@lssm/lib.contracts-spec 17.3.2

package/dist/node/customer-support/customer-session-consent-operations.js

@@ -0,0 +1 @@
+import{defineCommand as t,defineQuery as p}from"../operations/index.js";import{SupportCustomerSessionConsentDocRef as n}from"./customer-session-consent.js";import{SupportCustomerConsentListInputModel as i,SupportCustomerConsentListOutputModel as c,SupportCustomerConsentOutputModel as m,SupportCustomerConsentRecordInputModel as a,SupportCustomerSessionCreateInputModel as d,SupportCustomerSessionOutputModel as e,SupportCustomerSessionReadInputModel as C,SupportCustomerSessionRevokeInputModel as S,SupportCustomerSessionRotateInputModel as l,SupportCustomerSessionUpgradeInputModel as y,SupportPublicAccessIssueInputModel as I,SupportPublicAccessOutputModel as M}from"./customer-session-consent-schemas.js";import{supportOperationErrors as o}from"./operation-schemas.js";const s=(u,r)=>({key:u,version:"1.0.0",title:r,description:r,goal:r,context:"Public access resolves server-owned workspace authority; raw session and public tokens are transport secrets and never persistence evidence.",domain:"customer-support",owners:["platform.support","platform.identity"],tags:["support","customer","session","consent","security"],stability:"experimental",docId:[n]});export const SupportPublicAccessIssueCommand=t({meta:s("support.customer-access.issue","Issue customer support public access"),io:{input:I,output:M,errors:o},policy:{auth:"admin",pii:[]}}),SupportCustomerSessionCreateCommand=t({meta:s("support.customer-session.create","Create customer support session"),io:{input:d,output:e,errors:o},policy:{auth:"anonymous",pii:["sessionToken"]}}),SupportCustomerSessionRotateCommand=t({meta:s("support.customer-session.rotate","Rotate customer support session"),io:{input:l,output:e,errors:o},policy:{auth:"anonymous",pii:["sessionToken"]}}),SupportCustomerSessionUpgradeCommand=t({meta:s("support.customer-session.upgrade","Upgrade customer support session"),io:{input:y,output:e,errors:o},policy:{auth:"user",pii:[]}}),SupportCustomerSessionRevokeCommand=t({meta:s("support.customer-session.revoke","Revoke customer support session"),io:{input:S,output:e,errors:o},policy:{auth:"anonymous",pii:[]}}),SupportCustomerConsentRecordCommand=t({meta:s("support.customer-consent.record","Record customer support consent"),io:{input:a,output:m,errors:o},policy:{auth:"anonymous",pii:[]}}),SupportCustomerSessionGetQuery=p({meta:s("support.customer-session.get","Get customer support session"),io:{input:C,output:e,errors:o},policy:{auth:"anonymous",pii:[]}}),SupportCustomerConsentListQuery=p({meta:s("support.customer-consent.list","List customer support consent receipts"),io:{input:i,output:c,errors:o},policy:{auth:"anonymous",pii:[]}}),supportCustomerSessionConsentOperations=[SupportPublicAccessIssueCommand,SupportCustomerSessionCreateCommand,SupportCustomerSessionRotateCommand,SupportCustomerSessionUpgradeCommand,SupportCustomerSessionRevokeCommand,SupportCustomerConsentRecordCommand,SupportCustomerSessionGetQuery,SupportCustomerConsentListQuery];

package/dist/node/customer-support/customer-session-consent-output-schemas.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as u,SchemaModel as o}from"@lssm/lib.schema";import{Action as l,Assurance as c,id as t,ids as a,integer as s,Purpose as n,State as d,StrictSessionSchema as i,strings as r,text as e}from"./customer-session-schema-support.js";const p={sessionRef:t(),state:{type:d,isOptional:!1},assurance:{type:c,isOptional:!1},locale:e(),tokenVersion:s(),consentedPurposes:{type:n,isOptional:!1,isArray:!0},createdAt:e(),lastSeenAt:e(),expiresAt:e(),upgradedAt:e(!0),revokedAt:e(!0),revision:s()};export const SupportCustomerSessionOutputModel=new o({name:"SupportCustomerSessionOutputV1",fields:{...p,receiptRef:t(!0),sessionToken:e(!0)}}),SupportCustomerSessionEventModel=new i({name:"SupportCustomerSessionEventV1",fields:{...p,receiptRef:t()}}),SupportCustomerConsentOutputModel=new i({name:"SupportCustomerConsentOutputV1",fields:{receiptRef:t(),sessionRef:t(),purpose:{type:n,isOptional:!1},action:{type:l,isOptional:!1},policyRef:t(),noticeDigest:e(),locale:e(),occurredAt:e(),evidenceRefs:a(),resultingSessionRevision:s()}}),SupportCustomerConsentListOutputModel=new o({name:"SupportCustomerConsentListOutputV1",fields:{items:{type:u.JSONObject(),isOptional:!1},nextCursor:e(!0),watermark:e()}}),SupportPublicAccessOutputModel=new o({name:"SupportPublicAccessOutputV1",fields:{accessRef:t(),publicToken:e(),allowedOrigins:r(),defaultLocale:e(),expiresAt:e(),revision:s(),receiptRef:t()}}),SupportPublicAccessEventModel=new i({name:"SupportPublicAccessEventV1",fields:{accessRef:t(),allowedOrigins:r(),defaultLocale:e(),expiresAt:e(),revision:s(),receiptRef:t()}});

package/dist/node/customer-support/customer-session-consent-schemas.js

@@ -0,0 +1 @@
+import{Action as n,id as e,ids as p,integer as s,Purpose as i,StrictSessionSchema as o,strings as r,text as t}from"./customer-session-schema-support.js";const c={locale:t(),expectedRevision:s(),idempotencyKey:e()},d={sessionRef:e(),expectedRevision:s(),idempotencyKey:e()},l={receiptRef:e(),sessionRef:e(),purpose:{type:i,isOptional:!1},action:{type:n,isOptional:!1},policyRef:e(),noticeDigest:t(),locale:t(),evidenceRefs:p(),expectedRevision:s(),idempotencyKey:e()},u={sessionRef:e(),assuranceRef:e(),grantEvidenceRef:e(),expectedRevision:s(),idempotencyKey:e()},a={sessionRef:e(),reasonRef:e(),expectedRevision:s(),idempotencyKey:e()},m={accessRef:e(),allowedOrigins:r(),defaultLocale:t(),expiresAt:t(),expectedRevision:s(),idempotencyKey:e()};export const SupportCustomerSessionCreateInputModel=new o({name:"SupportCustomerSessionCreateInputV1",fields:c}),SupportCustomerSessionRotateInputModel=new o({name:"SupportCustomerSessionRotateInputV1",fields:d}),SupportCustomerConsentRecordInputModel=new o({name:"SupportCustomerConsentRecordInputV1",fields:l}),SupportCustomerSessionUpgradeInputModel=new o({name:"SupportCustomerSessionUpgradeInputV1",fields:u}),SupportCustomerSessionRevokeInputModel=new o({name:"SupportCustomerSessionRevokeInputV1",fields:a}),SupportPublicAccessIssueInputModel=new o({name:"SupportPublicAccessIssueInputV1",fields:m});const S={sessionRef:e()};export const SupportCustomerSessionReadInputModel=new o({name:"SupportCustomerSessionReadInputV1",fields:S});const f={sessionRef:e(),cursor:t(!0),limit:s(),watermark:t(!0)};export const SupportCustomerConsentListInputModel=new o({name:"SupportCustomerConsentListInputV1",fields:f});export*from"./customer-session-consent-output-schemas.js";

package/dist/node/customer-support/customer-session-consent.js

@@ -0,0 +1,14 @@
+import{docRef as e}from"../docs/registry.js";export const SUPPORT_CUSTOMER_SESSION_STATES=["active","upgraded","revoked","expired"],SUPPORT_CUSTOMER_SESSION_ASSURANCES=["anonymous","authenticated"],SUPPORT_CUSTOMER_CONSENT_ACTIONS=["granted","withdrawn"],SUPPORT_CUSTOMER_CONSENT_PURPOSES=["support-service","ai-assistance","diagnostics","attachments","cross-product-profile"],SupportCustomerSessionConsentDocBlock={id:"docs.customer-support.customer-session-consent",title:"SupportOS customer sessions and consent",summary:"Short-lived public sessions, immutable consent receipts, abuse minimization, and authenticated upgrade.",kind:"reference",visibility:"public",route:"/docs/customer-support/customer-session-consent",tags:["supportos","customer","session","consent","security"],body:`# Customer sessions and consent
+
+Hosts issue opaque public-access tokens from an authenticated workspace context.
+Public clients exchange the token for a short-lived session and rotate it with an
+exact revision fence. Authorities persist only scoped token hashes and rotating
+abuse identifiers; raw tokens, IP addresses, messages, answers, and contact data
+never enter session evidence.
+
+Consent is append-only, purpose-specific, localized, and bound to the exact
+policy reference and notice digest shown to the customer. Withdrawal supersedes
+an earlier grant without deleting its audit receipt. Authenticated upgrade uses
+the server-derived AuthOS principal and assurance evidence; public request bodies
+cannot choose tenant, workspace, principal, or capabilities.
+`},SupportCustomerSessionConsentDocRef=e(SupportCustomerSessionConsentDocBlock.id);

package/dist/node/customer-support/customer-session-schema-support.js

@@ -0,0 +1 @@
+import{EnumType as o,ScalarTypeEnum as i,SchemaModel as c}from"@lssm/lib.schema";import{SUPPORT_CUSTOMER_CONSENT_ACTIONS as d,SUPPORT_CUSTOMER_CONSENT_PURPOSES as p,SUPPORT_CUSTOMER_SESSION_ASSURANCES as a,SUPPORT_CUSTOMER_SESSION_STATES as g}from"./customer-session-consent.js";export const State=new o("SupportCustomerSessionState",[...g]),Assurance=new o("SupportCustomerSessionAssurance",[...a]),Purpose=new o("SupportCustomerConsentPurpose",[...p]),Action=new o("SupportCustomerConsentAction",[...d]),id=(e=!1)=>({type:i.ID(),isOptional:e}),text=(e=!1)=>({type:i.String_unsecure(),isOptional:e}),integer=()=>({type:i.Int_unsecure(),isOptional:!1}),ids=()=>({type:i.ID(),isOptional:!1,isArray:!0}),strings=()=>({type:i.String_unsecure(),isOptional:!1,isArray:!0});export class StrictSessionSchema extends c{getZod(){return super.getZod().strict().superRefine((e,n)=>f(e,n))}}function f(e,n){for(const[t,r]of Object.entries(e))if((t.endsWith("Ref")||t==="idempotencyKey")&&(typeof r!=="string"||!r.trim()||r.length>200))s(n,t,"reference must be nonblank and bounded");if("expectedRevision"in e&&(!Number.isSafeInteger(e.expectedRevision)||Number(e.expectedRevision)<0))s(n,"expectedRevision","revision must be nonnegative");for(const t of["revision","tokenVersion","resultingSessionRevision"])if(t in e&&(!Number.isSafeInteger(e[t])||Number(e[t])<1))s(n,t,"version must be a positive safe integer");for(const t of["createdAt","lastSeenAt","expiresAt","upgradedAt","revokedAt","occurredAt"])if(e[t]!==void 0&&(typeof e[t]!=="string"||!Number.isFinite(Date.parse(String(e[t])))))s(n,t,"timestamp must be ISO-compatible");if("locale"in e&&!m(e.locale))s(n,"locale","locale must be BCP-47");if("noticeDigest"in e&&(typeof e.noticeDigest!=="string"||!/^[a-f0-9]{64}$/i.test(e.noticeDigest)))s(n,"noticeDigest","notice digest must be SHA-256 hex");if("evidenceRefs"in e&&(!Array.isArray(e.evidenceRefs)||e.evidenceRefs.length>20||e.evidenceRefs.some((t)=>typeof t!=="string"||!t.trim()||t.length>200)))s(n,"evidenceRefs","evidence references must be bounded");if("allowedOrigins"in e&&(!Array.isArray(e.allowedOrigins)||e.allowedOrigins.length<1||e.allowedOrigins.length>20||new Set(e.allowedOrigins).size!==e.allowedOrigins.length||e.allowedOrigins.some((t)=>!S(t))))s(n,"allowedOrigins","origins must be distinct root HTTPS origins")}function s(e,n,t){e.addIssue({code:"custom",path:[n],message:t})}function S(e){if(typeof e!=="string")return!1;try{const n=new URL(e);return n.protocol==="https:"&&!n.username&&!n.password&&n.pathname==="/"&&!n.search&&!n.hash}catch{return!1}}function m(e){if(typeof e!=="string"||e.length<2||e.length>64)return!1;try{return Intl.getCanonicalLocales(e).length===1}catch{return!1}}

package/dist/node/customer-support/customer-support.feature.js

@@ -0,0 +1,3 @@
+import{defineFeature as t}from"../features/index.js";import{SupportAttachmentSafetyDocBlock as r}from"./attachment-safety.js";import{SupportCapabilityMatrixDocBlock as e}from"./capability-matrix.js";import{SupportCryptoRotationDocBlock as p}from"./crypto-rotation.js";import{SupportCustomerSessionConsentDocBlock as i}from"./customer-session-consent.js";import{SupportDataLifecycleDocBlock as s}from"./data-lifecycle.js";import{supportEvents as c}from"./events.js";import{SupportExportDocBlock as n}from"./exports.js";import{SupportNotificationDocBlock as m}from"./notifications.js";import{supportOperations as a}from"./operations.js";import{SupportReportingDocBlock as u}from"./reporting-doc.js";import{SupportSloIncidentDocBlock as d}from"./slo-incident-doc.js";export const CustomerSupportV1DocBlock={id:"customer-support-v1",title:"Customer SupportOS v1",summary:"Provider-neutral cases, queues, SLAs, AI governance, provider cutover, messenger, portal, and help-center contracts.",kind:"reference",visibility:"public",route:"/docs/platform/customer-support-v1",tags:["support","supportos","intercom","communication-os"],body:`# Customer SupportOS v1
+
+SupportOS owns cases and service operations. CommunicationOS owns messages and channels. Provider credentials are refs, authority is server-derived, and consequential actions remain Connect-governed.`},CustomerSupportV1Feature=t({meta:{key:"customer-support-v1",version:"1.0.0",title:"Customer SupportOS v1",description:"AI-native customer support and service operations.",domain:"customer-support",owners:["platform.support"],tags:["support","supportos","ai-native"],stability:"experimental"},operations:a.map((o)=>({key:o.meta.key,version:o.meta.version})),events:c.map((o)=>({key:o.meta.key,version:o.meta.version})),docs:[CustomerSupportV1DocBlock.id,e.id,r.id,m.id,p.id,i.id,s.id,n.id,u.id,d.id]});

package/dist/node/customer-support/data-lifecycle-events.js

@@ -0,0 +1 @@
+import{defineEvent as t}from"../events.js";import{SupportDataLifecycleDocRef as a}from"./data-lifecycle.js";import{SupportErasureProjectionModel as p,SupportLegalHoldProjectionModel as d,SupportRetentionPolicyModel as i}from"./data-lifecycle-output-schemas.js";const e=(r,o)=>({key:r,version:"1.0.0",title:o,description:o,domain:"customer-support",owners:["platform.support","platform.workflow","platform.connect"],tags:["support","event","data-lifecycle","privacy"],stability:"experimental",docId:[a]});export const SupportRetentionPolicyUpdatedEvent=t({meta:e("support.retention.policy.updated","Support retention policy updated"),payload:i,pii:[]}),SupportLegalHoldUpdatedEvent=t({meta:e("support.legal-hold.updated","Support legal hold updated"),payload:d,pii:[]}),SupportErasureUpdatedEvent=t({meta:e("support.erasure.updated","Support erasure lifecycle updated"),payload:p,pii:[]}),SupportErasureCompletedEvent=t({meta:e("support.erasure.completed","Support erasure completed"),payload:p,pii:[]}),supportDataLifecycleEvents=[SupportRetentionPolicyUpdatedEvent,SupportLegalHoldUpdatedEvent,SupportErasureUpdatedEvent,SupportErasureCompletedEvent];

