@corca-org/ceal-host-linux-arm64 1.0.14 → 1.0.16

package/libexec/ceal-host/claude-invocation-authentication.mjs

@@ -54,7 +54,6 @@ var client_wire_contract_default = {
       length: 72,
       pattern: "^catalog:[a-f0-9]{64}$"
     },
-    max_bytes: 4194304,
     envelope_max_bytes: 389
   },
   command_request: {
@@ -135,14 +134,13 @@ var client_wire_contract_default = {
       "prompt"
     ],
     discovery_command: "discovery",
-    discovery_manifest_schema_version: "ceal.discovery_manifest.v2",
+    discovery_manifest_schema_version: "ceal.discovery_manifest.v1",
     discovery_manifest_document_fields: [
       "discovery_manifest"
     ],
     exit_code_max: 125,
     bare_document_max_bytes: 65536,
-    complete_max_bytes: 66019,
-    absolute_transport_max_bytes: 4194304
+    complete_max_bytes: 66019
   },
   resource_stream: {
     path: "/api/ceal/v2/resources",
@@ -157,6 +155,9 @@ var client_wire_contract_default = {
       "fetch"
     ],
     ref_flag: "--ref"
+  },
+  encoded_json_document: {
+    max_bytes: 4194304
   }
 };
 
@@ -166,6 +167,7 @@ var commandResolution = CEAL_CLIENT_WIRE_CONTRACT.command_resolution;
 var commandResolutionAuthority = commandResolution.authority;
 var commandResolutionSemanticOptions = commandResolution.semantic_options;
 var CEAL_GATEWAY_COMMAND_RESOLUTION_SCHEMA_VERSION = commandResolution.schema_version;
+var CEAL_ENCODED_JSON_DOCUMENT_MAX_BYTES = CEAL_CLIENT_WIRE_CONTRACT.encoded_json_document.max_bytes;
 var artifact = CEAL_CLIENT_WIRE_CONTRACT.artifact_descriptor;
 var request = CEAL_CLIENT_WIRE_CONTRACT.command_request;
 var response = CEAL_CLIENT_WIRE_CONTRACT.command_response;
@@ -179,7 +181,7 @@ var CEAL_VERIFIED_ARTIFACT_DIGEST_LENGTH = artifact.digest.length;
 var CEAL_VERIFIED_ARTIFACT_DIGEST_PATTERN = artifact.digest.pattern;
 var CEAL_VERIFIED_ARTIFACT_CATALOG_REVISION_LENGTH = artifact.catalog_revision.length;
 var CEAL_VERIFIED_ARTIFACT_CATALOG_REVISION_PATTERN = artifact.catalog_revision.pattern;
-var CEAL_VERIFIED_ARTIFACT_MAX_BYTES = artifact.max_bytes;
+var CEAL_VERIFIED_ARTIFACT_MAX_BYTES = CEAL_ENCODED_JSON_DOCUMENT_MAX_BYTES;
 var CEAL_VERIFIED_ARTIFACT_DESCRIPTOR_MAX_BYTES = artifact.envelope_max_bytes;
 var CEAL_COMMAND_REQUEST_SCHEMA_VERSION = request.schema_version;
 var CEAL_COMMAND_REQUEST_MAX_BYTES = request.absolute_transport_max_bytes;
@@ -193,7 +195,6 @@ var CEAL_COMMAND_RESPONSE_FOCUSED_PROMPT_CONTINUATION_DOCUMENT_FIELDS = Object.f
 var CEAL_COMMAND_RESPONSE_DISCOVERY_COMMAND = response.discovery_command;
 var CEAL_COMMAND_RESPONSE_DISCOVERY_MANIFEST_SCHEMA_VERSION = response.discovery_manifest_schema_version;
 var CEAL_COMMAND_RESPONSE_DISCOVERY_MANIFEST_DOCUMENT_FIELDS = Object.freeze([...response.discovery_manifest_document_fields]);
-var CEAL_COMMAND_RESPONSE_MAX_BYTES = response.absolute_transport_max_bytes;
 
 // packages/ceal-client-protocol/src/vocabulary.ts
 function vocabulary(words) {
@@ -210,6 +211,7 @@ var CEAL_AUDIT_OUTCOMES = vocabulary(["succeeded", "denied", "failed"]);
 var CEAL_GATEWAY_PROVIDER_STEP_OUTCOMES = vocabulary(["completed", "rejected", "throttled", "failed"]);
 var CEAL_GATEWAY_READ_REUSE_DISPOSITIONS = vocabulary(["response_cache_hit", "corpus_hit", "corpus_hit_after_revalidation", "corpus_partial_provider_supplement", "provider_direct", "provider_continuation", "reuse_unavailable"]);
 var CEAL_GATEWAY_READ_REUSE_UNAVAILABLE_REASONS = vocabulary(["not_reported", "storage_unavailable", "coverage_incomplete", "freshness_refresh_required", "not_reusable", "bypassed"]);
+var CEAL_GATEWAY_DERIVED_STORE_FAILURE_CLASSES = vocabulary(["storage_unavailable", "decode_mismatch", "write_conflict", "quota", "store_error"]);
 var CEAL_POLICY_DECISIONS = vocabulary(["allowed", "denied", "not_evaluated"]);
 var CEAL_CONNECTOR_ROUTE_PHASES = vocabulary(["scope_observation", "target_selection", "route_resolution"]);
 var CEAL_CONNECTOR_ROUTE_CAUSES = vocabulary(["provider_throttled", "provider_unavailable", "binding_invalid", "scope_limit_exceeded"]);
@@ -223,6 +225,17 @@ var CEAL_WRITE_RECEIPT_PROVIDER_STATES = vocabulary(["outcome_unknown", "verifie
 var CEAL_WRITE_RECEIPT_PROVIDER_READBACKS = vocabulary(["outcome_unknown", "verified", "not_applied"]);
 var CEAL_PROTOCOL_VERSION = "1.4.0";
 var CEAL_OPERATION_ACCESS_SCHEMA_VERSION = "ceal.operation_access.v1";
+var CEAL_GATEWAY_ACTIVE_CALL_PHASES = vocabulary([
+  "audited_call_pending",
+  "continuation_read_pending",
+  "continuation_write_pending",
+  "provider_pacing_pending",
+  "corpus_replay_pending",
+  "corpus_append_pending",
+  "corpus_fence_pending",
+  "corpus_content_pending",
+  "corpus_transaction_pending"
+]);
 var CEAL_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["connector_kind", "phase", "schema_version"]);
 var CEAL_CLASSIFIED_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["cause", ...CEAL_CONNECTOR_ROUTE_FAILURE_KEYS]);
 var CEAL_UNCLASSIFIED_CONNECTOR_ROUTE_FAILURE_KEYS = vocabulary(["connector_kind", "error_class", "phase", "schema_version"]);
@@ -232,10 +245,129 @@ var CEAL_GATEWAY_ORGANIZATION_ROUTE_FACT_CALL_KEYS = Object.freeze([
   "policy_decision_revision"
 ]);
 
