@lssm/lib.contracts-spec 17.3.2

package/dist/node/companyos/commands/personalBriefingPreviewSend.command.js

@@ -0,0 +1,15 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{docRef as n}from"../../docs/registry.js";import{defineCommand as r}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as t,COMPANYOS_DOMAIN as o,COMPANYOS_OWNERS as a,COMPANYOS_STABILITY as s,COMPANYOS_TAGS as p}from"../constants.js";const d=new i({name:"CompanyOsPersonalBriefingPreviewSendInput",fields:{kind:{type:e.String_unsecure(),isOptional:!1}}}),l=new i({name:"CompanyOsPersonalBriefingPreviewSendOutput",fields:{sent:{type:e.Boolean(),isOptional:!1},accepted:{type:e.Boolean(),isOptional:!1},queued:{type:e.Boolean(),isOptional:!1},kind:{type:e.String_unsecure(),isOptional:!1},eventCount:{type:e.Int_unsecure(),isOptional:!1},providerRef:{type:e.String_unsecure(),isOptional:!1},deliveryState:{type:e.String_unsecure(),isOptional:!1}}});export const PersonalBriefingPreviewSendDocBlock={id:"docs.tech.companyos.calendar-intelligence.preview.send",title:"Send a personal briefing preview",summary:"Prepares a non-production morning or preparation preview through the current user’s selected CommunicationOS routes.",kind:"reference",visibility:"internal",route:"/docs/tech/companyos/calendar-intelligence/preview-send",tags:["companyos","calendar-intelligence","briefings","preview"],body:`# Send personal briefing preview
+
+The browser supplies only the kind field as morning-recap or
+meeting-preparation; it supplies no recipient. The server resolves the
+current CompanyOS identity and resolves the selected delivery routes. Email
+uses exactly one verified recipient with no cc or bcc. The server reads only
+that user’s selected personal calendars, revalidates
+their mapped workspace authority, and composes the same grounded document used
+by live delivery. The rendered delivery is retained only as the canonical
+CommunicationOS message under the configured conversation-retention policy.
+Queue admission, provider acceptance, and confirmed delivery remain distinct. Preparation
+preview fails closed when no eligible timed event exists. Provider delivery
+failures return a stable, redacted unavailable error so the interface can show
+an actionable operator-owned blocker without exposing provider details.
+`},PersonalBriefingPreviewSendCommand=r({meta:{key:"calendar-intelligence.personal-preview.send",title:"Send Personal Briefing Preview",version:"2.3.0",description:"Send a selected non-production Briefings 2.0 document preview to the current user.",goal:"Let users validate their recipient-owned calendar, grounding, rendering, and delivery pipeline without selecting a recipient.",context:"The recipient, personal context, selected calendars, and authorized workspace mappings are derived from the authenticated session.",domain:o,owners:[...a],tags:[...p,"calendar","briefing","preview"],stability:s,docId:[n(PersonalBriefingPreviewSendDocBlock.id)]},capability:{...t},io:{input:d,output:l,errors:{INVALID_BRIEFING_PREVIEW:{description:"The preview kind is missing, unsupported, or accompanied by another browser field.",http:422,when:"The input is not exactly one supported document kind."},BRIEFING_SETUP_REQUIRED:{description:"Personal preferences, Google connection, calendar selection, or workspace mapping is incomplete.",http:409,when:"The current user’s personal briefing target is not ready."},BRIEFING_AUTHORIZATION_REQUIRED:{description:"A mapped workspace is no longer authorized for the current user.",http:403,when:"Workspace membership or graph projection authority was revoked."},PREVIEW_EVENT_UNAVAILABLE:{description:"No eligible timed event is available for a meeting-preparation preview.",http:409,when:"The current user has no upcoming non-cancelled timed event in the bounded read window."},VERIFIED_EMAIL_REQUIRED:{description:"The current CompanyOS user has no verified email.",http:422,when:"The server cannot resolve the sole preview recipient."},BRIEFING_DELIVERY_UNAVAILABLE:{description:"The configured CommunicationOS delivery path could not admit or dispatch the preview.",http:503,when:"Email delivery is missing, invalid, or temporarily unavailable."}}},policy:{auth:"user",pii:[]},sideEffects:{audit:["calendar-intelligence.personal-preview.sent"]}});

package/dist/node/companyos/commands/personalContextDisable.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineCommand as n}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as o,COMPANYOS_DOMAIN as i,COMPANYOS_OWNERS as a,COMPANYOS_STABILITY as s,COMPANYOS_TAGS as r}from"../constants.js";const l=new t({name:"CompanyOsPersonalContextDisableInput",fields:{contextRef:{type:e.ID(),isOptional:!1},expectedAuthorityVersion:{type:e.Int_unsecure(),isOptional:!1},idempotencyKey:{type:e.ID(),isOptional:!1},operatorReason:{type:e.String_unsecure(),isOptional:!1}}}),c=new t({name:"CompanyOsPersonalContextDisableOutput",fields:{state:{type:e.String_unsecure(),isOptional:!1},receiptRef:{type:e.ID(),isOptional:!1},intakeRevokedAt:{type:e.DateTime(),isOptional:!1},replayed:{type:e.Boolean(),isOptional:!1}}});export const PersonalContextDisableCommand=n({meta:{key:"personal-context.disable",title:"Disable Personal Context",version:"1.0.0",description:"Disable the authenticated user personal context before retention work.",goal:"Provide a fail-closed personal lifecycle transition that revokes public intake, OAuth use, and active authority without deleting required evidence.",context:"The opaque context reference is resolved against the current user. The authority version is checked under the session and personal-context transaction lock. Success disables the binding and grant, clears matching active session context, revokes profile and booking intake, and records one immutable receipt. It does not transfer data into a company context.",domain:i,owners:[...a],tags:[...r,"personal","context","authority"],stability:s},capability:{...o},io:{input:l,output:c,errors:{SESSION_REQUIRED:{description:"A current authenticated session is required.",http:401,when:"The session is absent, expired, or revoked."},PERSONAL_CONTEXT_REQUIRED:{description:"The personal context is not owned by the current user.",http:403,when:"The reference is unknown, disabled, or belongs to another user."},STALE_AUTHORITY_VERSION:{description:"Personal context authority changed before disable.",http:409,when:"The expected authority version does not match current state."},RATE_LIMITED:{description:"Personal context lifecycle mutation was attempted too often.",http:429,when:"The bounded per-user mutation rate is exceeded."},AUTHORITY_STORE_UNAVAILABLE:{description:"Personal context authority cannot be updated.",http:503,when:"The shared identity or authority store is unavailable."}}},policy:{auth:"user",pii:[]},sideEffects:{audit:["personal-context.disabled"]}});

package/dist/node/companyos/commands/personalContextEnsure.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineCommand as n}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as o,COMPANYOS_DOMAIN as i,COMPANYOS_OWNERS as a,COMPANYOS_STABILITY as s,COMPANYOS_TAGS as r}from"../constants.js";const p=new t({name:"CompanyOsPersonalContextEnsureInput",fields:{idempotencyKey:{type:e.ID(),isOptional:!1}}}),l=new t({name:"CompanyOsPersonalContextEnsureOutput",fields:{contextRef:{type:e.ID(),isOptional:!1},state:{type:e.String_unsecure(),isOptional:!1},active:{type:e.Boolean(),isOptional:!1},workspaceRef:{type:e.ID(),isOptional:!1},authorityToken:{type:e.String_unsecure(),isOptional:!1},manifestRevision:{type:e.String_unsecure(),isOptional:!1},receiptRef:{type:e.ID(),isOptional:!1},replayed:{type:e.Boolean(),isOptional:!1},occurredAt:{type:e.DateTime(),isOptional:!1}}});export const PersonalContextEnsureCommand=n({meta:{key:"personal-context.ensure",title:"Ensure Personal Context",version:"1.0.0",description:"Provision or replay the authenticated user personal CompanyOS context.",goal:"Let a user operate CompanyOS without joining a company while preserving the canonical tenant, grant, workspace, and RLS authority topology.",context:"Session and user identity are server-derived. One user-scoped advisory lock creates a system-owned organization, sole owner membership, physical tenant, enabled binding, canonical owner grant, default workspace, personal-context record, and immutable receipt. Organization, tenant, workspace, role, and email selectors are forbidden. Replays return the original stable references with zero semantic writes.",domain:i,owners:[...a],tags:[...r,"personal","context","authority"],stability:s},capability:{...o},io:{input:p,output:l,errors:{SESSION_REQUIRED:{description:"A current authenticated session is required.",http:401,when:"The session is absent, expired, or revoked."},PROVISIONING_IN_PROGRESS:{description:"Personal context provisioning is already in progress.",http:409,when:"The user-scoped provisioning lock is held by another request."},PERSONAL_CONTEXT_CONFLICT:{description:"Persisted personal context identity is inconsistent.",http:409,when:"Existing manifest rows do not match the canonical personal context."},RATE_LIMITED:{description:"Personal context provisioning was attempted too often.",http:429,when:"The bounded per-user provisioning rate is exceeded."},MIGRATION_REQUIRED:{description:"The personal context authority schema is unavailable.",http:503,when:"The required additive migration has not been applied."},AUTHORITY_STORE_UNAVAILABLE:{description:"Personal context authority cannot be persisted.",http:503,when:"The shared identity or authority store is unavailable."}}},policy:{auth:"user",pii:[]},sideEffects:{audit:["personal-context.enabled"]}});

package/dist/node/companyos/commands/personalDailyOperationCreate.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineCommand as a}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as n,COMPANYOS_DOMAIN as i,COMPANYOS_OWNERS as o,COMPANYOS_STABILITY as r,COMPANYOS_TAGS as s}from"../constants.js";const p=new t({name:"CompanyOsPersonalDailyOperationCreateInput",fields:{kind:{type:e.String_unsecure(),isOptional:!1},title:{type:e.String_unsecure(),isOptional:!1},startsAt:{type:e.String_unsecure(),isOptional:!0},endsAt:{type:e.String_unsecure(),isOptional:!0}}}),l=new t({name:"CompanyOsPersonalDailyOperationCreateOutput",fields:{operation:{type:e.JSONObject(),isOptional:!1}}});export const PersonalDailyOperationCreateCommand=a({meta:{key:"organization-planning.personal-daily-operation.create",title:"Create Personal Daily Operation",version:"1.0.0",description:"Create a focus block, plan adjustment, conflict resolution, or meeting action.",goal:"Persist the user's operational changes instead of presenting a static agenda.",context:"Personal tenant and user authority are resolved exclusively from the session.",domain:i,owners:[...o],tags:[...s,"opa","daily-operations"],stability:r},capability:{...n},io:{input:p,output:l},policy:{auth:"user",pii:[]},sideEffects:{audit:["organization-planning.personal-operation.created"]}});

package/dist/node/companyos/commands/personalDailyOperationTransition.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as n,SchemaModel as i}from"@lssm/lib.schema";import{defineCommand as e}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as o,COMPANYOS_DOMAIN as a,COMPANYOS_OWNERS as t,COMPANYOS_STABILITY as r,COMPANYOS_TAGS as p}from"../constants.js";const s=new i({name:"CompanyOsPersonalDailyOperationTransitionInput",fields:{operationId:{type:n.String_unsecure(),isOptional:!1},action:{type:n.String_unsecure(),isOptional:!1},expectedVersion:{type:n.Int_unsecure(),isOptional:!1}}}),l=new i({name:"CompanyOsPersonalDailyOperationTransitionOutput",fields:{operation:{type:n.JSONObject(),isOptional:!1}}});export const PersonalDailyOperationTransitionCommand=e({meta:{key:"organization-planning.personal-daily-operation.transition",title:"Transition Personal Daily Operation",version:"1.0.0",description:"Complete, reopen, or cancel one recipient-owned daily operation with optimistic concurrency.",goal:"Make operational recovery and completion durable and conflict-safe.",context:"The opaque operation id is resolved within session-derived personal authority.",domain:a,owners:[...t],tags:[...p,"opa","daily-operations"],stability:r},capability:{...o},io:{input:s,output:l},policy:{auth:"user",pii:[]},sideEffects:{audit:["organization-planning.personal-operation.transitioned"]}});

package/dist/node/companyos/commands/reviewCardDecide.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{docRef as t}from"../../docs/registry.js";import{defineCommand as a}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as o,COMPANYOS_DOMAIN as n,COMPANYOS_OWNERS as r,COMPANYOS_STABILITY as s,COMPANYOS_TAGS as d}from"../constants.js";const c=new i({name:"CompanyOsSpecialOpsReviewCardDecideInput",fields:{tenantId:{type:e.ID(),isOptional:!1},workspaceId:{type:e.ID(),isOptional:!1},cardId:{type:e.NonEmptyString(),isOptional:!1},decision:{type:e.String_unsecure(),isOptional:!1},idempotencyKey:{type:e.ID(),isOptional:!1}}}),p=new i({name:"CompanyOsSpecialOpsReviewCardDecideOutput",fields:{cardId:{type:e.NonEmptyString(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},decidedAt:{type:e.DateTime(),isOptional:!0},evidenceReceiptRef:{type:e.String_unsecure(),isOptional:!1},idempotentReplay:{type:e.Boolean(),isOptional:!1}}});export const ReviewCardDecideDocBlock={id:"docs.tech.companyos.special-ops.review-card.decide",title:"Decide a Special Ops review card",summary:"Record a human approve/reject decision on a submitted Special Ops review card; tenant- and workspace-scoped, idempotent, audit-emitting.",kind:"reference",visibility:"internal",route:"/docs/tech/companyos/special-ops/review-card-decide",tags:["special-ops","review-card","decide","mutation"],body:"# specialOps.reviewCard.decide\n\nRecords a human review decision (`approved` ∨ `rejected`) on a previously\nsubmitted Special Ops review card. Governs the already-shipped\n`decideReviewCard` repository handler in `api-application-monolith`; authored\nhere (Managed CompanyOS production contracts surface) rather than the\n`packages/examples/special-ops-cockpit` fixture, which stays a pure demo.\n\nScope: tenant- and workspace-scoped. The handler resolves the actor session to\nan access scope and refuses cross-scope mutation (`TENANT_MISMATCH`). Decision\nis human-only — this is the anti-surveillance human-review boundary, not an\nautomated transition.\n\nIdempotency: `idempotencyKey` is required. Replays return the original result\nwith `idempotentReplay = true`; the underlying evidence receipt is preserved.\n\nAudit: every decision is intended to emit a `managed_companyos_audit_events`\nrow (see `sideEffects.audit`) distinct from the in-memory evidence receipt.\n\nCompatibility intent: **additive** (new operation key, no change to existing\ncontracts).\n"},ReviewCardDecideCommand=a({meta:{key:"specialOps.reviewCard.decide",title:"Decide Special Ops Review Card",version:"1.0.0",description:"Record a human approve/reject decision on a submitted Special Ops review card.",goal:"Give the Managed CompanyOS production surface an auditable, tenant-scoped human-review decision path governing the shipped decideReviewCard handler.",context:"Managed CompanyOS Special Ops vertical (customer #1). The handler lives in api-application-monolith; this contract retroactively governs it. Decision values: approved | rejected. Human review preserves the no-employee-surveillance boundary; mutation is refused across tenant/workspace scope and is idempotent on idempotencyKey.",domain:n,owners:[...r],tags:[...d,"special-ops","review-card","decide"],stability:s,docId:[t(ReviewCardDecideDocBlock.id)]},capability:{...o},io:{input:c,output:p,errors:{REVIEW_CARD_NOT_FOUND:{description:"No review card matched cardId within the caller scope.",http:404,when:"cardId does not resolve in the caller tenant/workspace."},DECISION_NOT_ALLOWED:{description:"Caller role is not permitted to decide review cards (review mutation gate).",http:403,when:"Resolved actor lacks the review-decision capability."},TENANT_MISMATCH:{description:"Caller scope does not include the review card.",http:403,when:"Review card tenant/workspace differs from the caller scope."}}},policy:{auth:"admin",pii:[]},sideEffects:{audit:["specialOps.reviewCard.decided"]}});

package/dist/node/companyos/commands/shellPreferencesUpdate.command.js

@@ -0,0 +1,6 @@
+import{defineCommand as e}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as t,COMPANYOS_DOMAIN as s,COMPANYOS_OWNERS as r,COMPANYOS_STABILITY as n,COMPANYOS_TAGS as o}from"../constants.js";import{CompanyOsShellPreferencesSnapshotModel as i,CompanyOsShellPreferencesUpdateInputModel as c}from"../shell-preferences.js";export const CompanyOsShellPreferencesUpdateDocBlock={id:"docs.tech.companyos.shell-preferences.update",title:"Update CompanyOS shell preferences",summary:"Updates the authenticated user’s context-switcher placement with optimistic concurrency.",kind:"reference",visibility:"internal",route:"/docs/tech/companyos/shell-preferences-update",tags:["companyos","shell","preferences","concurrency"],body:`# Update CompanyOS shell preferences
+
+Breaking v2 returns the complete authenticated shell snapshot, including the
+required tenant-scoped experience preference document and its independent
+revision. The command still mutates only context-switcher placement.
+`},CompanyOsShellPreferencesUpdateCommand=e({meta:{key:"companyos.shellPreferences.update",title:"Update CompanyOS Shell Preferences",version:"2.0.0",description:"Persist the authenticated user’s context-switcher placement preference.",goal:"Let users choose a topbar or sidebar-footer context switcher without cross-user writes.",context:"The server derives the user from the current authenticated session and applies a compare-and-swap update against expectedRevision. A conflict returns the latest state through a fresh read; user identifiers and tenant selectors are forbidden.",domain:s,owners:[...r],tags:[...o,"shell","preferences","concurrency"],stability:n},capability:{...t},io:{input:c,output:i,errors:{SESSION_REQUIRED:{description:"A current authenticated session is required.",http:401,when:"The session is absent, expired, or revoked."},PREFERENCE_REVISION_CONFLICT:{description:"Shell preferences changed since the supplied revision.",http:409,when:"The persisted user-scoped revision does not equal expectedRevision."},INVALID_SHELL_PREFERENCES:{description:"The requested shell preference is invalid.",http:422,when:"contextPlacement or expectedRevision fails the v1 schema."}}},policy:{auth:"user",pii:[]},sideEffects:{audit:["companyos.shellPreferences.updated"]}});

