@lssm/lib.contracts-spec 17.3.2

package/dist/node/visual-scenarios/validation.js

@@ -0,0 +1 @@
+import{validateVisualAuthoring as m}from"./validation-authoring.js";export function validateVisualScenario(e,t={}){const n=[],i=(a,r)=>n.push({message:a,path:r});if(!e.meta.key.trim())i("Visual scenario key must not be empty","meta.key");if(!e.meta.version.trim())i("Visual scenario version must not be empty","meta.version");if(!e.meta.description.trim())i("Visual scenario description must not be empty","meta.description");if(!e.meta.owners.length)i("Visual scenario must declare at least one owner","meta.owners");if(!e.meta.tags.length)i("Visual scenario must declare at least one tag","meta.tags");if(!e.surface.trim())i("Visual scenario surface must not be empty","surface");if(!e.presentation.key.trim()||!e.presentation.version.trim())i("Visual scenario must reference a versioned presentation","presentation");if(!e.cases.length)i("Visual scenario must declare at least one case","cases");if(e.capture.classification!=="synthetic"&&e.capture.classification!=="sanitized")i("Capture classification must be synthetic or sanitized","capture.classification");g(e,t,i);V(e,t,i);m(e,t,i);c(e.snapshot,e.capture.external,"snapshot",i);return{valid:n.length===0,errors:n}}function g(e,t,n){if(!t.presentations)return;const i=t.presentations.get(e.presentation.key,e.presentation.version);if(!i){n(`Presentation ${e.presentation.key}.v${e.presentation.version} was not found`,"presentation");return}if(i.source.type!=="component"||i.source.framework!=="react"||!i.targets.includes("react"))n("Visual scenarios require a React presentation","presentation")}function V(e,t,n){const i=new Set;for(const[r,s]of(e.modes??[]).entries()){if(!s.key.trim())n("Visual mode key must not be empty",`modes[${r}].key`);else if(i.has(s.key))n(`Duplicate visual mode ${s.key}`,`modes[${r}]`);i.add(s.key);f(s.parameters,t,`modes[${r}].parameters`,n)}const a=new Set;for(const[r,s]of e.cases.entries()){const o=`cases[${r}]`;if(!s.key.trim())n("Visual case key must not be empty",`${o}.key`);else if(a.has(s.key))n(`Duplicate visual case ${s.key}`,o);a.add(s.key);for(const d of s.modes??[])if(!i.has(d))n(`Unknown visual mode ${d}`,`${o}.modes`);if(s.modes&&new Set(s.modes).size!==s.modes.length)n("Visual case mode references must be unique",`${o}.modes`);l(s.renderBinding,t,`${o}.renderBinding`,n);f(s.args,t,`${o}.args`,n);c(s.snapshot,e.capture.external,`${o}.snapshot`,n)}l(e.renderBinding,t,"renderBinding",n)}function c(e,t,n,i){if(e?.publish&&t!==!0)i("Published snapshots require capture.external to be true",`${n}.publish`);if(e?.publish&&!e.enabled)i("Published snapshots must be enabled",`${n}.enabled`);if(e?.delayMs!==void 0&&e.delayMs<0)i("Snapshot delayMs must be non-negative",`${n}.delayMs`)}function f(e,t,n,i){if(!e)return;u(e,n,(a,r)=>l(a,t,r,i))}function u(e,t,n){if(e===null||typeof e!=="object")return;if("$binding"in e&&typeof e.$binding==="string"){n(e.$binding,`${t}.$binding`);return}if(Array.isArray(e)){e.forEach((i,a)=>u(i,`${t}[${a}]`,n));return}for(const[i,a]of Object.entries(e))u(a,`${t}.${i}`,n)}function l(e,t,n,i){if(e===void 0)return;if(!e.trim()){i("Visual binding must not be empty",n);return}if(!t.bindings)return;const a=t.bindings;if(!(typeof a.has==="function"?a.has(e):t.bindings.includes(e)))i(`Unresolved visual binding ${e}`,n)}

package/dist/node/visualizations/index.js

@@ -0,0 +1 @@
+export{VisualizationRegistry,visualizationKey}from"./registry.js";export{defineVisualization}from"./spec.js";

package/dist/node/visualizations/registry.js

@@ -0,0 +1 @@
+import{SpecContractRegistry as t}from"../registry.js";export function visualizationKey(i){return`${i.meta.key}.v${i.meta.version}`}export class VisualizationRegistry extends t{constructor(i){super("visualization",i)}}

package/dist/node/visualizations/spec.js

@@ -0,0 +1 @@
+export function defineVisualization(i){return i}

package/dist/node/visualizations/types.js

@@ -0,0 +1 @@
+export const tech_contracts_visualizations_graph_DocBlocks=[{id:"docs.tech.contracts.visualizations.graph",title:"Graph & Timeline Visualization Configs",summary:"`GraphVisualizationConfig` and `TimelineVisualizationConfig` extend `VisualizationKind` with `graph` and `timeline` variants for aggregated graph analytics (node-count by dimension, edge-weight measure) and time-axis projections (time dimension + measure series).",kind:"reference",visibility:"public",route:"/docs/tech/contracts/visualizations/graph",tags:["tech","contracts","visualizations","graph","timeline"],body:"# Graph & Timeline Visualization Configs\n\n## GraphVisualizationConfig (`kind: 'graph'`)\n\nAggregated graph analytics view. Use when you want to visualize node\npopulations grouped by a dimension, or edge weights as a measure — not\ninteractive graph topology (use `DataViewGraphSpec` for that).\n\n| Field | Type | Description |\n|-------|------|-------------|\n| `nodeDimension` | `string?` | Dimension key to group/color nodes (e.g. type, status). |\n| `edgeWeightMeasure` | `string?` | Measure key representing edge weight or count. |\n| `layout` | `'force' | 'dag' | 'radial' | 'grid'?` | Default layout algorithm. |\n\n## TimelineVisualizationConfig (`kind: 'timeline'`)\n\nProjects records along a time axis. Use for event/activity charts where the\ngoal is aggregate density or value over time — not interactive graph topology.\n\n| Field | Type | Description |\n|-------|------|-------------|\n| `timeDimension` | `string` | **Required.** Dimension key holding the time value. |\n| `laneDimension` | `string?` | Dimension key for grouping swim-lanes. |\n| `measureSeries` | `string[]?` | Measure keys to render as overlaid chart series. |\n| `endDimension` | `string?` | End-time dimension for span/interval events. |\n\n## Choosing Between VisualizationSpec and DataViewGraphSpec\n\n- Use `VisualizationSpec` with `kind: 'graph' | 'timeline'` for **aggregated\n  analytics** (e.g., charts, dashboards).\n- Use `DataViewGraphSpec` with `view.kind: 'graph' | 'timeline-graph'` for\n  **interactive graph topology** (clickable nodes, editable edges, layout\n  algorithms, node inspector panels).\n"}];

package/dist/node/workflow/adapters/db-adapter.js

@@ -0,0 +1 @@
+export class PrismaStateStore{prisma;constructor(t){this.prisma=t}async create(t){await this.prisma.workflowState.create({data:{id:t.workflowId,name:t.workflowName,version:t.workflowVersion,status:t.status,currentStep:t.currentStep,data:t.data,history:t.history,retryCounts:t.retryCounts??{},createdAt:t.createdAt,updatedAt:t.updatedAt}})}async get(t){const e=await this.prisma.workflowState.findUnique({where:{id:t}});if(!e)return;return{workflowId:e.id,workflowName:e.name,workflowVersion:e.version,currentStep:e.currentStep,data:e.data,history:e.history,retryCounts:e.retryCounts,status:e.status,createdAt:e.createdAt,updatedAt:e.updatedAt}}async update(t,e){const a=await this.get(t);if(!a)throw Error(`Workflow ${t} not found`);const r=e(a),o=await this.prisma.workflowState.update({where:{id:t},data:{status:r.status,currentStep:r.currentStep,data:r.data,history:r.history,retryCounts:r.retryCounts,updatedAt:r.updatedAt}});return{workflowId:o.id,workflowName:o.name,workflowVersion:o.version,currentStep:o.currentStep,data:o.data,history:o.history,retryCounts:o.retryCounts,status:o.status,createdAt:o.createdAt,updatedAt:o.updatedAt}}async list(t){const e={};if(t?.status)e.status=t.status;return(await this.prisma.workflowState.findMany({where:e})).map((r)=>({workflowId:r.id,workflowName:r.name,workflowVersion:r.version,currentStep:r.currentStep,data:r.data,history:r.history,retryCounts:r.retryCounts,status:r.status,createdAt:r.createdAt,updatedAt:r.updatedAt}))}}

package/dist/node/workflow/adapters/file-adapter.js

@@ -0,0 +1 @@
+export function createFileStateStore(t){throw Error("File-backed state store adapter not implemented. Provide a custom adapter that satisfies StateStore.")}

package/dist/node/workflow/adapters/index.js

@@ -0,0 +1 @@
+export*from"./db-adapter.js";export*from"./file-adapter.js";export*from"./memory-store.js";

package/dist/node/workflow/adapters/memory-store.js

@@ -0,0 +1 @@
+function o(t){return{...t,data:n(t.data),history:t.history.map((e)=>({...e,input:n(e.input),output:n(e.output),startedAt:new Date(e.startedAt),completedAt:e.completedAt?new Date(e.completedAt):void 0})),createdAt:new Date(t.createdAt),updatedAt:new Date(t.updatedAt)}}export class InMemoryStateStore{items=new Map;async create(t){if(this.items.has(t.workflowId))throw Error(`Workflow state already exists: ${t.workflowId}`);this.items.set(t.workflowId,o(t))}async get(t){const e=this.items.get(t);return e?o(e):void 0}async update(t,e){const s=this.items.get(t);if(!s)throw Error(`Workflow state not found for ${t}`);const r=o(e(o(s)));this.items.set(t,r);return o(r)}async list(t){const e=[...this.items.values()];return((t?.status)?e.filter((r)=>r.status===t.status):e).map(o)}clear(){this.items.clear()}}function n(t){if(t instanceof Date)return new Date(t.getTime());if(Array.isArray(t))return t.map((e)=>n(e));if(t&&typeof t==="object"){const e={};for(const[s,r]of Object.entries(t))e[s]=n(r);return e}return t}

package/dist/node/workflow/context.js

@@ -0,0 +1 @@
+export class WorkflowContextError extends Error{errorType;workflowId;details;constructor(t,e,r,n){super(r);this.name="WorkflowContextError";this.errorType=t;this.workflowId=e;this.details=n}}class u{state;spec;constructor(t,e){this.state=t;this.spec=e}get workflowId(){return this.state.workflowId}get workflowKey(){return this.state.workflowName}get workflowVersion(){return this.state.workflowVersion}get currentStep(){return this.state.currentStep}get status(){return this.state.status}get data(){return this.state.data}get history(){return this.state.history}getState(){return this.state}getData(t){return this.state.data[t]}isTerminal(){return this.state.status==="completed"||this.state.status==="failed"||this.state.status==="cancelled"}isRunning(){return this.state.status==="running"}getCurrentStepDef(){return this.spec.definition.steps?.find((t)=>t.id===this.state.currentStep)}getRetryCount(t){const e=t??this.state.currentStep;return this.state.retryCounts?.[e]??0}canTransition(t){return(this.spec.definition.transitions??[]).filter((r)=>r.from===this.state.currentStep&&r.to===t).length>0}getAvailableTransitions(){return(this.spec.definition.transitions??[]).filter((t)=>t.from===this.state.currentStep).map((t)=>({from:t.from,to:t.to,label:t.label,condition:t.condition}))}hasNextStep(){return(this.spec.definition.transitions??[]).some((t)=>t.from===this.state.currentStep)}getRemainingTime(t){const e=this.spec.definition.sla;if(!e)return null;const r=Date.now();if(t==="totalDuration"){if(!e.totalDurationMs)return null;const o=r-this.state.createdAt.getTime();return Math.max(0,e.totalDurationMs-o)}const n=e.stepDurationMs?.[t];if(!n)return null;const s=this.state.history.find((o)=>o.stepId===t&&o.status==="running");if(!s)return n;const i=r-s.startedAt.getTime();return Math.max(0,n-i)}isSlaViolated(t){const e=this.getRemainingTime(t);return e!==null&&e<=0}getAllSlaStatuses(){const t=this.spec.definition.sla;if(!t)return[];const e=[],r=Date.now();if(t.totalDurationMs){const n=r-this.state.createdAt.getTime(),s=Math.max(0,t.totalDurationMs-n);e.push({key:"totalDuration",type:"workflow",limitMs:t.totalDurationMs,elapsedMs:n,remainingMs:s,violated:s<=0,percentUsed:n/t.totalDurationMs*100})}if(t.stepDurationMs)for(const[n,s]of Object.entries(t.stepDurationMs)){const i=this.state.history.find((l)=>l.stepId===n&&l.status==="running"),o=i?r-i.startedAt.getTime():0,a=Math.max(0,s-o);e.push({key:n,type:"step",stepId:n,limitMs:s,elapsedMs:o,remainingMs:a,violated:i!==void 0&&a<=0,percentUsed:o/s*100})}return e}hasCompensation(){return this.spec.definition.compensation!==void 0}getCompensableSteps(){const t=this.spec.definition.compensation;if(!t)return[];return t.steps.map((e)=>e.stepId)}getEvents(){const t=[];for(const e of this.state.history){t.push({timestamp:e.startedAt,type:"step_started",stepId:e.stepId,input:e.input});if(e.completedAt){if(e.status==="completed")t.push({timestamp:e.completedAt,type:"step_completed",stepId:e.stepId,output:e.output});else if(e.status==="failed")t.push({timestamp:e.completedAt,type:"step_failed",stepId:e.stepId,error:e.error})}}t.sort((e,r)=>e.timestamp.getTime()-r.timestamp.getTime());return t}}export function createWorkflowContext(t,e){return new u(t,e)}export function calculateWorkflowProgress(t){const e=t.getState(),r=new Set(e.history.filter((s)=>s.status==="completed").map((s)=>s.stepId)),n=r.size+(t.isTerminal()?0:1);if(t.status==="completed")return 100;if(t.status==="failed"||t.status==="cancelled")return r.size>0?Math.min(99,r.size*20):0;return Math.min(99,r.size*20)}export function getWorkflowDuration(t){const e=t.getState();return(t.isTerminal()?e.updatedAt.getTime():Date.now())-e.createdAt.getTime()}export function getAverageStepDuration(t){const e=t.history.filter((n)=>n.status==="completed"&&n.completedAt);if(e.length===0)return 0;return e.reduce((n,s)=>{if(!s.completedAt)return n;const i=s.completedAt.getTime()-s.startedAt.getTime();return n+i},0)/e.length}

