@dsh-enhanced/personal-wiki 0.1.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 dsh-enhanced contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,100 @@
+# @dsh-enhanced/personal-wiki
+
+面向个人助理的 Markdown 知识库。页面是人可读、可备份的唯一真源；进程内目录、段落检索索引、反链与 lint 报告都可从页面重建。它保存研究、项目、人物、概念、来源与决策等长资料；每轮都可能有用的短事实和偏好应交给 `personal-memory`。
+
+## 安装
+
+本插件要求 `@dsh-enhanced/assistant-policy` 先提供 `ctx.assistantPolicy`。生产聊天审批还应组合可选的 `@dsh-enhanced/assistant-delivery`；Wiki 只依赖它的公开类型与 Cordis service，不把 Delivery 打进自己的发布包：
+
+```sh
+dsh plugin --profile web add @dsh-enhanced/assistant-policy
+dsh plugin --profile web add @dsh-enhanced/assistant-delivery
+dsh plugin --profile web add @dsh-enhanced/personal-wiki
+dsh --profile web --dump-config
+```
+
+默认页面位于 `$DSH_HOME/personal-wiki/vault/wiki/`，提案状态位于 `$DSH_HOME/personal-wiki/state.sqlite`。默认 policy 没有 allow 规则，因此所有模型操作都会 fail closed。按真实 preset 与绝对 workspace 放行所需服务和工具：
+
+```yaml
+- id: dsh-enhanced-assistant-policy
+  name: '@dsh-enhanced/assistant-policy'
+  config:
+    databasePath: !!js dshHomePath('assistant-policy/policy.sqlite')
+    rules:
+      - id: allow-primary-wiki-service
+        effect: allow
+        subject: { kind: agent, id: primary, workspace: /absolute/workspace }
+        actions: [lint, propose, read, rebuild, search]
+        resource: { kind: wiki, id: "*" }
+        context: { initiators: [foreground] }
+      - id: allow-primary-wiki-tools
+        effect: allow
+        subject: { kind: agent, id: primary, workspace: /absolute/workspace }
+        actions: [execute]
+        resource: { kind: tool, id: wiki_* }
+        context: { initiators: [foreground] }
+    budgets: []
+```
+
+## 工具和写入语义
+
+- `wiki_search`：显式搜索页与段落，支持 ASCII 和中文 unigram/bigram，返回有界 snippet、稳定 page id、相对路径、revision 与直接来源。
+- `wiki_read`：用 `wiki://<ULID>`、ULID、精确标题或别名读取一页；输出受字节/段落双预算约束，并以 `<knowledge_source>` 标记为“不可信数据而非指令”。标题和正文会先做 XML 文本转义，页面无法闭合该数据边界。
+- `wiki_upsert`：只提交完整 create/update 提案。update 必须带 `page_id` 与 `expected_revision`；模型没有直接写页的方法，也不能提供 principal、workspace、飞书 binding、审批 TTL 或页面 authority。TTL 与 authority 分别由可信配置 `defaultProposalTtlMs`、`toolProposalAuthority` 决定。
+- `wiki_lint`：只读报告坏 frontmatter、重复 id/标题/别名、大小写路径碰撞、死链、孤页、来源哈希、派生 provenance 和进程索引漂移；不会修复或重建。
+
+`wiki_search`、`wiki_upsert` 和 `wiki_lint` 的模型可见结果也分别放在有界、XML 转义的 `<wiki_search_results>`、`<wiki_proposal_results>`、`<wiki_lint_results>` 数据 framing 中。
+
+插件还注册一个短的 `personal-wiki-workflow` Skill，要求 search/read 后再提案、保留 `wiki://` 引用、把来源视为数据，并禁止绕过审批直接用 shell 改 vault。
+
+`wiki_upsert` 会从当前 Agent 的 Delivery owner binding 派生 exact principal、workspace 和 binding，并让 Policy 在创建提案的同一事务中持久化审批投递。模型无法改写该路由。没有 Delivery 的可信 headless 宿主仍可通过 `ctx.personalWiki.propose(..., { principal })` 显式指定 principal；模型工具没有这个兼容入口，缺少路由时会 fail closed。
+
