@plasius/economy 0.6.0 → 0.7.0

package/dist/index.cjs

@@ -100,6 +100,10 @@ __export(index_exports, {
   assertModuleSpendQuote: () => assertModuleSpendQuote,
   assertNonNegativeAccounts: () => assertNonNegativeAccounts,
   assertOpenPurchaseIntent: () => assertOpenPurchaseIntent,
+  assertOperatorAdjustmentDecision: () => assertOperatorAdjustmentDecision,
+  assertOperatorAdjustmentExecution: () => assertOperatorAdjustmentExecution,
+  assertOperatorAdjustmentPreview: () => assertOperatorAdjustmentPreview,
+  assertOperatorAdjustmentProposal: () => assertOperatorAdjustmentProposal,
   assertPaidLotLifecycle: () => assertPaidLotLifecycle,
   assertPaidLotLifecycleEvent: () => assertPaidLotLifecycleEvent,
   assertPaidLotPurchaseProvenance: () => assertPaidLotPurchaseProvenance,
@@ -163,6 +167,10 @@ __export(index_exports, {
   canonicalEconomyRegionalEvidenceReceiptBodyPayload: () => canonicalEconomyRegionalEvidenceReceiptBodyPayload,
   canonicalEconomyRegionalEvidenceReceiptPayload: () => canonicalEconomyRegionalEvidenceReceiptPayload,
   canonicalEconomyRegionalEvidenceReceiptSigningPayload: () => canonicalEconomyRegionalEvidenceReceiptSigningPayload,
+  canonicalOperatorAdjustmentDecisionPayload: () => canonicalOperatorAdjustmentDecisionPayload,
+  canonicalOperatorAdjustmentExecutionPayload: () => canonicalOperatorAdjustmentExecutionPayload,
+  canonicalOperatorAdjustmentPreviewPayload: () => canonicalOperatorAdjustmentPreviewPayload,
+  canonicalOperatorAdjustmentProposalPayload: () => canonicalOperatorAdjustmentProposalPayload,
   canonicalPersonalWalletInitializationCommandPayload: () => canonicalPersonalWalletInitializationCommandPayload,
   canonicalPersonalWalletInitializationOutboxPayload: () => canonicalPersonalWalletInitializationOutboxPayload,
   canonicalTransactionPayload: () => canonicalTransactionPayload,
@@ -4546,6 +4554,341 @@ function assertDistinctAdjustmentApproval(request) {
   }
 }
 
+// src/operator-adjustments.ts
+var PREVIEW_KEYS = /* @__PURE__ */ new Set([
+  "schemaVersion",
+  "previewId",
+  "adjustmentId",
+  "operation",
+  "targetAccountId",
+  "targetComponent",
+  "targetWalletId",
+  "targetLedgerAccountId",
+  "offsetLedgerAccountId",
+  "sourceLotId",
+  "amount",
+  "reasonCode",
+  "ticketReferenceHash",
+  "transferPolicy",
+  "refundPolicy",
+  "originalSourceLotId",
+  "originalTransactionId",
+  "preparedAt",
+  "expiresAt"
+]);
+var DECISION_KEYS = /* @__PURE__ */ new Set([
+  "schemaVersion",
+  "decisionId",
+  "adjustmentId",
+  "proposalId",
+  "proposalHash",
+  "previewHash",
+  "decision",
+  "proposedByAccountId",
+  "decidedByAccountId",
+  "proposedAt",
+  "decidedAt"
+]);
+var PROPOSAL_KEYS = /* @__PURE__ */ new Set([
+  "schemaVersion",
+  "proposalId",
+  "adjustmentId",
+  "previewHash",
+  "status",
+  "proposedByAccountId",
+  "proposedAt",
+  "expiresAt"
+]);
+var EXECUTION_KEYS = /* @__PURE__ */ new Set([
+  "schemaVersion",
+  "executionId",
+  "adjustmentId",
+  "previewHash",
+  "proposalHash",
+  "decisionHash",
+  "sourceLotId",
+  "transactionId",
+  "resultReceiptId",
+  "executedAt"
+]);
+var OPERATIONS = /* @__PURE__ */ new Set([
+  "credit",
+  "reverse-credit"
+]);
+var TARGET_COMPONENTS = /* @__PURE__ */ new Set([
+  "personal",
+  "household-treasury"
+]);
+var TRANSFER_POLICIES = /* @__PURE__ */ new Set([
+  "household-allocatable",
+  "same-user-only",
+  "non-transferable"
