@lssm/lib.contracts-spec 17.3.2

package/dist/node/operations/agent/update.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as n}from"../../ownership.js";import{IdempotencyKeyScalar as i}from"../../shared/index.js";import{defineCommand as a}from"../operation.js";import{AGENT_DOMAIN as r,AGENT_OWNERS as o,AGENT_TAGS as s,AgentDetail as p,AgentMutationErrors as u,AgentScopeFields as d}from"./shared-schemas.js";const m=new t({name:"AgentUpdateInput",fields:{...d,agentId:{type:e.String_unsecure(),isOptional:!1},expectedVersion:{type:e.Int_unsecure(),isOptional:!1},idempotencyKey:{type:i,isOptional:!1},name:{type:e.String_unsecure(),isOptional:!0},description:{type:e.String_unsecure(),isOptional:!0},tags:{type:e.String_unsecure(),isOptional:!0,isArray:!0},ownerIds:{type:e.String_unsecure(),isOptional:!0,isArray:!0}}}),c=new t({name:"AgentUpdateOutput",fields:{agent:{type:p,isOptional:!1},auditEventId:{type:e.String_unsecure(),isOptional:!1}}});export const AgentUpdateCommand=a({meta:{key:"agent.update",title:"Agent Update",version:"1.0.0",description:"Edit agent metadata (name, description, owners, tags). Lifecycle, autonomy, risk tier, and tool wiring have dedicated commands.",goal:"Let operators rename / re-tag / re-assign an agent without invalidating its lifecycle or policy bindings.",context:"Phase 0.4.A mutation. Optimistic concurrency via expectedVersion. See DOMAIN_NOTES §1.4.",domain:r,owners:[...o],tags:[...s,"update","metadata"],stability:n.Experimental},io:{input:m,output:c,errors:{...u}},policy:{auth:"user",permissions:["agent.fleet.manage"],pii:[]},sideEffects:{audit:["agent.updated"]}});

package/dist/node/operations/approval.js

@@ -0,0 +1 @@
+export const OPERATION_EXECUTION_EFFECTS=["read","write","destructive","cost-bearing","external-side-effect"];export function requiredApprovalEffects(e){return e.approval?.effects??e.effects??[]}

package/dist/node/operations/audit/event.export.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineCommand as n}from"../operation.js";import{AUDIT_DOMAIN as a,AUDIT_OWNERS as o}from"./shared-schemas.js";const r=new t({name:"AuditEventExportInput",fields:{tenantId:{type:e.NonEmptyString(),isOptional:!1},filter:{type:e.String_unsecure(),isOptional:!1},format:{type:e.NonEmptyString(),isOptional:!0},signing:{type:e.NonEmptyString(),isOptional:!0},reason:{type:e.NonEmptyString(),isOptional:!1},idempotencyKey:{type:e.ID(),isOptional:!1}}}),p=new t({name:"AuditEventExportOutput",fields:{exportId:{type:e.ID(),isOptional:!1},state:{type:e.NonEmptyString(),isOptional:!1},signedUrl:{type:e.String_unsecure(),isOptional:!0},auditEventId:{type:e.ID(),isOptional:!1}}});export const EventExportCommand=n({meta:{key:"audit.event.export",title:"Export Audit Event Bundle",version:"1.0.0",description:"Materialise a signed audit-log export bundle for a filtered window; emits self-audit event.",goal:"Let auditors + admins export compliance-grade audit bundles with signatures and idempotency.",context:"Phase 0.4.E contract authoring. Reason field mandatory and logged. signing=none forbidden for regulatory class. SEAMS S-11 always-on audit emission.",domain:a,owners:[...o],tags:["audit","write","compliance","export","agent-workflow-pillar"],stability:i.Experimental},io:{input:r,output:p,errors:{CONFLICT:{description:"Pending export with same idempotencyKey already in flight.",http:409,when:"Same key reused before prior export completes."},FORBIDDEN:{description:"Caller lacks `audit.read` + `audit.export`, or set signing=none with regulatory-class filter.",http:403,when:"Capability missing or invariant violation."},VALIDATION:{description:"Bad filter shape, unknown format, or invalid signing mode.",http:400,when:"Input rejected at validation; recoverable=false."},DEPENDENCY:{description:"Evidence vault or signing service unavailable.",http:503,when:"Underlying adapter transient; recoverable=true."},IDEMPOTENCY_FAIL:{description:"idempotencyKey collision with differing payload.",http:409,when:"Same key reused with differing context; recoverable=false."}}},policy:{auth:"user",permissions:["audit.read","audit.export"],pii:[]}});

package/dist/node/operations/audit/event.get.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineQuery as n}from"../operation.js";import{AUDIT_DOMAIN as a,AUDIT_OWNERS as o}from"./shared-schemas.js";const r=new t({name:"AuditEventGetInput",fields:{tenantId:{type:e.NonEmptyString(),isOptional:!1},eventId:{type:e.ID(),isOptional:!1},includeEvidence:{type:e.Boolean(),isOptional:!0}}}),s=new t({name:"AuditEventGetOutput",fields:{id:{type:e.ID(),isOptional:!1},occurredAt:{type:e.DateTime(),isOptional:!1},actor:{type:e.NonEmptyString(),isOptional:!1},subject:{type:e.NonEmptyString(),isOptional:!1},category:{type:e.NonEmptyString(),isOptional:!1},severity:{type:e.NonEmptyString(),isOptional:!1},retentionClass:{type:e.NonEmptyString(),isOptional:!1},eventKind:{type:e.NonEmptyString(),isOptional:!1},payload:{type:e.String_unsecure(),isOptional:!1},evidence:{type:e.String_unsecure(),isOptional:!0},related:{type:e.String_unsecure(),isOptional:!1}}});export const EventGetQuery=n({meta:{key:"audit.event.get",title:"Get Audit Event Detail",version:"1.0.0",description:"Detail view for a single audit event including redacted payload, attached evidence, and related events.",goal:"Drive the AuditEventDetail screen and the inline expanded-row drawer on the audit-trail list.",context:"Phase 0.4.E contract authoring. Auditor sees full payload (within retention scope); other personas see redacted projection. includeEvidence default true.",domain:a,owners:[...o],tags:["audit","read","compliance","agent-workflow-pillar"],stability:i.Experimental},io:{input:r,output:s,errors:{NOT_FOUND:{description:"Event id does not exist in this tenant scope.",http:404,when:"No audit record matches (tenantId, eventId)."},FORBIDDEN:{description:"Caller lacks `audit.read`, retention class beyond caller scope, or set `includeEvidence=false` without `audit.export`.",http:403,when:"Persona projection denies access or capability missing."},VALIDATION:{description:"Malformed eventId.",http:400,when:"Input rejected at validation; recoverable=false."}}},policy:{auth:"user",permissions:["audit.read"],pii:[]}});

package/dist/node/operations/audit/event.list.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as e}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineQuery as r}from"../operation.js";import{AUDIT_DOMAIN as n,AUDIT_OWNERS as a}from"./shared-schemas.js";const o=new e({name:"AuditEventListInput",fields:{tenantId:{type:t.NonEmptyString(),isOptional:!1},subjectRef:{type:t.String_unsecure(),isOptional:!0},actorRef:{type:t.String_unsecure(),isOptional:!0},category:{type:t.NonEmptyString(),isOptional:!0,isArray:!0},severity:{type:t.NonEmptyString(),isOptional:!0,isArray:!0},from:{type:t.DateTime(),isOptional:!0},to:{type:t.DateTime(),isOptional:!0},retentionClass:{type:t.NonEmptyString(),isOptional:!0,isArray:!0},includeExpired:{type:t.Boolean(),isOptional:!0},cursor:{type:t.String_unsecure(),isOptional:!0},limit:{type:t.Int_unsecure(),isOptional:!0}}}),s=new e({name:"AuditEventListOutput",fields:{items:{type:t.String_unsecure(),isOptional:!1},nextCursor:{type:t.String_unsecure(),isOptional:!0},approxTotal:{type:t.Int_unsecure(),isOptional:!0}}});export const EventListQuery=r({meta:{key:"audit.event.list",title:"List Audit Events",version:"1.0.0",description:"Paginated query over the immutable audit log filtered by subject, actor, category, severity, and retention window.",goal:"Power the audit-trail screen, compliance investigations, and operator-inbox feeds.",context:"Phase 0.4.E contract authoring. Auditor + ops + admin all read; capability `audit.read` enforced. Retention-window filter automatic; includeExpired forensic peek requires `audit.export` (Q-14 deferred to admin RBAC; v1.0 honours flag iff cap present).",domain:n,owners:[...a],tags:["audit","read","compliance","agent-workflow-pillar"],stability:i.Experimental},io:{input:o,output:s,errors:{FORBIDDEN:{description:"Caller lacks `audit.read`, requested `includeExpired` without `audit.export`, or tenant scope mismatch.",http:403,when:"Persona projection denies access or capability missing."},VALIDATION:{description:"Bad filter, cursor token, malformed date range, or limit out of range.",http:400,when:"Input rejected at validation; recoverable=false."}}},policy:{auth:"user",permissions:["audit.read"],pii:[]}});

package/dist/node/operations/audit/evidence.attach.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as e}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineCommand as n}from"../operation.js";import{AUDIT_DOMAIN as a,AUDIT_OWNERS as o}from"./shared-schemas.js";const r=new e({name:"AuditEvidenceAttachInput",fields:{tenantId:{type:t.NonEmptyString(),isOptional:!1},eventId:{type:t.ID(),isOptional:!1},evidenceKind:{type:t.NonEmptyString(),isOptional:!1},payload:{type:t.String_unsecure(),isOptional:!1},actorRef:{type:t.NonEmptyString(),isOptional:!1},attachContext:{type:t.String_unsecure(),isOptional:!1},redactionPolicy:{type:t.NonEmptyString(),isOptional:!0},idempotencyKey:{type:t.ID(),isOptional:!1}}}),p=new e({name:"AuditEvidenceAttachOutput",fields:{id:{type:t.ID(),isOptional:!1},parentEventId:{type:t.ID(),isOptional:!1},kind:{type:t.NonEmptyString(),isOptional:!1},hash:{type:t.NonEmptyString(),isOptional:!1},signedAt:{type:t.DateTime(),isOptional:!0},retentionClass:{type:t.NonEmptyString(),isOptional:!1},state:{type:t.NonEmptyString(),isOptional:!1},auditEventId:{type:t.ID(),isOptional:!1}}});export const EvidenceAttachCommand=n({meta:{key:"audit.evidence.attach",title:"Attach Evidence to Audit Event",version:"1.0.0",description:"Append evidence to an existing audit event; capability resolved per caller domain via attachContext discriminator.",goal:"Let review/governance/agent/admin/system callers attach justification or proof artefacts to an immutable audit record.",context:"Phase 0.4.E contract authoring. SEAMS S-08 (3 caller domains converge) + Q-09 (single-item v1.0). Append-only — parent event never mutates.",domain:a,owners:[...o],tags:["audit","write","evidence","compliance","agent-workflow-pillar"],stability:i.Experimental},io:{input:r,output:p,errors:{NOT_FOUND:{description:"Parent event id does not exist in this tenant scope.",http:404,when:"No audit record matches (tenantId, eventId)."},CONFLICT:{description:"Duplicate attach with same idempotencyKey + evidenceHash.",http:409,when:"Idempotent replay returns the existing record; differing hash → CONFLICT."},FORBIDDEN:{description:"attachContext.kind does not match the caller domain, or caller lacks the capability for that kind.",http:403,when:"Capability gate per SEAMS §3.8 matrix; auditor → typically FORBIDDEN unless explicitly granted attach scope."},VALIDATION:{description:"Payload shape mismatch with evidenceKind, malformed attachContext, or unknown evidenceKind.",http:400,when:"Input rejected at validation; recoverable=false."},DEPENDENCY:{description:"Blob upload missing or scan service down.",http:503,when:"Underlying adapter transient; recoverable=true."},IDEMPOTENCY_FAIL:{description:"idempotencyKey collision with differing payload.",http:409,when:"Same key reused with differing context; recoverable=false."}}},policy:{auth:"user",permissions:["audit.read"],pii:[]}});

package/dist/node/operations/audit/pipeline.health.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineQuery as n}from"../operation.js";import{AUDIT_DOMAIN as a,AUDIT_OWNERS as l}from"./shared-schemas.js";const r=new t({name:"AuditPipelineHealthInput",fields:{tenantId:{type:e.NonEmptyString(),isOptional:!1}}}),o=new t({name:"AuditPipelineHealthOutput",fields:{status:{type:e.NonEmptyString(),isOptional:!1},ingestionLagMsP95:{type:e.Int_unsecure(),isOptional:!1},pendingScanEvidence:{type:e.Int_unsecure(),isOptional:!1},quarantinedEvidence:{type:e.Int_unsecure(),isOptional:!1},retentionPurgesPending:{type:e.Int_unsecure(),isOptional:!1},lastEventAt:{type:e.DateTime(),isOptional:!0},symptoms:{type:e.String_unsecure(),isOptional:!1},probedAt:{type:e.DateTime(),isOptional:!1}}});export const PipelineHealthQuery=n({meta:{key:"audit.pipeline.health",title:"Audit Pipeline Health Probe",version:"1.0.0",description:"Health probe for the audit ingestion + retention pipeline; consumed by fleet.health.snapshot.",goal:"Surface audit pipeline state into the operating cockpit fleet health view.",context:"Phase 0.4.E contract authoring. SEAMS Q-05 + S-10 — owned by W5. Probe is cheap; full forensic data lives on event.list / event.get.",domain:a,owners:[...l],tags:["audit","read","health","agent-workflow-pillar"],stability:i.Experimental},capability:{key:"fleet.metrics.read",version:"1.0.0"},io:{input:r,output:o,errors:{FORBIDDEN:{description:"Caller lacks `audit.read` OR `fleet.metrics.read` capability.",http:403,when:"Persona projection denies access (auditor + ops + admin all allowed)."},DEPENDENCY:{description:"Audit store unavailable; probe cannot complete.",http:503,when:"Underlying store transient; recoverable=true. Fleet renders amber."}}},policy:{auth:"user",permissions:["audit.read","fleet.metrics.read"],pii:[]}});

