@gitroll/tacitt-cli 0.6.2 → 0.6.4

package/dist/{run-hQ_W2p_Y.mjs → run-u2EfHjz4.mjs}

@@ -1,7 +1,7 @@
-import { ln as sessionSchema } from "./locate-JYtFmKu-.mjs";
-import { t as createZstdFrameCheck$1 } from "./frame-DGun31Uc.mjs";
-import "./src--Ln5GHdz.mjs";
-import { a as isRecord } from "./model-C1VzgKLi.mjs";
+import { ln as sessionSchema } from "./locate-CNU4z9G1.mjs";
+import { t as createZstdFrameCheck$1 } from "./frame-BGFmADbg.mjs";
+import "./src-DmSIVU7-.mjs";
+import { a as isRecord } from "./model-CZeHzKif.mjs";
 import { constants } from "node:fs";
 import { z } from "zod";
 import { lstat, open, stat } from "node:fs/promises";

package/dist/{src-JoT3L94j.mjs → src-BRwicVza.mjs}

@@ -1,6 +1,6 @@
-import { $n as detectStatic, An as createReplacementKey, Bn as nativeItems, En as walkNativeFields, Fn as entityDictionaryVersion, Gn as validateProfile, H as codePointLength, Hn as transformRecords, In as nativeParserVersion, Jn as validatePlan, Ln as redactionImplementationVersion, Mn as projectNativeRecord, Nn as parseNativeRecord, Pn as cleanupImplementationVersion, Qn as resolveLimits, Qt as safeCode, Un as frameRecords, V as bDigest, Vn as nativeText, Wn as retainedMainTextNodes, Xn as defaultLimits, Xt as ApplicationError, Zn as recordPointerLimits, _n as reviewRoles, bn as createSessionPreparation, c as textDigest, dr as fail$1, fn as nativeSourceIdentitySchema, fr as isProcessingCode, gn as mainReviewRole, hn as projectNativeReviewInput, in as sourceKey, ir as createEntityMatcher, j as bDuplicateShift, jn as sessionNonce, k as bBindingCap, lr as defaultDetectionLimits, mn as processNativeRecord, nn as reviewFamilies, nr as jsonSpans, o as reviewDigest, on as sourceSnapshotId, pn as withMandatoryCustomTerms, qn as buildPlan, rr as agentContextLocation, tn as familySelected, ur as ProcessingError, vn as createSentenceContext, wn as createDetectionSummary, x as createBAnalysisUnits, xn as bindInspection, yn as renderNative, zn as nativeField } from "./locate-JYtFmKu-.mjs";
-import { t as createZstdFrameCheck } from "./frame-DGun31Uc.mjs";
-import { An as bContainment, Dt as metadataProcessingVersion, F as withSourceEvidence, I as agentSetupKey, Mr as agentSourceSchema, P as sourceIdentityEvidence, Pn as bWordBounded, it as defaultAgentSetupInclusion, jn as bExceptionRanges, jr as agentSourcePathSegment, li as approvedTreatmentSchema, mi as staticCatalogRef, rt as classifyAgentSetup, si as sourceChangePolicy, ur as resolveSourceSelection } from "./src--Ln5GHdz.mjs";
+import { $n as detectStatic, An as createReplacementKey, Bn as nativeItems, En as walkNativeFields, Fn as entityDictionaryVersion, Gn as validateProfile, H as codePointLength, Hn as transformRecords, In as nativeParserVersion, Jn as validatePlan, Ln as redactionImplementationVersion, Mn as projectNativeRecord, Nn as parseNativeRecord, Pn as cleanupImplementationVersion, Qn as resolveLimits, Qt as safeCode, Un as frameRecords, V as bDigest, Vn as nativeText, Wn as retainedMainTextNodes, Xn as defaultLimits, Xt as ApplicationError, Zn as recordPointerLimits, _n as reviewRoles, bn as createSessionPreparation, c as textDigest, dr as fail$1, fn as nativeSourceIdentitySchema, fr as isProcessingCode, gn as mainReviewRole, hn as projectNativeReviewInput, in as sourceKey, ir as createEntityMatcher, j as bDuplicateShift, jn as sessionNonce, k as bBindingCap, lr as defaultDetectionLimits, mn as processNativeRecord, nn as reviewFamilies, nr as jsonSpans, o as reviewDigest, on as sourceSnapshotId, pn as withMandatoryCustomTerms, qn as buildPlan, rr as agentContextLocation, tn as familySelected, ur as ProcessingError, vn as createSentenceContext, wn as createDetectionSummary, x as createBAnalysisUnits, xn as bindInspection, yn as renderNative, zn as nativeField } from "./locate-CNU4z9G1.mjs";
+import { t as createZstdFrameCheck } from "./frame-BGFmADbg.mjs";
+import { F as sourceIdentityEvidence, I as withSourceEvidence, In as bWordBounded, L as agentSetupKey, Mn as bContainment, Nn as bExceptionRanges, Nr as agentSourcePathSegment, Pr as agentSourceSchema, at as defaultAgentSetupInclusion, di as approvedTreatmentSchema, fr as resolveSourceSelection, gi as staticCatalogRef, it as classifyAgentSetup, kt as metadataProcessingVersion, li as sourceChangePolicy } from "./src-DmSIVU7-.mjs";
 import { constants } from "node:fs";
 import { link, lstat, mkdir, open, readFile, readdir, realpath, rm, rmdir, stat, unlink } from "node:fs/promises";
 import { execFile, fork, spawn } from "node:child_process";
@@ -15501,7 +15501,8 @@ async function* configuredSessionUploads(input, identities, signal) {
 			const text = await readMetadata(entry, signal);
 			if (Buffer.byteLength(text) !== description.byteLength || createHash("sha256").update(text).digest("hex") !== description.sha256) fail("ARTIFACT_INVALID_ARCHIVE");
 			const { version: _, ...facts } = validateConfiguredSourceMetadata(strictJson(text, metadataLimitBytes), workspace);
-			const nativeSessionId = session.parts[0]?.native.sessionId ?? session.sourceSessionId;
+			const native = session.parts[0]?.native;
+			const nativeSessionId = native?.sessionId ?? session.sourceSessionId;
 			if (!nativeSessionId?.trim() && !identity.relativePath) fail("ARTIFACT_IDENTITY_MISMATCH");
