@synoi/gap 0.1.0

package/dist/cdro.d.ts

@@ -0,0 +1,63 @@
+/**
+ * cdro.ts -- GAP CDRO envelope.
+ *
+ * CDRO = Content-addressed, Deterministic, Replayable Object. Every GAP
+ * top-level record sits inside a `GapCdroEnvelope<TBody>`. The shape mirrors
+ * the GAP gateway reference implementation wire types.
+ *
+ * NOTE: this envelope shape is locally redeclared in @synoi/gap rather
+ * than imported from @synoi/sraid (which is being built in parallel). The two
+ * packages will be wired together in a follow-up. The wire format is
+ * identical, so cross-package compatibility is by-shape.
+ */
+export type GapObjectType = 'gap:capability_declaration' | 'gap:capability_grant' | 'gap:capability_invocation' | 'gap:workflow_definition' | 'gap:workflow_instance' | 'gap:stage_transition' | 'gap:channel_event' | 'gap:decision_receipt' | 'gap:revocation_event' | 'gap:federation_handshake' | 'gap:break_glass_token' | 'gap:local_override_credential' | 'gap:lca_root' | 'gap:erasure_event' | 'gap:orchestration_chain' | 'gap:consent_record' | 'gap:pip_response';
+/** Current GAP wire version. CDROs that don't match this version are
+ *  rejected by validators. */
+export declare const GAP_VERSION: "1.0";
+export type GapVersion = typeof GAP_VERSION;
+/**
+ * Fields excluded from the OID hash input (they are NOT part of the canonical
+ * body):  `oid`, `gap_version`, `signature`, `signature_key_id`, `supersedes`.
+ *
+ * Any future addition to this exclusion set constitutes a protocol version
+ * bump. Implementors must strip all five fields before passing the object to
+ * `computeGapOid` / `canonicalize`.
+ */
+export interface GapCdroEnvelope<TBody> {
+    /** Content-addressed identifier: `sha256:<hex>` over canonical body. */
+    oid: string;
+    /** Object type discriminator, e.g. `gap:capability_grant`. */
+    type: GapObjectType;
+    /** Wire version of the GAP protocol. */
+    gap_version: GapVersion;
+    /** Tenant scope. CDROs never cross tenant boundaries implicitly. */
+    tenant_id: string;
+    /** Server-clock millisecond timestamp at envelope construction. */
+    created_at_ms: number;
+    /** Actor OID that created this CDRO. */
+    created_by: string;
+    /** Type-specific payload. */
+    body: TBody;
+    /** Optional Ed25519 signature, base64-encoded. */
+    signature?: string;
+    /** Identifier of the public key that produced `signature`. */
+    signature_key_id?: string;
+    /** OID of a prior CDRO that this one replaces. */
+    supersedes?: string;
+}
+/**
+ * Payload shape passed to `computeGapOid` -- the envelope minus oid +
+ * gap_version + signature fields. Useful when builders are constructing a
+ * CDRO step-by-step.
+ *
+ * This is the canonical input shape for `computeGapOid` -- it already excludes
+ * `oid`, `gap_version`, `signature`, `signature_key_id`, and `supersedes`.
+ */
+export interface GapOidPayload<TBody> {
+    type: GapObjectType;
+    tenant_id: string;
+    created_at_ms: number;
+    created_by: string;
+    body: TBody;
+}
+//# sourceMappingURL=cdro.d.ts.map

package/dist/cdro.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdro.d.ts","sourceRoot":"","sources":["../src/cdro.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,aAAa,GAKrB,4BAA4B,GAC5B,sBAAsB,GACtB,2BAA2B,GAC3B,yBAAyB,GACzB,uBAAuB,GACvB,sBAAsB,GACtB,mBAAmB,GACnB,sBAAsB,GACtB,sBAAsB,GACtB,0BAA0B,GAM1B,uBAAuB,GACvB,+BAA+B,GAC/B,cAAc,GACd,mBAAmB,GACnB,yBAAyB,GACzB,oBAAoB,GACpB,kBAAkB,CAAA;AAEtB;8BAC8B;AAC9B,eAAO,MAAM,WAAW,EAAG,KAAc,CAAA;AACzC,MAAM,MAAM,UAAU,GAAG,OAAO,WAAW,CAAA;AAE3C;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe,CAAC,KAAK;IACpC,wEAAwE;IACxE,GAAG,EAAE,MAAM,CAAA;IACX,8DAA8D;IAC9D,IAAI,EAAE,aAAa,CAAA;IACnB,wCAAwC;IACxC,WAAW,EAAE,UAAU,CAAA;IACvB,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAA;IACjB,mEAAmE;IACnE,aAAa,EAAE,MAAM,CAAA;IACrB,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAA;IAClB,6BAA6B;IAC7B,IAAI,EAAE,KAAK,CAAA;IACX,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa,CAAC,KAAK;IAClC,IAAI,EAAE,aAAa,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,KAAK,CAAA;CACZ"}

package/dist/cdro.js

@@ -0,0 +1,16 @@
+/**
+ * cdro.ts -- GAP CDRO envelope.
+ *
+ * CDRO = Content-addressed, Deterministic, Replayable Object. Every GAP
+ * top-level record sits inside a `GapCdroEnvelope<TBody>`. The shape mirrors
+ * the GAP gateway reference implementation wire types.
+ *
+ * NOTE: this envelope shape is locally redeclared in @synoi/gap rather
+ * than imported from @synoi/sraid (which is being built in parallel). The two
+ * packages will be wired together in a follow-up. The wire format is
+ * identical, so cross-package compatibility is by-shape.
+ */
+/** Current GAP wire version. CDROs that don't match this version are
+ *  rejected by validators. */
+export const GAP_VERSION = '1.0';
+//# sourceMappingURL=cdro.js.map