package/dist/node/companyos/commands/tenantOnboard.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as n}from"@lssm/lib.schema";import{defineCommand as t}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as a,COMPANYOS_DOMAIN as o,COMPANYOS_OWNERS as i,COMPANYOS_STABILITY as r,COMPANYOS_TAGS as s}from"../constants.js";const p=new n({name:"CompanyOsTenantOnboardInput",fields:{displayName:{type:e.String_unsecure(),isOptional:!1},region:{type:e.String_unsecure(),isOptional:!1},adminEmail:{type:e.String_unsecure(),isOptional:!1},featureFlags:{type:e.JSONObject(),isOptional:!0}}}),l=new n({name:"CompanyOsTenantOnboardOutput",fields:{tenantId:{type:e.ID(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}});export const TenantOnboardCommand=t({meta:{key:"tenant.onboard",title:"Onboard Managed Tenant",version:"1.0.0",description:"Provision a new Managed CompanyOS tenant.",goal:"Allow platform operators to onboard customers with auditable state.",context:"Triggered by the operator console or the platform CLI; emits boundary events for downstream provisioning.",domain:o,owners:[...i],tags:[...s,"tenant","onboarding"],stability:r},capability:{...a},io:{input:p,output:l,errors:{TENANT_DISPLAY_NAME_TAKEN:{description:"A tenant with this display name already exists.",http:409,when:"displayName collides with an existing tenant in the region."},REGION_NOT_SUPPORTED:{description:"Requested region is not enabled for managed onboarding.",http:422,when:"region is outside the managed control-plane allowlist."}}},policy:{auth:"admin",pii:["adminEmail"]}});

package/dist/node/companyos/commands/tenantUpdate.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as e}from"@lssm/lib.schema";import{defineCommand as n}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as a,COMPANYOS_DOMAIN as o,COMPANYOS_OWNERS as i,COMPANYOS_STABILITY as p,COMPANYOS_TAGS as s}from"../constants.js";const d=new e({name:"CompanyOsTenantUpdateInput",fields:{tenantId:{type:t.ID(),isOptional:!1},patch:{type:t.JSONObject(),isOptional:!1}}}),r=new e({name:"CompanyOsTenantUpdateOutput",fields:{tenantId:{type:t.ID(),isOptional:!1},status:{type:t.String_unsecure(),isOptional:!1},updatedAt:{type:t.DateTime(),isOptional:!1}}});export const TenantUpdateCommand=n({meta:{key:"tenant.update",title:"Update Managed Tenant",version:"1.0.0",description:"Update mutable fields of an existing Managed CompanyOS tenant.",goal:"Provide auditable mutations to tenant profile, region pin, or feature flags.",context:"Used by operators during change windows; mutations go through the managed control-plane outbox.",domain:o,owners:[...i],tags:[...s,"tenant"],stability:p},capability:{...a},io:{input:d,output:r,errors:{TENANT_NOT_FOUND:{description:"The referenced tenant does not exist.",http:404,when:"tenantId cannot be resolved in the managed control-plane."},TENANT_MISMATCH:{description:"Caller is not authorized to mutate this tenant.",http:403,when:"Caller scope does not include the requested tenantId."}}},policy:{auth:"admin",pii:[]}});

package/dist/node/companyos/commands/weeklyReportApprove.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as p}from"@lssm/lib.schema";import{docRef as t}from"../../docs/registry.js";import{defineCommand as o}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as i,COMPANYOS_DOMAIN as a,COMPANYOS_OWNERS as r,COMPANYOS_STABILITY as s,COMPANYOS_TAGS as n}from"../constants.js";const l=new p({name:"CompanyOsSpecialOpsWeeklyReportApproveInput",fields:{tenantId:{type:e.ID(),isOptional:!1},workspaceId:{type:e.ID(),isOptional:!1},reportId:{type:e.NonEmptyString(),isOptional:!1},idempotencyKey:{type:e.ID(),isOptional:!1}}}),c=new p({name:"CompanyOsSpecialOpsWeeklyReportApproveOutput",fields:{reportId:{type:e.NonEmptyString(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},publishPolicyRef:{type:e.String_unsecure(),isOptional:!1},approvedAt:{type:e.DateTime(),isOptional:!0},evidenceReceiptRef:{type:e.String_unsecure(),isOptional:!1},idempotentReplay:{type:e.Boolean(),isOptional:!1}}});export const WeeklyReportApproveDocBlock={id:"docs.tech.companyos.special-ops.weekly-report.approve",title:"Approve (publish) a Special Ops weekly report",summary:"Human-approve a Special Ops weekly report draft, transitioning it to published; tenant- and workspace-scoped, idempotent, audit-emitting.",kind:"reference",visibility:"internal",route:"/docs/tech/companyos/special-ops/weekly-report-approve",tags:["special-ops","weekly-report","approve","publish","mutation"],body:"# specialOps.weeklyReport.approve\n\nHuman approval gate for a Special Ops weekly report. Approval is the publish\ntransition: a draft report becomes `published` and its\n`publish_policy_ref` flips to `allow` only after an explicit human decision.\nGoverns the already-shipped `publishWeeklyReport` repository handler in\n`api-application-monolith`; authored here (Managed CompanyOS production\ncontracts surface) rather than the `packages/examples/special-ops-cockpit`\nfixture, which stays a pure demo.\n\nScope: tenant- and workspace-scoped. Cross-scope approval is refused\n(`TENANT_MISMATCH`). The report must already exist as a composed draft built\nfrom approved review cards only.\n\nIdempotency: `idempotencyKey` is required. Replays return the original result\nwith `idempotentReplay = true`; the underlying evidence receipt is preserved.\n\nAudit: every approval is intended to emit a `managed_companyos_audit_events`\nrow (see `sideEffects.audit`) distinct from the in-memory evidence receipt.\n\nCompatibility intent: **additive** (new operation key, no change to existing\ncontracts).\n"},WeeklyReportApproveCommand=o({meta:{key:"specialOps.weeklyReport.approve",title:"Approve Special Ops Weekly Report",version:"1.0.0",description:"Human-approve a Special Ops weekly report draft, transitioning it to published.",goal:"Give the Managed CompanyOS production surface an auditable, tenant-scoped human approval/publish path governing the shipped publishWeeklyReport handler.",context:"Managed CompanyOS Special Ops vertical (customer #1). The handler lives in api-application-monolith; this contract retroactively governs it. Approval is the publish gate — drafts are composed from approved review cards only and become published solely on explicit human approval. Cross-scope approval is refused and the operation is idempotent on idempotencyKey.",domain:a,owners:[...r],tags:[...n,"special-ops","weekly-report","approve"],stability:s,docId:[t(WeeklyReportApproveDocBlock.id)]},capability:{...i},io:{input:l,output:c,errors:{WEEKLY_REPORT_NOT_FOUND:{description:"No weekly report matched reportId within the caller scope.",http:404,when:"reportId does not resolve in the caller tenant/workspace."},APPROVAL_NOT_ALLOWED:{description:"Caller role is not permitted to approve/publish weekly reports (publish mutation gate).",http:403,when:"Resolved actor lacks the publish capability."},TENANT_MISMATCH:{description:"Caller scope does not include the weekly report.",http:403,when:"Weekly report tenant/workspace differs from the caller scope."}}},policy:{auth:"admin",pii:[]},sideEffects:{audit:["specialOps.weeklyReport.approved"]}});

package/dist/node/companyos/commands/workflowStart.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as o}from"@lssm/lib.schema";import{defineCommand as e}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as a,COMPANYOS_DOMAIN as n,COMPANYOS_OWNERS as r,COMPANYOS_STABILITY as i,COMPANYOS_TAGS as p}from"../constants.js";const s=new o({name:"CompanyOsWorkflowStartInput",fields:{tenantId:{type:t.ID(),isOptional:!1},kind:{type:t.String_unsecure(),isOptional:!1},payload:{type:t.JSONObject(),isOptional:!0}}}),l=new o({name:"CompanyOsWorkflowStartOutput",fields:{correlationId:{type:t.ID(),isOptional:!1},status:{type:t.String_unsecure(),isOptional:!1},startedAt:{type:t.DateTime(),isOptional:!1}}});export const WorkflowStartCommand=e({meta:{key:"workflow.start",title:"Start Managed Workflow",version:"1.0.0",description:"Start a tenant-scoped Managed CompanyOS workflow.",goal:"Dispatch a workflow through the managed control-plane with full correlation tracking.",context:"Gated by FR7 approval boundaries; emits boundary events the replay/evidence pipelines consume.",domain:n,owners:[...r],tags:[...p,"workflow"],stability:i},capability:{...a},io:{input:s,output:l,errors:{WORKFLOW_KIND_UNKNOWN:{description:"The workflow kind is not registered for this tenant.",http:422,when:"kind is not in the tenant workflow catalog."},APPROVAL_REQUIRED:{description:"Workflow requires explicit approval before dispatch.",http:409,when:"Workflow kind crosses an approval boundary defined by FR7."}}},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/company-intelligence/api-schemas.js

@@ -0,0 +1 @@
+const e={type:"string",minLength:1},t={type:"integer",minimum:0},n={anyOf:[e,{type:"null"}]};export const companyIntelligenceApiEmptyQuerySchema={type:"object",properties:{},additionalProperties:!1},companyIntelligenceApiTenantQuerySchema={type:"object",properties:{tenantId:e},additionalProperties:!1},companyIntelligenceApiSurfaceQuerySchema={type:"object",properties:{surface:{type:"string",enum:["overview","sources","brain","graph","assistant","learning","operations"]}},required:["surface"],additionalProperties:!1},companyIntelligenceApiPaginationQuerySchema={type:"object",properties:{tenantId:e,cursor:e,pageSize:{type:"integer",minimum:1}},additionalProperties:!1},companyIntelligenceApiMutationRequestSchema={type:"object",properties:{tenantId:e},additionalProperties:!0},companyIntelligenceApiGraphRequestSchema={type:"object",properties:{tenantId:e,maxDepth:{type:"integer",minimum:1,maximum:8},maxNodes:{type:"integer",minimum:1,maximum:1000},maxEdges:{type:"integer",minimum:1,maximum:5000}},required:["maxDepth","maxNodes","maxEdges"],additionalProperties:!0},companyIntelligenceApiAnswerRequestSchema={type:"object",properties:{tenantId:e,question:{type:"string",minLength:1,maxLength:8000},maxEvidenceRecords:{type:"integer",minimum:1,maximum:50}},required:["question","maxEvidenceRecords"],additionalProperties:!0},companyIntelligenceApiGovernedLearningRequestSchema={type:"object",properties:{tenantId:e,packet:{type:"object"},lifecycleId:e,expectedSequence:t,expectedHeadFingerprint:n},required:["packet","lifecycleId","expectedSequence","expectedHeadFingerprint"],additionalProperties:!1},companyIntelligenceApiResultSchema={type:"object",additionalProperties:!0},companyIntelligenceApiSurfaceDescriptorSchema={type:"object",properties:{surface:{type:"string",enum:["overview","sources","brain","graph","assistant","learning","operations"]},routeState:{type:"string",enum:["loading","success","empty","error","degraded","unauthorized","partial"]},route:e,asOf:e,freshness:{type:"string",enum:["fresh","stale","unknown"]},safeRead:{type:"boolean"},actions:{type:"array",items:{type:"object",properties:{actionId:e,operationKey:e,labelKey:e,method:{type:"string",enum:["GET","POST"]},path:e,state:{type:"string",enum:["available","blocked"]},reasonCode:e,idempotencyRequired:{type:"boolean"}},required:["actionId","operationKey","labelKey","method","path","state","idempotencyRequired"],additionalProperties:!1}},dependencyBlocks:{type:"array",items:{type:"object",properties:{dependencyId:e,labelKey:e,state:{type:"string",enum:["available","degraded","unavailable"]},blocking:{type:"boolean"}},required:["dependencyId","labelKey","state","blocking"],additionalProperties:!1}}},required:["surface","routeState","route","asOf","freshness","safeRead","actions","dependencyBlocks"],additionalProperties:!1};

package/dist/node/companyos/company-intelligence/api.js

@@ -0,0 +1 @@
+import{companyIntelligenceApiAnswerRequestSchema as l,companyIntelligenceApiEmptyQuerySchema as o,companyIntelligenceApiGovernedLearningRequestSchema as c,companyIntelligenceApiGraphRequestSchema as s,companyIntelligenceApiMutationRequestSchema as y,companyIntelligenceApiPaginationQuerySchema as m,companyIntelligenceApiResultSchema as r,companyIntelligenceApiSurfaceDescriptorSchema as p,companyIntelligenceApiSurfaceQuerySchema as u,companyIntelligenceApiTenantQuerySchema as g}from"./api-schemas.js";export{companyIntelligenceCanonicalRoutes,companyIntelligenceCompatibilityRedirects,companyIntelligenceSurfaceIds,companyIntelligenceSurfaceRouteStates}from"./surface.js";export const COMPANY_INTELLIGENCE_API_VERSION="1.0.0",COMPANY_INTELLIGENCE_API_PREFIX="/api/companyos/company-intelligence/v1",companyIntelligenceApiErrorStatuses={unauthorized:401,forbidden:403,idempotency_conflict:409,payload_too_large:413,invalid_request:422,rate_limited:429,unsafe_result:502,dependency_unavailable:503},companyIntelligenceApiSuccessSchema=(a)=>({type:"object",properties:{ok:{const:!0},apiVersion:{type:"string"},correlationId:{type:"string",minLength:1},result:a},required:["ok","apiVersion","correlationId","result"],additionalProperties:!1}),companyIntelligenceApiErrorSchema=(a)=>({type:"object",properties:{ok:{const:!1},apiVersion:{type:"string"},correlationId:{type:"string",minLength:1},error:{type:"object",properties:{code:{const:a},message:{type:"string"}},required:["code","message"],additionalProperties:!1}},required:["ok","apiVersion","correlationId","error"],additionalProperties:!1});const t=(a,i,e={})=>({key:a,contractKey:e.contractKey??`companyIntelligence.${a}`,method:"GET",path:i,access:"read",availability:e.availability??"s1_s8",idempotencyRequired:!1,maxBodyBytes:0,...e.maxPageSize?{maxPageSize:e.maxPageSize}:{},maxTimeoutMs:1e4,querySchema:e.querySchema??(e.maxPageSize?m:g),successResultSchema:e.successResultSchema??r}),n=(a,i,e={})=>({key:a,contractKey:e.contractKey??`companyIntelligence.${a}`,method:"POST",path:i,access:e.access??"write",availability:e.availability??"s1_s8",idempotencyRequired:!0,maxBodyBytes:e.maxBodyBytes??65536,maxTimeoutMs:30000,querySchema:e.querySchema??o,requestBodySchema:e.requestBodySchema??y,successResultSchema:e.successResultSchema??r});export const companyIntelligenceApiOperations=[t("surface.get","/surface",{contractKey:"companyIntelligence.surface.get",querySchema:u,successResultSchema:p}),t("connections.list","/connections",{maxPageSize:100}),t("jobs.list","/jobs",{maxPageSize:100}),n("uploads.create","/uploads",{maxBodyBytes:1048576}),n("extraction.run","/extraction"),t("evidence.list","/evidence",{maxPageSize:100}),n("reviews.record","/reviews",{access:"admin"}),n("graph.query","/graph/query",{contractKey:"companyIntelligence.graph.query",requestBodySchema:s}),t("brain.get","/brain"),n("answers.query","/answers",{contractKey:"companyIntelligence.answer.query",requestBodySchema:l}),n("feedback.record","/feedback",{availability:"s9_authority",contractKey:"companyIntelligence.feedback.record",requestBodySchema:c}),n("evals.run","/evals",{access:"admin",availability:"s9_authority",contractKey:"companyIntelligence.experiment.evaluate",requestBodySchema:c}),n("promotion.decide","/promotion",{access:"admin",availability:"s9_authority",contractKey:"companyIntelligence.promotion.decide",requestBodySchema:c}),n("rollback.execute","/rollback",{access:"admin",availability:"s9_authority",contractKey:"companyIntelligence.rollback.execute",requestBodySchema:c}),t("health.get","/health",{querySchema:o}),t("replay.get","/replay",{contractKey:"companyIntelligence.replay.get"})];

