@flowdesk/core 0.1.12 → 0.1.13

package/dist/controlled-workspace-file-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controlled-workspace-file-write.js","sourceRoot":"","sources":["../src/controlled-workspace-file-write.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,OAAO,EAEP,KAAK,EACL,gBAAgB,EAChB,iBAAiB,GACjB,MAAM,iBAAiB,CAAC;AAmCzB,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,uBAAuB,CAC/B,KAA8B,EAC9B,OAA0B,EAC1B,KAAa;IAEb,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,KAAK,EAAE;QACT,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,wBAAwB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACvD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrE,CAAC,CAAC,KAAK,EAAE;QACT,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAC3E,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC;QACzC,CAAC,CAAC,KAAK,EAAE;QACT,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,2CAA2C,CAC1D,KAAc,EACd,KAAK,GAAG,kBAAkB;IAE1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QACzD,OAAO,OAAO,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,OAAO,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAC;IAC1E,IACC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC7B,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,KAAK,GAAG;QACb,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QACvB,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QACrB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAErB,OAAO,OAAO,CAAC,GAAG,KAAK,yEAAyE,CAAC,CAAC;IACnG,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAC;IAC3F,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;QAC3D,OAAO,OAAO,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;IAC3D,OAAO,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QACzD,OAAO,OAAO,CAAC,2CAA2C,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,OAAO,CAAC,uCAAuC,CAAC,CAAC;IAChF,IAAI,iIAAiI,CAAC,IAAI,CAAC,KAAK,CAAC;QAChJ,OAAO,OAAO,CAAC,mEAAmE,CAAC,CAAC;IACrF,OAAO,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oDAAoD,CACnE,KAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QACnB,OAAO,OAAO,CAAC,0DAA0D,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,KAA8D,CAAC;IAC9E,MAAM,OAAO,GAAG;QACf,gBAAgB;QAChB,iBAAiB;QACjB,aAAa;QACb,mBAAmB;QACnB,kBAAkB;QAClB,6BAA6B;QAC7B,6BAA6B;QAC7B,gCAAgC;QAChC,gBAAgB;QAChB,iBAAiB;QACjB,0BAA0B;QAC1B,6BAA6B;QAC7B,wBAAwB;QACxB,YAAY;QACZ,gBAAgB;QAChB,sBAAsB;QACtB,sBAAsB;QACtB,yBAAyB;QACzB,uBAAuB;QACvB,wBAAwB;QACxB,mBAAmB;QACnB,uBAAuB;QACvB,4BAA4B;QAC5B,sBAAsB;QACtB,cAAc;QACd,kBAAkB;QAClB,kBAAkB;QAClB,mBAAmB;QACnB,eAAe;QACf,8BAA8B;KACrB,CAAC;IACX,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,CAAC,IAAI,CACV,GAAG,uBAAuB,CACzB,MAAM,EACN,OAAO,EACP,wCAAwC,CACxC,CAAC,MAAM,CACR,CAAC;IACF,IAAI,MAAM,CAAC,cAAc,KAAK,6CAA6C;QAC1E,MAAM,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IACjF,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;IACnF,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;IACxF,MAAM,CAAC,IAAI,CAAC,GAAG,2CAA2C,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5F,IAAI,MAAM,CAAC,2BAA2B,KAAK,SAAS;QACnD,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,2BAA2B,EAAE,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7G,IAAI,MAAM,CAAC,2BAA2B,KAAK,SAAS;QACnD,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,2BAA2B,EAAE,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7G,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,8BAA8B,EAAE,gCAAgC,CAAC,CAAC,MAAM,CAAC,CAAC;IAClH,MAAM,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;IACpF,IACC,MAAM,CAAC,wBAAwB,KAAK,IAAI;QACxC,MAAM,CAAC,2BAA2B,KAAK,IAAI;QAC3C,MAAM,CAAC,sBAAsB,KAAK,IAAI;QACtC,MAAM,CAAC,UAAU,KAAK,IAAI;QAC1B,MAAM,CAAC,cAAc,KAAK,IAAI;QAE9B,MAAM,CAAC,IAAI,CAAC,oGAAoG,CAAC,CAAC;IACnH,IACC,MAAM,CAAC,oBAAoB,KAAK,KAAK;QACrC,MAAM,CAAC,oBAAoB,KAAK,KAAK;QACrC,MAAM,CAAC,uBAAuB,KAAK,KAAK;QACxC,MAAM,CAAC,qBAAqB,KAAK,KAAK;QACtC,MAAM,CAAC,sBAAsB,KAAK,KAAK;QACvC,MAAM,CAAC,iBAAiB,KAAK,KAAK;QAClC,MAAM,CAAC,qBAAqB,KAAK,KAAK;QACtC,MAAM,CAAC,0BAA0B,KAAK,KAAK;QAC3C,MAAM,CAAC,oBAAoB,KAAK,KAAK;QACrC,MAAM,CAAC,YAAY,KAAK,KAAK;QAC7B,MAAM,CAAC,gBAAgB,KAAK,KAAK;QACjC,MAAM,CAAC,gBAAgB,KAAK,KAAK;QACjC,MAAM,CAAC,iBAAiB,KAAK,KAAK;QAClC,MAAM,CAAC,aAAa,KAAK,KAAK;QAC9B,MAAM,CAAC,4BAA4B,KAAK,KAAK;QAE7C,MAAM,CAAC,IAAI,CAAC,mIAAmI,CAAC,CAAC;IAClJ,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AAC3D,CAAC"}

package/dist/core-completion-safety-contracts.js

@@ -95,4 +95,3 @@ export function validateFlowDeskFederatedRegistryStateV1(value) {
     errors.push(...validateNoForbiddenRawPayloads(record, "federated_registry_state").errors);
     return errors.length === 0 ? valid() : invalid(...errors);
 }
-//# sourceMappingURL=core-completion-safety-contracts.js.map

