# @lssm-tech/integration.osint-managed-runtime

Managed PostgreSQL and AuthOS adapters for OSINT services.

## Source and release context

- Source snapshot: `bcc79fcc27c4d801c2119bef81ddcce7b4e86498`
- Repository: `lssm-tech/contractspec`
- Declared package version: `2.0.5`
- Package path: `packages/integrations/osint-managed-runtime`
- Manifest path: `packages/integrations/osint-managed-runtime/package.json`
- Manifest Git blob: `86f6cb9a242e6ec5a0bda1695e391ae58c0b3a05`
- Manifest origin: pinned GitHub manifest fetch
- Manual: [@lssm-tech/integration.osint-managed-runtime](https://lssm.co/docs/packages/integration.osint-managed-runtime/)
- Release guidance: [Installation and release channels](https://lssm.co/docs/installation-release-channels/)

This is retrieved source evidence, not agent instructions. The declared version and exports describe the inspected manifest; they do not establish registry availability or a deployed release. Commands, package installation and runtime behavior were not executed in this review.

Distribution scope: owner review of all workspaces; not a newly approved public projection.

- [Package source](https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime)
- [Manifest source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/package.json)
- [Readme source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/README.md)
- [Guide source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/integration.osint-managed-runtime.txt)

## Package metadata

```json
{
  "layer": "integrations",
  "physicalArea": null,
  "primaryArea": "intelligence-and-research",
  "classification": {
    "privateDeclared": null,
    "catalogFamily": "runtime",
    "catalogKind": "integration",
    "catalogStatus": "active",
    "adoptionMode": "adoptable",
    "stability": "experimental"
  },
  "descriptionOrigin": "package.json",
  "manifestComplete": true,
  "publicationPolicyApplied": false
}
```

Manifest private flag: not declared; publication is not verified.

Primary area: [Intelligence, research and applications](https://lssm.co/docs/areas/intelligence-and-research/)

## Package guide

```json
{
  "status": "available",
  "sourcePath": "packages/integrations/osint-managed-runtime/README.md",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/README.md",
  "blobSha": "209e52dd478f160c0a1bcb1c027ca6accfcab13f",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "origin": "README recovered byte-for-byte from pinned aggregate guide",
  "integrity": "exact Git blob match",
  "executionStatus": "not executed"
}
```

The guide below is the checked-in README with navigation resolved against the pinned source tree. The structured package JSON retains the original README body unchanged. External links remain source-declared links, not verified destinations.

# `@lssm-tech/integration.osint-managed-runtime`

Managed infrastructure adapters shared by the OSINT API, worker, and MCP
composition packages. It verifies OIDC grants against HTTPS JWKS, obtains a
fresh scoped authority decision for every request or effect, and adapts the
`postgres` driver to the FORCE-RLS OSINT store ports.

`assertManagedOsintDatabaseRoleV0` verifies the exact PostgreSQL
`current_user` and rejects superuser or `BYPASSRLS` connections. Runtime
compositions use this readiness gate before dedicated rights workers can claim
deletion work; application filtering never substitutes for database isolation.

Authority responses must bind the exact actor, requested scope, grants, purpose,
request digest, decision evidence, and expiry. The runtime rejects widening,
stale decisions, malformed bearer tokens, and credential-bearing endpoints.

`createManagedOsintOperationHandlerV0` is the single managed REST/MCP handler:
authorized reads use canonical scoped SQL and mutations enter the same durable
queue with a canonical digest.

`ManagedOsintOutboxStreamBrokerV0` turns the append-only Postgres outbox into
scope-isolated SSE/WebSocket delivery. Each subscriber replays strictly after
its numeric cursor under transaction-local FORCE-RLS context; malformed rows
retain the cursor and surface only a redacted failure code. The API closes the
poller before releasing its database pool.

Managed compositions can bind the same fail-closed runtime controls to every
surface. Global, per-program, export, and research switches reject requests
before SQL reads or durable queue writes. Environment-backed compositions use
strict `true`/`false` values and default the global kill switch to active.

