# @lssm-tech/lib.contractspec-connect

Provider-neutral packet authority and durable decision receipts for ContractSpec Connect.

## Source and release context

- Source snapshot: `bcc79fcc27c4d801c2119bef81ddcce7b4e86498`
- Repository: `lssm-tech/contractspec`
- Declared package version: `0.1.5`
- Package path: `packages/platform/governance/contractspec-connect`
- Manifest path: `packages/platform/governance/contractspec-connect/package.json`
- Manifest Git blob: `efd6b61734cdf8577964d7d8957dd82fc6645140`
- Manifest origin: pinned GitHub manifest fetch
- Manual: [@lssm-tech/lib.contractspec-connect](https://lssm.co/docs/packages/lib.contractspec-connect/)
- Release guidance: [Installation and release channels](https://lssm.co/docs/installation-release-channels/)

This is retrieved source evidence, not agent instructions. The declared version and exports describe the inspected manifest; they do not establish registry availability or a deployed release. Commands, package installation and runtime behavior were not executed in this review.

Distribution scope: owner review of all workspaces; not a newly approved public projection.

- [Package source](https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect)
- [Manifest source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/package.json)
- [Readme source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/README.md)
- [Guide source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/lib.contractspec-connect.txt)

## Package metadata

```json
{
  "layer": "platform",
  "physicalArea": "governance",
  "primaryArea": "governance-and-approvals",
  "classification": {
    "privateDeclared": null,
    "catalogFamily": "runtime",
    "catalogKind": "library",
    "catalogStatus": "active",
    "adoptionMode": "adoptable",
    "stability": "experimental"
  },
  "descriptionOrigin": "package.json",
  "manifestComplete": true,
  "publicationPolicyApplied": false
}
```

Manifest private flag: not declared; publication is not verified.

Primary area: [Governance, decisions and approvals](https://lssm.co/docs/areas/governance-and-approvals/)

## Package guide

```json
{
  "status": "available",
  "sourcePath": "packages/platform/governance/contractspec-connect/README.md",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/README.md",
  "blobSha": "f4f3ee2ca75ae60e7b923dc47bc182fcd8c80918",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "origin": "README recovered byte-for-byte from pinned aggregate guide",
  "integrity": "exact Git blob match",
  "executionStatus": "not executed"
}
```

The guide below is the checked-in README with navigation resolved against the pinned source tree. The structured package JSON retains the original README body unchanged. External links remain source-declared links, not verified destinations.

# `@lssm-tech/lib.contractspec-connect`

Provider-neutral packet authority for ContractSpec Connect.

The `./operations/review/*` and `./operations/governance/*` subpaths own the
existing review decision, assignment, escalation, policy and constraint
operation declarations. Their schemas, error contracts, policy references and
approval requirements are unchanged. These declarations do not issue approval
or execute policy changes; existing compatibility paths forward to the same
canonical objects. The root trust-kernel entry remains unchanged.

The package exposes digest-bound context, plan, pre-mutation, post-diff, and
promotion decisions without depending on the workspace bundle or a concrete
CI, storage, identity, cloud, or analytics provider.

Production hosts use `durable_required` mode. A permit is usable only when its
receipt was appended to the injected durable store and exact read-back matches
the issued digest. Durable decisions also require a host-injected Ed25519
signature port; private keys never enter semantic requests. Consumers can use
`checkConnectPermitFromStore` to re-read and verify the signed receipt at the
point of use. Missing storage or signing, persistence errors, stale or expired
receipts, scope drift, and substituted read-back all fail closed.

```ts
import {
  assertConnectPermit,
  createConnectDecisionRequest,
  createConnectPacketAuthority,
} from "@lssm-tech/lib.contractspec-connect";

const authority = createConnectPacketAuthority({
  durabilityMode: "durable_required",
  policy,
  receiptStore,
  signaturePort,
  clock,
  idFactory,
});

const request = createConnectDecisionRequest({
  id: "connect.request.patch-1",
  phase: "pre_mutation",
  scope,
  actorRef: "agent:builder",
  requestedAt: clock.now(),
  contextPacketRef,
  planPacketRef,
  deliveryPlanRef,
  qualityPlanRef,
  target: {
    action: "apply_patch",
    pathPrefixes: ["packages/contracts"],
  },
  predecessorDecisionRefs: [],
});

const receipt = await authority.decide(request);
assertConnectPermit(receipt, {
  phase: "pre_mutation",
  request,
  now: clock.now(),
  requireDurable: true,
});
```