 			const metadata = {
 				workspace: facts,
@@ -15557,6 +15558,7 @@ async function* configuredSessionUploads(input, identities, signal) {
 					...content,
 					metadata,
 					nativeSessionId,
+					...session.harness === "claude" && native?.role === "worker" ? { workerIdentity: { agentId: native.agentId } } : {},
 					relativePath: identity.relativePath,
 					harness: session.harness,
 					lastAt: identity.lastAt,

package/dist/{src-CGFwLUd6.mjs → src-BgoSvnXe.mjs}

@@ -1,7 +1,7 @@
-import { Bn as nativeItems, En as walkNativeFields, Nn as parseNativeRecord, Rn as nativeBoolean, Vn as nativeText, Wn as retainedMainTextNodes, Xn as defaultLimits, an as observeSource, on as sourceSnapshotId, ur as ProcessingError, zn as nativeField } from "./locate-JYtFmKu-.mjs";
-import { Ot as nativeAdapterVersions, ii as gitMetadataBudgetBytes, tt as reviewInventory } from "./src--Ln5GHdz.mjs";
-import { a as isRecord, i as errorCode, n as checkDiscoveryAbort, o as unresolvedMetadata, r as discoveryBounds, t as DiscoveryWarnings } from "./model-C1VzgKLi.mjs";
-import { c as previewLimits, d as checkOpenSource, f as checkSource, h as openSource, i as pageFits, l as previewSourceVersion, m as noSymlinks, p as fileSnapshot, r as previewHeapLimits, s as previewMessageSchema, u as createZstdFrameCheck } from "./run-hQ_W2p_Y.mjs";
+import { Bn as nativeItems, En as walkNativeFields, Nn as parseNativeRecord, Rn as nativeBoolean, Vn as nativeText, Wn as retainedMainTextNodes, Xn as defaultLimits, an as observeSource, on as sourceSnapshotId, ur as ProcessingError, zn as nativeField } from "./locate-CNU4z9G1.mjs";
+import { At as nativeAdapterVersions, nt as reviewInventory, oi as gitMetadataBudgetBytes } from "./src-DmSIVU7-.mjs";
+import { a as isRecord, i as errorCode, n as checkDiscoveryAbort, o as unresolvedMetadata, r as discoveryBounds, t as DiscoveryWarnings } from "./model-CZeHzKif.mjs";
+import { c as previewLimits, d as checkOpenSource, f as checkSource, h as openSource, i as pageFits, l as previewSourceVersion, m as noSymlinks, p as fileSnapshot, r as previewHeapLimits, s as previewMessageSchema, u as createZstdFrameCheck } from "./run-u2EfHjz4.mjs";
 import { a as titleHintLimits, n as titleHeapLimits, o as titleInputSchema, r as decodeTitleError, s as titleReplySchema } from "./heap-1FYhGds4.mjs";
 import { constants } from "node:fs";
 import { lstat, open, opendir, readFile, readdir, realpath, stat } from "node:fs/promises";

package/dist/{src--Ln5GHdz.mjs → src-DmSIVU7-.mjs}

@@ -1,4 +1,4 @@
-import { $ as bCountSchema, $n as detectStatic, A as bDuplicateMirror, B as bEvidenceReader, Bt as sessionPeriodSchema, C as validateBUnit, Cn as inspectionSemanticVersions, Ct as cardsSubmitSchema, D as uncoveredBObligations, Dn as createStaticProcessor, Dt as privacyResolveSchema, E as bLiterals, Et as packageConfirmActionSchema, Fn as entityDictionaryVersion, Ft as termTypeInfo, G as subtractBRanges, Gn as validateProfile, H as codePointLength, Ht as journeyProfileAddressActionSchema, I as bIssue, It as termTypeSchema, J as bRetainedGroupSchema, Jn as validatePlan, Jt as respondProfileLinks, Kn as orderProfile, L as bOverlaps, Lt as termTypes, M as bLegacyBindings, Mt as reviewTermsResultSchema, N as bUnitFragments, Nt as termAssessmentSchema, O as indexBRanges, On as staticDefaults, Ot as privacyTermKey, P as bAdoptedObligations, Pn as cleanupImplementationVersion, Pt as termOverrideValueSchema, Q as bAnchorSchema, Qt as safeCode, R as unownedBObligations, Rt as deselectOutsidePeriod, S as validateBFields, Sn as currentDetectorVersion, St as cardsConfirmActionSchema, T as bLiteralTerms, Tn as gapReasons, Tt as emptyJourneyPrivacy, U as codePointSlice, Ut as journeyProfileLinksActionSchema, V as bDigest, Vt as emptyJourneyProfile, W as createCodePointIndex, X as bSessionDecisionSchema, Xt as ApplicationError, Y as bReviewSubmissionSchema, Yn as copyData, Yt as classificationTitleMaskSchema, Z as bTermSchema, Zt as UnfinishedJourneyError, _ as semanticFindingSchema, _t as hideConfirmSchema, a as reviewChunkSchema, an as observeSource, at as journeyExceptionSchema, b as validateBReview, bt as journeyConfigurationSchema, c as textDigest, cn as inventorySchema, cr as scalarBefore, ct as journeyPreferenceScopeSchema, dt as nativeJourneySchema, en as familyNeedsReview, et as bIdSchema, f as reviewAlignmentAuditSchema, fn as nativeSourceIdentitySchema, ft as journeyGuidanceSchema, g as validateReviewAlignment, h as reviewFindingsDigest, ht as journeyDescribeSchema, i as reviewBatchSchema, in as sourceKey, ir as createEntityMatcher, it as journeyDigestSchema, jt as reviewTermsInputSchema, kn as staticOptions, l as validateReview, lr as defaultDetectionLimits, lt as journeyProjectTypeSchema, m as reviewAlignmentSchema, mt as delegatedDecisionSchema, n as compileBFindings, nn as reviewFamilies, nt as journeyAccessSchema, o as reviewDigest, on as sourceSnapshotId, ot as journeyIdSchema, p as reviewAlignmentInputSchema, pt as journeyInstructionInputSchema, q as bRepresentationSchema, r as reviewBatchChunks, rn as sourceGraph, rt as journeyChoiceSchema, s as reviewSubmitSchema, sn as fileIdentitySchema, sr as scalarAfter, st as journeyKindSchema, tn as familySelected, tr as staticCategories, tt as bMethod, u as findingReferenceKey, un as sourcePartSchema, ut as journeyWorkTypeSchema, vt as hidePlanInputSchema, w as bLiteralAdmitted, x as createBAnalysisUnits, xt as cardAnswerActionSchema, y as validateBClassification, yt as hidePlanResourceSchema, z as bAnchorKey } from "./locate-JYtFmKu-.mjs";
