@parmana/shared 0.0.0-stage → 2.0.0

package/dist/repositories/policy-change-approval-record-repository.d.ts

@@ -0,0 +1,39 @@
+import { PolicyChangeApprovalRecord } from "../domain/index.js";
+/**
+ * Repository for Policy Change Approval Records (Policy Governance,
+ * maker-checker). Append-only and immutable, same discipline as
+ * ExecutionTrustRecordRepository: a record is created exactly once,
+ * at approval time, and never updated.
+ */
+export interface PolicyChangeApprovalRecordRepository {
+    create(record: PolicyChangeApprovalRecord): Promise<PolicyChangeApprovalRecord>;
+    findById(policyChangeApprovalRecordId: string): Promise<PolicyChangeApprovalRecord | null>;
+    list(): Promise<readonly PolicyChangeApprovalRecord[]>;
+    /**
+     * The approval record written for a pending change (the most recent
+     * one, if a pending change approved before 2026-10-03 has two), or
+     * null if none exists yet. Lets a retry after a partial failure reuse
+     * the record its first attempt wrote, instead of signing another.
+     */
+    findByPendingPolicyChangeId(pendingPolicyChangeId: string): Promise<PolicyChangeApprovalRecord | null>;
+    /**
+     * The most recent approval record for a given (policyName,
+     * policyVersion), or null if that policy version has never been
+     * through this repository's approval flow (e.g. it predates Policy
+     * Governance, or was seeded directly). This is what a later
+     * startup/deploy integrity check compares the live
+     * policies/{name}/{version}/policy.json content against, to detect
+     * a file edited outside the pending-change API -- a bypass of
+     * governance, not merely an unusual but legitimate path.
+     */
+    findMostRecentFor(policyName: string, policyVersion: string): Promise<PolicyChangeApprovalRecord | null>;
+    /**
+     * The most recent approval record for a policy name, across all its
+     * versions (latest approvedAt), or null if no version of it was ever
+     * approved. Its policyVersion is the version currently in effect for
+     * that name (G-66): approving a version makes it current, and
+     * approving an older version again rolls back to it.
+     */
+    findMostRecentForName(policyName: string): Promise<PolicyChangeApprovalRecord | null>;
+}
+//# sourceMappingURL=policy-change-approval-record-repository.d.ts.map

package/dist/repositories/policy-change-approval-record-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-change-approval-record-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/policy-change-approval-record-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,WAAW,oCAAoC;IACnD,MAAM,CACJ,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAEvC,QAAQ,CACN,4BAA4B,EAAE,MAAM,GACnC,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;IAE9C,IAAI,IAAI,OAAO,CAAC,SAAS,0BAA0B,EAAE,CAAC,CAAC;IAEvD;;;;;OAKG;IACH,2BAA2B,CACzB,qBAAqB,EAAE,MAAM,GAC5B,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;IAE9C;;;;;;;;;OASG;IACH,iBAAiB,CACf,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;IAE9C;;;;;;OAMG;IACH,qBAAqB,CACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;CAC/C"}

package/dist/repositories/policy-change-approval-record-repository.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=policy-change-approval-record-repository.js.map

package/dist/repositories/policy-change-approval-record-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-change-approval-record-repository.js","sourceRoot":"","sources":["../../src/repositories/policy-change-approval-record-repository.ts"],"names":[],"mappings":""}

package/dist/repositories/policy-repository.d.ts

@@ -0,0 +1,15 @@
+import { PolicyReference } from "../domain/index.js";
+/**
+ * Repository for published Policies.
+ */
+export interface PolicyRepository {
+    /**
+     * Resolves an exact Policy version.
+     */
+    resolve(name: string, version: string): Promise<PolicyReference | null>;
+    /**
+     * Lists published Policies.
+     */
+    list(page: number, pageSize: number): Promise<readonly PolicyReference[]>;
+}
+//# sourceMappingURL=policy-repository.d.ts.map

package/dist/repositories/policy-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/policy-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAExE;;OAEG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAAC;CAC3E"}

package/dist/repositories/policy-repository.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=policy-repository.js.map

package/dist/repositories/policy-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-repository.js","sourceRoot":"","sources":["../../src/repositories/policy-repository.ts"],"names":[],"mappings":""}

