@sellable/mcp 0.1.793 → 0.1.794

package/dist/tools/refill-v3-edit-selected-campaign.d.ts

@@ -0,0 +1,232 @@
+/**
+ * Refill V3 selected-campaign EDIT public MCP projection (Phase 146.5 Plan 09
+ * T2, RV3EDIT-001).
+ *
+ * A THIN projection over the package contract and nothing else:
+ *
+ *  1. it mirrors the closed eleven-key request vocabulary so a protocol-level
+ *     validator refuses drift before the handler runs;
+ *  2. it applies the shared explicit-workspace guard, because a bounded mutation
+ *     must NAME its target workspace instead of switching the shared active one;
+ *  3. it posts the caller's exact values once to the authenticated route, whose
+ *     parser is the SOLE runtime authority; and
+ *  4. it returns only what the sole closed decoder produced.
+ *
+ * A typed business refusal — including `blocked` — is a successful response
+ * VALUE and passes through verbatim. Transport failure is the ONLY source of an
+ * error result (error law 6), so nothing here reads a decoded business field to
+ * decide failure.
+ *
+ * The request mirror is not trusted: `tests/mcp/refill-v3/edit-selected-campaign-tool.test.ts`
+ * asserts its key set equals `REFILL_V3_EDIT_INPUT_KEYS`, so drift is a failing
+ * pin rather than a silent 400.
+ */
+import { type RefillV3CampaignEditResult } from "./refill-v3-edit-selected-campaign-contract.js";
+export declare const REFILL_V3_EDIT_SELECTED_CAMPAIGN_ROUTE = "/api/v3/mcp/refill-v3/edit-selected-campaign";
+export declare const REFILL_V3_EDIT_SELECTED_CAMPAIGN_TOOL_NAME: "refill_v3_edit_selected_campaign";
+export declare const refillV3EditSelectedCampaignToolDefinitions: {
+    name: "refill_v3_edit_selected_campaign";
+    description: string;
+    inputSchema: {
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["workspaceId", "campaignId", "tableId", "campaignVersion", "evidenceFingerprint", "priorActionFingerprint", "action", "field", "value", "reobservationScope", "idempotencyKey"];
+        readonly properties: {
+            readonly workspaceId: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly description: "Explicit request-scoped workspace id. Pass this instead of switching the shared active workspace.";
+            };
+            readonly campaignId: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly description: "Exact id of the ONE selected campaign this request may touch.";
+            };
+            readonly tableId: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly description: "Exact workflow table id owned by that campaign.";
+            };
+            readonly campaignVersion: {
+                readonly type: "integer";
+                readonly minimum: 0;
+                readonly description: "Optimistic concurrency token from the selected packet. A stale value refuses before any delegated call.";
+            };
+            readonly evidenceFingerprint: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly description: "Fingerprint of the bounded evidence the edit was chosen from. Stale evidence cannot authorize a mutation.";
+            };
+            readonly priorActionFingerprint: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly description: "Action-specific prior fingerprint proving the delta was derived from the current field value.";
+            };
+            readonly action: {
+                readonly type: "string";
+                readonly enum: readonly import("./refill-v3-edit-selected-campaign-contract.js").RefillV3CampaignEditAction[];
+                readonly description: "The one closed edit action. Rerun, same-meaning regeneration, and the guarded rubric trial are NOT edit variants and are refused here.";
+            };
+            readonly field: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly description: "The single allowlisted field for that action. A protected field or an action/field mismatch refuses before any delegated call.";
+            };
+            readonly value: {
+                readonly type: readonly ["string", "boolean"];
+                readonly description: "The one normalized field-level value. Objects, arrays, and whole-object replacement are refused.";
+            };
+            readonly reobservationScope: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["senderId", "date"];
+                readonly properties: {
+                    readonly senderId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly date: {
+                        readonly type: "string";
+                        readonly pattern: "^\\d{4}-\\d{2}-\\d{2}$";
+                    };
+                };
+                readonly description: "The exact sender and sender-local date whose two lanes must be re-observed immediately after the edit.";
+            };
+            readonly idempotencyKey: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly description: "Caller replay identity. Reuse the SAME key to retry one request; the same key with changed input is refused, never converged.";
+            };
+        };
+    };
