@lssm/lib.contracts-spec 17.3.2

package/dist/node/operations/marketing.js

@@ -0,0 +1,14 @@
+import{FieldType as l,ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{z as u}from"zod";import{defineCommand as p,defineQuery as o}from"./operation.js";function n(a,r=0){const s=u.string().min(r).max(a);return new l({name:`BoundedString_${r}_${a}`,description:`String with length ${r}..${a}`,zod:s,parseValue:(i)=>s.parse(i),serialize:(i)=>String(i),parseLiteral:(i)=>{if(i.kind!=="StringValue")throw TypeError("Invalid literal");return i.value},jsonSchema:{type:"string",minLength:r,maxLength:a}})}const MarketingProductGetInput=new t({name:"MarketingProductGetInput",fields:{productId:{type:e.NonEmptyString(),isOptional:!0},locale:{type:e.Locale(),isOptional:!0}}}),MarketingProductGetOutput=new t({name:"MarketingProductGetOutput",fields:{id:{type:e.NonEmptyString(),isOptional:!1},name:{type:e.NonEmptyString(),isOptional:!1},summary:{type:e.String_unsecure(),isOptional:!0},features:{type:e.String_unsecure(),isOptional:!0,isArray:!0},url:{type:e.URL(),isOptional:!0}}}),MarketingPlansCompareInput=new t({name:"MarketingPlansCompareInput",fields:{planIds:{type:e.NonEmptyString(),isOptional:!0,isArray:!0},locale:{type:e.Locale(),isOptional:!0},currency:{type:e.Currency(),isOptional:!0}}}),MarketingPlanSummary=new t({name:"MarketingPlanSummary",fields:{id:{type:e.NonEmptyString(),isOptional:!1},name:{type:e.NonEmptyString(),isOptional:!1},price:{type:e.String_unsecure(),isOptional:!0},priceCurrency:{type:e.Currency(),isOptional:!0},highlights:{type:e.String_unsecure(),isOptional:!0,isArray:!0},recommended:{type:e.Boolean(),isOptional:!0}}}),MarketingPlansCompareOutput=new t({name:"MarketingPlansCompareOutput",fields:{plans:{type:MarketingPlanSummary,isOptional:!1,isArray:!0}}}),MarketingDemoBookInput=new t({name:"MarketingDemoBookInput",fields:{email:{type:e.EmailAddress(),isOptional:!1},name:{type:n(100,1),isOptional:!0},company:{type:n(200),isOptional:!0},preferredAt:{type:e.DateTime(),isOptional:!0},message:{type:n(1000),isOptional:!0}}}),MarketingDemoBookOutput=new t({name:"MarketingDemoBookOutput",fields:{bookingId:{type:e.NonEmptyString(),isOptional:!1},status:{type:e.NonEmptyString(),isOptional:!1},scheduledAt:{type:e.DateTime(),isOptional:!0}}});export const MarketingProductGetQuery=o({meta:{key:"marketing.product.get",title:"Get Marketing Product Facts",version:"1.0.0",description:"Fetch product/feature facts for the marketing surface.",goal:"Let on-site agents and the public MCP answer product questions.",context:"Read-only public marketing tool. Facts come from app-config knowledge bindings.",domain:"marketing",owners:["@contractspec-core"],tags:["marketing","agent-surface","public"],stability:"experimental"},io:{input:MarketingProductGetInput,output:MarketingProductGetOutput},policy:{auth:"anonymous",pii:[]}}),MarketingPlansCompareQuery=o({meta:{key:"marketing.plans.compare",title:"Compare Marketing Plans",version:"1.0.0",description:"Compare and rank pricing plans for the marketing surface.",goal:"Let agents present an accurate, ranked pricing comparison.",context:"Read-only public marketing tool. Plan data sourced from marketing knowledge/config.",domain:"marketing",owners:["@contractspec-core"],tags:["marketing","agent-surface","public"],stability:"experimental"},io:{input:MarketingPlansCompareInput,output:MarketingPlansCompareOutput},policy:{auth:"anonymous",pii:[]}}),MarketingDemoBookCommand=p({meta:{key:"marketing.demo.book",title:"Book a Product Demo",version:"1.0.0",description:"Book a product demo from the marketing surface.",goal:"Convert qualified marketing interest into a scheduled demo.",context:"Authenticated + rate-limited write. Default-deny; abuse-tested against unauthed callers.",domain:"marketing",owners:["@contractspec-core"],tags:["marketing","agent-surface","demo"],stability:"experimental"},io:{input:MarketingDemoBookInput,output:MarketingDemoBookOutput},policy:{auth:"user",pii:["email","name","company"],rateLimit:{rpm:5,key:"user"}}}),MarketingOperationsDocBlock={id:"docs.contracts-spec.operations.marketing",title:"Marketing agent tools",summary:"Public product/plan reads + auth-gated demo booking for the on-site agent and MCP projection.",kind:"reference",visibility:"public",route:"/docs/contracts-spec/operations/marketing",tags:["marketing","agent-surface","operations"],body:`# Marketing agent tools
+
+Three operations power the on-site embedded agent and the public MCP projection:
+
+- \`marketing.product.get\` (query, **public**) — product/feature facts.
+- \`marketing.plans.compare\` (query, **public**) — ranked pricing-plan comparison.
+- \`marketing.demo.book\` (command, **auth + rate-limited**) — books a demo and
+  returns a synthetic booking id. Default-deny: unauthenticated callers are
+  rejected.
+
+Schemas live in \`operations/marketing.ts\`; stub handlers in
+\`operations/marketing.handlers.ts\`. Real product/plan data is sourced from
+app-config \`aiDiscovery.productKnowledge\` and marketing config at the
+composition root.`};export{MarketingDemoBookInput,MarketingDemoBookOutput,MarketingPlanSummary,MarketingPlansCompareInput,MarketingPlansCompareOutput,MarketingProductGetInput,MarketingProductGetOutput};const MarketingLeadCaptureInput=new t({name:"MarketingLeadCaptureInput",fields:{email:{type:e.EmailAddress(),isOptional:!1},name:{type:n(100,1),isOptional:!0},company:{type:n(200),isOptional:!0},message:{type:n(1000),isOptional:!0}}}),MarketingLeadCaptureOutput=new t({name:"MarketingLeadCaptureOutput",fields:{leadId:{type:e.NonEmptyString(),isOptional:!1},status:{type:e.NonEmptyString(),isOptional:!1}}}),MarketingEstimateCalculateInput=new t({name:"MarketingEstimateCalculateInput",fields:{primaryQuantity:{type:e.Float_unsecure(),isOptional:!1},secondaryQuantity:{type:e.Float_unsecure(),isOptional:!1},bundleKey:{type:e.String_unsecure(),isOptional:!0},locale:{type:e.Locale(),isOptional:!0},currency:{type:e.Currency(),isOptional:!0}}}),MarketingEstimateCalculateOutput=new t({name:"MarketingEstimateCalculateOutput",fields:{estimateId:{type:e.NonEmptyString(),isOptional:!1},formattedTotal:{type:e.String_unsecure(),isOptional:!1},summary:{type:e.String_unsecure(),isOptional:!0}}}),BillingEstimateIntakeInput=new t({name:"BillingEstimateIntakeInput",fields:{accountCount:{type:e.Float_unsecure(),isOptional:!1},documentCount:{type:e.Float_unsecure(),isOptional:!1},bundleKey:{type:e.String_unsecure(),isOptional:!0},currency:{type:e.Currency(),isOptional:!0}}}),BillingEstimatePrepareOutput=new t({name:"BillingEstimatePrepareOutput",fields:{estimateId:{type:e.NonEmptyString(),isOptional:!1},formattedTotal:{type:e.String_unsecure(),isOptional:!1},assumptions:{type:e.String_unsecure(),isOptional:!0,isArray:!0}}});export const MarketingLeadCaptureCommand=p({meta:{key:"marketing.lead.capture",title:"Capture Marketing Lead",version:"1.0.0",description:"Contract for marketing lead capture submissions. Hosts bind provider logic at composition roots.",goal:"Validate lead-capture execution bindings without embedding provider behavior in UI packages.",context:"Schema and policy only; no CRM/provider call is performed by this contract. The command is anonymous and declares no contract-level rate limit, so hosts MUST apply rate limiting / abuse protection at the composition root before binding a handler.",domain:"marketing",owners:["@contractspec-core"],tags:["marketing","lead-capture","forms"],stability:"experimental"},io:{input:MarketingLeadCaptureInput,output:MarketingLeadCaptureOutput},policy:{auth:"anonymous",pii:["email","name","company"]}}),MarketingEstimateCalculateQuery=o({meta:{key:"marketing.estimate.calculate",title:"Calculate Marketing Estimate",version:"1.0.0",description:"Side-effect-free estimate query. Pricing math and formatting are supplied by host handlers.",goal:"Let marketing UI reference estimate operations without design-system pricing logic.",context:"Read-only query; no payment, invoice, CRM, or billing mutation is implied.",domain:"marketing",owners:["@contractspec-core"],tags:["marketing","pricing","estimate"],stability:"experimental"},io:{input:MarketingEstimateCalculateInput,output:MarketingEstimateCalculateOutput},policy:{auth:"anonymous",pii:[]}}),BillingEstimatePrepareQuery=o({meta:{key:"billing.estimate.prepare",title:"Prepare Billing Estimate",version:"1.0.0",description:"Side-effect-free BillingOS-adjacent quote preparation query for UI estimate shells.",goal:"Reference BillingOS estimate preparation without executing payments, invoices, or provider calls.",context:"Read-only query; handlers are host-owned and must remain non-mutating.",domain:"billing",owners:["@contractspec-core"],tags:["billing","estimate","marketing"],stability:"experimental"},io:{input:BillingEstimateIntakeInput,output:BillingEstimatePrepareOutput},policy:{auth:"anonymous",pii:[]}});export{BillingEstimateIntakeInput,BillingEstimatePrepareOutput,MarketingEstimateCalculateInput,MarketingEstimateCalculateOutput,MarketingLeadCaptureInput,MarketingLeadCaptureOutput};

package/dist/node/operations/operation.js

@@ -0,0 +1 @@
+export const isEmitDeclRef=(e)=>("ref"in e),defineCommand=(e)=>({...e,meta:{...e.meta,kind:"command"},policy:{...e.policy,idempotent:e.policy?.policy?.idempotent??!1}}),defineQuery=(e)=>({...e,meta:{...e.meta,kind:"query"},policy:{...e.policy,idempotent:!0}});

package/dist/node/operations/reference-detail.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{defineQuery as t}from"./operation.js";import{RichReferenceRequest as r,RichReferenceWire as n}from"./reference-resolve.js";const ReferenceDetailInput=new i({name:"ReferenceDetailInput",fields:{ref:{type:r,isOptional:!1},subjectMode:{type:e.NonEmptyString(),isOptional:!1},options:{type:e.JSONObject(),isOptional:!0}}}),ReferenceDetailOutput=new i({name:"ReferenceDetailOutput",fields:{resolved:{type:n,isOptional:!1}}});export const ReferenceDetailDocBlock={id:"docs.contracts-spec.rich-reference.detail",title:"Detail of one rich reference",summary:"Resolve a single `(kindId, id)` reference with the kind-specific detail hook.",kind:"reference",visibility:"public",route:"/docs/contracts-spec/rich-reference/detail",tags:["rich-reference","governance"],body:"# reference.detail\n\nResolves a single reference using the kind's optional `detail` handler (or the `resolve` fallback). Redaction is applied post-handler; unknown payload fields are stripped before propagation."},ReferenceDetailQuery=t({meta:{key:"reference.detail",title:"Detail Rich Reference",version:"1.0.0",description:"Resolve a single `(kindId, id)` reference with the kind-specific detail hook.",goal:"Surface detail-level data for one rich reference under policy.",context:"Called by adapters and the agent surface when expanded preview is requested.",domain:"rich-reference",owners:["@contractspec-core"],tags:["rich-reference","core"],stability:"stable"},io:{input:ReferenceDetailInput,output:ReferenceDetailOutput},policy:{auth:"user",pii:[]}});export{ReferenceDetailInput,ReferenceDetailOutput};

package/dist/node/operations/reference-resolve.js

@@ -0,0 +1,3 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as r}from"./operation.js";const RichReferenceRequest=new t({name:"RichReferenceRequest",fields:{kindId:{type:e.NonEmptyString(),isOptional:!1},id:{type:e.NonEmptyString(),isOptional:!1}}}),RichReferenceWire=new t({name:"RichReferenceWire",fields:{kindId:{type:e.NonEmptyString(),isOptional:!1},id:{type:e.NonEmptyString(),isOptional:!1},outcome:{type:e.NonEmptyString(),isOptional:!1},payload:{type:e.JSONObject(),isOptional:!0},redactionState:{type:e.String_unsecure(),isOptional:!0},sensitivity:{type:e.String_unsecure(),isOptional:!0},label:{type:e.String_unsecure(),isOptional:!0},href:{type:e.String_unsecure(),isOptional:!0},actions:{type:e.JSON(),isOptional:!0},explanation:{type:e.String_unsecure(),isOptional:!0}}}),ReferenceResolveInput=new t({name:"ReferenceResolveInput",fields:{refs:{type:RichReferenceRequest,isOptional:!1,isArray:!0},subjectMode:{type:e.NonEmptyString(),isOptional:!1},options:{type:e.JSONObject(),isOptional:!0}}}),ReferenceResolveOutput=new t({name:"ReferenceResolveOutput",fields:{resolved:{type:RichReferenceWire,isOptional:!1,isArray:!0}}});export const ReferenceResolveDocBlock={id:"docs.contracts-spec.rich-reference.resolve",title:"Resolve rich references",summary:"Batch-resolve `(kindId, id)` references into governed RichReference payloads.",kind:"reference",visibility:"public",route:"/docs/contracts-spec/rich-reference/resolve",tags:["rich-reference","governance","batch"],body:`# reference.resolve
+
+Returns one wire-form RichReference per request. Sensitive fields are replaced with HMAC-signed denial tokens per the active KindPolicy; unknown payload fields are stripped before propagation (F-1 mitigation).`},ReferenceResolveQuery=r({meta:{key:"reference.resolve",title:"Resolve Rich References",version:"1.0.0",description:"Batch-resolve `(kindId, id)` references into governed RichReference payloads.",goal:"Give agents and adapters a single, governance-aware entry point for rich references.",context:"Used by REST, GraphQL, and MCP adapters and by the agent surface. Redaction is applied post-handler and audited per call.",domain:"rich-reference",owners:["@contractspec-core"],tags:["rich-reference","core"],stability:"stable"},io:{input:ReferenceResolveInput,output:ReferenceResolveOutput},policy:{auth:"user",pii:[]}});export{ReferenceResolveInput,ReferenceResolveOutput,RichReferenceRequest,RichReferenceWire};

