@sellable/mcp 0.1.793 → 0.1.794

package/dist/tools/refill-v3-attention-packet-contract.js

@@ -0,0 +1,911 @@
+/**
+ * Refill V3 `campaign_attention_required` PACKAGE seam.
+ *
+ * This module is declared inside `@sellable/mcp` so the packet contract ships
+ * with the published package and both later waves import ONE declaration:
+ * the wave-7 AI seams validate their output against it, and the wave-8
+ * deterministic coordinator produces packets against it. Copying the packet
+ * shape, the action list, the exhaustion table, or the yield floor into either
+ * consumer is forbidden.
+ *
+ * It is also the phase's shared PACKAGE VOCABULARY owner. The campaign supply
+ * buckets, live-job vocabulary, lead-source families, schema-version gate, and
+ * the emitted-module registry are declared exactly once here and imported by
+ * the sibling world-state and waterfall contracts, because a vocabulary
+ * mirrored across two modules is a defect by construction (error law 2).
+ *
+ * Constraints:
+ *  - zero imports: no app `src/**`, no validation library, no runtime dependency
+ *    beyond what `@sellable/mcp` already publishes (assumption A02-NO-ZOD);
+ *  - hand-rolled type guards plus as-const JSON-Schema literals;
+ *  - strict-in, tolerant-out, lossless decoding; and
+ *  - a compatible-RANGE schema version gate, never an exact-string pin.
+ */
+/**
+ * Every package contract module pair this phase emits under `dist/tools/`.
+ * Earlier plans append their own module; Plan 10's single packed-asset
+ * assertion consumes this list instead of four escalating set-completeness
+ * assertions.
+ */
+export const REFILL_V3_PACKAGED_CONTRACT_MODULES = [
+    {
+        source: "mcp/sellable/src/tools/refill-v3-world-state-contract.ts",
+        js: "dist/tools/refill-v3-world-state-contract.js",
+        types: "dist/tools/refill-v3-world-state-contract.d.ts",
+        ownerPlan: "146.5-02",
+        ownerTask: "146.5-02-T1",
+    },
+    {
+        source: "mcp/sellable/src/tools/refill-v3-attention-packet-contract.ts",
+        js: "dist/tools/refill-v3-attention-packet-contract.js",
+        types: "dist/tools/refill-v3-attention-packet-contract.d.ts",
+        ownerPlan: "146.5-02",
+        ownerTask: "146.5-02-T3",
+    },
+    {
+        source: "mcp/sellable/src/tools/refill-v3-waterfall-contract.ts",
+        js: "dist/tools/refill-v3-waterfall-contract.js",
+        types: "dist/tools/refill-v3-waterfall-contract.d.ts",
+        ownerPlan: "146.5-02",
+        ownerTask: "146.5-02-T3",
+    },
+    {
+        source: "mcp/sellable/src/tools/refill-v3-fill-ready-contract.ts",
+        js: "dist/tools/refill-v3-fill-ready-contract.js",
+        types: "dist/tools/refill-v3-fill-ready-contract.d.ts",
+        ownerPlan: "146.5-07",
+        ownerTask: "146.5-07-T3",
+    },
+    {
+        source: "mcp/sellable/src/tools/refill-v3-world-state.ts",
+        js: "dist/tools/refill-v3-world-state.js",
+        types: "dist/tools/refill-v3-world-state.d.ts",
+        ownerPlan: "146.5-08",
+        ownerTask: "146.5-08-T1",
+    },
+    {
+        source: "mcp/sellable/src/tools/refill-v3-fill-ready.ts",
+        js: "dist/tools/refill-v3-fill-ready.js",
+        types: "dist/tools/refill-v3-fill-ready.d.ts",
+        ownerPlan: "146.5-08",
+        ownerTask: "146.5-08-T2",
+    },
+    {
+        source: "mcp/sellable/src/tools/refill-v3-edit-selected-campaign-contract.ts",
+        js: "dist/tools/refill-v3-edit-selected-campaign-contract.js",
+        types: "dist/tools/refill-v3-edit-selected-campaign-contract.d.ts",
+        ownerPlan: "146.5-09",
+        ownerTask: "146.5-09-T2",
+    },
+    {
+        /**
+         * Plan 09's WRAPPER. Its contract pair was already registered; the wrapper
+         * itself was missing, which left the four-tool package parity claim
+         * unsatisfiable. Plan 10 T2 appended it because it owns set completeness
+         * across every emitted Refill V3 module.