package/dist/repositories/refusal-record-repository.d.ts

@@ -0,0 +1,13 @@
+import { RefusalRecord } from "../domain/index.js";
+/**
+ * Repository for immutable Refusal Records (RFC-0021).
+ *
+ * At most one RefusalRecord exists per businessTransactionId — unlike
+ * ExecutionTrustRecordRepository, there is no append-only sub-history
+ * to extend, so this interface is deliberately smaller.
+ */
+export interface RefusalRecordRepository {
+    create(record: RefusalRecord): Promise<RefusalRecord>;
+    findByTransactionId(businessTransactionId: string): Promise<RefusalRecord | null>;
+}
+//# sourceMappingURL=refusal-record-repository.d.ts.map

package/dist/repositories/refusal-record-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refusal-record-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/refusal-record-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAEtD,mBAAmB,CACjB,qBAAqB,EAAE,MAAM,GAC5B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;CAClC"}

package/dist/repositories/refusal-record-repository.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=refusal-record-repository.js.map

package/dist/repositories/refusal-record-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refusal-record-repository.js","sourceRoot":"","sources":["../../src/repositories/refusal-record-repository.ts"],"names":[],"mappings":""}

package/dist/types/Json.d.ts

@@ -0,0 +1,7 @@
+export type JsonPrimitive = string | number | boolean | null;
+export interface JsonObject {
+    [key: string]: JsonValue;
+}
+export type JsonArray = JsonValue[];
+export type JsonValue = JsonPrimitive | JsonObject | JsonArray;
+//# sourceMappingURL=Json.d.ts.map

package/dist/types/Json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Json.d.ts","sourceRoot":"","sources":["../../src/types/Json.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAE7D,MAAM,WAAW,UAAU;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B;AAED,MAAM,MAAM,SAAS,GAAG,SAAS,EAAE,CAAC;AAEpC,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,UAAU,GAAG,SAAS,CAAC"}

package/dist/types/Json.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=Json.js.map

package/dist/types/Json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Json.js","sourceRoot":"","sources":["../../src/types/Json.ts"],"names":[],"mappings":""}

package/dist/utils/normalize-policy.d.ts

@@ -0,0 +1,16 @@
+interface PolicyLike {
+    readonly policyId?: string;
+    readonly policyVersion?: string;
+    readonly schemaVersion?: string;
+    readonly signalsSchema?: Record<string, string>;
+    readonly rules?: readonly unknown[];
+}
+export declare function normalizePolicy(policy: PolicyLike | null | undefined): {
+    readonly policyId: string;
+    readonly policyVersion: string;
+    readonly schemaVersion: string;
+    readonly signalsSchema: Record<string, string>;
+    readonly rules: unknown[];
+};
+export {};
+//# sourceMappingURL=normalize-policy.d.ts.map

package/dist/utils/normalize-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize-policy.d.ts","sourceRoot":"","sources":["../../src/utils/normalize-policy.ts"],"names":[],"mappings":"AAAA,UAAU,UAAU;IAClB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;CACrC;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,GAAG;IACtE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;CAC3B,CAYA"}

package/dist/utils/normalize-policy.js

@@ -0,0 +1,10 @@
+export function normalizePolicy(policy) {
+    return {
+        policyId: policy?.policyId ?? "replay-policy",
+        policyVersion: policy?.policyVersion ?? "1.0.0",
+        schemaVersion: policy?.schemaVersion ?? "1.0.0",
+        signalsSchema: policy?.signalsSchema ?? {},
+        rules: Array.isArray(policy?.rules) ? [...policy.rules] : [],
+    };
+}
+//# sourceMappingURL=normalize-policy.js.map

package/dist/utils/normalize-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize-policy.js","sourceRoot":"","sources":["../../src/utils/normalize-policy.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,eAAe,CAAC,MAAqC;IAOnE,OAAO;QACL,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,eAAe;QAE7C,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,OAAO;QAE/C,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,OAAO;QAE/C,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,EAAE;QAE1C,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;KAC7D,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,41 @@
 {
   "name": "@parmana/shared",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "2.0.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "scripts": {
+    "clean": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\"",
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "test": "vitest run"
+  },
+  "dependencies": {},
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@types/express": "^5.0.6",
+    "dotenv": "^18.0.9",
+    "eslint": "^10.14.0",
+    "eslint-config-prettier": "^10.1.8",
+    "tsx": "^4.23.15",
+    "typescript-eslint": "^8.72.1",
+    "express": "^5.3.0",
+    "vitest": "^5.0.3"
+  },
+  "license": "Apache-2.0",
+  "engines": {
+    "node": ">=24"
+  },
+  "description": "Domain model and configuration shared across every Parmana package"
+}