x.string().min(1)}).superRefine((e,n)=>{let i=[e.worker,e.websocket,e.replay,e.evidence].some((o)=>o!=="healthy");if(i&&e.status==="healthy")n.addIssue({code:x.ZodIssueCode.custom,message:"Managed CompanyOS health cannot be green while worker, WebSocket, replay, or evidence state is degraded.",path:["status"]});if(i&&e.degradedReasons.length===0)n.addIssue({code:x.ZodIssueCode.custom,message:"Managed CompanyOS degraded health requires visible degraded reasons.",path:["degradedReasons"]})}),mu=x.object({id:x.string().min(1),tenantId:x.string().min(1),correlationId:x.string().min(1),integrationOwnershipMode:xt,approvalState:Ys,policyGateDecisionId:x.string().min(1),workerJobId:x.string().min(1),websocketEventId:x.string().min(1),replayPacketId:x.string().min(1),evidenceReceiptId:x.string().min(1),sourceRefs:x.array(q).default([]),metadata:L.default({})}),lu=x.object({id:x.string().min(1),type:x.enum(["managed-companyos.job.accepted","managed-companyos.job.progress","managed-companyos.job.completed","managed-companyos.job.failed","managed-companyos.health.degraded"]),tenantId:x.string().min(1),jobId:x.string().min(1),correlationId:x.string().min(1),health:Ws.optional(),occurredAt:x.string().min(1),metadata:L.default({})}),yu=x.object({id:x.string().min(1),tenantId:x.string().min(1),correlationId:x.string().min(1),workflowContractId:x.string().min(1),replayPacketId:x.string().min(1),sourceRefIds:x.array(x.string().min(1)).default([]),policyDecisionCount:x.number().int().min(1),approvalTrailCount:x.number().int().min(0),replayEventCount:x.number().int().min(1),redactionCount:x.number().int().min(0),receiptHash:x.string().min(1),issuedAt:x.string().min(1),metadata:L.default({})}),Qs=[{id:"companyos-managed-tenant-profile-contract",kind:"package-export",packageName:"@lssm/lib.companyos-spec",sourcePath:"packages/libs/companyos-spec/src/types/managed-companyos.ts",contractSchema:"CompanyOsManagedTenantProfileSchema",compatibilityIntent:"additive",providerMode:"provider-neutral",evidenceRefs:["packages/libs/companyos-spec/src/companyos-spec.public-surface.test.ts"],metadata:{}},{id:"companyos-managed-credential-ref-contract",kind:"package-export",packageName:"@lssm/lib.companyos-spec",sourcePath:"packages/libs/companyos-spec/src/types/managed-companyos.ts",contractSchema:"CompanyOsManagedCredentialRefSchema",compatibilityIntent:"additive",providerMode:"provider-gated",evidenceRefs:["packages/libs/companyos-spec/src/companyos-spec.public-surface.test.ts"],metadata:{}},{id:"companyos-managed-workflow-correlation-contract",kind:"workflow-contract",packageName:"@lssm/lib.companyos-spec",sourcePath:"packages/libs/companyos-spec/src/types/managed-companyos.ts",contractSchema:"CompanyOsManagedWorkflowContractSchema",compatibilityIntent:"additive",providerMode:"provider-neutral",evidenceRefs:["packages/libs/companyos-spec/src/companyos-spec.public-surface.test.ts"],metadata:{}},{id:"companyos-managed-websocket-event-contract",kind:"websocket-event",packageName:"@lssm/lib.companyos-spec",sourcePath:"packages/libs/companyos-spec/src/types/managed-companyos.ts",contractSchema:"CompanyOsManagedWebSocketEventSchema",compatibilityIntent:"additive",providerMode:"provider-neutral",evidenceRefs:["packages/libs/companyos-spec/src/companyos-spec.public-surface.test.ts"],metadata:{}},{id:"companyos-managed-health-contract",kind:"health-contract",packageName:"@lssm/lib.companyos-spec",sourcePath:"packages/libs/companyos-spec/src/types/managed-companyos.ts",contractSchema:"CompanyOsManagedRuntimeHealthSchema",compatibilityIntent:"additive",providerMode:"provider-neutral",evidenceRefs:["packages/libs/companyos-spec/src/companyos-spec.public-surface.test.ts"],metadata:{}},{id:"companyos-managed-evidence-receipt-contract",kind:"evidence-receipt",packageName:"@lssm/lib.companyos-spec",sourcePath:"packages/libs/companyos-spec/src/types/managed-companyos.ts",contractSchema:"CompanyOsManagedEvidenceReceiptSchema",compatibilityIntent:"additive",providerMode:"provider-neutral",evidenceRefs:["packages/libs/companyos-spec/src/companyos-spec.public-surface.test.ts"],metadata:{}},{id:"companyos-managed-package-export",kind:"package-export",packageName:"@lssm/lib.companyos-spec",sourcePath:"packages/libs/companyos-spec/package.json",contractSchema:"@lssm/lib.companyos-spec/types/managed-companyos",compatibilityIntent:"additive",providerMode:"provider-neutral",evidenceRefs:["packages/libs/companyos-spec/package.json","docs/managed-companyos-s0-contract-inventory.md"],metadata:{}},{id:"companyos-managed-docs-release",kind:"docs-release",packageName:"@lssm/lib.companyos-spec",sourcePath:".changeset/managed-companyos-contract-inventory.release.yaml",contractSchema:"ManagedCompanyOsContractInventoryReleaseCapsule",compatibilityIntent:"additive",providerMode:"provider-neutral",evidenceRefs:[".changeset/managed-companyos-contract-inventory.release.yaml",".contractspec/connect/managed-companyos-s0-inventory-20260515T175000Z.md"],metadata:{}}];function uu(e=Qs){return x.array(Hs).parse(e)}import{z as F}from"zod";var uo=F.object({companyKey:F.string().min(1),unitId:F.string().min(1).optional(),customerAccountId:F.string().min(1).optional(),projectId:F.string().min(1).optional()}),Zs=F.object({previousRefId:F.string().min(1),reason:F.string().min(1),supersededAt:F.string().min(1)}),fo={id:F.string().min(1),title:F.string().min(1),version:F.string().min(1),ownerPrincipalId:F.string().min(1),validFrom:F.string().min(1),validUntil:F.string().min(1).optional(),freshness:F.enum(["fresh","stale","unknown"]),scope:uo,sourceRefs:F.array(q).min(1),supersedes:F.array(Zs).default([])},go=F.object({...fo,kind:F.literal("fact"),statement:F.string().min(1)}),Io=F.object({...fo,kind:F.enum(["procedure","policy"]),steps:F.array(F.string().min(1)).min(1)}),Co=F.object({id:F.string().min(1),capturedAt:F.string().min(1),scope:uo,factIds:F.array(F.string().min(1)).default([]),procedureIds:F.array(F.string().min(1)).default([]),decisionIds:F.array(F.string().min(1)).default([]),compactionSummary:F.string().min(1)});import{z as D}from"zod";var ho=D.object({id:D.string().min(1),title:D.string().min(1),ownerPrincipalId:D.string().min(1),horizon:D.enum(["weekly","monthly","quarterly","annual"]),status:D.enum(["active","at_risk","achieved","paused"]),metricIds:D.array(D.string().min(1)).default([]),workItemIds:D.array(D.string().min(1)).default([]),sourceRefs:D.array(q).default([])}),Ro=D.object({id:D.string().min(1),objectiveId:D.string().min(1),name:D.string().min(1),ownerPrincipalId:D.string().min(1),unit:D.string().min(1),targetValue:D.number(),currentValue:D.number().optional(),direction:D.enum(["increase","decrease","maintain"]),sourceRefs:D.array(q).default([])}),vo=D.object({id:D.string().min(1),metricId:D.string().min(1),observedAt:D.string().min(1),value:D.number(),sourceRefs:D.array(q).default([])}),So=D.object({id:D.string().min(1),objectiveId:D.string().min(1),observedAt:D.string().min(1),summary:D.string().min(1),status:D.enum(["improved","flat","regressed","unknown"]),relatedWorkItemIds:D.array(D.string().min(1)).default([])}),Oo=D.object({id:D.string().min(1),objectiveId:D.string().min(1),metricId:D.string().min(1).optional(),severity:D.enum(["low","medium","high"]),summary:D.string().min(1),recommendedActionRefIds:D.array(D.string().min(1)).default([])});import{z as Z}from"zod";var Xs=Z.enum(["landing","home","dashboard","communication-inbox","thread-detail","evidence-map","companyos-work-graph","policy-autonomy-gate","execution-dry-run-console","audit-feedback-loop","starter-kit-guide"]),Js=Z.object({screen:Xs,label:Z.string().min(1),href:Z.string().startsWith("#"),description:Z.string().min(1)}),ec=Z.object({communicationThreadId:Z.string().min(1),communicationActionId:Z.string().min(1),companyOsWorkItemId:Z.string().min(1),companyOsExecutionPlanId:Z.string().min(1),auditEventKey:Z.string().min(1)}),nc=Z.object({id:Z.string().min(1),label:Z.string().min(1),owner:Z.enum(["communication-os","companyos","operator"]),status:Z.enum(["observed","mapped","gated","dry_run_completed","audited"]),evidenceRefIds:Z.array(Z.string().min(1)).min(1)}),tc=Z.object({id:Z.string().min(1),executionPlanId:Z.string().min(1),lane:Je.extract(["dry_run"]),outboundEffects:Z.literal(!1),filesystemMutation:Z.literal(!1),networkRequired:Z.literal(!1),status:Z.enum(["ready","completed","blocked"]),summary:Z.string().min(1)}),xu=Z.object({id:Z.string().min(1),version:Z.string().min(1),navigation:Z.array(Js).min(8),stages:Z.array(nc).min(4),dryRun:tc,evidenceLinks:Z.array(ec).min(1)});import{z as Ce}from"zod";import{z as K}from"zod";var ic=K.object({id:K.string().min(1),title:K.string().min(1),instruction:K.string().min(1),evidenceRefIds:K.array(K.string().min(1)).min(1)}),xo=K.object({id:K.string().min(1),nodeId:K.string().min(1),ownerPrincipalId:K.string().min(1),policyGateRequestId:K.string().min(1),steps:K.array(ic).min(1),freshness:sn,requiredPermissionDecisionIds:K.array(K.string().min(1)).min(1),evidenceRefIds:K.array(K.string().min(1)).min(1)}),bt=K.object({id:K.string().min(1),procedureId:K.string().min(1),status:K.enum(["ready","blocked","review_required","stale","unauthorized","conflicted"]),evaluatedAt:K.string().min(1),policyGateDecisionId:K.string().min(1),permissionDecisionId:K.string().min(1),blockedReasons:K.array(K.string().min(1)).default([]),evidenceRefIds:K.array(K.string().min(1)).min(1)}),bo=K.object({id:K.string().min(1),procedureId:K.string().min(1),readinessId:K.string().min(1),expectedStatus:bt.shape.status,assertion:K.string().min(1),evidenceRefIds:K.array(K.string().min(1)).min(1)});var _o=Ce.object({id:Ce.string().min(1),graphSnapshot:Ht,identityCandidates:Ce.array(po).default([]),identityLinkDecisions:Ce.array(mo).default([]),accessRequests:Ce.array(ao).default([]),accessDecisions:Ce.array(ro).default([]),realtimeEvents:Ce.array(co).default([]),runbookProcedures:Ce.array(xo).default([]),runbookReadiness:Ce.array(bt).default([]),runbookConformanceCases:Ce.array(bo).default([]),compiledAgenticArtifacts:Ce.array(Rn).default([]),agenticReadinessChecks:Ce.array(Wt).default([]),agenticConformanceEvidence:Ce.array(Qt).default([]),agenticCorrectionOutcomeReceipts:Ce.array(Zt).default([]),evidenceRefIds:Ce.array(Ce.string().min(1)).min(1),noProductionWriteAssertion:Ce.literal(!0)});import{claimEvidenceSchema as Eo,claimPortableRefSchema as qn,outcomeClaimSchema as oc}from"@lssm/lib.contracts-spec/outcome-claims";import{z as Y}from"zod";var tn=Y.string().datetime({offset:!0}),ac="companyos.outcome-ingestion.v1",rc=Y.enum(["reply","call","meeting","crm_activity","deal_outcome"]),sc=Y.enum(["positive","negative","neutral","unknown"]),cc=Y.object({id:Y.string().min(1),reason:Y.string().min(1),reviewer:qn,evidenceRefs:Y.array(Eo).min(1),correctedAt:tn}).strict(),pc=Y.object({id:Y.string().min(1),kind:rc,disposition:sc,label:Y.string().min(1),subjectRefs:Y.array(qn).min(1),sourceRefs:Y.array(qn).min(1),evidenceRefs:Y.array(Eo).min(1),confidence:Y.number().min(0).max(1),occurredAt:tn,recordedAt:tn,supersedesObservationIds:Y.array(Y.string().min(1)).default([]),supersededByObservationIds:Y.array(Y.string().min(1)).default([]),correction:cc.optional(),unknownRefs:Y.array(S).default([])}).strict().superRefine((e,n)=>{if(e.supersedesObservationIds.includes(e.id))n.addIssue({code:"custom",path:["supersedesObservationIds"],message:"an outcome observation cannot supersede itself"});if(e.supersededByObservationIds.includes(e.id))n.addIssue({code:"custom",path:["supersededByObservationIds"],message:"an outcome observation cannot be superseded by itself"});if(e.correction&&e.supersedesObservationIds.length===0)n.addIssue({code:"custom",path:["correction"],message:"a correction must supersede at least one