@operato/ops-contract 0.9.16 → 0.9.19

package/README.md

@@ -14,6 +14,64 @@ IEC 61850 · ISO 50001    전기 계통과 성과지표
 
 여기 없는 것은 **정책과 엔진**입니다. 그 사실로 무엇을 할지는 `@operato/twin-kernel` 이 정합니다.
 
+## 제품 간 AI 분석 입력 — `OperationalAttentionV1`
+
+`OperationalAttentionV1`은 Plant·WMS·YMS·EMS가 자신이 관측한 운영 주의 사실을 Twin 또는 AI 분석기에
+보낼 때 쓰는 공통 봉투입니다. 국제 표준의 알람 포맷을 새로 만드는 것이 아닙니다. EPCIS/ISA-95 등의
+원본 사실을 **어떤 제품이, 어떤 근거로, 무엇을 분석 대상으로 열었거나 닫았는지** 안전하게 전달하는
+Operato의 제품 간 계약입니다.
+
+```ts
+import {
+  OPERATIONAL_ATTENTION_CONTRACT,
+  assertOperationalAttentionV1,
+  type OperationalAttentionV1
+} from '@operato/ops-contract'
+
+const attention: OperationalAttentionV1 = {
+  contract: OPERATIONAL_ATTENTION_CONTRACT,
+  domainId: 'factory-a',
+  attentionId: 'schedule-overdue:line-a:101',
+  dedupeKey: 'schedule-overdue:line-a:101',
+  kind: 'plant.schedule-overdue',
+  subjectLabel: 'Line A schedule 101',
+  transition: 'opened',
+  impact: 'high',
+  observedAt: '2026-09-12T01:00:00.000Z',
+  evidenceFingerprint: 'sha256:...',
+  facts: [{ system: 'operato-plant', type: 'schedule-entry', id: '101' }]
+}
+
+assertOperationalAttentionV1(attention)
+```
+
+### 공통으로 고정한 것
+
+- 식별·재전송: `attentionId`, `dedupeKey`
+- 분석 수명주기: `opened`, `changed`, `resolved`, `reopened`
+- 분석 우선순위: `medium`, `high`
+- 근거: 최소 하나 이상의 안정된 `{ system, type, id }` 원본 사실 참조와 `evidenceFingerprint`
+
+사람이 읽는 제목만 있고 원본 사실 ID가 없는 입력은 거부합니다. AI가 그럴듯한 설명을 만들더라도
+근거를 다시 열어 볼 수 없으면 운영 분석의 입력이 될 수 없기 때문입니다.
+
+### 제품별로 남기는 것
+
+`kind`와 `facts[].type`은 생산자가 소유합니다. 예를 들어 Plant는 `plant.schedule-overdue`, WMS는
+`wms.short-pick`을 쓰며 서로의 업무 모델을 흉내 내지 않습니다. 또한 `acknowledged`, `suppressed`,
+승인, 실제 조치 결과는 생산 제품의 업무 흐름에 남습니다. 이 계약은 분석에 필요한 **사실 변화**만
+전달하며, 수신자가 현장을 조치할 권한을 주지 않습니다.
+
+새 제품이 붙을 때는 공통 봉투를 넓히기 전에 그 제품의 adapter에서 자기 `kind`·사실 유형·판정 기준을
+검증합니다. 모든 제품이 실제로 공유하는 필드만 이 계약에 추가합니다.
+
+### 기존 webhook을 통한 전송
+
+새 URL은 만들지 않는다. attention도 기존 `POST /domain/{domain}/twin/hook/{source}/{instanceId}`로 보내며,
+봉투의 `lane: 'ATTENTIONS'`가 Twin의 AI inbox 경로를 고른다. `scope`는 계속 원천의 순번 흐름 이름이며
+`lane`과 합치지 않는다. `lane`을 생략한 기존 커넥터는 `FACTS`로 읽혀 기존 canonical ingest 경로를 그대로
+쓴다. 따라서 주소·서명·재시도·순번 규약은 하나이고, 사실과 attention의 저장·처리만 Twin 내부에서 갈린다.
+
 ## 왜 나뉘어 있나
 
