@wildo-ai/saas-models 1.1.5 → 1.1.7

package/dist/esm/organizations/service-provider-relationships.shared.schemas.d.ts

@@ -0,0 +1,590 @@
+/**
+ * Service-provider relationships — a service firm's experts working inside CLIENT organizations,
+ * under a relationship the client declares, controls and can end on the next request.
+ *
+ * ## The shape (#1597)
+ *
+ * An AI-native service company is a firm whose experts work inside every client's tenant every day.
+ * Platform access grants cannot carry that: they are break-glass by design (time-boxed, justified,
+ * operator-only), and making them standing would be the standing privilege the zero-standing-privilege
+ * decision removed. So the firm↔client link is its own, customer-controlled relationship:
+ *
+ * | resource | lives in | written by |
+ * |---|---|---|
+ * | `SERVICE_PROVIDER_RELATIONSHIPS` | the CLIENT organization | the client's verbs; the firm's verbs through the mirror |
+ * | `SERVICE_ENGAGEMENTS` | the PROVIDER organization | system-written beside every relationship transition — the firm's view |
+ * | `SERVICE_ENGAGEMENT_ASSIGNMENTS` | the PROVIDER organization | the firm's administrators: which experts serve which client |
+ *
+ * An assigned expert receives a REAL membership in the client organization, marked with the
+ * relationship (`serviceProviderRelationshipId`, `providerOrganizationId`). The membership is what the
+ * rest of the framework already understands; the relationship is what decides whether it confers
+ * anything, re-checked on every request by the execution-context builder (the "live filter").
+ *
+ * ## Each side acts only inside its own tenant
+ *
+ * The client's verbs are on the relationship (client scope); the firm's verbs (`propose`, `accept` of a
+ * client's proposal, `withdraw`) are on the engagement (firm scope). The counterpart row is written by
+ * the system in the same transaction. Neither side ever reaches into the other's tenant through a
+ * request, so no cross-tenant admission exists here at all — that door belongs to platform operators.
+ */
+import { z } from 'zod';
+import type { ExecutionContext_RoleInfo } from '../runtime/execution-context.shared.schemas';
+import { ServiceProviderActivityFeedDisclosure, ServiceProviderMfaTrust } from './service-provider-client-controls.shared.schemas';
+import { HumanDecision_Outcome, ReviewClockBasis, ReviewDeadlineStage, type HumanDecision_Request, type HumanDecision_Route } from '../flows-actors/human-decision.shared.schemas';
+import { type ReviewCalendar, type ReviewDeadlinesDeclaration } from '../flows-actors/review-deadlines.shared.schemas';
+/** @wildo_source:part:start saas.models.organizations.service-provider-relationships facet:layer:shared facet:audience:app-developer */
+/**
+ * Where a service-provider relationship stands. One member per distinct claim, so the record says WHO
+ * ended it and HOW.
+ *
+ * Only {@link ServiceProviderRelationshipStatus.ACTIVE} confers anything, and even then only while
+ * `endsAt` is absent or in the future — {@link isServiceProviderRelationshipConferring} is the one
+ * predicate, and it reads `endsAt` itself rather than trusting {@link EXPIRED}.
+ */
+export declare enum ServiceProviderRelationshipStatus {
+    /** Proposed by one side, awaiting the other. Confers nothing. */
+    PROPOSED = "PROPOSED",
+    /** Accepted by the non-proposing side. Confers, subject to the live filter. */
+    ACTIVE = "ACTIVE",
+    /** Paused by the client. Confers nothing; `resume` returns it to ACTIVE. */
+    SUSPENDED = "SUSPENDED",
+    /** The client refused the firm's proposal. Terminal. */
+    DECLINED = "DECLINED",
+    /**
+     * The firm ended it (or withdrew its proposal) — or the firm's ORGANIZATION was deleted (the purge after its retention
+     * window, or an operator's immediate delete), which ends every relationship it serves the same way. Terminal.
+     */
+    WITHDRAWN = "WITHDRAWN",
+    /**
+     * The client ended it — or the client's ORGANIZATION was deleted (the purge, or an operator's immediate delete), which
+     * ends every relationship it holds the same way. Terminal.
+     */
+    TERMINATED = "TERMINATED",
+    /** The sweep relabelled it after `endsAt`. Terminal bookkeeping — admission never reads this label. */
+    EXPIRED = "EXPIRED"
+}
+/** Statuses from which a relationship can still move — at most one of these per (provider, client). */
+export declare const SERVICE_PROVIDER_RELATIONSHIP_LIVE_STATUSES: readonly ServiceProviderRelationshipStatus[];
+/** Statuses that end a relationship for good. Reaching one ends every assignment and provider membership. */
+export declare const SERVICE_PROVIDER_RELATIONSHIP_TERMINAL_STATUSES: readonly ServiceProviderRelationshipStatus[];
+/** One lifecycle audit row per transition, written to BOTH organizations' trails. */
+export declare enum ServiceProviderRelationshipTransition {
+    PROPOSED = "PROPOSED",
+    ACCEPTED = "ACCEPTED",
+    DECLINED = "DECLINED",
+    SUSPENDED = "SUSPENDED",
+    RESUMED = "RESUMED",
+    SCOPE_AMENDED = "SCOPE_AMENDED",
+    TERMINATED = "TERMINATED",
+    WITHDRAWN = "WITHDRAWN",
+    EXPIRED = "EXPIRED",
+    /**
+     * The client changed how the firm's experts are admitted (#1612) — see
+     * {@link ServiceProviderExpertAdmissionPolicy}. Not retroactive: experts already admitted stay admitted.
+     */
+    EXPERT_ADMISSION_POLICY_CHANGED = "EXPERT_ADMISSION_POLICY_CHANGED"
+}
+/**
+ * How the firm's assigned experts are admitted into the CLIENT organization under one relationship (#1612).
+ *
+ * The CLIENT's choice, stored on the relationship it controls: set when the client proposes or accepts, and
+ * changed later only by a client administrator. The firm can never set or change it. An application may
+ * declare the default a client organization type starts from (`acceptsServiceProviders.defaultExpertAdmissionPolicy`),
+ * and the relationship's own value always wins.
