@lssm/lib.contracts-spec 17.3.2

package/dist/operations/registry.audit.js

@@ -0,0 +1 @@
+import{EventExportCommand as e}from"./audit/event.export.command.js";import{EventGetQuery as t}from"./audit/event.get.query.js";import{EventListQuery as i}from"./audit/event.list.query.js";import{EvidenceAttachCommand as r}from"./audit/evidence.attach.command.js";import{PipelineHealthQuery as o}from"./audit/pipeline.health.query.js";export const auditOperationPartial=Object.freeze({"audit.event.list":i,"audit.event.get":t,"audit.event.export":e,"audit.evidence.attach":r,"audit.pipeline.health":o});

package/dist/operations/registry.coach.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Per-domain partial registry — Coach operations (Phase 6.A / #64).
+ *
+ * Populated by Phase 6.A — 4 `defineCommand` ops driving AI-suggested
+ * actions across agent / workflow / review / governance surfaces. Each
+ * op is read-modifying (telemetry side-effect → adaptive-recipes #67) and
+ * gated by `coach.suggest` (declared in
+ * `../../capabilities/agent-workflow.ts`).
+ *
+ * Pattern matches the 6 base + integrations + scaffold partials per the
+ * Phase 0.2 split. The CI guard at `./registry.domains.test.ts` validates
+ * `meta.key === registryKey` for every entry below.
+ *
+ * @see ./coach/shared-schemas.ts — domain constants + error envelope
+ * @see ./coach/agent-suggest-tool.command.ts
+ * @see ./coach/workflow-suggest-step.command.ts
+ * @see ./coach/review-summarize.command.ts
+ * @see ./coach/governance-suggest-constraint.command.ts
+ * @see ./registry.domains.ts — root spread aggregator
+ * @see ./registry.domains.test.ts — key-uniqueness CI guard
+ */
+import type { AnyOperationSpec } from './operation.js';
+/**
+ * Coach-domain operation specs.
+ *
+ * Owner: `w6-intelligence`. Phase 6.A landed 4 commands — one per pillar
+ * domain surface (agent / workflow / review / governance). All share the
+ * `coach.suggest` capability and emit `coach.suggestion.offered` audit
+ * for the adaptive-recipes feedback loop (#67).
+ */
+export declare const coachOperationPartial: Readonly<Record<string, AnyOperationSpec>>;

package/dist/operations/registry.coach.js

@@ -0,0 +1 @@
+import{AgentCoachSuggestToolCommand as o}from"./coach/agent-suggest-tool.command.js";import{GovernanceCoachSuggestConstraintCommand as e}from"./coach/governance-suggest-constraint.command.js";import{ReviewCoachSummarizeCommand as t}from"./coach/review-summarize.command.js";import{WorkflowCoachSuggestStepCommand as m}from"./coach/workflow-suggest-step.command.js";export const coachOperationPartial=Object.freeze({[o.meta.key]:o,[m.meta.key]:m,[t.meta.key]:t,[e.meta.key]:e});

package/dist/operations/registry.d.js

@@ -0,0 +1 @@
+export{};

package/dist/operations/registry.d.ts

@@ -0,0 +1,77 @@
+/**
+ * OperationSpecRegistry:
+ * - Registers ContractSpecs (unique by name+version)
+ * - Binds runtime handlers to specs
+ * - Provides lookup, iteration, and a safe execute() with validation/policy/enforcement
+ *
+ * Includes a minimal OpRegistry shim for backward-compat (deprecated).
+ */
+import type { AnySchemaModel } from '@lssm/lib.schema';
+import type { HandlerForOperationSpecWithResult } from '../install.js';
+import { SpecContractRegistry } from '../registry.js';
+import type { ResourceRefDescriptor } from '../resources.js';
+import { type ContractResult } from '../results/index.js';
+import type { HandlerCtx } from '../types.js';
+import { type AnyOperationSpec, type OperationSpec } from './operation.js';
+export type OperationKey = `${string}.v${string}`;
+export declare function opKey(key: string, version: string): OperationKey;
+type AnyOperationHandler = (args: unknown, ctx: HandlerCtx) => Promise<unknown>;
+/**
+ * In-memory registry for ContractSpecs and their bound handlers.
+ * Provides validation, policy enforcement, and guarded event emission at execute time.
+ */
+export declare class OperationSpecRegistry extends SpecContractRegistry<'operation', AnyOperationSpec> {
+    private handlers;
+    constructor(items?: AnyOperationSpec[]);
+    /**
+     * Override lookup to honor `meta.aliases` (Loop D D4 additive feature).
+     *
+     * First tries exact-key lookup via the parent. If that misses AND the
+     * requested key matches any registered operation's `meta.aliases` entry,
+     * returns that operation. Existing operations without aliases are
+     * unaffected — alias lookup only runs on miss.
+     */
+    get(key: string, version?: string): AnyOperationSpec | undefined;
+    /**
+     * Binds a runtime handler implementation to a previously registered spec.
+     *
+     * @param spec - The spec to bind to.
+     * @param handler - The async function implementing the business logic.
+     * @returns The registry instance for chaining.
+     * @throws If the spec is not found or a handler is already bound.
+     */
+    bind<I extends AnySchemaModel, O extends AnySchemaModel | ResourceRefDescriptor<boolean>>(spec: OperationSpec<I, O>, handler: HandlerForOperationSpecWithResult<OperationSpec<I, O>>): this;
+    /**
+     * Retrieves the bound handler for a spec.
+     */
+    getHandler(key: string, version?: string): AnyOperationHandler | undefined;
+    /** Iterate all bound operations (spec+handler). */
+    listBound(): {
+        spec: AnyOperationSpec;
+        handler: AnyOperationHandler;
+    }[];
+    /**
+     * Execute an operation by name/version with full runtime protections:
+     * 1. Validates input against Zod schema.
+     * 2. Enforces policy (Auth, RBAC, Rate Limits) via PDP.
+     * 3. Guards event emission to ensure only declared events are sent.
+     * 4. Validates output against Zod schema (if applicable).
+     * 5. Tracks telemetry (success/failure).
+     *
+     * @param key - Operation key.
+     * @param version - Operation version (optional, defaults to latest).
+     * @param rawInput - The raw input payload (e.g. from JSON body).
+     * @param ctx - The runtime context (actor, tenant, etc.).
+     */
+    execute(key: string, version: string | undefined, rawInput: unknown, ctx: HandlerCtx): Promise<unknown>;
+    /**
+     * Execute an operation and return a canonical ContractResult envelope.
+     *
+     * Existing adapters may keep using execute() for raw data compatibility.
+     * New adapters should use this method to preserve success metadata and
+     * typed failures across transport boundaries.
+     */
+    executeResult(key: string, version: string | undefined, rawInput: unknown, ctx: HandlerCtx): Promise<ContractResult<unknown, string, string>>;
+    private executeRaw;
+}
+export {};

