@registrystack/client 0.42.0 → 0.44.0

package/README.md

@@ -1,7 +1,12 @@
 # @registrystack/client
 
 One versioned Node.js package for the Discovery, Evidence, Base Registry
-Engine, Casework, Messaging, and Scheduling client APIs in Registry Stack.
+Engine, Casework, Messaging, Scheduling, and Coordinator client APIs in Registry Stack.
+
+Coordinator joins the client roster at v0.44.0. Its imports below require a
+Coordinator-enabled v0.44.0 candidate or published package; published v0.43.0
+contains the earlier six products. Check the version-specific release assets
+before installing. Source integration does not establish publication.
 
 ## Install
 
@@ -11,13 +16,13 @@ npm install "@registrystack/client@<version>"
 
 Requires Node.js 24.11 or newer. Supported targets are macOS arm64, Linux
 arm64 with glibc, and Linux x64 with glibc; installing the package pulls in
-one platform-specific optional dependency containing all six native
+one platform-specific optional dependency containing all seven native
 bindings.
 
 ## Usage
 
 ```js
-const { discovery, evidence, breg, casework, messaging, scheduling } = require('@registrystack/client');
+const { discovery, evidence, breg, casework, messaging, scheduling, coordinator } = require('@registrystack/client');
 
 const registry = new breg.BaseRegistryClient({
   baseUrl: 'https://registry.example.invalid/',
@@ -31,6 +36,9 @@ const messages = new messaging.MessagingClient({
 const appointments = new scheduling.SchedulingClient({
   baseUrl: 'https://scheduling.example.invalid/',
 });
+const workflows = new coordinator.CoordinatorClient({
+  baseUrl: 'https://coordinator.example.invalid/',
+});
 ```
 
 ## Products
@@ -48,9 +56,22 @@ const appointments = new scheduling.SchedulingClient({
 - `scheduling`: Registry Scheduling, published offerings, availability,
   holds, and appointments over operator-anchored supply.
 
+- `coordinator`: Registry Coordinator, workflow contracts, admission, run status,
+  inspection, and operator recovery. It is optional for direct product composition.
+
 Each product remains in its own namespace because its routing,
 authentication, errors, and verification rules are different.
 
+## Compatibility metadata
+
+The package includes the tested server baseline and compatible patch line for
+the Discovery namespace. Read the version-matched record through the exported
+JSON path:
+
+```js
+const compatibility = require('@registrystack/client/compatibility.json');
+```
+
 ## TypeScript
 
 A TypeScript consumer also needs the Node type definitions, and must name
@@ -90,7 +111,7 @@ for the full rules.
 
 A keyed BReg, Casework, Messaging, or Scheduling mutation whose outcome is
 unknown is resent identically under the same idempotency key up to
-`maxMutationRetries` times, a client option: 0 to 2, default 2, and 0 sends it
+`maximumMutationRetries` times, a client option: 0 to 2, default 2, and 0 sends it
 once. Casework review-request create and cancel are excluded from this retry.
 Reads, unkeyed calls, and every 4xx refusal are never resent. When the returned error
 still reports `outcomeUnknown`, the mutation may have taken effect: recover by
@@ -100,12 +121,12 @@ attempt under the key was answered and may have committed: reconcile that
 attempt before choosing a new key.
 See [Unknown outcomes](https://docs.registrystack.org/reference/client-api/#unknown-outcomes-and-the-same-key-retry).
 
-`breg.verifyWebhookDelivery({ method, path, headers, body, key })` authenticates
-the exact bytes of one Version 1 webhook delivery. The result returns
+`breg.verifyHookDelivery({ method, path, headers, body, key })` authenticates
+the exact bytes of one Version 1 hook delivery. The result returns
 `deliveryTime` and `idempotencyKey`; the receiver must bound clock skew and
 deduplicate once-only effects on authenticated `source` plus `id`, or on an
 application business key. See
-[Verify a webhook delivery](https://docs.registrystack.org/reference/client-api/#verify-a-webhook-delivery)
+[Verify a hook delivery](https://docs.registrystack.org/reference/client-api/#verify-a-hook-delivery)
 for a receiver example.
 