package/dist/node/workflow/dag-utils.js

@@ -0,0 +1 @@
+export function detectShape(e){return Array.isArray(e.tasks)&&e.tasks.length>0?"v2":"v1"}export function topoSortTasks(e,f){const o=new Map(e.map((t)=>[t,0])),i=new Map(e.map((t)=>[t,[]]));for(const t of f){i.get(t.from)?.push(t.to);o.set(t.to,(o.get(t.to)??0)+1)}const r=[];for(const[t,n]of o)if(n===0)r.push(t);const s=[];while(r.length>0){const t=r.shift();s.push(t);for(const n of i.get(t)??[]){const g=(o.get(n)??1)-1;o.set(n,g);if(g===0)r.push(n)}}if(s.length!==e.length)throw Error(`[workflow/dag-utils] Cycle detected in task graph. Sorted ${s.length} of ${e.length} tasks.`);return s}

package/dist/node/workflow/expression.js

@@ -0,0 +1 @@
+export function evaluateExpression(t,n){if(!t)return!0;const e=t.trim();if(!e)return!0;const r=m(e,"||");if(r.length>1)return r.some((i)=>evaluateExpression(i,n));const u=m(e,"&&");if(u.length>1)return u.every((i)=>evaluateExpression(i,n));return c(e,n)}function c(t,n){const e=t.trim();if(!e)return!0;if(e.startsWith("!"))return!c(e.slice(1),n);const r=e.match(/^(data|input|output)\.([A-Za-z0-9_.[\]]+)\s*(===|==|!==|!=|>=|<=|>|<)\s*(.+)$/);if(r){const[,s,o,a,p]=r,d=l(s,n,o),g=f(p);return h(d,g,a)}const u=e.match(/^(data|input|output)\.([A-Za-z0-9_.[\]]+)$/);if(u){const[,s,o]=u,a=l(s,n,o);return Boolean(a)}const i=f(e);return Boolean(i)}function h(t,n,e){switch(e){case"===":case"==":return t===n;case"!==":case"!=":return t!==n;case">":return Number(t)>Number(n);case">=":return Number(t)>=Number(n);case"<":return Number(t)<Number(n);case"<=":return Number(t)<=Number(n);default:return!1}}function f(t){const n=(t??"").trim();if(n.startsWith('"')&&n.endsWith('"')||n.startsWith("'")&&n.endsWith("'"))return n.slice(1,-1);if(/^-?\d+(\.\d+)?$/.test(n))return Number(n);if(/^true$/i.test(n))return!0;if(/^false$/i.test(n))return!1;if(/^null$/i.test(n))return null;if(/^undefined$/i.test(n))return;return n}function l(t,n,e){const r=t==="data"?n.data:t==="input"?n.input:n.output;return b(r,e)}function b(t,n){if(t==null)return;if(!n)return t;const e=n.replace(/\[(\d+)\]/g,".$1").split(".").filter(Boolean);let r=t;for(const u of e){if(r==null)return;r=r[u]}return r}function m(t,n){const e=[];let r="",u=!1,i=!1;for(let s=0;s<t.length;s++){const o=t[s];if(!o)continue;const a=t.slice(s,s+n.length);if(o==="'"&&!i){u=!u;r+=o;continue}if(o==='"'&&!u){i=!i;r+=o;continue}if(!u&&!i&&a===n){e.push(r.trim());r="";s+=n.length-1;continue}r+=o}if(r.trim().length)e.push(r.trim());return e}

package/dist/node/workflow/index.js

@@ -0,0 +1 @@
+export*from"./adapters/index.js";export*from"./context.js";export*from"./expression.js";export*from"./runner.js";export*from"./sla-monitor.js";export*from"./spec.js";export*from"./state.js";export*from"./validation.js";export*from"./workflow-devkit.js";export*from"./workflow-sdk.js";

package/dist/node/workflow/runner.js

@@ -0,0 +1 @@
+import{normalizeContractError as W,problemToSafeMessage as k}from"../results/index.js";import{topoSortTasks as R}from"./dag-utils.js";import{evaluateExpression as h}from"./expression.js";function x(){return globalThis.crypto?.randomUUID?.()??`id_${Date.now().toString(36)}_${Math.random().toString(36).slice(2,10)}`}export class WorkflowRunner{config;constructor(t){this.config=t}get timers(){return this.config.timers??globalThis}async preFlightCheck(t,e,r){const d=this.getSpec(t,e);return this.performPreFlight(d,r)}async start(t,e,r){const d=this.getSpec(t,e),a=new Date,p=x(),i=x(),o={workflowId:p,traceId:i,workflowName:d.meta.key,workflowVersion:d.meta.version,currentStep:"",data:{...r??{}},retryCounts:{},history:[],status:"running",createdAt:a,updatedAt:a},s=this.config.appConfigProvider?await this.config.appConfigProvider(o):void 0,n=await this.performPreFlight(d,s);if(!n.canStart)throw new WorkflowPreFlightError(n.issues);await this.config.stateStore.create(o);this.emit("workflow.started",{workflowId:p,traceId:i,workflowName:d.meta.key,workflowVersion:d.meta.version});return p}async executeStep(t,e){const r=await this.getStateOrThrow(t);if(O(r.status))throw Error(`Workflow ${t} is in terminal status "${r.status}".`);return this.executeV2Dag(t,e)}async rollback(t){const e=await this.getStateOrThrow(t),r=this.getSpec(e.workflowName,e.workflowVersion);if(!r.definition.compensation)return;this.emit("workflow.rollback_started",{workflowId:t,traceId:e.traceId});const d=e.history.filter((a)=>a.status==="completed").reverse();for(const a of d){const p=r.definition.compensation.steps.find((i)=>i.stepId===a.stepId);if(p){const i={stepId:a.stepId,originalInput:a.input,originalOutput:a.output,workflowData:e.data};try{const o=this.config.appConfigProvider?await this.config.appConfigProvider(e):void 0,s={workflow:e,resolvedAppConfig:o,integrations:o?.integrations??[],knowledge:o?.knowledge??[],branding:o?.branding,translation:o?.translation,translationResolver:this.config.translationResolver,secretProvider:this.config.secretProvider};await this.config.opExecutor(p.operation,i,s);this.emit("workflow.compensation_step_completed",{workflowId:t,traceId:e.traceId,stepId:a.stepId,compensationOp:p.operation.key})}catch(o){const s=o instanceof Error?o.message:String(o);this.emit("workflow.compensation_step_failed",{workflowId:t,traceId:e.traceId,stepId:a.stepId,compensationOp:p.operation.key,error:s})}}}this.emit("workflow.rollback_completed",{workflowId:t,traceId:e.traceId})}async getState(t){return this.getStateOrThrow(t)}async pause(t){const e=await this.getStateOrThrow(t);if(e.status!=="running")return;const r={...e,status:"paused",updatedAt:new Date};await this.config.stateStore.update(t,()=>r);this.emit("workflow.paused",{workflowId:t,traceId:e.traceId,workflowName:e.workflowName})}async resume(t){const e=await this.getStateOrThrow(t);if(e.status!=="paused")return;const r={...e,status:"running",updatedAt:new Date};await this.config.stateStore.update(t,()=>r);this.emit("workflow.resumed",{workflowId:t,traceId:e.traceId,workflowName:e.workflowName})}async cancel(t){const e=await this.getStateOrThrow(t);if(e.status==="cancelled")return;const r={...e,status:"cancelled",updatedAt:new Date};await this.config.stateStore.update(t,()=>r);this.emit("workflow.cancelled",{workflowId:t,traceId:e.traceId,workflowName:e.workflowName})}async executeV2Dag(t,e){const r=await this.getStateOrThrow(t),d=this.getSpec(r.workflowName,r.workflowVersion),a=d.definition.tasks??[],p=d.definition.edges??[],i=R(a.map((l)=>l.id),p),o=r.data.__v2TaskStatus__??{},s=new Map(i.map((l)=>[l,o[l]??"pending"])),n={...r,data:{...r.data},history:[...r.history],status:"running",wait:void 0},f=r.status==="waiting"&&r.wait?.reason==="human_input"?r.currentStep:void 0;if(f){s.set(f,"completed");if(e!==void 0)n.data={...n.data,[`${f}.output`]:e}}for(const l of i){const m=s.get(l);if(m==="completed"||m==="skipped")continue;const u=a.find((c)=>c.id===l);if(!u)continue;const y=p.filter((c)=>c.to===l),v=y.some((c)=>s.get(c.from)==="skipped"),I=!v&&y.some((c)=>c.runIf!==void 0&&!h(c.runIf,{data:n.data})||c.condition!==void 0&&!h(c.condition,{data:n.data}));if(v||I){s.set(l,"skipped");this.emit("workflow.task_skipped_runIf",{workflowId:t,traceId:r.traceId,taskId:l,taskLabel:u.label});continue}if(u.guard){if(!await this.evalTaskGuard(u.guard,n,u)){s.set(l,"skipped");this.emit("workflow.task_skipped_runIf",{workflowId:t,traceId:r.traceId,taskId:l,taskLabel:u.label});continue}}if(u.type==="human"){n.status="waiting";n.currentStep=l;n.wait={reason:"human_input",stepId:l,requestedAt:new Date};n.data={...n.data,__v2TaskStatus__:Object.fromEntries(s)};n.updatedAt=new Date;await this.config.stateStore.update(t,()=>n);this.emit("workflow.task_waiting",{workflowId:t,traceId:r.traceId,taskId:l,taskLabel:u.label});return}this.emit("workflow.task_started",{workflowId:t,traceId:r.traceId,taskId:l,taskLabel:u.label});try{if(u.operation){const c=this.config.appConfigProvider?await this.config.appConfigProvider(n):void 0,w={workflow:n,resolvedAppConfig:c,integrations:c?.integrations??[],knowledge:c?.knowledge??[],branding:c?.branding,translation:c?.translation,translationResolver:this.config.translationResolver,secretProvider:this.config.secretProvider},b=()=>this.config.opExecutor(u.operation,n.data,w),S=u.retry?C(b,u.retry,this.timers):b(),P=u.timeoutMs?await _(S,u.timeoutMs,this.timers):await S;if(E(P))n.data={...n.data,...P}}s.set(l,"completed");n.updatedAt=new Date;this.emit("workflow.task_completed",{workflowId:t,traceId:r.traceId,taskId:l,taskLabel:u.label})}catch(c){s.set(l,"failed");const w=c instanceof Error?c.message:String(c);n.status="failed";n.data={...n.data,__v2TaskStatus__:Object.fromEntries(s)};n.updatedAt=new Date;await this.config.stateStore.update(t,()=>n);this.emit("workflow.task_failed",{workflowId:t,traceId:r.traceId,taskId:l,taskLabel:u.label,error:w});this.emit("workflow.step_failed",{workflowId:t,traceId:r.traceId,workflowName:r.workflowName,stepId:l,error:w});return}}n.status="completed";n.data={...n.data,__v2TaskStatus__:Object.fromEntries(s)};n.updatedAt=new Date;await this.config.stateStore.update(t,()=>n);this.emit("workflow.step_completed",{workflowId:t,traceId:r.traceId,workflowName:r.workflowName,stepId:"",status:"completed"})}async evalTaskGuard(t,e,r){if(t.type==="expression")return h(t.value,{data:e.data});if(this.config.guardEvaluator){const d={id:r.id,type:r.type??"automation",label:r.label};return this.config.guardEvaluator({type:"policy",value:t.value},{workflow:e,step:d})}return!0}async performPreFlight(t,e){if(!e)return{canStart:!0,issues:[]};const r=[],d=new Map;for(const i of e.integrations)d.set(i.slot.slotId,i);for(const i of t.definition.steps??[])for(const o of i.requiredIntegrations??[]){const s=d.get(o);if(!s){r.push({stepId:i.id,type:"integration",identifier:o,severity:"error",reason:`Integration slot "${o}" is not bound in the resolved app config.`});continue}const n=s.connection.status;if(n==="disconnected"||n==="error")r.push({stepId:i.id,type:"integration",identifier:o,severity:"error",reason:`Integration slot "${o}" is in status "${n}".`});else if(n==="unknown")r.push({stepId:i.id,type:"integration",identifier:o,severity:"warning",reason:`Integration slot "${o}" reports unknown health status.`})}const a=new Set(e.capabilities.enabled.map(g));for(const i of t.definition.steps??[])for(const o of i.requiredCapabilities??[])if(!a.has(g(o)))r.push({stepId:i.id,type:"capability",identifier:g(o),severity:"error",reason:`Capability "${o.key}@${o.version}" is not enabled.`});for(const i of t.definition.tasks??[]){for(const o of i.requiredIntegrations??[]){const s=d.get(o);if(!s){r.push({stepId:i.id,type:"integration",identifier:o,severity:"error",reason:`Integration slot "${o}" is not bound in the resolved app config.`});continue}const n=s.connection.status;if(n==="disconnected"||n==="error")r.push({stepId:i.id,type:"integration",identifier:o,severity:"error",reason:`Integration slot "${o}" is in status "${n}".`});else if(n==="unknown")r.push({stepId:i.id,type:"integration",identifier:o,severity:"warning",reason:`Integration slot "${o}" reports unknown health status.`})}for(const o of i.requiredCapabilities??[])if(!a.has(g(o)))r.push({stepId:i.id,type:"capability",identifier:g(o),severity:"error",reason:`Capability "${o.key}@${o.version}" is not enabled.`})}return{canStart:r.every((i)=>i.severity!=="error"),issues:r}}getSpec(t,e){const r=this.config.registry.get(t,e);if(!r)throw Error(`Workflow spec not found for ${t}${e?`.v${e}`:""}`);return r}async getStateOrThrow(t){const e=await this.config.stateStore.get(t);if(!e)throw Error(`Workflow state not found for ${t}`);return e}emit(t,e){this.config.eventEmitter?.(t,e)}}function E(t){return t!=null&&typeof t==="object"&&!Array.isArray(t)}async function C(t,e,r=globalThis){const{maxAttempts:d,backoff:a="fixed",delayMs:p=0,maxDelayMs:i}=e;let o;for(let s=1;s<=d;s++)try{return await t()}catch(n){o=n;if(s<d&&p>0){const f=a==="exponential"?p*2**(s-1):p,l=i!==void 0?Math.min(f,i):f;await new Promise((m)=>r.setTimeout(m,l))}}throw o}function _(t,e,r=globalThis){let d;const a=new Promise((p,i)=>{d=r.setTimeout(()=>i(new WorkflowExecutionError(`Task timed out after ${e}ms`,"timeout")),e)});return Promise.race([t,a]).finally(()=>{if(d!==void 0)r.clearTimeout(d)})}function O(t){return t==="completed"||t==="failed"||t==="cancelled"}export class WorkflowPreFlightError extends Error{issues;constructor(t){super(`Workflow pre-flight failed: ${t.filter((e)=>e.severity==="error").map((e)=>`${e.type}:${e.identifier}`).join(", ")}`);this.issues=t;this.name="WorkflowPreFlightError"}}export class WorkflowExecutionError extends Error{kind;constructor(t,e){super(t);this.kind=e;this.name="WorkflowExecutionError"}}function g(t){return`${t.key}@${t.version}`}function M(t){const e=W(t,{source:{service:"workflow"}});if(t instanceof WorkflowExecutionError){const a=T(e.problem,t.kind);return{kind:t.kind,message:k(a),retryable:t.kind==="retryable"||t.kind==="timeout",problem:a}}const r=A(t);if(r){const a=T(e.problem,r);return{kind:r,message:k(a),retryable:r==="retryable"||r==="timeout",problem:a}}return{kind:e.problem.retryable?"retryable":"fatal",message:k(e.problem),retryable:e.problem.retryable,problem:e.problem}}function T(t,e){const r=e==="retryable"||e==="timeout";return{...t,category:e==="policy_blocked"?"policy":e==="guard_rejected"?"workflow":e==="timeout"?"timeout":t.category,retryable:r}}function K(t){if(t instanceof Date)return Math.max(0,t.getTime()-Date.now());if(typeof t==="number")return Math.max(0,t);return}function A(t){if(typeof t!=="object"||t===null||!("kind"in t))return;const e=t.kind;if(e==="fatal"||e==="retryable"||e==="timeout"||e==="guard_rejected"||e==="policy_blocked")return e;return}

