@dsh-enhanced/assistant-work-items 0.0.0-stage → 0.1.66

package/lib/owner-access.d.ts

@@ -0,0 +1,35 @@
+import type { ToolExecution } from '@deepseek-ai/dsh-tools';
+import type { NormalizedConfig } from './config.js';
+import type { PeerDeliveryService, PeerOwnerAliasReceipt, PeerOwnerRouteReceipt, PeerPolicyService } from './peers.js';
+import type { WorkItemStore } from './store.js';
+export type OwnerWorkItemExecution = Pick<ToolExecution, 'agent' | 'callId' | 'name' | 'arguments' | 'signal'>;
+export type OwnerStoreScope = Parameters<WorkItemStore['listOwnerItems']>[0];
+export interface WorkItemOwnerAccessDependencies {
+    config: NormalizedConfig;
+    store: () => WorkItemStore | undefined;
+    delivery: () => PeerDeliveryService | undefined;
+    policy: () => PeerPolicyService | undefined;
+    access?: WorkItemOwnerAccess;
+}
+export declare function ownerArgumentsOf(value: unknown, allowed: readonly string[], label?: string): Record<string, unknown>;
+/** Root owner scope reached through a read-only linked alias. Never a v2 owner receipt. */
+export type OwnerAliasRoute = Omit<PeerOwnerRouteReceipt, 'receiptVersion'> & {
+    readonly receiptVersion?: never;
+    readonly alias: PeerOwnerAliasReceipt['alias'];
+};
+export interface WorkItemOwnerAccessContext {
+    store: WorkItemStore;
+    owner: Readonly<OwnerStoreScope>;
+    /** Exact v2 owner receipt, or (inspect-work-items only) the alias-rooted owner scope. */
+    route: Readonly<PeerOwnerRouteReceipt | OwnerAliasRoute>;
+    delivery: PeerDeliveryService;
+    assertCurrent: () => void;
+}
+/** Exact current native-call authority shared by owner reads and continuation.
+ * No cached proof grants later execution; every downstream boundary rechecks. */
+export declare class WorkItemOwnerAccess {
+    private readonly dependencies;
+    constructor(dependencies: WorkItemOwnerAccessDependencies);
+    withOwner<T>(execution: OwnerWorkItemExecution, args: Record<string, unknown>, allowed: readonly string[], action: 'inspect-work-items' | 'continue-work-items', consume: boolean, callback: (context: WorkItemOwnerAccessContext) => T): T;
+}
+//# sourceMappingURL=owner-access.d.ts.map

package/lib/owner-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-access.d.ts","sourceRoot":"","sources":["../src/owner-access.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAE3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AACtH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAG/C,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,aAAa,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC,CAAA;AAC9G,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC5E,MAAM,WAAW,+BAA+B;IAC9C,MAAM,EAAE,gBAAgB,CAAA;IACxB,KAAK,EAAE,MAAM,aAAa,GAAG,SAAS,CAAA;IACtC,QAAQ,EAAE,MAAM,mBAAmB,GAAG,SAAS,CAAA;IAC/C,MAAM,EAAE,MAAM,iBAAiB,GAAG,SAAS,CAAA;IAC3C,MAAM,CAAC,EAAE,mBAAmB,CAAA;CAC7B;AAID,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,SAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAU5H;AACD,2FAA2F;AAC3F,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,GAAG;IAC5E,QAAQ,CAAC,cAAc,CAAC,EAAE,KAAK,CAAA;IAC/B,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAA;CAC/C,CAAA;AACD,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,aAAa,CAAA;IACpB,KAAK,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAA;IAChC,yFAAyF;IACzF,KAAK,EAAE,QAAQ,CAAC,qBAAqB,GAAG,eAAe,CAAC,CAAA;IACxD,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,aAAa,EAAE,MAAM,IAAI,CAAA;CAC1B;AAED;iFACiF;AACjF,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAAZ,YAAY,EAAE,+BAA+B;IAC1E,SAAS,CAAC,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,EACvG,MAAM,EAAE,oBAAoB,GAAG,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,0BAA0B,KAAK,CAAC,GAAG,CAAC;CAiGnI"}