 ## Versioning
@@ -163,3 +184,12 @@ without the cursor after `410 review.result-expired`.
 ## License
 
 Apache-2.0
+
+Coordinator joins the seven-product roster at v0.44.0. The source facade also
+contains held `render` and `@registrystack/client/render` namespaces. Default
+assembly omits Render; `--include-render` adds it to an explicit local candidate
+and does not authorize publication. Render takes a token or a resource-bound provider with
+`bearerToken()` and performs one bounded render exchange. A correlation key is
+not a durable idempotency promise. `outcomeUnknown` and `transportKind` preserve
+whether an exchange may have completed; provider errors keep their own class.
+Coordinator is optional.

package/breg/client.d.ts

@@ -7,7 +7,7 @@ export type JsonObject = { readonly [key: string]: JsonValue }
 /** An integer that satisfies `Number.isSafeInteger` and the option's documented bounds. */
 export type SafeInteger = number
 
-export type WebhookVerificationRefusalCode =
+export type HookVerificationRefusalCode =
   | 'missing-header'
   | 'invalid-delivery-time'
   | 'duplicate-header'
@@ -17,7 +17,7 @@ export type WebhookVerificationRefusalCode =
   | 'signature-mismatch'
   | 'unsupported-version'
 
-export interface WebhookDeliveryInput {
+export interface HookDeliveryInput {
   method: string
   path: string
   headers: Readonly<Record<string, string>>
@@ -27,7 +27,7 @@ export interface WebhookDeliveryInput {
   key: Buffer
 }
 
-export interface VerifiedWebhookDelivery {
+export interface VerifiedHookDelivery {
   readonly id: string
   readonly source: string
   readonly type: string
@@ -41,10 +41,21 @@ export interface VerifiedWebhookDelivery {
 }
 
 /**
- * Authenticate one exact Base Registry Engine Version 1 webhook delivery.
+ * Authenticate one exact Base Registry Engine Version 1 hook delivery.
  * Apply delivery-time skew and idempotency policy before acting on the body.
  */
-export declare function verifyWebhookDelivery(input: WebhookDeliveryInput): VerifiedWebhookDelivery
+export declare function verifyHookDelivery(input: HookDeliveryInput): VerifiedHookDelivery
+
+/**
+ * Project one record revision into the event record view. `argumentsJson` is a
+ * JSON object with `registryRevision`, `recordType`, `descriptor`, `record`
+ * and optional `creationRevision`, `actionReceipts` and
+ * `proposalApplications`. The result is the view document as JSON text.
+ * Failures carry kind `event-record` and one of the codes `not-an-event-record`,
+ * `unsupported-version`, `malformed-descriptor`, `wrong-record-evidence`,
+ * `revision-mismatch`, `incompatible-metadata` or `invalid-input`.
+ */
+export declare function eventRecordView(argumentsJson: string): string
 
 export interface PrivateJwk {
   readonly kty: string
@@ -62,24 +73,24 @@ export interface PrivateKeyJwtConfig {
    * authentication). Defaults to the token endpoint URL. This is not the
    * `resource` of the token request.
    */
-  audience?: string | null
+  audience?: string
   /**
    * The RFC 8707 resource indicator the token is requested for: the resource
    * server's registered identifier, not a URL to fetch.
    */
-  resource?: string | null
+  resource?: string
   /**
    * The scopes requested for the token, sent as one space-delimited `scope`
    * parameter. A requested scope may narrow the client's registered
    * permission set; it can never widen it.
    */
-  scopes?: ReadonlyArray<string> | null
-  assertionLifetimeSeconds?: SafeInteger | null
-  refreshMarginSeconds?: SafeInteger | null
-  requestTimeoutMilliseconds?: SafeInteger | null
-  connectTimeoutMilliseconds?: SafeInteger | null
-  userAgent?: string | null
-  trustedRootCertificates?: string | null
+  scopes?: ReadonlyArray<string>
+  assertionLifetimeSeconds?: SafeInteger
+  refreshMarginSeconds?: SafeInteger
+  attemptTimeoutMilliseconds?: SafeInteger
+  connectTimeoutMilliseconds?: SafeInteger
+  userAgent?: string
+  trustedRootCertificates?: string
 }
 
