anantham-v2 2.0.0-alpha.1

package/dist/domain/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/domain/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,iBAAiB,sKAc5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,sBAAsB,wEAMjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,0BAA0B,iKAarC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,uBAAuB,2DAKlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;EAKpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,sBAAsB;;;;;;;;;;;;EAIjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgB/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwB7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,kBAAkB,uCAAmC,CAAC;AACnE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/domain/plugin.js

@@ -0,0 +1,118 @@
+/**
+ * Anantham V2 — Plugin Domain Contracts
+ *
+ * Defines authoritative domain models, types, and runtime Zod schemas for
+ * Plugin manifests, lifecycle state machines, trust models, permissions,
+ * compatibility constraints, and registry records.
+ */
+import { z } from "zod";
+export const PluginClassSchema = z.enum([
+    "model-provider",
+    "tool",
+    "skill",
+    "agent",
+    "executor",
+    "verifier",
+    "memory-provider",
+    "mcp-adapter",
+    "command",
+    "hook",
+    "ui",
+    "scheduler",
+    "connector",
+]);
+export const PluginTrustStateSchema = z.enum([
+    "unknown",
+    "reviewed",
+    "trusted",
+    "restricted",
+    "blocked",
+]);
+export const PluginLifecycleStateSchema = z.enum([
+    "discovered",
+    "inspected",
+    "validated",
+    "resolved",
+    "reviewed",
+    "installing",
+    "installed",
+    "verifying",
+    "active",
+    "disabled",
+    "unloaded",
+    "failed",
+]);
+export const PluginHealthStateSchema = z.enum([
+    "healthy",
+    "degraded",
+    "unhealthy",
+    "failed",
+]);
+export const PluginPermissionsSchema = z.object({
+    network: z.array(z.string()).optional().default([]),
+    filesystem: z
+        .object({
+        read: z.array(z.string()).optional().default([]),
+        write: z.array(z.string()).optional().default([]),
+    })
+        .optional()
+        .default({ read: [], write: [] }),
+    credentials: z.array(z.string()).optional().default([]),
+    tools: z.array(z.string()).optional().default([]),
+    subprocess: z.boolean().optional().default(false),
+});
+export const PluginCompatibilitySchema = z.object({
+    os: z.array(z.enum(["win32", "linux", "darwin"])).optional().default(["win32", "linux", "darwin"]),
+    node: z.string().optional().default(">=20.0.0"),
+    runtime: z.string().optional().default("anantham>=2.0"),
+    capabilities: z.array(z.string()).optional().default([]),
+});
+export const PluginDependencySchema = z.object({
+    id: z.string().min(1),
+    version: z.string().min(1),
+    optional: z.boolean().optional().default(false),
+});
+export const PluginManifestSchema = z.object({
+    id: z.string().min(1).regex(/^[a-zA-Z0-9_\-\.]+$/, "Plugin ID must be alphanumeric with dashes, dots, or underscores"),
+    name: z.string().min(1),
+    version: z.string().min(1).regex(/^\d+\.\d+\.\d+(-[a-zA-Z0-9\.]+)?$/, "Version must follow semantic versioning (SemVer)"),
+    description: z.string().optional(),
+    publisher: z.string().optional().default("local"),
+    classes: z.array(PluginClassSchema).optional().default(["tool"]),
+    runtime: z.string().optional().default("anantham>=2.0"),
+    provides: z.array(z.string()).optional().default([]),
+    requires: z.array(z.string()).optional().default([]),
+    dependencies: z.array(PluginDependencySchema).optional().default([]),
+    permissions: PluginPermissionsSchema.optional().default({}),
+    compatibility: PluginCompatibilitySchema.optional().default({}),
+    checksum: z.string().min(1),
+    stateVersion: z.number().int().nonnegative().optional().default(1),
+    entrypoint: z.string().optional(),
+});
+export const PluginRecordSchema = z.object({
+    manifest: PluginManifestSchema,
+    trustState: PluginTrustStateSchema.default("unknown"),
+    lifecycleState: PluginLifecycleStateSchema.default("discovered"),
+    healthState: PluginHealthStateSchema.default("healthy"),
+    installPath: z.string().optional(),
+    installedAt: z.string().datetime().optional(),
+    lastActivatedAt: z.string().datetime().optional(),
+    activeRegistrations: z
+        .object({
+        tools: z.array(z.string()).default([]),
+        commands: z.array(z.string()).default([]),
+        hooks: z.array(z.string()).default([]),
+        providers: z.array(z.string()).default([]),
+    })
+        .default({ tools: [], commands: [], hooks: [], providers: [] }),
+    previousVersion: z
+        .object({
+        manifest: PluginManifestSchema,
+        installPath: z.string().optional(),
+        checksum: z.string(),
+    })
+        .optional(),
+    projectPin: z.string().optional(),
+});
+export const PluginPinMapSchema = z.record(z.string(), z.string());
+//# sourceMappingURL=plugin.js.map