package/dist/node/workflow/sla-monitor.js

@@ -0,0 +1 @@
+export class SLAMonitor{eventEmitter;constructor(t){this.eventEmitter=t}check(t,a){const e=a.definition.sla;if(!e)return;const n=new Date().getTime();if(e.totalDurationMs){const o=n-t.createdAt.getTime();if(o>e.totalDurationMs){if(t.status==="running"||t.status==="paused"||t.status==="waiting")this.eventEmitter("workflow.sla_breach",{workflowId:t.workflowId,workflowName:t.workflowName,type:"workflow_duration",expectedMs:e.totalDurationMs,actualMs:o,breachedAt:new Date})}}if(e.stepDurationMs){if(t.status==="running"&&t.currentStep){const o=t.history.find((r)=>r.stepId===t.currentStep&&r.status==="running");if(o){const r=e.stepDurationMs[t.currentStep];if(r){const i=n-o.startedAt.getTime();if(i>r)this.eventEmitter("workflow.sla_breach",{workflowId:t.workflowId,workflowName:t.workflowName,type:"step_duration",stepId:t.currentStep,expectedMs:r,actualMs:i,breachedAt:new Date})}}}}}}

package/dist/node/workflow/spec.js

@@ -0,0 +1 @@
+import{SpecContractRegistry as t}from"../registry.js";export const defineWorkflow=(e)=>e;export class WorkflowRegistry extends t{constructor(e){super("workflow",e)}}export const tech_workflows_overview_DocBlocks=[{id:"docs.tech.workflows.overview",title:"WorkflowSpec Overview",summary:"WorkflowSpec provides a declarative, versioned format for long-running flows that mix automation and human review, including runtime adapter capabilities/ports for checkpointing, suspend-resume orchestration, and explicit waiting/retry states. Specs stay inside `@lssm/lib.contracts-spec` (`src/workflow/spec.ts`) so the same definition powers runtime execution, documentation, and future generation.",kind:"reference",visibility:"public",route:"/docs/tech/workflows/overview",tags:["tech","workflows","overview"],body:"# WorkflowSpec Overview\n\n## Purpose\n\nWorkflowSpec provides a declarative, versioned format for long-running flows that mix automation and human review. Specs stay inside `@lssm/lib.contracts-spec` (`src/workflow/spec.ts`) so the same definition powers runtime execution, documentation, and future generation.\n\n## Core Types\n\n- `WorkflowMeta`: ownership metadata (`title`, `domain`, `owners`, `tags`, `stability`) plus `name` and `version`.\n- `WorkflowDefinition`:\n  - `entryStepId?`: optional explicit entry point (defaults to first step).\n  - `steps[]`: ordered list of `Step` descriptors.\n  - `transitions[]`: directed edges between steps with optional expressions.\n  - `sla?`: aggregated timing hints for the overall flow or per-step budgets.\n  - `compensation?`: fallback operations executed when a workflow is rolled back or fails.\n- `Step`:\n  - `type`: `human`, `automation`, or `decision`.\n  - `action`: references either a `ContractSpec` (`operation`) or `FormSpec` (`form`).\n  - Optional `guard`, `timeoutMs`, and retry policy (`maxAttempts`, `backoff`, `delayMs`, `maxDelayMs?`).\n  - `requiredIntegrations?`: integration slot ids that must be bound before the step may execute.\n  - `requiredCapabilities?`: `CapabilityRef[]` that must be enabled in the resolved app config.\n- `Transition`: `from` → `to` with optional `condition` string (simple data expressions).\n\n## Registry & Validation\n\n- `defineWorkflow()` is available from `@lssm/lib.contracts-spec/workflow/spec` for safe workflow authoring in VM-evaluated runtimes.\n- `WorkflowRegistry` (`src/workflow/spec.ts`) stores specs by key `<name>.v<version>` and exposes `register`, `list`, and `get`.\n- `validateWorkflowSpec()` (`src/workflow/validation.ts`) checks:\n  - Duplicate step IDs.\n  - Unknown `from`/`to` transitions.\n  - Empty guards/conditions.\n  - Reachability from the entry step.\n  - Cycles in the graph.\n  - Operation/Form references against provided registries.\n- `assertWorkflowSpecValid()` wraps validation and throws `WorkflowValidationError` when errors remain.\n\n## Runtime\n\n- `WorkflowRunner` (`src/workflow/runner.ts`) executes workflows and coordinates steps.\n  - `start(name, version?, initialData?)` returns a `workflowId`.\n  - `executeStep(workflowId, input?)` runs the current step (automation or human).\n  - `getState(workflowId)` retrieves the latest state snapshot.\n  - `cancel(workflowId)` marks the workflow as cancelled.\n  - `preFlightCheck(name, version?, resolvedConfig?)` evaluates integration/capability requirements before the workflow starts.\n  - Throws `WorkflowPreFlightError` if required integration slots are unbound or required capabilities are disabled.\n- `StateStore` (`src/workflow/state.ts`) abstracts persistence. V1 ships with:\n  - `InMemoryStateStore` (`src/workflow/adapters/memory-store.ts`) for tests/dev.\n  - Placeholder factories for file/database adapters (`adapters/file-adapter.ts`, `adapters/db-adapter.ts`).\n- Guard evaluation: expression guards run through `evaluateExpression()` (`src/workflow/expression.ts`); custom policy guards can be provided via `guardEvaluator`.\n- Events: the runner emits `workflow.started`, `workflow.step_completed`, `workflow.step_failed`, and `workflow.cancelled` through the optional `eventEmitter`.\n- React bindings (`@lssm/lib.presentation-runtime-react`):\n  - `useWorkflow` hook (polls state, exposes `executeStep`, `cancel`, `refresh`).\n  - `WorkflowStepper` progress indicator using design-system Stepper.\n  - `WorkflowStepRenderer` helper to render human/automation/decision steps with sensible fallbacks.\n\n## Authoring Checklist\n\n1. Reuse existing operations/forms; create new specs when missing.\n2. Prefer explicit `entryStepId` for clarity (especially with decision branches).\n3. Give automation steps an `operation` and human steps a `form` (warnings surface otherwise).\n4. Use short, meaningful step IDs (`submit`, `review`, `finalize`) to simplify analytics.\n5. Keep guard expressions deterministic; complex policy logic should move to PolicySpec (Phase 2).\n6. For Vercel Workflow or other VM-evaluated runtimes, import `defineWorkflow` and `WorkflowSpec` from `@lssm/lib.contracts-spec/workflow/spec`.\n\n## Testing\n\n- Add unit tests for new workflows via `assertWorkflowSpecValid`.\n- Use the new Vitest suites (`validation.test.ts`, `expression.test.ts`, `runner.test.ts`) as examples.\n- CLI support will arrive in Phase 1 PR 3 (`contractspec create --type workflow`).\n\n## Tooling\n\n- `contractspec create --type workflow` scaffolds a WorkflowSpec with interactive prompts.\n- `contractspec build <spec.workflow.ts>` generates a runner scaffold (`.runner.ts`) wired to `WorkflowRunner` and the in-memory store.\n- `contractspec validate` understands `.workflow.ts` files and checks core structure (meta, steps, transitions).\n\n## Next Steps (Non-MVP)\n\n- Persistence adapters (database/file) for workflow state (Phase 2).\n- React bindings (`useWorkflow`, `WorkflowStepper`) and presentation-runtime integration (PR 3).\n- Policy engine integration (`guard.type === 'policy'` validated against PolicySpec).\n- Telemetry hooks for step execution metrics.\n\n"}];

package/dist/node/workflow/validation-workflow-devkit.js

@@ -0,0 +1 @@
+export function validateWorkflowDevkitConfig(e,o){if(!Boolean(e.runtime?.workflowDevkit||e.runtime?.capabilities?.adapters?.["workflow-devkit"]))return;const t=e.runtime?.workflowDevkit;if(!t){o.push({level:"warning",message:"Workflow enables the workflow-devkit adapter without defining runtime.workflowDevkit."});return}k(t.runIdentity?.prefix,"runtime.workflowDevkit.runIdentity.prefix",o);k(t.hookTokens?.prefix,"runtime.workflowDevkit.hookTokens.prefix",o);const l=t.serialization?.mode??"strict";if(l==="strict"){if((t.serialization?.enforceMetadata??!0)&&e.metadata!==void 0&&!n(e.metadata))f(o,"Workflow metadata must be JSON-serializable.");if((t.serialization?.enforceMetadata??!0)&&e.annotations!==void 0&&!n(e.annotations))f(o,"Workflow annotations must be JSON-serializable.")}for(const d of e.definition.steps??[])s(d,l,o)}function s(e,o,i){const t=e.runtime?.workflowDevkit;if(!t){if(e.type==="human")i.push({level:"warning",message:`Human step "${e.id}" does not define runtime.workflowDevkit wait behavior.`});return}u(e.id,t,i);if(e.type==="automation"&&e.retry&&(!t.idempotencyKey||t.idempotencyKey.trim().length===0))i.push({level:"error",message:`Retrying automation step "${e.id}" must define runtime.workflowDevkit.idempotencyKey.`});if(t.idempotencyKey!==void 0&&t.idempotencyKey.trim().length===0)i.push({level:"error",message:`Step "${e.id}" defines an empty runtime.workflowDevkit.idempotencyKey.`});if(o==="strict"){r(e.id,"runtime.workflowDevkit.stateExample",t.stateExample,i);r(e.id,"runtime.workflowDevkit.hookWait.payloadExample",t.hookWait?.payloadExample,i);r(e.id,"runtime.workflowDevkit.webhookWait.payloadExample",t.webhookWait?.payloadExample,i);r(e.id,"runtime.workflowDevkit.approvalWait.payloadExample",t.approvalWait?.payloadExample,i);r(e.id,"runtime.workflowDevkit.streamSession.initialState",t.streamSession?.initialState,i)}}function u(e,o,i){switch(o.behavior){case"sleep":if(!o.sleep?.duration.trim())w(e,o.behavior,"sleep.duration",i);return;case"hookWait":if(o.hookWait?.resumeSource!=="hook")a(e,o.behavior,"hook",i);return;case"webhookWait":if(o.webhookWait?.resumeSource!=="webhook")a(e,o.behavior,"webhook",i);return;case"approvalWait":if(o.approvalWait?.resumeSource!=="approval")a(e,o.behavior,"approval",i);return;case"streamSession":if(o.streamSession?.resumeSource!=="stream")a(e,o.behavior,"stream",i);return}}function w(e,o,i,t){t.push({level:"error",message:`Step "${e}" configures ${o} but is missing ${i}.`})}function f(e,o){e.push({level:"error",message:o})}function a(e,o,i,t){t.push({level:"error",message:`Step "${e}" configures ${o} but does not declare resumeSource "${i}".`})}function r(e,o,i,t){if(i===void 0)return;if(!n(i))t.push({level:"error",message:`Step "${e}" field ${o} must be JSON-serializable.`})}function k(e,o,i){if(e!==void 0&&e.trim().length===0)i.push({level:"error",message:`${o} must not be empty when provided.`})}function n(e,o=new Set){if(e===null||typeof e==="boolean"||typeof e==="number"||typeof e==="string")return!0;if(typeof e==="bigint"||typeof e==="function"||typeof e==="symbol"||e===void 0)return!1;if(o.has(e))return!1;o.add(e);if(Array.isArray(e))return e.every((i)=>n(i,o));if(Object.getPrototypeOf(e)!==Object.prototype)return!1;return Object.values(e).every((i)=>n(i,o))}

