@voyant-travel/action-ledger 0.104.10

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { type RunActionLedgerCanaryInput, type RunActionLedgerCanaryResult, runActionLedgerCanary, } from "./canary.js";
+export { type ActionLedgerApprovalRequirementReason, type ActionLedgerApprovalRequirementResult, type ActionLedgerCapabilityAccessReason, type ActionLedgerCapabilityAccessResult, type ActionLedgerCapabilityApprovalPolicy, type ActionLedgerCapabilityDefinition, type ActionLedgerCapabilityGrant, type ActionLedgerCapabilityLedgerPolicy, type ActionLedgerCapabilityRegistry, ActionLedgerCapabilityRegistryError, type ActionLedgerCapabilityRisk, actionLedgerCapabilityApprovalPolicyValues, actionLedgerCapabilityKey, actionLedgerCapabilityLedgerPolicyValues, createActionLedgerCapabilityRegistry, type EvaluateActionLedgerApprovalRequirementInput, type EvaluateActionLedgerCapabilityAccessInput, evaluateActionLedgerApprovalRequirement, evaluateActionLedgerCapabilityAccess, evaluateActionLedgerCapabilityRisk, getActionLedgerCapability, } from "./capability.js";
+export { type BuildActionApprovalCommandFingerprintInput, buildActionApprovalCommandFingerprint, buildIdempotencyFingerprint, canonicalize, canonicalJson, sha256, } from "./fingerprint.js";
+export { ACTION_LEDGER_APPROVAL_ID_HEADER, type ActionLedgerActorFields, type ActionLedgerApprovedExecutionFields, type ActionLedgerRequestContextValues, type ActionLedgerRequestMappingOptions, appendActionLedgerMutation, appendActionLedgerSensitiveRead, type BuildActionLedgerApprovalDecisionInput, type BuildActionLedgerApprovalRequestInput, type BuildActionLedgerApprovedExecutionFieldsInput, type BuildActionLedgerMutationInput, type BuildActionLedgerSensitiveReadInput, type BuildActionLedgerSensitiveReadInputForValue, buildActionLedgerApprovalDecisionInput, buildActionLedgerApprovalRequestInput, buildActionLedgerApprovedExecutionFields, buildActionLedgerMutationEntryInput, buildActionLedgerSensitiveReadEntryInput, decideActionLedgerApproval, ledgerSensitiveRead, mapActionLedgerRequestContext, requestActionLedgerApproval, } from "./request-context.js";
+export { type ActionApprovalDecisionResponse, type ActionApprovalDetailResponse, type ActionApprovalGetResponse, type ActionApprovalListResponse, type ActionApprovalRequestResponse, type ActionApprovalResponse, type ActionDelegationGetResponse, type ActionDelegationListResponse, type ActionDelegationResponse, type ActionLedgerAdminRoutes, type ActionLedgerEntryDetailResponse, type ActionLedgerEntryResponse, type ActionLedgerGetResponse, type ActionLedgerListResponse, type ActionLedgerPayloadResponse, type ActionLedgerRelayOutboxListResponse, type ActionLedgerRelayOutboxResponse, type ActionLedgerReversalResponse, actionLedgerAdminRoutes, actionLedgerHonoModule, actionLedgerModule, } from "./routes.js";
+export { type ActionApproval, type ActionDelegation, type ActionLedgerEntry, type ActionLedgerPayload, type ActionLedgerRelayOutbox, type ActionMutationDetail, type ActionSensitiveReadDetail, actionApprovals, actionDelegations, actionLedgerActionKindEnum, actionLedgerApprovalStatusEnum, actionLedgerEntries, actionLedgerPayloads, actionLedgerPrincipalTypeEnum, actionLedgerRedactionStatusEnum, actionLedgerRelayOutbox, actionLedgerRelayStatusEnum, actionLedgerReversalKindEnum, actionLedgerReversalOutcomeEnum, actionLedgerReversalStateEnum, actionLedgerRiskEnum, actionLedgerStatusEnum, actionMutationDetails, actionSensitiveReadDetails, type NewActionApproval, type NewActionDelegation, type NewActionLedgerEntry, type NewActionLedgerPayload, type NewActionLedgerRelayOutbox, type NewActionMutationDetail, type NewActionSensitiveReadDetail, } from "./schema.js";