Connect decides policy. Builder produces candidate code. CI executes approved
quality plans. Runtime Nodes execute the separately governed work orders issued through the
V3 bridge below. This package does not merge, release, deploy, or execute
provider effects.

## Reference vocabulary

The Connect reference types (`ConnectSha256Digest`, `ConnectMutationAction`,
`ConnectPromotionAction`, `ConnectAction`, `ConnectArtifactRefV1`, the decision,
context-packet, plan-packet, delivery-plan and quality-plan refs, and
`ConnectAuthorityScopeV1`) are owned by Core at
`@lssm-tech/lib.contracts-spec-core/connect-references`. This package re-exports
the same types from `./contracts` and the root, so existing imports keep working.
Specs that only reference Connect decisions, such as Builder delivery authority,
import the Core vocabulary and do not depend on this runtime.

## Lifecycle authority for host hooks

`@lssm-tech/lib.contractspec-connect/lifecycle-authority` decides how an
operator's durable hook grant governs host lifecycle hooks and follows the
agent's own commits. It is pure: hosts supply a read-only git port
(`ConnectRepositoryLineagePort`) and their governed and operator-only path
classification (`ConnectPathClassifierPort`).

- `CONNECT_LIFECYCLE_SEMANTICS`: session start and stop are read-only grant
  checks, a handoff records a non-terminal checkpoint, no lifecycle hook
  terminalizes the grant, and merge is a promotion that is never delegated to
  a local grant.
- `evaluateConnectGrantLineage`: an `exact` grant applies only at its anchor
  commit; a `lineage` grant follows HEAD on the same branch through at most
  `CONNECT_GRANT_LINEAGE_MAX_COMMITS` descendant commits whose changes stay
  inside the signed path prefixes and never touch operator-only files. It
  never widens the signed scope, and repository failures refuse.
- `evaluateConnectLifecycleAuthority`: ordered refusals (`promotion_not_delegated`,
  `no_grant`, `revoked`, `expired`, `workspace_mismatch`, `actor_mismatch`,
  `event_not_granted`, `scope_mismatch`, then the lineage refusals).
- `shellWordsTargetOperatorGrant` and `isConnectOperatorGrantStorePath` name the
  operator-only grant command and store, so hosts can deny agent self-grants.

The workspace bundle's `connect hook` commands implement the ports; see
`docs/refactoring/lssm-ecosystem/HOOK-AUTHORITY-DESIGN.md` for the wiring.

## Connect-owned Runtime Node V3 issuance

`@lssm-tech/lib.contractspec-connect/runtime-v3` exports
`createConnectRuntimeV3Authority` and `createConnectEd25519SignaturePort`. The
issuer runs the existing packet authority in `durable_required` mode. Hosts supply
current policy, append-only receipt storage, a real signature port, a scoped
issuance-evidence store, current revocation lookup, trusted clock, ID factory and
issuer reference. Missing, unavailable or inconsistent ports fail closed.

`issueLifecycle` accepts a pre-mutation request plus canonical unsigned standard
and mandatory cleanup drafts, two pristine budget reservations and the accepted
operation. Caller drafts cannot supply issuer, signature, authorization or issuance
time fields. The request actor/scope and the exact draft, plan, source and budget
digests are bound into the signed decision request. Connect derives both signed
orders and pending cleanup authority from that durable decision, rechecks current
policy/revocation, and returns only after exact issuance-evidence read-back.
Concurrent exact retries return the same persisted lifecycle; conflicting requests
for the same scoped operation cannot replace it.