package/dist/cdro.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdro.js","sourceRoot":"","sources":["../src/cdro.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA8BH;8BAC8B;AAC9B,MAAM,CAAC,MAAM,WAAW,GAAG,KAAc,CAAA"}

package/dist/channels.d.ts

@@ -0,0 +1,107 @@
+/**
+ * channels.ts -- channel taxonomy + adapter interface.
+ *
+ * Channels bridge GAP's abstract `actions`/`listen` model to concrete
+ * delivery surfaces (SMS, mobile push, home assistant, etc.).
+ *
+ * This file declares only the TYPES. Adapter implementations live in
+ * downstream packages (the gateway, vendor SDKs). The interface here is the
+ * contract those implementations satisfy.
+ */
+import type { GapCdroEnvelope } from './cdro.js';
+/** Built-in channel kinds. The `(string & {})` branch keeps the union open
+ *  for vendor-specific extensions (e.g. 'com.example.pager') while
+ *  preserving autocomplete on the canonical entries.
+ *
+ *  Connectivity categories:
+ *   Internet:     sms, voice, email, slack, mobile_push
+ *   LAN/Internet: sse, webhook
+ *   Local:        in_app, game_engine, home_assistant, desktop_overlay
+ *   Air-gapped:   local_terminal, hmi_panel, opc_ua_ack, local_signed_token
+ */
+export type ChannelKind = 'sms' | 'voice' | 'email' | 'slack' | 'mobile_push' | 'sse' | 'webhook' | 'in_app' | 'game_engine' | 'home_assistant' | 'desktop_overlay' | 'local_terminal' | 'hmi_panel' | 'opc_ua_ack' | 'local_signed_token' | (string & {});
+/** Subset of ChannelKind containing only the canonical (literal) values.
+ *  Useful for exhaustive switches in code that only handles built-ins. */
+export type CanonicalChannelKind = 'sms' | 'voice' | 'email' | 'slack' | 'mobile_push' | 'sse' | 'webhook' | 'in_app' | 'game_engine' | 'home_assistant' | 'desktop_overlay' | 'local_terminal' | 'hmi_panel' | 'opc_ua_ack' | 'local_signed_token';
+/** Ordered list of canonical channels, useful for menu UIs + tests. */
+export declare const CANONICAL_CHANNEL_KINDS: readonly CanonicalChannelKind[];
+export interface StageAction {
+    channel: ChannelKind;
+    method: string;
+    params: Record<string, unknown>;
+}
+export interface StageTransitionTarget {
+    next_stage_id?: string;
+    bind?: Record<string, string>;
+}
+export interface StageListen {
+    channel: ChannelKind;
+    intent?: string;
+    pattern?: string;
+    event_kind?: string;
+    next: StageTransitionTarget;
+    /**
+     * When set, the gateway MUST verify that the channel event's `from` field
+     * matches this value before accepting it as a valid stage signal. For SMS
+     * channels this is the operator's registered phone number (E.164 format).
+     * For webhook channels this is the expected sender identity string.
+     *
+     * Required for stages that govern physical_safety=true or safety_class C
+     * capabilities. Absent means no sender-identity check is performed.
+     */
+    required_from_binding?: string;
+}
+export interface ChannelEventBody {
+    channel: ChannelKind;
+    event_kind: string;
+    payload: Record<string, unknown>;
+    observed_at_ms: number;
+    /** Workflow context if this event originated from / is routed to a workflow. */
+    workflow_instance_oid?: string;
+    stage_id?: string;
+}
+export type ChannelEvent = GapCdroEnvelope<ChannelEventBody>;
+export interface AdapterContext {
+    tenant_id: string;
+    workflow_instance_oid: string;
+    stage_id: string;
+    scope_variables: Record<string, unknown>;
+}
+export interface ActionResult {
+    ok: boolean;
+    detail?: string;
+    /** OID of a channel event spawned by the action, if any. */
+    spawned_event_oid?: string;
+}
+export interface ListenHandle {
+    cancel(): void;
+}
+/**
+ * Interface that every channel adapter must implement. Adapter
+ * implementations are out of scope for this types package -- they live in
+ * synoi-gateway and downstream packages.
+ */
+export interface ChannelAdapter {
+    /** Channel kind this adapter handles. */
+    kind: ChannelKind;
+    /** Adapter capabilities -- which GAP listen/action shapes it supports. */
+    supports: {
+        actions: string[];
+        listens: Array<'intent' | 'pattern' | 'event_kind'>;
+    };
+    /** Execute an action. Returns when complete or errors. */
+    performAction(spec: StageAction, context: AdapterContext): Promise<ActionResult>;
+    /** Arm a listener. Returns a handle that can be cancelled. */
+    armListen(spec: StageListen, context: AdapterContext, onMatch: (event: ChannelEvent) => void): ListenHandle;
+    /** Health check. */
+    health(): Promise<{
+        ok: boolean;
+        detail?: string;
+    }>;
+}
+export interface ChannelRegistry {
+    register(adapter: ChannelAdapter): void;
+    get(kind: ChannelKind): ChannelAdapter | null;
+    list(): ChannelAdapter[];
+}
+//# sourceMappingURL=channels.d.ts.map

