@gitroll/tacitt-cli 0.2.0 → 0.4.0

package/dist/{src-CC95LYYp.mjs → src-DNn7SifS.mjs}

@@ -1383,6 +1383,247 @@ function withReadingProgress(state) {
 	};
 }
 //#endregion
+//#region packages/application/src/journey/send/model.ts
+const count$13 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
+const access = z.enum(["public", "private"]);
+const sendSourceSchema = z.object({
+	id: z.string().regex(/^w[0-9]{6,}$/u),
+	pathHash: journeyDigestSchema.nullable(),
+	remoteHashes: z.array(journeyDigestSchema),
+	primaryRemoteHash: journeyDigestSchema.nullable(),
+	challengeId: z.string().regex(/^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/u).optional()
+}).strict();
+function agentSourcePathSegment(value) {
+	return /^[A-Za-z0-9.][A-Za-z0-9._-]*$/u.test(value) && value !== "." && value !== "..";
+}
+/** Local candidates become public only after anonymous upload-time evidence checks. */
+const agentSourceSchema = z.object({
+	kind: z.enum(["skill", "mcp"]),
+	name: z.string().regex(/^[A-Za-z0-9_][A-Za-z0-9_.:-]{0,199}$/u),
+	source: z.discriminatedUnion("type", [z.object({
+		type: z.literal("github"),
+		repo: z.string().refine((value) => {
+			const segments = value.split("/");
+			return segments.length === 2 && segments.every((part) => part.length <= 100 && agentSourcePathSegment(part));
+		}),
+		path: z.string().max(500).refine((value) => value.split("/").every(agentSourcePathSegment)).optional(),
+		commit: z.string().regex(/^[a-f0-9]{40,64}$/iu).optional()
+	}).strict(), z.object({
+		type: z.literal("npm"),
+		package: z.string().max(214).regex(/^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/u)
+	}).strict()])
+}).strict();
+const agentSourcesSchema = z.array(agentSourceSchema).max(500);
+const sendArtifactSchema = z.object({
+	agentSources: agentSourcesSchema.optional(),
+	workId: journeyIdSchema,
+	revision: count$13,
+	bundleId: journeyIdSchema,
+	createdAt: z.iso.datetime(),
+	title: z.string().min(1).max(300),
+	sessionCount: count$13,
+	grouping: z.enum(["workspace", "regrouped"]),
+	sources: z.array(sendSourceSchema).min(1),
+	byteLength: count$13.positive(),
+	sha256: journeyDigestSchema
+}).strict();
+const sendCandidateSchema = z.object({
+	bindingId: journeyIdSchema,
+	workId: z.string().regex(/^wk_[A-Za-z0-9_-]{32}$/u),
+	title: z.string(),
+	access: z.enum([
+		"public",
+		"private",
+		"removed"
+	])
+}).strict();
+const sendResolutionSchema = z.object({
+	logicalWorkId: journeyIdSchema,
+	status: z.enum([
+		"matched",
+		"new",
+		"choose",
+		"blocked"
+	]),
+	reason: z.enum([
+		"binding",
+		"exact_source",
+		"no_candidate",
+		"ambiguous",
+		"work_removed"
+	]),
+	accessVersion: count$13,
+	scopeVersion: count$13,
+	candidates: z.array(sendCandidateSchema)
+}).strict();
+const sendSettingsSchema = z.object({
+	publicId: z.string().regex(/^(?:ps|ap)_[A-Za-z0-9_-]{32}$/u),
+	workId: z.string().regex(/^wk_[A-Za-z0-9_-]{32}$/u),
+	access,
+	accessVersion: count$13,
+	scopeVersion: count$13,
+	membersDigest: journeyDigestSchema,
+	works: z.array(z.object({
+		workId: z.string(),
+		kind: z.enum(["repository", "upload"]),
+		title: z.string(),
+		access: z.enum([
+			"public",
+			"private",
+			"removed"
+		])
+	}).strict())
+}).strict();
+const sendReceiptSchema = z.object({
+	receiptId: journeyIdSchema,
+	logicalWorkId: journeyIdSchema,
+	bindingId: journeyIdSchema,
+	workId: z.string().regex(/^wk_[A-Za-z0-9_-]{32}$/u),
+	publicId: z.string().regex(/^(?:ps|ap)_[A-Za-z0-9_-]{32}$/u),
+	passportUrl: z.url(),
+	bundleId: journeyIdSchema,
+	outputRevision: count$13.positive(),
+	byteLength: count$13.positive(),
+	sha256: journeyDigestSchema,
+	access,
+	effectiveAccess: z.enum([
+		"public",
+		"private",
+		"removed"
+	]),
+	state: z.enum([
+		"awaiting_upload",
+		"accepted",
+		"running",
+		"succeeded",
+		"partial",
+		"failed",
+		"superseded"
+	]),
+	scanId: journeyIdSchema,
+	assessmentState: z.enum([
+		"accepted",
+		"running",
+		"succeeded",
+		"partial",
+		"failed"
+	]).nullable(),
+	passportIncluded: z.boolean(),
+	upload: z.object({
+		uploadUrl: z.url(),
+		expiresAt: z.iso.datetime(),
+		/**
+		* Headers the signed URL requires besides type and length: Passport answers them only
+		* for a checksum upload, whose PUT writes the immutable object directly (ADR 0230).
+		*/
+		headers: z.object({ "x-amz-checksum-sha256": z.base64().length(44) }).strict().optional()
+	}).strict().nullable()
+}).strict();
+/** `POST /me/works/replace`: the owner's other Works are retired (ADR 0204). */
+const sendReplaceResultSchema = z.object({ retiredWorkIds: z.array(z.string().regex(/^wk_[A-Za-z0-9_-]{32}$/u)) }).strict();
+const sendTargetSchema = z.discriminatedUnion("kind", [z.object({
+	kind: z.literal("existing"),
+	bindingId: journeyIdSchema
+}).strict(), z.object({ kind: z.literal("new") }).strict()]);
+const sendResolveInputSchema = z.object({
+	logicalWorkId: journeyIdSchema,
+	bindingId: journeyIdSchema.optional(),
+	grouping: z.enum(["workspace", "regrouped"]),
+	sources: z.array(sendSourceSchema).min(1)
+}).strict();
+const sendUploadInputSchema = z.object({
+	agentSources: agentSourcesSchema.optional(),
+	work: sendResolveInputSchema,
+	target: sendTargetSchema,
+	bundleId: journeyIdSchema,
+	createdAt: z.iso.datetime(),
+	title: z.string().min(1).max(300),
+	sessionCount: count$13,
+	access,
+	outputRevision: count$13.positive(),
+	byteLength: count$13.positive(),
+	sha256: journeyDigestSchema,
+	expectedAccessVersion: count$13,
+	expectedScopeVersion: count$13
+}).strict();
+const savedSendReceiptSchema = sendReceiptSchema.omit({ upload: true });
+const sendItemSchema = z.object({
+	workId: journeyIdSchema,
+	title: z.string(),
+	access,
+	artifact: sendArtifactSchema,
+	operationKey: journeyIdSchema,
+	target: sendTargetSchema.nullable(),
+	targetConfirmed: z.boolean(),
+	resolution: sendResolutionSchema.nullable(),
+	settings: sendSettingsSchema.nullable(),
+	settingsConfirmed: z.boolean(),
+	/** The linked Settings changes the person last confirmed for this Work in this Send. */
+	confirmedSettings: sendSettingsSchema.nullable().optional(),
+	reservation: sendUploadInputSchema.nullable(),
+	receipt: savedSendReceiptSchema.nullable(),
+	previousReceipts: z.array(savedSendReceiptSchema),
+	/** The receipt whose bytes were PUT but not yet completed: the next step completes it (BL-210). */
+	uploadedReceiptId: journeyIdSchema.nullable().optional(),
+	/**
+	* Passport answered `bundle_mismatch` to this Work's checksum upload: the rest of this Send
+	* uploads through staging (ADR 0231).
