@lssm/lib.contracts 1.41.1 → 1.42.2

package/dist/docs/tech/PHASE_4_PERSONALIZATION_ENGINE.docblock.js

@@ -1,86 +0,0 @@
-import{registerDocBlocks as e}from"../registry.js";const t=[{id:`docs.tech.PHASE_4_PERSONALIZATION_ENGINE`,title:`Phase 4: Personalization Engine`,summary:`**Status**: Complete`,kind:`reference`,visibility:`public`,route:`/docs/tech/PHASE_4_PERSONALIZATION_ENGINE`,tags:[`tech`,`PHASE_4_PERSONALIZATION_ENGINE`],body:`# Phase 4: Personalization Engine
-
-**Status**: Complete  
-**Last updated**: 2025-11-21
-
-Phase 4 unlocks tenant-scoped personalization with zero bespoke code. We shipped three new libraries, a signing-aware Overlay editor, and the persistence layer required to observe usage and apply overlays safely.
-
----
-
-## 1. Libraries
-
-### @lssm/lib.overlay-engine
-
-- OverlaySpec types + validator mirror the public spec.
-- Cryptographic signer (\`ed25519\`, \`rsa-pss-sha256\`) with canonical JSON serialization.
-- Registry that merges tenant/role/user/device overlays with predictable specificity.
-- React hooks (\`useOverlay\`, \`useOverlayFields\`) for client-side rendering.
-- Runtime engine audits every applied overlay for traceability.
-
-### @lssm/lib.personalization
-
-- Behavior tracker buffers field/feature/workflow events and exports OTel metrics.
-- Analyzer summarizes field usage and workflow drop-offs into actionable insights.
-- Adapter translates insights into overlay suggestions or workflow tweaks.
-- In-memory store implementation + interface for plugging Prisma/ClickHouse later.
-
-### @lssm/lib.workflow-composer
-
-- \`WorkflowComposer\` merges base workflows with tenant/role/device extensions.
-- Step injection utilities keep transitions intact and validate anchor steps.
-- Template helpers for common tenant review/approval, plus merge helpers for multi-scope extensions.
-
----
-
-## 2. Overlay Editor App
-
-Path: \`packages/apps/overlay-editor\`
-
-- Next.js App Router UI for toggling field visibility, renaming labels, and reordering lists.
-- Live JSON preview powered by \`defineOverlay\`.
-- Server action that signs overlays via PEM private keys (Ed25519 by default) using the overlay engine signer.
-
----
-
-## 3. Persistence
-
-Added Prisma models (see \`packages/libs/database/prisma/schema.prisma\`):
-
-- \`UserBehaviorEvent\` – field/feature/workflow telemetry.
-- \`OverlaySigningKey\` – tenant managed signing keys with revocation timestamps.
-- \`Overlay\` – stored overlays (tenant/user/role/device scope) plus signature metadata.
-
----
-
-## 4. Integration Steps
-
-1. Track usage inside apps via \`createBehaviorTracker\`.
-2. Periodically run \`BehaviorAnalyzer.analyze\` to generate insights.
-3. Convert insights into OverlaySpecs or Workflow extensions.
-4. Register tenant overlays in \`OverlayRegistry\` and serve via presentation runtimes.
-5. Compose workflows per tenant using \`WorkflowComposer\`.
-
-See the \`docs/tech/personalization/*\` guides for concrete examples.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-`}];e(t);export{t as tech_PHASE_4_PERSONALIZATION_ENGINE_DocBlocks};

