@lssm/lib.contracts-spec 17.3.2

package/dist/node/decisioning/index.js

@@ -0,0 +1 @@
+export*from"./decisioning.feature.js";export*from"./evaluation.js";export*from"./evaluation-events.js";export*from"./evaluation-evidence-administration.js";export*from"./evaluation-evidence-administration-operations.js";export*from"./evaluation-evidence-administration-schemas.js";export*from"./evaluation-input-schemas.js";export*from"./evaluation-output-schemas.js";export*from"./lifecycle.js";export*from"./lifecycle-events.js";export*from"./lifecycle-operations.js";export*from"./operations.js";export*from"./predicate.js";export*from"./predicate-evaluation.js";export*from"./types.js";export*from"./validation.js";

package/dist/node/decisioning/lifecycle-events.js

@@ -0,0 +1 @@
+import{EnumType as s,ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineEvent as c}from"../events.js";import{DECISION_DEFINITION_LIFECYCLES as a}from"./lifecycle.js";const d=new s("DecisionLifecycleEventState",[...a]);export const DecisionLifecycleEventPayloadModel=new t({name:"DecisionLifecycleEventPayloadV1",fields:{graphRef:{type:e.ID(),isOptional:!1},lifecycle:{type:d,isOptional:!1},draftRevision:{type:e.Int_unsecure(),isOptional:!1},publishedRevision:{type:e.Int_unsecure(),isOptional:!0},receiptRef:{type:e.ID(),isOptional:!1}}});const i=(o,n)=>c({meta:{key:o,version:"1.0.0",title:n,description:n,domain:"decisioning",owners:["platform.core"],tags:["decisioning","lifecycle","audit"],stability:"experimental"},payload:DecisionLifecycleEventPayloadModel,pii:[]});export const decisionLifecycleEvents=[i("decision.definition.created","Decision definition created"),i("decision.draft.saved","Decision draft saved"),i("decision.revision.published","Decision revision published"),i("decision.definition.archived","Decision definition archived")];

package/dist/node/decisioning/lifecycle-input-schemas.d.js

@@ -0,0 +1 @@
+export{};

package/dist/node/decisioning/lifecycle-input-schemas.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as i,SchemaModel as o}from"@lssm/lib.schema";const a={graphRef:{type:i.ID(),isOptional:!1},document:{type:i.JSONObject(),isOptional:!1},idempotencyKey:{type:i.ID(),isOptional:!1}};function r(e,s,t){for(const n of t)if(typeof e[n]!=="string"||!e[n].trim()||e[n].length>200)s.addIssue({code:"custom",path:[n],message:`${n} must be bounded`})}function d(e,s){const t=e.graphRef;if(typeof t!=="string"||!t.trim()||t.length>200||!/^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(t))s.addIssue({code:"custom",path:["graphRef"],message:"graphRef must be a canonical bounded identifier"})}class p extends o{getZod(){return super.getZod().strict().superRefine((e,s)=>{d(e,s);r(e,s,["idempotencyKey"])})}}export const DecisionDefinitionCreateInputModel=new p({name:"DecisionDefinitionCreateInputV2",fields:a});const u={...a,expectedDraftRevision:{type:i.Int_unsecure(),isOptional:!1}};class c extends o{getZod(){return super.getZod().strict().superRefine((e,s)=>{d(e,s);r(e,s,["idempotencyKey"]);const t=e.expectedDraftRevision;if(typeof t!=="number"||!Number.isSafeInteger(t)||t<0)s.addIssue({code:"custom",path:["expectedDraftRevision"],message:"expectedDraftRevision must be non-negative"})})}}export const DecisionDraftSaveInputModel=new c({name:"DecisionDraftSaveInputV2",fields:u});const l={graphRef:{type:i.ID(),isOptional:!1},expectedDraftRevision:{type:i.Int_unsecure(),isOptional:!1},idempotencyKey:{type:i.ID(),isOptional:!1}};class f extends o{getZod(){return super.getZod().strict().superRefine((e,s)=>{d(e,s);r(e,s,["idempotencyKey"]);const t=e.expectedDraftRevision;if(typeof t!=="number"||!Number.isSafeInteger(t)||t<0)s.addIssue({code:"custom",path:["expectedDraftRevision"],message:"expectedDraftRevision must be non-negative"})})}}export const DecisionDefinitionStateInputModel=new f({name:"DecisionDefinitionStateInputV2",fields:l});const m={graphRef:{type:i.ID(),isOptional:!1}};export const DecisionDefinitionGetInputModel=new class extends o{getZod(){return super.getZod().strict().superRefine(d)}}({name:"DecisionDefinitionGetInputV2",fields:m});const g={limit:{type:i.Int_unsecure(),isOptional:!1},cursor:{type:i.String_unsecure(),isOptional:!0},watermark:{type:i.String_unsecure(),isOptional:!0}};export const DecisionDefinitionListInputModel=new class extends o{getZod(){return super.getZod().strict().superRefine((e,s)=>{for(const t of["cursor","watermark"])if(typeof e[t]==="string"&&e[t].length>2000)s.addIssue({code:"custom",path:[t],message:`${t} must be bounded`})}).refine((e)=>typeof e.limit==="number"&&e.limit>=1&&e.limit<=100,{message:"limit must be between 1 and 100"})}}({name:"DecisionDefinitionListInputV2",fields:g});

package/dist/node/decisioning/lifecycle-operations.d.js

@@ -0,0 +1 @@
+export*from"./lifecycle-input-schemas.js";export*from"./lifecycle-output-schemas.js";

package/dist/node/decisioning/lifecycle-operations.js

@@ -0,0 +1,7 @@
+import{docRef as a}from"../docs/registry.js";import{defineCommand as t,defineQuery as s}from"../operations/index.js";import{DecisionDefinitionCreateInputModel as d,DecisionDefinitionGetInputModel as p,DecisionDefinitionListInputModel as u,DecisionDefinitionStateInputModel as c,DecisionDraftSaveInputModel as f}from"./lifecycle-input-schemas.js";import{DecisionDefinitionGetOutputModel as D,DecisionDefinitionListOutputModel as l,DecisionLifecycleMutationOutputModel as o}from"./lifecycle-output-schemas.js";export*from"./lifecycle-input-schemas.js";export*from"./lifecycle-output-schemas.js";export const DecisionLifecycleDocBlock={id:"decision-lifecycle-v2",title:"Decision lifecycle v2",summary:"Revision-fenced drafts and immutable, digest-pinned DecisionGraph publications.",kind:"reference",visibility:"public",route:"/docs/platform/decision-lifecycle-v2",tags:["decisioning","supportos","revisioning","audit"],body:`# Decision lifecycle v2
+
+Decision definitions are workspace-scoped by authenticated server context. Draft
+mutations use optimistic revision fencing and stable idempotency keys. Publishing
+creates an immutable digest-pinned revision; editing never mutates a published
+revision. Lists use fixed watermarks and keyset cursors. Creator JavaScript and
+business effects are not accepted or executed.`},DecisionLifecycleDocRef=a(DecisionLifecycleDocBlock.id);const i=(r,n)=>({key:r,version:"2.0.0",title:n,description:n,goal:n,context:"Decision lifecycle is scope-derived, revision-fenced, and effect-free.",domain:"decisioning",owners:["platform.core"],tags:["decisioning","lifecycle"],stability:"experimental",docs:[DecisionLifecycleDocRef]}),e={NOT_FOUND:{description:"Decision definition was not found.",http:404},SCOPE_DENIED:{description:"Decision authority was denied.",http:403},POLICY_DENIED:{description:"Decision lifecycle policy denied the mutation.",http:403},REVISION_CONFLICT:{description:"Draft revision is stale.",http:409},IDEMPOTENCY_CONFLICT:{description:"Retry input changed.",http:409},VALIDATION_FAILED:{description:"Decision input or graph is invalid.",http:422},DEPENDENCY_DEGRADED:{description:"Decision authority is unavailable.",http:503}};export const DecisionDefinitionCreateCommand=t({meta:i("decision.definition.create","Create decision definition"),io:{input:d,output:o,errors:e},policy:{auth:"user",pii:[]}}),DecisionDraftSaveCommand=t({meta:i("decision.draft.save","Save decision draft"),io:{input:f,output:o,errors:e},policy:{auth:"user",pii:[]}}),DecisionDefinitionPublishCommand=t({meta:i("decision.definition.publish","Publish decision revision"),io:{input:c,output:o,errors:e},policy:{auth:"user",pii:[]}}),DecisionDefinitionArchiveCommand=t({meta:i("decision.definition.archive","Archive decision definition"),io:{input:c,output:o,errors:e},policy:{auth:"user",pii:[]}}),DecisionDefinitionGetQuery=s({meta:i("decision.definition.get","Get decision definition"),io:{input:p,output:D,errors:e},policy:{auth:"user",pii:[]}}),DecisionDefinitionListQuery=s({meta:i("decision.definition.list","List decision definitions"),io:{input:u,output:l,errors:e},policy:{auth:"user",pii:[]}}),decisionLifecycleOperations=[DecisionDefinitionCreateCommand,DecisionDraftSaveCommand,DecisionDefinitionPublishCommand,DecisionDefinitionArchiveCommand,DecisionDefinitionGetQuery,DecisionDefinitionListQuery];

package/dist/node/decisioning/lifecycle-output-schemas.d.js

@@ -0,0 +1 @@
+export{};

package/dist/node/decisioning/lifecycle-output-schemas.js

@@ -0,0 +1 @@
+import{EnumType as n,ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{DECISION_DEFINITION_LIFECYCLES as o}from"./lifecycle.js";const i={graphRef:{type:e.ID(),isOptional:!1},lifecycle:{type:new n("DecisionDefinitionProjectionLifecycle",[...o]),isOptional:!1},draftRevision:{type:e.Int_unsecure(),isOptional:!1},publishedRevision:{type:e.Int_unsecure(),isOptional:!0},draft:{type:e.JSONObject(),isOptional:!1},createdAt:{type:e.String_unsecure(),isOptional:!1},updatedAt:{type:e.String_unsecure(),isOptional:!1}};export const DecisionDefinitionProjectionModel=new class extends t{getZod(){return super.getZod().strict()}}({name:"DecisionDefinitionProjectionV2",fields:i});const l=(({draft:d,...s})=>s)(i);export const DecisionDefinitionSummaryModel=new class extends t{getZod(){return super.getZod().strict()}}({name:"DecisionDefinitionSummaryV2",fields:l});const p={graphKey:{type:e.ID(),isOptional:!1},revision:{type:e.Int_unsecure(),isOptional:!1},digest:{type:e.String_unsecure(),isOptional:!1},document:{type:e.JSONObject(),isOptional:!1},publishedAt:{type:e.String_unsecure(),isOptional:!1},publishedByRef:{type:e.ID(),isOptional:!1}};export const DecisionGraphRevisionOutputModel=new class extends t{getZod(){return super.getZod().strict()}}({name:"DecisionGraphRevisionOutputV2",fields:p});const a={definition:{type:DecisionDefinitionProjectionModel,isOptional:!1},receiptRef:{type:e.ID(),isOptional:!1},eventRef:{type:e.String_unsecure(),isOptional:!1},publishedRevision:{type:DecisionGraphRevisionOutputModel,isOptional:!0}};export const DecisionLifecycleMutationOutputModel=new t({name:"DecisionLifecycleMutationOutputV2",fields:a});const u={definition:{type:DecisionDefinitionProjectionModel,isOptional:!1}};export const DecisionDefinitionGetOutputModel=new t({name:"DecisionDefinitionGetOutputV2",fields:u});const r={items:{type:DecisionDefinitionSummaryModel,isOptional:!1,isArray:!0},nextCursor:{type:e.String_unsecure(),isOptional:!0},watermark:{type:e.String_unsecure(),isOptional:!1}};export const DecisionDefinitionListOutputModel=new t({name:"DecisionDefinitionListOutputV2",fields:r});

package/dist/node/decisioning/lifecycle.js

@@ -0,0 +1 @@
+export const DECISION_DEFINITION_LIFECYCLES=["draft","published","archived"];