package/dist/channels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.d.ts","sourceRoot":"","sources":["../src/channels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAEhD;;;;;;;;;GASG;AACH,MAAM,MAAM,WAAW,GAEnB,KAAK,GACL,OAAO,GACP,OAAO,GACP,OAAO,GACP,aAAa,GAEb,KAAK,GACL,SAAS,GAET,QAAQ,GACR,aAAa,GACb,gBAAgB,GAChB,iBAAiB,GAEjB,gBAAgB,GAChB,WAAW,GACX,YAAY,GACZ,oBAAoB,GAEpB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAEjB;0EAC0E;AAC1E,MAAM,MAAM,oBAAoB,GAC5B,KAAK,GACL,OAAO,GACP,OAAO,GACP,OAAO,GACP,aAAa,GACb,KAAK,GACL,SAAS,GACT,QAAQ,GACR,aAAa,GACb,gBAAgB,GAChB,iBAAiB,GACjB,gBAAgB,GAChB,WAAW,GACX,YAAY,GACZ,oBAAoB,CAAA;AAExB,uEAAuE;AACvE,eAAO,MAAM,uBAAuB,EAAE,SAAS,oBAAoB,EAgBzD,CAAA;AAIV,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,WAAW,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAChC;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,WAAW,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,qBAAqB,CAAA;IAC3B;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;CAC/B;AAID,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,WAAW,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,cAAc,EAAE,MAAM,CAAA;IACtB,gFAAgF;IAChF,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,MAAM,YAAY,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAA;AAI5D,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACzC;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4DAA4D;IAC5D,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,IAAI,IAAI,CAAA;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,yCAAyC;IACzC,IAAI,EAAE,WAAW,CAAA;IAEjB,0EAA0E;IAC1E,QAAQ,EAAE;QACR,OAAO,EAAE,MAAM,EAAE,CAAA;QACjB,OAAO,EAAE,KAAK,CAAC,QAAQ,GAAG,SAAS,GAAG,YAAY,CAAC,CAAA;KACpD,CAAA;IAED,0DAA0D;IAC1D,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAEhF,8DAA8D;IAC9D,SAAS,CACP,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GACrC,YAAY,CAAA;IAEf,oBAAoB;IACpB,MAAM,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACpD;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAAA;IACvC,GAAG,CAAC,IAAI,EAAE,WAAW,GAAG,cAAc,GAAG,IAAI,CAAA;IAC7C,IAAI,IAAI,cAAc,EAAE,CAAA;CACzB"}

package/dist/channels.js

@@ -0,0 +1,29 @@
+/**
+ * channels.ts -- channel taxonomy + adapter interface.
+ *
+ * Channels bridge GAP's abstract `actions`/`listen` model to concrete
+ * delivery surfaces (SMS, mobile push, home assistant, etc.).
+ *
+ * This file declares only the TYPES. Adapter implementations live in
+ * downstream packages (the gateway, vendor SDKs). The interface here is the
+ * contract those implementations satisfy.
+ */
+/** Ordered list of canonical channels, useful for menu UIs + tests. */
+export const CANONICAL_CHANNEL_KINDS = [
+    'sms',
+    'voice',
+    'email',
+    'slack',
+    'mobile_push',
+    'sse',
+    'webhook',
+    'in_app',
+    'game_engine',
+    'home_assistant',
+    'desktop_overlay',
+    'local_terminal',
+    'hmi_panel',
+    'opc_ua_ack',
+    'local_signed_token',
+];
+//# sourceMappingURL=channels.js.map

package/dist/channels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.js","sourceRoot":"","sources":["../src/channels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAwDH,uEAAuE;AACvE,MAAM,CAAC,MAAM,uBAAuB,GAAoC;IACtE,KAAK;IACL,OAAO;IACP,OAAO;IACP,OAAO;IACP,aAAa;IACb,KAAK;IACL,SAAS;IACT,QAAQ;IACR,aAAa;IACb,gBAAgB;IAChB,iBAAiB;IACjB,gBAAgB;IAChB,WAAW;IACX,YAAY;IACZ,oBAAoB;CACZ,CAAA"}

package/dist/constants.d.ts

@@ -0,0 +1,32 @@
+/**
+ * constants.ts -- well-known capability OIDs + channel kinds.
+ *
+ * Reserved OID strings for the GAP platform. These identifiers are stable
+ * across all conforming gateway implementations. Third-party implementations
+ * MUST NOT redefine them.
+ *
+ *   - DISCOVERY_QUERY_CAPABILITY   reserved for /by-grant discovery queries
+ *   - SKILL_CREATE_CAPABILITY      reserved for skill manifest upload
+ *   - VOICE_JOIN_CAPABILITY        reserved for voice bridge authorization
+ */
+import type { CanonicalChannelKind } from './channels.js';
+/** Capability that authorizes /by-grant discovery queries. */
+export declare const DISCOVERY_QUERY_CAPABILITY: "gap.discovery.query";
+/** Capability that authorizes skill creation (skill manifest upload). */
+export declare const SKILL_CREATE_CAPABILITY: "skill.create";
+/** Capability that authorizes joining a voice bridge call. */
+export declare const VOICE_JOIN_CAPABILITY: "gap.voice.join";
+/** All well-known capability names, useful for tests + audit dashboards. */
+export declare const WELL_KNOWN_CAPABILITIES: readonly ["gap.discovery.query", "skill.create", "gap.voice.join"];
+export type WellKnownCapability = typeof WELL_KNOWN_CAPABILITIES[number];
+export declare const CHANNEL_VOICE: CanonicalChannelKind;
+export declare const CHANNEL_SMS: CanonicalChannelKind;
+export declare const CHANNEL_SLACK: CanonicalChannelKind;
+export declare const CHANNEL_MOBILE_PUSH: CanonicalChannelKind;
+export declare const CHANNEL_HOME_ASSISTANT: CanonicalChannelKind;
+export declare const CHANNEL_DESKTOP_OVERLAY: CanonicalChannelKind;
+export declare const CHANNEL_EMAIL: CanonicalChannelKind;
+export declare const CHANNEL_IN_APP: CanonicalChannelKind;
+export declare const CHANNEL_GAME_ENGINE: CanonicalChannelKind;
+export declare const CHANNEL_WEBHOOK: CanonicalChannelKind;
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAIzD,8DAA8D;AAC9D,eAAO,MAAM,0BAA0B,EAAG,qBAA8B,CAAA;AAExE,yEAAyE;AACzE,eAAO,MAAM,uBAAuB,EAAG,cAAuB,CAAA;AAE9D,8DAA8D;AAC9D,eAAO,MAAM,qBAAqB,EAAG,gBAAyB,CAAA;AAE9D,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB,oEAI1B,CAAA;AAEV,MAAM,MAAM,mBAAmB,GAAG,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAA;AAIxE,eAAO,MAAM,aAAa,EAAE,oBAA8B,CAAA;AAC1D,eAAO,MAAM,WAAW,EAAE,oBAA4B,CAAA;AACtD,eAAO,MAAM,aAAa,EAAE,oBAA8B,CAAA;AAC1D,eAAO,MAAM,mBAAmB,EAAE,oBAAoC,CAAA;AACtE,eAAO,MAAM,sBAAsB,EAAE,oBAAuC,CAAA;AAC5E,eAAO,MAAM,uBAAuB,EAAE,oBAAwC,CAAA;AAC9E,eAAO,MAAM,aAAa,EAAE,oBAA8B,CAAA;AAC1D,eAAO,MAAM,cAAc,EAAE,oBAA+B,CAAA;AAC5D,eAAO,MAAM,mBAAmB,EAAE,oBAAoC,CAAA;AACtE,eAAO,MAAM,eAAe,EAAE,oBAAgC,CAAA"}

