@lssm/lib.contracts-spec 17.3.2

package/dist/node/customer-support/ai-outcome-evaluation-schemas.js

@@ -0,0 +1 @@
+import{EnumType as m,ScalarTypeEnum as p}from"@lssm/lib.schema";import{SUPPORT_AI_PROMOTION_MUTATIONS as u}from"./ai-outcome-evaluation.js";import{SUPPORT_AI_OUTCOME_ACTIONS as R,SUPPORT_AI_OUTCOME_RISK_TIERS as l}from"./ai-outcome-learning.js";import{issue as n,ReportingStrictSchema as f,validIso as d,validRef as a}from"./reporting-schema-primitives.js";export const SupportAiEvaluationActionType=new m("SupportAiEvaluationAction",[...R]),SupportAiEvaluationRiskType=new m("SupportAiEvaluationRisk",[...l]);const A=new m("SupportAiPromotionMutation",[...u]),i=(e=!1)=>({type:p.ID(),isOptional:e}),r=()=>({type:p.Int_unsecure(),isOptional:!1}),c=()=>({type:p.NonEmptyString(),isOptional:!1}),b=()=>({type:p.ID(),isOptional:!1,isArray:!0}),y={evaluationRef:i(),action:{type:SupportAiEvaluationActionType,isOptional:!1},policyRef:i(),riskTier:{type:SupportAiEvaluationRiskType,isOptional:!1},cohortFrom:c(),cohortTo:c(),minimumObservationMs:r(),rollbackDrillReceiptRef:i(),minimumExamples:r(),minimumSafeRatioBps:r(),minimumGroundedRatioBps:r(),maximumCriticalFailures:r(),evidenceRefs:b(),idempotencyKey:i()};export const SupportAiEvaluationRequestInputModel=new f({name:"SupportAiEvaluationRequestInputV1",fields:y},(e,t)=>{validateAiEvaluationRefs(e,t);const o=Date.parse(String(e.cohortFrom)),s=Date.parse(String(e.cohortTo));if(!d(e.cohortFrom)||!d(e.cohortTo)||!(o<s)||s-o>2592000000)n(t,"cohortFrom","cohort and expiry must be ordered and bounded to 30 days");if(!boundedAiEvaluationInteger(e.minimumExamples,100,1e6)||!boundedAiEvaluationInteger(e.minimumObservationMs,86400000,2592000000)||!boundedAiEvaluationInteger(e.minimumSafeRatioBps,9800,1e4)||!boundedAiEvaluationInteger(e.minimumGroundedRatioBps,9500,1e4)||Number(e.maximumCriticalFailures)!==0)n(t,"minimumExamples","thresholds may only tighten canonical floors")});const E={evaluationRef:i(),jobRef:i(),workerRef:i(),jobFencingToken:r(),jobExpectedRevision:r(),jobEffectIdempotencyKey:i()};export const SupportAiEvaluationExecuteInputModel=new f({name:"SupportAiEvaluationExecuteInputV1",fields:E},(e,t)=>{validateAiEvaluationRefs(e,t);if(!boundedAiEvaluationInteger(e.jobFencingToken,1,Number.MAX_SAFE_INTEGER)||!boundedAiEvaluationInteger(e.jobExpectedRevision,1,Number.MAX_SAFE_INTEGER))n(t,"jobFencingToken","active job fence is required")});const S={drillRef:i(),action:{type:SupportAiEvaluationActionType,isOptional:!1},policyRef:i(),riskTier:{type:SupportAiEvaluationRiskType,isOptional:!1},sourceEvidenceRef:i(),startingArtifactRevisionRef:i(),startingArtifactDigest:i(),restoredArtifactRevisionRef:i(),restoredArtifactDigest:i(),idempotencyKey:i()};export const SupportAiRollbackDrillInputModel=new f({name:"SupportAiRollbackDrillInputV1",fields:S},validateAiEvaluationRefs);const I={promotionRef:i(),evaluationRef:i(),mutation:{type:A,isOptional:!1},expectedRevision:r(),supersedesPromotionRef:i(!0),supersedesExpectedRevision:{type:p.Int_unsecure(),isOptional:!0},fromArtifactRevisionRef:i(!0),fromArtifactDigest:i(!0),targetArtifactRevisionRef:i(),targetArtifactDigest:i(),idempotencyKey:i()};export const SupportAiPromotionInputModel=new f({name:"SupportAiPromotionInputV1",fields:I},(e,t)=>{validateAiEvaluationRefs(e,t);if(e.mutation==="supersede"!==Boolean(e.supersedesPromotionRef)||e.mutation==="supersede"!==(e.supersedesExpectedRevision!==void 0))n(t,"supersedesPromotionRef","supersede requires exactly one prior promotion");if(!Number.isSafeInteger(e.expectedRevision)||Number(e.expectedRevision)<0||e.mutation!=="rollback"&&Number(e.expectedRevision)!==0||e.mutation==="rollback"&&Number(e.expectedRevision)<1||e.supersedesExpectedRevision!==void 0&&(!Number.isSafeInteger(e.supersedesExpectedRevision)||Number(e.supersedesExpectedRevision)<1))n(t,"expectedRevision","revision must be nonnegative");if(e.fromArtifactRevisionRef===void 0!==(e.fromArtifactDigest===void 0))n(t,"fromArtifactRevisionRef","from artifact revision and digest must be paired");if(e.mutation==="promote"&&e.fromArtifactRevisionRef!==void 0||e.mutation!=="promote"&&e.fromArtifactRevisionRef===void 0)n(t,"fromArtifactRevisionRef","supersede and rollback require the exact current artifact")});export function validateAiEvaluationRefs(e,t){for(const[o,s]of Object.entries(e))if((o.endsWith("Ref")||o.endsWith("Key"))&&s!==void 0&&!a(s))n(t,o,`${o} must be bounded`);if(Array.isArray(e.evidenceRefs)&&e.evidenceRefs.length===0)n(t,"evidenceRefs","evidence is required");if(Array.isArray(e.evidenceRefs)){if(e.evidenceRefs.length>32||new Set(e.evidenceRefs).size!==e.evidenceRefs.length||e.evidenceRefs.some((o)=>!a(o)))n(t,"evidenceRefs","evidence refs must be 1..32 unique bounded refs")}}export function boundedAiEvaluationInteger(e,t,o){return Number.isSafeInteger(e)&&Number(e)>=t&&Number(e)<=o}

package/dist/node/customer-support/ai-outcome-evaluation.js

@@ -0,0 +1 @@
+export const SUPPORT_AI_PROMOTION_MUTATIONS=["promote","supersede","rollback"];

package/dist/node/customer-support/ai-outcome-event-delivery-schemas.js

@@ -0,0 +1 @@
+import{EnumType as s,ScalarTypeEnum as n}from"@lssm/lib.schema";import{issue as r,ReportingStrictSchema as u,validIso as d,validRef as a}from"./reporting-schema-primitives.js";const e=()=>({type:n.ID(),isOptional:!1}),p=()=>({type:n.Int_unsecure(),isOptional:!1});export const SupportAiOutcomeEventKeyType=new s("SupportAiOutcomeEventDeliveryKey",["support.ai.outcome-learning.run.recorded","support.ai.outcome-learning.adjudicated","support.ai.outcome-learning.evaluation.requested","support.ai.outcome-learning.evaluation.completed","support.ai.outcome-learning.promotion.changed","support.ai.outcome-learning.rollback-drill.recorded"]);const m={eventRef:e(),providerReceiptRef:e(),providerEvidenceRef:e(),publishedAt:{type:n.NonEmptyString(),isOptional:!1},idempotencyKey:e(),jobRef:e(),workerRef:e(),jobFencingToken:p(),jobExpectedRevision:p(),jobEffectIdempotencyKey:e()};export const SupportAiOutcomeEventDeliveryRecordInputModel=new u({name:"SupportAiOutcomeEventDeliveryRecordInputV1",fields:m},(o,t)=>{for(const[i,c]of Object.entries(o))if((i.endsWith("Ref")||i.endsWith("Key"))&&!a(c))r(t,i,`${i} must be bounded`);if(!Number.isSafeInteger(o.jobFencingToken)||Number(o.jobFencingToken)<1||!Number.isSafeInteger(o.jobExpectedRevision)||Number(o.jobExpectedRevision)<1)r(t,"jobFencingToken","active job fence is required");if(!d(o.publishedAt))r(t,"publishedAt","publishedAt must be canonical ISO")});

package/dist/node/customer-support/ai-outcome-event-digest.js

@@ -0,0 +1 @@
+import{sha256Hex as e}from"@lssm/lib.crypto-utils";import{canonicalJsonString as i}from"../rich-reference/canonical-serializer.js";export function supportAiOutcomeEventInputDigest(n){const{scope:o,inputDigest:s,grantEvidenceRef:r,signal:a,...t}=n;return`sha256:${e(i({kind:"ai-outcome-event-publish",...t}))}`}

package/dist/node/customer-support/ai-outcome-learning-events.js

@@ -0,0 +1 @@
+import{defineEvent as e}from"../events.js";import{SupportAiActionRunProjectionModel as t,SupportAiOutcomeAdjudicationProjectionModel as o}from"./ai-outcome-learning-schemas.js";export const SupportAiActionRunRecordedEvent=e({meta:{key:"support.ai.outcome-learning.run.recorded",version:"1.0.0",title:"Support AI action evidence recorded",description:"Verified body-free AI action evidence was recorded.",domain:"customer-support",owners:["platform.support"],tags:["support","ai","event","evidence"],stability:"experimental"},payload:t,pii:[]}),SupportAiOutcomeAdjudicatedEvent=e({meta:{key:"support.ai.outcome-learning.adjudicated",version:"1.0.0",title:"Support AI outcome adjudicated",description:"A human reviewer adjudicated verified AI action evidence.",domain:"customer-support",owners:["platform.support"],tags:["support","ai","event","review"],stability:"experimental"},payload:o,pii:[]}),supportAiOutcomeLearningEvents=[SupportAiActionRunRecordedEvent,SupportAiOutcomeAdjudicatedEvent];

package/dist/node/customer-support/ai-outcome-learning-operations.js

@@ -0,0 +1 @@
+import{defineCommand as e}from"../operations/index.js";import{SupportAiActionRunInputModel as o,SupportAiActionRunOutputModel as r,SupportAiOutcomeAdjudicationInputModel as i,SupportAiOutcomeAdjudicationOutputModel as n}from"./ai-outcome-learning-schemas.js";import{supportOperationErrors as t}from"./operation-schemas.js";export const SupportAiActionRunRecordCommand=e({meta:{key:"support.ai.outcome-learning.run.record",version:"1.0.0",title:"Record verified support AI action evidence",description:"Record body-free AI action evidence after every source verifier succeeds.",goal:"Create trustworthy operational AI outcome evidence",context:"Tenant and workspace come from the authenticated SupportOS grant.",domain:"customer-support",owners:["platform.support"],tags:["support","ai","evidence","privacy"],stability:"experimental"},io:{input:o,output:r,errors:t},policy:{auth:"internal",pii:[]}}),SupportAiOutcomeAdjudicateCommand=e({meta:{key:"support.ai.outcome-learning.adjudicate",version:"1.0.0",title:"Adjudicate a verified support AI action",description:"Record a human review linked server-side to verified AI action evidence.",goal:"Create trustworthy correction and policy outcome evidence",context:"Only a live reviewer grant can adjudicate.",domain:"customer-support",owners:["platform.support"],tags:["support","ai","review","reporting"],stability:"experimental"},io:{input:i,output:n,errors:t},policy:{auth:"internal",pii:[]}}),supportAiOutcomeLearningOperations=[SupportAiActionRunRecordCommand,SupportAiOutcomeAdjudicateCommand];

package/dist/node/customer-support/ai-outcome-learning-schema-support.js

@@ -0,0 +1 @@
+import{issue as s,validRef as t}from"./reporting-schema-primitives.js";export function validateAiOutcomeCommon(e,n){for(const[i,o]of Object.entries(e))if((i.endsWith("Ref")||i==="idempotencyKey")&&o!==void 0&&!t(o))s(n,i,`${i} must be bounded`);if(!Number.isSafeInteger(e.expectedCaseRevision)||Number(e.expectedCaseRevision)<1)s(n,"expectedCaseRevision","case revision must be positive");if(!Array.isArray(e.evidenceRefs)||e.evidenceRefs.length<1||e.evidenceRefs.length>32||new Set(e.evidenceRefs).size!==e.evidenceRefs.length||e.evidenceRefs.some((i)=>!t(i)))s(n,"evidenceRefs","evidenceRefs must be unique, nonempty, and bounded");if(e.locale!==void 0&&(typeof e.locale!=="string"||e.locale.length>63||e.locale.split("-").length>8||!/^[A-Za-z]{2,8}(?:-[A-Za-z0-9]{1,8})*$/.test(e.locale)))s(n,"locale","locale must be a bounded BCP-47 tag")}export function boundedAiCounter(e,n){return Number.isSafeInteger(e)&&Number(e)>=0&&Number(e)<=n}

package/dist/node/customer-support/ai-outcome-learning-schemas.js

@@ -0,0 +1 @@
+import{EnumType as n,ScalarTypeEnum as d}from"@lssm/lib.schema";import{SUPPORT_AI_FAILURE_SEVERITIES as S,SUPPORT_AI_GROUNDEDNESS_VERDICTS as A,SUPPORT_AI_OUTCOME_ACTIONS as m,SUPPORT_AI_OUTCOME_CHANNELS as O,SUPPORT_AI_OUTCOME_RISK_TIERS as _,SUPPORT_AI_SAFETY_VERDICTS as I}from"./ai-outcome-learning.js";import{boundedAiCounter as E,validateAiOutcomeCommon as p}from"./ai-outcome-learning-schema-support.js";import{CaseCorrectionKind as j,issue as o,ReportingStrictSchema as r,validIso as f}from"./reporting-schema-primitives.js";const a=new n("SupportAiOutcomeAction",[...m]),P=new n("SupportAiOutcomeChannel",[...O]),T=new n("SupportAiOutcomeRiskTier",[..._]),V=new n("SupportAiGroundednessVerdict",[...A]),v=new n("SupportAiSafetyVerdict",[...I]),w=new n("SupportAiFailureSeverity",[...S]),C=new n("SupportAiPolicyOutcome",["policy-compliant","policy-violated"]),e=(i=!1)=>({type:d.ID(),isOptional:i}),c=()=>({type:d.Int_unsecure(),isOptional:!1}),l=()=>({type:d.ID(),isOptional:!1,isArray:!0}),u=()=>({type:d.NonEmptyString(),isOptional:!1}),y={runRef:e(),caseRef:e(),expectedCaseRevision:c(),sourceEventRef:e(),action:{type:a,isOptional:!1},channel:{type:P,isOptional:!1},riskTier:{type:T,isOptional:!1},decisionEvidenceRef:e(!0),sopRef:e(!0),sopRevisionRef:e(!0),modelRef:e(),promptRef:e(),policyRef:e(),locale:u(),budgetSettlementRef:e(),evidenceRefs:l(),idempotencyKey:e()};export const SupportAiActionRunInputModel=new r({name:"SupportAiActionRunInputV1",fields:y},(i,t)=>{p(i,t);if(i.sopRef===void 0!==(i.sopRevisionRef===void 0))o(t,"sopRef","SOP reference and revision must be paired")});const R={adjudicationRef:e(),runRef:e(),expectedCaseRevision:c(),correctionKind:{type:j,isOptional:!0},policyOutcome:{type:C,isOptional:!0},groundednessVerdict:{type:V,isOptional:!1},safetyVerdict:{type:v,isOptional:!1},failureSeverity:{type:w,isOptional:!1},evidenceRefs:l(),idempotencyKey:e()};export const SupportAiOutcomeAdjudicationInputModel=new r({name:"SupportAiOutcomeAdjudicationInputV1",fields:R},(i,t)=>{p(i,t);if(i.correctionKind===void 0&&i.policyOutcome===void 0)o(t,"correctionKind","At least one adjudication result is required");if(i.failureSeverity==="critical"&&i.safetyVerdict!=="unsafe"||i.failureSeverity==="none"&&i.safetyVerdict==="unsafe")o(t,"failureSeverity","failure severity must be consistent with safety verdict")});const{idempotencyKey:N,...M}=y,K={...M,inputTokens:c(),outputTokens:c(),costMicros:c(),decisionVerificationEvidenceRef:e(!0),sopVerificationEvidenceRef:e(!0),registryVerificationEvidenceRef:e(),budgetEvidenceRef:e(),connectEvidenceRef:e(!0),recordedAt:u()};export const SupportAiActionRunProjectionModel=new r({name:"SupportAiActionRunProjectionV1",fields:K},(i,t)=>{p(i,t);for(const s of["inputTokens","outputTokens","costMicros"])if(!E(i[s],s==="costMicros"?1000000000000:1e9))o(t,s,`${s} must be bounded`);if(!f(i.recordedAt))o(t,"recordedAt","recordedAt must be ISO")});const{idempotencyKey:G,...U}=R,b={...U,caseRef:e(),sourceEventRef:e(),action:{type:a,isOptional:!1},policyRef:e(),reviewerEvidenceRef:e(),recordedAt:u()};export const SupportAiOutcomeAdjudicationProjectionModel=new r({name:"SupportAiOutcomeAdjudicationProjectionV1",fields:b},(i,t)=>{p(i,t);if(i.correctionKind===void 0&&i.policyOutcome===void 0)o(t,"correctionKind","At least one adjudication result is required");if(i.failureSeverity==="critical"&&i.safetyVerdict!=="unsafe"||i.failureSeverity==="none"&&i.safetyVerdict==="unsafe")o(t,"failureSeverity","failure severity must be consistent with safety verdict");if(!f(i.recordedAt))o(t,"recordedAt","recordedAt must be ISO")}),SupportAiActionRunOutputModel=new r({name:"SupportAiActionRunOutputV1",fields:{resourceRef:e(),receiptRef:e(),eventRef:e(),projection:{type:SupportAiActionRunProjectionModel,isOptional:!1}}},()=>{}),SupportAiOutcomeAdjudicationOutputModel=new r({name:"SupportAiOutcomeAdjudicationOutputV1",fields:{resourceRef:e(),receiptRef:e(),eventRef:e(),projection:{type:SupportAiOutcomeAdjudicationProjectionModel,isOptional:!1}}},()=>{});