The standard order expires no later than the policy receipt. The cleanup order has
no `expiresAt`; its review time and execution deadline never erase custody.
`verifyCleanupCustody` verifies retained signed issuance evidence even after normal
expiry or revocation. It is historical verification, not permission to execute a
cleanup effect. Runtime Node still requires independent current cleanup observation,
nonce, scope and custody checks for provider execution.

`verifyAdmission` checks accepted, authorizing or queued operations with no execution
tuple. `verifyDispatch` remains queued-only. Both reread exact issuance and receipt
evidence, recompute the signed payload, verify its Ed25519 signature, reevaluate
current policy, check revocation before and after policy work, and reject clock
regression or expiry. They implement the canonical runtime verification boundary;
SQLite/PostgreSQL still own atomic budget reservation, order registration, claims,
queue transport and terminal receipts.

The issuance store is Connect authorization evidence, not another runtime owner.
Its `append` must be atomic first-write-wins for the full tenant/workspace/
environment/operation tuple; immutable records retain the exact draft, request,
receipt and resulting lifecycle. Normal revocation is a separate authoritative
lookup and must never delete cleanup liability or historical decision evidence.

The WebCrypto adapter signs with host-injected Ed25519 `CryptoKey` objects and
verifies against the configured public key/reference. It does not load keys,
generate production identities or fall back to a fixture signer. Tests use real
nonextractable ephemeral keys, file-backed SQLite receipt/issuance/revocation state,
close/reopen and the actual SQLite Runtime Node issuance/dispatch adapters. Live
policy, identity provisioning and key custody remain host configuration.

## Concrete adapter qualification

The real local Ed25519/durable-authority SQLite composition test belongs to the
SQLite integration [source link unresolved: `../../integrations/lssm-os-state-sqlite/README.md`], which
injects Connect into its issuance and dispatch adapters. From repository root,
run `bun test ./packages/integrations/lssm-os-state-sqlite/src/connect-runtime-v3.test.ts`.
The Connect package's own `bun test` remains provider-neutral.

Canonical compatibility leaves: `./operations/registry.governance`, `./operations/registry.review`.
These leaves preserve the original implementations and object/class identity; legacy
ContractSpec imports forward to these owners.


### Source links needing reconciliation

- `../../integrations/lssm-os-state-sqlite/README.md` — source path absent from pinned inventory: packages/platform/integrations/lssm-os-state-sqlite/README.md.

## Declared capabilities

### ContractSpec Connect packet authority

Capability ID: `connect.packet-authority`

Issue and verify digest-bound context, plan, mutation, diff, and promotion decisions.

Use cases:

- Gate Builder mutations and delivery promotions through durable packet-level authority

Constraints:

```json
{
  "platforms": [
    "web",
    "server"
  ],
  "runtimes": [
    "browser",
    "bun",
    "node"
  ],
  "avoidWhen": [
    "The host cannot provide durable receipt storage for production authority."
  ],
  "requires": [
    "TypeScript"
  ]
}
```

Other capability declarations:

```json
{
  "status": "active",
  "aliases": [
    "connect",
    "authorization",
    "promotion permit"
  ],
  "pythonEquivalents": [],
  "alternatives": [],
  "relationships": [],
  "resolutionPriority": 90
}
```

Capability imports:

```json
[
  {
    "from": "@lssm-tech/lib.contractspec-connect",
    "symbols": [
      "createConnectPacketAuthority"
    ]
  }
]
```

## Catalogue metadata

```json
{
  "family": "runtime",
  "kind": "library",
  "status": "active",
  "adoptionMode": "adoptable",
  "stability": "experimental",
  "platforms": [
    "web",
    "server"
  ],
  "runtimes": [
    "browser",
    "bun",
    "node"
  ],
  "entrypoints": [
    ".",
    "./authority",
    "./canonical",
    "./contracts",
    "./feature",
    "./lifecycle-authority",
    "./ports",
    "./schemas",
    "./operations/registry.governance",
    "./operations/registry.review"
  ],
  "examples": [],
  "replacements": []
}
```

## Canonical imports

Import paths and symbols below are catalogue declarations. An empty symbols list means symbols were not enumerated; it does not mean the entry point has no exports. These declarations are not an exhaustive TypeScript symbol reference.

```json
[
  {
    "capabilityId": "connect.packet-authority",
    "from": "@lssm-tech/lib.contractspec-connect",
    "symbols": [
      "createConnectPacketAuthority"
    ]
  }
]
```

## Declared export entry points

Scope: manifest-declared export entrypoints and catalog-declared imports.