+export { ActionApprovalDecisionConflictError, ActionApprovalDecisionStatusError, type ActionApprovalListCursor, type ActionDelegationListCursor, ActionLedgerIdempotencyConflictError, type ActionLedgerListCursor, type ActionLedgerRelayOutboxListCursor, ActionLedgerReversalTargetError, type AppendActionLedgerEntryInput, type AppendActionLedgerEntryResult, actionLedgerService, type ClaimActionLedgerRelayOutboxInput, type ClaimActionLedgerRelayOutboxResult, type DecideActionApprovalInput, type DecideActionApprovalResult, type GetActionApprovalResult, type GetActionDelegationResult, type GetActionLedgerEntryResult, type ListActionApprovalsInput, type ListActionApprovalsResult, type ListActionDelegationsInput, type ListActionDelegationsResult, type ListActionLedgerEntriesInput, type ListActionLedgerEntriesResult, type ListActionLedgerRelayOutboxInput, type ListActionLedgerRelayOutboxResult, type MarkActionLedgerRelayOutboxFailedInput, type MarkActionLedgerRelayOutboxSucceededInput, type RecordActionLedgerReversalInput, type RecordActionLedgerReversalResult, type RequestActionApprovalInput, type RequestActionApprovalResult, type ValidateApprovedActionFailureReason, type ValidateApprovedActionInput, type ValidateApprovedActionResult, } from "./service.js";
+export { type ActionLedgerSerializedEntry, type ActionLedgerTargetTimelineEntry, type ActionLedgerTargetTimelinePage, type ActionLedgerTargetTimelineQuery, type ActionLedgerTimelineCursor, actionLedgerTargetTimelineQuerySchema, buildActionLedgerTargetTimelinePage, serializeActionLedgerDate, serializeActionLedgerEntry, sortActionLedgerTimelineEntries, toActionLedgerTimelineCursor, } from "./timeline.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,qBAAqB,GACtB,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,KAAK,qCAAqC,EAC1C,KAAK,qCAAqC,EAC1C,KAAK,kCAAkC,EACvC,KAAK,kCAAkC,EACvC,KAAK,oCAAoC,EACzC,KAAK,gCAAgC,EACrC,KAAK,2BAA2B,EAChC,KAAK,kCAAkC,EACvC,KAAK,8BAA8B,EACnC,mCAAmC,EACnC,KAAK,0BAA0B,EAC/B,0CAA0C,EAC1C,yBAAyB,EACzB,wCAAwC,EACxC,oCAAoC,EACpC,KAAK,4CAA4C,EACjD,KAAK,yCAAyC,EAC9C,uCAAuC,EACvC,oCAAoC,EACpC,kCAAkC,EAClC,yBAAyB,GAC1B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,KAAK,0CAA0C,EAC/C,qCAAqC,EACrC,2BAA2B,EAC3B,YAAY,EACZ,aAAa,EACb,MAAM,GACP,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,gCAAgC,EAChC,KAAK,uBAAuB,EAC5B,KAAK,mCAAmC,EACxC,KAAK,gCAAgC,EACrC,KAAK,iCAAiC,EACtC,0BAA0B,EAC1B,+BAA+B,EAC/B,KAAK,sCAAsC,EAC3C,KAAK,qCAAqC,EAC1C,KAAK,6CAA6C,EAClD,KAAK,8BAA8B,EACnC,KAAK,mCAAmC,EACxC,KAAK,2CAA2C,EAChD,sCAAsC,EACtC,qCAAqC,EACrC,wCAAwC,EACxC,mCAAmC,EACnC,wCAAwC,EACxC,0BAA0B,EAC1B,mBAAmB,EACnB,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,KAAK,8BAA8B,EACnC,KAAK,4BAA4B,EACjC,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,6BAA6B,EAClC,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,+BAA+B,EACpC,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,mCAAmC,EACxC,KAAK,+BAA+B,EACpC,KAAK,4BAA4B,EACjC,uBAAuB,EACvB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,eAAe,EACf,iBAAiB,EACjB,0BAA0B,EAC1B,8BAA8B,EAC9B,mBAAmB,EACnB,oBAAoB,EACpB,6BAA6B,EAC7B,+BAA+B,EAC/B,uBAAuB,EACvB,2BAA2B,EAC3B,4BAA4B,EAC5B,+BAA+B,EAC/B,6BAA6B,EAC7B,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,GAClC,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,mCAAmC,EACnC,iCAAiC,EACjC,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,oCAAoC,EACpC,KAAK,sBAAsB,EAC3B,KAAK,iCAAiC,EACtC,+BAA+B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,mBAAmB,EACnB,KAAK,iCAAiC,EACtC,KAAK,kCAAkC,EACvC,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,KAAK,gCAAgC,EACrC,KAAK,iCAAiC,EACtC,KAAK,sCAAsC,EAC3C,KAAK,yCAAyC,EAC9C,KAAK,+BAA+B,EACpC,KAAK,gCAAgC,EACrC,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,mCAAmC,EACxC,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,GAClC,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,KAAK,2BAA2B,EAChC,KAAK,+BAA+B,EACpC,KAAK,8BAA8B,EACnC,KAAK,+BAA+B,EACpC,KAAK,0BAA0B,EAC/B,qCAAqC,EACrC,mCAAmC,EACnC,yBAAyB,EACzB,0BAA0B,EAC1B,+BAA+B,EAC/B,4BAA4B,GAC7B,MAAM,eAAe,CAAA"}

package/dist/index.js

@@ -0,0 +1,8 @@
+export { runActionLedgerCanary, } from "./canary.js";
+export { ActionLedgerCapabilityRegistryError, actionLedgerCapabilityApprovalPolicyValues, actionLedgerCapabilityKey, actionLedgerCapabilityLedgerPolicyValues, createActionLedgerCapabilityRegistry, evaluateActionLedgerApprovalRequirement, evaluateActionLedgerCapabilityAccess, evaluateActionLedgerCapabilityRisk, getActionLedgerCapability, } from "./capability.js";