+]);
+var DECISIONS = /* @__PURE__ */ new Set([
+  "approve",
+  "reject"
+]);
+function assertExactKeys3(value, allowed, label) {
+  economyAssert(
+    value !== null && typeof value === "object" && !Array.isArray(value),
+    "INVALID_CONTRACT",
+    `${label} must be an object`
+  );
+  economyAssert(
+    Object.keys(value).every((key) => allowed.has(key)),
+    "INVALID_CONTRACT",
+    `${label} contains an unsupported field`
+  );
+}
+function assertCanonicalHash6(value, label) {
+  economyAssert(
+    /^sha256:[a-f0-9]{64}$/u.test(value),
+    "INVALID_CONTRACT",
+    `${label} must be a canonical SHA-256 reference`
+  );
+}
+function assertReasonCode(reasonCode) {
+  economyAssert(
+    /^[A-Z][A-Z0-9_]{2,95}$/u.test(reasonCode),
+    "INVALID_CONTRACT",
+    "Adjustment reasonCode must be a bounded uppercase identifier"
+  );
+}
+function assertOperatorAdjustmentPreview(preview) {
+  assertExactKeys3(preview, PREVIEW_KEYS, "Operator adjustment preview");
+  economyAssert(
+    preview.schemaVersion === ECONOMY_CONTRACT_VERSION && OPERATIONS.has(preview.operation) && TARGET_COMPONENTS.has(preview.targetComponent) && TRANSFER_POLICIES.has(preview.transferPolicy) && preview.refundPolicy === "not-refundable",
+    "INVALID_CONTRACT",
+    "Unsupported operator adjustment preview"
+  );
+  assertEconomyIdentifier(preview.previewId, "previewId");
+  assertEconomyIdentifier(preview.adjustmentId, "adjustmentId");
+  assertEconomyIdentifier(preview.targetAccountId, "targetAccountId");
+  assertEconomyIdentifier(preview.targetWalletId, "targetWalletId");
+  assertEconomyIdentifier(
+    preview.targetLedgerAccountId,
+    "targetLedgerAccountId"
+  );
+  assertEconomyIdentifier(
+    preview.offsetLedgerAccountId,
+    "offsetLedgerAccountId"
+  );
+  assertEconomyIdentifier(preview.sourceLotId, "sourceLotId");
+  economyAssert(
+    parseTokenSubunits(preview.amount) > 0n,
+    "INVALID_AMOUNT",
+    "Operator adjustment amount must be positive"
+  );
+  assertReasonCode(preview.reasonCode);
+  assertCanonicalHash6(preview.ticketReferenceHash, "ticketReferenceHash");
+  const preparedAt = parseIsoTimestamp(preview.preparedAt);
+  const expiresAt = parseIsoTimestamp(preview.expiresAt);
+  economyAssert(
+    expiresAt > preparedAt,
+    "INVALID_TIME_WINDOW",
+    "Operator adjustment preview must expire after preparation"
+  );
+  if (preview.operation === "credit") {
+    economyAssert(
+      preview.originalSourceLotId === void 0 && preview.originalTransactionId === void 0,
+      "INVALID_CONTRACT",
+      "A credit preview cannot bind an original transaction"
+    );
+    return;
+  }
+  economyAssert(
+    preview.originalSourceLotId !== void 0 && preview.originalTransactionId !== void 0,
+    "INVALID_CONTRACT",
+    "A reversal preview must bind the original lot and transaction"
+  );
+  assertEconomyIdentifier(preview.originalSourceLotId, "originalSourceLotId");
+  assertEconomyIdentifier(
+    preview.originalTransactionId,
+    "originalTransactionId"
+  );
+}
+function canonicalOperatorAdjustmentPreviewPayload(preview) {
+  assertOperatorAdjustmentPreview(preview);
+  return JSON.stringify({
+    schemaVersion: preview.schemaVersion,
+    previewId: preview.previewId,
+    adjustmentId: preview.adjustmentId,
+    operation: preview.operation,
+    targetAccountId: preview.targetAccountId,
+    targetComponent: preview.targetComponent,
