@lssm/lib.contracts-spec 17.3.2

package/dist/node/capabilities/capabilities.js

@@ -0,0 +1,187 @@
+import{compareVersions as p}from"compare-versions";const o=(e,s)=>`${e}.v${s}`;export class CapabilityRegistry{items=new Map;surfaceIndex=null;register(e){const s=o(e.meta.key,e.meta.version);if(this.items.has(s))throw Error(`Duplicate capability ${s}`);this.items.set(s,e);this.surfaceIndex=null;return this}list(){return[...this.items.values()]}get(e,s){if(s!=null)return this.items.get(o(e,s));let i;for(const t of this.items.values()){if(t.meta.key!==e)continue;if(!i||p(t.meta.version,i.meta.version)>0)i=t}return i}satisfies(e,s){if(e.optional)return!0;if(s?.some((t)=>c(t,e)))return!0;const i=e.version?this.get(e.key,e.version):this.get(e.key);if(!i)return!1;if(e.kind&&i.meta.kind!==e.kind)return!1;if(e.version!=null&&i.meta.version!==e.version)return!1;return!0}buildSurfaceIndex(){if(this.surfaceIndex)return this.surfaceIndex;this.surfaceIndex=new Map;for(const e of this.items.values()){const s=o(e.meta.key,e.meta.version);for(const i of e.provides??[]){const t=`${i.surface}:${i.key}`;if(!this.surfaceIndex.has(t))this.surfaceIndex.set(t,new Set);this.surfaceIndex.get(t)?.add(s)}}return this.surfaceIndex}getOperationsFor(e,s){const i=this.get(e,s);if(!i)return[];return i.provides?.filter((t)=>t.surface==="operation").map((t)=>t.key)??[]}getEventsFor(e,s){const i=this.get(e,s);if(!i)return[];return i.provides?.filter((t)=>t.surface==="event").map((t)=>t.key)??[]}getPresentationsFor(e,s){const i=this.get(e,s);if(!i)return[];return i.provides?.filter((t)=>t.surface==="presentation").map((t)=>t.key)??[]}getVisualScenariosFor(e,s){const i=this.get(e,s);if(!i)return[];return i.provides?.filter((t)=>t.surface==="visual-scenario").map((t)=>t.key)??[]}getWorkflowsFor(e,s){const i=this.get(e,s);if(!i)return[];return i.provides?.filter((t)=>t.surface==="workflow").map((t)=>t.key)??[]}getResourcesFor(e,s){const i=this.get(e,s);if(!i)return[];return i.provides?.filter((t)=>t.surface==="resource").map((t)=>t.key)??[]}indexBySurface(e){const s=this.buildSurfaceIndex(),i=new Map,t=`${e}:`;for(const[a,r]of s)if(a.startsWith(t))i.set(a,r);return i}getCapabilitiesForOperation(e){const i=this.buildSurfaceIndex().get(`operation:${e}`);if(!i)return[];return[...i].map((t)=>{const a=this.items.get(t);return{key:a?.meta.key??"",version:a?.meta.version??""}})}getCapabilitiesForEvent(e){const i=this.buildSurfaceIndex().get(`event:${e}`);if(!i)return[];return[...i].map((t)=>{const a=this.items.get(t);return{key:a?.meta.key??"",version:a?.meta.version??""}})}getCapabilitiesForPresentation(e){const i=this.buildSurfaceIndex().get(`presentation:${e}`);if(!i)return[];return[...i].map((t)=>{const a=this.items.get(t);return{key:a?.meta.key??"",version:a?.meta.version??""}})}getCapabilitiesForVisualScenario(e){const i=this.buildSurfaceIndex().get(`visual-scenario:${e}`);if(!i)return[];return[...i].map((t)=>{const a=this.items.get(t);return{key:a?.meta.key??"",version:a?.meta.version??""}})}getAncestors(e,s){const i=[],t=new Set;let a=this.get(e,s);while(a?.extends){const r=o(a.extends.key,a.extends.version);if(t.has(r))break;t.add(r);const n=this.get(a.extends.key,a.extends.version);if(!n)break;i.push(n);a=n}return i}getEffectiveRequirements(e,s){const i=this.get(e,s);if(!i)return[];const t=this.getAncestors(e,s),a=new Map;for(const r of[...t].reverse())for(const n of r.requires??[])a.set(n.key,n);for(const r of i.requires??[])a.set(r.key,r);return[...a.values()]}getEffectiveSurfaces(e,s){const i=this.get(e,s);if(!i)return[];const t=this.getAncestors(e,s),a=[];for(const r of[...t].reverse())a.push(...r.provides??[]);a.push(...i.provides??[]);return a}}function c(e,s){if(e.key!==s.key)return!1;if(s.version!=null&&e.version!==s.version)return!1;return!0}export function capabilityKey(e){return o(e.meta.key,e.meta.version)}export function defineCapability(e){return e}export const tech_contracts_capabilities_DocBlocks=[{id:"docs.tech.contracts.capabilities",title:"CapabilitySpec Overview",summary:"Capability specs define what a module provides (operations, events, presentations) and requires (dependencies). They enable bidirectional linking, inheritance, runtime enforcement, and automated validation.",kind:"reference",visibility:"public",route:"/docs/tech/contracts/capabilities",tags:["tech","contracts","capabilities"],body:`# CapabilitySpec Overview
+
+## Purpose
+
+Capabilities are **module interfaces** that define:
+1. What operations, events, and presentations a module exposes (\`provides\`)
+2. What other capabilities it depends on (\`requires\`)
+3. Inheritance hierarchies via \`extends\`
+
+They enable:
+- **Bidirectional linking**: Specs reference capabilities, capabilities list their specs
+- **Dependency validation**: Features can't install without satisfying requirements
+- **Runtime enforcement**: Check capabilities before executing operations
+- **Inheritance**: Build capability hierarchies with shared requirements
+
+## Schema
+
+\`\`\`ts
+export interface CapabilitySpec {
+  meta: CapabilityMeta;              // ownership metadata + { key, version, kind }
+  extends?: CapabilityRef;           // NEW: inherit from parent capability
+  provides?: CapabilitySurfaceRef[]; // surfaces this capability exposes
+  requires?: CapabilityRequirement[];// capabilities that must exist
+}
+\`\`\`
+
+### Bidirectional Linking
+
+Operations, events, and presentations can now declare their capability:
+
+\`\`\`ts
+// In OperationSpec
+{
+  meta: { key: 'payments.charge.create', ... },
+  capability: { key: 'payments', version: '1.0.0' }, // Links to capability
+  io: { ... }
+}
+
+// In CapabilitySpec
+{
+  meta: { key: 'payments', version: '1.0.0', ... },
+  provides: [
+    { surface: 'operation', key: 'payments.charge.create' }
+  ]
+}
+\`\`\`
+
+Validation ensures both sides match via \`validateCapabilityConsistency()\`.
+
+## Registry Query Methods
+
+The \`CapabilityRegistry\` now provides rich query capabilities:
+
+\`\`\`ts
+// Forward lookups: Capability → Specs
+registry.getOperationsFor('payments');      // ['payments.charge.create', ...]
+registry.getEventsFor('payments');          // ['payments.charge.succeeded', ...]
+registry.getPresentationsFor('payments');   // ['payments.dashboard', ...]
+
+// Reverse lookups: Spec → Capabilities
+registry.getCapabilitiesForOperation('payments.charge.create');
+registry.getCapabilitiesForEvent('payments.charge.succeeded');
+registry.getCapabilitiesForPresentation('payments.dashboard');
+
+// Inheritance
+registry.getAncestors('payments.stripe');           // Parent chain
+registry.getEffectiveRequirements('payments.stripe'); // Includes inherited
+registry.getEffectiveSurfaces('payments.stripe');     // Includes inherited
+\`\`\`
+
+## Inheritance
+
+Capabilities can extend other capabilities:
+
+\`\`\`ts
+// Base capability
+defineCapability({
+  meta: { key: 'payments.base', version: '1.0.0', ... },
+  requires: [{ key: 'auth', version: '1.0.0' }],
+  provides: [{ surface: 'operation', key: 'payments.list' }]
+});
+
+// Child capability inherits requirements
+defineCapability({
+  meta: { key: 'payments.stripe', version: '1.0.0', ... },
+  extends: { key: 'payments.base', version: '1.0.0' },
+  requires: [{ key: 'encryption', version: '1.0.0' }], // Added
+  provides: [{ surface: 'operation', key: 'payments.stripe.charge' }]
+});
+
+// getEffectiveRequirements('payments.stripe') returns:
+// [{ key: 'auth', ... }, { key: 'encryption', ... }]
+\`\`\`
+
+## Runtime Enforcement
+
+Use \`CapabilityContext\` for opt-in runtime checks:
+
+\`\`\`ts
+
+// Create context from user's enabled capabilities
+const ctx = createCapabilityContext(user.capabilities);
+
+// Check capability
+if (ctx.hasCapability('payments')) {
+  // User can access payments features
+}
+
+// Assert capability (throws if missing)
+ctx.requireCapability('payments');
+
+// Guard an operation
+assertCapabilityForOperation(ctx, paymentOperation);
+
+// Filter operations by enabled capabilities
+const allowedOps = filterOperationsByCapability(ctx, allOperations);
+\`\`\`
+
+## Validation
+
+Validate bidirectional consistency between capabilities and specs:
+
+\`\`\`ts
+
+const result = validateCapabilityConsistency({
+  capabilities: capabilityRegistry,
+  operations: operationRegistry,
+  events: eventRegistry,
+  presentations: presentationRegistry,
+});
+
+if (!result.valid) {
+  console.error('Validation errors:', result.errors);
+}
+
+// Find specs without capability assignment (informational)
+const orphans = findOrphanSpecs({ capabilities, operations });
+\`\`\`
+
+## Feature Integration
+
+During \`installFeature()\`:
+1. \`provides\` capabilities must exist in the registry
+2. \`requires\` must be satisfied by registered capabilities or local \`provides\`
+3. Referenced operations/events/presentations must exist
+
+## Authoring Guidelines
+
+1. **Register capabilities first** before referencing them in features
+2. **Use bidirectional linking** - set \`capability\` on specs and list them in \`provides\`
+3. **Version consciously** - bump versions on breaking changes
+4. **Document dependencies** with \`reason\` strings
+5. **Use inheritance** for capability families with shared requirements
+6. **Validate during CI** with \`validateCapabilityConsistency()\`
+
+## Error Handling
+
+\`\`\`ts
+
+try {
+  ctx.requireCapability('premium-features');
+} catch (err) {
+  if (err instanceof CapabilityMissingError) {
+    console.log('Missing:', err.capabilityKey);
+    console.log('Required version:', err.requiredVersion);
+  }
+}
+\`\`\`
+
+## API Reference
+
+### Types
+- \`CapabilitySpec\` - Capability definition
+- \`CapabilityRef\` - Reference to a capability (key + version)
+- \`CapabilitySurfaceRef\` - Reference to a provided surface
+- \`CapabilityRequirement\` - Dependency requirement
+- \`CapabilityContext\` - Runtime capability context
+- \`CapabilityValidationResult\` - Validation result
+
+### Functions
+- \`defineCapability(spec)\` - Define a capability spec
+- \`createCapabilityContext(caps)\` - Create runtime context
+- \`validateCapabilityConsistency(deps)\` - Validate bidirectional links
+- \`findOrphanSpecs(deps)\` - Find specs without capability assignment
+- \`assertCapabilityForOperation/Event/Presentation(ctx, spec)\` - Guards
+- \`filterOperationsByCapability(ctx, ops)\` - Filter by enabled capabilities
+`}];

package/dist/node/capabilities/context.js

@@ -0,0 +1 @@
+export class CapabilityMissingError extends Error{capabilityKey;requiredVersion;constructor(i,t){const e=t?`.v${t}`:"";super(`Missing required capability: ${i}${e}`);this.name="CapabilityMissingError";this.capabilityKey=i;this.requiredVersion=t}}class s{capabilities;capabilityVersions;constructor(i){const t=new Set,e=new Map;for(const a of i){t.add(a.key);e.set(a.key,a.version)}this.capabilities=t;this.capabilityVersions=e}hasCapability(i,t){if(!this.capabilities.has(i))return!1;if(t!=null)return this.capabilityVersions.get(i)===t;return!0}requireCapability(i,t){if(!this.hasCapability(i,t))throw new CapabilityMissingError(i,t)}hasAllCapabilities(i){return i.every((t)=>this.capabilities.has(t))}hasAnyCapability(i){return i.some((t)=>this.capabilities.has(t))}getMatchingCapabilities(i){if(!i.includes("*"))return this.capabilities.has(i)?[i]:[];const t=i.replace(/[.+^${}()|[\]\\]/g,"\\$&").replace(/\*/g,".*"),e=new RegExp(`^${t}$`);return[...this.capabilities].filter((a)=>e.test(a))}}export function createCapabilityContext(i){return new s(i)}export function createEmptyCapabilityContext(){return new s([])}export function createBypassCapabilityContext(i){return new s(i)}