observation"})}),dc=Y.object({id:Y.string().min(1),attributionRef:qn,startsAt:tn,endsAt:tn,priority:Y.number().int().default(0),subjectRefIds:Y.array(Y.string().min(1)).default([]),evidenceRefIds:Y.array(Y.string().min(1)).min(1)}).strict().refine((e)=>Date.parse(e.startsAt)<Date.parse(e.endsAt),{path:["endsAt"],message:"endsAt must be later than startsAt"}),Mu=Y.object({id:Y.string().min(1),schemaVersion:Y.literal(ac),governanceEnvelopeRef:S,learningEnvelopeRef:S,observations:Y.array(pc).min(1),attributionWindows:Y.array(dc).default([]),replayRef:S,createdAt:tn,noProviderMutation:Y.literal(!0)}).strict(),qu=Y.object({observationRef:S,attributionWindowRefs:Y.array(S).default([]),outcomeClaim:oc}).strict();import{z as H}from"zod";var $e=H.object({id:H.string().min(1),kind:H.string().min(1),status:H.enum(["satisfied","missing","failed","requires_approval"]),evidenceRefIds:H.array(H.string().min(1)).default([])}),mc=$e.extend({kind:H.literal("authority_evaluation")}),lc=$e.extend({kind:H.literal("rbac_evaluation")}),yc=$e.extend({kind:H.literal("risk_evaluation"),riskLevel:H.enum(["low","medium","high","critical"])}),uc=$e.extend({kind:H.literal("budget_evaluation"),budgetImpacting:H.boolean().default(!1)}),fc=$e.extend({kind:H.literal("tool_scope_evaluation"),toolExecution:H.boolean().default(!1)}),gc=$e.extend({kind:H.literal("dry_run_proof")}),Ic=$e.extend({kind:H.literal("approval_workflow")}),Cc=H.object({id:H.string().min(1),kind:H.literal("assurance_packet"),packetId:H.string().min(1)}),hc=H.object({id:H.string().min(1),mode:H.enum(["deny","operator_review","dry_run_only","manual_record"]),reason:H.string().min(1)}),Rc=H.object({id:H.string().min(1),decisionId:H.string().min(1),summary:H.string().min(1),blockedReasons:H.array(H.string().min(1)).default([]),fallbackReason:H.string().min(1).optional()}),Ao=H.object({id:H.string().min(1),policyGateDecision:en,authorityRef:mc,rbacRef:lc,riskRef:yc,budgetRef:uc,toolScopeRef:fc,dryRunProofRef:gc.optional(),approvalWorkflowRef:Ic.optional(),fallback:hc.optional(),explanation:Rc,assurancePacketRef:Cc});import{z as xe}from"zod";var ko=xe.string().regex(/^sha256:[a-f0-9]{64}$/),_t=xe.object({id:xe.string().min(1),providerDeclaration:xe.object({id:xe.string().min(1),version:xe.string().regex(/^\d+\.\d+\.\d+$/),fingerprint:ko}),adapterContract:xe.object({id:xe.string().min(1),fingerprint:ko,inputSchemaRef:E,outputSchemaRef:E}),normalizationContractRef:E,scope:xe.object({tenantRef:xe.string().min(1),workflowRef:xe.string().min(1),policyRefs:xe.array(xe.string().min(1)).min(1)})});import{z as ae}from"zod";var wo=ae.object({id:ae.string().min(1),title:ae.string().min(1),targetContractRef:ae.string().min(1),sourceFeedbackItemIds:ae.array(ae.string().min(1)).min(1)}),No=ae.object({id:ae.string().min(1),kind:jt,title:ae.string().min(1),priority:ae.enum(["low","medium","high"]),accountableOwnerPrincipalId:ae.string().min(1),relatedRefIds:ae.array(ae.string().min(1)).default([]),requiredApprovalIds:ae.array(ae.string().min(1)).default([])}),Po=ae.object({id:ae.string().min(1),cadence:ae.enum(["daily","weekly","monthly"]),summary:ae.string().min(1),feedbackItemIds:ae.array(ae.string().min(1)).default([]),commitmentIdsAtRisk:ae.array(ae.string().min(1)).default([]),workItemIds:ae.array(ae.string().min(1)).default([]),recommendedActionIds:ae.array(ae.string().min(1)).default([])});import{z as B}from"zod";var Bn=B.string().datetime({offset:!0}),vc=B.discriminatedUnion("kind",[B.object({kind:B.literal("string"),value:B.string()}),B.object({kind:B.literal("number"),value:B.number().finite()}),B.object({kind:B.literal("boolean"),value:B.boolean()}),B.object({kind:B.literal("reference"),value:E})]),Sc=B.object({id:B.string().min(1),subjectRef:E,predicate:B.string().min(1),value:vc,canonicalEntityRefs:B.array(E).default([]),sourceRefs:B.array(q).min(1),evidenceRefIds:B.array(B.string().min(1)).min(1),reviewDecisionRefIds:B.array(B.string().min(1)).default([]),observedAt:Bn,validFrom:Bn,validTo:Bn.optional(),recordedAt:Bn,supersedesClaimIds:B.array(B.string().min(1)).default([]),supersededByClaimIds:B.array(B.string().min(1)).default([]),contradictionGroupRef:B.string().min(1).optional(),conflictRefIds:B.array(B.string().min(1)).default([]),schemaRef:B.string().min(1),version:B.string().min(1),contentFingerprint:B.string().min(1),replayRef:B.string().min(1).optional(),derivedConfidence:B.number().min(0).max(1).optional(),derivedFreshness:B.enum(["fresh","stale","unknown"]).optional(),metadata:L.default({})}).superRefine((e,n)=>{if(e.validTo&&Date.parse(e.validFrom)>=Date.parse(e.validTo))n.addIssue({code:"custom",path:["validTo"],message:"validTo must be later than validFrom for [validFrom, validTo)"});if(e.supersedesClaimIds.includes(e.id))n.addIssue({code:"custom",path:["supersedesClaimIds"],message:"a temporal assertion cannot supersede itself"});if(e.supersededByClaimIds.includes(e.id))n.addIssue({code:"custom",path:["supersededByClaimIds"],message:"a temporal assertion cannot be superseded by itself"})}),Et=B.object({schemaVersion:B.literal("companyos.temporal-assertions.v1"),assertions:B.array(Sc).min(1)});var nf="companyos.temporal-store.v1",tf="companyos.temporal-store.v1|append,commit,query,erasure-tombstone,conflict,recoverable-fault,port|tenant-bound,opaque-version-token,optimistic-concurrency,idempotency,evidence-outbox,immutable-history",of="sha256:4314fca38c29b0ce613089493f8817fee20c6101b634377ee0e0ca32802f84ac";function af(e){let n=String(e);if(!/^(0|[1-9]\d*)$/.test(n))throw Error("CompanyOS temporal store version must be a non-negative integer");return n}import{z as T}from"zod";var At=T.string().datetime({offset:!0}),Fn="companyos.tenant-governance-envelope.v1",pf="companyos.tenant-governance-envelope.v1|scope,subjectRef,authority,dataGovernance,idempotency,evidenceReplayRefs,governanceState,createdAt,metadata|server-derived-authority,tenant-workspace-subject-idempotency,evidence-replay-required",df="sha256:d6f5fd6944c14279351120a212b3580afc4e3781c6ecaea1e89d6d498dc740cf",Lo=["companyos.tenant-governance-envelope.v0"],Oc=T.enum(["active","migration_required","quarantined"]),xc=T.object({tenantId:T.string().min(1),workspaceId:T.string().min(1)}),bc=T.object({derivation:T.literal("server_derived"),actorPrincipalId:T.string().min(1),accountableOwnerPrincipalId:T.string().min(1),authorityEvaluationRefId:T.string().min(1),rbacDecisionRefId:T.string().min(1)}),_c=T.object({residencyRegion:T.string().min(1),residencyEvidenceRefIds:T.array(T.string().min(1)).min(1),providerResidencyVerified:T.boolean(),retentionPolicyRefId:T.string().min(1),retainUntil:At,legalBasis:T.enum(["contract","legal_obligation","legitimate_interest","consent"]),consentRefId:T.string().min(1).optional()}).superRefine((e,n)=>{if(e.legalBasis==="consent"&&!e.consentRefId)n.addIssue({code:"custom",path:["consentRefId"],message:"consent legal basis requires a consent reference"})}),Ec=T.object({key:T.string().min(1),scope:T.literal("tenant_workspace_subject"),tenantId:T.string().min(1),workspaceId:T.string().min(1),subjectRefId:T.string().min(1)}),Ac=T.object({evidenceReceiptIds:T.array(T.string().min(1)).min(1),replayPacketIds:T.array(T.string().min(1)).min(1)}),Go=T.object({id:T.string().min(1),schemaVersion:T.literal(Fn),policyVersion:T.string().min(1),scope:xc,subjectRef:E,authority:bc,dataGovernance:_c,idempotency:Ec,evidenceReplayRefs:Ac,governanceState:T.literal("active"),createdAt:At,metadata:L.default({})}).superRefine((e,n)=>{let t={tenantId:e.scope.tenantId,workspaceId:e.scope.workspaceId,subjectRefId:e.subjectRef.id};for(let[i,o]of Object.entries(t))if(e.idempotency[i]!==o)n.addIssue({code:"custom",path:["idempotency",i],message:`${i} must match the governed envelope scope`})}),$n=T.object({envelopeId:T.string().min(1).optional(),sourceSchemaVersion:T.string().min(1).optional(),targetSchemaVersion:T.literal(Fn),state:Oc,reasonCodes:T.array(T.string().min(1)).min(1),migrationPerformed:T.literal(!1),persistenceMutationAllowed:T.literal(!1),assessedAt:At});import{z as on}from"zod";import{WorkObjectRefSchema as kc}from"@lssm/lib.work-spec";import{z as re}from"zod";var wc=re.object({id:re.string().min(1),summary:re.string().min(1),customerAccountId:re.string().min(1),productArea:re.string().min(1),impact:re.enum(["low","medium","high"]),sourceRefs:re.array(q).min(1)}),Nc=re.object({id:re.string().min(1),summary:re.string().min(1),customerAccountId:re.string().min(1),dueDate:re.string().min(1),accountableOwnerPrincipalId:re.string().min(1),sourceRefs:re.array(q).min(1)}),Pc=re.object({id:re.string().min(1),summary:re.string().min(1),status:re.enum(["candidate","approved","rejected"]),ownerPrincipalId:re.string().min(1),sourceRefs:re.array(q).default([])}),Do=re.object({id:re.string().min(1),feedbackItems:re.array(wc).default([]),commitments:re.array(Nc).default([]),decisions:re.array(Pc).default([]),workRefs:re.array(kc).default([])});var un=on.object({company:ri,authority:Xt,autonomyPolicy:Jt,connectors:on.array(ji).min(1),brain:ti,workGraph:Do,proposalLinks:on.array(wo).default([]),agentActionProposals:on.array(ei).default([]),autonomyDecisions:on.array(vn).default([]),operatorInbox:on.array(No).default([]),operatingReview:Po});import{z as X}from"zod";var kt=un.extend({objectives:X.array(ho).min(1),metrics:X.array(Ro).default([]),metricObservations:X.array(vo).default([]),objectiveOutcomes:X.array(So).default([]),objectiveDriftSignals:X.array(Oo).default([]),memorySnapshots:X.array(Co).min(1),memoryFacts:X.array(go).default([]),memoryProcedures:X.array(Io).default([]),cadences:X.array(ii).min(1),reviewInputSets:X.array(oi).default([]),reviewOutputPlans:X.array(ai).default([]),agentRoles:X.array(Bt).min(1),agentTeams:X.array(Ft).default([]),delegationRules:X.array($t).default([]),handoffPolicies:X.array(Ut).default([]),conflictResolutionPolicies:X.array(Kt).default([]),toolAssignments:X.array(qt).default([]),agentNativeOperations:X.array(zt).default([]),agentToolDescriptors:X.array(Mt).default([]),surfaceProfiles:X.array(Hi).default([]),executionPlans:X.array(jn).default([]),executionClaims:X.array(Xi).default([]),policyGateRequests:X.array(Gn).default([]),policyGateDecisions:X.array(en).default([]),executionDispatches:X.array(Ji).default([]),executionDispatchAuthorizations:X.array(Dn).default([]),operatorInboxRoutes:X.array(eo).default([]),policyReplayPackets:X.array(Tn).default([]),replayDeterminismCases:X.array(Vn).default([]),executionReceipts:X.array(to).default([]),outcomeReceipts:X.array(io).default([]),outcomeLinkages:X.array(no).default([])});var Lc=new Map([["observe_only",0],["draft_only",1],["recommend",2],["execute_with_approval",3],["execute_within_limits",4],["fully_autonomous_bounded",5],["reserved_human_only",6]]);function De(e){return new Set(e.authority.principals.map((n)=>n.id))}function f(e,n,t,i,o){if(!e.has(n))t.push(`CompanyOS ${i} ${o} must reference a known id.`)}function Ue(e){return Lc.get(e)??Number.POSITIVE_INFINITY}function To(e){let n=De(e),t=new Set(e.connectors.map((l)=>l.id)),i=new Set(e.agentRoles.map((l)=>l.id)),o=new Set(e.agentTeams.map((l)=>l.id)),a=new Set(e.delegationRules.map((l)=>l.id)),r=new Set(e.toolAssignments.map((l)=>l.id)),d=[];for(let l of e.agentRoles){f(n,l.principalId,d,"agent role principal",l.id),f(n,l.accountableOwnerPrincipalId,d,"agent role owner",l.id);for(let N of l.escalationPrincipalIds)f(n,N,d,"agent role escalation",l.id);for(let N of l.toolAssignmentIds)f(r,N,d,"agent role tool assignment",l.id)}for(let l of e.agentTeams){f(i,l.managerRoleId,d,"agent team manager",l.id);for(let N of l.roleIds)f(i,N,d,"agent team role",l.id)}for(let l of e.delegationRules)Gc(e,i,n,l.id,d);for(let l of e.toolAssignments)if(l.connectorCapabilityId)f(t,l.connectorCapabilityId,d,"tool assignment connector",l.id);for(let l of e.handoffPolicies)f(a,l.delegationRuleId,d,"handoff delegation",l.id);for(let l of e.conflictResolutionPolicies){f(o,l.teamId,d,"conflict team",l.id),f(n,l.resolverPrincipalId,d,"conflict resolver",l.id);for(let N of l.escalationPrincipalIds)f(n,N,d,"conflict escalation",l.id)}return d}function Vo(e){let n=De(e),t=new Set(e.agentRoles.map((a)=>a.id)),i=new Set(e.agentNativeOperations.map((a)=>a.id)),o=[];for(let a of e.agentNativeOperations){if(!t.has(a.agentRoleId))o.push(`Agent-native operation ${a.id} must reference a role.