@researchdatabox/redbox-core 5.0.4 → 5.1.0-beta.12573

package/dist/StorageService.d.ts

@@ -1,16 +1,36 @@
-import type { RecordWriteOptions, RecordFieldWriteResult } from './RecordWriteOptions';
+import type { RecordFieldWriteResult } from './RecordWriteOptions';
 import { Readable } from 'node:stream';
-import { RecordModel } from './model';
-import { StorageServiceResponse } from './StorageServiceResponse';
+import { DeletedRecordModel, RecordModel } from './model';
+import { StorageMutationResponse, StorageServiceResponse } from './StorageServiceResponse';
 import { RecordRelationshipExpandOptions, RecordRelationshipGraph } from './RecordsService';
+import type { RecordStorageMutationOptions, StorageServiceCapabilities } from './RecordStorageConcurrency';
+import type { RecordSchemaArtifactInput, RecordSchemaArtifactModel, RecordSchemaArtifactQuery, RecordSchemaArtifactSummary, RecordSchemaAuthorizationGrantQuery, RecordSchemaReferenceInput, RecordSchemaReferenceModel, RecordSchemaReferenceQuery } from './model/storage/record-schema';
+export declare const RECORD_SCHEMA_STORAGE_CAPABILITY_METHODS: readonly ["putRecordSchemaArtifact", "getRecordSchemaArtifact", "listRecordSchemaArtifacts", "touchRecordSchemaArtifact", "putRecordSchemaReference", "findRecordSchemaGrantForAuthorization", "listRecordSchemaReferences"];
+export type RecordSchemaStorageCapabilityMethod = (typeof RECORD_SCHEMA_STORAGE_CAPABILITY_METHODS)[number];
 /**
  * Service interface for Storage operations.
  * Note: This interface uses `unknown` types extensively for backward compatibility.
  * Type safety will be improved incrementally in future phases.
  */
 export interface StorageService {
-    create(brand: unknown, record: unknown, recordType: unknown, user?: unknown, options?: RecordWriteOptions): Promise<StorageServiceResponse>;
-    updateMeta(brand: unknown, oid: unknown, record: unknown, user?: unknown, options?: RecordWriteOptions): Promise<StorageServiceResponse>;
+    create(brand: unknown, record: unknown, recordType: unknown, user?: unknown, options?: RecordStorageMutationOptions): Promise<StorageMutationResponse>;
+    updateMeta(brand: unknown, oid: unknown, record: unknown, user?: unknown, options?: RecordStorageMutationOptions): Promise<StorageMutationResponse>;
+    /** An absent declaration is unsupported for strict concurrency. */
+    getCapabilities?(): StorageServiceCapabilities;
+    /** Atomic active removal primitive used by staged lifecycle orchestration. */
+    removeActiveRecord?(brand: unknown, oid: unknown, options?: RecordStorageMutationOptions): Promise<StorageMutationResponse>;
+    /** Idempotently persist a durable lifecycle intent before active removal. */
+    createTombstone?(brand: unknown, oid: unknown, record: unknown, options?: RecordStorageMutationOptions): Promise<StorageMutationResponse>;
+    /** Atomic tombstone claim/update primitive used by restore and purge. */
+    updateTombstone?(brand: unknown, oid: unknown, record: unknown, options?: RecordStorageMutationOptions): Promise<StorageMutationResponse>;
+    /** Atomic tombstone finalization/removal primitive used by restore and purge. */
+    removeTombstone?(brand: unknown, oid: unknown, options?: RecordStorageMutationOptions): Promise<StorageMutationResponse>;
+    /** Continue a claimed restore lineage without exposing a caller-selected revision. */
+    createActiveRecordFromTombstone?(brand: unknown, oid: unknown, record: unknown, options?: RecordStorageMutationOptions): Promise<StorageMutationResponse>;
+    /** Brand-scoped lifecycle wrapper read used by restore, purge, and recovery. */