package/dist/node/capabilities/guards.js

@@ -0,0 +1 @@
+import{CapabilityMissingError as n}from"./context.js";export function checkCapabilityForOperation(e,t){if(!t.capability)return{allowed:!0};const{key:i,version:a}=t.capability;if(e.hasCapability(i,a))return{allowed:!0};return{allowed:!1,missingCapability:{key:i,version:a},reason:`Operation "${t.meta.key}" requires capability "${i}.v${a}"`}}export function assertCapabilityForOperation(e,t){const i=checkCapabilityForOperation(e,t);if(!i.allowed&&i.missingCapability)throw new n(i.missingCapability.key,i.missingCapability.version)}export function checkCapabilityForEvent(e,t){if(!t.capability)return{allowed:!0};const{key:i,version:a}=t.capability;if(e.hasCapability(i,a))return{allowed:!0};return{allowed:!1,missingCapability:{key:i,version:a},reason:`Event "${t.meta.key}" requires capability "${i}.v${a}"`}}export function assertCapabilityForEvent(e,t){const i=checkCapabilityForEvent(e,t);if(!i.allowed&&i.missingCapability)throw new n(i.missingCapability.key,i.missingCapability.version)}export function checkCapabilityForPresentation(e,t){if(!t.capability)return{allowed:!0};const{key:i,version:a}=t.capability;if(e.hasCapability(i,a))return{allowed:!0};return{allowed:!1,missingCapability:{key:i,version:a},reason:`Presentation "${t.meta.key}" requires capability "${i}.v${a}"`}}export function assertCapabilityForPresentation(e,t){const i=checkCapabilityForPresentation(e,t);if(!i.allowed&&i.missingCapability)throw new n(i.missingCapability.key,i.missingCapability.version)}export function filterOperationsByCapability(e,t){return t.filter((i)=>checkCapabilityForOperation(e,i).allowed)}export function filterEventsByCapability(e,t){return t.filter((i)=>checkCapabilityForEvent(e,i).allowed)}export function filterPresentationsByCapability(e,t){return t.filter((i)=>checkCapabilityForPresentation(e,i).allowed)}

package/dist/node/capabilities/index.d.js

@@ -0,0 +1 @@
+export*from"./agent-workflow.js";export*from"./capabilities.js";export*from"./context.js";export*from"./guards.js";export*from"./meeting-recorder.js";export*from"./openbanking.js";export*from"./validation.js";

package/dist/node/capabilities/index.js

@@ -0,0 +1 @@
+export*from"./agent-workflow.js";export*from"./capabilities.js";export*from"./context.js";export*from"./guards.js";export*from"./meeting-recorder.js";export*from"./openbanking.js";export*from"./validation.js";

package/dist/node/capabilities/meeting-recorder.js

@@ -0,0 +1 @@
+import{StabilityEnum as e}from"../ownership.js";const r=["platform.integrations"],i=["meeting-recorder","transcripts","integrations"];export const meetingRecorderMeetingsReadCapability={meta:{key:"meeting-recorder.meetings.read",version:"1.0.0",kind:"integration",title:"Meeting Recorder Meetings (Read)",description:"Provides read-only access to recorded meetings and their metadata.",domain:"integrations",owners:[...r],tags:[...i,"meetings"],stability:e.Experimental},provides:[{surface:"operation",key:"meeting-recorder.meetings.list",version:"1.0.0",description:"List meetings available from the recorder provider."},{surface:"operation",key:"meeting-recorder.meetings.get",version:"1.0.0",description:"Fetch detailed metadata for a specific meeting."}]},meetingRecorderTranscriptsReadCapability={meta:{key:"meeting-recorder.transcripts.read",version:"1.0.0",kind:"integration",title:"Meeting Recorder Transcripts (Read)",description:"Enables retrieval of transcripts for recorded meetings from external providers.",domain:"integrations",owners:[...r],tags:[...i,"transcripts"],stability:e.Experimental},provides:[{surface:"operation",key:"meeting-recorder.transcripts.get",version:"1.0.0",description:"Fetch the transcript for a specific meeting recording."},{surface:"operation",key:"meeting-recorder.transcripts.sync",version:"1.0.0",description:"Trigger a transcript sync from the recorder provider."}]},meetingRecorderWebhooksCapability={meta:{key:"meeting-recorder.webhooks",version:"1.0.0",kind:"integration",title:"Meeting Recorder Webhooks",description:"Allows processing of webhook events for meeting transcript readiness.",domain:"integrations",owners:[...r],tags:[...i,"webhooks"],stability:e.Experimental},provides:[{surface:"operation",key:"meeting-recorder.webhooks.ingest",version:"1.0.0",description:"Ingest and verify meeting recorder webhook payloads."}]};export function registerMeetingRecorderCapabilities(t){return t.register(meetingRecorderMeetingsReadCapability).register(meetingRecorderTranscriptsReadCapability).register(meetingRecorderWebhooksCapability)}

package/dist/node/capabilities/openbanking.js

@@ -0,0 +1 @@
+import{StabilityEnum as n}from"../ownership.js";const e=["platform.finance"],a=["open-banking","finance"];export const openBankingAccountsReadCapability={meta:{key:"openbanking.accounts.read",version:"1.0.0",kind:"integration",title:"Open Banking Accounts (Read)",description:"Provides read-only access to linked bank accounts, including account summaries and metadata.",domain:"finance",owners:[...e],tags:[...a],stability:n.Experimental},provides:[{surface:"operation",key:"openbanking.accounts.list",version:"1.0.0",description:"List bank accounts linked to a Powens open banking connection."},{surface:"operation",key:"openbanking.accounts.get",version:"1.0.0",description:"Retrieve the canonical bank account record for a specific account."},{surface:"operation",key:"openbanking.accounts.sync",version:"1.0.0",description:"Trigger a refresh of bank account metadata from the open banking provider."}]},openBankingTransactionsReadCapability={meta:{key:"openbanking.transactions.read",version:"1.0.0",kind:"integration",title:"Open Banking Transactions (Read)",description:"Enables retrieval of transaction history for linked bank accounts via open banking providers.",domain:"finance",owners:[...e],tags:[...a,"transactions"],stability:n.Experimental},provides:[{surface:"operation",key:"openbanking.transactions.list",version:"1.0.0",description:"List transactions for a given bank account with optional date filtering."},{surface:"operation",key:"openbanking.transactions.sync",version:"1.0.0",description:"Synchronise transactions from the open banking provider into the canonical ledger."}]},openBankingBalancesReadCapability={meta:{key:"openbanking.balances.read",version:"1.0.0",kind:"integration",title:"Open Banking Balances (Read)",description:"Allows querying of current and available balances for linked bank accounts via open banking providers.",domain:"finance",owners:[...e],tags:[...a,"balances"],stability:n.Experimental},provides:[{surface:"operation",key:"openbanking.balances.get",version:"1.0.0",description:"Retrieve the latest known balances for a specified bank account."},{surface:"operation",key:"openbanking.balances.refresh",version:"1.0.0",description:"Force a balance refresh from the open banking provider."}]};export function registerOpenBankingCapabilities(i){return i.register(openBankingAccountsReadCapability).register(openBankingTransactionsReadCapability).register(openBankingBalancesReadCapability)}

package/dist/node/capabilities/validation.js

@@ -0,0 +1 @@
+export function validateCapabilityConsistency(e){const a=[],t=[];for(const i of e.capabilities.list()){const s=`${i.meta.key}.v${i.meta.version}`;for(const n of i.provides??[])if(!o(e,n.surface,n.key))a.push({type:"missing_surface_spec",message:`Capability "${s}" provides ${n.surface} "${n.key}" but spec not found`,capabilityKey:s,surface:n.surface,specKey:n.key})}if(e.operations){for(const i of e.operations.list())if(i.capability){const s=e.capabilities.get(i.capability.key,i.capability.version);if(!s)a.push({type:"capability_not_found",message:`Operation "${i.meta.key}" references capability "${i.capability.key}.v${i.capability.version}" but capability not found`,specKey:i.meta.key,capabilityKey:`${i.capability.key}.v${i.capability.version}`,surface:"operation"});else if(!s.provides?.some((r)=>r.surface==="operation"&&r.key===i.meta.key))a.push({type:"surface_not_in_provides",message:`Operation "${i.meta.key}" claims capability "${i.capability.key}.v${i.capability.version}" but not in capability's provides`,specKey:i.meta.key,capabilityKey:`${i.capability.key}.v${i.capability.version}`,surface:"operation"})}}if(e.events){for(const i of e.events.list())if(i.capability){const s=e.capabilities.get(i.capability.key,i.capability.version);if(!s)a.push({type:"capability_not_found",message:`Event "${i.meta.key}" references capability "${i.capability.key}.v${i.capability.version}" but capability not found`,specKey:i.meta.key,capabilityKey:`${i.capability.key}.v${i.capability.version}`,surface:"event"});else if(!s.provides?.some((r)=>r.surface==="event"&&r.key===i.meta.key))a.push({type:"surface_not_in_provides",message:`Event "${i.meta.key}" claims capability "${i.capability.key}.v${i.capability.version}" but not in capability's provides`,specKey:i.meta.key,capabilityKey:`${i.capability.key}.v${i.capability.version}`,surface:"event"})}}if(e.presentations){for(const i of e.presentations.list())if(i.capability){const s=e.capabilities.get(i.capability.key,i.capability.version);if(!s)a.push({type:"capability_not_found",message:`Presentation "${i.meta.key}" references capability "${i.capability.key}.v${i.capability.version}" but capability not found`,specKey:i.meta.key,capabilityKey:`${i.capability.key}.v${i.capability.version}`,surface:"presentation"});else if(!s.provides?.some((r)=>r.surface==="presentation"&&r.key===i.meta.key))a.push({type:"surface_not_in_provides",message:`Presentation "${i.meta.key}" claims capability "${i.capability.key}.v${i.capability.version}" but not in capability's provides`,specKey:i.meta.key,capabilityKey:`${i.capability.key}.v${i.capability.version}`,surface:"presentation"})}}return{valid:a.length===0,errors:a,warnings:t}}function o(e,a,t){switch(a){case"operation":return e.operations?.has(t)??!0;case"event":return e.events?.has(t)??!0;case"presentation":return e.presentations?.has(t)??!0;case"workflow":case"resource":return!0;default:return!0}}export function findOrphanSpecs(e){const a={operations:[],events:[],presentations:[]};if(e.operations){for(const t of e.operations.list())if(!t.capability)a.operations.push(t.meta.key)}if(e.events){for(const t of e.events.list())if(!t.capability)a.events.push(t.meta.key)}if(e.presentations){for(const t of e.presentations.list())if(!t.capability)a.presentations.push(t.meta.key)}return a}

package/dist/node/cli/command-pack.js

@@ -0,0 +1,16 @@
+import*as a from"zod";export const CLI_COMMAND_PACK_SCHEMA_VERSION=1,CliCommandNameSchema=a.string().trim().min(1).regex(/^[a-z0-9][a-z0-9:-]*$/),CliCommandPackSpecSchema=a.object({schemaVersion:a.literal(CLI_COMMAND_PACK_SCHEMA_VERSION),id:a.string().trim().min(1),version:a.string().trim().min(1),commands:a.array(CliCommandNameSchema).min(1),extends:a.array(CliCommandNameSchema).optional()}),CliCommandPackMetadataSchema=a.object({entry:a.string().trim().min(1),spec:CliCommandPackSpecSchema}),CliCommandPackDiscoveryConfigSchema=a.object({include:a.array(a.string().trim().min(1)).optional(),exclude:a.array(a.string().trim().min(1)).optional()}),CliCommandPackDocBlock={id:"docs.tech.contracts.cli-command-packs",title:"CLI command packs",summary:"Portable metadata and consumer discovery controls for ContractSpec CLI command packs.",kind:"reference",visibility:"public",route:"/docs/tech/contracts/cli-command-packs",tags:["cli","command-pack","configuration"],body:`## CLI command packs
+
+Published command packs expose \`contractspec.commandPack\` metadata containing a module entry and a \`CliCommandPackSpec\`. The CLI discovers only direct consumer dependencies with that metadata.
+
+Consumers can constrain discovery with \`.contractsrc.json\`:
+
+\`\`\`json
+{
+  "commandPacks": {
+    "include": ["@lssm/integration.cli-contractspec-ai"],
+    "exclude": ["@lssm/integration.cli-contractspec-examples"]
+  }
+}
+\`\`\`
+
+Exclusion wins when a package appears in both lists. Runtime registration and conflict handling are owned by \`@lssm/lib.cli-runtime\`.`};