package/dist/node/companyos/company-intelligence/commands.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineCommand as n}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as i,COMPANYOS_DOMAIN as l,COMPANYOS_OWNERS as p,COMPANYOS_STABILITY as r,COMPANYOS_TAGS as s}from"../constants.js";import{CompanyIntelligenceMutationReceiptModel as o}from"./models.js";const a={domain:l,owners:[...p],tags:[...s,"company-intelligence"],stability:r,context:"Contract-only surface; authenticated app/runtime owners enforce tenant, policy, evidence, persistence, and provider boundaries."},c={tenantId:{type:e.ID(),isOptional:!1},correlationId:{type:e.ID(),isOptional:!1},idempotencyKey:{type:e.ID(),isOptional:!1}};export const CompanyIntelligenceAnswerQueryCommand=n({meta:{...a,key:"companyIntelligence.answer.query",title:"Query Grounded Company Intelligence",version:"1.0.0",description:"Request an authorized grounded-answer record and verification receipt.",goal:"Return answered, abstained, refused, conflicted, or degraded without inferring action authority."},capability:{...i},io:{input:new t({name:"CompanyIntelligenceAnswerQueryInput",fields:{...c,question:{type:e.String_unsecure(),isOptional:!1},retrievalConfigRef:{type:e.ID(),isOptional:!1},maxEvidenceRecords:{type:e.Int_unsecure(),isOptional:!1}}}),output:new t({name:"CompanyIntelligenceAnswerQueryOutput",fields:{answerRecord:{type:e.JSONObject(),isOptional:!1},verificationRecord:{type:e.JSONObject(),isOptional:!1},receipt:{type:o,isOptional:!1}}}),errors:{NO_AUTHORIZED_EVIDENCE:{description:"No sufficient authorized evidence exists.",http:422},ANSWER_DEPENDENCY_DEGRADED:{description:"A required retrieval or verification dependency is degraded.",http:503}}},policy:{auth:"user",pii:["question"]},sideEffects:{audit:["companyIntelligence.answer.requested"]}}),CompanyIntelligenceFeedbackRecordCommand=n({meta:{...a,key:"companyIntelligence.feedback.record",title:"Record Company Intelligence Feedback",version:"1.0.0",description:"Record consented, redacted feedback, correction, or outcome evidence.",goal:"Keep feedback as outcome evidence rather than approval or dispatch authority."},capability:{...i},io:{input:new t({name:"CompanyIntelligenceFeedbackRecordInput",fields:{...c,feedbackRecord:{type:e.JSONObject(),isOptional:!1},consentDecisionRef:{type:e.ID(),isOptional:!1},redactionDecisionRef:{type:e.ID(),isOptional:!1}}}),output:o},policy:{auth:"user",pii:[]},sideEffects:{audit:["companyIntelligence.feedback.recorded"]}}),CompanyIntelligenceExperimentEvaluateCommand=n({meta:{...a,key:"companyIntelligence.experiment.evaluate",title:"Evaluate Company Intelligence Experiment",version:"1.0.0",description:"Evaluate a bounded candidate against immutable baseline and holdout evidence.",goal:"Require independent safety, privacy, cost, holdout, and adversarial evidence."},capability:{...i},io:{input:new t({name:"CompanyIntelligenceExperimentEvaluateInput",fields:{...c,experimentRecordId:{type:e.ID(),isOptional:!1},evaluatorRef:{type:e.ID(),isOptional:!1}}}),output:o},policy:{auth:"admin",pii:[]},sideEffects:{audit:["companyIntelligence.experiment.evaluated"]}}),CompanyIntelligencePromotionDecideCommand=n({meta:{...a,key:"companyIntelligence.promotion.decide",title:"Decide Company Intelligence Promotion",version:"1.0.0",description:"Approve, reject, or canary a bounded evaluated artifact.",goal:"Prevent promotion without policy, approval, evaluation, rollback, and kill-switch evidence."},capability:{...i},io:{input:new t({name:"CompanyIntelligencePromotionDecideInput",fields:{...c,promotionRecord:{type:e.JSONObject(),isOptional:!1},approvalDecisionRef:{type:e.ID(),isOptional:!1},policyDecisionRef:{type:e.ID(),isOptional:!1}}}),output:o,errors:{PROMOTION_GATES_INCOMPLETE:{description:"One or more mandatory promotion gates are missing.",http:422},PROMOTION_POLICY_DENIED:{description:"Policy denies the proposed promotion.",http:403}}},policy:{auth:"admin",pii:[]},sideEffects:{audit:["companyIntelligence.promotion.decided"]}}),CompanyIntelligenceRollbackExecuteCommand=n({meta:{...a,key:"companyIntelligence.rollback.execute",title:"Execute Company Intelligence Rollback",version:"1.0.0",description:"Execute an approved rollback to an immutable baseline artifact.",goal:"Restore the exact baseline while retaining promotion, trigger, outcome, and replay evidence."},capability:{...i},io:{input:new t({name:"CompanyIntelligenceRollbackExecuteInput",fields:{...c,rollbackRecordId:{type:e.ID(),isOptional:!1},approvalDecisionRef:{type:e.ID(),isOptional:!1}}}),output:o},policy:{auth:"admin",pii:[]},sideEffects:{audit:["companyIntelligence.rollback.completed"]}}),companyIntelligenceCommands=[CompanyIntelligenceAnswerQueryCommand,CompanyIntelligenceFeedbackRecordCommand,CompanyIntelligenceExperimentEvaluateCommand,CompanyIntelligencePromotionDecideCommand,CompanyIntelligenceRollbackExecuteCommand];

package/dist/node/companyos/company-intelligence/events.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as n}from"@lssm/lib.schema";import{defineEvent as i}from"../../events.js";import{COMPANYOS_OWNERS as a,COMPANYOS_STABILITY as l,COMPANYOS_TAGS as d}from"../constants.js";const t={version:"1.0.0",stability:l,owners:[...a],tags:[...d,"company-intelligence"]},o={tenantId:{type:e.ID(),isOptional:!1},recordId:{type:e.ID(),isOptional:!1},fingerprint:{type:e.String_unsecure(),isOptional:!1},evidenceReceiptId:{type:e.ID(),isOptional:!1},replayRecordId:{type:e.ID(),isOptional:!1},correlationId:{type:e.ID(),isOptional:!1},occurredAt:{type:e.DateTime(),isOptional:!1}};export const CompanyIntelligenceRecordCommittedEvent=i({meta:{...t,version:"1.0.0",key:"companyIntelligence.record.committed",title:"Company Intelligence Record Committed",description:"A fingerprinted canonical record was durably accepted."},pii:[],payload:new n({name:"CompanyIntelligenceRecordCommittedPayload",fields:{...o,recordKind:{type:e.String_unsecure(),isOptional:!1},authorityClass:{type:e.String_unsecure(),isOptional:!1}}})}),CompanyIntelligenceAnswerVerifiedEvent=i({meta:{...t,version:"1.0.0",key:"companyIntelligence.answer.verified",title:"Company Intelligence Answer Verified",description:"A grounded answer received deterministic and independent verification."},pii:[],payload:new n({name:"CompanyIntelligenceAnswerVerifiedPayload",fields:{...o,verificationRecordId:{type:e.ID(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1}}})}),CompanyIntelligenceFeedbackRecordedEvent=i({meta:{...t,version:"1.0.0",key:"companyIntelligence.feedback.recorded",title:"Company Intelligence Feedback Recorded",description:"Consented and redacted feedback was recorded as outcome evidence."},pii:[],payload:new n({name:"CompanyIntelligenceFeedbackRecordedPayload",fields:o})}),CompanyIntelligencePromotionDecidedEvent=i({meta:{...t,version:"1.0.0",key:"companyIntelligence.promotion.decided",title:"Company Intelligence Promotion Decided",description:"An approval owner decided a bounded candidate promotion."},pii:[],payload:new n({name:"CompanyIntelligencePromotionDecidedPayload",fields:{...o,decision:{type:e.String_unsecure(),isOptional:!1},approvalDecisionRef:{type:e.ID(),isOptional:!1},rollbackRecordId:{type:e.ID(),isOptional:!1}}})}),CompanyIntelligenceRollbackCompletedEvent=i({meta:{...t,version:"1.0.0",key:"companyIntelligence.rollback.completed",title:"Company Intelligence Rollback Completed",description:"A rollback restored the immutable baseline and retained replay evidence."},pii:[],payload:new n({name:"CompanyIntelligenceRollbackCompletedPayload",fields:{...o,baselineRefId:{type:e.ID(),isOptional:!1},outcomeRefId:{type:e.ID(),isOptional:!1}}})}),companyIntelligenceEvents=[CompanyIntelligenceRecordCommittedEvent,CompanyIntelligenceAnswerVerifiedEvent,CompanyIntelligenceFeedbackRecordedEvent,CompanyIntelligencePromotionDecidedEvent,CompanyIntelligenceRollbackCompletedEvent];

package/dist/node/companyos/company-intelligence/index.js

@@ -0,0 +1 @@
+export*from"./api.js";export*from"./api-schemas.js";export*from"./commands.js";export*from"./events.js";export*from"./models.js";export*from"./operations.js";export*from"./queries.js";export*from"./registry.js";

package/dist/node/companyos/company-intelligence/models.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as n}from"@lssm/lib.schema";export const CompanyIntelligenceCanonicalRecordModel=new n({name:"CompanyIntelligenceCanonicalRecord",fields:{recordId:{type:e.ID(),isOptional:!1},recordKind:{type:e.String_unsecure(),isOptional:!1},authorityClass:{type:e.String_unsecure(),isOptional:!1},contractVersion:{type:e.String_unsecure(),isOptional:!1},fingerprint:{type:e.String_unsecure(),isOptional:!1},record:{type:e.JSONObject(),isOptional:!1}}}),CompanyIntelligenceIssueModel=new n({name:"CompanyIntelligenceValidationIssue",fields:{code:{type:e.String_unsecure(),isOptional:!1},path:{type:e.String_unsecure(),isOptional:!1},message:{type:e.String_unsecure(),isOptional:!1}}}),CompanyIntelligenceTenantInputModel=new n({name:"CompanyIntelligenceTenantInput",fields:{tenantId:{type:e.ID(),isOptional:!1},correlationId:{type:e.ID(),isOptional:!1}}}),CompanyIntelligenceMutationReceiptModel=new n({name:"CompanyIntelligenceMutationReceipt",fields:{recordId:{type:e.ID(),isOptional:!1},fingerprint:{type:e.String_unsecure(),isOptional:!1},evidenceReceiptId:{type:e.ID(),isOptional:!1},replayRecordId:{type:e.ID(),isOptional:!1},correlationId:{type:e.ID(),isOptional:!1},committedAt:{type:e.DateTime(),isOptional:!1}}});

package/dist/node/companyos/company-intelligence/operations.js

@@ -0,0 +1 @@
+export const companyIntelligenceThreatIds=["cross_tenant_read_write","rls_bypass","confused_deputy","stale_session_role","source_acl_revocation","secret_exposure","prompt_injection","model_output_injection","citation_spoofing","source_url_ssrf","malicious_html_markdown","decompression_bomb","oversized_file","spreadsheet_formula_injection","archive_path_traversal","pii_telemetry_leakage","unauthorized_export_training","replay_artifact_leakage","cache_tenant_collision","graph_traversal_leakage","deletion_retention_failure","poisoned_feedback","unsafe_improvement_promotion"],companyIntelligenceDependencyIds=["database","vector","model","queue","connector"],companyIntelligenceKillSwitchIds=["ingestion","learning","promotion","vendor_export","connector_dispatch","high_risk_answering"],companyIntelligenceApiBudgetPerMinute=120,companyIntelligenceOperationsRunbookRefs=["packages/apps/api-application-monolith/docs/company-intelligence-operations-runbook.md","packages/apps/api-application-monolith/docs/company-intelligence-persistence-runbook.md"],companyIntelligenceMigrationQualificationScenarioIds=["clean_install","prior_schema_upgrade","interrupted_resume","non_destructive_rollback","forward_repair","orphan_check","data_loss_check"],companyIntelligenceAdr008Minimums={concurrentTenants:10,documentsPerTenant:1e4,fragmentsPerTenant:1e5,graphNodesPerTenant:1e5,graphEdgesPerTenant:500000,measuredOperationsPerEndpoint:1000,loadDurationMinutes:60,soakDurationHours:8,runnerVcpu:8,runnerMemoryGib:16,postgresMajor:16},companyIntelligenceForbiddenTelemetryFields=["sourceBody","prompt","secret","pii","rawPayload","authorization"];

package/dist/node/companyos/company-intelligence/queries.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as n}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as a,COMPANYOS_DOMAIN as l,COMPANYOS_OWNERS as p,COMPANYOS_STABILITY as s,COMPANYOS_TAGS as r}from"../constants.js";import{CompanyIntelligenceCanonicalRecordModel as o,CompanyIntelligenceIssueModel as c}from"./models.js";const i={domain:l,owners:[...p],tags:[...r,"company-intelligence"],stability:s,context:"Contract-only surface; authenticated app/runtime owners enforce tenant, policy, evidence, persistence, and provider boundaries."};export const CompanyIntelligenceSurfaceGetQuery=n({meta:{...i,key:"companyIntelligence.surface.get",title:"Get Company Intelligence Surface Descriptor",version:"1.0.0",description:"Describe one authenticated Company Intelligence surface and its server-authorized actions.",goal:"Keep tenant and role authority on the server while exposing truthful product states."},capability:{...a},io:{input:new t({name:"CompanyIntelligenceSurfaceGetInput",fields:{surface:{type:e.String_unsecure(),isOptional:!1}}}),output:new t({name:"CompanyIntelligenceSurfaceGetOutput",fields:{surface:{type:e.String_unsecure(),isOptional:!1},routeState:{type:e.String_unsecure(),isOptional:!1},route:{type:e.String_unsecure(),isOptional:!1},asOf:{type:e.DateTime(),isOptional:!1},freshness:{type:e.String_unsecure(),isOptional:!1},safeRead:{type:e.Boolean(),isOptional:!1},actions:{type:e.JSONObject(),isOptional:!1,isArray:!0},dependencyBlocks:{type:e.JSONObject(),isOptional:!1,isArray:!0}}})},policy:{auth:"user",pii:[]}}),CompanyIntelligenceRecordValidateQuery=n({meta:{...i,key:"companyIntelligence.record.validate",title:"Validate Company Intelligence Record",version:"1.0.0",description:"Validate canonical shape, semantics, references, and fingerprints.",goal:"Fail closed before a Company Intelligence record crosses a durable boundary."},capability:{...a},io:{input:new t({name:"CompanyIntelligenceRecordValidateInput",fields:{tenantId:{type:e.ID(),isOptional:!1},record:{type:e.JSONObject(),isOptional:!1}}}),output:new t({name:"CompanyIntelligenceRecordValidateOutput",fields:{ok:{type:e.Boolean(),isOptional:!1},issues:{type:c,isOptional:!1,isArray:!0}}})},policy:{auth:"admin",pii:[]}}),CompanyIntelligenceGraphQuery=n({meta:{...i,key:"companyIntelligence.graph.query",title:"Query Company Intelligence Graph",version:"1.0.0",description:"Read a bounded, tenant-authorized graph snapshot projection.",goal:"Expose explicit bounds, redaction, evidence, and snapshot identity."},capability:{...a},io:{input:new t({name:"CompanyIntelligenceGraphQueryInput",fields:{tenantId:{type:e.ID(),isOptional:!1},asOf:{type:e.DateTime(),isOptional:!0},filters:{type:e.JSONObject(),isOptional:!0},maxDepth:{type:e.Int_unsecure(),isOptional:!1},maxNodes:{type:e.Int_unsecure(),isOptional:!1},maxEdges:{type:e.Int_unsecure(),isOptional:!1},timeoutMs:{type:e.Int_unsecure(),isOptional:!1}}}),output:new t({name:"CompanyIntelligenceGraphQueryOutput",fields:{status:{type:e.String_unsecure(),isOptional:!1},graph:{type:o,isOptional:!1},redactionDecisionRef:{type:e.ID(),isOptional:!1},evidenceRefIds:{type:e.ID(),isOptional:!1,isArray:!0}}}),errors:{GRAPH_QUERY_BOUNDS_INVALID:{description:"Graph bounds are invalid.",http:422},GRAPH_QUERY_UNAUTHORIZED:{description:"No authorized graph projection is visible.",http:403}}},policy:{auth:"user",pii:[]}}),CompanyIntelligenceReplayGetQuery=n({meta:{...i,key:"companyIntelligence.replay.get",title:"Get Company Intelligence Replay",version:"1.0.0",description:"Read a tenant-authorized canonical replay record by id.",goal:"Preserve exact versioned replay evidence without exposing source bodies."},capability:{...a},io:{input:new t({name:"CompanyIntelligenceReplayGetInput",fields:{tenantId:{type:e.ID(),isOptional:!1},replayRecordId:{type:e.ID(),isOptional:!1}}}),output:o},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/company-intelligence/registry.js

@@ -0,0 +1 @@
+import{CompanyIntelligenceAnswerQueryCommand as e,CompanyIntelligenceExperimentEvaluateCommand as n,CompanyIntelligenceFeedbackRecordCommand as t,CompanyIntelligencePromotionDecideCommand as o,CompanyIntelligenceRollbackExecuteCommand as c}from"./commands.js";import{CompanyIntelligenceAnswerVerifiedEvent as l,CompanyIntelligenceFeedbackRecordedEvent as a,CompanyIntelligencePromotionDecidedEvent as i,CompanyIntelligenceRecordCommittedEvent as p,CompanyIntelligenceRollbackCompletedEvent as m}from"./events.js";import{CompanyIntelligenceGraphQuery as r,CompanyIntelligenceRecordValidateQuery as y,CompanyIntelligenceReplayGetQuery as g,CompanyIntelligenceSurfaceGetQuery as d}from"./queries.js";export const companyIntelligenceOperationRegistry={"companyIntelligence.surface.get":d,"companyIntelligence.record.validate":y,"companyIntelligence.graph.query":r,"companyIntelligence.answer.query":e,"companyIntelligence.feedback.record":t,"companyIntelligence.experiment.evaluate":n,"companyIntelligence.promotion.decide":o,"companyIntelligence.rollback.execute":c,"companyIntelligence.replay.get":g},companyIntelligenceEventRegistry={"companyIntelligence.record.committed":p,"companyIntelligence.answer.verified":l,"companyIntelligence.feedback.recorded":a,"companyIntelligence.promotion.decided":i,"companyIntelligence.rollback.completed":m};

package/dist/node/companyos/company-intelligence/surface.js

@@ -0,0 +1 @@
+export const companyIntelligenceSurfaceIds=["overview","sources","brain","graph","assistant","learning","operations"],companyIntelligenceSurfaceRouteStates=["loading","success","empty","error","degraded","unauthorized","partial"],companyIntelligenceCanonicalRoutes={overview:"/companyos/knowledge",sources:"/companyos/knowledge/sources",brain:"/companyos/brain",graph:"/companyos/knowledge/graph",assistant:"/companyos/knowledge/assistant",learning:"/companyos/knowledge/learning",operations:"/companyos/knowledge/operations"},companyIntelligenceCompatibilityRedirects={"/companyos/company-intelligence":companyIntelligenceCanonicalRoutes.overview,"/companyos/graph":companyIntelligenceCanonicalRoutes.graph};

