@aitne/shared 0.1.0

package/dist/management-domains.js

@@ -0,0 +1,499 @@
+import { z } from "zod";
+import { recurrenceRuleSchema } from "./schemas.js";
+/**
+ * Management Registry — shared types and validators.
+ *
+ * This module is the single source of truth for the four-layer management
+ * model defined in `docs/design/21-management-registry-and-entities.md`:
+ *
+ *   - L1 — `rules/management.md` SoT bindings (Section A) and Managed
+ *     Tasks (Section B).
+ *   - L2 — Entity files at `context/<domain>/<type-plural>/<slug>.md`.
+ *   - L3 — `context/_activity/<source>.md` (auto-generated).
+ *   - L4 — `agent_actions` / `md_file_snapshots` (existing audit tables).
+ *
+ * Pure-logic only — no I/O, no DB access, no fs. Imported by the daemon
+ * (`api/routes/managed-tasks.ts`, `core/management-registry.ts`,
+ * `core/entity-mirror.ts`), the dashboard (Settings → Management page,
+ * entity browser), and skill prompts.
+ *
+ * 100% coverage is required (see `vitest.config.ts`'s curated set).
+ */
+// ── Domains (§9.4) ────────────────────────────────────────────────────────
+/**
+ * The fixed v1 domain enum (§8.8). Drives:
+ *   - L2 directory layout (`context/<domain>/<type-plural>/<slug>.md`),
+ *   - SoT-binding rows (Section A of management.md),
+ *   - Managed-task `Output path` validation (§9.1 render rules),
+ *   - dashboard navigation tabs.
+ *
+ * Custom user-defined domains are deferred to v4 (OQ-1). Adding a new
+ * value here is an additive change; removing one is a breaking change.
+ */
+export const DOMAINS = [
+    "work",
+    "travel",
+    "finance",
+    "personal",
+    "health",
+    "learning",
+];
+const DOMAIN_SET = new Set(DOMAINS);
+export function isDomain(value) {
+    return typeof value === "string" && DOMAIN_SET.has(value);
+}
+// ── Entity types (§9.3) ───────────────────────────────────────────────────
+/**
+ * The fixed v1 entity-type enum. Each `type` corresponds to exactly one
+ * directory name (the plural form). Adding a new type requires:
+ *   1. an entry here,
+ *   2. a `TYPE_PLURALS` entry,
+ *   3. an EntitySchema enum bump,
+ *   4. a dashboard tab if user-visible.
+ *
+ * Singular form is the canonical identifier (matches frontmatter `type`);
+ * the plural form is derived from `TYPE_PLURALS`.
+ */
+export const ENTITY_TYPES = [
+    "meeting",
+    "trip",
+    "receipt",
+    "project",
+    "book",
+    "note",
+];
+const ENTITY_TYPE_SET = new Set(ENTITY_TYPES);
+export function isEntityType(value) {
+    return typeof value === "string" && ENTITY_TYPE_SET.has(value);
+}
+/**
+ * Singular → plural map. The plural form is the directory segment in
+ * L2 paths (`context/<domain>/<type-plural>/<slug>.md`). Static — no
+ * inflection library is used (§9.3).
+ */
+export const TYPE_PLURALS = {
+    meeting: "meetings",
+    trip: "trips",
+    receipt: "receipts",
+    project: "projects",
+    book: "books",
+    note: "notes",
+};
+const PLURAL_TO_TYPE = new Map(ENTITY_TYPES.map((t) => [TYPE_PLURALS[t], t]));
+export function typeToPlural(type) {
+    return TYPE_PLURALS[type];
+}
+export function pluralToType(plural) {
+    return PLURAL_TO_TYPE.get(plural) ?? null;
+}
+// ── Caps & limits (§13.2) ─────────────────────────────────────────────────
+/** Max length of the user-typed `App` label rendered in management.md. */
+export const APP_MAX_LENGTH = 64;
+/** Max length of the `Intent` description on a managed task. */
+export const INTENT_MAX_LENGTH = 200;
+/** Max length of `last_result` (free text). */
+export const LAST_RESULT_MAX_LENGTH = 120;
+/** Default cap on active managed tasks (NFR-8); configurable. */
+export const MANAGEMENT_MAX_ACTIVE_TASKS_DEFAULT = 100;
+/** Soft warning threshold surfaced on the dashboard (§NFR-1a). */
+export const MANAGEMENT_ACTIVE_TASKS_SOFT_WARNING = 30;
+/** Default minimum cadence interval, in minutes (§13.2). */
+export const MANAGEMENT_MIN_CADENCE_MINUTES_DEFAULT = 5;
+/** Default consecutive-failure count before notifying the owner (§10.4). */
+export const MANAGEMENT_FAILURE_NOTIFY_THRESHOLD_DEFAULT = 3;
+// ── String validators (§13.3) ─────────────────────────────────────────────
+const APP_FORBIDDEN_CHARS = /[\n\r|]/;
+/**
+ * Trim, NFC-normalize, and validate a user-typed `App` label. Rejects
+ * empty input, newlines, and pipe characters (would break the rendered
+ * Markdown table). Returns `null` on rejection so callers can format
+ * the error in their context. The Zod schemas use `validateLabel`
+ * directly to surface a specific failure reason in the issue message.