package/dist/node/cli/index.js

@@ -0,0 +1 @@
+export*from"./command-pack.js";

package/dist/node/companyos/auth-production-topology.js

@@ -0,0 +1 @@
+export const COMPANYOS_PRODUCTION_AUTH_TOPOLOGY={webOrigin:"https://www.companyos.run",apiOrigin:"https://api.companyos.run",cookieDomain:".companyos.run",defaultPostLoginPath:"/companyos"};export function resolveCompanyOsPostLoginUrl(n){if(!n.startsWith("/")||n.startsWith("//")||/[\\\u0000-\u001f\u007f]/.test(n))throw Error("companyos_post_login_path_invalid");const i=new URL(n,COMPANYOS_PRODUCTION_AUTH_TOPOLOGY.webOrigin);if(i.origin!==COMPANYOS_PRODUCTION_AUTH_TOPOLOGY.webOrigin)throw Error("companyos_post_login_path_invalid");return i.toString()}export function defineCompanyOsPreviewAuthTopology(n){const i=(e)=>{const o=new URL(e);if(o.protocol!=="https:"||o.username||o.password||o.pathname!=="/"||o.search||o.hash||e!==o.origin||o.hostname==="companyos.run"||o.hostname.endsWith(".companyos.run")||o.hostname==="lssm.co"||o.hostname.endsWith(".lssm.co")||o.hostname==="lssm.tech"||o.hostname.endsWith(".lssm.tech"))throw Error("companyos_preview_origin_invalid");return o.origin},r=i(n.webOrigin);return Object.freeze({schemaVersion:"1",profile:"preview-v1",webOrigin:r,upstreamApiOrigin:i(n.upstreamApiOrigin),authOrigin:r,cookiePrefix:"companyos-preview",crossSubDomainCookies:!1})}

package/dist/node/companyos/booking-surfaces.js

@@ -0,0 +1 @@
+export const COMPANYOS_REQUIRED_BOOKING_SURFACES=Object.freeze([Object.freeze({kind:"organization",organizationSlug:"lssm",handle:"lssm",displayName:"LSSM",email:"tboutron@lssm.co"}),Object.freeze({kind:"organization",organizationSlug:"companyos",handle:"companyos",displayName:"CompanyOS",email:"tboutron@lssm.co"}),Object.freeze({kind:"organization",organizationSlug:"hirly",handle:"hirly",displayName:"Hirly",email:"theo@tryhirly.com"}),Object.freeze({kind:"individual",organizationSlug:"lssm",handle:"theo",displayName:"Théo Boutron",email:"tboutron@lssm.co"}),Object.freeze({kind:"individual",organizationSlug:"hirly",handle:"antoine",displayName:"Antoine",email:"antoine@tryhirly.com"}),Object.freeze({kind:"individual",organizationSlug:"hirly",handle:"younes",displayName:"Younes",email:"younes@tryhirly.com"})]),COMPANYOS_BOOKING_SURFACE_POLICY=Object.freeze({personalSurfaceCount:3,organizationSurfaceCount:3,destination:"owned_live",sharedWorkspaceCalendarForMembers:!0,canonicalEmbedOrigins:Object.freeze(["https://www.companyos.run"]),publicProfilePath:"/u/:handle",publicBookingPath:"/book/:token",activationPath:"/api/companyos/operator/booking-surfaces/activate",activationAuthentication:"dedicated_bearer",activationReplay:"idempotent"});

package/dist/node/companyos/calendar-intelligence.js

@@ -0,0 +1 @@
+export const COMPANYOS_CALENDAR_INTELLIGENCE_VERSION="2.5.0",COMPANYOS_CALENDAR_INTELLIGENCE_GOOGLE_SCOPES=Object.freeze(["https://www.googleapis.com/auth/calendar.events.freebusy","https://www.googleapis.com/auth/calendar.events.owned","https://www.googleapis.com/auth/calendar.calendarlist.readonly","https://www.googleapis.com/auth/calendar.events.readonly"]),COMPANYOS_CALENDAR_INTELLIGENCE_COMPATIBILITY=Object.freeze({intent:"additive-minor",priorWorkspacePreferences:"unsupported",workspaceBookingCalendars:"permanently-excluded",unconfiguredRecipients:"setup-required-no-delivery",oauthConsent:"personal-reauthorization-required",omnichannelPreferences:"email-default-with-durable-in-app-fallback",providerAcceptance:"not-delivery-confirmation",queueAdmission:"not-provider-acceptance"}),COMPANYOS_CALENDAR_INTELLIGENCE_POLICY=Object.freeze({defaultTimezone:"Europe/Paris",defaultLocale:"en",morningRecapLocalTime:"07:00",morningRecapCatchUpMinutes:180,meetingPreparationLeadMinutes:60,eventReadWindowHours:36,maximumEventsPerPerson:40,maximumGraphFactsPerWorkspace:8,durableContentRetention:"P90D-policy-overridable",durableEvidence:"digest-delivery-model-evidence-refs-only",declinedEvents:"excluded",allDayEvents:"recap-only",operatorReplayPath:"/api/companyos/operator/calendar-intelligence/run"}),companyOsCalendarIntelligenceComposition=Object.freeze({source:{provider:"google-calendar",ownership:"recipient-personal-context-only",workspaceBookingFallback:"forbidden",graphScope:"explicit-calendar-to-authorized-workspace-mapping",scopes:COMPANYOS_CALENDAR_INTELLIGENCE_GOOGLE_SCOPES},delivery:{recipients:"exactly-one-authenticated-companyos-user",eventAttendees:"context-only-never-envelope-recipients",morning:"one-cross-workspace-routed-delivery-per-person-local-date",preparation:"one-routed-delivery-per-person-provider-event-occurrence",preview:"current-user-personal-pipeline-non-production",routing:"communication-os-prepared-and-persisted-before-effect",dispatch:"communication-os-durable-outbox-with-provider-idempotency",queueAdmission:"recorded-separately-from-provider-acceptance",fallback:"durable-in-app-terminal",providerAcceptance:"recorded-separately-from-delivery-confirmation"},composition:{deterministic:["recipient","subject","preheader","time","attendees","location","join-link"],ai:"schema-validated-evidence-bound-untrusted-input",fallback:"field-by-field-deterministic"},persistence:{eventContent:"canonical-communication-message-only",emailBodies:"communication-os-policy-retention",evidence:"digest-delivery-model-evidence-refs-only"}});

package/dist/node/companyos/calendar-microsoft-personal-discovery.js

@@ -0,0 +1 @@
+import{fromZod as r}from"@lssm/lib.schema";import{z as e}from"zod";import{defineQuery as a}from"../operations/index.js";import{COMPANYOS_CAPABILITY as n,COMPANYOS_DOMAIN as o,COMPANYOS_OWNERS as t,COMPANYOS_STABILITY as i,COMPANYOS_TAGS as s}from"./constants.js";export const PersonalMicrosoftCalendarSchema=e.object({displayName:e.string().max(1024),primary:e.boolean(),canReadBusy:e.boolean(),canOwnWrites:e.boolean(),supportsTeams:e.boolean(),busyCalendarRef:e.string().regex(/^busy-calendar:[a-f0-9]{64}$/),writeCalendarRef:e.string().regex(/^write-calendar:[a-f0-9]{64}$/).optional()}).strict(),PersonalMicrosoftCalendarsResultSchema=e.object({calendars:e.array(PersonalMicrosoftCalendarSchema).max(1000)}).strict(),PersonalMicrosoftCalendarsQuery=a({meta:{key:"calendar-intelligence.personal-microsoft-calendars.list",version:"1.0.0",title:"List personal Microsoft calendars",description:"Discover calendars for the authenticated personal Microsoft connection.",goal:"Offer explicit busy-calendar and write-target selection without exposing credentials.",context:"Verified provider identity and current personal authority are required; enumeration does not select calendars or enable planning.",domain:o,owners:[...t],tags:[...s,"calendar","microsoft"],stability:i},capability:{...n},io:{input:r(e.object({}).strict(),{name:"PersonalMicrosoftCalendarsInput"}),output:r(PersonalMicrosoftCalendarsResultSchema,{name:"PersonalMicrosoftCalendarsOutput"}),errors:{MICROSOFT_CALENDAR_UNAVAILABLE:{description:"Microsoft calendars are unavailable.",http:503,when:"Credentials, provider discovery or identity proof is unavailable."},PERSONAL_CONTEXT_REQUIRED:{description:"An enabled personal context is required.",http:409,when:"Personal owner cannot be resolved."},FORBIDDEN:{description:"Current authority no longer permits access.",http:403,when:"Session or owner reproof fails."}}},acceptance:{scenarios:[{key:"private-owner-discovery",given:["A current personal Microsoft connection"],when:["The owner lists calendars"],then:["Only opaque calendar references and capabilities are returned","No calendar is selected and no scheduling effect occurs"]}]},policy:{auth:"user",pii:["calendars.displayName"]}});

package/dist/node/companyos/calendar-microsoft-personal-http.js

@@ -0,0 +1 @@
+export const COMPANYOS_PERSONAL_MICROSOFT_HTTP_CATALOG=[{key:"calendar-intelligence.personal-microsoft-oauth.start",version:"1.1.0",method:"POST",path:"/api/v2/opa/personal-calendar/microsoft/authorize"},{key:"calendar-intelligence.personal-microsoft-oauth.complete",version:"1.2.0",method:"GET",path:"/api/v2/opa/personal-calendar/microsoft/callback"},{key:"calendar-intelligence.personal-microsoft-calendars.list",version:"1.0.0",method:"GET",path:"/api/v2/opa/personal-calendar/microsoft/calendars"},{key:"calendar-intelligence.personal-microsoft-selection.read",version:"1.0.0",method:"GET",path:"/api/v2/opa/personal-calendar/microsoft/selection"},{key:"calendar-intelligence.personal-microsoft-selection.save",version:"1.0.0",method:"POST",path:"/api/v2/opa/personal-calendar/microsoft/selection"},{key:"calendar-intelligence.personal-microsoft-calendar.disconnect",version:"1.0.0",method:"POST",path:"/api/v2/opa/personal-calendar/microsoft/disconnect"}];

package/dist/node/companyos/calendar-microsoft-personal-selection.js

@@ -0,0 +1 @@
+import{fromZod as o}from"@lssm/lib.schema";import{z as e}from"zod";import{defineCommand as n,defineQuery as c}from"../operations/index.js";import{COMPANYOS_CAPABILITY as a,COMPANYOS_DOMAIN as d,COMPANYOS_OWNERS as l,COMPANYOS_STABILITY as p,COMPANYOS_TAGS as m}from"./constants.js";export const PersonalMicrosoftCalendarSelectionSchema=e.object({expectedSelectionDigest:e.string().regex(/^sha256:[a-f0-9]{64}$/),selections:e.array(e.object({calendarRef:e.string().regex(/^busy-calendar:[a-f0-9]{64}$/),workspaceIds:e.array(e.string().min(1).max(160)).max(20)}).strict()).max(100),writeCalendarRef:e.string().regex(/^write-calendar:[a-f0-9]{64}$/).optional(),requireTeams:e.boolean()}).strict().superRefine((t,i)=>{if(new Set(t.selections.map((r)=>r.calendarRef)).size!==t.selections.length)i.addIssue({code:"custom",message:"DUPLICATE_CALENDAR_SELECTION"});if(t.selections.some((r)=>new Set(r.workspaceIds).size!==r.workspaceIds.length))i.addIssue({code:"custom",message:"DUPLICATE_WORKSPACE_MAPPING"});if((t.writeCalendarRef||t.requireTeams)&&!t.selections.length)i.addIssue({code:"custom",message:"WRITE_TARGET_REQUIRES_SELECTED_CALENDAR"});if(t.requireTeams&&!t.writeCalendarRef)i.addIssue({code:"custom",message:"TEAMS_REQUIRES_WRITE_TARGET"})}),PersonalMicrosoftCalendarSelectionResultSchema=e.object({selectionDigest:e.string().regex(/^sha256:[a-f0-9]{64}$/),selections:e.array(e.object({calendarRef:e.string().regex(/^busy-calendar:[a-f0-9]{64}$/),workspaceIds:e.array(e.string().min(1).max(160)).max(20),designatedWriteTarget:e.boolean()}).strict()).max(100)}).strict();const s={version:"1.0.0",domain:d,owners:[...l],stability:p,tags:[...m,"calendar","microsoft"],goal:"Persist explicit personal calendar choices without overwriting concurrent edits.",context:"Owner and authorized workspace mappings are rederived server-side. Selection does not qualify provider execution."};export const PersonalMicrosoftCalendarSelectionRead=c({meta:{...s,version:"1.0.0",key:"calendar-intelligence.personal-microsoft-selection.read",title:"Read personal Microsoft calendar selection",description:"Read persisted choices and their current concurrency digest."},capability:{...a},io:{input:o(e.object({}).strict(),{name:"PersonalMicrosoftSelectionReadInput"}),output:o(PersonalMicrosoftCalendarSelectionResultSchema,{name:"PersonalMicrosoftSelectionReadOutput"})},policy:{auth:"user",pii:[]}}),PersonalMicrosoftCalendarSelectionSave=n({meta:{...s,version:"1.0.0",key:"calendar-intelligence.personal-microsoft-selection.save",title:"Save personal Microsoft calendar selection",description:"Save verified calendar choices only against the expected persisted digest."},capability:{...a},io:{input:o(PersonalMicrosoftCalendarSelectionSchema,{name:"PersonalMicrosoftSelectionSaveInput"}),output:o(e.object({selected:e.number().int().min(0).max(100)}).strict(),{name:"PersonalMicrosoftSelectionSaveOutput"}),errors:{MICROSOFT_SELECTION_INVALID:{description:"Review calendar choices and write target.",http:422,when:"Selection fails current provider capability or input validation."},MICROSOFT_SELECTION_CONFLICT:{description:"Reload calendar choices before saving again.",http:409,when:"The persisted selection digest changed."}}},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/calendar-private-draft-preview.js