package/dist/node/customer-support/data-lifecycle-input-schemas.js

@@ -0,0 +1 @@
+import{SUPPORT_RETENTION_MAX_CLOSED_CASE_DAYS as c,SUPPORT_RETENTION_MAX_EVIDENCE_DAYS as r,SUPPORT_RETENTION_MAX_TEMPORARY_STATE_DAYS as m}from"./data-lifecycle.js";import{HoldTargetKind as R,id as t,integer as i,StrictSemanticSchema as n}from"./data-lifecycle-schema-primitives.js";import{validateRefs as d,validRef as u}from"./data-lifecycle-schema-validation.js";const f={policyRef:t(),closedCaseRetentionDays:i(),evidenceRetentionDays:i(),temporaryStateRetentionDays:i(),expectedRevision:i(),decisionRef:t(),idempotencyKey:t()};export const SupportRetentionPolicyMutationModel=new n({name:"SupportRetentionPolicyMutationV1",fields:f},(e,o)=>{d(e,["policyRef","decisionRef","idempotencyKey"],o);for(const[s,p]of[["closedCaseRetentionDays",c],["evidenceRetentionDays",r],["temporaryStateRetentionDays",m]]){const a=e[s];if(!Number.isSafeInteger(a)||Number(a)<1||Number(a)>p)o.addIssue({code:"custom",path:[s],message:`${s} must be 1 through ${p}`})}if(!Number.isSafeInteger(e.expectedRevision)||Number(e.expectedRevision)<0)o.addIssue({code:"custom",path:["expectedRevision"],message:"expectedRevision must be nonnegative"})});const l={holdRef:t(),caseRef:t(),targetKind:{type:R,isOptional:!1},reasonRef:t(),policyRef:t(),expectedCaseRevision:i(),decisionRef:t(),idempotencyKey:t()};export const SupportLegalHoldCreateInputModel=new n({name:"SupportLegalHoldCreateInputV1",fields:l},(e,o)=>{d(e,["holdRef","caseRef","reasonRef","policyRef","decisionRef","idempotencyKey"],o);if(!Number.isSafeInteger(e.expectedCaseRevision)||Number(e.expectedCaseRevision)<0)o.addIssue({code:"custom",path:["expectedCaseRevision"],message:"expectedCaseRevision must be nonnegative"})});const y={holdRef:t(),expectedRevision:i(),decisionRef:t(),idempotencyKey:t()};export const SupportLegalHoldReleaseInputModel=new n({name:"SupportLegalHoldReleaseInputV1",fields:y},(e,o)=>{d(e,["holdRef","decisionRef","idempotencyKey"],o);if(!Number.isSafeInteger(e.expectedRevision)||Number(e.expectedRevision)<1)o.addIssue({code:"custom",path:["expectedRevision"],message:"expectedRevision must be positive"})});const S={caseRef:t(!0),cursor:t(!0),limit:i(),watermark:t(!0)};export const SupportLegalHoldListInputModel=new n({name:"SupportLegalHoldListInputV1",fields:S},(e,o)=>{for(const s of["caseRef","cursor","watermark"])if(e[s]!==void 0&&!u(e[s]))o.addIssue({code:"custom",path:[s],message:`${s} must be bounded`});if(!Number.isSafeInteger(e.limit)||Number(e.limit)<1||Number(e.limit)>100)o.addIssue({code:"custom",path:["limit"],message:"limit must be 1 through 100"})});const g={erasureRef:t(),caseRef:t(),reasonRef:t(),policyRef:t(),expectedCaseRevision:i(),decisionRef:t(),idempotencyKey:t()};export const SupportErasureRequestInputModel=new n({name:"SupportErasureRequestInputV1",fields:g},(e,o)=>{d(e,["erasureRef","caseRef","reasonRef","policyRef","decisionRef","idempotencyKey"],o);if(!Number.isSafeInteger(e.expectedCaseRevision)||Number(e.expectedCaseRevision)<0)o.addIssue({code:"custom",path:["expectedCaseRevision"],message:"expectedCaseRevision must be nonnegative"})});const I={resourceRef:t()};export const SupportDataLifecycleResourceInputModel=new n({name:"SupportDataLifecycleResourceInputV1",fields:I},(e,o)=>d(e,["resourceRef"],o));const h={};export const SupportDataLifecycleEmptyInputModel=new n({name:"SupportDataLifecycleEmptyInputV1",fields:h},()=>{return});

package/dist/node/customer-support/data-lifecycle-operations.js

@@ -0,0 +1 @@
+import{defineCommand as o,defineQuery as p}from"../operations/index.js";import{SupportDataLifecycleDocRef as a}from"./data-lifecycle.js";import{SupportDataLifecycleEmptyInputModel as i,SupportDataLifecycleResourceInputModel as n,SupportErasureRequestInputModel as l,SupportLegalHoldCreateInputModel as c,SupportLegalHoldListInputModel as d,SupportLegalHoldReleaseInputModel as m,SupportRetentionPolicyMutationModel as y}from"./data-lifecycle-input-schemas.js";import{SupportErasureOutputModel as g,SupportErasureProjectionModel as S,SupportLegalHoldListOutputModel as f,SupportLegalHoldOutputModel as u,SupportRetentionPolicyOutputModel as h,SupportRetentionPolicyReadOutputModel as L}from"./data-lifecycle-output-schemas.js";import{supportOperationErrors as t}from"./operation-schemas.js";const e=(s,r)=>({key:s,version:"1.0.0",title:r,description:`${r} with authenticated scope, governance, fencing, and immutable evidence.`,goal:r,context:"Tenant, workspace, actor, subject closure, timestamps, and evidence authority are server-derived.",domain:"customer-support",owners:["platform.support","platform.workflow","platform.connect"],tags:["support","supportos","retention","legal-hold","erasure"],stability:"experimental",docId:[a]});export const SupportRetentionPolicyUpsertCommand=o({meta:e("support.retention.policy.upsert","Publish support retention policy"),io:{input:y,output:h,errors:t},policy:{auth:"user",pii:[]}}),SupportRetentionPolicyGetQuery=p({meta:e("support.retention.policy.get","Get support retention policy"),io:{input:i,output:L,errors:t},policy:{auth:"user",pii:[]}}),SupportLegalHoldCreateCommand=o({meta:e("support.legal-hold.create","Create support legal hold"),io:{input:c,output:u,errors:t},policy:{auth:"user",pii:[]}}),SupportLegalHoldReleaseCommand=o({meta:e("support.legal-hold.release","Release support legal hold"),io:{input:m,output:u,errors:t},policy:{auth:"user",pii:[]}}),SupportLegalHoldListQuery=p({meta:e("support.legal-hold.list","List support legal holds"),io:{input:d,output:f,errors:t},policy:{auth:"user",pii:[]}}),SupportErasureRequestCommand=o({meta:e("support.erasure.request","Request governed support subject erasure"),io:{input:l,output:g,errors:t},policy:{auth:"user",pii:["caseRef"]}}),SupportErasureGetQuery=p({meta:e("support.erasure.get","Get governed support erasure status"),io:{input:n,output:S,errors:t},policy:{auth:"user",pii:[]}}),supportDataLifecycleOperations=[SupportRetentionPolicyUpsertCommand,SupportRetentionPolicyGetQuery,SupportLegalHoldCreateCommand,SupportLegalHoldReleaseCommand,SupportLegalHoldListQuery,SupportErasureRequestCommand,SupportErasureGetQuery];

package/dist/node/customer-support/data-lifecycle-output-schemas.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as m}from"@lssm/lib.schema";import{SUPPORT_ERASURE_OWNERS as S,SUPPORT_RETENTION_MAX_CLOSED_CASE_DAYS as y,SUPPORT_RETENTION_MAX_EVIDENCE_DAYS as A,SUPPORT_RETENTION_MAX_TEMPORARY_STATE_DAYS as O}from"./data-lifecycle.js";import{ErasureOwner as E,ErasureOwnerStatus as h,ErasureStatus as w,HoldProjectionTargetKind as g,HoldStatus as M,id as o,integer as l,StrictSchema as p,StrictSemanticSchema as c,text as d}from"./data-lifecycle-schema-primitives.js";import{issue as i,validateRefs as u,validateRevision as f,validIso as a,validRef as R}from"./data-lifecycle-schema-validation.js";const P={policyRef:o(),closedCaseRetentionDays:l(),evidenceRetentionDays:l(),temporaryStateRetentionDays:l(),revision:l(),updatedAt:d()};export const SupportRetentionPolicyModel=new c({name:"SupportRetentionPolicyV1",fields:P},(e,t)=>{u(e,["policyRef"],t);for(const[r,n]of[["closedCaseRetentionDays",y],["evidenceRetentionDays",A],["temporaryStateRetentionDays",O]])if(!Number.isSafeInteger(e[r])||Number(e[r])<1||Number(e[r])>n)i(t,r,`${r} must be 1 through ${n}`);f(e.revision,t);if(!a(e.updatedAt))i(t,"updatedAt","updatedAt must be canonical ISO time")});const b={holdRef:o(),caseRef:o(),targetKind:{type:g,isOptional:!1},targetDigestRef:o(),reasonRef:o(),policyRef:o(),status:{type:M,isOptional:!1},revision:l(),createdAt:d(),releasedAt:d(!0)};export const SupportLegalHoldProjectionModel=new c({name:"SupportLegalHoldProjectionV1",fields:b},(e,t)=>{u(e,["holdRef","caseRef","targetDigestRef","reasonRef","policyRef"],t);f(e.revision,t);if(!a(e.createdAt))i(t,"createdAt","createdAt must be canonical ISO time");if(e.releasedAt!==void 0&&!a(e.releasedAt))i(t,"releasedAt","releasedAt must be canonical ISO time");if(e.status==="released"&&e.releasedAt===void 0)i(t,"releasedAt","released holds require releasedAt")});const F={owner:{type:E,isOptional:!1},status:{type:h,isOptional:!1},evidenceRef:o(!0),occurredAt:d(!0)};export const SupportErasureOwnerEvidenceModel=new c({name:"SupportErasureOwnerEvidenceV1",fields:F},(e,t)=>{if(e.evidenceRef!==void 0&&!R(e.evidenceRef))i(t,"evidenceRef","evidenceRef is invalid");if(e.occurredAt!==void 0&&!a(e.occurredAt))i(t,"occurredAt","occurredAt must be canonical ISO time");if(e.status!=="pending"&&(!R(e.evidenceRef)||!a(e.occurredAt)))i(t,"evidenceRef","terminal owner evidence requires evidence and time")});const D={erasureRef:o(),caseRef:o(),subjectDigestRef:o(),reasonRef:o(),policyRef:o(),status:{type:w,isOptional:!1},blockedHoldRefs:{type:m.ID(),isOptional:!1,isArray:!0},ownerEvidence:{type:SupportErasureOwnerEvidenceModel,isOptional:!1,isArray:!0},revision:l(),requestedAt:d(),updatedAt:d(),completedAt:d(!0)};export const SupportErasureProjectionModel=new c({name:"SupportErasureProjectionV1",fields:D},(e,t)=>{u(e,["erasureRef","caseRef","subjectDigestRef","reasonRef","policyRef"],t);f(e.revision,t);for(const s of["requestedAt","updatedAt"])if(!a(e[s]))i(t,s,`${s} must be canonical ISO time`);if(e.completedAt!==void 0&&!a(e.completedAt))i(t,"completedAt","completedAt must be canonical ISO time");if(e.status==="completed"&&e.completedAt===void 0)i(t,"completedAt","completed erasure requires completedAt");const r=e.blockedHoldRefs;if(!Array.isArray(r)||r.length>100||r.some((s)=>!R(s))||new Set(r).size!==r.length)i(t,"blockedHoldRefs","blockedHoldRefs are invalid");const n=e.ownerEvidence;if(!Array.isArray(n)||n.length>S.length||new Set(n.map((s)=>typeof s==="object"&&s!==null&&("owner"in s)?s.owner:void 0)).size!==n.length)i(t,"ownerEvidence","ownerEvidence is invalid")});const _={resourceRef:o(),receiptRef:o(),policy:{type:SupportRetentionPolicyModel,isOptional:!1}},T={policy:{type:SupportRetentionPolicyModel,isOptional:!0}},I={resourceRef:o(),receiptRef:o(),hold:{type:SupportLegalHoldProjectionModel,isOptional:!1}},H={items:{type:SupportLegalHoldProjectionModel,isOptional:!1,isArray:!0},nextCursor:o(!0),watermark:o()},L={resourceRef:o(),receiptRef:o(),erasure:{type:SupportErasureProjectionModel,isOptional:!1}};export const SupportRetentionPolicyOutputModel=new p({name:"SupportRetentionPolicyOutputV1",fields:_}),SupportRetentionPolicyReadOutputModel=new p({name:"SupportRetentionPolicyReadOutputV1",fields:T}),SupportLegalHoldOutputModel=new p({name:"SupportLegalHoldOutputV1",fields:I}),SupportLegalHoldListOutputModel=new p({name:"SupportLegalHoldListOutputV1",fields:H}),SupportErasureOutputModel=new p({name:"SupportErasureOutputV1",fields:L});

package/dist/node/customer-support/data-lifecycle-schema-primitives.js

@@ -0,0 +1 @@
+import{EnumType as t,ScalarTypeEnum as r,SchemaModel as a}from"@lssm/lib.schema";import{SUPPORT_ERASURE_OWNER_STATUSES as d,SUPPORT_ERASURE_OWNERS as p,SUPPORT_ERASURE_STATUSES as u,SUPPORT_LEGAL_HOLD_TARGET_KINDS as n}from"./data-lifecycle.js";export const ErasureOwner=new t("SupportErasureOwner",[...p]),ErasureOwnerStatus=new t("SupportErasureOwnerStatus",[...d]),ErasureStatus=new t("SupportErasureStatus",[...u]),HoldTargetKind=new t("SupportLegalHoldTargetKind",[...n]),HoldProjectionTargetKind=new t("SupportLegalHoldProjectionTargetKind",[...n]),HoldStatus=new t("SupportLegalHoldStatus",["active","released"]),id=(e=!1)=>({type:r.ID(),isOptional:e}),integer=()=>({type:r.Int_unsecure(),isOptional:!1}),text=(e=!1)=>({type:r.String_unsecure(),isOptional:e});export class StrictSchema extends a{getZod(){return super.getZod().strict()}}export class StrictSemanticSchema extends StrictSchema{validate;constructor(e,o){super(e);this.validate=o}getZod(){return super.getZod().superRefine((e,o)=>this.validate(e,{addIssue:(s)=>o.addIssue(s)}))}}

package/dist/node/customer-support/data-lifecycle-schema-validation.js

@@ -0,0 +1 @@
+export function issue(n,t,i){n.addIssue({code:"custom",path:[t],message:i})}export function validRef(n){return typeof n==="string"&&Boolean(n.trim())&&n.length<=200}export function validIso(n){if(typeof n!=="string"||n.length>64)return!1;const t=Date.parse(n);return Number.isFinite(t)&&new Date(t).toISOString()===n}export function validateRefs(n,t,i){for(const e of t)if(!validRef(n[e]))issue(i,e,`${e} is invalid`)}export function validateRevision(n,t){if(!Number.isSafeInteger(n)||Number(n)<1)issue(t,"revision","revision must be positive")}

package/dist/node/customer-support/data-lifecycle.js

@@ -0,0 +1,5 @@
+import{docRef as e}from"../docs/registry.js";export const SUPPORT_ERASURE_OWNERS=["supportos","communicationos","forms","knowledge","companyos"],SUPPORT_ERASURE_STATUSES=["pending-review","blocked-hold","scheduled","executing","verifying","completed","failed"],SUPPORT_ERASURE_OWNER_STATUSES=["pending","completed","not-found","blocked","failed"],SUPPORT_LEGAL_HOLD_TARGET_KINDS=["subject","case"],SUPPORT_RETENTION_MAX_CLOSED_CASE_DAYS=730,SUPPORT_RETENTION_MAX_EVIDENCE_DAYS=730,SUPPORT_RETENTION_MAX_TEMPORARY_STATE_DAYS=90,SupportDataLifecycleDocBlock={id:"docs.customer-support.data-lifecycle",title:"SupportOS governed data lifecycle",summary:"Retention, legal holds, and cross-owner subject erasure.",kind:"reference",visibility:"public",route:"/docs/customer-support/data-lifecycle",tags:["supportos","retention","legal-hold","erasure","privacy"],body:`# SupportOS governed data lifecycle
+
+Retention policy, legal holds, and erasure requests derive scope from authenticated server authority. Erasure and subject-level holds begin from a revision-fenced case; the server derives the requester closure and never accepts an arbitrary subject target. Subject references are protected immediately; portable projections expose only a scoped digest. Active holds fail closed and remain visible.
+
+Erasure is durable, idempotent, and evidence-bound across SupportOS, CommunicationOS, Forms, Knowledge, and CompanyOS. Each owner remains authoritative for its data. Completion requires terminal evidence from every owner, removal of the protected orchestration subject, and an immutable tombstone that prevents provider resurrection.`},SupportDataLifecycleDocRef=e(SupportDataLifecycleDocBlock.id);

package/dist/node/customer-support/errors.js

@@ -0,0 +1,6 @@
+import{docRef as e}from"../docs/registry.js";export const SUPPORT_AUTHORITY_ERROR_CODES=["SCOPE_DENIED","REVISION_CONFLICT","IDEMPOTENCY_CONFLICT","POLICY_DENIED","DEPENDENCY_DEGRADED","NOT_FOUND","VALIDATION_FAILED","FEATURE_DISABLED"],SupportAuthorityErrorsDocBlock={id:"docs.customer-support.authority-errors",title:"SupportOS authority errors",summary:"Stable failures shared by SupportOS authority implementations.",kind:"reference",visibility:"public",route:"/docs/customer-support/authority-errors",tags:["supportos","authority","errors"],body:`# SupportOS authority errors
+
+Authority adapters throw \`SupportAuthorityError\` with a stable code. API
+transports map the code to their protocol without inspecting human-readable
+messages. Unknown adapter failures remain dependency failures and fail closed.
+`};export class SupportAuthorityError extends Error{code;docId=e(SupportAuthorityErrorsDocBlock.id);constructor(r,o,t){super(o,t);this.code=r;this.name="SupportAuthorityError"}}export function isSupportAuthorityError(r){return r instanceof SupportAuthorityError}

package/dist/node/customer-support/event-validation.js

@@ -0,0 +1 @@
+const o={"support.case.transitioned":["status"],"support.assignment.changed":["queueRef","assigneeRef","assignmentMode","decisionRef","routingDecisionRef"],"support.sla.breached":[],"support.ai.proposed":["proposalRef","decisionRef"],"support.ai.executed":["operationRef","receiptRef"],"support.case.merged":["relationRef","relatedCaseRef","relationKind"],"support.case.split":["relationRef","relatedCaseRef","relationKind"],"support.case.linked":["relationRef","relatedCaseRef","relationKind"],"support.case.snoozed":["snoozedUntil","resumeStatus"],"support.case.unsnoozed":["resumeStatus"],"support.case.archived":[]};export function bindSupportCaseEvent(e){if(e.event.actorRef!==e.actorRef)throw Error("Support case event actor does not match authenticated scope.");const r=o[e.event.type];if(!r)throw Error("Unsupported SupportOS case event type.");const t=e.event.safeData??{};for(const s of Object.keys(t))if(!r.includes(s))throw Error(`Unsupported safe SupportOS event field ${s}.`);if(e.event.type==="support.case.transitioned"&&typeof t.status!=="string")throw Error("Support case transition status is required.");if(e.event.type==="support.assignment.changed"){if(typeof t.queueRef!=="string")throw Error("Support case assignment queue is required.");if(t.assigneeRef!==null&&typeof t.assigneeRef!=="string")throw Error("Support case assignment assignee is invalid.");if(typeof t.assignmentMode!=="string")throw Error("Support case assignment mode is required.")}if(e.event.type.startsWith("support.case.")&&r.includes("relationRef")){for(const s of r)if(typeof t[s]!=="string")throw Error(`Support case relation field ${s} is required.`);if(e.event.type==="support.case.snoozed"){if(typeof t.snoozedUntil!=="string"||!Number.isFinite(Date.parse(t.snoozedUntil)))throw Error("Support case snooze state is invalid.")}if(e.event.type==="support.case.unsnoozed"&&typeof t.resumeStatus!=="string")throw Error("Support case resume status is required.")}return{...e.event,actorRef:e.actorRef,occurredAt:e.occurredAt,safeData:structuredClone(t)}}export function supportTransitionStatus(e){return e.type==="support.case.transitioned"&&typeof e.safeData?.status==="string"?e.safeData.status:void 0}