+export { buildActionApprovalCommandFingerprint, buildIdempotencyFingerprint, canonicalize, canonicalJson, sha256, } from "./fingerprint.js";
+export { ACTION_LEDGER_APPROVAL_ID_HEADER, appendActionLedgerMutation, appendActionLedgerSensitiveRead, buildActionLedgerApprovalDecisionInput, buildActionLedgerApprovalRequestInput, buildActionLedgerApprovedExecutionFields, buildActionLedgerMutationEntryInput, buildActionLedgerSensitiveReadEntryInput, decideActionLedgerApproval, ledgerSensitiveRead, mapActionLedgerRequestContext, requestActionLedgerApproval, } from "./request-context.js";
+export { actionLedgerAdminRoutes, actionLedgerHonoModule, actionLedgerModule, } from "./routes.js";
+export { actionApprovals, actionDelegations, actionLedgerActionKindEnum, actionLedgerApprovalStatusEnum, actionLedgerEntries, actionLedgerPayloads, actionLedgerPrincipalTypeEnum, actionLedgerRedactionStatusEnum, actionLedgerRelayOutbox, actionLedgerRelayStatusEnum, actionLedgerReversalKindEnum, actionLedgerReversalOutcomeEnum, actionLedgerReversalStateEnum, actionLedgerRiskEnum, actionLedgerStatusEnum, actionMutationDetails, actionSensitiveReadDetails, } from "./schema.js";
+export { ActionApprovalDecisionConflictError, ActionApprovalDecisionStatusError, ActionLedgerIdempotencyConflictError, ActionLedgerReversalTargetError, actionLedgerService, } from "./service.js";
+export { actionLedgerTargetTimelineQuerySchema, buildActionLedgerTargetTimelinePage, serializeActionLedgerDate, serializeActionLedgerEntry, sortActionLedgerTimelineEntries, toActionLedgerTimelineCursor, } from "./timeline.js";

package/dist/request-context.d.ts

@@ -0,0 +1,136 @@
+import type { AnyDrizzleDb } from "@voyant-travel/db";
+import type { ActionApproval, ActionLedgerEntry, NewActionMutationDetail } from "./schema.js";
+import type { AppendActionLedgerEntryInput, AppendActionLedgerEntryResult, DecideActionApprovalInput, DecideActionApprovalResult, RequestActionApprovalInput, RequestActionApprovalResult } from "./service.js";
+export declare const ACTION_LEDGER_APPROVAL_ID_HEADER = "action-approval-id";
+export interface ActionLedgerRequestContextValues {
+    userId?: string | null;
+    agentId?: string | null;
+    workflowPrincipalId?: string | null;
+    principalSubtype?: string | null;
+    sessionId?: string | null;
+    apiTokenId?: string | null;
+    apiKeyId?: string | null;
+    callerType?: string | null;
+    actor?: string | null;
+    isInternalRequest?: boolean | null;
+    organizationId?: string | null;
+    workflowRunId?: string | null;
+    workflowStepId?: string | null;
+    correlationId?: string | null;
+}
+export interface ActionLedgerActorFields {
+    actorType: string | null;
+    principalType: ActionLedgerEntry["principalType"];
+    principalId: string;
+    principalSubtype: string | null;
+    sessionId: string | null;
+    apiTokenId: string | null;
+    internalRequest: boolean;
+    callerType: string | null;
+    organizationId: string | null;
+    workflowRunId: string | null;
+    workflowStepId: string | null;
+    correlationId: string | null;
+}
+export interface ActionLedgerRequestMappingOptions {
+    fallbackPrincipalId?: string;
+}
+export interface BuildActionLedgerSensitiveReadInput extends CommonActionLedgerRouteInput, ActionLedgerRequestMappingOptions {
+    status?: Extract<ActionLedgerEntry["status"], "succeeded" | "denied" | "failed">;
+    reasonCode?: string | null;
+    disclosedFieldSet?: string[] | null;
+    disclosureSummary?: string | null;
+    decisionPolicy?: string | null;
+}
+export type BuildActionLedgerSensitiveReadInputForValue<T> = BuildActionLedgerSensitiveReadInput | ((value: T) => BuildActionLedgerSensitiveReadInput);
+export interface BuildActionLedgerMutationInput extends CommonActionLedgerRouteInput, ActionLedgerRequestMappingOptions {