package/dist/docs/tech/PHASE_5_ZERO_TOUCH_OPERATIONS.docblock.js

@@ -1 +0,0 @@
-import{registerDocBlocks as e}from"../registry.js";const t=[{id:`docs.tech.PHASE_5_ZERO_TOUCH_OPERATIONS`,title:`Phase 5: Zero-Touch Operations`,summary:`**Status**: In progress`,kind:`reference`,visibility:`public`,route:`/docs/tech/PHASE_5_ZERO_TOUCH_OPERATIONS`,tags:[`tech`,`PHASE_5_ZERO_TOUCH_OPERATIONS`],body:"# Phase 5: Zero-Touch Operations\n\n**Status**: In progress  \n**Last updated**: 2025-11-21\n\nPhase 5 delivers progressive delivery, SLO intelligence, cost attribution, and anomaly-driven remediation so the platform can deploy continuously without pager rotations.\n\n---\n\n## 1. New Libraries\n\n### @lssm/lib.progressive-delivery\n- `DeploymentStrategy` types capture canary vs blue-green rollouts.\n- `CanaryController` + `CanaryAnalyzer` orchestrate stage evaluation against telemetry thresholds.\n- `TrafficShifter` keeps stable/candidate splits in sync with feature-flag or router state.\n- `DeploymentCoordinator` drives stage progression, emits events, and triggers rollbacks.\n- `RollbackManager` encapsulates safe revert hooks (spec version revert, traffic shift, etc.).\n\n### @lssm/lib.slo\n- Declarative `SLODefinition` with latency + availability targets per capability/spec.\n- `SLOTracker` stores rolling snapshots + error budget positions.\n- `BurnRateCalculator` implements multi-window burn computations (fast vs slow burn).\n- `SLOMonitor` pushes incidents to Ops tooling automatically when burn exceeds thresholds.\n\n### @lssm/lib.cost-tracking\n- `CostTracker` normalizes DB/API/compute metrics into per-operation cost totals.\n- `BudgetAlertManager` raises tenant budget warnings (80% default) with contextual payloads.\n- `OptimizationRecommender` suggests batching, caching, or contract tweaks to cut spend.\n\n### Observability Anomaly Toolkit\n- `BaselineCalculator` establishes rolling intent metrics (latency, error rate, throughput).\n- `AnomalyDetector` flags spikes/drops via relative deltas after 10+ samples.\n- `RootCauseAnalyzer` correlates anomalies with recent deployments.\n- `AlertManager` deduplicates notifications and feeds MCP/SRE transports.\n\n---\n\n## 2. Data Model Additions\n\nFile: `packages/libs/database/prisma/schema.prisma`\n\n| Model | Purpose |\n| --- | --- |\n| `SLODefinition`, `SLOSnapshot`, `ErrorBudget`, `SLOIncident` | Persist definitions, rolling windows, and incidents. |\n| `OperationCost`, `TenantBudget`, `CostAlert`, `OptimizationSuggestion` | Track per-operation costs, budgets, and generated recommendations. |\n| `Deployment`, `DeploymentStage`, `RollbackEvent` | Audit progressive delivery runs and automated rollbacks. |\n| `MetricBaseline`, `AnomalyEvent` | Store computed baselines and anomaly evidence for training/analytics. |\n\nRun `bun database generate` after pulling to refresh the Prisma client.\n\n---\n\n## 3. Operational Flow\n\n1. **Deploy**: Define a `DeploymentStrategy` and feed telemetry via `@lssm/lib.observability`. Canary stages run automatically.\n2. **Protect**: `CanaryAnalyzer` evaluates error rate + latency thresholds. Failures trigger `RollbackManager`.\n3. **Observe**: `SLOMonitor` consumes snapshots and opens incidents when burn rate exceeds thresholds.\n4. **Optimize**: `CostTracker` aggregates spend per tenant + capability, while `OptimizationRecommender` surfaces fixes.\n5. **Detect**: Anomaly signals route to `RootCauseAnalyzer`, which links them to specific deployments for auto-rollback.\n\n---\n\n## 4. Integration Checklist\n\n1. Instrument adapters with `createTracingMiddleware({ onSample })` to feed metric points into `AnomalyDetector`.\n2. Register SLOs per critical operation (`billing.charge`, `knowledge.search`) and wire monitors to Ops notifications.\n3. Attach `CostTracker.recordSample` to workflow runners (DB instrumentation + external call wrappers).\n4. Store deployment metadata using the new Prisma models for auditing + UI surfacing.\n5. Update `@lssm/app.ops-console` (next iteration) to list deployments, SLO status, costs, and anomalies in one timeline.\n\n---\n\n## 5. Next Steps\n\n- Wire `DeploymentCoordinator` into the Contracts CLI so `contractspec deploy` can run staged rollouts.\n- Add UI for SLO dashboards (burn rate sparkline + incident feed).\n- Ship budget suggestions into Growth Agent for automated cost optimizations.\n- Connect `AnomalyEvent` stream to MCP agents for root-cause playbooks.\n"}];e(t);export{t as tech_PHASE_5_ZERO_TOUCH_OPERATIONS_DocBlocks};