+    targetWalletId: preview.targetWalletId,
+    targetLedgerAccountId: preview.targetLedgerAccountId,
+    offsetLedgerAccountId: preview.offsetLedgerAccountId,
+    sourceLotId: preview.sourceLotId,
+    amount: preview.amount,
+    reasonCode: preview.reasonCode,
+    ticketReferenceHash: preview.ticketReferenceHash,
+    transferPolicy: preview.transferPolicy,
+    refundPolicy: preview.refundPolicy,
+    ...preview.originalSourceLotId === void 0 ? {} : { originalSourceLotId: preview.originalSourceLotId },
+    ...preview.originalTransactionId === void 0 ? {} : { originalTransactionId: preview.originalTransactionId },
+    preparedAt: preview.preparedAt,
+    expiresAt: preview.expiresAt
+  });
+}
+function assertOperatorAdjustmentProposal(proposal, preview, expectedPreviewHash) {
+  assertOperatorAdjustmentPreview(preview);
+  assertCanonicalHash6(expectedPreviewHash, "expectedPreviewHash");
+  assertExactKeys3(proposal, PROPOSAL_KEYS, "Operator adjustment proposal");
+  economyAssert(
+    proposal.schemaVersion === ECONOMY_CONTRACT_VERSION && proposal.status === "pending-approval",
+    "INVALID_CONTRACT",
+    "Unsupported operator adjustment proposal"
+  );
+  assertEconomyIdentifier(proposal.proposalId, "proposalId");
+  assertEconomyIdentifier(proposal.adjustmentId, "adjustmentId");
+  assertCanonicalHash6(proposal.previewHash, "previewHash");
+  assertEconomyIdentifier(
+    proposal.proposedByAccountId,
+    "proposedByAccountId"
+  );
+  economyAssert(
+    proposal.adjustmentId === preview.adjustmentId && proposal.previewHash === expectedPreviewHash,
+    "ADJUSTMENT_PREVIEW_MISMATCH",
+    "Operator adjustment proposal does not match its preview"
+  );
+  const proposedAt = parseIsoTimestamp(proposal.proposedAt);
+  const expiresAt = parseIsoTimestamp(proposal.expiresAt);
+  economyAssert(
+    proposedAt >= parseIsoTimestamp(preview.preparedAt) && expiresAt === parseIsoTimestamp(preview.expiresAt) && expiresAt > proposedAt,
+    "INVALID_TIME_WINDOW",
+    "Operator adjustment proposal times are inconsistent"
+  );
+}
+function canonicalOperatorAdjustmentProposalPayload(proposal) {
+  assertExactKeys3(proposal, PROPOSAL_KEYS, "Operator adjustment proposal");
+  return JSON.stringify({
+    schemaVersion: proposal.schemaVersion,
+    proposalId: proposal.proposalId,
+    adjustmentId: proposal.adjustmentId,
+    previewHash: proposal.previewHash,
+    status: proposal.status,
+    proposedByAccountId: proposal.proposedByAccountId,
+    proposedAt: proposal.proposedAt,
+    expiresAt: proposal.expiresAt
+  });
+}
+function assertOperatorAdjustmentDecision(decision, proposal, preview, expectedPreviewHash, expectedProposalHash) {
+  assertOperatorAdjustmentProposal(proposal, preview, expectedPreviewHash);
+  assertCanonicalHash6(expectedProposalHash, "expectedProposalHash");
+  assertExactKeys3(decision, DECISION_KEYS, "Operator adjustment decision");
+  economyAssert(
+    decision.schemaVersion === ECONOMY_CONTRACT_VERSION && DECISIONS.has(decision.decision),
+    "INVALID_CONTRACT",
+    "Unsupported operator adjustment decision"
+  );
+  assertEconomyIdentifier(decision.decisionId, "decisionId");
+  assertEconomyIdentifier(decision.adjustmentId, "adjustmentId");
+  assertEconomyIdentifier(decision.proposalId, "proposalId");
+  assertCanonicalHash6(decision.proposalHash, "proposalHash");
+  assertCanonicalHash6(decision.previewHash, "previewHash");
