@lssm/lib.contracts-spec 17.3.2

package/dist/job-application/operations.js

@@ -0,0 +1 @@
+import*as o from"./operation-definitions.js";export*from"./operation-definitions.js";export const jobApplicationOperations=[o.JobApplicationMandateUpsertCommand,o.JobApplicationMandateGetQuery,o.JobApplicationMandateRevokeCommand,o.JobApplicationProfileReviseCommand,o.JobApplicationProfileGetQuery,o.JobApplicationAnswerUpsertCommand,o.JobApplicationAnswerListQuery,o.JobApplicationAnswerRevokeCommand,o.JobApplicationAccountCreateCommand,o.JobApplicationAccountVerifyCommand,o.JobApplicationAccountRecoverCommand,o.JobApplicationAccountDeleteCommand,o.JobApplicationPlanCommand,o.JobApplicationFillCommand,o.JobApplicationReviewCommand,o.JobApplicationSubmitCommand,o.JobApplicationResumeCommand,o.JobApplicationCancelCommand,o.JobApplicationReconcileCommand,o.JobApplicationExportCommand,o.JobApplicationDeleteCommand,o.JobApplicationGetQuery,o.JobApplicationListQuery,o.JobApplicationInboxGetQuery,o.JobApplicationChallengeGetQuery];

package/dist/job-application/registry.d.ts

@@ -0,0 +1,10 @@
+import type { AnyEventSpec } from '../events.js';
+import type { AnyOperationSpec } from '../operations/index.js';
+import { jobApplicationEvents } from './events.js';
+import { jobApplicationOperations } from './operations.js';
+export declare const jobApplicationOperationRegistry: Readonly<Record<string, AnyOperationSpec>>;
+export declare const jobApplicationEventRegistry: Readonly<Record<string, AnyEventSpec>>;
+export type JobApplicationOperationKey = (typeof jobApplicationOperations)[number]['meta']['key'];
+export type JobApplicationEventKey = (typeof jobApplicationEvents)[number]['meta']['key'];
+export declare function jobApplicationOperationFingerprintV1(key: JobApplicationOperationKey): string;
+export declare function assertUniqueJobApplicationContractKeys(): void;

package/dist/job-application/registry.js

@@ -0,0 +1 @@
+import{jobApplicationEvents as o}from"./events.js";import{jobApplicationOperations as n}from"./operations.js";export const jobApplicationOperationRegistry=Object.fromEntries(n.map((t)=>[t.meta.key,t]));export const jobApplicationEventRegistry=Object.fromEntries(o.map((t)=>[t.meta.key,t]));export function jobApplicationOperationFingerprintV1(t){const e=jobApplicationOperationRegistry[t];if(!e)throw Error("JOB_APPLICATION_OPERATION_UNKNOWN");return`contract:${t}@${e.meta.version}`}export function assertUniqueJobApplicationContractKeys(){const t=[...n.map((e)=>e.meta.key),...o.map((e)=>e.meta.key)];if(new Set(t).size!==t.length)throw Error("JOB_APPLICATION_CONTRACT_KEY_COLLISION")}

package/dist/job-application/transport.d.ts

@@ -0,0 +1,13 @@
+export type JobApplicationTransportKindV1 = 'rest' | 'sdk' | 'mcp' | 'webhook' | 'sse' | 'websocket' | 'cli';
+export type JobApplicationGrantV1 = 'candidate_read' | 'candidate_write' | 'candidate_review' | 'candidate_execute' | 'candidate_admin';
+/** Raw-body Resend receiving endpoint; authenticated by the three Svix headers. */
+export declare const JOB_APPLICATION_RESEND_WEBHOOK_PATH_V1 = "/api/job-application/v1/webhooks/resend";
+export interface JobApplicationTransportBindingV1 {
+    operationKey: string;
+    method: 'GET' | 'POST' | 'PATCH' | 'DELETE';
+    path: string;
+    transports: readonly JobApplicationTransportKindV1[];
+    requiredGrant: JobApplicationGrantV1;
+}
+export declare const jobApplicationTransportBindingsV1: readonly [JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1, JobApplicationTransportBindingV1];
+export declare const jobApplicationDeliveryTransportsV1: readonly ["webhook", "sse", "websocket"];