+ *
+ * A change is NOT retroactive: experts already admitted stay admitted, and the client removes anyone through
+ * the ordinary member verbs.
+ */
+export declare enum ServiceProviderExpertAdmissionPolicy {
+    /** The relationship admits every expert the firm assigns (the #1597 behaviour, and the default). */
+    RELATIONSHIP_APPROVES_ASSIGNED_EXPERTS = "RELATIONSHIP_APPROVES_ASSIGNED_EXPERTS",
+    /**
+     * Each assigned expert waits for the client's own approval — a human decision routed to the client's
+     * administrators — and receives no membership until a client administrator approves them.
+     */
+    CLIENT_APPROVES_EACH_EXPERT = "CLIENT_APPROVES_EACH_EXPERT"
+}
+/** Whether a firm's expert currently serves an engagement. */
+export declare enum ServiceEngagementAssignmentStatus {
+    /** Designated by the firm; the expert holds a provider membership in the client organization. */
+    ACTIVE = "ACTIVE",
+    /**
+     * Unassigned, ended with the relationship, or withdrawn while still awaiting the client's approval. The
+     * client membership (when one was ever created) is INACTIVE; the row is evidence.
+     */
+    ENDED = "ENDED",
+    /**
+     * The firm assigned the expert under a relationship whose client approves each expert (#1612), and the
+     * client has not answered yet. Confers NOTHING by construction: no membership row exists in the client,
+     * so there is no role entry, nothing in any membership consumer, and no (person, client) slot taken.
+     */
+    PENDING_CLIENT_APPROVAL = "PENDING_CLIENT_APPROVAL",
+    /**
+     * The client refused the expert — or approved, but the relationship, the expert's firm membership or the
+     * (person, client) slot no longer allowed admission when the approval was applied. Nothing was created.
+     * Terminal; `approvalDenialReason` says which.
+     */
+    DENIED = "DENIED",
+    /** Nobody in the client answered before the approval's lapse (decision deadlines, #1628). Nothing was created. Terminal. */
+    LAPSED = "LAPSED"
+}
+/** Assignment statuses that still hold, or still wait for, a place in the client — the ones a second assignment collides with. */
+export declare const SERVICE_ENGAGEMENT_ASSIGNMENT_LIVE_STATUSES: readonly ServiceEngagementAssignmentStatus[];
+/**
+ * Why a per-expert approval ended without admitting the expert (#1612). Recorded on the assignment the firm
+ * reads, so it names a FACT the firm may know — never the client administrator who answered.
+ */
+export declare enum ServiceProviderExpertApprovalDenialReason {
+    /** A client administrator refused the expert. */
+    REFUSED_BY_CLIENT = "REFUSED_BY_CLIENT",
+    /** The client approved, but the relationship no longer confers (ended, suspended, or past its term). */
+    RELATIONSHIP_NO_LONGER_CONFERS = "RELATIONSHIP_NO_LONGER_CONFERS",
+    /** The client approved, but the expert is no longer an active, ordinary member of the firm, or the firm no longer confers authority. */
+    EXPERT_NO_LONGER_ELIGIBLE = "EXPERT_NO_LONGER_ELIGIBLE",
+    /** The client approved, but the person meanwhile holds another membership in the client (their own, a suspended one, or another firm's). */
+    CONFLICTS_WITH_CLIENT_MEMBERSHIP = "CONFLICTS_WITH_CLIENT_MEMBERSHIP"
+}
+/**
+ * The two answers a per-expert approval offers (#1612), in the one answer shape (`HumanDecision_Answer.optionRef`).
+ * APPROVE proceeds (the expert is admitted, re-checked at that moment); REJECT ends the waiting assignment.
+ */
+export declare enum ServiceProviderExpertApprovalOption {
+    APPROVE = "approve",
+    REJECT = "reject"
+}
+/** @wildo_source:part:end saas.models.organizations.service-provider-relationships */
+/**
+ * Does this relationship confer authority RIGHT NOW?
+ *
+ * The single predicate every consumer uses — the execution-context live filter, machine-client
+ * admission, the client-mailbox domain authorization, and any screen. `endsAt` is read here rather than
+ * trusting the EXPIRED label, so the term ends the moment it elapses with no writer involved: a
+ * relationship whose term passed must stop working whether or not the sweep has run.
+ */
+export declare function isServiceProviderRelationshipConferring(relationship: {
+    readonly status?: unknown;
+    readonly endsAt?: Date | string | null;
+} | null | undefined, now: Date): boolean;
+/**
+ * Is this membership row a PROVIDER membership — held through a service-provider relationship rather
+ * than as the organization's own member?
+ *
+ * The one definition, used by every membership consumer that must treat the two differently: the owner
+ * floor (never counts), `grantOwnership` (refuses), the generic member UPDATE (roles are owned by the
+ * relationship), SCIM `/Users` (not the client's directory), user-type revocation (grants none), and the
+ * execution-context live filter (confers only through a live relationship).
+ */
+export declare function isServiceProviderMembership(member: unknown): boolean;
+/** The two fields that mark a membership row as a provider membership. */
+export type ServiceProviderMembershipMarkers = {
+    readonly serviceProviderRelationshipId?: string;
+    readonly providerOrganizationId?: string;
+};
+/**
+ * The role entries a LIVE relationship confers on one of its experts (or admitted machine clients) in the
+ * client organization — the pure half of the execution-context live filter, so the emission rule has one
+ * definition that the builder and its tests share.
+ *
+ * - No `organizationUnitIds` ⇒ ONE organization-wide entry.
+ * - `organizationUnitIds` ⇒ one unit-scoped entry per unit and NO organization-wide entry. The expert is
+ *   then a UNIT-ONLY principal, which is the whole of what a unit-scoped relationship means.
+ *
+ * The attribution fields are audit-only (see `ExecutionContext_RoleInfo.viaServiceProviderRelationshipId`).
+ */
+export declare function buildServiceProviderRoleEntries(relationship: {
+    readonly organizationId: string;
+    readonly role: string;
+    readonly organizationUnitIds?: readonly string[] | null;
+}, relationshipId: string, providerOrganizationId: string, 
+/**
+ * The roles of the relationship's LIVE capability grants (#1631), added beside the relationship's role on its
+ * organization-wide entry. A unit-scoped relationship emits none of them (every capability needs an organization-wide
+ * relationship). The live filter decides which grants are live; this only places them.
