@lucern/sdk 0.2.0-alpha.6 → 0.2.0-alpha.8

package/dist/contracts/workflowRuntime.js

@@ -0,0 +1,245 @@
+// src/contracts/workflow-runtime.contract.ts
+var WORKFLOW_RUNTIME_SCHEMA_VERSION = "1.0.0";
+var WORKFLOW_MUTATION_TIERS = [
+  "read_only",
+  "low_risk_write",
+  "high_risk_write"
+];
+var WORKFLOW_APPROVAL_MODES = [
+  "none",
+  "audit_only",
+  "human_required",
+  "auto_approve"
+];
+var DEFAULT_TIER_APPROVAL_MODE = {
+  read_only: "none",
+  low_risk_write: "audit_only",
+  high_risk_write: "human_required"
+};
+var WORKFLOW_ACTION_KINDS = [
+  "context_pack",
+  "integrity_check",
+  "lucern_tool",
+  "report_compile",
+  "brief_publish",
+  "notification",
+  "custom"
+];
+var WORKFLOW_HOOK_EVENTS = [
+  "schedule.tick",
+  "worktree.activated",
+  "worktree.completed",
+  "question.created",
+  "question.answered",
+  "evidence.appended",
+  "inbox.item_created"
+];
+var WORKFLOW_OUTPUT_KINDS = [
+  "engineering_brief",
+  "research_memo",
+  "strategy_artifact",
+  "inbox_summary",
+  "pipeline_brief",
+  "structured_payload"
+];
+var WORKFLOW_RUN_STATUSES = [
+  "queued",
+  "running",
+  "awaiting_approval",
+  "completed",
+  "failed",
+  "cancelled"
+];
+var WORKFLOW_TRIGGER_KINDS = [
+  "manual",
+  "schedule",
+  "hook"
+];
+var WORKFLOW_PROOF_ARTIFACT_KINDS = [
+  "report",
+  "brief",
+  "artifact",
+  "dashboard",
+  "test_evidence"
+];
+var WORKFLOW_STAFFING_HINTS = [
+  "solo",
+  "backend+tests",
+  "fullstack",
+  "mcp+tests"
+];
+var WORKFLOW_AUTO_FIX_MODES = [
+  "disabled",
+  "dry_run",
+  "safe",
+  "aggressive"
+];
+var WORKFLOW_INTEGRITY_CHECKS = [
+  "null_dependency_refs",
+  "superseded_blockers",
+  "band_order_inconsistency",
+  "sparse_shaping",
+  "failed_completed_gate"
+];
+var DEFAULT_WORKFLOW_AUTO_FIX_POLICY = {
+  mode: "disabled",
+  permittedMutationTiers: ["read_only"],
+  requireAuditTrail: true
+};
+var NIGHTLY_RECONCILIATION_WORKFLOW_ID = "workflow.pipeline_reconciliation.v1";
+var MORNING_BRIEF_WORKFLOW_ID = "workflow.morning_brief.v1";
+var CANONICAL_WORKFLOW_DEFINITIONS = [
+  {
+    workflowId: NIGHTLY_RECONCILIATION_WORKFLOW_ID,
+    version: WORKFLOW_RUNTIME_SCHEMA_VERSION,
+    title: "Nightly Pipeline Reconciliation",
+    description: "Runs deterministic integrity checks, compiles pipeline state, and emits an operator-facing reconciliation brief.",
+    trigger: {
+      kind: "schedule",
+      cadence: "daily",
+      timezone: "America/New_York"
+    },
+    staffingHint: "backend+tests",
+    proofArtifacts: [
+      {
+        kind: "report",
+        label: "Pipeline reconciliation report",
+        required: true
+      },
+      {
+        kind: "test_evidence",
+        label: "Integrity check receipt",
+        required: true
+      }
+    ],
+    autoFixPolicy: {
+      mode: "safe",
+      maxActionsPerRun: 5,
+      permittedMutationTiers: ["read_only", "low_risk_write"],
+      requireAuditTrail: true,
+      escalationGate: "gate:workflow-runtime-contract-live"
+    },
+    actions: [
+      {
+        actionId: "compile_context_pack",
+        kind: "context_pack",
+        title: "Compile pipeline context",
+        description: "Build the ranked context needed for deterministic checks.",
+        mutationTier: "read_only",
+        produces: ["structured_payload"],
+        idempotent: true,
+        approval: { mode: "none" }
+      },
+      {
+        actionId: "run_integrity_checks",
+        kind: "integrity_check",
+        title: "Run integrity checks",
+        description: "Evaluate dependency references, blockers, execution bands, shaping coverage, and completed gates.",
+        mutationTier: "read_only",
+        produces: ["structured_payload"],
+        idempotent: true,
+        approval: { mode: "none" }
+      },
+      {
+        actionId: "record_followup_questions",
+        kind: "lucern_tool",
+        title: "Record follow-up questions",
+        description: "Create or reopen operator-facing questions for integrity failures that require human review.",
+        mutationTier: "low_risk_write",
+        toolName: "create_question",
+        produces: ["pipeline_brief"],
+        approval: { mode: "audit_only", rationaleRequired: true }
+      },
+      {
+        actionId: "publish_reconciliation_brief",
+        kind: "brief_publish",
+        title: "Publish reconciliation brief",
+        description: "Emit an inbox-routed brief summarizing the nightly pipeline state and grouped blockers.",
+        mutationTier: "low_risk_write",
+        produces: ["pipeline_brief", "inbox_summary"],
+        approval: { mode: "audit_only" }
+      }
+    ],
+    hooks: [
+      {
+        hookId: "nightly-schedule",
+        event: "schedule.tick",
+        description: "Run once per nightly cadence.",
+        actionIds: [
+          "compile_context_pack",
+          "run_integrity_checks",
+          "record_followup_questions",
+          "publish_reconciliation_brief"
+        ]
+      }
+    ],
+    outputs: ["pipeline_brief", "inbox_summary", "structured_payload"],
+    integrityChecks: WORKFLOW_INTEGRITY_CHECKS
+  },
+  {
+    workflowId: MORNING_BRIEF_WORKFLOW_ID,
+    version: WORKFLOW_RUNTIME_SCHEMA_VERSION,
+    title: "Morning Brief",
+    description: "Compiles a developer-facing morning brief from graph state, overnight workflow outputs, and inbox routing preferences.",
+    trigger: {
+      kind: "schedule",
+      cadence: "daily",
+      timezone: "America/New_York"
+    },
+    staffingHint: "solo",
+    proofArtifacts: [
+      {
+        kind: "brief",
+        label: "Morning brief",
+        required: true
+      }
+    ],
+    autoFixPolicy: {
+      mode: "dry_run",
+      maxActionsPerRun: 1,
+      permittedMutationTiers: ["read_only", "low_risk_write"],
+      requireAuditTrail: true
+    },
+    actions: [
+      {
+        actionId: "compile_brief_inputs",
+        kind: "context_pack",
+        title: "Compile brief inputs",
+        description: "Read graph state, worktree state, and overnight workflow receipts.",
+        mutationTier: "read_only",
+        produces: ["structured_payload"],
+        idempotent: true,
+        approval: { mode: "none" }
+      },
+      {
+        actionId: "publish_morning_brief",
