@lssm/lib.contracts-spec 17.3.2

package/dist/node/results/normalize.js

@@ -0,0 +1 @@
+import{contractFail as g,contractOk as f}from"./factories.js";import{isContractFailure as R,isContractProblem as y,isContractResult as m,isContractSpecError as S}from"./guards.js";import{createProblem as T}from"./problem.js";import{isStandardFailureCode as d}from"./standard-specs.js";import{categoryForStatus as u,isStandardRetryableStatus as P}from"./status.js";import{readIssues as I,readStringProperty as E}from"./value-utils.js";export function normalizeContractResult(t,e={}){if(m(t))return t;return f(t,e)}export function normalizeContractError(t,e={}){if(R(t)){const n=c(t.problem,e);return{...t,code:n.code,status:n.status,problem:n}}if(S(t)){const n=c(t.problem,e);return{ok:!1,code:n.code,status:n.status,problem:n}}if(y(t)){const n=c(t,e);return{ok:!1,code:n.code,status:n.status,problem:n}}const a=E(t,"code"),r=a?e.declaredErrors?.[a]:void 0,o=I(t),s=a??e.defaultCode??(o?"VALIDATION_FAILED":"INTERNAL_ERROR"),C=r||d(s)?s:"INTERNAL_ERROR",l=t instanceof Error?t.message:typeof t==="string"?t:void 0;return g(C,void 0,{status:e.status??r?.status??r?.http??(o?422:void 0),title:r?.title,detail:l,type:r?.type,category:e.category??r?.category??(o?"validation":u(e.status??r?.status??r?.http??500)),severity:r?.severity,retryable:r?.retryable,retryAfter:r?.retryAfter,gqlCode:r?.gqlCode,traceId:e.traceId,operation:e.operation,source:e.source,metadata:e.metadata,issues:o})}function c(t,e){const a=e.declaredErrors?.[t.code];if(a)return i(F(t,a),e);if(d(t.code))return i(t,e);return T("INTERNAL_ERROR",{detail:`Undeclared contract failure: ${t.code}`,metadata:{...t.metadata??{},originalCode:t.code,originalStatus:t.status,originalArgs:t.args},traceId:t.traceId??e.traceId,operation:t.operation??e.operation,source:t.source??e.source})}function F(t,e){const a=e.status??e.http??t.status;return{...t,status:a,type:e.type??t.type,title:e.title??t.title,detail:t.detail??e.description,category:e.category??u(a),severity:e.severity??(a>=500?"error":"warning"),retryable:e.retryable??P(a),retryAfter:t.retryAfter??e.retryAfter,gqlCode:e.gqlCode??t.gqlCode}}function i(t,e){return{...t,traceId:t.traceId??e.traceId,operation:t.operation??e.operation,source:t.source??e.source,metadata:t.metadata??e.metadata}}export function problemToSafeMessage(t){return t.detail??t.title}

package/dist/node/results/problem.js

@@ -0,0 +1 @@
+import{STANDARD_FAILURE_SPECS as s}from"./standard-specs.js";import{categoryForStatus as o,isStandardRetryableStatus as i}from"./status.js";export function createProblem(r,e){const a=e.status??l(r),t=s[r],n=e.category??t?.category??o(a),c=e.title??t?.title??u(r);return{type:e.type??t?.type??`https://contractspec.io/problems/${r.toLowerCase().replace(/_/g,"-")}`,title:c,status:a,code:r,detail:e.detail,instance:e.instance,category:n,severity:e.severity??t?.severity??(a>=500?"error":"warning"),retryable:e.retryable??t?.retryable??i(a),retryAfter:e.retryAfter??t?.retryAfter,gqlCode:e.gqlCode??t?.gqlCode,traceId:e.traceId,operation:e.operation,source:e.source,args:e.args,issues:e.issues,metadata:e.metadata,versionToken:e.versionToken}}function l(r){return s[r]?.status??500}function u(r){return r.toLowerCase().split("_").map((e)=>e.charAt(0).toUpperCase()+e.slice(1)).join(" ")}

package/dist/node/results/standard-specs.js

@@ -0,0 +1 @@
+import{isStandardRetryableStatus as s}from"./status.js";const o=(t,n,a)=>({status:t,state:n,description:a}),e=(t,n,a,r={})=>({status:t,category:n,description:a,retryable:r.retryable??s(t),severity:r.severity??(t>=500?"error":"warning"),title:r.title,type:r.type});export const STANDARD_SUCCESS_SPECS={OK:o(200,"completed","The operation completed successfully."),CREATED:o(201,"created","The resource was created."),ACCEPTED:o(202,"accepted","The operation was accepted."),NO_CONTENT:o(204,"empty","The operation completed without a body."),PARTIAL:o(206,"partial","The operation partially completed."),MULTI_STATUS:o(207,"partial","The operation returned multiple statuses."),QUEUED:o(202,"queued","The operation was queued for asynchronous work.")},STANDARD_FAILURE_SPECS={APPROVAL_REQUIRED:e(403,"policy","A valid scoped approval receipt is required for this operation."),CEREMONY_REQUIRED:e(403,"auth","A valid host-bound, unexpired, single-use ceremony is required for this operation."),BAD_REQUEST:e(400,"validation","The request is malformed."),UNAUTHENTICATED:e(401,"auth","Authentication is required."),PAYMENT_REQUIRED:e(402,"payment","Payment or billing action is required."),FORBIDDEN:e(403,"auth","The caller is not allowed to perform this action."),NOT_FOUND:e(404,"not_found","The requested resource was not found."),METHOD_NOT_ALLOWED:e(405,"validation","The requested method is not allowed."),CONFLICT:e(409,"conflict","The request conflicts with current state."),GONE:e(410,"not_found","The requested resource is no longer available."),PRECONDITION_FAILED:e(412,"conflict","A required precondition failed."),VALIDATION_FAILED:e(422,"validation","The request did not pass validation."),RATE_LIMITED:e(429,"rate_limit","The caller has been rate limited.",{retryable:!0}),INTERNAL_ERROR:e(500,"internal","An unexpected error occurred.",{severity:"error"}),NOT_IMPLEMENTED:e(501,"internal","This operation is not implemented.",{severity:"error"}),BAD_GATEWAY:e(502,"dependency","An upstream dependency failed.",{retryable:!0}),SERVICE_UNAVAILABLE:e(503,"dependency","The service is unavailable.",{retryable:!0}),TIMEOUT:e(504,"timeout","The operation timed out.",{retryable:!0})};function i(t,n){const a={};for(const r of n)a[r]=t[r];return a}export const standardSuccess={...STANDARD_SUCCESS_SPECS,pick(...t){return i(STANDARD_SUCCESS_SPECS,t)}},standardErrors={...STANDARD_FAILURE_SPECS,pick(...t){return i(STANDARD_FAILURE_SPECS,t)}};const c=new Set(Object.keys(STANDARD_SUCCESS_SPECS)),d=new Set(Object.keys(STANDARD_FAILURE_SPECS));export function isStandardSuccessCode(t){return c.has(t)}export function isStandardFailureCode(t){return d.has(t)}

package/dist/node/results/status.js

@@ -0,0 +1 @@
+export function categoryForStatus(r){if(r===401)return"auth";if(r===402)return"payment";if(r===403)return"auth";if(r===404||r===410)return"not_found";if(r===409||r===412)return"conflict";if(r===429)return"rate_limit";if(r===504)return"timeout";if(r>=400&&r<500)return"validation";if(r>=500)return"internal";return"internal"}export function isStandardRetryableStatus(r){return r===429||r===502||r===503||r===504}

package/dist/node/results/value-utils.js

@@ -0,0 +1 @@
+export function isRecord(n){return typeof n==="object"&&n!==null}export function readStringProperty(n,r){if(!isRecord(n))return;const e=n[r];return typeof e==="string"?e:void 0}export function stringifyPath(n){if(Array.isArray(n))return n.join(".");if(typeof n==="string")return n;return}export function readIssues(n){if(!isRecord(n)||!Array.isArray(n.issues))return;return n.issues.map((r)=>{if(isRecord(r))return{path:stringifyPath(r.path),code:typeof r.code==="string"?r.code:void 0,message:typeof r.message==="string"?r.message:JSON.stringify(r)};return{message:String(r)}})}

package/dist/node/rich-content/builders.js

@@ -0,0 +1,3 @@
+export function textSegment(e,n){return{id:e,text:n}}export function codeBlockFromText(e){return{id:e.id,language:e.language,filename:e.filename,lines:r(e.code).map((n,i)=>({id:`${e.id}:line:${i+1}`,lineNumber:i+1,segments:[textSegment(`${e.id}:segment:${i+1}`,n)]}))}}export function diffBlockFromLines(e){return{id:e.id,language:e.language,filename:e.filename,hunks:[{id:`${e.id}:hunk:1`,oldStart:e.lines.find((n)=>n.oldLine)?.oldLine??1,newStart:e.lines.find((n)=>n.newLine)?.newLine??1,lines:e.lines.map((n,i)=>({id:`${e.id}:diff-line:${i+1}`,kind:n.kind,oldLineNumber:n.oldLine,newLineNumber:n.newLine,segments:[textSegment(`${e.id}:diff-segment:${i+1}`,n.text)]}))}]}}function r(e){return e?e.replace(/\r\n/g,`
+`).split(`
+`):[]}

package/dist/node/rich-content/index.js

@@ -0,0 +1 @@
+export*from"./builders.js";export*from"./redaction.js";

package/dist/node/rich-content/redaction.js

@@ -0,0 +1 @@
+const o="•••• redacted ••••";export function redactRichSegments(e,n){return e.map((i)=>c(i,n)?d(i,n):i)}export function redactRichCodeBlock(e,n){return{...e,lines:e.lines.map((i)=>({...i,segments:redactRichSegments(i.segments,n)}))}}export function redactRichDiffBlock(e,n){return{...e,hunks:e.hunks.map((i)=>({...i,lines:i.lines.map((t)=>({...t,segments:redactRichSegments(t.segments,n)}))}))}}export function richSegmentsToText(e){return e.map((n)=>n.text).join("")}function c(e,n){return Boolean(e.visibility==="redacted"||e.visibility==="hidden")||Boolean(e.sensitivity&&n.deniedSensitivity?.includes(e.sensitivity))||Boolean(n.deniedSegmentIds?.includes(e.id))||Boolean(e.reference?.id&&n.deniedReferenceIds?.includes(e.reference.id))}function d(e,n){return{...e,text:e.redactionLabel??n.placeholder??o,visibility:"redacted",explanation:e.explanation??n.explanation,reference:e.reference?{...e.reference,value:void 0,href:void 0,metadata:void 0}:void 0}}

