@parmana/shared 0.0.0-stage → 0.1.0

package/dist/repositories/execution-intent-repository.d.ts

@@ -0,0 +1,38 @@
+import type { ExecutionIntent, ExecutionIntentFinalizationMode, ExecutionIntentResolution, StoredExecutionIntent } from "../domain/index.js";
+export interface ExecutionIntentResolutionInput {
+    readonly resolution: ExecutionIntentResolution;
+    readonly note: string;
+    readonly resolvedBy?: string;
+    readonly resolvedAt: Date;
+}
+/**
+ * Persistence for Execution Intents (ADR-0012).
+ *
+ * `create` is the fail closed step: the runtime refuses to release an action
+ * if it cannot complete. The `mark*` methods only move operational status and
+ * never touch the signed intent. `markFinalized` must never move a
+ * FINALIZED intent backwards, and every `mark*` is safe to repeat.
+ */
+export interface ExecutionIntentRepository {
+    create(intent: ExecutionIntent): Promise<ExecutionIntent>;
+    findByTransactionId(businessTransactionId: string): Promise<StoredExecutionIntent | null>;
+    /** PREPARED to RELEASED, saving the context needed to rebuild the record. */
+    markReleased(businessTransactionId: string, releasedContext: unknown, releasedAt: Date): Promise<void>;
+    /** Any state except FINALIZED to FINALIZED. */
+    markFinalized(businessTransactionId: string, trustRecordId: string, mode: ExecutionIntentFinalizationMode, finalizedAt: Date): Promise<void>;
+    /** PREPARED to ERRORED. */
+    markErrored(businessTransactionId: string, reason: string): Promise<void>;
+    /**
+     * PREPARED or ERRORED to RESOLVED. Returns true when this call moved the
+     * intent, and false when it was in any other state, so a caller can tell a
+     * lost race from a success. It never moves a RELEASED or FINALIZED intent.
+     */
+    markResolved(businessTransactionId: string, input: ExecutionIntentResolutionInput): Promise<boolean>;
+    /**
+     * Intents that are neither FINALIZED nor RESOLVED, oldest first. Used by
+     * operators to find released actions that have no signed Trust Record, and
+     * actions whose outcome nobody has reconciled yet.
+     */
+    listUnfinalized(limit: number): Promise<readonly StoredExecutionIntent[]>;
+}
+//# sourceMappingURL=execution-intent-repository.d.ts.map

package/dist/repositories/execution-intent-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-intent-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/execution-intent-repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,+BAA+B,EAC/B,yBAAyB,EACzB,qBAAqB,EACtB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAE/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAE1D,mBAAmB,CACjB,qBAAqB,EAAE,MAAM,GAC5B,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IAEzC,6EAA6E;IAC7E,YAAY,CACV,qBAAqB,EAAE,MAAM,EAC7B,eAAe,EAAE,OAAO,EACxB,UAAU,EAAE,IAAI,GACf,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,+CAA+C;IAC/C,aAAa,CACX,qBAAqB,EAAE,MAAM,EAC7B,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,+BAA+B,EACrC,WAAW,EAAE,IAAI,GAChB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,2BAA2B;IAC3B,WAAW,CAAC,qBAAqB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1E;;;;OAIG;IACH,YAAY,CACV,qBAAqB,EAAE,MAAM,EAC7B,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB;;;;OAIG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAAC;CAC3E"}

package/dist/repositories/execution-intent-repository.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=execution-intent-repository.js.map

package/dist/repositories/execution-intent-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-intent-repository.js","sourceRoot":"","sources":["../../src/repositories/execution-intent-repository.ts"],"names":[],"mappings":""}