+         */
+        source: "mcp/sellable/src/tools/refill-v3-edit-selected-campaign.ts",
+        js: "dist/tools/refill-v3-edit-selected-campaign.js",
+        types: "dist/tools/refill-v3-edit-selected-campaign.d.ts",
+        ownerPlan: "146.5-09",
+        ownerTask: "146.5-09-T2",
+    },
+    {
+        source: "mcp/sellable/src/tools/refill-v3-advance-contract.ts",
+        js: "dist/tools/refill-v3-advance-contract.js",
+        types: "dist/tools/refill-v3-advance-contract.d.ts",
+        ownerPlan: "146.5-10",
+        ownerTask: "146.5-10-T1a",
+    },
+    {
+        source: "mcp/sellable/src/tools/refill-v3-advance.ts",
+        js: "dist/tools/refill-v3-advance.js",
+        types: "dist/tools/refill-v3-advance.d.ts",
+        ownerPlan: "146.5-10",
+        ownerTask: "146.5-10-T1a",
+    },
+    {
+        source: "mcp/sellable/src/tools/refill-v3-continue-contract.ts",
+        js: "dist/tools/refill-v3-continue-contract.js",
+        types: "dist/tools/refill-v3-continue-contract.d.ts",
+        ownerPlan: "146.5-13",
+        ownerTask: "146.5-13-T2",
+    },
+    {
+        source: "mcp/sellable/src/tools/refill-v3-continue.ts",
+        js: "dist/tools/refill-v3-continue.js",
+        types: "dist/tools/refill-v3-continue.d.ts",
+        ownerPlan: "146.5-13",
+        ownerTask: "146.5-13-T2",
+    },
+];
+// ───────────────────────────────────────────────────────────────────────────
+// Shared schema-version gate
+// ───────────────────────────────────────────────────────────────────────────
+/**
+ * The typed VALUE an unsupported MAJOR returns. It is deliberately not `null`
+ * and never a throw: the backend deploys before the package is installed, so an
+ * already-installed client that fails closed on one new field would take every
+ * installed customer down (112-EMH-06).
+ */
+export const REFILL_V3_SCHEMA_VERSION_UNSUPPORTED = "schema_version_unsupported";
+/**
+ * Compatible-RANGE gate. Any minor of the supported major decodes, including a
+ * newer one; a different major returns the typed unsupported value; anything
+ * that is not `<namespace>.v<major>.<minor>` is malformed transport.
+ */
+export function resolveRefillV3SchemaVersion(value, namespace, supportedMajor) {
+    if (typeof value !== "string")
+        return { supported: false, reason: "malformed" };
+    const prefix = `${namespace}.v`;
+    if (!value.startsWith(prefix))
+        return { supported: false, reason: "malformed" };
+    const parts = value.slice(prefix.length).split(".");
+    if (parts.length !== 2)
+        return { supported: false, reason: "malformed" };
+    const major = Number(parts[0]);
+    const minor = Number(parts[1]);
+    if (!Number.isInteger(major) ||
+        !Number.isInteger(minor) ||
+        major < 0 ||
+        minor < 0 ||
+        parts[0] === "" ||
+        parts[1] === "") {
+        return { supported: false, reason: "malformed" };
+    }
+    if (major !== supportedMajor) {
+        return { supported: false, reason: REFILL_V3_SCHEMA_VERSION_UNSUPPORTED };
+    }
+    return { supported: true, major, minor };
+}
+// ───────────────────────────────────────────────────────────────────────────
+// Shared campaign fact vocabularies
+// ───────────────────────────────────────────────────────────────────────────
+export const REFILL_V3_LEAD_SOURCE_FAMILIES = [
+    "post_engager",
+    "signal_discovery",
+    "cold",
+];
+export const REFILL_V3_ACTIVE_JOB_KINDS = [
+    "enrichment",
+    "message_generation",
+    "source_expansion",
+    "scheduling",
+];
+export const REFILL_V3_ACTIVE_JOB_STATUSES = ["queued", "running"];
+export const REFILL_V3_SUPPLY_BUCKETS = [
+    "readyToSchedule",
+    "readyForApproval",
+    "readyForMessageGeneration",
+    "needsEnrichment",
+];
+/** The at-most-10 bounded diagnostic sample. A REFERENCE, never row payload. */
+export const REFILL_V3_DIAGNOSTIC_SAMPLE_CAP = 10;
+// ───────────────────────────────────────────────────────────────────────────
+// Minimum source yield floor
+// ───────────────────────────────────────────────────────────────────────────
+/**
+ * The measured ACCEPTANCE FLOOR for a new source search: 8% of an evaluated
+ * sample must pass.
+ *
+ * This is NOT `SIGNAL_YIELD_DEFAULT_PASS_RATE` in `refill-executors.ts`, which
+ * is the no-evidence PROJECTION default used to size a request. Quality and
+ * volume stay separate on purpose: coupling a quality floor to gap-fill
+ * projection arithmetic is exactly what made the predecessor brittle.
