@gitroll/tacitt-cli 0.6.10 → 0.6.12

package/dist/{locate-Cwv6WH8n.mjs → locate-D-ZaHpI0.mjs}

@@ -21,12 +21,52 @@ const knownCodes = {
 function isProcessingCode(value) {
 	return Object.prototype.hasOwnProperty.call(knownCodes, value);
 }
+const sitePattern = /^[a-z][a-z0-9]*(?:-[a-z0-9]+){0,7}$/;
+const harnessPattern = /^[a-z]{1,16}$/;
+const versionPattern = /^\d{1,6}(?:\.\d{1,6}){1,3}(?:-[0-9A-Za-z.]{1,24})?$/;
+/** The validated site fields of `value`; anything that does not match its pattern is dropped. */
+function siteFields(value) {
+	if (typeof value !== "object" || value === null) return void 0;
+	const site = Reflect.get(value, "site");
+	if (typeof site !== "string" || !sitePattern.test(site)) return void 0;
+	const harness = Reflect.get(value, "harness");
+	const harnessVersion = Reflect.get(value, "harnessVersion");
+	return {
+		site,
+		...typeof harness === "string" && harnessPattern.test(harness) ? { harness } : {},
+		...typeof harnessVersion === "string" && versionPattern.test(harnessVersion) ? { harnessVersion } : {}
+	};
+}
+/** The version string a harness record declares, when it has the shape of a version. */
+function declaredVersion(value) {
+	return value !== void 0 && versionPattern.test(value) ? value : void 0;
+}
+/**
+* The outermost named site in an error's cause chain (and aggregate members), if any. Depth first:
+* a wide aggregate of wrapped refusals must not spend the visit budget before the first named one.
+*/
+function processingSite(error) {
+	const stack = [error];
+	for (let visited = 0; visited < 32 && stack.length; visited++) {
+		const current = stack.pop();
+		if (!(current instanceof Error)) continue;
+		const found = siteFields(current);
+		if (found) return found;
+		if (current instanceof AggregateError) stack.push(...current.errors.slice(0, 16).reverse());
+		if (current.cause !== void 0) stack.push(current.cause);
+	}
+}
 var ProcessingError = class extends Error {
 	code;
+	site;
+	harness;
+	harnessVersion;
 	constructor(code, options) {
 		super(code, options);
 		this.name = "ProcessingError";
 		this.code = code;
+		const named = siteFields(options);
+		if (named) Object.assign(this, named);
 	}
 };
 function fail(code, options) {
@@ -138,6 +178,10 @@ const credentialNames = Object.freeze([
 	"auth_token",
 	"session_token",
 	"authorization",
+	"authorization_code",
+	"oauth_code",
+	"密碼",
+	"密码",
 	"proxy_authorization",
 	"x_api_key",
 	"private_key",
@@ -423,13 +467,13 @@ function assignments(input, output) {
 	}
 	if (input.field.kind === "key") return;
 	const consumed = headers(input, output);
-	if (!/[:=]|--/u.test(input.text)) return;
+	if (!/[:=：]|--/u.test(input.text)) return;
 	if (!mayContainCredentialName(input.text)) return;
-	const expression = /(?:(?<![\p{L}\p{N}_/?&#-])(\\?["']?)([\p{L}\p{N}_-]{1,64})\1([ \t]*)[:=]([ \t]*)|(?<![\p{L}\p{N}_-])--([\p{L}\p{N}_-]{1,64})([ \t]+)(?![ \t-]))/giu;
+	const expression = /(?:(?<![\p{L}\p{N}_/?&#-])(\\?["']?)((?:oauth[ \t]+)?authorization[ \t]+code|oauth[ \t]+code|[\p{L}\p{N}_-]{1,64})\1([ \t]*)[:=：]([ \t]*)|(?<![\p{L}\p{N}_-])--([\p{L}\p{N}_-]{1,64})([ \t]+)(?![ \t-]))/giu;
 	let match;
 	let headerIndex = 0;
 	while ((match = expression.exec(input.text)) !== null) {
-		const label = normalizeCredentialName(match[2] ?? match[5] ?? "");
+		const label = normalizeCredentialName((match[2] ?? match[5] ?? "").replace(/[ \t]+/gu, "_"));
 		if (!credentialName(label)) continue;
 		while ((consumed[headerIndex]?.end ?? Infinity) <= match.index) headerIndex += 1;
 		const header = consumed[headerIndex];
@@ -2564,10 +2608,10 @@ function urlActions(locator, input, result) {
 			actions: [action]
 		});
 	}
-	const inspect = (range, key, query = false) => {
+	const inspect = (range, key, query = false, oauthResponse = false) => {