package/dist/node/decisioning/operation-metadata.js

@@ -0,0 +1 @@
+export const decisionOperationMetaV1=(e,i)=>({key:e,version:"1.0.0",title:i,description:i,goal:i,context:"Decision graphs are revision-pinned, deterministic, and effect-free.",domain:"decisioning",owners:["platform.core"],tags:["decisioning","deterministic"],stability:"experimental"}),decisionOperationMetaV2=(e,i)=>({...decisionOperationMetaV1(e,i),version:"2.0.0",tags:["decisioning","deterministic","v2"]}),decisionOperationErrorsV1={INVALID_GRAPH:{description:"The graph is invalid.",http:422},REVISION_NOT_FOUND:{description:"The pinned revision was not found.",http:404},DIGEST_MISMATCH:{description:"Replay evidence does not match.",http:409},EVALUATION_LIMIT:{description:"Evaluation exceeded a safe bound.",http:422}},decisionOperationErrorsV2={NOT_FOUND:{description:"Decision evidence was not found.",http:404},SCOPE_DENIED:{description:"Decision authority was denied.",http:403},POLICY_DENIED:{description:"Decision policy denied the operation.",http:403},REVISION_CONFLICT:{description:"The pinned revision changed during the operation.",http:409},VALIDATION_FAILED:{description:"The graph or input is invalid.",http:422},IDEMPOTENCY_CONFLICT:{description:"Retry input changed.",http:409},DEPENDENCY_DEGRADED:{description:"Decision authority is unavailable.",http:503},FEATURE_DISABLED:{description:"Decisioning is disabled.",http:404}};

package/dist/node/decisioning/operations.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as o}from"@lssm/lib.schema";import{defineCommand as i,defineQuery as y}from"../operations/index.js";import{decisionEvidenceAdministrationOperations as V}from"./evaluation-evidence-administration-operations.js";import{DecisionCompareInputModelV2 as f,DecisionEvaluationInputModelV2 as v,DecisionReplayInputModelV2 as D,DecisionRevisionInputModelV2 as O,DecisionSimulationInputModelV2 as x}from"./evaluation-input-schemas.js";import{DecisionAuthoritativeEvaluationOutputModelV2 as h,DecisionCompareOutputModelV2 as E,DecisionReplayOutputModelV2 as C,DecisionSimulationOutputModelV2 as I,DecisionValidationOutputModelV2 as R}from"./evaluation-output-schemas.js";import{decisionLifecycleOperations as p}from"./lifecycle-operations.js";import{decisionOperationErrorsV1 as c,decisionOperationErrorsV2 as t,decisionOperationMetaV1 as r,decisionOperationMetaV2 as n}from"./operation-metadata.js";const S=new o({name:"DecisionRevisionInputV1",fields:{graphRef:{type:e.String_unsecure(),isOptional:!1},revision:{type:e.Int_unsecure(),isOptional:!1}}}),u=new o({name:"DecisionEvaluationInputV1",fields:{graphRef:{type:e.ID(),isOptional:!1},revision:{type:e.Int_unsecure(),isOptional:!1},inputs:{type:e.JSONObject(),isOptional:!1}}}),g=new o({name:"DecisionReplayInputV1",fields:{evaluationRef:{type:e.ID(),isOptional:!1}}}),M=new o({name:"DecisionCompareInputV1",fields:{graphRef:{type:e.ID(),isOptional:!1},fromRevision:{type:e.Int_unsecure(),isOptional:!1},toRevision:{type:e.Int_unsecure(),isOptional:!1}}}),l=new o({name:"DecisionOperationOutputV1",fields:{status:{type:e.String_unsecure(),isOptional:!1},result:{type:e.JSONObject(),isOptional:!1},traceRef:{type:e.String_unsecure(),isOptional:!0}}}),s=(a,d,m)=>y({meta:r(a,d),io:{input:m,output:l,errors:c},policy:{auth:"user",pii:a==="decision.simulate"?["inputs"]:[]}});export const DecisionValidateQueryV1=s("decision.validate","Validate decision graph",S),DecisionSimulateQueryV1=s("decision.simulate","Simulate decision graph",u),DecisionEvaluateCommandV1=i({meta:r("decision.evaluate","Evaluate decision graph"),io:{input:u,output:l,errors:c},policy:{auth:"user",pii:["inputs"]}}),DecisionReplayQueryV1=s("decision.replay","Replay decision evaluation",g),DecisionCompareQueryV1=s("decision.compare","Compare decision revisions",M),DecisionValidateQuery=DecisionValidateQueryV1,DecisionSimulateQuery=DecisionSimulateQueryV1,DecisionEvaluateCommand=DecisionEvaluateCommandV1,DecisionReplayQuery=DecisionReplayQueryV1,DecisionCompareQuery=DecisionCompareQueryV1,DecisionValidateCommandV2=i({meta:n("decision.validate","Validate decision graph"),io:{input:O,output:R,errors:t},policy:{auth:"user",pii:[]},sideEffects:{audit:["decision.validation.completed"]}}),DecisionSimulateCommandV2=i({meta:n("decision.simulate","Simulate decision graph"),io:{input:x,output:I,errors:t},policy:{auth:"user",pii:["inputs"]},sideEffects:{audit:["decision.simulation.completed"]}}),DecisionEvaluateCommandV2=i({meta:n("decision.evaluate","Evaluate decision graph"),io:{input:v,output:h,errors:t},policy:{auth:"user",pii:["inputs"]},sideEffects:{audit:["decision.evaluation.completed"]}}),DecisionReplayCommandV2=i({meta:n("decision.replay","Replay decision evaluation"),io:{input:D,output:C,errors:t},policy:{auth:"user",pii:[]},sideEffects:{audit:["decision.replay.verified"]}}),DecisionCompareCommandV2=i({meta:n("decision.compare","Compare decision revisions"),io:{input:f,output:E,errors:t},policy:{auth:"user",pii:[]},sideEffects:{audit:["decision.revisions.compared"]}}),DecisionValidateQueryV2=DecisionValidateCommandV2,DecisionSimulateQueryV2=DecisionSimulateCommandV2,DecisionReplayQueryV2=DecisionReplayCommandV2,DecisionCompareQueryV2=DecisionCompareCommandV2,decisionEvaluationOperationVersions={"decision.validate":{"1.0.0":DecisionValidateQueryV1,"2.0.0":DecisionValidateCommandV2},"decision.simulate":{"1.0.0":DecisionSimulateQueryV1,"2.0.0":DecisionSimulateCommandV2},"decision.evaluate":{"1.0.0":DecisionEvaluateCommandV1,"2.0.0":DecisionEvaluateCommandV2},"decision.replay":{"1.0.0":DecisionReplayQueryV1,"2.0.0":DecisionReplayCommandV2},"decision.compare":{"1.0.0":DecisionCompareQueryV1,"2.0.0":DecisionCompareCommandV2}},decisionEvaluationOperations=[DecisionValidateCommandV2,DecisionSimulateCommandV2,DecisionEvaluateCommandV2,DecisionReplayCommandV2,DecisionCompareCommandV2],decisionEvaluationOperationsV1=[DecisionValidateQueryV1,DecisionSimulateQueryV1,DecisionEvaluateCommandV1,DecisionReplayQueryV1,DecisionCompareQueryV1],decisionOperations=[...decisionEvaluationOperationsV1,...p],decisionOperationsV2=[...decisionEvaluationOperations,...V,...p];

package/dist/node/decisioning/predicate-evaluation.js

@@ -0,0 +1 @@
+function i(t,n){let e=t;for(const s of n.split(".")){if(e===null||typeof e!=="object")return;e=e[s]}return e}function h(t,n){const e=t.op??"truthy";if(e==="equals")return n===t.value;if(e==="notEquals")return n!==t.value;if(e==="truthy")return Boolean(n);if(e==="empty")return n==null||(Array.isArray(n)?n.length===0:String(n).length===0);if(e==="in")return Array.isArray(t.value)&&t.value.includes(n);if(e==="notIn")return Array.isArray(t.value)&&!t.value.includes(n);if(e.startsWith("length")){if(!Array.isArray(n)&&typeof n!=="string")return!1;const o=Number(t.value??0);if(e==="lengthGt")return n.length>o;if(e==="lengthGte")return n.length>=o;if(e==="lengthLt")return n.length<o;return n.length<=o}const s=Number(n),r=Number(t.value);if(e==="gt")return s>r;if(e==="gte")return s>=r;if(e==="lt")return s<r;return s<=r}export function evaluatePredicateSpec(t,n,e=(s)=>s){if(t.when){const r=e(t.when.path);return{matched:h(t.when,i(n,r)),accessedPaths:[r]}}const s=t.all??t.anyOf;if(s?.length){const r=s.map((o)=>evaluatePredicateSpec(o,n,e));return{matched:t.all?r.every((o)=>o.matched):r.some((o)=>o.matched),accessedPaths:[...new Set(r.flatMap((o)=>o.accessedPaths))]}}if(t.not){const r=evaluatePredicateSpec(t.not,n,e);return{matched:!r.matched,accessedPaths:r.accessedPaths}}return{matched:!0,accessedPaths:[]}}

package/dist/node/decisioning/predicate.js

@@ -0,0 +1 @@
+const o=new Set(["equals","notEquals","in","notIn","gt","gte","lt","lte","lengthGt","lengthGte","lengthLt","lengthLte"]);export function validatePredicateSpec(e,n="predicate"){const l=[e.when,e.all,e.anyOf,e.not].filter((t)=>t!==void 0).length;if(l===0)return[{path:n,code:"empty",message:"Predicate must declare one branch."}];if(l>1)return[{path:n,code:"ambiguous",message:"Predicate branches are mutually exclusive."}];if(e.when){const t=[];if(!e.when.path.trim())t.push({path:`${n}.when.path`,code:"invalid-path",message:"Predicate path is required."});const a=e.when.op??"truthy";if(o.has(a)&&e.when.value===void 0)t.push({path:`${n}.when.value`,code:"missing-value",message:`${a} requires a value.`});return t}const r=e.all??e.anyOf;if(r){if(r.length===0)return[{path:n,code:"empty-group",message:"Predicate groups cannot be empty."}];return r.flatMap((t,a)=>validatePredicateSpec(t,`${n}.${e.all?"all":"anyOf"}[${a}]`))}return e.not?validatePredicateSpec(e.not,`${n}.not`):[]}

package/dist/node/decisioning/types.d.js

@@ -0,0 +1 @@
+export{};

package/dist/node/decisioning/validation-diagnostics.js

@@ -0,0 +1 @@
+export const DECISION_GRAPH_LIMITS={maxNodes:1000,maxEdges:5000,maxTableRows:2000,maxPredicateDepth:32,maxPredicateNodes:2000,maxVisitedNodes:1000,maxOutcomeKeyLength:200},DECISION_GRAPH_DIAGNOSTIC_CODES=["duplicate-node","duplicate-edge","duplicate-table-row","duplicate-outcome","missing-entry","unknown-node","cycle","unreachable-node","missing-outcome","ambiguous-default","incomplete-branch","invalid-input-path","invalid-policy","limit-exceeded","invalid-predicate","invalid-edge","locale-catalog-missing"];export function decisionGraphIssue(e,i,a){return{code:e,path:i,message:a}}