+ */
+export const REFILL_V3_MIN_SOURCE_YIELD = 0.08;
+/** The acceptance sample is a fixed number of EVALUATED candidates. */
+export const REFILL_V3_MIN_SOURCE_YIELD_SAMPLE = 20;
+/** `post_engager` is excluded: it keeps posts-refresh preconditions, not a rate. */
+export const REFILL_V3_YIELD_FLOOR_FAMILIES = [
+    "signal_discovery",
+    "cold",
+];
+/**
+ * The DETERMINISTIC half of the yield floor. The AI judges WHICH sampled
+ * candidates pass; this owns sample-size enforcement, the arithmetic, the
+ * comparison, and the routing decision. There is deliberately no deterministic
+ * candidate judge here.
+ *
+ */
+export function evaluateRefillV3SourceYield(evidence) {
+    if (!REFILL_V3_YIELD_FLOOR_FAMILIES.includes(evidence.family)) {
+        return { decision: "floor_not_applicable", family: evidence.family };
+    }
+    if (!Number.isInteger(evidence.evaluated) ||
+        !Number.isInteger(evidence.passes) ||
+        evidence.evaluated < 0 ||
+        evidence.passes < 0 ||
+        evidence.passes > evidence.evaluated) {
+        return {
+            decision: "invalid_evidence",
+            detail: `evaluated=${evidence.evaluated} passes=${evidence.passes} is not a whole-number sample with passes <= evaluated.`,
+        };
+    }
+    if (evidence.evaluated < REFILL_V3_MIN_SOURCE_YIELD_SAMPLE) {
+        return {
+            decision: "sample_incomplete",
+            evaluated: evidence.evaluated,
+            required: REFILL_V3_MIN_SOURCE_YIELD_SAMPLE,
+        };
+    }
+    const ratio = evidence.passes / evidence.evaluated;
+    return ratio >= REFILL_V3_MIN_SOURCE_YIELD
+        ? { decision: "meets_floor", ratio, floor: REFILL_V3_MIN_SOURCE_YIELD }
+        : { decision: "below_floor", ratio, floor: REFILL_V3_MIN_SOURCE_YIELD };
+}
+// ───────────────────────────────────────────────────────────────────────────
+// Shared exhaustion predicate
+// ───────────────────────────────────────────────────────────────────────────
+export const REFILL_V3_EXHAUSTION_CONJUNCTS = [
+    "existing_supply_drained",
+    "no_live_active_job",
+    "no_repairable_existing_rows",
+    "no_undispatched_approved_work",
+    "source_frontier_scan_terminated",
+];
+export const REFILL_V3_SCAN_TERMINATIONS = [
+    "not_started",
+    "in_progress",
+    "frontier_scanned",
+    "provider_unavailable",
+];
+/**
+ * The ONE five-conjunct exhaustion predicate. Wave 7's AI falsification check
+ * and wave 8's coordinator both route through this symbol; declaring it in
+ * wave 8 would make a wave-7 behavior assert through an artifact that does not
+ * yet exist and would duplicate the same table twice.
+ *
+ * `structurallyUnactionableRows` and `retryExhaustedRows` are recorded evidence
+ * that SUPPORTS exhaustion; they can never falsify it, which is why they are
+ * inputs and not conjuncts.
+ */
+export const REFILL_V3_EXHAUSTION_PREDICATE = {
+    conjuncts: REFILL_V3_EXHAUSTION_CONJUNCTS,
+    evaluate(input) {
+        const supplyRemaining = Object.keys(input.supply).some((bucket) => input.supply[bucket] > 0);
+        if (supplyRemaining) {
+            return { exhausted: false, falsifyingClause: "existing_supply_drained" };
+        }
+        if (input.activeJob !== null) {
+            return { exhausted: false, falsifyingClause: "no_live_active_job" };
+        }
+        if (input.repairableExistingRows > 0) {
+            return {
+                exhausted: false,
+                falsifyingClause: "no_repairable_existing_rows",
+            };
+        }
+        if (input.approvedUndispatchedWork > 0) {
+            return {
+                exhausted: false,
+                falsifyingClause: "no_undispatched_approved_work",
+            };
+        }
+        const productiveYield = input.yieldEvidence !== null &&
+            evaluateRefillV3SourceYield(input.yieldEvidence).decision ===
+                "meets_floor";
+        if (input.scanTermination !== "frontier_scanned" ||
+            input.searchedNegativeSet.untriedBroadenings > 0 ||
+            productiveYield) {
+            return {
+                exhausted: false,
+                falsifyingClause: "source_frontier_scan_terminated",
+            };
+        }
+        return { exhausted: true };
+    },
+};
+/** Future modules that must IMPORT the predicate rather than restate it. */
+export const REFILL_V3_EXHAUSTION_PREDICATE_CONSUMERS = [
+    "mcp/sellable/src/tools/refill-v3-advance-contract.ts",
+    "mcp/sellable/src/tools/refill-v3-edit-selected-campaign-contract.ts",
+];
+// ───────────────────────────────────────────────────────────────────────────
+// Closed AI action and typed traversal-result vocabularies
+// ───────────────────────────────────────────────────────────────────────────
+/**
+ * The ONE closed AI action vocabulary. Wave 7 validates model output against
+ * this constant and GENERATES its prompt's allowed-action list from it; wave 8
+ * consumes it. Neither may declare a second list (error law 1).