+        kind: "brief_publish",
+        title: "Publish morning brief",
+        description: "Publish a typed inbox summary with prioritized worktree and question context.",
+        mutationTier: "low_risk_write",
+        produces: ["engineering_brief", "inbox_summary"],
+        approval: { mode: "audit_only" }
+      }
+    ],
+    hooks: [
+      {
+        hookId: "morning-schedule",
+        event: "schedule.tick",
+        description: "Run once per morning cadence.",
+        actionIds: ["compile_brief_inputs", "publish_morning_brief"]
+      },
+      {
+        hookId: "worktree-complete-refresh",
+        event: "worktree.completed",
+        description: "Refresh the queued morning brief inputs when worktree outcomes land overnight.",
+        actionIds: ["compile_brief_inputs"]
+      }
+    ],
+    outputs: ["engineering_brief", "inbox_summary", "structured_payload"],
+    integrityChecks: ["sparse_shaping"]
+  }
+];
+
+export { CANONICAL_WORKFLOW_DEFINITIONS, DEFAULT_TIER_APPROVAL_MODE, DEFAULT_WORKFLOW_AUTO_FIX_POLICY, MORNING_BRIEF_WORKFLOW_ID, NIGHTLY_RECONCILIATION_WORKFLOW_ID, WORKFLOW_ACTION_KINDS, WORKFLOW_APPROVAL_MODES, WORKFLOW_AUTO_FIX_MODES, WORKFLOW_HOOK_EVENTS, WORKFLOW_INTEGRITY_CHECKS, WORKFLOW_MUTATION_TIERS, WORKFLOW_OUTPUT_KINDS, WORKFLOW_PROOF_ARTIFACT_KINDS, WORKFLOW_RUNTIME_SCHEMA_VERSION, WORKFLOW_RUN_STATUSES, WORKFLOW_STAFFING_HINTS, WORKFLOW_TRIGGER_KINDS };
+//# sourceMappingURL=workflowRuntime.js.map
+//# sourceMappingURL=workflowRuntime.js.map

package/dist/contracts/workflowRuntime.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/contracts/workflow-runtime.contract.ts"],"names":[],"mappings":";AAkBO,IAAM,+BAAA,GAAkC;AAExC,IAAM,uBAAA,GAA0B;AAAA,EACrC,WAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF;AAGO,IAAM,uBAAA,GAA0B;AAAA,EACrC,MAAA;AAAA,EACA,YAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF;AAGO,IAAM,0BAAA,GAET;AAAA,EACF,SAAA,EAAW,MAAA;AAAA,EACX,cAAA,EAAgB,YAAA;AAAA,EAChB,eAAA,EAAiB;AACnB;AAEO,IAAM,qBAAA,GAAwB;AAAA,EACnC,cAAA;AAAA,EACA,iBAAA;AAAA,EACA,aAAA;AAAA,EACA,gBAAA;AAAA,EACA,eAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF;AAGO,IAAM,oBAAA,GAAuB;AAAA,EAClC,eAAA;AAAA,EACA,oBAAA;AAAA,EACA,oBAAA;AAAA,EACA,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA,mBAAA;AAAA,EACA;AACF;AAGO,IAAM,qBAAA,GAAwB;AAAA,EACnC,mBAAA;AAAA,EACA,eAAA;AAAA,EACA,mBAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF;AAGO,IAAM,qBAAA,GAAwB;AAAA,EACnC,QAAA;AAAA,EACA,SAAA;AAAA,EACA,mBAAA;AAAA,EACA,WAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF;AAGO,IAAM,sBAAA,GAAyB;AAAA,EACpC,QAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF;AAGO,IAAM,6BAAA,GAAgC;AAAA,EAC3C,QAAA;AAAA,EACA,OAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF;AAIO,IAAM,uBAAA,GAA0B;AAAA,EACrC,MAAA;AAAA,EACA,eAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF;AAGO,IAAM,uBAAA,GAA0B;AAAA,EACrC,UAAA;AAAA,EACA,SAAA;AAAA,EACA,MAAA;AAAA,EACA;AACF;AAGO,IAAM,yBAAA,GAA4B;AAAA,EACvC,sBAAA;AAAA,EACA,qBAAA;AAAA,EACA,0BAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF;AAmBO,IAAM,gCAAA,GAA0D;AAAA,EACrE,IAAA,EAAM,UAAA;AAAA,EACN,sBAAA,EAAwB,CAAC,WAAW,CAAA;AAAA,EACpC,iBAAA,EAAmB;AACrB;AAgIO,IAAM,kCAAA,GACX;AAEK,IAAM,yBAAA,GACX;AAEK,IAAM,8BAAA,GAAkE;AAAA,EAC7E;AAAA,IACE,UAAA,EAAY,kCAAA;AAAA,IACZ,OAAA,EAAS,+BAAA;AAAA,IACT,KAAA,EAAO,iCAAA;AAAA,IACP,WAAA,EACE,kHAAA;AAAA,IACF,OAAA,EAAS;AAAA,MACP,IAAA,EAAM,UAAA;AAAA,MACN,OAAA,EAAS,OAAA;AAAA,MACT,QAAA,EAAU;AAAA,KACZ;AAAA,IACA,YAAA,EAAc,eAAA;AAAA,IACd,cAAA,EAAgB;AAAA,MACd;AAAA,QACE,IAAA,EAAM,QAAA;AAAA,QACN,KAAA,EAAO,gCAAA;AAAA,QACP,QAAA,EAAU;AAAA,OACZ;AAAA,MACA;AAAA,QACE,IAAA,EAAM,eAAA;AAAA,QACN,KAAA,EAAO,yBAAA;AAAA,QACP,QAAA,EAAU;AAAA;AACZ,KACF;AAAA,IACA,aAAA,EAAe;AAAA,MACb,IAAA,EAAM,MAAA;AAAA,MACN,gBAAA,EAAkB,CAAA;AAAA,MAClB,sBAAA,EAAwB,CAAC,WAAA,EAAa,gBAAgB,CAAA;AAAA,MACtD,iBAAA,EAAmB,IAAA;AAAA,MACnB,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,OAAA,EAAS;AAAA,MACP;AAAA,QACE,QAAA,EAAU,sBAAA;AAAA,QACV,IAAA,EAAM,cAAA;AAAA,QACN,KAAA,EAAO,0BAAA;AAAA,QACP,WAAA,EAAa,2DAAA;AAAA,QACb,YAAA,EAAc,WAAA;AAAA,QACd,QAAA,EAAU,CAAC,oBAAoB,CAAA;AAAA,QAC/B,UAAA,EAAY,IAAA;AAAA,QACZ,QAAA,EAAU,EAAE,IAAA,EAAM,MAAA;AAAO,OAC3B;AAAA,MACA;AAAA,QACE,QAAA,EAAU,sBAAA;AAAA,QACV,IAAA,EAAM,iBAAA;AAAA,QACN,KAAA,EAAO,sBAAA;AAAA,QACP,WAAA,EACE,mGAAA;AAAA,QACF,YAAA,EAAc,WAAA;AAAA,QACd,QAAA,EAAU,CAAC,oBAAoB,CAAA;AAAA,QAC/B,UAAA,EAAY,IAAA;AAAA,QACZ,QAAA,EAAU,EAAE,IAAA,EAAM,MAAA;AAAO,OAC3B;AAAA,MACA;AAAA,QACE,QAAA,EAAU,2BAAA;AAAA,QACV,IAAA,EAAM,aAAA;AAAA,QACN,KAAA,EAAO,4BAAA;AAAA,QACP,WAAA,EACE,8FAAA;AAAA,QACF,YAAA,EAAc,gBAAA;AAAA,QACd,QAAA,EAAU,iBAAA;AAAA,QACV,QAAA,EAAU,CAAC,gBAAgB,CAAA;AAAA,QAC3B,QAAA,EAAU,EAAE,IAAA,EAAM,YAAA,EAAc,mBAAmB,IAAA;AAAK,OAC1D;AAAA,MACA;AAAA,QACE,QAAA,EAAU,8BAAA;AAAA,QACV,IAAA,EAAM,eAAA;AAAA,QACN,KAAA,EAAO,8BAAA;AAAA,QACP,WAAA,EACE,yFAAA;AAAA,QACF,YAAA,EAAc,gBAAA;AAAA,QACd,QAAA,EAAU,CAAC,gBAAA,EAAkB,eAAe,CAAA;AAAA,QAC5C,QAAA,EAAU,EAAE,IAAA,EAAM,YAAA;AAAa;AACjC,KACF;AAAA,IACA,KAAA,EAAO;AAAA,MACL;AAAA,QACE,MAAA,EAAQ,kBAAA;AAAA,QACR,KAAA,EAAO,eAAA;AAAA,QACP,WAAA,EAAa,+BAAA;AAAA,QACb,SAAA,EAAW;AAAA,UACT,sBAAA;AAAA,UACA,sBAAA;AAAA,UACA,2BAAA;AAAA,UACA;AAAA;AACF;AACF,KACF;AAAA,IACA,OAAA,EAAS,CAAC,gBAAA,EAAkB,eAAA,EAAiB,oBAAoB,CAAA;AAAA,IACjE,eAAA,EAAiB;AAAA,GACnB;AAAA,EACA;AAAA,IACE,UAAA,EAAY,yBAAA;AAAA,IACZ,OAAA,EAAS,+BAAA;AAAA,IACT,KAAA,EAAO,eAAA;AAAA,IACP,WAAA,EACE,wHAAA;AAAA,IACF,OAAA,EAAS;AAAA,MACP,IAAA,EAAM,UAAA;AAAA,MACN,OAAA,EAAS,OAAA;AAAA,MACT,QAAA,EAAU;AAAA,KACZ;AAAA,IACA,YAAA,EAAc,MAAA;AAAA,IACd,cAAA,EAAgB;AAAA,MACd;AAAA,QACE,IAAA,EAAM,OAAA;AAAA,QACN,KAAA,EAAO,eAAA;AAAA,QACP,QAAA,EAAU;AAAA;AACZ,KACF;AAAA,IACA,aAAA,EAAe;AAAA,MACb,IAAA,EAAM,SAAA;AAAA,MACN,gBAAA,EAAkB,CAAA;AAAA,MAClB,sBAAA,EAAwB,CAAC,WAAA,EAAa,gBAAgB,CAAA;AAAA,MACtD,iBAAA,EAAmB;AAAA,KACrB;AAAA,IACA,OAAA,EAAS;AAAA,MACP;AAAA,QACE,QAAA,EAAU,sBAAA;AAAA,QACV,IAAA,EAAM,cAAA;AAAA,QACN,KAAA,EAAO,sBAAA;AAAA,QACP,WAAA,EACE,oEAAA;AAAA,QACF,YAAA,EAAc,WAAA;AAAA,QACd,QAAA,EAAU,CAAC,oBAAoB,CAAA;AAAA,QAC/B,UAAA,EAAY,IAAA;AAAA,QACZ,QAAA,EAAU,EAAE,IAAA,EAAM,MAAA;AAAO,OAC3B;AAAA,MACA;AAAA,QACE,QAAA,EAAU,uBAAA;AAAA,QACV,IAAA,EAAM,eAAA;AAAA,QACN,KAAA,EAAO,uBAAA;AAAA,QACP,WAAA,EACE,+EAAA;AAAA,QACF,YAAA,EAAc,gBAAA;AAAA,QACd,QAAA,EAAU,CAAC,mBAAA,EAAqB,eAAe,CAAA;AAAA,QAC/C,QAAA,EAAU,EAAE,IAAA,EAAM,YAAA;AAAa;AACjC,KACF;AAAA,IACA,KAAA,EAAO;AAAA,MACL;AAAA,QACE,MAAA,EAAQ,kBAAA;AAAA,QACR,KAAA,EAAO,eAAA;AAAA,QACP,WAAA,EAAa,+BAAA;AAAA,QACb,SAAA,EAAW,CAAC,sBAAA,EAAwB,uBAAuB;AAAA,OAC7D;AAAA,MACA;AAAA,QACE,MAAA,EAAQ,2BAAA;AAAA,QACR,KAAA,EAAO,oBAAA;AAAA,QACP,WAAA,EACE,gFAAA;AAAA,QACF,SAAA,EAAW,CAAC,sBAAsB;AAAA;AACpC,KACF;AAAA,IACA,OAAA,EAAS,CAAC,mBAAA,EAAqB,eAAA,EAAiB,oBAAoB,CAAA;AAAA,IACpE,eAAA,EAAiB,CAAC,gBAAgB;AAAA;AAEtC","file":"workflowRuntime.js","sourcesContent":["/**\n * Workflow Runtime Contract v1\n *\n * Canonical TypeScript contract for Lucern's graph-local workflow runtime.