@gitroll/tacitt-cli 0.1.0 → 0.2.0

package/dist/{src-CPPjOyHZ.mjs → src-CC95LYYp.mjs}

@@ -1,4 +1,4 @@
-import { $ as bCountSchema, $n as scalarAfter, $t as fileIdentitySchema, A as bDuplicateMirror, B as bEvidenceReader, Bn as validatePlan, Bt as sessionPeriodSchema, C as validateBUnit, Ct as cardsSubmitSchema, D as uncoveredBObligations, Dn as entityDictionaryVersion, Dt as privacyResolveSchema, E as bLiterals, En as cleanupImplementationVersion, Et as packageConfirmActionSchema, Ft as termTypeInfo, G as subtractBRanges, Gn as detectStatic, H as codePointLength, Ht as ApplicationError, I as bIssue, It as termTypeSchema, J as bRetainedGroupSchema, Jt as reviewFamilies, Kt as familyNeedsReview, L as bOverlaps, Ln as validateProfile, Lt as termTypes, M as bLegacyBindings, Mt as reviewTermsResultSchema, N as bUnitFragments, Nt as termAssessmentSchema, O as indexBRanges, Ot as privacyTermKey, P as bAdoptedObligations, Pt as termOverrideValueSchema, Q as bAnchorSchema, Qt as sourceSnapshotId, R as unownedBObligations, Rn as orderProfile, Rt as deselectOutsidePeriod, S as validateBFields, St as cardsConfirmActionSchema, T as bLiteralTerms, Tt as emptyJourneyPrivacy, U as codePointSlice, Ut as UnfinishedJourneyError, V as bDigest, Vn as copyData, Vt as classificationTitleMaskSchema, W as createCodePointIndex, Wt as safeCode, X as bSessionDecisionSchema, Xn as createEntityMatcher, Xt as sourceKey, Y as bReviewSubmissionSchema, Yt as sourceGraph, Z as bTermSchema, Zt as observeSource, _ as semanticFindingSchema, _n as gapReasons, _t as hideConfirmSchema, a as reviewChunkSchema, at as journeyExceptionSchema, b as validateBReview, bn as staticDefaults, bt as journeyConfigurationSchema, c as textDigest, ct as journeyPreferenceScopeSchema, dt as nativeJourneySchema, en as inventorySchema, er as scalarBefore, et as bIdSchema, f as reviewAlignmentAuditSchema, ft as journeyGuidanceSchema, g as validateReviewAlignment, h as reviewFindingsDigest, hn as inspectionSemanticVersions, ht as journeyDescribeSchema, i as reviewBatchSchema, in as nativeSourceIdentitySchema, it as journeyDigestSchema, jt as reviewTermsInputSchema, l as validateReview, lt as journeyProjectTypeSchema, m as reviewAlignmentSchema, mn as currentDetectorVersion, mt as delegatedDecisionSchema, n as compileBFindings, nn as sourcePartSchema, nt as journeyAccessSchema, o as reviewDigest, ot as journeyIdSchema, p as reviewAlignmentInputSchema, pt as journeyInstructionInputSchema, q as bRepresentationSchema, qn as staticCategories, qt as familySelected, r as reviewBatchChunks, rt as journeyChoiceSchema, s as reviewSubmitSchema, st as journeyKindSchema, tr as defaultDetectionLimits, tt as bMethod, u as findingReferenceKey, ut as journeyWorkTypeSchema, vt as hidePlanInputSchema, w as bLiteralAdmitted, x as createBAnalysisUnits, xn as staticOptions, xt as cardAnswerActionSchema, y as validateBClassification, yn as createStaticProcessor, yt as hidePlanResourceSchema, z as bAnchorKey } from "./locate-Bn32k2se.mjs";
+import { $ as bCountSchema, $n as scalarAfter, $t as fileIdentitySchema, A as bDuplicateMirror, B as bEvidenceReader, Bn as validatePlan, Bt as sessionPeriodSchema, C as validateBUnit, Ct as cardsSubmitSchema, D as uncoveredBObligations, Dn as entityDictionaryVersion, Dt as privacyResolveSchema, E as bLiterals, En as cleanupImplementationVersion, Et as packageConfirmActionSchema, Ft as termTypeInfo, G as subtractBRanges, Gn as detectStatic, H as codePointLength, Ht as ApplicationError, I as bIssue, It as termTypeSchema, J as bRetainedGroupSchema, Jt as reviewFamilies, Kt as familyNeedsReview, L as bOverlaps, Ln as validateProfile, Lt as termTypes, M as bLegacyBindings, Mt as reviewTermsResultSchema, N as bUnitFragments, Nt as termAssessmentSchema, O as indexBRanges, Ot as privacyTermKey, P as bAdoptedObligations, Pt as termOverrideValueSchema, Q as bAnchorSchema, Qt as sourceSnapshotId, R as unownedBObligations, Rn as orderProfile, Rt as deselectOutsidePeriod, S as validateBFields, St as cardsConfirmActionSchema, T as bLiteralTerms, Tt as emptyJourneyPrivacy, U as codePointSlice, Ut as UnfinishedJourneyError, V as bDigest, Vn as copyData, Vt as classificationTitleMaskSchema, W as createCodePointIndex, Wt as safeCode, X as bSessionDecisionSchema, Xn as createEntityMatcher, Xt as sourceKey, Y as bReviewSubmissionSchema, Yt as sourceGraph, Z as bTermSchema, Zt as observeSource, _ as semanticFindingSchema, _n as gapReasons, _t as hideConfirmSchema, a as reviewChunkSchema, at as journeyExceptionSchema, b as validateBReview, bn as staticDefaults, bt as journeyConfigurationSchema, c as textDigest, ct as journeyPreferenceScopeSchema, dt as nativeJourneySchema, en as inventorySchema, er as scalarBefore, et as bIdSchema, f as reviewAlignmentAuditSchema, ft as journeyGuidanceSchema, g as validateReviewAlignment, h as reviewFindingsDigest, hn as inspectionSemanticVersions, ht as journeyDescribeSchema, i as reviewBatchSchema, in as nativeSourceIdentitySchema, it as journeyDigestSchema, jt as reviewTermsInputSchema, l as validateReview, lt as journeyProjectTypeSchema, m as reviewAlignmentSchema, mn as currentDetectorVersion, mt as delegatedDecisionSchema, n as compileBFindings, nn as sourcePartSchema, nt as journeyAccessSchema, o as reviewDigest, ot as journeyIdSchema, p as reviewAlignmentInputSchema, pt as journeyInstructionInputSchema, q as bRepresentationSchema, qn as staticCategories, qt as familySelected, r as reviewBatchChunks, rt as journeyChoiceSchema, s as reviewSubmitSchema, st as journeyKindSchema, tr as defaultDetectionLimits, tt as bMethod, u as findingReferenceKey, ut as journeyWorkTypeSchema, vt as hidePlanInputSchema, w as bLiteralAdmitted, x as createBAnalysisUnits, xn as staticOptions, xt as cardAnswerActionSchema, y as validateBClassification, yn as createStaticProcessor, yt as hidePlanResourceSchema, z as bAnchorKey } from "./locate-U3-nkird.mjs";
 import { z } from "zod";
 import { createHash, createHmac, createSecretKey, randomUUID } from "node:crypto";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
@@ -1330,8 +1330,6 @@ function mergePrivacyTerms(state, incoming) {
 	return {
 		...state.privacy,
 		terms: [...terms.values()],
-		cards: [],
-		confirmedAnswersRevision: null,
 		packageApproval: null
 	};
 }
@@ -1344,9 +1342,16 @@ function activePrivacyTerms(state) {
 function hasCompleteWorkDescription(work) {
 	return work.placement === "placed" && !!work.description.trim() && work.classificationRecommendation !== null;
 }
-/** Dropped Works are not AI-read; a Work emptied by repartition has nothing left to read. */
+/**
+* Dropped Works are not AI-read; a Work emptied by repartition has nothing left to read, and
+* roots classification has not grouped yet are read once they join a Work (E2).