+	*/
+	checksumUploadRefused: z.literal(true).optional(),
+	status: z.enum([
+		"ready",
+		"target",
+		"settings",
+		"uploading",
+		"assessing",
+		"completed",
+		"blocked"
+	]),
+	error: z.string().nullable()
+}).strict();
+const journeySendSchema = z.object({
+	id: journeyIdSchema,
+	journeyId: journeyIdSchema,
+	revision: count$13,
+	scopeDigest: journeyDigestSchema,
+	subject: z.string().nullable(),
+	confirmedAt: z.iso.datetime().nullable(),
+	status: z.enum([
+		"prepared",
+		"sign-in",
+		"review",
+		"sending",
+		"waiting",
+		"paused",
+		"completed",
+		"blocked"
+	]),
+	items: z.array(sendItemSchema),
+	omitted: z.array(z.object({
+		workId: journeyIdSchema,
+		title: z.string(),
+		reason: z.enum([
+			"drop",
+			"empty",
+			"sent",
+			"not-ready",
+			"too-large",
+			"skipped"
+		]),
+		/** Failed root families omitted even when the same Work has a retained output. */
+		sessionCount: count$13.positive().optional()
+	}).strict().refine((item) => item.reason !== "skipped" || item.sessionCount !== void 0)),
+	error: z.string().nullable(),
+	/**
+	* When this Send replaced the owner's earlier Passport Works and how many it retired; a
+	* native Send is completed only after this is recorded (ADR 0204).
+	*/
+	replaced: z.object({
+		at: z.iso.datetime(),
+		retiredWorkCount: count$13
+	}).strict().nullable().optional()
+}).strict();
+//#endregion
 //#region packages/application/src/journey/static-session.ts
 const count$12 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
 const staticFileSchema = z.object({
@@ -1399,6 +1640,7 @@ const staticFileSchema = z.object({
 */
 const staticSessionResourceSchema = z.object({
 	kind: z.literal("static-session"),
+	agentSources: agentSourcesSchema.optional(),
 	journeyId: journeyIdSchema,
 	workId: journeyIdSchema,
 	inputRevision: count$12.min(1),
@@ -4367,67 +4609,329 @@ z.discriminatedUnion("kind", [z.object({
 	submission: sessionReconcileInputSchema
 }).strict()]);
 //#endregion
-//#region packages/application/src/journey/review/port.ts
-/** Batches are served in publication order; only a Drop or un-Drop invalidates a cursor. */
-const journeyReadCursorSchema = z.object({
-	snapshotId: journeyDigestSchema,
-	dropDigest: journeyDigestSchema,
-	afterSequence: z.number().int().min(0)
-}).strict();
-const journeyBatchReadSchema = z.object({
-	journeyId: journeyIdSchema,
-	cursor: journeyReadCursorSchema.optional()
-}).strict();
-z.object({
-	batch: reviewBatchSchema.nullable(),
-	cursor: journeyReadCursorSchema.nullable(),
-	remaining: z.number().int().nonnegative(),
-	/** Complete current guidance; a sibling so batch and unit digests stay unchanged. */
-	guidance: journeyGuidanceSchema,
-	/** Why no batch is served: the person's scan scope or Work preparation is still pending. */
-	waiting: z.enum(["scope", "preparation"]).nullable()
-}).strict();
-const journeyReviewQuerySchema = z.discriminatedUnion("kind", [z.object({
-	kind: z.literal("batch"),
-	journeyId: journeyIdSchema,
-	batchId: journeyIdSchema
-}).strict(), z.object({
-	kind: z.literal("work"),
-	journeyId: journeyIdSchema,
-	workId: journeyIdSchema,
-	afterOrdinal: z.number().int().min(-1).default(-1)
-}).strict()]);
-/** Internal history is never accepted by the public review inspection facade. */
-const journeyReviewStorageQuerySchema = z.union([
-	journeyReviewQuerySchema,
-	z.object({
-		kind: z.literal("attempt"),
-		journeyId: journeyIdSchema,
-		batchId: journeyIdSchema
-	}).strict(),
-	z.object({
-		kind: z.literal("protected"),
-		journeyId: journeyIdSchema,
-		afterBatchId: journeyIdSchema.optional(),
-		/** Only batches outside this Work input that analysed one of its root sessions. */
-		carriedTo: z.object({
-			workId: journeyIdSchema,
-			inputRevision: z.number().int().positive(),
-			sessionIds: z.array(reviewChunkSchema.shape.sessionId).min(1)
-		}).strict().optional()
-	}).strict()
-]);
-z.object({
-	batch: reviewBatchSchema,
-	review: reviewSubmitSchema.nullable(),
-	additionalFindings: z.array(semanticFindingSchema),
-	additionalRetained: z.array(retainedReviewAnchorSchema),
-	assignments: z.array(z.object({
-		findingId: journeyIdSchema,
-		groupId: journeyIdSchema
-	}).strict())
-}).strict().nullable();
-z.object({
+//#region packages/application/src/journey/placement/work.ts
+/** The processed project name is both the initial title and the retired-description fallback. */
+function newJourneyWork(id, projectName, rootSessionIds, sourceWorkspaceIds, placement = "placed") {
+	return {
+		id,
+		title: projectName,
+		projectName,
+		projectType: null,
+		description: "",
+		titleOrigin: "model",
+		explicitTitleId: null,
+		accessOrigin: "default",
+		placement,
+		suggestion: null,
+		classificationRecommendation: null,
+		sourceWorkspaceIds,
+		rootSessionIds,
+		grouping: sourceWorkspaceIds.length === 1 ? "workspace" : "regrouped",
+		access: "private",
+		accessConfirmed: false,
+		reason: "Awaiting content review.",
+		revision: 1,
+		inputRevision: 1,
+		status: "pending",
+		totalBatches: 0,
+		completedBatches: 0,
+		groupIds: [],
+		blockedCodes: [],
+		artifact: null,
+		binding: null
+	};
+}
+//#endregion
+//#region packages/application/src/journey/scan-generation.ts
+/** Retire one scan generation while preserving the person's confirmed classification. */
+function retireScanGeneration(state, workId) {
+	if (!state.works.some((work) => work.id === workId)) throw new ApplicationError("UNKNOWN_ITEM");
+	const changedKeys = /* @__PURE__ */ new Set();
+	const terms = state.privacy.terms.flatMap((term) => {
+		if (!term.sources.some((source) => source.workId === workId)) return [term];
+		changedKeys.add(privacyTermKey(term));
+		const sources = term.sources.filter((source) => source.workId !== workId);
+		return sources.length ? [{
+			...term,
+			sources,
+			disposition: term.disposition === "keep" ? "pending" : term.disposition
+		}] : [];
+	});
+	return {
+		...state,
+		readingComplete: false,
+		phase: state.phase === "paused" ? "paused" : "processing",
+		privacy: {
+			...state.privacy,
+			terms,
+			cards: state.privacy.cards.filter((card) => card.termKeys.every((key) => !changedKeys.has(key))),
+			confirmedAnswersRevision: null,
+			packageApproval: null
+		},
+		works: state.works.map((work) => work.id === workId ? resetWorkScan(work) : work)
+	};
+}
+/** The same Work with a new scan generation: it is read again from its first session. */
+function resetWorkScan(work) {
+	const { emptyReview: _empty, excludedReview: _excluded, staticReview: _static, metadataReviewedDigest: _metadata, reviewReuseFrom: _reuse, renderFailure: _failure, ...retained } = work;
+	return {
+		...retained,
+		revision: work.revision + 1,
+		inputRevision: work.inputRevision + 1,
+		status: "pending",
+		suggestion: null,
+		totalBatches: 0,
+		completedBatches: 0,
+		groupIds: [],
+		blockedCodes: [],
+		artifact: null
+	};
+}
+//#endregion
+//#region packages/application/src/journey/scope/proposal.ts
+const count$3 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
+const workspaces = z.array(z.string().min(1).max(128));
+/**
+* A complete classification proposal prepared outside the store and applied inside one store
+* transaction against the current state (BL-216). New Work IDs and the session of every finding
+* chunk the regrouping moves are resolved beforehand, so applying it needs no I/O.
