@bike4mind/cli 0.20.0 → 0.20.1

package/dist/{ConfigStore-DD3DcC3-.mjs → ConfigStore-CNfbeaJf.mjs}

@@ -7,7 +7,7 @@ import path from "path";
 import { v4 } from "uuid";
 import * as z$2 from "zod";
 import z, { ZodError, z as z$1 } from "zod";
-import { hearthEventKindSchema, hearthEventRefsSchema, hearthMachineBodySchema } from "@bike4mind/hearth";
+import { actorKindSchema, hearthEventKindSchema, hearthEventRefsSchema, hearthMachineBodySchema } from "@bike4mind/hearth";
 import dayjs from "dayjs";
 import timezone from "dayjs/plugin/timezone.js";
 import utc from "dayjs/plugin/utc.js";
@@ -2108,6 +2108,37 @@ z$1.object({
 	createdAt: true,
 	updatedAt: true
 });
+z$1.object({
+	id: z$1.string().optional(),
+	/** UTC month, YYYY-MM. */
+	month: z$1.string().regex(/^\d{4}-\d{2}$/, "month must be YYYY-MM"),
+	/** Matches UsageEvent.provider values (e.g. "anthropic", "openai"). */
+	provider: z$1.string().min(1),
+	/** Provider-reported spend in USD for the month. */
+	providerUsd: z$1.number().finite().nonnegative(),
+	/** Our internal COGS estimate from UsageEvent aggregation. */
+	internalUsd: z$1.number().finite().nonnegative(),
+	/** providerUsd - internalUsd; positive = we underestimate. */
+	deltaUsd: z$1.number().finite(),
+	/** Absolute delta as a percentage of max(providerUsd, internalUsd) (0-100). */
+	deltaPct: z$1.number().finite().nonnegative(),
+	/** How the provider figure was obtained. */
+	source: z$1.enum([
+		"anthropic_admin_api",
+		"openai_usage_api",
+		"manual"
+	]),
+	/** Optional detail: per-key or per-model breakdown from the provider. */
+	providerBreakdown: z$1.record(z$1.string(), z$1.number()).optional(),
+	/** Human-readable note (error messages, partial data warnings, etc.). */
+	note: z$1.string().optional(),
+	createdAt: z$1.date(),
+	updatedAt: z$1.date()
+}).omit({
+	id: true,
+	createdAt: true,
+	updatedAt: true
+});
 z$1.object({
 	id: z$1.string().optional(),
 	ownerId: z$1.string(),
@@ -2184,6 +2215,36 @@ function isPlaceholderApiKey(value) {
 	if (!normalized) return true;
 	return PLACEHOLDER_API_KEY_REGEX.test(normalized);
 }
+z$1.object({
+	/**
+	* The granting lake's Mongo `_id`. ALWAYS a persisted DB lake: a hardcoded/fallback lake has no
+	* backing document to hang a grant on (its id is a human slug, never an ObjectId), so the write
+	* boundary refuses one via `assertLakeGrantable`. That is the explicit fallback carve-out issue
+	* #1667 calls for - enforced at the service layer, where the static registry is known, not here.
+	*/
+	dataLakeId: z$1.string(),
+	principalType: z$1.enum(["user", "organization"]),
+	/** The granted principal's id - a userId or an organizationId, per `principalType`. */
+	principalId: z$1.string(),
+	role: z$1.enum([
+		"owner",
+		"curator",
+		"reader"
+	]),
+	/** The actor (userId) who created the grant. */
+	grantedByUserId: z$1.string(),
+	/**
+	* Optional expiry for a time-boxed grant (trials, temporary internal collaborators,
+	* evaluations). A grant is expired once `expiresAt` is set and in the past. Expired rows are
+	* filtered at READ time by grant resolution (#1673) and are deliberately NOT swept from the
+	* collection, so an owner-facing membership view (#1672) and the audit trail (#1663) can still
+	* render a lapsed grant. Absent/null = never expires.
+	*
+	* Only meaningful for a principal INSIDE the lake's organization: membership never crosses
+	* organizations (epic decision 12), so this is not a cross-org mechanism.