package/dist/node/customer-support/ai-outcome-learning.js

@@ -0,0 +1 @@
+export const SUPPORT_AI_OUTCOME_ACTIONS=["reply-drafted","case-routed","priority-recommended","case-summarized","sop-executed"],SUPPORT_AI_OUTCOME_CHANNELS=["email","messenger","portal","api"],SUPPORT_AI_OUTCOME_RISK_TIERS=["L1","L2","L3","L4"],SUPPORT_AI_GROUNDEDNESS_VERDICTS=["grounded","partially-grounded","ungrounded","not-applicable"],SUPPORT_AI_SAFETY_VERDICTS=["safe","unsafe","review-required","not-applicable"],SUPPORT_AI_FAILURE_SEVERITIES=["none","non-critical","critical"];

package/dist/node/customer-support/attachment-safety-operations.js

@@ -0,0 +1 @@
+import{defineCommand as a,defineQuery as p}from"../operations/index.js";import{SupportAttachmentSafetyDocRef as s}from"./attachment-safety.js";import{SupportAttachmentListInputModel as i,SupportAttachmentListProjectionModel as c,SupportAttachmentMutationResultModel as n,SupportAttachmentRegisterInputModel as u,SupportAttachmentReleaseInputModel as m}from"./attachment-safety-schemas.js";import{supportOperationErrors as e}from"./operation-schemas.js";const o=(r,t)=>({key:r,version:"1.0.0",title:t,description:`${t} using CommunicationOS-owned opaque attachment evidence.`,goal:t,context:"SupportOS records scan, quarantine, consent, and governed release evidence without attachment bytes.",domain:"customer-support",owners:["platform.support","platform.communication"],tags:["support","attachment","security","communication-os"],stability:"experimental",docId:[s]});export const SupportAttachmentRegisterCommand=a({meta:o("support.case.attachment.register","Register support attachment evidence"),io:{input:u,output:n,errors:e},policy:{auth:"user",pii:[]}}),SupportAttachmentListQuery=p({meta:o("support.case.attachment.list","List support attachment evidence"),io:{input:i,output:c,errors:e},policy:{auth:"user",pii:[]}}),SupportAttachmentReleaseCommand=a({meta:o("support.case.attachment.release","Release quarantined support attachment"),io:{input:m,output:n,errors:e},policy:{auth:"admin",pii:[]}}),supportAttachmentSafetyOperations=[SupportAttachmentRegisterCommand,SupportAttachmentListQuery,SupportAttachmentReleaseCommand];

package/dist/node/customer-support/attachment-safety-schemas.js

@@ -0,0 +1 @@
+import{EnumType as f,ScalarTypeEnum as r,SchemaModel as i}from"@lssm/lib.schema";import{SUPPORT_ATTACHMENT_SAFETY_STATES as l}from"./attachment-safety.js";const t=(e=!1)=>({type:r.ID(),isOptional:e}),o=()=>({type:r.Int_unsecure(),isOptional:!1}),a=(e=!1)=>({type:r.String_unsecure(),isOptional:e}),n=(e,s=300)=>typeof e==="string"&&e.length<=s&&/^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(e),c=(e)=>Number.isSafeInteger(e)&&Number(e)>=0,R={caseRef:t(),attachmentRef:t(),communicationEvidenceRef:t(),consentEvidenceRef:t(),expectedCaseRevision:o(),idempotencyKey:t()};class d extends i{getZod(){return super.getZod().strict().superRefine((e,s)=>{if([e.caseRef,e.attachmentRef,e.communicationEvidenceRef,e.consentEvidenceRef].some((u)=>!n(u))||!n(e.idempotencyKey,200))s.addIssue({code:"custom",message:"references must be bounded"});if(!c(e.expectedCaseRevision))s.addIssue({code:"custom",path:["expectedCaseRevision"],message:"revision must be nonnegative"})})}}export const SupportAttachmentRegisterInputModel=new d({name:"SupportAttachmentRegisterInputV1",fields:R});const y={caseRef:t(),cursor:t(!0),limit:o(),watermark:a(!0)};class p extends i{getZod(){return super.getZod().strict().superRefine((e,s)=>{if(!n(e.caseRef)||e.cursor&&!n(e.cursor))s.addIssue({code:"custom",message:"references must be bounded"});if(!Number.isSafeInteger(e.limit)||Number(e.limit)<1||Number(e.limit)>100)s.addIssue({code:"custom",path:["limit"],message:"limit must be 1..100"});if(e.watermark&&!Number.isFinite(Date.parse(e.watermark)))s.addIssue({code:"custom",path:["watermark"],message:"watermark must be a timestamp"})})}}export const SupportAttachmentListInputModel=new p({name:"SupportAttachmentListInputV1",fields:y});const S={attachmentRef:t(),expectedRevision:o(),decisionRef:t(),idempotencyKey:t()};class m extends i{getZod(){return super.getZod().strict().superRefine((e,s)=>{if(!n(e.attachmentRef)||!n(e.decisionRef)||!n(e.idempotencyKey,200))s.addIssue({code:"custom",message:"references must be bounded"});if(!c(e.expectedRevision))s.addIssue({code:"custom",path:["expectedRevision"],message:"revision must be nonnegative"})})}}export const SupportAttachmentReleaseInputModel=new m({name:"SupportAttachmentReleaseInputV1",fields:S}),SupportAttachmentSafetyProjectionModel=new i({name:"SupportAttachmentSafetyProjectionV1",fields:{attachmentRef:t(),caseRef:t(),state:{type:new f("SupportAttachmentSafetyState",[...l]),isOptional:!1},scanPolicyRef:t(),scannerEvidenceRef:t(),consentEvidenceRef:t(),decisionEvidenceRef:t(!0),revision:o(),observedAt:a()}}),SupportAttachmentListProjectionModel=new i({name:"SupportAttachmentListProjectionV1",fields:{items:{type:SupportAttachmentSafetyProjectionModel,isOptional:!1,isArray:!0},nextCursor:t(!0),watermark:a()}}),SupportAttachmentMutationResultModel=new i({name:"SupportAttachmentMutationResultV1",fields:{attachment:{type:SupportAttachmentSafetyProjectionModel,isOptional:!1},receiptRef:t(),eventRef:t()}});

package/dist/node/customer-support/attachment-safety.js

@@ -0,0 +1,13 @@
+import{docRef as e}from"../docs/registry.js";export const SUPPORT_ATTACHMENT_SAFETY_STATES=["pending-scan","clean","quarantined","rejected","released","deleted"],SupportAttachmentSafetyDocBlock={id:"docs.customer-support.attachment-safety",title:"SupportOS attachment safety",summary:"Reference-only attachment scan, quarantine, consent, and release evidence.",kind:"reference",visibility:"public",route:"/docs/customer-support/attachment-safety",tags:["supportos","attachments","security","communication-os"],body:`# SupportOS attachment safety
+
+CommunicationOS owns attachment bytes, storage, upload, download, and channel
+linkage. SupportOS stores only opaque attachment and evidence references. Its
+contracts never accept filenames, MIME claims, storage locations, digests, or
+file content from callers.
+
+Registration requires exact short-lived scanner, scope, case, attachment,
+consent, and request-digest evidence. Quarantined material is never released by
+scan state alone: release requires a separate state-bound governance decision.
+Mutations are idempotent and revision-fenced; projections and events remain
+body-free and safe for operational audit.
+`},SupportAttachmentSafetyDocRef=e(SupportAttachmentSafetyDocBlock.id);

package/dist/node/customer-support/authos-session.js

@@ -0,0 +1,10 @@
+import{docRef as e}from"../docs/registry.js";export const SUPPORT_AUTHOS_AUDIENCE="supportos-api",SupportAuthOsSessionDocBlock={id:"docs.customer-support.authos-session-authority",title:"SupportOS AuthOS session authority",summary:"Short-lived, live-checked AuthOS grants for SupportOS authority.",kind:"reference",visibility:"public",route:"/docs/customer-support/authos-session-authority",tags:["supportos","authos","oidc","security"],body:`# SupportOS AuthOS session authority
+
+SupportOS accepts only short-lived AuthOS grants with a verified signature,
+issuer, SupportOS audience, temporal claims, token id, and session or workload
+identity. Every request checks AuthOS revocation/session status and current
+SupportOS membership. Effective capabilities are the intersection of the grant
+and live membership. Tenant and workspace authority never comes from request
+bodies or query parameters. Raw grants, cookies, and claims are excluded from
+logs and evidence.
+`},SupportAuthOsSessionDocRef=e(SupportAuthOsSessionDocBlock.id);

package/dist/node/customer-support/billing-entitlement-events.js

@@ -0,0 +1 @@
+import{defineEvent as t}from"../events.js";import{SupportBillingEntitlementDecisionModel as e,SupportBillingEntitlementSnapshotModel as i}from"./billing-entitlement-output-schemas.js";export const SupportBillingEntitlementSnapshotRefreshedEvent=t({meta:{key:"support.billing-entitlements.snapshot.refreshed",version:"1.0.0",title:"Billing entitlement snapshot refreshed",description:"A Billing-authoritative entitlement snapshot was verified.",domain:"customer-support",owners:["platform.support","platform.billing"],tags:["support","billing","entitlements"],stability:"experimental"},payload:i,pii:[]}),SupportBillingEntitlementDecidedEvent=t({meta:{key:"support.billing-entitlements.decided",version:"1.0.0",title:"Billing entitlement decided",description:"A Billing-authoritative entitlement decision was recorded.",domain:"customer-support",owners:["platform.support","platform.billing"],tags:["support","billing","entitlements","quota"],stability:"experimental"},payload:e,pii:[]}),supportBillingEntitlementEvents=[SupportBillingEntitlementSnapshotRefreshedEvent,SupportBillingEntitlementDecidedEvent];

package/dist/node/customer-support/billing-entitlement-input-schemas.js

@@ -0,0 +1 @@
+import{billingId as i,billingInt as n,StrictBillingEntitlementSchema as s}from"./billing-entitlement-schema-primitives.js";const c={expectedRevision:n(),idempotencyKey:i()};class r extends s{getZod(){return super.getZod().superRefine((e,t)=>{if(!o(e.expectedRevision,0,1e9))t.addIssue({code:"custom",message:"revision is invalid"})})}}export const SupportBillingSnapshotRefreshInputModel=new r({name:"SupportBillingSnapshotRefreshInputV1",fields:c});const u={decisionRef:i(),capabilityRef:i(),requestedUnits:n(),expectedSnapshotRef:i(),expectedSnapshotRevision:n(),idempotencyKey:i()};class d extends s{getZod(){return super.getZod().superRefine((e,t)=>{if(!o(e.requestedUnits,1,1e9)||!o(e.expectedSnapshotRevision,1,1e9))t.addIssue({code:"custom",message:"decision units or revision are invalid"})})}}export const SupportBillingEntitlementDecisionInputModel=new d({name:"SupportBillingEntitlementDecisionInputV1",fields:u});const a={capabilityRef:i(!0),limit:n(),cursor:i(!0),watermark:i(!0)};class p extends s{getZod(){return super.getZod().superRefine((e,t)=>{if(!o(e.limit,1,100)||Boolean(e.cursor)!==Boolean(e.watermark))t.addIssue({code:"custom",message:"pagination is invalid"})})}}export const SupportBillingDecisionListInputModel=new p({name:"SupportBillingDecisionListInputV1",fields:a}),SupportBillingSnapshotGetInputModel=new s({name:"SupportBillingSnapshotGetInputV1",fields:{}});function o(e,t,l){return Number.isSafeInteger(e)&&Number(e)>=t&&Number(e)<=l}

package/dist/node/customer-support/billing-entitlement-operations.js

@@ -0,0 +1 @@
+import{defineCommand as n,defineQuery as o}from"../operations/index.js";import{SupportBillingDecisionListInputModel as s,SupportBillingEntitlementDecisionInputModel as r,SupportBillingSnapshotGetInputModel as l,SupportBillingSnapshotRefreshInputModel as a}from"./billing-entitlement-input-schemas.js";import{SupportBillingDecisionPageModel as u,SupportBillingDecisionResultModel as m,SupportBillingEntitlementSnapshotModel as c,SupportBillingSnapshotResultModel as g}from"./billing-entitlement-output-schemas.js";import{supportOperationErrors as t}from"./operation-schemas.js";const i=(p,e)=>({key:p,version:"1.0.0",title:e,description:e,goal:e,context:"Billing remains authoritative; SupportOS stores only opaque plan, grant, quota, usage-watermark, and evidence references.",domain:"customer-support",owners:["platform.support","platform.billing"],tags:["support","billing","entitlements","usage","quota"],stability:"experimental"});export const SupportBillingSnapshotRefreshCommand=n({meta:i("support.billing-entitlements.snapshot.refresh","Refresh the Billing-authoritative entitlement snapshot"),io:{input:a,output:g,errors:t},policy:{auth:"admin",pii:[]}}),SupportBillingEntitlementDecideCommand=n({meta:i("support.billing-entitlements.decide","Record an exact Billing-authoritative entitlement decision"),io:{input:r,output:m,errors:t},policy:{auth:"admin",pii:[]}}),SupportBillingSnapshotGetQuery=o({meta:i("support.billing-entitlements.snapshot.get","Get the current verified Billing entitlement snapshot"),io:{input:l,output:c,errors:t},policy:{auth:"admin",pii:[]}}),SupportBillingDecisionListQuery=o({meta:i("support.billing-entitlements.decision.list","List verified Billing entitlement decisions"),io:{input:s,output:u,errors:t},policy:{auth:"admin",pii:[]}}),supportBillingEntitlementOperations=[SupportBillingSnapshotRefreshCommand,SupportBillingEntitlementDecideCommand,SupportBillingSnapshotGetQuery,SupportBillingDecisionListQuery];