 /** OAuth credentials are returned to the caller. Keep them out of logs and persistence. */
@@ -98,7 +109,7 @@ export interface ExchangeContext {
   audience: string
   generation: string
   deadlineSeconds: SafeInteger
-  grantId?: string | null
+  grantId?: string
 }
 
 export type ExchangePrivateKeyJwtConfig = PrivateKeyJwtConfig & {
@@ -118,10 +129,10 @@ export interface RemoteExchangeSource {
   bootstrap: ExchangePrivateKeyJwtConfig
   bootstrapResource: string
   bootstrapScope: string
-  requestTimeoutMilliseconds?: SafeInteger | null
-  connectTimeoutMilliseconds?: SafeInteger | null
-  userAgent?: string | null
-  trustedRootCertificates?: string | null
+  attemptTimeoutMilliseconds?: SafeInteger
+  connectTimeoutMilliseconds?: SafeInteger
+  userAgent?: string
+  trustedRootCertificates?: string
 }
 
 export type ExchangeAuthorizationConfig =
@@ -135,12 +146,12 @@ export type BaseRegistryAuthorization =
 
 export interface BaseRegistryClientConfig {
   baseUrl: string
-  authorization?: BaseRegistryAuthorization | null
-  requestTimeoutMilliseconds?: SafeInteger | null
-  connectTimeoutMilliseconds?: SafeInteger | null
-  maxResponseBytes?: SafeInteger | null
-  userAgent?: string | null
-  trustedRootCertificates?: string | null
+  authorization?: BaseRegistryAuthorization
+  attemptTimeoutMilliseconds?: SafeInteger
+  connectTimeoutMilliseconds?: SafeInteger
+  maximumResponseBytes?: SafeInteger
+  userAgent?: string
+  trustedRootCertificates?: string
   /**
    * How many times a keyed mutation (create, patch, attachment upload or
    * delete, lifecycle action, immediate action, batch, tombstone, statistics
@@ -149,7 +160,7 @@ export interface BaseRegistryClientConfig {
    * number from 0 to 2, default 2; 0 sends it once. Any other value is a
    * `configuration` error.
    */
-  maxMutationRetries?: SafeInteger | null
+  maximumMutationRetries?: SafeInteger
 }
 
 export type RecordFormat = 'json' | 'json-ld'
@@ -473,6 +484,7 @@ export interface BRegProposalActionDescriptor {
   readonly accessProfile: string
   readonly operations: ReadonlyArray<string>
   readonly readableInputs: ReadonlyArray<string>
+  readonly readableContextFields: ReadonlyArray<string>
 }
 
 export interface BRegActionAttachmentDescriptor {
@@ -536,7 +548,7 @@ export interface BRegActionReceipt {
 
 export type BRegActionAvailability =
   | { readonly available: true; readonly observedRevision: number }
-  | { readonly available: false; readonly observedRevision: number; readonly reason: 'guard-not-satisfied'; readonly recovery: 'none' }
+  | { readonly available: false; readonly observedRevision: number; readonly reason: 'guard-not-satisfied'; readonly guardReason?: string; readonly recovery: 'none' }
   | { readonly available: null; readonly observedRevision: number; readonly reason: 'input-required'; readonly recovery: 'correct-input'; readonly missingInputs: ReadonlyArray<string> }
   | { readonly available: null; readonly observedRevision: null; readonly reason: 'not-disclosed'; readonly recovery: 'none' }
 
@@ -795,6 +807,8 @@ export declare class BRegMetadata {
   selectAction(actionIdentifier: string, expectedProfile: string): BRegActionBinding
   selectTombstone(recordTypeIdentifier: string, expectedProfile: string): BRegTombstoneBinding
   selectBatch(recordTypeIdentifier: string, expectedProfile: string): BRegBatchBinding
+  /** The event record descriptor declared for a record type, as JSON text. */
+  eventRecordDescriptor(recordType: string): string
 }
 