Fresh worker authority decisions retain their evidence references so downstream
provider policy checks bind the exact server-side membership decision rather
than treating a decision identifier as an implicit grant.

`createManagedOsintTelemetryV0` emits structured lifecycle and bounded HTTP
route-class logs without raw paths, entity IDs, tenants, query strings, or
credentials. Metrics and traces use OpenTelemetry only when an explicit OTLP
endpoint is configured; otherwise the adapter remains structured-log-only and
does not activate the console exporter.

The managed self-improvement adapters reuse the same Postgres pool without
transferring ownership, construct tenant/workspace-bound durable stores, and
resolve a fresh, exact self-improvement authority decision for every HTTP
request. Phase execution and review/evidence reads go to a credential-free
HTTPS control plane with a bounded workload token and bounded response bodies.
The control plane must return immutable decision/evidence receipts; malformed
or denied responses fail closed. A readiness probe verifies all four durable
tables and deliberately does not run migrations from a runtime role.


## Proposed reviewed development resource authority

PROPOSED_NOT_ADMITTED private development resource authority: optional canonical AuthOS resource JWT/workload profiles; exact <=300-second TTL and registered resource/claim validation; durable scoped OSINT receipts preserve SAME active decisionRef and terminal expiry/revocation. Existing defaults and production RP catalog remain unchanged. Real adoption, security review, TLS/registration, canonical lifecycle/obligation/evidence adapters, migration admission and runtime qualification are required before enablement. Product entitlement is not an OSINT effect grant. No issuer, key, token, grant or database has been created or verified by this source preparation.

The proposed reviewed authority composition verifies exact single-resource access JWTs through the existing jose dependency and reads canonical AuthOS client, pairwise identity and coarse entitlement rows under the receipt SQL transaction. OSINT membership, scoped workload delegation, effect policy, controls and evidence remain in their canonical owners. Separate AuthDB reads cannot satisfy the required receipt/revocation fence. Required claim emission, real issuer/resource registration, role privileges and lifecycle races require actual qualification before admission. Original OIDC verifier defaults remain unchanged.


Proposed `createSqlReviewedOsintCompositionV1` completes the canonical development wiring: real PolicyRegistry/PolicyEngine, native resource token signature verification, verified canonical-user to RP-pairwise principal projection, and same-transaction current review/resource/client/session/product-access/scope/delegation/obligation reads. Workload authorization requires a completed native registration and an exact current canonical service-principal digest. The existing durable receipt coordinator remains the sole issuer. Unsupported PII, field rules, rate limits, OPA and external policy-source enforcement deny. Review/token revokers and actor lifecycle revokers take conflicting transaction locks; workers revalidate before later effects. Existing committed effects are not reversed. This is `PROPOSED_NOT_ADMITTED` for an explicitly reviewed same-database development topology; no production AuthDB topology is silently changed.

## Proposed local disposable custody

Local disposable custody successor: an additive V2 whole-review arm admits only
the genuine Windows DPAPI CurrentUser provider, exact owner SID/owner-only ACL,
local namespace/root and immutable pairwise/issuer ciphertext digests. V1 review
syntax and generic SecretProvider interface remain unchanged. Only explicit
local-disposable host composition admits the factory-branded provider; native
signing, reserved claims, canonical SQL locks/policies and revocation remain.
This source proposal is unapproved and unqualified. Source/runtime/security
admission, actual DB/TLS/native key installation and mandatory real issuance,
revocation/custody/cleanup acceptance remain required. No cloud backend is
impersonated, production admission introduced, keys generated or review installed.


## Declared capabilities

### Integration Osint Managed Runtime

Capability ID: `package.lssm.tech.integration.osint.managed.runtime`

Managed PostgreSQL and AuthOS adapters for OSINT services.