+	*/
+	expiresAt: z$1.date().nullish()
+});
 /**
 * SRE Agent Trio - Shared Types
 *
@@ -3939,6 +4000,7 @@ const HearthEventAction = z$1.object({
 		seq: z$1.number(),
 		actorId: z$1.string(),
 		actorName: z$1.string().optional(),
+		actorKind: actorKindSchema.optional(),
 		kind: hearthEventKindSchema,
 		human: z$1.object({
 			text: z$1.string(),
@@ -4519,6 +4581,7 @@ z$1.discriminatedUnion("action", [
 z$1.object({
 	sessionId: z$1.string().nullish(),
 	message: z$1.string(),
+	organizationId: z$1.string().optional(),
 	model: z$1.string().optional(),
 	temperature: z$1.number().min(0).max(2).optional(),
 	max_tokens: z$1.number().positive().optional(),
@@ -5598,6 +5661,17 @@ z$2.object({
 	lastActiveAt: z$2.date().optional(),
 	isOnline: z$2.boolean()
 });
+/**
+* Model-INDEPENDENT sanity ceiling for a configured passage target, in tokens. A passage larger
+* than a full typical embedding context window (~8K) defeats retrieval granularity - one vector
+* would average a whole document (see DEFAULT_PASSAGE_TOKEN_TARGET). This bounds the scoped
+* `DefaultChunkSize` setting (#1662) where the specific embedding model is NOT known (the resolver
+* clamp is pure); the EXACT per-model embedding-window cap is enforced downstream by the chunker
+* (`effectiveChunkTokenLimit` in fab-pipeline), which knows the model and reduces further if needed.
+*/
+const MAX_PASSAGE_TOKEN_TARGET = 8192;
+/** Ceiling so "adjustable" cannot mean "unbounded" in either direction. */
+const LAKE_ACCESS_AUDIT_RETENTION_MAX_DAYS = 2555;
 let OpenAIEmbeddingModel = /* @__PURE__ */ function(OpenAIEmbeddingModel) {
 	OpenAIEmbeddingModel["TEXT_EMBEDDING_3_SMALL"] = "text-embedding-3-small";
 	OpenAIEmbeddingModel["TEXT_EMBEDDING_3_LARGE"] = "text-embedding-3-large";
@@ -5742,11 +5816,15 @@ const HELP_CENTER_PROMPT = `HELP CENTER: Bike4Mind has a built-in Help Center th
 *
 * Counterweight to the completeness pressure the rest of the system prompt applies: without an
 * explicit licence to abstain, the model treats "answer fully" as unconditional and fills gaps with
-* invented specifics about the user or their data. Measured as the single largest quality gain on
-* questions whose correct answer is a refusal, so it ships on every completion rather than only on
-* the grounded surfaces. Kept short on purpose - it must be cheap and behaviorally light.
+* invented specifics - including a named customer, competitor, deal or dollar figure a leading
+* question implied but no source supports, volunteered with citation-like framing so it reads as
+* sourced. In internal evaluation (a harness kept outside this repo) this was among the largest
+* quality gains on questions whose correct answer is a refusal, so it ships on every completion
+* rather than only on the grounded surfaces (it is also the only surface covering a turn that
+* answers WITHOUT searching the knowledge base). Kept short
+* on purpose - it must be cheap and behaviorally light.
 */
-const ABSTENTION_PROMPT = `When a request is underspecified or your sources do not cover it, say so and name what is missing. "I do not have enough to answer that" is a correct, high-value answer. Never invent facts about the user, their business, or their data.`;
+const ABSTENTION_PROMPT = `When a request is underspecified or your sources do not cover it, say so and name what is missing. "I do not have enough to answer that" is a correct, high-value answer. Never invent facts about the user, their business, or their data, and never state a specific customer, competitor, deal, or figure as fact - or cite a source for it - unless your sources support it, even when the question assumes it.`;
 /**
 * Default text for the formatting system message. Runtime fallback used by
 * `includeHardcodedSystemMessage` (b4m-core/utils/src/llm/utils.ts) when the `FormatPromptTemplate`
@@ -5800,8 +5878,10 @@ z$1.enum([
 	"EnableDataLakes",
 	"EnableDataLakesDefault",
 	"EnableDataLakeSlackAdd",
+	"EnableDataLakeGroundingMode",
 	"EnableLakeMemory",
 	"EnableDataLakeVectorSearch",
+	"PauseLakeConvergence",
 	"EnableBriefcase",
 	"EnableBriefcaseDefault",
 	"EnableImageTemplates",
@@ -5892,6 +5972,15 @@ z$1.enum([
 	"defaultEmbeddingModel",