package/lib/owner-access.js

@@ -0,0 +1,152 @@
+import { symbols } from '@deepseek-ai/cordis';
+import { acceptanceCanonicalJson, acceptanceDigest } from '@dsh-enhanced/task-acceptance-contract';
+import { WorkItemError } from './types.js';
+// Shared across read and continuation entrypoints, including separate access instances.
+const busy = new WeakSet();
+const peerIdentity = (value) => value === undefined ? undefined : value[symbols.original] ?? value;
+export function ownerArgumentsOf(value, allowed, label = 'owner recall') {
+    if (!value || typeof value !== 'object' || Array.isArray(value) || ![Object.prototype, null].includes(Object.getPrototypeOf(value)))
+        throw new WorkItemError('invalid-input', `${label} requires plain arguments`);
+    const output = {};
+    for (const key of Reflect.ownKeys(value)) {
+        if (typeof key !== 'string' || !allowed.includes(key))
+            throw new WorkItemError('invalid-input', `unknown ${label} argument`);
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        if (!descriptor.enumerable || !('value' in descriptor) || descriptor.value === undefined || !['number', 'string'].includes(typeof descriptor.value))
+            throw new WorkItemError('invalid-input', `invalid ${label} argument`);
+        output[key] = descriptor.value;
+    }
+    return Object.freeze(output);
+}
+/** Exact current native-call authority shared by owner reads and continuation.
+ * No cached proof grants later execution; every downstream boundary rechecks. */
+export class WorkItemOwnerAccess {
+    dependencies;
+    constructor(dependencies) {
+        this.dependencies = dependencies;
+    }
+    withOwner(execution, args, allowed, action, consume, callback) {
+        const { config } = this.dependencies, scope = config.scope, continuing = action === 'continue-work-items';
+        const label = continuing ? 'owner continuation' : 'owner recall';
+        function fail(message) { throw new WorkItemError('identity-mismatch', `${label} ${message}`); }
+        const automationId = continuing ? config.ownerContinuation?.automationId : config.workerAutomationId;
+        if (!config.ownerRecall || !config.enabled || config.mode !== 'active' || !scope || !config.workerAutomationId || !automationId
+            || continuing && !config.ownerContinuation)
+            fail('is disabled');
+        if (continuing ? execution.name !== 'work_item_continue' : !['work_item_list', 'work_item_recall'].includes(execution.name))
+            fail('tool identity mismatch');
+        if (acceptanceCanonicalJson(args) !== acceptanceCanonicalJson(ownerArgumentsOf(execution.arguments, allowed, label)))
+            fail('arguments do not match the actual call');
+        const agent = execution.agent;
+        if (!agent || busy.has(agent))
+            fail('requires a non-reentrant foreground caller');
+        busy.add(agent);
+        try {
+            const delivery = this.dependencies.delivery(), policy = this.dependencies.policy(), store = this.dependencies.store();
+            if (!delivery?.validateOwnerAgentForRoute || !delivery.inspectOwnerForegroundToolCall || !policy?.authorizeAgent || !policy.evaluateAgent || !store || store.closed)
+                fail('peers unavailable');
+            if (typeof execution.callId !== 'string' || execution.callId.length === 0 || execution.callId.length > 512)
+                fail('requires actual call identity');
+            const expiresAt = continuing ? Math.min(scope.expiresAt, config.ownerContinuation.expiresAt) : scope.expiresAt;
+            const argumentsJson = JSON.stringify(ownerArgumentsOf(execution.arguments, allowed, label)), name = execution.name, callId = execution.callId, signal = execution.signal;
+            const deliveryIdentity = peerIdentity(delivery), policyIdentity = peerIdentity(policy);
+            const observe = () => {
+                if (execution.agent !== agent || execution.signal !== signal || execution.name !== name || execution.callId !== callId
+                    || JSON.stringify(ownerArgumentsOf(execution.arguments, allowed, label)) !== argumentsJson
+                    || peerIdentity(this.dependencies.delivery()) !== deliveryIdentity || peerIdentity(this.dependencies.policy()) !== policyIdentity || this.dependencies.store() !== store
+                    || store.closed || signal.aborted || Date.now() >= expiresAt)
+                    fail('authority changed');
+                const route = delivery.validateOwnerAgentForRoute(agent, scope.ownerRouteId);
+                // Read-only linked alias: only for inspect-work-items, only when the
+                // caller is not the exact owner, only for an owner-allowlisted alias
+                // principal, and re-validated on every observation.
+                if (!route && !continuing && config.ownerRecall.linkedAliases !== undefined && delivery.inspectOwnerAliasRoute && delivery.inspectOwnerAliasForegroundToolCall)
+                    return observeAlias();
+                if (!route || route.receiptVersion !== 2 || route.authorityId !== scope.ownerRouteId || route.principalId !== scope.principalId
+                    || route.workspace !== scope.workspace || route.agentPreset !== scope.preset || typeof route.authorityHash !== 'string' || !route.authorityHash || !route.principalRecordId
+                    || !Number.isSafeInteger(route.principalVersion) || route.principalVersion < 1 || !Number.isSafeInteger(route.generation) || route.generation < 1
+                    || !Number.isSafeInteger(route.bindingVersion) || route.bindingVersion < 1)
+                    fail('requires the current exact owner');
+                const proof = delivery.inspectOwnerForegroundToolCall({ agent, authorityId: scope.ownerRouteId, callId: String(execution.callId), toolName: execution.name, argumentsJson });
+                if (!proof || typeof proof !== 'object' || proof.protocol !== 'assistant-delivery/foreground-tool-call/v1')
+                    fail('requires an actual human foreground tool call');
+                return { route: { receiptVersion: route.receiptVersion, authorityId: route.authorityId, authorityHash: route.authorityHash,
+                        principalId: route.principalId, principalRecordId: route.principalRecordId, principalVersion: route.principalVersion,