+    actionKind: Extract<ActionLedgerEntry["actionKind"], "create" | "update" | "delete" | "execute">;
+    status?: ActionLedgerEntry["status"];
+    mutationDetail?: Omit<NewActionMutationDetail, "actionId">;
+}
+export interface BuildActionLedgerApprovalRequestInput extends Omit<BuildActionLedgerMutationInput, "status"> {
+    approval: {
+        requestedByPrincipalId?: string | null;
+        assignedToPrincipalId?: string | null;
+        delegatedFromPrincipalId?: string | null;
+        policyName: string;
+        policyVersion: string;
+        targetSnapshotRef?: string | null;
+        riskSnapshot?: ActionApproval["riskSnapshot"] | null;
+        reasonCode?: string | null;
+        expiresAt?: Date | string | null;
+    };
+}
+export interface BuildActionLedgerApprovalDecisionInput extends ActionLedgerRequestMappingOptions {
+    context: ActionLedgerRequestContextValues;
+    id: string;
+    status: Exclude<ActionApproval["status"], "pending">;
+    decidedByPrincipalId?: string | null;
+    decidedAt?: Date | string | null;
+    actionName: string;
+    actionVersion?: string;
+    evaluatedRisk?: ActionLedgerEntry["evaluatedRisk"];
+    targetType?: string;
+    targetId?: string;
+    routeOrToolName?: string | null;
+    capabilityId?: string | null;
+    capabilityVersion?: string | null;
+    authorizationSource?: string | null;
+    idempotencyScope?: string | null;
+    idempotencyKey?: string | null;
+    idempotencyFingerprint?: string | null;
+    payloads?: AppendActionLedgerEntryInput["payloads"];
+    enqueueRelay?: AppendActionLedgerEntryInput["enqueueRelay"];
+    organizationId?: string | null;
+    workflowRunId?: string | null;
+    workflowStepId?: string | null;
+    correlationId?: string | null;
+}
+export interface BuildActionLedgerApprovedExecutionFieldsInput {
+    requestedActionId: string;
+    approvalId: string;
+    idempotencyFingerprint: string;
+}
+export interface ActionLedgerApprovedExecutionFields {
+    causationActionId: string;
+    approvalId: string;
+    idempotencyScope: string;
+    idempotencyKey: string;
+    idempotencyFingerprint: string;
+}
+interface CommonActionLedgerRouteInput {
+    context: ActionLedgerRequestContextValues;
+    actionName: string;
+    actionVersion?: string;
+    evaluatedRisk?: ActionLedgerEntry["evaluatedRisk"];
+    targetType: string;
+    targetId: string;
+    routeOrToolName?: string | null;
+    capabilityId?: string | null;
+    capabilityVersion?: string | null;
+    authorizationSource?: string | null;
+    causationActionId?: string | null;
+    approvalId?: string | null;
+    idempotencyScope?: string | null;
+    idempotencyKey?: string | null;
+    idempotencyFingerprint?: string | null;
+    payloads?: AppendActionLedgerEntryInput["payloads"];
+    enqueueRelay?: AppendActionLedgerEntryInput["enqueueRelay"];
+    organizationId?: string | null;
+    workflowRunId?: string | null;
+    workflowStepId?: string | null;
+    correlationId?: string | null;
+}
+export declare function mapActionLedgerRequestContext(context: ActionLedgerRequestContextValues, options?: ActionLedgerRequestMappingOptions): ActionLedgerActorFields;
+export declare function buildActionLedgerSensitiveReadEntryInput(input: BuildActionLedgerSensitiveReadInput): AppendActionLedgerEntryInput;
+export declare function appendActionLedgerSensitiveRead(db: AnyDrizzleDb, input: BuildActionLedgerSensitiveReadInput): Promise<AppendActionLedgerEntryResult>;
+export declare function ledgerSensitiveRead<T>(db: AnyDrizzleDb, input: BuildActionLedgerSensitiveReadInputForValue<T>, read: () => T | Promise<T>): Promise<T>;
+export declare function buildActionLedgerMutationEntryInput(input: BuildActionLedgerMutationInput): AppendActionLedgerEntryInput;
+export declare function appendActionLedgerMutation(db: AnyDrizzleDb, input: BuildActionLedgerMutationInput): Promise<AppendActionLedgerEntryResult>;
+export declare function buildActionLedgerApprovalRequestInput(input: BuildActionLedgerApprovalRequestInput): RequestActionApprovalInput;
