@lssm/lib.contracts-spec 17.3.2

package/dist/node/control-plane/events/controlPlaneExecutionCompleted.event.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineEvent as o}from"../../events.js";import{CONTROL_PLANE_DOMAIN as n,CONTROL_PLANE_OWNERS as i,CONTROL_PLANE_STABILITY as l,CONTROL_PLANE_TAGS as a}from"../constants.js";export const ControlPlaneExecutionCompletedPayload=new t({name:"ControlPlaneExecutionCompletedPayload",fields:{executionId:{type:e.ID(),isOptional:!1},runId:{type:e.ID(),isOptional:!1},completedAt:{type:e.DateTime(),isOptional:!1},outcome:{type:e.String_unsecure(),isOptional:!0}}}),ControlPlaneExecutionCompletedEvent=o({meta:{key:"controlPlane.execution.completed",version:"1.0.0",description:"Emitted when an execution run finishes successfully.",domain:n,owners:i,tags:[...a,"execution"],stability:l},payload:ControlPlaneExecutionCompletedPayload});

package/dist/node/control-plane/events/controlPlaneExecutionFailed.event.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineEvent as o}from"../../events.js";import{CONTROL_PLANE_DOMAIN as i,CONTROL_PLANE_OWNERS as n,CONTROL_PLANE_STABILITY as a,CONTROL_PLANE_TAGS as r}from"../constants.js";export const ControlPlaneExecutionFailedPayload=new t({name:"ControlPlaneExecutionFailedPayload",fields:{executionId:{type:e.ID(),isOptional:!1},runId:{type:e.ID(),isOptional:!0},failedAt:{type:e.DateTime(),isOptional:!1},errorCode:{type:e.String_unsecure(),isOptional:!1},errorMessage:{type:e.String_unsecure(),isOptional:!0},problem:{type:e.JSONObject(),isOptional:!0}}}),ControlPlaneExecutionFailedEvent=o({meta:{key:"controlPlane.execution.failed",version:"1.0.0",description:"Emitted when an execution run fails.",domain:i,owners:n,tags:[...r,"execution","failure"],stability:a},payload:ControlPlaneExecutionFailedPayload});

package/dist/node/control-plane/events/controlPlaneExecutionStepBlocked.event.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineEvent as o}from"../../events.js";import{CONTROL_PLANE_DOMAIN as n,CONTROL_PLANE_OWNERS as i,CONTROL_PLANE_STABILITY as l,CONTROL_PLANE_TAGS as a}from"../constants.js";export const ControlPlaneExecutionStepBlockedPayload=new t({name:"ControlPlaneExecutionStepBlockedPayload",fields:{executionId:{type:e.ID(),isOptional:!1},runId:{type:e.ID(),isOptional:!0},stepId:{type:e.ID(),isOptional:!0},blockedAt:{type:e.DateTime(),isOptional:!1},reason:{type:e.String_unsecure(),isOptional:!1}}}),ControlPlaneExecutionStepBlockedEvent=o({meta:{key:"controlPlane.execution.step.blocked",version:"1.0.0",description:"Emitted when policy blocks an execution step.",domain:n,owners:i,tags:[...a,"execution","blocked"],stability:l},payload:ControlPlaneExecutionStepBlockedPayload});

package/dist/node/control-plane/events/controlPlaneExecutionStepCompleted.event.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineEvent as o}from"../../events.js";import{CONTROL_PLANE_DOMAIN as n,CONTROL_PLANE_OWNERS as l,CONTROL_PLANE_STABILITY as a,CONTROL_PLANE_TAGS as i}from"../constants.js";export const ControlPlaneExecutionStepCompletedPayload=new t({name:"ControlPlaneExecutionStepCompletedPayload",fields:{executionId:{type:e.ID(),isOptional:!1},runId:{type:e.ID(),isOptional:!1},stepId:{type:e.ID(),isOptional:!1},completedAt:{type:e.DateTime(),isOptional:!1}}}),ControlPlaneExecutionStepCompletedEvent=o({meta:{key:"controlPlane.execution.step.completed",version:"1.0.0",description:"Emitted when an execution step completes.",domain:n,owners:l,tags:[...i,"execution"],stability:a},payload:ControlPlaneExecutionStepCompletedPayload});

package/dist/node/control-plane/events/controlPlaneExecutionStepStarted.event.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineEvent as o}from"../../events.js";import{CONTROL_PLANE_DOMAIN as a,CONTROL_PLANE_OWNERS as n,CONTROL_PLANE_STABILITY as i,CONTROL_PLANE_TAGS as l}from"../constants.js";export const ControlPlaneExecutionStepStartedPayload=new t({name:"ControlPlaneExecutionStepStartedPayload",fields:{executionId:{type:e.ID(),isOptional:!1},runId:{type:e.ID(),isOptional:!1},stepId:{type:e.ID(),isOptional:!1},startedAt:{type:e.DateTime(),isOptional:!1}}}),ControlPlaneExecutionStepStartedEvent=o({meta:{key:"controlPlane.execution.step.started",version:"1.0.0",description:"Emitted when an execution step starts.",domain:a,owners:n,tags:[...l,"execution"],stability:i},payload:ControlPlaneExecutionStepStartedPayload});

package/dist/node/control-plane/events/controlPlaneIntentReceived.event.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineEvent as n}from"../../events.js";import{CONTROL_PLANE_DOMAIN as i,CONTROL_PLANE_OWNERS as o,CONTROL_PLANE_STABILITY as a,CONTROL_PLANE_TAGS as l}from"../constants.js";export const ControlPlaneIntentReceivedPayload=new t({name:"ControlPlaneIntentReceivedPayload",fields:{executionId:{type:e.ID(),isOptional:!1},intentId:{type:e.ID(),isOptional:!1},receivedAt:{type:e.DateTime(),isOptional:!1},actorId:{type:e.ID(),isOptional:!0},channelKey:{type:e.String_unsecure(),isOptional:!0}}}),ControlPlaneIntentReceivedEvent=n({meta:{key:"controlPlane.intent.received",version:"1.0.0",description:"Emitted when a new control plane intent is accepted.",domain:i,owners:o,tags:[...l,"intent"],stability:a},payload:ControlPlaneIntentReceivedPayload});

package/dist/node/control-plane/events/controlPlanePlanCompiled.event.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as n}from"@lssm/lib.schema";import{defineEvent as o}from"../../events.js";import{CONTROL_PLANE_DOMAIN as t,CONTROL_PLANE_OWNERS as a,CONTROL_PLANE_STABILITY as l,CONTROL_PLANE_TAGS as i}from"../constants.js";export const ControlPlanePlanCompiledPayload=new n({name:"ControlPlanePlanCompiledPayload",fields:{executionId:{type:e.ID(),isOptional:!1},planId:{type:e.ID(),isOptional:!1},compiledAt:{type:e.DateTime(),isOptional:!1},stepCount:{type:e.Int_unsecure(),isOptional:!1}}}),ControlPlanePlanCompiledEvent=o({meta:{key:"controlPlane.plan.compiled",version:"1.0.0",description:"Emitted when an intent is compiled into an executable plan.",domain:t,owners:a,tags:[...i,"plan"],stability:l},payload:ControlPlanePlanCompiledPayload});

package/dist/node/control-plane/events/controlPlanePlanRejected.event.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as n}from"@lssm/lib.schema";import{defineEvent as t}from"../../events.js";import{CONTROL_PLANE_DOMAIN as a,CONTROL_PLANE_OWNERS as o,CONTROL_PLANE_STABILITY as r,CONTROL_PLANE_TAGS as l}from"../constants.js";export const ControlPlanePlanRejectedPayload=new n({name:"ControlPlanePlanRejectedPayload",fields:{executionId:{type:e.ID(),isOptional:!1},planId:{type:e.ID(),isOptional:!0},rejectedAt:{type:e.DateTime(),isOptional:!1},reasons:{type:e.String_unsecure(),isOptional:!0,isArray:!0}}}),ControlPlanePlanRejectedEvent=t({meta:{key:"controlPlane.plan.rejected",version:"1.0.0",description:"Emitted when a plan fails verification or governance checks.",domain:a,owners:o,tags:[...l,"plan","governance"],stability:r},payload:ControlPlanePlanRejectedPayload});

package/dist/node/control-plane/events/controlPlaneSkillInstalled.event.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineEvent as l}from"../../events.js";import{CONTROL_PLANE_DOMAIN as i,CONTROL_PLANE_OWNERS as n,CONTROL_PLANE_STABILITY as a,CONTROL_PLANE_TAGS as s}from"../constants.js";export const ControlPlaneSkillInstalledPayload=new t({name:"ControlPlaneSkillInstalledPayload",fields:{installationId:{type:e.ID(),isOptional:!1},skillKey:{type:e.String_unsecure(),isOptional:!1},version:{type:e.String_unsecure(),isOptional:!1},installedAt:{type:e.DateTime(),isOptional:!1},publisher:{type:e.String_unsecure(),isOptional:!0},provenance:{type:e.String_unsecure(),isOptional:!0},manifestDigest:{type:e.String_unsecure(),isOptional:!0}}}),ControlPlaneSkillInstalledEvent=l({meta:{key:"controlPlane.skill.installed",version:"1.0.0",description:"Emitted when a skill artifact is verified and installed.",domain:i,owners:n,tags:[...s,"skills"],stability:a},payload:ControlPlaneSkillInstalledPayload});

package/dist/node/control-plane/events/controlPlaneSkillRejected.event.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineEvent as i}from"../../events.js";import{CONTROL_PLANE_DOMAIN as n,CONTROL_PLANE_OWNERS as l,CONTROL_PLANE_STABILITY as r,CONTROL_PLANE_TAGS as o}from"../constants.js";import{ControlPlaneSkillVerificationIssueModel as s}from"../skills/schema.js";export const ControlPlaneSkillRejectedPayload=new t({name:"ControlPlaneSkillRejectedPayload",fields:{skillKey:{type:e.String_unsecure(),isOptional:!1},version:{type:e.String_unsecure(),isOptional:!0},rejectedAt:{type:e.DateTime(),isOptional:!1},reason:{type:e.String_unsecure(),isOptional:!1},provenance:{type:e.String_unsecure(),isOptional:!0},manifestDigest:{type:e.String_unsecure(),isOptional:!0},issues:{type:s,isOptional:!0,isArray:!0}}}),ControlPlaneSkillRejectedEvent=i({meta:{key:"controlPlane.skill.rejected",version:"1.0.0",description:"Emitted when a skill install attempt is rejected.",domain:n,owners:l,tags:[...o,"skills","governance"],stability:r},payload:ControlPlaneSkillRejectedPayload});

package/dist/node/control-plane/events/index.js

@@ -0,0 +1 @@
+export*from"./controlPlaneExecutionCompleted.event.js";export*from"./controlPlaneExecutionFailed.event.js";export*from"./controlPlaneExecutionStepBlocked.event.js";export*from"./controlPlaneExecutionStepCompleted.event.js";export*from"./controlPlaneExecutionStepStarted.event.js";export*from"./controlPlaneIntentReceived.event.js";export*from"./controlPlanePlanCompiled.event.js";export*from"./controlPlanePlanRejected.event.js";export*from"./controlPlaneSkillInstalled.event.js";export*from"./controlPlaneSkillRejected.event.js";

package/dist/node/control-plane/hook-authority-digest.js

@@ -0,0 +1 @@
+import{sha256Hex as r}from"@lssm/lib.crypto-utils";export function hookAuthorityDigest(o){return{algorithm:"sha256",canonicalizationVersion:1,value:`sha256:${r(JSON.stringify(n(o)))}`}}export function hookAuthorityBodyDigest(o){return hookAuthorityDigest(o)}export function hookAuthorityEnvelopeDigest(o){return hookAuthorityDigest(o)}export function equalHookAuthorityDigest(o,t){return o.algorithm===t.algorithm&&o.canonicalizationVersion===t.canonicalizationVersion&&o.value===t.value}function n(o){if(Array.isArray(o))return o.map(n);if(!o||typeof o!=="object")return o;return Object.fromEntries(Object.entries(o).sort(([t],[i])=>t<i?-1:t>i?1:0).map(([t,i])=>[t,n(i)]))}

package/dist/node/control-plane/hook-authority-immutable.js

@@ -0,0 +1 @@
+export function immutableData(t){try{return p(t,new WeakMap)}catch{return}}function p(t,o){if(t===null||typeof t!=="object"){if(typeof t==="number"&&!Number.isFinite(t))throw Error();if(["string","number","boolean","undefined"].includes(typeof t))return t;throw Error()}if(o.has(t))return o.get(t);const r=Array.isArray(t),i=Object.getPrototypeOf(t);if(!r&&i!==Object.prototype&&i!==null||r&&i!==Array.prototype)throw Error();const f=Object.getOwnPropertyDescriptors(t),c=Reflect.ownKeys(t).filter((n)=>typeof n==="string"&&!(r&&n==="length"));if(Object.entries(f).some(([n,e])=>n!=="length"&&(e.get||e.set||!e.enumerable))||r&&(c.length!==t.length||c.some((n,e)=>n!==String(e))))throw Error();const s=r?[]:Object.create(null);o.set(t,s);for(const n of c)s[n]=p(f[n].value,o);return Object.freeze(s)}

package/dist/node/control-plane/hook-authority-reference-adapter.js

@@ -0,0 +1 @@
+import{immutableData as f}from"./hook-authority-immutable.js";import{validBinding as V}from"./hook-authority-reference-binding.js";import{committedStartCapability as b,startCapabilityValue as _}from"./hook-authority-reference-capability.js";import{authenticated as z,trustedNow as v}from"./hook-authority-reference-clock.js";import{createSession as A,hookAuthorityRequestDigest as w,replaySessionId as p}from"./hook-authority-reference-helpers.js";import{invoke as R}from"./hook-authority-reference-invoke.js";import{advanceLeases as T}from"./hook-authority-reference-leases.js";import{withSerialLock as H}from"./hook-authority-reference-lock.js";import{authorization as x}from"./hook-authority-reference-result.js";import{refKey as l,sessionMatchesRequest as C}from"./hook-authority-reference-session.js";import{createReferenceState as D,resumedReferenceState as L}from"./hook-authority-reference-state.js";import{fail as t,validLive as B}from"./hook-authority-reference-validation.js";import{HookAuthorityRequestSchema as K}from"./hook-authority-validation.js";export class ReferenceHookAuthorityAdapter{dependencies;#e;#t;constructor(e){this.dependencies=e;const s=D();this.#e=s.state;this.#t=s.token}get restartToken(){return this.#t}static resume(e,s){const n=L(s);if(!n)return;const r=new ReferenceHookAuthorityAdapter(e);r.#e=n;r.#t=s;return r}async transition(e,s){const n=v(this.dependencies.clock,this.#e);if(n===null)return t("signature_untrusted","Trusted clock failed closed.");const r=K.parse(e,new Date(n));if(!r.ok)return r;const a=r.value,c=b(a,s);if(!c)return t("invalid_request","Caller session capability does not match the signed commitment.");const o=w(a),i=await H(this.#e,()=>this.authenticateOrReplay(a,o));if(!i.ok||i.value)return i;const h=await R(this.dependencies,()=>this.dependencies.verifier.verify(a.decision),(d)=>d===void 0);if(!h.ok)return h;const u=await R(this.dependencies,()=>this.dependencies.liveBindings.resolve(a.decision),B);if(!u.ok)return u;return H(this.#e,()=>this.commit(a,o,u.value,n,c))}authenticateOrReplay(e,s){const n=p(e);if(e.event!=="session-start"&&!z(e,this.#e.sessions))return t("scope_mismatch","Session capability does not authenticate the session.");if(e.event!=="session-start"){const o=this.#e.sessions.get(l(e.sessionRef));if(!o)return t("not_found","Session does not exist.");if(!C(o,e))return t("scope_mismatch","Session decision, tenant, or workspace does not match the request.");if(o.terminalizedAt){const i=this.#e.replays.get(`${p(e)}\x00${e.replayKey}`);if(i?.requestDigest.value===s.value){const{sessionCapability:h,...u}=i;return{ok:!0,value:f({...u,replayed:!0})}}return t("terminalized","Session is terminalized.")}}const r=this.#e.replays.get(`${n}\x00${e.replayKey}`);if(!r){if(e.event!=="session-start"){const o=this.#e.sessions.get(l(e.sessionRef));if(o&&(o.revision!==e.expectedRevision||o.fence!==e.expectedFence))return t("version_conflict","Session revision or fence does not match.")}return{ok:!0,value:void 0}}if(r.requestDigest.value!==s.value)return t("replay_conflict","Replay key was used with a distinct request digest.");const{sessionCapability:a,...c}=r;return{ok:!0,value:f({...c,replayed:!0})}}commit(e,s,n,r,a){const c=v(this.dependencies.clock,this.#e,r);if(c===null||!V(e,n,c))return t("scope_mismatch","Live binding no longer exactly binds this decision.");const o=this.authenticateOrReplay(e,s);if(!o.ok||o.value)return o;const i=e.event==="session-start"?void 0:this.#e.sessions.get(l(e.sessionRef));if(e.event==="session-start"&&this.#e.sessions.has(l(A(e,"",1,"").sessionRef)))return t("replay_conflict","Decision identity already owns a session.");if(!i&&e.event!=="session-start")return t("not_found","Session does not exist.");if(i?.terminalizedAt)return t("terminalized","Session is terminalized.");if(i&&e.event!=="session-start"&&(i.revision!==e.expectedRevision||i.fence!==e.expectedFence))return t("version_conflict","Session revision or fence does not match.");let h;if(e.event==="session-start"){h=_(a,()=>this.dependencies.capabilities.generate());if(!h)return t("signature_untrusted","Capability source failed closed.")}const u=new Date(c).toISOString(),d=i??A(e,u,n.fence,h);if(i&&i.authorityVersion!==n.authorityVersion)return t("version_conflict","Live authority version changed.");const m=T(this.#e,e,d,u);if(!m)return t("scope_mismatch","Stored active leases do not match.");const g=e.event==="session-start"?d:{...d,revision:d.revision+1,fence:n.fence,...e.event==="stop"?{terminalizedAt:u}:{}},y=f(g);this.#e.sessions.set(l(y.sessionRef),y);const k=f(x(e,s,y,u,a.committed?void 0:h,m)),{sessionCapability:O,...S}=k;this.#e.replays.set(`${p(e)}\x00${e.replayKey}`,f(S));return{ok:!0,value:f(k)}}}