 		if (range.start >= range.end) return;
 		const raw = input.text.slice(range.start, range.end);
-		const credential = key !== void 0 && credentialName(key);
+		const credential = key !== void 0 && (credentialName(key) || oauthResponse && key === "code");
 		if (!withinLimit({
 			raw,
 			range
@@ -2614,6 +2658,8 @@ function urlActions(locator, input, result) {
 	const end = hash < 0 ? locator.raw.length : hash;
 	const question = locator.raw.indexOf("?", pathEnd);
 	if (question >= 0 && question < end) {
+		const keys = new URLSearchParams(locator.raw.slice(question + 1, end));
+		const oauthResponse = (locator.scheme === "http" || locator.scheme === "https") && keys.has("code") && (keys.has("state") || keys.has("session_state") || /(?:^|\/)(?:oauth2?|callback|oauth2?[_-]callback)(?:\/|$)/iu.test(locator.raw.slice(suffix, pathEnd)));
 		start = question + 1;
 		for (let index = start; index <= end; index++) {
 			if (index !== end && locator.raw[index] !== "&") continue;
@@ -2623,7 +2669,7 @@ function urlActions(locator, input, result) {
 				if (key !== null) inspect({
 					start: offset + equals + 1,
 					end: offset + index
-				}, key, true);
+				}, key, true, oauthResponse);
 			} else inspect({
 				start: offset + start,
 				end: offset + index
@@ -4794,7 +4840,7 @@ function createRegistry(options, limits) {
 		const required = /* @__PURE__ */ new Map();
 		for (const step of steps) {
 			const registration = nodes.get(refKey(step.node));
-			if (!registration) return fail("PROCESSING_UNSUPPORTED");
+			if (!registration) return fail("PROCESSING_UNSUPPORTED", { site: "registry-node-missing" });
 			const configured = registration.configure(step.options);
 			if (refKey(configured.ref) !== refKey(step.node) || typeof configured.process !== "function" || !Array.isArray(configured.requires) || !Array.isArray(configured.ruleIds) || configured.ruleIds.length > 256 || configured.ruleIds.some((id) => typeof id !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/.test(id)) || new Set(configured.ruleIds).size !== configured.ruleIds.length) return fail("PROCESSING_INVALID_PLAN");
 			const checked = buildPlan([], configured.requires.map((ref) => ({
@@ -4802,7 +4848,7 @@ function createRegistry(options, limits) {
 				version: ref.version
 			})));
 			for (const ref of checked.analyses) {
-				if (!analyses.has(refKey(ref))) return fail("PROCESSING_UNSUPPORTED");
+				if (!analyses.has(refKey(ref))) return fail("PROCESSING_UNSUPPORTED", { site: "registry-analysis-missing" });
 				required.set(refKey(ref), ref);
 			}
 			Object.freeze(configured);
@@ -4821,7 +4867,7 @@ function createRegistry(options, limits) {
 		}
 		const plan = buildPlan(steps, [...required.values()]);
 		const parsers = plan.analyses.map((ref) => {
-			return analyses.get(refKey(ref)) ?? fail("PROCESSING_UNSUPPORTED");
+			return analyses.get(refKey(ref)) ?? fail("PROCESSING_UNSUPPORTED", { site: "registry-parser-missing" });
 		});
 		return Object.freeze({
 			plan,
@@ -5176,7 +5222,7 @@ function validateSelection(root, selection, options) {
 		if (edit?.mode.kind === "empty" && node.kind === "literal") fail("PROCESSING_INVALID_PROPOSAL");
 		if (edit?.replacementOrigin !== void 0 && node.kind !== "string") fail("PROCESSING_INVALID_PROPOSAL");
 		if (edit?.replacementSourceRanges !== void 0) {
-			if (node.kind !== "string" || edit.replacementOrigin !== "user-message" || !edit.replacementSourceRanges.length) fail("PROCESSING_INVALID_PROPOSAL");
+			if (node.kind !== "string" || edit.replacementOrigin !== "user-message" && !(edit.role === "main-text" && edit.mode.kind === "remove" && edit.replacement !== void 0) || !edit.replacementTargetRanges || !edit.replacementSourceRanges.length) fail("PROCESSING_INVALID_PROPOSAL");
 			let end = 0;
