@agenticprimitives/fabric 0.0.0-alpha.3 → 0.0.0-alpha.30

package/dist/communicative-act.js

@@ -8,6 +8,34 @@
 // V1 envelopes carry no native performative, so for legacy/communication envelopes the performative is DERIVED
 // from `MessageKind` via one TOTAL mapping (`performativeForKind`, golden-vectored). A future `ap.exchange.v2`
 // envelope carries `performative`/`actor`/`principal` natively.
+import { isEnvelopeV2 } from './messaging/index.js';
+/**
+ * The performative of ANY envelope — the dual-read seam (spec 340 W9).
+ *
+ * V2 states it; V1 derives it. One mechanism per version, never a fallback chain: a V2 envelope is
+ * never re-derived from a kind it does not have, and a V1 envelope never invents a `performative`
+ * field (ADR-0013).
+ */
+export function performativeOf(envelope, act) {
+    return isEnvelopeV2(envelope) ? envelope.performative : performativeForKind(envelope.kind, act);
+}
+/**
+ * Is this an ORIGINAL message rather than a reply?
+ *
+ * THE READER THAT FOUND A LATENT BUG. The auto-reply gate was `kind !== 'plain'`, which excluded
+ * `response` — so the assistant never replied to a reply. Under V2 that exclusion evaporates, because
+ * `plain` and `response` BOTH map to `INFORM` and are indistinguishable by performative alone. A naive
+ * translation to `performative === 'INFORM'` would have made the assistant start answering replies,
+ * i.e. answering itself.
+ *
+ * The fix is not to keep the taxonomy. It is that `inReplyTo` — the causal edge — was always the thing
+ * that actually distinguished them, and the enum had been standing in for it. Expressing the rule as
+ * "an original message has no antecedent" is both correct under V1 and correct under V2, and it says
+ * what the rule means instead of naming a label that implied it.
+ */
+export function isOriginalMessage(envelope) {
+    return envelope.inReplyTo === undefined;
+}
 /**
  * The TOTAL `MessageKind` → `Performative` derivation for V1 envelopes (spec 324 §9). Exhaustive: every
  * `MessageKind` maps. A `response` refines to the act's performative when it is one of the response family

package/dist/communicative-act.js.map

@@ -1 +1 @@
-{"version":3,"file":"communicative-act.js","sourceRoot":"","sources":["../src/communicative-act.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,4GAA4G;AAC5G,8GAA8G;AAC9G,4GAA4G;AAC5G,8GAA8G;AAC9G,iEAAiE;AACjE,EAAE;AACF,+GAA+G;AAC/G,+GAA+G;AAC/G,gEAAgE;AAiDhE;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAiB,EAAE,GAAwB;IAC7E,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO;YACV,OAAO,QAAQ,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,CAAC,GAAG,GAAG,EAAE,YAAY,CAAC;YAC5B,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC9F,CAAC;QACD,KAAK,qBAAqB;YACxB,OAAO,OAAO,CAAC;QACjB,KAAK,SAAS;YACZ,OAAO,aAAa,CAAC;QACvB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,WAAW;YACd,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC"}
+{"version":3,"file":"communicative-act.js","sourceRoot":"","sources":["../src/communicative-act.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,4GAA4G;AAC5G,8GAA8G;AAC9G,4GAA4G;AAC5G,8GAA8G;AAC9G,iEAAiE;AACjE,EAAE;AACF,+GAA+G;AAC/G,+GAA+G;AAC/G,gEAAgE;AAIhE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AA8CpD;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,QAA4B,EAAE,GAAwB;IACnF,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAClG,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAA8C;IAC9E,OAAO,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAiB,EAAE,GAAwB;IAC7E,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO;YACV,OAAO,QAAQ,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,CAAC,GAAG,GAAG,EAAE,YAAY,CAAC;YAC5B,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC9F,CAAC;QACD,KAAK,qBAAqB;YACxB,OAAO,OAAO,CAAC;QACjB,KAAK,SAAS;YACZ,OAAO,aAAa,CAAC;QACvB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,WAAW;YACd,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/delivery-envelope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delivery-envelope.d.ts","sourceRoot":"","sources":["../src/delivery-envelope.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAE3F,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,yBAAyB,CAAC;IACnC,UAAU,EAAE,UAAU,GAAG,MAAM,CAAC;IAChC,+FAA+F;IAC/F,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,4GAA4G;IAC5G,WAAW,EAAE,gBAAgB,CAAC;IAC9B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAC,GAAG,kBAAkB,CAGpG;AAED,MAAM,MAAM,iBAAiB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,kBAAkB,EAC5B,IAAI,EAAE;IAAE,SAAS,EAAE,gBAAgB,CAAA;CAAE,GACpC,iBAAiB,CAQnB;AAED;oEACoE;AACpE,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,kBAAkB,EAC5B,IAAI,EAAE;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACxC,gBAAgB,CAelB"}
+{"version":3,"file":"delivery-envelope.d.ts","sourceRoot":"","sources":["../src/delivery-envelope.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAE3F,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,yBAAyB,CAAC;IACnC,UAAU,EAAE,UAAU,GAAG,MAAM,CAAC;IAChC,+FAA+F;IAC/F,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,4GAA4G;IAC5G,WAAW,EAAE,gBAAgB,CAAC;IAC9B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAC,GAAG,kBAAkB,CAGpG;AAED,MAAM,MAAM,iBAAiB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,kBAAkB,EAC5B,IAAI,EAAE;IAAE,SAAS,EAAE,gBAAgB,CAAA;CAAE,GACpC,iBAAiB,CAQnB;AAED;oEACoE;AACpE,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,kBAAkB,EAC5B,IAAI,EAAE;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACxC,gBAAgB,CAclB"}