package/dist/job-application/transport.js

@@ -0,0 +1 @@
+export const JOB_APPLICATION_RESEND_WEBHOOK_PATH_V1="/api/job-application/v1/webhooks/resend";const e=["rest","sdk","mcp","cli"];const a=(i,t,n,p)=>({operationKey:i,method:t,path:n,transports:e,requiredGrant:p});export const jobApplicationTransportBindingsV1=[a("job-application.mandate.upsert","POST","/mandates","candidate_admin"),a("job-application.mandate.get","GET","/mandates/:mandateId","candidate_read"),a("job-application.mandate.revoke","POST","/mandates/:mandateId/revoke","candidate_admin"),a("job-application.profile.revise","POST","/profiles","candidate_write"),a("job-application.profile.get","GET","/profiles/:profileId","candidate_read"),a("job-application.answer.upsert","POST","/answers","candidate_write"),a("job-application.answer.list","GET","/answers","candidate_read"),a("job-application.answer.revoke","POST","/answers/:answerId/revoke","candidate_write"),a("job-application.account.create","POST","/applications/:applicationId/account","candidate_execute"),a("job-application.account.verify","POST","/applications/:applicationId/account/verify","candidate_execute"),a("job-application.account.recover","POST","/applications/:applicationId/account/recover","candidate_execute"),a("job-application.account.delete","DELETE","/applications/:applicationId/account","candidate_execute"),a("job-application.application.plan","POST","/applications","candidate_write"),a("job-application.application.fill","POST","/applications/:applicationId/fill","candidate_execute"),a("job-application.application.review","POST","/applications/:applicationId/review","candidate_review"),a("job-application.application.submit","POST","/applications/:applicationId/submit","candidate_execute"),a("job-application.application.resume","POST","/applications/:applicationId/resume","candidate_execute"),a("job-application.application.cancel","POST","/applications/:applicationId/cancel","candidate_execute"),a("job-application.application.reconcile","POST","/applications/:applicationId/reconcile","candidate_execute"),a("job-application.application.export","POST","/applications/:applicationId/exports","candidate_admin"),a("job-application.application.delete","DELETE","/applications/:applicationId","candidate_admin"),a("job-application.application.get","GET","/applications/:applicationId","candidate_read"),a("job-application.application.list","GET","/applications","candidate_read"),a("job-application.inbox.get","GET","/applications/:applicationId/inbox","candidate_read"),a("job-application.challenge.get","GET","/applications/:applicationId/challenges/:challengeId","candidate_read")];export const jobApplicationDeliveryTransportsV1=["webhook","sse","websocket"];