+`ctx.personalWiki.decideProposal(...)` 面向可信通道/UI。提案绑定 principal、TTL、版本和完整目标 Markdown。direct decide 与重启 reconcile 都使用 Policy 的共享 settlement validator，逐项核对 proposal id、requester、principal、action、resource、summary、expiry、version、decider 和本地 exact diff 的 SHA-256；任一不一致会持久化为 `conflicted`，绝不写 vault。批准 update 时还会重新读取 SHA-256 revision；外部编辑同样令提案进入 `conflicted`，不会覆盖新内容。policy 与 Wiki 状态分别持久化；Wiki 会先保存含 absolute deadline 和 exact dispatch 的恢复意图，再调用 Policy 的单事务 recover-or-create。Policy 会优先返回已存在的 exact proposal；若 deadline 已过且 proposal 不存在，则永久 tombstone 该 idempotency key，阻止另一个进程随后创建孤儿审批或续期。即使 Policy proposal 已提交、投递或批准而本地 attachment 尚未提交，重启后的 reconcile 也能找回同一 proposal，无需原 Agent 再提一次。只读 scoped lookup 仅用于诊断，不参与创建决策。
+
+## 页面与重建
+
+页面只位于固定目录 `wiki/{sources,people,projects,concepts,decisions,questions,meta}`。严格 JSON-compatible YAML frontmatter 包含 ULID、标题、类型、状态、authority、tags、aliases、直接 sources、创建/更新时间；未知字段和坏 SHA-256 会明确报错。`curated` 页面是独立真源；`derived` 页面必须指向直接 curated evidence，禁止 derived page 再总结 derived page。
+
+启动时构建不可变进程快照。人工编辑后需显式 `rebuild` 才进入 search/read；失败的 rebuild 保留上一个可用快照。页面写入使用同目录 `0600` 临时文件、文件 fsync、atomic rename 和目录 fsync。页面目录为 `0700`，拒绝相对 root、`..`、绝对子路径、symlink、非普通文件、越界 realpath、大小写碰撞和超限页面。
+
+备份时以整个 `vault/wiki` 为准；`state.sqlite` 只需在还要保留未决审批时一并备份。删除进程索引无需恢复，因为它只存在内存中。
+
+## 配置上限
+
+| 字段 | 默认值 | 作用 |
+|---|---:|---|
+| `maxPageBytes` | 1048576 | 单页 Markdown 最大 UTF-8 字节数 |
+| `searchLimit` | 20 | 默认搜索命中上限（硬上限 100） |
+| `maxSnippetBytes` | 2048 | 单条搜索片段字节上限 |
+| `readMaxBytes` | 8192 | 单次读取总字节上限 |
+| `readMaxParagraphs` | 40 | 单次读取段落上限 |
+| `lintLimit` | 200 | 默认 lint finding 上限 |
+| `defaultProposalTtlMs` | 900000 | 默认提案有效期（15 分钟） |
+| `toolProposalAuthority` | `curated` | 可信部署为所有模型 `wiki_upsert` 固定的 `curated`/`derived` 分类；模型不可覆盖 |
+| `reconcileIntervalMs` | 15000 | 提交“会话结束后才被批准”的提案的轮询间隔；`0` 关闭定时器 |
+| `reconcileLimit` | 50 | 每轮 reconcile 检查的本地待决提案上限 |
+
+## 延迟审批的提交闭环
+
+`wiki_upsert` 只创建提案。审批可能发生在原 turn 结束之后（例如几分钟后在飞书卡片上点击），因此本插件会周期性调用 `reconcileProposals()`：读取 policy 账本中该提案的**终态**，再走与 `decideProposal` 相同的写入路径（同目录 temp + fsync + 原子 rename）。
+
+五条边界：
+
+- **不推断批准**：pending 仍然是 pending；只有 policy 账本给出终态才写 vault。
+- **幂等**：重复 reconcile 不会重复写页面或重复结算。
+- **公平扫描**：reconcile cursor 和每轮固定 high-water 都持久化；本轮开始后的新增提案留到下一轮，前面的长期 pending 不会饿死后面已批准的提案，重启也不会回到第一页。
+- **不复活旧意图**：Policy 尚未提交且 absolute deadline 已过时，会在 Policy 同一写事务中 tombstone idempotency key，并把本地意图置为 `conflicted`；多进程竞争也不能随后生成孤儿卡片。
+- **冲突不丢决定**：`expectedRevision` 已变化或 Policy settlement 的不可变字段不匹配时，提案持久化为 `conflicted`，而不是覆盖文件或反复重试。
+
+需要完全由宿主驱动时，把 `reconcileIntervalMs` 设为 `0` 并自行调用 `reconcileProposals()`。
+
+## 权限与非目标
+
+- 文件系统：只读写显式 `vaultRoot`、`databasePath` 及 SQLite WAL/SHM；不会扫描工作区或任意绝对路径。
+- 网络、子进程、凭据、浏览器、安装脚本：本插件自身无；组合 Delivery 时只提交不可变审批 dispatch，由 Delivery/Lark 各自声明并持有网络与凭据权限。
+- Git：不执行 add/commit/push；用户可在 vault 外部自行纳入版本控制。
+- 非目标：PDF/DOCX/web ingest、向量数据库、Web UI、自动摘要写入、自动 archive、自动 Git commit、远端/多 vault 同步、Memory 双向同步、图数据库和多用户 ACL。
+
+## 兼容性
+
+已针对 DeepSeek Harness `0.1.0-rc.8`（源码提交 `141eb6fef83422698aef7a981029e843e8161534`）验证。详见仓库[兼容性基线](../../docs/compatibility.md)。