package/dist/node/workflow/validation.js

@@ -0,0 +1 @@
+import{validatePredicateSpec as d}from"../decisioning/predicate.js";import{validateWorkflowTask as u}from"../shared-entities/task-validators.js";import{validateWorkflowDevkitConfig as m}from"./validation-workflow-devkit.js";export class WorkflowValidationError extends Error{issues;constructor(s,o){super(s);this.issues=o;this.name="WorkflowValidationError"}}export function validateWorkflowSpec(s,o={}){const e=[],{definition:i}=s,n=Boolean(i.tasks?.length);if(!(i.steps?.length??0)&&!n){e.push({level:"error",message:"Workflow must declare at least one step."});return e}if(i.steps?.length){const r=k(i,e),t=i.entryStepId??i.steps?.[0]?.id??null;if(!t)e.push({level:"error",message:"Workflow requires an entry step (definition.entryStepId)."});else if(!r.has(t))e.push({level:"error",message:`Entry step "${t}" is not defined in steps.`});const l=v(i,r,e);W(i.steps??[],o,e);S(t,r,l,e);I(l,e)}y(s,e);m(s,e);if(n){g(i.tasks,e);w(i.tasks,i.edges??[],e)}return e}function g(s,o){const e=new Set;for(const i of s){if(e.has(i.id))o.push({level:"error",message:`Duplicate task id "${i.id}" in DAG tasks[].`});e.add(i.id);const n=u(i);if(!n.valid)o.push({level:"error",message:n.error})}}function w(s,o,e){const i=new Set(s.map((a)=>a.id));for(const a of o){if(!i.has(a.from))e.push({level:"error",message:`DAG edge references unknown task "${a.from}" in 'from'.`});if(!i.has(a.to))e.push({level:"error",message:`DAG edge references unknown task "${a.to}" in 'to'.`});f(a,`DAG edge ${a.from} -> ${a.to}`,e)}const n=new Map(s.map((a)=>[a.id,new Set]));for(const a of o)n.get(a.from)?.add(a.to);const r=new Set,t=new Set;let l=!1;const p=(a)=>{if(t.has(a)){if(!l){e.push({level:"error",message:`DAG tasks contain a cycle involving task "${a}".`});l=!0}return}if(r.has(a))return;t.add(a);for(const c of n.get(a)??[])p(c);t.delete(a);r.add(a)};for(const a of n.keys())p(a)}export function assertWorkflowSpecValid(s,o={}){const e=validateWorkflowSpec(s,o);if(e.filter((n)=>n.level==="error").length)throw new WorkflowValidationError(`Workflow ${s.meta.key}.v${s.meta.version} is invalid`,e)}function k(s,o){const e=new Map;for(const i of s.steps??[]){if(e.has(i.id)){o.push({level:"error",message:`Duplicate step id "${i.id}" detected.`});continue}e.set(i.id,i);if(i.type==="automation"&&!i.action?.operation)o.push({level:"warning",message:`Automation step "${i.id}" does not declare an operation.`});if(i.type==="human"&&!i.action?.form)o.push({level:"warning",message:`Human step "${i.id}" does not declare a form.`});if(i.guard&&!i.guard.value.trim())o.push({level:"error",message:`Guard for step "${i.id}" must have a non-empty value.`})}return e}function v(s,o,e){const i=new Map,n=new Map;for(const t of o.keys()){i.set(t,new Set);n.set(t,0)}for(const t of s.transitions??[]){const l=o.get(t.from),p=o.get(t.to);if(!l){e.push({level:"error",message:`Transition refers to unknown "from" step "${t.from}".`});continue}if(!p){e.push({level:"error",message:`Transition refers to unknown "to" step "${t.to}".`});continue}i.get(t.from)?.add(t.to);n.set(t.to,(n.get(t.to)??0)+1);h(t,e)}const r=[...n.entries()].filter(([,t])=>t===0).map(([t])=>t);if(r.length>1)e.push({level:"warning",message:`Workflow has multiple potential entry steps: ${r.join(", ")}`});return i}function h(s,o){if(s.condition&&!s.condition.trim())o.push({level:"error",message:`Transition ${s.from} -> ${s.to} declares an empty condition.`});f(s,`Transition ${s.from} -> ${s.to}`,o)}function f(s,o,e){if(s.predicate&&(s.condition!==void 0||s.runIf!==void 0))e.push({level:"error",message:`${o} cannot combine a typed predicate with a legacy expression.`});if(!s.predicate)return;for(const i of d(s.predicate))e.push({level:"error",message:`${o} has an invalid predicate at ${i.path}: ${i.message}`})}function y(s,o){const e=s.runtime;if(!e)return;const i=e.capabilities?.adapters;if(i){const r=Object.entries(i).filter(([,t])=>Boolean(t)).map(([t])=>t);if(r.length>1)o.push({level:"warning",message:`Workflow enables multiple runtime adapters (${r.join(", ")}). Ensure adapter routing is deterministic.`})}const n=e.ports;if(!n)return;for(const[r,t]of Object.entries(n)){if(t===void 0)continue;if(t.trim().length===0)o.push({level:"error",message:`Workflow runtime port "${r}" must not be empty when provided.`})}if(e.capabilities?.checkpointing&&!n.checkpointStore)o.push({level:"warning",message:"Workflow enables checkpointing without defining runtime.ports.checkpointStore."});if(e.capabilities?.suspendResume&&!n.suspension)o.push({level:"warning",message:"Workflow enables suspend/resume without defining runtime.ports.suspension."});if(e.capabilities?.approvalGateway&&!n.approvalGateway)o.push({level:"warning",message:"Workflow enables approval gateway without defining runtime.ports.approvalGateway."})}function W(s,o,e){for(const i of s){const n=i.action;if(!n)continue;if(n.operation&&o.operations){if(!o.operations.get(n.operation.key,n.operation.version))e.push({level:"error",message:`Step "${i.id}" references unknown operation ${n.operation.key}.v${n.operation.version}.`})}if(n.form&&o.forms){if(!o.forms.get(n.form.key,n.form.version))e.push({level:"error",message:`Step "${i.id}" references unknown form ${n.form.key}.v${n.form.version}.`})}}}function S(s,o,e,i){if(!s||!o.has(s))return;const n=new Set,r=[s];n.add(s);while(r.length){const t=r.shift();if(!t)continue;const l=e.get(t);if(!l)continue;for(const p of l){if(n.has(p))continue;n.add(p);r.push(p)}}for(const t of o.keys())if(!n.has(t))i.push({level:"error",message:`Step "${t}" is unreachable from entry step "${s}".`})}function I(s,o){const e=new Set,i=new Set;let n=!1;const r=(t)=>{if(i.has(t)){if(!n){o.push({level:"error",message:`Workflow contains a cycle involving step "${t}".`});n=!0}return}if(e.has(t))return;i.add(t);const l=s.get(t);if(l)for(const p of l)r(p);i.delete(t);e.add(t)};for(const t of s.keys())r(t)}export function validateWorkflowConsistency(s){const o=[];for(const e of s.workflows.list()){const i={operations:s.operations,forms:s.forms},n=validateWorkflowSpec(e,i);o.push(...n.map((r)=>({...r,message:`[${e.meta.key}.v${e.meta.version}] ${r.message}`})));if(s.capabilities){for(const r of e.definition.steps??[])for(const t of r.requiredCapabilities??[])if(!s.capabilities.get(t.key,t.version))o.push({level:"error",message:`[${e.meta.key}.v${e.meta.version}] Step "${r.id}" references unknown capability "${t.key}.v${t.version}"`,context:{stepId:r.id,capability:t}})}if(e.definition.compensation&&s.operations){for(const r of e.definition.compensation.steps)if(!s.operations.get(r.operation.key,r.operation.version))o.push({level:"error",message:`[${e.meta.key}.v${e.meta.version}] Compensation for step "${r.stepId}" references unknown operation "${r.operation.key}.v${r.operation.version}"`,context:{stepId:r.stepId,operation:r.operation}})}if(e.definition.sla?.stepDurationMs){const r=new Set((e.definition.steps??[]).map((t)=>t.id));for(const t of Object.keys(e.definition.sla.stepDurationMs))if(!r.has(t))o.push({level:"warning",message:`[${e.meta.key}.v${e.meta.version}] SLA references unknown step "${t}"`,context:{stepId:t}})}}return{valid:o.filter((e)=>e.level==="error").length===0,issues:o}}export function assertWorkflowConsistency(s){const o=validateWorkflowConsistency(s);if(!o.valid)throw new WorkflowValidationError("Workflow consistency check failed",o.issues)}export function validateSlaConfig(s){const o=[],e=s.definition.sla;if(!e)return o;if(e.totalDurationMs!==void 0&&e.totalDurationMs<=0)o.push({level:"error",message:"SLA totalDurationMs must be positive",context:{totalDurationMs:e.totalDurationMs}});if(e.stepDurationMs){for(const[n,r]of Object.entries(e.stepDurationMs))if(r<=0)o.push({level:"error",message:`SLA stepDurationMs for "${n}" must be positive`,context:{stepId:n,duration:r}});const i=Object.values(e.stepDurationMs).reduce((n,r)=>n+r,0);if(e.totalDurationMs&&i>e.totalDurationMs)o.push({level:"warning",message:`Sum of step durations (${i}ms) exceeds total duration (${e.totalDurationMs}ms)`,context:{stepDurationsSum:i,totalDurationMs:e.totalDurationMs}})}return o}export function validateCompensation(s){const o=[],e=s.definition.compensation;if(!e)return o;const i=new Set((s.definition.steps??[]).map((t)=>t.id)),n=new Set;for(const t of e.steps){if(!i.has(t.stepId))o.push({level:"error",message:`Compensation references unknown step "${t.stepId}"`,context:{stepId:t.stepId}});if(n.has(t.stepId))o.push({level:"warning",message:`Multiple compensation handlers for step "${t.stepId}"`,context:{stepId:t.stepId}});n.add(t.stepId);if(!t.operation?.key||!t.operation?.version)o.push({level:"error",message:`Compensation for step "${t.stepId}" must specify operation with key and version`,context:{stepId:t.stepId}})}const r=(s.definition.steps??[]).filter((t)=>t.type==="automation");for(const t of r)if(!n.has(t.id))o.push({level:"warning",message:`Automation step "${t.id}" has no compensation handler`,context:{stepId:t.id}});return o}export function validateRetryConfig(s){const o=[];for(const e of s.definition.steps??[]){if(!e.retry)continue;if(e.retry.maxAttempts<=0)o.push({level:"error",message:`Step "${e.id}" retry maxAttempts must be positive`,context:{stepId:e.id,maxAttempts:e.retry.maxAttempts}});if(e.retry.delayMs<=0)o.push({level:"error",message:`Step "${e.id}" retry delayMs must be positive`,context:{stepId:e.id,delayMs:e.retry.delayMs}});if(e.retry.maxDelayMs!==void 0&&e.retry.maxDelayMs<e.retry.delayMs)o.push({level:"warning",message:`Step "${e.id}" retry maxDelayMs (${e.retry.maxDelayMs}) is less than delayMs (${e.retry.delayMs})`,context:{stepId:e.id}})}return o}export function validateWorkflowComprehensive(s,o={}){const e=[];e.push(...validateWorkflowSpec(s,o));e.push(...validateSlaConfig(s));e.push(...validateCompensation(s));e.push(...validateRetryConfig(s));return{valid:e.filter((i)=>i.level==="error").length===0,issues:e}}

package/dist/node/workflow/workflow-sdk.js

@@ -0,0 +1 @@
+import{ContractSpecError as e,normalizeContractError as s}from"../results/index.js";export function toWorkflowSdkError(r,o){const t=s(r,{source:{service:"workflow"}});return problemToWorkflowSdkError(t.problem,o)}export function problemToWorkflowSdkError(r,o){const t=r.detail??r.title,n={code:r.code,status:r.status,retryAfter:r.retryAfter,problem:r};if(r.retryable)return new o.RetryableError(t,n);return new o.FatalError(t,n)}export function throwWorkflowSdkError(r,o){throw toWorkflowSdkError(r instanceof e?r.problem:r,o)}