package/dist/repositories/execution-trust-record-repository.d.ts

@@ -0,0 +1,62 @@
+import { Execution, ExecutionTrustRecord, Override, Receipt, Verification } from "../domain/index.js";
+/**
+ * Repository for immutable
+ * Execution Trust Records.
+ */
+export interface ExecutionTrustRecordRepository {
+    create(record: ExecutionTrustRecord): Promise<ExecutionTrustRecord>;
+    findByTransactionId(businessTransactionId: string): Promise<ExecutionTrustRecord | null>;
+    /**
+     * Appends a new immutable Execution.
+     */
+    appendExecution(businessTransactionId: string, execution: Execution): Promise<void>;
+    /**
+     * @deprecated
+     *
+     * Parmana uses an append-only execution model.
+     *
+     * Execution state transitions must be represented
+     * by appending a new immutable Execution using
+     * appendExecution().
+     *
+     * This method exists only for backward
+     * compatibility and should not be used in new
+     * implementations.
+     */
+    replaceExecution(execution: Execution): Promise<void>;
+    /**
+     * Appends an immutable Override.
+     */
+    appendOverride(businessTransactionId: string, override: Override): Promise<void>;
+    /**
+     * Appends an immutable Verification.
+     */
+    appendVerification(businessTransactionId: string, verification: Verification): Promise<void>;
+    /**
+     * Appends an immutable Receipt.
+     */
+    appendReceipt(businessTransactionId: string, receipt: Receipt): Promise<void>;
+    /**
+     * Sums a numeric field of ExecutionEvidence.parameters across every
+     * successfully executed Execution (status COMPLETED, evidence.success
+     * true) whose evidence.action equals the given action and whose
+     * evidence.executedAt falls within [since, until).
+     *
+     * Reads only already-persisted, already-signed Execution Trust
+     * Record history -- no caller-supplied value influences the result.
+     * Added (TD-23 closure, Phase 3B) as the authoritative,
+     * reconciliation-grade source for cumulative authorization checks
+     * that previously trusted a caller-declared signal; a real-time gate
+     * may separately be enforced by its own atomic counter for reasons
+     * that gate's own callers document, but this method remains the
+     * ground truth to reconcile against.
+     *
+     * Optional: every pre-existing implementation of this interface
+     * (including the several inline test fakes across packages/runtime's
+     * own unit tests) must keep compiling and behaving identically
+     * without adding it. Only MemoryExecutionTrustRecordRepository and
+     * SupabaseExecutionTrustRecordRepository implement it.
+     */
+    sumSuccessfulExecutionAmounts?(action: string, parameterKey: string, since: Date, until: Date): Promise<number>;
+}
+//# sourceMappingURL=execution-trust-record-repository.d.ts.map

package/dist/repositories/execution-trust-record-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-trust-record-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/execution-trust-record-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,oBAAoB,EACpB,QAAQ,EACR,OAAO,EACP,YAAY,EACb,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEpE,mBAAmB,CACjB,qBAAqB,EAAE,MAAM,GAC5B,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IAExC;;OAEG;IACH,eAAe,CACb,qBAAqB,EAAE,MAAM,EAC7B,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;;;;;;;;OAYG;IACH,gBAAgB,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtD;;OAEG;IACH,cAAc,CACZ,qBAAqB,EAAE,MAAM,EAC7B,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;OAEG;IACH,kBAAkB,CAChB,qBAAqB,EAAE,MAAM,EAC7B,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;OAEG;IACH,aAAa,CAAC,qBAAqB,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9E;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,6BAA6B,CAAC,CAC5B,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,IAAI,EACX,KAAK,EAAE,IAAI,GACV,OAAO,CAAC,MAAM,CAAC,CAAC;CACpB"}

package/dist/repositories/execution-trust-record-repository.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=execution-trust-record-repository.js.map

package/dist/repositories/execution-trust-record-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-trust-record-repository.js","sourceRoot":"","sources":["../../src/repositories/execution-trust-record-repository.ts"],"names":[],"mappings":""}