+// packages/ceal-client-protocol/src/operation-next-actions.ts
+var CEAL_REPEAT_REQUEST_NEXT_ACTION = "repeat_request";
+var CEAL_INSPECT_RECEIPT_NEXT_ACTION = "inspect_receipt";
+var CALLER_RECOVERABLE_NEXT_ACTION_VALUES = [
+  "select_did_you_mean",
+  "choose_new_output_path",
+  "choose_new_idempotency_key",
+  "restart_search",
+  "repeat_original_arguments",
+  // The occurrence this call addressed is settled and cannot move again -- a
+  // denied effect approval, an expired continuation -- so the caller runs the
+  // same call again as a new request. The refusal names the re-request; this
+  // word is the re-request.
+  CEAL_REPEAT_REQUEST_NEXT_ACTION,
+  "choose_new_request_identity",
+  // A refusal that names the argument (invalid_argument with `property`) tells the caller exactly what to change.
+  "correct_argument",
+  // A resolver-owned input must move from caller operands into the declared
+  // resolver selection field.
+  "supply_resolver_selections",
+  // The graph names an upstream node whose Operation produces the resolver's
+  // occurrence, and it has not produced one yet. The caller runs that node
+  // first; the refusal used to share a code with a malformed resolver result,
+  // which is not fixable, so neither could carry a remedy.
+  "run_resolver_dependency",
+  // A replay carries the input the occurrence durably admitted, and this one
+  // carries a different one. The caller fixes it by presenting the original
+  // invocation, so it is a remedy; the coordinator minted the word at the
+  // replay guard and never declared it, which read as unguided to the scorer.
+  "use_original_input",
+  // The same mismatch on the Request binding rather than the input: the
+  // occurrence was admitted under one binding and the replay presents another.
+  "use_original_request_binding",
+  // The client's own filesystem write was refused -- EACCES, EPERM, or a
+  // read-only mount -- which is how an agent sandbox fences writes outside its
+  // workspace. The caller reruns the same command with unsandboxed or escalated
+  // execution; re-adopting the session cannot help, because the sandbox refuses
+  // that write too.
+  "rerun_outside_agent_sandbox",
+  // The refusal names the one Operation to read next in `describe_command`:
+  // an absent Operation id with a sole catalog-ranked candidate, or a known
+  // Operation invoked without its input. Describing only reads the verified
+  // contract and dispatches nothing, and the caller then retries with the
+  // named Operation or input, so it is guidance the scorer counts.
+  "describe_operation",
+  // The refusal names the caller's own personal connect Operation in
+  // `required_action_sequence`: the Operation asked for, or the credential
+  // the call ran on, needs a personal connection the caller does not hold
+  // (never connected, revoked, or expired). The caller runs that exact
+  // Operation, completes the consent it hands back, and retries the same call.
+  "connect_personal_account",
+  // The provider or Gateway named a bounded wait; the caller waits that long
+  // and submits the same read again.
+  "retry_after",
+  // The ref names a container of rows (a Notion database or data source), which
+  // has no body of its own; the caller searches its rows instead of reading it.
+  "search_container_rows"
+];
+var CEAL_CALLER_RECOVERABLE_NEXT_ACTIONS = Object.freeze(CALLER_RECOVERABLE_NEXT_ACTION_VALUES);
+var NON_REMEDY_NEXT_ACTION_VALUES = [
+  // Only an administrator can take the named step -- approving a place for an
+  // Operation, granting a withheld capability -- so a non-administrator asks
+  // one. The refusal names the administrator step; this word is the ask.
+  "ask_admin",
+  "await_pending_approval",
+  "check_gateway",
+  "inspect_context_store",
+  "inspect_gateway",
+  "inspect_local_cache",
+  // The thin client prints these on its own behalf, before or after the wire.
+  // They were declared only as `CealClientLocalRemedy` keys and, for two of
+  // them, only as Go string literals -- a second and third vocabulary for one
+  // thing. `CealClientLocalRemedy` derives from this list now, so the client's
+  // remedies cannot drift from the words the protocol knows.
+  "inspect_local_client",
+  "inspect_local_command",
+  "inspect_local_output",
+  "inspect_local_route",
+  CEAL_INSPECT_RECEIPT_NEXT_ACTION,
+  "inspect_request",
+  "none",
+  // The provider refused because of its own configuration -- an API not
+  // enabled, an app scope missing -- which an operator changes in that
+  // provider's console. No caller edit and no retry fixes it.
+  "operator_action",
+  "recover",
+  "reconcile",
+  // Reconciliation of one named occurrence, not of the deployment: an
+  // occurrence with no admitted input commitment cannot be replayed safely and
+  // no edit to the call changes that. `reconcile` is the deployment-wide word.
+  "reconcile_occurrence",
+  "reduce_request_size",
+  // The Host's invocation context for this turn is stale or expired at the
+  // Gateway. The Host's next turn rebinds it and the same call then succeeds;
+  // nothing in the call changes, so it is not a remedy the scorer may count.
+  "refresh_host_invocation_context",
+  "repair_or_adopt_session",
+  "retry",
+  // The owner -- a correlation hook, an approval hook -- is not serving right
+  // now. The caller changes nothing and the same call succeeds once the owner
+  // is back, so this is not a remedy the scorer may count as guidance.
+  "retry_after_owner_recovery",
+  "retry_same_receipt_read",
+  "run_file_search_again",
+  "select_exact_approval"
+];
+var CEAL_NON_REMEDY_NEXT_ACTIONS = Object.freeze(NON_REMEDY_NEXT_ACTION_VALUES);
+var DECLARED = /* @__PURE__ */ new Set([...CEAL_CALLER_RECOVERABLE_NEXT_ACTIONS, ...CEAL_NON_REMEDY_NEXT_ACTIONS]);
+var RETRY_PROMISE_NEXT_ACTIONS = ["retry", "retry_after"];
+var RETRY_PROMISE = new Set(RETRY_PROMISE_NEXT_ACTIONS);
+var RECOVERABLE = new Set(CEAL_CALLER_RECOVERABLE_NEXT_ACTIONS);
+var CEAL_OPERATION_WITHHELD_NEXT_ACTIONS = Object.freeze({
+  provider_permission: "ask_admin",
+  access_level: "ask_admin",
+  personal_authorization_required: "connect_personal_account"
+});
+
+// packages/ceal-client-protocol/src/operation-withheld-cause.ts
+var CEAL_OPERATION_WITHHELD_CAUSES = vocabulary(["provider_permission", "access_level", "personal_authorization_required"]);
+
 // packages/ceal-client-protocol/src/operation-contract-types.ts
 var CEAL_JSON_SCHEMA_2020_12 = "https://json-schema.org/draft/2020-12/schema";
 var CEAL_OPERATION_ERROR_SCHEMA_VERSION = "ceal.operation_error.v1";
-var CEAL_OPERATION_WITHHELD_CAUSES = vocabulary(["provider_permission", "access_level", "personal_authorization_required"]);
 var CEAL_RETRY_AFTER_MAX_MS = 60 * 60 * 1e3;
 var CEAL_JSON_SCHEMA_TYPES = vocabulary(["object", "array", "string", "integer", "number", "boolean", "null"]);
 var OBSERVATION_POSTURES = vocabulary(["direct_readback", "approved_no_readback", "operator_mediated", "excluded"]);
@@ -487,7 +619,6 @@ function cut(text) {
 var CEAL_OPERATION_ACCESS_CLASSES = vocabulary(["read", "write"]);
 
