@lssm/lib.contracts 1.11.0 → 1.41.0

package/dist/onboarding-base.d.ts

@@ -1,138 +0,0 @@
-import { ContractSpec } from "./spec.js";
-import * as _lssm_lib_schema100 from "@lssm/lib.schema";
-import { SchemaModel } from "@lssm/lib.schema";
-
-//#region src/onboarding-base.d.ts
-/** Save/update onboarding draft (auto-save during flow) */
-declare const SaveOnboardingDraftInput: SchemaModel<{
-  data: {
-    type: _lssm_lib_schema100.FieldType<unknown, unknown>;
-    isOptional: false;
-  };
-}>;
-declare const SaveOnboardingDraftOutput: SchemaModel<{
-  id: {
-    type: _lssm_lib_schema100.FieldType<string, string>;
-    isOptional: false;
-  };
-  organizationId: {
-    type: _lssm_lib_schema100.FieldType<string, string>;
-    isOptional: false;
-  };
-}>;
-declare const SaveOnboardingDraftBaseSpec: ContractSpec<SchemaModel<{
-  data: {
-    type: _lssm_lib_schema100.FieldType<unknown, unknown>;
-    isOptional: false;
-  };
-}>, SchemaModel<{
-  id: {
-    type: _lssm_lib_schema100.FieldType<string, string>;
-    isOptional: false;
-  };
-  organizationId: {
-    type: _lssm_lib_schema100.FieldType<string, string>;
-    isOptional: false;
-  };
-}>, undefined>;
-/** Get current onboarding draft (on mount/restore) */
-declare const GetOnboardingDraftOutput: SchemaModel<{
-  id: {
-    type: _lssm_lib_schema100.FieldType<string, string>;
-    isOptional: true;
-  };
-  organizationId: {
-    type: _lssm_lib_schema100.FieldType<string, string>;
-    isOptional: true;
-  };
-  data: {
-    type: _lssm_lib_schema100.FieldType<unknown, unknown>;
-    isOptional: true;
-  };
-  createdAt: {
-    type: _lssm_lib_schema100.FieldType<Date, string>;
-    isOptional: true;
-  };
-  updatedAt: {
-    type: _lssm_lib_schema100.FieldType<Date, string>;
-    isOptional: true;
-  };
-}>;
-declare const GetOnboardingDraftBaseSpec: ContractSpec<_lssm_lib_schema100.AnySchemaModel, SchemaModel<{
-  id: {
-    type: _lssm_lib_schema100.FieldType<string, string>;
-    isOptional: true;
-  };
-  organizationId: {
-    type: _lssm_lib_schema100.FieldType<string, string>;
-    isOptional: true;
-  };
-  data: {
-    type: _lssm_lib_schema100.FieldType<unknown, unknown>;
-    isOptional: true;
-  };
-  createdAt: {
-    type: _lssm_lib_schema100.FieldType<Date, string>;
-    isOptional: true;
-  };
-  updatedAt: {
-    type: _lssm_lib_schema100.FieldType<Date, string>;
-    isOptional: true;
-  };
-}>, undefined>;
-/** Delete onboarding draft (cleanup after completion or cancel) */
-declare const DeleteOnboardingDraftOutput: SchemaModel<{
-  ok: {
-    type: _lssm_lib_schema100.FieldType<boolean, boolean>;
-    isOptional: false;
-  };
-}>;
-declare const DeleteOnboardingDraftBaseSpec: ContractSpec<_lssm_lib_schema100.AnySchemaModel, SchemaModel<{
-  ok: {
-    type: _lssm_lib_schema100.FieldType<boolean, boolean>;
-    isOptional: false;
-  };
-}>, undefined>;
-/** Complete onboarding (final submit, creates entities) */
-declare const CompleteOnboardingBaseInput: SchemaModel<{
-  data: {
-    type: _lssm_lib_schema100.FieldType<unknown, unknown>;
-    isOptional: false;
-  };
-}>;
-declare const CompleteOnboardingBaseOutput: SchemaModel<{
-  success: {
-    type: _lssm_lib_schema100.FieldType<boolean, boolean>;
-    isOptional: false;
-  };
-  userId: {
-    type: _lssm_lib_schema100.FieldType<string, string>;
-    isOptional: true;
-  };
-  organizationId: {
-    type: _lssm_lib_schema100.FieldType<string, string>;
-    isOptional: true;
-  };
-}>;
-declare const CompleteOnboardingBaseSpec: ContractSpec<SchemaModel<{
-  data: {
-    type: _lssm_lib_schema100.FieldType<unknown, unknown>;
-    isOptional: false;
-  };
-}>, SchemaModel<{
-  success: {
-    type: _lssm_lib_schema100.FieldType<boolean, boolean>;
-    isOptional: false;
-  };
-  userId: {
-    type: _lssm_lib_schema100.FieldType<string, string>;
-    isOptional: true;
-  };
-  organizationId: {
-    type: _lssm_lib_schema100.FieldType<string, string>;
-    isOptional: true;
-  };
-}>, undefined>;
-//#endregion
-export { CompleteOnboardingBaseInput, CompleteOnboardingBaseOutput, CompleteOnboardingBaseSpec, DeleteOnboardingDraftBaseSpec, DeleteOnboardingDraftOutput, GetOnboardingDraftBaseSpec, GetOnboardingDraftOutput, SaveOnboardingDraftBaseSpec, SaveOnboardingDraftInput, SaveOnboardingDraftOutput };
-//# sourceMappingURL=onboarding-base.d.ts.map

package/dist/onboarding-base.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"onboarding-base.d.ts","names":[],"sources":["../src/onboarding-base.ts"],"sourcesContent":[],"mappings":";;;;;;cASa,0BAAwB;;UAMnC,mBAAA,CAAA;IANW,UAAA,EAAA,KAAA;EAQA,CAAA;CAOX,CAAA;cAPW,2BAAyB;EAAA,EAAA,EAAA;IAAA,IAAA,EAOpC,mBAAA,CAAA,SAPoC,CAAA,MAAA,EAAA,MAAA,CAAA;IASzB,UAAA,EAAA,KAAA;EAwBX,CAAA;EAxBsC,cAAA,EAAA;IAAA,IAAA,+BAAA,CAAA,MAAA,EAAA,MAAA,CAAA;;;;AAAA,cAA3B,2BAA2B,cAAA,CAAA,WAAA,CAAA;EA2B3B,IAAA,EAAA;IAUX,IAAA,EAbA,mBAAA,CAAA,SAaA,CAAA,OAAA,EAAA,OAAA,CAAA;;;;;UArCsC,mBAAA,CAAA;;EA2BH,CAAA;EAAA,cAAA,EAAA;IAYxB,IAAA,+BAuBX,CAAA,MAAA,EAAA,MAAA,CAAA;IAAA,UAAA,EAAA,KAvBqC;EAAA,CAAA;;;cAZ1B,0BAAwB;;UAUnC,mBAAA,CAAA;;EAEqC,CAAA;EAAA,cAAA,EAAA;IAAA,IAAA,+BAAA,CAAA,MAAA,EAAA,MAAA,CAAA;IA0B1B,UAAA,EAAA,IAAA;EAQA,CAAA;EAuBX,IAAA,EAAA;IAvBwC,IAAA,+BAAA,CAAA,OAAA,EAAA,OAAA,CAAA;IAAA,UAAA,EAAA,IAAA;EAAA,CAAA;EAAA,SAAA,EAAA;IA0B7B,IAAA,+BAMX,KAAA,EAAA,MAAA,CAAA;IAEW,UAAA,EAAA,IAAA;EAQX,CAAA;;;IARuC,UAAA,EAAA,IAAA;EAAA,CAAA;AAUzC,CAAA,CAAA;AAwBE,cAtGW,0BAsGX,EAtGqC,YAsGrC,CA/EA,mBAAA,CAvBqC,cAAA,EAAA,WAsGrC,CAAA;EAxBqC,EAAA,EAAA;IAAA,IAAA,EA9EA,mBAAA,CAAA,SA8EA,CAAA,MAAA,EAAA,MAAA,CAAA;;;;;IAAA,UAAA,EAAA,IAAA;;;;;;;;;;;;;;;;cApD1B,6BAA2B;;UAMtC,mBAAA,CAAA;;;;cAEW,+BAA6B,aAuBxC,mBAAA,CAvBwC,cAAA,EAAA;;UAAA,mBAAA,CAAA;;;;;cA0B7B,6BAA2B;;UAMtC,mBAAA,CAAA;;;;cAEW,8BAA4B;;UAQvC,mBAAA,CAAA;;;;;;;;;;;;cAEW,yCAA0B;;UAwBrC,mBAAA,CAAA;;;;;UAxBqC,mBAAA,CAAA"}