+    getTombstone?(brand: unknown, oid: unknown): Promise<DeletedRecordModel | null>;
+    /** Bounded recovery scan; callers still condition every mutation by operation identity. */
+    getLifecycleTombstones?(states: readonly string[], limit?: number): Promise<DeletedRecordModel[]>;
     scanFigshareRecords?(afterOid: string, limit: number): Promise<RecordModel[]>;
     findFigshareArticleRecords?(path: string, articleId: string): Promise<RecordModel[]>;
     setRecordFields?(oid: string, fields: Record<string, unknown>, expectedVersion: number, allowedPaths: string[]): Promise<RecordFieldWriteResult>;
@@ -24,22 +44,42 @@ export interface StorageService {
     acknowledgeFigshareIntent?(oid: string, generation: number): Promise<boolean>;
     getMeta(oid: unknown): Promise<RecordModel>;
     createBatch(type: unknown, data: unknown, harvestIdFldName: unknown): Promise<unknown>;
-    provideUserAccessAndRemovePendingAccess(oid: unknown, userid: unknown, pendingValue: unknown): void;
+    /** @deprecated Whole-record permission rewrites must use RecordsService.mutateMetaInternal(). */
+    provideUserAccessAndRemovePendingAccess(oid: unknown, userid: unknown, pendingValue: unknown): Promise<StorageMutationResponse>;
     getRelatedRecords(oid: unknown, brand: unknown, options?: RecordRelationshipExpandOptions): Promise<RecordRelationshipGraph>;
-    delete(oid: unknown, permanentlyDelete: unknown): Promise<StorageServiceResponse>;
+    /** @deprecated Lifecycle deletion must use RecordsService's staged CAS state machine. */
+    delete(oid: unknown, permanentlyDelete: unknown, options?: RecordStorageMutationOptions): Promise<StorageServiceResponse>;
+    /** @deprecated Persisted notification writes must use RecordsService.mutateMetaInternal(). */
     updateNotificationLog(oid: unknown, record: unknown, options: unknown): Promise<unknown>;
-    restoreRecord(oid: unknown): Promise<StorageServiceResponse>;
-    destroyDeletedRecord(oid: unknown): Promise<StorageServiceResponse>;
+    /** @deprecated Lifecycle deletion must use RecordsService's staged CAS state machine. */
+    restoreRecord(oid: unknown, options?: RecordStorageMutationOptions): Promise<StorageServiceResponse>;
+    /** @deprecated Lifecycle purge must use RecordsService's staged CAS state machine. */
+    destroyDeletedRecord(oid: unknown, options?: RecordStorageMutationOptions): Promise<StorageServiceResponse>;
     getDeletedRecordMeta(oid: string): Promise<RecordModel | null>;
     getRecords(workflowState: unknown, recordType: unknown, start: unknown, rows: unknown, username: unknown, roles: unknown, brand: unknown, editAccessOnly: unknown, packageType: unknown, sort: unknown, fieldNames?: unknown, filterString?: unknown, filterMode?: unknown, secondarySort?: unknown): Promise<StorageServiceResponse>;
     getDeletedRecords(workflowState: unknown, recordType: unknown, start: unknown, rows: unknown, username: unknown, roles: unknown, brand: unknown, editAccessOnly: unknown, packageType: unknown, sort: unknown, fieldNames?: unknown, filterString?: unknown, filterMode?: unknown): Promise<StorageServiceResponse>;
     getDeletedRecordMeta(oid: unknown): Promise<RecordModel | null>;
     exportAllPlans(username: unknown, roles: unknown, brand: unknown, format: unknown, modBefore: unknown, modAfter: unknown, recType: unknown): Readable;
+    /**
+     * Persist an audit synchronously and report whether it was durably applied.
+     * Legacy/out-of-tree storage hooks may omit this method; operations requiring
+     * durable validation audit then fail closed before record storage.
