@zeitvu97/cms-sdk 0.1.0

package/dist/services/people/legal/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Legal & Org domain — barrel.
+ *
+ * Re-exports the public surface for `fe-data-design.md` consumers:
+ *   - CT payload types (FEAT-001 + FEAT-002) → `ct.types.ts`
+ *   - Action params + outputs + mixin shape + factory → `actions.ts`
+ *   - CT row envelopes (typed)
+ *
+ * The service (`src/services/people/index.ts`) imports the mixin factory;
+ * the FE composes against typed rows + action outputs.
+ */
+export type { PeopleLegalEntityData, PeopleLegalEntity, PeopleRegisteredBranchData, PeopleRegisteredBranch, PeopleEffectiveRevisionData, PeopleEffectiveRevision, PeopleClosureCaseData, PeopleClosureCase, PeoplePolicyAssignmentData, PeoplePolicyAssignment, PeoplePolicyData, PeoplePolicy, PeopleOrgNodeData, PeopleOrgUnit, PeoplePosition, PeopleWorkLocation, PeopleTypeCatalogueData, PeopleUnitType, PeopleWorkLocationType, PeopleOrgChangeSetData, PeopleOrgChangeSet, } from './ct.types';
+export type { PeopleRegisterLegalEntityParams, PeopleScheduleBranchParams, PeopleRescheduleBranchParams, PeopleCorrectCodeParams, PeopleReactivateParams, PeopleArchiveVisibilityParams, PeopleScheduleRevisionParams, PeopleClosureSubmitParams, PeopleClosureApproveParams, PeopleClosureCompleteOutput, PeopleClosureRejectParams, PeopleClosureCancelParams, PeopleScheduleAssignmentParams, PeopleCsSubmitParams, PeopleCsScheduleParams, LegalAndOrgActions, } from './actions';
+export { buildLegalActions } from './actions';
+//# sourceMappingURL=index.d.ts.map

package/dist/services/people/legal/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/services/people/legal/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,YAAY,EACV,qBAAqB,EACrB,iBAAiB,EACjB,0BAA0B,EAC1B,sBAAsB,EACtB,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,EACrB,iBAAiB,EACjB,0BAA0B,EAC1B,sBAAsB,EACtB,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,EACd,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,+BAA+B,EAC/B,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,sBAAsB,EACtB,6BAA6B,EAC7B,4BAA4B,EAC5B,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,8BAA8B,EAC9B,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC"}

package/dist/services/people/packops/index.d.ts

@@ -0,0 +1,70 @@
+import { $Fetch } from 'ofetch';
+import { PeoplePackAuditEntry, PeoplePackAuditQuery, PeoplePackConflictEntry, PeoplePackConflictPreview, PeoplePackImpact, PeoplePackPreflight, PeoplePackPreflightQuery, PeoplePackSyncLog, PeoplePackUpgradeCheck, PeoplePackOpsRegistry } from './packops.type';
+export interface IPeoplePackOpsServiceOptions {
+    /** The CMS `$Fetch` instance (one of `sdk.apis`). */
+    api: $Fetch;
+}
+/** FEAT-015 — pack-operation reads (projections) + engine pack mutations. */
+export interface IPeoplePackOpsService {
+    /** `GET /people/pack-ops/registry` — CMS packs + template catalog. */
+    registry(): Promise<PeoplePackOpsRegistry>;
+    /** `GET /people/pack-ops/preflight?slug=&source=&ref=` — no install. */
+    preflight(query: PeoplePackPreflightQuery): Promise<PeoplePackPreflight>;
+    /** `GET /people/pack-ops/{slug}/upgrade-check` — installed vs branch. */
+    upgradeCheck(slug: string): Promise<PeoplePackUpgradeCheck>;
+    /** `GET /people/pack-ops/{slug}/impact?ref=` — read-only target preview. */
+    impact(slug: string, ref: string): Promise<PeoplePackImpact>;
+    /** `GET /packs/audit-log` — every pack transition with actor (US7). */
+    auditLog(query?: PeoplePackAuditQuery): Promise<PeoplePackAuditEntry[]>;
+    /** `POST /packs/{slug}/install?ref=` — E8a gates run server-side. */
+    install(slug: string, ref?: string): Promise<Record<string, unknown>>;
+    /** `POST /packs` — register a pack (git remote + metadata) before install
+     *  (registry-catalog entries have no CMS row yet; 409 when the slug
+     *  exists — treat as registered and continue to preflight/install). */
+    register(params: {
+        slug: string;
+        name?: string;
+        source: string;
+        branch?: string;
+    }): Promise<Record<string, unknown>>;
+    /** `POST /packs/{slug}/rollback?to_version=` — 202 accepted. */
+    rollback(slug: string, toVersion?: string): Promise<Record<string, unknown>>;
+    /**
+     * `DELETE /packs/{slug}` (archive = uninstall) — engine belt rejects 409
+     * `PEOPLE_PACK_REFERENCED_CONTENT` while CTs still own content unless
+     * `force: true` (purge flow, two-layer confirm portal-side).
