feat(ql3): establish 3.0 incubation baseline

back/runtime/ports/projectOwnerBootstrapRepository.ts

@@ -0,0 +1,36 @@
+import type {
+  PolicySubject,
+  ProjectRoleBindingRecord,
+} from '../domain/projectPolicy';
+import type { ProjectOwnerBootstrapChallengeRecord } from '../domain/projectOwnerBootstrap';
+
+export interface IssueProjectOwnerBootstrapChallengeCommand {
+  projectId: string;
+  challengeId: string;
+  tokenDigest: string;
+  issuedAtMs: number;
+  expiresAtMs: number;
+}
+
+export interface ClaimProjectOwnerBootstrapChallengeCommand {
+  projectId: string;
+  challengeId: string;
+  tokenDigest: string;
+  subject: PolicySubject;
+  claimedAtMs: number;
+}
+
+export interface ClaimProjectOwnerBootstrapChallengeResult {
+  status: 'claimed' | 'existing';
+  binding: Readonly<ProjectRoleBindingRecord>;
+}
+
+export interface ProjectOwnerBootstrapRepository {
+  issue(
+    command: IssueProjectOwnerBootstrapChallengeCommand,
+  ): Promise<Readonly<ProjectOwnerBootstrapChallengeRecord>>;
+
+  claim(
+    command: ClaimProjectOwnerBootstrapChallengeCommand,
+  ): Promise<ClaimProjectOwnerBootstrapChallengeResult>;
+}