package/dist/dispatch-attempt-manifest.js

@@ -291,4 +291,3 @@ export function evaluateFlowDeskDispatchAttemptDurablePrecallV1(input) {
             : { reloaded_idempotency_snapshot_ref: idempotencyEntry.evidenceId }),
     };
 }
-//# sourceMappingURL=dispatch-attempt-manifest.js.map

package/dist/dispatch-idempotency.js

@@ -272,4 +272,3 @@ export function prepareFlowDeskDispatchIdempotencyStateUpdateV1(input) {
         ...disabledAuthority,
     };
 }
-//# sourceMappingURL=dispatch-idempotency.js.map

package/dist/external-auth-policy.js

@@ -163,4 +163,3 @@ export function validateFlowDeskExternalAuthProviderPolicyResultV1(value, expect
     errors.push(...validateNoForbiddenRawPayloads(value, "external_auth_provider_policy_result").errors);
     return errors.length === 0 ? valid() : invalid(...errors);
 }
-//# sourceMappingURL=external-auth-policy.js.map

package/dist/fake-remote-connector-adapter.js

@@ -159,4 +159,3 @@ export function validateFlowDeskFakeRemoteConnectorWriteResultV1(value) {
     errors.push(...validateNoForbiddenRawPayloads(record, "fake_remote_connector_write_result").errors);
     return errors.length === 0 ? valid() : invalid(...errors);
 }
-//# sourceMappingURL=fake-remote-connector-adapter.js.map

package/dist/fake-runtime.js

@@ -282,4 +282,3 @@ export function evaluateFlowDeskFakeRuntimeCommandV1(input) {
         runtime: inertRuntime
     };
 }
-//# sourceMappingURL=fake-runtime.js.map

package/dist/fallback-decision.js

@@ -90,4 +90,3 @@ export function validateFlowDeskFallbackDecisionV1(value) {
     errors.push(...validateNoForbiddenRawPayloads(record, "fallback_decision").errors);
     return errors.length === 0 ? valid() : invalid(...errors);
 }
-//# sourceMappingURL=fallback-decision.js.map

package/dist/fallback-regate-plan.js

@@ -119,4 +119,3 @@ export function validateFlowDeskFallbackRegatePlanV1(value) {
     errors.push(...validateNoForbiddenRawPayloads(value, "fallback_regate_plan").errors);
     return errors.length === 0 ? valid() : invalid(...errors);
 }
-//# sourceMappingURL=fallback-regate-plan.js.map

package/dist/fds1-schema-probe-result.js

@@ -112,4 +112,3 @@ export function validateFlowDeskFds1SchemaProbeResultV1(value) {
     errors.push(...validateNoForbiddenRawPayloads(record, "fds1_schema_probe_result").errors);
     return errors.length === 0 ? valid() : invalid(...errors);
 }
-//# sourceMappingURL=fds1-schema-probe-result.js.map

package/dist/guard-boundary.js

@@ -217,4 +217,3 @@ export function evaluateManagedDispatchBetaGuardBoundaryV1(input) {
     }
     return boundaryDecision("eligible", "runtime", "Eligible for managed-dispatch beta only; evaluator does not perform dispatch.", checks);
 }
-//# sourceMappingURL=guard-boundary.js.map

package/dist/guarded-dry-run.js

@@ -108,4 +108,3 @@ export function evaluateFlowDeskGuardedDryRunCommandV1(input) {
         runtime: inertRuntime
     };
 }
-//# sourceMappingURL=guarded-dry-run.js.map

package/dist/hook-harness.js

@@ -127,4 +127,3 @@ export function evaluateFlowDeskHookHarnessV1(request) {
         return { ...invalid(...responseResult.errors), response };
     return { ...valid(), response };
 }
-//# sourceMappingURL=hook-harness.js.map

package/dist/index.d.ts

@@ -10,6 +10,7 @@ export declare const flowdeskNoRealDispatchBoundary: {
 export declare function describeFlowDeskCoreScaffold(): string;
 export declare function canUseRealDispatchInRelease1(): false;
 export * from "./agent-profiles.js";
+export * from "./agent-registry.js";
 export * from "./audit.js";
 export * from "./authority-promotion.js";
 export * from "./bootstrap-foundation.js";
@@ -22,6 +23,7 @@ export * from "./config-policy.js";
 export * from "./connector-profile.js";
 export * from "./controlled-conformance-doc-write.js";
 export * from "./controlled-redacted-audit-export-write.js";
+export * from "./controlled-workspace-file-write.js";
 export * from "./core-completion-safety-contracts.js";
 export * from "./dispatch-attempt-manifest.js";
 export * from "./dispatch-idempotency.js";
@@ -43,6 +45,7 @@ export * from "./managed-dispatch-evidence-shape.js";
 export * from "./model-availability-cache.js";
 export * from "./operational-intelligence.js";
 export * from "./plan.js";
+export * from "./planning-evidence-common.js";
 export * from "./pre-dispatch-audit-record.js";
 export * from "./production-approval-source.js";
 export * from "./production-enablement.js";
@@ -63,9 +66,15 @@ export * from "./session-evidence.js";
 export * from "./state-paths.js";
 export * from "./state-store.js";
 export * from "./status.js";
+export * from "./task-agent-assignment.js";
+export * from "./task-graph.js";
+export * from "./task-model-selection.js";
 export * from "./task-result.js";
 export * from "./tool-contract-fixtures.js";
 export * from "./top-tier-reviewer-lane-probe.js";
 export * from "./usage-health.js";
 export * from "./validators.js";
+export * from "./workflow-dispatch-plan.js";
+export * from "./workflow-authoring-result.js";
+export * from "./workflow-synthesis.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,uBAAuB,EAAG,gBAAyB,CAAC;AAEjE,eAAO,MAAM,qBAAqB,sHAMxB,CAAC;AAEX,eAAO,MAAM,8BAA8B;;;;;;CAMjC,CAAC;AAEX,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AAED,wBAAgB,4BAA4B,IAAI,KAAK,CAEpD;AAED,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uCAAuC,CAAC;AACtD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,uCAAuC,CAAC;AACtD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,oCAAoC,CAAC;AACnD,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sCAAsC,CAAC;AACrD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,WAAW,CAAC;AAC1B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,kCAAkC,CAAC;AACjD,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,uBAAuB,EAAG,gBAAyB,CAAC;AAEjE,eAAO,MAAM,qBAAqB,sHAMxB,CAAC;AAEX,eAAO,MAAM,8BAA8B;;;;;;CAMjC,CAAC;AAEX,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AAED,wBAAgB,4BAA4B,IAAI,KAAK,CAEpD;AAED,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uCAAuC,CAAC;AACtD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,oCAAoC,CAAC;AACnD,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sCAAsC,CAAC;AACrD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,WAAW,CAAC;AAC1B,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,kCAAkC,CAAC;AACjD,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,yBAAyB,CAAC"}