 사실을 **만드는 쪽**(MES · 커넥터)은 계약만 필요하고 엔진은 필요 없습니다. 한 패키지에 두면 레코드

package/dist/contract.d.ts

@@ -32,38 +32,72 @@ export interface CanonicalEnvelope<T = unknown> {
      */
     description?: string;
     /**
-     * **이 사실이 실제로 일어난 것인가** — 보내는 쪽만 답할 수 있다.
+     * **Whether this fact actually happened** — only the sending side can answer.
+     *
+     * ── Why this exists (measured 2026-09-09) ─────────────────────────────────
+     * The twin's journal held 1,134 rows, every one of them produced by a generator, and nothing
+     * in it said so. The screens compute yield and utilisation from those rows and had no way to
+     * mention it.
+     *
+     * The only signal was the sender's naming convention — `SIM-`, `WO-SIM-` — and the column that
+     * convention reaches was empty on half the rows: **558 of 1,134 were recognisable.** A
+     * convention belongs to whoever writes it, and a receiver that depends on one is wrong the day
+     * it changes.
+     *
+     * ── Why the twin does not judge this itself ───────────────────────────────
+     * **It has nothing to judge from.** A generator arrives through the same door, in the same
+     * shape, as a real system. What the twin knows is which connection a fact came through;
+     * whether that connection reads a factory or invents one is knowable only at that end.
+     *
+     * So this is a declaration: the side that invents says it invents.
+     *
+     * ── Absent is not `actual` ────────────────────────────────────────────────
+     * Empty means **not declared**, which is not "it happened". Reading the two as the same thing
+     * is the defect: a generator that omits the field has its output counted as production, and
+     * nothing says so.
+     *
+     * Nor is every real source required to declare `actual` — that adds a line to each connector
+     * and makes the ones that forget look fabricated. **Only the exception is declared**, and a
+     * reader distinguishes three states: declared simulated, declared actual, not declared.
+     *
+     * ── The kernel does not decide anything on this ───────────────────────────
+     * It carries it. Whether performance figures exclude simulated facts is **the reader's**
+     * decision; excluding them in the kernel would erase the answer of whoever ran a simulation
+     * to predict something.
+     *
+     * ── Why the envelope ──────────────────────────────────────────────────────
+     * The same reason as `description` — it is a fact **about a past event**, not about current
+     * state. And it does not go inside the EPCIS event: the standard has no such field, and
+     * inventing a name in there would take that event outside the standard. The envelope is ours,
+     * and the journal keeps the envelope as it arrived.
+     *
+     * ── ⚠ Do not put lineage in this field ───────────────────────────────────
+     * `provenance` normally means a chain. In art it is the record of ownership; in computing it
+     * is the record of **who, which system, and which activity produced a piece of data**
+     * (W3C PROV). The word was chosen because its purpose matches this one: telling the genuine
+     * from the forged.
+     *
+     * **But this field is one bit of that chain** — it answers "did it happen" and nothing else.
+     * The name promises a chain and hands over a flag, which leaves exactly one risk: that someone
+     * later reasons "it is called provenance, so the lineage goes here". Then this field becomes
+     * the home of a different concept, and code already splitting performance figures on it
+     * receives a value whose shape changed (ADR-0041 — a name fitting is not the same as a place
+     * fitting).
+     *
+     * So do not widen it. **Open a new place.**
      *
-     * ── 왜 필요한가 (2026-09-09 실측) ─────────────────────────────────────────
-     * 트윈 저널 1,134건이 전부 발생기가 만든 실적이었고, **저널에 그렇다고 말하는 자리가 없었다.**
-     * 화면의 성과·수율·가동률이 그 수로 계산되는데, 화면이 그 사실을 말할 방법이 없다.
-     *
-     * 가릴 수 있는 단서가 이름 규약뿐이었다 — 발생기가 `SIM-`·`WO-SIM-` 을 붙인다. 그런데 그 규약이
-     * 닿는 칸(`order_id`)이 절반은 비어 있어서 **1,134 중 558 만 갈렸다.** 규약은 보내는 쪽의 것이고,
-     * 받는 쪽이 그것에 기대면 규약이 바뀌는 날 조용히 틀린다.
-     *
-     * ── 왜 트윈이 스스로 판정하지 않나 ────────────────────────────────────────
-     * **판정할 근거가 없다.** 발생기는 실 시스템과 같은 문으로, 같은 모양으로 보낸다. 트윈이 아는 것은
-     * 「어느 연결로 들어왔나」까지이고, 그 연결이 실 공장을 읽는지 지어내는지는 그쪽만 안다.
-     *
-     * 그래서 이 값은 **선언**이다. 지어내는 쪽이 지어낸다고 말한다.
-     *
-     * ── 없음은 `actual` 이 아니다 ─────────────────────────────────────────────
-     * 비어 있으면 **선언되지 않았다**는 뜻이고, 「실제로 일어났다」가 아니다. 둘을 같게 읽으면 발생기가
-     * 이 칸을 잊는 순간 그 수가 실적으로 계산되고, 아무것도 그렇다고 말하지 않는다.
-     *
-     * 모든 실 원본에 `actual` 을 요구하지도 않는다 — 그러면 붙는 쪽마다 한 줄이 늘고, 잊은 곳이
-     * 「지어낸 것」으로 보인다. **선언하는 것은 예외뿐**이고, 읽는 쪽은 셋을 구별해 말한다:
-     * 지어낸 것 · 실제라고 선언된 것 · 선언되지 않은 것.
-     *
-     * ── 커널은 이 값으로 판단하지 않는다 ──────────────────────────────────────
-     * 나르기만 한다. 성과 계산에서 지어낸 것을 뺄지는 **읽는 쪽의 결정**이고, 커널이 미리 빼면
-     * 시뮬레이션으로 무엇을 예측하려던 사람의 답이 사라진다.
+     * ```
+     * did it happen                      this field
+     * which connection did it arrive on  a separate place — none yet; the twin knows this, it is
+     *                                    not a declaration
+     * when did we learn it (late?)       a separate axis — that is backfill, and a backfilled
+     *                                    fact is not simulated
+     * is the value correct               a separate axis — `rejected` and `errors` answer it
+     * ```
      *
-     * ── 왜 봉투인가 ───────────────────────────────────────────────────────────
-     * `description` 과 같은 이유다 — **지난 사건에 대한 사실**이고 지금 상태에 대한 사실이 아니다.
-     * 그리고 EPCIS 사건 안에 넣지 않는다: 표준에 그 칸이 없고, 이름을 지어 넣으면 그 사건이 표준을
-     * 벗어난다. 봉투는 우리 것이고, 지난 기록에는 봉투가 그대로 남는다.
+     * Adding a value follows the same discipline. If a third one seems necessary, ask first
+     * whether it answers "did it happen" — usually it does not, and then it is one of the rows
+     * above.
      */
     provenance?: 'actual' | 'simulated';
     data: T;