package/dist/job-application/types.d.ts

@@ -0,0 +1,172 @@
+import type { JOB_APPLICATION_ALLOWED_ACTIONS, JOB_APPLICATION_AUTONOMY_LEVELS, JOB_APPLICATION_CHALLENGE_KINDS, JOB_APPLICATION_STATUSES } from './constants.js';
+export declare const CANDIDATE_APPLICATION_MANDATE_V1: 'job-application.mandate@1';
+export declare const CANDIDATE_PROFILE_REVISION_V1: 'job-application.profile-revision@1';
+export declare const CANDIDATE_DOCUMENT_REVISION_V1: 'job-application.document-revision@1';
+export declare const VERIFIED_ANSWER_REVISION_V1: 'job-application.verified-answer@1';
+export declare const APPLICATION_FORM_SNAPSHOT_V1: 'job-application.form-snapshot@1';
+export declare const APPLICATION_FIELD_PROPOSAL_V1: 'job-application.field-proposal@1';
+export declare const APPLICATION_EFFECT_RECEIPT_V1: 'job-application.effect-receipt@1';
+export declare const EXTERNAL_ACTION_AUTHORIZATION_RECEIPT_V1: 'job-application.external-authorization@1';
+export type JobApplicationAutonomyV1 = (typeof JOB_APPLICATION_AUTONOMY_LEVELS)[number];
+export type JobApplicationStatusV1 = (typeof JOB_APPLICATION_STATUSES)[number];
+export type JobApplicationChallengeKindV1 = (typeof JOB_APPLICATION_CHALLENGE_KINDS)[number];
+export type JobApplicationAllowedActionV1 = (typeof JOB_APPLICATION_ALLOWED_ACTIONS)[number];
+export interface JobApplicationScopeV1 {
+    ecosystemId: string;
+    tenantId: string;
+    workspaceId: string;
+    candidateId: string;
+    deploymentId: string;
+    jurisdiction: string;
+    purpose: string;
+}
+export interface CandidateApplicationMandateV1 {
+    schemaVersion: typeof CANDIDATE_APPLICATION_MANDATE_V1;
+    id: string;
+    revision: number;
+    scope: JobApplicationScopeV1;
+    autonomy: JobApplicationAutonomyV1;
+    destinationAllowlist: readonly string[];
+    allowedActions: readonly JobApplicationAllowedActionV1[];
+    profileRevisionRef: string;
+    answerRevisionRefs: readonly string[];
+    documentRevisionRefs: readonly string[];
+    authorizationReceiptRef: string;
+    budgetRef: string;
+    killSwitchKey: string;
+    issuedAt: string;
+    expiresAt: string;
+    revokedAt?: string;
+}
+export interface CandidateProfileRevisionV1 {
+    schemaVersion: typeof CANDIDATE_PROFILE_REVISION_V1;
+    id: string;
+    candidateId: string;
+    revision: number;
+    fingerprint: string;
+    encryptedProfileRef: string;
+    documentRefs: readonly string[];
+    verifiedAnswerRefs: readonly string[];
+    provenanceRefs: readonly string[];
+    createdAt: string;
+    supersededAt?: string;
+}
+export interface CandidateDocumentRevisionV1 {
+    schemaVersion: typeof CANDIDATE_DOCUMENT_REVISION_V1;
+    id: string;
+    candidateId: string;
+    revision: number;
+    fileName: string;
+    mediaType: string;
+    sizeBytes: number;
+    checksumSha256: string;
+    encryptedObjectRef: string;
+    classification: 'standard' | 'sensitive' | 'restricted';
+    allowedDestinations: readonly string[];
+    provenanceRefs: readonly string[];
+    createdAt: string;
+    expiresAt?: string;
+    deletedAt?: string;
+}
+export interface VerifiedAnswerRevisionV1 {
+    schemaVersion: typeof VERIFIED_ANSWER_REVISION_V1;
+    id: string;
+    candidateId: string;
+    revision: number;
+    questionKey: string;
+    encryptedValueRef: string;
+    classification: 'standard' | 'sensitive' | 'restricted';
+    allowedDestinations: readonly string[];
+    provenanceRefs: readonly string[];
+    approvedAt: string;
+    expiresAt?: string;
+    revokedAt?: string;
+}
+export interface ApplicationFormFieldV1 {
+    id: string;
+    name: string;
+    kind: string;
+    required: boolean;
+    material: boolean;
+    constraints: Readonly<Record<string, unknown>>;
+}
+export interface ApplicationFormSnapshotV1 {
+    schemaVersion: typeof APPLICATION_FORM_SNAPSHOT_V1;
+    id: string;
+    applicationId: string;
+    sourceInstallationId: string;
+    pageUrl: string;
+    fingerprint: string;
+    fields: readonly ApplicationFormFieldV1[];
+    evidenceRefs: readonly string[];
+    capturedAt: string;
+}
+export interface ApplicationFieldProposalV1 {
+    schemaVersion: typeof APPLICATION_FIELD_PROPOSAL_V1;
+    id: string;
+    applicationId: string;
+    formSnapshotId: string;
+    fieldId: string;
+    encryptedValueRef: string;
+    answerRevisionRef?: string;
+    documentRevisionRef?: string;
+    confidence: number;
+    validation: 'valid' | 'invalid' | 'requires_review';
+    evidenceRefs: readonly string[];
+}
+export interface ExternalAccountBindingV1 {
+    id: string;
+    applicationId: string;
+    sourceKey: string;
+    usernameAliasRef: string;
+    credentialRef: string;
+    sessionHandleRef?: string;
+    state: 'pending' | 'verified' | 'recovering' | 'active' | 'deleted';
+    revision: number;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface ApplicationInboxAliasV1 {
+    id: string;
+    applicationId: string;
+    provider: 'resend';
+    addressRef: string;
+    state: 'allocated' | 'active' | 'disabled' | 'deleted';
+    retentionUntil: string;
+    createdAt: string;
+}
+export interface ApplicationVerificationChallengeV1 {
+    id: string;
+    applicationId: string;
+    kind: JobApplicationChallengeKindV1;
+    state: 'pending' | 'reserved' | 'completed' | 'expired' | 'handoff_required';
+    sourceDomain: string;
+    effectKey: string;
+    evidenceRefs: readonly string[];
+    expiresAt: string;
+}
+export interface ExternalActionAuthorizationReceiptV1 {
+    schemaVersion: typeof EXTERNAL_ACTION_AUTHORIZATION_RECEIPT_V1;
+    id: string;
+    candidateId: string;
+    destination: string;
+    termsVersionRef: string;
+    allowedActions: readonly JobApplicationAllowedActionV1[];
+    issuedAt: string;
+    expiresAt: string;
+    revokedAt?: string;
+}
+export interface ApplicationEffectReceiptV1 {
+    schemaVersion: typeof APPLICATION_EFFECT_RECEIPT_V1;
+    id: string;
+    applicationId: string;
+    effectKey: string;
+    action: JobApplicationAllowedActionV1;
+    status: 'reserved' | 'succeeded' | 'failed' | 'outcome_ambiguous';
+    providerBindingRef: string;
+    fencingToken: string;
+    requestDigest: string;
+    resultDigest?: string;
+    evidenceRefs: readonly string[];
+    occurredAt: string;
+}

package/dist/job-application/types.js

@@ -0,0 +1 @@
+export const CANDIDATE_APPLICATION_MANDATE_V1="job-application.mandate@1";export const CANDIDATE_PROFILE_REVISION_V1="job-application.profile-revision@1";export const CANDIDATE_DOCUMENT_REVISION_V1="job-application.document-revision@1";export const VERIFIED_ANSWER_REVISION_V1="job-application.verified-answer@1";export const APPLICATION_FORM_SNAPSHOT_V1="job-application.form-snapshot@1";export const APPLICATION_FIELD_PROPOSAL_V1="job-application.field-proposal@1";export const APPLICATION_EFFECT_RECEIPT_V1="job-application.effect-receipt@1";export const EXTERNAL_ACTION_AUTHORIZATION_RECEIPT_V1="job-application.external-authorization@1";

