@gitroll/tacitt-cli 0.1.0 → 0.3.0

package/dist/{src-CPPjOyHZ.mjs → src-B4R5XMEP.mjs}

@@ -1,4 +1,4 @@
-import { $ as bCountSchema, $n as scalarAfter, $t as fileIdentitySchema, A as bDuplicateMirror, B as bEvidenceReader, Bn as validatePlan, Bt as sessionPeriodSchema, C as validateBUnit, Ct as cardsSubmitSchema, D as uncoveredBObligations, Dn as entityDictionaryVersion, Dt as privacyResolveSchema, E as bLiterals, En as cleanupImplementationVersion, Et as packageConfirmActionSchema, Ft as termTypeInfo, G as subtractBRanges, Gn as detectStatic, H as codePointLength, Ht as ApplicationError, I as bIssue, It as termTypeSchema, J as bRetainedGroupSchema, Jt as reviewFamilies, Kt as familyNeedsReview, L as bOverlaps, Ln as validateProfile, Lt as termTypes, M as bLegacyBindings, Mt as reviewTermsResultSchema, N as bUnitFragments, Nt as termAssessmentSchema, O as indexBRanges, Ot as privacyTermKey, P as bAdoptedObligations, Pt as termOverrideValueSchema, Q as bAnchorSchema, Qt as sourceSnapshotId, R as unownedBObligations, Rn as orderProfile, Rt as deselectOutsidePeriod, S as validateBFields, St as cardsConfirmActionSchema, T as bLiteralTerms, Tt as emptyJourneyPrivacy, U as codePointSlice, Ut as UnfinishedJourneyError, V as bDigest, Vn as copyData, Vt as classificationTitleMaskSchema, W as createCodePointIndex, Wt as safeCode, X as bSessionDecisionSchema, Xn as createEntityMatcher, Xt as sourceKey, Y as bReviewSubmissionSchema, Yt as sourceGraph, Z as bTermSchema, Zt as observeSource, _ as semanticFindingSchema, _n as gapReasons, _t as hideConfirmSchema, a as reviewChunkSchema, at as journeyExceptionSchema, b as validateBReview, bn as staticDefaults, bt as journeyConfigurationSchema, c as textDigest, ct as journeyPreferenceScopeSchema, dt as nativeJourneySchema, en as inventorySchema, er as scalarBefore, et as bIdSchema, f as reviewAlignmentAuditSchema, ft as journeyGuidanceSchema, g as validateReviewAlignment, h as reviewFindingsDigest, hn as inspectionSemanticVersions, ht as journeyDescribeSchema, i as reviewBatchSchema, in as nativeSourceIdentitySchema, it as journeyDigestSchema, jt as reviewTermsInputSchema, l as validateReview, lt as journeyProjectTypeSchema, m as reviewAlignmentSchema, mn as currentDetectorVersion, mt as delegatedDecisionSchema, n as compileBFindings, nn as sourcePartSchema, nt as journeyAccessSchema, o as reviewDigest, ot as journeyIdSchema, p as reviewAlignmentInputSchema, pt as journeyInstructionInputSchema, q as bRepresentationSchema, qn as staticCategories, qt as familySelected, r as reviewBatchChunks, rt as journeyChoiceSchema, s as reviewSubmitSchema, st as journeyKindSchema, tr as defaultDetectionLimits, tt as bMethod, u as findingReferenceKey, ut as journeyWorkTypeSchema, vt as hidePlanInputSchema, w as bLiteralAdmitted, x as createBAnalysisUnits, xn as staticOptions, xt as cardAnswerActionSchema, y as validateBClassification, yn as createStaticProcessor, yt as hidePlanResourceSchema, z as bAnchorKey } from "./locate-Bn32k2se.mjs";
+import { $ as bCountSchema, $n as scalarAfter, $t as fileIdentitySchema, A as bDuplicateMirror, B as bEvidenceReader, Bn as validatePlan, Bt as sessionPeriodSchema, C as validateBUnit, Ct as cardsSubmitSchema, D as uncoveredBObligations, Dn as entityDictionaryVersion, Dt as privacyResolveSchema, E as bLiterals, En as cleanupImplementationVersion, Et as packageConfirmActionSchema, Ft as termTypeInfo, G as subtractBRanges, Gn as detectStatic, H as codePointLength, Ht as ApplicationError, I as bIssue, It as termTypeSchema, J as bRetainedGroupSchema, Jt as reviewFamilies, Kt as familyNeedsReview, L as bOverlaps, Ln as validateProfile, Lt as termTypes, M as bLegacyBindings, Mt as reviewTermsResultSchema, N as bUnitFragments, Nt as termAssessmentSchema, O as indexBRanges, Ot as privacyTermKey, P as bAdoptedObligations, Pt as termOverrideValueSchema, Q as bAnchorSchema, Qt as sourceSnapshotId, R as unownedBObligations, Rn as orderProfile, Rt as deselectOutsidePeriod, S as validateBFields, St as cardsConfirmActionSchema, T as bLiteralTerms, Tt as emptyJourneyPrivacy, U as codePointSlice, Ut as UnfinishedJourneyError, V as bDigest, Vn as copyData, Vt as classificationTitleMaskSchema, W as createCodePointIndex, Wt as safeCode, X as bSessionDecisionSchema, Xn as createEntityMatcher, Xt as sourceKey, Y as bReviewSubmissionSchema, Yt as sourceGraph, Z as bTermSchema, Zt as observeSource, _ as semanticFindingSchema, _n as gapReasons, _t as hideConfirmSchema, a as reviewChunkSchema, at as journeyExceptionSchema, b as validateBReview, bn as staticDefaults, bt as journeyConfigurationSchema, c as textDigest, ct as journeyPreferenceScopeSchema, dt as nativeJourneySchema, en as inventorySchema, er as scalarBefore, et as bIdSchema, f as reviewAlignmentAuditSchema, ft as journeyGuidanceSchema, g as validateReviewAlignment, h as reviewFindingsDigest, hn as inspectionSemanticVersions, ht as journeyDescribeSchema, i as reviewBatchSchema, in as nativeSourceIdentitySchema, it as journeyDigestSchema, jt as reviewTermsInputSchema, l as validateReview, lt as journeyProjectTypeSchema, m as reviewAlignmentSchema, mn as currentDetectorVersion, mt as delegatedDecisionSchema, n as compileBFindings, nn as sourcePartSchema, nt as journeyAccessSchema, o as reviewDigest, ot as journeyIdSchema, p as reviewAlignmentInputSchema, pt as journeyInstructionInputSchema, q as bRepresentationSchema, qn as staticCategories, qt as familySelected, r as reviewBatchChunks, rt as journeyChoiceSchema, s as reviewSubmitSchema, st as journeyKindSchema, tr as defaultDetectionLimits, tt as bMethod, u as findingReferenceKey, ut as journeyWorkTypeSchema, vt as hidePlanInputSchema, w as bLiteralAdmitted, x as createBAnalysisUnits, xn as staticOptions, xt as cardAnswerActionSchema, y as validateBClassification, yn as createStaticProcessor, yt as hidePlanResourceSchema, z as bAnchorKey } from "./locate-U3-nkird.mjs";
 import { z } from "zod";
 import { createHash, createHmac, createSecretKey, randomUUID } from "node:crypto";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
@@ -1330,8 +1330,6 @@ function mergePrivacyTerms(state, incoming) {
 	return {
 		...state.privacy,
 		terms: [...terms.values()],
-		cards: [],
-		confirmedAnswersRevision: null,
 		packageApproval: null
 	};
 }
@@ -1344,9 +1342,16 @@ function activePrivacyTerms(state) {
 function hasCompleteWorkDescription(work) {
 	return work.placement === "placed" && !!work.description.trim() && work.classificationRecommendation !== null;
 }
-/** Dropped Works are not AI-read; a Work emptied by repartition has nothing left to read. */
+/**
+* Dropped Works are not AI-read; a Work emptied by repartition has nothing left to read, and
+* roots classification has not grouped yet are read once they join a Work (E2).
+*/
 function isSelectedWork(work) {
-	return work.access !== "drop" && work.rootSessionIds.length > 0;
+	return work.access !== "drop" && work.rootSessionIds.length > 0 && work.placement !== "classifying";
+}
+/** Classification published some Works and is still grouping the remaining roots (E2). */
+function isClassifying(state) {
+	return state.works.some((work) => work.placement === "classifying");
 }
 function selectedWorks(state) {
 	return state.works.filter(isSelectedWork);
@@ -1365,7 +1370,7 @@ function hasCertifiedNoBatchReview(work, snapshotId) {
 }
 /** Reading completes over selected Works once the person has confirmed the scan scope. */
 function isReadingComplete(state) {
-	return state.scope.status === "confirmed" && state.works.length > 0 && selectedWorks(state).every((work) => work.status !== "pending" && work.status !== "blocked" && (work.totalBatches > 0 || hasCertifiedNoBatchReview(work, state.snapshotId)) && work.completedBatches === work.totalBatches);
+	return state.scope.status === "confirmed" && state.works.length > 0 && !isClassifying(state) && selectedWorks(state).every((work) => work.status !== "pending" && work.status !== "blocked" && (work.totalBatches > 0 || hasCertifiedNoBatchReview(work, state.snapshotId)) && work.completedBatches === work.totalBatches);
 }
 /** Recompute completion after a selection or reading change without leaving a paused/send phase. */
 function withReadingProgress(state) {
@@ -1379,12 +1384,12 @@ function withReadingProgress(state) {
 }
 //#endregion
 //#region packages/application/src/journey/static-session.ts
-const count$12 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
+const count$13 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
 const staticFileSchema = z.object({
 	path: z.string().min(1),
 	identity: fileIdentitySchema,
 	sha256: journeyDigestSchema,
-	byteLength: count$12
+	byteLength: count$13
 }).strict();
 /**
 * Track B (ADR 0172): one admitted session of the private packaging base, with every built-in
@@ -1396,7 +1401,7 @@ const staticSessionResourceSchema = z.object({
 	kind: z.literal("static-session"),
 	journeyId: journeyIdSchema,
 	workId: journeyIdSchema,
-	inputRevision: count$12.min(1),
+	inputRevision: count$13.min(1),
 	snapshotId: journeyDigestSchema,
 	sessionId: z.string().min(1).max(128),
 	jobDigest: journeyDigestSchema,
@@ -1404,7 +1409,9 @@ const staticSessionResourceSchema = z.object({
 	result: staticFileSchema,
 	primary: staticFileSchema,
 	companion: staticFileSchema,
-	masks: staticFileSchema
+	masks: staticFileSchema,
+	/** Model-facing image blocks this session's output leaves out; absent on older receipts. */
+	imagesOmitted: count$13.optional()
 }).strict();
 const staticSessionId = (resource) => `${resource.workId}:${resource.inputRevision}:${resource.sessionId}`;
 /** Binds one Work's complete static base to the exact session results it was sealed from. */
@@ -1473,7 +1480,7 @@ const journeyPropagateActionSchema = z.object({
 }).strict();
 //#endregion
 //#region packages/application/src/journey/scope/model.ts
-const count$11 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
+const count$12 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
 const safeText = z.string().trim().min(1).max(240);
 const journeyScopeConfirmActionSchema = z.object({ kind: z.literal("scope-confirm") }).strict();
 const journeyWorkTypeActionSchema = z.object({
@@ -1489,7 +1496,7 @@ const journeyWorksAccessActionSchema = z.object({
 /** Static-only Work facts for proposing project types and scan scope; no source bodies. */
 const journeyCatalogQuerySchema = z.object({
 	journeyId: journeyIdSchema,
