@zhin.js/workroom 0.0.0 → 0.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 凉菜
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,9 +1,55 @@
 # @zhin.js/workroom
 
-> **Placeholder release (0.0.0).** This version contains no code. It only reserves the package name so that later versions can be published by the zhin.js release workflow.
+Workroom, Portfolio and Data Governance for Zhin.js: the domain code plus the runtime composition that wires it to the Agent runtime.
 
-`@zhin.js/workroom` will provide the Workroom, Portfolio and Data Governance domain for [Zhin.js](https://github.com/zhinjs/zhin). Please wait for a version `>= 0.0.1`.
+- `src/workroom/` - Workroom kernel, journals, assignments, ingress, executors
+- `src/portfolio/` - Portfolio admission, capacity control, sponsor projection (exported via the frozen `./portfolio` subpath, not the package root)
+- `src/data-governance/` - payload vaults, disclosure manifests, governance authority (exported via the frozen `./data-governance` subpath, not the package root)
+- `src/workroom-runtime/` - runtime composition (Plugin Runtime tokens, Agent Core adapter, providers)
 
----
+## Dependency direction
 
-> **占位版本（0.0.0）**：本版本不含任何代码，仅用于占用包名，以便后续版本由 zhin.js 发布流程自动发布。请等待 `>= 0.0.1` 的正式版本。
+`@zhin.js/workroom` -> `@zhin.js/agent` (+ `@zhin.js/plugin-runtime`, `@zhin.js/tool`, `@zhin.js/skill`, `@zhin.js/ai`, `@zhin.js/core`) -> `@zhin.js/im-contract`
+
+**Exports**: the package root (`@zhin.js/workroom`) plus the frozen subpaths `./remote`, `./scheduler`, `./portfolio` and `./data-governance`. The deep paths (`./workroom/*.js`, `./portfolio/*.js`, `./data-governance/*.js`) were removed in A4b. These four subpaths are the only exceptions, reversing the A4b "no subpath" decision only to freeze moved-out modules. `./remote` freezes the remote dispatch / callback / assignment modules: it is an A2A extension, removed from the package root and frozen; the default assembly still creates one Remote Callback Runtime and Remote Assignment Authority (legacy Kernel/runtime dependency, C2 blocks), to be handled after C2. The root entry no longer exports those symbols; the CLI lazy-loads `./remote` for the A2A callback/executor transport only when `a2a.workroomCallbacks.enabled` is configured (the default assembly imports it statically and constructs three file repositories). They are not deleted because the Kernel, Scheduler, authority grants, data governance and acceptance still reference remote types; full removal is left to C5/C6 after C4b-C4d.
+
+`./scheduler` (scheduler, preemption, priority authority, scheduler/portfolio route registry and runtime) and `./portfolio` (portfolio journal, admission, capacity control outbox, sponsor projection, resource bundle, portfolio control runtime) were moved out of the package root in C4b and frozen the same way. This only removes them from the root exports: the default (legacy Kernel) assembly in `@zhin.js/cli` still statically imports and creates these runtimes, so default behavior is unchanged and handling is deferred until after C2. The new Room core does not depend on them; new code must not either.
+
+`./data-governance` (payload vault, disclosure manifest/authority, payload lifecycle repository, and the `workroom-data-*` / `workroom-payload-*` runtime composition) was moved out of the package root in C4c and frozen the same way. This only removes them from the root exports: the default (legacy Kernel) assembly in `@zhin.js/cli` still creates the data-governance runtime, so default behavior is unchanged and handling is deferred until after C2. The fail-closed `LegacyEmbeddedPayloadDetectedError` and the journal payload composition (plaintext payload rejection) stay on the root and are unchanged. There is no optional loader for it: outside `workroom/*` the CLI only uses `import type`. The new Room core does not depend on it; new code must not either.