package/dist/operations/registry.domains.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Aggregator for per-domain operation partial registries.
+ *
+ * Phase 0.2 of the agent-workflow pillar uplift introduces six per-domain
+ * partial registries (agent, workflow, review, governance, audit, fleet).
+ * Each lane (`w1`–`w5`) owns one partial and lands its contracts (Phase 0.4)
+ * without contending on a single registry file.
+ *
+ * This aggregator spreads the partials into a single readonly union, exposes
+ * a typed `OperationDomain` enum, and is consumed by the CI guard test
+ * (`registry.domains.test.ts`) to assert key-uniqueness across all partials.
+ *
+ * The `OperationSpecRegistry` class (in `./registry.ts`) remains the
+ * runtime registration surface; nothing here changes existing consumer
+ * behavior. Once Phase 0.4 populates each partial, downstream wiring can
+ * iterate `allDomainOperationPartials` to register every operation in a
+ * single pass.
+ *
+ * @see ./registry.agent.ts
+ * @see ./registry.workflow.ts
+ * @see ./registry.review.ts
+ * @see ./registry.governance.ts
+ * @see ./registry.audit.ts
+ * @see ./registry.fleet.ts
+ */
+import type { AnyOperationSpec } from './operation.js';
+export declare const OPERATION_DOMAINS: readonly ['agent', 'workflow', 'review', 'governance', 'audit', 'fleet', 'integrations', 'coach'];
+export type OperationDomain = (typeof OPERATION_DOMAINS)[number];
+/**
+ * Map of every per-domain partial keyed by domain name. Each entry is
+ * frozen at the source so consumers cannot mutate the union.
+ */
+export declare const allDomainOperationPartials: Readonly<Record<OperationDomain, Readonly<Record<string, AnyOperationSpec>>>>;
+/**
+ * Flattened spread of every domain partial. Key-unique by construction
+ * (validated by the CI guard test). Empty until Phase 0.4 lands contracts.
+ */
+export declare const allDomainOperations: Readonly<Record<string, AnyOperationSpec>>;
+/**
+ * Return every domain operation as a flat array, suitable for passing to
+ * `new OperationSpecRegistry(allDomainOperationsAsList())` once Phase 0.4
+ * populates the partials.
+ */
+export declare function allDomainOperationsAsList(): AnyOperationSpec[];

package/dist/operations/registry.domains.js

@@ -0,0 +1 @@
+import{integrationsOperationPartial as o}from"./integrations/registry.js";import{agentOperationPartial as e}from"./registry.agent.js";import{auditOperationPartial as r}from"./registry.audit.js";import{coachOperationPartial as t}from"./registry.coach.js";import{fleetOperationPartial as a}from"./registry.fleet.js";import{governanceOperationPartial as i}from"./registry.governance.js";import{reviewOperationPartial as n}from"./registry.review.js";import{workflowOperationPartial as p}from"./registry.workflow.js";export const OPERATION_DOMAINS=["agent","workflow","review","governance","audit","fleet","integrations","coach"];export const allDomainOperationPartials=Object.freeze({agent:e,workflow:p,review:n,governance:i,audit:r,fleet:a,integrations:o,coach:t});export const allDomainOperations=Object.freeze({...e,...p,...n,...i,...r,...a,...o,...t});export function allDomainOperationsAsList(){return Object.values(allDomainOperations)}

package/dist/operations/registry.fleet.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Per-domain partial registry — Fleet (operating-cockpit) operations.
+ *
+ * Phase 0.2 partial. See ./registry.agent.ts for the design rationale.
+ *
+ * Populated by Phase 0.4.F — 3 aggregating read-only operations per
+ * `fleet/DOMAIN_NOTES.md` and SEAMS.md §3.10 (S-10). The fleet domain is
+ * the ONLY place where multi-domain composition is allowed; each op
+ * composes via the public sibling ops only (no direct store access).
+ *
+ * @see ./registry.domains.ts — root spread aggregator
+ * @see ./fleet/DOMAIN_NOTES.md — per-op IO + capability + seam map
+ */
+import type { AnyOperationSpec } from './operation.js';
+/**
+ * Fleet-domain operation specs.
+ *
+ * Owner: `w4-operating`. Three aggregating queries — no mutations, no
+ * audit emission (queries don't audit per SEAMS.md §3.11).
+ */
+export declare const fleetOperationPartial: Readonly<Record<string, AnyOperationSpec>>;

package/dist/operations/registry.fleet.js

@@ -0,0 +1 @@
+import{FleetHealthSnapshotQuery as e}from"./fleet/health-snapshot.query.js";import{FleetMetricsSummaryQuery as t}from"./fleet/metrics-summary.query.js";import{FleetRoiSnapshotQuery as r}from"./fleet/roi-snapshot.query.js";export const fleetOperationPartial=Object.freeze({[t.meta.key]:t,[e.meta.key]:e,[r.meta.key]:r});

package/dist/operations/registry.governance.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Per-domain partial registry — Governance operations.
+ *
+ * Phase 0.2 partial. See ./registry.agent.ts for the design rationale.
+ * Phase 0.4.D landed all 8 governance operation specs (W5 — governance/audit).
+ *
+ * @see ./registry.domains.ts — root spread aggregator
+ * @see ./governance/DOMAIN_NOTES.md — IO sketches, lifecycle FSM, error taxonomy
+ * @see ./SEAMS.md — cross-domain seam contracts (S-06, S-07, S-09, S-11)
+ */
+import type { AnyOperationSpec } from './operation.js';
+/**
+ * Governance-domain operation specs.
+ *
+ * Owner: `w5-governance`. Phase 0.4.D landed 8 ops:
+ *  - 4 queries: policy.list, policy.get, policy.simulate, policy.health
+ *  - 4 commands: policy.update, constraint.add, constraint.remove,
+ *    notification.dispatch (internal-only per SEAMS Q-16)
+ */
+export declare const governanceOperationPartial: Readonly<Record<string, AnyOperationSpec>>;