+*/
 function isSelectedWork(work) {
-	return work.access !== "drop" && work.rootSessionIds.length > 0;
+	return work.access !== "drop" && work.rootSessionIds.length > 0 && work.placement !== "classifying";
+}
+/** Classification published some Works and is still grouping the remaining roots (E2). */
+function isClassifying(state) {
+	return state.works.some((work) => work.placement === "classifying");
 }
 function selectedWorks(state) {
 	return state.works.filter(isSelectedWork);
@@ -1365,7 +1370,7 @@ function hasCertifiedNoBatchReview(work, snapshotId) {
 }
 /** Reading completes over selected Works once the person has confirmed the scan scope. */
 function isReadingComplete(state) {
-	return state.scope.status === "confirmed" && state.works.length > 0 && selectedWorks(state).every((work) => work.status !== "pending" && work.status !== "blocked" && (work.totalBatches > 0 || hasCertifiedNoBatchReview(work, state.snapshotId)) && work.completedBatches === work.totalBatches);
+	return state.scope.status === "confirmed" && state.works.length > 0 && !isClassifying(state) && selectedWorks(state).every((work) => work.status !== "pending" && work.status !== "blocked" && (work.totalBatches > 0 || hasCertifiedNoBatchReview(work, state.snapshotId)) && work.completedBatches === work.totalBatches);
 }
 /** Recompute completion after a selection or reading change without leaving a paused/send phase. */
 function withReadingProgress(state) {
@@ -1404,7 +1409,9 @@ const staticSessionResourceSchema = z.object({
 	result: staticFileSchema,
 	primary: staticFileSchema,
 	companion: staticFileSchema,
-	masks: staticFileSchema
+	masks: staticFileSchema,
+	/** Model-facing image blocks this session's output leaves out; absent on older receipts. */
+	imagesOmitted: count$12.optional()
 }).strict();
 const staticSessionId = (resource) => `${resource.workId}:${resource.inputRevision}:${resource.sessionId}`;
 /** Binds one Work's complete static base to the exact session results it was sealed from. */
@@ -1512,7 +1519,11 @@ const day = z.string().regex(/^\d{4}-\d{2}-\d{2}$/u);
 const journeyCatalogWorkSchema = z.object({
 	id: journeyIdSchema,
 	projectName: safeText,
-	placement: z.enum(["placed", "unsorted"]),
+	placement: z.enum([
+		"placed",
+		"unsorted",
+		"classifying"
+	]),
 	access: journeyAccessSchema,
 	projectType: journeyWorkTypeSchema.nullable(),
 	roots: count$11,
@@ -1808,7 +1819,45 @@ function assertJourneyPrivacyReady(state, packaging = false) {
 	assertJourneyStaticReady(state);
 	if (packaging && state.privacy.packageApproval !== privacyDecisionDigest(state)) throw new ApplicationError("CONFIRMATION_REQUIRED");
 }
+/** Card batches start once the scan scope is confirmed (D3); they need not wait for reading. */
+function assertCardsAllowed(state) {
+	if (!state.consent || state.scope.status !== "confirmed") throw new ApplicationError("SCOPE_NOT_READY");
+}
+/**
+* D3: a batch covers only Pending values no card covers yet. Values added to an existing card
+* take its answer at once when the person already answered it.
+*/
+function appendDecisionCards(state, input) {
+	assertCardsAllowed(state);
+	const existing = new Set(state.privacy.cards.map((card) => card.id));
+	const coveredBefore = new Set(state.privacy.cards.flatMap((card) => card.termKeys));
+	const open = new Set(activePrivacyTerms(state).filter((term) => term.disposition === "pending").map(privacyTermKey).filter((key) => !coveredBefore.has(key)));
+	const extend = input.extend ?? [];
+	const covered = [...input.cards.flatMap((card) => card.termKeys), ...extend.flatMap((item) => item.termKeys)];
+	if (!covered.length || state.privacy.cards.length + input.cards.length > 20 || new Set(input.cards.map((card) => card.id)).size !== input.cards.length || input.cards.some((card) => existing.has(card.id)) || new Set(extend.map((item) => item.cardId)).size !== extend.length || extend.some((item) => !existing.has(item.cardId)) || new Set(covered).size !== covered.length || covered.some((key) => !open.has(key))) throw new ApplicationError("INVALID_SELECTION");
+	const additions = new Map(extend.map((item) => [item.cardId, item.termKeys]));
+	return applyCardAnswers({
+		...retirePrivacyArtifacts(state),
+		privacy: {
+			...state.privacy,
+			cards: [...state.privacy.cards.map((card) => {
+				const added = additions.get(card.id);
+				return added ? {
+					...card,
+					termKeys: [...card.termKeys, ...added]
+				} : card;
+			}), ...input.cards.map((card) => ({
+				...card,
+				answer: null
+			}))],
+			confirmedAnswersRevision: input.cards.length ? null : state.privacy.confirmedAnswersRevision,
+			packageApproval: null
+		}
+	});
+}
 function publishDecisionCards(state, input) {
+	if (input.mode === "append") return appendDecisionCards(state, input);
+	if (input.extend?.length) throw new ApplicationError("INVALID_SELECTION");
 	assertJourneyScanned(state);
 	const pending = new Set(activePrivacyTerms(state).filter((term) => term.disposition === "pending").map(privacyTermKey));
 	const covered = input.cards.flatMap((card) => card.termKeys);
@@ -1838,19 +1887,45 @@ function resolvePrivacyTerms(state, input) {
 	const resolutions = new Map(input.resolutions.map((term) => [privacyTermKey(term), term]));
 	const pending = new Set(activePrivacyTerms(state).filter((term) => term.disposition === "pending").map(privacyTermKey));
 	if (resolutions.size !== input.resolutions.length || [...resolutions.keys()].some((key) => !pending.has(key))) throw new ApplicationError("INVALID_SELECTION");
-	let terms = state.privacy.terms.map((term) => {
+	const terms = state.privacy.terms.map((term) => {
 		const resolution = resolutions.get(privacyTermKey(term));
 		return resolution ? {
 			...term,
 			...resolution
 		} : term;
 	});
-	const active = activePrivacyTerms({
+	for (const same of Map.groupBy(activePrivacyTerms({
 		...state,
 		privacy: {
 			...state.privacy,
 			terms
 		}
+	}), (term) => term.value.normalize("NFC")).values()) if (same.some((term) => term.disposition === "pending") && input.resolutions.some((item) => item.value.normalize("NFC") === same[0]?.value.normalize("NFC"))) throw new ApplicationError("INVALID_SELECTION");
+	return {