package/dist/node/rich-reference/__fixtures__/cross-adapter-fixture.js

@@ -0,0 +1 @@
+import{codeSymbolKind as i,databaseRecordKind as t,fileKind as a,linkKind as n,mediaKind as r,objectKind as o}from"../kinds/index.js";import{asReferenceInstanceId as c}from"../types.js";const l={visible:!0,redactedFields:[],allowedActions:[]},e=(d)=>c(d);export const CROSS_ADAPTER_FIXTURES=Object.freeze([{id:"database-record-allow-delegated",description:"database-record permit (delegated subject); covers numbers + strings.",kindId:t.id,refId:e("db-1"),payload:{databaseKey:"app",schemaKey:"public",tableName:"users",primaryKey:"1",naturalKey:"leaked-handle",displayValue:"leaked-display"},policy:{visible:!0,redactedFields:["naturalKey","displayValue"],allowedActions:[]},subjectMode:"delegated",expected:{outcome:"found",redactionState:"fully-redacted"}},{id:"database-record-permit-agent",description:"database-record permit (agent subject); no redaction.",kindId:t.id,refId:e("db-2"),payload:{databaseKey:"app",schemaKey:"public",tableName:"orders",primaryKey:"99"},policy:l,subjectMode:"agent",expected:{outcome:"found",redactionState:"unredacted"}},{id:"object-redact-delegated",description:"object kind with optional sensitive label redacted.",kindId:o.id,refId:e("obj-1"),payload:{domain:"commerce",id:"sku-42",label:"leaked-label",description:"leaked-description"},policy:{visible:!0,redactedFields:["label"],allowedActions:[]},subjectMode:"delegated",expected:{outcome:"found",redactionState:"partially-redacted"}},{id:"link-forbidden-delegated",description:"link kind hidden when policy.visible=false (covers nulls).",kindId:n.id,refId:e("lnk-1"),payload:{url:"https://example.com/secret",title:"secret",snippet:null},policy:{visible:!1,redactedFields:[],allowedActions:[]},subjectMode:"agent",expected:{outcome:"found",redactionState:"hidden"}},{id:"file-permit-agent",description:"file kind with size + checksum; covers numbers + ISO-8601-style strings.",kindId:a.id,refId:e("f-1"),payload:{storeKey:"gcs",path:"tenants/acme/report.pdf",contentType:"application/pdf",sizeBytes:1048576,previewExcerpt:"leaked-excerpt",checksum:"sha256:abc"},policy:{visible:!0,redactedFields:["path","previewExcerpt","checksum"],allowedActions:[]},subjectMode:"agent",expected:{outcome:"found",redactionState:"fully-redacted"}},{id:"media-permit-delegated",description:"media kind with enum + multiple optionals.",kindId:r.id,refId:e("m-1"),payload:{mediaType:"image",url:"https://cdn.example.com/asset.png",width:1024,height:768,altText:"leaked-alt"},policy:{visible:!0,redactedFields:["url","altText"],allowedActions:[]},subjectMode:"delegated",expected:{outcome:"found",redactionState:"partially-redacted"}},{id:"code-symbol-permit-agent",description:"code-symbol kind with line ranges; covers numeric ranges + enum.",kindId:i.id,refId:e("cs-1"),payload:{language:"ts",symbol:"defineReferenceKind",kind:"function",path:"src/define-kind.ts",startLine:10,endLine:42,signature:"(args) => ReferenceKindDefinition",snippet:"leaked-source"},policy:{visible:!0,redactedFields:["path","signature","snippet"],allowedActions:[]},subjectMode:"agent",expected:{outcome:"found",redactionState:"fully-redacted"}}]);export function stripDenialSignatures(d){return d.replace(/redacted:[^:"]+:[a-f0-9]+/g,"redacted:<KIND>:<SIG>")}

package/dist/node/rich-reference/agent-export.js

@@ -0,0 +1 @@
+import{canonicalJsonString as r,serializeRichReference as i}from"./canonical-serializer.js";export function toAgentJson(n,e){const t=i(n,e?.canonical),o=r(t,e?.canonical),a={kindId:n.kindId,refId:n.id,redactionState:n.redactionState,...e?.requestId!==void 0?{requestId:e.requestId}:{},...e?.issuedAt!==void 0?{issuedAt:e.issuedAt}:{}};return{body:o,meta:a}}export function toAgentJsonBatch(n,e){return n.map((t)=>toAgentJson(t,e))}

package/dist/node/rich-reference/canonical-serializer.js

@@ -0,0 +1 @@
+const u={sortKeys:!0};export function serializeRichReference(n,i){const e={...u,...i};return t(n,e)}export function serializeRichReferenceBatch(n,i){return n.map((e)=>serializeRichReference(e,i))}export function canonicalJsonString(n,i){const e={...u,...i};return JSON.stringify(t(n,e))}function t(n,i){if(n===null)return null;if(n===void 0)return;const e=typeof n;if(e==="string"||e==="boolean")return n;if(e==="number")return Number.isFinite(n)?n:null;if(e==="bigint")return n.toString();if(n instanceof Date)return n.toISOString();if(Array.isArray(n))return n.map((r)=>{const o=t(r,i);return o===void 0?null:o});if(e==="object"){const r=n,o=Object.keys(r);if(i.sortKeys)o.sort();const s={};for(const c of o){const a=t(r[c],i);if(a===void 0)continue;s[c]=a}return s}return}

package/dist/node/rich-reference/contracts.js

@@ -0,0 +1 @@
+import{ReferenceDetailQuery as r}from"../operations/reference-detail.js";import{ReferenceResolveQuery as t}from"../operations/reference-resolve.js";export function registerRichReferenceOperations(e){return e.register(t).register(r)}export{ReferenceDetailQuery}from"../operations/reference-detail.js";export{ReferenceResolveQuery}from"../operations/reference-resolve.js";

package/dist/node/rich-reference/define-kind.js

@@ -0,0 +1 @@
+import{asReferenceKindId as r}from"./types.js";const d=/^[a-z][a-z0-9-]*(\.[a-z][a-z0-9-]*)*$/;function i(e){if(!d.test(e))throw Error(`defineReferenceKind: id "${e}" is invalid; expected dotted-kebab (e.g. "database-record", "code.symbol").`)}function o(e){if(e===void 0||e===null)throw Error("defineReferenceKind: `sensitiveFields` is required. Pass an explicit array (use `[]` with `// confirmed: no sensitive fields` if none).");if(!Array.isArray(e))throw Error("defineReferenceKind: `sensitiveFields` must be an array of payload key names.");for(const n of e)if(typeof n!=="string"||n.length===0)throw Error(`defineReferenceKind: invalid sensitiveField entry ${JSON.stringify(n)}.`)}export function defineReferenceKind(e){i(e.id);o(e.sensitiveFields);const n={id:r(e.id),schema:e.schema,sensitiveFields:Object.freeze([...e.sensitiveFields]),defaultPreview:e.defaultPreview,defaultPanel:e.defaultPanel,icon:e.icon,parser:e.parser,validate:(a)=>e.schema.safeParse(a)};return Object.freeze(n)}

package/dist/node/rich-reference/denial-token-shape.js

@@ -0,0 +1 @@
+export const DENIAL_TOKEN_PREFIX="redacted:";export function looksLikeDenialToken(e){return typeof e==="string"&&e.startsWith(DENIAL_TOKEN_PREFIX)}

package/dist/node/rich-reference/denial-token.js

@@ -0,0 +1 @@
+import{hmacDigest as f}from"@lssm/lib.crypto-utils";import{DENIAL_TOKEN_PREFIX as a}from"./denial-token-shape.js";const u="sha256";export function createSessionSalt(){const e=new Uint8Array(32);globalThis.crypto.getRandomValues(e);return g(e)}export function createDenialTokenSigner(e){if(!e||e.length<16)throw Error("createDenialTokenSigner: salt must be at least 16 characters; use createSessionSalt().");const t=(n)=>{return f(u,e,n,"hex")};return{salt:e,mint:(n)=>{const i=t(n);return`${a}${n}:${i}`},verify:(n)=>{if(typeof n!=="string"||!n.startsWith(a))return;const i=n.slice(a.length),s=i.lastIndexOf(":");if(s<=0)return;const d=i.slice(0,s),l=i.slice(s+1),c=t(d);if(l.length!==c.length)return;if(!y(l,c))return;return n}}}function g(e){return Array.from(e,(t)=>t.toString(16).padStart(2,"0")).join("")}function y(e,t){if(e.length!==t.length)return!1;let o=0;for(let r=0;r<e.length;r+=1)o|=e.charCodeAt(r)^t.charCodeAt(r);return o===0}

package/dist/node/rich-reference/detector.js

@@ -0,0 +1 @@
+import{sha256Hex as a}from"@lssm/lib.crypto-utils";import{listKinds as d}from"./registry.js";import{asReferenceInstanceId as s}from"./types.js";export function createRichContentDetector(){const n=new Map;return{detect:(e)=>{const t=n.get(e);if(t)return t;const c=u(e),i={fingerprint:f(e),annotations:Object.freeze(c)};n.set(e,i);return i},clearCache:()=>{n.clear()}}}function f(n){return a(n)}function u(n){const o=[];for(const r of d()){if(!r.parser)continue;const e=r.parser(n);if(!e)continue;const t=e.id!==void 0?String(e.id):"";if(!t)continue;o.push({kindId:r.id,id:s(t),start:0,end:n.length,payloadHint:e})}return o}

package/dist/node/rich-reference/index.d.js

@@ -0,0 +1 @@
+export{toAgentJson,toAgentJsonBatch}from"./agent-export.js";export{canonicalJsonString,serializeRichReference,serializeRichReferenceBatch}from"./canonical-serializer.js";export{defineReferenceKind}from"./define-kind.js";export{DENIAL_TOKEN_PREFIX,looksLikeDenialToken}from"./denial-token-shape.js";export*from"./kinds/index.js";export{defaultCopyMarkdownHandler,fromMarkdown,toMarkdown}from"./markdown-envelope.js";export{applyKindRedaction}from"./redaction.js";export{clearReferenceKindRegistry,getKind,listKinds,registerKind,tryGetKind,unregisterKind}from"./registry.js";export{asReferenceInstanceId,asReferenceKindId}from"./types.js";

package/dist/node/rich-reference/index.js

@@ -0,0 +1,19 @@
+export{toAgentJson,toAgentJsonBatch}from"./agent-export.js";export{canonicalJsonString,serializeRichReference,serializeRichReferenceBatch}from"./canonical-serializer.js";export{defineReferenceKind}from"./define-kind.js";export{DENIAL_TOKEN_PREFIX,looksLikeDenialToken}from"./denial-token-shape.js";export*from"./kinds/index.js";export{defaultCopyMarkdownHandler,fromMarkdown,toMarkdown}from"./markdown-envelope.js";export{applyKindRedaction}from"./redaction.js";export{clearReferenceKindRegistry,getKind,listKinds,registerKind,tryGetKind,unregisterKind}from"./registry.js";export{asReferenceInstanceId,asReferenceKindId}from"./types.js";export const richReferenceGoalDoc={id:"docs.contracts-spec.rich-reference.goal",title:"RichReference goal",summary:"One canonical, governance-aware reference type across all surfaces.",kind:"goal",visibility:"public",route:"/docs/contracts-spec/rich-reference/goal",tags:["rich-reference","governance","contracts-spec"],body:`# RichReference
+
+RichReference is the canonical transport for governed, kind-typed references that travel through REST, GraphQL, MCP, and agent surfaces. Each kind declares its payload schema and the subset of fields that may carry sensitive data; the runtime (S-2) enforces post-handler redaction using HMAC-signed denial tokens (F-5 mitigation).`},richReferenceUsageDoc={id:"docs.contracts-spec.rich-reference.usage",title:"RichReference usage",summary:"Authoring kinds and wiring governance ports.",kind:"usage",visibility:"public",route:"/docs/contracts-spec/rich-reference/usage",tags:["rich-reference","authoring"],body:`# Authoring a reference kind
+
+\`\`\`ts
+import { defineReferenceKind } from '@lssm/lib.contracts-spec/rich-reference';
+import { z } from 'zod';
+
+export const ticketKind = defineReferenceKind({
+  id: 'ticket',
+  schema: z.object({ id: z.string(), title: z.string() }),
+  sensitiveFields: ['title'],
+  defaultPreview: 'inline-card',
+  defaultPanel: 'drawer',
+  icon: 'ticket',
+});
+\`\`\`
+
+\`sensitiveFields\` is required at the type level and at runtime; kinds with no sensitive fields MUST pass \`[]\` with an inline confirmation comment (F-4 mitigation).`};

