@xemahq/platform-common 0.1.3

package/dist/lib/redaction/index.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_REDACTION_RULES = exports.REDACT_RESPONSE_KEY = exports.RedactResponse = exports.RedactionInterceptor = exports.RedactionService = void 0;
+var redaction_service_1 = require("./redaction.service");
+Object.defineProperty(exports, "RedactionService", { enumerable: true, get: function () { return redaction_service_1.RedactionService; } });
+var redaction_interceptor_1 = require("./redaction.interceptor");
+Object.defineProperty(exports, "RedactionInterceptor", { enumerable: true, get: function () { return redaction_interceptor_1.RedactionInterceptor; } });
+Object.defineProperty(exports, "RedactResponse", { enumerable: true, get: function () { return redaction_interceptor_1.RedactResponse; } });
+Object.defineProperty(exports, "REDACT_RESPONSE_KEY", { enumerable: true, get: function () { return redaction_interceptor_1.REDACT_RESPONSE_KEY; } });
+var default_rules_1 = require("./default-rules");
+Object.defineProperty(exports, "DEFAULT_REDACTION_RULES", { enumerable: true, get: function () { return default_rules_1.DEFAULT_REDACTION_RULES; } });
+//# sourceMappingURL=index.js.map

package/dist/lib/redaction/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/redaction/index.ts"],"names":[],"mappings":";;;AAAA,yDAAuD;AAA9C,qHAAA,gBAAgB,OAAA;AACzB,iEAIiC;AAH/B,6HAAA,oBAAoB,OAAA;AACpB,uHAAA,cAAc,OAAA;AACd,4HAAA,mBAAmB,OAAA;AAErB,iDAA0D;AAAjD,wHAAA,uBAAuB,OAAA"}

package/dist/lib/redaction/redaction-rule.d.ts

@@ -0,0 +1,8 @@
+export interface RedactionRule {
+    readonly name: string;
+    readonly description: string;
+    readonly fieldName?: RegExp;
+    readonly stringPattern?: RegExp;
+    readonly replacement: string;
+}
+//# sourceMappingURL=redaction-rule.d.ts.map

package/dist/lib/redaction/redaction-rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction-rule.d.ts","sourceRoot":"","sources":["../../../src/lib/redaction/redaction-rule.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,aAAa;IAE5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAM7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAM5B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAKhC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B"}

package/dist/lib/redaction/redaction-rule.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=redaction-rule.js.map

package/dist/lib/redaction/redaction-rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction-rule.js","sourceRoot":"","sources":["../../../src/lib/redaction/redaction-rule.ts"],"names":[],"mappings":""}

package/dist/lib/redaction/redaction.interceptor.d.ts

@@ -0,0 +1,11 @@
+import { CallHandler, ExecutionContext, NestInterceptor } from '@nestjs/common';
+import { Observable } from 'rxjs';
+import { RedactionService } from './redaction.service';
+export declare const REDACT_RESPONSE_KEY = "xema:redact-response";
+export declare const RedactResponse: () => ClassDecorator & MethodDecorator;
+export declare class RedactionInterceptor implements NestInterceptor {
+    private readonly redaction;
+    constructor(redaction: RedactionService);
+    intercept(context: ExecutionContext, next: CallHandler): Observable<unknown>;
+}
+//# sourceMappingURL=redaction.interceptor.d.ts.map

package/dist/lib/redaction/redaction.interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.interceptor.d.ts","sourceRoot":"","sources":["../../../src/lib/redaction/redaction.interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,gBAAgB,EAEhB,eAAe,EAEhB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAO,MAAM,MAAM,CAAC;AAGvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAavD,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAC1D,eAAO,MAAM,cAAc,QAAO,cAAc,GAAG,eACX,CAAC;AAEzC,qBACa,oBAAqB,YAAW,eAAe;IAC9C,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,gBAAgB;IAExD,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC;CAU7E"}

