@lssm/lib.contracts-integrations 9.0.1

package/dist/integrations/providers/crm-hubspot-fixture.js

@@ -0,0 +1,2 @@
+// @bun
+var p="crm.read.v1";function w(e){if([e.providerKey,e.externalId,e.capturedAt,e.provenanceRefId,e.retentionPolicyRefId,e.dedupeKey,e.idempotencyKey].some((r)=>r.trim().length===0))throw new i("External profiles require complete identity and governance metadata");if(e.evidenceRefIds.length===0)throw new i("External profiles require at least one evidence reference");if(e.legalBasis==="consent"&&!e.consentRefId)throw new i("Consent legal basis requires a consent reference");let t;try{t=new URL(e.canonicalUrl)}catch{throw new i("External profile URL is invalid")}if(t.protocol!=="https:"||t.username!==""||t.password!==""||t.search!==""||t.hash!=="")throw new i("External profile URL must be a canonical HTTPS URL");if(e.providerKey==="linkedin"){let r=t.hostname==="linkedin.com"||t.hostname==="www.linkedin.com",a=e.kind==="professional-profile"?"/in/":"/company/";if(!r||!t.pathname.startsWith(a))throw new i("LinkedIn profile URL does not match its governed profile kind")}}class i extends Error{constructor(e){super(e);this.name="CrmReadContractError"}}function m(e){if(e.contractVersion!=="crm.read.v1")throw new i("Unsupported CRM read contract version");if([e.requestId,e.tenant.tenantId,e.tenant.workspaceId,e.tenant.actorPrincipalId,e.tenant.authorityEvaluationRefId,e.legal.retentionPolicyRefId].some((r)=>r.trim().length===0))throw new i("CRM reads require complete tenant governance");if(e.legal.legalBasis==="consent"&&!e.legal.consentRefId)throw new i("Consent legal basis requires a consent reference");if(e.entityKinds.length===0)throw new i("At least one CRM entity kind is required");let t=new Set(["contact","company","deal"]);if(e.entityKinds.length>t.size||new Set(e.entityKinds).size!==e.entityKinds.length||e.entityKinds.some((r)=>!t.has(r)))throw new i("CRM entity kinds must be unique and supported");if(!Number.isInteger(e.pageSize)||e.pageSize<1||e.pageSize>100)throw new i("CRM page size must be an integer from 1 to 100")}function g(e){let n=e.records.map((t)=>({...t}));return I(n),{providerKey:e.providerKey,readPage:(t)=>f(e,n,t)}}function f(e,n,t){m(t),R(n,t.tenant.tenantId);let r=[...new Set(t.entityKinds)].sort().join(","),a=x(e.providerKey,t,r),s=n.filter((o)=>!o.tombstoned&&t.entityKinds.includes(o.kind)),d=s.slice(a,a+t.pageSize),c=a+d.length,l=c<s.length;return{contractVersion:p,requestId:t.requestId,providerKey:e.providerKey,tenantId:t.tenant.tenantId,workspaceId:t.tenant.workspaceId,items:d.map((o)=>y(e,t,o)),nextCursor:l?C(e.providerKey,t,r,c):void 0,hasMore:l,readOnly:!0}}function y(e,n,t){let r=`${e.providerKey}:${t.kind}:${t.sourceObjectId}`;return{id:r,kind:t.kind,tenantId:n.tenant.tenantId,workspaceId:n.tenant.workspaceId,displayName:t.displayName,attributes:{...t.attributes},provenance:{providerKey:e.providerKey,sourceObjectType:t.sourceObjectType,sourceObjectId:t.sourceObjectId,sourceRevision:t.sourceRevision,sourceUpdatedAt:t.sourceUpdatedAt,capturedAt:e.capturedAt,evidenceRefIds:[...t.evidenceRefIds]},legal:{...n.legal},dedupeKey:`${n.tenant.tenantId}:${r}`,idempotencyKey:`${n.tenant.tenantId}:${r}:${t.sourceRevision}`}}function R(e,n){if(e.some((t)=>t.tenantId!==n))throw new i("CRM fixture crossed the requested tenant boundary")}function I(e){if(e.some((n)=>n.sourceObjectId.trim().length===0||n.sourceRevision.trim().length===0||n.displayName.trim().length===0||n.evidenceRefIds.length===0||Number.isNaN(Date.parse(n.sourceUpdatedAt))))throw new i("CRM fixtures require complete provenance and evidence")}function C(e,n,t,r){return[p,e,n.tenant.tenantId,n.tenant.workspaceId,t,r].map(encodeURIComponent).join("|")}function x(e,n,t){if(!n.cursor)return 0;let r=n.cursor.split("|").map(decodeURIComponent),[a,s,d,c,l,o]=r;if(r.length!==6||a!==p||s!==e||d!==n.tenant.tenantId||c!==n.tenant.workspaceId||l!==t)throw new i("CRM cursor is outside the requested read scope");let u=Number(o);if(!Number.isInteger(u)||u<0)throw new i("CRM cursor offset is invalid");return u}function E(e){return g({providerKey:"hubspot-fixture",capturedAt:e.capturedAt,records:e.records.map(v)})}function v(e){let n={contacts:"contact",companies:"company",deals:"deal"};return{tenantId:e.tenantId,kind:n[e.objectType],sourceObjectType:e.objectType,sourceObjectId:e.id,sourceRevision:e.revision,sourceUpdatedAt:e.updatedAt,evidenceRefIds:[...e.evidenceRefIds],displayName:h(e.properties),attributes:{...e.properties},tombstoned:e.archived}}function h(e){let n=[e.firstname,e.lastname].filter(Boolean).join(" "),t=e.name??e.dealname??n;if(typeof t!=="string"||t.length===0)throw Error("HubSpot-shaped CRM fixture requires a display name");return t}export{E as createHubSpotCrmFixtureAdapter};

package/dist/integrations/providers/crm-salesforce-fixture.d.ts

@@ -0,0 +1,17 @@
+export interface SalesforceCrmFixtureRecord {
+    tenantId: string;
+    attributes: {
+        type: 'Contact' | 'Account' | 'Opportunity';
+    };
+    Id: string;
+    Name: string;
+    LastModifiedDate: string;
+    revision: string;
+    evidenceRefIds: readonly string[];
+    fields: Readonly<Record<string, string | number | boolean | null>>;
+    IsDeleted?: boolean;
+}
+export declare function createSalesforceCrmFixtureAdapter(options: {
+    capturedAt: string;
+    records: readonly SalesforceCrmFixtureRecord[];
+}): import("./crm").SynchronousCrmReadProvider;