package/dist/index.js

@@ -20,6 +20,7 @@ export function canUseRealDispatchInRelease1() {
     return false;
 }
 export * from "./agent-profiles.js";
+export * from "./agent-registry.js";
 export * from "./audit.js";
 export * from "./authority-promotion.js";
 export * from "./bootstrap-foundation.js";
@@ -32,6 +33,7 @@ export * from "./config-policy.js";
 export * from "./connector-profile.js";
 export * from "./controlled-conformance-doc-write.js";
 export * from "./controlled-redacted-audit-export-write.js";
+export * from "./controlled-workspace-file-write.js";
 export * from "./core-completion-safety-contracts.js";
 export * from "./dispatch-attempt-manifest.js";
 export * from "./dispatch-idempotency.js";
@@ -53,6 +55,7 @@ export * from "./managed-dispatch-evidence-shape.js";
 export * from "./model-availability-cache.js";
 export * from "./operational-intelligence.js";
 export * from "./plan.js";
+export * from "./planning-evidence-common.js";
 export * from "./pre-dispatch-audit-record.js";
 export * from "./production-approval-source.js";
 export * from "./production-enablement.js";
@@ -73,9 +76,15 @@ export * from "./session-evidence.js";
 export * from "./state-paths.js";
 export * from "./state-store.js";
 export * from "./status.js";
+export * from "./task-agent-assignment.js";
+export * from "./task-graph.js";
+export * from "./task-model-selection.js";
 export * from "./task-result.js";
 export * from "./tool-contract-fixtures.js";
 export * from "./top-tier-reviewer-lane-probe.js";
 export * from "./usage-health.js";
 export * from "./validators.js";
+export * from "./workflow-dispatch-plan.js";
+export * from "./workflow-authoring-result.js";
+export * from "./workflow-synthesis.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAyB,CAAC;AAEjE,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACpC,kCAAkC;IAClC,SAAS;IACT,cAAc;IACd,sBAAsB;IACtB,kBAAkB;CACT,CAAC;AAEX,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC7C,WAAW,EAAE,0BAA0B;IACvC,oBAAoB,EAAE,UAAU;IAChC,qBAAqB,EAAE,UAAU;IACjC,uBAAuB,EAAE,UAAU;IACnC,qBAAqB,EAAE,UAAU;CACxB,CAAC;AAEX,MAAM,UAAU,4BAA4B;IAC3C,OAAO,GAAG,uBAAuB,KAAK,8BAA8B,CAAC,WAAW,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC3C,OAAO,KAAK,CAAC;AACd,CAAC;AAED,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uCAAuC,CAAC;AACtD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,uCAAuC,CAAC;AACtD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,oCAAoC,CAAC;AACnD,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sCAAsC,CAAC;AACrD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,WAAW,CAAC;AAC1B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,kCAAkC,CAAC;AACjD,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAyB,CAAC;AAEjE,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACpC,kCAAkC;IAClC,SAAS;IACT,cAAc;IACd,sBAAsB;IACtB,kBAAkB;CACT,CAAC;AAEX,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC7C,WAAW,EAAE,0BAA0B;IACvC,oBAAoB,EAAE,UAAU;IAChC,qBAAqB,EAAE,UAAU;IACjC,uBAAuB,EAAE,UAAU;IACnC,qBAAqB,EAAE,UAAU;CACxB,CAAC;AAEX,MAAM,UAAU,4BAA4B;IAC3C,OAAO,GAAG,uBAAuB,KAAK,8BAA8B,CAAC,WAAW,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC3C,OAAO,KAAK,CAAC;AACd,CAAC;AAED,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uCAAuC,CAAC;AACtD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,oCAAoC,CAAC;AACnD,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sCAAsC,CAAC;AACrD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,WAAW,CAAC;AAC1B,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC;AAChD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,kCAAkC,CAAC;AACjD,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,mCAAmC,CAAC;AAClD,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,yBAAyB,CAAC"}

package/dist/lane-heartbeat.js

@@ -146,4 +146,3 @@ export function buildFlowDeskLaneHeartbeatRecordV1(input) {
         return { ok: false, errors: validation.errors };
     return { ok: true, record };
 }
-//# sourceMappingURL=lane-heartbeat.js.map

package/dist/lane-lifecycle-record.js

@@ -137,4 +137,3 @@ export function validateFlowDeskLaneLifecycleRecordV1(value) {
     errors.push(...validateNoForbiddenRawPayloads(record, "lane_lifecycle_record").errors);
     return errors.length === 0 ? valid() : invalid(...errors);
 }
-//# sourceMappingURL=lane-lifecycle-record.js.map

package/dist/lane-observability.js

@@ -135,4 +135,3 @@ export function validateFlowDeskLaneObservabilityArtifactV1(value) {
     errors.push(...validateNoForbiddenRawPayloads(record, "lane_observability").errors);
     return errors.length === 0 ? valid() : invalid(...errors);
 }
-//# sourceMappingURL=lane-observability.js.map