@@ -0,0 +1 @@
+import{fromZod as n}from"@lssm/lib.schema";import{z as e}from"zod";import{defineCommand as i,defineQuery as c}from"../operations/index.js";import{COMPANYOS_CAPABILITY as t,COMPANYOS_DOMAIN as d,COMPANYOS_OWNERS as l,COMPANYOS_STABILITY as p,COMPANYOS_TAGS as g}from"./constants.js";export const CalendarPrivateDraftPreviewRequestSchema=e.object({idempotencyKey:e.string().min(1).max(128),kind:e.enum(["morning-recap","meeting-preparation"]),locale:e.enum(["en","fr","es"])}).strict(),CalendarPrivateDraftPreviewResultSchema=e.object({state:e.literal("draft"),content:e.string().min(1).max(12000),sourceRefs:e.array(e.string().min(1)),delivered:e.literal(!1)}).strict(),CALENDAR_PRIVATE_DRAFT_PREVIEW_CONTRACT={version:"1.1.0",errors:{consumed:"briefing_draft_command_consumed",unavailable:"briefing_draft_unavailable"},operation:"companyos.calendar_intelligence.draft_preview",path:"/api/companyos/opa/briefings/draft-preview",method:"POST",scope:"selected-private-calendars",invariants:["Authenticated explicit human command authorizes only this bounded private draft.","Independent model-bound processing consent and current policy are required before and after generation.","No sender, Work mutation or calendar write is available.","Source references identify authorized calendar inputs; model facts retain existing citation validation."]},CalendarPrivateProcessingConsentCommandSchema=e.object({expectedRevision:e.number().int().nonnegative(),state:e.enum(["granted","revoked"]),bindingDigest:e.string().regex(/^sha256:[a-f0-9]{64}$/),scopeRefs:e.array(e.string().min(1).max(256)).max(200)}).strict(),COMPANYOS_PRIVATE_BRIEFING_HTTP_CATALOG=[CALENDAR_PRIVATE_DRAFT_PREVIEW_CONTRACT,{version:"1.0.0",operation:"companyos.calendar_intelligence.processing_consent.read",method:"GET",path:"/api/companyos/opa/briefings/processing-consent"},{version:"1.0.0",operation:"companyos.calendar_intelligence.processing_consent.save",method:"POST",path:"/api/companyos/opa/briefings/processing-consent"}];const o=e.object({owner:e.object({personalTenantId:e.string(),userId:e.string()}),revision:e.number().int(),state:e.enum(["granted","revoked"]),bindingDigest:e.string(),scopeRefs:e.array(e.string())});export const CalendarPrivateProcessingSettingsSchema=e.object({consent:o.nullable(),binding:e.object({provider:e.string(),model:e.string(),region:e.string()}).passthrough().nullable(),bindingDigest:e.string().nullable(),availableScopeRefs:e.array(e.string())});const a=(s,r)=>({key:s,title:r,version:"1.0.0",description:r,goal:"Private calendar intelligence with explicit processing consent and no delivery.",context:"Owner and execution evidence are derived from the authenticated session.",domain:d,owners:[...l],tags:[...g,"calendar","briefing"],stability:p});export const PersonalBriefingDraftGenerateCommand=i({meta:a("companyos.calendar_intelligence.draft_preview","Generate Private Calendar Draft"),capability:{...t},io:{input:n(CalendarPrivateDraftPreviewRequestSchema,{name:"PersonalBriefingDraftInput"}),output:n(CalendarPrivateDraftPreviewResultSchema,{name:"PersonalBriefingDraftResult"})},acceptance:{scenarios:[{key:"private-draft-only",given:["An authenticated owner explicitly consents to the current model and source scopes"],when:["The owner requests a draft"],then:["Current policy, input and consent are rechecked before and after generation","The validated result is a private draft and no email or Work mutation occurs"]},{key:"revoked-or-stale-authority",given:["Consent, policy, inputs or model binding change during generation"],when:["The result is checked"],then:["The result is rejected","The consumed command identity does not trigger duplicate generation"]}],examples:[{key:"synthetic-private-draft",input:{idempotencyKey:"example:draft",kind:"morning-recap",locale:"en"},output:{state:"draft",content:"Synthetic private draft for review.",sourceRefs:["calendar:example"],delivered:!1}}]},policy:{auth:"user",pii:[]}}),PersonalBriefingProcessingConsentReadQuery=c({meta:a("companyos.calendar_intelligence.processing_consent.read","Read Personal Processing Consent"),capability:{...t},io:{input:n(e.object({}).strict(),{name:"PersonalProcessingConsentReadInput"}),output:n(CalendarPrivateProcessingSettingsSchema,{name:"PersonalProcessingConsentSettings"})},acceptance:{scenarios:[{key:"owner-scoped-settings",given:["The requester has a current personal context"],when:["Processing settings are read"],then:["Only that owner consent and currently available source scopes are returned","Unavailable generation does not prevent reading existing consent for revocation"]}],examples:[{key:"unconfigured",input:{},output:{consent:null,binding:null,bindingDigest:null,availableScopeRefs:[]}}]},policy:{auth:"user",pii:[]}}),PersonalBriefingProcessingConsentSaveCommand=i({meta:a("companyos.calendar_intelligence.processing_consent.save","Save Personal Processing Consent"),capability:{...t},io:{input:n(CalendarPrivateProcessingConsentCommandSchema,{name:"PersonalProcessingConsentSaveInput"}),output:n(o,{name:"PersonalProcessingConsentRecord"})},acceptance:{scenarios:[{key:"explicit-grant",given:["The owner explicitly selects the current binding and available scopes"],when:["Consent is granted at the expected revision"],then:["A new owner-scoped consent revision is saved","A stale revision or changed binding is rejected"]},{key:"independent-revocation",given:["The owner has existing consent and the provider is unavailable"],when:["The owner revokes at the expected revision"],then:["Consent becomes revoked without requiring provider access"]}],examples:[{key:"revoke",input:{expectedRevision:1,state:"revoked",bindingDigest:"sha256:"+"a".repeat(64),scopeRefs:["calendar:example"]},output:{owner:{personalTenantId:"example-personal",userId:"example-user"},revision:2,state:"revoked",bindingDigest:"sha256:"+"a".repeat(64),scopeRefs:["calendar:example"]}}]},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/commands/autonomousWorkOrderTransition.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineCommand as o}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as r,COMPANYOS_DOMAIN as i,COMPANYOS_OWNERS as n,COMPANYOS_STABILITY as a,COMPANYOS_TAGS as s}from"../constants.js";const p=new t({name:"CompanyOsAutonomousWorkOrderTransitionInput",fields:{tenantId:{type:e.ID(),isOptional:!1},workOrderId:{type:e.ID(),isOptional:!1},transition:{type:e.String_unsecure(),isOptional:!1},actorRef:{type:e.String_unsecure(),isOptional:!1},workRef:{type:e.String_unsecure(),isOptional:!1},graphNodeRefs:{type:e.String_unsecure(),isOptional:!1,isArray:!0},graphEdgeRefs:{type:e.String_unsecure(),isOptional:!1,isArray:!0},safety:{type:e.JSONObject(),isOptional:!1},evidenceRefIds:{type:e.String_unsecure(),isOptional:!1,isArray:!0}}}),u=new t({name:"CompanyOsAutonomousWorkOrderTransitionOutput",fields:{workOrderId:{type:e.ID(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},transitionedAt:{type:e.DateTime(),isOptional:!1},stateNodeRef:{type:e.String_unsecure(),isOptional:!1},evidenceReceiptRef:{type:e.String_unsecure(),isOptional:!1}}});export const AutonomousWorkOrderTransitionCommand=o({meta:{key:"workOrder.transition",title:"Transition Autonomous Work Order",version:"1.0.0",description:"Advance an Autonomous Work Order through graph-visible policy, approval, execution, surface-render, adaptation, and evidence-export states.",goal:"Make high-impact work-order state transitions auditable as ontology graph projections.",context:"Every transition carries actor/work graph refs, safety refs, and evidence receipts so CompanyOS graph queries can expose the state machine without local ontology duplication.",domain:i,owners:[...n],tags:[...s,"work-order","ontology","projection"],stability:a},capability:{...r},io:{input:p,output:u,errors:{SAFETY_REFS_INCOMPLETE:{description:"High-impact transition is missing policy, authority, approval/refusal, audit, redaction, replay/evidence, risk, or timestamp refs.",http:409,when:"transition crosses a mutation/order boundary without complete safety refs."}}},policy:{auth:"admin",pii:[]}});

package/dist/node/companyos/commands/builderReadinessEvaluate.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as a}from"@lssm/lib.schema";import{defineCommand as i}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as t,COMPANYOS_DOMAIN as n,COMPANYOS_OWNERS as s,COMPANYOS_STABILITY as r,COMPANYOS_TAGS as o}from"../constants.js";export const ManagedBuilderReadinessEvaluationModel=new a({name:"ManagedBuilderReadinessEvaluation",fields:{evaluationId:{type:e.ID(),isOptional:!1},correlationId:{type:e.ID(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},checkedAt:{type:e.DateTime(),isOptional:!1},blockers:{type:e.String_unsecure(),isOptional:!1,isArray:!0},evidence:{type:e.JSONObject(),isOptional:!1}}});const l=new a({name:"CompanyOsBuilderReadinessEvaluateInput",fields:{tenantId:{type:e.ID(),isOptional:!1},sessionId:{type:e.ID(),isOptional:!1},correlationId:{type:e.ID(),isOptional:!0},providerCredentialRef:{type:e.String_unsecure(),isOptional:!0},webhookSigningRef:{type:e.String_unsecure(),isOptional:!0}}}),d=new a({name:"CompanyOsBuilderReadinessEvaluateOutput",fields:{evaluation:{type:ManagedBuilderReadinessEvaluationModel,isOptional:!1}}});export const BuilderReadinessEvaluateCommand=i({meta:{key:"builder.readiness.evaluate",title:"Evaluate Managed Builder Readiness",version:"1.0.0",description:"Evaluate Managed CompanyOS Builder readiness and produce a typed live/degraded/blocker outcome.",goal:"Fail closed when provider or webhook prerequisites are missing while preserving evidence for Builder release capsules.",context:"Part of the Managed CompanyOS Builder closure. This operation is distinct from agent/workflow operations and only reports Builder readiness evidence.",domain:n,owners:[...s],tags:[...o,"builder","readiness","evidence"],stability:r},capability:{...t},io:{input:l,output:d,errors:{RAW_CREDENTIAL_REJECTED:{description:"Raw-looking provider credentials are rejected; pass a typed providerCredentialRef instead.",http:422,when:"providerCredentialRef contains a secret-like token instead of a typed ref."}}},policy:{auth:"admin",pii:[],escalate:"human_review"}});