+
+包根之外新增 `./remote` 子路径：remote dispatch / callback / assignment 已冻结为 A2A 扩展并移出包根；默认装配仍会创建 Remote Callback Runtime 与 Remote Assignment Authority（旧 Kernel/runtime 路径依赖，C2 阻塞），留到 C2 之后处理。
+
+**Dependencies**: `@zhin.js/agent` and `@zhin.js/plugin-runtime` stay ordinary `dependencies` on purpose. Moving them to `peerDependencies` needs a `pnpm-lock.yaml` update that cannot be produced/verified offline, and inside the workspace there is a single instance (`workspace:*`). Revisit together with the CLI optional-peer install graph.
+
+`@zhin.js/agent` must never import `@zhin.js/workroom`. The domain directories (`workroom/`,
+`portfolio/`, `data-governance/`) stay free of framework imports (only `@zhin.js/im-contract` and
+Node built-ins); only `workroom-runtime/` may use `@zhin.js/agent`. Inside the package,
+`data-governance/` must not import `workroom/` or `portfolio/`.
+
+Import everything from the package root (`@zhin.js/workroom`).
+
+## Journal / Projection Outbox
+
+Workroom Journal 以 `src/workroom/journal/index.ts` 作为唯一领域入口。入口只公开 Journal
+端口、错误、适配器和稳定的摘要函数；内部依赖保持单向：事件校验与受治理载荷引用位于
+底层，存储事件编解码和控制投影建立在其上，载荷发布/回放复用控制投影，Memory、File、
+Database 适配器只组合这些机制。新增存储实现应实现 `WorkroomJournal`，不应把数据库、
+文件系统或载荷治理逻辑重新放进领域入口。
+
+Workroom Projection Outbox 同样以 `src/workroom/projection-outbox/index.ts` 为唯一领域入口。
+Binding 和持久 Item 必须显式携带 `audience` 与绑定代际 `cursorId`；运行时不会猜测旧
+快照的默认 audience，也不会把旧 Run cursor 在线迁移到新绑定。Repository 只负责 CAS
+状态，Tracer 只把权威事实投影为草稿，Governance 物化可披露内容，Delivery Worker
+负责租约和外部投递，四者通过窄端口协作。
+
+## Room 定义（新核心，B1a）
+
+`src/room/` 提供新的 Room / Member / Role 纯定义层，与旧 Workroom Catalog 并存，不改变旧行为。该目录只依赖 TypeScript 标准库。
+
+- `validateRoomDefinitions(raw, ctx?)`：fail-closed，任何问题抛 `RoomDefinitionError`（`issues` 汇总全部带路径的消息）；成功返回深冻结的拷贝，不修改入参。`raw == null` 视为无 Room（返回 `{}`）。
+- `collectRoomDefinitionIssues(raw, ctx?)`：唯一规则来源，纯函数，不抛。
+- 未知字段一律拒绝，避免拼写错误导致权限静默丢失。
+- Room：`conversation`（group/channel 绑定）、`roles`、`members`、可选 `coordinator`。
+- Role：`prompt`；`tools`（上限，省略=不额外授予）；`accepts`（省略=任意类别）；`handoffTo`（省略=不允许交接，不可指向自身）。
+- Member：一个 Agent、一个 Role、独立的 `botEndpoint`（Room 内不得共用）、可选 `aliases`（Room 内唯一，大小写不敏感）。
+- 会话以 `adapter:kind:id` 标识（不含 endpoint）：同一个群不能经不同 Bot 被两个 enabled Room 认领；disabled 的 Room 只做结构校验。每个成员的 `botEndpoint.adapter` 必须与 Room 会话的 adapter 一致；Room 内 agent 名（及别名）大小写不敏感唯一。公开常量（`ROOM_CONVERSATION_KINDS`、`ROOM_RESERVED_NAMES`）均已冻结。

package/lib/data-governance/canonical-value.d.ts

@@ -0,0 +1,7 @@
+/** Locale-independent UTF-16 code-unit order for authoritative identities. */
+export declare function compareCanonicalWorkroomText(left: string, right: string): number;
+/** Canonical representation shared by Workroom and Data Governance records (Workroom prefix kept for compatibility). */
+export declare function canonicalWorkroomJson(value: unknown): string;
+export declare function digestCanonicalWorkroomValue(value: unknown): string;
+export declare function deepFreezeWorkroomValue<T>(value: T): T;
+//# sourceMappingURL=canonical-value.d.ts.map

package/lib/data-governance/canonical-value.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-value.d.ts","sourceRoot":"","sources":["../../src/data-governance/canonical-value.ts"],"names":[],"mappings":"AAKA,8EAA8E;AAC9E,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGhF;AAED,wHAAwH;AACxH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAU5D;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEnE;AAED,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAMtD"}

package/lib/data-governance/canonical-value.js

@@ -0,0 +1,35 @@
+/**
+ * Workroom 与 Data Governance 共享，名称中的 Workroom 前缀为兼容保留。
+ */
+import { createHash } from 'node:crypto';
+/** Locale-independent UTF-16 code-unit order for authoritative identities. */