package/dist/domain/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/domain/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC;IACtC,gBAAgB;IAChB,MAAM;IACN,OAAO;IACP,OAAO;IACP,UAAU;IACV,UAAU;IACV,iBAAiB;IACjB,aAAa;IACb,SAAS;IACT,MAAM;IACN,IAAI;IACJ,WAAW;IACX,WAAW;CACZ,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC3C,SAAS;IACT,UAAU;IACV,SAAS;IACT,YAAY;IACZ,SAAS;CACV,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,IAAI,CAAC;IAC/C,YAAY;IACZ,WAAW;IACX,WAAW;IACX,UAAU;IACV,UAAU;IACV,YAAY;IACZ,WAAW;IACX,WAAW;IACX,QAAQ;IACR,UAAU;IACV,UAAU;IACV,QAAQ;CACT,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC5C,SAAS;IACT,UAAU;IACV,WAAW;IACX,QAAQ;CACT,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;KAClD,CAAC;SACD,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACnC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACjD,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAClD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClG,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;IACvD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACzD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAChD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,EAAE,kEAAkE,CAAC;IACtH,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,mCAAmC,EAAE,kDAAkD,CAAC;IACzH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;IAChE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;IACvD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACpE,WAAW,EAAE,uBAAuB,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3D,aAAa,EAAE,yBAAyB,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,oBAAoB;IAC9B,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,SAAS,CAAC;IACrD,cAAc,EAAE,0BAA0B,CAAC,OAAO,CAAC,YAAY,CAAC;IAChE,WAAW,EAAE,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC;IACvD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,mBAAmB,EAAE,CAAC;SACnB,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KAC3C,CAAC;SACD,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACjE,eAAe,EAAE,CAAC;SACf,MAAM,CAAC;QACN,QAAQ,EAAE,oBAAoB;QAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;KACrB,CAAC;SACD,QAAQ,EAAE;IACb,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC"}