+     */
+    uninstall(slug: string, force?: boolean): Promise<void>;
+    /**
+     * `PUT /packs/{slug}` — metadata update. Disable is the People-pack
+     * convention `metadata.kind`-preserving flag write
+     * (`people.pack.disabled`, settings §6.1): soft-off, instantly reversible.
+     */
+    updateMetadata(slug: string, patch: {
+        disabled?: boolean;
+        metadata?: Record<string, unknown>;
+    }): Promise<Record<string, unknown>>;
+    /** `GET /packs/{slug}/conflicts` — git-vs-DB drift per artifact. */
+    conflicts(slug: string): Promise<PeoplePackConflictEntry[]>;
+    /** `GET /packs/{slug}/conflicts/{artifact_id}/preview` — 3-way merge. */
+    conflictPreview(slug: string, artifactId: number): Promise<PeoplePackConflictPreview>;
+    /**
+     * `POST /packs/{slug}/conflicts/{conflict_id}/resolve` — human decision.
+     * `merge_manual` flags the artifact for human merge; neither side is
+     * force-overwritten (US6: conflict → surface for human).
+     */
+    resolveConflict(slug: string, conflictId: number, resolution: 'git_wins' | 'db_wins' | 'merge_manual'): Promise<{
+        conflict_id: number;
+        resolution: string;
+        resolved: boolean;
+    }>;
+    /** `GET /packs/{slug}/sync-log` — cursor-paginated sync history. */
+    syncLog(slug: string, query?: {
+        cursor?: string;
+        limit?: number;
+    }): Promise<PeoplePackSyncLog>;
+    /** `GET /packs/{slug}/sync-jobs/{job_id}` — one job's detail. */
+    syncJob(slug: string, jobId: string): Promise<Record<string, unknown>>;
+}
+export declare function createPeoplePackOpsService(opts: IPeoplePackOpsServiceOptions): IPeoplePackOpsService;
+//# sourceMappingURL=index.d.ts.map

package/dist/services/people/packops/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/services/people/packops/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAMrC,OAAO,KAAK,EACV,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,yBAAyB,EACzB,gBAAgB,EAChB,mBAAmB,EACnB,wBAAwB,EACxB,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,4BAA4B;IAC3C,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;CACb;AAED,6EAA6E;AAC7E,MAAM,WAAW,qBAAqB;IACpC,sEAAsE;IACtE,QAAQ,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC3C,wEAAwE;IACxE,SAAS,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACzE,yEAAyE;IACzE,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC5D,4EAA4E;IAC5E,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7D,uEAAuE;IACvE,QAAQ,CAAC,KAAK,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAGxE,qEAAqE;IACrE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtE;;2EAEuE;IACvE,QAAQ,CAAC,MAAM,EAAE;QACf,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACrC,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E;;;;OAIG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD;;;;OAIG;IACH,cAAc,CACZ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAChE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAGpC,oEAAoE;IACpE,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAC5D,yEAAyE;IACzE,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtF;;;;OAIG;IACH,eAAe,CACb,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,UAAU,GAAG,SAAS,GAAG,cAAc,GAClD,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC3E,oEAAoE;IACpE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/F,iEAAiE;IACjE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACxE;AAkBD,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,4BAA4B,GACjC,qBAAqB,CA+FvB"}

package/dist/services/people/packops/packops.type.d.ts

@@ -0,0 +1,183 @@
+/**
+ * People Hub — FEAT-015 pack-operation projection reads (api_references §6.4).