+  assertEconomyIdentifier(
+    decision.proposedByAccountId,
+    "proposedByAccountId"
+  );
+  assertEconomyIdentifier(
+    decision.decidedByAccountId,
+    "decidedByAccountId"
+  );
+  economyAssert(
+    decision.proposedByAccountId !== decision.decidedByAccountId,
+    "ADJUSTMENT_SELF_APPROVAL",
+    "Operator adjustment approval requires a distinct operator"
+  );
+  economyAssert(
+    decision.adjustmentId === preview.adjustmentId && decision.proposalId === proposal.proposalId && decision.proposalHash === expectedProposalHash && decision.previewHash === expectedPreviewHash,
+    "ADJUSTMENT_PREVIEW_MISMATCH",
+    "Operator adjustment decision does not match its preview"
+  );
+  const proposedAt = parseIsoTimestamp(decision.proposedAt);
+  const decidedAt = parseIsoTimestamp(decision.decidedAt);
+  economyAssert(
+    decision.proposedByAccountId === proposal.proposedByAccountId && proposedAt === parseIsoTimestamp(proposal.proposedAt) && decidedAt >= proposedAt,
+    "INVALID_TIME_WINDOW",
+    "Operator adjustment decision times are inconsistent"
+  );
+  economyAssert(
+    decidedAt <= parseIsoTimestamp(preview.expiresAt),
+    "ADJUSTMENT_EXPIRED",
+    "Operator adjustment preview has expired"
+  );
+}
+function canonicalOperatorAdjustmentDecisionPayload(decision) {
+  assertExactKeys3(decision, DECISION_KEYS, "Operator adjustment decision");
+  return JSON.stringify({
+    schemaVersion: decision.schemaVersion,
+    decisionId: decision.decisionId,
+    adjustmentId: decision.adjustmentId,
+    proposalId: decision.proposalId,
+    proposalHash: decision.proposalHash,
+    previewHash: decision.previewHash,
+    decision: decision.decision,
+    proposedByAccountId: decision.proposedByAccountId,
+    decidedByAccountId: decision.decidedByAccountId,
+    proposedAt: decision.proposedAt,
+    decidedAt: decision.decidedAt
+  });
+}
+function assertOperatorAdjustmentExecution(execution, preview, proposal, decision, expectedPreviewHash, expectedProposalHash, expectedDecisionHash) {
+  assertOperatorAdjustmentDecision(
+    decision,
+    proposal,
+    preview,
+    expectedPreviewHash,
+    expectedProposalHash
+  );
+  assertCanonicalHash6(expectedDecisionHash, "expectedDecisionHash");
+  assertExactKeys3(execution, EXECUTION_KEYS, "Operator adjustment execution");
+  economyAssert(
+    execution.schemaVersion === ECONOMY_CONTRACT_VERSION,
+    "INVALID_CONTRACT",
+    "Unsupported operator adjustment execution"
+  );
+  assertEconomyIdentifier(execution.executionId, "executionId");
+  assertEconomyIdentifier(execution.adjustmentId, "adjustmentId");
+  assertCanonicalHash6(execution.previewHash, "previewHash");
+  assertCanonicalHash6(execution.proposalHash, "proposalHash");
+  assertCanonicalHash6(execution.decisionHash, "decisionHash");
+  assertEconomyIdentifier(execution.sourceLotId, "sourceLotId");
+  assertEconomyIdentifier(execution.transactionId, "transactionId");
+  assertEconomyIdentifier(execution.resultReceiptId, "resultReceiptId");
+  economyAssert(
+    decision.decision === "approve",
+    "ADJUSTMENT_NOT_APPROVED",
+    "Only an approved adjustment may execute"
+  );
+  economyAssert(
+    execution.adjustmentId === preview.adjustmentId && execution.previewHash === expectedPreviewHash && execution.proposalHash === expectedProposalHash && execution.decisionHash === expectedDecisionHash && execution.sourceLotId === preview.sourceLotId,