package/dist/node/rich-reference/kinds/code-symbol.d.js

@@ -0,0 +1 @@
+export{};

package/dist/node/rich-reference/kinds/code-symbol.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{defineReferenceKind as n}from"../define-kind.js";const o=e.object({language:e.string().min(1),symbol:e.string().min(1),kind:e.enum(["function","method","class","interface","type","constant","variable","other"]).optional(),path:e.string().optional(),startLine:e.number().int().nonnegative().optional(),endLine:e.number().int().nonnegative().optional(),signature:e.string().optional(),snippet:e.string().optional()});export const codeSymbolKind=n({id:"code-symbol",schema:o,sensitiveFields:["path","signature","snippet"],defaultPreview:"inline-chip",defaultPanel:"drawer",icon:"code"});

package/dist/node/rich-reference/kinds/database-record.d.js

@@ -0,0 +1 @@
+export{};

package/dist/node/rich-reference/kinds/database-record.js

@@ -0,0 +1 @@
+import{z as a}from"zod";import{defineReferenceKind as e}from"../define-kind.js";const t=a.object({databaseKey:a.string().min(1),schemaKey:a.string().min(1),tableName:a.string().min(1),primaryKey:a.string().min(1),naturalKey:a.string().optional(),displayValue:a.string().optional(),url:a.string().url().optional()});export const databaseRecordKind=e({id:"database-record",schema:t,sensitiveFields:["naturalKey","displayValue"],defaultPreview:"inline-card",defaultPanel:"drawer",icon:"database"});

package/dist/node/rich-reference/kinds/entity.d.js

@@ -0,0 +1 @@
+export{};

package/dist/node/rich-reference/kinds/entity.js

@@ -0,0 +1,27 @@
+import{z as e}from"zod";import{defineReferenceKind as n}from"../define-kind.js";const r=e.object({slug:e.string().min(1),id:e.string().min(1),version:e.string().optional(),label:e.string().optional(),url:e.string().url().optional()});export const entityKind=n({id:"entity",schema:r,sensitiveFields:["id","label","url"],defaultPreview:"inline-card",defaultPanel:"drawer",icon:"box"});export function resolveEntitySpec(t,i){return i.get(t.slug,t.version)}export const entityKindGoalDoc={id:"docs.contracts-spec.rich-reference.kinds.entity.goal",title:"entityKind — goal",summary:"Canonical reference kind for typed entity instances governed by ContractEntitySpec.",kind:"goal",visibility:"public",route:"/docs/contracts-spec/rich-reference/kinds/entity/goal",tags:["rich-reference","entity","kind","contracts-spec"],body:"# entityKind\n\n`entityKind` is the built-in `ReferenceKindDefinition` for entity references. Each instance\ncarries a `slug` (entity type key) and an `id` (instance identifier). The slug resolves to a\n`ContractEntitySpec` via `resolveEntitySpec(payload, registry)`, connecting RichReference\ngovernance (redaction, policy, audit) to the contracts-spec entity graph."},entityKindUsageDoc={id:"docs.contracts-spec.rich-reference.kinds.entity.usage",title:"entityKind — usage",summary:"How to build entity references and resolve entity specs from payloads.",kind:"usage",visibility:"public",route:"/docs/contracts-spec/rich-reference/kinds/entity/usage",tags:["rich-reference","entity","kind"],body:`# Using entityKind
+
+## Building a reference
+
+\`\`\`ts
+import { asReferenceInstanceId, asReferenceKindId } from '@lssm/lib.contracts-spec/rich-reference';
+import { entityKind } from '@lssm/lib.contracts-spec/rich-reference/kinds/entity';
+
+const ref = {
+  kindId: asReferenceKindId('entity'),
+  id: asReferenceInstanceId('user-42'),
+  payload: { slug: 'user', id: 'user-42', label: 'Ada Lovelace' },
+  redactionState: 'unredacted',
+} satisfies RichReference<EntityPayload>;
+\`\`\`
+
+## Resolving the entity spec
+
+\`\`\`ts
+import { resolveEntitySpec } from '@lssm/lib.contracts-spec/rich-reference/kinds/entity';
+
+const spec = resolveEntitySpec(ref.payload, registry);
+// spec is ContractEntitySpec | undefined
+\`\`\`
+
+\`sensitiveFields\` for \`entityKind\` are \`['id', 'label', 'url']\`. The RichReference runtime
+will redact these fields based on the active KindPolicy.`};

package/dist/node/rich-reference/kinds/file.d.js

@@ -0,0 +1 @@
+export{};

package/dist/node/rich-reference/kinds/file.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{defineReferenceKind as i}from"../define-kind.js";const t=e.object({storeKey:e.string().min(1),path:e.string().min(1),contentType:e.string().optional(),sizeBytes:e.number().int().nonnegative().optional(),previewExcerpt:e.string().optional(),checksum:e.string().optional()});export const fileKind=i({id:"file",schema:t,sensitiveFields:["path","previewExcerpt","checksum"],defaultPreview:"inline-card",defaultPanel:"drawer",icon:"file"});

package/dist/node/rich-reference/kinds/index.d.js

@@ -0,0 +1 @@
+import{codeSymbolKind}from"./code-symbol.js";import{databaseRecordKind}from"./database-record.js";import{fileKind}from"./file.js";import{linkKind}from"./link.js";import{mediaKind}from"./media.js";import{objectKind}from"./object.js";export{entityKind,entityKindGoalDoc,entityKindUsageDoc,resolveEntitySpec}from"./entity.js";export{codeSymbolKind,databaseRecordKind,fileKind,linkKind,mediaKind,objectKind};

package/dist/node/rich-reference/kinds/index.js

@@ -0,0 +1 @@
+import{registerKind as o}from"../registry.js";import{codeSymbolKind}from"./code-symbol.js";import{databaseRecordKind}from"./database-record.js";import{entityKind as t}from"./entity.js";import{fileKind}from"./file.js";import{linkKind}from"./link.js";import{mediaKind}from"./media.js";import{objectKind}from"./object.js";export{entityKind,entityKindGoalDoc,entityKindUsageDoc,resolveEntitySpec}from"./entity.js";export{codeSymbolKind,databaseRecordKind,fileKind,linkKind,mediaKind,objectKind};export const BUILT_IN_REFERENCE_KINDS=Object.freeze([databaseRecordKind,objectKind,linkKind,fileKind,mediaKind,codeSymbolKind,t]);export function registerBuiltInReferenceKinds(){for(const e of BUILT_IN_REFERENCE_KINDS)o(e)}

package/dist/node/rich-reference/kinds/link.d.js

@@ -0,0 +1 @@
+export{};

package/dist/node/rich-reference/kinds/link.js

@@ -0,0 +1 @@
+import{z as i}from"zod";import{defineReferenceKind as n}from"../define-kind.js";const e=i.object({url:i.string().min(1),title:i.string().optional(),snippet:i.string().optional(),domain:i.string().optional(),imageUrl:i.string().optional()});export const linkKind=n({id:"link",schema:e,sensitiveFields:["url","title","snippet","imageUrl"],defaultPreview:"inline-link",defaultPanel:"popover",icon:"link"});

package/dist/node/rich-reference/kinds/media.d.js

@@ -0,0 +1 @@
+export{};

package/dist/node/rich-reference/kinds/media.js

@@ -0,0 +1 @@
+import{z as i}from"zod";import{defineReferenceKind as e}from"../define-kind.js";const t=i.object({mediaType:i.enum(["image","video","audio"]),url:i.string().min(1),posterUrl:i.string().optional(),width:i.number().int().positive().optional(),height:i.number().int().positive().optional(),durationMs:i.number().int().nonnegative().optional(),captions:i.string().optional(),altText:i.string().optional()});export const mediaKind=e({id:"media",schema:t,sensitiveFields:["url","posterUrl","captions","altText"],defaultPreview:"inline-card",defaultPanel:"modal",icon:"image"});

package/dist/node/rich-reference/kinds/object.d.js

@@ -0,0 +1 @@
+export{};

package/dist/node/rich-reference/kinds/object.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{defineReferenceKind as i}from"../define-kind.js";const o=e.object({domain:e.string().min(1),id:e.string().min(1),label:e.string().optional(),description:e.string().optional(),href:e.string().optional()});export const objectKind=i({id:"object",schema:o,sensitiveFields:["label","description"],defaultPreview:"inline-chip",defaultPanel:"popover",icon:"box"});

package/dist/node/rich-reference/markdown-envelope.js

@@ -0,0 +1 @@
+import{DENIAL_TOKEN_PREFIX as u,looksLikeDenialToken as g}from"./denial-token-shape.js";import{createRichContentDetector as I}from"./detector.js";import{asReferenceInstanceId as f,asReferenceKindId as p}from"./types.js";const l="rich-ref:",w=/\[([^\]]*)\]\(([^)]+)\)/g;export function defaultCopyMarkdownHandler(e,n){return toMarkdown(e,n)}export function toMarkdown(e,n){const o=n?.verbosity??"standard",t=[];for(const r of e.segments){if(r.type==="text"){t.push(r.text);continue}t.push(M(r.reference,o))}return t.join("")}function M(e,n){if(e.denialToken)return`[${`redacted:${e.kindId}`}](${e.denialToken})`;const o=e.label??`${e.kindId}:${e.refId}`,t=`${l}${e.kindId}/${e.refId}`;if(n==="compact")return`[${o}](${t})`;return`[${o}](${t})`}export async function fromMarkdown(e,n){const o=[],t=I();let r=0;for(const d of e.matchAll(w)){const i=d.index??0;if(i>r){const k=e.slice(r,i);y(k,o,t)}const[,c="",a=""]=d,s=m(c,a,n.signer);if(s)o.push({type:"reference",reference:s});else o.push({type:"text",text:"[invalid-redaction]"});r=i+d[0].length}if(r<e.length)y(e.slice(r),o,t);n.subject;return{kind:n.kind??"markdown",text:e,segments:o}}function y(e,n,o){if(e.length===0)return;const t=o.detect(e);if(t.annotations.length===0){n.push({type:"text",text:e});return}n.push({type:"text",text:e});for(const r of t.annotations)n.push({type:"reference",reference:{kindId:r.kindId,refId:r.id}})}function m(e,n,o){if(g(n)){const c=o.verify(n);if(!c)return;const a=c.slice(u.length),s=a.lastIndexOf(":");return{kindId:p(a.slice(0,s)),refId:f(""),denialToken:c,label:e}}if(!n.startsWith(l))return;const t=n.slice(l.length),r=t.indexOf("/");if(r<=0||r>=t.length-1)return;const d=p(t.slice(0,r)),i=f(t.slice(r+1));return{kindId:d,refId:i,label:e||void 0}}