+                        workspace: route.workspace, agentPreset: route.agentPreset, bindingVersion: route.bindingVersion, generation: route.generation }, proof: acceptanceDigest(proof) };
+            };
+            const observeAlias = () => {
+                const alias = delivery.inspectOwnerAliasRoute(agent, scope.ownerRouteId);
+                const counter = (value) => Number.isSafeInteger(value) && value >= 1;
+                if (!alias || alias.protocol !== 'assistant-delivery/owner-alias-receipt/v1' || 'receiptVersion' in alias
+                    || alias.authorityId !== scope.ownerRouteId || alias.workspace !== scope.workspace || alias.agentPreset !== scope.preset
+                    || typeof alias.authorityHash !== 'string' || !alias.authorityHash || !alias.root || !alias.alias
+                    || alias.root.principalId !== scope.principalId || typeof alias.root.principalRecordId !== 'string' || !alias.root.principalRecordId
+                    || !counter(alias.root.principalVersion) || !counter(alias.root.generation) || !counter(alias.root.bindingVersion)
+                    || typeof alias.alias.principalRecordId !== 'string' || !alias.alias.principalRecordId
+                    || alias.alias.principalRecordId === alias.root.principalRecordId || alias.alias.principalId === alias.root.principalId
+                    || alias.alias.sessionId !== String(agent.session.id) || !counter(alias.alias.principalVersion)
+                    || !counter(alias.alias.bindingVersion) || !counter(alias.alias.bindingGeneration))
+                    fail('requires the current exact owner or its linked alias');
+                // A Delivery link alone is not consent: the owner must name this alias
+                // principal in ownerRecall.linkedAliases. Absent allowlist = no alias.
+                if (!config.ownerRecall.linkedAliases?.includes(alias.alias.principalId))
+                    fail('linked alias is not allowlisted by the owner');
+                const proof = delivery.inspectOwnerAliasForegroundToolCall({ agent, authorityId: scope.ownerRouteId, callId: String(execution.callId), toolName: execution.name, argumentsJson });
+                if (!proof || typeof proof !== 'object' || proof.protocol !== 'assistant-delivery/owner-alias-foreground-tool-call/v1')
+                    fail('requires an actual human foreground tool call');
+                const route = { authorityId: alias.authorityId, authorityHash: alias.authorityHash,
+                    principalId: alias.root.principalId, principalRecordId: alias.root.principalRecordId, principalVersion: alias.root.principalVersion,
+                    workspace: alias.workspace, agentPreset: alias.agentPreset, bindingVersion: alias.root.bindingVersion, generation: alias.root.generation,
+                    alias: Object.freeze({ ...alias.alias }) };
+                return { route, proof: acceptanceDigest(proof) };
+            };
+            const initial = observe(), identity = acceptanceDigest(initial);
+            const current = () => { if (acceptanceDigest(observe()) !== identity)
+                fail('owner/call changed'); };
+            const resource = Object.freeze({ kind: 'automation', id: automationId });
+            // A linked alias spends its own bounded quota: the matching rule must be
+            // budgeted, and the charge must land in the alias principal's own Policy
+            // partition, never in the owner's shared rule scope.
+            const aliasPrincipal = 'alias' in initial.route ? initial.route.alias.principalId : undefined;
+            if (aliasPrincipal !== undefined && typeof policy.authorizeAgentForPrincipal !== 'function')
+                fail('linked alias reads require per-principal Policy budgets');
+            const budgeted = (decision) => {
+                const budget = decision?.budget;
+                return !!budget && typeof budget === 'object' && typeof budget.id === 'string' && budget.id.length > 0
+                    && typeof budget.amount === 'number' && Number.isFinite(budget.amount) && budget.amount > 0;
+            };
+            const evaluate = () => {
+                current();
+                const decision = policy.evaluateAgent(agent, action, resource);
+                current();
+                if (decision?.effect !== 'allow')
+                    fail(continuing ? 'permission denied' : 'read permission denied');
+                if (aliasPrincipal !== undefined && !budgeted(decision))
+                    fail('linked alias read requires a budgeted Policy rule');
+            };
+            evaluate();
+            if (consume) {
+                const idempotencyKey = `${continuing ? 'work-items-owner-continue' : aliasPrincipal !== undefined ? 'work-items-alias-read' : 'work-items-owner-read'}:${acceptanceDigest({ owner: initial.route, sessionId: String(agent.session.id), callId: execution.callId, name: execution.name, args })}`;
+                const decision = aliasPrincipal === undefined ? policy.authorizeAgent(agent, action, resource, { idempotencyKey })
+                    : policy.authorizeAgentForPrincipal(agent, action, resource, { idempotencyKey, principal: aliasPrincipal });
+                current();
+                if (decision?.effect !== 'allow')
+                    fail(continuing ? 'permission denied' : 'read permission denied');
+                if (aliasPrincipal !== undefined && decision.budgetPrincipal !== aliasPrincipal)
+                    fail('linked alias read was not charged to the alias principal');
+            }
+            evaluate();
+            const owner = { principalId: initial.route.principalId, principalRecordId: initial.route.principalRecordId,
+                principalVersion: initial.route.principalVersion, workspace: scope.workspace, preset: scope.preset, ownerRouteId: scope.ownerRouteId,
+                workerAutomationId: config.workerAutomationId, ...(config.ownerContinuation ? { continuationAutomationId: config.ownerContinuation.automationId } : {}),
+                generation: initial.route.generation, bindingVersion: initial.route.bindingVersion };
+            const result = callback({ store, owner: Object.freeze(owner), route: Object.freeze(initial.route), delivery, assertCurrent: evaluate });
+            evaluate();
+            return result;
+        }
+        finally {
+            busy.delete(agent);
+        }
+    }
+}
+//# sourceMappingURL=owner-access.js.map