package/dist/repositories/external-connector-repository.d.ts

@@ -0,0 +1,37 @@
+import type { ExternalConnectorChange, ExternalConnectorRegistration } from "../domain/external-connector.js";
+/**
+ * External connectors registered through maker checker, and the
+ * changes that register or revoke them (ADR-0013).
+ */
+export interface ExternalConnectorRepository {
+    /**
+     * The active registration for a capability, or null.
+     */
+    findActive(capability: string): Promise<ExternalConnectorRegistration | null>;
+    /**
+     * Every registration, active and revoked.
+     */
+    listRegistrations(): Promise<readonly ExternalConnectorRegistration[]>;
+    /**
+     * Stores a new PENDING_APPROVAL change. Throws ConflictError when
+     * another change for the same capability is still pending.
+     */
+    createChange(change: ExternalConnectorChange): Promise<ExternalConnectorChange>;
+    findChange(changeId: string): Promise<ExternalConnectorChange | null>;
+    listChanges(status?: ExternalConnectorChange["status"]): Promise<readonly ExternalConnectorChange[]>;
+    /**
+     * Resolves a pending change to APPROVED and applies it, in one step:
+     * register adds an active registration, revoke marks the active one
+     * revoked. Throws ExternalConnectorChangeNotFoundError for an unknown
+     * id, and ConflictError when the change is no longer pending, the
+     * capability to register already has an active registration, or the
+     * capability to revoke has none. Nothing is written when it throws.
+     */
+    approveChange(changeId: string, approvedBy: string, at: Date): Promise<ExternalConnectorChange>;
+    /**
+     * Resolves a pending change to REJECTED. Throws as approveChange does
+     * for an unknown or already resolved change.
+     */
+    rejectChange(changeId: string, rejectedBy: string, rejectionReason: string, at: Date): Promise<ExternalConnectorChange>;
+}
+//# sourceMappingURL=external-connector-repository.d.ts.map

package/dist/repositories/external-connector-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-connector-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/external-connector-repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,iCAAiC,CAAC;AAEzC;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;OAEG;IACH,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CAAC;IAE9E;;OAEG;IACH,iBAAiB,IAAI,OAAO,CAAC,SAAS,6BAA6B,EAAE,CAAC,CAAC;IAEvE;;;OAGG;IACH,YAAY,CACV,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAEpC,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAEtE,WAAW,CACT,MAAM,CAAC,EAAE,uBAAuB,CAAC,QAAQ,CAAC,GACzC,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC,CAAC;IAE/C;;;;;;;OAOG;IACH,aAAa,CACX,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,IAAI,GACP,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAEpC;;;OAGG;IACH,YAAY,CACV,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,eAAe,EAAE,MAAM,EACvB,EAAE,EAAE,IAAI,GACP,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrC"}

package/dist/repositories/external-connector-repository.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=external-connector-repository.js.map

package/dist/repositories/external-connector-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-connector-repository.js","sourceRoot":"","sources":["../../src/repositories/external-connector-repository.ts"],"names":[],"mappings":""}

package/dist/repositories/handbook-download-lead-repository.d.ts

@@ -0,0 +1,18 @@
+export interface HandbookDownloadLead {
+    readonly handbookDownloadLeadId: string;
+    readonly email: string;
+    readonly capturedAt: Date;
+}
+/**
+ * Repository for handbook download leads (docs/site/handbook/download.mdx).
+ *
+ * Deliberately write-mostly: an email address is captured before the
+ * PDF link unlocks, no verification email is sent, so this is a
+ * record of who asked, not a gate behind a confirmed inbox. See
+ * migration 20260916150000_add_handbook_download_leads.sql's own
+ * comment.
+ */
+export interface HandbookDownloadLeadRepository {
+    create(lead: HandbookDownloadLead): Promise<HandbookDownloadLead>;
+}
+//# sourceMappingURL=handbook-download-lead-repository.d.ts.map

package/dist/repositories/handbook-download-lead-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handbook-download-lead-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/handbook-download-lead-repository.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,8BAA8B;IAC7C,MAAM,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACnE"}

package/dist/repositories/handbook-download-lead-repository.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=handbook-download-lead-repository.js.map

package/dist/repositories/handbook-download-lead-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handbook-download-lead-repository.js","sourceRoot":"","sources":["../../src/repositories/handbook-download-lead-repository.ts"],"names":[],"mappings":""}