 // packages/ceal-client-protocol/src/domain-vocabulary.ts
-var CEAL_INTEGRATION_KINDS = vocabulary(["github", "google-workspace", "notion", "slack"]);
 var CEAL_CONNECTOR_STATUSES = vocabulary(["active", "disabled", "disconnected"]);
 var CEAL_CONNECTOR_CUSTODIES = vocabulary(["organization", "personal"]);
 var CEAL_PROVIDER_BOUNDARY_KINDS = vocabulary([
@@ -500,6 +631,8 @@ var CEAL_PROVIDER_BOUNDARY_KINDS = vocabulary([
 var CEAL_PROVIDER_BOUNDARY_EVIDENCE = vocabulary(["provider_readback", "operator_stated"]);
 var CEAL_ACCESS_LEVELS = vocabulary(["none", "read", "read_write"]);
 var CEAL_PERSONAL_ACCESS_CEILINGS = vocabulary(["disabled", "read", "read_write"]);
+var CEAL_TARGET_REF_PATTERN = "^[^\\p{Cc}]+$";
+var TARGET_REF = new RegExp(CEAL_TARGET_REF_PATTERN, "u");
 var CEAL_TARGET_VISIBILITIES = vocabulary(["public", "private"]);
 var CEAL_PRINCIPAL_KINDS = vocabulary(["human", "service", "runtime"]);
 var CEAL_ORGANIZATION_ROLES = vocabulary(["member", "admin"]);
@@ -610,6 +743,7 @@ var CEAL_OPERATION_DESCRIPTOR_REQUIRED_ENVELOPE_KEYS = Object.freeze(["schema_ve
 var CEAL_OPERATION_DESCRIPTOR_OPTIONAL_ENVELOPE_KEYS = Object.freeze(["input_resolution", "summary"]);
 var CEAL_OPERATION_RESULT_KEYS = vocabulary(["ok", "operation_id", "operation_receipt", "schema_version", "value"]);
 var CEAL_OPERATION_COMPACT_RESULT_KEYS = vocabulary(["ok", "operation_evidence", "operation_id", "schema_version", "value"]);
+var CEAL_OPERATION_RESULT_OPTIONAL_KEYS = vocabulary(["model_disclosure", "result_complete", "resume"]);
 