 			for (const range of edit.replacementSourceRanges) {
 				if (!Number.isSafeInteger(range.start) || !Number.isSafeInteger(range.end) || range.start < end || range.end <= range.start || range.end > node.value.length) fail("PROCESSING_INVALID_PROPOSAL");
@@ -5917,7 +5963,7 @@ function projectNativeRecord(root, selection, options) {
 			if (Buffer.byteLength(edit.replacement) > options.limits.maxOutputBytes) fail("PROCESSING_LIMIT");
 		}
 		if (edit?.mode.kind === "head-tail") {
-			if (node.kind !== "string") fail("PROCESSING_UNSUPPORTED");
+			if (node.kind !== "string") fail("PROCESSING_UNSUPPORTED", { site: "retention-window-not-string" });
 			const { segments } = selectOriginalWindows(options.sampleTexts?.get(node.id) ?? node.value, edit.mode);
 			const rendered = JSON.stringify({
 				kind: "text-sample",
@@ -6306,7 +6352,7 @@ function staticRegistration(category) {
 						if (seen.has(action.targetId)) continue;
 						seen.add(action.targetId);
 						if (action.range.start < end) {
-							if (action.range.end > end) fail("PROCESSING_UNSUPPORTED");
+							if (action.range.end > end) fail("PROCESSING_UNSUPPORTED", { site: "static-action-overlap" });
 							continue;
 						}
 						const view = context.view(action.targetId);
@@ -7146,7 +7192,7 @@ function createDetectionSummary() {
 }
 //#endregion
 //#region packages/processing/src/inspection/versions.ts
-const currentDetectorVersion = `static-catalog-11`;
+const currentDetectorVersion = `static-catalog-12`;
 /** Before-redaction inspection; cleanup and redaction have independent lifetimes. */
 const inspectionSemanticVersions = Object.freeze({
 	implementation: originalInspectionVersion,
@@ -7733,7 +7779,7 @@ function collectNativeReviewInput(request, originals, options, scope = "output")
 		const originalSource = source ?? sources.get(field.fieldId.replace(/-k$/u, ""));
 		if (!originalSource) fail("PROCESSING_INVALID_RECORD");
 		const edit = edits.get(originalSource.nodeId);
-		if (scope === "main-prose" && edit?.replacementOrigin === "user-message") {
+		if (scope === "main-prose" && (edit?.replacementOrigin === "user-message" || edit?.replacementSourceRanges)) {
 			if (!edit.replacementSourceRanges?.length) fail("PROCESSING_INVALID_RECORD");
 			for (const [index, range] of edit.replacementSourceRanges.entries()) {
 				const text = originalSource.text.slice(range.start, range.end);
@@ -8492,8 +8538,10 @@ const safeCodes = /* @__PURE__ */ new Set([
 	"SESSION_UPLOAD_EXHAUSTED",
 	"SESSION_TRANSPORT_UNAVAILABLE",
 	"SEND_SCOPE_BUSY",
+	"HOST_REPLACEMENT_PENDING",
 	"SEND_REPLACE_REFUSED",
 	"SESSION_CONTENT_CONFLICT",
+	"WORK_SESSION_CAPACITY_EXCEEDED",
 	"SESSION_MOVE_ACCESS_REQUIRED",
 	"SESSION_MOVE_ACCESS_HELD",
 	"SEND_SCOPE_INVALIDATED",
@@ -8506,6 +8554,8 @@ const safeCodes = /* @__PURE__ */ new Set([
 	"SENSITIVE_TERMS_CHANGED",
 	"ACCOUNT_NOT_CONFIGURED",
 	"ACCOUNT_SIGNED_OUT",
+	"ACCOUNT_ACCESS_UNAVAILABLE",
+	"JOURNEY_SIGN_IN_REQUIRED",
 	"ACCOUNT_PROFILE_UNAVAILABLE",
 	"PASSPORT_ADDRESS_TAKEN",
 	"PASSPORT_ADDRESS_RESERVED",
@@ -8574,6 +8624,8 @@ const safeCodes = /* @__PURE__ */ new Set([
 	"OPERATION_BUSY",
 	"OPERATION_CONFLICT",
 	"OPERATION_FAILED",
+	"WORK_METADATA_INCOMPLETE",
+	"PACKAGING_FAILED",
 	"PACKAGING_BUSY",
 	"PROCESSING_PLAN_UNAVAILABLE",
 	"PROCESSING_PLAN_MISMATCH",
@@ -8988,6 +9040,24 @@ const termEvidenceSchema = z.object({
 	rationale: termAssessmentSchema.shape.rationale,
 	stance: termAssessmentSchema.shape.stance
 }).strict().refine((evidence) => evidence.end > evidence.start);
+const namedBatch = z.object({
+	journeyId: id$1,
+	batchId: id$1,
+	batchDigest: digest$3
+}).strict();
+const emptyReviewCorrectionSchema = z.discriminatedUnion("kind", [namedBatch.extend({ kind: z.literal("inspect") }).strict(), namedBatch.extend({