package/dist/node/decisioning/validation-policy.js

@@ -0,0 +1 @@
+import{validatePredicateSpec as p}from"./predicate.js";import{DECISION_GRAPH_LIMITS as r,decisionGraphIssue as d}from"./validation-diagnostics.js";export function uniqueDecisionIds(i,n,e,a){const t=new Set;for(const[c,s]of i.entries()){if(t.has(s.id))a.push(d(e,`${n}[${c}].id`,`Duplicate ${n==="nodes"?"node":"edge"} ${s.id}.`));t.add(s.id)}return t}export function validateDecisionLimits(i,n){const e=r;if(i.nodes.length>e.maxNodes)n.push(d("limit-exceeded","nodes",`Graph exceeds ${e.maxNodes} nodes.`));if(i.edges.length>e.maxEdges)n.push(d("limit-exceeded","edges",`Graph exceeds ${e.maxEdges} edges.`));if(i.nodes.reduce((c,s)=>c+(s.kind==="decision-table"?s.rows.length:0),0)>e.maxTableRows)n.push(d("limit-exceeded","nodes",`Graph exceeds ${e.maxTableRows} decision-table rows.`));const t=i.policy?.maxVisitedNodes;if(t!==void 0&&(!Number.isSafeInteger(t)||t<1||t>e.maxVisitedNodes))n.push(d("invalid-policy","policy.maxVisitedNodes",`maxVisitedNodes must be an integer from 1 to ${e.maxVisitedNodes}.`));for(const[c,s]of(i.policy?.allowedInputPaths??[]).entries())if(!s.trim()||s.length>256)n.push(d("invalid-policy",`policy.allowedInputPaths[${c}]`,"Allowed input paths must contain 1 to 256 characters."))}export function validateDecisionPredicate(i,n,e,a,t){if(t.exceeded)return;const c=[{value:i,depth:1}],s=new WeakSet;while(c.length>0){const o=c.pop();if(!o)break;if(s.has(o.value)){a.push(d("invalid-predicate",n,"Predicate must be an acyclic tree."));return}s.add(o.value);t.count+=1;if(o.depth>r.maxPredicateDepth||t.count>r.maxPredicateNodes){t.exceeded=!0;a.push(d("limit-exceeded",n,"Predicate exceeds deterministic complexity limits."));break}if(o.value.when)validateDecisionInputPath(o.value.when.path,`${n}.when.path`,e,a);for(const l of o.value.all??o.value.anyOf??[])c.push({value:l,depth:o.depth+1});if(o.value.not)c.push({value:o.value.not,depth:o.depth+1})}for(const o of p(i,n))a.push(d("invalid-predicate",o.path,o.message))}export function validateDecisionInputPath(i,n,e,a){if(e&&!e.has(i))a.push(d("invalid-input-path",n,`Input path ${i} is not allowlisted.`))}export function addDecisionTarget(i,n,e,a,t){if(!e.has(i))t.push(d("unknown-node",n,`Unknown node ${i}.`));a?.add(i)}export function validateTotalBranches(i,n){for(const e of i.nodes){const a=i.edges.filter((t)=>t.from===e.id&&!t.predicate&&!t.subgraphOutcomeKey);if(a.length>1)n.push(d("ambiguous-default",`nodes.${e.id}`,"A node can have at most one default edge."));if(!i.policy?.requireTotalBranches)continue;if(e.kind==="decision-table"&&!e.defaultTargetNodeId)n.push(d("incomplete-branch",`nodes.${e.id}`,"A total decision table requires a default target."));if((e.kind==="branch"||e.kind==="input")&&a.length===0)n.push(d("incomplete-branch",`nodes.${e.id}`,"A total branch requires a default edge."))}}

package/dist/node/decisioning/validation-shape.js

@@ -0,0 +1 @@
+import{DECISION_GRAPH_LIMITS as c,decisionGraphIssue as t}from"./validation-diagnostics.js";export function validateDecisionEdgeShape(e,i,o,a){if(i?.kind==="decision-table"||i?.kind==="outcome")a.push(t("invalid-edge",`edges[${o}].from`,`${i.kind} nodes cannot declare graph edges.`));if(i?.kind==="subgraph"&&e.predicate)a.push(t("invalid-edge",`edges[${o}].predicate`,"Subgraph routing cannot declare predicates."));if(e.subgraphOutcomeKey&&i?.kind!=="subgraph")a.push(t("invalid-edge",`edges[${o}].subgraphOutcomeKey`,"A subgraph outcome edge must originate from a subgraph node."));if(e.subgraphOutcomeKey&&e.predicate)a.push(t("invalid-edge",`edges[${o}]`,"A subgraph outcome edge cannot also declare a predicate."))}export function validateDecisionNodeIdentity(e,i,o){if(!/^[A-Za-z0-9][A-Za-z0-9._:-]{0,199}$/.test(e.id))o.push(t("limit-exceeded",`nodes[${i}].id`,"Node IDs must be canonical references of 1 to 200 characters."));if(e.kind==="outcome"&&(!e.outcomeKey.trim()||e.outcomeKey.length>c.maxOutcomeKeyLength))o.push(t("limit-exceeded",`nodes[${i}].outcomeKey`,`Outcome keys must contain 1 to ${c.maxOutcomeKeyLength} characters.`))}

package/dist/node/decisioning/validation.d.js

@@ -0,0 +1 @@
+export{DECISION_GRAPH_DIAGNOSTIC_CODES,DECISION_GRAPH_LIMITS}from"./validation-diagnostics.js";

package/dist/node/decisioning/validation.js

@@ -0,0 +1 @@
+import{decisionGraphIssue as r}from"./validation-diagnostics.js";import{addDecisionTarget as f,uniqueDecisionIds as u,validateDecisionInputPath as y,validateDecisionLimits as w,validateDecisionPredicate as h,validateTotalBranches as I}from"./validation-policy.js";import{validateDecisionEdgeShape as m,validateDecisionNodeIdentity as v}from"./validation-shape.js";export{DECISION_GRAPH_DIAGNOSTIC_CODES,DECISION_GRAPH_LIMITS}from"./validation-diagnostics.js";export function validateDecisionGraph(i){const e=[],a=u(i.nodes,"nodes","duplicate-node",e);u(i.edges,"edges","duplicate-edge",e);w(i,e);if(!a.has(i.entryNodeId))e.push(r("missing-entry","entryNodeId","Entry node is not declared."));const t=new Map(i.nodes.map((n)=>[n.id,new Set])),d=i.policy?.allowedInputPaths?new Set(i.policy.allowedInputPaths):void 0,s={count:0};for(const[n,o]of i.edges.entries()){if(!a.has(o.from)||!a.has(o.to))e.push(r("unknown-node",`edges[${n}]`,`Edge ${o.id} references an unknown node.`));t.get(o.from)?.add(o.to);const g=i.nodes.find((l)=>l.id===o.from);m(o,g,n,e);if(o.predicate)h(o.predicate,`edges[${n}].predicate`,d,e,s)}const c=new Set;for(const[n,o]of i.nodes.entries()){v(o,n,e);if(o.kind==="input")y(o.path,`nodes[${n}].path`,d,e);if(o.kind==="outcome"){if(c.has(o.outcomeKey))e.push(r("duplicate-outcome",`nodes[${n}].outcomeKey`,`Duplicate outcome key ${o.outcomeKey}.`));c.add(o.outcomeKey)}if(o.kind!=="decision-table")continue;const g=new Set;for(const[l,p]of o.rows.entries()){if(g.has(p.id))e.push(r("duplicate-table-row",`nodes[${n}].rows[${l}].id`,`Duplicate table row ${p.id}.`));g.add(p.id);h(p.predicate,`nodes[${n}].rows[${l}].predicate`,d,e,s);f(p.targetNodeId,`nodes[${n}].rows[${l}].targetNodeId`,a,t.get(o.id),e)}if(o.defaultTargetNodeId)f(o.defaultTargetNodeId,`nodes[${n}].defaultTargetNodeId`,a,t.get(o.id),e)}I(i,e);S(t,e);const D=G(i.entryNodeId,t);for(const n of i.nodes)if(!D.has(n.id))e.push(r("unreachable-node",`nodes.${n.id}`,`Node ${n.id} is unreachable.`));if(c.size===0)e.push(r("missing-outcome","nodes","A graph requires at least one outcome node."));N(i,e);return e}export function assertDecisionGraphValid(i){const e=validateDecisionGraph(i);if(e.length>0)throw Error(`Decision graph ${i.key} is invalid: ${e.map((a)=>a.message).join(" ")}`)}function G(i,e){const a=new Set,t=[i];while(t.length>0){const d=t.pop();if(!d||a.has(d))continue;a.add(d);for(const s of e.get(d)??[])t.push(s)}return a}function S(i,e){const a=new Set,t=new Set,d=(s)=>{if(t.has(s)){e.push(r("cycle",`nodes.${s}`,`Cycle detected at ${s}.`));return}if(a.has(s))return;t.add(s);for(const c of i.get(s)??[])d(c);t.delete(s);a.add(s)};for(const s of i.keys())d(s)}function N(i,e){if(!i.localeCatalogs||!i.defaultLocale)return;if(!i.localeCatalogs[i.defaultLocale]){e.push(r("locale-catalog-missing","defaultLocale","Default locale catalog is missing."));return}const a=new Set(i.nodes.map((t)=>t.labelI18n).filter((t)=>Boolean(t)));for(const[t,d]of Object.entries(i.localeCatalogs))for(const s of a)if(!(s in d))e.push(r("locale-catalog-missing",`localeCatalogs.${t}.${s}`,`Locale ${t} is missing ${s}.`))}

package/dist/node/delivery/authority.js

@@ -0,0 +1 @@
+import{sha256Hex as f}from"@lssm/lib.crypto-utils";import{z as r}from"zod";import{canonicalJsonString as m}from"../rich-reference/canonical-serializer.js";import{addDeliveryDuplicateIssue as s,DELIVERY_RISK_TIERS as y,deliveryDigestSchema as u,deliveryRefSchema as t,deliveryRiskDimensionSchema as R,deliveryRiskTierSchema as v,deliveryTimestampSchema as l}from"./primitives.js";export const DELIVERY_TENANT_POLICY_V1="contractspec.delivery.tenant-policy.v1",OWNERSHIP_ROLES_V1=["intent","contract","code","quality","security_compliance","infrastructure","release","outcome"],ownershipRoleV1Schema=r.enum(OWNERSHIP_ROLES_V1),ownershipPrincipalKindV1Schema=r.enum(["human","team","service","agent"]),ownershipBindingV1Schema=r.object({id:t,role:ownershipRoleV1Schema,principalRef:t,principalKind:ownershipPrincipalKindV1Schema,scopeRefs:r.array(t).min(1),authoritySource:r.enum(["direct","delegated"]),parentBindingRef:t.optional(),grantedByRef:t,connectDecisionRef:t,evidenceRefs:r.array(t).min(1),validFrom:l,expiresAt:l.optional(),status:r.enum(["active","revoked"]),revokedAt:l.optional(),revocationEvidenceRef:t.optional()}).strict().superRefine((e,i)=>{s(e.scopeRefs,["scopeRefs"],i);s(e.evidenceRefs,["evidenceRefs"],i);if(e.authoritySource==="delegated"){if(!e.parentBindingRef)c("parentBindingRef",i);if(!e.expiresAt)c("expiresAt",i)}else if(e.parentBindingRef)i.addIssue({code:"custom",path:["parentBindingRef"],message:"Direct ownership cannot name a parent binding"});if(e.status==="revoked"){if(!e.revokedAt)c("revokedAt",i);if(!e.revocationEvidenceRef)c("revocationEvidenceRef",i)}else if(e.revokedAt||e.revocationEvidenceRef)i.addIssue({code:"custom",path:["status"],message:"Active ownership cannot carry revocation evidence"});if(e.expiresAt&&Date.parse(e.expiresAt)<=Date.parse(e.validFrom))i.addIssue({code:"custom",path:["expiresAt"],message:"Ownership expiry must be after its valid-from time"})}),riskRuleSchema=r.object({id:t,priority:r.number().int().nonnegative(),tiers:r.array(v).min(1),dimensions:r.array(R).min(1),effect:r.enum(["allow_qualified","require_review","deny"]),requiredOwnerRoles:r.array(ownershipRoleV1Schema).min(1),policyRef:t}).strict().superRefine((e,i)=>{s(e.tiers,["tiers"],i);s(e.dimensions,["dimensions"],i);s(e.requiredOwnerRoles,["requiredOwnerRoles"],i)});const d={schemaVersion:r.literal(DELIVERY_TENANT_POLICY_V1),tenantRef:t,revision:r.number().int().positive(),mode:r.enum(["manual","risk_tiered","fully_autonomous"]),ownerBindings:r.array(ownershipBindingV1Schema).min(OWNERSHIP_ROLES_V1.length),riskRules:r.array(riskRuleSchema).min(1),qualityProfileRef:t,allowedEnvironmentRefs:r.array(t).min(1),allowedProviderRefs:r.array(t),budgetRef:t,connectPolicyRef:t,rollbackPolicyRef:t,evidenceRefs:r.array(t).min(1),qualificationRef:t.optional(),killSwitchRef:t.optional(),expiry:l.optional()};export const tenantDeliveryPolicyMaterialV1Schema=r.object(d).strict().superRefine(p),tenantDeliveryPolicyV1Schema=r.object({...d,digest:u}).strict().superRefine((e,i)=>{p(e,i);const{digest:n,...a}=e;if(n!==digestTenantDeliveryPolicyV1(a))i.addIssue({code:"custom",path:["digest"],message:"Tenant policy digest does not match canonical material"})});export function digestTenantDeliveryPolicyV1(e){return`sha256:${f(m(e))}`}export function defineTenantDeliveryPolicyV1(e){return tenantDeliveryPolicyV1Schema.parse({...e,digest:digestTenantDeliveryPolicyV1(e)})}function p(e,i){for(const n of["allowedEnvironmentRefs","allowedProviderRefs","evidenceRefs"])s(e[n],[n],i);for(const[n,a]of[["ownerBindings",e.ownerBindings.map((o)=>o.id)],["riskRules",e.riskRules.map((o)=>o.id)],["riskRules",e.riskRules.map((o)=>o.priority)]])s(a,[n],i);for(const n of OWNERSHIP_ROLES_V1)if(e.ownerBindings.filter((o)=>o.role===n&&o.status==="active").length!==1)i.addIssue({code:"custom",path:["ownerBindings"],message:`Exactly one active ${n} owner is required`});for(const n of y)if(!e.riskRules.some((a)=>a.tiers.includes(n)))i.addIssue({code:"custom",path:["riskRules"],message:`Risk rules do not cover ${n}`});if(e.mode==="manual"&&e.riskRules.some((n)=>n.effect==="allow_qualified"))i.addIssue({code:"custom",path:["riskRules"],message:"Manual mode cannot authorize automatic progression"});if(e.mode==="fully_autonomous"){for(const n of["expiry","qualificationRef","killSwitchRef"])if(!e[n])c(n,i)}}function c(e,i){i.addIssue({code:"custom",path:[e],message:`${e} is required by this authority mode`})}export const tenantDeliveryAuthorityV1DocBlock={id:"contractspec-delivery-tenant-authority-v1",title:"Tenant delivery authority V1",body:"TenantDeliveryPolicyV1 binds one active owner for every delivery role to tenant scope, risk rules, quality, environments, providers, budget, Connect policy, rollback, and evidence. Delegations expire and remain revocable. Fully autonomous policies additionally require expiry, qualification, and a kill switch. No mode waives exact authority or evidence.",kind:"reference",route:"/docs/contracts/delivery/tenant-authority-v1",visibility:"public"};