package/dist/node/workspace-config/contractsrc-schema.js

@@ -0,0 +1 @@
+import*as e from"zod";import{CONTRACT_SPEC_TYPES as t}from"../types.js";import{AgentTargetSchema as o,ReleaseEnforceOnSchema as n}from"../versioning/schema.js";import{EnvironmentConfigSchema as a}from"./environment.js";import{LssmOsConfigV1Schema as i}from"./lssm-os-schema.js";export*from"./environment.js";export*from"./contractsrc-types.js";export const SchemaFormatSchema=e.enum(["contractspec","zod","json-schema","graphql"]),OpenApiSourceConfigSchema=e.object({name:e.string(),url:e.string().url().optional(),file:e.string().optional(),syncMode:e.enum(["import","sync","validate"]).default("validate").optional(),tags:e.array(e.string()).optional(),exclude:e.array(e.string()).optional(),include:e.array(e.string()).optional(),prefix:e.string().optional(),defaultStability:e.enum(["experimental","beta","stable","deprecated"]).optional(),defaultAuth:e.enum(["anonymous","user","admin"]).optional(),defaultOwners:e.array(e.string()).optional(),schemaFormat:SchemaFormatSchema.default("contractspec").optional()}),OpenApiExportConfigSchema=e.object({outputPath:e.string().default("./openapi.json").optional(),format:e.enum(["json","yaml"]).default("json").optional(),title:e.string().optional(),version:e.string().optional(),description:e.string().optional(),servers:e.array(e.object({url:e.string(),description:e.string().optional()})).optional()}),OpenApiConfigSchema=e.object({sources:e.array(OpenApiSourceConfigSchema).optional(),export:OpenApiExportConfigSchema.optional()}),CliCommandPackDiscoveryConfigSchema=e.object({include:e.array(e.string().trim().min(1)).optional(),exclude:e.array(e.string().trim().min(1)).optional()}),BuilderRuntimeModeSchema=e.enum(["managed","local","hybrid"]),BuilderBootstrapPresetSchema=e.enum(["managed_mvp","local_daemon_mvp","hybrid_mvp"]),BuilderApiConfigSchema=e.object({baseUrl:e.string().url().optional(),controlPlaneTokenEnvVar:e.string().default("CONTROL_PLANE_API_TOKEN").optional()}),BuilderLocalRuntimeConfigSchema=e.object({runtimeId:e.string().default("rt_local_daemon").optional(),grantedTo:e.string().default("local:operator").optional(),providerIds:e.array(e.string()).default(["provider.codex","provider.local.model"]).optional()});const r=e.enum(["codex-opencode-go"]),l=e.enum(["planner","architect","critic","executor","verifier","quality-reviewer","security-reviewer"]),s=e.enum(["verifier","quality-reviewer","security-reviewer"]);export const BuilderRoleProviderConfigSchema=e.object({role:l,providerId:e.string().min(1),modelId:e.string().min(1).optional(),fallbackModelIds:e.array(e.string().min(1)).optional()}),BuilderQualityGateConfigSchema=e.object({key:e.string().min(1),required:e.boolean().default(!0).optional(),role:s.optional(),modelId:e.string().min(1).optional()}),BuilderBudgetConfigSchema=e.object({maxIterations:e.number().int().positive().optional(),maxEstimatedCostUsd:e.number().positive().optional(),maxRuntimeMinutes:e.number().int().positive().optional()}),BuilderProviderCommandConfigSchema=e.object({codex:e.string().min(1).optional(),opencode:e.string().min(1).optional()}),BuilderSafetyConfigSchema=e.object({codexSandbox:e.enum(["read-only","workspace-write"]).optional(),opencodeAutoApprove:e.boolean().optional()}),BuilderSmokeTestModeSchema=e.enum(["disabled","doctor-only","always"]),BuilderConfigSchema=e.object({enabled:e.boolean().default(!1).optional(),runtimeMode:BuilderRuntimeModeSchema.default("managed").optional(),bootstrapPreset:BuilderBootstrapPresetSchema.default("managed_mvp").optional(),api:BuilderApiConfigSchema.optional(),localRuntime:BuilderLocalRuntimeConfigSchema.optional(),executionProfile:r.optional(),roleProviders:e.array(BuilderRoleProviderConfigSchema).optional(),qualityGates:e.array(BuilderQualityGateConfigSchema).optional(),budget:BuilderBudgetConfigSchema.optional(),providerCommands:BuilderProviderCommandConfigSchema.optional(),smokeTestMode:BuilderSmokeTestModeSchema.optional(),safety:BuilderSafetyConfigSchema.optional(),maxIterations:e.number().int().positive().optional()}),GroupingStrategySchema=e.enum(["by-tag","by-owner","by-domain","by-url-path-single","by-url-path-multi","by-feature","none"]),GroupingRuleSchema=e.object({strategy:GroupingStrategySchema,urlPathLevel:e.number().optional(),pattern:e.string().optional()}),TranslationDiagnosticsConfigSchema=e.object({catalogGlob:e.string().optional(),baseLocale:e.string().optional(),locales:e.array(e.string()).optional(),allowExtraKeys:e.boolean().optional(),checkPlaceholders:e.boolean().optional(),checkIcu:e.boolean().optional(),strict:e.boolean().optional()}),FolderConventionsSchema=e.object({models:e.string().default("models").optional(),operations:e.string().default("operations/commands|queries").optional(),events:e.string().default("events").optional(),presentations:e.string().default("presentations").optional(),forms:e.string().default("forms").optional(),capabilities:e.string().default("capabilities").optional(),policies:e.string().default("policies").optional(),tests:e.string().default("tests").optional(),translations:e.string().default("translations").optional(),groupByFeature:e.boolean().default(!0).optional(),operationsGrouping:GroupingRuleSchema.optional(),modelsGrouping:GroupingRuleSchema.optional(),eventsGrouping:GroupingRuleSchema.optional()}),PrCommentConfigSchema=e.object({enabled:e.boolean().default(!0).optional(),template:e.enum(["minimal","detailed"]).default("detailed").optional(),updateExisting:e.boolean().default(!0).optional()}),CheckRunConfigSchema=e.object({enabled:e.boolean().default(!0).optional(),name:e.string().default("ContractSpec Impact").optional(),failOnBreaking:e.boolean().default(!0).optional(),failOnChanges:e.boolean().default(!1).optional()}),ImpactConfigSchema=e.object({baseline:e.string().default("default-branch").optional(),include:e.array(e.string()).optional(),exclude:e.array(e.string()).optional()}),PackageDeclarationRolloutSchema=e.enum(["off","warning","error"]),PackageDeclarationTargetSchema=e.enum(["feature","integration","app-config","module-bundle","example"]),PackageDeclarationRequiredByKindSchema=e.object({libs:PackageDeclarationTargetSchema.default("feature").optional(),modules:PackageDeclarationTargetSchema.default("feature").optional(),integrations:PackageDeclarationTargetSchema.default("integration").optional(),bundles:PackageDeclarationTargetSchema.default("module-bundle").optional(),apps:PackageDeclarationTargetSchema.default("app-config").optional(),appsRegistry:PackageDeclarationTargetSchema.default("app-config").optional(),examples:PackageDeclarationTargetSchema.default("example").optional()}),PackageDeclarationConfigSchema=e.object({severity:PackageDeclarationRolloutSchema.default("error").optional(),requiredByKind:PackageDeclarationRequiredByKindSchema.optional(),allowMissing:e.array(e.string()).default([]).optional()}),CiConfigSchema=e.object({checks:e.array(e.string()).default(["structure","integrity","deps"]).optional(),skipChecks:e.array(e.string()).optional(),failOnWarnings:e.boolean().default(!1).optional(),uploadSarif:e.boolean().default(!0).optional(),prComment:PrCommentConfigSchema.optional(),checkRun:CheckRunConfigSchema.optional(),impact:ImpactConfigSchema.optional(),packageDeclarations:PackageDeclarationConfigSchema.optional()}),ExternalWorkspaceSchema=e.object({alias:e.string(),submodule:e.string(),packages:e.array(e.string()).optional(),autoResolve:e.boolean().default(!0).optional()}),MetaRepoConfigSchema=e.object({activeScope:e.string().optional(),externalWorkspaces:e.array(ExternalWorkspaceSchema).optional(),crossWorkspaceSearch:e.boolean().default(!1).optional()}),FormatterTypeSchema=e.enum(["biome","dprint","custom"]),FormatterConfigSchema=e.object({enabled:e.boolean().default(!0).optional(),type:FormatterTypeSchema.optional(),command:e.string().optional(),args:e.array(e.string()).optional(),timeout:e.number().default(30000).optional()}),BumpStrategySchema=e.enum(["impact","conventional"]),ChangelogFormatSchema=e.enum(["keep-a-changelog","conventional","custom"]),ChangelogTierSchema=e.enum(["spec","library","monorepo"]),VersioningConfigSchema=e.object({autoBump:e.boolean().default(!1).optional(),bumpStrategy:BumpStrategySchema.default("impact").optional(),integrateWithChangesets:e.boolean().default(!1).optional(),changelogTiers:e.array(ChangelogTierSchema).default(["spec","library","monorepo"]).optional(),format:ChangelogFormatSchema.default("keep-a-changelog").optional(),commitChanges:e.boolean().default(!1).optional(),commitMessage:e.string().default("chore: bump spec versions").optional(),createTags:e.boolean().default(!1).optional(),tagPrefix:e.string().default("v").optional(),include:e.array(e.string()).optional(),exclude:e.array(e.string()).optional()}),ReleaseConfigSchema=e.object({enforceOn:n.default("release-branch").optional(),requireChangesetForPublished:e.boolean().default(!0).optional(),requireReleaseCapsule:e.boolean().default(!0).optional(),publishArtifacts:e.array(e.string()).default(["manifest.json","patch-notes.md","customer-guide.md","upgrade-manifest.json"]).optional(),agentTargets:e.array(o).default(["codex"]).optional()}),UpgradeConfigSchema=e.object({manifestPaths:e.array(e.string()).default(["generated/releases/upgrade-manifest.json"]).optional(),defaultAgentTarget:o.default("codex").optional(),enableInteractiveGuidance:e.boolean().default(!0).optional(),applyCodemods:e.boolean().default(!0).optional()}),RuleSyncTargetSchema=e.enum(["cursor","windsurf","cline","claude-code","copilot","subagent","skill"]),RuleSyncConfigSchema=e.object({enabled:e.boolean().default(!1).optional(),rulesDir:e.string().default("./.rules").optional(),rules:e.array(e.string()).default(["**/*.rule.md"]).optional(),targets:e.array(RuleSyncTargetSchema).default(["cursor","windsurf"]).optional(),autoSync:e.boolean().default(!0).optional(),ejectMode:e.boolean().default(!1).optional()}),ClaudeAgentSDKConfigSchema=e.object({enabled:e.boolean().default(!1).optional(),apiKey:e.string().optional(),model:e.string().default("claude-sonnet-4-6").optional(),computerUse:e.boolean().default(!1).optional(),extendedThinking:e.boolean().default(!1).optional()}),OpenCodeSDKConfigSchema=e.object({enabled:e.boolean().default(!1).optional(),serverUrl:e.string().optional(),port:e.number().optional(),agentType:e.enum(["build","plan","general","explore"]).default("general").optional(),model:e.string().optional()}),ExternalAgentsConfigSchema=e.object({claudeAgent:ClaudeAgentSDKConfigSchema.optional(),openCode:OpenCodeSDKConfigSchema.optional()}),ConnectVerdictSchema=e.enum(["permit","rewrite","require_review","deny"]),ConnectAdapterModeSchema=e.enum(["plugin","rule","wrapper"]),ConnectAdapterConfigSchema=e.object({enabled:e.boolean().default(!1).optional(),mode:ConnectAdapterModeSchema.default("plugin").optional(),packageRef:e.string().optional()}),ConnectStorageConfigSchema=e.object({root:e.string().default(".contractspec/connect").optional(),contextPack:e.string().default(".contractspec/connect/context-pack.json").optional(),planPacket:e.string().default(".contractspec/connect/plan-packet.json").optional(),patchVerdict:e.string().default(".contractspec/connect/patch-verdict.json").optional(),auditFile:e.string().default(".contractspec/connect/audit.ndjson").optional(),reviewPacketsDir:e.string().default(".contractspec/connect/review-packets").optional()}),ConnectReviewThresholdsSchema=e.object({protectedPathWrite:ConnectVerdictSchema.optional(),unknownImpact:ConnectVerdictSchema.optional(),contractDrift:ConnectVerdictSchema.optional(),breakingChange:ConnectVerdictSchema.optional(),destructiveCommand:ConnectVerdictSchema.optional()}),ConnectPolicyConfigSchema=e.object({protectedPaths:e.array(e.string()).optional(),immutablePaths:e.array(e.string()).optional(),generatedPaths:e.array(e.string()).optional(),smokeChecks:e.array(e.string()).optional(),reviewThresholds:ConnectReviewThresholdsSchema.optional()}),ConnectCommandPolicySchema=e.object({allow:e.array(e.string()).optional(),review:e.array(e.string()).optional(),deny:e.array(e.string()).optional()}),ConnectCanonPackRefSchema=e.object({ref:e.string(),readOnly:e.boolean().default(!0).optional()}),ConnectStudioConfigSchema=e.object({enabled:e.boolean().default(!1).optional(),mode:e.enum(["off","review-bridge"]).default("off").optional(),endpoint:e.string().url().optional(),queue:e.string().optional()}),ConnectAdoptionFamilySchema=e.enum(["ui","contracts","integrations","runtime","sharedLibs","solutions"]),ConnectAdoptionCatalogConfigSchema=e.object({indexPath:e.string().default(".contractspec/adoption/catalog.json").optional(),overrideManifestPath:e.string().default(".contractspec/adoption/overrides.json").optional()}),ConnectAdoptionWorkspaceScanConfigSchema=e.object({include:e.array(e.string()).default(["src/**/*.{ts,tsx,js,jsx}","app/**/*.{ts,tsx,js,jsx}","components/**/*.{ts,tsx,js,jsx}","packages/**/*.{ts,tsx,js,jsx}"]).optional(),exclude:e.array(e.string()).default(["**/node_modules/**","**/dist/**","**/.next/**","**/coverage/**","**/generated/**","**/*.test.*","**/*.spec.*","**/*.stories.*"]).optional()}),ConnectAdoptionFamiliesConfigSchema=e.object({ui:e.boolean().default(!0).optional(),contracts:e.boolean().default(!0).optional(),integrations:e.boolean().default(!0).optional(),runtime:e.boolean().default(!0).optional(),sharedLibs:e.boolean().default(!0).optional(),solutions:e.boolean().default(!0).optional()}),ConnectAdoptionThresholdsSchema=e.object({workspaceReuse:ConnectVerdictSchema.default("rewrite").optional(),contractspecReuse:ConnectVerdictSchema.default("rewrite").optional(),ambiguous:ConnectVerdictSchema.default("require_review").optional(),newExternalDependency:ConnectVerdictSchema.default("require_review").optional(),newImplementation:ConnectVerdictSchema.default("require_review").optional()}),ConnectAdoptionConfigSchema=e.object({enabled:e.boolean().default(!1).optional(),catalog:ConnectAdoptionCatalogConfigSchema.optional(),workspaceScan:ConnectAdoptionWorkspaceScanConfigSchema.optional(),families:ConnectAdoptionFamiliesConfigSchema.optional(),thresholds:ConnectAdoptionThresholdsSchema.optional()}),ConnectConfigSchema=e.object({enabled:e.boolean().default(!1).optional(),durableAuthorityRequired:e.boolean().default(!1).optional(),adapters:e.object({cursor:ConnectAdapterConfigSchema.optional(),codex:ConnectAdapterConfigSchema.optional(),"claude-code":ConnectAdapterConfigSchema.optional()}).optional(),storage:ConnectStorageConfigSchema.optional(),policy:ConnectPolicyConfigSchema.optional(),commands:ConnectCommandPolicySchema.optional(),canonPacks:e.array(ConnectCanonPackRefSchema).optional(),studio:ConnectStudioConfigSchema.optional(),adoption:ConnectAdoptionConfigSchema.optional()}),DeliveryRuntimeModeSchema=e.enum(["managed","local","hybrid"]),DeliveryConfigSchema=e.object({enabled:e.boolean().default(!1).optional(),runtimeMode:DeliveryRuntimeModeSchema.default("local").optional(),durableEvidenceRequired:e.boolean().default(!0).optional(),qualityProfileRef:e.string().min(1).default("quality.default").optional(),evidenceLedgerPath:e.string().min(1).default(".contractspec/delivery/evidence.ndjson").optional()}),RuleSeveritySchema=e.enum(["off","warn","error"]),SpecKindSchema=e.enum(t),LintRulesSchema=e.object({"require-acceptance":RuleSeveritySchema.optional(),"require-examples":RuleSeveritySchema.optional(),"require-stability":RuleSeveritySchema.optional(),"require-owners-format":RuleSeveritySchema.optional(),"event-past-tense":RuleSeveritySchema.optional(),"no-todo":RuleSeveritySchema.optional(),"workflow-transitions":RuleSeveritySchema.optional(),"telemetry-privacy":RuleSeveritySchema.optional(),"experiment-allocation":RuleSeveritySchema.optional(),"app-config-appid":RuleSeveritySchema.optional(),"app-config-capabilities":RuleSeveritySchema.optional(),"data-view-fields":RuleSeveritySchema.optional()}),TestLinkingStrategySchema=e.enum(["target-first","convention-only","both"]),TestLinkingConfigSchema=e.object({strategy:TestLinkingStrategySchema.default("both").optional(),warnOnConvention:e.boolean().default(!1).optional()}),TestingHarnessBrowserEngineSchema=e.enum(["playwright","agent-browser","both"]),TestingHarnessTargetUrlsSchema=e.object({preview:e.string().url().optional(),task:e.string().url().optional(),shared:e.string().url().optional(),sandbox:e.string().url().optional()}),TestingHarnessVisualConfigSchema=e.object({maxDiffBytes:e.number().int().min(0).optional(),maxDiffRatio:e.number().min(0).max(1).optional(),updateBaselines:e.boolean().default(!1).optional()}),TestingHarnessAuthProfileConfigSchema=e.object({kind:e.enum(["storage-state","browser-profile","session-name","headers-env"]),ref:e.string().min(1)}),TestingHarnessConfigSchema=e.object({artifactRoot:e.string().default(".contractspec/harness").optional(),browserEngine:TestingHarnessBrowserEngineSchema.default("playwright").optional(),targetBaseUrls:TestingHarnessTargetUrlsSchema.optional(),allowlistedDomains:e.array(e.string()).optional(),visual:TestingHarnessVisualConfigSchema.optional(),authProfiles:e.record(e.string(),TestingHarnessAuthProfileConfigSchema).optional()}),TestingConfigSchema=e.object({runner:e.enum(["internal","jest","vitest","bun"]).default("internal").optional(),testMatch:e.array(e.string()).default(["**/*.{test,spec}.{ts,js}"]).optional(),autoGenerate:e.boolean().default(!1).optional(),integrity:e.object({requireTestsFor:e.array(SpecKindSchema).optional(),minCoverage:e.number().optional()}).optional(),testLinking:TestLinkingConfigSchema.optional(),harness:TestingHarnessConfigSchema.optional()}),RulesConfigSchema=e.object({defaults:LintRulesSchema.optional(),overrides:e.record(SpecKindSchema,LintRulesSchema).optional()}),HooksConfigSchema=e.record(e.string(),e.array(e.string())),ContractsrcSchema=e.object({$schema:e.string().optional(),aiProvider:e.enum(["claude","openai","ollama","mistral","custom"]).default("claude").optional(),aiModel:e.string().optional(),agentMode:e.enum(["simple","cursor","claude-code","openai-codex","claude-agent-sdk","opencode","opencode-sdk"]).default("simple").optional(),customEndpoint:e.url().nullable().optional(),customApiKey:e.string().nullable().optional(),outputDir:e.string().default("./src").optional(),conventions:FolderConventionsSchema.optional(),defaultOwners:e.array(e.string()).default([]).optional(),defaultTags:e.array(e.string()).default([]).optional(),packages:e.array(e.string()).optional(),excludePackages:e.array(e.string()).optional(),recursive:e.boolean().optional(),i18n:TranslationDiagnosticsConfigSchema.optional(),commandPacks:CliCommandPackDiscoveryConfigSchema.optional(),openapi:OpenApiConfigSchema.optional(),ci:CiConfigSchema.optional(),metaRepo:MetaRepoConfigSchema.optional(),rules:RulesConfigSchema.optional(),testing:TestingConfigSchema.optional(),hooks:HooksConfigSchema.optional(),schemaFormat:SchemaFormatSchema.default("contractspec").optional(),formatter:FormatterConfigSchema.optional(),versioning:VersioningConfigSchema.optional(),release:ReleaseConfigSchema.optional(),upgrade:UpgradeConfigSchema.optional(),ruleSync:RuleSyncConfigSchema.optional(),externalAgents:ExternalAgentsConfigSchema.optional(),builder:BuilderConfigSchema.optional(),delivery:DeliveryConfigSchema.optional(),connect:ConnectConfigSchema.optional(),environment:a.optional(),lssmOs:i.optional()}),DEFAULT_CONTRACTSRC={aiProvider:"claude",agentMode:"simple",outputDir:"./src",ci:{packageDeclarations:{severity:"error",requiredByKind:{libs:"feature",modules:"feature",integrations:"integration",bundles:"module-bundle",apps:"app-config",appsRegistry:"app-config",examples:"example"},allowMissing:[]}},conventions:{models:"models",operations:"interactions/commands|queries",events:"events",presentations:"presentations",forms:"forms",capabilities:"capabilities",policies:"policies",tests:"tests",translations:"translations",groupByFeature:!0},defaultOwners:[],defaultTags:[],schemaFormat:"contractspec",i18n:{catalogGlob:"packages/**/src/i18n/catalogs",baseLocale:"en",locales:["en","fr","es"],allowExtraKeys:!1,checkPlaceholders:!0,checkIcu:!0,strict:!1},release:{enforceOn:"release-branch",requireChangesetForPublished:!0,requireReleaseCapsule:!0,publishArtifacts:["manifest.json","patch-notes.md","customer-guide.md","upgrade-manifest.json"],agentTargets:["codex"]},upgrade:{manifestPaths:["generated/releases/upgrade-manifest.json"],defaultAgentTarget:"codex",enableInteractiveGuidance:!0,applyCodemods:!0},builder:{enabled:!1,runtimeMode:"managed",bootstrapPreset:"managed_mvp",api:{controlPlaneTokenEnvVar:"CONTROL_PLANE_API_TOKEN"},localRuntime:{runtimeId:"rt_local_daemon",grantedTo:"local:operator",providerIds:["provider.codex","provider.opencode.go","provider.local.model"]},executionProfile:"codex-opencode-go",roleProviders:[{role:"planner",providerId:"provider.codex",modelId:"gpt-5.5"},{role:"architect",providerId:"provider.codex",modelId:"gpt-5.5"},{role:"critic",providerId:"provider.codex",modelId:"gpt-5.5"},{role:"executor",providerId:"provider.opencode.go",modelId:"opencode-go/deepseek-v4-flash",fallbackModelIds:["opencode-go/kimi-k2.6"]},{role:"verifier",providerId:"provider.codex",modelId:"gpt-5.5"}],qualityGates:[{key:"deterministic-checks",required:!0,role:"verifier",modelId:"gpt-5.5"},{key:"quality-review",required:!0,role:"quality-reviewer",modelId:"gpt-5.5"},{key:"security-review",required:!0,role:"security-reviewer",modelId:"gpt-5.5"}],budget:{maxIterations:5,maxRuntimeMinutes:90},maxIterations:5},connect:{enabled:!1,durableAuthorityRequired:!1,adapters:{cursor:{enabled:!1,mode:"plugin"},codex:{enabled:!1,mode:"wrapper"},"claude-code":{enabled:!1,mode:"rule"}},storage:{root:".contractspec/connect",contextPack:".contractspec/connect/context-pack.json",planPacket:".contractspec/connect/plan-packet.json",patchVerdict:".contractspec/connect/patch-verdict.json",auditFile:".contractspec/connect/audit.ndjson",reviewPacketsDir:".contractspec/connect/review-packets"},policy:{reviewThresholds:{protectedPathWrite:"require_review",unknownImpact:"require_review",contractDrift:"require_review",breakingChange:"require_review",destructiveCommand:"deny"}},studio:{enabled:!1,mode:"off"},adoption:{enabled:!1,catalog:{indexPath:".contractspec/adoption/catalog.json",overrideManifestPath:".contractspec/adoption/overrides.json"},workspaceScan:{include:["src/**/*.{ts,tsx,js,jsx}","app/**/*.{ts,tsx,js,jsx}","components/**/*.{ts,tsx,js,jsx}","packages/**/*.{ts,tsx,js,jsx}"],exclude:["**/node_modules/**","**/dist/**","**/.next/**","**/coverage/**","**/generated/**","**/storybook-static/**","**/*.test.*","**/*.spec.*","**/*.stories.*"]},families:{ui:!0,contracts:!0,integrations:!0,runtime:!0,sharedLibs:!0,solutions:!0},thresholds:{workspaceReuse:"rewrite",contractspecReuse:"rewrite",ambiguous:"require_review",newExternalDependency:"require_review",newImplementation:"require_review"}}},delivery:{enabled:!1,runtimeMode:"local",durableEvidenceRequired:!0,qualityProfileRef:"quality.default",evidenceLedgerPath:".contractspec/delivery/evidence.ndjson"}};