package/dist/delivery-envelope.js

@@ -29,7 +29,6 @@ export function deliveryToExchangeRecord(delivery, opts) {
     return {
         version: 'ap.exchange.v1',
         exchangeId: delivery.exchangeId,
-        kind: e.kind,
         tier: opts.tier,
         principal: delivery.toGateway,
         parties: { from: e.from, to: e.to },

package/dist/delivery-envelope.js.map

@@ -1 +1 @@
-{"version":3,"file":"delivery-envelope.js","sourceRoot":"","sources":["../src/delivery-envelope.ts"],"names":[],"mappings":"AA0BA,MAAM,UAAU,qBAAqB,CAAC,KAA0C;IAC9E,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC7G,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAAE,GAAG,KAAK,EAAE,CAAC;AAC1D,CAAC;AAID;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAA4B,EAC5B,IAAqC;IAErC,IAAI,QAAQ,CAAC,OAAO,KAAK,yBAAyB;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAChG,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAC9F,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAC5B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACnF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;oEACoE;AACpE,MAAM,UAAU,wBAAwB,CACtC,QAA4B,EAC5B,IAAyC;IAEzC,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAC5B,OAAO;QACL,OAAO,EAAE,gBAAgB;QACzB,UAAU,EAAE,QAAQ,CAAC,UAAwB;QAC7C,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;QACnC,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,CAAC,CAAC,CAAC;QACd,MAAM,EAAE,EAAE;QACV,GAAG,EAAE,CAAC;QACN,SAAS,EAAE,IAAI,CAAC,EAAE;KACnB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"delivery-envelope.js","sourceRoot":"","sources":["../src/delivery-envelope.ts"],"names":[],"mappings":"AA0BA,MAAM,UAAU,qBAAqB,CAAC,KAA0C;IAC9E,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC7G,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAAE,GAAG,KAAK,EAAE,CAAC;AAC1D,CAAC;AAID;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAA4B,EAC5B,IAAqC;IAErC,IAAI,QAAQ,CAAC,OAAO,KAAK,yBAAyB;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAChG,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAC9F,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAC5B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACnF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;oEACoE;AACpE,MAAM,UAAU,wBAAwB,CACtC,QAA4B,EAC5B,IAAyC;IAEzC,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAC5B,OAAO;QACL,OAAO,EAAE,gBAAgB;QACzB,UAAU,EAAE,QAAQ,CAAC,UAAwB;QAC7C,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;QACnC,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,CAAC,CAAC,CAAC;QACd,MAAM,EAAE,EAAE;QACV,GAAG,EAAE,CAAC;QACN,SAAS,EAAE,IAAI,CAAC,EAAE;KACnB,CAAC;AACJ,CAAC"}

package/dist/email/index.d.ts

@@ -0,0 +1,75 @@
+/** What a provider needs to send one message. Deliberately small — no attachments, no templates. */
+export interface OutboundEmailV1 {
+    to: string;
+    subject: string;
+    text: string;
+    /** Optional HTML alternative. Providers that cannot send it fall back to `text`. */
+    html?: string;
+    /** Set when this mail continues a conversation, so replies thread in the recipient's mail client. */
+    inReplyTo?: string;
+}
+export interface EmailSendResultV1 {
+    ok: boolean;
+    /** The provider's own id for the message, when it gives one — kept so a thread can cite it. */
+    messageId?: string;
+    error?: string;
+    /** Which provider actually sent it. Recorded, because "the email went" is a different fact per rail. */
+    via?: string;
+}
+/**
+ * THE PORT. One method, and the implementations are leaves.
+ *
+ * `available` is separate from `send` on purpose: a surface must be able to say "email is not set up
+ * here" BEFORE offering somebody an email invitation, rather than accepting the address and failing.
+ */
+export interface EmailSenderPort {
+    readonly name: string;
+    available(): boolean;
+    send(msg: OutboundEmailV1): Promise<EmailSendResultV1>;
+}
+/**
+ * TWO INTEGRATIONS, ONE PORT — the first that is available sends.
+ *
+ * Not a fallback chain (ADR-0013): the order is a DEPLOYMENT PREFERENCE stated once, and a provider that
+ * is configured but fails returns an error rather than handing the message to the next one. Sending the
+ * same mail twice because the first attempt's response was slow is worse than not sending it.
+ */
+export declare function firstAvailableSender(senders: readonly EmailSenderPort[]): EmailSenderPort | null;
+/** An inbound message, already parsed. The adapter does the MIME; this is what the inbox needs. */
+export interface InboundEmailV1 {
+    /** What the mail was sent TO — the only routable fact in it. */
+    to: string;
+    /** What it CLAIMS to be from. Unverified by construction; shown as a claim, never resolved as identity. */
+    from: string;
+    subject: string;
+    text: string;
+    /** Provider message id, for de-duplication and for citing the mail this message came from. */
+    messageId?: string;
+    /** Names only. An attachment is announced, never admitted (rule 4). */
+    attachments?: Array<{
+        name: string;
+        size?: number;
+        contentType?: string;
+    }>;
+}
+/** The handle an address routes to: `alice@faithnet.me` → `alice`. Empty when the zone is not ours. */
+export declare function handleFromAddress(address: string, zones: readonly string[]): string;
+/** Is this a well-formed address at all? Shape only — nothing here says a mailbox exists. */
+export declare function isEmailAddress(v: string): boolean;
+export declare const EMAIL_BODY_LIMIT = 16000;
+/**
+ * An inbound email as the message a thread will hold.
+ *
+ * WHAT IT KEEPS: the words, who it says it is from, what it was about, and what came with it BY NAME.
+ * WHAT IT REFUSES: anything past the cap (truncated, and it says so — a body silently cut in half is a
+ * message that misleads), and every attachment's content.
+ *
+ * The result is deliberately plain text: a thread that renders remote HTML from an unverified sender is
+ * a phishing surface with a nice font.
+ */
+export declare function inboundEmailToMessage(mail: InboundEmailV1): {
+    bodyText: string;
+    subject: string;
+    claimedFrom: string;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/email/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/email/index.ts"],"names":[],"mappings":"AAwBA,oGAAoG;AACpG,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qGAAqG;IACrG,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,+FAA+F;IAC/F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wGAAwG;IACxG,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,SAAS,IAAI,OAAO,CAAC;IACrB,IAAI,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACxD;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,GAAG,eAAe,GAAG,IAAI,CAEhG;AAED,mGAAmG;AACnG,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,EAAE,EAAE,MAAM,CAAC;IACX,2GAA2G;IAC3G,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,8FAA8F;IAC9F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5E;AAED,uGAAuG;AACvG,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAQnF;AAED,6FAA6F;AAC7F,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,eAAO,MAAM,gBAAgB,QAAS,CAAC;AAEvC;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,cAAc,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAetH"}