package/dist/lib/redaction/redaction.interceptor.js

@@ -0,0 +1,41 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RedactionInterceptor = exports.RedactResponse = exports.REDACT_RESPONSE_KEY = void 0;
+const common_1 = require("@nestjs/common");
+const rxjs_1 = require("rxjs");
+const decorator_metadata_1 = require("../../nestjs/decorator-metadata");
+const redaction_service_1 = require("./redaction.service");
+exports.REDACT_RESPONSE_KEY = 'xema:redact-response';
+const RedactResponse = () => (0, common_1.SetMetadata)(exports.REDACT_RESPONSE_KEY, true);
+exports.RedactResponse = RedactResponse;
+let RedactionInterceptor = class RedactionInterceptor {
+    redaction;
+    constructor(redaction) {
+        this.redaction = redaction;
+    }
+    intercept(context, next) {
+        const enabled = (0, decorator_metadata_1.readDecoratorOverride)(exports.REDACT_RESPONSE_KEY, [
+            context.getHandler(),
+            context.getClass(),
+        ]);
+        if (!enabled) {
+            return next.handle();
+        }
+        return next.handle().pipe((0, rxjs_1.map)((value) => this.redaction.redact(value)));
+    }
+};
+exports.RedactionInterceptor = RedactionInterceptor;
+exports.RedactionInterceptor = RedactionInterceptor = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [redaction_service_1.RedactionService])
+], RedactionInterceptor);
+//# sourceMappingURL=redaction.interceptor.js.map

package/dist/lib/redaction/redaction.interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.interceptor.js","sourceRoot":"","sources":["../../../src/lib/redaction/redaction.interceptor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAMwB;AACxB,+BAAuC;AAEvC,wEAAwE;AACxE,2DAAuD;AAa1C,QAAA,mBAAmB,GAAG,sBAAsB,CAAC;AACnD,MAAM,cAAc,GAAG,GAAqC,EAAE,CACnE,IAAA,oBAAW,EAAC,2BAAmB,EAAE,IAAI,CAAC,CAAC;AAD5B,QAAA,cAAc,kBACc;AAGlC,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IACF;IAA7B,YAA6B,SAA2B;QAA3B,cAAS,GAAT,SAAS,CAAkB;IAAG,CAAC;IAE5D,SAAS,CAAC,OAAyB,EAAE,IAAiB;QACpD,MAAM,OAAO,GAAG,IAAA,0CAAqB,EAAU,2BAAmB,EAAE;YAClE,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAA,UAAG,EAAC,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC;CACF,CAAA;AAbY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;qCAE6B,oCAAgB;GAD7C,oBAAoB,CAahC"}

package/dist/lib/redaction/redaction.service.d.ts

@@ -0,0 +1,9 @@
+import type { RedactionRule } from './redaction-rule';
+export declare class RedactionService {
+    private readonly rules;
+    constructor();
+    static withRules(rules: readonly RedactionRule[]): RedactionService;
+    redact<T>(value: T): T;
+    private walk;
+}
+//# sourceMappingURL=redaction.service.d.ts.map

package/dist/lib/redaction/redaction.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.service.d.ts","sourceRoot":"","sources":["../../../src/lib/redaction/redaction.service.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAsBtD,qBACa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA2B;;IAajD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,GAAG,gBAAgB;IAUnE,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC;IAItB,OAAO,CAAC,IAAI;CAqDb"}