+*/
+const classificationCommitSchema = z.object({
+	journeyId: journeyIdSchema,
+	requestKey: journeyIdSchema,
+	requestHash: journeyDigestSchema,
+	at: z.iso.datetime(),
+	/** Unbound proposals keep the exact journey revision fence. */
+	expectedRevision: count$3,
+	/** Bound proposals (E2) are fenced on the classification they replace instead. */
+	expectedClassificationRevision: count$3.nullable(),
+	snapshotId: journeyDigestSchema,
+	/** `classificationPartition` of the state the proposal was prepared against. */
+	partition: journeyDigestSchema,
+	late: z.boolean(),
+	items: z.array(journeyClassificationSubmitSchema.shape.items.element.extend({
+		workId: journeyIdSchema,
+		workspaceIds: workspaces
+	})).min(1).max(1e3),
+	pending: z.object({
+		workId: journeyIdSchema,
+		rootSessionIds: z.array(z.string().min(1).max(128)).min(1).max(1e4),
+		workspaceIds: workspaces
+	}).strict().nullable(),
+	chunkSessions: z.array(z.object({
+		batchId: z.uuid(),
+		chunkId: z.uuid(),
+		sessionId: z.string().min(1).max(128)
+	}).strict()).max(1e6)
+}).strict();
+/** The Works and roots a proposal regroups; scan progress and access never change it. */
+function classificationPartition(state) {
+	return createHash("sha256").update(JSON.stringify(state.works.map((work) => [
+		work.id,
+		work.placement,
+		work.rootSessionIds.toSorted()
+	]))).digest("hex");
+}
+/** The proposal's Works built from the given state's current Works (E2). */
+function classificationWorks(state, plan) {
+	const late = plan.late;
+	const works = [];
+	for (const item of plan.items) {
+		const existing = state.works.find((work) => work.placement !== "classifying" && work.rootSessionIds.length === item.rootSessionIds.length && work.rootSessionIds.every((root) => item.rootSessionIds.includes(root)));
+		const extended = late ? state.works.find((work) => work.placement === "placed" && work.rootSessionIds.every((root) => item.rootSessionIds.includes(root))) : void 0;
+		if (late && existing) {
+			works.push(existing);
+			continue;
+		}
+		const base = existing ?? (extended ? {
+			...resetWorkScan(extended),
+			rootSessionIds: item.rootSessionIds,
+			sourceWorkspaceIds: [.../* @__PURE__ */ new Set([...extended.sourceWorkspaceIds, ...item.workspaceIds])]
+		} : newJourneyWork(item.workId, item.projectName, item.rootSessionIds, item.workspaceIds, "placed"));
+		const { classificationMetadata: _display, ...original } = base;
+		works.push({
+			...original,
+			projectName: item.projectName,
+			title: base.titleOrigin === "explicit" ? base.title : item.projectName,
+			description: item.description,
+			projectType: {
+				type: item.projectType,
+				reason: item.recommendation.reason,
+				origin: "model"
+			},
+			placement: "placed",
+			...late && !extended ? {
+				access: item.recommendation.access,
+				accessOrigin: "model",
+				accessConfirmed: true
+			} : {},
+			classificationRecommendation: item.recommendation,
+			suggestion: null,
+			artifact: null,
+			revision: base.revision + 1
+		});
+	}
+	const pending = plan.pending;
+	if (pending) {
+		const prior = state.works.find((work) => work.placement === "classifying" && work.rootSessionIds.length === pending.rootSessionIds.length && work.rootSessionIds.every((root) => pending.rootSessionIds.includes(root)));
+		works.push(prior ?? newJourneyWork(pending.workId, "Still being grouped", pending.rootSessionIds, pending.workspaceIds, "classifying"));
+	}
+	const fields = (work) => JSON.stringify([
+		work?.title,
+		work?.projectName,
+		work?.description,
+		work?.classificationRecommendation?.reason
+	]);
+	return {
+		works,
+		changedMetadata: new Set(works.filter((work) => {
+			const old = state.works.find((item) => item.id === work.id);
+			return !old || fields(work) !== fields(old);
+		}).map((work) => work.id))
+	};
+}
+/**
+* Rebind accepted frozen evidence; original batch/chunk IDs remain its audit provenance. Null
+* when a finding in a moved Work was not resolved beforehand, so the proposal is stale.
+*/
+function regroupTerms(terms, works, changedMetadata, chunkSessions) {
+	const owners = new Map(works.flatMap((work) => work.rootSessionIds.map((id) => [id, work.id])));
+	const retained = new Set(works.map((work) => work.id));
+	const sessions = new Map(chunkSessions.map((item) => [`${item.batchId}:${item.chunkId}`, item.sessionId]));
+	const regrouped = [];
+	for (const term of terms) {
+		const sources = [];
+		for (const source of term.sources) {
+			if (source.kind === "metadata") {
+				if (retained.has(source.workId) && !changedMetadata.has(source.workId)) sources.push(source);
+				continue;
+			}
+			if (retained.has(source.workId)) {
+				sources.push(source);
+				continue;
+			}
+			const session = sessions.get(`${source.batchId}:${source.chunkId}`);
+			if (session === void 0) return null;
+			const workId = owners.get(session);
+			if (!workId) throw new ApplicationError("CORRUPTED_STATE");
+			sources.push({
+				...source,
+				workId
+			});
+		}
+		regrouped.push({
+			...term,
+			sources
+		});
+	}
+	return regrouped;
+}
+/**
+* The proposal applied to the current state, or null when it is stale: the classification, the
+* frozen snapshot, the regrouped Works and roots, or the scope changed since it was prepared.
+* Scan progress, Work input revisions and the person's visibility choices do not make it stale;
+* they are kept as the current state has them.
+*/
+function applyClassificationProposal(state, plan) {
+	const classifying = isClassifying(state);
+	if (!state.consent || state.journeyId !== plan.journeyId || (plan.expectedClassificationRevision === null ? state.revision !== plan.expectedRevision : !classifying || state.classificationRevision !== plan.expectedClassificationRevision) || state.snapshotId !== plan.snapshotId || state.scope.status === "confirmed" !== plan.late || plan.late && !classifying || state.phase === "paused" || state.pendingHideId || classificationPartition(state) !== plan.partition) return null;
+	const { works, changedMetadata } = classificationWorks(state, plan);
+	const retained = new Set(works.map((work) => work.id));
+	const regrouped = !plan.late && (state.works.some((work) => !retained.has(work.id)) || changedMetadata.size > 0);
+	const cardTerms = new Set(state.privacy.cards.flatMap((card) => card.termKeys));
+	const preserved = regroupTerms(state.privacy.terms, works, changedMetadata, plan.chunkSessions);
+	if (!preserved) return null;
+	const forced = new Set(preserved.filter((term) => !termTypeInfo[term.type].asked).map((term) => term.value));
+	const overrides = new Map(state.valueOverrides?.map((item) => [item.value, item.choice]) ?? []);
+	const terms = preserved.map((term) => ({
+		...term,
+		disposition: forced.has(term.value) ? "hidden" : overrides.has(term.value) ? overrides.get(term.value) === "hide" ? "hidden" : "keep" : regrouped && cardTerms.has(privacyTermKey(term)) ? "pending" : term.disposition
+	}));
+	return {
+		...state,
+		works,
+		classificationRevision: state.revision + 1,
+		scope: plan.late ? state.scope : {
+			status: "pending",
+			actor: null,
+			at: null
+		},
+		privacy: {
+			...state.privacy,
+			terms,
+			packageApproval: null,
+			...regrouped ? {
+				cards: [],
+				answersRevision: state.privacy.answersRevision + 1,
+				confirmedAnswersRevision: null
+			} : {}
+		},
+		readingComplete: !plan.pending && works.filter((work) => work.access !== "drop").every((work) => work.totalBatches > 0 && work.completedBatches === work.totalBatches),
+		phase: "processing"
+	};
+}
+//#endregion
+//#region packages/application/src/journey/review/port.ts
+/** Batches are served in publication order; only a Drop or un-Drop invalidates a cursor. */
+const journeyReadCursorSchema = z.object({
+	snapshotId: journeyDigestSchema,
+	dropDigest: journeyDigestSchema,
+	afterSequence: z.number().int().min(0)
+}).strict();
+const journeyBatchReadSchema = z.object({