+import { $ as bCountSchema, $n as detectStatic, A as bDuplicateMirror, B as bEvidenceReader, Bt as sessionPeriodSchema, C as validateBUnit, Cn as inspectionSemanticVersions, Ct as cardsSubmitSchema, D as uncoveredBObligations, Dn as createStaticProcessor, Dt as privacyResolveSchema, E as bLiterals, Et as packageConfirmActionSchema, Fn as entityDictionaryVersion, Ft as termTypeInfo, G as subtractBRanges, Gn as validateProfile, H as codePointLength, Ht as journeyProfileAddressActionSchema, I as bIssue, It as termTypeSchema, J as bRetainedGroupSchema, Jn as validatePlan, Jt as respondProfileLinks, Kn as orderProfile, L as bOverlaps, Lt as termTypes, M as bLegacyBindings, Mt as reviewTermsResultSchema, N as bUnitFragments, Nt as termAssessmentSchema, O as indexBRanges, On as staticDefaults, Ot as privacyTermKey, P as bAdoptedObligations, Pn as cleanupImplementationVersion, Pt as termOverrideValueSchema, Q as bAnchorSchema, Qt as safeCode, R as unownedBObligations, Rt as deselectOutsidePeriod, S as validateBFields, Sn as currentDetectorVersion, St as cardsConfirmActionSchema, T as bLiteralTerms, Tn as gapReasons, Tt as emptyJourneyPrivacy, U as codePointSlice, Ut as journeyProfileLinksActionSchema, V as bDigest, Vt as emptyJourneyProfile, W as createCodePointIndex, X as bSessionDecisionSchema, Xt as ApplicationError, Y as bReviewSubmissionSchema, Yn as copyData, Yt as classificationTitleMaskSchema, Z as bTermSchema, Zt as UnfinishedJourneyError, _ as semanticFindingSchema, _t as hideConfirmSchema, a as reviewChunkSchema, an as observeSource, at as journeyExceptionSchema, b as validateBReview, bt as journeyConfigurationSchema, c as textDigest, cn as inventorySchema, cr as scalarBefore, ct as journeyPreferenceScopeSchema, dt as nativeJourneySchema, en as familyNeedsReview, et as bIdSchema, f as reviewAlignmentAuditSchema, fn as nativeSourceIdentitySchema, ft as journeyGuidanceSchema, g as validateReviewAlignment, h as reviewFindingsDigest, ht as journeyDescribeSchema, i as reviewBatchSchema, in as sourceKey, ir as createEntityMatcher, it as journeyDigestSchema, jt as reviewTermsInputSchema, kn as staticOptions, l as validateReview, lr as defaultDetectionLimits, lt as journeyProjectTypeSchema, m as reviewAlignmentSchema, mt as delegatedDecisionSchema, n as compileBFindings, nn as reviewFamilies, nt as journeyAccessSchema, o as reviewDigest, on as sourceSnapshotId, ot as journeyIdSchema, p as reviewAlignmentInputSchema, pt as journeyInstructionInputSchema, q as bRepresentationSchema, r as reviewBatchChunks, rn as sourceGraph, rt as journeyChoiceSchema, s as reviewSubmitSchema, sn as fileIdentitySchema, sr as scalarAfter, st as journeyKindSchema, tn as familySelected, tr as staticCategories, tt as bMethod, u as findingReferenceKey, un as sourcePartSchema, ut as journeyWorkTypeSchema, vt as hidePlanInputSchema, w as bLiteralAdmitted, x as createBAnalysisUnits, xt as cardAnswerActionSchema, y as validateBClassification, yt as hidePlanResourceSchema, z as bAnchorKey } from "./locate-CNU4z9G1.mjs";
 import { z } from "zod";
 import { createHash, createHmac, createSecretKey, randomUUID } from "node:crypto";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
@@ -1591,8 +1591,19 @@ const sendItemSchema = z.object({
 	/** Write-ahead upload intent; completion probes recover an unacknowledged blob PUT. */
 	sessionUpload: z.object({
 		key: journeyDigestSchema,
-		sha256: journeyDigestSchema
+		sha256: journeyDigestSchema,
+		/** Byte-started transport/server failures charged to this Send. */
+		attempt: count$13.optional(),
+		/** Transient failures used only to schedule capped zero-byte retries. */
+		retryCount: count$13.optional(),
+		bytesAttempted: count$13.optional(),
+		bytesAcknowledged: count$13.optional(),
+		contentLength: count$13.optional(),
+		bytesSent: count$13.optional(),
+		nextAttemptAt: z.iso.datetime().optional()
 	}).strict().nullable().optional(),
+	/** Local key-rule marker; current membership replays need no artifact migration inspection. */
+	sessionMembershipKeyVersion: z.literal(2).optional(),
 	/** Exact write-ahead membership request; never rebase it after an uncertain PUT. */
 	sessionMembership: z.object({
 		workId: journeyIdSchema,
@@ -1635,6 +1646,24 @@ const sendItemSchema = z.object({
 	error: z.string().nullable()
 }).strict();
 const journeySendSchema = z.object({
+	/** Safe identity of conflicting session and Works. */
+	contentConflict: z.object({
+		workIds: z.array(journeyIdSchema).min(1),
+		sessionKey: journeyDigestSchema
+	}).strict().optional(),
+	/** The Send click authorization before artifact-bound confirmation. */
+	request: z.object({
+		requestedAt: z.iso.datetime(),
+		hostId: journeyIdSchema,
+		subject: z.string().nullable(),
+		source: z.enum(["conversation", "panel"]),
+		scopeDigest: journeyDigestSchema,
+		included: z.array(z.object({
+			workId: journeyIdSchema,
+			access: z.string()
+		}).strict()),
+		omittedWorkIds: z.array(journeyIdSchema)
+	}).strict().optional(),