package/dist/job-application/validation.d.ts

@@ -0,0 +1,180 @@
+import { z } from 'zod';
+export declare const jobApplicationScopeV1Schema: z.ZodObject<{
+    ecosystemId: z.ZodString;
+    tenantId: z.ZodString;
+    workspaceId: z.ZodString;
+    candidateId: z.ZodString;
+    deploymentId: z.ZodString;
+    jurisdiction: z.ZodString;
+    purpose: z.ZodString;
+}, z.core.$strict>;
+export declare const candidateApplicationMandateV1Schema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"job-application.mandate@1">;
+    id: z.ZodString;
+    revision: z.ZodNumber;
+    scope: z.ZodObject<{
+        ecosystemId: z.ZodString;
+        tenantId: z.ZodString;
+        workspaceId: z.ZodString;
+        candidateId: z.ZodString;
+        deploymentId: z.ZodString;
+        jurisdiction: z.ZodString;
+        purpose: z.ZodString;
+    }, z.core.$strict>;
+    autonomy: z.ZodEnum<{
+        auto_submit: "auto_submit";
+        confirm_each: "confirm_each";
+    }>;
+    destinationAllowlist: z.ZodArray<z.ZodString>;
+    allowedActions: z.ZodArray<z.ZodEnum<{
+        create_account: "create_account";
+        delete_account: "delete_account";
+        fill_form: "fill_form";
+        recover_account: "recover_account";
+        submit_application: "submit_application";
+        upload_document: "upload_document";
+        verify_account: "verify_account";
+    }>>;
+    profileRevisionRef: z.ZodString;
+    answerRevisionRefs: z.ZodArray<z.ZodString>;
+    documentRevisionRefs: z.ZodArray<z.ZodString>;
+    authorizationReceiptRef: z.ZodString;
+    budgetRef: z.ZodString;
+    killSwitchKey: z.ZodString;
+    issuedAt: z.ZodString;
+    expiresAt: z.ZodString;
+    revokedAt: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const candidateProfileRevisionV1Schema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"job-application.profile-revision@1">;
+    id: z.ZodString;
+    candidateId: z.ZodString;
+    revision: z.ZodNumber;
+    fingerprint: z.ZodString;
+    encryptedProfileRef: z.ZodString;
+    documentRefs: z.ZodArray<z.ZodString>;
+    verifiedAnswerRefs: z.ZodArray<z.ZodString>;
+    provenanceRefs: z.ZodArray<z.ZodString>;
+    createdAt: z.ZodString;
+    supersededAt: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const candidateDocumentRevisionV1Schema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"job-application.document-revision@1">;
+    id: z.ZodString;
+    candidateId: z.ZodString;
+    revision: z.ZodNumber;
+    fileName: z.ZodString;
+    mediaType: z.ZodString;
+    sizeBytes: z.ZodNumber;
+    checksumSha256: z.ZodString;
+    encryptedObjectRef: z.ZodString;
+    classification: z.ZodEnum<{
+        restricted: "restricted";
+        sensitive: "sensitive";
+        standard: "standard";
+    }>;
+    allowedDestinations: z.ZodArray<z.ZodString>;
+    provenanceRefs: z.ZodArray<z.ZodString>;
+    createdAt: z.ZodString;
+    expiresAt: z.ZodOptional<z.ZodString>;
+    deletedAt: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const verifiedAnswerRevisionV1Schema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"job-application.verified-answer@1">;
+    id: z.ZodString;
+    candidateId: z.ZodString;
+    revision: z.ZodNumber;
+    questionKey: z.ZodString;
+    encryptedValueRef: z.ZodString;
+    classification: z.ZodEnum<{
+        restricted: "restricted";
+        sensitive: "sensitive";
+        standard: "standard";
+    }>;
+    allowedDestinations: z.ZodArray<z.ZodString>;
+    provenanceRefs: z.ZodArray<z.ZodString>;
+    approvedAt: z.ZodString;
+    expiresAt: z.ZodOptional<z.ZodString>;
+    revokedAt: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const applicationFormSnapshotV1Schema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"job-application.form-snapshot@1">;
+    id: z.ZodString;
+    applicationId: z.ZodString;
+    sourceInstallationId: z.ZodString;
+    pageUrl: z.ZodString;
+    fingerprint: z.ZodString;
+    fields: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        kind: z.ZodString;
+        required: z.ZodBoolean;
+        material: z.ZodBoolean;
+        constraints: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strict>>;
+    evidenceRefs: z.ZodArray<z.ZodString>;
+    capturedAt: z.ZodString;
+}, z.core.$strict>;
+export declare const applicationFieldProposalV1Schema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"job-application.field-proposal@1">;
+    id: z.ZodString;
+    applicationId: z.ZodString;
+    formSnapshotId: z.ZodString;
+    fieldId: z.ZodString;
+    encryptedValueRef: z.ZodString;
+    answerRevisionRef: z.ZodOptional<z.ZodString>;
+    documentRevisionRef: z.ZodOptional<z.ZodString>;
+    confidence: z.ZodNumber;
+    validation: z.ZodEnum<{
+        invalid: "invalid";
+        requires_review: "requires_review";
+        valid: "valid";
+    }>;
+    evidenceRefs: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export declare const externalActionAuthorizationReceiptV1Schema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"job-application.external-authorization@1">;
+    id: z.ZodString;
+    candidateId: z.ZodString;
+    destination: z.ZodString;
+    termsVersionRef: z.ZodString;
+    allowedActions: z.ZodArray<z.ZodEnum<{
+        create_account: "create_account";
+        delete_account: "delete_account";
+        fill_form: "fill_form";
+        recover_account: "recover_account";
+        submit_application: "submit_application";
+        upload_document: "upload_document";
+        verify_account: "verify_account";
+    }>>;
+    issuedAt: z.ZodString;
+    expiresAt: z.ZodString;
+    revokedAt: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const applicationEffectReceiptV1Schema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"job-application.effect-receipt@1">;
+    id: z.ZodString;
+    applicationId: z.ZodString;
+    effectKey: z.ZodString;
+    action: z.ZodEnum<{
+        create_account: "create_account";
+        delete_account: "delete_account";
+        fill_form: "fill_form";
+        recover_account: "recover_account";
+        submit_application: "submit_application";
+        upload_document: "upload_document";
+        verify_account: "verify_account";
+    }>;
+    status: z.ZodEnum<{
+        failed: "failed";
+        outcome_ambiguous: "outcome_ambiguous";
+        reserved: "reserved";
+        succeeded: "succeeded";
+    }>;
+    providerBindingRef: z.ZodString;
+    fencingToken: z.ZodString;
+    requestDigest: z.ZodString;
+    resultDigest: z.ZodOptional<z.ZodString>;
+    evidenceRefs: z.ZodArray<z.ZodString>;
+    occurredAt: z.ZodString;
+}, z.core.$strict>;