+ */
+export function validateAppLabel(value) {
+    const r = validateLabel(value, APP_MAX_LENGTH);
+    return r.ok ? r.value : null;
+}
+/**
+ * Lowercase + collapse-whitespace form used as the dedup key in
+ * `managed_tasks.app_normalized` (§9.2). Two visually-different inputs
+ * that map to the same normalized form are considered the same app
+ * for dedup purposes (§12 failure modes).
+ *
+ * Caller is expected to have run `validateAppLabel` first; this function
+ * is purely lexical and does not enforce length / forbidden-char caps.
+ */
+export function normalizeAppLabel(value) {
+    return value.normalize("NFC").trim().toLowerCase().replace(/\s+/g, " ");
+}
+/**
+ * Trim, NFC-normalize, and validate a user-typed `Intent` description.
+ * Same rules as `validateAppLabel` but with `INTENT_MAX_LENGTH` cap.
+ */
+export function validateIntent(value) {
+    const detailed = validateLabel(value, INTENT_MAX_LENGTH);
+    return detailed.ok ? detailed.value : null;
+}
+/** Internal — shared validator for app/intent/category labels. */
+function validateLabel(value, max) {
+    const cleaned = value.normalize("NFC").trim();
+    if (!cleaned)
+        return { ok: false, reason: { kind: "empty" } };
+    if (cleaned.length > max)
+        return { ok: false, reason: { kind: "too-long", max } };
+    if (APP_FORBIDDEN_CHARS.test(cleaned))
+        return { ok: false, reason: { kind: "forbidden-char" } };
+    return { ok: true, value: cleaned };
+}
+function labelErrorMessage(field, reason) {
+    switch (reason.kind) {
+        case "empty":
+            return `${field} must not be empty after trimming`;
+        case "too-long":
+            return `${field} must be ≤ ${reason.max} chars`;
+        case "forbidden-char":
+            return `${field} must not contain newline or pipe characters`;
+    }
+}
+/**
+ * Build a Zod schema fragment that accepts a raw string, applies
+ * `validateLabel(field, max)`, and emits a specific issue on failure.
+ * Used by every public input schema that takes a user-typed label so the
+ * trim/NFC/forbidden-char invariants are enforced at the API boundary
+ * (§13.3) — not just in the standalone helpers.
+ */
+function trimmedLabel(field, max) {
+    return z.string().transform((val, ctx) => {
+        const r = validateLabel(val, max);
+        if (!r.ok) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                message: labelErrorMessage(field, r.reason),
+            });
+            return z.NEVER;
+        }
+        return r.value;
+    });
+}
+// ── Slug validator (§9.3) ─────────────────────────────────────────────────
+const SLUG_RE = /^[a-z0-9][a-z0-9-]*$/;
+const SLUG_MAX_LENGTH = 100;
+/**
+ * Lowercase kebab-case slug. Must start with `[a-z0-9]`, may contain
+ * `-`. Used as the file-name segment of an entity path. Length-capped
+ * to keep filesystem paths well under typical `PATH_MAX` limits.