package/lib/owner-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-access.js","sourceRoot":"","sources":["../src/owner-access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAE7C,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAA;AAIlG,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAW1C,wFAAwF;AACxF,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAA;AAClC,MAAM,YAAY,GAAG,CAAC,KAAyB,EAAW,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,KAAiC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAA;AAC5J,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,OAA0B,EAAE,KAAK,GAAG,cAAc;IACjG,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,GAAG,KAAK,2BAA2B,CAAC,CAAA;IAClN,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,WAAW,KAAK,WAAW,CAAC,CAAA;QAC5H,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAE,CAAA;QAC/D,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,UAAU,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,WAAW,KAAK,WAAW,CAAC,CAAA;QAC1N,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAA;IAChC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AAC9B,CAAC;AAeD;iFACiF;AACjF,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,YAA6C;QAA7C,iBAAY,GAAZ,YAAY,CAAiC;IAAG,CAAC;IAC9E,SAAS,CAAI,SAAiC,EAAE,IAA6B,EAAE,OAA0B,EACvG,MAAoD,EAAE,OAAgB,EAAE,QAAoD;QAC5H,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,KAAK,qBAAqB,CAAA;QACzG,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,cAAc,CAAA;QAChE,SAAS,IAAI,CAAC,OAAe,IAAW,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;QAC7G,MAAM,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAA;QACpG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,CAAC,YAAY;eAC1H,UAAU,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAAE,IAAI,CAAC,aAAa,CAAC,CAAA;QACjE,IAAI,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,wBAAwB,CAAC,CAAA;QAC3J,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,uBAAuB,CAAC,gBAAgB,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAAE,IAAI,CAAC,wCAAwC,CAAC,CAAA;QACpK,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAA;QAC7B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,4CAA4C,CAAC,CAAA;QACjF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACf,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAA;YACrH,IAAI,CAAC,QAAQ,EAAE,0BAA0B,IAAI,CAAC,QAAQ,CAAC,8BAA8B,IAAI,CAAC,MAAM,EAAE,cAAc,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM;gBAAE,IAAI,CAAC,mBAAmB,CAAC,CAAA;YAC9L,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG;gBAAE,IAAI,CAAC,+BAA+B,CAAC,CAAA;YACjJ,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,iBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAA;YAC/G,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,MAAM,CAAA;YACxK,MAAM,gBAAgB,GAAG,YAAY,CAAC,QAAQ,CAAC,EAAE,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;YACtF,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,IAAI,SAAS,CAAC,KAAK,KAAK,KAAK,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM;uBACjH,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,KAAK,aAAa;uBACvF,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,KAAK,gBAAgB,IAAI,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,KAAK,cAAc,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,KAAK;uBACrK,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,SAAS;oBAAE,IAAI,CAAC,mBAAmB,CAAC,CAAA;gBACzF,MAAM,KAAK,GAAG,QAAQ,CAAC,0BAA2B,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC,CAAA;gBAC7E,qEAAqE;gBACrE,qEAAqE;gBACrE,oDAAoD;gBACpD,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,WAAY,CAAC,aAAa,KAAK,SAAS,IAAI,QAAQ,CAAC,sBAAsB,IAAI,QAAQ,CAAC,mCAAmC;oBAAE,OAAO,YAAY,EAAE,CAAA;gBACtL,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,cAAc,KAAK,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;uBAC1H,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,MAAM,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,iBAAiB;uBACxK,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,gBAAgB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC;uBAC9I,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC;oBAAE,IAAI,CAAC,kCAAkC,CAAC,CAAA;gBACtH,MAAM,KAAK,GAAG,QAAQ,CAAC,8BAA+B,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,CAAA;gBAC7K,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAK,KAAgC,CAAC,QAAQ,KAAK,4CAA4C;oBAAE,IAAI,CAAC,+CAA+C,CAAC,CAAA;gBAC7L,OAAO,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa;wBACxH,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;wBACpH,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAA;YACtK,CAAC,CAAA;YACD,MAAM,YAAY,GAAG,GAAG,EAAE;gBACxB,MAAM,KAAK,GAAG,QAAQ,CAAC,sBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC,CAAA;gBACzE,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAA;gBACzF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,2CAA2C,IAAI,gBAAgB,IAAI,KAAK;uBACpG,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,MAAM;uBACrH,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK;uBAC9F,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB;uBACjI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;uBAC/G,OAAO,KAAK,CAAC,KAAK,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB;uBACnF,KAAK,CAAC,KAAK,CAAC,iBAAiB,KAAK,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,KAAK,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,IAAI,CAAC,WAAW;uBACpH,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC;uBAC5F,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC;oBAAE,IAAI,CAAC,sDAAsD,CAAC,CAAA;gBAClJ,uEAAuE;gBACvE,uEAAuE;gBACvE,IAAI,CAAC,MAAM,CAAC,WAAY,CAAC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;oBAAE,IAAI,CAAC,8CAA8C,CAAC,CAAA;gBAC/H,MAAM,KAAK,GAAG,QAAQ,CAAC,mCAAoC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,CAAA;gBAClL,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAK,KAAgC,CAAC,QAAQ,KAAK,wDAAwD;oBAAE,IAAI,CAAC,+CAA+C,CAAC,CAAA;gBACzM,MAAM,KAAK,GAAoB,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa;oBACjG,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB;oBACnI,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;oBACxI,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,EAAE,CAAA;gBAC5C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAA;YAClD,CAAC,CAAA;YACD,MAAM,OAAO,GAAG,OAAO,EAAE,EAAE,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;YAC/D,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC,KAAK,QAAQ;gBAAE,IAAI,CAAC,oBAAoB,CAAC,CAAA,CAAC,CAAC,CAAA;YAClG,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAqB,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAA;YACjF,yEAAyE;YACzE,yEAAyE;YACzE,qDAAqD;YACrD,MAAM,cAAc,GAAG,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;YAC7F,IAAI,cAAc,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,0BAA0B,KAAK,UAAU;gBAAE,IAAI,CAAC,yDAAyD,CAAC,CAAA;YAC5J,MAAM,QAAQ,GAAG,CAAC,QAA0C,EAAE,EAAE;gBAC9D,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAwD,CAAA;gBACjF,OAAO,CAAC,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC;uBACjG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;YAC/F,CAAC,CAAA;YACD,MAAM,QAAQ,GAAG,GAAG,EAAE;gBACpB,OAAO,EAAE,CAAC;gBAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAc,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAAC,OAAO,EAAE,CAAA;gBACrF,IAAI,QAAQ,EAAE,MAAM,KAAK,OAAO;oBAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAA;gBACnG,IAAI,cAAc,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAAE,IAAI,CAAC,mDAAmD,CAAC,CAAA;YACpH,CAAC,CAAA;YACD,QAAQ,EAAE,CAAA;YACV,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,cAAc,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,uBAAuB,IAAI,gBAAgB,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;gBAChS,MAAM,QAAQ,GAAG,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,cAAe,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,cAAc,EAAE,CAAC;oBACjH,CAAC,CAAC,MAAM,CAAC,0BAA2B,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAA;gBAC9G,OAAO,EAAE,CAAC;gBAAC,IAAI,QAAQ,EAAE,MAAM,KAAK,OAAO;oBAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAA;gBAC9G,IAAI,cAAc,KAAK,SAAS,IAAI,QAAQ,CAAC,eAAe,KAAK,cAAc;oBAAE,IAAI,CAAC,0DAA0D,CAAC,CAAA;YACnJ,CAAC;YACD,QAAQ,EAAE,CAAA;YACV,MAAM,KAAK,GAAoB,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,iBAAiB,EAAE,OAAO,CAAC,KAAK,CAAC,iBAAiB;gBACzH,gBAAgB,EAAE,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY;gBACpI,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvJ,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,CAAA;YACtF,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAA;YACvI,QAAQ,EAAE,CAAC;YAAC,OAAO,MAAM,CAAA;QAC3B,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAAC,CAAC;IAClC,CAAC;CACF"}