package/dist/repositories/index.d.ts

@@ -0,0 +1,14 @@
+export * from "./business-transaction-repository.js";
+export * from "./execution-trust-record-repository.js";
+export * from "./execution-intent-repository.js";
+export * from "./refusal-record-repository.js";
+export * from "./challenge-record-repository.js";
+export * from "./policy-repository.js";
+export * from "./pending-policy-change-repository.js";
+export * from "./approval-issuer-repository.js";
+export * from "./external-connector-repository.js";
+export * from "./business-signal-source-repository.js";
+export * from "./authority-grant-repository.js";
+export * from "./policy-change-approval-record-repository.js";
+export * from "./handbook-download-lead-repository.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/repositories/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/repositories/index.ts"],"names":[],"mappings":"AAAA,cAAc,sCAAsC,CAAC;AACrD,cAAc,wCAAwC,CAAC;AACvD,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,wBAAwB,CAAC;AACvC,cAAc,uCAAuC,CAAC;AACtD,cAAc,iCAAiC,CAAC;AAChD,cAAc,oCAAoC,CAAC;AACnD,cAAc,wCAAwC,CAAC;AACvD,cAAc,iCAAiC,CAAC;AAChD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wCAAwC,CAAC"}

package/dist/repositories/index.js

@@ -0,0 +1,14 @@
+export * from "./business-transaction-repository.js";
+export * from "./execution-trust-record-repository.js";
+export * from "./execution-intent-repository.js";
+export * from "./refusal-record-repository.js";
+export * from "./challenge-record-repository.js";
+export * from "./policy-repository.js";
+export * from "./pending-policy-change-repository.js";
+export * from "./approval-issuer-repository.js";
+export * from "./external-connector-repository.js";
+export * from "./business-signal-source-repository.js";
+export * from "./authority-grant-repository.js";
+export * from "./policy-change-approval-record-repository.js";
+export * from "./handbook-download-lead-repository.js";
+//# sourceMappingURL=index.js.map

package/dist/repositories/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/repositories/index.ts"],"names":[],"mappings":"AAAA,cAAc,sCAAsC,CAAC;AACrD,cAAc,wCAAwC,CAAC;AACvD,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,wBAAwB,CAAC;AACvC,cAAc,uCAAuC,CAAC;AACtD,cAAc,iCAAiC,CAAC;AAChD,cAAc,oCAAoC,CAAC;AACnD,cAAc,wCAAwC,CAAC;AACvD,cAAc,iCAAiC,CAAC;AAChD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wCAAwC,CAAC"}