package/dist/email/index.js

@@ -0,0 +1,77 @@
+// EMAIL AS A CHANNEL INTO THE INBOX — spec 365.
+//
+// A person's agent should be reachable by the address they already have, and an email they send or
+// receive should land in the SAME thread as everything else they say to that person. Two mailboxes for
+// one relationship is how half a conversation goes missing.
+//
+// FOUR RULES, and the whole design is these:
+//
+//   1. AN EMAIL IS NOT AUTHORITY (spec 309 §4.2). Inbound mail creates a MESSAGE and can never trigger
+//      an act. Nobody sends an email that moves money; the acts a person can take from a thread are the
+//      ones their own surface offers them, under their own mandate.
+//   2. THE SENDER IS AN UNVERIFIED CLAIM. `From:` is a header anyone can write, so routing is done by
+//      the address the mail was SENT TO (`<handle>@<zone>` → the naming service → an agent), never by
+//      who it says it is from. The claim travels with the message, labelled as a claim.
+//   3. PARSE IN MEMORY, STORE IN THE VAULT (spec 362 §6.2). The raw message is read into a message body
+//      the owner's vault holds and is never written to a serving-plane store — a mailbox is exactly the
+//      kind of durable private record ADR-0055 keeps out of DO storage.
+//   4. BOUNDED, ALWAYS. A body has a size cap and attachments are named, not admitted: an inbox that
+//      accepts whatever arrives is a way to fill somebody's vault from the outside.
+//
+// The SENDER PORT is here and the providers are not: a transport is a leaf binding that depends inward
+// (ADR-0057), and this package must not know whether the deployment sends through an HTTP API or a
+// platform binding.
+/**
+ * TWO INTEGRATIONS, ONE PORT — the first that is available sends.
+ *
+ * Not a fallback chain (ADR-0013): the order is a DEPLOYMENT PREFERENCE stated once, and a provider that
+ * is configured but fails returns an error rather than handing the message to the next one. Sending the
+ * same mail twice because the first attempt's response was slow is worse than not sending it.
+ */
+export function firstAvailableSender(senders) {
+    return senders.find((s) => s.available()) ?? null;
+}
+/** The handle an address routes to: `alice@faithnet.me` → `alice`. Empty when the zone is not ours. */
+export function handleFromAddress(address, zones) {
+    const at = address.trim().toLowerCase();
+    const m = /^([^@\s]+)@([^@\s]+)$/.exec(at);
+    if (!m)
+        return '';
+    const [, local = '', domain = ''] = m;
+    if (!zones.some((z) => domain === z.toLowerCase() || domain.endsWith(`.${z.toLowerCase()}`)))
+        return '';
+    // Plus-addressing is the person's own tag, not part of who they are: `alice+bills@` is alice.
+    return (local.split('+')[0] ?? '').trim();
+}
+/** Is this a well-formed address at all? Shape only — nothing here says a mailbox exists. */
+export function isEmailAddress(v) {
+    return /^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(v.trim());
+}
+export const EMAIL_BODY_LIMIT = 16_000;
+/**
+ * An inbound email as the message a thread will hold.
+ *
+ * WHAT IT KEEPS: the words, who it says it is from, what it was about, and what came with it BY NAME.
+ * WHAT IT REFUSES: anything past the cap (truncated, and it says so — a body silently cut in half is a
+ * message that misleads), and every attachment's content.
+ *
+ * The result is deliberately plain text: a thread that renders remote HTML from an unverified sender is
+ * a phishing surface with a nice font.
+ */
+export function inboundEmailToMessage(mail) {
+    const body = (mail.text ?? '').trim();
+    const truncated = body.length > EMAIL_BODY_LIMIT;
+    const kept = truncated ? `${body.slice(0, EMAIL_BODY_LIMIT)}\n\n[…] this email was longer than ${EMAIL_BODY_LIMIT} characters and the rest was not kept.` : body;
+    const files = (mail.attachments ?? []).filter((a) => a.name);
+    const noted = files.length
+        ? `\n\n${files.length === 1 ? 'It came with a file' : `It came with ${files.length} files`}, which were not saved: ${files.map((f) => f.name).join(', ')}.`
+        : '';
+    return {
+        subject: (mail.subject ?? '').trim() || '(no subject)',
+        claimedFrom: (mail.from ?? '').trim(),
+        // WHO IT SAYS IT IS FROM, said as a claim. A person reading this must not be able to mistake an
+        // email address for a verified identity — that mistake is the whole of email fraud.
+        bodyText: `${kept}${noted}\n\n— sent by email from ${mail.from} (an email address, not a verified agent)`,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/email/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/email/index.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,mGAAmG;AACnG,uGAAuG;AACvG,4DAA4D;AAC5D,EAAE;AACF,6CAA6C;AAC7C,EAAE;AACF,uGAAuG;AACvG,wGAAwG;AACxG,oEAAoE;AACpE,sGAAsG;AACtG,sGAAsG;AACtG,wFAAwF;AACxF,wGAAwG;AACxG,wGAAwG;AACxG,wEAAwE;AACxE,qGAAqG;AACrG,oFAAoF;AACpF,EAAE;AACF,uGAAuG;AACvG,mGAAmG;AACnG,oBAAoB;AAkCpB;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAmC;IACtE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,IAAI,IAAI,CAAC;AACpD,CAAC;AAgBD,uGAAuG;AACvG,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,KAAwB;IACzE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACxG,8FAA8F;IAC9F,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,OAAO,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEvC;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAoB;IACxD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC;IACjD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,sCAAsC,gBAAgB,wCAAwC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjK,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM;QACxB,CAAC,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,gBAAgB,KAAK,CAAC,MAAM,QAAQ,2BAA2B,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAC3J,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,cAAc;QACtD,WAAW,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACrC,gGAAgG;QAChG,oFAAoF;QACpF,QAAQ,EAAE,GAAG,IAAI,GAAG,KAAK,4BAA4B,IAAI,CAAC,IAAI,2CAA2C;KAC1G,CAAC;AACJ,CAAC"}