package/dist/lib/redaction/redaction.service.js

@@ -0,0 +1,110 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var RedactionService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RedactionService = void 0;
+const common_1 = require("@nestjs/common");
+const default_rules_1 = require("./default-rules");
+const DISABLED_RULES_ENV = 'REDACTION_DISABLED_RULES';
+let RedactionService = RedactionService_1 = class RedactionService {
+    rules;
+    constructor() {
+        const disabled = parseDisabledRules(process.env[DISABLED_RULES_ENV]);
+        this.rules = default_rules_1.DEFAULT_REDACTION_RULES.filter((r) => !disabled.has(r.name));
+    }
+    static withRules(rules) {
+        const svc = Object.create(RedactionService_1.prototype);
+        const disabled = parseDisabledRules(process.env[DISABLED_RULES_ENV]);
+        svc.rules = rules.filter((r) => !disabled.has(r.name));
+        return svc;
+    }
+    redact(value) {
+        return this.walk(value, undefined, new WeakSet());
+    }
+    walk(value, key, seen) {
+        if (key !== undefined) {
+            for (const rule of this.rules) {
+                if (rule.fieldName && rule.fieldName.test(key)) {
+                    return rule.replacement;
+                }
+            }
+        }
+        if (typeof value === 'string') {
+            return applyStringRules(value, this.rules);
+        }
+        if (Array.isArray(value)) {
+            if (seen.has(value)) {
+                return '[redacted-cycle]';
+            }
+            seen.add(value);
+            let mutated = false;
+            const next = new Array(value.length);
+            for (let i = 0; i < value.length; i++) {
+                const v = value[i];
+                const w = this.walk(v, undefined, seen);
+                if (w !== v) {
+                    mutated = true;
+                }
+                next[i] = w;
+            }
+            seen.delete(value);
+            return mutated ? next : value;
+        }
+        if (value !== null && typeof value === 'object') {
+            if (seen.has(value)) {
+                return '[redacted-cycle]';
+            }
+            seen.add(value);
+            const record = value;
+            let mutated = false;
+            const out = {};
+            for (const k of Object.keys(record)) {
+                const v = record[k];
+                const w = this.walk(v, k, seen);
+                if (w !== v) {
+                    mutated = true;
+                }
+                out[k] = w;
+            }
+            seen.delete(value);
+            return mutated ? out : value;
+        }
+        return value;
+    }
+};
+exports.RedactionService = RedactionService;
+exports.RedactionService = RedactionService = RedactionService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [])
+], RedactionService);
+function applyStringRules(value, rules) {
+    let current = value;
+    for (const rule of rules) {
+        if (!rule.stringPattern) {
+            continue;
+        }
+        if (rule.stringPattern.test(current)) {
+            const regex = new RegExp(rule.stringPattern.source, rule.stringPattern.flags);
+            current = current.replace(regex, rule.replacement);
+        }
+    }
+    return current;
+}
+function parseDisabledRules(raw) {
+    if (!raw) {
+        return new Set();
+    }
+    return new Set(raw
+        .split(',')
+        .map((s) => s.trim())
+        .filter((s) => s.length > 0));
+}
+//# sourceMappingURL=redaction.service.js.map

package/dist/lib/redaction/redaction.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.service.js","sourceRoot":"","sources":["../../../src/lib/redaction/redaction.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAA4C;AAE5C,mDAA0D;AAS1D,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAe/C,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IACV,KAAK,CAA2B;IAQjD;QACE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,GAAG,uCAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,KAA+B;QAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAgB,CAAC,SAAS,CAAqB,CAAC;QAC1E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACpE,GAAsD,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAC1E,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAC7B,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;IAGD,MAAM,CAAI,KAAQ;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,OAAO,EAAE,CAAM,CAAC;IACzD,CAAC;IAEO,IAAI,CAAC,KAAc,EAAE,GAAuB,EAAE,IAAqB;QAGzE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/C,OAAO,IAAI,CAAC,WAAW,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpB,OAAO,kBAAkB,CAAC;YAC5B,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChB,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,IAAI,GAAc,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACnB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;gBACxC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACZ,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;gBACD,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC,EAAE,CAAC;gBAC9B,OAAO,kBAAkB,CAAC;YAC5B,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,KAAgC,CAAC;YAChD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;gBAChC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACZ,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;gBACD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACb,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAe,CAAC,CAAC;YAC7B,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QAC/B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAA;AAjFY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;;GACA,gBAAgB,CAiF5B;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,KAA+B;IACtE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAIrC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAC9E,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAuB;IACjD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,GAAG,CACZ,GAAG;SACA,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAC/B,CAAC;AACJ,CAAC"}

package/dist/lib/request-context.d.ts

@@ -0,0 +1,34 @@
+import { SubjectKind, TokenClass } from '@xemahq/subject-contracts';
+import type { SubjectRef, ActingForRef } from '@xemahq/subject-contracts';
+import type { OrgRole } from '../nestjs/auth/org-role';
+import type { PipelineApprovalMode } from './approval-mode';
+export type WorkScopeType = 'project' | 'pipeline_run' | 'agent_session';
+export interface RequestContext {
+    orgId: string;
+    projectId?: string;
+    subject: SubjectRef;
+    tokenClass: TokenClass;
+    actorChain: ActingForRef[];
+    actorId: string;
+    actorType: 'human' | 'agent' | 'service';
+    orgRoles?: Record<string, OrgRole>;
+    orgRole?: OrgRole;
+    correlationId: string;
+    causationId?: string;
+    authorization?: string;
+    bearerToken?: string;
+    pipelineRunId?: string;
+    pipelinePhaseKey?: string;
+    pipelinePackageId?: string;
+    workScopeType?: WorkScopeType;
+    workScopeId?: string;
+    approvalModeOverride?: PipelineApprovalMode;
+    roles: string[];
+    realmId?: string;
+    actAs?: string;
+}
+export declare const REQUEST_CONTEXT: unique symbol;
+export { SubjectKind, TokenClass };
+export type { SubjectRef, ActingForRef };
+export { OrgRole } from '../nestjs/auth/org-role';
+//# sourceMappingURL=request-context.d.ts.map