package/dist/job-application/validation.js

@@ -0,0 +1 @@
+import{z as i}from"zod";import{JOB_APPLICATION_ALLOWED_ACTIONS as o,JOB_APPLICATION_AUTONOMY_LEVELS as a}from"./constants.js";import{APPLICATION_EFFECT_RECEIPT_V1 as r,APPLICATION_FIELD_PROPOSAL_V1 as s,APPLICATION_FORM_SNAPSHOT_V1 as c,CANDIDATE_APPLICATION_MANDATE_V1 as d,CANDIDATE_DOCUMENT_REVISION_V1 as p,CANDIDATE_PROFILE_REVISION_V1 as m,EXTERNAL_ACTION_AUTHORIZATION_RECEIPT_V1 as l,VERIFIED_ANSWER_REVISION_V1 as A}from"./types.js";const e=i.string().trim().min(1);const n=i.array(e);const t=e;export const jobApplicationScopeV1Schema=i.object({ecosystemId:e,tenantId:e,workspaceId:e,candidateId:e,deploymentId:e,jurisdiction:e,purpose:e}).strict();export const candidateApplicationMandateV1Schema=i.object({schemaVersion:i.literal(d),id:e,revision:i.number().int().positive(),scope:jobApplicationScopeV1Schema,autonomy:i.enum(a),destinationAllowlist:i.array(e).min(1),allowedActions:i.array(i.enum(o)).min(1),profileRevisionRef:e,answerRevisionRefs:n,documentRevisionRefs:n,authorizationReceiptRef:e,budgetRef:e,killSwitchKey:e,issuedAt:t,expiresAt:t,revokedAt:t.optional()}).strict();export const candidateProfileRevisionV1Schema=i.object({schemaVersion:i.literal(m),id:e,candidateId:e,revision:i.number().int().positive(),fingerprint:e,encryptedProfileRef:e,documentRefs:n,verifiedAnswerRefs:n,provenanceRefs:n.min(1),createdAt:t,supersededAt:t.optional()}).strict();export const candidateDocumentRevisionV1Schema=i.object({schemaVersion:i.literal(p),id:e,candidateId:e,revision:i.number().int().positive(),fileName:e.max(255),mediaType:e.max(255),sizeBytes:i.number().int().positive().max(25000000),checksumSha256:i.string().regex(/^sha256:[a-f0-9]{64}$/),encryptedObjectRef:e,classification:i.enum(["standard","sensitive","restricted"]),allowedDestinations:i.array(e).min(1),provenanceRefs:n.min(1),createdAt:t,expiresAt:t.optional(),deletedAt:t.optional()}).strict();export const verifiedAnswerRevisionV1Schema=i.object({schemaVersion:i.literal(A),id:e,candidateId:e,revision:i.number().int().positive(),questionKey:e,encryptedValueRef:e,classification:i.enum(["standard","sensitive","restricted"]),allowedDestinations:i.array(e).min(1),provenanceRefs:n.min(1),approvedAt:t,expiresAt:t.optional(),revokedAt:t.optional()}).strict();export const applicationFormSnapshotV1Schema=i.object({schemaVersion:i.literal(c),id:e,applicationId:e,sourceInstallationId:e,pageUrl:i.string().url(),fingerprint:e,fields:i.array(i.object({id:e,name:e,kind:e,required:i.boolean(),material:i.boolean(),constraints:i.record(i.string(),i.unknown())}).strict()).min(1),evidenceRefs:n.min(1),capturedAt:t}).strict();export const applicationFieldProposalV1Schema=i.object({schemaVersion:i.literal(s),id:e,applicationId:e,formSnapshotId:e,fieldId:e,encryptedValueRef:e,answerRevisionRef:e.optional(),documentRevisionRef:e.optional(),confidence:i.number().min(0).max(1),validation:i.enum(["valid","invalid","requires_review"]),evidenceRefs:n.min(1)}).strict();export const externalActionAuthorizationReceiptV1Schema=i.object({schemaVersion:i.literal(l),id:e,candidateId:e,destination:e,termsVersionRef:e,allowedActions:i.array(i.enum(o)).min(1),issuedAt:t,expiresAt:t,revokedAt:t.optional()}).strict();export const applicationEffectReceiptV1Schema=i.object({schemaVersion:i.literal(r),id:e,applicationId:e,effectKey:e,action:i.enum(o),status:i.enum(["reserved","succeeded","failed","outcome_ambiguous"]),providerBindingRef:e,fencingToken:e,requestDigest:e,resultDigest:e.optional(),evidenceRefs:n.min(1),occurredAt:t}).strict();