package/dist/node/delivery/autonomy-context.js

@@ -0,0 +1 @@
+import{z as t}from"zod";import{deliveryRefSchema as e,deliveryRiskTierSchema as r,deliveryTimestampSchema as i}from"./primitives.js";export const deliveryAutonomyContextV2Schema=t.object({tenantRef:e,rootPolicyRef:e,organizationRef:e,workspaceRef:e,projectRef:e,environmentRef:e,teamRefs:t.array(e),userRef:e,actionRef:e,resourceRef:e,risk:r,estimatedCostUsd:t.number().finite().nonnegative(),now:i}).strict();

package/dist/node/delivery/chain.js

@@ -0,0 +1 @@
+import{sha256Hex as s}from"@lssm/lib.crypto-utils";import{z as t}from"zod";import{canonicalJsonString as d}from"../rich-reference/canonical-serializer.js";import{deliveryArtifactRefSchema as f,deliveryDigestSchema as i,deliveryGitShaSchema as n,deliveryRefSchema as e,deliveryTimestampSchema as p}from"./primitives.js";export const DELIVERY_CHAIN_ARTIFACT_V1="contractspec.delivery.chain-artifact.v1";const r={schemaVersion:t.literal(DELIVERY_CHAIN_ARTIFACT_V1),id:e,deliveryPlanDigest:i,predecessorDigests:t.array(i),evidenceRefs:t.array(e),createdAt:p,effectAuthority:t.literal("none")},y=t.object({...r,kind:t.literal("product_intent_v2"),intentRef:e,tenantRef:e,goalRefs:t.array(e).min(1),ownerBindingRefs:t.array(e).min(1),acceptanceRefs:t.array(e).min(1),outcomeMetricRefs:t.array(e).min(1)}),m=t.object({...r,kind:t.literal("builder_change_plan"),baseSha:n,qualityPlanRef:e,agentProviderRefs:t.array(e).min(1),pathLeaseRefs:t.array(e).min(1),capabilityManifestRefs:t.array(e),rollbackRef:e}),h=t.object({...r,kind:t.literal("connect_plan_decision"),decisionRef:e,verdict:t.enum(["permit","rewrite","require_review","deny"]),ownerPolicyRef:e}),v=t.object({...r,kind:t.literal("candidate_patch_receipt"),baseSha:n,headSha:n,treeSha:n,patchDigest:i,builderReceiptRef:e,preMutationDecisionRef:e,postDiffDecisionRef:e,rollbackRef:e}),u=t.object({...r,kind:t.literal("release_plan"),sourceSha:n,catalogHash:i,qualityReceiptRef:e,promotionPermitRef:e,artifacts:t.array(f).min(1),sbomDigest:i,deploymentTargetRef:e,observationPlanRef:e}),R=t.object({...r,kind:t.literal("infrastructure_work_order"),infrastructurePlanRef:e,connectPermitRef:e,runtimeNodeRef:e,providerAdapterRef:e,secretRefs:t.array(e),rollbackPlanRef:e}),b=t.object({...r,kind:t.literal("deployment_receipt"),releasePlanRef:e,infrastructureReceiptRef:e,workOrderRef:e,targetRef:e,sourceSha:n,artifactDigests:t.array(i).min(1),healthEvidenceRefs:t.array(e).min(1),rollbackEvidenceRef:e,status:t.enum(["succeeded","failed","indeterminate","rolled_back"])}),k=t.object({...r,kind:t.literal("runtime_evidence"),deploymentReceiptRef:e,observationWindowRef:e,sloEvidenceRefs:t.array(e),errorEvidenceRefs:t.array(e),rolloutEvidenceRefs:t.array(e)}),_=t.object({...r,kind:t.literal("outcome_observation"),goalRef:e,baselineRef:e,observationWindowRef:e,metricEvidenceRefs:t.array(e).min(1),result:t.enum(["improved","neutral","regressed","indeterminate"])}),g=t.object({...r,kind:t.literal("governed_evolution_proposal"),outcomeObservationRefs:t.array(e).min(1),proposedIntentRef:e,policyRef:e,connectContextRef:e,status:t.enum(["proposed","accepted","rejected","expired"])});export const deliveryChainArtifactMaterialV1Schema=t.discriminatedUnion("kind",[y,m,h,v,u,R,b,k,_,g]),deliveryChainArtifactV1Schema=t.intersection(deliveryChainArtifactMaterialV1Schema,t.object({digest:i})).superRefine((a,c)=>{const{digest:o,...l}=a;if(o!==digestDeliveryChainArtifactV1(l))c.addIssue({code:"custom",path:["digest"],message:"Delivery chain artifact digest does not match its material"})});export function defineDeliveryChainArtifactV1(a){return deliveryChainArtifactV1Schema.parse({...a,digest:digestDeliveryChainArtifactV1(a)})}export function digestDeliveryChainArtifactV1(a){return`sha256:${s(d(a))}`}export const deliveryChainArtifactV1DocBlock={id:"contractspec-delivery-chain-artifact-v1",title:"Intent-to-production delivery chain artifacts",body:"The delivery chain links product intent, Builder planning, Connect decisions, candidate patches, release plans, infrastructure work orders, deployment receipts, runtime evidence, outcome observations, and governed evolution proposals through canonical SHA-256 digests. Every artifact has effectAuthority none: existing Connect, Runtime Node, infrastructure, release, and provider adapters retain execution authority.",kind:"reference",route:"/docs/contracts/delivery/chain-v1",visibility:"public"};

package/dist/node/delivery/ci-budget.js

@@ -0,0 +1 @@
+import{sha256Hex as C}from"@lssm/lib.crypto-utils";import{z as s}from"zod";import{canonicalJsonString as S}from"../rich-reference/canonical-serializer.js";import{addDeliveryDuplicateIssue as m,deliveryDigestSchema as U,deliveryRefSchema as o,deliveryTimestampSchema as n}from"./primitives.js";export const CI_BUDGET_STATE_V2="contractspec.delivery.ci-budget-state.v2",CI_BUDGET_ADMISSION_MODES_V2=["normal","constrained","protected_only","recovery_only","closed"];const i=s.number().finite().nonnegative().max(1e6),p=s.object({id:o,providerRef:o,amountUsd:i,evidenceRef:o}).strict();export const ciBudgetFixedCostV2Schema=p,ciBudgetProviderActualV2Schema=p.extend({watermarkAt:n}),ciBudgetReservationV2Schema=s.object({id:o,workloadRef:o,workloadClass:s.enum(["ordinary","protected","recovery"]),amountUsd:i,expiresAt:n,evidenceRef:o}).strict(),ciBudgetProjectionV2Schema=p.extend({horizonEndsAt:n,basisRef:o});const f={schemaVersion:s.literal(CI_BUDGET_STATE_V2),id:o,tenantRef:o,budgetRef:o,billingPeriod:s.object({startsAt:n,endsAt:n,currency:s.literal("USD")}).strict(),thresholds:s.object({normalCeilingUsd:i,constrainedCeilingUsd:i,protectedCeilingUsd:i,hardLimitUsd:i}).strict(),fixedCosts:s.array(ciBudgetFixedCostV2Schema),providerActuals:s.array(ciBudgetProviderActualV2Schema),reservations:s.array(ciBudgetReservationV2Schema),projections:s.array(ciBudgetProjectionV2Schema),recoveryReserveUsd:i,reconciliation:s.object({status:s.enum(["reconciled","stale","mismatch"]),fixedCostUsd:i,providerActualUsd:i,activeReservationUsd:i,projectedUsd:i,exposureUsd:i,reconciledAt:n,evidenceRefs:s.array(o).min(1)}).strict(),admissionMode:s.enum(CI_BUDGET_ADMISSION_MODES_V2),capturedAt:n};export const ciBudgetStateMaterialV2Schema=s.object(f).strict().superRefine(h),ciBudgetStateV2Schema=s.object({...f,digest:U}).strict().superRefine((e,t)=>{h(e,t);const{digest:c,...d}=e;if(c!==digestCiBudgetStateV2(d))t.addIssue({code:"custom",path:["digest"],message:"CI budget state digest does not match its material"})});export function digestCiBudgetStateV2(e){return`sha256:${C(S(g(e)))}`}export function defineCiBudgetStateV2(e){const t=g(e);return ciBudgetStateV2Schema.parse({...t,digest:digestCiBudgetStateV2(t)})}export function expectedCiBudgetAdmissionModeV2(e){const t=e.reconciliation.exposureUsd;if(t>=e.thresholds.hardLimitUsd)return"closed";if(e.reconciliation.status!=="reconciled")return"recovery_only";if(t>=e.thresholds.protectedCeilingUsd)return"recovery_only";if(t>=e.thresholds.constrainedCeilingUsd)return"protected_only";if(t>=e.thresholds.normalCeilingUsd)return"constrained";return"normal"}function g(e){return{...e,fixedCosts:[...e.fixedCosts].sort(l),providerActuals:[...e.providerActuals].sort(l),reservations:[...e.reservations].sort(l),projections:[...e.projections].sort(l),reconciliation:{...e.reconciliation,evidenceRefs:[...e.reconciliation.evidenceRefs].sort()}}}function l(e,t){return e.id.localeCompare(t.id)}function h(e,t){const c=[e.thresholds.normalCeilingUsd,e.thresholds.constrainedCeilingUsd,e.thresholds.protectedCeilingUsd,e.thresholds.hardLimitUsd];if(!c.every((r,a)=>a===0||r>c[a-1]))t.addIssue({code:"custom",path:["thresholds"],message:"CI budget thresholds must be strictly increasing"});if(Date.parse(e.billingPeriod.endsAt)<=Date.parse(e.billingPeriod.startsAt))t.addIssue({code:"custom",path:["billingPeriod","endsAt"],message:"Billing period end must follow its start"});for(const r of["fixedCosts","providerActuals","reservations","projections"])m(e[r].map((a)=>a.id),[r],t);m(e.reconciliation.evidenceRefs,["reconciliation","evidenceRefs"],t);const d={fixedCostUsd:u(e.fixedCosts),providerActualUsd:u(e.providerActuals),activeReservationUsd:u(e.reservations),projectedUsd:u(e.projections)};for(const[r,a]of Object.entries(d))if(!v(e.reconciliation[r],a))t.addIssue({code:"custom",path:["reconciliation",r],message:`${r} does not reconcile with its components`});const y=d.fixedCostUsd+d.providerActualUsd+d.activeReservationUsd+d.projectedUsd+e.recoveryReserveUsd;if(!v(e.reconciliation.exposureUsd,y))t.addIssue({code:"custom",path:["reconciliation","exposureUsd"],message:"Budget exposure does not reconcile with costs and reserves"});if(e.admissionMode!==expectedCiBudgetAdmissionModeV2(e))t.addIssue({code:"custom",path:["admissionMode"],message:"Admission mode does not match reconciled exposure and freshness"})}function u(e){return e.reduce((t,c)=>t+c.amountUsd,0)}function v(e,t){return Math.abs(e-t)<=0.000001}export const ciBudgetStateV2DocBlock={id:"contractspec-delivery-ci-budget-state-v2",title:"CI budget state V2",body:"CiBudgetStateV2 is the provider-neutral, tenant-scoped economic admission state for delivery work. It reconciles fixed costs, provider actuals, active reservations, projections, and recovery reserve against strictly increasing tenant thresholds. Stale or mismatched evidence fails to recovery-only admission, and exposure at the hard limit closes all positive-cost admission.",kind:"reference",route:"/docs/contracts/delivery/ci-budget-state-v2",visibility:"public"};