+    outputSchema: Readonly<{
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["schemaVersion", "outcome", "action", "reason", "receipt", "reobservation", "detail"];
+        readonly properties: {
+            readonly schemaVersion: {
+                readonly type: "string";
+                readonly const: "refill_v3_campaign_edit.v1.0";
+            };
+            readonly outcome: {
+                readonly type: "string";
+                readonly enum: readonly ["applied", "replayed", "rolled_back", "blocked"];
+            };
+            readonly action: {
+                readonly type: "string";
+                readonly enum: readonly import("./refill-v3-edit-selected-campaign-contract.js").RefillV3CampaignEditAction[];
+            };
+            readonly reason: {
+                readonly type: readonly ["string", "null"];
+                readonly enum: readonly ["cross_workspace_scope", "foreign_campaign_scope", "foreign_table_scope", "stale_campaign_version", "stale_evidence_fingerprint", "stale_prior_fingerprint", "disallowed_action", "protected_field", "value_shape_mismatch", "protected_invariant_weakened", "health_evidence_not_editable", "reobservation_scope_missing", "idempotency_input_changed", "no_edit_available", "uncertain_delegated_effect", null];
+            };
+            readonly receipt: {
+                readonly type: readonly ["object", "null"];
+                readonly additionalProperties: false;
+                readonly required: readonly ["scopeEcho", "idempotencyKey", "effectKey", "beforeFingerprint", "afterFingerprint", "changedFields", "replayState", "rollback"];
+                readonly properties: {
+                    readonly scopeEcho: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly idempotencyKey: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly effectKey: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly beforeFingerprint: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly afterFingerprint: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly changedFields: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                    };
+                    readonly replayState: {
+                        readonly type: "string";
+                        readonly enum: readonly ["first", "exact_replay", "not_applicable"];
+                    };
+                    readonly rollback: {
+                        readonly type: "object";
+                        readonly additionalProperties: false;
+                        readonly required: readonly ["available", "input", "result"];
+                        readonly properties: {
+                            readonly available: {
+                                readonly type: "boolean";
+                            };
+                            readonly input: {
+                                readonly type: readonly ["object", "null"];
+                            };
+                            readonly result: {
+                                readonly type: readonly ["string", "null"];
+                            };
+                        };
+                    };
+                };
+            };
+            readonly reobservation: {
+                readonly type: readonly ["object", "null"];
+                readonly additionalProperties: false;
+                readonly required: readonly ["senderId", "date", "required", "lanes"];
+                readonly properties: {
+                    readonly senderId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly date: {
+                        readonly type: "string";
+                        readonly pattern: "^\\d{4}-\\d{2}-\\d{2}$";
+                    };
+                    readonly required: {
+                        readonly type: "boolean";
+                        readonly const: true;
+                    };
+                    readonly lanes: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                    };
+                };
+            };
+            readonly detail: {
+                readonly type: "string";
+            };
+        };
+    }>;
+    annotations: {
+        title: string;
+        readOnlyHint: boolean;
+        destructiveHint: boolean;
+        idempotentHint: boolean;
+        openWorldHint: boolean;
+    };
+}[];
+export type RefillV3EditSelectedCampaignToolInput = {
+    workspaceId?: string;
+    campaignId?: string;
+    tableId?: string;
+    campaignVersion?: number;
+    evidenceFingerprint?: string;
+    priorActionFingerprint?: string;
+    action?: string;
+    field?: string;
+    value?: string | boolean;
+    reobservationScope?: {
+        senderId?: string;
+        date?: string;
+    };
+    idempotencyKey?: string;
+};
+export declare function editRefillV3SelectedCampaignTool(input: RefillV3EditSelectedCampaignToolInput): Promise<RefillV3CampaignEditResult>;

package/dist/tools/refill-v3-edit-selected-campaign.js

@@ -0,0 +1,147 @@
+/**
+ * Refill V3 selected-campaign EDIT public MCP projection (Phase 146.5 Plan 09
+ * T2, RV3EDIT-001).