+	kind: z.literal("apply"),
+	expectedPackId: id$1,
+	idempotencyKey: id$1
+}).strict()]);
+const emptyReviewCorrectionResultSchema = z.object({
+	status: z.enum([
+		"eligible",
+		"reopened",
+		"replayed"
+	]),
+	packId: id$1
+}).strict();
 /** One pack of read units and the values found in them (`review.terms`). */
 const reviewTermsInputSchema = z.object({
 	journeyId: id$1,
@@ -8998,6 +9068,10 @@ const reviewTermsInputSchema = z.object({
 	units: z.array(z.object({
 		batchId: id$1,
 		batchDigest: digest$3,
+		coverage: z.object({
+			attemptId: id$1,
+			receipts: z.array(digest$3).min(1).max(8e4)
+		}).strict().optional(),
 		/** Legacy unit summary in stored packs; accepted and never read (ADR 0178). */
 		summary: z.string().trim().min(1).refine((value) => Buffer.byteLength(value) <= 1024).optional(),
 		exclude: z.string().trim().refine((value) => codePoints(value) >= 1 && codePoints(value) <= 500).nullable()
@@ -9433,6 +9507,13 @@ const journeyArtifactSchema = z.object({
 		archiveBytes: count$1
 	}).strict()
 }).strict();
+/** A closed reader attempt that left named units without a coverage receipt. */
+const reviewInterruptionSchema = z.object({
+	inputRevision: count$1.min(1),
+	packId: journeyIdSchema,
+	reason: z.enum(["reader-refused", "retry-exhausted"]),
+	batchIds: z.array(journeyIdSchema).min(1).max(1e4).refine((ids) => new Set(ids).size === ids.length)
+}).strict();
 const journeyWorkSchema = z.object({
 	id: journeyIdSchema,
 	title: label,
@@ -9524,6 +9605,7 @@ const journeyWorkSchema = z.object({
 		/** Images the Work's sessions leave out (D7); absent when a session receipt predates it. */
 		imagesOmitted: count$1.optional()
 	}).strict().optional(),
+	reviewInterruptions: z.array(reviewInterruptionSchema).optional(),
 	totalBatches: count$1,
 	completedBatches: count$1,
 	groupIds: z.array(journeyIdSchema),
@@ -9547,7 +9629,12 @@ const journeyWorkSchema = z.object({
 const journeyConsentSchema = z.object({
 	provider: label,
 	allowedAt: z.iso.datetime(),
-	source: z.enum(["conversation", "panel"])
+	source: z.enum(["conversation", "panel"]),
+	/**
+	* The account signed in when consent was recorded (ADR 0276 D8). Absent in a build with no
+	* sign-in client and in a journey started before this version (Q11 a, Q13 a).
+	*/
+	subject: z.string().min(1).max(128).optional()
 }).strict();
 const journeyExceptionSchema = z.object({
 	id: journeyIdSchema,
@@ -9561,6 +9648,7 @@ const journeyExceptionSchema = z.object({
 }).strict();
 const nativeJourneySchema = z.object({
 	formatVersion: z.literal(10),
+	outputVersion: z.number().int().positive().optional(),
 	classificationRevision: count$1.nullable(),
 	privacy: journeyPrivacySchema,
 	delegation: journeyDelegationSchema.nullable(),
@@ -9618,8 +9706,29 @@ const nativeJourneySchema = z.object({
 	/** Sessions whose last activity lies in this period (ADR 0206); absent means all. */
 	period: sessionPeriodSchema.optional(),
 	/** The Passport address and links chosen in this Journey (ADR 0246); absent means none yet. */
-	profile: journeyProfileSchema.optional()
+	profile: journeyProfileSchema.optional(),
+	/**
+	* The last account read that re-seeded every Work (ADR 0277 section 5). Only scope
+	* confirmation and Retry set `read`; late classification records only a failure. Absent in a
+	* journey of an earlier version, which reads as not `read`.
+	*/
+	accountRead: z.object({
+		status: z.enum([
+			"read",
+			"signed-out",
+			"unavailable"
+		]),
+		subject: z.string().min(1).max(128).optional(),
+		at: z.iso.datetime()
+	}).strict().optional()
 }).strict();
+/**
+* Consent with no subject: a journey started before sign-in was required, or in a build with no
+* sign-in client. It finishes under the rules it started with (ADR 0276 Q13 a, Q11 a).