 // packages/ceal-client-protocol/src/operation-catalog.ts
 var CEAL_OPERATION_CATALOG_SCHEMA_VERSION = "ceal.catalog.v3";
@@ -621,8 +755,8 @@ var CEAL_SCHEMA_LITERALS = [
   "ceal.activation_transport.v1",
   CEAL_OPERATION_ACCESS_SCHEMA_VERSION,
   CEAL_OPERATION_CATALOG_SCHEMA_VERSION,
-  "ceal.client_refresh_request.v2",
-  "ceal.client_refresh_result.v2",
+  "ceal.client_refresh_request.v1",
+  "ceal.client_refresh_result.v1",
   "ceal.client_revoke_request.v1",
   "ceal.client_revoke_result.v1",
   CEAL_COMMAND_REQUEST_SCHEMA_VERSION,
@@ -651,7 +785,7 @@ var CEAL_SCHEMA_LITERALS = [
   "ceal.gateway_call_result.v1",
   CEAL_GATEWAY_COMMAND_RESOLUTION_SCHEMA_VERSION,
   "ceal.gateway_connector_route_failure.v1",
-  "ceal.gateway_discovery.v3",
+  "ceal.gateway_discovery.v1",
   "ceal.gateway_handshake.v1",
   "ceal.gateway_installation_activation_code_issue_request.v1",
   "ceal.gateway_installation_activation_code_issue_result.v1",
@@ -673,10 +807,10 @@ var CEAL_SCHEMA_LITERALS = [
   "ceal.host_observation.v1",
   "ceal.host_registration_request.v1",
   "ceal.host_registration_result.v1",
-  "ceal.leased-resource-stream.v2",
-  "ceal.leased_consumer_attachment_stream_frame.v2",
-  "ceal.leased_consumer_attachment_stream_request.v2",
-  "ceal.leased_consumer_attachment_stream_transport.v2",
+  "ceal.leased-resource-stream.v1",
+  "ceal.leased_consumer_attachment_stream_frame.v1",
+  "ceal.leased_consumer_attachment_stream_request.v1",
+  "ceal.leased_consumer_attachment_stream_transport.v1",
   "ceal.operation_descriptor.v1",
   "ceal.operation_error.v1",
   "ceal.operation_failure.v1",
@@ -684,7 +818,7 @@ var CEAL_SCHEMA_LITERALS = [
   "ceal.operation_receipt.v1",
   "ceal.operation_result.v1",
   "ceal.operation_result.compact.v1",
-  "ceal.local_result_materialization.v2",
+  "ceal.local_result_materialization.v1",
   "ceal.local_result_root.v1",
   "ceal.owner_bootstrap_exchange_request.v1",
   "ceal.owner_bootstrap_exchange_result.v1",
@@ -769,117 +903,8 @@ var CEAL_AGENT_SERVICE_SESSION_RECORD_KEYS = vocabulary([
 ]);
 var CEAL_AGENT_SESSION_COMMIT_KEYS = vocabulary(["attempt_ref", "expected_session_revision", "session_revision"]);
 
-// packages/ceal-client-protocol/src/operation-next-actions.ts
-var CEAL_REPEAT_REQUEST_NEXT_ACTION = "repeat_request";
-var CEAL_INSPECT_RECEIPT_NEXT_ACTION = "inspect_receipt";
-var CALLER_RECOVERABLE_NEXT_ACTION_VALUES = [
-  "select_did_you_mean",
-  "choose_new_output_path",
-  "choose_new_idempotency_key",
-  "restart_search",
-  "repeat_original_arguments",
-  // The occurrence this call addressed is settled and cannot move again -- a
-  // denied effect approval, an expired continuation -- so the caller runs the
-  // same call again as a new request. The refusal names the re-request; this
-  // word is the re-request.
-  CEAL_REPEAT_REQUEST_NEXT_ACTION,
-  "choose_new_request_identity",
-  // A refusal that names the argument (invalid_argument with `property`) tells the caller exactly what to change.
-  "correct_argument",
-  // A resolver-owned input must move from caller operands into the declared
-  // resolver selection field.
-  "supply_resolver_selections",
-  // The graph names an upstream node whose Operation produces the resolver's
-  // occurrence, and it has not produced one yet. The caller runs that node
-  // first; the refusal used to share a code with a malformed resolver result,
-  // which is not fixable, so neither could carry a remedy.
-  "run_resolver_dependency",
-  // A replay carries the input the occurrence durably admitted, and this one
-  // carries a different one. The caller fixes it by presenting the original
-  // invocation, so it is a remedy; the coordinator minted the word at the
-  // replay guard and never declared it, which read as unguided to the scorer.
-  "use_original_input",
-  // The same mismatch on the Request binding rather than the input: the
-  // occurrence was admitted under one binding and the replay presents another.
-  "use_original_request_binding",
-  // The client's own filesystem write was refused -- EACCES, EPERM, or a
-  // read-only mount -- which is how an agent sandbox fences writes outside its
-  // workspace. The caller reruns the same command with unsandboxed or escalated
-  // execution; re-adopting the session cannot help, because the sandbox refuses
-  // that write too.
-  "rerun_outside_agent_sandbox",
-  // The refusal names the one Operation to read next in `describe_command`:
-  // an absent Operation id with a sole catalog-ranked candidate, or a known
-  // Operation invoked without its input. Describing only reads the verified
-  // contract and dispatches nothing, and the caller then retries with the
-  // named Operation or input, so it is guidance the scorer counts.
-  "describe_operation",
-  // The refusal names the caller's own personal connect Operation in
-  // `required_action_sequence`: the Operation asked for, or the credential
-  // the call ran on, needs a personal connection the caller does not hold
-  // (never connected, revoked, or expired). The caller runs that exact
-  // Operation, completes the consent it hands back, and retries the same call.
-  "connect_personal_account",
-  // The provider or Gateway named a bounded wait; the caller waits that long
-  // and submits the same read again.
-  "retry_after"
-];
-var CEAL_CALLER_RECOVERABLE_NEXT_ACTIONS = Object.freeze(CALLER_RECOVERABLE_NEXT_ACTION_VALUES);
-var NON_REMEDY_NEXT_ACTION_VALUES = [
-  // Only an administrator can take the named step -- approving a place for an
-  // Operation, granting a withheld capability -- so a non-administrator asks
-  // one. The refusal names the administrator step; this word is the ask.
-  "ask_admin",
-  "await_pending_approval",
-  "check_gateway",
-  "inspect_context_store",
-  "inspect_gateway",
-  "inspect_local_cache",
-  // The thin client prints these on its own behalf, before or after the wire.
-  // They were declared only as `CealClientLocalRemedy` keys and, for two of
-  // them, only as Go string literals -- a second and third vocabulary for one
-  // thing. `CealClientLocalRemedy` derives from this list now, so the client's
-  // remedies cannot drift from the words the protocol knows.
-  "inspect_local_client",
-  "inspect_local_command",
-  "inspect_local_output",
-  "inspect_local_route",
-  CEAL_INSPECT_RECEIPT_NEXT_ACTION,
-  "inspect_request",
-  "none",
-  // The provider refused because of its own configuration -- an API not
-  // enabled, an app scope missing -- which an operator changes in that
-  // provider's console. No caller edit and no retry fixes it.
-  "operator_action",
-  "recover",
-  "reconcile",
-  // Reconciliation of one named occurrence, not of the deployment: a legacy
-  // occurrence with no admitted input commitment cannot be replayed safely and
-  // no edit to the call changes that. `reconcile` is the deployment-wide word.
-  "reconcile_occurrence",
-  "reduce_request_size",
-  // The Host's invocation context for this turn is stale or expired at the
-  // Gateway. The Host's next turn rebinds it and the same call then succeeds;
-  // nothing in the call changes, so it is not a remedy the scorer may count.
-  "refresh_host_invocation_context",
-  "repair_or_adopt_session",
-  "retry",
-  // The owner -- a correlation hook, an approval hook -- is not serving right
-  // now. The caller changes nothing and the same call succeeds once the owner
-  // is back, so this is not a remedy the scorer may count as guidance.
-  "retry_after_owner_recovery",
-  "retry_same_receipt_read",
-  "run_file_search_again",
-  "select_exact_approval"
-];
-var CEAL_NON_REMEDY_NEXT_ACTIONS = Object.freeze(NON_REMEDY_NEXT_ACTION_VALUES);
-var DECLARED = /* @__PURE__ */ new Set([...CEAL_CALLER_RECOVERABLE_NEXT_ACTIONS, ...CEAL_NON_REMEDY_NEXT_ACTIONS]);
-var RECOVERABLE = new Set(CEAL_CALLER_RECOVERABLE_NEXT_ACTIONS);
-var CEAL_OPERATION_WITHHELD_NEXT_ACTIONS = Object.freeze({
-  provider_permission: "ask_admin",
-  access_level: "ask_admin",
-  personal_authorization_required: "connect_personal_account"
-});
+// packages/ceal-client-protocol/src/operation-result-completeness.ts
+var CEAL_READ_VALUE_CONTINUATION_KEYS = vocabulary(["continuation", "continuation_ref", "next_cursor"]);
 
