@agenticprimitives/fabric 0.0.0-alpha.1 → 0.0.0-alpha.11

package/dist/interactions/machine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"machine.d.ts","sourceRoot":"","sources":["../../src/interactions/machine.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,mBAAmB,EAEnB,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAEpG,eAAO,MAAM,eAAe,EAAE,SAAS,gBAAgB,EAAyB,CAAC;AACjF,eAAO,MAAM,eAAe,4BAAsB,CAAC;AAEnD,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAChD,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACrC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAE/C;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,iBAAiB,EAC1B,KAAK,EAAE,4BAA4B,GAClC,gBAAgB,CAclB"}
+{"version":3,"file":"machine.d.ts","sourceRoot":"","sources":["../../src/interactions/machine.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,mBAAmB,EAEnB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAEpG,eAAO,MAAM,eAAe,EAAE,SAAS,gBAAgB,EAAyB,CAAC;AACjF,eAAO,MAAM,eAAe,4BAAsB,CAAC;AAEnD,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAChD,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACrC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAE/C;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,iBAAiB,EAC1B,KAAK,EAAE,4BAA4B,EACnC,GAAG,GAAE,qBAA0B,GAC9B,gBAAgB,CAclB"}

package/dist/interactions/machine.js

@@ -13,7 +13,7 @@ export const isTerminalState = isTerminalCaseState;
  * interactions `interactionId` onto the case `caseId` and delegates to `applyCaseTransition`. Pure,
  * fail-closed, role-checked — unchanged semantics for the surviving transitions.
  */
-export function applyInteractionTransition(current, event) {
+export function applyInteractionTransition(current, event, ctx = {}) {
     return applyCaseTransition(current, {
         version: 'ap.case.event.v1',
         caseId: event.interactionId,
@@ -26,6 +26,6 @@ export function applyInteractionTransition(current, event) {
         evidenceRef: event.evidenceRef,
         authorityRef: event.authorityRef,
         signature: event.signature,
-    });
+    }, ctx);
 }
 //# sourceMappingURL=machine.js.map

package/dist/interactions/machine.js.map

@@ -1 +1 @@
-{"version":3,"file":"machine.js","sourceRoot":"","sources":["../../src/interactions/machine.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,2GAA2G;AAC3G,2GAA2G;AAC3G,sGAAsG;AACtG,EAAE;AACF,iGAAiG;AACjG,6EAA6E;AAE7E,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,GAErB,MAAM,oBAAoB,CAAC;AAG5B,MAAM,CAAC,MAAM,eAAe,GAAgC,oBAAoB,CAAC;AACjF,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAOnD;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA0B,EAC1B,KAAmC;IAEnC,OAAO,mBAAmB,CAAC,OAAO,EAAE;QAClC,OAAO,EAAE,kBAAkB;QAC3B,MAAM,EAAE,KAAK,CAAC,aAAa;QAC3B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"machine.js","sourceRoot":"","sources":["../../src/interactions/machine.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,2GAA2G;AAC3G,2GAA2G;AAC3G,sGAAsG;AACtG,EAAE;AACF,iGAAiG;AACjG,6EAA6E;AAE7E,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,GAGrB,MAAM,oBAAoB,CAAC;AAG5B,MAAM,CAAC,MAAM,eAAe,GAAgC,oBAAoB,CAAC;AACjF,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAOnD;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA0B,EAC1B,KAAmC,EACnC,MAA6B,EAAE;IAE/B,OAAO,mBAAmB,CAAC,OAAO,EAAE;QAClC,OAAO,EAAE,kBAAkB;QAC3B,MAAM,EAAE,KAAK,CAAC,aAAa;QAC3B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,EAAE,GAAG,CAAC,CAAC;AACV,CAAC"}

package/dist/interactions/open-case.d.ts

@@ -0,0 +1,60 @@
+import type { CanonicalAgentId } from '@agenticprimitives/types';
+import type { ContextRefV1, MessageId } from '../messaging/index.js';
+import type { InteractionCaseV1, InteractionId, InteractionKind } from './types.js';
+export interface OpenCaseInput {
+    /** The Interaction this case belongs to. DERIVED by the caller (e.g. `ixn_work_<workItemId>`), never
+     *  minted — see `derivedCaseId` for why. */
+    interactionId: string;
+    /** Who is asking. The party the decision is about, verified by the recipient's gate before this runs. */
+    requester: CanonicalAgentId;
+    /** Who must answer. */
+    responder: CanonicalAgentId;
+    kind: InteractionKind;
+    /** Human-facing one-liner. What the responder is being asked, in their words not the system's. */
+    subject: string;
+    /** The message that opened it — the case's root in the exchange stream. */
+    rootMessageId: MessageId;
+    /** What this case is ABOUT (the work item, the artifact). About-ness, never authority. */
+    contextRefs?: ContextRefV1[];
+    at: string;
+    expiresAt?: string;
+}
+/**
+ * The case id, DERIVED from what makes it the same request.
+ *
+ * NOT a uuid, and this is the whole of §N.7.2. A transition can be retried — a delivery re-attempt, a
+ * user pressing twice, an at-least-once queue — and a minted id would make every retry a NEW obligation
+ * sitting in someone's inbox. Deriving it means a retry finds the case that already exists.
+ *
+ * The tuple is (interaction, requester, responder, kind): the same party asking the same party for the
+ * same thing about the same interaction IS the same request. A different KIND is a different ask, so it
+ * gets its own case — an access request and an approval request about one work item are two questions.
+ *
+ * Precedent: W11 derives `ixn_topic_<channelId>` so "the two cannot drift and no join table exists to go
+ * stale", and `org.applications` keeps one entry per applicant so re-applying updates in place rather
+ * than flooding the queue.
+ */
+export declare function derivedCaseId(input: {
+    interactionId: string;
+    requester: CanonicalAgentId;
+    responder: CanonicalAgentId;
+    kind: InteractionKind;
+}): InteractionId;
+export type OpenCaseResult = {
+    ok: true;
+    case: InteractionCaseV1;
+    created: boolean;
+} | {
+    ok: false;
+    reason: 'self-addressed' | 'missing-subject';
+};
+/**
+ * Open a case, or return the one already open for this request.
+ *
+ * `created: false` is a SUCCESS, not a conflict — a retried transition is supposed to be a no-op, and
+ * reporting it as an error would push every caller into distinguishing "already asked" from "failed to
+ * ask". The existing case is returned unchanged: re-asking does not reset a decision already in progress,
+ * and must never revive one already answered.
+ */
+export declare function openCase(input: OpenCaseInput, existing?: InteractionCaseV1 | null): OpenCaseResult;
+//# sourceMappingURL=open-case.d.ts.map