+export function compareCanonicalWorkroomText(left, right) {
+    if (left === right)
+        return 0;
+    return left < right ? -1 : 1;
+}
+/** Canonical representation shared by Workroom and Data Governance records (Workroom prefix kept for compatibility). */
+export function canonicalWorkroomJson(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonicalWorkroomJson).join(',')}]`;
+    if (value && typeof value === 'object') {
+        const record = value;
+        return `{${Object.keys(record)
+            .sort(compareCanonicalWorkroomText)
+            .map((key) => `${JSON.stringify(key)}:${canonicalWorkroomJson(record[key])}`)
+            .join(',')}}`;
+    }
+    return JSON.stringify(value) ?? 'undefined';
+}
+export function digestCanonicalWorkroomValue(value) {
+    return `sha256:${createHash('sha256').update(canonicalWorkroomJson(value)).digest('hex')}`;
+}
+export function deepFreezeWorkroomValue(value) {
+    if (!value || typeof value !== 'object' || Object.isFrozen(value))
+        return value;
+    for (const item of Object.values(value)) {
+        deepFreezeWorkroomValue(item);
+    }
+    return Object.freeze(value);
+}
+//# sourceMappingURL=canonical-value.js.map

package/lib/data-governance/canonical-value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-value.js","sourceRoot":"","sources":["../../src/data-governance/canonical-value.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,8EAA8E;AAC9E,MAAM,UAAU,4BAA4B,CAAC,IAAY,EAAE,KAAa;IACtE,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,wHAAwH;AACxH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnF,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;aAC3B,IAAI,CAAC,4BAA4B,CAAC;aAClC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;aAC5E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAI,KAAQ;IACjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,EAAE,CAAC;QACnE,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/lib/data-governance/data-governance.d.ts

@@ -0,0 +1,198 @@
+export type ConfidentialityClass = 'public' | 'project_internal' | 'confidential' | 'restricted' | 'unknown';
+export type DataKind = 'source_message' | 'workroom_fact' | 'context_digest' | 'task_report' | 'artifact' | 'evidence' | 'execution_trace' | 'projection_payload';
+export type DisclosurePurpose = 'orchestration' | 'task_execution' | 'acceptance_review' | 'workroom_awareness' | 'portfolio_oversight' | 'remote_execution' | 'audit' | 'reconciliation';
+export type RetentionClass = 'transient' | 'operational' | 'project_record' | 'regulated_record';
+export type DisclosureChannel = 'context_view' | 'evidence_port' | 'workroom_projection' | 'sponsor_projection' | 'console' | 'model_provider' | 'a2a';
+export interface DataCategoryRule {
+    readonly confidentialityFloor: Exclude<ConfidentialityClass, 'unknown'>;
+}
+export interface DataCategoryRegistrySnapshot {
+    readonly id: string;
+    readonly revision: number;
+    readonly digest: string;
+    readonly tenantId: string;
+    readonly kindFloors: Readonly<Partial<Record<DataKind, Exclude<ConfidentialityClass, 'unknown'>>>>;
+    readonly categories: Readonly<Record<string, DataCategoryRule>>;
+}
+export type DataCategoryRegistrySnapshotInput = Omit<DataCategoryRegistrySnapshot, 'digest'>;
+export declare function createDataCategoryRegistrySnapshot(input: DataCategoryRegistrySnapshotInput): DataCategoryRegistrySnapshot;
+export declare function assertDataCategoryRegistrySnapshot(value: DataCategoryRegistrySnapshot): void;
+export interface DataDescriptorCandidate {
+    readonly objectId: string;
+    readonly payloadHash: string;
+    readonly tenantId: string;