 // packages/ceal-client-protocol/src/operation-contract-artifact.ts
 var CATALOG_REVISION = new RegExp(CEAL_VERIFIED_ARTIFACT_CATALOG_REVISION_PATTERN, "u");
@@ -940,7 +965,8 @@ var CEAL_ACTIVITY_GAP_CODES = vocabulary([
   "provider_cursor_unavailable",
   "malformed_provider_page",
   "visibility_incomplete",
-  "unsupported_event_kind"
+  "unsupported_event_kind",
+  "direct_messages_excluded"
 ]);
 var CEAL_ACTIVITY_CONNECTOR_KINDS = vocabulary(["slack", "github", "google-calendar", "google-drive", "notion"]);
 var CEAL_ACTIVITY_COVERAGE_STATUSES = vocabulary(["complete_for_target", "continuation_required", "blocked"]);
@@ -951,6 +977,8 @@ var CEAL_ACTIVITY_EVENT_KINDS = vocabulary([
   "github.commit.authored",
   "github.issue.opened",
   "github.pull_request.opened",
+  "github.issue.edited",
+  "github.pull_request.edited",
   "github.review.submitted",
   "github.issue_comment.created",
   "github.review_comment.created",
@@ -963,6 +991,25 @@ var CEAL_ACTIVITY_EVENT_KINDS = vocabulary([
   "notion.page.created",
   "notion.page.edited"
 ]);
+var CEAL_ACTIVITY_EVENT_TIMESTAMP_BASIS_MAP = Object.freeze({
+  "slack.message": "message_created",
+  "slack.reply": "message_created",
+  "slack.direct_message": "message_created",
+  "github.commit.authored": "commit_authored",
+  "github.review.submitted": "review_submitted",
+  "github.issue_comment.created": "comment_created",
+  "github.review_comment.created": "comment_created",
+  "github.issue.opened": "resource_created",
+  "github.pull_request.opened": "resource_created",
+  "github.issue.edited": "resource_modified",
+  "github.pull_request.edited": "resource_modified",
+  "calendar.organized": "resource_created",
+  "drive.file.created": "file_created",
+  "drive.file.modified": "file_modified_by_me",
+  "drive.file.viewed": "file_viewed_by_me",
+  "notion.page.created": "page_created",
+  "notion.page.edited": "page_last_edited"
+});
 var CEAL_ACTIVITY_TIMESTAMP_BASES = vocabulary([
   "message_created",
   "commit_authored",
@@ -983,11 +1030,12 @@ var CEAL_ACTIVITY_V3_KINDS = vocabulary(["authored", "edited", "messaged", "resp
 var CEAL_RESOURCE_TIME_BASES = vocabulary(["created", "modified", "viewed"]);
 var CEAL_RESOURCE_SEARCH_ORDERS = vocabulary(["relevance", "modified", "viewed", "created"]);
 var CEAL_RESOURCE_SEARCH_DIRECTIONS = vocabulary(["ascending", "descending"]);
-var CEAL_RESOURCE_SEARCH_FILTERS = vocabulary(["query", "modified_since", "since", "until", "authored_by_me", "include_replies", "kinds", "container_ref", "container_refs", "addressed_to_me", "unread"]);
+var CEAL_RESOURCE_SEARCH_FILTERS = vocabulary(["query", "modified_since", "since", "until", "authored_by_me", "include_replies", "kinds", "container_ref", "container_refs", "container_names", "addressed_to_me", "unread"]);
 var CEAL_ARTIFACT_STAGE_TERMINALS = vocabulary(["chunk_accepted", "artifact_ready", "idempotency_replayed"]);
 var CEAL_READ_ITEM_KINDS = vocabulary(["conversation", "identity", "usergroup", "message", "file", "document"]);
 var CEAL_LEASED_MESSAGE_SEARCH_COMPLETENESS = vocabulary(["complete", "continuation_available", "truncated"]);
-var CEAL_OPAQUE_HANDLE_KINDS = vocabulary(["target", "message", "thread", "artifact", "document", "object"]);
+var CEAL_OPAQUE_HANDLE_KINDS = vocabulary(["target", "message", "thread", "artifact", "document", "block", "object"]);
+var CEAL_OPAQUE_REF_KINDS = vocabulary([...CEAL_OPAQUE_HANDLE_KINDS, "result", "operation-receipt", "reply-receipt", "field", "notion-data-source"]);
 var CEAL_WRITE_OBJECT_KINDS = vocabulary(["document", "comment", "cell_range"]);
 var CEAL_CONVERSATION_KINDS = vocabulary(["channel", "dm", "group"]);
 var CEAL_FILE_TYPE_FAMILIES = vocabulary(["all", "image", "pdf"]);
@@ -1029,6 +1077,9 @@ var CEAL_FINAL_PRESENTATION_INTENTS = vocabulary(["final", "stop", "transient_no
 var CEAL_PRESENTATION_INTENTS = vocabulary(["progress", ...CEAL_FINAL_PRESENTATION_INTENTS]);
 
