@plumbus/core 0.7.1 → 0.8.0-beta.1

package/dist/durable/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/durable/schema.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,0BAA0B,sHAO7B,CAAC;AAEX,eAAO,MAAM,yBAAyB,oBAAoB,CAAC;AAE3D,wBAAgB,yBAAyB,CAAC,UAAU,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoH5D;AAED,wBAAgB,wBAAwB,CAAC,UAAU,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoC3D"}

package/dist/durable/schema.js

@@ -0,0 +1,138 @@
+// Drizzle table factories for Protocol A durable core.
+// Tenant tables use tableBuilderFor so they land in core_plumbus when
+// PLUMBUS_FRAMEWORK_SCHEMA is set. Spine tables are a separate database
+// (reconstructible hints) and stay unqualified by default.
+//
+// SQL migrations live in packages/plumbus-core/migrations/. The two-DB harness
+// applies equivalent DDL to dedicated plumbus_durable_test_* databases only.
+import { boolean, index, integer, text, timestamp, uniqueIndex } from 'drizzle-orm/pg-core';
+import { resolveFrameworkSchema, tableBuilderFor } from '../data/schema-generator.js';
+export const TENANT_DURABLE_TABLE_NAMES = [
+    'execution_state',
+    'step_execution',
+    'wait_state',
+    'terminal_state',
+    'dispatch_outbox',
+    'side_effect_log',
+];
+export const SPINE_DISPATCH_TABLE_NAME = 'opaque_dispatch';
+export function createTenantDurableTables(schemaName) {
+    const table = tableBuilderFor(schemaName ?? resolveFrameworkSchema());
+    const executionState = table('execution_state', {
+        executionId: text('execution_id').primaryKey(),
+        stateRefId: text('state_ref_id').notNull(),
+        tenantRef: text('tenant_ref').notNull(),
+        revision: integer('revision').notNull(),
+        tenantEpoch: integer('tenant_epoch').notNull(),
+        status: text('status').notNull(),
+        definitionId: text('definition_id').notNull(),
+        definitionVersion: text('definition_version').notNull(),
+        currentStepId: text('current_step_id').notNull(),
+        stepIndex: integer('step_index').notNull(),
+        attempt: integer('attempt').notNull(),
+        correlationId: text('correlation_id').notNull(),
+        createdAt: timestamp('created_at', { withTimezone: true }).notNull(),
+        updatedAt: timestamp('updated_at', { withTimezone: true }).notNull(),
+        wakeAt: timestamp('wake_at', { withTimezone: true }),
+        terminal: boolean('terminal').notNull(),
+    }, (t) => [
+        index('execution_state_status_idx').on(t.status),
+        index('execution_state_epoch_idx').on(t.tenantEpoch),
+    ]);
+    const stepExecution = table('step_execution', {
+        stepExecutionId: text('step_execution_id').primaryKey(),
+        executionId: text('execution_id').notNull(),
+        stepId: text('step_id').notNull(),
+        attempt: integer('attempt').notNull(),
+        state: text('state').notNull(),
+        startedAt: timestamp('started_at', { withTimezone: true }).notNull(),
+        updatedAt: timestamp('updated_at', { withTimezone: true }).notNull(),
+        completedAt: timestamp('completed_at', { withTimezone: true }),
+    }, (t) => [index('step_execution_exec_idx').on(t.executionId)]);
+    const waitState = table('wait_state', {
+        waitStateId: text('wait_state_id').primaryKey(),
+        executionId: text('execution_id').notNull(),
+        stepId: text('step_id').notNull(),
+        kind: text('kind').notNull(),
+        state: text('state').notNull(),
+        createdAt: timestamp('created_at', { withTimezone: true }).notNull(),
+        updatedAt: timestamp('updated_at', { withTimezone: true }).notNull(),
+        notBefore: timestamp('not_before', { withTimezone: true }),
+        expiresAt: timestamp('expires_at', { withTimezone: true }),
+        resolvedAt: timestamp('resolved_at', { withTimezone: true }),
+    }, (t) => [index('wait_state_exec_idx').on(t.executionId)]);
+    const terminalState = table('terminal_state', {
+        terminalStateId: text('terminal_state_id').primaryKey(),
+        executionId: text('execution_id').notNull(),
+        operationalState: text('operational_state').notNull(),
+        finalRevision: integer('final_revision').notNull(),
+        completedAt: timestamp('completed_at', { withTimezone: true }).notNull(),
+        domainOutcomeId: text('domain_outcome_id'),
+    }, (t) => [uniqueIndex('terminal_state_exec_uidx').on(t.executionId)]);
+    const dispatchOutbox = table('dispatch_outbox', {
+        outboxId: text('outbox_id').primaryKey(),
+        executionId: text('execution_id').notNull(),
+        stateRefId: text('state_ref_id').notNull(),
+        expectedRevision: integer('expected_revision').notNull(),
+        tenantEpoch: integer('tenant_epoch').notNull(),
+        tenantRef: text('tenant_ref').notNull(),
+        stepId: text('step_id').notNull(),
+        definitionId: text('definition_id').notNull(),
+        definitionVersion: text('definition_version').notNull(),
+        correlationId: text('correlation_id').notNull(),
+        workClassId: text('work_class_id').notNull(),
+        priorityClassId: text('priority_class_id').notNull(),
+        notBefore: timestamp('not_before', { withTimezone: true }).notNull(),
+        createdAt: timestamp('created_at', { withTimezone: true }).notNull(),
+        publishedAt: timestamp('published_at', { withTimezone: true }),
+        spineRowId: text('spine_row_id'),
+        spineAckedAt: timestamp('spine_acked_at', { withTimezone: true }),
+        superseded: boolean('superseded').notNull(),
+    }, (t) => [
+        index('dispatch_outbox_pending_idx').on(t.publishedAt, t.spineAckedAt),
+        index('dispatch_outbox_exec_rev_idx').on(t.executionId, t.expectedRevision),
+    ]);
+    const sideEffectLog = table('side_effect_log', {
+        effectKey: text('effect_key').primaryKey(),
+        label: text('label').notNull(),
+        appliedAt: timestamp('applied_at', { withTimezone: true }).notNull(),
+    });
+    return {
+        executionState,
+        stepExecution,
+        waitState,
+        terminalState,
+        dispatchOutbox,
+        sideEffectLog,
+    };
+}
+export function createSpineDispatchTable(schemaName) {
+    const table = tableBuilderFor(schemaName);
+    return table('opaque_dispatch', {
+        dispatchId: text('dispatch_id').primaryKey(),
+        contractVersion: text('contract_version').notNull(),
+        tenantRouteId: text('tenant_route_id').notNull(),
+        executionId: text('execution_id').notNull(),
+        definitionId: text('definition_id').notNull(),
+        definitionVersion: text('definition_version').notNull(),
+        stepId: text('step_id').notNull(),
+        tenantExecutionStateRefId: text('tenant_execution_state_ref_id').notNull(),
+        expectedRevision: integer('expected_revision').notNull(),
+        tenantEpoch: integer('tenant_epoch').notNull(),
+        workClassId: text('work_class_id').notNull(),
+        priorityClassId: text('priority_class_id').notNull(),
+        deliveryState: text('delivery_state').notNull(),
+        attempt: integer('attempt').notNull(),
+        notBefore: timestamp('not_before', { withTimezone: true }).notNull(),
+        leaseRefId: text('lease_ref_id'),
+        leaseExpiresAt: timestamp('lease_expires_at', { withTimezone: true }),
+        privacySafeFailureCategoryId: text('privacy_safe_failure_category_id'),
+        correlationId: text('correlation_id').notNull(),
+        createdAt: timestamp('created_at', { withTimezone: true }).notNull(),
+        updatedAt: timestamp('updated_at', { withTimezone: true }).notNull(),
+    }, (t) => [
+        uniqueIndex('opaque_dispatch_hint_uidx').on(t.tenantRouteId, t.executionId, t.expectedRevision),
+        index('opaque_dispatch_claim_idx').on(t.deliveryState, t.notBefore, t.leaseExpiresAt),
+    ]);
+}
+//# sourceMappingURL=schema.js.map

