@lssm/lib.companyos-spec 3.0.2

package/dist/validation/semantic-v1.js

@@ -0,0 +1,2 @@
+// @bun
+var L=new Map([["observe_only",0],["draft_only",1],["recommend",2],["execute_with_approval",3],["execute_within_limits",4],["fully_autonomous_bounded",5],["reserved_human_only",6]]);function u(o){return new Set(o.authority.principals.map((t)=>t.id))}function c(o,t,n,e,i){if(!o.has(t))n.push(`CompanyOS ${e} ${i} must reference a known id.`)}function y(o){return L.get(o)??Number.POSITIVE_INFINITY}function f(o){let t=u(o),n=new Set(o.connectors.map((r)=>r.id)),e=new Set(o.agentRoles.map((r)=>r.id)),i=new Set(o.agentTeams.map((r)=>r.id)),a=new Set(o.delegationRules.map((r)=>r.id)),d=new Set(o.toolAssignments.map((r)=>r.id)),s=[];for(let r of o.agentRoles){c(t,r.principalId,s,"agent role principal",r.id),c(t,r.accountableOwnerPrincipalId,s,"agent role owner",r.id);for(let I of r.escalationPrincipalIds)c(t,I,s,"agent role escalation",r.id);for(let I of r.toolAssignmentIds)c(d,I,s,"agent role tool assignment",r.id)}for(let r of o.agentTeams){c(e,r.managerRoleId,s,"agent team manager",r.id);for(let I of r.roleIds)c(e,I,s,"agent team role",r.id)}for(let r of o.delegationRules)q(o,e,t,r.id,s);for(let r of o.toolAssignments)if(r.connectorCapabilityId)c(n,r.connectorCapabilityId,s,"tool assignment connector",r.id);for(let r of o.handoffPolicies)c(a,r.delegationRuleId,s,"handoff delegation",r.id);for(let r of o.conflictResolutionPolicies){c(i,r.teamId,s,"conflict team",r.id),c(t,r.resolverPrincipalId,s,"conflict resolver",r.id);for(let I of r.escalationPrincipalIds)c(t,I,s,"conflict escalation",r.id)}return s}function g(o){let t=u(o),n=new Set(o.agentRoles.map((a)=>a.id)),e=new Set(o.agentNativeOperations.map((a)=>a.id)),i=[];for(let a of o.agentNativeOperations){if(!n.has(a.agentRoleId))i.push(`Agent-native operation ${a.id} must reference a role.`);if(c(t,a.accountableOwnerPrincipalId,i,"operation owner",a.id),V(a))i.push(`Agent-native execute operation ${a.id} must require dry-run and approval.`);if(y(a.autonomyCeiling)>y("execute_with_approval"))i.push(`Agent-native operation ${a.id} cannot exceed execute_with_approval in V1.`)}for(let a of o.agentToolDescriptors)c(e,a.operationId,i,"agent tool operation",a.id);for(let a of o.surfaceProfiles){c(n,a.roleId,i,"surface role",a.id);for(let d of a.primaryActionOperationIds)c(e,d,i,"surface primary operation",a.id)}return i}function q(o,t,n,e,i){let a=o.delegationRules.find((r)=>r.id===e);if(!a)return;if(!t.has(a.fromRoleId)||!t.has(a.toRoleId))i.push(`Agent delegation ${a.id} must reference known roles.`);let d=o.agentRoles.find((r)=>r.id===a.fromRoleId),s=o.agentRoles.find((r)=>r.id===a.toRoleId);if(d&&s&&z(a.maxAutonomyLevel,d.maxAutonomyLevel,s.maxAutonomyLevel))i.push(`Agent delegation ${a.id} cannot exceed role autonomy ceilings.`);c(n,a.escalationPrincipalId,i,"delegation escalation",a.id)}function z(o,t,n){return y(o)>y(t)||y(o)>y(n)}function V(o){return o.mode==="execute"&&(!o.dryRunPolicy.required||!o.dryRunPolicy.approvalRequiredForExecute)}function h(o){let t=u(o),n=new Set(o.cadences.map((p)=>p.id)),e=new Set(o.workGraph.feedbackItems.map((p)=>p.id)),i=new Set(o.workGraph.commitments.map((p)=>p.id)),a=new Set(o.workGraph.workRefs.map((p)=>p.id)),d=new Set(o.workGraph.decisions.map((p)=>p.id)),s=new Set(o.objectives.map((p)=>p.id)),r=new Set(o.memorySnapshots.map((p)=>p.id)),I=new Set(o.agentActionProposals.map((p)=>p.id)),b=new Set(o.operatorInbox.map((p)=>p.id)),l=[];for(let p of o.cadences){for(let m of p.participantPrincipalIds)c(t,m,l,"cadence participant",p.id);for(let m of p.escalationPrincipalIds)c(t,m,l,"cadence escalation",p.id)}for(let p of o.reviewInputSets){c(n,p.cadenceId,l,"review input cadence",p.id);for(let m of p.feedbackItemIds)c(e,m,l,"review input feedback",p.id);for(let m of p.commitmentIds)c(i,m,l,"review input commitment",p.id);for(let m of p.workItemIds)c(a,m,l,"review input work item",p.id);for(let m of p.objectiveIds)c(s,m,l,"review input objective",p.id);for(let m of p.memorySnapshotIds)c(r,m,l,"review input memory",p.id)}for(let p of o.reviewOutputPlans){c(n,p.cadenceId,l,"review output cadence",p.id);for(let m of p.decisionIds)c(d,m,l,"review output decision",p.id);for(let m of p.workItemIds)c(a,m,l,"review output work item",p.id);for(let m of p.actionProposalIds)c(I,m,l,"review output action proposal",p.id);for(let m of p.inboxItemIds)c(b,m,l,"review output inbox item",p.id)}return l}var v=new Set(["claimed","policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]),w=new Set(["policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]);function O(o,t,n){_(o,t,n),D(o,t,n),E(o,t,n)}function _(o,t,n){for(let e of o.executionPlans){if(c(n.workItemIds,e.workItemId,t,"execution work item",e.id),c(n.principalIds,e.accountableOwnerPrincipalId,t,"execution owner",e.id),c(n.requestIds,e.policyGateRequestId,t,"execution policy gate request",e.id),v.has(e.lifecycleState)&&!e.claimId)t.push(`CompanyOS execution plan ${e.id} requires a claim.