package/lib/owner-continuation.d.ts

@@ -0,0 +1,27 @@
+import type { WorkItemContinuation } from './continuation.js';
+import { type WorkItemContinuationAdmission } from './continuation-record.js';
+import { type OwnerWorkItemExecution, type WorkItemOwnerAccessDependencies } from './owner-access.js';
+import { type WorkItemAdmitInput, type WorkItemAdmitResult } from './types.js';
+export interface OwnerWorkItemContinueInput {
+    item_id: string;
+}
+export interface WorkItemOwnerContinuationDependencies extends WorkItemOwnerAccessDependencies {
+    runtime: () => WorkItemContinuation | undefined;
+    admit: (input: WorkItemAdmitInput, continuation: WorkItemContinuationAdmission) => WorkItemAdmitResult;
+}
+/** The model chooses only an owner-filtered parent id. The new instruction and
+ * supplier come exclusively from the current persisted human foreground task. */
+export declare class WorkItemOwnerContinuation {
+    #private;
+    private readonly dependencies;
+    constructor(dependencies: WorkItemOwnerContinuationDependencies);
+    preauthorize(execution: OwnerWorkItemExecution): boolean;
+    continue(execution: OwnerWorkItemExecution, input: OwnerWorkItemContinueInput): Readonly<{
+        itemId: string;
+        parentItemId: string;
+        rootItemId: string;
+        state: string;
+        replayed: boolean;
+    }>;
+}
+//# sourceMappingURL=owner-continuation.d.ts.map

package/lib/owner-continuation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-continuation.d.ts","sourceRoot":"","sources":["../src/owner-continuation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAE7D,OAAO,EAA2E,KAAK,6BAA6B,EAAE,MAAM,0BAA0B,CAAA;AACtJ,OAAO,EAAyC,KAAK,sBAAsB,EAAmC,KAAK,+BAA+B,EAAE,MAAM,mBAAmB,CAAA;AAE7K,OAAO,EAAiB,KAAK,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAE7F,MAAM,WAAW,0BAA0B;IAAG,OAAO,EAAE,MAAM,CAAA;CAAE;AAC/D,MAAM,WAAW,qCAAsC,SAAQ,+BAA+B;IAC5F,OAAO,EAAE,MAAM,oBAAoB,GAAG,SAAS,CAAA;IAC/C,KAAK,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,6BAA6B,KAAK,mBAAmB,CAAA;CACvG;AAiBD;iFACiF;AACjF,qBAAa,yBAAyB;;IAExB,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAAZ,YAAY,EAAE,qCAAqC;IA4BhF,YAAY,CAAC,SAAS,EAAE,sBAAsB,GAAG,OAAO;IAYxD,QAAQ,CAAC,SAAS,EAAE,sBAAsB,EAAE,KAAK,EAAE,0BAA0B,GAAG,QAAQ,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;CA6CzL"}