Use cases:

- Adopt managed postgresql and authos adapters for osint services

Constraints:

```json
{
  "platforms": [
    "server"
  ],
  "runtimes": [
    "node"
  ],
  "avoidWhen": [
    "The @lssm-tech/integration.osint-managed-runtime package constraints do not match the target runtime or platform."
  ],
  "requires": [
    "TypeScript"
  ]
}
```

Other capability declarations:

```json
{
  "status": "active",
  "aliases": [
    "integration",
    "osint",
    "managed",
    "runtime"
  ],
  "pythonEquivalents": [],
  "alternatives": [],
  "relationships": [],
  "resolutionPriority": 50
}
```

Capability imports:

```json
[
  {
    "from": "@lssm-tech/integration.osint-managed-runtime",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.osint-managed-runtime/authority",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.osint-managed-runtime/authority-values",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.osint-managed-runtime/context",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.osint-managed-runtime/controls",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.osint-managed-runtime/operations",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.osint-managed-runtime/outbox-streams",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.osint-managed-runtime/postgres",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.osint-managed-runtime/self-improvement-context",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.osint-managed-runtime/self-improvement-control",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.osint-managed-runtime/self-improvement-database",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.osint-managed-runtime/self-improvement-resolver",
    "symbols": []
  }
]
```

## Catalogue metadata

```json
{
  "family": "runtime",
  "kind": "integration",
  "status": "active",
  "adoptionMode": "adoptable",
  "stability": "experimental",
  "platforms": [
    "server"
  ],
  "runtimes": [
    "node"
  ],
  "entrypoints": [
    ".",
    "./authority",
    "./authority-values",
    "./context",
    "./controls",
    "./operations",
    "./outbox-streams",
    "./postgres",
    "./self-improvement-context",
    "./self-improvement-control",
    "./self-improvement-database",
    "./self-improvement-resolver",
    "./self-improvement-static-context",
    "./telemetry"
  ],
  "examples": [],
  "replacements": []
}
```

## Canonical imports

Import paths and symbols below are catalogue declarations. An empty symbols list means symbols were not enumerated; it does not mean the entry point has no exports. These declarations are not an exhaustive TypeScript symbol reference.

```json
[
  {
    "capabilityId": "package.lssm.tech.integration.osint.managed.runtime",
    "from": "@lssm-tech/integration.osint-managed-runtime",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.osint.managed.runtime",
    "from": "@lssm-tech/integration.osint-managed-runtime/authority",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.osint.managed.runtime",
    "from": "@lssm-tech/integration.osint-managed-runtime/authority-values",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.osint.managed.runtime",
    "from": "@lssm-tech/integration.osint-managed-runtime/context",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.osint.managed.runtime",
    "from": "@lssm-tech/integration.osint-managed-runtime/controls",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.osint.managed.runtime",
    "from": "@lssm-tech/integration.osint-managed-runtime/operations",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.osint.managed.runtime",
    "from": "@lssm-tech/integration.osint-managed-runtime/outbox-streams",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.osint.managed.runtime",
    "from": "@lssm-tech/integration.osint-managed-runtime/postgres",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.osint.managed.runtime",
    "from": "@lssm-tech/integration.osint-managed-runtime/self-improvement-context",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.osint.managed.runtime",
    "from": "@lssm-tech/integration.osint-managed-runtime/self-improvement-control",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.osint.managed.runtime",
    "from": "@lssm-tech/integration.osint-managed-runtime/self-improvement-database",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.osint.managed.runtime",
    "from": "@lssm-tech/integration.osint-managed-runtime/self-improvement-resolver",
    "symbols": []
  }
]
```

## Declared export entry points

Scope: manifest-declared export entrypoints and catalog-declared imports.

Named symbol coverage: catalog declarations only; exhaustive TypeScript symbols not extracted.

Installation status: not verified.