`);if(!w.has(e.lifecycleState))continue;if(!e.policyGateDecisionId){t.push(`CompanyOS execution plan ${e.id} requires a policy gate decision.`);continue}c(n.decisionIds,e.policyGateDecisionId,t,"execution policy gate decision",e.id)}j(o,t,n)}function j(o,t,n){for(let e of o.executionPlans){for(let i of e.dispatchIds)c(n.dispatchIds,i,t,"execution dispatch",e.id);for(let i of e.receiptIds)c(n.receiptIds,i,t,"execution receipt",e.id)}}function D(o,t,n){for(let e of o.executionClaims)c(n.planIds,e.executionPlanId,t,"execution claim plan",e.id),c(n.workItemIds,e.workItemId,t,"execution claim work item",e.id),c(n.principalIds,e.claimantPrincipalId,t,"execution claim principal",e.id),c(n.principalIds,e.accountableOwnerPrincipalId,t,"execution claim owner",e.id)}function E(o,t,n){for(let e of o.policyGateRequests)c(n.planIds,e.executionPlanId,t,"policy gate plan",e.id),c(n.workItemIds,e.workItemId,t,"policy gate work item",e.id),c(n.autonomyDecisionIds,e.autonomyDecisionId,t,"policy gate autonomy decision",e.id);for(let e of o.policyGateDecisions){if(!n.autonomyDecisionIds.has(e.autonomyDecision.id))t.push(`CompanyOS policy gate ${e.id} must wrap an existing autonomy decision.`);if(["approval_required","reserved_human_only"].includes(e.verdict)&&e.requiredApprovalIds.length===0)t.push(`CompanyOS policy gate ${e.id} requires approval evidence.`);if(e.verdict==="reserved_human_only"&&e.approvedDispatchLane)t.push(`CompanyOS policy gate ${e.id} cannot dispatch reserved-human-only work.`)}}function S(o,t,n){x(o,t,n),A(o,t,n),G(o,t,n),M(o,t,n),N(o,t,n),T(o,t,n),F(o,t,n),K(o,t)}function x(o,t,n){let e=new Map(o.policyGateDecisions.map((i)=>[i.id,i]));for(let i of o.executionDispatchAuthorizations){if(c(n.planIds,i.executionPlanId,t,"dispatch authorization plan",i.id),i.dispatchId)c(n.dispatchIds,i.dispatchId,t,"dispatch authorization dispatch",i.id);if(i.policyGateRequestId)c(n.requestIds,i.policyGateRequestId,t,"dispatch authorization policy gate request",i.id);if(c(n.decisionIds,i.policyGateDecisionId,t,"dispatch authorization policy gate decision",i.id),c(n.principalIds,i.accountableOwnerPrincipalId,t,"dispatch authorization accountable owner",i.id),i.authorizedByPrincipalId)c(n.principalIds,i.authorizedByPrincipalId,t,"dispatch authorization principal",i.id);if(!i.asOf)t.push(`CompanyOS dispatch authorization ${i.id} requires asOf policy time.`);if(i.executionClaimId)c(n.claimIds,i.executionClaimId,t,"dispatch authorization claim",i.id);let a=e.get(i.policyGateDecisionId);if(!a)continue;if(i.authorizedLane!=="dry_run"){if(a.verdict!=="allow")t.push(`CompanyOS dispatch authorization ${i.id} cannot authorize ${i.authorizedLane} for policy verdict ${a.verdict}.`);if(a.approvedDispatchLane!==i.authorizedLane)t.push(`CompanyOS dispatch authorization ${i.id} must match the approved dispatch lane.`)}if(i.authorizedLane==="dry_run"&&i.dryRunProofRefIds.length===0&&i.verdict!=="denied")t.push(`CompanyOS dispatch authorization ${i.id} requires dry-run proof refs for dry_run lane.`);if(i.verdict==="denied"&&!i.failure)t.push(`CompanyOS dispatch authorization ${i.id} requires failure details when denied.`);if(i.verdict!=="denied"&&i.failure)t.push(`CompanyOS dispatch authorization ${i.id} must not carry failure details when authorized.`)}}function A(o,t,n){for(let e of o.operatorInboxRoutes){if(c(n.planIds,e.executionPlanId,t,"operator inbox route plan",e.id),e.authorizationId)c(n.authorizationIds,e.authorizationId,t,"operator inbox route authorization",e.id);for(let i of e.requiredPrincipalIds)c(n.principalIds,i,t,"operator inbox route principal",e.id)}}function G(o,t,n){for(let e of o.policyReplayPackets){if(!e.asOf)t.push(`CompanyOS policy replay packet ${e.id} requires asOf replay time.`);if(c(n.planIds,e.executionPlanId,t,"policy replay plan",e.id),c(n.requestIds,e.policyGateRequestId,t,"policy replay request",e.id),e.policyGateDecisionId)c(n.decisionIds,e.policyGateDecisionId,t,"policy replay decision",e.id);if(e.authorizationId)c(n.authorizationIds,e.authorizationId,t,"policy replay authorization",e.id);if(e.sourceEvidenceRefs.some((i)=>i.authorizationAuthority!==!1))t.push(`CompanyOS policy replay packet ${e.id} includes source evidence with authorization authority.`)}}function M(o,t,n){let e=new Map(o.policyReplayPackets.map((i)=>[i.id,i]));for(let i of o.replayDeterminismCases){if(c(n.replayPacketIds,i.replayPacketId,t,"replay determinism packet",i.id),c(n.planIds,i.executionPlanId,t,"replay determinism plan",i.id),!i.asOf)t.push(`CompanyOS replay determinism case ${i.id} requires asOf replay time.`);let a=e.get(i.replayPacketId);if(a?.asOf&&i.asOf&&a.asOf!==i.asOf)t.push(`CompanyOS replay determinism case ${i.id} must use the policy replay packet asOf time.