 	/** Passport advertised parallel-completes when this Send was confirmed (ADR 0235). */
 	parallelCompletes: z.literal(true).optional(),
 	id: journeyIdSchema,
@@ -1644,6 +1673,7 @@ const journeySendSchema = z.object({
 	subject: z.string().nullable(),
 	confirmedAt: z.iso.datetime().nullable(),
 	status: z.enum([
+		"awaiting-packaging",
 		"prepared",
 		"sign-in",
 		"review",
@@ -2122,6 +2152,16 @@ function assertJourneyPrivacyReady(state, packaging = false) {
 function assertCardsAllowed(state) {
 	if (!state.consent || state.scope.status !== "confirmed") throw new ApplicationError("SCOPE_NOT_READY");
 }
+const identityValue = (value) => value.normalize("NFC").trim().toLowerCase();
+/**
+* ADR 0251: the person's own values, journey-wide: every active own-identity term and every
+* own-identity value rule, compared by NFC, trimmed and lowercased. A people value in this set
+* belongs with the person's own identity. Card settlement (`ownIdentityValues` in the Skill's
+* journey-card-values.mjs) mirrors this rule on the agent view; a parity test pins both.
+*/
+function ownIdentityValues(state) {
+	return new Set([...activePrivacyTerms(state), ...state.valueOverrides ?? []].filter((term) => term.type === "own-identity").map((term) => identityValue(term.value)));
+}
 /**
 * D3: a batch covers only Pending values no card covers yet. Values added to an existing card
 * take its answer at once when the person already answered it.
@@ -2134,17 +2174,28 @@ function appendDecisionCards(state, input) {
 	const extend = input.extend ?? [];
 	const covered = [...input.cards.flatMap((card) => card.termKeys), ...extend.flatMap((item) => item.termKeys)];
 	if (!covered.length || state.privacy.cards.length + input.cards.length > 20 || new Set(input.cards.map((card) => card.id)).size !== input.cards.length || input.cards.some((card) => existing.has(card.id)) || new Set(extend.map((item) => item.cardId)).size !== extend.length || extend.some((item) => !existing.has(item.cardId)) || new Set(covered).size !== covered.length || covered.some((key) => !open.has(key))) throw new ApplicationError("INVALID_SELECTION");
+	const terms = new Map(state.privacy.terms.map((term) => [privacyTermKey(term), term]));
+	const ownValues = ownIdentityValues(state);
+	for (const extension of extend) {
+		const ownCard = !!state.privacy.cards.find((item) => item.id === extension.cardId)?.termKeys.some((key) => terms.get(key)?.type === "own-identity");
+		if (extension.termKeys.some((key) => {
+			const term = terms.get(key);
+			return term?.type === "own-identity" ? !ownCard : term?.type === "people" && ownCard && !ownValues.has(identityValue(term.value));
+		})) throw new ApplicationError("INVALID_SELECTION");
+	}
 	const additions = new Map(extend.map((item) => [item.cardId, item.termKeys]));
+	const inherited = new Map(extend.flatMap((item) => item.termKeys.map((key) => [key, item.cardId])));
 	return applyCardAnswers({
 		...retirePrivacyArtifacts(state),
 		privacy: {
 			...state.privacy,
 			cards: [...state.privacy.cards.map((card) => {
 				const added = additions.get(card.id);
-				return added ? {
+				if (!added) return card;
+				return {
 					...card,
 					termKeys: [...card.termKeys, ...added]
-				} : card;
+				};
 			}), ...input.cards.map((card) => ({
 				...card,
 				answer: null
@@ -2152,7 +2203,7 @@ function appendDecisionCards(state, input) {
 			confirmedAnswersRevision: input.cards.length ? null : state.privacy.confirmedAnswersRevision,
 			packageApproval: null
 		}
-	});
+	}, inherited);
 }
 function publishDecisionCards(state, input) {
 	if (input.mode === "append") return appendDecisionCards(state, input);
@@ -2249,7 +2300,7 @@ function normalizeValues(state, input) {
 		const disposition = forcedHidden ? "hidden" : override ? override.choice === "hide" ? "hidden" : "keep" : ownKeep ? "keep" : hideCard || same.some((term) => term.disposition === "hidden") ? "hidden" : "keep";
 		if (new Set(same.map((term) => term.disposition)).size > 1 || forcedHidden || override || same.some((term) => term.disposition !== disposition)) for (const term of same) normalized.set(privacyTermKey(term), {
 			disposition,
-			reason: disposition === "hidden" && term.disposition !== "hidden" ? hideCard && !same.some((item) => item.disposition === "hidden") ? "A Hide card answer covering this value takes precedence over Keep." : "A Hidden judgment for this NFC keyword takes precedence across term types." : ownKeep && term.disposition !== "keep" ? OWN_PROJECT_KEEP_REASON : term.reason
+			reason: override && !forcedHidden ? `Your value rule takes precedence: ${override.choice === "hide" ? "Hide" : "Keep"}.` : disposition === "hidden" && term.disposition !== "hidden" ? hideCard && !same.some((item) => item.disposition === "hidden") ? "A Hide card answer covering this value takes precedence over Keep." : "A Hidden judgment for this NFC keyword takes precedence across term types." : ownKeep && term.disposition !== "keep" ? OWN_PROJECT_KEEP_REASON : term.reason
 		});
 	}
 	return input.map((term) => {
@@ -2264,21 +2315,22 @@ function normalizeValues(state, input) {
 * The CLI applies card answers itself (D3): Hide makes every covered value Hidden and Keep keeps
 * it, an unticked value takes the other option, then one value gets one outcome.