 /** Bounded declared identifiers; absent when any referenced field is unreadable. */
@@ -815,6 +829,7 @@ export interface BaseRegistryClientFailure extends Error {
   readonly code?: string
   readonly refusalCode?: string
   readonly reasonCode?: string
+  readonly guardReason?: string
   readonly fieldPath?: string
   readonly constraint?: BRegConstraintViolation
   readonly status?: number
@@ -842,6 +857,7 @@ export declare class BaseRegistryClientError extends Error implements BaseRegist
   readonly code?: string
   readonly refusalCode?: string
   readonly reasonCode?: string
+  readonly guardReason?: string
   readonly fieldPath?: string
   readonly constraint?: BRegConstraintViolation
   readonly status?: number
@@ -879,6 +895,12 @@ export declare class BaseRegistryClient {
   ready(): Promise<CompleteOutcome<ProbeStatus>>
   openapi(accessProfile?: string | null): Promise<RawOutcome>
   registryMetadata(accessProfile?: string | null): Promise<RawOutcome>
+  /**
+   * The first revision of a record as
+   * `{recordType, recordId, revision, createdAt}` JSON text, or null when the
+   * caller may not read it (403 or 404).
+   */
+  eventRecordCreationRevision(entityRoute: string, recordIdentifier: string, accessProfile?: string | null): Promise<string | null>
   statisticsLive(dataset: string, from?: string | null, to?: string | null, accessProfile?: string | null, format?: StatisticsFormat | null): Promise<RawOutcome>
   statisticsReleases(dataset: string, top?: SafeInteger | null, skipToken?: string | null, accessProfile?: string | null): Promise<RawOutcome>
   statisticsLatestRelease(dataset: string, period: string, selection: StatisticsReleaseSelection, accessProfile?: string | null, format?: StatisticsFormat | null): Promise<RawOutcome>

package/breg/client.js

@@ -16,7 +16,7 @@ class BaseRegistryClientError extends Error {
     for (const field of ['code', 'refusalCode', 'reasonCode', 'status', 'traceId', 'transportKind', 'tokenKind']) {
       if (envelope[field] !== undefined && envelope[field] !== null) this[field] = envelope[field];
     }
-    for (const field of ['fieldPath', 'constraint']) {
+    for (const field of ['fieldPath', 'constraint', 'guardReason']) {
       if (envelope[field] !== undefined && envelope[field] !== null) {
         Object.defineProperty(this, field, {
           value: envelope[field],
@@ -82,7 +82,7 @@ function plainDataObject(value, expectedFields) {
   return result;
 }
 
-function webhookHeaders(value) {
+function hookHeaders(value) {
   if (value === null || typeof value !== 'object' || Array.isArray(value) || isProxy(value)) {
     throw inputError('invalid-request');
   }
@@ -102,7 +102,7 @@ function webhookHeaders(value) {
   return result;
 }
 