\n * WF-1 defines the typed substrate for:\n *   - workflow definitions and run receipts\n *   - action mutation tiering and approval expectations\n *   - hooks over worktree/question/evidence/inbox events\n *   - output unions for domain-specific artifacts\n *   - deterministic integrity checks and operational metadata\n *\n * BREAKING CHANGE RULES:\n *   - Adding optional fields is NON-breaking\n *   - Removing fields or renaming enum values is BREAKING\n *   - Reclassifying a mutation tier is BREAKING\n *   - Changing canonical workflow IDs is BREAKING\n */\n\nexport const WORKFLOW_RUNTIME_SCHEMA_VERSION = \"1.0.0\" as const;\n\nexport const WORKFLOW_MUTATION_TIERS = [\n  \"read_only\",\n  \"low_risk_write\",\n  \"high_risk_write\",\n] as const;\nexport type WorkflowMutationTier = (typeof WORKFLOW_MUTATION_TIERS)[number];\n\nexport const WORKFLOW_APPROVAL_MODES = [\n  \"none\",\n  \"audit_only\",\n  \"human_required\",\n  \"auto_approve\",\n] as const;\nexport type WorkflowApprovalMode = (typeof WORKFLOW_APPROVAL_MODES)[number];\n\nexport const DEFAULT_TIER_APPROVAL_MODE: Readonly<\n  Record<WorkflowMutationTier, WorkflowApprovalMode>\n> = {\n  read_only: \"none\",\n  low_risk_write: \"audit_only\",\n  high_risk_write: \"human_required\",\n} as const;\n\nexport const WORKFLOW_ACTION_KINDS = [\n  \"context_pack\",\n  \"integrity_check\",\n  \"lucern_tool\",\n  \"report_compile\",\n  \"brief_publish\",\n  \"notification\",\n  \"custom\",\n] as const;\nexport type WorkflowActionKind = (typeof WORKFLOW_ACTION_KINDS)[number];\n\nexport const WORKFLOW_HOOK_EVENTS = [\n  \"schedule.tick\",\n  \"worktree.activated\",\n  \"worktree.completed\",\n  \"question.created\",\n  \"question.answered\",\n  \"evidence.appended\",\n  \"inbox.item_created\",\n] as const;\nexport type WorkflowHookEvent = (typeof WORKFLOW_HOOK_EVENTS)[number];\n\nexport const WORKFLOW_OUTPUT_KINDS = [\n  \"engineering_brief\",\n  \"research_memo\",\n  \"strategy_artifact\",\n  \"inbox_summary\",\n  \"pipeline_brief\",\n  \"structured_payload\",\n] as const;\nexport type WorkflowOutputKind = (typeof WORKFLOW_OUTPUT_KINDS)[number];\n\nexport const WORKFLOW_RUN_STATUSES = [\n  \"queued\",\n  \"running\",\n  \"awaiting_approval\",\n  \"completed\",\n  \"failed\",\n  \"cancelled\",\n] as const;\nexport type WorkflowRunStatus = (typeof WORKFLOW_RUN_STATUSES)[number];\n\nexport const WORKFLOW_TRIGGER_KINDS = [\n  \"manual\",\n  \"schedule\",\n  \"hook\",\n] as const;\nexport type WorkflowTriggerKind = (typeof WORKFLOW_TRIGGER_KINDS)[number];\n\nexport const WORKFLOW_PROOF_ARTIFACT_KINDS = [\n  \"report\",\n  \"brief\",\n  \"artifact\",\n  \"dashboard\",\n  \"test_evidence\",\n] as const;\nexport type WorkflowProofArtifactKind =\n  (typeof WORKFLOW_PROOF_ARTIFACT_KINDS)[number];\n\nexport const WORKFLOW_STAFFING_HINTS = [\n  \"solo\",\n  \"backend+tests\",\n  \"fullstack\",\n  \"mcp+tests\",\n] as const;\nexport type WorkflowStaffingHint = (typeof WORKFLOW_STAFFING_HINTS)[number];\n\nexport const WORKFLOW_AUTO_FIX_MODES = [\n  \"disabled\",\n  \"dry_run\",\n  \"safe\",\n  \"aggressive\",\n] as const;\nexport type WorkflowAutoFixMode = (typeof WORKFLOW_AUTO_FIX_MODES)[number];\n\nexport const WORKFLOW_INTEGRITY_CHECKS = [\n  \"null_dependency_refs\",\n  \"superseded_blockers\",\n  \"band_order_inconsistency\",\n  \"sparse_shaping\",\n  \"failed_completed_gate\",\n] as const;\nexport type WorkflowIntegrityCheckId =\n  (typeof WORKFLOW_INTEGRITY_CHECKS)[number];\n\nexport type WorkflowProofArtifact = {\n  kind: WorkflowProofArtifactKind;\n  label: string;\n  required?: boolean;\n  sourceRef?: string;\n};\n\nexport type WorkflowAutoFixPolicy = {\n  mode: WorkflowAutoFixMode;\n  maxActionsPerRun?: number;\n  permittedMutationTiers?: WorkflowMutationTier[];\n  requireAuditTrail?: boolean;\n  escalationGate?: string;\n};\n\nexport const DEFAULT_WORKFLOW_AUTO_FIX_POLICY: WorkflowAutoFixPolicy = {\n  mode: \"disabled\",\n  permittedMutationTiers: [\"read_only\"],\n  requireAuditTrail: true,\n};\n\nexport type WorkflowApprovalPolicy = {\n  mode: WorkflowApprovalMode;\n  approvalGate?: string;\n  autoApprovePolicyKey?: string;\n  rationaleRequired?: boolean;\n};\n\nexport type WorkflowOutputBase = {\n  outputId: string;\n  kind: WorkflowOutputKind;\n  title: string;\n  summary: string;\n  generatedAt?: number;\n};\n\nexport type EngineeringBriefOutput = WorkflowOutputBase & {\n  kind: \"engineering_brief\";\n  sections: Array<{\n    heading: string;\n    body: string;\n  }>;\n  touchedPaths?: string[];\n};\n\nexport type ResearchMemoOutput = WorkflowOutputBase & {\n  kind: \"research_memo\";\n  claims: string[];\n  evidenceRefs?: string[];\n};\n\nexport type StrategyArtifactOutput = WorkflowOutputBase & {\n  kind: \"strategy_artifact\";\n  recommendations: string[];\n  decisionWindow?: string;\n};\n\nexport type InboxSummaryOutput = WorkflowOutputBase & {\n  kind: \"inbox_summary\";\n  channel: \"developer_portal\" | \"chat\" | \"ops\";\n  inboxTitle: string;\n  inboxBody: string;\n};\n\nexport type PipelineBriefOutput = WorkflowOutputBase & {\n  kind: \"pipeline_brief\";\n  hingeWorktreeId?: string;\n  groupedBlockers: Array<{\n    blocker: string;\n    blockedWorktreeIds: string[];\n  }>;\n};\n\nexport type StructuredPayloadOutput = WorkflowOutputBase & {\n  kind: \"structured_payload\";\n  payload: Record<string, unknown>;\n};\n\nexport type WorkflowOutputContract =\n  | EngineeringBriefOutput\n  | ResearchMemoOutput\n  | StrategyArtifactOutput\n  | InboxSummaryOutput\n  | PipelineBriefOutput\n  | StructuredPayloadOutput;\n\nexport type WorkflowActionContract = {\n  actionId: string;\n  kind: WorkflowActionKind;\n  title: string;\n  description: string;\n  mutationTier: WorkflowMutationTier;\n  toolName?: string;\n  produces?: WorkflowOutputKind[];\n  idempotent?: boolean;\n  approval: WorkflowApprovalPolicy;\n};\n\nexport type WorkflowHookContract = {\n  hookId: string;\n  event: WorkflowHookEvent;\n  description: string;\n  condition?: string;\n  actionIds: string[];\n};\n\nexport type WorkflowTriggerContract =\n  | {\n      kind: \"manual\";\n      description?: string;\n    }\n  | {\n      kind: \"schedule\";\n      cadence: \"hourly\" | \"daily\" | \"weekly\";\n      timezone?: string;\n    }\n  | {\n      kind: \"hook\";\n      event: WorkflowHookEvent;\n    };\n\nexport type WorkflowDefinitionV1 = {\n  workflowId: string;\n  version: typeof WORKFLOW_RUNTIME_SCHEMA_VERSION;\n  title: string;\n  description: string;\n  trigger: WorkflowTriggerContract;\n  staffingHint?: WorkflowStaffingHint;\n  proofArtifacts?: WorkflowProofArtifact[];\n  autoFixPolicy?: WorkflowAutoFixPolicy;\n  actions: readonly WorkflowActionContract[];\n  hooks?: readonly WorkflowHookContract[];\n  outputs: readonly WorkflowOutputKind[];\n  integrityChecks?: readonly WorkflowIntegrityCheckId[];\n};\n\nexport type WorkflowRunReceiptV1 = {\n  runId: string;\n  workflowId: string;\n  status: WorkflowRunStatus;\n  triggeredBy: WorkflowTriggerKind;\n  startedAt: number;\n  completedAt?: number;\n  outputKinds: WorkflowOutputKind[];\n  approvalsRequired?: number;\n};\n\nexport const NIGHTLY_RECONCILIATION_WORKFLOW_ID =\n  \"workflow.pipeline_reconciliation.v1\" as const;\n\nexport const MORNING_BRIEF_WORKFLOW_ID =\n  \"workflow.morning_brief.v1\" as const;\n\nexport const CANONICAL_WORKFLOW_DEFINITIONS: readonly WorkflowDefinitionV1[] = [\n  {\n    workflowId: NIGHTLY_RECONCILIATION_WORKFLOW_ID,\n    version: WORKFLOW_RUNTIME_SCHEMA_VERSION,\n    title: \"Nightly Pipeline Reconciliation\",\n    description:\n      \"Runs deterministic integrity checks, compiles pipeline state, and emits an operator-facing reconciliation brief.\",\n    trigger: {\n      kind: \"schedule\",\n      cadence: \"daily\",\n      timezone: \"America/New_York\",\n    },\n    staffingHint: \"backend+tests\",\n    proofArtifacts: [\n      {\n        kind: \"report\",\n        label: \"Pipeline reconciliation report\",\n        required: true,\n      },\n      {\n        kind: \"test_evidence\",\n        label: \"Integrity check receipt\",\n        required: true,\n      },\n    ],\n    autoFixPolicy: {\n      mode: \"safe\",\n      maxActionsPerRun: 5,\n      permittedMutationTiers: [\"read_only\", \"low_risk_write\"],\n      requireAuditTrail: true,\n      escalationGate: \"gate:workflow-runtime-contract-live\",\n    },\n    actions: [\n      {\n        actionId: \"compile_context_pack\",\n        kind: \"context_pack\",\n        title: \"Compile pipeline context\",\n        description: \"Build the ranked context needed for deterministic checks.\",\n        mutationTier: \"read_only\",\n        produces: [\"structured_payload\"],\n        idempotent: true,\n        approval: { mode: \"none\" },\n      },\n      {\n        actionId: \"run_integrity_checks\",\n        kind: \"integrity_check\",\n        title: \"Run integrity checks\",\n        description:\n          \"Evaluate dependency references, blockers, execution bands, shaping coverage, and completed gates.\",\n        mutationTier: \"read_only\",\n        produces: [\"structured_payload\"],\n        idempotent: true,\n        approval: { mode: \"none\" },\n      },\n      {\n        actionId: \"record_followup_questions\",\n        kind: \"lucern_tool\",\n        title: \"Record follow-up questions\",\n        description:\n          \"Create or reopen operator-facing questions for integrity failures that require human review.\",\n        mutationTier: \"low_risk_write\",\n        toolName: \"create_question\",\n        produces: [\"pipeline_brief\"],\n        approval: { mode: \"audit_only\", rationaleRequired: true },\n      },\n      {\n        actionId: \"publish_reconciliation_brief\",\n        kind: \"brief_publish\",\n        title: \"Publish reconciliation brief\",\n        description:\n          \"Emit an inbox-routed brief summarizing the nightly pipeline state and grouped blockers.\",\n        mutationTier: \"low_risk_write\",\n        produces: [\"pipeline_brief\", \"inbox_summary\"],\n        approval: { mode: \"audit_only\" },\n      },\n    ],\n    hooks: [\n      {\n        hookId: \"nightly-schedule\",\n        event: \"schedule.tick\",\n        description: \"Run once per nightly cadence.\",\n        actionIds: [\n          \"compile_context_pack\",\n          \"run_integrity_checks\",\n          \"record_followup_questions\",\n          \"publish_reconciliation_brief\",\n        ],\n      },\n    ],\n    outputs: [\"pipeline_brief\", \"inbox_summary\", \"structured_payload\"],\n    integrityChecks: WORKFLOW_INTEGRITY_CHECKS,\n  },\n  {\n    workflowId: MORNING_BRIEF_WORKFLOW_ID,\n    version: WORKFLOW_RUNTIME_SCHEMA_VERSION,\n    title: \"Morning Brief\",\n    description:\n      \"Compiles a developer-facing morning brief from graph state, overnight workflow outputs, and inbox routing preferences.\",\n    trigger: {\n      kind: \"schedule\",\n      cadence: \"daily\",\n      timezone: \"America/New_York\",\n    },\n    staffingHint: \"solo\",\n    proofArtifacts: [\n      {\n        kind: \"brief\",\n        label: \"Morning brief\",\n        required: true,\n      },\n    ],\n    autoFixPolicy: {\n      mode: \"dry_run\",\n      maxActionsPerRun: 1,\n      permittedMutationTiers: [\"read_only\", \"low_risk_write\"],\n      requireAuditTrail: true,\n    },\n    actions: [\n      {\n        actionId: \"compile_brief_inputs\",\n        kind: \"context_pack\",\n        title: \"Compile brief inputs\",\n        description:\n          \"Read graph state, worktree state, and overnight workflow receipts.\",\n        mutationTier: \"read_only\",\n        produces: [\"structured_payload\"],\n        idempotent: true,\n        approval: { mode: \"none\" },\n      },\n      {\n        actionId: \"publish_morning_brief\",\n        kind: \"brief_publish\",\n        title: \"Publish morning brief\",\n        description:\n          \"Publish a typed inbox summary with prioritized worktree and question context.\",\n        mutationTier: \"low_risk_write\",\n        produces: [\"engineering_brief\", \"inbox_summary\"],\n        approval: { mode: \"audit_only\" },\n      },\n    ],\n    hooks: [\n      {\n        hookId: \"morning-schedule\",\n        event: \"schedule.tick\",\n        description: \"Run once per morning cadence.\",\n        actionIds: [\"compile_brief_inputs\", \"publish_morning_brief\"],\n      },\n      {\n        hookId: \"worktree-complete-refresh\",\n        event: \"worktree.completed\",\n        description:\n          \"Refresh the queued morning brief inputs when worktree outcomes land overnight.\",\n        actionIds: [\"compile_brief_inputs\"],\n      },\n    ],\n    outputs: [\"engineering_brief\", \"inbox_summary\", \"structured_payload\"],\n    integrityChecks: [\"sparse_shaping\"],\n  },\n] as const;\n"]}