+ */
+capabilityRoles?: readonly string[]): ExecutionContext_RoleInfo[];
+/** Who an audit row's principal acted THROUGH, when it acted inside a client under a service-provider relationship. */
+export interface ServiceProviderAuditAttribution {
+    readonly actingViaServiceProviderRelationshipId: string;
+    readonly providerOrganizationId: string;
+}
+/**
+ * The service-provider attribution an audit row written in `organizationId` carries, read from the role
+ * entries the execution-context live filter emitted — THE ONLY reader of `viaServiceProviderRelationshipId`
+ * and `viaProviderOrganizationId` (invariant 18 of #1597): no authority decision may consult them.
+ *
+ * Only an entry for the ROW's organization counts. A firm member acting in their own firm carries no
+ * attribution there even while they hold a live client relationship elsewhere, and a row in the client
+ * organization names the relationship that admitted the principal into it. Every entry the live filter
+ * emits for one relationship carries the same pair, so the first attributed entry is the answer.
+ */
+export declare function resolveServiceProviderAuditAttribution(initiatorRoles: readonly ExecutionContext_RoleInfo[] | undefined, organizationId: string | undefined): ServiceProviderAuditAttribution | undefined;
+/** Placeholder written over free text an erasure scrubs; non-empty because `purpose` is required. */
+export declare const ERASED_SERVICE_PROVIDER_TEXT = "[erased]";
+/** @wildo_source:part:start saas.models.organizations.service-provider-relationships */
+/**
+ * One admitted client's agents, as the CLIENT organization chose them (#1611). See
+ * `ServiceProviderRelationship.admittedAutonomousAgents`.
+ */
+export declare const ServiceProviderAdmittedAutonomousAgentsSchema: z.ZodObject<{
+    oauthClientId: z.ZodString;
+    autonomousAgentRefs: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type ServiceProviderAdmittedAutonomousAgents = z.infer<typeof ServiceProviderAdmittedAutonomousAgentsSchema>;
+/**
+ * Does this relationship let this firm client run this autonomous agent in the client organization (#1611)?
+ * The client's consent only: whether the client is admitted at all, live, and with which role is
+ * `admitServiceProviderMachineClient`'s question, and whether the firm binds the agent to it is the client
+ * row's. The one predicate the principal resolver, the schedule's nomination and the admission audit share.
+ */
+export declare function serviceProviderAdmitsAutonomousAgent(relationship: Pick<ServiceProviderRelationship, 'admittedMachineClientIds' | 'admittedAutonomousAgents'> | null | undefined, oauthClientId: string, autonomousAgentRef: string): boolean;
+/**
+ * The relationship, stored in the CLIENT organization — the party that controls it.
+ *
+ * Every field is server-authored. There is no generic CREATE or UPDATE: each field changes only through
+ * the verb that owns its transition, which is what makes the record evidence rather than a form.
+ */
+export declare const ServiceProviderRelationshipSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>;
+    providerOrganizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>;
+    providerOrganizationName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>>;
+    status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ServiceProviderRelationshipStatus>>>>>>>>;
+    role: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    organizationUnitIds: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodArray<z.ZodString>>>>>;
+    endsAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodNullable<z.ZodDate>>>>>>>;
+    purpose: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    admittedMachineClientIds: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodArray<z.ZodString>>>>>;
+    admittedAutonomousAgents: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodArray<z.ZodObject<{
+        oauthClientId: z.ZodString;
+        autonomousAgentRefs: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>>>>>;
+    expertAdmissionPolicy: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ServiceProviderExpertAdmissionPolicy>>>>>>>;
+    providerMfaTrust: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ServiceProviderMfaTrust>>>>>>>;
+    activityFeedDisclosure: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ServiceProviderActivityFeedDisclosure>>>>>>>;
+    proposedByOrganizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    proposedByUserId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>>;
+    acceptedByUserId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>>;
+    acceptedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodDate>>>;
+    endedByUserId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>>;
+    endedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodDate>>>>>;
+    decisionReason: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>>;
+    createdAt: z.ZodOptional<z.ZodDate>;
+    updatedAt: z.ZodOptional<z.ZodDate>;
+}, z.core.$strip>;
+export type ServiceProviderRelationship = z.infer<typeof ServiceProviderRelationshipSchema>;
+/**
+ * The firm's mirror of one relationship, stored in the PROVIDER organization.
+ *
+ * System-written in the same transaction as every relationship transition, and what the firm reads —
+ * its clients list, the expert assignment screen, the organization switcher's grouping. It carries only
+ * what the firm needs: the client's unit ids stay in the client's tenant (`scopedToOrganizationUnits`
+ * says whether a scope exists, not what it is).
+ */
+export declare const ServiceEngagementSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>;
+    clientOrganizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>;
+    serviceProviderRelationshipId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>>;
+    status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ServiceProviderRelationshipStatus>>>>>>>;
+    role: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    scopedToOrganizationUnits: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodBoolean>>>>;
+    endsAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodNullable<z.ZodDate>>>>>;
+    purpose: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    proposedByOrganizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    clientOrganizationName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>>;
+    expertAdmissionPolicy: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ServiceProviderExpertAdmissionPolicy>>>>>>;
+    delegatedCapabilities: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodArray<z.ZodObject<{
+        capability: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("./service-provider-capability-grants.shared.schemas").DelegatedAdministrativeCapability>>;
+        endsAt: z.ZodDate;
+    }, z.core.$strip>>>>>;
+    endedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodDate>>>>;
+    decisionReason: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>>;
+    createdAt: z.ZodOptional<z.ZodDate>;
+    updatedAt: z.ZodOptional<z.ZodDate>;
+}, z.core.$strip>;
+export type ServiceEngagement = z.infer<typeof ServiceEngagementSchema>;
+/**
+ * Which of the firm's members serve which engagement — stored in the PROVIDER organization, decided by
+ * the firm's administrators. Assigning creates (or reactivates) the expert's provider membership in the
+ * client organization; unassigning makes it INACTIVE. The live filter reads the ACTIVE assignment for
+ * `(serviceProviderRelationshipId, userId)` on every request.