package/dist/operations/registry.governance.js

@@ -0,0 +1 @@
+import{ConstraintAddCommand as o}from"./governance/constraint.add.command.js";import{ConstraintRemoveCommand as e}from"./governance/constraint.remove.command.js";import{NotificationDispatchCommand as r}from"./governance/notification.dispatch.command.js";import{PolicyGetQuery as t}from"./governance/policy.get.query.js";import{PolicyHealthQuery as n}from"./governance/policy.health.query.js";import{PolicyListQuery as i}from"./governance/policy.list.query.js";import{PolicySimulateQuery as a}from"./governance/policy.simulate.query.js";import{PolicyUpdateCommand as c}from"./governance/policy.update.command.js";export const governanceOperationPartial=Object.freeze({"governance.policy.list":i,"governance.policy.get":t,"governance.policy.update":c,"governance.policy.simulate":a,"governance.constraint.add":o,"governance.constraint.remove":e,"governance.policy.health":n,"governance.notification.dispatch":r});

package/dist/operations/registry.js

@@ -0,0 +1 @@
+import{eventKey as q}from"../events.js";import{normalizePolicyRequirement as M}from"../policy/requirements.js";import{SpecContractRegistry as L}from"../registry.js";import{ContractSpecError as f,contractFail as E,contractOk as K,createContractError as g,isContractFailure as F,isContractSuccess as O,isStandardSuccessCode as Z,normalizeContractError as U,STANDARD_SUCCESS_SPECS as j}from"../results/index.js";import{readIssues as b}from"../results/value-utils.js";import{requiredApprovalEffects as B}from"./approval.js";import{mergeSafeEconomicEvidenceRefIds as G,parseSafeEconomicEvidenceRefId as Q}from"./economic-evidence.js";import{isEmitDeclRef as V}from"./operation.js";export function opKey(t,r){return`${t}.v${r}`}function W(t){const r=new Set;for(const e of t.values())r.add(e.meta.key);const o=new Map;for(const e of t.values()){const a=e.meta.aliases;if(!a)continue;for(const n of a){if(n===e.meta.key)throw Error(`OperationSpec "${e.meta.key}" lists its own canonical key as an alias; remove the self-reference.`);if(r.has(n))throw Error(`OperationSpec "${e.meta.key}" declares alias "${n}" that collides with another operation's canonical key. Aliases must not shadow canonical keys.`);const s=o.get(n);if(s&&s!==e.meta.key)throw Error(`Alias "${n}" is declared by both "${s}" and "${e.meta.key}". Each alias must resolve to exactly one operation.`);o.set(n,e.meta.key)}}}function N(t,r){if(!r?.length||!t||typeof t!=="object")return t;const o={...t};for(const e of r)if(e in o)o[e]="[REDACTED]";return o}export class OperationSpecRegistry extends L{handlers=new Map;constructor(t){super("operation",t);W(this.items)}get(t,r){const o=super.get(t,r);if(o)return o;for(const e of this.items.values()){const a=e.meta.aliases;if(a&&a.includes(t)){if(!r||e.meta.version===r)return e}}return}bind(t,r){const o=opKey(t.meta.key,t.meta.version);if(!this.items.has(o))throw Error(`Cannot bind; spec not found: ${o}`);if(this.handlers.has(o))throw Error(`Handler already bound for ${o}`);this.handlers.set(o,r);return this}getHandler(t,r){const o=this.get(t,r);if(!o)return;return this.handlers.get(opKey(o.meta.key,o.meta.version))}listBound(){const t=[];for(const[r,o]of this.items.entries()){const e=this.handlers.get(r);if(e)t.push({spec:o,handler:e})}return t}async execute(t,r,o,e){const a=await this.executeResult(t,r,o,e);if(!a.ok)throw new f(a.problem);return a.data}async executeResult(t,r,o,e){const a=this.get(t,r);try{const n=await this.executeRaw(t,r,o,e);if(O(n))return{...n,traceId:n.traceId??e.traceId,source:n.source??{channel:e.channel}};return K(n,{traceId:e.traceId,source:{channel:e.channel}})}catch(n){const s=this.get(t,r)??a;return U(n,{traceId:e.traceId,operation:s?{key:s.meta.key,version:s.meta.version,kind:s.meta.kind}:void 0,source:{channel:e.channel},declaredErrors:{...s?.results?.errors??{},...s?.io.errors??{}}})}}async executeRaw(t,r,o,e){const a=this.get(t,r);if(!a)throw Error(`Spec not found for ${t}${r?`.v${r}`:""}`);const n=await e.specVariantResolver?.resolve({name:a.meta.key,version:a.meta.version,kind:a.meta.kind},e)??a;let s=opKey(n.meta.key,n.meta.version),w=this.handlers.get(s);if(!w){const i=opKey(a.meta.key,a.meta.version);w=this.handlers.get(i);s=i}if(!w)throw Error(`No handler bound for ${s}`);let d,u;try{u=n.io.input?n.io.input.getZod().parse(o):o}catch(i){throw g("VALIDATION_FAILED",void 0,{detail:"Operation input failed contract validation.",issues:b(i),metadata:{validationPhase:"input"}})}const v=D(void 0,e.economicEvidenceRefs,_(o),_(u)),T=D(n.economicEvidence?.refs,v);if(n.economicEvidence?.required){if((n.economicEvidence.refs?.length??0)===0)throw Error(`EconomicEvidenceRequired: ${opKey(n.meta.key,n.meta.version)} must declare at least one economic evidence seam ref.`);if(v.length===0)throw Error(`EconomicEvidenceRequired: ${opKey(n.meta.key,n.meta.version)} requires at least one safe economic evidence ref.`);if(!J(n.economicEvidence.refs,v))throw Error(`EconomicEvidenceRequired: ${opKey(n.meta.key,n.meta.version)} requires a runtime economic evidence ref matching a declared seam kind.`)}if(e.decide){const[i,c]=n.meta.key.split(".");if(!i||!c)throw Error(`Invalid spec name: ${n.meta.key}`);const l=M(n.policy),m={tenantId:e.tenantId,workspaceId:e.workspaceId,organizationId:e.organizationId,userId:e.userId,channel:e.channel,...e.policyContext},p=await e.decide({service:i,command:c,version:n.meta.version,actor:e.actor??"anonymous",channel:e.channel,roles:e.roles,organizationId:e.organizationId,userId:e.userId,flags:n.policy.flags??