+ *
+ * Four READ-ONLY endpoints the People pack mounts on the engine; every
+ * mutation (install/upgrade/rollback/disable/uninstall) stays on the engine
+ * pack API (`/api/v1/packs/*`). Responses are snake_case per the projection
+ * contract (they bypass the generic content casing — the engine mounts these
+ * routers verbatim), so keys are typed snake_case here and mapped at the
+ * consumer boundary.
+ */
+/** One CMS-registered pack row (`product_packs` projection). */
+export interface PeoplePackOpsRegistryItem {
+    /** Pack uuid. */
+    id: string;
+    slug: string;
+    name?: string | null;
+    /** Credentials redacted server-side (`sourceRedacted` flags it). */
+    source: string | null;
+    sourceRedacted: boolean;
+    branch?: string | null;
+    version?: string | null;
+    /** CMS state: draft | active | archived (install states derive). */
+    state: string;
+    /** People convention: meta | template | generated. */
+    kind: 'meta' | 'template' | 'generated' | string;
+    cachePath?: string | null;
+    lastSyncedAt?: string | null;
+    lastSyncStatus?: string | null;
+    createdAt?: string | null;
+    updatedAt?: string | null;
+    [key: string]: unknown;
+}
+/** One available template from the registry seed manifest (D7 shape). */
+export interface PeoplePackOpsCatalogEntry {
+    slug: string;
+    repo: string | null;
+    latestVersion: string | null;
+    baseCommit: string | null;
+    kind: 'template' | string;
+    installed: boolean;
+    [key: string]: unknown;
+}
+export interface PeoplePackOpsRegistry {
+    count: number;
+    items: PeoplePackOpsRegistryItem[];
+    catalogSource: 'registry_seed_manifest' | 'cms_product_packs' | string;
+    remoteCatalogAvailable: boolean;
+    registryRepo: string | null;
+    availableCatalog: PeoplePackOpsCatalogEntry[];
+    /** Degrade reasons (e.g. no registry_repo configured). */
+    limitations: string[];
+}
+export interface PeoplePackPreflightBlocker {
+    code: string;
+    detail?: string;
+    details?: Array<Record<string, unknown>>;
+    required?: string;
+    running?: string;
+    [key: string]: unknown;
+}
+/** Manifest summary shared by preflight / upgrade-check / impact. */
+export interface PeoplePackManifestSummary {
+    slug: string;
+    displayName?: string | null;
+    version?: string | null;
+    minCmsVersion?: string | null;
+    contentTypes: string[];
+    dependencies: Array<{
+        slug: string;
+        version: string | null;
+    }>;
+    migrationCount: number;
+    releaseNotes?: string | null;
+}
+export interface PeoplePackPreflight {
+    ok: boolean;
+    blockers: PeoplePackPreflightBlocker[];
+    warnings: Array<Record<string, unknown>>;
+    targetRef: string | null;
+    manifestSummary: PeoplePackManifestSummary | null;
+}
+export interface PeoplePackUpgradeCheck {
+    slug: string;
+    upgradeAvailable: boolean;
+    currentRef: string | null;
+    targetRef: string | null;
+    currentVersion: string | null;
+    targetVersion: string | null;
+    diffSummary: {
+        available: boolean;
+        changedCount: number;
+        changedFiles: string[];
+    };
+    manifestSummary: PeoplePackManifestSummary | null;
+}
+/** A pending migration of the target ref. */
+export interface PeoplePackPendingMigration {
+    name: string;
+    oneWay?: boolean;
+    [key: string]: unknown;
+}
+export interface PeoplePackImpact {
+    slug: string;
+    currentRef: string | null;
+    targetRef: string | null;
+    currentVersion: string | null;
+    targetVersion: string | null;
+    majorUpgrade: boolean;
+    artifactDiff: {
+        available: boolean;
+        changedCount: number;
+        changedFiles: string[];
+    };
+    pendingMigrations: PeoplePackPendingMigration[];
+    /** One-way entries — rollback stops at the safe checkpoint. */
+    rollbackBlockers: Array<{
+        code: string;
+        migration: string;
+    }>;
+    contentImpact: {
+        basis: 'non_deleted_contents' | string;
+        countsByContentType: Record<string, number>;
+    };
+    collisions: Array<Record<string, unknown>>;
+    manifestSummary: PeoplePackManifestSummary | null;
+}
+/** `GET /api/v1/packs/audit-log` row — the install/upgrade/rollback/
+ *  disable/uninstall trail (US7; survives uninstall). */
+export interface PeoplePackAuditEntry {
+    id?: number;
+    action: string;
+    resourceType?: string;
+    resourceId?: string;
+    actorId?: number | null;
+    details?: Record<string, unknown>;