package/dist/domain/policy.d.ts

@@ -0,0 +1,279 @@
+import { z } from "zod";
+/**
+ * Deterministic risk level classification.
+ * PRD Part 1 Section 34 & PRD Part 3 Section 146.
+ */
+export declare const RiskLevelSchema: z.ZodEnum<["low", "medium", "high", "critical"]>;
+export type RiskLevel = z.infer<typeof RiskLevelSchema>;
+/**
+ * Core policy decision types.
+ */
+export declare const PolicyDecisionTypeSchema: z.ZodEnum<["allow", "deny", "require_approval"]>;
+export type PolicyDecisionType = z.infer<typeof PolicyDecisionTypeSchema>;
+/**
+ * Declarative policy rule contract.
+ */
+export declare const PolicyRuleSchema: z.ZodObject<{
+    ruleId: z.ZodString;
+    name: z.ZodString;
+    priority: z.ZodDefault<z.ZodNumber>;
+    scope: z.ZodDefault<z.ZodObject<{
+        projectId: z.ZodOptional<z.ZodString>;
+        actorType: z.ZodOptional<z.ZodEnum<["user", "agent", "system", "tool", "mcp", "verifier"]>>;
+        toolName: z.ZodOptional<z.ZodString>;
+        sensitivity: z.ZodOptional<z.ZodEnum<["public", "normal", "sensitive", "secret"]>>;
+        operationType: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        sensitivity?: "public" | "normal" | "sensitive" | "secret" | undefined;
+        projectId?: string | undefined;
+        actorType?: "system" | "user" | "agent" | "tool" | "mcp" | "verifier" | undefined;
+        toolName?: string | undefined;
+        operationType?: string | undefined;
+    }, {
+        sensitivity?: "public" | "normal" | "sensitive" | "secret" | undefined;
+        projectId?: string | undefined;
+        actorType?: "system" | "user" | "agent" | "tool" | "mcp" | "verifier" | undefined;
+        toolName?: string | undefined;
+        operationType?: string | undefined;
+    }>>;
+    effect: z.ZodEnum<["allow", "deny", "require_approval"]>;
+    riskLevel: z.ZodEnum<["low", "medium", "high", "critical"]>;
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    scope: {
+        sensitivity?: "public" | "normal" | "sensitive" | "secret" | undefined;
+        projectId?: string | undefined;
+        actorType?: "system" | "user" | "agent" | "tool" | "mcp" | "verifier" | undefined;
+        toolName?: string | undefined;
+        operationType?: string | undefined;
+    };
+    priority: number;
+    reason: string;
+    ruleId: string;
+    effect: "allow" | "deny" | "require_approval";
+    riskLevel: "critical" | "high" | "low" | "medium";
+}, {
+    name: string;
+    reason: string;
+    ruleId: string;
+    effect: "allow" | "deny" | "require_approval";
+    riskLevel: "critical" | "high" | "low" | "medium";
+    scope?: {
+        sensitivity?: "public" | "normal" | "sensitive" | "secret" | undefined;
+        projectId?: string | undefined;
+        actorType?: "system" | "user" | "agent" | "tool" | "mcp" | "verifier" | undefined;
+        toolName?: string | undefined;
+        operationType?: string | undefined;
+    } | undefined;
+    priority?: number | undefined;
+}>;
+export type PolicyRule = z.infer<typeof PolicyRuleSchema>;
+/**
+ * Context payload provided to the PolicyEngine for deterministic evaluation.
+ */
+export declare const PolicyEvaluationContextSchema: z.ZodObject<{
+    actor: z.ZodObject<{
+        id: z.ZodString;
+        type: z.ZodEnum<["user", "agent", "system", "tool", "mcp", "verifier"]>;
+        role: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        type: "system" | "user" | "agent" | "tool" | "mcp" | "verifier";
+        id: string;
+        role?: string | undefined;
+    }, {
+        type: "system" | "user" | "agent" | "tool" | "mcp" | "verifier";
+        id: string;
+        role?: string | undefined;
+    }>;
+    project: z.ZodObject<{
+        id: z.ZodString;
+        trustProfile: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        trustProfile?: string | undefined;
+    }, {
+        id: string;
+        trustProfile?: string | undefined;
+    }>;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+    }, {
+        id: string;
+    }>>;
+    task: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+    }, {
+        id: string;
+    }>>;
+    operation: z.ZodObject<{
+        type: z.ZodString;
+        toolName: z.ZodOptional<z.ZodString>;
+        resource: z.ZodOptional<z.ZodString>;
+        arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        targetProjectId: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        type: string;
+        toolName?: string | undefined;
+        resource?: string | undefined;
+        arguments?: Record<string, unknown> | undefined;
+        targetProjectId?: string | undefined;
+    }, {
+        type: string;
+        toolName?: string | undefined;
+        resource?: string | undefined;
+        arguments?: Record<string, unknown> | undefined;
+        targetProjectId?: string | undefined;
+    }>;
+    dataSensitivity: z.ZodOptional<z.ZodEnum<["public", "normal", "sensitive", "secret"]>>;
+    requestedRiskLevel: z.ZodOptional<z.ZodEnum<["low", "medium", "high", "critical"]>>;
+}, "strip", z.ZodTypeAny, {
+    project: {
+        id: string;