package/dist/durable/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/durable/schema.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,sEAAsE;AACtE,wEAAwE;AACxE,2DAA2D;AAC3D,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAE7E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC5F,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAEtF,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,iBAAiB;IACjB,gBAAgB;IAChB,YAAY;IACZ,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;CACT,CAAC;AAEX,MAAM,CAAC,MAAM,yBAAyB,GAAG,iBAAiB,CAAC;AAE3D,MAAM,UAAU,yBAAyB,CAAC,UAAmB;IAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,UAAU,IAAI,sBAAsB,EAAE,CAAC,CAAC;IAEtE,MAAM,cAAc,GAAG,KAAK,CAC1B,iBAAiB,EACjB;QACE,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,UAAU,EAAE;QAC9C,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;QAC1C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;QACvC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;QACvC,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;QAC9C,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;QAChC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;QAC7C,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE;QACvD,aAAa,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;QAChD,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;QAC1C,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;QACrC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;QAC/C,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;QACpE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;QACpE,MAAM,EAAE,SAAS,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACpD,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;KACxC,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;QACL,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAChD,KAAK,CAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;KACrD,CACF,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,CACzB,gBAAgB,EAChB;QACE,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,UAAU,EAAE;QACvD,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;QAC3C,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;QACjC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;QACrC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;QAC9B,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;QACpE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;QACpE,WAAW,EAAE,SAAS,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;KAC/D,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAC5D,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,CACrB,YAAY,EACZ;QACE,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,UAAU,EAAE;QAC/C,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;QAC3C,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;QACjC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;QAC5B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;QAC9B,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;QACpE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;QACpE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC1D,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC1D,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;KAC7D,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CACxD,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,CACzB,gBAAgB,EAChB;QACE,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,UAAU,EAAE;QACvD,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;QAC3C,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE;QACrD,aAAa,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;QAClD,WAAW,EAAE,SAAS,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;QACxE,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;KAC3C,EACD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CACnE,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,CAC1B,iBAAiB,EACjB;QACE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE;QACxC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;QAC3C,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;QAC1C,gBAAgB,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE;QACxD,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;QAC9C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;QACvC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;QACjC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;QAC7C,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE;QACvD,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;QAC/C,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;QAC5C,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE;QACpD,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;QACpE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;QACpE,WAAW,EAAE,SAAS,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC9D,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC;QAChC,YAAY,EAAE,SAAS,CAAC,gBAAgB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACjE,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;KAC5C,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;QACL,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC;QACtE,KAAK,CAAC,8BAA8B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,gBAAgB,CAAC;KAC5E,CACF,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,CAAC,iBAAiB,EAAE;QAC7C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE;QAC1C,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;QAC9B,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;KACrE,CAAC,CAAC;IAEH,OAAO;QACL,cAAc;QACd,aAAa;QACb,SAAS;QACT,aAAa;QACb,cAAc;QACd,aAAa;KACd,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,UAAmB;IAC1D,MAAM,KAAK,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC1C,OAAO,KAAK,CACV,iBAAiB,EACjB;QACE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE;QAC5C,eAAe,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE;QACnD,aAAa,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;QAChD,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;QAC3C,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;QAC7C,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE;QACvD,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;QACjC,yBAAyB,EAAE,IAAI,CAAC,+BAA+B,CAAC,CAAC,OAAO,EAAE;QAC1E,gBAAgB,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE;QACxD,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;QAC9C,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;QAC5C,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE;QACpD,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;QAC/C,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;QACrC,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;QACpE,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC;QAChC,cAAc,EAAE,SAAS,CAAC,kBAAkB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACrE,4BAA4B,EAAE,IAAI,CAAC,kCAAkC,CAAC;QACtE,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE;QAC/C,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;QACpE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;KACrE,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;QACL,WAAW,CAAC,2BAA2B,CAAC,CAAC,EAAE,CACzC,CAAC,CAAC,aAAa,EACf,CAAC,CAAC,WAAW,EACb,CAAC,CAAC,gBAAgB,CACnB;QACD,KAAK,CAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,cAAc,CAAC;KACtF,CACF,CAAC;AACJ,CAAC"}