 */
-function applyCardAnswers(state) {
+function applyCardAnswers(state, inherited) {
 	if (!state.privacy.cards.some((card) => card.answer)) return state;
 	const hide = answeredKeys(state, "hide");
 	const keep = answeredKeys(state, "keep");
 	const terms = state.privacy.terms.map((term) => {
 		const key = privacyTermKey(term);
+		const cardId = inherited?.get(key);
 		if (hide.has(key) && term.disposition !== "hidden") return {
 			...term,
 			disposition: "hidden",
-			reason: "Hidden by your decision card answer."
+			reason: cardId ? `Inherited from decision card ${cardId}: Hide.` : "Hidden by your decision card answer."
 		};
 		if (keep.has(key) && !hide.has(key) && term.disposition !== "keep") return {
 			...term,
 			disposition: "keep",
-			reason: "Kept by your decision card answer."
+			reason: cardId ? `Inherited from decision card ${cardId}: Keep.` : "Kept by your decision card answer."
 		};
 		return term;
 	});
@@ -6926,12 +6978,21 @@ const sendChoiceSchema = sendActionSchema.extend({
 		scopeVersion: version$1
 	}).strict()])
 }).strict();
+/** Explicit human Send authorization, recorded before any output exists. */
+const sendRequestSchema = sendPrepareSchema.extend({
+	included: z.array(z.object({
+		workId: journeyIdSchema,
+		access: z.string()
+	}).strict()).min(1),
+	omittedWorkIds: z.array(journeyIdSchema)
+}).strict();
 //#endregion
 //#region packages/application/src/journey/send/service.ts
 /** Public snapshots omit local source candidates and private scoped exception values. */
 function safeJourneySender(sender, now) {
 	const safe = (result) => ({
 		...withoutSnapshot(result),
+		...sender.scopeValid ? { scopeValid: sender.scopeValid(result) } : {},
 		journey: journeyView(result.journey, now()),
 		send: result.send && {
 			...result.send,
@@ -6953,6 +7014,9 @@ function safeJourneySender(sender, now) {
 			});
 			return result ? safe(result) : null;
 		},
+		async request(input, source = "conversation") {
+			return safe(await sender.request(input, source));
+		},
 		async prepare(input, signal = new AbortController().signal) {
 			return safe(await sender.prepare(input, signal));
 		},
@@ -12507,8 +12571,11 @@ function semanticGroupKey(kind, group, condition) {
 }
 //#endregion
 //#region packages/application/src/journey/configuration.ts
-/** Null deliberately selects the initial configuration frozen in the source plan. */
-async function activeJourneyTerms(storage, state) {
+/**
+* Null deliberately selects the initial configuration frozen in the source plan. A caller that
+* already holds that immutable plan passes it; the pending-Hide fence still applies.
+*/
+async function activeJourneyTerms(storage, state, loadedPlan) {
 	if (state.pendingHideId) throw new ApplicationError("SCOPE_NOT_READY");
 	if (state.configurationId) {
 		const configuration = (await storage.resources({
@@ -12519,7 +12586,7 @@ async function activeJourneyTerms(storage, state) {
 		if (configuration?.kind !== "configuration") throw new ApplicationError("CORRUPTED_STATE");
 		return configuration.sensitiveTerms;
 	}
-	const plan = (await storage.resources({
+	const plan = loadedPlan ?? (await storage.resources({
 		journeyId: state.journeyId,
 		kind: "plan"
 	}))[0];
@@ -12679,6 +12746,56 @@ function reviseGroupMembership(state, action, members, preferenceScope) {
 	};
 }
 //#endregion
+//#region packages/application/src/journey/placement/evidence.ts
+/** The denominator includes unresolved observations; missing evidence cannot increase confidence. */
+function dominant(value, signal) {
+	if (!Number.isSafeInteger(value.total) || value.total < 0) throw new ApplicationError("INVALID_ARGUMENTS");
+	const ids = /* @__PURE__ */ new Set();
+	let accounted = 0;
+	for (const item of value.repositories) {
+		if (!item.id || ids.has(item.id) || !Number.isSafeInteger(item.count) || item.count <= 0) throw new ApplicationError("INVALID_ARGUMENTS");
+		ids.add(item.id);
+		accounted += item.count;
+	}
+	if (accounted > value.total) throw new ApplicationError("INVALID_ARGUMENTS");
+	if (!value.complete) return null;
+	const sorted = value.repositories.toSorted((a, b) => b.count - a.count || a.id.localeCompare(b.id));
+	const first = sorted[0], second = sorted[1];
+	if (!first || !value.total || first.count === second?.count) return null;
+	const share = first.count / value.total;
+	if (share < .3) return null;
+	return {
+		repositoryId: first.id,
+		signal,
+		confidence: share >= .6 ? "high" : "medium",
+		matched: first.count,
+		total: value.total,
+		otherRepositoryIds: sorted.slice(1).map((item) => item.id)
+	};
+}
+/** Ray section 3: stop at the first deciding signal, then leave semantic fallback to the agent. */
+function chooseCheapPlacement(signals) {
+	const paths = dominant(signals.paths, "paths");