package/dist/node/delivery/contracts.js

@@ -0,0 +1 @@
+import{sha256Hex as p}from"@lssm/lib.crypto-utils";import{z as t}from"zod";import{canonicalJsonString as v}from"../rich-reference/canonical-serializer.js";import{addDeliveryDuplicateIssue as s,deliveryDigestSchema as a,deliveryGitShaSchema as o,deliveryRefSchema as e,deliveryRiskSchema as f}from"./primitives.js";export const DELIVERY_PLAN_V1="contractspec.delivery.plan.v1",DELIVERY_EVIDENCE_ENVELOPE_V2="contractspec.delivery.evidence-envelope.v2";const c={schemaVersion:t.literal(DELIVERY_PLAN_V1),id:e,predecessorDigests:t.array(a),tenantRef:e,repositoryRef:e,environmentRef:e,baseSha:o,headSha:o,treeSha:o,intentRefs:t.array(e).min(1),goalRefs:t.array(e).min(1),contractRefs:t.array(e).min(1),ownerPolicyRef:e,autonomyProfileRef:e,connectPlanDecisionRef:e,catalogHash:a,risk:f,qualityPlanRef:e,observationPlanRef:e};export const deliveryPlanMaterialV1Schema=t.object(c).strict().superRefine(l),deliveryPlanV1Schema=t.object({...c,digest:a}).strict().superRefine((i,n)=>{l(i,n);const{digest:r,...d}=i;if(r!==digestDeliveryPlanV1(d))n.addIssue({code:"custom",path:["digest"],message:"Delivery plan digest does not match canonical material"});if(i.predecessorDigests.includes(r))n.addIssue({code:"custom",path:["predecessorDigests"],message:"A delivery plan cannot name itself as a predecessor"})}),deliveryEvidenceEnvelopeV2Schema=t.object({schemaVersion:t.literal(DELIVERY_EVIDENCE_ENVELOPE_V2),deliveryPlanDigest:a,builderReceiptRef:e,connectDecisionRefs:t.array(e).min(1),qualityReceiptRef:e,artifactDigests:t.array(a).min(1),releaseReceiptRef:e.optional(),infrastructureReceiptRef:e.optional(),deploymentReceiptRef:e.optional(),runtimeEvidenceRefs:t.array(e),economicEvidenceRefs:t.array(e),outcomeObservationRefs:t.array(e)}).strict().superRefine((i,n)=>{for(const r of["connectDecisionRefs","artifactDigests","runtimeEvidenceRefs","economicEvidenceRefs","outcomeObservationRefs"])s(i[r],[r],n);if(i.deploymentReceiptRef&&!i.infrastructureReceiptRef)n.addIssue({code:"custom",path:["infrastructureReceiptRef"],message:"Deployment evidence requires infrastructure evidence"})});export function digestDeliveryPlanV1(i){return`sha256:${p(v(i))}`}export function defineDeliveryPlanV1(i){return deliveryPlanV1Schema.parse({...i,digest:digestDeliveryPlanV1(i)})}export function verifyDeliveryEvidenceEnvelopeV2(i){const n=[];if(i.envelope.deliveryPlanDigest!==i.plan.digest)n.push("Evidence envelope does not bind the delivery plan digest");if(i.envelope.deploymentReceiptRef&&i.envelope.runtimeEvidenceRefs.length===0)n.push("A deployed delivery requires runtime evidence");return n}function l(i,n){for(const r of["predecessorDigests","intentRefs","goalRefs","contractRefs"])s(i[r],[r],n)}export const deliveryPlanV1DocBlock={id:"contractspec-delivery-plan-v1",title:"Digest-bound delivery plan V1",body:"DeliveryPlanV1 is the provider-neutral aggregate for one exact candidate. Its canonical SHA-256 digest binds tenant, repository, environment, Git base/head/tree, intent, goals, contracts, ownership, autonomy, a signed Connect plan decision reference, catalog provenance, risk, quality, and observation. DeliveryEvidenceEnvelopeV2 links Builder, Connect, quality, release, infrastructure, deployment, runtime, economic, and outcome evidence without embedding provider payloads or secrets.",kind:"reference",route:"/docs/contracts/delivery/plan-v1",visibility:"public"};

package/dist/node/delivery/index.js

@@ -0,0 +1 @@
+export*from"../quality/index.js";export*from"./authority.js";export*from"./chain.js";export*from"./ci-budget.js";export*from"./contracts.js";export*from"./manual-author-attestation.js";export*from"./primitives.js";export*from"./project-profile.js";export*from"./scoped-autonomy.js";

package/dist/node/delivery/manual-author-attestation.js

@@ -0,0 +1 @@
+import{sha256Hex as m}from"@lssm/lib.crypto-utils";import{z as e}from"zod";import{canonicalJsonString as d}from"../rich-reference/canonical-serializer.js";import{addDeliveryDuplicateIssue as l,deliveryDigestSchema as r,deliveryGitShaSchema as n,deliveryRefSchema as o,deliveryTimestampSchema as p}from"./primitives.js";export const MANUAL_AUTHOR_ATTESTATION_V1="contractspec.delivery.manual-author-attestation.v1";const s={schemaVersion:e.literal(MANUAL_AUTHOR_ATTESTATION_V1),id:o,tenantRef:o,repositoryRef:o,authorPrincipalRef:o,sourceKind:e.enum(["uncommitted_worktree","commit","patch_series"]),baseSha:n,headSha:n.optional(),sourceDigest:r,pathManifestDigest:r,paths:e.array(o).min(1),intentRefs:e.array(o).min(1),evidenceRefs:e.array(o).min(1),connectDecisionRef:o,statement:e.string().trim().min(1).max(2000),assertedAt:p,authorityEffect:e.literal("none"),promotionAuthority:e.literal(!1),providerMutationAuthority:e.literal(!1),dataMigrationAuthority:e.literal(!1)};export const manualAuthorAttestationMaterialV1Schema=e.object(s).strict().superRefine(u),manualAuthorAttestationV1Schema=e.object({...s,digest:r}).strict().superRefine((t,a)=>{u(t,a);const{digest:i,...h}=t;if(i!==digestManualAuthorAttestationV1(h))a.addIssue({code:"custom",path:["digest"],message:"Manual author attestation digest does not match its material"})});export function digestManualAuthorAttestationV1(t){return`sha256:${m(d(c(t)))}`}export function defineManualAuthorAttestationV1(t){const a=c(t);return manualAuthorAttestationV1Schema.parse({...a,digest:digestManualAuthorAttestationV1(a)})}function c(t){return{...t,paths:[...t.paths].sort(),intentRefs:[...t.intentRefs].sort(),evidenceRefs:[...t.evidenceRefs].sort()}}function u(t,a){for(const i of["paths","intentRefs","evidenceRefs"])l(t[i],[i],a);if(t.sourceKind==="commit"&&!t.headSha)a.addIssue({code:"custom",path:["headSha"],message:"Committed authorship requires the exact head SHA"});if(t.sourceKind==="uncommitted_worktree"&&t.headSha)a.addIssue({code:"custom",path:["headSha"],message:"Uncommitted worktree authorship cannot claim a head commit"})}export const manualAuthorAttestationV1DocBlock={id:"contractspec-delivery-manual-author-attestation-v1",title:"Manual author attestation V1",body:"ManualAuthorAttestationV1 records who authored an exact existing worktree, commit, or patch series before its first governed remote mutation. It binds tenant, repository, source and path digests, intent, evidence, and a Connect decision. It explicitly grants no promotion, provider, migration, or other mutation authority; those actions require their own current Connect decisions and permits.",kind:"reference",route:"/docs/contracts/delivery/manual-author-attestation-v1",visibility:"public"};

package/dist/node/delivery/primitives.js

@@ -0,0 +1 @@
+import{z as e}from"zod";export const deliveryRefSchema=e.string().trim().min(1).max(512).regex(/^[^\s\u0000-\u001f]+$/),deliveryDigestSchema=e.string().regex(/^sha256:[a-f0-9]{64}$/),deliveryGitShaSchema=e.string().regex(/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/),deliveryTimestampSchema=e.string().datetime({offset:!0}),deliveryArtifactRefSchema=e.object({ref:deliveryRefSchema,digest:deliveryDigestSchema}).strict(),DELIVERY_RISK_TIERS=["low","medium","high","critical"],deliveryRiskTierSchema=e.enum(DELIVERY_RISK_TIERS),deliveryRiskDimensionSchema=e.enum(["contract_compatibility","data_integrity","security","privacy","compliance","availability","infrastructure","financial","user_experience","operational"]),deliveryBlastRadiusSchema=e.enum(["local","workspace","tenant","multi_tenant","global"]),deliveryRiskSchema=e.object({tier:deliveryRiskTierSchema,dimensions:e.array(deliveryRiskDimensionSchema).min(1),blastRadius:deliveryBlastRadiusSchema,reversible:e.boolean(),rationaleRefs:e.array(deliveryRefSchema).min(1)}).strict().superRefine((i,t)=>{addDeliveryDuplicateIssue(i.dimensions,["dimensions"],t);addDeliveryDuplicateIssue(i.rationaleRefs,["rationaleRefs"],t);if((i.tier==="high"||i.tier==="critical")&&!i.dimensions.some((r)=>["security","privacy","compliance","data_integrity"].includes(r)))t.addIssue({code:"custom",path:["dimensions"],message:"High and critical risk require an explicit safety dimension"})});export function addDeliveryDuplicateIssue(i,t,r){if(new Set(i).size!==i.length)r.addIssue({code:"custom",path:t,message:"Values must be unique"})}