package/dist/forms.js

@@ -1 +0,0 @@
-function e(e){return`${e.key}.v${e.version}`}var t=class{items=new Map;register(t){let n=e(t.meta);if(this.items.has(n))throw Error(`Duplicate form ${n}`);return this.items.set(n,t),this}list(){return[...this.items.values()]}get(e,t){if(t!=null)return this.items.get(`${e}.v${t}`);let n,r=-1/0;for(let[t,i]of this.items.entries())t.startsWith(`${e}.v`)&&i.meta.version>r&&(r=i.meta.version,n=i);return n}};function n(e,t){if(!t)return;let n=t.replace(/\[(\d+)\]/g,`.$1`).split(`.`).filter(Boolean),r=e;for(let e of n){if(r==null)return;r=r[e]}return r}function r(e,t){if(!t)return!0;if(t.not)return!r(e,t.not);if(t.all&&t.all.length)return t.all.every(t=>r(e,t));if(t.any&&t.any.length)return t.any.some(t=>r(e,t));if(t.when){let{path:r,op:i=`truthy`,value:a}=t.when,o=n(e,r);switch(i){case`equals`:return o===a;case`notEquals`:return o!==a;case`in`:return Array.isArray(a)&&a.includes(o);case`notIn`:return Array.isArray(a)&&!a.includes(o);case`gt`:return Number(o)>Number(a);case`gte`:return Number(o)>=Number(a);case`lt`:return Number(o)<Number(a);case`lte`:return Number(o)<=Number(a);case`empty`:return o==null||(Array.isArray(o)?o.length===0:String(o).length===0);case`lengthGt`:return(Array.isArray(o)||typeof o==`string`)&&o.length>Number(a??0);case`lengthGte`:return(Array.isArray(o)||typeof o==`string`)&&o.length>=Number(a??0);case`lengthLt`:return(Array.isArray(o)||typeof o==`string`)&&o.length<Number(a??0);case`lengthLte`:return(Array.isArray(o)||typeof o==`string`)&&o.length<=Number(a??0);case`truthy`:default:return!!o}}return!0}function i(e,t){return e.model.getZod().superRefine((i,a)=>{let o=(e,t)=>{let s=e.name?t?`${t}.${e.name}`:e.name:t??``;if(e.requiredWhen&&r(i,e.requiredWhen)){let e=n(i,s);(e==null||typeof e==`string`&&e.trim().length===0||Array.isArray(e)&&e.length===0)&&a.addIssue({code:`custom`,path:s.split(`.`),message:`required`})}if(e.kind===`array`){let t=n(i,s);e.min!=null&&Array.isArray(t)&&t.length<e.min&&a.addIssue({code:`custom`,path:s.split(`.`),message:`min:${e.min}`}),e.max!=null&&Array.isArray(t)&&t.length>e.max&&a.addIssue({code:`custom`,path:s.split(`.`),message:`max:${e.max}`}),o(e.of,s)}else if(e.kind===`group`)for(let t of e.fields)o(t,s)};for(let t of e.fields)o(t);if(e.constraints&&t)for(let n of e.constraints){let e=t[n.key];if(!e)continue;let r=e(i,n.paths,n.args);r.ok||a.addIssue({code:`custom`,path:(r.path??n.paths[0]??``).split(`.`).filter(Boolean),message:r.message??n.messageI18n})}})}function a(e){return e}export{t as FormRegistry,i as buildZodWithRelations,a as defineFormSpec,r as evalPredicate};