+	journeyId: journeyIdSchema,
+	cursor: journeyReadCursorSchema.optional()
+}).strict();
+z.object({
+	batch: reviewBatchSchema.nullable(),
+	cursor: journeyReadCursorSchema.nullable(),
+	remaining: z.number().int().nonnegative(),
+	/** Complete current guidance; a sibling so batch and unit digests stay unchanged. */
+	guidance: journeyGuidanceSchema,
+	/** Why no batch is served: the person's scan scope or Work preparation is still pending. */
+	waiting: z.enum(["scope", "preparation"]).nullable()
+}).strict();
+const journeyReviewQuerySchema = z.discriminatedUnion("kind", [z.object({
+	kind: z.literal("batch"),
+	journeyId: journeyIdSchema,
+	batchId: journeyIdSchema
+}).strict(), z.object({
+	kind: z.literal("work"),
+	journeyId: journeyIdSchema,
+	workId: journeyIdSchema,
+	afterOrdinal: z.number().int().min(-1).default(-1)
+}).strict()]);
+/** Internal history is never accepted by the public review inspection facade. */
+const journeyReviewStorageQuerySchema = z.union([
+	journeyReviewQuerySchema,
+	z.object({
+		kind: z.literal("attempt"),
+		journeyId: journeyIdSchema,
+		batchId: journeyIdSchema
+	}).strict(),
+	z.object({
+		kind: z.literal("protected"),
+		journeyId: journeyIdSchema,
+		afterBatchId: journeyIdSchema.optional(),
+		/** Only batches outside this Work input that analysed one of its root sessions. */
+		carriedTo: z.object({
+			workId: journeyIdSchema,
+			inputRevision: z.number().int().positive(),
+			sessionIds: z.array(reviewChunkSchema.shape.sessionId).min(1)
+		}).strict().optional()
+	}).strict()
+]);
+z.object({
+	batch: reviewBatchSchema,
+	review: reviewSubmitSchema.nullable(),
+	additionalFindings: z.array(semanticFindingSchema),
+	additionalRetained: z.array(retainedReviewAnchorSchema),
+	assignments: z.array(z.object({
+		findingId: journeyIdSchema,
+		groupId: journeyIdSchema
+	}).strict())
+}).strict().nullable();
+z.object({
 	journeyId: journeyIdSchema.optional(),
 	workIds: z.array(journeyIdSchema).min(1).max(1e3).optional()
 }).strict();
@@ -6007,7 +6511,7 @@ function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).t
 				events: rows,
 				state: await get({ journeyId: input.journeyId })
 			};
-			await setTimeout$1(Math.min(250, Math.max(0, deadline - Date.now())), void 0, { signal });
+			await setTimeout$1(Math.min(1e3, Math.max(0, deadline - Date.now())), void 0, { signal });
 		}
 	}
 	async function prepare(value, signal) {
@@ -6110,7 +6614,7 @@ function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).t
 		const scope = await port.renderScope?.(journeyId, workIds.length, signal);
 		const renderWork = scope ? (workId) => scope.render(workId) : (workId) => port.render(journeyId, workId, signal);
 		try {
-			await Promise.all(Array.from({ length: Math.min(scope?.concurrency ?? renderConcurrency, workIds.length) }, async () => {
+			const failure = (await Promise.allSettled(Array.from({ length: Math.min(scope?.concurrency ?? renderConcurrency, workIds.length) }, async () => {
 				for (let workId = workIds[next++]; workId !== void 0; workId = workIds[next++]) {
 					try {
 						await renderWork(workId);
@@ -6129,7 +6633,8 @@ function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).t
 					}
 					await new Promise((resolve) => setImmediate(resolve));
 				}
-			}));
+			}))).find((item) => item.status === "rejected");
+			if (failure) throw failure.reason;
 		} finally {
 			await scope?.close();
 		}
@@ -6146,383 +6651,175 @@ function createNativeJourney(storage, now = () => (/* @__PURE__ */ new Date()).t
 	async function preview(value, signal = new AbortController().signal) {
 		if (!local) throw new ApplicationError("INVALID_TRANSITION");
 		return local.preview(journeyPreviewSchema.parse(value), signal);
-	}
-	async function files(value, signal = new AbortController().signal) {
-		const input = journeyRenderSchema.parse(value);
-		if (!local) throw new ApplicationError("INVALID_TRANSITION");
-		return local.files(input.journeyId, input.workId, signal);
-	}
-	async function submit(value) {
-		const result = await storage.submitReview(reviewSubmitSchema.parse(value));
-		return {
-			...result,
-			state: await present(result.state)
-		};
-	}
-	async function compile(value) {
-		return storage.compileReview(reviewCompileSchema.parse(value));
-	}
-	async function correct(value) {
-		const result = await reportCorrection(storage, value, now());
-		return {
-			...result,
-			state: await present(result.state)
-		};
-	}
-	async function search(value, signal = new AbortController().signal) {
-		if (!local) throw new ApplicationError("INVALID_TRANSITION");
-		return local.search(journeySearchSchema.parse(value), signal);
-	}
-	async function searchResult(value) {
-		return storage.readSearch(nativeGetSchema.required().parse(value).journeyId);
-	}
-	async function hidePlan(value, signal = new AbortController().signal) {
-		if (!local) throw new ApplicationError("INVALID_TRANSITION");
-		const result = await local.hide.plan(hidePlanInputSchema.parse(value), signal);
-		return {
-			...result,
-			state: await present(result.state)
-		};
-	}
-	async function hideConfirm(value, source, signal = new AbortController().signal) {
-		if (!local) throw new ApplicationError("INVALID_TRANSITION");
-		const result = await local.hide.confirm(hideConfirmSchema.parse(value), source, signal);
-		return {
-			...result,
-			state: await present(result.state)
-		};
-	}
-	async function hideRecover(value, signal = new AbortController().signal) {
-		if (!local) throw new ApplicationError("INVALID_TRANSITION");
-		const { journeyId } = nativeGetSchema.required().parse(value);
-		return present(await local.hide.recover(journeyId, signal));
-	}
-	async function cardsRead(value) {
-		const { journeyId } = nativeGetSchema.required().parse(value);
-		const state = await storage.current(journeyId);
-		if (!state?.consent) throw new ApplicationError("CONFIRMATION_REQUIRED");
-		return {
-			journeyId,
-			revision: state.revision,
-			...state.privacy,
-			terms: activePrivacyTerms(state).map((term) => ({
-				...term,
-				key: privacyTermKey(term)
-			}))
-		};
-	}
-	async function privacyWrite(value, resolve) {
-		const input = resolve ? privacyResolveSchema.parse(value) : cardsSubmitSchema.parse(value);
-		const rebase = "mode" in input && input.mode === "append";
-		for (let attempt = 0;; attempt++) {
-			const result = await commitPrivacy(input, rebase);
-			if (result.status !== "stale" || !rebase || attempt >= 4) return result;
-		}
-	}
-	async function commitPrivacy(input, rebase) {
-		const current = await storage.current(input.journeyId);
-		if (!current) throw new ApplicationError("UNKNOWN_ITEM");
-		const expectedRevision = rebase ? current.revision : input.expectedRevision;
-		const state = current.revision !== expectedRevision ? current : "resolutions" in input ? resolvePrivacyTerms(current, input) : publishDecisionCards(current, input);
-		const result = await storage.commit({
-			expectedRevision,
-			requestKey: input.idempotencyKey,
-			requestHash: digest$1(input),
-			state,
-			event: {
-				journeyId: state.journeyId,
-				kind: "response",
-				source: "conversation",
-				at: now()
-			}
-		});
-		return {
-			...result,
-			state: await present(result.state)
-		};
-	}
-	return {
-		classificationSessions: async (value, signal = new AbortController().signal) => {
-			if (!local) throw new ApplicationError("INVALID_TRANSITION");
-			return local.works.classificationSessions(journeyClassificationSessionsSchema.parse(value), signal);
-		},
-		classificationProgress,
-		classificationRead: async (value, signal = new AbortController().signal) => {
-			if (!local) throw new ApplicationError("INVALID_TRANSITION");
-			return local.works.classificationRead(journeyClassificationReadSchema.parse(value), signal);
-		},
-		classificationSubmit: async (value, signal = new AbortController().signal) => {