package/cordis.patch.yml

@@ -0,0 +1,18 @@
+- insert:
+    - id: dsh-enhanced-personal-wiki
+      name: '@dsh-enhanced/personal-wiki'
+      inject:
+        - assistantPolicy
+      config:
+        vaultRoot: !!js dshHomePath('personal-wiki/vault')
+        databasePath: !!js dshHomePath('personal-wiki/state.sqlite')
+        maxPageBytes: 1048576
+        searchLimit: 20
+        maxSnippetBytes: 2048
+        readMaxBytes: 8192
+        readMaxParagraphs: 40
+        lintLimit: 200
+        defaultProposalTtlMs: 900000
+        toolProposalAuthority: curated
+        reconcileIntervalMs: 15000
+        reconcileLimit: 50

package/lib/index.d.ts

@@ -0,0 +1,11 @@
+import type { Context } from '@deepseek-ai/cordis';
+import { PersonalWikiService } from './service.js';
+import type { Config } from './service.js';
+import { version } from './version.js';
+export declare const name = "dsh-enhanced-personal-wiki";
+export { PersonalWikiService, version };
+export type { Config };
+export type * from './types.js';
+export declare function apply(ctx: Context, config: import('./service.js').Config): void;
+export default PersonalWikiService;
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,eAAO,MAAM,IAAI,+BAA+B,CAAA;AAChD,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAA;AACvC,YAAY,EAAE,MAAM,EAAE,CAAA;AACtB,mBAAmB,YAAY,CAAA;AAE/B,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,cAAc,EAAE,MAAM,GAAG,IAAI,CAE/E;AAED,eAAe,mBAAmB,CAAA"}

package/lib/index.js

@@ -0,0 +1,9 @@
+import { PersonalWikiService } from './service.js';
+import { version } from './version.js';
+export const name = 'dsh-enhanced-personal-wiki';
+export { PersonalWikiService, version };
+export function apply(ctx, config) {
+    new PersonalWikiService(ctx, config);
+}
+export default PersonalWikiService;
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,MAAM,CAAC,MAAM,IAAI,GAAG,4BAA4B,CAAA;AAChD,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAA;AAIvC,MAAM,UAAU,KAAK,CAAC,GAAY,EAAE,MAAqC;IACvE,IAAI,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AACtC,CAAC;AAED,eAAe,mBAAmB,CAAA"}

package/lib/page.d.ts

@@ -0,0 +1,12 @@
+import type { WikiPage, WikiPageInput, WikiPageMetadata } from './types.js';
+export declare class WikiPageError extends Error {
+    readonly code: 'invalid-frontmatter' | 'invalid-page';
+    constructor(code: 'invalid-frontmatter' | 'invalid-page', message: string);
+}
+export declare function createPageId(now: number, entropy?: Uint8Array): string;
+export declare function validatePageInput(input: WikiPageInput): WikiPageInput;
+export declare function validateMetadata(value: unknown): WikiPageMetadata;
+export declare function serializePage(metadata: WikiPageMetadata, body: string): string;
+export declare function parsePage(markdown: string, relativePath: string): WikiPage;
+export declare function pageSlug(title: string): string;
+//# sourceMappingURL=page.d.ts.map