package/dist/repositories/pending-policy-change-repository.d.ts

@@ -0,0 +1,72 @@
+import { PendingPolicyChange, PendingPolicyChangeStatus } from "../domain/index.js";
+/**
+ * One resolution of an existing PENDING_APPROVAL change. Exactly one
+ * of these per `resolve()` call -- mirrors
+ * ChallengeRecordAppendOperation's one-operation-at-a-time shape, for
+ * the same reason: every mutation should be an explicit, individually
+ * reviewable step.
+ */
+export type PendingPolicyChangeResolution = {
+    readonly outcome: "approved";
+    readonly resolvedBy: string;
+} | {
+    readonly outcome: "rejected";
+    readonly resolvedBy: string;
+    readonly rejectionReason: string;
+};
+/**
+ * Repository for Pending Policy Changes (Policy Governance,
+ * maker-checker).
+ */
+export interface PendingPolicyChangeRepository {
+    /**
+     * Creates a new PENDING_APPROVAL change. Throws ConflictError if a
+     * PENDING_APPROVAL change already exists for the same (policyName,
+     * policyVersion) -- enforced by `assertNoConflictingPendingChange`
+     * below, which every implementation should call to keep the check
+     * identical across backends (same pattern
+     * ChallengeRecordRepository already uses for its own append-only
+     * invariants).
+     */
+    create(change: PendingPolicyChange): Promise<PendingPolicyChange>;
+    findById(pendingPolicyChangeId: string): Promise<PendingPolicyChange | null>;
+    /**
+     * The at-most-one PENDING_APPROVAL change for a given
+     * (policyName, policyVersion), or null if none exists.
+     */
+    findPending(policyName: string, policyVersion: string): Promise<PendingPolicyChange | null>;
+    /**
+     * Lists changes, optionally filtered by status. Omitting `status`
+     * returns every change regardless of lifecycle state.
+     */
+    list(status?: PendingPolicyChangeStatus): Promise<readonly PendingPolicyChange[]>;
+    /**
+     * Resolves an existing PENDING_APPROVAL change to APPROVED or
+     * REJECTED. Throws PendingPolicyChangeNotFoundError if no change
+     * exists for the given id, or ConflictError if the change is not
+     * currently PENDING_APPROVAL (see `applyPendingPolicyChangeResolution`,
+     * which every implementation should route through).
+     *
+     * Does NOT enforce maker != checker -- that check requires the
+     * resolving caller's own verified identity, which only the API/auth
+     * layer has. This method resolves whatever `resolvedBy` it is
+     * given.
+     */
+    resolve(pendingPolicyChangeId: string, resolution: PendingPolicyChangeResolution): Promise<PendingPolicyChange>;
+}
+/**
+ * Pure, backend-independent enforcement of the "exactly one
+ * PENDING_APPROVAL per (policyName, policyVersion)" invariant.
+ * Implementations call this with whatever PENDING_APPROVAL change (if
+ * any) they already found for the target (policyName, policyVersion)
+ * before inserting the new one.
+ */
+export declare function assertNoConflictingPendingChange(policyName: string, policyVersion: string, existingPending: PendingPolicyChange | null): void;
+/**
+ * Pure, backend-independent enforcement of
+ * PendingPolicyChangeRepository.resolve's transition rule: only a
+ * PENDING_APPROVAL change may be resolved, and only into a terminal
+ * state, exactly once.
+ */
+export declare function applyPendingPolicyChangeResolution(existing: PendingPolicyChange, resolution: PendingPolicyChangeResolution, resolvedAt: Date): PendingPolicyChange;
+//# sourceMappingURL=pending-policy-change-repository.d.ts.map

package/dist/repositories/pending-policy-change-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-policy-change-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/pending-policy-change-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,oBAAoB,CAAC;AAI5B;;;;;;GAMG;AACH,MAAM,MAAM,6BAA6B,GACrC;IAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC7D;IACE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC,CAAC;AAEN;;;GAGG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;;;;;;;OAQG;IACH,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAElE,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAE7E;;;OAGG;IACH,WAAW,CACT,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAEvC;;;OAGG;IACH,IAAI,CACF,MAAM,CAAC,EAAE,yBAAyB,GACjC,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAC;IAE3C;;;;;;;;;;;OAWG;IACH,OAAO,CACL,qBAAqB,EAAE,MAAM,EAC7B,UAAU,EAAE,6BAA6B,GACxC,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,mBAAmB,GAAG,IAAI,GAC1C,IAAI,CAWN;AAED;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,mBAAmB,EAC7B,UAAU,EAAE,6BAA6B,EACzC,UAAU,EAAE,IAAI,GACf,mBAAmB,CAwBrB"}