-			if (!local) throw new ApplicationError("INVALID_TRANSITION");
-			const result = await local.works.classificationSubmit(journeyClassificationSubmitSchema.parse(value), signal);
-			return {
-				...result,
-				state: await present(result.state)
-			};
-		},
-		cardsRead,
-		cardsSubmit: (value) => privacyWrite(value, false),
-		resolve: (value) => privacyWrite(value, true),
-		start,
-		get,
-		inventory: (value) => storage.readInventory(journeyInventoryQuerySchema.parse(value)),
-		respond,
-		events,
-		groupItems: (value) => readGroupItems(storage, value),
-		/** ADR 0086: one pack of read units and the values found in them. */
-		terms: async (value) => reviewTermsResultSchema.parse(await storage.recordTerms(reviewTermsInputSchema.parse(value))),
-		prepare,
-		read,
-		guidance,
-		inspect,
-		context,
-		place,
-		catalog,
-		classify,
-		describe,
-		submit,
-		compile,
-		record: (value) => recordReviewCandidate(storage, value),
-		repair: (value) => prepareReviewRepair(storage, value),
-		session: (value) => prepareSessionReview(storage, value),
-		reread: (value) => readSessionReview(storage, value),
-		reconcile: async (value) => {
-			const result = await submitSessionReview(storage, value);
-			return {
-				...result,
-				commit: {
-					...result.commit,
-					state: await present(result.commit.state)
-				}
-			};
-		},
-		reviewStatus: (value) => sessionReviewStatus(storage, value),
-		attempt: (value) => recordReviewAttempt(storage, value),
-		attempts: (value) => readReviewAttempts(storage, value),
-		correct,
-		render,
-		preview,
-		findings,
-		findingImpact,
-		files,
-		search,
-		searchResult,
-		hidePlan,
-		hideConfirm,
-		hideRecover
-	};
-}
-/** An empty period and no period both mean every session. */
-function samePeriod(a, b) {
-	return (a?.since ?? null) === (b?.since ?? null) && (a?.until ?? null) === (b?.until ?? null);
-}
-//#endregion
-//#region packages/application/src/journey/send/model.ts
-const count$3 = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
-const access = z.enum(["public", "private"]);
-const sendSourceSchema = z.object({
-	id: z.string().regex(/^w[0-9]{6,}$/u),
-	pathHash: journeyDigestSchema.nullable(),
-	remoteHashes: z.array(journeyDigestSchema),
-	primaryRemoteHash: journeyDigestSchema.nullable(),
-	challengeId: z.string().regex(/^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/u).optional()
-}).strict();
-const sendArtifactSchema = z.object({
-	workId: journeyIdSchema,
-	revision: count$3,
-	bundleId: journeyIdSchema,
-	createdAt: z.iso.datetime(),
-	title: z.string().min(1).max(300),
-	sessionCount: count$3,
-	grouping: z.enum(["workspace", "regrouped"]),
-	sources: z.array(sendSourceSchema).min(1),
-	byteLength: count$3.positive(),
-	sha256: journeyDigestSchema
-}).strict();
-const sendCandidateSchema = z.object({
-	bindingId: journeyIdSchema,
-	workId: z.string().regex(/^wk_[A-Za-z0-9_-]{32}$/u),
-	title: z.string(),
-	access: z.enum([
-		"public",
-		"private",
-		"removed"
-	])
-}).strict();
-const sendResolutionSchema = z.object({
-	logicalWorkId: journeyIdSchema,
-	status: z.enum([
-		"matched",
-		"new",
-		"choose",
-		"blocked"
-	]),
-	reason: z.enum([
-		"binding",
-		"exact_source",
-		"no_candidate",
-		"ambiguous",
-		"work_removed"
-	]),
-	accessVersion: count$3,
-	scopeVersion: count$3,
-	candidates: z.array(sendCandidateSchema)
-}).strict();
-const sendSettingsSchema = z.object({
-	publicId: z.string().regex(/^(?:ps|ap)_[A-Za-z0-9_-]{32}$/u),
-	workId: z.string().regex(/^wk_[A-Za-z0-9_-]{32}$/u),
-	access,
-	accessVersion: count$3,
-	scopeVersion: count$3,
-	membersDigest: journeyDigestSchema,
-	works: z.array(z.object({
-		workId: z.string(),
-		kind: z.enum(["repository", "upload"]),
-		title: z.string(),
-		access: z.enum([
-			"public",
-			"private",
-			"removed"
-		])
-	}).strict())
-}).strict();
-const sendReceiptSchema = z.object({
-	receiptId: journeyIdSchema,
-	logicalWorkId: journeyIdSchema,
-	bindingId: journeyIdSchema,
-	workId: z.string().regex(/^wk_[A-Za-z0-9_-]{32}$/u),
-	publicId: z.string().regex(/^(?:ps|ap)_[A-Za-z0-9_-]{32}$/u),
-	passportUrl: z.url(),
-	bundleId: journeyIdSchema,
-	outputRevision: count$3.positive(),
-	byteLength: count$3.positive(),
-	sha256: journeyDigestSchema,
-	access,
-	effectiveAccess: z.enum([
-		"public",
-		"private",
-		"removed"
-	]),
-	state: z.enum([
-		"awaiting_upload",
-		"accepted",
-		"running",
-		"succeeded",
-		"partial",
-		"failed",
-		"superseded"
-	]),
-	scanId: journeyIdSchema,
-	assessmentState: z.enum([
-		"accepted",
-		"running",
-		"succeeded",
-		"partial",
-		"failed"
-	]).nullable(),
-	passportIncluded: z.boolean(),
-	upload: z.object({
-		uploadUrl: z.url(),
-		expiresAt: z.iso.datetime()
-	}).strict().nullable()
-}).strict();
-/** `POST /me/works/replace`: the owner's other Works are retired (ADR 0204). */
-const sendReplaceResultSchema = z.object({ retiredWorkIds: z.array(z.string().regex(/^wk_[A-Za-z0-9_-]{32}$/u)) }).strict();
-const sendTargetSchema = z.discriminatedUnion("kind", [z.object({
-	kind: z.literal("existing"),
-	bindingId: journeyIdSchema
-}).strict(), z.object({ kind: z.literal("new") }).strict()]);
-const sendResolveInputSchema = z.object({
-	logicalWorkId: journeyIdSchema,
-	bindingId: journeyIdSchema.optional(),
-	grouping: z.enum(["workspace", "regrouped"]),
-	sources: z.array(sendSourceSchema).min(1)
-}).strict();
-const sendUploadInputSchema = z.object({
-	work: sendResolveInputSchema,
-	target: sendTargetSchema,
-	bundleId: journeyIdSchema,
-	createdAt: z.iso.datetime(),
-	title: z.string().min(1).max(300),
-	sessionCount: count$3,
-	access,
-	outputRevision: count$3.positive(),
-	byteLength: count$3.positive(),
-	sha256: journeyDigestSchema,
-	expectedAccessVersion: count$3,
-	expectedScopeVersion: count$3
-}).strict();
-const savedSendReceiptSchema = sendReceiptSchema.omit({ upload: true });
-const sendItemSchema = z.object({
-	workId: journeyIdSchema,
-	title: z.string(),
-	access,
-	artifact: sendArtifactSchema,
-	operationKey: journeyIdSchema,
-	target: sendTargetSchema.nullable(),
-	targetConfirmed: z.boolean(),
-	resolution: sendResolutionSchema.nullable(),
-	settings: sendSettingsSchema.nullable(),
-	settingsConfirmed: z.boolean(),
-	/** The linked Settings changes the person last confirmed for this Work in this Send. */
-	confirmedSettings: sendSettingsSchema.nullable().optional(),
-	reservation: sendUploadInputSchema.nullable(),
-	receipt: savedSendReceiptSchema.nullable(),
-	previousReceipts: z.array(savedSendReceiptSchema),
-	/** The receipt whose bytes were PUT but not yet completed: the next step completes it (BL-210). */
-	uploadedReceiptId: journeyIdSchema.nullable().optional(),
-	status: z.enum([
-		"ready",
-		"target",
-		"settings",
-		"uploading",
-		"assessing",
-		"completed",
-		"blocked"
-	]),
-	error: z.string().nullable()
-}).strict();
-const journeySendSchema = z.object({
-	id: journeyIdSchema,
-	journeyId: journeyIdSchema,
-	revision: count$3,
-	scopeDigest: journeyDigestSchema,
-	subject: z.string().nullable(),
-	confirmedAt: z.iso.datetime().nullable(),
-	status: z.enum([
-		"prepared",
-		"sign-in",
-		"review",
-		"sending",
-		"waiting",
-		"paused",
-		"completed",
-		"blocked"
-	]),
-	items: z.array(sendItemSchema),
-	omitted: z.array(z.object({
-		workId: journeyIdSchema,
-		title: z.string(),
-		reason: z.enum([
-			"drop",
-			"empty",
-			"sent",
-			"not-ready",
-			"too-large",
-			"skipped"
-		]),
-		/** Failed root families omitted even when the same Work has a retained output. */
-		sessionCount: count$3.positive().optional()
-	}).strict().refine((item) => item.reason !== "skipped" || item.sessionCount !== void 0)),
-	error: z.string().nullable(),
-	/**
-	* When this Send replaced the owner's earlier Passport Works and how many it retired; a
-	* native Send is completed only after this is recorded (ADR 0204).