package/dist/node/workspace-config/environment-validation-alias.js

@@ -0,0 +1 @@
+export function validateAliasCollisions(e,n){const s=[];for(const[c,i]of Object.entries(e.variables??{}))for(const[f,o]of(i.aliases??[]).entries()){const t={...o,logicalKey:i.key},l=s.find((a)=>a.name===o.name&&a.logicalKey!==i.key&&p(a,t));if(l)n.addIssue({code:"custom",path:["variables",c,"aliases",f,"name"],message:`Alias "${o.name}" collides in target scope with logical variable "${l.logicalKey}".`});s.push(t)}}function p(e,n){return r(e.targetId,n.targetId)&&r(e.profile,n.profile)&&r(e.framework,n.framework)}function r(e,n){return e===void 0||n===void 0||e===n}

package/dist/node/workspace-config/environment-validation.js

@@ -0,0 +1 @@
+import{validateAliasCollisions as r}from"./environment-validation-alias.js";export function isPublicEnvironmentAlias(e){return e.startsWith("NEXT_PUBLIC_")||e.startsWith("EXPO_PUBLIC_")}export function validateEnvironmentConfig(e,i){l(e,i);r(e,i)}function l(e,i){for(const[a,t]of Object.entries(e.variables??{})){const s=t.sensitivity??"internal";if((s==="secret"||s==="sensitive")&&t.defaultValue!==void 0)i.addIssue({code:"custom",path:["variables",a,"defaultValue"],message:"Secret and sensitive variables cannot define defaultValue."});for(const[o,n]of(t.aliases??[]).entries())if((n.exposure==="public-client"||n.exposure==="native-client"||n.materialization==="next-config-env"||isPublicEnvironmentAlias(n.name))&&s!=="public")i.addIssue({code:"custom",path:["variables",a,"aliases",o,"name"],message:'Public env aliases require sensitivity "public"; never expose secret or sensitive values.'})}}