package/dist/node/operations/audit/shared-schemas.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as e}from"@lssm/lib.schema";export const AUDIT_DOMAIN="audit",AUDIT_OWNERS=["@platform.audit"],RETENTION_CLASSES=["regulatory","operational","ephemeral"],AUDIT_CATEGORIES=["governance","review","agent","workflow","fleet","auth","audit"],AUDIT_SEVERITIES=["info","notice","warning","critical"],EVIDENCE_KINDS=["attachment","note","screenshot","signed-statement","external-link"],EVIDENCE_STATES=["PENDING_SCAN","AVAILABLE","QUARANTINED","PURGED"],EXPORT_FORMATS=["jsonl","csv","parquet"],EXPORT_SIGNINGS=["pkcs7","cosign","none"],AuditTenantScopeInput=new e({name:"AuditTenantScopeInput",fields:{tenantId:{type:t.NonEmptyString(),isOptional:!1}}}),AuditRecordSummaryModel=new e({name:"AuditRecordSummaryRow",fields:{id:{type:t.ID(),isOptional:!1},occurredAt:{type:t.DateTime(),isOptional:!1},actor:{type:t.NonEmptyString(),isOptional:!1},subject:{type:t.NonEmptyString(),isOptional:!1},category:{type:t.NonEmptyString(),isOptional:!1},severity:{type:t.NonEmptyString(),isOptional:!1},retentionClass:{type:t.NonEmptyString(),isOptional:!1}}}),EvidenceRecordModel=new e({name:"EvidenceRecord",fields:{id:{type:t.ID(),isOptional:!1},parentEventId:{type:t.ID(),isOptional:!1},kind:{type:t.NonEmptyString(),isOptional:!1},hash:{type:t.NonEmptyString(),isOptional:!1},signedAt:{type:t.DateTime(),isOptional:!0},retentionClass:{type:t.NonEmptyString(),isOptional:!1},state:{type:t.NonEmptyString(),isOptional:!1}}});

package/dist/node/operations/ceremony-authority.js

@@ -0,0 +1 @@
+export class ReferenceOperationCeremonyPort{options;constructor(t){this.options=t}async claim(t){const e=t.receipt,n=await this.options.verifier.verify(e);if(!n)return{effect:"deny",reason:"unknown_ceremony"};if(!s(e,n.receipt))return{effect:"deny",reason:"forged_ceremony"};if(!c(t.subject,n.subject))return{effect:"deny",reason:"wrong_subject"};const o=(this.options.clock??(()=>new Date))().getTime(),r=Date.parse(e.issuedAt),i=Date.parse(e.expiresAt);if(!Number.isFinite(r)||!Number.isFinite(i))return{effect:"deny",reason:"malformed_ceremony"};if(r>o)return{effect:"deny",reason:"not_yet_valid"};if(i<=o)return{effect:"deny",reason:"expired_ceremony"};if(e.host!==this.options.host)return{effect:"deny",reason:"wrong_host"};if(e.kind!==t.requirement.kind)return{effect:"deny",reason:"wrong_kind"};if(e.operation.key!==t.operation.key||e.operation.version!==t.operation.version)return{effect:"deny",reason:"wrong_operation"};const a=await this.options.store.claim({nonce:e.nonce,ceremonyId:e.id,maxAttempts:this.options.maxAttempts??3});return a.claimed?{effect:"allow",ceremonyId:e.id,leaseId:a.leaseId}:{effect:"deny",reason:"replayed_ceremony"}}complete(t){return this.options.store.complete(t)}}function s(t,e){return t.id===e.id&&t.kind===e.kind&&t.host===e.host&&t.issuedAt===e.issuedAt&&t.expiresAt===e.expiresAt&&t.nonce===e.nonce&&t.operation.key===e.operation.key&&t.operation.version===e.operation.version}function c(t,e){return(t.actor??null)===(e.actor??null)&&(t.userId??null)===(e.userId??null)&&(t.tenantId??null)===(e.tenantId??null)&&(t.workspaceId??null)===(e.workspaceId??null)&&(t.organizationId??null)===(e.organizationId??null)&&(t.ceremonyBindingRef??null)===(e.ceremonyBindingRef??null)}export class MemoryOperationCeremonyClaimStore{states=new Map;nonceByLease=new Map;async claim(t){const e=this.states.get(t.nonce)??{attempts:0,state:"available"};if(e.state!=="available"||e.attempts>=t.maxAttempts)return{claimed:!1};const n=`${t.ceremonyId}:${e.attempts+1}`;this.states.set(t.nonce,{attempts:e.attempts+1,state:"claimed",leaseId:n});this.nonceByLease.set(n,t.nonce);return{claimed:!0,leaseId:n}}async complete(t){const e=this.nonceByLease.get(t.leaseId);if(!e)throw Error("Unknown ceremony completion lease.");const n=this.states.get(e);if(!n||n.leaseId!==t.leaseId)throw Error("Stale ceremony completion lease.");this.states.set(e,{attempts:n.attempts,state:t.outcome==="succeeded"?"consumed":"available"});this.nonceByLease.delete(t.leaseId)}}

package/dist/node/operations/coach/agent-suggest-tool.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as o}from"../../ownership.js";import{defineCommand as a}from"../operation.js";import{COACH_DOMAIN as n,COACH_OWNERS as s,COACH_TAGS as i,CoachContextFields as g,CoachErrors as c,CoachScopeFields as r,CoachTrackingFields as l}from"./shared-schemas.js";const u=new t({name:"AgentCoachSuggestToolInput",fields:{...r,agentId:{type:e.String_unsecure(),isOptional:!1},...g}}),p=new t({name:"AgentCoachSuggestToolOutput",fields:{...l,suggestions:{type:e.JSON(),isOptional:!1}}});export const AgentCoachSuggestToolCommand=a({meta:{key:"agent.coach.suggest-tool",title:"Coach — Suggest Agent Tools",version:"1.0.0",description:"Suggest tools to attach to an agent. Returns up to N ranked candidates with rationale + confidence.",goal:"Help operators discover the right tool bindings without scanning the full tool registry.",context:'Phase 6.A coach command. Read-modifying (telemetry side-effect). Inference provided by lib.ai-agent per plan §"Phase 6 — Intelligence layer". Capability gate: coach.suggest.',domain:n,owners:[...s],tags:[...i,"agent","tool","suggest"],stability:o.Experimental},io:{input:u,output:p,errors:{...c}},policy:{auth:"user",permissions:["coach.suggest"],pii:[]},sideEffects:{audit:["coach.suggestion.offered"]}});

package/dist/node/operations/coach/governance-suggest-constraint.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as o}from"../../ownership.js";import{defineCommand as n}from"../operation.js";import{COACH_DOMAIN as a,COACH_OWNERS as i,COACH_TAGS as s,CoachContextFields as c,CoachErrors as r,CoachScopeFields as g,CoachTrackingFields as d}from"./shared-schemas.js";const l=new t({name:"GovernanceCoachSuggestConstraintInput",fields:{...g,policyId:{type:e.String_unsecure(),isOptional:!1},draftDelta:{type:e.JSON(),isOptional:!1},...c}}),p=new t({name:"GovernanceCoachSuggestConstraintOutput",fields:{...d,suggestions:{type:e.JSON(),isOptional:!1}}});export const GovernanceCoachSuggestConstraintCommand=n({meta:{key:"governance.coach.suggest-constraint",title:"Coach — Suggest Policy Constraint",version:"1.0.0",description:"Suggest additional constraints to add to a draft policy delta, ranked by confidence and severity.",goal:"Help policy authors avoid blind spots when extending governance constraints.",context:"Phase 6.A coach command. Read-modifying (telemetry side-effect). Inference by lib.ai-agent. Capability gate: coach.suggest. Operates on draft deltas, not active policies; no governance.policy.update side-effect here.",domain:a,owners:[...i],tags:[...s,"governance","constraint","suggest"],stability:o.Experimental},io:{input:l,output:p,errors:{...r}},policy:{auth:"user",permissions:["coach.suggest"],pii:[]},sideEffects:{audit:["coach.suggestion.offered"]}});

package/dist/node/operations/coach/review-summarize.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{StabilityEnum as a}from"../../ownership.js";import{defineCommand as t}from"../operation.js";import{COACH_DOMAIN as o,COACH_OWNERS as s,COACH_TAGS as r,CoachContextFields as n,CoachErrors as c,CoachScopeFields as m,CoachTrackingFields as u}from"./shared-schemas.js";const l=new i({name:"ReviewCoachSummarizeInput",fields:{...m,reviewId:{type:e.String_unsecure(),isOptional:!1},...n}}),p=new i({name:"ReviewCoachSummarizeOutput",fields:{...u,summary:{type:e.String_unsecure(),isOptional:!1},keyDecisionPoints:{type:e.JSON(),isOptional:!1},riskFlags:{type:e.JSON(),isOptional:!1}}});export const ReviewCoachSummarizeCommand=t({meta:{key:"review.coach.summarize",title:"Coach — Summarise Review",version:"1.0.0",description:"Summarise a review record (subject + history) into a structured brief with decision points and risk flags.",goal:"Reduce reviewer cognitive load so decision quality stays high under queue pressure.",context:"Phase 6.A coach command. Read-modifying (telemetry side-effect). Inference by lib.ai-agent. Capability gate: coach.suggest. Subject resolution follows SEAMS §3.7 dispatch table.",domain:o,owners:[...s],tags:[...r,"review","summarize"],stability:a.Experimental},io:{input:l,output:p,errors:{...c}},policy:{auth:"user",permissions:["coach.suggest"],pii:[]},sideEffects:{audit:["coach.suggestion.offered"]}});

package/dist/node/operations/coach/shared-schemas.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";export const COACH_DOMAIN="coach",COACH_OWNERS=["@platform.coach","@platform.ai-agent"],COACH_TAGS=["coach","agent-workflow-pillar","intelligence"],COACH_LENGTHS=["brief","detailed"],COACH_CONFIDENCE_DESCRIPTION="Confidence ∈ [0, 1] — handler-enforced post-parse.",CoachErrors={NOT_FOUND:{description:"Target entity (agent / workflow run / review / policy) does not exist or is not visible to the caller.",http:404,when:"The caller-supplied id resolves to no record in the active tenant scope.",recoverable:!1},VALIDATION:{description:"Caller payload is structurally invalid or out-of-range.",http:400,when:"Input fails schema validation, or `limit` exceeds the documented max.",recoverable:!1},FORBIDDEN:{description:"Caller does not hold the `coach.suggest` capability.",http:403,when:"PolicyDecider returns deny on the `coach.suggest` permission check.",recoverable:!1},DEPENDENCY:{description:"Inference provider (`lib.ai-agent`) is unavailable, timed out, or returned an unparseable response.",http:503,when:"Upstream model call fails; handler MAY retry with backoff.",recoverable:!0},INTERNAL_ERROR:{description:"Unexpected handler error; details suppressed for security.",http:500,when:"Unhandled exception in the handler.",recoverable:!1}},CoachScopeFields={tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!0}},CoachContextFields={context:{type:e.String_unsecure(),isOptional:!0},limit:{type:e.Int_unsecure(),isOptional:!0},length:{type:e.String_unsecure(),isOptional:!0}},CoachSuggestionBase=new t({name:"CoachSuggestionBase",fields:{id:{type:e.String_unsecure(),isOptional:!1},rationale:{type:e.String_unsecure(),isOptional:!1},confidence:{type:e.Float_unsecure(),isOptional:!1}}}),CoachTrackingFields={suggestionTraceId:{type:e.String_unsecure(),isOptional:!1}};

