@odingard/guardian-sdk 0.0.0-stage → 0.2.0

package/dist-dts/contracts/denial.d.ts

@@ -0,0 +1,648 @@
+import { z } from "zod";
+/**
+ * guardian.request_denial.v1 — the decision artifact for a request denied
+ * before the authority kernel produced an ActionDecisionRecord: pre-gate
+ * rule denies, budget denies, and request-shape rejects. It is a denied
+ * decision, never an execution: no capability was issued and nothing ran.
+ *
+ * `action`/`actionDigest` are null when the deny preceded canonical action
+ * creation (e.g. an adapter the state never allowed); the request is still
+ * recorded as denied under its own identity.
+ */
+export declare const RequestDenialRecordCoreSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    kind: z.ZodLiteral<"guardian.request_denial.v1">;
+    tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+    principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+    agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+    requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+    correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+    actionDigest: z.ZodNullable<z.ZodString>;
+    action: z.ZodNullable<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+        correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+        tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+        principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+        action: z.core.$ZodBranded<z.ZodString, "ActionType", "out">;
+        resource: z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">;
+        interface: z.ZodEnum<{
+            mcp: "mcp";
+            rest: "rest";
+            internal: "internal";
+        }>;
+        valueCents: z.ZodOptional<z.ZodNumber>;
+        merchantId: z.ZodOptional<z.ZodString>;
+        merchantCategory: z.ZodOptional<z.ZodString>;
+        recurring: z.ZodOptional<z.ZodBoolean>;
+        taskId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "TaskId", "out">>;
+        intentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "IntentId", "out">>;
+        planId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PlanId", "out">>;
+        obligations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            type: z.ZodEnum<{
+                log: "log";
+                retain_receipt: "retain_receipt";
+                notify: "notify";
+                delay: "delay";
+                cooling_period: "cooling_period";
+                delete_after_use: "delete_after_use";
+                redact: "redact";
+                encrypt: "encrypt";
+                tokenize: "tokenize";
+                minimize: "minimize";
+                verify_counterparty: "verify_counterparty";
+                verify_resource: "verify_resource";
+                verify_effect: "verify_effect";
+                attest_runtime: "attest_runtime";
+                require_consent: "require_consent";
+                require_location: "require_location";
+                require_device: "require_device";
+                require_network: "require_network";
+                require_contract: "require_contract";
+                step_up: "step_up";
+                second_approver: "second_approver";
+                quorum: "quorum";
+                authenticate: "authenticate";
+            }>;
+            params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>]>>>;
+        }, z.core.$strict>>>;
+        obligationStates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            obligationType: z.ZodEnum<{
+                log: "log";
+                retain_receipt: "retain_receipt";
+                notify: "notify";
+                delay: "delay";
+                cooling_period: "cooling_period";
+                delete_after_use: "delete_after_use";
+                redact: "redact";
+                encrypt: "encrypt";
+                tokenize: "tokenize";
+                minimize: "minimize";
+                verify_counterparty: "verify_counterparty";
+                verify_resource: "verify_resource";
+                verify_effect: "verify_effect";
+                attest_runtime: "attest_runtime";
+                require_consent: "require_consent";
+                require_location: "require_location";
+                require_device: "require_device";
+                require_network: "require_network";
+                require_contract: "require_contract";
+                step_up: "step_up";
+                second_approver: "second_approver";
+                quorum: "quorum";
+                authenticate: "authenticate";
+            }>;
+            state: z.ZodEnum<{
+                satisfied: "satisfied";
+                pending: "pending";
+                failed: "failed";
+                not_applicable: "not_applicable";
+            }>;
+            rule: z.ZodEnum<{
+                OBLIGATION_SATISFIED: "OBLIGATION_SATISFIED";