package/lib/page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page.d.ts","sourceRoot":"","sources":["../src/page.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,QAAQ,EAER,aAAa,EACb,gBAAgB,EAIjB,MAAM,YAAY,CAAA;AAcnB,qBAAa,aAAc,SAAQ,KAAK;IAC1B,QAAQ,CAAC,IAAI,EAAE,qBAAqB,GAAG,cAAc;gBAA5C,IAAI,EAAE,qBAAqB,GAAG,cAAc,EAAE,OAAO,EAAE,MAAM;CAInF;AAYD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,UAA4B,GAAG,MAAM,CAQvF;AA8CD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,aAAa,CA2BrE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAuCjE;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAe9E;AAED,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,QAAQ,CAoB1E;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM9C"}

package/lib/page.js

@@ -0,0 +1,204 @@
+import { createHash, randomBytes } from 'node:crypto';
+const ULID = /^[0-9A-HJKMNP-TV-Z]{26}$/;
+const SHA256 = /^[a-f0-9]{64}$/;
+const PAGE_TYPES = new Set([
+    'concept', 'decision', 'meta', 'person', 'project', 'question', 'source',
+]);
+const AUTHORITIES = new Set(['curated', 'derived']);
+const STATUSES = new Set(['active', 'archived', 'draft']);
+const FRONTMATTER_KEYS = new Set([
+    'aliases', 'authority', 'created', 'derivedFrom', 'id', 'sources', 'status', 'tags', 'title', 'type', 'updated',
+]);
+const CROCKFORD = '0123456789ABCDEFGHJKMNPQRSTVWXYZ';
+export class WikiPageError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'WikiPageError';
+    }
+}
+function encodeBase32(value, length) {
+    let remaining = value;
+    let output = '';
+    for (let index = 0; index < length; index += 1) {
+        output = CROCKFORD[Number(remaining & 31n)] + output;
+        remaining >>= 5n;
+    }
+    return output;
+}
+export function createPageId(now, entropy = randomBytes(10)) {
+    if (!Number.isSafeInteger(now) || now < 0 || now > 0xffff_ffff_ffff) {
+        throw new WikiPageError('invalid-page', 'page timestamp is outside the ULID range');
+    }
+    if (entropy.length !== 10)
+        throw new WikiPageError('invalid-page', 'page id entropy must be 10 bytes');
+    let random = 0n;
+    for (const byte of entropy)
+        random = (random << 8n) | BigInt(byte);
+    return encodeBase32(BigInt(now), 10) + encodeBase32(random, 16);
+}
+function text(value, field) {
+    if (typeof value !== 'string' || value.trim() === '') {
+        throw new WikiPageError('invalid-page', `${field} must be a non-empty string`);
+    }
+    return value.normalize('NFC').trim();
+}
+function stringList(value, field) {
+    if (!Array.isArray(value))
+        throw new WikiPageError('invalid-page', `${field} must be an array`);
+    const normalized = value.map(item => text(item, field));
+    const folded = new Set();
+    for (const item of normalized) {
+        const key = item.normalize('NFKC').toLocaleLowerCase('en-US');
+        if (folded.has(key))
+            throw new WikiPageError('invalid-page', `${field} contains a duplicate`);
+        folded.add(key);
+    }
+    return normalized;
+}
+function sources(value) {
+    if (!Array.isArray(value))
+        throw new WikiPageError('invalid-page', 'sources must be an array');
+    return value.map((item) => {
+        if (typeof item !== 'object' || item === null || Array.isArray(item)) {
+            throw new WikiPageError('invalid-page', 'source must be an object');
+        }
+        const source = item;
+        if (Object.keys(source).some(key => key !== 'sha256' && key !== 'uri')) {
+            throw new WikiPageError('invalid-page', 'source contains an unknown field');
+        }
+        const uri = text(source['uri'], 'source uri');
+        const sha256 = text(source['sha256'], 'source sha256').toLocaleLowerCase('en-US');
+        if (!SHA256.test(sha256))
+            throw new WikiPageError('invalid-page', 'source sha256 must be 64 lowercase hex');
+        return Object.freeze({ uri, sha256 });
+    });
+}
+function timestamp(value, field) {
+    const normalized = text(value, field);
+    if (!Number.isFinite(Date.parse(normalized)) || new Date(normalized).toISOString() !== normalized) {
+        throw new WikiPageError('invalid-page', `${field} must be a canonical ISO timestamp`);
+    }
+    return normalized;
+}
+export function validatePageInput(input) {
+    const title = text(input.title, 'title');
+    if (!PAGE_TYPES.has(input.type))
+        throw new WikiPageError('invalid-page', 'invalid page type');
+    if (!AUTHORITIES.has(input.authority))
+        throw new WikiPageError('invalid-page', 'invalid page authority');
+    if (!STATUSES.has(input.status))