package/dist/node/operations/registry.agent.js

@@ -0,0 +1 @@
+import{AgentArchiveCommand as e}from"./agent/archive.command.js";import{AgentAssignToolCommand as m}from"./agent/assign-tool.command.js";import{AgentCloneCommand as t}from"./agent/clone.command.js";import{AgentCreateCommand as o}from"./agent/create.command.js";import{AgentFleetHealthQuery as r}from"./agent/fleet-health.query.js";import{AgentGetQuery as a}from"./agent/get.query.js";import{AgentImportMemoryCommand as n}from"./agent/import-memory.command.js";import{AgentListQuery as i}from"./agent/list.query.js";import{AgentPauseCommand as p}from"./agent/pause.command.js";import{AgentSetAutonomyCommand as y}from"./agent/set-autonomy.command.js";import{AgentSetRiskTierCommand as A}from"./agent/set-risk-tier.command.js";import{AgentStartCommand as g}from"./agent/start.command.js";import{AgentStopCommand as f}from"./agent/stop.command.js";import{AgentUpdateCommand as k}from"./agent/update.command.js";export const agentOperationPartial=Object.freeze({[i.meta.key]:i,[n.meta.key]:n,[a.meta.key]:a,[o.meta.key]:o,[k.meta.key]:k,[t.meta.key]:t,[e.meta.key]:e,[g.meta.key]:g,[p.meta.key]:p,[f.meta.key]:f,[m.meta.key]:m,[y.meta.key]:y,[A.meta.key]:A,[r.meta.key]:r});

package/dist/node/operations/registry.audit.js

@@ -0,0 +1 @@
+import{EventExportCommand as e}from"./audit/event.export.command.js";import{EventGetQuery as t}from"./audit/event.get.query.js";import{EventListQuery as i}from"./audit/event.list.query.js";import{EvidenceAttachCommand as r}from"./audit/evidence.attach.command.js";import{PipelineHealthQuery as o}from"./audit/pipeline.health.query.js";export const auditOperationPartial=Object.freeze({"audit.event.list":i,"audit.event.get":t,"audit.event.export":e,"audit.evidence.attach":r,"audit.pipeline.health":o});

package/dist/node/operations/registry.coach.js

@@ -0,0 +1 @@
+import{AgentCoachSuggestToolCommand as o}from"./coach/agent-suggest-tool.command.js";import{GovernanceCoachSuggestConstraintCommand as e}from"./coach/governance-suggest-constraint.command.js";import{ReviewCoachSummarizeCommand as t}from"./coach/review-summarize.command.js";import{WorkflowCoachSuggestStepCommand as m}from"./coach/workflow-suggest-step.command.js";export const coachOperationPartial=Object.freeze({[o.meta.key]:o,[m.meta.key]:m,[t.meta.key]:t,[e.meta.key]:e});

package/dist/node/operations/registry.d.js

@@ -0,0 +1 @@
+export{};

package/dist/node/operations/registry.domains.js

@@ -0,0 +1 @@
+import{integrationsOperationPartial as o}from"./integrations/registry.js";import{agentOperationPartial as e}from"./registry.agent.js";import{auditOperationPartial as r}from"./registry.audit.js";import{coachOperationPartial as t}from"./registry.coach.js";import{fleetOperationPartial as a}from"./registry.fleet.js";import{governanceOperationPartial as i}from"./registry.governance.js";import{reviewOperationPartial as n}from"./registry.review.js";import{workflowOperationPartial as p}from"./registry.workflow.js";export const OPERATION_DOMAINS=["agent","workflow","review","governance","audit","fleet","integrations","coach"],allDomainOperationPartials=Object.freeze({agent:e,workflow:p,review:n,governance:i,audit:r,fleet:a,integrations:o,coach:t}),allDomainOperations=Object.freeze({...e,...p,...n,...i,...r,...a,...o,...t});export function allDomainOperationsAsList(){return Object.values(allDomainOperations)}

package/dist/node/operations/registry.fleet.js

@@ -0,0 +1 @@
+import{FleetHealthSnapshotQuery as e}from"./fleet/health-snapshot.query.js";import{FleetMetricsSummaryQuery as t}from"./fleet/metrics-summary.query.js";import{FleetRoiSnapshotQuery as r}from"./fleet/roi-snapshot.query.js";export const fleetOperationPartial=Object.freeze({[t.meta.key]:t,[e.meta.key]:e,[r.meta.key]:r});

package/dist/node/operations/registry.governance.js

@@ -0,0 +1 @@
+import{ConstraintAddCommand as o}from"./governance/constraint.add.command.js";import{ConstraintRemoveCommand as e}from"./governance/constraint.remove.command.js";import{NotificationDispatchCommand as r}from"./governance/notification.dispatch.command.js";import{PolicyGetQuery as t}from"./governance/policy.get.query.js";import{PolicyHealthQuery as n}from"./governance/policy.health.query.js";import{PolicyListQuery as i}from"./governance/policy.list.query.js";import{PolicySimulateQuery as a}from"./governance/policy.simulate.query.js";import{PolicyUpdateCommand as c}from"./governance/policy.update.command.js";export const governanceOperationPartial=Object.freeze({"governance.policy.list":i,"governance.policy.get":t,"governance.policy.update":c,"governance.policy.simulate":a,"governance.constraint.add":o,"governance.constraint.remove":e,"governance.policy.health":n,"governance.notification.dispatch":r});

package/dist/node/operations/registry.js

@@ -0,0 +1 @@
+import{eventKey as q}from"../events.js";import{normalizePolicyRequirement as M}from"../policy/requirements.js";import{SpecContractRegistry as L}from"../registry.js";import{ContractSpecError as f,contractFail as E,contractOk as K,createContractError as g,isContractFailure as F,isContractSuccess as R,isStandardSuccessCode as Z,normalizeContractError as U,STANDARD_SUCCESS_SPECS as j}from"../results/index.js";import{readIssues as b}from"../results/value-utils.js";import{requiredApprovalEffects as B}from"./approval.js";import{mergeSafeEconomicEvidenceRefIds as G,parseSafeEconomicEvidenceRefId as Q}from"./economic-evidence.js";import{isEmitDeclRef as V}from"./operation.js";export function opKey(t,r){return`${t}.v${r}`}function W(t){const r=new Set;for(const e of t.values())r.add(e.meta.key);const o=new Map;for(const e of t.values()){const a=e.meta.aliases;if(!a)continue;for(const n of a){if(n===e.meta.key)throw Error(`OperationSpec "${e.meta.key}" lists its own canonical key as an alias; remove the self-reference.`);if(r.has(n))throw Error(`OperationSpec "${e.meta.key}" declares alias "${n}" that collides with another operation's canonical key. Aliases must not shadow canonical keys.`);const s=o.get(n);if(s&&s!==e.meta.key)throw Error(`Alias "${n}" is declared by both "${s}" and "${e.meta.key}". Each alias must resolve to exactly one operation.`);o.set(n,e.meta.key)}}}function N(t,r){if(!r?.length||!t||typeof t!=="object")return t;const o={...t};for(const e of r)if(e in o)o[e]="[REDACTED]";return o}export class OperationSpecRegistry extends L{handlers=new Map;constructor(t){super("operation",t);W(this.items)}get(t,r){const o=super.get(t,r);if(o)return o;for(const e of this.items.values()){const a=e.meta.aliases;if(a&&a.includes(t)){if(!r||e.meta.version===r)return e}}return}bind(t,r){const o=opKey(t.meta.key,t.meta.version);if(!this.items.has(o))throw Error(`Cannot bind; spec not found: ${o}`);if(this.handlers.has(o))throw Error(`Handler already bound for ${o}`);this.handlers.set(o,r);return this}getHandler(t,r){const o=this.get(t,r);if(!o)return;return this.handlers.get(opKey(o.meta.key,o.meta.version))}listBound(){const t=[];for(const[r,o]of this.items.entries()){const e=this.handlers.get(r);if(e)t.push({spec:o,handler:e})}return t}async execute(t,r,o,e){const a=await this.executeResult(t,r,o,e);if(!a.ok)throw new f(a.problem);return a.data}async executeResult(t,r,o,e){const a=this.get(t,r);try{const n=await this.executeRaw(t,r,o,e);if(R(n))return{...n,traceId:n.traceId??e.traceId,source:n.source??{channel:e.channel}};return K(n,{traceId:e.traceId,source:{channel:e.channel}})}catch(n){const s=this.get(t,r)??a;return U(n,{traceId:e.traceId,operation:s?{key:s.meta.key,version:s.meta.version,kind:s.meta.kind}:void 0,source:{channel:e.channel},declaredErrors:{...s?.results?.errors??{},...s?.io.errors??{}}})}}async executeRaw(t,r,o,e){const a=this.get(t,r);if(!a)throw Error(`Spec not found for ${t}${r?`.v${r}`:""}`);const n=await e.specVariantResolver?.resolve({name:a.meta.key,version:a.meta.version,kind:a.meta.kind},e)??a;let s=opKey(n.meta.key,n.meta.version),w=this.handlers.get(s);if(!w){const i=opKey(a.meta.key,a.meta.version);w=this.handlers.get(i);s=i}if(!w)throw Error(`No handler bound for ${s}`);let d,u;try{u=n.io.input?n.io.input.getZod().parse(o):o}catch(i){throw g("VALIDATION_FAILED",void 0,{detail:"Operation input failed contract validation.",issues:b(i),metadata:{validationPhase:"input"}})}const v=D(void 0,e.economicEvidenceRefs,_(o),_(u)),T=D(n.economicEvidence?.refs,v);if(n.economicEvidence?.required){if((n.economicEvidence.refs?.length??0)===0)throw Error(`EconomicEvidenceRequired: ${opKey(n.meta.key,n.meta.version)} must declare at least one economic evidence seam ref.`);if(v.length===0)throw Error(`EconomicEvidenceRequired: ${opKey(n.meta.key,n.meta.version)} requires at least one safe economic evidence ref.`);if(!J(n.economicEvidence.refs,v))throw Error(`EconomicEvidenceRequired: ${opKey(n.meta.key,n.meta.version)} requires a runtime economic evidence ref matching a declared seam kind.`)}if(e.decide){const[i,c]=n.meta.key.split(".");if(!i||!c)throw Error(`Invalid spec name: ${n.meta.key}`);const l=M(n.policy),m={tenantId:e.tenantId,workspaceId:e.workspaceId,organizationId:e.organizationId,userId:e.userId,channel:e.channel,...e.policyContext},p=await e.decide({service:i,command:c,version:n.meta.version,actor:e.actor??"anonymous",channel:e.channel,roles:e.roles,organizationId:e.organizationId,userId:e.userId,flags:n.policy.flags??[],operation:{key:n.meta.key,version:n.meta.version,kind:n.meta.kind},requirements:l,policies:n.policy.policies,fieldPolicies:n.policy.fieldPolicies,permissions:e.permissions,subject:{roles:e.roles,permissions:e.permissions,attributes:e.attributes,relationships:e.relationships},resource:{type:n.policy.resource?.type??n.meta.key,fields:n.policy.resource?.fields??n.policy.fieldPolicies?.map((h)=>h.field)},context:m});if(p.effect==="deny")throw Error(`PolicyDenied: ${n.meta.key}.v${n.meta.version}`);if(p.rateLimit&&e.rateLimit){const h=p.rateLimit.key??"default",z=p.rateLimit.rpm??60;await e.rateLimit(h,1,z)}}if(n.execution?.approval){if(!e.approvalReceipt)throw I(n,"missing_receipt");if(!e.approvalPort)throw I(n,"approval_runtime_unavailable");const i=await e.approvalPort.authorize({receipt:e.approvalReceipt,operation:{key:n.meta.key,version:n.meta.version},subject:{actor:e.actor,userId:e.userId,tenantId:e.tenantId,workspaceId:e.workspaceId,organizationId:e.organizationId},input:u,requiredEffects:B(n.execution),requestedCost:e.approvalCost});if(i.effect==="deny")throw I(n,i.reason)}if(n.execution?.ceremony){if(!e.ceremonyReceipt)throw O(n,"missing_ceremony");if(!e.ceremonyPort)throw O(n,"ceremony_runtime_unavailable");const i=await e.ceremonyPort.claim({receipt:e.ceremonyReceipt,requirement:n.execution.ceremony,operation:{key:n.meta.key,version:n.meta.version},subject:{actor:e.actor,userId:e.userId,tenantId:e.tenantId,workspaceId:e.workspaceId,organizationId:e.organizationId,ceremonyBindingRef:e.ceremonyBindingRef}});if(i.effect==="deny")throw O(n,i.reason);d={port:e.ceremonyPort,ceremonyId:i.ceremonyId,leaseId:i.leaseId}}const k=new Map;if(n.sideEffects?.emits)for(const i of n.sideEffects.emits)if(V(i)){const c=e.eventSpecResolver?.get(i.ref.key,i.ref.version);if(c)k.set(`${i.ref.key}.v${i.ref.version}`,c.payload)}else k.set(`${i.key}.v${i.version}`,i.payload);const H=async(i,c,l)=>{const m=q(i,c),p=k.get(m);if(!p)throw Error(`UndeclaredEvent: ${m} not allowed by ${opKey(n.meta.key,n.meta.version)}`);const h=p.getZod().parse(l);await e.eventPublisher?.({key:i,version:c,payload:h,traceId:e.traceId})};if(e.appConfig){if(!e.branding)e.branding=e.appConfig.branding;if(!e.translation)e.translation={config:e.appConfig.translation};else if(!e.translation.config)e.translation={...e.translation,config:e.appConfig.translation}}const S=e.telemetry,A=async(i,c)=>{if(!S||!i?.event||n.execution?.dataHandling?.telemetry==="disabled")return;try{const l=n.execution?.dataHandling,m=l?{...c,input:N(c.input,l.transientInputFields),output:N(c.output,l.transientOutputFields)}:c,p=i.properties?.(m)??{};await S.track(i.event.key,i.event.version??"1.0.0",p,{tenantId:e.organizationId??void 0,organizationId:e.organizationId,userId:e.userId,actor:e.actor,channel:e.channel,metadata:e.traceId?{traceId:e.traceId}:void 0})}catch(l){e.onTelemetryError?.(l)}};let y;try{y=await w(u,{...e,ceremonyExecution:d?{ceremonyId:d.ceremonyId,leaseId:d.leaseId}:void 0,economicEvidenceRefs:T,__emitGuard__:H});if(F(y))throw new f(y.problem)}catch(i){await d?.port.complete({leaseId:d.leaseId,outcome:"failed"});if(n.telemetry?.failure)await A(n.telemetry.failure,{input:u??o,error:i});throw i}if(n.telemetry?.success)await A(n.telemetry.success,{input:u??o,output:y});let C;try{C=Y(n,y)}catch(i){await d?.port.complete({leaseId:d.leaseId,outcome:"failed"});if(i instanceof f)throw i;throw g("INTERNAL_ERROR",void 0,{detail:"Operation output failed contract validation.",issues:b(i),metadata:{validationPhase:"output"}})}await d?.port.complete({leaseId:d.leaseId,outcome:"succeeded"});return C}}function Y(t,r){const o=t.io.output;if(o?.getZod){if(R(r)){const e=P(t,r,o);if(e.status===204||e.state==="empty")return e;const a=o.getZod().parse(e.data);return{...e,data:a}}return o.getZod().parse(r)}return R(r)?P(t,r,o):r}function I(t,r){return g("APPROVAL_REQUIRED",{reason:r},{detail:"A valid scoped approval receipt is required before execution.",operation:{key:t.meta.key,version:t.meta.version,kind:t.meta.kind}})}function O(t,r){return g("CEREMONY_REQUIRED",{reason:r},{detail:"A valid host-bound, unexpired, single-use ceremony is required before execution.",operation:{key:t.meta.key,version:t.meta.version,kind:t.meta.kind}})}function _(t){if(!t||typeof t!=="object")return[];const r=t.economicEvidenceRefs;if(!Array.isArray(r))return[];return r.filter((o)=>typeof o==="string"&&o.length>0)}function J(t,r){const o=new Set(t?.map((e)=>e.kind)??[]);if(o.size===0)return!1;return r.every((e)=>{const a=Q(e);return a!==void 0&&o.has(a.kind)})}function D(t,r,...o){return G(t?.map((e)=>e.id),r,...o)}function P(t,r,o){const e=X(t,r.code),a=Z(r.code)?j[r.code]:void 0;if(!e&&!a)throw new f(E("INTERNAL_ERROR",{code:r.code},{detail:`Undeclared contract success: ${r.code}`}).problem);if(r.code==="NO_CONTENT"&&!e&&!x(o))throw new f(E("INTERNAL_ERROR",{code:r.code},{detail:"NO_CONTENT success must be declared or use an output schema that accepts undefined."}).problem);if(r.code==="NO_CONTENT"&&r.data!==void 0)throw new f(E("INTERNAL_ERROR",{code:r.code},{detail:"NO_CONTENT success cannot include response data."}).problem);const n=e??a;return{...r,status:n?.status??r.status,state:n?.state??r.state,headers:{...n?.headers??{},...r.headers??{}}}}function X(t,r){return t.results?.success?.[r]??t.io.success?.[r]}function x(t){if(!("getZod"in t)||typeof t.getZod!=="function")return!0;return t.getZod().safeParse(void 0).success}