package/dist/constants.js

@@ -0,0 +1,36 @@
+/**
+ * constants.ts -- well-known capability OIDs + channel kinds.
+ *
+ * Reserved OID strings for the GAP platform. These identifiers are stable
+ * across all conforming gateway implementations. Third-party implementations
+ * MUST NOT redefine them.
+ *
+ *   - DISCOVERY_QUERY_CAPABILITY   reserved for /by-grant discovery queries
+ *   - SKILL_CREATE_CAPABILITY      reserved for skill manifest upload
+ *   - VOICE_JOIN_CAPABILITY        reserved for voice bridge authorization
+ */
+// -- Well-known capability names (dotted taxonomy) ---------------------------
+/** Capability that authorizes /by-grant discovery queries. */
+export const DISCOVERY_QUERY_CAPABILITY = 'gap.discovery.query';
+/** Capability that authorizes skill creation (skill manifest upload). */
+export const SKILL_CREATE_CAPABILITY = 'skill.create';
+/** Capability that authorizes joining a voice bridge call. */
+export const VOICE_JOIN_CAPABILITY = 'gap.voice.join';
+/** All well-known capability names, useful for tests + audit dashboards. */
+export const WELL_KNOWN_CAPABILITIES = [
+    DISCOVERY_QUERY_CAPABILITY,
+    SKILL_CREATE_CAPABILITY,
+    VOICE_JOIN_CAPABILITY,
+];
+// -- Channel kind constants (mirror canonical list) --------------------------
+export const CHANNEL_VOICE = 'voice';
+export const CHANNEL_SMS = 'sms';
+export const CHANNEL_SLACK = 'slack';
+export const CHANNEL_MOBILE_PUSH = 'mobile_push';
+export const CHANNEL_HOME_ASSISTANT = 'home_assistant';
+export const CHANNEL_DESKTOP_OVERLAY = 'desktop_overlay';
+export const CHANNEL_EMAIL = 'email';
+export const CHANNEL_IN_APP = 'in_app';
+export const CHANNEL_GAME_ENGINE = 'game_engine';
+export const CHANNEL_WEBHOOK = 'webhook';
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,+EAA+E;AAE/E,8DAA8D;AAC9D,MAAM,CAAC,MAAM,0BAA0B,GAAG,qBAA8B,CAAA;AAExE,yEAAyE;AACzE,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAuB,CAAA;AAE9D,8DAA8D;AAC9D,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAyB,CAAA;AAE9D,4EAA4E;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,0BAA0B;IAC1B,uBAAuB;IACvB,qBAAqB;CACb,CAAA;AAIV,+EAA+E;AAE/E,MAAM,CAAC,MAAM,aAAa,GAAyB,OAAO,CAAA;AAC1D,MAAM,CAAC,MAAM,WAAW,GAAyB,KAAK,CAAA;AACtD,MAAM,CAAC,MAAM,aAAa,GAAyB,OAAO,CAAA;AAC1D,MAAM,CAAC,MAAM,mBAAmB,GAAyB,aAAa,CAAA;AACtE,MAAM,CAAC,MAAM,sBAAsB,GAAyB,gBAAgB,CAAA;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAyB,iBAAiB,CAAA;AAC9E,MAAM,CAAC,MAAM,aAAa,GAAyB,OAAO,CAAA;AAC1D,MAAM,CAAC,MAAM,cAAc,GAAyB,QAAQ,CAAA;AAC5D,MAAM,CAAC,MAAM,mBAAmB,GAAyB,aAAa,CAAA;AACtE,MAAM,CAAC,MAAM,eAAe,GAAyB,SAAS,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @synoi/gap -- public surface.
+ *
+ * Apache-2.0 TypeScript types + runtime validators for SynOI's
+ * GAP (Governed Action Protocol).
+ *
+ * The protocol itself is open under CC0; this package ships the wire-format
+ * types so any GAP implementation (third-party gateway, audit tool, vendor
+ * SDK) can speak the same wire format from a single source of truth.
+ */
+export { GAP_VERSION, } from './cdro.js';
+export type { GapCdroEnvelope, GapObjectType, GapOidPayload, GapVersion, } from './cdro.js';
+export { capabilityMatches, } from './capabilities.js';
+export type { GapActorType, Capability, CapabilityDeclaration, CapabilityDeclarationBody, CapabilityGrant, CapabilityGrantBody, CapabilityInvocation, CapabilityInvocationBody, CapabilityPredicate, GrantedCapabilityScope, DelegationStep, OrchestrationChainBody, McpToolCallContext, TokenBudgetArgs, ConsentRecordBody, CredentialKind, IdentityBinding, ExternalPipArgs, PipResponseBody, } from './capabilities.js';
+export { CANONICAL_CHANNEL_KINDS, } from './channels.js';
+export type { ActionResult, AdapterContext, CanonicalChannelKind, ChannelAdapter, ChannelEvent, ChannelEventBody, ChannelKind, ChannelRegistry, ListenHandle, StageAction, StageListen, StageTransitionTarget, } from './channels.js';