+		...retirePrivacyArtifacts(state),
+		privacy: {
+			...state.privacy,
+			terms: normalizeValues(state, terms),
+			packageApproval: null
+		}
+	};
+}
+/** Keys of answered cards that took one option, leaving out values the person unticked. */
+function answeredKeys(state, optionId) {
+	return new Set(state.privacy.cards.flatMap((card) => {
+		if (!card.answer) return [];
+		const excluded = new Set(card.answer.excludedTermKeys ?? []);
+		return card.answer.optionId === optionId ? card.termKeys.filter((key) => !excluded.has(key)) : [...excluded];
+	}));
+}
+/** One NFC value has one outcome across term types, cards and per-value rules. */
+function normalizeValues(state, input) {
+	const active = activePrivacyTerms({
+		...state,
+		privacy: {
+			...state.privacy,
+			terms: input
+		}
 	});
 	const overrides = /* @__PURE__ */ new Map();
 	for (const item of state.valueOverrides ?? []) {
@@ -1858,7 +1933,7 @@ function resolvePrivacyTerms(state, input) {
 		if (!overrides.has(value)) overrides.set(value, item);
 	}
 	const cardValues = (optionId) => {
-		const keys = new Set(state.privacy.cards.flatMap((card) => card.answer?.optionId === optionId ? card.termKeys : []));
+		const keys = answeredKeys(state, optionId);
 		return new Set(state.privacy.terms.filter((term) => keys.has(privacyTermKey(term))).map((term) => term.value.normalize("NFC")));
 	};
 	const hideCardValues = cardValues("hide");
@@ -1866,7 +1941,6 @@ function resolvePrivacyTerms(state, input) {
 	const ownNames = workProjectNames(state);
 	const normalized = /* @__PURE__ */ new Map();
 	for (const same of Map.groupBy(active, (term) => term.value.normalize("NFC")).values()) {
-		if (same.some((term) => term.disposition === "pending") && input.resolutions.some((item) => item.value.normalize("NFC") === same[0]?.value.normalize("NFC"))) throw new ApplicationError("INVALID_SELECTION");
 		if (same.some((term) => term.disposition === "pending")) continue;
 		const forcedHidden = same.some((term) => !termTypeInfo[term.type].asked);
 		const override = overrides.get(same[0]?.value.normalize("NFC") ?? "");
@@ -1879,51 +1953,79 @@ function resolvePrivacyTerms(state, input) {
 			reason: disposition === "hidden" && term.disposition !== "hidden" ? hideCard && !same.some((item) => item.disposition === "hidden") ? "A Hide card answer covering this value takes precedence over Keep." : "A Hidden judgment for this NFC keyword takes precedence across term types." : ownKeep && term.disposition !== "keep" ? OWN_PROJECT_KEEP_REASON : term.reason
 		});
 	}
-	terms = terms.map((term) => {
+	return input.map((term) => {
 		const result = normalized.get(privacyTermKey(term));
 		return result ? {
 			...term,
 			...result
 		} : term;
 	});
+}
+/**
+* The CLI applies card answers itself (D3): Hide makes every covered value Hidden and Keep keeps
+* it, an unticked value takes the other option, then one value gets one outcome.
+*/
+function applyCardAnswers(state) {
+	if (!state.privacy.cards.some((card) => card.answer)) return state;
+	const hide = answeredKeys(state, "hide");
+	const keep = answeredKeys(state, "keep");
+	const terms = state.privacy.terms.map((term) => {
+		const key = privacyTermKey(term);
+		if (hide.has(key) && term.disposition !== "hidden") return {
+			...term,
+			disposition: "hidden",
+			reason: "Hidden by your decision card answer."
+		};
+		if (keep.has(key) && !hide.has(key) && term.disposition !== "keep") return {
+			...term,
+			disposition: "keep",
+			reason: "Kept by your decision card answer."
+		};
+		return term;
+	});
 	return {
-		...retirePrivacyArtifacts(state),
+		...state,
 		privacy: {
 			...state.privacy,
-			terms,
-			packageApproval: null
+			terms: normalizeValues(state, terms)
 		}
 	};
 }
 function respondPrivacy(state, action, source) {
 	if (action.kind === "card-answer") {
-		assertJourneyScanned(state);
+		assertCardsAllowed(state);
+		if (state.phase === "sending" || state.phase === "completed") throw new ApplicationError("INVALID_TRANSITION");
 		const card = state.privacy.cards.find((item) => item.id === action.cardId);
 		const option = card?.options.find((item) => item.id === action.optionId);
 		if (!card || !option) throw new ApplicationError("UNKNOWN_ITEM");
+		const excluded = action.excludedTermKeys ?? [];
 		const keys = new Set(card.termKeys);
-		return {
+		if (new Set(excluded).size !== excluded.length || excluded.some((key) => !keys.has(key))) throw new ApplicationError("INVALID_SELECTION");
+		const cards = state.privacy.cards.map((item) => item.id !== card.id ? item : {
+			...item,
+			answer: {
+				optionId: option.id,
+				rule: [option.rule, action.rule?.trim()].filter(Boolean).join("\n"),
+				additionalRule: action.rule?.trim() ?? "",
+				remember: action.remember,
+				...excluded.length ? { excludedTermKeys: excluded } : {}
+			}
+		});
+		const answersRevision = state.privacy.answersRevision + 1;
+		return applyCardAnswers({
 			...retirePrivacyArtifacts(state),
 			privacy: {
 				...state.privacy,
-				cards: state.privacy.cards.map((item) => item.id !== card.id ? item : {
-					...item,
-					answer: {
-						optionId: option.id,
-						rule: [option.rule, action.rule?.trim()].filter(Boolean).join("\n"),
-						additionalRule: action.rule?.trim() ?? "",
-						remember: action.remember
-					}
-				}),
+				cards,
 				terms: state.privacy.terms.map((term) => keys.has(privacyTermKey(term)) ? {
 					...term,
 					disposition: "pending"
 				} : term),
-				answersRevision: state.privacy.answersRevision + 1,
-				confirmedAnswersRevision: null,
+				answersRevision,
+				confirmedAnswersRevision: cards.every((item) => item.answer) ? answersRevision : null,
 				packageApproval: null
 			}
-		};
+		});
 	}
 	if (action.kind === "cards-confirm") {
 		assertJourneyScanned(state);
@@ -1979,7 +2081,17 @@ const journeyClassificationSubmitSchema = z.object({
 			access: journeyAccessSchema,
 			reason: z.string().trim().min(1).max(200)
 		}).strict()
-	}).strict()).min(1).max(1e3)
+	}).strict()).min(1).max(1e3),
+	/**
+	* E2: roots classification has not grouped yet. They wait in one unread Work while the
+	* listed Works are confirmed and read; a later submission without them completes it.