Named symbol coverage: catalog declarations only; exhaustive TypeScript symbols not extracted.

Installation status: not verified.

- `@lssm-tech/lib.contractspec-connect` — subpath `.`
  - `unconditional`: `./src/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/index.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/authority` — subpath `./authority`
  - `unconditional`: `./src/authority.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/authority.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/canonical` — subpath `./canonical`
  - `unconditional`: `./src/canonical.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/canonical.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/contracts` — subpath `./contracts`
  - `unconditional`: `./src/contracts.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/contracts.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/feature` — subpath `./feature`
  - `unconditional`: `./src/feature.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/feature.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/lifecycle-authority` — subpath `./lifecycle-authority`
  - `unconditional`: `./src/lifecycle-authority/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/lifecycle-authority/index.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/ports` — subpath `./ports`
  - `unconditional`: `./src/ports.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/ports.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/runtime-v3` — subpath `./runtime-v3`
  - `unconditional`: `./src/runtime-v3.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/runtime-v3.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/schemas` — subpath `./schemas`
  - `unconditional`: `./src/schemas.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/schemas.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/governance/constraint.add.command` — subpath `./operations/governance/constraint.add.command`
  - `unconditional`: `./src/operations/governance/constraint.add.command.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/governance/constraint.add.command.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/governance/constraint.remove.command` — subpath `./operations/governance/constraint.remove.command`
  - `unconditional`: `./src/operations/governance/constraint.remove.command.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/governance/constraint.remove.command.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/governance/notification.dispatch.command` — subpath `./operations/governance/notification.dispatch.command`
  - `unconditional`: `./src/operations/governance/notification.dispatch.command.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/governance/notification.dispatch.command.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/governance/policy.get.query` — subpath `./operations/governance/policy.get.query`
  - `unconditional`: `./src/operations/governance/policy.get.query.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/governance/policy.get.query.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/governance/policy.health.query` — subpath `./operations/governance/policy.health.query`
  - `unconditional`: `./src/operations/governance/policy.health.query.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/governance/policy.health.query.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/governance/policy.list.query` — subpath `./operations/governance/policy.list.query`
  - `unconditional`: `./src/operations/governance/policy.list.query.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/governance/policy.list.query.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/governance/policy.simulate.query` — subpath `./operations/governance/policy.simulate.query`
  - `unconditional`: `./src/operations/governance/policy.simulate.query.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/governance/policy.simulate.query.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/governance/policy.update.command` — subpath `./operations/governance/policy.update.command`
  - `unconditional`: `./src/operations/governance/policy.update.command.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/governance/policy.update.command.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/governance/shared-schemas` — subpath `./operations/governance/shared-schemas`
  - `unconditional`: `./src/operations/governance/shared-schemas.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/governance/shared-schemas.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/review/commands/index` — subpath `./operations/review/commands/index`
  - `unconditional`: `./src/operations/review/commands/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/review/commands/index.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/review/commands/reviewApprove.command` — subpath `./operations/review/commands/reviewApprove.command`
  - `unconditional`: `./src/operations/review/commands/reviewApprove.command.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/review/commands/reviewApprove.command.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/review/commands/reviewAssign.command` — subpath `./operations/review/commands/reviewAssign.command`
  - `unconditional`: `./src/operations/review/commands/reviewAssign.command.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/review/commands/reviewAssign.command.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/review/commands/reviewComment.command` — subpath `./operations/review/commands/reviewComment.command`
  - `unconditional`: `./src/operations/review/commands/reviewComment.command.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/review/commands/reviewComment.command.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/review/commands/reviewEscalate.command` — subpath `./operations/review/commands/reviewEscalate.command`
  - `unconditional`: `./src/operations/review/commands/reviewEscalate.command.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/review/commands/reviewEscalate.command.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/review/commands/reviewReject.command` — subpath `./operations/review/commands/reviewReject.command`
  - `unconditional`: `./src/operations/review/commands/reviewReject.command.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/review/commands/reviewReject.command.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/review/commands/reviewRequestChanges.command` — subpath `./operations/review/commands/reviewRequestChanges.command`
  - `unconditional`: `./src/operations/review/commands/reviewRequestChanges.command.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/review/commands/reviewRequestChanges.command.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/review/constants` — subpath `./operations/review/constants`
  - `unconditional`: `./src/operations/review/constants.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/review/constants.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/review/index` — subpath `./operations/review/index`
  - `unconditional`: `./src/operations/review/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/review/index.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/review/queries/index` — subpath `./operations/review/queries/index`
  - `unconditional`: `./src/operations/review/queries/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/review/queries/index.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/review/queries/reviewGet.query` — subpath `./operations/review/queries/reviewGet.query`
  - `unconditional`: `./src/operations/review/queries/reviewGet.query.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/review/queries/reviewGet.query.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/review/queries/reviewList.query` — subpath `./operations/review/queries/reviewList.query`
  - `unconditional`: `./src/operations/review/queries/reviewList.query.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/review/queries/reviewList.query.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/review/queries/reviewQueueHealth.query` — subpath `./operations/review/queries/reviewQueueHealth.query`
  - `unconditional`: `./src/operations/review/queries/reviewQueueHealth.query.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/review/queries/reviewQueueHealth.query.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/review/shared-schemas` — subpath `./operations/review/shared-schemas`
  - `unconditional`: `./src/operations/review/shared-schemas.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/review/shared-schemas.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/registry.governance` — subpath `./operations/registry.governance`
  - `unconditional`: `./src/operations/registry.governance.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/registry.governance.ts); verified source file.