+*/
+function consentedWithoutAccount(state) {
+	return state.consent !== null && state.consent.subject === void 0;
+}
 //#endregion
 //#region packages/application/src/journey/b/model.ts
 const bMethod = "sesspilot-b-v2";
@@ -10737,6 +10846,63 @@ function compileBFindings(batch, evidence) {
 	return findings;
 }
 //#endregion
+//#region packages/application/src/journey/terms/read-pages.ts
+/** Leave ample space for tool framing, JSON escaping and the final receipt on each read. */
+const pageBytes = 6e3;
+/** Each receipt binds the delivered text, its position, the frozen batch and its assignment. */
+function reviewReadPages(batch, attemptId) {
+	const pages = [];
+	let text = "";
+	function flush() {
+		if (!text) return;
+		const receipt = createHash("sha256").update(JSON.stringify([
+			"scan-read-v1",
+			attemptId,
+			batch.id,
+			batch.digest,
+			pages.length,
+			text
+		])).digest("hex");
+		pages.push({
+			text,
+			receipt
+		});
+		text = "";
+	}
+	for (const chunk of batch.chunks) {
+		if (!chunk.text.length) throw new Error("EMPTY_REVIEW_PAGE");
+		let offset = 0;
+		while (offset < chunk.text.length) {
+			const header = "\nCHUNK " + chunk.id + " " + (chunk.core ? "review" : "context") + " " + chunk.role + " UTF16_START " + offset + "\n";
+			const available = pageBytes - Buffer.byteLength(text + header);
+			if (available < 4) {
+				if (!text) throw new Error("INVALID_REVIEW_PAGE_HEADER");
+				flush();
+				continue;
+			}
+			let end = offset;
+			let bytes = 0;
+			while (end < chunk.text.length) {
+				const point = chunk.text.codePointAt(end);
+				if (point === void 0) throw new Error("INVALID_REVIEW_PAGE_RANGE");
+				const size = point < 128 ? 1 : point < 2048 ? 2 : point < 65536 ? 3 : 4;
+				if (bytes + size > available) break;
+				end += point >= 65536 ? 2 : 1;
+				bytes += size;
+			}
+			text += header + chunk.text.slice(offset, end);
+			offset = end;
+			if (offset < chunk.text.length) flush();
+		}
+	}
+	flush();
+	return pages;
+}
+function matchesReadReceipts(batch, attemptId, receipts) {
+	const pages = reviewReadPages(batch, attemptId);
+	return pages.length > 0 && pages.length === receipts.length && pages.every((page, i) => page.receipt === receipts[i]);
+}
+//#endregion
 //#region packages/application/src/journey/terms/locate.ts
 /** NFC core text of each analysed field, contiguous core chunks joined, with its Work. */
 function coreTexts(batches) {
@@ -10787,7 +10953,7 @@ function locateTerms(batches, terms) {
 		}];
 	}));
 	for (const { type, value, index } of unique.values()) {
-		if (admitCustomTerm(value)?.value !== value || !texts.some((item) => item.text.includes(value))) {
+		if (value.includes("█") || admitCustomTerm(value)?.value !== value || !texts.some((item) => item.text.includes(value))) {
 			unlocated++;
 			unlocatedIndices.push(index);
 			continue;
@@ -10811,4 +10977,4 @@ function locateTerms(batches, terms) {
 	};
 }
 //#endregion
-export { bCountSchema as $, detectStatic as $n, safeField as $t, bDuplicateMirror as A, createReplacementKey as An, journeyTermSchema as At, bEvidenceReader as B, nativeItems as Bn, sessionPeriodSchema as Bt, validateBUnit as C, inspectionSemanticVersions as Cn, cardsSubmitSchema as Ct, uncoveredBObligations as D, createStaticProcessor as Dn, privacyResolveSchema as Dt, bLiterals as E, walkNativeFields as En, packageConfirmActionSchema as Et, bClassificationKey as F, entityDictionaryVersion as Fn, termTypeInfo as Ft, subtractBRanges as G, validateProfile as Gn, ownerProfileSchema as Gt, codePointLength as H, transformRecords as Hn, journeyProfileAddressActionSchema as Ht, bIssue as I, nativeParserVersion as In, termTypeSchema as It, bRetainedGroupSchema as J, validatePlan as Jn, respondProfileLinks as Jt, utf16Offset as K, orderProfile as Kn, passportAddressSchema as Kt, bOverlaps as L, redactionImplementationVersion as Ln, termTypes as Lt, bLegacyBindings as M, projectNativeRecord as Mn, reviewTermsResultSchema as Mt, bUnitFragments as N, parseNativeRecord as Nn, termAssessmentSchema as Nt, indexBRanges as O, staticDefaults as On, privacyTermKey as