package/dist/integrations/contracts.js

@@ -1 +0,0 @@
-import{defineCommand as e,defineQuery as t}from"../spec.js";import{ScalarTypeEnum as n,SchemaModel as r}from"@lssm/lib.schema";const i=new r({name:`IntegrationConnectionRecord`,fields:{id:{type:n.ID(),isOptional:!1},tenantId:{type:n.ID(),isOptional:!1},integrationKey:{type:n.NonEmptyString(),isOptional:!1},integrationVersion:{type:n.Int_unsecure(),isOptional:!1},label:{type:n.String_unsecure(),isOptional:!1},ownershipMode:{type:n.String_unsecure(),isOptional:!1},externalAccountId:{type:n.String_unsecure(),isOptional:!0},secretProvider:{type:n.String_unsecure(),isOptional:!1},secretRef:{type:n.String_unsecure(),isOptional:!1},status:{type:n.String_unsecure(),isOptional:!1},environment:{type:n.String_unsecure(),isOptional:!0},healthStatus:{type:n.String_unsecure(),isOptional:!0},healthCheckedAt:{type:n.DateTime(),isOptional:!0},healthLatencyMs:{type:n.Float_unsecure(),isOptional:!0},healthErrorCode:{type:n.String_unsecure(),isOptional:!0},healthErrorMessage:{type:n.String_unsecure(),isOptional:!0},usageRequestCount:{type:n.Int_unsecure(),isOptional:!0},usageSuccessCount:{type:n.Int_unsecure(),isOptional:!0},usageErrorCount:{type:n.Int_unsecure(),isOptional:!0},usageLastUsedAt:{type:n.DateTime(),isOptional:!0},usageLastErrorAt:{type:n.DateTime(),isOptional:!0},usageLastErrorCode:{type:n.String_unsecure(),isOptional:!0},createdAt:{type:n.DateTime(),isOptional:!0},updatedAt:{type:n.DateTime(),isOptional:!0}}}),a=new r({name:`CreateIntegrationConnectionInput`,fields:{tenantId:{type:n.ID(),isOptional:!1},integrationKey:{type:n.NonEmptyString(),isOptional:!1},integrationVersion:{type:n.Int_unsecure(),isOptional:!1},label:{type:n.String_unsecure(),isOptional:!1},ownershipMode:{type:n.String_unsecure(),isOptional:!1},externalAccountId:{type:n.String_unsecure(),isOptional:!0},secretProvider:{type:n.String_unsecure(),isOptional:!1},secretRef:{type:n.String_unsecure(),isOptional:!1},environment:{type:n.String_unsecure(),isOptional:!0},config:{type:n.JSONObject(),isOptional:!1}}}),o=new r({name:`UpdateIntegrationConnectionInput`,fields:{connectionId:{type:n.ID(),isOptional:!1},label:{type:n.String_unsecure(),isOptional:!0},status:{type:n.String_unsecure(),isOptional:!0},ownershipMode:{type:n.String_unsecure(),isOptional:!0},externalAccountId:{type:n.String_unsecure(),isOptional:!0},secretProvider:{type:n.String_unsecure(),isOptional:!0},secretRef:{type:n.String_unsecure(),isOptional:!0},config:{type:n.JSONObject(),isOptional:!0}}}),s=new r({name:`DeleteIntegrationConnectionInput`,fields:{connectionId:{type:n.ID(),isOptional:!1}}}),c=new r({name:`ListIntegrationConnectionsInput`,fields:{tenantId:{type:n.ID(),isOptional:!1},category:{type:n.String_unsecure(),isOptional:!0},status:{type:n.String_unsecure(),isOptional:!0}}}),l=new r({name:`ListIntegrationConnectionsOutput`,fields:{connections:{type:i,isOptional:!1,isArray:!0}}}),u=new r({name:`TestIntegrationConnectionInput`,fields:{connectionId:{type:n.ID(),isOptional:!1}}}),d=new r({name:`TestIntegrationConnectionOutput`,fields:{success:{type:n.Boolean(),isOptional:!1},status:{type:n.String_unsecure(),isOptional:!0},latencyMs:{type:n.Float_unsecure(),isOptional:!0},error:{type:n.String_unsecure(),isOptional:!0},errorCode:{type:n.String_unsecure(),isOptional:!0}}}),f=new r({name:`DeleteIntegrationConnectionOutput`,fields:{success:{type:n.Boolean(),isOptional:!1}}}),p=e({meta:{name:`integrations.connection.create`,version:1,description:`Create a new integration connection for a tenant.`,goal:`Provision a tenant-scoped connection to an external provider.`,context:`Used by Ops or the App Studio to configure external integrations such as Stripe or Qdrant.`,owners:[`platform.integrations`],tags:[`integration`,`connections`],stability:`experimental`},io:{input:a,output:i},policy:{auth:`admin`,policies:[{name:`platform.integration.manage`,version:1}]}}),m=e({meta:{name:`integrations.connection.update`,version:1,description:`Update metadata or credentials for an integration connection.`,goal:`Allow secure rotation of credentials and metadata adjustments.`,context:`Supports rotating API keys, toggling status, or updating labels for tenant integrations.`,owners:[`platform.integrations`],tags:[`integration`,`connections`],stability:`experimental`},io:{input:o,output:i},policy:{auth:`admin`,policies:[{name:`platform.integration.manage`,version:1}]}}),h=e({meta:{name:`integrations.connection.delete`,version:1,description:`Delete an integration connection for a tenant.`,goal:`Safely remove credentials and disable connector usage.`,context:`Ensures connections are de-provisioned when no longer needed or breached.`,owners:[`platform.integrations`],tags:[`integration`,`connections`],stability:`experimental`},io:{input:s,output:f},policy:{auth:`admin`,policies:[{name:`platform.integration.manage`,version:1}]}}),g=t({meta:{name:`integrations.connection.list`,version:1,description:`List integration connections for a tenant.`,goal:`Provide visibility into configured integrations and their status.`,context:`Used by the App Studio and Ops flows to show bindings and health.`,owners:[`platform.integrations`],tags:[`integration`,`connections`],stability:`experimental`},io:{input:c,output:l},policy:{auth:`admin`,policies:[{name:`platform.integration.read`,version:1}]}}),_=e({meta:{name:`integrations.connection.test`,version:1,description:`Run a health check against a configured integration connection.`,goal:`Validate credentials and connectivity for external providers.`,context:`Triggered manually or by background monitors to confirm provider availability.`,owners:[`platform.integrations`],tags:[`integration`,`connections`],stability:`experimental`},io:{input:u,output:d},policy:{auth:`admin`,policies:[{name:`platform.integration.manage`,version:1}]}}),v={CreateIntegrationConnection:p,UpdateIntegrationConnection:m,DeleteIntegrationConnection:h,ListIntegrationConnections:g,TestIntegrationConnection:_};function y(e){return e.register(p).register(m).register(h).register(g).register(_)}export{p as CreateIntegrationConnection,h as DeleteIntegrationConnection,g as ListIntegrationConnections,_ as TestIntegrationConnection,m as UpdateIntegrationConnection,v as integrationContracts,y as registerIntegrationContracts};