-function verifyWebhookDelivery(value) {
+function verifyHookDelivery(value) {
   try {
     const input = plainDataObject(value, ['method', 'path', 'headers', 'body', 'key']);
     if (typeof input.method !== 'string' || typeof input.path !== 'string'
@@ -110,10 +110,19 @@ function verifyWebhookDelivery(value) {
       || isSharedArrayBuffer(input.body.buffer) || isSharedArrayBuffer(input.key.buffer)) {
       throw inputError('invalid-request');
     }
-    input.headers = webhookHeaders(input.headers);
+    input.headers = hookHeaders(input.headers);
     input.body = Buffer.from(input.body);
     input.key = Buffer.from(input.key);
-    return native.verifyWebhookDelivery(input);
+    return native.verifyHookDelivery(input);
+  } catch (error) {
+    throw normalize(error, 'invalid-request');
+  }
+}
+
+function eventRecordView(argumentsJson) {
+  try {
+    if (typeof argumentsJson !== 'string') throw inputError('invalid-request');
+    return native.eventRecordView(argumentsJson);
   } catch (error) {
     throw normalize(error, 'invalid-request');
   }
@@ -211,7 +220,7 @@ for (const [method, jsonIndexes, requiredIndexes] of [
   ['statisticsLive'], ['statisticsReleases'], ['statisticsLatestRelease'],
   ['statisticsReleaseVersion'], ['statisticsReleaseSeries'], ['statisticsPublish'],
   ['statisticsWithdraw'],
-  ['recordRevisions'], ['getRecordRevision', [3]],
+  ['recordRevisions'], ['getRecordRevision', [3]], ['eventRecordCreationRevision'],
   ['getRecord', [2]], ['listRecords', [1]], ['continueList', [0], [0]],
   ['getGeoJsonRecord', [2]], ['listGeoJsonRecords', [1]], ['continueGeoJsonList', [0], [0]],
   ['listCurrentRecords', [1]], ['continueCurrentList', [0], [0]],
@@ -298,7 +307,7 @@ const BRegPreparedProposal = preparedClass(native.BRegPreparedProposal, 'BRegPre
 for (const name of [
   'selectCreate', 'selectPatch',
   'selectAction', 'selectTombstone', 'selectBatch', 'selectProposals', 'selectProposalGet',
-  'selectProposalReviewContext', 'selectProposalReviewStatus',
+  'selectProposalReviewContext', 'selectProposalReviewStatus', 'eventRecordDescriptor',
 ]) {
   const original = native.BRegMetadata.prototype[name];
   native.BRegMetadata.prototype[name] = function (...args) {
@@ -373,7 +382,8 @@ class PrivateKeyJwt {
 }
 
 module.exports = {
-  verifyWebhookDelivery,
+  verifyHookDelivery,
+  eventRecordView,
   PrivateKeyJwt,
   BaseRegistryClient,
   BaseRegistryClientError,

package/breg/index.d.ts

@@ -20,6 +20,12 @@ export declare class BaseRegistryClient {
   recordRevisions(entityRoute: string, recordIdentifier: string, accessProfile?: string | undefined | null): Promise<RawOutcome>
   /** Retrieve one exact retained revision as validated inert record JSON. */
   getRecordRevision(entityRoute: string, recordIdentifier: string, revision: number, options?: any | undefined | null): Promise<RawOutcome>
+  /**
+   * Read the first revision of one record as the compact
+   * `{recordType, recordId, revision, createdAt}` JSON, or null when the
+   * caller may not read it.
+   */
+  eventRecordCreationRevision(entityRoute: string, recordIdentifier: string, accessProfile?: string | undefined | null): Promise<string | null>
   getRecord(entityRoute: string, recordIdentifier: string, options?: any | undefined | null): Promise<CompleteOutcome>
   listRecords(entityRoute: string, options?: any | undefined | null): Promise<PageOutcome>
   continueList(value: any): Promise<PageOutcome>
@@ -58,7 +64,7 @@ export declare class BaseRegistryClient {
   /**
    * Invoke one metadata-selected immediate action. An invocation whose
    * outcome is unknown is resent identically under the same key, at most
-   * `maxMutationRetries` times.
+   * `maximumMutationRetries` times.
    */
   invokeAction(binding: BRegActionBinding, inputs: any, idempotencyKey: string, conditions?: BRegActionTargetConditions | undefined | null): Promise<CompleteOutcome>
   /**
@@ -75,7 +81,7 @@ export declare class BaseRegistryClient {
   /**
    * Explicitly send a recovered invocation under its original key. An
    * invocation whose outcome is unknown is resent identically under that
-   * key, at most `maxMutationRetries` times.
+   * key, at most `maximumMutationRetries` times.
    */
   executeRecoveredAction(binding: BRegActionBinding, recovered: BRegRecoveredAction): Promise<CompleteOutcome>
   /** Execute a recovered proposal start with its exact original request and key. */
@@ -91,7 +97,7 @@ export declare class BaseRegistryClient {
   /**
    * Execute one metadata-selected atomic batch. A batch whose outcome is
    * unknown is resent identically under the same key, at most
-   * `maxMutationRetries` times.
+   * `maximumMutationRetries` times.
    */
   batchRecords(binding: BRegBatchBinding, request: any, idempotencyKey: string): Promise<CompleteOutcome>
   /**
@@ -207,6 +213,8 @@ export declare class BRegIngestionPrefixDigest {
 export type IngestionPrefixDigest = BRegIngestionPrefixDigest
 