-	after: count$11.default(0),
+	after: count$12.default(0),
 	limit: z.number().int().min(1).max(100).default(50),
 	/** Bounded frozen root routing metadata for classification helpers. */
 	includeClassificationRouting: z.boolean().optional(),
@@ -1500,23 +1507,27 @@ const journeyCatalogQuerySchema = z.object({
 	path: ["includeProjectEvidence"]
 });
 const workspaceKinds = z.object({
-	checkout: count$11,
-	worktree: count$11,
-	folder: count$11,
-	scratch: count$11,
-	temp: count$11,
-	home: count$11,
-	unresolved: count$11
+	checkout: count$12,
+	worktree: count$12,
+	folder: count$12,
+	scratch: count$12,
+	temp: count$12,
+	home: count$12,
+	unresolved: count$12
 }).strict();
 const day = z.string().regex(/^\d{4}-\d{2}-\d{2}$/u);
 const journeyCatalogWorkSchema = z.object({
 	id: journeyIdSchema,
 	projectName: safeText,
-	placement: z.enum(["placed", "unsorted"]),
+	placement: z.enum([
+		"placed",
+		"unsorted",
+		"classifying"
+	]),
 	access: journeyAccessSchema,
 	projectType: journeyWorkTypeSchema.nullable(),
-	roots: count$11,
-	children: count$11,
+	roots: count$12,
+	children: count$12,
 	firstActivity: day.nullable(),
 	lastActivity: day.nullable(),
 	workspaces: workspaceKinds,
@@ -1530,7 +1541,7 @@ const classificationRootSchema = z.object({
 	workspaceKind: z.string().min(1).max(40),
 	harness: z.enum(["claude", "codex"]),
 	titleAvailable: z.boolean(),
-	memberCount: count$11,
+	memberCount: count$12,
 	titles: z.array(safeText).max(3),
 	projectEvidence: z.object({
 		status: z.enum([
@@ -1539,7 +1550,7 @@ const classificationRootSchema = z.object({
 			"insufficient"
 		]),
 		incomplete: z.boolean(),
-		ignored: count$11,
+		ignored: count$12,
 		workspace: z.object({
 			kind: safeText,
 			name: safeText.nullable()
@@ -1547,10 +1558,10 @@ const classificationRootSchema = z.object({
 		repositories: z.array(z.object({
 			id: z.string().regex(/^[a-f0-9]{64}$/u),
 			name: safeText,
-			references: count$11,
-			reads: count$11,
-			changes: count$11,
-			commands: count$11
+			references: count$12,
+			reads: count$12,
+			changes: count$12,
+			commands: count$12
 		}).strict()).max(8)
 	}).strict().optional()
 }).strict();
@@ -1575,11 +1586,11 @@ const classificationAssignmentSchema = z.object({
 }).strict();
 const journeyCatalogSchema = z.object({
 	journeyId: journeyIdSchema,
-	revision: count$11,
+	revision: count$12,
 	scope: z.enum(["pending", "confirmed"]),
-	total: count$11,
+	total: count$12,
 	works: z.array(journeyCatalogWorkSchema).max(100),
-	next: count$11.nullable(),
+	next: count$12.nullable(),
 	classificationRouting: z.object({
 		knownProjects: z.array(classificationKnownProjectSchema),
 		unresolvedRoots: z.array(classificationRootSchema),
@@ -1589,7 +1600,7 @@ const journeyCatalogSchema = z.object({
 /** Model project-type suggestions; explicit and delegated types are never overwritten. */
 const journeyClassifySchema = z.object({
 	journeyId: journeyIdSchema,
-	expectedRevision: count$11,
+	expectedRevision: count$12,
 	idempotencyKey: journeyIdSchema,
 	items: z.array(z.object({
 		workId: journeyIdSchema,
@@ -1808,7 +1819,45 @@ function assertJourneyPrivacyReady(state, packaging = false) {
 	assertJourneyStaticReady(state);
 	if (packaging && state.privacy.packageApproval !== privacyDecisionDigest(state)) throw new ApplicationError("CONFIRMATION_REQUIRED");
 }
+/** Card batches start once the scan scope is confirmed (D3); they need not wait for reading. */
+function assertCardsAllowed(state) {
+	if (!state.consent || state.scope.status !== "confirmed") throw new ApplicationError("SCOPE_NOT_READY");
+}
+/**
+* D3: a batch covers only Pending values no card covers yet. Values added to an existing card
+* take its answer at once when the person already answered it.
+*/
+function appendDecisionCards(state, input) {
+	assertCardsAllowed(state);
+	const existing = new Set(state.privacy.cards.map((card) => card.id));
+	const coveredBefore = new Set(state.privacy.cards.flatMap((card) => card.termKeys));
+	const open = new Set(activePrivacyTerms(state).filter((term) => term.disposition === "pending").map(privacyTermKey).filter((key) => !coveredBefore.has(key)));
+	const extend = input.extend ?? [];
+	const covered = [...input.cards.flatMap((card) => card.termKeys), ...extend.flatMap((item) => item.termKeys)];
+	if (!covered.length || state.privacy.cards.length + input.cards.length > 20 || new Set(input.cards.map((card) => card.id)).size !== input.cards.length || input.cards.some((card) => existing.has(card.id)) || new Set(extend.map((item) => item.cardId)).size !== extend.length || extend.some((item) => !existing.has(item.cardId)) || new Set(covered).size !== covered.length || covered.some((key) => !open.has(key))) throw new ApplicationError("INVALID_SELECTION");
+	const additions = new Map(extend.map((item) => [item.cardId, item.termKeys]));
+	return applyCardAnswers({
+		...retirePrivacyArtifacts(state),
+		privacy: {
+			...state.privacy,
+			cards: [...state.privacy.cards.map((card) => {
+				const added = additions.get(card.id);
+				return added ? {
+					...card,
+					termKeys: [...card.termKeys, ...added]
+				} : card;
+			}), ...input.cards.map((card) => ({
+				...card,
+				answer: null
+			}))],
+			confirmedAnswersRevision: input.cards.length ? null : state.privacy.confirmedAnswersRevision,
+			packageApproval: null
+		}
+	});
+}
 function publishDecisionCards(state, input) {
+	if (input.mode === "append") return appendDecisionCards(state, input);
+	if (input.extend?.length) throw new ApplicationError("INVALID_SELECTION");
 	assertJourneyScanned(state);
 	const pending = new Set(activePrivacyTerms(state).filter((term) => term.disposition === "pending").map(privacyTermKey));
 	const covered = input.cards.flatMap((card) => card.termKeys);
@@ -1838,19 +1887,45 @@ function resolvePrivacyTerms(state, input) {
 	const resolutions = new Map(input.resolutions.map((term) => [privacyTermKey(term), term]));
 	const pending = new Set(activePrivacyTerms(state).filter((term) => term.disposition === "pending").map(privacyTermKey));
 	if (resolutions.size !== input.resolutions.length || [...resolutions.keys()].some((key) => !pending.has(key))) throw new ApplicationError("INVALID_SELECTION");
-	let terms = state.privacy.terms.map((term) => {
+	const terms = state.privacy.terms.map((term) => {
 		const resolution = resolutions.get(privacyTermKey(term));
 		return resolution ? {
 			...term,
 			...resolution
 		} : term;
 	});
-	const active = activePrivacyTerms({
+	for (const same of Map.groupBy(activePrivacyTerms({
 		...state,
 		privacy: {
 			...state.privacy,
 			terms
 		}
+	}), (term) => term.value.normalize("NFC")).values()) if (same.some((term) => term.disposition === "pending") && input.resolutions.some((item) => item.value.normalize("NFC") === same[0]?.value.normalize("NFC"))) throw new ApplicationError("INVALID_SELECTION");
+	return {
+		...retirePrivacyArtifacts(state),
+		privacy: {
+			...state.privacy,
+			terms: normalizeValues(state, terms),
+			packageApproval: null
+		}
+	};
+}
+/** Keys of answered cards that took one option, leaving out values the person unticked. */
+function answeredKeys(state, optionId) {
+	return new Set(state.privacy.cards.flatMap((card) => {
+		if (!card.answer) return [];
+		const excluded = new Set(card.answer.excludedTermKeys ?? []);
+		return card.answer.optionId === optionId ? card.termKeys.filter((key) => !excluded.has(key)) : [...excluded];
+	}));
+}
+/** One NFC value has one outcome across term types, cards and per-value rules. */
+function normalizeValues(state, input) {
+	const active = activePrivacyTerms({
+		...state,
+		privacy: {
+			...state.privacy,
+			terms: input
+		}
 	});
 	const overrides = /* @__PURE__ */ new Map();
 	for (const item of state.valueOverrides ?? []) {
@@ -1858,7 +1933,7 @@ function resolvePrivacyTerms(state, input) {
 		if (!overrides.has(value)) overrides.set(value, item);
 	}
 	const cardValues = (optionId) => {
-		const keys = new Set(state.privacy.cards.flatMap((card) => card.answer?.optionId === optionId ? card.termKeys : []));
+		const keys = answeredKeys(state, optionId);
 		return new Set(state.privacy.terms.filter((term) => keys.has(privacyTermKey(term))).map((term) => term.value.normalize("NFC")));
 	};
 	const hideCardValues = cardValues("hide");
@@ -1866,7 +1941,6 @@ function resolvePrivacyTerms(state, input) {
 	const ownNames = workProjectNames(state);
 	const normalized = /* @__PURE__ */ new Map();
 	for (const same of Map.groupBy(active, (term) => term.value.normalize("NFC")).values()) {
-		if (same.some((term) => term.disposition === "pending") && input.resolutions.some((item) => item.value.normalize("NFC") === same[0]?.value.normalize("NFC"))) throw new ApplicationError("INVALID_SELECTION");
 		if (same.some((term) => term.disposition === "pending")) continue;
 		const forcedHidden = same.some((term) => !termTypeInfo[term.type].asked);
 		const override = overrides.get(same[0]?.value.normalize("NFC") ?? "");
@@ -1879,51 +1953,79 @@ function resolvePrivacyTerms(state, input) {
 			reason: disposition === "hidden" && term.disposition !== "hidden" ? hideCard && !same.some((item) => item.disposition === "hidden") ? "A Hide card answer covering this value takes precedence over Keep." : "A Hidden judgment for this NFC keyword takes precedence across term types." : ownKeep && term.disposition !== "keep" ? OWN_PROJECT_KEEP_REASON : term.reason
 		});
 	}
-	terms = terms.map((term) => {
+	return input.map((term) => {
 		const result = normalized.get(privacyTermKey(term));
 		return result ? {
 			...term,
 			...result
 		} : term;
 	});
+}
+/**
+* The CLI applies card answers itself (D3): Hide makes every covered value Hidden and Keep keeps
+* it, an unticked value takes the other option, then one value gets one outcome.
+*/
+function applyCardAnswers(state) {
+	if (!state.privacy.cards.some((card) => card.answer)) return state;
+	const hide = answeredKeys(state, "hide");
+	const keep = answeredKeys(state, "keep");
+	const terms = state.privacy.terms.map((term) => {
+		const key = privacyTermKey(term);
+		if (hide.has(key) && term.disposition !== "hidden") return {
+			...term,
+			disposition: "hidden",
+			reason: "Hidden by your decision card answer."
+		};
+		if (keep.has(key) && !hide.has(key) && term.disposition !== "keep") return {
+			...term,
+			disposition: "keep",
+			reason: "Kept by your decision card answer."