+	*/
+	pendingRootSessionIds: z.array(z.string().min(1).max(128)).max(1e4).optional(),
+	/**
+	* While roots are still being grouped, scan writes keep moving the revision: a later
+	* submission is bound to the classification it replaces instead (E2).
+	*/
+	expectedClassificationRevision: count$10.optional()
 }).strict();
 const journeyClassificationSessionsSchema = z.object({
 	journeyId: journeyIdSchema,
@@ -4505,7 +4617,7 @@ function propagateGroups(state, action) {
 /** Classification confirmation fixes visibility and scan membership for this journey. */
 function confirmScope(state, now, decision) {
 	if (state.scope.status === "confirmed") return state;
-	if (state.classificationRevision === null || !state.works.length || state.works.some((work) => work.placement !== "placed" || !(work.status === "blocked" && work.access === "drop" && work.accessConfirmed) && (!work.description.trim() || !work.projectType))) throw new ApplicationError("SCOPE_NOT_READY");
+	if (state.classificationRevision === null || !state.works.length || state.works.some((work) => work.placement !== "placed" && work.placement !== "classifying" || work.placement === "placed" && !(work.status === "blocked" && work.access === "drop" && work.accessConfirmed) && (!work.description.trim() || !work.projectType))) throw new ApplicationError("SCOPE_NOT_READY");
 	return withReadingProgress({
 		...state,
 		scope: {
@@ -4513,7 +4625,7 @@ function confirmScope(state, now, decision) {
 			actor: decision ? "delegate" : "human",
 			at: now
 		},
-		works: state.works.map((work) => work.accessConfirmed || !work.classificationRecommendation ? {
+		works: state.works.map((work) => work.placement === "classifying" ? work : work.accessConfirmed || !work.classificationRecommendation ? {
 			...work,
 			accessConfirmed: true
 		} : {
@@ -4558,7 +4670,7 @@ function setWorkType(state, workId, type, decision) {
 function setWorksAccess(state, workIds, access, decision) {
 	if (new Set(workIds).size !== workIds.length) throw new ApplicationError("INVALID_SELECTION");
 	if (workIds.some((id) => !state.works.some((work) => work.id === id))) throw new ApplicationError("UNKNOWN_WORKSPACE");
-	if (state.scope.status === "confirmed") return dropBlockedWorks(state, workIds, access, decision);
+	if (state.scope.status === "confirmed") return changeConfirmedAccess(state, workIds, access, decision);
 	return withReadingProgress({
 		...state,
 		scope: {
@@ -4584,11 +4696,12 @@ function setWorksAccess(state, workIds, access, decision) {
 	});
 }
 /**
-* ADR 0188: after confirmation the person, never a delegate, may only Drop a Work that
-* preparation blocked. The scope stays confirmed; reading progress is recomputed.
+* After confirmation the person, never a delegate, may still change any Work's visibility
+* (D2, superseding ADR 0162's lock and ADR 0188's blocked-only Drop). Drop stops that Work's
+* scan; a Work moved out of Drop is read again; reading progress is recomputed.
 */
-function dropBlockedWorks(state, workIds, access, decision) {
-	if (decision || access !== "drop" || state.phase === "sending" || state.phase === "completed" || state.works.some((work) => workIds.includes(work.id) && (work.status !== "blocked" || work.access === "drop"))) throw new ApplicationError("INVALID_TRANSITION");
+function changeConfirmedAccess(state, workIds, access, decision) {
+	if (decision || state.phase === "sending" || state.phase === "completed" || state.works.some((work) => workIds.includes(work.id) && work.access === access)) throw new ApplicationError("INVALID_TRANSITION");
 	return withReadingProgress({
 		...state,
 		privacy: {
@@ -4598,7 +4711,9 @@ function dropBlockedWorks(state, workIds, access, decision) {
 		works: state.works.map((work) => workIds.includes(work.id) ? {
 			...work,
 			revision: work.revision + 1,
-			access: "drop",
+			artifact: null,
+			status: work.status === "ready" ? "review" : work.status,
+			access,
 			accessConfirmed: true,
 			accessOrigin: "explicit"
 		} : work)
@@ -4687,7 +4802,7 @@ function respondToJourney(state, action, source, now, decision, preferenceScope)
 		};
 	}
 	if (action.kind === "consent") {
-		if (source !== "conversation" || decision) throw new ApplicationError("CONFIRMATION_REQUIRED");
+		if (decision) throw new ApplicationError("CONFIRMATION_REQUIRED");
 		if (state.consent) return state;
 		if (!action.allow) return {
 			...state,
@@ -4801,7 +4916,7 @@ function pendingGroups(state) {
 * It is never filtered by Work or relevance, so its digest proves which guidance was current.
 */
 function journeyGuidance(state) {
-	const rules = [...state.privacy.rememberedRules, ...state.privacy.cards.flatMap((card) => card.answer ? [card.answer.rule] : [])];
+	const rules = [...state.privacy.rememberedRules, ...state.privacy.cards.flatMap((card) => card.answer ? [answeredRule(card)] : [])];
 	const conditions = state.groups.map(({ id, kind, key, label, condition, choice, confirmed, origin }) => ({
 		groupId: id,
 		kind,
@@ -4841,6 +4956,17 @@ function journeyGuidance(state) {
 		rules
 	};
 }
+/**
+* An answered card as scan children read it: the question with the answer, so a value that fits
+* the question takes that answer instead of staying Pending (E3).