+export type { OptionalEffect, StageSafety, StageTransition, StageTransitionBody, StageTransitionReason, WorkflowDefinition, WorkflowDefinitionBody, WorkflowInstance, WorkflowInstanceBody, WorkflowStage, WorkflowStageDefinition, WorkflowTrigger, WorkflowTriggerKind, } from './workflows.js';
+export { isGapFailure, } from './receipts.js';
+export type { GapDecisionReceipt, GapDecisionReceiptBody, GapFailure, GapFailureReason, DecisionStatus, DecisionSubjectKind, TokenConsumption, } from './receipts.js';
+export { revokeGapObject, } from './revocations.js';
+export type { RevocationEvent, RevocationEventBody, RevocationTargetKind, } from './revocations.js';
+export { CHANNEL_DESKTOP_OVERLAY, CHANNEL_EMAIL, CHANNEL_GAME_ENGINE, CHANNEL_HOME_ASSISTANT, CHANNEL_IN_APP, CHANNEL_MOBILE_PUSH, CHANNEL_SLACK, CHANNEL_SMS, CHANNEL_VOICE, CHANNEL_WEBHOOK, DISCOVERY_QUERY_CAPABILITY, SKILL_CREATE_CAPABILITY, VOICE_JOIN_CAPABILITY, WELL_KNOWN_CAPABILITIES, } from './constants.js';
+export type { WellKnownCapability, } from './constants.js';
+export { computeGapOid, } from './oid.js';
+export { canonicalize, } from './canonicalize.js';
+export type { ValidationResult, } from './validate.js';
+export { validateGapDecisionReceipt, validateGapDecisionReceiptBody, validateCapabilityDeclaration, validateCapabilityDeclarationBody, validateCapabilityGrant, validateCapabilityGrantBody, validateCapabilityInvocation, validateCapabilityInvocationBody, validateChannelEvent, validateChannelEventBody, validateRevocationEvent, validateRevocationEventBody, validateStageTransition, validateStageTransitionBody, validateWorkflowDefinition, validateWorkflowDefinitionBody, validateWorkflowInstance, validateWorkflowInstanceBody, validateOrchestrationChainBody, validateOrchestrationChain, validateTokenConsumption, validateConsentRecordBody, validateConsentRecord, validatePipResponseBody, validatePipResponse, } from './validate.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EACL,WAAW,GACZ,MAAM,WAAW,CAAA;AAClB,YAAY,EACV,eAAe,EACf,aAAa,EACb,aAAa,EACb,UAAU,GACX,MAAM,WAAW,CAAA;AAGlB,OAAO,EACL,iBAAiB,GAClB,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,YAAY,EACZ,UAAU,EACV,qBAAqB,EACrB,yBAAyB,EACzB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EAEtB,cAAc,EACd,sBAAsB,EAEtB,kBAAkB,EAElB,eAAe,EAEf,iBAAiB,EAEjB,cAAc,EACd,eAAe,EAGf,eAAe,EACf,eAAe,GAChB,MAAM,mBAAmB,CAAA;AAG1B,OAAO,EACL,uBAAuB,GACxB,MAAM,eAAe,CAAA;AACtB,YAAY,EACV,YAAY,EACZ,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,YAAY,EACZ,WAAW,EACX,WAAW,EACX,qBAAqB,GACtB,MAAM,eAAe,CAAA;AAGtB,YAAY,EACV,cAAc,EACd,WAAW,EACX,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,uBAAuB,EACvB,eAAe,EACf,mBAAmB,GACpB,MAAM,gBAAgB,CAAA;AAGvB,OAAO,EACL,YAAY,GACb,MAAM,eAAe,CAAA;AACtB,YAAY,EACV,kBAAkB,EAClB,sBAAsB,EACtB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EAEnB,gBAAgB,GACjB,MAAM,eAAe,CAAA;AAGtB,OAAO,EACL,eAAe,GAChB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EACL,uBAAuB,EACvB,aAAa,EACb,mBAAmB,EACnB,sBAAsB,EACtB,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,WAAW,EACX,aAAa,EACb,eAAe,EACf,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,gBAAgB,CAAA;AACvB,YAAY,EACV,mBAAmB,GACpB,MAAM,gBAAgB,CAAA;AAGvB,OAAO,EACL,aAAa,GACd,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,YAAY,GACb,MAAM,mBAAmB,CAAA;AAG1B,YAAY,EACV,gBAAgB,GACjB,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,6BAA6B,EAC7B,iCAAiC,EACjC,uBAAuB,EACvB,2BAA2B,EAC3B,4BAA4B,EAC5B,gCAAgC,EAChC,oBAAoB,EACpB,wBAAwB,EACxB,uBAAuB,EACvB,2BAA2B,EAC3B,uBAAuB,EACvB,2BAA2B,EAC3B,0BAA0B,EAC1B,8BAA8B,EAC9B,wBAAwB,EACxB,4BAA4B,EAE5B,8BAA8B,EAC9B,0BAA0B,EAE1B,wBAAwB,EAExB,yBAAyB,EACzB,qBAAqB,EAErB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,eAAe,CAAA"}