package/dist/lane-stall-projection.js

@@ -310,4 +310,3 @@ export function projectFlowDeskLaneStallV1(input) {
         entries,
     };
 }
-//# sourceMappingURL=lane-stall-projection.js.map

package/dist/managed-dispatch-evidence-shape.js

@@ -20,4 +20,3 @@ export function validateFlowDeskManagedDispatchBetaRuntimeEchoShapeV1(value) {
 export function validateFlowDeskManagedDispatchBetaTelemetryCorrelationShapeV1(value) {
     return shapeOnly(value, "flowdesk.managed_dispatch_beta.telemetry_correlation.v1", "telemetry_correlation_evidence");
 }
-//# sourceMappingURL=managed-dispatch-evidence-shape.js.map

package/dist/model-availability-cache.js

@@ -1195,4 +1195,3 @@ export function validateFlowDeskReviewerFanoutPlanV1(value) {
     errors.push(...validateNoForbiddenRawPayloads(record, "reviewer_fanout_plan").errors);
     return errors.length === 0 ? valid() : invalid(...errors);
 }
-//# sourceMappingURL=model-availability-cache.js.map

package/dist/operational-intelligence.js

@@ -104,4 +104,3 @@ export function validateFlowDeskReferencePackV1(value) {
     errors.push(...validateNoForbiddenRawPayloads(record, "reference_pack").errors);
     return errors.length === 0 ? valid() : invalid(...errors);
 }
-//# sourceMappingURL=operational-intelligence.js.map

package/dist/pending-abort.js

@@ -76,4 +76,3 @@ export function validateFlowDeskPendingAbortCancelV1(value) {
     errors.push(...validateNoForbiddenRawPayloads(record, "pending_abort_cancel").errors);
     return errors.length === 0 ? valid() : invalid(...errors);
 }
-//# sourceMappingURL=pending-abort.js.map

package/dist/plan.js

@@ -166,4 +166,3 @@ export function evaluateFlowDeskPlanCommandV1(input) {
         return { ok: false, errors: validationErrors, ...artifacts };
     return { ok: true, errors: [], ...artifacts };
 }
-//# sourceMappingURL=plan.js.map

package/dist/planning-evidence-common.d.ts

@@ -0,0 +1,18 @@
+import { type ValidationResult } from "./validators.js";
+export { invalid, type ValidationResult, valid } from "./validators.js";
+export declare const FLOWDESK_PLANNING_AUTHORITY_KEYS_V1: readonly ["dispatch_authority_enabled", "provider_call_made", "runtime_execution", "actual_lane_launch", "write_authority_enabled"];
+export declare function isPlanningEvidenceRecord(value: unknown): value is Record<string, unknown>;
+export declare function rejectUnknownPlanningProperties(value: Record<string, unknown>, allowed: ReadonlySet<string>, label: string): string[];
+export declare function requirePlanningKeys(value: Record<string, unknown>, keys: readonly string[], label: string): string[];
+export declare function validatePlanningSafeText(value: unknown, label: string, maxLength: number, options?: {
+    allowEmpty?: boolean;
+    allowAuthorityWords?: boolean;
+}): ValidationResult;
+export declare function validatePlanningTimestamp(value: unknown, label: string): ValidationResult;
+export declare function validatePlanningOpaqueId(value: unknown, label: string): ValidationResult;
+export declare function validatePlanningOpaqueRef(value: unknown, label: string): ValidationResult;
+export declare function validatePlanningOpaqueRefArray(value: unknown, label: string, maxItems: number): ValidationResult;
+export declare function validatePlanningSafeLabelArray(value: unknown, label: string, maxItems: number): ValidationResult;
+export declare function validatePlanningAuthorityFalse(value: Record<string, unknown>, label: string): string[];
+export declare function validatePlanningNoForbiddenPayloads(value: unknown, label: string): ValidationResult;
+//# sourceMappingURL=planning-evidence-common.d.ts.map

package/dist/planning-evidence-common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"planning-evidence-common.d.ts","sourceRoot":"","sources":["../src/planning-evidence-common.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,KAAK,gBAAgB,EAKrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAExE,eAAO,MAAM,mCAAmC,qIAMtC,CAAC;AAiBX,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzF;AAED,wBAAgB,+BAA+B,CAC9C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,EAC5B,KAAK,EAAE,MAAM,GACX,MAAM,EAAE,CAIV;AAED,wBAAgB,mBAAmB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,KAAK,EAAE,MAAM,GACX,MAAM,EAAE,CAIV;AAED,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAAO,GACnE,gBAAgB,CAWlB;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAMzF;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAExF;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAEzF;AAED,wBAAgB,8BAA8B,CAC7C,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACd,gBAAgB,CAOlB;AAED,wBAAgB,8BAA8B,CAC7C,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACd,gBAAgB,CAOlB;AAED,wBAAgB,8BAA8B,CAC7C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,MAAM,GACX,MAAM,EAAE,CAWV;AAED,wBAAgB,mCAAmC,CAClD,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,GACX,gBAAgB,CAElB"}