package/dist/enum-retirement.d.ts

@@ -0,0 +1,43 @@
+import type { MessageKind } from './messaging/index.js';
+import type { CaseState } from './exchange-state.js';
+import type { ProfileVersion } from './interaction-record.js';
+/**
+ * Every `MessageKind` (still the ENVELOPE's, see the header), mapped to the profile that replaces it.
+ *
+ * `Record<MessageKind, …>` rather than a lookup function: adding a `MessageKind` without deciding its
+ * profile then fails the build, which is the only way a "total" mapping stays total.
+ *
+ * Three of the seven collapse onto `direct`, and that is the finding rather than laziness. `plain`,
+ * `system` and `tombstone` were never different KINDS of interaction — they are a message, a message
+ * from the substrate, and a deletion marker. They differed in rendering, not in what was permitted,
+ * which is exactly the kind of distinction an interaction-type enum should not have been carrying.
+ */
+export declare const PROFILE_FOR_MESSAGE_KIND: Record<MessageKind, ProfileVersion>;
+/** Which of the six machines each `CaseState` actually belongs to. */
+export type OwningMachine = 'execution' | 'decision' | 'commitment';
+/**
+ * Every `CaseState`, mapped to the machine that owns it.
+ *
+ * THE POINT OF THIS TABLE: the eleven states were never one machine's. `denied` is a DECISION,
+ * `completed` is an EXECUTION outcome, and `revoked` is what happens to a COMMITMENT — three
+ * different questions with three different signers, answered by one field. That is why a case could
+ * be `denied` and a commitment still outstanding with nowhere to say so.
+ *
+ * `issued` and `approved` are the two that look ambiguous and are not: approving is a decision,
+ * issuing is work performed under it. Reading `approved` as execution progress is precisely the
+ * "deciding is not doing" collapse.
+ */
+export declare const MACHINE_FOR_CASE_STATE: Record<CaseState, OwningMachine>;
+/**
+ * How many distinct machines the single `CaseState` field stands in for.
+ *
+ * It was THREE, and that number was the whole argument for W10b-3. It is now ONE, and this function is
+ * kept — rather than deleted along with the states — precisely so that claim stays falsifiable: if
+ * anyone re-adds a decision-shaped or commitment-shaped member to `CaseState`, they must give it a home
+ * in the table above, and this count moves off 1 and the test fails.
+ *
+ * A cleanup is not finished when the code compiles; it is finished when re-introducing the thing you
+ * removed is caught automatically.
+ */
+export declare function machinesSpannedByCaseState(): number;
+//# sourceMappingURL=enum-retirement.d.ts.map

package/dist/enum-retirement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enum-retirement.d.ts","sourceRoot":"","sources":["../src/enum-retirement.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAG9D;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,WAAW,EAAE,cAAc,CAcxE,CAAC;AAEF,sEAAsE;AACtE,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,UAAU,GAAG,YAAY,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,SAAS,EAAE,aAAa,CASnE,CAAC;AAEF;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,CAEnD"}