package/dist/interactions/open-case.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-case.d.ts","sourceRoot":"","sources":["../../src/interactions/open-case.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEpF,MAAM,WAAW,aAAa;IAC5B;gDAC4C;IAC5C,aAAa,EAAE,MAAM,CAAC;IACtB,yGAAyG;IACzG,SAAS,EAAE,gBAAgB,CAAC;IAC5B,uBAAuB;IACvB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,IAAI,EAAE,eAAe,CAAC;IACtB,kGAAkG;IAClG,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,aAAa,EAAE,SAAS,CAAC;IACzB,0FAA0F;IAC1F,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,IAAI,EAAE,eAAe,CAAC;CACvB,GAAG,aAAa,CAGhB;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GACvD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,gBAAgB,GAAG,iBAAiB,CAAA;CAAE,CAAC;AAEhE;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,iBAAiB,GAAG,IAAI,GAAG,cAAc,CAoClG"}

package/dist/interactions/open-case.js

@@ -0,0 +1,83 @@
+// `openCase` — the CASE PRODUCER (spec 340 §N).
+//
+// THE GAP THIS FILLS. Everything downstream of a case was built and wired — the store, the reducer,
+// `applyApproveWithMandate` with its four gates, the server action, the UI button — and nothing ever
+// created one. `putCase` was called in exactly one place: `hydrate`, reading a stored document back. So
+// `cases`/`cards`/`mandates` were structurally always empty and the governed-situation half of the model
+// had never executed against a live deployment.
+//
+// WHAT THIS DOES NOT KNOW. It has no idea what a work item is, and it must not learn (§N.7.1). The
+// coordination profile decides WHICH transitions open a case; this decides what a case IS. The boundary
+// has a test: if this function ever needs a work-item field, the boundary has moved and the design is
+// wrong. Callers pass a `subject` and `contextRefs` — about-ness, never authority.
+//
+// OPENING A CASE GRANTS NOTHING (§N.7.3, ADR-0041). It creates an obligation to ANSWER, not permission to
+// act. `authorityRefs` starts empty and stays empty until a mandate is issued; the case points at
+// authority and never becomes it. That is why this function takes no grant, no delegation and no
+// credential — there is nothing it could legitimately do with one.
+/**
+ * The case id, DERIVED from what makes it the same request.
+ *
+ * NOT a uuid, and this is the whole of §N.7.2. A transition can be retried — a delivery re-attempt, a
+ * user pressing twice, an at-least-once queue — and a minted id would make every retry a NEW obligation
+ * sitting in someone's inbox. Deriving it means a retry finds the case that already exists.
+ *
+ * The tuple is (interaction, requester, responder, kind): the same party asking the same party for the
+ * same thing about the same interaction IS the same request. A different KIND is a different ask, so it
+ * gets its own case — an access request and an approval request about one work item are two questions.
+ *
+ * Precedent: W11 derives `ixn_topic_<channelId>` so "the two cannot drift and no join table exists to go
+ * stale", and `org.applications` keeps one entry per applicant so re-applying updates in place rather
+ * than flooding the queue.
+ */
+export function derivedCaseId(input) {
+    const part = (s) => String(s).toLowerCase().replace(/[^a-z0-9:_.-]/g, '');
+    return `${part(input.interactionId)}:${input.kind}:${part(input.requester)}:${part(input.responder)}`;
+}
+/**
+ * Open a case, or return the one already open for this request.
+ *
+ * `created: false` is a SUCCESS, not a conflict — a retried transition is supposed to be a no-op, and
+ * reporting it as an error would push every caller into distinguishing "already asked" from "failed to
+ * ask". The existing case is returned unchanged: re-asking does not reset a decision already in progress,
+ * and must never revive one already answered.
+ */
+export function openCase(input, existing) {
+    if (!input.subject.trim())
+        return { ok: false, reason: 'missing-subject' };
+    // A case is a question addressed to somebody else. Asking yourself for a decision would create an
+    // obligation with no counterparty, and it is the shape a mis-wired emitter produces — worth refusing
+    // loudly rather than filling an inbox with self-addressed requests.
+    if (input.requester.toLowerCase() === input.responder.toLowerCase())
+        return { ok: false, reason: 'self-addressed' };
+    if (existing)
+        return { ok: true, case: existing, created: false };
+    return {
+        ok: true,
+        created: true,
+        case: {
+            version: 'ap.interaction.v1',
+            id: derivedCaseId(input),
+            kind: input.kind,
+            subject: input.subject.trim(),
+            requester: input.requester,
+            responder: input.responder,
+            // SUBMITTED, not 'draft' and not an invented 'requested'. W10b made `CaseState` execution-only
+            // (11 → 8), and a case that has been asked but not yet triaged is exactly `submitted` — 'draft'
+            // would mean the requester had not sent it. Reusing the existing vocabulary rather than widening
+            // it is the point: the enum retirement (§R) exists so states are not added per feature.
+            state: 'submitted',
+            createdAt: input.at,
+            updatedAt: input.at,
+            rootMessageId: input.rootMessageId,
+            latestMessageId: input.rootMessageId,
+            evidenceRefs: [],
+            // EMPTY, AND IT STAYS EMPTY UNTIL A MANDATE EXISTS. The case points at authority; it never carries
+            // it (ADR-0041). A producer that seeded this would make opening a case a way to acquire permission.
+            authorityRefs: [],
+            ...(input.contextRefs?.length ? { contextRefs: input.contextRefs } : {}),
+            ...(input.expiresAt ? { expiresAt: input.expiresAt } : {}),
+        },
+    };
+}
+//# sourceMappingURL=open-case.js.map