package/dist/node/delivery/project-profile.js

@@ -0,0 +1 @@
+import{sha256Hex as p}from"@lssm/lib.crypto-utils";import{z as e}from"zod";import{canonicalJsonString as u}from"../rich-reference/canonical-serializer.js";import{addDeliveryDuplicateIssue as s,deliveryDigestSchema as m,deliveryRefSchema as t}from"./primitives.js";export const DELIVERY_PROJECT_PROFILE_V1="contractspec.delivery.project-profile.v1";const y=e.object({id:t,mode:e.enum(["managed_application","managed_container","virtual_machine","kubernetes"]),providerRef:t,capabilityRefs:e.array(t).min(1),qualificationRef:t.optional()}).strict(),l={schemaVersion:e.literal(DELIVERY_PROJECT_PROFILE_V1),id:t,revision:e.number().int().positive(),tenantRef:t,projectRef:t,adoption:e.enum(["contracts","delivery","operations"]),controlPlane:e.enum(["local","managed","self_hosted"]),runtimeTopologyRef:t.optional(),hosting:e.array(y),agent:e.object({runtimeRef:t,location:e.enum(["local_device","disposable_sandbox","dedicated_worker","customer_infrastructure"]),mode:e.enum(["on_demand","persistent"]),capabilityRefs:e.array(t).min(1),qualificationRef:t.optional()}).strict().optional(),companyBrainRef:t.optional(),qualityProfileRef:t.optional(),buildProfileRefs:e.array(t),environments:e.array(e.object({ref:t,kind:e.enum(["development","test","preview","staging","production"]),hostingBindingIds:e.array(t).min(1),dataPolicyRef:t,recoveryPolicyRef:t,preview:e.object({accessPolicyRef:t,maximumLifetimeSeconds:e.number().int().positive(),maximumConcurrent:e.number().int().positive(),cleanupOnPullRequestClose:e.literal(!0)}).strict().optional()}).strict()),budgets:e.array(e.object({category:e.enum(["ci","previews","staging","production","agent_inference","control_plane"]),budgetRef:t}).strict()),policyRef:t};export const deliveryProjectProfileMaterialV1Schema=e.object(l).strict().superRefine(d),deliveryProjectProfileV1Schema=e.object({...l,digest:m}).strict().superRefine((i,r)=>{d(i,r);const{digest:n,...c}=i;if(n!==digestDeliveryProjectProfileV1(c))r.addIssue({code:"custom",path:["digest"],message:"Project profile digest mismatch"})});export function digestDeliveryProjectProfileV1(i){return`sha256:${p(u(i))}`}export function defineDeliveryProjectProfileV1(i){return deliveryProjectProfileV1Schema.parse({...i,digest:digestDeliveryProjectProfileV1(i)})}function d(i,r){const n=(o,a)=>r.addIssue({code:"custom",path:o,message:a});s(i.hosting.map((o)=>o.id),["hosting"],r);s(i.environments.map((o)=>o.ref),["environments"],r);s(i.budgets.map((o)=>o.category),["budgets"],r);s(i.buildProfileRefs,["buildProfileRefs"],r);const c=new Set(i.hosting.map((o)=>o.id));i.hosting.forEach((o,a)=>s(o.capabilityRefs,["hosting",a,"capabilityRefs"],r));if(i.agent)s(i.agent.capabilityRefs,["agent","capabilityRefs"],r);i.environments.forEach((o,a)=>{s(o.hostingBindingIds,["environments",a,"hostingBindingIds"],r);if(o.hostingBindingIds.some((f)=>!c.has(f)))n(["environments",a,"hostingBindingIds"],"Unknown hosting binding");if(o.kind==="preview"!==Boolean(o.preview))n(["environments",a,"preview"],"Preview lifecycle is required only for preview environments")});if(i.adoption!=="contracts"){if(!i.qualityProfileRef)n(["qualityProfileRef"],"Delivery requires a quality profile");if(!i.buildProfileRefs.length)n(["buildProfileRefs"],"Delivery requires a build profile");if(!i.budgets.some((o)=>o.category==="ci"))n(["budgets"],"Delivery requires its own CI budget")}}export const deliveryProjectProfileV1DocBlock={id:"contractspec-delivery-project-profile-v1",title:"Adaptive delivery project profiles",body:"DeliveryProjectProfileV1 independently selects adoption, control-plane placement, application hosting, state topology, optional agent execution and company context. Contracts-only consumers need no infrastructure. A mixed Vercel/Railway project needs no Kubernetes, broker, or persistent agent. Preview environments require bounded lifetime, access policy and teardown. CI and operating budget categories remain distinct. A digest proves identity, not qualification or authority: hosts must independently verify referenced qualifications and obtain Connect authorization before effects.",kind:"reference",route:"/docs/contracts/delivery/project-profile-v1",visibility:"public"};

package/dist/node/delivery/scoped-autonomy.js

@@ -0,0 +1 @@
+export{deliveryAutonomyContextV2Schema}from"./autonomy-context.js";import{sha256Hex as _}from"@lssm/lib.crypto-utils";import{z as c}from"zod";import{canonicalJsonString as x}from"../rich-reference/canonical-serializer.js";import{deliveryDigestSchema as P,deliveryRefSchema as s,deliveryRiskTierSchema as k,deliveryTimestampSchema as D}from"./primitives.js";export const DELIVERY_AUTONOMY_POLICY_V2="contractspec.delivery.autonomy-policy.v2",DELIVERY_AUTONOMY_MODES=["preview_only","human_reviewed","delegated_release","qualified_autonomous"];const R=["organizationRef","workspaceRef","projectRef","environmentRef","teamRef","userRef","actionRef","resourceRef"],b=c.object({organizationRef:s,workspaceRef:s.optional(),projectRef:s.optional(),environmentRef:s.optional(),teamRef:s.optional(),userRef:s.optional(),actionRef:s.optional(),resourceRef:s.optional()}).strict(),A={schemaVersion:c.literal(DELIVERY_AUTONOMY_POLICY_V2),id:s,revision:c.number().int().positive(),tenantRef:s,scope:b,parentPolicyRef:s.optional(),mode:c.enum(DELIVERY_AUTONOMY_MODES),status:c.enum(["active","revoked"]),allowedRiskTiers:c.array(k).min(1),maximumCostUsd:c.number().finite().nonnegative(),requiredCheckRefs:c.array(s),validFrom:D,expiresAt:D,connectPolicyRef:s};export const deliveryAutonomyPolicyMaterialV2Schema=c.object(A).strict(),deliveryAutonomyPolicyV2Schema=c.object({...A,digest:P}).strict().superRefine((o,r)=>{const{digest:m,...i}=o,l=(a)=>r.addIssue({code:"custom",message:a});if(m!==V(i))l("Autonomy policy digest mismatch");if(Date.parse(o.expiresAt)<=Date.parse(o.validFrom))l("Invalid policy validity interval");if(o.parentPolicyRef===o.id)l("A policy cannot inherit from itself");if(!o.parentPolicyRef&&R.slice(1).some((a)=>o.scope[a]))l("A scoped policy must reference its parent");for(const a of[o.requiredCheckRefs,o.allowedRiskTiers])if(new Set(a).size!==a.length)l("Policy requirements must be unique")});function V(o){return`sha256:${_(x(o))}`}export function defineDeliveryAutonomyPolicyV2(o){return deliveryAutonomyPolicyV2Schema.parse({...o,digest:V(o)})}export function resolveDeliveryAutonomyV2(o,r){const m=new Set,i=(e)=>m.add(e),l=Date.parse(r.now);if(!Number.isFinite(l)||!Number.isFinite(r.estimatedCostUsd)||r.estimatedCostUsd<0)i("invalid_context");const a=new Map;for(const e of o){const n=deliveryAutonomyPolicyV2Schema.safeParse(e);if(!n.success){i("invalid_policy");continue}if(a.has(e.id))i("duplicate_policy");if(e.tenantRef!==r.tenantRef)i("cross_tenant_policy");a.set(e.id,n.data)}const u=(e)=>R.every((n)=>{const t=e.scope[n];return!t||(n==="teamRef"?r.teamRefs.includes(t):r[n]===t)}),y=a.get(r.rootPolicyRef);if(!y||y.parentPolicyRef||!u(y))i("missing_root_policy");const h=[...a.values()].filter(u).sort((e,n)=>e.id.localeCompare(n.id));let f=y?DELIVERY_AUTONOMY_MODES.length-1:1,p=y?.maximumCostUsd??0;const g=new Set;for(const e of h){const n=new Set;let t=e;while(t&&t.id!==r.rootPolicyRef){if(n.has(t.id)){i("policy_cycle");break}n.add(t.id);const d=t.parentPolicyRef?a.get(t.parentPolicyRef):void 0;if(!d||!u(d)){i("missing_parent_policy");break}if(R.some((v)=>d.scope[v]&&d.scope[v]!==t?.scope[v]))i("policy_scope_expansion");t=d}if(e.status!=="active")i("revoked_policy");if(l<Date.parse(e.validFrom)||l>=Date.parse(e.expiresAt))i("policy_outside_validity");if(!e.allowedRiskTiers.includes(r.risk))i("risk_denied");f=Math.min(f,DELIVERY_AUTONOMY_MODES.indexOf(e.mode));p=Math.min(p,e.maximumCostUsd);for(const d of e.requiredCheckRefs)g.add(d)}if(r.estimatedCostUsd>p)i("budget_exceeded");return{mode:m.size?"preview_only":DELIVERY_AUTONOMY_MODES[f],blocked:m.size>0,reasons:[...m].sort(),maximumCostUsd:p,requiredCheckRefs:[...g].sort(),policyDigests:h.map(({id:e,revision:n,digest:t})=>({id:e,revision:n,digest:t})),authorizesExecution:!1}}export const deliveryScopedAutonomyV2DocBlock={id:"contractspec-delivery-scoped-autonomy-v2",title:"Scoped delivery autonomy",body:"Additive V2 policies preserve TenantDeliveryPolicyV1. Organization roots and explicit parent chains constrain workspace, project, environment, team, user, action and resource policies. Resolution intersects autonomy, risk and cost limits and unions required checks. Missing parents, cycles, scope expansion, revocation, expiry and digest substitution block progression. Hosts must load the complete applicable policy set and authenticated context, then recheck current policy in Connect before execution. This helper computes an explanation, never a permit; qualified_autonomous still requires independent runtime qualification and authority.",kind:"reference",route:"/docs/contracts/delivery/scoped-autonomy-v2",visibility:"public"};

package/dist/node/design-packs/index.d.js

@@ -0,0 +1 @@
+export*from"./inheritance.js";export*from"./legacy-theme.js";export*from"./operations.js";export*from"./patches.js";export*from"./policy.js";export*from"./ports.js";export*from"./records.js";export*from"./registry.js";export*from"./runtime.js";export*from"./types.js";export*from"./validation.js";

package/dist/node/design-packs/index.js

@@ -0,0 +1 @@
+export*from"./inheritance.js";export*from"./legacy-theme.js";export*from"./operations.js";export*from"./patches.js";export*from"./policy.js";export*from"./ports.js";export*from"./records.js";export*from"./registry.js";export*from"./runtime.js";export*from"./types.js";export*from"./validation.js";

package/dist/node/design-packs/inheritance.js

@@ -0,0 +1 @@
+function o(n){return`${n.key}@${n.version}`}export function resolveDesignPackInheritance(n,s,i=new Set){const r=o(s);if(i.has(r))throw Error(`Design pack inheritance cycle: ${[...i,r].join(" -> ")}`);const e=n.get(s.key,s.version);if(!e)return;if(!e.extends)return e;const t=resolveDesignPackInheritance(n,e.extends,new Set([...i,r]));if(!t)throw Error(`Design pack parent not found: ${o(e.extends)}`);return{...t,...e,tags:{industries:[...new Set([...t.tags.industries,...e.tags.industries])],styles:[...new Set([...t.tags.styles,...e.tags.styles])],keywords:[...new Set([...t.tags.keywords??[],...e.tags.keywords??[]])]},platforms:[...new Set([...t.platforms,...e.platforms])],modes:[...new Set([...t.modes,...e.modes])],layoutRecipes:{...t.layoutRecipes,...e.layoutRecipes},componentProfile:{...t.componentProfile,...e.componentProfile}}}

package/dist/node/design-packs/legacy-theme.js

@@ -0,0 +1 @@
+const t={"app-shell":["navigation","header","content"],dashboard:["heading","primary","secondary"],collection:["heading","filters","results"],detail:["heading","content","actions"],form:["heading","fields","validation","actions"],workflow:["heading","progress","work","actions"],marketing:["hero","content","call-to-action"],auth:["brand","heading","credentials","recovery"]};export function makeLegacyThemeDesignPackRef(e){return{key:`contractspec.design.legacy-theme.${e.key}`,version:e.version}}export function createLegacyDesignSelectionPolicy(e){const a=makeLegacyThemeDesignPackRef(e.primary);return{mode:"fixed",default:a,allowed:[a],fallbacks:e.fallbacks?.map(makeLegacyThemeDesignPackRef),customDesigns:"disabled"}}export function createLegacyThemeDesignPack(e){return{meta:{...makeLegacyThemeDesignPackRef(e),title:`Legacy theme: ${e.key}`,description:`Compatibility design pack for legacy theme ${e.key}.`,domain:"design-system",owners:["platform.design"],tags:["design-pack","legacy-theme"],stability:"stable"},theme:e,tags:{industries:["general"],styles:["neutral"]},platforms:["web","native"],modes:["light","dark"],layoutRecipes:Object.fromEntries(Object.entries(t).map(([a,i])=>[a,{key:a,regions:i,variant:"neutral"}])),componentProfile:{density:"comfortable",shape:"neutral"}}}

package/dist/node/design-packs/operations.d.js

@@ -0,0 +1 @@
+export{};