+ */
+export function isValidSlug(value) {
+    return (typeof value === "string" &&
+        value.length > 0 &&
+        value.length <= SLUG_MAX_LENGTH &&
+        SLUG_RE.test(value));
+}
+const PATH_TRAVERSAL_RE = /(^|\/)\.\.(\/|$)/;
+/**
+ * Validate an `Output path` value rendered in management.md's B-section
+ * (§9.1 render rules). The path:
+ *
+ *   - is relative (no leading `/`),
+ *   - has exactly two segments: `<domain>/<type-plural>/`,
+ *   - ends with a trailing `/`,
+ *   - contains no `..` traversal,
+ *   - has a `<domain>` in `DOMAINS` and `<type-plural>` in `TYPE_PLURALS`.
+ *
+ * The leading `context/` is implicit (every L2 path lives there). The
+ * SQL `CHECK (output_path IS NULL OR output_path LIKE '%/')` constraint
+ * (§9.2) is the DB-side enforcement; this function is the renderer/
+ * parser-side enforcement.
+ */
+export function isValidOutputPath(value) {
+    if (typeof value !== "string" || value.length === 0)
+        return false;
+    if (value.startsWith("/"))
+        return false;
+    if (PATH_TRAVERSAL_RE.test(value))
+        return false;
+    if (!value.endsWith("/"))
+        return false;
+    // Strip trailing slash and split — must have exactly two segments.
+    const segments = value.slice(0, -1).split("/");
+    if (segments.length !== 2)
+        return false;
+    const [domain, typePlural] = segments;
+    if (!domain || !typePlural)
+        return false;
+    if (!isDomain(domain))
+        return false;
+    if (pluralToType(typePlural) === null)
+        return false;
+    return true;
+}
+/**
+ * Parse an entity-file path of the form
+ * `<domain>/<type-plural>/<slug>.md` into its components. Returns
+ * `null` when the path is malformed or any segment fails its enum
+ * check. The leading `context/` MUST already be stripped — this is
+ * the relative form used in `entities.path`.
+ */
+export function parseEntityPath(path) {
+    if (typeof path !== "string" || path.length === 0)
+        return null;
+    if (path.startsWith("/"))
+        return null;
+    if (PATH_TRAVERSAL_RE.test(path))
+        return null;
+    if (!path.endsWith(".md"))
+        return null;
+    const segments = path.split("/");
+    if (segments.length !== 3)
+        return null;
+    const [domain, typePlural, fileName] = segments;
+    if (!domain || !typePlural || !fileName)
+        return null;
+    if (!isDomain(domain))
+        return null;
+    const type = pluralToType(typePlural);
+    if (type === null)
+        return null;
+    const slug = fileName.slice(0, -3); // strip ".md"
+    if (!isValidSlug(slug))
+        return null;
+    return { domain, type, typePlural, slug, path };
+}
+/**
+ * Build the canonical entity-file path from components. Inverse of
+ * `parseEntityPath`. Returns `null` when any input fails its enum/slug
+ * validator — the caller should never assume the components are
+ * already validated.
+ */
+export function buildEntityPath(domain, type, slug) {
+    if (!isDomain(domain))
+        return null;
+    if (!isEntityType(type))
+        return null;
+    if (!isValidSlug(slug))
+        return null;
+    return `${domain}/${typeToPlural(type)}/${slug}.md`;
+}
+// ── Managed-task ID (§9.2, §13.3) ─────────────────────────────────────────
+const MT_ID_RE = /^mt_[1-9]\d*$/;
+/**
+ * Validate a managed-task identifier. Format: `mt_<n>` where n is a
+ * positive decimal with no leading zeros. Allocated by
+ * `managed_task_seq` (§9.2); IDs are never reused so historical
+ * `agent_actions` references stay unambiguous.
+ */
+export function isValidManagedTaskId(value) {
+    return typeof value === "string" && MT_ID_RE.test(value);
+}
+/** Format a numeric sequence value as a managed-task id. */
+export function formatManagedTaskId(seq) {
+    if (!Number.isInteger(seq) || seq < 1) {
+        throw new RangeError(`managed-task sequence must be a positive integer, got ${seq}`);
+    }
+    return `mt_${seq}`;
+}
+// ── Zod schemas (§9.3, §9.5, §9.2) ────────────────────────────────────────
+/**
+ * Per-source frontmatter sub-record on an entity file. Each contributing
+ * app gets one entry under `frontmatter.sources.<key>`. The map key is
+ * the user-typed app label — the same string that appears in
+ * management.md's `App` column. This is the cross-link between L1 and
+ * L2 (§8.2 ADR — entity-per-file, not app-per-file).