package/dist/planning-evidence-common.js

@@ -0,0 +1,95 @@
+import { invalid, valid, validateNoForbiddenRawPayloads, validateOpaqueId, validateOpaqueRef, } from "./validators.js";
+export { invalid, valid } from "./validators.js";
+export const FLOWDESK_PLANNING_AUTHORITY_KEYS_V1 = [
+    "dispatch_authority_enabled",
+    "provider_call_made",
+    "runtime_execution",
+    "actual_lane_launch",
+    "write_authority_enabled",
+];
+const AUTHORITY_TRUE_KEYS = new Set([
+    ...FLOWDESK_PLANNING_AUTHORITY_KEYS_V1,
+    "realOpenCodeDispatch",
+    "providerCall",
+    "actualLaneLaunch",
+    "runtimeExecution",
+    "fallbackAuthority",
+    "toolAuthority",
+    "hardCancelOrNoReplyAuthority",
+    "fallback_allowed",
+    "reselection_allowed",
+]);
+const AUTHORITY_SMUGGLING_PATTERN = /\b(?:approve(?:d|s)?|approval|authorize(?:d|s)?|authorization|guard(?:ed)?\s+approval|dispatch(?:able|ed|es)?|dispatch\s*-?authority|real\s*-?(?:opencode\s*-?)?dispatch|provider\s*-?(?:call|payload|response)|runtime\s*-?execution|runtime[-_\s]*lane[-_\s]*launch|actual\s*-?lane\s*-?launch|lane\s*-?launch|fallback|reselection|reselect|retry\s+with\s+(?:another|different)|switch\s+(?:provider|model)|no\s*-?reply|hard\s*-?(?:cancel|stop)|opencode\s+run|hidden\s+injection)\b/i;
+export function isPlanningEvidenceRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+export function rejectUnknownPlanningProperties(value, allowed, label) {
+    return Object.keys(value)
+        .filter((key) => !allowed.has(key))
+        .map((key) => `${label} has unknown property: ${key}`);
+}
+export function requirePlanningKeys(value, keys, label) {
+    return keys
+        .filter((key) => !(key in value))
+        .map((key) => `${label} missing required field: ${key}`);
+}
+export function validatePlanningSafeText(value, label, maxLength, options = {}) {
+    if (typeof value !== "string")
+        return invalid(`${label} must be a string`);
+    if (!options.allowEmpty && value.trim().length === 0)
+        return invalid(`${label} must be a non-empty string`);
+    if (value.length > maxLength)
+        return invalid(`${label} exceeds ${maxLength} chars`);
+    const redaction = validateNoForbiddenRawPayloads(value, label);
+    if (!redaction.ok)
+        return redaction;
+    if (!options.allowAuthorityWords && AUTHORITY_SMUGGLING_PATTERN.test(value)) {
+        return invalid(`${label} contains authority-smuggling language`);
+    }
+    return valid();
+}
+export function validatePlanningTimestamp(value, label) {
+    if (typeof value !== "string" || value.length === 0)
+        return invalid(`${label} must be a timestamp string`);
+    return Number.isFinite(Date.parse(value))
+        ? valid()
+        : invalid(`${label} must be a parseable timestamp`);
+}
+export function validatePlanningOpaqueId(value, label) {
+    return validateOpaqueId(value, label);
+}
+export function validatePlanningOpaqueRef(value, label) {
+    return validateOpaqueRef(value, label);
+}
+export function validatePlanningOpaqueRefArray(value, label, maxItems) {
+    if (!Array.isArray(value))
+        return invalid(`${label} must be an array`);
+    if (value.length > maxItems)
+        return invalid(`${label} exceeds ${maxItems} items`);
+    const errors = value.flatMap((item, index) => validateOpaqueRef(item, `${label}[${index}]`).errors);
+    return errors.length === 0 ? valid() : invalid(...errors);
+}
+export function validatePlanningSafeLabelArray(value, label, maxItems) {
+    if (!Array.isArray(value))
+        return invalid(`${label} must be an array`);
+    if (value.length > maxItems)
+        return invalid(`${label} exceeds ${maxItems} items`);
+    const errors = value.flatMap((item, index) => validatePlanningSafeText(item, `${label}[${index}]`, 120).errors);
+    return errors.length === 0 ? valid() : invalid(...errors);
+}
+export function validatePlanningAuthorityFalse(value, label) {
+    const errors = [];
+    for (const key of FLOWDESK_PLANNING_AUTHORITY_KEYS_V1) {
+        if (value[key] !== false)
+            errors.push(`${label}.${key} must be false`);
+    }
+    for (const [key, nested] of Object.entries(value)) {
+        if (AUTHORITY_TRUE_KEYS.has(key) && nested === true) {
+            errors.push(`${label}.${key} cannot be true`);
+        }
+    }
+    return errors;
+}
+export function validatePlanningNoForbiddenPayloads(value, label) {
+    return validateNoForbiddenRawPayloads(value, label);
+}

package/dist/planning-evidence-common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planning-evidence-common.js","sourceRoot":"","sources":["../src/planning-evidence-common.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,OAAO,EAEP,KAAK,EACL,8BAA8B,EAC9B,gBAAgB,EAChB,iBAAiB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,OAAO,EAAyB,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAExE,MAAM,CAAC,MAAM,mCAAmC,GAAG;IAClD,4BAA4B;IAC5B,oBAAoB;IACpB,mBAAmB;IACnB,oBAAoB;IACpB,yBAAyB;CAChB,CAAC;AAEX,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IACnC,GAAG,mCAAmC;IACtC,sBAAsB;IACtB,cAAc;IACd,kBAAkB;IAClB,kBAAkB;IAClB,mBAAmB;IACnB,eAAe;IACf,8BAA8B;IAC9B,kBAAkB;IAClB,qBAAqB;CACrB,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,6dAA6d,CAAC;AAElgB,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACtD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC9C,KAA8B,EAC9B,OAA4B,EAC5B,KAAa;IAEb,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SACvB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;SAClC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,0BAA0B,GAAG,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAClC,KAA8B,EAC9B,IAAuB,EACvB,KAAa;IAEb,OAAO,IAAI;SACT,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC;SAChC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,4BAA4B,GAAG,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,wBAAwB,CACvC,KAAc,EACd,KAAa,EACb,SAAiB,EACjB,UAAmE,EAAE;IAErE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAC3E,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QACnD,OAAO,OAAO,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,KAAK,YAAY,SAAS,QAAQ,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,8BAA8B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/D,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IACpC,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7E,OAAO,OAAO,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc,EAAE,KAAa;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAClD,OAAO,OAAO,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC,CAAC,KAAK,EAAE;QACT,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc,EAAE,KAAa;IACrE,OAAO,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc,EAAE,KAAa;IACtE,OAAO,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC7C,KAAc,EACd,KAAa,EACb,QAAgB;IAEhB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ;QAAE,OAAO,OAAO,CAAC,GAAG,KAAK,YAAY,QAAQ,QAAQ,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC5C,iBAAiB,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC,MAAM,CACpD,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC7C,KAAc,EACd,KAAa,EACb,QAAgB;IAEhB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ;QAAE,OAAO,OAAO,CAAC,GAAG,KAAK,YAAY,QAAQ,QAAQ,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC5C,wBAAwB,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC,MAAM,CAChE,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC7C,KAA8B,EAC9B,KAAa;IAEb,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,mCAAmC,EAAE,CAAC;QACvD,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,GAAG,gBAAgB,CAAC,CAAC;IACxE,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,GAAG,iBAAiB,CAAC,CAAC;QAC/C,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mCAAmC,CAClD,KAAc,EACd,KAAa;IAEb,OAAO,8BAA8B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACrD,CAAC"}