package/dist/node/operations/registry.review.js

@@ -0,0 +1 @@
+import{ReviewApproveCommand as e}from"./review/commands/reviewApprove.command.js";import{ReviewAssignCommand as r}from"./review/commands/reviewAssign.command.js";import{ReviewCommentCommand as i}from"./review/commands/reviewComment.command.js";import{ReviewEscalateCommand as o}from"./review/commands/reviewEscalate.command.js";import{ReviewRejectCommand as m}from"./review/commands/reviewReject.command.js";import{ReviewRequestChangesCommand as t}from"./review/commands/reviewRequestChanges.command.js";import{ReviewGetQuery as a}from"./review/queries/reviewGet.query.js";import{ReviewListQuery as p}from"./review/queries/reviewList.query.js";import{ReviewQueueHealthQuery as n}from"./review/queries/reviewQueueHealth.query.js";export const reviewOperationPartial=Object.freeze({"review.list":p,"review.get":a,"review.queue.health":n,"review.approve":e,"review.reject":m,"review.request-changes":t,"review.escalate":o,"review.comment":i,"review.assign":r});

package/dist/node/operations/registry.workflow.js

@@ -0,0 +1 @@
+import{WorkflowActivateCommand as e,WorkflowCreateCommand as o,WorkflowDeactivateCommand as a,WorkflowGetQuery as m,WorkflowListQuery as t,WorkflowRunCancelCommand as r,WorkflowRunDispatchCommand as k,WorkflowRunnerHealthQuery as n,WorkflowRunPauseCommand as y,WorkflowRunResumeCommand as l,WorkflowRunRetryCommand as f,WorkflowStepAdvanceCommand as w,WorkflowStepSkipCommand as d,WorkflowUpdateCommand as p}from"./workflow/index.js";export const workflowOperationPartial=Object.freeze({[t.meta.key]:t,[m.meta.key]:m,[n.meta.key]:n,[o.meta.key]:o,[p.meta.key]:p,[e.meta.key]:e,[a.meta.key]:a,[k.meta.key]:k,[y.meta.key]:y,[l.meta.key]:l,[f.meta.key]:f,[r.meta.key]:r,[w.meta.key]:w,[d.meta.key]:d});

package/dist/node/operations/report/getContractVerificationStatus.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as i,ZodSchemaType as r}from"@lssm/lib.schema";import*as e from"zod";import{StabilityEnum as a}from"../../ownership.js";import{defineQuery as o}from"../operation.js";const n="report",s=["platform.core"],c=["report","drift","verification"],p=a.Experimental;export const ContractVerificationStatusModel=new i({name:"ContractVerificationStatus",fields:{name:{type:t.String_unsecure(),isOptional:!1},lastVerifiedSha:{type:t.String_unsecure(),isOptional:!0},lastVerifiedDate:{type:t.String_unsecure(),isOptional:!0},surfaces:{type:t.String_unsecure(),isOptional:!1,isArray:!0},driftMismatches:{type:t.Int_unsecure(),isOptional:!1}}}),GetContractVerificationStatusInput=new i({name:"GetContractVerificationStatusInput",fields:{projectPath:{type:t.String_unsecure(),isOptional:!1},baseline:{type:t.String_unsecure(),isOptional:!0}}}),GetContractVerificationStatusOutput=new r(e.object({contracts:e.object({name:e.string(),lastVerifiedSha:e.string().optional(),lastVerifiedDate:e.string().optional(),surfaces:e.string().array(),driftMismatches:e.int()}).array()}),{name:"GetContractVerificationStatusOutput"}),GetContractVerificationStatusQuery=o({meta:{key:"report.getContractVerificationStatus",title:"Get Contract Verification Status",version:"1.0.0",description:"Retrieves per-contract verification status for the impact report.",goal:"Enable stakeholders to see contract health at a glance.",context:"Part of the impact report domain. Reads from drift check outputs and verified.json to provide a consolidated view of each contract's drift debt and surface coverage.",domain:n,owners:s,tags:c,stability:p},io:{input:GetContractVerificationStatusInput,output:GetContractVerificationStatusOutput,errors:{PROJECT_NOT_FOUND:{description:"Project path does not exist.",http:404,when:"The provided projectPath does not resolve to a valid directory."}}},policy:{auth:"anonymous",pii:[]}});

package/dist/node/operations/report/index.js

@@ -0,0 +1 @@
+import{installOp as u}from"../../install.js";import{safeParseJson as f}from"../../utils/safe-json.js";import{GetContractVerificationStatusQuery as l}from"./getContractVerificationStatus.js";export{ContractVerificationTableDataView}from"../../data-views/report/contractVerificationTable.js";export{ContractVerificationStatusModel,GetContractVerificationStatusInput,GetContractVerificationStatusOutput,GetContractVerificationStatusQuery}from"./getContractVerificationStatus.js";export const getContractVerificationStatusHandler=async(r,m)=>{try{const s=await Bun.spawn(["contractspec","impl","status","--format","json","--all"],{cwd:r.projectPath}).stdout,a=await Bun.readableStreamToText(s);if(!a)return{contracts:[]};const n=f(a);if(!n.ok){console.error("Contract verification CLI returned invalid JSON:",a?.slice(0,200));return{contracts:[]}}const c=n.data,o=[];for(const t of c.results||[]){const p={name:t.specKey,lastVerifiedSha:t.specHash,lastVerifiedDate:t.specHash?new Date().toISOString():void 0,surfaces:t.implementations.filter((e)=>e.exists).map((e)=>e.type),driftMismatches:t.implementations.filter((e)=>!e.exists).length};o.push(p)}return{contracts:o}}catch(i){console.error("Failed to get contract verification status:",i);return{contracts:[]}}};export function registerReportContracts(r){u(r,l,getContractVerificationStatusHandler);return r}

package/dist/node/operations/review/commands/index.js

@@ -0,0 +1 @@
+export*from"./reviewApprove.command.js";export*from"./reviewAssign.command.js";export*from"./reviewComment.command.js";export*from"./reviewEscalate.command.js";export*from"./reviewReject.command.js";export*from"./reviewRequestChanges.command.js";

package/dist/node/operations/review/commands/reviewApprove.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{docRef as t}from"../../../docs/registry.js";import{defineCommand as r}from"../../operation.js";import{REVIEW_DOMAIN as a,REVIEW_OWNERS as o,REVIEW_STABILITY as p,REVIEW_TAGS as n}from"../constants.js";import{ReviewDecisionOutputFields as s}from"../shared-schemas.js";const d=new i({name:"ReviewApproveInput",fields:{id:{type:e.ID(),isOptional:!1},comment:{type:e.String_unsecure(),isOptional:!0},conditions:{type:e.String_unsecure(),isOptional:!0,isArray:!0},idempotencyKey:{type:e.NonEmptyString(),isOptional:!1}}}),l=new i({name:"ReviewApproveOutput",fields:{...s,dispatchAuditEventId:{type:e.ID(),isOptional:!0}}});export const ReviewApproveDocBlock={id:"docs.tech.review.approve",title:"Approve a review record",summary:"Terminal-approve a review record; emits one audit event and dispatches the SEAMS §3.7 subject-kind callee (when applicable).",kind:"reference",visibility:"public",route:"/docs/tech/review/approve",tags:["review","approve","mutation"],body:"# review.approve\n\nApproves a review record. Terminal at the record level — re-opening requires\na fresh review (no `review.reopen` in v1.0).\n\nPer SEAMS §3.7 (S-07): when `subject.kind` resolves a downstream callee\n(`governance.policy.activate` ∨ `workflow.run.resume` ∨\n`agent.set-autonomy`), the handler dispatches it via the\n`lib.companyos-runtime` outbox. The dispatched op runs under the original\nreviewer's auth context (§1.2); the handler pre-checks the reviewer's\ncapability at decide-time per Q-03 and refuses with `FORBIDDEN` when the\ndownstream capability is missing — prevents the \"approved but inert\" state.\n\nCapability: `review.act` (+ implicit downstream capability where dispatch\napplies). Per SEAMS §1.5, missing capability returns `FORBIDDEN` — auditor\npersona sees the button disabled with a read-only tooltip.\n\nIdempotency: `idempotencyKey` is required. Replays return the original\nresult; differing payload on replay → `IDEMPOTENCY_FAIL`.\n"},ReviewApproveCommand=r({meta:{key:"review.approve",title:"Approve Review",version:"1.0.0",description:"Approve a review record; dispatch subject-kind callee if applicable.",goal:"Provide a single capability-gated path to terminally approve a review with audit + outbox-backed downstream dispatch.",context:"Used by the review-queue cockpit. Per SEAMS §3.7 (S-07) the approve handler dispatches the SEAMS-declared subject-kind callee atomically with audit emission via the outbox.",domain:a,owners:[...o],tags:[...n,"approve"],stability:p,docId:[t(ReviewApproveDocBlock.id)]},capability:{key:"review.act",version:"1.0.0"},io:{input:d,output:l,errors:{NOT_FOUND:{description:"No review found for the supplied id.",recoverable:!1,http:404,when:"No review found for the supplied id."},CONFLICT:{description:"Review is already in a terminal state.",recoverable:!1,http:409,when:"Review is already in a terminal state."},FORBIDDEN:{description:"Caller lacks review.act, or downstream subject-dispatch capability missing (SEAMS Q-03 pre-check).",recoverable:!1,http:403,when:"Caller lacks review.act, or downstream subject-dispatch capability missing."},VALIDATION:{description:"Input failed validation (e.g., conditions malformed).",recoverable:!1,http:400,when:"Input failed validation (e.g., conditions malformed)."},DEPENDENCY:{description:"Policy engine, audit pipeline, or downstream dispatch temporarily unavailable.",recoverable:!0,http:503,when:"Policy engine, audit pipeline, or downstream dispatch temporarily unavailable."},IDEMPOTENCY_FAIL:{description:"Replay detected with differing payload; original result preserved.",recoverable:!1,http:409,when:"Replay detected with differing payload; original result preserved."}}},policy:{auth:"user",policies:[{key:"review.decision.governed",version:"1.0.0"}]},sideEffects:{audit:["review.approved"]}});

package/dist/node/operations/review/commands/reviewAssign.command.js

@@ -0,0 +1,12 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{docRef as t}from"../../../docs/registry.js";import{defineCommand as s}from"../../operation.js";import{REVIEW_DOMAIN as n,REVIEW_OWNERS as a,REVIEW_STABILITY as r,REVIEW_TAGS as o}from"../constants.js";const p=new i({name:"ReviewAssignInput",fields:{id:{type:e.ID(),isOptional:!1},assigneeId:{type:e.NonEmptyString(),isOptional:!1},note:{type:e.String_unsecure(),isOptional:!0},idempotencyKey:{type:e.NonEmptyString(),isOptional:!1}}}),d=new i({name:"ReviewAssignOutput",fields:{id:{type:e.ID(),isOptional:!1},assigneeId:{type:e.NonEmptyString(),isOptional:!1},assignedAt:{type:e.DateTime(),isOptional:!1},auditEventId:{type:e.ID(),isOptional:!1},version:{type:e.Int_unsecure(),isOptional:!1}}});export const ReviewAssignDocBlock={id:"docs.tech.review.assign",title:"Assign a review to a reviewer",summary:"Assign (or reassign) a review record to a reviewer; idempotent on (id, assigneeId).",kind:"reference",visibility:"public",route:"/docs/tech/review/assign",tags:["review","assign","mutation"],body:`# review.assign
+
+Assigns (or reassigns) a review to a reviewer. Idempotent on
+\`(id, assigneeId)\` — re-assigning to the same reviewer is a no-op success.
+
+Per SEAMS §1.3 (S-11), emits one \`audit.event.append\` with kind
+\`review.assigned\` (retention class \`operational\`). Per SEAMS §3.6.4,
+downstream notifications to the new assignee are fire-and-forget; failure
+does NOT roll back the assignment.
+
+Capability: \`review.act\`. Idempotency: required.
+`},ReviewAssignCommand=s({meta:{key:"review.assign",title:"Assign Review",version:"1.0.0",description:"Assign (or reassign) a review record to a reviewer; idempotent on (id, assigneeId).",goal:"Provide a capability-gated path to set or change the assignee of a review.",context:"Used by the review-queue cockpit and the operator inbox. Non-terminal — assignee may change multiple times before decision.",domain:n,owners:[...a],tags:[...o,"assign"],stability:r,docId:[t(ReviewAssignDocBlock.id)]},capability:{key:"review.act",version:"1.0.0"},io:{input:p,output:d,errors:{NOT_FOUND:{description:"No review found for the supplied id.",recoverable:!1,http:404,when:"No review found for the supplied id."},CONFLICT:{description:"Review is already assigned to this reviewer (idempotent no-op success returned in the happy path).",recoverable:!1,http:409,when:"Conflicting concurrent assignment."},FORBIDDEN:{description:"Caller lacks review.act capability.",recoverable:!1,http:403,when:"Caller lacks review.act capability."},VALIDATION:{description:"assigneeId malformed or principal not found.",recoverable:!1,http:400,when:"assigneeId malformed or principal not found."},DEPENDENCY:{description:"Audit pipeline temporarily unavailable.",recoverable:!0,http:503,when:"Audit pipeline temporarily unavailable."},IDEMPOTENCY_FAIL:{description:"Replay detected with differing payload; original result preserved.",recoverable:!1,http:409,when:"Replay detected with differing payload; original result preserved."}}},policy:{auth:"user"},sideEffects:{audit:["review.assigned"]}});