+*/
+function answeredRule(card) {
+	const answer = card.answer;
+	if (!answer) return "";
+	const label = card.options.find((option) => option.id === answer.optionId)?.label;
+	const rule = `Answered question “${card.question}”: ${answer.optionId === "hide" ? "Hide" : "Keep"}${label ? ` (“${label}”)` : ""}. ${answer.rule}`;
+	return rule.length <= 4001 ? rule : answer.rule;
+}
 //#endregion
 //#region packages/application/src/journey/review/agents.ts
 /** A dispatch without a pack ID is its own analysis agent. */
@@ -5513,9 +5639,11 @@ function journeyView(state, now) {
 		},
 		works: state.works.map((work) => {
 			const localTitle = work.suggestion || work.explicitTitleId ? work.title : work.classificationMetadata?.title ?? work.title;
+			const imagesOmitted = hasCurrentStaticReview(state, work) ? work.staticReview?.imagesOmitted ?? 0 : 0;
 			if (!work.classificationMetadata) return {
 				...work,
-				localTitle
+				localTitle,
+				imagesOmitted
 			};
 			const metadata = work.classificationMetadata;
 			const displayed = {
@@ -5528,6 +5656,7 @@ function journeyView(state, now) {
 				...work,
 				...displayed,
 				localTitle,
+				imagesOmitted,
 				projectType: work.projectType ? {
 					...work.projectType,
 					reason: work.projectType.origin === "model" ? displayed.reason : work.projectType.reason
@@ -5668,10 +5797,30 @@ function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).t
 			id: "current"
 		})).find((resource) => resource.kind === "classification-progress");
 		if (previous) {
-			const contains = (next, prior) => prior.every((id) => next.includes(id));
 			const replacesObsoleteAttempt = previous.baselineRevision !== progress.baselineRevision && progress.baselineRevision === state.revision && progress.status === "running" && progress.stage === "classification" && progress.completedRootIds.length === 0 && progress.groupedRootIds.length === 0 && progress.aiCompletedRootIds.length === 0 && Date.parse(progress.startedAt) > Date.parse(previous.startedAt);
 			const restartsFailedAttempt = previous.status === "failed" && previous.baselineRevision === progress.baselineRevision && progress.baselineRevision === state.revision && progress.status === "running" && progress.stage === "classification" && progress.completedRootIds.length === 0 && progress.groupedRootIds.length === 0 && progress.aiCompletedRootIds.length === 0 && Date.parse(progress.startedAt) > Date.parse(previous.startedAt);
-			if (!replacesObsoleteAttempt && !restartsFailedAttempt && (previous.inputFingerprint !== progress.inputFingerprint || previous.baselineRevision !== progress.baselineRevision || previous.proposalRevision !== null && previous.proposalRevision !== progress.proposalRevision || previous.startedAt !== progress.startedAt || Date.parse(progress.updatedAt) < Date.parse(previous.updatedAt) || progress.elapsedMs < previous.elapsedMs || previous.stage === "proposal" && progress.stage === "classification" || previous.status === "complete" && progress.status !== "complete" || !contains(progress.completedRootIds, previous.completedRootIds) || !contains(progress.groupedRootIds, previous.groupedRootIds) || !contains(progress.aiCompletedRootIds, previous.aiCompletedRootIds))) throw new ApplicationError("REVISION_CONFLICT");
+			if (!replacesObsoleteAttempt && !restartsFailedAttempt) {
+				if (previous.inputFingerprint !== progress.inputFingerprint || previous.baselineRevision !== progress.baselineRevision || previous.proposalRevision !== null && previous.proposalRevision !== progress.proposalRevision || previous.startedAt !== progress.startedAt) throw new ApplicationError("REVISION_CONFLICT");
+				const union = (left, right) => [.../* @__PURE__ */ new Set([...left, ...right])].toSorted();
+				const rank = {
+					running: 0,
+					paused: 0,
+					failed: 1,
+					complete: 2
+				};
+				await storage.saveResource({
+					...progress,
+					stage: previous.stage === "proposal" ? "proposal" : progress.stage,
+					status: rank[previous.status] > rank[progress.status] ? previous.status : progress.status,
+					proposalRevision: progress.proposalRevision ?? previous.proposalRevision,
+					updatedAt: Date.parse(previous.updatedAt) > Date.parse(progress.updatedAt) ? previous.updatedAt : progress.updatedAt,
+					elapsedMs: Math.max(previous.elapsedMs, progress.elapsedMs),
+					completedRootIds: union(previous.completedRootIds, progress.completedRootIds),
+					groupedRootIds: union(previous.groupedRootIds, progress.groupedRootIds),
+					aiCompletedRootIds: union(previous.aiCompletedRootIds, progress.aiCompletedRootIds)
+				});
+				return { accepted: true };
+			}
 		}
 		await storage.saveResource(progress);
 		return { accepted: true };
@@ -5806,16 +5955,29 @@ function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).t
 				state: await present(result.state)
 			};
 		}
+		const rebase = source === "panel" && !input.decision && [
+			"consent",
+			"work-access",
+			"works-access",
+			"card-answer"
+		].includes(input.action.kind);
+		for (let attempt = 0;; attempt++) {
+			const result = await commitResponse(input, source, rebase);
+			if (result.status !== "stale" || !rebase || attempt >= 4) return result;
+		}
+	}
+	async function commitResponse(input, source, rebase) {
 		const current = await storage.current(input.journeyId);
 		if (!current) throw new ApplicationError("UNKNOWN_ITEM");
-		const state = current.revision === input.expectedRevision ? respondToJourney(current, input.action, source, now(), input.decision, input.preferenceScope) : current;
+		const expectedRevision = rebase ? current.revision : input.expectedRevision;
+		const state = current.revision === expectedRevision ? respondToJourney(current, input.action, source, now(), input.decision, input.preferenceScope) : current;
 		const groupIds = input.action.kind === "group" ? [input.action.groupId] : input.action.kind === "groups-hide" ? input.action.groupIds : [];
 		const preferenceScopes = input.decision ? [] : state.groups.flatMap((group) => groupIds.includes(group.id) && group.preferenceScope ? [{
 			groupId: group.id,
 			preferenceScope: group.preferenceScope
 		}] : []);
 		const result = await storage.commit({
-			expectedRevision: input.expectedRevision,
+			expectedRevision,
 			requestKey: input.idempotencyKey,
 			requestHash: digest$1(input),
 			state,
@@ -6051,11 +6213,19 @@ function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).t
 	}
 	async function privacyWrite(value, resolve) {
 		const input = resolve ? privacyResolveSchema.parse(value) : cardsSubmitSchema.parse(value);
+		const rebase = "mode" in input && input.mode === "append";
+		for (let attempt = 0;; attempt++) {
+			const result = await commitPrivacy(input, rebase);
+			if (result.status !== "stale" || !rebase || attempt >= 4) return result;
+		}
+	}
+	async function commitPrivacy(input, rebase) {
 		const current = await storage.current(input.journeyId);
 		if (!current) throw new ApplicationError("UNKNOWN_ITEM");
-		const state = current.revision !== input.expectedRevision ? current : "resolutions" in input ? resolvePrivacyTerms(current, input) : publishDecisionCards(current, input);
+		const expectedRevision = rebase ? current.revision : input.expectedRevision;
+		const state = current.revision !== expectedRevision ? current : "resolutions" in input ? resolvePrivacyTerms(current, input) : publishDecisionCards(current, input);
 		const result = await storage.commit({
-			expectedRevision: input.expectedRevision,
+			expectedRevision,
 			requestKey: input.idempotencyKey,
 			requestHash: digest$1(input),
 			state,
@@ -6298,6 +6468,8 @@ const sendItemSchema = z.object({
 	reservation: sendUploadInputSchema.nullable(),
 	receipt: savedSendReceiptSchema.nullable(),
 	previousReceipts: z.array(savedSendReceiptSchema),
+	/** The receipt whose bytes were PUT but not yet completed: the next step completes it (BL-210). */
+	uploadedReceiptId: journeyIdSchema.nullable().optional(),
 	status: z.enum([
 		"ready",
 		"target",
@@ -6417,6 +6589,9 @@ function safeJourneySender(sender, now) {
 		async resume(input) {
 			return safe(await sender.resume(input));
 		},
+		async withdraw(input) {
+			return safe(await sender.withdraw(input));
+		},
 		async advance(input, signal = new AbortController().signal) {
 			return safe(await sender.advance(input, signal));
 		}
@@ -10009,6 +10184,28 @@ const validateInspectionClaim = (input) => decode(inspectionClaimSchema, input);
 const validateInspectionHead = (input) => decode(inspectionHeadSchema, input);
 const validateInspectionQuery = (input) => decode(inspectionQuerySchema, input);
 //#endregion
+//#region packages/application/src/inspection/validation/request.ts
+/**
+* The inspection Worker receives its request across a thread boundary. A real inventory can exceed
+* the persisted-evidence decoding bounds, so this parses the host's own request unbounded.