+        trustProfile?: string | undefined;
+    };
+    actor: {
+        type: "system" | "user" | "agent" | "tool" | "mcp" | "verifier";
+        id: string;
+        role?: string | undefined;
+    };
+    operation: {
+        type: string;
+        toolName?: string | undefined;
+        resource?: string | undefined;
+        arguments?: Record<string, unknown> | undefined;
+        targetProjectId?: string | undefined;
+    };
+    session?: {
+        id: string;
+    } | undefined;
+    task?: {
+        id: string;
+    } | undefined;
+    dataSensitivity?: "public" | "normal" | "sensitive" | "secret" | undefined;
+    requestedRiskLevel?: "critical" | "high" | "low" | "medium" | undefined;
+}, {
+    project: {
+        id: string;
+        trustProfile?: string | undefined;
+    };
+    actor: {
+        type: "system" | "user" | "agent" | "tool" | "mcp" | "verifier";
+        id: string;
+        role?: string | undefined;
+    };
+    operation: {
+        type: string;
+        toolName?: string | undefined;
+        resource?: string | undefined;
+        arguments?: Record<string, unknown> | undefined;
+        targetProjectId?: string | undefined;
+    };
+    session?: {
+        id: string;
+    } | undefined;
+    task?: {
+        id: string;
+    } | undefined;
+    dataSensitivity?: "public" | "normal" | "sensitive" | "secret" | undefined;
+    requestedRiskLevel?: "critical" | "high" | "low" | "medium" | undefined;
+}>;
+export type PolicyEvaluationContext = z.infer<typeof PolicyEvaluationContextSchema>;
+/**
+ * Authoritative Policy Decision output.
+ */
+export declare const PolicyDecisionSchema: z.ZodObject<{
+    decision: z.ZodEnum<["allow", "deny", "require_approval"]>;
+    riskLevel: z.ZodEnum<["low", "medium", "high", "critical"]>;
+    reason: z.ZodString;
+    ruleId: z.ZodOptional<z.ZodString>;
+    approvalId: z.ZodOptional<z.ZodString>;
+    argumentsDigest: z.ZodOptional<z.ZodString>;
+    evaluatedAt: z.ZodString;
+    policyVersion: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: string;
+    decision: "allow" | "deny" | "require_approval";
+    riskLevel: "critical" | "high" | "low" | "medium";
+    evaluatedAt: string;
+    policyVersion: string;
+    ruleId?: string | undefined;
+    approvalId?: string | undefined;
+    argumentsDigest?: string | undefined;
+}, {
+    reason: string;
+    decision: "allow" | "deny" | "require_approval";
+    riskLevel: "critical" | "high" | "low" | "medium";
+    evaluatedAt: string;
+    policyVersion: string;
+    ruleId?: string | undefined;
+    approvalId?: string | undefined;
+    argumentsDigest?: string | undefined;
+}>;
+export type PolicyDecision = z.infer<typeof PolicyDecisionSchema>;
+/**
+ * Lifecycle status of a human approval gate.
+ */
+export declare const ApprovalStatusSchema: z.ZodEnum<["pending", "approved", "rejected", "expired", "cancelled", "consumed"]>;
+export type ApprovalStatus = z.infer<typeof ApprovalStatusSchema>;
+/**
+ * Durable Approval record with TOCTOU cryptographic binding digest.
+ */
+export declare const ApprovalRecordSchema: z.ZodObject<{
+    approvalId: z.ZodString;
+    projectId: z.ZodString;
+    sessionId: z.ZodOptional<z.ZodString>;
+    taskId: z.ZodOptional<z.ZodString>;
+    actorId: z.ZodString;
+    action: z.ZodString;
+    riskLevel: z.ZodEnum<["low", "medium", "high", "critical"]>;
+    argumentsDigest: z.ZodString;
+    status: z.ZodEnum<["pending", "approved", "rejected", "expired", "cancelled", "consumed"]>;
+    createdAt: z.ZodString;
+    expiresAt: z.ZodOptional<z.ZodString>;
+    decidedAt: z.ZodOptional<z.ZodString>;
+    decidedBy: z.ZodOptional<z.ZodString>;
+    decisionReason: z.ZodOptional<z.ZodString>;
+    consumedAt: z.ZodOptional<z.ZodString>;
+    policyVersion: z.ZodDefault<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    status: "cancelled" | "expired" | "pending" | "approved" | "rejected" | "consumed";
+    createdAt: string;
+    projectId: string;
+    riskLevel: "critical" | "high" | "low" | "medium";
+    approvalId: string;
+    argumentsDigest: string;
+    policyVersion: string;
+    actorId: string;
+    action: string;
+    sessionId?: string | undefined;
+    taskId?: string | undefined;
+    expiresAt?: string | undefined;
+    decidedAt?: string | undefined;
+    decidedBy?: string | undefined;
+    decisionReason?: string | undefined;
+    consumedAt?: string | undefined;
+}, {
+    status: "cancelled" | "expired" | "pending" | "approved" | "rejected" | "consumed";
+    createdAt: string;
+    projectId: string;
+    riskLevel: "critical" | "high" | "low" | "medium";
+    approvalId: string;
+    argumentsDigest: string;
+    actorId: string;
+    action: string;
+    sessionId?: string | undefined;
+    taskId?: string | undefined;
+    expiresAt?: string | undefined;
+    policyVersion?: string | undefined;
+    decidedAt?: string | undefined;
+    decidedBy?: string | undefined;
+    decisionReason?: string | undefined;
+    consumedAt?: string | undefined;
+}>;
+export type ApprovalRecord = z.infer<typeof ApprovalRecordSchema>;
+//# sourceMappingURL=policy.d.ts.map