[],operation:{key:n.meta.key,version:n.meta.version,kind:n.meta.kind},requirements:l,policies:n.policy.policies,fieldPolicies:n.policy.fieldPolicies,permissions:e.permissions,subject:{roles:e.roles,permissions:e.permissions,attributes:e.attributes,relationships:e.relationships},resource:{type:n.policy.resource?.type??n.meta.key,fields:n.policy.resource?.fields??n.policy.fieldPolicies?.map((h)=>h.field)},context:m});if(p.effect==="deny")throw Error(`PolicyDenied: ${n.meta.key}.v${n.meta.version}`);if(p.rateLimit&&e.rateLimit){const h=p.rateLimit.key??"default",z=p.rateLimit.rpm??60;await e.rateLimit(h,1,z)}}if(n.execution?.approval){if(!e.approvalReceipt)throw R(n,"missing_receipt");if(!e.approvalPort)throw R(n,"approval_runtime_unavailable");const i=await e.approvalPort.authorize({receipt:e.approvalReceipt,operation:{key:n.meta.key,version:n.meta.version},subject:{actor:e.actor,userId:e.userId,tenantId:e.tenantId,workspaceId:e.workspaceId,organizationId:e.organizationId},input:u,requiredEffects:B(n.execution),requestedCost:e.approvalCost});if(i.effect==="deny")throw R(n,i.reason)}if(n.execution?.ceremony){if(!e.ceremonyReceipt)throw I(n,"missing_ceremony");if(!e.ceremonyPort)throw I(n,"ceremony_runtime_unavailable");const i=await e.ceremonyPort.claim({receipt:e.ceremonyReceipt,requirement:n.execution.ceremony,operation:{key:n.meta.key,version:n.meta.version},subject:{actor:e.actor,userId:e.userId,tenantId:e.tenantId,workspaceId:e.workspaceId,organizationId:e.organizationId,ceremonyBindingRef:e.ceremonyBindingRef}});if(i.effect==="deny")throw I(n,i.reason);d={port:e.ceremonyPort,ceremonyId:i.ceremonyId,leaseId:i.leaseId}}const k=new Map;if(n.sideEffects?.emits)for(const i of n.sideEffects.emits)if(V(i)){const c=e.eventSpecResolver?.get(i.ref.key,i.ref.version);if(c)k.set(`${i.ref.key}.v${i.ref.version}`,c.payload)}else k.set(`${i.key}.v${i.version}`,i.payload);const H=async(i,c,l)=>{const m=q(i,c),p=k.get(m);if(!p)throw Error(`UndeclaredEvent: ${m} not allowed by ${opKey(n.meta.key,n.meta.version)}`);const h=p.getZod().parse(l);await e.eventPublisher?.({key:i,version:c,payload:h,traceId:e.traceId})};if(e.appConfig){if(!e.branding)e.branding=e.appConfig.branding;if(!e.translation)e.translation={config:e.appConfig.translation};else if(!e.translation.config)e.translation={...e.translation,config:e.appConfig.translation}}const S=e.telemetry,A=async(i,c)=>{if(!S||!i?.event||n.execution?.dataHandling?.telemetry==="disabled")return;try{const l=n.execution?.dataHandling,m=l?{...c,input:N(c.input,l.transientInputFields),output:N(c.output,l.transientOutputFields)}:c,p=i.properties?.(m)??{};await S.track(i.event.key,i.event.version??"1.0.0",p,{tenantId:e.organizationId??void 0,organizationId:e.organizationId,userId:e.userId,actor:e.actor,channel:e.channel,metadata:e.traceId?{traceId:e.traceId}:void 0})}catch(l){e.onTelemetryError?.(l)}};let y;try{y=await w(u,{...e,ceremonyExecution:d?{ceremonyId:d.ceremonyId,leaseId:d.leaseId}:void 0,economicEvidenceRefs:T,__emitGuard__:H});if(F(y))throw new f(y.problem)}catch(i){await d?.port.complete({leaseId:d.leaseId,outcome:"failed"});if(n.telemetry?.failure)await A(n.telemetry.failure,{input:u??o,error:i});throw i}if(n.telemetry?.success)await A(n.telemetry.success,{input:u??o,output:y});let C;try{C=Y(n,y)}catch(i){await d?.port.complete({leaseId:d.leaseId,outcome:"failed"});if(i instanceof f)throw i;throw g("INTERNAL_ERROR",void 0,{detail:"Operation output failed contract validation.",issues:b(i),metadata:{validationPhase:"output"}})}await d?.port.complete({leaseId:d.leaseId,outcome:"succeeded"});return C}}function Y(t,r){const o=t.io.output;if(o?.getZod){if(O(r)){const e=P(t,r,o);if(e.status===204||e.state==="empty")return e;const a=o.getZod().parse(e.data);return{...e,data:a}}return o.getZod().parse(r)}return O(r)?P(t,r,o):r}function R(t,r){return g("APPROVAL_REQUIRED",{reason:r},{detail:"A valid scoped approval receipt is required before execution.",operation:{key:t.meta.key,version:t.meta.version,kind:t.meta.kind}})}function I(t,r){return g("CEREMONY_REQUIRED",{reason:r},{detail:"A valid host-bound, unexpired, single-use ceremony is required before execution.",operation:{key:t.meta.key,version:t.meta.version,kind:t.meta.kind}})}function _(t){if(!t||typeof t!=="object")return[];const r=t.economicEvidenceRefs;if(!Array.isArray(r))return[];return r.filter((o)=>typeof o==="string"&&o.length>0)}function J(t,r){const o=new Set(t?.map((e)=>e.kind)??[]);if(o.size===0)return!1;return r.every((e)=>{const a=Q(e);return a!==void 0&&o.has(a.kind)})}function D(t,r,...o){return G(t?.map((e)=>e.id),r,...o)}function P(t,r,o){const e=X(t,r.code),a=Z(r.code)?j[r.code]:void 0;if(!e&&!a)throw new f(E("INTERNAL_ERROR",{code:r.code},{detail:`Undeclared contract success: ${r.code}`}).problem);if(r.code==="NO_CONTENT"&&!e&&!x(o))throw new f(E("INTERNAL_ERROR",{code:r.code},{detail:"NO_CONTENT success must be declared or use an output schema that accepts undefined."}).problem);if(r.code==="NO_CONTENT"&&r.data!==void 0)throw new f(E("INTERNAL_ERROR",{code:r.code},{detail:"NO_CONTENT success cannot include response data."}).problem);const n=e??a;return{...r,status:n?.status??r.status,state:n?.state??r.state,headers:{...n?.headers??{},...r.headers??{}}}}function X(t,r){return t.results?.success?.[r]??t.io.success?.[r]}function x(t){if(!("getZod"in t)||typeof t.getZod!=="function")return!0;return t.getZod().safeParse(void 0).success}