package/dist/{lib/platform/sdk/controlObjectOwnership.d.ts → controlObjectOwnership.d.ts}

@@ -1,25 +1,25 @@
 /** All recognized control object kinds in the ownership model. */
-export declare const CONTROL_OBJECT_KINDS: readonly ["tenant", "workspace", "principal", "tool", "pack", "ontology", "belief", "policy_rule"];
+declare const CONTROL_OBJECT_KINDS: readonly ["tenant", "workspace", "principal", "tool", "pack", "ontology", "belief", "policy_rule"];
 /** A kind of control object (tenant, workspace, principal, tool, etc.). */
-export type ControlObjectKind = (typeof CONTROL_OBJECT_KINDS)[number];
+type ControlObjectKind = (typeof CONTROL_OBJECT_KINDS)[number];
 /** Canonical ownership scopes: platform, tenant, workspace, or resource. */
-export declare const CONTROL_OBJECT_OWNER_SCOPES: readonly ["platform", "tenant", "workspace", "resource"];
+declare const CONTROL_OBJECT_OWNER_SCOPES: readonly ["platform", "tenant", "workspace", "resource"];
 /** The scope level that canonically owns a control object. */
-export type ControlObjectOwnerScope = (typeof CONTROL_OBJECT_OWNER_SCOPES)[number];
+type ControlObjectOwnerScope = (typeof CONTROL_OBJECT_OWNER_SCOPES)[number];
 /** UI surfaces authorized to edit control objects. */
-export declare const CONTROL_OBJECT_EDIT_SURFACES: readonly ["platform_admin", "tenant_admin", "workspace_admin", "graph_worktree"];
+declare const CONTROL_OBJECT_EDIT_SURFACES: readonly ["platform_admin", "tenant_admin", "workspace_admin", "graph_worktree"];
 /** A UI surface authorized to mutate a control object (platform admin, tenant admin, etc.). */
-export type ControlObjectEditSurface = (typeof CONTROL_OBJECT_EDIT_SURFACES)[number];
+type ControlObjectEditSurface = (typeof CONTROL_OBJECT_EDIT_SURFACES)[number];
 /** Rules governing how control object configuration flows through the scope hierarchy. */
-export declare const CONTROL_OBJECT_INHERITANCE_RULES: readonly ["none", "platform_seed_to_tenant", "tenant_default_to_workspace", "workspace_narrowing_only", "pack_overlay_to_tenant", "topic_lineage_to_resource"];
+declare const CONTROL_OBJECT_INHERITANCE_RULES: readonly ["none", "platform_seed_to_tenant", "tenant_default_to_workspace", "workspace_narrowing_only", "pack_overlay_to_tenant", "topic_lineage_to_resource"];
 /** How a control object's configuration propagates through scope hierarchy. */
-export type ControlObjectInheritanceRule = (typeof CONTROL_OBJECT_INHERITANCE_RULES)[number];
+type ControlObjectInheritanceRule = (typeof CONTROL_OBJECT_INHERITANCE_RULES)[number];
 /** Scope of impact when a control object is modified. */
-export declare const CONTROL_OBJECT_BLAST_RADII: readonly ["platform", "tenant", "workspace", "resource"];
+declare const CONTROL_OBJECT_BLAST_RADII: readonly ["platform", "tenant", "workspace", "resource"];
 /** The furthest scope impacted by a mutation to a control object. */
-export type ControlObjectBlastRadius = (typeof CONTROL_OBJECT_BLAST_RADII)[number];
+type ControlObjectBlastRadius = (typeof CONTROL_OBJECT_BLAST_RADII)[number];
 /** A single row in the ownership matrix describing who owns, edits, and inherits a control object. */
-export type ControlObjectOwnershipCase = {
+type ControlObjectOwnershipCase = {
     caseKey: string;
     caseLabel: string;
     kind: ControlObjectKind;
@@ -29,9 +29,9 @@ export type ControlObjectOwnershipCase = {
     blastRadius: ControlObjectBlastRadius;
 };
 /** Full ownership matrix keyed by control object kind. */
-export type ControlObjectOwnershipMatrix = Record<ControlObjectKind, readonly ControlObjectOwnershipCase[]>;
+type ControlObjectOwnershipMatrix = Record<ControlObjectKind, readonly ControlObjectOwnershipCase[]>;
 /** Versioned ownership contract bundling all enums, the matrix, and flattened rows. */
-export type ControlObjectOwnershipContract = {
+type ControlObjectOwnershipContract = {
     version: "1.0.0";
     kinds: readonly ControlObjectKind[];
     ownerScopes: readonly ControlObjectOwnerScope[];
@@ -42,7 +42,7 @@ export type ControlObjectOwnershipContract = {
     rows: readonly ControlObjectOwnershipCase[];
 };
 /** Static ownership matrix mapping each control object kind to its ownership cases. */
-export declare const CONTROL_OBJECT_OWNERSHIP_MATRIX: {
+declare const CONTROL_OBJECT_OWNERSHIP_MATRIX: {
     readonly tenant: readonly [{
         readonly caseKey: "platform-record";
         readonly caseLabel: "Platform Record";
@@ -165,9 +165,9 @@ export declare const CONTROL_OBJECT_OWNERSHIP_MATRIX: {
     }];
 };
 /** Flattened array of all ownership cases across all control object kinds. */
-export declare const CONTROL_OBJECT_OWNERSHIP_ROWS: readonly ControlObjectOwnershipCase[];
+declare const CONTROL_OBJECT_OWNERSHIP_ROWS: readonly ControlObjectOwnershipCase[];
 /** The canonical ownership contract exposed by the SDK. */
-export declare const CONTROL_OBJECT_OWNERSHIP_CONTRACT: {
+declare const CONTROL_OBJECT_OWNERSHIP_CONTRACT: {
     readonly version: "1.0.0";
     readonly kinds: readonly ["tenant", "workspace", "principal", "tool", "pack", "ontology", "belief", "policy_rule"];
     readonly ownerScopes: readonly ["platform", "tenant", "workspace", "resource"];
@@ -301,8 +301,10 @@ export declare const CONTROL_OBJECT_OWNERSHIP_CONTRACT: {
 /**
  * List ownership cases for one control-object kind or the full matrix.