package/lib/owner-continuation.js

@@ -0,0 +1,131 @@
+import { acceptanceCanonicalJson, acceptanceDigest } from '@dsh-enhanced/task-acceptance-contract';
+import { truncateUtf8 } from './config.js';
+import { MAX_CONTINUATION_INPUT_BYTES, continuationDigest, continuationSourceKey } from './continuation-record.js';
+import { WorkItemOwnerAccess, ownerArgumentsOf } from './owner-access.js';
+import { WorkItemError } from './types.js';
+const HEX = /^[a-f0-9]{64}$/u;
+const ALLOWED = ['item_id'];
+const PAGE = 8192;
+function fail(message) { throw new WorkItemError('identity-mismatch', `owner continuation ${message}`); }
+function argumentsOf(execution, input) {
+    if (execution.name !== 'work_item_continue')
+        fail('tool identity mismatch');
+    const args = ownerArgumentsOf(input, ALLOWED, 'owner continuation');
+    if (typeof args.item_id !== 'string' || !/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/u.test(args.item_id))
+        throw new WorkItemError('invalid-input', 'invalid owner continuation item selector');
+    return args;
+}
+function validModel(value) {
+    return !!value && typeof value.provider === 'string' && typeof value.model === 'string'
+        && Object.keys(value).every(key => ['provider', 'model', 'reasoningEffort'].includes(key))
+        && [value.provider, value.model, ...(value.reasoningEffort === undefined ? [] : [value.reasoningEffort])].every(part => typeof part === 'string' && part.trim() === part && part.length > 0 && Buffer.byteLength(part) <= 4096 && !/\p{Cc}/u.test(part));
+}
+/** The model chooses only an owner-filtered parent id. The new instruction and
+ * supplier come exclusively from the current persisted human foreground task. */
+export class WorkItemOwnerContinuation {
+    dependencies;
+    #access;
+    constructor(dependencies) {
+        this.dependencies = dependencies;
+        this.#access = dependencies.access ?? new WorkItemOwnerAccess(dependencies);
+    }
+    #readPage(execution, context, offset) {
+        context.assertCurrent();
+        const read = context.delivery.readOwnerForegroundToolInput;
+        if (!read || !execution.agent)
+            fail('live human input reader is unavailable');
+        const page = read.call(context.delivery, { agent: execution.agent, authorityId: context.route.authorityId, callId: String(execution.callId),
+            toolName: execution.name, argumentsJson: JSON.stringify(ownerArgumentsOf(execution.arguments, ALLOWED, 'owner continuation')), offset, maxBytes: PAGE });
+        context.assertCurrent();
+        const proof = context.delivery.inspectOwnerForegroundToolCall({ agent: execution.agent, authorityId: context.route.authorityId,
+            callId: String(execution.callId), toolName: execution.name, argumentsJson: JSON.stringify(execution.arguments) });
+        if (!page || page.protocol !== 'assistant-delivery/foreground-tool-input/v1' || !HEX.test(page.sourceDigest)
+            || page.modelSelectionState !== 'frozen' || !validModel(page.modelSelection)
+            || page.attestation?.protocol !== 'assistant-delivery/foreground-tool-call/v1' || acceptanceDigest(page.attestation) !== acceptanceDigest(proof))
+            fail('human input or actual supplier is unproven');
+        const task = page.attestation.task, data = page.input;
+        if (!task || !task.scope || !task.owner || !task.binding || task.protocol !== 'assistant-delivery/foreground-task/v1' || task.sessionId !== String(execution.agent.session.id)
+            || task.scope.workspace !== context.route.workspace || task.scope.preset !== context.route.agentPreset
+            || task.owner.principalRecordId !== context.route.principalRecordId || task.owner.principalVersion !== context.route.principalVersion
+            || task.binding.version !== context.route.bindingVersion || task.binding.generation !== context.route.generation
+            || typeof task.binding.id !== 'string' || !/^[A-Za-z0-9][A-Za-z0-9:._-]{0,255}$/u.test(task.binding.id)
+            || typeof data?.text !== 'string' || Buffer.from(data.text, 'utf8').toString('utf8') !== data.text || !HEX.test(data.fullTextDigest)
+            || !Number.isSafeInteger(data.fullBytes) || data.fullBytes < 1 || data.fullBytes > MAX_CONTINUATION_INPUT_BYTES
+            || data.offset !== offset || data.returnedBytes !== Buffer.byteLength(data.text) || data.returnedBytes < 1 || data.returnedBytes > PAGE
+            || offset + data.returnedBytes > data.fullBytes || (data.nextOffset === undefined ? offset + data.returnedBytes !== data.fullBytes
+            : data.nextOffset !== offset + data.returnedBytes || data.nextOffset >= data.fullBytes))
+            fail('human input page binding differs');
+        return page;
+    }
+    preauthorize(execution) {
+        try {
+            const args = argumentsOf(execution, execution.arguments), runtime = this.dependencies.runtime();
+            if (!runtime)
+                return false;
+            return this.#access.withOwner(execution, args, ALLOWED, 'continue-work-items', false, context => {
+                if (!context.store.listOwnerItems(context.owner, undefined, 1, String(args.item_id))[0])
+                    return false;
+                this.#readPage(execution, context, 0);
+                return this.dependencies.runtime() === runtime;
+            });
+        }
+        catch {
+            return false;
+        }
+    }
+    continue(execution, input) {
+        const args = argumentsOf(execution, input), runtime = this.dependencies.runtime();
+        if (!runtime)
+            throw new WorkItemError('missing-dependency', 'owner continuation runtime is unavailable');
+        return this.#access.withOwner(execution, args, ALLOWED, 'continue-work-items', true, context => {
+            const parent = context.store.listOwnerItems(context.owner, undefined, 1, String(args.item_id))[0];
+            if (!parent)
+                throw new WorkItemError('not-found', 'no owner work item matches this continuation selector');
+            const first = this.#readPage(execution, context, 0), firstFingerprint = acceptanceDigest(first);
+            const identity = acceptanceCanonicalJson({ attestation: first.attestation, sourceDigest: first.sourceDigest,
+                modelSelection: first.modelSelection, fullTextDigest: first.input.fullTextDigest, fullBytes: first.input.fullBytes });
+            let page = first, text = '', count = 0;
+            for (;;) {
+                if (++count > 34 || acceptanceCanonicalJson({ attestation: page.attestation, sourceDigest: page.sourceDigest,
+                    modelSelection: page.modelSelection, fullTextDigest: page.input.fullTextDigest, fullBytes: page.input.fullBytes }) !== identity)
+                    fail('human input changed during pagination');
+                text += page.input.text;
+                if (Buffer.byteLength(text) > MAX_CONTINUATION_INPUT_BYTES)
+                    fail('human input exceeds byte bound');
+                if (page.input.nextOffset === undefined)
+                    break;
+                page = this.#readPage(execution, context, page.input.nextOffset);
+            }
+            if (Buffer.byteLength(text) !== first.input.fullBytes || continuationDigest(text) !== first.input.fullTextDigest)
+                fail('human input full digest differs');
+            const source = Object.freeze({ sourceDigest: first.sourceDigest, inputText: text, modelSelection: Object.freeze({ ...first.modelSelection }) });
+            const assertCurrent = () => {
+                context.assertCurrent();
+                if (this.dependencies.runtime() !== runtime || acceptanceDigest(this.#readPage(execution, context, 0)) !== firstFingerprint)
+                    fail('source or runtime changed before admission');
+            };
+            assertCurrent();
+            const continuation = runtime.prepare(parent.id, source, assertCurrent);
+            if (continuation.parentItemId !== parent.id || continuation.sourceDigest !== source.sourceDigest || continuation.sourceKey !== continuationSourceKey(parent.id, source.sourceDigest))
+                fail('runtime admission identity differs');
+            assertCurrent();
+            const result = this.dependencies.admit({ kind: 'owner-continuation', externalId: continuation.sourceKey,
+                title: truncateUtf8(`Continue: ${parent.title}`, 256).value,
+                brief: 'Continue this owner task. Call work_item_read_context to read the authenticated owner instruction and linked history before acting.',
+                originBindingId: first.attestation.task.binding.id,
+                provenance: { source: 'owner-continuation', sourceVersion: 'assistant-work-items/owner-continuation/v1', signalDigest: source.sourceDigest,
+                    observedAt: Date.now(), evidence: { parentItemId: parent.id, sourceDigest: source.sourceDigest } } }, continuation);
+            assertCurrent();
+            const record = context.store.getContinuation(result.item.id);
+            if (!record || record.parentItemId !== parent.id || record.sourceKey !== continuation.sourceKey || record.sourceDigest !== source.sourceDigest
+                || record.rootItemId !== (context.store.getContinuation(parent.id)?.rootItemId ?? parent.id)
+                || result.item.workerAutomationId !== this.dependencies.config.ownerContinuation.automationId)
+                fail('admitted continuation record differs');
+            runtime.wakePending();
+            assertCurrent();
+            return Object.freeze({ itemId: result.item.id, parentItemId: record.parentItemId, rootItemId: record.rootItemId,
+                state: context.store.findItemById(result.item.id)?.state ?? result.item.state, replayed: !result.created });
+        });
+    }
+}
+//# sourceMappingURL=owner-continuation.js.map