+export declare function requestActionLedgerApproval(db: AnyDrizzleDb, input: BuildActionLedgerApprovalRequestInput): Promise<RequestActionApprovalResult>;
+export declare function buildActionLedgerApprovalDecisionInput(input: BuildActionLedgerApprovalDecisionInput): DecideActionApprovalInput;
+export declare function decideActionLedgerApproval(db: AnyDrizzleDb, input: BuildActionLedgerApprovalDecisionInput): Promise<DecideActionApprovalResult | null>;
+export declare function buildActionLedgerApprovedExecutionFields(input: BuildActionLedgerApprovedExecutionFieldsInput): ActionLedgerApprovedExecutionFields;
+export {};
+//# sourceMappingURL=request-context.d.ts.map

package/dist/request-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-context.d.ts","sourceRoot":"","sources":["../src/request-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAC7F,OAAO,KAAK,EACV,4BAA4B,EAC5B,6BAA6B,EAC7B,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,2BAA2B,EAC5B,MAAM,cAAc,CAAA;AAGrB,eAAO,MAAM,gCAAgC,uBAAuB,CAAA;AAEpE,MAAM,WAAW,gCAAgC;IAC/C,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,iBAAiB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAA;IAClC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,aAAa,EAAE,iBAAiB,CAAC,eAAe,CAAC,CAAA;IACjD,WAAW,EAAE,MAAM,CAAA;IACnB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,eAAe,EAAE,OAAO,CAAA;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,MAAM,WAAW,iCAAiC;IAChD,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,mCACf,SAAQ,4BAA4B,EAClC,iCAAiC;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC,CAAA;IAChF,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,iBAAiB,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IACnC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B;AAED,MAAM,MAAM,2CAA2C,CAAC,CAAC,IACrD,mCAAmC,GACnC,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,mCAAmC,CAAC,CAAA;AAEvD,MAAM,WAAW,8BACf,SAAQ,4BAA4B,EAClC,iCAAiC;IACnC,UAAU,EAAE,OAAO,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC,CAAA;IAChG,MAAM,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IACpC,cAAc,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAA;CAC3D;AAED,MAAM,WAAW,qCACf,SAAQ,IAAI,CAAC,8BAA8B,EAAE,QAAQ,CAAC;IACtD,QAAQ,EAAE;QACR,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACtC,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACrC,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACxC,UAAU,EAAE,MAAM,CAAA;QAClB,aAAa,EAAE,MAAM,CAAA;QACrB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACjC,YAAY,CAAC,EAAE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAA;QACpD,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QAC1B,SAAS,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAA;KACjC,CAAA;CACF;AAED,MAAM,WAAW,sCAAuC,SAAQ,iCAAiC;IAC/F,OAAO,EAAE,gCAAgC,CAAA;IACzC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAA;IACpD,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,SAAS,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAA;IAChC,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,aAAa,CAAC,EAAE,iBAAiB,CAAC,eAAe,CAAC,CAAA;IAClD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtC,QAAQ,CAAC,EAAE,4BAA4B,CAAC,UAAU,CAAC,CAAA;IACnD,YAAY,CAAC,EAAE,4BAA4B,CAAC,cAAc,CAAC,CAAA;IAC3D,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B;AAED,MAAM,WAAW,6CAA6C;IAC5D,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,sBAAsB,EAAE,MAAM,CAAA;CAC/B;AAED,MAAM,WAAW,mCAAmC;IAClD,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB,EAAE,MAAM,CAAA;IACxB,cAAc,EAAE,MAAM,CAAA;IACtB,sBAAsB,EAAE,MAAM,CAAA;CAC/B;AAED,UAAU,4BAA4B;IACpC,OAAO,EAAE,gCAAgC,CAAA;IACzC,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,aAAa,CAAC,EAAE,iBAAiB,CAAC,eAAe,CAAC,CAAA;IAClD,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtC,QAAQ,CAAC,EAAE,4BAA4B,CAAC,UAAU,CAAC,CAAA;IACnD,YAAY,CAAC,EAAE,4BAA4B,CAAC,cAAc,CAAC,CAAA;IAC3D,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,gCAAgC,EACzC,OAAO,GAAE,iCAAsC,GAC9C,uBAAuB,CA8FzB;AAED,wBAAgB,wCAAwC,CACtD,KAAK,EAAE,mCAAmC,GACzC,4BAA4B,CAkC9B;AAED,wBAAsB,+BAA+B,CACnD,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,mCAAmC,GACzC,OAAO,CAAC,6BAA6B,CAAC,CAExC;AAED,wBAAsB,mBAAmB,CAAC,CAAC,EACzC,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,2CAA2C,CAAC,CAAC,CAAC,EACrD,IAAI,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GACzB,OAAO,CAAC,CAAC,CAAC,CASZ;AAED,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,8BAA8B,GACpC,4BAA4B,CA6B9B;AAED,wBAAsB,0BAA0B,CAC9C,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,6BAA6B,CAAC,CAExC;AAED,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,qCAAqC,GAC3C,0BAA0B,CAqB5B;AAED,wBAAsB,2BAA2B,CAC/C,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,qCAAqC,GAC3C,OAAO,CAAC,2BAA2B,CAAC,CAEtC;AAED,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,sCAAsC,GAC5C,yBAAyB,CA8B3B;AAED,wBAAsB,0BAA0B,CAC9C,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,sCAAsC,GAC5C,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAE5C;AAED,wBAAgB,wCAAwC,CACtD,KAAK,EAAE,6CAA6C,GACnD,mCAAmC,CAQrC"}

package/dist/request-context.js

@@ -0,0 +1,237 @@
+import { actionLedgerService } from "./service.js";
+export const ACTION_LEDGER_APPROVAL_ID_HEADER = "action-approval-id";
+export function mapActionLedgerRequestContext(context, options = {}) {
+    const actor = normalizeNullableString(context.actor);
+    const callerType = normalizeNullableString(context.callerType);
+    const userId = normalizeNullableString(context.userId);
+    const agentId = normalizeNullableString(context.agentId);
+    const workflowRunId = normalizeNullableString(context.workflowRunId);
+    const workflowPrincipalId = normalizeNullableString(context.workflowPrincipalId) ?? workflowRunId;
+    const principalSubtype = normalizeNullableString(context.principalSubtype);
+    const sessionId = normalizeNullableString(context.sessionId);
+    const apiTokenId = normalizeNullableString(context.apiTokenId ?? context.apiKeyId);
+    const internalRequest = context.isInternalRequest === true || callerType === "internal";
+    if (apiTokenId && callerType === "api_key") {
+        return {
+            actorType: actor,
+            principalType: "api_key",
+            principalId: apiTokenId,
+            principalSubtype,
+            sessionId,
+            apiTokenId,
+            internalRequest,
+            callerType,
+            organizationId: normalizeNullableString(context.organizationId),
+            workflowRunId,
+            workflowStepId: normalizeNullableString(context.workflowStepId),
+            correlationId: normalizeNullableString(context.correlationId),
+        };
+    }
+    if (agentId && callerType === "agent") {
+        return {
+            actorType: actor,
+            principalType: "agent",
+            principalId: agentId,
+            principalSubtype,
+            sessionId,
+            apiTokenId,
+            internalRequest,
+            callerType,
+            organizationId: normalizeNullableString(context.organizationId),
+            workflowRunId,
+            workflowStepId: normalizeNullableString(context.workflowStepId),
+            correlationId: normalizeNullableString(context.correlationId),
+        };
+    }
+    if (workflowPrincipalId && callerType === "workflow") {
+        return {
+            actorType: actor,
+            principalType: "workflow",
+            principalId: workflowPrincipalId,
+            principalSubtype,
+            sessionId,
+            apiTokenId,
+            internalRequest,
+            callerType,
+            organizationId: normalizeNullableString(context.organizationId),
+            workflowRunId,
+            workflowStepId: normalizeNullableString(context.workflowStepId),
+            correlationId: normalizeNullableString(context.correlationId),
+        };
+    }
+    if (internalRequest) {
+        return {
+            actorType: actor,
+            principalType: "system",
+            principalId: userId ?? apiTokenId ?? options.fallbackPrincipalId ?? "internal_request",