package/dist/enum-retirement.js

@@ -0,0 +1,93 @@
+// The `MessageKind` / `CaseState` retirement path (spec 340 W5).
+//
+// THIS FILE IS TRANSITIONAL. It is separate from everything else so that deleting it is a visible,
+// one-file event rather than an archaeology exercise.
+//
+// The two enums are frozen taxonomies: a new interaction type is a new `MessageKind` member and a
+// schema change, which is the problem versioned profiles solve (spec 340 §6).
+//
+// WHAT W8 ACTUALLY REMOVED, AND WHAT IT COULD NOT. W5 recorded these as one job — "26 files,
+// mechanical once the mapping is total". Doing it showed that was wrong in a way worth writing down,
+// because the next person will assume the same thing (spec 340 §R.1):
+//
+//   · `ExchangeRecordV1.kind` — REMOVED. Zero readers, a second copy of `envelope.kind`, and its own
+//     doc comment said the authority tier is classified from the skill selector and never from it.
+//     `profileVersion` carries interaction type now.
+//
+//   · `MessageEnvelopeV1.kind` — KEPT, and this is not deferral. It sits INSIDE the signed wire hash
+//     (`hashMessageEnvelope` excludes only `signature`), so removing it changes every envelope digest
+//     and invalidates every existing signature and delivery receipt. It also has live readers: the
+//     auto-reply gate, folder routing, the inbox rule predicate, and the delivery envelope. Removing
+//     it is an `ap.message.v2` migration with re-signing, not a cleanup.
+//
+//   · `CaseState` — KEPT. `MACHINE_FOR_CASE_STATE` below proves it spans three machines, and that
+//     analysis stands. But the decision and commitment machines W3 built are not yet populated by the
+//     live case flow, so deleting `CaseState` today would remove working behaviour and replace it with
+//     machines nothing writes to. That is a regression wearing the costume of a cleanup. It goes when
+//     the case flow emits decision and commitment records — a behaviour change, not a rename.
+//
+// The maps below stay because both remaining removals still need them.
+import { DIRECT_PROFILE, NEGOTIATION_PROFILE, CONSULTATION_PROFILE } from './interaction-profile.js';
+/**
+ * Every `MessageKind` (still the ENVELOPE's, see the header), mapped to the profile that replaces it.
+ *
+ * `Record<MessageKind, …>` rather than a lookup function: adding a `MessageKind` without deciding its
+ * profile then fails the build, which is the only way a "total" mapping stays total.
+ *
+ * Three of the seven collapse onto `direct`, and that is the finding rather than laziness. `plain`,
+ * `system` and `tombstone` were never different KINDS of interaction — they are a message, a message
+ * from the substrate, and a deletion marker. They differed in rendering, not in what was permitted,
+ * which is exactly the kind of distinction an interaction-type enum should not have been carrying.
+ */
+export const PROFILE_FOR_MESSAGE_KIND = {
+    plain: DIRECT_PROFILE.profileVersion,
+    system: DIRECT_PROFILE.profileVersion,
+    tombstone: DIRECT_PROFILE.profileVersion,
+    // A request and its response are one interaction with two moves, not two kinds. Under a profile the
+    // difference is the act (`QUERY` then `INFORM`), where it belongs.
+    request: CONSULTATION_PROFILE.profileVersion,
+    response: CONSULTATION_PROFILE.profileVersion,
+    // Issuing a credential discharges something someone agreed to; `negotiation` is the profile in the
+    // starter library whose ACCEPT can create that obligation. A dedicated `issuance` profile is the
+    // right long-term home — noted rather than invented here, because inventing a profile to make a
+    // migration table look tidy is how the library fills with profiles nothing uses.
+    'credential-delivery': NEGOTIATION_PROFILE.profileVersion,
+    receipt: DIRECT_PROFILE.profileVersion,
+};
+/**
+ * Every `CaseState`, mapped to the machine that owns it.
+ *
+ * THE POINT OF THIS TABLE: the eleven states were never one machine's. `denied` is a DECISION,
+ * `completed` is an EXECUTION outcome, and `revoked` is what happens to a COMMITMENT — three
+ * different questions with three different signers, answered by one field. That is why a case could
+ * be `denied` and a commitment still outstanding with nowhere to say so.
+ *
+ * `issued` and `approved` are the two that look ambiguous and are not: approving is a decision,
+ * issuing is work performed under it. Reading `approved` as execution progress is precisely the
+ * "deciding is not doing" collapse.
+ */
+export const MACHINE_FOR_CASE_STATE = {
+    draft: 'execution',
+    submitted: 'execution',
+    triaged: 'execution',
+    'needs-info': 'execution',
+    issued: 'execution',
+    completed: 'execution',
+    closed: 'execution',
+    failed: 'execution',
+};
+/**
+ * How many distinct machines the single `CaseState` field stands in for.
+ *
+ * It was THREE, and that number was the whole argument for W10b-3. It is now ONE, and this function is
+ * kept — rather than deleted along with the states — precisely so that claim stays falsifiable: if
+ * anyone re-adds a decision-shaped or commitment-shaped member to `CaseState`, they must give it a home
+ * in the table above, and this count moves off 1 and the test fails.
+ *
+ * A cleanup is not finished when the code compiles; it is finished when re-introducing the thing you
+ * removed is caught automatically.
+ */
+export function machinesSpannedByCaseState() {
+    return new Set(Object.values(MACHINE_FOR_CASE_STATE)).size;
+}
+//# sourceMappingURL=enum-retirement.js.map