+    readonly projectId: string;
+    readonly kind: DataKind;
+    readonly proposedConfidentiality: ConfidentialityClass;
+    readonly categories: readonly string[];
+    readonly allowedPurposes: readonly DisclosurePurpose[];
+    readonly allowedRegions: readonly string[];
+    readonly subjectRefs: readonly string[];
+    readonly retention: Readonly<{
+        class: RetentionClass;
+        minimumRetainUntil: number;
+        deleteAfter: number;
+    }>;
+    readonly lineage: Readonly<{
+        sourceObjectIds: readonly string[];
+        transformRef?: string;
+    }>;
+}
+export interface DataDescriptor {
+    readonly objectId: string;
+    readonly payloadHash: string;
+    readonly tenantId: string;
+    readonly projectId: string;
+    readonly kind: DataKind;
+    readonly confidentiality: Exclude<ConfidentialityClass, 'unknown'>;
+    readonly categories: readonly string[];
+    readonly allowedPurposes: readonly DisclosurePurpose[];
+    readonly allowedRegions: readonly string[];
+    readonly subjectRefs: readonly string[];
+    readonly retention: DataDescriptorCandidate['retention'];
+    readonly lineage: DataDescriptorCandidate['lineage'];
+    readonly classificationSource: Readonly<{
+        categoryRegistryId: string;
+        categoryRegistryRevision: number;
+        categoryRegistryDigest: string;
+    }>;
+}
+export interface DisclosureRecipientSnapshot {
+    readonly principalId: string;
+    readonly tenantId: string;
+    readonly projectId?: string;
+    readonly clearance: Exclude<ConfidentialityClass, 'unknown'>;
+}
+export interface DisclosureRecipientSetSnapshot {
+    readonly revision: number;
+    readonly digest: string;
+    readonly recipients: readonly DisclosureRecipientSnapshot[];
+}
+export declare function createDisclosureRecipientSetSnapshot(input: Readonly<{
+    revision: number;
+    recipients: readonly DisclosureRecipientSnapshot[];
+}>): DisclosureRecipientSetSnapshot;
+export declare function assertDisclosureRecipientSetSnapshot(value: DisclosureRecipientSetSnapshot): void;
+export interface ProcessingDestinationContract {
+    readonly id: string;
+    readonly contractDigest: string;
+    readonly owner: string;
+    readonly endpoint: string;
+    readonly tenantId: string;
+    readonly projectId?: string;
+    readonly trustDomain: string;
+    readonly processingRegions: readonly string[];
+    readonly maxConfidentiality: Exclude<ConfidentialityClass, 'unknown'>;
+    readonly allowedCategories: readonly string[];
+    readonly external: boolean;
+    readonly noTraining: boolean;
+    readonly loggingMode: 'disabled' | 'metadata_only' | 'full';
+    readonly maximumRetentionSeconds: number;
+    readonly allowsRedisclosure: boolean;
+    readonly supportsDeletion: boolean;
+    readonly recipientSnapshotRevision: number;
+    readonly recipientSnapshotDigest: string;
+}
+export type ProcessingDestinationContractInput = Omit<ProcessingDestinationContract, 'contractDigest'>;
+export declare function createProcessingDestinationContract(input: ProcessingDestinationContractInput): ProcessingDestinationContract;
+export declare function assertProcessingDestinationContract(value: ProcessingDestinationContract): void;
+export interface TrustedDisclosureTransform {
+    readonly id: string;
+    readonly inputCategoriesAny: readonly string[];
+    readonly outputConfidentiality: Exclude<ConfidentialityClass, 'unknown'>;
+    readonly outputCategories: readonly string[];
+    readonly allowedChannels: readonly DisclosureChannel[];
+}
+export interface DataGovernancePolicySnapshot {
+    readonly id: string;
+    readonly revision: number;
+    readonly digest: string;
