@parmana/sdk 1.1.0

package/dist/index.js

@@ -0,0 +1,56 @@
+/**
+ * Parmana TypeScript SDK
+ *
+ * Canonical public API.
+ *
+ * This module defines the complete public surface
+ * of the Parmana TypeScript SDK.
+ */
+// -----------------------------------------------------------------------------
+// SDK Version
+// -----------------------------------------------------------------------------
+export { VERSION } from "./version.js";
+// -----------------------------------------------------------------------------
+// SDK Client
+// -----------------------------------------------------------------------------
+export { ParmanaClient } from "./client/ParmanaClient.js";
+// -----------------------------------------------------------------------------
+// SDK APIs
+// -----------------------------------------------------------------------------
+export { HealthApi } from "./client/HealthApi.js";
+export { ExecutionApi } from "./client/ExecutionApi.js";
+export { VerificationApi } from "./client/VerificationApi.js";
+export { ReplayApi } from "./client/ReplayApi.js";
+export { PolicyApi } from "./client/PolicyApi.js";
+export { RetryStrategy, } from "./config/RetryPolicy.js";
+// -----------------------------------------------------------------------------
+// Transport
+// -----------------------------------------------------------------------------
+export { HttpTransport, } from "./transport/HttpTransport.js";
+// -----------------------------------------------------------------------------
+// Canonical Parmana Domain Model
+// -----------------------------------------------------------------------------
+export * from "./models/index.js";
+// -----------------------------------------------------------------------------
+// SDK Errors
+// -----------------------------------------------------------------------------
+export * from "./errors/ParmanaError.js";
+export * from "./errors/ConfigurationError.js";
+export * from "./errors/ValidationError.js";
+export * from "./errors/AuthenticationError.js";
+export * from "./errors/AuthorizationError.js";
+export * from "./errors/NotFoundError.js";
+export * from "./errors/ConflictError.js";
+export * from "./errors/ExecutionRejectedError.js";
+export * from "./errors/InternalServerError.js";
+export * from "./errors/NetworkError.js";
+export * from "./errors/RateLimitError.js";
+export * from "./errors/ReplayError.js";
+export * from "./errors/TimeoutError.js";
+export * from "./errors/VerificationError.js";
+export { ReceiptApi } from "./client/ReceiptApi.js";
+export { TransactionApi } from "./client/TransactionApi.js";
+export { TrustRecordApi } from "./client/TrustRecordApi.js";
+export { RefusalApi } from "./client/RefusalApi.js";
+export { AuditApi } from "./client/AuditApi.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,gFAAgF;AAChF,cAAc;AACd,gFAAgF;AAEhF,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,gFAAgF;AAChF,aAAa;AACb,gFAAgF;AAEhF,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE1D,gFAAgF;AAChF,WAAW;AACX,gFAAgF;AAEhF,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,SAAS,EAA+B,MAAM,uBAAuB,CAAC;AAc/E,OAAO,EACL,aAAa,GACd,MAAM,yBAAyB,CAAC;AAQjC,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,OAAO,EACL,aAAa,GACd,MAAM,8BAA8B,CAAC;AAEtC,gFAAgF;AAChF,iCAAiC;AACjC,gFAAgF;AAEhF,cAAc,mBAAmB,CAAC;AAElC,gFAAgF;AAChF,aAAa;AACb,gFAAgF;AAEhF,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oCAAoC,CAAC;AACnD,cAAc,iCAAiC,CAAC;AAChD,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/models/audit-event.d.ts

@@ -0,0 +1,15 @@
+/**
+ * A signed caller-authentication audit event, as recorded by
+ * CallerAuditSink (packages/api/src/auth/CallerAuditSink.ts) and
+ * verified by POST /audit/verify. Deliberately a loose bag beyond the
+ * three required fields -- event shapes can diverge on every field past
+ * these, and verification operates on canonical bytes over whatever
+ * object was actually signed, not a specific parsed shape.
+ */
+export interface AuditEvent {
+    readonly type: string;
+    readonly occurredAt: string;
+    readonly route: string;
+    readonly [key: string]: unknown;
+}
+//# sourceMappingURL=audit-event.d.ts.map

package/dist/models/audit-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-event.d.ts","sourceRoot":"","sources":["../../src/models/audit-event.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC"}

package/dist/models/audit-event.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=audit-event.js.map