package/dist/onboarding-base.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"onboarding-base.js","names":["SchemaModel","ScalarTypeEnum"],"sources":["../src/onboarding-base.ts"],"sourcesContent":["/**\n * Shared base contracts for onboarding flows across verticals.\n * These operations are reusable for any app that needs multi-step onboarding with draft persistence.\n */\nimport { defineCommand, defineQuery } from './spec';\nimport { ScalarTypeEnum, SchemaModel } from '@lssm/lib.schema';\nimport { OwnersEnum, StabilityEnum } from './ownership';\n\n/** Save/update onboarding draft (auto-save during flow) */\nexport const SaveOnboardingDraftInput = new SchemaModel({\n  name: 'SaveOnboardingDraftInput',\n  description: 'Input for saving onboarding draft',\n  fields: {\n    data: { type: ScalarTypeEnum.JSON(), isOptional: false },\n  },\n});\n\nexport const SaveOnboardingDraftOutput = new SchemaModel({\n  name: 'SaveOnboardingDraftOutput',\n  description: 'Output for saving onboarding draft',\n  fields: {\n    id: { type: ScalarTypeEnum.ID(), isOptional: false },\n    organizationId: { type: ScalarTypeEnum.ID(), isOptional: false },\n  },\n});\n\nexport const SaveOnboardingDraftBaseSpec = defineCommand({\n  meta: {\n    name: 'base.onboarding.saveDraft',\n    version: 1,\n    stability: StabilityEnum.Beta,\n    owners: [OwnersEnum.PlatformSigil],\n    tags: ['onboarding', 'draft'],\n    description: 'Save or update onboarding draft for active organization',\n    goal: 'Persist onboarding progress incrementally for resumption and safety',\n    context:\n      'Auto-saves every few seconds during onboarding; enables users to leave and resume',\n  },\n  io: {\n    input: SaveOnboardingDraftInput,\n    output: SaveOnboardingDraftOutput,\n  },\n  policy: {\n    auth: 'user',\n    escalate: null,\n  },\n  transport: {\n    gql: { field: 'saveOnboardingDraft' },\n    rest: { method: 'POST' },\n  },\n});\n\n/** Get current onboarding draft (on mount/restore) */\nexport const GetOnboardingDraftOutput = new SchemaModel({\n  name: 'GetOnboardingDraftOutput',\n  description: 'Onboarding draft payload',\n  fields: {\n    id: { type: ScalarTypeEnum.ID(), isOptional: true },\n    organizationId: { type: ScalarTypeEnum.ID(), isOptional: true },\n    data: { type: ScalarTypeEnum.JSON(), isOptional: true },\n    createdAt: { type: ScalarTypeEnum.DateTime(), isOptional: true },\n    updatedAt: { type: ScalarTypeEnum.DateTime(), isOptional: true },\n  },\n});\n\nexport const GetOnboardingDraftBaseSpec = defineQuery({\n  meta: {\n    name: 'base.onboarding.getDraft',\n    version: 1,\n    stability: StabilityEnum.Beta,\n    owners: [OwnersEnum.PlatformSigil],\n    tags: ['onboarding', 'draft'],\n    description: 'Get onboarding draft for active organization',\n    goal: 'Retrieve saved onboarding progress',\n    context: 'Called on mount to restore in-progress onboarding',\n  },\n  io: {\n    input: null,\n    output: GetOnboardingDraftOutput,\n  },\n  policy: {\n    auth: 'user',\n    escalate: null,\n  },\n  transport: {\n    gql: { field: 'getOnboardingDraft' },\n    rest: { method: 'GET' },\n  },\n});\n\n/** Delete onboarding draft (cleanup after completion or cancel) */\nexport const DeleteOnboardingDraftOutput = new SchemaModel({\n  name: 'DeleteOnboardingDraftOutput',\n  description: 'Result of delete operation',\n  fields: {\n    ok: { type: ScalarTypeEnum.Boolean(), isOptional: false },\n  },\n});\n\nexport const DeleteOnboardingDraftBaseSpec = defineCommand({\n  meta: {\n    name: 'base.onboarding.deleteDraft',\n    version: 1,\n    stability: StabilityEnum.Beta,\n    owners: [OwnersEnum.PlatformSigil],\n    tags: ['onboarding', 'draft'],\n    description: 'Delete onboarding draft for active organization',\n    goal: 'Clear draft after completion or if user wants to restart',\n    context: 'Called after successful onboarding or explicit user reset',\n  },\n  io: {\n    input: null,\n    output: DeleteOnboardingDraftOutput,\n  },\n  policy: {\n    auth: 'user',\n    escalate: null,\n  },\n  transport: {\n    gql: { field: 'deleteOnboardingDraft' },\n    rest: { method: 'POST' },\n  },\n});\n\n/** Complete onboarding (final submit, creates entities) */\nexport const CompleteOnboardingBaseInput = new SchemaModel({\n  name: 'CompleteOnboardingBaseInput',\n  description: 'Input for completing onboarding',\n  fields: {\n    data: { type: ScalarTypeEnum.JSON(), isOptional: false },\n  },\n});\n\nexport const CompleteOnboardingBaseOutput = new SchemaModel({\n  name: 'CompleteOnboardingBaseOutput',\n  description: 'Result of onboarding completion',\n  fields: {\n    success: { type: ScalarTypeEnum.Boolean(), isOptional: false },\n    userId: { type: ScalarTypeEnum.ID(), isOptional: true },\n    organizationId: { type: ScalarTypeEnum.ID(), isOptional: true },\n  },\n});\n\nexport const CompleteOnboardingBaseSpec = defineCommand({\n  meta: {\n    name: 'base.onboarding.complete',\n    version: 1,\n    stability: StabilityEnum.Beta,\n    owners: [OwnersEnum.PlatformSigil],\n    tags: ['onboarding'],\n    description: 'Complete onboarding and finalize user/organization setup',\n    goal: 'Transition from draft to active profile',\n    context:\n      'Validates all required fields, creates/updates entities, marks onboarding complete',\n  },\n  io: {\n    input: CompleteOnboardingBaseInput,\n    output: CompleteOnboardingBaseOutput,\n  },\n  policy: {\n    auth: 'user',\n    escalate: null,\n  },\n  transport: {\n    gql: { field: 'completeOnboarding' },\n    rest: { method: 'POST' },\n  },\n});\n"],"mappings":"yPASA,MAAa,EAA2B,IAAIA,EAAY,CACtD,KAAM,2BACN,YAAa,oCACb,OAAQ,CACN,KAAM,CAAE,KAAMC,EAAe,MAAM,CAAE,WAAY,GAAO,CACzD,CACF,CAAC,CAEW,EAA4B,IAAID,EAAY,CACvD,KAAM,4BACN,YAAa,qCACb,OAAQ,CACN,GAAI,CAAE,KAAMC,EAAe,IAAI,CAAE,WAAY,GAAO,CACpD,eAAgB,CAAE,KAAMA,EAAe,IAAI,CAAE,WAAY,GAAO,CACjE,CACF,CAAC,CAEW,EAA8B,EAAc,CACvD,KAAM,CACJ,KAAM,4BACN,QAAS,EACT,UAAW,EAAc,KACzB,OAAQ,CAAC,EAAW,cAAc,CAClC,KAAM,CAAC,aAAc,QAAQ,CAC7B,YAAa,0DACb,KAAM,sEACN,QACE,oFACH,CACD,GAAI,CACF,MAAO,EACP,OAAQ,EACT,CACD,OAAQ,CACN,KAAM,OACN,SAAU,KACX,CACD,UAAW,CACT,IAAK,CAAE,MAAO,sBAAuB,CACrC,KAAM,CAAE,OAAQ,OAAQ,CACzB,CACF,CAAC,CAGW,EAA2B,IAAID,EAAY,CACtD,KAAM,2BACN,YAAa,2BACb,OAAQ,CACN,GAAI,CAAE,KAAMC,EAAe,IAAI,CAAE,WAAY,GAAM,CACnD,eAAgB,CAAE,KAAMA,EAAe,IAAI,CAAE,WAAY,GAAM,CAC/D,KAAM,CAAE,KAAMA,EAAe,MAAM,CAAE,WAAY,GAAM,CACvD,UAAW,CAAE,KAAMA,EAAe,UAAU,CAAE,WAAY,GAAM,CAChE,UAAW,CAAE,KAAMA,EAAe,UAAU,CAAE,WAAY,GAAM,CACjE,CACF,CAAC,CAEW,EAA6B,EAAY,CACpD,KAAM,CACJ,KAAM,2BACN,QAAS,EACT,UAAW,EAAc,KACzB,OAAQ,CAAC,EAAW,cAAc,CAClC,KAAM,CAAC,aAAc,QAAQ,CAC7B,YAAa,+CACb,KAAM,qCACN,QAAS,oDACV,CACD,GAAI,CACF,MAAO,KACP,OAAQ,EACT,CACD,OAAQ,CACN,KAAM,OACN,SAAU,KACX,CACD,UAAW,CACT,IAAK,CAAE,MAAO,qBAAsB,CACpC,KAAM,CAAE,OAAQ,MAAO,CACxB,CACF,CAAC,CAGW,EAA8B,IAAID,EAAY,CACzD,KAAM,8BACN,YAAa,6BACb,OAAQ,CACN,GAAI,CAAE,KAAMC,EAAe,SAAS,CAAE,WAAY,GAAO,CAC1D,CACF,CAAC,CAEW,EAAgC,EAAc,CACzD,KAAM,CACJ,KAAM,8BACN,QAAS,EACT,UAAW,EAAc,KACzB,OAAQ,CAAC,EAAW,cAAc,CAClC,KAAM,CAAC,aAAc,QAAQ,CAC7B,YAAa,kDACb,KAAM,2DACN,QAAS,4DACV,CACD,GAAI,CACF,MAAO,KACP,OAAQ,EACT,CACD,OAAQ,CACN,KAAM,OACN,SAAU,KACX,CACD,UAAW,CACT,IAAK,CAAE,MAAO,wBAAyB,CACvC,KAAM,CAAE,OAAQ,OAAQ,CACzB,CACF,CAAC,CAGW,EAA8B,IAAID,EAAY,CACzD,KAAM,8BACN,YAAa,kCACb,OAAQ,CACN,KAAM,CAAE,KAAMC,EAAe,MAAM,CAAE,WAAY,GAAO,CACzD,CACF,CAAC,CAEW,EAA+B,IAAID,EAAY,CAC1D,KAAM,+BACN,YAAa,kCACb,OAAQ,CACN,QAAS,CAAE,KAAMC,EAAe,SAAS,CAAE,WAAY,GAAO,CAC9D,OAAQ,CAAE,KAAMA,EAAe,IAAI,CAAE,WAAY,GAAM,CACvD,eAAgB,CAAE,KAAMA,EAAe,IAAI,CAAE,WAAY,GAAM,CAChE,CACF,CAAC,CAEW,EAA6B,EAAc,CACtD,KAAM,CACJ,KAAM,2BACN,QAAS,EACT,UAAW,EAAc,KACzB,OAAQ,CAAC,EAAW,cAAc,CAClC,KAAM,CAAC,aAAa,CACpB,YAAa,2DACb,KAAM,0CACN,QACE,qFACH,CACD,GAAI,CACF,MAAO,EACP,OAAQ,EACT,CACD,OAAQ,CACN,KAAM,OACN,SAAU,KACX,CACD,UAAW,CACT,IAAK,CAAE,MAAO,qBAAsB,CACpC,KAAM,CAAE,OAAQ,OAAQ,CACzB,CACF,CAAC"}