package/dist/node/rich-reference/redaction.js

@@ -0,0 +1 @@
+export function applyKindRedaction(t,e,a,r){if(!a.visible)return{...e,payload:l(e.payload),redactionState:"hidden"};const i=new Set(t.sensitiveFields),n=new Set(a.redactedFields);for(const o of n)if(!i.has(o))n.delete(o);if(n.size===0)return{...e,redactionState:"unredacted"};const d={...e.payload};for(const o of n)d[o]=r.mint(t.id);const c=n.size===i.size&&i.size>0?"fully-redacted":"partially-redacted";return{...e,payload:d,redactionState:c}}function l(t){const e={};for(const a of Object.keys(t))e[a]=void 0;return e}

package/dist/node/rich-reference/registry.js

@@ -0,0 +1 @@
+const n=new Map;export function registerKind(e){if(n.has(e.id))throw Error(`ReferenceKindRegistry: kind "${e.id}" is already registered. Use unregisterKind first if intentional.`);n.set(e.id,e)}export function getKind(e){const i=n.get(e);if(!i)throw Error(`ReferenceKindRegistry: kind "${e}" is not registered. Did you forget to call registerKind() in the composition root?`);return i}export function tryGetKind(e){return n.get(e)}export function listKinds(){return Array.from(n.values())}export function unregisterKind(e){n.delete(e)}export function clearReferenceKindRegistry(){n.clear()}

package/dist/node/rich-reference/runtime/dev-invariants.js

@@ -0,0 +1 @@
+import{looksLikeDenialToken as c}from"../denial-token-shape.js";let o;export function enableRichReferenceTelemetry(e){o=e}export function assertRedactionApplied(e,n,t,i){for(const d of t){if(!n.includes(d))continue;const r=i[d];if(r===void 0||r===null)continue;if(!c(r))throw Error(`[dev] assertRedactionApplied: field "${d}" on kind "${e}" should be a DenialToken but is "${typeof r}".`)}}export function emitResolveTelemetry(e,n,t,i){if(!o)return;o({event:"rich-reference.resolved",kindId:e.kindId,refId:e.id,tenantId:n?.tenantId,subjectId:n?.id,redactionState:e.redactionState,fieldsRedacted:t.length,traceId:i})}

package/dist/node/rich-reference/runtime/dispatch.js

@@ -0,0 +1 @@
+import{getKind as g}from"../registry.js";import{assertRedactionApplied as k,emitResolveTelemetry as h}from"./dev-invariants.js";import{enforceRedaction as S}from"./redaction-enforcer.js";export function createDispatcher(r){const f=async(e,i,n,o,t,d)=>{if(o.outcome==="not-found"){u(r.auditSink,e,i,n,"deny",[],t,d);return{request:e,outcome:"not-found"}}if(o.outcome==="forbidden"){u(r.auditSink,e,i,n,"deny",[],t,d);return{request:e,outcome:"forbidden",explanation:o.explanation}}const c=g(e.kindId),a=S(c,o.reference,n,r.signer);k(c.id,c.sensitiveFields,n.redactedFields,a.payload);h(a,i,n.redactedFields,d);u(r.auditSink,e,i,n,P(a.redactionState),n.redactedFields,t,d);return{request:e,outcome:"found",reference:a}};return{resolveBatch:async(e)=>{const i=e.adapter??"unknown",n=new Map;for(const t of e.refs){const d=n.get(t.kindId)??[];d.push(t);n.set(t.kindId,d)}const o=[];for(const[t,d]of n){const c=await r.policyProvider.getKindPolicy(t,e.subject),a=r.runtime.getHandler(t),p={subject:e.subject,traceId:e.traceId,sessionId:e.sessionId},R=d.map((s)=>s.id),m=a.resolveBatch?await a.resolveBatch(R,p):await Promise.all(d.map((s)=>a.resolve(s.id,p)));for(let s=0;s<d.length;s+=1){const I=d[s],v=m[s];o.push(await f(I,e.subject,c,v,i,e.traceId))}}return o},detail:async(e,i,n)=>{const o=await r.policyProvider.getKindPolicy(e.kindId,i),t=r.runtime.getHandler(e.kindId),c=await(t.detail??t.resolve)(e.id,{subject:i,traceId:n?.traceId,sessionId:n?.sessionId});return f(e,i,o,c,n?.adapter??"unknown",n?.traceId)}}}function P(r){if(r==="unredacted")return"permit";if(r==="partially-redacted")return"partial";if(r==="hidden")return"hidden";return"partial"}function u(r,f,l,y,e,i,n,o){r.record({timestamp:new Date().toISOString(),adapter:n,kindId:f.kindId,refId:f.id,subject:l?{id:l.id,kind:l.kind,tenantId:l.tenantId}:void 0,delegationChain:l?.delegationChain,decision:e,redactionsApplied:i,traceId:o})}

package/dist/node/rich-reference/runtime/index.js

@@ -0,0 +1 @@
+export{assertRedactionApplied,emitResolveTelemetry,enableRichReferenceTelemetry}from"./dev-invariants.js";export{createDispatcher}from"./dispatch.js";export{enforceRedaction}from"./redaction-enforcer.js";export{createReferenceRuntime}from"./runtime.js";

package/dist/node/rich-reference/runtime/redaction-enforcer.js

@@ -0,0 +1 @@
+import{looksLikeDenialToken as f}from"../denial-token-shape.js";import{applyKindRedaction as l}from"../redaction.js";export function enforceRedaction(e,n,i,r){if(!i.visible)return l(e,n,{visible:!1,redactedFields:[]},r);const d=e.validate(n.payload),s=d.success?d.data:n.payload,t=l(e,{...n,payload:s},{visible:!0,redactedFields:i.redactedFields,explanation:i.explanation},r),c=new Set(e.sensitiveFields);for(const o of i.redactedFields){if(!c.has(o))continue;const a=t.payload[o];if(a===void 0||a===null)continue;if(!f(a))throw Error(`ReferenceRuntime.enforceRedaction: handler returned an un-redacted value for sensitive field "${o}" on kind "${e.id}".`)}return t}

package/dist/node/rich-reference/runtime/runtime.js

@@ -0,0 +1 @@
+export function createReferenceRuntime(){const n=new Map;return{registerHandler:(e)=>{const r=e.kind.id;if(n.has(r))throw Error(`ReferenceRuntime: handler for kind "${r}" is already registered. Call clear() or build a fresh runtime for tests.`);n.set(r,e)},getHandler:(e)=>{const r=n.get(e);if(!r)throw Error(`ReferenceRuntime: no handler registered for kind "${e}".`);return r},tryGetHandler:(e)=>n.get(e),listHandlers:()=>Array.from(n.values()),hasHandler:(e)=>n.has(e),clear:()=>{n.clear()}}}

package/dist/node/rich-reference/types.js

@@ -0,0 +1 @@
+export const asReferenceKindId=(e)=>e,asReferenceInstanceId=(e)=>e;

package/dist/node/runtime-adapters.js

@@ -0,0 +1 @@
+export const AGENT_RUNTIME_ADAPTER_KEYS=["langgraph","langchain","workflow-devkit","eve"],AGENT_RUNTIME_CAPABILITY_KEYS=["sessions","checkpoints","suspend-resume","sandbox","connections","channels","schedules","subagent-dispatch","eval-hooks","approval","effect-replay"];