+ *
+ * `passthrough` permits app-specific fields beyond the four named ones
+ * without forcing a schema bump per integration.
+ */
+export const entitySourceEntrySchema = z
+    .object({
+    /** App-internal id (free-form, e.g. Google Doc id). */
+    id: z.string().optional(),
+    /** Canonical URL into the source app for human follow-through. */
+    url: z.string().url().optional(),
+    /**
+     * Stable upstream identifier — the strongest signal for the §7.6
+     * lookup contract's tier-1 dedup match.
+     */
+    external_id: z.string().optional(),
+})
+    .passthrough();
+/**
+ * EntitySchema — frontmatter schema for L2 entity files (§9.3).
+ *
+ * Validated on every PATCH to `/api/context/<domain>/<type-plural>/
+ * <slug>.md` and by the entity-mirror watcher before a row is upserted
+ * into the `entities` SQLite table.
+ */
+export const entitySchema = z.object({
+    type: z.enum(ENTITY_TYPES),
+    domain: z.enum(DOMAINS),
+    slug: z.string().refine(isValidSlug, "invalid slug"),
+    title: z.string().min(1).max(200),
+    status: z.enum(["upcoming", "active", "done", "archived"]).optional(),
+    /**
+     * Map of app-label → per-app metadata. Keys are user-typed strings;
+     * Zod `record` enforces non-empty string keys at parse time.
+     */
+    sources: z.record(z.string().min(1), entitySourceEntrySchema).default({}),
+    /** Wikilinks / paths to related entities. */
+    related: z.array(z.string()).default([]),
+    /** Free-form classification labels. */
+    tags: z.array(z.string()).default([]),
+    /** ISO-8601 datetime — when the entity file was first created. */
+    created: z.string().datetime(),
+    /** ISO-8601 datetime — most recent successful sync from any source. */
+    last_synced_at: z.string().datetime().optional(),
+});
+/**
+ * SotBindingSchema — one row of management.md's Section A (§9.5).
+ *
+ * Persisted in `settings(key='sot_bindings', value_json=...)` as a JSON
+ * array; mirrors the §A render in management.md.
+ *
+ * **`category` vs `Domain` (resolves design-doc §9.1/§9.5 ambiguity).**
+ * §9.1's example A-section renders rows like `tasks → notion`,
+ * `meetings → google_calendar+zoom`, `notes → obsidian` — values that
+ * are **not** in the §9.4 `DOMAINS` enum (which lists life-areas:
+ * `work`, `travel`, `finance`, `personal`, `health`, `learning`).
+ *
+ * SoT bindings are coarse data-categories independent of life-area —
+ * the v2 template's "Category" column made this explicit, and OQ-3
+ * defers per-life-area SoT bindings to v4. So `category` is a
+ * free-form, validated string here, **not** a `Domain`. Rendering uses
+ * a "Category" column header.
+ */
+export const sotBindingSchema = z.object({
+    /**
+     * Free-form data-category label (e.g. `tasks`, `meetings`, `notes`,
+     * `projects`). Validated with the same trim/NFC/forbidden-char rules
+     * as `App`.
+     */
+    category: trimmedLabel("category", APP_MAX_LENGTH),
+    /** Free-form, user-typed canonical app label (e.g. "notion"). */
+    sotApp: trimmedLabel("sotApp", APP_MAX_LENGTH),
+    /**
+     * Optional path to a local mirror MD file (e.g. `context/work/tasks-
+     * index.md`). `null` when the SoT is external-only and no local
+     * mirror is maintained.
+     */
+    mirrorPath: z.string().min(1).max(255).nullable(),
+    /** Free-text policy note (≤200 chars). `null` when no policy applies. */
+    policy: z.string().max(200).nullable(),
+    /** Who is permitted to write the canonical store / its mirror. */
+    writer: z.enum(["agent", "shared", "user"]),
+});
+export const sotBindingsSchema = z.array(sotBindingSchema);
+/**
+ * ManagedTaskSchema — DB-row shape for `managed_tasks` (§9.2).