+	if (paths) return paths;
+	const commands = dominant(signals.commands, "cwd");
+	if (commands) return commands;
+	for (const signal of ["git", "name"]) {
+		const candidates = [...new Set(signal === "git" ? signals.git : signals.names)];
+		if (candidates.length !== 1) continue;
+		const repositoryId = candidates[0];
+		if (!repositoryId) throw new ApplicationError("INVALID_ARGUMENTS");
+		return {
+			repositoryId,
+			signal: signal === "git" ? "git" : "name",
+			confidence: "high",
+			matched: 1,
+			total: 1,
+			otherRepositoryIds: []
+		};
+	}
+	return null;
+}
+//#endregion
 //#region packages/application/src/journey/b/reconstruct.ts
 function reconstructBFields(inputs) {
 	const units = inputs.map(validateBUnit).sort((left, right) => left.ordinal - right.ordinal);
@@ -13295,4 +13412,4 @@ function equivalenceDuplicates(batch) {
 	return bindings.sort();
 }
 //#endregion
-export { settingsQuerySchema as $, mergeBRepair as $n, journeyRenderSchema as $r, journeyResourceSchema as $t, deviceProfileScopeSchema as A, bContainment as An, staticSessionResourceSchema as Ar, validateAttemptAppend as At, validateInspectionBatch as B, journeyConfirmedHides as Bn, hasCompleteWorkDescription as Br, newJourneyWork as Bt, rebindReviewSubmit as C, renderedHideValue as Cn, privacyDecisionDigest as Cr, sendStartSchema as Ct, createAccount as D, hideKeyId as Dn, hasCurrentStaticReview as Dr, metadataProcessingVersion as Dt, staticallyHiddenFindings as E, addHideIndexTokens as En, nativeRespondSchema as Er, obsoleteJourney as Et, withSourceEvidence as F, confirmedHideGroupIds as Fn, sendArtifactSchema as Fr, applyClassificationProposal as Ft, validateInspectionFence as G, workPrivacyDecisions as Gn, isSkippedWork as Gr, hideFinishSchema as Gt, validateInspectionRequest as H, syncTermGroups as Hn, isIncludedWork as Hr, journeyContextQuerySchema as Ht, agentSetupKey as I, confirmedHideKey as In, sendReceiptSchema as Ir, classificationCommitSchema as It, validateInspectionQuery as J, reviewCandidateResourceSchema as Jn, mergePrivacyTerms as Jr, journeySearchSaveSchema as Jt, validateInspectionHead as K, workCorrectionBinding as Kn, selectedWorks as Kr, hidePublishSchema as Kt, createApplication as L, confirmedHideKinds as Ln, sendReplaceResultSchema as Lr, classificationPartition as Lt, readAccountAvatarUrl as M, bMaskedHits as Mn, agentSourceSchema as Mr, applyClassification as Mt, storedCredentialSchema as N, bTermMatcher as Nn, agentSourcesSchema as Nr, journeyBatchReadSchema as Nt, accountProfileSchema as O, maximumHideIndexTokens as On, staticReviewDigest as Or, nativeAdapterVersions as Ot, sourceIdentityEvidence as P, bWordBounded as Pn, journeySendSchema as Pr, journeyReviewStorageQuerySchema as Pt, settingsBatchSchema as Q, bReviewDigest as Qn, journeyRenderInputSchema as Qr, journeyResourceQuerySchema as Qt, inspectionCancelSchema as R, confirmedHideTerms as Rn, sendResolutionSchema as Rr, classificationWorks as Rt, rebindReviewOverlay as S, readConfirmedHideChange as Sn, assertJourneyPrivacyReady as Sr, sendPrepareSchema as St, guardedFindingText as T, termHideAdditions as Tn, nativeGetSchema as Tr, currentJourneyAdapters as Tt, inspectionQuerySchema as U, retireWorkDescription as Un, isReadingComplete as Ur, journeyContextSchema as Ut, validateInspectionBatches as V, maskedHitsStale as Vn, isClassifying as Vr, reviewCompileSchema as Vt, validateInspectionClaim as W, workDecisionDigest as Wn, isSelectedWork as Wr, hideBeginSchema as Wt, validateDetectionSummary as X, reviewRepairResourceSchema as Xn, journeyFindingsSchema as Xr, journeyPolicyRespondSchema as Xt, validateInspectionContribution as Y, reviewRepairInputSchema as Yn, journeyFindingImpactSchema as Yr, searchScopeDigest as Yt, inspectionInputs as Z, reviewTransportBytes as Zn, journeyPreviewSchema as Zr, projectPreparationProgress as Zt, projectJourneyInventory as _, journeyCommitResultSchema as _n, preparationSettlementSchema as _r, maximumTermsFileBytes as _t, bCrossSegmentReviewSchema as a, producerVersion as ai, reviewAttemptsResultSchema as an, scanGitSeedsId as ar, maximumAgentSetupSessions as at, bReviewScope as b, confirmedHideAdditions as bn, journeyClassificationSessionsSchema as br, sendActionSchema as bt, reconstructBFields as c, recommendParallelism as ci, sessionReconciliationResourceSchema as cn, scanExclusionResourceSchema as cr, validateFailureLocation as ct, selectedValueMembers as d, defaultScopedSettings as di, sessionReviewInputSchema as dn, journeyInventoryQuerySchema as dr, manualUploadChoiceSchema as dt, commandSchema as ei, journeyIsolateSchema as en, planBRepair as er, readWorkspaceOutcomes as et, splitSelectorValues as f, freezeConfiguration as fi, sessionReviewQuerySchema as fn, journeyInventoryReadSchema as