+ */
+export declare const ServiceEngagementAssignmentSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>;
+    serviceEngagementId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>;
+    userId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>;
+    serviceProviderRelationshipId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    clientOrganizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ServiceEngagementAssignmentStatus>>>>>>>>;
+    assignedByUserId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>>;
+    assignedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodDate>>>;
+    approvalDecisionId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>>>;
+    approvalResolvedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodDate>>>;
+    approvalDenialReason: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ServiceProviderExpertApprovalDenialReason>>>>>;
+    approvalLapseAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodNullable<z.ZodDate>>>>>;
+    approvalDecisionDeadlineAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodNullable<z.ZodDate>>>>;
+    approvalDecisionWarningAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodNullable<z.ZodDate>>>>;
+    approvalDecisionClockBasis: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof ReviewClockBasis>>>>>>;
+    approvalDecisionWarningFiredAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodNullable<z.ZodDate>>>>>;
+    approvalDecisionMissedFiredAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodNullable<z.ZodDate>>>>>;
+    approvalNextDueAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodNullable<z.ZodDate>>>>>>;
+    endedByUserId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>>;
+    endedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodDate>>>>>;
+    createdAt: z.ZodOptional<z.ZodDate>;
+    updatedAt: z.ZodOptional<z.ZodDate>;
+}, z.core.$strip>;
+export type ServiceEngagementAssignment = z.infer<typeof ServiceEngagementAssignmentSchema>;
+/**
+ * The input of the INTERNAL `settleClientApproval` verb (#1612): which pending approval, and how the client answered.
+ *
+ * `outcome` is the one decision vocabulary (`HumanDecision_Outcome`). Only ACCEPTED, REJECTED and LAPSED settle an
+ * expert approval — the verb refuses the others rather than reading them as one of these.
+ */
+export declare const ServiceEngagementAssignmentSettleClientApprovalDtoSchema: z.ZodObject<{
+    approvalDecisionId: z.ZodString;
+    outcome: z.ZodEnum<typeof HumanDecision_Outcome>;
+    decidedByUserId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ServiceEngagementAssignmentSettleClientApprovalDto = z.infer<typeof ServiceEngagementAssignmentSettleClientApprovalDtoSchema>;
+/**
+ * The client-branchable codes a service-provider refusal carries (all answer 409 CONFLICT: the caller is
+ * authorized and the payload is valid; the current STATE forbids the write).
+ */
+export declare enum ServiceProviderRelationshipErrorCode {
+    /** A PROPOSED, ACTIVE or SUSPENDED relationship already links this firm and this client. */
+    SERVICE_PROVIDER_RELATIONSHIP_ALREADY_LIVE = "SERVICE_PROVIDER_RELATIONSHIP_ALREADY_LIVE",
+    /** The expert is one of the client's OWN members; a person is in an organization one way at a time. */
+    SERVICE_PROVIDER_ASSIGNMENT_CONFLICTS_WITH_MEMBERSHIP = "SERVICE_PROVIDER_ASSIGNMENT_CONFLICTS_WITH_MEMBERSHIP",
+    /** The expert already serves this client under another live relationship. */
+    SERVICE_PROVIDER_ASSIGNMENT_ALREADY_LIVE = "SERVICE_PROVIDER_ASSIGNMENT_ALREADY_LIVE",
+    /** A provider membership's roles belong to the relationship; change the relationship, not the membership. */
+    SERVICE_PROVIDER_MEMBERSHIP_ROLES_OWNED_BY_RELATIONSHIP = "SERVICE_PROVIDER_MEMBERSHIP_ROLES_OWNED_BY_RELATIONSHIP",
+    /**
+     * An invitation to a person who has a PROVIDER membership in this organization. A live one: the person is
+     * already here through a firm. An ended one (INACTIVE): remove that membership first, then invite.
+     */
+    SERVICE_PROVIDER_MEMBERSHIP_CONFLICTS_WITH_INVITATION = "SERVICE_PROVIDER_MEMBERSHIP_CONFLICTS_WITH_INVITATION",
+    /** The other party's organization type is not one this relationship's provider type serves (or does not serve at all). */
+    SERVICE_PROVIDER_ORGANIZATION_TYPE_NOT_ELIGIBLE = "SERVICE_PROVIDER_ORGANIZATION_TYPE_NOT_ELIGIBLE",
+    /** The side that proposed tried to accept its own proposal. */
+    SERVICE_PROVIDER_PROPOSAL_ACCEPTED_BY_PROPOSER = "SERVICE_PROVIDER_PROPOSAL_ACCEPTED_BY_PROPOSER",
+    /** The requested role is not one of the provider type's `providerRoles`. */
+    SERVICE_PROVIDER_ROLE_NOT_DECLARED = "SERVICE_PROVIDER_ROLE_NOT_DECLARED",
+    /** A requested organization unit is not a unit of the client organization. */
+    SERVICE_PROVIDER_UNIT_NOT_IN_CLIENT = "SERVICE_PROVIDER_UNIT_NOT_IN_CLIENT",
+    /** Assignment needs an ACTIVE engagement and an ACTIVE, ordinary member of the firm. */
+    SERVICE_PROVIDER_ASSIGNMENT_NOT_ELIGIBLE = "SERVICE_PROVIDER_ASSIGNMENT_NOT_ELIGIBLE",
+    /**
+     * The client SUSPENDED this expert's membership. That is the client's decision about one person, and a
+     * firm's assignment may not undo it: the client reactivates the membership first.