package/dist/jobs/define-job.d.ts

@@ -0,0 +1,14 @@
+import type { ZodSchema } from 'zod';
+import type { Job, JobQueue } from './queue.js';
+export interface DefinedJob<TPayload> {
+    type: string;
+    schema: ZodSchema<TPayload>;
+    handler: (payload: TPayload, job: Job<TPayload>) => Promise<void>;
+}
+/**
+ * Register a `DefinedJob` on a queue with payload validation.
+ *
+ * - Parses and validates payload via the job's Zod schema
+ * - Invokes the defined handler with the validated payload
+ */
+export declare function registerDefinedJob<TPayload>(queue: JobQueue, job: DefinedJob<TPayload>): void;

package/dist/jobs/define-job.js

@@ -0,0 +1 @@
+export function registerDefinedJob(o,a){o.register(a.type,async(e)=>{const d=a.schema.parse(e.payload);await a.handler(d,e)})}

package/dist/jobs/durable-queue-v2/admission-validation.d.ts

@@ -0,0 +1,3 @@
+import type { BrokerCapabilityProfileV1 } from './capability.js';
+import type { DurableQueueEnvelopeV2 } from './envelope.js';
+export declare function validateQueueAdmissionCapabilityV1(envelope: DurableQueueEnvelopeV2, profile: BrokerCapabilityProfileV1): readonly string[];

package/dist/jobs/durable-queue-v2/admission-validation.js

@@ -0,0 +1 @@
+import{hasValidDurableQueueEnvelopeV2Digest as n,validateBrokerCapabilityProfileV1 as r}from"./validation.js";export function validateQueueAdmissionCapabilityV1(o,i){const e=[],s=o.requirements;e.push(...r(i));if(!n(o))e.push("admission.envelope_digest");if(o.capabilityProfileDigest!==i.profileDigest)e.push("admission.profile_binding");if(u.some((a)=>o.scope[a]!==i.scope[a]))e.push("admission.scope_binding");if(s.orderingScope!=="none"&&s.orderingScope!==i.orderingScope)e.push("admission.ordering");if(s.acknowledgement!==i.acknowledgement)e.push("admission.acknowledgement");for(const[a,t]of p)if(s[a]&&!i[t])e.push(`admission.${a}`);if((o.payload.kind==="inline_json"?new TextEncoder().encode(JSON.stringify(o.payload.value)).byteLength:o.payload.byteLength)>i.maximumPayloadBytes||s.maximumPayloadBytes>i.maximumPayloadBytes)e.push("admission.payload_size");if(s.minimumVisibilitySeconds>i.maximumVisibilitySeconds)e.push("admission.visibility");if(!i.encryptionModes.includes(s.encryptionMode))e.push("admission.encryption");if(s.placementRegionIds.some((a)=>!i.placementRegionIds.includes(a)))e.push("admission.placement");return e}const u=["tenantId","workspaceId","environmentId","productId","applicationId"];const p=[["requiresReplay","supportsReplay"],["requiresDelay","supportsDelay"],["requiresTtl","supportsTtl"],["requiresVisibilityLease","supportsVisibilityLease"],["requiresConsumerGroups","supportsConsumerGroups"],["requiresFanout","supportsFanout"],["requiresDeadLetter","supportsDeadLetter"],["requiresRedrive","supportsRedrive"],["requiresTransactions","supportsTransactions"],["requiresNativeDeduplication","supportsNativeDeduplication"]];