`);if(i.status==="pass"&&i.actualOutputHash!==i.expectedOutputHash)t.push(`CompanyOS replay determinism case ${i.id} must match expected and actual output hashes when passing.`);if(i.status==="fail"&&!i.varianceReason)t.push(`CompanyOS replay determinism case ${i.id} requires a variance reason when failing.`)}}function N(o,t,n){let e=new Map(o.executionPlans.map((a)=>[a.id,a])),i=new Set(o.executionReceipts.map((a)=>a.dispatchId));for(let a of o.executionDispatches){if(c(n.planIds,a.executionPlanId,t,"dispatch plan",a.id),a.requiresReceipt&&!i.has(a.id))t.push(`CompanyOS dispatch ${a.id} requires an execution receipt.`);let d=e.get(a.executionPlanId);if(d&&a.idempotencyKey!==d.idempotency.key)t.push(`CompanyOS dispatch ${a.id} must reuse its plan idempotency key.`)}for(let a of o.executionReceipts){c(n.planIds,a.executionPlanId,t,"receipt plan",a.id),c(n.dispatchIds,a.dispatchId,t,"receipt dispatch",a.id);let d=e.get(a.executionPlanId);if(d&&a.idempotencyKey!==d.idempotency.key)t.push(`CompanyOS receipt ${a.id} must reuse its plan idempotency key.`)}}function T(o,t,n){let e=new Set(o.objectives.map((d)=>d.id)),i=new Set(o.memorySnapshots.map((d)=>d.id)),a=new Set(o.cadences.map((d)=>d.id));for(let d of o.outcomeReceipts){c(n.planIds,d.executionPlanId,t,"outcome plan",d.id),c(n.workItemIds,d.workItemId,t,"outcome work item",d.id);for(let s of d.receiptIds)c(n.receiptIds,s,t,"outcome receipt",d.id);for(let s of d.objectiveIds)c(e,s,t,"outcome objective",d.id);for(let s of d.memorySnapshotIds)c(i,s,t,"outcome memory",d.id);for(let s of d.cadenceIds)c(a,s,t,"outcome cadence",d.id)}}function F(o,t,n){for(let e of o.outcomeLinkages){if(c(n.planIds,e.executionPlanId,t,"outcome linkage plan",e.id),e.dispatchId)c(n.dispatchIds,e.dispatchId,t,"outcome linkage dispatch",e.id);c(n.outcomeReceiptIds,e.outcomeReceiptId,t,"outcome linkage receipt",e.id);for(let i of e.receiptIds)c(n.receiptIds,i,t,"outcome linkage execution receipt",e.id);if(e.status==="linked"&&e.receiptIds.length===0)t.push(`CompanyOS outcome linkage ${e.id} requires execution receipts when linked.`)}}function K(o,t){let n=new Map;for(let e of o.executionPlans){let i=n.get(e.idempotency.dedupeKey);if(i&&e.idempotency.strategy==="reject_duplicate")t.push(`CompanyOS execution plan ${e.id} duplicates dedupe key from ${i}.`);n.set(e.idempotency.dedupeKey,e.id)}}function k(o){let t=[],n={principalIds:u(o),workItemIds:new Set(o.workGraph.workRefs.map((e)=>e.id)),autonomyDecisionIds:new Set(o.autonomyDecisions.map((e)=>e.id)),planIds:new Set(o.executionPlans.map((e)=>e.id)),requestIds:new Set(o.policyGateRequests.map((e)=>e.id)),decisionIds:new Set(o.policyGateDecisions.map((e)=>e.id)),dispatchIds:new Set(o.executionDispatches.map((e)=>e.id)),receiptIds:new Set(o.executionReceipts.map((e)=>e.id)),claimIds:new Set(o.executionClaims.map((e)=>e.id)),authorizationIds:new Set(o.executionDispatchAuthorizations.map((e)=>e.id)),replayPacketIds:new Set(o.policyReplayPackets.map((e)=>e.id)),outcomeReceiptIds:new Set(o.outcomeReceipts.map((e)=>e.id))};return O(o,t,n),S(o,t,n),t}function R(o){let t=u(o),n=[];for(let e of o.objectives)c(t,e.ownerPrincipalId,n,"objective",e.id);for(let e of o.metrics)c(t,e.ownerPrincipalId,n,"metric",e.id);for(let e of[...o.memoryFacts,...o.memoryProcedures])c(t,e.ownerPrincipalId,n,"memory owner",e.id);for(let e of o.cadences)c(t,e.ownerPrincipalId,n,"cadence",e.id);return n}function C(o){let t=new Set(o.objectives.map((d)=>d.id)),n=new Set(o.metrics.map((d)=>d.id)),e=new Set(o.workGraph.workRefs.map((d)=>d.id)),i=new Set(o.agentActionProposals.map((d)=>d.id)),a=[];for(let d of o.objectives){for(let s of d.metricIds)c(n,s,a,"objective metric",d.id);for(let s of d.workItemIds)c(e,s,a,"objective work item",d.id)}for(let d of o.metrics)c(t,d.objectiveId,a,"metric objective",d.id);for(let d of o.metricObservations)c(n,d.metricId,a,"metric observation",d.id);for(let d of o.objectiveOutcomes){c(t,d.objectiveId,a,"objective outcome",d.id);for(let s of d.relatedWorkItemIds)c(e,s,a,"objective outcome work item",d.id)}for(let d of o.objectiveDriftSignals){if(c(t,d.objectiveId,a,"objective drift",d.id),d.metricId)c(n,d.metricId,a,"objective drift metric",d.id);for(let s of d.recommendedActionRefIds)c(i,s,a,"objective drift action",d.id)}return a}function P(o){let t=new Set(o.memoryFacts.map((a)=>a.id)),n=new Set(o.memoryProcedures.map((a)=>a.id)),e=new Set(o.workGraph.decisions.map((a)=>a.id)),i=[];for(let a of o.memorySnapshots){for(let d of a.factIds)c(t,d,i,"memory snapshot fact",a.id);for(let d of a.procedureIds)c(n,d,i,"memory snapshot procedure",a.id);for(let d of a.decisionIds)c(e,d,i,"memory snapshot decision",a.id)}return i}function le(o){return[...R(o),...C(o),...P(o),...h(o),...f(o),...g(o),...k(o)]}export{le as validateV1SemanticInvariants};