Ot, bAdoptedObligations as P, cleanupImplementationVersion as Pn, termOverrideValueSchema as Pt, bAnchorSchema as Q, resolveLimits as Qn, safeCode as Qt, unownedBObligations as R, nativeBoolean as Rn, deselectOutsidePeriod as Rt, validateBFields as S, currentDetectorVersion as Sn, cardsConfirmActionSchema as St, bLiteralTerms as T, gapReasons as Tn, emptyJourneyPrivacy as Tt, codePointSlice as U, frameRecords as Un, journeyProfileLinksActionSchema as Ut, bDigest as V, nativeText as Vn, emptyJourneyProfile as Vt, createCodePointIndex as W, retainedMainTextNodes as Wn, mergeOwnerProfile as Wt, bSessionDecisionSchema as X, defaultLimits as Xn, ApplicationError as Xt, bReviewSubmissionSchema as Y, copyData as Yn, classificationTitleMaskSchema as Yt, bTermSchema as Z, recordPointerLimits as Zn, UnfinishedJourneyError as Zt, semanticFindingSchema as _, reviewRoles as _n, hideConfirmSchema as _t, reviewChunkSchema as a, observeSource as an, admitCustomTerm as ar, journeyExceptionSchema as at, validateBReview as b, createSessionPreparation as bn, journeyConfigurationSchema as bt, textDigest as c, inventorySchema as cn, scalarBefore as cr, journeyPreferenceScopeSchema as ct, reviewAlignmentAudit as d, workspaceSchema as dn, fail as dr, nativeJourneySchema as dt, familyNeedsReview as en, isStaticCategory as er, bIdSchema as et, reviewAlignmentAuditSchema as f, nativeSourceIdentitySchema as fn, isProcessingCode as fr, journeyGuidanceSchema as ft, validateReviewAlignment as g, mainReviewRole as gn, journeyWorkSuggestionSchema as gt, reviewFindingsDigest as h, projectNativeReviewInput as hn, journeyDescribeSchema as ht, reviewBatchSchema as i, sourceKey as in, createEntityMatcher as ir, journeyDigestSchema as it, bDuplicateShift as j, sessionNonce as jn, reviewTermsInputSchema as jt, bBindingCap as k, staticOptions as kn, privacyTermSchema as kt, validateReview as l, sessionSchema as ln, defaultDetectionLimits as lr, journeyProjectTypeSchema as lt, reviewAlignmentSchema as m, processNativeRecord as mn, delegatedDecisionSchema as mt, compileBFindings as n, reviewFamilies as nn, jsonSpans as nr, journeyAccessSchema as nt, reviewDigest as o, sourceSnapshotId as on, admitGitName as or, journeyIdSchema as ot, reviewAlignmentInputSchema as p, withMandatoryCustomTerms as pn, journeyInstructionInputSchema as pt, bRepresentationSchema as q, buildPlan as qn, profileHasChoices as qt, reviewBatchChunks as r, sourceGraph as rn, agentContextLocation as rr, journeyChoiceSchema as rt, reviewSubmitSchema as s, fileIdentitySchema as sn, scalarAfter as sr, journeyKindSchema as st, locateTerms as t, familySelected as tn, staticCategories as tr, bMethod as tt, findingReferenceKey as u, sourcePartSchema as un, ProcessingError as ur, journeyWorkTypeSchema as ut, bContextEvidence as v, createSentenceContext as vn, hidePlanInputSchema as vt, bLiteralAdmitted as w, createDetectionSummary as wn, decisionCardInputSchema as wt, createBAnalysisUnits as x, bindInspection as xn, cardAnswerActionSchema as xt, validateBClassification as y, renderNative as yn, hidePlanResourceSchema as yt, bAnchorKey as z, nativeField as zn, filterInventoryByPeriod as zt };
+export { bTermSchema as $, buildPlan as $n, profileHasChoices as $t, indexBRanges as A, createDetectionSummary as An, packageConfirmActionSchema as At, unownedBObligations as B, cleanupImplementationVersion as Bn, termOverrideValueSchema as Bt, createBAnalysisUnits as C, reviewRoles as Cn, hidePlanResourceSchema as Ct, bLiteralTerms as D, bindInspection as Dn, cardsSubmitSchema as Dt, bLiteralAdmitted as E, createSessionPreparation as En, cardsConfirmActionSchema as Et, bUnitFragments as F, staticOptions as Fn, emptyReviewCorrectionSchema as Ft, codePointSlice as G, nativeField as Gn, filterInventoryByPeriod as Gt, bEvidenceReader as H, nativeParserVersion as Hn, termTypeSchema as Ht, bAdoptedObligations as I, createReplacementKey as In, journeyTermSchema as It, utf16Offset as J, transformRecords as Jn, journeyProfileAddressActionSchema as Jt, createCodePointIndex as K, nativeItems as Kn, sessionPeriodSchema as Kt, bClassificationKey as L, sessionNonce