+*/
+const inspectionRequestSchema = z.object({
+	customTerms: z.object({
+		revision: z.string().min(1).max(64),
+		terms: z.array(z.string().max(1024)).max(1e5)
+	}).optional(),
+	inputs: inspectionInputsSchema,
+	inventory: inventorySchema,
+	cleanupBySession: z.record(z.string(), cleanupSelectionSchema)
+});
+const validateInspectionRequest = (input) => {
+	const { customTerms, ...request } = inspectionRequestSchema.parse(input);
+	return customTerms ? {
+		...request,
+		customTerms
+	} : request;
+};
+//#endregion
 //#region packages/application/src/inspection/validation/index.ts
 const inspectionBatchSchema = z.object({
 	contributions: z.array(inspectionContributionSchema).max(128),
@@ -11025,7 +11222,7 @@ function profileUrlMatchesIdentity(profileUrl, identityUrl) {
 }
 const deviceProfileScopeSchema = z.string().max(256).refine((scope) => {
 	const scopes = new Set(scope.trim().split(/\s+/u));
-	return scopes.size === 2 && scopes.has("openid") && scopes.has("profile");
+	return scopes.size === (scopes.has("offline_access") ? 3 : 2) && scopes.has("openid") && scopes.has("profile");
 });
 /** Display data resolved together from the issued token's UserInfo response. */
 const accountProfileSchema = z.object({
@@ -11052,6 +11249,8 @@ const storedCredentialSchema = accountProfileSchema.extend({
 	identityUrl: z.string().min(1).max(2048),
 	clientId: z.string().min(1).max(256),
 	accessToken: z.string().min(1).max(4096),
+	/** Renews the access token without a new device approval (BL-210); absent when not issued. */
+	refreshToken: z.string().min(1).max(4096).optional(),
 	tokenType: z.literal("Bearer"),
 	scope: deviceProfileScopeSchema,
 	issuedAt: z.string().min(1).max(64),
@@ -11113,7 +11312,7 @@ function createSharedAccount(ports) {
 	async function read() {
 		return update((state) => {
 			const saved = state.credential;
-			if (saved && expired(saved.expiresAt, ports.now())) {
+			if (saved && !saved.refreshToken && expired(saved.expiresAt, ports.now())) {
 				state.credential = null;
 				state.connection = null;
 				state.lastError = "SIGN_IN_EXPIRED";
@@ -11168,6 +11367,7 @@ function createSharedAccount(ports) {
 			avatarUrl: state.credential.avatarUrl,
 			profileUrl: state.credential.profileUrl,
 			expiresAt: state.credential.expiresAt,
+			renews: Boolean(state.credential.refreshToken),
 			connection: state.connection ?? null
 		};
 		return {
@@ -11227,6 +11427,7 @@ function createSharedAccount(ports) {
 					avatarUrl: identity.avatarUrl,
 					profileUrl: identity.profileUrl,
 					accessToken: result.accessToken,
+					...result.refreshToken ? { refreshToken: result.refreshToken } : {},
 					tokenType: "Bearer",
 					scope: result.scope,
 					issuedAt: ports.now(),
@@ -11287,7 +11488,8 @@ function createSharedAccount(ports) {
 			})).authorization?.id === id) await poll(id, signal, clientId);
 		} catch (error) {
 			if (signal.aborted) return;
-			console.error(`Account authorization failed: ${safeCode(error)}`);
+			const detail = typeof error === "object" && error !== null && "detail" in error ? ` (${String(error.detail)})` : "";
+			console.error(`Account authorization failed: ${safeCode(error)}${detail}`);
 			await finish(id, safeCode(error));
 			throw error;
 		} finally {
@@ -12760,23 +12962,24 @@ function retireScanGeneration(state, workId) {
 			confirmedAnswersRevision: null,
 			packageApproval: null
 		},
-		works: state.works.map((work) => {
-			if (work.id !== workId) return work;
-			const { emptyReview: _empty, excludedReview: _excluded, staticReview: _static, metadataReviewedDigest: _metadata, reviewReuseFrom: _reuse, renderFailure: _failure, ...retained } = work;
-			return {
-				...retained,
-				revision: work.revision + 1,
-				inputRevision: work.inputRevision + 1,
-				status: "pending",
-				suggestion: null,
-				totalBatches: 0,
-				completedBatches: 0,
-				groupIds: [],
-				blockedCodes: [],
-				artifact: null
-			};
-		})
+		works: state.works.map((work) => work.id === workId ? resetWorkScan(work) : work)
+	};
+}
+/** The same Work with a new scan generation: it is read again from its first session. */
+function resetWorkScan(work) {
+	const { emptyReview: _empty, excludedReview: _excluded, staticReview: _static, metadataReviewedDigest: _metadata, reviewReuseFrom: _reuse, renderFailure: _failure, ...retained } = work;
+	return {
+		...retained,
+		revision: work.revision + 1,
+		inputRevision: work.inputRevision + 1,
+		status: "pending",
+		suggestion: null,
+		totalBatches: 0,
+		completedBatches: 0,
+		groupIds: [],
+		blockedCodes: [],
+		artifact: null
 	};
 }
 //#endregion
-export { settingsBatchSchema as $, bReviewDigest as $n, defaultScopedSettings as $r, journeyResourceQuerySchema as $t, accountProfileSchema as A, packHideIndex as An, staticSessionResourceSchema as Ar, sendSettingsSchema as At, inspectionCancelSchema as B, dictionaryHides as Bn, journeyRenderInputSchema as Br, journeyBatchReadSchema as Bt, rebindReviewAlignment as C, readConfirmedHideChange as Cn, privacyDecisionDigest as Cr, sendPrepareSchema as Ct, guardedFindingText as D, addHideIndexTokens as Dn, hasCurrentStaticReview as Dr, sendReceiptSchema as Dt, reviewBatchReuse as E, termHideAdditions as En, nativeRespondSchema as Er, sendArtifactSchema as Et, storedCredentialSchema as F, bWordBounded as Fn, withReadingProgress as Fr, nativeAdapterVersions as Ft, validateInspectionClaim as G, workDecisionDigest as Gn, selectionSchema as Gr, hideBeginSchema as Gt, validateInspectionBatch as H, maskedHitsStale as Hn, commandSchema as Hr, reviewCompileSchema as Ht, sourceIdentityEvidence as I, confirmedHideGroupIds as In, mergePrivacyTerms as Ir, attemptBudgetCodePoints