+		};
+		return term;
+	});
 	return {
-		...retirePrivacyArtifacts(state),
+		...state,
 		privacy: {
 			...state.privacy,
-			terms,
-			packageApproval: null
+			terms: normalizeValues(state, terms)
 		}
 	};
 }
 function respondPrivacy(state, action, source) {
 	if (action.kind === "card-answer") {
-		assertJourneyScanned(state);
+		assertCardsAllowed(state);
+		if (state.phase === "sending" || state.phase === "completed") throw new ApplicationError("INVALID_TRANSITION");
 		const card = state.privacy.cards.find((item) => item.id === action.cardId);
 		const option = card?.options.find((item) => item.id === action.optionId);
 		if (!card || !option) throw new ApplicationError("UNKNOWN_ITEM");
+		const excluded = action.excludedTermKeys ?? [];
 		const keys = new Set(card.termKeys);
-		return {
+		if (new Set(excluded).size !== excluded.length || excluded.some((key) => !keys.has(key))) throw new ApplicationError("INVALID_SELECTION");
+		const cards = state.privacy.cards.map((item) => item.id !== card.id ? item : {
+			...item,
+			answer: {
+				optionId: option.id,
+				rule: [option.rule, action.rule?.trim()].filter(Boolean).join("\n"),
+				additionalRule: action.rule?.trim() ?? "",
+				remember: action.remember,
+				...excluded.length ? { excludedTermKeys: excluded } : {}
+			}
+		});
+		const answersRevision = state.privacy.answersRevision + 1;
+		return applyCardAnswers({
 			...retirePrivacyArtifacts(state),
 			privacy: {
 				...state.privacy,
-				cards: state.privacy.cards.map((item) => item.id !== card.id ? item : {
-					...item,
-					answer: {
-						optionId: option.id,
-						rule: [option.rule, action.rule?.trim()].filter(Boolean).join("\n"),
-						additionalRule: action.rule?.trim() ?? "",
-						remember: action.remember
-					}
-				}),
+				cards,
 				terms: state.privacy.terms.map((term) => keys.has(privacyTermKey(term)) ? {
 					...term,
 					disposition: "pending"
 				} : term),
-				answersRevision: state.privacy.answersRevision + 1,
-				confirmedAnswersRevision: null,
+				answersRevision,
+				confirmedAnswersRevision: cards.every((item) => item.answer) ? answersRevision : null,
 				packageApproval: null
 			}
-		};
+		});
 	}
 	if (action.kind === "cards-confirm") {
 		assertJourneyScanned(state);
@@ -1951,12 +2053,12 @@ function respondPrivacy(state, action, source) {
 }
 //#endregion
 //#region packages/application/src/journey/scope/classification.ts
-const count$10 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
+const count$11 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
 const classificationCursorSchema = z.object({
 	snapshotId: journeyDigestSchema,
-	inputRevision: count$10,
+	inputRevision: count$11,
 	rootSessionId: z.string().min(1).max(128).optional(),
-	partIndex: count$10,
+	partIndex: count$11,
 	afterOrdinal: z.number().int().min(-1)
 }).strict();
 /** Private frozen content; reading it never records privacy-review coverage. */
@@ -1968,7 +2070,7 @@ const journeyClassificationReadSchema = z.object({
 }).strict();
 const journeyClassificationSubmitSchema = z.object({
 	journeyId: journeyIdSchema,
-	expectedRevision: count$10,
+	expectedRevision: count$11,
 	idempotencyKey: journeyIdSchema,
 	items: z.array(z.object({
 		projectName: z.string().trim().min(1).max(240),
@@ -1979,7 +2081,17 @@ const journeyClassificationSubmitSchema = z.object({
 			access: journeyAccessSchema,
 			reason: z.string().trim().min(1).max(200)
 		}).strict()
-	}).strict()).min(1).max(1e3)
+	}).strict()).min(1).max(1e3),
+	/**
+	* E2: roots classification has not grouped yet. They wait in one unread Work while the
+	* listed Works are confirmed and read; a later submission without them completes it.
+	*/
+	pendingRootSessionIds: z.array(z.string().min(1).max(128)).max(1e4).optional(),
+	/**
+	* While roots are still being grouped, scan writes keep moving the revision: a later
+	* submission is bound to the classification it replaces instead (E2).
+	*/
+	expectedClassificationRevision: count$11.optional()
 }).strict();
 const journeyClassificationSessionsSchema = z.object({
 	journeyId: journeyIdSchema,
@@ -1987,7 +2099,7 @@ const journeyClassificationSessionsSchema = z.object({
 	rootsOnly: z.boolean().optional(),
 	includeProjectEvidence: z.boolean().optional(),
 	projectEvidenceRootSessionIds: z.array(z.string().min(1).max(128)).min(1).max(100).optional(),
-	after: count$10.default(0),
+	after: count$11.default(0),
 	limit: z.number().int().min(1).max(100).default(50)
 }).strict();
 //#endregion
@@ -2392,12 +2504,12 @@ function verifiedScanGitSeeds(resource, snapshotId, roots) {
 }
 //#endregion
 //#region packages/application/src/journey/scan-session.ts
-const count$9 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
+const count$10 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
 const scanFileSchema = z.object({
 	path: z.string().min(1),
 	identity: fileIdentitySchema,
 	sha256: journeyDigestSchema,
-	byteLength: count$9
+	byteLength: count$10
 }).strict();
 /**
 * Track A source-bound prose (`file`) with built-in static protection spans; no delivery archive
@@ -2413,13 +2525,13 @@ const sessionScanInputSchema = z.object({
 		native: nativeSourceIdentitySchema,
 		facts: z.object({
 			representation: z.enum(["jsonl", "jsonl.zst"]),
-			byteLength: count$9,
+			byteLength: count$10,
 			sha256: journeyDigestSchema
 		}).strict()
 	}).strict()),
-	recordCount: count$9,
-	fieldCount: count$9,
-	inputUtf16: count$9,
+	recordCount: count$10,
+	fieldCount: count$10,
+	inputUtf16: count$10,
 	mainReviewVerified: z.literal(true),
 	emptyReviewVerified: z.boolean()
 }).strict().refine((input) => new Set(input.sources.map((source) => source.sourceId)).size === input.sources.length);
@@ -2427,7 +2539,7 @@ const scanSessionResourceSchema = z.object({
 	kind: z.literal("scan-session"),
 	journeyId: journeyIdSchema,
 	workId: journeyIdSchema,
-	inputRevision: count$9.min(1),
+	inputRevision: count$10.min(1),
 	snapshotId: journeyDigestSchema,
 	configurationDigest: journeyDigestSchema,
 	rootSessionId: z.string().min(1),
@@ -2446,7 +2558,7 @@ function scanPreparationDigest(resources) {
 const scanBatchBinding = {
 	journeyId: journeyIdSchema,
 	workId: journeyIdSchema,
-	inputRevision: count$9.min(1),
+	inputRevision: count$10.min(1),
 	snapshotId: journeyDigestSchema,
 	configurationDigest: journeyDigestSchema
 };
@@ -3461,7 +3573,7 @@ const reviewProgressSchema = z.array(z.object({
 }).strict());
 //#endregion
 //#region packages/application/src/journey/review/session-schema.ts
-const count$8 = z.number().int().nonnegative();
+const count$9 = z.number().int().nonnegative();
 const sessionReviewInputSchema = z.object({
 	journeyId: journeyIdSchema,
 	workId: journeyIdSchema,
@@ -3482,7 +3594,7 @@ const sessionReviewResourceSchema = z.object({
 	workId: journeyIdSchema,
 	sessionId: z.string().min(1).max(128),
 	snapshotId: journeyDigestSchema,
-	inputRevision: count$8.positive(),
+	inputRevision: count$9.positive(),
 	requestHash: journeyDigestSchema,
 	bindingDigest: journeyDigestSchema,
 	at: z.iso.datetime(),
@@ -3496,8 +3608,8 @@ const sessionReviewResourceSchema = z.object({
 	issues: z.array(reviewIssueSchema),
 	requiresSemantic: z.boolean(),
 	usefulness: sessionUsefulnessSchema,
-	totalCodePoints: count$8,
-	reviewedCodePoints: count$8
+	totalCodePoints: count$9,
+	reviewedCodePoints: count$9
 }).strict();
 const sessionRereadInputSchema = z.object({
 	journeyId: journeyIdSchema,
@@ -3506,8 +3618,8 @@ const sessionRereadInputSchema = z.object({
 	anchors: z.array(z.object({
 		fieldId: z.string().min(1),
 		fieldHash: journeyDigestSchema,
-		start: count$8,
-		end: count$8
+		start: count$9,
+		end: count$9
 	}).strict()).min(1).max(128)
 }).strict();
 const sessionRereadResourceSchema = z.object({
@@ -3516,7 +3628,7 @@ const sessionRereadResourceSchema = z.object({
 	journeyId: journeyIdSchema,
 	workId: journeyIdSchema,
 	sessionId: z.string().min(1).max(128),
-	inputRevision: count$8.positive(),
+	inputRevision: count$9.positive(),
 	snapshotId: journeyDigestSchema,
 	sessionReviewId: journeyIdSchema,
 	bindingDigest: journeyDigestSchema,
@@ -3534,8 +3646,8 @@ const sessionReconcileInputSchema = z.object({
 	alignment: reviewAlignmentSchema
 }).strict();
 const retainedReviewAnchorSchema = bAnchorSchema.extend({
-	utf16Start: count$8,
-	utf16End: count$8,
+	utf16Start: count$9,
+	utf16End: count$9,
 	owned: z.boolean()
 }).strict();
 const sessionOverlaySchema = z.object({
@@ -3549,7 +3661,7 @@ const sessionReconciliationResourceSchema = z.object({
 	journeyId: journeyIdSchema,
 	workId: journeyIdSchema,
 	sessionId: z.string().min(1).max(128),
-	inputRevision: count$8.positive(),
+	inputRevision: count$9.positive(),
 	snapshotId: journeyDigestSchema,
 	sessionReviewId: journeyIdSchema,
 	bindingDigest: journeyDigestSchema,
@@ -3577,8 +3689,8 @@ const sessionReviewQuerySchema = z.object({
 	workId: journeyIdSchema.optional(),
 	sessionId: z.string().min(1).max(128).optional(),
 	sessionReviewId: journeyIdSchema.optional(),
-	afterHit: count$8.default(0),
-	limit: count$8.positive().max(500).default(100)
+	afterHit: count$9.default(0),
+	limit: count$9.positive().max(500).default(100)
 }).strict();
 const sessionReviewStatusSchema = z.object({
 	complete: z.boolean(),
@@ -3594,8 +3706,8 @@ const sessionReviewStatusSchema = z.object({
 		requiresHumanDecision: z.boolean(),
 		requiresSemantic: z.boolean(),
 		issues: z.array(reviewIssueSchema),
-		totalCodePoints: count$8,
-		reviewedCodePoints: count$8,
+		totalCodePoints: count$9,
+		reviewedCodePoints: count$9,
 		reconciliationId: journeyIdSchema.nullable(),
 		/** ADR 0086: a read unit of the session suggests excluding it; advice, never a gate. */
 		suggestExclude: z.boolean(),
@@ -3603,8 +3715,8 @@ const sessionReviewStatusSchema = z.object({
 		reason: z.string().min(1).max(2e3).nullable()
 	}).strict()),
 	hits: z.array(sessionReviewHitSchema),
-	nextHit: count$8.nullable(),
-	totalHits: count$8
+	nextHit: count$9.nullable(),
+	totalHits: count$9
 }).strict();
 const sessionReviewResultSchema = z.object({
 	preparation: sessionReviewResourceSchema,
@@ -3688,13 +3800,13 @@ const metadataFieldsSchema = z.object({
 }).strict();
 //#endregion
 //#region packages/application/src/journey/placement/routing-schema.ts
-const count$7 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