as Ln, reviewTermsInputSchema as Lt, bDuplicateMirror as M, walkNativeFields as Mn, privacyTermKey as Mt, bDuplicateShift as N, createStaticProcessor as Nn, privacyTermSchema as Nt, bLiterals as O, currentDetectorVersion as On, decisionCardInputSchema as Ot, bLegacyBindings as P, staticDefaults as Pn, emptyReviewCorrectionResultSchema as Pt, bSessionDecisionSchema as Q, orderProfile as Qn, passportAddressSchema as Qt, bIssue as R, projectNativeRecord as Rn, reviewTermsResultSchema as Rt, validateBReview as S, mainReviewRole as Sn, hidePlanInputSchema as St, validateBUnit as T, renderNative as Tn, cardAnswerActionSchema as Tt, bDigest as U, redactionImplementationVersion as Un, termTypes as Ut, bAnchorKey as V, entityDictionaryVersion as Vn, termTypeInfo as Vt, codePointLength as W, nativeBoolean as Wn, deselectOutsidePeriod as Wt, bRetainedGroupSchema as X, retainedMainTextNodes as Xn, mergeOwnerProfile as Xt, bRepresentationSchema as Y, frameRecords as Yn, journeyProfileLinksActionSchema as Yt, bReviewSubmissionSchema as Z, validateProfile as Zn, ownerProfileSchema as Zt, reviewFindingsDigest as _, workspaceSchema as _n, declaredVersion as _r, journeyInstructionInputSchema as _t, reviewBatchChunks as a, safeField as an, detectStatic as ar, journeyAccessSchema as at, bContextEvidence as b, processNativeRecord as bn, processingSite as br, journeyWorkSuggestionSchema as bt, reviewDigest as c, reviewFamilies as cn, jsonSpans as cr, journeyExceptionSchema as ct, validateReview as d, observeSource as dn, admitCustomTerm as dr, journeyPreferenceScopeSchema as dt, respondProfileLinks as en, validatePlan as er, bAnchorSchema as et, findingReferenceKey as f, sourceSnapshotId as fn, admitGitName as fr, journeyProjectTypeSchema as ft, reviewAlignmentSchema as g, sourcePartSchema as gn, ProcessingError as gr, journeyGuidanceSchema as gt, reviewAlignmentInputSchema as h, sessionSchema as hn, defaultDetectionLimits as hr, reviewInterruptionSchema as ht, compileBFindings as i, safeCode as in, resolveLimits as ir, consentedWithoutAccount as it, bBindingCap as j, gapReasons as jn, privacyResolveSchema as jt, uncoveredBObligations as k, inspectionSemanticVersions as kn, emptyJourneyPrivacy as kt, reviewSubmitSchema as l, sourceGraph as ln, agentContextLocation as lr, journeyIdSchema as lt, reviewAlignmentAuditSchema as m, inventorySchema as mn, scalarBefore as mr, nativeJourneySchema as mt, matchesReadReceipts as n, ApplicationError as nn, defaultLimits as nr, bIdSchema as nt, reviewBatchSchema as o, familyNeedsReview as on, isStaticCategory as or, journeyChoiceSchema as ot, reviewAlignmentAudit as p, fileIdentitySchema as pn, scalarAfter as pr, journeyWorkTypeSchema as pt, subtractBRanges as q, nativeText as qn, emptyJourneyProfile as qt, reviewReadPages as r, UnfinishedJourneyError as rn, recordPointerLimits as rr, bMethod as rt, reviewChunkSchema as s, familySelected as sn, staticCategories as sr, journeyDigestSchema as st, locateTerms as t, classificationTitleMaskSchema as tn, copyData as tr, bCountSchema as tt, textDigest as u, sourceKey as un, createEntityMatcher as ur, journeyKindSchema as ut, validateReviewAlignment as v, nativeSourceIdentitySchema as vn, fail as vr, delegatedDecisionSchema as vt, validateBFields as w, createSentenceContext as wn, journeyConfigurationSchema as wt, validateBClassification as x, projectNativeReviewInput as xn, siteFields as xr, hideConfirmSchema as xt, semanticFindingSchema as y, withMandatoryCustomTerms as yn, isProcessingCode as yr, journeyDescribeSchema as yt, bOverlaps as z, parseNativeRecord as zn, termAssessmentSchema as zt };

package/dist/{model-zvn5GUJ9.mjs → model-DR9odhWP.mjs}

@@ -1,4 +1,4 @@
-import "./src-BqtdFVq7.mjs";
+import "./src-Do-qzuMn.mjs";
 //#region packages/harnesses/src/discovery/model.ts
 const discoveryBounds = {
 	entries: 1e5,

package/dist/operation-executor.mjs

@@ -1,6 +1,6 @@
-import { _ as longCommands, c as executorRequestSchema, h as parseOptions, i as invoke, n as readOperation, o as createRuntime, r as waitOperation, y as startupFailure } from "./query-By41gaKm.mjs";