package/dist/index.d.ts

@@ -25,3 +25,4 @@ export * from './yield.ts';
 export * from './reliability.ts';
 export * from './erp.ts';
 export * from './actuation.ts';
+export * from './operational-attention.ts';

package/dist/index.js

@@ -48,3 +48,4 @@ export * from "./yield.js";
 export * from "./reliability.js";
 export * from "./erp.js";
 export * from "./actuation.js";
+export * from "./operational-attention.js";

package/dist/operational-attention.d.ts

@@ -0,0 +1,43 @@
+import type { ISOTime } from './contract.ts';
+/**
+ * Product-neutral evidence for an operational concern that another product's
+ * Twin/AI may analyse. It is not an alarm protocol and never authorises work.
+ *
+ * A producer owns how it detects and manages an attention. Consumers receive
+ * only its evidence-backed lifecycle change; acknowledgement, suppression,
+ * approval, and outcome remain in the producer's workflow.
+ */
+export declare const OPERATIONAL_ATTENTION_CONTRACT: "operational.attention.v1";
+export declare const OPERATIONAL_ATTENTION_TRANSITIONS: readonly ["opened", "changed", "resolved", "reopened"];
+export declare const OPERATIONAL_ATTENTION_IMPACTS: readonly ["medium", "high"];
+export type OperationalAttentionTransition = (typeof OPERATIONAL_ATTENTION_TRANSITIONS)[number];
+export type OperationalAttentionImpact = (typeof OPERATIONAL_ATTENTION_IMPACTS)[number];
+/** Stable reference to a fact held by the producing product. */
+export interface OperationalFactReference {
+    /** Product/system that owns the source fact, e.g. operato-plant or operato-wms. */
+    system: string;
+    /** Producer-owned entity vocabulary, e.g. schedule-entry or inventory. */
+    type: string;
+    id: string;
+    observedAt?: ISOTime;
+    label?: string;
+}
+export interface OperationalAttentionV1 {
+    contract: typeof OPERATIONAL_ATTENTION_CONTRACT;
+    domainId: string;
+    /** Stable producer identifier; unchanged across lifecycle updates. */
+    attentionId: string;
+    dedupeKey: string;
+    /** Producer-owned, namespaced reason code (for example plant.schedule-overdue). */
+    kind: string;
+    subjectLabel: string;
+    transition: OperationalAttentionTransition;
+    impact: OperationalAttentionImpact;
+    observedAt: ISOTime;
+    /** Deterministic hash of the evidence used for this particular observation. */
+    evidenceFingerprint: string;
+    /** At least one stable producer fact is mandatory; labels alone are not evidence. */
+    facts: OperationalFactReference[];
+}
+export declare function isOperationalAttentionV1(value: unknown): value is OperationalAttentionV1;
+export declare function assertOperationalAttentionV1(value: unknown): asserts value is OperationalAttentionV1;