package/dist/node/schema-to-markdown.js

@@ -0,0 +1,10 @@
+import{isSchemaModel as M}from"@lssm/lib.schema/SchemaModel";export function schemaToMarkdown(n,e,s={}){const{format:i="auto",title:o,description:l,maxDepth:r=2}=s,t=[];if(o)t.push(`# ${o}`,"");if(l)t.push(`> ${l}`,"");const c=i==="auto"?Array.isArray(e)?"table":"detail":i;if(c==="table"&&Array.isArray(e))t.push(schemaToMarkdownTable(n,e,s));else if(c==="list"&&Array.isArray(e))t.push(schemaToMarkdownList(n,e,s));else if(!Array.isArray(e)&&e!==null&&typeof e==="object")t.push(schemaToMarkdownDetail(n,e,{...s,maxDepth:r}));else t.push(`**Data:** ${String(e)}`,"");return t.join(`
+`)}export function schemaToMarkdownTable(n,e,s={}){const{maxItems:i=100,includeFields:o,excludeFields:l=[]}=s,r=y(n,o,l);if(r.length===0||e.length===0)return`_No data available_
+`;const t=e.slice(0,i),c=[],a=r.map((f)=>f.label);c.push(`| ${a.join(" | ")} |`);c.push(`| ${a.map(()=>"---").join(" | ")} |`);for(const f of t){const u=r.map((d)=>p(m(f,d.name)));c.push(`| ${u.join(" | ")} |`)}if(e.length>i)c.push("",`_Showing ${i} of ${e.length} items_`);c.push("");return c.join(`
+`)}export function schemaToMarkdownList(n,e,s={}){const{maxItems:i=50,summaryFields:o,includeFields:l,excludeFields:r=[]}=s,t=y(n,l,r),c=o?t.filter((u)=>o.includes(u.name)):t.slice(0,3);if(c.length===0||e.length===0)return`_No data available_
+`;const a=e.slice(0,i),f=[];for(const u of a){const d=p(m(u,c[0]?.name??"id")),w=c.slice(1).map((k)=>`${k.label}: ${p(m(u,k.name))}`).join(" · "),S=w?`- **${d}** (${w})`:`- **${d}**`;f.push(S)}if(e.length>i)f.push("",`_Showing ${i} of ${e.length} items_`);f.push("");return f.join(`
+`)}export function schemaToMarkdownDetail(n,e,s={}){const{includeFields:i,excludeFields:o=[],maxDepth:l=2}=s;if(e===null||typeof e!=="object")return`_No data available_
+`;const r=y(n,i,o);if(r.length===0)return`_No fields to display_
+`;const t=[];for(const c of r){const a=m(e,c.name),f=j(a,l,0);t.push(`**${c.label}:** ${f}`)}t.push("");return t.join(`
+`)}export function schemaToMarkdownSummary(n,e={}){const{numericFields:s=[],countByField:i}=e,o=[];o.push(`**Total Items:** ${n.length}`);for(const l of s){const r=n.map((t)=>m(t,l)).filter((t)=>typeof t==="number");if(r.length>0){const t=r.reduce((u,d)=>u+d,0),c=t/r.length,a=Math.min(...r),f=Math.max(...r);o.push(`**${b(l)}:** Sum: ${g(t)}, Avg: ${g(c)}, Min: ${g(a)}, Max: ${g(f)}`)}}if(i){const l={};for(const r of n){const t=String(m(r,i)??"Unknown");l[t]=(l[t]??0)+1}o.push("",`**By ${b(i)}:**`);for(const[r,t]of Object.entries(l))o.push(`- ${r}: ${t}`)}o.push("");return o.join(`
+`)}function y(n,e,s=[]){if(!M(n))return[];const i=n.config.fields;return Object.keys(i).filter((r)=>{if(s.includes(r))return!1;if(e&&!e.includes(r))return!1;return!0}).map((r)=>{const t=i[r],c=Boolean(t?.type&&typeof t.type==="object"&&"config"in t.type&&typeof t.type.config?.fields==="object");return{name:r,label:b(r),isOptional:t?.isOptional??!1,isArray:t?.isArray===!0,isNested:c}})}function m(n,e){if(n===null||typeof n!=="object")return;const s=n;if(e.includes(".")){const i=e.split(".");let o=s;for(const l of i){if(o===null||typeof o!=="object")return;o=o[l]}return o}return s[e]}function p(n){if(n===null||n===void 0)return"-";if(typeof n==="boolean")return n?"✓":"✗";if(typeof n==="number")return g(n);if(n instanceof Date)return h(n);if(typeof n==="string"&&F(n))return h(new Date(n));if(Array.isArray(n))return`[${n.length} items]`;if(typeof n==="object")return"[Object]";const e=String(n);return e.length>50?`${e.slice(0,47)}...`:e.replace(/\|/g,"\\|")}function j(n,e,s){if(n===null||n===void 0)return"_none_";if(typeof n==="boolean")return n?"Yes":"No";if(typeof n==="number")return g(n);if(n instanceof Date)return h(n);if(typeof n==="string"&&F(n))return h(new Date(n));if(Array.isArray(n)){if(n.length===0)return"_empty list_";if(s>=e)return`[${n.length} items]`;if(n.length<=5&&n.every((i)=>typeof i!=="object"))return n.map((i)=>p(i)).join(", ");return`[${n.length} items]`}if(typeof n==="object"){if(s>=e)return"[Object]";return`{${Object.keys(n).length} fields}`}return String(n)}function b(n){return n.replace(/([a-z])([A-Z])/g,"$1 $2").replace(/_/g," ").replace(/^\w/,(e)=>e.toUpperCase())}function g(n){if(Math.abs(n)>=1000)return new Intl.NumberFormat("en-US",{maximumFractionDigits:2}).format(n);if(Number.isInteger(n))return String(n);return n.toFixed(2)}function h(n){return n.toLocaleDateString("en-US",{year:"numeric",month:"short",day:"numeric"})}function F(n){if(!/^\d{4}-\d{2}-\d{2}/.test(n))return!1;const e=new Date(n);return!isNaN(e.getTime())}

package/dist/node/self-improving-system/constants.js

@@ -0,0 +1 @@
+import{StabilityEnum as e}from"../ownership.js";export const SELF_IMPROVING_SYSTEM_DOMAIN="self-improving-system",SELF_IMPROVING_SYSTEM_API_VERSION="v1",SELF_IMPROVING_SYSTEM_BASE_PATH="/api/self-improvement/v1",SELF_IMPROVING_SYSTEM_OWNERS=["team-intelligence-platform"],SELF_IMPROVING_SYSTEM_TAGS=["self-improvement","governed-learning","exact-replay"],SELF_IMPROVING_SYSTEM_STABILITY=e.Experimental,SELF_IMPROVING_SYSTEM_CAPABILITY={key:"self-improving-system.core",version:"1.0.0"},SELF_IMPROVEMENT_AUTONOMY_LEVELS=["observe","recommend","plan","apply_with_approval","auto_apply_qualified"],SELF_IMPROVEMENT_CANDIDATE_KINDS=["runtime_artifact","repository_work_item"],SELF_IMPROVEMENT_STATUSES=["queued","proposing","evaluating","awaiting_approval","shadow","canary","observing","promoted","rejected","rolled_back","killed","expired","failed"],SELF_IMPROVEMENT_PROTECTED_TARGETS=["contract","schema","row_level_security","retention","deletion","legal_policy","restricted_field","source_admission","credential_policy","network_policy","provider_qualification","code","infrastructure"];

package/dist/node/self-improving-system/events.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as a}from"@lssm/lib.schema";import{defineEvent as d}from"../events.js";import{SELF_IMPROVING_SYSTEM_CAPABILITY as p,SELF_IMPROVING_SYSTEM_OWNERS as i,SELF_IMPROVING_SYSTEM_STABILITY as m,SELF_IMPROVING_SYSTEM_TAGS as s}from"./constants.js";const l=new a({name:"SelfImprovementEventPayloadV1",fields:{ecosystemId:{type:t.ID(),isOptional:!1},tenantId:{type:t.ID(),isOptional:!1},workspaceId:{type:t.ID(),isOptional:!1},programId:{type:t.ID(),isOptional:!1},candidateId:{type:t.ID(),isOptional:!0},receiptId:{type:t.ID(),isOptional:!1},evidenceRef:{type:t.ID(),isOptional:!1},occurredAt:{type:t.DateTime(),isOptional:!1}}}),e=(o,n,r)=>d({meta:{key:o,title:n,version:"1.0.0",description:r,stability:m,owners:[...i],tags:[...s]},capability:{...p},pii:[],payload:l});export const SelfImprovementSignalRecordedEvent=e("self-improvement.signal.recorded","Improvement signal recorded","A sanitized signal and evidence references were admitted."),SelfImprovementCandidateProposedEvent=e("self-improvement.candidate.proposed","Improvement candidate proposed","A candidate was proposed against an immutable baseline."),SelfImprovementGateEvaluatedEvent=e("self-improvement.gate.evaluated","Improvement gate evaluated","A required evaluation gate produced durable evidence."),SelfImprovementReviewRequiredEvent=e("self-improvement.review.required","Improvement review required","An independent approval decision is required."),SelfImprovementReviewDecidedEvent=e("self-improvement.review.decided","Improvement review decided","An independent reviewer approved or rejected a candidate."),SelfImprovementShadowStartedEvent=e("self-improvement.shadow.started","Improvement shadow started","A bounded no-effect shadow execution started."),SelfImprovementShadowStoppedEvent=e("self-improvement.shadow.stopped","Improvement shadow stopped","A shadow execution stopped and preserved its observations."),SelfImprovementShadowComparedEvent=e("self-improvement.shadow.compared","Improvement shadow compared","Baseline and shadow evidence produced a deterministic comparison."),SelfImprovementCanaryStartedEvent=e("self-improvement.canary.started","Improvement canary started","A bounded canary started through signed runtime authority."),SelfImprovementCanaryStoppedEvent=e("self-improvement.canary.stopped","Improvement canary stopped","A bounded canary stopped and preserved its observations."),SelfImprovementCanaryComparedEvent=e("self-improvement.canary.compared","Improvement canary compared","Baseline and canary evidence produced a deterministic comparison."),SelfImprovementObservationCompletedEvent=e("self-improvement.observation.completed","Improvement observation completed","The observation window produced a deterministic result."),SelfImprovementPromotedEvent=e("self-improvement.promoted","Improvement promoted","A qualified candidate was promoted within delegated authority."),SelfImprovementRolledBackEvent=e("self-improvement.rolled_back","Improvement rolled back","The bound rollback plan completed with replay evidence."),SelfImprovementKilledEvent=e("self-improvement.killed","Improvement killed","A kill switch fail-closed the program and active executions."),selfImprovementEvents=[SelfImprovementSignalRecordedEvent,SelfImprovementCandidateProposedEvent,SelfImprovementGateEvaluatedEvent,SelfImprovementReviewRequiredEvent,SelfImprovementReviewDecidedEvent,SelfImprovementShadowStartedEvent,SelfImprovementShadowStoppedEvent,SelfImprovementShadowComparedEvent,SelfImprovementCanaryStartedEvent,SelfImprovementCanaryStoppedEvent,SelfImprovementCanaryComparedEvent,SelfImprovementObservationCompletedEvent,SelfImprovementPromotedEvent,SelfImprovementRolledBackEvent,SelfImprovementKilledEvent];

package/dist/node/self-improving-system/index.js

@@ -0,0 +1 @@
+export*from"./constants.js";export*from"./events.js";export*from"./operations.js";export*from"./registry.js";export*from"./transport.js";export*from"./types.js";export*from"./validation.js";