package/dist/integrations/providers/crm-salesforce-fixture.js

@@ -0,0 +1,2 @@
+// @bun
+var p="crm.read.v1";function w(e){if([e.providerKey,e.externalId,e.capturedAt,e.provenanceRefId,e.retentionPolicyRefId,e.dedupeKey,e.idempotencyKey].some((r)=>r.trim().length===0))throw new i("External profiles require complete identity and governance metadata");if(e.evidenceRefIds.length===0)throw new i("External profiles require at least one evidence reference");if(e.legalBasis==="consent"&&!e.consentRefId)throw new i("Consent legal basis requires a consent reference");let t;try{t=new URL(e.canonicalUrl)}catch{throw new i("External profile URL is invalid")}if(t.protocol!=="https:"||t.username!==""||t.password!==""||t.search!==""||t.hash!=="")throw new i("External profile URL must be a canonical HTTPS URL");if(e.providerKey==="linkedin"){let r=t.hostname==="linkedin.com"||t.hostname==="www.linkedin.com",a=e.kind==="professional-profile"?"/in/":"/company/";if(!r||!t.pathname.startsWith(a))throw new i("LinkedIn profile URL does not match its governed profile kind")}}class i extends Error{constructor(e){super(e);this.name="CrmReadContractError"}}function f(e){if(e.contractVersion!=="crm.read.v1")throw new i("Unsupported CRM read contract version");if([e.requestId,e.tenant.tenantId,e.tenant.workspaceId,e.tenant.actorPrincipalId,e.tenant.authorityEvaluationRefId,e.legal.retentionPolicyRefId].some((r)=>r.trim().length===0))throw new i("CRM reads require complete tenant governance");if(e.legal.legalBasis==="consent"&&!e.legal.consentRefId)throw new i("Consent legal basis requires a consent reference");if(e.entityKinds.length===0)throw new i("At least one CRM entity kind is required");let t=new Set(["contact","company","deal"]);if(e.entityKinds.length>t.size||new Set(e.entityKinds).size!==e.entityKinds.length||e.entityKinds.some((r)=>!t.has(r)))throw new i("CRM entity kinds must be unique and supported");if(!Number.isInteger(e.pageSize)||e.pageSize<1||e.pageSize>100)throw new i("CRM page size must be an integer from 1 to 100")}function g(e){let n=e.records.map((t)=>({...t}));return I(n),{providerKey:e.providerKey,readPage:(t)=>m(e,n,t)}}function m(e,n,t){f(t),R(n,t.tenant.tenantId);let r=[...new Set(t.entityKinds)].sort().join(","),a=x(e.providerKey,t,r),s=n.filter((o)=>!o.tombstoned&&t.entityKinds.includes(o.kind)),d=s.slice(a,a+t.pageSize),c=a+d.length,l=c<s.length;return{contractVersion:p,requestId:t.requestId,providerKey:e.providerKey,tenantId:t.tenant.tenantId,workspaceId:t.tenant.workspaceId,items:d.map((o)=>y(e,t,o)),nextCursor:l?C(e.providerKey,t,r,c):void 0,hasMore:l,readOnly:!0}}function y(e,n,t){let r=`${e.providerKey}:${t.kind}:${t.sourceObjectId}`;return{id:r,kind:t.kind,tenantId:n.tenant.tenantId,workspaceId:n.tenant.workspaceId,displayName:t.displayName,attributes:{...t.attributes},provenance:{providerKey:e.providerKey,sourceObjectType:t.sourceObjectType,sourceObjectId:t.sourceObjectId,sourceRevision:t.sourceRevision,sourceUpdatedAt:t.sourceUpdatedAt,capturedAt:e.capturedAt,evidenceRefIds:[...t.evidenceRefIds]},legal:{...n.legal},dedupeKey:`${n.tenant.tenantId}:${r}`,idempotencyKey:`${n.tenant.tenantId}:${r}:${t.sourceRevision}`}}function R(e,n){if(e.some((t)=>t.tenantId!==n))throw new i("CRM fixture crossed the requested tenant boundary")}function I(e){if(e.some((n)=>n.sourceObjectId.trim().length===0||n.sourceRevision.trim().length===0||n.displayName.trim().length===0||n.evidenceRefIds.length===0||Number.isNaN(Date.parse(n.sourceUpdatedAt))))throw new i("CRM fixtures require complete provenance and evidence")}function C(e,n,t,r){return[p,e,n.tenant.tenantId,n.tenant.workspaceId,t,r].map(encodeURIComponent).join("|")}function x(e,n,t){if(!n.cursor)return 0;let r=n.cursor.split("|").map(decodeURIComponent),[a,s,d,c,l,o]=r;if(r.length!==6||a!==p||s!==e||d!==n.tenant.tenantId||c!==n.tenant.workspaceId||l!==t)throw new i("CRM cursor is outside the requested read scope");let u=Number(o);if(!Number.isInteger(u)||u<0)throw new i("CRM cursor offset is invalid");return u}function A(e){return g({providerKey:"salesforce-fixture",capturedAt:e.capturedAt,records:e.records.map(v)})}function v(e){let n={Contact:"contact",Account:"company",Opportunity:"deal"};return{tenantId:e.tenantId,kind:n[e.attributes.type],sourceObjectType:e.attributes.type,sourceObjectId:e.Id,sourceRevision:e.revision,sourceUpdatedAt:e.LastModifiedDate,evidenceRefIds:[...e.evidenceRefIds],displayName:e.Name,attributes:{...e.fields},tombstoned:e.IsDeleted}}export{A as createSalesforceCrmFixtureAdapter};