package/dist/validation/semantic.d.ts

@@ -0,0 +1,3 @@
+import type { CompanyOsV0ProductEngineeringLoop } from '../types/index.js';
+export { validateV1SemanticInvariants } from './semantic-v1.js';
+export declare function validateV0SemanticInvariants(fixture: CompanyOsV0ProductEngineeringLoop): string[];

package/dist/validation/semantic.js

@@ -0,0 +1,2 @@
+// @bun
+var L=new Map([["observe_only",0],["draft_only",1],["recommend",2],["execute_with_approval",3],["execute_within_limits",4],["fully_autonomous_bounded",5],["reserved_human_only",6]]);function u(o){return new Set(o.authority.principals.map((t)=>t.id))}function c(o,t,n,e,i){if(!o.has(t))n.push(`CompanyOS ${e} ${i} must reference a known id.`)}function f(o){return L.get(o)??Number.POSITIVE_INFINITY}function y(o){let t=u(o),n=new Set(o.connectors.map((d)=>d.id)),e=new Set(o.agentRoles.map((d)=>d.id)),i=new Set(o.agentTeams.map((d)=>d.id)),a=new Set(o.delegationRules.map((d)=>d.id)),r=new Set(o.toolAssignments.map((d)=>d.id)),s=[];for(let d of o.agentRoles){c(t,d.principalId,s,"agent role principal",d.id),c(t,d.accountableOwnerPrincipalId,s,"agent role owner",d.id);for(let I of d.escalationPrincipalIds)c(t,I,s,"agent role escalation",d.id);for(let I of d.toolAssignmentIds)c(r,I,s,"agent role tool assignment",d.id)}for(let d of o.agentTeams){c(e,d.managerRoleId,s,"agent team manager",d.id);for(let I of d.roleIds)c(e,I,s,"agent team role",d.id)}for(let d of o.delegationRules)q(o,e,t,d.id,s);for(let d of o.toolAssignments)if(d.connectorCapabilityId)c(n,d.connectorCapabilityId,s,"tool assignment connector",d.id);for(let d of o.handoffPolicies)c(a,d.delegationRuleId,s,"handoff delegation",d.id);for(let d of o.conflictResolutionPolicies){c(i,d.teamId,s,"conflict team",d.id),c(t,d.resolverPrincipalId,s,"conflict resolver",d.id);for(let I of d.escalationPrincipalIds)c(t,I,s,"conflict escalation",d.id)}return s}function g(o){let t=u(o),n=new Set(o.agentRoles.map((a)=>a.id)),e=new Set(o.agentNativeOperations.map((a)=>a.id)),i=[];for(let a of o.agentNativeOperations){if(!n.has(a.agentRoleId))i.push(`Agent-native operation ${a.id} must reference a role.`);if(c(t,a.accountableOwnerPrincipalId,i,"operation owner",a.id),_(a))i.push(`Agent-native execute operation ${a.id} must require dry-run and approval.`);if(f(a.autonomyCeiling)>f("execute_with_approval"))i.push(`Agent-native operation ${a.id} cannot exceed execute_with_approval in V1.`)}for(let a of o.agentToolDescriptors)c(e,a.operationId,i,"agent tool operation",a.id);for(let a of o.surfaceProfiles){c(n,a.roleId,i,"surface role",a.id);for(let r of a.primaryActionOperationIds)c(e,r,i,"surface primary operation",a.id)}return i}function q(o,t,n,e,i){let a=o.delegationRules.find((d)=>d.id===e);if(!a)return;if(!t.has(a.fromRoleId)||!t.has(a.toRoleId))i.push(`Agent delegation ${a.id} must reference known roles.`);let r=o.agentRoles.find((d)=>d.id===a.fromRoleId),s=o.agentRoles.find((d)=>d.id===a.toRoleId);if(r&&s&&V(a.maxAutonomyLevel,r.maxAutonomyLevel,s.maxAutonomyLevel))i.push(`Agent delegation ${a.id} cannot exceed role autonomy ceilings.`);c(n,a.escalationPrincipalId,i,"delegation escalation",a.id)}function V(o,t,n){return f(o)>f(t)||f(o)>f(n)}function _(o){return o.mode==="execute"&&(!o.dryRunPolicy.required||!o.dryRunPolicy.approvalRequiredForExecute)}function h(o){let t=u(o),n=new Set(o.cadences.map((p)=>p.id)),e=new Set(o.workGraph.feedbackItems.map((p)=>p.id)),i=new Set(o.workGraph.commitments.map((p)=>p.id)),a=new Set(o.workGraph.workRefs.map((p)=>p.id)),r=new Set(o.workGraph.decisions.map((p)=>p.id)),s=new Set(o.objectives.map((p)=>p.id)),d=new Set(o.memorySnapshots.map((p)=>p.id)),I=new Set(o.agentActionProposals.map((p)=>p.id)),b=new Set(o.operatorInbox.map((p)=>p.id)),l=[];for(let p of o.cadences){for(let m of p.participantPrincipalIds)c(t,m,l,"cadence participant",p.id);for(let m of p.escalationPrincipalIds)c(t,m,l,"cadence escalation",p.id)}for(let p of o.reviewInputSets){c(n,p.cadenceId,l,"review input cadence",p.id);for(let m of p.feedbackItemIds)c(e,m,l,"review input feedback",p.id);for(let m of p.commitmentIds)c(i,m,l,"review input commitment",p.id);for(let m of p.workItemIds)c(a,m,l,"review input work item",p.id);for(let m of p.objectiveIds)c(s,m,l,"review input objective",p.id);for(let m of p.memorySnapshotIds)c(d,m,l,"review input memory",p.id)}for(let p of o.reviewOutputPlans){c(n,p.cadenceId,l,"review output cadence",p.id);for(let m of p.decisionIds)c(r,m,l,"review output decision",p.id);for(let m of p.workItemIds)c(a,m,l,"review output work item",p.id);for(let m of p.actionProposalIds)c(I,m,l,"review output action proposal",p.id);for(let m of p.inboxItemIds)c(b,m,l,"review output inbox item",p.id)}return l}var v=new Set(["claimed","policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]),w=new Set(["policy_gated","dry_run_required","approval_required","dispatch_ready","dispatched","running","succeeded","failed","cancelled","blocked"]);function O(o,t,n){z(o,t,n),D(o,t,n),E(o,t,n)}function z(o,t,n){for(let e of o.executionPlans){if(c(n.workItemIds,e.workItemId,t,"execution work item",e.id),c(n.principalIds,e.accountableOwnerPrincipalId,t,"execution owner",e.id),c(n.requestIds,e.policyGateRequestId,t,"execution policy gate request",e.id),v.has(e.lifecycleState)&&!e.claimId)t.push(`CompanyOS execution plan ${e.id} requires a claim.