package/dist/repositories/pending-policy-change-repository.js

@@ -0,0 +1,46 @@
+import { PendingPolicyChangeStatus, } from "../domain/index.js";
+import { ConflictError } from "../errors/conflict-error.js";
+/**
+ * Pure, backend-independent enforcement of the "exactly one
+ * PENDING_APPROVAL per (policyName, policyVersion)" invariant.
+ * Implementations call this with whatever PENDING_APPROVAL change (if
+ * any) they already found for the target (policyName, policyVersion)
+ * before inserting the new one.
+ */
+export function assertNoConflictingPendingChange(policyName, policyVersion, existingPending) {
+    if (existingPending === null) {
+        return;
+    }
+    throw new ConflictError(`A PENDING_APPROVAL change already exists for policy '${policyName}' version ` +
+        `'${policyVersion}' (pendingPolicyChangeId '${existingPending.pendingPolicyChangeId}'). ` +
+        "It must be approved or rejected before a new proposal against the same policy " +
+        "version can be created.");
+}
+/**
+ * Pure, backend-independent enforcement of
+ * PendingPolicyChangeRepository.resolve's transition rule: only a
+ * PENDING_APPROVAL change may be resolved, and only into a terminal
+ * state, exactly once.
+ */
+export function applyPendingPolicyChangeResolution(existing, resolution, resolvedAt) {
+    if (existing.status !== PendingPolicyChangeStatus.PENDING_APPROVAL) {
+        throw new ConflictError(`Pending Policy Change '${existing.pendingPolicyChangeId}' is already ` +
+            `'${existing.status}' -- only a PENDING_APPROVAL change can be approved or rejected.`);
+    }
+    if (resolution.outcome === "approved") {
+        return {
+            ...existing,
+            status: PendingPolicyChangeStatus.APPROVED,
+            resolvedBy: resolution.resolvedBy,
+            resolvedAt,
+        };
+    }
+    return {
+        ...existing,
+        status: PendingPolicyChangeStatus.REJECTED,
+        resolvedBy: resolution.resolvedBy,
+        resolvedAt,
+        rejectionReason: resolution.rejectionReason,
+    };
+}
+//# sourceMappingURL=pending-policy-change-repository.js.map

package/dist/repositories/pending-policy-change-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-policy-change-repository.js","sourceRoot":"","sources":["../../src/repositories/pending-policy-change-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAsE5D;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAC9C,UAAkB,EAClB,aAAqB,EACrB,eAA2C;IAE3C,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO;IACT,CAAC;IAED,MAAM,IAAI,aAAa,CACrB,wDAAwD,UAAU,YAAY;QAC5E,IAAI,aAAa,6BAA6B,eAAe,CAAC,qBAAqB,MAAM;QACzF,gFAAgF;QAChF,yBAAyB,CAC5B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CAChD,QAA6B,EAC7B,UAAyC,EACzC,UAAgB;IAEhB,IAAI,QAAQ,CAAC,MAAM,KAAK,yBAAyB,CAAC,gBAAgB,EAAE,CAAC;QACnE,MAAM,IAAI,aAAa,CACrB,0BAA0B,QAAQ,CAAC,qBAAqB,eAAe;YACrE,IAAI,QAAQ,CAAC,MAAM,kEAAkE,CACxF,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACtC,OAAO;YACL,GAAG,QAAQ;YACX,MAAM,EAAE,yBAAyB,CAAC,QAAQ;YAC1C,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,UAAU;SACX,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,QAAQ;QACX,MAAM,EAAE,yBAAyB,CAAC,QAAQ;QAC1C,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,UAAU;QACV,eAAe,EAAE,UAAU,CAAC,eAAe;KAC5C,CAAC;AACJ,CAAC"}