package/dist/node/customer-support/events.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as p,SchemaModel as u}from"@lssm/lib.schema";import{defineEvent as t}from"../events.js";import{supportAiOutcomeEvaluationEvents as c}from"./ai-outcome-evaluation-events.js";import{supportAiOutcomeLearningEvents as m}from"./ai-outcome-learning-events.js";import{SupportAttachmentSafetyProjectionModel as l}from"./attachment-safety-schemas.js";import{supportBillingEntitlementEvents as y}from"./billing-entitlement-events.js";import{SupportCaseUnsnoozedEventPayloadModel as f}from"./case-lifecycle-event-schemas.js";import{supportCompanyActionEvents as v}from"./company-action-events.js";import{supportCryptoRotationDrillEvents as g}from"./crypto-rotation-drill-events.js";import{SupportCryptoRotationOutputModel as S}from"./crypto-rotation-schemas.js";import{CsatProjection as b}from"./csat-operation-schemas.js";import{supportCsatSurveyEvents as E}from"./csat-survey-events.js";import{SupportCustomerConsentOutputModel as h,SupportCustomerSessionEventModel as k,SupportPublicAccessEventModel as w}from"./customer-session-consent-schemas.js";import{supportDataLifecycleEvents as x}from"./data-lifecycle-events.js";import{supportExportEvents as P}from"./export-events.js";import{SupportIdentityCandidateProjectionModel as C,SupportIdentityMergeProjectionModel as R}from"./identity-resolution-schemas.js";import{InternalNoteCreatedEventPayload as M,InternalNoteReconciliationUpdatedEventPayload as O}from"./internal-note-schemas.js";import{supportLiveChatContinuityEvents as A}from"./live-chat-continuity-events.js";import{MembershipLifecycleEventPayload as U}from"./membership-operation-schemas.js";import{MetadataLifecycleEventPayload as I}from"./metadata-output-schemas.js";import{SupportNotificationDeliveryEvidenceModel as L,SupportNotificationPreferenceModel as j}from"./notification-output-schemas.js";import{OpaHandoffUpdatedEventPayload as N}from"./opa-handoff-schemas.js";import{supportReportExportEvents as z}from"./report-export-events.js";import{supportReportingEvents as W}from"./reporting-events.js";import{SupportServiceProfileProjectionModel as _}from"./service-profile-schemas.js";import{supportSignedWebhookEvents as D}from"./signed-webhook-events.js";import{supportSloIncidentEvents as q}from"./slo-incident-events.js";import{supportWorkspaceBrandLocaleResidencyEvents as B}from"./workspace-brand-locale-residency-events.js";import{WorkspaceMigrationEventPayload as H}from"./workspace-migration-schemas.js";import{WorkspaceOnboardedEventPayload as F}from"./workspace-onboarding-schemas.js";import{WorkspaceConfiguredEventPayload as T}from"./workspace-operation-schemas.js";const V=new u({name:"SupportEventPayloadV1",fields:{workspaceRef:{type:p.String_unsecure(),isOptional:!1},resourceRef:{type:p.String_unsecure(),isOptional:!1},correlationRef:{type:p.String_unsecure(),isOptional:!1},receiptRef:{type:p.String_unsecure(),isOptional:!0},revision:{type:p.Int_unsecure(),isOptional:!0}}}),e=(r,o)=>t({meta:{key:r,version:"1.0.0",title:o,description:o,domain:"customer-support",owners:["platform.support"],tags:["support","event"],stability:"experimental"},payload:V,pii:[]});export const SupportCaseUnsnoozedEvent=t({meta:{key:"support.case.unsnoozed",version:"1.0.0",title:"Support case unsnoozed",description:"A due support case resumed with immutable replay and worker receipt evidence",domain:"customer-support",owners:["platform.support"],tags:["support","event","case-lifecycle","replay"],stability:"experimental"},payload:f,pii:[]});const n=(r,o)=>t({meta:{key:r,version:"1.0.0",title:o,description:o,domain:"customer-support",owners:["platform.support","platform.communication"],tags:["support","event","attachment","security"],stability:"experimental"},payload:l,pii:[]}),s=(r,o)=>t({meta:{key:r,version:"1.0.0",title:o,description:o,domain:"customer-support",owners:["platform.support"],tags:["support","event","membership"],stability:"experimental"},payload:U,pii:[]}),G=t({meta:{key:"support.workspace.configured",version:"1.0.0",title:"Support workspace configured",description:"Support workspace configured",domain:"customer-support",owners:["platform.support"],tags:["support","event","workspace"],stability:"experimental"},payload:T,pii:[]}),J=t({meta:{key:"support.workspace.onboarded",version:"1.0.0",title:"Support workspace onboarded",description:"Support workspace and founding administrator created",domain:"customer-support",owners:["platform.support"],tags:["support","event","workspace","onboarding"],stability:"experimental"},payload:F,pii:[]}),i=(r,o)=>t({meta:{key:r,version:"1.0.0",title:o,description:o,domain:"customer-support",owners:["platform.support"],tags:["support","event","workspace","migration"],stability:"experimental"},payload:H,pii:[]}),K=t({meta:{key:"support.case.internal-note.created",version:"1.0.0",title:"Support internal-note evidence created",description:"Immutable CommunicationOS-owned note evidence linked to a case",domain:"customer-support",owners:["platform.support"],tags:["support","event","internal-note","privacy"],stability:"experimental"},payload:M,pii:[]}),Q=t({meta:{key:"support.case.internal-note.reconciliation.updated",version:"1.0.0",title:"Support internal-note reconciliation updated",description:"Body-free durable internal-note reconciliation state changed",domain:"customer-support",owners:["platform.support"],tags:["support","event","internal-note","reconciliation","privacy"],stability:"experimental"},payload:O,pii:[]}),X=t({meta:{key:"support.opa-handoff.updated",version:"1.0.0",title:"Support OPA handoff updated",description:"Consent-bound profile or booking handoff state changed",domain:"customer-support",owners:["platform.support","platform.opa"],tags:["support","event","opa","handoff","privacy"],stability:"experimental"},payload:N,pii:[]}),Y=t({meta:{key:"support.csat.recorded",version:"2.0.0",title:"Support satisfaction recorded",description:"Forms-verified satisfaction evidence recorded without answer content",domain:"customer-support",owners:["platform.support","platform.forms"],tags:["support","event","csat","forms","privacy"],stability:"experimental"},payload:b,pii:[]}),Z=t({meta:{key:"support.customer.updated",version:"2.0.0",title:"Support service profile updated",description:"Consent-bound redacted customer context projection updated",domain:"customer-support",owners:["platform.support","platform.companyos"],tags:["support","event","customer-context","privacy"],stability:"experimental"},payload:_,pii:["party"]}),d=(r,o)=>t({meta:{key:r,version:"1.0.0",title:o,description:o,domain:"customer-support",owners:["platform.support"],tags:["support","event","identity","privacy","governance"],stability:"experimental"},payload:R,pii:["sourceProfileRef","targetProfileRef"]}),tt=t({meta:{key:"support.identity.observed",version:"1.0.0",title:"Support identity candidate observed",description:"Scoped-hash identity candidate observed without exposing the lookup hash",domain:"customer-support",owners:["platform.support"],tags:["support","event","identity","privacy"],stability:"experimental"},payload:C,pii:["profileRef"]}),a=(r,o)=>t({meta:{key:r,version:"1.0.0",title:o,description:o,domain:"customer-support",owners:["platform.support"],tags:["support","event","metadata","privacy"],stability:"experimental"},payload:I,pii:[]}),et=t({meta:{key:"support.notification.preference.updated",version:"1.0.0",title:"Support notification preference updated",description:"Support notification preference updated",domain:"customer-support",owners:["platform.support","platform.communication"],tags:["support","event","notification","privacy"],stability:"experimental"},payload:j,pii:["partyRef"]}),ot=t({meta:{key:"support.notification.delivery.updated",version:"1.0.0",title:"Support notification delivery evidence updated",description:"Support notification delivery evidence updated",domain:"customer-support",owners:["platform.support","platform.communication"],tags:["support","event","notification","privacy"],stability:"experimental"},payload:L,pii:["recipientPartyRef"]}),rt=t({meta:{key:"support.crypto.rotation.updated",version:"1.0.0",title:"Support cryptographic rotation updated",description:"A fenced cryptographic rotation lifecycle state changed",domain:"customer-support",owners:["platform.support"],tags:["support","event","crypto","rotation","security"],stability:"experimental"},payload:S,pii:[]}),pt=t({meta:{key:"support.customer-session.updated",version:"1.0.0",title:"Support customer session updated",description:"A short-lived customer session changed lifecycle state",domain:"customer-support",owners:["platform.support","platform.identity"],tags:["support","event","customer-session","security"],stability:"experimental"},payload:k,pii:[]}),it=t({meta:{key:"support.customer-access.issued",version:"1.0.0",title:"Support customer access issued",description:"A hash-only origin-bound public access grant was issued",domain:"customer-support",owners:["platform.support","platform.identity"],tags:["support","event","customer-session","security"],stability:"experimental"},payload:w,pii:[]}),st=t({meta:{key:"support.customer-consent.recorded",version:"1.0.0",title:"Support customer consent recorded",description:"A localized purpose-specific consent receipt was recorded",domain:"customer-support",owners:["platform.support","platform.identity"],tags:["support","event","consent","privacy"],stability:"experimental"},payload:h,pii:[]});export const supportEvents=[...m,...c,e("support.case.created","Support case created"),n("support.case.attachment.registered","Support attachment safety evidence registered"),n("support.case.attachment.released","Support quarantined attachment released"),e("support.case.transitioned","Support case transitioned"),SupportCaseUnsnoozedEvent,e("support.case.merged","Support cases merged"),e("support.case.split","Support case split"),e("support.case.linked","Support cases linked"),K,Q,X,e("support.assignment.changed","Support assignment changed"),e("support.case.presence.changed","Support case presence changed"),e("support.team.upserted","Support team upserted"),e("support.queue.upserted","Support queue upserted"),e("support.routing.policy.updated","Support routing policy updated"),e("support.routing.decision.recorded","Support routing decision recorded"),e("support.sla.breached","Support SLA breached"),...q,Y,...E,Z,tt,d("support.identity.merged","Support identity profiles merged"),d("support.identity.merge.reversed","Support identity merge reversed"),a("support.metadata.tag.updated","Support tag updated"),a("support.metadata.field.updated","Support custom field updated"),a("support.case.metadata.replaced","Support case metadata replaced"),et,ot,rt,...g,...y,...v,...W,...z,...x,...P,...A,...D,it,pt,st,e("support.ai.proposed","Support AI proposal created"),e("support.ai.executed","Support AI proposal executed"),e("support.sop.published","Support SOP published"),e("support.sop.run.completed","Support SOP run completed"),e("support.provider.reconciled","Support provider reconciled"),e("support.cutover.completed","Support authority cutover completed"),s("support.membership.created","Support membership created"),s("support.membership.grants.changed","Support membership grants changed"),s("support.membership.revoked","Support membership revoked"),J,G,...B,i("support.workspace.migration.prepared","Support workspace migration prepared"),i("support.workspace.migration.started","Support workspace migration started"),i("support.workspace.migration.completed","Support workspace migration completed"),i("support.workspace.migration.rolled-back","Support workspace migration rolled back")];

package/dist/node/customer-support/export-artifact-access-schemas.js

@@ -0,0 +1 @@
+import{EnumType as f,ScalarTypeEnum as m}from"@lssm/lib.schema";import{id as o,integer as i,StrictSemanticSchema as a,text as s}from"./data-lifecycle-schema-primitives.js";import{issue as c,validateRefs as n,validIso as d}from"./data-lifecycle-schema-validation.js";import{validateArtifactAccessGrant as A,validateArtifactAccessRef as p,validateArtifactAccessToken as w,validateArtifactDownloadAuthorization as S,validateArtifactDownloadEvidence as E,validateArtifactEvidenceRefs as y,validateArtifactProjectionPermission as u,validatePositiveInteger as r}from"./export-artifact-access-validation.js";import{SUPPORT_EXPORT_PROJECTION_MODES as O,SUPPORT_EXPORT_REDACTED_PERMISSION as x,SUPPORT_EXPORT_SENSITIVE_PERMISSION as I}from"./exports.js";const R=new f("SupportExportArtifactProjectionMode",[...O]),l=new f("SupportExportArtifactPermissionRef",[x,I]),P=()=>({type:m.ID(),isOptional:!1,isArray:!0}),h={exportRef:o(),expectedRevision:i(),projectionMode:{type:R,isOptional:!1},permissionRef:{type:l,isOptional:!1},decisionRef:o(),evidenceRefs:P(),idempotencyKey:o()};export const SupportExportArtifactAccessInputModel=new a({name:"SupportExportArtifactAccessInputV1",fields:h},(e,t)=>{n(e,["exportRef","decisionRef","idempotencyKey"],t);r(e.expectedRevision,"expectedRevision",t);u(e,t);y(e.evidenceRefs,t)});const v={accessRef:o(),revision:i(),accessToken:s(),downloadPath:s(),issuedAt:s(),expiresAt:s(),maximumDownloads:i()};export const SupportExportArtifactAccessGrantModel=new a({name:"SupportExportArtifactAccessGrantV1",fields:v},(e,t)=>{A(e,t);r(e.revision,"revision",t)});const M={accessRef:o(),accessRevision:i(),accessToken:s(),idempotencyKey:o()};export const SupportExportArtifactDownloadInputModel=new a({name:"SupportExportArtifactDownloadInputV1",fields:M},(e,t)=>{n(e,["accessRef","idempotencyKey"],t);p(e.accessRef,t);r(e.accessRevision,"accessRevision",t);w(e.accessToken,t)});const D={authorizationRef:o(),accessRef:o(),accessRevision:i(),tenantRef:o(),workspaceRef:o(),actorRef:o(),exportRef:o(),exportRevision:i(),authorizationRevision:i(),projectionMode:{type:R,isOptional:!1},permissionRef:{type:l,isOptional:!1},artifactVersionRef:o(),protectedObjectRef:o(),artifactDigest:s(),byteCount:i(),encryptionEvidenceRef:o(),residencyEvidenceRef:o(),storageEvidenceRef:o(),issuedAt:s(),expiresAt:s(),authorizedAt:s(),downloadOrdinal:i(),maximumDownloads:i(),idempotencyKey:o(),receiptRef:o()};export const SupportExportArtifactDownloadAuthorizationModel=new a({name:"SupportExportArtifactDownloadAuthorizationV1",fields:D},(e,t)=>{n(e,["authorizationRef","accessRef","tenantRef","workspaceRef","actorRef","exportRef","artifactVersionRef","protectedObjectRef","encryptionEvidenceRef","residencyEvidenceRef","storageEvidenceRef","idempotencyKey","receiptRef"],t);p(e.accessRef,t);r(e.accessRevision,"accessRevision",t);if(String(e.artifactVersionRef).includes("://"))c(t,"artifactVersionRef","artifactVersionRef must not be a provider URL");if(String(e.protectedObjectRef).includes("://"))c(t,"protectedObjectRef","protectedObjectRef must not be a provider URL");r(e.authorizationRevision,"authorizationRevision",t);S(e,t)});const T={accessRef:o(),artifactDigest:s(),byteCount:i(),downloadedAt:s(),downloadOrdinal:i(),maximumDownloads:i(),expiresAt:s(),receiptRef:o()};export const SupportExportArtifactDownloadReceiptModel=new a({name:"SupportExportArtifactDownloadReceiptV1",fields:T},(e,t)=>{n(e,["accessRef","receiptRef"],t);p(e.accessRef,t);E(e,t);if(!d(e.downloadedAt))c(t,"downloadedAt","downloadedAt must be canonical ISO time");if(!d(e.expiresAt))c(t,"expiresAt","expiresAt must be canonical ISO time");if(d(e.downloadedAt)&&d(e.expiresAt)&&e.downloadedAt>e.expiresAt)c(t,"downloadedAt","downloadedAt cannot follow expiresAt")});export*from"./export-artifact-event-schemas.js";export*from"./export-artifact-lifecycle-schemas.js";