+     */
+    SERVICE_PROVIDER_EXPERT_SUSPENDED_BY_CLIENT = "SERVICE_PROVIDER_EXPERT_SUSPENDED_BY_CLIENT",
+    /** The OAuth client to admit is not an ACTIVE client owned by the provider organization. */
+    SERVICE_PROVIDER_MACHINE_CLIENT_NOT_ELIGIBLE = "SERVICE_PROVIDER_MACHINE_CLIENT_NOT_ELIGIBLE"
+}
+/** @wildo_source:part:end saas.models.organizations.service-provider-relationships */
+/** The part of an organization type definition the relationship rules read. */
+export type ServiceProviderOrganizationTypeView = {
+    readonly availableOrgRoles?: readonly unknown[];
+    readonly acceptsServiceProviders?: {
+        readonly defaultExpertAdmissionPolicy?: ServiceProviderExpertAdmissionPolicy;
+        readonly securityCriticalCapabilityMaxDays?: number;
+        readonly expertApprovalDeadlines?: ReviewDeadlinesDeclaration;
+    };
+    readonly servesAsProvider?: {
+        readonly clientOrganizationTypes: readonly string[];
+        readonly providerRoles: readonly string[];
+        readonly defaultProviderRole: string;
+    };
+};
+/**
+ * May an organization of `providerType` enter a relationship with an organization of `clientType`, and
+ * with which role? The ONE rule both sides' verbs apply (propose, accept, amend) — so a relationship can
+ * never be accepted on terms that could not have been proposed.
+ *
+ * Returns the resolved role, or the refusal code. Fails closed on anything undeclared.
+ */
+export declare function resolveServiceProviderRelationshipTerms(input: {
+    readonly organizationTypes: Readonly<Record<string, ServiceProviderOrganizationTypeView>> | undefined;
+    readonly providerOrganizationType: string | undefined;
+    readonly clientOrganizationType: string | undefined;
+    /** The role asked for; absent ⇒ the provider type's `defaultProviderRole`. */
+    readonly requestedRole?: string;
+}): {
+    readonly allowed: true;
+    readonly role: string;
+} | {
+    readonly allowed: false;
+    readonly code: ServiceProviderRelationshipErrorCode;
+};
+/** Why a `servesAsProvider` declaration was refused at startup. */
+export declare enum ServiceProviderDeclarationViolationKind {
+    /** A provider role whose `inheritFrom` chain reaches `ORG_ADMIN` — a relationship must never confer administration. */
+    PROVIDER_ROLE_REACHES_ADMINISTRATION = "PROVIDER_ROLE_REACHES_ADMINISTRATION",
+    /** A provider role unknown to the organization role table. */
+    PROVIDER_ROLE_UNDECLARED = "PROVIDER_ROLE_UNDECLARED",
+    /** A provider role a client type does not list in `availableOrgRoles`. */
+    PROVIDER_ROLE_UNAVAILABLE_IN_CLIENT_TYPE = "PROVIDER_ROLE_UNAVAILABLE_IN_CLIENT_TYPE",
+    /** `defaultProviderRole` is not one of `providerRoles`. */
+    DEFAULT_PROVIDER_ROLE_NOT_DECLARED = "DEFAULT_PROVIDER_ROLE_NOT_DECLARED",
+    /** A client organization type that is not declared. */
+    CLIENT_ORGANIZATION_TYPE_UNDECLARED = "CLIENT_ORGANIZATION_TYPE_UNDECLARED",
+    /**
+     * A provider role that is a delegated capability role (`ORG_DELEGATED_*`, #1631). A capability is conferred ONLY by a
+     * live, dated grant the client can revoke; as a provider role it would ride every assignment for the whole
+     * relationship, with no term, no owner-only verb and no grant row — the standing access the grant exists to prevent.
+     */
+    PROVIDER_ROLE_IS_DELEGATED_CAPABILITY = "PROVIDER_ROLE_IS_DELEGATED_CAPABILITY"
+}
+/**
+ * Validate every `servesAsProvider` declaration against the LIVE organization role table.
+ *
+ * `administrationAnchorRole` is `ORG_ADMIN`; a provider role reaches it when the hierarchy walk of that
+ * role (the one the authorization layer uses) includes it — so a custom role inheriting from `ORG_ADMIN`
+ * is refused exactly like `ORG_ADMIN` itself.
+ */
+export declare function collectServiceProviderDeclarationViolations(input: {
+    readonly organizationTypes: Readonly<Record<string, ServiceProviderOrganizationTypeView>> | undefined;
+    readonly administrationAnchorRole: string;
+    /** The role's `inheritFrom` walk in the ORGANIZATIONS table; empty ⇒ the role is not declared. */
+    readonly organizationRoleHierarchy: (role: string) => readonly string[];
+}): {
+    providerOrganizationType: string;
+    kind: ServiceProviderDeclarationViolationKind;
+    subject: string;
+}[];
+/** @wildo_source:part:start saas.models.organizations.service-provider-relationships */
+/**
+ * The client's verbs. Kept with the vocabulary, not the resources-config, for the reason recorded on
+ * `PlatformAccessGrants_Operations`: authorization and batch code need the names without dragging
+ * resource-configuration evaluation into their module graph.
+ *
+ * No generic CREATE / UPDATE: every field's server authorship IS the control.
+ */
+export declare enum ServiceProviderRelationships_Operations {
+    /** Client ORG_OWNER proposes a relationship to a firm. The proposal is the client's consent. */
+    PROPOSE = "propose",
+    /** Client ORG_OWNER accepts a FIRM's proposal (step-up). Never available to the proposing side. */
+    ACCEPT = "accept",
+    /** Client ORG_ADMIN refuses a firm's proposal. */
+    DECLINE = "decline",
+    SUSPEND = "suspend",
+    RESUME = "resume",
+    TERMINATE = "terminate",
+    /** Client ORG_OWNER changes role, units or term (step-up). The firm cannot widen what the client granted. */
+    AMEND_SCOPE = "amendScope",
+    ADMIT_MACHINE_CLIENT = "admitMachineClient",
+    REMOVE_MACHINE_CLIENT = "removeMachineClient",
+    /** ACTIVE → EXPIRED past `endsAt`, dispatched by the credential-expiry sweep only. */
+    EXPIRE = "expire",
+    /** Client ORG_OWNER decides whether the firm's own identity provider's MFA counts here (#1633, step-up). */
+    SET_PROVIDER_MFA_TRUST = "setProviderMfaTrust",
+    /** Client ORG_ADMIN decides how much the firm's expert-activity feed may say about work here (#1632). */
+    SET_ACTIVITY_FEED_DISCLOSURE = "setActivityFeedDisclosure",
+    /** Client ORG_ADMIN changes how the firm's experts are admitted (#1612). Not retroactive. The firm has no such verb. */
+    SET_EXPERT_ADMISSION_POLICY = "setExpertAdmissionPolicy"
+}
+/** The firm's verbs, on its own mirror. */
+export declare enum ServiceEngagements_Operations {
+    /** Firm ORG_ADMIN proposes a relationship to a client organization. */
+    PROPOSE = "propose",
+    /** Firm ORG_ADMIN accepts a CLIENT's proposal. */
+    ACCEPT = "accept",
+    /** Firm ORG_ADMIN ends the relationship, or withdraws its own pending proposal. */
+    WITHDRAW = "withdraw"
+}
+export declare enum ServiceEngagementAssignments_Operations {
+    /** Firm ORG_ADMIN designates one of its members to serve an ACTIVE engagement. */
+    ASSIGN = "assign",
+    /** Ends an ACTIVE assignment, or withdraws one still awaiting the client's approval (#1612). */
+    UNASSIGN = "unassign",
+    /**
+     * Apply the client's answer to a per-expert approval (#1612) — INTERNAL only, reached through the human-decision
+     * answer path after the answerer was authorized there. Approval re-checks everything admission depends on,
+     * inside one transaction, before creating the membership.