package/dist/ownership.d.ts

@@ -1,76 +0,0 @@
-//#region src/ownership.d.ts
-declare const StabilityEnum: {
-  readonly Idea: "idea";
-  readonly InCreation: "in_creation";
-  readonly Experimental: "experimental";
-  readonly Beta: "beta";
-  readonly Stable: "stable";
-  readonly Deprecated: "deprecated";
-};
-type Stability = (typeof StabilityEnum)[keyof typeof StabilityEnum];
-declare const OwnersEnum: {
-  readonly ProductColiving: "product.coliving";
-  readonly ProductStrit: "product.strit";
-  readonly ProductArtisanos: "product.artisanos";
-  readonly PlatformSigil: "platform.sigil";
-  readonly PlatformMarketplace: "platform.marketplace";
-  readonly PlatformContent: "platform.content";
-  readonly PlatformFeatureFlags: "platform.featureflags";
-};
-type Owner = (typeof OwnersEnum)[keyof typeof OwnersEnum] | (string & {});
-declare const Owners: {
-  readonly ProductColiving: "product.coliving";
-  readonly ProductStrit: "product.strit";
-  readonly ProductArtisanos: "product.artisanos";
-  readonly PlatformSigil: "platform.sigil";
-  readonly PlatformMarketplace: "platform.marketplace";
-  readonly PlatformContent: "platform.content";
-  readonly PlatformFeatureFlags: "platform.featureflags";
-};
-declare const TagsEnum: {
-  readonly Spots: "spots";
-  readonly Collectivity: "collectivity";
-  readonly Marketplace: "marketplace";
-  readonly Sellers: "sellers";
-  readonly Auth: "auth";
-  readonly Login: "login";
-  readonly Signup: "signup";
-  readonly Guide: "guide";
-  readonly Docs: "docs";
-  readonly I18n: "i18n";
-  readonly AtomicPages: "atomic:pages";
-  readonly Incident: "incident";
-  readonly Hygiene: "hygiene";
-  readonly WeeklyPulse: "weekly_pulse";
-  readonly WebAuth: "webauth";
-};
-type Tag = (typeof TagsEnum)[keyof typeof TagsEnum] | (string & {});
-declare const Tags: {
-  readonly Spots: "spots";
-  readonly Collectivity: "collectivity";
-  readonly Marketplace: "marketplace";
-  readonly Sellers: "sellers";
-  readonly Auth: "auth";
-  readonly Login: "login";
-  readonly Signup: "signup";
-  readonly Guide: "guide";
-  readonly Docs: "docs";
-  readonly I18n: "i18n";
-  readonly AtomicPages: "atomic:pages";
-  readonly Incident: "incident";
-  readonly Hygiene: "hygiene";
-  readonly WeeklyPulse: "weekly_pulse";
-  readonly WebAuth: "webauth";
-};
-interface OwnerShipMeta {
-  version?: number;
-  title: string;
-  description: string;
-  domain: string;
-  owners: Owner[];
-  tags: Tag[];
-  stability: Stability;
-}
-//#endregion
-export { Owner, OwnerShipMeta, Owners, OwnersEnum, Stability, StabilityEnum, Tag, Tags, TagsEnum };
-//# sourceMappingURL=ownership.d.ts.map

package/dist/ownership.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ownership.d.ts","names":[],"sources":["../src/ownership.ts"],"sourcesContent":[],"mappings":";cAEa;EAAA,SAAA,IAAA,EAAA,MAOH;EACE,SAAA,UAAS,EAAA,aAAW;EAGnB,SAAA,YAQH,EAAA,cAAA;EACE,SAAK,IAAA,EAAA,MACL;EAGC,SAAmB,MAAA,EAAA,QAAA;EAGnB,SAAA,UAgBH,EAAA,YAAA;AACV,CAAA;AAEa,KAtCD,SAAA,GAsCgB,CAAA,OAtCI,aAsCJ,CAAA,CAAA,MAAA,OAtCgC,aAsChC,CAAA;AAEX,cArCJ,UAqCiB,EAAA;EAKpB,SAAA,eAAA,EAAA,kBAAA;EACF,SAAA,YAAA,EAAA,eAAA;EACK,SAAA,gBAAA,EAAA,mBAAA;EAAS,SAAA,aAAA,EAAA,gBAAA;;;;;KAnCV,KAAA,WACA,yBAAyB;cAGxB;;;;;;;;;cAGA;;;;;;;;;;;;;;;;;KAiBD,GAAA,WAAc,uBAAuB;cAEpC;;;;;;;;;;;;;;;;;UAEI,aAAA;;;;;UAKP;QACF;aACK"}

package/dist/ownership.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ownership.js","names":[],"sources":["../src/ownership.ts"],"sourcesContent":["// Canonical ownership/stability/tags enums and shared meta\n\nexport const StabilityEnum = {\n  Idea: 'idea',\n  InCreation: 'in_creation',\n  Experimental: 'experimental',\n  Beta: 'beta',\n  Stable: 'stable',\n  Deprecated: 'deprecated',\n} as const;\nexport type Stability = (typeof StabilityEnum)[keyof typeof StabilityEnum];\n\n// Provide curated owner identifiers (business/product oriented), allow extension by string\nexport const OwnersEnum = {\n  ProductColiving: 'product.coliving',\n  ProductStrit: 'product.strit',\n  ProductArtisanos: 'product.artisanos',\n  PlatformSigil: 'platform.sigil',\n  PlatformMarketplace: 'platform.marketplace',\n  PlatformContent: 'platform.content',\n  PlatformFeatureFlags: 'platform.featureflags',\n} as const;\nexport type Owner =\n  | (typeof OwnersEnum)[keyof typeof OwnersEnum]\n  | (string & {});\n// Back-compat alias\nexport const Owners = OwnersEnum;\n\n// Provide common tags, allow extension by string\nexport const TagsEnum = {\n  Spots: 'spots',\n  Collectivity: 'collectivity',\n  Marketplace: 'marketplace',\n  Sellers: 'sellers',\n  Auth: 'auth',\n  Login: 'login',\n  Signup: 'signup',\n  Guide: 'guide',\n  Docs: 'docs',\n  I18n: 'i18n',\n  AtomicPages: 'atomic:pages',\n  Incident: 'incident',\n  Hygiene: 'hygiene',\n  WeeklyPulse: 'weekly_pulse',\n  WebAuth: 'webauth',\n} as const;\nexport type Tag = (typeof TagsEnum)[keyof typeof TagsEnum] | (string & {});\n// Back-compat alias\nexport const Tags = TagsEnum;\n\nexport interface OwnerShipMeta {\n  version?: number;\n  title: string;\n  description: string;\n  domain: string;\n  owners: Owner[];\n  tags: Tag[];\n  stability: Stability;\n}\n"],"mappings":"AAEA,MAAa,EAAgB,CAC3B,KAAM,OACN,WAAY,cACZ,aAAc,eACd,KAAM,OACN,OAAQ,SACR,WAAY,aACb,CAIY,EAAa,CACxB,gBAAiB,mBACjB,aAAc,gBACd,iBAAkB,oBAClB,cAAe,iBACf,oBAAqB,uBACrB,gBAAiB,mBACjB,qBAAsB,wBACvB,CAKY,EAAS,EAGT,EAAW,CACtB,MAAO,QACP,aAAc,eACd,YAAa,cACb,QAAS,UACT,KAAM,OACN,MAAO,QACP,OAAQ,SACR,MAAO,QACP,KAAM,OACN,KAAM,OACN,YAAa,eACb,SAAU,WACV,QAAS,UACT,YAAa,eACb,QAAS,UACV,CAGY,EAAO"}

package/dist/policy/engine.d.ts

@@ -1,40 +0,0 @@
-import { PolicyRef, PolicyRegistry } from "./spec.js";
-import { PolicyDecision } from "../types.js";
-
-//#region src/policy/engine.d.ts
-interface SubjectRelationship {
-  relation: string;
-  object: string;
-  objectType?: string;
-}
-interface SubjectContext {
-  roles?: string[];
-  attributes?: Record<string, unknown>;
-  relationships?: SubjectRelationship[];
-}
-interface ResourceContext {
-  type: string;
-  id?: string;
-  fields?: string[];
-  attributes?: Record<string, unknown>;
-}
-interface DecisionContext {
-  subject: SubjectContext;
-  resource: ResourceContext;
-  context?: Record<string, unknown>;
-  action: string;
-  policies: PolicyRef[];
-  consents?: string[];
-  flags?: string[];
-}
-declare class PolicyEngine {
-  private readonly registry;
-  constructor(registry: PolicyRegistry);
-  decide(input: DecisionContext): PolicyDecision;
-  private resolvePolicies;
-  private matchRuleSet;
-  private evaluateFields;
-}
-//#endregion
-export { DecisionContext, PolicyEngine, ResourceContext, SubjectContext, SubjectRelationship };
-//# sourceMappingURL=engine.d.ts.map

package/dist/policy/engine.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"engine.d.ts","names":[],"sources":["../../src/policy/engine.ts"],"sourcesContent":[],"mappings":";;;;UAaiB,mBAAA;;EAAA,MAAA,EAAA,MAAA;EAMA,UAAA,CAAA,EAAA,MAAc;AAM/B;AAOiB,UAbA,cAAA,CAae;EACrB,KAAA,CAAA,EAAA,MAAA,EAAA;EACC,UAAA,CAAA,EAbG,MAaH,CAAA,MAAA,EAAA,OAAA,CAAA;EACA,aAAA,CAAA,EAbM,mBAaN,EAAA;;AAES,UAZJ,eAAA,CAYI;EAWR,IAAA,EAAA,MAAA;EAC4B,EAAA,CAAA,EAAA,MAAA;EAEzB,MAAA,CAAA,EAAA,MAAA,EAAA;EAAkB,UAAA,CAAA,EAtBnB,MAsBmB,CAAA,MAAA,EAAA,OAAA,CAAA;;UAnBjB,eAAA;WACN;YACC;YACA;;YAEA;;;;cAWC,YAAA;;wBAC4B;gBAEzB,kBAAkB"}