package/dist/durable/spine-claim.d.ts

@@ -0,0 +1,16 @@
+import type { PostgresJsDatabase } from 'drizzle-orm/postgres-js';
+import { type OpaqueDispatchRecord } from './types.js';
+export declare function spineRowFromSql(row: Record<string, unknown>): OpaqueDispatchRecord;
+export interface SpineClaimOptions {
+    workerId: string;
+    leaseDurationMs: number;
+    limit?: number;
+}
+/**
+ * Claim ready (or lease-expired) spine rows. Concurrent callers each get
+ * different rows because of FOR UPDATE SKIP LOCKED.
+ */
+export declare function claimSpineDispatch(db: PostgresJsDatabase, options: SpineClaimOptions): Promise<OpaqueDispatchRecord[]>;
+export declare function ackSpineDispatch(db: PostgresJsDatabase, dispatchId: string): Promise<boolean>;
+export declare function upsertSpineDispatch(db: PostgresJsDatabase, record: OpaqueDispatchRecord): Promise<OpaqueDispatchRecord>;
+//# sourceMappingURL=spine-claim.d.ts.map

package/dist/durable/spine-claim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spine-claim.d.ts","sourceRoot":"","sources":["../../src/durable/spine-claim.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,EAAsB,KAAK,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAqB3E,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,oBAAoB,CA0BlF;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,kBAAkB,EACtB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CA0BjC;AAED,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,kBAAkB,EACtB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC,CAWlB;AAED,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,kBAAkB,EACtB,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,oBAAoB,CAAC,CAgC/B"}