package/dist/index.js

@@ -0,0 +1,35 @@
+/**
+ * @synoi/gap -- public surface.
+ *
+ * Apache-2.0 TypeScript types + runtime validators for SynOI's
+ * GAP (Governed Action Protocol).
+ *
+ * The protocol itself is open under CC0; this package ships the wire-format
+ * types so any GAP implementation (third-party gateway, audit tool, vendor
+ * SDK) can speak the same wire format from a single source of truth.
+ */
+// -- CDRO envelope -----------------------------------------------------------
+export { GAP_VERSION, } from './cdro.js';
+// -- Capabilities (declarations, grants, invocations) ------------------------
+export { capabilityMatches, } from './capabilities.js';
+// -- Channels ----------------------------------------------------------------
+export { CANONICAL_CHANNEL_KINDS, } from './channels.js';
+// -- Receipts + failures -----------------------------------------------------
+export { isGapFailure, } from './receipts.js';
+// -- Revocations -------------------------------------------------------------
+export { revokeGapObject, } from './revocations.js';
+// -- Constants ---------------------------------------------------------------
+export { CHANNEL_DESKTOP_OVERLAY, CHANNEL_EMAIL, CHANNEL_GAME_ENGINE, CHANNEL_HOME_ASSISTANT, CHANNEL_IN_APP, CHANNEL_MOBILE_PUSH, CHANNEL_SLACK, CHANNEL_SMS, CHANNEL_VOICE, CHANNEL_WEBHOOK, DISCOVERY_QUERY_CAPABILITY, SKILL_CREATE_CAPABILITY, VOICE_JOIN_CAPABILITY, WELL_KNOWN_CAPABILITIES, } from './constants.js';
+// -- OID + canonicalize ------------------------------------------------------
+export { computeGapOid, } from './oid.js';
+export { canonicalize, } from './canonicalize.js';
+export { validateGapDecisionReceipt, validateGapDecisionReceiptBody, validateCapabilityDeclaration, validateCapabilityDeclarationBody, validateCapabilityGrant, validateCapabilityGrantBody, validateCapabilityInvocation, validateCapabilityInvocationBody, validateChannelEvent, validateChannelEventBody, validateRevocationEvent, validateRevocationEventBody, validateStageTransition, validateStageTransitionBody, validateWorkflowDefinition, validateWorkflowDefinitionBody, validateWorkflowInstance, validateWorkflowInstanceBody, 
+// Item 1: Agent Delegation Chain
+validateOrchestrationChainBody, validateOrchestrationChain, 
+// Item 3: Token Budget Governance
+validateTokenConsumption, 
+// Item 4: Consent Version Chain
+validateConsentRecordBody, validateConsentRecord, 
+// Item 7: Signed PIP Response
+validatePipResponseBody, validatePipResponse, } from './validate.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,+EAA+E;AAC/E,OAAO,EACL,WAAW,GACZ,MAAM,WAAW,CAAA;AAQlB,+EAA+E;AAC/E,OAAO,EACL,iBAAiB,GAClB,MAAM,mBAAmB,CAAA;AA8B1B,+EAA+E;AAC/E,OAAO,EACL,uBAAuB,GACxB,MAAM,eAAe,CAAA;AAiCtB,+EAA+E;AAC/E,OAAO,EACL,YAAY,GACb,MAAM,eAAe,CAAA;AAYtB,+EAA+E;AAC/E,OAAO,EACL,eAAe,GAChB,MAAM,kBAAkB,CAAA;AAOzB,+EAA+E;AAC/E,OAAO,EACL,uBAAuB,EACvB,aAAa,EACb,mBAAmB,EACnB,sBAAsB,EACtB,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,WAAW,EACX,aAAa,EACb,eAAe,EACf,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,gBAAgB,CAAA;AAKvB,+EAA+E;AAC/E,OAAO,EACL,aAAa,GACd,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,YAAY,GACb,MAAM,mBAAmB,CAAA;AAM1B,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,EAC9B,6BAA6B,EAC7B,iCAAiC,EACjC,uBAAuB,EACvB,2BAA2B,EAC3B,4BAA4B,EAC5B,gCAAgC,EAChC,oBAAoB,EACpB,wBAAwB,EACxB,uBAAuB,EACvB,2BAA2B,EAC3B,uBAAuB,EACvB,2BAA2B,EAC3B,0BAA0B,EAC1B,8BAA8B,EAC9B,wBAAwB,EACxB,4BAA4B;AAC5B,iCAAiC;AACjC,8BAA8B,EAC9B,0BAA0B;AAC1B,kCAAkC;AAClC,wBAAwB;AACxB,gCAAgC;AAChC,yBAAyB,EACzB,qBAAqB;AACrB,8BAA8B;AAC9B,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,eAAe,CAAA"}

package/dist/oid.d.ts

@@ -0,0 +1,28 @@
+/**
+ * oid.ts -- OID computation for GAP CDROs.
+ *
+ * Implements RFC 8785 JCS canonical JSON. See IMPLEMENTING.md §2.2 for the
+ * normative rules.
+ *
+ *     sha256(canonicalize(envelope_minus_excluded_fields))
+ *
+ * Excluded fields (stripped before hashing): oid, gap_version, signature,
+ * signature_key_id, supersedes. Signatures are added after OID computation.
+ *
+ * The shape passed in is the OID payload: `{ type, tenant_id, created_at_ms,
+ * created_by, body }`. The full envelope (with oid + gap_version) is built
+ * around it.
+ */
+/**
+ * Compute the OID of a GAP CDRO payload.
+ *
+ * Accepts either a pre-stripped payload or a full envelope (with oid,
+ * gap_version, signature, signature_key_id, supersedes present). The 5
+ * excluded fields are stripped before canonicalization so both forms produce
+ * the same OID.
+ *
+ * @param body - the OID payload or full envelope (see CDRO §2.1 in GAP_SPEC).
+ * @returns the canonical OID string `"sha256:<hex>"`.
+ */
+export declare function computeGapOid(body: unknown): string;
+//# sourceMappingURL=oid.d.ts.map

package/dist/oid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oid.d.ts","sourceRoot":"","sources":["../src/oid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA8BH;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAenD"}