package/dist/policy/engine.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"engine.js","names":["registry: PolicyRegistry","allowReason: string | undefined","appliedRateLimit: PolicyDecision['rateLimit']","escalate: 'human_review' | null | undefined","specs: PolicySpec[]","allowMatch: RuleEvaluation | undefined","evaluation: RuleEvaluation","definition: RateLimitDefinition | undefined"],"sources":["../../src/policy/engine.ts"],"sourcesContent":["import {\n  PolicyRegistry,\n  type PolicyRef,\n  type PolicySpec,\n  type PolicyRule,\n  type FieldPolicyRule,\n  type PolicyCondition,\n  type ConsentDefinition,\n  type RateLimitDefinition,\n  type RelationshipMatcher,\n} from './spec';\nimport type { PolicyDecision, FieldLevelDecision } from '../types';\n\nexport interface SubjectRelationship {\n  relation: string;\n  object: string;\n  objectType?: string;\n}\n\nexport interface SubjectContext {\n  roles?: string[];\n  attributes?: Record<string, unknown>;\n  relationships?: SubjectRelationship[];\n}\n\nexport interface ResourceContext {\n  type: string;\n  id?: string;\n  fields?: string[];\n  attributes?: Record<string, unknown>;\n}\n\nexport interface DecisionContext {\n  subject: SubjectContext;\n  resource: ResourceContext;\n  context?: Record<string, unknown>;\n  action: string;\n  policies: PolicyRef[];\n  consents?: string[];\n  flags?: string[];\n}\n\ninterface RuleEvaluation {\n  rule: PolicyRule;\n  missingConsents: ConsentDefinition[];\n  rateLimit?: PolicyDecision['rateLimit'];\n}\n\nexport class PolicyEngine {\n  constructor(private readonly registry: PolicyRegistry) {}\n\n  decide(input: DecisionContext): PolicyDecision {\n    const policies = this.resolvePolicies(input.policies);\n    let allowReason: string | undefined;\n    let appliedRateLimit: PolicyDecision['rateLimit'];\n    let escalate: 'human_review' | null | undefined;\n\n    for (const policy of policies) {\n      const match = this.matchRuleSet(policy, input);\n      if (!match) continue;\n      if (match.rule.effect === 'deny') {\n        return {\n          effect: 'deny',\n          reason: match.rule.reason ?? policy.meta.name,\n          requiredConsents: match.missingConsents.length\n            ? match.missingConsents\n            : undefined,\n          evaluatedBy: 'engine',\n        };\n      }\n      if (match.rule.effect === 'allow') {\n        if (match.missingConsents.length) {\n          return {\n            effect: 'deny',\n            reason: 'consent_required',\n            requiredConsents: match.missingConsents,\n            evaluatedBy: 'engine',\n          };\n        }\n        if (!allowReason) {\n          allowReason = match.rule.reason ?? policy.meta.name;\n        }\n        if (!appliedRateLimit && match.rateLimit) {\n          appliedRateLimit = match.rateLimit;\n        }\n        if (!escalate && match.rule.escalate) {\n          escalate = match.rule.escalate;\n        }\n      }\n    }\n\n    const fieldDecisions = this.evaluateFields(policies, input);\n    const pii = policies.find((p) => p.pii)?.pii;\n    const escalateValue =\n      typeof escalate === 'undefined' ? undefined : escalate;\n\n    return {\n      effect: allowReason ? 'allow' : 'deny',\n      reason: allowReason,\n      rateLimit: appliedRateLimit,\n      escalate: escalateValue,\n      fieldDecisions: fieldDecisions.length ? fieldDecisions : undefined,\n      pii,\n      evaluatedBy: 'engine',\n    };\n  }\n\n  private resolvePolicies(refs: PolicyRef[]): PolicySpec[] {\n    const specs: PolicySpec[] = [];\n    for (const ref of refs) {\n      const spec = this.registry.get(ref.name, ref.version);\n      if (!spec)\n        throw new Error(\n          `PolicyEngine: policy not found ${ref.name}.v${ref.version}`\n        );\n      specs.push(spec);\n    }\n    return specs;\n  }\n\n  private matchRuleSet(\n    policy: PolicySpec,\n    input: DecisionContext\n  ): RuleEvaluation | undefined {\n    let allowMatch: RuleEvaluation | undefined;\n    for (const rule of policy.rules) {\n      if (!rule.actions.includes(input.action)) continue;\n      if (!matchesSubject(rule, input.subject)) continue;\n      if (!matchesResource(rule, input.resource)) continue;\n      if (!matchesFlags(rule, input)) continue;\n      if (!matchesRelationships(rule.relationships, input)) continue;\n      if (!matchesConditions(rule, input)) continue;\n      const missingConsents = collectMissingConsents(rule, policy, input);\n      const rateLimit = resolveRateLimit(rule, policy, input);\n      const evaluation: RuleEvaluation = {\n        rule,\n        missingConsents,\n        rateLimit,\n      };\n      if (rule.effect === 'deny') return evaluation;\n      if (rule.effect === 'allow' && !allowMatch) allowMatch = evaluation;\n    }\n    return allowMatch;\n  }\n\n  private evaluateFields(\n    policies: PolicySpec[],\n    input: DecisionContext\n  ): FieldLevelDecision[] {\n    const out = new Map<string, FieldLevelDecision>();\n    for (const policy of policies) {\n      if (!policy.fieldPolicies) continue;\n      for (const rule of policy.fieldPolicies) {\n        if (!rule.actions.includes(mapActionToFieldAction(input.action)))\n          continue;\n        if (!matchesSubject(rule, input.subject)) continue;\n        if (!matchesResource(rule, input.resource)) continue;\n        if (!matchesConditions(rule, input)) continue;\n        const existing = out.get(rule.field);\n        if (rule.effect === 'deny') {\n          out.set(rule.field, {\n            field: rule.field,\n            effect: 'deny',\n            reason: rule.reason ?? policy.meta.name,\n          });\n        } else if (!existing) {\n          out.set(rule.field, {\n            field: rule.field,\n            effect: 'allow',\n            reason: rule.reason ?? policy.meta.name,\n          });\n        }\n      }\n    }\n    return [...out.values()];\n  }\n}\n\nfunction mapActionToFieldAction(action: string): 'read' | 'write' {\n  if (action.startsWith('write')) return 'write';\n  return 'read';\n}\n\nfunction matchesSubject(\n  rule: { subject?: PolicyRule['subject'] | FieldPolicyRule['subject'] },\n  subject: SubjectContext\n): boolean {\n  const matcher = rule.subject;\n  if (!matcher) return true;\n  if (matcher.roles?.length) {\n    const roles = subject.roles ?? [];\n    const hasRole = matcher.roles.some((role) => roles.includes(role));\n    if (!hasRole) return false;\n  }\n  if (matcher.attributes) {\n    const attributes = subject.attributes ?? {};\n    if (!matchAttributes(matcher.attributes, attributes)) return false;\n  }\n  return true;\n}\n\nfunction matchesResource(\n  rule: { resource?: PolicyRule['resource'] | FieldPolicyRule['resource'] },\n  resource: ResourceContext\n): boolean {\n  const matcher = rule.resource;\n  if (!matcher) return true;\n  if (matcher.type && matcher.type !== resource.type) return false;\n  if (matcher.fields?.length) {\n    const targetFields = resource.fields ?? [];\n    if (!matcher.fields.some((field) => targetFields.includes(field)))\n      return false;\n  }\n  if (matcher.attributes) {\n    const attributes = resource.attributes ?? {};\n    if (!matchAttributes(matcher.attributes, attributes)) return false;\n  }\n  return true;\n}\n\nfunction matchesFlags(rule: PolicyRule, input: DecisionContext): boolean {\n  if (!rule.flags?.length) return true;\n  const available = new Set<string>();\n  if (input.flags) {\n    for (const flag of input.flags) available.add(flag);\n  }\n  const attributeFlags = input.subject.attributes?.featureFlags;\n  if (Array.isArray(attributeFlags)) {\n    for (const flag of attributeFlags) available.add(flag);\n  }\n  return rule.flags.every((flag) => available.has(flag));\n}\n\nfunction matchesRelationships(\n  matchers: RelationshipMatcher[] | undefined,\n  input: DecisionContext\n): boolean {\n  if (!matchers || matchers.length === 0) return true;\n  const relationships = input.subject.relationships ?? [];\n  const resourceId = getResourceId(input.resource);\n  const resourceType = input.resource.type;\n\n  return matchers.every((matcher) =>\n    relationships.some((relation) => {\n      if (relation.relation !