package/dist/node/control-plane/hook-authority-reference-binding.js

@@ -0,0 +1 @@
+import{validTimestamp as s}from"./hook-authority-validation-primitives.js";export function validBinding(o,e,i){const t=o.decision.body,a=s(e.verifiedAt),r=s(e.validUntil),u=s(e.expiresAt);return n(t.scope.tenantRef,e.tenantRef)&&n(t.scope.workspaceRef,e.workspaceRef)&&n(t.evidence.ownershipRef,e.ownershipRef)&&n(t.evidence.keyStatusRef,e.keyStatusRef)&&n(t.revocationRef,e.revocationRef)&&t.evidence.leaseRefs.length===e.leaseRefs.length&&t.evidence.leaseRefs.every((c,d)=>n(c,e.leaseRefs[d]))&&e.authorityGeneration===t.decisionRef.generation&&e.authorityVersion===t.authorityVersion&&e.revoked===!1&&e.keyStatus==="active"&&e.ownershipStatus==="active"&&e.leaseStatus==="active"&&u!==null&&e.expiresAt===t.expiresAt&&a!==null&&r!==null&&a<=i&&i<r&&i<u&&e.fence===t.authorityFence&&e.fence===(o.event==="session-start"?t.authorityFence:o.expectedFence)}function n(o,e){return o===e||Boolean(o&&e&&o.id===e.id&&o.generation===e.generation&&o.digest.value===e.digest.value)}

package/dist/node/control-plane/hook-authority-reference-capability.js

@@ -0,0 +1 @@
+import{hookAuthorityDigest as o}from"./hook-authority-digest.js";import{validCapability as n}from"./hook-authority-validation-primitives.js";export function committedStartCapability(e,t){if(e.event!=="session-start")return t===void 0?{committed:!1}:void 0;const i=e.decision.body.sessionCapabilityHash;if(!i)return t===void 0?{committed:!1}:void 0;if(!r(t)||!n(t.sessionCapability))return;return o(t.sessionCapability).value===i.value?{committed:!0,value:t.sessionCapability}:void 0}export function startCapabilityValue(e,t){if(e.value)return e.value;try{const i=t();return n(i)?i:void 0}catch{return}}function r(e){if(!e||Object.getPrototypeOf(e)!==Object.prototype)return!1;if(Object.keys(e).length!==1||Object.getOwnPropertySymbols(e).length)return!1;const t=Object.getOwnPropertyDescriptor(e,"sessionCapability");return Boolean(t&&!t.get&&!t.set&&typeof t.value==="string")}

package/dist/node/control-plane/hook-authority-reference-clock.js

@@ -0,0 +1 @@
+import{hookAuthorityDigest as r}from"./hook-authority-digest.js";export function authenticated(t,n){const o=n.get(s(t.sessionRef));return Boolean(o&&s(o.sessionRef)===s(t.sessionRef)&&o.capabilityHash.value===r(t.sessionCapability).value)}function s(t){return`${t.id}\x00${t.generation}\x00${t.digest.value}`}export function trustedNow(t,n,o){try{const i=t.now(),e=i instanceof Date?i.getTime():NaN;if(!Number.isFinite(e)||i.toISOString()!==new Date(e).toISOString()||o!==void 0&&e<o||e<n.lastNow)return null;n.lastNow=e;return e}catch{return null}}

package/dist/node/control-plane/hook-authority-reference-helpers.js

@@ -0,0 +1 @@
+import{hookAuthorityDigest as i}from"./hook-authority-digest.js";export function hookAuthorityRequestDigest(o){const{sessionCapability:e,...t}=o;return i(t)}export function replaySessionId(o){return o.event==="session-start"?i({kind:"hook-authority-start-replay-scope-v1",decisionRef:o.decision.body.decisionRef,tenantRef:o.tenantRef,workspaceRef:o.workspaceRef}).value:i({kind:"hook-authority-session-replay-scope-v1",sessionRef:o.sessionRef}).value}export function createSession(o,e,t,n){return{sessionRef:reference("session",s({kind:"hook-authority-session-v1",decisionRef:o.decision.body.decisionRef,tenantRef:o.tenantRef,workspaceRef:o.workspaceRef})),tenantRef:o.tenantRef,workspaceRef:o.workspaceRef,actorRef:o.actorRef,currentSha:o.currentSha,workspaceRoot:o.workspaceRoot,capabilityHash:i(n),decisionRef:o.decision.body.decisionRef,decisionBodyDigest:o.decision.bodyDigest,decisionEnvelopeDigest:o.decision.envelopeDigest,leaseRefs:o.decision.body.evidence.leaseRefs,authorityVersion:o.decision.body.authorityVersion,revision:1,fence:t,createdAt:e}}function s(o){return i(o).value.slice(7)}export function reference(o,e){return{id:`${o}.${e}`.slice(0,128),generation:1,digest:i({kind:o,id:e})}}

package/dist/node/control-plane/hook-authority-reference-invoke.js

@@ -0,0 +1 @@
+import{immutableData as d}from"./hook-authority-immutable.js";import{fail as u}from"./hook-authority-reference-validation.js";export async function invoke(r,n,o){try{const e=s(await r.deadlines.race(()=>l(n)));if(!e)return i();if(e.ok===!1)return a(e)??i();if(!o(e.value))return i();return{ok:!0,value:e.value}}catch{return u("signature_untrusted","Trusted dependency failed closed.")}}function s(r){const n=d(r);if(!n||typeof n!=="object"||Array.isArray(n))return;const o=Object.getOwnPropertyDescriptors(n),e=Object.keys(o).sort();if(e.length!==2||o.ok?.value===void 0)return;if(o.ok.value===!0&&e[0]==="ok"&&e[1]==="value")return{ok:!0,value:o.value?.value};if(o.ok.value!==!1||e[0]!=="error"||e[1]!=="ok")return;const t=d(o.error?.value);if(!t||Object.keys(t).sort().join(",")!=="code,message")return;if(typeof t.code!=="string"||typeof t.message!=="string")return;return{ok:!1,error:{code:t.code,message:t.message}}}function a(r){if(!["expired","revoked"].includes(r.error.code))return;return u(r.error.code,`Trusted authority denied: ${r.error.code}.`)}function i(){return u("signature_untrusted","Trusted dependency timed out or returned an invalid result.")}function l(r){const n=r();if(!(n instanceof Promise))throw Error("Dependency did not return a native Promise.");return n}

package/dist/node/control-plane/hook-authority-reference-leases.js

@@ -0,0 +1 @@
+import{hookAuthorityDigest as a}from"./hook-authority-digest.js";import{reference as u}from"./hook-authority-reference-helpers.js";import{refKey as s}from"./hook-authority-reference-session.js";export function createActiveLeases(o,e,t){if(t.some((n)=>o.leases.has(f(e.sessionRef,n))))return!1;for(const n of t)o.leases.set(f(e.sessionRef,n),{leaseRef:n,sessionRef:e.sessionRef});return!0}export function activeLeasesMatch(o,e,t){return[...o.leases.values()].filter((r)=>s(r.sessionRef)===s(e.sessionRef)).length===t.length&&e.leaseRefs.length===t.length&&e.leaseRefs.every((r,i)=>s(r)===s(t[i]))&&t.every((r)=>{const i=o.leases.get(f(e.sessionRef,r));return Boolean(i&&!i.releasedAt&&s(i.sessionRef)===s(e.sessionRef))})}function f(o,e){return`${s(o)}\x00${s(e)}`}export function releaseLeases(o,e,t,n){if(!activeLeasesMatch(o,e,t))return;return t.map((r)=>{o.leases.get(f(e.sessionRef,r)).releasedAt=n;return{leaseRef:r,releaseRef:u("lease-release",l(e.sessionRef,r)),status:"released",releasedAt:n}})}function l(o,e){return a({kind:"hook-authority-lease-release-v1",sessionRef:o,leaseRef:e}).value.slice(7)}export function advanceLeases(o,e,t,n){const r=e.decision.body.evidence.leaseRefs;if(e.event==="session-start")return createActiveLeases(o,t,r)?[]:void 0;if(!activeLeasesMatch(o,t,r))return;return e.event==="stop"?releaseLeases(o,t,r,n):[]}

package/dist/node/control-plane/hook-authority-reference-lock.js

@@ -0,0 +1 @@
+export async function withSerialLock(i,o){let e=()=>{return};const r=i.tail;i.tail=new Promise((n)=>{e=n});await r;try{return o()}finally{e()}}

package/dist/node/control-plane/hook-authority-reference-result.js

@@ -0,0 +1 @@
+import{reference as t}from"./hook-authority-reference-helpers.js";export function authorization(e,i,a,r,s,R=[]){const o=`${a.sessionRef.id}.${e.event}.${i.value.slice(7)}`,n=t("receipt",o);return{requestDigest:i,replayed:!1,receipt:{receiptRef:n,transactionRef:t("transaction",o),commitRef:t("commit",o),requestId:e.requestId,replayKey:e.replayKey,event:e.event,decisionRef:e.decision.body.decisionRef,sessionRef:a.sessionRef,tenantRef:e.tenantRef,workspaceRef:e.workspaceRef,authorityVersion:e.decision.body.authorityVersion,requestDigest:i,issuedAt:r},session:a,outbox:{outboxRef:t("outbox",o),receiptRef:n,event:e.event,requestDigest:i,occurredAt:r,...e.event==="stop"?{terminalLeaseReleaseRefs:e.decision.body.evidence.leaseRefs,terminalLeaseReleases:R.map((c)=>({...c,receiptRef:n}))}:{}},audit:{auditRef:t("audit",o),receiptRef:n,decisionRef:e.decision.body.decisionRef,event:e.event,tenantRef:e.tenantRef,workspaceRef:e.workspaceRef,observedAt:r},...s?{sessionCapability:s}:{}}}

package/dist/node/control-plane/hook-authority-reference-session.js

@@ -0,0 +1 @@
+export function refKey(e){return`${e.id}\x00${e.generation}\x00${e.digest.value}`}export function sessionMatchesRequest(e,o){return refKey(e.decisionRef)===refKey(o.decision.body.decisionRef)&&refKey(e.tenantRef)===refKey(o.tenantRef)&&refKey(e.workspaceRef)===refKey(o.workspaceRef)&&e.decisionBodyDigest.value===o.decision.bodyDigest.value&&e.decisionEnvelopeDigest.value===o.decision.envelopeDigest.value&&e.leaseRefs.length===o.decision.body.evidence.leaseRefs.length&&e.leaseRefs.every((t,i)=>refKey(t)===refKey(o.decision.body.evidence.leaseRefs[i]))&&e.actorRef===o.actorRef&&e.currentSha===o.currentSha&&e.workspaceRoot===o.workspaceRoot}

package/dist/node/control-plane/hook-authority-reference-state.js

@@ -0,0 +1 @@
+const o=new WeakMap;export function createReferenceState(){const e={replays:new Map,sessions:new Map,tail:Promise.resolve(),lastNow:Number.NEGATIVE_INFINITY,leases:new Map},t=Object.freeze({schemaVersion:1});o.set(t,e);return{state:e,token:t}}export function resumedReferenceState(e){return o.get(e)}

package/dist/node/control-plane/hook-authority-reference-validation.js

@@ -0,0 +1 @@
+import{closedObjectWithOptional as o,safeArray as n}from"./hook-authority-validation-objects.js";import{validRef as t,validTimestamp as i}from"./hook-authority-validation-primitives.js";export function validLive(e){return o(e,["authorityVersion","authorityGeneration","expiresAt","fence","keyStatus","keyStatusRef","leaseRefs","leaseStatus","ownershipRef","ownershipStatus","revoked","tenantRef","validUntil","verifiedAt","workspaceRef"],["revocationRef"])&&t(e.ownershipRef)&&t(e.tenantRef)&&t(e.workspaceRef)&&t(e.keyStatusRef)&&(e.revocationRef===void 0||t(e.revocationRef))&&n(e.leaseRefs)&&e.leaseRefs.every(t)&&typeof e.authorityGeneration==="number"&&Number.isSafeInteger(e.authorityGeneration)&&e.authorityGeneration>0&&typeof e.authorityVersion==="number"&&Number.isSafeInteger(e.authorityVersion)&&e.authorityVersion>0&&typeof e.fence==="number"&&Number.isSafeInteger(e.fence)&&e.fence>0&&e.revoked===!1&&e.keyStatus==="active"&&e.ownershipStatus==="active"&&e.leaseStatus==="active"&&i(e.expiresAt)!==null&&i(e.verifiedAt)!==null&&i(e.validUntil)!==null}export function fail(e,r){return{ok:!1,error:{code:e,message:r}}}

package/dist/node/control-plane/hook-authority-test-body.js

@@ -0,0 +1 @@
+import{HOOK_AUTHORITY_EVENTS as o,HOOK_AUTHORITY_V1 as r}from"./hook-authority.js";import{hookAuthorityDigest as t}from"./hook-authority-digest.js";export function ref(e){return{id:e,generation:1,digest:t({id:e})}}export function body(e){return{schemaVersion:r,decisionRef:ref("decision.fixture"),issuedAt:"2030-01-01T00:00:00.000Z",expiresAt:"2030-01-01T00:01:00.000Z",authorityVersion:3,authorityFence:1,scope:{tenantRef:ref("tenant.fixture"),workspaceRef:ref("workspace.fixture"),currentSha:"a".repeat(40),workspaceRoot:"/workspace",actorRef:"actor.fixture",pathPrefixes:["packages/libs/contracts-spec/"],commandDigests:[t("bun test")],events:[...o]},evidence:{evidenceRefs:[ref("evidence.fixture")],keyStatusRef:ref("key-status.fixture"),ownershipRef:ref("ownership.fixture"),leaseRefs:[ref("lease.fixture")]}}}

package/dist/node/control-plane/hook-authority-test-fixtures.js

@@ -0,0 +1 @@
+import{HOOK_AUTHORITY_SIGNATURE_DOMAIN as n,HOOK_AUTHORITY_V1 as s}from"./hook-authority.js";import{hookAuthorityBodyDigest as c,hookAuthorityDigest as i,hookAuthorityEnvelopeDigest as f}from"./hook-authority-digest.js";import{body as u,ref as o}from"./hook-authority-test-body.js";export{body,ref}from"./hook-authority-test-body.js";export const now=new Date("2030-01-01T00:00:02.000Z"),capability="a".repeat(32);export function request(e){const t=u(e),a=c(t),r={schemaVersion:s,domain:n,body:t,bodyDigest:a,signature:{issuerService:"connect",issuerKeyId:"connect-key",algorithm:"ed25519",value:`${"a".repeat(85)}A`}};return{schemaVersion:s,requestId:"request.fixture",replayKey:"replay.fixture",event:e,decision:{...r,envelopeDigest:f(r)},actorRef:"actor.fixture",tenantRef:t.scope.tenantRef,workspaceRef:t.scope.workspaceRef,currentSha:"a".repeat(40),workspaceRoot:"/workspace",paths:e==="before-file-edit"||e==="after-file-edit"||e==="before-merge"?["packages/libs/contracts-spec/src/control-plane/hook-authority.ts"]:[],...e==="before-shell-execution"?{commandDigest:t.scope.commandDigests[0]}:{},...e==="before-handoff"?{checkpointRef:o("checkpoint.fixture"),handoffRef:o("handoff.fixture")}:{},...e==="before-merge"?{merge:{sourceRef:o("source.fixture"),baseRef:o("base.fixture"),headRef:o("head.fixture"),treeDigest:i("tree"),diffDigest:i("diff")}}:{},...e==="session-start"?{}:{sessionCapability:capability,sessionRef:o("session.fixture"),expectedRevision:1,expectedFence:1},requestedAt:"2030-01-01T00:00:01.000Z"}}