package/dist/node/operations/review/commands/reviewComment.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{docRef as i}from"../../../docs/registry.js";import{defineCommand as o}from"../../operation.js";import{REVIEW_DOMAIN as n,REVIEW_OWNERS as a,REVIEW_STABILITY as r,REVIEW_TAGS as s}from"../constants.js";const m=new t({name:"ReviewCommentAttachment",fields:{evidenceId:{type:e.ID(),isOptional:!1},summary:{type:e.String_unsecure(),isOptional:!0}}}),p=new t({name:"ReviewCommentInput",fields:{id:{type:e.ID(),isOptional:!1},body:{type:e.NonEmptyString(),isOptional:!1},visibility:{type:e.NonEmptyString(),isOptional:!1},attachments:{type:m,isOptional:!0,isArray:!0}}}),c=new t({name:"ReviewCommentOutput",fields:{commentId:{type:e.ID(),isOptional:!1},id:{type:e.ID(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},auditEventId:{type:e.ID(),isOptional:!1},version:{type:e.Int_unsecure(),isOptional:!1}}});export const ReviewCommentDocBlock={id:"docs.tech.review.comment",title:"Comment on a review",summary:"Append a thread or private-to-assignee comment to a review record.",kind:"reference",visibility:"public",route:"/docs/tech/review/comment",tags:["review","comment","mutation"],body:"# review.comment\n\nAppends a comment to a review. Does not advance state. `visibility` is one\nof `'thread'` (visible to all participants) | `'private-to-assignee'`\n(visible only to the current assignee and the commenter).\n\nPer SEAMS §1.3 (S-11), emits one `audit.event.append` with kind\n`review.commented` (retention class `operational`).\n\nCapability: `review.act` for posting; `review.read` for thread reads.\nAuditor persona may read but cannot post — the UI renders the post button\ndisabled with a read-only tooltip per SEAMS §1.5.\n"},ReviewCommentCommand=o({meta:{key:"review.comment",title:"Comment on Review",version:"1.0.0",description:"Append a thread or private-to-assignee comment to a review record.",goal:"Give reviewers a structured annotation surface without advancing the review state machine.",context:"Used by the review-detail surface. Non-state-changing — comments are append-only annotations.",domain:n,owners:[...a],tags:[...s,"comment"],stability:r,docId:[i(ReviewCommentDocBlock.id)]},capability:{key:"review.act",version:"1.0.0"},io:{input:p,output:c,errors:{NOT_FOUND:{description:"No review found for the supplied id.",recoverable:!1,http:404,when:"No review found for the supplied id."},FORBIDDEN:{description:"Caller lacks the review.act capability for posting.",recoverable:!1,http:403,when:"Caller lacks the review.act capability for posting."},VALIDATION:{description:"Body empty, visibility unrecognised, or attachment evidence id malformed.",recoverable:!1,http:400,when:"Body empty, visibility unrecognised, or attachment evidence id malformed."},DEPENDENCY:{description:"Audit pipeline temporarily unavailable.",recoverable:!0,http:503,when:"Audit pipeline temporarily unavailable."}}},policy:{auth:"user"},sideEffects:{audit:["review.commented"]}});

package/dist/node/operations/review/commands/reviewEscalate.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{docRef as i}from"../../../docs/registry.js";import{defineCommand as a}from"../../operation.js";import{REVIEW_DOMAIN as o,REVIEW_OWNERS as r,REVIEW_STABILITY as n,REVIEW_TAGS as s}from"../constants.js";import{ReviewDecisionOutputFields as l}from"../shared-schemas.js";const c=new t({name:"ReviewEscalateInput",fields:{id:{type:e.ID(),isOptional:!1},escalationReason:{type:e.NonEmptyString(),isOptional:!1},targetTier:{type:e.NonEmptyString(),isOptional:!1},notifyOwners:{type:e.Boolean(),isOptional:!0},idempotencyKey:{type:e.NonEmptyString(),isOptional:!1}}}),d=new t({name:"ReviewEscalateOutput",fields:{...l,tier:{type:e.NonEmptyString(),isOptional:!1},governanceNotificationId:{type:e.ID(),isOptional:!0}}});export const ReviewEscalateDocBlock={id:"docs.tech.review.escalate",title:"Escalate a review to a higher tier",summary:"Escalate a review to a target tier; emits an audit event and (optionally) a governance notification via the outbox.",kind:"reference",visibility:"public",route:"/docs/tech/review/escalate",tags:["review","escalate","mutation","governance","audit"],body:"# review.escalate\n\nPRIMARY cross-domain seam (SEAMS §3.6, S-06). On successful escalation, the\nhandler emits two ordered outbox messages alongside the review's own state\nchange:\n\n1. `audit.event.append { eventKind: 'review.escalated', retentionClass: 'regulatory', payload: { reviewId, fromStatus, toTier, escalationReason, decidedBy, decidedAt } }`. `auditEventId` is returned in the output for traceability.\n2. If `notifyOwners === true`, `governance.notification.dispatch { policyRefs: subject.policyRefs[], escalationContext: { reviewId, tier, auditEventId } }`. `governanceNotificationId` is returned in the output (optional field).\n\nPer SEAMS §1.4 transactional outbox: state change + outbox row commit\natomically; downstream callees are idempotent on\n`(reviewId, escalation-version)` so replays are safe.\n\nCapability: `review.escalate` (+ implicit `review.act`). Per SEAMS §1.5,\nmissing capability returns `FORBIDDEN`. Idempotency: required.\n\nTier vocabulary (`'tier-1' | 'tier-2' | 'admin'`) aligns with\n`lib.identity-rbac` role tiers (DOMAIN_NOTES §9 Q1; coordinated with W5).\n"},ReviewEscalateCommand=a({meta:{key:"review.escalate",title:"Escalate Review",version:"1.0.0",description:"Escalate a review to a target tier; emit audit + governance notification atomically via outbox.",goal:"Provide an audit-grade escalation path with transactional cross-domain side-effects.",context:"Per SEAMS §3.6 (S-06) — PRIMARY cross-domain seam. Audit + governance side-effects ordered via outbox; review handler owns the outer idempotency key.",domain:o,owners:[...r],tags:[...s,"escalate","cross-domain"],stability:n,docId:[i(ReviewEscalateDocBlock.id)]},capability:{key:"review.escalate",version:"1.0.0"},io:{input:c,output:d,errors:{NOT_FOUND:{description:"No review found for the supplied id.",recoverable:!1,http:404,when:"No review found for the supplied id."},CONFLICT:{description:"Review already escalated to the same tier, or in a terminal state.",recoverable:!1,http:409,when:"Review already escalated to the same tier, or terminal."},FORBIDDEN:{description:"Caller lacks the review.escalate capability.",recoverable:!1,http:403,when:"Caller lacks the review.escalate capability."},VALIDATION:{description:"Input failed validation (escalationReason or targetTier malformed).",recoverable:!1,http:400,when:"Input failed validation (escalationReason or targetTier malformed)."},DEPENDENCY:{description:"Audit pipeline or governance dispatch temporarily unavailable; outbox will retry.",recoverable:!0,http:503,when:"Audit pipeline or governance dispatch temporarily unavailable; outbox will retry."},IDEMPOTENCY_FAIL:{description:"Replay detected with differing payload; original result preserved.",recoverable:!1,http:409,when:"Replay detected with differing payload; original result preserved."}}},policy:{auth:"user",policies:[{key:"review.escalation.governed",version:"1.0.0"}],escalate:"human_review"},sideEffects:{audit:["review.escalated"]}});

package/dist/node/operations/review/commands/reviewReject.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{docRef as t}from"../../../docs/registry.js";import{defineCommand as r}from"../../operation.js";import{REVIEW_DOMAIN as a,REVIEW_OWNERS as o,REVIEW_STABILITY as n,REVIEW_TAGS as s}from"../constants.js";import{ReviewDecisionOutputFields as c}from"../shared-schemas.js";const l=new i({name:"ReviewRejectInput",fields:{id:{type:e.ID(),isOptional:!1},reason:{type:e.NonEmptyString(),isOptional:!1},comment:{type:e.String_unsecure(),isOptional:!0},idempotencyKey:{type:e.NonEmptyString(),isOptional:!1}}}),d=new i({name:"ReviewRejectOutput",fields:c});export const ReviewRejectDocBlock={id:"docs.tech.review.reject",title:"Reject a review record",summary:"Terminal-reject a review record; emits one audit event with the reviewer-supplied reason.",kind:"reference",visibility:"public",route:"/docs/tech/review/reject",tags:["review","reject","mutation"],body:"# review.reject\n\nTerminally rejects a review record. Terminal at the record level — re-opening\nrequires a fresh review.\n\nPer SEAMS §1.3 (S-11), emits exactly one `audit.event.append` with kind\n`review.rejected` and retention class `regulatory`. Returns\n`auditEventId` so the UI can deep-link to the record.\n\nCapability: `review.act`. Per SEAMS §1.5, missing capability returns\n`FORBIDDEN` — auditor persona sees the button disabled.\n\nIdempotency: `idempotencyKey` is required.\n"},ReviewRejectCommand=r({meta:{key:"review.reject",title:"Reject Review",version:"1.0.0",description:"Reject a review record with a structured reason.",goal:"Provide a single capability-gated path to terminally reject a review with audit emission.",context:"Used by the review-queue cockpit. Terminal — no subject-kind dispatch (no downstream side-effect on reject in v1.0).",domain:a,owners:[...o],tags:[...s,"reject"],stability:n,docId:[t(ReviewRejectDocBlock.id)]},capability:{key:"review.act",version:"1.0.0"},io:{input:l,output:d,errors:{NOT_FOUND:{description:"No review found for the supplied id.",recoverable:!1,http:404,when:"No review found for the supplied id."},CONFLICT:{description:"Review is already in a terminal state.",recoverable:!1,http:409,when:"Review is already in a terminal state."},FORBIDDEN:{description:"Caller lacks review.act capability.",recoverable:!1,http:403,when:"Caller lacks review.act capability."},VALIDATION:{description:"Input failed validation (e.g., reason missing).",recoverable:!1,http:400,when:"Input failed validation (e.g., reason missing)."},DEPENDENCY:{description:"Audit pipeline temporarily unavailable.",recoverable:!0,http:503,when:"Audit pipeline temporarily unavailable."},IDEMPOTENCY_FAIL:{description:"Replay detected with differing payload; original result preserved.",recoverable:!1,http:409,when:"Replay detected with differing payload; original result preserved."}}},policy:{auth:"user",policies:[{key:"review.decision.governed",version:"1.0.0"}]},sideEffects:{audit:["review.rejected"]}});

package/dist/node/operations/review/commands/reviewRequestChanges.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{docRef as i}from"../../../docs/registry.js";import{defineCommand as r}from"../../operation.js";import{REVIEW_DOMAIN as s,REVIEW_OWNERS as a,REVIEW_STABILITY as n,REVIEW_TAGS as o}from"../constants.js";import{ReviewDecisionOutputFields as c}from"../shared-schemas.js";const u=new t({name:"ReviewChangeRequest",fields:{field:{type:e.NonEmptyString(),isOptional:!1},requestedValue:{type:e.String_unsecure(),isOptional:!0},note:{type:e.String_unsecure(),isOptional:!0}}}),p=new t({name:"ReviewRequestChangesInput",fields:{id:{type:e.ID(),isOptional:!1},changeRequests:{type:u,isOptional:!1,isArray:!0},comment:{type:e.String_unsecure(),isOptional:!0},idempotencyKey:{type:e.NonEmptyString(),isOptional:!1}}}),l=new t({name:"ReviewRequestChangesOutput",fields:c});export const ReviewRequestChangesDocBlock={id:"docs.tech.review.request-changes",title:"Request changes on a review",summary:"Push the review back to changes-requested with a structured list of change requests.",kind:"reference",visibility:"public",route:"/docs/tech/review/request-changes",tags:["review","request-changes","mutation"],body:"# review.request-changes\n\nTransitions the review record to `changes-requested` with a structured\nlist of `changeRequests` (field-scoped). Non-terminal: when the upstream\nsubject is updated, the review system fires an internal `review.resubmit`\nevent (not a public op) that returns the review to `pending`.\n\nPer SEAMS §1.3 (S-11), emits exactly one `audit.event.append` with kind\n`review.changes-requested`.\n\nCapability: `review.act`. Idempotency: required.\n"},ReviewRequestChangesCommand=r({meta:{key:"review.request-changes",title:"Request Changes",version:"1.0.0",description:"Transition a review to changes-requested with a structured list of field-scoped change requests.",goal:"Let reviewers send a review back for revision without rejecting it outright.",context:"Used by the review-queue cockpit. Non-terminal transition; resubmit happens via internal subject-update event.",domain:s,owners:[...a],tags:[...o,"request-changes"],stability:n,docId:[i(ReviewRequestChangesDocBlock.id)]},capability:{key:"review.act",version:"1.0.0"},io:{input:p,output:l,errors:{NOT_FOUND:{description:"No review found for the supplied id.",recoverable:!1,http:404,when:"No review found for the supplied id."},CONFLICT:{description:"Review is already in a terminal state.",recoverable:!1,http:409,when:"Review is already in a terminal state."},FORBIDDEN:{description:"Caller lacks review.act capability.",recoverable:!1,http:403,when:"Caller lacks review.act capability."},VALIDATION:{description:"`changeRequests` is empty or any entry is malformed.",recoverable:!1,http:400,when:"`changeRequests` is empty or any entry is malformed."},DEPENDENCY:{description:"Audit pipeline temporarily unavailable.",recoverable:!0,http:503,when:"Audit pipeline temporarily unavailable."},IDEMPOTENCY_FAIL:{description:"Replay detected with differing payload; original result preserved.",recoverable:!1,http:409,when:"Replay detected with differing payload; original result preserved."}}},policy:{auth:"user",policies:[{key:"review.decision.governed",version:"1.0.0"}]},sideEffects:{audit:["review.changes-requested"]}});

package/dist/node/operations/review/constants.js

@@ -0,0 +1 @@
+import{StabilityEnum as o,TagsEnum as t}from"../../ownership.js";export const REVIEW_DOMAIN="review",REVIEW_OWNERS=["@platform.core","@platform.governance"],REVIEW_TAGS=[t.Automation,"review","approval","escalation","agent-workflow-pillar"],REVIEW_STABILITY=o.Experimental;

package/dist/node/operations/review/index.js

@@ -0,0 +1 @@
+export*from"./commands/index.js";export*from"./queries/index.js";

package/dist/node/operations/review/queries/index.js

@@ -0,0 +1 @@
+export*from"./reviewGet.query.js";export*from"./reviewList.query.js";export*from"./reviewQueueHealth.query.js";