 	"dataLakeSearchMaxFiles",
 	"dataLakeSearchMaxChunks",
+	"dataLakeEmbeddingSpendEnabled",
+	"dataLakeEmbeddingBudgetPerRunUsd",
+	"dataLakeEmbeddingBudgetPerLakeUsd",
+	"dataLakeEmbeddingBudgetPerPeriodUsd",
+	"dataLakeEmbeddingBudgetPeriodHours",
+	"dataLakeEmbeddingMaxCallsPerMinute",
+	"dataLakeVectorizeChunkBatchSize",
+	"LakeAccessAuditRetentionDays",
+	"LakeAccessQueryTextRetentionDays",
 	"MaxContentLength",
 	"enableAutoChunk",
 	"SlackDefaultWebhookUrl",
@@ -5960,7 +6049,11 @@ z$1.enum([
 	"modelDiscoveryAutoEnable",
 	"modelDiscoveryAllowEgress",
 	"modelDiscoveryPriceBandPct",
-	"modelDiscoveryAutoRemap"
+	"modelDiscoveryAutoRemap",
+	"prReportRepo",
+	"prReportIdentityMap",
+	"prReportSlackChannel",
+	"prReportEgressAllowlist"
 ]);
 /**
 * Intent-classifier sub-config. Drives the LLM-based silent
@@ -6077,6 +6170,9 @@ function makeStringSetting(config) {
 */
 const DATA_LAKE_SEARCH_MAX_FILES_DEFAULT = 5e3;
 const DATA_LAKE_SEARCH_MAX_CHUNKS_DEFAULT = 1e5;
+const DATA_LAKE_EMBEDDING_BUDGET_PER_LAKE_USD_MAX = 1e4;
+const DATA_LAKE_EMBEDDING_BUDGET_PER_PERIOD_USD_MAX = 5e3;
+const DATA_LAKE_EMBEDDING_MAX_CALLS_PER_MINUTE_MAX = 1e4;
 function makeNumberSetting(config) {
 	let numberSchema = z$1.coerce.number();
 	if (config.min !== void 0) numberSchema = numberSchema.min(config.min);
@@ -6668,6 +6764,42 @@ const API_SERVICE_GROUPS = {
 			}
 		]
 	},
+	DATA_LAKE_COST: {
+		id: "dataLakeCostGovernance",
+		name: "Data Lake Cost Governance",
+		description: "Spend levers for data-lake embedding work (ingestion, reprocessing, convergence). Budgets are USD; 0 means stop spending, not \"use the default\".",
+		icon: "Savings",
+		settings: [
+			{
+				key: "dataLakeEmbeddingSpendEnabled",
+				order: 1
+			},
+			{
+				key: "dataLakeEmbeddingBudgetPerRunUsd",
+				order: 2
+			},
+			{
+				key: "dataLakeEmbeddingBudgetPerLakeUsd",
+				order: 3
+			},
+			{
+				key: "dataLakeEmbeddingBudgetPerPeriodUsd",
+				order: 4
+			},
+			{
+				key: "dataLakeEmbeddingBudgetPeriodHours",
+				order: 5
+			},
+			{
+				key: "dataLakeEmbeddingMaxCallsPerMinute",
+				order: 6
+			},
+			{
+				key: "dataLakeVectorizeChunkBatchSize",
+				order: 7
+			}
+		]
+	},
 	VOICE_SESSION: {
 		id: "voiceSessionService",
 		name: "Voice Session Service",
@@ -7437,6 +7569,19 @@ const API_SERVICE_GROUPS = {
 				order: 3
 			}
 		]
+	},
+	DATA_LAKE_AUDIT: {
+		id: "dataLakeAuditService",
+		name: "Data Lake Access Audit",
+		description: "Retention for the lake access audit trail and its opt-in query-text log",
+		icon: "Security",
+		settings: [{
+			key: "LakeAccessAuditRetentionDays",
+			order: 1
+		}, {
+			key: "LakeAccessQueryTextRetentionDays",
+			order: 2
+		}]
 	}
 };
 const settingsMap = {
@@ -7548,6 +7693,16 @@ const settingsMap = {
 		order: 90,
 		dependsOn: "EnableDataLakes"
 	}),
+	EnableDataLakeGroundingMode: makeBooleanSetting({
+		key: "EnableDataLakeGroundingMode",
+		name: "Data Lakes: Per-lake grounding mode",
+		defaultValue: true,
+		description: "Global rollback lever for the per-lake grounding mode (inline vs retrieve vs auto-by-size). On by default. Turn OFF to ignore every lake's configured mode and fall back to pure size-only corpus deferral (CorpusRetrievalMinInlineTokensPerDoc), reverting the retrieve-by-default behavior for all lakes at once without editing each lake.",
+		category: "Experimental",
+		group: API_SERVICE_GROUPS.EXPERIMENTAL.id,
+		order: 92,
+		dependsOn: "EnableDataLakes"
+	}),
 	EnableLakeMemory: makeBooleanSetting({
 		key: "EnableLakeMemory",
 		name: "Data Lakes: Lake memory profile (extraction)",
@@ -7568,6 +7723,21 @@ const settingsMap = {
 		order: 92,
 		dependsOn: "EnableDataLakes"
 	}),
+	PauseLakeConvergence: makeBooleanSetting({
+		key: "PauseLakeConvergence",
+		name: "Data Lakes: Pause background convergence work",
+		defaultValue: false,
+		description: "Kill switch for background data-lake ingestion work (convergence sweeps, rescue re-chunking) - NOT real-time user uploads, which are always honored. Off by default. Turn ON to halt in-flight background chunk/vectorize messages the next time the handler picks them up (a re-check inside the shared handler, so it takes effect on work already queued, not just the next scheduling pass). The platform value pauses every lake at once; a per-lake (or per-org / per-owner) override pauses a subset while the rest keep running. A platform-level flip applies immediately to lake-wide work and within ~5 min to per-lake-scoped work (settings cache).",