package/dist/node/companyos/commands/contextSetActive.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineCommand as i}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as n,COMPANYOS_DOMAIN as o,COMPANYOS_OWNERS as a,COMPANYOS_STABILITY as s,COMPANYOS_TAGS as r}from"../constants.js";const c=new t({name:"CompanyOsContextSetActiveInput",fields:{contextRef:{type:e.ID(),isOptional:!1},teamRef:{type:e.ID(),isOptional:!0},workspaceRef:{type:e.ID(),isOptional:!0},authorityToken:{type:e.String_unsecure(),isOptional:!1},idempotencyKey:{type:e.ID(),isOptional:!1}}}),p=new t({name:"CompanyOsContextSetActiveOutput",fields:{activeContextRef:{type:e.ID(),isOptional:!1},activeTeamRef:{type:e.ID(),isOptional:!0},activeWorkspaceRef:{type:e.ID(),isOptional:!0},authorityToken:{type:e.String_unsecure(),isOptional:!1},authorityVersion:{type:e.Int_unsecure(),isOptional:!1},switchedAt:{type:e.DateTime(),isOptional:!1},invalidatedCacheDigests:{type:e.String_unsecure(),isOptional:!1,isArray:!0},replayed:{type:e.Boolean(),isOptional:!1}}});export const ContextSetActiveCommand=i({meta:{key:"context.set-active",title:"Set Active CompanyOS Context",version:"1.0.0",description:"Atomically select an authorized personal or company context and optional nested team and workspace.",goal:"Provide one CAS-protected authority transition for personal, multi-company, team, and workspace selection.",context:"The server verifies the signed one-use authority token, resolves opaque references from the token projection, locks the Better Auth session row, revalidates organization, team, grant, and workspace versions, then updates active organization, active team, active workspace, and session authority version in one transaction. The nonce is consumed and one audit event is committed atomically. Physical tenant identifiers are never accepted.",domain:o,owners:[...a],tags:[...r,"context","team","workspace","authority"],stability:s},capability:{...n},io:{input:c,output:p,errors:{SESSION_REQUIRED:{description:"A current authenticated session is required.",http:401,when:"The session is absent, expired, or revoked."},CONTEXT_MEMBERSHIP_REQUIRED:{description:"The current user cannot access the selected context.",http:403,when:"Organization membership, binding, or canonical grant validation fails."},TEAM_MEMBERSHIP_REQUIRED:{description:"The current user cannot access the selected team.",http:403,when:"Team ownership, membership, or canonical team grant validation fails."},WORKSPACE_ACCESS_REQUIRED:{description:"The selected workspace is not authorized.",http:403,when:"Workspace ownership or team-workspace grant validation fails."},STALE_AUTHORITY_TOKEN:{description:"The one-use context authority token is stale.",http:409,when:"The token is expired, consumed, cross-session, or binds stale authority versions."},CONTEXT_CONFLICT:{description:"Context authority changed during the transition.",http:409,when:"Commit-time revalidation differs from the selected tuple."},RATE_LIMITED:{description:"Context switching was attempted too often.",http:429,when:"The bounded per-session context switch rate is exceeded."},AUTHORITY_STORE_UNAVAILABLE:{description:"Current context authority cannot be updated.",http:503,when:"The identity, grant, token, audit, or workspace store is unavailable."}}},policy:{auth:"user",pii:[]},sideEffects:{audit:["context.activeChanged"]}});

package/dist/node/companyos/commands/decisionPacketAttest.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineCommand as i}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as a,COMPANYOS_DOMAIN as n,COMPANYOS_OWNERS as o,COMPANYOS_STABILITY as p,COMPANYOS_TAGS as s}from"../constants.js";import{CompanyOsDurableMutationReceiptModel as r,CompanyOsServerDerivedAuthorityModel as c}from"../production-semantics.js";const d=new t({name:"CompanyOsDecisionPacketAttestInput",fields:{tenantId:{type:e.ID(),isOptional:!1},workspaceId:{type:e.ID(),isOptional:!1},decisionPacketId:{type:e.ID(),isOptional:!1},attesterPrincipalId:{type:e.ID(),isOptional:!1},attesterRole:{type:e.String_unsecure(),isOptional:!1},statement:{type:e.String_unsecure(),isOptional:!1},evidenceReceiptId:{type:e.ID(),isOptional:!1},replayPacketId:{type:e.ID(),isOptional:!1},idempotencyKey:{type:e.ID(),isOptional:!1}}}),l=new t({name:"CompanyOsDecisionPacketAttestOutput",fields:{attestationId:{type:e.ID(),isOptional:!1},decisionPacketId:{type:e.ID(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},evidenceReceiptOperationKey:{type:e.String_unsecure(),isOptional:!1},replayPacketOperationKey:{type:e.String_unsecure(),isOptional:!1},attestedAt:{type:e.DateTime(),isOptional:!0},idempotentReplay:{type:e.Boolean(),isOptional:!1}}});export const DecisionPacketAttestCommand=i({meta:{key:"decisionPacket.attest",title:"Attest Design Partner Decision Packet",version:"1.0.0",description:"Record an expert attestation on a design-partner decision packet.",goal:"Require an expert-only attestation while preserving receipt and replay refs from evidence.get-receipt and replay.get-packet.",context:"This additive command complements specialOps.reviewCard.decide and specialOps.weeklyReport.approve: those existing human gates remain the review/approval seams, while this operation records expert attestation by reference only. It does not authorize provider, AI, or production dispatch.",domain:n,owners:[...o],tags:[...s,"design-partner","decision-packet","attest"],stability:p},capability:{...a},io:{input:d,output:l,errors:{DECISION_PACKET_NOT_FOUND:{description:"No decision packet matched the supplied id in the caller scope.",http:404,when:"decisionPacketId does not resolve in tenant/workspace scope."},ATTESTATION_NOT_EXPERT:{description:"Only an expert role may attest a decision packet.",http:403,when:"attesterRole is not expert."}}},policy:{auth:"admin",pii:[]},sideEffects:{audit:["decisionPacket.attested"]}});const y=new t({name:"CompanyOsDecisionPacketAttestV2Input",fields:{tenantId:{type:e.ID(),isOptional:!1},workspaceId:{type:e.ID(),isOptional:!1},scenarioId:{type:e.ID(),isOptional:!1},decisionPacketId:{type:e.ID(),isOptional:!1},decisionPacketVersionId:{type:e.ID(),isOptional:!1},statement:{type:e.String_unsecure(),isOptional:!1},idempotencyKey:{type:e.ID(),isOptional:!1}}}),O=new t({name:"CompanyOsDecisionPacketAttestV2Output",fields:{tenantId:{type:e.ID(),isOptional:!1},workspaceId:{type:e.ID(),isOptional:!1},scenarioId:{type:e.ID(),isOptional:!1},decisionPacketId:{type:e.ID(),isOptional:!1},decisionPacketVersionId:{type:e.ID(),isOptional:!1},attestationId:{type:e.ID(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},authority:{type:c,isOptional:!1},receipt:{type:r,isOptional:!1},attestedAt:{type:e.DateTime(),isOptional:!1}}});export const DecisionPacketAttestCommandV2=i({meta:{...DecisionPacketAttestCommand.meta,key:"decisionPacket.attest",version:"2.0.0",description:"Durably record an expert attestation using authority derived only from the verified server session.",goal:"Commit one packet-version attestation, audit event, idempotency receipt, and evidence outbox intent atomically.",context:"Principal, role, evidence receipt, replay packet, and correlation identifiers are server-derived. The client supplies only resource scope, packet version, statement, and idempotency key. Client idempotency keys are server-namespaced by exact packet version and verified principal; duplicate submissions from that authority return the original durable receipt; projection may remain recorded_evidence_pending.",tags:[...s,"design-partner","decision-packet","attest","production-v2"]},capability:{...a},io:{input:y,output:O,errors:{DECISION_PACKET_NOT_FOUND:{description:"No decision packet version matched the server-validated caller scope.",http:404,when:"Packet/version is unknown or not visible in tenant/workspace/scenario."},ATTESTATION_NOT_EXPERT:{description:"Server-derived authority does not carry the expert-reviewer capability.",http:403,when:"Verified session membership is not an expert reviewer."},TENANT_DISABLED:{description:"The server-owned tenant kill switch disables governed mutations.",http:403,when:"Verified session tenant is disabled by the API authority."},PACKET_VERSION_STALE:{description:"The requested packet version is no longer current.",http:409,when:"A newer governed packet version exists in the same scope."}}},policy:{auth:"admin",pii:[]},sideEffects:{audit:["decisionPacket.attested"]}});

package/dist/node/companyos/commands/decisionPacketFounderApprove.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineCommand as i}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as a,COMPANYOS_DOMAIN as o,COMPANYOS_OWNERS as p,COMPANYOS_STABILITY as r,COMPANYOS_TAGS as n}from"../constants.js";import{CompanyOsDurableMutationReceiptModel as s,CompanyOsServerDerivedAuthorityModel as c}from"../production-semantics.js";const d=new t({name:"CompanyOsDecisionPacketFounderApproveInput",fields:{tenantId:{type:e.ID(),isOptional:!1},workspaceId:{type:e.ID(),isOptional:!1},decisionPacketId:{type:e.ID(),isOptional:!1},approverPrincipalId:{type:e.ID(),isOptional:!1},approverRole:{type:e.String_unsecure(),isOptional:!1},statement:{type:e.String_unsecure(),isOptional:!1},approvalSourceOperationKey:{type:e.String_unsecure(),isOptional:!1},evidenceReceiptId:{type:e.ID(),isOptional:!1},replayPacketId:{type:e.ID(),isOptional:!1},idempotencyKey:{type:e.ID(),isOptional:!1}}}),l=new t({name:"CompanyOsDecisionPacketFounderApproveOutput",fields:{approvalId:{type:e.ID(),isOptional:!1},decisionPacketId:{type:e.ID(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},evidenceReceiptOperationKey:{type:e.String_unsecure(),isOptional:!1},replayPacketOperationKey:{type:e.String_unsecure(),isOptional:!1},approvedAt:{type:e.DateTime(),isOptional:!0},idempotentReplay:{type:e.Boolean(),isOptional:!1}}});export const DecisionPacketFounderApproveCommand=i({meta:{key:"decisionPacket.founderApprove",title:"Founder Approve Design Partner Decision Packet",version:"1.0.0",description:"Record founder approval on a design-partner decision packet.",goal:"Require explicit founder approval before a design-partner readiness state can be marked ready, while keeping production dispatch out of scope.",context:"This additive command references specialOps.reviewCard.decide and specialOps.weeklyReport.approve as existing human approval seams, and reuses evidence.get-receipt plus replay.get-packet refs instead of introducing a new receipt/replay system. Approval is a design-partner checkpoint only, not a production readiness claim.",domain:o,owners:[...p],tags:[...n,"design-partner","decision-packet","founder-approval"],stability:r},capability:{...a},io:{input:d,output:l,errors:{DECISION_PACKET_NOT_FOUND:{description:"No decision packet matched the supplied id in the caller scope.",http:404,when:"decisionPacketId does not resolve in tenant/workspace scope."},APPROVAL_NOT_FOUNDER:{description:"Only a founder role may approve a decision packet.",http:403,when:"approverRole is not founder."}}},policy:{auth:"admin",pii:[]},sideEffects:{audit:["decisionPacket.founderApproved"]}});const u=new t({name:"CompanyOsDecisionPacketFounderApproveV2Input",fields:{tenantId:{type:e.ID(),isOptional:!1},workspaceId:{type:e.ID(),isOptional:!1},scenarioId:{type:e.ID(),isOptional:!1},decisionPacketId:{type:e.ID(),isOptional:!1},decisionPacketVersionId:{type:e.ID(),isOptional:!1},statement:{type:e.String_unsecure(),isOptional:!1},idempotencyKey:{type:e.ID(),isOptional:!1}}}),y=new t({name:"CompanyOsDecisionPacketFounderApproveV2Output",fields:{tenantId:{type:e.ID(),isOptional:!1},workspaceId:{type:e.ID(),isOptional:!1},scenarioId:{type:e.ID(),isOptional:!1},decisionPacketId:{type:e.ID(),isOptional:!1},decisionPacketVersionId:{type:e.ID(),isOptional:!1},acceptedExpertAttestationId:{type:e.ID(),isOptional:!1},approvalId:{type:e.ID(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},authority:{type:c,isOptional:!1},receipt:{type:s,isOptional:!1},approvedAt:{type:e.DateTime(),isOptional:!1}}});export const DecisionPacketFounderApproveCommandV2=i({meta:{...DecisionPacketFounderApproveCommand.meta,key:"decisionPacket.founderApprove",version:"2.0.0",description:"Durably record founder approval after an accepted expert attestation on the exact scoped packet version.",goal:"Bind founder approval to server-derived founder authority and the accepted expert attestation while atomically committing its durable receipt and evidence intent.",context:"Principal, role, prerequisite attestation, evidence receipt, replay packet, and correlation identifiers are server-derived. The operation rejects an unattested or stale packet version. Client idempotency keys are server-namespaced by exact packet version and verified principal, then return the original durable receipt for idempotent replays; evidence may remain recorded_evidence_pending.",tags:[...n,"design-partner","decision-packet","founder-approval","production-v2"]},capability:{...a},io:{input:u,output:y,errors:{DECISION_PACKET_NOT_FOUND:{description:"No decision packet version matched the server-validated caller scope.",http:404,when:"Packet/version is unknown or not visible in tenant/workspace/scenario."},APPROVAL_NOT_FOUNDER:{description:"Server-derived authority does not carry the founder-approver capability.",http:403,when:"Verified session membership is not a founder approver."},TENANT_DISABLED:{description:"The server-owned tenant kill switch disables governed mutations.",http:403,when:"Verified session tenant is disabled by the API authority."},EXPERT_ATTESTATION_REQUIRED:{description:"Founder approval requires an accepted expert attestation on the exact packet version.",http:409,when:"No accepted expert attestation exists in the same scope and version."},PACKET_VERSION_STALE:{description:"The requested packet version is no longer current.",http:409,when:"A newer governed packet version exists in the same scope."}}},policy:{auth:"admin",pii:[]},sideEffects:{audit:["decisionPacket.founderApproved"]}});