+ *
+ * A THIN projection over the package contract and nothing else:
+ *
+ *  1. it mirrors the closed eleven-key request vocabulary so a protocol-level
+ *     validator refuses drift before the handler runs;
+ *  2. it applies the shared explicit-workspace guard, because a bounded mutation
+ *     must NAME its target workspace instead of switching the shared active one;
+ *  3. it posts the caller's exact values once to the authenticated route, whose
+ *     parser is the SOLE runtime authority; and
+ *  4. it returns only what the sole closed decoder produced.
+ *
+ * A typed business refusal — including `blocked` — is a successful response
+ * VALUE and passes through verbatim. Transport failure is the ONLY source of an
+ * error result (error law 6), so nothing here reads a decoded business field to
+ * decide failure.
+ *
+ * The request mirror is not trusted: `tests/mcp/refill-v3/edit-selected-campaign-tool.test.ts`
+ * asserts its key set equals `REFILL_V3_EDIT_INPUT_KEYS`, so drift is a failing
+ * pin rather than a silent 400.
+ */
+import { getApi } from "../api.js";
+import { decodeRefillV3CampaignEditResult, REFILL_V3_CAMPAIGN_EDIT_OUTPUT_SCHEMA, REFILL_V3_EDIT_ACTIONS, } from "./refill-v3-edit-selected-campaign-contract.js";
+import { normalizeExplicitWorkspaceId, workspaceRequestOptions, } from "./workspace-context.js";
+export const REFILL_V3_EDIT_SELECTED_CAMPAIGN_ROUTE = "/api/v3/mcp/refill-v3/edit-selected-campaign";
+export const REFILL_V3_EDIT_SELECTED_CAMPAIGN_TOOL_NAME = "refill_v3_edit_selected_campaign";
+const REFILL_V3_EDIT_TOOL_INPUT_SCHEMA = {
+    type: "object",
+    additionalProperties: false,
+    required: [
+        "workspaceId",
+        "campaignId",
+        "tableId",
+        "campaignVersion",
+        "evidenceFingerprint",
+        "priorActionFingerprint",
+        "action",
+        "field",
+        "value",
+        "reobservationScope",
+        "idempotencyKey",
+    ],
+    properties: {
+        workspaceId: {
+            type: "string",
+            minLength: 1,
+            description: "Explicit request-scoped workspace id. Pass this instead of switching the shared active workspace.",
+        },
+        campaignId: {
+            type: "string",
+            minLength: 1,
+            description: "Exact id of the ONE selected campaign this request may touch.",
+        },
+        tableId: {
+            type: "string",
+            minLength: 1,
+            description: "Exact workflow table id owned by that campaign.",
+        },
+        campaignVersion: {
+            type: "integer",
+            minimum: 0,
+            description: "Optimistic concurrency token from the selected packet. A stale value refuses before any delegated call.",
+        },
+        evidenceFingerprint: {
+            type: "string",
+            minLength: 1,
+            description: "Fingerprint of the bounded evidence the edit was chosen from. Stale evidence cannot authorize a mutation.",
+        },
+        priorActionFingerprint: {
+            type: "string",
+            minLength: 1,
+            description: "Action-specific prior fingerprint proving the delta was derived from the current field value.",
+        },
+        action: {
+            type: "string",
+            enum: [...REFILL_V3_EDIT_ACTIONS],
+            description: "The one closed edit action. Rerun, same-meaning regeneration, and the guarded rubric trial are NOT edit variants and are refused here.",
+        },
+        field: {
+            type: "string",
+            minLength: 1,
+            description: "The single allowlisted field for that action. A protected field or an action/field mismatch refuses before any delegated call.",
+        },
+        value: {
+            type: ["string", "boolean"],