+ */
+export const REFILL_V3_CAMPAIGN_ATTENTION_ACTIONS = [
+    "rerun_errored_cells",
+    "repair_campaign_config",
+    "enrich_bounded_sample",
+    "regenerate_stale_messages",
+    "patch_filter_criteria",
+    "patch_source_criteria",
+    "broaden_source_family",
+    "request_rubric_trial",
+    "await_active_job",
+    "record_source_frontier_exhausted",
+];
+/**
+ * Typed traversal RESULTS. `source_frontier_exhausted` and
+ * `health_recheck_required` live here and are never unreceipted AI actions:
+ * the AI records exhaustion through `record_source_frontier_exhausted`, and the
+ * deterministic authority answers with the result.
+ */
+export const REFILL_V3_CAMPAIGN_ATTENTION_RESULTS = [
+    "cells_rerun",
+    "campaign_config_repaired",
+    "bounded_sample_enriched",
+    "stale_messages_regenerated",
+    "filter_criteria_patched",
+    "source_criteria_patched",
+    "source_family_broadened",
+    "rubric_trial_requested",
+    "active_job_awaited",
+    "source_frontier_exhausted",
+    "health_recheck_required",
+    "no_action_available",
+];
+/**
+ * Prompt assets that must GENERATE their allowed outputs from the constants
+ * above rather than hand-maintain a second list. Every named asset that exists
+ * is bound by the shared-vocabulary assertion; the assets themselves are
+ * authored by their owning wave-7 plan.
+ */
+export const REFILL_V3_ATTENTION_ASSET_CONTRACT = [
+    {
+        asset: "mcp/sellable/skills/refill-sends-work-campaign/SKILL.md",
+        generatedFrom: "REFILL_V3_CAMPAIGN_ATTENTION_ACTIONS",
+        ownerPlan: "146.5-09",
+    },
+    {
+        asset: "mcp/sellable/skills/refill-sends-waterfall/SKILL.md",
+        generatedFrom: "REFILL_V3_WATERFALL_PROPOSAL_SCHEMA",
+        ownerPlan: "146.5-09",
+    },
+];
+/**
+ * Prose that must never survive in a generated asset. Deterministic ladder
+ * step 3 owns the hand-off to `refill_v3_fill_ready`; an AI action token for it
+ * would put a deterministic transition inside the model's vocabulary.
+ */
+export const REFILL_V3_ATTENTION_FORBIDDEN_ASSET_INSTRUCTIONS = [
+    "refill_v3_fill_ready",
+    "approve_and_hand_off",
+    "hand off to refill_v3_fill_ready",
+];
+// ───────────────────────────────────────────────────────────────────────────
+// The packet
+// ───────────────────────────────────────────────────────────────────────────
+export const REFILL_V3_CAMPAIGN_ATTENTION_SCHEMA_NAMESPACE = "refill_v3_campaign_attention";
+export const REFILL_V3_CAMPAIGN_ATTENTION_SCHEMA_MAJOR = 1;
+export const REFILL_V3_CAMPAIGN_ATTENTION_SCHEMA_VERSION = "refill_v3_campaign_attention.v1.0";
+export const REFILL_V3_CAMPAIGN_ATTENTION_LANE_ACTION_TYPES = Object.freeze({
+    connection_invite: "send_invite",
+    paid_inmail: "send_inmail_closed",
+});
+/**
+ * Identity, payload, policy, and bookkeeping classes the packet must never
+ * carry. A raw row/cell/provider payload would move the table into the model;
+ * a rank/selection field would move backend authority into the model; a retry
+ * counter or cursor would recreate the durable state machine this phase deletes.