package/dist/node/companyos/commands/index.js

@@ -0,0 +1 @@
+export*from"./autonomousWorkOrderTransition.command.js";export*from"./builderReadinessEvaluate.command.js";export*from"./contextSetActive.command.js";export*from"./decisionPacketAttest.command.js";export*from"./decisionPacketFounderApprove.command.js";export*from"./integrationConfigureByok.command.js";export*from"./integrationConfigureManaged.command.js";export*from"./onboardingPreferencesComplete.command.js";export*from"./organizationSetActive.command.js";export*from"./personalBriefingCalendarsSelect.command.js";export*from"./personalBriefingDeliveryRetry.command.js";export*from"./personalBriefingGoogleOAuthComplete.command.js";export*from"./personalBriefingGoogleOAuthStart.command.js";export*from"./personalBriefingMicrosoftDisconnect.command.js";export*from"./personalBriefingMicrosoftOAuthComplete.command.js";export*from"./personalBriefingMicrosoftOAuthStart.command.js";export*from"./personalBriefingPreferencesUpdate.command.js";export*from"./personalBriefingPreviewSend.command.js";export*from"./personalContextDisable.command.js";export*from"./personalContextEnsure.command.js";export*from"./personalDailyOperationCreate.command.js";export*from"./personalDailyOperationTransition.command.js";export*from"./personaPreviewSet.command.js";export*from"./reviewCardDecide.command.js";export*from"./shellPreferencesUpdate.command.js";export*from"./tenantOnboard.command.js";export*from"./tenantUpdate.command.js";export*from"./weeklyReportApprove.command.js";export*from"./workflowStart.command.js";

package/dist/node/companyos/commands/integrationConfigureByok.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineCommand as n}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as i,COMPANYOS_DOMAIN as r,COMPANYOS_OWNERS as o,COMPANYOS_STABILITY as a,COMPANYOS_TAGS as s}from"../constants.js";const p=new t({name:"CompanyOsIntegrationConfigureByokInput",fields:{tenantId:{type:e.ID(),isOptional:!1},providerKey:{type:e.String_unsecure(),isOptional:!1},secretRefId:{type:e.String_unsecure(),isOptional:!1}}}),u=new t({name:"CompanyOsIntegrationConfigureByokOutput",fields:{integrationId:{type:e.ID(),isOptional:!1},providerKey:{type:e.String_unsecure(),isOptional:!1},credentialRef:{type:e.String_unsecure(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1}}});export const IntegrationConfigureByokCommand=n({meta:{key:"integration.configure-byok",title:"Configure BYOK Integration",version:"1.0.0",description:"Configure a Managed CompanyOS integration using a customer-supplied secret reference (BYOK).",goal:"Honor enterprise BYOK without storing raw secret material in the contract layer.",context:"`secretRefId` resolves through `lib.auth-os` secret store; raw secrets never enter operation arguments.",domain:r,owners:[...o],tags:[...s,"integration","byok"],stability:a},capability:{...i},io:{input:p,output:u,errors:{SECRET_REF_INVALID:{description:"The supplied secret reference is missing or unreadable.",http:422,when:"secretRefId does not resolve in the tenant secret store."},PROVIDER_NOT_AVAILABLE:{description:"Provider is not enabled for BYOK configuration.",http:422,when:"providerKey is not in the BYOK-eligible catalog."}}},policy:{auth:"admin",pii:[]}});

package/dist/node/companyos/commands/integrationConfigureManaged.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as n}from"@lssm/lib.schema";import{defineCommand as t}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as a,COMPANYOS_DOMAIN as i,COMPANYOS_OWNERS as o,COMPANYOS_STABILITY as r,COMPANYOS_TAGS as s}from"../constants.js";const p=new n({name:"CompanyOsIntegrationConfigureManagedInput",fields:{tenantId:{type:e.ID(),isOptional:!1},providerKey:{type:e.String_unsecure(),isOptional:!1},options:{type:e.JSONObject(),isOptional:!0}}}),g=new n({name:"CompanyOsIntegrationConfigureManagedOutput",fields:{integrationId:{type:e.ID(),isOptional:!1},providerKey:{type:e.String_unsecure(),isOptional:!1},credentialRef:{type:e.String_unsecure(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1}}});export const IntegrationConfigureManagedCommand=t({meta:{key:"integration.configure-managed",title:"Configure Managed Integration",version:"1.0.0",description:"Configure a Managed CompanyOS integration whose secrets are provisioned by the platform.",goal:"Bind a managed credential to a tenant integration without exposing the secret to callers.",context:"Reuses platform-issued credentials; never accepts raw secret material in arguments.",domain:i,owners:[...o],tags:[...s,"integration","managed"],stability:r},capability:{...a},io:{input:p,output:g,errors:{PROVIDER_NOT_AVAILABLE:{description:"Provider is not enabled for managed configuration.",http:422,when:"providerKey is not in the managed marketplace catalog."},TENANT_NOT_FOUND:{description:"The referenced tenant does not exist.",http:404,when:"tenantId cannot be resolved in the managed control-plane."}}},policy:{auth:"admin",pii:[]}});

package/dist/node/companyos/commands/onboardingPreferencesComplete.command.js

@@ -0,0 +1,8 @@
+import{defineCommand as e}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as n,COMPANYOS_DOMAIN as r,COMPANYOS_OWNERS as o,COMPANYOS_STABILITY as t,COMPANYOS_TAGS as i}from"../constants.js";import{CompanyOsOnboardingPreferencesCompleteInputModel as s,CompanyOsOnboardingPreferencesCompleteOutputModel as a}from"../shell-preferences.js";export const CompanyOsOnboardingPreferencesCompleteDocBlock={id:"docs.tech.companyos.onboarding-preferences.complete",title:"Complete CompanyOS onboarding preferences",summary:"Persists tenant-bound experience preferences for the authenticated user with optimistic concurrency and idempotent replay.",kind:"reference",visibility:"internal",route:"/docs/tech/companyos/onboarding-preferences-complete",tags:["companyos","onboarding","preferences","concurrency"],body:`# Complete CompanyOS onboarding preferences
+
+The browser supplies only a bounded preference patch, the last observed
+tenant-scoped experience revision, and an idempotency key. The host derives the
+user and tenant from the authenticated session. It stores one preference
+document per user and tenant, rejects cross-tenant selectors, and replays only
+the exact command within the same derived scope.
+`},CompanyOsOnboardingPreferencesCompleteCommand=e({meta:{key:"companyos.onboardingPreferences.complete",title:"Complete CompanyOS Onboarding Preferences",version:"1.0.0",description:"Persist the authenticated user’s tenant-bound CompanyOS experience preferences.",goal:"Make onboarding durable without accepting user or tenant authority from the browser.",context:"The server derives user and tenant scope from the verified session, validates the preference patch, and applies one compare-and-swap write with exact idempotent replay.",domain:r,owners:[...o],tags:[...i,"onboarding","preferences","concurrency"],stability:t},capability:{...n},io:{input:s,output:a,errors:{SESSION_REQUIRED:{description:"A current authenticated session is required.",http:401,when:"The session is absent, expired, or revoked."},ONBOARDING_PREFERENCES_CONFLICT:{description:"The tenant-scoped preferences changed or the idempotency key was reused with different input.",http:409,when:"Revision or exact replay binding fails."},INVALID_ONBOARDING_PREFERENCES:{description:"The requested experience preference patch is invalid.",http:422,when:"A preference value, revision, or idempotency key is invalid."},ONBOARDING_PREFERENCES_UNAVAILABLE:{description:"Durable onboarding preference storage is unavailable.",http:503,when:"The tenant-bound preference repository cannot be reached."}}},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/commands/organizationSetActive.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as e}from"@lssm/lib.schema";import{defineCommand as i}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as a,COMPANYOS_DOMAIN as n,COMPANYOS_OWNERS as o,COMPANYOS_STABILITY as r,COMPANYOS_TAGS as s}from"../constants.js";const c=new e({name:"CompanyOsOrganizationSetActiveInput",fields:{organizationId:{type:t.ID(),isOptional:!1}}}),h=new e({name:"CompanyOsOrganizationSetActiveOutput",fields:{activeOrganizationId:{type:t.ID(),isOptional:!1},authorityVersion:{type:t.Int_unsecure(),isOptional:!1},authorityToken:{type:t.String_unsecure(),isOptional:!1},switchedAt:{type:t.DateTime(),isOptional:!1}}});export const OrganizationSetActiveCommand=i({meta:{key:"organization.set-active",title:"Set Active Organization",version:"1.0.0",description:"Set the authenticated session active organization after current membership verification.",goal:"Provide one server-verified organization switch contract and a version token for rejecting stale in-flight mutations.",context:"The organization id is an assertion only. The server validates current membership, updates the Better Auth session, propagates every distinct provider Set-Cookie value, disables cached authority reads for post-write canonical revalidation, and returns authoritative state with the canonical composite authorityToken. A server-owned database trigger records organization.activeChanged atomically only when the active organization changes; audit failure rolls back the transition. The legacy numeric authorityVersion remains for compatibility and tenantId is never accepted as a storage-boundary selector.",domain:n,owners:[...o],tags:[...s,"organization","membership","authority"],stability:r},capability:{...a},io:{input:c,output:h,errors:{ORGANIZATION_MEMBERSHIP_REQUIRED:{description:"The authenticated principal is not a current member of the requested organization.",http:403,when:"Direct membership revalidation fails before or after the provider write."},AUTHORITY_VERSION_CONFLICT:{description:"Organization authority changed while the selection was being committed.",http:409,when:"Post-write canonical authority does not match the verified provider session."},AUTHORITY_STORE_UNAVAILABLE:{description:"Current organization authority cannot be verified.",http:503,when:"The authoritative session, membership, or atomic audit store is unavailable."}}},policy:{auth:"user",pii:[]},sideEffects:{audit:["organization.activeChanged"]}});