 export declare class BRegMetadata {
+  /** The event record descriptor declared for one record type, as JSON text. */
+  eventRecordDescriptor(recordType: string): string
   /** Read-only capability inventory for each exact Action/profile pair. */
   get proposalActions(): any
   /** Caller-filtered inert descriptors. Selectors below remain the only authority constructors. */
@@ -328,6 +336,22 @@ export interface CompleteOutcome {
  */
 export declare function encodeIngestionChunk(chunkIndex: number, items: any, prefixDigest: string): BRegIngestionChunk
 
+/**
+ * Project one record revision into the event record view. The input is the
+ * JSON arguments document of the Rust projection; the result is the view
+ * document as JSON text.
+ */
+export declare function eventRecordView(argumentsJson: string): string
+
+/** Exact BReg hook request supplied by a receiver. */
+export interface HookDeliveryInput {
+  method: string
+  path: string
+  headers: Record<string, string>
+  body: Buffer
+  key: Buffer
+}
+
 /** Validated product result serialized before the JavaScript number boundary. */
 export interface JsonOutcome {
   kind: string
@@ -364,8 +388,8 @@ export interface RawOutcome {
   reprDigest?: string
 }
 
-/** Authenticated BReg webhook metadata and exact body. */
-export interface VerifiedWebhookDelivery {
+/** Authenticated BReg hook metadata and exact body. */
+export interface VerifiedHookDelivery {
   id: string
   source: string
   type: string
@@ -378,14 +402,5 @@ export interface VerifiedWebhookDelivery {
   body: Buffer
 }
 
-/** Verify a BReg Version 1 webhook signature without applying receiver policy. */
-export declare function verifyWebhookDelivery(input: WebhookDeliveryInput): VerifiedWebhookDelivery
-
-/** Exact BReg webhook request supplied by a receiver. */
-export interface WebhookDeliveryInput {
-  method: string
-  path: string
-  headers: Record<string, string>
-  body: Buffer
-  key: Buffer
-}
+/** Verify a BReg Version 1 hook signature without applying receiver policy. */
+export declare function verifyHookDelivery(input: HookDeliveryInput): VerifiedHookDelivery

package/casework/client.d.ts

@@ -8,11 +8,11 @@ export type JsonObject = { readonly [key: string]: JsonValue }
 
 export interface CaseworkClientConfig {
   baseUrl: string
-  requestTimeoutMilliseconds?: SafeInteger | null
-  connectTimeoutMilliseconds?: SafeInteger | null
-  maxResponseBytes?: SafeInteger | null
-  userAgent?: string | null
-  trustedRootCertificates?: string | null
+  attemptTimeoutMilliseconds?: SafeInteger
+  connectTimeoutMilliseconds?: SafeInteger
+  maximumResponseBytes?: SafeInteger
+  userAgent?: string
+  trustedRootCertificates?: string
   /**
    * How many times an idempotency-keyed mutation whose outcome is unknown is
    * resent, identically and under the same key, before its error is
@@ -20,7 +20,7 @@ export interface CaseworkClientConfig {
    * unkeyed operations, and review request create and cancel are never
    * resent. Any other value is a `configuration` error.
    */
-  maxMutationRetries?: SafeInteger | null
+  maximumMutationRetries?: SafeInteger
 }
 