package/dist/node/control-plane/hook-authority-validation-events.js

@@ -0,0 +1 @@
+import{equalHookAuthorityDigest as h}from"./hook-authority-digest.js";import{closedObject as l}from"./hook-authority-validation-objects.js";import{inPathScope as r}from"./hook-authority-validation-paths.js";import{validCapability as p,validDigest as a,validRef as i}from"./hook-authority-validation-primitives.js";const c=new Set(["before-file-edit","after-file-edit","before-merge"]),m=["actorRef","currentSha","decision","event","paths","replayKey","requestId","requestedAt","schemaVersion","tenantRef","workspaceRef","workspaceRoot"],f=["sessionRef","expectedRevision","expectedFence"];export function validEventRequestBinding(e){if(e.event==="session-start")return e.paths.length===0&&!["sessionCapability","sessionRef","expectedRevision","expectedFence"].some((o)=>(o in e));if(!("sessionCapability"in e)||!p(e.sessionCapability))return!1;if(!i(e.sessionRef)||!Number.isSafeInteger(e.expectedRevision)||e.expectedRevision<1||!Number.isSafeInteger(e.expectedFence)||e.expectedFence<1)return!1;if(e.event==="before-shell-execution")return e.paths.length===0&&a(e.commandDigest)&&e.decision.body.scope.commandDigests.some((o)=>h(o,e.commandDigest));if(e.event==="before-handoff")return e.paths.length===0&&i(e.checkpointRef)&&i(e.handoffRef);if(e.event==="before-merge")return e.paths.length>0&&e.paths.every((o)=>typeof o==="string"&&r(o,e.decision.body.scope.pathPrefixes))&&l(e.merge,["baseRef","diffDigest","headRef","sourceRef","treeDigest"])&&i(e.merge.sourceRef)&&i(e.merge.baseRef)&&i(e.merge.headRef)&&a(e.merge.treeDigest)&&a(e.merge.diffDigest);if(c.has(e.event))return e.paths.length>0&&e.paths.every((o)=>typeof o==="string"&&r(o,e.decision.body.scope.pathPrefixes));return e.paths.length===0}export function validEventFields(e){const o=e.event,d=Object.keys(e),n=(t)=>d.every((s)=>m.includes(s)||f.includes(s)||t.includes(s));if(o==="session-start")return n([])&&!f.some((t)=>Object.hasOwn(e,t));if(!f.every((t)=>Object.hasOwn(e,t)))return!1;if(o==="before-shell-execution")return n(["commandDigest","sessionCapability"])&&Object.hasOwn(e,"commandDigest")&&Object.hasOwn(e,"sessionCapability");if(o==="before-handoff")return n(["sessionCapability","checkpointRef","handoffRef"])&&Object.hasOwn(e,"checkpointRef")&&Object.hasOwn(e,"handoffRef");if(o==="stop")return n(["sessionCapability"]);return c.has(o)&&n(["sessionCapability",...o==="before-merge"?["merge"]:[]])&&(o!=="before-merge"||Object.hasOwn(e,"merge"))}

package/dist/node/control-plane/hook-authority-validation-objects.js

@@ -0,0 +1 @@
+export function closedObject(e,t){if(!s(e))return!1;if(Reflect.ownKeys(e).some((o)=>typeof o!=="string"||!Object.prototype.propertyIsEnumerable.call(e,o)))return!1;const r=Object.keys(e).sort(),n=[...t].sort();return r.length===n.length&&r.every((o,y)=>o===n[y])}export function closedObjectWithOptional(e,t,r){return s(e)&&!Reflect.ownKeys(e).some((n)=>typeof n!=="string"||!Object.prototype.propertyIsEnumerable.call(e,n))&&t.every((n)=>Object.hasOwn(e,n))&&Object.keys(e).every((n)=>t.includes(n)||r.includes(n))}export function safeArray(e){return Array.isArray(e)&&c(e)&&Reflect.ownKeys(e).every((t)=>t==="length"||typeof t==="string"&&/^0$|^[1-9][0-9]*$/.test(t))&&e.length===Object.keys(e).length&&Object.keys(e).every((t,r)=>t===String(r))}function s(e){if(!e||typeof e!=="object"||Array.isArray(e))return!1;return(Object.getPrototypeOf(e)===Object.prototype||Object.getPrototypeOf(e)===null)&&c(e)}function c(e){return Object.values(Object.getOwnPropertyDescriptors(e)).every((t)=>!t.get&&!t.set)}

package/dist/node/control-plane/hook-authority-validation-paths.js

@@ -0,0 +1 @@
+export function inPathScope(n,e){return i(n)&&e.some((o)=>n.startsWith(o))}export function validPrefix(n){return n.endsWith("/")&&i(n.slice(0,-1))}function i(n){return Boolean(n)&&!/[\\\u0000-\u001f\u007f]/.test(n)&&!/^(?:\/|[A-Za-z]:|\\\\)/.test(n)&&!n.includes("%")&&!n.split("/").some((e)=>e===""||e==="."||e==="..")}

package/dist/node/control-plane/hook-authority-validation-primitives.js

@@ -0,0 +1 @@
+import{HOOK_AUTHORITY_EVENTS as i}from"./hook-authority.js";import{closedObject as o}from"./hook-authority-validation-objects.js";const r=/^[A-Za-z0-9_-]+$/,e=/^sha256:[0-9a-f]{64}$/,s=/^[a-z][a-z0-9._-]{2,127}$/,f=/^(?:[0-9a-f]{40}|[0-9a-f]{64})$/,p=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/;export function validDigest(n){return o(n,["algorithm","canonicalizationVersion","value"])&&n.algorithm==="sha256"&&n.canonicalizationVersion===1&&typeof n.value==="string"&&e.test(n.value)}export function validRef(n){return o(n,["digest","generation","id"])&&typeof n.id==="string"&&s.test(n.id)&&typeof n.generation==="number"&&Number.isSafeInteger(n.generation)&&n.generation>0&&validDigest(n.digest)}export function validTimestamp(n){if(typeof n!=="string"||!p.test(n))return null;const t=Date.parse(n);return Number.isFinite(t)&&new Date(t).toISOString()===n?t:null}export function validCapability(n){return typeof n==="string"&&n.length>=32&&n.length<=512&&r.test(n)}export function validSha(n){return typeof n==="string"&&f.test(n)}export function validWorkspaceRoot(n){if(typeof n!=="string"||n.length<2||!n.startsWith("/"))return!1;return!n.includes("\\")&&!n.includes("//")&&!n.split("/").some((t)=>t==="."||t===".."||t.includes("\x00"))}export function unique(n){return new Set(n.map((t)=>JSON.stringify(t))).size===n.length}export function supportedEvent(n){return typeof n==="string"&&i.includes(n)}

package/dist/node/control-plane/hook-authority-validation-request.js

@@ -0,0 +1 @@
+import{HOOK_AUTHORITY_SIGNATURE_DOMAIN as R}from"./hook-authority.js";import{validEventFields as v,validEventRequestBinding as p}from"./hook-authority-validation-events.js";import{closedObject as a,closedObjectWithOptional as c,safeArray as s}from"./hook-authority-validation-objects.js";import{validPrefix as u}from"./hook-authority-validation-paths.js";import{supportedEvent as d,unique as t,validDigest as r,validRef as n,validSha as l,validWorkspaceRoot as h}from"./hook-authority-validation-primitives.js";const m=/^[a-z][a-z0-9._-]{2,127}$/,g=/^[A-Za-z0-9_-]{85}[AQgw]$/;export function isClosedRequest(e){if(!c(e,["actorRef","currentSha","decision","event","paths","replayKey","requestId","requestedAt","schemaVersion","tenantRef","workspaceRef","workspaceRoot"],["commandDigest","sessionCapability","sessionRef","expectedRevision","expectedFence","checkpointRef","handoffRef","merge"]))return!1;if(!a(e.decision,["body","bodyDigest","domain","envelopeDigest","schemaVersion","signature"]))return!1;const i=e.decision.body;if(!c(i,["authorityFence","authorityVersion","decisionRef","evidence","expiresAt","issuedAt","schemaVersion","scope"],["revocationRef","sessionCapabilityHash"]))return!1;if(!v(e))return!1;return a(i.scope,["actorRef","commandDigests","currentSha","events","pathPrefixes","tenantRef","workspaceRef","workspaceRoot"])&&a(i.evidence,["evidenceRefs","keyStatusRef","leaseRefs","ownershipRef"])&&a(e.decision.signature,["algorithm","issuerKeyId","issuerService","value"])&&s(e.paths)&&s(i.scope.pathPrefixes)&&s(i.scope.events)&&s(i.scope.commandDigests)&&s(i.evidence.evidenceRefs)&&s(i.evidence.leaseRefs)&&(i.revocationRef===void 0||n(i.revocationRef))&&(i.sessionCapabilityHash===void 0||r(i.sessionCapabilityHash))}export function validRequestSemantics(e){const{body:i,signature:o}=e.decision;return d(e.event)&&i.scope.events.includes(e.event)&&y(i)&&k(i)&&A(e)&&p(e)&&e.decision.domain===R&&o.algorithm==="ed25519"&&g.test(o.value)}function y(e){return n(e.decisionRef)&&n(e.scope.tenantRef)&&n(e.scope.workspaceRef)&&n(e.evidence.ownershipRef)&&n(e.evidence.keyStatusRef)&&e.evidence.evidenceRefs.length>0&&e.evidence.leaseRefs.length>0&&e.evidence.evidenceRefs.every(n)&&e.evidence.leaseRefs.every(n)}function k(e){const{scope:i}=e;return i.pathPrefixes.length>0&&i.events.length>0&&t(i.pathPrefixes)&&t(i.events)&&t(i.commandDigests)&&t(e.evidence.evidenceRefs)&&t(e.evidence.leaseRefs)&&i.pathPrefixes.every((o)=>typeof o==="string"&&u(o))&&i.events.every(d)&&i.commandDigests.every(r)}function A(e){const{body:i}=e.decision;return e.schemaVersion===1&&i.schemaVersion===1&&e.decision.schemaVersion===1&&Number.isSafeInteger(i.authorityVersion)&&i.authorityVersion>0&&Number.isSafeInteger(i.authorityFence)&&i.authorityFence>0&&[e.requestId,e.replayKey,e.actorRef,i.decisionRef.id,i.scope.actorRef,e.decision.signature.issuerService,e.decision.signature.issuerKeyId].every((o)=>typeof o==="string"&&m.test(o))&&l(e.currentSha)&&e.currentSha===i.scope.currentSha&&h(e.workspaceRoot)&&e.workspaceRoot===i.scope.workspaceRoot&&e.actorRef===i.scope.actorRef&&f(e.tenantRef,i.scope.tenantRef)&&f(e.workspaceRef,i.scope.workspaceRef)&&r(e.decision.bodyDigest)&&r(e.decision.envelopeDigest)}function f(e,i){return e.id===i.id&&e.generation===i.generation&&e.digest.value===i.digest.value}

package/dist/node/control-plane/hook-authority-validation.js

@@ -0,0 +1 @@
+import{equalHookAuthorityDigest as f,hookAuthorityBodyDigest as m,hookAuthorityEnvelopeDigest as k}from"./hook-authority-digest.js";import{validTimestamp as c}from"./hook-authority-validation-primitives.js";import{isClosedRequest as A,validRequestSemantics as p}from"./hook-authority-validation-request.js";export const HookAuthorityRequestSchema={parse(e,s=new Date){const n=y(e);if(!n||!A(n))return l("Hook Authority request does not match the closed V1 schema.");const t=n;if(!p(t))return l("Request identity, signed scope, signature, or event binding is invalid.");const{body:o}=t.decision,i=c(o.issuedAt),r=c(t.requestedAt),u=c(o.expiresAt);if(i===null||r===null||u===null)return l("Timestamps must be canonical UTC milliseconds.");if(u<=s.getTime())return{ok:!1,error:{code:"expired",message:"Decision has expired."}};if(i>r||r>s.getTime()||r>=u)return l("Authority time must satisfy issuedAt <= requestedAt <= now < expiresAt.");if(!f(t.decision.bodyDigest,m(o)))return l("Signed body digest does not match the decision body.");const{envelopeDigest:b,...g}=t.decision;if(!f(t.decision.envelopeDigest,k(g)))return l("Envelope digest does not match its immutable projection.");return{ok:!0,value:a(t)}}};function l(e){return{ok:!1,error:{code:"invalid_request",message:e}}}function a(e){if(e&&typeof e==="object"){Object.freeze(e);for(const s of Object.values(e))a(s)}return e}function y(e){if(e===null||typeof e!=="object")return null;if(Array.isArray(e)){const n=Reflect.ownKeys(e);if(n.length!==e.length+1||!n.includes("length"))return null;const t=[];for(let i=0;i<e.length;i+=1){const r=Object.getOwnPropertyDescriptor(e,String(i));if(!r||r.get||r.set||r.enumerable!==!0||r.configurable!==!0||r.writable!==!0)return null;const u=h(r.value);if(u===d)return null;t.push(u)}const o=Object.getOwnPropertyDescriptor(e,"length");if(!o||o.get||o.set||o.value!==e.length||o.enumerable!==!1||o.configurable!==!1||o.writable!==!0)return null;return t}if(Object.getPrototypeOf(e)!==Object.prototype&&Object.getPrototypeOf(e)!==null)return null;const s={};for(const n of Reflect.ownKeys(e)){if(typeof n!=="string")return null;const t=Object.getOwnPropertyDescriptor(e,n);if(!t||!t.enumerable||t.get||t.set)return null;const o=h(t.value);if(o===d)return null;s[n]=o}return s}const d=Symbol("invalid");function h(e){if(e===null||typeof e!=="object")return e;return y(e)??d}export function hookAuthoritySchemaError(e){return`${e.code}:${e.message}`}

package/dist/node/control-plane/hook-authority.js

@@ -0,0 +1 @@
+export const HOOK_AUTHORITY_V1=1,HOOK_AUTHORITY_SIGNATURE_DOMAIN="contractspec.hook-authority.decision.v1",HOOK_AUTHORITY_COMPATIBILITY="additive_backward_compatible",HOOK_AUTHORITY_EVENTS=["session-start","before-file-edit","before-shell-execution","after-file-edit","before-handoff","stop","before-merge"];

package/dist/node/control-plane/index.js

@@ -0,0 +1 @@
+export*from"./approval-kernel.js";export*from"./capabilities/index.js";export*from"./commands/index.js";export*from"./connect-materialization.js";export*from"./constants.js";export*from"./contracts.js";export*from"./control-plane.feature.js";export*from"./events/index.js";export*from"./hook-authority.js";export*from"./hook-authority-digest.js";export*from"./hook-authority-reference-adapter.js";export*from"./hook-authority-validation.js";export*from"./policies/index.js";export*from"./queries/index.js";export*from"./repository-authority-bootstrap.js";

package/dist/node/control-plane/policies/controlPlaneMessaging.policy.js

@@ -0,0 +1 @@
+import{definePolicy as e}from"../../policy/index.js";import{CONTROL_PLANE_DOMAIN as n,CONTROL_PLANE_OWNERS as o,CONTROL_PLANE_STABILITY as t,CONTROL_PLANE_TAGS as s}from"../constants.js";export const ControlPlaneMessagingPolicy=e({meta:{key:"channel.messaging-policy",version:"2.0.0",title:"Deterministic Messaging Safety Policy",description:"Applies contract-backed blocked, assist, and autonomous routing for inbound messaging events.",domain:n,scope:"operation",owners:o,tags:[...s,"policy","messaging"],stability:t},rules:[{effect:"deny",actions:["channel.reply"],resource:{type:"control-plane.message"},conditions:[{expression:"context.blockedSignalDetected === true"}],reason:"blocked_signal_detected"},{effect:"allow",actions:["channel.reply"],resource:{type:"control-plane.message"},conditions:[{expression:"context.highRiskDetected === true"}],escalate:"human_review",reason:"high_risk_topic_detected"},{effect:"allow",actions:["channel.reply"],resource:{type:"control-plane.message"},conditions:[{expression:"context.mediumRiskDetected === true && context.confidence >= context.assistMinConfidence"}],escalate:"human_review",reason:"needs_human_review"},{effect:"allow",actions:["channel.reply"],resource:{type:"control-plane.message"},conditions:[{expression:"context.riskTier === 'low' && context.confidence >= context.autoResolveMinConfidence"}],reason:"low_risk_high_confidence"},{effect:"allow",actions:["channel.reply"],resource:{type:"control-plane.message"},conditions:[{expression:"context.confidence >= context.assistMinConfidence && context.blockedSignalDetected !== true"}],escalate:"human_review",reason:"needs_human_review"},{effect:"deny",actions:["channel.reply"],resource:{type:"control-plane.message"},conditions:[{expression:"context.confidence < context.assistMinConfidence"}],reason:"low_confidence"}]});