+    "ADJUSTMENT_PREVIEW_MISMATCH",
+    "Operator adjustment execution does not match its approval plan"
+  );
+  economyAssert(
+    parseIsoTimestamp(execution.executedAt) >= parseIsoTimestamp(decision.decidedAt),
+    "INVALID_TIME_WINDOW",
+    "Operator adjustment execution predates its decision"
+  );
+}
+function canonicalOperatorAdjustmentExecutionPayload(execution) {
+  assertExactKeys3(execution, EXECUTION_KEYS, "Operator adjustment execution");
+  return JSON.stringify({
+    schemaVersion: execution.schemaVersion,
+    executionId: execution.executionId,
+    adjustmentId: execution.adjustmentId,
+    previewHash: execution.previewHash,
+    proposalHash: execution.proposalHash,
+    decisionHash: execution.decisionHash,
+    sourceLotId: execution.sourceLotId,
+    transactionId: execution.transactionId,
+    resultReceiptId: execution.resultReceiptId,
+    executedAt: execution.executedAt
+  });
+}
+
 // src/paid-lots.ts
 var ZERO_ARITHMETIC = Object.freeze({
   retainedDelta: serializeTokenSubunits(0n),
@@ -7086,7 +7429,7 @@ var PORTABLE_KEYS = /* @__PURE__ */ new Set([
   "signature",
   ...PORTABLE_BODY_KEYS
 ]);
-function assertExactKeys3(value, allowedKeys, label) {
+function assertExactKeys4(value, allowedKeys, label) {
   economyAssert(
     value !== null && typeof value === "object" && !Array.isArray(value),
     "INVALID_CONTRACT",
@@ -7098,7 +7441,7 @@ function assertExactKeys3(value, allowedKeys, label) {
     `${label} contains an unsupported field`
   );
 }
-function assertCanonicalHash6(value, label) {
+function assertCanonicalHash7(value, label) {
   economyAssert(
     typeof value === "string" && CANONICAL_HASH.test(value),
     "INVALID_CONTRACT",
@@ -7107,7 +7450,7 @@ function assertCanonicalHash6(value, label) {
 }
 function canonicalHash(payload, hashCanonicalPayload2, label) {
   const value = hashCanonicalPayload2(payload);
-  assertCanonicalHash6(value, label);
+  assertCanonicalHash7(value, label);
   return value;
 }
 function assertUnsignedInteger(value, label) {
@@ -7175,7 +7518,7 @@ function canonicalSignatureMetadata(signature) {
   };
 }
 function assertEconomySealedRecoveryPayload(payload) {
-  assertExactKeys3(
+  assertExactKeys4(
     payload,
     /* @__PURE__ */ new Set([
       "schemaVersion",
@@ -7205,17 +7548,17 @@ function assertEconomySealedRecoveryPayload(payload) {
     22,
     22
   );
-  assertCanonicalHash6(
+  assertCanonicalHash7(
     payload.plaintextContentHash,
     "Recovery plaintext-content hash"
   );
-  assertCanonicalHash6(
+  assertCanonicalHash7(
     payload.encryptionContextHash,
     "Recovery encryption-context hash"
   );
 }
 function assertAcceptanceBody(body) {
-  assertExactKeys3(
+  assertExactKeys4(
     body,
     "acceptanceEnvelopeId" in body ? ACCEPTANCE_KEYS : ACCEPTANCE_BODY_KEYS,
     "Recovery acceptance body"
@@ -7234,9 +7577,9 @@ function assertAcceptanceBody(body) {
     body.idempotencyFingerprint,
     "economy.idempotency-key.v1"
   );
-  assertCanonicalHash6(body.commandEnvelopeHash, "Command-envelope hash");
+  assertCanonicalHash7(body.commandEnvelopeHash, "Command-envelope hash");
   assertEconomyIdentifier(body.acceptedReceiptId, "acceptedReceiptId");
-  assertCanonicalHash6(body.acceptedReceiptHash, "Accepted-receipt hash");
+  assertCanonicalHash7(body.acceptedReceiptHash, "Accepted-receipt hash");
   assertEconomySealedRecoveryPayload(body.sealedPayload);