package/dist/integrations/providers/crm-write-proposal-types.d.ts

@@ -0,0 +1,83 @@
+import type { CrmEntityKind, CrmLegalMetadata, CrmScalar, CrmTenantBoundary } from './crm.js';
+export declare const CRM_WRITE_PROPOSAL_CONTRACT_VERSION: 'crm.write-proposal.v1';
+export declare const CRM_WRITE_PROPOSAL_SCHEMA_IDENTITY: 'crm.write-proposal.v1|tenant,legal,freshness,evidence,cost,create,update,link,diff,receipt|proposal-only,dry-run,no-mutation';
+export declare const CRM_WRITE_PROPOSAL_SCHEMA_FINGERPRINT: 'sha256:facdf429a5eaa779ebfde3d0a781dbdd777d694398e7f23ed5a652249bad988e';
+export interface CrmWriteEvidenceMetadata {
+    sourceRefIds: readonly string[];
+    evidenceRefIds: readonly string[];
+    deletionEvidenceRefIds: readonly string[];
+}
+export interface CrmWriteFreshnessMetadata {
+    observedAt: string;
+    expiresAt: string;
+}
+export interface CrmWriteCostMetadata {
+    currency: string;
+    estimatedMinorUnits: number;
+    pricingRefId: string;
+}
+export interface CrmWriteTargetRef {
+    providerKey: string;
+    entityKind: CrmEntityKind;
+    sourceObjectId: string;
+    expectedSourceRevision: string;
+}
+export type CrmWriteProposalIntent = {
+    kind: 'create';
+    entityKind: CrmEntityKind;
+    externalKey: string;
+    attributes: Readonly<Record<string, CrmScalar>>;
+} | {
+    kind: 'update';
+    target: CrmWriteTargetRef;
+    desiredAttributes: Readonly<Record<string, CrmScalar>>;
+} | {
+    kind: 'link';
+    relation: string;
+    from: CrmWriteTargetRef;
+    to: CrmWriteTargetRef;
+};
+export interface CrmWriteProposal {
+    contractVersion: typeof CRM_WRITE_PROPOSAL_CONTRACT_VERSION;
+    proposalId: string;
+    createdAt: string;
+    tenant: CrmTenantBoundary;
+    legal: CrmLegalMetadata;
+    freshness: CrmWriteFreshnessMetadata;
+    evidence: CrmWriteEvidenceMetadata;
+    cost: CrmWriteCostMetadata;
+    intent: CrmWriteProposalIntent;
+}
+export interface CrmObservedEntity {
+    target: Omit<CrmWriteTargetRef, 'expectedSourceRevision'> & {
+        sourceRevision: string;
+    };
+    externalKey?: string;
+    attributes: Readonly<Record<string, CrmScalar>>;
+    deletionState: 'active' | 'tombstoned';
+    links: readonly {
+        relation: string;
+        targetSourceObjectId: string;
+    }[];
+}
+export interface CrmWriteDryRunChange {
+    operation: 'create' | 'set' | 'link';
+    path: string;
+    before?: CrmScalar;
+    after?: CrmScalar;
+}
+export interface CrmWriteDryRunReceipt {
+    contractVersion: typeof CRM_WRITE_PROPOSAL_CONTRACT_VERSION;
+    receiptId: string;
+    proposalId: string;
+    status: 'ready' | 'conflict' | 'stale';
+    reasons: readonly string[];
+    changes: readonly CrmWriteDryRunChange[];
+    diffFingerprint: string;
+    mutationPerformed: false;
+    tenant: CrmTenantBoundary;
+    legal: CrmLegalMetadata;
+    freshness: CrmWriteFreshnessMetadata;
+    evidence: CrmWriteEvidenceMetadata;
+    cost: CrmWriteCostMetadata;
+}

package/dist/integrations/providers/crm-write-proposal-types.js

@@ -0,0 +1,2 @@
+// @bun
+var e="crm.write-proposal.v1",t="crm.write-proposal.v1|tenant,legal,freshness,evidence,cost,create,update,link,diff,receipt|proposal-only,dry-run,no-mutation",r="sha256:facdf429a5eaa779ebfde3d0a781dbdd777d694398e7f23ed5a652249bad988e";export{e as CRM_WRITE_PROPOSAL_CONTRACT_VERSION,r as CRM_WRITE_PROPOSAL_SCHEMA_FINGERPRINT,t as CRM_WRITE_PROPOSAL_SCHEMA_IDENTITY};

package/dist/integrations/providers/crm-write-proposal.d.ts

@@ -0,0 +1,7 @@
+import { type CrmObservedEntity, type CrmWriteDryRunReceipt, type CrmWriteProposal } from './crm-write-proposal-types.js';
+export * from './crm-write-proposal-types.js';
+export declare function createCrmWriteDryRun(input: {
+    proposal: CrmWriteProposal;
+    observed: readonly CrmObservedEntity[];
+    evaluatedAt: string;
+}): Promise<CrmWriteDryRunReceipt>;

package/dist/integrations/providers/crm-write-proposal.js

@@ -0,0 +1,2 @@
+// @bun
+import{canonicalJsonString as f}from"@lssm/lib.contracts-spec/rich-reference/canonical-serializer";var c="crm.write-proposal.v1",u="crm.write-proposal.v1|tenant,legal,freshness,evidence,cost,create,update,link,diff,receipt|proposal-only,dry-run,no-mutation",C="sha256:facdf429a5eaa779ebfde3d0a781dbdd777d694398e7f23ed5a652249bad988e";async function v(e){m(e.proposal);let r=Date.parse(e.evaluatedAt)>Date.parse(e.proposal.freshness.expiresAt)?{status:"stale",reasons:["freshness_expired"],changes:[]}:l(e.proposal.intent,e.observed),a={status:r.status,reasons:[...r.reasons].sort(),changes:[...r.changes].sort((s,i)=>`${s.operation}:${s.path}`.localeCompare(`${i.operation}:${i.path}`))},t=await p(f(a));return{contractVersion:c,receiptId:`crm-write-dry-run:${e.proposal.proposalId}:${t}`,proposalId:e.proposal.proposalId,...a,diffFingerprint:t,mutationPerformed:!1,tenant:{...e.proposal.tenant},legal:{...e.proposal.legal},freshness:{...e.proposal.freshness},evidence:g(e.proposal.evidence),cost:{...e.proposal.cost}}}function l(e,n){if(e.kind==="create"){if(n.some((t)=>t.externalKey===e.externalKey))return o("external_key_exists");return{status:"ready",reasons:[],changes:Object.entries(e.attributes).map(([t,s])=>({operation:"create",path:t,after:s}))}}if(e.kind==="update"){let t=d(e.target,n);if(typeof t==="string")return o(t);return{status:"ready",reasons:[],changes:Object.entries(e.desiredAttributes).filter(([s,i])=>t.attributes[s]!==i).map(([s,i])=>({operation:"set",path:s,before:t.attributes[s],after:i}))}}let r=d(e.from,n),a=d(e.to,n);if(typeof r==="string"||typeof a==="string")return o(typeof r==="string"?r:a);if(r.links.some((t)=>t.relation===e.relation&&t.targetSourceObjectId===e.to.sourceObjectId))return o("link_already_exists");return{status:"ready",reasons:[],changes:[{operation:"link",path:`${e.from.sourceObjectId}.${e.relation}`,after:e.to.sourceObjectId}]}}function d(e,n){let r=n.find((a)=>a.target.providerKey===e.providerKey&&a.target.sourceObjectId===e.sourceObjectId);if(!r)return"target_missing";if(r.deletionState==="tombstoned")return"target_tombstoned";if(r.target.sourceRevision!==e.expectedSourceRevision)return"source_revision_conflict";return r}function m(e){let n=[e.proposalId,e.tenant.tenantId,e.tenant.workspaceId,e.tenant.actorPrincipalId,e.tenant.authorityEvaluationRefId,e.legal.retentionPolicyRefId,e.cost.currency,e.cost.pricingRefId];if(e.contractVersion!==c||n.some((r)=>r.trim().length===0)||e.evidence.sourceRefIds.length===0||e.evidence.evidenceRefIds.length===0||!Number.isInteger(e.cost.estimatedMinorUnits)||e.cost.estimatedMinorUnits<0||Number.isNaN(Date.parse(e.freshness.observedAt))||Number.isNaN(Date.parse(e.freshness.expiresAt)))throw Error("CRM write proposals require complete governance metadata");if(e.legal.legalBasis==="consent"&&!e.legal.consentRefId)throw Error("Consent legal basis requires a consent reference")}function o(e){return{status:"conflict",reasons:[e],changes:[]}}function g(e){return{sourceRefIds:[...e.sourceRefIds],evidenceRefIds:[...e.evidenceRefIds],deletionEvidenceRefIds:[...e.deletionEvidenceRefIds]}}async function p(e){let n=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(e));return Array.from(new Uint8Array(n),(r)=>r.toString(16).padStart(2,"0")).join("")}export{c as CRM_WRITE_PROPOSAL_CONTRACT_VERSION,C as CRM_WRITE_PROPOSAL_SCHEMA_FINGERPRINT,u as CRM_WRITE_PROPOSAL_SCHEMA_IDENTITY,v as createCrmWriteDryRun};