+ *
+ * Matches the table column order; consumed by API GET responses and
+ * by the management.md renderer. Strings here represent the **stored**
+ * (already-cleaned) form — per-input cleaning lives on
+ * `managedTaskCreateSchema` / `managedTaskPatchSchema` so a row read
+ * from the DB does not get re-trimmed every load.
+ */
+export const managedTaskSchema = z.object({
+    id: z.string().refine(isValidManagedTaskId, "must match /^mt_[1-9]\\d*$/"),
+    intent: z.string().min(1).max(INTENT_MAX_LENGTH),
+    app: z.string().min(1).max(APP_MAX_LENGTH),
+    app_normalized: z.string().min(1).max(APP_MAX_LENGTH),
+    cadence: z.string().min(1).max(200),
+    /**
+     * `output_path` is nullable only between row creation and the first
+     * successful run (FR-16). Validated against `isValidOutputPath` when
+     * non-null.
+     */
+    output_path: z
+        .string()
+        .nullable()
+        .refine((v) => v === null || isValidOutputPath(v), "output_path must be `<domain>/<type-plural>/` (see §9.1)"),
+    schedule_id: z.number().int().positive(),
+    /** ISO-8601 UTC; `null` until the first successful fire. */
+    last_run_at: z.string().datetime().nullable(),
+    last_result: z.string().max(LAST_RESULT_MAX_LENGTH).nullable(),
+    consecutive_failures: z.number().int().nonnegative(),
+    created_at: z.string(),
+    updated_at: z.string(),
+});
+/**
+ * Request body for `POST /api/managed-tasks` (§10.1 step 5).
+ *
+ * The structured `recurrenceRule` (frequency + time + tz + days) is
+ * threaded directly into the underlying `recurring_schedules` row
+ * (`db/recurring-schedules.ts` consumes this exact shape). The server
+ * allocates `mt_id` and `schedule_id` itself. `app` and `intent` are
+ * trimmed/NFC-normalized at this boundary so the downstream rendering
+ * and dedup paths see a clean value (§13.3).
+ *
+ * Note: the design doc (§10.1, §10.4) frames the cadence as `cron`+`tz`
+ * for prose readability, but the daemon's recurrence engine has never
+ * accepted raw cron — `RecurrenceRule` is the canonical shape. The
+ * registration skill resolves the user's natural-language phrasing
+ * (`"daily 10:00 (Asia/Tokyo)"`) into both:
+ *   - `cadence` (free text rendered in management.md), and
+ *   - `recurrenceRule` (the executable form).
+ */
+export const managedTaskCreateSchema = z.object({
+    intent: trimmedLabel("intent", INTENT_MAX_LENGTH),
+    app: trimmedLabel("app", APP_MAX_LENGTH),
+    /**
+     * Human-readable cadence (e.g. "daily 10:00 (Asia/Tokyo)"). Length
+     * cap is intentionally generous; the structured `recurrenceRule` is
+     * the executable form, this string is the rendered form.
+     */
+    cadence: z.string().min(1).max(200),
+    /** Structured recurrence — the same shape `recurring_schedules` uses. */
+    recurrenceRule: recurrenceRuleSchema,
+    /** Optional initial output path; first run populates it when omitted. */
+    output_path: z
+        .string()
+        .refine((v) => isValidOutputPath(v), "output_path must be `<domain>/<type-plural>/` (see §9.1)")
+        .optional(),
+});
+/**
+ * Request body for `PATCH /api/managed-tasks/:id` (§10.2).
+ *
+ * Any subset of mutable columns. The `id`, `app`, `app_normalized`,
+ * `schedule_id`, and timestamps are NOT mutable through this surface.
+ * `last_run_at` / `last_result` / `consecutive_failures` are written
+ * by the scheduled-managed-task skill, not by user-facing PATCHes.
+ *
+ * `app` is intentionally immutable — renaming an app would silently
+ * orphan all entity-file `frontmatter.sources.<key>` references. The
+ * separate `POST /api/managed-tasks/:id/rename-app` endpoint (§12)
+ * handles that atomically.
+ */
+export const managedTaskPatchSchema = z
+    .object({
+    intent: trimmedLabel("intent", INTENT_MAX_LENGTH).optional(),
+    cadence: z.string().min(1).max(200).optional(),
+    /**
+     * Structured recurrence (matches the create-schema shape). The
+     * route layer threads this through `updateRecurringSchedule` which
+     * regenerates the next `agent_schedule` row.