+		category: "Experimental",
+		group: API_SERVICE_GROUPS.EXPERIMENTAL.id,
+		order: 93,
+		dependsOn: "EnableDataLakes",
+		scope: { settableAt: [
+			"organization",
+			"owner",
+			"lake"
+		] }
+	}),
 	EnableBriefcase: makeBooleanSetting({
 		key: "EnableBriefcase",
 		name: "Enable Briefcase",
@@ -7790,9 +7960,13 @@ const settingsMap = {
 		name: "Default Chunk Size",
 		defaultValue: 512,
 		min: 64,
-		description: "Passage target in TOKENS for splitting large documents. The DEFAULT matches the chunker; a value stored here overrides it, and a stored value larger than the chunker default makes the UI reprocess path produce coarser chunks than /api/files/reprocess. Coarser chunks measurably worsen retrieval.",
+		description: "Passage target in TOKENS for splitting large documents. The DEFAULT matches the chunker; a value stored here overrides it, and a stored value larger than the chunker default makes the UI reprocess path produce coarser chunks than /api/files/reprocess. Coarser chunks measurably worsen retrieval. Resolves at file-OWNER altitude: an org/individual owner may pin their own default above the platform value; a data lake does NOT override it (epic decision 7) - a lake declares the policy it REQUIRES and a file that cannot satisfy every lake it belongs to is reported as a conflict rather than silently re-chunked.",
 		category: "AI",
-		order: 3
+		order: 3,
+		scope: {
+			settableAt: ["organization", "owner"],
+			clamp: (value) => Math.min(Math.max(Math.floor(value), 64), MAX_PASSAGE_TOKEN_TARGET)
+		}
 	}),
 	ModerationEnabled: makeBooleanSetting({
 		key: "ModerationEnabled",
@@ -7836,7 +8010,7 @@ const settingsMap = {
 		key: "AbstentionPrompt",
 		name: "Abstention Prompt",
 		defaultValue: ABSTENTION_PROMPT,
-		description: "Short system prompt licensing the model to say \"I do not have enough to answer that\" and to name what is missing instead of inventing facts about the user or their data. Injected on every chat completion. Live-editable; clearing it reverts to the built-in default.",
+		description: "Short system prompt licensing the model to say \"I do not have enough to answer that\" and to name what is missing instead of inventing facts about the user or their data. Injected on every chat completion. Live-editable; clearing it reverts to the built-in default. After an upgrade, diff a saved copy against that default: a saved copy pins the wording from whenever it was saved and will not pick up fixes made since.",
 		category: "AI",
 		order: 11
 	}),
@@ -8673,7 +8847,12 @@ const settingsMap = {
 		description: "Most files one data-lake semantic search will scope. Beyond this the search reports itself as truncated rather than silently ignoring the rest. Raising it well past a few thousand also deepens the paging offset, so prefer reporting truncation over a very large value.",
 		category: "AI",
 		group: API_SERVICE_GROUPS.EMBEDDING.id,
-		order: 2
+		order: 2,
+		scope: { settableAt: [
+			"organization",
+			"owner",
+			"lake"
+		] }
 	}),
 	dataLakeSearchMaxChunks: makeNumberSetting({
 		key: "dataLakeSearchMaxChunks",
@@ -8683,8 +8862,110 @@ const settingsMap = {
 		description: "Most chunk vectors one data-lake semantic search will score. Raising it trades query latency for coverage; lowering it makes truncation more likely (and reported).",
 		category: "AI",
 		group: API_SERVICE_GROUPS.EMBEDDING.id,
+		order: 3,
+		scope: { settableAt: [
+			"organization",
+			"owner",
+			"lake"
+		] }
+	}),
+	LakeAccessAuditRetentionDays: makeNumberSetting({
+		key: "LakeAccessAuditRetentionDays",
+		name: "Lake Access Audit Retention (days)",
+		defaultValue: 450,
+		min: 450,
+		max: LAKE_ACCESS_AUDIT_RETENTION_MAX_DAYS,
+		description: "How long a lake access audit event (who read a lake, and when) is retained, in days. Has a floor of 450 days (12 months live plus a Type II observation tail) - this is a platform-wide value, not per-organization, until a scoped settings resolver exists.",