- `@lssm-tech/lib.contractspec-connect/operations/registry.review` — subpath `./operations/registry.review`
  - `unconditional`: `./src/operations/registry.review.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/platform/governance/contractspec-connect/src/operations/registry.review.ts); verified source file.

## Package publication metadata

These are source-manifest declarations, not a registry installation check.

```json
{
  "types": "./dist/index.d.ts",
  "files": [
    "dist",
    "!dist/**/*test*",
    "!dist/**/*fixture*",
    "README.md"
  ],
  "publishExports": {
    ".": {
      "types": "./dist/index.d.ts",
      "browser": "./dist/browser/index.js",
      "bun": "./dist/index.js",
      "node": "./dist/node/index.js",
      "default": "./dist/index.js"
    },
    "./authority": {
      "types": "./dist/authority.d.ts",
      "browser": "./dist/browser/authority.js",
      "bun": "./dist/authority.js",
      "node": "./dist/node/authority.js",
      "default": "./dist/authority.js"
    },
    "./canonical": {
      "types": "./dist/canonical.d.ts",
      "browser": "./dist/browser/canonical.js",
      "bun": "./dist/canonical.js",
      "node": "./dist/node/canonical.js",
      "default": "./dist/canonical.js"
    },
    "./contracts": {
      "types": "./dist/contracts.d.ts",
      "browser": "./dist/browser/contracts.js",
      "bun": "./dist/contracts.js",
      "node": "./dist/node/contracts.js",
      "default": "./dist/contracts.js"
    },
    "./feature": {
      "types": "./dist/feature.d.ts",
      "browser": "./dist/browser/feature.js",
      "bun": "./dist/feature.js",
      "node": "./dist/node/feature.js",
      "default": "./dist/feature.js"
    },
    "./lifecycle-authority": {
      "types": "./dist/lifecycle-authority/index.d.ts",
      "browser": "./dist/browser/lifecycle-authority/index.js",
      "bun": "./dist/lifecycle-authority/index.js",
      "node": "./dist/node/lifecycle-authority/index.js",
      "default": "./dist/lifecycle-authority/index.js"
    },
    "./ports": {
      "types": "./dist/ports.d.ts",
      "browser": "./dist/browser/ports.js",
      "bun": "./dist/ports.js",
      "node": "./dist/node/ports.js",
      "default": "./dist/ports.js"
    },
    "./runtime-v3": {
      "types": "./dist/runtime-v3.d.ts",
      "browser": "./dist/browser/runtime-v3.js",
      "bun": "./dist/runtime-v3.js",
      "node": "./dist/node/runtime-v3.js",
      "default": "./dist/runtime-v3.js"
    },
    "./schemas": {
      "types": "./dist/schemas.d.ts",
      "browser": "./dist/browser/schemas.js",
      "bun": "./dist/schemas.js",
      "node": "./dist/node/schemas.js",
      "default": "./dist/schemas.js"
    },
    "./operations/governance/constraint.add.command": {
      "types": "./dist/operations/governance/constraint.add.command.d.ts",
      "bun": "./dist/operations/governance/constraint.add.command.js",
      "node": "./dist/node/operations/governance/constraint.add.command.js",
      "default": "./dist/operations/governance/constraint.add.command.js"
    },
    "./operations/governance/constraint.remove.command": {
      "types": "./dist/operations/governance/constraint.remove.command.d.ts",
      "bun": "./dist/operations/governance/constraint.remove.command.js",
      "node": "./dist/node/operations/governance/constraint.remove.command.js",
      "default": "./dist/operations/governance/constraint.remove.command.js"
    },
    "./operations/governance/notification.dispatch.command": {
      "types": "./dist/operations/governance/notification.dispatch.command.d.ts",
      "bun": "./dist/operations/governance/notification.dispatch.command.js",
      "node": "./dist/node/operations/governance/notification.dispatch.command.js",