+        throw new WikiPageError('invalid-page', 'invalid page status');
+    const tags = stringList(input.tags, 'tags');
+    const aliases = stringList(input.aliases, 'aliases');
+    const pageSources = sources(input.sources);
+    const derivedFrom = input.derivedFrom === undefined ? undefined : stringList(input.derivedFrom, 'derivedFrom');
+    if (derivedFrom?.some(id => !ULID.test(id))) {
+        throw new WikiPageError('invalid-page', 'derivedFrom must contain page ULIDs');
+    }
+    if (input.authority === 'derived' && pageSources.length === 0 && (derivedFrom?.length ?? 0) === 0) {
+        throw new WikiPageError('invalid-page', 'derived pages require direct source evidence');
+    }
+    if (typeof input.body !== 'string')
+        throw new WikiPageError('invalid-page', 'body must be a string');
+    return Object.freeze({
+        title,
+        type: input.type,
+        authority: input.authority,
+        status: input.status,
+        tags: Object.freeze(tags),
+        aliases: Object.freeze(aliases),
+        sources: Object.freeze(pageSources),
+        ...(derivedFrom === undefined ? {} : { derivedFrom: Object.freeze(derivedFrom) }),
+        body: input.body.normalize('NFC'),
+    });
+}
+export function validateMetadata(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+        throw new WikiPageError('invalid-frontmatter', 'frontmatter must be an object');
+    }
+    const input = value;
+    if (Object.keys(input).some(key => !FRONTMATTER_KEYS.has(key))) {
+        throw new WikiPageError('invalid-frontmatter', 'frontmatter contains an unknown field');
+    }
+    const id = text(input['id'], 'id');
+    if (!ULID.test(id))
+        throw new WikiPageError('invalid-page', 'page id must be a ULID');
+    const created = timestamp(input['created'], 'created');
+    const updated = timestamp(input['updated'], 'updated');
+    if (Date.parse(updated) < Date.parse(created)) {
+        throw new WikiPageError('invalid-page', 'page updated timestamp precedes created');
+    }
+    const page = validatePageInput({
+        title: input['title'],
+        type: input['type'],
+        authority: input['authority'],
+        status: input['status'],
+        tags: input['tags'],
+        aliases: input['aliases'],
+        sources: input['sources'],
+        ...(input['derivedFrom'] === undefined ? {} : { derivedFrom: input['derivedFrom'] }),
+        body: '',
+    });
+    return Object.freeze({
+        id,
+        title: page.title,
+        type: page.type,
+        authority: page.authority,
+        status: page.status,
+        tags: page.tags,
+        aliases: page.aliases,
+        sources: page.sources,
+        ...(page.derivedFrom === undefined ? {} : { derivedFrom: page.derivedFrom }),
+        created,
+        updated,
+    });
+}
+export function serializePage(metadata, body) {
+    const document = {
+        id: metadata.id,
+        title: metadata.title,
+        type: metadata.type,
+        authority: metadata.authority,
+        status: metadata.status,
+        tags: metadata.tags,
+        aliases: metadata.aliases,
+        sources: metadata.sources,
+        ...(metadata.derivedFrom === undefined ? {} : { derivedFrom: metadata.derivedFrom }),
+        created: metadata.created,
+        updated: metadata.updated,
+    };
+    return `---\n${JSON.stringify(document, null, 2)}\n---\n${body}`;
+}
+export function parsePage(markdown, relativePath) {
+    if (!markdown.startsWith('---\n')) {
+        throw new WikiPageError('invalid-frontmatter', 'page must start with frontmatter');
+    }
+    const boundary = markdown.indexOf('\n---\n', 4);
+    if (boundary < 0)
+        throw new WikiPageError('invalid-frontmatter', 'page frontmatter is not closed');
+    let decoded;
+    try {
+        decoded = JSON.parse(markdown.slice(4, boundary));
+    }
+    catch (error) {
+        throw new WikiPageError('invalid-frontmatter', `page frontmatter is not valid JSON-compatible YAML: ${String(error)}`);
+    }
+    const metadata = validateMetadata(decoded);
+    const body = markdown.slice(boundary + 5).normalize('NFC');
+    return Object.freeze({
+        metadata,
+        body,
+        relativePath,
+        revision: createHash('sha256').update(markdown).digest('hex'),
+    });
+}
+export function pageSlug(title) {
+    const slug = title.normalize('NFKD').toLocaleLowerCase('en-US')
+        .replaceAll(/[^\p{Letter}\p{Number}]+/gu, '-')
+        .replaceAll(/^-|-$/g, '')
+        .slice(0, 60);
+    return slug === '' ? 'page' : slug;
+}
+//# sourceMappingURL=page.js.map