package/dist/pre-dispatch-audit-record.js

@@ -58,4 +58,3 @@ export function validateFlowDeskPreDispatchAuditRecordV1(value) {
     errors.push(...validateNoForbiddenRawPayloads(value, "pre_dispatch_audit_record").errors);
     return errors.length === 0 ? valid() : invalid(...errors);
 }
-//# sourceMappingURL=pre-dispatch-audit-record.js.map

package/dist/production-approval-source.js

@@ -223,4 +223,3 @@ export function consumeFlowDeskProductionApprovalSourceV1(input) {
         ...disabledApprovalAuthority,
     };
 }
-//# sourceMappingURL=production-approval-source.js.map

package/dist/production-enablement.js

@@ -669,4 +669,3 @@ export function evaluateFlowDeskProductionEnablementV1(input) {
             : ["/flowdesk-doctor", "/flowdesk-status"],
     };
 }
-//# sourceMappingURL=production-enablement.js.map

package/dist/production-verification.js

@@ -123,4 +123,3 @@ export function validateFlowDeskConfiguredVerificationResultV1(value, expectedWo
         .errors);
     return errors.length === 0 ? valid() : invalid(...errors);
 }
-//# sourceMappingURL=production-verification.js.map

package/dist/provider-failures.js

@@ -113,4 +113,3 @@ export function getProviderFailureDiagnosticMappingsV1() {
 export function providerFailureClassIsDiagnosticOnlyV1(failureClass) {
     return failureClass !== "none";
 }
-//# sourceMappingURL=provider-failures.js.map

package/dist/provider-usage-collector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-usage-collector.d.ts","sourceRoot":"","sources":["../src/provider-usage-collector.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,mDAAmD,EACnD,gCAAgC,EAChC,uBAAuB,EACvB,cAAc,EACf,MAAM,yBAAyB,CAAC;AAEjC,KAAK,sBAAsB,GAAG,OAAO,CAAC,cAAc,EAAE,SAAS,GAAG,KAAK,CAAC,CAAC;AACzE,KAAK,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC,CAAC;AAG/F,MAAM,WAAW,sCAAsC;IACrD,cAAc,EAAE,uBAAuB,CAAC;IACxC,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,wCAAwC;IACvD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC/C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,uCAAuC;IACtD,UAAU,CAAC,EAAE,iCAAiC,CAAC;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,KAAK,CAAC,EAAE,4BAA4B,CAAC;IACrC,QAAQ,CAAC,EAAE,+BAA+B,CAAC;IAC3C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iCAAiC;IAChD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,oCAAoC;IACnD,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,mCAAmC;IAClD,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,4BAA4B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,mCAAmC,KAAK,OAAO,CAAC,oCAAoC,CAAC,CAAC;AACrJ,MAAM,MAAM,+BAA+B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,CAAC;AAEvF,MAAM,WAAW,8CAA8C;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,WAAW,GAAG,cAAc,GAAG,SAAS,GAAG,OAAO,GAAG,kBAAkB,CAAC;CACtF;AAED,MAAM,WAAW,sCAAsC;IACrD,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,iBAAiB,CAAC;IAC/B,aAAa,EAAE,uBAAuB,CAAC;IACvC,sBAAsB,EAAE,gCAAgC,CAAC;IACzD,sBAAsB,CAAC,EAAE,mDAAmD,CAAC;IAC7E,cAAc,CAAC,EAAE,8CAA8C,CAAC;IAChE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAwDD,wBAAsB,yCAAyC,CAC7D,MAAM,EAAE,sCAAsC,EAC9C,WAAW,EAAE,wCAAwC,GAAG,SAAS,EACjE,OAAO,GAAE,uCAA4C,GACpD,OAAO,CAAC,sCAAsC,CAAC,CA+FjD"}
+{"version":3,"file":"provider-usage-collector.d.ts","sourceRoot":"","sources":["../src/provider-usage-collector.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,mDAAmD,EACnD,gCAAgC,EAChC,uBAAuB,EACvB,cAAc,EACf,MAAM,yBAAyB,CAAC;AAEjC,KAAK,sBAAsB,GAAG,OAAO,CAAC,cAAc,EAAE,SAAS,GAAG,KAAK,CAAC,CAAC;AACzE,KAAK,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC,CAAC;AAG/F,MAAM,WAAW,sCAAsC;IACrD,cAAc,EAAE,uBAAuB,CAAC;IACxC,wBAAwB,EAAE,MAAM,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,wCAAwC;IACvD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC/C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,uCAAuC;IACtD,UAAU,CAAC,EAAE,iCAAiC,CAAC;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,KAAK,CAAC,EAAE,4BAA4B,CAAC;IACrC,QAAQ,CAAC,EAAE,+BAA+B,CAAC;IAC3C,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iCAAiC;IAChD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,oCAAoC;IACnD,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,mCAAmC;IAClD,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,4BAA4B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,mCAAmC,KAAK,OAAO,CAAC,oCAAoC,CAAC,CAAC;AACrJ,MAAM,MAAM,+BAA+B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,CAAC;AAEvF,MAAM,WAAW,8CAA8C;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,WAAW,GAAG,cAAc,GAAG,SAAS,GAAG,OAAO,GAAG,kBAAkB,CAAC;CACtF;AAED,MAAM,WAAW,sCAAsC;IACrD,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,iBAAiB,CAAC;IAC/B,aAAa,EAAE,uBAAuB,CAAC;IACvC,sBAAsB,EAAE,gCAAgC,CAAC;IACzD,sBAAsB,CAAC,EAAE,mDAAmD,CAAC;IAC7E,cAAc,CAAC,EAAE,8CAA8C,CAAC;IAChE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAoED,wBAAsB,yCAAyC,CAC7D,MAAM,EAAE,sCAAsC,EAC9C,WAAW,EAAE,wCAAwC,GAAG,SAAS,EACjE,OAAO,GAAE,uCAA4C,GACpD,OAAO,CAAC,sCAAsC,CAAC,CA+FjD"}