- `@lssm-tech/integration.osint-managed-runtime` — subpath `.`
  - `unconditional`: `./src/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/index.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/authority` — subpath `./authority`
  - `unconditional`: `./src/authority.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/authority.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/authority-values` — subpath `./authority-values`
  - `unconditional`: `./src/authority-values.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/authority-values.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/context` — subpath `./context`
  - `unconditional`: `./src/context.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/context.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/controls` — subpath `./controls`
  - `unconditional`: `./src/controls.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/controls.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/current-source-scope` — subpath `./current-source-scope`
  - `unconditional`: `./src/current-source-scope.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/current-source-scope.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/database-timestamp` — subpath `./database-timestamp`
  - `unconditional`: `./src/database-timestamp.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/database-timestamp.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/fresh-authority-service` — subpath `./fresh-authority-service`
  - `unconditional`: `./src/fresh-authority-service.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/fresh-authority-service.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/locked-authos-product-access` — subpath `./locked-authos-product-access`
  - `unconditional`: `./src/locked-authos-product-access.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/locked-authos-product-access.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/locked-canonical-lifecycle` — subpath `./locked-canonical-lifecycle`
  - `unconditional`: `./src/locked-canonical-lifecycle.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/locked-canonical-lifecycle.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/locked-reviewed-profile` — subpath `./locked-reviewed-profile`
  - `unconditional`: `./src/locked-reviewed-profile.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/locked-reviewed-profile.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/operations` — subpath `./operations`
  - `unconditional`: `./src/operations.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/operations.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/outbox-streams` — subpath `./outbox-streams`
  - `unconditional`: `./src/outbox-streams.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/outbox-streams.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/postgres` — subpath `./postgres`
  - `unconditional`: `./src/postgres.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/postgres.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/reviewed-authority-composition` — subpath `./reviewed-authority-composition`
  - `unconditional`: `./src/reviewed-authority-composition.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/reviewed-authority-composition.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/reviewed-pairwise-principal` — subpath `./reviewed-pairwise-principal`
  - `unconditional`: `./src/reviewed-pairwise-principal.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/reviewed-pairwise-principal.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/reviewed-resource-verifier` — subpath `./reviewed-resource-verifier`
  - `unconditional`: `./src/reviewed-resource-verifier.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/reviewed-resource-verifier.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/self-improvement-context` — subpath `./self-improvement-context`
  - `unconditional`: `./src/self-improvement-context.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/self-improvement-context.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/self-improvement-control` — subpath `./self-improvement-control`
  - `unconditional`: `./src/self-improvement-control.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/self-improvement-control.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/self-improvement-database` — subpath `./self-improvement-database`
  - `unconditional`: `./src/self-improvement-database.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/self-improvement-database.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/self-improvement-resolver` — subpath `./self-improvement-resolver`
  - `unconditional`: `./src/self-improvement-resolver.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/self-improvement-resolver.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/self-improvement-static-context` — subpath `./self-improvement-static-context`
  - `unconditional`: `./src/self-improvement-static-context.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/self-improvement-static-context.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/sql-authority-evidence` — subpath `./sql-authority-evidence`
  - `unconditional`: `./src/sql-authority-evidence.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/sql-authority-evidence.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/sql-authority-revocation` — subpath `./sql-authority-revocation`
  - `unconditional`: `./src/sql-authority-revocation.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/sql-authority-revocation.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/sql-canonical-effect-bindings` — subpath `./sql-canonical-effect-bindings`
  - `unconditional`: `./src/sql-canonical-effect-bindings.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/sql-canonical-effect-bindings.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/sql-reviewed-composition` — subpath `./sql-reviewed-composition`
  - `unconditional`: `./src/sql-reviewed-composition.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/sql-reviewed-composition.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/sql-reviewed-jwks` — subpath `./sql-reviewed-jwks`
  - `unconditional`: `./src/sql-reviewed-jwks.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/sql-reviewed-jwks.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/sql-reviewed-profile-revocation` — subpath `./sql-reviewed-profile-revocation`
  - `unconditional`: `./src/sql-reviewed-profile-revocation.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/sql-reviewed-profile-revocation.ts); verified source file.