package/dist/node/design-packs/operations.js

@@ -0,0 +1,3 @@
+import{ScalarTypeEnum as e,SchemaModel as o}from"@lssm/lib.schema";import{defineCommand as d,defineQuery as p}from"../operations/operation.js";const DesignOperationInput=new o({name:"DesignOperationInput",fields:{tenantId:{type:e.NonEmptyString(),isOptional:!1},appId:{type:e.NonEmptyString(),isOptional:!1},resourceId:{type:e.NonEmptyString(),isOptional:!0},designPackKey:{type:e.NonEmptyString(),isOptional:!0},designPackVersion:{type:e.NonEmptyString(),isOptional:!0},revision:{type:e.Int_unsecure(),isOptional:!0},payload:{type:e.String_unsecure(),isOptional:!0}}}),DesignOperationOutput=new o({name:"DesignOperationOutput",fields:{status:{type:e.NonEmptyString(),isOptional:!1},resourceId:{type:e.NonEmptyString(),isOptional:!0},revision:{type:e.Int_unsecure(),isOptional:!0},contentDigest:{type:e.NonEmptyString(),isOptional:!0},payload:{type:e.String_unsecure(),isOptional:!0}}});function a(s,n){return{key:s,version:"1.0.0",title:n,description:n,goal:`${n} through the tenant-safe design platform.`,context:"Design operations cannot change RoleMorph authorization, actions, component membership, or hidden-data decisions.",domain:"design-system",owners:["platform.design"],tags:["design-pack","design-studio"],stability:"experimental"}}function i(s,n){return p({meta:a(s,n),io:{input:DesignOperationInput,output:DesignOperationOutput},policy:{auth:"user",permissions:["design.read"],pii:[]}})}function t(s,n,r="design.write"){return d({meta:a(s,n),io:{input:DesignOperationInput,output:DesignOperationOutput},policy:{auth:"user",permissions:[r],pii:[]}})}export const DesignCatalogListQuery=i("design.catalog.list","List design catalog"),DesignCatalogGetQuery=i("design.catalog.get","Get design pack"),DesignSelectionGetQuery=i("design.selection.get","Get user design selection"),DesignSelectionSetCommand=t("design.selection.set","Set user design selection"),DesignSelectionResetCommand=t("design.selection.reset","Reset user design selection"),DesignTenantConfigurationGetQuery=i("design.tenant-configuration.get","Get tenant design configuration"),DesignTenantConfigurationSetCommand=t("design.tenant-configuration.set","Set narrowed tenant design configuration","design.publish"),DesignDraftCreateCommand=t("design.draft.create","Create private design draft"),DesignDraftCloneCommand=t("design.draft.clone","Clone private design draft"),DesignDraftUpdateCommand=t("design.draft.update","Update private design draft"),DesignDraftPreviewQuery=i("design.draft.preview","Preview private design draft"),DesignDraftRestoreCommand=t("design.draft.restore","Restore private design draft"),DesignDraftDeleteCommand=t("design.draft.delete","Delete private design draft"),DesignDraftValidateQuery=i("design.draft.validate","Validate private design draft"),DesignDraftCertifyCommand=t("design.draft.certify","Certify private design draft","design.publish"),DesignPublishCommand=t("design.publish","Publish immutable tenant design","design.publish"),DesignUnpublishCommand=t("design.unpublish","Unpublish tenant design","design.unpublish"),DesignAuditGetQuery=i("design.audit.get","Inspect design audit evidence"),DesignPackOperations=[DesignCatalogListQuery,DesignCatalogGetQuery,DesignSelectionGetQuery,DesignSelectionSetCommand,DesignSelectionResetCommand,DesignTenantConfigurationGetQuery,DesignTenantConfigurationSetCommand,DesignDraftCreateCommand,DesignDraftCloneCommand,DesignDraftUpdateCommand,DesignDraftPreviewQuery,DesignDraftRestoreCommand,DesignDraftDeleteCommand,DesignDraftValidateQuery,DesignDraftCertifyCommand,DesignPublishCommand,DesignUnpublishCommand,DesignAuditGetQuery],DesignPackOperationsDocBlock={id:"docs.contracts-spec.design-packs.operations",title:"Design pack operations",summary:"Versioned catalog, selection, private draft, certification, publication, and evidence operations.",kind:"reference",visibility:"public",route:"/docs/contracts-spec/design-packs/operations",tags:["design-pack","design-studio","operations"],body:`# Design pack operations
+
+Queries cover catalog discovery, selection reads, previews, validation, and audit evidence. Commands cover selection changes, owner-scoped draft lifecycle, certification, immutable publication, and unpublication. Publication and unpublication require their exact permissions; runtime handlers must preserve tenant and RoleMorph boundaries.`};export{DesignOperationInput,DesignOperationOutput};

package/dist/node/design-packs/patch-validation.js

@@ -0,0 +1 @@
+import{invalidComponentProps as n,unsafeDesignValue as o}from"./patch-value-validation.js";const i=/^\/(?:theme\/tokens\/(?:colors|typography|space|radii|shadows|motion|elevation|density)\/[^/]+\/(?:value|description)|theme\/components\/\d+\/variants\/[^/]+\/(?:props|tokens)|layoutRecipes\/(?:app-shell|dashboard|collection|detail|form|workflow|marketing|auth)\/(?:regions|variant)|componentProfile\/[^/]+)$/;export function validateSafeDesignPatch(e){const s=[];if(e.format!=="contractspec.design-patch/v1"||!Array.isArray(e.operations))return{valid:!1,issues:[{index:-1,code:"invalid_patch",message:"Invalid patch"}]};if(e.operations.length>100)s.push({index:-1,code:"patch_too_large",message:"A design patch may contain at most 100 operations"});e.operations.forEach((a,t)=>{if(!a||!["add","replace","remove"].includes(a.op)||typeof a.path!=="string"||!i.test(a.path))s.push({index:t,code:"unsafe_patch_path",message:`Patch path "${a.path}" is outside the design allowlist`});c(a,t,s)});return{valid:s.length===0,issues:s}}function c(e,s,a){if(e.op==="remove"&&"value"in e)a.push({index:s,code:"unexpected_patch_value",message:"Remove operations cannot include a value"});else if(e.op!=="remove"&&!("value"in e))a.push({index:s,code:"missing_patch_value",message:"Add and replace operations require a value"});else if("value"in e&&o(e.value))a.push({index:s,code:"unsafe_patch_value",message:"Patch values cannot contain executable or remote asset code"});if(e.path.endsWith("/props")&&"value"in e&&n(e.value))a.push({index:s,code:"behavioral_component_props",message:"Component props must be presentation-only"})}

package/dist/node/design-packs/patch-value-validation.js

@@ -0,0 +1 @@
+const e=/(?:<\/?[a-z][^>]*>|javascript\s*:|vbscript\s*:|data\s*:\s*text\/html|@import\b|url\s*\(|expression\s*\()/i,r=/^(?:__proto__|prototype|constructor)$/i,n=/^(?:hidden|disabled|href|action|data|role|tabindex|aria-|on[a-z])/i,i=new Set(["background","border","density","emphasis","foreground","motion","radius","shadow","shape","size","spacing","tone","typography"]);export function unsafeDesignValue(t){if(typeof t==="string")return e.test(t);if(Array.isArray(t))return t.some(unsafeDesignValue);if(t&&typeof t==="object")return Object.entries(t).some(([o,s])=>r.test(o)||n.test(o)||unsafeDesignValue(s));return!1}export function invalidComponentProps(t){return typeof t!=="object"||t===null||Array.isArray(t)||Object.keys(t).some((o)=>!i.has(o))}

package/dist/node/design-packs/patches.d.js

@@ -0,0 +1 @@
+export{validateSafeDesignPatch}from"./patch-validation.js";

package/dist/node/design-packs/patches.js

@@ -0,0 +1 @@
+export{validateSafeDesignPatch}from"./patch-validation.js";

package/dist/node/design-packs/registry.js

@@ -0,0 +1 @@
+import{SpecContractRegistry as i}from"../registry.js";import{resolveDesignPackInheritance as t}from"./inheritance.js";export class DesignPackRegistry extends i{constructor(e){super("design-pack",e)}listByIndustry(e){return this.list().filter((s)=>s.tags.industries.includes(e))}listByStyle(e){return this.list().filter((s)=>s.tags.styles.includes(e))}listByPlatform(e){return this.list().filter((s)=>s.platforms.includes(e))}resolve(e){return t(this,e)}}

package/dist/node/design-packs/resolution-helpers.js

@@ -0,0 +1 @@
+export function narrowTenantAllowed(e,n,i){if(!n)return e;if(!e)return n;const a=n.filter((t)=>s(e,t));if(a.length!==n.length)i.push({code:"tenant_policy_widening_ignored",message:"Tenant allowed designs outside the app policy were ignored",source:"tenant"});return a}export function isEligibleDesign(e,n,i,a,t,o,d,r,u){if(!d&&i&&!s(i,e)){o.push({code:"candidate_unavailable",message:"Design pack is unavailable",source:n,candidate:e});return!1}if(!d&&!r&&u!=="app"&&a&&!s(a,e)){o.push({code:"candidate_not_allowed_by_app",message:"Design pack is outside the app policy",source:n,candidate:e});return!1}if(!d&&!r&&(n==="user-private"||n==="tenant"||u==="tenant")&&t&&!s(t,e)){o.push({code:"candidate_not_allowed_by_tenant",message:"Design pack is outside the tenant policy",source:n,candidate:e});return!1}return!0}export function customDesignRank(e){return e==="disabled"?0:e==="private"?1:2}export function narrowCustomDesigns(e,n){if(!n||customDesignRank(n)>customDesignRank(e))return e;return n}function s(e,n){return e.some((i)=>i.key===n.key&&i.version===n.version)}

package/dist/node/design-packs/runtime.js

@@ -0,0 +1 @@
+import{customDesignRank as c,isEligibleDesign as r,narrowCustomDesigns as d,narrowTenantAllowed as f}from"./resolution-helpers.js";export const CONTRACTSPEC_EDITORIAL_DESIGN_PACK_REF={key:"contractspec.design.editorial",version:"1.0.0"},CONTRACTSPEC_EXECUTIVE_LEDGER_DESIGN_PACK_REF={key:"contractspec.design.executive-ledger",version:"2.0.0"};export function resolveDesignSelection(e){const n=[],o=e.policy.allowed,a=d(e.policy.customDesigns,e.tenantPolicy?.customDesigns);if(e.tenantPolicy?.customDesigns&&c(e.tenantPolicy.customDesigns)>c(e.policy.customDesigns))n.push({code:"tenant_custom_design_widening_ignored",message:"Tenant custom design policy cannot widen the app policy",source:"tenant"});const l=f(o,e.tenantPolicy?.allowed,n),s=[];if(e.policy.mode==="fixed")s.push({ref:e.policy.fixed??e.policy.default,source:"fixed",fixedPolicyOwner:"app"});else if(e.tenantPolicy?.mode==="fixed"){if(!e.tenantPolicy.fixed&&!e.tenantPolicy.default)n.push({code:"fixed_policy_missing_ref",message:"Fixed tenant design policy did not provide a fixed design pack",source:"fixed"});s.push({ref:e.tenantPolicy.fixed??e.tenantPolicy.default,source:"fixed",fixedPolicyOwner:"tenant"})}else{if(e.userSelection?.visibility==="private"){const i=e.userSelection.kind==="private-draft";if(i&&a==="disabled")n.push({code:"private_draft_disabled",message:"Private custom designs are disabled by the effective policy",source:"user-private",candidate:e.userSelection.designPack});else if(i&&e.userSelection.draftOwnerUserId!==e.userSelection.userId)n.push({code:"private_draft_owner_mismatch",message:"A private draft can only be selected by its owner",source:"user-private",candidate:e.userSelection.designPack});else s.push({ref:e.userSelection.designPack,source:"user-private",privateDraft:i})}else if(e.userSelection)n.push({code:"user_selection_not_private",message:"Only private user design selections are eligible",source:"user-private"});s.push({ref:e.tenantPolicy?.default,source:"tenant"})}s.push({ref:e.policy.default,source:"app"});for(const i of e.tenantPolicy?.fallbacks??[])s.push({ref:i,source:"fallback"});for(const i of e.policy.fallbacks??[])s.push({ref:i,source:"fallback"});for(const i of s){if(!i.ref)continue;if(r(i.ref,i.source,e.available,o,l,n,i.privateDraft??!1,a==="tenant-publish"&&g(e.tenantPublished,i.ref),i.fixedPolicyOwner))return{designPack:i.ref,source:i.source,diagnostics:n}}const t=e.editorialFallback??CONTRACTSPEC_EDITORIAL_DESIGN_PACK_REF;n.push({code:"editorial_fallback_used",message:"No eligible configured design pack was available; using editorial fallback",source:"editorial",candidate:t});return{designPack:t,source:"editorial",diagnostics:n}}function g(e,n){return e?.some((o)=>o.key===n.key&&o.version===n.version)??!1}