package/dist/node/companyos/company-metrics/commands.js

@@ -0,0 +1,3 @@
+import{defineCommand as n}from"../../operations/index.js";import{CompanyMetricMutationInputModel as c,CompanyMetricMutationOutputModel as r,companyMetricsCapability as a,companyMetricsMeta as m}from"./shared.js";export const CompanyMetricsCommandsDocBlock={id:"docs.tech.companyos.company-metrics.commands",title:"Company metrics commands",summary:"Govern definition, collection, alert, digest, and publication lifecycle.",kind:"reference",visibility:"public",route:"/docs/tech/companyos/company-metrics/commands",tags:["companyos","metrics","governance"],body:`# Company metrics commands
+
+Every mutation is scope-bound and idempotent. Discovery approval does not authorize changed tools or schemas.`};function o(e,t,i="admin"){return n({meta:{...m,key:e,title:t,version:"1.0.0",description:t,goal:"Mutate governed metric state with evidence and replay."},capability:a,io:{input:c,output:r},policy:{auth:i,pii:[]},sideEffects:{audit:[`${e}.requested`]}})}export const CompanyMetricDefinitionCreateCommand=o("companyMetrics.definition.create","Create Company Metric Definition"),CompanyMetricDefinitionUpdateCommand=o("companyMetrics.definition.update","Update Company Metric Definition"),CompanyMetricDefinitionTransitionCommand=o("companyMetrics.definition.transition","Transition Company Metric Definition"),CompanyMetricDiscoveryStartCommand=o("companyMetrics.discovery.start","Start Company Metric Discovery"),CompanyMetricProposalReviewCommand=o("companyMetrics.proposal.review","Review Company Metric Proposal"),CompanyMetricRefreshCommand=o("companyMetrics.refresh","Refresh Company Metrics"),CompanyMetricAlertConfigureCommand=o("companyMetrics.alert.configure","Configure Company Metric Alert"),CompanyMetricAlertAcknowledgeCommand=o("companyMetrics.alert.acknowledge","Acknowledge Company Metric Alert","user"),CompanyMetricDigestConfigureCommand=o("companyMetrics.digest.configure","Configure Company Metric Digest"),CompanyMetricPublicationPrepareCommand=o("companyMetrics.publication.prepare","Prepare Company Metric Publication"),CompanyMetricPublicationApproveCommand=o("companyMetrics.publication.approve","Approve Company Metric Publication"),CompanyMetricPublicationRevokeCommand=o("companyMetrics.publication.revoke","Revoke Company Metric Publication"),companyMetricsCommands=[CompanyMetricDefinitionCreateCommand,CompanyMetricDefinitionUpdateCommand,CompanyMetricDefinitionTransitionCommand,CompanyMetricDiscoveryStartCommand,CompanyMetricProposalReviewCommand,CompanyMetricRefreshCommand,CompanyMetricAlertConfigureCommand,CompanyMetricAlertAcknowledgeCommand,CompanyMetricDigestConfigureCommand,CompanyMetricPublicationPrepareCommand,CompanyMetricPublicationApproveCommand,CompanyMetricPublicationRevokeCommand];

package/dist/node/companyos/company-metrics/events.js

@@ -0,0 +1,3 @@
+import{ScalarTypeEnum as t,SchemaModel as i}from"@lssm/lib.schema";import{defineEvent as n}from"../../events.js";import{COMPANYOS_OWNERS as c,COMPANYOS_STABILITY as a,COMPANYOS_TAGS as s}from"../constants.js";export const CompanyMetricsEventsDocBlock={id:"docs.tech.companyos.company-metrics.events",title:"Company metrics events",summary:"Evidence-bearing facts emitted by the governed metrics lifecycle.",kind:"reference",visibility:"public",route:"/docs/tech/companyos/company-metrics/events",tags:["companyos","metrics"],body:`# Company metrics events
+
+Events contain aggregate references only; raw source payloads, prompts, credentials, and direct identifiers are excluded.`};const p={version:"1.0.0",stability:a,owners:[...c],tags:[...s,"company-metrics"]};function e(r,o){return n({meta:{...p,key:r,title:o,description:o},pii:[],payload:new i({name:`${o.replaceAll(" ","")}Payload`,fields:{tenantId:{type:t.ID(),isOptional:!1},workspaceId:{type:t.ID(),isOptional:!1},recordId:{type:t.ID(),isOptional:!1},evidenceRefIds:{type:t.ID(),isOptional:!1,isArray:!0},correlationId:{type:t.ID(),isOptional:!1},occurredAt:{type:t.DateTime(),isOptional:!1}}})})}export const CompanyMetricProposalCreatedEvent=e("companyMetrics.proposal.created","Company Metric Proposal Created"),CompanyMetricSnapshotCreatedEvent=e("companyMetrics.snapshot.created","Company Metric Snapshot Created"),CompanyMetricAlertTriggeredEvent=e("companyMetrics.alert.triggered","Company Metric Alert Triggered"),CompanyMetricDigestPreparedEvent=e("companyMetrics.digest.prepared","Company Metric Digest Prepared"),CompanyMetricDeliveryRecordedEvent=e("companyMetrics.delivery.recorded","Company Metric Delivery Recorded"),CompanyMetricPublicationPublishedEvent=e("companyMetrics.publication.published","Company Metric Publication Published"),CompanyMetricPublicationRevokedEvent=e("companyMetrics.publication.revoked","Company Metric Publication Revoked"),companyMetricsEvents=[CompanyMetricProposalCreatedEvent,CompanyMetricSnapshotCreatedEvent,CompanyMetricAlertTriggeredEvent,CompanyMetricDigestPreparedEvent,CompanyMetricDeliveryRecordedEvent,CompanyMetricPublicationPublishedEvent,CompanyMetricPublicationRevokedEvent];

package/dist/node/companyos/company-metrics/index.js

@@ -0,0 +1 @@
+export*from"./commands.js";export*from"./events.js";export*from"./queries.js";export*from"./registry.js";export*from"./shared.js";

package/dist/node/companyos/company-metrics/queries.js

@@ -0,0 +1,3 @@
+import{ScalarTypeEnum as i,SchemaModel as r}from"@lssm/lib.schema";import{defineQuery as n}from"../../operations/index.js";import{CompanyMetricScopeInputModel as c,companyMetricsCapability as a,companyMetricsMeta as p}from"./shared.js";export const CompanyMetricsQueriesDocBlock={id:"docs.tech.companyos.company-metrics.queries",title:"Company metrics queries",summary:"Read governed metric projections without provider-side reads.",kind:"reference",visibility:"public",route:"/docs/tech/companyos/company-metrics/queries",tags:["companyos","metrics"],body:`# Company metrics queries
+
+Dashboard reads use immutable CompanyOS snapshots. Providers are queried only by collection jobs.`};function e(s,o,t){return n({meta:{...p,key:s,title:o,version:"1.0.0",description:o,goal:"Return only fresh, scope-authorized CompanyOS metric records."},capability:a,io:{input:c,output:new r({name:`${o.replaceAll(" ","")}Output`,fields:{[t]:{type:i.JSONObject(),isOptional:!1,isArray:!0},asOf:{type:i.DateTime(),isOptional:!1},degraded:{type:i.Boolean(),isOptional:!1}}})},policy:{auth:"user",pii:[]}})}export const CompanyMetricsDashboardGetQuery=e("companyMetrics.dashboard.get","Get Company Metrics Dashboard","metrics"),CompanyMetricsDefinitionsListQuery=e("companyMetrics.definitions.list","List Company Metric Definitions","definitions"),CompanyMetricsProposalsListQuery=e("companyMetrics.proposals.list","List Company Metric Proposals","proposals"),CompanyMetricsCollectionRunsListQuery=e("companyMetrics.collectionRuns.list","List Company Metric Collection Runs","runs"),CompanyMetricsPublicationsListQuery=e("companyMetrics.publications.list","List Company Metric Publications","publications"),companyMetricsQueries=[CompanyMetricsDashboardGetQuery,CompanyMetricsDefinitionsListQuery,CompanyMetricsProposalsListQuery,CompanyMetricsCollectionRunsListQuery,CompanyMetricsPublicationsListQuery];

package/dist/node/companyos/company-metrics/registry.js

@@ -0,0 +1 @@
+import*as e from"./commands.js";import*as i from"./events.js";import*as t from"./queries.js";export const companyMetricsOperationRegistry={"companyMetrics.dashboard.get":t.CompanyMetricsDashboardGetQuery,"companyMetrics.definitions.list":t.CompanyMetricsDefinitionsListQuery,"companyMetrics.proposals.list":t.CompanyMetricsProposalsListQuery,"companyMetrics.collectionRuns.list":t.CompanyMetricsCollectionRunsListQuery,"companyMetrics.publications.list":t.CompanyMetricsPublicationsListQuery,"companyMetrics.definition.create":e.CompanyMetricDefinitionCreateCommand,"companyMetrics.definition.update":e.CompanyMetricDefinitionUpdateCommand,"companyMetrics.definition.transition":e.CompanyMetricDefinitionTransitionCommand,"companyMetrics.discovery.start":e.CompanyMetricDiscoveryStartCommand,"companyMetrics.proposal.review":e.CompanyMetricProposalReviewCommand,"companyMetrics.refresh":e.CompanyMetricRefreshCommand,"companyMetrics.alert.configure":e.CompanyMetricAlertConfigureCommand,"companyMetrics.alert.acknowledge":e.CompanyMetricAlertAcknowledgeCommand,"companyMetrics.digest.configure":e.CompanyMetricDigestConfigureCommand,"companyMetrics.publication.prepare":e.CompanyMetricPublicationPrepareCommand,"companyMetrics.publication.approve":e.CompanyMetricPublicationApproveCommand,"companyMetrics.publication.revoke":e.CompanyMetricPublicationRevokeCommand},companyMetricsEventRegistry={"companyMetrics.proposal.created":i.CompanyMetricProposalCreatedEvent,"companyMetrics.snapshot.created":i.CompanyMetricSnapshotCreatedEvent,"companyMetrics.alert.triggered":i.CompanyMetricAlertTriggeredEvent,"companyMetrics.digest.prepared":i.CompanyMetricDigestPreparedEvent,"companyMetrics.delivery.recorded":i.CompanyMetricDeliveryRecordedEvent,"companyMetrics.publication.published":i.CompanyMetricPublicationPublishedEvent,"companyMetrics.publication.revoked":i.CompanyMetricPublicationRevokedEvent};

package/dist/node/companyos/company-metrics/shared.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{COMPANYOS_CAPABILITY as a,COMPANYOS_DOMAIN as n,COMPANYOS_OWNERS as o,COMPANYOS_STABILITY as i,COMPANYOS_TAGS as p}from"../constants.js";export const companyMetricsMeta={domain:n,owners:[...o],tags:[...p,"company-metrics"],stability:i,context:"CompanyOS is canonical. Values are deterministic, tenant-scoped, evidence-backed, and never calculated by AI."},companyMetricsCapability={...a,key:"company-metrics-v1"},CompanyMetricScopeInputModel=new t({name:"CompanyMetricScopeInput",fields:{tenantId:{type:e.ID(),isOptional:!1},workspaceId:{type:e.ID(),isOptional:!1},teamId:{type:e.ID(),isOptional:!0}}}),CompanyMetricMutationInputModel=new t({name:"CompanyMetricMutationInput",fields:{scope:{type:CompanyMetricScopeInputModel,isOptional:!1},payload:{type:e.JSONObject(),isOptional:!1},idempotencyKey:{type:e.ID(),isOptional:!1},correlationId:{type:e.ID(),isOptional:!1}}}),CompanyMetricMutationOutputModel=new t({name:"CompanyMetricMutationOutput",fields:{record:{type:e.JSONObject(),isOptional:!1},evidenceRefIds:{type:e.ID(),isOptional:!1,isArray:!0},replayRef:{type:e.ID(),isOptional:!1}}});

package/dist/node/companyos/constants.js

@@ -0,0 +1 @@
+import{StabilityEnum as o}from"../ownership.js";export const COMPANYOS_DOMAIN="managed-companyos",COMPANYOS_OWNERS=["team-platform"],COMPANYOS_TAGS=["managed-companyos","companyos"],COMPANYOS_STABILITY=o.Experimental,COMPANYOS_CAPABILITY={key:"managed-companyos.core",version:"1.0.0"};

package/dist/node/companyos/index.js

@@ -0,0 +1 @@
+export*from"./auth-production-topology.js";export*from"./booking-surfaces.js";export*from"./calendar-intelligence.js";export*from"./calendar-microsoft-personal-discovery.js";export*from"./calendar-microsoft-personal-http.js";export*from"./calendar-microsoft-personal-selection.js";export*from"./calendar-private-draft-preview.js";export*from"./commands/index.js";export*from"./company-intelligence/index.js";export*from"./company-metrics/index.js";export*from"./constants.js";export*from"./live-workspace-surfaces.js";export*from"./organization-bootstrap.js";export*from"./organization-seed.js";export*from"./organization-self-service.js";export*from"./production-semantics.js";export*from"./projections.js";export*from"./public-composition.js";export*from"./queries/index.js";export*from"./registry.js";export*from"./shell-preferences.js";

package/dist/node/companyos/live-workspace-surfaces.js

@@ -0,0 +1 @@
+export const COMPANYOS_LIVE_WORKSPACE_SURFACES={profile:"/companyos/auth",profileAdministration:"/companyos/admin/public-comms",calendarAdministration:"/companyos/admin/google-calendar"};

package/dist/node/companyos/organization-bootstrap.js

@@ -0,0 +1 @@
+export const ORGANIZATION_BOOTSTRAP_ADMIN_EMAIL="tboutron@lssm.co",ORGANIZATION_BOOTSTRAP_ADMIN_SECONDARY_EMAIL="theo@tryhirly.com",ORGANIZATION_BOOTSTRAP_LEGACY_MANIFEST_REVISION="organization-bootstrap:v1",ORGANIZATION_BOOTSTRAP_MANIFEST_REVISION="organization-bootstrap:v3",ORGANIZATION_SEED_PROFILE_IDS=["legacy-reference","lssm-hirly","core-workspaces","all"],CANONICAL_ORGANIZATION_IDENTITIES=Object.freeze([Object.freeze({slug:"lssm",name:"LSSM",tenantId:"tenant_lssm",workspaceId:"workspace_lssm"}),Object.freeze({slug:"companyos",name:"CompanyOS",tenantId:"tenant_companyos",workspaceId:"workspace_companyos"}),Object.freeze({slug:"ndconsulting",name:"NDconsulting",tenantId:"tenant_ndconsulting_special_ops",workspaceId:"workspace_ndconsulting_special_ops"}),Object.freeze({slug:"hirly",name:"Hirly",tenantId:"tenant_hirly",workspaceId:"workspace_hirly"})]),CANONICAL_ORGANIZATION_SLUGS=Object.freeze(["lssm","companyos","ndconsulting","hirly"]),ORGANIZATION_SEED_PROFILE_SLUGS=Object.freeze({"legacy-reference":Object.freeze(["lssm","companyos","ndconsulting"]),"lssm-hirly":Object.freeze(["lssm","hirly"]),"core-workspaces":Object.freeze(["lssm","companyos","hirly"]),all:CANONICAL_ORGANIZATION_SLUGS});export function resolveCanonicalOrganizationIdentities(n){const o=new Set(ORGANIZATION_SEED_PROFILE_SLUGS[n]);return CANONICAL_ORGANIZATION_IDENTITIES.filter(({slug:e})=>o.has(e))}export const ORGANIZATION_BOOTSTRAP_PHASES=["identity","admin-authority","organization:lssm","authority:lssm","organization:companyos","authority:companyos","organization:ndconsulting","authority:ndconsulting"],CORE_WORKSPACE_MEMBERSHIPS=Object.freeze([Object.freeze({organizationSlug:"lssm",email:ORGANIZATION_BOOTSTRAP_ADMIN_EMAIL,role:"owner",runtimeRole:"enterprise_admin",profileHandle:"theo"}),Object.freeze({organizationSlug:"companyos",email:ORGANIZATION_BOOTSTRAP_ADMIN_EMAIL,role:"owner",runtimeRole:"enterprise_admin",profileHandle:"theo-companyos"}),Object.freeze({organizationSlug:"hirly",email:ORGANIZATION_BOOTSTRAP_ADMIN_SECONDARY_EMAIL,role:"owner",runtimeRole:"enterprise_admin",profileHandle:"theo-hirly"}),Object.freeze({organizationSlug:"hirly",email:"antoine@tryhirly.com",role:"admin",runtimeRole:"enterprise_admin",profileHandle:"antoine-hirly"}),Object.freeze({organizationSlug:"hirly",email:"younes@tryhirly.com",role:"admin",runtimeRole:"enterprise_admin",profileHandle:"younes-hirly"})]);export function resolveOrganizationBootstrapPhases(n){const o=["identity","admin-authority","identity-email:primary","identity-email:secondary","personal-context",...ORGANIZATION_SEED_PROFILE_SLUGS[n].flatMap((e)=>[`organization:${e}`,`authority:${e}`,`membership-email:${e}`,`modules:${e}`])];return new Set(ORGANIZATION_SEED_PROFILE_SLUGS[n]).has("hirly")?[...o,"collaborators:hirly"]:o}

package/dist/node/companyos/organization-seed-contract.js

@@ -0,0 +1 @@
+import{sha256Hex as r}from"@lssm/lib.crypto-utils";import{ORGANIZATION_BOOTSTRAP_MANIFEST_REVISION as a}from"./organization-bootstrap.js";export const ORGANIZATION_SEED_MANIFEST_REVISION="organization-seed:v2",ORGANIZATION_SEED_DIGEST_ALGORITHM="canonical-json-sha256:v1",ORGANIZATION_SEED_COMPATIBILITY=Object.freeze({intent:"additive-minor",preservesBootstrapRevision:a,profileDestinationEvolution:"additive-unavailable-mode"}),ORGANIZATION_SEED_FAMILY_KINDS=["public-profile-booking","special-ops-capability-graph","special-ops-cockpit"];function o(e){if(Array.isArray(e))return e.map(o);if(!e||typeof e!=="object")return e;return Object.fromEntries(Object.entries(e).sort(([n],[i])=>n.localeCompare(i)).map(([n,i])=>[n,o(i)]))}export function organizationSeedSemanticDigest(e){const n=JSON.stringify(o(e.digestProjection));return`sha256:${r(n)}`}