 // packages/ceal-client-protocol/src/resource-row.ts
+var CEAL_DATED_NOTE_BASES = vocabulary(["recording", "calendar_event", "created_time"]);
+var CEAL_DATED_NOTE_TRANSCRIPT_STATES = vocabulary(["present", "absent", "unestablished"]);
+var CEAL_READ_SEARCH_COST_CLASSES = vocabulary(["native_index", "scan"]);
 var RESOURCE_ROW_KEY_RULES = Object.freeze({
   schema_version: { required: true, timestamp: false },
   ref: { required: true, timestamp: false },
@@ -1037,9 +1088,11 @@ var RESOURCE_ROW_KEY_RULES = Object.freeze({
   title: { required: true, timestamp: false },
   container_label: { required: true, timestamp: false },
   container_ref: { required: false, timestamp: false },
+  source_url: { required: false, timestamp: false },
   source: { required: true, timestamp: false },
   owner: { required: false, timestamp: false },
   counterparts: { required: false, timestamp: false },
+  attachments: { required: false, timestamp: false },
   created_at: { required: false, timestamp: true },
   created_at_local: { required: false, timestamp: true },
   modified_at: { required: false, timestamp: true },
@@ -1050,6 +1103,7 @@ var RESOURCE_ROW_KEY_RULES = Object.freeze({
   end: { required: false, timestamp: false },
   status: { required: false, timestamp: false },
   snippet: { required: false, timestamp: false },
+  dated_notes: { required: false, timestamp: false },
   state: { required: true, timestamp: false },
   timestamp_basis: { required: true, timestamp: false }
 });
@@ -1086,6 +1140,27 @@ var CEAL_WRITE_SAFETY_UNCHECKED_REASONS = vocabulary(["authority_unavailable"]);
 // packages/ceal-client-protocol/src/operation-occurrence.ts
 var MAX_RECEIPT_REVISION = Number.MAX_SAFE_INTEGER - 1;
 
+// packages/ceal-client-protocol/src/personal-client-vocabulary.ts
+var CEAL_PERSONAL_CLIENT_BINDING_KEYS = vocabulary([
+  "access_group_ref",
+  "membership_ref",
+  "registration_ref",
+  "client_ref",
+  "subject_ref",
+  "instance_ref"
+]);
+var CEAL_ENROLLMENT_FAILURE_CODES = vocabulary(["enrollment_invalid", "enrollment_expired", "enrollment_used"]);
+var CEAL_REFRESH_FAILURE_CODES = vocabulary([
+  "refresh_invalid",
+  "refresh_expired",
+  "refresh_inactive",
+  "refresh_replayed",
+  "refresh_revoked",
+  "authority_replaced",
+  "refresh_recovery_unavailable",
+  "refresh_recovery_expired"
+]);
+
 // packages/ceal-client-protocol/src/leased-artifact-contract.ts
 var CEAL_LEASED_CONSUMER_ARTIFACT_CHUNK_MAX_BYTES = 12 * 1024;
 
@@ -1181,7 +1256,7 @@ var CEAL_REQUEST_MAX_GRAPH_NODES = 128;
 
 // packages/ceal-client-protocol/src/request-run.ts
 var CEAL_REQUEST_NODE_STANDING_OCCURRENCE_SCHEMA_VERSION = "ceal.request_node_standing_occurrence.v1";
-var CEAL_REQUEST_RUN_BATCH_SCHEMA_VERSION = "ceal.request_run_batch.v3";
+var CEAL_REQUEST_RUN_BATCH_SCHEMA_VERSION = "ceal.request_run_batch.v1";
 var REQUEST_ACTION_SAFE_REF_SCHEMA = { type: "string", minLength: 1, maxLength: 128, pattern: SAFE_REF.source };
 var REQUEST_ACTION_DIGEST_SCHEMA = { type: "string", minLength: 64, maxLength: 64, pattern: "^[a-f0-9]{64}$" };
 var REQUEST_NODE_STANDING_OCCURRENCE_SCHEMA = {
@@ -1399,8 +1474,15 @@ var CEAL_REQUEST_GRAPH_NODE_PREPARE_READINESS_JSON_SCHEMA = {
 // packages/ceal-client-protocol/src/host-invocation-authentication.ts
 var CEAL_HOST_INVOCATION_AUTHENTICATION_REQUEST_SCHEMA = "ceal.host_invocation_authentication_request.v1";
 var CEAL_HOST_INVOCATION_AUTHENTICATION_RESULT_SCHEMA = "ceal.host_invocation_authentication_result.v1";
-var CEAL_HOST_CLIENT_NONCE_PATTERN = /^[A-Za-z0-9_-]{43}$/u;
-var CEAL_HOST_CONTEXT_TOKEN_PATTERN = /^ceal_context_[A-Za-z0-9_-]{43}$/u;
+var CEAL_HOST_NONCE_ENCODED_CHARACTERS = 43;
+var CEAL_HOST_CLIENT_NONCE_PATTERN = new RegExp(`^[A-Za-z0-9_-]{${CEAL_HOST_NONCE_ENCODED_CHARACTERS}}$`, "u");
+var CEAL_HOST_CONTEXT_TOKEN_PATTERN = new RegExp(`^ceal_context_[A-Za-z0-9_-]{${CEAL_HOST_NONCE_ENCODED_CHARACTERS}}$`, "u");
+var CEAL_HOST_INVOCATION_AUTHENTICATION_RESULT_MAX_BYTES = new TextEncoder().encode(`${JSON.stringify({
+  schema_version: CEAL_HOST_INVOCATION_AUTHENTICATION_RESULT_SCHEMA,
+  context_token: `ceal_context_${"A".repeat(CEAL_HOST_NONCE_ENCODED_CHARACTERS)}`,
+  expires_at: (/* @__PURE__ */ new Date("+010000-01-01T00:00:00.000Z")).toISOString()
+})}
+`).byteLength;
 function decodeCealHostInvocationAuthenticationRequest(value) {
   if (!isCealJsonRecord(value) || !exactKeys(value, ["schema_version", "client_nonce"]) || value.schema_version !== CEAL_HOST_INVOCATION_AUTHENTICATION_REQUEST_SCHEMA || typeof value.client_nonce !== "string" || !CEAL_HOST_CLIENT_NONCE_PATTERN.test(value.client_nonce)) {
     throw new TypeError("The Host invocation authentication request is invalid.");
@@ -1424,8 +1506,8 @@ function exactKeys(value, expected) {
 