+     */
     createRecordAudit?(record: unknown): Promise<StorageServiceResponse>;
     createIntegrationAudit?(record: unknown): Promise<StorageServiceResponse>;
+    /** Optional so existing storage hooks remain compatible while record-schema support is disabled. */
+    putRecordSchemaArtifact?(artifact: RecordSchemaArtifactInput): Promise<StorageServiceResponse>;
+    getRecordSchemaArtifact?(digest: string): Promise<RecordSchemaArtifactModel | null>;
+    listRecordSchemaArtifacts?(query: RecordSchemaArtifactQuery): Promise<RecordSchemaArtifactSummary[]>;
+    touchRecordSchemaArtifact?(digest: string): Promise<StorageServiceResponse>;
+    putRecordSchemaReference?(reference: RecordSchemaReferenceInput): Promise<StorageServiceResponse>;
+    findRecordSchemaGrantForAuthorization?(query: RecordSchemaAuthorizationGrantQuery): Promise<RecordSchemaReferenceModel | null>;
+    listRecordSchemaReferences?(query: RecordSchemaReferenceQuery): Promise<RecordSchemaReferenceModel[]>;
     exists(oid: unknown): Promise<boolean>;
     getRecordAudit(params: unknown): Promise<unknown>;
     getIntegrationAudit(params: unknown): Promise<unknown>;
     countIntegrationAudit?(params: unknown): Promise<number>;
 }
+/** Returns every missing durable schema method in stable capability order. */
+export declare function getMissingRecordSchemaStorageCapabilities(provider: unknown): RecordSchemaStorageCapabilityMethod[];
 //# sourceMappingURL=StorageService.d.ts.map

package/dist/StorageService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StorageService.d.ts","sourceRoot":"","sources":["../src/StorageService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,+BAA+B,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE5F;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC5I,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACzI,mBAAmB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9E,0BAA0B,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACrF,eAAe,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACjJ,mBAAmB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvE,gHAAgH;IAChH,sBAAsB,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAClF,0FAA0F;IAC1F,qBAAqB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,oHAAoH;IACpH,2BAA2B,CAAC,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnE,yBAAyB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5C,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvF,uCAAuC,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,GAAG,IAAI,CAAC;IACpG,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,+BAA+B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC7H,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAClF,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEzF,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC7D,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpE,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAE/D,UAAU,CAAC,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACtU,iBAAiB,CAAC,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpT,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAChE,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,QAAQ,CAAC;IAEtJ,iBAAiB,CAAC,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACrE,sBAAsB,CAAC,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC1E,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,qBAAqB,CAAC,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1D"}
+{"version":3,"file":"StorageService.d.ts","sourceRoot":"","sources":["../src/StorageService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAC3F,OAAO,EAAE,+BAA+B,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,KAAK,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAC3G,OAAO,KAAK,EACV,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,2BAA2B,EAC3B,mCAAmC,EACnC,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC3B,MAAM,+BAA+B,CAAC;AAEvC,eAAO,MAAM,wCAAwC,8NAQ3C,CAAC;AAEX,MAAM,MAAM,mCAAmC,GAAG,CAAC,OAAO,wCAAwC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5G;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,CACJ,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,OAAO,EACnB,IAAI,CAAC,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,UAAU,CACR,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,OAAO,EACf,IAAI,CAAC,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,mEAAmE;IACnE,eAAe,CAAC,IAAI,0BAA0B,CAAC;IAC/C,8EAA8E;IAC9E,kBAAkB,CAAC,CACjB,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,OAAO,EACZ,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,6EAA6E;IAC7E,eAAe,CAAC,CACd,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,OAAO,EACf,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,yEAAyE;IACzE,eAAe,CAAC,CACd,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,OAAO,EACf,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,iFAAiF;IACjF,eAAe,CAAC,CACd,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,OAAO,EACZ,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,sFAAsF;IACtF,+BAA+B,CAAC,CAC9B,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,OAAO,EACf,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,gFAAgF;IAChF,YAAY,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAChF,2FAA2F;IAC3F,sBAAsB,CAAC,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAClG,mBAAmB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9E,0BAA0B,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACrF,eAAe,CAAC,CACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,eAAe,EAAE,MAAM,EACvB,YAAY,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACnC,mBAAmB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvE,gHAAgH;IAChH,sBAAsB,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAClF,0FAA0F;IAC1F,qBAAqB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,oHAAoH;IACpH,2BAA2B,CAAC,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnE,yBAAyB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5C,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvF,iGAAiG;IACjG,uCAAuC,CACrC,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,OAAO,EACf,YAAY,EAAE,OAAO,GACpB,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,iBAAiB,CACf,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,+BAA+B,GACxC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,yFAAyF;IACzF,MAAM,CACJ,GAAG,EAAE,OAAO,EACZ,iBAAiB,EAAE,OAAO,EAC1B,OAAO,CAAC,EAAE,4BAA4B,GACrC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACnC,8FAA8F;IAC9F,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEzF,yFAAyF;IACzF,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,4BAA4B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACrG,sFAAsF;IACtF,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,4BAA4B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC5G,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAE/D,UAAU,CACR,aAAa,EAAE,OAAO,EACtB,UAAU,EAAE,OAAO,EACnB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,OAAO,EACb,QAAQ,EAAE,OAAO,EACjB,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,OAAO,EACd,cAAc,EAAE,OAAO,EACvB,WAAW,EAAE,OAAO,EACpB,IAAI,EAAE,OAAO,EACb,UAAU,CAAC,EAAE,OAAO,EACpB,YAAY,CAAC,EAAE,OAAO,EACtB,UAAU,CAAC,EAAE,OAAO,EACpB,aAAa,CAAC,EAAE,OAAO,GACtB,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACnC,iBAAiB,CACf,aAAa,EAAE,OAAO,EACtB,UAAU,EAAE,OAAO,EACnB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,OAAO,EACb,QAAQ,EAAE,OAAO,EACjB,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,OAAO,EACd,cAAc,EAAE,OAAO,EACvB,WAAW,EAAE,OAAO,EACpB,IAAI,EAAE,OAAO,EACb,UAAU,CAAC,EAAE,OAAO,EACpB,YAAY,CAAC,EAAE,OAAO,EACtB,UAAU,CAAC,EAAE,OAAO,GACnB,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACnC,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAChE,cAAc,CACZ,QAAQ,EAAE,OAAO,EACjB,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,OAAO,EACf,SAAS,EAAE,OAAO,EAClB,QAAQ,EAAE,OAAO,EACjB,OAAO,EAAE,OAAO,GACf,QAAQ,CAAC;IAEZ;;;;OAIG;IACH,iBAAiB,CAAC,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACrE,sBAAsB,CAAC,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC1E,oGAAoG;IACpG,uBAAuB,CAAC,CAAC,QAAQ,EAAE,yBAAyB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/F,uBAAuB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAAC;IACpF,yBAAyB,CAAC,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,2BAA2B,EAAE,CAAC,CAAC;IACrG,yBAAyB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC5E,wBAAwB,CAAC,CAAC,SAAS,EAAE,0BAA0B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAClG,qCAAqC,CAAC,CACpC,KAAK,EAAE,mCAAmC,GACzC,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;IAC9C,0BAA0B,CAAC,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAAC;IACtG,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,qBAAqB,CAAC,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1D;AAED,8EAA8E;AAC9E,wBAAgB,yCAAyC,CAAC,QAAQ,EAAE,OAAO,GAAG,mCAAmC,EAAE,CAMlH"}

package/dist/StorageService.js

@@ -1,3 +1,21 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiU3RvcmFnZVNlcnZpY2UuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvU3RvcmFnZVNlcnZpY2UudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IiJ9
+exports.RECORD_SCHEMA_STORAGE_CAPABILITY_METHODS = void 0;
+exports.getMissingRecordSchemaStorageCapabilities = getMissingRecordSchemaStorageCapabilities;
+exports.RECORD_SCHEMA_STORAGE_CAPABILITY_METHODS = [
+    'putRecordSchemaArtifact',
+    'getRecordSchemaArtifact',
+    'listRecordSchemaArtifacts',
+    'touchRecordSchemaArtifact',
+    'putRecordSchemaReference',
+    'findRecordSchemaGrantForAuthorization',
+    'listRecordSchemaReferences',
+];
+/** Returns every missing durable schema method in stable capability order. */
+function getMissingRecordSchemaStorageCapabilities(provider) {
+    if (provider === null || (typeof provider !== 'object' && typeof provider !== 'function')) {
+        return [...exports.RECORD_SCHEMA_STORAGE_CAPABILITY_METHODS];
+    }
+    return exports.RECORD_SCHEMA_STORAGE_CAPABILITY_METHODS.filter(method => typeof Reflect.get(provider, method) !== 'function');
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/StorageServiceResponse.d.ts

@@ -1,10 +1,18 @@
+import { ActionResult, StorageMutationApplicationState, type RecordConcurrencyResolution } from '@researchdatabox/sails-ng-common';
+import type { RecordModel } from './model';
+import type { StorageMutationNonApplicationReason } from './RecordStorageConcurrency';
 /**
  * Response class for StorageService methods.