`);if(!w.has(e.lifecycleState))continue;if(!e.policyGateDecisionId){t.push(`CompanyOS execution plan ${e.id} requires a policy gate decision.`);continue}c(n.decisionIds,e.policyGateDecisionId,t,"execution policy gate decision",e.id)}j(o,t,n)}function j(o,t,n){for(let e of o.executionPlans){for(let i of e.dispatchIds)c(n.dispatchIds,i,t,"execution dispatch",e.id);for(let i of e.receiptIds)c(n.receiptIds,i,t,"execution receipt",e.id)}}function D(o,t,n){for(let e of o.executionClaims)c(n.planIds,e.executionPlanId,t,"execution claim plan",e.id),c(n.workItemIds,e.workItemId,t,"execution claim work item",e.id),c(n.principalIds,e.claimantPrincipalId,t,"execution claim principal",e.id),c(n.principalIds,e.accountableOwnerPrincipalId,t,"execution claim owner",e.id)}function E(o,t,n){for(let e of o.policyGateRequests)c(n.planIds,e.executionPlanId,t,"policy gate plan",e.id),c(n.workItemIds,e.workItemId,t,"policy gate work item",e.id),c(n.autonomyDecisionIds,e.autonomyDecisionId,t,"policy gate autonomy decision",e.id);for(let e of o.policyGateDecisions){if(!n.autonomyDecisionIds.has(e.autonomyDecision.id))t.push(`CompanyOS policy gate ${e.id} must wrap an existing autonomy decision.`);if(["approval_required","reserved_human_only"].includes(e.verdict)&&e.requiredApprovalIds.length===0)t.push(`CompanyOS policy gate ${e.id} requires approval evidence.`);if(e.verdict==="reserved_human_only"&&e.approvedDispatchLane)t.push(`CompanyOS policy gate ${e.id} cannot dispatch reserved-human-only work.`)}}function S(o,t,n){x(o,t,n),A(o,t,n),G(o,t,n),M(o,t,n),N(o,t,n),F(o,t,n),T(o,t,n),K(o,t)}function x(o,t,n){let e=new Map(o.policyGateDecisions.map((i)=>[i.id,i]));for(let i of o.executionDispatchAuthorizations){if(c(n.planIds,i.executionPlanId,t,"dispatch authorization plan",i.id),i.dispatchId)c(n.dispatchIds,i.dispatchId,t,"dispatch authorization dispatch",i.id);if(i.policyGateRequestId)c(n.requestIds,i.policyGateRequestId,t,"dispatch authorization policy gate request",i.id);if(c(n.decisionIds,i.policyGateDecisionId,t,"dispatch authorization policy gate decision",i.id),c(n.principalIds,i.accountableOwnerPrincipalId,t,"dispatch authorization accountable owner",i.id),i.authorizedByPrincipalId)c(n.principalIds,i.authorizedByPrincipalId,t,"dispatch authorization principal",i.id);if(!i.asOf)t.push(`CompanyOS dispatch authorization ${i.id} requires asOf policy time.`);if(i.executionClaimId)c(n.claimIds,i.executionClaimId,t,"dispatch authorization claim",i.id);let a=e.get(i.policyGateDecisionId);if(!a)continue;if(i.authorizedLane!=="dry_run"){if(a.verdict!=="allow")t.push(`CompanyOS dispatch authorization ${i.id} cannot authorize ${i.authorizedLane} for policy verdict ${a.verdict}.`);if(a.approvedDispatchLane!==i.authorizedLane)t.push(`CompanyOS dispatch authorization ${i.id} must match the approved dispatch lane.`)}if(i.authorizedLane==="dry_run"&&i.dryRunProofRefIds.length===0&&i.verdict!=="denied")t.push(`CompanyOS dispatch authorization ${i.id} requires dry-run proof refs for dry_run lane.`);if(i.verdict==="denied"&&!i.failure)t.push(`CompanyOS dispatch authorization ${i.id} requires failure details when denied.`);if(i.verdict!=="denied"&&i.failure)t.push(`CompanyOS dispatch authorization ${i.id} must not carry failure details when authorized.`)}}function A(o,t,n){for(let e of o.operatorInboxRoutes){if(c(n.planIds,e.executionPlanId,t,"operator inbox route plan",e.id),e.authorizationId)c(n.authorizationIds,e.authorizationId,t,"operator inbox route authorization",e.id);for(let i of e.requiredPrincipalIds)c(n.principalIds,i,t,"operator inbox route principal",e.id)}}function G(o,t,n){for(let e of o.policyReplayPackets){if(!e.asOf)t.push(`CompanyOS policy replay packet ${e.id} requires asOf replay time.`);if(c(n.planIds,e.executionPlanId,t,"policy replay plan",e.id),c(n.requestIds,e.policyGateRequestId,t,"policy replay request",e.id),e.policyGateDecisionId)c(n.decisionIds,e.policyGateDecisionId,t,"policy replay decision",e.id);if(e.authorizationId)c(n.authorizationIds,e.authorizationId,t,"policy replay authorization",e.id);if(e.sourceEvidenceRefs.some((i)=>i.authorizationAuthority!==!1))t.push(`CompanyOS policy replay packet ${e.id} includes source evidence with authorization authority.`)}}function M(o,t,n){let e=new Map(o.policyReplayPackets.map((i)=>[i.id,i]));for(let i of o.replayDeterminismCases){if(c(n.replayPacketIds,i.replayPacketId,t,"replay determinism packet",i.id),c(n.planIds,i.executionPlanId,t,"replay determinism plan",i.id),!i.asOf)t.push(`CompanyOS replay determinism case ${i.id} requires asOf replay time.`);let a=e.get(i.replayPacketId);if(a?.asOf&&i.asOf&&a.asOf!==i.asOf)t.push(`CompanyOS replay determinism case ${i.id} must use the policy replay packet asOf time.`);if(i.status==="pass"&&i.actualOutputHash!==i.expectedOutputHash)t.push(`CompanyOS replay determinism case ${i.id} must match expected and actual output hashes when passing.`);if(i.status==="fail"&&!i.varianceReason)t.push(`CompanyOS replay determinism case ${i.id} requires a variance reason when failing.