package/dist/node/customer-support/export-artifact-access-validation.js

@@ -0,0 +1 @@
+import{issue as e,validateRefs as r,validIso as n,validRef as c}from"./data-lifecycle-schema-validation.js";import{SUPPORT_EXPORT_ARTIFACT_DOWNLOAD_PATH_PREFIX as f,SUPPORT_EXPORT_ARTIFACT_MAX_DOWNLOADS as a,SUPPORT_EXPORT_ARTIFACT_MAX_TTL_SECONDS as d}from"./export-artifact-access.js";import{SUPPORT_EXPORT_REDACTED_PERMISSION as m,SUPPORT_EXPORT_SENSITIVE_PERMISSION as A}from"./exports.js";export function validateArtifactAccessGrant(t,i){r(t,["accessRef"],i);validateArtifactAccessRef(t.accessRef,i);validateArtifactAccessToken(t.accessToken,i);const o=`${f}${String(t.accessRef)}`;if(typeof t.downloadPath!=="string"||t.downloadPath!==o||t.downloadPath.includes("://")||t.downloadPath.includes("?")||t.downloadPath.includes("#"))e(i,"downloadPath","downloadPath must be the canonical relative artifact path");validateArtifactAccessWindow(t,i);validateArtifactMaximumDownloads(t.maximumDownloads,i)}export function validateArtifactDownloadAuthorization(t,i){validatePositiveInteger(t.exportRevision,"exportRevision",i);validateArtifactProjectionPermission(t,i);validateArtifactAccessWindow(t,i);validateArtifactDownloadEvidence(t,i);if(!n(t.authorizedAt))e(i,"authorizedAt","authorizedAt must be canonical ISO time");else if(n(t.issuedAt)&&n(t.expiresAt)&&(t.authorizedAt<t.issuedAt||t.authorizedAt>t.expiresAt))e(i,"authorizedAt","authorizedAt must be within the access window")}export function validateArtifactProjectionPermission(t,i){const o=t.projectionMode==="sensitive"?A:m;if(t.permissionRef!==o)e(i,"permissionRef","permissionRef must match the export projection mode")}export function validateArtifactAccessWindow(t,i){for(const s of["issuedAt","expiresAt"])if(!n(t[s]))e(i,s,`${s} must be canonical ISO time`);if(!n(t.issuedAt)||!n(t.expiresAt))return;const o=Date.parse(t.expiresAt)-Date.parse(t.issuedAt);if(o<=0||o>d*1000)e(i,"expiresAt",`artifact access must expire within ${d} seconds`)}export function validateArtifactDownloadEvidence(t,i){if(typeof t.artifactDigest!=="string"||!/^sha256:[a-f0-9]{64}$/.test(t.artifactDigest))e(i,"artifactDigest","artifactDigest must be a SHA-256 digest");if(!Number.isSafeInteger(t.byteCount)||Number(t.byteCount)<0)e(i,"byteCount","byteCount must be nonnegative");if(!Number.isSafeInteger(t.downloadOrdinal)||Number(t.downloadOrdinal)<1||Number(t.downloadOrdinal)>a)e(i,"downloadOrdinal","downloadOrdinal must be 1 through 3");validateArtifactMaximumDownloads(t.maximumDownloads,i)}export function validateArtifactMaximumDownloads(t,i){if(t!==a)e(i,"maximumDownloads","maximumDownloads must be exactly 3")}export function validatePositiveInteger(t,i,o){if(!Number.isSafeInteger(t)||Number(t)<1)e(o,i,`${i} must be positive`)}export function validateArtifactAccessToken(t,i){if(typeof t!=="string"||t.length<32||t.length>512||!/^[A-Za-z0-9_-]+$/.test(t))e(i,"accessToken","accessToken must be a bounded opaque URL-safe token")}export function validateArtifactAccessRef(t,i){if(typeof t!=="string"||!/^[A-Za-z0-9][A-Za-z0-9_-]{0,199}$/.test(t))e(i,"accessRef","accessRef must be an opaque path-safe ref")}export function validateArtifactEvidenceRefs(t,i){if(!Array.isArray(t)||t.length>32||new Set(t).size!==t.length||t.some((o)=>!c(o)))e(i,"evidenceRefs","evidenceRefs must be unique and bounded")}

package/dist/node/customer-support/export-artifact-access.js

@@ -0,0 +1 @@
+export const SUPPORT_EXPORT_DOWNLOADS_CAPABILITY="support.export-downloads",SUPPORT_EXPORT_DOWNLOADS_PERMISSION=SUPPORT_EXPORT_DOWNLOADS_CAPABILITY,SUPPORT_EXPORT_ARTIFACT_MAX_DOWNLOADS=3,SUPPORT_EXPORT_ARTIFACT_MAX_TTL_SECONDS=300,SUPPORT_EXPORT_ARTIFACT_DOWNLOAD_PATH_PREFIX="/api/support/v1/export-artifacts/";

package/dist/node/customer-support/export-artifact-event-schemas.js

@@ -0,0 +1 @@
+import{EnumType as p}from"@lssm/lib.schema";import{id as t,integer as i,StrictSemanticSchema as r,text as a}from"./data-lifecycle-schema-primitives.js";import{issue as c,validateRefs as d,validIso as f}from"./data-lifecycle-schema-validation.js";import{validateArtifactAccessRef as n,validateArtifactAccessWindow as l,validateArtifactDownloadEvidence as R,validateArtifactMaximumDownloads as m,validateArtifactProjectionPermission as E,validatePositiveInteger as s}from"./export-artifact-access-validation.js";import{SUPPORT_EXPORT_PROJECTION_MODES as A,SUPPORT_EXPORT_REDACTED_PERMISSION as S,SUPPORT_EXPORT_SENSITIVE_PERMISSION as P}from"./exports.js";const w=new p("SupportExportArtifactEventProjectionMode",[...A]),u=new p("SupportExportArtifactEventPermissionRef",[S,P]),v={accessRef:t(),revision:i(),exportRef:t(),exportRevision:i(),projectionMode:{type:w,isOptional:!1},permissionRef:{type:u,isOptional:!1},issuedAt:a(),expiresAt:a(),maximumDownloads:i(),receiptRef:t()};export const SupportExportArtifactAccessIssuedEventPayloadModel=new r({name:"SupportExportArtifactAccessIssuedEventPayloadV1",fields:v},(e,o)=>{d(e,["accessRef","exportRef","receiptRef"],o);n(e.accessRef,o);s(e.revision,"revision",o);s(e.exportRevision,"exportRevision",o);E(e,o);l(e,o);m(e.maximumDownloads,o)});const x={authorizationRef:t(),accessRef:t(),exportRef:t(),exportRevision:i(),artifactDigest:a(),byteCount:i(),downloadOrdinal:i(),maximumDownloads:i(),downloadedAt:a(),receiptRef:t()};export const SupportExportArtifactDownloadedEventPayloadModel=new r({name:"SupportExportArtifactDownloadedEventPayloadV1",fields:x},(e,o)=>{d(e,["authorizationRef","accessRef","exportRef","receiptRef"],o);n(e.accessRef,o);s(e.exportRevision,"exportRevision",o);R(e,o);if(!f(e.downloadedAt))c(o,"downloadedAt","downloadedAt must be canonical ISO time")});const h={authorizationRef:t(),accessRef:t(),exportRef:t(),exportRevision:i(),artifactDigest:a(),byteCount:i(),downloadOrdinal:i(),maximumDownloads:i(),authorizedAt:a(),receiptRef:t()};export const SupportExportArtifactDownloadAuthorizedEventPayloadModel=new r({name:"SupportExportArtifactDownloadAuthorizedEventPayloadV1",fields:h},(e,o)=>{d(e,["authorizationRef","accessRef","exportRef","receiptRef"],o);n(e.accessRef,o);s(e.exportRevision,"exportRevision",o);R(e,o);if(!f(e.authorizedAt))c(o,"authorizedAt","authorizedAt must be canonical ISO time")});

package/dist/node/customer-support/export-artifact-lifecycle-schemas.js

@@ -0,0 +1 @@
+import{EnumType as A,ScalarTypeEnum as y}from"@lssm/lib.schema";import{id as o,integer as i,StrictSemanticSchema as d,text as a}from"./data-lifecycle-schema-primitives.js";import{issue as s,validateRefs as c,validIso as r,validRef as S}from"./data-lifecycle-schema-validation.js";import{validateArtifactAccessRef as f,validateArtifactDownloadEvidence as h,validateArtifactEvidenceRefs as p,validatePositiveInteger as n}from"./export-artifact-access-validation.js";import{SUPPORT_EXPORT_ARTIFACT_DOWNLOAD_SETTLEMENT_STATUSES as C}from"./export-artifact-lifecycle.js";const m=new A("SupportExportArtifactDownloadSettlementStatus",[...C]),u=()=>({type:y.ID(),isOptional:!1,isArray:!0}),w={accessRef:o(),expectedRevision:i(),reasonRef:o(),decisionRef:o(),evidenceRefs:u(),idempotencyKey:o()};export const SupportExportArtifactAccessRevokeInputModel=new d({name:"SupportExportArtifactAccessRevokeInputV1",fields:w},(e,t)=>{c(e,["accessRef","reasonRef","decisionRef","idempotencyKey"],t);f(e.accessRef,t);n(e.expectedRevision,"expectedRevision",t);p(e.evidenceRefs,t)});const E={accessRef:o(),revision:i(),revokedAt:a(),reasonRef:o(),receiptRef:o()};export const SupportExportArtifactAccessRevocationModel=new d({name:"SupportExportArtifactAccessRevocationV1",fields:E},(e,t)=>{c(e,["accessRef","reasonRef","receiptRef"],t);f(e.accessRef,t);n(e.revision,"revision",t);if(!r(e.revokedAt))s(t,"revokedAt","revokedAt must be canonical ISO time")});const I={authorizationRef:o(),accessRef:o(),expectedAuthorizationRevision:i(),status:{type:m,isOptional:!1},transferredByteCount:i(),failureCode:o(!0),evidenceRefs:u(),idempotencyKey:o()};export const SupportExportArtifactDownloadSettlementInputModel=new d({name:"SupportExportArtifactDownloadSettlementInputV1",fields:I},(e,t)=>{c(e,["authorizationRef","accessRef","idempotencyKey"],t);f(e.accessRef,t);n(e.expectedAuthorizationRevision,"expectedAuthorizationRevision",t);l(e.transferredByteCount,t);R(e,t);p(e.evidenceRefs,t)});const v={authorizationRef:o(),accessRef:o(),exportRef:o(),exportRevision:i(),status:{type:m,isOptional:!1},revision:i(),downloadOrdinal:i(),maximumDownloads:i(),artifactDigest:a(),expectedByteCount:i(),transferredByteCount:i(),authorizedAt:a(),settledAt:a(),failureCode:o(!0),receiptRef:o()};export const SupportExportArtifactDownloadSettlementModel=new d({name:"SupportExportArtifactDownloadSettlementV1",fields:v},(e,t)=>{c(e,["authorizationRef","accessRef","exportRef","receiptRef"],t);f(e.accessRef,t);n(e.exportRevision,"exportRevision",t);n(e.revision,"revision",t);h({...e,byteCount:e.expectedByteCount},t);l(e.transferredByteCount,t);R(e,t);if(!r(e.authorizedAt))s(t,"authorizedAt","authorizedAt must be canonical ISO time");if(!r(e.settledAt))s(t,"settledAt","settledAt must be canonical ISO time");if(r(e.authorizedAt)&&r(e.settledAt)&&e.settledAt<e.authorizedAt)s(t,"settledAt","settledAt cannot precede authorizedAt");if(e.status==="completed"&&e.transferredByteCount!==e.expectedByteCount)s(t,"transferredByteCount","completed downloads must transfer the exact artifact byte count");if(e.status!=="completed"&&Number(e.transferredByteCount)>Number(e.expectedByteCount))s(t,"transferredByteCount","partial downloads cannot exceed the artifact byte count")});function l(e,t){if(!Number.isSafeInteger(e)||Number(e)<0)s(t,"transferredByteCount","transferredByteCount must be nonnegative")}function R(e,t){if(e.status==="completed"&&e.failureCode!==void 0)s(t,"failureCode","completed downloads cannot have failureCode");else if(e.status!=="completed"&&!S(e.failureCode))s(t,"failureCode","aborted and failed downloads require a code")}

package/dist/node/customer-support/export-artifact-lifecycle.js

@@ -0,0 +1 @@
+export const SUPPORT_EXPORT_ARTIFACT_DOWNLOAD_SETTLEMENT_STATUSES=["completed","aborted","failed"];

package/dist/node/customer-support/export-events.js

@@ -0,0 +1 @@
+import{defineEvent as t}from"../events.js";import{SupportExportArtifactAccessIssuedEventPayloadModel as a,SupportExportArtifactDownloadAuthorizedEventPayloadModel as s,SupportExportArtifactDownloadedEventPayloadModel as d}from"./export-artifact-event-schemas.js";import{SupportExportArtifactAccessRevocationModel as i,SupportExportArtifactDownloadSettlementModel as n}from"./export-artifact-lifecycle-schemas.js";import{SupportExportProjectionModel as c}from"./export-output-schemas.js";import{SupportExportDocRef as o}from"./exports.js";const e=(r,p)=>t({meta:{key:r,version:"1.0.0",title:p,description:p,domain:"customer-support",owners:["platform.support","platform.security"],tags:["support","event","export","audit"],stability:"experimental",docId:[o]},payload:c,pii:[]});export const SupportExportRequestedEvent=e("support.export.requested","Support export requested"),SupportExportStartedEvent=e("support.export.started","Support export execution started"),SupportExportCompletedEvent=e("support.export.completed","Support export completed"),SupportExportCancelledEvent=e("support.export.cancelled","Support export cancelled"),SupportExportFailedEvent=e("support.export.failed","Support export failed"),SupportExportArtifactAccessIssuedEvent=t({meta:{key:"support.export.artifact-access.issued",version:"1.0.0",title:"Support export artifact access issued",description:"Bounded access to a support export artifact was issued.",domain:"customer-support",owners:["platform.support","platform.security"],tags:["support","event","export","download","audit"],stability:"experimental",docId:[o]},payload:a,pii:[]}),SupportExportArtifactDownloadedEvent=t({meta:{key:"support.export.artifact.downloaded",version:"1.0.0",title:"Support export artifact downloaded",description:"One idempotent support export artifact download completed.",domain:"customer-support",owners:["platform.support","platform.security"],tags:["support","event","export","download","audit"],stability:"experimental",docId:[o]},payload:d,pii:[]}),SupportExportArtifactAccessRevokedEvent=t({meta:{key:"support.export.artifact-access.revoked",version:"1.0.0",title:"Support export artifact access revoked",description:"Access to a support export artifact was revoked.",domain:"customer-support",owners:["platform.support","platform.security"],tags:["support","event","export","download","audit"],stability:"experimental",docId:[o]},payload:i,pii:[]}),SupportExportArtifactDownloadAuthorizedEvent=t({meta:{key:"support.export.artifact-download.authorized",version:"1.0.0",title:"Support export artifact download authorized",description:"An exact idempotent artifact download ordinal was reserved.",domain:"customer-support",owners:["platform.support","platform.security"],tags:["support","event","export","download","audit"],stability:"experimental",docId:[o]},payload:s,pii:[]}),SupportExportArtifactDownloadSettledEvent=t({meta:{key:"support.export.artifact-download.settled",version:"1.0.0",title:"Support export artifact download settled",description:"An authorized artifact stream completed, aborted, or failed with exact byte evidence.",domain:"customer-support",owners:["platform.support","platform.security"],tags:["support","event","export","download","audit"],stability:"experimental",docId:[o]},payload:n,pii:[]}),supportExportEvents=[SupportExportRequestedEvent,SupportExportStartedEvent,SupportExportCompletedEvent,SupportExportCancelledEvent,SupportExportFailedEvent,SupportExportArtifactAccessIssuedEvent,SupportExportArtifactDownloadedEvent,SupportExportArtifactAccessRevokedEvent,SupportExportArtifactDownloadAuthorizedEvent,SupportExportArtifactDownloadSettledEvent];

package/dist/node/customer-support/export-input-schemas.js

@@ -0,0 +1 @@
+import{EnumType as n,ScalarTypeEnum as E}from"@lssm/lib.schema";import{SUPPORT_CASE_STATUSES as P}from"./core.js";import{id as o,integer as d,StrictSemanticSchema as p,text as a}from"./data-lifecycle-schema-primitives.js";import{issue as s,validateRefs as f,validIso as u,validRef as c}from"./data-lifecycle-schema-validation.js";import{SUPPORT_EXPORT_CASE_FIELD_KEYS as O,SUPPORT_EXPORT_DATA_SETS as T,SUPPORT_EXPORT_FORMATS as A,SUPPORT_EXPORT_PROJECTION_MODES as x,SUPPORT_EXPORT_REDACTED_PERMISSION as S,SUPPORT_EXPORT_SENSITIVE_PERMISSION as m,SUPPORT_EXPORT_STATUSES as I}from"./exports.js";const g=new n("SupportExportDataSet",[...T]),_=new n("SupportExportProjectionMode",[...x]),b=new n("SupportExportFormat",[...A]),F=new n("SupportExportCaseFieldKey",[...O]),w=new n("SupportExportCaseStatus",[...P]),M=new n("SupportExportStatusFilter",[...I]),h=new n("SupportExportPermissionRef",[S,m]),l=(e=!1)=>({type:E.ID(),isOptional:e,isArray:!0}),K={exportRef:o(),dataSet:{type:g,isOptional:!1},projectionMode:{type:_,isOptional:!1},format:{type:b,isOptional:!1},locale:a(),fieldKeys:{type:F,isOptional:!1,isArray:!0},statusFilters:{type:w,isOptional:!0,isArray:!0},updatedAfter:a(!0),updatedBefore:a(!0),expectedWorkspaceRevision:d(),permissionRef:{type:h,isOptional:!1},decisionRef:o(),evidenceRefs:l(),idempotencyKey:o()};export const SupportExportRequestInputModel=new p({name:"SupportExportRequestInputV1",fields:K},(e,t)=>{f(e,["exportRef","decisionRef","idempotencyKey"],t);if(e.dataSet!=="cases")s(t,"dataSet","aggregate report exports require support.reporting.export.request");if(!/^[A-Za-z0-9][A-Za-z0-9-]{0,34}$/.test(String(e.locale)))s(t,"locale","locale must be a bounded BCP-47 tag");const i=e.fieldKeys;if(!Array.isArray(i)||i.length<1||i.length>12)s(t,"fieldKeys","fieldKeys must contain 1 through 12 fields");else if(new Set(i).size!==i.length)s(t,"fieldKeys","fieldKeys must be unique");if(e.projectionMode==="redacted"&&Array.isArray(i)&&i.includes("requesterRef"))s(t,"fieldKeys","redacted exports cannot contain requesterRef");const r=e.projectionMode==="sensitive"?m:S;if(e.permissionRef!==r)s(t,"permissionRef","permission does not match projection mode");k(e,t);if(!Number.isSafeInteger(e.expectedWorkspaceRevision)||Number(e.expectedWorkspaceRevision)<0)s(t,"expectedWorkspaceRevision","revision must be nonnegative");R(e.evidenceRefs,"evidenceRefs",t,32)});const q={exportRef:o(),expectedRevision:d(),reasonRef:o(),decisionRef:o(),evidenceRefs:l(),idempotencyKey:o()};export const SupportExportCancelInputModel=new p({name:"SupportExportCancelInputV1",fields:q},(e,t)=>{f(e,["exportRef","reasonRef","decisionRef","idempotencyKey"],t);if(!Number.isSafeInteger(e.expectedRevision)||Number(e.expectedRevision)<1)s(t,"expectedRevision","revision must be positive");R(e.evidenceRefs,"evidenceRefs",t,32)});const N={status:{type:M,isOptional:!0},cursor:o(!0),limit:d(),watermark:o(!0)};export const SupportExportListInputModel=new p({name:"SupportExportListInputV1",fields:N},(e,t)=>{for(const i of["cursor","watermark"])if(e[i]!==void 0&&!c(e[i]))s(t,i,`${i} is invalid`);if(!Number.isSafeInteger(e.limit)||Number(e.limit)<1||Number(e.limit)>100)s(t,"limit","limit must be 1 through 100")});const U={exportRef:o()};export const SupportExportGetInputModel=new p({name:"SupportExportGetInputV1",fields:U},(e,t)=>f(e,["exportRef"],t));function k(e,t){const i=e.statusFilters;if(Array.isArray(i)&&(i.length>8||new Set(i).size!==i.length))s(t,"statusFilters","statusFilters must be unique and bounded");for(const r of["updatedAfter","updatedBefore"])if(e[r]!==void 0&&!u(e[r]))s(t,r,`${r} must be canonical ISO time`);if(u(e.updatedAfter)&&u(e.updatedBefore)&&e.updatedAfter>=e.updatedBefore)s(t,"updatedBefore","updatedBefore must follow updatedAfter")}function R(e,t,i,r){if(!Array.isArray(e)||e.length>r||new Set(e).size!==e.length||e.some((y)=>!c(y)))s(i,t,`${t} must be unique and bounded`)}