package/dist/node/operations/coach/workflow-suggest-step.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as o}from"../../ownership.js";import{defineCommand as s}from"../operation.js";import{COACH_DOMAIN as i,COACH_OWNERS as r,COACH_TAGS as n,CoachContextFields as a,CoachErrors as c,CoachScopeFields as p,CoachTrackingFields as u}from"./shared-schemas.js";const g=new t({name:"WorkflowCoachSuggestStepInput",fields:{...p,workflowId:{type:e.String_unsecure(),isOptional:!1},runId:{type:e.String_unsecure(),isOptional:!1},currentStepId:{type:e.String_unsecure(),isOptional:!0},...a}}),l=new t({name:"WorkflowCoachSuggestStepOutput",fields:{...u,suggestions:{type:e.JSON(),isOptional:!1}}});export const WorkflowCoachSuggestStepCommand=s({meta:{key:"workflow.coach.suggest-step",title:"Coach — Suggest Workflow Step",version:"1.0.0",description:"Suggest the next step(s) for an in-flight workflow run, ranked by confidence.",goal:"Help operators choose the right next move without re-reading the whole DAG.",context:"Phase 6.A coach command. Read-modifying (telemetry side-effect). Inference by lib.ai-agent. Capability gate: coach.suggest. Does NOT execute step transitions — see workflow.step.advance.",domain:i,owners:[...r],tags:[...n,"workflow","step","suggest"],stability:o.Experimental},io:{input:g,output:l,errors:{...c}},policy:{auth:"user",permissions:["coach.suggest"],pii:[]},sideEffects:{audit:["coach.suggestion.offered"]}});

package/dist/node/operations/economic-evidence.js

@@ -0,0 +1 @@
+const r=/^(usage|cost|budget|replay|projection):[A-Za-z0-9._:/=-]+$/,t=/@|\s|\?|#|&|(^|[:/_.=-])(secret|token|api[_-]?key|password|credential|bearer)([:/_.=-]|$)|sk[-_](live|test|proj)[A-Za-z0-9_-]*|eyJ[A-Za-z0-9_-]{8,}/i,c=new Set(["usage","cost","budget","replay","projection"]);export function isEconomicEvidenceSeamKind(e){return e!==void 0&&c.has(e)}export function isSafeEconomicEvidenceRefId(e){return r.test(e)&&!t.test(e)}export function parseSafeEconomicEvidenceRefId(e,n="@lssm/lib.economic-evidence"){if(!isSafeEconomicEvidenceRefId(e))return;const[o]=e.split(":");if(!isEconomicEvidenceSeamKind(o))return;return{id:e,kind:o,source:n}}export function requireSafeEconomicEvidenceRefIds(e){const n=e.filter((o)=>!isSafeEconomicEvidenceRefId(o));if(n.length>0)throw Error(`EconomicEvidenceInvalidRef: unsafe or invalid economic evidence ref id(s): ${n.length}`);return e}export function mergeSafeEconomicEvidenceRefIds(...e){const n=new Set;for(const o of e)for(const i of o??[])if(typeof i==="string"&&i.length>0)n.add(i);return requireSafeEconomicEvidenceRefIds([...n])}

package/dist/node/operations/fleet/health-snapshot.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as a}from"../../ownership.js";import{defineQuery as n}from"../operation.js";import{FLEET_DOMAIN as s,FLEET_OWNERS as i,FLEET_TAGS as l,FleetReadErrors as o,FleetScopeFields as r,FleetSourceCompositionEntry as p}from"./shared-schemas.js";const u=new t({name:"FleetHealthSnapshotInput",fields:{...r,components:{type:e.String_unsecure(),isOptional:!0,isArray:!0}}}),c=new t({name:"FleetComponentHealth",fields:{name:{type:e.String_unsecure(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},symptoms:{type:e.String_unsecure(),isOptional:!1,isArray:!0},lastCheckedAt:{type:e.String_unsecure(),isOptional:!1}}}),y=new t({name:"FleetCapabilityGateHealth",fields:{capabilityKey:{type:e.String_unsecure(),isOptional:!1},resolution:{type:e.String_unsecure(),isOptional:!1},auditorBlockedCount24h:{type:e.Int_unsecure(),isOptional:!1}}}),h=new t({name:"FleetSloPosture",fields:{name:{type:e.String_unsecure(),isOptional:!1},target:{type:e.Float_unsecure(),isOptional:!1},observed:{type:e.Float_unsecure(),isOptional:!1},budgetRemainingPct:{type:e.Float_unsecure(),isOptional:!1},burnRate1h:{type:e.Float_unsecure(),isOptional:!1},burnRate24h:{type:e.Float_unsecure(),isOptional:!1}}}),m=new t({name:"FleetDependencyHealth",fields:{name:{type:e.String_unsecure(),isOptional:!1},kind:{type:e.String_unsecure(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},latencyMs:{type:e.Int_unsecure(),isOptional:!0},errorRate:{type:e.Float_unsecure(),isOptional:!0}}}),f=new t({name:"FleetHealthSnapshotOutput",fields:{generatedAt:{type:e.String_unsecure(),isOptional:!1},overall:{type:e.String_unsecure(),isOptional:!1},source:{type:p,isOptional:!1,isArray:!0},partialFailure:{type:e.Boolean(),isOptional:!1},components:{type:c,isOptional:!1,isArray:!0},dependencies:{type:m,isOptional:!1,isArray:!0},capabilityGates:{type:y,isOptional:!1,isArray:!0},slo:{type:h,isOptional:!1,isArray:!0}}});export const FleetHealthSnapshotQuery=n({meta:{key:"fleet.health.snapshot",title:"Fleet Health Snapshot",version:"1.0.0",description:"Composes 5 per-domain *.health probes (agent + workflow + review + governance + audit) into the cockpit health strip.",goal:"Power the cockpit health strip and amber/red component banners.",context:"Phase 0.4.F read contract. Composes via public *.health ops only per SEAMS.md §6.2 / §6.4 boundary.",domain:s,owners:[...i],tags:[...l,"health","read","aggregation"],stability:a.Experimental},io:{input:u,output:f,errors:{...o}},policy:{auth:"user",permissions:["fleet.metrics.read"],pii:[]}});

package/dist/node/operations/fleet/metrics-summary.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as s}from"../../ownership.js";import{defineQuery as n}from"../operation.js";import{FLEET_DOMAIN as i,FLEET_OWNERS as l,FLEET_TAGS as a,FleetReadErrors as r,FleetScopeFields as o,FleetSourceCompositionEntry as u,FleetWindowFields as p}from"./shared-schemas.js";const c=new t({name:"FleetMetricsSummaryInput",fields:{...o,...p,include:{type:e.String_unsecure(),isOptional:!0,isArray:!0}}}),f=new t({name:"FleetAgentMetricsRollup",fields:{totalAgents:{type:e.Int_unsecure(),isOptional:!1},running:{type:e.Int_unsecure(),isOptional:!1},idle:{type:e.Int_unsecure(),isOptional:!1},suspended:{type:e.Int_unsecure(),isOptional:!1},errorRate24h:{type:e.Float_unsecure(),isOptional:!1},p95LatencyMs:{type:e.Int_unsecure(),isOptional:!1}}}),y=new t({name:"FleetWorkflowMetricsRollup",fields:{totalDefinitions:{type:e.Int_unsecure(),isOptional:!1},activeRuns:{type:e.Int_unsecure(),isOptional:!1},queuedRuns:{type:e.Int_unsecure(),isOptional:!1},pausedRuns:{type:e.Int_unsecure(),isOptional:!1},completedRuns24h:{type:e.Int_unsecure(),isOptional:!1},failedRuns24h:{type:e.Int_unsecure(),isOptional:!1},p95RunDurationMs:{type:e.Int_unsecure(),isOptional:!1}}}),d=new t({name:"FleetReviewQueueRollup",fields:{pending:{type:e.Int_unsecure(),isOptional:!1},assigned:{type:e.Int_unsecure(),isOptional:!1},escalated:{type:e.Int_unsecure(),isOptional:!1},decidedApproved24h:{type:e.Int_unsecure(),isOptional:!1},decidedRejected24h:{type:e.Int_unsecure(),isOptional:!1},slaBreaches:{type:e.Int_unsecure(),isOptional:!1}}}),m=new t({name:"FleetTotalsRollup",fields:{running:{type:e.Int_unsecure(),isOptional:!1},queued:{type:e.Int_unsecure(),isOptional:!1},stuck:{type:e.Int_unsecure(),isOptional:!1},awaitingHuman:{type:e.Int_unsecure(),isOptional:!1},failed:{type:e.Int_unsecure(),isOptional:!1}}}),O=new t({name:"FleetMetricsSummaryOutput",fields:{generatedAt:{type:e.String_unsecure(),isOptional:!1},windowFrom:{type:e.String_unsecure(),isOptional:!1},windowTo:{type:e.String_unsecure(),isOptional:!1},source:{type:u,isOptional:!1,isArray:!0},partialFailure:{type:e.Boolean(),isOptional:!1},agents:{type:f,isOptional:!0},workflows:{type:y,isOptional:!0},reviews:{type:d,isOptional:!0},totals:{type:m,isOptional:!1}}});export const FleetMetricsSummaryQuery=n({meta:{key:"fleet.metrics.summary",title:"Fleet Metrics Summary",version:"1.0.0",description:"Aggregating read-model over agent + workflow + review domains for the operator cockpit.",goal:"Power the cockpit overview + fleet board with one rollup per source domain.",context:"Phase 0.4.F read contract. Composes agent.fleet.list + workflow.run.list + review.list per SEAMS.md S-10. The fleet handler is the ONLY place where cross-domain composition is allowed.",domain:i,owners:[...l],tags:[...a,"metrics","read","aggregation"],stability:s.Experimental},io:{input:c,output:O,errors:{...r}},policy:{auth:"user",permissions:["fleet.metrics.read"],pii:[]}});

package/dist/node/operations/fleet/roi-snapshot.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as o}from"../../ownership.js";import{defineQuery as s}from"../operation.js";import{FLEET_DOMAIN as i,FLEET_OWNERS as n,FLEET_TAGS as a,FleetReadErrors as l,FleetScopeFields as r,FleetSourceCompositionEntry as p,FleetWindowFields as u}from"./shared-schemas.js";const c=new t({name:"FleetRoiSnapshotInput",fields:{...r,...u,costModel:{type:e.String_unsecure(),isOptional:!0}}}),d=new t({name:"FleetRoiThroughput",fields:{runs:{type:e.Int_unsecure(),isOptional:!1},completedRuns:{type:e.Int_unsecure(),isOptional:!1},autonomousRuns:{type:e.Int_unsecure(),isOptional:!1},humanInLoopRuns:{type:e.Int_unsecure(),isOptional:!1}}}),m=new t({name:"FleetRoiValue",fields:{hoursSaved:{type:e.Float_unsecure(),isOptional:!1},dealsAdvanced:{type:e.Int_unsecure(),isOptional:!1},escalationsResolved:{type:e.Int_unsecure(),isOptional:!1}}}),f=new t({name:"FleetRoiCost",fields:{costVersion:{type:e.String_unsecure(),isOptional:!1},tokens:{type:e.Int_unsecure(),isOptional:!1},usd:{type:e.Float_unsecure(),isOptional:!0}}}),y=new t({name:"FleetRoiRatio",fields:{humanTimeSavedPerUsd:{type:e.Float_unsecure(),isOptional:!0}}}),h=new t({name:"FleetRoiSnapshotOutput",fields:{generatedAt:{type:e.String_unsecure(),isOptional:!1},windowFrom:{type:e.String_unsecure(),isOptional:!1},windowTo:{type:e.String_unsecure(),isOptional:!1},source:{type:p,isOptional:!1,isArray:!0},partialFailure:{type:e.Boolean(),isOptional:!1},throughput:{type:d,isOptional:!1},value:{type:m,isOptional:!1},cost:{type:f,isOptional:!1},ratio:{type:y,isOptional:!1}}});export const FleetRoiSnapshotQuery=s({meta:{key:"fleet.roi.snapshot",title:"Fleet ROI Snapshot",version:"1.0.0",description:"Throughput + value + cost rollup over the agent + workflow domains for the cockpit ROI handover surface.",goal:"Power the cockpit ROI handover screen with throughput, value, and (v1.1) cost telemetry.",context:'Phase 0.4.F read contract. v1.0 ships with cost.costVersion="v1.1" per SEAMS.md Q-06; cost goes live once observability.cost.summary lands. Composes via public sibling ops only.',domain:i,owners:[...n],tags:[...a,"roi","read","aggregation"],stability:o.Experimental},io:{input:c,output:h,errors:{...l}},policy:{auth:"user",permissions:["fleet.metrics.read"],pii:[]}});

package/dist/node/operations/fleet/shared-schemas.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";export const FLEET_DOMAIN="fleet",FLEET_OWNERS=["@platform.operating","@platform.fleet"],FLEET_TAGS=["fleet","operating-cockpit","agent-workflow-pillar"],FleetScopeFields={tenantId:{type:e.String_unsecure(),isOptional:!1},workspaceId:{type:e.String_unsecure(),isOptional:!0},agentIds:{type:e.String_unsecure(),isOptional:!0,isArray:!0},workflowIds:{type:e.String_unsecure(),isOptional:!0,isArray:!0}},FleetWindowFields={windowFrom:{type:e.String_unsecure(),isOptional:!1},windowTo:{type:e.String_unsecure(),isOptional:!1},windowGranularity:{type:e.String_unsecure(),isOptional:!0}},FleetScopeInput=new t({name:"FleetScopeInput",fields:FleetScopeFields}),FleetWindowInput=new t({name:"FleetWindowInput",fields:FleetWindowFields}),FleetSourceCompositionEntry=new t({name:"FleetSourceCompositionEntry",fields:{source:{type:e.String_unsecure(),isOptional:!1},handlerOp:{type:e.String_unsecure(),isOptional:!1},asOf:{type:e.String_unsecure(),isOptional:!1},cacheHit:{type:e.Boolean(),isOptional:!1},failed:{type:e.Boolean(),isOptional:!1},errorCode:{type:e.String_unsecure(),isOptional:!0}}}),FleetReadErrors={FORBIDDEN:{description:"Active persona does not hold the fleet.metrics.read capability.",http:403,when:"Role-morph projection check rejects the persona.",recoverable:!1},VALIDATION:{description:"Input scope, window, or include filter shape is invalid.",http:400,when:"The caller supplied a malformed scope/window/filter payload.",recoverable:!1},DEPENDENCY:{description:"All source domains failed to respond — no warm component to render.",http:503,when:"Every source op call failed. Partial failure surfaces as success with partialFailure=true; this error fires only when no source warmed.",recoverable:!0}};