+            description: "The one normalized field-level value. Objects, arrays, and whole-object replacement are refused.",
+        },
+        reobservationScope: {
+            type: "object",
+            additionalProperties: false,
+            required: ["senderId", "date"],
+            properties: {
+                senderId: { type: "string", minLength: 1 },
+                date: { type: "string", pattern: "^\\d{4}-\\d{2}-\\d{2}$" },
+            },
+            description: "The exact sender and sender-local date whose two lanes must be re-observed immediately after the edit.",
+        },
+        idempotencyKey: {
+            type: "string",
+            minLength: 1,
+            description: "Caller replay identity. Reuse the SAME key to retry one request; the same key with changed input is refused, never converged.",
+        },
+    },
+};
+export const refillV3EditSelectedCampaignToolDefinitions = [
+    {
+        name: REFILL_V3_EDIT_SELECTED_CAMPAIGN_TOOL_NAME,
+        description: "Apply exactly ONE allowlisted configuration, filter, or source field patch to exactly one already-selected campaign, proven by the exact bounded evidence that chose it. It MUTATES campaign configuration and is deliberately narrow: it wraps and restricts update_campaign and refuses the campaign name, brief, positioning, senders, current step, interaction mode, provider or list replacement, rubric, template or sequence meaning, and any launch or start. It never reruns cells, regenerates messages, relaxes a rubric, writes raw rows, schedules, or sends; those keep their existing owners. A filter or source value that weakens the approved objective or any employment, DNC, legal, or explicit-exclusion invariant is invalid at the schema and makes zero delegated calls. Connection-health facts are categorically not edit actions. Every success returns immutable before/after fingerprints, the exact changed fields, a deterministic effect key, replay state, rollback data, and a required exact sender/date two-lane re-observation; reuse the same idempotencyKey to retry one request.",
+        inputSchema: REFILL_V3_EDIT_TOOL_INPUT_SCHEMA,
+        outputSchema: REFILL_V3_CAMPAIGN_EDIT_OUTPUT_SCHEMA,
+        annotations: {
+            title: "Refill V3 Edit Selected Campaign",
+            readOnlyHint: false,
+            destructiveHint: true,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    },
+];
+export async function editRefillV3SelectedCampaignTool(input) {
+    const workspaceId = normalizeExplicitWorkspaceId(input.workspaceId);
+    if (!workspaceId) {
+        throw new Error("Explicit workspaceId is required for refill_v3_edit_selected_campaign. Name the target workspace instead of switching the shared active workspace.");
+    }
+    const raw = await getApi().post(REFILL_V3_EDIT_SELECTED_CAMPAIGN_ROUTE, {
+        workspaceId,
+        campaignId: input.campaignId,
+        tableId: input.tableId,
+        campaignVersion: input.campaignVersion,
+        evidenceFingerprint: input.evidenceFingerprint,
+        priorActionFingerprint: input.priorActionFingerprint,
+        action: input.action,
+        field: input.field,
+        value: input.value,
+        reobservationScope: input.reobservationScope,
+        // Forwarded byte-for-byte: rewriting the caller's replay identity would
+        // turn a retry into a second mutation scope.
+        idempotencyKey: input.idempotencyKey,
+    }, workspaceRequestOptions(workspaceId));
+    const decoded = decodeRefillV3CampaignEditResult(raw);
+    if (decoded === null) {
+        throw new Error("The Refill V3 campaign-edit response failed the published result contract.");
+    }
+    return decoded;
+}

package/dist/tools/refill-v3-fill-ready-contract.d.ts

@@ -0,0 +1,198 @@
+/**
+ * Refill V3 fill-ready PACKAGE seam.