package/dist/interactions/open-case.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-case.js","sourceRoot":"","sources":["../../src/interactions/open-case.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,oGAAoG;AACpG,qGAAqG;AACrG,wGAAwG;AACxG,yGAAyG;AACzG,gDAAgD;AAChD,EAAE;AACF,mGAAmG;AACnG,wGAAwG;AACxG,sGAAsG;AACtG,mFAAmF;AACnF,EAAE;AACF,0GAA0G;AAC1G,kGAAkG;AAClG,iGAAiG;AACjG,mEAAmE;AAyBnE;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,aAAa,CAAC,KAK7B;IACC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC1F,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAmB,CAAC;AACzH,CAAC;AAMD;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAoB,EAAE,QAAmC;IAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC3E,kGAAkG;IAClG,qGAAqG;IACrG,oEAAoE;IACpE,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAEpH,IAAI,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAElE,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,IAAI;QACb,IAAI,EAAE;YACJ,OAAO,EAAE,mBAAmB;YAC5B,EAAE,EAAE,aAAa,CAAC,KAAK,CAAC;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;YAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,+FAA+F;YAC/F,gGAAgG;YAChG,iGAAiG;YACjG,wFAAwF;YACxF,KAAK,EAAE,WAAW;YAClB,SAAS,EAAE,KAAK,CAAC,EAAE;YACnB,SAAS,EAAE,KAAK,CAAC,EAAE;YACnB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,eAAe,EAAE,KAAK,CAAC,aAAa;YACpC,YAAY,EAAE,EAAE;YAChB,mGAAmG;YACnG,oGAAoG;YACpG,aAAa,EAAE,EAAE;YACjB,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3D;KACF,CAAC;AACJ,CAAC"}

package/dist/interactions/store.d.ts

@@ -1,9 +1,18 @@
 import { type TransitionResult } from './machine.js';
+import type { CommitmentRecordV1, DecisionRecordV1 } from '../interaction-machines.js';
 import type { InteractionCaseV1, InteractionId, InteractionState, InteractionTransitionEventV1 } from './types.js';
 export interface InteractionStore {
     /** Register a new case. Fail-closed: only `draft` cases enter; duplicate ids throw. */
     putCase(c: InteractionCaseV1): void;
     getCase(id: InteractionId): InteractionCaseV1 | null;
+    /**
+     * The determination this case produced, if any (spec 340 W10). `null` until a transition emits one —
+     * `approve`/`deny`/`expire` are the three that do. Separate from the case's own state on purpose:
+     * a decision has its own lifecycle, its own signer, and outlives the transition that recorded it.
+     */
+    getDecision(id: InteractionId): DecisionRecordV1 | null;
+    /** The obligation this case gave rise to, if any. `null` until `issue-credential` creates one. */
+    getCommitment(id: InteractionId): CommitmentRecordV1 | null;
     /**
      * Apply a signed transition event. Idempotent: replaying an event whose
      * `idempotencyKey` was already applied returns the current case unchanged

package/dist/interactions/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/interactions/store.ts"],"names":[],"mappings":"AAGA,OAAO,EAA+C,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAClG,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAEnH,MAAM,WAAW,gBAAgB;IAC/B,uFAAuF;IACvF,OAAO,CAAC,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACpC,OAAO,CAAC,EAAE,EAAE,aAAa,GAAG,iBAAiB,GAAG,IAAI,CAAC;IACrD;;;;OAIG;IACH,UAAU,CAAC,KAAK,EAAE,4BAA4B,GAAG,gBAAgB,CAAC;IAClE,UAAU,CAAC,EAAE,EAAE,aAAa,GAAG,4BAA4B,EAAE,CAAC;IAC9D,SAAS,CAAC,KAAK,CAAC,EAAE,gBAAgB,GAAG,iBAAiB,EAAE,CAAC;IACzD;iEAC6D;IAC7D,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAAC;CACjD;AAED,wBAAgB,8BAA8B,IAAI,gBAAgB,CA6DjE"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/interactions/store.ts"],"names":[],"mappings":"AAGA,OAAO,EAA+C,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAElG,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACvF,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAEnH,MAAM,WAAW,gBAAgB;IAC/B,uFAAuF;IACvF,OAAO,CAAC,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACpC,OAAO,CAAC,EAAE,EAAE,aAAa,GAAG,iBAAiB,GAAG,IAAI,CAAC;IACrD;;;;OAIG;IACH,WAAW,CAAC,EAAE,EAAE,aAAa,GAAG,gBAAgB,GAAG,IAAI,CAAC;IACxD,kGAAkG;IAClG,aAAa,CAAC,EAAE,EAAE,aAAa,GAAG,kBAAkB,GAAG,IAAI,CAAC;IAC5D;;;;OAIG;IACH,UAAU,CAAC,KAAK,EAAE,4BAA4B,GAAG,gBAAgB,CAAC;IAClE,UAAU,CAAC,EAAE,EAAE,aAAa,GAAG,4BAA4B,EAAE,CAAC;IAC9D,SAAS,CAAC,KAAK,CAAC,EAAE,gBAAgB,GAAG,iBAAiB,EAAE,CAAC;IACzD;iEAC6D;IAC7D,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAAC;CACjD;AAED,wBAAgB,8BAA8B,IAAI,gBAAgB,CAyHjE"}