package/dist/node/operations/governance/constraint.add.command.d.js

@@ -0,0 +1 @@
+import{ConstraintDetailModel}from"./shared-schemas.js";export{ConstraintDetailModel};

package/dist/node/operations/governance/constraint.add.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineCommand as n}from"../operation.js";import{ConstraintDetailModel,GOVERNANCE_DOMAIN as o,GOVERNANCE_OWNERS as a}from"./shared-schemas.js";const r=new t({name:"ConstraintAddInput",fields:{tenantId:{type:e.NonEmptyString(),isOptional:!1},policyId:{type:e.ID(),isOptional:!1},expectedVersion:{type:e.NonEmptyString(),isOptional:!1},idempotencyKey:{type:e.ID(),isOptional:!1},predicate:{type:e.String_unsecure(),isOptional:!1},severity:{type:e.NonEmptyString(),isOptional:!1},remediation:{type:e.String_unsecure(),isOptional:!0},scope:{type:e.String_unsecure(),isOptional:!1},reason:{type:e.NonEmptyString(),isOptional:!1}}}),s=new t({name:"ConstraintAddOutput",fields:{id:{type:e.ID(),isOptional:!1},policyId:{type:e.ID(),isOptional:!1},predicate:{type:e.String_unsecure(),isOptional:!1},severity:{type:e.NonEmptyString(),isOptional:!1},remediation:{type:e.String_unsecure(),isOptional:!0},scope:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},policyVersion:{type:e.NonEmptyString(),isOptional:!1},auditEventId:{type:e.ID(),isOptional:!1}}});export const ConstraintAddCommand=n({meta:{key:"governance.constraint.add",title:"Add Governance Constraint",version:"1.0.0",description:"Append a constraint to a governance policy with optimistic concurrency.",goal:"Let governance operators extend a policy with new predicates without rewriting the whole ruleset.",context:"Phase 0.4.D contract authoring. expectedVersion guards against lost-update; idempotencyKey + 24h dedupe window guarantees safe replay. Each add minor-bumps the policy version. SEAMS S-11.",domain:o,owners:[...a],tags:["governance","write","constraint","agent-workflow-pillar"],stability:i.Experimental},io:{input:r,output:s,errors:{NOT_FOUND:{description:"Policy id does not exist in this tenant scope.",http:404,when:"No policy row matches (tenantId, policyId)."},CONFLICT:{description:"Stale expectedVersion or duplicate constraint key.",http:409,when:"Same predicate already exists, or version stale."},FORBIDDEN:{description:"Caller lacks the governance.write capability.",http:403,when:"Persona projection denies write. Auditor → always FORBIDDEN."},VALIDATION:{description:"Predicate shape invalid or severity outside allowed enum.",http:400,when:"Input rejected at validation; recoverable=false."},DEPENDENCY:{description:"Constraint scope references a CapabilityRef key not declared in the registry.",http:424,when:"Unknown capability key in scope[]; recoverable=true once capability lands."},IDEMPOTENCY_FAIL:{description:"idempotencyKey collision in the 24h dedupe window.",http:409,when:"Same key with differing payload; recoverable=false."}}},policy:{auth:"user",permissions:["governance.write"],pii:[]}});export{ConstraintDetailModel};

package/dist/node/operations/governance/constraint.remove.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as n}from"../../ownership.js";import{defineCommand as o}from"../operation.js";import{GOVERNANCE_DOMAIN as i,GOVERNANCE_OWNERS as r}from"./shared-schemas.js";const a=new t({name:"ConstraintRemoveInput",fields:{tenantId:{type:e.NonEmptyString(),isOptional:!1},policyId:{type:e.ID(),isOptional:!1},constraintId:{type:e.ID(),isOptional:!1},expectedVersion:{type:e.NonEmptyString(),isOptional:!1},idempotencyKey:{type:e.ID(),isOptional:!1},reason:{type:e.NonEmptyString(),isOptional:!1}}}),s=new t({name:"ConstraintRemoveOutput",fields:{policyVersion:{type:e.NonEmptyString(),isOptional:!1},auditEventId:{type:e.ID(),isOptional:!1}}});export const ConstraintRemoveCommand=o({meta:{key:"governance.constraint.remove",title:"Remove Governance Constraint",version:"1.0.0",description:"Remove a constraint from a governance policy; blocked when referenced by active runs.",goal:"Let governance operators retire obsolete constraints without rewriting the whole ruleset.",context:"Phase 0.4.D contract authoring. Removal is reason-required (mandatory audit context) and bumps policyVersion minor. Active workflow runs referencing this constraint yield DEPENDENCY (recoverable=true once they drain). SEAMS S-11.",domain:i,owners:[...r],tags:["governance","write","constraint","agent-workflow-pillar"],stability:n.Experimental},io:{input:a,output:s,errors:{NOT_FOUND:{description:"Policy or constraint id does not exist in this tenant scope.",http:404,when:"No row matches (tenantId, policyId, constraintId)."},CONFLICT:{description:"Stale expectedVersion or last-of-kind for a required scope.",http:409,when:"Optimistic-concurrency guard rejects, or removing this constraint would leave a required scope unguarded."},FORBIDDEN:{description:"Caller lacks the governance.write capability.",http:403,when:"Persona projection denies write. Auditor → always FORBIDDEN."},VALIDATION:{description:"Missing reason or malformed ids.",http:400,when:"Input rejected at validation; recoverable=false."},DEPENDENCY:{description:"Constraint referenced by an active workflow run; cannot remove until run drains.",http:424,when:"In-flight workflow.run.* references this constraint; recoverable=true after drain."},IDEMPOTENCY_FAIL:{description:"idempotencyKey collision in the 24h dedupe window.",http:409,when:"Same key with differing payload; recoverable=false."}}},policy:{auth:"user",permissions:["governance.write"],pii:[]}});

package/dist/node/operations/governance/notification.dispatch.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineCommand as n}from"../operation.js";import{GOVERNANCE_DOMAIN as a,GOVERNANCE_OWNERS as o}from"./shared-schemas.js";const r=new t({name:"NotificationDispatchInput",fields:{tenantId:{type:e.NonEmptyString(),isOptional:!1},policyRefs:{type:e.String_unsecure(),isOptional:!1},escalationContext:{type:e.String_unsecure(),isOptional:!1},idempotencyKey:{type:e.ID(),isOptional:!1}}}),l=new t({name:"NotificationDispatchOutput",fields:{governanceNotificationId:{type:e.ID(),isOptional:!1},auditEventId:{type:e.ID(),isOptional:!1}}});export const NotificationDispatchCommand=n({meta:{key:"governance.notification.dispatch",title:"Dispatch Governance Notification (internal)",version:"1.0.0",description:"Internal-only callee for review.escalate outbox; notifies governance owners of escalations.",goal:"Allow the review-escalation outbox to fan out a governance notification atomically with the audit event.",context:"Phase 0.4.D contract authoring. SEAMS S-06 + Q-16. policy.auth=internal, never reachable from public surface. The runtime registry enforces internal-only at handler dispatch time.",domain:a,owners:[...o],tags:["governance","write","internal","notification","agent-workflow-pillar"],stability:i.Experimental},io:{input:r,output:l,errors:{FORBIDDEN:{description:"Caller is not a trusted-internal outbox handler.",http:403,when:"policy.auth=internal gate rejects public callers; recoverable=false."},VALIDATION:{description:"Malformed policyRefs or escalationContext payload.",http:400,when:"Input shape rejects; recoverable=false."},DEPENDENCY:{description:"Notification fan-out adapter unavailable.",http:503,when:"Underlying messaging adapter transient; recoverable=true (outbox retries)."},IDEMPOTENCY_FAIL:{description:"idempotencyKey collision with differing payload.",http:409,when:"Same key reused with differing context; recoverable=false."}}},policy:{auth:"internal",permissions:[],pii:[]}});

package/dist/node/operations/governance/policy.get.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineQuery as o}from"../operation.js";import{GOVERNANCE_DOMAIN as n,GOVERNANCE_OWNERS as a,PolicyDetailModel as r}from"./shared-schemas.js";const s=new t({name:"PolicyGetInput",fields:{tenantId:{type:e.NonEmptyString(),isOptional:!1},policyId:{type:e.ID(),isOptional:!1},version:{type:e.NonEmptyString(),isOptional:!0}}});export const PolicyGetQuery=o({meta:{key:"governance.policy.get",title:"Get Governance Policy Detail",version:"1.0.0",description:"Detail view for a single governance policy at a specific version (or latest).",goal:"Drive the policy editor and detail drawer with the canonical ruleset + linked constraints.",context:"Phase 0.4.D contract authoring. Auditor receives the same payload as ops + admin; render layer enforces read-only affordances. SEAMS S-11: read ops do NOT emit audit events.",domain:n,owners:[...a],tags:["governance","read","policy","agent-workflow-pillar"],stability:i.Experimental},io:{input:s,output:r,errors:{NOT_FOUND:{description:"Policy or version does not exist in this tenant scope.",http:404,when:"No policy row matches (tenantId, policyId, version)."},FORBIDDEN:{description:"Caller lacks the governance.read capability.",http:403,when:"Persona projection denies access."},VALIDATION:{description:"Invalid input shape (e.g., malformed version string).",http:400,when:"Input rejected at validation; recoverable=false."}}},policy:{auth:"user",permissions:["governance.read"],pii:[]}});

package/dist/node/operations/governance/policy.health.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineQuery as a}from"../operation.js";import{GOVERNANCE_DOMAIN as n,GOVERNANCE_OWNERS as o}from"./shared-schemas.js";const l=new t({name:"PolicyHealthInput",fields:{tenantId:{type:e.NonEmptyString(),isOptional:!1}}}),r=new t({name:"PolicyHealthOutput",fields:{status:{type:e.NonEmptyString(),isOptional:!1},activePolicies:{type:e.Int_unsecure(),isOptional:!1},stalePendingReviews:{type:e.Int_unsecure(),isOptional:!1},suspendedPolicies:{type:e.Int_unsecure(),isOptional:!1},lastMutationAt:{type:e.DateTime(),isOptional:!0},symptoms:{type:e.String_unsecure(),isOptional:!1},probedAt:{type:e.DateTime(),isOptional:!1}}});export const PolicyHealthQuery=a({meta:{key:"governance.policy.health",title:"Governance Policy Health Probe",version:"1.0.0",description:"Health probe for the governance policy subsystem; consumed by fleet.health.snapshot.",goal:"Surface governance subsystem state into the operating cockpit fleet health view.",context:"Phase 0.4.D contract authoring. SEAMS Q-05 + S-10 — owned by W5. Probe is cheap; full forensic surfaces live on policy.list / policy.get.",domain:n,owners:[...o],tags:["governance","read","health","agent-workflow-pillar"],stability:i.Experimental},capability:{key:"fleet.metrics.read",version:"1.0.0"},io:{input:l,output:r,errors:{FORBIDDEN:{description:"Caller lacks governance.read OR fleet.metrics.read capability.",http:403,when:"Persona projection denies access (auditor + ops + admin all allowed)."},DEPENDENCY:{description:"Governance store unavailable; probe cannot complete.",http:503,when:"Underlying store transient; recoverable=true. Fleet renders amber."}}},policy:{auth:"user",permissions:["governance.read","fleet.metrics.read"],pii:[]}});

package/dist/node/operations/governance/policy.list.query.d.js

@@ -0,0 +1 @@
+import{PolicySummaryModel}from"./shared-schemas.js";export{PolicySummaryModel};