+                PENDING_POST_ACTION: "PENDING_POST_ACTION";
+                PENDING_TIME: "PENDING_TIME";
+                PENDING_HUMAN: "PENDING_HUMAN";
+                OBLIGATION_PARAMS_INVALID: "OBLIGATION_PARAMS_INVALID";
+                COUNTERPARTY_UNVERIFIED: "COUNTERPARTY_UNVERIFIED";
+                RESOURCE_NOT_COVERED: "RESOURCE_NOT_COVERED";
+                OBLIGATION_VERIFIER_UNAVAILABLE: "OBLIGATION_VERIFIER_UNAVAILABLE";
+            }>;
+            detail: z.ZodOptional<z.ZodString>;
+            dueEpochMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>>;
+        prerequisiteResults: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            prerequisiteType: z.ZodString;
+            state: z.ZodEnum<{
+                satisfied: "satisfied";
+                pending: "pending";
+                failed: "failed";
+                not_applicable: "not_applicable";
+            }>;
+            rule: z.ZodEnum<{
+                BUDGET_EXCEEDED: "BUDGET_EXCEEDED";
+                PENDING_HUMAN: "PENDING_HUMAN";
+                PREREQUISITE_SATISFIED: "PREREQUISITE_SATISFIED";
+                MERCHANT_UNVERIFIED: "MERCHANT_UNVERIFIED";
+                BUDGET_NOT_DECLARED: "BUDGET_NOT_DECLARED";
+                CAPABILITY_NOT_COVERED: "CAPABILITY_NOT_COVERED";
+                ADDRESS_NOT_AUTHORIZED: "ADDRESS_NOT_AUTHORIZED";
+                PREREQUISITE_PARAMS_INVALID: "PREREQUISITE_PARAMS_INVALID";
+                PREREQUISITE_VERIFIER_UNAVAILABLE: "PREREQUISITE_VERIFIER_UNAVAILABLE";
+            }>;
+            detail: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
+        parentActionId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "RequestId", "out">>;
+        sourceEffectId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "AttemptId", "out">>;
+        sequenceMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            ruleId: z.ZodString;
+            effect: z.ZodEnum<{
+                deny: "deny";
+                require_approval: "require_approval";
+            }>;
+            matchedActionRefs: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        lineageMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            dataObjectId: z.core.$ZodBranded<z.ZodString, "DataObjectId", "out">;
+            effectiveClassification: z.ZodEnum<{
+                financial: "financial";
+                internal: "internal";
+                public: "public";
+                pii: "pii";
+                phi: "phi";
+                credential: "credential";
+                confidential: "confidential";
+            }>;
+            effect: z.ZodEnum<{
+                allowed: "allowed";
+                deny: "deny";
+                require_approval: "require_approval";
+            }>;
+            expired: z.ZodBoolean;
+        }, z.core.$strict>>>;
+        runtimeTrustLevel: z.ZodOptional<z.ZodEnum<{
+            T0_UNKNOWN: "T0_UNKNOWN";
+            T1_IDENTIFIED: "T1_IDENTIFIED";
+            T2_VERIFIED: "T2_VERIFIED";
+            T3_ATTESTED: "T3_ATTESTED";
+            T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
+        }>>;
+        enforcementAssurance: z.ZodOptional<z.ZodEnum<{
+            G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
+            G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
+            G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
+            G0_OBSERVED: "G0_OBSERVED";
+            G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
+        }>>;
+        approvalStructures: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            schema: z.ZodLiteral<"guardian.multiparty.v1">;
+            structureId: z.ZodString;
+            members: z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
+            requirement: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"single">;
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"nOfM">;
+                n: z.ZodNumber;
+                members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"unanimous">;
+                members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"roleQuorum">;
+                role: z.ZodString;
+                n: z.ZodNumber;
+                m: z.ZodNumber;
+            }, z.core.$strict>], "kind">;
+            specificRequired: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            veto: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            separationOfDuties: z.ZodOptional<z.ZodObject<{
+                mutuallyExclusive: z.ZodArray<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
+            temporaryApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                expiresAtEpochMs: z.ZodNumber;
+            }, z.core.$strict>>>;