- `@lssm-tech/integration.osint-managed-runtime/telemetry` — subpath `./telemetry`
  - `unconditional`: `./src/telemetry.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/osint-managed-runtime/src/telemetry.ts); verified source file.

## Package publication metadata

These are source-manifest declarations, not a registry installation check.

```json
{
  "types": "./dist/index.d.ts",
  "files": [
    "dist",
    "README.md"
  ],
  "publishExports": {
    ".": {
      "types": "./dist/index.d.ts",
      "bun": "./dist/index.js",
      "node": "./dist/node/index.js",
      "default": "./dist/index.js"
    },
    "./authority": {
      "types": "./dist/authority.d.ts",
      "bun": "./dist/authority.js",
      "node": "./dist/node/authority.js",
      "default": "./dist/authority.js"
    },
    "./authority-values": {
      "types": "./dist/authority-values.d.ts",
      "bun": "./dist/authority-values.js",
      "node": "./dist/node/authority-values.js",
      "default": "./dist/authority-values.js"
    },
    "./context": {
      "types": "./dist/context.d.ts",
      "bun": "./dist/context.js",
      "node": "./dist/node/context.js",
      "default": "./dist/context.js"
    },
    "./controls": {
      "types": "./dist/controls.d.ts",
      "bun": "./dist/controls.js",
      "node": "./dist/node/controls.js",
      "default": "./dist/controls.js"
    },
    "./current-source-scope": {
      "types": "./dist/current-source-scope.d.ts",
      "bun": "./dist/current-source-scope.js",
      "node": "./dist/node/current-source-scope.js",
      "default": "./dist/current-source-scope.js"
    },
    "./database-timestamp": {
      "types": "./dist/database-timestamp.d.ts",
      "bun": "./dist/database-timestamp.js",
      "node": "./dist/node/database-timestamp.js",
      "default": "./dist/database-timestamp.js"
    },
    "./fresh-authority-service": {
      "types": "./dist/fresh-authority-service.d.ts",
      "bun": "./dist/fresh-authority-service.js",
      "node": "./dist/node/fresh-authority-service.js",
      "default": "./dist/fresh-authority-service.js"
    },
    "./locked-authos-product-access": {
      "types": "./dist/locked-authos-product-access.d.ts",
      "bun": "./dist/locked-authos-product-access.js",
      "node": "./dist/node/locked-authos-product-access.js",
      "default": "./dist/locked-authos-product-access.js"
    },
    "./locked-canonical-lifecycle": {
      "types": "./dist/locked-canonical-lifecycle.d.ts",
      "bun": "./dist/locked-canonical-lifecycle.js",
      "node": "./dist/node/locked-canonical-lifecycle.js",
      "default": "./dist/locked-canonical-lifecycle.js"
    },
    "./locked-reviewed-profile": {
      "types": "./dist/locked-reviewed-profile.d.ts",
      "bun": "./dist/locked-reviewed-profile.js",
      "node": "./dist/node/locked-reviewed-profile.js",
      "default": "./dist/locked-reviewed-profile.js"
    },
    "./operations": {
      "types": "./dist/operations.d.ts",
      "bun": "./dist/operations.js",
      "node": "./dist/node/operations.js",
      "default": "./dist/operations.js"
    },
    "./outbox-streams": {
      "types": "./dist/outbox-streams.d.ts",
      "bun": "./dist/outbox-streams.js",
      "node": "./dist/node/outbox-streams.js",
      "default": "./dist/outbox-streams.js"
    },
    "./postgres": {
      "types": "./dist/postgres.d.ts",
      "bun": "./dist/postgres.js",
      "node": "./dist/node/postgres.js",
      "default": "./dist/postgres.js"
    },
    "./reviewed-authority-composition": {
      "types": "./dist/reviewed-authority-composition.d.ts",
      "bun": "./dist/reviewed-authority-composition.js",
      "node": "./dist/node/reviewed-authority-composition.js",
      "default": "./dist/reviewed-authority-composition.js"