`)}}function N(o,t,n){let e=new Map(o.executionPlans.map((a)=>[a.id,a])),i=new Set(o.executionReceipts.map((a)=>a.dispatchId));for(let a of o.executionDispatches){if(c(n.planIds,a.executionPlanId,t,"dispatch plan",a.id),a.requiresReceipt&&!i.has(a.id))t.push(`CompanyOS dispatch ${a.id} requires an execution receipt.`);let r=e.get(a.executionPlanId);if(r&&a.idempotencyKey!==r.idempotency.key)t.push(`CompanyOS dispatch ${a.id} must reuse its plan idempotency key.`)}for(let a of o.executionReceipts){c(n.planIds,a.executionPlanId,t,"receipt plan",a.id),c(n.dispatchIds,a.dispatchId,t,"receipt dispatch",a.id);let r=e.get(a.executionPlanId);if(r&&a.idempotencyKey!==r.idempotency.key)t.push(`CompanyOS receipt ${a.id} must reuse its plan idempotency key.`)}}function F(o,t,n){let e=new Set(o.objectives.map((r)=>r.id)),i=new Set(o.memorySnapshots.map((r)=>r.id)),a=new Set(o.cadences.map((r)=>r.id));for(let r of o.outcomeReceipts){c(n.planIds,r.executionPlanId,t,"outcome plan",r.id),c(n.workItemIds,r.workItemId,t,"outcome work item",r.id);for(let s of r.receiptIds)c(n.receiptIds,s,t,"outcome receipt",r.id);for(let s of r.objectiveIds)c(e,s,t,"outcome objective",r.id);for(let s of r.memorySnapshotIds)c(i,s,t,"outcome memory",r.id);for(let s of r.cadenceIds)c(a,s,t,"outcome cadence",r.id)}}function T(o,t,n){for(let e of o.outcomeLinkages){if(c(n.planIds,e.executionPlanId,t,"outcome linkage plan",e.id),e.dispatchId)c(n.dispatchIds,e.dispatchId,t,"outcome linkage dispatch",e.id);c(n.outcomeReceiptIds,e.outcomeReceiptId,t,"outcome linkage receipt",e.id);for(let i of e.receiptIds)c(n.receiptIds,i,t,"outcome linkage execution receipt",e.id);if(e.status==="linked"&&e.receiptIds.length===0)t.push(`CompanyOS outcome linkage ${e.id} requires execution receipts when linked.`)}}function K(o,t){let n=new Map;for(let e of o.executionPlans){let i=n.get(e.idempotency.dedupeKey);if(i&&e.idempotency.strategy==="reject_duplicate")t.push(`CompanyOS execution plan ${e.id} duplicates dedupe key from ${i}.`);n.set(e.idempotency.dedupeKey,e.id)}}function k(o){let t=[],n={principalIds:u(o),workItemIds:new Set(o.workGraph.workRefs.map((e)=>e.id)),autonomyDecisionIds:new Set(o.autonomyDecisions.map((e)=>e.id)),planIds:new Set(o.executionPlans.map((e)=>e.id)),requestIds:new Set(o.policyGateRequests.map((e)=>e.id)),decisionIds:new Set(o.policyGateDecisions.map((e)=>e.id)),dispatchIds:new Set(o.executionDispatches.map((e)=>e.id)),receiptIds:new Set(o.executionReceipts.map((e)=>e.id)),claimIds:new Set(o.executionClaims.map((e)=>e.id)),authorizationIds:new Set(o.executionDispatchAuthorizations.map((e)=>e.id)),replayPacketIds:new Set(o.policyReplayPackets.map((e)=>e.id)),outcomeReceiptIds:new Set(o.outcomeReceipts.map((e)=>e.id))};return O(o,t,n),S(o,t,n),t}function P(o){let t=u(o),n=[];for(let e of o.objectives)c(t,e.ownerPrincipalId,n,"objective",e.id);for(let e of o.metrics)c(t,e.ownerPrincipalId,n,"metric",e.id);for(let e of[...o.memoryFacts,...o.memoryProcedures])c(t,e.ownerPrincipalId,n,"memory owner",e.id);for(let e of o.cadences)c(t,e.ownerPrincipalId,n,"cadence",e.id);return n}function C(o){let t=new Set(o.objectives.map((r)=>r.id)),n=new Set(o.metrics.map((r)=>r.id)),e=new Set(o.workGraph.workRefs.map((r)=>r.id)),i=new Set(o.agentActionProposals.map((r)=>r.id)),a=[];for(let r of o.objectives){for(let s of r.metricIds)c(n,s,a,"objective metric",r.id);for(let s of r.workItemIds)c(e,s,a,"objective work item",r.id)}for(let r of o.metrics)c(t,r.objectiveId,a,"metric objective",r.id);for(let r of o.metricObservations)c(n,r.metricId,a,"metric observation",r.id);for(let r of o.objectiveOutcomes){c(t,r.objectiveId,a,"objective outcome",r.id);for(let s of r.relatedWorkItemIds)c(e,s,a,"objective outcome work item",r.id)}for(let r of o.objectiveDriftSignals){if(c(t,r.objectiveId,a,"objective drift",r.id),r.metricId)c(n,r.metricId,a,"objective drift metric",r.id);for(let s of r.recommendedActionRefIds)c(i,s,a,"objective drift action",r.id)}return a}function R(o){let t=new Set(o.memoryFacts.map((a)=>a.id)),n=new Set(o.memoryProcedures.map((a)=>a.id)),e=new Set(o.workGraph.decisions.map((a)=>a.id)),i=[];for(let a of o.memorySnapshots){for(let r of a.factIds)c(t,r,i,"memory snapshot fact",a.id);for(let r of a.procedureIds)c(n,r,i,"memory snapshot procedure",a.id);for(let r of a.decisionIds)c(e,r,i,"memory snapshot decision",a.id)}return i}function B(o){return[...P(o),...C(o),...R(o),...h(o),...y(o),...g(o),...k(o)]}var H=new Set(["execute_within_limits","fully_autonomous_bounded"]);function ye(o){let t=[],n=U(o);if(!n.has(o.authority.accountableOwnerPrincipalId))t.push("AuthorityGraph.accountableOwnerPrincipalId must reference a principal.");for(let e of o.autonomyDecisions){if(!n.has(e.accountableOwnerPrincipalId))t.push(`Autonomy decision ${e.id} must reference an accountable owner.`);if(e.customerFacing&&H.has(e.approvedLevel))t.push(`Customer-facing decision ${e.id} cannot approve ${e.approvedLevel}.`);if(e.customerFacing&&e.requiredApprovalIds.length===0)t.push(`Customer-facing decision ${e.id} must require approval.`)}for(let e of o.operatorInbox)if(!n.has(e.accountableOwnerPrincipalId))t.push(`Inbox item ${e.id} must reference an accountable owner.`);return t}function U(o){return new Set(o.authority.principals.map((t)=>t.id))}export{ye as validateV0SemanticInvariants,B as validateV1SemanticInvariants};