package/dist/jobs/durable-queue-v2/capability.d.ts

@@ -0,0 +1,118 @@
+import { z } from 'zod';
+export declare const BrokerCapabilityProfileV1Schema: z.ZodObject<{
+    contractVersion: z.ZodLiteral<"1.0.0">;
+    scope: z.ZodObject<{
+        tenantId: z.ZodString;
+        workspaceId: z.ZodString;
+        environmentId: z.ZodString;
+        productId: z.ZodString;
+        applicationId: z.ZodString;
+    }, z.core.$strict>;
+    profileId: z.ZodString;
+    providerKind: z.ZodEnum<{
+        embedded: "embedded";
+        gcp_cloud_tasks: "gcp_cloud_tasks";
+        gcp_pubsub: "gcp_pubsub";
+        mqtt: "mqtt";
+        postgresql: "postgresql";
+        rabbitmq: "rabbitmq";
+        redis_streams: "redis_streams";
+        sqs: "sqs";
+    }>;
+    versionBinding: z.ZodObject<{
+        adapterId: z.ZodString;
+        adapterVersion: z.ZodString;
+        adapterDigest: z.ZodString;
+        serverVersion: z.ZodString;
+        serverDigest: z.ZodString;
+        clientVersion: z.ZodString;
+        clientDigest: z.ZodString;
+    }, z.core.$strict>;
+    delivery: z.ZodEnum<{
+        at_least_once: "at_least_once";
+        at_most_once: "at_most_once";
+    }>;
+    orderingScope: z.ZodEnum<{
+        none: "none";
+        ordering_key: "ordering_key";
+        partition: "partition";
+        queue: "queue";
+    }>;
+    acknowledgement: z.ZodEnum<{
+        explicit: "explicit";
+        provider_managed: "provider_managed";
+        transactional: "transactional";
+    }>;
+    supportsReplay: z.ZodBoolean;
+    supportsDelay: z.ZodBoolean;
+    supportsTtl: z.ZodBoolean;
+    supportsVisibilityLease: z.ZodBoolean;
+    supportsConsumerGroups: z.ZodBoolean;
+    supportsFanout: z.ZodBoolean;
+    supportsDeadLetter: z.ZodBoolean;
+    supportsRedrive: z.ZodBoolean;
+    supportsTransactions: z.ZodBoolean;
+    supportsNativeDeduplication: z.ZodBoolean;
+    maximumPayloadBytes: z.ZodNumber;
+    maximumVisibilitySeconds: z.ZodNumber;
+    encryptionModes: z.ZodArray<z.ZodEnum<{
+        client_envelope: "client_envelope";
+        provider_managed: "provider_managed";
+        transport: "transport";
+    }>>;
+    placementRegionIds: z.ZodArray<z.ZodString>;
+    costModelRef: z.ZodString;
+    qualificationDigest: z.ZodString;
+    profileDigest: z.ZodString;
+}, z.core.$strict>;
+export declare const BackpressurePolicyV1Schema: z.ZodObject<{
+    contractVersion: z.ZodLiteral<"1.0.0">;
+    scope: z.ZodObject<{
+        tenantId: z.ZodString;
+        workspaceId: z.ZodString;
+        environmentId: z.ZodString;
+        productId: z.ZodString;
+        applicationId: z.ZodString;
+    }, z.core.$strict>;
+    policyId: z.ZodString;
+    maximumInFlight: z.ZodNumber;
+    maximumClaimBatch: z.ZodNumber;
+    maximumQueueDepth: z.ZodNumber;
+    maximumOldestAgeSeconds: z.ZodNumber;
+    pauseAtUtilizationRatio: z.ZodNumber;
+    resumeAtUtilizationRatio: z.ZodNumber;
+    fairness: z.ZodEnum<{
+        fifo: "fifo";
+        tenant_round_robin: "tenant_round_robin";
+        weighted_tenant: "weighted_tenant";
+    }>;
+    perTenantInFlightCeiling: z.ZodNumber;
+    policyDigest: z.ZodString;
+}, z.core.$strict>;
+export declare const BrokerHealthV1Schema: z.ZodObject<{
+    contractVersion: z.ZodLiteral<"1.0.0">;
+    scope: z.ZodObject<{
+        tenantId: z.ZodString;
+        workspaceId: z.ZodString;
+        environmentId: z.ZodString;
+        productId: z.ZodString;
+        applicationId: z.ZodString;
+    }, z.core.$strict>;
+    healthId: z.ZodString;
+    profileDigest: z.ZodString;
+    state: z.ZodEnum<{
+        degraded: "degraded";
+        healthy: "healthy";
+        indeterminate: "indeterminate";
+        unavailable: "unavailable";
+    }>;
+    queueDepth: z.ZodNumber;
+    oldestAvailableAgeSeconds: z.ZodNumber;
+    redriveDepth: z.ZodNumber;
+    observedAt: z.ZodString;
+    evidenceDigest: z.ZodString;
+    healthDigest: z.ZodString;
+}, z.core.$strict>;
+export type BrokerCapabilityProfileV1 = z.infer<typeof BrokerCapabilityProfileV1Schema>;
+export type BackpressurePolicyV1 = z.infer<typeof BackpressurePolicyV1Schema>;
+export type BrokerHealthV1 = z.infer<typeof BrokerHealthV1Schema>;