package/dist/node/operations/review/queries/reviewGet.query.js

@@ -0,0 +1,9 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{docRef as t}from"../../../docs/registry.js";import{defineQuery as r}from"../../operation.js";import{REVIEW_DOMAIN as a,REVIEW_OWNERS as o,REVIEW_STABILITY as n,REVIEW_TAGS as s}from"../constants.js";import{ReviewDetailFields as l,ReviewSummaryFields as d}from"../shared-schemas.js";const p=new i({name:"ReviewGetInput",fields:{id:{type:e.ID(),isOptional:!1}}}),c=new i({name:"ReviewHistoryEntry",fields:{eventId:{type:e.ID(),isOptional:!1},eventKind:{type:e.NonEmptyString(),isOptional:!1},actorId:{type:e.String_unsecure(),isOptional:!0},occurredAt:{type:e.DateTime(),isOptional:!1},note:{type:e.String_unsecure(),isOptional:!0}}}),v=new i({name:"ReviewEvidenceRef",fields:{evidenceId:{type:e.ID(),isOptional:!1},auditEventId:{type:e.ID(),isOptional:!1},mimeType:{type:e.String_unsecure(),isOptional:!0},summary:{type:e.String_unsecure(),isOptional:!0}}}),u=new i({name:"ReviewDetail",fields:{...d,...l}}),y=new i({name:"ReviewGetOutput",fields:{review:{type:u,isOptional:!1},history:{type:c,isOptional:!1,isArray:!0},evidence:{type:v,isOptional:!1,isArray:!0}}});export const ReviewGetDocBlock={id:"docs.tech.review.get",title:"Get review detail",summary:"Return a full review record with history and attached evidence.",kind:"reference",visibility:"public",route:"/docs/tech/review/get",tags:["review","detail"],body:`# review.get
+
+Returns the full review detail, including decision history and evidence
+references (from the audit append-only log). Read-only.
+
+Capability: \`review.read\`. Per SEAMS §3.4a, this query is the verification
+gate used by \`workflow.step.advance { approvalRef }\` — handlers MUST treat
+the response as authoritative.
+`},ReviewGetQuery=r({meta:{key:"review.get",title:"Get Review",version:"1.0.0",description:"Return a full review record with history and attached evidence references.",goal:"Provide deterministic, capability-gated read of a single review.",context:"Used by the review-detail surface and by workflow.step.advance verification (SEAMS §3.4a).",domain:a,owners:[...o],tags:[...s,"detail"],stability:n,docId:[t(ReviewGetDocBlock.id)]},capability:{key:"review.read",version:"1.0.0"},io:{input:p,output:y,errors:{NOT_FOUND:{description:"No review found for the supplied id.",recoverable:!1,http:404,when:"No review found for the supplied id."},FORBIDDEN:{description:"Caller lacks the review.read capability.",recoverable:!1,http:403,when:"Caller lacks review.read capability."},DEPENDENCY:{description:"Review read-model temporarily unavailable.",recoverable:!0,http:503,when:"Review read-model temporarily unavailable."}}},policy:{auth:"user"}});

package/dist/node/operations/review/queries/reviewList.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{docRef as t}from"../../../docs/registry.js";import{defineQuery as r}from"../../operation.js";import{REVIEW_DOMAIN as s,REVIEW_OWNERS as a,REVIEW_STABILITY as o,REVIEW_TAGS as n}from"../constants.js";import{ReviewSummaryFields as l}from"../shared-schemas.js";const u=new i({name:"ReviewListInput",fields:{statuses:{type:e.NonEmptyString(),isOptional:!0,isArray:!0},priorities:{type:e.NonEmptyString(),isOptional:!0,isArray:!0},assigneeId:{type:e.String_unsecure(),isOptional:!0},subjectKind:{type:e.String_unsecure(),isOptional:!0},subjectId:{type:e.String_unsecure(),isOptional:!0},cursor:{type:e.String_unsecure(),isOptional:!0},limit:{type:e.Int_unsecure(),isOptional:!0},sortBy:{type:e.String_unsecure(),isOptional:!0},sortDirection:{type:e.String_unsecure(),isOptional:!0}}}),p=new i({name:"ReviewListItem",fields:l}),c=new i({name:"ReviewListOutput",fields:{items:{type:p,isOptional:!1,isArray:!0},nextCursor:{type:e.String_unsecure(),isOptional:!0},totalEstimate:{type:e.Int_unsecure(),isOptional:!0}}});export const ReviewListDocBlock={id:"docs.tech.review.list",title:"List reviews in the queue",summary:"Paginated read of review records, filterable by status, priority, assignee, and subject.",kind:"reference",visibility:"public",route:"/docs/tech/review/list",tags:["review","list","queue"],body:"# review.list\n\nLists review records for the caller's tenant scope. Supports filters\n(`statuses`, `priorities`, `assigneeId`, `subjectKind`, `subjectId`)\nand cursor pagination. Auditor persona may invoke read-only.\n\nCapability: `review.read`. Per SEAMS §1.5, missing capability returns\n`FORBIDDEN` — never silent strip.\n"},ReviewListQuery=r({meta:{key:"review.list",title:"List Reviews",version:"1.0.0",description:"List review records with filter + cursor pagination, scoped to the caller tenant.",goal:"Power the review-queue surface with deterministic, capability-gated paging.",context:"Used by the review-queue cockpit, fleet aggregations, and reviewer inbox. Read-only.",domain:s,owners:[...a],tags:[...n,"list"],stability:o,docId:[t(ReviewListDocBlock.id)]},capability:{key:"review.read",version:"1.0.0"},io:{input:u,output:c,errors:{FORBIDDEN:{description:"Caller lacks the review.read capability.",recoverable:!1,http:403,when:"Caller lacks review.read capability."},VALIDATION:{description:"Filter, cursor, or limit failed validation.",recoverable:!1,http:400,when:"Filter, cursor, or limit fails validation."},DEPENDENCY:{description:"Review read-model is warming or temporarily unavailable.",recoverable:!0,http:503,when:"Review read-model warming or unavailable."}}},policy:{auth:"user"}});

package/dist/node/operations/review/queries/reviewQueueHealth.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{docRef as i}from"../../../docs/registry.js";import{defineQuery as a}from"../../operation.js";import{REVIEW_DOMAIN as r,REVIEW_OWNERS as o,REVIEW_STABILITY as l,REVIEW_TAGS as s}from"../constants.js";const n=new t({name:"ReviewQueueHealthInput",fields:{windowFrom:{type:e.DateTime(),isOptional:!0},windowTo:{type:e.DateTime(),isOptional:!0},windowGranularity:{type:e.String_unsecure(),isOptional:!0}}}),p=new t({name:"ReviewQueueHealthOutput",fields:{status:{type:e.NonEmptyString(),isOptional:!1},symptoms:{type:e.NonEmptyString(),isOptional:!1,isArray:!0},backlogDepth:{type:e.Int_unsecure(),isOptional:!1},oldestPendingAgeMs:{type:e.Int_unsecure(),isOptional:!1},escalatedCount:{type:e.Int_unsecure(),isOptional:!1},lastDecidedAt:{type:e.DateTime(),isOptional:!0},checkedAt:{type:e.DateTime(),isOptional:!1}}});export const ReviewQueueHealthDocBlock={id:"docs.tech.review.queue.health",title:"Review queue health probe",summary:"Per-domain health probe consumed by fleet.health.snapshot to surface review-queue saturation, SLA, and pipeline state.",kind:"reference",visibility:"public",route:"/docs/tech/review/queue/health",tags:["review","health","fleet"],body:"# review.queue.health\n\nPer-domain health probe for the review queue, composed by\n`fleet.health.snapshot` (SEAMS §3.10, S-10). Returns a `green` |\n`amber` | `red` status plus a symptoms list; aggregations downgrade to\namber if the probe call itself fails.\n\nThresholds (initial v1.0; tunable via runtime config):\n- `red` when `backlogDepth > 100` OR `oldestPendingAgeMs > 24h` OR\n  `audit-pipeline-degraded` is present.\n- `amber` when `backlogDepth > 25` OR `oldestPendingAgeMs > 4h` OR\n  `escalatedCount > 5`.\n- `green` otherwise.\n\nCapability: `fleet.metrics.read` ∨ `review.read`.\n"},ReviewQueueHealthQuery=a({meta:{key:"review.queue.health",title:"Review Queue Health",version:"1.0.0",description:"Return review-queue health (status, symptoms, backlog depth, oldest pending age, escalated count).",goal:"Expose a per-domain probe that fleet.health.snapshot composes alongside agent / workflow / governance / audit probes.",context:"Per SEAMS §3.10 (S-10), the fleet aggregator calls every domain probe in parallel; this op is the review-domain entry point.",domain:r,owners:[...o],tags:[...s,"health","fleet"],stability:l,docId:[i(ReviewQueueHealthDocBlock.id)]},capability:{key:"fleet.metrics.read",version:"1.0.0"},io:{input:n,output:p,errors:{FORBIDDEN:{description:"Caller lacks fleet.metrics.read (or review.read) capability.",recoverable:!1,http:403,when:"Caller lacks fleet.metrics.read (or review.read) capability."},VALIDATION:{description:"Window descriptor malformed (from/to or granularity).",recoverable:!1,http:400,when:"Window descriptor malformed (from/to or granularity)."},DEPENDENCY:{description:"Audit-pipeline probe call failed; fleet substitutes amber with the health-probe-not-available symptom.",recoverable:!0,http:503,when:"Audit-pipeline probe call failed; substitute amber."}}},policy:{auth:"user"}});

package/dist/node/operations/review/shared-schemas.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";export const ReviewSubjectFields={kind:{type:e.NonEmptyString(),isOptional:!1},refId:{type:e.NonEmptyString(),isOptional:!1},label:{type:e.String_unsecure(),isOptional:!0}},ReviewSummaryFields={id:{type:e.ID(),isOptional:!1},status:{type:e.NonEmptyString(),isOptional:!1},priority:{type:e.NonEmptyString(),isOptional:!1},subjectKind:{type:e.NonEmptyString(),isOptional:!1},subjectId:{type:e.NonEmptyString(),isOptional:!1},subjectLabel:{type:e.String_unsecure(),isOptional:!0},assigneeId:{type:e.String_unsecure(),isOptional:!0},createdAt:{type:e.DateTime(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1},slaDueAt:{type:e.DateTime(),isOptional:!0},version:{type:e.Int_unsecure(),isOptional:!1}},ReviewDecisionOutputFields={id:{type:e.ID(),isOptional:!1},status:{type:e.NonEmptyString(),isOptional:!1},decidedAt:{type:e.DateTime(),isOptional:!1},auditEventId:{type:e.ID(),isOptional:!1},version:{type:e.Int_unsecure(),isOptional:!1}},ReviewDetailFields={body:{type:e.String_unsecure(),isOptional:!0},requesterId:{type:e.String_unsecure(),isOptional:!0},riskTier:{type:e.String_unsecure(),isOptional:!0}},ReviewSummarySchema=new t({name:"ReviewSummary",fields:ReviewSummaryFields});

package/dist/node/operations/workflow/commands/workflowActivate.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{IdempotencyKeyScalar as i}from"../../../shared/index.js";import{defineCommand as a}from"../../operation.js";import{WORKFLOW_CAPABILITY_AUTHOR as o,WORKFLOW_DOMAIN as r,WORKFLOW_OWNERS as n,WORKFLOW_STABILITY as s,WORKFLOW_TAGS as l}from"../constants.js";const p=new t({name:"WorkflowActivateInput",fields:{id:{type:e.ID(),isOptional:!1},version:{type:e.String_unsecure(),isOptional:!1},activationNote:{type:e.String_unsecure(),isOptional:!0},idempotencyKey:{type:i,isOptional:!1}}}),c=new t({name:"WorkflowActivateOutput",fields:{id:{type:e.ID(),isOptional:!1},version:{type:e.String_unsecure(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},activatedAt:{type:e.DateTime(),isOptional:!1},auditEventId:{type:e.ID(),isOptional:!1}}});export const WorkflowActivateCommand=a({meta:{key:"workflow.activate",title:"Activate Workflow",version:"1.0.0",description:"Transition a workflow definition from `draft` to `active`. Composer-validates the graph; rejects on invariant failure.",goal:"Operators publish a workflow so triggers and dispatches become legal.",context:'Per DOMAIN_NOTES §3.1 transition `draft → active`. Requires capability `workflow.author`. May implicitly require `workflow.dispatch` if `triggerKind=auto-on-activate`. Emits one `audit.event.append { eventKind: "workflow.activated" }`.',domain:r,owners:[...n],tags:[...l,"workflow.activate","lifecycle"],stability:s},capability:{...o},io:{input:p,output:c,errors:{NOT_FOUND:{description:"No workflow at the supplied id/version.",http:404,when:"Caller references a never-existed or deleted workflow."},CONFLICT:{description:"Workflow already active at this version.",http:409,when:"Replay-protection: re-activation at same version is a no-op success; different version returns CONFLICT."},FORBIDDEN:{description:"Caller lacks `workflow.author` capability.",http:403,when:"Capability check fails at the runtime boundary."},VALIDATION:{description:"Graph fails composer validator.",http:400,when:"Invariant break (disconnected nodes, cyclic deps, missing required steps)."},DEPENDENCY:{description:"Audit store unavailable.",http:503,when:"Audit emit failure rolls back the activation per §1.4."},IDEMPOTENCY_FAIL:{description:"Replay with same `idempotencyKey` but different payload.",http:409,when:"Caller already succeeded; original payload differs from this replay."}}},policy:{auth:"user",pii:[]}});

package/dist/node/operations/workflow/commands/workflowCreate.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{IdempotencyKeyScalar as i}from"../../../shared/index.js";import{defineCommand as r}from"../../operation.js";import{WORKFLOW_CAPABILITY_AUTHOR as a,WORKFLOW_DOMAIN as o,WORKFLOW_OWNERS as n,WORKFLOW_STABILITY as s,WORKFLOW_TAGS as p}from"../constants.js";const l=new t({name:"WorkflowCreateInput",fields:{name:{type:e.String_unsecure(),isOptional:!1},description:{type:e.String_unsecure(),isOptional:!0},graph:{type:e.JSONObject(),isOptional:!1},triggers:{type:e.JSONObject(),isOptional:!0,isArray:!0},owners:{type:e.String_unsecure(),isOptional:!1,isArray:!0},capabilityRefs:{type:e.JSONObject(),isOptional:!0,isArray:!0},idempotencyKey:{type:i,isOptional:!1}}}),u=new t({name:"WorkflowCreateOutput",fields:{id:{type:e.ID(),isOptional:!1},version:{type:e.String_unsecure(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},auditEventId:{type:e.ID(),isOptional:!1}}});export const WorkflowCreateCommand=r({meta:{key:"workflow.create",title:"Create Workflow",version:"1.0.0",description:"Create a new workflow definition in `draft` status. Bumps to version `0.1.0`. Audit-event emitted per S-11.",goal:"Operators author new workflow templates from the composer surface.",context:'Per DOMAIN_NOTES §3.1, transition `(create) → draft`. CONFLICT on duplicate `(name, owner)`. Idempotent on `idempotencyKey`. Emits one `audit.event.append { eventKind: "workflow.created" }`.',domain:o,owners:[...n],tags:[...p,"workflow.create","authoring"],stability:s},capability:{...a},io:{input:l,output:u,errors:{CONFLICT:{description:"A workflow with this `(name, owner)` pair already exists.",http:409,when:"Caller repeats a previously-used name within the owner scope without `force`."},FORBIDDEN:{description:"Caller lacks `workflow.author` capability.",http:403,when:"Capability check fails at the runtime boundary."},VALIDATION:{description:"Invalid graph shape, missing required fields, or empty owners list.",http:400,when:"Composer validator rejects the graph or required fields fail SchemaModel parsing."},DEPENDENCY:{description:"Audit store unavailable; the outbox could not commit.",http:503,when:"Audit emit failure rolls back the create per §1.4 outbox invariant."},IDEMPOTENCY_FAIL:{description:"Replay with same `idempotencyKey` but different payload.",http:409,when:"Caller already succeeded; original payload differs from this replay."}}},policy:{auth:"user",pii:[]}});