 // packages/ceal-client-protocol/src/client-result-materialization.ts
 var CEAL_MODEL_VISIBLE_COMMAND_OUTPUT_MAX_BYTES = 32 * 1024;
-var REQUIRED_FIELDS2 = Object.freeze(["schema_version", "operation_id", "read_argv"]);
-var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "local_result_root", "continue_argv"]);
+var REQUIRED_FIELDS2 = Object.freeze(["schema_version", "operation_id"]);
+var FIELDS = /* @__PURE__ */ new Set([...REQUIRED_FIELDS2, "read_argv", "local_result_root", "continue_argv", "model_disclosure", "item_read_argv"]);
 
 // packages/ceal-client-protocol/src/session-start-affordance.ts
 var CEAL_SESSION_ENTRY_INVOCATION = "ceal";
@@ -1525,27 +1607,6 @@ var ADMIN_LINEAGE_NODE_KINDS = vocabulary(["source_read", "synthesis_preview", "
 // packages/ceal-client-protocol/src/actor-kind.ts
 var CEAL_ACTOR_KINDS = vocabulary(["human", "bot", "app", "unknown"]);
 
-// packages/ceal-client-protocol/src/personal-client-vocabulary.ts
-var CEAL_PERSONAL_CLIENT_BINDING_KEYS = vocabulary([
-  "access_group_ref",
-  "membership_ref",
-  "registration_ref",
-  "client_ref",
-  "subject_ref",
-  "instance_ref"
-]);
-var CEAL_ENROLLMENT_FAILURE_CODES = vocabulary(["enrollment_invalid", "enrollment_expired", "enrollment_used"]);
-var CEAL_REFRESH_FAILURE_CODES = vocabulary([
-  "refresh_invalid",
-  "refresh_expired",
-  "refresh_inactive",
-  "refresh_replayed",
-  "refresh_revoked",
-  "authority_replaced",
-  "refresh_recovery_unavailable",
-  "refresh_recovery_expired"
-]);
-
 // packages/ceal-client-protocol/src/device-enrollment.ts
 var CEAL_DEVICE_ENROLLMENT_POLL_FAILURE_CODES = Object.freeze(["unsupported_feature", "recovery_required", "expired", "denied"]);
 var POLL_RESULT_KEYS = Object.freeze(["retry_after_ms", "schema_version", "status"]);
@@ -2254,7 +2315,6 @@ function assertHostProducerSourcePaths(stateRoot, config, producer, platform = p
 // host/producer-service.ts
 import { constants } from "node:fs";
 import { lstat as lstat2, open as open2 } from "node:fs/promises";
-var MAX_CONFIG_BYTES = 32 * 1024;
 var SAFE_REF3 = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u;
 var HOST_PRODUCER_CONFIG_FLAG = "--ceal-host-config";
 var HostProducerServiceError = class extends Error {
@@ -2265,7 +2325,8 @@ var HostProducerServiceError = class extends Error {
     this.code = code3;
   }
 };
-var HOST_PRODUCER_CONFIG_KEYS = ["schema_version", "host_source_ref", "producer_installation_ref", "producer_epoch", "outbox_dir", "relay_endpoint", "reconcile_interval_ms", "retry_backoff_ms", "ipc_timeout_ms"];
+var HOST_PRODUCER_CONFIG_KEYS = ["schema_version", "host_source_ref", "producer_installation_ref", "producer_epoch", "outbox_dir", "relay_endpoint"];
+var HOST_PRODUCER_TIMING_DEFAULTS = Object.freeze({ reconcile_interval_ms: 250, retry_backoff_ms: 1e3, ipc_timeout_ms: 5e3 });
 function parseHostProducerConfigFlag(args, platform = process.platform) {
   return parseProducerHostConfigFlag(args, HOST_PRODUCER_CONFIG_FLAG, platform, hostProducerError);
 }
@@ -2304,15 +2365,17 @@ async function readProducerConfigText(configPath, platform, error) {
   const noFollow = typeof constants.O_NOFOLLOW === "number" ? constants.O_NOFOLLOW : 0;
   const handle = await openConfigFile(configPath, constants.O_RDONLY | noFollow, error);
   try {
-    validateOpenedFile(await handle.stat(), pathStat, platform, error);
-    return await readBoundedConfig(handle, error);
+    const opened = await handle.stat();
+    validateConfigFile(opened, platform, error);
+    validateOpenedFile(opened, pathStat, platform, error);
+    return await readBoundedConfig(handle, opened.size, error);
   } finally {
     await handle.close();
   }
 }
 function decodeProducerConfigCore(text, options) {
   const value = parseCanonicalJson(text, options.error);
-  if (!isRecord(value) || !hasExactKeys2(value, options.keys) || value.schema_version !== options.schema) throw options.error("invalid_config");
+  if (!isRecord(value) || !hasConfigKeys(value, options.keys) || value.schema_version !== options.schema) throw options.error("invalid_config");
   const hostSourceRef = typeof value.host_source_ref === "string" ? value.host_source_ref : "";
   const installationRef = typeof value.producer_installation_ref === "string" ? value.producer_installation_ref : "";
   const producerEpoch = validateIdentity(hostSourceRef, installationRef, value.producer_epoch, options.error);
@@ -2323,7 +2386,7 @@ function decodeProducerConfigCore(text, options) {