package/dist/jobs/durable-queue-v2/capability.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{canonicalStrings as a,QueueContractShape as o,QueueDigestSchema as t,QueueIdSchema as n,QueueUtcTimestampSchema as r,QueueVersionBindingV1Schema as s}from"./primitives.js";export const BrokerCapabilityProfileV1Schema=e.object({...o,profileId:n,providerKind:e.enum(["embedded","postgresql","redis_streams","sqs","rabbitmq","mqtt","gcp_pubsub","gcp_cloud_tasks"]),versionBinding:s,delivery:e.enum(["at_least_once","at_most_once"]),orderingScope:e.enum(["none","partition","ordering_key","queue"]),acknowledgement:e.enum(["explicit","transactional","provider_managed"]),supportsReplay:e.boolean(),supportsDelay:e.boolean(),supportsTtl:e.boolean(),supportsVisibilityLease:e.boolean(),supportsConsumerGroups:e.boolean(),supportsFanout:e.boolean(),supportsDeadLetter:e.boolean(),supportsRedrive:e.boolean(),supportsTransactions:e.boolean(),supportsNativeDeduplication:e.boolean(),maximumPayloadBytes:e.number().int().positive(),maximumVisibilitySeconds:e.number().int().nonnegative(),encryptionModes:e.array(e.enum(["transport","provider_managed","client_envelope"])).min(1).refine(a,"Encryption modes must be canonically ordered."),placementRegionIds:e.array(n).min(1).refine(a,"Regions must be canonically ordered."),costModelRef:n,qualificationDigest:t,profileDigest:t}).strict();export const BackpressurePolicyV1Schema=e.object({...o,policyId:n,maximumInFlight:e.number().int().positive(),maximumClaimBatch:e.number().int().positive().max(1000),maximumQueueDepth:e.number().int().positive(),maximumOldestAgeSeconds:e.number().int().positive(),pauseAtUtilizationRatio:e.number().positive().max(1),resumeAtUtilizationRatio:e.number().nonnegative().lt(1),fairness:e.enum(["fifo","tenant_round_robin","weighted_tenant"]),perTenantInFlightCeiling:e.number().int().positive(),policyDigest:t}).strict().refine((i)=>i.maximumClaimBatch<=i.maximumInFlight,{message:"Claim batches cannot exceed maximum in-flight work."}).refine((i)=>i.perTenantInFlightCeiling<=i.maximumInFlight,{message:"Tenant in-flight ceiling cannot exceed the global ceiling."}).refine((i)=>i.resumeAtUtilizationRatio<i.pauseAtUtilizationRatio,{message:"Resume threshold must be below pause threshold."});export const BrokerHealthV1Schema=e.object({...o,healthId:n,profileDigest:t,state:e.enum(["healthy","degraded","unavailable","indeterminate"]),queueDepth:e.number().int().nonnegative(),oldestAvailableAgeSeconds:e.number().int().nonnegative(),redriveDepth:e.number().int().nonnegative(),observedAt:r,evidenceDigest:t,healthDigest:t}).strict();

package/dist/jobs/durable-queue-v2/digests.d.ts

@@ -0,0 +1,15 @@
+import type { BackpressurePolicyV1, BrokerCapabilityProfileV1, BrokerHealthV1 } from './capability.js';
+import type { DurableQueueEnvelopeV2 } from './envelope.js';
+import type { QueueAckV1, QueueAdmissionReceiptV1, QueueClaimRenewalV1, QueueClaimV1, QueueRedriveReceiptV1 } from './lifecycle.js';
+type Digest = `sha256:${string}`;
+export declare const digestQueueValueV1: (value: unknown) => Digest;
+export declare const digestDurableQueueEnvelopeV2: (value: DurableQueueEnvelopeV2) => Digest;
+export declare const digestBrokerCapabilityProfileV1: (value: BrokerCapabilityProfileV1) => Digest;
+export declare const digestBackpressurePolicyV1: (value: BackpressurePolicyV1) => Digest;
+export declare const digestBrokerHealthV1: (value: BrokerHealthV1) => Digest;
+export declare const digestQueueAdmissionReceiptV1: (value: QueueAdmissionReceiptV1) => Digest;
+export declare const digestQueueClaimV1: (value: QueueClaimV1) => Digest;
+export declare const digestQueueClaimRenewalV1: (value: QueueClaimRenewalV1) => Digest;
+export declare const digestQueueAckV1: (value: QueueAckV1) => Digest;
+export declare const digestQueueRedriveReceiptV1: (value: QueueRedriveReceiptV1) => Digest;
+export {};

package/dist/jobs/durable-queue-v2/digests.js

@@ -0,0 +1 @@
+import{sha256Hex as s}from"@lssm/lib.crypto-utils";function o(e){if(Array.isArray(e))return e.map(o);if(!e||typeof e!=="object")return e;return Object.fromEntries(Object.entries(e).filter(([,i])=>i!==void 0).sort(([i],[r])=>i<r?-1:i>r?1:0).map(([i,r])=>[i,o(r)]))}export const digestQueueValueV1=(e)=>`sha256:${s(JSON.stringify(o(e)))}`;const t=(e,i)=>{const r={...e};delete r[i];return r};export const digestDurableQueueEnvelopeV2=(e)=>digestQueueValueV1(t(e,"envelopeDigest"));export const digestBrokerCapabilityProfileV1=(e)=>digestQueueValueV1(t(e,"profileDigest"));export const digestBackpressurePolicyV1=(e)=>digestQueueValueV1(t(e,"policyDigest"));export const digestBrokerHealthV1=(e)=>digestQueueValueV1(t(e,"healthDigest"));export const digestQueueAdmissionReceiptV1=(e)=>digestQueueValueV1(t(e,"receiptDigest"));export const digestQueueClaimV1=(e)=>digestQueueValueV1(t(e,"claimDigest"));export const digestQueueClaimRenewalV1=(e)=>digestQueueValueV1(t(e,"renewalDigest"));export const digestQueueAckV1=(e)=>digestQueueValueV1(t(e,"ackDigest"));export const digestQueueRedriveReceiptV1=(e)=>digestQueueValueV1(t(e,"receiptDigest"));