fr, manualUploadPrepareSchema as ft, changeJourney as g, sessionUsefulnessResourceSchema as gn, preparationBeginSchema as gr, emptyTermsRevision as gt, semanticGroupKey as h, sessionUsefulnessInputSchema as hn, emptyPreparationFacts as hr, candidateSortAvailable as ht, validateBCrossSegmentReview as i, gitMetadataBudgetBytes as ii, reviewAttemptsQuerySchema as in, scanSessionResourceSchema as ir, defaultAgentSetupInclusion as it, profileUrlMatchesIdentity as j, bExceptionRanges as jn, agentSourcePathSegment as jr, journeyGuidance as jt, deviceAuthorizationSchema as k, packHideIndex as kn, staticSessionId as kr, attemptBudgetCodePoints as kt, reviseGroupMembership as l, approvedTreatmentSchema as li, sessionRereadInputSchema as ln, validateScanExclusion as lr, manualUploadActionSchema as lt, hideScopeDigest as m, staticCatalogRef as mi, sessionReviewStatusSchema as mn, journeyPreparationProgressSchema as mr, manualUploadStartSchema as mt, scanBatchEquivalenceDigest as n, selectionBatchSchema as ni, sortingApplySchema as nn, scanCanonicalResourceSchema as nr, appendSensitiveTerms as nt, bRereadDigest as o, stateSchema as oi, sessionReconcileInputSchema as on, scanGitSeedsResource as or, artifactFailureDetailSchema as ot, activeJourneyTerms as p, selectFrozenConfiguration as pi, sessionReviewResourceSchema as pn, journeyInventorySchema as pr, manualUploadSchema as pt, validateInspectionInputs as q, reviewCandidateInputSchema as qn, withReadingProgress as qr, journeySearchResultSchema as qt, locateTermEvidence as r, selectionSchema as ri, reviewAttemptResourceSchema as rn, scanPreparationDigest as rr, classifyAgentSetup as rt, reconcileBSession as s, sourceChangePolicy as si, sessionReconcileResultSchema as sn, verifiedScanGitSeeds as sr, resolveFailureLocation as st, scanBatchContextDigest as t, packageCommandSchema as ti, journeyPlaceSchema as tn, scanAliasResourceSchema as tr, reviewInventory as tt, resolveGroupSplit as u, effectiveTreatmentSchema as ui, sessionRereadResourceSchema as un, resolveSourceSelection as ur, manualUploadBindingSchema as ut, preparationScope as v, journeyCommitSchema as vn, preparationStartSchema as vr, normalizeSensitiveTerms as vt, reviewBatchReuse as w, settleConfirmedHides as wn, nativeEventsSchema as wr, settleCorrections as wt, rebindReviewAlignment as x, confirmedHideDeltaSchema as xn, applyCardAnswers as xr, sendChoiceSchema as xt, isGenericPublicTerm as y, journeyEventSchema as yn, validatePreparationFacts as yr, replaceSensitiveTermsSchema as yt, inspectionStartSchema as z, dictionaryHides as zn, sendSettingsSchema as zr, retireScanGeneration as zt };
+export { settingsBatchSchema as $, reviewTransportBytes as $n, journeyPreviewSchema as $r, projectPreparationProgress as $t, deviceAuthorizationSchema as A, maximumHideIndexTokens as An, staticReviewDigest as Ar, nativeAdapterVersions as At, inspectionStartSchema as B, confirmedHideTerms as Bn, sendResolutionSchema as Br, classificationWorks as Bt, rebindReviewOverlay as C, confirmedHideDeltaSchema as Cn, applyCardAnswers as Cr, sendPrepareSchema as Ct, staticallyHiddenFindings as D, termHideAdditions as Dn, nativeGetSchema as Dr, currentJourneyAdapters as Dt, guardedFindingText as E, settleConfirmedHides as En, nativeEventsSchema as Er, settleCorrections as Et, sourceIdentityEvidence as F, bTermMatcher as Fn, agentSourcesSchema as Fr, journeyBatchReadSchema as Ft, validateInspectionClaim as G, retireWorkDescription as Gn, isReadingComplete as Gr, journeyContextSchema as Gt, validateInspectionBatches as H, journeyConfirmedHides as Hn, hasCompleteWorkDescription as Hr, newJourneyWork as Ht, withSourceEvidence as I, bWordBounded as In, journeySendSchema as Ir, journeyReviewStorageQuerySchema as It, validateInspectionInputs as J, workCorrectionBinding as Jn, selectedWorks as Jr, hidePublishSchema as Jt, validateInspectionFence as K, workDecisionDigest as Kn, isSelectedWork as Kr, hideBeginSchema as Kt, agentSetupKey as L, confirmedHideGroupIds as Ln, sendArtifactSchema as Lr, applyClassificationProposal as Lt, profileUrlMatchesIdentity as M, bContainment as Mn, staticSessionResourceSchema as Mr, validateAttemptAppend as Mt, readAccountAvatarUrl as N, bExceptionRanges as Nn, agentSourcePathSegment as Nr, journeyGuidance as Nt, createAccount as O, addHideIndexTokens as On, nativeRespondSchema as Or, obsoleteJourney as Ot, storedCredentialSchema as P, bMaskedHits as Pn, agentSourceSchema as Pr, applyClassification as Pt, inspectionInputs as Q, reviewRepairResourceSchema as Qn, journeyFindingsSchema as Qr, journeyPolicyRespondSchema as Qt, createApplication as R, confirmedHideKey as Rn, sendReceiptSchema as Rr, classificationCommitSchema as Rt, rebindReviewAlignment as S, confirmedHideAdditions as Sn, journeyClassificationSessionsSchema