package/dist/durable/spine-claim.js

@@ -0,0 +1,131 @@
+// Spine claim loop: the existing FOR UPDATE SKIP LOCKED pattern from
+// flows/engine.ts, pointed at opaque_dispatch. Lease lives on the spine row only.
+import { sql } from 'drizzle-orm';
+import { createOpaqueDispatchRecord } from './opaque-dispatch.js';
+import { SpineDeliveryState } from './types.js';
+function getRowsAffected(result) {
+    const r = result;
+    if (typeof r?.rowCount === 'number')
+        return r.rowCount;
+    if (typeof r?.count === 'number')
+        return r.count;
+    if (typeof r?.length === 'number')
+        return r.length;
+    return 0;
+}
+function asRows(result) {
+    if (Array.isArray(result))
+        return result;
+    return [];
+}
+function toIso(value) {
+    if (value instanceof Date)
+        return value.toISOString();
+    if (typeof value === 'string')
+        return value;
+    throw new Error(`expected timestamptz, got ${typeof value}`);
+}
+export function spineRowFromSql(row) {
+    return createOpaqueDispatchRecord({
+        dispatchId: String(row.dispatch_id),
+        tenantRouteId: String(row.tenant_route_id),
+        executionId: String(row.execution_id),
+        definitionId: String(row.definition_id),
+        definitionVersion: String(row.definition_version),
+        stepId: String(row.step_id),
+        tenantExecutionStateRefId: String(row.tenant_execution_state_ref_id),
+        expectedRevision: Number(row.expected_revision),
+        tenantEpoch: Number(row.tenant_epoch),
+        workClassId: String(row.work_class_id),
+        priorityClassId: String(row.priority_class_id),
+        deliveryState: row.delivery_state,
+        attempt: Number(row.attempt),
+        notBefore: toIso(row.not_before),
+        leaseRefId: row.lease_ref_id == null ? undefined : String(row.lease_ref_id),
+        leaseExpiresAt: row.lease_expires_at == null ? undefined : toIso(row.lease_expires_at),
+        privacySafeFailureCategoryId: row.privacy_safe_failure_category_id == null
+            ? undefined
+            : String(row.privacy_safe_failure_category_id),
+        correlationId: String(row.correlation_id),
+        createdAt: toIso(row.created_at),
+        updatedAt: toIso(row.updated_at),
+    });
+}
+/**
+ * Claim ready (or lease-expired) spine rows. Concurrent callers each get
+ * different rows because of FOR UPDATE SKIP LOCKED.
+ */
+export async function claimSpineDispatch(db, options) {
+    const limit = options.limit ?? 50;
+    const leaseDurationInterval = `${options.leaseDurationMs} milliseconds`;
+    const result = await db.execute(sql `
+    UPDATE opaque_dispatch
+    SET delivery_state = ${SpineDeliveryState.Leased},
+        lease_ref_id = ${options.workerId},
+        lease_expires_at = now() + ${leaseDurationInterval}::interval,
+        attempt = attempt + 1,
+        updated_at = now()
+    WHERE dispatch_id IN (
+      SELECT dispatch_id
+      FROM opaque_dispatch
+      WHERE not_before <= now()
+        AND (
+          delivery_state = ${SpineDeliveryState.Ready}
+          OR delivery_state = ${SpineDeliveryState.RetryScheduled}
+          OR (delivery_state = ${SpineDeliveryState.Leased} AND lease_expires_at < now())
+        )
+      ORDER BY created_at
+      FOR UPDATE SKIP LOCKED
+      LIMIT ${limit}
+    )
+    RETURNING *
+  `);
+    return asRows(result).map(spineRowFromSql);
+}
+export async function ackSpineDispatch(db, dispatchId) {
+    const result = await db.execute(sql `
+    UPDATE opaque_dispatch
+    SET delivery_state = ${SpineDeliveryState.Acknowledged},
+        lease_ref_id = NULL,
+        lease_expires_at = NULL,
+        updated_at = now()
+    WHERE dispatch_id = ${dispatchId}
+      AND delivery_state <> ${SpineDeliveryState.Acknowledged}
+  `);
+    return getRowsAffected(result) > 0;
+}
+export async function upsertSpineDispatch(db, record) {
+    const result = await db.execute(sql `
+    INSERT INTO opaque_dispatch (
+      dispatch_id, contract_version, tenant_route_id, execution_id,
+      definition_id, definition_version, step_id, tenant_execution_state_ref_id,
+      expected_revision, tenant_epoch, work_class_id, priority_class_id,
+      delivery_state, attempt, not_before, lease_ref_id, lease_expires_at,
+      privacy_safe_failure_category_id, correlation_id, created_at, updated_at
+    ) VALUES (
+      ${record.dispatchId}, ${record.contractVersion}, ${record.tenantRouteId},
+      ${record.executionId}, ${record.definitionId}, ${record.definitionVersion},
+      ${record.stepId}, ${record.tenantExecutionStateRefId},