+ *
+ * This module is the SOLE owner of the fill-ready public result contract:
+ *  - `REFILL_V3_FILL_READY_OUTCOMES` and the closed reason/receipt/result types;
+ *  - `REFILL_V3_FILL_READY_REASON_CODES`, which EXTENDS the world-state code
+ *    vocabulary rather than forking it;
+ *  - `decodeRefillV3FillReadyResult`, the ONE unknown-value decoder; and
+ *  - `REFILL_V3_FILL_READY_OUTPUT_SCHEMA`, derived from the same closed
+ *    vocabulary so the central MCP envelope can always emit matching
+ *    `structuredContent`.
+ *
+ * It lives inside `@sellable/mcp` and compiles to
+ * `dist/tools/refill-v3-fill-ready-contract.js` plus `.d.ts`, so both the app
+ * service and the Plan 08 tool wrapper IMPORT these exact exports. Nothing here
+ * imports app `src/**`, and no consumer may copy the types, outcomes, decoder,
+ * or schema.
+ *
+ * Decoding rules: hand-rolled type guards plus as-const JSON-Schema literals,
+ * strict inbound, and fail-closed. Unlike the world-state observation, a
+ * fill-ready result describes a MUTATION, so an unrecognized member is rejected
+ * outright instead of being narrowed to a tolerant projection: a malformed
+ * mutation receipt must never be read as a partial success.
+ */
+export declare const REFILL_V3_FILL_READY_SCHEMA_NAMESPACE: "refill_v3_fill_ready";
+export declare const REFILL_V3_FILL_READY_SCHEMA_MAJOR = 1;
+export declare const REFILL_V3_FILL_READY_SCHEMA_VERSION: "refill_v3_fill_ready.v1.0";
+/** The five terminal outcomes. There is deliberately no sixth member. */
+export declare const REFILL_V3_FILL_READY_OUTCOMES: readonly ["scheduled", "partially_scheduled", "awaiting_scheduler", "campaign_exhausted", "blocked"];
+export type RefillV3FillReadyOutcome = (typeof REFILL_V3_FILL_READY_OUTCOMES)[number];
+/**
+ * Codes emitted ONLY by the fill-ready service. They EXTEND the world-state
+ * vocabulary; every one gets a row in the single exported code -> classification
+ * map, so retryability stays a property of the CODE rather than of a call site.
+ */
+export declare const REFILL_V3_FILL_READY_ONLY_REASON_CODES: readonly ["zero_requested_count", "idempotency_scope_mismatch", "uncertain_outcome", "placed_under_other_sender", "placed_off_target_date", "paid_inmail_credit_receipt_invalid", "awaiting_external_change", "approval_authority_invalid", "approval_authority_in_flight", "approval_dispatch_incomplete", "ready_cells_unavailable", "sender_affinity_conflict", "scheduler_target_omitted", "scheduler_failed", "receipt_readback_mismatch"];
+export type RefillV3FillReadyOnlyReasonCode = (typeof REFILL_V3_FILL_READY_ONLY_REASON_CODES)[number];
+/** The complete closed fill-ready code vocabulary. */
+export declare const REFILL_V3_FILL_READY_REASON_CODES: readonly ["global_cooldown", "connection_cooldown", "paid_inmail_cooldown", "endpoint_temporarily_unavailable", "date_in_past", "no_sending_hours", "sender_disconnected", "sender_limit_reached", "daily_target_met", "no_eligible_campaign", "no_ready_supply", "sales_nav_disconnected", "insufficient_paid_credits", "paid_inmail_connection_health_recheck_required", "paid_inmail_credit_refresh_failed", "invalid_paid_configuration", "campaign_table_missing", "campaign_sequence_invalid", "source_family_unresolved", "campaign_work_in_flight", "zero_requested_count", "idempotency_scope_mismatch", "uncertain_outcome", "placed_under_other_sender", "placed_off_target_date", "paid_inmail_credit_receipt_invalid", "awaiting_external_change", "approval_authority_invalid", "approval_authority_in_flight", "approval_dispatch_incomplete", "ready_cells_unavailable", "sender_affinity_conflict", "scheduler_target_omitted", "scheduler_failed", "receipt_readback_mismatch"];
+export type RefillV3FillReadyReasonCode = (typeof REFILL_V3_FILL_READY_REASON_CODES)[number];
+/**
+ * Why a request was reduced. A clamp is NEVER silent: whenever
+ * `requestedCount !== appliedCount` the result carries this basis, except for
+ * the two concurrent-consumption codes where the shortfall is not a clamp at
+ * all and labelling it one would be a false statement.