     assertProducerAbsolutePath(value[key], options.platform, "runtime", options.error);
     extraPaths[key] = value[key];
   }
-  const intervals = validateIntervals(value.reconcile_interval_ms, value.retry_backoff_ms, value.ipc_timeout_ms, options.error);
+  const intervals = validateIntervals(value.reconcile_interval_ms === void 0 ? HOST_PRODUCER_TIMING_DEFAULTS.reconcile_interval_ms : value.reconcile_interval_ms, value.retry_backoff_ms === void 0 ? HOST_PRODUCER_TIMING_DEFAULTS.retry_backoff_ms : value.retry_backoff_ms, value.ipc_timeout_ms === void 0 ? HOST_PRODUCER_TIMING_DEFAULTS.ipc_timeout_ms : value.ipc_timeout_ms, options.error);
   return {
     extra_paths: Object.freeze(extraPaths),
     host_source_ref: hostSourceRef,
@@ -2352,7 +2415,7 @@ async function configPathStat(configPath, error) {
 }
 function validateConfigFile(value, platform, error) {
   if (!value.isFile() || value.isSymbolicLink()) throw error("invalid_config", refusalFacts([{ name: "config_is_file", value: value.isFile(), expected: "true" }, { name: "config_is_symlink", value: value.isSymbolicLink(), expected: "false" }]));
-  if (value.size <= 0 || value.size > MAX_CONFIG_BYTES) throw error("invalid_config", refusalFact("config_bytes", value.size, `between 1 and ${MAX_CONFIG_BYTES}`));
+  if (value.size <= 0 || value.size > CEAL_ENCODED_JSON_DOCUMENT_MAX_BYTES) throw error("invalid_config", refusalFact("config_bytes", value.size, `between 1 and ${CEAL_ENCODED_JSON_DOCUMENT_MAX_BYTES}`));
   if (platform !== "win32" && (value.uid !== process.getuid?.() || (value.mode & 63) !== 0)) throw error("config_not_private", refusalFacts([{ name: "platform", value: platform, expected: "win32 or owner-private" }, { name: "config_uid", value: value.uid, expected: "the current user" }, { name: "config_mode", value: value.mode, expected: "owner-private" }]));
 }
 async function openConfigFile(configPath, flags, error) {
@@ -2366,12 +2429,17 @@ function validateOpenedFile(opened, pathStat, platform, error) {
   if (!opened.isFile()) throw error("config_unavailable", refusalFacts([{ name: "opened_is_file", value: opened.isFile(), expected: "true" }, { name: "opened_mode", value: opened.mode.toString(8), expected: "a regular file mode" }]));
   if (platform !== "win32" && (opened.dev !== pathStat.dev || opened.ino !== pathStat.ino)) throw error("config_unavailable", refusalFacts([{ name: "platform", value: platform, expected: "win32, or the same file the path named" }, { name: "opened_device", value: opened.dev, expected: String(pathStat.dev) }, { name: "opened_inode", value: opened.ino, expected: String(pathStat.ino) }]));
 }
-async function readBoundedConfig(handle, error) {
-  const buffer = Buffer.allocUnsafe(MAX_CONFIG_BYTES + 1);
-  const { bytesRead } = await handle.read(buffer, 0, buffer.byteLength, 0);
-  if (bytesRead === 0 || bytesRead > MAX_CONFIG_BYTES) throw error("invalid_config", refusalFact("bytes_read", bytesRead, `between 1 and ${MAX_CONFIG_BYTES}`));
+async function readBoundedConfig(handle, expectedBytes, error) {
+  const buffer = Buffer.allocUnsafe(expectedBytes + 1);
+  let offset = 0;
+  while (offset < buffer.byteLength) {
+    const { bytesRead } = await handle.read(buffer, offset, buffer.byteLength - offset, offset);
+    if (bytesRead === 0) break;
+    offset += bytesRead;
+  }
+  if (offset !== expectedBytes) throw error("invalid_config", refusalFact("bytes_read", offset, `the opened file's ${expectedBytes} bytes without growth or truncation`));
   try {
-    return new TextDecoder("utf-8", { fatal: true }).decode(buffer.subarray(0, bytesRead));
+    return new TextDecoder("utf-8", { fatal: true }).decode(buffer.subarray(0, offset));
   } catch {
     throw error("invalid_config");
   }
@@ -2399,9 +2467,8 @@ function validateIntervals(reconcile, retry, timeout, error) {
   if (!boundedMilliseconds(reconcile) || !boundedMilliseconds(retry) || !boundedMilliseconds(timeout)) throw error("invalid_config");
   return [reconcile, retry, timeout];
 }
-function hasExactKeys2(value, keys) {
-  const observed = Object.keys(value);
-  return observed.length === keys.length && keys.every((key) => Object.hasOwn(value, key));
+function hasConfigKeys(value, required) {
+  return required.every((key) => Object.hasOwn(value, key)) && Object.keys(value).every((key) => required.includes(key) || Object.hasOwn(HOST_PRODUCER_TIMING_DEFAULTS, key));
 }
 function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);