@lssm/lib.work-spec 3.0.1

package/dist/operations.d.ts

@@ -0,0 +1,165 @@
+import { z } from 'zod';
+export declare const WorkActionClassSchema: z.ZodEnum<{
+    approval_required: "approval_required";
+    read_only: "read_only";
+    reserved_human_only: "reserved_human_only";
+    suggest_only: "suggest_only";
+    within_policy: "within_policy";
+}>;
+export type WorkActionClass = z.infer<typeof WorkActionClassSchema>;
+export declare const WorkOperationKeySchema: z.ZodEnum<{
+    "work.attachment.link@2.0.0": "work.attachment.link@2.0.0";
+    "work.comment.create@2.0.0": "work.comment.create@2.0.0";
+    "work.custom_field.set@2.0.0": "work.custom_field.set@2.0.0";
+    "work.inbox.capture@2.0.0": "work.inbox.capture@2.0.0";
+    "work.object.archive@2.0.0": "work.object.archive@2.0.0";
+    "work.object.assign@2.0.0": "work.object.assign@2.0.0";
+    "work.object.bulk_mutate@2.0.0": "work.object.bulk_mutate@2.0.0";
+    "work.object.create@2.0.0": "work.object.create@2.0.0";
+    "work.object.move@2.0.0": "work.object.move@2.0.0";
+    "work.object.restore@2.0.0": "work.object.restore@2.0.0";
+    "work.object.transition@2.0.0": "work.object.transition@2.0.0";
+    "work.object.update@2.0.0": "work.object.update@2.0.0";
+    "work.recurrence.set@2.0.0": "work.recurrence.set@2.0.0";
+    "work.relationship.set@2.0.0": "work.relationship.set@2.0.0";
+    "work.search.query@2.0.0": "work.search.query@2.0.0";
+    "work.sync.connect@2.0.0": "work.sync.connect@2.0.0";
+    "work.sync.import@2.0.0": "work.sync.import@2.0.0";
+    "work.sync.push@2.0.0": "work.sync.push@2.0.0";
+    "work.sync.resolve_conflict@2.0.0": "work.sync.resolve_conflict@2.0.0";
+    "work.time.start@2.0.0": "work.time.start@2.0.0";
+    "work.time.stop@2.0.0": "work.time.stop@2.0.0";
+}>;
+export type WorkOperationKey = z.infer<typeof WorkOperationKeySchema>;
+export declare const WorkMutationEnvelopeSchema: z.ZodObject<{
+    operationId: z.ZodString;
+    operationKey: z.ZodEnum<{
+        "work.attachment.link@2.0.0": "work.attachment.link@2.0.0";
+        "work.comment.create@2.0.0": "work.comment.create@2.0.0";
+        "work.custom_field.set@2.0.0": "work.custom_field.set@2.0.0";
+        "work.inbox.capture@2.0.0": "work.inbox.capture@2.0.0";
+        "work.object.archive@2.0.0": "work.object.archive@2.0.0";
+        "work.object.assign@2.0.0": "work.object.assign@2.0.0";
+        "work.object.bulk_mutate@2.0.0": "work.object.bulk_mutate@2.0.0";
+        "work.object.create@2.0.0": "work.object.create@2.0.0";
+        "work.object.move@2.0.0": "work.object.move@2.0.0";
+        "work.object.restore@2.0.0": "work.object.restore@2.0.0";
+        "work.object.transition@2.0.0": "work.object.transition@2.0.0";
+        "work.object.update@2.0.0": "work.object.update@2.0.0";
+        "work.recurrence.set@2.0.0": "work.recurrence.set@2.0.0";
+        "work.relationship.set@2.0.0": "work.relationship.set@2.0.0";
+        "work.search.query@2.0.0": "work.search.query@2.0.0";
+        "work.sync.connect@2.0.0": "work.sync.connect@2.0.0";
+        "work.sync.import@2.0.0": "work.sync.import@2.0.0";
+        "work.sync.push@2.0.0": "work.sync.push@2.0.0";
+        "work.sync.resolve_conflict@2.0.0": "work.sync.resolve_conflict@2.0.0";
+        "work.time.start@2.0.0": "work.time.start@2.0.0";
+        "work.time.stop@2.0.0": "work.time.stop@2.0.0";
+    }>;
+    scope: z.ZodObject<{
+        tenantId: z.ZodString;
+        organizationId: z.ZodString;
+        workspaceId: z.ZodString;
+    }, z.core.$strip>;
+    actor: z.ZodObject<{
+        principalId: z.ZodString;
+        principalKind: z.ZodEnum<{
+            contractor: "contractor";
+            guest: "guest";
+            member: "member";
+            service_principal: "service_principal";
+        }>;
+    }, z.core.$strip>;
+    target: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodEnum<{
+            activity: "activity";
+            agent_reference: "agent_reference";
+            approval_reference: "approval_reference";
+            attachment: "attachment";
+            automation_reference: "automation_reference";
+            bug: "bug";
+            canvas_reference: "canvas_reference";
+            capture_reference: "capture_reference";
+            collection: "collection";
+            comment: "comment";
+            contractor: "contractor";
+            cross_organization_acl_grant: "cross_organization_acl_grant";
+            custom_field_definition: "custom_field_definition";
+            custom_field_value: "custom_field_value";
+            cycle: "cycle";
+            dependency: "dependency";