package/dist/enum-retirement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enum-retirement.js","sourceRoot":"","sources":["../src/enum-retirement.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,mGAAmG;AACnG,sDAAsD;AACtD,EAAE;AACF,kGAAkG;AAClG,8EAA8E;AAC9E,EAAE;AACF,6FAA6F;AAC7F,qGAAqG;AACrG,sEAAsE;AACtE,EAAE;AACF,qGAAqG;AACrG,mGAAmG;AACnG,qDAAqD;AACrD,EAAE;AACF,qGAAqG;AACrG,sGAAsG;AACtG,mGAAmG;AACnG,qGAAqG;AACrG,yEAAyE;AACzE,EAAE;AACF,kGAAkG;AAClG,sGAAsG;AACtG,uGAAuG;AACvG,sGAAsG;AACtG,8FAA8F;AAC9F,EAAE;AACF,uEAAuE;AAKvE,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAErG;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAwC;IAC3E,KAAK,EAAE,cAAc,CAAC,cAAc;IACpC,MAAM,EAAE,cAAc,CAAC,cAAc;IACrC,SAAS,EAAE,cAAc,CAAC,cAAc;IACxC,oGAAoG;IACpG,mEAAmE;IACnE,OAAO,EAAE,oBAAoB,CAAC,cAAc;IAC5C,QAAQ,EAAE,oBAAoB,CAAC,cAAc;IAC7C,mGAAmG;IACnG,iGAAiG;IACjG,gGAAgG;IAChG,iFAAiF;IACjF,qBAAqB,EAAE,mBAAmB,CAAC,cAAc;IACzD,OAAO,EAAE,cAAc,CAAC,cAAc;CACvC,CAAC;AAKF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAqC;IACtE,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,WAAW;IACpB,YAAY,EAAE,WAAW;IACzB,MAAM,EAAE,WAAW;IACnB,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;CACpB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC"}

package/dist/exchange-record.d.ts

@@ -1,11 +1,13 @@
-import type { MessageEnvelopeV1, MessageKind, MessageEventType, MessageId, Hex32, ContextRefV1 } from './messaging/index.js';
+import type { MessageEnvelopeV1, MessageEventType, MessageId, Hex32, ContextRefV1 } from './messaging/index.js';
 import { hashMessageEnvelope } from './messaging/index.js';
 import type { AuthorityRef } from './interactions/index.js';
 import type { AuthorityTier } from '@agenticprimitives/tool-policy';
 import type { CanonicalAgentId } from '@agenticprimitives/types';
 import type { VaultRef } from '@agenticprimitives/vault';
 import type { ExecState, CaseState } from './exchange-state.js';
+import type { DecisionState } from './interaction-machines.js';
 import type { CaseTransition } from './case-machine.js';
+import type { InteractionId, ProfileVersion, ContextDigest } from './interaction-record.js';
 /** The exchange spine id — replaces today's `taskId` / `int_`+`run_` / `conv_`+`msg_` id families. */
 export type ExchangeId = `xch_${string}`;
 /**
@@ -82,12 +84,16 @@ export type ExchangeEventV1 = (ExchangeEventBase & {
  * The ONE canonical exchange record (spec §b). Two-level FSM: `exec` (transport, always present) + `case`
  * (business substate, execution-tier only). Authority is referenced, never satisfied here — approving a case
  * advances `case`, it never unlocks a resource (ADR-0041).
+ *
+ * `kind: MessageKind` was REMOVED in spec 340 W8. It was a frozen taxonomy on the aggregate, it was a second
+ * copy of `envelope.kind`, and it had ZERO readers — the authority tier is server-classified from the skill
+ * selector, never from `kind`, and that comment was the only thing the field was doing. `profileVersion` is
+ * what carries interaction type now. `MessageEnvelopeV1.kind` is a DIFFERENT field and stays: it is inside
+ * the signed wire hash and has live readers (spec 340 §R.1).
  */
 export interface ExchangeRecordV1 {
     version: 'ap.exchange.v1';
     exchangeId: ExchangeId;
-    /** Projection hint only — the authority TIER is server-classified from the skill selector, never `kind`. */
-    kind: MessageKind;
     /** Server-classified ONCE at ingress (never client-asserted). */
     tier: AuthorityTier;
     /** The delegator / gateway owner SA — on whose behalf the exchange runs. Also the case RESPONDER by
@@ -108,8 +114,22 @@ export interface ExchangeRecordV1 {
     resourceOwner?: CanonicalAgentId;
     /** Transport envelope state (always present). */
     exec: ExecState;
-    /** Business substate — execution-tier only; `undefined` for a T0 communication exchange. */
+    /** Execution substate — execution-tier only; `undefined` for a T0 communication exchange. */
     case?: CaseState;
+    /**
+     * spec 340 W10b-3 — the DECISION substate, projected onto this record.
+     *
+     * Until W10b-3 the ordering "you cannot issue before approving" was an FSM edge
+     * (`issue-credential` ran only `from: ['approved']`). With the determination out of `CaseState`,
+     * this reducer would otherwise have no way to know one was made, and issuance could skip it — a
+     * guarantee silently lost to a type change. So the reducer projects the decision state the same way
+     * it projects `exec` from `case`.
+     *
+     * A PROJECTION, not the record of record: the full `DecisionRecordV1` (with its decider and
+     * timestamps) lives in the interaction store's decision machine. This carries only what the
+     * precondition needs. It is never authority — a `granted` here permits nothing (ADR-0041).
+     */
+    decision?: DecisionState;
     /** The signed wire objects (deliveries, responses, decisions). */
     envelopes: ExchangeEnvelopeV1[];
     /** The single append-only event stream (single-writer in the DO). */
@@ -120,6 +140,17 @@ export interface ExchangeRecordV1 {
     artifacts?: ArtifactRef[];
     /** Entities this exchange is ABOUT (spec 312) — carried through from the envelope. */
     contextRefs?: ContextRefV1[];
+    /** The governed situation this exchange occurs in. An Exchange without one is a message — a
+     *  legitimate state, not an error, and the reason this is optional rather than required. */
+    interactionId?: InteractionId;
+    /** The EXACT profile version this exchange was made under, recorded HERE rather than read off the
+     *  live interaction. Reading it off the interaction is what makes a downgrade invisible: an
+     *  adversary edits one field and a Negotiation is reinterpreted as a Conversation, taking its
+     *  acceptance semantics with it (spec 340 §6). */
+    profileVersion?: ProfileVersion;
+    /** Digest of the `ContextSnapshotV1` this exchange was evaluated against — by hash, never a pointer
+     *  at live state. Supersedes `contextRefs` for authority-bearing context (spec 340 §7). */
+    contextDigest?: ContextDigest;
     /** Monotonic revision for the inbox-projection cursor. */
     rev: number;
     updatedAt: string;