+const count$8 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
 const bucket = z.object({
 	complete: z.boolean(),
-	total: count$7,
+	total: count$8,
 	repositories: z.array(z.object({
 		id: z.string().min(1),
-		count: count$7.min(1)
+		count: count$8.min(1)
 	}).strict())
 }).strict();
 const placementSignalsSchema = z.object({
@@ -3712,8 +3824,8 @@ const cheapPlacementSchema = z.object({
 		"name"
 	]),
 	confidence: z.enum(["high", "medium"]),
-	matched: count$7.min(1),
-	total: count$7.min(1),
+	matched: count$8.min(1),
+	total: count$8.min(1),
 	otherRepositoryIds: z.array(z.string())
 }).strict();
 const sortingResourceSchema = z.object({
@@ -3734,26 +3846,26 @@ const sortingResourceSchema = z.object({
 const sortingApplySchema = z.object({
 	journeyId: z.uuid(),
 	sessionId: z.string().min(1).max(128),
-	expectedRevision: count$7,
+	expectedRevision: count$8,
 	idempotencyKey: z.uuid()
 }).strict();
 /** Preparation moves identified failing roots of one pending Work into its blocked Work. */
 const journeyIsolateSchema = z.object({
 	journeyId: z.uuid(),
 	workId: z.uuid(),
-	inputRevision: count$7.min(1),
+	inputRevision: count$8.min(1),
 	roots: z.array(z.object({
 		sessionId: z.string().min(1).max(128),
 		code: z.string().regex(/^[A-Z_]{3,80}$/u)
 	}).strict()).min(1).max(1e5),
-	expectedRevision: count$7,
+	expectedRevision: count$8,
 	idempotencyKey: z.uuid()
 }).strict();
 const placement = z.object({
 	workId: z.uuid(),
 	sessionId: z.string().min(1).max(128),
-	inputRevision: count$7.min(1),
-	throughEvent: count$7,
+	inputRevision: count$8.min(1),
+	throughEvent: count$8,
 	contextDigest: z.string().regex(/^[a-f0-9]{64}$/u),
 	decision: z.enum([
 		"join",
@@ -3769,13 +3881,13 @@ const placement = z.object({
 }).strict();
 const journeyPlaceSchema = z.object({
 	journeyId: z.uuid(),
-	expectedRevision: count$7,
+	expectedRevision: count$8,
 	idempotencyKey: z.uuid(),
 	placements: z.array(placement).min(1).max(1e3)
 }).strict();
 //#endregion
 //#region packages/application/src/journey/scope/progress.ts
-const count$6 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
+const count$7 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
 const ids = z.array(z.string().min(1).max(128)).max(1e5).refine((values) => new Set(values).size === values.length);
 const journeyClassificationProgressSchema = z.object({
 	journeyId: journeyIdSchema,
@@ -3783,8 +3895,8 @@ const journeyClassificationProgressSchema = z.object({
 	id: z.literal("current"),
 	snapshotId: journeyDigestSchema,
 	inputFingerprint: journeyDigestSchema,
-	baselineRevision: count$6,
-	proposalRevision: count$6.nullable(),
+	baselineRevision: count$7,
+	proposalRevision: count$7.nullable(),
 	stage: z.enum(["classification", "proposal"]),
 	status: z.enum([
 		"running",
@@ -3794,7 +3906,7 @@ const journeyClassificationProgressSchema = z.object({
 	]),
 	startedAt: z.iso.datetime(),
 	updatedAt: z.iso.datetime(),
-	elapsedMs: count$6,
+	elapsedMs: count$7,
 	rootIds: ids,
 	completedRootIds: ids,
 	groupedRootIds: ids,
@@ -4057,7 +4169,7 @@ const journeyPolicyRespondSchema = z.object({
 }).strict();
 //#endregion
 //#region packages/application/src/journey/search.ts
-const count$5 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
+const count$6 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
 const term = z.string().min(1).max(1024).refine((value) => Buffer.byteLength(value) <= 1024 && !/[\0\r\n]/u.test(value));
 const journeySearchSchema = z.object({
 	journeyId: journeyIdSchema,
@@ -4071,11 +4183,11 @@ const journeySearchResultSchema = z.object({
 	binding: z.object({
 		journeyId: journeyIdSchema,
 		snapshotId: journeyDigestSchema,
-		revision: count$5,
+		revision: count$6,
 		scopeDigest: journeyDigestSchema,
 		outputs: z.array(z.object({
 			workId: journeyIdSchema,
-			outputRevision: count$5,
+			outputRevision: count$6,
 			sha256: journeyDigestSchema
 		}).strict())
 	}).strict(),
@@ -4092,10 +4204,10 @@ const journeySearchResultSchema = z.object({
 	terms: z.array(z.object({
 		id: z.string(),
 		tried: z.array(z.string()),
-		sentMatches: count$5.nullable(),
-		originalMatches: count$5.nullable(),
-		sentSessions: count$5.nullable(),
-		originalSessions: count$5.nullable()
+		sentMatches: count$6.nullable(),
+		originalMatches: count$6.nullable(),
+		sentSessions: count$6.nullable(),
+		originalSessions: count$6.nullable()
 	}).strict()),
 	hits: z.array(z.object({
 		termId: z.string(),
@@ -4111,16 +4223,16 @@ const journeySearchResultSchema = z.object({
 			archiveSessionId: z.string().optional(),
 			sessionId: z.string().optional(),
 			sourcePartId: z.string().optional(),
-			recordIndex: count$5,
+			recordIndex: count$6,
 			fieldId: z.string(),
-			line: count$5
+			line: count$6
 		}).strict(),
-		occurrences: count$5,
+		occurrences: count$6,
 		modelContext: z.string().max(4096).optional(),
 		match: z.object({
-			variantIndex: count$5.max(7),
-			start: count$5,
-			end: count$5
+			variantIndex: count$6.max(7),
+			start: count$6,
+			end: count$6
 		}).strict().optional()
 	}).strict()),
 	failures: z.array(z.object({
@@ -4143,7 +4255,7 @@ const journeySearchResultSchema = z.object({
 }));
 const journeySearchSaveSchema = z.object({
 	journeyId: journeyIdSchema,
-	expectedRevision: count$5,
+	expectedRevision: count$6,
 	idempotencyKey: journeyIdSchema,
 	result: journeySearchResultSchema
 }).strict();
@@ -4180,10 +4292,10 @@ const hideFinishSchema = z.object({
 }).strict();
 //#endregion
 //#region packages/application/src/journey/placement/context-schema.ts
-const count$4 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
+const count$5 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
 const cursor = z.object({
-	inputRevision: count$4.min(1),
-	throughEvent: count$4,
+	inputRevision: count$5.min(1),
+	throughEvent: count$5,
 	afterOrdinal: z.number().int().min(-1)
 }).strict();
 const journeyContextQuerySchema = z.object({
@@ -4196,14 +4308,14 @@ const journeyContextSchema = z.object({
 	journeyId: z.uuid(),
 	workId: z.uuid(),
 	sessionId: z.string().min(1).max(128).nullable(),
-	inputRevision: count$4.min(1),
+	inputRevision: count$5.min(1),
 	explicitTitleId: z.uuid().nullable(),
 	titleReview: z.object({
 		id: z.uuid(),
 		text: z.string().min(1).max(240),
 		sha256: z.string().regex(/^[a-f0-9]{64}$/u)
 	}).strict().nullable(),
-	throughEvent: count$4,
+	throughEvent: count$5,
 	digest: z.string().regex(/^[a-f0-9]{64}$/u),
 	decisionDigest: z.string().regex(/^[a-f0-9]{64}$/u),
 	decisions: z.array(z.object({
@@ -4221,13 +4333,13 @@ const journeyContextSchema = z.object({
 		confirmed: z.boolean()
 	}).strict()),
 	describedCheckpoints: z.array(z.enum(["initial", "complete"])).max(2),
-	totalBatches: count$4,
-	reviewedBatches: count$4,
+	totalBatches: count$5,
+	reviewedBatches: count$5,
 	complete: z.boolean(),
 	placementReviewed: z.boolean(),
 	fragments: z.array(z.object({
 		batchId: z.uuid(),
-		ordinal: count$4
+		ordinal: count$5
 	}).strict()).max(16),
 	cursor: cursor.nullable()
 }).strict();
@@ -4255,6 +4367,268 @@ z.discriminatedUnion("kind", [z.object({
 	submission: sessionReconcileInputSchema
 }).strict()]);
 //#endregion
+//#region packages/application/src/journey/placement/work.ts
+/** The processed project name is both the initial title and the retired-description fallback. */
+function newJourneyWork(id, projectName, rootSessionIds, sourceWorkspaceIds, placement = "placed") {
+	return {
+		id,
+		title: projectName,
+		projectName,
+		projectType: null,
+		description: "",
+		titleOrigin: "model",
+		explicitTitleId: null,
+		accessOrigin: "default",
+		placement,
+		suggestion: null,
+		classificationRecommendation: null,
+		sourceWorkspaceIds,
+		rootSessionIds,
+		grouping: sourceWorkspaceIds.length === 1 ? "workspace" : "regrouped",
+		access: "private",
+		accessConfirmed: false,
+		reason: "Awaiting content review.",
+		revision: 1,
+		inputRevision: 1,
+		status: "pending",
+		totalBatches: 0,
+		completedBatches: 0,
+		groupIds: [],
+		blockedCodes: [],
+		artifact: null,
+		binding: null
+	};
+}
+//#endregion
+//#region packages/application/src/journey/scan-generation.ts
+/** Retire one scan generation while preserving the person's confirmed classification. */
+function retireScanGeneration(state, workId) {
+	if (!state.works.some((work) => work.id === workId)) throw new ApplicationError("UNKNOWN_ITEM");
+	const changedKeys = /* @__PURE__ */ new Set();
+	const terms = state.privacy.terms.flatMap((term) => {
+		if (!term.sources.some((source) => source.workId === workId)) return [term];
+		changedKeys.add(privacyTermKey(term));
+		const sources = term.sources.filter((source) => source.workId !== workId);
+		return sources.length ? [{
+			...term,
+			sources,
+			disposition: term.disposition === "keep" ? "pending" : term.disposition
+		}] : [];
+	});
+	return {
+		...state,
+		readingComplete: false,
+		phase: state.phase === "paused" ? "paused" : "processing",
+		privacy: {
+			...state.privacy,
+			terms,
+			cards: state.privacy.cards.filter((card) => card.termKeys.every((key) => !changedKeys.has(key))),
+			confirmedAnswersRevision: null,
+			packageApproval: null
+		},
+		works: state.works.map((work) => work.id === workId ? resetWorkScan(work) : work)
+	};
+}
+/** The same Work with a new scan generation: it is read again from its first session. */
+function resetWorkScan(work) {
+	const { emptyReview: _empty, excludedReview: _excluded, staticReview: _static, metadataReviewedDigest: _metadata, reviewReuseFrom: _reuse, renderFailure: _failure, ...retained } = work;
+	return {
+		...retained,
+		revision: work.revision + 1,
+		inputRevision: work.inputRevision + 1,
+		status: "pending",
+		suggestion: null,
+		totalBatches: 0,
+		completedBatches: 0,
+		groupIds: [],
+		blockedCodes: [],
+		artifact: null
+	};
+}
+//#endregion
+//#region packages/application/src/journey/scope/proposal.ts
+const count$4 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
+const workspaces = z.array(z.string().min(1).max(128));
+/**
+* A complete classification proposal prepared outside the store and applied inside one store
+* transaction against the current state (BL-216). New Work IDs and the session of every finding
+* chunk the regrouping moves are resolved beforehand, so applying it needs no I/O.