package/dist/node/customer-support/export-operations.js

@@ -0,0 +1 @@
+import{defineCommand as p,defineQuery as e}from"../operations/index.js";import{SupportExportArtifactAccessRevocationModel as a,SupportExportArtifactAccessRevokeInputModel as i,SupportExportArtifactDownloadSettlementInputModel as c,SupportExportArtifactDownloadSettlementModel as n}from"./export-artifact-lifecycle-schemas.js";import{SupportExportArtifactAccessGrantModel as d,SupportExportArtifactAccessInputModel as x,SupportExportArtifactDownloadInputModel as l,SupportExportArtifactDownloadReceiptModel as m,SupportExportCancelInputModel as f,SupportExportGetInputModel as S,SupportExportListInputModel as E,SupportExportListOutputModel as A,SupportExportMutationOutputModel as s,SupportExportProjectionModel as M,SupportExportRequestInputModel as y}from"./export-schemas.js";import{SupportExportDocRef as h}from"./exports.js";import{supportOperationErrors as t}from"./operation-schemas.js";const o=(u,r)=>({key:u,version:"1.0.0",title:r,description:r,goal:r,context:"Tenant, workspace, actor, and live permissions are derived from authenticated server authority.",domain:"customer-support",owners:["platform.support","platform.security"],tags:["support","export","audit","privacy"],stability:"experimental",docId:[h]});export const SupportExportRequestCommand=p({meta:o("support.export.request","Request an audited support export"),io:{input:y,output:s,errors:t},policy:{auth:"user",pii:[]}}),SupportExportGetQuery=e({meta:o("support.export.get","Get an audited support export"),io:{input:S,output:M,errors:t},policy:{auth:"user",pii:[]}}),SupportExportListQuery=e({meta:o("support.export.list","List audited support exports"),io:{input:E,output:A,errors:t},policy:{auth:"user",pii:[]}}),SupportExportCancelCommand=p({meta:o("support.export.cancel","Cancel an audited support export"),io:{input:f,output:s,errors:t},policy:{auth:"user",pii:[]}}),SupportExportArtifactAccessIssueCommand=p({meta:o("support.export.artifact-access.issue","Issue bounded access to a completed support export artifact"),io:{input:x,output:d,errors:t},policy:{auth:"user",pii:["accessToken"]}}),SupportExportArtifactDownloadCommand=p({meta:o("support.export.artifact.download","Consume one idempotent support export artifact download"),io:{input:l,output:m,errors:t},policy:{auth:"user",pii:["accessToken"]}}),SupportExportArtifactAccessRevokeCommand=p({meta:o("support.export.artifact-access.revoke","Revoke access to a support export artifact"),io:{input:i,output:a,errors:t},policy:{auth:"user",pii:[]}}),SupportExportArtifactDownloadSettleCommand=p({meta:o("support.export.artifact-download.settle","Settle an authorized support export artifact stream"),io:{input:c,output:n,errors:t},policy:{auth:"internal",pii:[]}}),supportExportOperations=[SupportExportRequestCommand,SupportExportGetQuery,SupportExportListQuery,SupportExportCancelCommand,SupportExportArtifactAccessIssueCommand,SupportExportArtifactDownloadCommand,SupportExportArtifactAccessRevokeCommand,SupportExportArtifactDownloadSettleCommand];

package/dist/node/customer-support/export-output-schemas.js

@@ -0,0 +1 @@
+import{EnumType as p,ScalarTypeEnum as f}from"@lssm/lib.schema";import{id as a,integer as y,StrictSchema as A,StrictSemanticSchema as c,text as n}from"./data-lifecycle-schema-primitives.js";import{issue as i,validateRefs as O,validateRevision as R,validIso as u,validRef as x}from"./data-lifecycle-schema-validation.js";import{SUPPORT_EXPORT_DATA_SETS as E,SUPPORT_EXPORT_FIELD_KEYS as g,SUPPORT_EXPORT_FORMATS as P,SUPPORT_EXPORT_PROJECTION_MODES as w,SUPPORT_EXPORT_STATUSES as b}from"./exports.js";const F=new p("SupportExportProjectionDataSet",[...E]),T=new p("SupportExportProjectionModeOutput",[...w]),q=new p("SupportExportProjectionFormat",[...P]),D=new p("SupportExportProjectionStatus",[...b]),l=new p("SupportExportProjectionFieldKey",[...g]),m=()=>({type:f.Int_unsecure(),isOptional:!0}),C={exportRef:a(),dataSet:{type:F,isOptional:!1},projectionMode:{type:T,isOptional:!1},format:{type:q,isOptional:!1},status:{type:D,isOptional:!1},locale:n(),requestedFieldKeys:{type:l,isOptional:!1,isArray:!0},effectiveFieldKeys:{type:l,isOptional:!1,isArray:!0},watermark:a(),auditReceiptRef:a(),revision:y(),requestedAt:n(),updatedAt:n(),expiresAt:n(),artifactAvailable:{type:f.Boolean(),isOptional:!1},artifactDigest:a(!0),rowCount:m(),byteCount:m(),completedAt:n(!0),failureCode:a(!0)};export const SupportExportProjectionModel=new c({name:"SupportExportProjectionV1",fields:C},(e,t)=>{O(e,["exportRef","watermark","auditReceiptRef"],t);R(e.revision,t);for(const o of["requestedAt","updatedAt","expiresAt"])if(!u(e[o]))i(t,o,`${o} must be canonical ISO time`);_(e,t);h(e,t)});const M={resourceRef:a(),receiptRef:a(),export:{type:SupportExportProjectionModel,isOptional:!1}};export const SupportExportMutationOutputModel=new c({name:"SupportExportMutationOutputV1",fields:M},(e,t)=>{const o=e.export;if(e.resourceRef!==o.exportRef)i(t,"resourceRef","resourceRef must identify the returned export")});const j={items:{type:SupportExportProjectionModel,isOptional:!1,isArray:!0},nextCursor:a(!0),watermark:a()};export const SupportExportListOutputModel=new A({name:"SupportExportListOutputV1",fields:j});function _(e,t){for(const o of["requestedFieldKeys","effectiveFieldKeys"]){const r=e[o];if(!Array.isArray(r)||r.length<1||r.length>12||new Set(r).size!==r.length)i(t,o,`${o} must be unique and bounded`)}if(e.dataSet==="cases"&&e.projectionMode==="redacted"){for(const o of["requestedFieldKeys","effectiveFieldKeys"])if(e[o]?.includes("requesterRef"))i(t,o,"redacted exports cannot contain requesterRef")}}function h(e,t){const o=e.status==="completed",r=Date.parse(String(e.requestedAt)),d=Date.parse(String(e.updatedAt)),S=Date.parse(String(e.expiresAt));if(d<r)i(t,"updatedAt","updatedAt cannot precede requestedAt");if(S<=r)i(t,"expiresAt","expiresAt must follow requestedAt");for(const s of["rowCount","byteCount"])if(e[s]!==void 0&&(!Number.isSafeInteger(e[s])||Number(e[s])<0))i(t,s,`${s} must be nonnegative`);if(o){if(e.artifactAvailable!==!0)i(t,"artifactAvailable","completed exports must declare artifact availability");if(typeof e.artifactDigest!=="string"||!/^sha256:[a-f0-9]{64}$/.test(e.artifactDigest))i(t,"artifactDigest","completed exports require a SHA-256 artifact digest");if(!u(e.completedAt))i(t,"completedAt","completed exports require completedAt");else if(Date.parse(String(e.completedAt))<r||Date.parse(String(e.completedAt))>d)i(t,"completedAt","completedAt must be within the export lifecycle");for(const s of["rowCount","byteCount"])if(!Number.isSafeInteger(e[s]))i(t,s,`completed exports require ${s}`)}else if(e.artifactAvailable!==!1)i(t,"artifactAvailable","only completed exports may declare artifact availability");else if(e.artifactDigest!==void 0||e.completedAt!==void 0)i(t,"artifactDigest","only completed exports expose artifact evidence");if(e.status==="failed"&&!x(e.failureCode))i(t,"failureCode","failed exports require failureCode");else if(e.status!=="failed"&&e.failureCode!==void 0)i(t,"failureCode","only failed exports expose failureCode")}

package/dist/node/customer-support/export-schemas.js

@@ -0,0 +1 @@
+export*from"./export-artifact-access-schemas.js";export*from"./export-input-schemas.js";export*from"./export-output-schemas.js";

package/dist/node/customer-support/exports.js

@@ -0,0 +1 @@
+import{docRef as e}from"../docs/registry.js";export const SUPPORT_EXPORT_STATUSES=["queued","running","completed","cancelled","failed","expired"],SUPPORT_EXPORT_DATA_SETS=["cases","report-aggregate"],SUPPORT_EXPORT_PROJECTION_MODES=["redacted","sensitive"],SUPPORT_EXPORT_FORMATS=["csv"],SUPPORT_EXPORT_CASE_FIELD_KEYS=["caseRef","caseNumber","status","priority","requesterRef","locale","queueRef","assigneeRef","revision","createdAt","updatedAt","resolvedAt"],SUPPORT_REPORT_EXPORT_FIELD_KEYS=["rowRef","bucketStart","bucketEnd","dimensionsJson","metricsJson"],SUPPORT_EXPORT_FIELD_KEYS=[...SUPPORT_EXPORT_CASE_FIELD_KEYS,...SUPPORT_REPORT_EXPORT_FIELD_KEYS],SUPPORT_EXPORT_REDACTED_PERMISSION="support.export.redacted",SUPPORT_EXPORT_SENSITIVE_PERMISSION="support.export.sensitive",SUPPORT_EXPORT_EXECUTE_PERMISSION="support.export.execute",SupportExportDocBlock={id:"docs.customer-support.exports",title:"SupportOS audited asynchronous exports",summary:"Snapshot-pinned, permission-separated SupportOS CSV exports.",kind:"reference",visibility:"public",route:"/docs/customer-support/exports",tags:["supportos","exports","csv","privacy","audit"],body:"# SupportOS audited exports\n\nExports are asynchronous, immutable-snapshot jobs. Redacted and sensitive permissions are separate, every mutation is idempotent and revision/fence-bound, and public projections never expose storage locators. Retrieval uses a separate `support.export-downloads` capability and authority. The public handoff contains only an opaque token and canonical relative path, expires within five minutes, and permits at most three exact idempotent downloads. Internal authorizations bind tenant, workspace, actor, export revision, immutable artifact version, digest, byte count, storage evidence, and ordinal without exposing provider URLs. Streams are explicitly authorized then settled as completed, aborted, or failed so partial delivery is audited accurately. Access can be revoked, and protected storage supports bounded streaming writes, exact-version reads, exact deletion, tombstones, and readiness. The cases export schema intentionally contains no message body, note body, form answer, attachment payload, or download URL. CSV writers emit UTF-8 and neutralize spreadsheet formulas."},SupportExportDocRef=e(SupportExportDocBlock.id);

package/dist/node/customer-support/identity-resolution-operations.js

@@ -0,0 +1 @@
+import{defineCommand as r,defineQuery as n}from"../operations/index.js";import{SupportIdentityResolutionDocRef as s}from"./identity-resolution.js";import{SupportIdentityMergeInputModel as u,SupportIdentityMergeReversalInputModel as d,SupportIdentityMutationResultModel as i,SupportIdentityObservationInputModel as a,SupportIdentityReviewInputModel as m,SupportIdentityReviewProjectionModel as c}from"./identity-resolution-schemas.js";import{supportOperationErrors as e}from"./operation-schemas.js";const t=(p,o)=>({key:p,version:"1.0.0",title:o,description:`${o} with server-derived scope and no raw identity values.`,goal:o,context:"Identity matches are scoped-hash candidates; governed merge edges are explicit and reversible.",domain:"customer-support",owners:["platform.support"],tags:["support","identity","privacy","governance"],stability:"experimental",docId:[s]});export const SupportIdentityObserveCommand=r({meta:t("support.identity.observe","Observe support identity"),io:{input:a,output:i,errors:e},policy:{auth:"admin",pii:["sourceIdentityRef"]}}),SupportIdentityReviewQuery=n({meta:t("support.identity.review","Review support identity matches"),io:{input:m,output:c,errors:e},policy:{auth:"admin",pii:["profileRef"]}}),SupportIdentityMergeCommand=r({meta:t("support.identity.merge","Merge support identity profiles"),io:{input:u,output:i,errors:e},policy:{auth:"admin",pii:["sourceProfileRef","targetProfileRef"]}}),SupportIdentityMergeReverseCommand=r({meta:t("support.identity.merge.reverse","Reverse support identity merge"),io:{input:d,output:i,errors:e},policy:{auth:"admin",pii:["mergeRef"]}}),supportIdentityResolutionOperations=[SupportIdentityObserveCommand,SupportIdentityReviewQuery,SupportIdentityMergeCommand,SupportIdentityMergeReverseCommand];

package/dist/node/customer-support/identity-resolution-output-schemas.js

@@ -0,0 +1 @@
+import{EnumType as r,ScalarTypeEnum as i,SchemaModel as t}from"@lssm/lib.schema";import{SUPPORT_IDENTITY_CANDIDATE_STATES as p,SUPPORT_IDENTITY_KINDS as d}from"./identity-resolution.js";const e=(o=!1)=>({type:i.ID(),isOptional:o}),s=()=>({type:i.ID(),isOptional:!1,isArray:!0}),n=(o=!1)=>({type:i.String_unsecure(),isOptional:o}),a=()=>({type:i.Int_unsecure(),isOptional:!1}),l=new r("SupportIdentityKindProjection",[...d]),f=new r("SupportIdentityCandidateState",[...p]);export const SupportIdentityCandidateProjectionModel=new t({name:"SupportIdentityCandidateProjectionV1",fields:{candidateRef:e(),profileRef:e(),identityKind:{type:l,isOptional:!1},keyVersion:e(),state:{type:f,isOptional:!1},matchingProfileRefs:s(),evidenceRefs:s(),revision:a(),observedAt:n()}}),SupportIdentityMergeProjectionModel=new t({name:"SupportIdentityMergeProjectionV1",fields:{mergeRef:e(),sourceProfileRef:e(),targetProfileRef:e(),candidateRefs:s(),status:{type:new r("SupportIdentityMergeStatus",["active","reversed"]),isOptional:!1},decisionEvidenceRef:e(),revision:a(),createdAt:n(),reversedAt:n(!0)}}),SupportIdentityReviewProjectionModel=new t({name:"SupportIdentityReviewProjectionV1",fields:{candidates:{type:SupportIdentityCandidateProjectionModel,isOptional:!1,isArray:!0},merges:{type:SupportIdentityMergeProjectionModel,isOptional:!1,isArray:!0},profileRevisions:{type:new t({name:"SupportIdentityProfileRevisionV1",fields:{profileRef:e(),revision:a()}}),isOptional:!1,isArray:!0},nextCursor:e(!0),watermark:n()}}),SupportIdentityMutationResultModel=new t({name:"SupportIdentityMutationResultV1",fields:{candidate:{type:SupportIdentityCandidateProjectionModel,isOptional:!0},merge:{type:SupportIdentityMergeProjectionModel,isOptional:!0},receiptRef:e(),eventRef:e()}});