package/dist/exchange-record.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exchange-record.d.ts","sourceRoot":"","sources":["../src/exchange-record.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC7H,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,sGAAsG;AACtG,MAAM,MAAM,UAAU,GAAG,OAAO,MAAM,EAAE,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IAC3D;yGACqG;IACrG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;yBACqB;IACrB,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB,4GAA4G;IAC5G,QAAQ,CAAC,EAAE,KAAK,CAAC;CAClB;AAED;mEACmE;AACnE,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAElD;;kDAEkD;AAClD,eAAO,MAAM,oBAAoB,4BAAsB,CAAC;AACxD,uFAAuF;AACvF,eAAO,MAAM,kBAAkB,4BAAsB,CAAC;AAEtD,6GAA6G;AAC7G,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,QAAQ,CAAC;IACd,IAAI,EAAE,KAAK,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;oEACoE;AACpE,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,KAAK,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GACvB,CAAC,iBAAiB,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,SAAS,CAAC;IAAC,WAAW,CAAC,EAAE,QAAQ,CAAA;CAAE,CAAC,GAC7I,CAAC,iBAAiB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAAC,WAAW,CAAC,EAAE,QAAQ,CAAC;IAAC,YAAY,CAAC,EAAE,YAAY,CAAA;CAAE,CAAC,GACvK,CAAC,iBAAiB,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,WAAW,CAAA;CAAE,CAAC,GACjE,CAAC,iBAAiB,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC,CAAC;AAEnE;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,UAAU,EAAE,UAAU,CAAC;IACvB,4GAA4G;IAC5G,IAAI,EAAE,WAAW,CAAC;IAClB,iEAAiE;IACjE,IAAI,EAAE,aAAa,CAAC;IACpB;uGACmG;IACnG,SAAS,EAAE,gBAAgB,CAAC;IAC5B;;;yBAGqB;IACrB,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,OAAO,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,EAAE,EAAE,gBAAgB,EAAE,CAAC;QAAC,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IACrF;+GAC2G;IAC3G,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,iDAAiD;IACjD,IAAI,EAAE,SAAS,CAAC;IAChB,4FAA4F;IAC5F,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,kEAAkE;IAClE,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChC,qEAAqE;IACrE,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,sFAAsF;IACtF,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC;IAC/B,0CAA0C;IAC1C,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1B,sFAAsF;IACtF,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,0DAA0D;IAC1D,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;uGACuG;AACvG,wBAAgB,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO,GAAG,WAAW,CAAC,GAAG,gBAAgB,CAE/F"}
+{"version":3,"file":"exchange-record.d.ts","sourceRoot":"","sources":["../src/exchange-record.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAChH,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE5F,sGAAsG;AACtG,MAAM,MAAM,UAAU,GAAG,OAAO,MAAM,EAAE,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IAC3D;yGACqG;IACrG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;yBACqB;IACrB,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB,4GAA4G;IAC5G,QAAQ,CAAC,EAAE,KAAK,CAAC;CAClB;AAED;mEACmE;AACnE,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAElD;;kDAEkD;AAClD,eAAO,MAAM,oBAAoB,4BAAsB,CAAC;AACxD,uFAAuF;AACvF,eAAO,MAAM,kBAAkB,4BAAsB,CAAC;AAEtD,6GAA6G;AAC7G,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,QAAQ,CAAC;IACd,IAAI,EAAE,KAAK,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;oEACoE;AACpE,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,KAAK,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GACvB,CAAC,iBAAiB,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,SAAS,CAAC;IAAC,WAAW,CAAC,EAAE,QAAQ,CAAA;CAAE,CAAC,GAC7I,CAAC,iBAAiB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAAC,WAAW,CAAC,EAAE,QAAQ,CAAC;IAAC,YAAY,CAAC,EAAE,YAAY,CAAA;CAAE,CAAC,GACvK,CAAC,iBAAiB,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,WAAW,CAAA;CAAE,CAAC,GACjE,CAAC,iBAAiB,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC,CAAC;AAEnE;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,UAAU,EAAE,UAAU,CAAC;IACvB,iEAAiE;IACjE,IAAI,EAAE,aAAa,CAAC;IACpB;uGACmG;IACnG,SAAS,EAAE,gBAAgB,CAAC;IAC5B;;;yBAGqB;IACrB,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,OAAO,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,EAAE,EAAE,gBAAgB,EAAE,CAAC;QAAC,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IACrF;+GAC2G;IAC3G,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,iDAAiD;IACjD,IAAI,EAAE,SAAS,CAAC;IAChB,6FAA6F;IAC7F,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,kEAAkE;IAClE,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChC,qEAAqE;IACrE,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,sFAAsF;IACtF,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC;IAC/B,0CAA0C;IAC1C,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1B,sFAAsF;IACtF,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAI7B;gGAC4F;IAC5F,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;sDAGkD;IAClD,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;+FAC2F;IAC3F,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B,0DAA0D;IAC1D,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;uGACuG;AACvG,wBAAgB,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO,GAAG,WAAW,CAAC,GAAG,gBAAgB,CAE/F"}