+		category: "SecOps",
+		group: API_SERVICE_GROUPS.DATA_LAKE_AUDIT.id,
+		order: 1
+	}),
+	LakeAccessQueryTextRetentionDays: makeNumberSetting({
+		key: "LakeAccessQueryTextRetentionDays",
+		name: "Lake Access Query Text Retention (days)",
+		defaultValue: 30,
+		min: 1,
+		max: 90,
+		description: "How long the opt-in query-text log (the natural-language question behind a lake retrieval) is retained, in days. Always resolved shorter than the audit event retention itself, regardless of this value, since the query text is more sensitive than the event metadata.",
+		category: "SecOps",
+		group: API_SERVICE_GROUPS.DATA_LAKE_AUDIT.id,
+		order: 2
+	}),
+	dataLakeEmbeddingSpendEnabled: makeBooleanSetting({
+		key: "dataLakeEmbeddingSpendEnabled",
+		name: "Data Lake Embedding Spend Enabled",
+		defaultValue: true,
+		description: "Master switch for data-lake embedding spend (ingestion, reprocessing, convergence). Off halts all provider embedding calls on those paths; cached embeddings still apply.",
+		category: "AI",
+		group: API_SERVICE_GROUPS.DATA_LAKE_COST.id,
+		order: 1
+	}),
+	dataLakeEmbeddingBudgetPerRunUsd: makeNumberSetting({
+		key: "dataLakeEmbeddingBudgetPerRunUsd",
+		name: "Embedding Budget Per Run (USD)",
+		defaultValue: 5,
+		min: 0,
+		max: 500,
+		description: "Most USD one ingestion/reprocess run (upload batch) may spend on embedding calls. 0 stops runs from spending at all.",
+		category: "AI",
+		group: API_SERVICE_GROUPS.DATA_LAKE_COST.id,
+		order: 2
+	}),
+	dataLakeEmbeddingBudgetPerLakeUsd: makeNumberSetting({
+		key: "dataLakeEmbeddingBudgetPerLakeUsd",
+		name: "Embedding Budget Per Lake (USD)",
+		defaultValue: 100,
+		min: 0,
+		max: DATA_LAKE_EMBEDDING_BUDGET_PER_LAKE_USD_MAX,
+		description: "Most USD one data lake may spend on embedding calls over its lifetime. 0 stops all spend for every lake.",
+		category: "AI",
+		group: API_SERVICE_GROUPS.DATA_LAKE_COST.id,
 		order: 3
 	}),
+	dataLakeEmbeddingBudgetPerPeriodUsd: makeNumberSetting({
+		key: "dataLakeEmbeddingBudgetPerPeriodUsd",
+		name: "Embedding Budget Per Period (USD)",
+		defaultValue: 50,
+		min: 0,
+		max: DATA_LAKE_EMBEDDING_BUDGET_PER_PERIOD_USD_MAX,
+		description: "Most USD the whole platform may spend on data-lake embedding calls per rolling period (see the period-hours setting). 0 stops all spend.",
+		category: "AI",
+		group: API_SERVICE_GROUPS.DATA_LAKE_COST.id,
+		order: 4
+	}),
+	dataLakeEmbeddingBudgetPeriodHours: makeNumberSetting({
+		key: "dataLakeEmbeddingBudgetPeriodHours",
+		name: "Embedding Budget Period (hours)",
+		defaultValue: 24,
+		min: 1,
+		max: 720,
+		description: "Length of the per-period budget window in hours. Not a spend value itself, so 0 is not meaningful here (min 1).",
+		category: "AI",
+		group: API_SERVICE_GROUPS.DATA_LAKE_COST.id,
+		order: 5
+	}),
+	dataLakeEmbeddingMaxCallsPerMinute: makeNumberSetting({
+		key: "dataLakeEmbeddingMaxCallsPerMinute",
+		name: "Embedding Max Calls Per Minute",
+		defaultValue: 120,
+		min: 0,
+		max: DATA_LAKE_EMBEDDING_MAX_CALLS_PER_MINUTE_MAX,
+		description: "Most provider embedding API calls per minute across all data-lake work. The real throttle in front of the embed call (the queue concurrency in infra is a deploy-time constant, not this lever). 0 stops all calls.",
+		category: "AI",
+		group: API_SERVICE_GROUPS.DATA_LAKE_COST.id,
+		order: 6
+	}),
+	dataLakeVectorizeChunkBatchSize: makeNumberSetting({
+		key: "dataLakeVectorizeChunkBatchSize",
+		name: "Vectorize Chunk Batch Size",
+		defaultValue: 50,
+		min: 1,
+		max: 500,
+		description: "How many chunks the chunk handler packs into one vectorize-queue message. Smaller batches smooth the fan-out; not a spend value, so min 1.",
+		category: "AI",
+		group: API_SERVICE_GROUPS.DATA_LAKE_COST.id,
+		order: 7
+	}),
 	slackSigningSecret: makeStringSetting({
 		key: "slackSigningSecret",
 		name: "Slack Signing Secret",
@@ -9393,6 +9674,39 @@ const settingsMap = {
 		category: "AI",
 		group: API_SERVICE_GROUPS.MODEL_DISCOVERY.id,
 		order: 6
+	}),
+	prReportRepo: makeStringSetting({
+		key: "prReportRepo",