package/dist/provider-usage-collector.js

@@ -180,20 +180,23 @@ async function collectGeminiUsage(acquisition, options, observedAt) {
         return refusedCollection("gemini", "gemini", "fetch is unavailable");
     const homeDir = normalizeHomeDir(acquisition.homeDir, options.env);
     const filesystem = options.filesystem ?? defaultFilesystem;
+    const openCodeCreds = readOpenCodeGeminiOAuthCredentials(homeDir, options.env, filesystem);
     const credsPath = geminiCredentialPaths(homeDir, options.env).find((candidate) => filesystem.exists(candidate));
-    if (!credsPath)
+    if (!credsPath && !openCodeCreds)
         return refusedCollection("gemini", "gemini", "gemini auth evidence is missing");
     try {
-        const creds = JSON.parse(filesystem.readFile(credsPath));
-        const credsRecord = isRecord(creds) ? creds : {};
-        const refreshToken = stringField(credsRecord, "refresh_token");
-        const cachedAccessToken = stringField(credsRecord, "access_token");
-        const cachedExpiryRaw = credsRecord.expiry_date;
-        const cachedExpiryMs = typeof cachedExpiryRaw === "number" ? cachedExpiryRaw : typeof cachedExpiryRaw === "string" ? Number.parseInt(cachedExpiryRaw, 10) : NaN;
+        const geminiCliCreds = credsPath ? readGeminiCliOAuthCredentials(credsPath, filesystem) : null;
+        const selectedCreds = selectGeminiOAuthCredentials(openCodeCreds, geminiCliCreds, observedAt);
+        if (!selectedCreds)
+            return refusedCollection("gemini", "gemini", "gemini auth evidence is missing");
+        const refreshToken = selectedCreds.refreshToken;
+        const cachedAccessToken = selectedCreds.accessToken;
+        const cachedExpiryMs = selectedCreds.expiresAt ?? NaN;
         const cachedTokenStillValid = cachedAccessToken !== "" && Number.isFinite(cachedExpiryMs) && cachedExpiryMs > observedAt + 5 * 60_000;
         const env = options.env ?? {};
-        const clientId = firstNonEmpty(acquisition.geminiOAuthClientId, env.FLOWDESK_GEMINI_OAUTH_CLIENT_ID);
-        const clientSecret = firstNonEmpty(acquisition.geminiOAuthClientSecret, env.FLOWDESK_GEMINI_OAUTH_CLIENT_SECRET);
+        const inferredClient = readOpenCodeGeminiAuthOAuthClient(homeDir, env, filesystem);
+        const clientId = firstNonEmpty(acquisition.geminiOAuthClientId, env.FLOWDESK_GEMINI_OAUTH_CLIENT_ID, inferredClient?.clientId);
+        const clientSecret = firstNonEmpty(acquisition.geminiOAuthClientSecret, env.FLOWDESK_GEMINI_OAUTH_CLIENT_SECRET, inferredClient?.clientSecret);
         let accessToken = "";
         if (cachedTokenStillValid) {
             accessToken = cachedAccessToken;
@@ -213,7 +216,7 @@ async function collectGeminiUsage(acquisition, options, observedAt) {
                 return refusedCollection("gemini", "gemini", "gemini oauth client evidence is missing and cached access token is expired");
             return refusedCollection("gemini", "gemini", "gemini token refresh failed");
         }
-        let projectId = firstNonEmpty(env.GOOGLE_CLOUD_PROJECT, env.GOOGLE_CLOUD_PROJECT_ID, acquisition.geminiProjectId);
+        let projectId = firstNonEmpty(env.GOOGLE_CLOUD_PROJECT, env.GOOGLE_CLOUD_PROJECT_ID, acquisition.geminiProjectId, selectedCreds.projectId);
         const details = await codeAssistPost("loadCodeAssist", { cloudaicompanionProject: projectId, metadata: { ideType: "IDE_UNSPECIFIED", platform: "PLATFORM_UNSPECIFIED", pluginType: "GEMINI", duetProject: projectId } }, accessToken, fetcher);
         projectId = firstNonEmpty(projectId, stringField(details, "cloudaicompanionProject"));
         if (!projectId)
@@ -226,6 +229,85 @@ async function collectGeminiUsage(acquisition, options, observedAt) {
         return refusedCollection("gemini", "gemini", "gemini usage collection failed");
     }
 }
+function readGeminiCliOAuthCredentials(credsPath, filesystem) {
+    try {
+        const creds = JSON.parse(filesystem.readFile(credsPath));
+        const record = isRecord(creds) ? creds : {};
+        const refreshToken = stringField(record, "refresh_token");
+        const accessToken = stringField(record, "access_token");
+        const expiryRaw = record.expiry_date;
+        const expiresAt = typeof expiryRaw === "number" ? expiryRaw : typeof expiryRaw === "string" ? Number.parseInt(expiryRaw, 10) : undefined;
+        if (!refreshToken && !accessToken)
+            return null;
+        return { accessToken, refreshToken, ...(expiresAt === undefined || !Number.isFinite(expiresAt) ? {} : { expiresAt }) };
+    }
+    catch {
+        return null;
+    }
+}
+function readOpenCodeGeminiOAuthCredentials(homeDir, env, filesystem) {
+    const fromEnv = authRecordFromOpenCodeAuthContent(env?.OPENCODE_AUTH_CONTENT);