package/dist/node/companyos/organization-seed-manifest.js

@@ -0,0 +1 @@
+import{CANONICAL_ORGANIZATION_IDENTITIES as a}from"./organization-bootstrap.js";import{ORGANIZATION_SEED_DIGEST_ALGORITHM as O,ORGANIZATION_SEED_MANIFEST_REVISION as g}from"./organization-seed-contract.js";import{COMPANYOS_PUBLIC_PROFILE_SEED_FAMILY as I,HIRLY_PUBLIC_PROFILE_SEED_FAMILY as m,LSSM_PUBLIC_PROFILE_SEED_FAMILY as y}from"./organization-seed-profile-manifest.js";export{COMPANYOS_PUBLIC_PROFILE_SEED_FAMILY,HIRLY_PUBLIC_PROFILE_SEED_FAMILY,LSSM_PUBLIC_PROFILE_SEED_FAMILY}from"./organization-seed-profile-manifest.js";const _=Object.freeze(["ai_special_ops_cockpit","ai_ops_sprint","workflow","agents","knowledge","communicationos","replay","evidence","policy"]),l=a[2].workspaceId,S=(o)=>`capnode_${l}_${o}`,n=(o,r,p)=>`capedge_${l}_${o}_${r}_${p}`,s=Object.freeze(["draft_ndconsulting_daily_001","draft_ndconsulting_daily_002"]),d=Object.freeze([`card_${s[0]}`,`card_${s[1]}`]),i=Object.freeze({operations:"actor:ndconsulting:operations_manager",founder:"actor:ndconsulting:founder_approver"}),t=(o,r,p,f)=>Object.freeze({kind:o,entityRef:r,actorRef:p,role:f,idempotencyKey:`organization-seed:v1:${o}:${r}`}),E=Object.freeze({kind:"special-ops-capability-graph",seedVersion:"1.0.0",expectedRowCounts:Object.freeze({workspaces:1,capabilityNodes:9,capabilityEdges:9,legacySeedRuns:1}),digestProjection:Object.freeze({legacySeedKey:"ndconsulting.special_ops",legacySeedVersion:"1.0.0",capabilityIds:_,capabilityNodeIds:Object.freeze(_.map(S)),capabilityEdgeIds:Object.freeze([n("ai_special_ops_cockpit","enables","ai_ops_sprint"),n("ai_ops_sprint","enables","workflow"),n("workflow","gates","agents"),n("agents","gates","policy"),n("workflow","documents","knowledge"),n("workflow","emits","communicationos"),n("workflow","records","replay"),n("replay","proves","evidence"),n("policy","proves","evidence")])})}),u=Object.freeze({kind:"special-ops-cockpit",seedVersion:"1.0.0",expectedRowCounts:Object.freeze({missions:1,drafts:2,reviewCards:2,weeklyReports:1,governanceAssessments:1,evidenceReceipts:9,auditEvents:9}),digestProjection:Object.freeze({missionId:"mission_ndconsulting_canonical_operations",draftIds:s,reviewCardIds:d,weeklyReportId:"weekly_report_ndconsulting_001",governanceAssessmentId:"assessment_ndconsulting_ai_stack_001",operationSequence:Object.freeze([t("create-private-draft",s[0],i.operations,"operations_manager"),t("submit-draft",s[0],i.operations,"operations_manager"),t("decide-review-card",d[0],i.founder,"founder_approver"),t("create-private-draft",s[1],i.operations,"operations_manager"),t("submit-draft",s[1],i.operations,"operations_manager"),t("decide-review-card",d[1],i.founder,"founder_approver"),t("create-weekly-report","weekly_report_ndconsulting_001",i.operations,"operations_manager"),t("publish-weekly-report","weekly_report_ndconsulting_001",i.founder,"founder_approver"),t("record-governance-assessment","assessment_ndconsulting_ai_stack_001",i.founder,"founder_approver")])})}),e=Object.freeze({lssm:Object.freeze({identity:a[0],families:Object.freeze([y])}),companyos:Object.freeze({identity:a[1],families:Object.freeze([I])}),ndconsulting:Object.freeze({identity:a[2],families:Object.freeze([E,u])}),hirly:Object.freeze({identity:a[3],families:Object.freeze([m])})});function c(o,r){return Object.freeze({revision:g,profileId:o,digestAlgorithm:O,organizations:Object.freeze(r)})}export const ORGANIZATION_SEED_MANIFESTS=Object.freeze({"legacy-reference":c("legacy-reference",[e.lssm,e.companyos,e.ndconsulting]),"lssm-hirly":c("lssm-hirly",[e.lssm,e.hirly]),"core-workspaces":c("core-workspaces",[e.lssm,e.companyos,e.hirly]),all:c("all",[e.lssm,e.companyos,e.ndconsulting,e.hirly])}),ORGANIZATION_SEED_MANIFEST=ORGANIZATION_SEED_MANIFESTS["legacy-reference"];export function resolveOrganizationSeedManifest(o){return ORGANIZATION_SEED_MANIFESTS[o]}

package/dist/node/companyos/organization-seed-profile-manifest.js

@@ -0,0 +1 @@
+const c=Object.freeze({profileDrafts:1,profileHandleClaims:1,publishedSnapshots:1,publicHandles:1,auditOutbox:2,draftPublicLinks:2,draftEventTypes:2,publishedEventTypes:0,publicBookingLinks:0,bookingEventTypes:0,calendarConnections:0,schedulingResources:0}),p=Object.freeze({accentToken:"color.brand.accent",surfaceToken:"color.surface.default",radiusToken:"radius.lg"}),i=(e,n,r,t)=>Object.freeze({linkRef:e,label:n,url:r,position:t,active:!0}),o=(e,n,r,t,a,l)=>Object.freeze({eventTypeRef:e,title:n,description:r,durationMinutes:t,position:a,schedulingResourceRef:l,active:!1});function s(e){return Object.freeze({kind:"public-profile-booking",seedVersion:"1.0.0",expectedRowCounts:c,digestProjection:Object.freeze({profileRef:e.profileRef,tenantRef:e.tenantRef,workspaceRef:e.workspaceRef,profileHandle:e.profileHandle,displayName:e.displayName,bio:e.bio,locale:"en",theme:p,links:Object.freeze(e.links),events:Object.freeze(e.events),bookingAvailability:Object.freeze({state:"unavailable"}),eventRefs:Object.freeze(e.events.map(({eventTypeRef:n})=>n)),publicLinkRefs:Object.freeze(e.links.map(({linkRef:n})=>n)),bookingPolicy:"database-local-fail-closed",externalProviderTopology:"not-seeded"})})}export const LSSM_PUBLIC_PROFILE_SEED_FAMILY=s({profileRef:"public-profile:lssm-public-v1",tenantRef:"tenant_lssm",workspaceRef:"workspace_lssm",profileHandle:"lssm",displayName:"LSSM",bio:"AI-native product and operating-system engineering for ambitious teams.",links:[i("profile-link:lssm-company","LSSM","https://lssm.co",0),i("profile-link:lssm-contractspec","ContractSpec","https://contractspec.io",1)],events:[o("event-type:lssm-strategy-session","AI-native strategy session","Clarify the operating model, product boundary, and safest next implementation slice.",45,0,"scheduling-resource:lssm-hybrid-routing"),o("event-type:lssm-ai-workshop","AI-native delivery workshop","Turn a concrete workflow into explicit contracts, evidence, and an implementation plan.",90,1,"scheduling-resource:lssm-hybrid-routing")]}),COMPANYOS_PUBLIC_PROFILE_SEED_FAMILY=s({profileRef:"public-profile:companyos-public-v1",tenantRef:"tenant_companyos",workspaceRef:"workspace_companyos",profileHandle:"companyos",displayName:"CompanyOS",bio:"A permissioned operating graph where people and AI can inspect, approve, replay, and prove work.",links:[i("profile-link:companyos-product","CompanyOS","https://companyos.run",0),i("profile-link:companyos-managed","Managed CompanyOS","https://www.companyos.run",1)],events:[o("event-type:companyos-founder-session","Founder operating-system session","Map the company workflow, authority boundaries, and evidence needed for safe automation.",45,0,"scheduling-resource:companyos-hybrid-routing"),o("event-type:companyos-ops-review","CompanyOS operations review","Review a live operating slice and define the next governed capability to ship.",60,1,"scheduling-resource:companyos-hybrid-routing")]}),HIRLY_PUBLIC_PROFILE_SEED_FAMILY=s({profileRef:"public-profile:hirly-public-v1",tenantRef:"tenant_hirly",workspaceRef:"workspace_hirly",profileHandle:"hirly",displayName:"Hirly",bio:"A focused hiring workspace for teams and candidates.",links:[i("profile-link:hirly-product","Hirly","https://tryhirly.com",0),i("profile-link:hirly-contact","Contact Hirly","https://tryhirly.com",1)],events:[o("event-type:hirly-intro","Hirly introduction","Align on the hiring workflow and the next concrete step.",30,0,"scheduling-resource:hirly-primary"),o("event-type:hirly-working-session","Hirly working session","Work through an active hiring or candidate experience problem.",60,1,"scheduling-resource:hirly-primary")]});

package/dist/node/companyos/organization-seed.js

@@ -0,0 +1 @@
+export*from"./organization-seed-contract.js";export*from"./organization-seed-manifest.js";

package/dist/node/companyos/organization-self-service.js

@@ -0,0 +1 @@
+export const DEFAULT_OWNED_ORGANIZATION_LIMIT=3,DEFAULT_WORKSPACE_MODULES=["opa","communicationos"],ORGANIZATION_JOIN_METHODS=["invitation","verified-domain","access-request"],DEFAULT_ORGANIZATION_JOIN_POLICY=Object.freeze({enabledMethods:Object.freeze(["invitation"]),defaultRole:"member"}),LSSM_HIRLY_OWNER_BINDINGS=Object.freeze([Object.freeze({organizationSlug:"lssm",accountPrimaryEmail:"tboutron@lssm.co",membershipEmail:"tboutron@lssm.co",role:"owner"}),Object.freeze({organizationSlug:"hirly",accountPrimaryEmail:"tboutron@lssm.co",membershipEmail:"theo@tryhirly.com",role:"owner"})]),CORE_WORKSPACE_OWNER_BINDINGS=Object.freeze([LSSM_HIRLY_OWNER_BINDINGS[0],Object.freeze({organizationSlug:"companyos",accountPrimaryEmail:"tboutron@lssm.co",membershipEmail:"tboutron@lssm.co",role:"owner"}),LSSM_HIRLY_OWNER_BINDINGS[1]]),DEFAULT_SELF_SERVICE_PROFILE_POLICY=Object.freeze({profileId:"lssm-hirly",defaultModules:DEFAULT_WORKSPACE_MODULES,ownedOrganizationLimit:DEFAULT_OWNED_ORGANIZATION_LIMIT,joinPolicy:DEFAULT_ORGANIZATION_JOIN_POLICY}),companyOsSelfServiceComposition=Object.freeze({createOrganization:{method:"POST",route:"/api/companyos/self-service/organizations",authority:"verified-user",transaction:"all-authority-or-rollback",ownedOrganizationLimit:DEFAULT_OWNED_ORGANIZATION_LIMIT,physicalAuthorityInput:"forbidden"},joinOrganization:{method:"POST",route:"/api/companyos/self-service/organizations/join",authority:"verified-user",joinedRole:"member",callerSelectedRole:"forbidden"},updateJoinPolicy:{method:"POST",route:"/api/companyos/self-service/organizations/:organizationId/join-policy",authority:"owner",invitationAlwaysEnabled:!0},claimDomain:{method:"POST",route:"/api/companyos/self-service/organizations/:organizationId/domains",authority:"owner",proofRequired:!0,publicEmailDomains:"forbidden"},verifyDomain:{method:"POST",route:"/api/companyos/self-service/organizations/:organizationId/domains/:claimId/verify",authority:"owner",verificationMethod:"dns-txt"},requestAccess:{method:"POST",route:"/api/companyos/self-service/access-requests",authority:"verified-user",joinedRole:"member",callerSelectedRole:"forbidden"},decideAccessRequest:{method:"POST",route:"/api/companyos/self-service/access-requests/:accessRequestId/decision",authority:"owner",joinedRole:"member",callerSelectedRole:"forbidden"}});

package/dist/node/companyos/production-semantics.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";export const CompanyOsServerDerivedAuthorityModel=new t({name:"CompanyOsServerDerivedAuthority",fields:{principalId:{type:e.ID(),isOptional:!1},role:{type:e.String_unsecure(),isOptional:!1},sessionId:{type:e.ID(),isOptional:!1},organizationId:{type:e.ID(),isOptional:!1},resolvedAt:{type:e.DateTime(),isOptional:!1}}}),CompanyOsDurableMutationReceiptModel=new t({name:"CompanyOsDurableMutationReceipt",fields:{receiptId:{type:e.ID(),isOptional:!1},correlationId:{type:e.ID(),isOptional:!1},idempotencyKey:{type:e.ID(),isOptional:!1},idempotentReplay:{type:e.Boolean(),isOptional:!1},committedAt:{type:e.DateTime(),isOptional:!1},evidenceProjectionStatus:{type:e.String_unsecure(),isOptional:!1},evidenceReceiptId:{type:e.ID(),isOptional:!0},replayPacketId:{type:e.ID(),isOptional:!0}}}),CompanyOsReplayProjectionModel=new t({name:"CompanyOsReplayProjection",fields:{status:{type:e.String_unsecure(),isOptional:!1},correlationId:{type:e.ID(),isOptional:!1},receiptId:{type:e.ID(),isOptional:!1},replayPacketId:{type:e.ID(),isOptional:!0},projectedAt:{type:e.DateTime(),isOptional:!0}}}),CompanyOsProductionHealthModel=new t({name:"CompanyOsProductionHealth",fields:{status:{type:e.String_unsecure(),isOptional:!1},database:{type:e.String_unsecure(),isOptional:!1},migrations:{type:e.String_unsecure(),isOptional:!1},evidenceRelay:{type:e.String_unsecure(),isOptional:!1},evidenceDlq:{type:e.String_unsecure(),isOptional:!1},scheduledSnapshot:{type:e.String_unsecure(),isOptional:!1},checkedAt:{type:e.DateTime(),isOptional:!1}}});