+*/
+const classificationCommitSchema = z.object({
+	journeyId: journeyIdSchema,
+	requestKey: journeyIdSchema,
+	requestHash: journeyDigestSchema,
+	at: z.iso.datetime(),
+	/** Unbound proposals keep the exact journey revision fence. */
+	expectedRevision: count$4,
+	/** Bound proposals (E2) are fenced on the classification they replace instead. */
+	expectedClassificationRevision: count$4.nullable(),
+	snapshotId: journeyDigestSchema,
+	/** `classificationPartition` of the state the proposal was prepared against. */
+	partition: journeyDigestSchema,
+	late: z.boolean(),
+	items: z.array(journeyClassificationSubmitSchema.shape.items.element.extend({
+		workId: journeyIdSchema,
+		workspaceIds: workspaces
+	})).min(1).max(1e3),
+	pending: z.object({
+		workId: journeyIdSchema,
+		rootSessionIds: z.array(z.string().min(1).max(128)).min(1).max(1e4),
+		workspaceIds: workspaces
+	}).strict().nullable(),
+	chunkSessions: z.array(z.object({
+		batchId: z.uuid(),
+		chunkId: z.uuid(),
+		sessionId: z.string().min(1).max(128)
+	}).strict()).max(1e6)
+}).strict();
+/** The Works and roots a proposal regroups; scan progress and access never change it. */
+function classificationPartition(state) {
+	return createHash("sha256").update(JSON.stringify(state.works.map((work) => [
+		work.id,
+		work.placement,
+		work.rootSessionIds.toSorted()
+	]))).digest("hex");
+}
+/** The proposal's Works built from the given state's current Works (E2). */
+function classificationWorks(state, plan) {
+	const late = plan.late;
+	const works = [];
+	for (const item of plan.items) {
+		const existing = state.works.find((work) => work.placement !== "classifying" && work.rootSessionIds.length === item.rootSessionIds.length && work.rootSessionIds.every((root) => item.rootSessionIds.includes(root)));
+		const extended = late ? state.works.find((work) => work.placement === "placed" && work.rootSessionIds.every((root) => item.rootSessionIds.includes(root))) : void 0;
+		if (late && existing) {
+			works.push(existing);
+			continue;
+		}
+		const base = existing ?? (extended ? {
+			...resetWorkScan(extended),
+			rootSessionIds: item.rootSessionIds,
+			sourceWorkspaceIds: [.../* @__PURE__ */ new Set([...extended.sourceWorkspaceIds, ...item.workspaceIds])]
+		} : newJourneyWork(item.workId, item.projectName, item.rootSessionIds, item.workspaceIds, "placed"));
+		const { classificationMetadata: _display, ...original } = base;
+		works.push({
+			...original,
+			projectName: item.projectName,
+			title: base.titleOrigin === "explicit" ? base.title : item.projectName,
+			description: item.description,
+			projectType: {
+				type: item.projectType,
+				reason: item.recommendation.reason,
+				origin: "model"
+			},
+			placement: "placed",
+			...late && !extended ? {
+				access: item.recommendation.access,
+				accessOrigin: "model",
+				accessConfirmed: true
+			} : {},
+			classificationRecommendation: item.recommendation,
+			suggestion: null,
+			artifact: null,
+			revision: base.revision + 1
+		});
+	}
+	const pending = plan.pending;
+	if (pending) {
+		const prior = state.works.find((work) => work.placement === "classifying" && work.rootSessionIds.length === pending.rootSessionIds.length && work.rootSessionIds.every((root) => pending.rootSessionIds.includes(root)));
+		works.push(prior ?? newJourneyWork(pending.workId, "Still being grouped", pending.rootSessionIds, pending.workspaceIds, "classifying"));
+	}
+	const fields = (work) => JSON.stringify([
+		work?.title,
+		work?.projectName,
+		work?.description,
+		work?.classificationRecommendation?.reason
+	]);
+	return {
+		works,
+		changedMetadata: new Set(works.filter((work) => {
+			const old = state.works.find((item) => item.id === work.id);
+			return !old || fields(work) !== fields(old);
+		}).map((work) => work.id))
+	};
+}
+/**
+* Rebind accepted frozen evidence; original batch/chunk IDs remain its audit provenance. Null
+* when a finding in a moved Work was not resolved beforehand, so the proposal is stale.
+*/
+function regroupTerms(terms, works, changedMetadata, chunkSessions) {
+	const owners = new Map(works.flatMap((work) => work.rootSessionIds.map((id) => [id, work.id])));
+	const retained = new Set(works.map((work) => work.id));
+	const sessions = new Map(chunkSessions.map((item) => [`${item.batchId}:${item.chunkId}`, item.sessionId]));
+	const regrouped = [];
+	for (const term of terms) {
+		const sources = [];
+		for (const source of term.sources) {
+			if (source.kind === "metadata") {
+				if (retained.has(source.workId) && !changedMetadata.has(source.workId)) sources.push(source);
+				continue;
+			}
+			if (retained.has(source.workId)) {
+				sources.push(source);
+				continue;
+			}
+			const session = sessions.get(`${source.batchId}:${source.chunkId}`);
+			if (session === void 0) return null;
+			const workId = owners.get(session);
+			if (!workId) throw new ApplicationError("CORRUPTED_STATE");
+			sources.push({
+				...source,
+				workId
+			});
+		}
+		regrouped.push({
+			...term,
+			sources
+		});
+	}
+	return regrouped;
+}
+/**
+* The proposal applied to the current state, or null when it is stale: the classification, the
+* frozen snapshot, the regrouped Works and roots, or the scope changed since it was prepared.
+* Scan progress, Work input revisions and the person's visibility choices do not make it stale;
+* they are kept as the current state has them.
+*/
+function applyClassificationProposal(state, plan) {
+	const classifying = isClassifying(state);
+	if (!state.consent || state.journeyId !== plan.journeyId || (plan.expectedClassificationRevision === null ? state.revision !== plan.expectedRevision : !classifying || state.classificationRevision !== plan.expectedClassificationRevision) || state.snapshotId !== plan.snapshotId || state.scope.status === "confirmed" !== plan.late || plan.late && !classifying || state.phase === "paused" || state.pendingHideId || classificationPartition(state) !== plan.partition) return null;
+	const { works, changedMetadata } = classificationWorks(state, plan);
+	const retained = new Set(works.map((work) => work.id));
+	const regrouped = !plan.late && (state.works.some((work) => !retained.has(work.id)) || changedMetadata.size > 0);
+	const cardTerms = new Set(state.privacy.cards.flatMap((card) => card.termKeys));
+	const preserved = regroupTerms(state.privacy.terms, works, changedMetadata, plan.chunkSessions);
+	if (!preserved) return null;
+	const forced = new Set(preserved.filter((term) => !termTypeInfo[term.type].asked).map((term) => term.value));
+	const overrides = new Map(state.valueOverrides?.map((item) => [item.value, item.choice]) ?? []);
+	const terms = preserved.map((term) => ({
+		...term,
+		disposition: forced.has(term.value) ? "hidden" : overrides.has(term.value) ? overrides.get(term.value) === "hide" ? "hidden" : "keep" : regrouped && cardTerms.has(privacyTermKey(term)) ? "pending" : term.disposition
+	}));
+	return {
+		...state,
+		works,
+		classificationRevision: state.revision + 1,
+		scope: plan.late ? state.scope : {
+			status: "pending",
+			actor: null,
+			at: null
+		},
+		privacy: {
+			...state.privacy,
+			terms,
+			packageApproval: null,
+			...regrouped ? {
+				cards: [],
+				answersRevision: state.privacy.answersRevision + 1,
+				confirmedAnswersRevision: null
+			} : {}
+		},
+		readingComplete: !plan.pending && works.filter((work) => work.access !== "drop").every((work) => work.totalBatches > 0 && work.completedBatches === work.totalBatches),
+		phase: "processing"
+	};
+}
+//#endregion
 //#region packages/application/src/journey/review/port.ts
 /** Batches are served in publication order; only a Drop or un-Drop invalidates a cursor. */
 const journeyReadCursorSchema = z.object({
@@ -4505,7 +4879,7 @@ function propagateGroups(state, action) {
 /** Classification confirmation fixes visibility and scan membership for this journey. */
 function confirmScope(state, now, decision) {
 	if (state.scope.status === "confirmed") return state;
-	if (state.classificationRevision === null || !state.works.length || state.works.some((work) => work.placement !== "placed" || !(work.status === "blocked" && work.access === "drop" && work.accessConfirmed) && (!work.description.trim() || !work.projectType))) throw new ApplicationError("SCOPE_NOT_READY");
+	if (state.classificationRevision === null || !state.works.length || state.works.some((work) => work.placement !== "placed" && work.placement !== "classifying" || work.placement === "placed" && !(work.status === "blocked" && work.access === "drop" && work.accessConfirmed) && (!work.description.trim() || !work.projectType))) throw new ApplicationError("SCOPE_NOT_READY");
 	return withReadingProgress({
 		...state,
 		scope: {
@@ -4513,7 +4887,7 @@ function confirmScope(state, now, decision) {
 			actor: decision ? "delegate" : "human",
 			at: now
 		},
-		works: state.works.map((work) => work.accessConfirmed || !work.classificationRecommendation ? {
+		works: state.works.map((work) => work.placement === "classifying" ? work : work.accessConfirmed || !work.classificationRecommendation ? {
 			...work,
 			accessConfirmed: true
 		} : {
@@ -4558,7 +4932,7 @@ function setWorkType(state, workId, type, decision) {
 function setWorksAccess(state, workIds, access, decision) {
 	if (new Set(workIds).size !== workIds.length) throw new ApplicationError("INVALID_SELECTION");
 	if (workIds.some((id) => !state.works.some((work) => work.id === id))) throw new ApplicationError("UNKNOWN_WORKSPACE");
-	if (state.scope.status === "confirmed") return dropBlockedWorks(state, workIds, access, decision);
+	if (state.scope.status === "confirmed") return changeConfirmedAccess(state, workIds, access, decision);
 	return withReadingProgress({
 		...state,
 		scope: {
@@ -4584,11 +4958,12 @@ function setWorksAccess(state, workIds, access, decision) {
 	});
 }
 /**
-* ADR 0188: after confirmation the person, never a delegate, may only Drop a Work that
-* preparation blocked. The scope stays confirmed; reading progress is recomputed.
+* After confirmation the person, never a delegate, may still change any Work's visibility
+* (D2, superseding ADR 0162's lock and ADR 0188's blocked-only Drop). Drop stops that Work's
+* scan; a Work moved out of Drop is read again; reading progress is recomputed.