package/dist/node/control-plane/policies/index.js

@@ -0,0 +1 @@
+export*from"./controlPlaneMessaging.policy.js";

package/dist/node/control-plane/queries/controlPlaneExecutionGet.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as n}from"../../operations/index.js";import{CONTROL_PLANE_DOMAIN as o,CONTROL_PLANE_OWNERS as i,CONTROL_PLANE_STABILITY as a,CONTROL_PLANE_TAGS as l}from"../constants.js";import{ControlPlaneExecutionLaneStateModel as r}from"./controlPlaneExecutionLane.models.js";const p=new t({name:"ControlPlaneExecutionRecord",fields:{executionId:{type:e.ID(),isOptional:!1},intentId:{type:e.ID(),isOptional:!0},planId:{type:e.ID(),isOptional:!0},runId:{type:e.ID(),isOptional:!0},status:{type:e.String_unsecure(),isOptional:!1},riskTier:{type:e.String_unsecure(),isOptional:!0},requiresApproval:{type:e.Boolean(),isOptional:!0},lane:{type:r,isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),s=new t({name:"ControlPlaneExecutionGetInput",fields:{executionId:{type:e.ID(),isOptional:!1}}}),u=new t({name:"ControlPlaneExecutionGetOutput",fields:{execution:{type:p,isOptional:!1}}});export const ControlPlaneExecutionGetQuery=n({meta:{key:"controlPlane.execution.get",title:"Get Execution",version:"1.0.0",description:"Fetch the latest state for one execution.",goal:"Provide operators and channels a deterministic execution view.",context:"Used by dashboards, CLI, and channel adapters to inspect one execution.",domain:o,owners:i,tags:[...l,"execution"],stability:a},capability:{key:"control-plane.core",version:"1.0.0"},io:{input:s,output:u},policy:{auth:"admin",pii:[]}});

package/dist/node/control-plane/queries/controlPlaneExecutionLane.models.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";export const ControlPlaneExecutionLaneStateModel=new t({name:"ControlPlaneExecutionLaneState",fields:{laneKey:{type:e.String_unsecure(),isOptional:!0},laneStatus:{type:e.String_unsecure(),isOptional:!0},lanePhase:{type:e.String_unsecure(),isOptional:!0},ownerRole:{type:e.String_unsecure(),isOptional:!0},evidenceBundleCount:{type:e.Int_unsecure(),isOptional:!0},pendingApprovalCount:{type:e.Int_unsecure(),isOptional:!0},recommendedNextLane:{type:e.String_unsecure(),isOptional:!0}}}),ControlPlaneExecutionLaneSummaryModel=new t({name:"ControlPlaneExecutionLaneSummary",fields:{runId:{type:e.ID(),isOptional:!1},laneKey:{type:e.String_unsecure(),isOptional:!1},laneStatus:{type:e.String_unsecure(),isOptional:!1},lanePhase:{type:e.String_unsecure(),isOptional:!1},ownerRole:{type:e.String_unsecure(),isOptional:!1},objective:{type:e.String_unsecure(),isOptional:!1},evidenceCompleteness:{type:e.Float_unsecure(),isOptional:!1},terminalReadiness:{type:e.String_unsecure(),isOptional:!0},pendingApprovalCount:{type:e.Int_unsecure(),isOptional:!1},missingEvidenceCount:{type:e.Int_unsecure(),isOptional:!0},missingApprovalCount:{type:e.Int_unsecure(),isOptional:!0},recommendedNextLane:{type:e.String_unsecure(),isOptional:!0},updatedAt:{type:e.DateTime(),isOptional:!1}}}),ControlPlaneExecutionLaneDetailModel=new t({name:"ControlPlaneExecutionLaneDetail",fields:{runId:{type:e.ID(),isOptional:!1},laneKey:{type:e.String_unsecure(),isOptional:!1},laneStatus:{type:e.String_unsecure(),isOptional:!1},lanePhase:{type:e.String_unsecure(),isOptional:!1},ownerRole:{type:e.String_unsecure(),isOptional:!1},objective:{type:e.String_unsecure(),isOptional:!1},teamStatus:{type:e.String_unsecure(),isOptional:!0},completionPhase:{type:e.String_unsecure(),isOptional:!0},terminalReadiness:{type:e.String_unsecure(),isOptional:!0},missingEvidence:{type:e.String_unsecure(),isOptional:!0,isArray:!0},missingApprovals:{type:e.String_unsecure(),isOptional:!0,isArray:!0},blockingRisks:{type:e.String_unsecure(),isOptional:!0,isArray:!0},recommendedNextLane:{type:e.String_unsecure(),isOptional:!0},evidenceBundleCount:{type:e.Int_unsecure(),isOptional:!1},approvalCount:{type:e.Int_unsecure(),isOptional:!1},transitionCount:{type:e.Int_unsecure(),isOptional:!1},queueSkew:{type:e.Int_unsecure(),isOptional:!0},cleanupStatus:{type:e.String_unsecure(),isOptional:!0},retryCount:{type:e.Int_unsecure(),isOptional:!0},snapshotRef:{type:e.String_unsecure(),isOptional:!0},updatedAt:{type:e.DateTime(),isOptional:!1}}});

package/dist/node/control-plane/queries/controlPlaneExecutionLaneGet.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as e}from"@lssm/lib.schema";import{defineQuery as n}from"../../operations/index.js";import{CONTROL_PLANE_DOMAIN as o,CONTROL_PLANE_OWNERS as a,CONTROL_PLANE_STABILITY as i,CONTROL_PLANE_TAGS as r}from"../constants.js";import{ControlPlaneExecutionLaneDetailModel as l}from"./controlPlaneExecutionLane.models.js";const u=new e({name:"ControlPlaneExecutionLaneGetInput",fields:{runId:{type:t.ID(),isOptional:!1}}}),c=new e({name:"ControlPlaneExecutionLaneGetOutput",fields:{run:{type:l,isOptional:!1}}});export const ControlPlaneExecutionLaneGetQuery=n({meta:{key:"controlPlane.execution.lane.get",title:"Get Execution Lane",version:"1.0.0",description:"Fetch the current state of one execution-lane run.",goal:"Provide contract-backed lane detail for operator surfaces.",context:"Used by dashboards, APIs, and CLI surfaces to inspect one lane run.",domain:o,owners:a,tags:[...r,"execution","lane"],stability:i},capability:{key:"control-plane.audit",version:"1.0.0"},io:{input:u,output:c},policy:{auth:"admin",pii:[]}});

package/dist/node/control-plane/queries/controlPlaneExecutionLaneList.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as n}from"../../operations/index.js";import{CONTROL_PLANE_DOMAIN as o,CONTROL_PLANE_OWNERS as i,CONTROL_PLANE_STABILITY as a,CONTROL_PLANE_TAGS as s}from"../constants.js";import{ControlPlaneExecutionLaneSummaryModel as r}from"./controlPlaneExecutionLane.models.js";const u=new t({name:"ControlPlaneExecutionLaneListInput",fields:{laneKey:{type:e.String_unsecure(),isOptional:!0},laneStatus:{type:e.String_unsecure(),isOptional:!0},limit:{type:e.Int_unsecure(),isOptional:!0},offset:{type:e.Int_unsecure(),isOptional:!0}}}),l=new t({name:"ControlPlaneExecutionLaneListOutput",fields:{items:{type:r,isOptional:!1,isArray:!0},total:{type:e.Int_unsecure(),isOptional:!1}}});export const ControlPlaneExecutionLaneListQuery=n({meta:{key:"controlPlane.execution.lane.list",title:"List Execution Lanes",version:"1.0.0",description:"List execution-lane runs with lane-focused filters.",goal:"Provide contract-backed lane inventory for operators.",context:"Used by dashboards, APIs, and CLI surfaces to inspect lane queues and status.",domain:o,owners:i,tags:[...s,"execution","lane"],stability:a},capability:{key:"control-plane.audit",version:"1.0.0"},io:{input:u,output:l},policy:{auth:"admin",pii:[]}});

package/dist/node/control-plane/queries/controlPlaneExecutionList.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as e}from"@lssm/lib.schema";import{defineQuery as n}from"../../operations/index.js";import{CONTROL_PLANE_DOMAIN as i,CONTROL_PLANE_OWNERS as o,CONTROL_PLANE_STABILITY as a,CONTROL_PLANE_TAGS as s}from"../constants.js";import{ControlPlaneExecutionLaneStateModel as r}from"./controlPlaneExecutionLane.models.js";const u=new e({name:"ControlPlaneExecutionSummary",fields:{executionId:{type:t.ID(),isOptional:!1},status:{type:t.String_unsecure(),isOptional:!1},riskTier:{type:t.String_unsecure(),isOptional:!0},lane:{type:r,isOptional:!0},updatedAt:{type:t.DateTime(),isOptional:!1}}}),l=new e({name:"ControlPlaneExecutionListInput",fields:{workspaceId:{type:t.ID(),isOptional:!0},status:{type:t.String_unsecure(),isOptional:!0},limit:{type:t.Int_unsecure(),isOptional:!0},offset:{type:t.Int_unsecure(),isOptional:!0}}}),p=new e({name:"ControlPlaneExecutionListOutput",fields:{items:{type:u,isOptional:!1,isArray:!0},total:{type:t.Int_unsecure(),isOptional:!1}}});export const ControlPlaneExecutionListQuery=n({meta:{key:"controlPlane.execution.list",title:"List Executions",version:"1.0.0",description:"List execution runs with filtering and pagination.",goal:"Provide auditable execution inventory for operations teams.",context:"Used by dashboards and CLI status views to monitor runtime execution.",domain:i,owners:o,tags:[...s,"execution"],stability:a},capability:{key:"control-plane.core",version:"1.0.0"},io:{input:l,output:p},policy:{auth:"admin",pii:[]}});

package/dist/node/control-plane/queries/controlPlanePolicyExplain.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{defineQuery as n}from"../../operations/index.js";import{CONTROL_PLANE_DOMAIN as t,CONTROL_PLANE_OWNERS as o,CONTROL_PLANE_STABILITY as a,CONTROL_PLANE_TAGS as l}from"../constants.js";const r=new i({name:"ControlPlanePolicyExplainInput",fields:{executionId:{type:e.ID(),isOptional:!1},stepId:{type:e.ID(),isOptional:!0}}}),p=new i({name:"ControlPlanePolicyExplainOutput",fields:{verdict:{type:e.String_unsecure(),isOptional:!1},riskTier:{type:e.String_unsecure(),isOptional:!1},reasons:{type:e.String_unsecure(),isOptional:!0,isArray:!0},policyVersion:{type:e.String_unsecure(),isOptional:!1}}});export const ControlPlanePolicyExplainQuery=n({meta:{key:"controlPlane.policy.explain",title:"Explain Policy Verdict",version:"1.0.0",description:"Explain policy outcomes for an execution or step.",goal:"Make governance decisions auditable and understandable.",context:"Used in operator UIs and incident review to inspect verdict rationale.",domain:t,owners:o,tags:[...l,"policy","audit"],stability:a},capability:{key:"control-plane.audit",version:"1.0.0"},io:{input:r,output:p},policy:{auth:"admin",pii:[]}});

package/dist/node/control-plane/queries/controlPlaneSkillList.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as e}from"@lssm/lib.schema";import{defineQuery as i}from"../../operations/index.js";import{CONTROL_PLANE_DOMAIN as l,CONTROL_PLANE_OWNERS as n,CONTROL_PLANE_STABILITY as s,CONTROL_PLANE_TAGS as a}from"../constants.js";const o=new e({name:"ControlPlaneSkillSummary",fields:{skillKey:{type:t.String_unsecure(),isOptional:!1},version:{type:t.String_unsecure(),isOptional:!1},status:{type:t.String_unsecure(),isOptional:!1},verified:{type:t.Boolean(),isOptional:!1},publisher:{type:t.String_unsecure(),isOptional:!0},provenance:{type:t.String_unsecure(),isOptional:!0},installedAt:{type:t.DateTime(),isOptional:!0}}}),r=new e({name:"ControlPlaneSkillListInput",fields:{includeDisabled:{type:t.Boolean(),isOptional:!0},limit:{type:t.Int_unsecure(),isOptional:!0},offset:{type:t.Int_unsecure(),isOptional:!0}}}),p=new e({name:"ControlPlaneSkillListOutput",fields:{items:{type:o,isOptional:!1,isArray:!0},total:{type:t.Int_unsecure(),isOptional:!1}}});export const ControlPlaneSkillListQuery=i({meta:{key:"controlPlane.skill.list",title:"List Skills",version:"1.0.0",description:"List installed and available skill artifacts.",goal:"Provide a governed inventory of skill availability and state.",context:"Used by operators and marketplace tooling to inspect active skill sets.",domain:l,owners:n,tags:[...a,"skills"],stability:s},capability:{key:"control-plane.skill-registry",version:"1.0.0"},io:{input:r,output:p},policy:{auth:"admin",pii:[]}});

package/dist/node/control-plane/queries/controlPlaneSkillVerify.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{defineQuery as t}from"../../operations/index.js";import{CONTROL_PLANE_DOMAIN as l,CONTROL_PLANE_OWNERS as n,CONTROL_PLANE_STABILITY as r,CONTROL_PLANE_TAGS as o}from"../constants.js";import{ControlPlaneSkillManifestModel as a,ControlPlaneSkillVerificationIssueModel as s}from"../skills/schema.js";const p=new i({name:"ControlPlaneSkillVerifyInput",fields:{skillKey:{type:e.String_unsecure(),isOptional:!1},version:{type:e.String_unsecure(),isOptional:!1},artifactDigest:{type:e.String_unsecure(),isOptional:!1},manifest:{type:a,isOptional:!1}}}),u=new i({name:"ControlPlaneSkillVerifyOutput",fields:{verified:{type:e.Boolean(),isOptional:!1},signatureVerified:{type:e.Boolean(),isOptional:!0},publisherTrusted:{type:e.Boolean(),isOptional:!0},compatibilityVerified:{type:e.Boolean(),isOptional:!0},manifestDigest:{type:e.String_unsecure(),isOptional:!0},issues:{type:s,isOptional:!0,isArray:!0},reason:{type:e.String_unsecure(),isOptional:!0},verifiedAt:{type:e.DateTime(),isOptional:!1}}});export const ControlPlaneSkillVerifyQuery=t({meta:{key:"controlPlane.skill.verify",title:"Verify Skill Artifact",version:"1.0.0",description:"Verify skill signature and compatibility constraints.",goal:"Make skill trust checks explicit and queryable.",context:"Used by install pipelines and operators before enabling skill artifacts.",domain:l,owners:n,tags:[...o,"skills","governance"],stability:r},capability:{key:"control-plane.skill-registry",version:"1.0.0"},io:{input:p,output:u},policy:{auth:"admin",pii:[]}});

package/dist/node/control-plane/queries/controlPlaneTraceGet.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as n}from"../../operations/index.js";import{CONTROL_PLANE_DOMAIN as a,CONTROL_PLANE_OWNERS as o,CONTROL_PLANE_STABILITY as i,CONTROL_PLANE_TAGS as r}from"../constants.js";const l=new t({name:"ControlPlaneTraceEntry",fields:{timestamp:{type:e.DateTime(),isOptional:!1},stage:{type:e.String_unsecure(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},actorId:{type:e.ID(),isOptional:!0},metadata:{type:e.JSONObject(),isOptional:!0}}}),s=new t({name:"ControlPlaneTraceGetInput",fields:{executionId:{type:e.ID(),isOptional:!1},includePayloads:{type:e.Boolean(),isOptional:!0}}}),p=new t({name:"ControlPlaneTraceGetOutput",fields:{executionId:{type:e.ID(),isOptional:!1},entries:{type:l,isOptional:!1,isArray:!0}}});export const ControlPlaneTraceGetQuery=n({meta:{key:"controlPlane.trace.get",title:"Get Execution Trace",version:"1.0.0",description:"Return the replayable trace timeline for one execution.",goal:"Support audits, debugging, and deterministic replay.",context:"Used by operator surfaces when inspecting policy and tool execution history.",domain:a,owners:o,tags:[...r,"trace","audit"],stability:i},capability:{key:"control-plane.audit",version:"1.0.0"},io:{input:s,output:p},policy:{auth:"admin",pii:[]}});