package/dist/operational-attention.js

@@ -0,0 +1,35 @@
+/**
+ * Product-neutral evidence for an operational concern that another product's
+ * Twin/AI may analyse. It is not an alarm protocol and never authorises work.
+ *
+ * A producer owns how it detects and manages an attention. Consumers receive
+ * only its evidence-backed lifecycle change; acknowledgement, suppression,
+ * approval, and outcome remain in the producer's workflow.
+ */
+export const OPERATIONAL_ATTENTION_CONTRACT = 'operational.attention.v1';
+export const OPERATIONAL_ATTENTION_TRANSITIONS = ['opened', 'changed', 'resolved', 'reopened'];
+export const OPERATIONAL_ATTENTION_IMPACTS = ['medium', 'high'];
+export function isOperationalAttentionV1(value) {
+    const one = value;
+    return !!one && typeof one === 'object' &&
+        one.contract === OPERATIONAL_ATTENTION_CONTRACT &&
+        nonEmpty(one.domainId) && nonEmpty(one.attentionId) && nonEmpty(one.dedupeKey) &&
+        nonEmpty(one.kind) && nonEmpty(one.subjectLabel) && nonEmpty(one.observedAt) && nonEmpty(one.evidenceFingerprint) &&
+        OPERATIONAL_ATTENTION_TRANSITIONS.includes(one.transition) &&
+        OPERATIONAL_ATTENTION_IMPACTS.includes(one.impact) &&
+        Array.isArray(one.facts) && one.facts.length > 0 && one.facts.every(isOperationalFactReference);
+}
+export function assertOperationalAttentionV1(value) {
+    if (!isOperationalAttentionV1(value)) {
+        throw new Error('invalid operational.attention.v1: lifecycle fields and stable source-fact references are required');
+    }
+}
+function isOperationalFactReference(value) {
+    const one = value;
+    return !!one && typeof one === 'object' && nonEmpty(one.system) && nonEmpty(one.type) && nonEmpty(one.id) &&
+        (one.observedAt === undefined || nonEmpty(one.observedAt)) &&
+        (one.label === undefined || nonEmpty(one.label));
+}
+function nonEmpty(value) {
+    return typeof value === 'string' && value.trim().length > 0;
+}

package/dist/webhook.d.ts

@@ -30,6 +30,18 @@ export declare const WEBHOOK_STATUS: {
     readonly notLive: 503;
 };
 export type WebhookStatus = (typeof WEBHOOK_STATUS)[keyof typeof WEBHOOK_STATUS];
+/**
+ * A webhook lane says what the envelope is for; it is deliberately separate
+ * from `scope`, which names the producer's sequence stream.
+ *
+ * Omitting it means FACTS so every existing connector remains compatible.
+ */
+export declare const WEBHOOK_LANE: {
+    readonly facts: "FACTS";
+    readonly attentions: "ATTENTIONS";
+};
+export type WebhookLane = (typeof WEBHOOK_LANE)[keyof typeof WEBHOOK_LANE];
+export declare function webhookLaneOf(value: unknown): WebhookLane | undefined;
 /**
  * 그 응답을 받은 뒤 보내는 쪽이 할 일.
  *
@@ -217,6 +229,11 @@ export interface WebhookEnvelope {
     seq: number;
     /** 번호를 매기는 단위의 이름. 보내는 쪽이 정하고 받는 쪽은 열쇠로만 다룬다. */
     scope: string;
+    /**
+     * Delivery purpose. `scope` remains the source-owned numbering stream;
+     * `lane` selects the receiver path. Missing means `FACTS` for compatibility.
+     */
+    lane?: WebhookLane;
     /** 멱등 키. 같은 값이 두 번 와도 결과가 같아야 한다. */
     eventId?: string;
     /** 사실이 일어난 시각. */