+    ipAddress?: string | null;
+    success?: boolean;
+    errorMessage?: string | null;
+    createdAt?: string;
+    [key: string]: unknown;
+}
+/** Query for the pack audit log read. */
+export interface PeoplePackAuditQuery {
+    action?: string;
+    resourceId?: string;
+    actorId?: number;
+    limit?: number;
+}
+/** Query for `GET /people/pack-ops/preflight`. */
+export interface PeoplePackPreflightQuery {
+    slug: string;
+    source: string;
+    /** Defaults to `main`. */
+    ref?: string;
+}
+/** One detected git-vs-DB conflict (`GET /packs/{slug}/conflicts`). */
+export interface PeoplePackConflictEntry {
+    id: number;
+    artifact_id: number;
+    conflict_type: string;
+    git_hash: string | null;
+    db_hash: string | null;
+    detected_at: string | null;
+    resolved: boolean;
+}
+/** 3-way merge preview (`GET /packs/{slug}/conflicts/{artifact_id}/preview`). */
+export interface PeoplePackConflictPreview {
+    artifact_name: string;
+    base_content: string | null;
+    git_content: string | null;
+    db_content: string | null;
+    git_changes: string | null;
+    db_changes: string | null;
+    auto_resolvable: boolean;
+}
+/** Cursor-paginated sync history (`GET /packs/{slug}/sync-log`). */
+export interface PeoplePackSyncLog {
+    items: Array<Record<string, unknown>>;
+    total?: number;
+    cursor?: string | null;
+    next_cursor?: string | null;
+}
+//# sourceMappingURL=packops.type.d.ts.map

package/dist/services/people/packops/packops.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"packops.type.d.ts","sourceRoot":"","sources":["../../../../src/services/people/packops/packops.type.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,gEAAgE;AAChE,MAAM,WAAW,yBAAyB;IACxC,iBAAiB;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,oEAAoE;IACpE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,GAAG,MAAM,CAAC;IACjD,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,yEAAyE;AACzE,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,yBAAyB,EAAE,CAAC;IACnC,aAAa,EAAE,wBAAwB,GAAG,mBAAmB,GAAG,MAAM,CAAC;IACvE,sBAAsB,EAAE,OAAO,CAAC;IAChC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,yBAAyB,EAAE,CAAC;IAC9C,0DAA0D;IAC1D,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAID,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,qEAAqE;AACrE,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAC9D,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,0BAA0B,EAAE,CAAC;IACvC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe,EAAE,yBAAyB,GAAG,IAAI,CAAC;CACnD;AAID,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,OAAO,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE;QACX,SAAS,EAAE,OAAO,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IACF,eAAe,EAAE,yBAAyB,GAAG,IAAI,CAAC;CACnD;AAID,6CAA6C;AAC7C,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE;QACZ,SAAS,EAAE,OAAO,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IACF,iBAAiB,EAAE,0BAA0B,EAAE,CAAC;IAChD,+DAA+D;IAC/D,gBAAgB,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,aAAa,EAAE;QACb,KAAK,EAAE,sBAAsB,GAAG,MAAM,CAAC;QACvC,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAC7C,CAAC;IACF,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3C,eAAe,EAAE,yBAAyB,GAAG,IAAI,CAAC;CACnD;AAID;yDACyD;AACzD,MAAM,WAAW,oBAAoB;IACnC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,yCAAyC;AACzC,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,kDAAkD;AAClD,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,0BAA0B;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAID,uEAAuE;AACvE,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,iFAAiF;AACjF,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,oEAAoE;AACpE,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B"}

package/dist/services/people/perms/actions.d.ts

@@ -0,0 +1,214 @@
+import { ActionResponse } from '../../content/content.type';
+import { PeopleActionOpts } from '../shared.types';
+import { InvokeDeps } from '../_invoke';
+/** `validate_revision` — runs publish guards; writes `validationResult`. */
+export interface PeopleValidateRevisionOutput {
+    valid: boolean;
+    errors: unknown[];
+    checkedAt: string;
+}
+/** `fork_draft` (factory on catalog_revision). Duplicate `revisionLabel`
+ *  ⇒ `revision_label_conflict`. */
+export interface PeopleForkDraftParams {
+    revisionLabel: string;
+    forkedFrom?: string;
+}
+/** `seed_merge` (factory on catalog_revision) — merges SETTING
+ *  `people.permissionSets` into a draft; idempotent by key, NEVER auto-publishes. */