as Sr, sendChoiceSchema as St, reviewBatchReuse as T, renderedHideValue as Tn, privacyDecisionDigest as Tr, sendStartSchema as Tt, validateInspectionRequest as U, maskedHitsStale as Un, isClassifying as Ur, reviewCompileSchema as Ut, validateInspectionBatch as V, dictionaryHides as Vn, sendSettingsSchema as Vr, retireScanGeneration as Vt, inspectionQuerySchema as W, syncTermGroups as Wn, isIncludedWork as Wr, journeyContextQuerySchema as Wt, validateInspectionContribution as X, reviewCandidateResourceSchema as Xn, mergePrivacyTerms as Xr, journeySearchSaveSchema as Xt, validateInspectionQuery as Y, reviewCandidateInputSchema as Yn, withReadingProgress as Yr, journeySearchResultSchema as Yt, validateDetectionSummary as Z, reviewRepairInputSchema as Zn, journeyFindingImpactSchema as Zr, searchScopeDigest as Zt, changeJourney as _, sessionUsefulnessInputSchema as _n, emptyPreparationFacts as _r, emptyTermsRevision as _t, bCrossSegmentReviewSchema as a, selectionSchema as ai, reviewAttemptResourceSchema as an, scanPreparationDigest as ar, defaultAgentSetupInclusion as at, isGenericPublicTerm as b, journeyCommitSchema as bn, preparationStartSchema as br, replaceSensitiveTermsSchema as bt, reconstructBFields as c, stateSchema as ci, sessionReconcileInputSchema as cn, scanGitSeedsResource as cr, resolveFailureLocation as ct, resolveGroupSplit as d, approvedTreatmentSchema as di, sessionRereadInputSchema as dn, validateScanExclusion as dr, manualUploadBindingSchema as dt, journeyRenderInputSchema as ei, journeyResourceQuerySchema as en, bReviewDigest as er, settingsQuerySchema as et, selectedValueMembers as f, effectiveTreatmentSchema as fi, sessionRereadResourceSchema as fn, resolveSourceSelection as fr, manualUploadChoiceSchema as ft, semanticGroupKey as g, staticCatalogRef as gi, sessionReviewStatusSchema as gn, journeyPreparationProgressSchema as gr, candidateSortAvailable as gt, hideScopeDigest as h, selectFrozenConfiguration as hi, sessionReviewResourceSchema as hn, journeyInventorySchema as hr, manualUploadStartSchema as ht, validateBCrossSegmentReview as i, selectionBatchSchema as ii, sortingApplySchema as in, scanCanonicalResourceSchema as ir, classifyAgentSetup as it, deviceProfileScopeSchema as j, packHideIndex as jn, staticSessionId as jr, attemptBudgetCodePoints as jt, accountProfileSchema as k, hideKeyId as kn, hasCurrentStaticReview as kr, metadataProcessingVersion as kt, chooseCheapPlacement as l, sourceChangePolicy as li, sessionReconcileResultSchema as ln, verifiedScanGitSeeds as lr, validateFailureLocation as lt, activeJourneyTerms as m, freezeConfiguration as mi, sessionReviewQuerySchema as mn, journeyInventoryReadSchema as mr, manualUploadSchema as mt, scanBatchEquivalenceDigest as n, commandSchema as ni, journeyIsolateSchema as nn, planBRepair as nr, reviewInventory as nt, bRereadDigest as o, gitMetadataBudgetBytes as oi, reviewAttemptsQuerySchema as on, scanSessionResourceSchema as or, maximumAgentSetupSessions as ot, splitSelectorValues as p, defaultScopedSettings as pi, sessionReviewInputSchema as pn, journeyInventoryQuerySchema as pr, manualUploadPrepareSchema as pt, validateInspectionHead as q, workPrivacyDecisions as qn, isSkippedWork as qr, hideFinishSchema as qt, locateTermEvidence as r, packageCommandSchema as ri, journeyPlaceSchema as rn, scanAliasResourceSchema as rr, appendSensitiveTerms as rt, reconcileBSession as s, producerVersion as si, reviewAttemptsResultSchema as sn, scanGitSeedsId as sr, artifactFailureDetailSchema as st, scanBatchContextDigest as t, journeyRenderSchema as ti, journeyResourceSchema as tn, mergeBRepair as tr, readWorkspaceOutcomes as tt, reviseGroupMembership as u, recommendParallelism as ui, sessionReconciliationResourceSchema as un, scanExclusionResourceSchema as ur, manualUploadActionSchema as ut, projectJourneyInventory as v, sessionUsefulnessResourceSchema as vn, preparationBeginSchema as vr, maximumTermsFileBytes as vt, rebindReviewSubmit as w, readConfirmedHideChange as wn, assertJourneyPrivacyReady as wr, sendRequestSchema as wt, bReviewScope as x, journeyEventSchema as xn, validatePreparationFacts as xr, sendActionSchema as xt, preparationScope as y, journeyCommitResultSchema as yn, preparationSettlementSchema as yr, normalizeSensitiveTerms as yt, inspectionCancelSchema as z, confirmedHideKinds as zn, sendReplaceResultSchema as zr, classificationPartition as zt };

package/dist/store-database-worker.mjs

@@ -1,4 +1,4 @@
-import { i as createExecutor, t as assertStoreHeap } from "./heap-BR8WjR25.mjs";
+import { i as createExecutor, t as assertStoreHeap } from "./heap-DQbsSUrB.mjs";
 import { parentPort } from "node:worker_threads";
 //#region packages/local-host/src/store/worker/entry.ts
 if (!parentPort) throw new Error("STORE_WORKER_REQUIRED");