+      ${record.expectedRevision}, ${record.tenantEpoch}, ${record.workClassId},
+      ${record.priorityClassId}, ${record.deliveryState}, ${record.attempt},
+      ${record.notBefore}::timestamptz, ${record.leaseRefId ?? null},
+      ${record.leaseExpiresAt ?? null}, ${record.privacySafeFailureCategoryId ?? null},
+      ${record.correlationId}, ${record.createdAt}::timestamptz, ${record.updatedAt}::timestamptz
+    )
+    ON CONFLICT (tenant_route_id, execution_id, expected_revision)
+    DO UPDATE SET
+      delivery_state = EXCLUDED.delivery_state,
+      step_id = EXCLUDED.step_id,
+      tenant_epoch = EXCLUDED.tenant_epoch,
+      not_before = EXCLUDED.not_before,
+      updated_at = EXCLUDED.updated_at,
+      lease_ref_id = NULL,
+      lease_expires_at = NULL
+    RETURNING *
+  `);
+    const row = asRows(result)[0];
+    if (!row)
+        throw new Error('spine upsert returned no row');
+    return spineRowFromSql(row);
+}
+//# sourceMappingURL=spine-claim.js.map

package/dist/durable/spine-claim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spine-claim.js","sourceRoot":"","sources":["../../src/durable/spine-claim.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,kFAAkF;AAElF,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAA6B,MAAM,YAAY,CAAC;AAE3E,SAAS,eAAe,CAAC,MAAe;IACtC,MAAM,CAAC,GAAG,MAAsF,CAAC;IACjG,IAAI,OAAO,CAAC,EAAE,QAAQ,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,QAAQ,CAAC;IACvD,IAAI,OAAO,CAAC,EAAE,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC;IACjD,IAAI,OAAO,CAAC,EAAE,MAAM,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC;IACnD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM,CAAC,MAAe;IAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAmC,CAAC;IACtE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,KAAK,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAA4B;IAC1D,OAAO,0BAA0B,CAAC;QAChC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;QACnC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC;QAC1C,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;QACrC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC;QACvC,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACjD,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;QAC3B,yBAAyB,EAAE,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC;QACpE,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC/C,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;QACrC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC;QACtC,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC9C,aAAa,EAAE,GAAG,CAAC,cAAuD;QAC1E,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;QAC5B,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QAChC,UAAU,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;QAC3E,cAAc,EAAE,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACtF,4BAA4B,EAC1B,GAAG,CAAC,gCAAgC,IAAI,IAAI;YAC1C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,gCAAgC,CAAC;QAClD,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;QACzC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QAChC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;KACjC,CAAC,CAAC;AACL,CAAC;AAQD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,EAAsB,EACtB,OAA0B;IAE1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,MAAM,qBAAqB,GAAG,GAAG,OAAO,CAAC,eAAe,eAAe,CAAC;IACxE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;2BAEV,kBAAkB,CAAC,MAAM;yBAC3B,OAAO,CAAC,QAAQ;qCACJ,qBAAqB;;;;;;;;6BAQ7B,kBAAkB,CAAC,KAAK;gCACrB,kBAAkB,CAAC,cAAc;iCAChC,kBAAkB,CAAC,MAAM;;;;cAI5C,KAAK;;;GAGhB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAsB,EACtB,UAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;2BAEV,kBAAkB,CAAC,YAAY;;;;0BAIhC,UAAU;8BACN,kBAAkB,CAAC,YAAY;GAC1D,CAAC,CAAC;IACH,OAAO,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,EAAsB,EACtB,MAA4B;IAE5B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;;;;;;;QAQ7B,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,eAAe,KAAK,MAAM,CAAC,aAAa;QACrE,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,iBAAiB;QACvE,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,yBAAyB;QAClD,MAAM,CAAC,gBAAgB,KAAK,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;QACrE,MAAM,CAAC,eAAe,KAAK,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,OAAO;QAClE,MAAM,CAAC,SAAS,kBAAkB,MAAM,CAAC,UAAU,IAAI,IAAI;QAC3D,MAAM,CAAC,cAAc,IAAI,IAAI,KAAK,MAAM,CAAC,4BAA4B,IAAI,IAAI;QAC7E,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,SAAS,kBAAkB,MAAM,CAAC,SAAS;;;;;;;;;;;;GAYhF,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC1D,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC"}