+export interface PeopleSeedMergeParams {
+    permissionSets?: string[];
+    draftUuid?: string;
+}
+export interface PeopleSeedMergeOutput {
+    draftUuid: string;
+    noOp: boolean;
+    added: Array<{
+        key: string;
+    }>;
+    unchanged: Array<{
+        key: string;
+    }>;
+    seedDrift: Array<{
+        key: string;
+        expected: unknown;
+        actual: unknown;
+    }>;
+}
+/** `publish_revision` (row on catalog_revision) — guard + atomic publish +
+ *  supersede previous in one execution; failure ⇒ `PEOPLE_CAT_DRAFT_MISMATCH`. */
+export interface PeoplePublishRevisionOutput {
+    revisionLabel: string;
+    superseded: string[];
+    events: Array<{
+        type: string;
+        payload?: Record<string, unknown>;
+    }>;
+}
+/** `grant_exception` (factory on scope_exception). Creates directly `active`,
+ *  `origin: 'admin'`. Open-ended windows rejected. Grants only widen data-scope. */
+export interface PeopleGrantExceptionParams {
+    subjectRef: string;
+    scopeKey: string;
+    effect?: 'grant' | 'deny';
+    window: {
+        effectiveFrom: string;
+        effectiveTo: string;
+    };
+    justification: string;
+    employmentRef?: string;
+}
+export interface PeopleGrantExceptionOutput {
+    exceptionUuid: string;
+    subjectRef: string;
+    scopeKey: string;
+    effect: 'grant' | 'deny';
+    origin: 'admin';
+    state: 'active';
+}
+/** `amend_exception_window` — only the window is mutable; effect/scopeKey/
+ *  justification are locked to their original values. */
+export interface PeopleAmendExceptionWindowParams {
+    window: {
+        effectiveFrom: string;
+        effectiveTo: string;
+    };
+}
+/** `grant` guard order: RA11 context → catalog resolve → acting triple →
+ *  duplicate/idempotency NO_OP → SoD warn (never blocking) → write + inline
+ *  `user_roles` reflect. `accessContextState` is the eaera-hr projection
+ *  read the guard keys on: ended ⇒ PEOPLE_RA_CONTEXT_ENDED; scheduled ⇒ the
+ *  row starts `prepared` (no enforcement until the sweep activates it). */
+export interface PeopleGrantParams {
+    subjectRef: string;
+    roleKey: string;
+    accessContextRef: string;
+    assignmentType: 'manual' | 'birthright' | 'requested' | 'emergency';
+    accessContextState: 'active' | 'scheduled' | 'ended';
+    purpose?: 'standard' | 'acting';
+    effectiveFrom?: string;
+    effectiveTo?: string;
+    justification?: string;
+    ticketRef?: string;
+    idempotencyKey?: string;
+    sodWarnPatterns?: string[];
+}
+export interface PeopleGrantOutput {
+    assignmentUuid: string;
+    state: 'prepared' | 'active';
+    sodWarnings: Array<{
+        pattern: string;
+        detail?: string;
+    }>;
+    noOp?: boolean;
+}
+/** `revoke` — reason required; birthright rows additionally write
+ *  `manual_override` (blocks re-grant until the rule republishes). */
+export interface PeopleRevokeParams {
+    reason: string;
+}
+/** `amend_window` — active rows only; never resurrects inactive rows
+ *  (renewal = a new grant). Early acting stop = effectiveTo = now. */
+export interface PeopleAmendWindowParams {
+    effectiveTo: string;
+}
+export interface PeopleValidateRuleOutput {
+    valid: boolean;
+    errors: unknown[];
+    checkedAt: string;
+}
+/** `publish_rule` — guard re-run + supersede of the previous published
+ *  version of the same rule_key in ONE execution; conflict ⇒
+ *  PEOPLE_RA_RULE_CONFLICT. Emits the RA5 bulk re-evaluation event. */
+export interface PeoplePublishRuleOutput {
+    state: 'published';
+    version: number;
+    supersededUuid?: string;
+    events: Array<{
+        type: string;
+        payload?: Record<string, unknown>;
+    }>;
+}
+/** `record_decision` — revoke requires a reason and invokes assignment
+ *  `revoke` inline on every assignmentRefs item (RA9); `revoked` carries
+ *  the per-outcome result. */
+export interface PeopleRecordDecisionParams {
+    memberRef: string;
+    decision: 'keep' | 'revoke';
+    reason?: string;
+}
+export interface PeopleRecordDecisionOutput {
+    decision: 'keep' | 'revoke';
+    revoked: Array<{
+        assignmentUuid: string;
+        ok: boolean;
+        result?: unknown;
+    }>;
+}
+/** `generate` — builds items from a caller-supplied reporting line (the
+ *  eaera-hr projection supplies it, OQ-5). Idempotent per cycle: an
+ *  already-active campaign is a NO_OP; members without a resolvable manager
+ *  are created directly `escalated` (fail-soft). */