+     */
+    recurrenceRule: recurrenceRuleSchema.optional(),
+    output_path: z
+        .string()
+        .refine((v) => isValidOutputPath(v), "output_path must be `<domain>/<type-plural>/` (see §9.1)")
+        .nullable()
+        .optional(),
+})
+    .refine((data) => Object.keys(data).length > 0, "PATCH body must specify at least one field");
+/**
+ * Internal-update schema — used by the scheduled-managed-task skill
+ * via `PATCH /api/managed-tasks/:id/run-result` (§10.4 step 5).
+ * Separate from the user-facing PATCH because the surfaces and
+ * risk-tier classifications differ.
+ */
+export const managedTaskRunResultSchema = z.object({
+    /** ISO-8601 UTC. Validated strictly so a malformed write fails loudly. */
+    last_run_at: z.string().datetime(),
+    last_result: z.string().max(LAST_RESULT_MAX_LENGTH),
+    /**
+     * Replace-semantics. The server sets the value verbatim; the skill
+     * is responsible for bumping/resetting based on success or failure
+     * (§10.4).
+     */
+    consecutive_failures: z.number().int().nonnegative(),
+});
+//# sourceMappingURL=management-domains.js.map

package/dist/management-domains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"management-domains.js","sourceRoot":"","sources":["../src/management-domains.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD;;;;;;;;;;;;;;;;;;GAkBG;AAEH,6EAA6E;AAE7E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,MAAM;IACN,QAAQ;IACR,SAAS;IACT,UAAU;IACV,QAAQ;IACR,UAAU;CACF,CAAC;AAIX,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;AAEzD,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,6EAA6E;AAE7E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,SAAS;IACT,MAAM;IACN,SAAS;IACT,SAAS;IACT,MAAM;IACN,MAAM;CACE,CAAC;AAIX,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;AAEnE,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAyC;IAChE,OAAO,EAAE,UAAU;IACnB,IAAI,EAAE,OAAO;IACb,OAAO,EAAE,UAAU;IACnB,OAAO,EAAE,UAAU;IACnB,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;CACd,CAAC;AAEF,MAAM,cAAc,GAAoC,IAAI,GAAG,CAC7D,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAC9C,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC3C,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;AAC5C,CAAC;AAED,6EAA6E;AAE7E,0EAA0E;AAC1E,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAEjC,gEAAgE;AAChE,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC,+CAA+C;AAC/C,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,iEAAiE;AACjE,MAAM,CAAC,MAAM,mCAAmC,GAAG,GAAG,CAAC;AAEvD,kEAAkE;AAClE,MAAM,CAAC,MAAM,oCAAoC,GAAG,EAAE,CAAC;AAEvD,4DAA4D;AAC5D,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC;AAExD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,2CAA2C,GAAG,CAAC,CAAC;AAE7D,6EAA6E;AAE7E,MAAM,mBAAmB,GAAG,SAAS,CAAC;AAYtC;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IACzD,OAAO,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,kEAAkE;AAClE,SAAS,aAAa,CACpB,KAAa,EACb,GAAW;IAEX,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;IAC9D,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,CAAC;IAC1D,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;QACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC;IAC3D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,MAAkB;IAC1D,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,OAAO;YACV,OAAO,GAAG,KAAK,mCAAmC,CAAC;QACrD,KAAK,UAAU;YACb,OAAO,GAAG,KAAK,cAAc,MAAM,CAAC,GAAG,QAAQ,CAAC;QAClD,KAAK,gBAAgB;YACnB,OAAO,GAAG,KAAK,8CAA8C,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,KAAa,EAAE,GAAW;IAC9C,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,CAAC,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,OAAO,EAAE,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;aAC5C,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,CAAC,CAAC,KAAK,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAE7E,MAAM,OAAO,GAAG,sBAAsB,CAAC;AACvC,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,eAAe;QAC/B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CACpB,CAAC;AACJ,CAAC;AAmBD,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAE7C;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,mEAAmE;IACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC;IACtC,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACpD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC;IAChD,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc;IAClD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,IAAgB,EAChB,IAAY;IAEZ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,GAAG,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;AACtD,CAAC;AAED,6EAA6E;AAE7E,MAAM,QAAQ,GAAG,eAAe,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,UAAU,CAClB,yDAAyD,GAAG,EAAE,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,GAAG,EAAE,CAAC;AACrB,CAAC;AAED,6EAA6E;AAE7E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,uDAAuD;IACvD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