      "default": "./dist/operations/governance/notification.dispatch.command.js"
    },
    "./operations/governance/policy.get.query": {
      "types": "./dist/operations/governance/policy.get.query.d.ts",
      "bun": "./dist/operations/governance/policy.get.query.js",
      "node": "./dist/node/operations/governance/policy.get.query.js",
      "default": "./dist/operations/governance/policy.get.query.js"
    },
    "./operations/governance/policy.health.query": {
      "types": "./dist/operations/governance/policy.health.query.d.ts",
      "bun": "./dist/operations/governance/policy.health.query.js",
      "node": "./dist/node/operations/governance/policy.health.query.js",
      "default": "./dist/operations/governance/policy.health.query.js"
    },
    "./operations/governance/policy.list.query": {
      "types": "./dist/operations/governance/policy.list.query.d.ts",
      "bun": "./dist/operations/governance/policy.list.query.js",
      "node": "./dist/node/operations/governance/policy.list.query.js",
      "default": "./dist/operations/governance/policy.list.query.js"
    },
    "./operations/governance/policy.simulate.query": {
      "types": "./dist/operations/governance/policy.simulate.query.d.ts",
      "bun": "./dist/operations/governance/policy.simulate.query.js",
      "node": "./dist/node/operations/governance/policy.simulate.query.js",
      "default": "./dist/operations/governance/policy.simulate.query.js"
    },
    "./operations/governance/policy.update.command": {
      "types": "./dist/operations/governance/policy.update.command.d.ts",
      "bun": "./dist/operations/governance/policy.update.command.js",
      "node": "./dist/node/operations/governance/policy.update.command.js",
      "default": "./dist/operations/governance/policy.update.command.js"
    },
    "./operations/governance/shared-schemas": {
      "types": "./dist/operations/governance/shared-schemas.d.ts",
      "bun": "./dist/operations/governance/shared-schemas.js",
      "node": "./dist/node/operations/governance/shared-schemas.js",
      "default": "./dist/operations/governance/shared-schemas.js"
    },
    "./operations/review/commands/index": {
      "types": "./dist/operations/review/commands/index.d.ts",
      "bun": "./dist/operations/review/commands/index.js",
      "node": "./dist/node/operations/review/commands/index.js",
      "default": "./dist/operations/review/commands/index.js"
    },
    "./operations/review/commands/reviewApprove.command": {
      "types": "./dist/operations/review/commands/reviewApprove.command.d.ts",
      "bun": "./dist/operations/review/commands/reviewApprove.command.js",
      "node": "./dist/node/operations/review/commands/reviewApprove.command.js",
      "default": "./dist/operations/review/commands/reviewApprove.command.js"
    },
    "./operations/review/commands/reviewAssign.command": {
      "types": "./dist/operations/review/commands/reviewAssign.command.d.ts",
      "bun": "./dist/operations/review/commands/reviewAssign.command.js",
      "node": "./dist/node/operations/review/commands/reviewAssign.command.js",
      "default": "./dist/operations/review/commands/reviewAssign.command.js"
    },
    "./operations/review/commands/reviewComment.command": {
      "types": "./dist/operations/review/commands/reviewComment.command.d.ts",
      "bun": "./dist/operations/review/commands/reviewComment.command.js",
      "node": "./dist/node/operations/review/commands/reviewComment.command.js",
      "default": "./dist/operations/review/commands/reviewComment.command.js"
    },
    "./operations/review/commands/reviewEscalate.command": {
      "types": "./dist/operations/review/commands/reviewEscalate.command.d.ts",
      "bun": "./dist/operations/review/commands/reviewEscalate.command.js",