package/dist/node/customer-support/identity-resolution-schemas.js

@@ -0,0 +1 @@
+import{EnumType as g,ScalarTypeEnum as n,SchemaModel as p}from"@lssm/lib.schema";import{SUPPORT_IDENTITY_KINDS as R}from"./identity-resolution.js";const l=new g("SupportIdentityKind",[...R]),s=(e=!1)=>({type:n.ID(),isOptional:e}),y=()=>({type:n.ID(),isOptional:!1,isArray:!0}),o=()=>({type:n.Int_unsecure(),isOptional:!1}),I=(e=!1)=>({type:n.String_unsecure(),isOptional:e}),i=(e,t=300)=>typeof e==="string"&&e.length<=t&&/^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(e),r=(e)=>Number.isSafeInteger(e)&&Number(e)>=0,S={profileRef:s(),sourceIdentityRef:s(),identityKind:{type:l,isOptional:!1},expectedRevision:o(),idempotencyKey:s()};class f extends p{getZod(){return super.getZod().strict().superRefine((e,t)=>{if(!i(e.profileRef)||!i(e.sourceIdentityRef)||!i(e.idempotencyKey,200))t.addIssue({code:"custom",message:"references must be bounded"});if(!r(e.expectedRevision))t.addIssue({code:"custom",path:["expectedRevision"],message:"revision must be nonnegative"})})}}export const SupportIdentityObservationInputModel=new f({name:"SupportIdentityObservationInputV1",fields:S});const b={profileRef:s(),cursor:s(!0),limit:o(),watermark:I(!0)};class m extends p{getZod(){return super.getZod().strict().superRefine((e,t)=>{if(!i(e.profileRef)||e.cursor&&!i(e.cursor))t.addIssue({code:"custom",message:"references must be bounded"});if(!Number.isSafeInteger(e.limit)||Number(e.limit)<1||Number(e.limit)>100)t.addIssue({code:"custom",path:["limit"],message:"limit must be 1..100"});if(e.watermark&&!Number.isFinite(Date.parse(e.watermark)))t.addIssue({code:"custom",path:["watermark"],message:"watermark must be a timestamp"})})}}export const SupportIdentityReviewInputModel=new m({name:"SupportIdentityReviewInputV1",fields:b});const h={mergeRef:s(),sourceProfileRef:s(),targetProfileRef:s(),candidateRefs:y(),expectedSourceRevision:o(),expectedTargetRevision:o(),decisionRef:s(),idempotencyKey:s()};class a extends p{getZod(){return super.getZod().strict().superRefine((e,t)=>{if([e.mergeRef,e.sourceProfileRef,e.targetProfileRef,e.decisionRef].some((c)=>!i(c))||!i(e.idempotencyKey,200))t.addIssue({code:"custom",message:"references must be bounded"});if(e.sourceProfileRef===e.targetProfileRef)t.addIssue({code:"custom",path:["targetProfileRef"],message:"profiles must differ"});const d=e.candidateRefs??[];if(d.length===0||d.length>100||new Set(d).size!==d.length||d.some((c)=>!i(c)))t.addIssue({code:"custom",path:["candidateRefs"],message:"candidate references must be unique and bounded"});if(!r(e.expectedSourceRevision)||!r(e.expectedTargetRevision))t.addIssue({code:"custom",message:"revisions must be nonnegative"})})}}export const SupportIdentityMergeInputModel=new a({name:"SupportIdentityMergeInputV1",fields:h});const v={mergeRef:s(),expectedRevision:o(),expectedSourceRevision:o(),expectedTargetRevision:o(),decisionRef:s(),idempotencyKey:s()};class u extends p{getZod(){return super.getZod().strict().superRefine((e,t)=>{if(!i(e.mergeRef)||!i(e.decisionRef)||!i(e.idempotencyKey,200))t.addIssue({code:"custom",message:"references must be bounded"});if(!r(e.expectedRevision)||!r(e.expectedSourceRevision)||!r(e.expectedTargetRevision))t.addIssue({code:"custom",path:["expectedRevision"],message:"revision must be nonnegative"})})}}export const SupportIdentityMergeReversalInputModel=new u({name:"SupportIdentityMergeReversalInputV1",fields:v});export*from"./identity-resolution-output-schemas.js";

package/dist/node/customer-support/identity-resolution.js

@@ -0,0 +1,18 @@
+import{docRef as e}from"../docs/registry.js";export const SUPPORT_IDENTITY_KINDS=["email","phone","external-id"],SUPPORT_IDENTITY_CANDIDATE_STATES=["active","merged","revoked"],SupportIdentityResolutionDocBlock={id:"docs.customer-support.identity-resolution",title:"SupportOS identity resolution",summary:"Scoped-hash identity matching with explainable, governed, reversible merge edges.",kind:"reference",visibility:"public",route:"/docs/customer-support/identity-resolution",tags:["supportos","identity","privacy","governance","deduplication"],body:`# SupportOS identity resolution
+
+SupportOS never accepts or persists raw email addresses, phone numbers, or
+provider identifiers for matching. An injected server-side evidence port
+resolves an opaque source identity into a tenant/workspace-scoped lookup hash,
+key version, evidence reference, and short expiry. Hashes are never returned by
+public queries or emitted in events.
+
+Matches are candidates, not automatic merges. Operators review redacted profile
+and candidate references. Merge and reversal operations require exact,
+state-bound governance decisions covering scope, profiles, candidates, digest,
+and expiry. A merge creates an immutable reversible graph edge; it does not copy,
+delete, or rewrite profile fields or CommunicationOS identities.
+
+Every mutation is idempotent and revision-fenced. Evidence is immutable,
+tenant/workspace authority comes only from authenticated server context, and
+key rotation must preserve version-addressed lookup until reindexing completes.
+`},SupportIdentityResolutionDocRef=e(SupportIdentityResolutionDocBlock.id);

package/dist/node/customer-support/index.js

@@ -0,0 +1 @@
+export*from"./ai-outcome-evaluation.js";export*from"./ai-outcome-evaluation-events.js";export*from"./ai-outcome-evaluation-operations.js";export*from"./ai-outcome-evaluation-output-schemas.js";export*from"./ai-outcome-evaluation-projection-schemas.js";export*from"./ai-outcome-evaluation-query-schemas.js";export*from"./ai-outcome-evaluation-schemas.js";export*from"./ai-outcome-event-delivery.js";export*from"./ai-outcome-event-delivery-schemas.js";export*from"./ai-outcome-event-digest.js";export*from"./ai-outcome-learning.js";export*from"./ai-outcome-learning-events.js";export*from"./ai-outcome-learning-operations.js";export*from"./ai-outcome-learning-schemas.js";export*from"./attachment-safety.js";export*from"./attachment-safety-operations.js";export*from"./attachment-safety-schemas.js";export*from"./authos-session.js";export*from"./billing-entitlement-events.js";export*from"./billing-entitlement-input-schemas.js";export*from"./billing-entitlement-operations.js";export*from"./billing-entitlement-output-schemas.js";export*from"./billing-entitlements.js";export*from"./capability-matrix.js";export*from"./capability-matrix-evidence.js";export*from"./capability-matrix-registries.js";export*from"./capability-matrix-validation.js";export*from"./case-assignments.js";export*from"./case-cursor.js";export*from"./case-lifecycle.js";export*from"./case-presence.js";export*from"./case-relations.js";export*from"./company-action-events.js";export*from"./company-action-input-schemas.js";export*from"./company-action-operations.js";export*from"./company-action-output-schemas.js";export*from"./company-action-plans.js";export*from"./core.js";export*from"./crypto-lifecycle.js";export*from"./crypto-rotation.js";export*from"./crypto-rotation-drill.js";export*from"./crypto-rotation-drill-events.js";export*from"./crypto-rotation-drill-input-schemas.js";export*from"./crypto-rotation-drill-operations.js";export*from"./crypto-rotation-drill-output-schemas.js";export*from"./crypto-rotation-drill-schema-primitives.js";export*from"./crypto-rotation-operations.js";export*from"./crypto-rotation-schemas.js";export*from"./csat.js";export*from"./csat-input-digest.js";export*from"./csat-invitation-job-schemas.js";export*from"./csat-invitation-jobs.js";export*from"./csat-operation-schemas.js";export*from"./csat-operations.js";export*from"./csat-survey-events.js";export*from"./csat-survey-operations.js";export*from"./csat-survey-schemas.js";export*from"./csat-surveys.js";export*from"./customer-session-consent.js";export*from"./customer-session-consent-operations.js";export*from"./customer-session-consent-output-schemas.js";export*from"./customer-session-consent-schemas.js";export*from"./customer-support.feature.js";export*from"./data-lifecycle.js";export*from"./data-lifecycle-events.js";export*from"./data-lifecycle-input-schemas.js";export*from"./data-lifecycle-operations.js";export*from"./data-lifecycle-output-schemas.js";export*from"./errors.js";export*from"./event-validation.js";export*from"./events.js";export*from"./export-artifact-access.js";export*from"./export-artifact-access-schemas.js";export*from"./export-artifact-event-schemas.js";export*from"./export-artifact-lifecycle.js";export*from"./export-artifact-lifecycle-schemas.js";export*from"./export-artifact-storage.js";export*from"./export-events.js";export*from"./export-input-schemas.js";export*from"./export-operations.js";export*from"./export-output-schemas.js";export*from"./export-schemas.js";export*from"./exports.js";export*from"./identity-resolution.js";export*from"./identity-resolution-operations.js";export*from"./identity-resolution-output-schemas.js";export*from"./identity-resolution-schemas.js";export*from"./internal-note-operations.js";export*from"./internal-note-schemas.js";export*from"./internal-notes.js";export*from"./job-runtime.js";export*from"./knowledge-authority.js";export*from"./knowledge-authority-digest.js";export*from"./knowledge-authority-operations.js";export*from"./knowledge-authority-schemas.js";export*from"./live-chat-binding-activity-digest.js";export*from"./live-chat-continuity.js";export*from"./live-chat-continuity-events.js";export*from"./live-chat-continuity-operations.js";export*from"./live-chat-continuity-schemas.js";export*from"./membership-capabilities.js";export*from"./membership-operation-schemas.js";export*from"./membership-operations.js";export*from"./memberships.js";export*from"./metadata.js";export*from"./metadata-operations.js";export*from"./metadata-output-schemas.js";export*from"./metadata-schemas.js";export*from"./notification-operations.js";export*from"./notification-output-schemas.js";export*from"./notification-schemas.js";export*from"./notifications.js";export*from"./opa-handoff-operations.js";export*from"./opa-handoff-schemas.js";export*from"./opa-handoffs.js";export*from"./operations.js";export*from"./platform-authority.js";export*from"./platform-authority-bindings.js";export*from"./platform-ports.js";export*from"./policies.js";export*from"./ports.js";export*from"./provider.js";export*from"./report-export.js";export*from"./report-export-events.js";export*from"./report-export-operations.js";export*from"./report-export-schemas.js";export*from"./reporting.js";export*from"./reporting-doc.js";export*from"./reporting-events.js";export*from"./reporting-operations.js";export*from"./reporting-schemas.js";export*from"./routing-administration.js";export*from"./routing-operation-schemas.js";export*from"./routing-operations.js";export*from"./search-view-operations.js";export*from"./search-view-output-schemas.js";export*from"./search-view-schemas.js";export*from"./search-views.js";export*from"./service-profile.js";export*from"./service-profile-operations.js";export*from"./service-profile-schemas.js";export*from"./signed-webhook-events.js";export*from"./signed-webhook-input-schemas.js";export*from"./signed-webhook-operations.js";export*from"./signed-webhook-output-schemas.js";export*from"./signed-webhook-ports.js";export*from"./signed-webhook-schema-primitives.js";export*from"./signed-webhook-schemas.js";export*from"./signed-webhook-wire.js";export*from"./signed-webhook-wire-schema.js";export*from"./signed-webhooks.js";export*from"./skills-routing.js";export*from"./skills-routing-operations.js";export*from"./skills-routing-output-schemas.js";export*from"./skills-routing-schemas.js";export*from"./sla-administration.js";export*from"./sla-operation-schemas.js";export*from"./sla-operations.js";export*from"./sla-policy-operation-schemas.js";export*from"./sla-schema-validation.js";export*from"./slo-incident.js";export*from"./slo-incident-alert.js";export*from"./slo-incident-alert-input-schemas.js";export*from"./slo-incident-assessment-input-schemas.js";export*from"./slo-incident-assessment-output-schemas.js";export*from"./slo-incident-doc.js";export*from"./slo-incident-event-delivery.js";export*from"./slo-incident-event-schemas.js";export*from"./slo-incident-event-types.js";export*from"./slo-incident-events.js";export*from"./slo-incident-input-schemas.js";export*from"./slo-incident-operation-output-schemas.js";export*from"./slo-incident-operations.js";export*from"./slo-incident-output-schemas.js";export*from"./slo-incident-ports.js";export*from"./slo-incident-profile.js";export*from"./slo-incident-results.js";export*from"./slo-incident-schema-support.js";export*from"./slo-qualification-authorization.js";export*from"./slo-qualification-authorization-schemas.js";export*from"./slo-qualification-plan.js";export*from"./workspace-administration.js";export*from"./workspace-brand-locale-residency.js";export*from"./workspace-brand-locale-residency-events.js";export*from"./workspace-brand-locale-residency-operations.js";export*from"./workspace-brand-locale-residency-schema-validation.js";export*from"./workspace-brand-locale-residency-schemas.js";export*from"./workspace-migration.js";export*from"./workspace-migration-operations.js";export*from"./workspace-migration-schemas.js";export*from"./workspace-onboarding.js";export*from"./workspace-onboarding-operations.js";export*from"./workspace-onboarding-schemas.js";export*from"./workspace-operation-schemas.js";export*from"./workspace-operations.js";

package/dist/node/customer-support/internal-note-operations.js

@@ -0,0 +1 @@
+import{defineCommand as n,defineQuery as r}from"../operations/index.js";import{InternalNoteComposeInput as p,InternalNoteCompositionOutput as i,InternalNoteCreateInput as s,InternalNoteDeliveryInput as u,InternalNoteListInput as c,InternalNoteListOutput as l,InternalNoteMutationOutput as m,InternalNoteReconciliationGetInput as I,InternalNoteReconciliationProjection as d}from"./internal-note-schemas.js";import{SupportInternalNotesDocRef as N}from"./internal-notes.js";import{supportOperationErrors as t}from"./operation-schemas.js";const o=(a,e)=>({key:a,version:"1.0.0",title:e,description:e,goal:e,context:"Tenant, workspace, and actor authority come from the authenticated SupportOS grant. CommunicationOS retains note content.",domain:"customer-support",owners:["platform.support"],tags:["support","supportos","internal-note","privacy"],stability:"experimental",docId:[N]});export const SupportInternalNoteCreateCommand=n({meta:o("support.case.internal-note.create","Create internal-note evidence"),io:{input:s,output:m,errors:t},policy:{auth:"user",pii:[]}}),SupportInternalNoteComposeCommand=n({meta:o("support.case.internal-note.compose","Compose a private internal note through CommunicationOS"),io:{input:p,output:i,errors:t},policy:{auth:"user",pii:["body"]}}),SupportInternalNoteReconcileCommand=n({meta:o("support.case.internal-note.reconcile","Reconcile redacted CommunicationOS internal-note delivery evidence"),io:{input:u,output:i,errors:t},policy:{auth:"admin",pii:[]}}),SupportInternalNoteReconciliationGetQuery=r({meta:o("support.case.internal-note.reconciliation.get","Get internal-note reconciliation state"),io:{input:I,output:d,errors:t},policy:{auth:"user",pii:[]}}),SupportInternalNoteListQuery=r({meta:o("support.case.internal-note.list","List internal-note evidence"),io:{input:c,output:l,errors:t},policy:{auth:"user",pii:[]}}),supportInternalNoteOperations=[SupportInternalNoteComposeCommand,SupportInternalNoteCreateCommand,SupportInternalNoteReconcileCommand,SupportInternalNoteReconciliationGetQuery,SupportInternalNoteListQuery];

package/dist/node/customer-support/internal-note-schemas.js

@@ -0,0 +1 @@
+import{EnumType as r,ScalarTypeEnum as n,SchemaModel as t}from"@lssm/lib.schema";const p=new r("SupportInternalNoteVisibility",["internal"]),e=()=>({type:n.ID(),isOptional:!1}),a=()=>({type:n.ID(),isOptional:!1,isArray:!0}),o=()=>({type:n.Int_unsecure(),isOptional:!1}),i=(s=!1)=>({type:n.String_unsecure(),isOptional:s});export const InternalNoteReconciliationStatus=new r("SupportInternalNoteReconciliationStatus",["intent-created","communication-created","completed","needs-review","failed"]),InternalNoteComposeInput=new t({name:"SupportInternalNoteComposeInputV1",fields:{caseRef:e(),body:i(),expectedCaseRevision:o(),idempotencyKey:e()}}),InternalNoteDeliveryInput=new t({name:"SupportInternalNoteDeliveryInputV1",fields:{intentRef:e(),communicationNoteRef:e(),communicationEvidenceRef:e(),deliveryRef:e(),communicationGrantEvidenceRef:e(),idempotencyKey:e()}}),InternalNoteCreateInput=new t({name:"SupportInternalNoteCreateInputV1",fields:{caseRef:e(),communicationNoteRef:e(),communicationEvidenceRef:e(),expectedCaseRevision:o(),idempotencyKey:e(),policyRefs:a(),evidenceRefs:a()}}),InternalNoteListInput=new t({name:"SupportInternalNoteListInputV1",fields:{caseRef:e(),cursor:{type:n.String_unsecure(),isOptional:!0},limit:o(),watermark:{type:n.String_unsecure(),isOptional:!0}}}),InternalNoteProjection=new t({name:"SupportInternalNoteProjectionV1",fields:{noteRef:e(),caseRef:e(),communicationNoteRef:e(),communicationEvidenceRef:e(),actorRef:e(),visibility:{type:p,isOptional:!1},caseRevision:o(),revision:o(),policyRefs:a(),evidenceRefs:a(),occurredAt:{type:n.String_unsecure(),isOptional:!1}}}),InternalNoteMutationOutput=new t({name:"SupportInternalNoteMutationOutputV1",fields:{resourceRef:e(),revision:o(),receiptRef:e(),eventRef:e(),projection:{type:InternalNoteProjection,isOptional:!1}}}),InternalNoteReconciliationProjection=new t({name:"SupportInternalNoteReconciliationProjectionV1",fields:{intentRef:e(),caseRef:e(),actorRef:e(),expectedCaseRevision:o(),status:{type:InternalNoteReconciliationStatus,isOptional:!1},revision:o(),policyDecisionRef:e(),governanceEvidenceRef:e(),policyExpiresAt:i(),communicationNoteRef:{...e(),isOptional:!0},communicationEvidenceRef:{...e(),isOptional:!0},deliveryRef:{...e(),isOptional:!0},noteRef:{...e(),isOptional:!0},failureCode:i(!0),createdAt:i(),updatedAt:i()}}),InternalNoteCompositionOutput=new t({name:"SupportInternalNoteCompositionOutputV1",fields:{reconciliation:{type:InternalNoteReconciliationProjection,isOptional:!1},note:{type:InternalNoteMutationOutput,isOptional:!0}}}),InternalNoteReconciliationGetInput=new t({name:"SupportInternalNoteReconciliationGetInputV1",fields:{intentRef:e()}}),InternalNoteListOutput=new t({name:"SupportInternalNoteListOutputV1",fields:{items:{type:InternalNoteProjection,isOptional:!1,isArray:!0},nextCursor:{type:n.String_unsecure(),isOptional:!0},watermark:{type:n.String_unsecure(),isOptional:!1}}}),InternalNoteCreatedEventPayload=new t({name:"SupportInternalNoteCreatedEventPayloadV1",fields:{workspaceRef:e(),resourceRef:e(),correlationRef:e(),receiptRef:e(),...InternalNoteProjection.config.fields}}),InternalNoteReconciliationUpdatedEventPayload=new t({name:"SupportInternalNoteReconciliationUpdatedEventPayloadV1",fields:{workspaceRef:e(),resourceRef:e(),correlationRef:e(),intentRef:e(),fromStatus:{type:InternalNoteReconciliationStatus,isOptional:!0},toStatus:{type:InternalNoteReconciliationStatus,isOptional:!1},revision:o(),evidenceRefs:a(),occurredAt:i()}});