package/dist/node/operations/governance/policy.list.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineQuery as r}from"../operation.js";import{GOVERNANCE_DOMAIN as n,GOVERNANCE_OWNERS as o,PolicySummaryModel}from"./shared-schemas.js";const a=new t({name:"PolicyListInput",fields:{tenantId:{type:e.NonEmptyString(),isOptional:!1},state:{type:e.NonEmptyString(),isOptional:!0,isArray:!0},surface:{type:e.NonEmptyString(),isOptional:!0},tags:{type:e.NonEmptyString(),isOptional:!0,isArray:!0},cursor:{type:e.String_unsecure(),isOptional:!0},limit:{type:e.Int_unsecure(),isOptional:!0}}}),s=new t({name:"PolicyListOutput",fields:{items:{type:e.String_unsecure(),isOptional:!1,isArray:!0},nextCursor:{type:e.String_unsecure(),isOptional:!0},total:{type:e.Int_unsecure(),isOptional:!1}}});export const PolicyListQuery=r({meta:{key:"governance.policy.list",title:"List Governance Policies",version:"1.0.0",description:"Paginated query over tenant governance policies filtered by state, surface, and tags.",goal:"Drive the governance policy board with capability-gated discovery and adaptive sort.",context:"Phase 0.4.D contract authoring. Auditor + ops + admin all read; capability `governance.read` enforced. Cursor pagination keeps payloads bounded.",domain:n,owners:[...o],tags:["governance","read","policy","agent-workflow-pillar"],stability:i.Experimental},io:{input:a,output:s,errors:{FORBIDDEN:{description:"Caller lacks the governance.read capability or tenant scope mismatch.",http:403,when:"Persona projection denies access or tenantId differs from session scope."},VALIDATION:{description:"Bad cursor token, invalid limit, or unknown filter value.",http:400,when:"Input shape rejects at validation; recoverable=false."}}},policy:{auth:"user",permissions:["governance.read"],pii:[]}});export{PolicySummaryModel};

package/dist/node/operations/governance/policy.simulate.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineQuery as o}from"../operation.js";import{GOVERNANCE_DOMAIN as n,GOVERNANCE_OWNERS as a}from"./shared-schemas.js";const r=new t({name:"PolicySimulateInput",fields:{tenantId:{type:e.NonEmptyString(),isOptional:!1},policyId:{type:e.ID(),isOptional:!1},expectedVersion:{type:e.NonEmptyString(),isOptional:!1},proposedRuleset:{type:e.String_unsecure(),isOptional:!1},proposedTransition:{type:e.NonEmptyString(),isOptional:!0},windowDays:{type:e.Int_unsecure(),isOptional:!0}}}),s=new t({name:"PolicySimulateOutput",fields:{affectedAgents:{type:e.String_unsecure(),isOptional:!1},affectedWorkflows:{type:e.String_unsecure(),isOptional:!1},affectedReviews:{type:e.String_unsecure(),isOptional:!1},diff:{type:e.String_unsecure(),isOptional:!1},warnings:{type:e.String_unsecure(),isOptional:!1}}});export const PolicySimulateQuery=o({meta:{key:"governance.policy.simulate",title:"Simulate Governance Policy Change",version:"1.0.0",description:"Dry-run a policy edit to project agent + workflow + review impact before applying.",goal:"Let operators + auditors preview the blast radius of a proposed policy change.",context:"Phase 0.4.D contract authoring. Auditor can run simulate without holding governance.write (capability `governance.simulate` is separate). SEAMS Q-13 bounds the projection scope; Q-14 forensic includeExpired deferred to post-v1.0.",domain:n,owners:[...a],tags:["governance","read","simulate","policy","agent-workflow-pillar"],stability:i.Experimental},io:{input:r,output:s,errors:{NOT_FOUND:{description:"Policy id does not exist in this tenant scope.",http:404,when:"No policy row matches (tenantId, policyId)."},CONFLICT:{description:"Stale expectedVersion — projection would be against wrong baseline.",http:409,when:"Same optimistic-concurrency guard as policy.update; recoverable=false (caller refreshes)."},FORBIDDEN:{description:"Caller lacks governance.read or governance.simulate capability.",http:403,when:"Persona projection denies access."},VALIDATION:{description:"Proposed ruleset shape invalid or windowDays out of range.",http:400,when:"Input rejected at validation; recoverable=false."}}},policy:{auth:"user",permissions:["governance.read","governance.simulate"],pii:[]}});

package/dist/node/operations/governance/policy.update.command.d.js

@@ -0,0 +1 @@
+import{PolicyDetailModel}from"./shared-schemas.js";export{PolicyDetailModel};

package/dist/node/operations/governance/policy.update.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineCommand as n}from"../operation.js";import{GOVERNANCE_DOMAIN as o,GOVERNANCE_OWNERS as a,PolicyDetailModel}from"./shared-schemas.js";const r=new t({name:"PolicyUpdateInput",fields:{tenantId:{type:e.NonEmptyString(),isOptional:!1},policyId:{type:e.ID(),isOptional:!1},expectedVersion:{type:e.NonEmptyString(),isOptional:!1},idempotencyKey:{type:e.ID(),isOptional:!1},ruleset:{type:e.String_unsecure(),isOptional:!1},transition:{type:e.NonEmptyString(),isOptional:!0},proposalId:{type:e.ID(),isOptional:!0},approvedByReviewId:{type:e.ID(),isOptional:!0},reason:{type:e.NonEmptyString(),isOptional:!1}}}),p=new t({name:"PolicyUpdateOutput",fields:{id:{type:e.ID(),isOptional:!1},name:{type:e.NonEmptyString(),isOptional:!1},surface:{type:e.NonEmptyString(),isOptional:!1},state:{type:e.NonEmptyString(),isOptional:!1},version:{type:e.NonEmptyString(),isOptional:!1},owner:{type:e.NonEmptyString(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1},ruleset:{type:e.String_unsecure(),isOptional:!1},constraints:{type:e.String_unsecure(),isOptional:!1},auditEventId:{type:e.ID(),isOptional:!1}}});export const PolicyUpdateCommand=n({meta:{key:"governance.policy.update",title:"Update Governance Policy",version:"1.0.0",description:"Apply a ruleset edit and/or lifecycle transition to a governance policy with optimistic concurrency.",goal:"Allow operators + reviewers + admins to evolve policies safely with mandatory audit context.",context:"Phase 0.4.D contract authoring. Combines per-Q-15 the activation flow from review.approve subject dispatch. `expectedVersion` is mandatory to prevent lost-update; idempotencyKey + 24h dedupe window guarantees safe replay. SEAMS S-09 + S-11 + S-07 all converge here.",domain:o,owners:[...a],tags:["governance","write","policy","agent-workflow-pillar"],stability:i.Experimental},io:{input:r,output:p,errors:{NOT_FOUND:{description:"Policy id does not exist in this tenant scope.",http:404,when:"No policy row matches (tenantId, policyId)."},CONFLICT:{description:"Stale expectedVersion or illegal transition for the current state.",http:409,when:"Optimistic-concurrency guard rejects, or transition is not in §2.2 exposed-transition table."},FORBIDDEN:{description:"Caller lacks the governance.write capability.",http:403,when:"Persona projection denies write access. Auditor → always FORBIDDEN."},VALIDATION:{description:"Ruleset shape invalid or required fields missing.",http:400,when:"Input rejected at validation; recoverable=false."},DEPENDENCY:{description:"Deprecate/archive transition blocked by active workflow runs referencing this policy.",http:424,when:"SEAMS S-09: in-flight workflow.run.* references the policy. Operator must drain runs first; recoverable=true once runs complete."},IDEMPOTENCY_FAIL:{description:"idempotencyKey collision in the 24h dedupe window.",http:409,when:"Same key with differing payload; recoverable=false."}}},policy:{auth:"user",permissions:["governance.write"],pii:[]}});export{PolicyDetailModel};

package/dist/node/operations/governance/shared-schemas.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";export const GOVERNANCE_DOMAIN="governance",GOVERNANCE_OWNERS=["@platform.governance"],POLICY_STATES=["DRAFT","PENDING_REVIEW","ACTIVE","SUSPENDED","DEPRECATED","ARCHIVED"],POLICY_SURFACES=["agent","workflow","review","*"],POLICY_TRANSITIONS=["submit","approve","reject","recall","suspend","resume","deprecate","archive","activate"],CONSTRAINT_SEVERITIES=["info","warn","block"],GovernanceTenantScopeInput=new t({name:"GovernanceTenantScopeInput",fields:{tenantId:{type:e.NonEmptyString(),isOptional:!1}}}),PolicySummaryModel=new t({name:"PolicySummary",fields:{id:{type:e.ID(),isOptional:!1},name:{type:e.NonEmptyString(),isOptional:!1},surface:{type:e.NonEmptyString(),isOptional:!1},state:{type:e.NonEmptyString(),isOptional:!1},version:{type:e.NonEmptyString(),isOptional:!1},owner:{type:e.NonEmptyString(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1}}}),PolicyDetailModel=new t({name:"PolicyDetail",fields:{id:{type:e.ID(),isOptional:!1},name:{type:e.NonEmptyString(),isOptional:!1},surface:{type:e.NonEmptyString(),isOptional:!1},state:{type:e.NonEmptyString(),isOptional:!1},version:{type:e.NonEmptyString(),isOptional:!1},owner:{type:e.NonEmptyString(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1},ruleset:{type:e.String_unsecure(),isOptional:!1},constraints:{type:e.String_unsecure(),isOptional:!1}}}),ConstraintDetailModel=new t({name:"ConstraintDetail",fields:{id:{type:e.ID(),isOptional:!1},policyId:{type:e.ID(),isOptional:!1},predicate:{type:e.String_unsecure(),isOptional:!1},severity:{type:e.NonEmptyString(),isOptional:!1},remediation:{type:e.String_unsecure(),isOptional:!0},scope:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1}}});

package/dist/node/operations/index.d.js

@@ -0,0 +1 @@
+export*from"./approval.js";export*from"./ceremony-authority.js";export*from"./economic-evidence.js";export*from"./marketing.js";export*from"./marketing.handlers.js";export*from"./operation.js";export*from"./registry.js";export*from"./registry.agent.js";export*from"./registry.audit.js";export*from"./registry.domains.js";export*from"./registry.fleet.js";export*from"./registry.governance.js";export*from"./registry.review.js";export*from"./registry.workflow.js";

package/dist/node/operations/index.js

@@ -0,0 +1 @@
+export*from"./approval.js";export*from"./ceremony-authority.js";export*from"./economic-evidence.js";export*from"./marketing.js";export*from"./marketing.handlers.js";export*from"./operation.js";export*from"./registry.js";export*from"./registry.agent.js";export*from"./registry.audit.js";export*from"./registry.domains.js";export*from"./registry.fleet.js";export*from"./registry.governance.js";export*from"./registry.review.js";export*from"./registry.workflow.js";

package/dist/node/operations/integrations/audit.list_for_integration.command.d.js

@@ -0,0 +1 @@
+import{AuditEntryModel}from"./shared-schemas.js";export{AuditEntryModel};

package/dist/node/operations/integrations/audit.list_for_integration.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineQuery as r}from"../operation.js";import{AuditEntryModel,INTEGRATIONS_DOMAIN as o,INTEGRATIONS_OWNERS as n,IntegrationScopeInput as s}from"./shared-schemas.js";const a=new t({name:"AuditListForIntegrationOutput",fields:{entries:{type:e.String_unsecure(),isOptional:!1,isArray:!0},count:{type:e.Int_unsecure(),isOptional:!1},nextCursor:{type:e.String_unsecure(),isOptional:!0}}});export const AuditListForIntegrationQuery=r({meta:{key:"audit.list_for_integration",title:"List Audit Entries for Integration",version:"1.0.0",description:"Returns audit entries scoped to a single integration; persona-aware redaction applied server-side.",goal:"Power the Audit tab for both auditor (full) and other personas (scoped subset).",context:"Wave A read contract (Phase 0.4 — Lane D consumer). Auditor receives the full row; other personas receive a scoped subset. hashedDiff field is opt-in per persona.",domain:o,owners:[...n],tags:["integrations","audit","read"],stability:i.Beta},io:{input:s,output:a,errors:{NOT_FOUND:{description:"Integration id does not exist in this tenant scope.",http:404,when:"The requested integrationId is not registered."},CAPABILITY_DENIED:{description:"Active persona does not hold the audit.read capability.",http:403,when:"Role-morph projection check rejects the persona."}}},policy:{auth:"user",permissions:["audit.read"],pii:[]}});export{AuditEntryModel};

package/dist/node/operations/integrations/config.get.command.js

@@ -0,0 +1 @@
+import{StabilityEnum as e}from"../../ownership.js";import{defineQuery as t}from"../operation.js";import{INTEGRATIONS_DOMAIN as o,INTEGRATIONS_OWNERS as n,IntegrationConfigSnapshotModel as i,IntegrationScopeInput as r}from"./shared-schemas.js";export const ConfigGetQuery=t({meta:{key:"config.get",title:"Get Integration Config",version:"1.0.0",description:"Returns the IntegrationConfigSnapshot (schemaVersion + serializedJson) for a single integration within the tenant scope.",goal:"Power the Config tab read path with a single source-of-truth read; mutation lands as Wave B config.update.",context:"Wave A read contract (Phase 0.4 — Lane C2 consumer).",domain:o,owners:[...n],tags:["integrations","config","read"],stability:e.Beta},io:{input:r,output:i,errors:{NOT_FOUND:{description:"Integration id does not exist in this tenant scope.",http:404,when:"The requested integrationId is not registered."},CAPABILITY_DENIED:{description:"Active persona does not hold the config.read capability.",http:403,when:"Role-morph projection check rejects the persona."}}},policy:{auth:"user",permissions:["config.read"],pii:[]}});