package/dist/interactions/store.js

@@ -1,10 +1,44 @@
 // In-memory InteractionStore: cases + transition log with idempotent replay
 // and deterministic expiry sweeps (spec 309 §6.1, §8.10).
 import { applyInteractionTransition, isTerminalState } from './machine.js';
+import { applyCaseEmissions, caseTransitionEmissions } from '../case-emissions.js';
 export function createInMemoryInteractionStore() {
     const cases = new Map();
     const events = new Map();
     const appliedKeys = new Map();
+    const decisions = new Map();
+    const commitments = new Map();
+    /**
+     * spec 340 W10 — record what the transition emitted into the other two machines.
+     *
+     * Called only after the case machine ACCEPTED, and derived from the PRE-transition case: the seed
+     * reads identity and party fields, none of which a transition changes.
+     *
+     * A rejected emission does not roll back the case. That is deliberate and it is the honest option:
+     * the case transition is already a fact, and the alternatives are worse — silently dropping it would
+     * make an unrecorded determination indistinguishable from a recorded one, and unwinding an accepted
+     * transition would let the decision machine veto a move the case machine's own rules permitted.
+     * `void` on a case that never had a commitment is the ordinary, expected case of this.
+     */
+    function emit(before, event) {
+        const emissions = caseTransitionEmissions(before, {
+            version: 'ap.case.event.v1',
+            caseId: event.interactionId,
+            transition: event.transition,
+            actor: event.actor,
+            at: event.at,
+        });
+        if (!emissions.decision && !emissions.commitment)
+            return;
+        const out = applyCaseEmissions(emissions, {
+            decision: decisions.get(event.interactionId) ?? null,
+            commitment: commitments.get(event.interactionId) ?? null,
+        }, { actor: event.actor, at: event.at });
+        if (out.decision?.applied)
+            decisions.set(event.interactionId, out.decision.record);
+        if (out.commitment?.applied)
+            commitments.set(event.interactionId, out.commitment.record);
+    }
     return {
         putCase(c) {
             if (c.state !== 'draft') {
@@ -27,15 +61,26 @@ export function createInMemoryInteractionStore() {
             if (event.idempotencyKey !== undefined && keys.has(event.idempotencyKey)) {
                 return { ok: true, case: current };
             }
-            const result = applyInteractionTransition(current, event);
+            // W10b-3: the case machine cannot see the decision machine, so the store — which holds both —
+            // supplies it. `issue-credential` refuses without a granted determination.
+            const result = applyInteractionTransition(current, event, {
+                decisionState: decisions.get(event.interactionId)?.state ?? null,
+            });
             if (!result.ok)
                 return result;
             cases.set(event.interactionId, result.case);
             events.get(event.interactionId).push(event);
             if (event.idempotencyKey !== undefined)
                 keys.add(event.idempotencyKey);
+            emit(current, event);
             return result;
         },
+        getDecision(id) {
+            return decisions.get(id) ?? null;
+        },
+        getCommitment(id) {
+            return commitments.get(id) ?? null;
+        },
         listEvents(id) {
             return [...(events.get(id) ?? [])];
         },
@@ -55,10 +100,20 @@ export function createInMemoryInteractionStore() {
                     transition: 'expire',
                     actor: c.responder, // role 'any' — deterministic sweep, not a user action
                     at: nowIso,
-                });
+                }, { decisionState: decisions.get(c.id)?.state ?? null });
                 if (result.ok) {
                     cases.set(c.id, result.case);
                     expired.push(result.case);
+                    // The sweep records the determination too. `expire` is the one decision transition the
+                    // machine lets any actor make, and the emission attributes it to the creditor rather than
+                    // to `c.responder` — the sweep's stand-in actor, who decided nothing.
+                    emit(c, {
+                        version: 'ap.interaction.event.v1',
+                        interactionId: c.id,
+                        transition: 'expire',
+                        actor: c.responder,
+                        at: nowIso,
+                    });
                 }
             }
             return expired;

package/dist/interactions/store.js.map

@@ -1 +1 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/interactions/store.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,0DAA0D;AAE1D,OAAO,EAAE,0BAA0B,EAAE,eAAe,EAAyB,MAAM,cAAc,CAAC;AAoBlG,MAAM,UAAU,8BAA8B;IAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiD,CAAC;IACxE,MAAM,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE1D,OAAO;QACL,OAAO,CAAC,CAAC;YACP,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,6CAA6C,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACnB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACrB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,CAAC,EAAE;YACR,OAAO,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;QAC/B,CAAC;QACD,UAAU,CAAC,KAAK;YACd,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YAEzD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAE,CAAC;YACnD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;gBACzE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YACrC,CAAC;YAED,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC1D,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,MAAM,CAAC;YAE9B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACvE,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,UAAU,CAAC,EAAE;YACX,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,SAAS,CAAC,KAAK;YACb,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/E,CAAC;QACD,UAAU,CAAC,MAAM;YACf,MAAM,OAAO,GAAwB,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC/B,IAAI,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACvC,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;oBAAE,SAAS;gBACxF,MAAM,MAAM,GAAG,0BAA0B,CAAC,CAAC,EAAE;oBAC3C,OAAO,EAAE,yBAAyB;oBAClC,aAAa,EAAE,CAAC,CAAC,EAAE;oBACnB,UAAU,EAAE,QAAQ;oBACpB,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,sDAAsD;oBAC1E,EAAE,EAAE,MAAM;iBACX,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;oBACd,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC7B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/interactions/store.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,0DAA0D;AAE1D,OAAO,EAAE,0BAA0B,EAAE,eAAe,EAAyB,MAAM,cAAc,CAAC;AAClG,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AA6BnF,MAAM,UAAU,8BAA8B;IAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiD,CAAC;IACxE,MAAM,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAqC,CAAC;IAEjE;;;;;;;;;;;OAWG;IACH,SAAS,IAAI,CACX,MAAyB,EACzB,KAAmC;QAEnC,MAAM,SAAS,GAAG,uBAAuB,CAAC,MAAM,EAAE;YAChD,OAAO,EAAE,kBAAkB;YAC3B,MAAM,EAAE,KAAK,CAAC,aAAa;YAC3B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,EAAE,EAAE,KAAK,CAAC,EAAE;SACb,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,UAAU;YAAE,OAAO;QAEzD,MAAM,GAAG,GAAG,kBAAkB,CAC5B,SAAS,EACT;YACE,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,IAAI;YACpD,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,IAAI;SACzD,EACD,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CACrC,CAAC;QACF,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO;YAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnF,IAAI,GAAG,CAAC,UAAU,EAAE,OAAO;YAAE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC3F,CAAC;IAED,OAAO;QACL,OAAO,CAAC,CAAC;YACP,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,6CAA6C,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACnB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACrB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,CAAC,EAAE;YACR,OAAO,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;QAC/B,CAAC;QACD,UAAU,CAAC,KAAK;YACd,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YAEzD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAE,CAAC;YACnD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;gBACzE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YACrC,CAAC;YAED,8FAA8F;YAC9F,2EAA2E;YAC3E,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,EAAE,KAAK,EAAE;gBACxD,aAAa,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,KAAK,IAAI,IAAI;aACjE,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,MAAM,CAAC;YAE9B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACvE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACrB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,WAAW,CAAC,EAAE;YACZ,OAAO,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;QACnC,CAAC;QACD,aAAa,CAAC,EAAE;YACd,OAAO,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;QACrC,CAAC;QACD,UAAU,CAAC,EAAE;YACX,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,SAAS,CAAC,KAAK;YACb,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/E,CAAC;QACD,UAAU,CAAC,MAAM;YACf,MAAM,OAAO,GAAwB,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC/B,IAAI,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;oBAAE,SAAS;gBACvC,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;oBAAE,SAAS;gBACxF,MAAM,MAAM,GAAG,0BAA0B,CAAC,CAAC,EAAE;oBAC3C,OAAO,EAAE,yBAAyB;oBAClC,aAAa,EAAE,CAAC,CAAC,EAAE;oBACnB,UAAU,EAAE,QAAQ;oBACpB,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,sDAAsD;oBAC1E,EAAE,EAAE,MAAM;iBACX,EAAE,EAAE,aAAa,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;gBAC1D,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;oBACd,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC7B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC1B,uFAAuF;oBACvF,0FAA0F;oBAC1F,sEAAsE;oBACtE,IAAI,CAAC,CAAC,EAAE;wBACN,OAAO,EAAE,yBAAyB;wBAClC,aAAa,EAAE,CAAC,CAAC,EAAE;wBACnB,UAAU,EAAE,QAAQ;wBACpB,KAAK,EAAE,CAAC,CAAC,SAAS;wBAClB,EAAE,EAAE,MAAM;qBACX,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/messaging/board.d.ts