+export interface PeopleGenerateParams {
+    cycleConfig?: Record<string, unknown>;
+    deadlineAt: string;
+    reportingLine: Array<{
+        managerRef: string;
+        members: Array<{
+            memberRef: string;
+            assignmentRefs: string[];
+        }>;
+    }>;
+}
+export interface PeopleGenerateOutput {
+    campaignUuid: string;
+    itemCount: number;
+    deadlineAt: string;
+}
+/** `remind` — bookkeeping count of still-pending items (RA8). */
+export interface PeopleRemindOutput {
+    reminded: number;
+}
+/** `escalate_review` — pending items past 2× the review window escalate to
+ *  the HR admin; NEVER auto-revokes (PM 2026-08-17). */
+export interface PeopleEscalateReviewOutput {
+    escalated: number;
+    escalatedTo?: string;
+}
+/** `complete` — writes the US6 TC4 compliance evidence. */
+export interface PeopleCompleteOutput {
+    completionReport: {
+        completedAt: string;
+        totalItems: number;
+        kept: number;
+        revoked: number;
+        escalated: number;
+        reviews: unknown[];
+    };
+}
+export interface PermsActions {
+    validateRevision(revisionUuid: string, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    publishRevision(revisionUuid: string, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    forkDraft(params: PeopleForkDraftParams, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    discardDraft(revisionUuid: string, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    seedMerge(params?: PeopleSeedMergeParams, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    recordSeedAck(revisionUuid: string, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    grantException(params: PeopleGrantExceptionParams, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    revokeException(exceptionUuid: string, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    amendExceptionWindow(exceptionUuid: string, window: {
+        effectiveFrom: string;
+        effectiveTo: string;
+    }, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    grant(assignmentUuid: string, params: PeopleGrantParams, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    revoke(assignmentUuid: string, params: PeopleRevokeParams, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    amendWindow(assignmentUuid: string, params: PeopleAmendWindowParams, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    validateRule(ruleUuid: string, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    publishRule(ruleUuid: string, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    discardRule(ruleUuid: string, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    recordDecision(campaignUuid: string, params: PeopleRecordDecisionParams, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    generate(campaignUuid: string, params: PeopleGenerateParams, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    remind(campaignUuid: string, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    escalateReview(campaignUuid: string, opts?: PeopleActionOpts): Promise<ActionResponse>;
+    complete(campaignUuid: string, opts?: PeopleActionOpts): Promise<ActionResponse>;
+}
+export declare function buildPermsActions(deps: InvokeDeps): PermsActions;
+//# sourceMappingURL=actions.d.ts.map

package/dist/services/people/perms/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../../../src/services/people/perms/actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAA0C,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAUrF,4EAA4E;AAC5E,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;mCACmC;AACnC,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;qFACqF;AACrF,MAAM,WAAW,qBAAqB;IACpC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9B,SAAS,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClC,SAAS,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACvE;AAED;kFACkF;AAClF,MAAM,WAAW,2BAA2B;IAC1C,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;CACpE;AAED;oFACoF;AACpF,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC1B,MAAM,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,QAAQ,CAAC;CACjB;AAED;yDACyD;AACzD,MAAM,WAAW,gCAAgC;IAC/C,MAAM,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CACxD;AAID;;;;2EAI2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,QAAQ,GAAG,YAAY,GAAG,WAAW,GAAG,WAAW,CAAC;IACpE,kBAAkB,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC;IACrD,OAAO,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC7B,