package/dist/node/companyos/projections.js

@@ -0,0 +1 @@
+import{defineDataView as p}from"../data-views/index.js";import{defineContractEdge as d,defineContractEntity as c}from"../entities/index.js";import{GraphArtifactSchemaVersionV1 as m,GraphArtifactVersionV1 as l}from"../graph-artifacts/index.js";import{defineTranslation as y}from"../translations/index.js";import{AutonomousWorkOrderTransitionCommand as n}from"./commands/autonomousWorkOrderTransition.command.js";import{WorkflowStartCommand as t}from"./commands/workflowStart.command.js";import{ApprovalReasonsQuery as i}from"./queries/approvalReasons.query.js";import{GraphQueryQuery as a}from"./queries/graphQuery.query.js";export const COMPANYOS_GRAPH_PROJECTION_VERSION="1.0.0",COMPANYOS_AUTONOMOUS_WORK_ORDER_PROJECTION_REFS={workOrder:"companyos:work:autonomous-work-order@1.0.0",requestingActor:"companyos:actor:requesting-operator@1.0.0",operatorSurface:"companyos:surface:work-order-graph@1.0.0",policyDecision:"companyos:safety:approval-policy-decision@1.0.0",evidenceReceipt:"companyos:resource:evidence-receipt@1.0.0",agentPlan:"companyos:work:agent-operation-plan@1.0.0",approvalActor:"companyos:actor:approving-human@1.0.0",resourceRecord:"companyos:resource:work-order-record@1.0.0",adaptiveDecision:"companyos:adaptation:rolemorph-decision@1.0.0",trainingTrace:"companyos:adaptation:sanitized-training-trace@1.0.0"};const g=y({meta:{key:"companyos.graph.projection.i18n",version:COMPANYOS_GRAPH_PROJECTION_VERSION,domain:"managed-companyos",owners:["managed-companyos"]},locale:"en",messages:{"field.label.label":{value:"Label"},"field.ontologyDomain.label":{value:"Domain"},"field.ontologyKind.label":{value:"Kind"},"field.evidenceRefIds.label":{value:"Evidence"}}});export const CompanyOsGraphProjectionDataView=p(g,{meta:{key:"companyos.graph.projection",version:COMPANYOS_GRAPH_PROJECTION_VERSION,title:"CompanyOS Graph Projection",description:"Projects Managed CompanyOS graph query results into ontology-addressable graph nodes, edges, safety refs, and evidence refs.",stability:"experimental",owners:["managed-companyos"],tags:["managed-companyos","companyos","graph","projection"],entity:"companyos.graph",domain:"managed-companyos"},source:{variant:"inline-op",ontologyEnvelopeRef:"companyos:work:autonomous-work-order@1.0.0",primary:{key:a.meta.key,version:a.meta.version},nodesPath:"nodes",edgesPath:"edges"},view:{kind:"graph",layout:{kind:"dag"},nodeKindField:"ontologyKind",edgeKindField:"relation",inspector:"panel",fields:[{key:"label",label:"field.label.label",dataPath:"label",roles:["title"]},{key:"ontologyDomain",label:"field.ontologyDomain.label",dataPath:"ontologyDomain",roles:["tag"]},{key:"ontologyKind",label:"field.ontologyKind.label",dataPath:"ontologyKind",roles:["tag"]},{key:"evidenceRefIds",label:"field.evidenceRefIds.label",dataPath:"evidenceRefIds",roles:["sensitive"]}]},policy:{flags:["operator-review","evidence-addressable"],pii:[]}}),CompanyOsAutonomousWorkOrderEntity=c({meta:{key:"companyos.autonomous-work-order",version:COMPANYOS_GRAPH_PROJECTION_VERSION,title:"Autonomous Work Order",description:"Entity projection for a CompanyOS work order linked to actor, resource, surface, adaptation, and safety ontology refs.",domain:"managed-companyos",stability:"experimental",owners:["managed-companyos"],tags:["managed-companyos","work-order","ontology"]},ontologyRef:COMPANYOS_AUTONOMOUS_WORK_ORDER_PROJECTION_REFS.workOrder,evidenceRefIds:[COMPANYOS_AUTONOMOUS_WORK_ORDER_PROJECTION_REFS.evidenceReceipt],edges:[{id:"companyos-work-order-requires-approval",from:"companyos.autonomous-work-order",to:"companyos.approval-decision",relation:"requires-approval",cardinality:"one-to-many",directed:!0,ontologyRef:COMPANYOS_AUTONOMOUS_WORK_ORDER_PROJECTION_REFS.policyDecision,safetyRefs:{boundary:"high-impact-order",policyDecisionRef:COMPANYOS_AUTONOMOUS_WORK_ORDER_PROJECTION_REFS.policyDecision}}]}),CompanyOsAutonomousWorkOrderApprovalEdge=d({meta:{key:"companyos.autonomous-work-order.approval-edge",version:COMPANYOS_GRAPH_PROJECTION_VERSION,description:"Projection edge that makes work-order approval requirements visible to graph renderers and safety gates.",domain:"managed-companyos",stability:"experimental",owners:["managed-companyos"],tags:["managed-companyos","work-order","approval","ontology"]},edge:{id:"companyos-work-order-approved-by-human",from:"companyos.autonomous-work-order",to:"companyos.approving-human",relation:"approved-by",cardinality:"many-to-one",directed:!0,ontologyRef:COMPANYOS_AUTONOMOUS_WORK_ORDER_PROJECTION_REFS.approvalActor,safetyRefs:{boundary:"high-impact-order",policyDecisionRef:COMPANYOS_AUTONOMOUS_WORK_ORDER_PROJECTION_REFS.policyDecision}}});const s=[{path:"packages/libs/contracts-spec/src/companyos/projections.ts"}],e={owners:["managed-companyos"],tags:["managed-companyos","companyos","projection"],provenance:s},r={provenance:s};export const CompanyOsGraphProjectionArtifact={schemaVersion:m,artifactVersion:l,kind:"contract-graph",generatedAt:"2026-05-17T00:00:00.000Z",workspaceRoot:"contractspec://companyos/graph-projection",redactionMode:"path-only",nodes:[{...e,id:"query:graph.query",key:a.meta.key,kind:"query",label:a.meta.title??"Query Managed Graph",confidence:"explicit"},{...e,id:"data-view:companyos.graph.projection",key:CompanyOsGraphProjectionDataView.meta.key,kind:"data-view",label:CompanyOsGraphProjectionDataView.meta.title,confidence:"explicit"},{...e,id:"command:workflow.start",key:t.meta.key,kind:"command",label:t.meta.title??"Start Managed Workflow",confidence:"explicit"},{...e,id:"command:workOrder.transition",key:n.meta.key,kind:"command",label:n.meta.title??"Transition Autonomous Work Order",confidence:"explicit"},{...e,id:"entity:companyos.autonomous-work-order",key:CompanyOsAutonomousWorkOrderEntity.meta.key,kind:"knowledge",label:CompanyOsAutonomousWorkOrderEntity.meta.title,confidence:"explicit"},{...e,id:"query:approval.reasons",key:i.meta.key,kind:"query",label:i.meta.title??"Approval Reasons",confidence:"explicit"}],edges:[{...r,id:"edge:graph-query-provides-projection-view",from:"query:graph.query",to:"data-view:companyos.graph.projection",kind:"provides",confidence:"explicit",reason:"Graph query output is the inline source for the CompanyOS graph projection data view."},{...r,id:"edge:workflow-start-transitions-work-order",from:"command:workflow.start",to:"command:workOrder.transition",kind:"requires",confidence:"explicit",reason:"Approval-required workflow starts advance through ontology-linked Autonomous Work Order transitions."},{...r,id:"edge:work-order-transition-projects-entity",from:"command:workOrder.transition",to:"entity:companyos.autonomous-work-order",kind:"targets",confidence:"explicit",reason:"Work-order transition output returns a graph-visible state node and evidence receipt for the entity projection."},{...r,id:"edge:workflow-start-requires-approval-reasons",from:"command:workflow.start",to:"query:approval.reasons",kind:"requires",confidence:"explicit",reason:"Approval-required workflow boundaries need typed approval reason refs before dispatch."}],diagnostics:[],counts:{nodes:6,edges:4,diagnostics:0}};export function requiresCompleteCompanyOsProjectionSafetyRefs(o){if(o.boundary!=="mutation"&&o.boundary!=="order"&&o.boundary!=="high-impact-order")return!1;return!(o.policyDecisionRef&&o.authorityScopeRef&&o.approvalOrRefusalRef&&o.auditReceiptRef&&o.redactionStatus&&o.replayOrEvidenceRef&&o.riskTier&&o.occurredAt)}

package/dist/node/companyos/public-composition.js

@@ -0,0 +1 @@
+import{ContextSetActiveCommand as t,OrganizationSetActiveCommand as e,PersonalContextDisableCommand as o,PersonalContextEnsureCommand as n}from"./commands/index.js";import{ContextListQuery as i,OrganizationListQuery as a,PersonalContextProvisioningStatusQuery as r,SessionAuthorityGetQuery as s}from"./queries/index.js";export const companyOsAuthorityRuntimeLifecycleComposition={owner:"application",initialization:"lazy",cardinality:"one-per-host",requestHandlers:"reuse-app-owned-runtime",perRequestConstruction:!1,shutdown:"close-on-host-shutdown"},companyOsPublicAuthorityTransportComposition={credentials:"required",browserOrigin:{whenPresent:"require-exact-trusted-origin",whenAbsent:"deny-browser-transport"},serverOrigin:{whenAbsent:"permit-server-transport"},preflight:{method:"OPTIONS",origin:"require-exact-trusted-origin",untrustedOrAbsent:"deny"},cacheControl:"private, no-store"},companyOsNoActiveOrganizationRecoveryComposition={recoveryOrder:["list-current-memberships","select-and-verify-active-organization","load-workspace-authority"],membershipListWithoutActiveOrganization:"allowed",workspaceAuthorityBeforeVerifiedSelection:"none"},companyOsOrganizationSetActiveCorrectionComposition={providerCookies:{propagation:"all-distinct-set-cookie-values",deduplication:"exact-value-only",coalescing:"forbidden"},postWriteCanonicalRevalidation:{cache:"disabled",source:"authoritative-session-and-membership-store",requiredBeforeSuccess:!0},failures:{postWriteMembershipRejected:{code:"ORGANIZATION_MEMBERSHIP_REQUIRED",http:403},postWriteAuthoritySessionDrift:{code:"AUTHORITY_VERSION_CONFLICT",http:409},authorityStoreFailure:{code:"AUTHORITY_STORE_UNAVAILABLE",http:503}},audit:{event:"organization.activeChanged",owner:"server",mechanism:"database-trigger",transactionBoundary:"same-transaction-as-active-organization-transition",sameOrganization:"no-event",failure:"rollback-and-fail-closed"}},companyOsPublicOrganizationComposition={"organization.list":{contract:a,contractVersion:"1.0.0",api:{method:"GET",route:"/api/companyos/organizations",implementationRef:"api.companyos.organization-list.v1"},runtime:{implementationRef:"runtime.companyos.organization-list.v1",required:!0,lifecycle:companyOsAuthorityRuntimeLifecycleComposition},transport:companyOsPublicAuthorityTransportComposition},"organization.set-active":{contract:e,contractVersion:"1.0.0",api:{method:"POST",route:"/api/companyos/organizations/set-active",implementationRef:"api.companyos.organization-set-active.v1"},runtime:{implementationRef:"runtime.companyos.organization-set-active.v1",required:!0,lifecycle:companyOsAuthorityRuntimeLifecycleComposition},transport:companyOsPublicAuthorityTransportComposition}},companyOsPublicContextComposition={"personal-context.provisioning-status":{contract:r,contractVersion:"1.0.0",api:{method:"GET",route:"/api/companyos/personal-context/provisioning-status",implementationRef:"api.companyos.personal-context-provisioning-status.v1"},runtime:{implementationRef:"runtime.companyos.personal-context-provisioning-status.v1",required:!0,lifecycle:companyOsAuthorityRuntimeLifecycleComposition},transport:companyOsPublicAuthorityTransportComposition},"personal-context.ensure":{contract:n,contractVersion:"1.0.0",api:{method:"POST",route:"/api/companyos/personal-context/ensure",implementationRef:"api.companyos.personal-context-ensure.v1"},runtime:{implementationRef:"runtime.companyos.personal-context-ensure.v1",required:!0,lifecycle:companyOsAuthorityRuntimeLifecycleComposition},transport:companyOsPublicAuthorityTransportComposition},"personal-context.disable":{contract:o,contractVersion:"1.0.0",api:{method:"POST",route:"/api/companyos/personal-context/disable",implementationRef:"api.companyos.personal-context-disable.v1"},runtime:{implementationRef:"runtime.companyos.personal-context-disable.v1",required:!0,lifecycle:companyOsAuthorityRuntimeLifecycleComposition},transport:companyOsPublicAuthorityTransportComposition},"context.list":{contract:i,contractVersion:"1.0.0",api:{method:"GET",route:"/api/companyos/contexts",implementationRef:"api.companyos.context-list.v1"},runtime:{implementationRef:"runtime.companyos.context-list.v1",required:!0,lifecycle:companyOsAuthorityRuntimeLifecycleComposition},transport:companyOsPublicAuthorityTransportComposition},"context.set-active":{contract:t,contractVersion:"1.0.0",api:{method:"POST",route:"/api/companyos/contexts/set-active",implementationRef:"api.companyos.context-set-active.v1"},runtime:{implementationRef:"runtime.companyos.context-set-active.v1",required:!0,lifecycle:companyOsAuthorityRuntimeLifecycleComposition},transport:companyOsPublicAuthorityTransportComposition}},companyOsCanonicalAuthorityRefreshComposition={contract:s,contractVersion:"1.0.0",api:{method:"GET",route:"/api/companyos/auth/authority",implementationRef:"api.companyos.session-authority-get.v1"},runtime:{implementationRef:"runtime.companyos.session-authority-get.v1",required:!0,lifecycle:companyOsAuthorityRuntimeLifecycleComposition},transport:companyOsPublicAuthorityTransportComposition};