package/dist/lib/request-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-context.d.ts","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAO5D,MAAM,MAAM,aAAa,GACrB,SAAS,GACT,cAAc,GACd,eAAe,CAAC;AAEpB,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,OAAO,EAAE,UAAU,CAAC;IAOpB,UAAU,EAAE,UAAU,CAAC;IAMvB,UAAU,EAAE,YAAY,EAAE,CAAC;IAE3B,OAAO,EAAE,MAAM,CAAC;IAMhB,SAAS,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IASzC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IASnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAE5C,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB,OAAO,CAAC,EAAE,MAAM,CAAC;IAYjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAGD,eAAO,MAAM,eAAe,eAA4B,CAAC;AAQzD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AACnC,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/lib/request-context.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrgRole = exports.TokenClass = exports.SubjectKind = exports.REQUEST_CONTEXT = void 0;
+const subject_contracts_1 = require("@xemahq/subject-contracts");
+Object.defineProperty(exports, "SubjectKind", { enumerable: true, get: function () { return subject_contracts_1.SubjectKind; } });
+Object.defineProperty(exports, "TokenClass", { enumerable: true, get: function () { return subject_contracts_1.TokenClass; } });
+exports.REQUEST_CONTEXT = Symbol('REQUEST_CONTEXT');
+var org_role_1 = require("../nestjs/auth/org-role");
+Object.defineProperty(exports, "OrgRole", { enumerable: true, get: function () { return org_role_1.OrgRole; } });
+//# sourceMappingURL=request-context.js.map

package/dist/lib/request-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-context.js","sourceRoot":"","sources":["../../src/lib/request-context.ts"],"names":[],"mappings":";;;AAAA,iEAAoE;AAyG3D,4FAzGA,+BAAW,OAyGA;AAAE,2FAzGA,8BAAU,OAyGA;AARnB,QAAA,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAUzD,oDAAkD;AAAzC,mGAAA,OAAO,OAAA"}

package/dist/lib/run-events/action-types.d.ts

@@ -0,0 +1,40 @@
+export declare const RUN_ACTION_TYPES: readonly ["pause_after_safe_boundary", "resume_run", "stop_run", "approve_gate", "reject_gate", "redo_from_checkpoint", "fork_run_from_checkpoint", "challenge_decision", "comment_on_event", "acknowledge_missed_summary"];
+export type RunActionType = (typeof RUN_ACTION_TYPES)[number];
+export declare const RUN_ACTION_TYPE_SET: ReadonlySet<string>;
+export declare function isRunActionType(value: unknown): value is RunActionType;
+export declare const ACTION_TARGET_TYPES: readonly ["run", "event", "gate", "checkpoint", "phase", "artifact"];
+export type ActionTargetType = (typeof ACTION_TARGET_TYPES)[number];
+export type ActionTarget = {
+    targetType: 'run';
+} | {
+    targetType: 'event';
+    eventId: string;
+} | {
+    targetType: 'gate';
+    gateId: string;
+} | {
+    targetType: 'checkpoint';
+    checkpointEventId: string;
+} | {
+    targetType: 'phase';
+    groupKey: string;
+} | {
+    targetType: 'artifact';
+    artifactId: string;
+};
+export interface ActionPreconditions {
+    expectedSnapshotVersion: number;
+    expectedRunStatus?: string;
+    expectedGroupKey?: string;
+}
+export interface RunHumanActionRequest {
+    actionType: RunActionType;
+    target: ActionTarget;
+    payload?: unknown;
+    preconditions: ActionPreconditions;
+}
+export declare const CHECKPOINT_ELIGIBLE_EVENT_TYPES: readonly ["phase.lifecycle.completed", "phase.step.coordination_completed", "gate.resolved", "artifact.lifecycle.approved"];
+export type CheckpointEligibleEventType = (typeof CHECKPOINT_ELIGIBLE_EVENT_TYPES)[number];
+export declare const CHECKPOINT_ELIGIBLE_EVENT_TYPE_SET: ReadonlySet<string>;
+export declare function isCheckpointEligible(eventType: string): boolean;
+//# sourceMappingURL=action-types.d.ts.map