+            delegatedApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                delegatedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            }, z.core.$strict>>>;
+            emergencyApprovers: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            coolingPeriod: z.ZodOptional<z.ZodObject<{
+                seconds: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>>;
+        appliedAuthoritySources: z.ZodOptional<z.ZodObject<{
+            applied: z.ZodArray<z.ZodString>;
+            constraints: z.ZodObject<{
+                allowedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
+                deniedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
+                allowedResources: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">>>;
+                allowedInterfaces: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    mcp: "mcp";
+                    rest: "rest";
+                    internal: "internal";
+                }>>>;
+                maxValueCents: z.ZodOptional<z.ZodNumber>;
+                maxUses: z.ZodOptional<z.ZodNumber>;
+                minRuntimeLevel: z.ZodOptional<z.ZodEnum<{
+                    T0_UNKNOWN: "T0_UNKNOWN";
+                    T1_IDENTIFIED: "T1_IDENTIFIED";
+                    T2_VERIFIED: "T2_VERIFIED";
+                    T3_ATTESTED: "T3_ATTESTED";
+                    T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
+                }>>;
+                minAssuranceLevel: z.ZodOptional<z.ZodEnum<{
+                    G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
+                    G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
+                    G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
+                    G0_OBSERVED: "G0_OBSERVED";
+                    G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
+                }>>;
+                requiredApprovals: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        transaction: z.ZodOptional<z.ZodObject<{
+            schema: z.ZodLiteral<"guardian.transaction.v1">;
+            stages: z.ZodArray<z.ZodEnum<{
+                PROPOSE: "PROPOSE";
+                PREPARE: "PREPARE";
+                AUTHORIZE: "AUTHORIZE";
+                LOCK: "LOCK";
+                COMMIT: "COMMIT";
+                VERIFY: "VERIFY";
+                SETTLE: "SETTLE";
+            }>>;
+            deadlineMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        compensates: z.ZodOptional<z.ZodObject<{
+            transactionId: z.core.$ZodBranded<z.ZodString, "TransactionId", "out">;
+        }, z.core.$strict>>;
+        physicalFacts: z.ZodOptional<z.ZodObject<{
+            zone: z.ZodOptional<z.ZodString>;
+            speed: z.ZodOptional<z.ZodNumber>;
+            force: z.ZodOptional<z.ZodNumber>;
+            payload: z.ZodOptional<z.ZodNumber>;
+            atEpochMs: z.ZodOptional<z.ZodNumber>;
+            humanDistance: z.ZodOptional<z.ZodNumber>;
+            environment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            supervised: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        safetyEnvelopeOutcome: z.ZodOptional<z.ZodObject<{
+            envelopeDigest: z.ZodString;
+            satisfied: z.ZodBoolean;
+            violations: z.ZodArray<z.ZodEnum<{
+                OUT_OF_ZONE: "OUT_OF_ZONE";
+                FORBIDDEN_ZONE: "FORBIDDEN_ZONE";
+                OVER_SPEED: "OVER_SPEED";
+                OVER_FORCE: "OVER_FORCE";
+                OVER_PAYLOAD: "OVER_PAYLOAD";
+                OUTSIDE_TIME_WINDOW: "OUTSIDE_TIME_WINDOW";
+                PROXIMITY_VIOLATION: "PROXIMITY_VIOLATION";
+                ENVIRONMENT_VIOLATION: "ENVIRONMENT_VIOLATION";
+                SUPERVISION_REQUIRED: "SUPERVISION_REQUIRED";
+            }>>;
+            emergencyStopped: z.ZodBoolean;
+            failSafeApplied: z.ZodBoolean;
+        }, z.core.$strict>>;
+        uses: z.ZodNumber;
+        materialParameters: z.ZodPipe<z.ZodUnknown, z.ZodTransform<Readonly<Record<string, import("./canonical-json.js").CanonicalJsonValue>>, unknown>>;
+        initiatingContext: z.ZodEnum<{
+            agent: "agent";
+            user: "user";
+            scheduled: "scheduled";
+            "external-event": "external-event";
+        }>;
+        authority: z.ZodObject<{
+            policy: z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>;
+            evaluatedGrants: z.ZodArray<z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+        issuedAtEpochMs: z.ZodNumber;
+        expiresAtEpochMs: z.ZodNumber;
+        nonce: z.core.$ZodBranded<z.ZodString, "Nonce", "out">;
+        requestedAdapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+        purpose: z.ZodString;
+        materialDigest: z.ZodString;
+    }, z.core.$strict>>;
+    reasonCode: z.ZodString;
+    decidedAtEpochMs: z.ZodNumber;
+}, z.core.$strict>;