,kEAAkE;IAClE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC;;;OAGG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,WAAW,EAAE,CAAC;AAIjB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrE;;;OAGG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzE,6CAA6C;IAC7C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,uCAAuC;IACvC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,kEAAkE;IAClE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,uEAAuE;IACvE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAIH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC;;;;OAIG;IACH,QAAQ,EAAE,YAAY,CAAC,UAAU,EAAE,cAAc,CAAC;IAClD,iEAAiE;IACjE,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE,cAAc,CAAC;IAC9C;;;;OAIG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACjD,yEAAyE;IACzE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtC,kEAAkE;IAClE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;CAC5C,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAG3D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE,6BAA6B,CAAC;IAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAChD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;IAC1C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC;;;;OAIG;IACH,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,iBAAiB,CAAC,CAAC,CAAC,EACzC,0DAA0D,CAC3D;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxC,4DAA4D;IAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;IAC9D,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AAIH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACjD,GAAG,EAAE,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC;IACxC;;;;OAIG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,yEAAyE;IACzE,cAAc,EAAE,oBAAoB;IACpC,yEAAyE;IACzE,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAC3B,0DAA0D,CAC3D;SACA,QAAQ,EAAE;CACd,CAAC,CAAC;AAIH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IAC5D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC9C;;;;OAIG;IACH,cAAc,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC/C,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAC3B,0DAA0D,CAC3D;SACA,QAAQ,EAAE;SACV,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EACtC,4CAA4C,CAC7C,CAAC;AAIJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,0EAA0E;IAC1E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACnD;;;;OAIG;IACH,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACrD,CAAC,CAAC"}

package/dist/process-key.d.ts

@@ -0,0 +1,67 @@
+import type { Event } from "./types.js";
+export declare const CONFIGURABLE_PROCESS_KEYS: readonly ["routine.morning_routine", "routine.evening_review", "routine.weekly_review", "routine.monthly_review", "routine.hourly_check", "message.dm", "message.mention", "dashboard.chat", "dashboard.docs_qa", "agent.task", "agent.dm_task", "calendar.change", "gmail_classify", "github.pull_request.review_requested", "github.assigned", "github.security_alert", "github.workflow_run.failed", "git.push.detected", "git.local_ahead.stale", "git.push.force_pushed", "git.branch.created", "git.tag.created", "git.merge_to_default", "git.project.init", "git.project.update", "git.project.refresh_architecture", "git.project.retemplate", "routine.skill_curation", "observation.summarize", "routine.hourly_check.triage"];
+declare const ALL_PROCESS_KEYS: readonly ["routine.morning_routine", "routine.evening_review", "routine.weekly_review", "routine.monthly_review", "routine.hourly_check", "message.dm", "message.mention", "dashboard.chat", "dashboard.docs_qa", "agent.task", "agent.dm_task", "calendar.change", "gmail_classify", "github.pull_request.review_requested", "github.assigned", "github.security_alert", "github.workflow_run.failed", "git.push.detected", "git.local_ahead.stale", "git.push.force_pushed", "git.branch.created", "git.tag.created", "git.merge_to_default", "git.project.init", "git.project.update", "git.project.refresh_architecture", "git.project.retemplate", "routine.skill_curation", "observation.summarize", "routine.hourly_check.triage", "git.lifecycle.poll", "routine.morning_routine_initial", "routine.roadmap_refresh", "routine.today_refresh", "routine.user_profile_sweep", "schedule.approaching", "integration_drift_sync", "setup", "knowledge.import", "delegated_task", "delegated_task_heavy"];
+type ConfigurableProcessKey = (typeof CONFIGURABLE_PROCESS_KEYS)[number];
+type KnownProcessKey = (typeof ALL_PROCESS_KEYS)[number];
+/**
+ * Process keys identify dispatch surfaces (DM, routine, observer event,
+ * scheduled task, custom routine, etc.). The union is widened to `string`
+ * because custom-routine keys (`routine.custom.<slug>`) are user-supplied
+ * at runtime — we cannot enumerate them at compile time. Trade-off: a
+ * literal typo like `"messasge.dm"` typechecks. Use `isProcessKey()` at
+ * boundaries that care (DB write, dispatcher routing) to assert the
+ * value belongs to the known set.