 export type PageStatus = 'complete' | 'budget-exhausted' | 'source-unavailable'
@@ -72,7 +72,7 @@ export type DirectoryTargetPage = Page<DirectoryMember>
 export interface QueueRecord { id: string; label: string }
 export type RoutingPredicate = { equals: JsonValue } | { oneOf: ReadonlyArray<JsonValue> }
 export interface RoutingCondition { stage?: string; fields?: Readonly<Record<string, RoutingPredicate>> }
-export interface RoutingRule { id: string; because: string; when: RoutingCondition; queue: string }
+export interface RoutingRule { id: string; label?: string; because: string; when: RoutingCondition; queue: string }
 export type WorkingWeekday = 'monday' | 'tuesday' | 'wednesday' | 'thursday' | 'friday' | 'saturday' | 'sunday'
 export interface CalendarPolicy { id: string; timezone: string; workingWeekdays: ReadonlyArray<WorkingWeekday>; holidaySet: string }
 export interface WorkingDays { workingDays: SafeInteger }
@@ -189,7 +189,7 @@ export class CaseworkClientError extends Error {
   readonly traceId?: string
   readonly validation?: {
     readonly path: string
-    readonly reason: 'policy-not-allowed' | 'reference-invalid' | 'object-required' | 'maximum-bytes-exceeded' | 'maximum-depth-exceeded' | 'schema-mismatch' | 'outcome-not-declared' | 'reason-required' | 'text-invalid' | 'result-not-declared' | 'result-required' | 'field-not-declared' | 'constraint-invalid' | 'constraint-violated' | 'public-reason-required' | 'public-reason-not-declared' | 'approval-outcome-differs'
+    readonly reason: 'binding-invalid' | 'field-required' | 'policy-not-allowed' | 'reference-invalid' | 'object-required' | 'maximum-bytes-exceeded' | 'maximum-depth-exceeded' | 'schema-mismatch' | 'outcome-not-declared' | 'reason-required' | 'text-invalid' | 'result-not-declared' | 'result-required' | 'field-not-declared' | 'constraint-invalid' | 'constraint-violated' | 'public-reason-required' | 'public-reason-not-declared' | 'approval-outcome-differs'
     /** Outcome identifiers the review policy declares for the requested settlement when an outcome is refused; empty otherwise. */
     readonly allowed: ReadonlyArray<string>
   }
@@ -364,15 +364,16 @@ export interface ReviewAccountabilityRecord {
   occurredAt: string; retainedUntil: string
   decisionReceipt?: ReviewDecisionReceipt
 }
-export interface ReviewStagePolicy { id: string; queue: string; decidingProfiles: ReadonlyArray<string>; requiredApprovals: SafeInteger; excludeInitiator?: boolean; excludePreviousStageReviewers?: boolean }
+export interface ReviewStagePolicy { id: string; label?: string; queue: string; decidingProfiles: ReadonlyArray<string>; requiredApprovals: SafeInteger; negativeDecisions?: 'settle' | 'advise'; excludeInitiator?: boolean; excludePreviousStageReviewers?: boolean }
 export interface ReviewRetentionPolicy { terminalRetentionDays: SafeInteger; accountabilityRetentionDays: SafeInteger }
 export interface ReviewContextContract { id: string; revision: ContentDigest; schemaDigest: ContentDigest }
 export type ReviewContextPolicy = { mode: 'submitted' } | { mode: 'current-source'; provider: string; contract: ReviewContextContract }
 export type ReviewContextCapability = 'human-display' | 'service-status' | 'task-grant-context' | 'routing-context'
 export interface ReviewContextProviderPolicy { id: string; capabilities: ReadonlyArray<ReviewContextCapability>; sourceNamespace: string; deploymentRef: string; serviceProfiles?: Partial<Record<ReviewContextCapability, string>> }
-export interface ReviewPolicy { id: string; version: string; purpose: 'approval' | 'answer'; context: ReviewContextPolicy; routing?: ReadonlyArray<RoutingRule>; stages: ReadonlyArray<ReviewStagePolicy>; clocks?: ReadonlyArray<string>; retention: ReviewRetentionPolicy; displaySchema: JsonValue; resultSchema?: JsonValue; outcomes?: ReadonlyArray<{ id: string; label: string; settlement: 'approved' | 'rejected' | 'changes-requested' | 'answered'; reasonRequired: boolean; publicReason: 'required' | 'optional' | 'none'; resultRequired?: boolean }> }
+export interface ReviewPolicy { id: string; label?: string; version: string; purpose: 'approval' | 'answer'; context: ReviewContextPolicy; routing?: ReadonlyArray<RoutingRule>; stages: ReadonlyArray<ReviewStagePolicy>; clocks?: ReadonlyArray<string>; retention: ReviewRetentionPolicy; displaySchema: JsonValue; resultSchema?: JsonValue; outcomes?: ReadonlyArray<{ id: string; label: string; settlement: 'approved' | 'rejected' | 'changes-requested' | 'answered'; reasonRequired: boolean; publicReason: 'required' | 'optional' | 'none'; resultRequired?: boolean }> }
 export interface ReviewPolicyClosure {
   identity: PolicyBinding
+  label?: string
   purpose: 'approval' | 'answer'
   context: ReviewContextPolicy
   routing?: ReadonlyArray<RoutingRule>