package/dist/lib/run-events/action-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-types.d.ts","sourceRoot":"","sources":["../../../src/lib/run-events/action-types.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,gBAAgB,6NAWnB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAEnD,CAAC;AAEF,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAEtE;AAID,eAAO,MAAM,mBAAmB,sEAOtB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,MAAM,MAAM,YAAY,GACpB;IAAE,UAAU,EAAE,KAAK,CAAA;CAAE,GACrB;IAAE,UAAU,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,UAAU,EAAE,YAAY,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,UAAU,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAQnD,MAAM,WAAW,mBAAmB;IAClC,uBAAuB,EAAE,MAAM,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAID,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,aAAa,CAAC;IAC1B,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,mBAAmB,CAAC;CACpC;AAUD,eAAO,MAAM,+BAA+B,6HAKlC,CAAC;AAEX,MAAM,MAAM,2BAA2B,GACrC,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,eAAO,MAAM,kCAAkC,EAAE,WAAW,CAAC,MAAM,CAElE,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE/D"}

package/dist/lib/run-events/action-types.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CHECKPOINT_ELIGIBLE_EVENT_TYPE_SET = exports.CHECKPOINT_ELIGIBLE_EVENT_TYPES = exports.ACTION_TARGET_TYPES = exports.RUN_ACTION_TYPE_SET = exports.RUN_ACTION_TYPES = void 0;
+exports.isRunActionType = isRunActionType;
+exports.isCheckpointEligible = isCheckpointEligible;
+exports.RUN_ACTION_TYPES = [
+    'pause_after_safe_boundary',
+    'resume_run',
+    'stop_run',
+    'approve_gate',
+    'reject_gate',
+    'redo_from_checkpoint',
+    'fork_run_from_checkpoint',
+    'challenge_decision',
+    'comment_on_event',
+    'acknowledge_missed_summary',
+];
+exports.RUN_ACTION_TYPE_SET = new Set(exports.RUN_ACTION_TYPES);
+function isRunActionType(value) {
+    return typeof value === 'string' && exports.RUN_ACTION_TYPE_SET.has(value);
+}
+exports.ACTION_TARGET_TYPES = [
+    'run',
+    'event',
+    'gate',
+    'checkpoint',
+    'phase',
+    'artifact',
+];
+exports.CHECKPOINT_ELIGIBLE_EVENT_TYPES = [
+    'phase.lifecycle.completed',
+    'phase.step.coordination_completed',
+    'gate.resolved',
+    'artifact.lifecycle.approved',
+];
+exports.CHECKPOINT_ELIGIBLE_EVENT_TYPE_SET = new Set(exports.CHECKPOINT_ELIGIBLE_EVENT_TYPES);
+function isCheckpointEligible(eventType) {
+    return exports.CHECKPOINT_ELIGIBLE_EVENT_TYPE_SET.has(eventType);
+}
+//# sourceMappingURL=action-types.js.map

package/dist/lib/run-events/action-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-types.js","sourceRoot":"","sources":["../../../src/lib/run-events/action-types.ts"],"names":[],"mappings":";;;AAwBA,0CAEC;AAkED,oDAEC;AAzFY,QAAA,gBAAgB,GAAG;IAC9B,2BAA2B;IAC3B,YAAY;IACZ,UAAU;IACV,cAAc;IACd,aAAa;IACb,sBAAsB;IACtB,0BAA0B;IAC1B,oBAAoB;IACpB,kBAAkB;IAClB,4BAA4B;CACpB,CAAC;AAIE,QAAA,mBAAmB,GAAwB,IAAI,GAAG,CAC7D,wBAAgB,CACjB,CAAC;AAEF,SAAgB,eAAe,CAAC,KAAc;IAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,2BAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAIY,QAAA,mBAAmB,GAAG;IACjC,KAAK;IACL,OAAO;IACP,MAAM;IACN,YAAY;IACZ,OAAO;IACP,UAAU;CACF,CAAC;AAyCE,QAAA,+BAA+B,GAAG;IAC7C,2BAA2B;IAC3B,mCAAmC;IACnC,eAAe;IACf,6BAA6B;CACrB,CAAC;AAKE,QAAA,kCAAkC,GAAwB,IAAI,GAAG,CAC5E,uCAA+B,CAChC,CAAC;AAEF,SAAgB,oBAAoB,CAAC,SAAiB;IACpD,OAAO,0CAAkC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAC3D,CAAC"}