+ */
+export declare const REFILL_V3_FILL_READY_CLAMP_BASES: readonly ["capacity", "supply", "candidates"];
+export type RefillV3FillReadyClampBasis = (typeof REFILL_V3_FILL_READY_CLAMP_BASES)[number];
+/** Codes for which a shortfall is concurrent consumption, never a clamp. */
+export declare const REFILL_V3_FILL_READY_CLAMP_EXEMPT_CODES: readonly ["placed_under_other_sender", "placed_off_target_date"];
+/** Reused verbatim: a mutation result must not leak identity or internals. */
+export declare const REFILL_V3_FILL_READY_FORBIDDEN_LEAK_KEYS: readonly ["campaignActionFacts", "leaves", "possibleActions", "boundedRowIds", "rowIds", "rowId", "cellId", "cellIds", "tableId", "actionId", "actionIds", "actionColumnId", "graph", "rank", "ranking", "selectedCampaign", "waterfall", "queryDebug"];
+export type RefillV3FillReadyReason = {
+    code: RefillV3FillReadyReasonCode;
+    message: string;
+    /** Derived from the shared code map, never from the emitting call site. */
+    retryable: boolean;
+    /** Present only for a time-bound code; a bare cooldown is unusable guidance. */
+    resumeAt?: string;
+};
+export type RefillV3FillReadyClamp = {
+    basis: RefillV3FillReadyClampBasis;
+    requested: number;
+    limit: number;
+};
+export type RefillV3FillReadyReceipt = {
+    idempotencyKey: string;
+    campaignId: string;
+    senderId: string;
+    targetDate: string;
+};
+export type RefillV3FillReadyResult = {
+    outcome: RefillV3FillReadyOutcome;
+    requestedCount: number;
+    appliedCount: number;
+    approvedCount: number;
+    scheduledCount: number;
+    reason: RefillV3FillReadyReason | null;
+    clamp: RefillV3FillReadyClamp | null;
+    receipt: RefillV3FillReadyReceipt;
+    /**
+     * The STABLE poll identity of an `awaiting_scheduler` result. The documented
+     * follow-up is a status lookup by this key; a second dispatch under it is
+     * forbidden.
+     */
+    pollKey: string | null;
+};
+export declare const REFILL_V3_FILL_READY_RESULT_KEYS: readonly ["outcome", "requestedCount", "appliedCount", "approvedCount", "scheduledCount", "reason", "clamp", "receipt", "pollKey"];
+/**
+ * A TOP-LEVEL OBJECT, never an array: an MCP client validates
+ * `structuredContent` against this declaration, and a tool that declares an
+ * output schema and answers with a shape the client rejects has its ENTIRE
+ * response discarded. Every boundary the decoder closes is closed here too.