package/dist/node/customer-support/billing-entitlement-output-schemas.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as m}from"@lssm/lib.schema";import{BillingDecisionReasonEnum as f,BillingOveragePolicyEnum as u,BillingSubscriptionStateEnum as S,billingId as i,billingInt as t,billingTime as s,StrictBillingEntitlementSchema as o}from"./billing-entitlement-schema-primitives.js";const R={grantRef:i(),capabilityRef:i(),limitUnits:t(),consumedUnits:t(),remainingUnits:t(),overagePolicy:{type:u,isOptional:!1},resetAt:s(!0),evidenceRef:i()};class p extends o{getZod(){return super.getZod().superRefine((e,n)=>{if([e.limitUnits,e.consumedUnits,e.remainingUnits].some((a)=>!r(a))||Number(e.remainingUnits)!==Math.max(Number(e.limitUnits)-Number(e.consumedUnits),0))n.addIssue({code:"custom",message:"grant counters are inconsistent"})})}}export const SupportBillingEntitlementGrantModel=new p({name:"SupportBillingEntitlementGrantV1",fields:R});const y={billingAccountRef:i(),snapshotRef:i(),revision:t(),planRef:i(),planRevision:t(),subscriptionState:{type:S,isOptional:!1},usageWatermarkRef:i(),grants:{type:SupportBillingEntitlementGrantModel,isArray:!0,isOptional:!1},billingEvidenceRef:i(),evidenceExpiresAt:s(),observedAt:s(),recordedAt:s()};class l extends o{getZod(){return super.getZod().superRefine((e,n)=>{const a=(Array.isArray(e.grants)?e.grants:[]).map((g)=>String(g.capabilityRef));if(!r(e.revision,1)||!r(e.planRevision,1)||a.join()!==[...new Set(a)].sort().join()||Date.parse(String(e.observedAt))>Date.parse(String(e.recordedAt))||Date.parse(String(e.recordedAt))>=Date.parse(String(e.evidenceExpiresAt)))n.addIssue({code:"custom",message:"snapshot evidence is inconsistent"})})}}export const SupportBillingEntitlementSnapshotModel=new l({name:"SupportBillingEntitlementSnapshotV1",fields:y});const b={decisionRef:i(),snapshotRef:i(),snapshotRevision:t(),capabilityRef:i(),requestedUnits:t(),allowed:{type:m.Boolean(),isOptional:!1},reason:{type:f,isOptional:!1},grantRef:i(!0),usageWatermarkRef:i(),decisionEvidenceRef:i(),evidenceExpiresAt:s(),decidedAt:s(),revision:t()};class d extends o{getZod(){return super.getZod().superRefine((e,n)=>{if(!r(e.snapshotRevision,1)||!r(e.requestedUnits,1)||!r(e.revision,1)||Boolean(e.allowed)!==(e.reason==="granted")||e.reason!=="grant-missing"&&!e.grantRef||Date.parse(String(e.decidedAt))>=Date.parse(String(e.evidenceExpiresAt)))n.addIssue({code:"custom",message:"decision evidence is inconsistent"})})}}export const SupportBillingEntitlementDecisionModel=new d({name:"SupportBillingEntitlementDecisionV1",fields:b}),SupportBillingSnapshotResultModel=new o({name:"SupportBillingSnapshotResultV1",fields:{projection:{type:SupportBillingEntitlementSnapshotModel,isOptional:!1},receiptRef:i(),eventRef:i()}}),SupportBillingDecisionResultModel=new o({name:"SupportBillingDecisionResultV1",fields:{projection:{type:SupportBillingEntitlementDecisionModel,isOptional:!1},receiptRef:i(),eventRef:i()}}),SupportBillingDecisionPageModel=new o({name:"SupportBillingDecisionPageV1",fields:{items:{type:SupportBillingEntitlementDecisionModel,isArray:!0,isOptional:!1},watermark:i(),nextCursor:i(!0)}});function r(e,n=0){return Number.isSafeInteger(e)&&Number(e)>=n&&Number(e)<=1000000000000}

package/dist/node/customer-support/billing-entitlement-schema-primitives.js

@@ -0,0 +1 @@
+import{EnumType as t,ScalarTypeEnum as s,SchemaModel as l}from"@lssm/lib.schema";import{SUPPORT_BILLING_DECISION_REASONS as r,SUPPORT_BILLING_OVERAGE_POLICIES as d,SUPPORT_BILLING_SUBSCRIPTION_STATES as p}from"./billing-entitlements.js";export const BillingSubscriptionStateEnum=new t("SupportBillingSubscriptionState",[...p]),BillingOveragePolicyEnum=new t("SupportBillingOveragePolicy",[...d]),BillingDecisionReasonEnum=new t("SupportBillingDecisionReason",[...r]),billingId=(e=!1)=>({type:s.ID(),isOptional:e}),billingInt=()=>({type:s.Int_unsecure(),isOptional:!1}),billingTime=(e=!1)=>({type:s.String_unsecure(),isOptional:e});export class StrictBillingEntitlementSchema extends l{getZod(){return super.getZod().strict().superRefine((e,o)=>{for(const[i,n]of Object.entries(e)){if((i.endsWith("Ref")||i==="idempotencyKey")&&n!==void 0&&!validBillingRef(n))o.addIssue({code:"custom",path:[i],message:"reference is invalid"});if(i.endsWith("At")&&n!==void 0&&!validBillingTime(n))o.addIssue({code:"custom",path:[i],message:"timestamp is invalid"})}})}}export function validBillingRef(e){return typeof e==="string"&&e.length>=2&&e.length<=300&&/^[A-Za-z0-9][A-Za-z0-9._:@/-]*$/.test(e)&&!e.includes("://")}export function validBillingTime(e){return typeof e==="string"&&/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(e)&&Number.isFinite(Date.parse(e))}

package/dist/node/customer-support/billing-entitlements.js

@@ -0,0 +1 @@
+export const SUPPORT_BILLING_SUBSCRIPTION_STATES=["trialing","active","past-due","suspended","canceled"],SUPPORT_BILLING_OVERAGE_POLICIES=["deny","allow","review"],SUPPORT_BILLING_DECISION_REASONS=["granted","limit-exceeded","subscription-inactive","policy-review-required","grant-missing"];

package/dist/node/customer-support/capability-matrix-evidence.js

@@ -0,0 +1 @@
+export const SUPPORT_QUALIFICATION_BASELINE=["contract","implementation","unit","integration","e2e","security","production_canary","manual_acceptance"];const u={standard:[],customer_surface:["accessibility","performance","resilience"],data_authority:["migration","performance","resilience"],provider_migration:["migration","performance","resilience"],operational_resilience:["migration","performance","resilience"],ai_governance:["performance","resilience"]};export function supportQualificationProofForProfile(e){return[...new Set([...SUPPORT_QUALIFICATION_BASELINE,...u[e]])]}export function supportProofProfileForCapability(e){if(e.moduleId==="supportos.intercom")return"provider_migration";if(e.moduleId==="supportos.operations")return"operational_resilience";if(e.moduleId==="supportos.customer-experience"||e.moduleId==="supportos.operator-experience"||e.platforms.some((r)=>["pwa","expo_ios","expo_android","tauri_macos","tauri_windows","tauri_linux"].includes(r))||e.moduleId==="supportos.ecosystem"&&(e.exposure==="customer"||e.exposure==="operator"))return"customer_surface";if(e.moduleId==="supportos.ai"||e.moduleId==="supportos.sops")return"ai_governance";if(["supportos.foundation","supportos.workspaces","supportos.cases"].includes(e.moduleId))return"data_authority";return"standard"}export function supportQualificationProofForCapability(e){return[...new Set([...supportQualificationProofForProfile(e.proofProfile),...supportQualificationProofForProfile(supportProofProfileForCapability(e))])]}export function isSupportProofSatisfied(e,r,t){const n=supportTimestamp(t);if(n===void 0)return!1;const p=e.evidence.filter((i)=>i.layer===r),a=p.filter(isSupportEvidenceReceipt);if(a.length>0){const i=a.map((o)=>({evidence:o,observedAt:supportTimestamp(o.observedAt)}));if(i.some((o)=>o.observedAt===void 0))return!1;const s=Math.max(...i.map((o)=>o.observedAt));return i.filter((o)=>o.observedAt===s).every((o)=>f(o.evidence,n))}if(r!=="contract"&&r!=="implementation")return!1;return p.some((i)=>i.mode==="source"&&(i.state==="available"||i.state==="verified"))}export function isSupportEvidenceAvailable(e,r){return e.evidence.some((t)=>t.layer===r&&(t.state==="available"||t.state==="verified"))}export function isSupportEvidenceReceipt(e){return e.mode==="execution_receipt"||e.mode==="production_receipt"}export function supportTimestamp(e){if(!e||!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(e))return;const r=Date.parse(e);return Number.isFinite(r)&&new Date(r).toISOString()===e?r:void 0}function f(e,r){const t=supportTimestamp(e.observedAt);if(t===void 0||t>r)return!1;if(e.expiresAt){const n=supportTimestamp(e.expiresAt);if(n===void 0||n<=r||n<=t)return!1}return isSupportEvidenceReceipt(e)&&e.state==="verified"}

package/dist/node/customer-support/capability-matrix-registries.js

@@ -0,0 +1 @@
+export const SUPPORT_SERVICE_REFERENCE_REGISTRY=["supportos-api","supportos-worker","supportos-realtime","supportos-web","communicationos","forms","knowledge","workflow","connect","authos","billingos","opa"],SUPPORT_DATA_STORE_REFERENCE_REGISTRY=["supportos-postgres-eu","supportos-redis-eu","supportos-object-store-eu","communicationos-authority","forms-authority","knowledge-authority"],SUPPORT_EVENT_REFERENCE_REGISTRY=["support.case.created","support.case.transitioned","support.case.unsnoozed","support.case.merged","support.case.split","support.case.linked","support.case.internal-note.created","support.case.internal-note.reconciliation.updated","support.opa-handoff.updated","communication.support.internal-note.created","communication.support.internal-note.reconciliation-ready","support.membership.created","support.membership.grants.changed","support.membership.revoked","support.workspace.configured","support.workspace.brand-locale-residency.configured","support.workspace.onboarded","support.workspace.migration.prepared","support.workspace.migration.started","support.workspace.migration.completed","support.workspace.migration.rolled-back","support.assignment.changed","support.team.upserted","support.queue.upserted","support.routing.policy.updated","support.routing.decision.recorded","support.sla.breached","support.slo.assessed","support.slo.breached","support.slo.profile.updated","support.incident.declared","support.incident.lifecycle.updated","support.incident.alert.reserved","support.incident.alert-delivery.recorded","support.csat.recorded","support.customer.updated","support.customer-experience.live-chat-continuity.bound","support.identity.observed","support.identity.merged","support.identity.merge.reversed","support.metadata.tag.updated","support.metadata.field.updated","support.case.metadata.replaced","support.case.attachment.registered","support.case.attachment.released","support.notification.preference.updated","support.notification.delivery.updated","support.webhook.subscription.updated","support.webhook.subscription.secret-rotated","support.webhook.delivery.enqueued","support.webhook.delivery.settled","support.webhook.delivery.replayed","support.crypto.rotation.updated","support.crypto.rotation-drill.requested","support.crypto.rotation-drill.phase-recorded","support.crypto.rotation-drill.completed","support.billing-entitlements.snapshot.refreshed","support.billing-entitlements.decided","support.company-action.submitted","support.company-action.outcome.recorded","support.company-action.compensation.started","support.retention.policy.updated","support.legal-hold.updated","support.erasure.updated","support.erasure.completed","support.export.requested","support.export.started","support.export.completed","support.export.cancelled","support.export.failed","support.export.artifact-access.issued","support.export.artifact-access.revoked","support.export.artifact-download.authorized","support.export.artifact-download.settled","support.export.artifact.downloaded","support.reporting.definition.revision-created","support.reporting.definition.published","support.reporting.definition.retired","support.reporting.query.executed","support.reporting.correction.recorded","support.reporting.outcome.recorded","support.reporting.export.requested","decision.definition.created","decision.draft.saved","decision.revision.published","decision.definition.archived","decision.validation.completed","decision.simulation.completed","decision.evaluation.completed","decision.replay.verified","decision.revisions.compared","support.customer-access.issued","support.customer-session.updated","support.customer-consent.recorded","support.ai.proposed","support.ai.executed","support.sop.published","support.sop.run.completed","support.provider.reconciled","support.cutover.completed"],SUPPORT_JOURNEY_REFERENCE_REGISTRY=["workspace-onboarding","operator-case-resolution","customer-messenger-intake","authenticated-customer-portal","intercom-shadow-cutover","decision-authoring-replay","sop-generation-promotion","ai-assisted-resolution","cross-product-handoff","portfolio-operations","incident-recovery"],SUPPORT_SLO_REFERENCE_REGISTRY=["supportos-api-availability","supportos-customer-surface-availability","supportos-local-interaction-latency","supportos-optimistic-ack-latency","supportos-realtime-latency","supportos-inbox-search-latency","supportos-rpo","supportos-rto"],SUPPORT_DATA_CLASS_REFERENCE_REGISTRY=["support-metadata","customer-identity","contact-destination","conversation-reference","form-response-reference","ai-evidence","operational-telemetry","secret-reference"];

package/dist/node/customer-support/capability-matrix-validation-evidence.js

@@ -0,0 +1 @@
+import{isSupportEvidenceReceipt as c,supportTimestamp as o}from"./capability-matrix-evidence.js";export function validateSupportEvidence(d,a){const i=[],r=o(a);for(const e of d.evidence){const t=`${d.id}.evidence.${e.id}`;if(e.mode==="source"&&(!d.sourcePaths.includes(e.ref)||/\.(test|spec)\.[cm]?[jt]sx?$/.test(e.ref))||e.mode==="test_definition"&&!/\.(test|spec)\.[cm]?[jt]sx?$/.test(e.ref))i.push({code:"invalid_evidence",path:t,message:"Source proof must reference a declared non-test source and test definitions must reference a test/spec artifact."});if(!c(e))continue;const s=o(e.observedAt),n=o(e.expiresAt);if(["verified","failed","stale"].includes(e.state)&&(!e.runRef||!e.digest||!e.observedAt))i.push({code:"invalid_evidence",path:t,message:"Observed receipts require runRef, digest, and observedAt."});if(e.observedAt&&s===void 0)i.push({code:"invalid_evidence",path:t,message:"Evidence observedAt must be an ISO timestamp."});if(s!==void 0&&r!==void 0&&s>r)i.push({code:"invalid_evidence",path:t,message:"Evidence cannot be observed after the matrix asOf."});if(e.mode==="production_receipt"&&(!e.expiresAt||n===void 0||r===void 0||n<=r))i.push({code:"invalid_evidence",path:t,message:"Production receipts require a future expiry relative to asOf."});if(s!==void 0&&n!==void 0&&n<=s)i.push({code:"invalid_evidence",path:t,message:"Evidence expiry must be later than observation."})}return i}export function validateResolvedBlockers(d,a){const i=[],r=o(a);for(const e of d.blockers){if(e.status!=="resolved")continue;const t=o(e.resolvedAt),s=d.evidence.find((p)=>p.id===e.resolutionEvidenceRef),n=o(s?.observedAt);if(!e.resolutionEvidenceRef||t===void 0||r===void 0||t>r||!s||!c(s)||s.state!=="verified"||n===void 0||n>t)i.push({code:"resolved_blocker_evidence_missing",path:`${d.id}.blockers.${e.id}`,message:"Resolved blockers require a linked verified receipt and valid resolution timestamp."})}return i}