package/dist/knowledge/contracts.js

@@ -1 +0,0 @@
-import{defineCommand as e,defineQuery as t}from"../spec.js";import{ScalarTypeEnum as n,SchemaModel as r}from"@lssm/lib.schema";const i=new r({name:`KnowledgeSyncSchedule`,fields:{enabled:{type:n.Boolean(),isOptional:!1},cron:{type:n.String_unsecure(),isOptional:!0},intervalMs:{type:n.Int_unsecure(),isOptional:!0}}}),a=new r({name:`KnowledgeSourceRecord`,fields:{id:{type:n.ID(),isOptional:!1},tenantId:{type:n.ID(),isOptional:!1},spaceKey:{type:n.NonEmptyString(),isOptional:!1},spaceVersion:{type:n.Int_unsecure(),isOptional:!1},label:{type:n.String_unsecure(),isOptional:!1},sourceType:{type:n.String_unsecure(),isOptional:!1},syncSchedule:{type:i,isOptional:!0},lastSyncStatus:{type:n.String_unsecure(),isOptional:!0},lastSyncAt:{type:n.DateTime(),isOptional:!0},itemsProcessed:{type:n.Int_unsecure(),isOptional:!0},createdAt:{type:n.DateTime(),isOptional:!0},updatedAt:{type:n.DateTime(),isOptional:!0}}}),o=new r({name:`CreateKnowledgeSourceInput`,fields:{tenantId:{type:n.ID(),isOptional:!1},spaceKey:{type:n.NonEmptyString(),isOptional:!1},spaceVersion:{type:n.Int_unsecure(),isOptional:!1},label:{type:n.String_unsecure(),isOptional:!1},sourceType:{type:n.NonEmptyString(),isOptional:!1},config:{type:n.JSONObject(),isOptional:!1},syncSchedule:{type:i,isOptional:!0}}}),s=new r({name:`UpdateKnowledgeSourceInput`,fields:{sourceId:{type:n.ID(),isOptional:!1},label:{type:n.String_unsecure(),isOptional:!0},config:{type:n.JSONObject(),isOptional:!0},syncSchedule:{type:i,isOptional:!0}}}),c=new r({name:`DeleteKnowledgeSourceInput`,fields:{sourceId:{type:n.ID(),isOptional:!1}}}),l=new r({name:`DeleteKnowledgeSourceOutput`,fields:{success:{type:n.Boolean(),isOptional:!1}}}),u=new r({name:`ListKnowledgeSourcesInput`,fields:{tenantId:{type:n.ID(),isOptional:!1},spaceKey:{type:n.NonEmptyString(),isOptional:!0}}}),d=new r({name:`ListKnowledgeSourcesOutput`,fields:{sources:{type:a,isOptional:!1,isArray:!0}}}),f=new r({name:`TriggerKnowledgeSyncInput`,fields:{sourceId:{type:n.ID(),isOptional:!1}}}),p=new r({name:`TriggerKnowledgeSyncOutput`,fields:{success:{type:n.Boolean(),isOptional:!1},itemsProcessed:{type:n.Int_unsecure(),isOptional:!0},error:{type:n.String_unsecure(),isOptional:!0}}}),m=e({meta:{name:`knowledge.source.create`,version:1,description:`Create a knowledge source binding for a tenant.`,goal:`Onboard a new knowledge ingestion source such as Notion or uploads.`,context:`Used by Ops and App Studio to configure knowledge ingestion per tenant and space.`,owners:[`platform.knowledge`],tags:[`knowledge`,`sources`],stability:`experimental`},io:{input:o,output:a},policy:{auth:`admin`,policies:[{name:`platform.knowledge.manage`,version:1}]}}),h=e({meta:{name:`knowledge.source.update`,version:1,description:`Update metadata or configuration for a knowledge source.`,goal:`Allow rotation of credentials, sync schedules, and labels.`,context:`Supports editing how a tenant ingests knowledge (e.g., toggling sync cadence).`,owners:[`platform.knowledge`],tags:[`knowledge`,`sources`],stability:`experimental`},io:{input:s,output:a},policy:{auth:`admin`,policies:[{name:`platform.knowledge.manage`,version:1}]}}),g=e({meta:{name:`knowledge.source.delete`,version:1,description:`Delete a knowledge source binding for a tenant.`,goal:`Remove obsolete or compromised knowledge ingestion paths.`,context:`Ensures ephemeral or external sources can be removed cleanly without leaving residual bindings.`,owners:[`platform.knowledge`],tags:[`knowledge`,`sources`],stability:`experimental`},io:{input:c,output:l},policy:{auth:`admin`,policies:[{name:`platform.knowledge.manage`,version:1}]}}),_=t({meta:{name:`knowledge.source.list`,version:1,description:`List knowledge sources configured for a tenant.`,goal:`Provide visibility into knowledge ingest configuration and schedules.`,context:`Used by App Studio and Ops flows to surface knowledge sources and their health.`,owners:[`platform.knowledge`],tags:[`knowledge`,`sources`],stability:`experimental`},io:{input:u,output:d},policy:{auth:`admin`,policies:[{name:`platform.knowledge.read`,version:1}]}}),v=e({meta:{name:`knowledge.source.triggerSync`,version:1,description:`Trigger an immediate sync for a knowledge source.`,goal:`Support manual or automated sync retries for knowledge ingestion.`,context:`Invoked by Ops tooling or monitors when knowledge content must be refreshed or reprocessed.`,owners:[`platform.knowledge`],tags:[`knowledge`,`sources`],stability:`experimental`},io:{input:f,output:p},policy:{auth:`admin`,policies:[{name:`platform.knowledge.manage`,version:1}]}}),y={CreateKnowledgeSource:m,UpdateKnowledgeSource:h,DeleteKnowledgeSource:g,ListKnowledgeSources:_,TriggerKnowledgeSourceSync:v};function b(e){return e.register(m).register(h).register(g).register(_).register(v)}export{m as CreateKnowledgeSource,g as DeleteKnowledgeSource,_ as ListKnowledgeSources,v as TriggerKnowledgeSourceSync,h as UpdateKnowledgeSource,y as knowledgeContracts,b as registerKnowledgeContracts};