+     */
+    SETTLE_CLIENT_APPROVAL = "settleClientApproval"
+}
+/** @wildo_source:part:end saas.models.organizations.service-provider-relationships */
+/**
+ * The admission policy a relationship starts with (#1612): the CLIENT's explicit choice when it made one, else the
+ * client organization type's declared default, else {@link ServiceProviderExpertAdmissionPolicy.RELATIONSHIP_APPROVES_ASSIGNED_EXPERTS}.
+ *
+ * The firm's type is never consulted: the choice belongs to the party whose tenant the experts enter.
+ */
+export declare function resolveServiceProviderExpertAdmissionPolicy(input: {
+    readonly organizationTypes: Readonly<Record<string, ServiceProviderOrganizationTypeView>> | undefined;
+    readonly clientOrganizationType: string | undefined;
+    /** The client's own choice on this request — only ever read from a CLIENT verb. */
+    readonly clientChoice?: ServiceProviderExpertAdmissionPolicy;
+}): ServiceProviderExpertAdmissionPolicy;
+/**
+ * Who may answer a per-expert approval (#1612): the CLIENT organization's administrator ROLE — ORG_ADMIN, which an
+ * ORG_OWNER holds through the role hierarchy — organization-wide, and never a named person. Derived from the
+ * assignment rather than stored beside it, so it cannot drift from the organization the expert would enter.
+ *
+ * A provider role never reaches ORG_ADMIN (refused at startup), so no firm's expert can answer for the client.
+ */
+export declare function serviceProviderExpertApprovalRoute(clientOrganizationId: string): HumanDecision_Route;
+/**
+ * The question a client's administrators are asked about one expert (#1612), in the one decision shape.
+ *
+ * The title and description are the host's authored account for readers with no screen (a trail, a CLI); an inbox
+ * renders its own translated words from the card's subject. Two options: APPROVE proceeds, REJECT ends the waiting
+ * assignment. Its lapse is armed on the assignment (#1909) and shown on the card; the request itself carries none.
+ */
+export declare function serviceProviderExpertApprovalRequest(input: {
+    readonly decisionId: string;
+    readonly requestedAt: string;
+    readonly providerOrganizationName?: string;
+    readonly role: string;
+}): HumanDecision_Request;
+/**
+ * Everything wrong with a client organization type's `acceptsServiceProviders.expertApprovalDeadlines` (#1909), as
+ * sentences naming the fix. Startup refuses a type with any. On top of #1628's checks for a ROLE route:
+ *
+ * - no `claim` target and no CLAIM-stage rule — this plane offers no claim, so a CLAIM clock could only ever be missed;
+ * - no REASSIGN rule — the route is always the client's administrators, never a named person, so it cannot move;
+ * - no `pauseStates` — this plane offers no pause, so a declared pause state could never be entered.
+ *
+ * A declaration asking for something the plane cannot do is refused rather than half-honoured: a setting that looks
+ * like a control and does nothing is the defect this check exists to prevent.
+ */
+export declare function serviceProviderExpertApprovalDeadlinesIssues(declaration: ReviewDeadlinesDeclaration | undefined, context: {
+    readonly calendarDeclared: boolean;
+}): string[];
+/** The clock columns an assignment is armed with at `assign` (#1909). */
+export interface ServiceProviderExpertApprovalClocks {
+    readonly approvalLapseAt: Date;
+    readonly approvalDecisionDeadlineAt: Date;
+    readonly approvalDecisionWarningAt: Date | null;
+    readonly approvalDecisionClockBasis: ReviewClockBasis;
+    readonly approvalNextDueAt: Date;
+}
+/**
+ * Arm a pending approval's clocks at `assign` (#1909), with #1628's model. A type declaring nothing gets the
+ * framework's defaults — the same lapse window and DECISION reminder every human decision gets — so a pending
+ * approval no longer waits forever; the CLAIM target is never armed on this plane.
+ */
+export declare function armServiceProviderExpertApprovalClocks(input: {
+    readonly requestedAt: Date;
+    readonly declaration: ReviewDeadlinesDeclaration | undefined;
+    readonly calendar: ReviewCalendar | undefined;
+}): ServiceProviderExpertApprovalClocks;
+/** The part of an assignment row its clocks are read from. */
+export interface ServiceProviderExpertApprovalClockRow {
+    readonly approvalLapseAt?: Date | string | null;
+    readonly approvalDecisionDeadlineAt?: Date | string | null;
+    readonly approvalDecisionWarningAt?: Date | string | null;
+    readonly approvalDecisionWarningFiredAt?: Date | string | null;
+    readonly approvalDecisionMissedFiredAt?: Date | string | null;
+}
+/** The DECISION stages due at `now`, in firing order (#1909). */
+export declare function dueServiceProviderExpertApprovalStages(row: ServiceProviderExpertApprovalClockRow, now: Date): ReviewDeadlineStage[];
+/**
+ * What the row's indexed `approvalNextDueAt` holds: the earliest of any stage still to fire and the lapse. The lapse
+ * is included because this plane's one sweep ends the approval too; `null` for a row with no clock.