`);if(f(n,a.accountableOwnerPrincipalId,o,"operation owner",a.id),Tc(a))o.push(`Agent-native execute operation ${a.id} must require dry-run and approval.`);if(Ue(a.autonomyCeiling)>Ue("execute_with_approval"))o.push(`Agent-native operation ${a.id} cannot exceed execute_with_approval in V1.`)}for(let a of e.agentToolDescriptors)f(i,a.operationId,o,"agent tool operation",a.id);for(let a of e.surfaceProfiles){f(t,a.roleId,o,"surface role",a.id);for(let r of a.primaryActionOperationIds)f(i,r,o,"surface primary operation",a.id)}return o}function Gc(e,n,t,i,o){let a=e.delegationRules.find((l)=>l.id===i);if(!a)return;if(!n.has(a.fromRoleId)||!n.has(a.toRoleId))o.push(`Agent delegation ${a.id} must reference known roles.`);let r=e.agentRoles.find((l)=>l.id===a.fromRoleId),d=e.agentRoles.find((l)=>l.id===a.toRoleId);if(r&&d&&Dc(a.maxAutonomyLevel,r.maxAutonomyLevel,d.maxAutonomyLevel))o.push(`Agent delegation ${a.id} cannot exceed role autonomy ceilings.`);f(t,a.escalationPrincipalId,o,"delegation escalation",a.id)}function Dc(e,n,t){return Ue(e)>Ue(n)||Ue(e)>Ue(t)}function Tc(e){return e.mode==="execute"&&(!e.dryRunPolicy.required||!e.dryRunPolicy.approvalRequiredForExecute)}function jo(e){let n=De(e),t=new Set(e.cadences.map((b)=>b.id)),i=new Set(e.workGraph.feedbackItems.map((b)=>b.id)),o=new Set(e.workGraph.commitments.map((b)=>b.id)),a=new Set(e.workGraph.workRefs.map((b)=>b.id)),r=new Set(e.workGraph.decisions.map((b)=>b.id)),d=new Set(e.objectives.map((b)=>b.id)),l=new Set(e.memorySnapshots.map((b)=>b.id)),N=new Set(e.agentActionProposals.map((b)=>b.id)),V=new Set(e.operatorInbox.map((b)=>b.id)),J=[];for(let b of e.cadences){for(let se of b.participantPrincipalIds)f(n,se,J,"cadence participant",b.id);for(let se of b.escalationPrincipalIds)f(n,se,J,"cadence escalation",b.id)}for(let b of e.reviewInputSets){f(t,b.cadenceId,J,"review input cadence",b.id);for(let se of b.feedbackItemIds)f(i,se,J,"review input feedback",b.id);for(let se of b.commitmentIds)f(o,se,J,"review input commitment",b.id);for(let se of b.workItemIds)f(a,se,J,"review input work item",b.id);for(let se of b.objectiveIds)f(d,se,J,"review input objective",b.id);for(let se of b.memorySnapshotIds)f(l,se,J,"review input memory",b.id)}for(let b of e.reviewOutputPlans){f(t,b.cadenceId,J,"review output cadence",b.id);for(let se of b.decisionIds)f(r,se,J,"review output decision",b.id);for(let se of b.workItemIds)f(a,se,J,"review output work item",b.id);for(let se of b.actionProposalIds)f(N,se,J,"review output action proposal",b.id);for(let se of b.inboxItemIds)f(V,se,J,"review output inbox item",b.id)}return J}var zo=new Set(["claimed","policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]),Mo=new Set(["policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]);function qo(e,n,t){Vc(e,n,t),zc(e,n,t),Mc(e,n,t)}function Vc(e,n,t){for(let i of e.executionPlans){if(f(t.workItemIds,i.workItemId,n,"execution work item",i.id),f(t.principalIds,i.accountableOwnerPrincipalId,n,"execution owner",i.id),f(t.requestIds,i.policyGateRequestId,n,"execution policy gate request",i.id),zo.has(i.lifecycleState)&&!i.claimId)n.push(`CompanyOS execution plan ${i.id} requires a claim.`);if(!Mo.has(i.lifecycleState))continue;if(!i.policyGateDecisionId){n.push(`CompanyOS execution plan ${i.id} requires a policy gate decision.`);continue}f(t.decisionIds,i.policyGateDecisionId,n,"execution policy gate decision",i.id)}jc(e,n,t)}function jc(e,n,t){for(let i of e.executionPlans){for(let o of i.dispatchIds)f(t.dispatchIds,o,n,"execution dispatch",i.id);for(let o of i.receiptIds)f(t.receiptIds,o,n,"execution receipt",i.id)}}function zc(e,n,t){for(let i of e.executionClaims)f(t.planIds,i.executionPlanId,n,"execution claim plan",i.id),f(t.workItemIds,i.workItemId,n,"execution claim work item",i.id),f(t.principalIds,i.claimantPrincipalId,n,"execution claim principal",i.id),f(t.principalIds,i.accountableOwnerPrincipalId,n,"execution claim owner",i.id)}function Mc(e,n,t){for(let i of e.policyGateRequests)f(t.planIds,i.executionPlanId,n,"policy gate plan",i.id),f(t.workItemIds,i.workItemId,n,"policy gate work item",i.id),f(t.autonomyDecisionIds,i.autonomyDecisionId,n,"policy gate autonomy decision",i.id);for(let i of e.policyGateDecisions){if(!t.autonomyDecisionIds.has(i.autonomyDecision.id))n.push(`CompanyOS policy gate ${i.id} must wrap an existing autonomy decision.`);if(["approval_required","reserved_human_only"].includes(i.verdict)&&i.requiredApprovalIds.length===0)n.push(`CompanyOS policy gate ${i.id} requires approval evidence.`);if(i.verdict==="reserved_human_only"&&i.approvedDispatchLane)n.push(`CompanyOS policy gate ${i.id} cannot dispatch reserved-human-only work.`)}}function Bo(e,n,t){qc(e,n,t),Bc(e,n,t),Fc(e,n,t),$c(e,n,t),Uc(e,n,t),Kc(e,n,t),Yc(e,n,t),Hc(e,n)}function qc(e,n,t){let i=new Map(e.policyGateDecisions.map((o)=>[o.id,o]));for(let o of e.executionDispatchAuthorizations){if(f(t.planIds,o.executionPlanId,n,"dispatch authorization plan",o.id),o.dispatchId)f(t.dispatchIds,o.dispatchId,n,"dispatch authorization dispatch",o.id);if(o.policyGateRequestId)f(t.requestIds,o.policyGateRequestId,n,"dispatch authorization policy gate request",o.id);if(f(t.decisionIds,o.policyGateDecisionId,n,"dispatch authorization policy gate decision",o.id),f(t.principalIds,o.accountableOwnerPrincipalId,n,"dispatch authorization accountable owner",o.id),o.authorizedByPrincipalId)f(t.principalIds,o.authorizedByPrincipalId,n,"dispatch authorization principal",o.id);if(!o.asOf)n.push(`CompanyOS dispatch authorization ${o.id} requires asOf policy time.`);if(o.executionClaimId)f(t.claimIds,o.executionClaimId,n,"dispatch authorization claim",o.id);let a=i.get(o.policyGateDecisionId);if(!a)continue;if(o.authorizedLane!=="dry_run"){if(a.verdict!=="allow")n.push(`CompanyOS dispatch authorization ${o.id} cannot authorize ${o.authorizedLane} for policy verdict ${a.verdict}.`);if(a.approvedDispatchLane!==o.authorizedLane)n.push(`CompanyOS dispatch authorization ${o.id} must match the approved dispatch lane.`)}if(o.authorizedLane==="dry_run"&&o.dryRunProofRefIds.length===0&&o.verdict!=="denied")n.push(`CompanyOS dispatch authorization ${o.id} requires dry-run proof refs for dry_run lane.`);if(o.verdict==="denied"&&!o.failure)n.push(`CompanyOS dispatch authorization ${o.id} requires failure details when denied.`);if(o.verdict!=="denied"&&o.failure)n.push(`CompanyOS dispatch authorization ${o.id} must not carry failure details when authorized.`)}}function Bc(e,n,t){for(let i of e.operatorInboxRoutes){if(f(t.planIds,i.executionPlanId,n,"operator inbox route plan",i.id),i.authorizationId)f(t.authorizationIds,i.authorizationId,n,"operator inbox route authorization",i.id);for(let o of i.requiredPrincipalIds)f(t.principalIds,o,n,"operator inbox route principal",i.id)}}function Fc(e,n,t){for(let i of e.policyReplayPackets){if(!i.asOf)n.push(`CompanyOS policy replay packet ${i.id} requires asOf replay time.`);if(f(t.planIds,i.executionPlanId,n,"policy replay plan",i.id),f(t.requestIds,i.policyGateRequestId,n,"policy replay request",i.id),i.policyGateDecisionId)f(t.decisionIds,i.policyGateDecisionId,n,"policy replay decision",i.id);if(i.authorizationId)f(t.authorizationIds,i.authorizationId,n,"policy replay authorization",i.id);if(i.sourceEvidenceRefs.some((o)=>o.authorizationAuthority!==!1))n.push(`CompanyOS policy replay packet ${i.id} includes source evidence with authorization authority.`)}}function $c(e,n,t){let i=new Map(e.policyReplayPackets.map((o)=>[o.id,o]));for(let o of e.replayDeterminismCases){if(f(t.replayPacketIds,o.replayPacketId,n,"replay determinism packet",o.id),f(t.planIds,o.executionPlanId,n,"replay determinism plan",o.id),!o.asOf)n.push(`CompanyOS replay determinism case ${o.id} requires asOf replay time.`);let a=i.get(o.replayPacketId);if(a?.asOf&&o.asOf&&a.asOf!==o.asOf)n.push(`CompanyOS replay determinism case ${o.id} must use the policy replay packet asOf time.`);if(o.status==="pass"&&o.actualOutputHash!==o.expectedOutputHash)n.push(`CompanyOS replay determinism case ${o.id} must match expected and actual output hashes when passing.`);if(o.status==="fail"&&!o.varianceReason)n.push(`CompanyOS replay determinism case ${o.id} requires a variance reason when failing.`)}}function Uc(e,n,t){let i=new Map(e.executionPlans.map((a)=>[a.id,a])),o=new Set(e.executionReceipts.map((a)=>a.dispatchId));for(let a of e.executionDispatches){if(f(t.planIds,a.executionPlanId,n,"dispatch plan",a.id),a.requiresReceipt&&!o.has(a.id))n.push(`CompanyOS dispatch ${a.id} requires an execution receipt.`);let r=i.get(a.executionPlanId);if(r&&a.idempotencyKey!==r.idempotency.key)n.push(`CompanyOS dispatch ${a.id} must reuse its plan idempotency key.`)}for(let a of e.executionReceipts){f(t.planIds,a.executionPlanId,n,"receipt plan",a.id),f(t.dispatchIds,a.dispatchId,n,"receipt dispatch",a.id);let r=i.get(a.executionPlanId);if(r&&a.idempotencyKey!==r.idempotency.key)n.push(`CompanyOS receipt ${a.id} must reuse its plan idempotency key.`)}}function Kc(e,n,t){let i=new Set(e.objectives.map((r)=>r.id)),o=new Set(e.memorySnapshots.map((r)=>r.id)),a=new Set(e.cadences.map((r)=>r.id));for(let r of e.outcomeReceipts){f(t.planIds,r.executionPlanId,n,"outcome plan",r.id),f(t.workItemIds,r.workItemId,n,"outcome work item",r.id);for(let d of r.receiptIds)f(t.receiptIds,d,n,"outcome receipt",r.id);for(let d of r.objectiveIds)f(i,d,n,"outcome objective",r.id);for(let d of r.memorySnapshotIds)f(o,d,n,"outcome memory",r.id);for(let d of r.cadenceIds)f(a,d,n,"outcome cadence",r.id)}}function Yc(e,n,t){for(let i of e.outcomeLinkages){if(f(t.planIds,i.executionPlanId,n,"outcome linkage plan",i.id),i.dispatchId)f(t.dispatchIds,i.dispatchId,n,"outcome linkage dispatch",i.id);f(t.outcomeReceiptIds,i.outcomeReceiptId,n,"outcome linkage receipt",i.id);for(let o of i.receiptIds)f(t.receiptIds,o,n,"outcome linkage execution receipt",i.id);if(i.status==="linked"&&i.receiptIds.length===0)n.push(`CompanyOS outcome linkage ${i.id} requires execution receipts when linked.`)}}function Hc(e,n){let t=new Map;for(let i of e.executionPlans){let o=t.get(i.idempotency.dedupeKey);if(o&&i.idempotency.strategy==="reject_duplicate")n.push(`CompanyOS execution plan ${i.id} duplicates dedupe key from ${o}.