package/dist/durable/types.d.ts

@@ -0,0 +1,153 @@
+/** Operational states the v1 durable core persists. */
+export declare const DurableExecutionStatus: {
+    readonly Created: "created";
+    readonly Running: "running";
+    readonly Waiting: "waiting";
+    readonly RetryScheduled: "retry-scheduled";
+    readonly Succeeded: "succeeded";
+    readonly Failed: "failed";
+    readonly Cancelled: "cancelled";
+};
+export type DurableExecutionStatus = (typeof DurableExecutionStatus)[keyof typeof DurableExecutionStatus];
+export declare const DurableStepStatus: {
+    readonly Pending: "pending";
+    readonly Ready: "ready";
+    readonly Running: "running";
+    readonly Succeeded: "succeeded";
+    readonly Failed: "failed";
+    readonly RetryScheduled: "retry-scheduled";
+};
+export type DurableStepStatus = (typeof DurableStepStatus)[keyof typeof DurableStepStatus];
+export declare const SpineDeliveryState: {
+    readonly Ready: "ready";
+    readonly Leased: "leased";
+    readonly RetryScheduled: "retry-scheduled";
+    readonly Acknowledged: "acknowledged";
+    readonly DeadLettered: "dead-lettered";
+};
+export type SpineDeliveryState = (typeof SpineDeliveryState)[keyof typeof SpineDeliveryState];
+/** Tenant-local execution row (authoritative). */
+export interface TenantExecutionState {
+    executionId: string;
+    stateRefId: string;
+    tenantRef: string;
+    revision: number;
+    tenantEpoch: number;
+    status: DurableExecutionStatus;
+    definitionId: string;
+    definitionVersion: string;
+    currentStepId: string;
+    stepIndex: number;
+    attempt: number;
+    correlationId: string;
+    createdAt: string;
+    updatedAt: string;
+    wakeAt?: string;
+    terminal: boolean;
+}
+export interface StepExecutionRecord {
+    stepExecutionId: string;
+    executionId: string;
+    stepId: string;
+    attempt: number;
+    state: DurableStepStatus;
+    startedAt: string;
+    updatedAt: string;
+    completedAt?: string;
+}
+export interface WaitStateRecord {
+    waitStateId: string;
+    executionId: string;
+    stepId: string;
+    kind: 'timer' | 'event' | 'retry';
+    state: 'waiting' | 'resumed' | 'expired' | 'cancelled';
+    createdAt: string;
+    updatedAt: string;
+    notBefore?: string;
+    expiresAt?: string;
+    resolvedAt?: string;
+}
+export interface TerminalStateRecord {
+    terminalStateId: string;
+    executionId: string;
+    operationalState: 'succeeded' | 'failed' | 'cancelled';
+    finalRevision: number;
+    completedAt: string;
+    /** Optional in v1; required in the draft contract. */
+    domainOutcomeId?: string;
+}
+/**
+ * Tenant-local dispatch-outbox row. Written in the same tenant transaction as
+ * the execution-state CAS. The pump publishes a spine hint after commit.
+ */
+export interface DispatchOutboxRow {
+    outboxId: string;
+    executionId: string;
+    stateRefId: string;
+    expectedRevision: number;
+    tenantEpoch: number;
+    tenantRef: string;
+    stepId: string;
+    definitionId: string;
+    definitionVersion: string;
+    correlationId: string;
+    workClassId: string;
+    priorityClassId: string;
+    notBefore: string;
+    createdAt: string;
+    publishedAt?: string;
+    spineRowId?: string;
+    spineAckedAt?: string;
+    superseded: boolean;
+}
+/**
+ * Spine OpaqueDispatchRecord — scheduling hint only.
+ * Must stay valid against contracts/tenancy/opaque-dispatch.schema.json
+ * (`additionalProperties: false`).
+ */
+export interface OpaqueDispatchRecord {
+    contractVersion: '0.1.0';
+    dispatchId: string;
+    tenantRouteId: string;
+    executionId: string;
+    definitionId: string;
+    definitionVersion: string;
+    stepId: string;
+    tenantExecutionStateRefId: string;
+    expectedRevision: number;
+    tenantEpoch: number;
+    workClassId: string;
+    priorityClassId: string;
+    deliveryState: SpineDeliveryState;
+    attempt: number;
+    notBefore: string;
+    leaseRefId?: string;
+    leaseExpiresAt?: string;
+    privacySafeFailureCategoryId?: string;
+    correlationId: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export declare const OPAQUE_DISPATCH_REQUIRED_KEYS: readonly ["contractVersion", "dispatchId", "tenantRouteId", "executionId", "definitionId", "definitionVersion", "stepId", "tenantExecutionStateRefId", "expectedRevision", "tenantEpoch", "workClassId", "priorityClassId", "deliveryState", "attempt", "notBefore", "correlationId", "createdAt", "updatedAt"];
+export declare const OPAQUE_DISPATCH_OPTIONAL_KEYS: readonly ["leaseRefId", "leaseExpiresAt", "privacySafeFailureCategoryId"];
+export declare const OPAQUE_DISPATCH_ALLOWED_KEYS: ReadonlySet<string>;
+/** Names that must never appear on a spine row (privacy by construction). */
+export declare const OPAQUE_DISPATCH_FORBIDDEN_KEYS: readonly ["payload", "input", "output", "state", "sharedState", "stepHistory", "auth", "authSnapshot", "authSnapshotJson", "privateInput", "privateOutput", "error", "lastError", "prompt", "evidence"];
+export declare const DEFAULT_WORK_CLASS_ID = "plumbus.work.flow-step";
+export declare const DEFAULT_PRIORITY_CLASS_ID = "plumbus.priority.normal";
+export type CasResult = 'ok' | 'stale' | 'missing';
+export declare class RevisionConflictError extends Error {
+    readonly executionId: string;
+    readonly expectedRevision: number;
+    readonly actualRevision: number | undefined;
+    readonly code = "revision-conflict";
+    constructor(executionId: string, expectedRevision: number, actualRevision: number | undefined);
+}
+export declare class EpochMismatchError extends Error {
+    readonly executionId: string;
+    readonly spineEpoch: number;
+    readonly tenantEpoch: number;
+    readonly code = "epoch-mismatch";
+    constructor(executionId: string, spineEpoch: number, tenantEpoch: number);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/durable/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/durable/types.ts"],"names":[],"mappings":"AAcA,uDAAuD;AACvD,eAAO,MAAM,sBAAsB;;;;;;;;CAQzB,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,OAAO,sBAAsB,CAAC,CAAC;AAEvE,eAAO,MAAM,iBAAiB;;;;;;;CAOpB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE3F,eAAO,MAAM,kBAAkB;;;;;;CAMrB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAE9F,kDAAkD;AAClD,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IAClC,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IACvD,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB,EAAE,MAAM,CAAC;IAClC,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,kBAAkB,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,6BAA6B,iTAmBhC,CAAC;AAEX,eAAO,MAAM,6BAA6B,2EAIhC,CAAC;AAEX,eAAO,MAAM,4BAA4B,EAAE,WAAW,CAAC,MAAM,CAG3D,CAAC;AAEH,6EAA6E;AAC7E,eAAO,MAAM,8BAA8B,yMAgBjC,CAAC;AAEX,eAAO,MAAM,qBAAqB,2BAA2B,CAAC;AAC9D,eAAO,MAAM,yBAAyB,4BAA4B,CAAC;AAEnE,MAAM,MAAM,SAAS,GAAG,IAAI,GAAG,OAAO,GAAG,SAAS,CAAC;AAEnD,qBAAa,qBAAsB,SAAQ,KAAK;IAG5C,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS;IAJ7C,QAAQ,CAAC,IAAI,uBAAuB;gBAEzB,WAAW,EAAE,MAAM,EACnB,gBAAgB,EAAE,MAAM,EACxB,cAAc,EAAE,MAAM,GAAG,SAAS;CAO9C;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAGzC,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM;IAJ9B,QAAQ,CAAC,IAAI,oBAAoB;gBAEtB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM;CAK/B"}