+ */
+export const REFILL_V3_ATTENTION_FORBIDDEN_KEYS = [
+    "rows",
+    "cells",
+    "rowIds",
+    "cellIds",
+    "rowPayload",
+    "cellPayload",
+    "providerResponse",
+    "providerPayload",
+    "rank",
+    "ranking",
+    "graph",
+    "selectedCampaign",
+    "waterfall",
+    "retryCount",
+    "attempts",
+    "cursor",
+    "continuation",
+    "prompt",
+    "instructions",
+    "systemPrompt",
+];
+export const REFILL_V3_CAMPAIGN_ATTENTION_PACKET_SCHEMA = Object.freeze({
+    type: "object",
+    additionalProperties: false,
+    required: ["scope", "evidence"],
+    properties: {
+        scope: {
+            type: "object",
+            additionalProperties: false,
+            required: [
+                "workspaceId",
+                "campaignId",
+                "tableId",
+                "campaignVersion",
+                "evidenceFingerprint",
+                "senderId",
+                "date",
+                "lane",
+                "actionType",
+            ],
+            properties: {
+                workspaceId: { type: "string", minLength: 1 },
+                campaignId: { type: "string", minLength: 1 },
+                tableId: { type: "string", minLength: 1 },
+                campaignVersion: { type: "integer", minimum: 0 },
+                evidenceFingerprint: { type: "string", minLength: 1 },
+                senderId: { type: "string", minLength: 1 },
+                date: { type: "string", pattern: "^\\d{4}-\\d{2}-\\d{2}$" },
+                lane: {
+                    type: "string",
+                    enum: Object.keys(REFILL_V3_CAMPAIGN_ATTENTION_LANE_ACTION_TYPES),
+                },
+                actionType: {
+                    type: "string",
+                    enum: Object.values(REFILL_V3_CAMPAIGN_ATTENTION_LANE_ACTION_TYPES),
+                },
+            },
+        },
+        evidence: {
+            type: "object",
+            additionalProperties: false,
+            required: [
+                "campaignType",
+                "campaignObjective",
+                "protectedFitDigest",
+                "leadSourceFamily",
+                "provider",
+                "sourceLineage",
+                "priorYieldReceipt",
+                "searchedNegativeSetFingerprints",
+                "remainingGap",
+                "supply",
+                "activeJob",
+                "failedJobRef",
+                "diagnosticRowRef",
+            ],
+            properties: {
+                campaignType: { type: "string" },
+                campaignObjective: { type: "string" },
+                protectedFitDigest: { type: "string" },
+                leadSourceFamily: {
+                    type: "string",
+                    enum: [...REFILL_V3_LEAD_SOURCE_FAMILIES],
+                },
+                provider: { type: ["string", "null"] },
+                selectedLeadListId: { type: ["string", "null"] },
+                providerSearchReference: {
+                    type: ["object", "null"],
+                    additionalProperties: false,
+                    required: [
+                        "workspaceId",
+                        "provider",
+                        "sourceTableId",
+                        "searchId",
+                        "resolutionOrigin",
+                        "owner",
+                        "basisFingerprint",
+                    ],
+                    properties: {
+                        workspaceId: { type: "string" },
+                        provider: { type: "string", enum: ["sales-nav", "prospeo"] },
+                        sourceTableId: { type: "string" },
+                        searchId: { type: "string" },
+                        resolutionOrigin: {
+                            type: "string",
+                            enum: ["config_import_job", "exact_table_job", "find_leads_run"],
+                        },
+                        owner: {
+                            type: "object",
+                            additionalProperties: false,
+                            required: ["kind", "id"],
+                            properties: {
+                                kind: {
+                                    type: "string",
+                                    enum: ["campaign", "find_leads_run"],
+                                },
+                                id: { type: "string" },
+                            },
+                        },
+                        basisFingerprint: { type: "string" },
+                    },
+                },
+                sourceLineage: { type: "array", items: { type: "string" } },
+                priorYieldReceipt: {
+                    type: ["object", "null"],
+                    additionalProperties: false,
+                    required: ["family", "evaluated", "passes"],
+                    properties: {
+                        family: {
+                            type: "string",
+                            enum: [...REFILL_V3_LEAD_SOURCE_FAMILIES],
+                        },
+                        evaluated: { type: "integer", minimum: 0 },
+                        passes: { type: "integer", minimum: 0 },
+                    },
+                },
+                searchedNegativeSetFingerprints: {
+                    type: "array",
+                    items: { type: "string" },
+                },
+                remainingGap: { type: "integer", minimum: 0 },
+                supply: {
+                    type: "object",
+                    additionalProperties: false,
+                    required: [...REFILL_V3_SUPPLY_BUCKETS],
+                    properties: {
+                        readyToSchedule: { type: "integer", minimum: 0 },
+                        readyForApproval: { type: "integer", minimum: 0 },
+                        readyForMessageGeneration: { type: "integer", minimum: 0 },
+                        needsEnrichment: { type: "integer", minimum: 0 },
+                    },
+                },
+                activeJob: {
+                    type: ["object", "null"],
+                    additionalProperties: false,
+                    required: ["id", "kind", "status"],
+                    properties: {
+                        id: { type: "string", minLength: 1 },
+                        kind: { type: "string", enum: [...REFILL_V3_ACTIVE_JOB_KINDS] },
+                        status: {
+                            type: "string",
+                            enum: [...REFILL_V3_ACTIVE_JOB_STATUSES],
+                        },
+                    },
+                },
+                failedJobRef: { type: ["string", "null"] },
+                diagnosticRowRef: {
+                    type: ["object", "null"],
+                    additionalProperties: false,
+                    required: ["count", "selectorRef"],
+                    properties: {
+                        count: {
+                            type: "integer",
+                            minimum: 0,
+                            maximum: REFILL_V3_DIAGNOSTIC_SAMPLE_CAP,
+                        },
+                        selectorRef: { type: "string", minLength: 1 },
+                    },
+                },
+                // Additive enrichment (146.5-12 §84): OPTIONAL, evidence stays closed.