+    readonly tenantId: string;
+    readonly projectId: string;
+    readonly destinations: Readonly<Record<string, ProcessingDestinationContract>>;
+    readonly channelCeilings: Readonly<Record<DisclosureChannel, Exclude<ConfidentialityClass, 'unknown'>>>;
+    readonly transforms: Readonly<Record<string, TrustedDisclosureTransform>>;
+    readonly externalApprovalFloor: Exclude<ConfidentialityClass, 'unknown'>;
+}
+export type DataGovernancePolicySnapshotInput = Omit<DataGovernancePolicySnapshot, 'digest'>;
+export declare function createDataGovernancePolicySnapshot(input: DataGovernancePolicySnapshotInput): DataGovernancePolicySnapshot;
+export declare function assertDataGovernancePolicySnapshot(value: DataGovernancePolicySnapshot): void;
+export interface DisclosurePrincipalSnapshot {
+    readonly principalId: string;
+    readonly tenantId: string;
+    readonly projectId: string;
+    readonly role: 'orchestrator' | 'executor' | 'reviewer' | 'sponsor' | 'auditor' | 'projector';
+    readonly clearance: Exclude<ConfidentialityClass, 'unknown'>;
+    readonly allowedPurposes: readonly DisclosurePurpose[];
+    readonly assignmentId?: string;
+}
+export interface DisclosureContext {
+    readonly channel: DisclosureChannel;
+    readonly purpose: DisclosurePurpose;
+    readonly requestedMode: 'full' | 'metadata_only';
+    readonly policyRevision: number;
+    readonly principal: DisclosurePrincipalSnapshot;
+    readonly destination: ProcessingDestinationContract;
+    readonly recipients: DisclosureRecipientSetSnapshot;
+}
+export interface DisclosureApprovalSnapshot {
+    readonly id: string;
+    readonly requestDigest: string;
+    readonly role: 'data_steward' | 'compliance';
+    readonly principalId: string;
+    readonly policyRevision: number;
+    readonly decision: 'approved' | 'rejected';
+    readonly expiresAt: number;
+}
+export type DisclosureDisposition = 'full' | 'metadata_only' | 'transform_required' | 'approval_required' | 'deny';
+export type DisclosureReasonCode = 'authorized_minimum_disclosure' | 'policy_revision_mismatch' | 'principal_tenant_mismatch' | 'principal_project_mismatch' | 'purpose_not_allowed' | 'destination_unknown' | 'destination_contract_mismatch' | 'recipient_snapshot_mismatch' | 'recipient_tenant_mismatch' | 'recipient_project_mismatch' | 'metadata_only_requested' | 'classification_above_destination_ceiling' | 'destination_category_blocked' | 'trusted_transform_required' | 'exact_approval_required' | 'authorized_external_disclosure' | 'credential_requires_secret_capability_port' | 'destination_region_unknown' | 'residency_violation' | 'external_training_not_prohibited' | 'no_trusted_minimizing_transform' | 'body_withheld_by_disclosure_policy' | 'channel_policy_missing' | 'recipient_snapshot_empty' | 'destination_tenant_mismatch' | 'destination_project_mismatch' | 'payload_retention_expired';
+export interface DisclosureDecision {
+    readonly disposition: DisclosureDisposition;
+    readonly requestDigest: string;
+    readonly reasonCodes: readonly DisclosureReasonCode[];
+    readonly policy: Readonly<{
+        revision: number;
+        digest: string;
+    }>;
+    readonly contextBinding: Readonly<{
+        objectId: string;
+        payloadHash: string;
+        channel: DisclosureChannel;
+        purpose: DisclosurePurpose;
+        principalId: string;
+        assignmentId?: string;
+        destinationId: string;
+        destinationContractDigest: string;
+        recipientRevision: number;
+        recipientDigest: string;
+        recipients: readonly DisclosureRecipientSnapshot[];
+        principalSnapshot: DisclosurePrincipalSnapshot;