package/dist/webhook.js

@@ -45,6 +45,23 @@ export const WEBHOOK_STATUS = {
     unsupported: 501,
     notLive: 503
 };
+/**
+ * A webhook lane says what the envelope is for; it is deliberately separate
+ * from `scope`, which names the producer's sequence stream.
+ *
+ * Omitting it means FACTS so every existing connector remains compatible.
+ */
+export const WEBHOOK_LANE = {
+    facts: 'FACTS',
+    attentions: 'ATTENTIONS'
+};
+export function webhookLaneOf(value) {
+    return value === undefined || value === WEBHOOK_LANE.facts
+        ? WEBHOOK_LANE.facts
+        : value === WEBHOOK_LANE.attentions
+            ? WEBHOOK_LANE.attentions
+            : undefined;
+}
 /**
  * 응답 코드 → 보내는 쪽의 행동. **모르는 코드도 답을 낸다.**
  *

package/dist-cjs/index.cjs

@@ -58,6 +58,9 @@ __export(index_exports, {
   MES_TYPES: () => MES_TYPES,
   METER_DIRECTION: () => METER_DIRECTION,
   OBSERVATION_BASIS: () => OBSERVATION_BASIS,
+  OPERATIONAL_ATTENTION_CONTRACT: () => OPERATIONAL_ATTENTION_CONTRACT,
+  OPERATIONAL_ATTENTION_IMPACTS: () => OPERATIONAL_ATTENTION_IMPACTS,
+  OPERATIONAL_ATTENTION_TRANSITIONS: () => OPERATIONAL_ATTENTION_TRANSITIONS,
   OP_EVENT: () => OP_EVENT,
   OP_PARAM: () => OP_PARAM,
   ORDER_TERMINAL_STATUS: () => ORDER_TERMINAL_STATUS,
@@ -72,6 +75,7 @@ __export(index_exports, {
   UTC_OFFSET: () => UTC_OFFSET,
   VOCABULARY_EXCEPTIONS: () => VOCABULARY_EXCEPTIONS,
   VOCABULARY_TYPE: () => VOCABULARY_TYPE,
+  WEBHOOK_LANE: () => WEBHOOK_LANE,
   WEBHOOK_SECRET_BASE: () => WEBHOOK_SECRET_BASE,
   WEBHOOK_SECRET_NAME_SHAPE: () => WEBHOOK_SECRET_NAME_SHAPE,
   WEBHOOK_STATUS: () => WEBHOOK_STATUS,
@@ -88,6 +92,7 @@ __export(index_exports, {
   analyzeCapacity: () => analyzeCapacity,
   approveCommand: () => approveCommand,
   asApproved: () => asApproved,
+  assertOperationalAttentionV1: () => assertOperationalAttentionV1,
   axesOfSystem: () => axesOfSystem,
   axisAppliesTo: () => axisAppliesTo,
   axisInfo: () => axisInfo,
@@ -154,6 +159,7 @@ __export(index_exports, {
   isEquipmentStatus: () => isEquipmentStatus,
   isFailureStatus: () => isFailureStatus,
   isMasterDataRecord: () => isMasterDataRecord,
+  isOperationalAttentionV1: () => isOperationalAttentionV1,
   isOperationalRecord: () => isOperationalRecord,
   isOrderTerminal: () => isOrderTerminal,
   isPlannedStopStatus: () => isPlannedStopStatus,
@@ -222,6 +228,7 @@ __export(index_exports, {
   validateEpcisEvent: () => validateEpcisEvent,
   validatePerformance: () => validatePerformance,
   validateScenario: () => validateScenario,
+  webhookLaneOf: () => webhookLaneOf,
   webhookSecretCandidates: () => webhookSecretCandidates,
   webhookSecretEnvName: () => webhookSecretEnvName,
   webhookSecretFrom: () => webhookSecretFrom,
@@ -4050,6 +4057,13 @@ var WEBHOOK_STATUS = {
   unsupported: 501,
   notLive: 503
 };
+var WEBHOOK_LANE = {
+  facts: "FACTS",
+  attentions: "ATTENTIONS"
+};
+function webhookLaneOf(value) {
+  return value === void 0 || value === WEBHOOK_LANE.facts ? WEBHOOK_LANE.facts : value === WEBHOOK_LANE.attentions ? WEBHOOK_LANE.attentions : void 0;
+}
 function webhookSenderAction(status) {
   switch (status) {