 */
-function dropBlockedWorks(state, workIds, access, decision) {
-	if (decision || access !== "drop" || state.phase === "sending" || state.phase === "completed" || state.works.some((work) => workIds.includes(work.id) && (work.status !== "blocked" || work.access === "drop"))) throw new ApplicationError("INVALID_TRANSITION");
+function changeConfirmedAccess(state, workIds, access, decision) {
+	if (decision || state.phase === "sending" || state.phase === "completed" || state.works.some((work) => workIds.includes(work.id) && work.access === access)) throw new ApplicationError("INVALID_TRANSITION");
 	return withReadingProgress({
 		...state,
 		privacy: {
@@ -4598,7 +4973,9 @@ function dropBlockedWorks(state, workIds, access, decision) {
 		works: state.works.map((work) => workIds.includes(work.id) ? {
 			...work,
 			revision: work.revision + 1,
-			access: "drop",
+			artifact: null,
+			status: work.status === "ready" ? "review" : work.status,
+			access,
 			accessConfirmed: true,
 			accessOrigin: "explicit"
 		} : work)
@@ -4687,7 +5064,7 @@ function respondToJourney(state, action, source, now, decision, preferenceScope)
 		};
 	}
 	if (action.kind === "consent") {
-		if (source !== "conversation" || decision) throw new ApplicationError("CONFIRMATION_REQUIRED");
+		if (decision) throw new ApplicationError("CONFIRMATION_REQUIRED");
 		if (state.consent) return state;
 		if (!action.allow) return {
 			...state,
@@ -4801,7 +5178,7 @@ function pendingGroups(state) {
 * It is never filtered by Work or relevance, so its digest proves which guidance was current.
 */
 function journeyGuidance(state) {
-	const rules = [...state.privacy.rememberedRules, ...state.privacy.cards.flatMap((card) => card.answer ? [card.answer.rule] : [])];
+	const rules = [...state.privacy.rememberedRules, ...state.privacy.cards.flatMap((card) => card.answer ? [answeredRule(card)] : [])];
 	const conditions = state.groups.map(({ id, kind, key, label, condition, choice, confirmed, origin }) => ({
 		groupId: id,
 		kind,
@@ -4841,6 +5218,17 @@ function journeyGuidance(state) {
 		rules
 	};
 }
+/**
+* An answered card as scan children read it: the question with the answer, so a value that fits
+* the question takes that answer instead of staying Pending (E3).
+*/
+function answeredRule(card) {
+	const answer = card.answer;
+	if (!answer) return "";
+	const label = card.options.find((option) => option.id === answer.optionId)?.label;
+	const rule = `Answered question “${card.question}”: ${answer.optionId === "hide" ? "Hide" : "Keep"}${label ? ` (“${label}”)` : ""}. ${answer.rule}`;
+	return rule.length <= 4001 ? rule : answer.rule;
+}
 //#endregion
 //#region packages/application/src/journey/review/agents.ts
 /** A dispatch without a pack ID is its own analysis agent. */
@@ -5513,9 +5901,11 @@ function journeyView(state, now) {
 		},
 		works: state.works.map((work) => {
 			const localTitle = work.suggestion || work.explicitTitleId ? work.title : work.classificationMetadata?.title ?? work.title;
+			const imagesOmitted = hasCurrentStaticReview(state, work) ? work.staticReview?.imagesOmitted ?? 0 : 0;
 			if (!work.classificationMetadata) return {
 				...work,
-				localTitle
+				localTitle,
+				imagesOmitted
 			};
 			const metadata = work.classificationMetadata;
 			const displayed = {
@@ -5528,6 +5918,7 @@ function journeyView(state, now) {
 				...work,
 				...displayed,
 				localTitle,
+				imagesOmitted,
 				projectType: work.projectType ? {
 					...work.projectType,
 					reason: work.projectType.origin === "model" ? displayed.reason : work.projectType.reason
@@ -5668,10 +6059,30 @@ function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).t
 			id: "current"
 		})).find((resource) => resource.kind === "classification-progress");
 		if (previous) {
-			const contains = (next, prior) => prior.every((id) => next.includes(id));
 			const replacesObsoleteAttempt = previous.baselineRevision !== progress.baselineRevision && progress.baselineRevision === state.revision && progress.status === "running" && progress.stage === "classification" && progress.completedRootIds.length === 0 && progress.groupedRootIds.length === 0 && progress.aiCompletedRootIds.length === 0 && Date.parse(progress.startedAt) > Date.parse(previous.startedAt);
 			const restartsFailedAttempt = previous.status === "failed" && previous.baselineRevision === progress.baselineRevision && progress.baselineRevision === state.revision && progress.status === "running" && progress.stage === "classification" && progress.completedRootIds.length === 0 && progress.groupedRootIds.length === 0 && progress.aiCompletedRootIds.length === 0 && Date.parse(progress.startedAt) > Date.parse(previous.startedAt);
-			if (!replacesObsoleteAttempt && !restartsFailedAttempt && (previous.inputFingerprint !== progress.inputFingerprint || previous.baselineRevision !== progress.baselineRevision || previous.proposalRevision !== null && previous.proposalRevision !== progress.proposalRevision || previous.startedAt !== progress.startedAt || Date.parse(progress.updatedAt) < Date.parse(previous.updatedAt) || progress.elapsedMs < previous.elapsedMs || previous.stage === "proposal" && progress.stage === "classification" || previous.status === "complete" && progress.status !== "complete" || !contains(progress.completedRootIds, previous.completedRootIds) || !contains(progress.groupedRootIds, previous.groupedRootIds) || !contains(progress.aiCompletedRootIds, previous.aiCompletedRootIds))) throw new ApplicationError("REVISION_CONFLICT");
+			if (!replacesObsoleteAttempt && !restartsFailedAttempt) {
+				if (previous.inputFingerprint !== progress.inputFingerprint || previous.baselineRevision !== progress.baselineRevision || previous.proposalRevision !== null && previous.proposalRevision !== progress.proposalRevision || previous.startedAt !== progress.startedAt) throw new ApplicationError("REVISION_CONFLICT");
+				const union = (left, right) => [.../* @__PURE__ */ new Set([...left, ...right])].toSorted();
+				const rank = {
+					running: 0,
+					paused: 0,
+					failed: 1,
+					complete: 2
+				};
+				await storage.saveResource({
+					...progress,
+					stage: previous.stage === "proposal" ? "proposal" : progress.stage,
+					status: rank[previous.status] > rank[progress.status] ? previous.status : progress.status,
+					proposalRevision: progress.proposalRevision ?? previous.proposalRevision,
+					updatedAt: Date.parse(previous.updatedAt) > Date.parse(progress.updatedAt) ? previous.updatedAt : progress.updatedAt,
+					elapsedMs: Math.max(previous.elapsedMs, progress.elapsedMs),
+					completedRootIds: union(previous.completedRootIds, progress.completedRootIds),
+					groupedRootIds: union(previous.groupedRootIds, progress.groupedRootIds),
+					aiCompletedRootIds: union(previous.aiCompletedRootIds, progress.aiCompletedRootIds)
+				});
+				return { accepted: true };
+			}
 		}
 		await storage.saveResource(progress);
 		return { accepted: true };
@@ -5806,16 +6217,29 @@ function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).t
 				state: await present(result.state)
 			};
 		}
+		const rebase = source === "panel" && !input.decision && [
+			"consent",
+			"work-access",
+			"works-access",
+			"card-answer"
+		].includes(input.action.kind);
+		for (let attempt = 0;; attempt++) {
+			const result = await commitResponse(input, source, rebase);
+			if (result.status !== "stale" || !rebase || attempt >= 4) return result;
+		}
+	}
+	async function commitResponse(input, source, rebase) {
 		const current = await storage.current(input.journeyId);
 		if (!current) throw new ApplicationError("UNKNOWN_ITEM");
-		const state = current.revision === input.expectedRevision ? respondToJourney(current, input.action, source, now(), input.decision, input.preferenceScope) : current;
+		const expectedRevision = rebase ? current.revision : input.expectedRevision;
+		const state = current.revision === expectedRevision ? respondToJourney(current, input.action, source, now(), input.decision, input.preferenceScope) : current;
 		const groupIds = input.action.kind === "group" ? [input.action.groupId] : input.action.kind === "groups-hide" ? input.action.groupIds : [];
 		const preferenceScopes = input.decision ? [] : state.groups.flatMap((group) => groupIds.includes(group.id) && group.preferenceScope ? [{
 			groupId: group.id,
 			preferenceScope: group.preferenceScope
 		}] : []);
 		const result = await storage.commit({
-			expectedRevision: input.expectedRevision,
+			expectedRevision,
 			requestKey: input.idempotencyKey,
 			requestHash: digest$1(input),
 			state,
@@ -5845,7 +6269,7 @@ function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).t
 				events: rows,
 				state: await get({ journeyId: input.journeyId })
 			};
-			await setTimeout$1(Math.min(250, Math.max(0, deadline - Date.now())), void 0, { signal });
+			await setTimeout$1(Math.min(1e3, Math.max(0, deadline - Date.now())), void 0, { signal });
 		}
 	}
 	async function prepare(value, signal) {
@@ -5948,7 +6372,7 @@ function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).t
 		const scope = await port.renderScope?.(journeyId, workIds.length, signal);
 		const renderWork = scope ? (workId) => scope.render(workId) : (workId) => port.render(journeyId, workId, signal);
 		try {
-			await Promise.all(Array.from({ length: Math.min(scope?.concurrency ?? renderConcurrency, workIds.length) }, async () => {
+			const failure = (await Promise.allSettled(Array.from({ length: Math.min(scope?.concurrency ?? renderConcurrency, workIds.length) }, async () => {
 				for (let workId = workIds[next++]; workId !== void 0; workId = workIds[next++]) {
 					try {
 						await renderWork(workId);
@@ -5967,7 +6391,8 @@ function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).t
 					}
 					await new Promise((resolve) => setImmediate(resolve));
 				}
-			}));
+			}))).find((item) => item.status === "rejected");
+			if (failure) throw failure.reason;
 		} finally {
 			await scope?.close();
 		}
@@ -6051,11 +6476,19 @@ function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).t
 	}
 	async function privacyWrite(value, resolve) {
 		const input = resolve ? privacyResolveSchema.parse(value) : cardsSubmitSchema.parse(value);
+		const rebase = "mode" in input && input.mode === "append";
+		for (let attempt = 0;; attempt++) {
+			const result = await commitPrivacy(input, rebase);
+			if (result.status !== "stale" || !rebase || attempt >= 4) return result;
+		}
+	}
+	async function commitPrivacy(input, rebase) {
 		const current = await storage.current(input.journeyId);
 		if (!current) throw new ApplicationError("UNKNOWN_ITEM");
-		const state = current.revision !== input.expectedRevision ? current : "resolutions" in input ? resolvePrivacyTerms(current, input) : publishDecisionCards(current, input);
+		const expectedRevision = rebase ? current.revision : input.expectedRevision;
+		const state = current.revision !== expectedRevision ? current : "resolutions" in input ? resolvePrivacyTerms(current, input) : publishDecisionCards(current, input);
 		const result = await storage.commit({
-			expectedRevision: input.expectedRevision,
+			expectedRevision,
 			requestKey: input.idempotencyKey,
 			requestHash: digest$1(input),
 			state,
@@ -6252,7 +6685,12 @@ const sendReceiptSchema = z.object({
 	passportIncluded: z.boolean(),
 	upload: z.object({
 		uploadUrl: z.url(),
-		expiresAt: z.iso.datetime()
+		expiresAt: z.iso.datetime(),
+		/**
+		* Headers the signed URL requires besides type and length: Passport answers them only
+		* for a checksum upload, whose PUT writes the immutable object directly (ADR 0230).