+        destinationSnapshot: ProcessingDestinationContract;
+        recipientSnapshot: DisclosureContext['recipients'];
+    }>;
+    readonly requiredTransformId?: string;
+    readonly requiredApprovalRoles: readonly DisclosureApprovalSnapshot['role'][];
+    readonly approvalIds: readonly string[];
+}
+export interface DisclosureDecisionInput {
+    readonly descriptor: DataDescriptor;
+    readonly policy: DataGovernancePolicySnapshot;
+    readonly context: DisclosureContext;
+    readonly approvals: readonly DisclosureApprovalSnapshot[];
+    readonly evaluatedAt: number;
+}
+export type DataDescriptorQuarantineReason = 'classification_unknown' | 'category_unknown' | 'registry_tenant_mismatch' | 'kind_floor_missing' | 'descriptor_malformed' | 'retention_window_invalid';
+export type DataDescriptorClassification = Readonly<{
+    status: 'quarantined';
+    objectId: string;
+    categoryRegistryRevision: number;
+    reasonCodes: readonly DataDescriptorQuarantineReason[];
+}> | Readonly<{
+    status: 'registered';
+    descriptor: DataDescriptor;
+}>;
+export declare function classifyDataDescriptor(candidateInput: unknown, registry: DataCategoryRegistrySnapshot): DataDescriptorClassification;
+/** Re-validates a registered Descriptor against the trusted generation registry used at ingress. */
+export declare function assertRegisteredDataDescriptor(descriptor: DataDescriptor, registry: DataCategoryRegistrySnapshot): void;
+export declare function decideDisclosure(input: DisclosureDecisionInput): DisclosureDecision;
+//# sourceMappingURL=data-governance.d.ts.map

package/lib/data-governance/data-governance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-governance.d.ts","sourceRoot":"","sources":["../../src/data-governance/data-governance.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,oBAAoB,GAC5B,QAAQ,GACR,kBAAkB,GAClB,cAAc,GACd,YAAY,GACZ,SAAS,CAAC;AAEd,MAAM,MAAM,QAAQ,GAChB,gBAAgB,GAChB,eAAe,GACf,gBAAgB,GAChB,aAAa,GACb,UAAU,GACV,UAAU,GACV,iBAAiB,GACjB,oBAAoB,CAAC;AAEzB,MAAM,MAAM,iBAAiB,GACzB,eAAe,GACf,gBAAgB,GAChB,mBAAmB,GACnB,oBAAoB,GACpB,qBAAqB,GACrB,kBAAkB,GAClB,OAAO,GACP,gBAAgB,CAAC;AAErB,MAAM,MAAM,cAAc,GACtB,WAAW,GACX,aAAa,GACb,gBAAgB,GAChB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,iBAAiB,GACzB,cAAc,GACd,eAAe,GACf,qBAAqB,GACrB,oBAAoB,GACpB,SAAS,GACT,gBAAgB,GAChB,KAAK,CAAC;AAEV,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;CACzE;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACnG,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;CACjE;AAED,MAAM,MAAM,iCAAiC,GAAG,IAAI,CAAC,4BAA4B,EAAE,QAAQ,CAAC,CAAC;AAE7F,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,iCAAiC,GACvC,4BAA4B,CA+B9B;AAED,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,4BAA4B,GAAG,IAAI,CAM5F;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;IACvD,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvD,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC3B,KAAK,EAAE,cAAc,CAAC;QACtB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;QACzB,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;QACnC,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;IACnE,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvD,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC,WAAW,CAAC,CAAC;IACzD,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACrD,QAAQ,CAAC,oBAAoB,EAAE,QAAQ,CAAC;QACtC,kBAAkB,EAAE,MAAM,CAAC;QAC3B,wBAAwB,EAAE,MAAM,CAAC;QACjC,sBAAsB,EAAE,MAAM,CAAC;KAChC,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;CAC9D;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,SAAS,2BAA2B,EAAE,CAAC;CAC7D;AAED,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,QAAQ,CAAC;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