+ *
+ * This remains the generic response used by all storage operations.  Save
+ * specific fields live on StorageMutationResponse/RecordSaveResponse so
+ * existing storage services do not need to manufacture attachment state.
  */
-export declare class StorageServiceResponse {
+export declare class StorageServiceResponse<TData = unknown> implements ActionResult {
     success: boolean;
     oid: string;
     message: string;
+    data?: TData;
     metadata: Record<string, unknown> | null;
     details?: Record<string, unknown> | string;
     totalItems: number;
@@ -12,5 +20,18 @@ export declare class StorageServiceResponse {
     constructor();
     isSuccessful(): boolean;
 }
+/**
+ * Storage facts for a primary metadata mutation.  `unknown` is intentional:
+ * a rejected or timed-out call is not proof that the provider did not write.
+ */
+export declare class StorageMutationResponse extends StorageServiceResponse {
+    applicationState?: StorageMutationApplicationState;
+    nonApplicationReason?: StorageMutationNonApplicationReason;
+    committedRevision?: number;
+    committedRecord?: RecordModel | Record<string, unknown>;
+    removedRecord?: RecordModel | Record<string, unknown>;
+    requestId?: string;
+    resolution?: RecordConcurrencyResolution;
+}
 export default StorageServiceResponse;
 //# sourceMappingURL=StorageServiceResponse.d.ts.map

package/dist/StorageServiceResponse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StorageServiceResponse.d.ts","sourceRoot":"","sources":["../src/StorageServiceResponse.ts"],"names":[],"mappings":"AAmBA;;GAEG;AACH,qBAAa,sBAAsB;IACjC,OAAO,EAAE,OAAO,CAAS;IACzB,GAAG,EAAE,MAAM,CAAM;IACjB,OAAO,EAAE,MAAM,CAAM;IACrB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAQ;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;IAC3C,UAAU,EAAE,MAAM,CAAK;IACvB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAM;;IAK/B,YAAY,IAAI,OAAO;CAG/B;AACD,eAAe,sBAAsB,CAAA"}
+{"version":3,"file":"StorageServiceResponse.d.ts","sourceRoot":"","sources":["../src/StorageServiceResponse.ts"],"names":[],"mappings":"AAmBA,OAAO,EACL,YAAY,EACZ,+BAA+B,EAC/B,KAAK,2BAA2B,EACjC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,4BAA4B,CAAC;AAEtF;;;;;;GAMG;AACH,qBAAa,sBAAsB,CAAC,KAAK,GAAG,OAAO,CAAE,YAAW,YAAY;IAC1E,OAAO,EAAE,OAAO,CAAS;IACzB,GAAG,EAAE,MAAM,CAAM;IACjB,OAAO,EAAE,MAAM,CAAM;IACrB,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAQ;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;IAC3C,UAAU,EAAE,MAAM,CAAK;IACvB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAM;;IAG/B,YAAY,IAAI,OAAO;CAG/B;AAED;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,sBAAsB;IACjE,gBAAgB,CAAC,EAAE,+BAA+B,CAAC;IACnD,oBAAoB,CAAC,EAAE,mCAAmC,CAAC;IAC3D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxD,aAAa,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,2BAA2B,CAAC;CAC1C;AAED,eAAe,sBAAsB,CAAC"}

package/dist/StorageServiceResponse.js

@@ -18,24 +18,42 @@
 // with this program; if not, write to the Free Software Foundation, Inc.,
 // 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.StorageServiceResponse = void 0;
+exports.StorageMutationResponse = exports.StorageServiceResponse = void 0;
 /**
  * Response class for StorageService methods.