-	*/
-	replaced: z.object({
-		at: z.iso.datetime(),
-		retiredWorkCount: count$3
-	}).strict().nullable().optional()
-}).strict();
+	}
+	async function files(value, signal = new AbortController().signal) {
+		const input = journeyRenderSchema.parse(value);
+		if (!local) throw new ApplicationError("INVALID_TRANSITION");
+		return local.files(input.journeyId, input.workId, signal);
+	}
+	async function submit(value) {
+		const result = await storage.submitReview(reviewSubmitSchema.parse(value));
+		return {
+			...result,
+			state: await present(result.state)
+		};
+	}
+	async function compile(value) {
+		return storage.compileReview(reviewCompileSchema.parse(value));
+	}
+	async function correct(value) {
+		const result = await reportCorrection(storage, value, now());
+		return {
+			...result,
+			state: await present(result.state)
+		};
+	}
+	async function search(value, signal = new AbortController().signal) {
+		if (!local) throw new ApplicationError("INVALID_TRANSITION");
+		return local.search(journeySearchSchema.parse(value), signal);
+	}
+	async function searchResult(value) {
+		return storage.readSearch(nativeGetSchema.required().parse(value).journeyId);
+	}
+	async function hidePlan(value, signal = new AbortController().signal) {
+		if (!local) throw new ApplicationError("INVALID_TRANSITION");
+		const result = await local.hide.plan(hidePlanInputSchema.parse(value), signal);
+		return {
+			...result,
+			state: await present(result.state)
+		};
+	}
+	async function hideConfirm(value, source, signal = new AbortController().signal) {
+		if (!local) throw new ApplicationError("INVALID_TRANSITION");
+		const result = await local.hide.confirm(hideConfirmSchema.parse(value), source, signal);
+		return {
+			...result,
+			state: await present(result.state)
+		};
+	}
+	async function hideRecover(value, signal = new AbortController().signal) {
+		if (!local) throw new ApplicationError("INVALID_TRANSITION");
+		const { journeyId } = nativeGetSchema.required().parse(value);
+		return present(await local.hide.recover(journeyId, signal));
+	}
+	async function cardsRead(value) {
+		const { journeyId } = nativeGetSchema.required().parse(value);
+		const state = await storage.current(journeyId);
+		if (!state?.consent) throw new ApplicationError("CONFIRMATION_REQUIRED");
+		return {
+			journeyId,
+			revision: state.revision,
+			...state.privacy,
+			terms: activePrivacyTerms(state).map((term) => ({
+				...term,
+				key: privacyTermKey(term)
+			}))
+		};
+	}
+	async function privacyWrite(value, resolve) {
+		const input = resolve ? privacyResolveSchema.parse(value) : cardsSubmitSchema.parse(value);
+		const rebase = "mode" in input && input.mode === "append";
+		for (let attempt = 0;; attempt++) {
+			const result = await commitPrivacy(input, rebase);
+			if (result.status !== "stale" || !rebase || attempt >= 4) return result;
+		}
+	}
+	async function commitPrivacy(input, rebase) {
+		const current = await storage.current(input.journeyId);
+		if (!current) throw new ApplicationError("UNKNOWN_ITEM");
+		const expectedRevision = rebase ? current.revision : input.expectedRevision;
+		const state = current.revision !== expectedRevision ? current : "resolutions" in input ? resolvePrivacyTerms(current, input) : publishDecisionCards(current, input);
+		const result = await storage.commit({
+			expectedRevision,
+			requestKey: input.idempotencyKey,
+			requestHash: digest$1(input),
+			state,
+			event: {
+				journeyId: state.journeyId,
+				kind: "response",
+				source: "conversation",
+				at: now()
+			}
+		});
+		return {
+			...result,
+			state: await present(result.state)
+		};
+	}
+	return {
+		classificationSessions: async (value, signal = new AbortController().signal) => {
+			if (!local) throw new ApplicationError("INVALID_TRANSITION");
+			return local.works.classificationSessions(journeyClassificationSessionsSchema.parse(value), signal);
+		},
+		classificationProgress,
+		classificationRead: async (value, signal = new AbortController().signal) => {
+			if (!local) throw new ApplicationError("INVALID_TRANSITION");
+			return local.works.classificationRead(journeyClassificationReadSchema.parse(value), signal);
+		},
+		classificationSubmit: async (value, signal = new AbortController().signal) => {
+			if (!local) throw new ApplicationError("INVALID_TRANSITION");
+			const result = await local.works.classificationSubmit(journeyClassificationSubmitSchema.parse(value), signal);
+			return {
+				...result,
+				state: await present(result.state)
+			};
+		},
+		cardsRead,
+		cardsSubmit: (value) => privacyWrite(value, false),
+		resolve: (value) => privacyWrite(value, true),
+		start,
+		get,
+		inventory: (value) => storage.readInventory(journeyInventoryQuerySchema.parse(value)),
+		respond,
+		events,
+		groupItems: (value) => readGroupItems(storage, value),
+		/** ADR 0086: one pack of read units and the values found in them. */
+		terms: async (value) => reviewTermsResultSchema.parse(await storage.recordTerms(reviewTermsInputSchema.parse(value))),
+		prepare,
+		read,
+		guidance,
+		inspect,
+		context,
+		place,
+		catalog,
+		classify,
+		describe,
+		submit,
+		compile,
+		record: (value) => recordReviewCandidate(storage, value),
+		repair: (value) => prepareReviewRepair(storage, value),
+		session: (value) => prepareSessionReview(storage, value),
+		reread: (value) => readSessionReview(storage, value),
+		reconcile: async (value) => {
+			const result = await submitSessionReview(storage, value);
+			return {
+				...result,
+				commit: {
+					...result.commit,
+					state: await present(result.commit.state)
+				}
+			};
+		},
+		reviewStatus: (value) => sessionReviewStatus(storage, value),
+		attempt: (value) => recordReviewAttempt(storage, value),
+		attempts: (value) => readReviewAttempts(storage, value),
+		correct,
+		render,
+		preview,
+		findings,
+		findingImpact,
+		files,
+		search,
+		searchResult,
+		hidePlan,
+		hideConfirm,
+		hideRecover
+	};
+}
+/** An empty period and no period both mean every session. */
+function samePeriod(a, b) {
+	return (a?.since ?? null) === (b?.since ?? null) && (a?.until ?? null) === (b?.until ?? null);
+}
 //#endregion
 //#region packages/application/src/journey/send/command.ts
 const version$1 = z.number().int().nonnegative();
@@ -6557,11 +6854,22 @@ const sendChoiceSchema = sendActionSchema.extend({
 }).strict();
 //#endregion
 //#region packages/application/src/journey/send/service.ts
-/** The API boundary never serializes private scoped exception values from stored state. */
+/** Public snapshots omit local source candidates and private scoped exception values. */
 function safeJourneySender(sender, now) {
 	const safe = (result) => ({
-		...result,
-		journey: journeyView(result.journey, now())
+		...withoutSnapshot(result),
+		journey: journeyView(result.journey, now()),
+		send: result.send && {
+			...result.send,
+			items: result.send.items.map((item) => {
+				const { agentSources: _candidates, ...artifact } = item.artifact;
+				return {
+					...item,
+					artifact,
+					reservation: safeReservation(item.reservation)
+				};
+			})
+		}
 	});
 	return {
 		async get(input) {
@@ -6569,10 +6877,7 @@ function safeJourneySender(sender, now) {
 				journeyId: input.journeyId,
 				...input.sendId ? { sendId: input.sendId } : {}
 			});
-			return result ? {
-				...result,
-				journey: journeyView(result.journey, now())
-			} : null;
+			return result ? safe(result) : null;
 		},
 		async prepare(input, signal = new AbortController().signal) {
 			return safe(await sender.prepare(input, signal));
@@ -6597,6 +6902,15 @@ function safeJourneySender(sender, now) {
 		}
 	};
 }
+function safeReservation(input) {
+	if (!input) return null;
+	const { agentSources: _admitted, ...reservation } = input;
+	return reservation;
+}
+function withoutSnapshot(result) {
+	const { journey: _journey, send: _send, ...rest } = result;
+	return rest;
+}
 //#endregion