package/dist/repositories/policy-change-approval-record-repository.d.ts

@@ -0,0 +1,39 @@
+import { PolicyChangeApprovalRecord } from "../domain/index.js";
+/**
+ * Repository for Policy Change Approval Records (Policy Governance,
+ * maker-checker). Append-only and immutable, same discipline as
+ * ExecutionTrustRecordRepository: a record is created exactly once,
+ * at approval time, and never updated.
+ */
+export interface PolicyChangeApprovalRecordRepository {
+    create(record: PolicyChangeApprovalRecord): Promise<PolicyChangeApprovalRecord>;
+    findById(policyChangeApprovalRecordId: string): Promise<PolicyChangeApprovalRecord | null>;
+    list(): Promise<readonly PolicyChangeApprovalRecord[]>;
+    /**
+     * The approval record written for a pending change (the most recent
+     * one, if a pending change approved before 2026-10-03 has two), or
+     * null if none exists yet. Lets a retry after a partial failure reuse
+     * the record its first attempt wrote, instead of signing another.
+     */
+    findByPendingPolicyChangeId(pendingPolicyChangeId: string): Promise<PolicyChangeApprovalRecord | null>;
+    /**
+     * The most recent approval record for a given (policyName,
+     * policyVersion), or null if that policy version has never been
+     * through this repository's approval flow (e.g. it predates Policy
+     * Governance, or was seeded directly). This is what a later
+     * startup/deploy integrity check compares the live
+     * policies/{name}/{version}/policy.json content against, to detect
+     * a file edited outside the pending-change API -- a bypass of
+     * governance, not merely an unusual but legitimate path.
+     */
+    findMostRecentFor(policyName: string, policyVersion: string): Promise<PolicyChangeApprovalRecord | null>;
+    /**
+     * The most recent approval record for a policy name, across all its
+     * versions (latest approvedAt), or null if no version of it was ever
+     * approved. Its policyVersion is the version currently in effect for
+     * that name (G-66): approving a version makes it current, and
+     * approving an older version again rolls back to it.
+     */
+    findMostRecentForName(policyName: string): Promise<PolicyChangeApprovalRecord | null>;
+}
+//# sourceMappingURL=policy-change-approval-record-repository.d.ts.map

package/dist/repositories/policy-change-approval-record-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-change-approval-record-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/policy-change-approval-record-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,WAAW,oCAAoC;IACnD,MAAM,CACJ,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAEvC,QAAQ,CACN,4BAA4B,EAAE,MAAM,GACnC,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;IAE9C,IAAI,IAAI,OAAO,CAAC,SAAS,0BAA0B,EAAE,CAAC,CAAC;IAEvD;;;;;OAKG;IACH,2BAA2B,CACzB,qBAAqB,EAAE,MAAM,GAC5B,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;IAE9C;;;;;;;;;OASG;IACH,iBAAiB,CACf,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;IAE9C;;;;;;OAMG;IACH,qBAAqB,CACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;CAC/C"}

package/dist/repositories/policy-change-approval-record-repository.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=policy-change-approval-record-repository.js.map

package/dist/repositories/policy-change-approval-record-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-change-approval-record-repository.js","sourceRoot":"","sources":["../../src/repositories/policy-change-approval-record-repository.ts"],"names":[],"mappings":""}

package/dist/repositories/policy-repository.d.ts

@@ -0,0 +1,15 @@
+import { PolicyReference } from "../domain/index.js";
+/**
+ * Repository for published Policies.
+ */
+export interface PolicyRepository {
+    /**
+     * Resolves an exact Policy version.
+     */
+    resolve(name: string, version: string): Promise<PolicyReference | null>;
+    /**
+     * Lists published Policies.
+     */
+    list(page: number, pageSize: number): Promise<readonly PolicyReference[]>;
+}
+//# sourceMappingURL=policy-repository.d.ts.map

package/dist/repositories/policy-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/policy-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAExE;;OAEG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAAC;CAC3E"}

package/dist/repositories/policy-repository.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=policy-repository.js.map

package/dist/repositories/policy-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-repository.js","sourceRoot":"","sources":["../../src/repositories/policy-repository.ts"],"names":[],"mappings":""}

package/dist/repositories/refusal-record-repository.d.ts

@@ -0,0 +1,13 @@
+import { RefusalRecord } from "../domain/index.js";
+/**
+ * Repository for immutable Refusal Records (RFC-0021).
+ *
+ * At most one RefusalRecord exists per businessTransactionId — unlike
+ * ExecutionTrustRecordRepository, there is no append-only sub-history
+ * to extend, so this interface is deliberately smaller.
+ */
+export interface RefusalRecordRepository {
+    create(record: RefusalRecord): Promise<RefusalRecord>;
+    findByTransactionId(businessTransactionId: string): Promise<RefusalRecord | null>;
+}
+//# sourceMappingURL=refusal-record-repository.d.ts.map