  */
-export declare function listControlObjectOwnershipCases(kind?: ControlObjectKind): readonly ControlObjectOwnershipCase[];
+declare function listControlObjectOwnershipCases(kind?: ControlObjectKind): readonly ControlObjectOwnershipCase[];
 /**
  * Get a specific ownership case by kind and case key.
  */
-export declare function getControlObjectOwnershipCase(kind: ControlObjectKind, caseKey: string): ControlObjectOwnershipCase | undefined;
+declare function getControlObjectOwnershipCase(kind: ControlObjectKind, caseKey: string): ControlObjectOwnershipCase | undefined;
+
+export { CONTROL_OBJECT_BLAST_RADII, CONTROL_OBJECT_EDIT_SURFACES, CONTROL_OBJECT_INHERITANCE_RULES, CONTROL_OBJECT_KINDS, CONTROL_OBJECT_OWNERSHIP_CONTRACT, CONTROL_OBJECT_OWNERSHIP_MATRIX, CONTROL_OBJECT_OWNERSHIP_ROWS, CONTROL_OBJECT_OWNER_SCOPES, type ControlObjectBlastRadius, type ControlObjectEditSurface, type ControlObjectInheritanceRule, type ControlObjectKind, type ControlObjectOwnerScope, type ControlObjectOwnershipCase, type ControlObjectOwnershipContract, type ControlObjectOwnershipMatrix, getControlObjectOwnershipCase, listControlObjectOwnershipCases };

package/dist/controlObjectOwnership.js

@@ -0,0 +1,215 @@
+// src/controlObjectOwnership.ts
+var CONTROL_OBJECT_KINDS = [
+  "tenant",
+  "workspace",
+  "principal",
+  "tool",
+  "pack",
+  "ontology",
+  "belief",
+  "policy_rule"
+];
+var CONTROL_OBJECT_OWNER_SCOPES = [
+  "platform",
+  "tenant",
+  "workspace",
+  "resource"
+];
+var CONTROL_OBJECT_EDIT_SURFACES = [
+  "platform_admin",
+  "tenant_admin",
+  "workspace_admin",
+  "graph_worktree"
+];
+var CONTROL_OBJECT_INHERITANCE_RULES = [
+  "none",
+  "platform_seed_to_tenant",
+  "tenant_default_to_workspace",
+  "workspace_narrowing_only",
+  "pack_overlay_to_tenant",
+  "topic_lineage_to_resource"
+];
+var CONTROL_OBJECT_BLAST_RADII = [
+  "platform",
+  "tenant",
+  "workspace",
+  "resource"
+];
+function defineCases(cases) {
+  return cases;
+}
+var CONTROL_OBJECT_OWNERSHIP_MATRIX = {
+  tenant: defineCases([
+    {
+      caseKey: "platform-record",
+      caseLabel: "Platform Record",
+      kind: "tenant",
+      canonicalOwnerScope: "platform",
+      editSurface: "platform_admin",
+      inheritanceRule: "none",
+      blastRadius: "tenant"
+    }
+  ]),
+  workspace: defineCases([
+    {
+      caseKey: "tenant-workspace",
+      caseLabel: "Tenant Workspace",
+      kind: "workspace",
+      canonicalOwnerScope: "tenant",
+      editSurface: "tenant_admin",
+      inheritanceRule: "tenant_default_to_workspace",
+      blastRadius: "workspace"
+    }
+  ]),
+  principal: defineCases([
+    {
+      caseKey: "tenant-principal",
+      caseLabel: "Tenant Principal",
+      kind: "principal",
+      canonicalOwnerScope: "tenant",
+      editSurface: "tenant_admin",
+      inheritanceRule: "workspace_narrowing_only",
+      blastRadius: "resource"
+    }
+  ]),
+  tool: defineCases([
+    {
+      caseKey: "platform-core",
+      caseLabel: "Platform Core",
+      kind: "tool",
+      canonicalOwnerScope: "platform",
+      editSurface: "platform_admin",
+      inheritanceRule: "platform_seed_to_tenant",
+      blastRadius: "platform"
+    },
+    {
+      caseKey: "tenant-custom",
+      caseLabel: "Tenant Custom",
+      kind: "tool",
+      canonicalOwnerScope: "tenant",
+      editSurface: "tenant_admin",
+      inheritanceRule: "tenant_default_to_workspace",
+      blastRadius: "tenant"
+    }
+  ]),
+  pack: defineCases([
+    {
+      caseKey: "platform-definition",
+      caseLabel: "Platform Definition",
+      kind: "pack",
+      canonicalOwnerScope: "platform",
+      editSurface: "platform_admin",
+      inheritanceRule: "platform_seed_to_tenant",
+      blastRadius: "platform"
+    },
+    {
+      caseKey: "tenant-installation",
+      caseLabel: "Tenant Installation",
+      kind: "pack",
+      canonicalOwnerScope: "tenant",
+      editSurface: "tenant_admin",
+      inheritanceRule: "platform_seed_to_tenant",
+      blastRadius: "tenant"
+    }
+  ]),
+  ontology: defineCases([
+    {
+      caseKey: "platform-base",
+      caseLabel: "Platform Base",
+      kind: "ontology",
+      canonicalOwnerScope: "platform",
+      editSurface: "platform_admin",
+      inheritanceRule: "platform_seed_to_tenant",
+      blastRadius: "platform"
+    },
+    {
+      caseKey: "pack-overlay",
+      caseLabel: "Pack Overlay",
+      kind: "ontology",
+      canonicalOwnerScope: "platform",
+      editSurface: "platform_admin",
+      inheritanceRule: "pack_overlay_to_tenant",
+      blastRadius: "platform"
+    },
+    {
+      caseKey: "tenant-extension",
+      caseLabel: "Tenant Extension",
+      kind: "ontology",
+      canonicalOwnerScope: "tenant",
+      editSurface: "tenant_admin",
+      inheritanceRule: "topic_lineage_to_resource",
+      blastRadius: "tenant"
+    }
+  ]),
+  belief: defineCases([
+    {
+      caseKey: "topic-resource",
+      caseLabel: "Topic Resource",
+      kind: "belief",
+      canonicalOwnerScope: "resource",
+      editSurface: "graph_worktree",
+      inheritanceRule: "topic_lineage_to_resource",
+      blastRadius: "resource"
+    }
+  ]),
+  policy_rule: defineCases([
+    {
+      caseKey: "platform-baseline",
+      caseLabel: "Platform Baseline",
+      kind: "policy_rule",
+      canonicalOwnerScope: "platform",
+      editSurface: "platform_admin",
+      inheritanceRule: "platform_seed_to_tenant",
+      blastRadius: "platform"
+    },
+    {
+      caseKey: "tenant-bundle",
+      caseLabel: "Tenant Bundle",
+      kind: "policy_rule",
+      canonicalOwnerScope: "tenant",
+      editSurface: "tenant_admin",
+      inheritanceRule: "tenant_default_to_workspace",
+      blastRadius: "tenant"
+    },
+    {
+      caseKey: "workspace-override",
+      caseLabel: "Workspace Override",
+      kind: "policy_rule",
+      canonicalOwnerScope: "workspace",
+      editSurface: "workspace_admin",
+      inheritanceRule: "none",
+      blastRadius: "workspace"
+    }
+  ])
+};
+function flattenOwnershipMatrix(matrix) {
+  return CONTROL_OBJECT_KINDS.flatMap((kind) => [...matrix[kind]]);
+}
+var CONTROL_OBJECT_OWNERSHIP_ROWS = Object.freeze(
+  flattenOwnershipMatrix(CONTROL_OBJECT_OWNERSHIP_MATRIX)
+);
+var CONTROL_OBJECT_OWNERSHIP_CONTRACT = {
+  version: "1.0.0",
+  kinds: CONTROL_OBJECT_KINDS,
+  ownerScopes: CONTROL_OBJECT_OWNER_SCOPES,
+  editSurfaces: CONTROL_OBJECT_EDIT_SURFACES,
+  inheritanceRules: CONTROL_OBJECT_INHERITANCE_RULES,
+  blastRadii: CONTROL_OBJECT_BLAST_RADII,
+  matrix: CONTROL_OBJECT_OWNERSHIP_MATRIX,