package/dist/node/control-plane/queries/index.js

@@ -0,0 +1 @@
+export*from"./controlPlaneExecutionGet.query.js";export*from"./controlPlaneExecutionLane.models.js";export*from"./controlPlaneExecutionLaneGet.query.js";export*from"./controlPlaneExecutionLaneList.query.js";export*from"./controlPlaneExecutionList.query.js";export*from"./controlPlanePolicyExplain.query.js";export*from"./controlPlaneSkillList.query.js";export*from"./controlPlaneSkillVerify.query.js";export*from"./controlPlaneTraceGet.query.js";

package/dist/node/control-plane/repository-authority-bootstrap.js

@@ -0,0 +1 @@
+export const CONTROL_PLANE_REPOSITORY_AUTHORITY_BOOTSTRAP_VERSION=1;

package/dist/node/control-plane/skills/index.js

@@ -0,0 +1 @@
+export*from"./schema.js";export*from"./signer.js";export*from"./types.js";export*from"./validator.js";export*from"./verifier.js";

package/dist/node/control-plane/skills/schema.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";export const ControlPlaneSkillCapabilityRequirementModel=new t({name:"ControlPlaneSkillCapabilityRequirement",fields:{key:{type:e.String_unsecure(),isOptional:!1},version:{type:e.String_unsecure(),isOptional:!0}}});const i=new t({name:"ControlPlaneSkillVersionRange",fields:{minVersion:{type:e.String_unsecure(),isOptional:!0},maxVersion:{type:e.String_unsecure(),isOptional:!0}}}),n=new t({name:"ControlPlaneSkillArtifactFile",fields:{path:{type:e.String_unsecure(),isOptional:!1},digest:{type:e.String_unsecure(),isOptional:!1},size:{type:e.Int_unsecure(),isOptional:!1}}}),l=new t({name:"ControlPlaneSkillSignature",fields:{algorithm:{type:e.String_unsecure(),isOptional:!1},signature:{type:e.String_unsecure(),isOptional:!1},publicKey:{type:e.String_unsecure(),isOptional:!1},keyId:{type:e.String_unsecure(),isOptional:!0},issuedAt:{type:e.DateTime(),isOptional:!0},expiresAt:{type:e.DateTime(),isOptional:!0},metadata:{type:e.JSONObject(),isOptional:!0}}});export const ControlPlaneSkillManifestModel=new t({name:"ControlPlaneSkillManifest",fields:{schemaVersion:{type:e.String_unsecure(),isOptional:!1},skill:{type:new t({name:"ControlPlaneSkillManifestSkill",fields:{key:{type:e.String_unsecure(),isOptional:!1},version:{type:e.String_unsecure(),isOptional:!1},entryPoint:{type:e.String_unsecure(),isOptional:!1},description:{type:e.String_unsecure(),isOptional:!0}}}),isOptional:!1},publisher:{type:new t({name:"ControlPlaneSkillManifestPublisher",fields:{id:{type:e.String_unsecure(),isOptional:!1},provenance:{type:e.String_unsecure(),isOptional:!1},repositoryUrl:{type:e.String_unsecure(),isOptional:!0}}}),isOptional:!1},artifact:{type:new t({name:"ControlPlaneSkillManifestArtifact",fields:{digest:{type:e.String_unsecure(),isOptional:!1},files:{type:n,isOptional:!0,isArray:!0}}}),isOptional:!1},compatibility:{type:new t({name:"ControlPlaneSkillManifestCompatibility",fields:{contractsSpec:{type:i,isOptional:!0},controlPlaneFeature:{type:i,isOptional:!0},requiredCapabilities:{type:ControlPlaneSkillCapabilityRequirementModel,isOptional:!0,isArray:!0}}}),isOptional:!1},metadata:{type:e.JSONObject(),isOptional:!0},signature:{type:l,isOptional:!0}}}),ControlPlaneSkillVerificationIssueModel=new t({name:"ControlPlaneSkillVerificationIssue",fields:{code:{type:e.String_unsecure(),isOptional:!1},message:{type:e.String_unsecure(),isOptional:!1}}});

package/dist/node/control-plane/skills/signer.js

@@ -0,0 +1,4 @@
+export async function signControlPlaneSkillManifest(t,r,n={}){const e=n.algorithm??"ed25519",f=l(canonicalizeControlPlaneSkillManifest(t)),p=await b(r,e),S=await crypto.subtle.sign(i(e),p,o(f)),C=await m(r,e,n.publicKey);return{...t,signature:{algorithm:e,signature:u(new Uint8Array(S)),publicKey:C,keyId:n.keyId,issuedAt:c(n.issuedAt)??new Date().toISOString(),expiresAt:c(n.expiresAt),metadata:n.metadata}}}export async function verifyControlPlaneSkillSignature(t){if(!t.signature?.signature)throw Error("Skill manifest is missing signature metadata.");const r=l(canonicalizeControlPlaneSkillManifest(t)),n=g(t.signature.signature),e=await P(t.signature.publicKey,t.signature.algorithm);return crypto.subtle.verify(i(t.signature.algorithm),e,o(n),o(r))}export function canonicalizeControlPlaneSkillManifest(t){const r=a({...t,signature:void 0});return JSON.stringify(r)}async function b(t,r){if(t instanceof CryptoKey)return t;if(typeof t==="string")return K(t,r);return t.privateKey}async function m(t,r,n){if(typeof n==="string")return n;if(n instanceof CryptoKey)return s(n);if(typeof t!=="string"&&"publicKey"in t&&t.publicKey)return s(t.publicKey);throw Error("signControlPlaneSkillManifest: publicKey is required when the signing key does not include a public CryptoKey.")}async function K(t,r){return crypto.subtle.importKey("pkcs8",y(t),i(r),!0,["sign"])}async function P(t,r){return crypto.subtle.importKey("spki",y(t),i(r),!0,["verify"])}async function s(t){const r=await crypto.subtle.exportKey("spki",t);return d(new Uint8Array(r),"PUBLIC KEY")}function i(t){if(t==="ed25519")return{name:"Ed25519"};return{name:"RSA-PSS",saltLength:32}}function l(t){return new TextEncoder().encode(t)}function y(t){const r=t.replace(/-----BEGIN [^-]+-----|-----END [^-]+-----|\s/g,"");return o(g(r))}function d(t,r){const e=u(t).match(/.{1,64}/g)??[];return`-----BEGIN ${r}-----
+${e.join(`
+`)}
+-----END ${r}-----`}function o(t){return t.buffer.slice(t.byteOffset,t.byteOffset+t.byteLength)}function u(t){let r="";for(const n of t)r+=String.fromCharCode(n);return btoa(r)}function g(t){const r=atob(t),n=new Uint8Array(r.length);for(let e=0;e<r.length;e+=1)n[e]=r.charCodeAt(e);return n}function a(t){if(Array.isArray(t))return t.map((r)=>a(r));if(!t||typeof t!=="object")return t;return Object.fromEntries(Object.entries(t).filter(([,r])=>r!==void 0).sort(([r],[n])=>r.localeCompare(n)).map(([r,n])=>[r,a(n)]))}function c(t){if(!t)return;return typeof t==="string"?new Date(t).toISOString():t.toISOString()}

package/dist/node/control-plane/skills/validator.js

@@ -0,0 +1 @@
+export function validateControlPlaneSkillManifest(i){const e=[],s=r(i.skill)?i.skill:null,n=r(i.publisher)?i.publisher:null,t=r(i.artifact)?i.artifact:null;if(i.schemaVersion!=="1.0.0")e.push({code:"SCHEMA_VERSION_INVALID",message:`Unsupported skill manifest schema version ${i.schemaVersion}.`});if(!s||typeof s.key!=="string"||typeof s.version!=="string"||typeof s.entryPoint!=="string")e.push({code:"MANIFEST_INVALID",message:"Skill manifest is missing required skill metadata."});if(!n||typeof n.id!=="string"||typeof n.provenance!=="string")e.push({code:"MANIFEST_INVALID",message:"Skill manifest is missing required publisher metadata."});if(!t||typeof t.digest!=="string")e.push({code:"MANIFEST_INVALID",message:"Skill manifest is missing an artifact digest."});for(const l of Array.isArray(t?.files)?t.files:[])if(!l.path||!l.digest||l.size<0)e.push({code:"MANIFEST_INVALID",message:"Skill manifest contains an invalid artifact file entry."});if(i.signature?.issuedAt&&Number.isNaN(Date.parse(i.signature.issuedAt)))e.push({code:"MANIFEST_INVALID",message:"Skill manifest signature issuedAt is not a valid ISO timestamp."});if(i.signature?.expiresAt&&Number.isNaN(Date.parse(i.signature.expiresAt)))e.push({code:"MANIFEST_INVALID",message:"Skill manifest signature expiresAt is not a valid ISO timestamp."});return e}function r(i){return typeof i==="object"&&i!==null}

package/dist/node/control-plane/skills/verifier.js

@@ -0,0 +1 @@
+import{sha256Hex as f}from"@lssm/lib.crypto-utils";import{compareVersions as s}from"compare-versions";import{canonicalizeControlPlaneSkillManifest as S,verifyControlPlaneSkillSignature as u}from"./signer.js";import{validateControlPlaneSkillManifest as d}from"./validator.js";export async function verifyControlPlaneSkillManifest(e){const i=d(e.manifest),l=e.now??new Date,t=e.trustPolicy.trustedPublishers.find((c)=>c.id===e.manifest.publisher.id),o=await P(e.manifest,i),n=m(e.manifest,t,e.trustPolicy,l,i),r=C(e.manifest,e.runtime,i);if(e.expectedArtifactDigest&&e.expectedArtifactDigest!==e.manifest.artifact.digest)i.push({code:"ARTIFACT_DIGEST_MISMATCH",message:"Artifact digest does not match the manifest digest."});return{verified:i.length===0,signatureVerified:o,publisherTrusted:n,compatibilityVerified:r,verifiedAt:l.toISOString(),manifestDigest:p(S(e.manifest)),issues:i}}async function P(e,i){if(!e.signature){i.push({code:"SIGNATURE_MISSING",message:"Skill manifest is missing a signature block."});return!1}try{if(await u(e))return!0}catch{}i.push({code:"SIGNATURE_INVALID",message:"Skill manifest signature verification failed."});return!1}function m(e,i,l,t,o){let n=!0;if(!i){o.push({code:"PUBLISHER_UNTRUSTED",message:`Publisher ${e.publisher.id} is not trusted.`});n=!1}if(i&&!i.keyIds?.length&&!i.publicKeys?.length){o.push({code:"KEY_UNTRUSTED",message:"Trusted publishers must pin at least one keyId or public key."});n=!1}if(i?.keyIds?.length&&(!e.signature?.keyId||!i.keyIds.includes(e.signature.keyId))){o.push({code:"KEY_UNTRUSTED",message:"Skill manifest keyId is not trusted for this publisher."});n=!1}if(i?.publicKeys?.length&&(!e.signature?.publicKey||!i.publicKeys.includes(e.signature.publicKey))){o.push({code:"KEY_UNTRUSTED",message:"Skill manifest public key is not trusted for this publisher."});n=!1}if(i?.provenancePrefixes?.length&&!i.provenancePrefixes.some((r)=>e.publisher.provenance.startsWith(r))){o.push({code:"PROVENANCE_UNTRUSTED",message:"Skill manifest provenance is not trusted for this publisher."});n=!1}if(e.signature?.expiresAt&&!l.allowExpiredSignatures&&new Date(e.signature.expiresAt).getTime()<t.getTime()){o.push({code:"SIGNATURE_EXPIRED",message:"Skill manifest signature has expired."});n=!1}return n}function C(e,i,l){a(i.contractsSpecVersion,e.compatibility.contractsSpec,"CONTRACTS_SPEC_TOO_OLD","CONTRACTS_SPEC_TOO_NEW","ContractSpec runtime",l);a(i.controlPlaneFeatureVersion,e.compatibility.controlPlaneFeature,"CONTROL_PLANE_TOO_OLD","CONTROL_PLANE_TOO_NEW","Control plane feature",l);for(const t of e.compatibility.requiredCapabilities??[])if(!i.availableCapabilities?.some((n)=>n.key===t.key&&(t.version==null||n.version===t.version)))l.push({code:"CAPABILITY_MISSING",message:`Missing required capability ${t.key}${t.version?`@${t.version}`:""}.`});return!l.some((t)=>t.code.includes("TOO_")||t.code.includes("VERSION_MISSING")||t.code==="CAPABILITY_MISSING")}function a(e,i,l,t,o,n){if(!i||!e){if(i&&!e)n.push({code:l==="CONTRACTS_SPEC_TOO_OLD"?"CONTRACTS_SPEC_VERSION_MISSING":"CONTROL_PLANE_VERSION_MISSING",message:`${o} version is required for compatibility verification.`});return}if(i.minVersion&&s(e,i.minVersion)<0)n.push({code:l,message:`${o} version is below ${i.minVersion}.`});if(i.maxVersion&&s(e,i.maxVersion)>0)n.push({code:t,message:`${o} version is above ${i.maxVersion}.`})}function p(e){return f(e)}

package/dist/node/creative-intelligence/constants.js

@@ -0,0 +1 @@
+export const CREATIVE_INTELLIGENCE_DOMAIN="creative-intelligence",CREATIVE_INTELLIGENCE_OWNERS=["team-creator-intelligence"],CREATIVE_INTELLIGENCE_TAGS=["creative-intelligence","trends","campaigns","evidence"],CREATIVE_INTELLIGENCE_STABILITY="experimental",CREATIVE_INTELLIGENCE_CAPABILITY={key:"creative-intelligence.system",version:"1.0.0"},CREATIVE_CAUSAL_LABELS=["observed","correlated","experiment_supported"];

package/dist/node/creative-intelligence/events.js

@@ -0,0 +1,3 @@
+import{ScalarTypeEnum as e,SchemaModel as a}from"@lssm/lib.schema";import{docRef as o}from"../docs/registry.js";import{defineEvent as c}from"../events.js";import{CREATIVE_INTELLIGENCE_CAPABILITY as s,CREATIVE_INTELLIGENCE_OWNERS as d,CREATIVE_INTELLIGENCE_STABILITY as l,CREATIVE_INTELLIGENCE_TAGS as v}from"./constants.js";const p=new a({name:"CreativeIntelligenceEventPayloadV1",fields:{tenantId:{type:e.ID(),isOptional:!1},workspaceId:{type:e.ID(),isOptional:!1},resourceId:{type:e.ID(),isOptional:!1},evidenceRef:{type:e.ID(),isOptional:!0},change:{type:e.JSONObject(),isOptional:!0},occurredAt:{type:e.DateTime(),isOptional:!1}}});export const CreativeIntelligenceEventsDocBlock={id:"docs.tech.creative-intelligence.events",title:"Creative intelligence events",summary:"Lifecycle events for signals, trends, hypotheses, outcomes, and benchmarks.",kind:"reference",visibility:"public",route:"/docs/tech/creative-intelligence/events",tags:["creative-intelligence","trends","evidence","benchmarks","events"],body:`# Creative intelligence events
+
+Events retain evidence and causal boundaries without granting campaign authority.`};const t=(i,n,r)=>c({meta:{key:i,title:n,version:"1.0.0",description:r,owners:[...d],tags:[...v],stability:l,docId:[o(CreativeIntelligenceEventsDocBlock.id)]},capability:{...s},pii:[],payload:p});export const CreativeSignalIngestedEvent=t("creative.signal.ingested","Creative signal ingested","An admitted signal was normalized with evidence."),CreativeTrendCalculatedEvent=t("creative.trend.calculated","Creative trend calculated","A deterministic trend projection was calculated."),CreativeHypothesisProposedEvent=t("creative.hypothesis.proposed","Creative hypothesis proposed","An assistive hypothesis was drafted from cited evidence."),CreativeOutcomeRecordedEvent=t("creative.outcome.recorded","Creative outcome recorded","A variant outcome was recorded with an explicit causal label."),CreativeBenchmarkRebuiltEvent=t("creative.benchmark.rebuilt","Creative benchmark rebuilt","An opt-in privacy-thresholded benchmark projection was rebuilt."),CreativeBenchmarkConsentRevokedEvent=t("creative.benchmark.consent_revoked","Creative benchmark consent revoked","A workspace revoked future and projected benchmark contribution."),creativeIntelligenceEvents=[CreativeSignalIngestedEvent,CreativeTrendCalculatedEvent,CreativeHypothesisProposedEvent,CreativeOutcomeRecordedEvent,CreativeBenchmarkRebuiltEvent,CreativeBenchmarkConsentRevokedEvent];