+            principalSubtype,
+            sessionId,
+            apiTokenId,
+            internalRequest,
+            callerType,
+            organizationId: normalizeNullableString(context.organizationId),
+            workflowRunId,
+            workflowStepId: normalizeNullableString(context.workflowStepId),
+            correlationId: normalizeNullableString(context.correlationId),
+        };
+    }
+    return {
+        actorType: actor,
+        principalType: userId ? "user" : "system",
+        principalId: userId ?? options.fallbackPrincipalId ?? "unknown_request",
+        principalSubtype,
+        sessionId,
+        apiTokenId,
+        internalRequest,
+        callerType,
+        organizationId: normalizeNullableString(context.organizationId),
+        workflowRunId,
+        workflowStepId: normalizeNullableString(context.workflowStepId),
+        correlationId: normalizeNullableString(context.correlationId),
+    };
+}
+export function buildActionLedgerSensitiveReadEntryInput(input) {
+    const actorFields = mapActionLedgerRequestContext(input.context, input);
+    return {
+        ...actorFields,
+        actionName: input.actionName,
+        actionVersion: input.actionVersion ?? "v1",
+        actionKind: "read",
+        status: input.status ?? "succeeded",
+        evaluatedRisk: input.evaluatedRisk ?? "high",
+        targetType: input.targetType,
+        targetId: input.targetId,
+        routeOrToolName: input.routeOrToolName ?? null,
+        capabilityId: input.capabilityId ?? null,
+        capabilityVersion: input.capabilityVersion ?? null,
+        authorizationSource: input.authorizationSource ?? null,
+        causationActionId: input.causationActionId ?? null,
+        approvalId: input.approvalId ?? null,
+        idempotencyScope: input.idempotencyScope ?? null,
+        idempotencyKey: input.idempotencyKey ?? null,
+        idempotencyFingerprint: input.idempotencyFingerprint ?? null,
+        payloads: input.payloads,
+        enqueueRelay: input.enqueueRelay,
+        organizationId: input.organizationId ?? actorFields.organizationId,
+        workflowRunId: input.workflowRunId ?? actorFields.workflowRunId,
+        workflowStepId: input.workflowStepId ?? actorFields.workflowStepId,
+        correlationId: input.correlationId ?? actorFields.correlationId,
+        sensitiveReadDetail: {
+            reasonCode: input.reasonCode ?? null,
+            disclosedFieldSet: input.disclosedFieldSet ?? null,
+            disclosureSummary: input.disclosureSummary ?? null,
+            decisionPolicy: input.decisionPolicy ?? null,
+        },
+    };
+}
+export async function appendActionLedgerSensitiveRead(db, input) {
+    return actionLedgerService.appendEntry(db, buildActionLedgerSensitiveReadEntryInput(input));
+}
+export async function ledgerSensitiveRead(db, input, read) {
+    if (typeof input !== "function") {
+        await appendActionLedgerSensitiveRead(db, input);
+        return read();
+    }
+    const value = await read();
+    await appendActionLedgerSensitiveRead(db, input(value));
+    return value;
+}
+export function buildActionLedgerMutationEntryInput(input) {
+    const actorFields = mapActionLedgerRequestContext(input.context, input);
+    return {
+        ...actorFields,
+        actionName: input.actionName,
+        actionVersion: input.actionVersion ?? "v1",
+        actionKind: input.actionKind,
+        status: input.status ?? "succeeded",
+        evaluatedRisk: input.evaluatedRisk ?? "medium",
+        targetType: input.targetType,
+        targetId: input.targetId,
+        routeOrToolName: input.routeOrToolName ?? null,
+        capabilityId: input.capabilityId ?? null,
+        capabilityVersion: input.capabilityVersion ?? null,
+        authorizationSource: input.authorizationSource ?? null,
+        causationActionId: input.causationActionId ?? null,
+        approvalId: input.approvalId ?? null,
+        idempotencyScope: input.idempotencyScope ?? null,