`);t.set(i.idempotency.dedupeKey,i.id)}}function Fo(e){let n=[],t={principalIds:De(e),workItemIds:new Set(e.workGraph.workRefs.map((i)=>i.id)),autonomyDecisionIds:new Set(e.autonomyDecisions.map((i)=>i.id)),planIds:new Set(e.executionPlans.map((i)=>i.id)),requestIds:new Set(e.policyGateRequests.map((i)=>i.id)),decisionIds:new Set(e.policyGateDecisions.map((i)=>i.id)),dispatchIds:new Set(e.executionDispatches.map((i)=>i.id)),receiptIds:new Set(e.executionReceipts.map((i)=>i.id)),claimIds:new Set(e.executionClaims.map((i)=>i.id)),authorizationIds:new Set(e.executionDispatchAuthorizations.map((i)=>i.id)),replayPacketIds:new Set(e.policyReplayPackets.map((i)=>i.id)),outcomeReceiptIds:new Set(e.outcomeReceipts.map((i)=>i.id))};return qo(e,n,t),Bo(e,n,t),n}function $o(e){let n=De(e),t=[];for(let i of e.objectives)f(n,i.ownerPrincipalId,t,"objective",i.id);for(let i of e.metrics)f(n,i.ownerPrincipalId,t,"metric",i.id);for(let i of[...e.memoryFacts,...e.memoryProcedures])f(n,i.ownerPrincipalId,t,"memory owner",i.id);for(let i of e.cadences)f(n,i.ownerPrincipalId,t,"cadence",i.id);return t}function Uo(e){let n=new Set(e.objectives.map((r)=>r.id)),t=new Set(e.metrics.map((r)=>r.id)),i=new Set(e.workGraph.workRefs.map((r)=>r.id)),o=new Set(e.agentActionProposals.map((r)=>r.id)),a=[];for(let r of e.objectives){for(let d of r.metricIds)f(t,d,a,"objective metric",r.id);for(let d of r.workItemIds)f(i,d,a,"objective work item",r.id)}for(let r of e.metrics)f(n,r.objectiveId,a,"metric objective",r.id);for(let r of e.metricObservations)f(t,r.metricId,a,"metric observation",r.id);for(let r of e.objectiveOutcomes){f(n,r.objectiveId,a,"objective outcome",r.id);for(let d of r.relatedWorkItemIds)f(i,d,a,"objective outcome work item",r.id)}for(let r of e.objectiveDriftSignals){if(f(n,r.objectiveId,a,"objective drift",r.id),r.metricId)f(t,r.metricId,a,"objective drift metric",r.id);for(let d of r.recommendedActionRefIds)f(o,d,a,"objective drift action",r.id)}return a}function Ko(e){let n=new Set(e.memoryFacts.map((a)=>a.id)),t=new Set(e.memoryProcedures.map((a)=>a.id)),i=new Set(e.workGraph.decisions.map((a)=>a.id)),o=[];for(let a of e.memorySnapshots){for(let r of a.factIds)f(n,r,o,"memory snapshot fact",a.id);for(let r of a.procedureIds)f(t,r,o,"memory snapshot procedure",a.id);for(let r of a.decisionIds)f(i,r,o,"memory snapshot decision",a.id)}return o}function Un(e){return[...$o(e),...Uo(e),...Ko(e),...jo(e),...To(e),...Vo(e),...Fo(e)]}var Wc=new Set(["execute_within_limits","fully_autonomous_bounded"]);function fn(e){let n=[],t=Qc(e);if(!t.has(e.authority.accountableOwnerPrincipalId))n.push("AuthorityGraph.accountableOwnerPrincipalId must reference a principal.");for(let i of e.autonomyDecisions){if(!t.has(i.accountableOwnerPrincipalId))n.push(`Autonomy decision ${i.id} must reference an accountable owner.`);if(i.customerFacing&&Wc.has(i.approvedLevel))n.push(`Customer-facing decision ${i.id} cannot approve ${i.approvedLevel}.`);if(i.customerFacing&&i.requiredApprovalIds.length===0)n.push(`Customer-facing decision ${i.id} must require approval.`)}for(let i of e.operatorInbox)if(!t.has(i.accountableOwnerPrincipalId))n.push(`Inbox item ${i.id} must reference an accountable owner.`);return n}function Qc(e){return new Set(e.authority.principals.map((n)=>n.id))}import{canonicalJsonString as Zc}from"@lssm/lib.contracts-spec/rich-reference/canonical-serializer";var pI="sha256:bb2a951fffcc56c7bf9ea85e91d69d0f8c8f701e65f1fafbbdffec41233e709a",Xc={schemaId:"companyos.company-brain-edition",version:"1.0.0",compatibility:"additive",contentModel:"immutable-ref-only",sectionKeys:["identityContextRefs","knowledgeAssertionRefs","procedureRefs","policyRefs","hypothesisRefs","decisionRefs","evidenceRefs"]},Jc={schemaId:"companyos.company-brain-extension-registry",version:"1.0.0",stability:"provisional",compatibility:"additive",contentModel:"governed-namespaced-extension-records",lifecycleStates:["proposed","active","deprecated","promoted"],collisionPolicy:"reject-incompatible-namespace-or-schema-reuse",promotionRequirement:"two-independent-real-vertical-consumers"},dI="sha256:a51b0b5431be87b31b5d56f0e91f6eb1fe97192266df868a5c3bae58eee70fa2";function mI(e){let n=nt.safeParse(e);if(n.success)return{ok:!0,issues:[]};return{ok:!1,issues:n.error.issues.map((t)=>`${t.path.length>0?t.path.join("."):"root"}: ${t.message}`)}}function lI(e){return nt.parse(e)}async function yI(e){return wt(e)}async function uI(){return wt(Xc)}async function fI(){return wt(Jc)}async function wt(e){let n=new TextEncoder().encode(Zc(e)),t=await crypto.subtle.digest("SHA-256",n);return`sha256:${ep(new Uint8Array(t))}`}function ep(e){return Array.from(e,(n)=>n.toString(16).padStart(2,"0")).join("")}import{canonicalJsonString as Nt}from"@lssm/lib.contracts-spec/rich-reference/canonical-serializer";function W(e,n,t,i){e.push({code:n,path:t,message:i})}function Yo(e,n){let t=e.flatMap((r)=>r.kind==="evaluation"&&r.payload.phase?[r.payload.phase]:[]),i=["offline","holdout","adversarial","shadow"];for(let[r,d]of i.entries())if(t[r]!==void 0&&t[r]!==d)W(n,"CI_LEARNING_TRANSITION_INVALID",`records.phases.${r}`,"Evaluation phases cannot be skipped or reordered.");let o=t.indexOf("canary_compare");if(o>=0&&o!==4)W(n,"CI_LEARNING_TRANSITION_INVALID","records.phases.canary_compare","Canary comparison requires all four prior phases.");if(t.filter((r)=>r==="post_promotion").length>ve.maxMonitoringComparisons)W(n,"CI_LEARNING_CAP_EXCEEDED","records.phases.post_promotion","Post-promotion comparison cap exceeded.")}function Ho(e,n,t){if(!e.payload.governedLearning)return;if(!e.payload.phase||!e.payload.sampleReceipt||!e.payload.typedMetrics?.length||!e.payload.typedGuardrails?.length||!e.payload.generatorIdentity||!e.payload.evaluatorIdentity||!e.payload.independenceReceipt||!e.payload.testsReceipt||!e.payload.costEvidence)W(t,"CI_LEARNING_HISTORY_INCOMPLETE",`${n}.payload`,"Governed evaluation requires phase, sample, typed metrics and guardrails, identities, independence, tests, and cost evidence.")}function Wo(e,n,t,i,o){if(t.kind!=="experiment"||!t.payload.egressDecision)return;let a=t.payload.egressDecision;if(!(a.vendorExportAllowed||a.vendorLearningAllowed))return;let d=e.find((b)=>b.kind==="feedback"&&b.payload.feedbackType==="signal"),l=e.find((b)=>b.kind==="evaluation"&&b.payload.sampleReceipt),N=t.payload.candidate,V=N?.type==="runtime_artifact"?N.artifact.fingerprint:N?.fingerprint,J=new Set(e.slice(0,n).map(({fingerprint:b})=>b.value));if(a.vendorExportAllowed&&!a.vendorExportRequested||a.vendorLearningAllowed&&!a.vendorLearningRequested||!a.binding||a.binding.signalFingerprint!==(d?.kind==="feedback"&&d.payload.feedbackType==="signal"?d.payload.signalFingerprint:void 0)||a.binding.sampleFingerprint!==(l?.kind==="evaluation"?l.payload.sampleReceipt?.fingerprint:void 0)||a.binding.artifactFingerprint!==V||a.receiptFingerprints.some((b)=>!J.has(b)))W(o,"CI_LEARNING_TRANSITION_INVALID",`${i}.payload.egressDecision`,"Vendor eligibility requires five prior receipts bound to one signal, sample, and artifact.")}var np={G01:"candidate_proposed",G02:"candidate_proposed",G03:"candidate_proposed",G04:"candidate_proposed",G05:"candidate_proposed",G06:"candidate_proposed",G07:"offline_evaluated",G08:"offline_evaluated",G09:"offline_evaluated",G10:"offline_evaluated",G11:"offline_evaluated",G12:"offline_evaluated",G13:"offline_evaluated",G14:"offline_evaluated",G15:"holdout_evaluated",G16:"adversarial_evaluated",G17:"adversarial_evaluated",G18:"risk_policy_decided",G19:"approval_recorded",G20:"approval_recorded",G21:"approval_recorded",G22:"approval_recorded",G23:"shadow_evaluated",G24:"canary_started",G25:"comparison_recorded"};function Zo(e,n,t){let i=np[n];return e.findLast((o)=>("governedLearning"in o.payload)&&o.payload.governedLearning?.lifecycleId===t&&o.payload.governedLearning.event===i)}function Xo(e,n){let t=Date.parse(n)-Date.parse(e.recordedAt);return Number.isFinite(t)&&t>=0&&t<=ve.maxGateAgeMs}function Jo(e,n,t){let i="governedLearning"in t.payload?t.payload.governedLearning:void 0;if(i?.event!=="review_due"&&i?.event!=="expired")return!0;let o=e.slice(0,n).findLast((r)=>r.kind==="promotion"&&r.payload.stage==="promoted"&&r.payload.governedLearning?.lifecycleId===i.lifecycleId);if(!o)return!1;let a=i.event==="review_due"?ve.maxReviewIntervalMs:ve.maxPromotionExpiryMs;return Date.parse(t.recordedAt)===Date.parse(o.recordedAt)+a}function ea(e,n){let t=Kn(n,"candidate_proposed","experiment"),i=Kn(n,"risk_policy_decided","experiment"),o=gn(n,"offline"),a=gn(n,"holdout"),r=gn(n,"adversarial"),d=gn(n,"shadow"),l=Kn(n,"approval_recorded","promotion"),N=Kn(n,"canary_started","promotion"),V=gn(n,"canary_compare"),J=t?.payload.candidate,b=J?.type==="runtime_artifact";return{G01:!!t?.payload.baseline,G02:!!t?.payload.baseline?.semanticVersion,G03:!!t?.payload.objectiveDefinition,G04:!!J,G05:b&&!!J.artifact.semanticVersion,G06:b&&J.artifact.artifactRef===t?.payload.candidateArtifactRef,G07:Qo(o?.payload.typedMetrics),G08:Qo(o?.payload.typedGuardrails)&&o.payload.typedGuardrails.every(({hard:Be})=>Be),G09:!!o?.payload.sampleReceipt,G10:o?.payload.verdict==="pass"&&o.payload.testsReceipt?.status==="allow"&&!!o.payload.testsReceipt.suiteVersion,G11:o?.payload.safetyPassed===!0,G12:o?.payload.privacyPassed===!0,G13:o?.payload.costPassed===!0&&o.payload.costEvidence?.tenantBudgetAllowed===!0&&o.payload.costEvidence.ratio<=1.2,G14:o?.payload.verdict==="pass",G15:a?.payload.verdict==="pass"&&a.payload.datasetRef!==o?.payload.datasetRef,G16:r?.payload.verdict==="pass",G17:tp(r),G18:i?.payload.riskDecision?.status==="allow",G19:l?.payload.approvalReceipt?.status==="allow",G20:ip(l,r),G21:!!t?.payload.baseline&&l?.payload.rollbackTestReceipt?.status==="allow"&&l.payload.rollbackTestReceipt.expectedBaselineFingerprint===t.payload.baseline.fingerprint&&l.payload.rollbackTestReceipt.observedRestoredFingerprint===t.payload.baseline.fingerprint,G22:l?.payload.killSwitchReceipt?.status==="allow"&&l.payload.killSwitchReceipt.receiptRef===l.payload.killSwitchRef,G23:d?.payload.verdict==="pass",G24:N?.payload.stage==="canary",G25:V?.payload.verdict==="pass"&&V.payload.typedGuardrails?.every(({passed:Be})=>Be)===!0}[e]}var Qo=(e)=>!!e&&e.length>0&&e.length<=16,Kn=(e,n,t)=>e.find((i)=>i.kind===t&&("governedLearning"in i.payload)&&i.payload.governedLearning?.event===n),gn=(e,n)=>e.find((t)=>t.kind==="evaluation"&&t.payload.phase===n),tp=(e)=>!!e?.payload.generatorIdentity&&!!e.payload.evaluatorIdentity&&!!e.payload.independenceReceipt&&e.payload.independenceReceipt.status==="allow"&&e.payload.generatorIdentity.principalRef!==e.payload.evaluatorIdentity.principalRef&&e.payload.generatorIdentity.implementationFingerprint!==e.payload.evaluatorIdentity.implementationFingerprint&&e.payload.generatorIdentity.modelFingerprint!==e.payload.evaluatorIdentity.modelFingerprint&&e.payload.generatorIdentity.signerRef!==e.payload.evaluatorIdentity.signerRef,ip=(e,n)=>!!e?.payload.approvalReceipt?.signerRef&&!!n?.payload.generatorIdentity&&!!n.payload.evaluatorIdentity&&![n.payload.generatorIdentity.signerRef,n.payload.evaluatorIdentity.signerRef,n.payload.generatorIdentity.principalRef,n.payload.evaluatorIdentity.principalRef].includes(e.payload.approvalReceipt.signerRef);function na(e,n,t,i,o,a){if(op(t,o,a),Wo(e,n,t,o,a),!Jo(e,n,t))W(a,"CI_LEARNING_TRANSITION_INVALID",`${o}.recordedAt`,"Governed review and expiry must equal their promotion-derived deadline.");if(t.kind==="evaluation")Ho(t,o,a);if(t.kind==="evaluation"&&t.payload.phase){let r=t.payload.phase==="canary_compare"||t.payload.phase==="post_promotion"?"comparison":t.payload.phase;if(!i.event.startsWith(r))W(a,"CI_LEARNING_TRANSITION_INVALID",`${o}.payload.phase`,"Evaluation phase and event disagree.")}if(t.kind==="evaluation"&&t.payload.generatorIdentity&&t.payload.evaluatorIdentity){let r=t.payload.generatorIdentity,d=t.payload.evaluatorIdentity;if(r.principalRef===d.principalRef||r.implementationFingerprint===d.implementationFingerprint||r.modelFingerprint===d.modelFingerprint||r.signerRef===d.signerRef)W(a,"CI_LEARNING_TRANSITION_INVALID",`${o}.payload.evaluatorIdentity`,"Generator and evaluator must be independently identified.")}if(t.kind==="promotion"&&t.payload.gateBundle){let r=t.payload.stage==="canary"?23:t.payload.stage==="promoted"?25:0;if(r>0)ap(t.payload.gateBundle.gates,r,o,a);let d=e.slice(0,n);if(t.payload.gateBundle.gates.some((l)=>{let N=Zo(d,l.id,i.lifecycleId);return!N||l.receiptFingerprint!==N.fingerprint.value||!Xo(N,t.recordedAt)||!ea(l.id,d)}))W(a,"CI_LEARNING_HISTORY_INCOMPLETE",`${o}.payload.gateBundle.gates`,"Every gate must cite the exact lifecycle-scoped record that proves its concrete fact.");if((t.payload.stage==="canary"||t.payload.stage==="promoted")&&t.payload.approvalReceipt?.status!