package/dist/integrations/providers/crm-write-proposal.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/integrations/providers/crm.d.ts

@@ -0,0 +1,94 @@
+export declare const CRM_READ_CONTRACT_VERSION: 'crm.read.v1';
+export type CrmEntityKind = 'contact' | 'company' | 'deal';
+export type CrmLegalBasis = 'contract' | 'legal_obligation' | 'legitimate_interest' | 'consent';
+export interface CrmTenantBoundary {
+    tenantId: string;
+    workspaceId: string;
+    actorPrincipalId: string;
+    authorityEvaluationRefId: string;
+}
+export interface CrmLegalMetadata {
+    legalBasis: CrmLegalBasis;
+    consentRefId?: string;
+    retentionPolicyRefId: string;
+}
+export interface CrmReadRequest {
+    contractVersion: typeof CRM_READ_CONTRACT_VERSION;
+    requestId: string;
+    tenant: CrmTenantBoundary;
+    legal: CrmLegalMetadata;
+    entityKinds: readonly CrmEntityKind[];
+    pageSize: number;
+    cursor?: string;
+}
+export interface CrmEntityProvenance {
+    providerKey: string;
+    sourceObjectType: string;
+    sourceObjectId: string;
+    sourceRevision: string;
+    sourceUpdatedAt: string;
+    capturedAt: string;
+    evidenceRefIds: readonly string[];
+}
+interface ExternalProfileRefBase {
+    providerKey: string;
+    canonicalUrl: string;
+    externalId: string;
+    externalUrn?: string;
+    vanityIdentifier?: string;
+    verifiedAt?: string;
+    capturedAt: string;
+    provenanceRefId: string;
+    evidenceRefIds: readonly string[];
+    legalBasis: CrmLegalBasis;
+    consentRefId?: string;
+    retentionPolicyRefId: string;
+    dedupeKey: string;
+    idempotencyKey: string;
+}
+export interface ExternalProfessionalProfileRef extends ExternalProfileRefBase {
+    kind: 'professional-profile';
+}
+export interface ExternalOrganizationProfileRef extends ExternalProfileRefBase {
+    kind: 'organization-profile';
+}
+export type ExternalProfileRef = ExternalProfessionalProfileRef | ExternalOrganizationProfileRef;
+export type CrmScalar = string | number | boolean | null;
+export interface CrmEntityProjection {
+    id: string;
+    kind: CrmEntityKind;
+    tenantId: string;
+    workspaceId: string;
+    displayName: string;
+    attributes: Readonly<Record<string, CrmScalar>>;
+    externalProfiles?: readonly ExternalProfileRef[];
+    provenance: CrmEntityProvenance;
+    legal: CrmLegalMetadata;
+    dedupeKey: string;
+    idempotencyKey: string;
+}
+export declare function assertExternalProfileRef(profile: ExternalProfileRef): void;
+export interface CrmReadPage {
+    contractVersion: typeof CRM_READ_CONTRACT_VERSION;
+    requestId: string;
+    providerKey: string;
+    tenantId: string;
+    workspaceId: string;
+    items: readonly CrmEntityProjection[];
+    nextCursor?: string;
+    hasMore: boolean;
+    readOnly: true;
+}
+export interface CrmReadProvider {
+    readonly providerKey: string;
+    readPage(request: CrmReadRequest): CrmReadPage | Promise<CrmReadPage>;
+}
+/** Narrow compatibility surface for deterministic fixture and in-memory readers. */
+export interface SynchronousCrmReadProvider extends CrmReadProvider {
+    readPage(request: CrmReadRequest): CrmReadPage;
+}
+export declare class CrmReadContractError extends Error {
+    constructor(message: string);
+}
+export declare function assertCrmReadRequest(request: CrmReadRequest): void;
+export {};