package/dist/node/self-improving-system/operation-definitions.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{defineCommand as l,defineQuery as c}from"../operations/index.js";import{SELF_IMPROVING_SYSTEM_CAPABILITY as s,SELF_IMPROVING_SYSTEM_DOMAIN as v,SELF_IMPROVING_SYSTEM_OWNERS as u,SELF_IMPROVING_SYSTEM_STABILITY as f,SELF_IMPROVING_SYSTEM_TAGS as S}from"./constants.js";const m=new i({name:"SelfImprovementScopedInputV1",fields:{ecosystemId:{type:e.ID(),isOptional:!1},tenantId:{type:e.ID(),isOptional:!1},workspaceId:{type:e.ID(),isOptional:!1},programId:{type:e.ID(),isOptional:!0},resourceId:{type:e.ID(),isOptional:!0},purpose:{type:e.NonEmptyString(),isOptional:!1},idempotencyKey:{type:e.String_unsecure(),isOptional:!0},expectedRevision:{type:e.Int_unsecure(),isOptional:!0},contractFingerprint:{type:e.String_unsecure(),isOptional:!0},traceRef:{type:e.ID(),isOptional:!0},evidenceRefs:{type:e.JSON(),isOptional:!0},payload:{type:e.JSONObject(),isOptional:!0}}}),g=new i({name:"SelfImprovementMutationOutputV1",fields:{receiptId:{type:e.ID(),isOptional:!1},resourceId:{type:e.ID(),isOptional:!1},state:{type:e.String_unsecure(),isOptional:!1},revision:{type:e.Int_unsecure(),isOptional:!1},replayCursor:{type:e.String_unsecure(),isOptional:!1}}}),y=new i({name:"SelfImprovementQueryOutputV1",fields:{items:{type:e.JSONObject(),isOptional:!1},nextCursor:{type:e.String_unsecure(),isOptional:!0},snapshotAt:{type:e.DateTime(),isOptional:!1}}}),p=(a,r,o)=>({key:a,title:r,version:"1.0.0",description:o,goal:o,context:"Every mutation is scope, revision, idempotency, policy, evidence, and compatible-contract gated.",domain:v,owners:[...u],tags:[...S],stability:f}),d={SCOPE_DENIED:{description:"The requested scope is not granted.",http:403},STALE_REVISION:{description:"The expected revision is stale.",http:409},GATE_INCOMPLETE:{description:"Required evaluation gates are incomplete.",http:409},AUTHORITY_STALE:{description:"Bound authority or evidence expired.",http:409}},t=(a,r,o)=>l({meta:p(a,r,o),capability:{...s},io:{input:m,output:g,errors:d},policy:{auth:"user",pii:[]}}),n=(a,r,o)=>c({meta:p(a,r,o),capability:{...s},io:{input:m,output:y,errors:d},policy:{auth:"user",pii:[]}});export const SelfImprovementProgramUpsertCommand=t("self-improvement.program.upsert","Upsert improvement program","Create or revise a governed improvement program."),SelfImprovementProgramListQuery=n("self-improvement.program.list","List improvement programs","List authorized improvement programs."),SelfImprovementProgramGetQuery=n("self-improvement.program.get","Get improvement program","Read one immutable program revision and status."),SelfImprovementProgramDisableCommand=t("self-improvement.program.disable","Disable improvement program","Disable candidate generation and execution for a program."),SelfImprovementSignalIngestCommand=t("self-improvement.signal.ingest","Ingest improvement signal","Ingest sanitized operational or correction evidence."),SelfImprovementSignalListQuery=n("self-improvement.signal.list","List improvement signals","List authorized sanitized signals and evidence refs."),SelfImprovementSignalGetQuery=n("self-improvement.signal.get","Get improvement signal","Read one authorized sanitized signal and its evidence bindings."),SelfImprovementCandidateRequestCommand=t("self-improvement.candidate.request","Request improvement candidate","Request a bounded candidate against an immutable baseline."),SelfImprovementCandidateGetQuery=n("self-improvement.candidate.get","Get improvement candidate","Read candidate state, gates, evidence, and execution bindings."),SelfImprovementCandidateListQuery=n("self-improvement.candidate.list","List improvement candidates","List authorized candidates with immutable baseline and status bindings."),SelfImprovementCandidateCancelCommand=t("self-improvement.candidate.cancel","Cancel improvement candidate","Cancel a candidate before promotion and preserve its receipts."),SelfImprovementEvaluationStatusQuery=n("self-improvement.evaluation.status","Get improvement evaluation status","Read offline, holdout, adversarial, and independent evaluation evidence."),SelfImprovementGateStatusQuery=n("self-improvement.gate.status","Get improvement gate status","Read G01-G25 and policy gate decisions bound to one candidate revision."),SelfImprovementReviewRequestCommand=t("self-improvement.review.request","Request improvement review","Request an independent review after generator and evaluator separation checks."),SelfImprovementReviewDecideCommand=t("self-improvement.review.decide","Decide improvement review","Record an independent approval or rejection."),SelfImprovementShadowStartCommand=t("self-improvement.shadow.start","Start improvement shadow","Start a bounded no-effect shadow execution after evaluation gates pass."),SelfImprovementShadowStopCommand=t("self-improvement.shadow.stop","Stop improvement shadow","Stop a shadow execution and preserve its observation evidence."),SelfImprovementShadowCompareQuery=n("self-improvement.shadow.compare","Compare improvement shadow","Compare exact baseline and shadow observations without promoting effects."),SelfImprovementCanaryStartCommand=t("self-improvement.canary.start","Start improvement canary","Start an authority-bound canary after required gates pass."),SelfImprovementCanaryStopCommand=t("self-improvement.canary.stop","Stop improvement canary","Stop a canary and preserve observation evidence."),SelfImprovementCanaryCompareQuery=n("self-improvement.canary.compare","Compare improvement canary","Compare exact baseline and canary observations over the bound window."),SelfImprovementObservationStatusQuery=n("self-improvement.observation.status","Get improvement observation status","Read observation samples, expiry, regressions, and rollback readiness."),SelfImprovementPromoteCommand=t("self-improvement.promote","Promote improvement candidate","Promote a healthy candidate within delegated authority."),SelfImprovementRollbackCommand=t("self-improvement.rollback","Rollback improvement candidate","Execute the bound rollback plan and emit an exact receipt."),SelfImprovementKillCommand=t("self-improvement.kill","Kill improvement program","Fail-close a program and its active executions."),SelfImprovementReplayQuery=n("self-improvement.replay.get","Replay improvement lifecycle","Replay ordered lifecycle receipts and verify state digests.");

package/dist/node/self-improving-system/operations.js

@@ -0,0 +1 @@
+import*as e from"./operation-definitions.js";export*from"./operation-definitions.js";export const selfImprovementOperations=[e.SelfImprovementProgramUpsertCommand,e.SelfImprovementProgramListQuery,e.SelfImprovementProgramGetQuery,e.SelfImprovementProgramDisableCommand,e.SelfImprovementSignalIngestCommand,e.SelfImprovementSignalGetQuery,e.SelfImprovementSignalListQuery,e.SelfImprovementCandidateRequestCommand,e.SelfImprovementCandidateGetQuery,e.SelfImprovementCandidateListQuery,e.SelfImprovementCandidateCancelCommand,e.SelfImprovementEvaluationStatusQuery,e.SelfImprovementGateStatusQuery,e.SelfImprovementReviewRequestCommand,e.SelfImprovementReviewDecideCommand,e.SelfImprovementShadowStartCommand,e.SelfImprovementShadowStopCommand,e.SelfImprovementShadowCompareQuery,e.SelfImprovementCanaryStartCommand,e.SelfImprovementCanaryStopCommand,e.SelfImprovementCanaryCompareQuery,e.SelfImprovementObservationStatusQuery,e.SelfImprovementPromoteCommand,e.SelfImprovementRollbackCommand,e.SelfImprovementKillCommand,e.SelfImprovementReplayQuery];

package/dist/node/self-improving-system/registry.js

@@ -0,0 +1 @@
+import{selfImprovementEvents as r}from"./events.js";import{selfImprovementOperations as o}from"./operations.js";export const selfImprovementOperationRegistry=Object.fromEntries(o.map((e)=>[e.meta.key,e])),selfImprovementEventRegistry=Object.fromEntries(r.map((e)=>[e.meta.key,e]));export function assertUniqueSelfImprovementContractKeys(){const e=[...o.map((t)=>t.meta.key),...r.map((t)=>t.meta.key)];if(new Set(e).size!==e.length)throw Error("SELF_IMPROVEMENT_CONTRACT_KEY_COLLISION")}

package/dist/node/self-improving-system/transport.js

@@ -0,0 +1 @@
+const s=["rest","sdk","mcp","cli"],e=(a,t,r,n)=>({operationKey:a,method:t,path:r,transports:s,requiredGrant:n});export const selfImprovementTransportBindingsV1=[e("self-improvement.program.upsert","POST","/programs","admin"),e("self-improvement.program.list","GET","/programs","read"),e("self-improvement.program.get","GET","/programs/:programId","read"),e("self-improvement.program.disable","POST","/programs/:programId/disable","admin"),e("self-improvement.signal.ingest","POST","/signals","propose"),e("self-improvement.signal.list","GET","/signals","read"),e("self-improvement.signal.get","GET","/signals/:signalId","read"),e("self-improvement.candidate.request","POST","/candidates","propose"),e("self-improvement.candidate.list","GET","/candidates","read"),e("self-improvement.candidate.get","GET","/candidates/:candidateId","read"),e("self-improvement.candidate.cancel","POST","/candidates/:candidateId/cancel","execute"),e("self-improvement.evaluation.status","GET","/candidates/:candidateId/evaluation","read"),e("self-improvement.gate.status","GET","/candidates/:candidateId/gates","read"),e("self-improvement.review.request","POST","/candidates/:candidateId/review-requests","execute"),e("self-improvement.review.decide","POST","/candidates/:candidateId/review","review"),e("self-improvement.shadow.start","POST","/candidates/:candidateId/shadow","execute"),e("self-improvement.shadow.stop","POST","/candidates/:candidateId/shadow/stop","execute"),e("self-improvement.shadow.compare","GET","/candidates/:candidateId/shadow/comparison","read"),e("self-improvement.canary.start","POST","/candidates/:candidateId/canary","execute"),e("self-improvement.canary.stop","POST","/candidates/:candidateId/canary/stop","execute"),e("self-improvement.canary.compare","GET","/candidates/:candidateId/canary/comparison","read"),e("self-improvement.observation.status","GET","/candidates/:candidateId/observation","read"),e("self-improvement.promote","POST","/candidates/:candidateId/promote","execute"),e("self-improvement.rollback","POST","/candidates/:candidateId/rollback","execute"),e("self-improvement.kill","POST","/programs/:programId/kill","admin"),e("self-improvement.replay.get","GET","/events","read")],selfImprovementDeliveryTransportsV1=["webhook","sse","websocket"];

package/dist/node/self-improving-system/types.js

@@ -0,0 +1 @@
+export const SELF_IMPROVEMENT_PROGRAM_V1="contractspec.self-improvement.program.v1",SELF_IMPROVEMENT_CANDIDATE_V1="contractspec.self-improvement.candidate.v1",SELF_IMPROVEMENT_EXECUTION_ENVELOPE_V1="contractspec.self-improvement.execution-envelope.v1",SELF_IMPROVEMENT_LIFECYCLE_RECEIPT_V1="contractspec.self-improvement.lifecycle-receipt.v1",SELF_IMPROVEMENT_MUTATION_ENVELOPE_V1="contractspec.self-improvement.mutation-envelope.v1",selfImprovingSystemV1DocBlock={id:"self-improving-system-v1",title:"Governed self-improving system V1",body:"Additive contracts bind improvement programs and candidates to immutable goals, budgets, policy, offline and independent evaluation, G01-G25 evidence, shadow and canary comparisons, Connect decisions, Builder receipts, LSSM plans, Runtime Node V2 work orders, observation, rollback, and exact replay. Runtime artifacts may use qualified automation; repository, schema, data-authority, security, and infrastructure changes remain approval-bound and repository work never self-applies.",kind:"reference",route:"packages/libs/contracts-spec/src/self-improving-system/types.ts",visibility:"public"};