=="allow")W(a,"CI_LEARNING_HISTORY_INCOMPLETE",`${o}.payload.approvalReceipt`,"Governed canary and promotion require a concrete approval allow receipt.");if(t.payload.approvalReceipt&&Date.parse(t.payload.approvalReceipt.decidedAt)+ve.maxApprovalValidityMs<Date.parse(t.recordedAt))W(a,"CI_LEARNING_TRANSITION_INVALID",`${o}.payload.approvalReceipt`,"Approval receipt expired before use.")}if(t.kind==="promotion"&&(t.payload.stage==="canary"||t.payload.stage==="promoted")){let r=e.find((d)=>d.kind==="experiment"&&d.payload.governedLearning?.event==="candidate_proposed");if(r?.kind!=="experiment"||r.payload.candidate?.type!=="runtime_artifact")W(a,"CI_LEARNING_TRANSITION_INVALID",`${o}.payload.candidateArtifactRef`,"Repository work items cannot enter canary or promotion.")}if(t.kind==="rollback"&&t.payload.status==="executed"){let r=t.payload.reproduction;if(!r||r.expectedBaselineFingerprint!==r.observedActiveFingerprint)W(a,"CI_LEARNING_REPLAY_DRIFT",`${o}.payload.reproduction`,"Executed rollback must reproduce the exact baseline.")}if(t.kind==="replay"&&t.payload.status==="exact"&&(!t.payload.lifecycleHeadFingerprint||!t.payload.baselineFingerprint||!t.payload.effectiveArtifactFingerprint||t.payload.orderedTransitionFingerprints?.length!==i.sequence))W(a,"CI_LEARNING_REPLAY_DRIFT",`${o}.payload`,"Exact replay requires complete ordered fingerprints.")}function op(e,n,t){if(e.recordRefIds.length>ve.maxRecordRefs||e.evidenceRefIds.length>ve.maxEvidenceRefs||new TextEncoder().encode(JSON.stringify(e.payload)).length>ve.maxSerializedBytes)W(t,"CI_LEARNING_CAP_EXCEEDED",n,"Governed record exceeds a frozen v1 cap.");if(e.kind==="evaluation"&&e.payload.sampleReceipt){let i=e.payload.sampleReceipt,o=Object.values(i.strataCounts).reduce((r,d)=>r+d,0),a=Object.values(i.languageCounts).reduce((r,d)=>r+d,0);if(o!==i.observationCount||a!==i.observationCount)W(t,"CI_LEARNING_TRANSITION_INVALID",`${n}.payload.sampleReceipt`,"Sample strata and language counts must each cover the exact observation count.")}}function ap(e,n,t,i){let o=dt.slice(0,n);if(e.length!==n||e.some((a,r)=>a.id!==o[r]||a.status!=="passed"||!a.receiptFingerprint))W(i,"CI_LEARNING_HISTORY_INCOMPLETE",`${t}.payload.gateBundle.gates`,n===23?"Canary requires G01-G23 green.":"Promotion requires G01-G25 green.")}function ta(e,n,t){if(e.kind!=="feedback"||e.payload.feedbackType==="signal"||n.kind!=="feedback"||n.payload.feedbackType!=="signal")return!1;let i=e.payload.dispositionEvidence,o=n.payload.dispositionRefs;if(!i)return!1;return i.duplicate===!1&&i.signalFingerprint===n.payload.signalFingerprint&&i.originRefId===n.payload.originRefId&&i.consentReceipt.receiptRef===o.consentReceiptRef&&i.consentReceipt.receiptRef===e.payload.consentDecisionRef&&i.consentReceipt.purpose==="governed_learning"&&i.consentReceipt.scopeRefId===n.payload.consentScopeRefId&&i.consentReceipt.scopeRefId===t&&i.consentReceipt.signalFingerprint===n.payload.signalFingerprint&&i.redactionReceipt.receiptRef===o.redactionReceiptRef&&i.redactionReceipt.receiptRef===e.payload.redactionDecisionRef&&i.redactionReceipt.targetRefId===n.payload.originRefId&&i.authorityReceipt.receiptRef===o.authorityReceiptRef&&i.authorityReceipt.tenantId===n.tenantId&&i.authorityReceipt.tenantId===e.tenantId&&i.authorityReceipt.objectiveRefId===n.payload.objectiveRefId&&i.authorityReceipt.actorRef===n.payload.actorRef&&i.authorityReceipt.actorRef===e.payload.actorRef&&i.originIntegrityReceipt.receiptRef===o.originIntegrityReceiptRef&&i.originIntegrityReceipt.originRefId===n.payload.originRefId&&i.originIntegrityReceipt.classification===n.payload.originClassification&&i.originIntegrityReceipt.signalFingerprint===n.payload.signalFingerprint}var rp={signal_captured:"feedback",consent_redaction_recorded:"feedback",classified:"experiment",baseline_objective_recorded:"experiment",candidate_proposed:"experiment",risk_policy_decided:"experiment",offline_evaluated:"evaluation",holdout_evaluated:"evaluation",adversarial_evaluated:"evaluation",shadow_evaluated:"evaluation",approval_recorded:"promotion",canary_started:"promotion",comparison_recorded:"evaluation",promotion_decided:"promotion",rollback_executed:"rollback",outcome_recorded:"feedback",review_due:"experiment",expired:"experiment",replay_verified:"replay"},sp=new Set(["signal_captured:null:signal_pending","consent_redaction_recorded:signal_pending:feedback_accepted","classified:feedback_accepted:classified","baseline_objective_recorded:classified:candidate_pending","candidate_proposed:candidate_pending:candidate_pending","risk_policy_decided:candidate_pending:evaluating","risk_policy_decided:candidate_pending:rejected","offline_evaluated:evaluating:evaluating","holdout_evaluated:evaluating:evaluating","adversarial_evaluated:evaluating:evaluating","adversarial_evaluated:evaluating:rejected","shadow_evaluated:evaluating:shadow","shadow_evaluated:evaluating:rejected","approval_recorded:shadow:awaiting_approval","canary_started:awaiting_approval:canary","comparison_recorded:canary:canary","comparison_recorded:canary:rejected","promotion_decided:canary:promoted","promotion_decided:canary:rejected","comparison_recorded:promoted:promoted","comparison_recorded:promoted:rejected","rollback_executed:rejected:rolled_back","rollback_executed:promoted:rolled_back","rollback_executed:review_due:rolled_back","outcome_recorded:promoted:outcome_recorded","outcome_recorded:rejected:outcome_recorded","outcome_recorded:rolled_back:outcome_recorded","review_due:outcome_recorded:review_due","expired:review_due:expired","replay_verified:expired:replay_exact","replay_verified:expired:replay_drifted","replay_verified:expired:blocked"]);function Ke(e){if(!("governedLearning"in e.payload))return;return e.payload.governedLearning}function ia(e,n,t,i){return e.tenantId===n.tenantId&&t.lifecycleId===i.lifecycleId&&e.ownerRef.id===n.ownerRef.id&&e.ownerRef.type===n.ownerRef.type&&e.ownerRef.label===n.ownerRef.label&&e.contractVersion===n.contractVersion&&e.fingerprint.version===n.fingerprint.version&&e.fingerprint.canonicalization===n.fingerprint.canonicalization}function oa(e,n,t,i){if(n.occurredAt!==e.recordedAt)W(i,"CI_LEARNING_FINGERPRINT_MISMATCH",`${t}.recordedAt`,"Recorded and governed occurrence time must match.");if(e.kind!==rp[n.event])W(i,"CI_LEARNING_TRANSITION_INVALID",`${t}.kind`,"Event is stored in the wrong canonical record kind.");if(n.event==="signal_captured"&&(e.kind!=="feedback"||e.payload.feedbackType!=="signal"||e.payload.status!=="quarantined"))W(i,"CI_LEARNING_TRANSITION_INVALID",`${t}.payload.status`,"Only a zero-weight quarantined signal may await consent and redaction.");if(n.event==="consent_redaction_recorded"&&(e.kind!=="feedback"||e.payload.feedbackType==="signal"||e.payload.status!=="accepted"))W(i,"CI_LEARNING_TRANSITION_INVALID",`${t}.payload.status`,"Learning requires accepted feedback with consent and redaction refs.");let o=`${n.event}:${n.stateBefore??"null"}:${n.stateAfter}`;if(!sp.has(o))W(i,"CI_LEARNING_TRANSITION_INVALID",`${t}.payload.governedLearning`,`Illegal governed transition ${o}.`)}function aa(e,n,t,i,o){if(n===0){if(i.event!=="signal_captured"||i.stateBefore!==null||i.previousTransitionRecordRefId||i.previousStateFingerprint)W(o,"CI_LEARNING_HISTORY_INCOMPLETE","records.0","Sequence zero must be an unlinked signal capture.");return}let a=e[n-1],r=Ke(a);if(i.event==="consent_redaction_recorded"&&!ta(t,a,i.lifecycleId))W(o,"CI_LEARNING_HISTORY_INCOMPLETE",`records.${n}.payload.dispositionEvidence`,"Accepted governed feedback requires exact allow disposition evidence.");if(!r||i.previousTransitionRecordRefId!==a.id||i.previousStateFingerprint!==r.stateFingerprint||i.stateBefore!==r.stateAfter||!t.recordRefIds.includes(a.id))W(o,"CI_LEARNING_HEAD_CONFLICT",`records.${n}`,"Transition does not extend the exact previous head.")}function ra(e){let n=e.filter((a)=>Ke(a)!==void 0).sort((a,r)=>(Ke(a)?.sequence??0)-(Ke(r)?.sequence??0)),t=[];if(n.length===0)return{ok:!0,issues:t};if(n.length>ve.maxTransitions)W(t,"CI_LEARNING_CAP_EXCEEDED","records","Lifecycle transition cap exceeded.");let i=n[0],o=Ke(i);if(!o)return{ok:!0,issues:t};for(let[a,r]of n.entries()){let d=Ke(r);if(!d)continue;let l=`records.${a}`;if(!ia(r,i,d,o))W(t,"CI_LEARNING_TENANT_MISMATCH",l,"Governed history must share exact tenant, lifecycle, owner, and contract identity.");if(d.sequence!==a)W(t,"CI_LEARNING_SEQUENCE_CONFLICT",`${l}.payload.governedLearning.sequence`,"Sequences must be contiguous from zero.");oa(r,d,l,t),aa(n,a,r,d,t),na(n,a,r,d,l,t)}return Yo(n,t),{ok:t.length===0,issues:t}}function sa(e,n,t){if((e.kind==="claim"||e.kind==="entity"||e.kind==="relation")&&e.payload.confidence<0.9&&e.payload.reviewState!=="review_required")Ye(t,"CI_REVIEW_REQUIRED",n,e,"Low-confidence semantic candidates require review.");if(e.kind==="answer")cp(e,n,t);if(e.kind==="feedback"){let i=e.payload.feedbackType==="correction"&&!e.payload.correctionRefId,o=e.payload.feedbackType==="outcome"&&!e.payload.outcomeRefId;if(i||o)Ye(t,"CI_FEEDBACK_SEMANTICS_INVALID",n,e,"Feedback must reference its correction or outcome.")}if(e.kind==="evaluation"&&e.payload.verdict==="pass"&&(!e.payload.safetyPassed||!e.payload.privacyPassed||!e.payload.costPassed))Ye(t,"CI_EVALUATION_GATES_FAILED",n,e,"Passing evaluation requires safety, privacy, and cost gates.");if(e.kind==="promotion"&&e.payload.stage==="promoted"&&!e.payload.approvedAt)Ye(t,"CI_PROMOTION_GATES_REQUIRED",n,e,"Promoted records require approval time and gate refs.");if(e.kind==="rollback"&&e.payload.status==="executed"&&!e.payload.executedAt)Ye(t,"CI_ROLLBACK_TIME_REQUIRED",n,e,"Executed rollback requires execution time.");if(e.kind==="replay"&&new Set(e.payload.orderedEventRefIds).size!==e.payload.orderedEventRefIds.length)Ye(t,"CI_REPLAY_ORDER_INVALID",n,e,"Replay event order cannot contain duplicates.")}function cp(e,n,t){let{payload:i}=e,o=i.status==="answered"&&(!i.text||i.claimRefIds.length===0||i.citationEvidenceRefIds.length===0||!i.verificationRefId),a=(i.status==="abstained"||i.status==="refused")&&(i.claimRefIds.length>0||i.citationEvidenceRefIds.length>0),r=i.status==="conflicted"&&i.conflictRefIds.length===0,d=i.status!=="answered"&&i.reasons.length===0,l=i.status==="refused"&&!i.policyDecisionRef;if(o||a||r||d||l)Ye(t,"CI_ANSWER_SEMANTICS_INVALID",n,e,"Answer status, support, policy, and reason fields are inconsistent.")}function Ye(e,n,t,i,o){e.push({code:n,path:`records.${t}.${i.kind}`,message:o})}var pp=new Set(["claim","policy","entity","relation","conflict","gap","graph","edition","answer","verification","feedback","experiment","evaluation","promotion","rollback","replay"]);function ca(e){let n=[],t=new Map;for(let[i,o]of e.records.entries()){if(t.has(o.id))He(n,"CI_DUPLICATE_ID",i,o,"Record ids must be unique.");if(t.set(o.id,o),o.tenantId!==e.tenantId)He(n,"CI_TENANT_MISMATCH",i,o,"Record tenant must match packet tenant.");if(o.validTime.to&&Date.parse(o.validTime.to)<=Date.parse(o.validTime.from))He(n,"CI_VALID_TIME_INVALID",i,o,"Valid-to must be later than valid-from.");let a=o.kind==="feedback"&&o.payload.feedbackType==="signal";if(pp.has(o.kind)&&o.evidenceRefIds.length===0&&!a)He(n,"CI_EVIDENCE_REQUIRED",i,o,"Semantic records require evidence refs.")}for(let[i,o]of e.records.entries()){for(let a of o.recordRefIds)if(!t.has(a))He(n,"CI_REFERENCE_NOT_FOUND",i,o,`Unknown record ref ${a}.`);for(let a of o.evidenceRefIds){let r=t.get(a);if(!r)He(n,"CI_EVIDENCE_NOT_FOUND",i,o,`Unknown evidence ref ${a}.`);else if(r.kind!=="evidence")He(n,"CI_EVIDENCE_KIND_INVALID",i,o,`${a} is not an evidence record.`)}sa(o,i,n)}return n}function He(e,n,t,i,o){e.push({code:n,path:`records.${t}.