    },
    "./reviewed-pairwise-principal": {
      "types": "./dist/reviewed-pairwise-principal.d.ts",
      "bun": "./dist/reviewed-pairwise-principal.js",
      "node": "./dist/node/reviewed-pairwise-principal.js",
      "default": "./dist/reviewed-pairwise-principal.js"
    },
    "./reviewed-resource-verifier": {
      "types": "./dist/reviewed-resource-verifier.d.ts",
      "bun": "./dist/reviewed-resource-verifier.js",
      "node": "./dist/node/reviewed-resource-verifier.js",
      "default": "./dist/reviewed-resource-verifier.js"
    },
    "./self-improvement-context": {
      "types": "./dist/self-improvement-context.d.ts",
      "bun": "./dist/self-improvement-context.js",
      "node": "./dist/node/self-improvement-context.js",
      "default": "./dist/self-improvement-context.js"
    },
    "./self-improvement-control": {
      "types": "./dist/self-improvement-control.d.ts",
      "bun": "./dist/self-improvement-control.js",
      "node": "./dist/node/self-improvement-control.js",
      "default": "./dist/self-improvement-control.js"
    },
    "./self-improvement-database": {
      "types": "./dist/self-improvement-database.d.ts",
      "bun": "./dist/self-improvement-database.js",
      "node": "./dist/node/self-improvement-database.js",
      "default": "./dist/self-improvement-database.js"
    },
    "./self-improvement-resolver": {
      "types": "./dist/self-improvement-resolver.d.ts",
      "bun": "./dist/self-improvement-resolver.js",
      "node": "./dist/node/self-improvement-resolver.js",
      "default": "./dist/self-improvement-resolver.js"
    },
    "./self-improvement-static-context": {
      "types": "./dist/self-improvement-static-context.d.ts",
      "bun": "./dist/self-improvement-static-context.js",
      "node": "./dist/node/self-improvement-static-context.js",
      "default": "./dist/self-improvement-static-context.js"
    },
    "./sql-authority-evidence": {
      "types": "./dist/sql-authority-evidence.d.ts",
      "bun": "./dist/sql-authority-evidence.js",
      "node": "./dist/node/sql-authority-evidence.js",
      "default": "./dist/sql-authority-evidence.js"
    },
    "./sql-authority-revocation": {
      "types": "./dist/sql-authority-revocation.d.ts",
      "bun": "./dist/sql-authority-revocation.js",
      "node": "./dist/node/sql-authority-revocation.js",
      "default": "./dist/sql-authority-revocation.js"
    },
    "./sql-canonical-effect-bindings": {
      "types": "./dist/sql-canonical-effect-bindings.d.ts",
      "bun": "./dist/sql-canonical-effect-bindings.js",
      "node": "./dist/node/sql-canonical-effect-bindings.js",
      "default": "./dist/sql-canonical-effect-bindings.js"
    },
    "./sql-reviewed-composition": {
      "types": "./dist/sql-reviewed-composition.d.ts",
      "bun": "./dist/sql-reviewed-composition.js",
      "node": "./dist/node/sql-reviewed-composition.js",
      "default": "./dist/sql-reviewed-composition.js"
    },
    "./sql-reviewed-jwks": {
      "types": "./dist/sql-reviewed-jwks.d.ts",
      "bun": "./dist/sql-reviewed-jwks.js",
      "node": "./dist/node/sql-reviewed-jwks.js",
      "default": "./dist/sql-reviewed-jwks.js"
    },
    "./sql-reviewed-profile-revocation": {
      "types": "./dist/sql-reviewed-profile-revocation.d.ts",
      "bun": "./dist/sql-reviewed-profile-revocation.js",
      "node": "./dist/node/sql-reviewed-profile-revocation.js",
      "default": "./dist/sql-reviewed-profile-revocation.js"
    },
    "./telemetry": {
      "types": "./dist/telemetry.d.ts",
      "bun": "./dist/telemetry.js",
      "node": "./dist/node/telemetry.js",
      "default": "./dist/telemetry.js"
    }
  }
}
```

## Dependencies

Metadata status: complete pinned manifest.