WAAW,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzD,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;sEACsE;AACtE,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;sEACsE;AACtE,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;CACrB;AAID,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;uEAEuE;AACvE,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;CACpE;AAID;;8BAE8B;AAC9B,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC5B,OAAO,EAAE,KAAK,CAAC;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC3E;AAED;;;oDAGoD;AACpD,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,KAAK,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,KAAK,CAAC;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,cAAc,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC,CAAC;KACjE,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,iEAAiE;AACjE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;wDACwD;AACxD,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,2DAA2D;AAC3D,MAAM,WAAW,oBAAoB;IACnC,gBAAgB,EAAE;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,CAAC;KACpB,CAAC;CACH;AAMD,MAAM,WAAW,YAAY;IAC3B,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACzF,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACxF,SAAS,CAAC,MAAM,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3F,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACrF,SAAS,CAAC,MAAM,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5F,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACtF,cAAc,CACZ,MAAM,EAAE,0BAA0B,EAClC,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACzF,oBAAoB,CAClB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EACtD,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAAC;IAE3B,KAAK,CACH,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,iBAAiB,EACzB,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,MAAM,CACJ,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,WAAW,CACT,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,uBAAuB,EAC/B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAAC;IAE3B,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACjF,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAChF,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAEhF,cAAc,CACZ,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,0BAA0B,EAClC,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,QAAQ,CACN,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,oBAAoB,EAC5B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/E,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACvF,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAClF;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CAkDhE"}

package/dist/services/people/perms/ct.types.d.ts

@@ -0,0 +1,140 @@
+import { ContentItem } from '../../content/content.type';
+/** `catalog_revision` — bundle CT. ONE row = ONE atomic revision of the
+ *  whole access catalog. DS1: published-immutable + atomic publish+supersede.
+ *  ✅ */
+export interface PeopleCatalogRevisionData {
+    revisionLabel: string;
+    forkedFrom?: string | null;
+    roles: Array<{
+        key: string;
+        displayName?: string;
+        permissions: string[];
+        scopeRefs: string[];
+    }>;
+    permissions: Array<{
+        key: string;
+        description?: string;
+        seedDomain?: string;
+        configurable?: boolean;
+    }>;
+    scopeRules: Array<{
+        key: string;
+        level: 'own' | 'team' | 'department' | 'all';
+        orgMapping?: unknown;
+    }>;
+    fieldAccessPolicies: Array<{
+        fieldGroup: 'identity' | 'contact' | 'employment' | 'contract' | 'finance-salary' | 'time-attendance';
+        view: {
+            roleKeys: string[];
+            maskLevel: 'hidden' | 'partial' | 'full';
+            scopeRefs: string[];
+        };
+        approveLevel: 'L1' | 'L2' | 'L3' | 'L4';
+        l4Floor: boolean;
+    }>;
+    changelog?: string;
+    validationResult?: {
+        valid?: boolean;
+        errors?: unknown[];
+        checkedAt?: string;
+    };
+    state: 'draft' | 'published' | 'superseded' | 'discarded';
+}
+export type PeopleCatalogRevision = ContentItem<PeopleCatalogRevisionData>;
+/** `scope_exception` — subject-scoped (much higher change cadence than the
+ *  bundle). Created by the factory only (`grant_exception`) — see api_references
+ *  §3.4 + data-design §3.7b: `POST /content` for scope_exception starts a row
+ *  in `draft` with no activation API; the factory is the only admin path.