package/dist/node/companyos/queries/approvalReasons.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as a}from"@lssm/lib.schema";import{defineQuery as o}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as t,COMPANYOS_DOMAIN as p,COMPANYOS_OWNERS as s,COMPANYOS_STABILITY as n,COMPANYOS_TAGS as i}from"../constants.js";const r=new a({name:"ManagedApprovalReason",fields:{code:{type:e.String_unsecure(),isOptional:!1},label:{type:e.String_unsecure(),isOptional:!1},description:{type:e.String_unsecure(),isOptional:!0},severity:{type:e.String_unsecure(),isOptional:!0}}}),l=new a({name:"CompanyOsApprovalReasonsInput",fields:{}}),c=new a({name:"CompanyOsApprovalReasonsOutput",fields:{codes:{type:r,isOptional:!1,isArray:!0}}});export const ApprovalReasonsQuery=o({meta:{key:"approval.reasons",title:"List Approval Reasons",version:"1.0.0",description:"Return the static catalog of Managed CompanyOS approval reason codes.",goal:"Give operators a typed enum surface for approval/deny decisions.",context:"Static catalog backed by `lib.auth-os` policy taxonomy; cache safely.",domain:p,owners:[...s],tags:[...i,"approval","policy"],stability:n},capability:{...t},io:{input:l,output:c},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/builderEvidenceReceiptGet.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{defineQuery as t}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as r,COMPANYOS_DOMAIN as n,COMPANYOS_OWNERS as o,COMPANYOS_STABILITY as p,COMPANYOS_TAGS as a}from"../constants.js";export const ManagedBuilderEvidenceReceiptModel=new i({name:"ManagedBuilderEvidenceReceipt",fields:{receiptId:{type:e.ID(),isOptional:!1},correlationId:{type:e.ID(),isOptional:!1},hash:{type:e.String_unsecure(),isOptional:!1},issuer:{type:e.String_unsecure(),isOptional:!1},issuedAt:{type:e.DateTime(),isOptional:!1},scope:{type:e.String_unsecure(),isOptional:!1},payload:{type:e.JSONObject(),isOptional:!1}}});const d=new i({name:"CompanyOsBuilderEvidenceReceiptGetInput",fields:{receiptId:{type:e.ID(),isOptional:!0},correlationId:{type:e.ID(),isOptional:!0}}}),c=new i({name:"CompanyOsBuilderEvidenceReceiptGetOutput",fields:{receipt:{type:ManagedBuilderEvidenceReceiptModel,isOptional:!1}}});export const BuilderEvidenceReceiptGetQuery=t({meta:{key:"builder.evidence.receipt.get",title:"Get Managed Builder Evidence Receipt",version:"1.0.0",description:"Fetch a Managed CompanyOS Builder evidence receipt by receipt or correlation id.",goal:"Expose Builder receipt evidence to REST, MCP, Workbench, and release capsule consumers without leaking raw provider payloads.",context:"Builder evidence remains scoped to Builder and does not replace agent/workflow evidence surfaces.",domain:n,owners:[...o],tags:[...a,"builder","evidence","receipt"],stability:p},capability:{...r},io:{input:d,output:c,errors:{BUILDER_RECEIPT_NOT_FOUND:{description:"No Builder receipt exists for the requested id.",http:404,when:"receiptId and correlationId do not resolve to Builder evidence."}}},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/builderReleaseCapsuleGet.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as a}from"@lssm/lib.schema";import{defineQuery as t}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as s,COMPANYOS_DOMAIN as l,COMPANYOS_OWNERS as i,COMPANYOS_STABILITY as r,COMPANYOS_TAGS as n}from"../constants.js";export const ManagedBuilderReleaseCapsuleModel=new a({name:"ManagedBuilderReleaseCapsule",fields:{capsuleId:{type:e.ID(),isOptional:!1},correlationId:{type:e.ID(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},statement:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},evidence:{type:e.JSONObject(),isOptional:!1}}});const o=new a({name:"CompanyOsBuilderReleaseCapsuleGetInput",fields:{capsuleId:{type:e.ID(),isOptional:!0},correlationId:{type:e.ID(),isOptional:!0}}}),p=new a({name:"CompanyOsBuilderReleaseCapsuleGetOutput",fields:{capsule:{type:ManagedBuilderReleaseCapsuleModel,isOptional:!1}}});export const BuilderReleaseCapsuleGetQuery=t({meta:{key:"builder.release.capsule.get",title:"Get Managed Builder Release Capsule",version:"1.0.0",description:"Fetch a Managed CompanyOS Builder release capsule with readiness, replay, receipt, and non-goal evidence.",goal:"Provide a durable closure packet that records fail-closed blockers and confirms Builder remains distinct from agent/workflow.",context:"Release capsules are evidence summaries, not live provider dispatch claims.",domain:l,owners:[...i],tags:[...n,"builder","release","evidence"],stability:r},capability:{...s},io:{input:o,output:p,errors:{BUILDER_CAPSULE_NOT_FOUND:{description:"No Builder release capsule exists for the requested id.",http:404,when:"capsuleId and correlationId do not resolve to Builder release evidence."}}},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/builderReplayPacketGet.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as a}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as i,COMPANYOS_DOMAIN as r,COMPANYOS_OWNERS as l,COMPANYOS_STABILITY as p,COMPANYOS_TAGS as n}from"../constants.js";export const ManagedBuilderReplayEventModel=new t({name:"ManagedBuilderReplayEvent",fields:{eventId:{type:e.ID(),isOptional:!1},kind:{type:e.String_unsecure(),isOptional:!1},occurredAt:{type:e.DateTime(),isOptional:!1},payload:{type:e.JSONObject(),isOptional:!1}}});const o=new t({name:"CompanyOsBuilderReplayPacketGetInput",fields:{replayId:{type:e.ID(),isOptional:!0},correlationId:{type:e.ID(),isOptional:!0}}}),s=new t({name:"CompanyOsBuilderReplayPacketGetOutput",fields:{replayId:{type:e.ID(),isOptional:!1},correlationId:{type:e.ID(),isOptional:!1},events:{type:ManagedBuilderReplayEventModel,isOptional:!1,isArray:!0},hash:{type:e.String_unsecure(),isOptional:!1}}});export const BuilderReplayPacketGetQuery=a({meta:{key:"builder.replay.packet.get",title:"Get Managed Builder Replay Packet",version:"1.0.0",description:"Fetch the deterministic replay packet for a Managed CompanyOS Builder run.",goal:"Make Builder execution replay evidence available across MCP, REST, Workbench, and release capsules.",context:"Replay packets are Builder-scoped and keep Builder distinct from agent/workflow replay surfaces.",domain:r,owners:[...l],tags:[...n,"builder","replay","evidence"],stability:p},capability:{...i},io:{input:o,output:s,errors:{BUILDER_REPLAY_NOT_FOUND:{description:"No Builder replay packet exists for the requested id.",http:404,when:"replayId and correlationId do not resolve to Builder replay evidence."}}},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/contextList.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as n}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as i,COMPANYOS_DOMAIN as s,COMPANYOS_OWNERS as a,COMPANYOS_STABILITY as o,COMPANYOS_TAGS as r}from"../constants.js";export const ManagedContextWorkspaceModel=new t({name:"ManagedContextWorkspace",fields:{workspaceRef:{type:e.ID(),isOptional:!1},displayName:{type:e.String_unsecure(),isOptional:!1},isActive:{type:e.Boolean(),isOptional:!1}}}),ManagedContextTeamModel=new t({name:"ManagedContextTeam",fields:{teamRef:{type:e.ID(),isOptional:!1},displayName:{type:e.String_unsecure(),isOptional:!1},isActive:{type:e.Boolean(),isOptional:!1},workspaces:{type:ManagedContextWorkspaceModel,isOptional:!1,isArray:!0}}}),ManagedContextModel=new t({name:"ManagedContext",fields:{contextRef:{type:e.ID(),isOptional:!1},kind:{type:e.String_unsecure(),isOptional:!1},displayLabel:{type:e.String_unsecure(),isOptional:!1},isActive:{type:e.Boolean(),isOptional:!1},teams:{type:ManagedContextTeamModel,isOptional:!1,isArray:!0},workspaces:{type:ManagedContextWorkspaceModel,isOptional:!1,isArray:!0}}});const p=new t({name:"CompanyOsContextListInput",fields:{}}),l=new t({name:"CompanyOsContextListOutput",fields:{activeContextRef:{type:e.ID(),isOptional:!0},activeTeamRef:{type:e.ID(),isOptional:!0},activeWorkspaceRef:{type:e.ID(),isOptional:!0},contexts:{type:ManagedContextModel,isOptional:!1,isArray:!0},authorityToken:{type:e.String_unsecure(),isOptional:!1},expiresAt:{type:e.DateTime(),isOptional:!1}}});export const ContextListQuery=n({meta:{key:"context.list",title:"List Current CompanyOS Contexts",version:"1.0.0",description:"List current personal and company contexts with authorized nested teams and workspaces.",goal:"Expose one authoritative selector projection without returning physical tenant identifiers or accepting browser-defined authority.",context:"The server freshly validates the session, organization memberships, enabled bindings and grants, team memberships and grants, and workspace ownership. Opaque references are locators, not credentials. The returned five-minute one-use authority token binds the current session, user, context versions, nonce, and expiry and is stored only as a digest.",domain:s,owners:[...a],tags:[...r,"context","team","workspace","authority"],stability:o},capability:{...i},io:{input:p,output:l,errors:{SESSION_REQUIRED:{description:"A current authenticated session is required.",http:401,when:"The session is absent, expired, or revoked."},AUTHORITY_STORE_UNAVAILABLE:{description:"Current context authority cannot be verified.",http:503,when:"The identity, grant, team, workspace, or token store is unavailable."}}},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/designPartnerReadinessGet.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as s}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as n,COMPANYOS_DOMAIN as a,COMPANYOS_OWNERS as r,COMPANYOS_STABILITY as o,COMPANYOS_TAGS as i}from"../constants.js";import{CompanyOsProductionHealthModel as p,CompanyOsReplayProjectionModel as d}from"../production-semantics.js";const c=new t({name:"CompanyOsDesignPartnerReadinessGetInput",fields:{tenantId:{type:e.ID(),isOptional:!1},workspaceId:{type:e.ID(),isOptional:!1},scenarioId:{type:e.ID(),isOptional:!1},correlationId:{type:e.ID(),isOptional:!0}}}),l=new t({name:"CompanyOsDesignPartnerReadinessGetOutput",fields:{readinessState:{type:e.JSONObject(),isOptional:!1},evidenceReceiptOperationKey:{type:e.String_unsecure(),isOptional:!1},replayPacketOperationKey:{type:e.String_unsecure(),isOptional:!1},productionReadinessClaimed:{type:e.Boolean(),isOptional:!1}}});export const DesignPartnerReadinessGetQuery=s({meta:{key:"designPartnerReadiness.get",title:"Get Design Partner Readiness",version:"1.0.0",description:"Fetch a Managed CompanyOS design-partner readiness state by tenant, workspace, and scenario.",goal:"Expose design-partner readiness as a by-reference contract surface that reuses evidence receipts and replay packets without duplicating receipt systems.",context:"Readiness links to evidence.get-receipt and replay.get-packet operation keys and remains a design-partner checkpoint, not a production readiness claim.",domain:a,owners:[...r],tags:[...i,"design-partner","readiness"],stability:o},capability:{...n},io:{input:c,output:l,errors:{READINESS_NOT_FOUND:{description:"No design-partner readiness state exists for the tenant/workspace/scenario tuple.",http:404,when:"The scenario is unknown or not visible to the caller scope."}}},policy:{auth:"user",pii:[]}});const u=new t({name:"CompanyOsDesignPartnerReadinessGetV2Input",fields:{tenantId:{type:e.ID(),isOptional:!1},workspaceId:{type:e.ID(),isOptional:!1},scenarioId:{type:e.ID(),isOptional:!1}}}),y=new t({name:"CompanyOsDesignPartnerReadinessGetV2Output",fields:{tenantId:{type:e.ID(),isOptional:!1},workspaceId:{type:e.ID(),isOptional:!1},scenarioId:{type:e.ID(),isOptional:!1},decisionPacketId:{type:e.ID(),isOptional:!1},decisionPacketVersionId:{type:e.ID(),isOptional:!1},readinessState:{type:e.JSONObject(),isOptional:!1},evidenceProjectionStatus:{type:e.String_unsecure(),isOptional:!1},evidenceReceiptOperationKey:{type:e.String_unsecure(),isOptional:!1},replayPacketOperationKey:{type:e.String_unsecure(),isOptional:!1},replay:{type:d,isOptional:!1},health:{type:p,isOptional:!1},productionReadinessClaimed:{type:e.Boolean(),isOptional:!1}}});export const DesignPartnerReadinessGetQueryV2=s({meta:{...DesignPartnerReadinessGetQuery.meta,key:"designPartnerReadiness.get",version:"2.0.0",description:"Fetch a durable design-partner readiness projection by validated tenant, workspace, scenario, and packet-version scope.",goal:"Expose persisted readiness, immutable replay linkage, pending evidence state, and fail-closed production health without trusting browser-selected authority.",context:"Tenant comes from the verified organization session. Workspace and scenario come from the API-owned admitted-scope membership policy; browser query parameters can only assert an exact match and never select authority. Mismatches fail without existence leaks. The API returns recorded_evidence_pending until the immutable evidence/replay projection is visible. Production proof reads resolve the durable mutation receipt by receiptId and immutable replay events by the server-issued correlationId; neither surface accepts writes.",tags:[...i,"design-partner","readiness","production-v2"]},capability:{...n},io:{input:u,output:y,errors:{READINESS_NOT_FOUND:{description:"No visible readiness state exists for the validated tenant/workspace/scenario tuple.",http:404,when:"The scoped scenario is unknown or not visible to server-derived authority."},SCOPE_NOT_ALLOWED:{description:"Verified session authority does not include the requested scope.",http:403,when:"Server-derived membership does not include tenant/workspace/scenario."},TENANT_DISABLED:{description:"The server-owned tenant kill switch disables governed readiness access.",http:403,when:"Verified session tenant is disabled by the API authority."}}},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/evidenceGetReceipt.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as i}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as n,COMPANYOS_DOMAIN as a,COMPANYOS_OWNERS as o,COMPANYOS_STABILITY as p,COMPANYOS_TAGS as c}from"../constants.js";export const ManagedEvidenceReceiptModel=new t({name:"ManagedEvidenceReceipt",fields:{receiptId:{type:e.ID(),isOptional:!1},correlationId:{type:e.ID(),isOptional:!1},hash:{type:e.String_unsecure(),isOptional:!1},issuer:{type:e.String_unsecure(),isOptional:!1},issuedAt:{type:e.DateTime(),isOptional:!1},payload:{type:e.JSONObject(),isOptional:!0}}});const r=new t({name:"CompanyOsEvidenceGetReceiptInput",fields:{correlationId:{type:e.ID(),isOptional:!1}}}),s=new t({name:"CompanyOsEvidenceGetReceiptOutput",fields:{receipt:{type:ManagedEvidenceReceiptModel,isOptional:!1}}});export const EvidenceGetReceiptQuery=i({meta:{key:"evidence.get-receipt",title:"Get Evidence Receipt",version:"1.0.0",description:"Fetch the evidence receipt issued for a Managed CompanyOS workflow run.",goal:"Provide tamper-evident proof for FR8 audit and customer trust workflows.",context:"Backed by `bundle.managed-companyos` `createManagedEvidenceReceipt`; hash binding is canonical.",domain:a,owners:[...o],tags:[...c,"evidence","audit"],stability:p},capability:{...n},io:{input:r,output:s,errors:{RECEIPT_NOT_FOUND:{description:"No evidence receipt exists for the given correlation id.",http:404,when:"correlationId is unknown or its evidence has been redacted."}}},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/evidenceVerifyHash.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as i}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as n,COMPANYOS_DOMAIN as a,COMPANYOS_OWNERS as r,COMPANYOS_STABILITY as s,COMPANYOS_TAGS as o}from"../constants.js";const p=new t({name:"CompanyOsEvidenceVerifyHashInput",fields:{receiptId:{type:e.ID(),isOptional:!1},expectedHash:{type:e.String_unsecure(),isOptional:!1}}}),c=new t({name:"CompanyOsEvidenceVerifyHashOutput",fields:{match:{type:e.Boolean(),isOptional:!1},computedHash:{type:e.String_unsecure(),isOptional:!1},verifiedAt:{type:e.DateTime(),isOptional:!1}}});export const EvidenceVerifyHashQuery=i({meta:{key:"evidence.verify-hash",title:"Verify Evidence Hash",version:"1.0.0",description:"Verify that an evidence receipt resolves to the expected hash value.",goal:"Enable customers to prove their evidence packet has not been tampered with.",context:"Idempotent; never mutates the underlying receipt or replay packet.",domain:a,owners:[...r],tags:[...o,"evidence","audit"],stability:s},capability:{...n},io:{input:p,output:c,errors:{RECEIPT_NOT_FOUND:{description:"The referenced receipt does not exist.",http:404,when:"receiptId is unknown."}}},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/graphQuery.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as r}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as i,COMPANYOS_DOMAIN as n,COMPANYOS_OWNERS as a,COMPANYOS_STABILITY as p,COMPANYOS_TAGS as s}from"../constants.js";export const ManagedGraphNodeModel=new t({name:"ManagedGraphNode",fields:{nodeId:{type:e.ID(),isOptional:!1},type:{type:e.String_unsecure(),isOptional:!1},label:{type:e.String_unsecure(),isOptional:!0},attributes:{type:e.JSONObject(),isOptional:!0},ontologyRef:{type:e.String_unsecure(),isOptional:!0},ontologyDomain:{type:e.String_unsecure(),isOptional:!0},ontologyKind:{type:e.String_unsecure(),isOptional:!0},evidenceRefIds:{type:e.String_unsecure(),isOptional:!0,isArray:!0},safety:{type:e.JSONObject(),isOptional:!0}}}),ManagedGraphEdgeModel=new t({name:"ManagedGraphEdge",fields:{edgeId:{type:e.ID(),isOptional:!1},type:{type:e.String_unsecure(),isOptional:!1},fromNodeId:{type:e.ID(),isOptional:!1},toNodeId:{type:e.ID(),isOptional:!1},attributes:{type:e.JSONObject(),isOptional:!0},ontologyRef:{type:e.String_unsecure(),isOptional:!0},relation:{type:e.String_unsecure(),isOptional:!0},evidenceRefIds:{type:e.String_unsecure(),isOptional:!0,isArray:!0},safety:{type:e.JSONObject(),isOptional:!0}}});const o=new t({name:"CompanyOsGraphQueryInput",fields:{tenantId:{type:e.ID(),isOptional:!1},nodeTypes:{type:e.String_unsecure(),isOptional:!0,isArray:!0},edgeTypes:{type:e.String_unsecure(),isOptional:!0,isArray:!0},limit:{type:e.Int_unsecure(),isOptional:!0}}}),u=new t({name:"CompanyOsGraphQueryOutput",fields:{nodes:{type:ManagedGraphNodeModel,isOptional:!1,isArray:!0},edges:{type:ManagedGraphEdgeModel,isOptional:!1,isArray:!0}}});export const GraphQueryQuery=r({meta:{key:"graph.query",title:"Query Managed Graph",version:"1.0.0",description:"Read RBAC-redacted slices of the Managed CompanyOS knowledge graph.",goal:"Surface tenant graph state for operator tooling and copilots.",context:"Output is filtered by `lib.auth-os` RBAC; sensitive attributes are redacted before return.",domain:n,owners:[...a],tags:[...s,"graph"],stability:p},capability:{...i},io:{input:o,output:u},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/graphQueryByPolicy.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{defineQuery as o}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as t,COMPANYOS_DOMAIN as n,COMPANYOS_OWNERS as a,COMPANYOS_STABILITY as p,COMPANYOS_TAGS as r}from"../constants.js";import{ManagedGraphNodeModel as s}from"./graphQuery.query.js";const y=new i({name:"ManagedGraphDecision",fields:{decisionId:{type:e.ID(),isOptional:!1},policyId:{type:e.ID(),isOptional:!1},effect:{type:e.String_unsecure(),isOptional:!1},nodeId:{type:e.ID(),isOptional:!0},reason:{type:e.String_unsecure(),isOptional:!0}}}),c=new i({name:"CompanyOsGraphQueryByPolicyInput",fields:{tenantId:{type:e.ID(),isOptional:!1},policyId:{type:e.ID(),isOptional:!1}}}),l=new i({name:"CompanyOsGraphQueryByPolicyOutput",fields:{nodes:{type:s,isOptional:!1,isArray:!0},decisions:{type:y,isOptional:!1,isArray:!0}}});export const GraphQueryByPolicyQuery=o({meta:{key:"graph.query-by-policy",title:"Query Graph by Policy",version:"1.0.0",description:"Return graph nodes scoped to a specific policy alongside the decisions that affected them.",goal:"Surface policy/decision attribution for FR6 governance views.",context:"Decisions are computed by `lib.auth-os` policy engine.",domain:n,owners:[...a],tags:[...r,"graph","policy"],stability:p},capability:{...t},io:{input:c,output:l,errors:{POLICY_NOT_FOUND:{description:"The referenced policy does not exist for this tenant.",http:404,when:"policyId is unknown or scoped to a different tenant."}}},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/healthApi.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as a}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as n,COMPANYOS_DOMAIN as o,COMPANYOS_OWNERS as i,COMPANYOS_STABILITY as p,COMPANYOS_TAGS as s}from"../constants.js";const r=new t({name:"CompanyOsHealthApiInput",fields:{}}),l=new t({name:"CompanyOsHealthApiOutput",fields:{status:{type:e.String_unsecure(),isOptional:!1},owner:{type:e.String_unsecure(),isOptional:!1},p95Ms:{type:e.Int_unsecure(),isOptional:!0},errorRate:{type:e.Float_unsecure(),isOptional:!0},checkedAt:{type:e.DateTime(),isOptional:!1}}});export const HealthApiQuery=a({meta:{key:"health.api",title:"API Health Check",version:"1.0.0",description:"Return the Managed CompanyOS API health snapshot.",goal:"Expose anonymous API SLO health for operator dashboards and MCP probes.",context:"Wraps `bundle.managed-companyos` `createManagedStatusChecks` filtered by owner=api.",domain:o,owners:[...i],tags:[...s,"health","observability"],stability:p},capability:{...n},io:{input:r,output:l},policy:{auth:"anonymous",pii:[]}});

package/dist/node/companyos/queries/healthWebsocket.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as o}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as a,COMPANYOS_DOMAIN as n,COMPANYOS_OWNERS as s,COMPANYOS_STABILITY as i,COMPANYOS_TAGS as p}from"../constants.js";const r=new t({name:"CompanyOsHealthWebsocketInput",fields:{}}),c=new t({name:"CompanyOsHealthWebsocketOutput",fields:{status:{type:e.String_unsecure(),isOptional:!1},owner:{type:e.String_unsecure(),isOptional:!1},connections:{type:e.Int_unsecure(),isOptional:!1},reconnectBackoffMs:{type:e.Int_unsecure(),isOptional:!0},checkedAt:{type:e.DateTime(),isOptional:!1}}});export const HealthWebsocketQuery=o({meta:{key:"health.websocket",title:"Websocket Health Check",version:"1.0.0",description:"Return the Managed CompanyOS websocket transport health snapshot.",goal:"Expose anonymous websocket health for operator dashboards and MCP probes.",context:"Wraps `bundle.managed-companyos` `createManagedStatusChecks` filtered by owner=websocket.",domain:n,owners:[...s],tags:[...p,"health","observability"],stability:i},capability:{...a},io:{input:r,output:c},policy:{auth:"anonymous",pii:[]}});

package/dist/node/companyos/queries/healthWorker.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as a}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as n,COMPANYOS_DOMAIN as o,COMPANYOS_OWNERS as r,COMPANYOS_STABILITY as i,COMPANYOS_TAGS as s}from"../constants.js";export const ManagedHealthJobModel=new t({name:"ManagedHealthJob",fields:{jobId:{type:e.ID(),isOptional:!1},kind:{type:e.String_unsecure(),isOptional:!1},state:{type:e.String_unsecure(),isOptional:!1},lastRunAt:{type:e.DateTime(),isOptional:!0},nextRunAt:{type:e.DateTime(),isOptional:!0}}});const l=new t({name:"CompanyOsHealthWorkerInput",fields:{}}),p=new t({name:"CompanyOsHealthWorkerOutput",fields:{status:{type:e.String_unsecure(),isOptional:!1},owner:{type:e.String_unsecure(),isOptional:!1},jobs:{type:ManagedHealthJobModel,isOptional:!1,isArray:!0},checkedAt:{type:e.DateTime(),isOptional:!1}}});export const HealthWorkerQuery=a({meta:{key:"health.worker",title:"Worker Health Check",version:"1.0.0",description:"Return the Managed CompanyOS worker health snapshot.",goal:"Provide an anonymous health probe MCP and `/health` callers can consume.",context:"Wraps `bundle.managed-companyos` `createManagedStatusChecks` filtered by owner=worker.",domain:o,owners:[...r],tags:[...s,"health","observability"],stability:i},capability:{...n},io:{input:l,output:p},policy:{auth:"anonymous",pii:[]}});

package/dist/node/companyos/queries/index.js

@@ -0,0 +1 @@
+export*from"./approvalReasons.query.js";export*from"./builderEvidenceReceiptGet.query.js";export*from"./builderReleaseCapsuleGet.query.js";export*from"./builderReplayPacketGet.query.js";export*from"./contextList.query.js";export*from"./designPartnerReadinessGet.query.js";export*from"./evidenceGetReceipt.query.js";export*from"./evidenceVerifyHash.query.js";export*from"./graphQuery.query.js";export*from"./graphQueryByPolicy.query.js";export*from"./healthApi.query.js";export*from"./healthWebsocket.query.js";export*from"./healthWorker.query.js";export*from"./integrationListProviders.query.js";export*from"./integrationStatus.query.js";export*from"./organizationList.query.js";export*from"./personalBriefingCalendarsList.query.js";export*from"./personalBriefingStatus.query.js";export*from"./personalContextProvisioningStatus.query.js";export*from"./personalDailyOperations.query.js";export*from"./replayGetPacket.query.js";export*from"./replayListByTenant.query.js";export*from"./sessionAuthorityGet.query.js";export*from"./shellPreferencesGet.query.js";export*from"./tenantGet.query.js";export*from"./tenantList.query.js";export*from"./workflowGetStatus.query.js";export*from"./workflowList.query.js";export*from"./workspaceList.query.js";