package/dist/node/design-packs/types.js

@@ -0,0 +1 @@
+export const defineDesignPack=(e)=>e;export function makeDesignPackRef(e){return{key:e.meta.key,version:e.meta.version}}

package/dist/node/design-packs/validation.js

@@ -0,0 +1 @@
+export class DesignPackValidationError extends Error{issues;constructor(i,e){super(i);this.issues=e;this.name="DesignPackValidationError"}}export function validateDesignPackSpec(i){const e=[];for(const t of["actions","permissions","capabilities","hiddenData","dataVisibility","roleMorph","policy"])if(t in i)e.push(n(t,"authority_boundary_forbidden",`Design packs cannot declare ${t}`));s(i.meta.key,"meta.key",e);s(i.meta.version,"meta.version",e);if(!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(i.meta.version))e.push(n("meta.version","version_invalid","Design pack version must be semantic"));s(i.meta.title,"meta.title",e);s(i.meta.domain,"meta.domain",e);r(i.meta.owners,"meta.owners",e);if(i.extends?.key===i.meta.key&&i.extends.version===i.meta.version)e.push(n("extends","inheritance_self_reference","A design pack cannot extend itself"));s(i.theme.key,"theme.key",e);s(i.theme.version,"theme.version",e);r(i.tags.industries,"tags.industries",e);r(i.tags.styles,"tags.styles",e);r(i.platforms,"platforms",e);r(i.modes,"modes",e);d(i.layoutRecipes,e);if(i.preview&&!i.preview.alt.trim())e.push(n("preview.alt","preview_alt_empty","Preview alt text is required"));for(const[t,a]of[["imageUrl",i.preview?.imageUrl],["thumbnailUrl",i.preview?.thumbnailUrl]])if(a&&/^(?:data|javascript|vbscript):/i.test(a.trim()))e.push(n(`preview.${t}`,"preview_url_unsafe",`Preview ${t} cannot use an executable or embedded-data URL`));return{valid:e.every((t)=>t.level!=="error"),issues:e}}export function assertDesignPackSpecValid(i){const e=validateDesignPackSpec(i);if(!e.valid)throw new DesignPackValidationError(`Design pack ${i.meta.key}.v${i.meta.version} is invalid`,e.issues)}function d(i,e){const t=Object.entries(i);if(t.length===0)e.push(n("layoutRecipes","layout_recipes_empty","At least one layout recipe is required"));for(const[a,o]of t){const l=`layoutRecipes.${a}`;s(o.key,`${l}.key`,e);r(o.regions,`${l}.regions`,e);if(o.key!==a)e.push({level:"warning",code:"layout_recipe_key_mismatch",path:`${l}.key`,message:`Recipe key "${o.key}" differs from record key "${a}"`})}}function s(i,e,t){if(!i?.trim())t.push(n(e,"required_text_empty",`${e} must be non-empty`))}function r(i,e,t){if(i.length===0){t.push(n(e,"required_list_empty",`${e} must contain at least one value`));return}if(i.some((a)=>!a.trim()))t.push(n(e,"list_value_empty",`${e} cannot contain empty values`));if(new Set(i).size!==i.length)t.push(n(e,"list_value_duplicate",`${e} cannot contain duplicate values`))}function n(i,e,t){return{level:"error",code:e,path:i,message:t}}

package/dist/node/docs/capabilities/documentationSystem.capability.js

@@ -0,0 +1 @@
+import{defineCapability as e}from"../../capabilities/index.js";import{DOCS_DOMAIN as o,DOCS_OWNERS as s,DOCS_STABILITY as n,DOCS_TAGS as t}from"../constants.js";export const DocumentationSystemCapability=e({meta:{key:"docs.system",version:"1.0.0",kind:"ui",title:"Documentation System",description:"End-to-end docs generation, indexing, and presentation.",domain:o,owners:s,tags:[...t,"system"],stability:n},provides:[{surface:"operation",key:"docs.generate",version:"1.0.0",description:"Generate documentation artifacts."},{surface:"operation",key:"docs.publish",version:"1.0.0",description:"Publish documentation artifacts."},{surface:"operation",key:"docs_search",version:"1.0.0",description:"Index and search DocBlocks."},{surface:"operation",key:"docs.contract.reference",version:"1.0.0",description:"Resolve contract references for docs."},{surface:"event",key:"docs.generated",version:"1.0.0",description:"Docs generation completed."},{surface:"event",key:"docs.published",version:"1.0.0",description:"Docs publish completed."},{surface:"presentation",key:"docs.layout",version:"1.0.0",description:"Docs layout presentation."},{surface:"presentation",key:"docs.reference.page",version:"1.0.0",description:"Docs reference page presentation."}]});

package/dist/node/docs/capabilities/index.d.js

@@ -0,0 +1 @@
+export*from"./documentationSystem.capability.js";

package/dist/node/docs/capabilities/index.js

@@ -0,0 +1 @@
+export*from"./documentationSystem.capability.js";

package/dist/node/docs/commands/docsGenerate.command.js

@@ -0,0 +1,4 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineCommand as r}from"../../operations/index.js";import{DOCS_DOMAIN as o,DOCS_OWNERS as n,DOCS_STABILITY as i,DOCS_TAGS as s}from"../constants.js";import{DocsGeneratedEvent as a}from"../events/docsGenerated.event.js";import{docId as c}from"../registry.js";const u=new t({name:"DocsArtifact",fields:{path:{type:e.String_unsecure(),isOptional:!1},format:{type:e.String_unsecure(),isOptional:!0},bytes:{type:e.Int_unsecure(),isOptional:!0},kind:{type:e.String_unsecure(),isOptional:!0}}}),p=new t({name:"DocsGenerateInput",fields:{workspaceRoot:{type:e.String_unsecure(),isOptional:!0},outputDir:{type:e.String_unsecure(),isOptional:!0},version:{type:e.String_unsecure(),isOptional:!0},formats:{type:e.String_unsecure(),isOptional:!0,isArray:!0},includeInternal:{type:e.Boolean(),isOptional:!0},includeExperimental:{type:e.Boolean(),isOptional:!0},contractFilter:{type:e.String_unsecure(),isOptional:!0},docblockFilter:{type:e.String_unsecure(),isOptional:!0},dryRun:{type:e.Boolean(),isOptional:!0}}}),d=new t({name:"DocsGenerateOutput",fields:{buildId:{type:e.String_unsecure(),isOptional:!1},version:{type:e.String_unsecure(),isOptional:!0},generatedAt:{type:e.DateTime(),isOptional:!1},outputDir:{type:e.String_unsecure(),isOptional:!0},artifacts:{type:u,isOptional:!0,isArray:!0},warnings:{type:e.String_unsecure(),isOptional:!0,isArray:!0}}});export const DocsGenerateDocBlock={id:"docs.tech.docs-generator",title:"Docs generator",summary:"Generate reference docs and metadata from ContractSpecs.",kind:"how",visibility:"public",route:"/docs/tech/docs/generator",tags:["docs","generator","cli"],body:`# Docs generator
+
+The generator produces documentation artifacts, search metadata, and reference pages from ContractSpecs and DocBlocks.
+`},DocsGenerateCommand=r({meta:{key:"docs.generate",title:"Generate Documentation",version:"1.0.0",description:"Generate documentation artifacts from ContractSpecs.",goal:"Produce up-to-date reference docs and guides from specs and DocBlocks.",context:"Used by CLI and CI to keep docs in sync with contract definitions.",domain:o,owners:n,tags:[...s,"generation"],stability:i,docId:[c("docs.tech.docs-generator")]},capability:{key:"docs.system",version:"1.0.0"},io:{input:p,output:d,errors:{OUTPUT_WRITE_FAILED:{description:"Failed to write generated docs output.",http:500,when:"The generator cannot persist artifacts to the output path."}}},policy:{auth:"admin",pii:[]},sideEffects:{emits:[{ref:a.meta,when:"Docs generation completes successfully."}]}});

package/dist/node/docs/commands/docsPublish.command.js

@@ -0,0 +1,4 @@
+import{ScalarTypeEnum as t,SchemaModel as e}from"@lssm/lib.schema";import{defineCommand as s}from"../../operations/index.js";import{DOCS_DOMAIN as i,DOCS_OWNERS as o,DOCS_STABILITY as n,DOCS_TAGS as r}from"../constants.js";import{DocsPublishedEvent as u}from"../events/docsPublished.event.js";import{docId as a}from"../registry.js";const c=new e({name:"DocsPublishInput",fields:{buildId:{type:t.String_unsecure(),isOptional:!1},version:{type:t.String_unsecure(),isOptional:!0},environment:{type:t.String_unsecure(),isOptional:!0},deployTarget:{type:t.String_unsecure(),isOptional:!0},artifactPath:{type:t.String_unsecure(),isOptional:!0},dryRun:{type:t.Boolean(),isOptional:!0},notes:{type:t.String_unsecure(),isOptional:!0}}}),p=new e({name:"DocsPublishOutput",fields:{publishId:{type:t.String_unsecure(),isOptional:!1},publishedAt:{type:t.DateTime(),isOptional:!1},url:{type:t.String_unsecure(),isOptional:!0},status:{type:t.String_unsecure(),isOptional:!0},warnings:{type:t.String_unsecure(),isOptional:!0,isArray:!0}}});export const DocsPublishDocBlock={id:"docs.tech.docs-publish",title:"Docs publish",summary:"Publish generated artifacts to the docs host.",kind:"how",visibility:"public",route:"/docs/tech/docs/publish",tags:["docs","publish"],body:`# Docs publish
+
+Publishing moves generated artifacts to a hosting target with versioning and release metadata.
+`},DocsPublishCommand=s({meta:{key:"docs.publish",title:"Publish Documentation",version:"1.0.0",description:"Publish generated documentation artifacts.",goal:"Deploy docs to the public docs surface with consistent versioning.",context:"Used by release pipelines to push generated docs to hosting targets.",domain:i,owners:o,tags:[...r,"publish"],stability:n,docId:[a("docs.tech.docs-publish")]},capability:{key:"docs.system",version:"1.0.0"},io:{input:c,output:p,errors:{DEPLOY_FAILED:{description:"Failed to deploy documentation artifacts.",http:500,when:"The docs publish step fails to deploy to the target host."}}},policy:{auth:"admin",pii:[]},sideEffects:{emits:[{ref:u.meta,when:"Docs publish completes successfully."}]}});

package/dist/node/docs/commands/index.d.js

@@ -0,0 +1 @@
+export*from"./docsGenerate.command.js";export*from"./docsPublish.command.js";

package/dist/node/docs/commands/index.js

@@ -0,0 +1 @@
+export*from"./docsGenerate.command.js";export*from"./docsPublish.command.js";

package/dist/node/docs/constants.js

@@ -0,0 +1 @@
+import{StabilityEnum as o}from"../ownership.js";export const DOCS_DOMAIN="docs",DOCS_OWNERS=["docs-platform"],DOCS_TAGS=["docs","documentation"],DOCS_STABILITY=o.Experimental;

package/dist/node/docs/contracts.js

@@ -0,0 +1 @@
+import{DocsGenerateCommand as r,DocsPublishCommand as t}from"./commands/index.js";import{DocsGeneratedEvent as o,DocsPublishedEvent as s}from"./events/index.js";import{DocsSearchForm as i}from"./forms/index.js";import{DocsLayoutPresentation as n,DocsReferencePagePresentation as a}from"./presentations/index.js";import{ContractReferenceQuery as c,DocsIndexQuery as p}from"./queries/index.js";import{ContractReferenceDataView as m,DocsIndexDataView as g,ExampleCatalogDataView as D}from"./views/index.js";export const docsOperationContracts={DocsIndexQuery:p,ContractReferenceQuery:c,DocsGenerateCommand:r,DocsPublishCommand:t},docsEventContracts={DocsGeneratedEvent:o,DocsPublishedEvent:s},docsPresentationContracts={DocsLayoutPresentation:n,DocsReferencePagePresentation:a},docsFormContracts={DocsSearchForm:i},docsDataViewContracts={DocsIndexDataView:g,ContractReferenceDataView:m,ExampleCatalogDataView:D};export function registerDocsOperations(e){return e.register(p).register(c).register(r).register(t)}export function registerDocsEvents(e){return e.register(o).register(s)}export function registerDocsPresentations(e){return e.register(n).register(a)}export function registerDocsForms(e){return e.register(i)}export function registerDocsDataViews(e){return e.register(g).register(m).register(D)}