package/dist/oid.js

@@ -0,0 +1,68 @@
+/**
+ * oid.ts -- OID computation for GAP CDROs.
+ *
+ * Implements RFC 8785 JCS canonical JSON. See IMPLEMENTING.md §2.2 for the
+ * normative rules.
+ *
+ *     sha256(canonicalize(envelope_minus_excluded_fields))
+ *
+ * Excluded fields (stripped before hashing): oid, gap_version, signature,
+ * signature_key_id, supersedes. Signatures are added after OID computation.
+ *
+ * The shape passed in is the OID payload: `{ type, tenant_id, created_at_ms,
+ * created_by, body }`. The full envelope (with oid + gap_version) is built
+ * around it.
+ */
+import { sha256 } from '@noble/hashes/sha256';
+import { canonicalize } from './canonicalize.js';
+/** Convert a Uint8Array to a lowercase hex string. */
+function bytesToHex(bytes) {
+    const hex = [];
+    for (let i = 0; i < bytes.length; i++) {
+        const b = bytes[i];
+        hex.push((b >>> 4).toString(16));
+        hex.push((b & 0x0f).toString(16));
+    }
+    return hex.join('');
+}
+/**
+ * Fields excluded from the OID hash. These are present in the full envelope
+ * but MUST NOT contribute to the content hash. Strip them before hashing so
+ * that TypeScript and Python produce byte-identical OIDs regardless of whether
+ * the caller passes a pre-stripped payload or a full envelope.
+ */
+const EXCLUDED_FIELDS = new Set([
+    'oid',
+    'gap_version',
+    'signature',
+    'signature_key_id',
+    'supersedes',
+]);
+/**
+ * Compute the OID of a GAP CDRO payload.
+ *
+ * Accepts either a pre-stripped payload or a full envelope (with oid,
+ * gap_version, signature, signature_key_id, supersedes present). The 5
+ * excluded fields are stripped before canonicalization so both forms produce
+ * the same OID.
+ *
+ * @param body - the OID payload or full envelope (see CDRO §2.1 in GAP_SPEC).
+ * @returns the canonical OID string `"sha256:<hex>"`.
+ */
+export function computeGapOid(body) {
+    let stripped = body;
+    if (body !== null && typeof body === 'object' && !Array.isArray(body)) {
+        const obj = body;
+        const result = {};
+        for (const key of Object.keys(obj)) {
+            if (!EXCLUDED_FIELDS.has(key)) {
+                result[key] = obj[key];
+            }
+        }
+        stripped = result;
+    }
+    const canonical = canonicalize(stripped);
+    const digest = sha256(new TextEncoder().encode(canonical));
+    return 'sha256:' + bytesToHex(digest);
+}
+//# sourceMappingURL=oid.js.map

package/dist/oid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oid.js","sourceRoot":"","sources":["../src/oid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,sDAAsD;AACtD,SAAS,UAAU,CAAC,KAAiB;IACnC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAW,CAAA;QAC5B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;QAChC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IACnC,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,KAAK;IACL,aAAa;IACb,WAAW;IACX,kBAAkB;IAClB,YAAY;CACb,CAAC,CAAA;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,IAAa;IACzC,IAAI,QAAQ,GAAY,IAAI,CAAA;IAC5B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,MAAM,GAAG,GAAG,IAA+B,CAAA;QAC3C,MAAM,MAAM,GAA4B,EAAE,CAAA;QAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAA;YACxB,CAAC;QACH,CAAC;QACD,QAAQ,GAAG,MAAM,CAAA;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;IAC1D,OAAO,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;AACvC,CAAC"}