package/dist/node/operations/integrations/config.update.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{StabilityEnum as t}from"../../ownership.js";import{defineCommand as n}from"../operation.js";import{INTEGRATIONS_DOMAIN as o,INTEGRATIONS_OWNERS as a,MUTATION_ERROR_TAXONOMY as r,MutationAckOutput as s}from"./shared-schemas.js";const p=new i({name:"ConfigUpdateInput",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},integrationId:{type:e.String_unsecure(),isOptional:!1},schemaVersion:{type:e.String_unsecure(),isOptional:!1},serializedJson:{type:e.String_unsecure(),isOptional:!1},scope:{type:e.String_unsecure(),isOptional:!1}}});export const ConfigUpdateCommand=n({meta:{key:"config.update",title:"Update Integration Config",version:"1.0.0",description:"Update the per-integration configuration document. Production-scope changes ceremony-confirmed in UI.",goal:"Power the config form save action with diff preview + admin-default / tenant-override scopes.",context:"Wave B mutation contract (Phase 1.5 — integrations-hub-uplift). Lane C2 owner. Handler validates against the `defineForm` schema for `schemaVersion`, persists the document, and emits `config_changed` audit. Production-scope mutations require ceremony confirm in UI (Principle 4). Classified additive.",domain:o,owners:[...a],tags:["integrations","config","mutation","update","compatibility:additive"],stability:t.Stable},io:{input:p,output:s,errors:{...r}},policy:{auth:"user",permissions:["config.update"],pii:[]}});

package/dist/node/operations/integrations/connections.list.command.d.js

@@ -0,0 +1 @@
+import{ConnectionSummaryModel}from"./shared-schemas.js";export{ConnectionSummaryModel};

package/dist/node/operations/integrations/connections.list.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as n}from"@lssm/lib.schema";import{StabilityEnum as e}from"../../ownership.js";import{defineQuery as o}from"../operation.js";import{ConnectionSummaryModel,INTEGRATIONS_DOMAIN as i,INTEGRATIONS_OWNERS as s,TenantScopeInput as r}from"./shared-schemas.js";const c=new n({name:"ConnectionsListOutput",fields:{connections:{type:t.String_unsecure(),isOptional:!1,isArray:!0},count:{type:t.Int_unsecure(),isOptional:!1}}});export const ConnectionsListQuery=o({meta:{key:"connections.list",title:"List Connections",version:"1.0.0",description:"Lists connections for the tenant scope. Rows conform to ConnectionSummary.",goal:"Power the cross-integration connections table and the per-integration connections tab.",context:"Wave A read contract (Phase 0.4 — Lane B consumer).",domain:i,owners:[...s],tags:["integrations","connections","read"],stability:e.Beta},io:{input:r,output:c,errors:{TENANT_NOT_FOUND:{description:"Tenant id does not resolve to a workspace.",http:404,when:"The provided tenantId does not exist."},CAPABILITY_DENIED:{description:"Active persona does not hold the connection.list capability.",http:403,when:"Role-morph projection check rejects the persona."}}},policy:{auth:"user",permissions:["connection.list"],pii:[]}});export{ConnectionSummaryModel};

package/dist/node/operations/integrations/credentials.list.command.d.js

@@ -0,0 +1 @@
+import{RedactedCredentialRefModel}from"./shared-schemas.js";export{RedactedCredentialRefModel};

package/dist/node/operations/integrations/credentials.list.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as r}from"../../ownership.js";import{defineQuery as i}from"../operation.js";import{INTEGRATIONS_DOMAIN as s,INTEGRATIONS_OWNERS as n,IntegrationScopeInput as a,RedactedCredentialRefModel}from"./shared-schemas.js";const o=new t({name:"CredentialsListOutput",fields:{credentials:{type:e.String_unsecure(),isOptional:!1,isArray:!0},count:{type:e.Int_unsecure(),isOptional:!1}}});export const CredentialsListQuery=i({meta:{key:"credentials.list",title:"List Redacted Credentials",version:"1.0.0",description:"Lists redacted credential references for the integration scope. Never returns raw credential material.",goal:"Power the Credentials tab + rotation history with a security-class read.",context:"Wave A read contract (Phase 0.4 — security single-owner Lane C1 consumer). Output items conform to RedactedCredentialRefModel; display masks are computed server-side. Telemetry MUST scrub against the credential-pattern regex set.",domain:s,owners:[...n],tags:["integrations","credentials","read","redacted","security"],stability:r.Beta},io:{input:a,output:o,errors:{NOT_FOUND:{description:"Integration id does not exist in this tenant scope.",http:404,when:"The requested integrationId is not registered."},CAPABILITY_DENIED:{description:"Active persona does not hold the credential.list capability.",http:403,when:"Role-morph projection check rejects the persona."}}},policy:{auth:"user",permissions:["credential.list"],pii:[]}});export{RedactedCredentialRefModel};

package/dist/node/operations/integrations/credentials.request_rotation.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as e}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineCommand as n}from"../operation.js";import{INTEGRATIONS_DOMAIN as a,INTEGRATIONS_OWNERS as o,MUTATION_ERROR_TAXONOMY as r,MutationAckOutput as s}from"./shared-schemas.js";const l=new e({name:"CredentialsRequestRotationInput",fields:{tenantId:{type:t.String_unsecure(),isOptional:!1},integrationId:{type:t.String_unsecure(),isOptional:!1},credentialId:{type:t.String_unsecure(),isOptional:!1},justification:{type:t.String_unsecure(),isOptional:!1}}});export const CredentialsRequestRotationCommand=n({meta:{key:"credentials.request_rotation",title:"Request Credential Rotation",version:"1.0.0",description:"Non-admin request to rotate a credential. Generates an approval-flow audit row; does not rotate by itself.",goal:"Let frontline/operations personas escalate rotation needs without holding the rotate capability.",context:"Wave B mutation contract (Phase 1.5 — integrations-hub-uplift). Lane C1 single-owner. Emits `credential_rotation_requested` audit + founder_approver pending-approval ribbon. Classified additive against existing integration surface.",domain:a,owners:[...o],tags:["integrations","credentials","mutation","request-rotation","approval","compatibility:additive"],stability:i.Stable},io:{input:l,output:s,errors:{...r}},policy:{auth:"user",permissions:["credential.request_rotation"],pii:[]}});

package/dist/node/operations/integrations/credentials.revoke.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineCommand as r}from"../operation.js";import{INTEGRATIONS_DOMAIN as n,INTEGRATIONS_OWNERS as o,MUTATION_ERROR_TAXONOMY as a,MutationAckOutput as s}from"./shared-schemas.js";const l=new t({name:"CredentialsRevokeInput",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},integrationId:{type:e.String_unsecure(),isOptional:!1},credentialId:{type:e.String_unsecure(),isOptional:!1},revocationReason:{type:e.String_unsecure(),isOptional:!1}}});export const CredentialsRevokeCommand=r({meta:{key:"credentials.revoke",title:"Revoke Credential",version:"1.0.0",description:"Revoke an integration credential. Irreversible; UI MUST ceremony-confirm before invoking.",goal:"Power the explicit revoke action from the credentials tab + rotation history surfaces.",context:"Wave B mutation contract (Phase 1.5 — integrations-hub-uplift). SECURITY-CLASS. Lane C1 single-owner. Handler revokes provider-side, marks the credential as `revoked`, and emits `credential_revoked` audit. Telemetry redaction regex MUST scrub any provider error containing credential material. Classified breaking-allowed for the duration of this plan because the revoke flow ships with v1.0.0 as the first stable surface; downstream consumers must adopt explicitly.",domain:n,owners:[...o],tags:["integrations","credentials","mutation","revoke","security","ceremony","compatibility:breaking-allowed-this-plan"],stability:i.Beta},io:{input:l,output:s,errors:{...a}},policy:{auth:"user",permissions:["credential.revoke"],pii:[]}});

package/dist/node/operations/integrations/credentials.rotate.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as a}from"../../ownership.js";import{defineCommand as n}from"../operation.js";import{INTEGRATIONS_DOMAIN as i,INTEGRATIONS_OWNERS as o,MUTATION_ERROR_TAXONOMY as r}from"./shared-schemas.js";const s=new t({name:"CredentialsRotateInput",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},integrationId:{type:e.String_unsecure(),isOptional:!1},credentialId:{type:e.String_unsecure(),isOptional:!1},rotationReason:{type:e.String_unsecure(),isOptional:!1}}}),l=new t({name:"CredentialsRotateOutput",fields:{ok:{type:e.Boolean(),isOptional:!1},auditId:{type:e.String_unsecure(),isOptional:!1},rotatedAt:{type:e.String_unsecure(),isOptional:!1},nextRotationAt:{type:e.String_unsecure(),isOptional:!0}}});export const CredentialsRotateCommand=n({meta:{key:"credentials.rotate",title:"Rotate Credential",version:"1.0.0",description:"Rotate an integration credential. Reveal-once payload returned to the wizard only; raw material never persists in the render tree.",goal:"Power the credential rotation wizard end-to-end with reveal-once + auto-clear semantics.",context:"Wave B mutation contract (Phase 1.5 — integrations-hub-uplift). SECURITY-CLASS. Lane C1 single-owner. Handler MUST scrub the new material from telemetry/logs (see Pre-mortem §1 regex set). Output `rotatedAt` is the only safe-to-cache field; the reveal-once payload itself is returned out-of-band by a separate audit-bound endpoint. Classified breaking-allowed for the duration of this plan because the rotation flow has no historical contract; downstream consumers must adopt v1.0.0 explicitly. Bumped to stable in a follow-up plan.",domain:i,owners:[...o],tags:["integrations","credentials","mutation","rotate","security","ceremony","compatibility:breaking-allowed-this-plan"],stability:a.Beta},io:{input:s,output:l,errors:{...r}},policy:{auth:"user",permissions:["credential.rotate"],pii:[]}});

package/dist/node/operations/integrations/index.js

@@ -0,0 +1 @@
+export*from"./audit.list_for_integration.command.js";export*from"./config.get.command.js";export*from"./config.update.command.js";export*from"./connections.list.command.js";export*from"./credentials.list.command.js";export*from"./credentials.request_rotation.command.js";export*from"./credentials.revoke.command.js";export*from"./credentials.rotate.command.js";export*from"./integrations.connect.command.js";export*from"./integrations.disconnect.command.js";export*from"./integrations.get.command.js";export*from"./integrations.list.command.js";export*from"./registry.js";export*from"./secrets.link.command.js";export*from"./secrets.list.command.js";export*from"./secrets.reveal_once_audit_only.command.js";export*from"./secrets.unlink.command.js";export*from"./shared-schemas.js";export*from"./syncs.list.command.js";export*from"./syncs.pause.command.js";export*from"./syncs.resume.command.js";export*from"./syncs.run_now.command.js";export*from"./syncs.update_schedule.command.js";

package/dist/node/operations/integrations/integrations.connect.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as n}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineCommand as e}from"../operation.js";import{INTEGRATIONS_DOMAIN as a,INTEGRATIONS_OWNERS as o,MUTATION_ERROR_TAXONOMY as r,MutationAckOutput as s}from"./shared-schemas.js";const p=new n({name:"IntegrationsConnectInput",fields:{tenantId:{type:t.String_unsecure(),isOptional:!1},integrationId:{type:t.String_unsecure(),isOptional:!1},ownershipMode:{type:t.String_unsecure(),isOptional:!1},displayName:{type:t.String_unsecure(),isOptional:!0}}});export const IntegrationsConnectCommand=e({meta:{key:"integrations.connect",title:"Connect Integration",version:"1.0.0",description:"Authorize a new connection between the tenant and an integration provider.",goal:"Drive the install-wizard happy path from the catalog page.",context:"Wave B mutation contract (Phase 1.5 — integrations-hub-uplift). Handler must call provider OAuth/BYOK validation, persist the connection, and emit a `connection_authorized` audit row. Classified additive against existing integration surface.",domain:a,owners:[...o],tags:["integrations","mutation","connect","compatibility:additive"],stability:i.Stable},io:{input:p,output:s,errors:{...r}},policy:{auth:"user",permissions:["integration.install"],pii:[]}});

package/dist/node/operations/integrations/integrations.disconnect.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as n,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as e}from"../../ownership.js";import{defineCommand as i}from"../operation.js";import{INTEGRATIONS_DOMAIN as o,INTEGRATIONS_OWNERS as r,MUTATION_ERROR_TAXONOMY as a,MutationAckOutput as s}from"./shared-schemas.js";const c=new t({name:"IntegrationsDisconnectInput",fields:{tenantId:{type:n.String_unsecure(),isOptional:!1},integrationId:{type:n.String_unsecure(),isOptional:!1},connectionId:{type:n.String_unsecure(),isOptional:!1},reason:{type:n.String_unsecure(),isOptional:!0}}});export const IntegrationsDisconnectCommand=i({meta:{key:"integrations.disconnect",title:"Disconnect Integration",version:"1.0.0",description:"Disconnect an integration's active connection and emit the ceremony audit row.",goal:"Power the disconnect ceremony confirm flow from the detail/connections tabs.",context:"Wave B mutation contract (Phase 1.5 — integrations-hub-uplift). Irreversible: UI MUST ceremony-confirm before invoking. Handler must revoke provider tokens, mark dependent syncs as `paused`, and emit `connection_disconnected` audit.",domain:o,owners:[...r],tags:["integrations","mutation","disconnect","ceremony","compatibility:additive"],stability:e.Stable},io:{input:c,output:s,errors:{...a}},policy:{auth:"user",permissions:["integration.disconnect"],pii:[]}});