+		name: "PR Report Repository",
+		defaultValue: "",
+		description: "The `owner/repo` whose open pull requests the PR status digest reports on. Validated against an anchored GitHub repo grammar before it is interpolated into any authenticated outbound URL (SSRF guard) - a value with an empty or `..` segment is rejected.",
+		category: "Admin",
+		order: 141
+	}),
+	prReportIdentityMap: makeStringSetting({
+		key: "prReportIdentityMap",
+		name: "PR Report Identity Map",
+		defaultValue: "",
+		description: "Maps GitHub logins and synthetic role keys (`qa_*`, `devops_*`, `reviewer_*`) to Slack member IDs, one mapping per line. Accepts `key value`, `key=value` or `key: value`; blank and `#` comment lines are ignored. Values must be real Slack member IDs - display names do not produce notification mentions.",
+		category: "Admin",
+		order: 142
+	}),
+	prReportSlackChannel: makeStringSetting({
+		key: "prReportSlackChannel",
+		name: "PR Report Slack Channel",
+		defaultValue: "",
+		description: "Slack channel ID the PR status digest posts to. The bot token itself is resolved from the credential store, never from admin settings.",
+		category: "Slack",
+		order: 143
+	}),
+	prReportEgressAllowlist: makeObjectSetting({
+		key: "prReportEgressAllowlist",
+		name: "PR Report Egress Allowlist",
+		defaultValue: { hosts: ["slack.com", "www.slack.com"] },
+		description: "Hosts the PR digest may post to. FAILS CLOSED: an empty list rejects every send rather than degrading to allow-any, because the post body carries PR titles, author logins and the staffing implied by the role rosters. Validated against the Slack API origin, so the default lists slack.com; self-hosted (non-Slack) origins are not yet supported.",
+		category: "Slack",
+		order: 144,
+		schema: z$1.object({ hosts: z$1.array(z$1.string()).default([]) })
 	})
 };
 /**
@@ -10594,6 +10908,24 @@ z$1.object({
 */
 const DATALAKE_TAG_PREFIX = "datalake:";
 /**
+* How a lake's attached corpus is grounded into a chat turn, as a DELIBERATE per-lake product
+* choice rather than a side effect of who is asking (see IDataLake.groundingMode):
+* - `inline`: paste the corpus into the prompt (never defer to the search tool).
+* - `retrieve`: leave the corpus to the offered search_knowledge_base tool (always defer the
+*   tool-retrievable subset), so an owner and an entitlement-only reader ground identically.
+* - `auto-by-size`: keep the size heuristic - defer only when the per-doc even-split inline depth
+*   falls below the `CorpusRetrievalMinInlineTokensPerDoc` floor (see shouldDeferCorpusToRetrieval).
+*
+* The resolution seam is create-time (resolveLakeSessionDefaults -> session.corpusGroundingMode);
+* the enforcement seam is the completion-path defer plan. Keep this tuple and DataLakeGroundingMode
+* as the single source both the Zod schema and the Mongoose enum derive from.
+*/
+const DATA_LAKE_GROUNDING_MODES = [
+	"inline",
+	"retrieve",
+	"auto-by-size"
+];
+/**
 * True when a would-be `fileTagPrefix` sits inside the `datalake:` namespace, which holds every
 * lake's membership meta-tag. Such a prefix would make one lake's content prefix match other
 * lakes' membership tags. Shared by the create schema and the wizard's client-side gate so the
@@ -10646,8 +10978,11 @@ z.object({
 	description: z.string().max(2e3).optional(),
 	systemPrompt: z.string().optional(),
 	preferredSystemPromptId: z.union([z.literal(""), z.string().min(1).max(200)]).optional(),
+	groundingMode: z.enum(DATA_LAKE_GROUNDING_MODES).optional(),
 	requiredUserTag: z.union([z.literal(""), z.string().min(1).max(100)]).optional(),
-	requiredEntitlement: z.union([z.literal(""), z.string().min(3).max(100).refine((s) => s.includes(":") && s.split(":").every((part) => part.length > 0), "Entitlement key must be namespaced with non-empty parts (e.g. \"product:pro\")")]).optional()
+	requiredEntitlement: z.union([z.literal(""), z.string().min(3).max(100).refine((s) => s.includes(":") && s.split(":").every((part) => part.length > 0), "Entitlement key must be namespaced with non-empty parts (e.g. \"product:pro\")")]).optional(),
+	auditQueryTextEnabled: z.boolean().optional(),
+	requiredPassageTokenTarget: z.number().int().min(64).max(MAX_PASSAGE_TOKEN_TARGET).nullable().optional()
