M1: 底座 —— @contracts 首版 + event / ledger / org / llm

@contracts 首版(§8.1 九个文件):
- id 品牌 ID / terminal 终态五名与归侧四标签 / envelope 信封六字段与四类事件
- card 工单两模式 + 对话卡族(形状对齐 2026-07-26 原型定稿)
- contract7 契约七件 / ledger 三级寻址与写三分 / process-package 流程包 DSL 与触发器三类
- manifest 活动包清单六区(含 CMMN·DMN·步序声明的资产形状)/ org / api 路由契约

模块(L1):
- event   信封存储、归属解析三级短路、投递五诺、监听注册表、三级消费裁定
- ledger  schema 自生长(最大化合并/最宽类型/只增不破坏)、任务视图叠加、写三分、冲突检查
- org     岗位授权(客体三类×动作三种)、停用前置检查、会话、种子播种
- llm     四元绑定、ModelGateway 三模式(live/record/replay)—— 两缝之一

app 装配:Hono 服务 + 鉴权中间件 + 治理台/工作台路由;drizzle 迁移;AES-256-GCM 凭证密封

ADR-007 工具链与门禁 · ADR-008 投递队列 · ADR-009 凭证加密
(ADR 编号自 007 续:编码规范 §14 已用到 006,README 写「从 005 续」是笔误)

门禁五道全绿;96 个测试通过,含对真实 PG 的 ledger 集成测试

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KeDBx2PHLavbURXB8LJJ7m

api-report/packages/contracts/src/api/ingest.d.ts

@@ -0,0 +1,71 @@
+/**
+ * 入站路由契约(编码规范 §8.1)。
+ *
+ * 通道入站 → 归属解析 → 统一事件流(OS 06)。MVP 的邮件通道以**模拟通道**接入:
+ * mock 只允许出现在**外界**(邮件通道与外部系统),系统内部机制不得 mock(README MVP 完成判据)。
+ */
+import { z } from 'zod';
+/** 一封入站邮件的归一形状 —— 真实邮件通道与模拟通道共用 */
+export declare const inboundMailSchema: z.ZodObject<{
+    messageId: z.ZodString;
+    threadId: z.ZodOptional<z.ZodString>;
+    from: z.ZodString;
+    to: z.ZodArray<z.ZodString>;
+    cc: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    subject: z.ZodString;
+    body: z.ZodString;
+    receivedAt: z.ZodISODateTime;
+    attachments: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        contentType: z.ZodString;
+        size: z.ZodNumber;
+        ref: z.ZodString;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type InboundMail = z.infer<typeof inboundMailSchema>;
+export declare const ingestMailRoute: {
+    readonly method: "POST";
+    readonly path: "/api/ingest/channel/:channelId/mail";
+    readonly params: z.ZodObject<{
+        channelId: z.core.$ZodBranded<z.ZodString, "ChannelId", "out">;
+    }, z.core.$strip>;
+    readonly body: z.ZodObject<{
+        messageId: z.ZodString;
+        threadId: z.ZodOptional<z.ZodString>;
+        from: z.ZodString;
+        to: z.ZodArray<z.ZodString>;
+        cc: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        subject: z.ZodString;
+        body: z.ZodString;
+        receivedAt: z.ZodISODateTime;
+        attachments: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            contentType: z.ZodString;
+            size: z.ZodNumber;
+            ref: z.ZodString;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>;
+    readonly output: z.ZodObject<{
+        eventId: z.core.$ZodBranded<z.ZodString, "EventId", "out">;
+        resolution: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            outcome: z.ZodLiteral<"owned">;
+            rule: z.ZodEnum<{
+                thread: "thread";
+                "listener-key": "listener-key";
+                "address-window": "address-window";
+            }>;
+            taskId: z.core.$ZodBranded<z.ZodString, "TaskId", "out">;
+        }, z.core.$strip>, z.ZodObject<{
+            outcome: z.ZodLiteral<"unowned">;
+            reason: z.ZodEnum<{
+                "no-match": "no-match";
+                ambiguous: "ambiguous";
+                "extract-failed": "extract-failed";
+            }>;
+            fallbackPosition: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PositionId", "out">>;
+        }, z.core.$strip>], "outcome">;
+        listenersHit: z.ZodNumber;
+        triggersHit: z.ZodNumber;
+        fellBackToMessage: z.ZodBoolean;
+    }, z.core.$strip>;
+};