package/dist/node/customer-support/internal-notes.js

@@ -0,0 +1,27 @@
+import{docRef as s}from"../docs/registry.js";import{SupportAuthorityError as i}from"./errors.js";export const SUPPORT_INTERNAL_NOTE_READ_PERMISSION="support.case.read",SUPPORT_INTERNAL_NOTE_WRITE_PERMISSION="support.case.write",SUPPORT_INTERNAL_NOTE_RECONCILE_PERMISSION="support.internal-note.reconcile";export function encodeSupportInternalNoteCursor(e){a(e.occurredAt,e.noteRef);return encodeURIComponent(JSON.stringify([e.occurredAt,e.noteRef]))}export function decodeSupportInternalNoteCursor(e){if(!e||e.length>2048)throw n();try{const t=JSON.parse(decodeURIComponent(e));if(!Array.isArray(t)||t.length!==2)throw n();const[o,r]=t;if(typeof o!=="string"||typeof r!=="string")throw n();a(o,r);return{occurredAt:o,noteRef:r}}catch(t){if(t instanceof i)throw t;throw n(t)}}function a(e,t){if(!Number.isFinite(Date.parse(e))||!c(t))throw n()}function c(e){return/^[A-Za-z0-9][A-Za-z0-9._:-]{0,199}$/.test(e)}function n(e){return new i("VALIDATION_FAILED","SupportOS internal-note cursor is invalid.",{cause:e})}export const SupportInternalNotesDocBlock={id:"docs.customer-support.internal-notes",title:"SupportOS internal-note evidence",summary:"Private immutable case-note evidence without duplicating CommunicationOS message content.",kind:"reference",visibility:"public",route:"/docs/customer-support/internal-notes",tags:["supportos","cases","notes","communicationos","privacy"],body:`# SupportOS internal-note evidence
+
+CommunicationOS remains authoritative for private note content. SupportOS stores
+only bounded note and evidence references, actor and case revision fencing,
+policy/evidence references, and an immutable timestamp. Note bodies are rejected
+from the semantic contract, persistence, events, telemetry, and list projection.
+
+The compose operation is the sole exception at the transport boundary: SupportOS
+may forward a bounded body directly to CommunicationOS, but never persists,
+events, logs, traces, or returns it. Before forwarding, SupportOS persists a
+body-free intent bound to authenticated scope, case revision, idempotency, and a
+server-issued policy decision. CommunicationOS emits a redacted, intent-bound
+delivery that SupportOS can reconcile after crashes without recovering content.
+
+Creation requires a server-derived workspace scope, case-write permission,
+idempotency, the current case revision, and a CommunicationOS verifier receipt
+that proves the referenced note is private and linked to the same case. Missing,
+mismatched, public, or unavailable verification fails closed. Lists require
+case-read permission, use a bounded keyset cursor, and remain pinned to a stable
+watermark.
+
+Reconciliation is idempotent and explicit. Expired or revoked policy, stale case
+revision, mismatched scope/case/actor, and unavailable dependencies produce a
+visible needs-review or failed state; they never silently attach or discard a
+CommunicationOS note. Composer, delivery, reconciliation worker, and read paths
+remain behind independent global-and-workspace rollout controls.
+`},SupportInternalNotesDocRef=s(SupportInternalNotesDocBlock.id);

package/dist/node/customer-support/job-runtime.js

@@ -0,0 +1,13 @@
+import{docRef as n}from"../docs/registry.js";export const SupportDurableJobContractDocBlock={id:"docs.customer-support.durable-job-contract",title:"SupportOS durable job contract",summary:"Fenced, tenant-scoped background work for managed and self-hosted cells.",kind:"reference",visibility:"public",route:"/docs/customer-support/durable-jobs",tags:["supportos","operations","jobs"],body:`# SupportOS durable jobs
+
+Claims are bounded and carry monotonically increasing fencing tokens. Completion,
+retry, pause, and dead-letter settlement reject stale or expired leases. Pause
+returns deliberately disabled work to the queue without consuming an attempt.
+Abort signals
+cancel active claims; an aborted handler leaves its lease unsettled for
+expiry-based recovery. Delivery is at-least-once: handlers pass a stable effect
+idempotency key to every downstream mutation. Payloads remain protected
+references, and database time is authoritative for lease validity. Export
+artifact cleanup uses the dedicated export.artifact.cleanup kind so exact-version
+deletion, tombstones, retries, and readiness remain independently observable.
+`},SupportDurableJobContractDocRef=n(SupportDurableJobContractDocBlock.id),SUPPORT_JOB_KINDS=["webhook.process","webhook.deliver","provider.backfill","provider.reconcile","provider.outbox","sla.clock","case.unsnooze","notification.deliver","retention.enforce","erasure.execute","export.generate","export.artifact.cleanup","sop.health-evaluate","sop.drift-detect","ai.evaluate","qualification.evaluate","qualification.event.publish","crypto.reencrypt","crypto.rotation-drill"],SUPPORT_JOB_IMMEDIATE_RUN_AFTER="1970-01-01T00:00:00.000Z";export function adaptLegacySupportJobPort(r,t){return{enqueue:async(e)=>{if(!a(e.kind))throw Error("Legacy SupportJobPort kind is not allowlisted.");const o=await t.resolve(e);if(o.scope.workspaceRef!==e.workspaceRef||!o.jobRef||!o.effectIdempotencyKey)throw Error("Legacy SupportJobPort policy failed closed.");return r.enqueue({scope:o.scope,jobRef:o.jobRef,kind:e.kind,payloadRef:e.payloadRef,idempotencyKey:e.idempotencyKey,effectIdempotencyKey:o.effectIdempotencyKey,runAfter:e.runAfter??SUPPORT_JOB_IMMEDIATE_RUN_AFTER})}}}function a(r){return SUPPORT_JOB_KINDS.some((t)=>t===r)}

package/dist/node/customer-support/knowledge-authority-citation-schema.js

@@ -0,0 +1 @@
+import{StrictSessionSchema as r}from"./customer-session-schema-support.js";import{knowledgeId as o,knowledgeText as t,validKnowledgeRef as c}from"./knowledge-authority-schema-primitives.js";const s={citationRef:o(),evidenceRef:o(),sourceVersionRef:o(),fragmentRef:o(),locatorRef:o(),redactionDecisionRef:o(),sourceContentFingerprint:t(),viewerProjectionFingerprint:t()};class i extends r{getZod(){return super.getZod().strict().superRefine((e,n)=>{if(![e.citationRef,e.evidenceRef,e.sourceVersionRef,e.fragmentRef,e.locatorRef,e.redactionDecisionRef].every(c))n.addIssue({code:"custom",message:"citation refs invalid"})})}}export const SupportKnowledgeCitationProjectionModel=new i({name:"SupportKnowledgeCitationProjectionV1",fields:s});

package/dist/node/customer-support/knowledge-authority-digest.js

@@ -0,0 +1 @@
+import{sha256Hex as o}from"@lssm/lib.crypto-utils";import{canonicalJsonString as e}from"../rich-reference/canonical-serializer.js";export function supportKnowledgeResultDigest(t){return n({kind:"support-knowledge-result",projection:t})}function n(t){return`sha256:${o(e(t))}`}

package/dist/node/customer-support/knowledge-authority-operations.js

@@ -0,0 +1 @@
+import{defineQuery as r}from"../operations/index.js";import{SupportKnowledgeQueryInputModel as t,SupportKnowledgeQueryResultModel as n}from"./knowledge-authority-schemas.js";import{supportOperationErrors as p}from"./operation-schemas.js";const s=(o,e)=>({key:o,version:"1.0.0",title:e,description:`${e} with pinned Knowledge-owned evidence.`,goal:e,context:"SupportOS stores body-free query receipts; Knowledge owns authorized retrieval, snapshot watermarks, redaction, and citations.",domain:"customer-support",owners:["platform.support","platform.knowledge"],tags:["support","knowledge","grounding","provenance"],stability:"experimental"});export const SupportKnowledgeQuery=r({meta:s("support.knowledge.query","Query grounded support knowledge"),io:{input:t,output:n,errors:p},policy:{auth:"user",pii:["query"]}}),supportKnowledgeOperations=[SupportKnowledgeQuery];

package/dist/node/customer-support/knowledge-authority-schema-primitives.js

@@ -0,0 +1 @@
+import{EnumType as t,ScalarTypeEnum as n}from"@lssm/lib.schema";import{SUPPORT_KNOWLEDGE_QUERY_MODES as r}from"./knowledge-authority.js";export const KnowledgeMode=new t("SupportKnowledgeQueryMode",[...r]),KnowledgeStatus=new t("SupportKnowledgeAnswerStatus",["answered","abstained","degraded"]),knowledgeId=(e=!1)=>({type:n.ID(),isOptional:e}),knowledgeText=(e=!1)=>({type:n.String_unsecure(),isOptional:e}),knowledgeInteger=()=>({type:n.Int_unsecure(),isOptional:!1}),knowledgeIds=()=>({type:n.ID(),isOptional:!1,isArray:!0}),validKnowledgeRef=(e)=>typeof e==="string"&&e.length<=300&&/^[A-Za-z0-9][A-Za-z0-9._:@-]*$/.test(e),validKnowledgeRefs=(e,o)=>e.length<=o&&new Set(e).size===e.length&&e.every(validKnowledgeRef);

package/dist/node/customer-support/knowledge-authority-schemas.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as b,SchemaModel as l}from"@lssm/lib.schema";import{StrictSessionSchema as x}from"./customer-session-schema-support.js";import{SupportKnowledgeCitationProjectionModel}from"./knowledge-authority-citation-schema.js";import{knowledgeId as t,knowledgeIds as a,knowledgeInteger as f,KnowledgeMode as R,KnowledgeStatus as F,knowledgeText as g,validKnowledgeRef as s,validKnowledgeRefs as p}from"./knowledge-authority-schema-primitives.js";const k={queryRef:t(),bindingRef:t(),mode:{type:R,isOptional:!1},query:g(),locale:g(),maximumCitations:f(),expectedBindingRevision:f(),expectedKnowledgeWatermarkRef:t(),idempotencyKey:t()},K={bindingRef:t(),bindingRevision:f(),allowedSpaceRefs:a(),policyRef:t(),policyVersion:f(),knowledgeWatermarkRef:t(),authorityEvidenceRef:t()};class m extends l{getZod(){return super.getZod().strict().superRefine((e,o)=>{const n=e.allowedSpaceRefs??[];if(!s(e.bindingRef)||!s(e.policyRef)||!s(e.knowledgeWatermarkRef)||!s(e.authorityEvidenceRef)||!p(n,32)||n.length<1||n.length>32||n.join()!==[...n].sort().join()||new Set(n).size!==n.length||!Number.isSafeInteger(e.bindingRevision)||Number(e.bindingRevision)<1||!Number.isSafeInteger(e.policyVersion)||Number(e.policyVersion)<1)o.addIssue({code:"custom",message:"binding is invalid"})})}}export const SupportKnowledgeSpaceBindingModel=new m({name:"SupportKnowledgeSpaceBindingV1",fields:K});class u extends l{getZod(){return super.getZod().strict().superRefine((e,o)=>{if(!s(e.queryRef)||!s(e.bindingRef)||!s(e.expectedKnowledgeWatermarkRef)||!s(e.idempotencyKey)||!Number.isSafeInteger(e.maximumCitations)||Number(e.maximumCitations)<1||Number(e.maximumCitations)>20||!Number.isSafeInteger(e.expectedBindingRevision)||Number(e.expectedBindingRevision)<1||typeof e.query!=="string"||e.query.trim().length<1||new TextEncoder().encode(e.query).byteLength>4096||typeof e.locale!=="string"||e.locale.length>35||!/^[A-Za-z]{2,8}(?:-[A-Za-z0-9]{1,8}){0,3}$/.test(e.locale))o.addIssue({code:"custom",message:"query bounds are invalid"})})}}export const SupportKnowledgeQueryInputModel=new u({name:"SupportKnowledgeQueryInputV1",fields:k});export{SupportKnowledgeCitationProjectionModel};const q={tenantRef:t(),workspaceRef:t(),queryRef:t(),bindingRef:t(),bindingRevision:f(),allowedSpaceRefs:a(),mode:{type:R,isOptional:!1},status:{type:F,isOptional:!1},answerRef:t(!0),citations:{type:SupportKnowledgeCitationProjectionModel,isOptional:!1,isArray:!0},sourceVersionRefs:a(),resultRefs:a(),knowledgeWatermarkRef:t(),requestDigest:g(),retrievalEvidenceRef:t(),authorizationDecisionRef:t(),resultDigest:g(),recordedAt:g(),evidenceRefs:a(),knowledgeAuthorizesAction:{type:b.Boolean(),isOptional:!1}};class w extends l{getZod(){return super.getZod().strict().superRefine((e,o)=>{const n=e.citations??[],d=e.sourceVersionRefs??[],r=e.allowedSpaceRefs??[],c=e.resultRefs??[],S=[...new Set(n.map((i)=>i.sourceVersionRef))].sort(),h=[...e.answerRef?[e.answerRef]:[],...n.map((i)=>i.citationRef)].sort();if(![e.tenantRef,e.workspaceRef,e.queryRef,e.bindingRef,e.answerRef,e.knowledgeWatermarkRef,e.retrievalEvidenceRef,e.authorizationDecisionRef].every((i)=>i===void 0||s(i))||!p(r,32)||!p(d,64)||!p(c,64)||!p(e.evidenceRefs??[],64)||e.status==="answered"!==(e.answerRef!==void 0)||e.status==="answered"&&(n.length<1||d.length<1||c.length<2)||n.length>20||r.length<1||r.length>32||r.join()!==[...r].sort().join()||new Set(r).size!==r.length||new Set(d).size!==d.length||d.join()!==S.join()||new Set(c).size!==c.length||c.join()!==h.join()||n.some((i)=>!d.includes(String(i.sourceVersionRef)))||n.some((i)=>!/^sha256:[a-f0-9]{64}$/.test(String(i.sourceContentFingerprint))||!/^sha256:[a-f0-9]{64}$/.test(String(i.viewerProjectionFingerprint)))||!Number.isSafeInteger(e.bindingRevision)||Number(e.bindingRevision)<1||!/^sha256:[a-f0-9]{64}$/.test(String(e.requestDigest))||!/^sha256:[a-f0-9]{64}$/.test(String(e.resultDigest))||!Number.isFinite(Date.parse(String(e.recordedAt)))||(e.evidenceRefs?.length??0)<2||(e.evidenceRefs?.length??0)>64||e.knowledgeAuthorizesAction!==!1)o.addIssue({code:"custom",message:"answer evidence is invalid"})})}}export const SupportKnowledgeAnswerProjectionModel=new w({name:"SupportKnowledgeAnswerProjectionV1",fields:q});const M={projection:{type:SupportKnowledgeAnswerProjectionModel,isOptional:!1},receiptRef:t()};class y extends x{getZod(){return super.getZod().strict().superRefine((e,o)=>{if(!s(e.receiptRef))o.addIssue({code:"custom",message:"receipt ref invalid"})})}}export const SupportKnowledgeQueryResultModel=new y({name:"SupportKnowledgeQueryResultV1",fields:M});

package/dist/node/customer-support/knowledge-authority.js

@@ -0,0 +1 @@
+export const SUPPORT_KNOWLEDGE_QUERY_MODES=["search","help","copilot"];

package/dist/node/customer-support/live-chat-binding-activity-digest.js

@@ -0,0 +1 @@
+import{sha256Hex as r}from"@lssm/lib.crypto-utils";import{canonicalJsonString as t}from"../rich-reference/canonical-serializer.js";export function supportCustomerLiveChatBindingActivityDigest(e){a(e);return`sha256:${r(t({scope:e.scope,request:{bindingRef:e.bindingRef,sessionRef:e.sessionRef,sessionRevision:e.sessionRevision,caseRef:e.caseRef,caseRevision:e.caseRevision,conversationRef:e.conversationRef,roomRef:e.roomRef,channel:e.channel}}))}`}function a(e){if(!s(e)||!o(e,["bindingRef","caseRef","caseRevision","channel","conversationRef","roomRef","scope","sessionRef","sessionRevision"])||!s(e.scope)||!o(e.scope,["tenantId","workspaceId"])||![e.scope.tenantId,e.scope.workspaceId,e.bindingRef,e.sessionRef,e.caseRef,e.conversationRef,e.roomRef].every(c)||!i(e.sessionRevision,1)||!i(e.caseRevision,0)||e.channel!=="messenger"&&e.channel!=="portal")throw TypeError("Live-chat binding activity digest input is invalid.")}function o(e,n){return Object.keys(e).sort().join("\x00")===n.join("\x00")}function s(e){return typeof e==="object"&&e!==null&&!Array.isArray(e)}function c(e){return typeof e==="string"&&e.length>0&&e.length<=300}function i(e,n){return Number.isSafeInteger(e)&&Number(e)>=n}