== matcher.relation) return false;\n\n      const typeMatches =\n        !matcher.objectType ||\n        relation.objectType === matcher.objectType ||\n        matcher.objectType === resourceType;\n\n      if (!typeMatches) return false;\n\n      if (!matcher.objectId) return true;\n\n      if (matcher.objectId === '$resource') {\n        if (resourceId) {\n          return relation.object === resourceId;\n        }\n        return (\n          relation.object === resourceType ||\n          relation.objectType === resourceType\n        );\n      }\n\n      return relation.object === matcher.objectId;\n    })\n  );\n}\n\nfunction matchesConditions(\n  rule: { conditions?: PolicyCondition[] },\n  input: DecisionContext\n): boolean {\n  if (!rule.conditions || rule.conditions.length === 0) return true;\n  return rule.conditions.every((condition) =>\n    evaluateCondition(condition.expression, input)\n  );\n}\n\nfunction matchAttributes(\n  matcher: Record<string, import('./spec').AttributeMatcher>,\n  actual: Record<string, unknown>\n): boolean {\n  for (const [key, attrMatcher] of Object.entries(matcher)) {\n    const value = actual[key];\n    if (attrMatcher.exists && typeof value === 'undefined') return false;\n    if (typeof attrMatcher.equals !== 'undefined') {\n      if (value !== attrMatcher.equals) return false;\n    }\n    if (attrMatcher.oneOf && !attrMatcher.oneOf.includes(value)) return false;\n  }\n  return true;\n}\n\nfunction collectMissingConsents(\n  rule: PolicyRule,\n  policy: PolicySpec,\n  input: DecisionContext\n): ConsentDefinition[] {\n  if (!rule.requiresConsent?.length) return [];\n  const granted = new Set(input.consents ?? []);\n  const missingIds = rule.requiresConsent.filter((id) => !granted.has(id));\n  if (missingIds.length === 0) return [];\n  return resolveConsentDefinitions(policy, missingIds);\n}\n\nfunction resolveConsentDefinitions(\n  policy: PolicySpec,\n  ids: string[]\n): ConsentDefinition[] {\n  const catalog = policy.consents ?? [];\n  return ids.map((id) => {\n    const found = catalog.find((consent) => consent.id === id);\n    return (\n      found ?? {\n        id,\n        scope: 'unspecified',\n        purpose: 'unspecified',\n        description: `Consent \"${id}\" required by ${policy.meta.name}`,\n        required: true,\n      }\n    );\n  });\n}\n\nfunction resolveRateLimit(\n  rule: PolicyRule,\n  policy: PolicySpec,\n  input: DecisionContext\n): PolicyDecision['rateLimit'] | undefined {\n  if (!rule.rateLimit) return undefined;\n  const definition: RateLimitDefinition | undefined =\n    typeof rule.rateLimit === 'string'\n      ? (policy.rateLimits ?? []).find((item) => item.id === rule.rateLimit)\n      : rule.rateLimit;\n\n  if (!definition) {\n    throw new Error(\n      `PolicyEngine: rate limit \"${String(\n        rule.rateLimit\n      )}\" not declared in ${policy.meta.name}`\n    );\n  }\n\n  return {\n    rpm: definition.rpm,\n    key: definition.key ?? input.resource.type,\n    windowSeconds: definition.windowSeconds,\n    burst: definition.burst,\n  };\n}\n\nfunction evaluateCondition(\n  expression: string,\n  input: DecisionContext\n): boolean {\n  const trimmed = expression.trim();\n  if (!trimmed) return true;\n\n  const context = {\n    subject: input.subject,\n    resource: input.resource,\n    context: input.context ?? {},\n  };\n\n  try {\n    // very small whitelist of expressions\n    // Supports subject/resource/context dot paths, comparisons, and logical operators.\n    const fn = new Function(\n      'subject',\n      'resource',\n      'context',\n      `return (${transformExpression(trimmed)});`\n    );\n    const result = fn(context.subject, context.resource, context.context);\n    return Boolean(result);\n  } catch (_error) {\n    return false;\n  }\n}\n\nfunction transformExpression(expression: string): string {\n  return expression.replace(/&&/g, '&&').replace(/\\|\\|/g, '||');\n}\n\nfunction getResourceId(resource: ResourceContext): string | undefined {\n  if (resource.id) return resource.id;\n  const candidate = resource.attributes?.id;\n  if (typeof candidate === 'string') return candidate;\n  if (typeof candidate === 'number') return String(candidate);\n  return undefined;\n}\n"],"mappings":"AAgDA,IAAa,EAAb,KAA0B,CACxB,YAAY,EAA2C,CAA1B,KAAA,SAAA,EAE7B,OAAO,EAAwC,CAC7C,IAAM,EAAW,KAAK,gBAAgB,EAAM,SAAS,CACjDC,EACAC,EACAC,EAEJ,IAAK,IAAM,KAAU,EAAU,CAC7B,IAAM,EAAQ,KAAK,aAAa,EAAQ,EAAM,CACzC,KACL,IAAI,EAAM,KAAK,SAAW,OACxB,MAAO,CACL,OAAQ,OACR,OAAQ,EAAM,KAAK,QAAU,EAAO,KAAK,KACzC,iBAAkB,EAAM,gBAAgB,OACpC,EAAM,gBACN,IAAA,GACJ,YAAa,SACd,CAEH,GAAI,EAAM,KAAK,SAAW,QAAS,CACjC,GAAI,EAAM,gBAAgB,OACxB,MAAO,CACL,OAAQ,OACR,OAAQ,mBACR,iBAAkB,EAAM,gBACxB,YAAa,SACd,CAEH,AACE,IAAc,EAAM,KAAK,QAAU,EAAO,KAAK,KAE7C,CAAC,GAAoB,EAAM,YAC7B,EAAmB,EAAM,WAEvB,CAAC,GAAY,EAAM,KAAK,WAC1B,EAAW,EAAM,KAAK,YAK5B,IAAM,EAAiB,KAAK,eAAe,EAAU,EAAM,CACrD,EAAM,EAAS,KAAM,GAAM,EAAE,IAAI,EAAE,IAIzC,MAAO,CACL,OAAQ,EAAc,QAAU,OAChC,OAAQ,EACR,UAAW,EACX,SANO,IAAa,OAAc,IAAA,GAAY,EAO9C,eAAgB,EAAe,OAAS,EAAiB,IAAA,GACzD,MACA,YAAa,SACd,CAGH,gBAAwB,EAAiC,CACvD,IAAMC,EAAsB,EAAE,CAC9B,IAAK,IAAM,KAAO,EAAM,CACtB,IAAM,EAAO,KAAK,SAAS,IAAI,EAAI,KAAM,EAAI,QAAQ,CACrD,GAAI,CAAC,EACH,MAAU,MACR,kCAAkC,EAAI,KAAK,IAAI,EAAI,UACpD,CACH,EAAM,KAAK,EAAK,CAElB,OAAO,EAGT,aACE,EACA,EAC4B,CAC5B,IAAIC,EACJ,IAAK,IAAM,KAAQ,EAAO,MAAO,CAM/B,GALI,CAAC,EAAK,QAAQ,SAAS,EAAM,OAAO,EACpC,CAAC,EAAe,EAAM,EAAM,QAAQ,EACpC,CAAC,EAAgB,EAAM,EAAM,SAAS,EACtC,CAAC,EAAa,EAAM,EAAM,EAC1B,CAAC,EAAqB,EAAK,cAAe,EAAM,EAChD,CAAC,EAAkB,EAAM,EAAM,CAAE,SAGrC,IAAMC,EAA6B,CACjC,OACA,gBAJsB,EAAuB,EAAM,EAAQ,EAAM,CAKjE,UAJgB,EAAiB,EAAM,EAAQ,EAAM,CAKtD,CACD,GAAI,EAAK,SAAW,OAAQ,OAAO,EAC/B,EAAK,SAAW,SAAW,CAAC,IAAY,EAAa,GAE3D,OAAO,EAGT,eACE,EACA,EACsB,CACtB,IAAM,EAAM,IAAI,IAChB,IAAK,IAAM,KAAU,EACd,KAAO,cACZ,IAAK,IAAM,KAAQ,EAAO,cAAe,CAKvC,GAJI,CAAC,EAAK,QAAQ,SAAS,EAAuB,EAAM,OAAO,CAAC,EAE5D,CAAC,EAAe,EAAM,EAAM,QAAQ,EACpC,CAAC,EAAgB,EAAM,EAAM,SAAS,EACtC,CAAC,EAAkB,EAAM,EAAM,CAAE,SACrC,IAAM,EAAW,EAAI,IAAI,EAAK,MAAM,CAChC,EAAK,SAAW,OAClB,EAAI,IAAI,EAAK,MAAO,CAClB,MAAO,EAAK,MACZ,OAAQ,OACR,OAAQ,EAAK,QAAU,EAAO,KAAK,KACpC,CAAC,CACQ,GACV,EAAI,IAAI,EAAK,MAAO,CAClB,MAAO,EAAK,MACZ,OAAQ,QACR,OAAQ,EAAK,QAAU,EAAO,KAAK,KACpC,CAAC,CAIR,MAAO,CAAC,GAAG,EAAI,QAAQ,CAAC,GAI5B,SAAS,EAAuB,EAAkC,CAEhE,OADI,EAAO,WAAW,QAAQ,CAAS,QAChC,OAGT,SAAS,EACP,EACA,EACS,CACT,IAAM,EAAU,EAAK,QACrB,GAAI,CAAC,EAAS,MAAO,GACrB,GAAI,EAAQ,OAAO,OAAQ,CACzB,IAAM,EAAQ,EAAQ,OAAS,EAAE,CAEjC,GAAI,CADY,EAAQ,MAAM,KAAM,GAAS,EAAM,SAAS,EAAK,CAAC,CACpD,MAAO,GAEvB,GAAI,EAAQ,WAAY,CACtB,IAAM,EAAa,EAAQ,YAAc,EAAE,CAC3C,GAAI,CAAC,EAAgB,EAAQ,WAAY,EAAW,CAAE,MAAO,GAE/D,MAAO,GAGT,SAAS,EACP,EACA,EACS,CACT,IAAM,EAAU,EAAK,SACrB,GAAI,CAAC,EAAS,MAAO,GACrB,GAAI,EAAQ,MAAQ,EAAQ,OAAS,EAAS,KAAM,MAAO,GAC3D,GAAI,EAAQ,QAAQ,OAAQ,CAC1B,IAAM,EAAe,EAAS,QAAU,EAAE,CAC1C,GAAI,CAAC,EAAQ,OAAO,KAAM,GAAU,EAAa,SAAS,EAAM,CAAC,CAC/D,MAAO,GAEX,GAAI,EAAQ,WAAY,CACtB,IAAM,EAAa,EAAS,YAAc,EAAE,CAC5C,GAAI,CAAC,EAAgB,EAAQ,WAAY,EAAW,CAAE,MAAO,GAE/D,MAAO,GAGT,SAAS,EAAa,EAAkB,EAAiC,CACvE,GAAI,CAAC,EAAK,OAAO,OAAQ,MAAO,GAChC,IAAM,EAAY,IAAI,IACtB,GAAI,EAAM,MACR,IAAK,IAAM,KAAQ,EAAM,MAAO,EAAU,IAAI,EAAK,CAErD,IAAM,EAAiB,EAAM,QAAQ,YAAY,aACjD,GAAI,MAAM,QAAQ,EAAe,CAC/B,IAAK,IAAM,KAAQ,EAAgB,EAAU,IAAI,EAAK,CAExD,OAAO,EAAK,MAAM,MAAO,GAAS,EAAU,IAAI,EAAK,CAAC,CAGxD,SAAS,EACP,EACA,EACS,CACT,GAAI,CAAC,GAAY,EAAS,SAAW,EAAG,MAAO,GAC/C,IAAM,EAAgB,EAAM,QAAQ,eAAiB,EAAE,CACjD,EAAa,EAAc,EAAM,SAAS,CAC1C,EAAe,EAAM,SAAS,KAEpC,OAAO,EAAS,MAAO,GACrB,EAAc,KAAM,GACd,EAAS,WAAa,EAAQ,UAO9B,EAJF,CAAC,EAAQ,YACT,EAAS,aAAe,EAAQ,YAChC,EAAQ,aAAe,GAEA,GAEpB,EAAQ,SAET,EAAQ,WAAa,YACnB,EACK,EAAS,SAAW,EAG3B,EAAS,SAAW,GACpB,EAAS,aAAe,EAIrB,EAAS,SAAW,EAAQ,SAZL,GAa9B,CACH,CAGH,SAAS,EACP,EACA,EACS,CAET,MADI,CAAC,EAAK,YAAc,EAAK,WAAW,SAAW,EAAU,GACtD,EAAK,WAAW,MAAO,GAC5B,EAAkB,EAAU,WAAY,EAAM,CAC/C,CAGH,SAAS,EACP,EACA,EACS,CACT,IAAK,GAAM,CAAC,EAAK,KAAgB,OAAO,QAAQ,EAAQ,CAAE,CACxD,IAAM,EAAQ,EAAO,GAKrB,GAJI,EAAY,QAAiB,IAAU,QAChC,EAAY,SAAW,QAC5B,IAAU,EAAY,QAExB,EAAY,OAAS,CAAC,EAAY,MAAM,SAAS,EAAM,CAAE,MAAO,GAEtE,MAAO,GAGT,SAAS,EACP,EACA,EACA,EACqB,CACrB,GAAI,CAAC,EAAK,iBAAiB,OAAQ,MAAO,EAAE,CAC5C,IAAM,EAAU,IAAI,IAAI,EAAM,UAAY,EAAE,CAAC,CACvC,EAAa,EAAK,gBAAgB,OAAQ,GAAO,CAAC,EAAQ,IAAI,EAAG,CAAC,CAExE,OADI,EAAW,SAAW,EAAU,EAAE,CAC/B,EAA0B,EAAQ,EAAW,CAGtD,SAAS,EACP,EACA,EACqB,CACrB,IAAM,EAAU,EAAO,UAAY,EAAE,CACrC,OAAO,EAAI,IAAK,GACA,EAAQ,KAAM,GAAY,EAAQ,KAAO,EAAG,EAE/C,CACP,KACA,MAAO,cACP,QAAS,cACT,YAAa,YAAY,EAAG,gBAAgB,EAAO,KAAK,OACxD,SAAU,GACX,CAEH,CAGJ,SAAS,EACP,EACA,EACA,EACyC,CACzC,GAAI,CAAC,EAAK,UAAW,OACrB,IAAMC,EACJ,OAAO,EAAK,WAAc,UACrB,EAAO,YAAc,EAAE,EAAE,KAAM,GAAS,EAAK,KAAO,EAAK,UAAU,CACpE,EAAK,UAEX,GAAI,CAAC,EACH,MAAU,MACR,6BAA6B,OAC3B,EAAK,UACN,CAAC,oBAAoB,EAAO,KAAK,OACnC,CAGH,MAAO,CACL,IAAK,EAAW,IAChB,IAAK,EAAW,KAAO,EAAM,SAAS,KACtC,cAAe,EAAW,cAC1B,MAAO,EAAW,MACnB,CAGH,SAAS,EACP,EACA,EACS,CACT,IAAM,EAAU,EAAW,MAAM,CACjC,GAAI,CAAC,EAAS,MAAO,GAErB,IAAM,EAAU,CACd,QAAS,EAAM,QACf,SAAU,EAAM,SAChB,QAAS,EAAM,SAAW,EAAE,CAC7B,CAED,GAAI,CAUF,MAAO,EAPQ,SACb,UACA,WACA,UACA,WAAW,EAAoB,EAAQ,CAAC,IACzC,CACiB,EAAQ,QAAS,EAAQ,SAAU,EAAQ,QAAQ,MAEtD,CACf,MAAO,IAIX,SAAS,EAAoB,EAA4B,CACvD,OAAO,EAAW,QAAQ,MAAO,KAAK,CAAC,QAAQ,QAAS,KAAK,CAG/D,SAAS,EAAc,EAA+C,CACpE,GAAI,EAAS,GAAI,OAAO,EAAS,GACjC,IAAM,EAAY,EAAS,YAAY,GACvC,GAAI,OAAO,GAAc,SAAU,OAAO,EAC1C,GAAI,OAAO,GAAc,SAAU,OAAO,OAAO,EAAU"}