package/dist/node/operations/workflow/commands/workflowDeactivate.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{IdempotencyKeyScalar as i}from"../../../shared/index.js";import{defineCommand as a}from"../../operation.js";import{WORKFLOW_CAPABILITY_AUTHOR as n,WORKFLOW_DOMAIN as o,WORKFLOW_OWNERS as r,WORKFLOW_STABILITY as c,WORKFLOW_TAGS as l}from"../constants.js";const s=new t({name:"WorkflowDeactivateInput",fields:{id:{type:e.ID(),isOptional:!1},version:{type:e.String_unsecure(),isOptional:!1},reason:{type:e.String_unsecure(),isOptional:!0},drainStrategy:{type:e.String_unsecure(),isOptional:!1},idempotencyKey:{type:i,isOptional:!1}}}),p=new t({name:"WorkflowDeactivateOutput",fields:{id:{type:e.ID(),isOptional:!1},version:{type:e.String_unsecure(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},deactivatedAt:{type:e.DateTime(),isOptional:!1},drainedRunIds:{type:e.ID(),isOptional:!1,isArray:!0},auditEventId:{type:e.ID(),isOptional:!1}}});export const WorkflowDeactivateCommand=a({meta:{key:"workflow.deactivate",title:"Deactivate Workflow",version:"1.0.0",description:"Transition a workflow from `active` to `deactivated`. `drainStrategy` decides whether in-flight runs finish (`finish-active`) or are cancelled (`cancel-active`).",goal:"Operators retire a workflow safely without orphaning in-flight runs.",context:'Per DOMAIN_NOTES §3.1 transition `active → deactivated`. `cancel-active` emits `workflow.run.cancel` for each in-flight run (S-03 cascade). Implicitly requires `workflow.cancel` capability when strategy=`cancel-active`. Emits one `audit.event.append { eventKind: "workflow.deactivated" }`.',domain:o,owners:[...r],tags:[...l,"workflow.deactivate","lifecycle"],stability:c},capability:{...n},io:{input:s,output:p,errors:{NOT_FOUND:{description:"No workflow at the supplied id/version.",http:404,when:"Caller references an unknown workflow."},CONFLICT:{description:"Workflow already deactivated.",http:409,when:"Replay-protection: re-deactivation is a no-op success only when idempotencyKey matches."},FORBIDDEN:{description:"Caller lacks `workflow.author` (or `workflow.cancel` when drainStrategy=`cancel-active`).",http:403,when:"Capability check fails at the runtime boundary."},VALIDATION:{description:"Unknown `drainStrategy`.",http:400,when:"`drainStrategy` is not `finish-active|cancel-active`."},DEPENDENCY:{description:"Drain side-effect failure (run.cancel cascade or audit emit).",http:503,when:"Recoverable; retry with same idempotencyKey."},IDEMPOTENCY_FAIL:{description:"Replay with same `idempotencyKey` but different payload.",http:409,when:"Caller already succeeded; original payload differs from this replay."}}},policy:{auth:"user",pii:[]}});

package/dist/node/operations/workflow/commands/workflowRunCancel.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as n}from"@lssm/lib.schema";import{IdempotencyKeyScalar as t}from"../../../shared/index.js";import{defineCommand as a}from"../../operation.js";import{WORKFLOW_CAPABILITY_CANCEL as l,WORKFLOW_DOMAIN as o,WORKFLOW_OWNERS as i,WORKFLOW_STABILITY as r,WORKFLOW_TAGS as c}from"../constants.js";const s=new n({name:"WorkflowRunCancelInput",fields:{runId:{type:e.ID(),isOptional:!1},reason:{type:e.String_unsecure(),isOptional:!1},cancelDownstream:{type:e.Boolean(),isOptional:!0},idempotencyKey:{type:t,isOptional:!1}}}),p=new n({name:"WorkflowRunCancelOutput",fields:{runId:{type:e.ID(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},cancelledAt:{type:e.DateTime(),isOptional:!1},cancelledStepIds:{type:e.ID(),isOptional:!1,isArray:!0},auditEventId:{type:e.ID(),isOptional:!1}}});export const WorkflowRunCancelCommand=a({meta:{key:"workflow.run.cancel",title:"Cancel Workflow Run",version:"1.0.0",description:"Cancel an in-flight workflow run. Cascades `agent.stop` for each open `agentRunId` per S-03 with at-least-once delivery via the outbox.",goal:"Operators stop a run safely, ensuring agent runtime cleanup is propagated.",context:'Per SEAMS §3.3 (S-03): cancelling → cancelled only after all `agent.stop` ack or after the cancel-deadline (default 60s). Unacknowledged stops surface in `cancelledStepIds[]` with per-step error context. Idempotent on `(runId, idempotencyKey)` and per-`agentRunId` keys. Emits one `audit.event.append { eventKind: "workflow.run.cancelled", retentionClass: "regulatory" }` per S-11.',domain:o,owners:[...i],tags:[...c,"workflow.run.cancel","lifecycle","seam:S-03","ceremony"],stability:r},capability:{...l},io:{input:s,output:p,errors:{NOT_FOUND:{description:"No workflow run with the supplied id.",http:404,when:"Caller references a deleted or never-existed run."},CONFLICT:{description:"Run is already terminal.",http:409,when:"Cannot cancel `completed`/`cancelled`/`failed` runs."},FORBIDDEN:{description:"Caller lacks `workflow.cancel` capability.",http:403,when:"Capability check fails."},DEPENDENCY:{description:"Cascading `agent.stop` failure or audit emit failure.",http:503,when:"Recoverable; outbox retries with backoff. Stays in `cancelling` until acks or deadline."},IDEMPOTENCY_FAIL:{description:"Replay with same `idempotencyKey` but different payload.",http:409,when:"Caller already succeeded; original payload differs from this replay."}}},policy:{auth:"user",pii:[],escalate:"human_review"}});

package/dist/node/operations/workflow/commands/workflowRunDispatch.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{IdempotencyKeyScalar as a}from"../../../shared/index.js";import{defineCommand as i}from"../../operation.js";import{WORKFLOW_CAPABILITY_DISPATCH as n,WORKFLOW_DOMAIN as o,WORKFLOW_OWNERS as r,WORKFLOW_STABILITY as s,WORKFLOW_TAGS as p}from"../constants.js";const l=new t({name:"WorkflowRunDispatchInput",fields:{workflowId:{type:e.ID(),isOptional:!1},workflowVersion:{type:e.String_unsecure(),isOptional:!0},parameters:{type:e.JSONObject(),isOptional:!1},triggerRef:{type:e.JSONObject(),isOptional:!0},agentBinding:{type:e.JSONObject(),isOptional:!0},idempotencyKey:{type:a,isOptional:!1}}}),d=new t({name:"WorkflowRunDispatchOutput",fields:{runId:{type:e.ID(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},dispatchedAt:{type:e.DateTime(),isOptional:!1},firstStepId:{type:e.ID(),isOptional:!0},agentRunIds:{type:e.ID(),isOptional:!0,isArray:!0},auditEventId:{type:e.ID(),isOptional:!1}}});export const WorkflowRunDispatchCommand=i({meta:{key:"workflow.run.dispatch",title:"Dispatch Workflow Run",version:"1.0.0",description:"Spawn a new run of an active workflow. Eager-binds agents via S-02: emits `agent.start` for each `agentBinding` at dispatch time through the outbox.",goal:"Operators kick off workflow executions with deterministic agent attachment and audit-grade idempotency.",context:'Per SEAMS §3.2 (S-02 PRIMARY): outbox-backed `agent.start` cascade with idempotency key derived from `(runId, agentId)`. If any bound agent is `PAUSED` at dispatch time, returns `VALIDATION` with pointers to the agents requiring `agent.start`. If `agent.start` fails terminally, the run is rolled forward to `cancelled` (reason=`agent-binding-failed`) via a compensating event — never rolled back behind the commit boundary per §1.4. Emits one `audit.event.append { eventKind: "workflow.run.dispatched" }`. Idempotent on caller-supplied key.',domain:o,owners:[...r],tags:[...p,"workflow.run.dispatch","lifecycle","seam:S-02"],stability:s},capability:{...n},io:{input:l,output:d,errors:{NOT_FOUND:{description:"No active workflow at the supplied id (and version, if given).",http:404,when:"Caller references an unknown or non-active workflow."},CONFLICT:{description:"Replay produced a different payload than the original.",http:409,when:"idempotencyKey replay with mismatched payload."},FORBIDDEN:{description:"Caller lacks `workflow.dispatch` capability.",http:403,when:"Capability check fails at the runtime boundary."},VALIDATION:{description:"Parameters or agentBinding invalid; or a bound agent is `PAUSED`.",http:400,when:"Pre-condition fails — operator must resume PAUSED agents first."},DEPENDENCY:{description:"Agent-fleet `agent.start` unavailable or outbox commit failed.",http:503,when:"Recoverable; outbox retries with backoff. Caller may replay with same idempotencyKey."},IDEMPOTENCY_FAIL:{description:"Replay with same `idempotencyKey` but different payload.",http:409,when:"Caller already succeeded; original payload differs from this replay."}}},policy:{auth:"user",pii:[]}});

package/dist/node/operations/workflow/commands/workflowRunPause.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{IdempotencyKeyScalar as n}from"../../../shared/index.js";import{defineCommand as i}from"../../operation.js";import{WORKFLOW_CAPABILITY_DISPATCH as o,WORKFLOW_DOMAIN as a,WORKFLOW_OWNERS as r,WORKFLOW_STABILITY as s,WORKFLOW_TAGS as p}from"../constants.js";const l=new t({name:"WorkflowRunPauseInput",fields:{runId:{type:e.ID(),isOptional:!1},reason:{type:e.String_unsecure(),isOptional:!0},idempotencyKey:{type:n,isOptional:!1}}}),u=new t({name:"WorkflowRunPauseOutput",fields:{runId:{type:e.ID(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},pausedAt:{type:e.DateTime(),isOptional:!1},suspendedStepIds:{type:e.ID(),isOptional:!1,isArray:!0},auditEventId:{type:e.ID(),isOptional:!1}}});export const WorkflowRunPauseCommand=i({meta:{key:"workflow.run.pause",title:"Pause Workflow Run",version:"1.0.0",description:"Suspend an in-flight workflow run. Step executors are interrupted mid-flight; pause is recoverable via `workflow.run.resume`.",goal:"Operators interject when a run needs review or external coordination without cancelling.",context:'Per DOMAIN_NOTES §3.2 transition `running → paused`. Idempotent on `(runId, idempotencyKey)`. Emits one `audit.event.append { eventKind: "workflow.run.paused" }`.',domain:a,owners:[...r],tags:[...p,"workflow.run.pause","lifecycle"],stability:s},capability:{...o},io:{input:l,output:u,errors:{NOT_FOUND:{description:"No workflow run with the supplied id.",http:404,when:"Caller references a deleted or never-existed run."},CONFLICT:{description:"Run is terminal or already paused.",http:409,when:"Cannot pause `completed`/`cancelled`/`failed`/`paused` runs."},FORBIDDEN:{description:"Caller lacks `workflow.dispatch` capability.",http:403,when:"Capability check fails."},DEPENDENCY:{description:"Audit store unavailable; outbox could not commit.",http:503,when:"Recoverable; replay with same idempotencyKey."},IDEMPOTENCY_FAIL:{description:"Replay with same `idempotencyKey` but different payload.",http:409,when:"Caller already succeeded; original payload differs from this replay."}}},policy:{auth:"user",pii:[]}});

package/dist/node/operations/workflow/commands/workflowRunResume.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{IdempotencyKeyScalar as n}from"../../../shared/index.js";import{defineCommand as o}from"../../operation.js";import{WORKFLOW_CAPABILITY_DISPATCH as r,WORKFLOW_DOMAIN as i,WORKFLOW_OWNERS as s,WORKFLOW_STABILITY as a,WORKFLOW_TAGS as p}from"../constants.js";const u=new t({name:"WorkflowRunResumeInput",fields:{runId:{type:e.ID(),isOptional:!1},resumeNote:{type:e.String_unsecure(),isOptional:!0},idempotencyKey:{type:n,isOptional:!1}}}),l=new t({name:"WorkflowRunResumeOutput",fields:{runId:{type:e.ID(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},resumedAt:{type:e.DateTime(),isOptional:!1},resumedStepIds:{type:e.ID(),isOptional:!1,isArray:!0},auditEventId:{type:e.ID(),isOptional:!1}}});export const WorkflowRunResumeCommand=o({meta:{key:"workflow.run.resume",title:"Resume Workflow Run",version:"1.0.0",description:"Resume a paused workflow run. Re-issues step executor leases for previously-suspended steps.",goal:"Operators return a paused run to execution after review or external coordination.",context:'Per DOMAIN_NOTES §3.2 transition `paused → running`. Idempotent on `(runId, idempotencyKey)`. Emits one `audit.event.append { eventKind: "workflow.run.resumed" }`.',domain:i,owners:[...s],tags:[...p,"workflow.run.resume","lifecycle"],stability:a},capability:{...r},io:{input:u,output:l,errors:{NOT_FOUND:{description:"No workflow run with the supplied id.",http:404,when:"Caller references a deleted or never-existed run."},CONFLICT:{description:"Run is not in `paused` state.",http:409,when:"Cannot resume non-paused runs."},FORBIDDEN:{description:"Caller lacks `workflow.dispatch` capability.",http:403,when:"Capability check fails."},DEPENDENCY:{description:"Step executor lease store unavailable.",http:503,when:"Recoverable; replay with same idempotencyKey."},IDEMPOTENCY_FAIL:{description:"Replay with same `idempotencyKey` but different payload.",http:409,when:"Caller already succeeded; original payload differs from this replay."}}},policy:{auth:"user",pii:[]}});

package/dist/node/operations/workflow/commands/workflowRunRetry.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{IdempotencyKeyScalar as r}from"../../../shared/index.js";import{defineCommand as i}from"../../operation.js";import{WORKFLOW_CAPABILITY_DISPATCH as n,WORKFLOW_DOMAIN as o,WORKFLOW_OWNERS as a,WORKFLOW_STABILITY as l,WORKFLOW_TAGS as p}from"../constants.js";const s=new t({name:"WorkflowRunRetryInput",fields:{runId:{type:e.ID(),isOptional:!1},fromStepId:{type:e.ID(),isOptional:!0},mode:{type:e.String_unsecure(),isOptional:!1},idempotencyKey:{type:r,isOptional:!1}}}),d=new t({name:"WorkflowRunRetryOutput",fields:{retryRunId:{type:e.ID(),isOptional:!1},originalRunId:{type:e.ID(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},retryAttempt:{type:e.Int_unsecure(),isOptional:!1},auditEventId:{type:e.ID(),isOptional:!1}}});export const WorkflowRunRetryCommand=i({meta:{key:"workflow.run.retry",title:"Retry Workflow Run",version:"1.0.0",description:"Spawn a NEW retry run linked to the original via `originalRunId`. `mode=failed-only` retries only failed steps; `mode=from-step` restarts from `fromStepId`.",goal:"Operators recover from transient failures without manually re-dispatching with curated parameters.",context:'Per DOMAIN_NOTES §3.2 transition `failed → retrying → queued`. Each retry produces a fresh `retryRunId`. Idempotent within a single attempt window via `idempotencyKey`; non-idempotent across attempts at the `originalRunId` level. Emits one `audit.event.append { eventKind: "workflow.run.retried" }`.',domain:o,owners:[...a],tags:[...p,"workflow.run.retry","lifecycle"],stability:l},capability:{...n},io:{input:s,output:d,errors:{NOT_FOUND:{description:"No workflow run with the supplied id.",http:404,when:"Caller references a deleted or never-existed run."},CONFLICT:{description:"Run is not in a retryable terminal state.",http:409,when:"Only `failed` and (per policy) `cancelled` runs may be retried."},FORBIDDEN:{description:"Caller lacks `workflow.dispatch` capability.",http:403,when:"Capability check fails."},VALIDATION:{description:"Unknown `mode`, or `mode=from-step` without `fromStepId`.",http:400,when:"`mode` is not `failed-only|from-step`, or `fromStepId` is missing/invalid."},DEPENDENCY:{description:"Dispatch pipeline unavailable.",http:503,when:"Recoverable; replay with same idempotencyKey."},IDEMPOTENCY_FAIL:{description:"Replay with same `idempotencyKey` but different payload.",http:409,when:"Caller already succeeded; original payload differs from this replay."}}},policy:{auth:"user",pii:[]}});