package/dist/node/customer-support/capability-matrix-validation-helpers.js

@@ -0,0 +1 @@
+import{isSupportEvidenceAvailable as c,isSupportProofSatisfied as m,supportProofProfileForCapability as h,supportQualificationProofForCapability as g}from"./capability-matrix-evidence.js";import{validateResolvedBlockers as S,validateSupportEvidence as x}from"./capability-matrix-validation-evidence.js";export function validateSupportCapabilityPaths(e){const s=[];for(const o of e.routes)if(!o.startsWith("/"))s.push({code:"invalid_route",path:`${e.id}.routes`,message:`Route ${o} must be application-relative.`});for(const o of e.sourcePaths)if(o.startsWith("/")||o.split("/").includes(".."))s.push({code:"invalid_source_path",path:`${e.id}.sourcePaths`,message:`Source path ${o} must be repository-relative.`});return s}export function validateSupportCapabilityStage(e,s){const o=[],i=e.authModes??[e.authMode],p=e.exposure==="customer"?["anonymous","authenticated_customer"]:e.exposure==="system"?["service"]:["operator"];if(i.length===0||!i.includes(e.authMode)||i.some((t)=>!p.includes(t)))o.push({code:"invalid_actor_context",path:`${e.id}.authModes`,message:`${e.exposure} exposure has incompatible authentication modes.`});const r=(t)=>c(e,t);if(e.stage==="missing"&&(r("contract")||r("implementation"))||e.stage==="contract_only"&&(!r("contract")||r("implementation"))||["scaffolded","implemented_local","integrated","qualified"].includes(e.stage)&&!r("implementation")||e.stage==="implemented_local"&&!r("unit")||e.stage==="integrated"&&!r("integration"))o.push({code:"stage_evidence_mismatch",path:`${e.id}.stage`,message:`${e.stage} does not match its available evidence.`});const n=h(e),a=g(e);if(e.proofProfile!==n)o.push({code:"qualification_profile_mismatch",path:`${e.id}.proofProfile`,message:`${e.moduleId}/${e.exposure} requires the ${n} proof profile.`});if(e.criticality==="release_gate"&&a.some((t)=>!e.requiredProof.includes(t)))o.push({code:"qualification_profile_incomplete",path:`${e.id}.requiredProof`,message:`${e.proofProfile} release gates cannot weaken their minimum proof profile.`});o.push(...x(e,s));o.push(...S(e,s));if(e.stage==="qualified"){const u=[...new Set([...e.requiredProof,...a])].filter((l)=>!m(e,l,s)),d=e.blockers.some((l)=>l.status==="open");if(u.length>0||d)o.push({code:"qualification_incomplete",path:`${e.id}.stage`,message:`Qualification is missing fresh proof (${u.join(", ")||"none"}) or has an open blocker.`})}if(e.stage!=="qualified"&&e.nextActions.length===0)o.push({code:"missing_next_action",path:`${e.id}.nextActions`,message:"Unqualified capabilities require an explicit next action."});return o}export function validateSupportCapabilityCycles(e){return[...f(e,(s)=>s.parentId?[s.parentId]:[],"parentId"),...f(e,(s)=>s.dependencyRefs,"dependencyRefs")]}function f(e,s,o){const i=[],p=new Map(e.map((t)=>[t.id,t])),r=new Set,n=new Set,a=(t)=>{if(r.has(t))return;if(n.has(t)){i.push({code:"cyclic_reference",path:`${t}.${o}`,message:`Capability ${t} participates in a ${o} cycle.`});return}const u=p.get(t);if(!u)return;n.add(t);for(const d of s(u))a(d);n.delete(t);r.add(t)};for(const t of e)a(t.id);return i}

package/dist/node/customer-support/capability-matrix-validation.js

@@ -0,0 +1 @@
+import{supportTimestamp as l}from"./capability-matrix-evidence.js";import{SUPPORT_DATA_CLASS_REFERENCE_REGISTRY as u,SUPPORT_DATA_STORE_REFERENCE_REGISTRY as c,SUPPORT_EVENT_REFERENCE_REGISTRY as f,SUPPORT_JOURNEY_REFERENCE_REGISTRY as _,SUPPORT_SERVICE_REFERENCE_REGISTRY as m,SUPPORT_SLO_REFERENCE_REGISTRY as R}from"./capability-matrix-registries.js";import{validateSupportCapabilityCycles as h,validateSupportCapabilityPaths as g,validateSupportCapabilityStage as v}from"./capability-matrix-validation-helpers.js";export function validateSupportCapabilityMatrix(e){const t=[],s=a(e.modules,"modules",t),o=a(e.capabilities,"capabilities",t);if(!I(e.meta.asOf))t.push({code:"invalid_as_of",path:"meta.asOf",message:"The matrix asOf value must be an ISO timestamp."});for(const i of e.modules)for(const n of i.routeRoots)if(!n.startsWith("/"))t.push({code:"invalid_route",path:`${i.id}.routeRoots`,message:`Route ${n} must be application-relative.`});for(const i of e.capabilities){d(s,i.moduleId,`${i.id}.moduleId`,t);E(i,e,o,t);for(const n of i.dependencyRefs)d(o,n,`${i.id}.dependencyRefs`,t);t.push(...g(i));S(i,t);a(i.evidence,`${i.id}.evidence`,t);a(i.blockers,`${i.id}.blockers`,t);for(const n of i.blockers)if(n.resolutionEvidenceRef&&i.evidence.filter((r)=>r.id===n.resolutionEvidenceRef).length>1)t.push({code:"ambiguous_resolution_evidence",path:`${i.id}.blockers.${n.id}`,message:`Resolution evidence ${n.resolutionEvidenceRef} is ambiguous.`});t.push(...v(i,e.meta.asOf))}t.push(...h(e.capabilities));return t}function S(e,t){const s=[["serviceRefs",e.serviceRefs,m],["dataStoreRefs",e.dataStoreRefs,c],["eventRefs",e.eventRefs,f],["journeyRefs",e.journeyRefs,_],["sloRefs",e.sloRefs,R],["dataClassRefs",e.dataClassRefs,u]];for(const[i,n,r]of s){if(!n){t.push({code:"invalid_registry_reference",path:`${e.id}.${i}`,message:`SupportOS matrix v1.1 requires ${i}.`});continue}if(new Set(n).size!==n.length)t.push({code:"duplicate_id",path:`${e.id}.${i}`,message:`${i} contains duplicate references.`});for(const p of n)if(!r.includes(p))t.push({code:"invalid_registry_reference",path:`${e.id}.${i}`,message:`Unknown ${i} reference ${p}.`})}const o=e.qualificationScopes;if(!o||o.environments.length===0||o.regions.length===0||o.platforms.length===0||o.locales.length===0||o.providers.length===0||o.personas.length===0||!e.rolloutPhase||!e.accountableOwner||!e.expectedEvidence||e.expectedEvidence.length===0)t.push({code:"missing_qualification_scope",path:`${e.id}.qualificationScopes`,message:"Qualification scopes, rollout phase, accountable owner, and expected evidence are required."})}function E(e,t,s,o){if(!e.parentId)return;d(s,e.parentId,`${e.id}.parentId`,o);const i=t.capabilities.find((n)=>n.id===e.parentId);if(i&&i.moduleId!==e.moduleId)o.push({code:"invalid_hierarchy",path:`${e.id}.parentId`,message:"Parent and child capabilities must belong to the same module."});if(e.parentId===e.id)o.push({code:"invalid_hierarchy",path:`${e.id}.parentId`,message:"A capability cannot parent itself."})}function a(e,t,s){const o=new Set;for(const i of e){if(o.has(i.id))s.push({code:"duplicate_id",path:t,message:`Duplicate id ${i.id}.`});o.add(i.id)}return o}function d(e,t,s,o){if(!e.has(t))o.push({code:"unknown_reference",path:s,message:`Unknown reference ${t}.`})}function I(e){return l(e)!==void 0}

package/dist/node/customer-support/capability-matrix.js

@@ -0,0 +1,3 @@
+export const SUPPORT_CAPABILITY_MATRIX_KEY="customer-support-v1.capability-matrix",SUPPORT_CAPABILITY_MATRIX_VERSION="1.1.0",SUPPORT_CAPABILITY_MATRIX_LEGACY_VERSION="1.0.0";export function defineSupportCapabilityMatrix(e){return e}export const SupportCapabilityMatrixDocBlock={id:"customer-support-v1-capability-matrix",title:"SupportOS v1 capability and qualification matrix",summary:"Typed delivery truth for SupportOS modules, feature hierarchy, ownership, routes, evidence, blockers, and production qualification.",kind:"reference",visibility:"public",route:"/docs/platform/supportos-v1-capability-matrix",tags:["supportos","delivery","qualification","product-health"],body:`# SupportOS v1 capability matrix
+
+Version 1.1 adds registry-backed service, storage, event, journey, SLO, data-class, rollout, ownership, and qualification-scope metadata without removing the v1.0 authoring surface. The matrix separates implementation stage from open blockers. Source and test definitions are inventory evidence; executed proof requires immutable receipts, and production proof expires relative to the matrix asOf. Intrinsic semantics prevent proof-profile downgrades, newer failed or stale receipts supersede older passes, and blocker resolution links verified evidence. Only evidence-complete capabilities without open blockers may be marked qualified.`};

package/dist/node/customer-support/case-assignments.js

@@ -0,0 +1,19 @@
+import{docRef as c}from"../docs/registry.js";import{SupportAuthorityError as o}from"./errors.js";export const SUPPORT_CASE_ASSIGNMENT_MODES=["claim","release","assign","steal"];export function assertSupportAssignmentDecision(t){if(!t.result.allowed)throw i("Connect denied the assignment steal decision.");if(!t.result.evidenceRef)throw i("Assignment steal governance evidence is required.");const s=Date.parse(t.result.expiresAt),n=Date.parse(t.observedAt);if(!Number.isFinite(s)||!Number.isFinite(n)||s<=n)throw i("Assignment steal governance decision is expired or invalid.");return t.result.evidenceRef}export function resolveSupportCaseAssignment(t){const{scope:s,current:n,mutation:e}=t,d=s.permissionRefs.includes("support.admin");if((e.mode==="claim"||e.mode==="release")&&(!n.queueRef||e.queueRef!==n.queueRef))throw i("Claim and release must preserve the server-projected queue.");if(e.mode!=="steal"&&e.decisionRef!==void 0)throw r("Only steal accepts a governed decision reference.");if((e.mode==="claim"||e.mode==="release")&&e.routingDecisionRef!==void 0)throw r("Only assign and steal accept a routing decision reference.");if(e.mode==="claim"){if(e.assigneeRef!==void 0)throw r("Claim derives the assignee from authenticated authority.");if(n.assigneeRef&&n.assigneeRef!==s.actorRef)throw a("The case is already assigned to another operator.");return s.actorRef}if(e.mode==="release"){if(e.assigneeRef!==void 0)throw r("Release cannot include an assignee reference.");if(n.assigneeRef!==s.actorRef&&!d)throw i("Only the assigned operator or an administrator can release a case.");return}if(!d)throw i("Assign and steal require SupportOS administrator authority.");if(!e.assigneeRef)throw r("Assign and steal require an assignee reference.");if(e.mode==="assign"&&n.assigneeRef)throw a("Use steal to replace an existing assignment.");if(e.mode==="steal"&&!e.decisionRef)throw i("Steal requires a governed decision reference.");if(e.mode==="steal"&&n.assigneeRef===e.assigneeRef)throw a("Steal must replace the current assignee.");return e.assigneeRef}function r(t){return new o("VALIDATION_FAILED",t)}function i(t){return new o("POLICY_DENIED",t)}function a(t){return new o("REVISION_CONFLICT",t)}export const SupportCaseAssignmentsDocBlock={id:"docs.customer-support.case-assignments",title:"SupportOS case assignments",summary:"Revision-fenced claim, release, assignment, and governed steal semantics.",kind:"reference",visibility:"public",route:"/docs/customer-support/case-assignments",tags:["supportos","assignment","collision","idempotency"],body:`# SupportOS case assignments
+
+Assignment mutations are scoped by authenticated tenant, workspace, and actor.
+Claim always derives the assignee from that actor. Release is limited to the
+current assignee or an administrator. Assign and steal require administrator
+authority, and steal also requires governed evidence. Every write is fenced by
+the case revision and a stable idempotency key. Durable authorities update the
+assignment projection and immutable case history atomically.
+
+The steal decision is verified server-side and bound to scope, case, target,
+revision, and expiry. Exact receipt replay does not require a still-live
+decision; any new or changed mutation does.
+
+An assign or steal mutation may bind a routing decision. Production authorities
+must revalidate the selected case, assignee, active team and membership, target
+queue, current policy revision, and live capacity, then consume that immutable
+decision exactly once in the assignment transaction. Authorities that cannot
+provide atomic decision consumption fail closed.
+`},SupportCaseAssignmentsDocRef=c(SupportCaseAssignmentsDocBlock.id);

package/dist/node/customer-support/case-cursor.js

@@ -0,0 +1,8 @@
+import{docRef as u}from"../docs/registry.js";import{SupportAuthorityError as n}from"./errors.js";const p=2048,c=200;export const SupportCaseCursorDocBlock={id:"docs.customer-support.case-cursor",title:"SupportOS case cursor",summary:"Bounded, opaque keyset pagination cursor shared by authorities.",kind:"reference",visibility:"public",route:"/docs/customer-support/case-cursor",tags:["supportos","pagination","security"],body:`# SupportOS case cursor
+
+Case collections use one bounded opaque keyset cursor containing the canonical
+updated timestamp and case reference. Managed, self-hosted, and in-memory
+authorities use the same encoder and validator. Malformed, oversized, or stale
+shapes fail with the stable validation error and never become dependency
+outages.
+`},SupportCaseCursorDocRef=u(SupportCaseCursorDocBlock.id);export function encodeSupportCaseCursor(o,r){i(o,r);return encodeURIComponent(JSON.stringify([o,r]))}export function decodeSupportCaseCursor(o){if(!o||o.length>p)throw e("SupportOS cursor is empty or exceeds its limit.");try{const r=JSON.parse(decodeURIComponent(o));if(!Array.isArray(r)||r.length!==2||r.some((a)=>typeof a!=="string"))throw e("SupportOS cursor shape is invalid.");const[t,s]=r;i(t,s);return{updatedAt:t,caseRef:s}}catch(r){if(r instanceof n)throw r;throw e("SupportOS cursor encoding is invalid.",r)}}function i(o,r){if(!o||!Number.isFinite(Date.parse(o))||!r||r.length>c)throw e("SupportOS cursor values are invalid.")}function e(o,r){return new n("VALIDATION_FAILED",o,{cause:r})}

package/dist/node/customer-support/case-lifecycle-event-schemas.js

@@ -0,0 +1 @@
+import{EnumType as f,ScalarTypeEnum as a,SchemaModel as p}from"@lssm/lib.schema";const c=32,l=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,199}$/,m=new f("SupportCaseUnsnoozedResumeStatus",["open","waiting-on-customer","waiting-on-team"]),i=()=>({type:a.ID(),isOptional:!1}),R={workspaceRef:i(),resourceRef:i(),correlationRef:i(),receiptRef:i(),revision:{type:a.Int_unsecure(),isOptional:!1},resumeStatus:{type:m,isOptional:!1},occurredAt:{type:a.String_unsecure(),isOptional:!1},actorRef:i(),evidenceRefs:{type:a.ID(),isOptional:!1,isArray:!0}};class u extends p{getZod(){return super.getZod().strict().superRefine((e,s)=>{const n=e,r={addIssue:(t)=>s.addIssue(t)};for(const t of["workspaceRef","resourceRef","correlationRef","receiptRef","actorRef"])if(!d(n[t]))o(r,t,`${t} is invalid`);if(!Number.isSafeInteger(n.revision)||Number(n.revision)<1)o(r,"revision","revision must be positive");if(!y(n.occurredAt))o(r,"occurredAt","occurredAt must be canonical ISO time");g(n.evidenceRefs,r)})}}export const SupportCaseUnsnoozedEventPayloadModel=new u({name:"SupportCaseUnsnoozedEventPayloadV1",fields:R});function d(e){return typeof e==="string"&&l.test(e)}function y(e){if(typeof e!=="string"||e.length>64)return!1;const s=Date.parse(e);return Number.isFinite(s)&&new Date(s).toISOString()===e}function g(e,s){if(!Array.isArray(e)||e.length>c){o(s,"evidenceRefs",`evidenceRefs must contain at most ${c} references`);return}if(!e.every(d)||new Set(e).size!==e.length)o(s,"evidenceRefs","evidenceRefs must contain unique bounded references")}function o(e,s,n){e.addIssue({code:"custom",path:[s],message:n})}