+                repairableExistingRows: { type: "integer", minimum: 0 },
+                retryExhaustedRows: { type: "integer", minimum: 0 },
+                laneSchedulable: { type: ["integer", "null"], minimum: 0 },
+            },
+        },
+    },
+});
+// ───────────────────────────────────────────────────────────────────────────
+// Decoding
+// ───────────────────────────────────────────────────────────────────────────
+function isRecord(value) {
+    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function isNonEmptyString(value) {
+    return typeof value === "string" && value.trim().length > 0;
+}
+function isWholeNumber(value, max) {
+    return (Number.isInteger(value) &&
+        value >= 0 &&
+        (max === undefined || value <= max));
+}
+function isOneOf(value, options) {
+    return (typeof value === "string" && options.includes(value));
+}
+function isStringArray(value) {
+    return (Array.isArray(value) && value.every((item) => typeof item === "string"));
+}
+function isPacketDate(value) {
+    if (typeof value !== "string" || !/^\d{4}-\d{2}-\d{2}$/.test(value)) {
+        return false;
+    }
+    const parsed = new Date(`${value}T00:00:00.000Z`);
+    return (!Number.isNaN(parsed.getTime()) &&
+        parsed.toISOString().slice(0, 10) === value);
+}
+/**
+ * Tolerance is ONE-WAY. A harmless additive field at a recognized level is
+ * stripped, but a known policy/identity leak key is fatal: a decoder that
+ * quietly forwards a raw row payload or a rank field is how backend authority
+ * silently moves into the model.
+ */
+function leaksForbiddenKey(record) {
+    return REFILL_V3_ATTENTION_FORBIDDEN_KEYS.some((key) => key in record);
+}
+function decodeScope(value) {
+    if (!isRecord(value) || leaksForbiddenKey(value))
+        return null;
+    const lane = value.lane;
+    if (!isOneOf(lane, Object.keys(REFILL_V3_CAMPAIGN_ATTENTION_LANE_ACTION_TYPES)) ||
+        value.actionType !== REFILL_V3_CAMPAIGN_ATTENTION_LANE_ACTION_TYPES[lane]) {
+        return null;
+    }
+    if (!isNonEmptyString(value.workspaceId) ||
+        !isNonEmptyString(value.campaignId) ||
+        !isNonEmptyString(value.tableId) ||
+        !isWholeNumber(value.campaignVersion) ||
+        !isNonEmptyString(value.evidenceFingerprint) ||
+        !isNonEmptyString(value.senderId) ||
+        !isPacketDate(value.date)) {
+        return null;
+    }
+    return {
+        workspaceId: value.workspaceId,
+        campaignId: value.campaignId,
+        tableId: value.tableId,
+        campaignVersion: value.campaignVersion,
+        evidenceFingerprint: value.evidenceFingerprint,
+        senderId: value.senderId,
+        date: value.date,
+        lane,
+        actionType: REFILL_V3_CAMPAIGN_ATTENTION_LANE_ACTION_TYPES[lane],
+    };
+}
+function decodeSupply(value) {
+    if (!isRecord(value) || leaksForbiddenKey(value))
+        return null;
+    for (const bucket of REFILL_V3_SUPPLY_BUCKETS) {
+        if (!isWholeNumber(value[bucket]))
+            return null;
+    }
+    return {
+        readyToSchedule: value.readyToSchedule,
+        readyForApproval: value.readyForApproval,
+        readyForMessageGeneration: value.readyForMessageGeneration,
+        needsEnrichment: value.needsEnrichment,
+    };
+}
+function decodeActiveJob(value) {
+    if (value === null)
+        return { ok: true, value: null };
+    if (!isRecord(value) || leaksForbiddenKey(value))
+        return { ok: false };
+    if (!isNonEmptyString(value.id) ||
+        !isOneOf(value.kind, REFILL_V3_ACTIVE_JOB_KINDS) ||
+        !isOneOf(value.status, REFILL_V3_ACTIVE_JOB_STATUSES)) {
+        return { ok: false };
+    }
+    return {
+        ok: true,
+        value: { id: value.id, kind: value.kind, status: value.status },
+    };
+}
+function decodeYieldReceipt(value) {
+    if (value === null)
+        return { ok: true, value: null };
+    if (!isRecord(value) || leaksForbiddenKey(value))
+        return { ok: false };
+    if (!isOneOf(value.family, REFILL_V3_LEAD_SOURCE_FAMILIES) ||
+        !isWholeNumber(value.evaluated) ||
+        !isWholeNumber(value.passes)) {
+        return { ok: false };
+    }
+    return {
+        ok: true,
+        value: {
+            family: value.family,
+            evaluated: value.evaluated,
+            passes: value.passes,
+        },
+    };
+}
+function decodeDiagnosticRef(value) {
+    if (value === null)
+        return { ok: true, value: null };
+    if (!isRecord(value) || leaksForbiddenKey(value))
+        return { ok: false };
+    if (!isWholeNumber(value.count, REFILL_V3_DIAGNOSTIC_SAMPLE_CAP) ||
+        !isNonEmptyString(value.selectorRef)) {
+        return { ok: false };
+    }
+    return {
+        ok: true,
+        value: { count: value.count, selectorRef: value.selectorRef },
+    };
+}
+function decodeProviderSearchReference(value) {
+    if (value === null)
+        return { ok: true, value: null };
+    if (!isRecord(value) || leaksForbiddenKey(value))