package/dist/policy/opa-adapter.d.ts

@@ -1,46 +0,0 @@
-import { ConsentDefinition, FieldPolicyRule, PIIPolicy, PolicyMeta, PolicyRule, PolicySpec, RateLimitDefinition, RelationshipDefinition } from "./spec.js";
-import { PolicyDecision } from "../types.js";
-import { DecisionContext } from "./engine.js";
-
-//#region src/policy/opa-adapter.d.ts
-interface OPAClient {
-  evaluate<T>(decisionPath: string, input: unknown): Promise<T>;
-}
-interface OPAEvaluationResult {
-  effect?: 'allow' | 'deny';
-  reason?: string;
-  fieldDecisions?: PolicyDecision['fieldDecisions'];
-  requiredConsents?: string[];
-}
-interface OPAAdapterOptions<Result = OPAEvaluationResult | null> {
-  /**
-   * Path fed to the OPA client (e.g., "sigil/authz/allow").
-   */
-  decisionPath: string;
-  /**
-   * Optional mapper when the OPA client returns a non-standard payload.
-   */
-  mapResult?: (value: unknown) => Result;
-}
-declare class OPAPolicyAdapter<Result = OPAEvaluationResult | null> {
-  private readonly client;
-  private readonly options;
-  constructor(client: OPAClient, options: OPAAdapterOptions<Result>);
-  evaluate(context: DecisionContext, policies: PolicySpec[], engineDecision: PolicyDecision): Promise<PolicyDecision>;
-}
-declare function buildOPAInput(context: DecisionContext, policies: PolicySpec[], engineDecision: PolicyDecision): {
-  context: DecisionContext;
-  decision: PolicyDecision;
-  policies: {
-    meta: PolicyMeta;
-    rules: PolicyRule[];
-    fieldPolicies: FieldPolicyRule[] | undefined;
-    pii: PIIPolicy | undefined;
-    relationships: RelationshipDefinition[] | undefined;
-    consents: ConsentDefinition[] | undefined;
-    rateLimits: RateLimitDefinition[] | undefined;
-  }[];
-};
-//#endregion
-export { OPAAdapterOptions, OPAClient, OPAEvaluationResult, OPAPolicyAdapter, buildOPAInput };
-//# sourceMappingURL=opa-adapter.d.ts.map

package/dist/policy/opa-adapter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"opa-adapter.d.ts","names":[],"sources":["../../src/policy/opa-adapter.ts"],"sourcesContent":[],"mappings":";;;;;UAIiB,SAAA;qDACoC,QAAQ;AAD7D;AAIiB,UAAA,mBAAA,CAAmB;EAOnB,MAAA,CAAA,EAAA,OAAA,GAAA,MAAiB;EAWrB,MAAA,CAAA,EAAA,MAAA;EAA0B,cAAA,CAAA,EAfpB,cAeoB,CAAA,gBAAA,CAAA;EAEV,gBAAA,CAAA,EAAA,MAAA,EAAA;;AACC,UAdb,iBAca,CAAA,SAdc,mBAcd,GAAA,IAAA,CAAA,CAAA;EAIjB;;;EAGA,YAAA,EAAA,MAAA;EAAR;;AAqCL;EACW,SAAA,CAAA,EAAA,CAAA,KAAA,EAAA,OAAA,EAAA,GAnDuB,MAmDvB;;AAEO,cAlDL,gBAkDK,CAAA,SAlDqB,mBAkDrB,GAAA,IAAA,CAAA,CAAA;;;sBAhDW,oBACC,kBAAkB;oBAInC,2BACC,8BACM,iBACf,QAAQ;;iBAqCG,aAAA,UACL,2BACC,8BACM"}

package/dist/policy/opa-adapter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"opa-adapter.js","names":["client: OPAClient","options: OPAAdapterOptions<Result>"],"sources":["../../src/policy/opa-adapter.ts"],"sourcesContent":["import type { PolicyDecision } from '../types';\nimport type { PolicySpec, ConsentDefinition } from './spec';\nimport type { DecisionContext } from './engine';\n\nexport interface OPAClient {\n  evaluate<T>(decisionPath: string, input: unknown): Promise<T>;\n}\n\nexport interface OPAEvaluationResult {\n  effect?: 'allow' | 'deny';\n  reason?: string;\n  fieldDecisions?: PolicyDecision['fieldDecisions'];\n  requiredConsents?: string[];\n}\n\nexport interface OPAAdapterOptions<Result = OPAEvaluationResult | null> {\n  /**\n   * Path fed to the OPA client (e.g., \"sigil/authz/allow\").\n   */\n  decisionPath: string;\n  /**\n   * Optional mapper when the OPA client returns a non-standard payload.\n   */\n  mapResult?: (value: unknown) => Result;\n}\n\nexport class OPAPolicyAdapter<Result = OPAEvaluationResult | null> {\n  constructor(\n    private readonly client: OPAClient,\n    private readonly options: OPAAdapterOptions<Result>\n  ) {}\n\n  async evaluate(\n    context: DecisionContext,\n    policies: PolicySpec[],\n    engineDecision: PolicyDecision\n  ): Promise<PolicyDecision> {\n    const input = buildOPAInput(context, policies, engineDecision);\n    const raw = await this.client.evaluate<unknown>(\n      this.options.decisionPath,\n      input\n    );\n    const resolved = this.options.mapResult\n      ? this.options.mapResult(raw)\n      : (raw as OPAEvaluationResult | null);\n\n    if (!resolved) {\n      return {\n        ...engineDecision,\n        evaluatedBy: engineDecision.evaluatedBy ?? 'engine',\n      };\n    }\n\n    const opaResult = resolved as OPAEvaluationResult;\n    const mergedRequiredConsents = mergeRequiredConsents(\n      policies,\n      engineDecision.requiredConsents ?? [],\n      opaResult.requiredConsents ?? []\n    );\n\n    return {\n      ...engineDecision,\n      effect: opaResult.effect ?? engineDecision.effect,\n      reason: opaResult.reason ?? engineDecision.reason,\n      fieldDecisions: opaResult.fieldDecisions ?? engineDecision.fieldDecisions,\n      requiredConsents: mergedRequiredConsents.length\n        ? mergedRequiredConsents\n        : undefined,\n      evaluatedBy: 'opa',\n    };\n  }\n}\n\nexport function buildOPAInput(\n  context: DecisionContext,\n  policies: PolicySpec[],\n  engineDecision: PolicyDecision\n) {\n  return {\n    context,\n    decision: engineDecision,\n    policies: policies.map((policy) => ({\n      meta: policy.meta,\n      rules: policy.rules,\n      fieldPolicies: policy.fieldPolicies,\n      pii: policy.pii,\n      relationships: policy.relationships,\n      consents: policy.consents,\n      rateLimits: policy.rateLimits,\n    })),\n  };\n}\n\nfunction mergeRequiredConsents(\n  policies: PolicySpec[],\n  existing: ConsentDefinition[],\n  incomingIds: string[]\n): ConsentDefinition[] {\n  if (incomingIds.length === 0) return existing;\n  const existingIds = new Set(existing.map((consent) => consent.id));\n  const merged = [...existing];\n\n  for (const id of incomingIds) {\n    if (existingIds.has(id)) continue;\n    const resolved = resolveConsentAcrossPolicies(policies, id);\n    if (resolved) {\n      merged.push(resolved);\n      existingIds.add(resolved.id);\n    }\n  }\n\n  return merged;\n}\n\nfunction resolveConsentAcrossPolicies(\n  policies: PolicySpec[],\n  id: string\n): ConsentDefinition | null {\n  for (const policy of policies) {\n    const match = policy.consents?.find((consent) => consent.id === id);\n    if (match) return match;\n  }\n\n  return {\n    id,\n    scope: 'unspecified',\n    purpose: 'unspecified',\n    description: `Consent \"${id}\" returned by OPA`,\n    required: true,\n  };\n}\n"],"mappings":"AA0BA,IAAa,EAAb,KAAmE,CACjE,YACE,EACA,EACA,CAFiB,KAAA,OAAA,EACA,KAAA,QAAA,EAGnB,MAAM,SACJ,EACA,EACA,EACyB,CACzB,IAAM,EAAQ,EAAc,EAAS,EAAU,EAAe,CACxD,EAAM,MAAM,KAAK,OAAO,SAC5B,KAAK,QAAQ,aACb,EACD,CACK,EAAW,KAAK,QAAQ,UAC1B,KAAK,QAAQ,UAAU,EAAI,CAC1B,EAEL,GAAI,CAAC,EACH,MAAO,CACL,GAAG,EACH,YAAa,EAAe,aAAe,SAC5C,CAGH,IAAM,EAAY,EACZ,EAAyB,EAC7B,EACA,EAAe,kBAAoB,EAAE,CACrC,EAAU,kBAAoB,EAAE,CACjC,CAED,MAAO,CACL,GAAG,EACH,OAAQ,EAAU,QAAU,EAAe,OAC3C,OAAQ,EAAU,QAAU,EAAe,OAC3C,eAAgB,EAAU,gBAAkB,EAAe,eAC3D,iBAAkB,EAAuB,OACrC,EACA,IAAA,GACJ,YAAa,MACd,GAIL,SAAgB,EACd,EACA,EACA,EACA,CACA,MAAO,CACL,UACA,SAAU,EACV,SAAU,EAAS,IAAK,IAAY,CAClC,KAAM,EAAO,KACb,MAAO,EAAO,MACd,cAAe,EAAO,cACtB,IAAK,EAAO,IACZ,cAAe,EAAO,cACtB,SAAU,EAAO,SACjB,WAAY,EAAO,WACpB,EAAE,CACJ,CAGH,SAAS,EACP,EACA,EACA,EACqB,CACrB,GAAI,EAAY,SAAW,EAAG,OAAO,EACrC,IAAM,EAAc,IAAI,IAAI,EAAS,IAAK,GAAY,EAAQ,GAAG,CAAC,CAC5D,EAAS,CAAC,GAAG,EAAS,CAE5B,IAAK,IAAM,KAAM,EAAa,CAC5B,GAAI,EAAY,IAAI,EAAG,CAAE,SACzB,IAAM,EAAW,EAA6B,EAAU,EAAG,CACvD,IACF,EAAO,KAAK,EAAS,CACrB,EAAY,IAAI,EAAS,GAAG,EAIhC,OAAO,EAGT,SAAS,EACP,EACA,EAC0B,CAC1B,IAAK,IAAM,KAAU,EAAU,CAC7B,IAAM,EAAQ,EAAO,UAAU,KAAM,GAAY,EAAQ,KAAO,EAAG,CACnE,GAAI,EAAO,OAAO,EAGpB,MAAO,CACL,KACA,MAAO,cACP,QAAS,cACT,YAAa,YAAY,EAAG,mBAC5B,SAAU,GACX"}