package/dist/node/customer-support/case-lifecycle.js

@@ -0,0 +1,8 @@
+import{ScalarTypeEnum as r,SchemaModel as a}from"@lssm/lib.schema";import{docRef as p}from"../docs/registry.js";import{defineCommand as c}from"../operations/index.js";import{SupportMutationOutput as u,supportOperationErrors as d}from"./operation-schemas.js";export{SupportCaseUnsnoozedEventPayloadModel}from"./case-lifecycle-event-schemas.js";const n={caseRef:{type:r.ID(),isOptional:!1},expectedRevision:{type:r.Int_unsecure(),isOptional:!1},idempotencyKey:{type:r.ID(),isOptional:!1},evidenceRefs:{type:r.ID(),isOptional:!1,isArray:!0}};class s extends a{getZod(){return super.getZod().strict().superRefine((t,e)=>{const o=t;if(!Number.isSafeInteger(o.expectedRevision)||Number(o.expectedRevision)<0)e.addIssue({code:"custom",path:["expectedRevision"],message:"expectedRevision must be nonnegative"});if(typeof o.caseRef!=="string"||!o.caseRef.trim()||typeof o.idempotencyKey!=="string"||!o.idempotencyKey.trim())e.addIssue({code:"custom",message:"caseRef and idempotencyKey are required"})})}}const l={...n,snoozeUntil:{type:r.DateTime(),isOptional:!1}};export const SupportCaseSnoozeInputV2=new s({name:"SupportCaseSnoozeInputV2",fields:l}),SupportCaseArchiveInputV2=new s({name:"SupportCaseArchiveInputV2",fields:n}),SupportCaseLifecycleDocBlock={id:"docs.customer-support.case-lifecycle",title:"SupportOS durable case lifecycle",summary:"Revision-fenced snooze, automatic resume, and archive semantics.",kind:"reference",visibility:"public",route:"/docs/customer-support/case-lifecycle",tags:["supportos","cases","snooze","archive"],body:`# SupportOS durable case lifecycle
+
+Snooze and archive mutations derive authority from server context, require an
+idempotency key and current case revision, and append immutable events. Snooze
+persists the prior service state and atomically emits a fenced unsnooze job.
+Hosts must register the matching durable handler before enabling automatic
+resume. Archive is terminal and cannot be used as a substitute for erasure.
+`},SupportCaseLifecycleDocRef=p(SupportCaseLifecycleDocBlock.id);const y=(t,e)=>({key:t,version:"2.0.0",title:e,description:`${e} with revision fencing and immutable lifecycle evidence.`,goal:e,context:"Tenant and workspace authority come from authenticated server context.",domain:"customer-support",owners:["platform.support"],tags:["support","supportos","case-lifecycle-v2"],stability:"experimental",docId:[SupportCaseLifecycleDocRef]});function i(t,e,o){return c({meta:y(t,e),io:{input:o,output:u,errors:d},policy:{auth:"user",pii:[]}})}export const SupportCaseSnoozeCommandV2=i("support.case.snooze","Snooze support case",SupportCaseSnoozeInputV2),SupportCaseArchiveCommandV2=i("support.case.archive","Archive support case",SupportCaseArchiveInputV2),supportCaseLifecycleOperations=[SupportCaseSnoozeCommandV2,SupportCaseArchiveCommandV2];

package/dist/node/customer-support/case-presence.js

@@ -0,0 +1,11 @@
+import{EnumType as d,ScalarTypeEnum as s,SchemaModel as o}from"@lssm/lib.schema";import{docRef as m}from"../docs/registry.js";import{defineCommand as f,defineQuery as S}from"../operations/index.js";export const SUPPORT_CASE_PRESENCE_STATES=["focused","leave"];export function parseSupportCasePresenceProjection(e){if(!e||typeof e!=="object"||Array.isArray(e))throw Error("SupportOS presence projection must be an object.");const t=e,c=["caseRef","activeSessionCount","otherOperatorCount","observedAt","version"];if(Object.keys(t).some((u)=>!c.includes(u)))throw Error("SupportOS presence projection contains unknown fields.");if(typeof t.caseRef!=="string"||!t.caseRef.trim()||typeof t.observedAt!=="string"||!Number.isFinite(Date.parse(t.observedAt))||!r(t.activeSessionCount)||!r(t.otherOperatorCount)||!r(t.version)||t.otherOperatorCount>t.activeSessionCount)throw Error("SupportOS presence projection is invalid.");return{caseRef:t.caseRef,activeSessionCount:t.activeSessionCount,otherOperatorCount:t.otherOperatorCount,observedAt:t.observedAt,version:t.version}}function r(e){return Number.isSafeInteger(e)&&Number(e)>=0}export const SupportCasePresenceDocBlock={id:"docs.customer-support.case-presence",title:"SupportOS case presence",summary:"Ephemeral, scope-bound collision awareness for case operators.",kind:"reference",visibility:"public",route:"/docs/customer-support/case-presence",tags:["supportos","presence","collision","realtime"],body:`# SupportOS case presence
+
+Presence is ephemeral coordination state, never durable case history. A server
+binds each opaque browser session to authenticated tenant, workspace, actor, and
+case authority. Heartbeat sequence numbers are monotonic, timestamps and expiry
+come from the server, and stale sessions disappear without an explicit leave.
+
+Portable projections expose counts only. They never expose actor, contact,
+message, answer, or note identifiers. Distributed adapters must preserve the
+same scope, sequence, TTL, and fail-closed authorization semantics.
+`},SupportCasePresenceDocRef=m(SupportCasePresenceDocBlock.id);const l=new d("SupportCasePresenceState",[...SUPPORT_CASE_PRESENCE_STATES]),h={caseRef:{type:s.ID(),isOptional:!1},sessionRef:{type:s.ID(),isOptional:!1},sequence:{type:s.Int_unsecure(),isOptional:!1},state:{type:l,isOptional:!1}};class i extends o{semanticSchema;getZod(){if(this.semanticSchema)return this.semanticSchema;this.semanticSchema=super.getZod().strict().superRefine((e,t)=>{if(typeof e.caseRef!=="string"||!e.caseRef.trim()||e.caseRef.length>200)t.addIssue({code:"custom",path:["caseRef"],message:"caseRef must be nonblank"});if(typeof e.sequence!=="number"||e.sequence<1)t.addIssue({code:"custom",path:["sequence"],message:"sequence must be positive"});if(typeof e.sessionRef!=="string"||!e.sessionRef.trim()||e.sessionRef.length>200)t.addIssue({code:"custom",path:["sessionRef"],message:"sessionRef must be bounded"})});return this.semanticSchema}}export const SupportCasePresenceMutationInputModel=new i({name:"SupportCasePresenceMutationInputV1",fields:h});const y={caseRef:{type:s.ID(),isOptional:!1}};class a extends o{semanticSchema;getZod(){if(this.semanticSchema)return this.semanticSchema;this.semanticSchema=super.getZod().strict().superRefine((e,t)=>{if(typeof e.caseRef!=="string"||!e.caseRef.trim()||e.caseRef.length>200)t.addIssue({code:"custom",path:["caseRef"],message:"caseRef must be nonblank"})});return this.semanticSchema}}export const SupportCasePresenceReadInputModel=new a({name:"SupportCasePresenceReadInputV1",fields:y});const P={caseRef:{type:s.ID(),isOptional:!1},activeSessionCount:{type:s.Int_unsecure(),isOptional:!1},otherOperatorCount:{type:s.Int_unsecure(),isOptional:!1},observedAt:{type:s.String_unsecure(),isOptional:!1},version:{type:s.Int_unsecure(),isOptional:!1}};class p extends o{semanticSchema;getZod(){if(this.semanticSchema)return this.semanticSchema;this.semanticSchema=super.getZod().strict().superRefine((e,t)=>{if(typeof e.observedAt!=="string"||!Number.isFinite(Date.parse(e.observedAt))||typeof e.activeSessionCount!=="number"||e.activeSessionCount<0||typeof e.otherOperatorCount!=="number"||e.otherOperatorCount<0||typeof e.version!=="number"||e.version<0||e.otherOperatorCount>e.activeSessionCount)t.addIssue({code:"custom",message:"presence projection is invalid"})});return this.semanticSchema}}export const SupportCasePresenceProjectionModel=new p({name:"SupportCasePresenceProjectionV1",fields:P});const n=(e,t)=>({key:e,version:"1.0.0",title:t,description:t,goal:"Prevent conflicting operator work without persisting surveillance data.",context:"Tenant, workspace, actor, timestamps, and expiry derive from authenticated server authority.",domain:"customer-support",owners:["platform.support"],tags:["support","supportos","presence","ephemeral"],stability:"experimental",docId:[SupportCasePresenceDocRef]});export const SupportCasePresenceHeartbeatCommand=f({meta:n("support.case.presence.heartbeat","Heartbeat case presence"),io:{input:SupportCasePresenceMutationInputModel,output:SupportCasePresenceProjectionModel},policy:{auth:"user",pii:[]}}),SupportCasePresenceGetQuery=S({meta:n("support.case.presence.get","Get case presence"),io:{input:SupportCasePresenceReadInputModel,output:SupportCasePresenceProjectionModel},policy:{auth:"user",pii:[]}}),supportCasePresenceOperations=[SupportCasePresenceHeartbeatCommand,SupportCasePresenceGetQuery];

package/dist/node/customer-support/case-relations.js

@@ -0,0 +1,14 @@
+import{docRef as o}from"../docs/registry.js";export const SUPPORT_CASE_RELATION_KINDS=["merge","split","link"];export function adaptLegacySupportCaseRelationInput(e,t){if(!isSupportCaseRelationKind(e.relationKind))throw Error("Unsupported SupportOS case relation kind.");return{relationRef:t.relationRef,caseRef:e.caseRef,relatedCaseRef:e.relatedCaseRef,kind:e.relationKind,expectedRevision:e.expectedRevision,relatedExpectedRevision:t.relatedExpectedRevision,evidenceRefs:t.evidenceRefs??[],idempotencyKey:e.idempotencyKey}}export function isSupportCaseRelationKind(e){return typeof e==="string"&&SUPPORT_CASE_RELATION_KINDS.includes(e)}export const SupportCaseRelationsDocBlock={id:"docs.customer-support.case-relations",title:"SupportOS case relations",summary:"Atomic, revision-fenced merge, split, and link evidence between support cases.",kind:"reference",visibility:"public",route:"/docs/customer-support/case-relations",tags:["supportos","cases","relations","idempotency"],body:`# SupportOS case relations
+
+Case relations are immutable evidence edges. Both cases belong to the
+server-derived tenant and workspace, both revisions are fenced, and both case
+histories advance atomically. Implementations lock case rows in canonical order
+to prevent deadlocks. Exact idempotent replays return the original receipt;
+changed input fails closed. Relation records contain opaque references and
+evidence references only. CommunicationOS message and attachment bodies are
+never copied into SupportOS relation evidence.
+
+The original one-revision relation input remains available as a deprecated
+compatibility surface. Managed execution requires the strict mutation input,
+including the related-case revision and a stable relation reference.
+`},SupportCaseRelationsDocRef=o(SupportCaseRelationsDocBlock.id);

package/dist/node/customer-support/company-action-events.js

@@ -0,0 +1 @@
+import{defineEvent as p}from"../events.js";import{SupportCompanyActionPlanProjectionModel as e}from"./company-action-output-schemas.js";const o=(n,t)=>p({meta:{key:n,version:"1.0.0",title:t,description:t,domain:"customer-support",owners:["platform.support","platform.companyos"],tags:["support","companyos","governed-action"],stability:"experimental"},payload:e,pii:[]});export const SupportCompanyActionSubmittedEvent=o("support.company-action.submitted","CompanyOS governed action submitted"),SupportCompanyActionOutcomeRecordedEvent=o("support.company-action.outcome.recorded","CompanyOS governed action outcome recorded"),SupportCompanyActionCompensationStartedEvent=o("support.company-action.compensation.started","CompanyOS governed action compensation started"),supportCompanyActionEvents=[SupportCompanyActionSubmittedEvent,SupportCompanyActionOutcomeRecordedEvent,SupportCompanyActionCompensationStartedEvent];

package/dist/node/customer-support/company-action-input-schemas.js

@@ -0,0 +1 @@
+import{CompanyActionKindEnum as m,CompanyActionStateEnum as a,companyActionId as e,companyActionInt as i,StrictCompanyActionSchema as n}from"./company-action-schema-primitives.js";const u={planRef:e(),actionKind:{type:m,isOptional:!1},caseRef:e(),expectedCaseRevision:i(),targetRef:e(),actionPayloadRef:e(),policyRef:e(),workflowRef:e(),workflowRevisionRef:e(),compensationWorkflowRef:e(!0),compensationWorkflowRevisionRef:e(!0),idempotencyKey:e()};class p extends n{getZod(){return super.getZod().superRefine((o,t)=>{if(!s(o.expectedCaseRevision,!0)||Boolean(o.compensationWorkflowRef)!==Boolean(o.compensationWorkflowRevisionRef))t.addIssue({code:"custom",message:"case revision is invalid"})})}}export const SupportCompanyActionSubmitInputModel=new p({name:"SupportCompanyActionSubmitInputV1",fields:u});const l={planRef:e(),expectedRevision:i(),expectedWorkflowRunRef:e(),idempotencyKey:e()};class d extends n{getZod(){return super.getZod().superRefine((o,t)=>{if(!s(o.expectedRevision))t.addIssue({code:"custom",message:"revision is invalid"})})}}export const SupportCompanyActionOutcomeInputModel=new d({name:"SupportCompanyActionOutcomeInputV1",fields:l});const f={planRef:e(),expectedRevision:i(),idempotencyKey:e()};class r extends n{getZod(){return super.getZod().superRefine((o,t)=>{if(!s(o.expectedRevision))t.addIssue({code:"custom",message:"revision is invalid"})})}}export const SupportCompanyActionCompensateInputModel=new r({name:"SupportCompanyActionCompensateInputV1",fields:f});const y={state:{type:a,isOptional:!0},limit:i(),cursor:e(!0),watermark:e(!0)};class c extends n{getZod(){return super.getZod().superRefine((o,t)=>{if(!Number.isSafeInteger(o.limit)||Number(o.limit)<1||Number(o.limit)>100||Boolean(o.cursor)!==Boolean(o.watermark))t.addIssue({code:"custom",message:"pagination is invalid"})})}}export const SupportCompanyActionListInputModel=new c({name:"SupportCompanyActionListInputV1",fields:y}),SupportCompanyActionGetInputModel=new n({name:"SupportCompanyActionGetInputV1",fields:{planRef:e()}});function s(o,t=!1){return Number.isSafeInteger(o)&&Number(o)>=(t?0:1)&&Number(o)<=1e9}

package/dist/node/customer-support/company-action-operations.js

@@ -0,0 +1 @@
+import{defineCommand as p,defineQuery as r}from"../operations/index.js";import{SupportCompanyActionCompensateInputModel as a,SupportCompanyActionGetInputModel as c,SupportCompanyActionListInputModel as m,SupportCompanyActionOutcomeInputModel as u,SupportCompanyActionSubmitInputModel as s}from"./company-action-input-schemas.js";import{SupportCompanyActionPlanPageModel as d,SupportCompanyActionPlanProjectionModel as y,SupportCompanyActionPlanResultModel as e}from"./company-action-output-schemas.js";import{supportOperationErrors as o}from"./operation-schemas.js";const t=(i,n)=>({key:i,version:"1.0.0",title:n,description:n,goal:n,context:"SupportOS projects minimized evidence; Connect governs approval and Workflow remains the only effect authority.",domain:"customer-support",owners:["platform.support","platform.companyos","platform.connect"],tags:["support","companyos","connect","workflow","governed-action"],stability:"experimental"});export const SupportCompanyActionSubmitCommand=p({meta:t("support.company-action.submit","Submit a minimized Connect-governed CompanyOS action plan"),io:{input:s,output:e,errors:o},policy:{auth:"admin",pii:[]}}),SupportCompanyActionOutcomeCommand=p({meta:t("support.company-action.outcome.record","Record exact Workflow outcome evidence for a CompanyOS action plan"),io:{input:u,output:e,errors:o},policy:{auth:"internal",pii:[]}}),SupportCompanyActionCompensateCommand=p({meta:t("support.company-action.compensate","Start the predeclared compensation Workflow"),io:{input:a,output:e,errors:o},policy:{auth:"admin",pii:[]}}),SupportCompanyActionGetQuery=r({meta:t("support.company-action.get","Get governed action evidence"),io:{input:c,output:y,errors:o},policy:{auth:"admin",pii:[]}}),SupportCompanyActionListQuery=r({meta:t("support.company-action.list","List governed action evidence"),io:{input:m,output:d,errors:o},policy:{auth:"admin",pii:[]}}),supportCompanyActionOperations=[SupportCompanyActionSubmitCommand,SupportCompanyActionOutcomeCommand,SupportCompanyActionCompensateCommand,SupportCompanyActionGetQuery,SupportCompanyActionListQuery];