      "node": "./dist/node/operations/review/commands/reviewEscalate.command.js",
      "default": "./dist/operations/review/commands/reviewEscalate.command.js"
    },
    "./operations/review/commands/reviewReject.command": {
      "types": "./dist/operations/review/commands/reviewReject.command.d.ts",
      "bun": "./dist/operations/review/commands/reviewReject.command.js",
      "node": "./dist/node/operations/review/commands/reviewReject.command.js",
      "default": "./dist/operations/review/commands/reviewReject.command.js"
    },
    "./operations/review/commands/reviewRequestChanges.command": {
      "types": "./dist/operations/review/commands/reviewRequestChanges.command.d.ts",
      "bun": "./dist/operations/review/commands/reviewRequestChanges.command.js",
      "node": "./dist/node/operations/review/commands/reviewRequestChanges.command.js",
      "default": "./dist/operations/review/commands/reviewRequestChanges.command.js"
    },
    "./operations/review/constants": {
      "types": "./dist/operations/review/constants.d.ts",
      "bun": "./dist/operations/review/constants.js",
      "node": "./dist/node/operations/review/constants.js",
      "default": "./dist/operations/review/constants.js"
    },
    "./operations/review/index": {
      "types": "./dist/operations/review/index.d.ts",
      "bun": "./dist/operations/review/index.js",
      "node": "./dist/node/operations/review/index.js",
      "default": "./dist/operations/review/index.js"
    },
    "./operations/review/queries/index": {
      "types": "./dist/operations/review/queries/index.d.ts",
      "bun": "./dist/operations/review/queries/index.js",
      "node": "./dist/node/operations/review/queries/index.js",
      "default": "./dist/operations/review/queries/index.js"
    },
    "./operations/review/queries/reviewGet.query": {
      "types": "./dist/operations/review/queries/reviewGet.query.d.ts",
      "bun": "./dist/operations/review/queries/reviewGet.query.js",
      "node": "./dist/node/operations/review/queries/reviewGet.query.js",
      "default": "./dist/operations/review/queries/reviewGet.query.js"
    },
    "./operations/review/queries/reviewList.query": {
      "types": "./dist/operations/review/queries/reviewList.query.d.ts",
      "bun": "./dist/operations/review/queries/reviewList.query.js",
      "node": "./dist/node/operations/review/queries/reviewList.query.js",
      "default": "./dist/operations/review/queries/reviewList.query.js"
    },
    "./operations/review/queries/reviewQueueHealth.query": {
      "types": "./dist/operations/review/queries/reviewQueueHealth.query.d.ts",
      "bun": "./dist/operations/review/queries/reviewQueueHealth.query.js",
      "node": "./dist/node/operations/review/queries/reviewQueueHealth.query.js",
      "default": "./dist/operations/review/queries/reviewQueueHealth.query.js"
    },
    "./operations/review/shared-schemas": {
      "types": "./dist/operations/review/shared-schemas.d.ts",
      "bun": "./dist/operations/review/shared-schemas.js",
      "node": "./dist/node/operations/review/shared-schemas.js",
      "default": "./dist/operations/review/shared-schemas.js"
    },
    "./operations/registry.governance": {
      "types": "./dist/operations/registry.governance.d.ts",
      "bun": "./dist/operations/registry.governance.js",
      "node": "./dist/node/operations/registry.governance.js",
      "default": "./dist/operations/registry.governance.js"
    },
    "./operations/registry.review": {
      "types": "./dist/operations/registry.review.d.ts",
      "bun": "./dist/operations/registry.review.js",
      "node": "./dist/node/operations/registry.review.js",
      "default": "./dist/operations/registry.review.js"
    }
  }
}
```