package/dist/integrations/providers/crm.js

@@ -0,0 +1,2 @@
+// @bun
+var o="crm.read.v1";function s(e){if([e.providerKey,e.externalId,e.capturedAt,e.provenanceRefId,e.retentionPolicyRefId,e.dedupeKey,e.idempotencyKey].some((i)=>i.trim().length===0))throw new n("External profiles require complete identity and governance metadata");if(e.evidenceRefIds.length===0)throw new n("External profiles require at least one evidence reference");if(e.legalBasis==="consent"&&!e.consentRefId)throw new n("Consent legal basis requires a consent reference");let t;try{t=new URL(e.canonicalUrl)}catch{throw new n("External profile URL is invalid")}if(t.protocol!=="https:"||t.username!==""||t.password!==""||t.search!==""||t.hash!=="")throw new n("External profile URL must be a canonical HTTPS URL");if(e.providerKey==="linkedin"){let i=t.hostname==="linkedin.com"||t.hostname==="www.linkedin.com",a=e.kind==="professional-profile"?"/in/":"/company/";if(!i||!t.pathname.startsWith(a))throw new n("LinkedIn profile URL does not match its governed profile kind")}}class n extends Error{constructor(e){super(e);this.name="CrmReadContractError"}}function d(e){if(e.contractVersion!=="crm.read.v1")throw new n("Unsupported CRM read contract version");if([e.requestId,e.tenant.tenantId,e.tenant.workspaceId,e.tenant.actorPrincipalId,e.tenant.authorityEvaluationRefId,e.legal.retentionPolicyRefId].some((i)=>i.trim().length===0))throw new n("CRM reads require complete tenant governance");if(e.legal.legalBasis==="consent"&&!e.legal.consentRefId)throw new n("Consent legal basis requires a consent reference");if(e.entityKinds.length===0)throw new n("At least one CRM entity kind is required");let t=new Set(["contact","company","deal"]);if(e.entityKinds.length>t.size||new Set(e.entityKinds).size!==e.entityKinds.length||e.entityKinds.some((i)=>!t.has(i)))throw new n("CRM entity kinds must be unique and supported");if(!Number.isInteger(e.pageSize)||e.pageSize<1||e.pageSize>100)throw new n("CRM page size must be an integer from 1 to 100")}export{o as CRM_READ_CONTRACT_VERSION,n as CrmReadContractError,d as assertCrmReadRequest,s as assertExternalProfileRef};

package/dist/integrations/providers/crm.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/integrations/providers/database.d.ts

@@ -0,0 +1,12 @@
+export type DatabaseStatementParam = string | number | boolean | bigint | Date | Uint8Array | null | Record<string, unknown> | readonly unknown[];
+export type DatabaseRow = Record<string, unknown>;
+export interface DatabaseQueryResult<TRow extends DatabaseRow = DatabaseRow> {
+    rows: TRow[];
+    rowCount: number;
+}
+export interface DatabaseProvider {
+    query<TRow extends DatabaseRow = DatabaseRow>(statement: string, params?: readonly DatabaseStatementParam[]): Promise<DatabaseQueryResult<TRow>>;
+    execute(statement: string, params?: readonly DatabaseStatementParam[]): Promise<void>;
+    transaction<T>(run: (database: DatabaseProvider) => Promise<T>): Promise<T>;
+    close(): Promise<void>;
+}

package/dist/integrations/providers/database.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/providers/deepgram.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const deepgramIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerDeepgramIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/deepgram.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as d}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as s}from"@lssm/lib.contracts-spec/registry";var g=(e)=>`${e.key}.v${e.version}`;class c extends s{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((t)=>t.meta.category===e)}}function y(e){return g(e)}var a=(e)=>e;function o({unsupportedModeReason:e,configFields:t,secretFields:n,rotationSupported:p=!1,setupSteps:i}){let r={mode:"byok",validationStrategy:"byok-lifecycle",rotation:{supported:p}};if(t)r.configFields=t;if(n)r.secretFields=n;if(i)r.setupSteps=i;return{modes:{byok:r},exempt:!0,exemptionReason:e}}var m=a({meta:{key:"ai-voice-stt.deepgram",version:"1.0.0",category:"ai-voice-stt",title:"Deepgram Speech-to-Text",description:"Deepgram integration for real-time and batch speech-to-text transcription with speaker diarization.",domain:"ai",owners:["platform.ai"],tags:["voice","stt","transcription","diarization"],stability:d.Experimental},supportedModes:["byok"],credentialManifest:o({unsupportedModeReason:"Managed Deepgram credentials are not declared because speech-to-text access depends on tenant-owned Deepgram API keys; ContractSpec does not provide a first-party Deepgram managed account.",secretFields:[{key:"apiKey",required:!0}],rotationSupported:!0}),transports:[{type:"rest",baseUrl:"https://api.deepgram.com"},{type:"sdk",packageName:"@deepgram/sdk"}],preferredTransport:"sdk",supportedAuthMethods:[{type:"api-key",headerName:"Authorization",prefix:"Token "}],capabilities:{provides:[{key:"ai.voice.stt",version:"1.0.0"},{key:"ai.voice.conversational",version:"1.0.0"}]},configSchema:{schema:{type:"object",properties:{model:{type:"string",description:"Deepgram model to use (e.g. nova-3, nova-2, enhanced)."},language:{type:"string",description:"Default language code for transcription (e.g. en-US)."},enableDiarization:{type:"boolean",description:"Enable speaker diarization by default."},enableSmartFormat:{type:"boolean",description:"Enable smart formatting (punctuation, capitalization)."}}},example:{model:"nova-3",language:"en-US",enableDiarization:!0,enableSmartFormat:!0}},secretSchema:{schema:{type:"object",required:["apiKey"],properties:{apiKey:{type:"string",description:"Deepgram API key with transcription permissions."}}},example:{apiKey:"dg_***"}},healthCheck:{method:"custom",timeoutMs:5000},docsUrl:"https://developers.deepgram.com/docs",byokSetup:{setupInstructions:"Create a Deepgram API key with speech-to-text permissions and store it in your secret provider.",keyRotationSupported:!0,quotaTrackingSupported:!0}});function k(e){return e.register(m)}export{m as deepgramIntegrationSpec,k as registerDeepgramIntegration};

package/dist/integrations/providers/direct-fetch.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const directFetchIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerDirectFetchIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/direct-fetch.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as a}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as n}from"@lssm/lib.contracts-spec/registry";var i=(e)=>`${e.key}.v${e.version}`;class o extends n{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((r)=>r.meta.category===e)}}function c(e){return i(e)}var t=(e)=>e;var p=t({meta:{key:"web-access.direct-fetch",version:"1.0.0",category:"custom",title:"Direct Public Web Fetch",description:"Credential-free HTTP fetching with mandatory public-network and redirect validation.",domain:"knowledge",owners:["platform.ai"],tags:["web-access","fetch","public-network"],stability:a.Experimental},supportedModes:["managed","byok"],transports:[{type:"rest"}],preferredTransport:"rest",supportedAuthMethods:[],capabilities:{provides:[{key:"web.fetch",version:"1.0.0"}]},configSchema:{schema:{type:"object",properties:{policyMode:{type:"string",enum:["governed","provider-pass-through","public-only"]}}}},secretSchema:{schema:{type:"object",properties:{}},example:{}},healthCheck:{method:"custom",timeoutMs:5000},docsUrl:"https://github.com/lssm-tech/contractspec/tree/main/packages/integrations/provider-web-access"});function h(e){return e.register(p)}export{p as directFetchIntegrationSpec,h as registerDirectFetchIntegration};