+ */
+export type ProcessKey = KnownProcessKey | string;
+/**
+ * See {@link BackendModelTier} in `backend.ts` for the tier semantics. The
+ * two are kept aligned by the test in `process-key.test.ts`.
+ */
+export type ProcessModelTier = "lite" | "medium" | "high";
+export declare function isProcessKey(value: string): value is KnownProcessKey;
+export declare function isConfigurableProcessKey(value: string): value is ConfigurableProcessKey;
+export declare function isCustomRoutineKey(value: string): boolean;
+export declare function customRoutineKey(slug: string): string;
+export declare function customRoutineSlugFromKey(key: string): string | null;
+export declare function isAutonomousProcessKey(processKey: ProcessKey): boolean;
+/**
+ * Hard tier locks that supersede operator pins, requestedTier hints, and
+ * `process_backend_config` rows. Use sparingly: a lock here means we are
+ * stating that the named process must run at the listed tier even if the
+ * operator explicitly pinned it to something else in `/settings/models`.
+ *
+ * `dashboard.docs_qa` is locked to `medium` because the QA panel is a
+ * doc-lookup surface, not a free-form chat — high tier would silently
+ * drain the Opus quota on every "what does X do?" question. See
+ * DOCS_QA_DESIGN.md §10.1.
+ */
+export declare const TIER_LOCKED_PROCESS_KEYS: Readonly<Partial<Record<ProcessKey, ProcessModelTier>>>;
+export declare function getDefaultTierForProcessKey(processKey: ProcessKey): ProcessModelTier;
+/**
+ * DELEGATED-TASK-MODE-DESIGN.md §17 — hard caps on the `/exec` and `/run`
+ * task-mode endpoints. These bound a prompt-injected caller's blast radius
+ * regardless of the per-request fields they pass. `config.ts` holds the
+ * *defaults* (`delegatedTaskDefaultMaxToolCalls` etc.); the constants below
+ * are not user-tunable — they live here alongside the ProcessKey
+ * definitions because they describe the contract of the `delegated_task` /
+ * `delegated_task_heavy` execution shape itself, not the operator's
+ * preferences.
+ */
+export declare const DELEGATED_TASK_HARD_CAPS: {
+    /** Upper bound on `maxToolCalls` request field. */
+    readonly maxToolCalls: 15;
+    /** Upper bound on `maxBudgetUsd` request field. */
+    readonly maxBudgetUsd: 0.5;
+    /** Upper bound on `timeoutMs` request field. */
+    readonly maxTimeoutMs: 300000;
+    /**
+     * Upper bound on the inlined `outputSchema` payload, measured as
+     * `Buffer.byteLength(JSON.stringify(schema), "utf-8")`. The schema
+     * lands in the subprocess system prompt and is paid as input tokens
+     * on every model turn; 4 KB ≈ 1000 tokens — empirical cap (§6.4).
+     */
+    readonly maxSchemaBytes: 4096;
+};
+export declare function resolveProcessKey(event: Event): ProcessKey;
+export {};
+//# sourceMappingURL=process-key.d.ts.map

package/dist/process-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-key.d.ts","sourceRoot":"","sources":["../src/process-key.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAgB,MAAM,YAAY,CAAC;AAGtD,eAAO,MAAM,yBAAyB,2sBAmE5B,CAAC;AAkCX,QAAA,MAAM,gBAAgB,+8BAGZ,CAAC;AAEX,KAAK,sBAAsB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AACzE,KAAK,eAAe,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AACzD;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG,MAAM,CAAC;AAClD;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;AA4H1D,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,eAAe,CAEpE;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,sBAAsB,CAEvF;AAWD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAKzD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGnE;AAqBD,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAEtE;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wBAAwB,EAAE,QAAQ,CAC7C,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAG9C,CAAC;AAEF,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,UAAU,GAAG,gBAAgB,CAWpF;AAMD;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB;IACnC,mDAAmD;;IAEnD,mDAAmD;;IAEnD,gDAAgD;;IAEhD;;;;;OAKG;;CAEK,CAAC;AAEX,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,KAAK,GAAG,UAAU,CA0C1D"}