@@ -1,23 +1,95 @@
 import type { CanonicalAgentId } from '@agenticprimitives/types';
-import type { ConversationDescriptorV1, MessageEnvelopeV1 } from './types.js';
+import type { AnyMessageEnvelope, ContextRefV1, ConversationDescriptorV1 } from './types.js';
+import { type ConsultProvenanceV1 } from './consult.js';
 export interface ChannelMessageEntryV1 {
-    envelope: MessageEnvelopeV1;
+    envelope: AnyMessageEnvelope;
     authorName: string;
+    /** spec 324 §9 acting-agent provenance (spec 327): WHO performed the authoring move when it was
+     *  not a human session — for org-assistant posts, the org SA (CAIP-10). Absent ⇒ human-session
+     *  post. Never erased; the UI renders an "agent" badge from it. */
+    actor?: CanonicalAgentId;
+    /** spec 329 §6 — PROV attribution on a turn-2 synthesis post (consulted agents + the contributing
+     *  ConsultationIntent record ids). Absent on every non-synthesis post. */
+    prov?: ConsultProvenanceV1;
+}
+/** Steward-controlled org-assistant enablement for one topic (spec 327; 318 §8.1 slice — the org's
+ *  OWN agent, not a participant bot). Handle + display name are captured AT ENABLE TIME so trigger
+ *  matching and attribution need no per-post chain read (ADR-0012); re-enabling refreshes both
+ *  after a name rotation. */
+export interface TopicAssistantV1 {
+    /** 'mention' — reply only when a post @-mentions the org. 'all' — reply to every member post. */
+    trigger: 'mention' | 'all';
+    /** Lowercased mention label, e.g. 'grace' for grace.impact — matched as @grace / @grace.impact.
+     *  Empty ONLY for trigger:'all' (a nameless org cannot be mentioned). */
+    mentionHandle: string;
+    /** Author display name stamped on assistant posts (org primary name / profile display name). */
+    displayName: string;
+    enabledBy: string;
+    enabledAt: string;
+}
+/** Steward-controlled member ROUTING enablement for one topic (spec 329 §7): the org's assistant
+ *  may consult opted-in member agents in this topic. Requires the assistant ON (routing is a mode
+ *  of the 327 assistant, never a second bot); the org-level consult wire (§3.1) is custodied
+ *  separately at the org's execution point — flag without wire ⇒ routing stays inert. */
+export interface TopicRoutingV1 {
+    /** Fan-out K per routed question (1..5, default 3 — spec 329 §4). */
+    maxFanout: number;
+    enabledBy: string;
+    enabledAt: string;
 }
 export interface ChannelV1 {
     descriptor: ConversationDescriptorV1;
     title: string;
     createdBy: string;
     messages: ChannelMessageEntryV1[];
+    /** apmsg:participationPolicy — `open` (every org MEMBER automatically participates; derived, never a
+     *  stored list) or `restricted` (invite-only; `participants` is the projection of accepted
+     *  DiscussionParticipation situations). Absent ⇒ resolved from legacy `visibility` (public→open,
+     *  private→restricted); absent both ⇒ open. */
+    participationPolicy?: 'open' | 'restricted';
     visibility?: 'public' | 'private';
-    /** For a private topic: the member SAs (lowercased 0x) allowed to see/post. The creator is always included. */
+    /** For a restricted topic: the PARTICIPANT SAs (lowercased 0x) allowed to see/post — a projection of
+     *  accepted participations (the creator is always included). Legacy field name `members` kept on the
+     *  wire; these are discussion PARTICIPANTS, not the org member roster. */
     members?: string[];
+    /** Present ⇔ the org's own agent participates in this topic (spec 327). */
+    assistant?: TopicAssistantV1;
+    /** Present ⇔ member routing is steward-enabled on this topic (spec 329; requires `assistant`). */
+    routing?: TopicRoutingV1;
 }
-/** Can `viewerSa` (0x) see this topic? Public ⇒ always; private ⇒ only if listed in `members`. `isSteward`
- *  overrides (a steward manages every topic). One mechanism — used by the store list + the UI. */
+/** Resolve a topic's participation policy, mapping the legacy `visibility` wire field
+ *  (public→open, private→restricted). Absent both ⇒ open (the default + all legacy topics). */
+export declare function channelParticipationPolicy(channel: Pick<ChannelV1, 'participationPolicy' | 'visibility'>): 'open' | 'restricted';
+/** Can `viewerSa` (0x) see this topic? OPEN ⇒ always (every org member; the caller already gated org
+ *  membership). RESTRICTED ⇒ only listed participants. `isSteward` overrides (a steward/custodian is a
+ *  facilitator of every topic). One mechanism — used by the store list + the UI. */
 export declare function canSeeChannel(channel: ChannelV1, viewerSa: string, isSteward?: boolean): boolean;
 /** Bounded per-channel history in the board doc (projection only — bodies live in the vault). */
 export declare const BOARD_HISTORY_LIMIT = 200;
+/** Should a just-committed post trigger the topic's org assistant (spec 327 §3)? Pure predicate —
+ *  the caller supplies the posted body text (it never round-trips through the stored entry, whose
+ *  body is hash-bound in the vault). False when the assistant is off, when the post is itself
+ *  agent-authored (`actor` set), or when the author IS the org — the community contextRef, NOT
+ *  `descriptor.owner` (that is the topic CREATOR) — so the assistant NEVER triggers itself, even
+ *  in `trigger:'all'` topics. */
+export declare function assistantTrigger(channel: Pick<ChannelV1, 'assistant' | 'descriptor'>, post: {
+    from: CanonicalAgentId;
+    actor?: CanonicalAgentId;
+    bodyText: string;
+}): boolean;
+/** Enable/refresh (`assistant` set) or disable (`assistant` undefined) the org assistant on a topic
+ *  (mutates the channel on success). Steward gating + audit are the caller's, as with every board
+ *  mutation. `trigger:'mention'` requires a mention handle — a nameless org cannot be mentioned. */
+export declare function setTopicAssistant(board: ChannelV1[], channelId: string, assistant: TopicAssistantV1 | undefined): BoardResult<{
+    channel: ChannelV1;
+}>;
+/** Enable/refresh (`routing` set) or disable (`routing` undefined) member routing on a topic
+ *  (spec 329 §7). Enabling REQUIRES the 327 assistant to be on (routing is a mode of the
+ *  assistant's turn); fan-out is clamped fail-closed to the approved 1..5 window. Disabling the
+ *  ASSISTANT also disables routing transitively (setTopicAssistant clears it below). */
+export declare function setTopicRouting(board: ChannelV1[], channelId: string, routing: TopicRoutingV1 | undefined): BoardResult<{
+    channel: ChannelV1;
+}>;
 export type BoardResult<T> = {
     ok: true;
 } & T | {
@@ -33,6 +105,7 @@ export declare function createBoardChannel(board: ChannelV1[], opts: {
     title: string;
     createdBy: string;
     now?: string;
+    participationPolicy?: 'open' | 'restricted';
     visibility?: 'public' | 'private';
     members?: string[];
     creatorSa?: string;
@@ -48,7 +121,14 @@ export declare function appendBoardPost(board: ChannelV1[], opts: {
     authorName: string;
     bodyText: string;
     now?: string;
+    actor?: CanonicalAgentId;
+    /** spec 329 §6 — EXTRA context refs beyond the channel's own (the `routed-consultation` chip on
+     *  the turn-1 status + turn-2 synthesis). Appended after the descriptor refs, deduped by
+     *  kind+id; the envelope validator's MAX_CONTEXT_REFS bound still applies (fail-closed). */
+    contextRefs?: ContextRefV1[];
+    /** spec 329 §6 — PROV attribution stored on the entry (synthesis posts only). */
+    prov?: ConsultProvenanceV1;
 }): Promise<BoardResult<{
-    envelope: MessageEnvelopeV1;
+    envelope: AnyMessageEnvelope;
 }>>;
 //# sourceMappingURL=board.d.ts.map