package/dist/models/audit-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-event.js","sourceRoot":"","sources":["../../src/models/audit-event.ts"],"names":[],"mappings":""}

package/dist/models/authority.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Parmana Authority.
+ *
+ * Human or system authority responsible
+ * for authorizing execution.
+ */
+export interface Authority {
+    readonly authorityId: string;
+    readonly authorityType: string;
+    readonly principalId: string;
+    readonly displayName?: string;
+    readonly issuedAt: Date;
+}
+//# sourceMappingURL=authority.d.ts.map

package/dist/models/authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.d.ts","sourceRoot":"","sources":["../../src/models/authority.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;CACzB"}

package/dist/models/authority.js

@@ -0,0 +1,8 @@
+/**
+ * Parmana Authority.
+ *
+ * Human or system authority responsible
+ * for authorizing execution.
+ */
+export {};
+//# sourceMappingURL=authority.js.map

package/dist/models/authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.js","sourceRoot":"","sources":["../../src/models/authority.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/models/authorization.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Parmana Authorization.
+ *
+ * Authorization granted by an Authority.
+ */
+export interface Authorization {
+    readonly authorizationId: string;
+    readonly authorityId: string;
+    readonly purpose: string;
+    readonly issuedAt: Date;
+    readonly expiresAt?: Date;
+}
+//# sourceMappingURL=authorization.d.ts.map

package/dist/models/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../src/models/authorization.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IAEjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IAExB,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;CAC3B"}

package/dist/models/authorization.js

@@ -0,0 +1,7 @@
+/**
+ * Parmana Authorization.
+ *
+ * Authorization granted by an Authority.
+ */
+export {};
+//# sourceMappingURL=authorization.js.map

package/dist/models/authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../src/models/authorization.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/models/business-transaction.d.ts

@@ -0,0 +1,25 @@
+import type { Authority } from "./authority.js";
+import type { Authorization } from "./authorization.js";
+import type { Intent } from "./intent.js";
+import type { PolicyReference } from "./policy.js";
+export interface BusinessTransactionMetadata {
+    readonly businessTransactionId: string;
+    readonly correlationId?: string;
+    readonly tenantId?: string | null;
+    readonly sourceSystem?: string;
+    readonly submittedBy?: string;
+    readonly submittedAt?: Date;
+}
+export type BusinessTransactionStatus = "RECEIVED" | "POLICY_EVALUATED" | "APPROVED" | "REJECTED" | "OVERRIDDEN" | "EXECUTING" | "EXECUTED" | "FAILED" | "VERIFIED";
+export interface BusinessTransaction {
+    readonly businessTransactionId: string;
+    readonly metadata: BusinessTransactionMetadata;
+    readonly authority: Authority;
+    readonly authorization: Authorization;
+    readonly intent: Intent;
+    readonly policy: PolicyReference;
+    readonly signals: Record<string, unknown>;
+    readonly status: BusinessTransactionStatus;
+    readonly createdAt: Date;
+}
+//# sourceMappingURL=business-transaction.d.ts.map

package/dist/models/business-transaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"business-transaction.d.ts","sourceRoot":"","sources":["../../src/models/business-transaction.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC;CAC7B;AAED,MAAM,MAAM,yBAAyB,GACjC,UAAU,GACV,kBAAkB,GAClB,UAAU,GACV,UAAU,GACV,YAAY,GACZ,WAAW,GACX,UAAU,GACV,QAAQ,GACR,UAAU,CAAC;AAEf,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B"}

package/dist/models/business-transaction.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=business-transaction.js.map

package/dist/models/business-transaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"business-transaction.js","sourceRoot":"","sources":["../../src/models/business-transaction.ts"],"names":[],"mappings":""}