package/dist/node/operations/workflow/commands/workflowStepAdvance.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{IdempotencyKeyScalar as a}from"../../../shared/index.js";import{defineCommand as i}from"../../operation.js";import{WORKFLOW_CAPABILITY_DISPATCH as n,WORKFLOW_DOMAIN as r,WORKFLOW_OWNERS as o,WORKFLOW_STABILITY as p,WORKFLOW_TAGS as s}from"../constants.js";const l=new t({name:"WorkflowStepAdvanceInput",fields:{runId:{type:e.ID(),isOptional:!1},stepId:{type:e.ID(),isOptional:!1},payload:{type:e.JSONObject(),isOptional:!0},approvalRef:{type:e.ID(),isOptional:!0},idempotencyKey:{type:a,isOptional:!1}}}),d=new t({name:"WorkflowStepAdvanceOutput",fields:{runId:{type:e.ID(),isOptional:!1},stepId:{type:e.ID(),isOptional:!1},prevStatus:{type:e.String_unsecure(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},nextStepIds:{type:e.ID(),isOptional:!1,isArray:!0},auditEventId:{type:e.ID(),isOptional:!1}}});export const WorkflowStepAdvanceCommand=i({meta:{key:"workflow.step.advance",title:"Advance Workflow Step",version:"1.0.0",description:"Operator-initiated step transition. Externally-reachable transitions listed in DOMAIN_NOTES §Exposed transitions: `ready→running`, `awaiting-approval→running` (with `approvalRef`), `awaiting-input→running` (with `payload`), `running→completed`.",goal:"Operators progress steps through explicit gates (input, approval, force-complete) with audit-grade traceability.",context:'Per SEAMS §3.4 (S-04a): when `approvalRef` is supplied for `awaiting-approval → running`, the handler verifies the referenced review is `approved`, signed by an actor with `review.act` capability, references this exact `stepId`, and is not stale (≤ `run.lifecyclePolicy.approvalFreshnessWindow`). Any verification failure → `CONFLICT`. Reducer-driven step transitions stay internal-only; only the four state-pairs above are exposed via this op. Idempotent on `(runId, stepId, idempotencyKey)`. Emits one `audit.event.append { eventKind: "workflow.step.advanced[.*]" }`.',domain:r,owners:[...o],tags:[...s,"workflow.step.advance","step","exposed-transition","seam:S-04"],stability:p},capability:{...n},io:{input:l,output:d,errors:{NOT_FOUND:{description:"No workflow run or step with the supplied ids.",http:404,when:"Caller references a deleted or never-existed run/step."},CONFLICT:{description:"Current step `state-from` is not in the §Exposed transitions table for the requested transition, or `approvalRef` verification failed.",http:409,when:"Step transitioned underneath the caller, or referenced review is not approved / wrong subject / stale."},FORBIDDEN:{description:"Caller lacks `workflow.dispatch` capability.",http:403,when:"Capability check fails."},VALIDATION:{description:"Bad `payload` shape for `awaiting-input → running`, or invalid `approvalRef` ID.",http:400,when:"Payload fails the step's input contract or approvalRef is malformed."},DEPENDENCY:{description:"Review lookup failed (S-04a) or audit emit failed.",http:503,when:"Recoverable; replay with same idempotencyKey."},IDEMPOTENCY_FAIL:{description:"Replay with same `idempotencyKey` but different payload.",http:409,when:"Caller already succeeded; original payload differs from this replay."}}},policy:{auth:"user",pii:[]}});

package/dist/node/operations/workflow/commands/workflowStepSkip.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{IdempotencyKeyScalar as i}from"../../../shared/index.js";import{defineCommand as p}from"../../operation.js";import{WORKFLOW_CAPABILITY_DISPATCH as a,WORKFLOW_DOMAIN as s,WORKFLOW_OWNERS as r,WORKFLOW_STABILITY as o,WORKFLOW_TAGS as n}from"../constants.js";const l=new t({name:"WorkflowStepSkipInput",fields:{runId:{type:e.ID(),isOptional:!1},stepId:{type:e.ID(),isOptional:!1},reason:{type:e.String_unsecure(),isOptional:!1},allowDownstream:{type:e.Boolean(),isOptional:!1},idempotencyKey:{type:i,isOptional:!1}}}),d=new t({name:"WorkflowStepSkipOutput",fields:{runId:{type:e.ID(),isOptional:!1},stepId:{type:e.ID(),isOptional:!1},prevStatus:{type:e.String_unsecure(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},impactedStepIds:{type:e.ID(),isOptional:!1,isArray:!0},auditEventId:{type:e.ID(),isOptional:!1}}});export const WorkflowStepSkipCommand=p({meta:{key:"workflow.step.skip",title:"Skip Workflow Step",version:"1.0.0",description:"Operator-initiated step skip. Externally-reachable transitions per DOMAIN_NOTES §Exposed transitions: `ready→skipped`, `blocked→skipped`, `awaiting-approval→skipped`, `awaiting-input→skipped`. Downstream steps marked `blocked` unless `allowDownstream=true`.",goal:"Operators bypass a step when it is no longer required, with explicit downstream handling.",context:'Per SEAMS §3.5 (S-05): when skipping from `awaiting-approval`, the handler emits `review.withdraw { id, reason: "workflow-step-skipped" }` (internal-only callee per `policy.auth: "internal"`). If `review.withdraw` fails, the step still transitions to `skipped`; the review record stays open and surfaces a reconciliation banner (v1.0 prioritises step-skip availability over review consistency). Idempotent on `(runId, stepId, idempotencyKey)`. Emits one `audit.event.append { eventKind: "workflow.step.skipped[.*]" }`.',domain:s,owners:[...r],tags:[...n,"workflow.step.skip","step","exposed-transition","seam:S-05"],stability:o},capability:{...a},io:{input:l,output:d,errors:{NOT_FOUND:{description:"No workflow run or step with the supplied ids.",http:404,when:"Caller references a deleted or never-existed run/step."},CONFLICT:{description:"Step is already terminal.",http:409,when:"Cannot skip `completed|skipped|failed` steps."},FORBIDDEN:{description:"Caller lacks `workflow.dispatch` capability.",http:403,when:"Capability check fails."},VALIDATION:{description:"Empty `reason`.",http:400,when:"Skip is regulated — every skip MUST carry a non-empty reason for the audit trail."},DEPENDENCY:{description:"Cascading `review.withdraw` failure when skipping from `awaiting-approval`.",http:503,when:"Step transitions to `skipped` regardless; review record is surfaced for reconciliation. Recoverable; replay safe."},IDEMPOTENCY_FAIL:{description:"Replay with same `idempotencyKey` but different payload.",http:409,when:"Caller already succeeded; original payload differs from this replay."}}},policy:{auth:"user",pii:[]}});

package/dist/node/operations/workflow/commands/workflowUpdate.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{IdempotencyKeyScalar as o}from"../../../shared/index.js";import{defineCommand as i}from"../../operation.js";import{WORKFLOW_CAPABILITY_AUTHOR as a,WORKFLOW_DOMAIN as r,WORKFLOW_OWNERS as n,WORKFLOW_STABILITY as p,WORKFLOW_TAGS as s}from"../constants.js";const l=new t({name:"WorkflowUpdateInput",fields:{id:{type:e.ID(),isOptional:!1},expectedVersion:{type:e.String_unsecure(),isOptional:!1},patch:{type:e.JSONObject(),isOptional:!1},bumpKind:{type:e.String_unsecure(),isOptional:!1},idempotencyKey:{type:o,isOptional:!1}}}),d=new t({name:"WorkflowUpdateOutput",fields:{id:{type:e.ID(),isOptional:!1},version:{type:e.String_unsecure(),isOptional:!1},status:{type:e.String_unsecure(),isOptional:!1},updatedAt:{type:e.DateTime(),isOptional:!1},auditEventId:{type:e.ID(),isOptional:!1}}});export const WorkflowUpdateCommand=i({meta:{key:"workflow.update",title:"Update Workflow",version:"1.0.0",description:"Update a workflow definition with optimistic-concurrency via `expectedVersion`. Bumps version per `bumpKind` (`patch`|`minor`|`major`). Major bump requires re-activate.",goal:"Operators evolve workflow graphs and templates without breaking in-flight runs of prior versions.",context:'Per DOMAIN_NOTES §3.1: from any state, produces a new `draft` version. Optimistic concurrency: `expectedVersion` must match. `WorkflowGraphPatch` invariants validated by composer. Emits one `audit.event.append { eventKind: "workflow.updated" }`.',domain:r,owners:[...n],tags:[...s,"workflow.update","authoring"],stability:p},capability:{...a},io:{input:l,output:d,errors:{NOT_FOUND:{description:"No workflow with the supplied id.",http:404,when:"Caller references a deleted or never-existed workflow."},CONFLICT:{description:"`expectedVersion` does not match the current version.",http:409,when:"Concurrent edit. Caller should fetch latest and retry."},FORBIDDEN:{description:"Caller lacks `workflow.author` capability.",http:403,when:"Capability check fails at the runtime boundary."},VALIDATION:{description:"Invalid patch or unknown `bumpKind`.",http:400,when:"`WorkflowGraphPatch` fails composer validator or `bumpKind` is not `patch|minor|major`."},DEPENDENCY:{description:"Audit store unavailable; the outbox could not commit.",http:503,when:"Audit emit failure rolls back the update per §1.4."},IDEMPOTENCY_FAIL:{description:"Replay with same `idempotencyKey` but different payload.",http:409,when:"Caller already succeeded; original payload differs from this replay."}}},policy:{auth:"user",pii:[]}});

package/dist/node/operations/workflow/constants.js

@@ -0,0 +1 @@
+import{StabilityEnum as o}from"../../ownership.js";export const WORKFLOW_DOMAIN="workflow-orchestration",WORKFLOW_OWNERS=["@platform.core","@platform.orchestration"],WORKFLOW_TAGS=["workflow","orchestration","agent-workflow-pillar"],WORKFLOW_STABILITY=o.Experimental,WORKFLOW_CAPABILITY_READ={key:"workflow.read",version:"1.0.0"},WORKFLOW_CAPABILITY_AUTHOR={key:"workflow.author",version:"1.0.0"},WORKFLOW_CAPABILITY_DISPATCH={key:"workflow.dispatch",version:"1.0.0"},WORKFLOW_CAPABILITY_CANCEL={key:"workflow.cancel",version:"1.0.0"};

package/dist/node/operations/workflow/index.d.js

@@ -0,0 +1 @@
+export*from"./commands/workflowActivate.command.js";export*from"./commands/workflowCreate.command.js";export*from"./commands/workflowDeactivate.command.js";export*from"./commands/workflowRunCancel.command.js";export*from"./commands/workflowRunDispatch.command.js";export*from"./commands/workflowRunPause.command.js";export*from"./commands/workflowRunResume.command.js";export*from"./commands/workflowRunRetry.command.js";export*from"./commands/workflowStepAdvance.command.js";export*from"./commands/workflowStepSkip.command.js";export*from"./commands/workflowUpdate.command.js";export*from"./constants.js";export*from"./queries/workflowGet.query.js";export*from"./queries/workflowList.query.js";export*from"./queries/workflowRunnerHealth.query.js";

package/dist/node/operations/workflow/index.js

@@ -0,0 +1 @@
+export*from"./commands/workflowActivate.command.js";export*from"./commands/workflowCreate.command.js";export*from"./commands/workflowDeactivate.command.js";export*from"./commands/workflowRunCancel.command.js";export*from"./commands/workflowRunDispatch.command.js";export*from"./commands/workflowRunPause.command.js";export*from"./commands/workflowRunResume.command.js";export*from"./commands/workflowRunRetry.command.js";export*from"./commands/workflowStepAdvance.command.js";export*from"./commands/workflowStepSkip.command.js";export*from"./commands/workflowUpdate.command.js";export*from"./constants.js";export*from"./queries/workflowGet.query.js";export*from"./queries/workflowList.query.js";export*from"./queries/workflowRunnerHealth.query.js";

package/dist/node/operations/workflow/queries/workflowGet.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as o}from"../../operation.js";import{WORKFLOW_CAPABILITY_READ as r,WORKFLOW_DOMAIN as i,WORKFLOW_OWNERS as a,WORKFLOW_STABILITY as n,WORKFLOW_TAGS as l}from"../constants.js";const s=new t({name:"WorkflowGetInput",fields:{id:{type:e.ID(),isOptional:!1},version:{type:e.String_unsecure(),isOptional:!0},includeRunsSummary:{type:e.Boolean(),isOptional:!0}}}),p=new t({name:"WorkflowGetOutput",fields:{workflow:{type:e.JSONObject(),isOptional:!1},runs:{type:e.JSONObject(),isOptional:!0,isArray:!0},graph:{type:e.JSONObject(),isOptional:!1}}});export const WorkflowGetQuery=o({meta:{key:"workflow.get",title:"Get Workflow",version:"1.0.0",description:"Fetch a workflow definition by id (and optional version), with optional runs-summary attached.",goal:"Detail view for a single workflow template — graph, lifecycle policy, optional run summaries.",context:"Read-only fetch of `WorkflowDetail` (template + graph) keyed by id. If `version` omitted, returns the currently `active` version (or the latest `draft` if none active). `includeRunsSummary=true` joins the read-model with recent run summaries.",domain:i,owners:[...a],tags:[...l,"workflow.get","query","detail"],stability:n},capability:{...r},io:{input:s,output:p,errors:{NOT_FOUND:{description:"No workflow found for the supplied id (and version, if given).",http:404,when:"Caller references a deleted, archived, or never-existed workflow."},FORBIDDEN:{description:"Caller lacks `workflow.read` capability for this tenant scope.",http:403,when:"Capability or row-level access denies the read."},VALIDATION:{description:"Malformed id or version shape.",http:400,when:"Caller supplies a non-UUID id or a non-semver `version`."},DEPENDENCY:{description:"Read-model store unavailable.",http:503,when:"Read-model probe fails; retry with backoff."}}},policy:{auth:"user",pii:[]}});