package/dist/node/companyos/commands/personaPreviewSet.command.js

@@ -0,0 +1,7 @@
+import{defineCommand as e}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as o,COMPANYOS_DOMAIN as r,COMPANYOS_OWNERS as t,COMPANYOS_STABILITY as s,COMPANYOS_TAGS as n}from"../constants.js";import{CompanyOsPersonaPreviewSetInputModel as a,CompanyOsPersonaPreviewSetOutputModel as i}from"../shell-preferences.js";export const CompanyOsPersonaPreviewSetDocBlock={id:"docs.tech.companyos.persona-preview.set",title:"Set CompanyOS persona preview",summary:"Sets or clears a server-authorized, session-scoped presentation-only persona preview.",kind:"reference",visibility:"internal",route:"/docs/tech/companyos/persona-preview-set",tags:["companyos","persona","rolemorph","session"],body:`# Set CompanyOS persona preview
+
+This additive v1 command stores an authorized view persona in the current
+session only. It never changes the actual authorization persona or grants
+capabilities; presentation and actions remain the intersection of the actual
+subject and the selected preview. Passing null exits preview mode.
+`},CompanyOsPersonaPreviewSetCommand=e({meta:{key:"companyos.personaPreview.set",title:"Set CompanyOS Persona Preview",version:"1.0.0",description:"Set or clear a server-authorized presentation-only RoleMorph persona preview.",goal:"Let authorized operators preview a narrower persona without changing their real authorization.",context:"The server derives the actual persona and allowed preview personas from the authenticated session and current authority. The preview is stored only in that session, clears when the session expires or context changes, and may narrow presentation and actions but never expand the actual subject’s capabilities. The server returns a valid current-route destination or persona home.",domain:r,owners:[...t],tags:[...n,"persona","rolemorph","session"],stability:s},capability:{...o},io:{input:a,output:i,errors:{SESSION_REQUIRED:{description:"A current authenticated session is required.",http:401,when:"The session is absent, expired, or revoked."},PERSONA_PREVIEW_FORBIDDEN:{description:"The current subject cannot use persona preview.",http:403,when:"The current authorization does not permit any persona preview."},INVALID_PERSONA_PREVIEW:{description:"The requested preview persona is unavailable.",http:422,when:"personaId is malformed or is not in the server-authorized availablePersonaIds."}}},policy:{auth:"user",pii:[]},sideEffects:{audit:["companyos.personaPreview.updated"]}});

package/dist/node/companyos/commands/personalBriefingCalendarsSelect.command.js

@@ -0,0 +1,12 @@
+import{ScalarTypeEnum as e,SchemaModel as a}from"@lssm/lib.schema";import{docRef as r}from"../../docs/registry.js";import{defineCommand as n}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as t,COMPANYOS_DOMAIN as s,COMPANYOS_OWNERS as i,COMPANYOS_STABILITY as o,COMPANYOS_TAGS as l}from"../constants.js";const c=new a({name:"CompanyOsPersonalBriefingCalendarsSelectInput",fields:{selections:{type:e.JSONObject(),isOptional:!1,isArray:!0}}});export const PersonalBriefingCalendarsSelectDocBlock={id:"docs.tech.companyos.calendar-intelligence.personal-calendars.select",title:"Select personal briefing calendars",summary:"Selects calendars owned by the current user and maps each to currently authorized workspaces.",kind:"reference",visibility:"internal",route:"/docs/tech/companyos/calendar-intelligence/personal-calendars-select",tags:["companyos","calendar-intelligence","oauth","authorization"],body:`# Personal calendar selection
+
+Every calendar reference is re-enumerated from the authenticated user’s Google
+grant. Every selected calendar requires at least one explicit workspace mapping,
+and every mapping is revalidated against current CompanyOS membership.
+
+Workspace booking resources are permanently excluded from this operation.
+
+Compatibility intent: **breaking major** in
+\`companyos.calendar-intelligence@3.0.0\`. A successful selection returns the
+server-derived delivery rollout state alongside setup readiness.
+`};const d=new a({name:"CompanyOsPersonalBriefingCalendarsSelectOutput",fields:{selected:{type:e.Int_unsecure(),isOptional:!1},setupState:{type:e.String_unsecure(),isOptional:!1},rolloutState:{type:e.String_unsecure(),isOptional:!1}}});export const PersonalBriefingCalendarsSelectCommand=n({meta:{key:"calendar-intelligence.personal-calendars.select",title:"Select Personal Briefing Calendars",version:"3.0.0",description:"Select personal Google calendars and explicit authorized workspace mappings.",goal:"Bound event reads to recipient-owned grants and graph reads to current workspace authority.",context:"Calendar refs are verified against the user's OAuth grant. Workspace tenancy is server-resolved from active grants.",domain:s,owners:[...i],tags:[...l,"calendar","briefing","authorization"],stability:o,docId:[r(PersonalBriefingCalendarsSelectDocBlock.id)]},capability:{...t},io:{input:c,output:d,errors:{CALENDAR_SELECTION_REJECTED:{description:"A calendar is unreadable, unowned, or lacks a mapping.",http:422,when:"Provider ownership or the bounded selection schema fails."},WORKSPACE_MAPPING_FORBIDDEN:{description:"A mapped workspace is not currently authorized.",http:403,when:"The current user lacks an enabled workspace grant."}}},policy:{auth:"user",pii:[]},sideEffects:{audit:["calendar-intelligence.personal-calendars.selected"]}});

package/dist/node/companyos/commands/personalBriefingDeliveryRetry.command.js

@@ -0,0 +1,8 @@
+import{ScalarTypeEnum as e,SchemaModel as r}from"@lssm/lib.schema";import{docRef as i}from"../../docs/registry.js";import{defineCommand as t}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as n,COMPANYOS_DOMAIN as a,COMPANYOS_OWNERS as o,COMPANYOS_STABILITY as l,COMPANYOS_TAGS as s}from"../constants.js";const d=new r({name:"CompanyOsPersonalBriefingDeliveryRetryInput",fields:{deliveryId:{type:e.String_unsecure(),isOptional:!1}}}),c=new r({name:"CompanyOsPersonalBriefingDeliveryRetryOutput",fields:{accepted:{type:e.Boolean(),isOptional:!1},delivered:{type:e.Boolean(),isOptional:!1},kind:{type:e.String_unsecure(),isOptional:!1}}});export const PersonalBriefingDeliveryRetryDocBlock={id:"docs.tech.companyos.calendar-intelligence.delivery.retry",title:"Retry a personal briefing delivery",summary:"Retries one failed or stale delivery owned by the authenticated recipient.",kind:"reference",visibility:"internal",route:"/docs/tech/companyos/calendar-intelligence/delivery-retry",tags:["companyos","calendar-intelligence","briefings","recovery"],body:`# Retry personal briefing delivery
+
+The opaque delivery identifier is resolved inside the authenticated user's
+personal tenant. Delivered, suppressed, fresh in-flight, exhausted, and
+cross-user records cannot be retried. The same idempotency key and bounded
+personal calendar pipeline are reused; no recipient or calendar authority is
+accepted from the browser.
+`},PersonalBriefingDeliveryRetryCommand=t({meta:{key:"calendar-intelligence.personal-delivery.retry",title:"Retry Personal Briefing Delivery",version:"2.1.0",description:"Retry one recoverable personal briefing delivery for the current user.",goal:"Give recipients a safe, visible recovery path for failed delivery.",context:"Identity, recipient, personal tenant, calendars, and workspace authority are derived server-side.",domain:a,owners:[...o],tags:[...s,"calendar","briefing","recovery"],stability:l,docId:[i(PersonalBriefingDeliveryRetryDocBlock.id)]},capability:{...n},io:{input:d,output:c,errors:{BRIEFING_DELIVERY_NOT_RETRYABLE:{description:"The delivery is absent, healthy, terminal, or exhausted.",http:409,when:"No recipient-owned recoverable delivery matches the opaque id."}}},policy:{auth:"user",pii:[]},sideEffects:{audit:["calendar-intelligence.personal-delivery.retried"]}});

package/dist/node/companyos/commands/personalBriefingGoogleOAuthComplete.command.js

@@ -0,0 +1,6 @@
+import{ScalarTypeEnum as e,SchemaModel as o}from"@lssm/lib.schema";import{docRef as t}from"../../docs/registry.js";import{defineCommand as n}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as a,COMPANYOS_DOMAIN as r,COMPANYOS_OWNERS as i,COMPANYOS_STABILITY as s,COMPANYOS_TAGS as l}from"../constants.js";const c=new o({name:"CompanyOsPersonalBriefingGoogleOAuthCompleteInput",fields:{authorizationCode:{type:e.String_unsecure(),isOptional:!1},state:{type:e.String_unsecure(),isOptional:!1}}}),p=new o({name:"CompanyOsPersonalBriefingGoogleOAuthCompleteOutput",fields:{connected:{type:e.Boolean(),isOptional:!1},redirectUrl:{type:e.String_unsecure(),isOptional:!1}}});export const PersonalBriefingGoogleOAuthCompleteDocBlock={id:"docs.tech.companyos.calendar-intelligence.google-oauth.complete",title:"Complete personal Google Calendar authorization",summary:"Completes signed OAuth state for the same authenticated CompanyOS user.",kind:"reference",visibility:"internal",route:"/docs/tech/companyos/calendar-intelligence/google-oauth-complete",tags:["companyos","calendar-intelligence","google-calendar","oauth"],body:`# Complete personal Google Calendar OAuth
+
+Signed provider state must resolve to the current user’s personal context and
+server-derived account reference. A mismatched user, tenant, account, state, or
+session is rejected before a personal source is materialized.
+`},PersonalBriefingGoogleOAuthCompleteCommand=n({meta:{key:"calendar-intelligence.personal-google-oauth.complete",title:"Complete Personal Google Calendar OAuth",version:"2.0.0",description:"Complete recipient-owned Google Calendar authorization for Briefings 2.0.",goal:"Persist a personal source only after signed-state and session ownership agree.",context:"Provider code and state are transient; tokens are stored in the existing encrypted OAuth vault.",domain:r,owners:[...i],tags:[...l,"calendar","briefing","oauth"],stability:s,docId:[t(PersonalBriefingGoogleOAuthCompleteDocBlock.id)]},capability:{...a},io:{input:c,output:p,errors:{GOOGLE_OAUTH_REJECTED:{description:"OAuth completion does not match current user authority.",http:400,when:"Signed state, account reference, tenant, session, or code fails."},VERIFIED_EMAIL_REQUIRED:{description:"The current CompanyOS user has no verified email.",http:422,when:"Delivery identity cannot be resolved after OAuth exchange."}}},policy:{auth:"user",pii:["authorizationCode"]},sideEffects:{audit:["calendar-intelligence.personal-google-oauth.completed"]}});

package/dist/node/companyos/commands/personalBriefingGoogleOAuthStart.command.js

@@ -0,0 +1,6 @@
+import{ScalarTypeEnum as e,SchemaModel as o}from"@lssm/lib.schema";import{docRef as t}from"../../docs/registry.js";import{defineCommand as a}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as n,COMPANYOS_DOMAIN as r,COMPANYOS_OWNERS as i,COMPANYOS_STABILITY as l,COMPANYOS_TAGS as s}from"../constants.js";const c=new o({name:"CompanyOsPersonalBriefingGoogleOAuthStartInput",fields:{reconnect:{type:e.Boolean(),isOptional:!1}}}),d=new o({name:"CompanyOsPersonalBriefingGoogleOAuthStartOutput",fields:{authorizationUrl:{type:e.String_unsecure(),isOptional:!1}}});export const PersonalBriefingGoogleOAuthStartDocBlock={id:"docs.tech.companyos.calendar-intelligence.google-oauth.start",title:"Start personal Google Calendar authorization",summary:"Starts OAuth for the authenticated user’s non-shareable personal CompanyOS context.",kind:"reference",visibility:"internal",route:"/docs/tech/companyos/calendar-intelligence/google-oauth-start",tags:["companyos","calendar-intelligence","google-calendar","oauth"],body:`# Start personal Google Calendar OAuth
+
+The account reference, user, owner, and personal tenant are server-derived.
+The operation never accepts browser-provided identity selectors and never
+authorizes a workspace booking calendar as a personal source.
+`},PersonalBriefingGoogleOAuthStartCommand=a({meta:{key:"calendar-intelligence.personal-google-oauth.start",title:"Start Personal Google Calendar OAuth",version:"2.0.0",description:"Start recipient-owned Google Calendar authorization for Briefings 2.0.",goal:"Bind Google consent to exactly one authenticated CompanyOS user.",context:"The personal context and opaque account reference are derived server-side.",domain:r,owners:[...i],tags:[...s,"calendar","briefing","oauth"],stability:l,docId:[t(PersonalBriefingGoogleOAuthStartDocBlock.id)]},capability:{...n},io:{input:c,output:d,errors:{PERSONAL_CONTEXT_REQUIRED:{description:"The current user has no enabled personal context.",http:409,when:"Personal context resolution fails closed."},GOOGLE_OAUTH_UNAVAILABLE:{description:"Google Calendar authorization is unavailable.",http:503,when:"OAuth environment or durable state cannot be initialized."}}},policy:{auth:"user",pii:[]},sideEffects:{audit:["calendar-intelligence.personal-google-oauth.started"]}});

package/dist/node/companyos/commands/personalBriefingMicrosoftDisconnect.command.js