package/lib/page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"page.js","sourceRoot":"","sources":["../src/page.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAWrD,MAAM,IAAI,GAAG,0BAA0B,CAAA;AACvC,MAAM,MAAM,GAAG,gBAAgB,CAAA;AAC/B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAe;IACvC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ;CACzE,CAAC,CAAA;AACF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAoB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;AACtE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAiB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;AACzE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS;CAChH,CAAC,CAAA;AACF,MAAM,SAAS,GAAG,kCAAkC,CAAA;AAEpD,MAAM,OAAO,aAAc,SAAQ,KAAK;IACjB;IAArB,YAAqB,IAA4C,EAAE,OAAe;QAChF,KAAK,CAAC,OAAO,CAAC,CAAA;QADK,SAAI,GAAJ,IAAI,CAAwC;QAE/D,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC7B,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,MAAc;IACjD,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,GAAG,MAAM,CAAA;QACpD,SAAS,KAAK,EAAE,CAAA;IAClB,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,UAAsB,WAAW,CAAC,EAAE,CAAC;IAC7E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,gBAAgB,EAAE,CAAC;QACpE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,0CAA0C,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,kCAAkC,CAAC,CAAA;IACtG,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,MAAM,IAAI,IAAI,OAAO;QAAE,MAAM,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IAClE,OAAO,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,GAAG,KAAK,6BAA6B,CAAC,CAAA;IAChF,CAAC;IACD,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAA;IAC/F,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;IAChC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;QAC7D,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,GAAG,KAAK,uBAAuB,CAAC,CAAA;QAC7F,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACjB,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAA;IAC9F,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAA;QACrE,CAAC;QACD,MAAM,MAAM,GAAG,IAA+B,CAAA;QAC9C,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,KAAK,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,kCAAkC,CAAC,CAAA;QAC7E,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAA;QACjF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,wCAAwC,CAAC,CAAA;QAC3G,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,EAAE,CAAC;QAClG,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,GAAG,KAAK,oCAAoC,CAAC,CAAA;IACvF,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAoB;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IACxC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAA;IAC7F,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAA;IACxG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAA;IAC/F,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IACpD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1C,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;IAC9G,IAAI,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,qCAAqC,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,8CAA8C,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAA;IACpG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAwB;QAChD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAwB;QACtD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAA4B;QAC9D,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAwB,EAAE,CAAC;QACxG,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;KAClC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,+BAA+B,CAAC,CAAA;IACjF,CAAC;IACD,MAAM,KAAK,GAAG,KAAgC,CAAA;IAC9C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,uCAAuC,CAAC,CAAA;IACzF,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;IAClC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAA;IACrF,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAA;IACtD,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,yCAAyC,CAAC,CAAA;IACpF,CAAC;IACD,MAAM,IAAI,GAAG,iBAAiB,CAAC;QAC7B,KAAK,EAAE,KAAK,CAAC,OAAO,CAAW;QAC/B,IAAI,EAAE,KAAK,CAAC,MAAM,CAAiB;QACnC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAsB;QAClD,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAmB;QACzC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAa;QAC/B,OAAO,EAAE,KAAK,CAAC,SAAS,CAAa;QACrC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAiB;QACzC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,aAAa,CAAa,EAAE,CAAC;QAChG,IAAI,EAAE,EAAE;KACT,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE;QACF,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5E,OAAO;QACP,OAAO;KACR,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAA0B,EAAE,IAAY;IACpE,MAAM,QAAQ,GAAG;QACf,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,GAAG,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;QACpF,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAA;IACD,OAAO,QAAQ,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,IAAI,EAAE,CAAA;AAClE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,YAAoB;IAC9D,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,kCAAkC,CAAC,CAAA;IACpF,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;IAC/C,IAAI,QAAQ,GAAG,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,gCAAgC,CAAC,CAAA;IAClG,IAAI,OAAgB,CAAA;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,uDAAuD,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACxH,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC1D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ;QACR,IAAI;QACJ,YAAY;QACZ,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KAC9D,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC;SAC5D,UAAU,CAAC,4BAA4B,EAAE,GAAG,CAAC;SAC7C,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC;SACxB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACf,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;AACpC,CAAC"}