   const preparedAt = parseIsoTimestamp(body.preparedAt);
   const acceptedAt = parseIsoTimestamp(body.acceptedAt);
@@ -7284,7 +7627,7 @@ function createEconomyRecoveryAcceptanceEnvelope(body, hashCanonicalPayload2) {
   };
 }
 function assertEconomyRecoveryAcceptanceEnvelope(envelope, hashCanonicalPayload2) {
-  assertExactKeys3(envelope, ACCEPTANCE_KEYS, "Recovery acceptance envelope");
+  assertExactKeys4(envelope, ACCEPTANCE_KEYS, "Recovery acceptance envelope");
   assertAcceptanceBody(envelope);
   assertEconomyIdentifier(
     envelope.acceptanceEnvelopeId,
@@ -7325,7 +7668,7 @@ function canonicalEconomyRecoveryAcceptanceEnvelopePayload(envelope, hashCanonic
   });
 }
 function assertCommittedResultBody(body) {
-  assertExactKeys3(
+  assertExactKeys4(
     body,
     "committedResultId" in body ? COMMITTED_RESULT_KEYS : COMMITTED_RESULT_BODY_KEYS,
     "Recovery committed-result body"
@@ -7353,7 +7696,7 @@ function assertCommittedResultBody(body) {
     [body.authorityCommitHash, "Authority-commit hash"],
     [body.authorityHeadHashAfter, "Authority-head hash"]
   ]) {
-    assertCanonicalHash6(value, label);
+    assertCanonicalHash7(value, label);
   }
   economyAssert(
     RESULT_OUTCOMES.has(body.outcome),
@@ -7376,7 +7719,7 @@ function assertCommittedResultBody(body) {
     assertEconomyIdentifier(body.transactionId, "transactionId");
   }
   if (body.transactionCanonicalHash !== void 0) {
-    assertCanonicalHash6(
+    assertCanonicalHash7(
       body.transactionCanonicalHash,
       "Transaction canonical hash"
     );
@@ -7419,7 +7762,7 @@ function createEconomyRecoveryCommittedResult(body, hashCanonicalPayload2) {
   };
 }
 function assertEconomyRecoveryCommittedResult(result, hashCanonicalPayload2) {
-  assertExactKeys3(
+  assertExactKeys4(
     result,
     COMMITTED_RESULT_KEYS,
     "Recovery committed result"
@@ -7478,7 +7821,7 @@ function assertEconomyRecoveryResultLink(acceptance, result, hashCanonicalPayloa
   );
 }
 function assertEconomyEvidenceSignatureMetadata(signature) {
-  assertExactKeys3(
+  assertExactKeys4(
     signature,
     /* @__PURE__ */ new Set([
       "schemaVersion",
@@ -7498,7 +7841,7 @@ function assertEconomyEvidenceSignatureMetadata(signature) {
   parseIsoTimestamp(signature.signedAt);
 }
 function assertEconomyEvidenceSignature(signature) {
-  assertExactKeys3(
+  assertExactKeys4(
     signature,
     /* @__PURE__ */ new Set([
       "schemaVersion",
@@ -7520,7 +7863,7 @@ function assertEconomyEvidenceSignature(signature) {
   assertBase64url(signature.value, "Evidence signature value", 32, 2048);
 }
 function assertRegionalEvidenceBody(body) {
-  assertExactKeys3(
+  assertExactKeys4(
     body,
     "evidenceReceiptId" in body ? REGIONAL_KEYS : REGIONAL_BODY_KEYS,
     "Regional evidence-receipt body"
@@ -7552,7 +7895,7 @@ function assertRegionalEvidenceBody(body) {
     "INVALID_CONTRACT",
     "Unsupported recovery record kind"
   );
-  assertCanonicalHash6(
+  assertCanonicalHash7(
     body.recoveryRecordContentHash,
     "Recovery-record content hash"
   );
@@ -7568,7 +7911,7 @@ function assertRegionalEvidenceBody(body) {
       "INVALID_CONTRACT",
       "Non-genesis regional evidence receipt requires a previous hash"
     );
-    assertCanonicalHash6(
+    assertCanonicalHash7(
       body.previousReceiptHash,
       "Previous evidence-receipt hash"
     );