package/dist/messaging/board.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"board.d.ts","sourceRoot":"","sources":["../../src/messaging/board.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAKjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE9E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,wBAAwB,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,qBAAqB,EAAE,CAAC;IAGlC,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAClC,+GAA+G;IAC/G,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;kGACkG;AAClG,wBAAgB,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,UAAQ,GAAG,OAAO,CAK9F;AAED,iGAAiG;AACjG,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,CAAC,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E;;6FAE6F;AAC7F,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,SAAS,EAAE,EAClB,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9K,WAAW,CAAC;IAAE,OAAO,EAAE,SAAS,CAAA;CAAE,CAAC,CA+BrC;AAED;;uFAEuF;AACvF,wBAAsB,eAAe,CACnC,KAAK,EAAE,SAAS,EAAE,EAClB,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtG,OAAO,CAAC,WAAW,CAAC;IAAE,QAAQ,EAAE,iBAAiB,CAAA;CAAE,CAAC,CAAC,CA8BvD"}
+{"version":3,"file":"board.d.ts","sourceRoot":"","sources":["../../src/messaging/board.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAKjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,wBAAwB,EAAqB,MAAM,YAAY,CAAC;AAChH,OAAO,EAAkE,KAAK,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAExH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB;;uEAEmE;IACnE,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;8EAC0E;IAC1E,IAAI,CAAC,EAAE,mBAAmB,CAAC;CAC5B;AAED;;;6BAG6B;AAC7B,MAAM,WAAW,gBAAgB;IAC/B,iGAAiG;IACjG,OAAO,EAAE,SAAS,GAAG,KAAK,CAAC;IAC3B;6EACyE;IACzE,aAAa,EAAE,MAAM,CAAC;IACtB,gGAAgG;IAChG,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;yFAGyF;AACzF,MAAM,WAAW,cAAc;IAC7B,qEAAqE;IACrE,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,wBAAwB,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,qBAAqB,EAAE,CAAC;IAClC;;;mDAG+C;IAC/C,mBAAmB,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IAG5C,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAClC;;8EAE0E;IAC1E,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,kGAAkG;IAClG,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED;+FAC+F;AAC/F,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,qBAAqB,GAAG,YAAY,CAAC,GAAG,MAAM,GAAG,YAAY,CAGhI;AAED;;oFAEoF;AACpF,wBAAgB,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,UAAQ,GAAG,OAAO,CAK9F;AAED,iGAAiG;AACjG,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC;;;;;iCAKiC;AACjC,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,GAAG,YAAY,CAAC,EACpD,IAAI,EAAE;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC3E,OAAO,CAmBT;AAID;;oGAEoG;AACpG,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,SAAS,EAAE,EAClB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,gBAAgB,GAAG,SAAS,GACtC,WAAW,CAAC;IAAE,OAAO,EAAE,SAAS,CAAA;CAAE,CAAC,CAgBrC;AAED;;;wFAGwF;AACxF,wBAAgB,eAAe,CAC7B,KAAK,EAAE,SAAS,EAAE,EAClB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,GAAG,SAAS,GAClC,WAAW,CAAC;IAAE,OAAO,EAAE,SAAS,CAAA;CAAE,CAAC,CAcrC;AAED,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,CAAC,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E;;6FAE6F;AAC7F,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,SAAS,EAAE,EAClB,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IAAC,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3N,WAAW,CAAC;IAAE,OAAO,EAAE,SAAS,CAAA;CAAE,CAAC,CAkCrC;AAED;;uFAEuF;AACvF,wBAAsB,eAAe,CACnC,KAAK,EAAE,SAAS,EAAE,EAClB,IAAI,EAAE;IACJ,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACxH;;gGAE4F;IAC5F,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,iFAAiF;IACjF,IAAI,CAAC,EAAE,mBAAmB,CAAC;CAC5B,GACA,OAAO,CAAC,WAAW,CAAC;IAAE,QAAQ,EAAE,kBAAkB,CAAA;CAAE,CAAC,CAAC,CAmCxD"}