package/dist/operations/registry.review.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Per-domain partial registry — Review queue operations.
+ *
+ * Phase 0.4.C population (`agent-workflow-pillar-uplift` plan §0.4.C). Each
+ * operation is keyed by its canonical `meta.key`; the CI guard at
+ * `registry.domains.test.ts` enforces uniqueness and `meta.key === index`.
+ *
+ * @see ./registry.domains.ts — root spread aggregator
+ * @see ./review/DOMAIN_NOTES.md — domain-level decisions
+ * @see ./SEAMS.md §3.4–§3.8 — cross-domain seams
+ */
+import type { AnyOperationSpec } from './operation.js';
+/**
+ * Review-domain operation specs (9 ops: 8 base + `review.queue.health`).
+ *
+ * Owner: `w3-review`.
+ */
+export declare const reviewOperationPartial: Readonly<Record<string, AnyOperationSpec>>;

package/dist/operations/registry.review.js

@@ -0,0 +1 @@
+import{ReviewApproveCommand as e}from"./review/commands/reviewApprove.command.js";import{ReviewAssignCommand as r}from"./review/commands/reviewAssign.command.js";import{ReviewCommentCommand as i}from"./review/commands/reviewComment.command.js";import{ReviewEscalateCommand as o}from"./review/commands/reviewEscalate.command.js";import{ReviewRejectCommand as m}from"./review/commands/reviewReject.command.js";import{ReviewRequestChangesCommand as t}from"./review/commands/reviewRequestChanges.command.js";import{ReviewGetQuery as a}from"./review/queries/reviewGet.query.js";import{ReviewListQuery as p}from"./review/queries/reviewList.query.js";import{ReviewQueueHealthQuery as n}from"./review/queries/reviewQueueHealth.query.js";export const reviewOperationPartial=Object.freeze({"review.list":p,"review.get":a,"review.queue.health":n,"review.approve":e,"review.reject":m,"review.request-changes":t,"review.escalate":o,"review.comment":i,"review.assign":r});

package/dist/operations/registry.workflow.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Per-domain partial registry — Workflow operations.
+ *
+ * Phase 0.2 partial. See ./registry.agent.ts for the design rationale.
+ *
+ * @see ./registry.domains.ts — root spread aggregator
+ */
+import type { AnyOperationSpec } from './operation.js';
+/**
+ * Workflow-domain operation specs.
+ *
+ * Owner: `w2-workflow`. Populated by Phase 0.4.B — **14 operations**
+ * (13 ops + 1 health probe per SEAMS Q-05):
+ *   queries:  workflow.list, workflow.get, workflow.runner.health
+ *   commands: workflow.create, workflow.update, workflow.activate,
+ *             workflow.deactivate, workflow.run.dispatch, workflow.run.pause,
+ *             workflow.run.resume, workflow.run.retry, workflow.run.cancel,
+ *             workflow.step.advance, workflow.step.skip
+ */
+export declare const workflowOperationPartial: Readonly<Record<string, AnyOperationSpec>>;

package/dist/operations/registry.workflow.js

@@ -0,0 +1 @@
+import{WorkflowActivateCommand as e,WorkflowCreateCommand as o,WorkflowDeactivateCommand as a,WorkflowGetQuery as m,WorkflowListQuery as t,WorkflowRunCancelCommand as r,WorkflowRunDispatchCommand as k,WorkflowRunnerHealthQuery as n,WorkflowRunPauseCommand as y,WorkflowRunResumeCommand as l,WorkflowRunRetryCommand as f,WorkflowStepAdvanceCommand as w,WorkflowStepSkipCommand as d,WorkflowUpdateCommand as p}from"./workflow/index.js";export const workflowOperationPartial=Object.freeze({[t.meta.key]:t,[m.meta.key]:m,[n.meta.key]:n,[o.meta.key]:o,[p.meta.key]:p,[e.meta.key]:e,[a.meta.key]:a,[k.meta.key]:k,[y.meta.key]:y,[l.meta.key]:l,[f.meta.key]:f,[r.meta.key]:r,[w.meta.key]:w,[d.meta.key]:d});

package/dist/operations/report/getContractVerificationStatus.d.ts

@@ -0,0 +1,68 @@
+import { SchemaModel, ZodSchemaType } from '@lssm/lib.schema';
+import * as z from 'zod';
+/**
+ * Status of a single contract's verification within the impact report.
+ */
+export declare const ContractVerificationStatusModel: SchemaModel<{
+    name: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    lastVerifiedSha: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: true;
+    };
+    lastVerifiedDate: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: true;
+    };
+    surfaces: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+        isArray: true;
+    };
+    driftMismatches: {
+        type: import("@lssm/lib.schema").FieldType<number, number>;
+        isOptional: false;
+    };
+}>;
+export declare const GetContractVerificationStatusInput: SchemaModel<{
+    projectPath: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    baseline: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: true;
+    };
+}>;
+export declare const GetContractVerificationStatusOutput: ZodSchemaType<z.ZodObject<{
+    contracts: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        lastVerifiedSha: z.ZodOptional<z.ZodString>;
+        lastVerifiedDate: z.ZodOptional<z.ZodString>;
+        surfaces: z.ZodArray<z.ZodString>;
+        driftMismatches: z.ZodInt;
+    }, z.core.$strip>>;
+}, z.core.$strip>>;
+/**
+ * Query to retrieve per-contract verification status for the impact report.
+ */
+export declare const GetContractVerificationStatusQuery: import("..").OperationSpec<SchemaModel<{
+    projectPath: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    baseline: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: true;
+    };
+}>, ZodSchemaType<z.ZodObject<{
+    contracts: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        lastVerifiedSha: z.ZodOptional<z.ZodString>;
+        lastVerifiedDate: z.ZodOptional<z.ZodString>;
+        surfaces: z.ZodArray<z.ZodString>;
+        driftMismatches: z.ZodInt;
+    }, z.core.$strip>>;
+}, z.core.$strip>>, undefined>;