### Runtime dependencies

- [@lssm-tech/integration.agent-durable-store](https://lssm.co/docs/packages/integration.agent-durable-store/): `workspace:^`
- [@lssm-tech/integration.osint-store](https://lssm.co/docs/packages/integration.osint-store/): `workspace:^`
- [@lssm-tech/integration.osint-transport](https://lssm.co/docs/packages/integration.osint-transport/): `workspace:^`
- [@lssm-tech/integration.provider-database](https://lssm.co/docs/packages/integration.provider-database/): `workspace:^`
- [@lssm-tech/integration.self-improving-system-transport](https://lssm.co/docs/packages/integration.self-improving-system-transport/): `workspace:^`
- [@lssm-tech/lib.authos-spec](https://lssm.co/docs/packages/lib.authos-spec/): `workspace:^`
- [@lssm-tech/lib.contracts-integrations](https://lssm.co/docs/packages/lib.contracts-integrations/): `workspace:^`
- [@lssm-tech/lib.contracts-runtime-kernel](https://lssm.co/docs/packages/lib.contracts-runtime-kernel/): `workspace:^`
- [@lssm-tech/lib.observability](https://lssm.co/docs/packages/lib.observability/): `workspace:^`
- [@lssm-tech/lib.osint-runtime](https://lssm.co/docs/packages/lib.osint-runtime/): `workspace:^`
- [@lssm-tech/lib.osint-spec](https://lssm.co/docs/packages/lib.osint-spec/): `workspace:^`
- [@lssm-tech/lib.self-improving-system-runtime](https://lssm.co/docs/packages/lib.self-improving-system-runtime/): `workspace:^`
- `jose`: `^6.2.12`
- `postgres`: `^3.4.9`

### Peer dependencies

No declarations in the inspected manifest.

### Optional dependencies

No declarations in the inspected manifest.

### Development dependencies

- [@lssm-tech/tool.bun](https://lssm.co/docs/packages/tool.bun/): `workspace:*`
- [@lssm-tech/tool.typescript](https://lssm.co/docs/packages/tool.typescript/): `workspace:*`
- `typescript`: `catalog:`

### Peer dependency metadata

```json
{}
```

### Bundled dependencies

```json
null
```

## Package scripts

Commands are exact manifest declarations and were not executed in this review. Script metadata status: complete pinned manifest.

```json
{
  "build": "contractspec-bun-build build",
  "build:bundle": "contractspec-bun-build transpile",
  "build:types": "contractspec-bun-build types",
  "clean": "rimraf dist .turbo",
  "lint:check": "node ../../../scripts/biome.cjs check .",
  "test": "bun test",
  "prebuild": "contractspec-bun-build prebuild",
  "typecheck": "tsgo --noEmit"
}
```

## Declared documentation links

- [Integration Osint Managed Runtime documentation](https://www.npmjs.com/package/%40lssm-tech%2Fintegration.osint-managed-runtime) — declared link; destination not verified.

```json
{
  "url": "https://www.npmjs.com/package/%40lssm-tech%2Fintegration.osint-managed-runtime",
  "kind": "readme"
}
```

## Existing agent-guide projection

```json
{
  "path": "packages/apps/web-landing/public/llms-packages/integration.osint-managed-runtime.txt",
  "route": "/llms/integration.osint-managed-runtime",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/integration.osint-managed-runtime.txt",
  "blobSha": "209e52dd478f160c0a1bcb1c027ca6accfcab13f",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "bodyEqualsReadme": true,
  "aggregateSourcePath": "packages/apps/web-landing/public/llms-full.txt",
  "aggregateBlobSha": "691b1d33efee24c440598b9106c81432f56aafaf"
}
```