package/dist/node/customer-support/company-action-output-schemas.js

@@ -0,0 +1 @@
+import{CompanyActionKindEnum as f,CompanyActionStateEnum as m,companyActionId as o,companyActionInt as s,companyActionTime as t,StrictCompanyActionSchema as n}from"./company-action-schema-primitives.js";const R={evidenceRef:o(),caseRef:o(),caseRevision:s(),requesterRef:o(),serviceProfileRef:o(),entitlementRefs:{type:o().type,isArray:!0,isOptional:!1},policyRefs:{type:o().type,isArray:!0,isOptional:!1},evidenceWatermarkRef:o(),observedAt:t(),evidenceExpiresAt:t()};class c extends n{getZod(){return super.getZod().superRefine((e,i)=>{if(!Number.isSafeInteger(e.caseRevision)||Number(e.caseRevision)<0||new Set(e.entitlementRefs).size!==e.entitlementRefs.length||new Set(e.policyRefs).size!==e.policyRefs.length||Date.parse(String(e.observedAt))>=Date.parse(String(e.evidenceExpiresAt)))i.addIssue({code:"custom",message:"evidence projection is invalid"})})}}export const SupportCompanyActionEvidenceProjectionModel=new c({name:"SupportCompanyActionEvidenceProjectionV1",fields:R});const l={planRef:o(),actionKind:{type:f,isOptional:!1},caseRef:o(),caseRevision:s(),targetRef:o(),actionPayloadRef:o(),policyRef:o(),evidenceRef:o(),evidenceWatermarkRef:o(),connectDecisionRef:o(),connectApprovalRef:o(!0),workflowRef:o(),workflowRevisionRef:o(),workflowRunRef:o(!0),workflowEvidenceRef:o(!0),compensationWorkflowRef:o(!0),compensationWorkflowRevisionRef:o(!0),compensationRunRef:o(!0),compensationEvidenceRef:o(!0),state:{type:m,isOptional:!1},revision:s(),latestEvidenceRef:o(),createdAt:t(),updatedAt:t()};class r extends n{getZod(){return super.getZod().superRefine((e,i)=>{const p=e.state!=="denied",a=["compensation-required","compensating","compensated"].includes(String(e.state)),d=["compensating","compensated"].includes(String(e.state));if(!Number.isSafeInteger(e.revision)||Number(e.revision)<1||Number(e.caseRevision)<0||Boolean(e.connectApprovalRef)!==(e.state!=="denied")||p&&(!e.workflowRunRef||!e.workflowEvidenceRef)||Boolean(e.compensationWorkflowRef)!==Boolean(e.compensationWorkflowRevisionRef)||a&&(!e.compensationWorkflowRef||!e.compensationWorkflowRevisionRef)||d&&!e.compensationRunRef||e.state==="compensated"&&!e.compensationEvidenceRef||e.state==="submitted"&&e.latestEvidenceRef!==e.workflowEvidenceRef||e.state==="compensated"&&e.latestEvidenceRef!==e.compensationEvidenceRef||Date.parse(String(e.createdAt))>Date.parse(String(e.updatedAt)))i.addIssue({code:"custom",message:"plan lifecycle is invalid"})})}}export const SupportCompanyActionPlanProjectionModel=new r({name:"SupportCompanyActionPlanProjectionV1",fields:l}),SupportCompanyActionPlanResultModel=new n({name:"SupportCompanyActionPlanResultV1",fields:{projection:{type:SupportCompanyActionPlanProjectionModel,isOptional:!1},receiptRef:o(),eventRef:o()}}),SupportCompanyActionPlanPageModel=new n({name:"SupportCompanyActionPlanPageV1",fields:{items:{type:SupportCompanyActionPlanProjectionModel,isArray:!0,isOptional:!1},watermark:o(),nextCursor:o(!0)}});

package/dist/node/customer-support/company-action-plans.js

@@ -0,0 +1 @@
+export const SUPPORT_COMPANY_ACTION_KINDS=["refund","credit","entitlement-adjustment","account-change"],SUPPORT_COMPANY_ACTION_STATES=["denied","submitted","completed","compensation-required","compensating","compensated","failed"];

package/dist/node/customer-support/company-action-schema-primitives.js

@@ -0,0 +1 @@
+import{EnumType as s,ScalarTypeEnum as o,SchemaModel as d}from"@lssm/lib.schema";import{SUPPORT_COMPANY_ACTION_KINDS as p,SUPPORT_COMPANY_ACTION_STATES as r}from"./company-action-plans.js";export const CompanyActionKindEnum=new s("SupportCompanyActionKind",[...p]),CompanyActionStateEnum=new s("SupportCompanyActionState",[...r]),companyActionId=(e=!1)=>({type:o.ID(),isOptional:e}),companyActionInt=()=>({type:o.Int_unsecure(),isOptional:!1}),companyActionTime=()=>({type:o.String_unsecure(),isOptional:!1});export class StrictCompanyActionSchema extends d{getZod(){return super.getZod().strict().superRefine((e,i)=>{for(const[t,n]of Object.entries(e)){if((t.endsWith("Ref")||t==="idempotencyKey")&&n!==void 0&&!validCompanyActionRef(n))i.addIssue({code:"custom",path:[t],message:"reference is invalid"});if(t.endsWith("At")&&n!==void 0&&!validCompanyActionTime(n))i.addIssue({code:"custom",path:[t],message:"timestamp is invalid"})}})}}export function validCompanyActionRef(e){return typeof e==="string"&&e.length>=2&&e.length<=300&&/^[A-Za-z0-9][A-Za-z0-9._:@/-]*$/.test(e)&&!e.includes("://")}export function validCompanyActionTime(e){return typeof e==="string"&&/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(e)&&Number.isFinite(Date.parse(e))}

package/dist/node/customer-support/core.js

@@ -0,0 +1 @@
+export const SUPPORT_CASE_STATUSES=["new","open","waiting-on-customer","waiting-on-team","snoozed","resolved","closed","archived"],SUPPORT_PRIORITIES=["low","normal","high","urgent"],SUPPORT_CASE_TRANSITIONS={new:["open","closed","archived"],open:["waiting-on-customer","waiting-on-team","snoozed","resolved","closed"],"waiting-on-customer":["open","snoozed","resolved","closed"],"waiting-on-team":["open","snoozed","resolved","closed"],snoozed:["open","waiting-on-customer","waiting-on-team","closed"],resolved:["open","closed","archived"],closed:["open","archived"],archived:[]};export function canTransitionSupportCase(e,r){return SUPPORT_CASE_TRANSITIONS[e].includes(r)}

package/dist/node/customer-support/crypto-lifecycle.js

@@ -0,0 +1,12 @@
+import{docRef as y}from"../docs/registry.js";export const SupportCryptoLifecycleDocBlock={id:"docs.customer-support.crypto-lifecycle",title:"SupportOS cryptographic lifecycle",summary:"Versioned envelope keys, scoped hashes, rotation, and secret refs.",kind:"reference",visibility:"public",route:"/docs/customer-support/crypto-lifecycle",tags:["supportos","security","kms","rotation"],body:`# SupportOS cryptographic lifecycle
+
+Production data protection uses versioned envelope keys. Ciphertext identifies
+the non-secret key reference and version needed to unwrap its data key; raw
+master keys and secret values never enter persisted contracts or telemetry.
+Authenticated context binds tenant, workspace, purpose, and data class.
+Rotation creates a new active version, preserves decrypt-only predecessors,
+and rewraps data keys through an idempotent, fenced, evidence-bearing workflow.
+Scoped lookup hashes use a distinct key purpose and cannot be reused as
+encryption or signing keys. Plaintext data keys are ephemeral, explicitly
+destroyable runtime values. Secret references are scope-bound metadata only.
+`},SupportCryptoLifecycleDocRef=y(SupportCryptoLifecycleDocBlock.id);const d=(e,o)=>e.tenantRef===o.tenantRef&&e.workspaceRef===o.workspaceRef&&e.purpose===o.purpose&&e.dataClassRef===o.dataClassRef;export function validateSupportDataKeyUnwrap(e){const o=[];if(!d(e.wrapped.context,e.context))o.push("CRYPTO_CONTEXT_MISMATCH");if(e.wrapped.contextDigest!==e.contextDigest)o.push("CRYPTO_CONTEXT_DIGEST_MISMATCH");if(e.wrapped.keyVersion<1||!Number.isInteger(e.wrapped.keyVersion))o.push("CRYPTO_KEY_VERSION_INVALID");return o}export function validateSupportKeyRotation(e,o){const t=[];if(!e.idempotencyKey.trim())t.push("ROTATION_IDEMPOTENCY_KEY_REQUIRED");if(!Number.isSafeInteger(e.fencingToken)||e.fencingToken<1)t.push("ROTATION_FENCING_TOKEN_INVALID");if(!Number.isSafeInteger(e.expectedActiveVersion)||e.expectedActiveVersion<1)t.push("ROTATION_EXPECTED_VERSION_INVALID");const p=o;if(!i(p)||!i(p.active)||!i(p.predecessor))return[...t,"ROTATION_RESULT_INVALID"];const{active:n,predecessor:a}=p;if(!s(e.policyEvidenceRef)||!s(p.rotationEvidenceRef))t.push("ROTATION_EVIDENCE_REQUIRED");const c={"data-protection":"AES-256-GCM","lookup-hmac":"HMAC-SHA-256","artifact-signing":"Ed25519"};for(const r of[n,a]){if(typeof r.version!=="number"||!Number.isSafeInteger(r.version)||r.version<1)t.push("ROTATION_DESCRIPTOR_VERSION_INVALID");if(!s(r.keyRef)||!s(r.region))t.push("ROTATION_DESCRIPTOR_REFERENCE_INVALID");if(!s(r.evidenceRef))t.push("ROTATION_DESCRIPTOR_EVIDENCE_INVALID");if(typeof r.createdAt!=="string"||!Number.isFinite(Date.parse(r.createdAt)))t.push("ROTATION_DESCRIPTOR_TIMESTAMP_INVALID");if(typeof r.purpose!=="string"||!Object.hasOwn(c,r.purpose)||r.algorithm!==c[r.purpose])t.push("ROTATION_DESCRIPTOR_ALGORITHM_INVALID")}if(n.status!=="active"||a.status!=="decrypt-only")t.push("ROTATION_STATUS_INVALID");if(a.version!==e.expectedActiveVersion)t.push("ROTATION_PREDECESSOR_VERSION_MISMATCH");if(typeof n.version!=="number"||n.version<=e.expectedActiveVersion)t.push("ROTATION_SUCCESSOR_VERSION_INVALID");for(const r of["keyRef","purpose","algorithm","region"])if(n[r]!==a[r])t.push(`ROTATION_KEY_${r.toUpperCase()}_MISMATCH`);if(n.purpose!==e.context.purpose)t.push("ROTATION_PURPOSE_MISMATCH");if(n.keyRef!==e.expectedActiveKeyRef||a.keyRef!==e.expectedActiveKeyRef)t.push("ROTATION_EXPECTED_KEY_MISMATCH");if(n.region!==e.expectedRegion||a.region!==e.expectedRegion)t.push("ROTATION_EXPECTED_REGION_MISMATCH");return t}const i=(e)=>typeof e==="object"&&e!==null&&!Array.isArray(e),s=(e)=>typeof e==="string"&&Boolean(e.trim())&&e.length<=200;export function validateSupportSecretAvailability(e,o){const t=[];if(o.scopeDigest!==e.scopeDigest)t.push("SECRET_SCOPE_DIGEST_MISMATCH");if(!e.context.tenantRef.trim()||!e.context.workspaceRef.trim())t.push("SECRET_SCOPE_REQUIRED");if(!e.reference.secretRef.trim()||!o.evidenceRef.trim())t.push("SECRET_EVIDENCE_REQUIRED");return t}

package/dist/node/customer-support/crypto-rotation-drill-events.js

@@ -0,0 +1 @@
+import{defineEvent as p}from"../events.js";import{SupportCryptoRotationDrillProjectionModel as e}from"./crypto-rotation-drill-output-schemas.js";const t=(r,o)=>p({meta:{key:r,version:"1.0.0",title:o,description:o,domain:"customer-support",owners:["platform.support","platform.security"],tags:["support","crypto","rotation","drill"],stability:"experimental"},payload:e,pii:[]});export const SupportCryptoRotationDrillRequestedEvent=t("support.crypto.rotation-drill.requested","Cryptographic rotation drill requested"),SupportCryptoRotationDrillPhaseRecordedEvent=t("support.crypto.rotation-drill.phase-recorded","Cryptographic rotation drill phase recorded"),SupportCryptoRotationDrillCompletedEvent=t("support.crypto.rotation-drill.completed","Cryptographic rotation drill completed"),supportCryptoRotationDrillEvents=[SupportCryptoRotationDrillRequestedEvent,SupportCryptoRotationDrillPhaseRecordedEvent,SupportCryptoRotationDrillCompletedEvent];

package/dist/node/customer-support/crypto-rotation-drill-input-schemas.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as a}from"@lssm/lib.schema";import{CryptoRotationDrillPhaseEnum as c,CryptoRotationDrillTargetKindEnum as f,drillId as e,drillInt as s,drillText as n,StrictCryptoRotationDrillSchema as r}from"./crypto-rotation-drill-schema-primitives.js";const u={drillRef:e(),targetKind:{type:f,isOptional:!1},targetRef:e(),dataClassRef:e(),expectedVersionRef:e(),expectedRegion:e(),policyEvidenceRef:e(),idempotencyKey:e()};export const SupportCryptoRotationDrillRequestInputModel=new r({name:"SupportCryptoRotationDrillRequestInputV1",fields:u}),SupportCryptoRotationDrillGetInputModel=new r({name:"SupportCryptoRotationDrillGetInputV1",fields:{drillRef:e()}});const m={limit:s(),cursor:e(!0),watermark:e(!0)};class p extends r{getZod(){return super.getZod().superRefine((o,t)=>{if(!Number.isSafeInteger(o.limit)||Number(o.limit)<1||Number(o.limit)>100||Boolean(o.cursor)!==Boolean(o.watermark))t.addIssue({code:"custom",message:"pagination is invalid"})})}}export const SupportCryptoRotationDrillListInputModel=new p({name:"SupportCryptoRotationDrillListInputV1",fields:m});const R={drillRef:e(),phase:{type:c,isOptional:!1},predecessorVersionRef:e(!0),successorVersionRef:e(!0),restoredVersionRef:e(!0),overlapExpiresAt:n(!0),evidenceRef:e(),valid:{type:a.Boolean(),isOptional:!0},occurredAt:n(),jobRef:e(),workerRef:e(),jobFencingToken:s(),jobExpectedRevision:s(),jobEffectIdempotencyKey:e(),jobFenceEvidenceRef:e(),idempotencyKey:e()};class l extends r{getZod(){return super.getZod().superRefine((o,t)=>{if(!Number.isSafeInteger(o.jobFencingToken)||Number(o.jobFencingToken)<1||!Number.isSafeInteger(o.jobExpectedRevision)||Number(o.jobExpectedRevision)<1)t.addIssue({code:"custom",message:"job fence is invalid"});const i=o.phase==="rotate",d=o.phase==="validate-successor"||o.phase==="validate-restored";if(i!==Boolean(o.overlapExpiresAt)||i!==Boolean(o.predecessorVersionRef)||i!==Boolean(o.successorVersionRef)||d!==Boolean(o.valid)||o.phase==="rollback"!==Boolean(o.restoredVersionRef))t.addIssue({code:"custom",message:"phase evidence is inconsistent"})})}}export const SupportCryptoRotationDrillPhaseInputModel=new l({name:"SupportCryptoRotationDrillPhaseInputV1",fields:R});

package/dist/node/customer-support/crypto-rotation-drill-operations.js

@@ -0,0 +1 @@
+import{defineCommand as p,defineQuery as i}from"../operations/index.js";import{SupportCryptoRotationDrillGetInputModel as a,SupportCryptoRotationDrillListInputModel as l,SupportCryptoRotationDrillPhaseInputModel as s,SupportCryptoRotationDrillRequestInputModel as u}from"./crypto-rotation-drill-input-schemas.js";import{SupportCryptoRotationDrillPageModel as c,SupportCryptoRotationDrillProjectionModel as d,SupportCryptoRotationDrillResultModel as e}from"./crypto-rotation-drill-output-schemas.js";import{supportOperationErrors as t}from"./operation-schemas.js";const o=(n,r)=>({key:n,version:"1.0.0",title:r,description:r,goal:r,context:"SupportOS persists only opaque target/version references and immutable rotation/rollback evidence.",domain:"customer-support",owners:["platform.support","platform.security"],tags:["support","crypto","rotation","drill","rollback"],stability:"experimental"});export const SupportCryptoRotationDrillRequestCommand=p({meta:o("support.crypto.rotation-drill.request","Request a governed cryptographic rotation drill"),io:{input:u,output:e,errors:t},policy:{auth:"admin",pii:[]}}),SupportCryptoRotationDrillExecuteCommand=p({meta:{...o("support.crypto.rotation-drill.execute","Execute a fenced cryptographic rotation drill phase"),context:"Worker-only execution over a live job fence and exact target authority."},io:{input:s,output:e,errors:t},policy:{auth:"internal",pii:[]}}),SupportCryptoRotationDrillGetQuery=i({meta:o("support.crypto.rotation-drill.get","Get cryptographic rotation drill evidence"),io:{input:a,output:d,errors:t},policy:{auth:"admin",pii:[]}}),SupportCryptoRotationDrillListQuery=i({meta:o("support.crypto.rotation-drill.list","List cryptographic rotation drill evidence"),io:{input:l,output:c,errors:t},policy:{auth:"admin",pii:[]}}),supportCryptoRotationDrillOperations=[SupportCryptoRotationDrillRequestCommand,SupportCryptoRotationDrillExecuteCommand,SupportCryptoRotationDrillGetQuery,SupportCryptoRotationDrillListQuery];