${i.kind}`,message:o})}var dp={schemaId:"companyos.company-intelligence-record",version:"1.0.0",compatibility:"additive",canonicalization:bn,fingerprint:xn,recordKinds:["source","source_version","asset","part","fragment","evidence","claim","policy","entity","relation","conflict","gap","graph","edition","query","answer","verification","feedback","experiment","evaluation","promotion","rollback","replay"]};function mp(e){let{fingerprint:n,...t}=e;return Nt(t)}async function pa(e){return Pt(mp(e))}async function WI(e){return Pt(Nt(e))}async function QI(){return Pt(Nt(dp))}async function ZI(e){let n=Pi.parse(e);return It.shape.records.element.parse({...n,fingerprint:{version:xn,canonicalization:bn,value:await pa(n)}})}async function XI(e){let n=It.safeParse(e);if(!n.success)return{ok:!1,issues:n.error.issues.map(lp)};let t=ca(n.data);t.push(...ra(n.data.records).issues);for(let[i,o]of n.data.records.entries()){let a=await pa(o);if(o.fingerprint.value!==a)t.push({code:"CI_FINGERPRINT_MISMATCH",path:`records.${i}.fingerprint.value`,message:`Record ${o.id} fingerprint does not match canonical content.`})}return{ok:t.length===0,issues:t}}function lp(e){let n=e.path.join(".")||"root",t="CI_SCHEMA_INVALID";if(n.endsWith("tenantId"))t="CI_TENANT_REQUIRED";else if(n.includes("ownerRef"))t="CI_OWNER_REQUIRED";else if(n.includes("recordedAt")||n.includes("validTime"))t="CI_TIME_REQUIRED";return{code:t,path:n,message:e.message}}async function Pt(e){let n=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(e));return`sha256:${Array.from(new Uint8Array(n),(i)=>i.toString(16).padStart(2,"0")).join("")}`}import{canonicalJsonString as yp}from"@lssm/lib.contracts-spec/rich-reference/canonical-serializer";var up={answered:new Set(["supported"]),abstained:new Set(["no_authorized_evidence","stale_authorized_evidence","insufficient_claim_support"]),refused:new Set(["authorization_denied","scope_mismatch","policy_refused"]),conflicted:new Set(["conflicting_authorized_evidence"]),degraded:new Set(["retrieval_degraded","verifier_not_independent","drafting_degraded","draft_schema_invalid","verification_degraded","deadline_exceeded","budget_exceeded","fixture_adapter_forbidden"])};async function oC(e,n){let t=Ni.safeParse(e);if(!t.success)return{ok:!1,issues:[{code:"CI_GROUNDING_STATUS_REASON_INVALID",path:"root",message:t.error.message}]};let i=t.data,o=[];return fp(i,o),gp(i,n,o),Ip(i,o),Cp(i,n,o),hp(i,o),await Rp(i,n,o),{ok:o.length===0,issues:o}}function fp(e,n){let[t,...i]=e.reasonCodes;if(!t||!up[e.status].has(t))Re(n,"CI_GROUNDING_STATUS_REASON_INVALID","reasonCodes.0","Primary reason does not match status.");let o=[...new Set(i)].sort();if(i.length!==o.length||i.some((a,r)=>a!==o[r]))Re(n,"CI_GROUNDING_STATUS_REASON_INVALID","reasonCodes","Additional reasons must be sorted and unique.")}function gp(e,n,t){let i=e.scope,o=n.expectedScope;if(i.tenantId!==o.tenantId||i.workspaceId!==o.workspaceId||i.actorRef!==o.actorRef||i.viewerRef!==o.viewerRef||i.authorizationDecisionRef!==o.authorizationDecisionRef||i.policyDecisionRef!==o.policyDecisionRef||!Lt(i.capabilityRefs,o.capabilityRefs))Re(t,"CI_GROUNDING_SCOPE_INVALID","scope","Result scope does not match the trusted request scope.");for(let a of e.citations)if(a.tenantId!==e.scope.tenantId||a.workspaceId!==e.scope.workspaceId||a.viewerRef!==e.scope.viewerRef)Re(t,"CI_GROUNDING_CITATION_SCOPE_INVALID",`citations.${a.citationId}`,"Citation scope does not match the viewer scope.");if(e.status==="answered"&&(!n.expectedRedactionDecisionRefs||!n.expectedViewerProjectionFingerprints||!Lt(e.citations.map((a)=>a.redactionDecisionRef),n.expectedRedactionDecisionRefs)||!Lt(e.citations.map((a)=>a.viewerProjectionFingerprint),n.expectedViewerProjectionFingerprints)))Re(t,"CI_GROUNDING_CITATION_SCOPE_INVALID","citations","Citation redaction identity does not match the trusted viewer projections.")}function Ip(e,n){let t=new Set(e.receipt.retrievedCitationLedger),i=new Set(e.citations.map((a)=>a.citationId));for(let a of i)if(!t.has(a))Re(n,"CI_GROUNDING_CITATION_NOT_RETRIEVED","citations","Returned citation is absent from the retrieval ledger.");if(e.status!=="answered")return;if(e.text!==e.claims.map((a)=>a.statement).join(`
+`))Re(n,"CI_GROUNDING_UNSUPPORTED_ANSWER","text","Answer text must be derived from the ordered atomic claims.");let o=new Set;for(let a of e.claimSupport)if(o.has(a.claimId)||!e.claims.some((r)=>r.claimId===a.claimId)||new Set(a.citationIds).size!==a.citationIds.length||a.confidence<e.metadata.supportThreshold||a.citationIds.some((r)=>!t.has(r)||!i.has(r)))Re(n,"CI_GROUNDING_CLAIM_SUPPORT_INVALID",`claimSupport.${a.claimId}`,"Claim support references an unresolved citation.");else o.add(a.claimId);if(e.claimSupport.length!==e.claims.length||e.claims.some((a)=>!o.has(a.claimId)))Re(n,"CI_GROUNDING_UNSUPPORTED_ANSWER","claims","Every answered claim requires resolved support.")}function Cp(e,n,t){let{drafterIdentity:i,verifierIdentity:o}=e.receipt;if(!i||!o)return;let a=i.providerRef===o.providerRef&&i.modelRef===o.modelRef,r=o.providerRef===n.deterministicRuleVerifierRef;if(a||i.independenceDomain===o.independenceDomain&&!r)Re(t,"CI_GROUNDING_VERIFIER_NOT_INDEPENDENT","receipt.verifierIdentity","Verifier must be independent from the drafter.")}function hp(e,n){let{callCounts:t,repairCount:i}=e.receipt;if(i>1)Re(n,"CI_GROUNDING_REPAIR_LIMIT_EXCEEDED","receipt.repairCount","At most one repair is allowed.");if(t.retrieval>3||t.draft>2||t.verify>2||t.verify>t.draft)Re(n,"CI_GROUNDING_PROVIDER_CALL_BUDGET_EXCEEDED","receipt.callCounts","Provider call budget or attempt ordering was exceeded.")}async function Rp(e,n,t){if(e.status==="answered"&&["retrieval","draft","validation","verification"].some((o)=>!e.receipt.fingerprints[o]))Re(t,"CI_GROUNDING_FINGERPRINT_MISMATCH","receipt.fingerprints","Answered results require every deterministic stage fingerprint.");for(let[o,a]of Object.entries(n.expectedFingerprints))if(a&&e.receipt.fingerprints[o]!==a)Re(t,"CI_GROUNDING_FINGERPRINT_MISMATCH",`receipt.fingerprints.${o}`,"Stage fingerprint does not match recomputed content.");let i=e.status==="answered"?await vp(e):await Sp(e);if(e.receipt.fingerprints.output!==i.output||e.receipt.fingerprints.replay!==i.replay)Re(t,"CI_GROUNDING_FINGERPRINT_MISMATCH","receipt.fingerprints.output","Output or replay fingerprint does not match canonical result content.")}async function vp(e){let n=Op(e),t=await Yn({status:e.status,reasons:e.reasonCodes,claims:e.claims,citations:e.citations,support:e.claimSupport,warnings:e.receipt.warnings,callCounts:e.receipt.callCounts,repairCount:e.receipt.repairCount,fingerprints:n}),i=await Yn({schemaVersion:"company-intelligence-grounding-replay:v1",canonicalization:"canonical-json:v1",codeVersionRef:e.metadata.codeVersionRef,providers:[e.receipt.drafterIdentity,e.receipt.verifierIdentity],...n,output:t});return{output:t,replay:i}}async function Sp(e){let n={status:e.status,reasonCodes:e.reasonCodes,conflictRefIds:e.conflictRefIds,warnings:e.receipt.warnings,callCounts:e.receipt.callCounts,repairCount:e.receipt.repairCount,request:e.receipt.fingerprints.request,...xp(e)},t=await Yn(n),i=await Yn({schemaVersion:"company-intelligence-grounding-replay:v1",codeVersionRef:e.metadata.codeVersionRef,providers:[e.receipt.drafterIdentity,e.receipt.verifierIdentity].filter(Boolean),...n,output:t});return{output:t,replay:i}}var Op=(e)=>({request:e.receipt.fingerprints.request,retrieval:e.receipt.fingerprints.retrieval,draft:e.receipt.fingerprints.draft,validation:e.receipt.fingerprints.validation,verification:e.receipt.fingerprints.verification}),xp=(e)=>Object.fromEntries(["retrieval","draft","validation","verification"].flatMap((n)=>e.receipt.fingerprints[n]?[[n,e.receipt.fingerprints[n]]]:[])),Yn=async(e)=>{let n=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(yp(e)));return`sha256:${Array.from(new Uint8Array(n),(t)=>t.toString(16).padStart(2,"0")).join("")}`},Lt=(e,n)=>e.length===n.length&&[...e].sort().every((t,i)=>t===[...n].sort()[i]);function Re(e,n,t,i){e.push({code:n,path:t,message:i})}function da(e){let n=[],t=new Map(e.delegatedAuthorities.map((i)=>[i.id,i]));for(let i of e.crossCompanyGrants){if(i.grantorEntityId===i.granteeEntityId)n.push(`ENTERPRISE_GRANT_NOT_CROSS_COMPANY:${i.id}`);let o=t.get(i.delegatedAuthorityId),a=i.capabilities.every((l)=>o?.capabilities.includes(l)),r=o?.entityScopeIds.includes(i.granteeEntityId),d=o?.delegateRef.id===i.delegateRef.id;if(i.status==="approved"&&(!o||o.delegatorEntityId!==i.grantorEntityId||!o.delegable||!a||!r||!d))n.push(`ENTERPRISE_UNAUTHORIZED_CROSS_COMPANY_GRANT:${i.id}`)}return n}function ma(e){let n=new Map(e.complianceBoundaries.map((t)=>[t.id,t]));return e.boundaryExceptions.flatMap((t)=>{let i=n.get(t.boundaryId);if(!i)return[`ENTERPRISE_DANGLING_BOUNDARY:${t.id}`];return i.nonWaivable?[`ENTERPRISE_NON_WAIVABLE_BOUNDARY:${t.id}`]:[]})}function Hn(e){let n=new Map(e.map((t)=>[t.id,t.parentId]));for(let t of e){let i=[],o=new Map,a=t.id;while(a){let r=o.get(a);if(r!==void 0)return[...i.slice(r),a];o.set(a,i.length),i.push(a),a=n.get(a)}}return}function la(e){let n=new Map;for(let r of e)n.set(r.fromEntityId,[...n.get(r.fromEntityId)??[],r.toEntityId]);let t=new Set,i=new Set,o=[];function a(r){if(t.has(r))return[...o,r];if(i.has(r))return;t.add(r),o.push(r);for(let d of n.get(r)??[]){let l=a(d);if(l)return l}o.pop(),t.delete(r),i.add(r);return}for(let r of n.keys()){let d=a(r);if(d)return d}return}function ya(e){let n=e.governance,t=[];for(let[o,a]of bp(e))for(let r of _p(a))t.push(`ENTERPRISE_DUPLICATE_${o}:${r}`);let i=new Map(n.topology.entities.map((o)=>[o.id,o.kind]));for(let o of n.topology.relationships){let a=Ep(o.kind);if(a&&i.get(o.toEntityId)!==a)t.push(`ENTERPRISE_RELATION_TARGET_KIND:${o.id}`)}for(let o of n.sharedServiceMandates)if(o.consumerEntityIds.includes(o.providerEntityId))t.push(`ENTERPRISE_SHARED_SERVICE_SELF_CONSUMER:${o.id}`);for(let o of n.boundaryExceptions){let a=n.complianceBoundaries.find((r)=>r.id===o.boundaryId);if(a&&o.entityScopeIds.some((r)=>!a.entityScopeIds.includes(r)))t.push(`ENTERPRISE_EXCEPTION_OUTSIDE_BOUNDARY:${o.id}`)}return t}function bp(e){let n=e.governance;return[["ENTITY_ID",n.topology.entities.map((t)=>t.id)],["RELATION_ID",n.topology.relationships.map((t)=>t.id)],["PURPOSE_ID",e.companyPurposes.map((t)=>t.id)],["AUTHORITY_ID",n.delegatedAuthorities.map((t)=>t.id)],["GRANT_ID",n.crossCompanyGrants.map((t)=>t.id)],["ROUTE_ID",n.escalationRoutes.map((t)=>t.id)],["RESPONSIBILITY_ID",n.responsibilities.map((t)=>t.id)],["BOUNDARY_ID",n.complianceBoundaries.map((t)=>t.id)]]}function _p(e){let n=new Set,t=new Set;for(let i of e){if(n.has(i))t.add(i);n.add(i)}return[...t]}function Ep(e){if(e==="brand_owner")return"brand";if(e==="product_owner")return"product";if(e==="workspace_owner")return"workspace";return}function ua(e,n,t,i){let o=e.governance;for(let a of o.delegatedAuthorities){Ne(n,a.delegatorEntityId,"AUTHORITY",i);for(let r of a.entityScopeIds)Ne(n,r,"AUTHORITY_SCOPE",i)}for(let a of o.crossCompanyGrants)Ne(n,a.grantorEntityId,"GRANT",i),Ne(n,a.granteeEntityId,"GRANT",i);for(let a of o.sharedServiceMandates){Ne(n,a.providerEntityId,"MANDATE",i);for(let r of a.consumerEntityIds)Ne(n,r,"MANDATE",i)}for(let a of o.responsibilities)Ne(n,a.companyEntityId,"RESPONSIBILITY",i);for(let a of o.escalationRoutes)if(Ne(n,a.companyEntityId,"ESCALATION",i),a.parentRouteId)Ne(t,a.parentRouteId,"ESCALATION_PARENT",i);for(let a of o.conflicts){for(let r of a.entityIds)Ne(n,r,"CONFLICT",i);Ne(t,a.escalationRouteId,"CONFLICT_ROUTE",i)}}function Ne(e,n,t,i){if(!e.has(n))i.push(`ENTERPRISE_DANGLING_${t}:${n}`)}function fa(e){let n=[],t=e.governance,i=t.topology,o=new Set(i.entities.map((N)=>N.id)),a=new Set(t.escalationRoutes.map((N)=>N.id)),r=new Set(e.companyPurposes.map((N)=>N.id)),d=new Set(t.responsibilities.map((N)=>N.id)),l=new Map(t.responsibilities.map((N)=>[N.id,N.kind]));he(o,i.rootEntityId,"ENTERPRISE_DANGLING_ROOT",n);for(let N of i.relationships)he(o,N.fromEntityId,"ENTERPRISE_DANGLING_RELATION",n),he(o,N.toEntityId,"ENTERPRISE_DANGLING_RELATION",n);for(let N of