package/dist/messaging/board.js

@@ -2,10 +2,19 @@ import { generateConversationId, generateMessageId, validateMessageEnvelope } fr
 import { sha256Hex32 } from './hash.js';
 import { validateConversationDescriptor } from './conversation.js';
 import { topicBodyResource } from './vault-store.js';
-/** Can `viewerSa` (0x) see this topic? Public ⇒ always; private ⇒ only if listed in `members`. `isSteward`
- *  overrides (a steward manages every topic). One mechanism — used by the store list + the UI. */
+import { ROUTING_FANOUT_DEFAULT, ROUTING_FANOUT_MAX, ROUTING_FANOUT_MIN } from './consult.js';
+/** Resolve a topic's participation policy, mapping the legacy `visibility` wire field
+ *  (public→open, private→restricted). Absent both ⇒ open (the default + all legacy topics). */
+export function channelParticipationPolicy(channel) {
+    if (channel.participationPolicy)
+        return channel.participationPolicy;
+    return channel.visibility === 'private' ? 'restricted' : 'open';
+}
+/** Can `viewerSa` (0x) see this topic? OPEN ⇒ always (every org member; the caller already gated org
+ *  membership). RESTRICTED ⇒ only listed participants. `isSteward` overrides (a steward/custodian is a
+ *  facilitator of every topic). One mechanism — used by the store list + the UI. */
 export function canSeeChannel(channel, viewerSa, isSteward = false) {
-    if (channel.visibility !== 'private')
+    if (channelParticipationPolicy(channel) === 'open')
         return true;
     if (isSteward)
         return true;
@@ -14,6 +23,82 @@ export function canSeeChannel(channel, viewerSa, isSteward = false) {
 }
 /** Bounded per-channel history in the board doc (projection only — bodies live in the vault). */
 export const BOARD_HISTORY_LIMIT = 200;
+/** Should a just-committed post trigger the topic's org assistant (spec 327 §3)? Pure predicate —
+ *  the caller supplies the posted body text (it never round-trips through the stored entry, whose
+ *  body is hash-bound in the vault). False when the assistant is off, when the post is itself
+ *  agent-authored (`actor` set), or when the author IS the org — the community contextRef, NOT
+ *  `descriptor.owner` (that is the topic CREATOR) — so the assistant NEVER triggers itself, even
+ *  in `trigger:'all'` topics. */
+export function assistantTrigger(channel, post) {
+    const assistant = channel.assistant;
+    if (!assistant)
+        return false;
+    if (post.actor)
+        return false;
+    const org = channel.descriptor.contextRefs?.find((r) => r.kind === 'community')?.id?.toLowerCase();
+    if (org && String(post.from).toLowerCase().endsWith(org))
+        return false;
+    if (assistant.trigger === 'all')
+        return true;
+    const handle = assistant.mentionHandle.trim().toLowerCase();
+    if (!handle)
+        return false;
+    // @handle, optionally with its dotted parent name (@handle.<parent>…) — TLD-agnostic (the parent
+    // registry is app config, never package vocabulary — ADR-0021). Case-insensitive, word-bounded
+    // (name labels are [a-z0-9-]); a preceding name char (e.g. an email local part) is not a mention.
+    const esc = handle.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    const mention = new RegExp(`(?:^|[^a-z0-9-])@${esc}(?:\\.[a-z0-9-]+)*(?![a-z0-9-])`, 'i');
+    if (mention.test(post.bodyText))
+        return true;
+    // `@ask` — the universal, org-agnostic assistant alias: members shouldn't have to remember the
+    // org's handle to talk to its assistant. Same word-bounding rules; only meaningful where an
+    // assistant is enabled, so it can never mis-route across orgs.
+    return ASK_ALIAS.test(post.bodyText);
+}
+const ASK_ALIAS = /(?:^|[^a-z0-9-])@ask(?![a-z0-9-])/i;
+/** Enable/refresh (`assistant` set) or disable (`assistant` undefined) the org assistant on a topic
+ *  (mutates the channel on success). Steward gating + audit are the caller's, as with every board
+ *  mutation. `trigger:'mention'` requires a mention handle — a nameless org cannot be mentioned. */
+export function setTopicAssistant(board, channelId, assistant) {
+    const channel = board.find((c) => c.descriptor.id === channelId);
+    if (!channel)
+        return { ok: false, error: 'unknown channel' };
+    if (!assistant) {
+        delete channel.assistant;
+        // spec 329 §8 — assistant off ⇒ routing off transitively (routing is a mode of the assistant).
+        delete channel.routing;
+        return { ok: true, channel };
+    }
+    const mentionHandle = assistant.mentionHandle.trim().toLowerCase();
+    if (assistant.trigger === 'mention' && !mentionHandle) {
+        return { ok: false, error: 'mention trigger requires the org to have a primary name' };
+    }
+    if (!assistant.displayName.trim())
+        return { ok: false, error: 'displayName required' };