package/dist/node/customer-support/crypto-rotation-drill-output-schemas.js

@@ -0,0 +1 @@
+import{CryptoRotationDrillPhaseEnum as d,CryptoRotationDrillStatusEnum as a,CryptoRotationDrillTargetKindEnum as c,drillId as e,drillInt as s,drillText as r,StrictCryptoRotationDrillSchema as i}from"./crypto-rotation-drill-schema-primitives.js";const p={drillRef:e(),targetKind:{type:c,isOptional:!1},targetRef:e(),dataClassRef:e(),expectedVersionRef:e(),expectedRegion:e(),status:{type:a,isOptional:!1},predecessorVersionRef:e(!0),successorVersionRef:e(!0),restoredVersionRef:e(!0),overlapExpiresAt:r(!0),rotationEvidenceRef:e(!0),successorValidationEvidenceRef:e(!0),rollbackEvidenceRef:e(!0),restoredValidationEvidenceRef:e(!0),revision:s(),fencingToken:s(),policyEvidenceRef:e(),latestEvidenceRef:e(),createdAt:r(),updatedAt:r()};class n extends i{getZod(){return super.getZod().superRefine((t,o)=>{if(!Number.isSafeInteger(t.revision)||Number(t.revision)<1||!Number.isSafeInteger(t.fencingToken)||Number(t.fencingToken)<1)o.addIssue({code:"custom",message:"revision or fence is invalid"});if(t.status!=="pending"&&t.status!=="failed"&&(!t.predecessorVersionRef||!t.successorVersionRef||!t.overlapExpiresAt||!t.rotationEvidenceRef))o.addIssue({code:"custom",message:"rotation evidence is incomplete"});if(["successor-validated","rollback-pending","rollback-testing","completed"].includes(String(t.status))&&!t.successorValidationEvidenceRef)o.addIssue({code:"custom",message:"successor validation is missing"});if(["rollback-testing","completed"].includes(String(t.status))&&(!t.rollbackEvidenceRef||!t.restoredVersionRef))o.addIssue({code:"custom",message:"rollback evidence is missing"});if(t.status==="completed"&&(!t.restoredValidationEvidenceRef||t.restoredVersionRef!==t.predecessorVersionRef))o.addIssue({code:"custom",message:"restored validation is invalid"})})}}export const SupportCryptoRotationDrillProjectionModel=new n({name:"SupportCryptoRotationDrillProjectionV1",fields:p}),SupportCryptoRotationDrillResultModel=new i({name:"SupportCryptoRotationDrillResultV1",fields:{projection:{type:SupportCryptoRotationDrillProjectionModel,isOptional:!1},receiptRef:e(),eventRef:e()}}),SupportCryptoRotationDrillPageModel=new i({name:"SupportCryptoRotationDrillPageV1",fields:{items:{type:SupportCryptoRotationDrillProjectionModel,isArray:!0,isOptional:!1},watermark:e(),nextCursor:e(!0)}}),SupportCryptoRotationDrillDispatchModel=new i({name:"SupportCryptoRotationDrillDispatchV1",fields:{projection:{type:SupportCryptoRotationDrillProjectionModel,isOptional:!1},phase:{type:d,isOptional:!1},effectIdempotencyKey:e(),jobFenceEvidenceRef:e()}});

package/dist/node/customer-support/crypto-rotation-drill-schema-primitives.js

@@ -0,0 +1 @@
+import{EnumType as o,ScalarTypeEnum as n,SchemaModel as s}from"@lssm/lib.schema";import{SUPPORT_CRYPTO_ROTATION_DRILL_STATUSES as d,SUPPORT_CRYPTO_ROTATION_DRILL_TARGET_KINDS as l}from"./crypto-rotation-drill.js";export const CryptoRotationDrillTargetKindEnum=new o("SupportCryptoRotationDrillTargetKind",[...l]),CryptoRotationDrillStatusEnum=new o("SupportCryptoRotationDrillStatus",[...d]),CryptoRotationDrillPhaseEnum=new o("SupportCryptoRotationDrillPhase",["rotate","validate-successor","rollback","validate-restored"]),drillId=(t=!1)=>({type:n.ID(),isOptional:t}),drillText=(t=!1)=>({type:n.String_unsecure(),isOptional:t}),drillInt=(t=!1)=>({type:n.Int_unsecure(),isOptional:t});export function validDrillRef(t){return typeof t==="string"&&t.length>=2&&t.length<=300&&/^[A-Za-z0-9][A-Za-z0-9._:@/-]*$/.test(t)&&!t.includes("://")}export function validDrillDate(t){return typeof t==="string"&&/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(t)&&Number.isFinite(Date.parse(t))}export class StrictCryptoRotationDrillSchema extends s{getZod(){return super.getZod().strict().superRefine((t,r)=>{for(const[e,i]of Object.entries(t)){if((e.endsWith("Ref")||e==="idempotencyKey")&&i!==void 0&&!validDrillRef(i))r.addIssue({code:"custom",path:[e],message:"reference is invalid"});if(e.endsWith("At")&&i!==void 0&&!validDrillDate(i))r.addIssue({code:"custom",path:[e],message:"timestamp is invalid"})}})}}

package/dist/node/customer-support/crypto-rotation-drill.js

@@ -0,0 +1 @@
+export const SUPPORT_CRYPTO_ROTATION_DRILL_TARGET_KINDS=["data-protection-key","lookup-hmac-key","artifact-signing-key","webhook-signing-secret","service-secret","provider-credential","oauth-client-secret"],SUPPORT_CRYPTO_ROTATION_DRILL_STATUSES=["pending","rotated","successor-validated","rollback-pending","rollback-testing","completed","rollback-required","failed"];

package/dist/node/customer-support/crypto-rotation-operations.js

@@ -0,0 +1 @@
+import{defineCommand as a,defineQuery as e}from"../operations/index.js";import{SupportCryptoRotationDocRef as s}from"./crypto-rotation.js";import{SupportCryptoRotationAdvanceInputModel as u,SupportCryptoRotationGetInputModel as c,SupportCryptoRotationListInputModel as d,SupportCryptoRotationListOutputModel as y,SupportCryptoRotationOutputModel as n,SupportCryptoRotationStartInputModel as m}from"./crypto-rotation-schemas.js";import{supportOperationErrors as o}from"./operation-schemas.js";const r=(p,t)=>({key:p,version:"1.0.0",title:t,description:t,goal:t,context:"Tenant and workspace authority are derived from an authenticated SupportOS grant.",domain:"customer-support",owners:["platform.support","platform.security"],tags:["support","crypto","rotation","governed"],stability:"experimental",docId:[s]}),l=(p,t,i)=>a({meta:r(p,t),io:{input:i,output:n,errors:o},policy:{auth:"internal",pii:[]}});export const SupportCryptoRotationStartCommand=l("support.crypto.rotation.start","Start a governed cryptographic rotation",m),SupportCryptoRotationAdvanceCommand=a({meta:{...r("support.crypto.rotation.advance","Advance a governed cryptographic rotation"),context:"Worker-private command. Scope comes from a fenced durable-job lease; no management HTTP transport is exposed.",tags:["support","crypto","rotation","governed","workload-only"]},io:{input:u,output:n,errors:o},policy:{auth:"internal",pii:[]}}),SupportCryptoRotationGetQuery=e({meta:r("support.crypto.rotation.get","Get cryptographic rotation evidence"),io:{input:c,output:n,errors:o},policy:{auth:"internal",pii:[]}}),SupportCryptoRotationListQuery=e({meta:r("support.crypto.rotation.list","List cryptographic rotation evidence"),io:{input:d,output:y,errors:o},policy:{auth:"internal",pii:[]}}),supportCryptoRotationOperations=[SupportCryptoRotationStartCommand,SupportCryptoRotationAdvanceCommand,SupportCryptoRotationGetQuery,SupportCryptoRotationListQuery];

package/dist/node/customer-support/crypto-rotation-schemas.js

@@ -0,0 +1 @@
+import{EnumType as c,ScalarTypeEnum as d,SchemaModel as n}from"@lssm/lib.schema";import{SUPPORT_CRYPTO_ROTATION_STATUSES as R}from"./crypto-rotation.js";const u=new c("SupportCryptoRotationPurpose",["data-protection"]),f=new c("SupportCryptoRotationStatus",[...R]),t=(e=!1)=>({type:d.ID(),isOptional:e}),o=()=>({type:d.Int_unsecure(),isOptional:!1}),p=(e=!1)=>({type:d.String_unsecure(),isOptional:e}),S={planRef:t(),purpose:{type:u,isOptional:!1},dataClassRef:t(),expectedActiveKeyRef:t(),expectedActiveVersion:o(),expectedRegion:t(),policyEvidenceRef:t(),idempotencyKey:t()},I={planRef:t(),expectedRevision:o(),fencingToken:o(),status:{type:f,isOptional:!1},successorVersion:{...o(),isOptional:!0},predecessorVersion:{...o(),isOptional:!0},cursorRef:t(!0),processedCount:o(),failedCount:o(),rotationEvidenceRef:t(!0),evidenceRef:t(),idempotencyKey:t()},a=(e,s)=>{for(const[i,r]of Object.entries(e)){if(!i.endsWith("Ref")&&i!=="idempotencyKey")continue;if(r!==void 0&&(typeof r!=="string"||!r.trim()||r.length>200))s.addIssue({code:"custom",path:[i],message:"reference must be nonblank and bounded"})}};class m extends n{getZod(){return super.getZod().strict().superRefine((e,s)=>{a(e,s);if(!Number.isSafeInteger(e.expectedActiveVersion)||Number(e.expectedActiveVersion)<1)s.addIssue({code:"custom",path:["expectedActiveVersion"],message:"version must be positive"})})}}class l extends n{getZod(){return super.getZod().strict().superRefine((e,s)=>{a(e,s);for(const i of["expectedRevision","processedCount","failedCount"])if(!Number.isSafeInteger(e[i])||Number(e[i])<0)s.addIssue({code:"custom",path:[i],message:"value must be nonnegative"});if(!Number.isSafeInteger(e.fencingToken)||Number(e.fencingToken)<1)s.addIssue({code:"custom",path:["fencingToken"],message:"fencing token must be positive"});for(const i of["successorVersion","predecessorVersion"])if(e[i]!==void 0&&(!Number.isSafeInteger(e[i])||Number(e[i])<1))s.addIssue({code:"custom",path:[i],message:"key version must be positive"});if((e.status==="rotating"||e.status==="reencrypting")&&(!e.successorVersion||!e.predecessorVersion||!e.rotationEvidenceRef))s.addIssue({code:"custom",path:["rotationEvidenceRef"],message:"rotating and re-encrypting require exact key versions and KMS evidence"})})}}export const SupportCryptoRotationStartInputModel=new m({name:"SupportCryptoRotationStartInput",fields:S}),SupportCryptoRotationAdvanceInputModel=new l({name:"SupportCryptoRotationAdvanceInput",fields:I});const b={planRef:t()};class y extends n{getZod(){return super.getZod().strict().superRefine((e,s)=>a(e,s))}}export const SupportCryptoRotationGetInputModel=new y({name:"SupportCryptoRotationGetInput",fields:b});const C={limit:o(),cursor:t(!0),watermark:p(!0)};class g extends n{getZod(){return super.getZod().strict().superRefine((e,s)=>{if(!Number.isSafeInteger(e.limit)||Number(e.limit)<1||Number(e.limit)>100)s.addIssue({code:"custom",path:["limit"],message:"limit must be between 1 and 100"});if(e.watermark!==void 0&&!Number.isFinite(Date.parse(e.watermark)))s.addIssue({code:"custom",path:["watermark"],message:"watermark must be an ISO timestamp"})})}}export const SupportCryptoRotationListInputModel=new g({name:"SupportCryptoRotationListInput",fields:C});const O={planRef:t(),purpose:{type:u,isOptional:!1},dataClassRef:t(),status:{type:f,isOptional:!1},expectedActiveKeyRef:t(),expectedActiveVersion:o(),expectedRegion:t(),successorVersion:{...o(),isOptional:!0},predecessorVersion:{...o(),isOptional:!0},cursorRef:t(!0),processedCount:o(),failedCount:o(),revision:o(),fencingToken:o(),policyEvidenceRef:t(),rotationEvidenceRef:t(!0),latestEvidenceRef:t(),createdAt:p(),updatedAt:p()};export const SupportCryptoRotationOutputModel=new n({name:"SupportCryptoRotationOutput",fields:O});const h={items:{type:SupportCryptoRotationOutputModel,isOptional:!1,isArray:!0},nextCursor:t(!0),watermark:p()};export const SupportCryptoRotationListOutputModel=new n({name:"SupportCryptoRotationListOutput",fields:h});

package/dist/node/customer-support/crypto-rotation.js

@@ -0,0 +1,10 @@
+import{docRef as e}from"../docs/registry.js";export const SUPPORT_CRYPTO_ROTATION_STATUSES=["pending","rotating","reencrypting","validating","completed","rollback-required","failed"],SupportCryptoRotationDocBlock={id:"docs.customer-support.crypto-rotation",title:"SupportOS durable cryptographic rotation",summary:"Fenced key rotation and opaque online re-encryption evidence.",kind:"reference",visibility:"public",route:"/docs/customer-support/crypto-rotation",tags:["supportos","security","kms","rotation","worker"],body:`# SupportOS durable cryptographic rotation
+
+Rotation plans bind a server-derived scope, cryptographic context, active key,
+region, policy evidence, and immutable request digest. A plan never contains raw
+keys, secrets, ciphertext, or protected values. Advancing a plan is revision and
+fencing-token guarded. Online re-encryption jobs carry only opaque plan and
+cursor references and use stable downstream idempotency keys. Production
+qualification requires a managed KMS adapter, restore and rollback drills, and
+digest-bound evidence; fixture receipts never qualify those gates.
+`},SupportCryptoRotationDocRef=e(SupportCryptoRotationDocBlock.id);

package/dist/node/customer-support/csat-input-digest.js

@@ -0,0 +1 @@
+import{sha256Hex as e}from"@lssm/lib.crypto-utils";import{canonicalJsonString as i}from"../rich-reference/canonical-serializer.js";export function supportCsatInputDigest(t,n){const{scope:o,inputDigest:r,grantEvidenceRef:p,...s}=n;return`sha256:${e(i({kind:t,...s}))}`}