package/dist/policy/spec.d.ts

@@ -1,115 +0,0 @@
-import { OwnerShipMeta } from "../ownership.js";
-
-//#region src/policy/spec.d.ts
-type PolicyEffect = 'allow' | 'deny';
-interface RelationshipDefinition {
-  subjectType: string;
-  relation: string;
-  objectType: string;
-  description?: string;
-  transitive?: boolean;
-}
-interface RelationshipMatcher {
-  relation: string;
-  objectType?: string;
-  objectId?: string;
-}
-interface ConsentDefinition {
-  id: string;
-  scope: string;
-  purpose: string;
-  description?: string;
-  lawfulBasis?: 'consent' | 'contract' | 'legal_obligation' | 'legitimate_interest';
-  expiresInDays?: number;
-  required?: boolean;
-}
-interface RateLimitDefinition {
-  id: string;
-  rpm: number;
-  key?: string;
-  windowSeconds?: number;
-  burst?: number;
-}
-interface PolicyOPAConfig {
-  /** Fully-qualified package, e.g. "sigil.authz" */
-  package: string;
-  /** Optional rule within package (defaults to "allow") */
-  decision?: string;
-}
-interface PolicyMeta extends OwnerShipMeta {
-  /** Fully-qualified policy name (e.g., "sigil.core.default"). */
-  name: string;
-  /** Version of the policy; bump on breaking changes. */
-  version: number;
-  /** Optional scope hint used for discovery. */
-  scope?: 'global' | 'feature' | 'operation';
-}
-interface AttributeMatcher {
-  equals?: unknown;
-  oneOf?: unknown[];
-  exists?: boolean;
-}
-interface SubjectMatcher {
-  roles?: string[];
-  attributes?: Record<string, AttributeMatcher>;
-}
-interface ResourceMatcher {
-  type: string;
-  fields?: string[];
-  attributes?: Record<string, AttributeMatcher>;
-}
-interface PolicyCondition {
-  /** Simple expression evaluated against { subject, resource, context }. */
-  expression: string;
-}
-interface PolicyRule {
-  effect: PolicyEffect;
-  actions: string[];
-  subject?: SubjectMatcher;
-  resource?: ResourceMatcher;
-  relationships?: RelationshipMatcher[];
-  requiresConsent?: string[];
-  flags?: string[];
-  rateLimit?: string | RateLimitDefinition;
-  escalate?: 'human_review' | null;
-  conditions?: PolicyCondition[];
-  reason?: string;
-}
-interface FieldPolicyRule {
-  effect: PolicyEffect;
-  field: string;
-  actions: ('read' | 'write')[];
-  subject?: SubjectMatcher;
-  resource?: ResourceMatcher;
-  conditions?: PolicyCondition[];
-  reason?: string;
-}
-interface PIIPolicy {
-  fields: string[];
-  consentRequired?: boolean;
-  retentionDays?: number;
-}
-interface PolicySpec {
-  meta: PolicyMeta;
-  rules: PolicyRule[];
-  fieldPolicies?: FieldPolicyRule[];
-  pii?: PIIPolicy;
-  relationships?: RelationshipDefinition[];
-  consents?: ConsentDefinition[];
-  rateLimits?: RateLimitDefinition[];
-  opa?: PolicyOPAConfig;
-}
-interface PolicyRef {
-  name: string;
-  version: number;
-}
-declare class PolicyRegistry {
-  private readonly items;
-  register(spec: PolicySpec): this;
-  list(): PolicySpec[];
-  get(name: string, version?: number): PolicySpec | undefined;
-}
-declare function makePolicyKey(ref: PolicyRef): string;
-//#endregion
-export { AttributeMatcher, ConsentDefinition, FieldPolicyRule, PIIPolicy, PolicyCondition, PolicyEffect, PolicyMeta, PolicyOPAConfig, PolicyRef, PolicyRegistry, PolicyRule, PolicySpec, RateLimitDefinition, RelationshipDefinition, RelationshipMatcher, ResourceMatcher, SubjectMatcher, makePolicyKey };
-//# sourceMappingURL=spec.d.ts.map

package/dist/policy/spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"spec.d.ts","names":[],"sources":["../../src/policy/spec.ts"],"sourcesContent":[],"mappings":";;;KAEY,YAAA;UAEK,sBAAA;EAFL,WAAA,EAAA,MAAY;EAEP,QAAA,EAAA,MAAA;EAQA,UAAA,EAAA,MAAA;EAMA,WAAA,CAAA,EAAA,MAAiB;EAcjB,UAAA,CAAA,EAAA,OAAA;AAQjB;AAOiB,UAnCA,mBAAA,CAmCmB;EASnB,QAAA,EAAA,MAAA;EAMA,UAAA,CAAA,EAAA,MAAc;EAKd,QAAA,CAAA,EAAA,MAAA;AAMjB;AAKiB,UA5DA,iBAAA,CA4DU;EACjB,EAAA,EAAA,MAAA;EAEE,KAAA,EAAA,MAAA;EACC,OAAA,EAAA,MAAA;EACK,WAAA,CAAA,EAAA,MAAA;EAGK,WAAA,CAAA,EAAA,SAAA,GAAA,UAAA,GAAA,kBAAA,GAAA,qBAAA;EAER,aAAA,CAAA,EAAA,MAAA;EAAe,QAAA,CAAA,EAAA,OAAA;AAI9B;AACU,UA7DO,mBAAA,CA6DP;EAGE,EAAA,EAAA,MAAA;EACC,GAAA,EAAA,MAAA;EACE,GAAA,CAAA,EAAA,MAAA;EAAe,aAAA,CAAA,EAAA,MAAA;EAIb,KAAA,CAAA,EAAA,MAAS;AAM1B;AACQ,UArES,eAAA,CAqET;EACC;EACS,OAAA,EAAA,MAAA;EACV;EACU,QAAA,CAAA,EAAA,MAAA;;AAEH,UApEE,UAAA,SAAmB,aAoErB,CAAA;EACP;EAAe,IAAA,EAAA,MAAA;EAGN;EAOJ,OAAA,EAAA,MAAA;EAGI;EAOP,KAAA,CAAA,EAAA,QAAA,GAAA,SAAA,GAAA,WAAA;;AAIuC,UApFhC,gBAAA,CAoFgC;EAejC,MAAA,CAAA,EAAA,OAAa;;;;UA7FZ,cAAA;;eAEF,eAAe;;UAGb,eAAA;;;eAGF,eAAe;;UAGb,eAAA;;;;UAKA,UAAA;UACP;;YAEE;aACC;kBACK;;;uBAGK;;eAER;;;UAIE,eAAA;UACP;;;YAGE;aACC;eACE;;;UAIE,SAAA;;;;;UAMA,UAAA;QACT;SACC;kBACS;QACV;kBACU;aACL;eACE;QACP;;UAGS,SAAA;;;;cAOJ,cAAA;;iBAGI;UAOP;uCAI6B;;iBAevB,aAAA,MAAmB"}