package/dist/models/execution.d.ts

@@ -0,0 +1,36 @@
+import type { PolicyReference } from "./policy.js";
+export type DecisionOutcome = "APPROVED" | "REJECTED";
+export interface Decision {
+    readonly decisionId: string;
+    readonly intentId: string;
+    readonly policy: PolicyReference;
+    readonly signals: Record<string, unknown>;
+    readonly outcome: DecisionOutcome;
+    readonly reason?: string;
+    readonly evaluatedAt: Date;
+}
+export type ExecutionStatus = "PROCESSING" | "COMPLETED" | "FAILED";
+export type ExecutionMode = "SYNC" | "ASYNC";
+export interface Execution {
+    readonly executionId: string;
+    readonly businessTransactionId: string;
+    readonly decision: Decision;
+    readonly status: ExecutionStatus;
+    readonly mode: ExecutionMode;
+    readonly startedAt: Date;
+    /** Present only for terminal executions. */
+    readonly completedAt?: Date;
+    /**
+     * businessTransactionId, action, target, parameters, success,
+     * executedAt, and an optional attributes bag (e.g. Connector SDK
+     * evidence). Left as a generic bag here, same as the real schema
+     * (schemas/common/execution.schema.json), not a nested model.
+     */
+    readonly evidence?: Record<string, unknown>;
+    /**
+     * Execution-specific metadata. Currently populated with
+     * authorizationId when the Execution is APPROVED.
+     */
+    readonly metadata?: Record<string, unknown>;
+}
+//# sourceMappingURL=execution.d.ts.map

package/dist/models/execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.d.ts","sourceRoot":"","sources":["../../src/models/execution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,UAAU,CAAC;AAEtD,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;CAC5B;AAED,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEpE,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,CAAC;AAE7C,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,4CAA4C;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C"}

package/dist/models/execution.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=execution.js.map

package/dist/models/execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.js","sourceRoot":"","sources":["../../src/models/execution.ts"],"names":[],"mappings":""}

package/dist/models/index.d.ts

@@ -0,0 +1,15 @@
+export * from "./audit-event.js";
+export * from "./authority.js";
+export * from "./authorization.js";
+export * from "./business-transaction.js";
+export * from "./execution.js";
+export * from "./intent.js";
+export * from "./override.js";
+export * from "./policy.js";
+export * from "./receipt.js";
+export * from "./refusal-record.js";
+export * from "./replay-result.js";
+export * from "./signature.js";
+export * from "./trust-record.js";
+export * from "./verification.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/models/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/models/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC"}

package/dist/models/index.js

@@ -0,0 +1,15 @@
+export * from "./audit-event.js";
+export * from "./authority.js";
+export * from "./authorization.js";
+export * from "./business-transaction.js";
+export * from "./execution.js";
+export * from "./intent.js";
+export * from "./override.js";
+export * from "./policy.js";
+export * from "./receipt.js";
+export * from "./refusal-record.js";
+export * from "./replay-result.js";
+export * from "./signature.js";
+export * from "./trust-record.js";
+export * from "./verification.js";
+//# sourceMappingURL=index.js.map

package/dist/models/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/models/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC"}

package/dist/models/intent.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Parmana Intent.
+ *
+ * Business intent.
+ */
+export interface Intent {
+    readonly intentId: string;
+    readonly authorizationId: string;
+    readonly action: string;
+    readonly target: string;
+    readonly parameters: Record<string, unknown>;
+    readonly createdAt: Date;
+}
+//# sourceMappingURL=intent.d.ts.map

package/dist/models/intent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent.d.ts","sourceRoot":"","sources":["../../src/models/intent.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IAEjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE7C,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B"}

package/dist/models/intent.js

@@ -0,0 +1,7 @@
+/**
+ * Parmana Intent.
+ *
+ * Business intent.
+ */
+export {};
+//# sourceMappingURL=intent.js.map

package/dist/models/intent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intent.js","sourceRoot":"","sources":["../../src/models/intent.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/models/override.d.ts

@@ -0,0 +1,9 @@
+export interface Override {
+    readonly overrideId: string;
+    readonly businessTransactionId: string;
+    readonly approvedBy: string;
+    readonly reason: string;
+    readonly justification?: string;
+    readonly approvedAt: Date;
+}
+//# sourceMappingURL=override.d.ts.map

package/dist/models/override.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"override.d.ts","sourceRoot":"","sources":["../../src/models/override.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;CAC3B"}

package/dist/models/override.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=override.js.map

package/dist/models/override.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"override.js","sourceRoot":"","sources":["../../src/models/override.ts"],"names":[],"mappings":""}

package/dist/models/policy.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Parmana Policy Reference.
+ *
+ * Versioned policy reference.
+ */
+export interface PolicyReference {
+    readonly name: string;
+    readonly version: string;
+    readonly schemaVersion: string;
+}
+//# sourceMappingURL=policy.d.ts.map

package/dist/models/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/models/policy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC"}

package/dist/models/policy.js

@@ -0,0 +1,7 @@
+/**
+ * Parmana Policy Reference.
+ *
+ * Versioned policy reference.
+ */
+export {};
+//# sourceMappingURL=policy.js.map

package/dist/models/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/models/policy.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/models/receipt.d.ts