package/dist/domain/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/domain/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;GAGG;AACH,eAAO,MAAM,eAAe,kDAAgD,CAAC;AAC7E,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD;;GAEG;AACH,eAAO,MAAM,wBAAwB,kDAAgD,CAAC;AACtF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgB3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;GAEG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqBxC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;GAEG;AACH,eAAO,MAAM,oBAAoB,oFAAkF,CAAC;AACpH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiB/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/domain/policy.js

@@ -0,0 +1,96 @@
+import { z } from "zod";
+import { ActorTypeSchema } from "./event.js";
+import { SensitivityLevelSchema } from "./security.js";
+/**
+ * Deterministic risk level classification.
+ * PRD Part 1 Section 34 & PRD Part 3 Section 146.
+ */
+export const RiskLevelSchema = z.enum(["low", "medium", "high", "critical"]);
+/**
+ * Core policy decision types.
+ */
+export const PolicyDecisionTypeSchema = z.enum(["allow", "deny", "require_approval"]);
+/**
+ * Declarative policy rule contract.
+ */
+export const PolicyRuleSchema = z.object({
+    ruleId: z.string().min(1),
+    name: z.string().min(1),
+    priority: z.number().default(0),
+    scope: z
+        .object({
+        projectId: z.string().optional(),
+        actorType: ActorTypeSchema.optional(),
+        toolName: z.string().optional(),
+        sensitivity: SensitivityLevelSchema.optional(),
+        operationType: z.string().optional(),
+    })
+        .default({}),
+    effect: PolicyDecisionTypeSchema,
+    riskLevel: RiskLevelSchema,
+    reason: z.string().min(1),
+});
+/**
+ * Context payload provided to the PolicyEngine for deterministic evaluation.
+ */
+export const PolicyEvaluationContextSchema = z.object({
+    actor: z.object({
+        id: z.string().min(1),
+        type: ActorTypeSchema,
+        role: z.string().optional(),
+    }),
+    project: z.object({
+        id: z.string().min(1),
+        trustProfile: z.string().optional(),
+    }),
+    session: z.object({ id: z.string() }).optional(),
+    task: z.object({ id: z.string() }).optional(),
+    operation: z.object({
+        type: z.string().min(1),
+        toolName: z.string().optional(),
+        resource: z.string().optional(),
+        arguments: z.record(z.unknown()).optional(),
+        targetProjectId: z.string().optional(),
+    }),
+    dataSensitivity: SensitivityLevelSchema.optional(),
+    requestedRiskLevel: RiskLevelSchema.optional(),
+});
+/**
+ * Authoritative Policy Decision output.
+ */
+export const PolicyDecisionSchema = z.object({
+    decision: PolicyDecisionTypeSchema,
+    riskLevel: RiskLevelSchema,
+    reason: z.string().min(1),
+    ruleId: z.string().optional(),
+    approvalId: z.string().optional(),
+    argumentsDigest: z.string().optional(),
+    evaluatedAt: z.string().min(1),
+    policyVersion: z.string().min(1),
+});
+/**
+ * Lifecycle status of a human approval gate.
+ */
+export const ApprovalStatusSchema = z.enum(["pending", "approved", "rejected", "expired", "cancelled", "consumed"]);
+/**
+ * Durable Approval record with TOCTOU cryptographic binding digest.
+ */
+export const ApprovalRecordSchema = z.object({
+    approvalId: z.string().min(1),
+    projectId: z.string().min(1),
+    sessionId: z.string().optional(),
+    taskId: z.string().optional(),
+    actorId: z.string().min(1),
+    action: z.string().min(1),
+    riskLevel: RiskLevelSchema,
+    argumentsDigest: z.string().min(1),
+    status: ApprovalStatusSchema,
+    createdAt: z.string().min(1),
+    expiresAt: z.string().optional(),
+    decidedAt: z.string().optional(),
+    decidedBy: z.string().optional(),
+    decisionReason: z.string().optional(),
+    consumedAt: z.string().optional(),
+    policyVersion: z.string().min(1).default("1.0.0"),
+});
+//# sourceMappingURL=policy.js.map

package/dist/domain/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/domain/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAG7E;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAGtF;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/B,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;QACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,WAAW,EAAE,sBAAsB,CAAC,QAAQ,EAAE;QAC9C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACrC,CAAC;SACD,OAAO,CAAC,EAAE,CAAC;IACd,MAAM,EAAE,wBAAwB;IAChC,SAAS,EAAE,eAAe;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAGH;;GAEG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC5B,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACpC,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC3C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACvC,CAAC;IACF,eAAe,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IAClD,kBAAkB,EAAE,eAAe,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC;AAGH;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,wBAAwB;IAClC,SAAS,EAAE,eAAe;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC;AAGH;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AAGpH;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,SAAS,EAAE,eAAe;IAC1B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,MAAM,EAAE,oBAAoB;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;CAClD,CAAC,CAAC"}