i.consolidationBoundaries){he(o,N.reportingEntityId,"ENTERPRISE_DANGLING_CONSOLIDATION",n);for(let V of N.memberEntityIds)he(o,V,"ENTERPRISE_DANGLING_CONSOLIDATION",n)}for(let N of t.purposeSpecIds)he(r,N,"ENTERPRISE_DANGLING_PURPOSE",n);return ua(e,o,a,n),Ap(e,o,a,d,l,n),n}function Ap(e,n,t,i,o,a){for(let r of e.companyPurposes){he(n,r.companyEntityId,"ENTERPRISE_DANGLING_PURPOSE_ENTITY",a);let d=new Set(r.goals.map((V)=>V.id)),l=new Set(r.outcomeMetrics.map((V)=>V.id)),N=new Set(r.goalCascades.map((V)=>V.id));for(let V of r.goalCascades)if(he(d,V.goalId,"ENTERPRISE_DANGLING_CASCADE_GOAL",a),he(n,V.companyEntityId,"ENTERPRISE_DANGLING_CASCADE_ENTITY",a),he(t,V.escalationRouteId,"ENTERPRISE_DANGLING_CASCADE_ROUTE",a),V.parentCascadeId)he(N,V.parentCascadeId,"ENTERPRISE_DANGLING_CASCADE_PARENT",a);for(let V of r.goals)if(V.parentGoalId)he(d,V.parentGoalId,"ENTERPRISE_DANGLING_PARENT_GOAL",a);for(let V of r.harmGuardrails)if(V.goalIds.forEach((J)=>he(d,J,"ENTERPRISE_DANGLING_GUARDRAIL_GOAL",a)),V.metricId)he(l,V.metricId,"ENTERPRISE_DANGLING_GUARDRAIL_METRIC",a);for(let V of r.goalConflicts)V.goalIds.forEach((J)=>he(d,J,"ENTERPRISE_DANGLING_GOAL_CONFLICT",a)),he(t,V.escalationRouteId,"ENTERPRISE_DANGLING_GOAL_CONFLICT_ROUTE",a);for(let V of[...r.capitalResponsibilityRefIds,...r.budgetResponsibilityRefIds])he(i,V,"ENTERPRISE_DANGLING_PURPOSE_RESPONSIBILITY",a);for(let V of r.capitalResponsibilityRefIds)if(o.get(V)==="budget")a.push(`ENTERPRISE_RESPONSIBILITY_KIND_MISMATCH:${V}`);for(let V of r.budgetResponsibilityRefIds)if(o.get(V)==="capital")a.push(`ENTERPRISE_RESPONSIBILITY_KIND_MISMATCH:${V}`)}}function he(e,n,t,i){if(!e.has(n))i.push(`${t}:${n}`)}var kp=/(password|secret|private.?key|access.?token|api.?key)/i,wp=/(?:sk-|ghp_|Bearer\s+)[A-Za-z0-9._-]{8,}/;function Wn(e,n="root",t=[]){if(typeof e==="string"){if(wp.test(e))t.push(n);return t}if(Array.isArray(e))return e.forEach((i,o)=>Wn(i,`${n}.${o}`,t)),t;if(!e||typeof e!=="object")return t;for(let[i,o]of Object.entries(e)){let a=`${n}.${i}`,r=/(ref|refId|refIds)$/i.test(i);if(kp.test(i)&&!r&&o!==!1&&o!=null)t.push(a);Wn(o,a,t)}return t}function Gt(e){let n=e.governance,t=n.topology.relationships.filter((r)=>r.kind==="owns"||r.kind==="controls"),i=la(t),o=Hn(n.escalationRoutes.map((r)=>({id:r.id,parentId:r.parentRouteId}))),a=[...fa(e),...da(n),...ma(n),...ya(e),...Np(e)];if(i)a.push(`ENTERPRISE_TOPOLOGY_CYCLE:${i.join(">")}`);if(o)a.push(`ENTERPRISE_ESCALATION_CYCLE:${o.join(">")}`);for(let r of e.companyPurposes){let d=Hn(r.goals.map((N)=>({id:N.id,parentId:N.parentGoalId}))),l=Hn(r.goalCascades.map((N)=>({id:N.id,parentId:N.parentCascadeId})));if(d)a.push(`ENTERPRISE_GOAL_CYCLE:${d.join(">")}`);if(l)a.push(`ENTERPRISE_GOAL_CASCADE_CYCLE:${l.join(">")}`)}for(let r of Wn(e))a.push(`ENTERPRISE_SECRET_MATERIAL:${r}`);return[...new Set(a)].sort()}function Np(e){let n=new Map;for(let i of e.governance.topology.relationships){if(i.kind!=="owns"&&i.kind!=="controls")continue;n.set(i.toEntityId,[...n.get(i.toEntityId)??[],i])}let t=[];for(let[i,o]of n){if(o.reduce((d,l)=>d+(l.ownershipShare??0),0)>1.000001)t.push(`ENTERPRISE_OWNERSHIP_EXCEEDS_ONE:${i}`);let r=o.filter((d)=>d.controllingInterest);if(r.length>1&&r.some((d)=>!d.jointVenture))t.push(`ENTERPRISE_INCOMPATIBLE_CONTROLLING_INTEREST:${i}`)}return t}function vC(e){let n=vt.safeParse(e);if(!n.success)return{ok:!1,issues:n.error.issues.map(Pp)};let t=Gt(n.data);return{ok:t.length===0,issues:t}}function SC(e){let n=vt.parse(e),t=Gt(n);if(t.length>0)throw new ga(t);return n}class ga extends Error{issues;constructor(e){super(`CompanyOS enterprise validation failed: ${e.join("; ")}`);this.name="CompanyEnterpriseValidationError",this.issues=e}}function Pp(e){return`ENTERPRISE_SCHEMA:${e.path.length>0?e.path.join("."):"root"}:${e.message}`}import{canonicalJsonString as Lp}from"@lssm/lib.contracts-spec/rich-reference/canonical-serializer";var Gp={schemaId:"companyos.governed-learning-loop-envelope",version:"1.1.0",stability:"provisional",compatibility:"additive",contentModel:"ref-only"},_C="sha256:7b1e2b2d04e2bbb02bdc013dbafe97635749b234c3f3653d2798d9043ea41115";async function EC(){let e=new TextEncoder().encode(Lp(Gp)),n=await crypto.subtle.digest("SHA-256",e);return`sha256:${Array.from(new Uint8Array(n),(t)=>t.toString(16).padStart(2,"0")).join("")}`}function AC(e){let n=St.safeParse(e);return n.success?{ok:!0,issues:[]}:{ok:!1,issues:n.error.issues.map((t)=>`${t.path.join(".")||"root"}: ${t.message}`)}}function kC(e){return St.parse(e)}function PC(e,n){let t=_t.safeParse(e);if(!t.success)return{ok:!1,issues:t.error.issues.map((o)=>`${o.path.join(".")||"root"}: ${o.message}`)};let i=n?Ia(t.data,n):[];return{ok:i.length===0,issues:i}}function LC(e,n){let t=_t.parse(e),i=n?Ia(t,n):[];if(i.length>0)throw Error(`Provider binding validation failed: ${i.join("; ")}`);return t}function Ia(e,n){let t=[];if(e.providerDeclaration.id!==n.providerDeclarationId)t.push("providerDeclaration.id: identity mismatch");if(e.providerDeclaration.version!==n.providerDeclarationVersion)t.push("providerDeclaration.version: identity mismatch");if(e.providerDeclaration.fingerprint!==n.providerDeclarationFingerprint)t.push("providerDeclaration.fingerprint: fingerprint mismatch");if(e.adapterContract.id!==n.adapterContractId)t.push("adapterContract.id: identity mismatch");if(e.adapterContract.fingerprint!==n.adapterContractFingerprint)t.push("adapterContract.fingerprint: fingerprint mismatch");return t}function TC(e){let n=_o.safeParse(e);if(!n.success)return n.error.issues.map((t)=>t.message);return Dp(n.data)}function Dp(e){let n=[],t=e.graphSnapshot,i=new Set(t.sourceSystems.map((c)=>c.id)),o=new Set(t.sourceRecords.map((c)=>c.id)),a=new Set(t.nodes.map((c)=>c.id)),r=new Set(t.edges.map((c)=>c.id)),d=new Set(t.conflicts.map((c)=>c.id)),l=new Set(e.accessRequests.map((c)=>c.id)),N=new Set(e.accessDecisions.map((c)=>c.id)),V=new Set(e.identityCandidates.map((c)=>c.id)),J=new Set(e.runbookProcedures.map((c)=>c.id)),b=new Set(e.runbookConformanceCases.map((c)=>c.id)),se=new Set(e.runbookReadiness.map((c)=>c.id)),Be=new Set(e.compiledAgenticArtifacts.map((c)=>c.id)),Ra=new Set(e.agenticReadinessChecks.map((c)=>c.id)),va=new Set(e.agenticConformanceEvidence.map((c)=>c.id));for(let c of t.sourceRecords)if(!i.has(c.sourceSystemId))n.push(`Source record ${c.id} references unknown source system ${c.sourceSystemId}.`);for(let c of t.nodes){for(let ee of c.sourceRecordRefIds)if(!o.has(ee))n.push(`Graph node ${c.id} references unknown source record ${ee}.`);if(c.tombstone?.supersededByNodeId&&!c.tombstone.reason)n.push(`Graph node ${c.id} has invalid tombstone metadata.`);for(let ee of c.conflictRefIds)if(!d.has(ee))n.push(`Graph node ${c.id} references unknown conflict ${ee}.`)}for(let c of t.edges){if(!a.has(c.fromNodeId)||!a.has(c.toNodeId))n.push(`Graph edge ${c.id} must connect known nodes.`);for(let ee of c.sourceRecordRefIds)if(!o.has(ee))n.push(`Graph edge ${c.id} references unknown source record ${ee}.`)}for(let c of t.conflicts){if(!a.has(c.subjectNodeId))n.push(`Graph conflict ${c.id} references unknown subject node.`);for(let ee of c.conflictingNodeIds)if(!a.has(ee))n.push(`Graph conflict ${c.id} references unknown node.`);for(let ee of c.conflictingRecordRefIds)if(!o.has(ee))n.push(`Graph conflict ${c.id} references unknown source record.`)}for(let c of e.identityCandidates){if(!a.has(c.leftNodeId)||!a.has(c.rightNodeId))n.push(`Identity candidate ${c.id} must reference known nodes.`);if(c.confidence<0.9&&c.reviewState!=="review_required")n.push(`Identity candidate ${c.id} below confidence threshold must require review.`)}for(let c of e.identityLinkDecisions){if(!V.has(c.candidateId))n.push(`Identity decision ${c.id} references unknown candidate ${c.candidateId}.`);if(c.canonicalNodeId&&!a.has(c.canonicalNodeId))n.push(`Identity decision ${c.id} references unknown canonical node.`);if(c.destructiveMerge||c.sourceMutationAllowed)n.push(`Identity decision ${c.id} cannot mutate sources or destructive-merge identities.`)}for(let c of e.accessRequests){for(let ee of c.requestedNodeIds)if(!a.has(ee))n.push(`Access request ${c.id} references unknown node.`);if(c.rbacDecisionRef.verdict!=="allow")n.push(`Access request ${c.id} must carry an allow RBAC ref.`)}for(let c of e.accessDecisions){if(!l.has(c.requestId))n.push(`Access decision ${c.id} references unknown request.`);if(c.verdict!=="allow"&&!c.failClosed)n.push(`Access decision ${c.id} must fail closed.`);for(let ee of[...c.visibleNodeIds,...c.redactedNodeIds])if(!a.has(ee))n.push(`Access decision ${c.id} references unknown node.`)}for(let c of e.realtimeEvents){if(c.snapshotId!==t.id)n.push(`Realtime event ${c.id} references unknown snapshot.`);if(c.nodeId&&!a.has(c.nodeId))n.push(`Realtime event ${c.id} references unknown node.`);if(c.edgeId&&!r.has(c.edgeId))n.push(`Realtime event ${c.id} references unknown edge.`);if(c.replayCursor.sequence>c.sequence)n.push(`Realtime event ${c.id} has a cursor beyond the event.`)}for(let c of e.runbookProcedures){if(!a.has(c.nodeId))n.push(`Runbook procedure ${c.id} references unknown node.`);for(let ee of c.requiredPermissionDecisionIds)if(!N.has(ee))n.push(`Runbook procedure ${c.id} references unknown permission decision.`)}for(let c of e.runbookReadiness){if(!J.has(c.procedureId))n.push(`Runbook readiness ${c.id} references unknown procedure.`);if(!N.has(c.permissionDecisionId))n.push(`Runbook readiness ${c.id} references unknown permission decision.`);if(c.status!=="ready"&&c.blockedReasons.length===0)n.push(`Runbook readiness ${c.id} must explain non-ready status.`)}for(let c of e.runbookConformanceCases){if(!J.has(c.procedureId))n.push(`Runbook conformance case ${c.id} references unknown procedure.`);if(!se.has(c.readinessId))n.push(`Runbook conformance case ${c.id} references unknown readiness.`)}for(let c of e.compiledAgenticArtifacts){if(!J.has(c.runbookProcedureId))n.push(`Compiled agentic artifact ${c.id} references unknown runbook procedure.`);for(let ee of c.sourceRecordRefIds)if(!o.has(ee))n.push(`Compiled agentic artifact ${c.id} references unknown source record.`);for(let ee of c.identityDecisionIds)if(!V.has(ee)&&!e.identityLinkDecisions.some((Sa)=>Sa.id===ee))n.push(`Compiled agentic artifact ${c.id} references unknown identity decision.`);for(let ee of c.accessDecisionIds)if(!N.has(ee))n.push(`Compiled agentic artifact ${c.id} references unknown access decision.`);if(c.freshness.status!=="fresh")n.push(`Compiled agentic artifact ${c.id} must compile from fresh graph evidence.`)}for(let c of e.agenticReadinessChecks){if(!Be.has(c.compiledArtifactId))n.push(`Agentic readiness check ${c.id} references unknown compiled artifact.`);if(!se.has(c.runbookReadinessId))n.push(`Agentic readiness check ${c.id} references unknown runbook readiness.`);for(let ee of c.sourceRecordRefIds)if(!o.has(ee))n.push(`Agentic readiness check ${c.id} references unknown source record.`);for(let ee of c.accessDecisionIds)if(!N.has(ee))n.push(`Agentic readiness check ${c.id} references unknown access decision.`)}for(let c of e.agenticConformanceEvidence){if(!Be.has(c.compiledArtifactId))n.push(`Agentic conformance evidence ${c.id} references unknown compiled artifact.`);if(!Ra.has(c.readinessCheckId))n.push(`Agentic conformance evidence ${c.id} references unknown agentic readiness check.`);if(!b.has(c.runbookConformanceCaseId))n.push(`Agentic conformance evidence ${c.id} references unknown runbook conformance case.`)}for(let c of e.agenticCorrectionOutcomeReceipts){if(!Be.has(c.compiledArtifactId))n.push(`Agentic correction receipt ${c.id} references unknown compiled artifact.`);if(!va.has(c.conformanceEvidenceId))n.push(`Agentic correction receipt ${c.id} references unknown conformance evidence.