+ *
+ * This remains the generic response used by all storage operations.  Save
+ * specific fields live on StorageMutationResponse/RecordSaveResponse so
+ * existing storage services do not need to manufacture attachment state.
  */
 class StorageServiceResponse {
     success = false;
     oid = '';
     message = '';
+    data;
     metadata = null;
     details;
     totalItems = 0;
     items = [];
-    constructor() {
-    }
+    constructor() { }
     isSuccessful() {
         return this.success === true;
     }
 }
 exports.StorageServiceResponse = StorageServiceResponse;
+/**
+ * Storage facts for a primary metadata mutation.  `unknown` is intentional:
+ * a rejected or timed-out call is not proof that the provider did not write.
+ */
+class StorageMutationResponse extends StorageServiceResponse {
+    applicationState;
+    nonApplicationReason;
+    committedRevision;
+    committedRecord;
+    removedRecord;
+    requestId;
+    resolution;
+}
+exports.StorageMutationResponse = StorageMutationResponse;
 exports.default = StorageServiceResponse;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist/action-execution/audit.d.ts

@@ -0,0 +1,41 @@
+import type { ActionExecutionMode, ActionExecutionOperation, ActionExecutionPhase, ActionExecutionStatus, ActionFailureKind, ActionSkippedReason } from './types';
+export type DetachedAuditFinalization = 'complete' | 'grace-expired';
+export interface RecordHookExecutionAuditAction {
+    actionId: string;
+    mode: ActionExecutionMode;
+    phase: ActionExecutionPhase;
+    status: ActionExecutionStatus;
+    attempts: number;
+    durationMs: number;
+    failureKind?: ActionFailureKind;
+    failureCode?: string;
+    skippedReason?: ActionSkippedReason;
+}
+export interface RecordHookExecutionAuditSummary {
+    schemaVersion: 1;
+    executionId: string;
+    requestId?: string;
+    trigger: 'record-hook';
+    operation: 'create' | 'update' | 'delete' | 'transition';
+    partial: boolean;
+    completedThrough?: 'pre' | 'persistence' | 'postSync' | 'post-dispatch';
+    detachedFinalization?: DetachedAuditFinalization;
+    detachedPending?: number;
+    durationMs: number;
+    totalActions: number;
+    counts: Partial<Record<ActionExecutionStatus, number>>;
+    actions: RecordHookExecutionAuditAction[];
+    truncated: boolean;
+}
+/**
+ * Project the in-memory execution reports onto the bounded, whitelisted shape
+ * that is safe to persist. Aggregate counts always describe the complete
+ * report even when the action list is truncated.
+ */
+export declare function projectRecordHookExecutionAuditSummary(operation: ActionExecutionOperation, options?: {
+    partial?: boolean;
+    completedThrough?: RecordHookExecutionAuditSummary['completedThrough'];
+    detachedFinalization?: DetachedAuditFinalization;
+    durationMs?: number;
+}): RecordHookExecutionAuditSummary;
+//# sourceMappingURL=audit.d.ts.map

package/dist/action-execution/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/action-execution/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EAGpB,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,SAAS,CAAC;AAEjB,MAAM,MAAM,yBAAyB,GAAG,UAAU,GAAG,eAAe,CAAC;AAErE,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,mBAAmB,CAAC;IAC1B,KAAK,EAAE,oBAAoB,CAAC;IAC5B,MAAM,EAAE,qBAAqB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,WAAW,+BAA+B;IAC9C,aAAa,EAAE,CAAC,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,aAAa,CAAC;IACvB,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,CAAC;IACzD,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,CAAC,EAAE,KAAK,GAAG,aAAa,GAAG,UAAU,GAAG,eAAe,CAAC;IACxE,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IACjD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,OAAO,EAAE,8BAA8B,EAAE,CAAC;IAC1C,SAAS,EAAE,OAAO,CAAC;CACpB;AA8DD;;;;GAIG;AACH,wBAAgB,sCAAsC,CACpD,SAAS,EAAE,wBAAwB,EACnC,OAAO,GAAE;IACP,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gBAAgB,CAAC,EAAE,+BAA+B,CAAC,kBAAkB,CAAC,CAAC;IACvE,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;CAChB,GACL,+BAA+B,CAkEjC"}