package/dist/node/operations/integrations/integrations.get.command.js

@@ -0,0 +1 @@
+import{StabilityEnum as e}from"../../ownership.js";import{defineQuery as t}from"../operation.js";import{INTEGRATIONS_DOMAIN as i,INTEGRATIONS_OWNERS as n,IntegrationDetailModel as r,IntegrationScopeInput as o}from"./shared-schemas.js";export const IntegrationsGetQuery=t({meta:{key:"integrations.get",title:"Get Integration Detail",version:"1.0.0",description:"Retrieves the full detail record for a single integration within the tenant scope.",goal:"Render the integration detail overview tab without hydrating a heavier list query.",context:"Wave A read contract (Phase 0.4). Detail pages stay uncached + streamed via <Suspense>; this query MUST always re-resolve persona capability.",domain:i,owners:[...n],tags:["integrations","read","detail"],stability:e.Beta},io:{input:o,output:r,errors:{NOT_FOUND:{description:"Integration id does not exist in this tenant scope.",http:404,when:"The requested integrationId is not registered."},CAPABILITY_DENIED:{description:"Active persona does not hold the integration.read capability.",http:403,when:"Role-morph projection check rejects the persona."}}},policy:{auth:"user",permissions:["integration.read"],pii:[]}});

package/dist/node/operations/integrations/integrations.list.command.d.js

@@ -0,0 +1 @@
+import{IntegrationSummaryModel}from"./shared-schemas.js";export{IntegrationSummaryModel};

package/dist/node/operations/integrations/integrations.list.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as e}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineQuery as o}from"../operation.js";import{INTEGRATIONS_DOMAIN as n,INTEGRATIONS_OWNERS as r,IntegrationSummaryModel,TenantScopeInput as a}from"./shared-schemas.js";const s=new e({name:"IntegrationsListOutput",fields:{integrations:{type:t.String_unsecure(),isOptional:!1,isArray:!0},count:{type:t.Int_unsecure(),isOptional:!1}}});export const IntegrationsListQuery=o({meta:{key:"integrations.list",title:"List Integrations",version:"1.0.0",description:"Lists integrations available to the active persona within the tenant scope (catalog).",goal:"Power the integration hub catalog page with a single source-of-truth read.",context:"Wave A read contract (Phase 0.4 — integrations-hub-uplift). Pages flip to force-dynamic so callers MUST supply tenantId + the persona is resolved server-side. Output items follow IntegrationSummary; see IntegrationSummaryModel for the per-row shape.",domain:n,owners:[...r],tags:["integrations","read","catalog"],stability:i.Beta},io:{input:a,output:s,errors:{TENANT_NOT_FOUND:{description:"Tenant id does not resolve to a workspace.",http:404,when:"The provided tenantId does not exist in the registry."},CAPABILITY_DENIED:{description:"Active persona does not hold the integration.list capability.",http:403,when:"Role-morph projection check rejects the persona."}}},policy:{auth:"user",permissions:["integration.list"],pii:[]}});export{IntegrationSummaryModel};

package/dist/node/operations/integrations/registry.js

@@ -0,0 +1 @@
+import{AuditListForIntegrationQuery as e}from"./audit.list_for_integration.command.js";import{ConfigGetQuery as t}from"./config.get.command.js";import{ConfigUpdateCommand as m}from"./config.update.command.js";import{ConnectionsListQuery as o}from"./connections.list.command.js";import{CredentialsListQuery as r}from"./credentials.list.command.js";import{CredentialsRequestRotationCommand as n}from"./credentials.request_rotation.command.js";import{CredentialsRevokeCommand as a}from"./credentials.revoke.command.js";import{CredentialsRotateCommand as i}from"./credentials.rotate.command.js";import{IntegrationsConnectCommand as y}from"./integrations.connect.command.js";import{IntegrationsDisconnectCommand as p}from"./integrations.disconnect.command.js";import{IntegrationsGetQuery as s}from"./integrations.get.command.js";import{IntegrationsListQuery as f}from"./integrations.list.command.js";import{SecretsLinkCommand as d}from"./secrets.link.command.js";import{SecretsListQuery as k}from"./secrets.list.command.js";import{SecretsRevealOnceAuditOnlyCommand as C}from"./secrets.reveal_once_audit_only.command.js";import{SecretsUnlinkCommand as c}from"./secrets.unlink.command.js";import{SyncsListQuery as u}from"./syncs.list.command.js";import{SyncsPauseCommand as S}from"./syncs.pause.command.js";import{SyncsResumeCommand as l}from"./syncs.resume.command.js";import{SyncsRunNowCommand as g}from"./syncs.run_now.command.js";import{SyncsUpdateScheduleCommand as R}from"./syncs.update_schedule.command.js";export const integrationsOperationPartial=Object.freeze({[f.meta.key]:f,[s.meta.key]:s,[r.meta.key]:r,[k.meta.key]:k,[u.meta.key]:u,[o.meta.key]:o,[t.meta.key]:t,[e.meta.key]:e,[y.meta.key]:y,[p.meta.key]:p,[i.meta.key]:i,[a.meta.key]:a,[n.meta.key]:n,[d.meta.key]:d,[c.meta.key]:c,[C.meta.key]:C,[g.meta.key]:g,[S.meta.key]:S,[l.meta.key]:l,[R.meta.key]:R,[m.meta.key]:m});

package/dist/node/operations/integrations/secrets.link.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as i}from"../../ownership.js";import{defineCommand as n}from"../operation.js";import{INTEGRATIONS_DOMAIN as r,INTEGRATIONS_OWNERS as s,MUTATION_ERROR_TAXONOMY as a,MutationAckOutput as o}from"./shared-schemas.js";const c=new t({name:"SecretsLinkInput",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},secretId:{type:e.String_unsecure(),isOptional:!1},integrationId:{type:e.String_unsecure(),isOptional:!1},scope:{type:e.String_unsecure(),isOptional:!1}}});export const SecretsLinkCommand=n({meta:{key:"secrets.link",title:"Link Secret to Integration",version:"1.0.0",description:"Link an existing secret reference to an integration scope. Does not transmit secret material.",goal:"Power the secrets-tab linking flow and the cross-reference table.",context:"Wave B mutation contract (Phase 1.5 — integrations-hub-uplift). SECURITY-CLASS. Lane C1 single-owner. Handler validates scope (prod/staging/dev) + emits `secret_linked` audit. The secret material itself is never read or transmitted; only the secret-reference id moves over the wire. Classified additive.",domain:r,owners:[...s],tags:["integrations","secrets","mutation","link","security","compatibility:additive"],stability:i.Stable},io:{input:c,output:o,errors:{...a}},policy:{auth:"user",permissions:["secret.link"],pii:[]}});

package/dist/node/operations/integrations/secrets.list.command.d.js

@@ -0,0 +1 @@
+import{SecretRefModel}from"./shared-schemas.js";export{SecretRefModel};

package/dist/node/operations/integrations/secrets.list.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as r}from"../../ownership.js";import{defineQuery as s}from"../operation.js";import{INTEGRATIONS_DOMAIN as i,INTEGRATIONS_OWNERS as o,IntegrationScopeInput as n,SecretRefModel}from"./shared-schemas.js";const c=new t({name:"SecretsListOutput",fields:{secrets:{type:e.String_unsecure(),isOptional:!1,isArray:!0},count:{type:e.Int_unsecure(),isOptional:!1}}});export const SecretsListQuery=s({meta:{key:"secrets.list",title:"List Secret References",version:"1.0.0",description:"Lists secret references for the integration scope. Never returns raw secret material.",goal:"Power the Secrets tab + linkage table with a security-class read.",context:"Wave A read contract (Phase 0.4 — Lane C1 consumer). Output items conform to SecretRefModel.",domain:i,owners:[...o],tags:["integrations","secrets","read","redacted","security"],stability:r.Beta},io:{input:n,output:c,errors:{NOT_FOUND:{description:"Integration id does not exist in this tenant scope.",http:404,when:"The requested integrationId is not registered."},CAPABILITY_DENIED:{description:"Active persona does not hold the secret.list capability.",http:403,when:"Role-morph projection check rejects the persona."}}},policy:{auth:"user",permissions:["secret.list"],pii:[]}});export{SecretRefModel};

package/dist/node/operations/integrations/secrets.reveal_once_audit_only.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as a}from"../../ownership.js";import{defineCommand as n}from"../operation.js";import{INTEGRATIONS_DOMAIN as r,INTEGRATIONS_OWNERS as i,MUTATION_ERROR_TAXONOMY as o}from"./shared-schemas.js";const s=new t({name:"SecretsRevealOnceInput",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},secretId:{type:e.String_unsecure(),isOptional:!1},reason:{type:e.String_unsecure(),isOptional:!1}}}),l=new t({name:"SecretsRevealOnceOutput",fields:{ok:{type:e.Boolean(),isOptional:!1},auditId:{type:e.String_unsecure(),isOptional:!1},revealedAt:{type:e.String_unsecure(),isOptional:!1},revealedValue:{type:e.String_unsecure(),isOptional:!1}}});export const SecretsRevealOnceAuditOnlyCommand=n({meta:{key:"secrets.reveal_once_audit_only",title:"Reveal Secret Once (Audit-Only)",version:"1.0.0",description:"Admin-only reveal-once read of a secret. Mandatory reason field. Emits an audit row; payload never re-renders in the client tree.",goal:"Provide a regulated escape hatch when an admin truly must read a secret value.",context:"Wave B mutation contract (Phase 1.5 — integrations-hub-uplift). HIGHEST SECURITY-CLASS. Lane C1 single-owner. Handler MUST require non-empty reason, emit `secret_revealed_once_audit` synchronously BEFORE returning the value, and force `Cache-Control: no-store`. UI MUST clear the value from React state on unmount + on any route change. Telemetry redaction regex is fast-fail (Pre-mortem §1). Classified breaking-allowed for the duration of this plan because the reveal-once flow ships with v1.0.0 as the first stable surface.",domain:r,owners:[...i],tags:["integrations","secrets","mutation","reveal-once","security","audit-only","compatibility:breaking-allowed-this-plan"],stability:a.Beta},io:{input:s,output:l,errors:{...o}},policy:{auth:"user",permissions:["secret.reveal_once_audit_only"],pii:["secret.material"]}});

package/dist/node/operations/integrations/secrets.unlink.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as n}from"../../ownership.js";import{defineCommand as i}from"../operation.js";import{INTEGRATIONS_DOMAIN as r,INTEGRATIONS_OWNERS as s,MUTATION_ERROR_TAXONOMY as a,MutationAckOutput as o}from"./shared-schemas.js";const l=new t({name:"SecretsUnlinkInput",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},secretId:{type:e.String_unsecure(),isOptional:!1},integrationId:{type:e.String_unsecure(),isOptional:!1},reason:{type:e.String_unsecure(),isOptional:!1}}});export const SecretsUnlinkCommand=i({meta:{key:"secrets.unlink",title:"Unlink Secret from Integration",version:"1.0.0",description:"Unlink a secret reference from an integration scope. Irreversible from the integration's perspective; UI MUST ceremony-confirm.",goal:"Power the explicit unlink action from the secrets tab.",context:"Wave B mutation contract (Phase 1.5 — integrations-hub-uplift). SECURITY-CLASS. Lane C1 single-owner. Handler emits `secret_unlinked` audit; any sync depending on the secret is marked `error` with a deterministic message. Classified breaking-allowed for the duration of this plan because the unlink flow ships with v1.0.0 as the first stable surface and downstream consumers must adopt explicitly.",domain:r,owners:[...s],tags:["integrations","secrets","mutation","unlink","security","ceremony","compatibility:breaking-allowed-this-plan"],stability:n.Beta},io:{input:l,output:o,errors:{...a}},policy:{auth:"user",permissions:["secret.unlink"],pii:[]}});