package/dist/node/self-improving-system/validation.js

@@ -0,0 +1 @@
+import{z as t}from"zod";import{improvementObservationPlanV1Schema as s}from"../ai-improvement/validation-v2.js";import{SELF_IMPROVEMENT_AUTONOMY_LEVELS as m,SELF_IMPROVEMENT_CANDIDATE_KINDS as c,SELF_IMPROVEMENT_STATUSES as n}from"./constants.js";import{SELF_IMPROVEMENT_CANDIDATE_V1 as d,SELF_IMPROVEMENT_EXECUTION_ENVELOPE_V1 as p,SELF_IMPROVEMENT_LIFECYCLE_RECEIPT_V1 as l,SELF_IMPROVEMENT_MUTATION_ENVELOPE_V1 as u,SELF_IMPROVEMENT_PROGRAM_V1 as f}from"./types.js";const e=t.string().trim().min(1),r=t.number().int().positive(),a=e;export const immutableArtifactRefV1Schema=t.object({id:e,digest:e,version:e}).strict(),selfImprovementMutationEnvelopeV1Schema=t.object({schemaVersion:t.literal(u),idempotencyKey:e,expectedRevision:t.number().int().nonnegative(),contractFingerprint:e,traceRef:e,evidenceRefs:t.array(e).min(1)}).strict();const E=t.object({ecosystemId:e,tenantId:e,workspaceId:e,programId:e,jurisdiction:e,purpose:e}).strict();export const selfImprovementProgramV1Schema=t.object({schemaVersion:t.literal(f),id:e,revision:r,scope:E,goalRevision:immutableArtifactRefV1Schema,signalKinds:t.array(t.enum(["user_feedback","operational_metric","runtime_failure","evaluation_failure","operator_correction"])).min(1),allowedCandidateTargets:t.array(e).min(1),evaluationSuiteRefs:t.array(immutableArtifactRefV1Schema).min(1),requiredGateIds:t.array(e).min(1),observationPlan:s,autonomy:t.enum(m),budget:t.object({currency:e,maximumCost:t.number().finite().nonnegative(),maximumRuntimeMs:r,maximumCandidates:r,reservationRef:e}).strict(),deploymentProfile:t.object({mode:t.enum(["logical","runtime_isolated","data_isolated"]),region:e,credentialScopeRef:e,networkPolicyRef:e,dataPolicyRef:e}).strict(),killSwitchKey:e,enabled:t.boolean(),createdAt:a,updatedAt:a,expiresAt:a}).strict().superRefine((o,i)=>{if(o.scope.programId!==o.id)i.addIssue({code:"custom",path:["scope","programId"],message:"scope programId must equal id"});if(o.autonomy==="auto_apply_qualified"&&!o.killSwitchKey)i.addIssue({code:"custom",path:["killSwitchKey"],message:"qualified automation requires a kill switch"})}),selfImprovementCandidateV1Schema=t.object({schemaVersion:t.literal(d),id:e,programId:e,programRevision:r,kind:t.enum(c),status:t.enum(n),baseline:immutableArtifactRefV1Schema,candidate:immutableArtifactRefV1Schema,risk:t.enum(["low","medium","high","unknown"]),targetRefs:t.array(e).min(1),allowedCapabilities:t.array(e),allowedPaths:t.array(e),generatorIdentityRef:e,evaluatorIdentityRef:e,approverIdentityRef:e.optional(),rollbackRef:e,createdAt:a,expiresAt:a}).strict().superRefine((o,i)=>{if(o.generatorIdentityRef===o.evaluatorIdentityRef)i.addIssue({code:"custom",path:["evaluatorIdentityRef"],message:"generator and evaluator must be independent"});if(o.kind==="repository_work_item"&&o.allowedPaths.length===0)i.addIssue({code:"custom",path:["allowedPaths"],message:"repository work requires bounded paths"})}),selfImprovementExecutionEnvelopeV1Schema=t.object({schemaVersion:t.literal(p),id:e,program:immutableArtifactRefV1Schema,goal:immutableArtifactRefV1Schema,policy:immutableArtifactRefV1Schema,budgetReservation:immutableArtifactRefV1Schema,gateBundle:immutableArtifactRefV1Schema,lssmPlan:immutableArtifactRefV1Schema,connectDecision:immutableArtifactRefV1Schema,approval:immutableArtifactRefV1Schema.optional(),approvalVerification:immutableArtifactRefV1Schema.optional(),runtimeWorkOrder:immutableArtifactRefV1Schema.optional(),patchRunReceipt:immutableArtifactRefV1Schema.optional(),canary:immutableArtifactRefV1Schema.optional(),observation:immutableArtifactRefV1Schema,rollback:immutableArtifactRefV1Schema,replay:immutableArtifactRefV1Schema,issuedAt:a,expiresAt:a}).strict().refine((o)=>Boolean(o.runtimeWorkOrder)!==Boolean(o.patchRunReceipt),{message:"exactly one execution authority must be bound",path:["runtimeWorkOrder"]}).refine((o)=>Boolean(o.approval)===Boolean(o.approvalVerification),{message:"approval and approval verification must be bound together",path:["approvalVerification"]}),selfImprovementLifecycleReceiptV1Schema=t.object({schemaVersion:t.literal(l),id:e,candidateId:e,fromStatus:t.enum(n),toStatus:t.enum(n),actorIdentityRef:e,decisionRef:e,evidenceRefs:t.array(immutableArtifactRefV1Schema).min(1),previousStateDigest:e,resultingStateDigest:e,occurredAt:a}).strict();

package/dist/node/serialization/index.js

@@ -0,0 +1 @@
+export*from"./serializers.js";export*from"./types.js";

package/dist/node/serialization/serializers.js

@@ -0,0 +1 @@
+function r(e){return typeof e==="object"&&e!==null&&"kind"in e&&e.kind==="resource_ref"}function o(e){if(!e)return"unknown";if(typeof e==="string")return e;if(typeof e==="object"){if("config"in e&&e.config?.name)return e.config.name;if("name"in e&&typeof e.name==="string")return e.name}return"unknown"}export function serializeSchemaModel(e){if(!e)return null;if(r(e))return{name:`ResourceRef<${e.graphQLType}>`,description:`Reference to ${e.graphQLType} resource (${e.uriTemplate})`,fields:{}};if("config"in e&&e.config){const n=e.config;return{name:n.name,description:n.description,fields:Object.fromEntries(Object.entries(n.fields).map(([i,t])=>[i,{typeName:o(t.type),isOptional:t.isOptional,isArray:t.isArray}]))}}return{name:"unknown",fields:{}}}export function serializeOperationSpec(e){if(!e)return null;return{meta:{key:e.meta.key,version:e.meta.version,stability:e.meta.stability,owners:e.meta.owners,tags:e.meta.tags,description:e.meta.description,goal:e.meta.goal,context:e.meta.context},io:{input:serializeSchemaModel(e.io.input),output:serializeSchemaModel(e.io.output)},policy:e.policy?{auth:e.policy.auth}:void 0}}export function serializeEventSpec(e){if(!e)return null;return{meta:{key:e.meta.key,version:e.meta.version,stability:e.meta.stability,owners:e.meta.owners,tags:e.meta.tags,description:e.meta.description},payload:serializeSchemaModel(e.payload)}}export function serializePresentationSpec(e){if(!e)return null;return{meta:{key:e.meta.key,version:e.meta.version,stability:e.meta.stability,owners:e.meta.owners,tags:e.meta.tags,description:e.meta.description,goal:e.meta.goal,context:e.meta.context},source:{type:e.source.type,framework:e.source.type==="component"?e.source.framework:void 0,componentKey:e.source.type==="component"?e.source.componentKey:void 0},targets:e.targets}}export function serializeDataViewSpec(e){if(!e)return null;return{meta:{key:e.meta.key,version:e.meta.version,stability:e.meta.stability,owners:e.meta.owners,tags:e.meta.tags,description:e.meta.description,title:e.meta.title},source:e.source,view:e.view}}export function serializeFormSpec(e){if(!e)return null;return{meta:{key:e.meta.key,version:e.meta.version,stability:e.meta.stability,owners:e.meta.owners,tags:e.meta.tags,description:e.meta.description,title:e.meta.title},fields:e.fields,actions:e.actions}}

package/dist/node/shared/attach-context.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as n,SchemaModel as e}from"@lssm/lib.schema";export const ATTACH_CONTEXT_KINDS=["review","governance","agent","admin","system"],AttachContextSchema=new e({name:"AttachContext",fields:{kind:{type:n.NonEmptyString(),isOptional:!1},refId:{type:n.String_unsecure(),isOptional:!0}}});export function isAttachContextKind(t){return typeof t==="string"&&ATTACH_CONTEXT_KINDS.includes(t)}export function validateAttachContext(t){if(!isAttachContextKind(t.kind))return`AttachContext.kind must be one of ${ATTACH_CONTEXT_KINDS.join(", ")}; got "${t.kind}".`;if(t.kind!=="admin"&&(!t.refId||t.refId.length===0))return`AttachContext.refId is required when kind is "${t.kind}".`;return null}

package/dist/node/shared/audit.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as n}from"@lssm/lib.schema";export const AUDIT_RETENTION_CLASSES=["regulatory","operational","ephemeral"],AuditRecordSummarySchema=new n({name:"AuditRecordSummary",fields:{id:{type:t.ID(),isOptional:!1},eventKind:{type:t.NonEmptyString(),isOptional:!1},retentionClass:{type:t.NonEmptyString(),isOptional:!1},occurredAt:{type:t.DateTime(),isOptional:!1}}});export function isAuditRetentionClass(e){return typeof e==="string"&&AUDIT_RETENTION_CLASSES.includes(e)}

package/dist/node/shared/idempotency-shape.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t}from"@lssm/lib.schema";export const IDEMPOTENCY_KEY_MAX_LENGTH=128;export function validateIdempotencyKey(e){if(typeof e!=="string")return"IdempotencyKey must be a string.";if(e.length===0)return"IdempotencyKey must not be empty.";if(e.length>IDEMPOTENCY_KEY_MAX_LENGTH)return`IdempotencyKey must be ≤${IDEMPOTENCY_KEY_MAX_LENGTH} characters (got ${e.length}).`;return null}export const IDEMPOTENCY_NAMESPACE_AGENT_WORKFLOW_PILLAR="fcc6a2c5-0f9d-55f8-a711-2666a129bdee",IdempotencyKeyScalar=t.String_unsecure();

package/dist/node/shared/idempotency.js

@@ -0,0 +1 @@
+import{bytesToHex as s,sha1 as c}from"@lssm/lib.crypto-utils";export{IDEMPOTENCY_KEY_MAX_LENGTH,IDEMPOTENCY_NAMESPACE_AGENT_WORKFLOW_PILLAR,IdempotencyKeyScalar,validateIdempotencyKey}from"./idempotency-shape.js";export function deriveIdempotencyKey(n,...e){if(!y(n))throw Error(`deriveIdempotencyKey: namespace must be a canonical UUID; got "${n}".`);if(e.length===0)throw Error("deriveIdempotencyKey: at least one seed part is required.");const r=e.map((t)=>String(t)).join("");return uuidV5(n,r)}const a=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;function y(n){return a.test(n)}function l(n){const e=n.replace(/-/g,""),r=new Uint8Array(e.length/2);for(let t=0;t<r.length;t+=1)r[t]=Number.parseInt(e.slice(t*2,t*2+2),16);return r}function d(n){const e=s(n);return`${e.slice(0,8)}-${e.slice(8,12)}-${e.slice(12,16)}-${e.slice(16,20)}-${e.slice(20,32)}`}export function uuidV5(n,e){const r=l(n),t=new TextEncoder().encode(e),i=new Uint8Array(r.length+t.length);i.set(r);i.set(t,r.length);const o=c(i).slice(0,16);o[6]=(o[6]??0)&15|80;o[8]=(o[8]??0)&63|128;return d(o)}

package/dist/node/shared/index.d.js

@@ -0,0 +1 @@
+export*from"./attach-context.js";export*from"./audit.js";export*from"./idempotency-shape.js";export*from"./window.js";

package/dist/node/shared/index.js

@@ -0,0 +1 @@
+export*from"./attach-context.js";export*from"./audit.js";export*from"./idempotency-shape.js";export*from"./window.js";