 });
 z.object({
 	organizationId: z.string().optional(),

package/dist/{buildAgent-mVuXU_H4.mjs → buildAgent-DwPvcTpz.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { F as loadContextFiles, J as setWebSocketToolExecutor, L as generateCliTools, M as ReActAgent, X as buildSystemPrompt, Y as getPlanModeFilePath, a as McpManager, i as AgentStore, l as OllamaBackend, n as BackgroundAgentManager, o as createSseBackend, r as SubagentOrchestrator, s as ServerLlmBackend, t as AgentHistoryStore } from "./AgentHistoryStore-C8uUKjjC.mjs";
-import { n as logger } from "./ConfigStore-DD3DcC3-.mjs";
+import { F as loadContextFiles, J as setWebSocketToolExecutor, L as generateCliTools, M as ReActAgent, X as buildSystemPrompt, Y as getPlanModeFilePath, a as McpManager, i as AgentStore, l as OllamaBackend, n as BackgroundAgentManager, o as createSseBackend, r as SubagentOrchestrator, s as ServerLlmBackend, t as AgentHistoryStore } from "./AgentHistoryStore-BQiATPsQ.mjs";
+import { n as logger } from "./ConfigStore-CNfbeaJf.mjs";
 import { z as z$1 } from "zod";
 import WebSocket from "ws";
 //#region src/llm/NotifyingLlmBackend.ts

package/dist/commands/acpCommand.mjs

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { $ as RemoteSkillSource, A as FallbackLlmBackend, C as createWriteTodosTool, D as createResumeAgentTool, E as createCoordinateTaskTool, I as PermissionManager, J as setWebSocketToolExecutor, O as createBackgroundAgentTools, Q as isReadOnlyTool, S as createTodoStore, et as CustomCommandStore, k as createAgentDelegateTool, nt as SessionStore, tt as CheckpointStore, w as createSkillTool, x as createFindDefinitionTool, y as createGetFileStructureTool } from "../AgentHistoryStore-C8uUKjjC.mjs";
-import { c as requireApiUrl, n as logger, t as ConfigStore } from "../ConfigStore-DD3DcC3-.mjs";
-import { t as ApiClient } from "../ApiClient-B_CQrUiF.mjs";
-import { a as createToolSearchTool, i as buildLlmBackend, n as buildSupportingStores, o as deferredToolRegistry, r as buildSandbox, s as NotifyingLlmBackend, t as buildAgent } from "../buildAgent-mVuXU_H4.mjs";
+import { $ as RemoteSkillSource, A as FallbackLlmBackend, C as createWriteTodosTool, D as createResumeAgentTool, E as createCoordinateTaskTool, I as PermissionManager, J as setWebSocketToolExecutor, O as createBackgroundAgentTools, Q as isReadOnlyTool, S as createTodoStore, et as CustomCommandStore, k as createAgentDelegateTool, nt as SessionStore, tt as CheckpointStore, w as createSkillTool, x as createFindDefinitionTool, y as createGetFileStructureTool } from "../AgentHistoryStore-BQiATPsQ.mjs";
+import { c as requireApiUrl, n as logger, t as ConfigStore } from "../ConfigStore-CNfbeaJf.mjs";
+import { t as ApiClient } from "../ApiClient-BPmlalut.mjs";
+import { a as createToolSearchTool, i as buildLlmBackend, n as buildSupportingStores, o as deferredToolRegistry, r as buildSandbox, s as NotifyingLlmBackend, t as buildAgent } from "../buildAgent-DwPvcTpz.mjs";
 import { randomUUID } from "crypto";
 import { existsSync, realpathSync, statSync } from "fs";
 import { isAbsolute } from "path";

package/dist/commands/apiCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { l as resolveApiEndpoint, s as parseApiUrl, t as ConfigStore } from "../ConfigStore-DD3DcC3-.mjs";
+import { l as resolveApiEndpoint, s as parseApiUrl, t as ConfigStore } from "../ConfigStore-CNfbeaJf.mjs";
 //#region src/commands/apiCommand.ts
 /**
 * External API config command (--api-url / --reset-api)

package/dist/commands/doctorCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "../package-BqKSCbso.mjs";
+import { t as version } from "../package-CxHSRXdp.mjs";
 import { a as fetchLatestVersion, c as isNpmPrefixWritable, i as compareSemver } from "../updateChecker-CQW8bxo6.mjs";
 import { t as checkRipgrep } from "../ripgrepCheck-BmkyTK2i.mjs";
 import { execSync } from "child_process";

package/dist/commands/envCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-DD3DcC3-.mjs";
+import { t as ConfigStore } from "../ConfigStore-CNfbeaJf.mjs";
 //#region src/commands/envCommand.ts
 /**
 * Environment switching for the `--dev` / `--prod` launch flags.