+export declare const RequestDenialRecordSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    kind: z.ZodLiteral<"guardian.request_denial.v1">;
+    tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+    principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+    agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+    requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+    correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+    actionDigest: z.ZodNullable<z.ZodString>;
+    action: z.ZodNullable<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+        correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+        tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+        principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+        action: z.core.$ZodBranded<z.ZodString, "ActionType", "out">;
+        resource: z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">;
+        interface: z.ZodEnum<{
+            mcp: "mcp";
+            rest: "rest";
+            internal: "internal";
+        }>;
+        valueCents: z.ZodOptional<z.ZodNumber>;
+        merchantId: z.ZodOptional<z.ZodString>;
+        merchantCategory: z.ZodOptional<z.ZodString>;
+        recurring: z.ZodOptional<z.ZodBoolean>;
+        taskId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "TaskId", "out">>;
+        intentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "IntentId", "out">>;
+        planId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PlanId", "out">>;
+        obligations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            type: z.ZodEnum<{
+                log: "log";
+                retain_receipt: "retain_receipt";
+                notify: "notify";
+                delay: "delay";
+                cooling_period: "cooling_period";
+                delete_after_use: "delete_after_use";
+                redact: "redact";
+                encrypt: "encrypt";
+                tokenize: "tokenize";
+                minimize: "minimize";
+                verify_counterparty: "verify_counterparty";
+                verify_resource: "verify_resource";
+                verify_effect: "verify_effect";
+                attest_runtime: "attest_runtime";
+                require_consent: "require_consent";
+                require_location: "require_location";
+                require_device: "require_device";
+                require_network: "require_network";
+                require_contract: "require_contract";
+                step_up: "step_up";
+                second_approver: "second_approver";
+                quorum: "quorum";
+                authenticate: "authenticate";
+            }>;
+            params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>]>>>;
+        }, z.core.$strict>>>;
+        obligationStates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            obligationType: z.ZodEnum<{
+                log: "log";
+                retain_receipt: "retain_receipt";
+                notify: "notify";
+                delay: "delay";
+                cooling_period: "cooling_period";
+                delete_after_use: "delete_after_use";
+                redact: "redact";
+                encrypt: "encrypt";
+                tokenize: "tokenize";
+                minimize: "minimize";
+                verify_counterparty: "verify_counterparty";
+                verify_resource: "verify_resource";
+                verify_effect: "verify_effect";
+                attest_runtime: "attest_runtime";
+                require_consent: "require_consent";
+                require_location: "require_location";
+                require_device: "require_device";
+                require_network: "require_network";
+                require_contract: "require_contract";
+                step_up: "step_up";
+                second_approver: "second_approver";
+                quorum: "quorum";
+                authenticate: "authenticate";
+            }>;
+            state: z.ZodEnum<{
+                satisfied: "satisfied";
+                pending: "pending";
+                failed: "failed";
+                not_applicable: "not_applicable";
+            }>;
+            rule: z.ZodEnum<{
+                OBLIGATION_SATISFIED: "OBLIGATION_SATISFIED";
+                PENDING_POST_ACTION: "PENDING_POST_ACTION";
+                PENDING_TIME: "PENDING_TIME";
+                PENDING_HUMAN: "PENDING_HUMAN";
+                OBLIGATION_PARAMS_INVALID: "OBLIGATION_PARAMS_INVALID";
+                COUNTERPARTY_UNVERIFIED: "COUNTERPARTY_UNVERIFIED";
+                RESOURCE_NOT_COVERED: "RESOURCE_NOT_COVERED";
+                OBLIGATION_VERIFIER_UNAVAILABLE: "OBLIGATION_VERIFIER_UNAVAILABLE";
+            }>;
+            detail: z.ZodOptional<z.ZodString>;
+            dueEpochMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>>;
+        prerequisiteResults: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            prerequisiteType: z.ZodString;