package/dist/exchange-record.js.map

@@ -1 +1 @@
-{"version":3,"file":"exchange-record.js","sourceRoot":"","sources":["../src/exchange-record.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,6GAA6G;AAC7G,0GAA0G;AAC1G,EAAE;AACF,oGAAoG;AACpG,2GAA2G;AAC3G,6GAA6G;AAC7G,8GAA8G;AAC9G,+EAA+E;AAC/E,EAAE;AACF,4GAA4G;AAC5G,oGAAoG;AAGpG,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAiC3D;;kDAEkD;AAClD,MAAM,CAAC,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AACxD,uFAAuF;AACvF,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AA8EtD;uGACuG;AACvG,MAAM,UAAU,OAAO,CAAC,MAAqD;IAC3E,OAAO,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"exchange-record.js","sourceRoot":"","sources":["../src/exchange-record.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,6GAA6G;AAC7G,0GAA0G;AAC1G,EAAE;AACF,oGAAoG;AACpG,2GAA2G;AAC3G,6GAA6G;AAC7G,8GAA8G;AAC9G,+EAA+E;AAC/E,EAAE;AACF,4GAA4G;AAC5G,oGAAoG;AAGpG,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAmC3D;;kDAEkD;AAClD,MAAM,CAAC,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AACxD,uFAAuF;AACvF,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AA+GtD;uGACuG;AACvG,MAAM,UAAU,OAAO,CAAC,MAAqD;IAC3E,OAAO,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC;AAC1C,CAAC"}

package/dist/exchange-reducer.d.ts

@@ -1,5 +1,6 @@
 import { type CaseFsmFields } from './case-machine.js';
 import type { ExchangeRecordV1, ExchangeEventV1 } from './exchange-record.js';
+import type { Hex32 } from './messaging/index.js';
 export type ExchangeApplyResult = {
     ok: true;
     record: ExchangeRecordV1;
@@ -16,10 +17,37 @@ export type ExchangeApplyResult = {
  * `null` for a case-less (T0) exchange.
  */
 export declare function caseViewFromRecord(record: ExchangeRecordV1): CaseFsmFields | null;
+export declare function applyExchangeEvent(record: ExchangeRecordV1, event: ExchangeEventV1): ExchangeApplyResult;
+/** Bumped ONLY when a fold changes an output for inputs it already accepted. Adding a rejection reason
+ *  is not a bump; changing what an accepted event does to the record is. */
+export declare const EXCHANGE_REDUCER_VERSION: "ap.exchange-reducer.v1";
+export interface MaterializationProvenanceV1 {
+    reducerVersion: typeof EXCHANGE_REDUCER_VERSION;
+    /** sha256 over the canonical event array — order-sensitive, because the fold is. */
+    eventSetDigest: Hex32;
+    eventCount: number;
+}
+/** Digest of the exact event sequence a materialization consumed. Order-sensitive on purpose: the same
+ *  events in a different order are a different history, and folding them yields a different record. */
+export declare function eventSetDigest(events: readonly ExchangeEventV1[]): Promise<Hex32>;
+export type ExchangeReplayResult = {
+    ok: true;
+    record: ExchangeRecordV1;
+    provenance: MaterializationProvenanceV1;
+} | {
+    ok: false;
+    reason: string;
+    atSeq: number;
+};
 /**
- * Apply one event to an exchange record. Single-writer semantics (the gateway DO): `event.seq` must be the
- * next slot (`record.events.length`). Returns the next record (`changed: true`), a no-op for an idempotent
- * replay (`changed: false`), or a typed rejection.
+ * Rebuild an exchange from its event stream, and return the state WITH the evidence of how it was
+ * built.
+ *
+ * `seed` is the record as it existed before any event — the identity fields only. Its `events` are
+ * ignored and replaced by the fold, so replaying an already-materialized record cannot double-apply.
+ *
+ * Failure carries `atSeq` rather than just a reason: on a stream of two hundred events, "illegal
+ * transition" without the position is not a diagnosis.
  */
-export declare function applyExchangeEvent(record: ExchangeRecordV1, event: ExchangeEventV1): ExchangeApplyResult;
+export declare function replayExchange(seed: ExchangeRecordV1, events: readonly ExchangeEventV1[]): Promise<ExchangeReplayResult>;
 //# sourceMappingURL=exchange-reducer.d.ts.map

package/dist/exchange-reducer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exchange-reducer.d.ts","sourceRoot":"","sources":["../src/exchange-reducer.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE9E,MAAM,MAAM,mBAAmB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GACxD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,aAAa,GAAG,IAAI,CAajF;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,eAAe,GAAG,mBAAmB,CAiExG"}
+{"version":3,"file":"exchange-reducer.d.ts","sourceRoot":"","sources":["../src/exchange-reducer.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAuB,KAAK,aAAa,EAAuB,MAAM,mBAAmB,CAAC;AAEjG,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAGlD,MAAM,MAAM,mBAAmB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GACxD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,aAAa,GAAG,IAAI,CAajF;AAiCD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,eAAe,GAAG,mBAAmB,CAwExG;AAaD;4EAC4E;AAC5E,eAAO,MAAM,wBAAwB,EAAG,wBAAiC,CAAC;AAE1E,MAAM,WAAW,2BAA2B;IAC1C,cAAc,EAAE,OAAO,wBAAwB,CAAC;IAChD,oFAAoF;IACpF,cAAc,EAAE,KAAK,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;uGACuG;AACvG,wBAAsB,cAAc,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAEvF;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,UAAU,EAAE,2BAA2B,CAAA;CAAE,GAC/E;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,SAAS,eAAe,EAAE,GACjC,OAAO,CAAC,oBAAoB,CAAC,CAgB/B"}