package/dist/action-execution/audit.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.projectRecordHookExecutionAuditSummary = projectRecordHookExecutionAuditSummary;
+/** The design caps a persisted summary at the first 100 actions. */
+const MAX_AUDIT_ACTIONS = 100;
+const OPERATION_BY_MODE = {
+    onCreate: 'create',
+    onUpdate: 'update',
+    onDelete: 'delete',
+    onTransitionWorkflow: 'transition',
+};
+function projectAction(action) {
+    const projected = {
+        actionId: action.actionId,
+        mode: action.mode,
+        phase: action.phase,
+        status: action.status,
+        attempts: action.attempts,
+        durationMs: Math.max(0, Math.round(action.durationMs)),
+    };
+    if (action.failure?.kind) {
+        projected.failureKind = action.failure.kind;
+    }
+    if (action.failure?.code) {
+        projected.failureCode = action.failure.code;
+    }
+    if (action.skippedReason) {
+        projected.skippedReason = action.skippedReason;
+    }
+    return projected;
+}
+function totalCounts(actions) {
+    const totals = {};
+    for (const action of actions) {
+        totals[action.status] = (totals[action.status] ?? 0) + 1;
+    }
+    return totals;
+}
+/**
+ * Detached dispatch and terminal reports have the same action identity. Keep
+ * this key internal so a terminal result can replace its launch marker without
+ * changing the historical phase report.
+ */
+function actionKey(action) {
+    return [action.mode, action.phase, action.index, action.actionId].join('\u0000');
+}
+function elapsedMs(operation) {
+    const lastReport = operation.reports[operation.reports.length - 1];
+    const completedAt = new Date(operation.detachedCompletedAt ?? lastReport?.completedAt ?? operation.startedAt).getTime();
+    return Math.max(0, Math.round(completedAt - new Date(operation.startedAt).getTime()));
+}
+/**
+ * Project the in-memory execution reports onto the bounded, whitelisted shape
+ * that is safe to persist. Aggregate counts always describe the complete
+ * report even when the action list is truncated.
+ */
+function projectRecordHookExecutionAuditSummary(operation, options = {}) {
+    // Before detached work finishes, the operation log may honestly expose its
+    // dispatch entries. A terminal result replaces the matching launch marker
+    // even while other detached actions remain pending. The historical reports
+    // themselves are never mutated.
+    const includeDispatched = operation.detachedPending === undefined || operation.detachedPending > 0;
+    const detachedResults = [...(operation.detachedResults ?? [])].sort((left, right) => {
+        const phaseOrder = { pre: 0, postSync: 1, post: 2 };
+        return phaseOrder[left.phase] - phaseOrder[right.phase] || left.index - right.index;
+    });
+    const terminalByKey = new Map(detachedResults.map(result => [actionKey(result), result]));
+    const projectedKeys = new Set();
+    const allActions = [];
+    for (const report of operation.reports) {
+        for (const action of report.actions) {
+            let projected = action;
+            if (action.status === 'dispatched') {
+                const terminal = terminalByKey.get(actionKey(action));
+                if (terminal) {
+                    projected = terminal;
+                }
+                else if (!includeDispatched) {
+                    projected = undefined;
+                }
+            }
+            if (projected) {
+                allActions.push(projected);
+                projectedKeys.add(actionKey(projected));
+            }
+        }
+    }
+    // Defensive compatibility path: a terminal callback may be observed before
+    // its dispatch report is appended. It still contributes exactly once.