package/dist/commands/headlessCommand.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { $ as RemoteSkillSource, A as FallbackLlmBackend, B as classifyCommandRisk, C as createWriteTodosTool, D as createResumeAgentTool, E as createCoordinateTaskTool, F as loadContextFiles, I as PermissionManager, J as setWebSocketToolExecutor, L as generateCliTools, M as ReActAgent, O as createBackgroundAgentTools, Q as isReadOnlyTool, S as createTodoStore, X as buildSystemPrompt, a as McpManager, b as createWorkItemTools, et as CustomCommandStore, i as AgentStore, k as createAgentDelegateTool, n as BackgroundAgentManager, nt as SessionStore, o as createSseBackend, r as SubagentOrchestrator, t as AgentHistoryStore, tt as CheckpointStore, w as createSkillTool, x as createFindDefinitionTool, y as createGetFileStructureTool, z as SHELL_LIKE_TOOL_COMMAND_FIELDS } from "../AgentHistoryStore-C8uUKjjC.mjs";
-import { c as requireApiUrl, n as logger, t as ConfigStore } from "../ConfigStore-DD3DcC3-.mjs";
-import { t as ApiClient } from "../ApiClient-B_CQrUiF.mjs";
+import { $ as RemoteSkillSource, A as FallbackLlmBackend, B as classifyCommandRisk, C as createWriteTodosTool, D as createResumeAgentTool, E as createCoordinateTaskTool, F as loadContextFiles, I as PermissionManager, J as setWebSocketToolExecutor, L as generateCliTools, M as ReActAgent, O as createBackgroundAgentTools, Q as isReadOnlyTool, S as createTodoStore, X as buildSystemPrompt, a as McpManager, b as createWorkItemTools, et as CustomCommandStore, i as AgentStore, k as createAgentDelegateTool, n as BackgroundAgentManager, nt as SessionStore, o as createSseBackend, r as SubagentOrchestrator, t as AgentHistoryStore, tt as CheckpointStore, w as createSkillTool, x as createFindDefinitionTool, y as createGetFileStructureTool, z as SHELL_LIKE_TOOL_COMMAND_FIELDS } from "../AgentHistoryStore-BQiATPsQ.mjs";
+import { c as requireApiUrl, n as logger, t as ConfigStore } from "../ConfigStore-CNfbeaJf.mjs";
+import { t as ApiClient } from "../ApiClient-BPmlalut.mjs";
 import { t as DEFAULT_SANDBOX_CONFIG } from "../types-LyRNHOiS.mjs";
 import { r as reconstructTurnBlocks, t as WorkItemsClient } from "../WorkItemsClient-Cow6nXx7.mjs";
 import { t as createSandboxRuntime } from "../SandboxRuntimeAdapter-ChGlxSGQ.mjs";

package/dist/commands/mcpCommand.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { t as ConfigStore } from "../ConfigStore-DD3DcC3-.mjs";
-import { t as version } from "../package-BqKSCbso.mjs";
+import { t as ConfigStore } from "../ConfigStore-CNfbeaJf.mjs";
+import { t as version } from "../package-CxHSRXdp.mjs";
 //#region src/commands/mcpCommand.ts
 /**
 * External MCP commands (b4m mcp list, b4m mcp add, etc.)
@@ -70,7 +70,7 @@ async function handleMcpCommand(subcommand, argv) {
 			await handleDisable(config, argv.name, configStore);
 			break;
 		case "serve": {
-			const { handleMcpServeCommand } = await import("../serve-CuF0I5en.mjs");
+			const { handleMcpServeCommand } = await import("../serve-Du3HiqAH.mjs");
 			await handleMcpServeCommand({
 				http: Boolean(argv.http),
 				port: typeof argv.port === "number" ? argv.port : void 0,

package/dist/commands/pluginCommand.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { n as getDefaultPluginsDir, r as isFeatureEnabled, t as PluginStore } from "../PluginStore-DwvOJ-G3.mjs";
-import { t as ConfigStore } from "../ConfigStore-DD3DcC3-.mjs";
+import { t as ConfigStore } from "../ConfigStore-CNfbeaJf.mjs";
 import { execFileSync } from "child_process";
 import { promises } from "fs";
 import path from "path";

package/dist/commands/updateCommand.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as version } from "../package-BqKSCbso.mjs";
+import { t as version } from "../package-CxHSRXdp.mjs";
 import { c as isNpmPrefixWritable, l as setAutoUpdatePreference, n as REEXEC_GUARD_ENV, o as forceCheckForUpdate, r as checkForUpdate, s as getAutoUpdatePreference, t as INSTALL_CMD, u as shouldAttemptAutoUpdate } from "../updateChecker-CQW8bxo6.mjs";
 import { t as checkRipgrep } from "../ripgrepCheck-BmkyTK2i.mjs";
 import { execSync, spawnSync } from "child_process";