package/lib/proposals.d.ts

@@ -0,0 +1,85 @@
+import type { ApprovalDecisionInput, ApprovalDispatchRoute, ApprovalProposalRecoveryInput, ApprovalProposalRecoveryResult, ApprovalProposalResult, ApprovalProposalSnapshot } from '@dsh-enhanced/assistant-policy';
+import type { PreparedWikiWrite, StoredWikiProposal, WikiProposalDecisionInput, WikiProposalInput, WikiProposalResult, WikiProposalStatus } from './types.js';
+import { WikiVault } from './vault.js';
+export type WikiProposalStoreErrorCode = 'idempotency-conflict' | 'invalid-input' | 'invalid-path' | 'invalid-state' | 'not-found' | 'schema-too-new';
+export declare class WikiProposalStoreError extends Error {
+    readonly code: WikiProposalStoreErrorCode;
+    constructor(code: WikiProposalStoreErrorCode, message: string);
+}
+export interface WikiApprovalPolicy {
+    recoverOrCreateProposal(input: ApprovalProposalRecoveryInput): ApprovalProposalRecoveryResult;
+    decideProposal(input: ApprovalDecisionInput): ApprovalProposalResult;
+    getProposal(proposalId: string): ApprovalProposalSnapshot | undefined;
+}
+export declare class WikiProposalStore {
+    private readonly database;
+    private readonly now;
+    private closed;
+    constructor(options: {
+        path: string;
+        now?: () => number;
+    });
+    close(): void;
+    get(id: string): StoredWikiProposal | undefined;
+    health(): {
+        pendingProposals: number;
+    };
+    /**
+     * Return one page from a durable high-water cycle. Newer rows are held for the
+     * next cycle, so a continuous arrival stream cannot prevent the cursor from
+     * wrapping to an older proposal that became terminal after its first scan.
+     */
+    listPending(limit: number): StoredWikiProposal[];
+    prepare(input: {
+        proposalId: string;
+        idempotencyKey: string;
+        requester: string;
+        principal: string;
+        requestHash: string;
+        write: PreparedWikiWrite;
+        expiresAt: number;
+        ttlMs: number;
+        dispatch?: Readonly<ApprovalDispatchRoute>;
+    }): {
+        proposal: StoredWikiProposal;
+        replayed: boolean;
+    };
+    attachPolicy(id: string, policyProposalId: string, expiresAt: number): StoredWikiProposal;
+    settle(input: {
+        proposalId: string;
+        status: Exclude<WikiProposalStatus, 'pending'>;
+        version: number;
+        resultPageId?: string;
+    }): {
+        proposal: StoredWikiProposal;
+        replayed: boolean;
+    };
+}
+export declare class WikiProposalManager {
+    private readonly vault;
+    private readonly store;
+    private readonly policy;
+    private readonly now;
+    constructor(vault: WikiVault, store: WikiProposalStore, policy: WikiApprovalPolicy, now?: () => number);
+    propose(input: WikiProposalInput): WikiProposalResult;
+    decide(input: WikiProposalDecisionInput): WikiProposalResult;
+    /**
+     * Commit locally pending proposals whose policy decision already settled
+     * elsewhere, for example on an approval card minutes after the turn ended.
+     *
+     * Approval is never inferred: the terminal status is read back from the policy
+     * ledger and applied through the same settle path `decide()` uses, so repeated
+     * reconciles are idempotent.
+     */
+    reconcile(limit: number): WikiProposalResult[];
+    /**
+     * Apply one already-terminal policy status to a pending wiki proposal. A vault
+     * conflict downgrades the proposal to `conflicted` instead of losing the
+     * decision, matching the durability rule that a decision is never re-asked.
+     */
+    private settleDecided;
+    private settleSnapshot;
+    private settleSecurityConflict;
+    getProposal(id: string): WikiProposalResult | undefined;
+}
+//# sourceMappingURL=proposals.d.ts.map