+        return { ok: false };
+    const owner = value.owner;
+    if (!isRecord(owner) || leaksForbiddenKey(owner))
+        return { ok: false };
+    if (!isNonEmptyString(value.workspaceId) ||
+        !isOneOf(value.provider, ["sales-nav", "prospeo"]) ||
+        !isNonEmptyString(value.sourceTableId) ||
+        !isNonEmptyString(value.searchId) ||
+        !isOneOf(value.resolutionOrigin, [
+            "config_import_job",
+            "exact_table_job",
+            "find_leads_run",
+        ]) ||
+        !isOneOf(owner.kind, ["campaign", "find_leads_run"]) ||
+        !isNonEmptyString(owner.id) ||
+        !isNonEmptyString(value.basisFingerprint)) {
+        return { ok: false };
+    }
+    return {
+        ok: true,
+        value: {
+            workspaceId: value.workspaceId,
+            provider: value.provider,
+            sourceTableId: value.sourceTableId,
+            searchId: value.searchId,
+            resolutionOrigin: value.resolutionOrigin,
+            owner: { kind: owner.kind, id: owner.id },
+            basisFingerprint: value.basisFingerprint,
+        },
+    };
+}
+function decodeEvidence(value) {
+    if (!isRecord(value) || leaksForbiddenKey(value))
+        return null;
+    if (typeof value.campaignType !== "string" ||
+        typeof value.campaignObjective !== "string" ||
+        typeof value.protectedFitDigest !== "string" ||
+        !isOneOf(value.leadSourceFamily, REFILL_V3_LEAD_SOURCE_FAMILIES) ||
+        !(value.provider === null || typeof value.provider === "string") ||
+        !isStringArray(value.sourceLineage) ||
+        !isStringArray(value.searchedNegativeSetFingerprints) ||
+        !isWholeNumber(value.remainingGap) ||
+        !(value.failedJobRef === null || typeof value.failedJobRef === "string")) {
+        return null;
+    }
+    if (!("priorYieldReceipt" in value) ||
+        !("activeJob" in value) ||
+        !("failedJobRef" in value) ||
+        !("diagnosticRowRef" in value)) {
+        return null;
+    }
+    const supply = decodeSupply(value.supply);
+    if (supply === null)
+        return null;
+    const activeJob = decodeActiveJob(value.activeJob);
+    if (!activeJob.ok)
+        return null;
+    const priorYieldReceipt = decodeYieldReceipt(value.priorYieldReceipt);
+    if (!priorYieldReceipt.ok)
+        return null;
+    const diagnosticRowRef = decodeDiagnosticRef(value.diagnosticRowRef);
+    if (!diagnosticRowRef.ok)
+        return null;
+    // Additive enrichment (146.5-12 §84): absent stays absent; a malformed
+    // present value rejects the packet rather than laundering into a number.
+    const repairableExistingRows = "repairableExistingRows" in value
+        ? value.repairableExistingRows
+        : undefined;
+    if (repairableExistingRows !== undefined &&
+        !isWholeNumber(repairableExistingRows)) {
+        return null;
+    }
+    const retryExhaustedRows = "retryExhaustedRows" in value ? value.retryExhaustedRows : undefined;
+    if (retryExhaustedRows !== undefined && !isWholeNumber(retryExhaustedRows)) {
+        return null;
+    }
+    const laneSchedulable = "laneSchedulable" in value ? value.laneSchedulable : undefined;
+    if (laneSchedulable !== undefined &&
+        laneSchedulable !== null &&
+        !isWholeNumber(laneSchedulable)) {
+        return null;
+    }
+    const selectedLeadListId = "selectedLeadListId" in value ? value.selectedLeadListId : undefined;
+    if (selectedLeadListId !== undefined &&
+        selectedLeadListId !== null &&
+        !isNonEmptyString(selectedLeadListId)) {
+        return null;
+    }
+    const providerSearchReference = "providerSearchReference" in value
+        ? decodeProviderSearchReference(value.providerSearchReference)
+        : undefined;
+    if (providerSearchReference && !providerSearchReference.ok)
+        return null;
+    return {
+        campaignType: value.campaignType,
+        campaignObjective: value.campaignObjective,
+        protectedFitDigest: value.protectedFitDigest,
+        leadSourceFamily: value.leadSourceFamily,
+        provider: value.provider,
+        ...(selectedLeadListId === undefined ? {} : { selectedLeadListId }),
+        ...(providerSearchReference === undefined
+            ? {}
+            : { providerSearchReference: providerSearchReference.value }),
+        sourceLineage: [...value.sourceLineage],
+        priorYieldReceipt: priorYieldReceipt.value,
+        searchedNegativeSetFingerprints: [...value.searchedNegativeSetFingerprints],
+        remainingGap: value.remainingGap,
+        supply,
+        activeJob: activeJob.value,
+        failedJobRef: value.failedJobRef,
+        diagnosticRowRef: diagnosticRowRef.value,
+        ...(repairableExistingRows === undefined ? {} : { repairableExistingRows }),
+        ...(retryExhaustedRows === undefined ? {} : { retryExhaustedRows }),
+        ...(laneSchedulable === undefined ? {} : { laneSchedulable }),
+    };
+}
+/**
+ * Sole unknown-value decoder for the packet.