package/dist/operations/report/getContractVerificationStatus.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as i,ZodSchemaType as r}from"@lssm/lib.schema";import*as t from"zod";import{StabilityEnum as a}from"../../ownership.js";import{defineQuery as o}from"../operation.js";const n="report";const s=["platform.core"];const c=["report","drift","verification"];const p=a.Experimental;export const ContractVerificationStatusModel=new i({name:"ContractVerificationStatus",fields:{name:{type:e.String_unsecure(),isOptional:!1},lastVerifiedSha:{type:e.String_unsecure(),isOptional:!0},lastVerifiedDate:{type:e.String_unsecure(),isOptional:!0},surfaces:{type:e.String_unsecure(),isOptional:!1,isArray:!0},driftMismatches:{type:e.Int_unsecure(),isOptional:!1}}});export const GetContractVerificationStatusInput=new i({name:"GetContractVerificationStatusInput",fields:{projectPath:{type:e.String_unsecure(),isOptional:!1},baseline:{type:e.String_unsecure(),isOptional:!0}}});export const GetContractVerificationStatusOutput=new r(t.object({contracts:t.object({name:t.string(),lastVerifiedSha:t.string().optional(),lastVerifiedDate:t.string().optional(),surfaces:t.string().array(),driftMismatches:t.int()}).array()}),{name:"GetContractVerificationStatusOutput"});export const GetContractVerificationStatusQuery=o({meta:{key:"report.getContractVerificationStatus",title:"Get Contract Verification Status",version:"1.0.0",description:"Retrieves per-contract verification status for the impact report.",goal:"Enable stakeholders to see contract health at a glance.",context:"Part of the impact report domain. Reads from drift check outputs and verified.json to provide a consolidated view of each contract's drift debt and surface coverage.",domain:n,owners:s,tags:c,stability:p},io:{input:GetContractVerificationStatusInput,output:GetContractVerificationStatusOutput,errors:{PROJECT_NOT_FOUND:{description:"Project path does not exist.",http:404,when:"The provided projectPath does not resolve to a valid directory."}}},policy:{auth:"anonymous",pii:[]}});

package/dist/operations/report/index.d.ts

@@ -0,0 +1,10 @@
+import { type HandlerForOperationSpec } from '../../install.js';
+import type { OperationSpecRegistry } from '../registry.js';
+import { GetContractVerificationStatusQuery } from './getContractVerificationStatus.js';
+export { ContractVerificationTableDataView } from '../../data-views/report/contractVerificationTable.js';
+export { ContractVerificationStatusModel, GetContractVerificationStatusInput, GetContractVerificationStatusOutput, GetContractVerificationStatusQuery, } from './getContractVerificationStatus.js';
+export declare const getContractVerificationStatusHandler: HandlerForOperationSpec<typeof GetContractVerificationStatusQuery>;
+/**
+ * Register report-related operation contracts in the given registry.
+ */
+export declare function registerReportContracts(registry: OperationSpecRegistry): OperationSpecRegistry;

package/dist/operations/report/index.js

@@ -0,0 +1 @@
+import{installOp as u}from"../../install.js";import{safeParseJson as f}from"../../utils/safe-json.js";import{GetContractVerificationStatusQuery as l}from"./getContractVerificationStatus.js";export{ContractVerificationTableDataView}from"../../data-views/report/contractVerificationTable.js";export{ContractVerificationStatusModel,GetContractVerificationStatusInput,GetContractVerificationStatusOutput,GetContractVerificationStatusQuery}from"./getContractVerificationStatus.js";export const getContractVerificationStatusHandler=async(r,m)=>{try{const s=await Bun.spawn(["contractspec","impl","status","--format","json","--all"],{cwd:r.projectPath}).stdout,a=await Bun.readableStreamToText(s);if(!a)return{contracts:[]};const n=f(a);if(!n.ok){console.error("Contract verification CLI returned invalid JSON:",a?.slice(0,200));return{contracts:[]}}const c=n.data,o=[];for(const t of c.results||[]){const p={name:t.specKey,lastVerifiedSha:t.specHash,lastVerifiedDate:t.specHash?new Date().toISOString():void 0,surfaces:t.implementations.filter((e)=>e.exists).map((e)=>e.type),driftMismatches:t.implementations.filter((e)=>!e.exists).length};o.push(p)}return{contracts:o}}catch(i){console.error("Failed to get contract verification status:",i);return{contracts:[]}}};export function registerReportContracts(r){u(r,l,getContractVerificationStatusHandler);return r}

package/dist/operations/review/commands/index.d.ts

@@ -0,0 +1,6 @@
+export * from './reviewApprove.command.js';
+export * from './reviewAssign.command.js';
+export * from './reviewComment.command.js';
+export * from './reviewEscalate.command.js';
+export * from './reviewReject.command.js';
+export * from './reviewRequestChanges.command.js';

package/dist/operations/review/commands/index.js

@@ -0,0 +1 @@
+export*from"./reviewApprove.command.js";export*from"./reviewAssign.command.js";export*from"./reviewComment.command.js";export*from"./reviewEscalate.command.js";export*from"./reviewReject.command.js";export*from"./reviewRequestChanges.command.js";

package/dist/operations/review/commands/reviewApprove.command.d.ts

@@ -0,0 +1,55 @@
+import { SchemaModel } from '@lssm/lib.schema';
+export declare const ReviewApproveDocBlock: {
+    id: string;
+    title: string;
+    summary: string;
+    kind: "reference";
+    visibility: "public";
+    route: string;
+    tags: string[];
+    body: string;
+};
+export declare const ReviewApproveCommand: import("../..").OperationSpec<SchemaModel<{
+    id: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    comment: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: true;
+    };
+    conditions: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: true;
+        isArray: true;
+    };
+    idempotencyKey: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+}>, SchemaModel<{
+    id: {
+        readonly type: import("@lssm/lib.schema").FieldType<string, string>;
+        readonly isOptional: false;
+    };
+    status: {
+        readonly type: import("@lssm/lib.schema").FieldType<string, string>;
+        readonly isOptional: false;
+    };
+    decidedAt: {
+        readonly type: import("@lssm/lib.schema").FieldType<Date, string>;
+        readonly isOptional: false;
+    };
+    auditEventId: {
+        readonly type: import("@lssm/lib.schema").FieldType<string, string>;
+        readonly isOptional: false;
+    };
+    version: {
+        readonly type: import("@lssm/lib.schema").FieldType<number, number>;
+        readonly isOptional: false;
+    };
+    dispatchAuditEventId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: true;
+    };
+}>, undefined>;