+		*/
+		headers: z.object({ "x-amz-checksum-sha256": z.base64().length(44) }).strict().optional()
 	}).strict().nullable()
 }).strict();
 /** `POST /me/works/replace`: the owner's other Works are retired (ADR 0204). */
@@ -6298,6 +6736,13 @@ const sendItemSchema = z.object({
 	reservation: sendUploadInputSchema.nullable(),
 	receipt: savedSendReceiptSchema.nullable(),
 	previousReceipts: z.array(savedSendReceiptSchema),
+	/** The receipt whose bytes were PUT but not yet completed: the next step completes it (BL-210). */
+	uploadedReceiptId: journeyIdSchema.nullable().optional(),
+	/**
+	* Passport answered `bundle_mismatch` to this Work's checksum upload: the rest of this Send
+	* uploads through staging (ADR 0231).
+	*/
+	checksumUploadRefused: z.literal(true).optional(),
 	status: z.enum([
 		"ready",
 		"target",
@@ -6417,6 +6862,9 @@ function safeJourneySender(sender, now) {
 		async resume(input) {
 			return safe(await sender.resume(input));
 		},
+		async withdraw(input) {
+			return safe(await sender.withdraw(input));
+		},
 		async advance(input, signal = new AbortController().signal) {
 			return safe(await sender.advance(input, signal));
 		}
@@ -10009,6 +10457,28 @@ const validateInspectionClaim = (input) => decode(inspectionClaimSchema, input);
 const validateInspectionHead = (input) => decode(inspectionHeadSchema, input);
 const validateInspectionQuery = (input) => decode(inspectionQuerySchema, input);
 //#endregion
+//#region packages/application/src/inspection/validation/request.ts
+/**
+* The inspection Worker receives its request across a thread boundary. A real inventory can exceed
+* the persisted-evidence decoding bounds, so this parses the host's own request unbounded.
+*/
+const inspectionRequestSchema = z.object({
+	customTerms: z.object({
+		revision: z.string().min(1).max(64),
+		terms: z.array(z.string().max(1024)).max(1e5)
+	}).optional(),
+	inputs: inspectionInputsSchema,
+	inventory: inventorySchema,
+	cleanupBySession: z.record(z.string(), cleanupSelectionSchema)
+});
+const validateInspectionRequest = (input) => {
+	const { customTerms, ...request } = inspectionRequestSchema.parse(input);
+	return customTerms ? {
+		...request,
+		customTerms
+	} : request;
+};
+//#endregion
 //#region packages/application/src/inspection/validation/index.ts
 const inspectionBatchSchema = z.object({
 	contributions: z.array(inspectionContributionSchema).max(128),
@@ -11025,7 +11495,7 @@ function profileUrlMatchesIdentity(profileUrl, identityUrl) {
 }
 const deviceProfileScopeSchema = z.string().max(256).refine((scope) => {
 	const scopes = new Set(scope.trim().split(/\s+/u));
-	return scopes.size === 2 && scopes.has("openid") && scopes.has("profile");
+	return scopes.size === (scopes.has("offline_access") ? 3 : 2) && scopes.has("openid") && scopes.has("profile");
 });
 /** Display data resolved together from the issued token's UserInfo response. */
 const accountProfileSchema = z.object({
@@ -11052,6 +11522,8 @@ const storedCredentialSchema = accountProfileSchema.extend({
 	identityUrl: z.string().min(1).max(2048),
 	clientId: z.string().min(1).max(256),
 	accessToken: z.string().min(1).max(4096),
+	/** Renews the access token without a new device approval (BL-210); absent when not issued. */
+	refreshToken: z.string().min(1).max(4096).optional(),
 	tokenType: z.literal("Bearer"),
 	scope: deviceProfileScopeSchema,
 	issuedAt: z.string().min(1).max(64),
@@ -11113,7 +11585,7 @@ function createSharedAccount(ports) {
 	async function read() {
 		return update((state) => {
 			const saved = state.credential;
-			if (saved && expired(saved.expiresAt, ports.now())) {
+			if (saved && !saved.refreshToken && expired(saved.expiresAt, ports.now())) {
 				state.credential = null;
 				state.connection = null;
 				state.lastError = "SIGN_IN_EXPIRED";
@@ -11168,6 +11640,7 @@ function createSharedAccount(ports) {
 			avatarUrl: state.credential.avatarUrl,
 			profileUrl: state.credential.profileUrl,
 			expiresAt: state.credential.expiresAt,
+			renews: Boolean(state.credential.refreshToken),
 			connection: state.connection ?? null
 		};
 		return {
@@ -11227,6 +11700,7 @@ function createSharedAccount(ports) {
 					avatarUrl: identity.avatarUrl,
 					profileUrl: identity.profileUrl,
 					accessToken: result.accessToken,
+					...result.refreshToken ? { refreshToken: result.refreshToken } : {},
 					tokenType: "Bearer",
 					scope: result.scope,
 					issuedAt: ports.now(),
@@ -11287,7 +11761,8 @@ function createSharedAccount(ports) {
 			})).authorization?.id === id) await poll(id, signal, clientId);
 		} catch (error) {
 			if (signal.aborted) return;
-			console.error(`Account authorization failed: ${safeCode(error)}`);
+			const detail = typeof error === "object" && error !== null && "detail" in error ? ` (${String(error.detail)})` : "";
+			console.error(`Account authorization failed: ${safeCode(error)}${detail}`);
 			await finish(id, safeCode(error));
 			throw error;
 		} finally {
@@ -12085,39 +12560,6 @@ function reviseGroupMembership(state, action, members, preferenceScope) {
 	};
 }
 //#endregion
-//#region packages/application/src/journey/placement/work.ts
-/** The processed project name is both the initial title and the retired-description fallback. */
-function newJourneyWork(id, projectName, rootSessionIds, sourceWorkspaceIds, placement = "placed") {
-	return {
-		id,
-		title: projectName,
-		projectName,
-		projectType: null,
-		description: "",
-		titleOrigin: "model",
-		explicitTitleId: null,
-		accessOrigin: "default",
-		placement,
-		suggestion: null,
-		classificationRecommendation: null,
-		sourceWorkspaceIds,
-		rootSessionIds,
-		grouping: sourceWorkspaceIds.length === 1 ? "workspace" : "regrouped",
-		access: "private",
-		accessConfirmed: false,
-		reason: "Awaiting content review.",
-		revision: 1,
-		inputRevision: 1,
-		status: "pending",
-		totalBatches: 0,
-		completedBatches: 0,
-		groupIds: [],
-		blockedCodes: [],
-		artifact: null,
-		binding: null
-	};
-}
-//#endregion
 //#region packages/application/src/journey/b/reconstruct.ts
 function reconstructBFields(inputs) {
 	const units = inputs.map(validateBUnit).sort((left, right) => left.ordinal - right.ordinal);
@@ -12734,49 +13176,4 @@ function equivalenceDuplicates(batch) {
 	return bindings.sort();
 }
 //#endregion
-//#region packages/application/src/journey/scan-generation.ts
-/** Retire one scan generation while preserving the person's confirmed classification. */
-function retireScanGeneration(state, workId) {
-	if (!state.works.some((work) => work.id === workId)) throw new ApplicationError("UNKNOWN_ITEM");
-	const changedKeys = /* @__PURE__ */ new Set();
-	const terms = state.privacy.terms.flatMap((term) => {
-		if (!term.sources.some((source) => source.workId === workId)) return [term];
-		changedKeys.add(privacyTermKey(term));
-		const sources = term.sources.filter((source) => source.workId !== workId);
-		return sources.length ? [{
-			...term,
-			sources,
-			disposition: term.disposition === "keep" ? "pending" : term.disposition
-		}] : [];
-	});
-	return {
-		...state,
-		readingComplete: false,
-		phase: state.phase === "paused" ? "paused" : "processing",
-		privacy: {
-			...state.privacy,
-			terms,
-			cards: state.privacy.cards.filter((card) => card.termKeys.every((key) => !changedKeys.has(key))),
-			confirmedAnswersRevision: null,
-			packageApproval: null
-		},
-		works: state.works.map((work) => {
-			if (work.id !== workId) return work;
-			const { emptyReview: _empty, excludedReview: _excluded, staticReview: _static, metadataReviewedDigest: _metadata, reviewReuseFrom: _reuse, renderFailure: _failure, ...retained } = work;
-			return {
-				...retained,
-				revision: work.revision + 1,
-				inputRevision: work.inputRevision + 1,
-				status: "pending",
-				suggestion: null,
-				totalBatches: 0,
-				completedBatches: 0,
-				groupIds: [],
-				blockedCodes: [],
-				artifact: null
-			};
-		})
-	};
-}
-//#endregion
-export { settingsBatchSchema as $, bReviewDigest as $n, defaultScopedSettings as $r, journeyResourceQuerySchema as $t, accountProfileSchema as A, packHideIndex as An, staticSessionResourceSchema as Ar, sendSettingsSchema as At, inspectionCancelSchema as B, dictionaryHides as Bn, journeyRenderInputSchema as Br, journeyBatchReadSchema as Bt, rebindReviewAlignment as C, readConfirmedHideChange as Cn, privacyDecisionDigest as Cr, sendPrepareSchema as Ct, guardedFindingText as D, addHideIndexTokens as Dn, hasCurrentStaticReview as Dr, sendReceiptSchema as Dt, reviewBatchReuse as E, termHideAdditions as En, nativeRespondSchema as Er, sendArtifactSchema as Et, storedCredentialSchema as F, bWordBounded as Fn, withReadingProgress as Fr, nativeAdapterVersions as Ft, validateInspectionClaim as G, workDecisionDigest as Gn, selectionSchema as Gr, hideBeginSchema as Gt, validateInspectionBatch as H, maskedHitsStale as Hn, commandSchema as Hr, reviewCompileSchema as Ht, sourceIdentityEvidence as I, confirmedHideGroupIds as In, mergePrivacyTerms as Ir, attemptBudgetCodePoints as It, validateInspectionInputs as J, reviewCandidateInputSchema as Jn, stateSchema as Jr, journeySearchResultSchema as Jt, validateInspectionFence as K, workPrivacyDecisions as Kn, gitMetadataBudgetBytes as Kr, hideFinishSchema as Kt, withSourceEvidence as L, confirmedHideKey as Ln, journeyFindingImpactSchema as Lr, validateAttemptAppend as Lt, deviceProfileScopeSchema as M, bExceptionRanges as Mn, isReadingComplete as Mr, currentJourneyAdapters as Mt, profileUrlMatchesIdentity as N, bMaskedHits as Nn, isSelectedWork as Nr, obsoleteJourney as Nt, staticallyHiddenFindings as O, hideKeyId as On, staticReviewDigest as Or, sendReplaceResultSchema as Ot, readAccountAvatarUrl as P, bTermMatcher as Pn, selectedWorks as Pr, metadataProcessingVersion as Pt, inspectionInputs as Q, reviewTransportBytes as Qn, effectiveTreatmentSchema as Qr, projectPreparationProgress as Qt, agentSetupKey as R, confirmedHideKinds as Rn, journeyFindingsSchema as Rr, journeyGuidance as Rt, bReviewScope as S, confirmedHideDeltaSchema as Sn, assertJourneyPrivacyReady as Sr, sendChoiceSchema as St, rebindReviewSubmit as T, settleConfirmedHides as Tn, nativeGetSchema as Tr, journeySendSchema as Tt, validateInspectionBatches as