package/dist/openbanking/docs/openbanking.docblock.js

@@ -1,109 +0,0 @@
-import{registerDocBlocks as e}from"../../docs/registry.js";import"../../registry.js";const t=[{id:`docs.tech.contracts.openbanking`,title:`Open Banking (Powens) Overview`,summary:`The Pocket Family Office vertical now supports read-only open banking capabilities powered by Powens. This doc summarises the contract surfaces, canonical data models, workflows, telemetry, and guardrails introduced to make Powens a first-class integration.`,kind:`reference`,visibility:`public`,route:`/docs/tech/contracts/openbanking`,tags:[`tech`,`contracts`,`openbanking`],body:`# Open Banking (Powens) Overview
-
-The Pocket Family Office vertical now supports read-only open banking capabilities powered by Powens. This doc summarises the contract surfaces, canonical data models, workflows, telemetry, and guardrails introduced to make Powens a first-class integration.
-
-## Integration Spec
-
-Powens is registered under \`openbanking.powens\` with category \`open-banking\` and currently supports the BYOK ownership mode. The spec exposes three read-only capabilities:
-
-- \`openbanking.accounts.read\`
-- \`openbanking.transactions.read\`
-- \`openbanking.balances.read\`
-
-Configuration and secrets are separated:
-
-| Config Field | Description |
-| --- | --- |
-| \`environment\` | Powens environment (\`sandbox\` \\| \`production\`) |
-| \`baseUrl?\` | Optional API base URL override |
-| \`region?\` | Optional Powens region identifier |
-| \`pollingIntervalMs?\` | Optional custom sync cadence |
-
-| Secret Field | Description |
-| --- | --- |
-| \`clientId\` | Powens OAuth client identifier |
-| \`clientSecret\` | Powens OAuth client secret |
-| \`apiKey?\` | Optional supplemental Powens API key |
-| \`webhookSecret?\` | Optional webhook signing secret |
-
-## Canonical Data Models
-
-Canonical schemas live in \`@lssm/lib.contracts/integrations/openbanking/models\`:
-
-- \`BankAccountRecord\` – account metadata (institution, IBAN/BIC, masked numbers, balances, sync timestamps)
-- \`BankTransactionRecord\` – transaction ledger (amounts, categories, counterparty, status)
-- \`AccountBalanceRecord\` – balance snapshots per account and balance type
-
-These schemas power the vertical contracts and workflows, ensuring downstream features never use raw Powens payloads directly.
-
-## Provider Implementation
-
-\`PowensOpenBankingProvider\` wraps \`PowensClient\` which handles OAuth token management, request retries, and error mapping. The provider maps Powens payloads to the canonical interfaces exported from \`integrations/providers/openbanking\`.
-
-Factory support lives in \`IntegrationProviderFactory.createOpenBankingProvider\`, which validates configuration, loads BYOK secrets, and instantiates the provider.
-
-## Contracts
-
-Command/query contracts exist under \`integrations/openbanking/contracts\`:
-
-- \`openbanking.accounts.sync\` & \`openbanking.accounts.list\`
-- \`openbanking.transactions.sync\` & \`openbanking.transactions.list\`
-- \`openbanking.balances.refresh\` & \`openbanking.balances.get\`
-
-The Pocket Family Office bundle also exposes \`pfo.openbanking.generate-overview\`, which aggregates balances and transactions into a derived knowledge document.
-
-## Workflows
-
-New workflow specs (all requiring the \`primaryOpenBanking\` slot) orchestrate the sync flows:
-
-- \`pfo.workflow.sync-openbanking-accounts\`
-- \`pfo.workflow.sync-openbanking-transactions\`
-- \`pfo.workflow.refresh-openbanking-balances\`
-- \`pfo.workflow.generate-openbanking-overview\`
-
-Each workflow runs against the Powens provider, persists canonical records, and emits telemetry.
-
-## Knowledge & LLM Exposure
-
-Raw Powens payloads are never stored in knowledge spaces. Instead, \`knowledge.financial-overview\` captures derived summaries (cashflow, category breakdowns, balance trends) produced by \`pfo.openbanking.generate-overview\`. The space is \`operational\` category with 180-day retention and automation write access.
-
-When exposing data to LLMs or analytics:
-
-- Use derived summaries only.
-- Redact PII fields using \`redactOpenBankingTelemetryPayload\`.
-- Never emit IBANs, unmasked account numbers, or counterparty detail in telemetry/logs.
-
-## Telemetry
-
-Telemetry constants live in \`integrations/openbanking/telemetry\`. Key events:
-
-- \`openbanking.accounts.synced\`
-- \`openbanking.transactions.synced\`
-- \`openbanking.balances.refreshed\`
-- \`openbanking.overview.generated\`
-
-All events require tenant/app/blueprint/config metadata, and sensitive properties are flagged to avoid accidental leakage.
-
-## Guardrails
-
-\`ensurePrimaryOpenBankingIntegration\` verifies \`primaryOpenBanking\` is bound and healthy before workflows proceed. Runtime pre-flight checks already block workflows when the connection is disconnected or in error status.
-
-## Blueprint & Tenant Defaults
-
-\`pocketFamilyOfficeBlueprint\` now includes:
-
-- \`primaryOpenBanking\` slot (required, BYOK)
-- \`openbanking.*.read\` capabilities enabled by default
-- Workflow bindings for the new sync flows
-
-Sample tenant bindings (\`tenant.sample.ts\`) reference \`conn-powens-primary\` and bind the new knowledge space.
-
----
-
-Follow this doc when extending open banking support (e.g., adding payment initiation, additional providers, or expanded analytics) to keep the integration consistent and audited.
-
-
-
-
-
-`}];e(t);export{t as tech_contracts_openbanking_DocBlocks};