 //#region packages/application/src/sensitive-terms/model.ts
 const maximumTermsFileBytes = 16777216;
@@ -12287,39 +12601,6 @@ function reviseGroupMembership(state, action, members, preferenceScope) {
 	};
 }
 //#endregion
-//#region packages/application/src/journey/placement/work.ts
-/** The processed project name is both the initial title and the retired-description fallback. */
-function newJourneyWork(id, projectName, rootSessionIds, sourceWorkspaceIds, placement = "placed") {
-	return {
-		id,
-		title: projectName,
-		projectName,
-		projectType: null,
-		description: "",
-		titleOrigin: "model",
-		explicitTitleId: null,
-		accessOrigin: "default",
-		placement,
-		suggestion: null,
-		classificationRecommendation: null,
-		sourceWorkspaceIds,
-		rootSessionIds,
-		grouping: sourceWorkspaceIds.length === 1 ? "workspace" : "regrouped",
-		access: "private",
-		accessConfirmed: false,
-		reason: "Awaiting content review.",
-		revision: 1,
-		inputRevision: 1,
-		status: "pending",
-		totalBatches: 0,
-		completedBatches: 0,
-		groupIds: [],
-		blockedCodes: [],
-		artifact: null,
-		binding: null
-	};
-}
-//#endregion
 //#region packages/application/src/journey/b/reconstruct.ts
 function reconstructBFields(inputs) {
 	const units = inputs.map(validateBUnit).sort((left, right) => left.ordinal - right.ordinal);
@@ -12936,50 +13217,4 @@ function equivalenceDuplicates(batch) {
 	return bindings.sort();
 }
 //#endregion
-//#region packages/application/src/journey/scan-generation.ts
-/** Retire one scan generation while preserving the person's confirmed classification. */
-function retireScanGeneration(state, workId) {
-	if (!state.works.some((work) => work.id === workId)) throw new ApplicationError("UNKNOWN_ITEM");
-	const changedKeys = /* @__PURE__ */ new Set();
-	const terms = state.privacy.terms.flatMap((term) => {
-		if (!term.sources.some((source) => source.workId === workId)) return [term];
-		changedKeys.add(privacyTermKey(term));
-		const sources = term.sources.filter((source) => source.workId !== workId);
-		return sources.length ? [{
-			...term,
-			sources,
-			disposition: term.disposition === "keep" ? "pending" : term.disposition
-		}] : [];
-	});
-	return {
-		...state,
-		readingComplete: false,
-		phase: state.phase === "paused" ? "paused" : "processing",
-		privacy: {
-			...state.privacy,
-			terms,
-			cards: state.privacy.cards.filter((card) => card.termKeys.every((key) => !changedKeys.has(key))),
-			confirmedAnswersRevision: null,
-			packageApproval: null
-		},
-		works: state.works.map((work) => work.id === workId ? resetWorkScan(work) : work)
-	};
-}
-/** The same Work with a new scan generation: it is read again from its first session. */
-function resetWorkScan(work) {
-	const { emptyReview: _empty, excludedReview: _excluded, staticReview: _static, metadataReviewedDigest: _metadata, reviewReuseFrom: _reuse, renderFailure: _failure, ...retained } = work;
-	return {
-		...retained,
-		revision: work.revision + 1,
-		inputRevision: work.inputRevision + 1,
-		status: "pending",
-		suggestion: null,
-		totalBatches: 0,
-		completedBatches: 0,
-		groupIds: [],
-		blockedCodes: [],
-		artifact: null
-	};
-}
-//#endregion
-export { validateDetectionSummary as $, reviewRepairResourceSchema as $n, sourceChangePolicy as $r, journeyPolicyRespondSchema as $t, createAccount as A, hideKeyId as An, hasCurrentStaticReview as Ar, sendReplaceResultSchema as At, createApplication as B, confirmedHideKinds as Bn, mergePrivacyTerms as Br, journeyGuidance as Bt, bReviewScope as C, confirmedHideAdditions as Cn, journeyClassificationSessionsSchema as Cr, sendActionSchema as Ct, reviewBatchReuse as D, settleConfirmedHides as Dn, nativeEventsSchema as Dr, journeySendSchema as Dt, rebindReviewSubmit as E, renderedHideValue as En, privacyDecisionDigest as Er, sendStartSchema as Et, readAccountAvatarUrl as F, bMaskedHits as Fn, isClassifying as Fr, obsoleteJourney as Ft, validateInspectionRequest as G, syncTermGroups as Gn, journeyRenderSchema as Gr, journeyContextQuerySchema as Gt, inspectionStartSchema as H, dictionaryHides as Hn, journeyFindingsSchema as Hr, journeyBatchReadSchema as Ht, storedCredentialSchema as I, bTermMatcher as In, isReadingComplete as Ir, metadataProcessingVersion as It, validateInspectionFence as J, workPrivacyDecisions as Jn, selectionBatchSchema as Jr, hideFinishSchema as Jt, inspectionQuerySchema as K, retireWorkDescription as Kn, commandSchema as Kr, journeyContextSchema as Kt, sourceIdentityEvidence as L, bWordBounded as Ln, isSelectedWork as Lr, nativeAdapterVersions as Lt, deviceAuthorizationSchema as M, packHideIndex as Mn, staticSessionId as Mr, sendSettingsSchema as Mt, deviceProfileScopeSchema as N, bContainment as Nn, staticSessionResourceSchema as Nr, settleCorrections as Nt, guardedFindingText as O, termHideAdditions as On, nativeGetSchema as Or, sendArtifactSchema as Ot, profileUrlMatchesIdentity as P, bExceptionRanges as Pn, hasCompleteWorkDescription as Pr, currentJourneyAdapters as Pt, validateInspectionContribution as Q, reviewRepairInputSchema as Qn, stateSchema as Qr, searchScopeDigest as Qt, withSourceEvidence as R, confirmedHideGroupIds as Rn, selectedWorks as Rr, attemptBudgetCodePoints as Rt, isGenericPublicTerm as S, journeyEventSchema as Sn, validatePreparationFacts as Sr, replaceSensitiveTermsSchema as St, rebindReviewOverlay as T, readConfirmedHideChange as Tn, assertJourneyPrivacyReady as Tr, sendPrepareSchema as Tt, validateInspectionBatch as U, journeyConfirmedHides as Un, journeyPreviewSchema as Ur, journeyReviewStorageQuerySchema as Ut, inspectionCancelSchema as V, confirmedHideTerms as Vn, journeyFindingImpactSchema as Vr, applyClassification as Vt, validateInspectionBatches as W, maskedHitsStale as Wn, journeyRenderInputSchema as Wr, reviewCompileSchema as Wt, validateInspectionInputs as X, reviewCandidateInputSchema as Xn, gitMetadataBudgetBytes as Xr, journeySearchResultSchema as Xt, validateInspectionHead as Y, workCorrectionBinding as Yn, selectionSchema as Yr, hidePublishSchema as Yt, validateInspectionQuery as Z, reviewCandidateResourceSchema as Zn, producerVersion as Zr, journeySearchSaveSchema as Zt, hideScopeDigest as _, sessionReviewStatusSchema as _n, journeyPreparationProgressSchema as _r, manualUploadStartSchema as _t, locateTermEvidence as a, selectFrozenConfiguration as ai, sortingApplySchema as an, scanCanonicalResourceSchema as ar, appendSensitiveTerms as at, projectJourneyInventory as b, journeyCommitResultSchema as bn, preparationSettlementSchema as br, maximumTermsFileBytes as bt, bRereadDigest as c, reviewAttemptsResultSchema as cn, scanGitSeedsId as cr, maximumAgentSetupSessions as ct, newJourneyWork as d, sessionReconciliationResourceSchema as dn, scanExclusionResourceSchema as dr, validateFailureLocation as dt, recommendParallelism as ei, projectPreparationProgress as en, reviewTransportBytes as er, inspectionInputs as et, reviseGroupMembership as f, sessionRereadInputSchema as fn, validateScanExclusion as fr, manualUploadActionSchema as ft, activeJourneyTerms as g, sessionReviewResourceSchema as gn, journeyInventorySchema as gr, manualUploadSchema as gt, splitSelectorValues as h, sessionReviewQuerySchema as hn, journeyInventoryReadSchema as hr, manualUploadPrepareSchema as ht, scanBatchEquivalenceDigest as i, freezeConfiguration as ii, journeyPlaceSchema as in, scanAliasResourceSchema as ir, reviewInventory as it, accountProfileSchema as j, maximumHideIndexTokens as jn, staticReviewDigest as jr, sendResolutionSchema as jt, staticallyHiddenFindings as k, addHideIndexTokens as kn, nativeRespondSchema as kr, sendReceiptSchema as kt, reconcileBSession as l, sessionReconcileInputSchema as ln, scanGitSeedsResource as lr, artifactFailureDetailSchema as lt, selectedValueMembers as m, sessionReviewInputSchema as mn, journeyInventoryQuerySchema as mr, manualUploadChoiceSchema as mt, retireScanGeneration as n, effectiveTreatmentSchema as ni, journeyResourceSchema