+        idempotencyKey: input.idempotencyKey ?? null,
+        idempotencyFingerprint: input.idempotencyFingerprint ?? null,
+        payloads: input.payloads,
+        enqueueRelay: input.enqueueRelay,
+        organizationId: input.organizationId ?? actorFields.organizationId,
+        workflowRunId: input.workflowRunId ?? actorFields.workflowRunId,
+        workflowStepId: input.workflowStepId ?? actorFields.workflowStepId,
+        correlationId: input.correlationId ?? actorFields.correlationId,
+        mutationDetail: input.mutationDetail,
+    };
+}
+export async function appendActionLedgerMutation(db, input) {
+    return actionLedgerService.appendEntry(db, buildActionLedgerMutationEntryInput(input));
+}
+export function buildActionLedgerApprovalRequestInput(input) {
+    const { status: _status, approvalId: _approvalId, ...requestedAction } = buildActionLedgerMutationEntryInput(input);
+    return {
+        requestedAction,
+        approval: {
+            requestedByPrincipalId: input.approval.requestedByPrincipalId ?? requestedAction.principalId,
+            assignedToPrincipalId: input.approval.assignedToPrincipalId ?? null,
+            delegatedFromPrincipalId: input.approval.delegatedFromPrincipalId ?? null,
+            policyName: input.approval.policyName,
+            policyVersion: input.approval.policyVersion,
+            targetSnapshotRef: input.approval.targetSnapshotRef ?? null,
+            riskSnapshot: input.approval.riskSnapshot ?? requestedAction.evaluatedRisk,
+            reasonCode: input.approval.reasonCode ?? null,
+            expiresAt: input.approval.expiresAt ?? null,
+        },
+    };
+}
+export async function requestActionLedgerApproval(db, input) {
+    return actionLedgerService.requestApproval(db, buildActionLedgerApprovalRequestInput(input));
+}
+export function buildActionLedgerApprovalDecisionInput(input) {
+    const actorFields = mapActionLedgerRequestContext(input.context, input);
+    return {
+        id: input.id,
+        status: input.status,
+        decidedByPrincipalId: input.decidedByPrincipalId ?? actorFields.principalId,
+        decidedAt: input.decidedAt ?? null,
+        decisionAction: {
+            ...actorFields,
+            actionName: input.actionName,
+            actionVersion: input.actionVersion ?? "v1",
+            evaluatedRisk: input.evaluatedRisk,
+            targetType: input.targetType,
+            targetId: input.targetId,
+            routeOrToolName: input.routeOrToolName ?? null,
+            capabilityId: input.capabilityId ?? null,
+            capabilityVersion: input.capabilityVersion ?? null,
+            authorizationSource: input.authorizationSource ?? null,
+            idempotencyScope: input.idempotencyScope ?? null,
+            idempotencyKey: input.idempotencyKey ?? null,
+            idempotencyFingerprint: input.idempotencyFingerprint ?? null,
+            payloads: input.payloads,
+            enqueueRelay: input.enqueueRelay,
+            organizationId: input.organizationId ?? actorFields.organizationId,
+            workflowRunId: input.workflowRunId ?? actorFields.workflowRunId,
+            workflowStepId: input.workflowStepId ?? actorFields.workflowStepId,
+            correlationId: input.correlationId ?? actorFields.correlationId,
+        },
+    };
+}
+export async function decideActionLedgerApproval(db, input) {
+    return actionLedgerService.decideApproval(db, buildActionLedgerApprovalDecisionInput(input));
+}
+export function buildActionLedgerApprovedExecutionFields(input) {
+    return {
+        causationActionId: input.requestedActionId,
+        approvalId: input.approvalId,
+        idempotencyScope: `${input.approvalId}:execution`,
+        idempotencyKey: input.approvalId,
+        idempotencyFingerprint: input.idempotencyFingerprint,
+    };
+}
+function normalizeNullableString(value) {
+    if (value === undefined || value === null || value === "")
+        return null;
+    return value;
+}