+ */
+export declare function serviceProviderExpertApprovalNextDueAt(row: ServiceProviderExpertApprovalClockRow): Date | null;
+//# sourceMappingURL=service-provider-relationships.shared.schemas.d.ts.map

package/dist/esm/organizations/service-provider-relationships.shared.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-provider-relationships.shared.schemas.d.ts","sourceRoot":"","sources":["../../../src/organizations/service-provider-relationships.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AAE7F,OAAO,EAAE,qCAAqC,EAAE,uBAAuB,EAAE,MAAM,mDAAmD,CAAC;AACnI,OAAO,EACL,qBAAqB,EAGrB,gBAAgB,EAChB,mBAAmB,EAEnB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACzB,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAML,KAAK,cAAc,EACnB,KAAK,0BAA0B,EAChC,MAAM,iDAAiD,CAAC;AAIzD,wIAAwI;AACxI;;;;;;;GAOG;AACH,oBAAY,iCAAiC;IAC3C,iEAAiE;IACjE,QAAQ,aAAa;IACrB,+EAA+E;IAC/E,MAAM,WAAW;IACjB,4EAA4E;IAC5E,SAAS,cAAc;IACvB,wDAAwD;IACxD,QAAQ,aAAa;IACrB;;;OAGG;IACH,SAAS,cAAc;IACvB;;;OAGG;IACH,UAAU,eAAe;IACzB,uGAAuG;IACvG,OAAO,YAAY;CACpB;AAED,uGAAuG;AACvG,eAAO,MAAM,2CAA2C,EAAE,SAAS,iCAAiC,EAInG,CAAC;AAEF,6GAA6G;AAC7G,eAAO,MAAM,+CAA+C,EAAE,SAAS,iCAAiC,EAKvG,CAAC;AAEF,qFAAqF;AACrF,oBAAY,qCAAqC;IAC/C,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB,aAAa,kBAAkB;IAC/B,UAAU,eAAe;IACzB,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB;;;OAGG;IACH,+BAA+B,oCAAoC;CACpE;AAED;;;;;;;;;;GAUG;AACH,oBAAY,oCAAoC;IAC9C,oGAAoG;IACpG,sCAAsC,2CAA2C;IACjF;;;OAGG;IACH,2BAA2B,gCAAgC;CAC5D;AAED,8DAA8D;AAC9D,oBAAY,iCAAiC;IAC3C,iGAAiG;IACjG,MAAM,WAAW;IACjB;;;OAGG;IACH,KAAK,UAAU;IACf;;;;OAIG;IACH,uBAAuB,4BAA4B;IACnD;;;;OAIG;IACH,MAAM,WAAW;IACjB,4HAA4H;IAC5H,MAAM,WAAW;CAClB;AAED,kIAAkI;AAClI,eAAO,MAAM,2CAA2C,EAAE,SAAS,iCAAiC,EAGnG,CAAC;AAEF;;;GAGG;AACH,oBAAY,yCAAyC;IACnD,iDAAiD;IACjD,iBAAiB,sBAAsB;IACvC,wGAAwG;IACxG,8BAA8B,mCAAmC;IACjE,wIAAwI;IACxI,yBAAyB,8BAA8B;IACvD,4IAA4I;IAC5I,gCAAgC,qCAAqC;CACtE;AAED;;;GAGG;AACH,oBAAY,mCAAmC;IAC7C,OAAO,YAAY;IACnB,MAAM,WAAW;CAClB;AAED,sFAAsF;AAEtF;;;;;;;GAOG;AACH,wBAAgB,uCAAuC,CACrD,YAAY,EAAE;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EACtG,GAAG,EAAE,IAAI,GACR,OAAO,CAMT;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAQpE;AAMD,0EAA0E;AAC1E,MAAM,MAAM,gCAAgC,GAAG;IAC7C,QAAQ,CAAC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IAChD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;CAC1C,CAAC;AAEF;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,YAAY,EAAE;IAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;CAAE,EACjI,cAAc,EAAE,MAAM,EACtB,sBAAsB,EAAE,MAAM;AAC9B;;;;GAIG;AACH,eAAe,GAAE,SAAS,MAAM,EAAO,GACtC,yBAAyB,EAAE,CAoB7B;AAED,uHAAuH;AACvH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,sCAAsC,EAAE,MAAM,CAAC;IACxD,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;CACzC;AAED;;;;;;;;;GASG;AACH,wBAAgB,sCAAsC,CACpD,cAAc,EAAE,SAAS,yBAAyB,EAAE,GAAG,SAAS,EAChE,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,+BAA+B,GAAG,SAAS,CAY7C;AAED,qGAAqG;AACrG,eAAO,MAAM,4BAA4B,aAAa,CAAC;AAoBvD,wFAAwF;AACxF;;;GAGG;AACH,eAAO,MAAM,6CAA6C;;;iBAMxD,CAAC;AACH,MAAM,MAAM,uCAAuC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6CAA6C,CAAC,CAAC;AAEpH;;;;;GAKG;AACH,wBAAgB,oCAAoC,CAClD,YAAY,EAAE,IAAI,CAAC,2BAA2B,EAAE,0BAA0B,GAAG,0BAA0B,CAAC,GAAG,IAAI,GAAG,SAAS,EAC3H,aAAa,EAAE,MAAM,EACrB,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAIT;AAED;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAoH5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;iBAsDlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;iBA2E5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F;;;;;GAKG;AACH,eAAO,MAAM,wDAAwD;;;;iBAKnE,CAAC;AACH,MAAM,MAAM,kDAAkD,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wDAAwD,CAAC,CAAC;AAE1I;;;GAGG;AACH,oBAAY,oCAAoC;IAC9C,4FAA4F;IAC5F,0CAA0C,+CAA+C;IACzF,uGAAuG;IACvG,qDAAqD,0DAA0D;IAC/G,6EAA6E;IAC7E,wCAAwC,6CAA6C;IACrF,6GAA6G;IAC7G,uDAAuD,4DAA4D;IACnH;;;OAGG;IACH,qDAAqD,0DAA0D;IAC/G,0HAA0H;IAC1H,+CAA+C,oDAAoD;IACnG,+DAA+D;IAC/D,8CAA8C,mDAAmD;IACjG,4EAA4E;IAC5E,kCAAkC,uCAAuC;IACzE,8EAA8E;IAC9E,mCAAmC,wCAAwC;IAC3E,wFAAwF;IACxF,wCAAwC,6CAA6C;IACrF;;;OAGG;IACH,2CAA2C,gDAAgD;IAC3F,4FAA4F;IAC5F,4CAA4C,iDAAiD;CAC9F;AACD,sFAAsF;AAEtF,+EAA+E;AAC/E,MAAM,MAAM,mCAAmC,GAAG;IAChD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAChD,QAAQ,CAAC,uBAAuB,CAAC,EAAE;QACjC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,oCAAoC,CAAC;QAC7E,QAAQ,CAAC,iCAAiC,CAAC,EAAE,MAAM,CAAC;QACpD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,0BAA0B,CAAC;KAC/D,CAAC;IACF,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAC1B,QAAQ,CAAC,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;QACpD,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;QAC1C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;KACtC,CAAC;CACH,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,uCAAuC,CAAC,KAAK,EAAE;IAC7D,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAC,GAAG,SAAS,CAAC;IACtG,QAAQ,CAAC,wBAAwB,EAAE,MAAM,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,SAAS,CAAC;IACpD,8EAA8E;IAC9E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC,GACG;IAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,oCAAoC,CAAA;CAAE,CAcnF;AAED,mEAAmE;AACnE,oBAAY,uCAAuC;IACjD,uHAAuH;IACvH,oCAAoC,yCAAyC;IAC7E,8DAA8D;IAC9D,wBAAwB,6BAA6B;IACrD,0EAA0E;IAC1E,wCAAwC,6CAA6C;IACrF,2DAA2D;IAC3D,kCAAkC,uCAAuC;IACzE,uDAAuD;IACvD,mCAAmC,wCAAwC;IAC3E;;;;OAIG;IACH,qCAAqC,0CAA0C;CAChF;AAED;;;;;;GAMG;AACH,wBAAgB,2CAA2C,CAAC,KAAK,EAAE;IACjE,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAC,GAAG,SAAS,CAAC;IACtG,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,kGAAkG;IAClG,QAAQ,CAAC,yBAAyB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,MAAM,EAAE,CAAC;CACzE,GAAG;IAAE,wBAAwB,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,uCAAuC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CA4BzG;AAED,wFAAwF;AACxF;;;;;;GAMG;AACH,oBAAY,uCAAuC;IACjD,gGAAgG;IAChG,OAAO,YAAY;IACnB,mGAAmG;IACnG,MAAM,WAAW;IACjB,kDAAkD;IAClD,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,6GAA6G;IAC7G,WAAW,eAAe;IAC1B,oBAAoB,uBAAuB;IAC3C,qBAAqB,wBAAwB;IAC7C,sFAAsF;IACtF,MAAM,WAAW;IACjB,4GAA4G;IAC5G,sBAAsB,wBAAwB;IAC9C,yGAAyG;IACzG,4BAA4B,8BAA8B;IAC1D,wHAAwH;IACxH,2BAA2B,6BAA6B;CACzD;AAED,2CAA2C;AAC3C,oBAAY,6BAA6B;IACvC,uEAAuE;IACvE,OAAO,YAAY;IACnB,kDAAkD;IAClD,MAAM,WAAW;IACjB,mFAAmF;IACnF,QAAQ,aAAa;CACtB;AAED,oBAAY,uCAAuC;IACjD,kFAAkF;IAClF,MAAM,WAAW;IACjB,gGAAgG;IAChG,QAAQ,aAAa;IACrB;;;;OAIG;IACH,sBAAsB,yBAAyB;CAChD;AACD,sFAAsF;AAEtF;;;;;GAKG;AACH,wBAAgB,2CAA2C,CAAC,KAAK,EAAE;IACjE,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAC,GAAG,SAAS,CAAC;IACtG,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,SAAS,CAAC;IACpD,mFAAmF;IACnF,QAAQ,CAAC,YAAY,CAAC,EAAE,oCAAoC,CAAC;CAC9D,GAAG,oCAAoC,CAMvC;AAED;;;;;;GAMG;AACH,wBAAgB,kCAAkC,CAAC,oBAAoB,EAAE,MAAM,GAAG,mBAAmB,CAEpG;AAED;;;;;;GAMG;AACH,wBAAgB,oCAAoC,CAAC,KAAK,EAAE;IAC1D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GAAG,qBAAqB,CAcxB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4CAA4C,CAC1D,WAAW,EAAE,0BAA0B,GAAG,SAAS,EACnD,OAAO,EAAE;IAAE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAA;CAAE,GAC9C,MAAM,EAAE,CAcV;AAED,yEAAyE;AACzE,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC;IAC/B,QAAQ,CAAC,0BAA0B,EAAE,IAAI,CAAC;IAC1C,QAAQ,CAAC,yBAAyB,EAAE,IAAI,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,0BAA0B,EAAE,gBAAgB,CAAC;IACtD,QAAQ,CAAC,iBAAiB,EAAE,IAAI,CAAC;CAClC;AAED;;;;GAIG;AACH,wBAAgB,sCAAsC,CAAC,KAAK,EAAE;IAC5D,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,SAAS,CAAC;CAC/C,GAAG,mCAAmC,CAUtC;AAED,8DAA8D;AAC9D,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,0BAA0B,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IAC3D,QAAQ,CAAC,yBAAyB,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IAC1D,QAAQ,CAAC,8BAA8B,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IAC/D,QAAQ,CAAC,6BAA6B,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;CAC/D;AA0BD,iEAAiE;AACjE,wBAAgB,sCAAsC,CAAC,GAAG,EAAE,qCAAqC,EAAE,GAAG,EAAE,IAAI,GAAG,mBAAmB,EAAE,CAEnI;AAED;;;GAGG;AACH,wBAAgB,sCAAsC,CAAC,GAAG,EAAE,qCAAqC,GAAG,IAAI,GAAG,IAAI,CAK9G"}