package/dist/presentations.backcompat.js

@@ -1 +0,0 @@
-function e(e){return e.content.kind===`web_component`?{meta:{...e.meta},policy:e.policy,source:{type:`component`,framework:e.content.framework,componentKey:e.content.componentKey,props:e.content.props},targets:[`react`,`application/json`,`application/xml`]}:e.content.kind===`markdown`?{meta:{...e.meta},policy:e.policy,source:{type:`blocknotejs`,docJson:e.content.content??e.content.resourceUri??``},targets:[`markdown`,`application/json`,`application/xml`]}:{meta:{...e.meta},policy:e.policy,source:{type:`blocknotejs`,docJson:{kind:`data`,mimeType:e.content.mimeType,model:`schema`}},targets:[`application/json`,`application/xml`]}}export{e as toV2FromV1};

package/dist/presentations.js

@@ -1 +0,0 @@
-import e from"zod";function t(e){return`${e.meta.name}.v${e.meta.version}`}var n=class{items=new Map;constructor(e){e&&e.forEach(e=>this.register(e))}register(e){let n=t(e);if(this.items.has(n))throw Error(`Duplicate presentation ${n}`);return this.items.set(n,e),this}list(){return[...this.items.values()]}get(e,t){if(t!=null)return this.items.get(`${e}.v${t}`);let n,r=-1/0;for(let[t,i]of this.items.entries())t.startsWith(`${e}.v`)&&i.meta.version>r&&(r=i.meta.version,n=i);return n}};function r(t){let n={meta:{name:t.meta.name,version:t.meta.version,stability:t.meta.stability??`stable`,tags:t.meta.tags??[],description:t.meta.description??``},kind:t.content.kind};return t.content.kind===`web_component`?{...n,framework:t.content.framework,componentKey:t.content.componentKey,props:e.toJSONSchema(t.content.props.getZod())}:t.content.kind===`markdown`?{...n,content:t.content.content,resourceUri:t.content.resourceUri}:{...n,mimeType:t.content.mimeType,model:e.toJSONSchema(t.content.model.getZod())}}export{n as PresentationRegistry,r as jsonSchemaForPresentation};