package/dist/operations/review/commands/reviewApprove.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{docRef as t}from"../../../docs/registry.js";import{defineCommand as r}from"../../operation.js";import{REVIEW_DOMAIN as a,REVIEW_OWNERS as o,REVIEW_STABILITY as p,REVIEW_TAGS as n}from"../constants.js";import{ReviewDecisionOutputFields as s}from"../shared-schemas.js";const d=new i({name:"ReviewApproveInput",fields:{id:{type:e.ID(),isOptional:!1},comment:{type:e.String_unsecure(),isOptional:!0},conditions:{type:e.String_unsecure(),isOptional:!0,isArray:!0},idempotencyKey:{type:e.NonEmptyString(),isOptional:!1}}});const l=new i({name:"ReviewApproveOutput",fields:{...s,dispatchAuditEventId:{type:e.ID(),isOptional:!0}}});export const ReviewApproveDocBlock={id:"docs.tech.review.approve",title:"Approve a review record",summary:"Terminal-approve a review record; emits one audit event and dispatches the SEAMS \xA73.7 subject-kind callee (when applicable).",kind:"reference",visibility:"public",route:"/docs/tech/review/approve",tags:["review","approve","mutation"],body:"# review.approve\n\nApproves a review record. Terminal at the record level \u2014 re-opening requires\na fresh review (no `review.reopen` in v1.0).\n\nPer SEAMS \xA73.7 (S-07): when `subject.kind` resolves a downstream callee\n(`governance.policy.activate` \u2228 `workflow.run.resume` \u2228\n`agent.set-autonomy`), the handler dispatches it via the\n`lib.companyos-runtime` outbox. The dispatched op runs under the original\nreviewer's auth context (\xA71.2); the handler pre-checks the reviewer's\ncapability at decide-time per Q-03 and refuses with `FORBIDDEN` when the\ndownstream capability is missing \u2014 prevents the \"approved but inert\" state.\n\nCapability: `review.act` (+ implicit downstream capability where dispatch\napplies). Per SEAMS \xA71.5, missing capability returns `FORBIDDEN` \u2014 auditor\npersona sees the button disabled with a read-only tooltip.\n\nIdempotency: `idempotencyKey` is required. Replays return the original\nresult; differing payload on replay \u2192 `IDEMPOTENCY_FAIL`.\n"};export const ReviewApproveCommand=r({meta:{key:"review.approve",title:"Approve Review",version:"1.0.0",description:"Approve a review record; dispatch subject-kind callee if applicable.",goal:"Provide a single capability-gated path to terminally approve a review with audit + outbox-backed downstream dispatch.",context:"Used by the review-queue cockpit. Per SEAMS \xA73.7 (S-07) the approve handler dispatches the SEAMS-declared subject-kind callee atomically with audit emission via the outbox.",domain:a,owners:[...o],tags:[...n,"approve"],stability:p,docId:[t(ReviewApproveDocBlock.id)]},capability:{key:"review.act",version:"1.0.0"},io:{input:d,output:l,errors:{NOT_FOUND:{description:"No review found for the supplied id.",recoverable:!1,http:404,when:"No review found for the supplied id."},CONFLICT:{description:"Review is already in a terminal state.",recoverable:!1,http:409,when:"Review is already in a terminal state."},FORBIDDEN:{description:"Caller lacks review.act, or downstream subject-dispatch capability missing (SEAMS Q-03 pre-check).",recoverable:!1,http:403,when:"Caller lacks review.act, or downstream subject-dispatch capability missing."},VALIDATION:{description:"Input failed validation (e.g., conditions malformed).",recoverable:!1,http:400,when:"Input failed validation (e.g., conditions malformed)."},DEPENDENCY:{description:"Policy engine, audit pipeline, or downstream dispatch temporarily unavailable.",recoverable:!0,http:503,when:"Policy engine, audit pipeline, or downstream dispatch temporarily unavailable."},IDEMPOTENCY_FAIL:{description:"Replay detected with differing payload; original result preserved.",recoverable:!1,http:409,when:"Replay detected with differing payload; original result preserved."}}},policy:{auth:"user",policies:[{key:"review.decision.governed",version:"1.0.0"}]},sideEffects:{audit:["review.approved"]}});

package/dist/operations/review/commands/reviewAssign.command.d.ts

@@ -0,0 +1,50 @@
+import { SchemaModel } from '@lssm/lib.schema';
+export declare const ReviewAssignDocBlock: {
+    id: string;
+    title: string;
+    summary: string;
+    kind: "reference";
+    visibility: "public";
+    route: string;
+    tags: string[];
+    body: string;
+};
+export declare const ReviewAssignCommand: import("../..").OperationSpec<SchemaModel<{
+    id: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    assigneeId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    note: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: true;
+    };
+    idempotencyKey: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+}>, SchemaModel<{
+    id: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    assigneeId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    assignedAt: {
+        type: import("@lssm/lib.schema").FieldType<Date, string>;
+        isOptional: false;
+    };
+    auditEventId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    version: {
+        type: import("@lssm/lib.schema").FieldType<number, number>;
+        isOptional: false;
+    };
+}>, undefined>;