package/dist/validation/temporal-assertion.d.ts

@@ -0,0 +1,4 @@
+import { type CompanyOsTemporalAssertionSet } from '../types/temporal-assertion.js';
+import type { CompanyOsValidationResult } from './index.js';
+export declare function validateCompanyOsTemporalAssertionSet(input: unknown): CompanyOsValidationResult;
+export declare function assertCompanyOsTemporalAssertionSet(input: unknown): CompanyOsTemporalAssertionSet;

package/dist/validation/temporal-assertion.js

@@ -0,0 +1,2 @@
+// @bun
+import{z as e}from"zod";import{z as n}from"zod";var c=n.record(n.string(),n.unknown()),g=n.object({id:n.string().min(1),connectorCapability:n.string().min(1),providerKey:n.string().min(1).optional(),externalId:n.string().min(1).optional(),url:n.string().url().optional(),observedAt:n.string().min(1),metadata:c.default({})}),v=n.object({default:n.string().min(1),translations:n.record(n.string(),n.string()).default({})}),m=n.object({id:n.string().min(1),type:n.string().min(1),label:n.string().min(1).optional()});var d=e.string().datetime({offset:!0}),C=e.discriminatedUnion("kind",[e.object({kind:e.literal("string"),value:e.string()}),e.object({kind:e.literal("number"),value:e.number().finite()}),e.object({kind:e.literal("boolean"),value:e.boolean()}),e.object({kind:e.literal("reference"),value:m})]),S=e.object({id:e.string().min(1),subjectRef:m,predicate:e.string().min(1),value:C,canonicalEntityRefs:e.array(m).default([]),sourceRefs:e.array(g).min(1),evidenceRefIds:e.array(e.string().min(1)).min(1),reviewDecisionRefIds:e.array(e.string().min(1)).default([]),observedAt:d,validFrom:d,validTo:d.optional(),recordedAt:d,supersedesClaimIds:e.array(e.string().min(1)).default([]),supersededByClaimIds:e.array(e.string().min(1)).default([]),contradictionGroupRef:e.string().min(1).optional(),conflictRefIds:e.array(e.string().min(1)).default([]),schemaRef:e.string().min(1),version:e.string().min(1),contentFingerprint:e.string().min(1),replayRef:e.string().min(1).optional(),derivedConfidence:e.number().min(0).max(1).optional(),derivedFreshness:e.enum(["fresh","stale","unknown"]).optional(),metadata:c.default({})}).superRefine((o,t)=>{if(o.validTo&&Date.parse(o.validFrom)>=Date.parse(o.validTo))t.addIssue({code:"custom",path:["validTo"],message:"validTo must be later than validFrom for [validFrom, validTo)"});if(o.supersedesClaimIds.includes(o.id))t.addIssue({code:"custom",path:["supersedesClaimIds"],message:"a temporal assertion cannot supersede itself"});if(o.supersededByClaimIds.includes(o.id))t.addIssue({code:"custom",path:["supersededByClaimIds"],message:"a temporal assertion cannot be superseded by itself"})}),u=e.object({schemaVersion:e.literal("companyos.temporal-assertions.v1"),assertions:e.array(S).min(1)});function k(o){let t=u.safeParse(o);if(!t.success)return{ok:!1,issues:t.error.issues.map((i)=>`${i.path.length>0?i.path.join("."):"root"}: ${i.message}`)};let r=h(t.data);return{ok:r.length===0,issues:r}}function A(o){let t=u.parse(o),r=h(t);if(r.length>0)throw Error(r.join("; "));return t}function h(o){let t=[],r=new Map(o.assertions.map((s)=>[s.id,s]));if(r.size!==o.assertions.length)t.push("Claim IDs must be unique.");for(let s of o.assertions){for(let a of s.supersedesClaimIds){let p=r.get(a);if(!p)t.push(`${s.id} supersedes unknown claim ${a}.`);else if(!p.supersededByClaimIds.includes(s.id))t.push(`${s.id} and ${a} must declare reciprocal supersession lineage.`)}for(let a of s.supersededByClaimIds){let p=r.get(a);if(!p)t.push(`${s.id} is superseded by unknown claim ${a}.`);else if(!p.supersedesClaimIds.includes(s.id))t.push(`${s.id} and ${a} must declare reciprocal supersession lineage.`)}}let i=new Set,l=new Set,f=(s)=>{if(i.has(s))return!0;if(l.has(s))return!1;i.add(s);let p=r.get(s)?.supersedesClaimIds.some((y)=>r.has(y)&&f(y))??!1;return i.delete(s),l.add(s),p};for(let s of r.keys())if(f(s)){t.push("Supersession lineage must be acyclic.");break}return t}export{A as assertCompanyOsTemporalAssertionSet,k as validateCompanyOsTemporalAssertionSet};

package/dist/validation/temporal-assertion.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/validation/temporal-knowledge.d.ts

@@ -0,0 +1 @@
+export * from './temporal-assertion.js';

package/dist/validation/temporal-knowledge.js

@@ -0,0 +1,2 @@
+// @bun
+import{z as e}from"zod";import{z as n}from"zod";var c=n.record(n.string(),n.unknown()),g=n.object({id:n.string().min(1),connectorCapability:n.string().min(1),providerKey:n.string().min(1).optional(),externalId:n.string().min(1).optional(),url:n.string().url().optional(),observedAt:n.string().min(1),metadata:c.default({})}),v=n.object({default:n.string().min(1),translations:n.record(n.string(),n.string()).default({})}),m=n.object({id:n.string().min(1),type:n.string().min(1),label:n.string().min(1).optional()});var d=e.string().datetime({offset:!0}),C=e.discriminatedUnion("kind",[e.object({kind:e.literal("string"),value:e.string()}),e.object({kind:e.literal("number"),value:e.number().finite()}),e.object({kind:e.literal("boolean"),value:e.boolean()}),e.object({kind:e.literal("reference"),value:m})]),S=e.object({id:e.string().min(1),subjectRef:m,predicate:e.string().min(1),value:C,canonicalEntityRefs:e.array(m).default([]),sourceRefs:e.array(g).min(1),evidenceRefIds:e.array(e.string().min(1)).min(1),reviewDecisionRefIds:e.array(e.string().min(1)).default([]),observedAt:d,validFrom:d,validTo:d.optional(),recordedAt:d,supersedesClaimIds:e.array(e.string().min(1)).default([]),supersededByClaimIds:e.array(e.string().min(1)).default([]),contradictionGroupRef:e.string().min(1).optional(),conflictRefIds:e.array(e.string().min(1)).default([]),schemaRef:e.string().min(1),version:e.string().min(1),contentFingerprint:e.string().min(1),replayRef:e.string().min(1).optional(),derivedConfidence:e.number().min(0).max(1).optional(),derivedFreshness:e.enum(["fresh","stale","unknown"]).optional(),metadata:c.default({})}).superRefine((o,t)=>{if(o.validTo&&Date.parse(o.validFrom)>=Date.parse(o.validTo))t.addIssue({code:"custom",path:["validTo"],message:"validTo must be later than validFrom for [validFrom, validTo)"});if(o.supersedesClaimIds.includes(o.id))t.addIssue({code:"custom",path:["supersedesClaimIds"],message:"a temporal assertion cannot supersede itself"});if(o.supersededByClaimIds.includes(o.id))t.addIssue({code:"custom",path:["supersededByClaimIds"],message:"a temporal assertion cannot be superseded by itself"})}),u=e.object({schemaVersion:e.literal("companyos.temporal-assertions.v1"),assertions:e.array(S).min(1)});function k(o){let t=u.safeParse(o);if(!t.success)return{ok:!1,issues:t.error.issues.map((i)=>`${i.path.length>0?i.path.join("."):"root"}: ${i.message}`)};let r=h(t.data);return{ok:r.length===0,issues:r}}function A(o){let t=u.parse(o),r=h(t);if(r.length>0)throw Error(r.join("; "));return t}function h(o){let t=[],r=new Map(o.assertions.map((s)=>[s.id,s]));if(r.size!==o.assertions.length)t.push("Claim IDs must be unique.");for(let s of o.assertions){for(let a of s.supersedesClaimIds){let p=r.get(a);if(!p)t.push(`${s.id} supersedes unknown claim ${a}.`);else if(!p.supersededByClaimIds.includes(s.id))t.push(`${s.id} and ${a} must declare reciprocal supersession lineage.`)}for(let a of s.supersededByClaimIds){let p=r.get(a);if(!p)t.push(`${s.id} is superseded by unknown claim ${a}.`);else if(!p.supersedesClaimIds.includes(s.id))t.push(`${s.id} and ${a} must declare reciprocal supersession lineage.`)}}let i=new Set,l=new Set,f=(s)=>{if(i.has(s))return!0;if(l.has(s))return!1;i.add(s);let p=r.get(s)?.supersedesClaimIds.some((y)=>r.has(y)&&f(y))??!1;return i.delete(s),l.add(s),p};for(let s of r.keys())if(f(s)){t.push("Supersession lineage must be acyclic.");break}return t}export{A as assertCompanyOsTemporalAssertionSet,k as validateCompanyOsTemporalAssertionSet};