package/dist/node/workspace-config/environment.js

@@ -0,0 +1 @@
+import*as e from"zod";import{validateEnvironmentConfig as r}from"./environment-validation.js";export{isPublicEnvironmentAlias}from"./environment-validation.js";export const EnvironmentSensitivitySchema=e.enum(["public","internal","sensitive","secret"]),EnvironmentLifecycleSchema=e.enum(["build-time","runtime","both"]),EnvironmentSurfaceSchema=e.enum(["server","public-client","native-client","edge","worker","ci"]),AppEnvironmentFrameworkSchema=e.enum(["next","expo","node","vite","worker","custom"]),EnvironmentValueSourceSchema=e.object({type:e.enum(["literal","env","secret","managed-connection","byok-connection"]),ref:e.string().optional(),envVar:e.string().optional(),value:e.union([e.string(),e.number(),e.boolean()]).optional(),connectionId:e.string().optional(),secretRef:e.string().optional()}),EnvVariableAliasSchema=e.object({name:e.string().min(1),targetId:e.string().optional(),framework:AppEnvironmentFrameworkSchema.optional(),profile:e.string().optional(),exposure:EnvironmentSurfaceSchema.optional(),materialization:e.enum(["env-file","process-env","next-config-env"]).default("env-file").optional()}),EnvironmentVariableDefinitionSchema=e.object({key:e.string().min(1),description:e.string().optional(),sensitivity:EnvironmentSensitivitySchema.default("internal").optional(),lifecycle:EnvironmentLifecycleSchema.default("runtime").optional(),allowedSurfaces:e.array(EnvironmentSurfaceSchema).optional(),requiredProfiles:e.array(e.string()).optional(),defaultValue:e.union([e.string(),e.number(),e.boolean()]).optional(),example:e.string().optional(),valueSource:EnvironmentValueSourceSchema.optional(),aliases:e.array(EnvVariableAliasSchema).optional()}),AppEnvironmentTargetSchema=e.object({id:e.string().min(1),packageName:e.string().optional(),packagePath:e.string().optional(),appId:e.string().optional(),framework:AppEnvironmentFrameworkSchema.optional(),surfaces:e.array(EnvironmentSurfaceSchema).optional(),profiles:e.array(e.string()).optional(),envFiles:e.array(e.string()).optional()}),EnvironmentProfileConfigSchema=e.object({envFiles:e.array(e.string()).optional(),secretProviders:e.array(e.string()).optional(),variables:e.record(e.string(),EnvironmentValueSourceSchema).optional()}),SecretRequirementConfigSchema=e.object({key:e.string().min(1),description:e.string().optional(),required:e.boolean().default(!0).optional(),provider:e.string().optional(),envVar:e.string().optional(),secretRefPattern:e.string().optional(),rotationDays:e.number().int().positive().optional()}),EnvironmentConfigSchema=e.object({profiles:e.record(e.string(),EnvironmentProfileConfigSchema).optional(),variables:e.record(e.string(),EnvironmentVariableDefinitionSchema).optional(),targets:e.record(e.string(),AppEnvironmentTargetSchema).optional(),secretRequirements:e.record(e.string(),SecretRequirementConfigSchema).optional()}).superRefine((n,i)=>{r(n,i)});

package/dist/node/workspace-config/index.js

@@ -0,0 +1 @@
+export{AgentTargetSchema,ReleaseEnforceOnSchema}from"../versioning/schema.js";export{BuilderApiConfigSchema,BuilderBootstrapPresetSchema,BuilderConfigSchema,BuilderLocalRuntimeConfigSchema,BuilderRuntimeModeSchema,BumpStrategySchema,ChangelogFormatSchema,ChangelogTierSchema,CliCommandPackDiscoveryConfigSchema,ConnectAdapterConfigSchema,ConnectAdapterModeSchema,ConnectAdoptionCatalogConfigSchema,ConnectAdoptionConfigSchema,ConnectAdoptionFamiliesConfigSchema,ConnectAdoptionFamilySchema,ConnectAdoptionThresholdsSchema,ConnectAdoptionWorkspaceScanConfigSchema,ConnectCanonPackRefSchema,ConnectCommandPolicySchema,ConnectConfigSchema,ConnectPolicyConfigSchema,ConnectReviewThresholdsSchema,ConnectStorageConfigSchema,ConnectStudioConfigSchema,ConnectVerdictSchema,ContractsrcSchema,DEFAULT_CONTRACTSRC,FolderConventionsSchema,FormatterConfigSchema,FormatterTypeSchema,OpenApiConfigSchema,OpenApiExportConfigSchema,OpenApiSourceConfigSchema,PackageDeclarationConfigSchema,PackageDeclarationRequiredByKindSchema,PackageDeclarationRolloutSchema,PackageDeclarationTargetSchema,ReleaseConfigSchema,RuleSyncConfigSchema,RuleSyncTargetSchema,SchemaFormatSchema,SpecKindSchema,TranslationDiagnosticsConfigSchema,UpgradeConfigSchema,VersioningConfigSchema}from"./contractsrc-schema.js";export{AppEnvironmentFrameworkSchema,AppEnvironmentTargetSchema,EnvironmentConfigSchema,EnvironmentLifecycleSchema,EnvironmentProfileConfigSchema,EnvironmentSensitivitySchema,EnvironmentSurfaceSchema,EnvironmentValueSourceSchema,EnvironmentVariableDefinitionSchema,EnvVariableAliasSchema,isPublicEnvironmentAlias,SecretRequirementConfigSchema}from"./environment.js";export*from"./lssm-os-inheritance.js";export*from"./lssm-os-schema.js";export*from"./lssm-os-types.js";export const tech_workspace_config_DocBlocks=[{id:"docs.tech.contracts.workspace-config",title:"Workspace Configuration (.contractsrc)",summary:"Configuration-as-code conventions for ContractSpec workspaces (`.contractsrc.json`).",kind:"reference",visibility:"public",route:"/docs/tech/contracts/workspace-config",tags:["tech","contracts","config"],body:"## Workspace Configuration (.contractsrc)\n\nContractSpec uses a hierarchical configuration system anchored by `.contractsrc.json` files. Configuration loader supports standard rc-file discovery (cosmiconfig).\n\n### Schema Formats\n\nThe `schemaFormat` option controls the output format of schema generation commands (like `contractspec openapi import`).\n\nSupported formats:\n- `contractspec` (default): Generates standard `defineSchemaModel` code.\n- `zod`: Generates raw Zod schemas using `z.object({...})`.\n- `json-schema`: Generates JSON Schema definitions.\n- `graphql`: Generates GraphQL SDL type definitions.\n\n### Config Interface\n\n```ts\nexport interface ContractsrcConfig {\n  // ... existing fields ...\n  schemaFormat?: 'contractspec' | 'zod' | 'json-schema' | 'graphql';\n}\n```\n\nDefined in `@lssm/lib.contracts-spec/workspace-config`.\n\n### CI Package Declaration Coverage\n\nThe `ci.packageDeclarations` section lets workspaces stage package-level contract declaration enforcement across the monorepo.\n\n```ts\nexport interface ContractsrcConfig {\n  ci?: {\n    packageDeclarations?: {\n      severity?: 'off' | 'warning' | 'error';\n      requiredByKind?: {\n        libs?: 'feature';\n        modules?: 'feature';\n        integrations?: 'integration';\n        bundles?: 'module-bundle';\n        apps?: 'app-config';\n        appsRegistry?: 'app-config';\n        examples?: 'example';\n      };\n      allowMissing?: string[];\n    };\n  };\n}\n```\n\n### Connect\n\nThe `connect` section configures ContractSpec Connect as a codebase-aligned adapter layer inside the existing CLI and runtime stack.\n\n```ts\nexport interface ContractsrcConfig {\n  connect?: {\n    enabled?: boolean;\n    adapters?: {\n      cursor?: { enabled?: boolean; mode?: 'plugin' | 'rule' | 'wrapper' };\n      codex?: { enabled?: boolean; mode?: 'plugin' | 'rule' | 'wrapper' };\n      'claude-code'?: { enabled?: boolean; mode?: 'plugin' | 'rule' | 'wrapper' };\n    };\n    storage?: {\n      root?: string;\n      contextPack?: string;\n      planPacket?: string;\n      patchVerdict?: string;\n      auditFile?: string;\n      reviewPacketsDir?: string;\n    };\n    policy?: {\n      protectedPaths?: string[];\n      immutablePaths?: string[];\n      generatedPaths?: string[];\n      smokeChecks?: string[];\n      reviewThresholds?: {\n        protectedPathWrite?: 'permit' | 'rewrite' | 'require_review' | 'deny';\n        unknownImpact?: 'permit' | 'rewrite' | 'require_review' | 'deny';\n        contractDrift?: 'permit' | 'rewrite' | 'require_review' | 'deny';\n        breakingChange?: 'permit' | 'rewrite' | 'require_review' | 'deny';\n        destructiveCommand?: 'permit' | 'rewrite' | 'require_review' | 'deny';\n      };\n    };\n    commands?: {\n      allow?: string[];\n      review?: string[];\n      deny?: string[];\n    };\n    canonPacks?: Array<{ ref: string; readOnly?: boolean }>;\n    studio?: { enabled?: boolean; mode?: 'off' | 'review-bridge'; endpoint?: string; queue?: string };\n    adoption?: {\n      enabled?: boolean;\n      catalog?: {\n        indexPath?: string;\n        overrideManifestPath?: string;\n      };\n      workspaceScan?: {\n        include?: string[];\n        exclude?: string[];\n      };\n      families?: {\n        ui?: boolean;\n        contracts?: boolean;\n        integrations?: boolean;\n        runtime?: boolean;\n        sharedLibs?: boolean;\n        solutions?: boolean;\n      };\n      thresholds?: {\n        workspaceReuse?: 'permit' | 'rewrite' | 'require_review' | 'deny';\n        contractspecReuse?: 'permit' | 'rewrite' | 'require_review' | 'deny';\n        ambiguous?: 'permit' | 'rewrite' | 'require_review' | 'deny';\n        newExternalDependency?: 'permit' | 'rewrite' | 'require_review' | 'deny';\n        newImplementation?: 'permit' | 'rewrite' | 'require_review' | 'deny';\n      };\n    };\n  };\n}\n```\n\n### Builder\n\nThe `builder` section configures preset-driven Builder onboarding without requiring live bootstrap during setup.\n\n```ts\nexport interface ContractsrcConfig {\n  builder?: {\n    enabled?: boolean;\n    runtimeMode?: 'managed' | 'local' | 'hybrid';\n    bootstrapPreset?: 'managed_mvp' | 'local_daemon_mvp' | 'hybrid_mvp';\n    api?: {\n      baseUrl?: string;\n      controlPlaneTokenEnvVar?: string;\n    };\n    localRuntime?: {\n      runtimeId?: string;\n      grantedTo?: string;\n      providerIds?: string[];\n    };\n  };\n}\n```\n\n### LSSM OS\n\nThe optional `lssmOs` V1 section carries provider-neutral goals, contract\nreferences, workload envelopes, provider restrictions, exact minor-unit budgets,\nautonomy, infrastructure ownership, credential references, and evidence profiles.\nProvider-specific extensions are typed JSON escape hatches and reject raw secret\nfields recursively.\n\nScoped policy layers resolve deterministically in this order: platform,\norganization, workspace, environment, deployable, feature, operation, tenant.\nChildren may only tighten inherited constraints. A relaxation requires an\napproved, exact-path, exact-scope, unexpired waiver; inherited immutable rules\ncannot be waived.\n\nUse `resolveLssmOsConfigV1(config, now)` to produce a deterministic policy\nprojection and the exact scopes and waiver identifiers used by the resolution.\n"}];

package/dist/node/workspace-config/lssm-os-config.fixture.js

@@ -0,0 +1 @@
+export const lssmOsConfigFixture={version:"1",profile:"startup",goalRefs:[{id:"goal.activation",version:"1.0.0"}],contractRefs:[{id:"operation.signup",version:"2.0.0"}],workloadEnvelopes:[{id:"api",maxConcurrentUsers:5000,maxDataBytes:"100000000000",regions:["eu-west"]}],providerPolicy:{allow:["railway","vercel"],deny:["aws"],regions:["eu-west","eu-central"],residency:["eu"],portability:"preferred",requiredCapabilities:["compute"]},budget:{currency:"EUR",maxMonthlyMinorUnits:"100000",hardGateOnUnknownOrStale:!0,unitEconomics:[{metric:"activated_workspace",maxCostMinorUnits:"300",unit:"one"}]},autonomy:{default:"apply_with_approval"},infrastructure:{iac:"opentofu",stateBackend:"postgres",stateRef:"state.production",ownerByResource:{database:"opentofu"}},credentialRefs:[{id:"credential.railway",kind:"oidc",provider:"railway"}],evidence:{observability:{backend:"otel",region:"eu",retentionDays:30,privacyPreset:"strict"},analytics:{backend:"posthog",region:"eu",consentRequired:!0}},providerExtensions:[{provider:"railway",capability:"private-networking",config:{enabled:!0,credentialRef:"credential.railway"}}]};

package/dist/node/workspace-config/lssm-os-constraints.js

@@ -0,0 +1 @@
+export class LssmOsConfigResolutionError extends Error{scopeId;constraintPath;constructor(n,e,r){super(n);this.scopeId=e;this.constraintPath=r;this.name="LssmOsConfigResolutionError"}}export function constrainedSubset(n,e,r,i,t){if(!e)return n;if(!n||e.every((s)=>n.includes(s))||t(r))return unique(e);return fail(i,r,`${r} may only remove inherited values.`)}export function constrainedSuperset(n,e,r,i,t){if(!e)return n;if(!n||n.every((s)=>e.includes(s))||t(r))return unique(e);return fail(i,r,`${r} may only add inherited values.`)}export function orderedConstraint(n,e,r,i,t,s,u){if(!e||!n)return e??n;const o=r.indexOf(e)-r.indexOf(n);if((u?o>=0:o<=0)||s(i))return e;return fail(t,i,`${i} cannot be relaxed without a valid waiver.`)}export function maxConstraint(n,e,r,i,t){if(!e||!n||BigInt(e)<=BigInt(n)||t(r))return e??n;return fail(i,r,`${r} cannot increase without a valid waiver.`)}export function maxNumberConstraint(n,e,r,i,t){if(e===void 0||n===void 0||e<=n||t(r))return e??n;return fail(i,r,`${r} cannot increase without a valid waiver.`)}export function booleanConstraint(n,e,r,i,t){if(e===void 0||n===void 0||e||!n||t(r))return e??n;return fail(i,r,`${r} cannot be disabled without a valid waiver.`)}export function unique(n){return n?[...new Set(n)].sort():void 0}export function fail(n,e,r){throw new LssmOsConfigResolutionError(r,n.scope.id,e)}