package/lib/owner-continuation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-continuation.js","sourceRoot":"","sources":["../src/owner-continuation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAA;AAClG,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C,OAAO,EAAE,4BAA4B,EAAE,kBAAkB,EAAE,qBAAqB,EAAsC,MAAM,0BAA0B,CAAA;AACtJ,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAsG,MAAM,mBAAmB,CAAA;AAE7K,OAAO,EAAE,aAAa,EAAqD,MAAM,YAAY,CAAA;AAO7F,MAAM,GAAG,GAAG,iBAAiB,CAAA;AAC7B,MAAM,OAAO,GAAG,CAAC,SAAS,CAAU,CAAA;AACpC,MAAM,IAAI,GAAG,IAAI,CAAA;AACjB,SAAS,IAAI,CAAC,OAAe,IAAW,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,sBAAsB,OAAO,EAAE,CAAC,CAAA,CAAC,CAAC;AACvH,SAAS,WAAW,CAAC,SAAiC,EAAE,KAAc;IACpE,IAAI,SAAS,CAAC,IAAI,KAAK,oBAAoB;QAAE,IAAI,CAAC,wBAAwB,CAAC,CAAA;IAC3E,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAA;IACnE,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,0CAA0C,CAAC,CAAA;IACxL,OAAO,IAAI,CAAA;AACb,CAAC;AACD,SAAS,UAAU,CAAC,KAAqD;IACvE,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;WAClF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;WACvF,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;AAC5P,CAAC;AAED;iFACiF;AACjF,MAAM,OAAO,yBAAyB;IAEP;IADpB,OAAO,CAAqB;IACrC,YAA6B,YAAmD;QAAnD,iBAAY,GAAZ,YAAY,CAAuC;QAAI,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC,MAAM,IAAI,IAAI,mBAAmB,CAAC,YAAY,CAAC,CAAA;IAAC,CAAC;IAEjK,SAAS,CAAC,SAAiC,EAAE,OAAmC,EAAE,MAAc;QAC9F,OAAO,CAAC,aAAa,EAAE,CAAA;QACvB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAA;QAC1D,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK;YAAE,IAAI,CAAC,wCAAwC,CAAC,CAAA;QAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YACzI,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1J,OAAO,CAAC,aAAa,EAAE,CAAA;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,8BAA+B,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW;YAC7H,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;QACnH,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,6CAA6C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;eACvG,IAAI,CAAC,mBAAmB,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC;eACzE,IAAI,CAAC,WAAW,EAAE,QAAQ,KAAK,4CAA4C,IAAI,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,gBAAgB,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,4CAA4C,CAAC,CAAA;QACtM,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAA;QACrD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,uCAAuC,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;eACzK,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,WAAW;eACnG,IAAI,CAAC,KAAK,CAAC,iBAAiB,KAAK,OAAO,CAAC,KAAK,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,CAAC,gBAAgB,KAAK,OAAO,CAAC,KAAK,CAAC,gBAAgB;eAClI,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,KAAK,CAAC,UAAU;eAC7G,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;eACpG,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;eACjI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,4BAA4B;eAC5G,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,KAAK,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,IAAI,CAAC,aAAa,GAAG,IAAI;eACpI,MAAM,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC,SAAS;YAChI,CAAC,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC;YAAE,IAAI,CAAC,kCAAkC,CAAC,CAAA;QACrI,OAAO,IAAI,CAAA;IACb,CAAC;IAED,YAAY,CAAC,SAAiC;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAA;YAC/F,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAA;YAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE;gBAC9F,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAA;gBACrG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;gBACrC,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,OAAO,CAAA;YAChD,CAAC,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAA;QAAC,CAAC;IAC1B,CAAC;IAED,QAAQ,CAAC,SAAiC,EAAE,KAAiC;QAC3E,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAA;QACjF,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,2CAA2C,CAAC,CAAA;QACxG,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;YAC7F,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACjG,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,uDAAuD,CAAC,CAAA;YAC1G,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,gBAAgB,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;YAC/F,MAAM,QAAQ,GAAG,uBAAuB,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY;gBACzG,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;YACvH,IAAI,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,CAAC,CAAA;YACtC,SAAS,CAAC;gBACR,IAAI,EAAE,KAAK,GAAG,EAAE,IAAI,uBAAuB,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC1G,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,KAAK,QAAQ;oBAAE,IAAI,CAAC,uCAAuC,CAAC,CAAA;gBAChL,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAA;gBACvB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,4BAA4B;oBAAE,IAAI,CAAC,gCAAgC,CAAC,CAAA;gBAClG,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;oBAAE,MAAK;gBAC9C,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;YAClE,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,SAAS,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,cAAc;gBAAE,IAAI,CAAC,iCAAiC,CAAC,CAAA;YACzJ,MAAM,MAAM,GAAuB,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,cAAe,EAAE,CAAC,EAAE,CAAC,CAAA;YACpK,MAAM,aAAa,GAAG,GAAG,EAAE;gBACzB,OAAO,CAAC,aAAa,EAAE,CAAA;gBACvB,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,gBAAgB;oBAAE,IAAI,CAAC,4CAA4C,CAAC,CAAA;YACjL,CAAC,CAAA;YACD,aAAa,EAAE,CAAA;YACf,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,CAAA;YACtE,IAAI,YAAY,CAAC,YAAY,KAAK,MAAM,CAAC,EAAE,IAAI,YAAY,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,IAAI,YAAY,CAAC,SAAS,KAAK,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,YAAY,CAAC;gBAAE,IAAI,CAAC,oCAAoC,CAAC,CAAA;YAChO,aAAa,EAAE,CAAA;YACf,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,YAAY,CAAC,SAAS;gBACrG,KAAK,EAAE,YAAY,CAAC,aAAa,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK;gBAC3D,KAAK,EAAE,qIAAqI;gBAC5I,eAAe,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;gBAClD,UAAU,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,aAAa,EAAE,4CAA4C,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY;oBACxI,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,YAAY,CAAC,CAAA;YACvH,aAAa,EAAE,CAAA;YACf,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC5D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,SAAS,KAAK,YAAY,CAAC,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY;mBACzI,MAAM,CAAC,UAAU,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,UAAU,IAAI,MAAM,CAAC,EAAE,CAAC;mBACzF,MAAM,CAAC,IAAI,CAAC,kBAAkB,KAAK,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,iBAAkB,CAAC,YAAY;gBAAE,IAAI,CAAC,sCAAsC,CAAC,CAAA;YAC9I,OAAO,CAAC,WAAW,EAAE,CAAA;YACrB,aAAa,EAAE,CAAA;YACf,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7G,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;QAC/G,CAAC,CAAC,CAAA;IACJ,CAAC;CACF"}