package/dist/node/creative-intelligence/index.js

@@ -0,0 +1 @@
+export*from"./constants.js";export*from"./events.js";export*from"./operations.js";export*from"./registry.js";export*from"./types.js";

package/dist/node/creative-intelligence/operations.js

@@ -0,0 +1,6 @@
+import{ScalarTypeEnum as e,SchemaModel as a}from"@lssm/lib.schema";import{docRef as d}from"../docs/registry.js";import{defineCommand as m,defineQuery as u}from"../operations/index.js";import{CREATIVE_INTELLIGENCE_CAPABILITY as s,CREATIVE_INTELLIGENCE_DOMAIN as v,CREATIVE_INTELLIGENCE_OWNERS as y,CREATIVE_INTELLIGENCE_STABILITY as g,CREATIVE_INTELLIGENCE_TAGS as h}from"./constants.js";const c=new a({name:"CreativeIntelligenceScopedInputV1",fields:{ecosystemId:{type:e.ID(),isOptional:!1},tenantId:{type:e.ID(),isOptional:!1},workspaceId:{type:e.ID(),isOptional:!1},datasetId:{type:e.ID(),isOptional:!1},jurisdiction:{type:e.NonEmptyString(),isOptional:!1},purpose:{type:e.NonEmptyString(),isOptional:!1},idempotencyKey:{type:e.NonEmptyString(),isOptional:!0},payload:{type:e.JSONObject(),isOptional:!0}}}),E=new a({name:"CreativeIntelligenceMutationOutputV1",fields:{receiptId:{type:e.ID(),isOptional:!1},resourceId:{type:e.ID(),isOptional:!0},state:{type:e.NonEmptyString(),isOptional:!1}}}),I=new a({name:"CreativeIntelligenceQueryOutputV1",fields:{items:{type:e.JSONObject(),isOptional:!1},snapshotAt:{type:e.DateTime(),isOptional:!1},nextCursor:{type:e.String_unsecure(),isOptional:!0}}});export const CreativeIntelligenceOperationsDocBlock={id:"docs.tech.creative-intelligence.operations",title:"Creative intelligence operations",summary:"Evidence-backed trend, hypothesis, outcome, and benchmark operations.",kind:"reference",visibility:"public",route:"/docs/tech/creative-intelligence/operations",tags:["creative-intelligence","trends","evidence","benchmarks"],body:`# Creative intelligence operations
+
+Public-source and owned-performance evidence may produce bounded hypotheses.
+Missing metrics remain missing, causal claims stay explicit, and generated
+suggestions never activate campaigns or select creators.
+`};const p=(i,n,t)=>({key:i,title:n,version:"1.0.0",description:t,goal:t,context:"Creative intelligence is evidence-first and cannot activate campaigns or make adverse or economic decisions.",domain:v,owners:[...y],tags:[...h],stability:g,docId:[d(CreativeIntelligenceOperationsDocBlock.id)]}),l={SCOPE_DENIED:{description:"The actor cannot access this scope.",http:403},SOURCE_DENIED:{description:"Source qualification or rights policy denied use.",http:403},EVIDENCE_REQUIRED:{description:"The operation requires immutable source evidence.",http:422},BENCHMARK_SUPPRESSED:{description:"The requested slice is below the privacy floor.",http:404}},o=(i,n,t)=>m({meta:p(i,n,t),capability:{...s},io:{input:c,output:E,errors:l},policy:{auth:"user",pii:[]}}),r=(i,n,t)=>u({meta:p(i,n,t),capability:{...s},io:{input:c,output:I,errors:l},policy:{auth:"user",pii:[]}});export const CreativeSignalIngestCommand=o("creative.signal.ingest","Ingest creative signal","Normalize an admitted evidence-backed creative signal."),CreativeHypothesisProposeCommand=o("creative.hypothesis.propose","Propose creative hypothesis","Draft a bounded campaign hypothesis from cited signals."),CreativeOutcomeRecordCommand=o("creative.outcome.record","Record creative outcome","Record an observed or experiment-supported variant outcome."),CreativeBenchmarkConsentSetCommand=o("creative.benchmark.consent.set","Set benchmark consent","Grant or revoke versioned benchmark contribution consent."),CreativeTrendSearchQuery=r("creative.trend.search","Search creative trends","Search current evidence-backed trends with freshness and limitations."),CreativeInspirationListQuery=r("creative.inspiration.list","List creative inspiration","List source-linked inspiration without copying protected assets."),CreativeBenchmarkCompareQuery=r("creative.benchmark.compare","Compare creative benchmark","Compare an eligible workspace projection with privacy-thresholded benchmarks."),CreativeInsightExplainQuery=r("creative.insight.explain","Explain creative insight","Explain score components, evidence, limitations, and causal status."),creativeIntelligenceOperations=[CreativeSignalIngestCommand,CreativeHypothesisProposeCommand,CreativeOutcomeRecordCommand,CreativeBenchmarkConsentSetCommand,CreativeTrendSearchQuery,CreativeInspirationListQuery,CreativeBenchmarkCompareQuery,CreativeInsightExplainQuery];

package/dist/node/creative-intelligence/registry.js

@@ -0,0 +1 @@
+import{creativeIntelligenceEvents as n}from"./events.js";import{creativeIntelligenceOperations as r}from"./operations.js";export const creativeIntelligenceOperationRegistry=Object.fromEntries(r.map((e)=>[e.meta.key,e])),creativeIntelligenceEventRegistry=Object.fromEntries(n.map((e)=>[e.meta.key,e]));export function assertUniqueCreativeIntelligenceContractKeys(){const e=[...r.map((t)=>t.meta.key),...n.map((t)=>t.meta.key)];if(new Set(e).size!==e.length)throw Error("CREATIVE_INTELLIGENCE_CONTRACT_KEY_COLLISION")}

package/dist/node/creator-operations/campaign.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{CreatorDigestSchema as n,CreatorIdSchema as o,CreatorMoneyUnitSchema as p,CreatorRecordBase as m,CreatorUnitsSchema as i}from"./common.js";export const CreatorTermsSchema=e.strictObject({version:e.number().int().positive(),unit:p,tiers:e.array(e.strictObject({fromViews:i,toViews:i.nullable(),ratePerThousand:i})).min(1).max(100),maximumViews:i.nullable(),flatUnits:i,postCapUnits:i,creatorCapUnits:i,campaignCapUnits:i,cadenceSlots:e.number().int().positive()}).superRefine((t,c)=>{const r=(a)=>c.addIssue({code:"custom",message:a});if(t.tiers[0]?.fromViews!=="0")r("First tier starts at zero.");for(const[a,s]of t.tiers.entries()){if(s.toViews!==null&&BigInt(s.toViews)<=BigInt(s.fromViews))r("Tier bounds must increase.");if(a&&t.tiers[a-1]?.toViews!==s.fromViews)r("Tiers must be contiguous; only the last can be unbounded.")}if(t.maximumViews!==null&&t.tiers.at(-1)?.toViews!==t.maximumViews)r("Final tier must end at maximumViews.");if(BigInt(t.postCapUnits)>BigInt(t.creatorCapUnits)||BigInt(t.creatorCapUnits)>BigInt(t.campaignCapUnits))r("Caps must satisfy post <= creator <= campaign.")}),CreatorCampaignSchema=e.strictObject({...m,name:e.string().trim().min(1).max(300),state:e.enum(["draft","funding","active","paused","completed","cancelled"]),terms:CreatorTermsSchema,termsDigest:n,authorizedUnits:i,exposureUnits:i,authorityReceiptRef:o}),CreatorAgreementSchema=e.strictObject({...m,revision:e.literal(1),campaignId:o,creatorId:o,terms:CreatorTermsSchema,termsDigest:n,acceptedAt:e.iso.datetime(),authorityReceiptRef:o});

package/dist/node/creator-operations/common.js

@@ -0,0 +1 @@
+import{z as e}from"zod";export const CreatorIdSchema=e.string().trim().min(1).max(200),CreatorUnitsSchema=e.string().regex(/^(0|[1-9][0-9]{0,29})$/),CreatorDigestSchema=e.string().regex(/^sha256:[a-f0-9]{64}$/),CreatorScopeSchema=e.strictObject({tenantId:CreatorIdSchema,workspaceId:CreatorIdSchema}),CreatorMoneyUnitSchema=e.strictObject({currency:e.string().regex(/^[A-Z]{3}$/),scale:e.number().int().min(0).max(9)}),CreatorRecordBase={id:CreatorIdSchema,scope:CreatorScopeSchema,revision:e.number().int().positive(),updatedAt:e.iso.datetime()};

package/dist/node/creator-operations/index.js

@@ -0,0 +1 @@
+export*from"./campaign.js";export*from"./common.js";export*from"./operation-inputs.js";export*from"./operations.js";export*from"./ports.js";export*from"./submission.js";export*from"./wallet.js";

package/dist/node/creator-operations/operation-inputs.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{CreatorTermsSchema as n}from"./campaign.js";import{CreatorDigestSchema as o,CreatorIdSchema as t,CreatorMoneyUnitSchema as i,CreatorScopeSchema as a,CreatorUnitsSchema as r}from"./common.js";export const CreatorOperationContextFields={scope:a,evidenceRefs:e.array(t).min(1).max(100)},CreatorCampaignCreateInput=e.strictObject({...CreatorOperationContextFields,id:t,name:e.string().trim().min(1).max(300),terms:n,authorizedUnits:r,exposureUnits:r}),CreatorCampaignTransitionInput=e.strictObject({...CreatorOperationContextFields,campaignId:t,expectedRevision:e.number().int().positive(),action:e.enum(["activate","pause","resume","complete","cancel"])}),CreatorAgreementAcceptInput=e.strictObject({...CreatorOperationContextFields,id:t,campaignId:t,creatorId:t,termsDigest:o}),CreatorSubmissionCreateInput=e.strictObject({...CreatorOperationContextFields,id:t,agreementId:t,mode:e.enum(["draft_first","post_first"]),assetRevisionRef:t,contentDigest:o,publicationRef:t.optional()}),CreatorSubmissionReviewInput=e.strictObject({...CreatorOperationContextFields,submissionId:t,expectedRevision:e.number().int().positive(),contentDigest:o,decision:e.enum(["approved","changes_requested","rejected","disputed"])}),CreatorAccrueInput=e.strictObject({...CreatorOperationContextFields,id:t,submissionId:t,observationRef:t,acceptedViews:r}),CreatorWalletInput=e.strictObject({...CreatorOperationContextFields,creatorId:t,unit:i}),CreatorPayoutReserveInput=e.strictObject({...CreatorOperationContextFields,id:t,creatorId:t,unit:i,amountUnits:r,rail:e.enum(["stripe","paypal","manual"]),destinationRef:t}),CreatorPayoutActionInput=e.strictObject({...CreatorOperationContextFields,payoutId:t});

package/dist/node/creator-operations/operations.js

@@ -0,0 +1,23 @@
+import{fromZod as a}from"@lssm/lib.schema";import{defineFeature as l}from"../features/index.js";import{defineCommand as d,defineQuery as C}from"../operations/index.js";import{CreatorAgreementSchema as g,CreatorCampaignSchema as i}from"./campaign.js";import{CreatorAccrueInput as y,CreatorAgreementAcceptInput as h,CreatorCampaignCreateInput as b,CreatorCampaignTransitionInput as f,CreatorPayoutActionInput as n,CreatorPayoutReserveInput as v,CreatorSubmissionCreateInput as w,CreatorSubmissionReviewInput as x,CreatorWalletInput as S}from"./operation-inputs.js";import{CreatorAccrualSchema as k,CreatorSubmissionSchema as s}from"./submission.js";import{CreatorPayoutSchema as o,CreatorWalletSchema as A}from"./wallet.js";const c=(e,r)=>({key:`creator-operations.${e}`,title:r,version:"1.0.0",description:r,goal:r,context:"Canonical creator operations with immutable accepted terms, exact units, transactional ledger and independent evidence authority.",owners:["@platform/creator-operations"],tags:["creator-operations"],domain:"creator-operations",stability:"experimental"});function t(e,r,p,m,u=!1){return d({meta:c(e,r),io:{input:a(p,{name:`${e}_InputV1`}),output:a(m,{name:`${e}_OutputV1`})},policy:{auth:"user"},execution:u?{effects:["write","cost-bearing","external-side-effect"],approval:{required:!0}}:{effects:["write"]},transport:{rest:{method:"POST",path:`/creator-operations/${e.replaceAll(".","/")}`},mcp:{toolName:`creator_${e.replaceAll(".","_")}`}}})}export const CreatorCampaignCreate=t("campaign.create","Create a funded creator campaign",b,i,!0),CreatorCampaignTransition=t("campaign.transition","Transition a creator campaign",f,i,!0),CreatorAgreementAccept=t("agreement.accept","Accept immutable creator terms",h,g),CreatorSubmissionCreate=t("submission.create","Submit creator content",w,s),CreatorSubmissionReview=t("submission.review","Review a creator submission",x,s,!0),CreatorRewardAccrue=t("reward.accrue","Accrue verified cumulative creator rewards",y,k,!0),CreatorPayoutReserve=t("payout.reserve","Reserve canonical wallet funds",v,o,!0),CreatorPayoutExecute=t("payout.execute","Execute a reserved creator settlement",n,o,!0),CreatorPayoutReconcile=t("payout.reconcile","Reconcile an uncertain creator settlement",n,o),CreatorPayoutCancel=t("payout.cancel","Cancel an undispatched payout reservation",n,o),CreatorWalletRead=C({meta:c("wallet.read","Read a scoped creator wallet"),io:{input:a(S,{name:"CreatorWalletInputV1"}),output:a(A,{name:"CreatorWalletV1"})},policy:{auth:"user"},execution:{effects:["read"]},transport:{rest:{method:"POST",path:"/creator-operations/wallet/read"},mcp:{toolName:"creator_wallet_read"}}}),creatorOperations=[CreatorCampaignCreate,CreatorCampaignTransition,CreatorAgreementAccept,CreatorSubmissionCreate,CreatorSubmissionReview,CreatorRewardAccrue,CreatorPayoutReserve,CreatorPayoutExecute,CreatorPayoutReconcile,CreatorPayoutCancel,CreatorWalletRead],CreatorOperationsFeature=l({meta:{key:"creator-operations",version:"1.0.0",title:"Creator Operations",description:"Campaign agreements, submissions, canonical accrual and settlement.",domain:"creator-operations",owners:["@platform/creator-operations"],tags:["creators"],stability:"experimental"},operations:creatorOperations.map((e)=>({key:e.meta.key,version:e.meta.version}))}),CreatorOperationsDocBlock={id:"docs.tech.creator-operations",title:"Canonical creator operations",summary:"Reusable creator campaigns, immutable agreements, submission review and exact wallet settlement.",visibility:"public",kind:"reference",route:"/docs/tech/creator-operations",tags:["creators","marketing","payments"],body:`# Canonical creator operations
+
+The creator-operations subpath owns provider-neutral creator business contracts.
+lib.creator-operations-runtime implements campaign transitions, immutable acceptance,
+submission review, incremental cumulative accrual, wallet reservations and settlement.
+integration.creator-persistence provides transactional SQL state and immutable history.
+module.creator-operations binds eleven operations into the shared REST/MCP registry.
+
+Money has explicit currency/scale. Accepted terms and ledger credits are immutable.
+Repeated view observations pay only the newly earned difference. Exact tiered CPM
+arithmetic is compared against Hirly's source, while application migration remains
+unqualified. Unknown transfers keep reservations until definitive reconciliation.
+
+provider-payments/creator-settlement adapts existing Stripe/PayPal marketplace
+capabilities and verified manual evidence. Minor-unit conversion rejects fractional
+or out-of-range values. Qualified host bindings authorize exact recipients, amount,
+tenant/workspace and account; package presence does not grant payment authority.
+
+The September 2026 ownership amendment permits reusable business engines without
+sharing application databases. Existing Hirly operations remain unchanged until an
+explicit adapter migration. Manager, training and other creator features remain in
+the full parity program rather than being certified by these financial tests.
+`};

package/dist/node/creator-operations/submission.js

@@ -0,0 +1 @@
+import{z as t}from"zod";import{CreatorDigestSchema as o,CreatorIdSchema as e,CreatorRecordBase as a,CreatorUnitsSchema as r}from"./common.js";export const CreatorSubmissionSchema=t.strictObject({...a,campaignId:e,creatorId:e,agreementId:e,mode:t.enum(["draft_first","post_first"]),assetRevisionRef:e,contentDigest:o,state:t.enum(["submitted","changes_requested","approved","rejected","disputed"]),publicationRef:e.optional(),reviewReceiptRef:e.optional(),acceptedViews:r}),CreatorAccrualSchema=t.strictObject({...a,revision:t.literal(1),campaignId:e,creatorId:e,submissionId:e,agreementId:e,termsDigest:o,observationRef:e,acceptedViews:r,amountUnits:r,authorityReceiptRef:e});