package/dist/lib/run-events/event-families.d.ts

@@ -0,0 +1,96 @@
+export declare const SEMANTIC_EVENT_TYPES: readonly ["run.lifecycle.started", "run.lifecycle.completed", "run.lifecycle.stopped", "run.lifecycle.cancelled", "run.lifecycle.failed", "run.lifecycle.paused", "run.lifecycle.resumed", "run.cost.updated", "phase.lifecycle.started", "phase.lifecycle.completed", "phase.lifecycle.retrying", "phase.lifecycle.gate_started", "phase.lifecycle.gate_result", "phase.step.planning_started", "phase.step.planning_completed", "phase.step.planning_coverage_gap", "phase.step.packages_started", "phase.step.package_started", "phase.step.package_completed", "phase.step.coordination_started", "phase.step.coordination_completed", "phase.step.template_resolution_started", "phase.step.template_resolution_completed", "phase.skipped_by_policy", "run.lifecycle.timeout_warning", "run.lifecycle.waiting_for_slot", "worker.session.acquiring", "worker.session.acquired", "worker.session.setup", "worker.session.provisioning", "worker.session.phase_changed", "worker.session.initializing", "worker.session.idle", "worker.session.finishing", "worker.session.released", "worker.session.failed", "worker.session.status_change", "worker.session.checkpoint", "capacity.slot.available", "capacity.slot.unavailable", "capacity.limit.reached", "admission.queued", "admission.admitted", "admission.rejected", "admission.timeout", "artifact.lifecycle.proposed", "artifact.lifecycle.validated", "artifact.lifecycle.approved", "artifact.lifecycle.rejected", "artifact.lifecycle.merged", "artifact.lifecycle.superseded", "artifact.lifecycle.archived", "artifact.storage.created", "artifact.storage.versioned", "artifact.storage.finalized", "gate.requested", "gate.check_updated", "gate.vote_cast", "gate.resolved", "gate.convergence_warning", "gate.reviewing", "gate.review_findings", "gate.feedback_dispatched", "gate.artifact_unchanged", "validation.tier1_passed", "validation.tier1_failed", "validation.tier2_passed", "validation.tier2_failed", "validation.tier3_requested", "validation.tier3_passed", "validation.tier3_failed", "blocker.raised", "blocker.resolved", "decision.made", "decision.challenged", "action.required.approval", "action.required.review", "action.required.escalation", "action.resolved", "work_unit.started", "work_unit.exploring", "work_unit.implementing", "work_unit.testing", "work_unit.reviewing", "work_unit.completed", "work_unit.failed", "work_unit.escalated", "escalation.blocked", "escalation.ambiguous", "escalation.human_required", "escalation.context_overflow", "error.detail", "progress.checkpoint", "progress.phase_progress", "policy.applied", "policy.overridden", "audit.sessions_completed", "workforce.resolution_started", "workforce.skill_resolution_started", "workforce.skill_resolution_deterministic_match", "workforce.skill_resolution_llm_fallback", "workforce.skills_resolved", "workforce.structural_gap_detected", "workforce.specialist_detected", "workforce.new_agent_composed", "workforce.built", "integration.sync.completed", "integration.sync.failed", "cu.plan_drafted", "cu.plan_approved", "cu.amendment_requested", "cu.amendment_approved", "cu.executor_started", "cu.executor_finished"];
+export type SemanticEventType = (typeof SEMANTIC_EVENT_TYPES)[number];
+export declare const SEMANTIC_EVENT_TYPE_SET: ReadonlySet<string>;
+export declare function isSemanticEventType(value: unknown): value is SemanticEventType;
+export declare const TRACE_EVENT_TYPES: readonly ["worker.tool_call.started", "worker.tool_call.completed", "worker.tool_call.error", "worker.file_patch.proposed", "worker.file_patch.applied", "worker.file_patch.rejected", "worker.session.todo_updated", "worker.session.created", "worker.session.message_user", "worker.session.message_assistant", "telemetry.token_usage", "telemetry.model_switch", "telemetry.tool_timing", "telemetry.progress_ping", "evidence.attached", "evidence.test_results", "evidence.build_log", "evidence.coverage_report", "conversation.chunk", "cu.todo_completed"];
+export type TraceEventType = (typeof TRACE_EVENT_TYPES)[number];
+export declare const TRACE_EVENT_TYPE_SET: ReadonlySet<string>;
+export declare function isTraceEventType(value: unknown): value is TraceEventType;
+export declare const RUN_EVENT_TYPES: readonly ["run.lifecycle.started", "run.lifecycle.completed", "run.lifecycle.stopped", "run.lifecycle.cancelled", "run.lifecycle.failed", "run.lifecycle.paused", "run.lifecycle.resumed", "run.cost.updated", "phase.lifecycle.started", "phase.lifecycle.completed", "phase.lifecycle.retrying", "phase.lifecycle.gate_started", "phase.lifecycle.gate_result", "phase.step.planning_started", "phase.step.planning_completed", "phase.step.planning_coverage_gap", "phase.step.packages_started", "phase.step.package_started", "phase.step.package_completed", "phase.step.coordination_started", "phase.step.coordination_completed", "phase.step.template_resolution_started", "phase.step.template_resolution_completed", "phase.skipped_by_policy", "run.lifecycle.timeout_warning", "run.lifecycle.waiting_for_slot", "worker.session.acquiring", "worker.session.acquired", "worker.session.setup", "worker.session.provisioning", "worker.session.phase_changed", "worker.session.initializing", "worker.session.idle", "worker.session.finishing", "worker.session.released", "worker.session.failed", "worker.session.status_change", "worker.session.checkpoint", "capacity.slot.available", "capacity.slot.unavailable", "capacity.limit.reached", "admission.queued", "admission.admitted", "admission.rejected", "admission.timeout", "artifact.lifecycle.proposed", "artifact.lifecycle.validated", "artifact.lifecycle.approved", "artifact.lifecycle.rejected", "artifact.lifecycle.merged", "artifact.lifecycle.superseded", "artifact.lifecycle.archived", "artifact.storage.created", "artifact.storage.versioned", "artifact.storage.finalized", "gate.requested", "gate.check_updated", "gate.vote_cast", "gate.resolved", "gate.convergence_warning", "gate.reviewing", "gate.review_findings", "gate.feedback_dispatched", "gate.artifact_unchanged", "validation.tier1_passed", "validation.tier1_failed", "validation.tier2_passed", "validation.tier2_failed", "validation.tier3_requested", "validation.tier3_passed", "validation.tier3_failed", "blocker.raised", "blocker.resolved", "decision.made", "decision.challenged", "action.required.approval", "action.required.review", "action.required.escalation", "action.resolved", "work_unit.started", "work_unit.exploring", "work_unit.implementing", "work_unit.testing", "work_unit.reviewing", "work_unit.completed", "work_unit.failed", "work_unit.escalated", "escalation.blocked", "escalation.ambiguous", "escalation.human_required", "escalation.context_overflow", "error.detail", "progress.checkpoint", "progress.phase_progress", "policy.applied", "policy.overridden", "audit.sessions_completed", "workforce.resolution_started", "workforce.skill_resolution_started", "workforce.skill_resolution_deterministic_match", "workforce.skill_resolution_llm_fallback", "workforce.skills_resolved", "workforce.structural_gap_detected", "workforce.specialist_detected", "workforce.new_agent_composed", "workforce.built", "integration.sync.completed", "integration.sync.failed", "cu.plan_drafted", "cu.plan_approved", "cu.amendment_requested", "cu.amendment_approved", "cu.executor_started", "cu.executor_finished", "worker.tool_call.started", "worker.tool_call.completed", "worker.tool_call.error", "worker.file_patch.proposed", "worker.file_patch.applied", "worker.file_patch.rejected", "worker.session.todo_updated", "worker.session.created", "worker.session.message_user", "worker.session.message_assistant", "telemetry.token_usage", "telemetry.model_switch", "telemetry.tool_timing", "telemetry.progress_ping", "evidence.attached", "evidence.test_results", "evidence.build_log", "evidence.coverage_report", "conversation.chunk", "cu.todo_completed"];
+export type RunEventType = SemanticEventType | TraceEventType;
+export declare const RUN_EVENT_TYPE_SET: ReadonlySet<string>;
+export declare function isRunEventType(value: unknown): value is RunEventType;
+export declare const RUN_EVENT_FAMILIES: readonly ["run.lifecycle", "run.cost", "phase.lifecycle", "phase.step", "phase.skipped_by_policy", "worker.session", "artifact.lifecycle", "artifact.storage", "gate", "validation", "blocker", "decision", "action.required", "action", "work_unit", "escalation", "error", "progress", "policy", "worker.tool_call", "worker.file_patch", "telemetry", "evidence", "audit", "workforce", "integration", "capacity", "admission", "conversation", "cu"];
+export type RunEventFamily = (typeof RUN_EVENT_FAMILIES)[number];
+export declare const RUN_EVENT_FAMILY_SET: ReadonlySet<string>;
+export declare function isRunEventFamily(value: unknown): value is RunEventFamily;
+export declare const SNAPSHOT_RELEVANT_EVENT_TYPES: ReadonlySet<string>;
+export interface CapacitySlotPayload {
+    availableSlots: number;
+    totalSlots: number;
+}
+export interface CapacityUnavailablePayload {
+    queuePosition: number;
+    estimatedWaitMs: number | null;
+}
+export interface CapacityLimitReachedPayload {
+    policyType: 'org' | 'project';
+    currentCount: number;
+    maxAllowed: number;
+}
+export interface AdmissionQueuedPayload {
+    queuePosition: number;
+    reason: string;
+}
+export interface AdmissionAdmittedPayload {
+    waitDurationMs: number;
+}
+export interface AdmissionRejectedPayload {
+    reason: string;
+    policyType: 'org' | 'project';
+}
+export interface AdmissionTimeoutPayload {
+    waitDurationMs: number;
+    maxWaitMs: number;
+}
+export type AllocationStatus = 'requested' | 'queued' | 'provisioning' | 'initializing' | 'ready' | 'running' | 'idle' | 'finishing' | 'completed' | 'failed' | 'cancelled';
+export interface WorkerProvisioningPayload {
+    backendType: string;
+    startedAt: string;
+}
+export interface WorkerProvisioningPhasePayload {
+    phase: string;
+    previousPhase?: string | null;
+    totalElapsedMs?: number;
+    failureReason?: string;
+    workerPhaseKey?: string;
+    reviewerAgent?: string;
+}
+export interface WorkerInitializingPayload {
+    provisionDurationMs: number;
+}
+export interface WorkerIdlePayload {
+    idleSinceMs: number;
+}
+export interface WorkerFinishingPayload {
+    reason: string;
+}
+export interface RunTimeoutWarningPayload {
+    elapsedMs: number;
+    maxDurationMs: number;
+    remainingMs: number;
+}
+export interface RunWaitingForSlotPayload {
+    since: string;
+    estimatedWaitMs: number | null;
+}
+export interface AllocationTimingMetrics {
+    queueWaitMs: number | null;
+    provisioningMs: number | null;
+    totalSetupMs: number | null;
+    executionMs: number | null;
+    totalDurationMs: number | null;
+}
+export interface PolicyEventPayload {
+    policyLayer: 'platform' | 'org' | 'project_constitution' | 'run_type' | 'phase' | 'domain_preset';
+    policyKey: string;
+    decision: 'applied' | 'overridden' | 'skipped';
+    reason: string;
+    affectedPhaseKeys?: string[];
+    affectedActionTypes?: string[];
+    traceRef?: {
+        kind: string;
+        id: string;
+    };
+}
+//# sourceMappingURL=event-families.d.ts.map