package/dist/node/customer-support/live-chat-continuity-events.js

@@ -0,0 +1 @@
+import{defineEvent as t}from"../events.js";import{SupportLiveChatContinuityProjectionModel as o}from"./live-chat-continuity-schemas.js";export const SupportLiveChatContinuityBoundEvent=t({meta:{key:"support.customer-experience.live-chat-continuity.bound",version:"1.0.0",title:"Customer live-chat continuity bound",description:"A short-lived customer session conversation binding was recorded.",domain:"customer-support",owners:["platform.support"],tags:["support","customer","live-chat","security"],stability:"experimental"},payload:o,pii:[]}),supportLiveChatContinuityEvents=[SupportLiveChatContinuityBoundEvent];

package/dist/node/customer-support/live-chat-continuity-operations.js

@@ -0,0 +1 @@
+import{defineCommand as n,defineQuery as r}from"../operations/index.js";import{SupportLiveChatContinuityDocRef as p}from"./live-chat-continuity.js";import{SupportLiveChatContinuityBindInputModel as u,SupportLiveChatContinuityReadInputModel as s,SupportLiveChatContinuityReadOutputModel as a,SupportLiveChatContinuityResultModel as c}from"./live-chat-continuity-schemas.js";import{supportOperationErrors as o}from"./operation-schemas.js";const i=(e,t)=>({key:e,version:"1.0.0",title:t,description:t,goal:t,context:"Binds one live customer session to one exact existing conversation without operator or workload authority.",domain:"customer-support",owners:["platform.support"],tags:["support","customer","live-chat","security"],stability:"experimental",docId:[p]});export const SupportLiveChatContinuityBindCommand=n({meta:i("support.customer-experience.live-chat-continuity.bind","Bind customer live-chat continuity"),io:{input:u,output:c,errors:o},policy:{auth:"anonymous",pii:[]}}),SupportLiveChatContinuityGetQuery=r({meta:i("support.customer-experience.live-chat-continuity.get","Get active customer live-chat continuity"),io:{input:s,output:a,errors:o},policy:{auth:"anonymous",pii:[]}}),supportLiveChatContinuityOperations=[SupportLiveChatContinuityBindCommand,SupportLiveChatContinuityGetQuery];

package/dist/node/customer-support/live-chat-continuity-schemas.js

@@ -0,0 +1 @@
+import{EnumType as u}from"@lssm/lib.schema";import{id as e,ids as m,integer as s,StrictSessionSchema as o,text as d}from"./customer-session-schema-support.js";import{SUPPORT_LIVE_CHAT_CHANNELS as f}from"./live-chat-continuity.js";const a=new u("SupportLiveChatContinuityChannel",[...f]),R={bindingRef:e(),sessionRef:e(),expectedSessionRevision:s(),caseRef:e(),expectedCaseRevision:s(),conversationRef:e(),spaceRef:e(),roomRef:e(),channel:{type:a,isOptional:!1},requestedTtlSeconds:s(),idempotencyKey:e()};class p extends o{getZod(){return super.getZod().superRefine((i,n)=>{const t=Number(i.requestedTtlSeconds);if(!Number.isSafeInteger(t)||t<60||t>900)n.addIssue({code:"custom",path:["requestedTtlSeconds"],message:"TTL must be 60..900 seconds"});if(Number(i.expectedSessionRevision)<1||Number(i.expectedCaseRevision)<0)n.addIssue({code:"custom",path:["expectedSessionRevision"],message:"exact revisions are required"})})}}export const SupportLiveChatContinuityBindInputModel=new p({name:"SupportLiveChatContinuityBindInputV1",fields:R});const l={bindingRef:e(),sessionRef:e(),sessionRevision:s(),caseRef:e(),caseRevision:s(),conversationRef:e(),spaceRef:e(),roomRef:e(),channel:{type:a,isOptional:!1},relationRef:e(),relationRevision:s(),grantedAt:d(),expiresAt:d(),evidenceRefs:m()};class c extends o{getZod(){return super.getZod().superRefine((i,n)=>{const t=Date.parse(String(i.grantedAt)),r=Date.parse(String(i.expiresAt));if(!Number.isSafeInteger(Number(i.sessionRevision))||Number(i.sessionRevision)<1||!Number.isSafeInteger(Number(i.caseRevision))||Number(i.caseRevision)<0||!Number.isSafeInteger(Number(i.relationRevision))||Number(i.relationRevision)<1)n.addIssue({code:"custom",message:"exact revisions are required"});if(!Number.isFinite(t)||!Number.isFinite(r)||r<=t||r-t>900000)n.addIssue({code:"custom",message:"grant lifetime must be positive and at most 15 minutes"});if(!Array.isArray(i.evidenceRefs)||i.evidenceRefs.length!==3||new Set(i.evidenceRefs).size!==3)n.addIssue({code:"custom",path:["evidenceRefs"],message:"session, relation, and communication evidence are required"})})}}export const SupportLiveChatContinuityProjectionModel=new c({name:"SupportLiveChatContinuityProjectionV1",fields:l}),SupportLiveChatContinuityResultModel=new o({name:"SupportLiveChatContinuityResultV1",fields:{binding:{type:SupportLiveChatContinuityProjectionModel,isOptional:!1},receiptRef:e(),eventRef:e()}}),SupportLiveChatContinuityReadInputModel=new o({name:"SupportLiveChatContinuityReadInputV1",fields:{sessionRef:e(),conversationRef:e()}}),SupportLiveChatContinuityReadOutputModel=new o({name:"SupportLiveChatContinuityReadOutputV1",fields:{binding:{type:SupportLiveChatContinuityProjectionModel,isOptional:!0}}});

package/dist/node/customer-support/live-chat-continuity.js

@@ -0,0 +1,9 @@
+import{docRef as e}from"../docs/registry.js";export const SUPPORT_LIVE_CHAT_CHANNELS=["messenger","portal"],SupportLiveChatContinuityDocBlock={id:"docs.customer-support.live-chat-continuity",title:"Customer live-chat continuity",summary:"Short-lived immutable session-to-conversation grants.",kind:"reference",visibility:"public",route:"/docs/customer-support/live-chat-continuity",tags:["supportos","customer","session","live-chat","security"],body:`# Customer live-chat continuity
+
+A customer session may receive a short-lived grant for one exact existing case
+conversation and room. The grant never carries operator, queue, reporting, or
+workload capability. Session rotation, revocation, expiry, or case revision
+change invalidates the grant. Evidence contains opaque references only; message
+bodies and transport tokens are prohibited. Binding requires an independently
+created canonical case/conversation link plus an immutable relation-authority
+receipt; existence of a CommunicationOS room is never ownership evidence.`},SupportLiveChatContinuityDocRef=e(SupportLiveChatContinuityDocBlock.id);

package/dist/node/customer-support/membership-capabilities.js

@@ -0,0 +1 @@
+import{SUPPORT_EXPORT_DOWNLOADS_CAPABILITY as p}from"./export-artifact-access.js";export const SUPPORT_MEMBERSHIP_ROLE_REGISTRY_VERSION="1.11.0",SUPPORT_MEMBERSHIP_ROLES=["support.viewer","support.operator","support.manager","support.service"],SUPPORT_DELEGABLE_CAPABILITIES=["support.admin","support.case.read","support.case.write","support.jobs.enqueue","support.jobs.execute","support.jobs.replay","support.workspace.membership.read","support.workspace.membership.manage","support.workspace.migrate","support.portfolio.read","support.export.redacted","support.export.sensitive","support.export.execute",p,"support.data-lifecycle.read","support.data-lifecycle.manage","support.data-lifecycle.execute","support.ai.use","support.knowledge.read","support.knowledge.copilot","support.webhooks.read","support.webhooks.manage","support.webhooks.dispatch","support.crypto.read","support.crypto.rotate","support.crypto.execute","support.billing.read","support.billing.decide","support.company-actions.read","support.company-actions.manage","support.company-actions.execute","support.ai.outcome-learning.record","support.ai.outcome-learning.review","support.provider.manage","support.integration.manage","support.operations.read","support.operations.manage","support.operations.execute","support.reporting.read","support.reporting.sensitive","support.reporting.manage","support.reporting.execute","support.csat.survey.record","support.decision.read","support.decision.write","support.decision.validate","support.decision.simulate","support.decision.evaluate","support.decision.evidence.read","support.decision.compare"],SUPPORT_PRIVILEGED_CAPABILITIES=["support.admin","support.jobs.execute","support.jobs.replay","support.workspace.membership.manage","support.workspace.migrate","support.export.sensitive","support.export.execute",p,"support.data-lifecycle.manage","support.data-lifecycle.execute","support.ai.use","support.knowledge.copilot","support.webhooks.manage","support.webhooks.dispatch","support.crypto.rotate","support.crypto.execute","support.billing.decide","support.company-actions.manage","support.company-actions.execute","support.ai.outcome-learning.record","support.ai.outcome-learning.review","support.provider.manage","support.integration.manage","support.operations.manage","support.operations.execute","support.reporting.sensitive","support.reporting.manage","support.reporting.execute","support.csat.survey.record","support.decision.write","support.decision.evidence.read"];const r={"support.viewer":["support.case.read","support.workspace.membership.read","support.decision.read","support.decision.validate","support.operations.read","support.reporting.read"],"support.operator":["support.case.read","support.case.write","support.decision.read","support.decision.validate","support.decision.simulate","support.decision.evaluate","support.operations.read","support.reporting.read"],"support.manager":["support.case.read","support.case.write","support.jobs.enqueue","support.portfolio.read","support.export.redacted",p,"support.decision.read","support.decision.write","support.decision.validate","support.decision.simulate","support.decision.evaluate","support.decision.evidence.read","support.decision.compare","support.operations.read","support.operations.manage","support.reporting.read","support.reporting.manage","support.ai.outcome-learning.review","support.crypto.read","support.crypto.rotate","support.billing.read","support.billing.decide","support.company-actions.read","support.company-actions.manage"],"support.service":["support.jobs.enqueue","support.operations.execute","support.reporting.execute","support.csat.survey.record","support.ai.outcome-learning.record","support.webhooks.dispatch","support.crypto.execute","support.billing.decide","support.company-actions.execute"]};export function isSupportMembershipRoleRef(e){return typeof e==="string"&&SUPPORT_MEMBERSHIP_ROLES.includes(e)}export function isSupportDelegableCapability(e){return typeof e==="string"&&SUPPORT_DELEGABLE_CAPABILITIES.includes(e)}export function isSupportPrivilegedCapability(e){return SUPPORT_PRIVILEGED_CAPABILITIES.includes(e)}export function resolveSupportMembershipCapabilities(e){return[...new Set([...e.roleRefs.flatMap((o)=>r[o]),...e.additionalCapabilityRefs])].sort()}

package/dist/node/customer-support/membership-operation-schemas.js

@@ -0,0 +1 @@
+import{EnumType as p,ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{SUPPORT_DELEGABLE_CAPABILITIES as c,SUPPORT_MEMBERSHIP_ROLES as u}from"./membership-capabilities.js";const r=new p("SupportMembershipPrincipalKind",["user","agent","service"]),l=new p("SupportMembershipLifecycle",["active","revoked"]),f=new p("SupportMembershipOperationKey",["support.membership.create","support.membership.grants.replace","support.membership.revoke"]),y=new p("SupportMembershipRoleRef",[...u]),m=new p("SupportDelegableCapability",[...c]),t=()=>({type:e.ID(),isOptional:!1}),s=()=>({type:e.ID(),isOptional:!1,isArray:!0}),o=()=>({type:y,isOptional:!1,isArray:!0}),a=()=>({type:m,isOptional:!1,isArray:!0}),n={principalRef:t(),roleRefs:o(),additionalCapabilityRefs:a(),expectedRevision:{type:e.Int_unsecure(),isOptional:!1},idempotencyKey:t(),policyRefs:s(),evidenceRefs:s(),connectDecisionRef:{type:e.ID(),isOptional:!0}};export const MembershipCreateInput=new i({name:"SupportMembershipCreateInputV1",fields:{...n,principalKind:{type:r,isOptional:!1}}}),MembershipGrantInput=new i({name:"SupportMembershipGrantInputV1",fields:n}),MembershipRevokeInput=new i({name:"SupportMembershipRevokeInputV1",fields:{principalRef:t(),expectedRevision:n.expectedRevision,idempotencyKey:t(),policyRefs:s(),evidenceRefs:s(),connectDecisionRef:n.connectDecisionRef}}),MembershipGetInput=new i({name:"SupportMembershipGetInputV1",fields:{principalRef:t()}}),MembershipListInput=new i({name:"SupportMembershipListInputV1",fields:{cursor:{type:e.String_unsecure(),isOptional:!0},limit:{type:e.Int_unsecure(),isOptional:!1},watermark:{type:e.DateTime(),isOptional:!0}}}),MembershipHistoryInput=new i({name:"SupportMembershipHistoryInputV1",fields:{principalRef:t(),cursor:{type:e.String_unsecure(),isOptional:!0},limit:{type:e.Int_unsecure(),isOptional:!1},watermark:{type:e.DateTime(),isOptional:!0}}}),MembershipProjection=new i({name:"SupportMembershipProjectionV1",fields:{principalRef:t(),principalKind:{type:r,isOptional:!1},lifecycle:{type:l,isOptional:!1},roleRefs:o(),capabilityRefs:a(),roleRegistryVersion:{type:e.String_unsecure(),isOptional:!1},revision:{type:e.Int_unsecure(),isOptional:!1},createdAt:{type:e.String_unsecure(),isOptional:!1},updatedAt:{type:e.String_unsecure(),isOptional:!1},revokedAt:{type:e.String_unsecure(),isOptional:!0}}}),MembershipAuditEventProjection=new i({name:"SupportMembershipAuditEventProjectionV1",fields:{eventRef:t(),operationKey:{type:f,isOptional:!1},principalRef:t(),principalKind:{type:r,isOptional:!1},lifecycle:{type:l,isOptional:!1},roleRefs:o(),capabilityRefs:a(),expectedRevision:{type:e.Int_unsecure(),isOptional:!1},resultingRevision:{type:e.Int_unsecure(),isOptional:!1},actorRef:t(),policyRefs:s(),governanceEvidenceRef:t(),occurredAt:{type:e.String_unsecure(),isOptional:!1}}}),MembershipLifecycleEventPayload=new i({name:"SupportMembershipLifecycleEventPayloadV1",fields:{workspaceRef:t(),resourceRef:t(),correlationRef:t(),receiptRef:t(),revision:{type:e.Int_unsecure(),isOptional:!1},...MembershipAuditEventProjection.config.fields}}),MembershipListOutput=new i({name:"SupportMembershipListOutputV1",fields:{items:{type:MembershipProjection,isOptional:!1,isArray:!0},nextCursor:{type:e.String_unsecure(),isOptional:!0},watermark:{type:e.String_unsecure(),isOptional:!1}}}),MembershipHistoryOutput=new i({name:"SupportMembershipHistoryOutputV1",fields:{items:{type:MembershipAuditEventProjection,isOptional:!1,isArray:!0},nextCursor:{type:e.String_unsecure(),isOptional:!0},watermark:{type:e.String_unsecure(),isOptional:!1}}}),MembershipMutationOutput=new i({name:"SupportMembershipMutationOutputV1",fields:{resourceRef:t(),revision:{type:e.Int_unsecure(),isOptional:!1},receiptRef:t(),eventRef:t(),projection:{type:MembershipProjection,isOptional:!1}}});

package/dist/node/customer-support/membership-operations.js

@@ -0,0 +1 @@
+import{defineCommand as o,defineQuery as s}from"../operations/index.js";import{MembershipCreateInput as u,MembershipGetInput as n,MembershipGrantInput as a,MembershipHistoryInput as h,MembershipHistoryOutput as c,MembershipListInput as b,MembershipListOutput as M,MembershipMutationOutput as i,MembershipProjection as y,MembershipRevokeInput as d}from"./membership-operation-schemas.js";import{SupportMembershipAdministrationDocRef as l}from"./memberships.js";import{supportOperationErrors as t}from"./operation-schemas.js";const e=(p,r)=>({key:p,version:"1.0.0",title:r,description:r,goal:r,context:"Tenant and workspace authority come from the authenticated SupportOS grant.",domain:"customer-support",owners:["platform.support"],tags:["support","supportos","membership","security"],stability:"experimental",docId:[l]}),f=(p,r,m)=>o({meta:e(p,r),io:{input:m,output:i,errors:t},policy:{auth:"user",pii:[]}});export const SupportMembershipCreateCommand=o({meta:e("support.membership.create","Create support membership"),io:{input:u,output:i,errors:t},policy:{auth:"user",pii:[]}}),SupportMembershipGrantReplaceCommand=f("support.membership.grants.replace","Replace support membership grants",a),SupportMembershipRevokeCommand=o({meta:e("support.membership.revoke","Revoke support membership"),io:{input:d,output:i,errors:t},policy:{auth:"user",pii:[]}}),SupportMembershipGetQuery=s({meta:e("support.membership.get","Get support membership"),io:{input:n,output:y,errors:t},policy:{auth:"user",pii:[]}}),SupportMembershipListQuery=s({meta:e("support.membership.list","List support memberships"),io:{input:b,output:M,errors:t},policy:{auth:"user",pii:[]}}),SupportMembershipHistoryQuery=s({meta:e("support.membership.history","List immutable support membership history"),io:{input:h,output:c,errors:t},policy:{auth:"user",pii:[]}}),supportMembershipOperations=[SupportMembershipCreateCommand,SupportMembershipGrantReplaceCommand,SupportMembershipRevokeCommand,SupportMembershipGetQuery,SupportMembershipListQuery,SupportMembershipHistoryQuery];