+ *
+ * Strict-in, tolerant-out, lossless. `null` means "not this contract"; the
+ * typed unsupported VALUE means "a major this build cannot speak", which is a
+ * different fact and must never be collapsed into `null` or business zero.
+ */
+export function decodeRefillV3CampaignAttentionPacket(value) {
+    if (!isRecord(value))
+        return null;
+    const support = resolveRefillV3SchemaVersion(value.schemaVersion, REFILL_V3_CAMPAIGN_ATTENTION_SCHEMA_NAMESPACE, REFILL_V3_CAMPAIGN_ATTENTION_SCHEMA_MAJOR);
+    if (!support.supported) {
+        return support.reason === REFILL_V3_SCHEMA_VERSION_UNSUPPORTED
+            ? REFILL_V3_SCHEMA_VERSION_UNSUPPORTED
+            : null;
+    }
+    if (leaksForbiddenKey(value))
+        return null;
+    const scope = decodeScope(value.scope);
+    if (scope === null)
+        return null;
+    const evidence = decodeEvidence(value.evidence);
+    if (evidence === null)
+        return null;
+    return { scope, evidence };
+}
+/**
+ * Wire form of a decoded packet. `schemaVersion` is TRANSPORT, not business, so
+ * it is gated and stripped on decode and re-attached here. Every locked field
+ * is projected explicitly, because a silently dropped property is exactly the
+ * defect that turns a round trip into a confident wrong success.
+ */
+export function encodeRefillV3CampaignAttentionPacket(packet) {
+    return {
+        schemaVersion: REFILL_V3_CAMPAIGN_ATTENTION_SCHEMA_VERSION,
+        scope: {
+            workspaceId: packet.scope.workspaceId,
+            campaignId: packet.scope.campaignId,
+            tableId: packet.scope.tableId,
+            campaignVersion: packet.scope.campaignVersion,
+            evidenceFingerprint: packet.scope.evidenceFingerprint,
+            senderId: packet.scope.senderId,
+            date: packet.scope.date,
+            lane: packet.scope.lane,
+            actionType: packet.scope.actionType,
+        },
+        evidence: {
+            campaignType: packet.evidence.campaignType,
+            campaignObjective: packet.evidence.campaignObjective,
+            protectedFitDigest: packet.evidence.protectedFitDigest,
+            leadSourceFamily: packet.evidence.leadSourceFamily,
+            provider: packet.evidence.provider,
+            ...(packet.evidence.selectedLeadListId === undefined
+                ? {}
+                : { selectedLeadListId: packet.evidence.selectedLeadListId }),
+            ...(packet.evidence.providerSearchReference === undefined
+                ? {}
+                : {
+                    providerSearchReference: packet.evidence.providerSearchReference
+                        ? {
+                            ...packet.evidence.providerSearchReference,
+                            owner: { ...packet.evidence.providerSearchReference.owner },
+                        }
+                        : null,
+                }),
+            sourceLineage: [...packet.evidence.sourceLineage],
+            priorYieldReceipt: packet.evidence.priorYieldReceipt,
+            searchedNegativeSetFingerprints: [
+                ...packet.evidence.searchedNegativeSetFingerprints,
+            ],
+            remainingGap: packet.evidence.remainingGap,
+            supply: { ...packet.evidence.supply },
+            activeJob: packet.evidence.activeJob,
+            failedJobRef: packet.evidence.failedJobRef,
+            diagnosticRowRef: packet.evidence.diagnosticRowRef,
+            // Additive enrichment (146.5-12 §84): projected explicitly when present.
+            ...(packet.evidence.repairableExistingRows === undefined
+                ? {}
+                : { repairableExistingRows: packet.evidence.repairableExistingRows }),
+            ...(packet.evidence.retryExhaustedRows === undefined
+                ? {}
+                : { retryExhaustedRows: packet.evidence.retryExhaustedRows }),
+            ...(packet.evidence.laneSchedulable === undefined
+                ? {}
+                : { laneSchedulable: packet.evidence.laneSchedulable }),
+        },
+    };
+}