as It, validateInspectionInputs as J, reviewCandidateInputSchema as Jn, stateSchema as Jr, journeySearchResultSchema as Jt, validateInspectionFence as K, workPrivacyDecisions as Kn, gitMetadataBudgetBytes as Kr, hideFinishSchema as Kt, withSourceEvidence as L, confirmedHideKey as Ln, journeyFindingImpactSchema as Lr, validateAttemptAppend as Lt, deviceProfileScopeSchema as M, bExceptionRanges as Mn, isReadingComplete as Mr, currentJourneyAdapters as Mt, profileUrlMatchesIdentity as N, bMaskedHits as Nn, isSelectedWork as Nr, obsoleteJourney as Nt, staticallyHiddenFindings as O, hideKeyId as On, staticReviewDigest as Or, sendReplaceResultSchema as Ot, readAccountAvatarUrl as P, bTermMatcher as Pn, selectedWorks as Pr, metadataProcessingVersion as Pt, inspectionInputs as Q, reviewTransportBytes as Qn, effectiveTreatmentSchema as Qr, projectPreparationProgress as Qt, agentSetupKey as R, confirmedHideKinds as Rn, journeyFindingsSchema as Rr, journeyGuidance as Rt, bReviewScope as S, confirmedHideDeltaSchema as Sn, assertJourneyPrivacyReady as Sr, sendChoiceSchema as St, rebindReviewSubmit as T, settleConfirmedHides as Tn, nativeGetSchema as Tr, journeySendSchema as Tt, validateInspectionBatches as U, syncTermGroups as Un, packageCommandSchema as Ur, journeyContextQuerySchema as Ut, inspectionStartSchema as V, journeyConfirmedHides as Vn, journeyRenderSchema as Vr, journeyReviewStorageQuerySchema as Vt, inspectionQuerySchema as W, retireWorkDescription as Wn, selectionBatchSchema as Wr, journeyContextSchema as Wt, validateInspectionContribution as X, reviewRepairInputSchema as Xn, recommendParallelism as Xr, searchScopeDigest as Xt, validateInspectionQuery as Y, reviewCandidateResourceSchema as Yn, sourceChangePolicy as Yr, journeySearchSaveSchema as Yt, validateDetectionSummary as Z, reviewRepairResourceSchema as Zn, approvedTreatmentSchema as Zr, journeyPolicyRespondSchema as Zt, semanticGroupKey as _, sessionUsefulnessResourceSchema as _n, preparationBeginSchema as _r, emptyTermsRevision as _t, validateBCrossSegmentReview as a, reviewAttemptsQuerySchema as an, scanSessionResourceSchema as ar, defaultAgentSetupInclusion as at, preparationScope as b, journeyEventSchema as bn, validatePreparationFacts as br, replaceSensitiveTermsSchema as bt, reconcileBSession as c, sessionReconcileResultSchema as cn, verifiedScanGitSeeds as cr, resolveFailureLocation as ct, reviseGroupMembership as d, sessionRereadResourceSchema as dn, resolveSourceSelection as dr, manualUploadBindingSchema as dt, freezeConfiguration as ei, journeyResourceSchema as en, mergeBRepair as er, settingsQuerySchema as et, resolveGroupSplit as f, sessionReviewInputSchema as fn, journeyInventoryQuerySchema as fr, manualUploadChoiceSchema as ft, hideScopeDigest as g, sessionUsefulnessInputSchema as gn, emptyPreparationFacts as gr, candidateSortAvailable as gt, activeJourneyTerms as h, sessionReviewStatusSchema as hn, journeyPreparationProgressSchema as hr, manualUploadStartSchema as ht, locateTermEvidence as i, reviewAttemptResourceSchema as in, scanPreparationDigest as ir, classifyAgentSetup as it, deviceAuthorizationSchema as j, bContainment as jn, hasCompleteWorkDescription as jr, settleCorrections as jt, createAccount as k, maximumHideIndexTokens as kn, staticSessionId as kr, sendResolutionSchema as kt, reconstructBFields as l, sessionReconciliationResourceSchema as ln, scanExclusionResourceSchema as lr, validateFailureLocation as lt, splitSelectorValues as m, sessionReviewResourceSchema as mn, journeyInventorySchema as mr, manualUploadSchema as mt, scanBatchContextDigest as n, staticCatalogRef as ni, journeyPlaceSchema as nn, scanAliasResourceSchema as nr, reviewInventory as nt, bCrossSegmentReviewSchema as o, reviewAttemptsResultSchema as on, scanGitSeedsId as or, maximumAgentSetupSessions as ot, selectedValueMembers as p, sessionReviewQuerySchema as pn, journeyInventoryReadSchema as pr, manualUploadPrepareSchema as pt, validateInspectionHead as q, workCorrectionBinding as qn, producerVersion as qr, hidePublishSchema as qt, scanBatchEquivalenceDigest as r, sortingApplySchema as rn, scanCanonicalResourceSchema as rr, appendSensitiveTerms as rt, bRereadDigest as s, sessionReconcileInputSchema as sn, scanGitSeedsResource as sr, artifactFailureDetailSchema as st, retireScanGeneration as t, selectFrozenConfiguration as ti, journeyIsolateSchema as tn, planBRepair as tr, readWorkspaceOutcomes as tt, newJourneyWork as u, sessionRereadInputSchema as un, validateScanExclusion as ur, manualUploadActionSchema as ut, changeJourney as v, journeyCommitResultSchema as vn, preparationSettlementSchema as vr, maximumTermsFileBytes as vt, rebindReviewOverlay as w, renderedHideValue as wn, nativeEventsSchema as wr, sendStartSchema as wt, isGenericPublicTerm as x, confirmedHideAdditions as xn, journeyClassificationSessionsSchema as xr, sendActionSchema as xt, projectJourneyInventory as y, journeyCommitSchema as yn, preparationStartSchema as yr, normalizeSensitiveTerms as yt, createApplication as z, confirmedHideTerms as zn, journeyPreviewSchema as zr, applyClassification as zt };