package/dist/node/companyos/queries/integrationListProviders.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as i}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as n,COMPANYOS_DOMAIN as a,COMPANYOS_OWNERS as o,COMPANYOS_STABILITY as r,COMPANYOS_TAGS as s}from"../constants.js";const p=new t({name:"ManagedIntegrationOption",fields:{providerKey:{type:e.String_unsecure(),isOptional:!1},displayName:{type:e.String_unsecure(),isOptional:!1},mode:{type:e.String_unsecure(),isOptional:!1},availability:{type:e.String_unsecure(),isOptional:!1},description:{type:e.String_unsecure(),isOptional:!0}}}),d=new t({name:"CompanyOsIntegrationListProvidersInput",fields:{}}),l=new t({name:"CompanyOsIntegrationListProvidersOutput",fields:{providers:{type:p,isOptional:!1,isArray:!0}}});export const IntegrationListProvidersQuery=i({meta:{key:"integration.list-providers",title:"List Managed Integration Providers",version:"1.0.0",description:"List integration providers available in the Managed CompanyOS catalog.",goal:"Provide a discoverable provider catalog for managed and BYOK flows.",context:"Read-only catalog backed by `bundle.managed-companyos` integration-ownership data.",domain:a,owners:[...o],tags:[...s,"integration"],stability:r},capability:{...n},io:{input:d,output:l},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/integrationStatus.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as e}from"@lssm/lib.schema";import{defineQuery as n}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as a,COMPANYOS_DOMAIN as i,COMPANYOS_OWNERS as o,COMPANYOS_STABILITY as s,COMPANYOS_TAGS as r}from"../constants.js";const p=new e({name:"ManagedIntegrationSync",fields:{integrationId:{type:t.ID(),isOptional:!1},providerKey:{type:t.String_unsecure(),isOptional:!1},state:{type:t.String_unsecure(),isOptional:!1},lastSyncedAt:{type:t.DateTime(),isOptional:!0},nextRunAt:{type:t.DateTime(),isOptional:!0}}}),u=new e({name:"CompanyOsIntegrationStatusInput",fields:{tenantId:{type:t.ID(),isOptional:!1},integrationId:{type:t.ID(),isOptional:!0}}}),l=new e({name:"CompanyOsIntegrationStatusOutput",fields:{status:{type:t.String_unsecure(),isOptional:!1},syncs:{type:p,isOptional:!1,isArray:!0}}});export const IntegrationStatusQuery=n({meta:{key:"integration.status",title:"Get Integration Status",version:"1.0.0",description:"Return integration sync state for one or all integrations on a tenant.",goal:"Surface sync health for managed and BYOK integrations in one place.",context:"Powers status dashboards and the MCP `integration.status` tool.",domain:i,owners:[...o],tags:[...r,"integration","observability"],stability:s},capability:{...a},io:{input:u,output:l},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/organizationList.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{defineQuery as t}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as a,COMPANYOS_DOMAIN as n,COMPANYOS_OWNERS as r,COMPANYOS_STABILITY as o,COMPANYOS_TAGS as s}from"../constants.js";export const ManagedOrganizationMembershipModel=new i({name:"ManagedOrganizationMembership",fields:{organizationId:{type:e.ID(),isOptional:!1},slug:{type:e.String_unsecure(),isOptional:!1},displayName:{type:e.String_unsecure(),isOptional:!1},membershipId:{type:e.ID(),isOptional:!1},membershipRole:{type:e.String_unsecure(),isOptional:!1},isActive:{type:e.Boolean(),isOptional:!1}}});const p=new i({name:"CompanyOsOrganizationListInput",fields:{}}),l=new i({name:"CompanyOsOrganizationListOutput",fields:{activeOrganizationId:{type:e.ID(),isOptional:!0},organizations:{type:ManagedOrganizationMembershipModel,isOptional:!1,isArray:!0}}});export const OrganizationListQuery=t({meta:{key:"organization.list",title:"List Current Organizations",version:"1.0.0",description:"List organizations for which the authenticated principal has current membership.",goal:"Expose the verified organization choices used by CompanyOS selectors without accepting caller-selected tenant authority.",context:"The server reads the current Better Auth membership store directly. When no active organization is selected, membership listing remains available as the first recovery step, but workspace authority remains empty until a requested organization is selected and verified. Cookie-cache projections and global user roles are not authorization inputs.",domain:n,owners:[...r],tags:[...s,"organization","membership","authority"],stability:o},capability:{...a},io:{input:p,output:l,errors:{AUTHORITY_STORE_UNAVAILABLE:{description:"Current organization membership cannot be verified.",http:503,when:"The authoritative membership store is unavailable."}}},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/personalBriefingCalendarsList.query.js

@@ -0,0 +1,6 @@
+import{ScalarTypeEnum as e,SchemaModel as n}from"@lssm/lib.schema";import{docRef as a}from"../../docs/registry.js";import{defineQuery as r}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as o,COMPANYOS_DOMAIN as t,COMPANYOS_OWNERS as s,COMPANYOS_STABILITY as i,COMPANYOS_TAGS as l}from"../constants.js";const c=new n({name:"CompanyOsPersonalBriefingCalendarsListInput",fields:{}}),d=new n({name:"CompanyOsPersonalBriefingCalendarsListOutput",fields:{calendars:{type:e.JSONObject(),isOptional:!1,isArray:!0},topologyVersion:{type:e.Int_unsecure(),isOptional:!1}}});export const PersonalBriefingCalendarsListDocBlock={id:"docs.tech.companyos.calendar-intelligence.personal-calendars.list",title:"List personal Google calendars",summary:"Enumerates only calendars available through the current user’s personal Google grant.",kind:"reference",visibility:"internal",route:"/docs/tech/companyos/calendar-intelligence/personal-calendars-list",tags:["companyos","calendar-intelligence","google-calendar","privacy"],body:`# List personal Google calendars
+
+The operation has no account, tenant, owner, or user input. It derives the
+personal account reference from the session and returns only opaque calendar
+references suitable for subsequent selection.
+`},PersonalBriefingCalendarsListQuery=r({meta:{key:"calendar-intelligence.personal-calendars.list",title:"List Personal Briefing Calendars",version:"2.0.0",description:"Enumerate recipient-owned calendars available to Briefings 2.0.",goal:"Expose selectable calendars without leaking provider identifiers.",context:"The personal context and Google account reference are server-derived.",domain:t,owners:[...s],tags:[...l,"calendar","briefing","privacy"],stability:i,docId:[a(PersonalBriefingCalendarsListDocBlock.id)]},capability:{...o},io:{input:c,output:d,errors:{CALENDAR_ENUMERATION_UNAVAILABLE:{description:"Personal Google calendars cannot be enumerated.",http:503,when:"The personal grant is absent, revoked, or unavailable."}}},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/personalBriefingStatus.query.js

@@ -0,0 +1,13 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{docRef as r}from"../../docs/registry.js";import{defineQuery as n}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as i,COMPANYOS_DOMAIN as s,COMPANYOS_OWNERS as a,COMPANYOS_STABILITY as o,COMPANYOS_TAGS as c}from"../constants.js";const l=new t({name:"CompanyOsPersonalBriefingStatusInput",fields:{}}),d=new t({name:"CompanyOsPersonalBriefingStatusOutput",fields:{version:{type:e.String_unsecure(),isOptional:!1},setupState:{type:e.String_unsecure(),isOptional:!1},rolloutState:{type:e.String_unsecure(),isOptional:!1},connectionHealth:{type:e.String_unsecure(),isOptional:!1},preferences:{type:e.JSONObject(),isOptional:!0},sources:{type:e.JSONObject(),isOptional:!1,isArray:!0},recentDeliveries:{type:e.JSONObject(),isOptional:!1,isArray:!0},authorizedWorkspaces:{type:e.JSONObject(),isOptional:!1,isArray:!0}}});export const PersonalBriefingStatusDocBlock={id:"docs.tech.companyos.calendar-intelligence.personal-status",title:"Read personal briefing status",summary:"Returns only the authenticated user’s setup, sources, mappings, preferences, and privacy-safe delivery evidence.",kind:"reference",visibility:"internal",route:"/docs/tech/companyos/calendar-intelligence/personal-status",tags:["companyos","calendar-intelligence","briefings","privacy"],body:`# Personal briefing status
+
+This query has no identity input. The server derives the user and personal
+context from the session. Recent delivery evidence excludes event notes, graph
+content, rendered bodies, provider event identifiers, and attendee addresses.
+Provider delivery state is a monotonic, signed-webhook-derived projection. API
+acceptance alone must never be described as delivered.
+
+Connection health is provider-backed rather than inferred from a persisted
+source row. A calendar enumeration authorization failure moves the source to
+\`reauthorization_required\` and records only a redacted failure stage; the
+status query must not continue to describe that source as connected.
+`},PersonalBriefingStatusQuery=n({meta:{key:"calendar-intelligence.personal-status",title:"Get Personal Briefing Status",version:"2.3.0",description:"Return recipient-owned sources, preferences, mappings, and privacy-safe delivery evidence.",goal:"Make personal briefing authority visible without exposing calendar content or cross-user selectors.",context:"User and personal tenant are derived from the current session. Workspace booking resources are excluded.",domain:s,owners:[...a],tags:[...c,"calendar","briefing","privacy"],stability:o,docId:[r(PersonalBriefingStatusDocBlock.id)]},capability:{...i},io:{input:l,output:d},policy:{auth:"user",pii:["deliveryEmail"]}});

package/dist/node/companyos/queries/personalContextProvisioningStatus.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as i}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as n,COMPANYOS_DOMAIN as s,COMPANYOS_OWNERS as o,COMPANYOS_STABILITY as r,COMPANYOS_TAGS as a}from"../constants.js";const u=new t({name:"CompanyOsPersonalContextProvisioningStatusInput",fields:{}}),p=new t({name:"CompanyOsPersonalContextProvisioningStatusOutput",fields:{state:{type:e.String_unsecure(),isOptional:!1},attemptCount:{type:e.Int_unsecure(),isOptional:!1},retryable:{type:e.Boolean(),isOptional:!1},nextRetryAt:{type:e.DateTime(),isOptional:!0},lastFailureCode:{type:e.String_unsecure(),isOptional:!0},updatedAt:{type:e.DateTime(),isOptional:!1}}});export const PersonalContextProvisioningStatusQuery=i({meta:{key:"personal-context.provisioning-status",title:"Get Personal Context Provisioning Status",version:"1.0.0",description:"Return pending, failed, or enabled personal-context provisioning state.",goal:"Keep verified users signed in but unscoped while provisioning can be retried safely.",context:"The user and session are server-derived. Failure details are reduced to bounded operational codes; physical authority identifiers and raw database errors are never returned.",domain:s,owners:[...o],tags:[...a,"personal","provisioning","status"],stability:r},capability:{...n},io:{input:u,output:p,errors:{SESSION_REQUIRED:{description:"A current authenticated session is required.",http:401,when:"The session is absent, expired, or revoked."},AUTHORITY_STORE_UNAVAILABLE:{description:"Provisioning status cannot be read.",http:503,when:"The shared authority store is unavailable."}}},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/personalDailyOperations.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as n}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as a,COMPANYOS_DOMAIN as i,COMPANYOS_OWNERS as o,COMPANYOS_STABILITY as r,COMPANYOS_TAGS as s}from"../constants.js";const p=new t({name:"CompanyOsPersonalDailyOperationsInput",fields:{}}),l=new t({name:"CompanyOsPersonalDailyOperationsOutput",fields:{operations:{type:e.JSONObject(),isOptional:!1,isArray:!0},calendarEvents:{type:e.JSONObject(),isOptional:!1,isArray:!0},calendarState:{type:e.String_unsecure(),isOptional:!1}}});export const PersonalDailyOperationsQuery=n({meta:{key:"organization-planning.personal-daily-operations",title:"Get Personal Daily Operations",version:"1.0.0",description:"Read the current user's persisted planning ledger and bounded personal calendar projection.",goal:"Power distinct Today, Planner, Focus, Meetings, and Insights workbenches from live state.",context:"The authenticated session derives the recipient and personal tenant; no browser identity selector is accepted.",domain:i,owners:[...o],tags:[...s,"opa","daily-operations"],stability:r},capability:{...a},io:{input:p,output:l},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/replayGetPacket.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as a}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as i,COMPANYOS_DOMAIN as n,COMPANYOS_OWNERS as o,COMPANYOS_STABILITY as p,COMPANYOS_TAGS as r}from"../constants.js";export const ManagedReplayEventModel=new t({name:"ManagedReplayEvent",fields:{eventId:{type:e.ID(),isOptional:!1},kind:{type:e.String_unsecure(),isOptional:!1},occurredAt:{type:e.DateTime(),isOptional:!1},payload:{type:e.JSONObject(),isOptional:!0}}});const l=new t({name:"CompanyOsReplayGetPacketInput",fields:{correlationId:{type:e.ID(),isOptional:!1}}}),s=new t({name:"CompanyOsReplayGetPacketOutput",fields:{correlationId:{type:e.ID(),isOptional:!1},events:{type:ManagedReplayEventModel,isOptional:!1,isArray:!0},hash:{type:e.String_unsecure(),isOptional:!1}}});export const ReplayGetPacketQuery=a({meta:{key:"replay.get-packet",title:"Get Replay Packet",version:"1.0.0",description:"Fetch the deterministic replay packet for a workflow correlation id.",goal:"Provide auditable, hash-stable replay events for FR8 verifiability.",context:"Backed by `bundle.managed-companyos` `createManagedReplayEvents`; events are immutable.",domain:n,owners:[...o],tags:[...r,"replay","audit"],stability:p},capability:{...i},io:{input:l,output:s,errors:{REPLAY_NOT_FOUND:{description:"No replay packet exists for the given correlation id.",http:404,when:"correlationId is unknown or events have been redacted."}}},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/replayListByTenant.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as a}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as i,COMPANYOS_DOMAIN as n,COMPANYOS_OWNERS as s,COMPANYOS_STABILITY as p,COMPANYOS_TAGS as r}from"../constants.js";const l=new t({name:"ManagedReplayPacketSummary",fields:{correlationId:{type:e.ID(),isOptional:!1},kind:{type:e.String_unsecure(),isOptional:!1},hash:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},eventCount:{type:e.Int_unsecure(),isOptional:!1}}}),o=new t({name:"CompanyOsReplayListByTenantInput",fields:{tenantId:{type:e.ID(),isOptional:!1},since:{type:e.DateTime(),isOptional:!0},kind:{type:e.String_unsecure(),isOptional:!0},limit:{type:e.Int_unsecure(),isOptional:!0},cursor:{type:e.String_unsecure(),isOptional:!0}}}),y=new t({name:"CompanyOsReplayListByTenantOutput",fields:{packets:{type:l,isOptional:!1,isArray:!0},cursor:{type:e.String_unsecure(),isOptional:!0}}});export const ReplayListByTenantQuery=a({meta:{key:"replay.list-by-tenant",title:"List Replay Packets by Tenant",version:"1.0.0",description:"List replay packet summaries scoped to a tenant with optional kind and since filters.",goal:"Surface auditable replay activity for FR8 compliance views.",context:"Read-only summaries; full event payloads require `replay.get-packet`.",domain:n,owners:[...s],tags:[...r,"replay","audit"],stability:p},capability:{...i},io:{input:o,output:y},policy:{auth:"user",pii:[]}});

package/dist/node/companyos/queries/sessionAuthorityGet.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as n}from"../../operations/index.js";import{COMPANYOS_CAPABILITY as i,COMPANYOS_DOMAIN as r,COMPANYOS_OWNERS as o,COMPANYOS_STABILITY as a,COMPANYOS_TAGS as s}from"../constants.js";const u=new t({name:"CompanyOsSessionAuthorityGetInput",fields:{}});export const ManagedCompanyOsSessionAuthorityModel=new t({name:"ManagedCompanyOsSessionAuthority",fields:{sessionId:{type:e.ID(),isOptional:!1},activeOrganizationId:{type:e.ID(),isOptional:!1},physicalTenantId:{type:e.ID(),isOptional:!1},grantRole:{type:e.String_unsecure(),isOptional:!1},bindingVersion:{type:e.Int_unsecure(),isOptional:!1},grantVersion:{type:e.Int_unsecure(),isOptional:!1},authorityToken:{type:e.String_unsecure(),isOptional:!1},resolvedAt:{type:e.String_unsecure(),isOptional:!1}}}),SessionAuthorityGetQuery=n({meta:{key:"session.authority.get",title:"Get Current CompanyOS Session Authority",version:"1.0.0",description:"Resolve the authenticated session through current membership, binding, and canonical grant authority.",goal:"Keep Better Auth organization selection distinct from the physical tenant and domain grant used by CompanyOS.",context:"The server accepts no organization or tenant selector, bypasses authority caches, revalidates the current Better Auth session, and returns only the enabled binding and canonical grant projection. Browser requests require an exact trusted Origin; an absent Origin is permitted only for server transport.",domain:r,owners:[...o],tags:[...s,"organization","session","authority"],stability:a},capability:{...i},io:{input:u,output:ManagedCompanyOsSessionAuthorityModel,errors:{SESSION_REQUIRED:{description:"A current authenticated session is required.",http:401,when:"The Better Auth session is absent, expired, or revoked."},ORGANIZATION_AUTHORITY_REQUIRED:{description:"Current membership, binding, and canonical grant authority are required.",http:403,when:"The active organization or any canonical authority component is missing or stale."},AUTHORITY_STORE_UNAVAILABLE:{description:"Current organization authority cannot be verified.",http:503,when:"The identity, binding, or grant store is unavailable."}}},policy:{auth:"user",pii:[]}});