@@ -0,0 +1,10 @@
+export interface Receipt {
+    readonly receiptId: string;
+    readonly businessTransactionId: string;
+    readonly trustRecordHash: string;
+    readonly receiptHash: string;
+    readonly issuedAt: Date;
+    readonly algorithm: string;
+    readonly signature: string;
+}
+//# sourceMappingURL=receipt.d.ts.map

package/dist/models/receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.d.ts","sourceRoot":"","sources":["../../src/models/receipt.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B"}

package/dist/models/receipt.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=receipt.js.map

package/dist/models/receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../src/models/receipt.ts"],"names":[],"mappings":""}

package/dist/models/refusal-record.d.ts

@@ -0,0 +1,51 @@
+import type { Decision } from "./execution.js";
+import type { Signature } from "./signature.js";
+/**
+ * The subset of a Business Transaction's Intent a policy decision was
+ * evaluated against. Mirrors @parmana/policy's own IntentSnapshot
+ * shape exactly (target, parameters).
+ */
+export interface RefusalIntentSnapshot {
+    readonly target?: string;
+    readonly parameters?: Record<string, unknown>;
+}
+/**
+ * One boundSignals entry whose declared signal value did not match
+ * the value found at its Intent dot-path. Mirrors
+ * @parmana/policy's SignalIntentBindingViolation shape exactly.
+ */
+export interface RefusalBindingViolation {
+    readonly signalKey: string;
+    readonly intentPath: string;
+    readonly signalValue: unknown;
+    readonly intentValue: unknown;
+}
+/**
+ * Refusal Record (RFC-0021).
+ *
+ * Durable, signed, independently verifiable evidence that a policy
+ * decision REJECTED a transaction -- the REJECT-path counterpart to
+ * ExecutionTrustRecord. At most one RefusalRecord exists per
+ * businessTransactionId.
+ */
+export interface RefusalRecord {
+    readonly refusalRecordId: string;
+    readonly businessTransactionId: string;
+    readonly decision: Decision;
+    readonly evaluatedIntent: RefusalIntentSnapshot;
+    /**
+     * Present only when the rejection came from SignalIntentBinder.
+     * Absent (not an empty array) for an ordinary PolicyEngine.evaluate
+     * REJECT that never reached binding-violation logic at all.
+     */
+    readonly bindingViolations?: readonly RefusalBindingViolation[];
+    /**
+     * Authenticated caller who submitted the rejected request. Absent
+     * when caller-auth is disabled.
+     */
+    readonly submittedBy?: string;
+    readonly refusalRecordHash: string;
+    readonly signature: Signature;
+    readonly createdAt: Date;
+}
+//# sourceMappingURL=refusal-record.d.ts.map

package/dist/models/refusal-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refusal-record.d.ts","sourceRoot":"","sources":["../../src/models/refusal-record.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/C;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,qBAAqB,CAAC;IAChD;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAChE;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B"}

package/dist/models/refusal-record.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=refusal-record.js.map

package/dist/models/refusal-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refusal-record.js","sourceRoot":"","sources":["../../src/models/refusal-record.ts"],"names":[],"mappings":""}

package/dist/models/replay-result.d.ts

@@ -0,0 +1,6 @@
+export interface ReplayResult {
+    readonly businessTransactionId: string;
+    readonly trustRecordHash: string;
+    readonly verified: boolean;
+}
+//# sourceMappingURL=replay-result.d.ts.map

package/dist/models/replay-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-result.d.ts","sourceRoot":"","sources":["../../src/models/replay-result.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B"}

package/dist/models/replay-result.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=replay-result.js.map

package/dist/models/replay-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-result.js","sourceRoot":"","sources":["../../src/models/replay-result.ts"],"names":[],"mappings":""}

package/dist/models/signature.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Parmana Signature.
+ *
+ * Cryptographic signature over a canonical Execution Trust Record,
+ * proving it was produced by Parmana and has not been modified since
+ * signing. See schemas/common/execution-trust-record.schema.json's
+ * `signature` property.
+ */
+export type SignatureAlgorithm = "ed25519" | "ecdsa-p256" | "dilithium3" | "dilithium5" | "sphincs-plus";
+export interface Signature {
+    readonly algorithm: SignatureAlgorithm;
+    readonly keyId: string;
+    readonly value: string;
+    readonly signedAt: Date;
+}
+//# sourceMappingURL=signature.d.ts.map