package/dist/node/customer-support/csat-invitation-job-schemas.js

@@ -0,0 +1 @@
+import{EnumType as d,ScalarTypeEnum as o}from"@lssm/lib.schema";import{SUPPORT_CSAT_CHANNELS as l}from"./csat.js";import{issue as s,ReportingStrictSchema as c,validIso as m,validRef as f}from"./reporting-schema-primitives.js";const v=new d("SupportCsatInvitationJobChannel",[...l]),y=new d("SupportCsatInvitationIntentStatus",["pending","issued"]),t=()=>({type:o.ID(),isOptional:!1}),I=()=>({type:o.ID(),isOptional:!0}),a=()=>({type:o.NonEmptyString(),isOptional:!1}),r=()=>({type:o.Int_unsecure(),isOptional:!1}),S=()=>({type:o.ID(),isOptional:!1,isArray:!0}),p={invitationRef:t(),surveyRef:t(),caseRef:t(),formDefinitionRef:t(),formRevisionRef:t(),expectedCaseRevision:r(),channel:{type:v,isOptional:!1},locale:a(),policyRef:t(),evidenceRefs:S()},E={intentRef:t(),...p,payloadProtectedRef:t(),status:{type:y,isOptional:!1},revision:r(),issuedEvidenceRef:I()};export const SupportCsatInvitationIntentModel=new c({name:"SupportCsatInvitationIntentV1",fields:E},(e,i)=>{R(e,i);for(const n of["intentRef","payloadProtectedRef","issuedEvidenceRef"])if(e[n]!==void 0&&!f(e[n]))s(i,n,`${n} must be bounded`);if(!u(e.revision))s(i,"revision","revision must be nonnegative");if(e.status==="issued"&&!f(e.issuedEvidenceRef))s(i,"issuedEvidenceRef","issued intents require issuedEvidenceRef");if(e.status==="pending"&&e.issuedEvidenceRef!==void 0)s(i,"issuedEvidenceRef","pending intents cannot carry issuedEvidenceRef")});const b={...p,effectIdempotencyKey:t(),providerEffectRef:t(),sourceIssuedAt:a(),eligibilityEvidenceRef:t(),invitationEvidenceRef:t(),authorizationEvidenceRef:t()};export const SupportCsatInvitationDeliveryReceiptModel=new c({name:"SupportCsatInvitationDeliveryReceiptV1",fields:b},(e,i)=>{R(e,i);for(const n of["effectIdempotencyKey","providerEffectRef","eligibilityEvidenceRef","invitationEvidenceRef","authorizationEvidenceRef"])if(!f(e[n]))s(i,n,`${n} must be bounded`);if(!m(e.sourceIssuedAt))s(i,"sourceIssuedAt","sourceIssuedAt must be an ISO timestamp")});function R(e,i){for(const n of["invitationRef","surveyRef","caseRef","formDefinitionRef","formRevisionRef","policyRef"])if(!f(e[n]))s(i,n,`${n} must be bounded`);if(!u(e.expectedCaseRevision))s(i,"expectedCaseRevision","expectedCaseRevision must be nonnegative");if(!Array.isArray(e.evidenceRefs)||e.evidenceRefs.length<1||e.evidenceRefs.length>32||e.evidenceRefs.some((n)=>!f(n)))s(i,"evidenceRefs","evidenceRefs must be bounded");if(typeof e.locale!=="string"||e.locale.length>64||!/^[A-Za-z]{2,8}(?:-[A-Za-z0-9]{1,8})*$/.test(e.locale))s(i,"locale","locale must be a BCP-47 tag")}function u(e){return Number.isSafeInteger(e)&&Number(e)>=0}

package/dist/node/customer-support/csat-operation-schemas.js

@@ -0,0 +1 @@
+import{EnumType as g,ScalarTypeEnum as o,SchemaModel as n}from"@lssm/lib.schema";import{SUPPORT_CSAT_CHANNELS as R}from"./csat.js";import{validCsatLocale as d}from"./csat-schema-support.js";const c=new g("SupportCsatChannel",[...R]),t=()=>({type:o.ID(),isOptional:!1}),i=()=>({type:o.Int_unsecure(),isOptional:!1}),y={csatRef:t(),caseRef:t(),formDefinitionRef:t(),formResponseRef:t(),formRevisionRef:t(),invitationRef:{type:o.ID(),isOptional:!0},scoreQuestionRef:t(),score:i(),locale:{type:o.NonEmptyString(),isOptional:!1},channel:{type:c,isOptional:!1},expectedCaseRevision:i(),idempotencyKey:t()};class p extends n{getZod(){return super.getZod().strict().superRefine((e,s)=>{for(const r of[e.csatRef,e.caseRef,e.formDefinitionRef,e.formResponseRef,e.formRevisionRef,e.invitationRef,e.scoreQuestionRef,e.idempotencyKey])if(r!==void 0&&(typeof r!=="string"||!r.trim()||r.length>200))s.addIssue({code:"custom",message:"references must be nonblank and bounded"});if(!Number.isSafeInteger(e.score)||Number(e.score)<1||Number(e.score)>5)s.addIssue({code:"custom",path:["score"],message:"score must be 1 through 5"});if(!Number.isSafeInteger(e.expectedCaseRevision)||Number(e.expectedCaseRevision)<0)s.addIssue({code:"custom",path:["expectedCaseRevision"],message:"expectedCaseRevision must be nonnegative"});if(!d(e.locale))s.addIssue({code:"custom",path:["locale"],message:"locale must be a bounded BCP-47 tag"})})}}export const CsatRecordInput=new p({name:"SupportCsatRecordInputV2",fields:y});const b={csatRef:t(),caseRef:t(),formDefinitionRef:t(),formResponseRef:t(),formRevisionRef:t(),invitationRef:{type:o.ID(),isOptional:!0},scoreQuestionRef:t(),score:i(),locale:{type:o.NonEmptyString(),isOptional:!1},channel:{type:c,isOptional:!1},verificationEvidenceRef:t(),submittedAt:{type:o.String_unsecure(),isOptional:!1}};class u extends n{getZod(){return super.getZod().strict().superRefine((e,s)=>{if(!Number.isSafeInteger(e.score)||Number(e.score)<1||Number(e.score)>5)s.addIssue({code:"custom",path:["score"],message:"score must be 1 through 5"});if(!e.submittedAt||!Number.isFinite(Date.parse(e.submittedAt)))s.addIssue({code:"custom",path:["submittedAt"],message:"submittedAt must be an ISO timestamp"});if(!d(e.locale))s.addIssue({code:"custom",path:["locale"],message:"locale must be a bounded BCP-47 tag"})})}}export const CsatProjection=new u({name:"SupportCsatProjectionV2",fields:b});const S={resourceRef:t(),receiptRef:t(),eventRef:t(),projection:{type:CsatProjection,isOptional:!1}};class m extends n{getZod(){return super.getZod().strict()}}export const CsatRecordOutput=new m({name:"SupportCsatRecordOutputV2",fields:S});const h={cursor:{type:o.String_unsecure(),isOptional:!0},limit:i(),watermark:{type:o.String_unsecure(),isOptional:!0},channel:{type:c,isOptional:!0}};class f extends n{getZod(){return super.getZod().strict().superRefine((e,s)=>{if(!Number.isSafeInteger(e.limit)||Number(e.limit)<1||Number(e.limit)>100)s.addIssue({code:"custom",path:["limit"],message:"limit must be 1 through 100"});if(e.watermark&&!Number.isFinite(Date.parse(e.watermark)))s.addIssue({code:"custom",path:["watermark"],message:"watermark must be an ISO timestamp"});if(e.cursor&&e.cursor.length>1024)s.addIssue({code:"custom",path:["cursor"],message:"cursor must be bounded"})})}}export const CsatListInput=new f({name:"SupportCsatListInputV2",fields:h});const O={items:{type:CsatProjection,isOptional:!1,isArray:!0},nextCursor:{type:o.String_unsecure(),isOptional:!0},watermark:{type:o.String_unsecure(),isOptional:!1},count:i(),scoreTotal:i()};class l extends n{getZod(){return super.getZod().strict().superRefine((e,s)=>{const r=Number(e.count),a=Number(e.scoreTotal);if(!Number.isSafeInteger(r)||r<0||!Number.isSafeInteger(a)||a<0||a>r*5)s.addIssue({code:"custom",path:["scoreTotal"],message:"report totals are invalid"});if(!e.watermark||!Number.isFinite(Date.parse(e.watermark)))s.addIssue({code:"custom",path:["watermark"],message:"watermark must be an ISO timestamp"})})}}export const CsatListOutput=new l({name:"SupportCsatListOutputV2",fields:O});

package/dist/node/customer-support/csat-operations.js

@@ -0,0 +1 @@
+import{defineCommand as p,defineQuery as e}from"../operations/index.js";import{SupportCsatDocRef as a}from"./csat.js";import{CsatListInput as i,CsatListOutput as n,CsatRecordInput as u,CsatRecordOutput as c}from"./csat-operation-schemas.js";import{supportOperationErrors as o}from"./operation-schemas.js";const r=(s,t)=>({key:s,version:"2.0.0",title:t,description:`${t} with Forms-verified provenance and immutable evidence.`,goal:t,context:"Tenant and workspace authority come from the authenticated SupportOS grant.",domain:"customer-support",owners:["platform.support","platform.forms"],tags:["support","supportos","csat","forms","tenant-scoped"],stability:"experimental",docId:[a]});export const SupportCsatRecordCommandV2=p({meta:r("support.csat.record","Record support satisfaction"),io:{input:u,output:c,errors:o},policy:{auth:"user",pii:[]}}),SupportCsatListQueryV2=e({meta:r("support.csat.list","List support satisfaction evidence"),io:{input:i,output:n,errors:o},policy:{auth:"user",pii:[]}}),supportCsatOperations=[SupportCsatRecordCommandV2,SupportCsatListQueryV2];

package/dist/node/customer-support/csat-schema-support.js

@@ -0,0 +1 @@
+export function validCsatLocale(n){return Boolean(n&&n.length<=64&&/^[A-Za-z]{2,8}(?:-[A-Za-z0-9]{1,8})*$/.test(n))}

package/dist/node/customer-support/csat-survey-events.js

@@ -0,0 +1 @@
+import{defineEvent as t}from"../events.js";import{SupportCsatSurveyInvitationProjectionModel as o}from"./csat-survey-schemas.js";import{SupportCsatSurveyDocRef as e}from"./csat-surveys.js";export const SupportCsatSurveyInvitationIssuedEvent=t({meta:{key:"support.csat.survey-invitation.issued",version:"1.0.0",title:"Support satisfaction survey invitation issued",description:"Forms-authoritative eligible survey invitation evidence was recorded without identity or content.",domain:"customer-support",owners:["platform.support","platform.forms"],tags:["support","event","csat","forms","privacy","reporting"],stability:"experimental",docId:[e]},payload:o,pii:[]}),supportCsatSurveyEvents=[SupportCsatSurveyInvitationIssuedEvent];

package/dist/node/customer-support/csat-survey-operations.js

@@ -0,0 +1 @@
+import{defineCommand as t}from"../operations/index.js";import{SupportCsatSurveyInvitationInputModel as o,SupportCsatSurveyInvitationOutputModel as r}from"./csat-survey-schemas.js";import{SupportCsatSurveyDocRef as e}from"./csat-surveys.js";import{supportOperationErrors as s}from"./operation-schemas.js";export const SupportCsatSurveyInvitationRecordIssuedCommand=t({meta:{key:"support.csat.survey-invitation.record-issued",version:"1.0.0",title:"Record an issued support satisfaction survey",description:"Verify and record a Forms-issued, eligible, body-free CSAT invitation.",goal:"Record an exact privacy-safe CSAT response denominator",context:"Tenant and workspace authority come from the authenticated SupportOS grant.",domain:"customer-support",owners:["platform.support","platform.forms"],tags:["support","csat","survey","forms","privacy","reporting"],stability:"experimental",docId:[e]},io:{input:o,output:r,errors:s},policy:{auth:"internal",pii:[]}}),supportCsatSurveyOperations=[SupportCsatSurveyInvitationRecordIssuedCommand];

package/dist/node/customer-support/csat-survey-schemas.js

@@ -0,0 +1 @@
+import{EnumType as l,ScalarTypeEnum as s}from"@lssm/lib.schema";import{SUPPORT_CSAT_CHANNELS as m}from"./csat.js";import{issue as t,ReportingStrictSchema as f,validIso as c,validRef as d}from"./reporting-schema-primitives.js";const u=new l("SupportCsatSurveyChannel",[...m]),i=()=>({type:s.ID(),isOptional:!1}),a=()=>({type:s.Int_unsecure(),isOptional:!1}),p=()=>({type:s.ID(),isOptional:!1,isArray:!0}),r=()=>({type:s.NonEmptyString(),isOptional:!1}),y={invitationRef:i(),surveyRef:i(),caseRef:i(),formDefinitionRef:i(),formRevisionRef:i(),channel:{type:u,isOptional:!1},locale:r(),expectedCaseRevision:a(),policyRef:i(),evidenceRefs:p(),idempotencyKey:i()};export const SupportCsatSurveyInvitationInputModel=new f({name:"SupportCsatSurveyInvitationInputV1",fields:y},C);const S={invitationRef:i(),surveyRef:i(),caseRef:i(),formDefinitionRef:i(),formRevisionRef:i(),channel:{type:u,isOptional:!1},locale:r(),policyRef:i(),evidenceRefs:p(),revision:a(),eligibilityEvidenceRef:i(),invitationEvidenceRef:i(),rolloutEvidenceRef:i(),sourceCaseRevision:a(),sourceIssuedAt:r(),issuedAt:r()};export const SupportCsatSurveyInvitationProjectionModel=new f({name:"SupportCsatSurveyInvitationProjectionV1",fields:S},(e,n)=>{R(e,n);v(e.evidenceRefs,n);if(e.revision!==1)t(n,"revision","revision must be one");if(!Number.isSafeInteger(e.sourceCaseRevision)||Number(e.sourceCaseRevision)<0)t(n,"sourceCaseRevision","sourceCaseRevision must be nonnegative");if(!c(e.issuedAt))t(n,"issuedAt","issuedAt must be an ISO timestamp");if(!c(e.sourceIssuedAt))t(n,"sourceIssuedAt","sourceIssuedAt must be an ISO timestamp")});const I={resourceRef:i(),receiptRef:i(),eventRef:i(),projection:{type:SupportCsatSurveyInvitationProjectionModel,isOptional:!1}};export const SupportCsatSurveyInvitationOutputModel=new f({name:"SupportCsatSurveyInvitationOutputV1",fields:I},(e,n)=>{if(e.resourceRef!==e.projection.invitationRef)t(n,"resourceRef","resourceRef must identify the invitation")});function C(e,n){R(e,n);v(e.evidenceRefs,n);if(!Number.isSafeInteger(e.expectedCaseRevision)||Number(e.expectedCaseRevision)<0)t(n,"expectedCaseRevision","expectedCaseRevision must be nonnegative");if(!b(e.locale))t(n,"locale","locale must be a bounded BCP-47 tag")}function R(e,n){for(const o of["invitationRef","surveyRef","caseRef","formDefinitionRef","formRevisionRef","policyRef","idempotencyKey","eligibilityEvidenceRef","invitationEvidenceRef","rolloutEvidenceRef"])if(e[o]!==void 0&&!d(e[o]))t(n,o,`${o} must be bounded`)}function v(e,n){if(!Array.isArray(e)||e.length<1||e.length>32||new Set(e).size!==e.length||e.some((o)=>!d(o)))t(n,"evidenceRefs","evidenceRefs must be unique, nonempty, and bounded")}function b(e){return typeof e==="string"&&e.length<=64&&/^[A-Za-z]{2,8}(?:-[A-Za-z0-9]{1,8})*$/.test(e)}

package/dist/node/customer-support/csat-surveys.js

@@ -0,0 +1,15 @@
+import{docRef as e}from"../docs/registry.js";export const SupportCsatSurveyDocBlock={id:"docs.customer-support.csat-surveys",title:"SupportOS CSAT survey eligibility",summary:"Forms-authoritative, body-free CSAT invitation denominator evidence.",kind:"reference",visibility:"public",route:"/docs/customer-support/csat-surveys",tags:["supportos","csat","forms","privacy","reporting"],body:`# SupportOS CSAT survey eligibility
+
+Forms decides whether a case is eligible and issues the survey invitation.
+SupportOS persists only opaque survey, case, form revision, policy, and evidence
+references plus channel, locale, a database-issued timestamp, and immutable
+replay evidence. It never receives answers, identity, message bodies, or free
+text.
+
+Forms calls the service-only record-issued operation after issuance and retries
+the stable idempotency key until SupportOS returns the immutable receipt.
+
+The exact invitation is the reporting denominator for CSAT response rate.
+Global and workspace rollout, live membership, current case revision, and exact
+Forms evidence are rechecked fail closed.
+`},SupportCsatSurveyDocRef=e(SupportCsatSurveyDocBlock.id);

package/dist/node/customer-support/csat.js

@@ -0,0 +1,12 @@
+import{docRef as e}from"../docs/registry.js";export const SUPPORT_CSAT_CHANNELS=["form","messenger","portal","provider"],SupportCsatDocBlock={id:"docs.customer-support.csat",title:"SupportOS satisfaction evidence",summary:"Forms-verified satisfaction scores with immutable, privacy-safe provenance.",kind:"reference",visibility:"public",route:"/docs/customer-support/csat",tags:["supportos","csat","forms","privacy","reporting"],body:`# SupportOS satisfaction evidence
+
+SupportOS stores the canonical score and opaque Forms definition, response,
+revision, and stable score-question references. It never copies form answers or
+free-text feedback. A server-side Forms verifier must echo the exact case,
+definition, response, revision, score question, score, locale, and channel and
+return immutable evidence before a score is accepted.
+
+Recording is revision-fenced and idempotent. Reports use a fixed watermark and
+keyset pagination. Tenant and workspace authority always comes from the
+authenticated server context, never the request body.
+`},SupportCsatDocRef=e(SupportCsatDocBlock.id);