package/dist/durable/types.js

@@ -0,0 +1,114 @@
+// ── Durable dispatch core (Protocol A) ──
+// Tenant-DB-authoritative execution state plus a reconstructible spine hint.
+// This is the v1 field subset of execution-state.schema.json / opaque-dispatch
+// — not a second workflow engine. The existing flows engine will consume these
+// records; it is not replaced here.
+//
+// Contract fields v1 does not populate:
+//   ExecutionState: budgetLedgerRefId, package, policySnapshotRefId,
+//     privateInput/OutputRefId, evidenceSetRefId, provenanceRefId,
+//     authorizationDecisionRefId on every step, required domainOutcomeId on
+//     infrastructure-failure terminals, human-task / approval / compensation
+//     refs.
+//   Spine: no private payload by construction (additionalProperties: false).
+/** Operational states the v1 durable core persists. */
+export const DurableExecutionStatus = {
+    Created: 'created',
+    Running: 'running',
+    Waiting: 'waiting',
+    RetryScheduled: 'retry-scheduled',
+    Succeeded: 'succeeded',
+    Failed: 'failed',
+    Cancelled: 'cancelled',
+};
+export const DurableStepStatus = {
+    Pending: 'pending',
+    Ready: 'ready',
+    Running: 'running',
+    Succeeded: 'succeeded',
+    Failed: 'failed',
+    RetryScheduled: 'retry-scheduled',
+};
+export const SpineDeliveryState = {
+    Ready: 'ready',
+    Leased: 'leased',
+    RetryScheduled: 'retry-scheduled',
+    Acknowledged: 'acknowledged',
+    DeadLettered: 'dead-lettered',
+};
+export const OPAQUE_DISPATCH_REQUIRED_KEYS = [
+    'contractVersion',
+    'dispatchId',
+    'tenantRouteId',
+    'executionId',
+    'definitionId',
+    'definitionVersion',
+    'stepId',
+    'tenantExecutionStateRefId',
+    'expectedRevision',
+    'tenantEpoch',
+    'workClassId',
+    'priorityClassId',
+    'deliveryState',
+    'attempt',
+    'notBefore',
+    'correlationId',
+    'createdAt',
+    'updatedAt',
+];
+export const OPAQUE_DISPATCH_OPTIONAL_KEYS = [
+    'leaseRefId',
+    'leaseExpiresAt',
+    'privacySafeFailureCategoryId',
+];
+export const OPAQUE_DISPATCH_ALLOWED_KEYS = new Set([
+    ...OPAQUE_DISPATCH_REQUIRED_KEYS,
+    ...OPAQUE_DISPATCH_OPTIONAL_KEYS,
+]);
+/** Names that must never appear on a spine row (privacy by construction). */
+export const OPAQUE_DISPATCH_FORBIDDEN_KEYS = [
+    'payload',
+    'input',
+    'output',
+    'state',
+    'sharedState',
+    'stepHistory',
+    'auth',
+    'authSnapshot',
+    'authSnapshotJson',
+    'privateInput',
+    'privateOutput',
+    'error',
+    'lastError',
+    'prompt',
+    'evidence',
+];
+export const DEFAULT_WORK_CLASS_ID = 'plumbus.work.flow-step';
+export const DEFAULT_PRIORITY_CLASS_ID = 'plumbus.priority.normal';
+export class RevisionConflictError extends Error {
+    executionId;
+    expectedRevision;
+    actualRevision;
+    code = 'revision-conflict';
+    constructor(executionId, expectedRevision, actualRevision) {
+        super(`execution ${executionId}: expected revision ${expectedRevision}, found ${actualRevision ?? 'missing'}`);
+        this.executionId = executionId;
+        this.expectedRevision = expectedRevision;
+        this.actualRevision = actualRevision;
+        this.name = 'RevisionConflictError';
+    }
+}
+export class EpochMismatchError extends Error {
+    executionId;
+    spineEpoch;
+    tenantEpoch;
+    code = 'epoch-mismatch';
+    constructor(executionId, spineEpoch, tenantEpoch) {
+        super(`execution ${executionId}: spine tenantEpoch ${spineEpoch} !== tenant ${tenantEpoch}`);
+        this.executionId = executionId;
+        this.spineEpoch = spineEpoch;
+        this.tenantEpoch = tenantEpoch;
+        this.name = 'EpochMismatchError';
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/durable/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/durable/types.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E;AAC/E,oCAAoC;AACpC,EAAE;AACF,wCAAwC;AACxC,qEAAqE;AACrE,mEAAmE;AACnE,4EAA4E;AAC5E,6EAA6E;AAC7E,YAAY;AACZ,6EAA6E;AAE7E,uDAAuD;AACvD,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,cAAc,EAAE,iBAAiB;IACjC,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;CACd,CAAC;AAKX,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,cAAc,EAAE,iBAAiB;CACzB,CAAC;AAIX,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,cAAc,EAAE,iBAAiB;IACjC,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,eAAe;CACrB,CAAC;AAgHX,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,iBAAiB;IACjB,YAAY;IACZ,eAAe;IACf,aAAa;IACb,cAAc;IACd,mBAAmB;IACnB,QAAQ;IACR,2BAA2B;IAC3B,kBAAkB;IAClB,aAAa;IACb,aAAa;IACb,iBAAiB;IACjB,eAAe;IACf,SAAS;IACT,WAAW;IACX,eAAe;IACf,WAAW;IACX,WAAW;CACH,CAAC;AAEX,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,YAAY;IACZ,gBAAgB;IAChB,8BAA8B;CACtB,CAAC;AAEX,MAAM,CAAC,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC;IACvE,GAAG,6BAA6B;IAChC,GAAG,6BAA6B;CACjC,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,SAAS;IACT,OAAO;IACP,QAAQ;IACR,OAAO;IACP,aAAa;IACb,aAAa;IACb,MAAM;IACN,cAAc;IACd,kBAAkB;IAClB,cAAc;IACd,eAAe;IACf,OAAO;IACP,WAAW;IACX,QAAQ;IACR,UAAU;CACF,CAAC;AAEX,MAAM,CAAC,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AAC9D,MAAM,CAAC,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AAInE,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAGnC;IACA;IACA;IAJF,IAAI,GAAG,mBAAmB,CAAC;IACpC,YACW,WAAmB,EACnB,gBAAwB,EACxB,cAAkC;QAE3C,KAAK,CACH,aAAa,WAAW,uBAAuB,gBAAgB,WAAW,cAAc,IAAI,SAAS,EAAE,CACxG,CAAC;QANO,gBAAW,GAAX,WAAW,CAAQ;QACnB,qBAAgB,GAAhB,gBAAgB,CAAQ;QACxB,mBAAc,GAAd,cAAc,CAAoB;QAK3C,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGhC;IACA;IACA;IAJF,IAAI,GAAG,gBAAgB,CAAC;IACjC,YACW,WAAmB,EACnB,UAAkB,EAClB,WAAmB;QAE5B,KAAK,CAAC,aAAa,WAAW,uBAAuB,UAAU,eAAe,WAAW,EAAE,CAAC,CAAC;QAJpF,gBAAW,GAAX,WAAW,CAAQ;QACnB,eAAU,GAAV,UAAU,CAAQ;QAClB,gBAAW,GAAX,WAAW,CAAQ;QAG5B,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF"}