+    if (fromEnv)
+        return fromEnv;
+    for (const authPath of openCodeAuthPaths(homeDir, env)) {
+        if (!filesystem.exists(authPath))
+            continue;
+        try {
+            const parsed = JSON.parse(filesystem.readFile(authPath));
+            const fromFile = authRecordFromOpenCodeAuthDatabase(parsed);
+            if (fromFile)
+                return fromFile;
+        }
+        catch { }
+    }
+    return null;
+}
+function authRecordFromOpenCodeAuthContent(value) {
+    if (!value)
+        return null;
+    try {
+        return authRecordFromOpenCodeAuthDatabase(JSON.parse(value));
+    }
+    catch {
+        return null;
+    }
+}
+function authRecordFromOpenCodeAuthDatabase(value) {
+    if (!isRecord(value))
+        return null;
+    return openCodeGeminiAuthRecordToCredentials(value.google) ?? openCodeGeminiAuthRecordToCredentials(value.gemini);
+}
+function openCodeGeminiAuthRecordToCredentials(value) {
+    if (!isRecord(value) || value.type !== "oauth")
+        return null;
+    const accessToken = stringField(value, "access");
+    const expiresAt = numberField(value, "expires");
+    const refresh = stringField(value, "refresh");
+    const [refreshToken = "", projectId = "", managedProjectId = ""] = refresh.split("|", 3);
+    if (!refreshToken && !accessToken)
+        return null;
+    return { accessToken, refreshToken, ...(expiresAt === undefined ? {} : { expiresAt }), ...(firstNonEmpty(projectId, managedProjectId) ? { projectId: firstNonEmpty(projectId, managedProjectId) } : {}) };
+}
+function selectGeminiOAuthCredentials(openCodeCreds, geminiCliCreds, observedAt) {
+    const candidates = [openCodeCreds, geminiCliCreds].filter((candidate) => candidate !== null);
+    const fresh = candidates.find((candidate) => candidate.accessToken && candidate.expiresAt !== undefined && candidate.expiresAt > observedAt + 5 * 60_000);
+    return fresh ?? candidates.find((candidate) => candidate.refreshToken) ?? candidates[0] ?? null;
+}
+function readOpenCodeGeminiAuthOAuthClient(homeDir, env, filesystem) {
+    for (const candidate of openCodeGeminiAuthPackageEntrypoints(homeDir, env)) {
+        if (!filesystem.exists(candidate))
+            continue;
+        try {
+            const source = filesystem.readFile(candidate);
+            const clientId = source.match(/GEMINI_CLIENT_ID\s*=\s*["']([^"']+)["']/)?.[1] ?? "";
+            const clientSecret = source.match(/GEMINI_CLIENT_SECRET\s*=\s*["']([^"']+)["']/)?.[1] ?? "";
+            if (clientId && clientSecret)
+                return { clientId, clientSecret };
+        }
+        catch { }
+    }
+    return null;
+}
 function availableCollection(providerFamily, modelFamily, authProfile, accountBoundary, providerBucket) {
     if (providerBucket.remaining === null || providerBucket.remaining <= 0 || providerBucket.uncertainty !== "available") {
         return { providerFamily, modelFamily, bucket: providerBucket, failureClass: "rate_limited", availabilityState: "unavailable", redactedReason: "usage is not available" };
@@ -493,6 +575,18 @@ function geminiCredentialPaths(homeDir, env) {
     const geminiHome = env?.GEMINI_CLI_HOME;
     return uniqueNonEmpty([geminiHome ? path.join(geminiHome, ".gemini", "oauth_creds.json") : undefined, geminiHome ? path.join(geminiHome, "oauth_creds.json") : undefined, path.join(homeDir, ".gemini", "oauth_creds.json")]);
 }
+function openCodeAuthPaths(homeDir, env) {
+    const dataHome = firstNonEmpty(env?.OPENCODE_DATA_DIR, env?.XDG_DATA_HOME ? path.join(env.XDG_DATA_HOME, "opencode") : undefined, path.join(homeDir, ".local", "share", "opencode"));
+    return uniqueNonEmpty([dataHome ? path.join(dataHome, "auth.json") : undefined]);
+}
+function openCodeGeminiAuthPackageEntrypoints(homeDir, env) {
+    const cacheHome = firstNonEmpty(env?.OPENCODE_CACHE_DIR, env?.XDG_CACHE_HOME ? path.join(env.XDG_CACHE_HOME, "opencode") : undefined, path.join(homeDir, ".cache", "opencode"));
+    return uniqueNonEmpty([
+        cacheHome ? path.join(cacheHome, "packages", "opencode-gemini-auth@latest", "node_modules", "opencode-gemini-auth", "dist", "index.js") : undefined,
+        cacheHome ? path.join(cacheHome, "packages", "opencode-gemini-auth@latest", "dist", "index.js") : undefined,
+        cacheHome ? path.join(cacheHome, "packages", "opencode-gemini-auth", "node_modules", "opencode-gemini-auth", "dist", "index.js") : undefined,
+    ]);
+}
 function claudeKeychainServiceName(env) {
     const configDir = env?.CLAUDE_CONFIG_DIR;
     const defaultService = configDir ? `Claude Code-credentials-${createHash("sha256").update(configDir).digest("hex").slice(0, 8)}` : "Claude Code-credentials";