     case WEBHOOK_STATUS.ok:
@@ -4453,6 +4467,27 @@ function commandSpecGaps(specs, command) {
   }
   return gaps;
 }
+
+// src/operational-attention.ts
+var OPERATIONAL_ATTENTION_CONTRACT = "operational.attention.v1";
+var OPERATIONAL_ATTENTION_TRANSITIONS = ["opened", "changed", "resolved", "reopened"];
+var OPERATIONAL_ATTENTION_IMPACTS = ["medium", "high"];
+function isOperationalAttentionV1(value) {
+  const one = value;
+  return !!one && typeof one === "object" && one.contract === OPERATIONAL_ATTENTION_CONTRACT && nonEmpty(one.domainId) && nonEmpty(one.attentionId) && nonEmpty(one.dedupeKey) && nonEmpty(one.kind) && nonEmpty(one.subjectLabel) && nonEmpty(one.observedAt) && nonEmpty(one.evidenceFingerprint) && OPERATIONAL_ATTENTION_TRANSITIONS.includes(one.transition) && OPERATIONAL_ATTENTION_IMPACTS.includes(one.impact) && Array.isArray(one.facts) && one.facts.length > 0 && one.facts.every(isOperationalFactReference);
+}
+function assertOperationalAttentionV1(value) {
+  if (!isOperationalAttentionV1(value)) {
+    throw new Error("invalid operational.attention.v1: lifecycle fields and stable source-fact references are required");
+  }
+}
+function isOperationalFactReference(value) {
+  const one = value;
+  return !!one && typeof one === "object" && nonEmpty(one.system) && nonEmpty(one.type) && nonEmpty(one.id) && (one.observedAt === void 0 || nonEmpty(one.observedAt)) && (one.label === void 0 || nonEmpty(one.label));
+}
+function nonEmpty(value) {
+  return typeof value === "string" && value.trim().length > 0;
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   BIZSTEP,
@@ -4494,6 +4529,9 @@ function commandSpecGaps(specs, command) {
   MES_TYPES,
   METER_DIRECTION,
   OBSERVATION_BASIS,
+  OPERATIONAL_ATTENTION_CONTRACT,
+  OPERATIONAL_ATTENTION_IMPACTS,
+  OPERATIONAL_ATTENTION_TRANSITIONS,
   OP_EVENT,
   OP_PARAM,
   ORDER_TERMINAL_STATUS,
@@ -4508,6 +4546,7 @@ function commandSpecGaps(specs, command) {
   UTC_OFFSET,
   VOCABULARY_EXCEPTIONS,
   VOCABULARY_TYPE,
+  WEBHOOK_LANE,
   WEBHOOK_SECRET_BASE,
   WEBHOOK_SECRET_NAME_SHAPE,
   WEBHOOK_STATUS,
@@ -4524,6 +4563,7 @@ function commandSpecGaps(specs, command) {
   analyzeCapacity,
   approveCommand,
   asApproved,
+  assertOperationalAttentionV1,
   axesOfSystem,
   axisAppliesTo,
   axisInfo,
@@ -4590,6 +4630,7 @@ function commandSpecGaps(specs, command) {
   isEquipmentStatus,
   isFailureStatus,
   isMasterDataRecord,
+  isOperationalAttentionV1,
   isOperationalRecord,
   isOrderTerminal,
   isPlannedStopStatus,
@@ -4658,6 +4699,7 @@ function commandSpecGaps(specs, command) {
   validateEpcisEvent,
   validatePerformance,
   validateScenario,
+  webhookLaneOf,
   webhookSecretCandidates,
   webhookSecretEnvName,
   webhookSecretFrom,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@operato/ops-contract",
-  "version": "0.9.16",
+  "version": "0.9.19",
   "description": "Operations domain contract — the standard vocabulary that producers and readers agree on (EPCIS 2.0/GS1, ISA-95, IEC 61850/ISO 50001). Types, guards, validation. No state, no engine.",
   "type": "module",
   "main": "./dist-cjs/index.cjs",