package/lib/owner-recall.d.ts

@@ -0,0 +1,85 @@
+import { type OwnerWorkItemExecution, type WorkItemOwnerAccessDependencies } from './owner-access.js';
+import { type WorkItemResumeReport } from './types.js';
+export interface OwnerWorkItemListInput {
+    after?: string;
+    limit?: number;
+}
+export interface OwnerWorkItemRecallInput {
+    item_id: string;
+    report_revision?: number;
+    offset?: number;
+    max_bytes?: number;
+}
+export type { OwnerWorkItemExecution } from './owner-access.js';
+export interface OwnerWorkItemSummary {
+    continuation?: Readonly<{
+        parentItemId: string;
+        rootItemId: string;
+    }>;
+    itemId: string;
+    kind: string;
+    title: string;
+    state: string;
+    stateReason: string | null;
+    lastReport?: WorkItemResumeReport;
+    attempt: number;
+    maxAttempts: number;
+    lastReportStatus: string | null;
+    observed: boolean;
+    createdAt: number;
+    updatedAt: number;
+}
+/** Separate foreground read capability. It never admits, recovers, claims or dispatches. */
+export declare class WorkItemOwnerRecall {
+    #private;
+    constructor(dependencies: WorkItemOwnerAccessDependencies);
+    preauthorize(execution: OwnerWorkItemExecution): boolean;
+    list(execution: OwnerWorkItemExecution, input: OwnerWorkItemListInput): Readonly<{
+        nextCursor?: string;
+        items: readonly Readonly<{
+            lastReport?: WorkItemResumeReport;
+            continuation?: Readonly<{
+                parentItemId: string;
+                rootItemId: string;
+            }>;
+            itemId: string;
+            kind: string;
+            title: string;
+            state: string;
+            stateReason: string | null;
+            attempt: number;
+            maxAttempts: number;
+            lastReportStatus: string | null;
+            observed: boolean;
+            createdAt: number;
+            updatedAt: number;
+        }>[];
+    }>;
+    recall(execution: OwnerWorkItemExecution, input: OwnerWorkItemRecallInput): Readonly<{
+        item: Readonly<OwnerWorkItemSummary>;
+        content: Readonly<{
+            storedTruncated: boolean;
+            nextOffset?: number;
+            text: string;
+            fullBytes: number;
+            returnedBytes: number;
+            offset: number;
+            nextRevision?: number;
+            previousRevision?: number;
+            reportRevision?: number;
+            status?: import("./types.js").WorkItemReportStatus;
+            recordedAt?: number;
+            kind: "brief" | "report";
+        }>;
+        reports: readonly Readonly<{
+            summary: string;
+            summaryTruncated: boolean;
+            revision: number;
+            status: import("./types.js").WorkItemReportStatus;
+            recordedAt: number;
+        }>[];
+        reportsTotal: number;
+        latestOutcome: import("./types.js").WorkItemResumeOutcome | null;
+    }>;
+}
+//# sourceMappingURL=owner-recall.d.ts.map

package/lib/owner-recall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-recall.d.ts","sourceRoot":"","sources":["../src/owner-recall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwD,KAAK,sBAAsB,EAAE,KAAK,+BAA+B,EAAE,MAAM,mBAAmB,CAAA;AAG3J,OAAO,EAAsC,KAAK,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAE1F,MAAM,WAAW,sBAAsB;IAAG,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AAC1E,MAAM,WAAW,wBAAwB;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;AAC5H,YAAY,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAC/D,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,EAAE,QAAQ,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACrE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACvF,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAClK;AAaD,4FAA4F;AAC5F,qBAAa,mBAAmB;;gBAElB,YAAY,EAAE,+BAA+B;IAYzD,YAAY,CAAC,SAAS,EAAE,sBAAsB,GAAG,OAAO;IAqBxD,IAAI,CAAC,SAAS,EAAE,sBAAsB,EAAE,KAAK,EAAE,sBAAsB;;;yBAlDxD,oBAAoB;2BAFlB,QAAQ,CAAC;gBAAE,YAAY,EAAE,MAAM,CAAC;gBAAC,UAAU,EAAE,MAAM,CAAA;aAAE,CAAC;oBAC7D,MAAM;kBAAQ,MAAM;mBAAS,MAAM;mBAAS,MAAM;yBAAe,MAAM,GAAG,IAAI;qBAC1C,MAAM;yBAAe,MAAM;8BAAoB,MAAM,GAAG,IAAI;sBAAY,OAAO;uBAAa,MAAM;uBAAa,MAAM;;;IAoEjK,MAAM,CAAC,SAAS,EAAE,sBAAsB,EAAE,KAAK,EAAE,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;CA2C1E"}