package/dist/presentations.v2.js

@@ -1,7 +0,0 @@
-import{schemaToMarkdown as e}from"./schema-to-markdown.js";import t from"react";import n from"turndown";const r=new n;function i(e){let t=e.text??``;return!e.marks||e.marks.length===0?t:e.marks.reduce((e,t)=>{switch(t.type){case`bold`:return`**${e}**`;case`italic`:return`*${e}*`;case`underline`:return`__${e}__`;case`strike`:return`~~${e}~~`;case`code`:return`\`${e}\``;case`link`:{let n=t.attrs?.href??``;return n?`[${e}](${n})`:e}default:return e}},t)}function a(e){return e?.length?e.map(e=>s(e)).join(``):``}function o(e,t=!1){if(!e?.length)return``;let n=1;return e.map(e=>{let r=a(e.content??[]);return r?`${t?`${n++}. `:`- `}${r}`:``}).filter(Boolean).join(`
-`)}function s(e){switch(e.type){case`doc`:return a(e.content);case`paragraph`:{let t=a(e.content);return t.trim().length?t:``}case`heading`:{let t=Math.min(Math.max(e.attrs?.level??1,1),6);return`${`#`.repeat(t)} ${a(e.content)}`.trim()}case`bullet_list`:return o(e.content,!1);case`ordered_list`:return o(e.content,!0);case`list_item`:return a(e.content);case`blockquote`:return a(e.content).split(`
-`).map(e=>`> ${e}`).join(`
-`);case`code_block`:{let t=a(e.content);return t?`\`\`\`\n${t}\n\`\`\``:``}case`horizontal_rule`:return`---`;case`hard_break`:return`
-`;case`text`:return i(e);default:return e.text?i(e):``}}function c(e){if(typeof e==`string`)return e;if(e&&typeof e==`object`&&`html`in e){let t=String(e.html);return r.turndown(t)}let t=e;if(t?.type===`doc`||t?.content)return(t.content??[]).map(e=>s(e)).filter(Boolean).join(`
-
-`).trim();try{return JSON.stringify(e,null,2)}catch{return String(e)}}var l=class{renderers=new Map;validators=[];register(e){let t=this.renderers.get(e.target)??[];return t.push(e),this.renderers.set(e.target,t),this}prependRegister(e){let t=this.renderers.get(e.target)??[];return t.unshift(e),this.renderers.set(e.target,t),this}addValidator(e){return this.validators.push(e),this}async render(e,t,n){if(!t.targets.includes(e))throw Error(`Target ${e} not declared for ${t.meta.name}.v${t.meta.version}`);for(let r of this.validators)await r.validate(t,e,n);let r=this.renderers.get(e)??[];for(let e of r)try{return await e.render(t,n)}catch{}throw Error(`No renderer available for ${e}`)}};function u(){let t=new l,n=(e,t)=>{let n=JSON.parse(JSON.stringify(t)),r=e.policy?.pii??[],i=(e,t)=>{let n=t.replace(/^\//,``).replace(/\[(\d+)\]/g,`.$1`).split(`.`).filter(Boolean),r=e;for(let e=0;e<n.length-1;e++){let t=n[e];if(r&&typeof r==`object`&&t in r)r=r[t];else return}let i=n[n.length-1];r&&typeof r==`object`&&i&&i in r&&(r[i]=`[REDACTED]`)};for(let e of r)i(n,e);return n};return t.register({target:`markdown`,async render(t,r){let i=r?.data;if(!i&&r?.fetchData&&(i=await r.fetchData()),t.source.type===`component`&&t.source.props&&i!==void 0){let n=Array.isArray(i),r=!n&&typeof i==`object`&&!!i&&!Object.values(i).some(e=>Array.isArray(e)||typeof e==`object`&&!!e);if(n||r)return{mimeType:`text/markdown`,body:e(t.source.props,i,{title:t.meta.description??t.meta.name,description:`${t.meta.name} v${t.meta.version}`})};throw Error(`Complex data structure for ${t.meta.name} - expecting custom renderer`)}if(t.source.type===`blocknotejs`){let e=n(t,{text:c(t.source.docJson)});return{mimeType:`text/markdown`,body:String(e.text)}}if(t.source.type===`component`&&i!==void 0)throw Error(`No schema (source.props) available for ${t.meta.name} - expecting custom renderer`);if(t.source.type===`component`)return{mimeType:`text/markdown`,body:`${`# ${t.meta.name} v${t.meta.version}`}${t.meta.description?`\n\n${t.meta.description}`:``}${t.meta.tags&&t.meta.tags.length?`\n\nTags: ${t.meta.tags.join(`, `)}`:``}${t.meta.owners&&t.meta.owners.length?`\n\nOwners: ${t.meta.owners.join(`, `)}`:``}${`\n\nComponent: \`${t.source.componentKey}\``}${t.policy?.pii?.length?`\n\nRedacted paths: ${t.policy.pii.map(e=>`\`${e}\``).join(`, `)}`:``}`};throw Error(`unsupported`)}}),t.register({target:`application/json`,async render(e){let t=n(e,{meta:e.meta,source:e.source});return{mimeType:`application/json`,body:JSON.stringify(t,null,2)}}}),t.register({target:`application/xml`,async render(e){let t=n(e,{meta:e.meta,source:e.source});return{mimeType:`application/xml`,body:`<presentation name="${e.meta.name}" version="${e.meta.version}"><json>${encodeURIComponent(JSON.stringify(t))}</json></presentation>`}}}),t}function d(e){return e.register({target:`react`,async render(e){if(e.source.type===`component`){let t=e.source.props&&e.source.props.getZod().safeParse({}).success?{}:void 0;return{kind:`react_component`,componentKey:e.source.componentKey,props:t}}return{kind:`blocknotejs`,docJson:e.source.docJson,blockConfig:e.source.blockConfig}}}),e}function f(e){return e.addValidator({validate(e){if(!e.meta.description||e.meta.description.length<3)throw Error(`Presentation ${e.meta.name}.v${e.meta.version} missing meta.description`)}}),e}function p(e,r){let i=new n({headingStyle:`atx`,codeBlockStyle:`fenced`,bulletListMarker:`-`});return i.addRule(`link`,{filter:`a`,replacement:(e,t)=>{let n=t.href;return n&&e?`[${e}](${n})`:e||``}}),e.prependRegister({target:`markdown`,async render(e,n){if(e.source.type!==`component`)throw Error(`React-to-markdown renderer only handles component presentations`);let{renderToStaticMarkup:a}=await import(`react-dom/server`),o=r[e.source.componentKey];if(!o)throw Error(`Component ${e.source.componentKey} not found in componentMap`);let s;try{s=a(t.createElement(o,e.source.props?{}:void 0))}catch(t){throw Error(`Failed to render component ${e.source.componentKey}: ${t instanceof Error?t.message:`Unknown error`}`)}let c;try{c=i.turndown(s)}catch(e){throw Error(`Failed to convert HTML to markdown: ${e instanceof Error?e.message:`Unknown error`}`)}return e.policy?.pii&&e.policy.pii.length>0?{mimeType:`text/markdown`,body:c.replace(/\[REDACTED\]/g,`[REDACTED]`)}:{mimeType:`text/markdown`,body:c}}}),e}export{l as TransformEngine,u as createDefaultTransformEngine,f as registerBasicValidation,d as registerDefaultReactRenderer,p as registerReactToMarkdownRenderer};

package/dist/spec.js

@@ -1 +0,0 @@
-const e=e=>`ref`in e,t=e=>({...e,meta:{...e.meta,kind:`command`},policy:{...e.policy,idempotent:e.policy?.policy?.idempotent??!1}}),n=e=>({...e,meta:{...e.meta,kind:`query`},policy:{...e.policy,idempotent:!0}});export{t as defineCommand,n as defineQuery,e as isEmitDeclRef};