package/dist/integrations/providers/eightsleep.d.ts

@@ -0,0 +1,3 @@
+import { type IntegrationSpecRegistry } from '../spec.js';
+export declare const eightSleepIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerEightSleepIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/eightsleep.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as g}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as s}from"@lssm/lib.contracts-spec/registry";var p=(e)=>`${e.key}.v${e.version}`;class c extends s{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((t)=>t.meta.category===e)}}function u(e){return p(e)}var i=(e)=>e;var o=["official-api","official-mcp","aggregator-api","aggregator-mcp","unofficial"],l=[{key:"health.activities.read",version:"1.0.0"},{key:"health.workouts.read",version:"1.0.0"},{key:"health.sleep.read",version:"1.0.0"},{key:"health.biometrics.read",version:"1.0.0"}],d=[{type:"rest"},{type:"mcp",transport:"http"},{type:"webhook",inbound:{signatureHeader:"x-webhook-signature",signingAlgorithm:"hmac-sha256"}}],n=[{type:"oauth2",grantType:"authorization_code",tokenUrl:"",scopes:[]},{type:"api-key"},{type:"bearer"},{type:"basic"}];function a(e){let t=e.supportedAuthMethods??f(e);return i({meta:{key:e.key,version:"1.0.0",category:"health",title:e.title,description:e.description,domain:"health",owners:["platform.integrations"],tags:["health","wearables",...e.tags],stability:e.stability??g.Experimental},supportedModes:e.supportedModes??["managed","byok"],transports:e.transports??d,preferredTransport:"rest",supportedAuthMethods:t,capabilities:{provides:e.capabilities??[...l]},configSchema:{schema:{type:"object",properties:{apiBaseUrl:{type:"string",description:"Optional API base URL override for provider-specific regional or partner endpoints."},mcpUrl:{type:"string",description:"Optional MCP endpoint URL for provider tool transport."},oauthTokenUrl:{type:"string",description:"Optional OAuth token endpoint override used for access-token refresh flows."},defaultTransport:{type:"string",enum:[...o],description:"Preferred transport strategy used before fallbacks are attempted."},strategyOrder:{type:"array",items:{type:"string",enum:[...o]},description:"Ordered transport fallback strategy. Defaults to official API -> official MCP -> aggregator API -> aggregator MCP -> unofficial."},allowUnofficial:{type:"boolean",description:"Must be true to allow unofficial/automation connectors as fallback."},unofficialAllowList:{type:"array",items:{type:"string"},description:"Optional allowlist of provider keys allowed to use unofficial connectors."}}},example:{defaultTransport:e.defaultTransport??"official-api",strategyOrder:[...o],allowUnofficial:!1,unofficialAllowList:[]}},secretSchema:{schema:{type:"object",properties:{apiKey:{type:"string"},accessToken:{type:"string"},refreshToken:{type:"string"},tokenExpiresAt:{type:"string"},clientId:{type:"string"},clientSecret:{type:"string"},mcpAccessToken:{type:"string"},username:{type:"string"},password:{type:"string"}}},example:{apiKey:"provider-api-key",accessToken:"oauth-access-token",refreshToken:"oauth-refresh-token"}},healthCheck:{method:"list",timeoutMs:1e4},docsUrl:e.docsUrl,byokSetup:{setupInstructions:e.byokSetupInstructions??"Create provider credentials, set allowed scopes, and store credentials in secret provider.",requiredScopes:e.byokScopes,keyRotationSupported:!1,quotaTrackingSupported:!1}})}function f(e){if(e.oauthTokenUrl){let t=e.oauthTokenUrl;return n.map((r)=>{if(r.type==="oauth2")return{...r,tokenUrl:t,scopes:e.byokScopes??[]};return r})}return[...n]}var y=a({key:"health.eightsleep",title:"Eight Sleep",description:"Eight Sleep integration for sleep sessions and biometrics via official, aggregator, or opt-in unofficial connectors.",docsUrl:"https://www.eightsleep.com/",tags:["eightsleep","sleep","unofficial"],capabilities:[{key:"health.sleep.read",version:"1.0.0"},{key:"health.biometrics.read",version:"1.0.0"}],defaultTransport:"aggregator-api"});function T(e){return e.register(y)}export{y as eightSleepIntegrationSpec,T as registerEightSleepIntegration};

package/dist/integrations/providers/elevenlabs.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const elevenLabsIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerElevenLabsIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/elevenlabs.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as o}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as i}from"@lssm/lib.contracts-spec/registry";var n=(e)=>`${e.key}.v${e.version}`;class a extends i{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((r)=>r.meta.category===e)}}function g(e){return n(e)}var t=(e)=>e;var s=t({meta:{key:"ai-voice.elevenlabs",version:"1.0.0",category:"ai-voice-tts",title:"ElevenLabs Text-to-Speech",description:"ElevenLabs integration for neural voice synthesis and voice catalog access.",domain:"ai",owners:["platform.ai"],tags:["voice","tts","stt"],stability:o.Beta},supportedModes:["managed","byok"],transports:[{type:"rest",baseUrl:"https://api.elevenlabs.io"},{type:"sdk",packageName:"elevenlabs"}],preferredTransport:"rest",supportedAuthMethods:[{type:"header",headerName:"xi-api-key"}],capabilities:{provides:[{key:"ai.voice.tts",version:"1.0.0"},{key:"ai.voice.stt",version:"1.0.0"}]},configSchema:{schema:{type:"object",properties:{defaultVoiceId:{type:"string",description:"Optional default voice identifier for synthesis requests."}}},example:{defaultVoiceId:"pNInz6obpgDQGcFmaJgB"}},secretSchema:{schema:{type:"object",required:["apiKey"],properties:{apiKey:{type:"string",description:"ElevenLabs API key with text-to-speech permissions."}}},example:{apiKey:"eleven-***"}},healthCheck:{method:"custom",timeoutMs:4000},docsUrl:"https://elevenlabs.io/docs/api-reference/text-to-speech",constraints:{rateLimit:{rpm:120}},byokSetup:{setupInstructions:"Create an ElevenLabs API key and ensure the desired voices are accessible to the key scope.",keyRotationSupported:!1,quotaTrackingSupported:!0}});function y(e){return e.register(s)}export{s as elevenLabsIntegrationSpec,y as registerElevenLabsIntegration};

package/dist/integrations/providers/email-delivery-events.d.ts

@@ -0,0 +1,22 @@
+export type EmailProviderDeliveryStatus = 'accepted' | 'delivered' | 'delivery_delayed' | 'bounced' | 'complained';
+/** Provider-authenticated delivery event before caller-owned durable projection. */
+export interface EmailProviderDeliveryEvent {
+    eventId: string;
+    /** Transient provider identity. Durable stores must bind only a redacted ref. */
+    providerMessageId: string;
+    status: EmailProviderDeliveryStatus;
+    occurredAt: Date;
+}
+export interface EmailProviderDeliveryEventResult {
+    eventId: string;
+    /** Deterministic redacted reference; never the raw provider message id. */
+    providerMessageRef: string;
+    status: EmailProviderDeliveryStatus;
+    occurredAt: Date;
+    replayed: boolean;
+    /** False when an authenticated event is older than the current projection. */
+    statusApplied: boolean;
+}
+export interface EmailProviderDeliveryEventStore {
+    apply(event: EmailProviderDeliveryEvent): Promise<EmailProviderDeliveryEventResult>;
+}

package/dist/integrations/providers/email-delivery-events.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/providers/email.d.ts