package/dist/policy/spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"spec.js","names":["candidate: PolicySpec | undefined"],"sources":["../../src/policy/spec.ts"],"sourcesContent":["import type { OwnerShipMeta } from '../ownership';\n\nexport type PolicyEffect = 'allow' | 'deny';\n\nexport interface RelationshipDefinition {\n  subjectType: string;\n  relation: string;\n  objectType: string;\n  description?: string;\n  transitive?: boolean;\n}\n\nexport interface RelationshipMatcher {\n  relation: string;\n  objectType?: string;\n  objectId?: string;\n}\n\nexport interface ConsentDefinition {\n  id: string;\n  scope: string;\n  purpose: string;\n  description?: string;\n  lawfulBasis?:\n    | 'consent'\n    | 'contract'\n    | 'legal_obligation'\n    | 'legitimate_interest';\n  expiresInDays?: number;\n  required?: boolean;\n}\n\nexport interface RateLimitDefinition {\n  id: string;\n  rpm: number;\n  key?: string;\n  windowSeconds?: number;\n  burst?: number;\n}\n\nexport interface PolicyOPAConfig {\n  /** Fully-qualified package, e.g. \"sigil.authz\" */\n  package: string;\n  /** Optional rule within package (defaults to \"allow\") */\n  decision?: string;\n}\n\nexport interface PolicyMeta extends OwnerShipMeta {\n  /** Fully-qualified policy name (e.g., \"sigil.core.default\"). */\n  name: string;\n  /** Version of the policy; bump on breaking changes. */\n  version: number;\n  /** Optional scope hint used for discovery. */\n  scope?: 'global' | 'feature' | 'operation';\n}\n\nexport interface AttributeMatcher {\n  equals?: unknown;\n  oneOf?: unknown[];\n  exists?: boolean;\n}\n\nexport interface SubjectMatcher {\n  roles?: string[];\n  attributes?: Record<string, AttributeMatcher>;\n}\n\nexport interface ResourceMatcher {\n  type: string;\n  fields?: string[];\n  attributes?: Record<string, AttributeMatcher>;\n}\n\nexport interface PolicyCondition {\n  /** Simple expression evaluated against { subject, resource, context }. */\n  expression: string;\n}\n\nexport interface PolicyRule {\n  effect: PolicyEffect;\n  actions: string[];\n  subject?: SubjectMatcher;\n  resource?: ResourceMatcher;\n  relationships?: RelationshipMatcher[];\n  requiresConsent?: string[];\n  flags?: string[];\n  rateLimit?: string | RateLimitDefinition;\n  escalate?: 'human_review' | null;\n  conditions?: PolicyCondition[];\n  reason?: string;\n}\n\nexport interface FieldPolicyRule {\n  effect: PolicyEffect;\n  field: string;\n  actions: ('read' | 'write')[];\n  subject?: SubjectMatcher;\n  resource?: ResourceMatcher;\n  conditions?: PolicyCondition[];\n  reason?: string;\n}\n\nexport interface PIIPolicy {\n  fields: string[];\n  consentRequired?: boolean;\n  retentionDays?: number;\n}\n\nexport interface PolicySpec {\n  meta: PolicyMeta;\n  rules: PolicyRule[];\n  fieldPolicies?: FieldPolicyRule[];\n  pii?: PIIPolicy;\n  relationships?: RelationshipDefinition[];\n  consents?: ConsentDefinition[];\n  rateLimits?: RateLimitDefinition[];\n  opa?: PolicyOPAConfig;\n}\n\nexport interface PolicyRef {\n  name: string;\n  version: number;\n}\n\nconst policyKey = (name: string, version: number) => `${name}.v${version}`;\n\nexport class PolicyRegistry {\n  private readonly items = new Map<string, PolicySpec>();\n\n  register(spec: PolicySpec): this {\n    const key = policyKey(spec.meta.name, spec.meta.version);\n    if (this.items.has(key)) throw new Error(`Duplicate policy ${key}`);\n    this.items.set(key, spec);\n    return this;\n  }\n\n  list(): PolicySpec[] {\n    return [...this.items.values()];\n  }\n\n  get(name: string, version?: number): PolicySpec | undefined {\n    if (version != null) return this.items.get(policyKey(name, version));\n    let candidate: PolicySpec | undefined;\n    let max = -Infinity;\n    for (const spec of this.items.values()) {\n      if (spec.meta.name !== name) continue;\n      if (spec.meta.version > max) {\n        max = spec.meta.version;\n        candidate = spec;\n      }\n    }\n    return candidate;\n  }\n}\n\nexport function makePolicyKey(ref: PolicyRef) {\n  return policyKey(ref.name, ref.version);\n}\n"],"mappings":"AA4HA,MAAM,GAAa,EAAc,IAAoB,GAAG,EAAK,IAAI,IAEjE,IAAa,EAAb,KAA4B,CAC1B,MAAyB,IAAI,IAE7B,SAAS,EAAwB,CAC/B,IAAM,EAAM,EAAU,EAAK,KAAK,KAAM,EAAK,KAAK,QAAQ,CACxD,GAAI,KAAK,MAAM,IAAI,EAAI,CAAE,MAAU,MAAM,oBAAoB,IAAM,CAEnE,OADA,KAAK,MAAM,IAAI,EAAK,EAAK,CAClB,KAGT,MAAqB,CACnB,MAAO,CAAC,GAAG,KAAK,MAAM,QAAQ,CAAC,CAGjC,IAAI,EAAc,EAA0C,CAC1D,GAAI,GAAW,KAAM,OAAO,KAAK,MAAM,IAAI,EAAU,EAAM,EAAQ,CAAC,CACpE,IAAIA,EACA,EAAM,KACV,IAAK,IAAM,KAAQ,KAAK,MAAM,QAAQ,CAChC,EAAK,KAAK,OAAS,GACnB,EAAK,KAAK,QAAU,IACtB,EAAM,EAAK,KAAK,QAChB,EAAY,GAGhB,OAAO,IAIX,SAAgB,EAAc,EAAgB,CAC5C,OAAO,EAAU,EAAI,KAAM,EAAI,QAAQ"}

package/dist/presentations.backcompat.d.ts

@@ -1,8 +0,0 @@
-import { PresentationSpec } from "./presentations.js";
-import { PresentationDescriptorV2 } from "./presentations.v2.js";
-
-//#region src/presentations.backcompat.d.ts
-declare function toV2FromV1(v1: PresentationSpec): PresentationDescriptorV2;
-//#endregion
-export { toV2FromV1 };
-//# sourceMappingURL=presentations.backcompat.d.ts.map

package/dist/presentations.backcompat.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"presentations.backcompat.d.ts","names":[],"sources":["../src/presentations.backcompat.ts"],"sourcesContent":[],"mappings":";;;;iBAGgB,UAAA,KAAe,mBAAmB"}

package/dist/presentations.backcompat.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"presentations.backcompat.js","names":[],"sources":["../src/presentations.backcompat.ts"],"sourcesContent":["import type { PresentationSpec } from './presentations';\nimport type { PresentationDescriptorV2 } from './presentations.v2';\n\nexport function toV2FromV1(v1: PresentationSpec): PresentationDescriptorV2 {\n  if (v1.content.kind === 'web_component') {\n    return {\n      meta: { ...v1.meta },\n      policy: v1.policy,\n      source: {\n        type: 'component',\n        framework: v1.content.framework,\n        componentKey: v1.content.componentKey,\n        props: v1.content.props,\n      },\n      targets: ['react', 'application/json', 'application/xml'],\n    };\n  }\n  if (v1.content.kind === 'markdown') {\n    return {\n      meta: { ...v1.meta },\n      policy: v1.policy,\n      source: {\n        type: 'blocknotejs',\n        docJson: v1.content.content ?? v1.content.resourceUri ?? '',\n      },\n      targets: ['markdown', 'application/json', 'application/xml'],\n    };\n  }\n  return {\n    meta: { ...v1.meta },\n    policy: v1.policy,\n    source: {\n      type: 'blocknotejs',\n      docJson: { kind: 'data', mimeType: v1.content.mimeType, model: 'schema' },\n    },\n    targets: ['application/json', 'application/xml'],\n  };\n}\n"],"mappings":"AAGA,SAAgB,EAAW,EAAgD,CAyBzE,OAxBI,EAAG,QAAQ,OAAS,gBACf,CACL,KAAM,CAAE,GAAG,EAAG,KAAM,CACpB,OAAQ,EAAG,OACX,OAAQ,CACN,KAAM,YACN,UAAW,EAAG,QAAQ,UACtB,aAAc,EAAG,QAAQ,aACzB,MAAO,EAAG,QAAQ,MACnB,CACD,QAAS,CAAC,QAAS,mBAAoB,kBAAkB,CAC1D,CAEC,EAAG,QAAQ,OAAS,WACf,CACL,KAAM,CAAE,GAAG,EAAG,KAAM,CACpB,OAAQ,EAAG,OACX,OAAQ,CACN,KAAM,cACN,QAAS,EAAG,QAAQ,SAAW,EAAG,QAAQ,aAAe,GAC1D,CACD,QAAS,CAAC,WAAY,mBAAoB,kBAAkB,CAC7D,CAEI,CACL,KAAM,CAAE,GAAG,EAAG,KAAM,CACpB,OAAQ,EAAG,OACX,OAAQ,CACN,KAAM,cACN,QAAS,CAAE,KAAM,OAAQ,SAAU,EAAG,QAAQ,SAAU,MAAO,SAAU,CAC1E,CACD,QAAS,CAAC,mBAAoB,kBAAkB,CACjD"}

package/dist/presentations.d.ts

@@ -1,97 +0,0 @@
-import { Stability } from "./ownership.js";
-import z$1 from "zod";
-import { AnySchemaModel } from "@lssm/lib.schema";
-
-//#region src/presentations.d.ts
-/** V1 presentation kinds (back-compat). Prefer V2 descriptors for new work. */
-type PresentationKind = 'web_component' | 'markdown' | 'data';
-/** Minimal metadata for presentations (V1). */
-interface PresentationMeta {
-  name: string;
-  version: number;
-  stability?: Stability;
-  owners?: string[];
-  tags?: string[];
-  description?: string;
-}
-/** Policy for presentations (flags, pii). */
-interface PresentationPolicy {
-  flags?: string[];
-  pii?: string[];
-}
-/** Web component presentation (V1). */
-interface WebComponentPresentation {
-  kind: 'web_component';
-  framework: 'react';
-  /** Symbolic key resolved by host via component map */
-  componentKey: string;
-  /** Props schema (validated at runtime) */
-  props: AnySchemaModel;
-  analytics?: string[];
-}
-/** Markdown presentation (V1). */
-interface MarkdownPresentation {
-  kind: 'markdown';
-  /** Inline markdown/MDX content */
-  content?: string;
-  /** Or a resolvable resource URI handled by ResourceRegistry */
-  resourceUri?: string;
-}
-/** Data presentation (V1): structured export description. */
-interface DataPresentation {
-  kind: 'data';
-  mimeType: string;
-  /** Structured data schema */
-  model: AnySchemaModel;
-}
-type PresentationContent = WebComponentPresentation | MarkdownPresentation | DataPresentation;
-interface PresentationSpec {
-  meta: PresentationMeta;
-  policy?: PresentationPolicy;
-  content: PresentationContent;
-}
-/** In-memory registry for V1 PresentationSpec. */
-declare class PresentationRegistry {
-  private items;
-  register(p: PresentationSpec): this;
-  list(): PresentationSpec[];
-  get(name: string, version?: number): PresentationSpec | undefined;
-}
-declare function jsonSchemaForPresentation(p: PresentationSpec): {
-  framework: "react";
-  componentKey: string;
-  props: z$1.core.JSONSchema.JSONSchema;
-  meta: {
-    readonly name: string;
-    readonly version: number;
-    readonly stability: Stability;
-    readonly tags: string[];
-    readonly description: string;
-  };
-  kind: PresentationKind;
-} | {
-  content: string | undefined;
-  resourceUri: string | undefined;
-  meta: {
-    readonly name: string;
-    readonly version: number;
-    readonly stability: Stability;
-    readonly tags: string[];
-    readonly description: string;
-  };
-  kind: PresentationKind;
-} | {
-  mimeType: string;
-  model: z$1.core.JSONSchema.JSONSchema;
-  meta: {
-    readonly name: string;
-    readonly version: number;
-    readonly stability: Stability;
-    readonly tags: string[];
-    readonly description: string;
-  };
-  kind: PresentationKind;
-};
-//#endregion
-export { DataPresentation, MarkdownPresentation, PresentationContent, PresentationKind, PresentationMeta, PresentationPolicy, PresentationRegistry, PresentationSpec, WebComponentPresentation, jsonSchemaForPresentation };
-//# sourceMappingURL=presentations.d.ts.map