package/dist/node/operations/integrations/shared-schemas.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";export const INTEGRATIONS_DOMAIN="integrations",INTEGRATIONS_OWNERS=["team-companyos-integrations"],ROLE_VALUES=["enterprise_admin","operations_manager","founder_approver","frontline_staff","auditor","ai_operator"],TenantScopeInput=new t({name:"IntegrationsTenantScopeInput",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1}}}),IntegrationScopeInput=new t({name:"IntegrationScopeInput",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},integrationId:{type:e.String_unsecure(),isOptional:!1}}}),IntegrationSummaryModel=new t({name:"IntegrationSummary",fields:{id:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},category:{type:e.String_unsecure(),isOptional:!0},status:{type:e.String_unsecure(),isOptional:!1},ownershipMode:{type:e.String_unsecure(),isOptional:!1}}}),IntegrationDetailModel=new t({name:"IntegrationDetail",fields:{id:{type:e.String_unsecure(),isOptional:!1},name:{type:e.String_unsecure(),isOptional:!1},description:{type:e.String_unsecure(),isOptional:!0},category:{type:e.String_unsecure(),isOptional:!0},status:{type:e.String_unsecure(),isOptional:!1},ownershipMode:{type:e.String_unsecure(),isOptional:!1},lastSyncAt:{type:e.String_unsecure(),isOptional:!0}}}),RedactedCredentialRefModel=new t({name:"RedactedCredentialRef",fields:{credentialId:{type:e.String_unsecure(),isOptional:!1},integrationId:{type:e.String_unsecure(),isOptional:!1},displayMask:{type:e.String_unsecure(),isOptional:!1},lastRotatedAt:{type:e.String_unsecure(),isOptional:!0},rotationPolicy:{type:e.String_unsecure(),isOptional:!1}}}),SecretRefModel=new t({name:"SecretRef",fields:{secretId:{type:e.String_unsecure(),isOptional:!1},scope:{type:e.String_unsecure(),isOptional:!1},displayMask:{type:e.String_unsecure(),isOptional:!1},linkedIntegrationIds:{type:e.String_unsecure(),isOptional:!1,isArray:!0}}}),SyncSummaryModel=new t({name:"SyncSummary",fields:{syncId:{type:e.String_unsecure(),isOptional:!1},integrationId:{type:e.String_unsecure(),isOptional:!1},schedule:{type:e.String_unsecure(),isOptional:!1},state:{type:e.String_unsecure(),isOptional:!1},lastRunAt:{type:e.String_unsecure(),isOptional:!0}}}),ConnectionSummaryModel=new t({name:"ConnectionSummary",fields:{connectionId:{type:e.String_unsecure(),isOptional:!1},integrationId:{type:e.String_unsecure(),isOptional:!1},state:{type:e.String_unsecure(),isOptional:!1},authorizedAt:{type:e.String_unsecure(),isOptional:!0}}}),IntegrationConfigSnapshotModel=new t({name:"IntegrationConfigSnapshot",fields:{integrationId:{type:e.String_unsecure(),isOptional:!1},schemaVersion:{type:e.String_unsecure(),isOptional:!1},serializedJson:{type:e.String_unsecure(),isOptional:!1}}}),AuditEntryModel=new t({name:"IntegrationAuditEntry",fields:{auditId:{type:e.String_unsecure(),isOptional:!1},integrationId:{type:e.String_unsecure(),isOptional:!1},actor:{type:e.String_unsecure(),isOptional:!1},action:{type:e.String_unsecure(),isOptional:!1},target:{type:e.String_unsecure(),isOptional:!1},occurredAt:{type:e.String_unsecure(),isOptional:!1},hashedDiff:{type:e.String_unsecure(),isOptional:!0}}}),MutationAckOutput=new t({name:"IntegrationMutationAck",fields:{ok:{type:e.Boolean(),isOptional:!1},auditId:{type:e.String_unsecure(),isOptional:!1}}}),MUTATION_ERROR_TAXONOMY={CAPABILITY_DENIED:{description:"Active persona does not hold the capability required to perform this mutation.",http:403,when:"Role-morph projection check rejects the persona for the requested capability."},INVALID_INPUT:{description:"Input payload failed schema or domain validation before reaching the handler.",http:400,when:"Required field missing, malformed value, or business invariant violated."},CONFLICT:{description:"Mutation conflicts with the current state (idempotency token mismatch, concurrent edit, terminal lifecycle).",http:409,when:"Resource state precludes the requested transition."},NOT_FOUND:{description:"Target resource (integration/credential/secret/sync/config) is not registered in the tenant scope.",http:404,when:"Id does not resolve to a record visible to the active tenant + persona."},DEPENDENCY_FAILURE:{description:"A downstream dependency (provider API, secret store, audit log) failed while servicing the mutation.",http:502,when:"External provider returns a non-recoverable error or the audit emission fails."},RATE_LIMITED:{description:"Caller exceeded the per-tenant or per-user rate budget for this mutation class.",http:429,when:"Sliding-window counter for the capability key trips the limiter."}};

package/dist/node/operations/integrations/syncs.list.command.d.js

@@ -0,0 +1 @@
+import{SyncSummaryModel}from"./shared-schemas.js";export{SyncSummaryModel};

package/dist/node/operations/integrations/syncs.list.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as e}from"@lssm/lib.schema";import{StabilityEnum as n}from"../../ownership.js";import{defineQuery as o}from"../operation.js";import{INTEGRATIONS_DOMAIN as s,INTEGRATIONS_OWNERS as i,SyncSummaryModel,TenantScopeInput as r}from"./shared-schemas.js";const a=new e({name:"SyncsListOutput",fields:{syncs:{type:t.String_unsecure(),isOptional:!1,isArray:!0},count:{type:t.Int_unsecure(),isOptional:!1}}});export const SyncsListQuery=o({meta:{key:"syncs.list",title:"List Syncs",version:"1.0.0",description:"Lists syncs for the tenant scope, optionally filtered by integration id on the consumer side.",goal:"Power the cross-integration syncs table and the per-integration syncs tab.",context:"Wave A read contract (Phase 0.4 — Lane B consumer). Sync rows conform to SyncSummaryModel.",domain:s,owners:[...i],tags:["integrations","syncs","read"],stability:n.Beta},io:{input:r,output:a,errors:{TENANT_NOT_FOUND:{description:"Tenant id does not resolve to a workspace.",http:404,when:"The provided tenantId does not exist."},CAPABILITY_DENIED:{description:"Active persona does not hold the sync.list capability.",http:403,when:"Role-morph projection check rejects the persona."}}},policy:{auth:"user",permissions:["sync.list"],pii:[]}});export{SyncSummaryModel};

package/dist/node/operations/integrations/syncs.pause.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as n}from"../../ownership.js";import{defineCommand as s}from"../operation.js";import{INTEGRATIONS_DOMAIN as i,INTEGRATIONS_OWNERS as a,MUTATION_ERROR_TAXONOMY as o,MutationAckOutput as r}from"./shared-schemas.js";const u=new t({name:"SyncsPauseInput",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},integrationId:{type:e.String_unsecure(),isOptional:!1},syncId:{type:e.String_unsecure(),isOptional:!1}}});export const SyncsPauseCommand=s({meta:{key:"syncs.pause",title:"Pause Sync",version:"1.0.0",description:"Pause a sync configuration. Reversible via `syncs.resume`. UI surfaces optimistic + undo (5s).",goal:"Power the pause action from the sync rows + drift banner.",context:"Wave B mutation contract (Phase 1.5 — integrations-hub-uplift). Lane B owner. Handler flips the sync `state` to `paused` and prevents the next scheduled run; in-flight runs complete. Classified additive.",domain:i,owners:[...a],tags:["integrations","syncs","mutation","pause","compatibility:additive"],stability:n.Stable},io:{input:u,output:r,errors:{...o}},policy:{auth:"user",permissions:["sync.pause"],pii:[]}});

package/dist/node/operations/integrations/syncs.resume.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as n}from"../../ownership.js";import{defineCommand as i}from"../operation.js";import{INTEGRATIONS_DOMAIN as s,INTEGRATIONS_OWNERS as o,MUTATION_ERROR_TAXONOMY as a,MutationAckOutput as r}from"./shared-schemas.js";const u=new t({name:"SyncsResumeInput",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},integrationId:{type:e.String_unsecure(),isOptional:!1},syncId:{type:e.String_unsecure(),isOptional:!1}}});export const SyncsResumeCommand=i({meta:{key:"syncs.resume",title:"Resume Sync",version:"1.0.0",description:"Resume a paused sync configuration. UI surfaces optimistic + undo (5s).",goal:"Power the resume action from the sync rows.",context:"Wave B mutation contract (Phase 1.5 — integrations-hub-uplift). Lane B owner. Handler flips the sync `state` to `active` and schedules the next run per the existing schedule. Classified additive.",domain:s,owners:[...o],tags:["integrations","syncs","mutation","resume","compatibility:additive"],stability:n.Stable},io:{input:u,output:r,errors:{...a}},policy:{auth:"user",permissions:["sync.pause"],pii:[]}});

package/dist/node/operations/integrations/syncs.run_now.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as n,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as e}from"../../ownership.js";import{defineCommand as i}from"../operation.js";import{INTEGRATIONS_DOMAIN as o,INTEGRATIONS_OWNERS as s,MUTATION_ERROR_TAXONOMY as r,MutationAckOutput as a}from"./shared-schemas.js";const u=new t({name:"SyncsRunNowInput",fields:{tenantId:{type:n.String_unsecure(),isOptional:!1},integrationId:{type:n.String_unsecure(),isOptional:!1},syncId:{type:n.String_unsecure(),isOptional:!1}}});export const SyncsRunNowCommand=i({meta:{key:"syncs.run_now",title:"Run Sync Now",version:"1.0.0",description:"Trigger an immediate run of a sync configuration. UI surfaces optimistic + undo (5s).",goal:"Power the sync-row run-now action from the syncs cross-view + tab.",context:"Wave B mutation contract (Phase 1.5 — integrations-hub-uplift). Lane B owner. Handler enqueues a job and returns immediately; final status is delivered via the sync-history timeline. Reversible within 5s (the wider sync-job framework supports cancel-before-start). Classified additive.",domain:o,owners:[...s],tags:["integrations","syncs","mutation","run-now","compatibility:additive"],stability:e.Stable},io:{input:u,output:a,errors:{...r}},policy:{auth:"user",permissions:["sync.run_now"],pii:[]}});

package/dist/node/operations/integrations/syncs.update_schedule.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{StabilityEnum as n}from"../../ownership.js";import{defineCommand as i}from"../operation.js";import{INTEGRATIONS_DOMAIN as a,INTEGRATIONS_OWNERS as s,MUTATION_ERROR_TAXONOMY as o,MutationAckOutput as r}from"./shared-schemas.js";const c=new t({name:"SyncsUpdateScheduleInput",fields:{tenantId:{type:e.String_unsecure(),isOptional:!1},integrationId:{type:e.String_unsecure(),isOptional:!1},syncId:{type:e.String_unsecure(),isOptional:!1},schedule:{type:e.String_unsecure(),isOptional:!1}}});export const SyncsUpdateScheduleCommand=i({meta:{key:"syncs.update_schedule",title:"Update Sync Schedule",version:"1.0.0",description:"Update the cron schedule for a sync configuration. UI surfaces a diff preview before save.",goal:"Power the edit-schedule row action with cron preview.",context:"Wave B mutation contract (Phase 1.5 — integrations-hub-uplift). Lane B owner. Handler validates the cron expression, recomputes `nextRunAt`, and emits a `sync_config_changed` audit row. Classified additive.",domain:a,owners:[...s],tags:["integrations","syncs","mutation","update-schedule","compatibility:additive"],stability:n.Stable},io:{input:c,output:r,errors:{...o}},policy:{auth:"user",permissions:["sync.update_schedule"],pii:[]}});

package/dist/node/operations/marketing.d.js

@@ -0,0 +1 @@
+export{};export{};

package/dist/node/operations/marketing.handlers.js

@@ -0,0 +1 @@
+export class MarketingUnauthenticatedError extends Error{code="UNAUTHENTICATED";constructor(e="Authentication is required to book a demo."){super(e);this.name="MarketingUnauthenticatedError"}}export function isAuthenticated(e){return Boolean(e.userId)||e.actor==="user"||e.actor==="admin"}const a={contractspec:{id:"contractspec",name:"ContractSpec",summary:"The open spec system for AI-native software: explicit contracts, aligned surfaces, safe regeneration.",features:["Spec-first contracts","Multi-surface consistency","Safe regeneration"],url:"https://contractspec.dev"},studio:{id:"studio",name:"ContractSpec Studio",summary:"The operating product on top of ContractSpec for teams that want the packaged workflow.",features:["Evidence","Drafting","Review","Export"],url:"https://contractspec.dev/studio"}},s="contractspec",i=[{id:"oss",name:"Open Source",price:"0",priceCurrency:"USD",highlights:["Full OSS core","Inspectable + ejectable","Community support"]},{id:"team",name:"Team",price:"49",priceCurrency:"USD",highlights:["Studio workflow","Review + export","Priority support"],recommended:!0},{id:"enterprise",name:"Enterprise",priceCurrency:"USD",highlights:["SSO + governance","Custom SLAs","Dedicated support"]}];function d(e){let r=5381;for(let n=0;n<e.length;n+=1)r=r*33^e.charCodeAt(n);return(r>>>0).toString(36)}export const marketingProductGetHandler=async(e)=>{const r=e.productId?.trim(),o=(r&&a[r])??a[s];return{id:r??o.id,name:o.name,summary:o.summary,features:o.features,url:o.url}},marketingPlansCompareHandler=async(e)=>{const r=e.planIds;return{plans:[...r&&r.length>0?i.filter((t)=>r.includes(t.id)):i].sort((t,c)=>Number(Boolean(c.recommended))-Number(Boolean(t.recommended))).map((t)=>({id:t.id,name:t.name,price:t.price,priceCurrency:e.currency??t.priceCurrency,highlights:t.highlights,recommended:t.recommended}))}},marketingDemoBookHandler=async(e,r)=>{if(!isAuthenticated(r))throw new MarketingUnauthenticatedError;const n=`${r.userId??"user"}|${e.email}|${e.preferredAt instanceof Date?e.preferredAt.toISOString():String(e.preferredAt??"")}`;return{bookingId:`demo-${d(n)}`,status:"pending",scheduledAt:e.preferredAt}};