package/dist/node/operations/workflow/queries/workflowList.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as e}from"@lssm/lib.schema";import{defineQuery as r}from"../../operation.js";import{WORKFLOW_CAPABILITY_READ as i,WORKFLOW_DOMAIN as o,WORKFLOW_OWNERS as a,WORKFLOW_STABILITY as s,WORKFLOW_TAGS as n}from"../constants.js";const l=new e({name:"WorkflowListInput",fields:{statusFilter:{type:t.String_unsecure(),isOptional:!0,isArray:!0},ownerFilter:{type:t.String_unsecure(),isOptional:!0},tagFilter:{type:t.String_unsecure(),isOptional:!0},triggerKindFilter:{type:t.String_unsecure(),isOptional:!0},cursor:{type:t.String_unsecure(),isOptional:!0},limit:{type:t.Int_unsecure(),isOptional:!0}}}),u=new e({name:"WorkflowListOutput",fields:{items:{type:t.JSONObject(),isOptional:!1,isArray:!0},nextCursor:{type:t.String_unsecure(),isOptional:!0},totalEstimate:{type:t.Int_unsecure(),isOptional:!0}}});export const WorkflowListQuery=r({meta:{key:"workflow.list",title:"List Workflows",version:"1.0.0",description:"List workflow definitions (templates) with filters by status, owner, tag, and trigger kind.",goal:"Operators discover authored workflows and surface board/dashboard read-models.",context:"Read-only listing of `Workflow` template records; backed by the workflow-orchestration read-model. Cursored pagination. Each row is a `WorkflowSummary` (id/name/version/status/owners/updatedAt/activeRunCount).",domain:o,owners:[...a],tags:[...n,"workflow.list","query","read-model"],stability:s},capability:{...i},io:{input:l,output:u,errors:{FORBIDDEN:{description:"Caller lacks `workflow.read` capability.",http:403,when:"Capability check fails at the runtime boundary."},VALIDATION:{description:"Invalid filter or pagination shape.",http:400,when:"Caller supplies malformed `cursor` / `limit` / array filters."},DEPENDENCY:{description:"Read-model store unavailable or warming.",http:503,when:"Read-model probe fails; retry with backoff."}}},policy:{auth:"user",pii:[]}});

package/dist/node/operations/workflow/queries/workflowRunnerHealth.query.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineQuery as r}from"../../operation.js";import{WORKFLOW_CAPABILITY_READ as n,WORKFLOW_DOMAIN as o,WORKFLOW_OWNERS as a,WORKFLOW_STABILITY as s,WORKFLOW_TAGS as l}from"../constants.js";const i=new t({name:"WorkflowRunnerHealthInput",fields:{}}),u=new t({name:"WorkflowRunnerHealthOutput",fields:{state:{type:e.String_unsecure(),isOptional:!1},symptoms:{type:e.String_unsecure(),isOptional:!0,isArray:!0},lastTickAt:{type:e.DateTime(),isOptional:!1},queueDepth:{type:e.Int_unsecure(),isOptional:!1},oldestQueuedAgeMs:{type:e.Int_unsecure(),isOptional:!0}}});export const WorkflowRunnerHealthQuery=r({meta:{key:"workflow.runner.health",title:"Workflow Runner Health",version:"1.0.0",description:"Read-only health probe for the workflow runner. Returns `state` (`green` | `amber` | `red`), symptoms list, last-tick timestamp, queue depth, and oldest-queued age.",goal:"Surface workflow-engine liveness so the operating cockpit (fleet.health.snapshot) can render an aggregate fleet status without synthesizing probes.",context:"Composed by `fleet.health.snapshot` per SEAMS §3.10 (S-10). Owned by the workflow domain — each source domain owns its own probe; fleet never synthesizes. Cache TTL 30s (per S-10).",domain:o,owners:[...a],tags:[...l,"workflow.runner.health","query","health-probe","fleet"],stability:s},capability:{...n},io:{input:i,output:u,errors:{FORBIDDEN:{description:"Caller lacks `workflow.read` capability.",http:403,when:"Capability check fails at the runtime boundary."},DEPENDENCY:{description:"Underlying runner store unreachable.",http:503,when:"Fleet caller MUST treat as amber per S-10."}}},policy:{auth:"user",pii:[]}});

package/dist/node/osint/capability-matrix-validation.js

@@ -0,0 +1,2 @@
+export function validateOsintCapabilityMatrix(t){const e=[],o=new Set;for(const i of t.domains){if(o.has(i.id))e.push(`duplicate domain ${i.id}`);o.add(i.id)}const n=new Set;for(const i of t.capabilities){if(n.has(i.id))e.push(`duplicate capability ${i.id}`);n.add(i.id);if(!o.has(i.domainId))e.push(`${i.id} references unknown domain ${i.domainId}`);if(i.sourcePaths.length===0)e.push(`${i.id} has no implementation source`);if(i.stage==="qualified"&&i.qualification!=="live_qualified")e.push(`${i.id} is qualified without live qualification`);if(i.qualification==="live_qualified"){if(i.blockers.some((s)=>s.status==="open"))e.push(`${i.id} is live-qualified with an open blocker`);if(!i.evidence.some((s)=>s.state==="verified"&&s.mode==="production_receipt"))e.push(`${i.id} lacks verified production evidence`)}if(i.criticality==="release_gate"&&i.qualification!=="live_qualified"&&i.nextActions.length===0)e.push(`${i.id} has no next action`)}const a=new Set;for(const i of t.providers){if(a.has(i.provider))e.push(`duplicate provider ${i.provider}`);a.add(i.provider);const s=new Set;for(const r of i.surfaces){if(s.has(r.surface))e.push(`duplicate surface ${i.provider}.${r.surface}`);s.add(r.surface);if(r.vendorSupport==="unsupported"&&(r.deterministicQualification!=="unsupported"||r.liveQualification!=="unsupported"||!r.reason))e.push(`${i.provider}.${r.surface} must remain unsupported`);if(r.vendorSupport!=="unsupported"&&r.deterministicQualification!=="deterministic_qualified")e.push(`${i.provider}.${r.surface} lacks deterministic qualification`);if(r.vendorSupport!=="unsupported"&&r.evidenceRefs.length===0)e.push(`${i.provider}.${r.surface} lacks evidence`);if(r.liveQualification==="blocked"&&r.blockerRefs.length===0)e.push(`${i.provider}.${r.surface} lacks blocker evidence`);if(r.liveQualification==="live_qualified"&&r.blockerRefs.length>0)e.push(`${i.provider}.${r.surface} has live blockers`)}if(s.size!==12)e.push(`${i.provider} must declare all 12 surfaces`)}const d=["direct-fetch","bright-data","massive","browserbase","serper","linkup","tavily","reworkd","firecrawl","apify","oxylabs"];if(a.size!==d.length||d.some((i)=>!a.has(i)))e.push("matrix must cover the exact eleven OSINT providers");return e}export function assertOsintCapabilityMatrix(t){const e=validateOsintCapabilityMatrix(t);if(e.length>0)throw Error(e.join(`
+`))}

package/dist/node/osint/capability-matrix.js

@@ -0,0 +1,3 @@
+export const OSINT_CAPABILITY_MATRIX_KEY="osint-v0.capability-matrix",OSINT_CAPABILITY_MATRIX_VERSION="1.0.0";export function defineOsintCapabilityMatrix(e){return e}export const OsintCapabilityMatrixDocBlock={id:"osint-v0-capability-matrix",title:"OSINT v0 capability and qualification matrix",summary:"Typed delivery truth for OSINT systems, provider surfaces, evidence, blockers, and production qualification.",kind:"reference",visibility:"public",route:"/docs/platform/osint-v0-capability-matrix",tags:["osint","delivery","qualification","providers"],body:`# OSINT v0 capability matrix
+
+The matrix separates implemented behavior, deterministic qualification, live qualification, explicit unsupported vendor surfaces, and external production blockers. Unsupported methods are never simulated, and source or test definitions never count as live receipts.`};

package/dist/node/osint/constants.js

@@ -0,0 +1 @@
+import{StabilityEnum as r}from"../ownership.js";export const OSINT_DOMAIN="osint",OSINT_API_VERSION="v0",OSINT_BASE_PATH="/api/osint/v0",OSINT_OWNERS=["team-intelligence-platform"],OSINT_TAGS=["osint","evidence-first","bitemporal"],OSINT_STABILITY=r.Experimental,OSINT_CAPABILITY={key:"osint.core",version:"1.0.0"},OSINT_SOURCE_STATES=["discovered","qualified","active","revalidating","degraded","quarantined","retired"];const i={discovered:["qualified","quarantined","retired"],qualified:["active","quarantined","retired"],active:["revalidating","degraded","quarantined","retired"],revalidating:["active","degraded","quarantined","retired"],degraded:["revalidating","active","quarantined","retired"],quarantined:["revalidating","retired"],retired:[]};export function isOsintSourceTransitionAllowed(e,t){return i[e].includes(t)}export const OSINT_ENTITY_KINDS=["company","job","person"],OSINT_GRANTS=["base_read","base_propose","base_curate","overlay_read","overlay_write","restricted_field","export","admin"];

package/dist/node/osint/events.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as i}from"@lssm/lib.schema";import{defineEvent as r}from"../events.js";import{OSINT_CAPABILITY as a,OSINT_OWNERS as d,OSINT_STABILITY as c,OSINT_TAGS as p}from"./constants.js";const l=new i({name:"OsintEventPayloadV0",fields:{ecosystemId:{type:t.ID(),isOptional:!1},tenantId:{type:t.ID(),isOptional:!1},datasetId:{type:t.ID(),isOptional:!1},deploymentId:{type:t.ID(),isOptional:!1},resourceId:{type:t.ID(),isOptional:!1},evidenceRef:{type:t.ID(),isOptional:!0},change:{type:t.JSONObject(),isOptional:!0},occurredAt:{type:t.DateTime(),isOptional:!1}}}),e=(o,n,s)=>r({meta:{key:o,title:n,version:"1.0.0",description:s,stability:c,owners:[...d],tags:[...p]},capability:{...a},pii:[],payload:l});export const OsintSourceDiscoveredEvent=e("osint.source.discovered","OSINT source discovered","A source candidate was discovered but has not yet been qualified."),OsintSourceDriftedEvent=e("osint.source.drifted","OSINT source drifted","A source exceeded its configured structural or capability drift threshold."),OsintEntityDiscoveredEvent=e("osint.entity.discovered","OSINT entity discovered","A new evidence-backed company, job, or person candidate was persisted."),OsintEntityChangedEvent=e("osint.entity.changed","OSINT entity changed","A temporal assertion changed with evidence and conflict metadata."),OsintJobOpenedEvent=e("osint.job.opened","OSINT job opened","A job became open according to evidence from a qualified source."),OsintJobClosedEvent=e("osint.job.closed","OSINT job closed","A job closed or disappeared after policy-compliant revalidation."),OsintPersonRoleChangedEvent=e("osint.person.role_changed","OSINT person role changed","A public professional role assertion changed with fresh evidence."),OsintFreshnessExpiredEvent=e("osint.freshness.expired","OSINT freshness expired","An assertion or source became stale under its refresh policy."),OsintProposalReviewRequiredEvent=e("osint.proposal.review_required","OSINT proposal review required","A correction, identity resolution, or policy decision requires curation."),osintEvents=[OsintSourceDiscoveredEvent,OsintSourceDriftedEvent,OsintEntityDiscoveredEvent,OsintEntityChangedEvent,OsintJobOpenedEvent,OsintJobClosedEvent,OsintPersonRoleChangedEvent,OsintFreshnessExpiredEvent,OsintProposalReviewRequiredEvent];

package/dist/node/osint/fingerprint.js

@@ -0,0 +1 @@
+export function canonicalizeOsintFingerprintV0(i){return JSON.stringify({chunker:i.chunker,chunkerRevision:i.chunkerRevision,dimensions:i.dimensions,distance:i.distance,model:i.model,modelRevision:i.modelRevision,normalizerRevision:i.normalizerRevision,policyRevision:i.policyRevision})}export function assertOsintEmbeddingDimensionsV0(i,n){if(n.length!==i)throw Error(`OSINT_EMBEDDING_DIMENSION_MISMATCH: expected ${i}, received ${n.length}`)}

package/dist/node/osint/index.js

@@ -0,0 +1 @@
+export*from"./capability-matrix.js";export*from"./capability-matrix-validation.js";export*from"./constants.js";export*from"./entities.js";export*from"./events.js";export*from"./exports.js";export*from"./fingerprint.js";export*from"./job-reconciliation-contracts.js";export*from"./job-sources.js";export*from"./lifecycle-contracts.js";export*from"./lifecycle-worker-contracts.js";export*from"./operational-contracts.js";export*from"./operational-operations.js";export*from"./operations.js";export*from"./operations-continuation.js";export*from"./programs.js";export*from"./registry.js";export*from"./rights-contracts.js";export*from"./rights-operations.js";export*from"./source-state-operations.js";export*from"./transport.js";export*from"./types.js";

package/dist/node/osint/job-reconciliation-contracts.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as i}from"@lssm/lib.schema";import{osintOperationalMutationFenceFields as e,osintOperationalReceiptFenceFields as a,osintOperationalScopeFields as n}from"./operational-schema-fields.js";export const OsintJobRevalidationResultContractV1=new i({name:"OsintJobRevalidationResultV1",fields:{id:{type:t.ID(),isOptional:!1},installationId:{type:t.ID(),isOptional:!1},externalListingId:{type:t.NonEmptyString(),isOptional:!1},availability:{type:t.NonEmptyString(),isOptional:!1},drift:{type:t.NonEmptyString(),isOptional:!1},parserFingerprint:{type:t.NonEmptyString(),isOptional:!1},closureEvidenceRefs:{type:t.NonEmptyString(),isOptional:!1,isArray:!0},evidenceRefs:{type:t.NonEmptyString(),isOptional:!1,isArray:!0},checkedAt:{type:t.DateTime(),isOptional:!1},nextCheckAt:{type:t.DateTime(),isOptional:!1}}}),OsintJobListingRevalidationInputContractV1=new i({name:"OsintJobListingRevalidationInputV1",fields:{...n,installationId:{type:t.ID(),isOptional:!1},externalListingId:{type:t.NonEmptyString(),isOptional:!1},observationId:{type:t.ID(),isOptional:!1},revalidationResult:{type:OsintJobRevalidationResultContractV1,isOptional:!1},...e}}),OsintJobListingClosureReconciliationInputContractV1=new i({name:"OsintJobListingClosureReconciliationInputV1",fields:{...n,installationId:{type:t.ID(),isOptional:!1},externalListingId:{type:t.NonEmptyString(),isOptional:!1},candidateRevalidationReceiptRef:{type:t.NonEmptyString(),isOptional:!1},candidateAvailability:{type:t.NonEmptyString(),isOptional:!1},consecutiveSuccessfulAbsences:{type:t.Int_unsecure(),isOptional:!1},successfulScanReceiptRefs:{type:t.NonEmptyString(),isOptional:!1,isArray:!0},detailRecheckReceiptRef:{type:t.NonEmptyString(),isOptional:!0},closureEvidenceRefs:{type:t.NonEmptyString(),isOptional:!1,isArray:!0},...e}}),OsintJobListingReconciliationReceiptContractV1=new i({name:"OsintJobListingReconciliationReceiptV1",fields:{installationId:{type:t.ID(),isOptional:!1},externalListingId:{type:t.NonEmptyString(),isOptional:!1},jobEntityId:{type:t.ID(),isOptional:!1},availability:{type:t.NonEmptyString(),isOptional:!1},closureDecision:{type:t.NonEmptyString(),isOptional:!1},closureEvidenceRefs:{type:t.NonEmptyString(),isOptional:!1,isArray:!0},...a}});