package/dist/operations/review/commands/reviewAssign.command.js

@@ -0,0 +1,12 @@
+import{ScalarTypeEnum as e,SchemaModel as i}from"@lssm/lib.schema";import{docRef as t}from"../../../docs/registry.js";import{defineCommand as s}from"../../operation.js";import{REVIEW_DOMAIN as n,REVIEW_OWNERS as a,REVIEW_STABILITY as r,REVIEW_TAGS as o}from"../constants.js";const p=new i({name:"ReviewAssignInput",fields:{id:{type:e.ID(),isOptional:!1},assigneeId:{type:e.NonEmptyString(),isOptional:!1},note:{type:e.String_unsecure(),isOptional:!0},idempotencyKey:{type:e.NonEmptyString(),isOptional:!1}}});const d=new i({name:"ReviewAssignOutput",fields:{id:{type:e.ID(),isOptional:!1},assigneeId:{type:e.NonEmptyString(),isOptional:!1},assignedAt:{type:e.DateTime(),isOptional:!1},auditEventId:{type:e.ID(),isOptional:!1},version:{type:e.Int_unsecure(),isOptional:!1}}});export const ReviewAssignDocBlock={id:"docs.tech.review.assign",title:"Assign a review to a reviewer",summary:"Assign (or reassign) a review record to a reviewer; idempotent on (id, assigneeId).",kind:"reference",visibility:"public",route:"/docs/tech/review/assign",tags:["review","assign","mutation"],body:`# review.assign
+
+Assigns (or reassigns) a review to a reviewer. Idempotent on
+\`(id, assigneeId)\` \u2014 re-assigning to the same reviewer is a no-op success.
+
+Per SEAMS \xA71.3 (S-11), emits one \`audit.event.append\` with kind
+\`review.assigned\` (retention class \`operational\`). Per SEAMS \xA73.6.4,
+downstream notifications to the new assignee are fire-and-forget; failure
+does NOT roll back the assignment.
+
+Capability: \`review.act\`. Idempotency: required.
+`};export const ReviewAssignCommand=s({meta:{key:"review.assign",title:"Assign Review",version:"1.0.0",description:"Assign (or reassign) a review record to a reviewer; idempotent on (id, assigneeId).",goal:"Provide a capability-gated path to set or change the assignee of a review.",context:"Used by the review-queue cockpit and the operator inbox. Non-terminal \u2014 assignee may change multiple times before decision.",domain:n,owners:[...a],tags:[...o,"assign"],stability:r,docId:[t(ReviewAssignDocBlock.id)]},capability:{key:"review.act",version:"1.0.0"},io:{input:p,output:d,errors:{NOT_FOUND:{description:"No review found for the supplied id.",recoverable:!1,http:404,when:"No review found for the supplied id."},CONFLICT:{description:"Review is already assigned to this reviewer (idempotent no-op success returned in the happy path).",recoverable:!1,http:409,when:"Conflicting concurrent assignment."},FORBIDDEN:{description:"Caller lacks review.act capability.",recoverable:!1,http:403,when:"Caller lacks review.act capability."},VALIDATION:{description:"assigneeId malformed or principal not found.",recoverable:!1,http:400,when:"assigneeId malformed or principal not found."},DEPENDENCY:{description:"Audit pipeline temporarily unavailable.",recoverable:!0,http:503,when:"Audit pipeline temporarily unavailable."},IDEMPOTENCY_FAIL:{description:"Replay detected with differing payload; original result preserved.",recoverable:!1,http:409,when:"Replay detected with differing payload; original result preserved."}}},policy:{auth:"user"},sideEffects:{audit:["review.assigned"]}});

package/dist/operations/review/commands/reviewComment.command.d.ts

@@ -0,0 +1,60 @@
+import { SchemaModel } from '@lssm/lib.schema';
+export declare const ReviewCommentDocBlock: {
+    id: string;
+    title: string;
+    summary: string;
+    kind: "reference";
+    visibility: "public";
+    route: string;
+    tags: string[];
+    body: string;
+};
+export declare const ReviewCommentCommand: import("../..").OperationSpec<SchemaModel<{
+    id: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    body: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    visibility: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    attachments: {
+        type: SchemaModel<{
+            evidenceId: {
+                type: import("@lssm/lib.schema").FieldType<string, string>;
+                isOptional: false;
+            };
+            summary: {
+                type: import("@lssm/lib.schema").FieldType<string, string>;
+                isOptional: true;
+            };
+        }>;
+        isOptional: true;
+        isArray: true;
+    };
+}>, SchemaModel<{
+    commentId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    id: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    createdAt: {
+        type: import("@lssm/lib.schema").FieldType<Date, string>;
+        isOptional: false;
+    };
+    auditEventId: {
+        type: import("@lssm/lib.schema").FieldType<string, string>;
+        isOptional: false;
+    };
+    version: {
+        type: import("@lssm/lib.schema").FieldType<number, number>;
+        isOptional: false;
+    };
+}>, undefined>;

package/dist/operations/review/commands/reviewComment.command.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{docRef as i}from"../../../docs/registry.js";import{defineCommand as o}from"../../operation.js";import{REVIEW_DOMAIN as n,REVIEW_OWNERS as a,REVIEW_STABILITY as r,REVIEW_TAGS as s}from"../constants.js";const m=new t({name:"ReviewCommentAttachment",fields:{evidenceId:{type:e.ID(),isOptional:!1},summary:{type:e.String_unsecure(),isOptional:!0}}});const p=new t({name:"ReviewCommentInput",fields:{id:{type:e.ID(),isOptional:!1},body:{type:e.NonEmptyString(),isOptional:!1},visibility:{type:e.NonEmptyString(),isOptional:!1},attachments:{type:m,isOptional:!0,isArray:!0}}});const c=new t({name:"ReviewCommentOutput",fields:{commentId:{type:e.ID(),isOptional:!1},id:{type:e.ID(),isOptional:!1},createdAt:{type:e.DateTime(),isOptional:!1},auditEventId:{type:e.ID(),isOptional:!1},version:{type:e.Int_unsecure(),isOptional:!1}}});export const ReviewCommentDocBlock={id:"docs.tech.review.comment",title:"Comment on a review",summary:"Append a thread or private-to-assignee comment to a review record.",kind:"reference",visibility:"public",route:"/docs/tech/review/comment",tags:["review","comment","mutation"],body:"# review.comment\n\nAppends a comment to a review. Does not advance state. `visibility` is one\nof `'thread'` (visible to all participants) | `'private-to-assignee'`\n(visible only to the current assignee and the commenter).\n\nPer SEAMS \xA71.3 (S-11), emits one `audit.event.append` with kind\n`review.commented` (retention class `operational`).\n\nCapability: `review.act` for posting; `review.read` for thread reads.\nAuditor persona may read but cannot post \u2014 the UI renders the post button\ndisabled with a read-only tooltip per SEAMS \xA71.5.\n"};export const ReviewCommentCommand=o({meta:{key:"review.comment",title:"Comment on Review",version:"1.0.0",description:"Append a thread or private-to-assignee comment to a review record.",goal:"Give reviewers a structured annotation surface without advancing the review state machine.",context:"Used by the review-detail surface. Non-state-changing \u2014 comments are append-only annotations.",domain:n,owners:[...a],tags:[...s,"comment"],stability:r,docId:[i(ReviewCommentDocBlock.id)]},capability:{key:"review.act",version:"1.0.0"},io:{input:p,output:c,errors:{NOT_FOUND:{description:"No review found for the supplied id.",recoverable:!1,http:404,when:"No review found for the supplied id."},FORBIDDEN:{description:"Caller lacks the review.act capability for posting.",recoverable:!1,http:403,when:"Caller lacks the review.act capability for posting."},VALIDATION:{description:"Body empty, visibility unrecognised, or attachment evidence id malformed.",recoverable:!1,http:400,when:"Body empty, visibility unrecognised, or attachment evidence id malformed."},DEPENDENCY:{description:"Audit pipeline temporarily unavailable.",recoverable:!0,http:503,when:"Audit pipeline temporarily unavailable."}}},policy:{auth:"user"},sideEffects:{audit:["review.commented"]}});