package/dist/receipts.d.ts

@@ -0,0 +1,128 @@
+/**
+ * receipts.ts -- GAP Decision Receipts.
+ *
+ * Every gate decision (capability invocation, workflow transition, grant
+ * issuance/revocation, federation handshake (reserved for GAP 1.1), provisional block) produces
+ * an immutable Decision Receipt. These are the audit trail of the agent
+ * platform -- what was allowed, what was denied, when, and by whom.
+ *
+ * Mirrors GAP_SPEC §8.
+ */
+import type { GapCdroEnvelope } from './cdro.js';
+import type { GapActorType } from './capabilities.js';
+export type DecisionSubjectKind = 'capability_invocation' | 'stage_transition' | 'grant_issued' | 'grant_revoked' | 'workflow_started' | 'workflow_terminated' | 'revocation_initiated' | 'revocation_effective' | 'federation_handshake' | 'provisional_block';
+export type DecisionStatus = 'ok' | 'denied' | 'failed' | 'deferred' | 'timed_out' | 'pending' | 'rate_limited';
+export interface GapDecisionReceiptBody {
+    subject_kind: DecisionSubjectKind;
+    subject_oid: string;
+    initiator: {
+        actor_oid: string;
+        actor_type: GapActorType;
+    };
+    status: DecisionStatus;
+    detail?: string;
+    capability_grant_oids?: string[];
+    workflow_instance_oid?: string;
+    workflow_stage_id?: string;
+    inference_receipt_oid?: string;
+    channel_event_oids?: string[];
+    initiated_at_ms: number;
+    resolved_at_ms: number;
+    metrics?: {
+        latency_ms?: number;
+        channel_count?: number;
+        listen_match_count?: number;
+    };
+    compliance_tags?: string[];
+    /**
+     * True when this receipt was served from the idempotency deduplication cache
+     * rather than freshly evaluated. The cached args and grant state at the time
+     * of original evaluation apply; this is NOT a fresh gate decision.
+     */
+    is_idempotency_replay?: boolean;
+    /**
+     * The client-supplied `invoked_at_ms` value from the invocation body,
+     * preserved here for debugging only. MUST NOT be used as `initiated_at_ms`.
+     * The gateway always server-stamps `initiated_at_ms`.
+     */
+    client_claimed_at_ms?: number;
+    /**
+     * For receipts covering physical_safety=true capabilities: constrained
+     * devices performing offline Ed25519 signature verification MUST NOT accept
+     * this receipt after this TTL has elapsed (milliseconds since epoch).
+     * Absent means no offline TTL is enforced by the protocol (gateway-level
+     * policy may still apply).
+     */
+    max_offline_ttl_ms?: number;
+    /**
+     * For 21 CFR Part 11 contexts: display name, role, and credential identifier
+     * of the authorizing human. The `granted_by` actor OID SHOULD resolve to
+     * this identity. Gateway-populated when the deployment asserts 21 CFR Part 11
+     * compliance and the receipt covers a medical device / clinical capability.
+     */
+    signer_identity?: {
+        display_name: string;
+        role?: string;
+        credential_id?: string;
+    };
+    /**
+     * C8: Sub-millisecond sequence numbers (GAP spec section Phase 4).
+     *
+     * Monotonically increasing integer within the tenant, incremented per receipt,
+     * gapless. Gaps in the sequence indicate dropped receipts. Provides
+     * determinable ordering within a millisecond for high-frequency deployments
+     * (MiFID II RTS 25). A gateway MUST guarantee strict monotonicity within a
+     * tenant.
+     */
+    sequence_number?: number;
+    /**
+     * C8: Optional nanoseconds since Unix epoch for sub-millisecond precision.
+     * RECOMMENDED for financial.* capabilities. Complements decided_at_ms
+     * (the spec's alias for resolved_at_ms) when nanosecond ordering matters.
+     */
+    decided_at_ns?: number;
+    /**
+     * Item 3 [DESIGN]: Settled token consumption for this invocation. Populated
+     * by the gateway post-invoke when the 'token_budget' precondition is active.
+     * input_tokens and output_tokens MUST be non-negative integers.
+     */
+    token_consumption?: TokenConsumption;
+}
+/**
+ * [DESIGN] Actual token usage settled onto the receipt by the gateway after
+ * execution. Used by the 'token_budget' precondition (post_invoke evaluation).
+ * Any cost_usd figures are [MODELED] until a conformance vector exists.
+ */
+export interface TokenConsumption {
+    /** Input (prompt) tokens consumed. Must be a non-negative integer. */
+    input_tokens: number;
+    /** Output (completion) tokens consumed. Must be a non-negative integer. */
+    output_tokens: number;
+    /** Model identifier that produced the tokens. */
+    model: string;
+    /** Estimated cost in USD. [MODELED] -- not authoritative until conformance vector exists. */
+    cost_usd?: number;
+    /** Unix epoch ms when consumption was settled. */
+    settled_at_ms: number;
+}
+export type GapDecisionReceipt = GapCdroEnvelope<GapDecisionReceiptBody>;
+/**
+ * In-process failure classification returned by gate helpers and SDK utilities.
+ * This is an internal enum and does NOT appear on the wire.
+ *
+ * The wire `detail` field in `GapDecisionReceipt.body.detail` uses the
+ * namespaced error codes from ERROR_CODES.md, for example:
+ *   capability_denied:no_grant
+ *   capability_denied:grant_expired
+ *   capability_denied:grant_revoked
+ *   capability_denied:rate_limited
+ * Do NOT expose GapFailureReason values in serialized receipts or HTTP responses.
+ */
+export type GapFailureReason = 'capability_not_found' | 'capability_denied' | 'capability_revoked' | 'precondition_failed' | 'rate_limited' | 'grant_expired' | 'workflow_not_found' | 'workflow_revoked' | 'missing_required_channels' | 'execution_failed';
+export interface GapFailure {
+    reason: GapFailureReason;
+    detail?: string;
+    receipt_oid: string;
+}
+export declare function isGapFailure<T>(r: T | GapFailure): r is GapFailure;
+//# sourceMappingURL=receipts.d.ts.map

package/dist/receipts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts.d.ts","sourceRoot":"","sources":["../src/receipts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAChD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAErD,MAAM,MAAM,mBAAmB,GAC3B,uBAAuB,GACvB,kBAAkB,GAClB,cAAc,GACd,eAAe,GACf,kBAAkB,GAClB,qBAAqB,GACrB,sBAAsB,GACtB,sBAAsB,GACtB,sBAAsB,GACtB,mBAAmB,CAAA;AAEvB,MAAM,MAAM,cAAc,GACtB,IAAI,GACJ,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,WAAW,GACX,SAAS,GACT,cAAc,CAAA;AAElB,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,mBAAmB,CAAA;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE;QACT,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,YAAY,CAAA;KACzB,CAAA;IACD,MAAM,EAAE,cAAc,CAAA;IACtB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAA;IAChC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE;QACR,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAC5B,CAAA;IACD,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;;OAKG;IACH,eAAe,CAAC,EAAE;QAChB,YAAY,EAAE,MAAM,CAAA;QACpB,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,aAAa,CAAC,EAAE,MAAM,CAAA;KACvB,CAAA;IACD;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,gBAAgB,CAAA;CACrC;AAID;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,YAAY,EAAE,MAAM,CAAA;IACpB,2EAA2E;IAC3E,aAAa,EAAE,MAAM,CAAA;IACrB,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAA;IACb,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,kDAAkD;IAClD,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,MAAM,kBAAkB,GAAG,eAAe,CAAC,sBAAsB,CAAC,CAAA;AAIxE;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,gBAAgB,GACxB,sBAAsB,GACtB,mBAAmB,GACnB,oBAAoB,GACpB,qBAAqB,GACrB,cAAc,GACd,eAAe,GACf,oBAAoB,GACpB,kBAAkB,GAClB,2BAA2B,GAC3B,kBAAkB,CAAA;AAEtB,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,gBAAgB,CAAA;IACxB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,UAAU,GAAG,CAAC,IAAI,UAAU,CAElE"}