package/dist/repositories/refusal-record-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refusal-record-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/refusal-record-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAEtD,mBAAmB,CACjB,qBAAqB,EAAE,MAAM,GAC5B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;CAClC"}

package/dist/repositories/refusal-record-repository.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=refusal-record-repository.js.map

package/dist/repositories/refusal-record-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refusal-record-repository.js","sourceRoot":"","sources":["../../src/repositories/refusal-record-repository.ts"],"names":[],"mappings":""}

package/dist/types/Json.d.ts

@@ -0,0 +1,7 @@
+export type JsonPrimitive = string | number | boolean | null;
+export interface JsonObject {
+    [key: string]: JsonValue;
+}
+export type JsonArray = JsonValue[];
+export type JsonValue = JsonPrimitive | JsonObject | JsonArray;
+//# sourceMappingURL=Json.d.ts.map

package/dist/types/Json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Json.d.ts","sourceRoot":"","sources":["../../src/types/Json.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAE7D,MAAM,WAAW,UAAU;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B;AAED,MAAM,MAAM,SAAS,GAAG,SAAS,EAAE,CAAC;AAEpC,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,UAAU,GAAG,SAAS,CAAC"}

package/dist/types/Json.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=Json.js.map

package/dist/types/Json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Json.js","sourceRoot":"","sources":["../../src/types/Json.ts"],"names":[],"mappings":""}

package/dist/utils/normalize-policy.d.ts

@@ -0,0 +1,16 @@
+interface PolicyLike {
+    readonly policyId?: string;
+    readonly policyVersion?: string;
+    readonly schemaVersion?: string;
+    readonly signalsSchema?: Record<string, string>;
+    readonly rules?: readonly unknown[];
+}
+export declare function normalizePolicy(policy: PolicyLike | null | undefined): {
+    readonly policyId: string;
+    readonly policyVersion: string;
+    readonly schemaVersion: string;
+    readonly signalsSchema: Record<string, string>;
+    readonly rules: unknown[];
+};
+export {};
+//# sourceMappingURL=normalize-policy.d.ts.map

package/dist/utils/normalize-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize-policy.d.ts","sourceRoot":"","sources":["../../src/utils/normalize-policy.ts"],"names":[],"mappings":"AAAA,UAAU,UAAU;IAClB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;CACrC;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,GAAG;IACtE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;CAC3B,CAYA"}

package/dist/utils/normalize-policy.js

@@ -0,0 +1,10 @@
+export function normalizePolicy(policy) {
+    return {
+        policyId: policy?.policyId ?? "replay-policy",
+        policyVersion: policy?.policyVersion ?? "1.0.0",
+        schemaVersion: policy?.schemaVersion ?? "1.0.0",
+        signalsSchema: policy?.signalsSchema ?? {},
+        rules: Array.isArray(policy?.rules) ? [...policy.rules] : [],
+    };
+}
+//# sourceMappingURL=normalize-policy.js.map

package/dist/utils/normalize-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize-policy.js","sourceRoot":"","sources":["../../src/utils/normalize-policy.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,eAAe,CAAC,MAAqC;IAOnE,OAAO;QACL,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,eAAe;QAE7C,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,OAAO;QAE/C,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,OAAO;QAE/C,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,EAAE;QAE1C,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;KAC7D,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,41 @@
 {
   "name": "@parmana/shared",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "scripts": {
+    "clean": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\"",
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "test": "vitest run"
+  },
+  "dependencies": {},
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@types/express": "^5.0.6",
+    "dotenv": "^18.0.8",
+    "eslint": "^10.13.0",
+    "eslint-config-prettier": "^10.1.8",
+    "tsx": "^4.23.15",
+    "typescript-eslint": "^8.72.0",
+    "express": "^5.3.0",
+    "vitest": "^5.0.3"
+  },
+  "license": "Apache-2.0",
+  "engines": {
+    "node": ">=24"
+  },
+  "description": "Domain model and configuration shared across every Parmana package"
+}