package/dist/node/creator-operations/training-course.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{CreatorIdSchema as t,CreatorScopeSchema as r}from"./common.js";export const CreatorTrainingCourseSchema=e.strictObject({id:t,scope:r,revision:e.number().int().positive(),locales:e.array(e.enum(["en","fr","es"])).min(1),modules:e.array(e.strictObject({id:t,quizIds:e.array(t),eventKeys:e.array(t)})).min(1)}).superRefine((o,s)=>{const a=new Set,i=new Set;for(const n of o.modules){if(a.has(n.id))s.addIssue({code:"custom",message:"Duplicate module."});a.add(n.id);for(const d of n.quizIds){if(i.has(d))s.addIssue({code:"custom",message:"Duplicate quiz."});i.add(d)}if(new Set(n.eventKeys).size!==n.eventKeys.length)s.addIssue({code:"custom",message:"Duplicate progress event."})}}),CreatorTrainingProgressSchema=e.strictObject({courseId:t,courseRevision:e.number().int().positive(),stateVersion:e.number().int().nonnegative(),completedModules:e.number().int().nonnegative(),totalModules:e.number().int().positive(),completionRatio:e.number().min(0).max(1),completedModuleIds:e.array(t),remainingModuleIds:e.array(t),staleModuleIds:e.array(t),basis:e.literal("recorded_module_completion")}).superRefine((o,s)=>{const i=[o.completedModuleIds,o.remainingModuleIds,o.staleModuleIds].flat();if(new Set(i).size!==i.length)s.addIssue({code:"custom",message:"Progress module groups must be distinct."});if(o.completedModules!==o.completedModuleIds.length||o.totalModules!==o.completedModuleIds.length+o.remainingModuleIds.length)s.addIssue({code:"custom",message:"Progress counts do not match module lists."});if(o.completionRatio!==o.completedModules/o.totalModules)s.addIssue({code:"custom",message:"Progress ratio does not match counts."})});

package/dist/node/creator-operations/training-operations.js

@@ -0,0 +1 @@
+import{fromZod as t}from"@lssm/lib.schema";import{z as p}from"zod";import{defineCommand as e}from"../operations/index.js";import{CreatorIdSchema as a,CreatorScopeSchema as c}from"./common.js";import{CreatorTrainingStateSchema as o,CreatorTrainingUpdateSchema as s}from"./training.js";const n=(i,r)=>({key:i,version:"1.0.0",title:r,description:r,goal:r,context:"Authenticated creator/course authority precedes transactional training state and exact request replay.",domain:"creator-operations",owners:["platform.creators"],tags:["creator","training"],stability:"experimental"});export const CreatorTrainingOpenCommand=e({meta:n("creator-operations.training.open","Open or initialize creator training"),io:{input:t(p.strictObject({scope:c,creatorId:a,courseId:a}),{name:"CreatorTrainingOpenInputV1"}),output:t(o,{name:"CreatorTrainingOpenOutputV1"})},policy:{auth:"user"},execution:{effects:["read","write"]},transport:{rest:{method:"POST",path:"/creator-operations/training/open"},mcp:{toolName:"creator_training_open"}}}),CreatorTrainingUpdateCommand=e({meta:n("creator-operations.training.update","Update authorized creator training progress"),io:{input:t(s,{name:"CreatorTrainingUpdateInputV1"}),output:t(o,{name:"CreatorTrainingUpdateOutputV1"})},policy:{auth:"user"},execution:{effects:["write"]},transport:{rest:{method:"POST",path:"/creator-operations/training/update"},mcp:{toolName:"creator_training_update"}}}),creatorTrainingOperations=[CreatorTrainingOpenCommand,CreatorTrainingUpdateCommand];

package/dist/node/creator-operations/training-progress-operation.js

@@ -0,0 +1 @@
+import{fromZod as t}from"@lssm/lib.schema";import{z as r}from"zod";import{defineQuery as o}from"../operations/index.js";import{CreatorIdSchema as e,CreatorScopeSchema as i}from"./common.js";import{CreatorTrainingProgressSchema as a}from"./training-course.js";export const CreatorTrainingProgressQuery=o({meta:{key:"creator-operations.training.progress",version:"1.0.0",title:"Read creator training progress",description:"Read authorized course-revision progress without initializing state.",goal:"Show recorded creator progress and stale module references.",context:"Missing training state remains explicitly not started; no XP or qualification is inferred.",domain:"creator-operations",owners:["platform.creators"],tags:["creator","training"],stability:"experimental"},io:{input:t(r.strictObject({scope:i,creatorId:e,courseId:e}),{name:"CreatorTrainingProgressInputV1"}),output:t(r.discriminatedUnion("status",[r.strictObject({status:r.literal("not_started")}),r.strictObject({status:r.literal("recorded"),progress:a})]),{name:"CreatorTrainingProgressOutputV1"})},policy:{auth:"user"},execution:{effects:["read"]},transport:{rest:{method:"POST",path:"/creator-operations/training/progress"},mcp:{toolName:"creator_training_progress"}}});

package/dist/node/creator-operations/training-quiz-operation.js

@@ -0,0 +1 @@
+import{fromZod as e}from"@lssm/lib.schema";import{z as t}from"zod";import{defineCommand as r}from"../operations/index.js";import{CreatorTrainingStateSchema as o}from"./training.js";import{CreatorQuizAttemptReceiptSchema as a,CreatorQuizCompletionInputSchema as i}from"./training-quiz.js";export const CreatorQuizCompleteCommand=r({meta:{key:"creator-operations.training.quiz.complete",version:"1.0.0",title:"Score and record a creator quiz completion",description:"Score answers with an authorized private key and apply the recorded result to training progress.",goal:"Prevent client-supplied score claims from updating training.",context:"Quiz attempts and training updates are separately durable stages with deterministic replay.",domain:"creator-operations",owners:["@platform/creators"],tags:["creator","training"],stability:"experimental"},io:{input:e(i,{name:"CreatorQuizCompleteInputV1"}),output:e(t.strictObject({attempt:a,state:o}),{name:"CreatorQuizCompleteOutputV1"})},policy:{auth:"user"},execution:{effects:["read","write"]},transport:{rest:{method:"POST",path:"/creator-operations/training/quiz/complete"},mcp:{toolName:"creator_training_quiz_complete"}},acceptance:{scenarios:[{key:"server-scored-completion",given:["An enrolled creator submits answers for an authorized quiz revision"],when:["The quiz completion command runs"],then:["Answers are scored server-side","The durable result determines the training update","No private answer key is returned"]}]}});

package/dist/node/creator-operations/training-quiz-read.js

@@ -0,0 +1 @@
+import{fromZod as t}from"@lssm/lib.schema";import{z as e}from"zod";import{defineQuery as o}from"../operations/index.js";import{CreatorIdSchema as r,CreatorScopeSchema as i}from"./common.js";import{CreatorTrainingQuizViewSchema as a}from"./training-quiz-view.js";export const CreatorQuizReadInputSchema=e.strictObject({scope:i,creatorId:r,courseId:r,quizId:r,revision:e.number().int().positive(),locale:e.enum(["en","fr","es"])}),CreatorQuizReadQuery=o({meta:{key:"creator-operations.training.quiz.get",version:"1.0.0",title:"Read learner-facing creator quiz",description:"Read authorized versioned quiz questions without scoring keys.",goal:"Serve safe quiz content to enrolled creators.",context:"Host loader authorizes creator/course enrollment and returns only public fields.",domain:"creator-operations",owners:["@platform/creators"],tags:["creator","training"],stability:"experimental"},io:{input:t(CreatorQuizReadInputSchema,{name:"CreatorQuizReadInputV1"}),output:t(a,{name:"CreatorQuizReadOutputV1"})},policy:{auth:"user"},execution:{effects:["read"]},transport:{rest:{method:"POST",path:"/creator-operations/training/quiz/get"},mcp:{toolName:"creator_training_quiz_get"}}});

package/dist/node/creator-operations/training-quiz-view.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{CreatorIdSchema as t}from"./common.js";export const CreatorTrainingQuizViewSchema=e.strictObject({id:t,moduleId:t,revision:e.number().int().positive(),title:e.string().min(1).max(1000),passPercent:e.number().min(0).max(100),questions:e.array(e.strictObject({id:t,prompt:e.string().min(1).max(1e4),options:e.array(e.strictObject({id:t,label:e.string().min(1).max(4000)})).min(1)})).min(1)}).superRefine((n,s)=>{if(new Set(n.questions.map((i)=>i.id)).size!==n.questions.length)s.addIssue({code:"custom",message:"Duplicate question."});for(const i of n.questions)if(new Set(i.options.map((o)=>o.id)).size!==i.options.length)s.addIssue({code:"custom",message:"Duplicate option."})});

package/dist/node/creator-operations/training-quiz.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{CreatorIdSchema as t,CreatorScopeSchema as s}from"./common.js";export const CreatorTrainingQuizKeySchema=e.strictObject({id:t,moduleId:t,revision:e.number().int().positive(),passPercent:e.number().min(0).max(100),questions:e.array(e.strictObject({id:t,optionIds:e.array(t).min(1),correctOptionId:t})).min(1)}).superRefine((o,n)=>{const i=new Set;for(const r of o.questions){if(i.has(r.id)||new Set(r.optionIds).size!==r.optionIds.length||!r.optionIds.includes(r.correctOptionId))n.addIssue({code:"custom",message:"Invalid or duplicate quiz key."});i.add(r.id)}}),CreatorQuizAttemptInputSchema=e.strictObject({scope:s,creatorId:t,courseId:t,quizId:t,quizRevision:e.number().int().positive(),attemptId:t,answers:e.record(t,t)}),CreatorQuizAttemptReceiptSchema=e.strictObject({input:CreatorQuizAttemptInputSchema,moduleId:t,result:e.strictObject({score:e.number().int().min(0).max(100),passed:e.boolean(),total:e.number().int().positive(),correct:e.number().int().nonnegative(),quizId:t,quizRevision:e.number().int().positive()}),scoredAt:e.iso.datetime(),keyEvidenceRef:t}).superRefine((o,n)=>{const i=o.result;if(i.quizId!==o.input.quizId||i.quizRevision!==o.input.quizRevision||i.correct>i.total||i.score!==Math.round(i.correct/i.total*100))n.addIssue({code:"custom",message:"Quiz receipt result binding mismatch."})}),CreatorQuizCompletionInputSchema=e.strictObject({attempt:CreatorQuizAttemptInputSchema,expectedTrainingVersion:e.number().int().positive()});

package/dist/node/creator-operations/training.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{CreatorScopeSchema as i}from"./common.js";const t=e.string().trim().min(1).max(200).refine((r)=>!["__proto__","constructor","prototype"].includes(r));export const CreatorTrainingEventSchema=e.discriminatedUnion("type",[e.strictObject({type:e.literal("locale_set"),locale:e.enum(["en","fr","es"])}),e.strictObject({type:e.literal("module_viewed"),moduleId:t}),e.strictObject({type:e.literal("quiz_recorded"),quizId:t,moduleId:t,passed:e.boolean()}),e.strictObject({type:e.literal("micro_event_recorded"),moduleId:t,eventKey:t,occurredAt:e.iso.datetime()}),e.strictObject({type:e.literal("welcome_acknowledged")}),e.strictObject({type:e.literal("completion_feedback_acknowledged")}),e.strictObject({type:e.literal("reset_explanation_acknowledged")})]),CreatorTrainingStateSchema=e.strictObject({courseId:t,locale:e.enum(["en","fr","es"]),completedModuleIds:e.array(t),quizPassed:e.record(t,e.boolean()),progressEvents:e.record(t,e.record(t,e.number().finite())),lastModuleId:t.nullable(),welcomeAcknowledgedAt:e.iso.datetime().nullable(),completionFeedbackAcknowledgedAt:e.iso.datetime().nullable(),resetExplanationRequired:e.boolean(),version:e.number().int().nonnegative(),updatedAt:e.iso.datetime()}),CreatorTrainingUpdateSchema=e.strictObject({scope:i,creatorId:t,courseId:t,requestId:t,expectedVersion:e.number().int().positive(),event:CreatorTrainingEventSchema}),CreatorTrainingImportSchema=e.strictObject({scope:i,creatorId:t,sourceRef:t,sourceRecordRef:t,evidenceRef:t,state:CreatorTrainingStateSchema.refine((r)=>r.version>0)}),CreatorTrainingLegacyReceiptSchema=e.strictObject({scope:i,creatorId:t,requestId:t,sourceRef:t,evidenceRef:t,state:CreatorTrainingStateSchema});

package/dist/node/creator-operations/wallet.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{CreatorIdSchema as t,CreatorMoneyUnitSchema as i,CreatorRecordBase as o,CreatorUnitsSchema as r}from"./common.js";export const CreatorLedgerEntrySchema=e.strictObject({...o,revision:e.literal(1),creatorId:t,unit:i,sourceRef:t,direction:e.enum(["credit","debit"]),amountUnits:r,reason:e.enum(["accrual","settlement","funded_bonus","reversal"]),authorityReceiptRef:t}),CreatorPayoutSchema=e.strictObject({...o,creatorId:t,unit:i,rail:e.enum(["stripe","paypal","manual"]),destinationRef:t,amountUnits:r.refine((a)=>BigInt(a)>0n),state:e.enum(["reserved","submitting","unknown","paid","failed","cancelled"]),authorityReceiptRef:t,providerReceiptRef:t.optional()}).superRefine((a,n)=>{if(["paid","failed"].includes(a.state)&&!a.providerReceiptRef)n.addIssue({code:"custom",message:"Definitive settlement outcomes require provider evidence."})}),CreatorWalletSchema=e.strictObject({creatorId:t,unit:i,creditedUnits:r,debitedUnits:r,reservedUnits:r,availableUnits:r});

package/dist/node/customer-support/ai-outcome-evaluation-events.js

@@ -0,0 +1 @@
+import{defineEvent as o}from"../events.js";import{SupportAiPromotionProjectionModel as t,SupportAiRollbackDrillProjectionModel as i}from"./ai-outcome-evaluation-output-schemas.js";import{SupportAiEvaluationCompletedProjectionModel as r,SupportAiEvaluationProjectionModel as a}from"./ai-outcome-evaluation-projection-schemas.js";const e={version:"1.0.0",domain:"customer-support",owners:["platform.support"],tags:["support","ai","evaluation"],stability:"experimental"};export const SupportAiEvaluationRequestedEvent=o({meta:{...e,key:"support.ai.outcome-learning.evaluation.requested",title:"AI outcome evaluation requested",description:"A frozen AI outcome cohort was requested."},payload:a,pii:[]}),SupportAiEvaluationCompletedEvent=o({meta:{...e,key:"support.ai.outcome-learning.evaluation.completed",title:"AI outcome evaluation completed",description:"A frozen AI outcome cohort was evaluated."},payload:r,pii:[]}),SupportAiPromotionChangedEvent=o({meta:{...e,key:"support.ai.outcome-learning.promotion.changed",title:"AI outcome promotion changed",description:"An AI policy promotion changed under revision fencing."},payload:t,pii:[]}),SupportAiRollbackDrillRecordedEvent=o({meta:{...e,key:"support.ai.outcome-learning.rollback-drill.recorded",title:"AI rollback drill recorded",description:"An authority-verified rollback drill was recorded."},payload:i,pii:[]}),supportAiOutcomeEvaluationEvents=[SupportAiEvaluationRequestedEvent,SupportAiEvaluationCompletedEvent,SupportAiPromotionChangedEvent,SupportAiRollbackDrillRecordedEvent];