@@ -0,0 +1,187 @@
+import type { ProviderDeltaSyncState } from './provider-delta.js';
+export type { EmailProviderDeliveryEvent, EmailProviderDeliveryEventResult, EmailProviderDeliveryEventStore, EmailProviderDeliveryStatus, } from './email-delivery-events.js';
+export interface EmailAddress {
+    email: string;
+    name?: string;
+}
+export interface EmailAttachment {
+    id: string;
+    filename: string;
+    contentType: string;
+    disposition?: 'attachment' | 'inline';
+    contentId?: string;
+    sizeBytes?: number;
+    data?: Uint8Array;
+    downloadUrl?: string;
+}
+export type EmailPersonalizationValue = string | number | boolean | null | readonly EmailPersonalizationValue[] | {
+    readonly [key: string]: EmailPersonalizationValue;
+};
+export interface EmailRecipientPersonalization {
+    recipient: string;
+    data: Readonly<Record<string, EmailPersonalizationValue>>;
+}
+/** Provider-neutral advanced email surface for template or raw-content sends. */
+export interface EmailAdvancedOutboundMessage {
+    from?: EmailAddress;
+    to: EmailAddress[];
+    cc?: EmailAddress[];
+    bcc?: EmailAddress[];
+    replyTo?: EmailAddress;
+    subject?: string;
+    textBody?: string;
+    htmlBody?: string;
+    templateId?: string;
+    templateVersionId?: string;
+    personalization?: EmailRecipientPersonalization[];
+    tags?: string[];
+    sendAt?: Date;
+    precedenceBulk?: boolean;
+    headers?: Record<string, string>;
+    attachments?: EmailAttachment[];
+    metadata?: Record<string, string>;
+}
+export interface EmailOutboundMessage {
+    /** Stable 1–256 character provider retry key without recipient data or secrets. */
+    idempotencyKey?: string;
+    from: EmailAddress;
+    to: EmailAddress[];
+    cc?: EmailAddress[];
+    bcc?: EmailAddress[];
+    replyTo?: EmailAddress;
+    subject: string;
+    textBody?: string;
+    htmlBody?: string;
+    headers?: Record<string, string>;
+    attachments?: EmailAttachment[];
+    metadata?: Record<string, string>;
+}
+export interface EmailOutboundResult {
+    id: string;
+    providerMessageId?: string;
+    queuedAt?: Date;
+    deliveredAt?: Date;
+}
+/** Stable delivery ownership used to keep email paths separate. */
+export type EmailDeliveryPurpose = 'auth' | 'booking' | 'calendar-intelligence';
+/** Parsed-once sender configuration for one owned delivery purpose. */
+export interface EmailPurposeSender {
+    purpose: EmailDeliveryPurpose;
+    from: EmailAddress;
+    replyTo: EmailAddress;
+}
+export interface EmailThread {
+    id: string;
+    subject?: string;
+    snippet?: string;
+    participants: EmailAddress[];
+    messages: EmailMessage[];
+    updatedAt: Date;
+    labels?: string[];
+    metadata?: Record<string, string>;
+    delta?: ProviderDeltaSyncState;
+}
+export interface EmailMessage {
+    id: string;
+    threadId: string;
+    subject?: string;
+    from: EmailAddress;
+    to: EmailAddress[];
+    cc?: EmailAddress[];
+    bcc?: EmailAddress[];
+    replyTo?: EmailAddress;
+    sentAt: Date;
+    receivedAt?: Date;
+    textBody?: string;
+    htmlBody?: string;
+    attachments?: EmailAttachment[];
+    headers?: Record<string, string>;
+    metadata?: Record<string, string>;
+}
+export interface EmailInboundWebhookEvent {
+    eventId: string;
+    inboundRouteId: string;
+    receivedAt: Date;
+    message: EmailMessage;
+    rawMessage?: string;
+    authentication: {
+        spf?: string;
+        dkim?: boolean;
+    };
+}
+export interface EmailInboundWebhookEventResult {
+    eventId: string;
+    messageRef: string;
+    replayed: boolean;
+}
+export interface EmailInboundWebhookEventStore {
+    apply(event: EmailInboundWebhookEvent): Promise<EmailInboundWebhookEventResult>;
+}
+export interface EmailThreadListQuery {
+    label?: string;
+    query?: string;
+    pageSize?: number;
+    pageToken?: string;
+    includeArchived?: boolean;
+    updatedSince?: Date;
+    delta?: ProviderDeltaSyncState;
+}
+export interface EmailMessagesSinceQuery {
+    label?: string;
+    since?: Date;
+    pageSize?: number;
+    pageToken?: string;
+    delta?: ProviderDeltaSyncState;
+}
+export interface EmailOutboundProvider {
+    sendEmail(message: EmailOutboundMessage): Promise<EmailOutboundResult>;
+}
+export interface EmailAdvancedOutboundProvider extends EmailOutboundProvider {
+    sendAdvancedEmail(message: EmailAdvancedOutboundMessage): Promise<EmailOutboundResult>;
+}
+export type EmailInboundForward = {
+    type: 'email';
+    value: string;
+} | {
+    type: 'webhook';
+    value: string;
+};
+export type EmailInboundFilterComparer = 'equal' | 'not-equal' | 'contains' | 'not-contains' | 'starts-with' | 'ends-with' | 'not-starts-with' | 'not-ends-with';
+export interface EmailInboundFilterRule {
+    comparer: EmailInboundFilterComparer;
+    value: string;
+    key?: string;
+}
+export interface EmailInboundRoute {
+    id: string;
+    domainId: string;
+    name: string;
+    enabled: boolean;
+    inboundDomain?: string;
+    priority?: number;
+    forwards: EmailInboundForward[];
+    metadata?: Record<string, string>;
+}
+export interface EmailInboundRouteDraft extends Omit<EmailInboundRoute, 'id'> {
+    matchType: 'all' | 'sender' | 'domain' | 'header';
+    matchRules?: EmailInboundFilterRule[];
+    catchType?: 'all' | 'recipient';
+    catchRules?: EmailInboundFilterRule[];
+}
+export interface EmailInboundRouteProvider {
+    listInboundRoutes(domainId: string): Promise<EmailInboundRoute[]>;
+    getInboundRoute(routeId: string): Promise<EmailInboundRoute | null>;
+    createInboundRoute(route: EmailInboundRouteDraft): Promise<EmailInboundRoute>;
+    updateInboundRoute(routeId: string, route: EmailInboundRouteDraft): Promise<EmailInboundRoute>;
+    deleteInboundRoute(routeId: string): Promise<void>;
+}
+export interface EmailInboundProvider {
+    listThreads(query?: EmailThreadListQuery): Promise<EmailThread[]>;
+    getThread(threadId: string): Promise<EmailThread | null>;
+    listMessagesSince(query: EmailMessagesSinceQuery): Promise<{
+        messages: EmailMessage[];
+        nextPageToken?: string;
+        /** False when nextPageToken is a durable terminal delta cursor. */
+        hasMore?: boolean;
+    }>;
+}