+            state: z.ZodEnum<{
+                satisfied: "satisfied";
+                pending: "pending";
+                failed: "failed";
+                not_applicable: "not_applicable";
+            }>;
+            rule: z.ZodEnum<{
+                BUDGET_EXCEEDED: "BUDGET_EXCEEDED";
+                PENDING_HUMAN: "PENDING_HUMAN";
+                PREREQUISITE_SATISFIED: "PREREQUISITE_SATISFIED";
+                MERCHANT_UNVERIFIED: "MERCHANT_UNVERIFIED";
+                BUDGET_NOT_DECLARED: "BUDGET_NOT_DECLARED";
+                CAPABILITY_NOT_COVERED: "CAPABILITY_NOT_COVERED";
+                ADDRESS_NOT_AUTHORIZED: "ADDRESS_NOT_AUTHORIZED";
+                PREREQUISITE_PARAMS_INVALID: "PREREQUISITE_PARAMS_INVALID";
+                PREREQUISITE_VERIFIER_UNAVAILABLE: "PREREQUISITE_VERIFIER_UNAVAILABLE";
+            }>;
+            detail: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
+        parentActionId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "RequestId", "out">>;
+        sourceEffectId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "AttemptId", "out">>;
+        sequenceMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            ruleId: z.ZodString;
+            effect: z.ZodEnum<{
+                deny: "deny";
+                require_approval: "require_approval";
+            }>;
+            matchedActionRefs: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        lineageMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            dataObjectId: z.core.$ZodBranded<z.ZodString, "DataObjectId", "out">;
+            effectiveClassification: z.ZodEnum<{
+                financial: "financial";
+                internal: "internal";
+                public: "public";
+                pii: "pii";
+                phi: "phi";
+                credential: "credential";
+                confidential: "confidential";
+            }>;
+            effect: z.ZodEnum<{
+                allowed: "allowed";
+                deny: "deny";
+                require_approval: "require_approval";
+            }>;
+            expired: z.ZodBoolean;
+        }, z.core.$strict>>>;
+        runtimeTrustLevel: z.ZodOptional<z.ZodEnum<{
+            T0_UNKNOWN: "T0_UNKNOWN";
+            T1_IDENTIFIED: "T1_IDENTIFIED";
+            T2_VERIFIED: "T2_VERIFIED";
+            T3_ATTESTED: "T3_ATTESTED";
+            T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
+        }>>;
+        enforcementAssurance: z.ZodOptional<z.ZodEnum<{
+            G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
+            G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
+            G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
+            G0_OBSERVED: "G0_OBSERVED";
+            G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
+        }>>;
+        approvalStructures: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            schema: z.ZodLiteral<"guardian.multiparty.v1">;
+            structureId: z.ZodString;
+            members: z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
+            requirement: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"single">;
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"nOfM">;
+                n: z.ZodNumber;
+                members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"unanimous">;
+                members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"roleQuorum">;
+                role: z.ZodString;
+                n: z.ZodNumber;
+                m: z.ZodNumber;
+            }, z.core.$strict>], "kind">;
+            specificRequired: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            veto: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            separationOfDuties: z.ZodOptional<z.ZodObject<{
+                mutuallyExclusive: z.ZodArray<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
+            temporaryApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                expiresAtEpochMs: z.ZodNumber;
+            }, z.core.$strict>>>;
+            delegatedApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                delegatedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            }, z.core.$strict>>>;
+            emergencyApprovers: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            coolingPeriod: z.ZodOptional<z.ZodObject<{
+                seconds: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>>;
+        appliedAuthoritySources: z.ZodOptional<z.ZodObject<{
+            applied: z.ZodArray<z.ZodString>;
+            constraints: z.ZodObject<{
+                allowedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
+                deniedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
+                allowedResources: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">>>;