package/dist/domain/project.d.ts

@@ -0,0 +1,61 @@
+import { z } from "zod";
+/**
+ * Project lifecycle status.
+ */
+export declare const ProjectStatusSchema: z.ZodEnum<["active", "archived", "paused"]>;
+export type ProjectStatus = z.infer<typeof ProjectStatusSchema>;
+/**
+ * Project trust profile affecting baseline permissions.
+ * PRD Part 1 Section 34.
+ */
+export declare const TrustProfileSchema: z.ZodEnum<["untrusted", "safe", "developer", "trusted", "custom"]>;
+export type TrustProfile = z.infer<typeof TrustProfileSchema>;
+/**
+ * Durable Project registry contract.
+ * PRD Part 1 Section 28 (PRD-PROJ-001).
+ */
+export declare const ProjectSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    rootPath: z.ZodString;
+    status: z.ZodEnum<["active", "archived", "paused"]>;
+    tags: z.ZodArray<z.ZodString, "many">;
+    modelProfile: z.ZodString;
+    memoryNamespace: z.ZodString;
+    orchestrationProfile: z.ZodString;
+    trustProfile: z.ZodEnum<["untrusted", "safe", "developer", "trusted", "custom"]>;
+    createdAt: z.ZodString;
+    lastOpenedAt: z.ZodString;
+    lastActivityAt: z.ZodString;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    status: "active" | "archived" | "paused";
+    name: string;
+    id: string;
+    createdAt: string;
+    tags: string[];
+    rootPath: string;
+    modelProfile: string;
+    memoryNamespace: string;
+    orchestrationProfile: string;
+    trustProfile: "trusted" | "untrusted" | "developer" | "custom" | "safe";
+    lastOpenedAt: string;
+    lastActivityAt: string;
+    metadata?: Record<string, unknown> | undefined;
+}, {
+    status: "active" | "archived" | "paused";
+    name: string;
+    id: string;
+    createdAt: string;
+    tags: string[];
+    rootPath: string;
+    modelProfile: string;
+    memoryNamespace: string;
+    orchestrationProfile: string;
+    trustProfile: "trusted" | "untrusted" | "developer" | "custom" | "safe";
+    lastOpenedAt: string;
+    lastActivityAt: string;
+    metadata?: Record<string, unknown> | undefined;
+}>;
+export type Project = z.infer<typeof ProjectSchema>;
+//# sourceMappingURL=project.d.ts.map

package/dist/domain/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../src/domain/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,eAAO,MAAM,mBAAmB,6CAA2C,CAAC;AAC5E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;GAGG;AACH,eAAO,MAAM,kBAAkB,oEAM7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAcxB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC"}

package/dist/domain/project.js

@@ -0,0 +1,36 @@
+import { z } from "zod";
+/**
+ * Project lifecycle status.
+ */
+export const ProjectStatusSchema = z.enum(["active", "archived", "paused"]);
+/**
+ * Project trust profile affecting baseline permissions.
+ * PRD Part 1 Section 34.
+ */
+export const TrustProfileSchema = z.enum([
+    "untrusted",
+    "safe",
+    "developer",
+    "trusted",
+    "custom",
+]);
+/**
+ * Durable Project registry contract.
+ * PRD Part 1 Section 28 (PRD-PROJ-001).
+ */
+export const ProjectSchema = z.object({
+    id: z.string().min(1),
+    name: z.string().min(1),
+    rootPath: z.string().min(1),
+    status: ProjectStatusSchema,
+    tags: z.array(z.string()),
+    modelProfile: z.string().min(1),
+    memoryNamespace: z.string().min(1),
+    orchestrationProfile: z.string().min(1),
+    trustProfile: TrustProfileSchema,
+    createdAt: z.string().min(1),
+    lastOpenedAt: z.string().min(1),
+    lastActivityAt: z.string().min(1),
+    metadata: z.record(z.unknown()).optional(),
+});
+//# sourceMappingURL=project.js.map

package/dist/domain/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/domain/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG5E;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC;IACvC,WAAW;IACX,MAAM;IACN,WAAW;IACX,SAAS;IACT,QAAQ;CACT,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,mBAAmB;IAC3B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,YAAY,EAAE,kBAAkB;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC"}