package/casework/client.js

@@ -85,12 +85,50 @@ function sanitize(value, kind) {
   return cloneJson(value, { nodes: 0, bytes: 0, active: new WeakSet() }, 0, kind);
 }
 
+function configurationValue(config) {
+  if (!config || typeof config !== 'object' || Array.isArray(config) || isProxy(config)) {
+    throw normalized({}, 'configuration');
+  }
+  const prototype = Object.getPrototypeOf(config);
+  if (prototype !== Object.prototype && prototype !== null) {
+    throw normalized({}, 'configuration');
+  }
+  const allowed = new Set([
+    'baseUrl',
+    'attemptTimeoutMilliseconds',
+    'connectTimeoutMilliseconds',
+    'maximumResponseBytes',
+    'userAgent',
+    'trustedRootCertificates',
+    'maximumMutationRetries',
+  ]);
+  const copy = Object.create(null);
+  for (const key of Reflect.ownKeys(config)) {
+    if (typeof key !== 'string' || !allowed.has(key)) throw normalized({}, 'configuration');
+    const descriptor = Object.getOwnPropertyDescriptor(config, key);
+    if (!descriptor || !descriptor.enumerable || !Object.hasOwn(descriptor, 'value')) {
+      throw normalized({}, 'configuration');
+    }
+    const value = descriptor.value;
+    if (key === 'baseUrl' || key === 'userAgent' || key === 'trustedRootCertificates') {
+      if (typeof value !== 'string') throw normalized({}, 'configuration');
+      copy[key] = value;
+    } else {
+      if (!Number.isSafeInteger(value) || value < 0 || value > 0xffff_ffff) {
+        throw normalized({}, 'configuration');
+      }
+      copy[key] = value;
+    }
+  }
+  return copy;
+}
+
 const NativeCaseworkClient = native.CaseworkClient;
 
 class CaseworkClient {
   constructor(config) {
     try {
-      this.native = new NativeCaseworkClient(sanitize(config, 'configuration'));
+      this.native = new NativeCaseworkClient(configurationValue(config));
     } catch (error) {
       throw normalized(error, 'configuration');
     }

package/casework/index.d.ts

@@ -55,16 +55,16 @@ export declare class CaseworkClient {
 
 export interface CaseworkClientConfig {
   baseUrl: string
-  requestTimeoutMilliseconds?: number
+  attemptTimeoutMilliseconds?: number
   connectTimeoutMilliseconds?: number
-  maxResponseBytes?: number
+  maximumResponseBytes?: number
   userAgent?: string
   trustedRootCertificates?: string
   /**
    * How many times a keyed mutation whose outcome is unknown is resent under
    * the same idempotency key: 0 to 2, default 2, and 0 disables the resend.
    */
-  maxMutationRetries?: number
+  maximumMutationRetries?: number
 }
 
 export interface CaseworkOutcome {

package/compatibility.json

@@ -0,0 +1,18 @@
+{
+  "schemaVersion": "registry-stack.sdk-compatibility.v1",
+  "sdkPackage": {
+    "name": "registry-stack-client",
+    "version": "0.44.0"
+  },
+  "namespaces": {
+    "discovery": {
+      "testedServerBaseline": "0.44.0",
+      "compatibleServerPatchLine": "0.44.x",
+      "responseCompatibility": {
+        "additiveObjectMembers": "ignored-after-duplicate-key-rejection",
+        "unknownProblemCodes": "http-status-only",
+        "proof": "registry-discovery-client::client::tests::real_client_ignores_additive_response_members_at_every_response_level"
+      }
+    }
+  }
+}