package/dist/integrations/providers/email.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/providers/embedding.d.ts

@@ -0,0 +1,52 @@
+export type EmbeddingVector = number[];
+export interface EmbeddingDocument {
+    id: string;
+    text: string;
+    metadata?: Record<string, string | number | boolean>;
+}
+/** Auditable cost state; adapters must never infer a price without a pinned table. */
+export type EmbeddingCostReceipt = {
+    state: 'recorded';
+    amountMicros: number;
+    currency: string;
+    pricingRef: string;
+} | {
+    state: 'unavailable';
+    reason: 'pricing_not_configured';
+};
+/** Provider-reported token use and explicitly recorded or unavailable cost. */
+export interface EmbeddingUsageReceipt {
+    provider: string;
+    model: string;
+    inputTokens: number;
+    totalTokens: number;
+    requestCount: number;
+    documentCount: number;
+    dimensions: number;
+    cost: EmbeddingCostReceipt;
+}
+export type EmbeddingTokenCounter = (text: string, model: string) => number;
+export type EmbeddingCostCalculator = (usage: Omit<EmbeddingUsageReceipt, 'cost'>) => Extract<EmbeddingCostReceipt, {
+    state: 'recorded';
+}>;
+export interface EmbeddingResult {
+    id: string;
+    vector: EmbeddingVector;
+    dimensions: number;
+    model: string;
+    metadata?: Record<string, string>;
+    /** Additive provider receipt. Legacy providers may omit it. */
+    usage?: EmbeddingUsageReceipt;
+}
+export interface EmbeddingProvider {
+    embedDocuments(documents: EmbeddingDocument[], options?: {
+        model?: string;
+        dimensions?: number;
+        signal?: AbortSignal;
+    }): Promise<EmbeddingResult[]>;
+    embedQuery(query: string, options?: {
+        model?: string;
+        dimensions?: number;
+        signal?: AbortSignal;
+    }): Promise<EmbeddingResult>;
+}

package/dist/integrations/providers/embedding.js

@@ -0,0 +1 @@
+// @bun

package/dist/integrations/providers/embedding.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/integrations/providers/fal-image.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const falImageIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerFalImageIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;

package/dist/integrations/providers/fal-image.js

@@ -0,0 +1,2 @@
+// @bun
+import{StabilityEnum as d}from"@lssm/lib.contracts-spec/ownership";import{SpecContractRegistry as p}from"@lssm/lib.contracts-spec/registry";var g=(e)=>`${e.key}.v${e.version}`;class c extends p{constructor(e){super("integration",e)}getByCategory(e){return this.list().filter((t)=>t.meta.category===e)}}function f(e){return g(e)}var a=(e)=>e;function o({unsupportedModeReason:e,configFields:t,secretFields:r,rotationSupported:s=!1,setupSteps:i}){let n={mode:"byok",validationStrategy:"byok-lifecycle",rotation:{supported:s}};if(t)n.configFields=t;if(r)n.secretFields=r;if(i)n.setupSteps=i;return{modes:{byok:n},exempt:!0,exemptionReason:e}}var l=a({meta:{key:"ai-image.fal",version:"1.0.0",category:"ai-image",title:"Fal Image Generation",description:"Fal integration for AI image generation using Flux and Stable Diffusion models.",domain:"ai",owners:["platform.ai"],tags:["image","generation","flux","stable-diffusion"],stability:d.Experimental},supportedModes:["byok"],credentialManifest:o({unsupportedModeReason:"Managed Fal image credentials are not declared because image generation access depends on tenant-owned FAL_KEY/API-key credentials; ContractSpec does not provision a first-party Fal account for tenants.",secretFields:[{key:"apiKey",required:!0}],rotationSupported:!1}),transports:[{type:"rest",baseUrl:"https://fal.run"},{type:"sdk",packageName:"@fal-ai/client"}],preferredTransport:"rest",supportedAuthMethods:[{type:"header",headerName:"Authorization",valuePrefix:"Key "}],capabilities:{provides:[{key:"ai.image.generation",version:"1.0.0"}]},configSchema:{schema:{type:"object",properties:{modelId:{type:"string",description:"Fal model endpoint (e.g. fal-ai/flux/dev)."},defaultFormat:{type:"string",enum:["png","jpg","webp"]},defaultGuidanceScale:{type:"number",minimum:1,maximum:20}}},example:{modelId:"fal-ai/flux/dev",defaultFormat:"png",defaultGuidanceScale:7.5}},secretSchema:{schema:{type:"object",required:["apiKey"],properties:{apiKey:{type:"string",description:"Fal API key (FAL_KEY)."}}},example:{apiKey:"key-id:key-secret"}},healthCheck:{method:"custom",timeoutMs:7000},docsUrl:"https://fal.ai/models",byokSetup:{setupInstructions:"Create a Fal API key and ensure image generation model access is enabled.",keyRotationSupported:!1,quotaTrackingSupported:!0}});function M(e){return e.register(l)}export{l as falImageIntegrationSpec,M as registerFalImageIntegration};

package/dist/integrations/providers/fal.d.ts

@@ -0,0 +1,3 @@
+import { IntegrationSpecRegistry } from '../spec.js';
+export declare const falIntegrationSpec: import("..").IntegrationSpec;
+export declare function registerFalIntegration(registry: IntegrationSpecRegistry): IntegrationSpecRegistry;