package/dist/node/workspace-config/lssm-os-extension-schema.js

@@ -0,0 +1 @@
+import*as s from"zod";const r=s.string().trim().min(1),o=s.lazy(()=>s.union([s.string(),s.number().finite(),s.boolean(),s.null(),s.array(o),s.record(s.string(),o)]));export const LssmOsProviderExtensionV1Schema=s.object({provider:r,capability:r,config:s.record(s.string(),o)}).strict();

package/dist/node/workspace-config/lssm-os-inheritance.js

@@ -0,0 +1 @@
+import{LssmOsConfigResolutionError as a}from"./lssm-os-constraints.js";import{mergeLssmOsPolicy as c,normalizeLssmOsPolicy as p}from"./lssm-os-policy-merge.js";import{LSSM_OS_SCOPE_ORDER as t}from"./lssm-os-types.js";export{LssmOsConfigResolutionError}from"./lssm-os-constraints.js";export function resolveLssmOsConfigV1(n,i=new Date){const o=m(n.layers??[]);let s=p(n);const e=[];for(const r of o)s=c(s,r,i,e);return{config:s,appliedScopes:o.map((r)=>r.scope),appliedWaiverIds:e}}function m(n){const i=new Set,o=[...n].sort((s,e)=>{return t.indexOf(s.scope.kind)-t.indexOf(e.scope.kind)||s.scope.id.localeCompare(e.scope.id)});for(const s of o){if(i.has(s.scope.kind))throw new a(`Only one ${s.scope.kind} layer may participate in a resolution chain.`,s.scope.id,"scope.kind");i.add(s.scope.kind)}return o}

package/dist/node/workspace-config/lssm-os-policy-merge.js

@@ -0,0 +1 @@
+import{booleanConstraint as d,fail as f,maxConstraint as m,maxNumberConstraint as y,orderedConstraint as u,unique as a}from"./lssm-os-constraints.js";import{mergeProviderPolicy as b,normalizeProviderPolicy as O}from"./lssm-os-provider-merge.js";const l=["observe","recommend","plan","apply_with_approval","auto_apply_qualified"];export function normalizeLssmOsPolicy(n){return{providerPolicy:O(n.providerPolicy),budget:n.budget?{...n.budget,unitEconomics:n.budget.unitEconomics?.map((s)=>({...s}))}:void 0,autonomy:n.autonomy?{...n.autonomy,byScope:{...n.autonomy.byScope}}:void 0,immutableRules:a(n.immutableRules)}}export function mergeLssmOsPolicy(n,s,i,t){const o=normalizeLssmOsPolicy(s.policy),e=(r)=>C(n,s,r,i,t);return{providerPolicy:b(n.providerPolicy,o.providerPolicy,s,e),budget:L(n,o,s,e),autonomy:p(n,o,s,e),immutableRules:a([...n.immutableRules??[],...o.immutableRules??[]])}}function L(n,s,i,t){const o=n.budget,e=s.budget;if(!e)return o;if(!o)return e;if(o.currency!==e.currency&&!t("budget.currency"))f(i,"budget.currency","Budget currency cannot change in a child scope.");return{...o,...e,maxMonthlyMinorUnits:m(o.maxMonthlyMinorUnits,e.maxMonthlyMinorUnits,"budget.maxMonthlyMinorUnits",i,t),maxChangeMinorUnits:m(o.maxChangeMinorUnits,e.maxChangeMinorUnits,"budget.maxChangeMinorUnits",i,t),hardGateOnUnknownOrStale:d(o.hardGateOnUnknownOrStale,e.hardGateOnUnknownOrStale,"budget.hardGateOnUnknownOrStale",i,t),warningPercent:y(o.warningPercent,e.warningPercent,"budget.warningPercent",i,t),unitEconomics:e.unitEconomics??o.unitEconomics}}function p(n,s,i,t){const o=n.autonomy,e=s.autonomy;if(!e)return o;if(!o)return e;const r={...o.byScope};for(const[c,g]of Object.entries(e.byScope??{}))r[c]=u(o.byScope?.[c]??o.default,g,l,`autonomy.byScope.${c}`,i,t,!1);return{default:u(o.default,e.default,l,"autonomy.default",i,t,!1),byScope:r}}function C(n,s,i,t,o){if([...n.immutableRules??[],...s.policy.immutableRules??[]].some((r)=>i===r||i.startsWith(`${r}.`)))return!1;const e=(s.waivers??[]).find((r)=>P(r,s,i,t));if(!e)return!1;if(!o.includes(e.id))o.push(e.id);return!0}function P(n,s,i,t){return n.constraintPath===i&&n.scope.kind===s.scope.kind&&n.scope.id===s.scope.id&&new Date(n.expiresAt).getTime()>t.getTime()}

package/dist/node/workspace-config/lssm-os-provider-merge.js

@@ -0,0 +1 @@
+import{constrainedSubset as d,constrainedSuperset as u,fail as P,orderedConstraint as y,unique as n}from"./lssm-os-constraints.js";const f=["none","preferred","required"];export function normalizeProviderPolicy(e){if(!e)return;return{...e,allow:n(e.allow),deny:n(e.deny),regions:n(e.regions),residency:n(e.residency),requiredCapabilities:n(e.requiredCapabilities)}}export function mergeProviderPolicy(e,i,r,s){if(!i)return e;if(!e)return i;const o={...e};o.allow=d(e.allow,i.allow,"providerPolicy.allow",r,s);o.regions=d(e.regions,i.regions,"providerPolicy.regions",r,s);o.residency=d(e.residency,i.residency,"providerPolicy.residency",r,s);o.deny=u(e.deny,i.deny,"providerPolicy.deny",r,s);o.requiredCapabilities=u(e.requiredCapabilities,i.requiredCapabilities,"providerPolicy.requiredCapabilities",r,s);o.portability=y(e.portability,i.portability,f,"providerPolicy.portability",r,s,!0);o.managedPosture=v(e.managedPosture,i.managedPosture,r,s);const a=new Set(o.deny??[]),t=(o.allow??[]).filter((l)=>a.has(l));if(t.length)P(r,"providerPolicy",`Provider policy is unsatisfiable: ${t.join(", ")} are both allowed and denied.`);return o}function v(e,i,r,s){if(!i||!e||e===i||e==="either")return i??e;if(s("providerPolicy.managedPosture"))return i;return P(r,"providerPolicy.managedPosture","Managed posture cannot change or widen without a valid waiver.")}

package/dist/node/workspace-config/lssm-os-schema.js

@@ -0,0 +1 @@
+import*as o from"zod";import{LssmOsProviderExtensionV1Schema as m}from"./lssm-os-extension-schema.js";import{rejectLssmOsSecretValues as p}from"./lssm-os-secrets.js";export{LssmOsProviderExtensionV1Schema}from"./lssm-os-extension-schema.js";const e=o.string().trim().min(1),s=o.string().regex(/^(0|[1-9]\d*)$/);export const LssmOsScopeKindV1Schema=o.enum(["platform","organization","workspace","environment","deployable","feature","operation","tenant"]),LssmOsProfileV1Schema=o.enum(["bootstrap","startup","growth","regulated","enterprise","custom"]),LssmOsAutonomyLevelV1Schema=o.enum(["observe","recommend","plan","apply_with_approval","auto_apply_qualified"]),LssmOsRefV1Schema=o.object({id:e,version:e.optional()}).strict(),LssmOsScopeRefV1Schema=o.object({kind:LssmOsScopeKindV1Schema,id:e}).strict(),LssmOsWorkloadEnvelopeV1Schema=o.object({id:e,maxConcurrentUsers:o.number().int().positive().optional(),maxRequestsPerSecond:o.number().positive().optional(),maxBurstRequestsPerSecond:o.number().positive().optional(),maxLatencyMs:o.number().int().positive().optional(),minAvailabilityPercent:o.number().min(0).max(100).optional(),maxDataBytes:s.optional(),maxMonthlyDataGrowthBytes:s.optional(),maxStorageBytes:s.optional(),maxMonthlyEgressBytes:s.optional(),maxBackgroundJobsPerHour:o.number().int().nonnegative().optional(),maxRpoSeconds:o.number().int().nonnegative().optional(),maxRtoSeconds:o.number().int().nonnegative().optional(),regions:o.array(e).min(1).optional()}).strict(),LssmOsProviderPolicyV1Schema=o.object({allow:o.array(e).min(1).optional(),deny:o.array(e).optional(),regions:o.array(e).min(1).optional(),residency:o.array(e).min(1).optional(),portability:o.enum(["none","preferred","required"]).optional(),managedPosture:o.enum(["managed","self_hosted","either"]).optional(),requiredCapabilities:o.array(e).optional()}).strict().superRefine((t,i)=>{const n=new Set(t.deny??[]);for(const a of t.allow??[])if(n.has(a))i.addIssue({code:"custom",message:`Provider "${a}" cannot be both allowed and denied.`,path:["allow"]})}),LssmOsBudgetPolicyV1Schema=o.object({currency:o.string().regex(/^[A-Z]{3}$/),maxMonthlyMinorUnits:s.optional(),maxChangeMinorUnits:s.optional(),hardGateOnUnknownOrStale:o.boolean().optional(),warningPercent:o.number().min(0).max(100).optional(),unitEconomics:o.array(o.object({metric:e,maxCostMinorUnits:s,unit:e}).strict()).optional()}).strict(),LssmOsAutonomyPolicyV1Schema=o.object({default:LssmOsAutonomyLevelV1Schema,byScope:o.record(e,LssmOsAutonomyLevelV1Schema).optional()}).strict(),LssmOsInfrastructureOwnershipV1Schema=o.object({iac:o.enum(["provider_native","opentofu","docker_compose","none"]),ownerByResource:o.record(e,e).optional(),stateBackend:o.enum(["git","sqlite","pglite","postgres","supabase"]).optional(),stateRef:e.optional()}).strict(),LssmOsCredentialRefV1Schema=o.object({id:e,kind:o.enum(["environment","oidc","github_app","managed_custody"]),provider:e.optional(),envVar:o.string().regex(/^[A-Z][A-Z0-9_]*$/).optional()}).strict(),LssmOsDataProfileV1Schema=o.object({backend:e.optional(),region:e.optional(),retentionDays:o.number().int().nonnegative().optional(),samplingRate:o.number().min(0).max(1).optional(),privacyPreset:o.enum(["strict","balanced","custom"]).optional(),consentRequired:o.boolean().optional()}).strict(),LssmOsEvidenceConfigV1Schema=o.object({observability:LssmOsDataProfileV1Schema.optional(),analytics:LssmOsDataProfileV1Schema.optional(),featureFlags:LssmOsDataProfileV1Schema.optional(),experiments:LssmOsDataProfileV1Schema.optional()}).strict(),LssmOsConstraintWaiverV1Schema=o.object({id:e,constraintPath:o.string().regex(/^[a-zA-Z][a-zA-Z0-9.[\]_-]*$/),scope:LssmOsScopeRefV1Schema,expiresAt:o.iso.datetime({offset:!0}),approvedByRef:e,evidenceRefs:o.array(e).min(1),reason:e}).strict(),LssmOsPolicyConfigV1Schema=o.object({providerPolicy:LssmOsProviderPolicyV1Schema.optional(),budget:LssmOsBudgetPolicyV1Schema.optional(),autonomy:LssmOsAutonomyPolicyV1Schema.optional(),immutableRules:o.array(e).optional()}).strict(),LssmOsConfigLayerV1Schema=o.object({scope:LssmOsScopeRefV1Schema,policy:LssmOsPolicyConfigV1Schema,waivers:o.array(LssmOsConstraintWaiverV1Schema).optional()}).strict(),LssmOsConfigV1Schema=o.object({version:o.literal("1"),profile:LssmOsProfileV1Schema,goalRefs:o.array(LssmOsRefV1Schema).optional(),contractRefs:o.array(LssmOsRefV1Schema).optional(),workloadEnvelopes:o.array(LssmOsWorkloadEnvelopeV1Schema).optional(),providerPolicy:LssmOsProviderPolicyV1Schema.optional(),budget:LssmOsBudgetPolicyV1Schema.optional(),autonomy:LssmOsAutonomyPolicyV1Schema.optional(),infrastructure:LssmOsInfrastructureOwnershipV1Schema.optional(),credentialRefs:o.array(LssmOsCredentialRefV1Schema).optional(),evidence:LssmOsEvidenceConfigV1Schema.optional(),providerExtensions:o.array(m).optional(),immutableRules:o.array(e).optional(),layers:o.array(LssmOsConfigLayerV1Schema).optional()}).strict().superRefine((t,i)=>{p(t,i);const n=t.layers?.flatMap((a)=>a.waivers?.map((r)=>r.id)??[]);if(n&&new Set(n).size!==n.length)i.addIssue({code:"custom",message:"Waiver identifiers must be unique across all layers.",path:["layers"]})});

package/dist/node/workspace-config/lssm-os-secrets.js

@@ -0,0 +1 @@
+export function rejectLssmOsSecretValues(e,t){o(e,[],t)}function o(e,t,s){if(!e||typeof e!=="object")return;for(const[r,i]of Object.entries(e)){const n=[...t,r];if(a(r))s.addIssue({code:"custom",message:`Raw secret field "${r}" is forbidden; use a credential reference.`,path:n});o(i,n,s)}}function a(e){const t=e.replaceAll(/[-_]/g,"").toLowerCase();if(/(ref|refid|envvar)$/.test(t))return!1;return/(secret|password|passphrase|privatekey|apikey|accesstoken|authtoken)/.test(t)}

package/dist/node/workspace-config/lssm-os-types.js

@@ -0,0 +1 @@
+export const LSSM_OS_SCOPE_ORDER=["platform","organization","workspace","environment","deployable","feature","operation","tenant"];