package/dist/lib/run-events/event-families.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-families.d.ts","sourceRoot":"","sources":["../../../src/lib/run-events/event-families.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,oBAAoB,qiGAkLvB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAEvD,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,iBAAiB,CAE5B;AAID,eAAO,MAAM,iBAAiB,siBAkCpB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAEpD,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAExE;AAID,eAAO,MAAM,eAAe,gkHAGlB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG,cAAc,CAAC;AAE9D,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAA4B,CAAC;AAEhF,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE;AAKD,eAAO,MAAM,kBAAkB,0bA+BrB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAEpD,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAExE;AAKD,eAAO,MAAM,6BAA6B,EAAE,WAAW,CAAC,MAAM,CAiI5D,CAAC;AAIH,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,2BAA2B;IAC1C,UAAU,EAAE,KAAK,GAAG,SAAS,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,KAAK,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,MAAM,gBAAgB,GACxB,WAAW,GACX,QAAQ,GACR,cAAc,GACd,cAAc,GACd,OAAO,GACP,SAAS,GACT,MAAM,GACN,WAAW,GACX,WAAW,GACX,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAYD,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,yBAAyB;IACxC,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAID,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAID,MAAM,WAAW,kBAAkB;IACjC,WAAW,EACP,UAAU,GACV,KAAK,GACL,sBAAsB,GACtB,UAAU,GACV,OAAO,GACP,eAAe,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,SAAS,GAAG,YAAY,GAAG,SAAS,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC"}