+export { validateDetectionSummary as $, reviewRepairResourceSchema as $n, sourceChangePolicy as $r, journeyPolicyRespondSchema as $t, createAccount as A, hideKeyId as An, hasCurrentStaticReview as Ar, sendReplaceResultSchema as At, createApplication as B, confirmedHideKinds as Bn, mergePrivacyTerms as Br, journeyGuidance as Bt, bReviewScope as C, confirmedHideAdditions as Cn, journeyClassificationSessionsSchema as Cr, sendActionSchema as Ct, reviewBatchReuse as D, settleConfirmedHides as Dn, nativeEventsSchema as Dr, journeySendSchema as Dt, rebindReviewSubmit as E, renderedHideValue as En, privacyDecisionDigest as Er, sendStartSchema as Et, readAccountAvatarUrl as F, bMaskedHits as Fn, isClassifying as Fr, obsoleteJourney as Ft, validateInspectionRequest as G, syncTermGroups as Gn, journeyRenderSchema as Gr, journeyContextQuerySchema as Gt, inspectionStartSchema as H, dictionaryHides as Hn, journeyFindingsSchema as Hr, journeyBatchReadSchema as Ht, storedCredentialSchema as I, bTermMatcher as In, isReadingComplete as Ir, metadataProcessingVersion as It, validateInspectionFence as J, workPrivacyDecisions as Jn, selectionBatchSchema as Jr, hideFinishSchema as Jt, inspectionQuerySchema as K, retireWorkDescription as Kn, commandSchema as Kr, journeyContextSchema as Kt, sourceIdentityEvidence as L, bWordBounded as Ln, isSelectedWork as Lr, nativeAdapterVersions as Lt, deviceAuthorizationSchema as M, packHideIndex as Mn, staticSessionId as Mr, sendSettingsSchema as Mt, deviceProfileScopeSchema as N, bContainment as Nn, staticSessionResourceSchema as Nr, settleCorrections as Nt, guardedFindingText as O, termHideAdditions as On, nativeGetSchema as Or, sendArtifactSchema as Ot, profileUrlMatchesIdentity as P, bExceptionRanges as Pn, hasCompleteWorkDescription as Pr, currentJourneyAdapters as Pt, validateInspectionContribution as Q, reviewRepairInputSchema as Qn, stateSchema as Qr, searchScopeDigest as Qt, withSourceEvidence as R, confirmedHideGroupIds as Rn, selectedWorks as Rr, attemptBudgetCodePoints as Rt, isGenericPublicTerm as S, journeyEventSchema as Sn, validatePreparationFacts as Sr, replaceSensitiveTermsSchema as St, rebindReviewOverlay as T, readConfirmedHideChange as Tn, assertJourneyPrivacyReady as Tr, sendPrepareSchema as Tt, validateInspectionBatch as U, journeyConfirmedHides as Un, journeyPreviewSchema as Ur, journeyReviewStorageQuerySchema as Ut, inspectionCancelSchema as V, confirmedHideTerms as Vn, journeyFindingImpactSchema as Vr, applyClassification as Vt, validateInspectionBatches as W, maskedHitsStale as Wn, journeyRenderInputSchema as Wr, reviewCompileSchema as Wt, validateInspectionInputs as X, reviewCandidateInputSchema as Xn, gitMetadataBudgetBytes as Xr, journeySearchResultSchema as Xt, validateInspectionHead as Y, workCorrectionBinding as Yn, selectionSchema as Yr, hidePublishSchema as Yt, validateInspectionQuery as Z, reviewCandidateResourceSchema as Zn, producerVersion as Zr, journeySearchSaveSchema as Zt, hideScopeDigest as _, sessionReviewStatusSchema as _n, journeyPreparationProgressSchema as _r, manualUploadStartSchema as _t, locateTermEvidence as a, selectFrozenConfiguration as ai, sortingApplySchema as an, scanCanonicalResourceSchema as ar, appendSensitiveTerms as at, projectJourneyInventory as b, journeyCommitResultSchema as bn, preparationSettlementSchema as br, maximumTermsFileBytes as bt, bRereadDigest as c, reviewAttemptsResultSchema as cn, scanGitSeedsId as cr, maximumAgentSetupSessions as ct, newJourneyWork as d, sessionReconciliationResourceSchema as dn, scanExclusionResourceSchema as dr, validateFailureLocation as dt, recommendParallelism as ei, projectPreparationProgress as en, reviewTransportBytes as er, inspectionInputs as et, reviseGroupMembership as f, sessionRereadInputSchema as fn, validateScanExclusion as fr, manualUploadActionSchema as ft, activeJourneyTerms as g, sessionReviewResourceSchema as gn, journeyInventorySchema as gr, manualUploadSchema as gt, splitSelectorValues as h, sessionReviewQuerySchema as hn, journeyInventoryReadSchema as hr, manualUploadPrepareSchema as ht, scanBatchEquivalenceDigest as i, freezeConfiguration as ii, journeyPlaceSchema as in, scanAliasResourceSchema as ir, reviewInventory as it, accountProfileSchema as j, maximumHideIndexTokens as jn, staticReviewDigest as jr, sendResolutionSchema as jt, staticallyHiddenFindings as k, addHideIndexTokens as kn, nativeRespondSchema as kr, sendReceiptSchema as kt, reconcileBSession as l, sessionReconcileInputSchema as ln, scanGitSeedsResource as lr, artifactFailureDetailSchema as lt, selectedValueMembers as m, sessionReviewInputSchema as mn, journeyInventoryQuerySchema as mr, manualUploadChoiceSchema as mt, retireScanGeneration as n, effectiveTreatmentSchema as ni, journeyResourceSchema as nn, mergeBRepair as nr, settingsQuerySchema as nt, validateBCrossSegmentReview as o, staticCatalogRef as oi, reviewAttemptResourceSchema as on, scanPreparationDigest as or, classifyAgentSetup as ot, resolveGroupSplit as p, sessionRereadResourceSchema as pn, resolveSourceSelection as pr, manualUploadBindingSchema as pt, validateInspectionClaim as q, workDecisionDigest as qn, packageCommandSchema as qr, hideBeginSchema as qt, scanBatchContextDigest as r, defaultScopedSettings as ri, journeyIsolateSchema as rn, planBRepair as rr, readWorkspaceOutcomes as rt, bCrossSegmentReviewSchema as s, reviewAttemptsQuerySchema as sn, scanSessionResourceSchema as sr, defaultAgentSetupInclusion as st, resetWorkScan as t, approvedTreatmentSchema as ti, journeyResourceQuerySchema as tn, bReviewDigest as tr, settingsBatchSchema as tt, reconstructBFields as u, sessionReconcileResultSchema as un, verifiedScanGitSeeds as ur, resolveFailureLocation as ut, semanticGroupKey as v, sessionUsefulnessInputSchema as vn, emptyPreparationFacts as vr, candidateSortAvailable as vt, rebindReviewAlignment as w, confirmedHideDeltaSchema as wn, applyCardAnswers as wr, sendChoiceSchema as wt, preparationScope as x, journeyCommitSchema as xn, preparationStartSchema as xr, normalizeSensitiveTerms as xt, changeJourney as y, sessionUsefulnessResourceSchema as yn, preparationBeginSchema as yr, emptyTermsRevision as yt, agentSetupKey as z, confirmedHideKey as zn, withReadingProgress as zr, validateAttemptAppend as zt };