package/dist/node/shared/window.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as t,SchemaModel as i}from"@lssm/lib.schema";export const WINDOW_GRANULARITIES=["minute","hour","day","week","month"],WindowDescriptorSchema=new i({name:"WindowDescriptor",fields:{from:{type:t.DateTime(),isOptional:!1},to:{type:t.DateTime(),isOptional:!1},granularity:{type:t.NonEmptyString(),isOptional:!1}}});export function isWindowGranularity(r){return typeof r==="string"&&WINDOW_GRANULARITIES.includes(r)}export function validateWindowDescriptor(r){if(!isWindowGranularity(r.granularity))return`WindowDescriptor.granularity must be one of ${WINDOW_GRANULARITIES.join(", ")}; got "${r.granularity}".`;const o=Date.parse(r.from),e=Date.parse(r.to);if(Number.isNaN(o))return`WindowDescriptor.from is not a valid ISO-8601 timestamp: "${r.from}".`;if(Number.isNaN(e))return`WindowDescriptor.to is not a valid ISO-8601 timestamp: "${r.to}".`;if(e<=o)return`WindowDescriptor.to (${r.to}) must be strictly greater than from (${r.from}).`;return null}

package/dist/node/shared-entities/index.js

@@ -0,0 +1 @@
+export{PersonEntity,shared_entities_person_DocBlocks}from"./person.js";export{ProjectEntity,shared_entities_project_DocBlocks}from"./project.js";export{ResourceEntity,shared_entities_resource_DocBlocks}from"./resource.js";export{SharedTaskStatusEnum,shared_entities_task_DocBlocks,TaskEntity}from"./task.js";export{shared_entities_task_validators_DocBlocks,validateAgentTask,validateAgentTasks,validateWorkflowTask,validateWorkflowTasks}from"./task-validators.js";export{shared_entities_team_DocBlocks,TeamEntity}from"./team.js";

package/dist/node/shared-entities/person.js

@@ -0,0 +1,12 @@
+import{defineContractEntity as t}from"../entities/defineContractEntity.js";export const PersonEntity=t({meta:{key:"person",version:"1.0.0",description:"A human actor in the system — user, team member, or contact.",title:"Person",domain:"shared",stability:"stable",owners:["platform.core"],tags:["person","shared","cross-domain"]},edges:[{id:"person-to-team",from:"person",to:"team",relation:"member-of",cardinality:"many-to-many",directed:!0,label:"Member of",inverse:"team-to-person"},{id:"person-to-project",from:"person",to:"project",relation:"contributes-to",cardinality:"many-to-many",directed:!0,label:"Contributes to",inverse:"project-to-person"},{id:"person-to-task",from:"person",to:"task",relation:"assigned-to",cardinality:"one-to-many",directed:!0,label:"Assigned tasks",inverse:"task-to-person"}]}),shared_entities_person_DocBlocks=[{id:"docs.tech.contracts.shared-entities.person",title:"PersonEntity — Cross-Domain Person Contract Entity",summary:"`PersonEntity` is the canonical cross-domain entity for a human actor. Layer 1: `person` slug with edges to team, project, and task.",kind:"reference",visibility:"public",route:"/docs/tech/contracts/shared-entities/person",tags:["tech","contracts","shared-entities","person"],body:`# PersonEntity
+
+Layer 1 (M2): slug + edges. Entity key: \`'person'\`.
+
+## Edges
+
+| ID | From | To | Relation | Cardinality |
+|----|----|----|----|----|
+| \`person-to-team\` | person | team | member-of | many-to-many |
+| \`person-to-project\` | person | project | contributes-to | many-to-many |
+| \`person-to-task\` | person | task | assigned-to | one-to-many |
+`}];

package/dist/node/shared-entities/project.js

@@ -0,0 +1,4 @@
+import{defineContractEntity as t}from"../entities/defineContractEntity.js";export const ProjectEntity=t({meta:{key:"project",version:"1.0.0",description:"A bounded initiative owned by a team, involving persons and tasks.",title:"Project",domain:"shared",stability:"stable",owners:["platform.core"],tags:["project","shared","cross-domain"]},edges:[{id:"project-to-team",from:"project",to:"team",relation:"owned-by",cardinality:"many-to-one",directed:!0,label:"Owned by",inverse:"team-to-project"},{id:"project-to-person",from:"project",to:"person",relation:"contributed-by",cardinality:"many-to-many",directed:!0,label:"Contributors",inverse:"person-to-project"},{id:"project-to-task",from:"project",to:"task",relation:"has-task",cardinality:"one-to-many",directed:!0,label:"Tasks",inverse:"task-to-project"},{id:"project-to-resource",from:"project",to:"resource",relation:"uses",cardinality:"many-to-many",directed:!0,label:"Resources"}]}),shared_entities_project_DocBlocks=[{id:"docs.tech.contracts.shared-entities.project",title:"ProjectEntity — Cross-Domain Project Contract Entity",summary:"`ProjectEntity` is the canonical cross-domain entity for a bounded initiative. Layer 1: `project` slug with edges to team, person, task, resource.",kind:"reference",visibility:"public",route:"/docs/tech/contracts/shared-entities/project",tags:["tech","contracts","shared-entities","project"],body:`# ProjectEntity
+
+Layer 1 (M2): slug + edges. Entity key: \`'project'\`.
+`}];

package/dist/node/shared-entities/resource.js

@@ -0,0 +1,4 @@
+import{defineContractEntity as e}from"../entities/defineContractEntity.js";export const ResourceEntity=e({meta:{key:"resource",version:"1.0.0",description:"A managed asset (credential, compute, budget, external service) used by teams and projects.",title:"Resource",domain:"shared",stability:"stable",owners:["platform.core"],tags:["resource","shared","cross-domain"]},edges:[{id:"resource-to-team",from:"resource",to:"team",relation:"managed-by",cardinality:"many-to-one",directed:!0,label:"Managed by",inverse:"team-to-resource"},{id:"resource-to-project",from:"resource",to:"project",relation:"used-by",cardinality:"many-to-many",directed:!0,label:"Used by projects",inverse:"project-to-resource"}]}),shared_entities_resource_DocBlocks=[{id:"docs.tech.contracts.shared-entities.resource",title:"ResourceEntity — Cross-Domain Resource Contract Entity",summary:"`ResourceEntity` is the canonical cross-domain entity for a managed asset. Layer 1: `resource` slug with edges to team and project.",kind:"reference",visibility:"public",route:"/docs/tech/contracts/shared-entities/resource",tags:["tech","contracts","shared-entities","resource"],body:`# ResourceEntity
+
+Layer 1 (M2): slug + edges. Entity key: \`'resource'\`.
+`}];

package/dist/node/shared-entities/task-validators.js

@@ -0,0 +1 @@
+export function validateWorkflowTask(t){if(t.parent!==void 0)return{valid:!1,error:`workflow tasks must not have 'parent' set (A9 invariant): task '${t.id}' has parent='${t.parent}'. Remove 'parent' or use validateAgentTask() instead.`};return{valid:!0}}export function validateWorkflowTasks(t){for(const a of t){const e=validateWorkflowTask(a);if(!e.valid)return e}return{valid:!0}}export function validateAgentTask(t){if(t.dependsOn!==void 0&&t.dependsOn.length>0)return{valid:!1,error:`agent tasks must not have 'dependsOn' set (A9 invariant): task '${t.id}' has dependsOn=[${t.dependsOn.join(", ")}]. Remove 'dependsOn' or use validateWorkflowTask() instead.`};return{valid:!0}}export function validateAgentTasks(t){for(const a of t){const e=validateAgentTask(a);if(!e.valid)return e}return{valid:!0}}export const shared_entities_task_validators_DocBlocks=[{id:"docs.tech.contracts.shared-entities.task-validators",title:"Task Validators — Dual Workflow/Agent Runtime Validators (A9)",summary:"`validateWorkflowTask` rejects tasks with `parent`; `validateAgentTask` rejects tasks with `dependsOn`. Both enforce the A9 invariant at runtime.",kind:"reference",visibility:"public",route:"/docs/tech/contracts/shared-entities/task-validators",tags:["tech","contracts","shared-entities","task","validators","a9"],body:"# Task Validators (A9)\n\n| Function | Context | Rejects |\n|----------|---------|--------|\n| `validateWorkflowTask` | Workflow DAG | `parent` set |\n| `validateWorkflowTasks` | Workflow DAG (batch) | first task with `parent` |\n| `validateAgentTask` | Agent tree | `dependsOn` set |\n| `validateAgentTasks` | Agent tree (batch) | first task with `dependsOn` |\n"}];

package/dist/node/shared-entities/task.js

@@ -0,0 +1 @@
+import{defineContractEntity as e}from"../entities/defineContractEntity.js";export const SharedTaskStatusEnum={Pending:"pending",InProgress:"in_progress",Completed:"completed",Failed:"failed",Skipped:"skipped",Cancelled:"cancelled"},TaskEntity=e({meta:{key:"task",version:"1.0.0",description:"A unit of work in a workflow DAG or agent task tree. Supports both dependsOn (DAG) and parent (tree) as optional fields per A9 invariant.",title:"Task",domain:"shared",stability:"stable",owners:["platform.core"],tags:["task","shared","cross-domain","workflow","agent"]},edges:[{id:"task-to-project",from:"task",to:"project",relation:"belongs-to",cardinality:"many-to-one",directed:!0,label:"Project",inverse:"project-to-task"},{id:"task-to-person",from:"task",to:"person",relation:"assigned-to",cardinality:"many-to-one",directed:!0,label:"Assignee",inverse:"person-to-task"}]}),shared_entities_task_DocBlocks=[{id:"docs.tech.contracts.shared-entities.task",title:"SharedTask + TaskEntity — Cross-Context Task (A9 Invariant)",summary:"`SharedTask` carries both `dependsOn?` (workflow DAG) and `parent?` (agent tree) as optional. Validators enforce mutual exclusion per A9. `TaskEntity` is the Layer-1 contract registration.",kind:"reference",visibility:"public",route:"/docs/tech/contracts/shared-entities/task",tags:["tech","contracts","shared-entities","task","a9","workflow","agent"],body:"# SharedTask + TaskEntity\n\n## A9 Invariant\n\n| Field | Context | Validator rejects |\n|-------|---------|------------------|\n| `dependsOn?` | Workflow DAG | Agent validator |\n| `parent?` | Agent tree | Workflow validator |\n\nBoth `undefined` → root task (valid in either context).\n\n## V2 Execution Fields (Path B parity)\n\n- `type`: `automation` (default) | `human` | `decision`\n- `operation?: OpRef` — dispatched by the V2 runner's OperationExecutor\n- `guard?` — expression or policy guard evaluated before execution; task skipped on false\n- `retry?` — fixed/exponential backoff with configurable attempts, delay, and cap\n- `timeoutMs?` — per-task timeout; raises `WorkflowExecutionError('timeout')`\n- `requiredIntegrations?` — slot IDs checked during pre-flight\n- `requiredCapabilities?` — CapabilityRefs checked during pre-flight\n"}];