as nn, mergeBRepair as nr, settingsQuerySchema as nt, validateBCrossSegmentReview as o, staticCatalogRef as oi, reviewAttemptResourceSchema as on, scanPreparationDigest as or, classifyAgentSetup as ot, resolveGroupSplit as p, sessionRereadResourceSchema as pn, resolveSourceSelection as pr, manualUploadBindingSchema as pt, validateInspectionClaim as q, workDecisionDigest as qn, packageCommandSchema as qr, hideBeginSchema as qt, scanBatchContextDigest as r, defaultScopedSettings as ri, journeyIsolateSchema as rn, planBRepair as rr, readWorkspaceOutcomes as rt, bCrossSegmentReviewSchema as s, reviewAttemptsQuerySchema as sn, scanSessionResourceSchema as sr, defaultAgentSetupInclusion as st, resetWorkScan as t, approvedTreatmentSchema as ti, journeyResourceQuerySchema as tn, bReviewDigest as tr, settingsBatchSchema as tt, reconstructBFields as u, sessionReconcileResultSchema as un, verifiedScanGitSeeds as ur, resolveFailureLocation as ut, semanticGroupKey as v, sessionUsefulnessInputSchema as vn, emptyPreparationFacts as vr, candidateSortAvailable as vt, rebindReviewAlignment as w, confirmedHideDeltaSchema as wn, applyCardAnswers as wr, sendChoiceSchema as wt, preparationScope as x, journeyCommitSchema as xn, preparationStartSchema as xr, normalizeSensitiveTerms as xt, changeJourney as y, sessionUsefulnessResourceSchema as yn, preparationBeginSchema as yr, emptyTermsRevision as yt, agentSetupKey as z, confirmedHideKey as zn, withReadingProgress as zr, validateAttemptAppend as zt };
+export { settingsQuerySchema as $, mergeBRepair as $n, packageCommandSchema as $r, journeyResourceSchema as $t, deviceProfileScopeSchema as A, bContainment as An, staticSessionResourceSchema as Ar, validateAttemptAppend as At, validateInspectionBatch as B, journeyConfirmedHides as Bn, hasCompleteWorkDescription as Br, newJourneyWork as Bt, rebindReviewSubmit as C, renderedHideValue as Cn, privacyDecisionDigest as Cr, sendStartSchema as Ct, createAccount as D, hideKeyId as Dn, hasCurrentStaticReview as Dr, metadataProcessingVersion as Dt, staticallyHiddenFindings as E, addHideIndexTokens as En, nativeRespondSchema as Er, obsoleteJourney as Et, withSourceEvidence as F, confirmedHideGroupIds as Fn, sendArtifactSchema as Fr, applyClassificationProposal as Ft, validateInspectionFence as G, workPrivacyDecisions as Gn, withReadingProgress as Gr, hideFinishSchema as Gt, validateInspectionRequest as H, syncTermGroups as Hn, isReadingComplete as Hr, journeyContextQuerySchema as Ht, agentSetupKey as I, confirmedHideKey as In, sendReceiptSchema as Ir, classificationCommitSchema as It, validateInspectionQuery as J, reviewCandidateResourceSchema as Jn, journeyFindingsSchema as Jr, journeySearchSaveSchema as Jt, validateInspectionHead as K, workCorrectionBinding as Kn, mergePrivacyTerms as Kr, hidePublishSchema as Kt, createApplication as L, confirmedHideKinds as Ln, sendReplaceResultSchema as Lr, classificationPartition as Lt, readAccountAvatarUrl as M, bMaskedHits as Mn, agentSourceSchema as Mr, applyClassification as Mt, storedCredentialSchema as N, bTermMatcher as Nn, agentSourcesSchema as Nr, journeyBatchReadSchema as Nt, accountProfileSchema as O, maximumHideIndexTokens as On, staticReviewDigest as Or, nativeAdapterVersions as Ot, sourceIdentityEvidence as P, bWordBounded as Pn, journeySendSchema as Pr, journeyReviewStorageQuerySchema as Pt, settingsBatchSchema as Q, bReviewDigest as Qn, commandSchema as Qr, journeyResourceQuerySchema as Qt, inspectionCancelSchema as R, confirmedHideTerms as Rn, sendResolutionSchema as Rr, classificationWorks as Rt, rebindReviewOverlay as S, readConfirmedHideChange as Sn, assertJourneyPrivacyReady as Sr, sendPrepareSchema as St, guardedFindingText as T, termHideAdditions as Tn, nativeGetSchema as Tr, currentJourneyAdapters as Tt, inspectionQuerySchema as U, retireWorkDescription as Un, isSelectedWork as Ur, journeyContextSchema as Ut, validateInspectionBatches as V, maskedHitsStale as Vn, isClassifying as Vr, reviewCompileSchema as Vt, validateInspectionClaim as W, workDecisionDigest as Wn, selectedWorks as Wr, hideBeginSchema as Wt, validateDetectionSummary as X, reviewRepairResourceSchema as Xn, journeyRenderInputSchema as Xr, journeyPolicyRespondSchema as Xt, validateInspectionContribution as Y, reviewRepairInputSchema as Yn, journeyPreviewSchema as Yr, searchScopeDigest as Yt, inspectionInputs as Z, reviewTransportBytes as Zn, journeyRenderSchema as Zr, projectPreparationProgress as Zt, projectJourneyInventory as _, journeyCommitResultSchema as _n, preparationSettlementSchema as _r, maximumTermsFileBytes as _t, bCrossSegmentReviewSchema as a, sourceChangePolicy as ai, reviewAttemptsResultSchema as an, scanGitSeedsId as ar, maximumAgentSetupSessions as at, bReviewScope as b, confirmedHideAdditions as bn, journeyClassificationSessionsSchema as br, sendActionSchema as bt, reconstructBFields as c, effectiveTreatmentSchema as ci, sessionReconciliationResourceSchema as cn, scanExclusionResourceSchema as cr, validateFailureLocation as ct, selectedValueMembers as d, selectFrozenConfiguration as di, sessionReviewInputSchema as dn, journeyInventoryQuerySchema as dr, manualUploadChoiceSchema as dt, selectionBatchSchema as ei, journeyIsolateSchema as en, planBRepair as er, readWorkspaceOutcomes as et, splitSelectorValues as f, staticCatalogRef as fi, sessionReviewQuerySchema as fn, journeyInventoryReadSchema as fr, manualUploadPrepareSchema as ft, changeJourney as g, sessionUsefulnessResourceSchema as gn, preparationBeginSchema as gr, emptyTermsRevision as gt, semanticGroupKey as h, sessionUsefulnessInputSchema as hn, emptyPreparationFacts as hr, candidateSortAvailable as ht, validateBCrossSegmentReview as i, stateSchema as ii, reviewAttemptsQuerySchema as in, scanSessionResourceSchema as ir, defaultAgentSetupInclusion as it, profileUrlMatchesIdentity as j, bExceptionRanges as jn, agentSourcePathSegment as jr, journeyGuidance as jt, deviceAuthorizationSchema as k, packHideIndex as kn, staticSessionId as kr, attemptBudgetCodePoints as kt, reviseGroupMembership as l, defaultScopedSettings as li, sessionRereadInputSchema as ln, validateScanExclusion as lr, manualUploadActionSchema as lt, hideScopeDigest as m, sessionReviewStatusSchema as mn, journeyPreparationProgressSchema as mr, manualUploadStartSchema as mt, scanBatchEquivalenceDigest as n, gitMetadataBudgetBytes as ni, sortingApplySchema as nn, scanCanonicalResourceSchema as nr, appendSensitiveTerms as nt, bRereadDigest as o, recommendParallelism as oi, sessionReconcileInputSchema as on, scanGitSeedsResource as or, artifactFailureDetailSchema as ot, activeJourneyTerms as p, sessionReviewResourceSchema as pn, journeyInventorySchema as pr, manualUploadSchema as pt, validateInspectionInputs as q, reviewCandidateInputSchema as qn, journeyFindingImpactSchema as qr, journeySearchResultSchema as qt, locateTermEvidence as r, producerVersion as ri, reviewAttemptResourceSchema as rn, scanPreparationDigest as rr, classifyAgentSetup as rt, reconcileBSession as s, approvedTreatmentSchema as si, sessionReconcileResultSchema as sn, verifiedScanGitSeeds as sr, resolveFailureLocation as st, scanBatchContextDigest as t, selectionSchema as ti, journeyPlaceSchema as tn, scanAliasResourceSchema as tr, reviewInventory as tt, resolveGroupSplit as u, freezeConfiguration as ui, sessionRereadResourceSchema as un, resolveSourceSelection as ur, manualUploadBindingSchema as ut, preparationScope as v, journeyCommitSchema as vn, preparationStartSchema as vr, normalizeSensitiveTerms as vt, reviewBatchReuse as w, settleConfirmedHides as wn, nativeEventsSchema as wr, settleCorrections as wt, rebindReviewAlignment as x, confirmedHideDeltaSchema as xn, applyCardAnswers as xr, sendChoiceSchema as xt, isGenericPublicTerm as y, journeyEventSchema as yn, validatePreparationFacts as yr, replaceSensitiveTermsSchema as yt, inspectionStartSchema as z, dictionaryHides as zn, sendSettingsSchema as zr, retireScanGeneration as zt };