+  rows: CONTROL_OBJECT_OWNERSHIP_ROWS
+};
+function listControlObjectOwnershipCases(kind) {
+  if (!kind) {
+    return CONTROL_OBJECT_OWNERSHIP_ROWS;
+  }
+  return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind];
+}
+function getControlObjectOwnershipCase(kind, caseKey) {
+  return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind].find(
+    (ownershipCase) => ownershipCase.caseKey === caseKey
+  );
+}
+
+export { CONTROL_OBJECT_BLAST_RADII, CONTROL_OBJECT_EDIT_SURFACES, CONTROL_OBJECT_INHERITANCE_RULES, CONTROL_OBJECT_KINDS, CONTROL_OBJECT_OWNERSHIP_CONTRACT, CONTROL_OBJECT_OWNERSHIP_MATRIX, CONTROL_OBJECT_OWNERSHIP_ROWS, CONTROL_OBJECT_OWNER_SCOPES, getControlObjectOwnershipCase, listControlObjectOwnershipCases };
+//# sourceMappingURL=controlObjectOwnership.js.map
+//# sourceMappingURL=controlObjectOwnership.js.map

package/dist/controlObjectOwnership.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controlObjectOwnership.ts"],"names":[],"mappings":";AACO,IAAM,oBAAA,GAAuB;AAAA,EAClC,QAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,UAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF;AAKO,IAAM,2BAAA,GAA8B;AAAA,EACzC,UAAA;AAAA,EACA,QAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF;AAMO,IAAM,4BAAA,GAA+B;AAAA,EAC1C,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,iBAAA;AAAA,EACA;AACF;AAMO,IAAM,gCAAA,GAAmC;AAAA,EAC9C,MAAA;AAAA,EACA,yBAAA;AAAA,EACA,6BAAA;AAAA,EACA,0BAAA;AAAA,EACA,wBAAA;AAAA,EACA;AACF;AAMO,IAAM,0BAAA,GAA6B;AAAA,EACxC,UAAA;AAAA,EACA,QAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF;AAiCA,SAAS,YACP,KAAA,EACG;AACH,EAAA,OAAO,KAAA;AACT;AAGO,IAAM,+BAAA,GAAkC;AAAA,EAC7C,QAAQ,WAAA,CAAY;AAAA,IAClB;AAAA,MACE,OAAA,EAAS,iBAAA;AAAA,MACT,SAAA,EAAW,iBAAA;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,MAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,WAAW,WAAA,CAAY;AAAA,IACrB;AAAA,MACE,OAAA,EAAS,kBAAA;AAAA,MACT,SAAA,EAAW,kBAAA;AAAA,MACX,IAAA,EAAM,WAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,6BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,WAAW,WAAA,CAAY;AAAA,IACrB;AAAA,MACE,OAAA,EAAS,kBAAA;AAAA,MACT,SAAA,EAAW,kBAAA;AAAA,MACX,IAAA,EAAM,WAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,0BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,MAAM,WAAA,CAAY;AAAA,IAChB;AAAA,MACE,OAAA,EAAS,eAAA;AAAA,MACT,SAAA,EAAW,eAAA;AAAA,MACX,IAAA,EAAM,MAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,eAAA;AAAA,MACT,SAAA,EAAW,eAAA;AAAA,MACX,IAAA,EAAM,MAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,6BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,MAAM,WAAA,CAAY;AAAA,IAChB;AAAA,MACE,OAAA,EAAS,qBAAA;AAAA,MACT,SAAA,EAAW,qBAAA;AAAA,MACX,IAAA,EAAM,MAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,qBAAA;AAAA,MACT,SAAA,EAAW,qBAAA;AAAA,MACX,IAAA,EAAM,MAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,UAAU,WAAA,CAAY;AAAA,IACpB;AAAA,MACE,OAAA,EAAS,eAAA;AAAA,MACT,SAAA,EAAW,eAAA;AAAA,MACX,IAAA,EAAM,UAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,cAAA;AAAA,MACT,SAAA,EAAW,cAAA;AAAA,MACX,IAAA,EAAM,UAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,wBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,kBAAA;AAAA,MACT,SAAA,EAAW,kBAAA;AAAA,MACX,IAAA,EAAM,UAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,2BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,QAAQ,WAAA,CAAY;AAAA,IAClB;AAAA,MACE,OAAA,EAAS,gBAAA;AAAA,MACT,SAAA,EAAW,gBAAA;AAAA,MACX,IAAA,EAAM,QAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,2BAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD,CAAA;AAAA,EACD,aAAa,WAAA,CAAY;AAAA,IACvB;AAAA,MACE,OAAA,EAAS,mBAAA;AAAA,MACT,SAAA,EAAW,mBAAA;AAAA,MACX,IAAA,EAAM,aAAA;AAAA,MACN,mBAAA,EAAqB,UAAA;AAAA,MACrB,WAAA,EAAa,gBAAA;AAAA,MACb,eAAA,EAAiB,yBAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,eAAA;AAAA,MACT,SAAA,EAAW,eAAA;AAAA,MACX,IAAA,EAAM,aAAA;AAAA,MACN,mBAAA,EAAqB,QAAA;AAAA,MACrB,WAAA,EAAa,cAAA;AAAA,MACb,eAAA,EAAiB,6BAAA;AAAA,MACjB,WAAA,EAAa;AAAA,KACf;AAAA,IACA;AAAA,MACE,OAAA,EAAS,oBAAA;AAAA,MACT,SAAA,EAAW,oBAAA;AAAA,MACX,IAAA,EAAM,aAAA;AAAA,MACN,mBAAA,EAAqB,WAAA;AAAA,MACrB,WAAA,EAAa,iBAAA;AAAA,MACb,eAAA,EAAiB,MAAA;AAAA,MACjB,WAAA,EAAa;AAAA;AACf,GACD;AACH;AAEA,SAAS,uBACP,MAAA,EAC8B;AAC9B,EAAA,OAAO,oBAAA,CAAqB,QAAQ,CAAC,IAAA,KAAS,CAAC,GAAG,MAAA,CAAO,IAAI,CAAC,CAAC,CAAA;AACjE;AAGO,IAAM,gCAAgC,MAAA,CAAO,MAAA;AAAA,EAClD,uBAAuB,+BAA+B;AACxD;AAGO,IAAM,iCAAA,GAAoC;AAAA,EAC/C,OAAA,EAAS,OAAA;AAAA,EACT,KAAA,EAAO,oBAAA;AAAA,EACP,WAAA,EAAa,2BAAA;AAAA,EACb,YAAA,EAAc,4BAAA;AAAA,EACd,gBAAA,EAAkB,gCAAA;AAAA,EAClB,UAAA,EAAY,0BAAA;AAAA,EACZ,MAAA,EAAQ,+BAAA;AAAA,EACR,IAAA,EAAM;AACR;AAKO,SAAS,gCACd,IAAA,EACuC;AACvC,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,6BAAA;AAAA,EACT;AACA,EAAA,OAAO,gCAAgC,IAAI,CAAA;AAC7C;AAKO,SAAS,6BAAA,CACd,MACA,OAAA,EACwC;AACxC,EAAA,OAAO,+BAAA,CAAgC,IAAI,CAAA,CAAE,IAAA;AAAA,IAC3C,CAAC,aAAA,KAAkB,aAAA,CAAc,OAAA,KAAY;AAAA,GAC/C;AACF","file":"controlObjectOwnership.js","sourcesContent":["/** All recognized control object kinds in the ownership model. */\nexport const CONTROL_OBJECT_KINDS = [\n  \"tenant\",\n  \"workspace\",\n  \"principal\",\n  \"tool\",\n  \"pack\",\n  \"ontology\",\n  \"belief\",\n  \"policy_rule\",\n] as const;\n/** A kind of control object (tenant, workspace, principal, tool, etc.). */\nexport type ControlObjectKind = (typeof CONTROL_OBJECT_KINDS)[number];\n\n/** Canonical ownership scopes: platform, tenant, workspace, or resource. */\nexport const CONTROL_OBJECT_OWNER_SCOPES = [\n  \"platform\",\n  \"tenant\",\n  \"workspace\",\n  \"resource\",\n] as const;\n/** The scope level that canonically owns a control object. */\nexport type ControlObjectOwnerScope =\n  (typeof CONTROL_OBJECT_OWNER_SCOPES)[number];\n\n/** UI surfaces authorized to edit control objects. */\nexport const CONTROL_OBJECT_EDIT_SURFACES = [\n  \"platform_admin\",\n  \"tenant_admin\",\n  \"workspace_admin\",\n  \"graph_worktree\",\n] as const;\n/** A UI surface authorized to mutate a control object (platform admin, tenant admin, etc.). */\nexport type ControlObjectEditSurface =\n  (typeof CONTROL_OBJECT_EDIT_SURFACES)[number];\n\n/** Rules governing how control object configuration flows through the scope hierarchy. */\nexport const CONTROL_OBJECT_INHERITANCE_RULES = [\n  \"none\",\n  \"platform_seed_to_tenant\",\n  \"tenant_default_to_workspace\",\n  \"workspace_narrowing_only\",\n  \"pack_overlay_to_tenant\",\n  \"topic_lineage_to_resource\",\n] as const;\n/** How a control object's configuration propagates through scope hierarchy. */\nexport type ControlObjectInheritanceRule =\n  (typeof CONTROL_OBJECT_INHERITANCE_RULES)[number];\n\n/** Scope of impact when a control