+            document_reference: "document_reference";
+            epic: "epic";
+            estimate: "estimate";
+            evidence_reference: "evidence_reference";
+            external_binding: "external_binding";
+            focus_policy: "focus_policy";
+            folder_projection: "folder_projection";
+            form: "form";
+            guest: "guest";
+            habit: "habit";
+            inbox_item: "inbox_item";
+            initiative: "initiative";
+            issue: "issue";
+            key_result: "key_result";
+            list: "list";
+            member: "member";
+            mention: "mention";
+            milestone: "milestone";
+            objective: "objective";
+            occurrence: "occurrence";
+            organization: "organization";
+            planning_intent: "planning_intent";
+            portfolio: "portfolio";
+            program: "program";
+            project: "project";
+            proofing_request: "proofing_request";
+            reaction: "reaction";
+            recurrence_template: "recurrence_template";
+            relationship: "relationship";
+            roadmap: "roadmap";
+            saved_view: "saved_view";
+            schedule_binding_reference: "schedule_binding_reference";
+            service_principal: "service_principal";
+            status_workflow: "status_workflow";
+            story: "story";
+            subtask: "subtask";
+            sync_conflict: "sync_conflict";
+            sync_cursor: "sync_cursor";
+            task: "task";
+            team: "team";
+            template: "template";
+            time_entry: "time_entry";
+            tombstone: "tombstone";
+            workspace: "workspace";
+        }>;
+    }, z.core.$strip>>;
+    expectedRevision: z.ZodOptional<z.ZodNumber>;
+    idempotencyKey: z.ZodString;
+    correlationId: z.ZodString;
+    causationId: z.ZodOptional<z.ZodString>;
+    evidenceRef: z.ZodString;
+    actionClass: z.ZodEnum<{
+        approval_required: "approval_required";
+        read_only: "read_only";
+        reserved_human_only: "reserved_human_only";
+        suggest_only: "suggest_only";
+        within_policy: "within_policy";
+    }>;
+    approvalRef: z.ZodOptional<z.ZodString>;
+    payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>;
+export type WorkMutationEnvelope = z.infer<typeof WorkMutationEnvelopeSchema>;
+export declare function mutationRequiresApproval(mutation: WorkMutationEnvelope): boolean;
+/** Managed hosts keep verified authority and canonical Work effects in one transaction. */
+export declare const WORK_MANAGED_COMMIT_AUTHORITY_CONTRACT: {
+    readonly key: 'work.managed-commit-authority';
+    readonly version: '1.2.0';
+    readonly invariants: readonly ['Aggregate commits serialize by tenant and object identity and cannot change an existing aggregate scope. Projection workers cannot overwrite a newer revision with an older one.', 'Object reads use a projection only at the committed event head; lagging projections replay current events, including archives and restores, and expose the current aggregate revision.', 'Projection lookups validate object identity and the complete tenant/organization/workspace scope, on both materialized and event-replay paths.', 'Mutation services reject foreign or mismatched current objects and replay receipts before returning data or committing effects.', 'Organization, session, workspace and applicable team grants are re-proven and locked on the same transaction as event and outbox persistence.', 'Canonical scope and principal must match verified authority; caller-selected read_only or suggest_only labels cannot authorize mutation.', 'Authorized idempotent retries resolve the persisted receipt before object-existence or current-revision validation.', 'Approval-required and reserved mutations remain denied until an actual approval verifier is composed.'];
+};
+export declare const WORK_CANONICAL_SCOPE_BINDING_CONTRACT: {
+    readonly key: 'work.canonical-scope-binding';
+    readonly version: '1.0.0';
+    readonly invariants: readonly ['New actor bindings reuse canonical tenant, organization and workspace IDs for the same verified legacy scope.', 'A principal retains its canonical identity across workspaces within a tenant.', 'Existing bindings and immutable Work events are never silently rewritten. Ambiguous legacy parents block new allocation until reviewed reconciliation.', 'Allocation is serialized per legacy tenant and enforced by the database during mixed-version rollout.'];
+};

package/dist/operations.js

@@ -0,0 +1,2 @@
+// @bun