+                allowedInterfaces: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    mcp: "mcp";
+                    rest: "rest";
+                    internal: "internal";
+                }>>>;
+                maxValueCents: z.ZodOptional<z.ZodNumber>;
+                maxUses: z.ZodOptional<z.ZodNumber>;
+                minRuntimeLevel: z.ZodOptional<z.ZodEnum<{
+                    T0_UNKNOWN: "T0_UNKNOWN";
+                    T1_IDENTIFIED: "T1_IDENTIFIED";
+                    T2_VERIFIED: "T2_VERIFIED";
+                    T3_ATTESTED: "T3_ATTESTED";
+                    T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
+                }>>;
+                minAssuranceLevel: z.ZodOptional<z.ZodEnum<{
+                    G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
+                    G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
+                    G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
+                    G0_OBSERVED: "G0_OBSERVED";
+                    G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
+                }>>;
+                requiredApprovals: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        transaction: z.ZodOptional<z.ZodObject<{
+            schema: z.ZodLiteral<"guardian.transaction.v1">;
+            stages: z.ZodArray<z.ZodEnum<{
+                PROPOSE: "PROPOSE";
+                PREPARE: "PREPARE";
+                AUTHORIZE: "AUTHORIZE";
+                LOCK: "LOCK";
+                COMMIT: "COMMIT";
+                VERIFY: "VERIFY";
+                SETTLE: "SETTLE";
+            }>>;
+            deadlineMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        compensates: z.ZodOptional<z.ZodObject<{
+            transactionId: z.core.$ZodBranded<z.ZodString, "TransactionId", "out">;
+        }, z.core.$strict>>;
+        physicalFacts: z.ZodOptional<z.ZodObject<{
+            zone: z.ZodOptional<z.ZodString>;
+            speed: z.ZodOptional<z.ZodNumber>;
+            force: z.ZodOptional<z.ZodNumber>;
+            payload: z.ZodOptional<z.ZodNumber>;
+            atEpochMs: z.ZodOptional<z.ZodNumber>;
+            humanDistance: z.ZodOptional<z.ZodNumber>;
+            environment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            supervised: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        safetyEnvelopeOutcome: z.ZodOptional<z.ZodObject<{
+            envelopeDigest: z.ZodString;
+            satisfied: z.ZodBoolean;
+            violations: z.ZodArray<z.ZodEnum<{
+                OUT_OF_ZONE: "OUT_OF_ZONE";
+                FORBIDDEN_ZONE: "FORBIDDEN_ZONE";
+                OVER_SPEED: "OVER_SPEED";
+                OVER_FORCE: "OVER_FORCE";
+                OVER_PAYLOAD: "OVER_PAYLOAD";
+                OUTSIDE_TIME_WINDOW: "OUTSIDE_TIME_WINDOW";
+                PROXIMITY_VIOLATION: "PROXIMITY_VIOLATION";
+                ENVIRONMENT_VIOLATION: "ENVIRONMENT_VIOLATION";
+                SUPERVISION_REQUIRED: "SUPERVISION_REQUIRED";
+            }>>;
+            emergencyStopped: z.ZodBoolean;
+            failSafeApplied: z.ZodBoolean;
+        }, z.core.$strict>>;
+        uses: z.ZodNumber;
+        materialParameters: z.ZodPipe<z.ZodUnknown, z.ZodTransform<Readonly<Record<string, import("./canonical-json.js").CanonicalJsonValue>>, unknown>>;
+        initiatingContext: z.ZodEnum<{
+            agent: "agent";
+            user: "user";
+            scheduled: "scheduled";
+            "external-event": "external-event";
+        }>;
+        authority: z.ZodObject<{
+            policy: z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>;
+            evaluatedGrants: z.ZodArray<z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+        issuedAtEpochMs: z.ZodNumber;
+        expiresAtEpochMs: z.ZodNumber;
+        nonce: z.core.$ZodBranded<z.ZodString, "Nonce", "out">;
+        requestedAdapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+        purpose: z.ZodString;
+        materialDigest: z.ZodString;
+    }, z.core.$strict>>;
+    reasonCode: z.ZodString;
+    decidedAtEpochMs: z.ZodNumber;
+    recordDigest: z.ZodString;
+}, z.core.$strict>;
+export type RequestDenialRecord = z.infer<typeof RequestDenialRecordSchema>;
+export type CreateRequestDenialResult = {
+    ok: true;
+    record: RequestDenialRecord;
+} | {
+    ok: false;
+    reasonCode: "REQUEST_DENIAL_BINDING_INVALID";
+};
+export declare function createRequestDenialRecord(input: {
+    tenantId: unknown;
+    principalId: unknown;
+    agentId: unknown;
+    requestId: unknown;
+    correlationId: unknown;
+    action: unknown;
+    reasonCode: unknown;
+    decidedAtEpochMs: unknown;
+}): CreateRequestDenialResult;

package/dist-dts/contracts/digest.d.ts

@@ -0,0 +1,2 @@
+export declare function canonicalSha256(value: unknown): string;
+export declare function sha256Text(value: string): string;