+ *  ✅ */
+export interface PeopleScopeExceptionData {
+    subjectRef: string;
+    employmentRef?: string | null;
+    effect: 'grant' | 'deny';
+    scopeKey: string;
+    window: {
+        effectiveFrom: string;
+        effectiveTo: string;
+    };
+    justification?: string;
+    origin: 'admin' | 'system';
+    errorCode?: string | null;
+    state: 'draft' | 'active' | 'expired' | 'revoked';
+}
+export type PeopleScopeException = ContentItem<PeopleScopeExceptionData>;
+/** Manual-override marker — manual removal beats birthright (D2). */
+export interface PeopleManualOverride {
+    blockedRuleKey?: string;
+    ruleVersionAtOverride?: number;
+    clearedBy?: string;
+}
+/** `role_assignment` row payload (registry §3.21). */
+export interface PeopleRoleAssignmentData {
+    subjectRef: string;
+    roleKey: string;
+    /** Employment content ref (eaera-hr CT) — identity triple element. */
+    accessContextRef: string;
+    assignmentType: 'manual' | 'birthright' | 'requested' | 'emergency';
+    purpose?: 'standard' | 'acting';
+    effectiveFrom?: string;
+    effectiveTo?: string | null;
+    justification?: string;
+    /** Emergency only. */
+    ticketRef?: string;
+    /** Birthright provenance. */
+    originRuleRef?: string;
+    originRuleVersion?: number;
+    manualOverride?: PeopleManualOverride | null;
+    /** Event dedupe — NO_OP audit PEOPLE_IDEM_DUPLICATE. */
+    idempotencyKey?: string;
+    sodWarnings?: unknown[];
+    /** Lifecycle timestamps (engine-written). */
+    activatedAt?: string;
+    revokedAt?: string | null;
+    amendedAt?: string | null;
+    revokeReason?: string | null;
+    state: 'prepared' | 'active' | 'inactive' | 'revoked' | 'archived';
+}
+export type PeopleRoleAssignment = ContentItem<PeopleRoleAssignmentData>;
+/** `assignment_rule` row payload (registry §3.22). */
+export interface PeopleAssignmentRuleData {
+    ruleKey: string;
+    version?: number;
+    match?: {
+        positions?: string[];
+        orgUnits?: string[];
+        legalEntities?: string[];
+    };
+    actions?: Array<{
+        effect: 'grant' | 'remove';
+        roleKey: string;
+    }>;
+    lastValidated?: string;
+    evaluationStats?: {
+        assignmentsGenerated?: number;
+        lastRunAt?: string;
+    };
+    state: 'draft' | 'published' | 'superseded' | 'discarded';
+}
+export type PeopleAssignmentRule = ContentItem<PeopleAssignmentRuleData>;
+/** One structured review item inside a campaign (no own workflow). */
+export interface PeopleReviewCampaignItem {
+    managerRef: string;
+    memberRef: string;
+    assignmentRefs: string[];
+    decision?: 'keep' | 'revoke' | null;
+    reason?: string | null;
+    reviewedAt?: string | null;
+    reviewedBy?: string | null;
+    status: 'pending' | 'done' | 'escalated';
+}
+/** `access_review_campaign` row payload (registry §3.23). */
+export interface PeopleAccessReviewCampaignData {
+    cycleConfig?: Record<string, unknown>;
+    deadlineAt: string;
+    items?: PeopleReviewCampaignItem[];
+    escalatedTo?: string;
+    completionReport?: Record<string, unknown> | null;
+    state: 'draft' | 'active' | 'completed' | 'cancelled';
+}
+export type PeopleAccessReviewCampaign = ContentItem<PeopleAccessReviewCampaignData>;
+//# sourceMappingURL=ct.types.d.ts.map