+    for (const result of detachedResults) {
+        if (!projectedKeys.has(actionKey(result))) {
+            allActions.push(result);
+            projectedKeys.add(actionKey(result));
+        }
+    }
+    const summary = {
+        schemaVersion: 1,
+        executionId: operation.executionId,
+        trigger: 'record-hook',
+        operation: OPERATION_BY_MODE[operation.mode],
+        partial: options.partial === true,
+        durationMs: options.durationMs ?? elapsedMs(operation),
+        totalActions: allActions.length,
+        counts: totalCounts(allActions),
+        actions: allActions.slice(0, MAX_AUDIT_ACTIONS).map(projectAction),
+        truncated: allActions.length > MAX_AUDIT_ACTIONS,
+    };
+    if (operation.requestId) {
+        summary.requestId = operation.requestId;
+    }
+    if (options.completedThrough ?? operation.completedThrough) {
+        summary.completedThrough = options.completedThrough ?? operation.completedThrough;
+    }
+    if (options.detachedFinalization) {
+        summary.detachedFinalization = options.detachedFinalization;
+    }
+    if ((operation.detachedPending ?? 0) > 0) {
+        summary.detachedPending = operation.detachedPending;
+    }
+    return summary;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/action-execution/executor.d.ts

@@ -0,0 +1,24 @@
+import { Effect } from 'effect';
+import type { ActionExecutionAction, ActionExecutionContext, ActionExecutionDependencies, ActionExecutionOperation, ActionExecutionOutcome } from './types';
+export declare function createActionExecutionOperation(mode: ActionExecutionOperation['mode'], requestId?: string, recordOid?: string, dependencies?: ActionExecutionDependencies): ActionExecutionOperation;
+/**
+ * Owns detached fibers for the lifetime of a service. A Sails `lower` hook can
+ * interrupt the set so shutdown does not leave post-save work running against
+ * a closed datastore.
+ */
+export declare function createActionExecutionSupervisor(): ActionExecutionDependencies['supervisor'];
+export declare function createPhaseContext(operation: ActionExecutionOperation, phase: ActionExecutionContext['phase'], dependencies?: ActionExecutionDependencies, mode?: ActionExecutionContext['mode']): ActionExecutionContext;
+/**
+ * Sequential fail-fast strategy, used for the awaited `pre` and `postSync`
+ * phases. `onSuccess` lets the caller thread record/response state between
+ * actions without teaching the executor anything about records.
+ */
+export declare function runSequentialActionPlan(actions: readonly ActionExecutionAction[], context: ActionExecutionContext, dependencies?: ActionExecutionDependencies, onSuccess?: (value: unknown, actionIndex: number) => void): Effect.Effect<ActionExecutionOutcome, never, never>;
+/**
+ * Detached dispatch strategy, used for `post`. Each action is forked in
+ * configuration order and its terminal result is delivered through the
+ * optional completion callback; the dispatch report itself remains an honest
+ * record of launch rather than being rewritten after the fact.
+ */
+export declare function dispatchDetachedActionPlan(actions: readonly ActionExecutionAction[], context: ActionExecutionContext, dependencies?: ActionExecutionDependencies): ActionExecutionOutcome;
+//# sourceMappingURL=executor.d.ts.map

package/dist/action-execution/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../src/action-execution/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAMhC,OAAO,KAAK,EACV,qBAAqB,EACrB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,EACxB,sBAAsB,EAOvB,MAAM,SAAS,CAAC;AA4SjB,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,wBAAwB,CAAC,MAAM,CAAC,EACtC,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,YAAY,GAAE,2BAAgC,GAC7C,wBAAwB,CAc1B;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,IAAI,2BAA2B,CAAC,YAAY,CAAC,CAe3F;AAED,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,wBAAwB,EACnC,KAAK,EAAE,sBAAsB,CAAC,OAAO,CAAC,EACtC,YAAY,GAAE,2BAAgC,EAC9C,IAAI,GAAE,sBAAsB,CAAC,MAAM,CAAkB,GACpD,sBAAsB,CAcxB;AA2BD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,SAAS,qBAAqB,EAAE,EACzC,OAAO,EAAE,sBAAsB,EAC/B,YAAY,GAAE,2BAAgC,EAC9C,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,KAAK,IAAI,GACxD,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,KAAK,EAAE,KAAK,CAAC,CA6BrD;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,SAAS,qBAAqB,EAAE,EACzC,OAAO,EAAE,sBAAsB,EAC/B,YAAY,GAAE,2BAAgC,GAC7C,sBAAsB,CAmExB"}