package/dist/node/customer-support/ai-outcome-evaluation-operations.js

@@ -0,0 +1 @@
+import{defineCommand as r,defineQuery as i}from"../operations/index.js";import{SupportAiEvaluationOutputModel as n,SupportAiEvaluationRequestOutputModel as u,SupportAiPromotionOutputModel as a,SupportAiRollbackDrillOutputModel as p}from"./ai-outcome-evaluation-output-schemas.js";import{SupportAiCurrentPromotionInputModel as l,SupportAiCurrentPromotionOutputModel as s,SupportAiEvaluationGetInputModel as c,SupportAiEvaluationGetOutputModel as m,SupportAiPromotionHistoryInputModel as d,SupportAiPromotionHistoryOutputModel as v}from"./ai-outcome-evaluation-query-schemas.js";import{SupportAiEvaluationExecuteInputModel as A,SupportAiEvaluationRequestInputModel as S,SupportAiPromotionInputModel as f,SupportAiRollbackDrillInputModel as y}from"./ai-outcome-evaluation-schemas.js";import{supportOperationErrors as o}from"./operation-schemas.js";const t={version:"1.0.0",domain:"customer-support",owners:["platform.support"],tags:["support","ai","evaluation"],stability:"experimental"},e={auth:"internal",pii:[]};export const SupportAiEvaluationRequestCommand=r({meta:{...t,key:"support.ai.outcome-learning.evaluation.request",title:"Request frozen AI outcome evaluation",description:"Freeze an adjudicated AI outcome cohort for evaluation.",goal:"Evaluate promotion safety from immutable evidence",context:"Scope derives from the authenticated SupportOS grant."},io:{input:S,output:u,errors:o},policy:e}),SupportAiEvaluationExecuteCommand=r({meta:{...t,key:"support.ai.outcome-learning.evaluation.execute",title:"Execute frozen AI outcome evaluation",description:"Evaluate a frozen cohort under a fenced durable job.",goal:"Produce immutable threshold evidence",context:"Only the SupportOS worker executes this command."},io:{input:A,output:n,errors:o},policy:e}),SupportAiRollbackDrillRecordCommand=r({meta:{...t,key:"support.ai.outcome-learning.rollback-drill.record",title:"Record verified AI rollback drill",description:"Record an authority-verified successful rollback drill.",goal:"Require proven reversibility before promotion",context:"The verifier owns drill execution truth."},io:{input:y,output:p,errors:o},policy:e}),SupportAiPromotionMutateCommand=r({meta:{...t,key:"support.ai.outcome-learning.promotion.mutate",title:"Mutate AI outcome promotion",description:"Revision-fenced promotion, supersession, or rollback.",goal:"Promote only qualified and reversible AI behavior",context:"L3 and L4 require fresh Connect authorization."},io:{input:f,output:a,errors:o},policy:e}),SupportAiEvaluationGetQuery=i({meta:{...t,key:"support.ai.outcome-learning.evaluation.get",title:"Get AI outcome evaluation",description:"Read one frozen evaluation without raw content.",goal:"Inspect immutable evaluation evidence",context:"Scope derives from the authenticated SupportOS grant."},io:{input:c,output:m,errors:o},policy:e}),SupportAiCurrentPromotionGetQuery=i({meta:{...t,key:"support.ai.outcome-learning.promotion.get-current",title:"Get current AI outcome promotion",description:"Read the exact action, policy, and risk-tier promotion head.",goal:"Inspect current governed promotion state",context:"The server returns a snapshot watermark."},io:{input:l,output:s,errors:o},policy:e}),SupportAiPromotionHistoryQuery=i({meta:{...t,key:"support.ai.outcome-learning.promotion.list-history",title:"List AI outcome promotion history",description:"Read bounded promotion history at a frozen watermark.",goal:"Audit promotion and rollback transitions",context:"Cursors are bound to action, policy, risk tier, and watermark."},io:{input:d,output:v,errors:o},policy:e}),supportAiOutcomeEvaluationOperations=[SupportAiEvaluationRequestCommand,SupportAiEvaluationExecuteCommand,SupportAiRollbackDrillRecordCommand,SupportAiPromotionMutateCommand,SupportAiEvaluationGetQuery,SupportAiCurrentPromotionGetQuery,SupportAiPromotionHistoryQuery];

package/dist/node/customer-support/ai-outcome-evaluation-output-schemas.js

@@ -0,0 +1 @@
+import{EnumType as i,ScalarTypeEnum as o}from"@lssm/lib.schema";import{SupportAiEvaluationCompletedProjectionModel as b,SupportAiEvaluationProjectionModel as y}from"./ai-outcome-evaluation-projection-schemas.js";import{validateAiEvaluationRefs as O}from"./ai-outcome-evaluation-schemas.js";import{SUPPORT_AI_OUTCOME_ACTIONS as g,SUPPORT_AI_OUTCOME_RISK_TIERS as v}from"./ai-outcome-learning.js";import{issue as R,ReportingStrictSchema as s,validIso as p}from"./reporting-schema-primitives.js";const t=()=>({type:o.ID(),isOptional:!1}),d=()=>({type:o.ID(),isOptional:!0}),D=()=>({type:o.Int_unsecure(),isOptional:!1}),c=()=>({type:o.NonEmptyString(),isOptional:!1}),E={drillRef:t(),action:{type:new i("SupportAiRollbackDrillAction",[...g]),isOptional:!1},policyRef:t(),riskTier:{type:new i("SupportAiRollbackDrillRisk",[...v]),isOptional:!1},startingArtifactRevisionRef:t(),startingArtifactDigest:t(),restoredArtifactRevisionRef:t(),restoredArtifactDigest:t(),succeeded:{type:o.Boolean(),isOptional:!1},executedAt:c(),recordedAt:c(),evidenceExpiresAt:c(),evidenceRef:t()};export const SupportAiRollbackDrillProjectionModel=new s({name:"SupportAiRollbackDrillProjectionV1",fields:E},(e,r)=>{O(e,r);if(!p(e.executedAt)||!p(e.recordedAt)||!p(e.evidenceExpiresAt)||Date.parse(String(e.executedAt))>Date.parse(String(e.recordedAt))||Date.parse(String(e.recordedAt))>=Date.parse(String(e.evidenceExpiresAt))||Date.parse(String(e.evidenceExpiresAt))-Date.parse(String(e.recordedAt))>2592000000)R(r,"recordedAt","drill timestamps must be authoritative")});const x={promotionRef:t(),evaluationRef:t(),action:{type:new i("SupportAiPromotionProjectionAction",[...g]),isOptional:!1},policyRef:t(),riskTier:{type:new i("SupportAiPromotionProjectionRisk",[...v]),isOptional:!1},state:{type:new i("SupportAiPromotionState",["active","superseded","rolled-back"]),isOptional:!1},mutation:{type:new i("SupportAiPromotionProjectionMutation",["promote","supersede","rollback"]),isOptional:!1},previousState:{type:new i("SupportAiPromotionPreviousState",["active"]),isOptional:!0},previousRevision:{type:o.Int_unsecure(),isOptional:!0},revision:D(),evidenceExpiresAt:c(),supersedesPromotionRef:d(),revisedPromotionRef:d(),revisedPromotionRevision:{type:o.Int_unsecure(),isOptional:!0},fromArtifactRevisionRef:d(),fromArtifactDigest:d(),targetArtifactRevisionRef:t(),targetArtifactDigest:t(),authorizationReceiptRef:t(),recordedAt:c()};export const SupportAiPromotionProjectionModel=new s({name:"SupportAiPromotionProjectionV1",fields:x},(e,r)=>{O(e,r);const a=e.mutation==="promote",n=e.mutation==="supersede",l=e.mutation==="rollback",A=n&&e.state==="superseded",f=e.previousState!==void 0,m=e.fromArtifactRevisionRef!==void 0,u=e.revisedPromotionRef!==void 0;if(a&&e.state!=="active"||n&&!["active","superseded"].includes(String(e.state))||l&&e.state!=="rolled-back"||a===f||f!==(e.previousRevision!==void 0)||a===m||m!==(e.fromArtifactDigest!==void 0)||n!==Boolean(e.supersedesPromotionRef)||n!==u||u!==(e.revisedPromotionRevision!==void 0)||n&&e.revisedPromotionRef!==e.supersedesPromotionRef||!Number.isSafeInteger(e.revision)||Number(e.revision)<1||f&&!Number.isSafeInteger(e.previousRevision)||n&&!A&&(Number(e.revision)!==1||e.promotionRef===e.revisedPromotionRef)||A&&(e.promotionRef!==e.revisedPromotionRef||Number(e.revision)!==Number(e.revisedPromotionRevision))||l&&Number(e.previousRevision)+1!==Number(e.revision)||u&&(!Number.isSafeInteger(e.revisedPromotionRevision)||Number(e.revisedPromotionRevision)!==Number(e.previousRevision)+1)||m&&e.fromArtifactDigest===e.targetArtifactDigest)R(r,"mutation","promotion transition chain is inconsistent");const S=Date.parse(String(e.recordedAt)),P=Date.parse(String(e.evidenceExpiresAt));if(!p(e.recordedAt)||!p(e.evidenceExpiresAt)||!(S<P)||P-S>2592000000)R(r,"evidenceExpiresAt","promotion evidence must be fresh")}),SupportAiEvaluationRequestOutputModel=new s({name:"SupportAiEvaluationRequestOutputV1",fields:{resourceRef:t(),receiptRef:t(),eventRef:t(),projection:{type:y,isOptional:!1}}},()=>{}),SupportAiEvaluationOutputModel=new s({name:"SupportAiEvaluationOutputV1",fields:{resourceRef:t(),receiptRef:t(),eventRef:t(),projection:{type:b,isOptional:!1}}},()=>{}),SupportAiPromotionOutputModel=new s({name:"SupportAiPromotionOutputV1",fields:{resourceRef:t(),receiptRef:t(),eventRef:t(),projection:{type:SupportAiPromotionProjectionModel,isOptional:!1}}},()=>{}),SupportAiRollbackDrillOutputModel=new s({name:"SupportAiRollbackDrillOutputV1",fields:{resourceRef:t(),receiptRef:t(),eventRef:t(),projection:{type:SupportAiRollbackDrillProjectionModel,isOptional:!1}}},()=>{});

package/dist/node/customer-support/ai-outcome-evaluation-projection-schemas.js

@@ -0,0 +1 @@
+import{EnumType as l,ScalarTypeEnum as f}from"@lssm/lib.schema";import{boundedAiEvaluationInteger as p,validateAiEvaluationRefs as S}from"./ai-outcome-evaluation-schemas.js";import{SUPPORT_AI_OUTCOME_ACTIONS as E,SUPPORT_AI_OUTCOME_RISK_TIERS as T}from"./ai-outcome-learning.js";import{issue as r,ReportingStrictSchema as g,validIso as b}from"./reporting-schema-primitives.js";const _=new l("SupportAiEvaluationProjectionAction",[...E]),y=new l("SupportAiEvaluationProjectionRisk",[...T]),N=new l("SupportAiEvaluationCompletedStatus",["passed","failed"]),n=(t=!1)=>({type:f.ID(),isOptional:t}),o=()=>({type:f.Int_unsecure(),isOptional:!1}),a=()=>({type:f.NonEmptyString(),isOptional:!1}),O=()=>({type:f.ID(),isOptional:!1,isArray:!0}),A={evaluationRef:n(),action:{type:_,isOptional:!1},policyRef:n(),riskTier:{type:y,isOptional:!1},cohortFrom:a(),cohortTo:a(),minimumObservationMs:o(),rollbackDrillReceiptRef:n(),minimumExamples:o(),minimumSafeRatioBps:o(),minimumGroundedRatioBps:o(),maximumCriticalFailures:o(),evidenceRefs:O(),revision:o(),evaluationJobRef:n(),evaluationEffectIdempotencyKey:n(),cohortSnapshotRef:n(),cohortDigest:n(),cohortCommitFenceRef:n(),outcomeFactWatermarkRef:n(),cohortRunCount:o(),cohortAdjudicationCount:o(),runRecordedThrough:a(),adjudicationRecordedThrough:a(),observationThrough:a(),evidenceExpiresAt:a(),requestedAt:a()};export const SupportAiEvaluationProjectionModel=new g({name:"SupportAiEvaluationRequestedProjectionV1",fields:{...A,status:{type:new l("SupportAiEvaluationPendingStatus",["pending"]),isOptional:!1}}},R);const j={...A,status:{type:N,isOptional:!1},exampleCount:o(),safeCount:o(),groundedCount:o(),criticalFailureCount:o(),correctionCount:o(),reopenCount:o(),slaBreachCount:o(),csatNegativeCount:o(),policyViolationCount:o(),inputTokens:o(),outputTokens:o(),costMicros:o(),evaluatedAt:a(),evaluationEvidenceRef:n()};export const SupportAiEvaluationCompletedProjectionModel=new g({name:"SupportAiEvaluationCompletedProjectionV1",fields:j},(t,e)=>{R(t,e);const d=900719925474;for(const i of["exampleCount","safeCount","groundedCount","criticalFailureCount","correctionCount","reopenCount","slaBreachCount","csatNegativeCount","policyViolationCount"])if(!p(t[i],0,d))r(e,i,`${i} must be an exact bounded integer`);for(const i of["inputTokens","outputTokens"])if(!p(t[i],0,1000000000000))r(e,i,`${i} must be bounded`);if(!p(t.costMicros,0,1000000000000000)||!b(t.evaluatedAt)||Date.parse(String(t.evaluatedAt))<Date.parse(String(t.requestedAt))||Date.parse(String(t.evaluatedAt))>=Date.parse(String(t.evidenceExpiresAt)))r(e,"evaluatedAt","completed evidence must be bounded and timestamped");const s=Number(t.exampleCount),c=s>=Number(t.minimumExamples)&&Number(t.safeCount)*1e4>=s*Number(t.minimumSafeRatioBps)&&Number(t.groundedCount)*1e4>=s*Number(t.minimumGroundedRatioBps)&&Number(t.criticalFailureCount)<=Number(t.maximumCriticalFailures);if(s!==Number(t.cohortAdjudicationCount)||Number(t.cohortAdjudicationCount)>Number(t.cohortRunCount)||["safeCount","groundedCount","criticalFailureCount","correctionCount","reopenCount","slaBreachCount","csatNegativeCount","policyViolationCount"].some((i)=>Number(t[i])>s))r(e,"exampleCount","adjudication counts cannot exceed examples");if(t.status==="passed"!==c)r(e,"status","status must exactly match frozen thresholds")});function R(t,e){S(t,e);for(const u of["runRecordedThrough","adjudicationRecordedThrough","observationThrough","evidenceExpiresAt","requestedAt"])if(!b(t[u]))r(e,u,`${u} must be ISO`);if(!p(t.revision,1,Number.MAX_SAFE_INTEGER))r(e,"revision","revision must be positive");const d=Date.parse(String(t.requestedAt)),s=Date.parse(String(t.evidenceExpiresAt)),c=Date.parse(String(t.observationThrough)),i=Date.parse(String(t.cohortFrom)),m=Date.parse(String(t.cohortTo)),C=Date.parse(String(t.runRecordedThrough)),h=Date.parse(String(t.adjudicationRecordedThrough));if(!(i<m)||m+Number(t.minimumObservationMs)>c||m>C||C>c||m>h||h>c||!(s>d)||s-d>2592000000||c>d)r(e,"evidenceExpiresAt","DB time bounds are inconsistent");for(const u of["cohortRunCount","cohortAdjudicationCount"])if(!p(t[u],0,900719925474))r(e,u,`${u} must be an exact bounded integer`)}

package/dist/node/customer-support/ai-outcome-evaluation-query-schemas.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as p}from"@lssm/lib.schema";import{SupportAiPromotionProjectionModel as u}from"./ai-outcome-evaluation-output-schemas.js";import{SupportAiEvaluationCompletedProjectionModel as a,SupportAiEvaluationProjectionModel as l}from"./ai-outcome-evaluation-projection-schemas.js";import{boundedAiEvaluationInteger as m,SupportAiEvaluationActionType as d,SupportAiEvaluationRiskType as c,validateAiEvaluationRefs as r}from"./ai-outcome-evaluation-schemas.js";import{issue as n,ReportingStrictSchema as e}from"./reporting-schema-primitives.js";const o=(t=!1)=>({type:p.ID(),isOptional:t}),f={evaluationRef:o()};export const SupportAiEvaluationGetInputModel=new e({name:"SupportAiEvaluationGetInputV1",fields:f},r);const y={pending:{type:l,isOptional:!0},completed:{type:a,isOptional:!0}};export const SupportAiEvaluationGetOutputModel=new e({name:"SupportAiEvaluationGetOutputV1",fields:y},(t,i)=>{if(t.pending===void 0===(t.completed===void 0))n(i,"pending","exactly one evaluation projection is required")});const s={action:{type:d,isOptional:!1},policyRef:o(),riskTier:{type:c,isOptional:!1}};export const SupportAiCurrentPromotionInputModel=new e({name:"SupportAiCurrentPromotionInputV1",fields:s},r);const A={watermarkRef:o(),promotion:{type:u,isOptional:!0}};export const SupportAiCurrentPromotionOutputModel=new e({name:"SupportAiCurrentPromotionOutputV1",fields:A},r);const S={...s,watermarkRef:o(!0),cursor:o(!0),limit:{type:p.Int_unsecure(),isOptional:!1}};export const SupportAiPromotionHistoryInputModel=new e({name:"SupportAiPromotionHistoryInputV1",fields:S},(t,i)=>{r(t,i);if(!m(t.limit,1,100))n(i,"limit","history limit must be 1..100");if(t.cursor===void 0!==(t.watermarkRef===void 0))n(i,"cursor","cursor must be bound to its frozen watermark")});const O={items:{type:u,isOptional:!1,isArray:!0},watermarkRef:o(),nextCursor:o(!0)};export const SupportAiPromotionHistoryOutputModel=new e({name:"SupportAiPromotionHistoryOutputV1",fields:O},r);