object is modified. */\nexport const CONTROL_OBJECT_BLAST_RADII = [\n  \"platform\",\n  \"tenant\",\n  \"workspace\",\n  \"resource\",\n] as const;\n/** The furthest scope impacted by a mutation to a control object. */\nexport type ControlObjectBlastRadius = (typeof CONTROL_OBJECT_BLAST_RADII)[number];\n\n/** A single row in the ownership matrix describing who owns, edits, and inherits a control object. */\nexport type ControlObjectOwnershipCase = {\n  caseKey: string;\n  caseLabel: string;\n  kind: ControlObjectKind;\n  canonicalOwnerScope: ControlObjectOwnerScope;\n  editSurface: ControlObjectEditSurface;\n  inheritanceRule: ControlObjectInheritanceRule;\n  blastRadius: ControlObjectBlastRadius;\n};\n\n/** Full ownership matrix keyed by control object kind. */\nexport type ControlObjectOwnershipMatrix = Record<\n  ControlObjectKind,\n  readonly ControlObjectOwnershipCase[]\n>;\n\n/** Versioned ownership contract bundling all enums, the matrix, and flattened rows. */\nexport type ControlObjectOwnershipContract = {\n  version: \"1.0.0\";\n  kinds: readonly ControlObjectKind[];\n  ownerScopes: readonly ControlObjectOwnerScope[];\n  editSurfaces: readonly ControlObjectEditSurface[];\n  inheritanceRules: readonly ControlObjectInheritanceRule[];\n  blastRadii: readonly ControlObjectBlastRadius[];\n  matrix: ControlObjectOwnershipMatrix;\n  rows: readonly ControlObjectOwnershipCase[];\n};\n\nfunction defineCases<const T extends readonly ControlObjectOwnershipCase[]>(\n  cases: T\n): T {\n  return cases;\n}\n\n/** Static ownership matrix mapping each control object kind to its ownership cases. */\nexport const CONTROL_OBJECT_OWNERSHIP_MATRIX = {\n  tenant: defineCases([\n    {\n      caseKey: \"platform-record\",\n      caseLabel: \"Platform Record\",\n      kind: \"tenant\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"none\",\n      blastRadius: \"tenant\",\n    },\n  ]),\n  workspace: defineCases([\n    {\n      caseKey: \"tenant-workspace\",\n      caseLabel: \"Tenant Workspace\",\n      kind: \"workspace\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"tenant_default_to_workspace\",\n      blastRadius: \"workspace\",\n    },\n  ]),\n  principal: defineCases([\n    {\n      caseKey: \"tenant-principal\",\n      caseLabel: \"Tenant Principal\",\n      kind: \"principal\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"workspace_narrowing_only\",\n      blastRadius: \"resource\",\n    },\n  ]),\n  tool: defineCases([\n    {\n      caseKey: \"platform-core\",\n      caseLabel: \"Platform Core\",\n      kind: \"tool\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"tenant-custom\",\n      caseLabel: \"Tenant Custom\",\n      kind: \"tool\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"tenant_default_to_workspace\",\n      blastRadius: \"tenant\",\n    },\n  ]),\n  pack: defineCases([\n    {\n      caseKey: \"platform-definition\",\n      caseLabel: \"Platform Definition\",\n      kind: \"pack\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"tenant-installation\",\n      caseLabel: \"Tenant Installation\",\n      kind: \"pack\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"tenant\",\n    },\n  ]),\n  ontology: defineCases([\n    {\n      caseKey: \"platform-base\",\n      caseLabel: \"Platform Base\",\n      kind: \"ontology\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"pack-overlay\",\n      caseLabel: \"Pack Overlay\",\n      kind: \"ontology\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"pack_overlay_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"tenant-extension\",\n      caseLabel: \"Tenant Extension\",\n      kind: \"ontology\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"topic_lineage_to_resource\",\n      blastRadius: \"tenant\",\n    },\n  ]),\n  belief: defineCases([\n    {\n      caseKey: \"topic-resource\",\n      caseLabel: \"Topic Resource\",\n      kind: \"belief\",\n      canonicalOwnerScope: \"resource\",\n      editSurface: \"graph_worktree\",\n      inheritanceRule: \"topic_lineage_to_resource\",\n      blastRadius: \"resource\",\n    },\n  ]),\n  policy_rule: defineCases([\n    {\n      caseKey: \"platform-baseline\",\n      caseLabel: \"Platform Baseline\",\n      kind: \"policy_rule\",\n      canonicalOwnerScope: \"platform\",\n      editSurface: \"platform_admin\",\n      inheritanceRule: \"platform_seed_to_tenant\",\n      blastRadius: \"platform\",\n    },\n    {\n      caseKey: \"tenant-bundle\",\n      caseLabel: \"Tenant Bundle\",\n      kind: \"policy_rule\",\n      canonicalOwnerScope: \"tenant\",\n      editSurface: \"tenant_admin\",\n      inheritanceRule: \"tenant_default_to_workspace\",\n      blastRadius: \"tenant\",\n    },\n    {\n      caseKey: \"workspace-override\",\n      caseLabel: \"Workspace Override\",\n      kind: \"policy_rule\",\n      canonicalOwnerScope: \"workspace\",\n      editSurface: \"workspace_admin\",\n      inheritanceRule: \"none\",\n      blastRadius: \"workspace\",\n    },\n  ]),\n} as const satisfies ControlObjectOwnershipMatrix;\n\nfunction flattenOwnershipMatrix(\n  matrix: ControlObjectOwnershipMatrix\n): ControlObjectOwnershipCase[] {\n  return CONTROL_OBJECT_KINDS.flatMap((kind) => [...matrix[kind]]);\n}\n\n/** Flattened array of all ownership cases across all control object kinds. */\nexport const CONTROL_OBJECT_OWNERSHIP_ROWS = Object.freeze(\n  flattenOwnershipMatrix(CONTROL_OBJECT_OWNERSHIP_MATRIX)\n);\n\n/** The canonical ownership contract exposed by the SDK. */\nexport const CONTROL_OBJECT_OWNERSHIP_CONTRACT = {\n  version: \"1.0.0\",\n  kinds: CONTROL_OBJECT_KINDS,\n  ownerScopes: CONTROL_OBJECT_OWNER_SCOPES,\n  editSurfaces: CONTROL_OBJECT_EDIT_SURFACES,\n  inheritanceRules: CONTROL_OBJECT_INHERITANCE_RULES,\n  blastRadii: CONTROL_OBJECT_BLAST_RADII,\n  matrix: CONTROL_OBJECT_OWNERSHIP_MATRIX,\n  rows: CONTROL_OBJECT_OWNERSHIP_ROWS,\n} as const satisfies ControlObjectOwnershipContract;\n\n/**\n * List ownership cases for one control-object kind or the full matrix.\n */\nexport function listControlObjectOwnershipCases(\n  kind?: ControlObjectKind\n): readonly ControlObjectOwnershipCase[] {\n  if (!kind) {\n    return CONTROL_OBJECT_OWNERSHIP_ROWS;\n  }\n  return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind];\n}\n\n/**\n * Get a specific ownership case by kind and case key.\n */\nexport function getControlObjectOwnershipCase(\n  kind: ControlObjectKind,\n  caseKey: string\n): ControlObjectOwnershipCase | undefined {\n  return CONTROL_OBJECT_OWNERSHIP_MATRIX[kind].find(\n    (ownershipCase) => ownershipCase.caseKey === caseKey\n  );\n}\n"]}