-import { $t as safeField, Qt as safeCode, Xt as ApplicationError } from "./locate-Cwv6WH8n.mjs";
-import "./src-BqtdFVq7.mjs";
+import { c as executorRequestSchema, g as longCommands, i as invoke, m as parseOptions, n as readOperation, o as createRuntime, r as waitOperation, v as startupFailure } from "./query-BYDcNKy2.mjs";
+import { an as safeField, in as safeCode, nn as ApplicationError } from "./locate-D-ZaHpI0.mjs";
+import "./src-Do-qzuMn.mjs";
 import { z } from "zod";
 import { setTimeout } from "node:timers/promises";
 //#region apps/cli/src/operation/executor.ts

package/dist/preview-worker.mjs

@@ -1,4 +1,4 @@
-import { n as assertPreviewHeap, o as previewInputSchema, t as runPreview } from "./run-ZQx7p4Rw.mjs";
+import { n as assertPreviewHeap, o as previewInputSchema, t as runPreview } from "./run-DQ9xyKSt.mjs";
 import { parentPort, workerData } from "node:worker_threads";
 //#region packages/harnesses/src/preview/worker/index.ts
 function notify(message) {

package/dist/privacy-validator.mjs

@@ -1,6 +1,53 @@
-import { Dt as privacyResolveSchema, Ot as privacyTermKey, t as locateTerms, wt as decisionCardInputSchema } from "./locate-Cwv6WH8n.mjs";
+import { Mt as privacyTermKey, Ot as decisionCardInputSchema, jt as privacyResolveSchema, r as reviewReadPages, t as locateTerms } from "./locate-D-ZaHpI0.mjs";
 import { z } from "zod";
 //#region apps/cli/src/skill-install/privacy-validator.ts
+const sourceReferenceSchema = z.object({
+	chunkId: z.uuid(),
+	start: z.number().int(),
+	end: z.number().int()
+}).strict();
+/** Resolve sensitive spans locally against the projected, assigned core text. */
+function resolvePrivacySources(raw, batches) {
+	if (!Array.isArray(raw)) throw new Error("INVALID_FINDING");
+	if (!raw.some((term) => typeof term === "object" && term !== null && "source" in term)) return raw;
+	const chunks = new Map(batches.flatMap(({ chunks }) => chunks.map((chunk) => [chunk.id, chunk])));
+	const diagnostics = [];
+	let invalidCount = 0;
+	const resolved = raw.map((term, index) => {
+		if (typeof term !== "object" || term === null || !("source" in term)) return term;
+		const invalid = (reason) => {
+			invalidCount++;
+			if (diagnostics.length < 32) diagnostics.push(`draft.terms[${index}].source: ${reason}`);
+		};
+		const reference = sourceReferenceSchema.safeParse(term.source);
+		if (!reference.success || "value" in term) return invalid("use only a chunkId and integer start/end offsets for the source");
+		const { chunkId, start, end } = reference.data;
+		const chunk = chunks.get(chunkId);
+		if (!chunk?.core) return invalid("select an assigned core chunk");
+		if (start < 0 || end <= start || end > chunk.text.length) return invalid("check chunk-relative UTF-16 bounds");
+		if (end - start > 8e3) return invalid("span exceeds the length limit");
+		if (chunk.displayMasks?.some((range) => range.start < end && start < range.end)) return invalid("span intersects masked text");
+		const value = chunk.text.slice(start, end);
+		if (!value.isWellFormed()) {
+			if ((chunk.text.codePointAt(start - 1) ?? 0) > 65535 || (chunk.text.codePointAt(end - 1) ?? 0) > 65535) return invalid("offset splits a UTF-16 surrogate pair");
+			return invalid("span contains invalid UTF-16");
+		}
+		if (value.includes("█")) return invalid("span intersects masked text");
+		if (!value.trim()) return invalid("span contains only whitespace");
+		if (Array.from(value).length > 4e3) return invalid("span exceeds the length limit");
+		const { source: _source, ...rest } = term;
+		return {
+			...rest,
+			value
+		};
+	});
+	if (invalidCount) {
+		const remaining = invalidCount - diagnostics.length;
+		if (remaining) diagnostics.push(`${remaining} additional invalid source references`);
+		throw new Error("INVALID_REVIEW_SPAN", { cause: diagnostics });
+	}
+	return resolved;
+}
 const suppliedTerms = z.array(z.object({
 	key: z.string(),
 	type: z.string(),
@@ -43,4 +90,4 @@ function validateStageAnswer(input, answer) {
 	}
 }
 //#endregion
-export { locateTerms, validateStageAnswer };
+export { locateTerms, resolvePrivacySources, reviewReadPages, validateStageAnswer };