+import{z as e}from"zod";import{z as o}from"zod";import{z as n}from"zod";var c=n.enum(["organization","workspace","team","member","guest","contractor","service_principal","cross_organization_acl_grant","portfolio","initiative","program","objective","key_result","roadmap","project","cycle","milestone","task","issue","bug","story","epic","subtask","recurrence_template","occurrence","dependency","relationship","estimate","time_entry","collection","list","folder_projection","status_workflow","custom_field_definition","custom_field_value","saved_view","form","template","comment","mention","reaction","activity","attachment","document_reference","canvas_reference","proofing_request","approval_reference","inbox_item","habit","focus_policy","planning_intent","capture_reference","automation_reference","agent_reference","schedule_binding_reference","external_binding","sync_cursor","sync_conflict","tombstone","evidence_reference"]),k=n.enum(["backlog","unstarted","started","completed","cancelled"]),f=n.enum(["parent","child","blocks","blocked_by","relates_to","duplicates","duplicated_by","supersedes","multi_homed_in"]);var d=/^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i,t=o.string().regex(d,"UUIDv7 required"),s=o.string().datetime({offset:!0}),p=o.object({id:t,kind:c}),r=o.object({principalId:t,principalKind:o.enum(["member","guest","contractor","service_principal"])}),a=o.object({tenantId:t,organizationId:t,workspaceId:t}),b=o.object({scope:a,createdAt:s,createdBy:r,updatedAt:s,updatedBy:r,revision:o.number().int().nonnegative()});var l=e.enum(["read_only","suggest_only","within_policy","approval_required","reserved_human_only"]),m=e.enum(["work.object.create@2.0.0","work.object.update@2.0.0","work.object.archive@2.0.0","work.object.restore@2.0.0","work.object.bulk_mutate@2.0.0","work.object.move@2.0.0","work.object.assign@2.0.0","work.object.transition@2.0.0","work.relationship.set@2.0.0","work.recurrence.set@2.0.0","work.time.start@2.0.0","work.time.stop@2.0.0","work.comment.create@2.0.0","work.attachment.link@2.0.0","work.custom_field.set@2.0.0","work.inbox.capture@2.0.0","work.search.query@2.0.0","work.sync.connect@2.0.0","work.sync.import@2.0.0","work.sync.push@2.0.0","work.sync.resolve_conflict@2.0.0"]),W=e.object({operationId:t,operationKey:m,scope:a,actor:r,target:p.optional(),expectedRevision:e.number().int().nonnegative().optional(),idempotencyKey:e.string().min(1).max(255),correlationId:t,causationId:t.optional(),evidenceRef:e.string().min(1),actionClass:l,approvalRef:e.string().min(1).optional(),payload:e.record(e.string(),e.unknown())});function x(i){return i.actionClass==="approval_required"||i.actionClass==="reserved_human_only"}var S={key:"work.managed-commit-authority",version:"1.2.0",invariants:["Aggregate commits serialize by tenant and object identity and cannot change an existing aggregate scope. Projection workers cannot overwrite a newer revision with an older one.","Object reads use a projection only at the committed event head; lagging projections replay current events, including archives and restores, and expose the current aggregate revision.","Projection lookups validate object identity and the complete tenant/organization/workspace scope, on both materialized and event-replay paths.","Mutation services reject foreign or mismatched current objects and replay receipts before returning data or committing effects.","Organization, session, workspace and applicable team grants are re-proven and locked on the same transaction as event and outbox persistence.","Canonical scope and principal must match verified authority; caller-selected read_only or suggest_only labels cannot authorize mutation.","Authorized idempotent retries resolve the persisted receipt before object-existence or current-revision validation.","Approval-required and reserved mutations remain denied until an actual approval verifier is composed."]},j={key:"work.canonical-scope-binding",version:"1.0.0",invariants:["New actor bindings reuse canonical tenant, organization and workspace IDs for the same verified legacy scope.","A principal retains its canonical identity across workspaces within a tenant.","Existing bindings and immutable Work events are never silently rewritten. Ambiguous legacy parents block new allocation until reviewed reconciliation.","Allocation is serialized per legacy tenant and enforced by the database during mixed-version rollout."]};export{j as WORK_CANONICAL_SCOPE_BINDING_CONTRACT,S as WORK_MANAGED_COMMIT_AUTHORITY_CONTRACT,l as WorkActionClassSchema,W as WorkMutationEnvelopeSchema,m as WorkOperationKeySchema,x as mutationRequiresApproval};