,SAAS,2BAA2B,EAAE,CAAC;CACpD,CAAC,GAAG,8BAA8B,CAuBlC;AAED,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,8BAA8B,GAAG,IAAI,CAQhG;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;IACtE,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,UAAU,GAAG,eAAe,GAAG,MAAM,CAAC;IAC5D,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;CAC1C;AAED,MAAM,MAAM,kCAAkC,GAAG,IAAI,CACrD,6BAA6B,EAC7B,gBAAgB,CACf,CAAC;AAEF,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,kCAAkC,GACxC,6BAA6B,CAM/B;AAED,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,6BAA6B,GACnC,IAAI,CAMN;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;IACzE,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,eAAe,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC,CAAC;IAC/E,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACxG,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAC1E,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;CAC1E;AAED,MAAM,MAAM,iCAAiC,GAAG,IAAI,CAAC,4BAA4B,EAAE,QAAQ,CAAC,CAAC;AAE7F,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,iCAAiC,GACvC,4BAA4B,CAqD9B;AAED,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,4BAA4B,GAAG,IAAI,CAM5F;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;IAC9F,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;IAC7D,QAAQ,CAAC,eAAe,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACvD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,eAAe,CAAC;IACjD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,2BAA2B,CAAC;IAChD,QAAQ,CAAC,WAAW,EAAE,6BAA6B,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;CACrD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,YAAY,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,UAAU,GAAG,UAAU,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,qBAAqB,GAC7B,MAAM,GACN,eAAe,GACf,oBAAoB,GACpB,mBAAmB,GACnB,MAAM,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAC5B,+BAA+B,GAC/B,0BAA0B,GAC1B,2BAA2B,GAC3B,4BAA4B,GAC5B,qBAAqB,GACrB,qBAAqB,GACrB,+BAA+B,GAC/B,6BAA6B,GAC7B,2BAA2B,GAC3B,4BAA4B,GAC5B,yBAAyB,GACzB,0CAA0C,GAC1C,8BAA8B,GAC9B,4BAA4B,GAC5B,yBAAyB,GACzB,gCAAgC,GAChC,4CAA4C,GAC5C,4BAA4B,GAC5B,qBAAqB,GACrB,kCAAkC,GAClC,iCAAiC,GACjC,oCAAoC,GACpC,wBAAwB,GACxB,0BAA0B,GAC1B,6BAA6B,GAC7B,8BAA8B,GAC9B,2BAA2B,CAAC;AAEhC,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACtD,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChE,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC;QAChC,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,iBAAiB,CAAC;QAC3B,OAAO,EAAE,iBAAiB,CAAC;QAC3B,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC;QACtB,yBAAyB,EAAE,MAAM,CAAC;QAClC,iBAAiB,EAAE,MAAM,CAAC;QAC1B,eAAe,EAAE,MAAM,CAAC;QACxB,UAAU,EAAE,SAAS,2BAA2B,EAAE,CAAC;QACnD,iBAAiB,EAAE,2BAA2B,CAAC;QAC/C,mBAAmB,EAAE,6BAA6B,CAAC;QACnD,iBAAiB,EAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;KACpD,CAAC,CAAC;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,qBAAqB,EAAE,SAAS,0BAA0B,CAAC,MAAM,CAAC,EAAE,CAAC;IAC9E,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAC1D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,8BAA8B,GACtC,wBAAwB,GACxB,kBAAkB,GAClB,0BAA0B,GAC1B,oBAAoB,GACpB,sBAAsB,GACtB,0BAA0B,CAAC;AAE/B,MAAM,MAAM,4BAA4B,GACpC,QAAQ,CAAC;IACT,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,EAAE,SAAS,8BAA8B,EAAE,CAAC;CACxD,CAAC,GACA,QAAQ,CAAC;IACT,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,EAAE,cAAc,CAAC;CAC5B,CAAC,CAAC;AAEL,wBAAgB,sBAAsB,CACpC,cAAc,EAAE,OAAO,EACvB,QAAQ,EAAE,4BAA4B,GACrC,4BAA4B,CA+E9B;AAED,oGAAoG;AACpG,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,cAAc,EAC1B,QAAQ,EAAE,4BAA4B,GACrC,IAAI,CAkDN;AA4KD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,uBAAuB,GAAG,kBAAkB,CAqLnF"}