@@ -0,0 +1,5 @@
+import{ScalarTypeEnum as o,SchemaModel as e}from"@lssm/lib.schema";import{docRef as n}from"../../docs/registry.js";import{defineCommand as t}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as r,COMPANYOS_DOMAIN as i,COMPANYOS_OWNERS as c,COMPANYOS_STABILITY as a,COMPANYOS_TAGS as s}from"../constants.js";const l=new e({name:"CompanyOsPersonalBriefingMicrosoftDisconnectInput",fields:{}}),d=new e({name:"PersonalMicrosoftDisconnectOutput",fields:{disconnected:{type:o.Boolean(),isOptional:!1}}});export const PersonalBriefingMicrosoftDisconnectDocBlock={id:"docs.tech.companyos.calendar-intelligence.microsoft-calendar.disconnect",title:"Disconnect personal Microsoft Calendar",summary:"Revokes local credentials and disables only the current personal Microsoft connection.",kind:"reference",visibility:"internal",route:"/docs/tech/companyos/calendar-intelligence/microsoft-calendar-disconnect",tags:["companyos","calendar-intelligence","microsoft-calendar","oauth"],body:`# Disconnect personal Microsoft Calendar
+
+The account reference, user, owner, and personal tenant are server-derived.
+The operation deletes local account credentials and pending authorization state, disables the personal source, and preserves Google data. It does not claim to revoke consent in Microsoft itself. No provider network request is required.
+`},PersonalBriefingMicrosoftDisconnectCommand=t({meta:{key:"calendar-intelligence.personal-microsoft-calendar.disconnect",title:"Disconnect Personal Microsoft Calendar",version:"1.0.0",description:"Disconnect the current personal Microsoft account without provider or encryption-key availability.",goal:"Stop local Microsoft calendar access while preserving other providers and the verified account pin.",context:"The personal context and opaque account reference are derived server-side.",domain:i,owners:[...c],tags:[...s,"calendar","briefing","oauth"],stability:a,docId:[n(PersonalBriefingMicrosoftDisconnectDocBlock.id)]},capability:{...r},io:{input:l,output:d,errors:{PERSONAL_CONTEXT_REQUIRED:{description:"Set up an enabled personal context before connecting.",http:409,when:"No unique enabled personal owner is available."},FORBIDDEN:{description:"The current session no longer authorizes this connection.",http:403,when:"Session or owner reproof fails."},MICROSOFT_CALENDAR_UNAVAILABLE:{description:"Microsoft local disconnection is unavailable.",http:503,when:"Local storage or owner authorization cannot be verified."}}},acceptance:{scenarios:[{key:"personal-owner-bound",given:["An authenticated user has an enabled personal context and configured Microsoft provider"],when:["The user completes the requested connection step"],then:["The exact personal owner is rechecked before commit","No provider credential is returned to the browser"]}]},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/commands/personalBriefingMicrosoftOAuthComplete.command.js

@@ -0,0 +1,9 @@
+import{ScalarTypeEnum as e,SchemaModel as o}from"@lssm/lib.schema";import{docRef as t}from"../../docs/registry.js";import{defineCommand as n}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as r,COMPANYOS_DOMAIN as i,COMPANYOS_OWNERS as s,COMPANYOS_STABILITY as a,COMPANYOS_TAGS as c}from"../constants.js";const l=new o({name:"CompanyOsPersonalBriefingMicrosoftOAuthCompleteInput",fields:{code:{type:e.String_unsecure(),isOptional:!1},state:{type:e.String_unsecure(),isOptional:!1},session_state:{type:e.String_unsecure(),isOptional:!0}}}),p=new o({name:"CompanyOsPersonalBriefingMicrosoftOAuthCompleteOutput",fields:{connected:{type:e.Boolean(),isOptional:!1}}});export const PersonalBriefingMicrosoftOAuthCompleteDocBlock={id:"docs.tech.companyos.calendar-intelligence.microsoft-oauth.complete",title:"Complete personal Microsoft Calendar authorization",summary:"Completes opaque one-use OAuth state for the same authenticated CompanyOS user.",kind:"reference",visibility:"internal",route:"/docs/tech/companyos/calendar-intelligence/microsoft-oauth-complete",tags:["companyos","calendar-intelligence","microsoft-calendar","oauth"],body:`# Complete personal Microsoft Calendar OAuth
+
+Opaque one-use provider state must resolve to the current user’s personal context and
+server-derived account reference. A mismatched user, tenant, account, state, or
+session is rejected before credentials are persisted.
+Successful HTML browser callbacks return HTTP 303 to the configured CompanyOS
+settings origin and fixed path, without forwarding callback parameters. JSON
+clients retain the connected boolean response. No caller return URL is accepted.
+`},PersonalBriefingMicrosoftOAuthCompleteCommand=n({meta:{key:"calendar-intelligence.personal-microsoft-oauth.complete",title:"Complete Personal Microsoft Calendar OAuth",version:"1.2.0",description:"Complete recipient-owned Microsoft Calendar authorization for personal connection setup. Calendar discovery is a separate operation.",goal:"Persist a personal credential only after one-use-state and session ownership agree.",context:"Provider code and state are transient; tokens are stored in the owner-bound encrypted Microsoft OAuth vault.",domain:i,owners:[...s],tags:[...c,"calendar","briefing","oauth"],stability:a,docId:[t(PersonalBriefingMicrosoftOAuthCompleteDocBlock.id)]},capability:{...r},io:{input:l,output:p,errors:{PERSONAL_CONTEXT_REQUIRED:{description:"Set up an enabled personal context before connecting.",http:409,when:"No unique enabled personal owner is available."},FORBIDDEN:{description:"The current session no longer authorizes this connection.",http:403,when:"Session or owner reproof fails."},MICROSOFT_OAUTH_REJECTED:{description:"Restart Microsoft connection setup.",http:400,when:"Callback, one-use state, or verifier is invalid or expired."},MICROSOFT_CALENDAR_UNAVAILABLE:{description:"Microsoft connection could not be completed.",http:503,when:"Configuration, state, provider identity, or owner reproof fails closed."}}},acceptance:{scenarios:[{key:"personal-owner-bound",given:["An authenticated user has an enabled personal context and configured Microsoft provider"],when:["The user completes the requested connection step"],then:["The exact personal owner is rechecked before commit","No provider credential is returned to the browser"]}]},policy:{auth:"user",pii:["code","state"]}});

package/dist/node/companyos/commands/personalBriefingMicrosoftOAuthStart.command.js

@@ -0,0 +1,6 @@
+import{ScalarTypeEnum as o,SchemaModel as e}from"@lssm/lib.schema";import{docRef as t}from"../../docs/registry.js";import{defineCommand as n}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as r,COMPANYOS_DOMAIN as a,COMPANYOS_OWNERS as i,COMPANYOS_STABILITY as s,COMPANYOS_TAGS as c}from"../constants.js";const l=new e({name:"CompanyOsPersonalBriefingMicrosoftOAuthStartInput",fields:{}}),d=new e({name:"CompanyOsPersonalBriefingMicrosoftOAuthStartOutput",fields:{authorizationUrl:{type:o.String_unsecure(),isOptional:!1}}});export const PersonalBriefingMicrosoftOAuthStartDocBlock={id:"docs.tech.companyos.calendar-intelligence.microsoft-oauth.start",title:"Start personal Microsoft Calendar authorization",summary:"Starts OAuth for the authenticated user’s non-shareable personal CompanyOS context.",kind:"reference",visibility:"internal",route:"/docs/tech/companyos/calendar-intelligence/microsoft-oauth-start",tags:["companyos","calendar-intelligence","microsoft-calendar","oauth"],body:`# Start personal Microsoft Calendar OAuth
+
+The account reference, user, owner, and personal tenant are server-derived.
+The operation never accepts browser-provided identity selectors and never
+authorizes a workspace booking calendar as a personal source.
+`},PersonalBriefingMicrosoftOAuthStartCommand=n({meta:{key:"calendar-intelligence.personal-microsoft-oauth.start",title:"Start Personal Microsoft Calendar OAuth",version:"1.1.0",description:"Start recipient-owned Microsoft Calendar authorization for personal connection setup. Calendar discovery is a separate operation.",goal:"Bind Microsoft consent to exactly one authenticated CompanyOS user.",context:"The personal context and opaque account reference are derived server-side.",domain:a,owners:[...i],tags:[...c,"calendar","briefing","oauth"],stability:s,docId:[t(PersonalBriefingMicrosoftOAuthStartDocBlock.id)]},capability:{...r},io:{input:l,output:d,errors:{PERSONAL_CONTEXT_REQUIRED:{description:"Set up an enabled personal context before connecting.",http:409,when:"No unique enabled personal owner is available."},FORBIDDEN:{description:"The current session no longer authorizes this connection.",http:403,when:"Session or owner reproof fails."},MICROSOFT_OAUTH_REJECTED:{description:"Restart Microsoft connection setup.",http:400,when:"Callback, one-use state, or verifier is invalid or expired."},MICROSOFT_CALENDAR_UNAVAILABLE:{description:"Microsoft Calendar authorization is unavailable.",http:503,when:"OAuth environment or durable state cannot be initialized."}}},acceptance:{scenarios:[{key:"personal-owner-bound",given:["An authenticated user has an enabled personal context and configured Microsoft provider"],when:["The user completes the requested connection step"],then:["The exact personal owner is rechecked before commit","No provider credential is returned to the browser"]}]},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/commands/personalBriefingPreferencesUpdate.command.js

@@ -0,0 +1,11 @@
+import{ScalarTypeEnum as e,SchemaModel as n}from"@lssm/lib.schema";import{docRef as r}from"../../docs/registry.js";import{defineCommand as i}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as t,COMPANYOS_DOMAIN as a,COMPANYOS_OWNERS as o,COMPANYOS_STABILITY as s,COMPANYOS_TAGS as l}from"../constants.js";const p=new n({name:"CompanyOsPersonalBriefingPreferencesUpdateInput",fields:{locale:{type:e.String_unsecure(),isOptional:!1},timezone:{type:e.String_unsecure(),isOptional:!1},morningTime:{type:e.String_unsecure(),isOptional:!1},preparationLeadMinutes:{type:e.Int_unsecure(),isOptional:!1},morningEnabled:{type:e.Boolean(),isOptional:!1},preparationEnabled:{type:e.Boolean(),isOptional:!1},graphEnrichmentEnabled:{type:e.Boolean(),isOptional:!1},deliveryChannels:{type:e.String_unsecure(),isOptional:!1,isArray:!0}}});export const PersonalBriefingPreferencesUpdateDocBlock={id:"docs.tech.companyos.calendar-intelligence.personal-preferences.update",title:"Update personal briefing preferences",summary:"Updates only the authenticated user’s locale, timezone, cadence, enablement, and delivery channels.",kind:"reference",visibility:"internal",route:"/docs/tech/companyos/calendar-intelligence/personal-preferences-update",tags:["companyos","calendar-intelligence","briefings","privacy"],body:`# Personal briefing preferences
+
+The server derives the user, personal context, and verified delivery address.
+Browser payloads cannot select another user, tenant, owner, or recipient.
+
+Compatibility intent: **additive minor** in
+\`companyos.calendar-intelligence@3.1.0\`. The server derives delivery rollout
+from setup readiness and the two delivery toggles. Workspace briefing
+preferences are not read or migrated into the personal delivery runtime. The
+durable in-app route is mandatory and the user may additionally select email.
+`};const c=new n({name:"CompanyOsPersonalBriefingPreferencesUpdateOutput",fields:{updated:{type:e.Boolean(),isOptional:!1},setupState:{type:e.String_unsecure(),isOptional:!1},rolloutState:{type:e.String_unsecure(),isOptional:!1}}});export const PersonalBriefingPreferencesUpdateCommand=i({meta:{key:"calendar-intelligence.personal-preferences.update",title:"Update Personal Briefing Preferences",version:"3.1.0",description:"Update locale, timezone, cadence, enablement, and delivery channels for recipient-owned briefings.",goal:"Give each recipient explicit control without accepting user, tenant, or owner identifiers.",context:"The server derives the personal context and verified delivery address from the authenticated session.",domain:a,owners:[...o],tags:[...l,"calendar","briefing","preferences"],stability:s,docId:[r(PersonalBriefingPreferencesUpdateDocBlock.id)]},capability:{...t},io:{input:p,output:c,errors:{INVALID_PREFERENCES:{description:"Locale, timezone, cadence, or enablement is invalid.",http:422,when:"The bounded preference schema does not validate."},VERIFIED_EMAIL_REQUIRED:{description:"The current user has no verified delivery address.",http:422,when:"No current verified CompanyOS email can be resolved."}}},policy:{auth:"user",pii:[]},sideEffects:{audit:["calendar-intelligence.personal-preferences.updated"]}});