@@ -7612,7 +7955,7 @@ function createEconomyRegionalEvidenceReceipt(body, signature, hashCanonicalPayl
   };
 }
 function assertEconomyRegionalEvidenceReceipt(receipt, hashCanonicalPayload2) {
-  assertExactKeys3(receipt, REGIONAL_KEYS, "Regional evidence receipt");
+  assertExactKeys4(receipt, REGIONAL_KEYS, "Regional evidence receipt");
   assertRegionalEvidenceBody(receipt);
   assertEconomyIdentifier(receipt.evidenceReceiptId, "evidenceReceiptId");
   assertEconomyEvidenceSignature(receipt.signature);
@@ -7743,7 +8086,7 @@ function assertEconomyRegionalEvidenceChain(receipts, expectedPreviousReceiptHas
       "INVALID_CONTRACT",
       "Partial evidence chain requires its trusted preceding hash"
     );
-    assertCanonicalHash6(
+    assertCanonicalHash7(
       expectedPreviousReceiptHash,
       "Expected preceding evidence-receipt hash"
     );
@@ -7814,7 +8157,7 @@ function assertEconomyRegionalEvidenceEquality(receipts, expectedRegions, hashCa
   );
 }
 function assertEconomyMerkleInclusionProof(proof) {
-  assertExactKeys3(
+  assertExactKeys4(
     proof,
     /* @__PURE__ */ new Set([
       "schemaVersion",
@@ -7835,8 +8178,8 @@ function assertEconomyMerkleInclusionProof(proof) {
     "Unsupported Merkle inclusion proof"
   );
   assertEconomyIdentifier(proof.anchorId, "anchorId");
-  assertCanonicalHash6(proof.anchorManifestHash, "Anchor-manifest hash");
-  assertCanonicalHash6(proof.leafHash, "Merkle leaf hash");
+  assertCanonicalHash7(proof.anchorManifestHash, "Anchor-manifest hash");
+  assertCanonicalHash7(proof.leafHash, "Merkle leaf hash");
   assertUnsignedInteger(proof.leafIndex, "Merkle leaf index");
   assertUnsignedInteger(proof.leafCount, "Merkle leaf count");
   economyAssert(
@@ -7845,7 +8188,7 @@ function assertEconomyMerkleInclusionProof(proof) {
     "Merkle leaf position is outside its bounded tree"
   );
   for (const step of proof.siblings) {
-    assertExactKeys3(
+    assertExactKeys4(
       step,
       /* @__PURE__ */ new Set(["schemaVersion", "side", "hash"]),
       "Merkle proof step"
@@ -7855,7 +8198,7 @@ function assertEconomyMerkleInclusionProof(proof) {
       "INVALID_CONTRACT",
       "Unsupported Merkle proof step"
     );
-    assertCanonicalHash6(step.hash, "Merkle sibling hash");
+    assertCanonicalHash7(step.hash, "Merkle sibling hash");
   }
 }
 function canonicalMerkleProof(proof) {
@@ -7934,7 +8277,7 @@ function assertEconomyMerkleInclusion(proof, anchor, hashCanonicalPayload2) {
   );
 }
 function assertPortableEvidenceReference(reference) {
-  assertExactKeys3(
+  assertExactKeys4(
     reference,
     /* @__PURE__ */ new Set([
       "schemaVersion",
@@ -7954,7 +8297,7 @@ function assertPortableEvidenceReference(reference) {
     reference.evidenceReceiptId,
     "evidenceReceiptId"
   );
-  assertCanonicalHash6(
+  assertCanonicalHash7(
     reference.evidenceReceiptHash,
     "Evidence-receipt hash"
   );
@@ -7971,7 +8314,7 @@ function canonicalPortableEvidenceReference(reference) {
   };
 }
 function assertPortableBody(body) {
-  assertExactKeys3(
+  assertExactKeys4(
     body,
     "portableReceiptId" in body ? PORTABLE_KEYS : PORTABLE_BODY_KEYS,
     "Portable customer-receipt body"
@@ -8010,7 +8353,7 @@ function assertPortableBody(body) {
     [body.committedResultContentHash, "Committed-result content hash"],
     [body.authorityCommitHash, "Authority-commit hash"]
   ]) {
-    assertCanonicalHash6(value, label);