package/dist/validation/tenant-governance-envelope.d.ts

@@ -0,0 +1,2 @@
+import type { CompanyOsTenantGovernanceDisposition } from '../types/tenant-governance-envelope.js';
+export declare function assessCompanyOsTenantGovernanceEnvelope(candidate: unknown, assessedAt: string): CompanyOsTenantGovernanceDisposition;

package/dist/validation/tenant-governance-envelope.js

@@ -0,0 +1,2 @@
+// @bun
+import{z as e}from"zod";import{z as n}from"zod";var m=n.record(n.string(),n.unknown()),h=n.object({id:n.string().min(1),connectorCapability:n.string().min(1),providerKey:n.string().min(1).optional(),externalId:n.string().min(1).optional(),url:n.string().url().optional(),observedAt:n.string().min(1),metadata:m.default({})}),R=n.object({default:n.string().min(1),translations:n.record(n.string(),n.string()).default({})}),y=n.object({id:n.string().min(1),type:n.string().min(1),label:n.string().min(1).optional()});var d=e.string().datetime({offset:!0}),i="companyos.tenant-governance-envelope.v1",x="companyos.tenant-governance-envelope.v1|scope,subjectRef,authority,dataGovernance,idempotency,evidenceReplayRefs,governanceState,createdAt,metadata|server-derived-authority,tenant-workspace-subject-idempotency,evidence-replay-required",b="sha256:d6f5fd6944c14279351120a212b3580afc4e3781c6ecaea1e89d6d498dc740cf",l=["companyos.tenant-governance-envelope.v0"],E=e.enum(["active","migration_required","quarantined"]),O=e.object({tenantId:e.string().min(1),workspaceId:e.string().min(1)}),u=e.object({derivation:e.literal("server_derived"),actorPrincipalId:e.string().min(1),accountableOwnerPrincipalId:e.string().min(1),authorityEvaluationRefId:e.string().min(1),rbacDecisionRefId:e.string().min(1)}),g=e.object({residencyRegion:e.string().min(1),residencyEvidenceRefIds:e.array(e.string().min(1)).min(1),providerResidencyVerified:e.boolean(),retentionPolicyRefId:e.string().min(1),retainUntil:d,legalBasis:e.enum(["contract","legal_obligation","legitimate_interest","consent"]),consentRefId:e.string().min(1).optional()}).superRefine((t,s)=>{if(t.legalBasis==="consent"&&!t.consentRefId)s.addIssue({code:"custom",path:["consentRefId"],message:"consent legal basis requires a consent reference"})}),_=e.object({key:e.string().min(1),scope:e.literal("tenant_workspace_subject"),tenantId:e.string().min(1),workspaceId:e.string().min(1),subjectRefId:e.string().min(1)}),v=e.object({evidenceReceiptIds:e.array(e.string().min(1)).min(1),replayPacketIds:e.array(e.string().min(1)).min(1)}),f=e.object({id:e.string().min(1),schemaVersion:e.literal(i),policyVersion:e.string().min(1),scope:O,subjectRef:y,authority:u,dataGovernance:g,idempotency:_,evidenceReplayRefs:v,governanceState:e.literal("active"),createdAt:d,metadata:m.default({})}).superRefine((t,s)=>{let o={tenantId:t.scope.tenantId,workspaceId:t.scope.workspaceId,subjectRefId:t.subjectRef.id};for(let[r,a]of Object.entries(o))if(t.idempotency[r]!==a)s.addIssue({code:"custom",path:["idempotency",r],message:`${r} must match the governed envelope scope`})}),c=e.object({envelopeId:e.string().min(1).optional(),sourceSchemaVersion:e.string().min(1).optional(),targetSchemaVersion:e.literal(i),state:E,reasonCodes:e.array(e.string().min(1)).min(1),migrationPerformed:e.literal(!1),persistenceMutationAllowed:e.literal(!1),assessedAt:d});function C(t){if(typeof t!=="object"||t===null)return{};return t}function P(t,s){let o=C(t),r=typeof o.id==="string"?o.id:void 0,a=typeof o.schemaVersion==="string"?o.schemaVersion:void 0,p={envelopeId:r,sourceSchemaVersion:a,targetSchemaVersion:i,migrationPerformed:!1,persistenceMutationAllowed:!1,assessedAt:s};if(a&&l.includes(a))return c.parse({...p,state:"migration_required",reasonCodes:["supported_legacy_schema_requires_explicit_migration"]});if(f.safeParse(t).success)return c.parse({...p,state:"active",reasonCodes:["current_schema_valid"]});return c.parse({...p,state:"quarantined",reasonCodes:a?["unknown_or_invalid_schema"]:["missing_schema_version"]})}export{P as assessCompanyOsTenantGovernanceEnvelope};

package/dist/validation/tenant-governance-envelope.test.d.ts

@@ -0,0 +1 @@
+export {};