package/dist/errors/data-errors.d.ts

@@ -20,4 +20,10 @@ export declare class AISecurityBlockedError extends PlumbusError {
 export declare class AIBudgetExceededError extends PlumbusError {
     constructor(reason: string, metadata?: Record<string, unknown>);
 }
+export type GovernedAiBlockedCode = 'unpinned-prompt' | 'unpinned-policy' | 'artifact-kind-mismatch' | 'unregistered-model' | 'model-pin-mismatch' | 'missing-review' | 'expired-review' | 'budget-unknown' | 'budget-exceeded';
+/** Fail-closed stop before a governed model call. The model is not invoked. */
+export declare class GovernedAiBlockedError extends PlumbusError {
+    readonly blockedCode: GovernedAiBlockedCode;
+    constructor(code: GovernedAiBlockedCode, message: string, metadata?: Record<string, unknown>);
+}
 //# sourceMappingURL=data-errors.d.ts.map

package/dist/errors/data-errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"data-errors.d.ts","sourceRoot":"","sources":["../../src/errors/data-errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,qBAAa,mBAAoB,SAAQ,YAAY;gBACvC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAIhE;AAED,qBAAa,kBAAmB,SAAQ,YAAY;gBACtC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAIhE;AAED,qBAAa,iBAAkB,SAAQ,YAAY;gBACrC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAIhE;AAED,qBAAa,qBAAsB,SAAQ,YAAY;gBACzC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAIhE;AAED,qBAAa,sBAAuB,SAAQ,YAAY;gBAC1C,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAIhE;AAED,qBAAa,sBAAuB,SAAQ,YAAY;gBAC1C,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAQjE;AAED,qBAAa,qBAAsB,SAAQ,YAAY;gBACzC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D"}
+{"version":3,"file":"data-errors.d.ts","sourceRoot":"","sources":["../../src/errors/data-errors.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,qBAAa,mBAAoB,SAAQ,YAAY;gBACvC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAIhE;AAED,qBAAa,kBAAmB,SAAQ,YAAY;gBACtC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAIhE;AAED,qBAAa,iBAAkB,SAAQ,YAAY;gBACrC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAIhE;AAED,qBAAa,qBAAsB,SAAQ,YAAY;gBACzC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAIhE;AAED,qBAAa,sBAAuB,SAAQ,YAAY;gBAC1C,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAIhE;AAED,qBAAa,sBAAuB,SAAQ,YAAY;gBAC1C,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAQjE;AAED,qBAAa,qBAAsB,SAAQ,YAAY;gBACzC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED,MAAM,MAAM,qBAAqB,GAC7B,iBAAiB,GACjB,iBAAiB,GACjB,wBAAwB,GACxB,oBAAoB,GACpB,oBAAoB,GACpB,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,CAAC;AAEtB,+EAA+E;AAC/E,qBAAa,sBAAuB,SAAQ,YAAY;IACtD,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;gBAEhC,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAK7F"}

package/dist/errors/data-errors.js

@@ -42,4 +42,13 @@ export class AIBudgetExceededError extends PlumbusError {
         this.name = 'AIBudgetExceededError';
     }
 }
+/** Fail-closed stop before a governed model call. The model is not invoked. */
+export class GovernedAiBlockedError extends PlumbusError {
+    blockedCode;
+    constructor(code, message, metadata) {
+        super(ErrorCode.Forbidden, message, { code, ...metadata });
+        this.name = 'GovernedAiBlockedError';
+        this.blockedCode = code;
+    }
+}
 //# sourceMappingURL=data-errors.js.map

package/dist/errors/data-errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"data-errors.js","sourceRoot":"","sources":["../../src/errors/data-errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,OAAO,mBAAoB,SAAQ,YAAY;IACnD,YAAY,OAAe,EAAE,QAAkC;QAC7D,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,YAAY;IAClD,YAAY,OAAe,EAAE,QAAkC;QAC7D,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,YAAY;IACjD,YAAY,OAAe,EAAE,QAAkC;QAC7D,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,YAAY;IACrD,YAAY,OAAe,EAAE,QAAkC;QAC7D,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,YAAY;IACtD,YAAY,OAAe,EAAE,QAAkC;QAC7D,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,YAAY;IACtD,YAAY,MAAgB,EAAE,QAAkC;QAC9D,KAAK,CACH,SAAS,CAAC,SAAS,EACnB,yDAAyD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC7E,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CACxB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,YAAY;IACrD,YAAY,MAAc,EAAE,QAAkC;QAC5D,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,uBAAuB,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF"}
+{"version":3,"file":"data-errors.js","sourceRoot":"","sources":["../../src/errors/data-errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,OAAO,mBAAoB,SAAQ,YAAY;IACnD,YAAY,OAAe,EAAE,QAAkC;QAC7D,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,YAAY;IAClD,YAAY,OAAe,EAAE,QAAkC;QAC7D,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,YAAY;IACjD,YAAY,OAAe,EAAE,QAAkC;QAC7D,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,YAAY;IACrD,YAAY,OAAe,EAAE,QAAkC;QAC7D,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,YAAY;IACtD,YAAY,OAAe,EAAE,QAAkC;QAC7D,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,YAAY;IACtD,YAAY,MAAgB,EAAE,QAAkC;QAC9D,KAAK,CACH,SAAS,CAAC,SAAS,EACnB,yDAAyD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC7E,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CACxB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,YAAY;IACrD,YAAY,MAAc,EAAE,QAAkC;QAC5D,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,uBAAuB,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAaD,+EAA+E;AAC/E,MAAM,OAAO,sBAAuB,SAAQ,YAAY;IAC7C,WAAW,CAAwB;IAE5C,YAAY,IAA2B,EAAE,OAAe,EAAE,QAAkC;QAC1F,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;CACF"}