package/dist/models/signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../../src/models/signature.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,kBAAkB,GAC1B,SAAS,GACT,YAAY,GACZ,YAAY,GACZ,YAAY,GACZ,cAAc,CAAC;AAEnB,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IAEvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;CACzB"}

package/dist/models/signature.js

@@ -0,0 +1,10 @@
+/**
+ * Parmana Signature.
+ *
+ * Cryptographic signature over a canonical Execution Trust Record,
+ * proving it was produced by Parmana and has not been modified since
+ * signing. See schemas/common/execution-trust-record.schema.json's
+ * `signature` property.
+ */
+export {};
+//# sourceMappingURL=signature.js.map

package/dist/models/signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../src/models/signature.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/models/trust-record.d.ts

@@ -0,0 +1,20 @@
+import type { BusinessTransaction } from "./business-transaction.js";
+import type { Execution } from "./execution.js";
+import type { Override } from "./override.js";
+import type { Receipt } from "./receipt.js";
+import type { Signature } from "./signature.js";
+import type { Verification } from "./verification.js";
+export interface ExecutionTrustRecord {
+    readonly trustRecordId: string;
+    readonly businessTransactionId: string;
+    readonly transaction: BusinessTransaction;
+    readonly overrides: Override[];
+    readonly executions: Execution[];
+    readonly verifications: Verification[];
+    readonly receipts: Receipt[];
+    readonly trustRecordHash: string;
+    readonly signature: Signature;
+    readonly createdAt: Date;
+    readonly updatedAt: Date;
+}
+//# sourceMappingURL=trust-record.d.ts.map

package/dist/models/trust-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-record.d.ts","sourceRoot":"","sources":["../../src/models/trust-record.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,YAAY,EAAE,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B"}

package/dist/models/trust-record.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=trust-record.js.map

package/dist/models/trust-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-record.js","sourceRoot":"","sources":["../../src/models/trust-record.ts"],"names":[],"mappings":""}

package/dist/models/verification.d.ts

@@ -0,0 +1,10 @@
+export type VerificationStatus = "VERIFIED" | "FAILED";
+export interface Verification {
+    readonly verificationId: string;
+    readonly businessTransactionId: string;
+    readonly status: VerificationStatus;
+    readonly message?: string;
+    readonly verifiedAt: Date;
+    readonly trustRecordHash: string;
+}
+//# sourceMappingURL=verification.d.ts.map

package/dist/models/verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.d.ts","sourceRoot":"","sources":["../../src/models/verification.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEvD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC"}

package/dist/models/verification.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=verification.js.map

package/dist/models/verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.js","sourceRoot":"","sources":["../../src/models/verification.ts"],"names":[],"mappings":""}

package/dist/transport/HttpTransport.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Parmana SDK
+ *
+ * Canonical HTTP transport.
+ *
+ * Responsibilities:
+ * - Send HTTP requests.
+ * - Serialize request bodies.
+ * - Deserialize responses.
+ * - Return canonical TransportResponse objects.
+ *
+ * This transport does NOT:
+ * - evaluate policy
+ * - authorize execution
+ * - implement business logic
+ */
+import type { Transport, TransportRequest, TransportResponse } from "../config/Transport.js";
+import type { Configuration } from "../config/Configuration.js";
+export declare class HttpTransport implements Transport {
+    private readonly configuration;
+    constructor(configuration: Configuration);
+    send<T>(request: TransportRequest): Promise<TransportResponse<T>>;
+    private attempt;
+}
+//# sourceMappingURL=HttpTransport.d.ts.map

package/dist/transport/HttpTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HttpTransport.d.ts","sourceRoot":"","sources":["../../src/transport/HttpTransport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EACV,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EACV,aAAa,EACd,MAAM,4BAA4B,CAAC;AAmIpC,qBAAa,aACX,YAAW,SAAS;IAGlB,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAAb,aAAa,EAAE,aAAa;IAGlC,IAAI,CAAC,CAAC,EACjB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;YA6BlB,OAAO;CA4ItB"}