U, syncTermGroups as Un, packageCommandSchema as Ur, journeyContextQuerySchema as Ut, inspectionStartSchema as V, journeyConfirmedHides as Vn, journeyRenderSchema as Vr, journeyReviewStorageQuerySchema as Vt, inspectionQuerySchema as W, retireWorkDescription as Wn, selectionBatchSchema as Wr, journeyContextSchema as Wt, validateInspectionContribution as X, reviewRepairInputSchema as Xn, recommendParallelism as Xr, searchScopeDigest as Xt, validateInspectionQuery as Y, reviewCandidateResourceSchema as Yn, sourceChangePolicy as Yr, journeySearchSaveSchema as Yt, validateDetectionSummary as Z, reviewRepairResourceSchema as Zn, approvedTreatmentSchema as Zr, journeyPolicyRespondSchema as Zt, semanticGroupKey as _, sessionUsefulnessResourceSchema as _n, preparationBeginSchema as _r, emptyTermsRevision as _t, validateBCrossSegmentReview as a, reviewAttemptsQuerySchema as an, scanSessionResourceSchema as ar, defaultAgentSetupInclusion as at, preparationScope as b, journeyEventSchema as bn, validatePreparationFacts as br, replaceSensitiveTermsSchema as bt, reconcileBSession as c, sessionReconcileResultSchema as cn, verifiedScanGitSeeds as cr, resolveFailureLocation as ct, reviseGroupMembership as d, sessionRereadResourceSchema as dn, resolveSourceSelection as dr, manualUploadBindingSchema as dt, freezeConfiguration as ei, journeyResourceSchema as en, mergeBRepair as er, settingsQuerySchema as et, resolveGroupSplit as f, sessionReviewInputSchema as fn, journeyInventoryQuerySchema as fr, manualUploadChoiceSchema as ft, hideScopeDigest as g, sessionUsefulnessInputSchema as gn, emptyPreparationFacts as gr, candidateSortAvailable as gt, activeJourneyTerms as h, sessionReviewStatusSchema as hn, journeyPreparationProgressSchema as hr, manualUploadStartSchema as ht, locateTermEvidence as i, reviewAttemptResourceSchema as in, scanPreparationDigest as ir, classifyAgentSetup as it, deviceAuthorizationSchema as j, bContainment as jn, hasCompleteWorkDescription as jr, settleCorrections as jt, createAccount as k, maximumHideIndexTokens as kn, staticSessionId as kr, sendResolutionSchema as kt, reconstructBFields as l, sessionReconciliationResourceSchema as ln, scanExclusionResourceSchema as lr, validateFailureLocation as lt, splitSelectorValues as m, sessionReviewResourceSchema as mn, journeyInventorySchema as mr, manualUploadSchema as mt, scanBatchContextDigest as n, staticCatalogRef as ni, journeyPlaceSchema as nn, scanAliasResourceSchema as nr, reviewInventory as nt, bCrossSegmentReviewSchema as o, reviewAttemptsResultSchema as on, scanGitSeedsId as or, maximumAgentSetupSessions as ot, selectedValueMembers as p, sessionReviewQuerySchema as pn, journeyInventoryReadSchema as pr, manualUploadPrepareSchema as pt, validateInspectionHead as q, workCorrectionBinding as qn, producerVersion as qr, hidePublishSchema as qt, scanBatchEquivalenceDigest as r, sortingApplySchema as rn, scanCanonicalResourceSchema as rr, appendSensitiveTerms as rt, bRereadDigest as s, sessionReconcileInputSchema as sn, scanGitSeedsResource as sr, artifactFailureDetailSchema as st, retireScanGeneration as t, selectFrozenConfiguration as ti, journeyIsolateSchema as tn, planBRepair as tr, readWorkspaceOutcomes as tt, newJourneyWork as u, sessionRereadInputSchema as un, validateScanExclusion as ur, manualUploadActionSchema as ut, changeJourney as v, journeyCommitResultSchema as vn, preparationSettlementSchema as vr, maximumTermsFileBytes as vt, rebindReviewOverlay as w, renderedHideValue as wn, nativeEventsSchema as wr, sendStartSchema as wt, isGenericPublicTerm as x, confirmedHideAdditions as xn, journeyClassificationSessionsSchema as xr, sendActionSchema as xt, projectJourneyInventory as y, journeyCommitSchema as yn, preparationStartSchema as yr, normalizeSensitiveTerms as yt, createApplication as z, confirmedHideTerms as zn, journeyPreviewSchema as zr, applyClassification as zt };
+export { settingsQuerySchema as $, reviewCandidateInputSchema as $n, gitMetadataBudgetBytes as $r, journeySearchResultSchema as $t, deviceProfileScopeSchema as A, settleConfirmedHides as An, nativeEventsSchema as Ar, settleCorrections as At, validateInspectionBatch as B, bWordBounded as Bn, isSelectedWork as Br, journeyReviewStorageQuerySchema as Bt, rebindReviewSubmit as C, journeyCommitResultSchema as Cn, preparationSettlementSchema as Cr, sendStartSchema as Ct, createAccount as D, confirmedHideDeltaSchema as Dn, applyCardAnswers as Dr, sendReplaceResultSchema as Dt, staticallyHiddenFindings as E, confirmedHideAdditions as En, journeyClassificationSessionsSchema as Er, sendReceiptSchema as Et, withSourceEvidence as F, packHideIndex as Fn, staticSessionId as Fr, attemptBudgetCodePoints as Ft, validateInspectionFence as G, dictionaryHides as Gn, journeyFindingsSchema as Gr, retireScanGeneration as Gt, validateInspectionRequest as H, confirmedHideKey as Hn, withReadingProgress as Hr, classificationCommitSchema as Ht, agentSetupKey as I, bContainment as In, staticSessionResourceSchema as Ir, validateAttemptAppend as It, validateInspectionQuery as J, syncTermGroups as Jn, journeyRenderSchema as Jr, journeyContextQuerySchema as Jt, validateInspectionHead as K, journeyConfirmedHides as Kn, journeyPreviewSchema as Kr, newJourneyWork as Kt, createApplication as L, bExceptionRanges as Ln, hasCompleteWorkDescription as Lr, journeyGuidance as Lt, readAccountAvatarUrl as M, addHideIndexTokens as Mn, nativeRespondSchema as Mr, obsoleteJourney as Mt, storedCredentialSchema as N, hideKeyId as Nn, hasCurrentStaticReview as Nr, metadataProcessingVersion as Nt, accountProfileSchema as O, readConfirmedHideChange as On, assertJourneyPrivacyReady as Or, sendResolutionSchema as Ot, sourceIdentityEvidence as P, maximumHideIndexTokens as Pn, staticReviewDigest as Pr, nativeAdapterVersions as Pt, settingsBatchSchema as Q, workCorrectionBinding as Qn, selectionSchema as Qr, hidePublishSchema as Qt, inspectionCancelSchema as R, bMaskedHits as Rn, isClassifying as Rr, applyClassification as Rt, rebindReviewOverlay as S, sessionUsefulnessResourceSchema as Sn, preparationBeginSchema as Sr, sendPrepareSchema as St, guardedFindingText as T, journeyEventSchema as Tn, validatePreparationFacts as Tr, sendArtifactSchema as Tt, inspectionQuerySchema as U, confirmedHideKinds as Un, mergePrivacyTerms as Ur, classificationPartition as Ut, validateInspectionBatches as V, confirmedHideGroupIds as Vn, selectedWorks as Vr, applyClassificationProposal as Vt, validateInspectionClaim as W, confirmedHideTerms as Wn, journeyFindingImpactSchema as Wr, classificationWorks as Wt, validateDetectionSummary as X, workDecisionDigest as Xn, packageCommandSchema as Xr, hideBeginSchema as Xt, validateInspectionContribution as Y, retireWorkDescription as Yn, commandSchema as Yr, journeyContextSchema as Yt, inspectionInputs as Z, workPrivacyDecisions as Zn, selectionBatchSchema as Zr, hideFinishSchema as Zt, projectJourneyInventory as _, sessionReviewInputSchema as _n, journeyInventoryQuerySchema as _r, maximumTermsFileBytes as _t, bCrossSegmentReviewSchema as a, effectiveTreatmentSchema as ai, journeyResourceSchema as an, mergeBRepair as ar, maximumAgentSetupSessions as at, bReviewScope as b, sessionReviewStatusSchema as bn, journeyPreparationProgressSchema as br, sendActionSchema as bt, reconstructBFields as c, selectFrozenConfiguration as ci, sortingApplySchema as cn, scanCanonicalResourceSchema as cr, validateFailureLocation as ct, selectedValueMembers as d, reviewAttemptsResultSchema as dn, scanGitSeedsId as dr, manualUploadChoiceSchema as dt, producerVersion as ei, journeySearchSaveSchema as en, reviewCandidateResourceSchema as er, readWorkspaceOutcomes as et, splitSelectorValues as f, sessionReconcileInputSchema as fn, scanGitSeedsResource as fr, manualUploadPrepareSchema as ft, changeJourney as g, sessionRereadResourceSchema as gn, resolveSourceSelection as gr, emptyTermsRevision as gt, semanticGroupKey as h, sessionRereadInputSchema as hn, validateScanExclusion as hr, candidateSortAvailable as ht, validateBCrossSegmentReview as i, approvedTreatmentSchema as ii, journeyResourceQuerySchema as in, bReviewDigest as ir, defaultAgentSetupInclusion as it, profileUrlMatchesIdentity as j, termHideAdditions as jn, nativeGetSchema as jr, currentJourneyAdapters as jt, deviceAuthorizationSchema as k, renderedHideValue as kn, privacyDecisionDigest as kr, sendSettingsSchema as kt, reviseGroupMembership as l, staticCatalogRef as li, reviewAttemptResourceSchema as ln, scanPreparationDigest as lr, manualUploadActionSchema as lt, hideScopeDigest as m, sessionReconciliationResourceSchema as mn, scanExclusionResourceSchema as mr, manualUploadStartSchema as mt, scanBatchEquivalenceDigest as n, sourceChangePolicy as ni, journeyPolicyRespondSchema as nn, reviewRepairResourceSchema as nr, appendSensitiveTerms as nt, bRereadDigest as o, defaultScopedSettings as oi, journeyIsolateSchema as on, planBRepair as or, artifactFailureDetailSchema as ot, activeJourneyTerms as p, sessionReconcileResultSchema as pn, verifiedScanGitSeeds as pr, manualUploadSchema as pt, validateInspectionInputs as q, maskedHitsStale as qn, journeyRenderInputSchema as qr, reviewCompileSchema as qt, locateTermEvidence as r, recommendParallelism as ri, projectPreparationProgress as rn, reviewTransportBytes as rr, classifyAgentSetup as rt, reconcileBSession as s, freezeConfiguration as si, journeyPlaceSchema as sn, scanAliasResourceSchema as sr, resolveFailureLocation as st, scanBatchContextDigest as t, stateSchema as ti, searchScopeDigest as tn, reviewRepairInputSchema as tr, reviewInventory as tt, resolveGroupSplit as u, reviewAttemptsQuerySchema as un, scanSessionResourceSchema as ur, manualUploadBindingSchema as ut, preparationScope as v, sessionReviewQuerySchema as vn, journeyInventoryReadSchema as vr, normalizeSensitiveTerms as vt, reviewBatchReuse as w, journeyCommitSchema as wn, preparationStartSchema as wr, journeySendSchema as wt, rebindReviewAlignment as x, sessionUsefulnessInputSchema as xn, emptyPreparationFacts as xr, sendChoiceSchema as xt, isGenericPublicTerm as y, sessionReviewResourceSchema as yn, journeyInventorySchema as yr, replaceSensitiveTermsSchema as yt, inspectionStartSchema as z, bTermMatcher as zn, isReadingComplete as zr, journeyBatchReadSchema as zt };