package/lib/proposals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proposals.d.ts","sourceRoot":"","sources":["../src/proposals.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,qBAAqB,EACrB,qBAAqB,EACrB,6BAA6B,EAC7B,8BAA8B,EAC9B,sBAAsB,EACtB,wBAAwB,EACzB,MAAM,gCAAgC,CAAA;AAEvC,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAElB,yBAAyB,EACzB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,SAAS,EAAkB,MAAM,YAAY,CAAA;AAEtD,MAAM,MAAM,0BAA0B,GAClC,sBAAsB,GACtB,eAAe,GACf,cAAc,GACd,eAAe,GACf,WAAW,GACX,gBAAgB,CAAA;AAEpB,qBAAa,sBAAuB,SAAQ,KAAK;IACnC,QAAQ,CAAC,IAAI,EAAE,0BAA0B;gBAAhC,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,MAAM;CAIvE;AAED,MAAM,WAAW,kBAAkB;IACjC,uBAAuB,CAAC,KAAK,EAAE,6BAA6B,GAAG,8BAA8B,CAAA;IAC7F,cAAc,CAAC,KAAK,EAAE,qBAAqB,GAAG,sBAAsB,CAAA;IACpE,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAAA;CACtE;AAwED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAc;IACvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;IAClC,OAAO,CAAC,MAAM,CAAQ;gBAEV,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;KAAE;IAUzD,KAAK,IAAI,IAAI;IAMb,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAK/C,MAAM,IAAI;QAAE,gBAAgB,EAAE,MAAM,CAAA;KAAE;IAMtC;;;;OAIG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,EAAE;IA8EhD,OAAO,CAAC,KAAK,EAAE;QACb,UAAU,EAAE,MAAM,CAAA;QAClB,cAAc,EAAE,MAAM,CAAA;QACtB,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,WAAW,EAAE,MAAM,CAAA;QACnB,KAAK,EAAE,iBAAiB,CAAA;QACxB,SAAS,EAAE,MAAM,CAAA;QACjB,KAAK,EAAE,MAAM,CAAA;QACb,QAAQ,CAAC,EAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAA;KAC3C,GAAG;QAAE,QAAQ,EAAE,kBAAkB,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE;IAoDvD,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,kBAAkB;IAezF,MAAM,CAAC,KAAK,EAAE;QACZ,UAAU,EAAE,MAAM,CAAA;QAClB,MAAM,EAAE,OAAO,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAA;QAC9C,OAAO,EAAE,MAAM,CAAA;QACf,YAAY,CAAC,EAAE,MAAM,CAAA;KACtB,GAAG;QAAE,QAAQ,EAAE,kBAAkB,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE;CA6BxD;AAuCD,qBAAa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAHH,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,iBAAiB,EACxB,MAAM,EAAE,kBAAkB,EAC1B,GAAG,GAAE,MAAM,MAAiB;IAG/C,OAAO,CAAC,KAAK,EAAE,iBAAiB,GAAG,kBAAkB;IAkErD,MAAM,CAAC,KAAK,EAAE,yBAAyB,GAAG,kBAAkB;IAmB5D;;;;;;;OAOG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,EAAE;IAuC9C;;;;OAIG;IACH,OAAO,CAAC,aAAa;IA+BrB,OAAO,CAAC,cAAc;IA8CtB,OAAO,CAAC,sBAAsB;IAe9B,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;CAMxD"}