+    channel.assistant = { ...assistant, mentionHandle };
+    return { ok: true, channel };
+}
+/** Enable/refresh (`routing` set) or disable (`routing` undefined) member routing on a topic
+ *  (spec 329 §7). Enabling REQUIRES the 327 assistant to be on (routing is a mode of the
+ *  assistant's turn); fan-out is clamped fail-closed to the approved 1..5 window. Disabling the
+ *  ASSISTANT also disables routing transitively (setTopicAssistant clears it below). */
+export function setTopicRouting(board, channelId, routing) {
+    const channel = board.find((c) => c.descriptor.id === channelId);
+    if (!channel)
+        return { ok: false, error: 'unknown channel' };
+    if (!routing) {
+        delete channel.routing;
+        return { ok: true, channel };
+    }
+    if (!channel.assistant)
+        return { ok: false, error: 'routing requires the topic assistant to be enabled first' };
+    const raw = Number(routing.maxFanout);
+    const maxFanout = Number.isFinite(raw)
+        ? Math.min(Math.max(Math.round(raw), ROUTING_FANOUT_MIN), ROUTING_FANOUT_MAX)
+        : ROUTING_FANOUT_DEFAULT;
+    channel.routing = { ...routing, maxFanout };
+    return { ok: true, channel };
+}
 /** Create a channel on the board (mutates `board` on success). Title-unique per context.
  *  `contextId` is the org/context SA (substrate vocabulary — spec 322 §5; the wire literal
  *  `kind:'community'` is inside signed hashes and renames only at 316's envelope re-cut). */
@@ -24,7 +109,8 @@ export function createBoardChannel(board, opts) {
     if (board.some((c) => c.title.toLowerCase() === title.toLowerCase())) {
         return { ok: false, error: 'a channel with this title already exists' };
     }
-    const isPrivate = opts.visibility === 'private';
+    // New callers say participationPolicy; legacy callers say visibility. restricted ≡ private.
+    const isPrivate = opts.participationPolicy ? opts.participationPolicy === 'restricted' : opts.visibility === 'private';
     const descriptor = {
         version: 'ap.conversation.v1',
         id: generateConversationId(),
@@ -40,12 +126,14 @@ export function createBoardChannel(board, opts) {
     const errors = validateConversationDescriptor(descriptor);
     if (errors.length > 0)
         return { ok: false, error: `invalid channel: ${errors.join(', ')}` };
-    // The creator is always a member of a private topic; dedupe + lowercase.
+    // The creator is always a participant of a restricted topic; dedupe + lowercase.
     const members = isPrivate
         ? [...new Set([opts.creatorSa?.toLowerCase(), ...(opts.members ?? []).map((m) => m.toLowerCase())].filter((m) => !!m))]
         : undefined;
     const channel = {
         descriptor, title, createdBy: opts.createdBy, messages: [],
+        // Dual-write: participationPolicy is the vocabulary; visibility stays for legacy readers.
+        participationPolicy: isPrivate ? 'restricted' : 'open',
         ...(isPrivate ? { visibility: 'private', members } : {}),
     };
     board.push(channel);
@@ -63,11 +151,14 @@ export async function appendBoardPost(board, opts) {
         return { ok: false, error: 'unknown channel' };
     const now = opts.now ?? new Date().toISOString();
     const messageId = generateMessageId();
+    const baseRefs = channel.descriptor.contextRefs ?? [];
+    const extraRefs = (opts.contextRefs ?? []).filter((r) => !baseRefs.some((b) => b.kind === r.kind && b.id === r.id));
+    const contextRefs = [...baseRefs, ...extraRefs];
     const envelope = {
-        version: 'ap.message.v1',
+        version: 'ap.message.v2',
         id: messageId,
         conversationId: channel.descriptor.id,
-        kind: 'plain',
+        performative: 'INFORM',
         from: opts.from,
         // Shared-board addressing: the descriptor's owner stands for the board (spec 313 §6).
         to: [channel.descriptor.owner],
@@ -76,12 +167,12 @@ export async function appendBoardPost(board, opts) {
         body: { resource: topicBodyResource(channel.descriptor.id, messageId), classification: 'internal', updatedAt: now },
         bodyHash: await sha256Hex32(new TextEncoder().encode(bodyText)),
         bodyContentType: 'text/plain',
-        contextRefs: channel.descriptor.contextRefs,
+        contextRefs,
     };
     const errors = validateMessageEnvelope(envelope);
     if (errors.length > 0)
         return { ok: false, error: `invalid post: ${errors.join(', ')}` };
-    channel.messages.push({ envelope, authorName: opts.authorName });
+    channel.messages.push({ envelope, authorName: opts.authorName, ...(opts.actor ? { actor: opts.actor } : {}), ...(opts.prov ? { prov: opts.prov } : {}) });
     if (channel.messages.length > BOARD_HISTORY_LIMIT) {
         channel.messages.splice(0, channel.messages.length - BOARD_HISTORY_LIMIT);
     }