`)}return n}function zC(e,n=[]){let t=Ao.safeParse(e);if(!t.success)return t.error.issues.map((a)=>a.message);let i=t.data,o=[];if(Tp(i,o),Vp(i,o),jp(i,o),zp(i,o),Mp(i,o),qp(i,o),n.length>0&&!n.includes(i.assurancePacketRef.packetId))o.push(`Policy evaluation packet ${i.id} references unknown assurance packet ${i.assurancePacketRef.packetId}.`);return o}function Tp(e,n){let t=[e.authorityRef,e.rbacRef,e.riskRef,e.budgetRef,e.toolScopeRef];for(let i of t)if(i.status==="missing")n.push(`Policy evaluation packet ${e.id} has missing ${i.kind}.`)}function Vp(e,n){let t=e.policyGateDecision.verdict;if((t==="allow"||t==="approval_required")&&!e.dryRunProofRef)n.push(`Policy evaluation packet ${e.id} requires dry-run proof before execute-capable decisions.`)}function jp(e,n){if(e.policyGateDecision.verdict==="approval_required"&&!e.approvalWorkflowRef)n.push(`Policy evaluation packet ${e.id} requires approval workflow ref.`)}function zp(e,n){if(e.policyGateDecision.verdict==="reserved_human_only"&&e.policyGateDecision.approvedDispatchLane)n.push(`Policy evaluation packet ${e.id} cannot dispatch reserved-human-only decisions.`)}function Mp(e,n){if(["high","critical"].includes(e.riskRef.riskLevel)&&e.riskRef.evidenceRefIds.length===0)n.push(`Policy evaluation packet ${e.id} requires risk evidence.`);if(e.budgetRef.budgetImpacting&&e.budgetRef.evidenceRefIds.length===0)n.push(`Policy evaluation packet ${e.id} requires budget evidence.`);if(e.toolScopeRef.toolExecution&&e.toolScopeRef.evidenceRefIds.length===0)n.push(`Policy evaluation packet ${e.id} requires tool-scope evidence.`)}function qp(e,n){if(["denied","reserved_human_only","approval_required"].includes(e.policyGateDecision.verdict)&&e.explanation.blockedReasons.length===0)n.push(`Policy explanation ${e.explanation.id} requires blocked reasons.`);if(e.fallback&&!e.explanation.fallbackReason)n.push(`Policy explanation ${e.explanation.id} requires fallback reason.`)}function BC(e){let n=Et.safeParse(e);if(!n.success)return{ok:!1,issues:n.error.issues.map((i)=>`${i.path.length>0?i.path.join("."):"root"}: ${i.message}`)};let t=Ca(n.data);return{ok:t.length===0,issues:t}}function FC(e){let n=Et.parse(e),t=Ca(n);if(t.length>0)throw Error(t.join("; "));return n}function Ca(e){let n=[],t=new Map(e.assertions.map((r)=>[r.id,r]));if(t.size!==e.assertions.length)n.push("Claim IDs must be unique.");for(let r of e.assertions){for(let d of r.supersedesClaimIds){let l=t.get(d);if(!l)n.push(`${r.id} supersedes unknown claim ${d}.`);else if(!l.supersededByClaimIds.includes(r.id))n.push(`${r.id} and ${d} must declare reciprocal supersession lineage.`)}for(let d of r.supersededByClaimIds){let l=t.get(d);if(!l)n.push(`${r.id} is superseded by unknown claim ${d}.`);else if(!l.supersedesClaimIds.includes(r.id))n.push(`${r.id} and ${d} must declare reciprocal supersession lineage.`)}}let i=new Set,o=new Set,a=(r)=>{if(i.has(r))return!0;if(o.has(r))return!1;i.add(r);let l=t.get(r)?.supersedesClaimIds.some((N)=>t.has(N)&&a(N))??!1;return i.delete(r),o.add(r),l};for(let r of t.keys())if(a(r)){n.push("Supersession lineage must be acyclic.");break}return n}function Bp(e){if(typeof e!=="object"||e===null)return{};return e}function KC(e,n){let t=Bp(e),i=typeof t.id==="string"?t.id:void 0,o=typeof t.schemaVersion==="string"?t.schemaVersion:void 0,a={envelopeId:i,sourceSchemaVersion:o,targetSchemaVersion:Fn,migrationPerformed:!1,persistenceMutationAllowed:!1,assessedAt:n};if(o&&Lo.includes(o))return $n.parse({...a,state:"migration_required",reasonCodes:["supported_legacy_schema_requires_explicit_migration"]});if(Go.safeParse(e).success)return $n.parse({...a,state:"active",reasonCodes:["current_schema_valid"]});return $n.parse({...a,state:"quarantined",reasonCodes:o?["unknown_or_invalid_schema"]:["missing_schema_version"]})}function QC(e){let n=un.safeParse(e);if(!n.success)return{ok:!1,issues:n.error.issues.map(ha)};let t=fn(n.data);return{ok:t.length===0,issues:t}}function ZC(e){let n=un.parse(e),t=fn(n);if(t.length>0)throw new Dt(t);return n}function XC(e){let n=kt.safeParse(e);if(!n.success)return{ok:!1,issues:n.error.issues.map(ha)};let t=[...fn(n.data),...Un(n.data)];return{ok:t.length===0,issues:t}}function JC(e){let n=kt.parse(e),t=[...fn(n),...Un(n)];if(t.length>0)throw new Dt(t);return n}class Dt extends Error{issues;constructor(e){super(`CompanyOS validation failed: ${e.join("; ")}`);this.name="CompanyOsValidationError",this.issues=e}}function ha(e){return`${e.path.length>0?e.path.join("."):"root"}: ${e.message}`}export{_C as COMPANYOS_GOVERNED_LEARNING_LOOP_SCHEMA_FINGERPRINT,Gp as COMPANYOS_GOVERNED_LEARNING_LOOP_SCHEMA_IDENTITY,pI as COMPANY_BRAIN_EDITION_SCHEMA_FINGERPRINT,Xc as COMPANY_BRAIN_EDITION_SCHEMA_IDENTITY,dI as COMPANY_BRAIN_EXTENSION_REGISTRY_SCHEMA_FINGERPRINT,Jc as COMPANY_BRAIN_EXTENSION_REGISTRY_SCHEMA_IDENTITY,dp as COMPANY_INTELLIGENCE_SCHEMA_IDENTITY,ga as CompanyEnterpriseValidationError,Dt as CompanyOsValidationError,W as addLearningIssue,lI as assertCompanyBrainEdition,SC as assertCompanyEnterprisePortfolioV1,kC as assertCompanyOsGovernedLearningLoop,LC as assertCompanyOsProviderBinding,FC as assertCompanyOsTemporalAssertionSet,ZC as assertCompanyOsV0ProductEngineeringLoop,JC as assertCompanyOsV1OperatingLoop,KC as assessCompanyOsTenantGovernanceEnvelope,mp as canonicalSerializeCompanyIntelligenceRecord,yI as fingerprintCompanyBrainEditionContent,uI as fingerprintCompanyBrainEditionSchema,fI as fingerprintCompanyBrainExtensionRegistrySchema,WI as fingerprintCompanyIntelligenceCanonicalValue,pa as fingerprintCompanyIntelligenceRecord,QI as fingerprintCompanyIntelligenceSchema,EC as fingerprintCompanyOsGovernedLearningLoopSchema,mI as validateCompanyBrainEdition,vC as validateCompanyEnterprisePortfolioV1,ra as validateCompanyIntelligenceGovernedLearningHistory,oC as validateCompanyIntelligenceGroundedAnswerResult,XI as validateCompanyIntelligenceRecordPacket,ca as validateCompanyIntelligenceSemanticInvariants,AC as validateCompanyOsGovernedLearningLoop,TC as validateCompanyOsOperatingGraphContractPacket,Dp as validateCompanyOsOperatingGraphSemanticInvariants,zC as validateCompanyOsPolicyEvaluationPacket,PC as validateCompanyOsProviderBinding,BC as validateCompanyOsTemporalAssertionSet,QC as validateCompanyOsV0ProductEngineeringLoop,XC as validateCompanyOsV1OperatingLoop,ZI as withCompanyIntelligenceFingerprint};

package/dist/node/validation/learning-loop.js

@@ -0,0 +1 @@
+import{canonicalJsonString as f}from"@lssm/lib.contracts-spec/rich-reference/canonical-serializer";import{z as o}from"zod";import{z as n}from"zod";var c=n.record(n.string(),n.unknown()),l=n.object({id:n.string().min(1),connectorCapability:n.string().min(1),providerKey:n.string().min(1).optional(),externalId:n.string().min(1).optional(),url:n.string().url().optional(),observedAt:n.string().min(1),metadata:c.default({})}),R=n.object({default:n.string().min(1),translations:n.record(n.string(),n.string()).default({})}),s=n.object({id:n.string().min(1),type:n.string().min(1),label:n.string().min(1).optional()});var e=s.strict(),p=o.object({policyGateRequestRef:e,actionPacketRef:e,routingRuleRef:e,workItemRef:e}).strict(),i=o.object({id:o.string().min(1),experimentRef:e,parentExperimentRef:e.optional(),changeSetRef:e,actionPacketRefs:o.array(e).min(1),executionPlanRef:e,executionRunRef:e,outcomeClaimRefs:o.array(e).min(1),approvalDecisionRefs:o.array(e).default([]),policyDecisionRefs:o.array(e).default([]),routingRuleCandidateRef:e,activationAuthorization:p.optional(),exportReceiptRef:e,replayBundleRef:e,ownerRef:e,nextStepRef:e,followUpRef:e,costRefs:o.array(e).default([]),coverageRefs:o.array(e).default([]),freshnessRefs:o.array(e).default([]),contradictionRefs:o.array(e).default([]),attributionRefs:o.array(e).default([]),selectionExplanationRefs:o.array(e).default([]),evidenceRefs:o.array(e).min(1),unknownRefs:o.array(e).default([]),versionRef:e,reportRef:e}).strict(),C=o.object({envelopeRef:e,branchExperimentRefs:o.array(e).min(1),outcomeClaimRefs:o.array(e).min(1),promotionDecisionRef:e,costRefs:o.array(e).default([]),evidenceRefs:o.array(e).min(1),unknownRefs:o.array(e).default([])}).strict(),O=o.object({envelopeRef:e,experimentRef:e,outcomeClaimRefs:o.array(e).min(1),routingRuleCandidateRef:e,approvalDecisionRef:e.optional(),actionPacketRef:e,changeSetRef:e.optional(),actionPacketRefs:o.array(e).default([]),executionPlanRef:e.optional(),executionRunRef:e.optional(),approvalDecisionRefs:o.array(e).default([]),policyDecisionRefs:o.array(e).default([]),activationAuthorization:p.optional(),exportReceiptRef:e,replaySummaryRef:e,ownerRef:e,nextStepRef:e,followUpRef:e,costRefs:o.array(e).default([]),coverageRefs:o.array(e).default([]),freshnessRefs:o.array(e).default([]),contradictionRefs:o.array(e).default([]),attributionRefs:o.array(e).default([]),selectionExplanationRefs:o.array(e).default([]),evidenceRefs:o.array(e).min(1),unknownRefs:o.array(e).default([]),versionRef:e,reportRef:e.optional()}).strict();var m={schemaId:"companyos.governed-learning-loop-envelope",version:"1.1.0",stability:"provisional",compatibility:"additive",contentModel:"ref-only"},L="sha256:7b1e2b2d04e2bbb02bdc013dbafe97635749b234c3f3653d2798d9043ea41115";async function S(){let a=new TextEncoder().encode(f(m)),t=await crypto.subtle.digest("SHA-256",a);return`sha256:${Array.from(new Uint8Array(t),(r)=>r.toString(16).padStart(2,"0")).join("")}`}function b(a){let t=i.safeParse(a);return t.success?{ok:!0,issues:[]}:{ok:!1,issues:t.error.issues.map((r)=>`${r.path.join(".")||"root"}: ${r.message}`)}}function E(a){return i.parse(a)}export{L as COMPANYOS_GOVERNED_LEARNING_LOOP_SCHEMA_FINGERPRINT,m as COMPANYOS_GOVERNED_LEARNING_LOOP_SCHEMA_IDENTITY,E as assertCompanyOsGovernedLearningLoop,S as fingerprintCompanyOsGovernedLearningLoopSchema,b as validateCompanyOsGovernedLearningLoop};

package/dist/node/validation/provider-binding.js

@@ -0,0 +1 @@
+import{z as n}from"zod";import{z as r}from"zod";var m=r.record(r.string(),r.unknown()),f=r.object({id:r.string().min(1),connectorCapability:r.string().min(1),providerKey:r.string().min(1).optional(),externalId:r.string().min(1).optional(),url:r.string().url().optional(),observedAt:r.string().min(1),metadata:m.default({})}),y=r.object({default:r.string().min(1),translations:r.record(r.string(),r.string()).default({})}),a=r.object({id:r.string().min(1),type:r.string().min(1),label:r.string().min(1).optional()});var d=n.string().regex(/^sha256:[a-f0-9]{64}$/),s=n.object({id:n.string().min(1),providerDeclaration:n.object({id:n.string().min(1),version:n.string().regex(/^\d+\.\d+\.\d+$/),fingerprint:d}),adapterContract:n.object({id:n.string().min(1),fingerprint:d,inputSchemaRef:a,outputSchemaRef:a}),normalizationContractRef:a,scope:n.object({tenantRef:n.string().min(1),workflowRef:n.string().min(1),policyRefs:n.array(n.string().min(1)).min(1)})});function O(e,t){let i=s.safeParse(e);if(!i.success)return{ok:!1,issues:i.error.issues.map((p)=>`${p.path.join(".")||"root"}: ${p.message}`)};let o=t?c(i.data,t):[];return{ok:o.length===0,issues:o}}function x(e,t){let i=s.parse(e),o=t?c(i,t):[];if(o.length>0)throw Error(`Provider binding validation failed: ${o.join("; ")}`);return i}function c(e,t){let i=[];if(e.providerDeclaration.id!==t.providerDeclarationId)i.push("providerDeclaration.id: identity mismatch");if(e.providerDeclaration.version!==t.providerDeclarationVersion)i.push("providerDeclaration.version: identity mismatch");if(e.providerDeclaration.fingerprint!==t.providerDeclarationFingerprint)i.push("providerDeclaration.fingerprint: fingerprint mismatch");if(e.adapterContract.id!==t.adapterContractId)i.push("adapterContract.id: identity mismatch");if(e.adapterContract.fingerprint!==t.adapterContractFingerprint)i.push("adapterContract.fingerprint: fingerprint mismatch");return i}export{x as assertCompanyOsProviderBinding,O as validateCompanyOsProviderBinding};