+    assertCanonicalHash7(value, label);
   }
   assertUnsignedInteger(body.authoritySequence, "Authority sequence");
   economyAssert(
@@ -8095,7 +8438,7 @@ function createEconomyPortableCustomerReceipt(body, signature, hashCanonicalPayl
   };
 }
 function assertEconomyPortableCustomerReceipt(receipt, hashCanonicalPayload2) {
-  assertExactKeys3(receipt, PORTABLE_KEYS, "Portable customer receipt");
+  assertExactKeys4(receipt, PORTABLE_KEYS, "Portable customer receipt");
   assertPortableBody(receipt);
   assertEconomyIdentifier(receipt.portableReceiptId, "portableReceiptId");
   assertEconomyEvidenceSignature(receipt.signature);
@@ -8395,7 +8738,7 @@ var DOCUMENT_ID_KEYS = /* @__PURE__ */ new Set([
   "lifetimeProjectionId",
   "outboxEventId"
 ]);
-function assertExactKeys4(value, allowed, label) {
+function assertExactKeys5(value, allowed, label) {
   economyAssert(
     value !== null && typeof value === "object" && !Array.isArray(value),
     "INVALID_CONTRACT",
@@ -8435,7 +8778,7 @@ function createPersonalWalletInitializationDocumentIds(subjectAccountId, hash) {
   };
 }
 function assertPersonalWalletInitializationCommand(command) {
-  assertExactKeys4(command, COMMAND_KEYS, "Wallet initialization command");
+  assertExactKeys5(command, COMMAND_KEYS, "Wallet initialization command");
   economyAssert(
     command.schemaVersion === ECONOMY_CONTRACT_VERSION && command.commandType === "initialize-wallet" && command.walletKind === "personal",
     "INVALID_CONTRACT",
@@ -8459,7 +8802,7 @@ function canonicalPersonalWalletInitializationCommandPayload(command) {
   });
 }
 function assertPersonalWalletInitializationOutboxIntent(intent) {
-  assertExactKeys4(intent, OUTBOX_KEYS, "Wallet initialization outbox intent");
+  assertExactKeys5(intent, OUTBOX_KEYS, "Wallet initialization outbox intent");
   economyAssert(
     intent.schemaVersion === ECONOMY_CONTRACT_VERSION && intent.eventType === "wallet.initialized.v1",
     "INVALID_CONTRACT",
@@ -8559,8 +8902,8 @@ function createPersonalWalletInitializationState(input, hash) {
   return state;
 }
 function assertPersonalWalletInitializationState(state) {
-  assertExactKeys4(state, STATE_KEYS, "Wallet initialization state");
-  assertExactKeys4(
+  assertExactKeys5(state, STATE_KEYS, "Wallet initialization state");
+  assertExactKeys5(
     state.documentIds,
     DOCUMENT_ID_KEYS,
     "Wallet initialization document IDs"
@@ -8672,6 +9015,10 @@ function assertPersonalWalletInitializationState(state) {
   assertModuleSpendQuote,
   assertNonNegativeAccounts,
   assertOpenPurchaseIntent,
+  assertOperatorAdjustmentDecision,
+  assertOperatorAdjustmentExecution,
+  assertOperatorAdjustmentPreview,
+  assertOperatorAdjustmentProposal,
   assertPaidLotLifecycle,
   assertPaidLotLifecycleEvent,
   assertPaidLotPurchaseProvenance,
@@ -8735,6 +9082,10 @@ function assertPersonalWalletInitializationState(state) {
   canonicalEconomyRegionalEvidenceReceiptBodyPayload,
   canonicalEconomyRegionalEvidenceReceiptPayload,
   canonicalEconomyRegionalEvidenceReceiptSigningPayload,
+  canonicalOperatorAdjustmentDecisionPayload,
+  canonicalOperatorAdjustmentExecutionPayload,
+  canonicalOperatorAdjustmentPreviewPayload,
+  canonicalOperatorAdjustmentProposalPayload,
   canonicalPersonalWalletInitializationCommandPayload,
   canonicalPersonalWalletInitializationOutboxPayload,
   canonicalTransactionPayload,