## Dependencies

Metadata status: complete pinned manifest.

### Runtime dependencies

- [@lssm-tech/lib.contracts-runtime-kernel](https://lssm.co/docs/packages/lib.contracts-runtime-kernel/): `workspace:^`
- [@lssm-tech/lib.contracts-spec-core](https://lssm.co/docs/packages/lib.contracts-spec-core/): `workspace:^`
- [@lssm-tech/lib.crypto-utils](https://lssm.co/docs/packages/lib.crypto-utils/): `workspace:^`
- [@lssm-tech/lib.lssm-os-runtime](https://lssm.co/docs/packages/lib.lssm-os-runtime/): `workspace:^`
- [@lssm-tech/lib.schema](https://lssm.co/docs/packages/lib.schema/): `workspace:^`
- `zod`: `catalog:`

### Peer dependencies

No declarations in the inspected manifest.

### Optional dependencies

No declarations in the inspected manifest.

### Development dependencies

- [@lssm-tech/tool.bun](https://lssm.co/docs/packages/tool.bun/): `workspace:*`
- [@lssm-tech/tool.typescript](https://lssm.co/docs/packages/tool.typescript/): `workspace:*`
- `typescript`: `catalog:`

### Peer dependency metadata

```json
{}
```

### Bundled dependencies

```json
null
```

## Package scripts

Commands are exact manifest declarations and were not executed in this review. Script metadata status: complete pinned manifest.

```json
{
  "publish:pkg": "bun publish --tolerate-republish --ignore-scripts --verbose",
  "publish:pkg:canary": "bun publish:pkg --tag canary",
  "build": "contractspec-bun-build build",
  "build:bundle": "contractspec-bun-build transpile",
  "build:types": "contractspec-bun-build types",
  "clean": "rimraf dist .turbo",
  "dev": "contractspec-bun-build dev",
  "lint": "bun run lint:fix",
  "lint:fix": "node ../../../../scripts/biome.cjs check --write .",
  "lint:check": "node ../../../../scripts/biome.cjs check .",
  "prebuild": "contractspec-bun-build prebuild",
  "test": "bun test",
  "typecheck": "tsgo --noEmit"
}
```

## Declared documentation links

- [ContractSpec Connect runtime](https://www.npmjs.com/package/%40lssm-tech%2Flib.contractspec-connect) — declared link; destination not verified.

```json
{
  "url": "https://www.npmjs.com/package/%40lssm-tech%2Flib.contractspec-connect",
  "kind": "readme"
}
```

## Existing agent-guide projection

```json
{
  "path": "packages/apps/web-landing/public/llms-packages/lib.contractspec-connect.txt",
  "route": "/llms/lib.contractspec-connect",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/lib.contractspec-connect.txt",
  "blobSha": "f4f3ee2ca75ae60e7b923dc47bc182fcd8c80918",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "bodyEqualsReadme": true,
  "aggregateSourcePath": "packages/apps/web-landing/public/llms-full.txt",
  "aggregateBlobSha": "691b1d33efee24c440598b9106c81432f56aafaf"
}
```