+ */
+export declare const REFILL_V3_FILL_READY_OUTPUT_SCHEMA: Readonly<{
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["outcome", "requestedCount", "appliedCount", "approvedCount", "scheduledCount", "reason", "clamp", "receipt", "pollKey"];
+    readonly properties: {
+        readonly outcome: {
+            readonly type: "string";
+            readonly enum: readonly ["scheduled", "partially_scheduled", "awaiting_scheduler", "campaign_exhausted", "blocked"];
+        };
+        readonly requestedCount: {
+            readonly type: "integer";
+            readonly minimum: 0;
+        };
+        readonly appliedCount: {
+            readonly type: "integer";
+            readonly minimum: 0;
+        };
+        readonly approvedCount: {
+            readonly type: "integer";
+            readonly minimum: 0;
+        };
+        readonly scheduledCount: {
+            readonly type: "integer";
+            readonly minimum: 0;
+        };
+        readonly reason: {
+            readonly type: readonly ["object", "null"];
+            readonly additionalProperties: false;
+            readonly required: readonly ["code", "message", "retryable"];
+            readonly properties: {
+                readonly code: {
+                    readonly type: "string";
+                    readonly enum: readonly ["global_cooldown", "connection_cooldown", "paid_inmail_cooldown", "endpoint_temporarily_unavailable", "date_in_past", "no_sending_hours", "sender_disconnected", "sender_limit_reached", "daily_target_met", "no_eligible_campaign", "no_ready_supply", "sales_nav_disconnected", "insufficient_paid_credits", "paid_inmail_connection_health_recheck_required", "paid_inmail_credit_refresh_failed", "invalid_paid_configuration", "campaign_table_missing", "campaign_sequence_invalid", "source_family_unresolved", "campaign_work_in_flight", "zero_requested_count", "idempotency_scope_mismatch", "uncertain_outcome", "placed_under_other_sender", "placed_off_target_date", "paid_inmail_credit_receipt_invalid", "awaiting_external_change", "approval_authority_invalid", "approval_authority_in_flight", "approval_dispatch_incomplete", "ready_cells_unavailable", "sender_affinity_conflict", "scheduler_target_omitted", "scheduler_failed", "receipt_readback_mismatch"];
+                };
+                readonly message: {
+                    readonly type: "string";
+                };
+                readonly retryable: {
+                    readonly type: "boolean";
+                };
+                readonly resumeAt: {
+                    readonly type: "string";
+                };
+            };
+        };
+        readonly clamp: {
+            readonly type: readonly ["object", "null"];
+            readonly additionalProperties: false;
+            readonly required: readonly ["basis", "requested", "limit"];
+            readonly properties: {
+                readonly basis: {
+                    readonly type: "string";
+                    readonly enum: readonly ["capacity", "supply", "candidates"];
+                };
+                readonly requested: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                };
+                readonly limit: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                };
+            };
+        };
+        readonly receipt: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["idempotencyKey", "campaignId", "senderId", "targetDate"];
+            readonly properties: {
+                readonly idempotencyKey: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly campaignId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly senderId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly targetDate: {
+                    readonly type: "string";
+                    readonly pattern: "^\\d{4}-\\d{2}-\\d{2}$";
+                };
+            };
+        };
+        readonly pollKey: {
+            readonly type: readonly ["string", "null"];
+        };
+    };
+}>;
+export declare function isOneOfFillReady<T extends readonly string[]>(value: unknown, allowed: T): value is T[number];
+/**
+ * Sole unknown-value decoder for the public result. STRICT and FAIL-CLOSED: a
+ * fill-ready result describes a MUTATION, so an unknown key, a malformed count,
+ * a broken count invariant, or a leaked identity rejects the whole value rather
+ * than being narrowed into a confident partial success.
+ */
+export declare function decodeRefillV3FillReadyResult(value: unknown): RefillV3FillReadyResult | null;
+/** Wire form of a decoded result. `schemaVersion` is TRANSPORT, not business. */
+export declare function encodeRefillV3FillReadyResult(result: RefillV3FillReadyResult): Record<string, unknown>;
+/** The two lanes, re-exported so a consumer needs exactly one import. */
+export declare const REFILL_V3_FILL_READY_LANES: readonly ["connection_invite", "paid_inmail"];